stableclaw 2026.5.13 → 2026.5.14

package/dist/{pi-embedded-CerJ7PL1.js → pi-embedded-B-BUeGYW.js}

@@ -60,7 +60,7 @@ import { i as resolveSessionLockMaxHoldFromTimeout, t as acquireSessionWriteLock
 import { a as normalizeDeliveryContext, i as mergeDeliveryContext, n as deliveryContextKey, r as formatConversationTarget, s as resolveConversationDeliveryTarget, t as deliveryContextFromSession } from "./delivery-context-CxD4-P8T.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-Dc7U5QmQ.js";
 import { t as extractDeliveryInfo } from "./delivery-info-D2DsojS2.js";
-import { r as callGateway } from "./call-CkHf0CYa.js";
+import { r as callGateway } from "./call-Dpw_m2iI.js";
 import { i as normalizeInputProvenance, n as applyInputProvenanceToUserMessage, r as hasInterSessionUserProvenance } from "./input-provenance-8GBFuk0Q.js";
 import { c as isAdminOnlyMethod } from "./method-scopes-qITLvK0A.js";
 import { t as killProcessTree } from "./kill-tree-C4NMoxEf.js";
@@ -77,7 +77,7 @@ import { n as getProviderEnvVars } from "./provider-env-vars-DCXXC6D5.js";
 import { i as discoverModels, r as discoverAuthStorage } from "./pi-model-discovery-CWbL8HPy.js";
 import { a as isSilentReplyText, i as isSilentReplyPrefixText, n as SILENT_REPLY_TOKEN, r as isSilentReplyPayloadText } from "./tokens-iPj4pUwM.js";
 import { a as stripHeartbeatToken, i as resolveHeartbeatPrompt } from "./heartbeat-VvZFB9cv.js";
-import { t as delegateCompactionToRuntime } from "./delegate-JJTyuCt7.js";
+import { t as delegateCompactionToRuntime } from "./delegate-Cp3QVJ2S.js";
 import { d as getMachineDisplayName, l as normalizeNonEmptyString, n as resolveSystemRunCommandRequest, s as normalizeSystemRunApprovalPlan, t as formatExecCommand, u as normalizeStringArray } from "./system-run-command-FIDPn0m8.js";
 import { i as generateSecureToken } from "./secure-random-C8iCVhts.js";
 import { y as getDiagnosticSessionState } from "./diagnostic--nf_kMKg.js";
@@ -119,7 +119,7 @@ import { _ as toRelativeWorkspacePath, d as resolveWorkspaceRoot, f as createToo
 import { A as listFinishedSessions, D as drainSession, E as deleteSession, F as tail, M as markBackgrounded, N as markExited, O as getFinishedSession, P as setJobTtlMs, S as requestHeartbeatNow, _ as getProcessSupervisor, a as DEFAULT_MAX_OUTPUT, b as normalizePathPrepend, c as applyShellPath, d as execSchema, f as normalizeNotifyOutput, g as runExecProcess, h as resolveExecTarget, i as DEFAULT_APPROVAL_TIMEOUT_MS, j as listRunningSessions, k as getSession, l as buildApprovalPendingMessage, m as resolveApprovalRunningNoticeMs, n as resolveSelectedAndActiveModel, o as DEFAULT_PATH, r as DEFAULT_APPROVAL_REQUEST_TIMEOUT_MS, s as DEFAULT_PENDING_MAX_OUTPUT, t as formatProviderModelRef, u as createApprovalSlug, v as detectRuntimeShell, x as areHeartbeatsEnabled, y as applyPathPrepend } from "./model-runtime-DvuS805R.js";
 import { r as enqueueSystemEvent } from "./system-events-ITlErq68.js";
 import { A as pad, D as clampWithDefault, F as truncateMiddle, M as resolveSandboxWorkdir, N as resolveWorkdir, O as coerceEnv, P as sliceLogLines, T as buildSandboxEnv, j as readEnvInt, k as deriveSessionName, o as resolveSandboxContext } from "./sandbox-4mHOi4T7.js";
-import { a as resolveNodeIdFromList, c as readGatewayCallOptions, i as resolveNodeId, l as resolveGatewayOptions, n as listNodes, r as resolveNode, s as callGatewayTool, t as withTimeout } from "./with-timeout-BO_VW0zQ.js";
+import { a as resolveNodeIdFromList, c as readGatewayCallOptions, i as resolveNodeId, l as resolveGatewayOptions, n as listNodes, r as resolveNode, s as callGatewayTool, t as withTimeout } from "./with-timeout-CC5UkKpM.js";
 import { a as buildExecApprovalPendingReplyPayload, o as buildExecApprovalUnavailableReplyPayload } from "./exec-approval-reply-DCWO_v4h.js";
 import { p as resolveSendableOutboundReplyParts, s as hasOutboundReplyContent } from "./reply-payload-DBDi0YBW.js";
 import { d as parseFenceSpans, l as findFenceSpanAt, u as isSafeFenceBreak } from "./chunk-CmLkZa5Z.js";
@@ -128,7 +128,7 @@ import { a as getDefaultMediaLocalRoots } from "./local-roots-116XXwKV.js";
 import { t as parseInlineDirectives } from "./directive-tags-CBu_Ja5x.js";
 import { n as parseExplicitTargetForChannel } from "./target-parsing-Bf9J1xzC.js";
 import { r as normalizeTargetForProvider } from "./target-normalization-BK4sIs-Z.js";
-import { t as sendMessage } from "./message-DKyeQZZF.js";
+import { t as sendMessage } from "./message-CY2QoUSg.js";
 import { t as formatDurationCompact } from "./format-duration-DFmolS8Y.js";
 import { n as recordCommandPoll, r as resetCommandPollCount } from "./command-poll-backoff-B8We43u2.js";
 import { u as shouldSuppressManagedWebSearchTool } from "./codex-native-web-search-5Z_Zizpg.js";
@@ -153,8 +153,8 @@ import { a as createLazyRuntimeSurface } from "./lazy-runtime-Da0GJ1FB.js";
 import { n as describeImagesWithModel, t as describeImageWithModel } from "./image-runtime-C-IqI2pA.js";
 import "./media-understanding-CObJNP6B.js";
 import { n as ensureGlobalUndiciEnvProxyDispatcher, r as ensureGlobalUndiciStreamTimeouts } from "./undici-global-dispatcher-BYi1S8pY.js";
-import { a as resolveMessageSecretScope, n as runMessageAction, o as CHANNEL_MESSAGE_ACTION_NAMES, t as getToolResult } from "./message-action-runner-C1giJOcg.js";
-import { t as resolveCommandSecretRefsViaGateway } from "./command-secret-gateway-H8byy2b2.js";
+import { a as resolveMessageSecretScope, n as runMessageAction, o as CHANNEL_MESSAGE_ACTION_NAMES, t as getToolResult } from "./message-action-runner-YEun6VZZ.js";
+import { t as resolveCommandSecretRefsViaGateway } from "./command-secret-gateway-B9gWZxp8.js";
 import { a as getScopedChannelsCommandSecretTargets } from "./command-secret-targets-C8_j4R7w.js";
 import { n as SHARED_POLL_CREATION_PARAM_NAMES, t as POLL_CREATION_PARAM_DEFS } from "./poll-params-BV9p4Gtk.js";
 import { i as NODE_SYSTEM_RUN_COMMANDS } from "./node-commands-BDL3VNAy.js";
@@ -212,7 +212,7 @@ import fs, { appendFile, mkdir } from "node:fs/promises";
 import crypto, { createHash, createHmac, randomBytes, randomUUID } from "node:crypto";
 import { z } from "zod";
 import { DefaultResourceLoader, SessionManager, SettingsManager, codingTools, createAgentSession, createEditTool, createReadTool, createWriteTool, estimateTokens, generateSummary, readTool } from "@mariozechner/pi-coding-agent";
-import WebSocket from "ws";
+import WebSocket$1 from "ws";
 import { Buffer as Buffer$1 } from "node:buffer";
 import { Type } from "@sinclair/typebox";
 import { EventEmitter } from "node:events";
@@ -11005,7 +11005,7 @@ let subagentAnnounceDeps = {
 };
 let subagentRegistryRuntimePromise = null;
 function loadSubagentRegistryRuntime() {
-	subagentRegistryRuntimePromise ??= import("./subagent-registry-runtime-CIRq38Qi.js");
+	subagentRegistryRuntimePromise ??= import("./subagent-registry-runtime-C_-X4zTy.js");
 	return subagentRegistryRuntimePromise;
 }
 function buildSubagentSystemPrompt(params) {
@@ -15123,7 +15123,7 @@ function appendTaskEvent(event) {
 	};
 }
 function loadTaskRegistryDeliveryRuntime() {
-	deliveryRuntimePromise ??= import("./task-registry-delivery-runtime-Bu6PerOl.js");
+	deliveryRuntimePromise ??= import("./task-registry-delivery-runtime-s3rCHmDY.js");
 	return deliveryRuntimePromise;
 }
 function addRunIdIndex(taskId, runId) {
@@ -17370,7 +17370,7 @@ function restoreSubagentRunsOnce() {
 		ensureListener();
 		if ([...subagentRuns.values()].some((entry) => entry.archiveAtMs)) startSweeper();
 		for (const runId of subagentRuns.keys()) resumeSubagentRun(runId);
-		import("./subagent-orphan-recovery-Bon_a54a.js").then(({ scheduleOrphanRecovery }) => {
+		import("./subagent-orphan-recovery-D_PWkJze.js").then(({ scheduleOrphanRecovery }) => {
 			scheduleOrphanRecovery({ getActiveRuns: () => subagentRuns });
 		}, () => {});
 	} catch {}
@@ -32611,7 +32611,7 @@ var OpenAIWebSocketManager = class extends EventEmitter {
 		this.wsUrl = options.url ?? OPENAI_WS_URL;
 		this.maxRetries = options.maxRetries ?? MAX_RETRIES;
 		this.backoffDelaysMs = options.backoffDelaysMs ?? BACKOFF_DELAYS_MS;
-		this.socketFactory = options.socketFactory ?? ((url, socketOptions) => new WebSocket(url, socketOptions));
+		this.socketFactory = options.socketFactory ?? ((url, socketOptions) => new WebSocket$1(url, socketOptions));
 		this.request = options.request;
 	}
 	/**
@@ -32637,7 +32637,7 @@ var OpenAIWebSocketManager = class extends EventEmitter {
 	* Throws if the connection is not open.
 	*/
 	send(event) {
-		if (!this.ws || this.ws.readyState !== WebSocket.OPEN) throw new Error(`OpenAIWebSocketManager: cannot send — connection is not open (readyState=${this.ws?.readyState ?? "no socket"})`);
+		if (!this.ws || this.ws.readyState !== WebSocket$1.OPEN) throw new Error(`OpenAIWebSocketManager: cannot send — connection is not open (readyState=${this.ws?.readyState ?? "no socket"})`);
 		this.ws.send(JSON.stringify(event));
 	}
 	/**
@@ -32654,7 +32654,7 @@ var OpenAIWebSocketManager = class extends EventEmitter {
 	* Returns true if the WebSocket is currently open and ready to send.
 	*/
 	isConnected() {
-		return this.ws !== null && this.ws.readyState === WebSocket.OPEN;
+		return this.ws !== null && this.ws.readyState === WebSocket$1.OPEN;
 	}
 	/**
 	* Permanently closes the WebSocket connection and disables auto-reconnect.
@@ -32665,8 +32665,8 @@ var OpenAIWebSocketManager = class extends EventEmitter {
 		if (this.ws) {
 			this.ws.removeAllListeners();
 			try {
-				if (this.ws.readyState === WebSocket.OPEN) this.ws.close(1e3, "Client closed");
-				else if (this.ws.readyState === WebSocket.CONNECTING) this.ws.terminate();
+				if (this.ws.readyState === WebSocket$1.OPEN) this.ws.close(1e3, "Client closed");
+				else if (this.ws.readyState === WebSocket$1.CONNECTING) this.ws.terminate();
 			} catch {}
 			this.ws = null;
 		}

package/dist/{pi-embedded.runtime-BSjmKNLs.js → pi-embedded.runtime-CKWU6BHL.js}

@@ -1,4 +1,4 @@
-import { t as runEmbeddedPiAgent } from "./pi-embedded-CerJ7PL1.js";
+import { t as runEmbeddedPiAgent } from "./pi-embedded-B-BUeGYW.js";
 import { o as isEmbeddedPiRunActive, s as isEmbeddedPiRunStreaming, t as abortEmbeddedPiRun } from "./runs-BtxZif2H.js";
 import { _ as resolveEmbeddedSessionLane } from "./queue-BjYFXy4w.js";
 export { abortEmbeddedPiRun, isEmbeddedPiRunActive, isEmbeddedPiRunStreaming, resolveEmbeddedSessionLane, runEmbeddedPiAgent };

package/dist/pi-embedded.runtime.js

@@ -1 +1 @@
-export * from "./pi-embedded.runtime-BSjmKNLs.js";
+export * from "./pi-embedded.runtime-CKWU6BHL.js";

package/dist/plugin-sdk/acp-runtime.js

@@ -1,3 +1,3 @@
-import { An as AcpRuntimeError, _n as registerAcpRuntimeBackend, fn as getAcpSessionManager, gn as getAcpRuntimeBackend, jn as isAcpRuntimeError, pn as readAcpSessionEntry, vn as requireAcpRuntimeBackend, yn as unregisterAcpRuntimeBackend } from "../pi-embedded-CerJ7PL1.js";
-import { t as __testing } from "../acp-runtime-CBfywa1H.js";
+import { An as AcpRuntimeError, _n as registerAcpRuntimeBackend, fn as getAcpSessionManager, gn as getAcpRuntimeBackend, jn as isAcpRuntimeError, pn as readAcpSessionEntry, vn as requireAcpRuntimeBackend, yn as unregisterAcpRuntimeBackend } from "../pi-embedded-B-BUeGYW.js";
+import { t as __testing } from "../acp-runtime-CGY6bc_z.js";
 export { AcpRuntimeError, __testing, getAcpRuntimeBackend, getAcpSessionManager, isAcpRuntimeError, readAcpSessionEntry, registerAcpRuntimeBackend, requireAcpRuntimeBackend, unregisterAcpRuntimeBackend };

package/dist/plugin-sdk/agent-runtime.js

@@ -11,7 +11,7 @@ import { n as suggestOAuthProfileIdForLegacyDefault, t as repairOAuthProfileIdMi
 import { a as OAUTH_API_KEY_MARKER_PREFIX, c as isAwsSdkAuthMarker, d as isOAuthApiKeyMarker, f as isSecretRefHeaderValueMarker, g as resolveOAuthApiKeyMarker, h as resolveNonEnvSecretRefHeaderValueMarker, i as NON_ENV_SECRETREF_MARKER, l as isKnownEnvApiKeyMarker, m as resolveNonEnvSecretRefApiKeyMarker, n as GCP_VERTEX_CREDENTIALS_MARKER, o as OLLAMA_LOCAL_AUTH_MARKER, p as resolveEnvSecretRefHeaderValueMarker, r as MINIMAX_OAUTH_MARKER, s as SECRETREF_ENV_HEADER_MARKER_PREFIX, t as CUSTOM_LOCAL_AUTH_MARKER, u as isNonSecretApiKeyMarker } from "../model-auth-markers-B6E5GV5q.js";
 import { t as resolveEnvApiKey } from "../model-auth-env-Dz-6m-zS.js";
 import { a as resolveIdentityName, c as resolveResponsePrefix, i as resolveHumanDelayConfig, n as resolveAgentIdentity, o as resolveIdentityNamePrefix, r as resolveEffectiveMessagesConfig, s as resolveMessagePrefix, t as resolveAckReaction } from "../identity-BfG5tNuX.js";
-import { s as EmbeddedBlockChunker } from "../pi-embedded-CerJ7PL1.js";
+import { s as EmbeddedBlockChunker } from "../pi-embedded-B-BUeGYW.js";
 import { C as textToSpeech, S as synthesizeSpeech, _ as setSummarizationEnabled, a as getTtsMaxLength, b as setTtsMaxLength, c as isTtsEnabled, d as maybeApplyTtsToPayload, f as resolveTtsAutoMode, g as setLastTtsAttempt, h as resolveTtsProviderOrder, i as getResolvedSpeechProviderConfig, l as isTtsProviderConfigured, m as resolveTtsPrefsPath, n as buildTtsSystemPromptHint, o as getTtsProvider, p as resolveTtsConfig, r as getLastTtsAttempt, s as isSummarizationEnabled, t as _test, u as listSpeechVoices, v as setTtsAutoMode, w as textToSpeechTelephony, x as setTtsProvider, y as setTtsEnabled } from "../speech-runtime-D3KzEpPE.js";
 import { a as withNormalizedTimestamp, i as resolveUserTimezone, n as normalizeTimestamp, r as resolveUserTimeFormat, t as formatUserTime } from "../date-time-BB7-c7fc.js";
 import { n as resolveAwsSdkEnvVarName, t as requireApiKey } from "../model-auth-runtime-shared-DWMhzvX4.js";
@@ -24,6 +24,6 @@ import { i as stringEnum, n as channelTargetsSchema, r as optionalStringEnum, t
 import { a as modelSupportsDocument, i as loadModelCatalog, n as findModelInCatalog, o as modelSupportsVision, r as invalidateModelCatalogCache, s as resetModelCatalogCacheForTest, t as __setModelCatalogImportForTest } from "../model-catalog-1voMaEjk.js";
 import { n as resolveCronStyleNow, t as appendCronStyleCurrentTimeLine } from "../current-time-28Gcdx6M.js";
 import { t as resolveAgentAvatar } from "../identity-avatar-B6NWBnl5.js";
-import { i as resolveSimpleCompletionSelectionForAgent, n as prepareSimpleCompletionModel, r as prepareSimpleCompletionModelForAgent, t as completeWithPreparedSimpleCompletionModel } from "../agent-runtime-CK4KmQiH.js";
-import { n as agentCommandFromIngress, t as agentCommand } from "../agent-command-BqIsA3qN.js";
+import { i as resolveSimpleCompletionSelectionForAgent, n as prepareSimpleCompletionModel, r as prepareSimpleCompletionModelForAgent, t as completeWithPreparedSimpleCompletionModel } from "../agent-runtime-D6Vznfn2.js";
+import { n as agentCommandFromIngress, t as agentCommand } from "../agent-command-BcqaG2KK.js";
 export { CLAUDE_CLI_PROFILE_ID, CODEX_CLI_PROFILE_ID, CUSTOM_LOCAL_AUTH_MARKER, DEFAULT_CACHE_TTL_MINUTES, DEFAULT_CONTEXT_TOKENS, DEFAULT_MODEL, DEFAULT_PROVIDER, DEFAULT_TIMEOUT_SECONDS, EmbeddedBlockChunker, GCP_VERTEX_CREDENTIALS_MARKER, MINIMAX_OAUTH_MARKER, NON_ENV_SECRETREF_MARKER, OAUTH_API_KEY_MARKER_PREFIX, OLLAMA_LOCAL_AUTH_MARKER, OWNER_ONLY_TOOL_ERROR, SECRETREF_ENV_HEADER_MARKER_PREFIX, ToolAuthorizationError, ToolInputError, __setModelCatalogImportForTest, _test, agentCommand, agentCommandFromIngress, appendCronStyleCurrentTimeLine, applyAuthHeaderOverride, applyLocalNoAuthHeaderOverride, assertMediaNotDataUrl, assertSandboxPath, buildAllowedModelSet, buildConfiguredAllowlistKeys, buildConfiguredModelCatalog, buildModelAliasIndex, buildTtsSystemPromptHint, calculateAuthProfileCooldownMs, channelTargetSchema, channelTargetsSchema, clearAuthProfileCooldown, clearExpiredCooldowns, clearRuntimeAuthProfileStoreSnapshots, completeWithPreparedSimpleCompletionModel, createActionGate, dedupeProfileIds, ensureAuthProfileStore, extractAssistantText, extractAssistantThinking, extractBasicHtmlContent, extractReadableContent, extractThinkingFromTaggedStream, extractThinkingFromTaggedText, failedTextResult, fetchWithWebToolsNetworkGuard, findModelInCatalog, findNormalizedProviderKey, findNormalizedProviderValue, formatAuthDoctorHint, formatReasoningMessage, formatUserTime, getApiKeyForModel, getCustomProviderApiKey, getLastTtsAttempt, getModelRefStatus, getResolvedSpeechProviderConfig, getSoonestCooldownExpiry, getTtsMaxLength, getTtsProvider, hasAvailableAuthForProvider, hasConfiguredModelFallbacks, hasUsableCustomProviderApiKey, htmlToMarkdown, imageResult, imageResultFromFile, inferToolMetaFromArgs, inferUniqueProviderFromConfiguredModels, invalidateModelCatalogCache, isAssistantMessage, isAwsSdkAuthMarker, isCliProvider, isKnownEnvApiKeyMarker, isNonSecretApiKeyMarker, isOAuthApiKeyMarker, isProfileInCooldown, isSecretRefHeaderValueMarker, isSummarizationEnabled, isTtsEnabled, isTtsProviderConfigured, jsonResult, legacyModelKey, listAgentEntries, listAgentIds, listProfilesForProvider, listSpeechVoices, loadAuthProfileStore, loadAuthProfileStoreForRuntime, loadAuthProfileStoreForSecretsRuntime, loadModelCatalog, markAuthProfileCooldown, markAuthProfileFailure, markAuthProfileGood, markAuthProfileUsed, markdownToText, maybeApplyTtsToPayload, modelKey, modelSupportsDocument, modelSupportsVision, normalizeCacheKey, normalizeModelRef, normalizeModelSelection, normalizeProviderId, normalizeProviderIdForAuth, normalizeTimestamp, optionalStringEnum, parseAvailableTags, parseModelRef, payloadTextResult, prepareSimpleCompletionModel, prepareSimpleCompletionModelForAgent, promoteThinkingTagsToBlocks, readCache, readNumberParam, readReactionParams, readResponseText, readStringArrayParam, readStringOrNumberParam, readStringParam, repairOAuthProfileIdMismatch, replaceRuntimeAuthProfileStoreSnapshots, requireApiKey, resetModelCatalogCacheForTest, resolveAckReaction, resolveAgentAvatar, resolveAgentConfig, resolveAgentDir, resolveAgentEffectiveModelPrimary, resolveAgentExplicitModelPrimary, resolveAgentIdByWorkspacePath, resolveAgentIdFromSessionKey, resolveAgentIdentity, resolveAgentIdsByWorkspacePath, resolveAgentModelFallbacksOverride, resolveAgentModelPrimary, resolveAgentSkillsFilter, resolveAgentWorkspaceDir, resolveAllowedModelRef, resolveAllowlistModelKey, resolveApiKeyForProfile, resolveApiKeyForProvider, resolveAuthProfileDisplayLabel, resolveAuthProfileEligibility, resolveAuthProfileOrder, resolveAuthStorePathForDisplay, resolveAwsSdkEnvVarName, resolveCacheTtlMs, resolveConfiguredModelRef, resolveCronStyleNow, resolveDefaultAgentId, resolveDefaultModelForAgent, resolveEffectiveMessagesConfig, resolveEffectiveModelFallbacks, resolveEnvApiKey, resolveEnvSecretRefHeaderValueMarker, resolveFallbackAgentId, resolveHooksGmailModel, resolveHumanDelayConfig, resolveIdentityName, resolveIdentityNamePrefix, resolveMessagePrefix, resolveModelAuthMode, resolveModelRefFromString, resolveNonEnvSecretRefApiKeyMarker, resolveNonEnvSecretRefHeaderValueMarker, resolveOAuthApiKeyMarker, resolveProfileUnusableUntilForDisplay, resolveProfilesUnavailableReason, resolveReasoningDefault, resolveResponsePrefix, resolveRunModelFallbacksOverride, resolveSandboxInputPath, resolveSandboxPath, resolveSandboxedMediaSource, resolveSessionAgentId, resolveSessionAgentIds, resolveSimpleCompletionSelectionForAgent, resolveSubagentConfiguredModelSelection, resolveSubagentSpawnModelSelection, resolveThinkingDefault, resolveTimeoutSeconds, resolveTtsAutoMode, resolveTtsConfig, resolveTtsPrefsPath, resolveTtsProviderOrder, resolveUsableCustomProviderApiKey, resolveUserTimeFormat, resolveUserTimezone, saveAuthProfileStore, setAuthProfileOrder, setLastTtsAttempt, setSummarizationEnabled, setTtsAutoMode, setTtsEnabled, setTtsMaxLength, setTtsProvider, splitThinkingTaggedText, stringEnum, stringifyToolPayload, stripDowngradedToolCallText, stripMinimaxToolCallXml, stripModelSpecialTokens, stripThinkingTagsFromText, suggestOAuthProfileIdForLegacyDefault, synthesizeSpeech, textResult, textToSpeech, textToSpeechTelephony, truncateText, upsertAuthProfile, upsertAuthProfileWithLock, withNormalizedTimestamp, withStrictWebToolsEndpoint, withTimeout, withTrustedWebToolsEndpoint, wrapOwnerOnlyToolExecution, writeCache };

package/dist/plugin-sdk/approval-runtime.js

@@ -2,7 +2,7 @@ import { an as MAX_PLUGIN_APPROVAL_TIMEOUT_MS, dn as buildPluginApprovalResolved
 import { T as resolveExecApprovalRequestAllowedDecisions, r as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS, w as resolveExecApprovalAllowedDecisions } from "../exec-approvals-8JRhkN9W.js";
 import { a as buildExecApprovalPendingReplyPayload, c as getExecApprovalApproverDmNoticeText, l as getExecApprovalReplyMetadata } from "../exec-approval-reply-DCWO_v4h.js";
 import { a as resolveExecApprovalSessionTarget, i as resolveApprovalRequestSessionTarget, n as resolveApprovalRequestAccountId, o as resolveExecApprovalCommandDisplay, r as resolveApprovalRequestOriginTarget, t as doesApprovalRequestMatchChannelAccount } from "../exec-approval-session-target-B9vJTSNY.js";
-import { a as splitChannelApprovalCapability, c as createChannelExecApprovalProfile, d as createResolvedApproverActionAuthAdapter, i as createChannelApprovalCapability, l as isChannelExecApprovalClientEnabledFromConfig, n as createApproverRestrictedNativeApprovalAdapter, o as createChannelApproverDmTargetResolver, r as createApproverRestrictedNativeApprovalCapability, s as createChannelNativeOriginTargetResolver, t as resolveApprovalApprovers, u as isChannelExecApprovalTargetRecipient } from "../approval-runtime-BErEF6mf.js";
+import { a as splitChannelApprovalCapability, c as createChannelExecApprovalProfile, d as createResolvedApproverActionAuthAdapter, i as createChannelApprovalCapability, l as isChannelExecApprovalClientEnabledFromConfig, n as createApproverRestrictedNativeApprovalAdapter, o as createChannelApproverDmTargetResolver, r as createApproverRestrictedNativeApprovalCapability, s as createChannelNativeOriginTargetResolver, t as resolveApprovalApprovers, u as isChannelExecApprovalTargetRecipient } from "../approval-runtime-DdHQootd.js";
 import { a as matchesApprovalRequestFilters, i as buildPluginApprovalResolvedReplyPayload, n as buildApprovalResolvedReplyPayload, o as matchesApprovalRequestSessionFilter, r as buildPluginApprovalPendingReplyPayload, t as buildApprovalPendingReplyPayload } from "../approval-renderers-qlTctyPV.js";
-import { t as createChannelNativeApprovalRuntime } from "../approval-native-runtime-CDwPwinz.js";
+import { t as createChannelNativeApprovalRuntime } from "../approval-native-runtime-DLR2Sov5.js";
 export { DEFAULT_EXEC_APPROVAL_TIMEOUT_MS, DEFAULT_PLUGIN_APPROVAL_TIMEOUT_MS, MAX_PLUGIN_APPROVAL_TIMEOUT_MS, buildApprovalPendingReplyPayload, buildApprovalResolvedReplyPayload, buildExecApprovalPendingReplyPayload, buildPluginApprovalExpiredMessage, buildPluginApprovalPendingReplyPayload, buildPluginApprovalRequestMessage, buildPluginApprovalResolvedMessage, buildPluginApprovalResolvedReplyPayload, createApproverRestrictedNativeApprovalAdapter, createApproverRestrictedNativeApprovalCapability, createChannelApprovalCapability, createChannelApproverDmTargetResolver, createChannelExecApprovalProfile, createChannelNativeApprovalRuntime, createChannelNativeOriginTargetResolver, createResolvedApproverActionAuthAdapter, doesApprovalRequestMatchChannelAccount, getExecApprovalApproverDmNoticeText, getExecApprovalReplyMetadata, isChannelExecApprovalClientEnabledFromConfig, isChannelExecApprovalTargetRecipient, matchesApprovalRequestFilters, matchesApprovalRequestSessionFilter, resolveApprovalApprovers, resolveApprovalRequestAccountId, resolveApprovalRequestOriginTarget, resolveApprovalRequestSessionTarget, resolveExecApprovalAllowedDecisions, resolveExecApprovalCommandDisplay, resolveExecApprovalRequestAllowedDecisions, resolveExecApprovalSessionTarget, splitChannelApprovalCapability };

package/dist/plugin-sdk/browser-support.js

@@ -28,7 +28,7 @@ import { r as hasProxyEnvConfigured } from "../proxy-env-_s0Sb6aE.js";
 import { d as resolvePinnedHostnameWithPolicy, l as isPrivateNetworkAllowedByPolicy, t as SsrFBlockedError } from "../ssrf-CJ2xicnv.js";
 import { s as wrapExternalContent } from "../external-content-TFpdJVzj.js";
 import { o as openFileWithinRoot, p as writeFileFromPathWithinRoot, t as SafeOpenError } from "../fs-safe-tYTctc7z.js";
-import { a as resolveNodeIdFromList, n as listNodes, o as selectDefaultNodeFromList, s as callGatewayTool, t as withTimeout } from "../with-timeout-BO_VW0zQ.js";
+import { a as resolveNodeIdFromList, n as listNodes, o as selectDefaultNodeFromList, s as callGatewayTool, t as withTimeout } from "../with-timeout-CC5UkKpM.js";
 import { i as stringEnum, r as optionalStringEnum } from "../typebox-OD6ghaTU.js";
 import { a as ensureMediaDir, l as saveMediaBuffer } from "../store-STQkCGBK.js";
 import { n as deriveDefaultBrowserCdpPortRange, r as deriveDefaultBrowserControlPort, t as DEFAULT_BROWSER_CONTROL_PORT } from "../port-defaults-BL5F9WSu.js";
@@ -37,9 +37,9 @@ import { t as startLazyPluginServiceModule } from "../lazy-service-module-CqOIIY
 import { t as withFetchPreconnect } from "../fetch-mock-DHgoe97S.js";
 import { t as ensureGatewayStartupAuth } from "../startup-auth-COw9VoqT.js";
 import { n as runCommandWithRuntime } from "../cli-utils-C74WP4NL.js";
-import { n as callGatewayFromCli, t as addGatewayClientOptions } from "../gateway-rpc-BfyLXrGN.js";
+import { n as callGatewayFromCli, t as addGatewayClientOptions } from "../gateway-rpc-CnGerIJd.js";
 import { t as formatHelpExamples } from "../help-format-xfCRmgrW.js";
 import { i as resolveNodeCommandAllowlist, n as isNodeCommandAllowed } from "../node-command-policy-C6daWa01.js";
 import { i as safeParseJson, n as respondUnavailableOnNodeInvokeError } from "../nodes.helpers-BSW6BIED.js";
-import "../browser-support-DeeufCRN.js";
+import "../browser-support-BXhYU62h.js";
 export { CONFIG_DIR, DEFAULT_BROWSER_CONTROL_PORT, ErrorCodes, IMAGE_REDUCE_QUALITY_STEPS, SafeOpenError, SsrFBlockedError, addGatewayClientOptions, buildImageResizeSideGrid, callGatewayFromCli, callGatewayTool, createConfigIO, createSubsystemLogger, danger, defaultRuntime, deriveDefaultBrowserCdpPortRange, deriveDefaultBrowserControlPort, detectMime, ensureGatewayStartupAuth, ensureMediaDir, ensurePortAvailable, errorShape, escapeRegExp, extractErrorCode, formatCliCommand, formatDocsLink, formatErrorMessage, formatHelpExamples, generateSecureToken, getImageMetadata, getRuntimeConfigSnapshot, hasProxyEnvConfigured, imageResultFromFile, info, inheritOptionFromParent, isLoopbackHost, isNodeCommandAllowed, isNotFoundPathError, isPathInside, isPrivateNetworkAllowedByPolicy, jsonResult, listNodes, loadConfig, normalizePluginsConfig, openFileWithinRoot, optionalStringEnum, parseBooleanValue, rawDataToString, readStringParam, redactSensitiveText, resizeToJpeg, resolveEffectiveEnableState, resolveGatewayAuth, resolveGatewayPort, resolveNodeCommandAllowlist, resolveNodeIdFromList, resolvePinnedHostnameWithPolicy, resolvePreferredOpenClawTmpDir, resolveUserPath, respondUnavailableOnNodeInvokeError, runCommandWithRuntime, runExec, safeEqualSecret, safeParseJson, saveMediaBuffer, selectDefaultNodeFromList, shortenHomePath, startLazyPluginServiceModule, stringEnum, theme, withFetchPreconnect, withTimeout, wrapExternalContent, writeConfigFile, writeFileFromPathWithinRoot };

package/dist/plugin-sdk/channel-inbound.js

@@ -2,8 +2,8 @@ import { a as resolveEnvelopeFormatOptions, i as formatInboundFromLabel, r as fo
 import { n as resolveInboundDebounceMs, t as createInboundDebouncer } from "../inbound-debounce-CIV6wjbN.js";
 import { a as normalizeMentionText, i as matchesMentionWithExplicit, n as buildMentionRegexes, r as matchesMentionPatterns } from "../mentions-iQ6M41tE.js";
 import { n as logInboundDrop } from "../logging-QrQbJdm1.js";
-import { r as dispatchInboundDirectDmWithRuntime, t as createDirectDmPreCryptoGuardPolicy } from "../direct-dm-C0xh1pRn.js";
-import { n as shouldDebounceTextInbound, t as createChannelInboundDebouncer } from "../channel-inbound-DpvRu6b5.js";
+import { r as dispatchInboundDirectDmWithRuntime, t as createDirectDmPreCryptoGuardPolicy } from "../direct-dm-BPMD39fP.js";
+import { n as shouldDebounceTextInbound, t as createChannelInboundDebouncer } from "../channel-inbound-B9Zk3Zh2.js";
 import { n as resolveMentionGatingWithBypass, t as resolveMentionGating } from "../mention-gating-BMJ56FEc.js";
 import { n as toLocationContext, t as formatLocationText } from "../location-BjNTKdF8.js";
 import { t as resolveInboundSessionEnvelopeContext } from "../session-envelope-E4dMNg1j.js";

package/dist/plugin-sdk/command-auth.js

@@ -1,14 +1,14 @@
-import { $ as buildCommandsMessagePaginated, Q as buildCommandsMessage, et as buildHelpMessage } from "../pi-embedded-CerJ7PL1.js";
+import { $ as buildCommandsMessagePaginated, Q as buildCommandsMessage, et as buildHelpMessage } from "../pi-embedded-B-BUeGYW.js";
 import { _ as resolveTextCommand, a as isCommandEnabled, c as listChatCommands, d as listNativeCommandSpecsForConfig, f as maybeResolveTextAlias, g as resolveCommandArgMenu, h as resolveCommandArgChoices, i as getCommandDetection, l as listChatCommandsForConfig, m as parseCommandArgs, n as buildCommandTextFromArgs, o as isCommandMessage, p as normalizeCommandBody, r as findCommandByNativeName, s as isNativeCommandSurface, t as buildCommandText, u as listNativeCommandSpecs, v as serializeCommandArgs, y as shouldHandleTextCommands } from "../commands-registry-DWRe5sb3.js";
 import { i as shouldComputeCommandAuthorized, n as hasInlineCommandTokens, r as isControlCommandMessage, t as hasControlCommand } from "../command-detection-UpsihB9z.js";
 import { n as resolveControlCommandGate, r as resolveDualTextControlCommandGate, t as resolveCommandAuthorizedFromAuthorizers } from "../command-gating-C1pxR5Zz.js";
 import { t as resolveCommandAuthorization } from "../command-auth-B9j7BFKt.js";
 import { i as resolveStoredModelOverride } from "../model-selection-C_RQdavh.js";
 import { n as resolveSkillCommandInvocation, t as listReservedChatSlashCommandNames } from "../skill-commands-base-CGr9pdgy.js";
-import { i as resolveInboundDirectDmAccessWithRuntime, n as createPreCryptoDirectDmAuthorizer } from "../direct-dm-C0xh1pRn.js";
+import { i as resolveInboundDirectDmAccessWithRuntime, n as createPreCryptoDirectDmAuthorizer } from "../direct-dm-BPMD39fP.js";
 import { t as resolveNativeCommandSessionTargets } from "../native-command-session-targets-BbD3jt7U.js";
 import { n as listSkillCommandsForWorkspace, t as listSkillCommandsForAgents } from "../skill-commands-BDLp-pOv.js";
-import { t as buildCommandsPaginationKeyboard } from "../commands-info-Dj3zBKFI.js";
+import { t as buildCommandsPaginationKeyboard } from "../commands-info-DsJW4QVr.js";
 import { i as resolveModelsCommandReply, n as formatModelsAvailableHeader, t as buildModelsProviderData } from "../commands-models-BZxnVKNI.js";
-import { n as resolveSenderCommandAuthorization, r as resolveSenderCommandAuthorizationWithRuntime, t as resolveDirectDmAuthorizationOutcome } from "../command-auth-KEnd6pnx.js";
+import { n as resolveSenderCommandAuthorization, r as resolveSenderCommandAuthorizationWithRuntime, t as resolveDirectDmAuthorizationOutcome } from "../command-auth-CuWzu-F1.js";
 export { buildCommandText, buildCommandTextFromArgs, buildCommandsMessage, buildCommandsMessagePaginated, buildCommandsPaginationKeyboard, buildHelpMessage, buildModelsProviderData, createPreCryptoDirectDmAuthorizer, findCommandByNativeName, formatModelsAvailableHeader, getCommandDetection, hasControlCommand, hasInlineCommandTokens, isCommandEnabled, isCommandMessage, isControlCommandMessage, isNativeCommandSurface, listChatCommands, listChatCommandsForConfig, listNativeCommandSpecs, listNativeCommandSpecsForConfig, listReservedChatSlashCommandNames, listSkillCommandsForAgents, listSkillCommandsForWorkspace, maybeResolveTextAlias, normalizeCommandBody, parseCommandArgs, resolveCommandArgChoices, resolveCommandArgMenu, resolveCommandAuthorization, resolveCommandAuthorizedFromAuthorizers, resolveControlCommandGate, resolveDirectDmAuthorizationOutcome, resolveDualTextControlCommandGate, resolveInboundDirectDmAccessWithRuntime, resolveModelsCommandReply, resolveNativeCommandSessionTargets, resolveSenderCommandAuthorization, resolveSenderCommandAuthorizationWithRuntime, resolveSkillCommandInvocation, resolveStoredModelOverride, resolveTextCommand, serializeCommandArgs, shouldComputeCommandAuthorized, shouldHandleTextCommands };

package/dist/plugin-sdk/compat.js

@@ -5,7 +5,7 @@ import { o as ToolPolicySchema } from "../zod-schema.agent-runtime-DFC7a3eV.js";
 import { t as WhatsAppConfigSchema } from "../zod-schema.providers-whatsapp-CanJPkvb.js";
 import { n as emptyPluginConfigSchema } from "../config-schema-BPJwKDA8.js";
 import { t as buildAccountScopedDmSecurityPolicy } from "../helpers-DGpyy7OJ.js";
-import { t as delegateCompactionToRuntime } from "../delegate-JJTyuCt7.js";
+import { t as delegateCompactionToRuntime } from "../delegate-Cp3QVJ2S.js";
 import { r as onDiagnosticEvent } from "../diagnostic-events-DQWS9Ph3.js";
 import { a as createHybridChannelConfigAdapter, c as createScopedChannelConfigAdapter, d as createTopLevelChannelConfigAdapter, f as createTopLevelChannelConfigBase, g as mapAllowFromEntries, l as createScopedChannelConfigBase, o as createHybridChannelConfigBase, s as createScopedAccountConfigAccessors, u as createScopedDmSecurityResolver } from "../channel-config-helpers-Dtf4h_kB.js";
 import { t as KeyedAsyncQueue } from "../keyed-async-queue-DYqPtpxF.js";

package/dist/plugin-sdk/conversation-runtime.js

@@ -8,8 +8,8 @@ import { t as buildPairingReply } from "../pairing-messages-utrpFSsk.js";
 import { a as readChannelAllowFromStore, c as readLegacyChannelAllowFromStoreSync, d as upsertChannelPairingRequest, i as listChannelPairingRequests, l as removeChannelAllowFromStoreEntry, n as approveChannelPairingCode, o as readChannelAllowFromStoreSync, r as clearPairingAllowFromReadCacheForTest, s as readLegacyChannelAllowFromStore, t as addChannelAllowFromStoreEntry, u as resolveChannelAllowFromPath } from "../pairing-store-M7yWupEL.js";
 import { a as resolveConfiguredBindingRecordForConversation, i as resolveConfiguredBindingRecordBySessionKey, n as resolveConfiguredBinding, r as resolveConfiguredBindingRecord, t as primeConfiguredBindingRegistry } from "../binding-registry-CRRyAbC4.js";
 import { c as resolvePinnedMainDmOwnerFromAllowlist } from "../dm-policy-shared-B3u6H_Bi.js";
-import { n as ensureConfiguredBindingTargetSession, r as resetConfiguredBindingTargetInPlace, t as ensureConfiguredBindingTargetReady } from "../binding-targets-D0aQV3wU.js";
-import { i as resolveConfiguredBindingRoute, n as recordInboundSessionMetaSafe, r as ensureConfiguredBindingRouteReady, t as resolveThreadBindingConversationIdFromBindingId } from "../conversation-runtime-Dp5nqDpQ.js";
+import { n as ensureConfiguredBindingTargetSession, r as resetConfiguredBindingTargetInPlace, t as ensureConfiguredBindingTargetReady } from "../binding-targets-CqpuooAS.js";
+import { i as resolveConfiguredBindingRoute, n as recordInboundSessionMetaSafe, r as ensureConfiguredBindingRouteReady, t as resolveThreadBindingConversationIdFromBindingId } from "../conversation-runtime-CbPqrr21.js";
 import { t as issuePairingChallenge } from "../pairing-challenge-By2eIEQr.js";
 import { t as resolvePairingIdLabel } from "../pairing-labels-C8IKRjbd.js";
 export { DISCORD_THREAD_BINDING_CHANNEL, MATRIX_THREAD_BINDING_CHANNEL, SessionBindingError, __testing, addChannelAllowFromStoreEntry, approveChannelPairingCode, buildPairingReply, buildPluginBindingApprovalCustomId, buildPluginBindingDeclinedText, buildPluginBindingErrorText, buildPluginBindingResolvedText, buildPluginBindingUnavailableText, clearPairingAllowFromReadCacheForTest, createConversationBindingRecord, createScopedAccountReplyToModeResolver, createStaticReplyToModeResolver, createTopLevelChannelReplyToModeResolver, detachPluginConversationBinding, ensureConfiguredBindingRouteReady, ensureConfiguredBindingTargetReady, ensureConfiguredBindingTargetSession, formatThreadBindingDisabledError, formatThreadBindingDurationLabel, getConversationBindingCapabilities, getCurrentPluginConversationBinding, getSessionBindingService, hasShownPluginBindingFallbackNotice, isPluginOwnedBindingMetadata, isPluginOwnedSessionBindingRecord, isSessionBindingError, issuePairingChallenge, listChannelPairingRequests, listSessionBindingRecords, markPluginBindingFallbackNoticeShown, parsePluginBindingApprovalCustomId, primeConfiguredBindingRegistry, readChannelAllowFromStore, readChannelAllowFromStoreSync, readLegacyChannelAllowFromStore, readLegacyChannelAllowFromStoreSync, recordInboundSession, recordInboundSessionMetaSafe, registerSessionBindingAdapter, removeChannelAllowFromStoreEntry, requestPluginConversationBinding, resetConfiguredBindingTargetInPlace, resolveChannelAllowFromPath, resolveConfiguredBinding, resolveConfiguredBindingRecord, resolveConfiguredBindingRecordBySessionKey, resolveConfiguredBindingRecordForConversation, resolveConfiguredBindingRoute, resolveConversationBindingRecord, resolveConversationLabel, resolvePairingIdLabel, resolvePinnedMainDmOwnerFromAllowlist, resolvePluginConversationBindingApproval, resolveThreadBindingConversationIdFromBindingId, resolveThreadBindingEffectiveExpiresAt, resolveThreadBindingFarewellText, resolveThreadBindingIdleTimeoutMs, resolveThreadBindingIdleTimeoutMsForChannel, resolveThreadBindingIntroText, resolveThreadBindingLifecycle, resolveThreadBindingMaxAgeMs, resolveThreadBindingMaxAgeMsForChannel, resolveThreadBindingSpawnPolicy, resolveThreadBindingThreadName, resolveThreadBindingsEnabled, toPluginConversationBinding, touchConversationBindingRecord, unbindConversationBindingRecord, unregisterSessionBindingAdapter, upsertChannelPairingRequest };

package/dist/plugin-sdk/core.js

@@ -10,7 +10,7 @@ import { n as emptyPluginConfigSchema, t as buildPluginConfigSchema } from "../c
 import { s as migrateBaseNameToDefaultAccount, t as applyAccountNameToChannelSection } from "../setup-helpers-DCQhpzeR.js";
 import { n as deleteAccountFromConfigSection, r as setAccountEnabledInConfigSection, t as clearAccountEntryFields } from "../config-helpers-DoLT0Vxs.js";
 import { n as formatPairingApproveHint, r as parseOptionalDelimitedEntries } from "../helpers-DGpyy7OJ.js";
-import { t as delegateCompactionToRuntime } from "../delegate-JJTyuCt7.js";
+import { t as delegateCompactionToRuntime } from "../delegate-Cp3QVJ2S.js";
 import { a as generateSecureUuid, i as generateSecureToken } from "../secure-random-C8iCVhts.js";
 import { i as stringEnum, n as channelTargetsSchema, r as optionalStringEnum, t as channelTargetSchema } from "../typebox-OD6ghaTU.js";
 import { t as buildAgentSessionKey } from "../resolve-route-YoCM2zMs.js";
@@ -18,5 +18,5 @@ import { n as enqueueKeyedTask, t as KeyedAsyncQueue } from "../keyed-async-queu
 import { t as definePluginEntry } from "../plugin-entry-DQ-DAQW6.js";
 import { i as tryReadSecretFileSync, n as loadSecretFileSync, r as readSecretFileSync, t as DEFAULT_SECRET_FILE_MAX_BYTES } from "../secret-file-82X1ac7s.js";
 import { n as resolveGatewayBindUrl, t as resolveTailnetHostWithRunner } from "../tailscale-status-COLb89R6.js";
-import { a as defineSetupPluginEntry, i as defineChannelPluginEntry, n as createChannelPluginBase, o as stripChannelTargetPrefix, r as createChatChannelPlugin, s as stripTargetKindPrefix, t as buildChannelOutboundSessionRoute } from "../core-C8IVOEps.js";
+import { a as defineSetupPluginEntry, i as defineChannelPluginEntry, n as createChannelPluginBase, o as stripChannelTargetPrefix, r as createChatChannelPlugin, s as stripTargetKindPrefix, t as buildChannelOutboundSessionRoute } from "../core-Cf2EqUD2.js";
 export { DEFAULT_ACCOUNT_ID, DEFAULT_SECRET_FILE_MAX_BYTES, KeyedAsyncQueue, applyAccountNameToChannelSection, buildAgentSessionKey, buildChannelConfigSchema, buildChannelOutboundSessionRoute, buildPluginConfigSchema, channelTargetSchema, channelTargetsSchema, clearAccountEntryFields, createChannelPluginBase, createChatChannelPlugin, createDedupeCache, createSubsystemLogger, defineChannelPluginEntry, definePluginEntry, defineSetupPluginEntry, delegateCompactionToRuntime, deleteAccountFromConfigSection, emptyPluginConfigSchema, enqueueKeyedTask, formatPairingApproveHint, generateSecureToken, generateSecureUuid, getChatChannelMeta, isSecretRef, loadSecretFileSync, migrateBaseNameToDefaultAccount, normalizeAccountId, normalizeAtHashSlug, normalizeHyphenSlug, optionalStringEnum, parseOptionalDelimitedEntries, readSecretFileSync, resolveGatewayBindUrl, resolveGatewayPort, resolveGlobalDedupeCache, resolveTailnetHostWithRunner, resolveThreadSessionKeys, setAccountEnabledInConfigSection, stringEnum, stripChannelTargetPrefix, stripTargetKindPrefix, tryReadSecretFileSync };

package/dist/plugin-sdk/direct-dm.js

@@ -1,2 +1,2 @@
-import { i as resolveInboundDirectDmAccessWithRuntime, n as createPreCryptoDirectDmAuthorizer, r as dispatchInboundDirectDmWithRuntime, t as createDirectDmPreCryptoGuardPolicy } from "../direct-dm-C0xh1pRn.js";
+import { i as resolveInboundDirectDmAccessWithRuntime, n as createPreCryptoDirectDmAuthorizer, r as dispatchInboundDirectDmWithRuntime, t as createDirectDmPreCryptoGuardPolicy } from "../direct-dm-BPMD39fP.js";
 export { createDirectDmPreCryptoGuardPolicy, createPreCryptoDirectDmAuthorizer, dispatchInboundDirectDmWithRuntime, resolveInboundDirectDmAccessWithRuntime };

package/dist/plugin-sdk/gateway-runtime.js

@@ -1,4 +1,4 @@
-import { t as GatewayClient } from "../client-xfpSQS5-.js";
-import { t as createOperatorApprovalsGatewayClient } from "../operator-approvals-client-CvSRrb2g.js";
-import { t as createConnectedChannelStatusPatch } from "../gateway-runtime-BfqNrObR.js";
+import { t as GatewayClient } from "../client-D3j-cx-d.js";
+import { t as createOperatorApprovalsGatewayClient } from "../operator-approvals-client-C1VWVPj4.js";
+import { t as createConnectedChannelStatusPatch } from "../gateway-runtime-B-OL2JYE.js";
 export { GatewayClient, createConnectedChannelStatusPatch, createOperatorApprovalsGatewayClient };

package/dist/plugin-sdk/index.js

@@ -1,5 +1,5 @@
 import { t as registerContextEngine } from "../registry-I0jFMgpj.js";
 import { n as emptyPluginConfigSchema } from "../config-schema-BPJwKDA8.js";
-import { t as delegateCompactionToRuntime } from "../delegate-JJTyuCt7.js";
+import { t as delegateCompactionToRuntime } from "../delegate-Cp3QVJ2S.js";
 import { r as onDiagnosticEvent } from "../diagnostic-events-DQWS9Ph3.js";
 export { delegateCompactionToRuntime, emptyPluginConfigSchema, onDiagnosticEvent, registerContextEngine };

package/dist/plugin-sdk/infra-runtime.js

@@ -35,12 +35,12 @@ import { n as recordChannelActivity, r as resetChannelActivityForTest, t as getC
 import { a as resetHeartbeatEventsForTest, i as onHeartbeatEvent, n as emitHeartbeatEvent, o as resolveIndicatorType, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "../heartbeat-visibility-Bnbdcak_.js";
 import { n as createRuntimeOutboundDelegates } from "../runtime-forwarders-B71LJZhe.js";
 import { a as resolveExecApprovalSessionTarget, i as resolveApprovalRequestSessionTarget, n as resolveApprovalRequestAccountId, o as resolveExecApprovalCommandDisplay, r as resolveApprovalRequestOriginTarget, s as sanitizeExecApprovalDisplayText, t as doesApprovalRequestMatchChannelAccount } from "../exec-approval-session-target-B9vJTSNY.js";
-import { i as resolveChannelNativeApprovalDeliveryPlan, n as deliverApprovalRequestViaChannelNativePlan, r as createExecApprovalChannelRuntime, t as createChannelNativeApprovalRuntime } from "../approval-native-runtime-CDwPwinz.js";
+import { i as resolveChannelNativeApprovalDeliveryPlan, n as deliverApprovalRequestViaChannelNativePlan, r as createExecApprovalChannelRuntime, t as createChannelNativeApprovalRuntime } from "../approval-native-runtime-DLR2Sov5.js";
 import { t as waitForTransportReady } from "../transport-ready-BAZe1lNQ.js";
 import { n as resolveAgentOutboundIdentity, t as normalizeOutboundIdentity } from "../identity-FE50joyv.js";
 import { n as matchesDiagnosticFlag, r as resolveDiagnosticFlags, t as isDiagnosticFlagEnabled } from "../diagnostic-flags-l7bCSTSf.js";
 import { a as isRequestBodyLimitError, c as requestBodyErrorToText, i as installRequestBodyLimitGuard, n as DEFAULT_WEBHOOK_MAX_BODY_BYTES, o as readJsonBodyWithLimit, r as RequestBodyLimitError, s as readRequestBodyWithLimit, t as DEFAULT_WEBHOOK_BODY_TIMEOUT_MS } from "../http-body-z15-bEBp.js";
 import { n as createRateLimitRetryRunner, r as createTelegramRetryRunner, t as TELEGRAM_RETRY_DEFAULTS } from "../retry-policy-CeURW6qz.js";
 import { a as ssrfPolicyFromAllowPrivateNetwork, i as normalizeHostnameSuffixAllowlist, n as buildHostnameAllowlistPolicyFromSuffixAllowlist, r as isHttpsUrlAllowedByHostnameSuffixAllowlist, t as assertHttpUrlTargetsPrivateNetwork } from "../ssrf-policy-DuaKtauU.js";
-import "../infra-runtime-DeOUqLRl.js";
+import "../infra-runtime-B98s1wcH.js";
 export { DEFAULT_EXEC_APPROVAL_ASK_FALLBACK, DEFAULT_EXEC_APPROVAL_DECISIONS, DEFAULT_EXEC_APPROVAL_TIMEOUT_MS, DEFAULT_PLUGIN_APPROVAL_TIMEOUT_MS, DEFAULT_SAFE_BINS, DEFAULT_SECRET_FILE_MAX_BYTES, DEFAULT_UNDICI_STREAM_TIMEOUT_MS, DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, DEFAULT_WEBHOOK_MAX_BODY_BYTES, GUARDED_FETCH_MODE, MAX_PLUGIN_APPROVAL_TIMEOUT_MS, PLUGIN_APPROVAL_DESCRIPTION_MAX_LENGTH, PLUGIN_APPROVAL_TITLE_MAX_LENGTH, POSIX_OPENCLAW_TMP_DIR, PROXY_ENV_KEYS, PROXY_FETCH_PROXY_URL, RequestBodyLimitError, SYSTEM_MARK, SafeOpenError, SsrFBlockedError, TELEGRAM_RETRY_DEFAULTS, acquireFileLock, addAllowlistEntry, addDurableCommandApproval, analyzeArgvCommand, analyzeShellCommand, appendFileWithinRoot, approvalDecisionLabel, assertHttpUrlTargetsPrivateNetwork, assertNoWindowsNetworkPath, assertPublicHostname, basenameFromMediaSource, bindAbortRelay, buildApprovalInteractiveReply, buildEnforcedShellCommand, buildExecApprovalActionDescriptors, buildExecApprovalCommandText, buildExecApprovalInteractiveReply, buildExecApprovalPendingReplyPayload, buildExecApprovalUnavailableReplyPayload, buildHostnameAllowlistPolicyFromSuffixAllowlist, buildPluginApprovalExpiredMessage, buildPluginApprovalRequestMessage, buildPluginApprovalResolvedMessage, buildSafeBinsShellCommand, buildSafeShellCommand, buildTimeoutAbortSignal, closeDispatcher, collectErrorGraphCandidates, computeBackoff, copyFileWithinRoot, createAsyncLock, createChannelNativeApprovalRuntime, createDedupeCache, createExecApprovalChannelRuntime, createPinnedDispatcher, createPinnedLookup, createRateLimitRetryRunner, createRootScopedReadFile, createRuntimeOutboundDelegates, createTelegramRetryRunner, deliverApprovalRequestViaChannelNativePlan, doesApprovalRequestMatchChannelAccount, drainFileLockStateForTest, drainSystemEventEntries, drainSystemEvents, emitDiagnosticEvent, emitHeartbeatEvent, enqueueSystemEvent, ensureExecApprovals, ensureGlobalUndiciEnvProxyDispatcher, ensureGlobalUndiciStreamTimeouts, evaluateExecAllowlist, evaluateShellAllowlist, expandHomePrefix, extractErrorCode, fetchWithSsrFGuard, fetchWithTimeout, formatDurationCompact, formatDurationHuman, formatDurationPrecise, formatDurationSeconds, formatErrorMessage, formatExecApprovalExpiresIn, formatUncaughtError, generateSecureFraction, generateSecureHex, generateSecureInt, generateSecureToken, generateSecureUuid, getChannelActivity, getExecApprovalApproverDmNoticeText, getExecApprovalReplyMetadata, getLastHeartbeatEvent, getProxyUrlFromFetch, hasDurableExecApproval, hasEnvHttpProxyConfigured, hasErrnoCode, hasProxyEnvConfigured, hasSystemEvents, hasSystemMark, installRequestBodyLimitGuard, isBlockedHostname, isBlockedHostnameOrIp, isDiagnosticFlagEnabled, isDiagnosticsEnabled, isErrno, isExecApprovalDecisionAllowed, isHttpsUrlAllowedByHostnameSuffixAllowlist, isPrivateIpAddress, isPrivateNetworkAllowedByPolicy, isRequestBodyLimitError, isSafeBinUsage, isSafeScpRemoteHost, isSafeScpRemotePath, isSystemEventContextChanged, isTruthyEnvValue, isWSL, isWSL2Sync, isWSLEnv, isWSLSync, isWindowsNetworkPath, isWindowsPlatform, loadExecApprovals, loadSecretFileSync, logAcceptedEnvOption, makeProxyFetch, matchAllowlist, matchesDiagnosticFlag, maxAsk, mergeExecApprovalsSocketDefaults, minSecurity, mkdirPathWithinRoot, normalizeEnv, normalizeExecApprovals, normalizeExecAsk, normalizeExecHost, normalizeExecSecurity, normalizeExecTarget, normalizeHostname, normalizeHostnameSuffixAllowlist, normalizeOutboundIdentity, normalizeSafeBins, normalizeScpRemoteHost, normalizeScpRemotePath, normalizeZaiEnv, onDiagnosticEvent, onHeartbeatEvent, openFileWithinRoot, openWritableFileWithinRoot, parseExecApprovalCommandText, parseExecArgvToken, peekSystemEventEntries, peekSystemEvents, persistAllowAlwaysPatterns, prefixSystemMessage, pruneMapToMaxSize, readErrorName, readExecApprovalsSnapshot, readFileWithinRoot, readJsonBodyWithLimit, readJsonFile, readLocalFileSafely, readPathWithinRoot, readRequestBodyWithLimit, readSecretFileSync, recordAllowlistMatchesUse, recordAllowlistUse, recordChannelActivity, removePathWithinRoot, requestBodyErrorToText, requestExecApprovalViaSocket, requiresExecApproval, resetChannelActivityForTest, resetDiagnosticEventsForTest, resetFileLockStateForTest, resetGlobalUndiciStreamTimeoutsForTests, resetHeartbeatEventsForTest, resetSystemEventsForTest, resetWSLStateForTests, resolveAgentOutboundIdentity, resolveAllowAlwaysPatternEntries, resolveAllowAlwaysPatterns, resolveAllowlistCandidatePath, resolveApprovalAuditCandidatePath, resolveApprovalRequestAccountId, resolveApprovalRequestOriginTarget, resolveApprovalRequestSessionTarget, resolveChannelNativeApprovalDeliveryPlan, resolveCommandResolution, resolveCommandResolutionFromArgv, resolveDiagnosticFlags, resolveEffectiveHomeDir, resolveEnvHttpProxyUrl, resolveExecApprovalAllowedDecisions, resolveExecApprovalCommandDisplay, resolveExecApprovalRequestAllowedDecisions, resolveExecApprovalSessionTarget, resolveExecApprovals, resolveExecApprovalsFromFile, resolveExecApprovalsPath, resolveExecApprovalsSocketPath, resolveExecutionTargetCandidatePath, resolveExecutionTargetResolution, resolveFetch, resolveGlobalDedupeCache, resolveHeartbeatVisibility, resolveHomeRelativePath, resolveIndicatorType, resolveOpenedFileRealPathForHandle, resolveOsHomeDir, resolveOsHomeRelativePath, resolveOutboundSendDep, resolvePinnedHostname, resolvePinnedHostnameWithPolicy, resolvePlannedSegmentArgv, resolvePolicyAllowlistCandidatePath, resolvePolicyTargetCandidatePath, resolvePolicyTargetResolution, resolvePreferredOpenClawTmpDir, resolveProxyFetchFromEnv, resolveRequiredHomeDir, resolveRequiredOsHomeDir, resolveRetryConfig, resolveSafeBins, resolveSystemEventDeliveryContext, retainSafeHeadersForCrossOriginRedirectHeaders, retryAsync, safeFileURLToPath, sanitizeExecApprovalDisplayText, saveExecApprovals, sleepWithAbort, splitCommandChain, splitCommandChainWithOperators, ssrfPolicyFromAllowPrivateNetwork, tryReadSecretFileSync, trySafeFileURLToPath, waitForTransportReady, windowsEscapeArg, withFileLock, withStrictGuardedFetchMode, withTrustedEnvProxyGuardedFetchMode, wrapFetchWithAbortSignal, writeFileFromPathWithinRoot, writeFileWithinRoot, writeJsonAtomic, writeTextAtomic };

package/dist/plugin-sdk/irc.js

@@ -21,10 +21,10 @@ import { n as readStoreAllowFromForDmPolicy, s as resolveEffectiveAllowFromLists
 import { t as createLoggerBackedRuntime } from "../runtime-B_r2UWcp.js";
 import { n as isDangerousNameMatchingEnabled } from "../dangerous-name-matching-Du5xdacY.js";
 import { t as createChannelReplyPipeline } from "../channel-reply-pipeline-CWpjKnij.js";
-import { t as dispatchInboundReplyWithBase } from "../inbound-reply-dispatch-BYNP2tD_.js";
+import { t as dispatchInboundReplyWithBase } from "../inbound-reply-dispatch-C4BDzazv.js";
 import { n as createChannelPairingController } from "../channel-pairing-ChONOWRl.js";
 import { n as logInboundDrop } from "../logging-QrQbJdm1.js";
 import { t as chunkTextForOutbound } from "../text-chunking-DPtN5psP.js";
 import { a as resolveIrcAccount, i as resolveDefaultIrcAccountId, n as ircSetupWizard, r as listIrcAccountIds, t as ircSetupAdapter } from "../irc-surface-D4mdgHEp.js";
-import "../irc-DaYwx7ca.js";
+import "../irc-B3V-SsOb.js";
 export { BlockStreamingCoalesceSchema, DEFAULT_ACCOUNT_ID, DmConfigSchema, DmPolicySchema, GROUP_POLICY_BLOCKED_LABEL, GroupPolicySchema, MarkdownConfigSchema, PAIRING_APPROVED_MESSAGE, ReplyRuntimeConfigSchemaShape, ToolPolicySchema, addWildcardAllowFrom, buildBaseAccountStatusSnapshot, buildBaseChannelStatusSummary, buildChannelConfigSchema, chunkTextForOutbound, createAccountListHelpers, createAccountStatusSink, createChannelPairingController, createChannelReplyPipeline, createLoggerBackedRuntime, createNormalizedOutboundDeliverer, deleteAccountFromConfigSection, deliverFormattedTextWithAttachments, dispatchInboundReplyWithBase, emptyPluginConfigSchema, formatDocsLink, formatPairingApproveHint, formatTextWithAttachmentLinks, getChatChannelMeta, ircSetupAdapter, ircSetupWizard, isDangerousNameMatchingEnabled, listIrcAccountIds, logInboundDrop, normalizeResolvedSecretInputString, parseOptionalDelimitedEntries, patchScopedAccountConfig, readStoreAllowFromForDmPolicy, requireOpenAllowFrom, resolveAllowlistProviderRuntimeGroupPolicy, resolveControlCommandGate, resolveDefaultGroupPolicy, resolveDefaultIrcAccountId, resolveEffectiveAllowFromLists, resolveIrcAccount, resolveOutboundMediaUrls, runPassiveAccountLifecycle, setAccountEnabledInConfigSection, setTopLevelChannelAllowFrom, setTopLevelChannelDmPolicyWithAllowFrom, warnMissingProviderGroupPolicyFallbackOnce };

package/dist/plugin-sdk/matrix-runtime-heavy.js

@@ -1,5 +1,5 @@
-import { i as resolveConfiguredAcpBindingRecord, t as ensureConfiguredAcpBindingReady } from "../persistent-bindings.lifecycle-CZNFGh5U.js";
+import { i as resolveConfiguredAcpBindingRecord, t as ensureConfiguredAcpBindingReady } from "../persistent-bindings.lifecycle-UEbEAGSN.js";
 import { r as maybeCreateMatrixMigrationSnapshot } from "../matrix-migration-snapshot-DZMKz_Yf.js";
-import { n as dispatchReplyFromConfigWithSettledDispatcher } from "../inbound-reply-dispatch-BYNP2tD_.js";
-import "../matrix-runtime-heavy-BL_kb-La.js";
+import { n as dispatchReplyFromConfigWithSettledDispatcher } from "../inbound-reply-dispatch-C4BDzazv.js";
+import "../matrix-runtime-heavy-B6qfmcK7.js";
 export { dispatchReplyFromConfigWithSettledDispatcher, ensureConfiguredAcpBindingReady, maybeCreateMatrixMigrationSnapshot, resolveConfiguredAcpBindingRecord };

package/dist/plugin-sdk/memory-core-host-runtime-cli.js

@@ -5,8 +5,8 @@ import { b as shortenHomeInString, x as shortenHomePath } from "../utils-CN_F_3Q
 import { t as formatDocsLink } from "../links-D7o22Ygt.js";
 import { n as isRich, r as theme, t as colorize } from "../theme-wBMZmJzz.js";
 import { n as withProgress, r as withProgressTotals } from "../progress-DvCgVlxj.js";
-import { t as resolveCommandSecretRefsViaGateway } from "../command-secret-gateway-H8byy2b2.js";
+import { t as resolveCommandSecretRefsViaGateway } from "../command-secret-gateway-B9gWZxp8.js";
 import { r as withManager } from "../cli-utils-C74WP4NL.js";
 import { t as formatHelpExamples } from "../help-format-xfCRmgrW.js";
-import "../memory-core-host-runtime-cli-D2HEnCUy.js";
+import "../memory-core-host-runtime-cli-BoSc_M_7.js";
 export { colorize, defaultRuntime, formatDocsLink, formatErrorMessage, formatHelpExamples, isRich, isVerbose, resolveCommandSecretRefsViaGateway, setVerbose, shortenHomeInString, shortenHomePath, theme, withManager, withProgress, withProgressTotals };

package/dist/plugin-sdk/memory-core.js

@@ -15,14 +15,14 @@ import { n as emptyPluginConfigSchema } from "../config-schema-BPJwKDA8.js";
 import { n as SILENT_REPLY_TOKEN } from "../tokens-iPj4pUwM.js";
 import { c as jsonResult, d as readNumberParam, h as readStringParam } from "../common-La10dROO.js";
 import { t as DEFAULT_PI_COMPACTION_RESERVE_TOKENS_FLOOR } from "../pi-settings-BE6zNRcP.js";
-import { t as resolveCommandSecretRefsViaGateway } from "../command-secret-gateway-H8byy2b2.js";
+import { t as resolveCommandSecretRefsViaGateway } from "../command-secret-gateway-B9gWZxp8.js";
 import { t as resolveMemorySearchConfig } from "../memory-search-D8zpD6JY.js";
 import { n as resolveCronStyleNow } from "../current-time-28Gcdx6M.js";
 import { r as withManager } from "../cli-utils-C74WP4NL.js";
 import { t as formatHelpExamples } from "../help-format-xfCRmgrW.js";
 import { r as getMemorySearchManager, t as MemoryIndexManager } from "../memory-core-engine-runtime-D8xp4iP2.js";
 import "../memory-core-host-runtime-core-BtktgHV-.js";
-import "../memory-core-host-runtime-cli-D2HEnCUy.js";
+import "../memory-core-host-runtime-cli-BoSc_M_7.js";
 import { c as listMemoryFiles, l as normalizeExtraMemoryPaths } from "../internal-CCdqjzr1.js";
 import { n as readAgentMemoryFile, t as resolveMemoryBackendConfig } from "../backend-config-DcClfZ9A.js";
 import "../memory-core-host-runtime-files-D4mX-n_p.js";

package/dist/plugin-sdk/msteams.js

@@ -34,7 +34,7 @@ import { n as isDangerousNameMatchingEnabled } from "../dangerous-name-matching-
 import { t as createChannelReplyPipeline } from "../channel-reply-pipeline-CWpjKnij.js";
 import { n as DEFAULT_WEBHOOK_MAX_BODY_BYTES } from "../http-body-z15-bEBp.js";
 import { i as normalizeHostnameSuffixAllowlist, n as buildHostnameAllowlistPolicyFromSuffixAllowlist, r as isHttpsUrlAllowedByHostnameSuffixAllowlist } from "../ssrf-policy-DuaKtauU.js";
-import { n as dispatchReplyFromConfigWithSettledDispatcher } from "../inbound-reply-dispatch-BYNP2tD_.js";
+import { n as dispatchReplyFromConfigWithSettledDispatcher } from "../inbound-reply-dispatch-C4BDzazv.js";
 import { n as filterSupplementalContextItems, r as shouldIncludeSupplementalContext } from "../context-visibility-C0r_LafH.js";
 import { n as createChannelPairingController } from "../channel-pairing-ChONOWRl.js";
 import { t as loadOutboundMediaFromUrl } from "../outbound-media-kvtFva5R.js";
@@ -42,5 +42,5 @@ import { n as logInboundDrop, r as logTypingFailure } from "../logging-QrQbJdm1.
 import { t as resolveMentionGating } from "../mention-gating-BMJ56FEc.js";
 import { t as resolveInboundSessionEnvelopeContext } from "../session-envelope-E4dMNg1j.js";
 import { t as chunkTextForOutbound } from "../text-chunking-DPtN5psP.js";
-import { n as msteamsSetupWizard, t as msteamsSetupAdapter } from "../msteams-C7d3jY-J.js";
+import { n as msteamsSetupWizard, t as msteamsSetupAdapter } from "../msteams-H9dU-01f.js";
 export { DEFAULT_ACCOUNT_ID, DEFAULT_GROUP_HISTORY_LIMIT, DEFAULT_WEBHOOK_MAX_BODY_BYTES, MSTeamsConfigSchema, PAIRING_APPROVED_MESSAGE, SILENT_REPLY_TOKEN, addWildcardAllowFrom, buildBaseChannelStatusSummary, buildChannelConfigSchema, buildChannelKeyCandidates, buildHostnameAllowlistPolicyFromSuffixAllowlist, buildMediaPayload, buildPendingHistoryContextFromMap, buildProbeChannelStatusSummary, buildRuntimeAccountStatusSnapshot, chunkTextForOutbound, clearHistoryEntriesIfEnabled, createChannelPairingController, createChannelReplyPipeline, createDefaultChannelRuntimeState, detectMime, dispatchReplyFromConfigWithSettledDispatcher, emptyPluginConfigSchema, evaluateSenderGroupAccessForPolicy, extensionForMime, extractOriginalFilename, fetchWithSsrFGuard, filterSupplementalContextItems, formatAllowlistMatchMeta, formatDocsLink, getFileExtension, hasConfiguredSecretInput, isDangerousNameMatchingEnabled, isHttpsUrlAllowedByHostnameSuffixAllowlist, isPrivateIpAddress, isSilentReplyText, keepHttpServerTaskAlive, loadOutboundMediaFromUrl, loadWebMedia, logInboundDrop, logTypingFailure, mergeAllowFromEntries, mergeAllowlist, msteamsSetupAdapter, msteamsSetupWizard, normalizeChannelSlug, normalizeHostnameSuffixAllowlist, normalizeResolvedSecretInputString, normalizeSecretInputString, normalizeStringEntries, readJsonFileWithFallback, readStoreAllowFromForDmPolicy, recordPendingHistoryEntryIfEnabled, resolveAllowlistMatchSimple, resolveAllowlistProviderRuntimeGroupPolicy, resolveChannelContextVisibilityMode, resolveChannelEntryMatchWithFallback, resolveChannelMediaMaxBytes, resolveControlCommandGate, resolveDefaultGroupPolicy, resolveDmGroupAccessWithLists, resolveDualTextControlCommandGate, resolveEffectiveAllowFromLists, resolveInboundSessionEnvelopeContext, resolveMentionGating, resolveNestedAllowlistDecision, resolveOutboundMediaUrls, resolveSendableOutboundReplyParts, resolveSenderScopedGroupPolicy, resolveToolsBySender, setTopLevelChannelAllowFrom, setTopLevelChannelDmPolicyWithAllowFrom, setTopLevelChannelGroupPolicy, shouldIncludeSupplementalContext, sleep, splitSetupEntries, summarizeMapping, withFileLock, writeJsonFileAtomically };

package/dist/plugin-sdk/nextcloud-talk.js

@@ -24,12 +24,12 @@ import { t as waitForAbortSignal } from "../abort-signal-CVfCHlkI.js";
 import { t as createLoggerBackedRuntime } from "../runtime-B_r2UWcp.js";
 import { t as createChannelReplyPipeline } from "../channel-reply-pipeline-CWpjKnij.js";
 import { a as isRequestBodyLimitError, c as requestBodyErrorToText, s as readRequestBodyWithLimit } from "../http-body-z15-bEBp.js";
-import { t as dispatchInboundReplyWithBase } from "../inbound-reply-dispatch-BYNP2tD_.js";
+import { t as dispatchInboundReplyWithBase } from "../inbound-reply-dispatch-C4BDzazv.js";
 import { n as createChannelPairingController } from "../channel-pairing-ChONOWRl.js";
 import { n as resolveAccountWithDefaultFallback, t as listConfiguredAccountIds } from "../account-resolution-DGFdfo-R.js";
 import { n as logInboundDrop } from "../logging-QrQbJdm1.js";
 import { n as resolveMentionGatingWithBypass } from "../mention-gating-BMJ56FEc.js";
 import { r as WEBHOOK_RATE_LIMIT_DEFAULTS } from "../webhook-memory-guards-CTcGJH1-.js";
 import { t as createPersistentDedupe } from "../persistent-dedupe-Dimpp8jo.js";
-import "../nextcloud-talk--60Hx9ze.js";
+import "../nextcloud-talk-5efAMFz3.js";
 export { BlockStreamingCoalesceSchema, DEFAULT_ACCOUNT_ID, DmConfigSchema, DmPolicySchema, GROUP_POLICY_BLOCKED_LABEL, GroupPolicySchema, MarkdownConfigSchema, ReplyRuntimeConfigSchemaShape, ToolPolicySchema, WEBHOOK_RATE_LIMIT_DEFAULTS, addWildcardAllowFrom, applyAccountNameToChannelSection, buildBaseChannelStatusSummary, buildChannelConfigSchema, buildChannelKeyCandidates, buildRuntimeAccountStatusSnapshot, buildSecretInputSchema, buildSingleChannelSecretPromptState, clearAccountEntryFields, createAccountListHelpers, createAuthRateLimiter, createChannelPairingController, createChannelReplyPipeline, createLoggerBackedRuntime, createNormalizedOutboundDeliverer, createPersistentDedupe, createSetupInputPresenceValidator, createTopLevelChannelDmPolicy, deleteAccountFromConfigSection, deliverFormattedTextWithAttachments, dispatchInboundReplyWithBase, emptyPluginConfigSchema, evaluateMatchedGroupAccessForPolicy, fetchWithSsrFGuard, formatDocsLink, formatPairingApproveHint, formatTextWithAttachmentLinks, hasConfiguredSecretInput, isRequestBodyLimitError, listConfiguredAccountIds, logInboundDrop, mapAllowFromEntries, mergeAllowFromEntries, normalizeAccountId, normalizeChannelSlug, normalizeResolvedSecretInputString, normalizeSecretInputString, patchScopedAccountConfig, promptParsedAllowFromForAccount, promptSingleChannelSecretInput, readRequestBodyWithLimit, readStoreAllowFromForDmPolicy, requestBodyErrorToText, requireOpenAllowFrom, resolveAccountWithDefaultFallback, resolveAllowlistProviderRuntimeGroupPolicy, resolveChannelEntryMatchWithFallback, resolveDefaultGroupPolicy, resolveDmGroupAccessWithCommandGate, resolveMentionGatingWithBypass, resolveNestedAllowlistDecision, resolveOutboundMediaUrls, resolveSetupAccountId, runSingleChannelSecretStep, setAccountEnabledInConfigSection, setSetupChannelEnabled, setTopLevelChannelDmPolicyWithAllowFrom, waitForAbortSignal, warnMissingProviderGroupPolicyFallbackOnce };

package/dist/plugin-sdk/nostr.js

@@ -8,7 +8,7 @@ import { s as isBlockedHostnameOrIp } from "../ssrf-CJ2xicnv.js";
 import { g as mapAllowFromEntries } from "../channel-config-helpers-Dtf4h_kB.js";
 import { t as createChannelReplyPipeline } from "../channel-reply-pipeline-CWpjKnij.js";
 import { c as requestBodyErrorToText, o as readJsonBodyWithLimit } from "../http-body-z15-bEBp.js";
-import { i as resolveInboundDirectDmAccessWithRuntime, n as createPreCryptoDirectDmAuthorizer, r as dispatchInboundDirectDmWithRuntime, t as createDirectDmPreCryptoGuardPolicy } from "../direct-dm-C0xh1pRn.js";
+import { i as resolveInboundDirectDmAccessWithRuntime, n as createPreCryptoDirectDmAuthorizer, r as dispatchInboundDirectDmWithRuntime, t as createDirectDmPreCryptoGuardPolicy } from "../direct-dm-BPMD39fP.js";
 import { a as createFixedWindowRateLimiter } from "../webhook-memory-guards-CTcGJH1-.js";
-import { n as nostrSetupWizard, t as nostrSetupAdapter } from "../nostr-ai25dJL6.js";
+import { n as nostrSetupWizard, t as nostrSetupAdapter } from "../nostr-BU-OcfVF.js";
 export { DEFAULT_ACCOUNT_ID, MarkdownConfigSchema, buildChannelConfigSchema, buildComputedAccountStatusSnapshot, collectStatusIssuesFromLastError, createChannelReplyPipeline, createDefaultChannelRuntimeState, createDirectDmPreCryptoGuardPolicy, createFixedWindowRateLimiter, createPreCryptoDirectDmAuthorizer, dispatchInboundDirectDmWithRuntime, emptyPluginConfigSchema, formatPairingApproveHint, isBlockedHostnameOrIp, mapAllowFromEntries, nostrSetupAdapter, nostrSetupWizard, readJsonBodyWithLimit, requestBodyErrorToText, resolveInboundDirectDmAccessWithRuntime };

package/dist/plugin-sdk/reply-dispatch-runtime.js

@@ -1,5 +1,5 @@
 import { s as resolveChunkMode } from "../chunk-CmLkZa5Z.js";
 import { t as finalizeInboundContext } from "../inbound-context-CDaqCpL9.js";
-import { n as dispatchReplyWithDispatcher, t as dispatchReplyWithBufferedBlockDispatcher } from "../provider-dispatcher-BLcg2ppt.js";
-import "../reply-dispatch-runtime-DpvDIpol.js";
+import { n as dispatchReplyWithDispatcher, t as dispatchReplyWithBufferedBlockDispatcher } from "../provider-dispatcher-DkXtQHin.js";
+import "../reply-dispatch-runtime-I5ypCg4p.js";
 export { dispatchReplyWithBufferedBlockDispatcher, dispatchReplyWithDispatcher, finalizeInboundContext, resolveChunkMode };

package/dist/plugin-sdk/reply-runtime.js

@@ -3,12 +3,12 @@ import { a as stripHeartbeatToken, i as resolveHeartbeatPrompt, n as HEARTBEAT_P
 import { a as chunkText, c as resolveTextChunkLimit, i as chunkMarkdownTextWithMode, o as chunkTextWithMode, r as chunkMarkdownText, s as resolveChunkMode } from "../chunk-CmLkZa5Z.js";
 import { n as parseActivationCommand, t as normalizeGroupActivation } from "../group-activation-D4JI4iJT.js";
 import { n as isAbortRequestText } from "../abort-primitives-BzpLk3MA.js";
-import { a as createReplyDispatcher, l as resetInboundDedupe, n as dispatchInboundMessageWithBufferedDispatcher, o as createReplyDispatcherWithTyping, r as dispatchInboundMessageWithDispatcher, t as dispatchInboundMessage } from "../dispatch-BWdIAPuM.js";
+import { a as createReplyDispatcher, l as resetInboundDedupe, n as dispatchInboundMessageWithBufferedDispatcher, o as createReplyDispatcherWithTyping, r as dispatchInboundMessageWithDispatcher, t as dispatchInboundMessage } from "../dispatch-BKmlSaAx.js";
 import { t as finalizeInboundContext } from "../inbound-context-CDaqCpL9.js";
 import { n as resolveInboundDebounceMs, t as createInboundDebouncer } from "../inbound-debounce-CIV6wjbN.js";
-import { n as dispatchReplyWithDispatcher, t as dispatchReplyWithBufferedBlockDispatcher } from "../provider-dispatcher-BLcg2ppt.js";
+import { n as dispatchReplyWithDispatcher, t as dispatchReplyWithBufferedBlockDispatcher } from "../provider-dispatcher-DkXtQHin.js";
 import { t as resolveHeartbeatReplyPayload } from "../heartbeat-reply-payload-DSZXbssV.js";
-import { t as getReplyFromConfig } from "../reply-D8jp8Al5.js";
+import { t as getReplyFromConfig } from "../reply-DRcc3PoU.js";
 import { n as isBtwRequestText } from "../btw-command-DURF5z42.js";
-import { n as resolveAutoTopicLabelConfig, r as createReplyReferencePlanner, t as generateTopicLabel } from "../reply-runtime-C4GNVzx7.js";
+import { n as resolveAutoTopicLabelConfig, r as createReplyReferencePlanner, t as generateTopicLabel } from "../reply-runtime-BDwXtN5w.js";
 export { DEFAULT_HEARTBEAT_ACK_MAX_CHARS, HEARTBEAT_PROMPT, HEARTBEAT_TOKEN, SILENT_REPLY_TOKEN, chunkMarkdownText, chunkMarkdownTextWithMode, chunkText, chunkTextWithMode, createInboundDebouncer, createReplyDispatcher, createReplyDispatcherWithTyping, createReplyReferencePlanner, dispatchInboundMessage, dispatchInboundMessageWithBufferedDispatcher, dispatchInboundMessageWithDispatcher, dispatchReplyWithBufferedBlockDispatcher, dispatchReplyWithDispatcher, finalizeInboundContext, generateTopicLabel, getReplyFromConfig, isAbortRequestText, isBtwRequestText, isSilentReplyText, normalizeGroupActivation, parseActivationCommand, resetInboundDedupe, resolveAutoTopicLabelConfig, resolveChunkMode, resolveHeartbeatPrompt, resolveHeartbeatReplyPayload, resolveInboundDebounceMs, resolveTextChunkLimit, stripHeartbeatToken };

package/dist/plugin-sdk/testing.js

@@ -1,11 +1,11 @@
 import { t as sanitizeTerminalText } from "../safe-text-DhIQbZid.js";
 import { g as resetPluginRuntimeStateForTest, r as getActivePluginRegistry, v as setActivePluginRegistry, y as createEmptyPluginRegistry } from "../runtime-B8hqEtu6.js";
-import { r as callGateway } from "../call-CkHf0CYa.js";
-import { dn as __testing } from "../pi-embedded-CerJ7PL1.js";
+import { r as callGateway } from "../call-Dpw_m2iI.js";
+import { dn as __testing } from "../pi-embedded-B-BUeGYW.js";
 import { c as resetSystemEventsForTest, s as peekSystemEvents } from "../system-events-ITlErq68.js";
 import { s as capturePluginRegistration } from "../web-search-providers.shared-CK4uvsX1.js";
 import { n as shouldAckReaction, t as removeAckReactionAfterReply } from "../ack-reactions-CNfzjgeB.js";
-import { A as expectChannelInboundContextContract, C as createCliRuntimeCapture, D as spyRuntimeLogs, E as spyRuntimeJson, O as buildDispatchInboundCaptureMock, S as setDefaultChannelPluginRegistryForTests, T as spyRuntimeErrors, _ as createSandboxTestContext, b as createRequestCaptureJsonFetch, c as createWhatsAppPollFixture, d as jsonResponse, f as requestBodyText, g as writeSkill, h as runAcpRuntimeAdapterContract, j as primeChannelOutboundSendMock, k as createSlackOutboundPayloadHarness, l as expectWhatsAppPollSent, m as buildCommandTestParams, n as installCommonResolveTargetErrorCases, p as requestUrl, r as withStateDirEnv, t as createWindowsCmdShimFixture, u as mockPinnedHostnameResolution, v as isLiveTestEnabled, w as firstWrittenJsonArg, x as installPinnedHostnameTestHooks, y as createAuthCaptureJsonFetch } from "../testing-DRmwm53v.js";
+import { A as expectChannelInboundContextContract, C as createCliRuntimeCapture, D as spyRuntimeLogs, E as spyRuntimeJson, O as buildDispatchInboundCaptureMock, S as setDefaultChannelPluginRegistryForTests, T as spyRuntimeErrors, _ as createSandboxTestContext, b as createRequestCaptureJsonFetch, c as createWhatsAppPollFixture, d as jsonResponse, f as requestBodyText, g as writeSkill, h as runAcpRuntimeAdapterContract, j as primeChannelOutboundSendMock, k as createSlackOutboundPayloadHarness, l as expectWhatsAppPollSent, m as buildCommandTestParams, n as installCommonResolveTargetErrorCases, p as requestUrl, r as withStateDirEnv, t as createWindowsCmdShimFixture, u as mockPinnedHostnameResolution, v as isLiveTestEnabled, w as firstWrittenJsonArg, x as installPinnedHostnameTestHooks, y as createAuthCaptureJsonFetch } from "../testing-JfFWj9lq.js";
 import { n as resolveProviderPluginChoice } from "../provider-auth-choice.runtime-tohv-FXg.js";
-import { t as handleAcpCommand } from "../commands-acp-CxxTumni.js";
+import { t as handleAcpCommand } from "../commands-acp-BsqRT4jL.js";
 export { __testing, __testing as acpManagerTesting, buildCommandTestParams, buildDispatchInboundCaptureMock, callGateway, capturePluginRegistration, createAuthCaptureJsonFetch, createCliRuntimeCapture, createEmptyPluginRegistry, createRequestCaptureJsonFetch, createSandboxTestContext, createSlackOutboundPayloadHarness, createWhatsAppPollFixture, createWindowsCmdShimFixture, expectChannelInboundContextContract, expectWhatsAppPollSent, firstWrittenJsonArg, getActivePluginRegistry, handleAcpCommand, installCommonResolveTargetErrorCases, installPinnedHostnameTestHooks, isLiveTestEnabled, jsonResponse, mockPinnedHostnameResolution, peekSystemEvents, primeChannelOutboundSendMock, removeAckReactionAfterReply, requestBodyText, requestUrl, resetPluginRuntimeStateForTest, resetSystemEventsForTest, resolveProviderPluginChoice, runAcpRuntimeAdapterContract, sanitizeTerminalText, setActivePluginRegistry, setDefaultChannelPluginRegistryForTests, shouldAckReaction, spyRuntimeErrors, spyRuntimeJson, spyRuntimeLogs, withStateDirEnv, writeSkill };

package/dist/plugin-sdk/zalo.js

@@ -25,7 +25,7 @@ import { n as createChannelPairingController } from "../channel-pairing-ChONOWRl
 import { r as buildChannelSendResult } from "../channel-send-result-1gNjjR_I.js";
 import { r as logTypingFailure } from "../logging-QrQbJdm1.js";
 import { t as resolveInboundRouteEnvelopeBuilderWithRuntime } from "../inbound-envelope-CtE_e4jx.js";
-import { r as resolveSenderCommandAuthorizationWithRuntime, t as resolveDirectDmAuthorizationOutcome } from "../command-auth-KEnd6pnx.js";
+import { r as resolveSenderCommandAuthorizationWithRuntime, t as resolveDirectDmAuthorizationOutcome } from "../command-auth-CuWzu-F1.js";
 import { t as extractToolSend } from "../tool-send-BKjcLbHa.js";
 import { a as createFixedWindowRateLimiter, o as createWebhookAnomalyTracker, r as WEBHOOK_RATE_LIMIT_DEFAULTS, t as WEBHOOK_ANOMALY_COUNTER_DEFAULTS } from "../webhook-memory-guards-CTcGJH1-.js";
 import { r as applyBasicWebhookRequestGuards, s as readJsonWebhookBodyOrReject } from "../webhook-request-guards-DPVLyWTb.js";
@@ -34,5 +34,5 @@ import { c as withResolvedWebhookRequestPipeline, n as registerWebhookTargetWith
 import { t as chunkTextForOutbound } from "../text-chunking-DPtN5psP.js";
 import { i as zaloSetupWizard, n as resolveZaloRuntimeGroupPolicy, r as zaloSetupAdapter, t as evaluateZaloGroupAccess } from "../zalo-setup-D7rrGe_N.js";
 import { t as resolveChannelAccountConfigBasePath } from "../config-paths-ChRBY5eV.js";
-import "../zalo-C9WqQRd2.js";
+import "../zalo-eHA1jNR6.js";
 export { DEFAULT_ACCOUNT_ID, MarkdownConfigSchema, PAIRING_APPROVED_MESSAGE, WEBHOOK_ANOMALY_COUNTER_DEFAULTS, WEBHOOK_RATE_LIMIT_DEFAULTS, addWildcardAllowFrom, applyAccountNameToChannelSection, applyBasicWebhookRequestGuards, applySetupAccountConfigPatch, buildBaseAccountStatusSnapshot, buildChannelConfigSchema, buildChannelSendResult, buildSecretInputSchema, buildSingleChannelSecretPromptState, buildTokenChannelStatusSummary, chunkTextForOutbound, createAccountListHelpers, createChannelPairingController, createChannelReplyPipeline, createDedupeCache, createFixedWindowRateLimiter, createWebhookAnomalyTracker, deleteAccountFromConfigSection, deliverTextOrMediaReply, emptyPluginConfigSchema, evaluateSenderGroupAccess, evaluateZaloGroupAccess, extractToolSend, formatAllowFromLowercase, formatPairingApproveHint, hasConfiguredSecretInput, isNormalizedSenderAllowed, isNumericTargetId, jsonResult, listDirectoryUserEntriesFromAllowFrom, logTypingFailure, mergeAllowFromEntries, migrateBaseNameToDefaultAccount, normalizeAccountId, normalizeResolvedSecretInputString, normalizeSecretInputString, promptSingleChannelSecretInput, readJsonWebhookBodyOrReject, readStringParam, registerWebhookTarget, registerWebhookTargetWithPluginRoute, resolveChannelAccountConfigBasePath, resolveClientIp, resolveDefaultGroupPolicy, resolveDirectDmAuthorizationOutcome, resolveInboundRouteEnvelopeBuilderWithRuntime, resolveOpenProviderRuntimeGroupPolicy, resolveOutboundMediaUrls, resolveSenderCommandAuthorizationWithRuntime, resolveSingleWebhookTarget, resolveWebhookPath, resolveWebhookTargetWithAuthOrRejectSync, resolveWebhookTargets, resolveZaloRuntimeGroupPolicy, runSingleChannelSecretStep, sendMediaWithLeadingCaption, sendPayloadWithChunkedTextAndMedia, setAccountEnabledInConfigSection, setTopLevelChannelDmPolicyWithAllowFrom, waitForAbortSignal, warnMissingProviderGroupPolicyFallbackOnce, withResolvedWebhookRequestPipeline, zaloSetupAdapter, zaloSetupWizard };

package/dist/plugin-sdk/zalouser.js

@@ -22,8 +22,8 @@ import { n as createChannelPairingController } from "../channel-pairing-ChONOWRl
 import { t as loadOutboundMediaFromUrl } from "../outbound-media-kvtFva5R.js";
 import { r as buildChannelSendResult } from "../channel-send-result-1gNjjR_I.js";
 import { n as resolveMentionGatingWithBypass } from "../mention-gating-BMJ56FEc.js";
-import { n as resolveSenderCommandAuthorization } from "../command-auth-KEnd6pnx.js";
+import { n as resolveSenderCommandAuthorization } from "../command-auth-CuWzu-F1.js";
 import { t as chunkTextForOutbound } from "../text-chunking-DPtN5psP.js";
 import { t as resolveChannelAccountConfigBasePath } from "../config-paths-ChRBY5eV.js";
-import { n as zalouserSetupWizard, t as zalouserSetupAdapter } from "../zalouser-CC3VNp14.js";
+import { n as zalouserSetupWizard, t as zalouserSetupAdapter } from "../zalouser-Bnp-ySQb.js";
 export { DEFAULT_ACCOUNT_ID, MarkdownConfigSchema, ToolPolicySchema, addWildcardAllowFrom, applyAccountNameToChannelSection, applySetupAccountConfigPatch, buildBaseAccountStatusSnapshot, buildChannelConfigSchema, buildChannelSendResult, chunkTextForOutbound, createAccountListHelpers, createChannelPairingController, createChannelReplyPipeline, deleteAccountFromConfigSection, deliverTextOrMediaReply, emptyPluginConfigSchema, evaluateGroupRouteAccessForPolicy, formatAllowFromLowercase, formatPairingApproveHint, formatResolvedUnresolvedNote, isDangerousNameMatchingEnabled, isNumericTargetId, loadOutboundMediaFromUrl, mergeAllowFromEntries, mergeAllowlist, migrateBaseNameToDefaultAccount, normalizeAccountId, patchScopedAccountConfig, resolveChannelAccountConfigBasePath, resolveDefaultGroupPolicy, resolveMentionGatingWithBypass, resolveOpenProviderRuntimeGroupPolicy, resolveOutboundMediaUrls, resolvePreferredOpenClawTmpDir, resolveSendableOutboundReplyParts, resolveSenderCommandAuthorization, resolveSenderScopedGroupPolicy, sendMediaWithLeadingCaption, sendPayloadWithChunkedTextAndMedia, setAccountEnabledInConfigSection, setTopLevelChannelDmPolicyWithAllowFrom, summarizeMapping, warnMissingProviderGroupPolicyFallbackOnce, zalouserSetupAdapter, zalouserSetupWizard };

package/dist/plugins/runtime/index.js

@@ -1,2 +1,2 @@
-import { n as createPluginRuntime, r as setGatewaySubagentRuntime, t as clearGatewaySubagentRuntime } from "../../runtime-BHfafb-C.js";
+import { n as createPluginRuntime, r as setGatewaySubagentRuntime, t as clearGatewaySubagentRuntime } from "../../runtime-CkUXpBq8.js";
 export { clearGatewaySubagentRuntime, createPluginRuntime, setGatewaySubagentRuntime };

package/dist/{policy-CfgxqTNv.js → policy-oMMihcoz.js}

@@ -3,7 +3,7 @@ import { a as resolveAllowlistMatchSimple } from "./allowlist-match-Dm6AqFEs.js"
 import { i as resolveToolsBySender } from "./group-policy-BrCANZ_S.js";
 import { i as evaluateSenderGroupAccessForPolicy } from "./group-access-DiFxTigd.js";
 import { n as isDangerousNameMatchingEnabled } from "./dangerous-name-matching-Du5xdacY.js";
-import "./runtime-api-Bk2AvqDn.js";
+import "./runtime-api-CnZbhESj.js";
 //#region extensions/msteams/src/policy.ts
 function resolveMSTeamsRouteConfig(params) {
 	const teamId = params.teamId?.trim();