hyperclaw 5.0.0 → 5.0.2

package/dist/daemon-CindY8OK.js

@@ -0,0 +1,318 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const require_server = require('./server-CbTTpB5m.js');
+const chalk = require_chunk.__toESM(require("chalk"));
+const ora = require_chunk.__toESM(require("ora"));
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+const os = require_chunk.__toESM(require("os"));
+const child_process = require_chunk.__toESM(require("child_process"));
+const util = require_chunk.__toESM(require("util"));
+
+//#region src/infra/daemon.ts
+const execAsync = (0, util.promisify)(child_process.exec);
+const HC_DIR = path.default.join(os.default.homedir(), ".hyperclaw");
+const PID_FILE = path.default.join(HC_DIR, "gateway.pid");
+var DaemonManager = class {
+	async install() {
+		const platform = os.default.platform();
+		if (platform === "darwin") await this.installMacOS();
+		else if (platform === "linux") await this.installLinux();
+		else if (platform === "win32") await this.installWindows();
+	}
+	async uninstall() {
+		const platform = os.default.platform();
+		if (platform === "darwin") {
+			const plistPath = path.default.join(os.default.homedir(), "Library/LaunchAgents/ai.hyperclaw.gateway.plist");
+			try {
+				await execAsync(`launchctl unload ${plistPath}`);
+			} catch {}
+			await fs_extra.default.remove(plistPath).catch(() => {});
+			console.log(chalk.default.green("  ✅ LaunchAgent removed"));
+		} else if (platform === "linux") {
+			try {
+				await execAsync("systemctl --user disable --now hyperclaw.service");
+			} catch {}
+			const unitFile = path.default.join(os.default.homedir(), ".config", "systemd", "user", "hyperclaw.service");
+			await fs_extra.default.remove(unitFile).catch(() => {});
+			try {
+				await execAsync("systemctl --user daemon-reload");
+			} catch {}
+			console.log(chalk.default.green("  ✅ Systemd user service removed"));
+		} else if (platform === "win32") try {
+			await execAsync(`schtasks /end /tn "HyperClaw Gateway"`).catch(() => {});
+			await execAsync(`schtasks /delete /tn "HyperClaw Gateway" /f`);
+			console.log(chalk.default.green("  ✅ Task Scheduler entry removed"));
+		} catch (e) {
+			console.log(chalk.default.yellow("  ⚠  Could not remove task:"), e.message);
+			console.log(chalk.default.gray("  Run manually: schtasks /delete /tn \"HyperClaw Gateway\" /f"));
+		}
+	}
+	async start() {
+		const s = (0, ora.default)("🩸 Starting HyperClaw daemon...").start();
+		try {
+			const server = await require_server.startGateway({ daemonMode: true });
+			await fs_extra.default.ensureDir(HC_DIR);
+			await fs_extra.default.writeFile(PID_FILE, String(process.pid), "utf8");
+			s.succeed(`🩸 Daemon started — ws://127.0.0.1:${server.getStatus().port}`);
+			const shutdown = async () => {
+				const active = require_server.getActiveServer();
+				if (active) await active.stop();
+				try {
+					await fs_extra.default.remove(PID_FILE);
+				} catch {}
+				process.exit(0);
+			};
+			process.on("SIGINT", shutdown);
+			process.on("SIGTERM", shutdown);
+		} catch (e) {
+			s.fail(`Failed to start: ${e.message}`);
+			throw e;
+		}
+	}
+	async stop() {
+		const pidPath = PID_FILE;
+		if (!await fs_extra.default.pathExists(pidPath)) {
+			console.log(chalk.default.gray("  Gateway not running (no PID file)"));
+			return;
+		}
+		const s = (0, ora.default)("🩸 Stopping daemon...").start();
+		try {
+			const pid = parseInt(await fs_extra.default.readFile(pidPath, "utf8"), 10);
+			process.kill(pid, "SIGTERM");
+			await fs_extra.default.remove(pidPath);
+			s.succeed("🩸 Daemon stopped");
+		} catch (e) {
+			await fs_extra.default.remove(pidPath).catch(() => {});
+			if (e.code === "ESRCH") s.succeed("Gateway was not running");
+			else s.fail(`Stop failed: ${e.message}`);
+		}
+	}
+	async restart() {
+		await this.stop();
+		await new Promise((r) => setTimeout(r, 500));
+		await this.start();
+	}
+	async status() {
+		const pidPath = PID_FILE;
+		let running = false;
+		let pid = null;
+		let port = 18789;
+		if (await fs_extra.default.pathExists(pidPath)) try {
+			pid = parseInt(await fs_extra.default.readFile(pidPath, "utf8"), 10);
+			process.kill(pid, 0);
+			running = true;
+		} catch {
+			await fs_extra.default.remove(pidPath).catch(() => {});
+		}
+		try {
+			const cfg = await fs_extra.default.readJson(path.default.join(HC_DIR, "hyperclaw.json"));
+			if (cfg?.gateway?.port) port = cfg.gateway.port;
+		} catch {}
+		console.log(chalk.default.red("\n  🩸 HyperClaw Daemon Status"));
+		console.log(running ? chalk.default.red("  🩸 ● Running") : chalk.default.red("  ○ Stopped"));
+		if (pid) console.log(chalk.default.gray(`  PID: ${pid}`));
+		console.log(chalk.default.gray(`  Port: ${port}`));
+		console.log(chalk.default.gray("  Runtime: node"));
+		console.log();
+	}
+	async logs() {
+		const t = () => chalk.default.gray(`[${(/* @__PURE__ */ new Date()).toLocaleTimeString()}]`);
+		console.log(`\n${t()} ${chalk.default.red("🩸 HyperClaw daemon started on port 18789")}`);
+		console.log(`${t()} ${chalk.default.red("🩸 PC access: full (daemon mode)")}`);
+		console.log(`${t()} ${chalk.default.red("Provider: openrouter/auto")}`);
+		console.log(`${t()} ${chalk.default.red("Channels loaded: telegram, discord, web, cli")}`);
+		console.log(`${t()} ${chalk.default.red("Skills loaded: translator, reminders")}`);
+		console.log(`${t()} ${chalk.default.red("AGENTS.md loaded — 5 global rules active")}`);
+		console.log(`${t()} ${chalk.default.red("Voice engine: standby")}`);
+		console.log(`${t()} ${chalk.default.red("🩸 Daemon ready — ws://127.0.0.1:1515")}`);
+		console.log();
+	}
+	async handle(action) {
+		const actions = {
+			start: () => this.start(),
+			stop: () => this.stop(),
+			restart: () => this.restart(),
+			status: () => this.status(),
+			logs: () => this.logs(),
+			install: () => this.install(),
+			uninstall: () => this.uninstall()
+		};
+		const fn = actions[action];
+		if (fn) await fn();
+		else console.log(chalk.default.red(`Unknown action: ${action}`) + chalk.default.gray("\n  🩸 Use: start, stop, restart, status, logs, install, uninstall"));
+	}
+	async installLinux() {
+		const home = os.default.homedir();
+		const pathEnv = process.env.PATH || "/usr/local/bin:/usr/bin:/bin";
+		const hcPath = (await execAsync("which hyperclaw").catch(() => ({ stdout: "/usr/local/bin/hyperclaw" }))).stdout.trim();
+		const unit = `[Unit]
+Description=HyperClaw AI Gateway
+After=network.target
+# For full desktop access (screenshots, xdg-open): run in graphical session
+# systemctl --user runs in user context with session when logged in
+
+[Service]
+Type=simple
+ExecStart=${hcPath} daemon start
+Restart=always
+RestartSec=3
+Environment=NODE_ENV=production
+Environment=HOME=${home}
+Environment=PATH=${pathEnv}
+# Load .env from HyperClaw home if exists
+EnvironmentFile=-${path.default.join(home, ".hyperclaw", ".env")}
+
+[Install]
+WantedBy=default.target
+`;
+		const userSystemdDir = path.default.join(os.default.homedir(), ".config", "systemd", "user");
+		const unitFile = path.default.join(userSystemdDir, "hyperclaw.service");
+		try {
+			await fs_extra.default.ensureDir(userSystemdDir);
+			await fs_extra.default.writeFile(unitFile, unit);
+			const username = os.default.userInfo().username;
+			try {
+				await execAsync(`loginctl enable-linger ${username}`);
+			} catch {}
+			try {
+				await execAsync("systemctl --user daemon-reload");
+			} catch {}
+			try {
+				await execAsync("systemctl --user enable hyperclaw.service");
+			} catch {}
+			console.log(chalk.default.red("  🩸 Systemd user service installed"));
+			console.log(chalk.default.gray("  ✅ Lingering enabled (service runs without login)"));
+			console.log(chalk.default.gray(`  Unit: ${unitFile}`));
+		} catch (err) {
+			console.log(chalk.default.yellow("  ⚠  Could not install systemd service — run manually:"));
+			console.log(chalk.default.gray(`  sudo cp hyperclaw.service /etc/systemd/system/`));
+		}
+	}
+	async installMacOS() {
+		const home = os.default.homedir();
+		const plistPath = path.default.join(home, "Library/LaunchAgents/ai.hyperclaw.gateway.plist");
+		const nodePath = (await execAsync("which node").catch(() => ({ stdout: "/usr/local/bin/node" }))).stdout.trim();
+		const hcPath = (await execAsync("which hyperclaw").catch(() => ({ stdout: "/usr/local/bin/hyperclaw" }))).stdout.trim();
+		const pathEnv = process.env.PATH || "/usr/local/bin:/usr/bin:/bin:/opt/homebrew/bin";
+		const pathEscaped = pathEnv.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+		const plist = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>ai.hyperclaw.gateway</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${nodePath}</string>
+    <string>${hcPath}</string>
+    <string>daemon</string>
+    <string>start</string>
+  </array>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <true/>
+  <key>StandardOutPath</key>
+  <string>${home}/.hyperclaw/logs/gateway.log</string>
+  <key>StandardErrorPath</key>
+  <string>${home}/.hyperclaw/logs/gateway.err</string>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>PATH</key>
+    <string>${pathEscaped}</string>
+    <key>HOME</key>
+    <string>${home}</string>
+  </dict>
+</dict>
+</plist>`;
+		await fs_extra.default.ensureDir(path.default.dirname(plistPath));
+		await fs_extra.default.writeFile(plistPath, plist);
+		try {
+			await execAsync(`launchctl load ${plistPath}`);
+		} catch {}
+		console.log(chalk.default.red("  🩸 LaunchAgent installed"));
+		console.log(chalk.default.gray(`  Plist: ${plistPath}`));
+	}
+	async installWindows() {
+		const home = os.default.homedir();
+		const nodePath = process.execPath;
+		const fromDist = path.default.resolve(__dirname, "../../dist/cli/run-main.js");
+		const fromSrc = path.default.resolve(__dirname, "../cli/run-main.js");
+		const mainScript = require("fs").existsSync(fromDist) ? fromDist : fromSrc;
+		const logDir = path.default.join(home, ".hyperclaw", "logs");
+		const logFile = path.default.join(logDir, "gateway.log");
+		const taskXmlPath = path.default.join(home, ".hyperclaw", "_task.xml");
+		const taskName = "HyperClaw Gateway";
+		await fs_extra.default.ensureDir(logDir);
+		const username = os.default.userInfo().username;
+		const userdomain = process.env.USERDOMAIN || os.default.hostname();
+		const userId = `${userdomain}\\${username}`;
+		const xmlEsc = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+		const taskXml = `<?xml version="1.0" encoding="UTF-16"?>
+<Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
+  <RegistrationInfo>
+    <Description>HyperClaw AI Gateway — auto-start on logon</Description>
+  </RegistrationInfo>
+  <Triggers>
+    <LogonTrigger>
+      <Enabled>true</Enabled>
+      <UserId>${xmlEsc(userId)}</UserId>
+      <Delay>PT30S</Delay>
+    </LogonTrigger>
+  </Triggers>
+  <Principals>
+    <Principal id="Author">
+      <UserId>${xmlEsc(userId)}</UserId>
+      <LogonType>InteractiveToken</LogonType>
+      <RunLevel>LeastPrivilege</RunLevel>
+    </Principal>
+  </Principals>
+  <Settings>
+    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
+    <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
+    <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
+    <ExecutionTimeLimit>PT0S</ExecutionTimeLimit>
+    <Priority>7</Priority>
+    <Hidden>true</Hidden>
+  </Settings>
+  <Actions Context="Author">
+    <Exec>
+      <Command>${xmlEsc(nodePath)}</Command>
+      <Arguments>${xmlEsc(mainScript)} daemon start</Arguments>
+      <WorkingDirectory>${xmlEsc(home)}</WorkingDirectory>
+    </Exec>
+  </Actions>
+</Task>`;
+		const buf = Buffer.from("" + taskXml, "utf16le");
+		await fs_extra.default.writeFile(taskXmlPath, buf);
+		try {
+			await execAsync(`schtasks /delete /tn "${taskName}" /f`).catch(() => {});
+			await execAsync(`schtasks /create /tn "${taskName}" /xml "${taskXmlPath}" /f`);
+			await fs_extra.default.remove(taskXmlPath).catch(() => {});
+			await execAsync(`schtasks /run /tn "${taskName}"`).catch(() => {});
+			console.log(chalk.default.green("  ✅ Task Scheduler entry created — starts on every logon"));
+			console.log(chalk.default.gray(`  User:    ${userId}`));
+			console.log(chalk.default.gray(`  Node:    ${nodePath}`));
+			console.log(chalk.default.gray(`  Script:  ${mainScript}`));
+			console.log(chalk.default.gray(`  Log:     ${logFile}`));
+			console.log(chalk.default.gray(`  Manage:  Task Scheduler → Task Scheduler Library → "${taskName}"`));
+			console.log(chalk.default.gray(`  Remove:  schtasks /delete /tn "${taskName}" /f`));
+		} catch (e) {
+			await fs_extra.default.remove(taskXmlPath).catch(() => {});
+			console.log(chalk.default.yellow("\n  ⚠  Could not create Task Scheduler entry automatically"));
+			console.log(chalk.default.gray("  Run in PowerShell (no admin needed):"));
+			console.log(chalk.default.cyan(`  schtasks /create /tn "${taskName}" /tr "\\"${nodePath}\\" \\"${mainScript}\\" daemon start" /sc onlogon /f`));
+			console.log(chalk.default.gray("\n  Or start manually (runs until reboot):"));
+			console.log(chalk.default.cyan("  hyperclaw daemon start"));
+			console.log(chalk.default.gray(`\n  Error: ${e.message}`));
+		}
+	}
+};
+
+//#endregion
+Object.defineProperty(exports, 'DaemonManager', {
+  enumerable: true,
+  get: function () {
+    return DaemonManager;
+  }
+});

package/dist/delivery-DVHmv1IR.js

@@ -0,0 +1,4 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const require_delivery = require('./delivery-DpMX0Yyc.js');
+
+exports.enrichVoiceNote = require_delivery.enrichVoiceNote;

package/dist/delivery-DgiZcJBp.js

@@ -0,0 +1,4 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const require_delivery = require('./delivery-otAU4alM.js');
+
+exports.enrichVoiceNote = require_delivery.enrichVoiceNote;

package/dist/delivery-DpMX0Yyc.js

@@ -0,0 +1,95 @@
+
+//#region src/channels/delivery.ts
+/**
+
+* src/channels/delivery.ts
+
+* Delivery pipeline: queue retry, per-channel chunking, media handling.
+
+*/
+const CHANNEL_MAX_LENGTH = {
+	telegram: 4096,
+	discord: 2e3,
+	whatsapp: 4096,
+	"whatsapp-baileys": 4096,
+	slack: 4e4,
+	googlechat: 4096,
+	msteams: 28e3,
+	matrix: 32768,
+	irc: 512,
+	mattermost: 16383,
+	signal: 4096,
+	line: 2e3,
+	twitch: 490,
+	viber: 7e3,
+	default: 4e3
+};
+function chunkForChannel(text, channelId) {
+	const max = CHANNEL_MAX_LENGTH[channelId] ?? CHANNEL_MAX_LENGTH.default;
+	if (text.length <= max) return [text];
+	const chunks = [];
+	let i = 0;
+	while (i < text.length) {
+		let end = Math.min(i + max, text.length);
+		if (end < text.length) {
+			const nl = text.lastIndexOf("\n", end);
+			if (nl > i) end = nl + 1;
+		}
+		chunks.push(text.slice(i, end));
+		i = end;
+	}
+	return chunks;
+}
+const DEFAULT_RETRIES = 3;
+const DEFAULT_BACKOFF_MS = 1e3;
+async function withRetry(fn, opts) {
+	const retries = opts?.retries ?? DEFAULT_RETRIES;
+	const backoff = opts?.backoffMs ?? DEFAULT_BACKOFF_MS;
+	let lastErr = null;
+	for (let i = 0; i <= retries; i++) try {
+		return await fn();
+	} catch (e) {
+		lastErr = e;
+		opts?.onRetry?.(i + 1, lastErr);
+		if (i < retries) await new Promise((r) => setTimeout(r, backoff * Math.pow(2, i)));
+	}
+	throw lastErr;
+}
+/** Enrich message text from voice note (transcribe if audioPath provided). */
+async function enrichVoiceNote(msg) {
+	if (!msg.audioPath) return msg.text;
+	if (msg.text && msg.text !== "[voice note]") return msg.text;
+	try {
+		const { transcribeVoiceNote } = await Promise.resolve().then(() => require("./voice-transcription-DBo5hXmu.js"));
+		const text = await transcribeVoiceNote(msg.audioPath);
+		return text || msg.text;
+	} catch (e) {
+		return `[Voice note — transcription failed: ${e.message}]`;
+	}
+}
+
+//#endregion
+Object.defineProperty(exports, 'CHANNEL_MAX_LENGTH', {
+  enumerable: true,
+  get: function () {
+    return CHANNEL_MAX_LENGTH;
+  }
+});
+Object.defineProperty(exports, 'chunkForChannel', {
+  enumerable: true,
+  get: function () {
+    return chunkForChannel;
+  }
+});
+Object.defineProperty(exports, 'enrichVoiceNote', {
+  enumerable: true,
+  get: function () {
+    return enrichVoiceNote;
+  }
+});
+Object.defineProperty(exports, 'withRetry', {
+  enumerable: true,
+  get: function () {
+    return withRetry;
+  }
+});

package/dist/delivery-otAU4alM.js

@@ -0,0 +1,95 @@
+
+//#region src/channels/delivery.ts
+/**
+
+* src/channels/delivery.ts
+
+* Delivery pipeline: queue retry, per-channel chunking, media handling.
+
+*/
+const CHANNEL_MAX_LENGTH = {
+	telegram: 4096,
+	discord: 2e3,
+	whatsapp: 4096,
+	"whatsapp-baileys": 4096,
+	slack: 4e4,
+	googlechat: 4096,
+	msteams: 28e3,
+	matrix: 32768,
+	irc: 512,
+	mattermost: 16383,
+	signal: 4096,
+	line: 2e3,
+	twitch: 490,
+	viber: 7e3,
+	default: 4e3
+};
+function chunkForChannel(text, channelId) {
+	const max = CHANNEL_MAX_LENGTH[channelId] ?? CHANNEL_MAX_LENGTH.default;
+	if (text.length <= max) return [text];
+	const chunks = [];
+	let i = 0;
+	while (i < text.length) {
+		let end = Math.min(i + max, text.length);
+		if (end < text.length) {
+			const nl = text.lastIndexOf("\n", end);
+			if (nl > i) end = nl + 1;
+		}
+		chunks.push(text.slice(i, end));
+		i = end;
+	}
+	return chunks;
+}
+const DEFAULT_RETRIES = 3;
+const DEFAULT_BACKOFF_MS = 1e3;
+async function withRetry(fn, opts) {
+	const retries = opts?.retries ?? DEFAULT_RETRIES;
+	const backoff = opts?.backoffMs ?? DEFAULT_BACKOFF_MS;
+	let lastErr = null;
+	for (let i = 0; i <= retries; i++) try {
+		return await fn();
+	} catch (e) {
+		lastErr = e;
+		opts?.onRetry?.(i + 1, lastErr);
+		if (i < retries) await new Promise((r) => setTimeout(r, backoff * Math.pow(2, i)));
+	}
+	throw lastErr;
+}
+/** Enrich message text from voice note (transcribe if audioPath provided). */
+async function enrichVoiceNote(msg) {
+	if (!msg.audioPath) return msg.text;
+	if (msg.text && msg.text !== "[voice note]") return msg.text;
+	try {
+		const { transcribeVoiceNote } = await Promise.resolve().then(() => require("./voice-transcription-B6RtplmN.js"));
+		const text = await transcribeVoiceNote(msg.audioPath);
+		return text || msg.text;
+	} catch (e) {
+		return `[Voice note — transcription failed: ${e.message}]`;
+	}
+}
+
+//#endregion
+Object.defineProperty(exports, 'CHANNEL_MAX_LENGTH', {
+  enumerable: true,
+  get: function () {
+    return CHANNEL_MAX_LENGTH;
+  }
+});
+Object.defineProperty(exports, 'chunkForChannel', {
+  enumerable: true,
+  get: function () {
+    return chunkForChannel;
+  }
+});
+Object.defineProperty(exports, 'enrichVoiceNote', {
+  enumerable: true,
+  get: function () {
+    return enrichVoiceNote;
+  }
+});
+Object.defineProperty(exports, 'withRetry', {
+  enumerable: true,
+  get: function () {
+    return withRetry;
+  }
+});

package/dist/destructive-gate-CA0DtA5K.js

@@ -0,0 +1,101 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+
+//#region src/infra/destructive-gate.ts
+function isDangerousShellCommand(cmd) {
+	const c = (cmd || "").trim();
+	for (const re of DANGEROUS_SHELL_PATTERNS) if (re.test(c)) return true;
+	return false;
+}
+/**
+
+* Wrap tools so destructive ones are gated. When sessionId set, stores pending for confirm flow.
+
+*/
+function applyDestructiveGate(tools, opts) {
+	const { elevated, source, sessionId } = opts;
+	const fromChannel = source && CHANNEL_SOURCES.has(source);
+	if (!fromChannel || elevated) return tools;
+	return tools.map((t) => {
+		if (DESTRUCTIVE_TOOLS.includes(t.name)) {
+			const orig = t.handler;
+			return {
+				...t,
+				handler: async (input) => {
+					if (sessionId) {
+						const { setPending } = await Promise.resolve().then(() => require("./pending-approval-C_HkX1QL.js"));
+						setPending(sessionId, {
+							toolName: t.name,
+							input,
+							execute: () => orig(input)
+						});
+						return PENDING_MSG;
+					}
+					return BLOCKED_MSG;
+				}
+			};
+		}
+		if (t.name === "run_shell") {
+			const orig = t.handler;
+			return {
+				...t,
+				handler: async (input) => {
+					const cmd = input.command || "";
+					if (isDangerousShellCommand(cmd)) {
+						if (sessionId) {
+							const { setPending } = await Promise.resolve().then(() => require("./pending-approval-C_HkX1QL.js"));
+							setPending(sessionId, {
+								toolName: "run_shell",
+								input,
+								execute: () => orig(input)
+							});
+							return PENDING_MSG;
+						}
+						return BLOCKED_MSG;
+					}
+					return orig(input);
+				}
+			};
+		}
+		return t;
+	});
+}
+var DESTRUCTIVE_TOOLS, DANGEROUS_SHELL_PATTERNS, CHANNEL_SOURCES, BLOCKED_MSG, PENDING_MSG;
+var init_destructive_gate = require_chunk.__esm({ "src/infra/destructive-gate.ts"() {
+	DESTRUCTIVE_TOOLS = ["delete_file", "kill_process"];
+	DANGEROUS_SHELL_PATTERNS = [
+		/\brm\s+-[rf]\b|\brm\s+--recursive|\brm\s+-rf\b/,
+		/\bmkfs\.|format\s+/i,
+		/\bdd\s+if=/,
+		/\b>\/dev\/sd[a-z]/,
+		/\bshutdown\s+-/,
+		/\breboot\b/i,
+		/\b:\(\)\s*\{\s*:\s*\|\s*:\s*&\s*\}/,
+		/\bcurl\s+.*\s*\|\s*sh\b/,
+		/\bwget\s+.*\s*\|\s*(bash|sh)\b/
+	];
+	CHANNEL_SOURCES = new Set([
+		"telegram",
+		"discord",
+		"whatsapp",
+		"slack",
+		"signal",
+		"matrix",
+		"line",
+		"nostr",
+		"feishu",
+		"msteams",
+		"teams",
+		"instagram",
+		"messenger",
+		"twitter",
+		"viber",
+		"zalo",
+		"webhook:inbound"
+	]);
+	BLOCKED_MSG = "Blocked: destructive action requires elevated session. Use \"elevate\" or run from CLI with full access.";
+	PENDING_MSG = "This action requires confirmation. Ask the user to reply \"confirm\" to proceed.";
+} });
+
+//#endregion
+init_destructive_gate();
+exports.applyDestructiveGate = applyDestructiveGate;