wednesdayai 0.5.1-dev.25 → 0.5.1-dev.27

package/dist/{deliver-CJjQbaJE.js → deliver-BaTG7V5x.js}

@@ -1,22 +1,22 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { l as resolveDefaultAgentId } from "./agent-scope-BKsGMXqc.js";
-import { l as resolveStateDir } from "./paths-B_gs59ga.js";
-import { t as createSubsystemLogger } from "./subsystem-BaT-AAVZ.js";
-import { H as normalizeOptionalAccountId, M as normalizeMainKey, Q as parseAgentSessionKey, V as normalizeAccountId, j as normalizeAgentId } from "./workspace-DK2ZEkpT.js";
-import { Gt as getActivePluginRegistry, Jn as normalizeChannelId, Kn as getChannelPlugin, Tn as updateSessionStoreEntry, U as loadConfig, Un as resolveStorePath, Yn as getChannelDock, _n as loadSessionStore, ga as resolveOpenClawAgentDir, gn as listConfiguredSessionStorageAgentIds, ln as getConversationReadQuery, qt as getActivePluginRegistryVersion, sn as StorageReadAccessError } from "./model-selection-CHi8o17y.js";
-import { L as resolveMainSessionKey, Mt as hasInterSessionUserProvenance, P as canonicalizeMainSessionAlias, Pt as getGlobalHookRunner, a as resolveMirroredTranscriptText, i as appendAssistantMessageToSessionTranscript, o as parseInlineDirectives, ot as eventOrder } from "./sessions-DC7A0bw-.js";
+import { l as resolveDefaultAgentId } from "./agent-scope-DCgndASv.js";
+import { l as resolveStateDir } from "./paths-BIDPYPVC.js";
+import { t as createSubsystemLogger } from "./subsystem-BZy3aWdW.js";
+import { H as normalizeOptionalAccountId, M as normalizeMainKey, Q as parseAgentSessionKey, V as normalizeAccountId, j as normalizeAgentId } from "./workspace-Bj1Jegt-.js";
+import { Gt as getActivePluginRegistry, Jn as normalizeChannelId, Kn as getChannelPlugin, Tn as updateSessionStoreEntry, U as loadConfig, Un as resolveStorePath, Yn as getChannelDock, _n as loadSessionStore, ga as resolveOpenClawAgentDir, gn as listConfiguredSessionStorageAgentIds, ln as getConversationReadQuery, qt as getActivePluginRegistryVersion, sn as StorageReadAccessError } from "./model-selection-BHGpQSa9.js";
+import { L as resolveMainSessionKey, Mt as hasInterSessionUserProvenance, P as canonicalizeMainSessionAlias, Pt as getGlobalHookRunner, a as resolveMirroredTranscriptText, i as appendAssistantMessageToSessionTranscript, o as parseInlineDirectives, ot as eventOrder } from "./sessions-DF9biCmh.js";
 import { n as generateSecureUuid } from "./secure-random-BEYczWtd.js";
-import { a as isMessagingToolDuplicate, t as extractTextFromChatContent } from "./chat-content-BWkiC3u3.js";
-import { o as hasErrnoCode } from "./errors-1FTZDNVR.js";
-import { t as ensureOpenClawModelsJson } from "./models-config-CAlyknIh.js";
-import { i as getAgentScopedMediaLocalRoots } from "./fetch-CnDdghbc.js";
-import { c as resolveChunkDelivery, d as resolveTextChunkLimit, i as chunkMarkdownTextWithMode, n as chunkByParagraph } from "./chunk-Bvf22vTh.js";
-import { n as resolveMarkdownTableMode } from "./markdown-tables-WuCFdPlC.js";
-import { d as resolveOutboundSessionId, n as createMessageSentEmitter, t as applyMessageSendingHook } from "./outbound-message-hooks-jUzcd2OQ.js";
-import { t as parseReplyDirectives } from "./reply-directives-DkfwzHl4.js";
-import { l as markdownToSignalTextChunks, t as sendMessageSignal } from "./send-mILKKt54.js";
+import { a as isMessagingToolDuplicate, t as extractTextFromChatContent } from "./chat-content-CX7Bfpgy.js";
+import { o as hasErrnoCode } from "./errors-COs_vQr3.js";
+import { t as ensureOpenClawModelsJson } from "./models-config-CJUMccZW.js";
+import { i as getAgentScopedMediaLocalRoots } from "./fetch-B1ohBh6A.js";
+import { c as resolveChunkDelivery, d as resolveTextChunkLimit, i as chunkMarkdownTextWithMode, n as chunkByParagraph } from "./chunk-CEygNI3g.js";
+import { n as resolveMarkdownTableMode } from "./markdown-tables-DfLMw9ti.js";
+import { d as resolveOutboundSessionId, n as createMessageSentEmitter, t as applyMessageSendingHook } from "./outbound-message-hooks-7ErHCBLv.js";
+import { t as parseReplyDirectives } from "./reply-directives-BIh2AkNd.js";
+import { l as markdownToSignalTextChunks, t as sendMessageSignal } from "./send-CsDSBjFo.js";
 import path from "node:path";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import { createHash } from "node:crypto";
 import { setTimeout } from "node:timers/promises";
 
@@ -372,7 +372,7 @@ function ensureContextWindowCacheLoaded() {
 			await ensureOpenClawModelsJson(cfg);
 		} catch {}
 		try {
-			const { discoverAuthStorage, discoverModels } = await import("./pi-model-discovery-CYfRyzsD.js").then((n) => n.r);
+			const { discoverAuthStorage, discoverModels } = await import("./pi-model-discovery-BaH_6win.js").then((n) => n.r);
 			const agentDir = resolveOpenClawAgentDir();
 			const modelRegistry = discoverModels(discoverAuthStorage(agentDir), agentDir);
 			applyDiscoveredContextWindows({
@@ -688,7 +688,7 @@ function listExistingAgentIdsFromDisk() {
 	const root = resolveStateDir();
 	const agentsDir = path.join(root, "agents");
 	try {
-		return syncFs.readdirSync(agentsDir, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => normalizeAgentId(entry.name)).filter(Boolean);
+		return fs.readdirSync(agentsDir, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => normalizeAgentId(entry.name)).filter(Boolean);
 	} catch {
 		return [];
 	}
@@ -889,11 +889,11 @@ function resolveFailedDir(stateDir) {
 /** Ensure the queue directory (and failed/ subdirectory) exist. */
 async function ensureQueueDir(stateDir) {
 	const queueDir = resolveQueueDir(stateDir);
-	await syncFs.promises.mkdir(queueDir, {
+	await fs.promises.mkdir(queueDir, {
 		recursive: true,
 		mode: 448
 	});
-	await syncFs.promises.mkdir(resolveFailedDir(stateDir), {
+	await fs.promises.mkdir(resolveFailedDir(stateDir), {
 		recursive: true,
 		mode: 448
 	});
@@ -923,18 +923,18 @@ async function enqueueDelivery(params, stateDir) {
 	const filePath = path.join(queueDir, `${id}.json`);
 	const tmp = `${filePath}.${process.pid}.tmp`;
 	const json = JSON.stringify(entry, null, 2);
-	await syncFs.promises.writeFile(tmp, json, {
+	await fs.promises.writeFile(tmp, json, {
 		encoding: "utf-8",
 		mode: 384
 	});
-	await syncFs.promises.rename(tmp, filePath);
+	await fs.promises.rename(tmp, filePath);
 	return id;
 }
 /** Remove a successfully delivered entry from the queue. */
 async function ackDelivery(id, stateDir) {
 	const filePath = path.join(resolveQueueDir(stateDir), `${id}.json`);
 	try {
-		await syncFs.promises.unlink(filePath);
+		await fs.promises.unlink(filePath);
 	} catch (err) {
 		if ((err && typeof err === "object" && "code" in err ? String(err.code) : null) !== "ENOENT") throw err;
 	}
@@ -961,22 +961,22 @@ async function failDelivery(id, error, stateDir) {
 	return serializeByKey(filePath, () => failDeliveryWrite(filePath, error));
 }
 async function failDeliveryWrite(filePath, error) {
-	const raw = await syncFs.promises.readFile(filePath, "utf-8");
+	const raw = await fs.promises.readFile(filePath, "utf-8");
 	const entry = JSON.parse(raw);
 	entry.retryCount += 1;
 	entry.lastAttemptAt = Date.now();
 	entry.lastError = error;
 	const tmp = `${filePath}.${process.pid}.tmp`;
-	await syncFs.promises.writeFile(tmp, JSON.stringify(entry, null, 2), {
+	await fs.promises.writeFile(tmp, JSON.stringify(entry, null, 2), {
 		encoding: "utf-8",
 		mode: 384
 	});
-	await syncFs.promises.rename(tmp, filePath);
+	await fs.promises.rename(tmp, filePath);
 }
 /** Read a queue entry raw; null when the file is missing. */
 async function readEntryFile(filePath) {
 	try {
-		const raw = await syncFs.promises.readFile(filePath, "utf-8");
+		const raw = await fs.promises.readFile(filePath, "utf-8");
 		return JSON.parse(raw);
 	} catch (err) {
 		if (hasErrnoCode(err, "ENOENT")) return null;
@@ -998,11 +998,11 @@ function markDeliveryPhase(filePath, transition) {
 		const next = transition(entry);
 		if (!next.advanced) return next;
 		const tmp = `${filePath}.${process.pid}.tmp`;
-		await syncFs.promises.writeFile(tmp, JSON.stringify(next.entry, null, 2), {
+		await fs.promises.writeFile(tmp, JSON.stringify(next.entry, null, 2), {
 			encoding: "utf-8",
 			mode: 384
 		});
-		await syncFs.promises.rename(tmp, filePath);
+		await fs.promises.rename(tmp, filePath);
 		return next;
 	});
 }

package/dist/{diagnostic-Dn_o8RGN.js → diagnostic-DMrDenZI.js}

@@ -1,11 +1,11 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { t as createSubsystemLogger } from "./subsystem-BaT-AAVZ.js";
-import { N as resolveAgentIdFromSessionKey } from "./workspace-DK2ZEkpT.js";
-import { U as loadConfig } from "./model-selection-CHi8o17y.js";
+import { t as createSubsystemLogger } from "./subsystem-BZy3aWdW.js";
+import { N as resolveAgentIdFromSessionKey } from "./workspace-Bj1Jegt-.js";
+import { U as loadConfig } from "./model-selection-BHGpQSa9.js";
 import { t as emitDiagnosticEvent } from "./diagnostic-events-DGRcTqIH.js";
 import { a as recordSessionChannelCorrelation, i as pruneDiagnosticSessionStates, o as recordTurnDuration, r as getDiagnosticSessionState, s as redactChannelCorrelation, t as diagnosticSessionStates } from "./diagnostic-session-state-Bnyx-w0F.js";
 import { t as redactIdentifier } from "./redact-identifier-WYElxwAZ.js";
-import { t as redactSensitiveText } from "./redact-CKI6SufO.js";
+import { t as redactSensitiveText } from "./redact-DpE5Tg36.js";
 import { createHash } from "node:crypto";
 
 //#region src/agents/command-poll-backoff.ts
@@ -837,7 +837,7 @@ function startDiagnosticHeartbeat(config) {
 				if (ageMs > stuckSessionAbortMs && state.queueDepth > 0 && !state.capturedEnd && !state.abortDispatched && state.sessionId) {
 					state.abortDispatched = true;
 					diag.warn(`stuck-session abort: sessionId=${state.sessionId} progressAge=${Math.round(ageMs / 1e3)}s threshold=${Math.round(stuckSessionAbortMs / 1e3)}s queueDepth=${state.queueDepth}`);
-					import("./runs-DFvW_PVw.js").then((n) => n.c).then(({ abortEmbeddedPiRun }) => {
+					import("./runs-6Q7RU60m.js").then((n) => n.c).then(({ abortEmbeddedPiRun }) => {
 						if (state.sessionId && state.abortDispatched) abortEmbeddedPiRun(state.sessionId);
 					}).catch((err) => {
 						diag.warn(`stuck-session abort import failed: ${String(err)}`);

package/dist/{errors-1FTZDNVR.js → errors-COs_vQr3.js}

@@ -1,4 +1,4 @@
-import { t as redactSensitiveText } from "./redact-CKI6SufO.js";
+import { t as redactSensitiveText } from "./redact-DpE5Tg36.js";
 
 //#region src/infra/errors.ts
 function extractErrorCode(err) {

package/dist/{fetch-CnDdghbc.js → fetch-B1ohBh6A.js}

@@ -1,12 +1,12 @@
-import { c as resolveAgentWorkspaceDir } from "./agent-scope-BKsGMXqc.js";
-import { l as resolveStateDir } from "./paths-B_gs59ga.js";
-import { mt as resolvePreferredOpenClawTmpDir } from "./subsystem-BaT-AAVZ.js";
-import { U as loadConfig } from "./model-selection-CHi8o17y.js";
-import { t as redactSensitiveText } from "./redact-CKI6SufO.js";
-import { c as detectMime, l as extensionForMime } from "./image-ops-BuzZGoUm.js";
-import { r as formatErrorChainMessage } from "./errors-1FTZDNVR.js";
+import { c as resolveAgentWorkspaceDir } from "./agent-scope-DCgndASv.js";
+import { l as resolveStateDir } from "./paths-BIDPYPVC.js";
+import { mt as resolvePreferredOpenClawTmpDir } from "./subsystem-BZy3aWdW.js";
+import { U as loadConfig } from "./model-selection-BHGpQSa9.js";
+import { t as redactSensitiveText } from "./redact-DpE5Tg36.js";
+import { c as detectMime, l as extensionForMime } from "./image-ops-C-5VgbLB.js";
+import { r as formatErrorChainMessage } from "./errors-COs_vQr3.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-Cj-XaaTu.js";
-import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-B6BYdjiQ.js";
+import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-BXzVwvnJ.js";
 import path from "node:path";
 
 //#region src/media/local-roots.ts

package/dist/{fetch-guard-B6BYdjiQ.js → fetch-guard-BXzVwvnJ.js}

@@ -1,7 +1,7 @@
-import { i as logWarn, r as logInfo } from "./logger-BeXVb5cn.js";
-import { c as resolvePinnedHostnameWithPolicy, i as createPinnedDispatcher, n as SsrFBlockedError, o as isPrivateIpAddress, r as closeDispatcher, t as hasProxyEnvConfigured } from "./proxy-env-DAf-b2bM.js";
+import { i as logWarn, r as logInfo } from "./logger-J4xjy-6D.js";
+import { c as resolvePinnedHostnameWithPolicy, i as createPinnedDispatcher, n as SsrFBlockedError, o as isPrivateIpAddress, r as closeDispatcher, t as hasProxyEnvConfigured } from "./proxy-env-BxR4m86L.js";
 import { t as bindAbortRelay } from "./fetch-timeout-Dyj5Y_Ss.js";
-import { t as isNpmUndiciDispatchingFetch } from "./proxy-fetch-M3YAp_Kv.js";
+import { t as isNpmUndiciDispatchingFetch } from "./proxy-fetch-g109vqdt.js";
 import { EnvHttpProxyAgent, FormData, fetch } from "undici";
 
 //#region src/infra/net/form-data.ts

package/dist/{frontmatter-DvbDhvt1.js → frontmatter-Cw_6jMAR.js}

@@ -1,6 +1,6 @@
-import { s as parseBooleanValue, t as readManifestNamespace } from "./legacy-names-Ckds5WWe.js";
+import { s as parseBooleanValue, t as readManifestNamespace } from "./legacy-names-CghFcfry.js";
 import path from "node:path";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import JSON5 from "json5";
 import YAML from "yaml";
 
@@ -92,7 +92,7 @@ function hasBinary(bin) {
 	for (const part of parts) for (const ext of extensions) {
 		const candidate = path.join(part, bin + ext);
 		try {
-			syncFs.accessSync(candidate, syncFs.constants.X_OK);
+			fs.accessSync(candidate, fs.constants.X_OK);
 			hasBinaryCache.set(bin, true);
 			return true;
 		} catch {}

package/dist/{fs-safe-IYMDplSg.js → fs-safe-BK5ALzKD.js}

@@ -1,11 +1,11 @@
-import { u as expandHomePrefix } from "./paths-B_gs59ga.js";
-import { B as hasNodeErrorCode, H as isPathInside, I as sameFileIdentity, U as isSymlinkOpenError, V as isNotFoundPathError } from "./subsystem-BaT-AAVZ.js";
-import { i as logWarn } from "./logger-BeXVb5cn.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-BgOxr6f8.js";
+import { u as expandHomePrefix } from "./paths-BIDPYPVC.js";
+import { B as hasNodeErrorCode, H as isPathInside, I as sameFileIdentity, U as isSymlinkOpenError, V as isNotFoundPathError } from "./subsystem-BZy3aWdW.js";
+import { i as logWarn } from "./logger-J4xjy-6D.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-E9ntDORB.js";
 import path from "node:path";
 import { constants } from "node:fs";
 import os from "node:os";
-import fs from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import { randomUUID } from "node:crypto";
 import { pipeline } from "node:stream/promises";
 
@@ -25,19 +25,19 @@ const ensureTrailingSep = (value) => value.endsWith(path.sep) ? value : value +
 async function expandRelativePathWithHome(relativePath) {
 	let home = process.env.HOME || process.env.USERPROFILE || os.homedir();
 	try {
-		home = await fs.realpath(home);
+		home = await fs$1.realpath(home);
 	} catch {}
 	return expandHomePrefix(relativePath, { home });
 }
 async function openVerifiedLocalFile(filePath, options) {
 	try {
-		if ((await fs.lstat(filePath)).isDirectory()) throw new SafeOpenError("not-file", "not a file");
+		if ((await fs$1.lstat(filePath)).isDirectory()) throw new SafeOpenError("not-file", "not a file");
 	} catch (err) {
 		if (err instanceof SafeOpenError) throw err;
 	}
 	let handle;
 	try {
-		handle = await fs.open(filePath, OPEN_READ_FLAGS);
+		handle = await fs$1.open(filePath, OPEN_READ_FLAGS);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "file not found");
 		if (isSymlinkOpenError(err)) throw new SafeOpenError("symlink", "symlink open blocked", { cause: err });
@@ -45,13 +45,13 @@ async function openVerifiedLocalFile(filePath, options) {
 		throw err;
 	}
 	try {
-		const [stat, lstat] = await Promise.all([handle.stat(), fs.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([handle.stat(), fs$1.lstat(filePath)]);
 		if (lstat.isSymbolicLink()) throw new SafeOpenError("symlink", "symlink not allowed");
 		if (!stat.isFile()) throw new SafeOpenError("not-file", "not a file");
 		if (options?.rejectHardlinks && stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during read");
-		const realPath = await fs.realpath(filePath);
-		const realStat = await fs.stat(realPath);
+		const realPath = await fs$1.realpath(filePath);
+		const realStat = await fs$1.stat(realPath);
 		if (options?.rejectHardlinks && realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		return {
@@ -69,7 +69,7 @@ async function openVerifiedLocalFile(filePath, options) {
 async function resolvePathWithinRoot(params) {
 	let rootReal;
 	try {
-		rootReal = await fs.realpath(params.rootDir);
+		rootReal = await fs$1.realpath(params.rootDir);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "root dir not found");
 		throw err;
@@ -170,7 +170,7 @@ function buildAtomicWriteTempPath(targetPath) {
 	return path.join(dir, `.${base}.${process.pid}.${randomUUID()}.tmp`);
 }
 async function writeTempFileForAtomicReplace(params) {
-	const tempHandle = await fs.open(params.tempPath, OPEN_WRITE_CREATE_FLAGS, params.mode);
+	const tempHandle = await fs$1.open(params.tempPath, OPEN_WRITE_CREATE_FLAGS, params.mode);
 	try {
 		if (typeof params.data === "string") await tempHandle.writeFile(params.data, params.encoding ?? "utf8");
 		else await tempHandle.writeFile(params.data);
@@ -180,7 +180,7 @@ async function writeTempFileForAtomicReplace(params) {
 	}
 }
 async function verifyAtomicWriteResult(params) {
-	const rootWithSep = ensureTrailingSep(await fs.realpath(params.rootDir));
+	const rootWithSep = ensureTrailingSep(await fs$1.realpath(params.rootDir));
 	const opened = await openVerifiedLocalFile(params.targetPath, { rejectHardlinks: true });
 	try {
 		if (!sameFileIdentity(opened.stat, params.expectedStat)) throw new SafeOpenError("path-mismatch", "path changed during write");
@@ -191,13 +191,13 @@ async function verifyAtomicWriteResult(params) {
 }
 async function resolveOpenedFileRealPathForHandle(handle, ioPath) {
 	try {
-		return await fs.realpath(ioPath);
+		return await fs$1.realpath(ioPath);
 	} catch (err) {
 		if (!isNotFoundPathError(err)) throw err;
 	}
 	const fdCandidates = process.platform === "linux" ? [`/proc/self/fd/${handle.fd}`, `/dev/fd/${handle.fd}`] : process.platform === "win32" ? [] : [`/dev/fd/${handle.fd}`];
 	for (const fdPath of fdCandidates) try {
-		return await fs.realpath(fdPath);
+		return await fs$1.realpath(fdPath);
 	} catch {}
 	throw new SafeOpenError("path-mismatch", "unable to resolve opened file path");
 }
@@ -212,10 +212,10 @@ async function openWritableFileWithinRoot(params) {
 	} catch (err) {
 		throw new SafeOpenError("invalid-path", "path alias escape blocked", { cause: err });
 	}
-	if (params.mkdir !== false) await fs.mkdir(path.dirname(resolved), { recursive: true });
+	if (params.mkdir !== false) await fs$1.mkdir(path.dirname(resolved), { recursive: true });
 	let ioPath = resolved;
 	try {
-		const resolvedRealPath = await fs.realpath(resolved);
+		const resolvedRealPath = await fs$1.realpath(resolved);
 		if (!isPathInside(rootWithSep, resolvedRealPath)) throw new SafeOpenError("outside-workspace", "file is outside workspace root");
 		ioPath = resolvedRealPath;
 	} catch (err) {
@@ -227,10 +227,10 @@ async function openWritableFileWithinRoot(params) {
 	let createdForWrite = false;
 	try {
 		try {
-			handle = await fs.open(ioPath, OPEN_WRITE_EXISTING_FLAGS, fileMode);
+			handle = await fs$1.open(ioPath, OPEN_WRITE_EXISTING_FLAGS, fileMode);
 		} catch (err) {
 			if (!isNotFoundPathError(err)) throw err;
-			handle = await fs.open(ioPath, OPEN_WRITE_CREATE_FLAGS, fileMode);
+			handle = await fs$1.open(ioPath, OPEN_WRITE_CREATE_FLAGS, fileMode);
 			createdForWrite = true;
 		}
 	} catch (err) {
@@ -244,7 +244,7 @@ async function openWritableFileWithinRoot(params) {
 		if (!stat.isFile()) throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 		if (stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		try {
-			const lstat = await fs.lstat(ioPath);
+			const lstat = await fs$1.lstat(ioPath);
 			if (lstat.isSymbolicLink() || !lstat.isFile()) throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 			if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during write");
 		} catch (err) {
@@ -252,7 +252,7 @@ async function openWritableFileWithinRoot(params) {
 		}
 		const realPath = await resolveOpenedFileRealPathForHandle(handle, ioPath);
 		openedRealPath = realPath;
-		const realStat = await fs.stat(realPath);
+		const realStat = await fs$1.stat(realPath);
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		if (realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!isPathInside(rootWithSep, realPath)) throw new SafeOpenError("outside-workspace", "file is outside workspace root");
@@ -267,7 +267,7 @@ async function openWritableFileWithinRoot(params) {
 		const cleanupCreatedPath = createdForWrite && err instanceof SafeOpenError;
 		const cleanupPath = openedRealPath ?? ioPath;
 		await handle.close().catch(() => {});
-		if (cleanupCreatedPath) await fs.rm(cleanupPath, { force: true }).catch(() => {});
+		if (cleanupCreatedPath) await fs$1.rm(cleanupPath, { force: true }).catch(() => {});
 		throw err;
 	}
 }
@@ -290,7 +290,7 @@ async function writeFileWithinRoot(params) {
 			encoding: params.encoding,
 			mode: targetMode || 384
 		});
-		await fs.rename(tempPath, destinationPath);
+		await fs$1.rename(tempPath, destinationPath);
 		tempPath = null;
 		try {
 			await verifyAtomicWriteResult({
@@ -303,7 +303,7 @@ async function writeFileWithinRoot(params) {
 			throw err;
 		}
 	} finally {
-		if (tempPath) await fs.rm(tempPath, { force: true }).catch(() => {});
+		if (tempPath) await fs$1.rm(tempPath, { force: true }).catch(() => {});
 	}
 }
 async function copyFileWithinRoot(params) {
@@ -331,7 +331,7 @@ async function copyFileWithinRoot(params) {
 		});
 		await pipeline(sourceStream, targetStream);
 	} catch (err) {
-		if (target?.createdForWrite) await fs.rm(target.openedRealPath, { force: true }).catch(() => {});
+		if (target?.createdForWrite) await fs$1.rm(target.openedRealPath, { force: true }).catch(() => {});
 		throw err;
 	} finally {
 		if (!sourceClosedByStream) await source.handle.close().catch(() => {});

package/dist/github-copilot-token-DYYKoDuV.js

@@ -0,0 +1,106 @@
+import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
+import { l as resolveStateDir } from "./paths-BIDPYPVC.js";
+import path from "node:path";
+import fs from "node:fs";
+
+//#region src/infra/json-file.ts
+function loadJsonFile(pathname) {
+	try {
+		if (!fs.existsSync(pathname)) return;
+		const raw = fs.readFileSync(pathname, "utf8");
+		return JSON.parse(raw);
+	} catch {
+		return;
+	}
+}
+function saveJsonFile(pathname, data) {
+	const dir = path.dirname(pathname);
+	if (!fs.existsSync(dir)) fs.mkdirSync(dir, {
+		recursive: true,
+		mode: 448
+	});
+	fs.writeFileSync(pathname, `${JSON.stringify(data, null, 2)}\n`, "utf8");
+	fs.chmodSync(pathname, 384);
+}
+
+//#endregion
+//#region src/providers/github-copilot-token.ts
+var github_copilot_token_exports = /* @__PURE__ */ __exportAll({
+	DEFAULT_COPILOT_API_BASE_URL: () => DEFAULT_COPILOT_API_BASE_URL,
+	deriveCopilotApiBaseUrlFromToken: () => deriveCopilotApiBaseUrlFromToken,
+	resolveCopilotApiToken: () => resolveCopilotApiToken
+});
+const COPILOT_TOKEN_URL = "https://api.github.com/copilot_internal/v2/token";
+function resolveCopilotTokenCachePath(env = process.env) {
+	return path.join(resolveStateDir(env), "credentials", "github-copilot.token.json");
+}
+function isTokenUsable(cache, now = Date.now()) {
+	return cache.expiresAt - now > 300 * 1e3;
+}
+function parseCopilotTokenResponse(value) {
+	if (!value || typeof value !== "object") throw new Error("Unexpected response from GitHub Copilot token endpoint");
+	const asRecord = value;
+	const token = asRecord.token;
+	const expiresAt = asRecord.expires_at;
+	if (typeof token !== "string" || token.trim().length === 0) throw new Error("Copilot token response missing token");
+	let expiresAtMs;
+	if (typeof expiresAt === "number" && Number.isFinite(expiresAt)) expiresAtMs = expiresAt > 1e10 ? expiresAt : expiresAt * 1e3;
+	else if (typeof expiresAt === "string" && expiresAt.trim().length > 0) {
+		const parsed = Number.parseInt(expiresAt, 10);
+		if (!Number.isFinite(parsed)) throw new Error("Copilot token response has invalid expires_at");
+		expiresAtMs = parsed > 1e10 ? parsed : parsed * 1e3;
+	} else throw new Error("Copilot token response missing expires_at");
+	return {
+		token,
+		expiresAt: expiresAtMs
+	};
+}
+const DEFAULT_COPILOT_API_BASE_URL = "https://api.individual.githubcopilot.com";
+function deriveCopilotApiBaseUrlFromToken(token) {
+	const trimmed = token.trim();
+	if (!trimmed) return null;
+	const proxyEp = trimmed.match(/(?:^|;)\s*proxy-ep=([^;\s]+)/i)?.[1]?.trim();
+	if (!proxyEp) return null;
+	const host = proxyEp.replace(/^https?:\/\//, "").replace(/^proxy\./i, "api.");
+	if (!host) return null;
+	return `https://${host}`;
+}
+async function resolveCopilotApiToken(params) {
+	const env = params.env ?? process.env;
+	const cachePath = params.cachePath?.trim() || resolveCopilotTokenCachePath(env);
+	const loadJsonFileFn = params.loadJsonFileImpl ?? loadJsonFile;
+	const saveJsonFileFn = params.saveJsonFileImpl ?? saveJsonFile;
+	const cached = loadJsonFileFn(cachePath);
+	if (cached && typeof cached.token === "string" && typeof cached.expiresAt === "number") {
+		if (isTokenUsable(cached)) return {
+			token: cached.token,
+			expiresAt: cached.expiresAt,
+			source: `cache:${cachePath}`,
+			baseUrl: deriveCopilotApiBaseUrlFromToken(cached.token) ?? DEFAULT_COPILOT_API_BASE_URL
+		};
+	}
+	const res = await (params.fetchImpl ?? fetch)(COPILOT_TOKEN_URL, {
+		method: "GET",
+		headers: {
+			Accept: "application/json",
+			Authorization: `Bearer ${params.githubToken}`
+		}
+	});
+	if (!res.ok) throw new Error(`Copilot token exchange failed: HTTP ${res.status}`);
+	const json = parseCopilotTokenResponse(await res.json());
+	const payload = {
+		token: json.token,
+		expiresAt: json.expiresAt,
+		updatedAt: Date.now()
+	};
+	saveJsonFileFn(cachePath, payload);
+	return {
+		token: payload.token,
+		expiresAt: payload.expiresAt,
+		source: `fetched:${COPILOT_TOKEN_URL}`,
+		baseUrl: deriveCopilotApiBaseUrlFromToken(payload.token) ?? DEFAULT_COPILOT_API_BASE_URL
+	};
+}
+
+//#endregion
+export { saveJsonFile as a, loadJsonFile as i, github_copilot_token_exports as n, resolveCopilotApiToken as r, DEFAULT_COPILOT_API_BASE_URL as t };

package/dist/{image-ops-BuzZGoUm.js → image-ops-C-5VgbLB.js}

@@ -1,4 +1,4 @@
-import { _ as runExec } from "./workspace-DK2ZEkpT.js";
+import { _ as runExec } from "./workspace-Bj1Jegt-.js";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs/promises";

package/dist/{ir-CBsM7qoP.js → ir-DioI2VyB.js}

@@ -1,8 +1,8 @@
-import { f as logVerbose, h as shouldLogVerbose, st as resolveUserPath } from "./subsystem-BaT-AAVZ.js";
-import { _ as maxBytesForKind, a as hasAlphaChannel, c as detectMime, l as extensionForMime, m as kindFromMime, o as optimizeImageToPng, r as convertHeicToJpeg, s as resizeToJpeg } from "./image-ops-BuzZGoUm.js";
-import { o as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-IYMDplSg.js";
-import { a as getDefaultMediaLocalRoots, n as fetchRemoteMedia } from "./fetch-CnDdghbc.js";
-import { a as chunkText } from "./chunk-Bvf22vTh.js";
+import { f as logVerbose, h as shouldLogVerbose, st as resolveUserPath } from "./subsystem-BZy3aWdW.js";
+import { _ as maxBytesForKind, a as hasAlphaChannel, c as detectMime, l as extensionForMime, m as kindFromMime, o as optimizeImageToPng, r as convertHeicToJpeg, s as resizeToJpeg } from "./image-ops-C-5VgbLB.js";
+import { o as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-BK5ALzKD.js";
+import { a as getDefaultMediaLocalRoots, n as fetchRemoteMedia } from "./fetch-B1ohBh6A.js";
+import { a as chunkText } from "./chunk-CEygNI3g.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { fileURLToPath } from "node:url";

package/dist/{legacy-names-Ckds5WWe.js → legacy-names-CghFcfry.js}

@@ -1,4 +1,4 @@
-import { t as createSubsystemLogger } from "./subsystem-BaT-AAVZ.js";
+import { t as createSubsystemLogger } from "./subsystem-BZy3aWdW.js";
 
 //#region src/utils/boolean.ts
 const DEFAULT_TRUTHY = [