wednesdayai 0.4.12-dev.733 → 0.4.12-dev.734

package/dist/{doctor-config-flow-DU0u9ath.js → doctor-config-flow-CHpbeQ8M.js}

@@ -1,24 +1,24 @@
 import { f as resolveLegacyStateDirs, g as resolveStateDir, m as resolveOAuthDir, p as resolveNewStateDir, t as CONFIG_PATH } from "./paths-BBP4yd-2.js";
-import { d as isRecord, h as resolveHomeDir } from "./utils-CfKD3xTt.js";
-import { d as resolveDefaultAgentId } from "./agent-scope-Isfe_TTc.js";
-import { T as normalizeAccountId, a as buildAgentMainSessionKey, n as DEFAULT_MAIN_KEY, p as normalizeAgentId, w as DEFAULT_ACCOUNT_ID } from "./session-key-DeVMAKRZ.js";
-import { Cs as resolveTelegramAccount, Ft as readConfigFileSnapshot, Hl as resolveSlackNativeStreaming, Kn as resolveEnableState, Rl as formatSlackStreamModeMigrationMessage, Ul as resolveSlackStreamingMode, Vl as resolveDiscordPreviewStreamMode, Vt as OpenClawSchema, Wl as resolveTelegramPreviewStreamMode, Wn as normalizePluginsConfig, as as canonicalizeMainSessionAlias, ec as parseToolsBySenderTypedKey, fr as normalizeChatChannelId, hl as resolveCommandResolutionFromArgv, il as normalizeTrustedSafeBinDirs, kt as migrateLegacyConfig, mi as saveSessionStore, nl as isTrustedSafeBinPath, tl as getTrustedSafeBinDirs, xs as listTelegramAccountIds, zl as formatSlackStreamingBooleanMigrationMessage } from "./model-selection-D74qlS0C.js";
-import { n as isPrimarySessionTranscriptFileName } from "./artifacts-D7xTEspu.js";
+import { d as isRecord, h as resolveHomeDir } from "./utils-RlDPCeiE.js";
+import { d as resolveDefaultAgentId } from "./agent-scope-C7A_L0Z6.js";
+import { T as normalizeAccountId, a as buildAgentMainSessionKey, n as DEFAULT_MAIN_KEY, p as normalizeAgentId, w as DEFAULT_ACCOUNT_ID } from "./session-key-BxmJDkEI.js";
+import { Cs as resolveTelegramAccount, Ft as readConfigFileSnapshot, Hl as resolveSlackNativeStreaming, Kn as resolveEnableState, Rl as formatSlackStreamModeMigrationMessage, Ul as resolveSlackStreamingMode, Vl as resolveDiscordPreviewStreamMode, Vt as OpenClawSchema, Wl as resolveTelegramPreviewStreamMode, Wn as normalizePluginsConfig, as as canonicalizeMainSessionAlias, ec as parseToolsBySenderTypedKey, fr as normalizeChatChannelId, hl as resolveCommandResolutionFromArgv, il as normalizeTrustedSafeBinDirs, kt as migrateLegacyConfig, mi as saveSessionStore, nl as isTrustedSafeBinPath, tl as getTrustedSafeBinDirs, xs as listTelegramAccountIds, zl as formatSlackStreamingBooleanMigrationMessage } from "./model-selection-Xe4QEYsC.js";
+import { n as isPrimarySessionTranscriptFileName } from "./artifacts-CSUzSsVF.js";
 import { t as formatCliCommand } from "./command-format-CGUNQYjt.js";
-import { i as readChannelAllowFromStore } from "./pairing-store-ClC923Wz.js";
-import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-OSqMfz70.js";
-import { i as applyPluginAutoEnable, n as collectUnsafeTelegramPollingTimeouts, t as applyTelegramPollingTimeoutRepair } from "./polling-timeout-BfQqGdT2.js";
+import { i as readChannelAllowFromStore } from "./pairing-store-Deylvw9t.js";
+import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-Bd1hExM6.js";
+import { i as applyPluginAutoEnable, n as collectUnsafeTelegramPollingTimeouts, t as applyTelegramPollingTimeoutRepair } from "./polling-timeout-HyiW4Q3a.js";
 import { t as collectProviderDangerousNameMatchingScopes } from "./dangerous-name-matching-B4c-oh3H.js";
-import { r as shouldMoveSingleAccountChannelKey, t as fetchTelegramChatId } from "./api-B8kTLa-V.js";
-import { t as note } from "./note-0__etBQU.js";
-import { t as isWithinDir } from "./path-safety-DMAi6_-A.js";
-import { n as formatConfigIssueLines } from "./issue-format-CKVc879T.js";
+import { r as shouldMoveSingleAccountChannelKey, t as fetchTelegramChatId } from "./api-DTIIemyw.js";
+import { t as note } from "./note-DNloJfK7.js";
+import { t as isWithinDir } from "./path-safety-BTAa9g_F.js";
+import { n as formatConfigIssueLines } from "./issue-format-CMvPuN7V.js";
 import { a as isMattermostMutableAllowEntry, c as normalizeTelegramAllowFromEntry, i as isMSTeamsMutableAllowEntry, n as isGoogleChatMutableAllowEntry, o as isSlackMutableAllowEntry, r as isIrcMutableAllowEntry, s as isNumericTelegramUserId, t as isDiscordMutableAllowEntry } from "./mutable-allowlist-detectors-BECxOoKX.js";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import JSON5 from "json5";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 
 //#region src/commands/doctor-legacy-config.ts
 function normalizeCompatibilityConfigValues(cfg) {
@@ -2259,7 +2259,7 @@ async function maybeMigrateLegacyConfig() {
 	const targetDir = path.join(home, ".openclaw");
 	const targetPath = path.join(targetDir, "openclaw.json");
 	try {
-		await fsPromises.access(targetPath);
+		await fs$1.access(targetPath);
 		return changes;
 	} catch {}
 	const legacyCandidates = [
@@ -2269,14 +2269,14 @@ async function maybeMigrateLegacyConfig() {
 	];
 	let legacyPath = null;
 	for (const candidate of legacyCandidates) try {
-		await fsPromises.access(candidate);
+		await fs$1.access(candidate);
 		legacyPath = candidate;
 		break;
 	} catch {}
 	if (!legacyPath) return changes;
-	await fsPromises.mkdir(targetDir, { recursive: true });
+	await fs$1.mkdir(targetDir, { recursive: true });
 	try {
-		await fsPromises.copyFile(legacyPath, targetPath, fsPromises.constants.COPYFILE_EXCL);
+		await fs$1.copyFile(legacyPath, targetPath, fs$1.constants.COPYFILE_EXCL);
 		changes.push(`Migrated legacy config: ${legacyPath} -> ${targetPath}`);
 	} catch {}
 	return changes;

package/dist/{enable-BRot9Tbi.js → enable-CODu9xqV.js}

@@ -1,5 +1,5 @@
-import { fr as normalizeChatChannelId } from "./model-selection-D74qlS0C.js";
-import { o as ensurePluginAllowlisted } from "./polling-timeout-BfQqGdT2.js";
+import { fr as normalizeChatChannelId } from "./model-selection-Xe4QEYsC.js";
+import { o as ensurePluginAllowlisted } from "./polling-timeout-HyiW4Q3a.js";
 
 //#region src/plugins/toggle-config.ts
 function setPluginEnabledInConfig(config, pluginId, enabled) {

package/dist/{env-DwhxSLZz.js → env-uQrKrEGz.js}

@@ -1,4 +1,4 @@
-import { t as createSubsystemLogger } from "./subsystem-DU1uzmTH.js";
+import { t as createSubsystemLogger } from "./subsystem-Cwzs7yN0.js";
 import { t as parseBooleanValue } from "./boolean-C6Pbt2Ue.js";
 
 //#region src/infra/env.ts

package/dist/{exec-approvals-allowlist-CVeFyVcd.js → exec-approvals-allowlist-BxG5LK_B.js}

@@ -1,4 +1,4 @@
-import { El as unwrapKnownShellMultiplexerInvocation, Sl as isShellWrapperExecutable, Tl as unwrapKnownDispatchWrapperInvocation, al as validateSafeBinArgv, dl as splitCommandChain, fl as DEFAULT_SAFE_BINS, hl as resolveCommandResolutionFromArgv, jl as SAFE_BIN_PROFILES, ll as isWindowsPlatform, ml as resolveAllowlistCandidatePath, nl as isTrustedSafeBinPath, pl as matchAllowlist, sl as analyzeShellCommand, xl as isDispatchWrapperExecutable, yl as extractShellWrapperInlineCommand } from "./model-selection-D74qlS0C.js";
+import { El as unwrapKnownShellMultiplexerInvocation, Sl as isShellWrapperExecutable, Tl as unwrapKnownDispatchWrapperInvocation, al as validateSafeBinArgv, dl as splitCommandChain, fl as DEFAULT_SAFE_BINS, hl as resolveCommandResolutionFromArgv, jl as SAFE_BIN_PROFILES, ll as isWindowsPlatform, ml as resolveAllowlistCandidatePath, nl as isTrustedSafeBinPath, pl as matchAllowlist, sl as analyzeShellCommand, xl as isDispatchWrapperExecutable, yl as extractShellWrapperInlineCommand } from "./model-selection-Xe4QEYsC.js";
 import path from "node:path";
 
 //#region src/infra/exec-approvals-allowlist.ts

package/dist/{exec-approvals-cli-Bwc8M8YG.js → exec-approvals-cli-Cnn9uvon.js}

@@ -1,39 +1,39 @@
 import "./paths-BBP4yd-2.js";
-import { F as isRich, I as theme } from "./utils-CfKD3xTt.js";
-import "./agent-scope-Isfe_TTc.js";
-import { m as defaultRuntime } from "./subsystem-DU1uzmTH.js";
-import "./logger-Bd6qOjzT.js";
-import "./exec-BNayx9Nm.js";
-import "./model-selection-D74qlS0C.js";
+import { F as isRich, I as theme } from "./utils-RlDPCeiE.js";
+import "./agent-scope-C7A_L0Z6.js";
+import { m as defaultRuntime } from "./subsystem-Cwzs7yN0.js";
+import "./logger-BSEmTtz1.js";
+import "./exec-g-Nx0X6p.js";
+import "./model-selection-Xe4QEYsC.js";
 import "./github-copilot-token-D9l3eOWF.js";
-import "./pid-alive-CQpmBPPl.js";
+import "./pid-alive-C3qbS2SA.js";
 import "./boolean-C6Pbt2Ue.js";
-import "./env-DwhxSLZz.js";
+import "./env-uQrKrEGz.js";
 import "./version-C459_ZQ5.js";
-import "./artifacts-D7xTEspu.js";
+import "./artifacts-CSUzSsVF.js";
 import "./retry-policy-FBwX2QEP.js";
 import "./task-run-types-B6n0W8Rb.js";
 import "./redact-B7cMn_vp.js";
 import "./errors-CtrilAlY.js";
 import "./static-server-DQBHPXOZ.js";
-import "./tailnet-DZu3euUT.js";
-import "./ws-BkTpOVYX.js";
-import "./client-VFkIaJUE.js";
-import "./call-CCfms07q.js";
+import "./tailnet-CQ7A44gN.js";
+import "./ws-1r6e9Dys.js";
+import "./client-CfK_daL3.js";
+import "./call-DcUNQRRs.js";
 import "./pairing-token-BgE_TsqE.js";
 import { n as formatTimeAgo } from "./format-relative-AHuG0b0P.js";
-import { h as saveExecApprovals, l as readExecApprovalsSnapshot } from "./exec-approvals-BS3OjF4g.js";
-import "./exec-approvals-allowlist-CVeFyVcd.js";
-import { t as formatDocsLink } from "./links-DtYJaVFO.js";
-import "./progress-D7S5GoOi.js";
-import { n as callGatewayFromCli } from "./gateway-rpc-CQYm-HLi.js";
-import "./service-CjlQTRXS.js";
-import "./systemd-BuE-CYAD.js";
-import { t as renderTable } from "./table-BZCTLfip.js";
-import { t as describeUnknownError } from "./shared-CdvXdH5h.js";
-import { a as resolveNodeId, r as nodesCallOpts } from "./rpc-C7PAon6G.js";
+import { h as saveExecApprovals, l as readExecApprovalsSnapshot } from "./exec-approvals-sC6Vto0t.js";
+import "./exec-approvals-allowlist-BxG5LK_B.js";
+import { t as formatDocsLink } from "./links-DA_gi3gE.js";
+import "./progress-Cbn-oYkW.js";
+import { n as callGatewayFromCli } from "./gateway-rpc-CiALr93w.js";
+import "./service-BYi3UODF.js";
+import "./systemd-BD_TMCHG.js";
+import { t as renderTable } from "./table-WoBQBfIP.js";
+import { t as describeUnknownError } from "./shared-BxpBpS9X.js";
+import { a as resolveNodeId, r as nodesCallOpts } from "./rpc-Bb2CwMXM.js";
 import JSON5 from "json5";
-import fsPromises from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/cli/exec-approvals-cli.ts
 async function readStdin() {
@@ -330,7 +330,7 @@ function registerExecApprovalsCli(program) {
 			if (!opts.file && !opts.stdin) exitWithError("Provide --file or --stdin.");
 			if (opts.file && opts.stdin) exitWithError("Use either --file or --stdin (not both).");
 			const { source, nodeId, targetLabel, baseHash } = await loadWritableSnapshotTarget(opts);
-			const raw = opts.stdin ? await readStdin() : await fsPromises.readFile(String(opts.file), "utf8");
+			const raw = opts.stdin ? await readStdin() : await fs.readFile(String(opts.file), "utf8");
 			let file;
 			try {
 				file = JSON5.parse(raw);

package/dist/{exec-approvals-BS3OjF4g.js → exec-approvals-sC6Vto0t.js}

@@ -1,6 +1,6 @@
 import { _ as expandHomePrefix } from "./paths-BBP4yd-2.js";
-import { t as createSubsystemLogger } from "./subsystem-DU1uzmTH.js";
-import { t as DEFAULT_AGENT_ID } from "./session-key-DeVMAKRZ.js";
+import { t as createSubsystemLogger } from "./subsystem-Cwzs7yN0.js";
+import { t as DEFAULT_AGENT_ID } from "./session-key-BxmJDkEI.js";
 import fs from "node:fs";
 import path, { basename, dirname, join } from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";

package/dist/{exec-BNayx9Nm.js → exec-g-Nx0X6p.js}

@@ -1,5 +1,5 @@
-import { j as shouldLogVerbose, w as danger } from "./utils-CfKD3xTt.js";
-import { n as logError, t as logDebug } from "./logger-Bd6qOjzT.js";
+import { j as shouldLogVerbose, w as danger } from "./utils-RlDPCeiE.js";
+import { n as logError, t as logDebug } from "./logger-BSEmTtz1.js";
 import { t as resolveCommandStdio } from "./spawn-utils-D7e1JbSq.js";
 import process from "node:process";
 import fs from "node:fs";

package/dist/{exec-safe-bin-runtime-policy-OSqMfz70.js → exec-safe-bin-runtime-policy-Bd1hExM6.js}

@@ -1,5 +1,5 @@
-import { Ml as normalizeSafeBinProfileFixtures, Nl as resolveSafeBinProfiles, il as normalizeTrustedSafeBinDirs, rl as listWritableExplicitTrustedSafeBinDirs, tl as getTrustedSafeBinDirs } from "./model-selection-D74qlS0C.js";
-import { i as resolveSafeBins } from "./exec-approvals-allowlist-CVeFyVcd.js";
+import { Ml as normalizeSafeBinProfileFixtures, Nl as resolveSafeBinProfiles, il as normalizeTrustedSafeBinDirs, rl as listWritableExplicitTrustedSafeBinDirs, tl as getTrustedSafeBinDirs } from "./model-selection-Xe4QEYsC.js";
+import { i as resolveSafeBins } from "./exec-approvals-allowlist-BxG5LK_B.js";
 
 //#region src/infra/exec-safe-bin-runtime-policy.ts
 const INTERPRETER_LIKE_SAFE_BINS = new Set([

package/dist/{extension-relay-auth-Dcu8wthB.js → extension-relay-auth-NxDK9Fke.js}

@@ -1,8 +1,8 @@
-import { jt as resolvePreferredOpenClawTmpDir, vt as isNotFoundPathError, yt as isPathInside } from "./utils-CfKD3xTt.js";
-import { Nt as loadConfig } from "./model-selection-D74qlS0C.js";
-import { i as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-B3ZR2kik.js";
+import { jt as resolvePreferredOpenClawTmpDir, vt as isNotFoundPathError, yt as isPathInside } from "./utils-RlDPCeiE.js";
+import { Nt as loadConfig } from "./model-selection-Xe4QEYsC.js";
+import { i as openFileWithinRoot, t as SafeOpenError } from "./fs-safe-LwswEc9h.js";
 import path from "node:path";
-import fsPromises from "node:fs/promises";
+import fs from "node:fs/promises";
 import { createHmac } from "node:crypto";
 
 //#region src/browser/constants.ts
@@ -56,28 +56,28 @@ function invalidPath(scopeLabel) {
 }
 async function resolveRealPathIfExists(targetPath) {
 	try {
-		return await fsPromises.realpath(targetPath);
+		return await fs.realpath(targetPath);
 	} catch {
 		return;
 	}
 }
 async function resolveTrustedRootRealPath(rootDir) {
 	try {
-		const rootLstat = await fsPromises.lstat(rootDir);
+		const rootLstat = await fs.lstat(rootDir);
 		if (!rootLstat.isDirectory() || rootLstat.isSymbolicLink()) return;
-		return await fsPromises.realpath(rootDir);
+		return await fs.realpath(rootDir);
 	} catch {
 		return;
 	}
 }
 async function validateCanonicalPathWithinRoot(params) {
 	try {
-		const candidateLstat = await fsPromises.lstat(params.candidatePath);
+		const candidateLstat = await fs.lstat(params.candidatePath);
 		if (candidateLstat.isSymbolicLink()) return "invalid";
 		if (params.expect === "directory" && !candidateLstat.isDirectory()) return "invalid";
 		if (params.expect === "file" && !candidateLstat.isFile()) return "invalid";
 		if (params.expect === "file" && candidateLstat.nlink > 1) return "invalid";
-		const candidateRealPath = await fsPromises.realpath(params.candidatePath);
+		const candidateRealPath = await fs.realpath(params.candidatePath);
 		return isPathInside(params.rootRealPath, candidateRealPath) ? "ok" : "invalid";
 	} catch (err) {
 		return isNotFoundPathError(err) ? "not-found" : "invalid";
@@ -155,7 +155,7 @@ async function resolveCheckedPathsWithinRoot(params) {
 		};
 		if (!rootRealPath || !raw || !path.isAbsolute(raw)) return lexicalPathResult;
 		try {
-			const resolvedExistingPath = await fsPromises.realpath(raw);
+			const resolvedExistingPath = await fs.realpath(raw);
 			const relativePath = path.relative(rootRealPath, resolvedExistingPath);
 			if (!isInRoot(relativePath)) return lexicalPathResult;
 			return {

package/dist/extensionAPI.js

@@ -8,18 +8,18 @@ import "./github-copilot-token-Wgn3tC_h.js";
 import { d as resolveSessionFilePath, g as resolveStorePath } from "./redact-CcXQzMDq.js";
 import "./send-BULWLf9H.js";
 import "./send-vUEO6mWN.js";
-import { a as resolveAgentTimeoutMs, t as runEmbeddedPiAgent } from "./pi-embedded-BMxexBYS.js";
-import "./agent-turn-runner-CHoOKwsD.js";
+import { a as resolveAgentTimeoutMs, t as runEmbeddedPiAgent } from "./pi-embedded-MxBrZ5X7.js";
+import "./agent-turn-runner-DN-XHX0T.js";
 import "./tokens-CjVVH60D.js";
 import "./outbound-message-hooks-B4MMkGsP.js";
-import "./diagnostic-C3MkA2d5.js";
+import "./diagnostic-CCR8brX6.js";
 import "./diagnostic-session-state-evjvR-jF.js";
-import "./command-queue-9omEZYIX.js";
-import "./send-BHuAEQE3.js";
+import "./command-queue--qG4Wxve.js";
+import "./send-DoMFLnPv.js";
 import "./image-ops-CmhhjA-p.js";
 import "./pi-model-discovery-BFGKZ1gX.js";
-import "./chat-content-CBi2BuMN.js";
-import "./chrome-C6EL_Azx.js";
+import "./chat-content-DTi4qPWl.js";
+import "./chrome-3_0KrCjl.js";
 import "./skills-peCEWmXN.js";
 import "./path-alias-guards-DTXviWB0.js";
 import "./fs-safe-4C2TMvQJ.js";
@@ -27,9 +27,9 @@ import "./proxy-env-CSUORFjS.js";
 import "./store-DM3A6gON.js";
 import "./thinking-BUbh2qQQ.js";
 import "./models-config-HTZTL0M4.js";
-import "./audio-transcription-runner-DU-4s9T-.js";
-import "./pi-embedded-utils-BxBSc2aN.js";
-import "./provider-image-C5-IlVG0.js";
+import "./audio-transcription-runner-DV97sIzf.js";
+import "./pi-embedded-utils-D6Ee9Uyb.js";
+import "./provider-image-BXyzJKFR.js";
 import "./fetch-P0w-Jc5R.js";
 import "./fetch-guard-CngcrvIz.js";
 import "./proxy-fetch-2w-tWIUS.js";
@@ -42,8 +42,8 @@ import "./commands-registry-CaOc3OfN.js";
 import "./user-run-recording-ByWN0FrF.js";
 import "./recorder-DTJ7sacs.js";
 import "./skill-commands-DladmiuW.js";
-import "./runs-kMwrTbuD.js";
-import "./deliver-BilN6eHm.js";
+import "./runs-s2c7mYPm.js";
+import "./deliver-BmkcRFC9.js";
 import "./fetch-Dg5tcfuO.js";
 import "./channel-activity-alIvs8Mw.js";
 import "./tables-DVQ9iRK5.js";

package/dist/{fetch-cEFmY5z9.js → fetch-fy8exuqj.js}

@@ -1,11 +1,11 @@
-import { c as resolveAgentWorkspaceDir } from "./agent-scope-CVpiV9_p.js";
+import { c as resolveAgentWorkspaceDir } from "./agent-scope-B5BtLhIC.js";
 import { c as resolveStateDir } from "./paths-Cvc9EM8Y.js";
-import { mt as resolvePreferredOpenClawTmpDir } from "./subsystem-BCjklMkJ.js";
-import { U as loadConfig, ir as formatErrorChainMessage } from "./model-selection-DeMoFayq.js";
-import { t as redactSensitiveText } from "./redact-CNUi9G7H.js";
-import { c as detectMime, l as extensionForMime } from "./image-ops-CbGvIbf3.js";
+import { mt as resolvePreferredOpenClawTmpDir } from "./subsystem-CnnjiGCl.js";
+import { U as loadConfig, ir as formatErrorChainMessage } from "./model-selection-RcRokpsG.js";
+import { t as redactSensitiveText } from "./redact-CFlw_DPT.js";
+import { c as detectMime, l as extensionForMime } from "./image-ops-BM9FiJs0.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-CWMxbvLB.js";
-import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-CBYchbZq.js";
+import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-tWQjMK2l.js";
 import path from "node:path";
 
 //#region src/media/local-roots.ts

package/dist/{fetch-guard-EajwxXjX.js → fetch-guard-CfI8OeSj.js}

@@ -1,7 +1,7 @@
-import { i as logWarn, r as logInfo } from "./logger-Bd6qOjzT.js";
+import { i as logWarn, r as logInfo } from "./logger-BSEmTtz1.js";
 import { t as bindAbortRelay } from "./fetch-timeout-7nA25fTc.js";
-import { a as isPrivateIpAddress, l as hasProxyEnvConfigured, n as closeDispatcher, r as createPinnedDispatcher, s as resolvePinnedHostnameWithPolicy, t as SsrFBlockedError } from "./ssrf-DjjqWxdp.js";
-import { t as isNpmUndiciDispatchingFetch } from "./proxy-fetch-CeK1ZBeq.js";
+import { a as isPrivateIpAddress, l as hasProxyEnvConfigured, n as closeDispatcher, r as createPinnedDispatcher, s as resolvePinnedHostnameWithPolicy, t as SsrFBlockedError } from "./ssrf-CUBo6TIZ.js";
+import { t as isNpmUndiciDispatchingFetch } from "./proxy-fetch-DxABZ-6S.js";
 import { EnvHttpProxyAgent, FormData, fetch } from "undici";
 
 //#region src/infra/net/form-data.ts

package/dist/{fetch-guard-CBYchbZq.js → fetch-guard-tWQjMK2l.js}

@@ -1,7 +1,7 @@
-import { i as logWarn, r as logInfo } from "./logger-DNehzD_s.js";
-import { c as resolvePinnedHostnameWithPolicy, i as createPinnedDispatcher, n as SsrFBlockedError, o as isPrivateIpAddress, r as closeDispatcher, t as hasProxyEnvConfigured } from "./proxy-env-DMj9RqDZ.js";
+import { i as logWarn, r as logInfo } from "./logger-uA4S-xj7.js";
+import { c as resolvePinnedHostnameWithPolicy, i as createPinnedDispatcher, n as SsrFBlockedError, o as isPrivateIpAddress, r as closeDispatcher, t as hasProxyEnvConfigured } from "./proxy-env-B_4G-Zvx.js";
 import { t as bindAbortRelay } from "./fetch-timeout-D8A8C9j0.js";
-import { t as isNpmUndiciDispatchingFetch } from "./proxy-fetch-BSYUeKDC.js";
+import { t as isNpmUndiciDispatchingFetch } from "./proxy-fetch-BdB5Hb7r.js";
 import { EnvHttpProxyAgent, FormData, fetch } from "undici";
 
 //#region src/infra/net/form-data.ts

package/dist/{frontmatter-BxEA3xXS.js → frontmatter-AubDiZG0.js}

@@ -1,7 +1,7 @@
-import { s as parseBooleanValue, t as readManifestNamespace } from "./legacy-names-CLlrMq8r.js";
+import { s as parseBooleanValue, t as readManifestNamespace } from "./legacy-names-DnKoTzf4.js";
 import path from "node:path";
 import fs from "node:fs";
-import JSON5 from "json5";
+import json5 from "json5";
 import YAML from "yaml";
 
 //#region src/shared/config-eval.ts
@@ -258,7 +258,7 @@ function resolveOpenClawManifestBlock(params) {
 	const raw = getFrontmatterString(params.frontmatter, params.key ?? "metadata");
 	if (!raw) return;
 	try {
-		const parsed = JSON5.parse(raw);
+		const parsed = json5.parse(raw);
 		if (!parsed || typeof parsed !== "object") return;
 		return readManifestNamespace(parsed);
 	} catch {

package/dist/{fs-safe-B7Enj5xC.js → fs-safe-Ckd0hSqX.js}

@@ -1,7 +1,7 @@
 import { l as expandHomePrefix } from "./paths-Cvc9EM8Y.js";
-import { B as hasNodeErrorCode, H as isPathInside, I as sameFileIdentity, U as isSymlinkOpenError, V as isNotFoundPathError } from "./subsystem-BCjklMkJ.js";
-import { i as logWarn } from "./logger-DNehzD_s.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-Bj0l9f26.js";
+import { B as hasNodeErrorCode, H as isPathInside, I as sameFileIdentity, U as isSymlinkOpenError, V as isNotFoundPathError } from "./subsystem-CnnjiGCl.js";
+import { i as logWarn } from "./logger-uA4S-xj7.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-CM0vBH_Z.js";
 import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";

package/dist/{fs-safe-B3ZR2kik.js → fs-safe-LwswEc9h.js}

@@ -1,11 +1,11 @@
 import { _ as expandHomePrefix } from "./paths-BBP4yd-2.js";
-import { _t as hasNodeErrorCode, bt as isSymlinkOpenError, pt as sameFileIdentity, vt as isNotFoundPathError, yt as isPathInside } from "./utils-CfKD3xTt.js";
-import { i as logWarn } from "./logger-Bd6qOjzT.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-BWeHJfpx.js";
+import { _t as hasNodeErrorCode, bt as isSymlinkOpenError, pt as sameFileIdentity, vt as isNotFoundPathError, yt as isPathInside } from "./utils-RlDPCeiE.js";
+import { i as logWarn } from "./logger-BSEmTtz1.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-CgeH2aSH.js";
 import { constants } from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import { randomUUID } from "node:crypto";
 import { pipeline } from "node:stream/promises";
 
@@ -25,19 +25,19 @@ const ensureTrailingSep = (value) => value.endsWith(path.sep) ? value : value +
 async function expandRelativePathWithHome(relativePath) {
 	let home = process.env.HOME || process.env.USERPROFILE || os.homedir();
 	try {
-		home = await fsPromises.realpath(home);
+		home = await fs$1.realpath(home);
 	} catch {}
 	return expandHomePrefix(relativePath, { home });
 }
 async function openVerifiedLocalFile(filePath, options) {
 	try {
-		if ((await fsPromises.lstat(filePath)).isDirectory()) throw new SafeOpenError("not-file", "not a file");
+		if ((await fs$1.lstat(filePath)).isDirectory()) throw new SafeOpenError("not-file", "not a file");
 	} catch (err) {
 		if (err instanceof SafeOpenError) throw err;
 	}
 	let handle;
 	try {
-		handle = await fsPromises.open(filePath, OPEN_READ_FLAGS);
+		handle = await fs$1.open(filePath, OPEN_READ_FLAGS);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "file not found");
 		if (isSymlinkOpenError(err)) throw new SafeOpenError("symlink", "symlink open blocked", { cause: err });
@@ -45,13 +45,13 @@ async function openVerifiedLocalFile(filePath, options) {
 		throw err;
 	}
 	try {
-		const [stat, lstat] = await Promise.all([handle.stat(), fsPromises.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([handle.stat(), fs$1.lstat(filePath)]);
 		if (lstat.isSymbolicLink()) throw new SafeOpenError("symlink", "symlink not allowed");
 		if (!stat.isFile()) throw new SafeOpenError("not-file", "not a file");
 		if (options?.rejectHardlinks && stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during read");
-		const realPath = await fsPromises.realpath(filePath);
-		const realStat = await fsPromises.stat(realPath);
+		const realPath = await fs$1.realpath(filePath);
+		const realStat = await fs$1.stat(realPath);
 		if (options?.rejectHardlinks && realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		return {
@@ -69,7 +69,7 @@ async function openVerifiedLocalFile(filePath, options) {
 async function resolvePathWithinRoot(params) {
 	let rootReal;
 	try {
-		rootReal = await fsPromises.realpath(params.rootDir);
+		rootReal = await fs$1.realpath(params.rootDir);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "root dir not found");
 		throw err;
@@ -170,7 +170,7 @@ function buildAtomicWriteTempPath(targetPath) {
 	return path.join(dir, `.${base}.${process.pid}.${randomUUID()}.tmp`);
 }
 async function writeTempFileForAtomicReplace(params) {
-	const tempHandle = await fsPromises.open(params.tempPath, OPEN_WRITE_CREATE_FLAGS, params.mode);
+	const tempHandle = await fs$1.open(params.tempPath, OPEN_WRITE_CREATE_FLAGS, params.mode);
 	try {
 		if (typeof params.data === "string") await tempHandle.writeFile(params.data, params.encoding ?? "utf8");
 		else await tempHandle.writeFile(params.data);
@@ -180,7 +180,7 @@ async function writeTempFileForAtomicReplace(params) {
 	}
 }
 async function verifyAtomicWriteResult(params) {
-	const rootWithSep = ensureTrailingSep(await fsPromises.realpath(params.rootDir));
+	const rootWithSep = ensureTrailingSep(await fs$1.realpath(params.rootDir));
 	const opened = await openVerifiedLocalFile(params.targetPath, { rejectHardlinks: true });
 	try {
 		if (!sameFileIdentity(opened.stat, params.expectedStat)) throw new SafeOpenError("path-mismatch", "path changed during write");
@@ -191,13 +191,13 @@ async function verifyAtomicWriteResult(params) {
 }
 async function resolveOpenedFileRealPathForHandle(handle, ioPath) {
 	try {
-		return await fsPromises.realpath(ioPath);
+		return await fs$1.realpath(ioPath);
 	} catch (err) {
 		if (!isNotFoundPathError(err)) throw err;
 	}
 	const fdCandidates = process.platform === "linux" ? [`/proc/self/fd/${handle.fd}`, `/dev/fd/${handle.fd}`] : process.platform === "win32" ? [] : [`/dev/fd/${handle.fd}`];
 	for (const fdPath of fdCandidates) try {
-		return await fsPromises.realpath(fdPath);
+		return await fs$1.realpath(fdPath);
 	} catch {}
 	throw new SafeOpenError("path-mismatch", "unable to resolve opened file path");
 }
@@ -212,10 +212,10 @@ async function openWritableFileWithinRoot(params) {
 	} catch (err) {
 		throw new SafeOpenError("invalid-path", "path alias escape blocked", { cause: err });
 	}
-	if (params.mkdir !== false) await fsPromises.mkdir(path.dirname(resolved), { recursive: true });
+	if (params.mkdir !== false) await fs$1.mkdir(path.dirname(resolved), { recursive: true });
 	let ioPath = resolved;
 	try {
-		const resolvedRealPath = await fsPromises.realpath(resolved);
+		const resolvedRealPath = await fs$1.realpath(resolved);
 		if (!isPathInside(rootWithSep, resolvedRealPath)) throw new SafeOpenError("outside-workspace", "file is outside workspace root");
 		ioPath = resolvedRealPath;
 	} catch (err) {
@@ -227,10 +227,10 @@ async function openWritableFileWithinRoot(params) {
 	let createdForWrite = false;
 	try {
 		try {
-			handle = await fsPromises.open(ioPath, OPEN_WRITE_EXISTING_FLAGS, fileMode);
+			handle = await fs$1.open(ioPath, OPEN_WRITE_EXISTING_FLAGS, fileMode);
 		} catch (err) {
 			if (!isNotFoundPathError(err)) throw err;
-			handle = await fsPromises.open(ioPath, OPEN_WRITE_CREATE_FLAGS, fileMode);
+			handle = await fs$1.open(ioPath, OPEN_WRITE_CREATE_FLAGS, fileMode);
 			createdForWrite = true;
 		}
 	} catch (err) {
@@ -244,7 +244,7 @@ async function openWritableFileWithinRoot(params) {
 		if (!stat.isFile()) throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 		if (stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		try {
-			const lstat = await fsPromises.lstat(ioPath);
+			const lstat = await fs$1.lstat(ioPath);
 			if (lstat.isSymbolicLink() || !lstat.isFile()) throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 			if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during write");
 		} catch (err) {
@@ -252,7 +252,7 @@ async function openWritableFileWithinRoot(params) {
 		}
 		const realPath = await resolveOpenedFileRealPathForHandle(handle, ioPath);
 		openedRealPath = realPath;
-		const realStat = await fsPromises.stat(realPath);
+		const realStat = await fs$1.stat(realPath);
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		if (realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!isPathInside(rootWithSep, realPath)) throw new SafeOpenError("outside-workspace", "file is outside workspace root");
@@ -267,7 +267,7 @@ async function openWritableFileWithinRoot(params) {
 		const cleanupCreatedPath = createdForWrite && err instanceof SafeOpenError;
 		const cleanupPath = openedRealPath ?? ioPath;
 		await handle.close().catch(() => {});
-		if (cleanupCreatedPath) await fsPromises.rm(cleanupPath, { force: true }).catch(() => {});
+		if (cleanupCreatedPath) await fs$1.rm(cleanupPath, { force: true }).catch(() => {});
 		throw err;
 	}
 }
@@ -290,7 +290,7 @@ async function writeFileWithinRoot(params) {
 			encoding: params.encoding,
 			mode: targetMode || 384
 		});
-		await fsPromises.rename(tempPath, destinationPath);
+		await fs$1.rename(tempPath, destinationPath);
 		tempPath = null;
 		try {
 			await verifyAtomicWriteResult({
@@ -303,7 +303,7 @@ async function writeFileWithinRoot(params) {
 			throw err;
 		}
 	} finally {
-		if (tempPath) await fsPromises.rm(tempPath, { force: true }).catch(() => {});
+		if (tempPath) await fs$1.rm(tempPath, { force: true }).catch(() => {});
 	}
 }
 async function copyFileWithinRoot(params) {
@@ -331,7 +331,7 @@ async function copyFileWithinRoot(params) {
 		});
 		await pipeline(sourceStream, targetStream);
 	} catch (err) {
-		if (target?.createdForWrite) await fsPromises.rm(target.openedRealPath, { force: true }).catch(() => {});
+		if (target?.createdForWrite) await fs$1.rm(target.openedRealPath, { force: true }).catch(() => {});
 		throw err;
 	} finally {
 		if (!sourceClosedByStream) await source.handle.close().catch(() => {});