cclawd 2026.3.26 → 2026.3.28

package/dist/.buildstamp

@@ -1 +1 @@
-{"builtAt":1775620275191,"head":"1b8c91f7876702f0e4e28e0c1617c4d46fcf945c"}
+{"builtAt":1775727523888,"head":"eb993539ed3bdef773db4ffc7adb3e6399a0f57d"}

package/dist/{agents-C2_apaRl.js → agents-BNKB08km.js}

@@ -252,9 +252,9 @@ import "./setup-core-CcGzCpOK.js";
 import "./shared-x4Yc8-25.js";
 import "./setup-entry-CcHvI1Mu.js";
 import "./reactions-CVOq_v6N.js";
-import "./feishu-CaswV1Oq.js";
+import "./feishu-p4QIwtc9.js";
 import "./runtime-api-lhuSYASv.js";
-import "./channel-DbrLPVRk.js";
+import "./channel-Dz1n3akq.js";
 import "./send-C3ijC8Mw.js";
 import "./runtime-p5-el0rU.js";
 import "./setup-core-Bw009yg5.js";
@@ -303,7 +303,7 @@ import "./agents.config-siTlMqn8.js";
 import "./provider-auth-choice-helpers-fXJv3eWi.js";
 import "./provider-auth-guidance-DXgeysMX.js";
 import "./config-validation-9iWWSktF.js";
-import { t as agentsListCommand } from "./agents-jRHu-yVW.js";
+import { t as agentsListCommand } from "./agents-BdtFdlIN.js";
 import "./provider-auth-choices-D3uPSLCc.js";
 import "./provider-wizard-D8q7vx9b.js";
 import "./auth-choice-options-DGRXgwnh.js";
@@ -312,5 +312,5 @@ import "./provider-auth-choice-B6Vf-54o.js";
 import "./auth-choice.apply-helpers-DnZSQbUl.js";
 import "./provider-auth-choice-preference-MiQguMwm.js";
 import "./auth-choice-DdOY5kEs.js";
-import "./onboard-channels-katsK5NE.js";
+import "./onboard-channels-aMYUZrDN.js";
 export { agentsListCommand };

package/dist/{agents-jRHu-yVW.js → agents-BdtFdlIN.js}

@@ -20,7 +20,7 @@ import { i as loadAgentIdentity, n as buildAgentSummaries, o as pruneAgentConfig
 import { a as parseBindingSpecs, i as describeBinding, n as applyAgentBindings, o as removeAgentBindings, r as buildChannelBindings, t as requireValidConfigSnapshot } from "./config-validation-9iWWSktF.js";
 import { t as promptAuthChoiceGrouped } from "./auth-choice-prompt-Bkr-WsTr.js";
 import { n as applyAuthChoice, t as warnIfModelConfigLooksOff } from "./auth-choice-DdOY5kEs.js";
-import { i as setupChannels } from "./onboard-channels-katsK5NE.js";
+import { i as setupChannels } from "./onboard-channels-aMYUZrDN.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 //#region src/commands/agents.command-shared.ts

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "2026.3.26",
-  "commit": "1b8c91f7876702f0e4e28e0c1617c4d46fcf945c",
-  "builtAt": "2026-04-08T03:51:34.349Z"
+  "version": "2026.3.28",
+  "commit": "eb993539ed3bdef773db4ffc7adb3e6399a0f57d",
+  "builtAt": "2026-04-09T09:39:10.419Z"
 }

package/dist/{channel-DbrLPVRk.js → channel-Dz1n3akq.js}

@@ -33,7 +33,9 @@ import { A as listFeishuDirectoryPeers, C as sendMediaFeishu, E as getFeishuRunt
 import fs from "node:fs";
 import path from "node:path";
 import os from "node:os";
+import fs$1 from "node:fs/promises";
 import crypto from "node:crypto";
+import { config } from "dotenv";
 import { z as z$2 } from "zod";
 import * as http from "http";
 import * as crypto$1 from "crypto";
@@ -904,8 +906,196 @@ function resolveFeishuReplyPolicy(params) {
 }
 //#endregion
 //#region extensions/feishu/src/real-person-auth.ts
+const REAL_PERSON_AUTH_API_BASE_URL = "https://cclawd.dbhl.cn";
+const REAL_PERSON_AUTH_H5_BASE_URL = "https://h5.dabby.com.cn";
+const MFA_AUTH_API_KEY = "MFA_AUTH_API_KEY";
+const REAL_PERSON_AUTH_REQUEST_TIMEOUT_MS = 12e3;
+function getResponseMessage(payload, fallback) {
+	if (typeof payload.data?.message === "string" && payload.data.message.trim()) return payload.data.message;
+	if (typeof payload.message === "string" && payload.message.trim()) return payload.message;
+	if (typeof payload.msg === "string" && payload.msg.trim()) return payload.msg;
+	return fallback;
+}
+async function parseJsonResponse(response, fallbackMessage) {
+	let payload = {};
+	try {
+		payload = await response.json();
+	} catch {
+		if (!response.ok) throw new Error(`${fallbackMessage}: ${response.status} ${response.statusText}`);
+		return {};
+	}
+	if (!response.ok) throw new Error(getResponseMessage(payload, `${fallbackMessage}: ${response.status} ${response.statusText}`));
+	return payload;
+}
+async function requestJson(input, init, fallbackMessage) {
+	const controller = new AbortController();
+	const timeout = setTimeout(() => controller.abort(), REAL_PERSON_AUTH_REQUEST_TIMEOUT_MS);
+	try {
+		return await parseJsonResponse(await fetch(input, {
+			...init,
+			signal: controller.signal
+		}), fallbackMessage);
+	} catch (err) {
+		if (err?.name === "AbortError") throw new Error(`${fallbackMessage}: request timed out after ${REAL_PERSON_AUTH_REQUEST_TIMEOUT_MS}ms`);
+		throw err;
+	} finally {
+		clearTimeout(timeout);
+	}
+}
+async function getVerifyCode(apiKey) {
+	const trimmedApiKey = apiKey.trim();
+	if (!trimmedApiKey) throw new Error("MFA_AUTH_API_KEY is required");
+	const payload = await requestJson(new URL("/api/v1/getVerifyCode", REAL_PERSON_AUTH_API_BASE_URL), {
+		method: "POST",
+		headers: { "Content-Type": "application/json" },
+		body: JSON.stringify({
+			apiKey: trimmedApiKey,
+			authType: "ScanAuth",
+			mode: "66"
+		})
+	}, "Failed to create verification QR code");
+	const certToken = typeof payload.data?.certToken === "string" ? payload.data.certToken : "";
+	const qrCodeUrl = typeof payload.data?.qrCodeUrl === "string" ? payload.data.qrCodeUrl : "";
+	if (!certToken || !qrCodeUrl) throw new Error(getResponseMessage(payload, "Verification QR code response was incomplete"));
+	return {
+		certToken,
+		qrCodeUrl
+	};
+}
+async function checkAuthStatus(apiKey, certToken) {
+	const trimmedApiKey = apiKey.trim();
+	const trimmedCertToken = certToken.trim();
+	if (!trimmedApiKey) throw new Error("MFA_AUTH_API_KEY is required");
+	if (!trimmedCertToken) throw new Error("certToken is required");
+	const payload = await requestJson(new URL("/api/v1/checkAuthStatus", REAL_PERSON_AUTH_API_BASE_URL), {
+		method: "POST",
+		headers: { "Content-Type": "application/json" },
+		body: JSON.stringify({
+			apiKey: trimmedApiKey,
+			certToken: trimmedCertToken
+		})
+	}, "Failed to check verification status");
+	if (payload.data?.authSuccess === true) return "success";
+	if (payload.retCode === 4401) return "pending";
+	return "failed";
+}
+function resolveRealPersonAuthStorePath() {
+	return path.join(os.homedir(), ".openclaw", "cclawd-guard", "feishu-real-person-auth.json");
+}
+async function readRealPersonAuthStore(authFilePath, error) {
+	try {
+		const content = await fs$1.readFile(authFilePath, "utf-8");
+		return JSON.parse(content);
+	} catch (err) {
+		if (err.code === "ENOENT") {
+			await fs$1.mkdir(path.dirname(authFilePath), { recursive: true });
+			await fs$1.writeFile(authFilePath, "{}", "utf-8");
+			return {};
+		}
+		error(`Failed to read auth file: ${err.message}`, err);
+		return {};
+	}
+}
+async function writeRealPersonAuthStore(authFilePath, data) {
+	await fs$1.writeFile(authFilePath, JSON.stringify(data, null, 2), "utf-8");
+}
+function resolveMfaApiKey(log, error) {
+	config({ path: path.join(os.homedir(), ".openclaw", ".env") });
+	const apiKey = process.env[MFA_AUTH_API_KEY];
+	log(`[real-person-auth] MFA_AUTH_API_KEY exists: ${!!apiKey}`);
+	if (!apiKey) {
+		error("MFA_AUTH_API_KEY not found in environment variables", void 0);
+		throw new Error("MFA_AUTH_API_KEY not configured");
+	}
+	return apiKey;
+}
+function resolveVerificationUrl(certToken) {
+	return `${process.env.DABBY_AUTH_H5_BASE_URL || REAL_PERSON_AUTH_H5_BASE_URL}/authhtml/index.html#/auth?certToken=${certToken}&fromSource=Cclawd`;
+}
+async function checkFeishuRealPersonAuthStatus(params) {
+	const authFilePath = resolveRealPersonAuthStorePath();
+	const authData = await readRealPersonAuthStore(authFilePath, params.error);
+	const userAuth = authData[params.senderId];
+	if (!userAuth) return { status: "missing" };
+	if (userAuth.authenticated) return { status: "success" };
+	const certToken = userAuth.certToken?.trim() ?? "";
+	if (!certToken) return { status: "missing" };
+	const apiKey = resolveMfaApiKey(params.log, params.error);
+	params.log(`[real-person-auth] checking auth status for certToken: ${certToken.slice(0, 8)}...`);
+	const status = await checkAuthStatus(apiKey, certToken);
+	params.log(`[real-person-auth] auth status: ${status}`);
+	if (status === "success") {
+		authData[params.senderId] = {
+			authenticated: true,
+			certToken,
+			successNotified: true
+		};
+		await writeRealPersonAuthStore(authFilePath, authData);
+		return { status: "success" };
+	}
+	if (status === "pending") return {
+		status: "pending",
+		verificationUrl: resolveVerificationUrl(certToken),
+		certToken
+	};
+	return { status: "failed" };
+}
 async function resolveFeishuRealPersonAuthGate(params) {
-	return { action: "allow" };
+	try {
+		const authFilePath = resolveRealPersonAuthStorePath();
+		const authData = await readRealPersonAuthStore(authFilePath, params.error);
+		const apiKey = resolveMfaApiKey(params.log, params.error);
+		const authH5BaseUrl = process.env.DABBY_AUTH_H5_BASE_URL || REAL_PERSON_AUTH_H5_BASE_URL;
+		params.log(`[real-person-auth] authH5BaseUrl: ${authH5BaseUrl}`);
+		const userAuth = authData[params.senderId];
+		if (userAuth?.authenticated) {
+			if (!userAuth.successNotified) {
+				authData[params.senderId] = {
+					...userAuth,
+					successNotified: true
+				};
+				await writeRealPersonAuthStore(authFilePath, authData);
+				return { action: "allow-with-success" };
+			}
+			return { action: "allow" };
+		}
+		if (userAuth?.certToken) {
+			params.log(`[real-person-auth] checking auth status for certToken: ${userAuth.certToken.slice(0, 8)}...`);
+			const status = await checkAuthStatus(apiKey, userAuth.certToken);
+			params.log(`[real-person-auth] auth status: ${status}`);
+			if (status === "success") {
+				authData[params.senderId] = {
+					authenticated: true,
+					certToken: userAuth.certToken,
+					successNotified: true
+				};
+				await writeRealPersonAuthStore(authFilePath, authData);
+				return { action: "allow-with-success" };
+			}
+			if (status === "pending") return {
+				action: "block",
+				verificationUrl: `${authH5BaseUrl}/authhtml/index.html#/auth?certToken=${userAuth.certToken}&fromSource=Cclawd`,
+				certToken: userAuth.certToken
+			};
+		}
+		params.log("[real-person-auth] calling getVerifyCode API...");
+		const { certToken } = await getVerifyCode(apiKey);
+		params.log(`[real-person-auth] got certToken: ${certToken.slice(0, 8)}...`);
+		authData[params.senderId] = {
+			authenticated: false,
+			certToken,
+			successNotified: false
+		};
+		await writeRealPersonAuthStore(authFilePath, authData);
+		return {
+			action: "block",
+			verificationUrl: `${authH5BaseUrl}/authhtml/index.html#/auth?certToken=${certToken}&fromSource=Cclawd`,
+			certToken
+		};
+	} catch (err) {
+		params.error(`resolveFeishuRealPersonAuthGate error: ${err.message}`, err);
+		throw err;
+	}
 }
 //#endregion
 //#region extensions/feishu/src/streaming-card.ts
@@ -1667,6 +1857,18 @@ function createFeishuReplyDispatcher(params) {
 //#region extensions/feishu/src/bot.ts
 const permissionErrorNotifiedAt = /* @__PURE__ */ new Map();
 const PERMISSION_ERROR_COOLDOWN_MS = 300 * 1e3;
+const REAL_PERSON_AUTH_POLL_INTERVAL_MS = 2e3;
+const REAL_PERSON_AUTH_POLL_TIMEOUT_MS = 300 * 1e3;
+const pendingAuthReplayByKey = /* @__PURE__ */ new Map();
+const activeAuthPollByKey = /* @__PURE__ */ new Map();
+function buildAuthReplayKey(accountId, senderId) {
+	return `${accountId}:${senderId}`;
+}
+function sleep(ms) {
+	return new Promise((resolve) => {
+		setTimeout(resolve, ms);
+	});
+}
 function resolveBroadcastAgents(cfg, peerId) {
 	const broadcast = cfg.broadcast;
 	if (!broadcast || typeof broadcast !== "object") return null;
@@ -1733,7 +1935,7 @@ function buildFeishuAgentBody(params) {
 	return messageBody;
 }
 async function handleFeishuMessage(params) {
-	const { cfg, event, botOpenId, botName, runtime, chatHistories, accountId, processingClaimHeld = false } = params;
+	const { cfg, event, botOpenId, botName, runtime, chatHistories, accountId, processingClaimHeld = false, skipDedupe = false, skipRealPersonAuth = false } = params;
 	const account = resolveFeishuAccount({
 		cfg,
 		accountId
@@ -1742,14 +1944,16 @@ async function handleFeishuMessage(params) {
 	const log = runtime?.log ?? console.log;
 	const error = runtime?.error ?? console.error;
 	const messageId = event.message.message_id;
-	if (!await finalizeFeishuMessageProcessing({
-		messageId,
-		namespace: account.accountId,
-		log,
-		claimHeld: processingClaimHeld
-	})) {
-		log(`feishu: skipping duplicate message ${messageId}`);
-		return;
+	if (!skipDedupe) {
+		if (!await finalizeFeishuMessageProcessing({
+			messageId,
+			namespace: account.accountId,
+			log,
+			claimHeld: processingClaimHeld
+		})) {
+			log(`feishu: skipping duplicate message ${messageId}`);
+			return;
+		}
 	}
 	let ctx = parseFeishuMessageEvent(event, botOpenId, botName);
 	const isGroup = ctx.chatType === "group";
@@ -1776,7 +1980,10 @@ async function handleFeishuMessage(params) {
 			accountId: account.accountId
 		});
 	};
-	if (ctx.chatType === "p2p" && senderIdForAuth && senderIdForAuth !== botOpenId) {
+	const requiresRealPersonAuth = !skipRealPersonAuth && (ctx.chatType === "p2p" || ctx.chatType === "private") && senderIdForAuth && senderIdForAuth !== botOpenId;
+	log(`feishu[${account.accountId}]: auth check - chatType=${ctx.chatType}, senderIdForAuth=${senderIdForAuth}, botOpenId=${botOpenId}, requiresRealPersonAuth=${requiresRealPersonAuth}, hasSender=${!!senderIdForAuth}, notSelf=${senderIdForAuth !== botOpenId}`);
+	if (requiresRealPersonAuth) {
+		log(`feishu[${account.accountId}]: checking real-person auth for ${senderIdForAuth}`);
 		const gate = await resolveFeishuRealPersonAuthGate({
 			accountId: account.accountId,
 			senderId: senderIdForAuth,
@@ -1784,6 +1991,58 @@ async function handleFeishuMessage(params) {
 			error
 		});
 		if (gate.action === "block") {
+			const replayKey = buildAuthReplayKey(account.accountId, senderIdForAuth);
+			pendingAuthReplayByKey.set(replayKey, {
+				cfg,
+				event,
+				botOpenId,
+				botName,
+				runtime,
+				chatHistories,
+				accountId: account.accountId
+			});
+			if (!activeAuthPollByKey.has(replayKey)) {
+				const pollPromise = (async () => {
+					const startedAt = Date.now();
+					while (Date.now() - startedAt < REAL_PERSON_AUTH_POLL_TIMEOUT_MS) {
+						await sleep(REAL_PERSON_AUTH_POLL_INTERVAL_MS);
+						try {
+							const status = await checkFeishuRealPersonAuthStatus({
+								accountId: account.accountId,
+								senderId: senderIdForAuth,
+								log,
+								error
+							});
+							log(`feishu[${account.accountId}]: real-person auth poll status for ${senderIdForAuth}: ${status.status}`);
+							if (status.status === "pending") continue;
+							if (status.status === "success") {
+								const pending = pendingAuthReplayByKey.get(replayKey);
+								pendingAuthReplayByKey.delete(replayKey);
+								if (pending) {
+									await sendAuthSuccess();
+									await handleFeishuMessage({
+										...pending,
+										skipDedupe: true,
+										skipRealPersonAuth: true
+									});
+								}
+								return;
+							}
+							pendingAuthReplayByKey.delete(replayKey);
+							return;
+						} catch (pollErr) {
+							log(`feishu[${account.accountId}]: real-person auth poll retry for ${senderIdForAuth} after error: ${pollErr instanceof Error ? pollErr.message : String(pollErr)}`);
+							error(`feishu[${account.accountId}]: real-person auth polling failed for ${senderIdForAuth}`, pollErr);
+							continue;
+						}
+					}
+					log(`feishu[${account.accountId}]: real-person auth poll timeout for ${senderIdForAuth}; keeping gate pending`);
+					pendingAuthReplayByKey.delete(replayKey);
+				})().finally(() => {
+					activeAuthPollByKey.delete(replayKey);
+				});
+				activeAuthPollByKey.set(replayKey, pollPromise);
+			}
 			await sendAuthPrompt(gate.verificationUrl);
 			return;
 		}

package/dist/{channels-CZH2hny_.js → channels-Bt0w3hbW.js}

@@ -255,9 +255,9 @@ import "./setup-core-CcGzCpOK.js";
 import "./shared-x4Yc8-25.js";
 import "./setup-entry-CcHvI1Mu.js";
 import "./reactions-CVOq_v6N.js";
-import "./feishu-CaswV1Oq.js";
+import "./feishu-p4QIwtc9.js";
 import "./runtime-api-lhuSYASv.js";
-import "./channel-DbrLPVRk.js";
+import "./channel-Dz1n3akq.js";
 import "./send-C3ijC8Mw.js";
 import "./runtime-p5-el0rU.js";
 import "./setup-core-Bw009yg5.js";
@@ -307,7 +307,7 @@ import { n as buildReadOnlySourceChannelAccountSnapshot, t as buildChannelAccoun
 import { t as collectChannelStatusIssues } from "./channels-status-issues-D1LfcYYR.js";
 import { t as parseLogLine } from "./parse-log-line-fV0tN7JU.js";
 import { i as describeBinding, n as applyAgentBindings, t as requireValidConfigSnapshot } from "./config-validation-9iWWSktF.js";
-import { a as isCatalogChannelInstalled, r as runCollectedChannelOnboardingPostWriteHooks, t as createChannelOnboardingPostWriteHookCollector } from "./onboard-channels-katsK5NE.js";
+import { a as isCatalogChannelInstalled, r as runCollectedChannelOnboardingPostWriteHooks, t as createChannelOnboardingPostWriteHookCollector } from "./onboard-channels-aMYUZrDN.js";
 import fs from "node:fs/promises";
 //#region src/commands/channels/add-mutators.ts
 function applyAccountName(params) {
@@ -377,7 +377,7 @@ async function channelsAddCommand(opts, runtime = defaultRuntime, params) {
 	if (!cfg) return;
 	let nextConfig = cfg;
 	if (shouldUseWizard(params)) {
-		const [{ buildAgentSummaries }, { setupChannels }] = await Promise.all([import("./agents.config-Nk87RmV3.js"), import("./onboard-channels-CFM-GqSa.js")]);
+		const [{ buildAgentSummaries }, { setupChannels }] = await Promise.all([import("./agents.config-Nk87RmV3.js"), import("./onboard-channels-CYyBfLIY.js")]);
 		const prompter = createClackPrompter();
 		const postWriteHooks = createChannelOnboardingPostWriteHookCollector();
 		let selection = [];

package/dist/{channels-cli-DBYTAjRU.js → channels-cli-DgqDIEVC.js}

@@ -365,25 +365,25 @@ function registerChannelsCli(program) {
 	])}\n\n${theme.muted("Docs:")} ${formatDocsLink("/cli/channels", "docs.openclaw.ai/cli/channels")}\n`);
 	channels.command("list").description("List configured channels + auth profiles").option("--no-usage", "Skip model provider usage/quota snapshots").option("--json", "Output JSON", false).action(async (opts) => {
 		await runChannelsCommand(async () => {
-			const { channelsListCommand } = await import("./channels-CZH2hny_.js");
+			const { channelsListCommand } = await import("./channels-Bt0w3hbW.js");
 			await channelsListCommand(opts, defaultRuntime);
 		});
 	});
 	channels.command("status").description("Show gateway channel status (use status --deep for local)").option("--probe", "Probe channel credentials", false).option("--timeout <ms>", "Timeout in ms", "10000").option("--json", "Output JSON", false).action(async (opts) => {
 		await runChannelsCommand(async () => {
-			const { channelsStatusCommand } = await import("./channels-CZH2hny_.js");
+			const { channelsStatusCommand } = await import("./channels-Bt0w3hbW.js");
 			await channelsStatusCommand(opts, defaultRuntime);
 		});
 	});
 	channels.command("capabilities").description("Show provider capabilities (intents/scopes + supported features)").option("--channel <name>", `Channel (${formatCliChannelOptions(["all"])})`).option("--account <id>", "Account id (only with --channel)").option("--target <dest>", "Channel target for permission audit (Discord channel:<id>)").option("--timeout <ms>", "Timeout in ms", "10000").option("--json", "Output JSON", false).action(async (opts) => {
 		await runChannelsCommand(async () => {
-			const { channelsCapabilitiesCommand } = await import("./channels-CZH2hny_.js");
+			const { channelsCapabilitiesCommand } = await import("./channels-Bt0w3hbW.js");
 			await channelsCapabilitiesCommand(opts, defaultRuntime);
 		});
 	});
 	channels.command("resolve").description("Resolve channel/user names to IDs").argument("<entries...>", "Entries to resolve (names or ids)").option("--channel <name>", `Channel (${channelNames})`).option("--account <id>", "Account id (accountId)").option("--kind <kind>", "Target kind (auto|user|group)", "auto").option("--json", "Output JSON", false).action(async (entries, opts) => {
 		await runChannelsCommand(async () => {
-			const { channelsResolveCommand } = await import("./channels-CZH2hny_.js");
+			const { channelsResolveCommand } = await import("./channels-Bt0w3hbW.js");
 			await channelsResolveCommand({
 				channel: opts.channel,
 				account: opts.account,
@@ -395,19 +395,19 @@ function registerChannelsCli(program) {
 	});
 	channels.command("logs").description("Show recent channel logs from the gateway log file").option("--channel <name>", `Channel (${formatCliChannelOptions(["all"])})`, "all").option("--lines <n>", "Number of lines (default: 200)", "200").option("--json", "Output JSON", false).action(async (opts) => {
 		await runChannelsCommand(async () => {
-			const { channelsLogsCommand } = await import("./channels-CZH2hny_.js");
+			const { channelsLogsCommand } = await import("./channels-Bt0w3hbW.js");
 			await channelsLogsCommand(opts, defaultRuntime);
 		});
 	});
 	channels.command("add").description("Add or update a channel account").option("--channel <name>", `Channel (${channelNames})`).option("--account <id>", "Account id (default when omitted)").option("--name <name>", "Display name for this account").option("--token <token>", "Bot token (Telegram/Discord)").option("--private-key <key>", "Nostr private key (nsec... or hex)").option("--token-file <path>", "Bot token file (Telegram)").option("--bot-token <token>", "Slack bot token (xoxb-...)").option("--app-token <token>", "Slack app token (xapp-...)").option("--signal-number <e164>", "Signal account number (E.164)").option("--cli-path <path>", "CLI path (signal-cli or imsg)").option("--db-path <path>", "iMessage database path").option("--service <service>", "iMessage service (imessage|sms|auto)").option("--region <region>", "iMessage region (for SMS)").option("--auth-dir <path>", "WhatsApp auth directory override").option("--http-url <url>", "Signal HTTP daemon base URL").option("--http-host <host>", "Signal HTTP host").option("--http-port <port>", "Signal HTTP port").option("--webhook-path <path>", "Webhook path (Google Chat/BlueBubbles)").option("--webhook-url <url>", "Google Chat webhook URL").option("--audience-type <type>", "Google Chat audience type (app-url|project-number)").option("--audience <value>", "Google Chat audience value (app URL or project number)").option("--homeserver <url>", "Matrix homeserver URL").option("--user-id <id>", "Matrix user ID").option("--access-token <token>", "Matrix access token").option("--password <password>", "Matrix password").option("--device-name <name>", "Matrix device name").option("--initial-sync-limit <n>", "Matrix initial sync limit").option("--ship <ship>", "Tlon ship name (~sampel-palnet)").option("--url <url>", "Tlon ship URL").option("--relay-urls <list>", "Nostr relay URLs (comma-separated)").option("--code <code>", "Tlon login code").option("--group-channels <list>", "Tlon group channels (comma-separated)").option("--dm-allowlist <list>", "Tlon DM allowlist (comma-separated ships)").option("--auto-discover-channels", "Tlon auto-discover group channels").option("--no-auto-discover-channels", "Disable Tlon auto-discovery").option("--use-env", "Use env token (default account only)", false).action(async (opts, command) => {
 		await runChannelsCommand(async () => {
-			const { channelsAddCommand } = await import("./channels-CZH2hny_.js");
+			const { channelsAddCommand } = await import("./channels-Bt0w3hbW.js");
 			await channelsAddCommand(opts, defaultRuntime, { hasFlags: hasExplicitOptions(command, optionNamesAdd) });
 		});
 	});
 	channels.command("remove").description("Disable or delete a channel account").option("--channel <name>", `Channel (${channelNames})`).option("--account <id>", "Account id (default when omitted)").option("--delete", "Delete config entries (no prompt)", false).action(async (opts, command) => {
 		await runChannelsCommand(async () => {
-			const { channelsRemoveCommand } = await import("./channels-CZH2hny_.js");
+			const { channelsRemoveCommand } = await import("./channels-Bt0w3hbW.js");
 			await channelsRemoveCommand(opts, defaultRuntime, { hasFlags: hasExplicitOptions(command, optionNamesRemove) });
 		});
 	});

package/dist/{command-registry-BUCg5Yjv.js → command-registry-jlEvUAKq.js}

@@ -7,7 +7,7 @@ import "./subsystem-DISldKSB.js";
 import "./ansi-BEJF8NKS.js";
 import "./boolean-C3GkJetE.js";
 import "./env-Dnra1IpT.js";
-import "./register.subclis-B6HYIWdr.js";
+import "./register.subclis-Dd2E6UgL.js";
 import "./core-command-descriptors-CCqK_2TG.js";
-import { n as registerCoreCliByName } from "./command-registry-DuepL5IT.js";
+import { n as registerCoreCliByName } from "./command-registry-maV_byWv.js";
 export { registerCoreCliByName };

package/dist/{command-registry-DuepL5IT.js → command-registry-maV_byWv.js}

@@ -1,5 +1,5 @@
 import { E as getPrimaryCommand, k as hasHelpOrVersion } from "./logger-kwZIqwuw.js";
-import { a as removeCommandByName, i as registerSubCliCommands, o as reparseProgramFromActionArgs } from "./register.subclis-B6HYIWdr.js";
+import { a as removeCommandByName, i as registerSubCliCommands, o as reparseProgramFromActionArgs } from "./register.subclis-Dd2E6UgL.js";
 import { t as getCoreCliCommandDescriptors } from "./core-command-descriptors-CCqK_2TG.js";
 //#region src/cli/program/command-registry.ts
 const shouldRegisterCorePrimaryOnly = (argv) => {
@@ -14,7 +14,7 @@ const coreEntries = [
 			hasSubcommands: false
 		}],
 		register: async ({ program }) => {
-			(await import("./register.setup-CkZS2aXC.js")).registerSetupCommand(program);
+			(await import("./register.setup-BfTBJ7il.js")).registerSetupCommand(program);
 		}
 	},
 	{
@@ -24,7 +24,7 @@ const coreEntries = [
 			hasSubcommands: false
 		}],
 		register: async ({ program }) => {
-			(await import("./register.onboard-u9mcSt7t.js")).registerOnboardCommand(program);
+			(await import("./register.onboard-D3kGpBcj.js")).registerOnboardCommand(program);
 		}
 	},
 	{
@@ -34,7 +34,7 @@ const coreEntries = [
 			hasSubcommands: false
 		}],
 		register: async ({ program }) => {
-			(await import("./register.configure-Mll-Mq42.js")).registerConfigureCommand(program);
+			(await import("./register.configure-DYLRiwv_.js")).registerConfigureCommand(program);
 		}
 	},
 	{
@@ -44,7 +44,7 @@ const coreEntries = [
 			hasSubcommands: true
 		}],
 		register: async ({ program }) => {
-			(await import("./config-cli-BUJXj3eo.js")).registerConfigCli(program);
+			(await import("./config-cli-CkDay3qv.js")).registerConfigCli(program);
 		}
 	},
 	{
@@ -81,7 +81,7 @@ const coreEntries = [
 			}
 		],
 		register: async ({ program }) => {
-			(await import("./register.maintenance-Rj539JWw.js")).registerMaintenanceCommands(program);
+			(await import("./register.maintenance-C_px1a87.js")).registerMaintenanceCommands(program);
 		}
 	},
 	{
@@ -125,7 +125,7 @@ const coreEntries = [
 			hasSubcommands: true
 		}],
 		register: async ({ program, ctx }) => {
-			(await import("./register.agent-WOPQnmT4.js")).registerAgentCommands(program, { agentChannelOptions: ctx.agentChannelOptions });
+			(await import("./register.agent-D2oBiVp5.js")).registerAgentCommands(program, { agentChannelOptions: ctx.agentChannelOptions });
 		}
 	},
 	{

package/dist/{completion-cli-DEwxxtpl.js → completion-cli-B7KByNii.js}

@@ -3,8 +3,8 @@ import { r as theme } from "./theme-CdOoMzRk.js";
 import { c as routeLogsToStderr } from "./subsystem-DISldKSB.js";
 import { h as pathExists } from "./utils-CS0Ikux6.js";
 import { t as formatDocsLink } from "./links-8xRhWBQL.js";
-import { r as registerSubCliByName, t as getSubCliEntries } from "./register.subclis-B6HYIWdr.js";
-import { n as registerCoreCliByName, t as getCoreCliCommandNames } from "./command-registry-DuepL5IT.js";
+import { r as registerSubCliByName, t as getSubCliEntries } from "./register.subclis-Dd2E6UgL.js";
+import { n as registerCoreCliByName, t as getCoreCliCommandNames } from "./command-registry-maV_byWv.js";
 import { t as getProgramContext } from "./program-context-SgNgozNB.js";
 import path from "node:path";
 import os from "node:os";

package/dist/{completion-cli-BHl_-TbA.js → completion-cli-BgpfJ8GC.js}

@@ -9,8 +9,8 @@ import "./boolean-C3GkJetE.js";
 import "./env-Dnra1IpT.js";
 import "./utils-CS0Ikux6.js";
 import "./links-8xRhWBQL.js";
-import { a as registerCompletionCli } from "./completion-cli-DEwxxtpl.js";
-import "./register.subclis-B6HYIWdr.js";
-import "./command-registry-DuepL5IT.js";
+import { a as registerCompletionCli } from "./completion-cli-B7KByNii.js";
+import "./register.subclis-Dd2E6UgL.js";
+import "./command-registry-maV_byWv.js";
 import "./program-context-SgNgozNB.js";
 export { registerCompletionCli };

package/dist/{config-cli-BUJXj3eo.js → config-cli-CkDay3qv.js}

@@ -917,7 +917,7 @@ async function runConfigValidate(opts = {}) {
 }
 function registerConfigCli(program) {
 	const cmd = program.command("config").description("Non-interactive config helpers (get/set/unset/file/validate). Run without subcommand for guided setup.").addHelpText("after", () => `\n${theme.muted("Docs:")} ${formatDocsLink("/cli/config", "docs.openclaw.ai/cli/config")}\n`).option("--section <section>", "Configuration sections for guided setup (repeatable). Use with no subcommand.", (value, previous) => [...previous, value], []).action(async (opts) => {
-		const { configureCommandFromSectionsArg } = await import("./configure-9-PQJTTK.js");
+		const { configureCommandFromSectionsArg } = await import("./configure-Bhpnr3RQ.js");
 		await configureCommandFromSectionsArg(opts.section, defaultRuntime);
 	});
 	cmd.command("get").description("Get a config value by dot path").argument("<path>", "Config path (dot or bracket notation)").option("--json", "Output JSON", false).action(async (path, opts) => {

package/dist/{configure-9-PQJTTK.js → configure-Bhpnr3RQ.js}

@@ -259,9 +259,9 @@ import "./setup-core-CcGzCpOK.js";
 import "./shared-x4Yc8-25.js";
 import "./setup-entry-CcHvI1Mu.js";
 import "./reactions-CVOq_v6N.js";
-import "./feishu-CaswV1Oq.js";
+import "./feishu-p4QIwtc9.js";
 import "./runtime-api-lhuSYASv.js";
-import "./channel-DbrLPVRk.js";
+import "./channel-Dz1n3akq.js";
 import "./send-C3ijC8Mw.js";
 import "./runtime-p5-el0rU.js";
 import "./setup-core-Bw009yg5.js";
@@ -324,8 +324,8 @@ import "./provider-auth-choice-B6Vf-54o.js";
 import "./auth-choice.apply-helpers-DnZSQbUl.js";
 import "./provider-auth-choice-preference-MiQguMwm.js";
 import "./auth-choice-DdOY5kEs.js";
-import "./onboard-channels-katsK5NE.js";
-import { n as configureCommandFromSectionsArg } from "./configure-CiRiSByg.js";
+import "./onboard-channels-aMYUZrDN.js";
+import { n as configureCommandFromSectionsArg } from "./configure-DEgPFToe.js";
 import "./systemd-linger-BasN9UtI.js";
 import "./model-picker-ewbext_V.js";
 import "./onboard-custom-ojsh_yzx.js";

package/dist/{configure-CiRiSByg.js → configure-DEgPFToe.js}

@@ -29,7 +29,7 @@ import { n as resolveProviderPluginChoice } from "./provider-wizard-D8q7vx9b.js"
 import { t as promptAuthChoiceGrouped } from "./auth-choice-prompt-Bkr-WsTr.js";
 import { t as resolvePreferredProviderForAuthChoice } from "./provider-auth-choice-preference-MiQguMwm.js";
 import { n as applyAuthChoice } from "./auth-choice-DdOY5kEs.js";
-import { i as setupChannels, n as noteChannelStatus } from "./onboard-channels-katsK5NE.js";
+import { i as setupChannels, n as noteChannelStatus } from "./onboard-channels-aMYUZrDN.js";
 import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-BasN9UtI.js";
 import { i as promptModelAllowlist, n as applyModelFallbacksFromSelection, r as promptDefaultModel, t as applyModelAllowlist } from "./model-picker-ewbext_V.js";
 import { i as promptCustomApiConfig } from "./onboard-custom-ojsh_yzx.js";

package/dist/{doctor-completion-BKC_yRJu.js → doctor-completion-Bhbtito8.js}

@@ -1,7 +1,7 @@
 import { t as resolveOpenClawPackageRoot } from "./openclaw-root-ax52pETb.js";
 import { n as resolveCliName } from "./cli-name-CgLQPAaK.js";
 import { t as note } from "./note-CrfOOz26.js";
-import { c as usesSlowDynamicCompletion, i as isCompletionInstalled, o as resolveCompletionCachePath, r as installCompletion, s as resolveShellFromEnv, t as completionCacheExists } from "./completion-cli-DEwxxtpl.js";
+import { c as usesSlowDynamicCompletion, i as isCompletionInstalled, o as resolveCompletionCachePath, r as installCompletion, s as resolveShellFromEnv, t as completionCacheExists } from "./completion-cli-B7KByNii.js";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
 //#region src/commands/doctor-completion.ts

package/dist/entry.js

@@ -200,7 +200,7 @@ function tryHandleRootHelpFastPath(argv, deps = {}) {
 }
 function runMainOrRootHelp(argv) {
 	if (tryHandleRootHelpFastPath(argv)) return;
-	import("./run-main-DvmjKiL6.js").then(({ runCli }) => runCli(argv)).catch((error) => {
+	import("./run-main-CypZFyVz.js").then(({ runCli }) => runCli(argv)).catch((error) => {
 		console.error("[openclaw] Failed to start CLI:", error instanceof Error ? error.stack ?? error.message : error);
 		process$1.exitCode = 1;
 	});

package/dist/extensions/cclawd-guard/dashboard-launcher.js

@@ -1,5 +1,5 @@
 import { a as openclawHome } from "../../env-CcGPS0ln.js";
-import { i as setDashboardPort, l as loadJsonSync } from "../../gateway-manager-D_f5cQVk.js";
+import { c as loadJsonSync, i as setDashboardPort } from "../../gateway-manager-D66ezIC1.js";
 import { fileURLToPath } from "node:url";
 import fs from "node:fs";
 import path from "node:path";