wednesdayai 0.4.12-dev.711 → 0.4.12-dev.715

package/dist/{acp-cli-DrXF9X9v.js → acp-cli-BYoOiK6T.js}

@@ -1,13 +1,13 @@
 import "./paths-BBP4yd-2.js";
-import { I as theme, g as resolveUserPath, y as shortenHomePath } from "./utils-CmAaKeiM.js";
-import "./agent-scope-BAXIXdUR.js";
-import { m as defaultRuntime } from "./subsystem-DRdkfGsB.js";
-import "./logger-BCqJpXqF.js";
-import "./exec-Cg_eKCg0.js";
-import { Nt as loadConfig, ac as GATEWAY_CLIENT_MODES, oc as GATEWAY_CLIENT_NAMES } from "./model-selection-C8GCtGby.js";
+import { I as theme, g as resolveUserPath, y as shortenHomePath } from "./utils-CMEUUHmM.js";
+import "./agent-scope-CWTkr4pS.js";
+import { m as defaultRuntime } from "./subsystem-DDZBycwS.js";
+import "./logger-0VqfDbvM.js";
+import "./exec-CHq-p5L0.js";
+import { Nt as loadConfig, ac as GATEWAY_CLIENT_MODES, oc as GATEWAY_CLIENT_NAMES } from "./model-selection-k68XU4oS.js";
 import "./github-copilot-token-D9l3eOWF.js";
 import "./boolean-BsqeuxE6.js";
-import "./env-DtoMyFfk.js";
+import "./env-ESh4ZX9l.js";
 import { t as VERSION } from "./version-D7fFgMO6.js";
 import "./retry-policy-BIRWkDiU.js";
 import "./artifacts-qv_OgPMd.js";
@@ -15,15 +15,15 @@ import "./chat-envelope-DOpfcKGq.js";
 import "./task-run-types-B5uIC1Y7.js";
 import "./static-server-C-iTMRyz.js";
 import { r as isKnownCoreToolId } from "./tool-catalog-B6wH7-iE.js";
-import "./tailnet-CA8Lq90p.js";
-import "./ws-E-wJFDgg.js";
+import "./tailnet-G5phL2pY.js";
+import "./ws-BuVK_u9S.js";
 import { n as resolveWindowsSpawnProgram, t as materializeWindowsSpawnProgram } from "./windows-spawn-DqawBJDm.js";
-import { t as GatewayClient } from "./client-MNVuOIDb.js";
-import { l as resolveGatewayCredentialsWithSecretInputs, t as buildGatewayConnectionDetails } from "./call-CMjUSitZ.js";
+import { t as GatewayClient } from "./client-BbpMX08n.js";
+import { l as resolveGatewayCredentialsWithSecretInputs, t as buildGatewayConnectionDetails } from "./call-Cl6Q0T5z.js";
 import "./pairing-token-A_0lRJCJ.js";
-import { t as formatDocsLink } from "./links-DZMDihQ-.js";
+import { t as formatDocsLink } from "./links-BhLGjTwm.js";
 import { t as isMainModule } from "./is-main-KU6jxc5L.js";
-import { t as ensureOpenClawCliOnPath } from "./path-env-CQ3HfD18.js";
+import { t as ensureOpenClawCliOnPath } from "./path-env-IcDKkMPr.js";
 import { t as DANGEROUS_ACP_TOOLS } from "./dangerous-tools-gv_rp-w_.js";
 import { n as inheritOptionFromParent } from "./command-options-6wdtBBWB.js";
 import { fileURLToPath } from "node:url";

package/dist/{agent-scope-BAXIXdUR.js → agent-scope-CWTkr4pS.js}

@@ -1,14 +1,14 @@
 import { g as resolveStateDir, y as resolveRequiredHomeDir } from "./paths-BBP4yd-2.js";
-import { g as resolveUserPath, lt as openBoundaryFile, p as pathExists } from "./utils-CmAaKeiM.js";
-import { t as createSubsystemLogger } from "./subsystem-DRdkfGsB.js";
+import { g as resolveUserPath, lt as openBoundaryFile, p as pathExists } from "./utils-CMEUUHmM.js";
+import { t as createSubsystemLogger } from "./subsystem-DDZBycwS.js";
 import { M as isSubagentSessionKey, N as parseAgentSessionKey, d as normalizeAgentId, j as isCronSessionKey, p as resolveAgentIdFromSessionKey, t as DEFAULT_AGENT_ID } from "./session-key-B1wN38jV.js";
-import { t as runCommandWithTimeout } from "./exec-Cg_eKCg0.js";
-import { n as resolveOpenClawPackageRoot } from "./openclaw-root-B2l0kAM1.js";
+import { t as runCommandWithTimeout } from "./exec-CHq-p5L0.js";
+import { n as resolveOpenClawPackageRoot } from "./openclaw-root-BGUYWYDG.js";
 import { fileURLToPath } from "node:url";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 
 //#region src/config/model-input.ts
 function resolveAgentModelPrimaryValue(model) {
@@ -190,7 +190,7 @@ async function loadTemplate(name) {
 		const templateDir = await resolveWorkspaceTemplateDir();
 		const templatePath = path.join(templateDir, name);
 		try {
-			return stripFrontMatter(await fsPromises.readFile(templatePath, "utf-8"));
+			return stripFrontMatter(await fs$1.readFile(templatePath, "utf-8"));
 		} catch {
 			throw new Error(`Missing workspace template: ${name} (${templatePath}). Ensure docs/reference/templates are packaged.`);
 		}
@@ -218,7 +218,7 @@ const DEFAULT_LANE_BOOTSTRAP_FILES = [
 ];
 async function writeFileIfMissing(filePath, content) {
 	try {
-		await fsPromises.writeFile(filePath, content, {
+		await fs$1.writeFile(filePath, content, {
 			encoding: "utf-8",
 			flag: "wx"
 		});
@@ -230,7 +230,7 @@ async function writeFileIfMissing(filePath, content) {
 }
 async function fileExists(filePath) {
 	try {
-		await fsPromises.access(filePath);
+		await fs$1.access(filePath);
 		return true;
 	} catch {
 		return false;
@@ -254,7 +254,7 @@ function parseWorkspaceOnboardingState(raw) {
 }
 async function readWorkspaceOnboardingState(statePath) {
 	try {
-		return parseWorkspaceOnboardingState(await fsPromises.readFile(statePath, "utf-8")) ?? { version: WORKSPACE_STATE_VERSION };
+		return parseWorkspaceOnboardingState(await fs$1.readFile(statePath, "utf-8")) ?? { version: WORKSPACE_STATE_VERSION };
 	} catch (err) {
 		if (err.code !== "ENOENT") throw err;
 		return { version: WORKSPACE_STATE_VERSION };
@@ -268,20 +268,20 @@ async function isWorkspaceOnboardingCompleted(dir) {
 	return typeof state.onboardingCompletedAt === "string" && state.onboardingCompletedAt.trim().length > 0;
 }
 async function writeWorkspaceOnboardingState(statePath, state) {
-	await fsPromises.mkdir(path.dirname(statePath), { recursive: true });
+	await fs$1.mkdir(path.dirname(statePath), { recursive: true });
 	const payload = `${JSON.stringify(state, null, 2)}\n`;
 	const tmpPath = `${statePath}.tmp-${process.pid}-${Date.now().toString(36)}`;
 	try {
-		await fsPromises.writeFile(tmpPath, payload, { encoding: "utf-8" });
-		await fsPromises.rename(tmpPath, statePath);
+		await fs$1.writeFile(tmpPath, payload, { encoding: "utf-8" });
+		await fs$1.rename(tmpPath, statePath);
 	} catch (err) {
-		await fsPromises.unlink(tmpPath).catch(() => {});
+		await fs$1.unlink(tmpPath).catch(() => {});
 		throw err;
 	}
 }
 async function hasGitRepo(dir) {
 	try {
-		await fsPromises.stat(path.join(dir, ".git"));
+		await fs$1.stat(path.join(dir, ".git"));
 		return true;
 	} catch {
 		return false;
@@ -311,7 +311,7 @@ async function ensureGitRepo(dir, isBrandNewWorkspace) {
 }
 async function ensureAgentWorkspace(params) {
 	const dir = resolveUserPath(params?.dir?.trim() ? params.dir.trim() : DEFAULT_AGENT_WORKSPACE_DIR);
-	await fsPromises.mkdir(dir, { recursive: true });
+	await fs$1.mkdir(dir, { recursive: true });
 	if (!params?.ensureBootstrapFiles) return { dir };
 	const agentsPath = path.join(dir, DEFAULT_AGENTS_FILENAME);
 	const soulPath = path.join(dir, DEFAULT_SOUL_FILENAME);
@@ -338,7 +338,7 @@ async function ensureAgentWorkspace(params) {
 		const paths = [...templatePaths, ...userContentPaths];
 		return (await Promise.all(paths.map(async (p) => {
 			try {
-				await fsPromises.access(p);
+				await fs$1.access(p);
 				return true;
 			} catch {
 				return false;
@@ -371,7 +371,7 @@ async function ensureAgentWorkspace(params) {
 	if (!state.bootstrapSeededAt && bootstrapExists) markState({ bootstrapSeededAt: nowIso() });
 	if (!state.onboardingCompletedAt && state.bootstrapSeededAt && !bootstrapExists) markState({ onboardingCompletedAt: nowIso() });
 	if (!state.bootstrapSeededAt && !state.onboardingCompletedAt && !bootstrapExists) {
-		const [identityContent, userContent] = await Promise.all([fsPromises.readFile(identityPath, "utf-8"), fsPromises.readFile(userPath, "utf-8")]);
+		const [identityContent, userContent] = await Promise.all([fs$1.readFile(identityPath, "utf-8"), fs$1.readFile(userPath, "utf-8")]);
 		const hasUserContent = await (async () => {
 			const indicators = [
 				path.join(dir, "memory"),
@@ -379,7 +379,7 @@ async function ensureAgentWorkspace(params) {
 				path.join(dir, ".git")
 			];
 			for (const indicator of indicators) try {
-				await fsPromises.access(indicator);
+				await fs$1.access(indicator);
 				return true;
 			} catch {}
 			return false;
@@ -410,7 +410,7 @@ async function resolveMemoryBootstrapEntries(resolvedDir) {
 	for (const name of candidates) {
 		const filePath = path.join(resolvedDir, name);
 		try {
-			await fsPromises.access(filePath);
+			await fs$1.access(filePath);
 			entries.push({
 				name,
 				filePath
@@ -423,7 +423,7 @@ async function resolveMemoryBootstrapEntries(resolvedDir) {
 	for (const entry of entries) {
 		let key = entry.filePath;
 		try {
-			key = await fsPromises.realpath(entry.filePath);
+			key = await fs$1.realpath(entry.filePath);
 		} catch {}
 		if (seen.has(key)) continue;
 		seen.add(key);

package/dist/{agent-turn-enqueue-BQ4JOmUN.js → agent-turn-enqueue-Dwz_R_DW.js}

@@ -1,4 +1,4 @@
-import { t as createSubsystemLogger } from "./subsystem-DRdkfGsB.js";
+import { t as createSubsystemLogger } from "./subsystem-DDZBycwS.js";
 import { t as createWork } from "./envelope-CtjIakvq.js";
 import { t as redactIdentifier } from "./redact-identifier-CSPL9LuH.js";
 import { t as CommandLane } from "./lanes-DA0g5tPR.js";
@@ -238,7 +238,7 @@ function mergeDelayedAgentTurn(sessionKey, matches, merge) {
 	return true;
 }
 async function defaultExecute(claim) {
-	const { runMainAgentTurn } = await import("./reply-BsDGtY7Y.js").then((n) => n.g);
+	const { runMainAgentTurn } = await import("./reply-BIZ2zaUq.js").then((n) => n.g);
 	return runMainAgentTurn(claim.message.payload);
 }
 async function armIdleWaiter(sessionKey, backbone, opts) {
@@ -250,7 +250,7 @@ async function armIdleWaiter(sessionKey, backbone, opts) {
 		startedAt: opts?.startedAt ?? Date.now()
 	};
 	waiters.set(sessionKey, handle);
-	const { getQueueSize } = await import("./command-queue-Banup9vQ.js").then((n) => n.r);
+	const { getQueueSize } = await import("./command-queue-B1RxJ6bM.js").then((n) => n.r);
 	if (handle.cancelled || closing) return;
 	const release = (force = false) => {
 		releaseDelayedAgentTurns(backboneBySession.get(sessionKey) ?? backbone, sessionKey, force ? { force: true } : void 0);
@@ -272,7 +272,7 @@ async function armIdleWaiter(sessionKey, backbone, opts) {
 }
 async function enqueueAgentTurn(backbone, payload, opts) {
 	if (!payload.jobId.trim() || !payload.runId.trim()) throw new Error("agent-turn enqueue requires jobId and runId");
-	const isBusy = opts?.isSessionBusy ? opts.isSessionBusy() : (await import("./command-queue-Banup9vQ.js").then((n) => n.r)).getQueueSize(CommandLane.Main) > 0;
+	const isBusy = opts?.isSessionBusy ? opts.isSessionBusy() : (await import("./command-queue-B1RxJ6bM.js").then((n) => n.r)).getQueueSize(CommandLane.Main) > 0;
 	const policy = payload.busy ?? "skip";
 	const id = agentTurnIdempotencyKey(payload);
 	if (isBusy && policy === "skip") return `${id}:skipped`;
@@ -336,7 +336,7 @@ async function releaseDelayedAgentTurnsInternal(backbone, sessionKey, opts) {
 					if (held) return;
 					releasingHead.add(sessionKey);
 					const publishedWorkId = await publishAgentTurn(backbone, payload);
-					const { getAgentTurnRuntime } = await import("./agent-turn-runner-BGmkN_A8.js").then((n) => n.t);
+					const { getAgentTurnRuntime } = await import("./agent-turn-runner-DFZxbjaC.js").then((n) => n.t);
 					const execute = opts?.execute ?? defaultExecute;
 					releaseSucceeded = (await getAgentTurnRuntime().runner.claimAndExecute({
 						workId: publishedWorkId,

package/dist/{agent-turn-recovery-adapter-BRVxIXJY.js → agent-turn-recovery-adapter-DF3vdyE5.js}

@@ -1,7 +1,7 @@
 import "./paths-BBP4yd-2.js";
-import "./utils-CmAaKeiM.js";
-import { t as createSubsystemLogger } from "./subsystem-DRdkfGsB.js";
-import { n as AGENT_TURN_DEFAULT_LEASE_MS, r as AGENT_TURN_TOPIC, t as AGENT_TURN_CONSUMER_ID, u as isSessionRecoveryTurnPayload } from "./agent-turn-enqueue-BQ4JOmUN.js";
+import "./utils-CMEUUHmM.js";
+import { t as createSubsystemLogger } from "./subsystem-DDZBycwS.js";
+import { n as AGENT_TURN_DEFAULT_LEASE_MS, r as AGENT_TURN_TOPIC, t as AGENT_TURN_CONSUMER_ID, u as isSessionRecoveryTurnPayload } from "./agent-turn-enqueue-Dwz_R_DW.js";
 import { createHash } from "node:crypto";
 
 //#region src/acp/control-plane/agent-turn-recovery.ts

package/dist/{agent-turn-runner-BGmkN_A8.js → agent-turn-runner-DFZxbjaC.js}

@@ -1,11 +1,11 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { t as createSubsystemLogger } from "./subsystem-DRdkfGsB.js";
+import { t as createSubsystemLogger } from "./subsystem-DDZBycwS.js";
 import { N as parseAgentSessionKey } from "./session-key-B1wN38jV.js";
-import { Qa as CLIENT_RESUME_RECORD_KIND, eo as isVerificationStoreError } from "./model-selection-C8GCtGby.js";
+import { Qa as CLIENT_RESUME_RECORD_KIND, eo as isVerificationStoreError } from "./model-selection-k68XU4oS.js";
 import { l as onDiagnosticEvent, s as emitDiagnosticEvent } from "./task-run-types-B5uIC1Y7.js";
 import { t as redactIdentifier } from "./redact-identifier-CSPL9LuH.js";
-import { n as AGENT_TURN_DEFAULT_LEASE_MS, r as AGENT_TURN_TOPIC, t as AGENT_TURN_CONSUMER_ID } from "./agent-turn-enqueue-BQ4JOmUN.js";
-import { n as deriveSessionRunId, o as resolveSessionRunStore, r as inferSessionRunKind, t as createSessionRunRecorder } from "./recorder-B9RfsO1r.js";
+import { n as AGENT_TURN_DEFAULT_LEASE_MS, r as AGENT_TURN_TOPIC, t as AGENT_TURN_CONSUMER_ID } from "./agent-turn-enqueue-Dwz_R_DW.js";
+import { n as deriveSessionRunId, o as resolveSessionRunStore, r as inferSessionRunKind, t as createSessionRunRecorder } from "./recorder-BntUAL0_.js";
 import { fileURLToPath } from "node:url";
 import { readFileSync } from "node:fs";
 import { dirname, join, parse } from "node:path";

package/dist/{agents.config-BnEJCj-p.js → agents.config-C-pTu-0T.js}

@@ -1,5 +1,5 @@
-import { mn as loadAgentIdentityFromWorkspace, pn as identityHasValues } from "./reply-BsDGtY7Y.js";
-import { a as resolveAgentDir, d as resolveDefaultAgentId, n as listAgentEntries, u as resolveAgentWorkspaceDir } from "./agent-scope-BAXIXdUR.js";
+import { mn as loadAgentIdentityFromWorkspace, pn as identityHasValues } from "./reply-BIZ2zaUq.js";
+import { a as resolveAgentDir, d as resolveDefaultAgentId, n as listAgentEntries, u as resolveAgentWorkspaceDir } from "./agent-scope-CWTkr4pS.js";
 import { d as normalizeAgentId } from "./session-key-B1wN38jV.js";
 
 //#region src/commands/agents.config.ts

package/dist/{api-key-rotation-BEJklVjh.js → api-key-rotation-BEt1ZchD.js}

@@ -1,4 +1,4 @@
-import { d as normalizeProviderId } from "./model-selection-C8GCtGby.js";
+import { d as normalizeProviderId } from "./model-selection-k68XU4oS.js";
 import { i as formatErrorMessage } from "./errors-z_JCBnTo.js";
 
 //#region src/agents/live-auth-keys.ts

package/dist/{audio-preflight-C3XXSW_q.js → audio-preflight-nrbQcAOS.js}

@@ -1,53 +1,53 @@
 import "./paths-BBP4yd-2.js";
-import { O as logVerbose, j as shouldLogVerbose } from "./utils-CmAaKeiM.js";
+import { O as logVerbose, j as shouldLogVerbose } from "./utils-CMEUUHmM.js";
 import "./thinking-DDYFn78t.js";
-import "./agent-scope-BAXIXdUR.js";
-import "./subsystem-DRdkfGsB.js";
-import "./logger-BCqJpXqF.js";
-import "./exec-Cg_eKCg0.js";
-import "./model-selection-C8GCtGby.js";
+import "./agent-scope-CWTkr4pS.js";
+import "./subsystem-DDZBycwS.js";
+import "./logger-0VqfDbvM.js";
+import "./exec-CHq-p5L0.js";
+import "./model-selection-k68XU4oS.js";
 import "./github-copilot-token-D9l3eOWF.js";
 import "./boolean-BsqeuxE6.js";
-import "./env-DtoMyFfk.js";
+import "./env-ESh4ZX9l.js";
 import "./version-D7fFgMO6.js";
 import "./retry-policy-BIRWkDiU.js";
 import "./artifacts-qv_OgPMd.js";
 import "./chat-envelope-DOpfcKGq.js";
 import "./task-run-types-B5uIC1Y7.js";
 import "./static-server-C-iTMRyz.js";
-import "./path-alias-guards-DaLVcmyn.js";
-import "./fs-safe-D3vN4fQ5.js";
-import { _ as isAudioAttachment, d as listAudioAttachments, i as normalizeMediaAttachments, l as audioOrdinalOf, o as resolveMediaAttachmentLocalRoots, t as runAudioTranscription, u as findCarriedTranscript } from "./audio-transcription-runner-DbLu4y_x.js";
-import "./fetch-guard-BCFGxdCb.js";
-import "./ssrf-BsWmJWfu.js";
-import "./proxy-fetch-k-wYHddO.js";
-import "./pi-embedded-helpers-DxQslB8x.js";
-import "./local-roots-DrpBY-AE.js";
-import "./image-ops-D-__yDh-.js";
+import "./path-alias-guards-BSmwo1rT.js";
+import "./fs-safe-DD7KXuvI.js";
+import { _ as isAudioAttachment, d as listAudioAttachments, i as normalizeMediaAttachments, l as audioOrdinalOf, o as resolveMediaAttachmentLocalRoots, t as runAudioTranscription, u as findCarriedTranscript } from "./audio-transcription-runner-D-d42kdt.js";
+import "./fetch-guard-CjyGDRXN.js";
+import "./ssrf-B85AIIOO.js";
+import "./proxy-fetch-Czv8kxaL.js";
+import "./pi-embedded-helpers-DEHXX7Dr.js";
+import "./local-roots-_qt4-Ma5.js";
+import "./image-ops-DcqCZEUY.js";
 import "./redact-CQtYLB4a.js";
 import "./errors-z_JCBnTo.js";
-import "./models-config-CcPjsQTv.js";
-import "./model-catalog-C300CH2M.js";
-import "./api-key-rotation-BEJklVjh.js";
-import "./provider-image-GVjHOAmk.js";
-import "./pi-model-discovery-B9wn9y4o.js";
-import "./pi-embedded-utils-39kuXd-l.js";
-import "./sandbox-BnwxiNjx.js";
+import "./models-config-Burwt3mB.js";
+import "./model-catalog-C7itJJDM.js";
+import "./api-key-rotation-BEt1ZchD.js";
+import "./provider-image-RxbXQIow.js";
+import "./pi-model-discovery-CfUi22Es.js";
+import "./pi-embedded-utils-BhOMYPQU.js";
+import "./sandbox-Ft7cM-PQ.js";
 import "./tool-catalog-B6wH7-iE.js";
-import "./extension-relay-auth-IPIDjhZx.js";
-import "./tailscale-C-_dOj1h.js";
-import "./tailnet-CA8Lq90p.js";
-import "./ws-E-wJFDgg.js";
-import "./auth-CO4L12L5.js";
-import "./server-context-qqDarnk8.js";
+import "./extension-relay-auth-C-1c9CZk.js";
+import "./tailscale-DbsrfsUT.js";
+import "./tailnet-G5phL2pY.js";
+import "./ws-BuVK_u9S.js";
+import "./auth-DeLQvx-N.js";
+import "./server-context-Dezs5R_M.js";
 import "./frontmatter-B8Zb_8go.js";
-import "./skills-DT7dF3Z_.js";
-import "./store-BKJfMltr.js";
-import "./chrome-CBrgxie9.js";
-import "./trash-CYaie1Ci.js";
-import "./ports-CmgxsJei.js";
-import "./server-middleware-CHvpqowx.js";
-import "./tool-display-CwPZlMoS.js";
+import "./skills-Buc1RWDY.js";
+import "./store-DoqX9VsZ.js";
+import "./chrome-DXHMnxHS.js";
+import "./trash-BcRk_NVC.js";
+import "./ports-CX4cOSom.js";
+import "./server-middleware-BND1EkTO.js";
+import "./tool-display-D63I3y22.js";
 
 //#region src/media-understanding/audio-preflight.ts
 /**

package/dist/{audio-transcription-runner-DbLu4y_x.js → audio-transcription-runner-D-d42kdt.js}

@@ -1,25 +1,25 @@
-import { At as resolvePreferredOpenClawTmpDir, O as logVerbose, _t as isNotFoundPathError, j as shouldLogVerbose, yt as isSymlinkOpenError } from "./utils-CmAaKeiM.js";
-import { F as resolveAgentModelPrimaryValue, P as resolveAgentModelFallbackValues } from "./agent-scope-BAXIXdUR.js";
-import { t as createSubsystemLogger } from "./subsystem-DRdkfGsB.js";
-import { n as runExec } from "./exec-Cg_eKCg0.js";
-import { Gt as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, Jt as resolveIMessageAttachmentRoots, Kt as isInboundPathAllowed, d as normalizeProviderId, hr as getActivePluginRegistry, nt as requireApiKey, qt as mergeInboundPathRoots, rt as resolveApiKeyForProvider } from "./model-selection-C8GCtGby.js";
+import { At as resolvePreferredOpenClawTmpDir, O as logVerbose, _t as isNotFoundPathError, j as shouldLogVerbose, yt as isSymlinkOpenError } from "./utils-CMEUUHmM.js";
+import { F as resolveAgentModelPrimaryValue, P as resolveAgentModelFallbackValues } from "./agent-scope-CWTkr4pS.js";
+import { t as createSubsystemLogger } from "./subsystem-DDZBycwS.js";
+import { n as runExec } from "./exec-CHq-p5L0.js";
+import { Gt as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, Jt as resolveIMessageAttachmentRoots, Kt as isInboundPathAllowed, d as normalizeProviderId, hr as getActivePluginRegistry, nt as requireApiKey, qt as mergeInboundPathRoots, rt as resolveApiKeyForProvider } from "./model-selection-k68XU4oS.js";
 import { r as normalizeChatType } from "./conversation-label-Bpw8crN9.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-DwpMsAKA.js";
-import { t as fetchWithSsrFGuard } from "./fetch-guard-BCFGxdCb.js";
-import { i as resolveProxyFetchFromEnv } from "./proxy-fetch-k-wYHddO.js";
+import { t as fetchWithSsrFGuard } from "./fetch-guard-CjyGDRXN.js";
+import { i as resolveProxyFetchFromEnv } from "./proxy-fetch-Czv8kxaL.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-BXebcnwh.js";
-import { i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, r as MediaFetchError } from "./local-roots-DrpBY-AE.js";
-import { c as detectMime, f as isAudioFileName, m as kindFromMime, u as getFileExtension } from "./image-ops-D-__yDh-.js";
+import { i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, r as MediaFetchError } from "./local-roots-_qt4-Ma5.js";
+import { c as detectMime, f as isAudioFileName, m as kindFromMime, u as getFileExtension } from "./image-ops-DcqCZEUY.js";
 import { a as formatUncaughtError, c as readErrorName, n as extractErrorCode, t as collectErrorGraphCandidates } from "./errors-z_JCBnTo.js";
-import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-C300CH2M.js";
-import { n as executeWithApiKeyRotation, t as collectProviderApiKeysForExecution } from "./api-key-rotation-BEJklVjh.js";
-import { t as describeImageWithModel } from "./provider-image-GVjHOAmk.js";
+import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-C7itJJDM.js";
+import { n as executeWithApiKeyRotation, t as collectProviderApiKeysForExecution } from "./api-key-rotation-BEt1ZchD.js";
+import { t as describeImageWithModel } from "./provider-image-RxbXQIow.js";
 import process$1 from "node:process";
 import { fileURLToPath } from "node:url";
 import { constants } from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fsPromises, { rm } from "node:fs/promises";
+import fs$1, { rm } from "node:fs/promises";
 import crypto from "node:crypto";
 
 //#region src/auto-reply/templating.ts
@@ -845,7 +845,7 @@ var MediaAttachmentCache = class {
 			const size = await this.ensureLocalStat(entry);
 			if (entry.resolvedPath) {
 				if (size !== void 0 && size > params.maxBytes) throw new MediaUnderstandingSkipError("maxBytes", `Attachment ${params.attachmentIndex + 1} exceeds maxBytes ${params.maxBytes}`);
-				const buffer = await fsPromises.readFile(entry.resolvedPath);
+				const buffer = await fs$1.readFile(entry.resolvedPath);
 				entry.buffer = buffer;
 				entry.bufferMime = entry.bufferMime ?? entry.attachment.mime ?? await detectMime({
 					buffer,
@@ -914,10 +914,10 @@ var MediaAttachmentCache = class {
 			prefix: "openclaw-media",
 			extension: path.extname(bufferResult.fileName || "") || ""
 		});
-		await fsPromises.writeFile(tmpPath, bufferResult.buffer);
+		await fs$1.writeFile(tmpPath, bufferResult.buffer);
 		entry.tempPath = tmpPath;
 		entry.tempCleanup = async () => {
-			await fsPromises.unlink(tmpPath).catch(() => {});
+			await fs$1.unlink(tmpPath).catch(() => {});
 		};
 		return {
 			path: tmpPath,
@@ -965,13 +965,13 @@ var MediaAttachmentCache = class {
 		if (entry.statSize !== void 0) return entry.statSize;
 		try {
 			const currentPath = entry.resolvedPath;
-			const stat = await fsPromises.stat(currentPath);
+			const stat = await fs$1.stat(currentPath);
 			if (!stat.isFile()) {
 				entry.resolvedPath = void 0;
 				entry.localPathSecurityRejected = true;
 				return;
 			}
-			const canonicalPath = await fsPromises.realpath(currentPath);
+			const canonicalPath = await fs$1.realpath(currentPath);
 			if (!isInboundPathAllowed({
 				filePath: canonicalPath,
 				roots: await this.getCanonicalLocalPathRoots()
@@ -995,7 +995,7 @@ var MediaAttachmentCache = class {
 		if (this.canonicalLocalPathRoots) return await this.canonicalLocalPathRoots;
 		this.canonicalLocalPathRoots = (async () => mergeInboundPathRoots(this.localPathRoots, await Promise.all(this.localPathRoots.map(async (root) => {
 			if (root.includes("*")) return root;
-			return await fsPromises.realpath(root).catch(() => root);
+			return await fs$1.realpath(root).catch(() => root);
 		}))))();
 		return await this.canonicalLocalPathRoots;
 	}
@@ -1061,7 +1061,7 @@ function stripCarriedTranscriptFromBody(body, carried) {
 async function fileExists(filePath) {
 	if (!filePath) return false;
 	try {
-		await fsPromises.stat(filePath);
+		await fs$1.stat(filePath);
 		return true;
 	} catch {
 		return false;
@@ -1169,7 +1169,7 @@ async function resolveCliOutput(params) {
 	const commandId = commandBase(params.command);
 	const fileOutput = commandId === "whisper-cli" ? resolveWhisperCppOutputPath(params.args) : commandId === "whisper" ? resolveWhisperOutputPath(params.args, params.mediaPath) : commandId === "parakeet-mlx" ? resolveParakeetOutputPath(params.args, params.mediaPath) : null;
 	if (fileOutput && await fileExists(fileOutput)) try {
-		const content = await fsPromises.readFile(fileOutput, "utf8");
+		const content = await fs$1.readFile(fileOutput, "utf8");
 		if (content.trim()) return content.trim();
 	} catch {}
 	if (commandId === "gemini") {
@@ -1506,10 +1506,10 @@ async function runCliEntry(params) {
 		timeoutMs
 	});
 	if (capability === "audio") assertMinAudioSize({
-		size: (await fsPromises.stat(pathResult.path)).size,
+		size: (await fs$1.stat(pathResult.path)).size,
 		attachmentIndex: params.attachmentIndex
 	});
-	const outputDir = await fsPromises.mkdtemp(path.join(resolvePreferredOpenClawTmpDir(), "openclaw-media-cli-"));
+	const outputDir = await fs$1.mkdtemp(path.join(resolvePreferredOpenClawTmpDir(), "openclaw-media-cli-"));
 	const mediaPath = pathResult.path;
 	const outputBase = path.join(outputDir, path.parse(mediaPath).name);
 	const templCtx = {
@@ -1543,7 +1543,7 @@ async function runCliEntry(params) {
 			model: command
 		};
 	} finally {
-		await fsPromises.rm(outputDir, {
+		await fs$1.rm(outputDir, {
 			recursive: true,
 			force: true
 		}).catch(() => {});
@@ -1588,9 +1588,9 @@ function candidateBinaryNames(name) {
 }
 async function isExecutable(filePath) {
 	try {
-		if (!(await fsPromises.stat(filePath)).isFile()) return false;
+		if (!(await fs$1.stat(filePath)).isFile()) return false;
 		if (process.platform === "win32") return true;
-		await fsPromises.access(filePath, constants.X_OK);
+		await fs$1.access(filePath, constants.X_OK);
 		return true;
 	} catch {
 		return false;

package/dist/{audit-DIH0DO00.js → audit-C_g-UVNn.js}

@@ -1,35 +1,35 @@
 import { g as resolveStateDir, m as resolveOAuthDir, o as resolveConfigPath } from "./paths-BBP4yd-2.js";
-import { nt as INCLUDE_KEY, ot as extensionUsesSkippedScannerPath, rt as MAX_INCLUDE_DEPTH, st as isPathInside } from "./utils-CmAaKeiM.js";
-import { F as resolveAgentModelPrimaryValue, P as resolveAgentModelFallbackValues, d as resolveDefaultAgentId } from "./agent-scope-BAXIXdUR.js";
+import { nt as INCLUDE_KEY, ot as extensionUsesSkippedScannerPath, rt as MAX_INCLUDE_DEPTH, st as isPathInside } from "./utils-CMEUUHmM.js";
+import { F as resolveAgentModelPrimaryValue, P as resolveAgentModelFallbackValues, d as resolveDefaultAgentId } from "./agent-scope-CWTkr4pS.js";
 import { d as normalizeAgentId } from "./session-key-B1wN38jV.js";
-import { Ju as hasConfiguredSecretInput, Kc as normalizeTrustedSafeBinDirs, Mt as createConfigIO, Wn as normalizePluginsConfig, ac as GATEWAY_CLIENT_MODES, an as isDangerousNetworkMode, fc as normalizeStringEntries, iu as safeStat, nu as formatPermissionRemediation, oc as GATEWAY_CLIENT_NAMES, on as normalizeNetworkMode, ru as inspectPathPermissions, ts as listChannelPlugins, tu as formatPermissionDetail } from "./model-selection-C8GCtGby.js";
+import { Ju as hasConfiguredSecretInput, Kc as normalizeTrustedSafeBinDirs, Mt as createConfigIO, Wn as normalizePluginsConfig, ac as GATEWAY_CLIENT_MODES, an as isDangerousNetworkMode, fc as normalizeStringEntries, iu as safeStat, nu as formatPermissionRemediation, oc as GATEWAY_CLIENT_NAMES, on as normalizeNetworkMode, ru as inspectPathPermissions, ts as listChannelPlugins, tu as formatPermissionDetail } from "./model-selection-k68XU4oS.js";
 import { t as formatCliCommand } from "./command-format-CGUNQYjt.js";
 import { t as readManifestNamespace } from "./legacy-names-Cj47SC7a.js";
 import { i as formatErrorMessage } from "./errors-z_JCBnTo.js";
-import { C as resolveToolProfilePolicy, f as resolveSandboxConfigForAgent, k as SANDBOX_BROWSER_SECURITY_HASH_EPOCH, l as execDockerRaw, m as resolveSandboxToolPolicyForAgent, u as getBlockedBindReason } from "./sandbox-BnwxiNjx.js";
-import { s as resolveGatewayAuth } from "./auth-CO4L12L5.js";
-import { t as resolveGatewayCredentialsFromConfig } from "./credentials-DgZP7kxk.js";
-import { a as resolveBrowserControlAuth } from "./server-context-qqDarnk8.js";
-import { i as loadWorkspaceSkillEntries } from "./skills-DT7dF3Z_.js";
-import { i as resolveProfile, r as resolveBrowserConfig } from "./trash-CYaie1Ci.js";
-import { a as resolveNativeSkillsEnabled, i as resolveNativeCommandsEnabled } from "./commands-CpMRpWle.js";
-import { t as GatewayClient } from "./client-MNVuOIDb.js";
-import { p as READ_SCOPE, t as buildGatewayConnectionDetails } from "./call-CMjUSitZ.js";
-import { i as readChannelAllowFromStore } from "./pairing-store-CL-UFd1J.js";
-import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-CfsF46fx.js";
-import { l as resolveDmAllowState, n as isToolAllowedByPolicies, o as pickSandboxToolPolicy } from "./pi-tools.policy-BViSZbge.js";
+import { C as resolveToolProfilePolicy, f as resolveSandboxConfigForAgent, k as SANDBOX_BROWSER_SECURITY_HASH_EPOCH, l as execDockerRaw, m as resolveSandboxToolPolicyForAgent, u as getBlockedBindReason } from "./sandbox-Ft7cM-PQ.js";
+import { s as resolveGatewayAuth } from "./auth-DeLQvx-N.js";
+import { t as resolveGatewayCredentialsFromConfig } from "./credentials-Hn2dA0oB.js";
+import { a as resolveBrowserControlAuth } from "./server-context-Dezs5R_M.js";
+import { i as loadWorkspaceSkillEntries } from "./skills-Buc1RWDY.js";
+import { i as resolveProfile, r as resolveBrowserConfig } from "./trash-BcRk_NVC.js";
+import { a as resolveNativeSkillsEnabled, i as resolveNativeCommandsEnabled } from "./commands-tFdLuF5k.js";
+import { t as GatewayClient } from "./client-BbpMX08n.js";
+import { p as READ_SCOPE, t as buildGatewayConnectionDetails } from "./call-Cl6Q0T5z.js";
+import { i as readChannelAllowFromStore } from "./pairing-store-CQ7fjFFo.js";
+import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-KSPaR73B.js";
+import { l as resolveDmAllowState, n as isToolAllowedByPolicies, o as pickSandboxToolPolicy } from "./pi-tools.policy-4GqIom7_.js";
 import { n as isDangerousNameMatchingEnabled } from "./dangerous-name-matching-BtJNZJcz.js";
-import { t as listAgentWorkspaceDirs } from "./workspace-dirs-B9yugPA_.js";
+import { t as listAgentWorkspaceDirs } from "./workspace-dirs-_vJAsBIN.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-gv_rp-w_.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-CU6_xh9V.js";
-import { t as scanDirectoryWithSummary } from "./skill-scanner-D7Edx-Uz.js";
-import { r as resolveNodeCommandAllowlist, t as DEFAULT_DANGEROUS_NODE_COMMANDS } from "./node-command-policy-CggBPF1a.js";
+import { t as scanDirectoryWithSummary } from "./skill-scanner-BA3h34y0.js";
+import { r as resolveNodeCommandAllowlist, t as DEFAULT_DANGEROUS_NODE_COMMANDS } from "./node-command-policy-B9A0wAU6.js";
 import { c as normalizeTelegramAllowFromEntry, s as isNumericTelegramUserId, t as isDiscordMutableAllowEntry } from "./mutable-allowlist-detectors-TCG6mnbz.js";
 import { t as inferParamBFromIdOrName } from "./model-param-b-4PN786ZX.js";
 import path from "node:path";
 import JSON5 from "json5";
-import * as fs from "node:fs/promises";
-import fsPromises from "node:fs/promises";
+import * as fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 import { randomUUID } from "node:crypto";
 import { isIP } from "node:net";
 
@@ -1301,7 +1301,7 @@ async function collectIncludePathsRecursive(params) {
 			if (visited.has(resolved)) continue;
 			visited.add(resolved);
 			result.push(resolved);
-			const rawText = await fs.readFile(resolved, "utf-8").catch(() => null);
+			const rawText = await fs$1.readFile(resolved, "utf-8").catch(() => null);
 			if (!rawText) continue;
 			const nestedParsed = (() => {
 				try {
@@ -1336,7 +1336,7 @@ function expandTilde(p, env) {
 }
 async function readPluginManifestExtensions(pluginPath) {
 	const manifestPath = path.join(pluginPath, "package.json");
-	const raw = await fsPromises.readFile(manifestPath, "utf-8").catch(() => "");
+	const raw = await fs.readFile(manifestPath, "utf-8").catch(() => "");
 	if (!raw.trim()) return [];
 	const extensions = readManifestNamespace(JSON.parse(raw))?.extensions;
 	if (!Array.isArray(extensions)) return [];
@@ -1358,7 +1358,7 @@ async function listInstalledPluginDirs(params) {
 	};
 	return {
 		extensionsDir,
-		pluginDirs: (await fsPromises.readdir(extensionsDir, { withFileTypes: true }).catch((err) => {
+		pluginDirs: (await fs.readdir(extensionsDir, { withFileTypes: true }).catch((err) => {
 			params.onReadError?.(err);
 			return [];
 		})).filter((entry) => entry.isDirectory()).map((entry) => entry.name).filter(Boolean)
@@ -1421,7 +1421,7 @@ function isPinnedRegistrySpec(spec) {
 }
 async function readInstalledPackageVersion(dir) {
 	try {
-		const raw = await fsPromises.readFile(path.join(dir, "package.json"), "utf-8");
+		const raw = await fs.readFile(path.join(dir, "package.json"), "utf-8");
 		const parsed = JSON.parse(raw);
 		return typeof parsed.version === "string" ? parsed.version : void 0;
 	} catch {
@@ -1457,10 +1457,10 @@ async function listWorkspaceSkillMarkdownFiles(workspaceDir) {
 	const visitedDirs = /* @__PURE__ */ new Set();
 	while (queue.length > 0 && skillFiles.length < MAX_WORKSPACE_SKILL_SCAN_FILES_PER_WORKSPACE) {
 		const dir = queue.shift();
-		const dirRealPath = await fsPromises.realpath(dir).catch(() => path.resolve(dir));
+		const dirRealPath = await fs.realpath(dir).catch(() => path.resolve(dir));
 		if (visitedDirs.has(dirRealPath)) continue;
 		visitedDirs.add(dirRealPath);
-		const entries = await fsPromises.readdir(dir, { withFileTypes: true }).catch(() => []);
+		const entries = await fs.readdir(dir, { withFileTypes: true }).catch(() => []);
 		for (const entry of entries) {
 			if (entry.name.startsWith(".") || entry.name === "node_modules") continue;
 			const fullPath = path.join(dir, entry.name);
@@ -1469,7 +1469,7 @@ async function listWorkspaceSkillMarkdownFiles(workspaceDir) {
 				continue;
 			}
 			if (entry.isSymbolicLink()) {
-				const stat = await fsPromises.stat(fullPath).catch(() => null);
+				const stat = await fs.stat(fullPath).catch(() => null);
 				if (!stat) continue;
 				if (stat.isDirectory()) {
 					queue.push(fullPath);
@@ -1759,13 +1759,13 @@ async function collectWorkspaceSkillSymlinkEscapeFindings(params) {
 	const seenSkillPaths = /* @__PURE__ */ new Set();
 	for (const workspaceDir of workspaceDirs) {
 		const workspacePath = path.resolve(workspaceDir);
-		const workspaceRealPath = await fsPromises.realpath(workspacePath).catch(() => workspacePath);
+		const workspaceRealPath = await fs.realpath(workspacePath).catch(() => workspacePath);
 		const skillFilePaths = await listWorkspaceSkillMarkdownFiles(workspacePath);
 		for (const skillFilePath of skillFilePaths) {
 			const canonicalSkillPath = path.resolve(skillFilePath);
 			if (seenSkillPaths.has(canonicalSkillPath)) continue;
 			seenSkillPaths.add(canonicalSkillPath);
-			const skillRealPath = await fsPromises.realpath(canonicalSkillPath).catch(() => null);
+			const skillRealPath = await fs.realpath(canonicalSkillPath).catch(() => null);
 			if (!skillRealPath) continue;
 			if (isPathInside(workspaceRealPath, skillRealPath)) continue;
 			escapedSkillFiles.push({