activeclaw 2026.4.5 → 2026.4.9

package/dist/{doctor-config-flow-Cte0zkRl.js → doctor-config-flow-BcXzOsQs.js}

@@ -1,24 +1,24 @@
 import { f as resolveLegacyStateDirs, g as resolveStateDir, m as resolveOAuthDir, p as resolveNewStateDir, t as CONFIG_PATH } from "./paths-BJV7vkaX.js";
 import { d as isRecord, h as resolveHomeDir } from "./utils-CGU7Q77u.js";
-import { Ba as migrateLegacyConfig, Fs as resolveSlackStreamingMode, Is as resolveTelegramPreviewStreamMode, Ja as readConfigFileSnapshot, Kr as inspectTelegramAccount, Ms as formatSlackStreamingBooleanMigrationMessage, Ns as resolveDiscordPreviewStreamMode, Pr as canonicalizeMainSessionAlias, Ps as resolveSlackNativeStreaming, Un as saveSessionStore, Yr as listTelegramAccountIds, Zr as resolveTelegramAccount, ci as listRouteBindings, ei as formatChannelAccountsDefaultPath, js as formatSlackStreamModeMigrationMessage, ls as normalizeTrustedSafeBinDirs, ni as formatSetExplicitDefaultToConfiguredInstruction, os as getTrustedSafeBinDirs, ss as isTrustedSafeBinPath, ti as formatSetExplicitDefaultInstruction, to as OpenClawSchema, vs as resolveCommandResolutionFromArgv, za as parseToolsBySenderTypedKey } from "./model-selection-CftqhKNS.js";
-import { d as resolveDefaultAgentId } from "./agent-scope-Dv5h0qQE.js";
+import { Ba as migrateLegacyConfig, Fs as resolveSlackStreamingMode, Is as resolveTelegramPreviewStreamMode, Ja as readConfigFileSnapshot, Kr as inspectTelegramAccount, Ms as formatSlackStreamingBooleanMigrationMessage, Ns as resolveDiscordPreviewStreamMode, Pr as canonicalizeMainSessionAlias, Ps as resolveSlackNativeStreaming, Un as saveSessionStore, Yr as listTelegramAccountIds, Zr as resolveTelegramAccount, ci as listRouteBindings, ei as formatChannelAccountsDefaultPath, js as formatSlackStreamModeMigrationMessage, ls as normalizeTrustedSafeBinDirs, ni as formatSetExplicitDefaultToConfiguredInstruction, os as getTrustedSafeBinDirs, ss as isTrustedSafeBinPath, ti as formatSetExplicitDefaultInstruction, to as OpenClawSchema, vs as resolveCommandResolutionFromArgv, za as parseToolsBySenderTypedKey } from "./model-selection-DU-DNNW7.js";
+import { d as resolveDefaultAgentId } from "./agent-scope-BrJT9Gf9.js";
 import { _ as normalizeOptionalAccountId, g as normalizeAccountId, h as DEFAULT_ACCOUNT_ID, n as DEFAULT_MAIN_KEY, r as buildAgentMainSessionKey, s as normalizeAgentId } from "./session-key-VV3RvEri.js";
 import { i as formatCliCommand } from "./scan-paths-meOkBmZg.js";
 import { l as normalizeChatChannelId } from "./registry-BKJyEPHE.js";
-import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-CjDG3QJD.js";
-import { t as applyPluginAutoEnable } from "./plugin-auto-enable-POm3kIKs.js";
-import { i as readChannelAllowFromStore, o as resolveChannelAllowFromPath } from "./pairing-store-CGmLbKax.js";
-import { n as getChannelsCommandSecretTargetIds, o as resolveCommandSecretRefsViaGateway } from "./command-secret-targets-DXU9DFeM.js";
+import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-DbbnAmrV.js";
+import { t as applyPluginAutoEnable } from "./plugin-auto-enable-BYUBkHiG.js";
+import { i as readChannelAllowFromStore, o as resolveChannelAllowFromPath } from "./pairing-store-Dr8a_B6n.js";
+import { n as getChannelsCommandSecretTargetIds, o as resolveCommandSecretRefsViaGateway } from "./command-secret-targets-BQ5lbER9.js";
 import { i as shouldMoveSingleAccountChannelKey, t as fetchTelegramChatId } from "./api-DF0WBFAI.js";
 import { t as note } from "./note-BiaAdUTc.js";
-import { t as isWithinDir } from "./path-safety-9zsLqD77.js";
-import { n as formatConfigIssueLines } from "./issue-format-Dbw0ZKZU.js";
+import { t as isWithinDir } from "./path-safety-CfDs7X4h.js";
+import { n as formatConfigIssueLines } from "./issue-format-hszNX8Io.js";
 import { a as isMattermostMutableAllowEntry, i as isMSTeamsMutableAllowEntry, l as isNumericTelegramUserId, n as isGoogleChatMutableAllowEntry, o as isSlackMutableAllowEntry, r as isIrcMutableAllowEntry, s as collectProviderDangerousNameMatchingScopes, t as isDiscordMutableAllowEntry, u as normalizeTelegramAllowFromEntry } from "./mutable-allowlist-detectors-BZy6Qt78.js";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import JSON5 from "json5";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 //#region src/commands/doctor-config-analysis.ts
 function normalizeIssuePath(path) {
 	return path.filter((part) => typeof part !== "symbol");
@@ -2155,7 +2155,7 @@ async function maybeMigrateLegacyConfig() {
 	const targetDir = path.join(home, ".openclaw");
 	const targetPath = path.join(targetDir, "openclaw.json");
 	try {
-		await fs$1.access(targetPath);
+		await fsPromises.access(targetPath);
 		return changes;
 	} catch {}
 	const legacyCandidates = [
@@ -2165,14 +2165,14 @@ async function maybeMigrateLegacyConfig() {
 	];
 	let legacyPath = null;
 	for (const candidate of legacyCandidates) try {
-		await fs$1.access(candidate);
+		await fsPromises.access(candidate);
 		legacyPath = candidate;
 		break;
 	} catch {}
 	if (!legacyPath) return changes;
-	await fs$1.mkdir(targetDir, { recursive: true });
+	await fsPromises.mkdir(targetDir, { recursive: true });
 	try {
-		await fs$1.copyFile(legacyPath, targetPath, fs$1.constants.COPYFILE_EXCL);
+		await fsPromises.copyFile(legacyPath, targetPath, fsPromises.constants.COPYFILE_EXCL);
 		changes.push(`Migrated legacy config: ${legacyPath} -> ${targetPath}`);
 	} catch {}
 	return changes;

package/dist/{enable-Cf9rGPag.js → enable-DevEDLTp.js}

@@ -1,5 +1,5 @@
 import { l as normalizeChatChannelId } from "./registry-BKJyEPHE.js";
-import { r as ensurePluginAllowlisted } from "./plugin-auto-enable-POm3kIKs.js";
+import { r as ensurePluginAllowlisted } from "./plugin-auto-enable-BYUBkHiG.js";
 //#region src/plugins/toggle-config.ts
 function setPluginEnabledInConfig(config, pluginId, enabled) {
 	const builtInChannelId = normalizeChatChannelId(pluginId);

package/dist/{enable-DW4lKjBU.js → enable-yZG-yiAJ.js}

@@ -1,5 +1,5 @@
 import { l as normalizeChatChannelId } from "./registry-CQHSaCtN.js";
-import { r as ensurePluginAllowlisted } from "./plugin-auto-enable-DKIdWd3o.js";
+import { r as ensurePluginAllowlisted } from "./plugin-auto-enable-fQ-uJndS.js";
 //#region src/plugins/toggle-config.ts
 function setPluginEnabledInConfig(config, pluginId, enabled) {
 	const builtInChannelId = normalizeChatChannelId(pluginId);

package/dist/entry.js

@@ -327,7 +327,7 @@ if (!isMainModule({
 	}
 	function tryHandleRootHelpFastPath(argv) {
 		if (!isRootHelpInvocation(argv)) return false;
-		import("./program-D992fHH9.js").then(({ buildProgram }) => {
+		import("./program-Da383ALS.js").then(({ buildProgram }) => {
 			buildProgram().outputHelp();
 		}).catch((error) => {
 			console.error("[openclaw] Failed to display help:", error instanceof Error ? error.stack ?? error.message : error);
@@ -345,7 +345,7 @@ if (!isMainModule({
 			applyCliProfileEnv({ profile: parsed.profile });
 			process$1.argv = parsed.argv;
 		}
-		if (!tryHandleRootVersionFastPath(process$1.argv) && !tryHandleRootHelpFastPath(process$1.argv)) import("./run-main-qumIkFEs.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
+		if (!tryHandleRootVersionFastPath(process$1.argv) && !tryHandleRootHelpFastPath(process$1.argv)) import("./run-main--Va-DnXT.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
 			console.error("[openclaw] Failed to start CLI:", error instanceof Error ? error.stack ?? error.message : error);
 			process$1.exitCode = 1;
 		});

package/dist/{env-DGWeP3w5.js → env-Bhn5CLil.js}

@@ -1,4 +1,4 @@
-import { t as createSubsystemLogger } from "./subsystem-Br253I8q.js";
+import { t as createSubsystemLogger } from "./subsystem-CDH9S_yW.js";
 import { t as parseBooleanValue } from "./boolean-C7Ct_klp.js";
 createSubsystemLogger("env");
 function isTruthyEnvValue(value) {

package/dist/{errors-B27FlGCB.js → errors-Bqf8bSUd.js}

@@ -1,4 +1,4 @@
-import { i as redactSensitiveText } from "./path-alias-guards-DJQOJx9a.js";
+import { i as redactSensitiveText } from "./path-alias-guards-DBFU_Tqb.js";
 //#region src/infra/errors.ts
 function extractErrorCode(err) {
 	if (!err || typeof err !== "object") return;

package/dist/{exec-approvals-allowlist-CWZm-Xjt.js → exec-approvals-allowlist-BSEL6MhC.js}

@@ -1,5 +1,5 @@
 import { _ as expandHomePrefix } from "./paths-BJV7vkaX.js";
-import { Cs as unwrapKnownShellMultiplexerInvocation, Ss as unwrapKnownDispatchWrapperInvocation, Ts as SAFE_BIN_PROFILES, _s as resolveAllowlistCandidatePath, bs as isDispatchWrapperExecutable, ds as analyzeShellCommand, gs as matchAllowlist, hs as DEFAULT_SAFE_BINS, ms as splitCommandChain, ps as isWindowsPlatform, ss as isTrustedSafeBinPath, us as validateSafeBinArgv, vs as resolveCommandResolutionFromArgv, xs as isShellWrapperExecutable, ys as extractShellWrapperInlineCommand } from "./model-selection-CftqhKNS.js";
+import { Cs as unwrapKnownShellMultiplexerInvocation, Ss as unwrapKnownDispatchWrapperInvocation, Ts as SAFE_BIN_PROFILES, _s as resolveAllowlistCandidatePath, bs as isDispatchWrapperExecutable, ds as analyzeShellCommand, gs as matchAllowlist, hs as DEFAULT_SAFE_BINS, ms as splitCommandChain, ps as isWindowsPlatform, ss as isTrustedSafeBinPath, us as validateSafeBinArgv, vs as resolveCommandResolutionFromArgv, xs as isShellWrapperExecutable, ys as extractShellWrapperInlineCommand } from "./model-selection-DU-DNNW7.js";
 import path from "node:path";
 //#region src/infra/exec-approvals-allowlist.ts
 function hasShellLineContinuation(command) {

package/dist/{exec-approvals-allowlist-DnjttVeB.js → exec-approvals-allowlist-Be63T3oT.js}

@@ -1,5 +1,5 @@
 import { _ as expandHomePrefix } from "./paths-BfR2LXbA.js";
-import { Ja as isTrustedSafeBinPath, Qa as analyzeShellCommand, Za as validateSafeBinArgv, ao as resolveCommandResolutionFromArgv, co as isShellWrapperExecutable, do as SAFE_BIN_PROFILES, eo as isWindowsPlatform, io as resolveAllowlistCandidatePath, lo as unwrapKnownDispatchWrapperInvocation, no as DEFAULT_SAFE_BINS, oo as extractShellWrapperInlineCommand, ro as matchAllowlist, so as isDispatchWrapperExecutable, to as splitCommandChain, uo as unwrapKnownShellMultiplexerInvocation } from "./auth-profiles-B5hyImOM.js";
+import { Ja as isTrustedSafeBinPath, Qa as analyzeShellCommand, Za as validateSafeBinArgv, ao as resolveCommandResolutionFromArgv, co as isShellWrapperExecutable, do as SAFE_BIN_PROFILES, eo as isWindowsPlatform, io as resolveAllowlistCandidatePath, lo as unwrapKnownDispatchWrapperInvocation, no as DEFAULT_SAFE_BINS, oo as extractShellWrapperInlineCommand, ro as matchAllowlist, so as isDispatchWrapperExecutable, to as splitCommandChain, uo as unwrapKnownShellMultiplexerInvocation } from "./auth-profiles-D9Wn945p.js";
 import path from "node:path";
 //#region src/infra/exec-approvals-allowlist.ts
 function hasShellLineContinuation(command) {

package/dist/{exec-approvals-cli-BHD1xE9Q.js → exec-approvals-cli-BXOXf0aV.js}

@@ -1,7 +1,7 @@
 import { A as theme, k as isRich, p as defaultRuntime } from "./subsystem-BEF5zTJO.js";
 import "./paths-BfR2LXbA.js";
 import "./boolean-BHdNsbzF.js";
-import "./auth-profiles-B5hyImOM.js";
+import "./auth-profiles-D9Wn945p.js";
 import "./agent-scope-OAwT1oHV.js";
 import "./utils-qah6hFG0.js";
 import "./boundary-file-read-BAjRF13y.js";
@@ -18,14 +18,14 @@ import "./path-alias-guards-DHv0a8uY.js";
 import "./plugins-DRDN4jFP.js";
 import "./paths-B-JdyKTL.js";
 import "./chat-envelope-t_PEbhWC.js";
-import "./exec-approvals-allowlist-DnjttVeB.js";
-import "./call-5htJiVxi.js";
-import "./tailnet-BII1rF_F.js";
+import "./exec-approvals-allowlist-Be63T3oT.js";
+import "./call-Ce8vjHmH.js";
+import "./tailnet-Dd530XEB.js";
 import { t as formatTimeAgo } from "./format-relative-ciFDmLBH.js";
 import { f as readExecApprovalsSnapshot, g as saveExecApprovals } from "./exec-approvals-BVT7PLEI.js";
 import { t as formatDocsLink } from "./links-hlmnhfEU.js";
 import "./progress-DvzcL_95.js";
-import { n as callGatewayFromCli } from "./gateway-rpc-D5FI-w_h.js";
+import { n as callGatewayFromCli } from "./gateway-rpc-ACgYuynD.js";
 import "./systemd-qW6d6kEI.js";
 import "./service-D91QofaA.js";
 import { n as renderTable, t as getTerminalTableWidth } from "./table-B-mQ0pe0.js";

package/dist/{exec-approvals-cli-BRCUDW6B.js → exec-approvals-cli-Ckca7X8L.js}

@@ -1,9 +1,9 @@
 import "./paths-BJV7vkaX.js";
 import { A as theme, k as isRich, p as defaultRuntime } from "./subsystem-Dk5WUhC2.js";
 import "./utils-CGU7Q77u.js";
-import "./model-selection-CftqhKNS.js";
-import "./agent-scope-Dv5h0qQE.js";
-import "./openclaw-root-B6cGCDGF.js";
+import "./model-selection-DU-DNNW7.js";
+import "./agent-scope-BrJT9Gf9.js";
+import "./openclaw-root-DbbVtnL2.js";
 import "./logger-m0MK99MT.js";
 import "./exec-B8ip-O6u.js";
 import "./github-copilot-token-D37fjdwy.js";
@@ -11,25 +11,25 @@ import "./boolean-CJxfhBkG.js";
 import "./env-6my-UEm4.js";
 import "./env-overrides-CSdE_DWV.js";
 import "./registry-BKJyEPHE.js";
-import "./skills-Mq1GCIyL.js";
+import "./skills-D7xInzjY.js";
 import "./frontmatter-DTFXPyoL.js";
-import "./path-alias-guards-DJQOJx9a.js";
+import "./path-alias-guards-DBFU_Tqb.js";
 import "./plugins-Delv1GbW.js";
 import "./paths-DHrunYJK.js";
 import "./chat-envelope-CKaJSmSH.js";
-import "./call-CKFLqNkw.js";
-import "./tailnet-GA0Saj6K.js";
-import "./exec-approvals-allowlist-CWZm-Xjt.js";
+import "./call-7be5mSn_.js";
+import "./tailnet-lUwvztzP.js";
+import "./exec-approvals-allowlist-BSEL6MhC.js";
 import { _ as saveExecApprovals, p as readExecApprovalsSnapshot, t as formatTimeAgo } from "./format-relative-CsSUDXfJ.js";
 import { t as formatDocsLink } from "./links-BM5olEmW.js";
 import "./progress-DVG93Lop.js";
-import { n as callGatewayFromCli } from "./gateway-rpc-DZUx1OqN.js";
-import "./systemd-B5QGtWUt.js";
-import "./service-Cfk6VWeP.js";
+import { n as callGatewayFromCli } from "./gateway-rpc-DX5S8s8b.js";
+import "./systemd-lqHMKF03.js";
+import "./service-kXk8K3mn.js";
 import { n as renderTable, t as getTerminalTableWidth } from "./table-ByNbkdzT.js";
-import { t as describeUnknownError } from "./shared-C6ksnJEO.js";
+import { t as describeUnknownError } from "./shared-C_hG8rgh.js";
 import JSON5 from "json5";
-import fs from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 //#region src/cli/exec-approvals-cli.ts
 async function readStdin() {
 	const chunks = [];
@@ -307,7 +307,7 @@ function registerExecApprovalsCli(program) {
 			if (!opts.file && !opts.stdin) exitWithError("Provide --file or --stdin.");
 			if (opts.file && opts.stdin) exitWithError("Use either --file or --stdin (not both).");
 			const { source, targetLabel, baseHash } = await loadWritableSnapshotTarget(opts);
-			const raw = opts.stdin ? await readStdin() : await fs.readFile(String(opts.file), "utf8");
+			const raw = opts.stdin ? await readStdin() : await fsPromises.readFile(String(opts.file), "utf8");
 			let file;
 			try {
 				file = JSON5.parse(raw);

package/dist/{exec-safe-bin-runtime-policy-CObmLqq8.js → exec-safe-bin-runtime-policy-BnTNRx5O.js}

@@ -1,5 +1,5 @@
-import { Xa as normalizeTrustedSafeBinDirs, Ya as listWritableExplicitTrustedSafeBinDirs, fo as normalizeSafeBinProfileFixtures, po as resolveSafeBinProfiles, qa as getTrustedSafeBinDirs } from "./auth-profiles-B5hyImOM.js";
-import { r as resolveSafeBins } from "./exec-approvals-allowlist-DnjttVeB.js";
+import { Xa as normalizeTrustedSafeBinDirs, Ya as listWritableExplicitTrustedSafeBinDirs, fo as normalizeSafeBinProfileFixtures, po as resolveSafeBinProfiles, qa as getTrustedSafeBinDirs } from "./auth-profiles-D9Wn945p.js";
+import { r as resolveSafeBins } from "./exec-approvals-allowlist-Be63T3oT.js";
 //#region src/infra/exec-safe-bin-runtime-policy.ts
 const INTERPRETER_LIKE_SAFE_BINS = new Set([
 	"ash",

package/dist/{exec-safe-bin-runtime-policy-CjDG3QJD.js → exec-safe-bin-runtime-policy-DbbnAmrV.js}

@@ -1,5 +1,5 @@
-import { Ds as resolveSafeBinProfiles, Es as normalizeSafeBinProfileFixtures, cs as listWritableExplicitTrustedSafeBinDirs, ls as normalizeTrustedSafeBinDirs, os as getTrustedSafeBinDirs } from "./model-selection-CftqhKNS.js";
-import { r as resolveSafeBins } from "./exec-approvals-allowlist-CWZm-Xjt.js";
+import { Ds as resolveSafeBinProfiles, Es as normalizeSafeBinProfileFixtures, cs as listWritableExplicitTrustedSafeBinDirs, ls as normalizeTrustedSafeBinDirs, os as getTrustedSafeBinDirs } from "./model-selection-DU-DNNW7.js";
+import { r as resolveSafeBins } from "./exec-approvals-allowlist-BSEL6MhC.js";
 //#region src/infra/exec-safe-bin-runtime-policy.ts
 const INTERPRETER_LIKE_SAFE_BINS = new Set([
 	"ash",

package/dist/extensionAPI.js

@@ -1,20 +1,20 @@
 import { O as resolveAgentWorkspaceDir, T as resolveAgentDir, V as ensureAgentWorkspace, n as resolveSessionFilePath, s as resolveStorePath } from "./paths-Mt14cg41.js";
 import "./paths-CDoTDY_s.js";
 import "./logger-Bxlcwvue.js";
-import { So as DEFAULT_PROVIDER, an as saveSessionStore, m as resolveThinkingDefault, tn as loadSessionStore, xo as DEFAULT_MODEL } from "./model-selection-CS_9NrTE.js";
-import { d as resolveAgentTimeoutMs, f as resolveAgentIdentity, t as runEmbeddedPiAgent } from "./pi-embedded-Lk0-wBVJ.js";
+import { So as DEFAULT_PROVIDER, an as saveSessionStore, m as resolveThinkingDefault, tn as loadSessionStore, xo as DEFAULT_MODEL } from "./model-selection-PlvJPOJ9.js";
+import { d as resolveAgentTimeoutMs, f as resolveAgentIdentity, t as runEmbeddedPiAgent } from "./pi-embedded-XOWzcU4v.js";
 import "./github-copilot-token-CxpwfC_T.js";
 import "./env-BFnrIO45.js";
-import "./deliver-CODiAnbo.js";
-import "./diagnostic-BpFQ24Me.js";
-import "./audio-transcription-runner-BjxrFZhs.js";
-import "./pi-model-discovery-BHnYQuJe.js";
-import "./image-Hryb3xjW.js";
+import "./deliver-DIDeQhCe.js";
+import "./diagnostic-DGCbVfrY.js";
+import "./audio-transcription-runner-DIwGKsNI.js";
+import "./pi-model-discovery-DQwd8eWZ.js";
+import "./image-kqy5P4_2.js";
 import "./local-roots-RZoycic0.js";
-import "./api-key-rotation-CpK2-BOi.js";
+import "./api-key-rotation-ysMjkqBD.js";
 import "./proxy-fetch-BG4Z45Re.js";
 import "./fetch-SMEiEXa2.js";
 import "./fs-safe-E1EY4Cks.js";
-import "./manager-CxuSPBL7.js";
+import "./manager-DFiUW_Ha.js";
 import "./query-expansion-ksb5Ehoc.js";
 export { DEFAULT_MODEL, DEFAULT_PROVIDER, ensureAgentWorkspace, loadSessionStore, resolveAgentDir, resolveAgentIdentity, resolveAgentTimeoutMs, resolveAgentWorkspaceDir, resolveSessionFilePath, resolveStorePath, resolveThinkingDefault, runEmbeddedPiAgent, saveSessionStore };

package/dist/{fetch-aXWb4Ao5.js → fetch-BWClp-zV.js}

@@ -1,7 +1,7 @@
-import { t as createSubsystemLogger } from "./subsystem-Br253I8q.js";
-import { t as isTruthyEnvValue } from "./env-DGWeP3w5.js";
+import { t as createSubsystemLogger } from "./subsystem-CDH9S_yW.js";
+import { t as isTruthyEnvValue } from "./env-Bhn5CLil.js";
 import { r as bindAbortRelay, t as hasEnvHttpProxyConfigured } from "./proxy-env-C-Ky4p9K.js";
-import { t as getProxyUrlFromFetch } from "./proxy-fetch-CuFiQFud.js";
+import { t as getProxyUrlFromFetch } from "./proxy-fetch-Spr_UMJ3.js";
 import process$1 from "node:process";
 import { Agent, EnvHttpProxyAgent, ProxyAgent, fetch } from "undici";
 import * as dns from "node:dns";

package/dist/{fetch-C-yIjbz-.js → fetch-DAiV9-bR.js}

@@ -1,4 +1,4 @@
-import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-Dsd8UoGA.js";
+import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-DGuF8Mhb.js";
 import path from "node:path";
 import { fileTypeFromBuffer } from "file-type";
 //#region src/media/constants.ts

package/dist/{fetch-3V1gxxYH.js → fetch-LN1gb6p0.js}

@@ -1,4 +1,4 @@
-import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-DkMZHPzY.js";
+import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-Bd5oI7xu.js";
 import path from "node:path";
 import { fileTypeFromBuffer } from "file-type";
 //#region src/media/constants.ts

package/dist/{fetch-guard-DDQrBzBv.js → fetch-guard-Bd5oI7xu.js}

@@ -1,6 +1,6 @@
-import { _ as redactSensitiveText } from "./paths-E3CbCLxE.js";
-import { i as logWarn } from "./logger-3NSI7j4D.js";
-import { Fi as isBlockedSpecialUseIpv4Address, Ii as isBlockedSpecialUseIpv6Address, Li as isCanonicalDottedDecimalIPv4, Pi as extractEmbeddedIpv4FromIpv6, Ri as isIpv4Address, Ui as parseCanonicalIpAddress, Wi as parseLooseIpAddress, zi as isLegacyIpv4Literal } from "./model-selection-BrTh8v9L.js";
+import { _ as redactSensitiveText } from "./paths-Bg_l6kdG.js";
+import { i as logWarn } from "./logger-BA9koAaC.js";
+import { Fi as isBlockedSpecialUseIpv4Address, Ii as isBlockedSpecialUseIpv6Address, Li as isCanonicalDottedDecimalIPv4, Pi as extractEmbeddedIpv4FromIpv6, Ri as isIpv4Address, Ui as parseCanonicalIpAddress, Wi as parseLooseIpAddress, zi as isLegacyIpv4Literal } from "./model-selection-CvKAj7nY.js";
 import { n as hasProxyEnvConfigured, r as bindAbortRelay } from "./proxy-env-C-Ky4p9K.js";
 import { Agent, EnvHttpProxyAgent } from "undici";
 import { lookup } from "node:dns";

package/dist/{fetch-guard-Dsd8UoGA.js → fetch-guard-DGuF8Mhb.js}

@@ -1,4 +1,4 @@
-import { Ao as isBlockedSpecialUseIpv4Address, Bo as parseCanonicalIpAddress, Io as isLegacyIpv4Literal, Mo as isCanonicalDottedDecimalIPv4, Po as isIpv4Address, Vo as parseLooseIpAddress, jo as isBlockedSpecialUseIpv6Address, ko as extractEmbeddedIpv4FromIpv6 } from "./model-selection-CftqhKNS.js";
+import { Ao as isBlockedSpecialUseIpv4Address, Bo as parseCanonicalIpAddress, Io as isLegacyIpv4Literal, Mo as isCanonicalDottedDecimalIPv4, Po as isIpv4Address, Vo as parseLooseIpAddress, jo as isBlockedSpecialUseIpv6Address, ko as extractEmbeddedIpv4FromIpv6 } from "./model-selection-DU-DNNW7.js";
 import { i as logWarn } from "./logger-m0MK99MT.js";
 import { t as bindAbortRelay } from "./fetch-timeout-oCOYl-9e.js";
 import { n as hasProxyEnvConfigured } from "./proxy-env-G6JgJlRw.js";

package/dist/{fetch-guard-DkMZHPzY.js → fetch-guard-dTCN4rW8.js}

@@ -1,4 +1,4 @@
-import { Ca as isLegacyIpv4Literal, Da as parseCanonicalIpAddress, Oa as parseLooseIpAddress, _a as isBlockedSpecialUseIpv4Address, ga as extractEmbeddedIpv4FromIpv6, va as isBlockedSpecialUseIpv6Address, xa as isIpv4Address, ya as isCanonicalDottedDecimalIPv4 } from "./auth-profiles-B5hyImOM.js";
+import { Ca as isLegacyIpv4Literal, Da as parseCanonicalIpAddress, Oa as parseLooseIpAddress, _a as isBlockedSpecialUseIpv4Address, ga as extractEmbeddedIpv4FromIpv6, va as isBlockedSpecialUseIpv6Address, xa as isIpv4Address, ya as isCanonicalDottedDecimalIPv4 } from "./auth-profiles-D9Wn945p.js";
 import { i as logWarn } from "./logger-BXPKfRxc.js";
 import { t as bindAbortRelay } from "./fetch-timeout-B0N_Hvgw.js";
 import { n as hasProxyEnvConfigured } from "./proxy-env-E75UnVcC.js";

package/dist/{fetch-BXs0KCX9.js → fetch-hiM4UODI.js}

@@ -1,4 +1,4 @@
-import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-DDQrBzBv.js";
+import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-dTCN4rW8.js";
 import path from "node:path";
 import { fileTypeFromBuffer } from "file-type";
 //#region src/media/constants.ts

package/dist/{frontmatter-_kVsuvOa.js → frontmatter-CC95HXlE.js}

@@ -1,7 +1,7 @@
-import { t as createSubsystemLogger } from "./subsystem-Br253I8q.js";
+import { t as createSubsystemLogger } from "./subsystem-CDH9S_yW.js";
 import { t as parseBooleanValue } from "./boolean-C7Ct_klp.js";
 import path from "node:path";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import JSON5 from "json5";
 import YAML from "yaml";
 //#region src/hooks/internal-hooks.ts
@@ -200,7 +200,7 @@ function hasBinary(bin) {
 	for (const part of parts) for (const ext of extensions) {
 		const candidate = path.join(part, bin + ext);
 		try {
-			syncFs.accessSync(candidate, syncFs.constants.X_OK);
+			fs.accessSync(candidate, fs.constants.X_OK);
 			hasBinaryCache.set(bin, true);
 			return true;
 		} catch {}

package/dist/{fs-safe-BLWbfoa6.js → fs-safe-B_UpcQBp.js}

@@ -1,11 +1,11 @@
 import { _ as expandHomePrefix } from "./paths-BJV7vkaX.js";
-import { d as hasNodeErrorCode, f as isNotFoundPathError, m as isSymlinkOpenError, p as isPathInside, s as sameFileIdentity } from "./openclaw-root-B6cGCDGF.js";
+import { d as hasNodeErrorCode, f as isNotFoundPathError, m as isSymlinkOpenError, p as isPathInside, s as sameFileIdentity } from "./openclaw-root-DbbVtnL2.js";
 import { i as logWarn } from "./logger-m0MK99MT.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-DJQOJx9a.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-DBFU_Tqb.js";
 import { constants } from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { spawn } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { once } from "node:events";
@@ -165,24 +165,24 @@ async function runPinnedWriteHelper(params) {
 }
 async function runPinnedWriteFallback(params) {
 	const parentPath = params.relativeParentPath ? path.join(params.rootPath, ...params.relativeParentPath.split("/")) : params.rootPath;
-	if (params.mkdir) await fs$1.mkdir(parentPath, { recursive: true });
+	if (params.mkdir) await fsPromises.mkdir(parentPath, { recursive: true });
 	const targetPath = path.join(parentPath, params.basename);
 	const tempPath = path.join(parentPath, `.${params.basename}.fallback.tmp`);
-	if (params.input.kind === "buffer") if (typeof params.input.data === "string") await fs$1.writeFile(tempPath, params.input.data, {
+	if (params.input.kind === "buffer") if (typeof params.input.data === "string") await fsPromises.writeFile(tempPath, params.input.data, {
 		encoding: params.input.encoding ?? "utf8",
 		mode: params.mode
 	});
-	else await fs$1.writeFile(tempPath, params.input.data, { mode: params.mode });
+	else await fsPromises.writeFile(tempPath, params.input.data, { mode: params.mode });
 	else {
-		const handle = await fs$1.open(tempPath, "w", params.mode);
+		const handle = await fsPromises.open(tempPath, "w", params.mode);
 		try {
 			await pipeline(params.input.stream, handle.createWriteStream());
 		} finally {
 			await handle.close().catch(() => {});
 		}
 	}
-	await fs$1.rename(tempPath, targetPath);
-	const stat = await fs$1.stat(targetPath);
+	await fsPromises.rename(tempPath, targetPath);
+	const stat = await fsPromises.stat(targetPath);
 	return {
 		dev: stat.dev,
 		ino: stat.ino
@@ -207,19 +207,19 @@ const ensureTrailingSep = (value) => value.endsWith(path.sep) ? value : value +
 async function expandRelativePathWithHome(relativePath) {
 	let home = process.env.HOME || process.env.USERPROFILE || os.homedir();
 	try {
-		home = await fs$1.realpath(home);
+		home = await fsPromises.realpath(home);
 	} catch {}
 	return expandHomePrefix(relativePath, { home });
 }
 async function openVerifiedLocalFile(filePath, options) {
 	try {
-		if ((await fs$1.lstat(filePath)).isDirectory()) throw new SafeOpenError("not-file", "not a file");
+		if ((await fsPromises.lstat(filePath)).isDirectory()) throw new SafeOpenError("not-file", "not a file");
 	} catch (err) {
 		if (err instanceof SafeOpenError) throw err;
 	}
 	let handle;
 	try {
-		handle = await fs$1.open(filePath, OPEN_READ_FLAGS);
+		handle = await fsPromises.open(filePath, OPEN_READ_FLAGS);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "file not found");
 		if (isSymlinkOpenError(err)) throw new SafeOpenError("symlink", "symlink open blocked", { cause: err });
@@ -227,13 +227,13 @@ async function openVerifiedLocalFile(filePath, options) {
 		throw err;
 	}
 	try {
-		const [stat, lstat] = await Promise.all([handle.stat(), fs$1.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([handle.stat(), fsPromises.lstat(filePath)]);
 		if (lstat.isSymbolicLink()) throw new SafeOpenError("symlink", "symlink not allowed");
 		if (!stat.isFile()) throw new SafeOpenError("not-file", "not a file");
 		if (options?.rejectHardlinks && stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during read");
-		const realPath = await fs$1.realpath(filePath);
-		const realStat = await fs$1.stat(realPath);
+		const realPath = await fsPromises.realpath(filePath);
+		const realStat = await fsPromises.stat(realPath);
 		if (options?.rejectHardlinks && realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		return {
@@ -251,7 +251,7 @@ async function openVerifiedLocalFile(filePath, options) {
 async function resolvePathWithinRoot(params) {
 	let rootReal;
 	try {
-		rootReal = await fs$1.realpath(params.rootDir);
+		rootReal = await fsPromises.realpath(params.rootDir);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "root dir not found");
 		throw err;
@@ -352,7 +352,7 @@ function buildAtomicWriteTempPath(targetPath) {
 	return path.join(dir, `.${base}.${process.pid}.${randomUUID()}.tmp`);
 }
 async function writeTempFileForAtomicReplace(params) {
-	const tempHandle = await fs$1.open(params.tempPath, OPEN_WRITE_CREATE_FLAGS, params.mode);
+	const tempHandle = await fsPromises.open(params.tempPath, OPEN_WRITE_CREATE_FLAGS, params.mode);
 	try {
 		if (typeof params.data === "string") await tempHandle.writeFile(params.data, params.encoding ?? "utf8");
 		else await tempHandle.writeFile(params.data);
@@ -362,7 +362,7 @@ async function writeTempFileForAtomicReplace(params) {
 	}
 }
 async function verifyAtomicWriteResult(params) {
-	const rootWithSep = ensureTrailingSep(await fs$1.realpath(params.rootDir));
+	const rootWithSep = ensureTrailingSep(await fsPromises.realpath(params.rootDir));
 	const opened = await openVerifiedLocalFile(params.targetPath, { rejectHardlinks: true });
 	try {
 		if (!sameFileIdentity(opened.stat, params.expectedIdentity)) throw new SafeOpenError("path-mismatch", "path changed during write");
@@ -373,13 +373,13 @@ async function verifyAtomicWriteResult(params) {
 }
 async function resolveOpenedFileRealPathForHandle(handle, ioPath) {
 	try {
-		return await fs$1.realpath(ioPath);
+		return await fsPromises.realpath(ioPath);
 	} catch (err) {
 		if (!isNotFoundPathError(err)) throw err;
 	}
 	const fdCandidates = process.platform === "linux" ? [`/proc/self/fd/${handle.fd}`, `/dev/fd/${handle.fd}`] : process.platform === "win32" ? [] : [`/dev/fd/${handle.fd}`];
 	for (const fdPath of fdCandidates) try {
-		return await fs$1.realpath(fdPath);
+		return await fsPromises.realpath(fdPath);
 	} catch {}
 	throw new SafeOpenError("path-mismatch", "unable to resolve opened file path");
 }
@@ -394,10 +394,10 @@ async function openWritableFileWithinRoot(params) {
 	} catch (err) {
 		throw new SafeOpenError("invalid-path", "path alias escape blocked", { cause: err });
 	}
-	if (params.mkdir !== false) await fs$1.mkdir(path.dirname(resolved), { recursive: true });
+	if (params.mkdir !== false) await fsPromises.mkdir(path.dirname(resolved), { recursive: true });
 	let ioPath = resolved;
 	try {
-		const resolvedRealPath = await fs$1.realpath(resolved);
+		const resolvedRealPath = await fsPromises.realpath(resolved);
 		if (!isPathInside(rootWithSep, resolvedRealPath)) throw new SafeOpenError("outside-workspace", "file is outside workspace root");
 		ioPath = resolvedRealPath;
 	} catch (err) {
@@ -411,10 +411,10 @@ async function openWritableFileWithinRoot(params) {
 	const createFlags = params.append ? OPEN_APPEND_CREATE_FLAGS : OPEN_WRITE_CREATE_FLAGS;
 	try {
 		try {
-			handle = await fs$1.open(ioPath, existingFlags, fileMode);
+			handle = await fsPromises.open(ioPath, existingFlags, fileMode);
 		} catch (err) {
 			if (!isNotFoundPathError(err)) throw err;
-			handle = await fs$1.open(ioPath, createFlags, fileMode);
+			handle = await fsPromises.open(ioPath, createFlags, fileMode);
 			createdForWrite = true;
 		}
 	} catch (err) {
@@ -428,7 +428,7 @@ async function openWritableFileWithinRoot(params) {
 		if (!stat.isFile()) throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 		if (stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		try {
-			const lstat = await fs$1.lstat(ioPath);
+			const lstat = await fsPromises.lstat(ioPath);
 			if (lstat.isSymbolicLink() || !lstat.isFile()) throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 			if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during write");
 		} catch (err) {
@@ -436,7 +436,7 @@ async function openWritableFileWithinRoot(params) {
 		}
 		const realPath = await resolveOpenedFileRealPathForHandle(handle, ioPath);
 		openedRealPath = realPath;
-		const realStat = await fs$1.stat(realPath);
+		const realStat = await fsPromises.stat(realPath);
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		if (realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!isPathInside(rootWithSep, realPath)) throw new SafeOpenError("outside-workspace", "file is outside workspace root");
@@ -451,7 +451,7 @@ async function openWritableFileWithinRoot(params) {
 		const cleanupCreatedPath = createdForWrite && err instanceof SafeOpenError;
 		const cleanupPath = openedRealPath ?? ioPath;
 		await handle.close().catch(() => {});
-		if (cleanupCreatedPath) await fs$1.rm(cleanupPath, { force: true }).catch(() => {});
+		if (cleanupCreatedPath) await fsPromises.rm(cleanupPath, { force: true }).catch(() => {});
 		throw err;
 	}
 }
@@ -629,7 +629,7 @@ async function writeFileWithinRootLegacy(params) {
 			encoding: params.encoding,
 			mode: targetMode || 384
 		});
-		await fs$1.rename(tempPath, destinationPath);
+		await fsPromises.rename(tempPath, destinationPath);
 		tempPath = null;
 		try {
 			await verifyAtomicWriteResult({
@@ -642,7 +642,7 @@ async function writeFileWithinRootLegacy(params) {
 			throw err;
 		}
 	} finally {
-		if (tempPath) await fs$1.rm(tempPath, { force: true }).catch(() => {});
+		if (tempPath) await fsPromises.rm(tempPath, { force: true }).catch(() => {});
 	}
 }
 async function copyFileWithinRootLegacy(params, source) {
@@ -664,7 +664,7 @@ async function copyFileWithinRootLegacy(params, source) {
 		await target.handle.close().catch(() => {});
 		targetClosedByUs = true;
 		tempPath = buildAtomicWriteTempPath(destinationPath);
-		tempHandle = await fs$1.open(tempPath, OPEN_WRITE_CREATE_FLAGS, targetMode || 384);
+		tempHandle = await fsPromises.open(tempPath, OPEN_WRITE_CREATE_FLAGS, targetMode || 384);
 		const sourceStream = source.handle.createReadStream();
 		const targetStream = tempHandle.createWriteStream();
 		sourceStream.once("close", () => {
@@ -674,13 +674,13 @@ async function copyFileWithinRootLegacy(params, source) {
 			tempClosedByStream = true;
 		});
 		await import("node:stream/promises").then(({ pipeline }) => pipeline(sourceStream, targetStream));
-		const writtenStat = await fs$1.stat(tempPath);
+		const writtenStat = await fsPromises.stat(tempPath);
 		if (!tempClosedByStream) {
 			await tempHandle.close().catch(() => {});
 			tempClosedByStream = true;
 		}
 		tempHandle = null;
-		await fs$1.rename(tempPath, destinationPath);
+		await fsPromises.rename(tempPath, destinationPath);
 		tempPath = null;
 		try {
 			await verifyAtomicWriteResult({
@@ -693,10 +693,10 @@ async function copyFileWithinRootLegacy(params, source) {
 			throw err;
 		}
 	} catch (err) {
-		if (target?.createdForWrite) await fs$1.rm(target.openedRealPath, { force: true }).catch(() => {});
+		if (target?.createdForWrite) await fsPromises.rm(target.openedRealPath, { force: true }).catch(() => {});
 		throw err;
 	} finally {
-		if (tempPath) await fs$1.rm(tempPath, { force: true }).catch(() => {});
+		if (tempPath) await fsPromises.rm(tempPath, { force: true }).catch(() => {});
 		if (!sourceClosedByStream) await source.handle.close().catch(() => {});
 		if (tempHandle && !tempClosedByStream) await tempHandle.close().catch(() => {});
 		if (target && !targetClosedByUs) await target.handle.close().catch(() => {});

package/dist/{fs-safe-DqIZh4BQ.js → fs-safe-hxxMXweE.js}

@@ -1,7 +1,7 @@
-import { h as assertNoPathAliasEscape } from "./paths-E3CbCLxE.js";
-import { c as expandHomePrefix } from "./paths-DHNo4U8q.js";
-import { A as isPathInside, O as hasNodeErrorCode, j as isSymlinkOpenError, k as isNotFoundPathError, w as sameFileIdentity } from "./workspace-DRRA3YH5.js";
-import { i as logWarn } from "./logger-3NSI7j4D.js";
+import { h as assertNoPathAliasEscape } from "./paths-Bg_l6kdG.js";
+import { c as expandHomePrefix } from "./paths-L_hqOE5A.js";
+import { A as isPathInside, O as hasNodeErrorCode, j as isSymlinkOpenError, k as isNotFoundPathError, w as sameFileIdentity } from "./workspace-DiYGwuGk.js";
+import { i as logWarn } from "./logger-BA9koAaC.js";
 import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";