cclawd 1.0.0 → 1.0.2

package/dist/{subsystem-C8z6w6xC.js → subsystem-DfXy5gUB.js}

@@ -1,7 +1,7 @@
-import { r as resolveConfigPath } from "./paths-hfkBoC7i.js";
+import { r as resolveConfigPath } from "./paths-DkxwiA8g.js";
 import os from "node:os";
 import path from "node:path";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import chalk, { Chalk } from "chalk";
 import { Logger } from "tslog";
 import JSON5 from "json5";
@@ -49,15 +49,15 @@ function getCommandPathInternal(argv, depth, opts) {
 //#endregion
 //#region src/infra/tmp-openclaw-dir.ts
 const POSIX_OPENCLAW_TMP_DIR = "/tmp/openclaw";
-const TMP_DIR_ACCESS_MODE = fs.constants.W_OK | fs.constants.X_OK;
+const TMP_DIR_ACCESS_MODE = syncFs.constants.W_OK | syncFs.constants.X_OK;
 function isNodeErrorWithCode(err, code) {
 	return typeof err === "object" && err !== null && "code" in err && err.code === code;
 }
 function resolvePreferredOpenClawTmpDir(options = {}) {
-	const accessSync = options.accessSync ?? fs.accessSync;
-	const chmodSync = options.chmodSync ?? fs.chmodSync;
-	const lstatSync = options.lstatSync ?? fs.lstatSync;
-	const mkdirSync = options.mkdirSync ?? fs.mkdirSync;
+	const accessSync = options.accessSync ?? syncFs.accessSync;
+	const chmodSync = options.chmodSync ?? syncFs.chmodSync;
+	const lstatSync = options.lstatSync ?? syncFs.lstatSync;
+	const mkdirSync = options.mkdirSync ?? syncFs.mkdirSync;
 	const warn = options.warn ?? ((message) => console.warn(message));
 	const getuid = options.getuid ?? (() => {
 		try {
@@ -149,8 +149,8 @@ function resolvePreferredOpenClawTmpDir(options = {}) {
 function readLoggingConfig() {
 	const configPath = resolveConfigPath();
 	try {
-		if (!fs.existsSync(configPath)) return;
-		const raw = fs.readFileSync(configPath, "utf-8");
+		if (!syncFs.existsSync(configPath)) return;
+		const raw = syncFs.readFileSync(configPath, "utf-8");
 		const logging = JSON5.parse(raw)?.logging;
 		if (!logging || typeof logging !== "object" || Array.isArray(logging)) return;
 		return logging;
@@ -332,7 +332,7 @@ function buildLogger(settings) {
 		for (const transport of externalTransports) attachExternalTransport(logger, transport);
 		return logger;
 	}
-	fs.mkdirSync(path.dirname(settings.file), { recursive: true });
+	syncFs.mkdirSync(path.dirname(settings.file), { recursive: true });
 	if (isRollingPath(settings.file)) pruneOldRollingLogs(path.dirname(settings.file));
 	let currentFileBytes = getCurrentLogFileBytes(settings.file);
 	let warnedAboutSizeCap = false;
@@ -371,14 +371,14 @@ function resolveMaxLogFileBytes(raw) {
 }
 function getCurrentLogFileBytes(file) {
 	try {
-		return fs.statSync(file).size;
+		return syncFs.statSync(file).size;
 	} catch {
 		return 0;
 	}
 }
 function appendLogLine(file, line) {
 	try {
-		fs.appendFileSync(file, line, { encoding: "utf8" });
+		syncFs.appendFileSync(file, line, { encoding: "utf8" });
 		return true;
 	} catch {
 		return false;
@@ -430,14 +430,14 @@ function isRollingPath(file) {
 }
 function pruneOldRollingLogs(dir) {
 	try {
-		const entries = fs.readdirSync(dir, { withFileTypes: true });
+		const entries = syncFs.readdirSync(dir, { withFileTypes: true });
 		const cutoff = Date.now() - MAX_LOG_AGE_MS;
 		for (const entry of entries) {
 			if (!entry.isFile()) continue;
 			if (!entry.name.startsWith(`${LOG_PREFIX}-`) || !entry.name.endsWith(LOG_SUFFIX)) continue;
 			const fullPath = path.join(dir, entry.name);
 			try {
-				if (fs.statSync(fullPath).mtimeMs < cutoff) fs.rmSync(fullPath, { force: true });
+				if (syncFs.statSync(fullPath).mtimeMs < cutoff) syncFs.rmSync(fullPath, { force: true });
 			} catch {}
 		}
 	} catch {}

package/dist/{tables-DQusRhkD.js → tables-BAGqh2XD.js}

@@ -1,4 +1,4 @@
-import { r as markdownToIRWithMeta } from "./ir-CzM3SxId.js";
+import { r as markdownToIRWithMeta } from "./ir-CVtBjUiL.js";
 import { t as renderMarkdownWithMarkers } from "./render-IRnn-2gt.js";
 //#region src/markdown/tables.ts
 const MARKDOWN_STYLE_MARKERS = {

package/dist/{target-errors-CfavnC9U.js → target-errors-CeBF8Pws.js}

@@ -1,4 +1,4 @@
-import { ji as detectMime, lt as sanitizeToolResultImages } from "./model-selection-wf3OY5DX.js";
+import { ji as detectMime, lt as sanitizeToolResultImages } from "./model-selection-CMEj8bpy.js";
 import fs from "node:fs/promises";
 //#region src/agents/tools/common.ts
 var ToolInputError = class extends Error {

package/dist/{tokens-BWDIKewp.js → tokens-6ul2IrzG.js}

@@ -1,4 +1,4 @@
-import { u as escapeRegExp } from "./logger-ChbX1G7s.js";
+import { u as escapeRegExp } from "./logger-CbUVl62f.js";
 //#region src/auto-reply/tokens.ts
 const HEARTBEAT_TOKEN = "HEARTBEAT_OK";
 const SILENT_REPLY_TOKEN = "NO_REPLY";

package/dist/{web-CrcrTQ2c.js → web-BRSmQdtm.js}

@@ -1,45 +1,45 @@
-import { s as resolveStorePath } from "./paths-C0HLtPu0.js";
-import "./paths-hfkBoC7i.js";
-import { a as defaultRuntime, b as getChildLogger, d as logVerbose, m as shouldLogVerbose, t as createSubsystemLogger } from "./subsystem-C8z6w6xC.js";
-import { I as buildGroupHistoryKey, N as DEFAULT_MAIN_KEY, P as buildAgentMainSessionKey, z as normalizeAgentId } from "./workspace-CWDYHR27.js";
-import { C as sleep, T as toWhatsappJid, h as normalizeE164, m as jidToE164, o as clamp, p as isSelfChatMode, v as resolveJidToE164 } from "./logger-ChbX1G7s.js";
-import { $t as recordSessionMetaFromInbound, Ai as saveMediaBuffer, Fr as resolveChannelGroupPolicy, Ir as resolveChannelGroupRequireMention, Vr as resolveGroupSessionKey, Zt as loadSessionStore, ao as loadConfig, br as readWebSelfId, dr as resolveWhatsAppAccount, fr as resolveWhatsAppMediaMaxBytes, hr as logWebSelfId, mr as getWebAuthAgeMs, nc as formatCliCommand, pr as WA_WEB_AUTH_DIR, tn as updateLastRoute, vr as pickWebChannel, wr as webAuthExists } from "./model-selection-wf3OY5DX.js";
-import "./github-copilot-token-CQmATy5E.js";
+import { s as resolveStorePath } from "./paths-CehYKFsO.js";
+import "./paths-DkxwiA8g.js";
+import { a as defaultRuntime, b as getChildLogger, d as logVerbose, m as shouldLogVerbose, t as createSubsystemLogger } from "./subsystem-DfXy5gUB.js";
+import { I as buildGroupHistoryKey, N as DEFAULT_MAIN_KEY, P as buildAgentMainSessionKey, z as normalizeAgentId } from "./workspace-DGIcKCCW.js";
+import { C as sleep, T as toWhatsappJid, h as normalizeE164, m as jidToE164, o as clamp, p as isSelfChatMode, v as resolveJidToE164 } from "./logger-CbUVl62f.js";
+import { $t as recordSessionMetaFromInbound, Ai as saveMediaBuffer, Fr as resolveChannelGroupPolicy, Ir as resolveChannelGroupRequireMention, Vr as resolveGroupSessionKey, Zt as loadSessionStore, ao as loadConfig, br as readWebSelfId, dr as resolveWhatsAppAccount, fr as resolveWhatsAppMediaMaxBytes, hr as logWebSelfId, mr as getWebAuthAgeMs, nc as formatCliCommand, pr as WA_WEB_AUTH_DIR, tn as updateLastRoute, vr as pickWebChannel, wr as webAuthExists } from "./model-selection-CMEj8bpy.js";
+import "./github-copilot-token-8N63GdbE.js";
 import "./boolean-C7Ct_klp.js";
-import "./env-aYXLHjfZ.js";
-import "./frontmatter-DjZuS525.js";
-import "./send-CEg4P96c.js";
-import { At as resolveOpenProviderRuntimeGroupPolicy, jt as warnMissingProviderGroupPolicyFallbackOnce, kt as resolveDefaultGroupPolicy } from "./send-DPflcjM5.js";
-import { A as enqueueSystemEvent, C as formatInboundEnvelope, D as computeBackoff, E as parseActivationCommand, F as finalizeInboundContext, I as hasControlCommand, J as createDedupeCache, L as shouldComputeCommandAuthorized, M as deriveLastRoutePolicy, N as resolveAgentRoute, O as sleepWithAbort, P as resolveInboundLastRouteSessionKey, R as buildMentionRegexes, S as resolveInboundDebounceMs, T as normalizeGroupActivation, X as resolveMessagePrefix, Y as resolveIdentityNamePrefix, _ as resolvePinnedMainDmOwnerFromAllowlist, a as resolveInboundSessionEnvelopeContext, c as createConnectedChannelStatusPatch, d as createReplyPrefixOptions, f as buildHistoryContextFromEntries, g as resolveDmGroupAccessWithLists, h as resolveDmGroupAccessWithCommandGate, j as buildAgentSessionKey, k as formatDurationPrecise, l as issuePairingChallenge, m as readStoreAllowFromForDmPolicy, p as recordPendingHistoryEntryIfEnabled, u as resolveMentionGating, v as shouldAckReactionForWhatsApp, w as getReplyFromConfig, x as createInboundDebouncer, y as dispatchReplyWithBufferedBlockDispatcher, z as normalizeMentionText } from "./pi-embedded-BAHaY-Oh.js";
-import "./tokens-BWDIKewp.js";
-import "./deliver-DJf2ZBpe.js";
-import "./diagnostic-BCCMF3O_.js";
-import { $ as toLocationContext, Q as formatLocationText, rt as upsertChannelPairingRequest } from "./send-DwAoiT2p.js";
-import "./pi-model-discovery-ItS07aJB.js";
-import "./image-Q8E1-lZn.js";
-import { _ as registerUnhandledRejectionHandler } from "./audio-transcription-runner-Q5zG_hYd.js";
-import { i as getAgentScopedMediaLocalRoots } from "./fetch-DCTUdr1U.js";
-import "./fetch-guard-CqpEmMQ2.js";
-import "./api-key-rotation-DLU4jvSu.js";
-import "./proxy-fetch-c1ZUFFcO.js";
-import { a as loadWebMedia, d as chunkMarkdownTextWithMode, h as resolveTextChunkLimit, m as resolveChunkMode, s as resolveMarkdownTableMode } from "./ir-CzM3SxId.js";
+import "./env-lw2hsIUY.js";
+import "./frontmatter-C_obXuTp.js";
+import "./send-BKO1-P1t.js";
+import { At as resolveOpenProviderRuntimeGroupPolicy, jt as warnMissingProviderGroupPolicyFallbackOnce, kt as resolveDefaultGroupPolicy } from "./send-4rRrSKp9.js";
+import { A as enqueueSystemEvent, C as formatInboundEnvelope, D as computeBackoff, E as parseActivationCommand, F as finalizeInboundContext, I as hasControlCommand, J as createDedupeCache, L as shouldComputeCommandAuthorized, M as deriveLastRoutePolicy, N as resolveAgentRoute, O as sleepWithAbort, P as resolveInboundLastRouteSessionKey, R as buildMentionRegexes, S as resolveInboundDebounceMs, T as normalizeGroupActivation, X as resolveMessagePrefix, Y as resolveIdentityNamePrefix, _ as resolvePinnedMainDmOwnerFromAllowlist, a as resolveInboundSessionEnvelopeContext, c as createConnectedChannelStatusPatch, d as createReplyPrefixOptions, f as buildHistoryContextFromEntries, g as resolveDmGroupAccessWithLists, h as resolveDmGroupAccessWithCommandGate, j as buildAgentSessionKey, k as formatDurationPrecise, l as issuePairingChallenge, m as readStoreAllowFromForDmPolicy, p as recordPendingHistoryEntryIfEnabled, u as resolveMentionGating, v as shouldAckReactionForWhatsApp, w as getReplyFromConfig, x as createInboundDebouncer, y as dispatchReplyWithBufferedBlockDispatcher, z as normalizeMentionText } from "./pi-embedded-CHNPEUAv.js";
+import "./tokens-6ul2IrzG.js";
+import "./deliver-B6eTtXSk.js";
+import "./diagnostic-BZmAxdu9.js";
+import { $ as toLocationContext, Q as formatLocationText, rt as upsertChannelPairingRequest } from "./send-V1MRV7QF.js";
+import "./pi-model-discovery-D-r5y7kV.js";
+import "./image-Bt49ybRv.js";
+import { _ as registerUnhandledRejectionHandler } from "./audio-transcription-runner-CQU4Eg1M.js";
+import { i as getAgentScopedMediaLocalRoots } from "./fetch-CMLoICyN.js";
+import "./fetch-guard-DCj3k042.js";
+import "./api-key-rotation-Dg3JlNDQ.js";
+import "./proxy-fetch-BOh1PLOW.js";
+import { a as loadWebMedia, d as chunkMarkdownTextWithMode, h as resolveTextChunkLimit, m as resolveChunkMode, s as resolveMarkdownTableMode } from "./ir-CVtBjUiL.js";
 import "./render-IRnn-2gt.js";
-import "./target-errors-CfavnC9U.js";
-import "./commands-registry-llLVCTH9.js";
-import "./skill-commands-DhdiziMs.js";
+import "./target-errors-CeBF8Pws.js";
+import "./commands-registry-CyLMCPuP.js";
+import "./skill-commands-B55LOaMB.js";
 import "./fetch-CeWULXBI.js";
-import { n as recordChannelActivity } from "./channel-activity-Bx08UTAg.js";
-import { t as convertMarkdownTables } from "./tables-DQusRhkD.js";
-import "./send-CS0ocZHl.js";
-import "./outbound-attachment-1R6r9Pg_.js";
-import "./send-6R8b9zsj.js";
-import "./fetch-bvgIiupu.js";
-import { r as setActiveWebListener } from "./active-listener-DYmI7imH.js";
-import "./manager-FAQPC0uO.js";
-import "./query-expansion-GqNV2iIE.js";
-import { i as markdownToWhatsApp, r as sendReactionWhatsApp, t as sendMessageWhatsApp } from "./outbound-Bw0dOVS7.js";
-import { i as waitForWaConnection, n as formatError, r as getStatusCode, t as createWaSocket } from "./session-BoIID5UR.js";
-import { t as loginWeb } from "./login-B0mtU11X.js";
+import { n as recordChannelActivity } from "./channel-activity-dT3cYb0e.js";
+import { t as convertMarkdownTables } from "./tables-BAGqh2XD.js";
+import "./send-EDBPXjTT.js";
+import "./outbound-attachment-CVJwpypG.js";
+import "./send-K2mAG7KC.js";
+import "./fetch-C0iyt-Iz.js";
+import { r as setActiveWebListener } from "./active-listener-BLd27Pxd.js";
+import "./manager-DSfEj66R.js";
+import "./query-expansion-BErUY8P2.js";
+import { i as markdownToWhatsApp, r as sendReactionWhatsApp, t as sendMessageWhatsApp } from "./outbound-BxIJyMzV.js";
+import { i as waitForWaConnection, n as formatError, r as getStatusCode, t as createWaSocket } from "./session-CuVCho2m.js";
+import { t as loginWeb } from "./login-D0fUoX-p.js";
 import { randomUUID } from "node:crypto";
 import { DisconnectReason, downloadMediaMessage, extractMessageContent, getContentType, isJidGroup, normalizeMessageContent } from "@whiskeysockets/baileys";
 const DEFAULT_RECONNECT_POLICY = {

package/dist/{whatsapp-actions-B0u0ZAme.js → whatsapp-actions-Dxb2K2Xh.js}

@@ -1,20 +1,20 @@
-import "./paths-C0HLtPu0.js";
-import "./paths-hfkBoC7i.js";
-import "./subsystem-C8z6w6xC.js";
-import "./workspace-CWDYHR27.js";
-import "./logger-ChbX1G7s.js";
-import { Dr as normalizeWhatsAppTarget, Er as isWhatsAppGroupJid, dr as resolveWhatsAppAccount } from "./model-selection-wf3OY5DX.js";
-import "./github-copilot-token-CQmATy5E.js";
+import "./paths-CehYKFsO.js";
+import "./paths-DkxwiA8g.js";
+import "./subsystem-DfXy5gUB.js";
+import "./workspace-DGIcKCCW.js";
+import "./logger-CbUVl62f.js";
+import { Dr as normalizeWhatsAppTarget, Er as isWhatsAppGroupJid, dr as resolveWhatsAppAccount } from "./model-selection-CMEj8bpy.js";
+import "./github-copilot-token-8N63GdbE.js";
 import "./boolean-C7Ct_klp.js";
-import "./env-aYXLHjfZ.js";
-import "./frontmatter-DjZuS525.js";
-import "./fetch-DCTUdr1U.js";
-import "./fetch-guard-CqpEmMQ2.js";
-import "./ir-CzM3SxId.js";
+import "./env-lw2hsIUY.js";
+import "./frontmatter-C_obXuTp.js";
+import "./fetch-CMLoICyN.js";
+import "./fetch-guard-DCj3k042.js";
+import "./ir-CVtBjUiL.js";
 import "./render-IRnn-2gt.js";
-import { f as readReactionParams, h as readStringParam, i as ToolAuthorizationError, l as jsonResult, n as missingTargetError, o as createActionGate } from "./target-errors-CfavnC9U.js";
-import "./tables-DQusRhkD.js";
-import { r as sendReactionWhatsApp } from "./outbound-Bw0dOVS7.js";
+import { f as readReactionParams, h as readStringParam, i as ToolAuthorizationError, l as jsonResult, n as missingTargetError, o as createActionGate } from "./target-errors-CeBF8Pws.js";
+import "./tables-BAGqh2XD.js";
+import { r as sendReactionWhatsApp } from "./outbound-BxIJyMzV.js";
 //#region src/whatsapp/resolve-outbound-target.ts
 function resolveWhatsAppOutboundTarget(params) {
 	const trimmed = params.to?.trim() ?? "";

package/dist/{workspace-CWDYHR27.js → workspace-DGIcKCCW.js}

@@ -1,10 +1,10 @@
-import { d as resolveRequiredHomeDir } from "./paths-hfkBoC7i.js";
-import { l as danger, m as shouldLogVerbose } from "./subsystem-C8z6w6xC.js";
-import { g as pathExists$1, n as logError, t as logDebug, y as resolveUserPath } from "./logger-ChbX1G7s.js";
+import { d as resolveRequiredHomeDir } from "./paths-DkxwiA8g.js";
+import { l as danger, m as shouldLogVerbose } from "./subsystem-DfXy5gUB.js";
+import { g as pathExists$1, n as logError, t as logDebug, y as resolveUserPath } from "./logger-CbUVl62f.js";
 import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
-import fs$1 from "node:fs";
+import syncFs from "node:fs";
 import { promisify } from "node:util";
 import { execFile, spawn } from "node:child_process";
 import process$1 from "node:process";
@@ -566,7 +566,7 @@ function resolveBoundaryPathLexicalSync(params) {
 			rootCanonicalPath: params.rootCanonicalPath,
 			resolveParams: params.params,
 			absolutePath: params.absolutePath,
-			read: (cursor) => fs$1.lstatSync(cursor)
+			read: (cursor) => syncFs.lstatSync(cursor)
 		});
 		if (isPromiseLike(maybeStat)) throw new Error("Unexpected async lexical stat");
 		const stat = maybeStat;
@@ -716,15 +716,15 @@ function resolvePathViaExistingAncestorSync(targetPath) {
 	const normalized = path.resolve(targetPath);
 	let cursor = normalized;
 	const missingSuffix = [];
-	while (!isFilesystemRoot(cursor) && !fs$1.existsSync(cursor)) {
+	while (!isFilesystemRoot(cursor) && !syncFs.existsSync(cursor)) {
 		missingSuffix.unshift(path.basename(cursor));
 		const parent = path.dirname(cursor);
 		if (parent === cursor) break;
 		cursor = parent;
 	}
-	if (!fs$1.existsSync(cursor)) return normalized;
+	if (!syncFs.existsSync(cursor)) return normalized;
 	try {
-		const resolvedAncestor = path.resolve(fs$1.realpathSync(cursor));
+		const resolvedAncestor = path.resolve(syncFs.realpathSync(cursor));
 		if (missingSuffix.length === 0) return resolvedAncestor;
 		return path.resolve(resolvedAncestor, ...missingSuffix);
 	} catch {
@@ -749,7 +749,7 @@ function getPathKindSync(absolutePath, preserveFinalSymlink) {
 	try {
 		return {
 			exists: true,
-			kind: toResolvedKind(preserveFinalSymlink ? fs$1.lstatSync(absolutePath) : fs$1.statSync(absolutePath))
+			kind: toResolvedKind(preserveFinalSymlink ? syncFs.lstatSync(absolutePath) : syncFs.statSync(absolutePath))
 		};
 	} catch (error) {
 		if (isNotFoundPathError(error)) return {
@@ -809,10 +809,10 @@ async function resolveSymlinkHopPath(symlinkPath) {
 }
 function resolveSymlinkHopPathSync(symlinkPath) {
 	try {
-		return path.resolve(fs$1.realpathSync(symlinkPath));
+		return path.resolve(syncFs.realpathSync(symlinkPath));
 	} catch (error) {
 		if (!isNotFoundPathError(error)) throw error;
-		const linkTarget = fs$1.readlinkSync(symlinkPath);
+		const linkTarget = syncFs.readlinkSync(symlinkPath);
 		return resolvePathViaExistingAncestorSync(path.resolve(path.dirname(symlinkPath), linkTarget));
 	}
 }
@@ -836,7 +836,7 @@ function sameFileIdentity(left, right) {
 	return sameFileIdentity$1(left, right);
 }
 function openVerifiedFileSync(params) {
-	const ioFs = params.ioFs ?? fs$1;
+	const ioFs = params.ioFs ?? syncFs;
 	const allowedType = params.allowedType ?? "file";
 	const openReadFlags = ioFs.constants.O_RDONLY | (typeof ioFs.constants.O_NOFOLLOW === "number" ? ioFs.constants.O_NOFOLLOW : 0);
 	let fd = null;
@@ -912,7 +912,7 @@ function canUseBoundaryFileOpen(ioFs) {
 	return typeof ioFs.openSync === "function" && typeof ioFs.closeSync === "function" && typeof ioFs.fstatSync === "function" && typeof ioFs.lstatSync === "function" && typeof ioFs.realpathSync === "function" && typeof ioFs.readFileSync === "function" && typeof ioFs.constants === "object" && ioFs.constants !== null;
 }
 function openBoundaryFileSync(params) {
-	const ioFs = params.ioFs ?? fs$1;
+	const ioFs = params.ioFs ?? syncFs;
 	const resolved = resolveBoundaryFilePathGeneric({
 		absolutePath: params.absolutePath,
 		resolve: (absolutePath) => resolveBoundaryPathSync({
@@ -963,7 +963,7 @@ function finalizeBoundaryFileOpen(params) {
 	});
 }
 async function openBoundaryFile(params) {
-	const ioFs = params.ioFs ?? fs$1;
+	const ioFs = params.ioFs ?? syncFs;
 	const maybeResolved = resolveBoundaryFilePathGeneric({
 		absolutePath: params.absolutePath,
 		resolve: (absolutePath) => resolveBoundaryPath({
@@ -1119,7 +1119,7 @@ function resolveNpmArgvForWindows(argv) {
 	if (!cliName) return null;
 	const nodeDir = path.dirname(process$1.execPath);
 	const cliPath = path.join(nodeDir, "node_modules", "npm", "bin", cliName);
-	if (!fs$1.existsSync(cliPath)) {
+	if (!syncFs.existsSync(cliPath)) {
 		const command = argv[0] ?? "";
 		return [path.extname(command).toLowerCase() ? command : `${command}.cmd`, ...argv.slice(1)];
 	}
@@ -1323,7 +1323,7 @@ async function readPackageName(dir) {
 }
 function readPackageNameSync(dir) {
 	try {
-		const raw = fs$1.readFileSync(path.join(dir, "package.json"), "utf-8");
+		const raw = syncFs.readFileSync(path.join(dir, "package.json"), "utf-8");
 		const parsed = JSON.parse(raw);
 		return typeof parsed.name === "string" ? parsed.name : null;
 	} catch {
@@ -1357,7 +1357,7 @@ function candidateDirsFromArgv1(argv1) {
 	const normalized = path.resolve(argv1);
 	const candidates = [path.dirname(normalized)];
 	try {
-		const resolved = fs$1.realpathSync(normalized);
+		const resolved = syncFs.realpathSync(normalized);
 		if (resolved !== normalized) candidates.push(path.dirname(resolved));
 	} catch {}
 	const parts = normalized.split(path.sep);
@@ -1469,14 +1469,14 @@ async function readWorkspaceFileWithGuards(params) {
 	const identity = workspaceFileIdentity(opened.stat, opened.path);
 	const cached = workspaceFileCache.get(params.filePath);
 	if (cached && cached.identity === identity) {
-		fs$1.closeSync(opened.fd);
+		syncFs.closeSync(opened.fd);
 		return {
 			ok: true,
 			content: cached.content
 		};
 	}
 	try {
-		const content = fs$1.readFileSync(opened.fd, "utf-8");
+		const content = syncFs.readFileSync(opened.fd, "utf-8");
 		workspaceFileCache.set(params.filePath, {
 			content,
 			identity
@@ -1493,7 +1493,7 @@ async function readWorkspaceFileWithGuards(params) {
 			error
 		};
 	} finally {
-		fs$1.closeSync(opened.fd);
+		syncFs.closeSync(opened.fd);
 	}
 }
 function stripFrontMatter(content) {

package/extensions/mfa-auth/README.md

@@ -17,7 +17,7 @@
 插件主要由以下几个部分组成：
 
 - **AuthManager (`src/auth-manager.ts`)**: 核心管理器，负责维护用户的验证状态（敏感操作权限、首次对话权限）和管理验证会话（AuthSession）。
-- **HTTP Server (`src/server.ts`)**: 启动一个本地 HTTP 服务（默认端口 `18801`），用于托管验证页面和处理前端轮询请求。
+- **Notification Service (`src/notification-service.ts`)**: 通知服务，负责将认证消息发送到不同的聊天渠道。
 - **拦截钩子 (`index.ts`)**:
   - `before_tool_call`: 拦截工具调用，检查命令是否包含敏感词。
   - `message_received`: 拦截用户消息，检查是否为新用户首次对话。
@@ -31,7 +31,6 @@ sequenceDiagram
     participant Channel as 聊天频道
     participant OpenClaw as OpenClaw核心
     participant Plugin as MFA插件
-    participant Browser as 验证页面
     participant Dabby as 权威认证服务
     participant Polling as 轮询机制
 
@@ -42,15 +41,13 @@ sequenceDiagram
     alt 需要认证 (首次对话 或 敏感操作 或 重新认证)
         Plugin->>Plugin: 检查本地认证状态
         Plugin->>Dabby: 请求实名认证二维码
-        Dabby-->>Plugin: 返回二维码数据
+        Dabby-->>Plugin: 返回二维码URL (qrCodeUrl)
         Plugin->>Plugin: 创建验证会话 (Session)
-        Plugin-->>Channel: 发送验证链接
+        Plugin-->>Channel: 发送验证链接 (qrCodeUrl)
         Channel-->>User: 显示验证链接消息
         Plugin->>Polling: 启动轮询 (每2秒)
 
-        User->>Browser: 点击链接打开页面
-        Browser->>Dabby: 展示二维码
-        User->>Dabby: 手机扫码认证
+        User->>Dabby: 点击链接扫码认证
         Plugin->>Plugin: 更新用户认证状态 (持久化)
 
         Polling->>Plugin: 检测到认证成功
@@ -65,10 +62,11 @@ sequenceDiagram
 
 **关键机制说明**：
 
-1. **聊天侧轮询**：插件在发送认证链接后，启动一个每 2 秒轮询一次的检测机制
-2. **原子通知**：使用 `checkAndConsumeNotification` 确保认证成功消息只发送一次
-3. **场景化消息**：根据不同场景（首次认证、重新认证、二次认证）发送不同的成功消息
-4. **超时保护**：轮询会在 `config.timeout + 10秒` 后自动停止
+1. **直接显示认证链接**：插件直接在聊天中发送后端 API 返回的 `qrCodeUrl` 链接，无需启动本地 HTTP 服务器
+2. **聊天侧轮询**：插件在发送认证链接后，启动一个每 2 秒轮询一次的检测机制
+3. **原子通知**：使用 `checkAndConsumeNotification` 确保认证成功消息只发送一次
+4. **场景化消息**：根据不同场景（首次认证、重新认证、二次认证）发送不同的成功消息
+5. **超时保护**：轮询会在 `config.timeout + 10秒` 后自动停止
 
 ## 通知机制
 
@@ -83,11 +81,11 @@ sequenceDiagram
 
 ### 通知消息类型
 
-| 场景 | 触发条件 | 消息内容 |
-|------|----------|----------|
-| 首次认证 | 用户首次通过认证 | `✅ 首次认证成功，请继续对话。` |
-| 重新认证 | 用户通过 `/reauth` 命令重新认证 | `✅ 重新认证成功，请继续对话。` |
-| 二次认证 | 用户通过敏感操作认证 | `✅ 二次认证成功，请重新发送之前的命令（或回复'确认'）即可执行。` |
+| 场景     | 触发条件                        | 消息内容                                                          |
+| -------- | ------------------------------- | ----------------------------------------------------------------- |
+| 首次认证 | 用户首次通过认证                | `✅ 首次认证成功，请继续对话。`                                   |
+| 重新认证 | 用户通过 `/reauth` 命令重新认证 | `✅ 重新认证成功，请继续对话。`                                   |
+| 二次认证 | 用户通过敏感操作认证            | `✅ 二次认证成功，请重新发送之前的命令（或回复'确认'）即可执行。` |
 
 ### 防重复机制
 
@@ -103,11 +101,11 @@ sequenceDiagram
 
 本插件目前支持以下聊天渠道:
 
-| 渠道                                                               | 状态        | 说明                                |
-| :----------------------------------------------------------------- | :---------- | :---------------------------------- |
-| **飞书 (Feishu/Lark)**                                             | ✅ 完全支持 | 通过飞书 API 发送认证链接           |
-| **Web/Webchat**                                                     | ⚠️ 暂不支持 | 待开发                              |
-| 其他渠道 (Telegram, Discord, Slack, Signal, iMessage, WhatsApp 等) | ⚠️ 暂不支持 | 待开发                              |
+| 渠道                                                               | 状态        | 说明                        |
+| :----------------------------------------------------------------- | :---------- | :-------------------------- |
+| **飞书 (Feishu/Lark)**                                             | ✅ 完全支持 | 通过飞书 API 发送认证链接   |
+| **Web/Webchat**                                                    | ✅ 完全支持 | 通过 WebSocket 发送认证链接 |
+| 其他渠道 (Telegram, Discord, Slack, Signal, iMessage, WhatsApp 等) | ⚠️ 暂不支持 | 待开发                      |
 
 **注意**:
 
@@ -136,8 +134,7 @@ npm install
 # --- MFA 认证扩展配置 ---
 
 # 权威认证服务账号 (必填)
-DABBY_CLIENT_ID=your_client_id_here
-DABBY_CLIENT_SECRET=your_client_secret_here
+MFA_AUTH_API_KEY=your_api_key_here
 
 # 敏感操作关键词 (自定义拦截列表)
 # 只有当命令中包含这些关键词时，才会被拦截
@@ -153,17 +150,11 @@ MFA_VERIFICATION_DURATION=120000            # 敏感操作验证有效期 (2分
 
 # 存储路径
 MFA_AUTH_STATE_DIR=~/.openclaw/mfa-auth/    # 认证状态持久化目录
-
 ```
 
 **配置详解：**
 
-- `DABBY_CLIENT_ID`: 权威认证服务的 Client ID。
-- `DABBY_CLIENT_SECRET`: 权威认证服务的 Client Secret。
-- `MFA_AUTH_DOMAIN`: **重要！** 如果你的服务器部署在云端，用户无法直接访问内网 IP，请配置此项。
-  - 示例：`http://auth.example.com` 或 `https://auth.example.com`
-  - 如果包含协议头（http/https），插件将直接使用该 URL 前缀，不再附加端口号。
-  - 如果不包含协议头，插件会自动附加 `http://` 和端口号（默认 18801）。
+- `MFA_AUTH_API_KEY`: 权威认证服务的 API Key。
 
 **可选配置：**
 
@@ -215,10 +206,12 @@ MFA_AUTH_STATE_DIR=~/.openclaw/mfa-auth/    # 认证状态持久化目录
 
 **OpenClaw (MFA 插件)**：
 
-> 🔒 **身份验证请求**
+> 🔐 **首次对话需要进行认证**
+>
+> 为了您的账户安全，首次对话前需要完成身份验证。
 >
-> 为了保障安全，首次对话需要进行实名认证。请点击链接完成验证：
-> http://localhost:18801/mfa-auth/session_12345
+> 📱 请点击以下链接完成扫码认证:
+> https://auth.example.com/qr-code?token=abc123...
 >
 > 验证有效期: 5 分钟
 
@@ -235,8 +228,10 @@ MFA_AUTH_STATE_DIR=~/.openclaw/mfa-auth/    # 认证状态持久化目录
 
 > ⚠️ **🔐 该操作需要二次认证**
 >
-> 检测到敏感操作，请点击下方链接进行身份验证：
-> http://localhost:18801/mfa-auth/session_67890
+> 检测到敏感操作: delete一下我电脑桌面的test.txt文件
+>
+> 📱 请点击以下链接完成扫码认证:
+> https://auth.example.com/qr-code?token=def456...
 >
 > 验证有效期: 5 分钟
 >
@@ -257,10 +252,10 @@ MFA_AUTH_STATE_DIR=~/.openclaw/mfa-auth/    # 认证状态持久化目录
 
 > 🔐 **重新认证**
 >
-> 请点击以下链接完成身份验证:
-> http://localhost:18801/mfa-auth/session_abcde
+> 📱 请点击以下链接完成扫码认证:
+> https://auth.example.com/qr-code?token=ghi789...
 >
-> _验证有效期: 5 分钟_
+> 验证有效期: 5 分钟
 
 **用户**：(点击链接 -> 扫码认证成功)
 **OpenClaw (MFA 插件轮询检测到认证)**：