activeclaw 2026.4.5 → 2026.4.6

package/dist/{run-log-BqSHMnAd.js → run-log-D3XR2BLm.js}

@@ -1,6 +1,6 @@
-import { Oo as parseByteSize } from "./model-selection-CftqhKNS.js";
+import { Oo as parseByteSize } from "./model-selection-DU-DNNW7.js";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 //#region src/cron/run-log.ts
 function assertSafeCronRunLogJobId(jobId) {
 	const trimmed = jobId.trim();
@@ -19,7 +19,7 @@ function resolveCronRunLogPath(params) {
 }
 const writesByPath = /* @__PURE__ */ new Map();
 async function setSecureFileMode(filePath) {
-	await fs.chmod(filePath, 384).catch(() => void 0);
+	await fsPromises.chmod(filePath, 384).catch(() => void 0);
 }
 const DEFAULT_CRON_RUN_LOG_MAX_BYTES = 2e6;
 const DEFAULT_CRON_RUN_LOG_KEEP_LINES = 2e3;
@@ -43,30 +43,30 @@ async function drainPendingWrite(filePath) {
 	if (pending) await pending.catch(() => void 0);
 }
 async function pruneIfNeeded(filePath, opts) {
-	const stat = await fs.stat(filePath).catch(() => null);
+	const stat = await fsPromises.stat(filePath).catch(() => null);
 	if (!stat || stat.size <= opts.maxBytes) return;
-	const lines = (await fs.readFile(filePath, "utf-8").catch(() => "")).split("\n").map((l) => l.trim()).filter(Boolean);
+	const lines = (await fsPromises.readFile(filePath, "utf-8").catch(() => "")).split("\n").map((l) => l.trim()).filter(Boolean);
 	const kept = lines.slice(Math.max(0, lines.length - opts.keepLines));
 	const { randomBytes } = await import("node:crypto");
 	const tmp = `${filePath}.${process.pid}.${randomBytes(8).toString("hex")}.tmp`;
-	await fs.writeFile(tmp, `${kept.join("\n")}\n`, {
+	await fsPromises.writeFile(tmp, `${kept.join("\n")}\n`, {
 		encoding: "utf-8",
 		mode: 384
 	});
 	await setSecureFileMode(tmp);
-	await fs.rename(tmp, filePath);
+	await fsPromises.rename(tmp, filePath);
 	await setSecureFileMode(filePath);
 }
 async function appendCronRunLog(filePath, entry, opts) {
 	const resolved = path.resolve(filePath);
 	const next = (writesByPath.get(resolved) ?? Promise.resolve()).catch(() => void 0).then(async () => {
 		const runDir = path.dirname(resolved);
-		await fs.mkdir(runDir, {
+		await fsPromises.mkdir(runDir, {
 			recursive: true,
 			mode: 448
 		});
-		await fs.chmod(runDir, 448).catch(() => void 0);
-		await fs.appendFile(resolved, `${JSON.stringify(entry)}\n`, {
+		await fsPromises.chmod(runDir, 448).catch(() => void 0);
+		await fsPromises.appendFile(resolved, `${JSON.stringify(entry)}\n`, {
 			encoding: "utf-8",
 			mode: 384
 		});
@@ -175,7 +175,7 @@ function filterRunLogEntries(entries, opts) {
 async function readCronRunLogEntriesPage(filePath, opts) {
 	await drainPendingWrite(filePath);
 	const limit = Math.max(1, Math.min(200, Math.floor(opts?.limit ?? 50)));
-	const raw = await fs.readFile(path.resolve(filePath), "utf-8").catch(() => "");
+	const raw = await fsPromises.readFile(path.resolve(filePath), "utf-8").catch(() => "");
 	const statuses = normalizeRunStatuses(opts);
 	const deliveryStatuses = normalizeDeliveryStatuses(opts);
 	const query = opts?.query?.trim().toLowerCase() ?? "";
@@ -211,7 +211,7 @@ async function readCronRunLogEntriesPageAll(opts) {
 	const query = opts.query?.trim().toLowerCase() ?? "";
 	const sortDir = opts.sortDir === "asc" ? "asc" : "desc";
 	const runsDir = path.resolve(path.dirname(path.resolve(opts.storePath)), "runs");
-	const jsonlFiles = (await fs.readdir(runsDir, { withFileTypes: true }).catch(() => [])).filter((entry) => entry.isFile() && entry.name.endsWith(".jsonl")).map((entry) => path.join(runsDir, entry.name));
+	const jsonlFiles = (await fsPromises.readdir(runsDir, { withFileTypes: true }).catch(() => [])).filter((entry) => entry.isFile() && entry.name.endsWith(".jsonl")).map((entry) => path.join(runsDir, entry.name));
 	if (jsonlFiles.length === 0) return {
 		entries: [],
 		total: 0,
@@ -222,7 +222,7 @@ async function readCronRunLogEntriesPageAll(opts) {
 	};
 	await Promise.all(jsonlFiles.map((f) => drainPendingWrite(f)));
 	const filtered = filterRunLogEntries((await Promise.all(jsonlFiles.map(async (filePath) => {
-		return parseAllRunLogEntries(await fs.readFile(filePath, "utf-8").catch(() => ""));
+		return parseAllRunLogEntries(await fsPromises.readFile(filePath, "utf-8").catch(() => ""));
 	}))).flat(), {
 		statuses,
 		deliveryStatuses,

package/dist/{run-log-CjYAiVe8.js → run-log-Q89iJgvA.js}

@@ -1,4 +1,4 @@
-import { ha as parseByteSize } from "./auth-profiles-B5hyImOM.js";
+import { ha as parseByteSize } from "./auth-profiles-D9Wn945p.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 //#region src/cron/run-log.ts

package/dist/{run-main-qumIkFEs.js → run-main-CbzvI1iB.js}

@@ -2,7 +2,7 @@ import { G as getFlagValue, J as getVerboseFlag, K as getPositiveIntFlagValue, U
 import "./paths-BfR2LXbA.js";
 import "./boolean-BHdNsbzF.js";
 import { c as parseCliProfileArgs, i as isTruthyEnvValue, o as normalizeEnv, s as applyCliProfileEnv } from "./entry.js";
-import { jo as loadDotEnv } from "./auth-profiles-B5hyImOM.js";
+import { jo as loadDotEnv } from "./auth-profiles-D9Wn945p.js";
 import "./agent-scope-OAwT1oHV.js";
 import "./utils-qah6hFG0.js";
 import "./boundary-file-read-BAjRF13y.js";
@@ -16,68 +16,68 @@ import "./skills-VQO3Anke.js";
 import "./frontmatter-DAfBRAy7.js";
 import "./redact-CxtZhh9L.js";
 import "./path-alias-guards-DHv0a8uY.js";
-import "./compact-qJ63Ml29.js";
+import "./compact-DpN1Nt0S.js";
 import "./plugins-DRDN4jFP.js";
 import "./paths-B-JdyKTL.js";
 import "./chat-envelope-t_PEbhWC.js";
-import "./models-config-B9HFg-NI.js";
-import "./deliver-C1juSywI.js";
+import "./models-config-Cg9vUkxp.js";
+import "./deliver-DvOSE6dK.js";
 import "./delivery-queue-DDn4phct.js";
-import "./diagnostic-BXoxaU4W.js";
-import "./chunk-cNotV828.js";
-import "./fetch-3V1gxxYH.js";
-import "./send-CeA0VP-c.js";
-import "./pi-model-discovery-DmsAxxli.js";
-import "./exec-approvals-allowlist-DnjttVeB.js";
-import "./exec-safe-bin-runtime-policy-CObmLqq8.js";
-import "./model-catalog-C8EYz2dm.js";
+import "./diagnostic-Bbd8nFqt.js";
+import "./chunk-B0PHAL_m.js";
+import "./fetch-hiM4UODI.js";
+import "./send-TlYsQWZw.js";
+import "./pi-model-discovery-DFqVpswz.js";
+import "./exec-approvals-allowlist-Be63T3oT.js";
+import "./exec-safe-bin-runtime-policy-BnTNRx5O.js";
+import "./model-catalog-DlYPcFqP.js";
 import "./local-roots-CY11yrWR.js";
-import { g as installUnhandledRejectionHandler } from "./audio-transcription-runner-CovQeJJ8.js";
+import { g as installUnhandledRejectionHandler } from "./audio-transcription-runner-B8jxT-MB.js";
 import { i as formatUncaughtError } from "./errors-BaSZYLcU.js";
-import "./fetch-guard-DkMZHPzY.js";
-import "./image-xmUgWF9P.js";
-import "./api-key-rotation-cqcPDbSb.js";
+import "./fetch-guard-dTCN4rW8.js";
+import "./image-B4HCDVUj.js";
+import "./api-key-rotation--yH6WXh1.js";
 import "./proxy-fetch-DNrsTLo-.js";
 import "./commands-BWrE-bab.js";
 import "./session-cost-usage-BFC_eRBY.js";
-import "./session-utils-G8TPVqDh.js";
+import "./session-utils-5dTolcMA.js";
 import "./sqlite-Cz3Hl_xa.js";
 import "./fs-safe-DOZviZ8W.js";
-import "./call-5htJiVxi.js";
-import "./tailnet-BII1rF_F.js";
-import "./pi-tools.policy-B8nfuYT3.js";
-import "./pairing-store-4ajjzoih.js";
+import "./call-Ce8vjHmH.js";
+import "./tailnet-Dd530XEB.js";
+import "./pi-tools.policy-D6UiE_gG.js";
+import "./pairing-store-BeeSJLPy.js";
 import "./exec-approvals-BVT7PLEI.js";
 import "./logging-Cc9zHf-m.js";
 import "./fetch-Dp611IaP.js";
-import "./runtime-web-tools-CRJ-iI9c.js";
-import "./runtime-B8hPSCRB.js";
+import "./runtime-web-tools-CWlvqBpH.js";
+import "./runtime-DpfmBWKQ.js";
 import "./stagger-BLMcBL-k.js";
-import "./channel-selection-Dh-j4PE7.js";
-import "./plugin-auto-enable-DKIdWd3o.js";
-import "./writer-CBLUHPFY.js";
-import "./manager-BTf5kl5K.js";
+import "./channel-selection-DMlnEgJc.js";
+import "./plugin-auto-enable-fQ-uJndS.js";
+import "./writer-ChWOWmJt.js";
+import "./manager-DF7UBoKp.js";
 import "./internal-BMd38Zvr.js";
 import "./diagnostics-CQtxkHQh.js";
-import "./search-manager-CjC4g5lJ.js";
+import "./search-manager-Bj4BRNiF.js";
 import "./store-Dinmjfnl.js";
-import "./connection-auth-DoyMyMj7.js";
+import "./connection-auth-Uq6_taV8.js";
 import "./memory-Scyulszq.js";
 import "./links-hlmnhfEU.js";
 import "./cli-utils-CaS04_6b.js";
-import "./command-secret-targets-CpKxsR1T.js";
+import "./command-secret-targets-lNjgc0CR.js";
 import "./help-format-D89JlW3L.js";
 import "./progress-DvzcL_95.js";
-import "./memory-cli-B3Wdf8cX.js";
+import "./memory-cli-BLSGcKsi.js";
 import { t as ensureOpenClawCliOnPath } from "./path-env-BzShNuO6.js";
 import "./prompt-style-BmwLwm5B.js";
 import "./note-CNy1ZzH9.js";
-import "./issue-format-BnnZmmHz.js";
-import { t as ensurePluginRegistryLoaded } from "./plugin-registry-DMXyfhbZ.js";
+import "./issue-format-DbKknWy1.js";
+import { t as ensurePluginRegistryLoaded } from "./plugin-registry-FMZRN3Ae.js";
 import { t as assertSupportedRuntime } from "./runtime-guard-ENMKovXj.js";
-import { t as emitCliBanner } from "./banner-MJMqAYlg.js";
-import "./doctor-config-flow-CACQt_iy.js";
-import { n as ensureConfigReady } from "./config-guard-DKS3Bjiu.js";
+import { t as emitCliBanner } from "./banner-Ctm-KPnO.js";
+import "./doctor-config-flow-BaPH3aqI.js";
+import { n as ensureConfigReady } from "./config-guard-DpwVMnwc.js";
 import process$1 from "node:process";
 import "node:url";
 //#region src/cli/program/routes.ts
@@ -89,7 +89,7 @@ const routeHealth = {
 		const verbose = getVerboseFlag(argv, { includeDebug: true });
 		const timeoutMs = getPositiveIntFlagValue(argv, "--timeout");
 		if (timeoutMs === null) return false;
-		const { healthCommand } = await import("./health-DhuzyE57.js").then((n) => n.i);
+		const { healthCommand } = await import("./health-BPWpRQaJ.js").then((n) => n.i);
 		await healthCommand({
 			json,
 			timeoutMs,
@@ -109,7 +109,7 @@ const routeStatus = {
 		const verbose = getVerboseFlag(argv, { includeDebug: true });
 		const timeoutMs = getPositiveIntFlagValue(argv, "--timeout");
 		if (timeoutMs === null) return false;
-		const { statusCommand } = await import("./status-CLNIJHL1.js").then((n) => n.t);
+		const { statusCommand } = await import("./status-_r2NL6m9.js").then((n) => n.t);
 		await statusCommand({
 			json,
 			deep,
@@ -132,7 +132,7 @@ const routeSessions = {
 		if (store === null) return false;
 		const active = getFlagValue(argv, "--active");
 		if (active === null) return false;
-		const { sessionsCommand } = await import("./sessions-DghMB51-.js").then((n) => n.n);
+		const { sessionsCommand } = await import("./sessions-CNRe8TkE.js").then((n) => n.n);
 		await sessionsCommand({
 			json,
 			store,
@@ -148,7 +148,7 @@ const routeAgentsList = {
 	run: async (argv) => {
 		const json = hasFlag(argv, "--json");
 		const bindings = hasFlag(argv, "--bindings");
-		const { agentsListCommand } = await import("./agents-BxHLH0uE.js").then((n) => n.t);
+		const { agentsListCommand } = await import("./agents-BSbsIbCx.js").then((n) => n.t);
 		await agentsListCommand({
 			json,
 			bindings
@@ -165,7 +165,7 @@ const routeMemoryStatus = {
 		const deep = hasFlag(argv, "--deep");
 		const index = hasFlag(argv, "--index");
 		const verbose = hasFlag(argv, "--verbose");
-		const { runMemoryStatus } = await import("./memory-cli-B3Wdf8cX.js").then((n) => n.t);
+		const { runMemoryStatus } = await import("./memory-cli-BLSGcKsi.js").then((n) => n.t);
 		await runMemoryStatus({
 			agent,
 			json,
@@ -214,7 +214,7 @@ const routes = [
 			const pathArg = positionals[0];
 			if (!pathArg) return false;
 			const json = hasFlag(argv, "--json");
-			const { runConfigGet } = await import("./config-cli-CiLzQLbQ.js");
+			const { runConfigGet } = await import("./config-cli-tykH1hkE.js");
 			await runConfigGet({
 				path: pathArg,
 				json
@@ -229,7 +229,7 @@ const routes = [
 			if (!positionals || positionals.length !== 1) return false;
 			const pathArg = positionals[0];
 			if (!pathArg) return false;
-			const { runConfigUnset } = await import("./config-cli-CiLzQLbQ.js");
+			const { runConfigUnset } = await import("./config-cli-tykH1hkE.js");
 			await runConfigUnset({ path: pathArg });
 			return true;
 		}
@@ -243,7 +243,7 @@ const routes = [
 			const local = hasFlag(argv, "--local");
 			const json = hasFlag(argv, "--json");
 			const plain = hasFlag(argv, "--plain");
-			const { modelsListCommand } = await import("./models-Bol0QzVD.js").then((n) => n.t);
+			const { modelsListCommand } = await import("./models-B2oGZOi7.js").then((n) => n.t);
 			await modelsListCommand({
 				all,
 				local,
@@ -274,7 +274,7 @@ const routes = [
 			const plain = hasFlag(argv, "--plain");
 			const check = hasFlag(argv, "--check");
 			const probe = hasFlag(argv, "--probe");
-			const { modelsStatusCommand } = await import("./models-Bol0QzVD.js").then((n) => n.t);
+			const { modelsStatusCommand } = await import("./models-B2oGZOi7.js").then((n) => n.t);
 			await modelsStatusCommand({
 				json,
 				plain,
@@ -325,7 +325,7 @@ async function tryRouteCli(argv) {
 //#region src/cli/run-main.ts
 async function closeCliMemoryManagers() {
 	try {
-		const { closeAllMemorySearchManagers } = await import("./search-manager-CjC4g5lJ.js").then((n) => n.r);
+		const { closeAllMemorySearchManagers } = await import("./search-manager-Bj4BRNiF.js").then((n) => n.r);
 		await closeAllMemorySearchManagers();
 	} catch {}
 }
@@ -363,7 +363,7 @@ async function runCli(argv = process$1.argv) {
 	try {
 		if (await tryRouteCli(normalizedArgv)) return;
 		enableConsoleCapture();
-		const { buildProgram } = await import("./program-D992fHH9.js");
+		const { buildProgram } = await import("./program-B8-8_sev.js");
 		const program = buildProgram();
 		installUnhandledRejectionHandler();
 		process$1.on("uncaughtException", (error) => {
@@ -376,10 +376,10 @@ async function runCli(argv = process$1.argv) {
 			const { getProgramContext } = await import("./program-context-Dz8VotJ1.js").then((n) => n.n);
 			const ctx = getProgramContext(program);
 			if (ctx) {
-				const { registerCoreCliByName } = await import("./command-registry-B1NKrz1S.js").then((n) => n.t);
+				const { registerCoreCliByName } = await import("./command-registry-dPZvDdl5.js").then((n) => n.t);
 				await registerCoreCliByName(program, ctx, primary, parseArgv);
 			}
-			const { registerSubCliByName } = await import("./register.subclis-iSDvGATC.js").then((n) => n.a);
+			const { registerSubCliByName } = await import("./register.subclis-DF5yhf7D.js").then((n) => n.a);
 			await registerSubCliByName(program, primary);
 		}
 		if (!shouldSkipPluginCommandRegistration({
@@ -387,8 +387,8 @@ async function runCli(argv = process$1.argv) {
 			primary,
 			hasBuiltinPrimary: primary !== null && program.commands.some((command) => command.name() === primary)
 		})) {
-			const { registerPluginCliCommands } = await import("./cli-CX0-e1Do.js");
-			const { loadValidatedConfigForPluginRegistration } = await import("./register.subclis-iSDvGATC.js").then((n) => n.a);
+			const { registerPluginCliCommands } = await import("./cli-BTBoxnnI.js");
+			const { loadValidatedConfigForPluginRegistration } = await import("./register.subclis-DF5yhf7D.js").then((n) => n.a);
 			const config = await loadValidatedConfigForPluginRegistration();
 			if (config) registerPluginCliCommands(program, config);
 		}

package/dist/{runtime-B8hPSCRB.js → runtime-DpfmBWKQ.js}

@@ -1,8 +1,8 @@
-import { Bi as setRuntimeConfigSnapshotRefreshHandler, Bo as clearRuntimeAuthProfileStoreSnapshots, Jo as resolveOpenClawAgentDir, Uo as loadAuthProfileStoreForSecretsRuntime, Wo as replaceRuntimeAuthProfileStoreSnapshots, hi as isNonEmptyString, ki as clearRuntimeConfigSnapshot, pi as resolveSecretRefValues, zi as setRuntimeConfigSnapshot } from "./auth-profiles-B5hyImOM.js";
+import { Bi as setRuntimeConfigSnapshotRefreshHandler, Bo as clearRuntimeAuthProfileStoreSnapshots, Jo as resolveOpenClawAgentDir, Uo as loadAuthProfileStoreForSecretsRuntime, Wo as replaceRuntimeAuthProfileStoreSnapshots, hi as isNonEmptyString, ki as clearRuntimeConfigSnapshot, pi as resolveSecretRefValues, zi as setRuntimeConfigSnapshot } from "./auth-profiles-D9Wn945p.js";
 import { a as resolveAgentDir, r as listAgentIds } from "./agent-scope-OAwT1oHV.js";
 import { h as resolveUserPath } from "./utils-qah6hFG0.js";
 import { d as resolveSecretInputRef } from "./types.secrets-CQ90JO4F.js";
-import { a as applyResolvedAssignments, c as pushWarning, n as collectConfigAssignments, o as createResolverContext, s as pushAssignment, t as resolveRuntimeWebTools, u as collectCommandSecretAssignmentsFromSnapshot } from "./runtime-web-tools-CRJ-iI9c.js";
+import { a as applyResolvedAssignments, c as pushWarning, n as collectConfigAssignments, o as createResolverContext, s as pushAssignment, t as resolveRuntimeWebTools, u as collectCommandSecretAssignmentsFromSnapshot } from "./runtime-web-tools-CWlvqBpH.js";
 //#region src/secrets/runtime-auth-collectors.ts
 function collectApiKeyProfileAssignment(params) {
 	const { explicitRef: keyRef, inlineRef: inlineKeyRef, ref: resolvedKeyRef } = resolveSecretInputRef({

package/dist/{runtime-CCYCyl1P.js → runtime-hakwcpul.js}

@@ -1,8 +1,8 @@
 import { g as resolveUserPath } from "./utils-CGU7Q77u.js";
-import { Da as isNonEmptyString, Qa as setRuntimeConfigSnapshotRefreshHandler, Ta as resolveSecretRefValues, Va as clearRuntimeConfigSnapshot, Za as setRuntimeConfigSnapshot, lc as loadAuthProfileStoreForSecretsRuntime, mc as resolveOpenClawAgentDir, oc as clearRuntimeAuthProfileStoreSnapshots, uc as replaceRuntimeAuthProfileStoreSnapshots } from "./model-selection-CftqhKNS.js";
-import { a as resolveAgentDir, r as listAgentIds } from "./agent-scope-Dv5h0qQE.js";
+import { Da as isNonEmptyString, Qa as setRuntimeConfigSnapshotRefreshHandler, Ta as resolveSecretRefValues, Va as clearRuntimeConfigSnapshot, Za as setRuntimeConfigSnapshot, lc as loadAuthProfileStoreForSecretsRuntime, mc as resolveOpenClawAgentDir, oc as clearRuntimeAuthProfileStoreSnapshots, uc as replaceRuntimeAuthProfileStoreSnapshots } from "./model-selection-DU-DNNW7.js";
+import { a as resolveAgentDir, r as listAgentIds } from "./agent-scope-BrJT9Gf9.js";
 import { d as resolveSecretInputRef } from "./types.secrets-ZqKzSyNC.js";
-import { a as applyResolvedAssignments, c as pushWarning, n as collectConfigAssignments, o as createResolverContext, s as pushAssignment, t as resolveRuntimeWebTools, u as collectCommandSecretAssignmentsFromSnapshot } from "./runtime-web-tools-gpT7ZniL.js";
+import { a as applyResolvedAssignments, c as pushWarning, n as collectConfigAssignments, o as createResolverContext, s as pushAssignment, t as resolveRuntimeWebTools, u as collectCommandSecretAssignmentsFromSnapshot } from "./runtime-web-tools-BZcX_oAn.js";
 //#region src/secrets/runtime-auth-collectors.ts
 function collectApiKeyProfileAssignment(params) {
 	const { explicitRef: keyRef, inlineRef: inlineKeyRef, ref: resolvedKeyRef } = resolveSecretInputRef({

package/dist/{runtime-web-tools-gpT7ZniL.js → runtime-web-tools-BZcX_oAn.js}

@@ -1,6 +1,6 @@
-import { Da as isNonEmptyString, Oa as isRecord$1, So as secretRefKey, Ta as resolveSecretRefValues, ka as parseDotPath, xc as normalizeSecretInput } from "./model-selection-CftqhKNS.js";
+import { Da as isNonEmptyString, Oa as isRecord$1, So as secretRefKey, Ta as resolveSecretRefValues, ka as parseDotPath, xc as normalizeSecretInput } from "./model-selection-DU-DNNW7.js";
 import { d as resolveSecretInputRef, i as coerceSecretRef } from "./types.secrets-ZqKzSyNC.js";
-import { y as createGatewayCredentialPlan } from "./call-CKFLqNkw.js";
+import { y as createGatewayCredentialPlan } from "./call-7be5mSn_.js";
 import { isDeepStrictEqual } from "node:util";
 //#region src/secrets/path-utils.ts
 function isArrayIndexSegment(segment) {

package/dist/{runtime-web-tools-CRJ-iI9c.js → runtime-web-tools-CWlvqBpH.js}

@@ -1,6 +1,6 @@
-import { Cc as normalizeSecretInput, _i as parseDotPath, gi as isRecord$1, hi as isNonEmptyString, pi as resolveSecretRefValues, ua as secretRefKey } from "./auth-profiles-B5hyImOM.js";
+import { Cc as normalizeSecretInput, _i as parseDotPath, gi as isRecord$1, hi as isNonEmptyString, pi as resolveSecretRefValues, ua as secretRefKey } from "./auth-profiles-D9Wn945p.js";
 import { d as resolveSecretInputRef, i as coerceSecretRef } from "./types.secrets-CQ90JO4F.js";
-import { y as createGatewayCredentialPlan } from "./call-5htJiVxi.js";
+import { y as createGatewayCredentialPlan } from "./call-Ce8vjHmH.js";
 import { isDeepStrictEqual } from "node:util";
 //#region src/secrets/path-utils.ts
 function isArrayIndexSegment(segment) {

package/dist/{sandbox-cli-cb2ui3Pc.js → sandbox-cli-BLBFMAgV.js}

@@ -1,7 +1,7 @@
 import { A as theme, O as colorize, k as isRich, p as defaultRuntime } from "./subsystem-BEF5zTJO.js";
 import "./paths-BfR2LXbA.js";
 import "./boolean-BHdNsbzF.js";
-import { Cn as resolveAgentMainSessionKey, Mi as loadConfig, Ot as loadSessionStore, Tn as resolveMainSessionKey, ht as removeSandboxContainer, jr as resolveSandboxToolPolicyForAgent, kr as resolveSandboxConfigForAgent, mt as listSandboxContainers, or as INTERNAL_MESSAGE_CHANNEL } from "./auth-profiles-B5hyImOM.js";
+import { Cn as resolveAgentMainSessionKey, Mi as loadConfig, Ot as loadSessionStore, Tn as resolveMainSessionKey, ht as removeSandboxContainer, jr as resolveSandboxToolPolicyForAgent, kr as resolveSandboxConfigForAgent, mt as listSandboxContainers, or as INTERNAL_MESSAGE_CHANNEL } from "./auth-profiles-D9Wn945p.js";
 import { i as formatCliCommand } from "./scan-paths-1Ht0wvdC.js";
 import { i as resolveAgentConfig } from "./agent-scope-OAwT1oHV.js";
 import { T as parseAgentSessionKey, c as normalizeMainKey, l as resolveAgentIdFromSessionKey, r as buildAgentMainSessionKey, s as normalizeAgentId } from "./session-key-9lbhEIb9.js";

package/dist/{sandbox-cli-BwX10ANz.js → sandbox-cli-CWgKwadY.js}

@@ -1,10 +1,10 @@
 import "./paths-BJV7vkaX.js";
 import { A as theme, O as colorize, k as isRich, p as defaultRuntime } from "./subsystem-Dk5WUhC2.js";
 import "./utils-CGU7Q77u.js";
-import { En as removeSandboxContainer, Fr as resolveAgentMainSessionKey, Lr as resolveMainSessionKey, Tn as listSandboxContainers, Ui as resolveSandboxToolPolicyForAgent, Vi as resolveSandboxConfigForAgent, Wa as loadConfig, vi as INTERNAL_MESSAGE_CHANNEL, zn as loadSessionStore } from "./model-selection-CftqhKNS.js";
-import { i as resolveAgentConfig } from "./agent-scope-Dv5h0qQE.js";
+import { En as removeSandboxContainer, Fr as resolveAgentMainSessionKey, Lr as resolveMainSessionKey, Tn as listSandboxContainers, Ui as resolveSandboxToolPolicyForAgent, Vi as resolveSandboxConfigForAgent, Wa as loadConfig, vi as INTERNAL_MESSAGE_CHANNEL, zn as loadSessionStore } from "./model-selection-DU-DNNW7.js";
+import { i as resolveAgentConfig } from "./agent-scope-BrJT9Gf9.js";
 import { T as parseAgentSessionKey, c as normalizeMainKey, l as resolveAgentIdFromSessionKey, r as buildAgentMainSessionKey, s as normalizeAgentId } from "./session-key-VV3RvEri.js";
-import "./openclaw-root-B6cGCDGF.js";
+import "./openclaw-root-DbbVtnL2.js";
 import "./logger-m0MK99MT.js";
 import "./exec-B8ip-O6u.js";
 import "./github-copilot-token-D37fjdwy.js";
@@ -13,9 +13,9 @@ import "./boolean-CJxfhBkG.js";
 import "./env-6my-UEm4.js";
 import "./env-overrides-CSdE_DWV.js";
 import { s as normalizeAnyChannelId } from "./registry-BKJyEPHE.js";
-import "./skills-Mq1GCIyL.js";
+import "./skills-D7xInzjY.js";
 import "./frontmatter-DTFXPyoL.js";
-import "./path-alias-guards-DJQOJx9a.js";
+import "./path-alias-guards-DBFU_Tqb.js";
 import "./plugins-Delv1GbW.js";
 import { c as resolveStorePath } from "./paths-DHrunYJK.js";
 import "./chat-envelope-CKaJSmSH.js";

package/dist/{search-manager-CjC4g5lJ.js → search-manager-Bj4BRNiF.js}

@@ -213,7 +213,7 @@ const QMD_MANAGER_PENDING = /* @__PURE__ */ new Map();
 let qmdCacheGeneration = 0;
 let managerRuntimePromise = null;
 function loadManagerRuntime() {
-	managerRuntimePromise ??= import("./manager-runtime-BUGnXZoY.js");
+	managerRuntimePromise ??= import("./manager-runtime-BCkunkcv.js");
 	return managerRuntimePromise;
 }
 var QmdManagerCacheInvalidatedError = class extends Error {

package/dist/{secret-file-BaxohaZh.js → secret-file-9CYwZJSc.js}

@@ -1,4 +1,4 @@
-import { $n as readSecretFileSync, Qn as DEFAULT_SECRET_FILE_MAX_BYTES } from "./auth-profiles-B5hyImOM.js";
+import { $n as readSecretFileSync, Qn as DEFAULT_SECRET_FILE_MAX_BYTES } from "./auth-profiles-D9Wn945p.js";
 //#region src/acp/secret-file.ts
 const MAX_SECRET_FILE_BYTES = DEFAULT_SECRET_FILE_MAX_BYTES;
 function readSecretFromFile(filePath, label) {

package/dist/{secret-file-DcuJtucq.js → secret-file-BCAZa3Jw.js}

@@ -1,4 +1,4 @@
-import { di as readSecretFileSync, ui as DEFAULT_SECRET_FILE_MAX_BYTES } from "./model-selection-CftqhKNS.js";
+import { di as readSecretFileSync, ui as DEFAULT_SECRET_FILE_MAX_BYTES } from "./model-selection-DU-DNNW7.js";
 //#region src/acp/secret-file.ts
 const MAX_SECRET_FILE_BYTES = DEFAULT_SECRET_FILE_MAX_BYTES;
 function readSecretFromFile(filePath, label) {

package/dist/{secrets-cli-BSv3yeQa.js → secrets-cli-B-LFbTtv.js}

@@ -1,10 +1,10 @@
 import { g as resolveStateDir } from "./paths-BJV7vkaX.js";
 import { A as theme, p as defaultRuntime, v as danger } from "./subsystem-Dk5WUhC2.js";
 import { g as resolveUserPath, m as resolveConfigDir } from "./utils-CGU7Q77u.js";
-import { Aa as parseEnvValue, As as isSafeExecutableValue, Da as isNonEmptyString, Ea as describeUnknownError, Ha as createConfigIO, Ma as writeTextFileAtomic, Oa as isRecord, Sa as isProviderScopedSecretResolutionError, So as secretRefKey, Ta as resolveSecretRefValues, _o as formatExecSecretRefIdValidationMessage, bo as isValidSecretProviderAlias, d as normalizeProviderId, fc as resolveAuthStorePath, fo as SecretProviderSchema, gt as isSecretRefHeaderValueMarker, ht as isNonSecretApiKeyMarker, ja as toDotPath, ka as parseDotPath, lc as loadAuthProfileStoreForSecretsRuntime, vo as isValidExecSecretRefId, wa as resolveSecretRefValue, xo as resolveDefaultSecretProviderAlias } from "./model-selection-CftqhKNS.js";
-import { a as resolveAgentDir, d as resolveDefaultAgentId, i as resolveAgentConfig, r as listAgentIds } from "./agent-scope-Dv5h0qQE.js";
+import { Aa as parseEnvValue, As as isSafeExecutableValue, Da as isNonEmptyString, Ea as describeUnknownError, Ha as createConfigIO, Ma as writeTextFileAtomic, Oa as isRecord, Sa as isProviderScopedSecretResolutionError, So as secretRefKey, Ta as resolveSecretRefValues, _o as formatExecSecretRefIdValidationMessage, bo as isValidSecretProviderAlias, d as normalizeProviderId, fc as resolveAuthStorePath, fo as SecretProviderSchema, gt as isSecretRefHeaderValueMarker, ht as isNonSecretApiKeyMarker, ja as toDotPath, ka as parseDotPath, lc as loadAuthProfileStoreForSecretsRuntime, vo as isValidExecSecretRefId, wa as resolveSecretRefValue, xo as resolveDefaultSecretProviderAlias } from "./model-selection-DU-DNNW7.js";
+import { a as resolveAgentDir, d as resolveDefaultAgentId, i as resolveAgentConfig, r as listAgentIds } from "./agent-scope-BrJT9Gf9.js";
 import { s as normalizeAgentId } from "./session-key-VV3RvEri.js";
-import "./openclaw-root-B6cGCDGF.js";
+import "./openclaw-root-DbbVtnL2.js";
 import "./logger-m0MK99MT.js";
 import "./exec-B8ip-O6u.js";
 import { d as resolveSecretInputRef, i as coerceSecretRef } from "./types.secrets-ZqKzSyNC.js";
@@ -13,21 +13,21 @@ import "./boolean-CJxfhBkG.js";
 import "./env-6my-UEm4.js";
 import "./env-overrides-CSdE_DWV.js";
 import "./registry-BKJyEPHE.js";
-import "./skills-Mq1GCIyL.js";
+import "./skills-D7xInzjY.js";
 import "./frontmatter-DTFXPyoL.js";
 import { s as runTasksWithConcurrency } from "./artifacts-BVEmBB-K.js";
-import "./path-alias-guards-DJQOJx9a.js";
+import "./path-alias-guards-DBFU_Tqb.js";
 import "./plugins-Delv1GbW.js";
 import "./paths-DHrunYJK.js";
 import "./chat-envelope-CKaJSmSH.js";
-import "./call-CKFLqNkw.js";
-import "./tailnet-GA0Saj6K.js";
-import { C as getPath, S as deletePathStrict, b as hasConfiguredPlaintextSecretValue, d as discoverAuthProfileSecretTargets, f as discoverConfigSecretTargets, g as listAuthProfileSecretTargetEntries, h as isKnownSecretTargetType, v as resolvePlanTargetAgainstRegistry, w as setPathCreateStrict, x as isExpectedResolvedSecretValue, y as assertExpectedResolvedSecretValue } from "./runtime-web-tools-gpT7ZniL.js";
-import { a as prepareSecretsRuntimeSnapshot } from "./runtime-CCYCyl1P.js";
+import "./call-7be5mSn_.js";
+import "./tailnet-lUwvztzP.js";
+import { C as getPath, S as deletePathStrict, b as hasConfiguredPlaintextSecretValue, d as discoverAuthProfileSecretTargets, f as discoverConfigSecretTargets, g as listAuthProfileSecretTargetEntries, h as isKnownSecretTargetType, v as resolvePlanTargetAgainstRegistry, w as setPathCreateStrict, x as isExpectedResolvedSecretValue, y as assertExpectedResolvedSecretValue } from "./runtime-web-tools-BZcX_oAn.js";
+import { a as prepareSecretsRuntimeSnapshot } from "./runtime-hakwcpul.js";
 import { t as formatDocsLink } from "./links-BM5olEmW.js";
 import "./progress-DVG93Lop.js";
 import { r as listKnownSecretEnvVarNames, t as PROVIDER_ENV_VARS } from "./provider-env-vars-CyHs_bH9.js";
-import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-DZUx1OqN.js";
+import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-DX5S8s8b.js";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";

package/dist/{secrets-cli-CYAGIMSW.js → secrets-cli-DOf7NbbB.js}

@@ -1,7 +1,7 @@
 import { A as theme, p as defaultRuntime, v as danger } from "./subsystem-BEF5zTJO.js";
 import { g as resolveStateDir } from "./paths-BfR2LXbA.js";
 import "./boolean-BHdNsbzF.js";
-import { Ai as createConfigIO, Ko as resolveAuthStorePath, Uo as loadAuthProfileStoreForSecretsRuntime, _i as parseDotPath, aa as formatExecSecretRefIdValidationMessage, bi as writeTextFileAtomic, ca as isValidSecretProviderAlias, ea as SecretProviderSchema, fi as resolveSecretRefValue, gc as isSecretRefHeaderValueMarker, gi as isRecord, go as isSafeExecutableValue, hc as isNonSecretApiKeyMarker, hi as isNonEmptyString, la as resolveDefaultSecretProviderAlias, mi as describeUnknownError, oa as isValidExecSecretRefId, pi as resolveSecretRefValues, ss as normalizeProviderId, ua as secretRefKey, ui as isProviderScopedSecretResolutionError, vi as parseEnvValue, yi as toDotPath } from "./auth-profiles-B5hyImOM.js";
+import { Ai as createConfigIO, Ko as resolveAuthStorePath, Uo as loadAuthProfileStoreForSecretsRuntime, _i as parseDotPath, aa as formatExecSecretRefIdValidationMessage, bi as writeTextFileAtomic, ca as isValidSecretProviderAlias, ea as SecretProviderSchema, fi as resolveSecretRefValue, gc as isSecretRefHeaderValueMarker, gi as isRecord, go as isSafeExecutableValue, hc as isNonSecretApiKeyMarker, hi as isNonEmptyString, la as resolveDefaultSecretProviderAlias, mi as describeUnknownError, oa as isValidExecSecretRefId, pi as resolveSecretRefValues, ss as normalizeProviderId, ua as secretRefKey, ui as isProviderScopedSecretResolutionError, vi as parseEnvValue, yi as toDotPath } from "./auth-profiles-D9Wn945p.js";
 import { a as resolveAgentDir, d as resolveDefaultAgentId, i as resolveAgentConfig, r as listAgentIds } from "./agent-scope-OAwT1oHV.js";
 import { s as normalizeAgentId } from "./session-key-9lbhEIb9.js";
 import { h as resolveUserPath, p as resolveConfigDir } from "./utils-qah6hFG0.js";
@@ -21,14 +21,14 @@ import "./path-alias-guards-DHv0a8uY.js";
 import "./plugins-DRDN4jFP.js";
 import "./paths-B-JdyKTL.js";
 import "./chat-envelope-t_PEbhWC.js";
-import "./call-5htJiVxi.js";
-import "./tailnet-BII1rF_F.js";
-import { C as getPath, S as deletePathStrict, b as hasConfiguredPlaintextSecretValue, d as discoverAuthProfileSecretTargets, f as discoverConfigSecretTargets, g as listAuthProfileSecretTargetEntries, h as isKnownSecretTargetType, v as resolvePlanTargetAgainstRegistry, w as setPathCreateStrict, x as isExpectedResolvedSecretValue, y as assertExpectedResolvedSecretValue } from "./runtime-web-tools-CRJ-iI9c.js";
-import { a as prepareSecretsRuntimeSnapshot } from "./runtime-B8hPSCRB.js";
+import "./call-Ce8vjHmH.js";
+import "./tailnet-Dd530XEB.js";
+import { C as getPath, S as deletePathStrict, b as hasConfiguredPlaintextSecretValue, d as discoverAuthProfileSecretTargets, f as discoverConfigSecretTargets, g as listAuthProfileSecretTargetEntries, h as isKnownSecretTargetType, v as resolvePlanTargetAgainstRegistry, w as setPathCreateStrict, x as isExpectedResolvedSecretValue, y as assertExpectedResolvedSecretValue } from "./runtime-web-tools-CWlvqBpH.js";
+import { a as prepareSecretsRuntimeSnapshot } from "./runtime-DpfmBWKQ.js";
 import { t as formatDocsLink } from "./links-hlmnhfEU.js";
 import "./progress-DvzcL_95.js";
 import { r as listKnownSecretEnvVarNames, t as PROVIDER_ENV_VARS } from "./provider-env-vars-Dx8rULyl.js";
-import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-D5FI-w_h.js";
+import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-ACgYuynD.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs";

package/dist/{security-cli-Dk67sFGR.js → security-cli-B2iw16q9.js}

@@ -1,10 +1,10 @@
 import { g as resolveStateDir, m as resolveOAuthDir, o as resolveConfigPath } from "./paths-BJV7vkaX.js";
 import { A as theme, k as isRich, p as defaultRuntime } from "./subsystem-Dk5WUhC2.js";
 import { v as shortenHomeInString, y as shortenHomePath } from "./utils-CGU7Q77u.js";
-import { Ha as createConfigIO, Wa as loadConfig } from "./model-selection-CftqhKNS.js";
-import { d as resolveDefaultAgentId } from "./agent-scope-Dv5h0qQE.js";
+import { Ha as createConfigIO, Wa as loadConfig } from "./model-selection-DU-DNNW7.js";
+import { d as resolveDefaultAgentId } from "./agent-scope-BrJT9Gf9.js";
 import { h as DEFAULT_ACCOUNT_ID, s as normalizeAgentId } from "./session-key-VV3RvEri.js";
-import "./openclaw-root-B6cGCDGF.js";
+import "./openclaw-root-DbbVtnL2.js";
 import "./logger-m0MK99MT.js";
 import "./exec-B8ip-O6u.js";
 import "./github-copilot-token-D37fjdwy.js";
@@ -13,36 +13,36 @@ import "./boolean-CJxfhBkG.js";
 import "./env-6my-UEm4.js";
 import "./env-overrides-CSdE_DWV.js";
 import "./registry-BKJyEPHE.js";
-import "./skills-Mq1GCIyL.js";
+import "./skills-D7xInzjY.js";
 import "./frontmatter-DTFXPyoL.js";
-import "./path-alias-guards-DJQOJx9a.js";
+import "./path-alias-guards-DBFU_Tqb.js";
 import "./plugins-Delv1GbW.js";
 import "./paths-DHrunYJK.js";
 import "./chat-envelope-CKaJSmSH.js";
-import "./errors-B27FlGCB.js";
+import "./errors-Bqf8bSUd.js";
 import "./commands-CH9PY2Dm.js";
-import "./call-CKFLqNkw.js";
-import "./tailnet-GA0Saj6K.js";
-import "./read-only-account-inspect-CWAyFOOe.js";
-import "./exec-approvals-allowlist-CWZm-Xjt.js";
-import "./exec-safe-bin-runtime-policy-CjDG3QJD.js";
-import { i as readChannelAllowFromStore } from "./pairing-store-CGmLbKax.js";
+import "./call-7be5mSn_.js";
+import "./tailnet-lUwvztzP.js";
+import "./read-only-account-inspect-sMyuBIwr.js";
+import "./exec-approvals-allowlist-BSEL6MhC.js";
+import "./exec-safe-bin-runtime-policy-DbbnAmrV.js";
+import { i as readChannelAllowFromStore } from "./pairing-store-Dr8a_B6n.js";
 import { t as formatDocsLink } from "./links-BM5olEmW.js";
 import { t as formatHelpExamples } from "./help-format-CVafmYlm.js";
 import "./prompt-Dw2SzW-X.js";
 import "./binaries-AvCyfzgx.js";
 import "./dangerous-tools-BgP2XPPl.js";
-import "./skill-scanner-B8J7JGHG.js";
+import "./skill-scanner-djTgcKux.js";
 import "./tailscale-BypHVf47.js";
-import "./auth-Cp-1JzUb.js";
-import "./probe-auth-ClUveUpg.js";
-import { r as collectIncludePathsRecursive, t as runSecurityAudit } from "./audit-CmbdapG_.js";
+import "./auth-Bu24hYWH.js";
+import "./probe-auth-BhN3PhE1.js";
+import { r as collectIncludePathsRecursive, t as runSecurityAudit } from "./audit-Cg4EdF12.js";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 //#region src/security/fix.ts
 async function safeChmod(params) {
 	try {
-		const st = await fs.lstat(params.path);
+		const st = await fsPromises.lstat(params.path);
 		if (st.isSymbolicLink()) return {
 			kind: "chmod",
 			path: params.path,
@@ -71,7 +71,7 @@ async function safeChmod(params) {
 			ok: false,
 			skipped: "already"
 		};
-		await fs.chmod(params.path, params.mode);
+		await fsPromises.chmod(params.path, params.mode);
 		return {
 			kind: "chmod",
 			path: params.path,
@@ -177,7 +177,7 @@ async function chmodCredentialsAndAgentState(params) {
 		mode: 448,
 		require: "dir"
 	}));
-	const credsEntries = await fs.readdir(credsDir, { withFileTypes: true }).catch(() => []);
+	const credsEntries = await fsPromises.readdir(credsDir, { withFileTypes: true }).catch(() => []);
 	for (const entry of credsEntries) {
 		if (!entry.isFile()) continue;
 		if (!entry.name.endsWith(".json")) continue;
@@ -228,7 +228,7 @@ async function chmodCredentialsAndAgentState(params) {
 			mode: 384,
 			require: "file"
 		}));
-		const sessionEntries = await fs.readdir(sessionsDir, { withFileTypes: true }).catch(() => []);
+		const sessionEntries = await fsPromises.readdir(sessionsDir, { withFileTypes: true }).catch(() => []);
 		for (const entry of sessionEntries) {
 			if (!entry.isFile()) continue;
 			if (!entry.name.endsWith(".jsonl")) continue;