wednesdayai 0.5.1-dev.36 → 0.5.1-dev.37

package/dist/{pi-embedded-D6Ti_RiY.js → pi-embedded-_YhHvi3M.js}

@@ -1,69 +1,69 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { _ as toAgentModelListLike, c as resolveAgentWorkspaceDir, d as resolveRunModelFallbacksOverride, f as resolveSessionAgentId, g as resolveAgentModelPrimaryValue, h as resolveAgentModelFallbackValues, i as resolveAgentDir, l as resolveDefaultAgentId, n as listAgentIds, p as resolveSessionAgentIds, r as resolveAgentConfig, s as resolveAgentSkillsFilter, t as hasConfiguredModelFallbacks, u as resolveEffectiveModelFallbacks } from "./agent-scope-cTY4-zRz.js";
-import { a as resolveGatewayLockDir, f as resolveRequiredHomeDir, l as resolveStateDir, o as resolveGatewayPort, r as resolveConfigPath, s as resolveOAuthDir, u as expandHomePrefix } from "./paths-BIDPYPVC.js";
-import { C as appendFileLog, F as openBoundaryFileSync, K as isDangerousHostEnvVarName, O as INCLUDE_KEY, P as openBoundaryFile, Q as clampInt, T as normalizeLogLevel, W as normalizeWindowsPathForComparison, Z as CONFIG_DIR, _ as colorize, a as createNonExitingRuntime, b as getChildLogger, c as registerActiveProgressLine, ct as safeParseJson, dt as sleep$3, et as ensureDir$3, f as logVerbose, ft as sliceUtf16Safe, g as warn, h as shouldLogVerbose, it as normalizeE164, j as isBlockedObjectKey, l as unregisterActiveProgressLine, lt as shortenHomeInString, m as setVerbose, mt as resolvePreferredOpenClawTmpDir, nt as formatTerminalLink, o as defaultRuntime, pt as truncateUtf16Safe, rt as isRecord$1, s as clearActiveProgressLine, st as resolveUserPath, t as createSubsystemLogger, tt as escapeRegExp, u as danger, ut as shortenHomePath, v as isRich, y as theme } from "./subsystem-BOg9wqSC.js";
+import { _ as toAgentModelListLike, c as resolveAgentWorkspaceDir, d as resolveRunModelFallbacksOverride, f as resolveSessionAgentId, g as resolveAgentModelPrimaryValue, h as resolveAgentModelFallbackValues, i as resolveAgentDir, l as resolveDefaultAgentId, n as listAgentIds, p as resolveSessionAgentIds, r as resolveAgentConfig, s as resolveAgentSkillsFilter, t as hasConfiguredModelFallbacks, u as resolveEffectiveModelFallbacks } from "./agent-scope-CoIdVzmg.js";
+import { a as resolveGatewayLockDir, f as resolveRequiredHomeDir, l as resolveStateDir, o as resolveGatewayPort, r as resolveConfigPath, s as resolveOAuthDir, u as expandHomePrefix } from "./paths-B_gs59ga.js";
+import { C as appendFileLog, F as openBoundaryFileSync, K as isDangerousHostEnvVarName, O as INCLUDE_KEY, P as openBoundaryFile, Q as clampInt, T as normalizeLogLevel, W as normalizeWindowsPathForComparison, Z as CONFIG_DIR, _ as colorize, a as createNonExitingRuntime, b as getChildLogger, c as registerActiveProgressLine, ct as safeParseJson, dt as sleep$3, et as ensureDir$3, f as logVerbose, ft as sliceUtf16Safe, g as warn, h as shouldLogVerbose, it as normalizeE164, j as isBlockedObjectKey, l as unregisterActiveProgressLine, lt as shortenHomeInString, m as setVerbose, mt as resolvePreferredOpenClawTmpDir, nt as formatTerminalLink, o as defaultRuntime, pt as truncateUtf16Safe, rt as isRecord$1, s as clearActiveProgressLine, st as resolveUserPath, t as createSubsystemLogger, tt as escapeRegExp, u as danger, ut as shortenHomePath, v as isRich, y as theme } from "./subsystem-DynBFcQj.js";
 import { n as resolveProcessScopedMap, t as isPlainObject } from "./plain-object-Doc_YkH1.js";
-import { B as resolveThreadSessionKeys, C as DEFAULT_AGENT_ID, D as buildAgentMainSessionKey, F as normalizeAgentId, G as normalizeAccountId$1, H as sessionKeyAgentMatches, I as normalizeMainKey, K as normalizeOptionalAccountId, L as resolveAgentIdFromSessionKey, N as isKnownAgentMainSessionKey, P as isValidAgentId, Q as isCronSessionKey, R as resolveCanonicalIdentity, S as logWarn, T as DEVICE_SENDER_PREFIX, U as toAgentStoreSessionKey, V as sanitizeAgentId, W as DEFAULT_ACCOUNT_ID, X as getSubagentDepth, Y as WAKE_GATE_SESSION_KEY_SEGMENT, Z as isAcpSessionKey, _ as runExec, a as DEFAULT_IDENTITY_FILENAME, b as logError, et as isSubagentSessionKey, f as loadWorkspaceBootstrapFiles, g as runCommandWithTimeout, i as DEFAULT_HEARTBEAT_FILENAME, k as classifySessionKeyShape, l as ensureAgentWorkspace, m as resolveOpenClawPackageRoot, n as DEFAULT_AGENT_WORKSPACE_DIR, nt as resolveThreadParentSessionKey, r as DEFAULT_BOOTSTRAP_FILENAME, rt as stripAgentSessionKeyPrefix, tt as parseAgentSessionKey, u as filterBootstrapFilesForSession, v as spawnWithFallback, x as logInfo, y as logDebug, z as resolveConfiguredCanonicalIdentity } from "./workspace-D8z8s1Xz.js";
-import { $ as normalizeScpRemoteHost, $i as parseDotPath, $n as getChannelPlugin, $t as clearPluginCommands, A as requireApiKey, Ai as DEFAULT_SAFE_BINS, An as DEFAULT_RESET_TRIGGERS, Ar as deliveryContextKey, At as resolveMemorySlotDecision, B as resolveProfilesUnavailableReason, Bi as SAFE_BIN_PROFILES, Bn as SESSION_RUN_STORE_FILE_NAME, Br as normalizeMessageChannel, Bt as normalizeChatChannelId, C as createOllamaStreamFn, Ca as resolveSecretInputRef, Ci as listWritableExplicitTrustedSafeBinDirs, Cn as readSessionUpdatedAt, Cr as resolveDiscordAccount, Ct as validateJsonSchemaValue, D as buildUsageWithNoCost, Da as DEFAULT_PROVIDER, Di as buildEnforcedShellCommand, Dn as updateSessionStore, Dr as resolveChannelGroupToolsPolicy, Dt as isBundledChannelEnabledByChannelConfig, E as buildStreamErrorAssistantMessage, Ea as DEFAULT_MODEL, Ei as analyzeShellCommand, En as updateLastRoute, Er as resolveChannelGroupRequireMention, Et as applyTestPluginDefaults, F as resolveAuthProfileOrder, Fi as isDispatchWrapperExecutable, Fn as parseSessionIndexRecordKey, Fr as isDeliverableMessageChannel, Ft as CHAT_CHANNEL_ORDER, G as readConfigFileSnapshotForWrite, Gi as mapStreamingModeToSlackLegacyDraftStreamMode, Gr as GATEWAY_CLIENT_NAMES, Hi as resolveSafeBinProfiles, Hn as resolveSessionFilePath, Hr as resolveMessageChannel, Ht as getActiveGatewayPluginRegistry, I as getSoonestCooldownExpiry, Ii as isShellWrapperExecutable, Ir as isGatewayMessageChannel, It as getChatChannelMeta, Ji as resolveSlackStreamingMode, Jn as resolveGroupSessionKey, Jr as resolveSessionLockMaxHoldFromTimeout, Jt as addRegisteredPluginApi, K as writeConfigFile, Ki as resolveDiscordPreviewStreamMode, Kn as resolveStorePath, Kr as normalizeAccountId$2, Kt as requireActivePluginRegistry, L as isProfileInCooldown, Li as unwrapKnownDispatchWrapperInvocation, Lr as isInternalMessageChannel, Lt as listChatChannels, M as resolveEnvApiKey, Mi as resolveAllowlistCandidatePath, Mn as resolveFreshSessionTotalTokens, Mr as normalizeDeliveryContext, Mt as isPathInside, N as resolveModelAuthMode, Ni as resolveCommandResolutionFromArgv, Nn as setSessionRuntimeModel, Nr as normalizeSessionDeliveryFields, Nt as safeStatSync, O as getApiKeyForModel, Oi as isWindowsPlatform, On as updateSessionStoreEntry, Or as resolveAccountEntry, Ot as normalizePluginsConfig, Pi as extractShellWrapperInlineCommand, Pn as parseDurationMs, Pr as INTERNAL_MESSAGE_CHANNEL, Q as resolveIMessageRemoteAttachmentRoots, Qi as isRecord$2, Qn as normalizeSignalMessagingTarget, Qt as buildPluginHealthReport, R as markAuthProfileFailure, Ri as unwrapKnownShellMultiplexerInvocation, Rr as isMarkdownCapableMessageChannel, Rt as normalizeAnyChannelId, S as OLLAMA_NATIVE_BASE_URL, Sa as normalizeResolvedSecretInputString, Si as isTrustedSafeBinPath, Sn as prepareConfiguredSessionStorageRuntimeActivation, Sr as listEnabledDiscordAccounts, T as buildAssistantMessageWithZeroUsage, Ta as DEFAULT_CONTEXT_TOKENS, Ti as validateSafeBinArgv, Tn as refreshConfiguredSessionBindingEntry, Tr as resolveChannelGroupPolicy, Tt as BUNDLED_ENABLED_BY_DEFAULT, U as loadConfig, Ui as applyMergePatch, Un as resolveSessionFilePathOptions, Ur as GATEWAY_CLIENT_IDS, Ut as getActivePluginRegistry, V as resolveApiKeyForProfile, Vi as normalizeSafeBinProfileFixtures, Vr as resolveGatewayMessageChannel, Vt as resolveChannelConfigId, W as readConfigFileSnapshot, Wi as isSafeExecutableValue, Wn as resolveSessionTranscriptPath, Wr as GATEWAY_CLIENT_MODES, Wt as getActivePluginRegistryKey, Xi as describeUnknownError$1, Xn as getChannelDock, Xr as readTaskWorkStates, Xt as createPluginRegistry, Y as isInboundPathAllowed, Yi as resolveSecretRefValues, Yn as resolveParentSessionGroupId, Yr as CtxProjectionCorruptionError, Yt as clearRegisteredPluginApis, Z as resolveIMessageAttachmentRoots, Zi as isNonEmptyString, Zn as listChannelDocks, Zt as normalizePluginHttpPath, _a as resolveAuthProfileDisplayLabel, _i as getConfigValueAtPath, _n as commitPreparedConfiguredSessionStorageRuntimeActivation, _r as resolveWhatsAppAccount, _t as isAvatarDataUrl, a as isCliProvider, aa as resolveShellEnvFallbackTimeoutMs, ai as applyTargetToParams, an as getRegisteredSpeechProviders, ar as normalizeHyphenSlug, ba as coerceSecretRef, bi as unsetConfigValueAtPath, bn as loadSessionStore, br as resolveIMessageAccount, bt as isSupportedLocalAvatarExtension, c as normalizeProviderId, ca as dedupeProfileIds, cn as replaceSpeechProviders, cr as resolveSlackAccount, d as resolveDefaultModelForAgent, da as ensureAuthProfileStore, di as replaceBufferedPluginTaskPasses, dn as createConversationReadQuery, dr as resolveSlackBotToken, ea as secretRefKey, en as executePluginCommand, er as listChannelPlugins, et as parseNonNegativeByteSize, f as resolveModelRefFromString, fa as resolveAuthStorePathForDisplay, fi as RecoveryAdmissionError, fn as getConversationReadQuery, fr as listEnabledSignalAccounts, ga as readProcessElapsedSeconds, gi as unsetConfigOverride, gn as closeReplacedConfiguredSessionStorageRuntime, gr as hasAnyWhatsAppAuth, gt as AVATAR_MAX_BYTES, h as resolveThinkingDefault, ha as isPidAlive, hi as setConfigOverride, hn as closeConfiguredSessionStorageRuntime, hr as normalizeWhatsAppTarget, i as findNormalizedProviderValue, ia as getShellPathFromLoginShell, ii as stringEnum, in as BUILTIN_TTS_PROVIDER_IDS, ir as normalizeAtHashSlug, ji as matchAllowlist, jn as mergeSessionEntry, jr as mergeDeliveryContext, jt as discoverOpenClawPlugins, k as getCustomProviderApiKey, ki as splitCommandChain, kr as deliveryContextFromSession, kt as resolveEffectiveEnableState, l as parseModelRef, la as listProfilesForProvider, li as discardBufferedPluginTaskPasses, ln as normalizeProviderId$1, lr as resolveSlackReplyToMode, m as resolveSubagentSpawnModelSelection, ma as withFileLock$1, mi as resetConfigOverrides, mn as requireSessionStorageRuntime, mr as isWhatsAppGroupJid, n as buildConfiguredAllowlistKeys, na as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, ni as channelTargetsSchema, nn as matchPluginCommand, nr as formatAllowlistMatchMeta, nt as resolveExecPolicyPreset, o as modelKey, oa as isTruthyEnvValue, oi as actionHasTarget, on as getSpeechProvider, or as normalizeStringEntries, p as resolveReasoningDefault, pa as resolveOpenClawAgentDir, pi as getConfigOverrides, pr as resolveSignalAccount, q as validateConfigObjectWithPlugins, qi as resolveSlackNativeStreaming, qn as deriveSessionMetaPatch, qr as acquireSessionWriteLock, qt as setActivePluginRegistry, r as buildModelAliasIndex, ra as VERSION, ri as optionalStringEnum, rn as registerPluginCommand, rr as resolveAllowlistMatchByCandidates, s as normalizeModelRef$2, sa as resolveOwnerDisplaySetting, si as actionRequiresTarget, sn as isBuiltinTtsProvider, sr as normalizeStringEntriesLower, t as buildAllowedModelSet, ta as runTasksWithConcurrency, ti as channelTargetSchema, tn as listPluginCommands, tr as normalizeChannelId$1, tt as ASSISTANT_IDENTITY_COLORS, u as resolveConfiguredModelRef, ua as markAuthProfileGood, ui as listBufferedPluginTaskPasses, un as StorageReadAccessError, ur as resolveSlackAppToken, vi as parseConfigPath, vn as getConfiguredSessionStorageRuntime, vr as formatCliCommand, vt as isAvatarHttpUrl, w as buildAssistantMessage, wa as splitTrailingAuthProfile, wi as normalizeTrustedSafeBinDirs, wn as recordSessionMetaFromInbound, wr as normalizeDiscordToken, wt as loadPluginManifestRegistry, x as retryAsync, xa as hasConfiguredSecretInput, xi as getTrustedSafeBinDirs, xn as loadSessionStoreFromDisk, xr as createDiscordActionGate, xt as buildChannelAccountBindings, ya as normalizeSecretInput, yi as setConfigValueAtPath, yr as resolveCliName, yt as isPathWithinRoot, z as markAuthProfileUsed, zi as splitShellArgs, zn as SAFE_SESSION_ID_RE, zr as listDeliverableMessageChannels, zt as normalizeChannelId$2 } from "./model-selection-BJZFC8fA.js";
-import { a as saveJsonFile, i as loadJsonFile, r as resolveCopilotApiToken } from "./github-copilot-token-DrVydgnY.js";
-import { n as createInternalHookEvent, o as triggerInternalHook, s as parseBooleanValue$1, t as readManifestNamespace } from "./legacy-names-CRCLZarD.js";
+import { B as resolveThreadSessionKeys, C as DEFAULT_AGENT_ID, D as buildAgentMainSessionKey, F as normalizeAgentId, G as normalizeAccountId$1, H as sessionKeyAgentMatches, I as normalizeMainKey, K as normalizeOptionalAccountId, L as resolveAgentIdFromSessionKey, N as isKnownAgentMainSessionKey, P as isValidAgentId, Q as isCronSessionKey, R as resolveCanonicalIdentity, S as logWarn, T as DEVICE_SENDER_PREFIX, U as toAgentStoreSessionKey, V as sanitizeAgentId, W as DEFAULT_ACCOUNT_ID, X as getSubagentDepth, Y as WAKE_GATE_SESSION_KEY_SEGMENT, Z as isAcpSessionKey, _ as runExec, a as DEFAULT_IDENTITY_FILENAME, b as logError, et as isSubagentSessionKey, f as loadWorkspaceBootstrapFiles, g as runCommandWithTimeout, i as DEFAULT_HEARTBEAT_FILENAME, k as classifySessionKeyShape, l as ensureAgentWorkspace, m as resolveOpenClawPackageRoot, n as DEFAULT_AGENT_WORKSPACE_DIR, nt as resolveThreadParentSessionKey, r as DEFAULT_BOOTSTRAP_FILENAME, rt as stripAgentSessionKeyPrefix, tt as parseAgentSessionKey, u as filterBootstrapFilesForSession, v as spawnWithFallback, x as logInfo, y as logDebug, z as resolveConfiguredCanonicalIdentity } from "./workspace-xnzx7wEV.js";
+import { $ as normalizeScpRemoteHost, $i as parseDotPath, $n as getChannelPlugin, $t as clearPluginCommands, A as requireApiKey, Ai as DEFAULT_SAFE_BINS, An as DEFAULT_RESET_TRIGGERS, Ar as deliveryContextKey, At as resolveMemorySlotDecision, B as resolveProfilesUnavailableReason, Bi as SAFE_BIN_PROFILES, Bn as SESSION_RUN_STORE_FILE_NAME, Br as normalizeMessageChannel, Bt as normalizeChatChannelId, C as createOllamaStreamFn, Ca as resolveSecretInputRef, Ci as listWritableExplicitTrustedSafeBinDirs, Cn as readSessionUpdatedAt, Cr as resolveDiscordAccount, Ct as validateJsonSchemaValue, D as buildUsageWithNoCost, Da as DEFAULT_PROVIDER, Di as buildEnforcedShellCommand, Dn as updateSessionStore, Dr as resolveChannelGroupToolsPolicy, Dt as isBundledChannelEnabledByChannelConfig, E as buildStreamErrorAssistantMessage, Ea as DEFAULT_MODEL, Ei as analyzeShellCommand, En as updateLastRoute, Er as resolveChannelGroupRequireMention, Et as applyTestPluginDefaults, F as resolveAuthProfileOrder, Fi as isDispatchWrapperExecutable, Fn as parseSessionIndexRecordKey, Fr as isDeliverableMessageChannel, Ft as CHAT_CHANNEL_ORDER, G as readConfigFileSnapshotForWrite, Gi as mapStreamingModeToSlackLegacyDraftStreamMode, Gr as GATEWAY_CLIENT_NAMES, Hi as resolveSafeBinProfiles, Hn as resolveSessionFilePath, Hr as resolveMessageChannel, Ht as getActiveGatewayPluginRegistry, I as getSoonestCooldownExpiry, Ii as isShellWrapperExecutable, Ir as isGatewayMessageChannel, It as getChatChannelMeta, Ji as resolveSlackStreamingMode, Jn as resolveGroupSessionKey, Jr as resolveSessionLockMaxHoldFromTimeout, Jt as addRegisteredPluginApi, K as writeConfigFile, Ki as resolveDiscordPreviewStreamMode, Kn as resolveStorePath, Kr as normalizeAccountId$2, Kt as requireActivePluginRegistry, L as isProfileInCooldown, Li as unwrapKnownDispatchWrapperInvocation, Lr as isInternalMessageChannel, Lt as listChatChannels, M as resolveEnvApiKey, Mi as resolveAllowlistCandidatePath, Mn as resolveFreshSessionTotalTokens, Mr as normalizeDeliveryContext, Mt as isPathInside, N as resolveModelAuthMode, Ni as resolveCommandResolutionFromArgv, Nn as setSessionRuntimeModel, Nr as normalizeSessionDeliveryFields, Nt as safeStatSync, O as getApiKeyForModel, Oi as isWindowsPlatform, On as updateSessionStoreEntry, Or as resolveAccountEntry, Ot as normalizePluginsConfig, Pi as extractShellWrapperInlineCommand, Pn as parseDurationMs, Pr as INTERNAL_MESSAGE_CHANNEL, Q as resolveIMessageRemoteAttachmentRoots, Qi as isRecord$2, Qn as normalizeSignalMessagingTarget, Qt as buildPluginHealthReport, R as markAuthProfileFailure, Ri as unwrapKnownShellMultiplexerInvocation, Rr as isMarkdownCapableMessageChannel, Rt as normalizeAnyChannelId, S as OLLAMA_NATIVE_BASE_URL, Sa as normalizeResolvedSecretInputString, Si as isTrustedSafeBinPath, Sn as prepareConfiguredSessionStorageRuntimeActivation, Sr as listEnabledDiscordAccounts, T as buildAssistantMessageWithZeroUsage, Ta as DEFAULT_CONTEXT_TOKENS, Ti as validateSafeBinArgv, Tn as refreshConfiguredSessionBindingEntry, Tr as resolveChannelGroupPolicy, Tt as BUNDLED_ENABLED_BY_DEFAULT, U as loadConfig, Ui as applyMergePatch, Un as resolveSessionFilePathOptions, Ur as GATEWAY_CLIENT_IDS, Ut as getActivePluginRegistry, V as resolveApiKeyForProfile, Vi as normalizeSafeBinProfileFixtures, Vr as resolveGatewayMessageChannel, Vt as resolveChannelConfigId, W as readConfigFileSnapshot, Wi as isSafeExecutableValue, Wn as resolveSessionTranscriptPath, Wr as GATEWAY_CLIENT_MODES, Wt as getActivePluginRegistryKey, Xi as describeUnknownError$1, Xn as getChannelDock, Xr as readTaskWorkStates, Xt as createPluginRegistry, Y as isInboundPathAllowed, Yi as resolveSecretRefValues, Yn as resolveParentSessionGroupId, Yr as CtxProjectionCorruptionError, Yt as clearRegisteredPluginApis, Z as resolveIMessageAttachmentRoots, Zi as isNonEmptyString, Zn as listChannelDocks, Zt as normalizePluginHttpPath, _a as resolveAuthProfileDisplayLabel, _i as getConfigValueAtPath, _n as commitPreparedConfiguredSessionStorageRuntimeActivation, _r as resolveWhatsAppAccount, _t as isAvatarDataUrl, a as isCliProvider, aa as resolveShellEnvFallbackTimeoutMs, ai as applyTargetToParams, an as getRegisteredSpeechProviders, ar as normalizeHyphenSlug, ba as coerceSecretRef, bi as unsetConfigValueAtPath, bn as loadSessionStore, br as resolveIMessageAccount, bt as isSupportedLocalAvatarExtension, c as normalizeProviderId, ca as dedupeProfileIds, cn as replaceSpeechProviders, cr as resolveSlackAccount, d as resolveDefaultModelForAgent, da as ensureAuthProfileStore, di as replaceBufferedPluginTaskPasses, dn as createConversationReadQuery, dr as resolveSlackBotToken, ea as secretRefKey, en as executePluginCommand, er as listChannelPlugins, et as parseNonNegativeByteSize, f as resolveModelRefFromString, fa as resolveAuthStorePathForDisplay, fi as RecoveryAdmissionError, fn as getConversationReadQuery, fr as listEnabledSignalAccounts, ga as readProcessElapsedSeconds, gi as unsetConfigOverride, gn as closeReplacedConfiguredSessionStorageRuntime, gr as hasAnyWhatsAppAuth, gt as AVATAR_MAX_BYTES, h as resolveThinkingDefault, ha as isPidAlive, hi as setConfigOverride, hn as closeConfiguredSessionStorageRuntime, hr as normalizeWhatsAppTarget, i as findNormalizedProviderValue, ia as getShellPathFromLoginShell, ii as stringEnum, in as BUILTIN_TTS_PROVIDER_IDS, ir as normalizeAtHashSlug, ji as matchAllowlist, jn as mergeSessionEntry, jr as mergeDeliveryContext, jt as discoverOpenClawPlugins, k as getCustomProviderApiKey, ki as splitCommandChain, kr as deliveryContextFromSession, kt as resolveEffectiveEnableState, l as parseModelRef, la as listProfilesForProvider, li as discardBufferedPluginTaskPasses, ln as normalizeProviderId$1, lr as resolveSlackReplyToMode, m as resolveSubagentSpawnModelSelection, ma as withFileLock$1, mi as resetConfigOverrides, mn as requireSessionStorageRuntime, mr as isWhatsAppGroupJid, n as buildConfiguredAllowlistKeys, na as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, ni as channelTargetsSchema, nn as matchPluginCommand, nr as formatAllowlistMatchMeta, nt as resolveExecPolicyPreset, o as modelKey, oa as isTruthyEnvValue, oi as actionHasTarget, on as getSpeechProvider, or as normalizeStringEntries, p as resolveReasoningDefault, pa as resolveOpenClawAgentDir, pi as getConfigOverrides, pr as resolveSignalAccount, q as validateConfigObjectWithPlugins, qi as resolveSlackNativeStreaming, qn as deriveSessionMetaPatch, qr as acquireSessionWriteLock, qt as setActivePluginRegistry, r as buildModelAliasIndex, ra as VERSION, ri as optionalStringEnum, rn as registerPluginCommand, rr as resolveAllowlistMatchByCandidates, s as normalizeModelRef$2, sa as resolveOwnerDisplaySetting, si as actionRequiresTarget, sn as isBuiltinTtsProvider, sr as normalizeStringEntriesLower, t as buildAllowedModelSet, ta as runTasksWithConcurrency, ti as channelTargetSchema, tn as listPluginCommands, tr as normalizeChannelId$1, tt as ASSISTANT_IDENTITY_COLORS, u as resolveConfiguredModelRef, ua as markAuthProfileGood, ui as listBufferedPluginTaskPasses, un as StorageReadAccessError, ur as resolveSlackAppToken, vi as parseConfigPath, vn as getConfiguredSessionStorageRuntime, vr as formatCliCommand, vt as isAvatarHttpUrl, w as buildAssistantMessage, wa as splitTrailingAuthProfile, wi as normalizeTrustedSafeBinDirs, wn as recordSessionMetaFromInbound, wr as normalizeDiscordToken, wt as loadPluginManifestRegistry, x as retryAsync, xa as hasConfiguredSecretInput, xi as getTrustedSafeBinDirs, xn as loadSessionStoreFromDisk, xr as createDiscordActionGate, xt as buildChannelAccountBindings, ya as normalizeSecretInput, yi as setConfigValueAtPath, yr as resolveCliName, yt as isPathWithinRoot, z as markAuthProfileUsed, zi as splitShellArgs, zn as SAFE_SESSION_ID_RE, zr as listDeliverableMessageChannels, zt as normalizeChannelId$2 } from "./model-selection-B7FYf8Fo.js";
+import { a as saveJsonFile, i as loadJsonFile, r as resolveCopilotApiToken } from "./github-copilot-token-BJeEWDJb.js";
+import { n as createInternalHookEvent, o as triggerInternalHook, s as parseBooleanValue$1, t as readManifestNamespace } from "./legacy-names-D7ywm6_7.js";
 import { n as resolveConversationLabel, r as normalizeChatType } from "./conversation-label-Ckfze_uK.js";
-import { a as createSlackWebClient, c as validateSlackBlocksArray, d as resolveSlackChannelId, i as normalizeSlackOutboundText, l as buildSlackBlocksFallbackText, o as resolveSlackWebClientOptions, s as parseSlackBlocksInput, t as sendMessageSlack, u as parseSlackTarget } from "./send-D1aXT71a.js";
-import { $ as setChannelPermissionDiscord, A as readMessagesDiscord, At as buildChannelKeyCandidates, B as kickMemberDiscord, C as createThreadDiscord, Ct as shouldEmitDiscordReactionNotification, D as listPinsDiscord, Dt as resolveTimestampMs, E as fetchMessageDiscord, Et as resolveDiscordSystemLocation, F as createScheduledEventDiscord, G as listGuildEmojisDiscord, H as listScheduledEventsDiscord, I as fetchChannelInfoDiscord, J as createChannelDiscord, K as uploadEmojiDiscord, L as fetchMemberInfoDiscord, M as unpinMessageDiscord, Mt as resolveChannelEntryMatchWithFallback, N as addRoleDiscord, O as listThreadsDiscord, Ot as fetchDiscord, P as banMemberDiscord, Q as removeChannelPermissionDiscord, R as fetchRoleInfoDiscord, S as recordChannelActivity, St as resolveGroupDmAllow, T as editMessageDiscord, Tt as formatDiscordUserTag, U as removeRoleDiscord, V as listGuildChannelsDiscord, W as timeoutMemberDiscord, X as editChannelDiscord, Y as deleteChannelDiscord, Z as moveChannelDiscord, _ as sendPollDiscord, _t as resolveDiscordGuildEntry, a as removeReactionDiscord, at as createDiscordClient, b as sendWebhookMessageDiscord, bt as resolveDiscordOwnerAllowFrom, c as formatDiscordComponentEventText, ct as parseDiscordTarget, d as parseDiscordModalCustomId, dt as listDiscordDirectoryPeersLive, et as stripUndefinedFields, f as parseDiscordModalCustomIdForCarbon, ft as isDiscordGroupAllowedByPolicy, g as sendMessageDiscord, gt as resolveDiscordChannelConfigWithFallback, h as resolveDiscordModalEntry, ht as resolveDiscordAllowListMatch, i as removeOwnReactionsDiscord, it as normalizePollInput, j as searchMessagesDiscord, jt as normalizeChannelSlug, k as pinMessageDiscord, kt as applyChannelMatchMeta, l as parseDiscordComponentCustomId, lt as resolveDiscordChannelId, m as resolveDiscordComponentEntry, mt as normalizeDiscordSlug, n as fetchReactionsDiscord, nt as hasAnyGuildPermissionDiscord, o as sendDiscordComponentMessage, ot as createDiscordRestClient, p as readDiscordComponentSpec, pt as normalizeDiscordAllowList, q as uploadStickerDiscord, r as reactMessageDiscord, rt as chunkDiscordTextWithMode, s as createDiscordFormModal, st as createDiscordRetryRunner, tt as fetchChannelPermissionsDiscord, u as parseDiscordComponentCustomIdForCarbon, ut as listDiscordDirectoryGroupsLive, v as sendStickerDiscord, vt as resolveDiscordMemberAccessState, w as deleteMessageDiscord, wt as formatDiscordReactionEmoji, x as getChannelActivity, xt as resolveDiscordShouldRequireMention, y as sendVoiceMessageDiscord, yt as resolveDiscordOwnerAccess, z as fetchVoiceStatusDiscord } from "./send-lY0a6iA2.js";
-import { a as stripSilentToken, i as isSilentReplyText, n as SILENT_REPLY_TOKEN, r as isSilentReplyPrefixText, t as HEARTBEAT_TOKEN } from "./tokens-Q7TMdIpT.js";
-import { $ as stripMessageCarriers, A as resolveChannelResetConfig, At as INPUT_PROVENANCE_KIND_VALUES, B as openDbSessionManager, Bt as resolveProviderPromptCacheKey, C as deriveSessionTotalTokens, Ct as openRawToolResultStash, D as SESSION_RUN_STATUSES, Dt as stripToolResultDetails, E as normalizeUsage, Et as sanitizeToolUseResultPairing, F as resolveAgentMainSessionKey, Ft as initializeGlobalHookRunner, G as sha256, H as drainPendingPrimaryWrites, Ht as createCurrentUserPromptEnvelope, I as resolveExplicitAgentSessionKey, It as hasHookForPlugin, J as renderInboundUserContext, K as buildInboundMetaSystemPrompt, L as resolveMainSessionKey, Lt as promptBuildResultToContribution, M as resolveSessionResetType, Mt as normalizeInputProvenance, N as resolveThreadFlag, Nt as getGlobalHookRunner, O as resolveSessionKey, Ot as canonicalToolCallIdBase, P as canonicalizeMainSessionAlias, Pt as getGlobalPluginRegistry, Q as messageTime, R as isPrimarySessionTranscriptFileName, Rt as buildPluginRuntimeIdentity, S as derivePromptTokens, St as guardSessionManager, T as makeZeroUsageSnapshot, Tt as sanitizeToolCallInputs, U as extractLegacyTranscriptEntryFields, Ut as mergePromptContributions, V as runSerializedBySession, Vt as resolveProviderRuntimeIdentity, W as sanitizeJsonb, Wt as toJsonValue$1, X as getMessageIngress, Y as attachMessageIngress, Z as isRepresentableEpochMs, _ as inferLegacyName, _t as createMessageCharEstimateCache, a as resolveMirroredTranscriptText, at as eventOrder, b as resolveDefaultCronStaggerMs, bt as getToolResultText$1, c as createSessionStorageRuntimeFromConfig, ct as capToolResultContent, d as TASK_RUN_MODES, dt as PREEMPTIVE_TOOL_RESULT_COMPACTION_PLACEHOLDER, et as formatMessageStamp, f as TASK_RUN_STATUSES, ft as TOOL_RESULT_TEXT_WEIGHT, g as CREATE_CTX_STORAGE_OWNER_SQL, gt as TOOL_RESULT_CHARS_PER_TOKEN_ESTIMATE, h as sanitizeAppendEntry, ht as CHARS_PER_TOKEN_ESTIMATE$2, i as appendAssistantMessageToSessionTranscript, it as DB_SESSION_HYDRATION_LIMIT, j as resolveSessionResetPolicy, jt as hasInterSessionUserProvenance, k as evaluateSessionFreshness, kt as sanitizeToolCallIdsForCloudCodeAssist, l as resolveSessionStorageConfig, lt as HARD_MAX_TOOL_RESULT_CHARS, m as deriveLegacyActorIdentity, mt as truncateToolResultToChars, n as parseSessionThreadInfo, nt as resolveTimezone, o as parseInlineDirectives$1, ot as pickLeaf, p as buildEqualityProjection, pt as truncateTextHeadTail, q as collectInboundUserContext, r as resolveAndPersistSessionFile, rt as resolveSenderLabel, s as attachPgPoolErrorListeners, st as HIDDEN_HEARTBEAT_CUSTOM_TYPE, t as extractDeliveryInfo, tt as formatZonedTimestamp, u as validateCtxStorage, ut as sessionLikelyHasOversizedToolResults, v as normalizeHttpWebhookUrl, vt as estimateContextChars$1, w as hasNonzeroUsage, wt as repairToolUseResultPairing, x as parseAbsoluteTimeMs, xt as isToolResultMessage, y as normalizeCronStaggerMs, yt as estimateMessageCharsCached, z as isSessionArchiveArtifactName, zt as buildPluginTurnIdentity } from "./sessions-B6iaKddN.js";
+import { a as createSlackWebClient, c as validateSlackBlocksArray, d as resolveSlackChannelId, i as normalizeSlackOutboundText, l as buildSlackBlocksFallbackText, o as resolveSlackWebClientOptions, s as parseSlackBlocksInput, t as sendMessageSlack, u as parseSlackTarget } from "./send-bmlVFiBl.js";
+import { $ as setChannelPermissionDiscord, A as readMessagesDiscord, At as buildChannelKeyCandidates, B as kickMemberDiscord, C as createThreadDiscord, Ct as shouldEmitDiscordReactionNotification, D as listPinsDiscord, Dt as resolveTimestampMs, E as fetchMessageDiscord, Et as resolveDiscordSystemLocation, F as createScheduledEventDiscord, G as listGuildEmojisDiscord, H as listScheduledEventsDiscord, I as fetchChannelInfoDiscord, J as createChannelDiscord, K as uploadEmojiDiscord, L as fetchMemberInfoDiscord, M as unpinMessageDiscord, Mt as resolveChannelEntryMatchWithFallback, N as addRoleDiscord, O as listThreadsDiscord, Ot as fetchDiscord, P as banMemberDiscord, Q as removeChannelPermissionDiscord, R as fetchRoleInfoDiscord, S as recordChannelActivity, St as resolveGroupDmAllow, T as editMessageDiscord, Tt as formatDiscordUserTag, U as removeRoleDiscord, V as listGuildChannelsDiscord, W as timeoutMemberDiscord, X as editChannelDiscord, Y as deleteChannelDiscord, Z as moveChannelDiscord, _ as sendPollDiscord, _t as resolveDiscordGuildEntry, a as removeReactionDiscord, at as createDiscordClient, b as sendWebhookMessageDiscord, bt as resolveDiscordOwnerAllowFrom, c as formatDiscordComponentEventText, ct as parseDiscordTarget, d as parseDiscordModalCustomId, dt as listDiscordDirectoryPeersLive, et as stripUndefinedFields, f as parseDiscordModalCustomIdForCarbon, ft as isDiscordGroupAllowedByPolicy, g as sendMessageDiscord, gt as resolveDiscordChannelConfigWithFallback, h as resolveDiscordModalEntry, ht as resolveDiscordAllowListMatch, i as removeOwnReactionsDiscord, it as normalizePollInput, j as searchMessagesDiscord, jt as normalizeChannelSlug, k as pinMessageDiscord, kt as applyChannelMatchMeta, l as parseDiscordComponentCustomId, lt as resolveDiscordChannelId, m as resolveDiscordComponentEntry, mt as normalizeDiscordSlug, n as fetchReactionsDiscord, nt as hasAnyGuildPermissionDiscord, o as sendDiscordComponentMessage, ot as createDiscordRestClient, p as readDiscordComponentSpec, pt as normalizeDiscordAllowList, q as uploadStickerDiscord, r as reactMessageDiscord, rt as chunkDiscordTextWithMode, s as createDiscordFormModal, st as createDiscordRetryRunner, tt as fetchChannelPermissionsDiscord, u as parseDiscordComponentCustomIdForCarbon, ut as listDiscordDirectoryGroupsLive, v as sendStickerDiscord, vt as resolveDiscordMemberAccessState, w as deleteMessageDiscord, wt as formatDiscordReactionEmoji, x as getChannelActivity, xt as resolveDiscordShouldRequireMention, y as sendVoiceMessageDiscord, yt as resolveDiscordOwnerAccess, z as fetchVoiceStatusDiscord } from "./send-4WdiWuFu.js";
+import { a as stripSilentToken, i as isSilentReplyText, n as SILENT_REPLY_TOKEN, r as isSilentReplyPrefixText, t as HEARTBEAT_TOKEN } from "./tokens-C2ll8wSq.js";
+import { $ as stripMessageCarriers, A as resolveChannelResetConfig, At as INPUT_PROVENANCE_KIND_VALUES, B as openDbSessionManager, Bt as resolveProviderPromptCacheKey, C as deriveSessionTotalTokens, Ct as openRawToolResultStash, D as SESSION_RUN_STATUSES, Dt as stripToolResultDetails, E as normalizeUsage, Et as sanitizeToolUseResultPairing, F as resolveAgentMainSessionKey, Ft as initializeGlobalHookRunner, G as sha256, H as drainPendingPrimaryWrites, Ht as createCurrentUserPromptEnvelope, I as resolveExplicitAgentSessionKey, It as hasHookForPlugin, J as renderInboundUserContext, K as buildInboundMetaSystemPrompt, L as resolveMainSessionKey, Lt as promptBuildResultToContribution, M as resolveSessionResetType, Mt as normalizeInputProvenance, N as resolveThreadFlag, Nt as getGlobalHookRunner, O as resolveSessionKey, Ot as canonicalToolCallIdBase, P as canonicalizeMainSessionAlias, Pt as getGlobalPluginRegistry, Q as messageTime, R as isPrimarySessionTranscriptFileName, Rt as buildPluginRuntimeIdentity, S as derivePromptTokens, St as guardSessionManager, T as makeZeroUsageSnapshot, Tt as sanitizeToolCallInputs, U as extractLegacyTranscriptEntryFields, Ut as mergePromptContributions, V as runSerializedBySession, Vt as resolveProviderRuntimeIdentity, W as sanitizeJsonb, Wt as toJsonValue$1, X as getMessageIngress, Y as attachMessageIngress, Z as isRepresentableEpochMs, _ as inferLegacyName, _t as createMessageCharEstimateCache, a as resolveMirroredTranscriptText, at as eventOrder, b as resolveDefaultCronStaggerMs, bt as getToolResultText$1, c as createSessionStorageRuntimeFromConfig, ct as capToolResultContent, d as TASK_RUN_MODES, dt as PREEMPTIVE_TOOL_RESULT_COMPACTION_PLACEHOLDER, et as formatMessageStamp, f as TASK_RUN_STATUSES, ft as TOOL_RESULT_TEXT_WEIGHT, g as CREATE_CTX_STORAGE_OWNER_SQL, gt as TOOL_RESULT_CHARS_PER_TOKEN_ESTIMATE, h as sanitizeAppendEntry, ht as CHARS_PER_TOKEN_ESTIMATE$2, i as appendAssistantMessageToSessionTranscript, it as DB_SESSION_HYDRATION_LIMIT, j as resolveSessionResetPolicy, jt as hasInterSessionUserProvenance, k as evaluateSessionFreshness, kt as sanitizeToolCallIdsForCloudCodeAssist, l as resolveSessionStorageConfig, lt as HARD_MAX_TOOL_RESULT_CHARS, m as deriveLegacyActorIdentity, mt as truncateToolResultToChars, n as parseSessionThreadInfo, nt as resolveTimezone, o as parseInlineDirectives$1, ot as pickLeaf, p as buildEqualityProjection, pt as truncateTextHeadTail, q as collectInboundUserContext, r as resolveAndPersistSessionFile, rt as resolveSenderLabel, s as attachPgPoolErrorListeners, st as HIDDEN_HEARTBEAT_CUSTOM_TYPE, t as extractDeliveryInfo, tt as formatZonedTimestamp, u as validateCtxStorage, ut as sessionLikelyHasOversizedToolResults, v as normalizeHttpWebhookUrl, vt as estimateContextChars$1, w as hasNonzeroUsage, wt as repairToolUseResultPairing, x as parseAbsoluteTimeMs, xt as isToolResultMessage, y as normalizeCronStaggerMs, yt as estimateMessageCharsCached, z as isSessionArchiveArtifactName, zt as buildPluginTurnIdentity } from "./sessions-BjSGNjb0.js";
 import { n as isDiagnosticsEnabled, t as emitDiagnosticEvent } from "./diagnostic-events-BTSwhIfk.js";
 import { n as onSessionTranscriptUpdate } from "./transcript-events-C2lcxc6-.js";
 import { n as generateSecureUuid, t as generateSecureToken } from "./secure-random-BDA1WAvZ.js";
-import { _ as recordSystemPromptHashComparison, b as recordCommandPoll, c as logModelCallCompleted, d as logRunCompleted, f as logRunStarted, g as logToolExecutionStarted, h as logToolExecutionCompleted, l as logModelCallError, m as logToolExecutionBlocked, o as logMessageProcessed, p as logSessionStateChange, s as logMessageQueued, t as diag, u as logModelCallStarted, v as refreshRunProgress, x as resetCommandPollCount, y as boundDiagnosticContent } from "./diagnostic-8jsvSbYs.js";
+import { _ as recordSystemPromptHashComparison, b as recordCommandPoll, c as logModelCallCompleted, d as logRunCompleted, f as logRunStarted, g as logToolExecutionStarted, h as logToolExecutionCompleted, l as logModelCallError, m as logToolExecutionBlocked, o as logMessageProcessed, p as logSessionStateChange, s as logMessageQueued, t as diag, u as logModelCallStarted, v as refreshRunProgress, x as resetCommandPollCount, y as boundDiagnosticContent } from "./diagnostic-BSnQ1U_E.js";
 import { o as redactChannelCorrelation, r as getDiagnosticSessionState } from "./diagnostic-session-state-DJQj3Ka7.js";
 import { t as redactIdentifier } from "./redact-identifier-C_VCQ34e.js";
-import { i as testRegexWithBoundedInput, r as compileSafeRegex, t as redactSensitiveText } from "./redact-BkE4uRXu.js";
+import { i as testRegexWithBoundedInput, r as compileSafeRegex, t as redactSensitiveText } from "./redact-CysJDryP.js";
 import { t as CommandLane } from "./lanes-DBBnME5O.js";
-import { a as getCommandLaneSnapshots, c as isQueuedCommandCancellation, i as enqueueCommandInLane, n as clearCommandLane, o as getQueueSize, s as isGatewayDraining, t as CommandLaneAbortedError } from "./command-queue-DfL4YmGb.js";
-import { S as mediaKindFromMime, _ as isAudioFileName, a as getDefaultMediaLocalRoots, b as MAX_IMAGE_BYTES, f as resizeToJpeg, g as imageMimeFromFormat, h as getFileExtension, i as getAgentScopedMediaLocalRoots, l as getImageMetadata, m as extensionForMime, n as fetchRemoteMedia, p as detectMime, r as readResponseWithLimit, v as kindFromMime, y as normalizeMimeType$1 } from "./fetch-Ciq99DHJ.js";
-import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-PH-bhX7g.js";
-import { $ as applyOwnerOnlyToolPolicy, A as isFailoverErrorMessage, B as ensureSandboxWorkspaceForSession, C as getApiErrorPayloadFingerprint, D as isCompactionFailureError, E as isCloudCodeAssistFormatError, F as parseImageDimensionError, G as resolveBrowserConfig, H as resolveSandboxRuntimeStatus, I as parseImageSizeError, J as ensureBrowserControlAuth, K as resolveProfile, L as sanitizeUserFacingText, M as isRateLimitAssistantError, N as isRawApiErrorPayload, O as isContextOverflowError, P as isTransientHttpError, Q as resolveSandboxConfigForAgent, R as isAuthPermanentErrorMessage, S as formatRawAssistantErrorForUi, T as isBillingAssistantError, U as createBrowserRouteContext, V as resolveSandboxContext, W as registerBrowserRoutes, X as resolveGatewayCredentialsFromConfig, Y as resolveBrowserControlAuth, Z as trimToUndefined$1, _ as isGoogleModelApi, a as pickFallbackThinkingLevel, at as expandToolGroups, b as formatAssistantErrorText, c as normalizeTextForComparison, ct as listCoreToolIds, d as sanitizeToolResultImages, dt as buildBootstrapContextFiles, et as buildPluginToolGroups, f as resolveImageSanitizationLimits, ft as resolveBootstrapMaxChars, g as downgradeOpenAIReasoningBlocks, h as downgradeOpenAIFunctionCallReasoningPairs, i as validateGeminiTurns, it as stripPluginOnlyAllowlist, j as isLikelyContextOverflowError, k as isFailoverAssistantError, l as sanitizeSessionMessagesImages, lt as compileGlobPatterns, m as estimateBase64DecodedBytes, mt as sanitizeGoogleTurnOrdering, n as ensureOpenClawModelsJson, nt as expandPolicyWithPluginGroups, ot as normalizeToolName, p as canonicalizeBase64, pt as resolveBootstrapTotalMaxChars, q as getBridgeAuthForPort, r as validateAnthropicTurns, rt as mergeAlsoAllowPolicy, s as isMessagingToolDuplicateNormalized, st as resolveToolProfilePolicy, t as extractTextFromChatContent, tt as collectExplicitAllowlist, u as sanitizeImageBlocks, ut as matchesAnyGlobPattern, v as BILLING_ERROR_USER_MESSAGE, w as isAuthAssistantError, x as formatBillingErrorMessage, y as classifyFailoverReason, z as isTimeoutErrorMessage } from "./chat-content-Csm95kDY.js";
-import { A as rawDataToString, B as isSecureWebSocketUrl, C as ensureChromeExtensionRelayServer, N as DEFAULT_UPLOAD_DIR, P as resolveExistingPathsWithinRoot, U as DEFAULT_AI_SNAPSHOT_MAX_CHARS, s as resolveLsofCommandSync, z as isLoopbackHost } from "./chrome-D-DfD0Cv.js";
-import { _ as applySkillEnvOverridesFromSnapshot, a as buildWorkspaceSkillSnapshot, c as skillsSnapshotSourceDiffers, d as assertMediaNotDataUrl, f as assertSandboxPath, g as applySkillEnvOverrides, h as resolveSandboxedMediaSource, n as readJsonFile$1, o as loadWorkspaceSkillEntries, p as resolveSandboxInputPath, r as writeJsonAtomic, s as resolveSkillsPromptForRun, t as createAsyncLock } from "./json-files-CNVg1Wi5.js";
-import { t as PATH_ALIAS_POLICIES } from "./path-alias-guards-BV6CR8H3.js";
-import { i as hasErrnoCode, o as readErrorName, r as formatErrorMessage } from "./errors-muW4vMSB.js";
-import { a as readFileWithinRoot, c as writeFileWithinRoot, i as openFileWithinRoot, n as copyFileWithinRoot, r as createRootScopedReadFile, t as SafeOpenError } from "./fs-safe-CDfp5e8Q.js";
-import { a as isBlockedHostnameOrIp, l as normalizeHostname, n as SsrFBlockedError } from "./proxy-env-DXcKRnns.js";
-import { i as saveMediaBuffer, r as getMediaDir, t as MEDIA_MAX_BYTES } from "./store-BXWb__DD.js";
-import { a as bindAbortRelay, n as withStrictGuardedFetchMode, o as fetchWithTimeout, r as withTrustedEnvProxyGuardedFetchMode, s as resolveNetworkSsrFPolicy, t as fetchWithSsrFGuard } from "./fetch-guard-DaJwMbcY.js";
+import { a as getCommandLaneSnapshots, c as isQueuedCommandCancellation, i as enqueueCommandInLane, n as clearCommandLane, o as getQueueSize, s as isGatewayDraining, t as CommandLaneAbortedError } from "./command-queue-CRm1AADE.js";
+import { S as mediaKindFromMime, _ as isAudioFileName, a as getDefaultMediaLocalRoots, b as MAX_IMAGE_BYTES, f as resizeToJpeg, g as imageMimeFromFormat, h as getFileExtension, i as getAgentScopedMediaLocalRoots, l as getImageMetadata, m as extensionForMime, n as fetchRemoteMedia, p as detectMime, r as readResponseWithLimit, v as kindFromMime, y as normalizeMimeType$1 } from "./fetch-BBi5dEoV.js";
+import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-CusLASy5.js";
+import { $ as applyOwnerOnlyToolPolicy, A as isFailoverErrorMessage, B as ensureSandboxWorkspaceForSession, C as getApiErrorPayloadFingerprint, D as isCompactionFailureError, E as isCloudCodeAssistFormatError, F as parseImageDimensionError, G as resolveBrowserConfig, H as resolveSandboxRuntimeStatus, I as parseImageSizeError, J as ensureBrowserControlAuth, K as resolveProfile, L as sanitizeUserFacingText, M as isRateLimitAssistantError, N as isRawApiErrorPayload, O as isContextOverflowError, P as isTransientHttpError, Q as resolveSandboxConfigForAgent, R as isAuthPermanentErrorMessage, S as formatRawAssistantErrorForUi, T as isBillingAssistantError, U as createBrowserRouteContext, V as resolveSandboxContext, W as registerBrowserRoutes, X as resolveGatewayCredentialsFromConfig, Y as resolveBrowserControlAuth, Z as trimToUndefined$1, _ as isGoogleModelApi, a as pickFallbackThinkingLevel, at as expandToolGroups, b as formatAssistantErrorText, c as normalizeTextForComparison, ct as listCoreToolIds, d as sanitizeToolResultImages, dt as buildBootstrapContextFiles, et as buildPluginToolGroups, f as resolveImageSanitizationLimits, ft as resolveBootstrapMaxChars, g as downgradeOpenAIReasoningBlocks, h as downgradeOpenAIFunctionCallReasoningPairs, i as validateGeminiTurns, it as stripPluginOnlyAllowlist, j as isLikelyContextOverflowError, k as isFailoverAssistantError, l as sanitizeSessionMessagesImages, lt as compileGlobPatterns, m as estimateBase64DecodedBytes, mt as sanitizeGoogleTurnOrdering, n as ensureOpenClawModelsJson, nt as expandPolicyWithPluginGroups, ot as normalizeToolName, p as canonicalizeBase64, pt as resolveBootstrapTotalMaxChars, q as getBridgeAuthForPort, r as validateAnthropicTurns, rt as mergeAlsoAllowPolicy, s as isMessagingToolDuplicateNormalized, st as resolveToolProfilePolicy, t as extractTextFromChatContent, tt as collectExplicitAllowlist, u as sanitizeImageBlocks, ut as matchesAnyGlobPattern, v as BILLING_ERROR_USER_MESSAGE, w as isAuthAssistantError, x as formatBillingErrorMessage, y as classifyFailoverReason, z as isTimeoutErrorMessage } from "./chat-content-B2kNxQ3a.js";
+import { A as rawDataToString, B as isSecureWebSocketUrl, C as ensureChromeExtensionRelayServer, N as DEFAULT_UPLOAD_DIR, P as resolveExistingPathsWithinRoot, U as DEFAULT_AI_SNAPSHOT_MAX_CHARS, s as resolveLsofCommandSync, z as isLoopbackHost } from "./chrome-DgDNUC2A.js";
+import { _ as applySkillEnvOverridesFromSnapshot, a as buildWorkspaceSkillSnapshot, c as skillsSnapshotSourceDiffers, d as assertMediaNotDataUrl, f as assertSandboxPath, g as applySkillEnvOverrides, h as resolveSandboxedMediaSource, n as readJsonFile$1, o as loadWorkspaceSkillEntries, p as resolveSandboxInputPath, r as writeJsonAtomic, s as resolveSkillsPromptForRun, t as createAsyncLock } from "./json-files-CurKd8gy.js";
+import { t as PATH_ALIAS_POLICIES } from "./path-alias-guards-nWrE5acE.js";
+import { i as hasErrnoCode, o as readErrorName, r as formatErrorMessage } from "./errors-CgPgYfWg.js";
+import { a as readFileWithinRoot, c as writeFileWithinRoot, i as openFileWithinRoot, n as copyFileWithinRoot, r as createRootScopedReadFile, t as SafeOpenError } from "./fs-safe-CRbowDkj.js";
+import { a as isBlockedHostnameOrIp, l as normalizeHostname, n as SsrFBlockedError } from "./proxy-env-DrmTb0QW.js";
+import { i as saveMediaBuffer, r as getMediaDir, t as MEDIA_MAX_BYTES } from "./store-DniD8E6a.js";
+import { a as bindAbortRelay, n as withStrictGuardedFetchMode, o as fetchWithTimeout, r as withTrustedEnvProxyGuardedFetchMode, s as resolveNetworkSsrFPolicy, t as fetchWithSsrFGuard } from "./fetch-guard-BcLYPGi1.js";
 import { a as normalizeReasoningLevel, c as normalizeVerboseLevel, i as normalizeElevatedLevel, l as resolveResponseUsageMode, n as formatXHighModelHint, o as normalizeThinkLevel, s as normalizeUsageDisplay, t as formatThinkingLevels, u as supportsXHighThinking } from "./thinking-CwmtMy_H.js";
-import { A as formatReasoningMessage, B as findModelInCatalog, C as coerceImageModelConfig, D as extractAssistantThinking, E as extractAssistantText$1, F as stripMinimaxToolCallXml, H as modelSupportsVision, I as stripThinkingTagsFromText, L as formatToolSummary, M as isAssistantMessage, N as promoteThinkingTagsToBlocks, O as extractThinkingFromTaggedStream, P as stripDowngradedToolCallText, R as resolveToolDisplay, S as coerceImageAssistantText, T as resolveProviderVisionModelFromConfig, V as loadModelCatalog, _ as stripCarriedTranscriptFromBody, a as resolveMediaAttachmentLocalRoots, c as applyTemplate, d as normalizeMediaUnderstandingChatType, f as resolveMediaUnderstandingScope, i as normalizeMediaAttachments, j as inferToolMetaFromArgs, k as extractThinkingFromTaggedText, l as resolveConcurrency, n as buildProviderRegistry, o as runCapability, p as CLI_OUTPUT_MAX_BUFFER, r as createMediaAttachmentCache, s as minimaxUnderstandImage, t as runAudioTranscription, u as resolveTimeoutMs$2, v as buildRandomTempFilePath, w as decodeDataUrl, x as resolveAttachmentKind, y as registerUnhandledRejectionHandler, z as stripReasoningTagsFromText } from "./audio-transcription-runner-DXlkPfwW.js";
-import { a as resolveAgentIdentity, i as resolveAckReaction, o as resolveEffectiveMessagesConfig, r as resolveResponsePrefixTemplate, s as resolveHumanDelayConfig, t as createReplyPrefixOptions } from "./reply-prefix-BCu_i91I.js";
-import { a as chunkText, c as resolveChunkDelivery, d as resolveTextChunkLimit, f as findFenceSpanAt, i as chunkMarkdownTextWithMode, l as resolveChunkMode, m as parseFenceSpans, o as chunkTextWithMode, p as isSafeFenceBreak, r as chunkMarkdownText, t as chunkByNewline, u as resolveChunkNewlinePacking } from "./chunk-zortZzCP.js";
-import { n as resolveMarkdownTableMode } from "./markdown-tables-CmGUH7Wy.js";
-import { a as loadWebMedia, i as getDefaultLocalRoots, o as loadWebMediaRaw } from "./ir-BczXO28b.js";
-import { _ as isRestartEnabled, a as listChatCommands, c as maybeResolveTextAlias, d as resolveCommandArgChoices, f as resolveCommandArgMenu, g as isNativeCommandsExplicitlyDisabled, h as isCommandFlagEnabled, i as isCommandEnabled, l as normalizeCommandBody, m as shouldHandleTextCommands, o as listChatCommandsForConfig, p as serializeCommandArgs, r as findCommandByNativeName, s as listNativeCommandSpecsForConfig, t as buildCommandTextFromArgs, u as parseCommandArgs, v as resolveNativeCommandsEnabled, y as resolveNativeSkillsEnabled } from "./commands-registry-Vo5C1XbD.js";
-import { i as AGENT_LANE_SUBAGENT, r as AGENT_LANE_NESTED, t as startUserSessionRun } from "./user-run-recording-DNsWtMOn.js";
-import { a as getGatewayInstanceId, n as deriveSessionRunId, o as resolveSessionRunStore, r as inferSessionRunKind, t as createSessionRunRecorder } from "./recorder-CrrhLZt5.js";
-import { a as clearDelayedReleaseHold, c as mergeDelayedAgentTurn, d as WORKSPACE_LANE_DENIED_REASON, f as KeyedAsyncQueue, i as agentTurnIdempotencyKey, l as peekDelayedAgentTurn, n as getAgentTurnRuntime, o as enqueueAgentTurn, r as tryGetAgentTurnRuntime, s as isClaimableAgentTurnWorkId, u as setDelayedReleaseHold } from "./agent-turn-runner-7LQU6Fut.js";
-import { c as getSkillsSnapshotVersion, i as resolveSkillCommandInvocation, l as pruneExpiredPending, n as listSkillCommandsForAgents, o as getRemoteSkillEligibility, r as listSkillCommandsForWorkspace, s as ensureSkillsWatcher, t as listReservedChatSlashCommandNames, u as resolvePairingPaths } from "./skill-commands-BG0ravVA.js";
-import { a as toInternalMessageReceivedContext, c as toPluginMessageReceivedEvent, d as resolveOutboundSessionId, i as toInternalMessagePreprocessedContext, l as fireAndForgetHook, n as createMessageSentEmitter, o as toInternalMessageTranscribedContext, r as deriveInboundMessageHookContext, s as toPluginMessageContext, t as applyMessageSendingHook, u as buildOutboundSessionContext } from "./outbound-message-hooks-CjfNIFcN.js";
-import { A as shouldSuppressMessagingToolReplies, C as readFullTranscriptEntriesFromBackend, D as filterMessagingToolDuplicates, E as applyReplyThreading, F as normalizeChannelTargetInput, I as normalizeTargetForProvider, M as createReplyToModeFilterForChannel, N as resolveReplyToMode, O as filterMessagingToolMediaDuplicates, P as buildTargetResolverSignature, T as applyReplyTagsToPayload, _ as stripLeadingInboundMetadata, a as normalizeOutboundPayloadsForJson, b as computeBackoff, c as loadCombinedSessionStoreForGateway, d as throwIfAborted, f as loadChannelOutboundAdapter, g as extractToolCallNames, h as countToolResults, i as normalizeOutboundPayloads, j as shouldSuppressReasoningPayload, k as isRenderablePayload, l as capArrayByJsonBytes, m as splitMediaFromOutput, o as normalizeReplyPayloadsForDelivery, p as parseReplyDirectives, r as formatOutboundPayloadLog, s as stampReplyActivity, t as deliverOutboundPayloads, u as jsonUtf8Bytes, v as lookupContextTokens, w as transcriptEntriesToMessages, x as sleepWithAbort, y as resolveContextTokensForModel } from "./deliver-BKt_OVTK.js";
+import { A as formatReasoningMessage, B as findModelInCatalog, C as coerceImageModelConfig, D as extractAssistantThinking, E as extractAssistantText$1, F as stripMinimaxToolCallXml, H as modelSupportsVision, I as stripThinkingTagsFromText, L as formatToolSummary, M as isAssistantMessage, N as promoteThinkingTagsToBlocks, O as extractThinkingFromTaggedStream, P as stripDowngradedToolCallText, R as resolveToolDisplay, S as coerceImageAssistantText, T as resolveProviderVisionModelFromConfig, V as loadModelCatalog, _ as stripCarriedTranscriptFromBody, a as resolveMediaAttachmentLocalRoots, c as applyTemplate, d as normalizeMediaUnderstandingChatType, f as resolveMediaUnderstandingScope, i as normalizeMediaAttachments, j as inferToolMetaFromArgs, k as extractThinkingFromTaggedText, l as resolveConcurrency, n as buildProviderRegistry, o as runCapability, p as CLI_OUTPUT_MAX_BUFFER, r as createMediaAttachmentCache, s as minimaxUnderstandImage, t as runAudioTranscription, u as resolveTimeoutMs$2, v as buildRandomTempFilePath, w as decodeDataUrl, x as resolveAttachmentKind, y as registerUnhandledRejectionHandler, z as stripReasoningTagsFromText } from "./audio-transcription-runner-DRUTJgZh.js";
+import { a as resolveAgentIdentity, i as resolveAckReaction, o as resolveEffectiveMessagesConfig, r as resolveResponsePrefixTemplate, s as resolveHumanDelayConfig, t as createReplyPrefixOptions } from "./reply-prefix-C7r81KLS.js";
+import { a as chunkText, c as resolveChunkDelivery, d as resolveTextChunkLimit, f as findFenceSpanAt, i as chunkMarkdownTextWithMode, l as resolveChunkMode, m as parseFenceSpans, o as chunkTextWithMode, p as isSafeFenceBreak, r as chunkMarkdownText, t as chunkByNewline, u as resolveChunkNewlinePacking } from "./chunk-BRJHaAd6.js";
+import { n as resolveMarkdownTableMode } from "./markdown-tables-DfqPFbkZ.js";
+import { a as loadWebMedia, i as getDefaultLocalRoots, o as loadWebMediaRaw } from "./ir-D___VWlp.js";
+import { _ as isRestartEnabled, a as listChatCommands, c as maybeResolveTextAlias, d as resolveCommandArgChoices, f as resolveCommandArgMenu, g as isNativeCommandsExplicitlyDisabled, h as isCommandFlagEnabled, i as isCommandEnabled, l as normalizeCommandBody, m as shouldHandleTextCommands, o as listChatCommandsForConfig, p as serializeCommandArgs, r as findCommandByNativeName, s as listNativeCommandSpecsForConfig, t as buildCommandTextFromArgs, u as parseCommandArgs, v as resolveNativeCommandsEnabled, y as resolveNativeSkillsEnabled } from "./commands-registry-D3lOVOa7.js";
+import { i as AGENT_LANE_SUBAGENT, r as AGENT_LANE_NESTED, t as startUserSessionRun } from "./user-run-recording-COpooN64.js";
+import { a as getGatewayInstanceId, n as deriveSessionRunId, o as resolveSessionRunStore, r as inferSessionRunKind, t as createSessionRunRecorder } from "./recorder-B7dhxQ62.js";
+import { a as clearDelayedReleaseHold, c as mergeDelayedAgentTurn, d as WORKSPACE_LANE_DENIED_REASON, f as KeyedAsyncQueue, i as agentTurnIdempotencyKey, l as peekDelayedAgentTurn, n as getAgentTurnRuntime, o as enqueueAgentTurn, r as tryGetAgentTurnRuntime, s as isClaimableAgentTurnWorkId, u as setDelayedReleaseHold } from "./agent-turn-runner-DKwd_tAc.js";
+import { c as getSkillsSnapshotVersion, i as resolveSkillCommandInvocation, l as pruneExpiredPending, n as listSkillCommandsForAgents, o as getRemoteSkillEligibility, r as listSkillCommandsForWorkspace, s as ensureSkillsWatcher, t as listReservedChatSlashCommandNames, u as resolvePairingPaths } from "./skill-commands-CcrQquVr.js";
+import { a as toInternalMessageReceivedContext, c as toPluginMessageReceivedEvent, d as resolveOutboundSessionId, i as toInternalMessagePreprocessedContext, l as fireAndForgetHook, n as createMessageSentEmitter, o as toInternalMessageTranscribedContext, r as deriveInboundMessageHookContext, s as toPluginMessageContext, t as applyMessageSendingHook, u as buildOutboundSessionContext } from "./outbound-message-hooks-Dl2zci3u.js";
+import { A as shouldSuppressMessagingToolReplies, C as readFullTranscriptEntriesFromBackend, D as filterMessagingToolDuplicates, E as applyReplyThreading, F as normalizeChannelTargetInput, I as normalizeTargetForProvider, M as createReplyToModeFilterForChannel, N as resolveReplyToMode, O as filterMessagingToolMediaDuplicates, P as buildTargetResolverSignature, T as applyReplyTagsToPayload, _ as stripLeadingInboundMetadata, a as normalizeOutboundPayloadsForJson, b as computeBackoff, c as loadCombinedSessionStoreForGateway, d as throwIfAborted, f as loadChannelOutboundAdapter, g as extractToolCallNames, h as countToolResults, i as normalizeOutboundPayloads, j as shouldSuppressReasoningPayload, k as isRenderablePayload, l as capArrayByJsonBytes, m as splitMediaFromOutput, o as normalizeReplyPayloadsForDelivery, p as parseReplyDirectives, r as formatOutboundPayloadLog, s as stampReplyActivity, t as deliverOutboundPayloads, u as jsonUtf8Bytes, v as lookupContextTokens, w as transcriptEntriesToMessages, x as sleepWithAbort, y as resolveContextTokensForModel } from "./deliver-BoOCdGXY.js";
 import { r as normalizeInboundTextNewlines, t as finalizeInboundContext } from "./inbound-context-C5qOxoGs.js";
-import { n as wrapFetchWithAbortSignal, t as resolveFetch } from "./fetch-B9Tca1cY.js";
-import { t as convertMarkdownTables } from "./tables-CBpS5G91.js";
-import { a as resolveSignalRpcContext, c as streamSignalEvents, n as sendReadReceiptSignal, o as signalCheck, r as sendTypingSignal, s as signalRpcRequest, t as sendMessageSignal } from "./send-80rMjd6V.js";
-import { a as formatIMessageChatTarget, c as parseIMessageTarget, i as DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS, o as isAllowedIMessageSender, r as createIMessageRpcClient, s as normalizeIMessageHandle, t as sendMessageIMessage } from "./send-CFG2EYja.js";
-import { n as resolveAgentRoute, t as buildAgentSessionKey } from "./resolve-route-WUZ7lH6L.js";
-import { t as recordInboundSessionMetaSafe } from "./session-meta-BjRAI6ON.js";
-import { a as createReplyReferencePlanner, i as resolveSlackThreadTs, n as deliverReplies$2, t as createSlackReplyDeliveryPlan } from "./replies-j6q2EArA.js";
-import { n as resolveMemorySearchConfig } from "./manager-ywiQQ5nv.js";
-import { m as normalizeExtraMemoryPaths, p as listMemoryFiles } from "./query-expansion-0S2l-J2-.js";
-import { t as isQmdScopeAllowed } from "./qmd-scope-dd_YbPG-.js";
+import { n as wrapFetchWithAbortSignal, t as resolveFetch } from "./fetch-BrwJHFZR.js";
+import { t as convertMarkdownTables } from "./tables-BbmkAuhA.js";
+import { a as resolveSignalRpcContext, c as streamSignalEvents, n as sendReadReceiptSignal, o as signalCheck, r as sendTypingSignal, s as signalRpcRequest, t as sendMessageSignal } from "./send-CjR30q4U.js";
+import { a as formatIMessageChatTarget, c as parseIMessageTarget, i as DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS, o as isAllowedIMessageSender, r as createIMessageRpcClient, s as normalizeIMessageHandle, t as sendMessageIMessage } from "./send-BZv91SjC.js";
+import { n as resolveAgentRoute, t as buildAgentSessionKey } from "./resolve-route-BvD1w4_v.js";
+import { t as recordInboundSessionMetaSafe } from "./session-meta-BeqTuIFU.js";
+import { a as createReplyReferencePlanner, i as resolveSlackThreadTs, n as deliverReplies$2, t as createSlackReplyDeliveryPlan } from "./replies-CP8xbTSR.js";
+import { n as resolveMemorySearchConfig } from "./manager-yAtdyPwQ.js";
+import { m as normalizeExtraMemoryPaths, p as listMemoryFiles } from "./query-expansion-CnQI0IeV.js";
+import { t as isQmdScopeAllowed } from "./qmd-scope-D6tMcgqR.js";
 import { createRequire } from "node:module";
 import * as path$1 from "node:path";
 import path, { basename, isAbsolute, join } from "node:path";
-import fs, { existsSync, mkdirSync, mkdtempSync, promises, readFileSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import syncFs, { existsSync, mkdirSync, mkdtempSync, promises, readFileSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import os, { homedir } from "node:os";
-import json5 from "json5";
-import * as fs$2 from "node:fs/promises";
-import fs$1, { open } from "node:fs/promises";
+import JSON5 from "json5";
+import * as fs$1 from "node:fs/promises";
+import fs, { open } from "node:fs/promises";
 import { inspect, isDeepStrictEqual, promisify } from "node:util";
 import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
@@ -3212,7 +3212,7 @@ function setPromptSourceCacheEntry(key, entry) {
 }
 function readOpenFileUtf8(fd) {
 	return new Promise((resolve, reject) => {
-		fs.readFile(fd, "utf-8", (error, data) => {
+		syncFs.readFile(fd, "utf-8", (error, data) => {
 			if (error) {
 				reject(error);
 				return;
@@ -3223,7 +3223,7 @@ function readOpenFileUtf8(fd) {
 }
 function closeOpenFile(fd) {
 	return new Promise((resolve, reject) => {
-		fs.close(fd, (error) => {
+		syncFs.close(fd, (error) => {
 			if (error) {
 				reject(error);
 				return;
@@ -3632,7 +3632,7 @@ function resolveWorkspaceLane(params) {
 }
 async function pathExists(targetPath) {
 	try {
-		await fs$1.access(targetPath);
+		await fs.access(targetPath);
 		return true;
 	} catch {
 		return false;
@@ -3640,7 +3640,7 @@ async function pathExists(targetPath) {
 }
 async function getExistingPathState(targetPath) {
 	try {
-		const stats = await fs$1.lstat(targetPath);
+		const stats = await fs.lstat(targetPath);
 		if (stats.isSymbolicLink()) return "other";
 		return stats.isDirectory() ? "directory" : "other";
 	} catch {
@@ -3649,7 +3649,7 @@ async function getExistingPathState(targetPath) {
 }
 async function pathLexicallyExists(targetPath) {
 	try {
-		await fs$1.lstat(targetPath);
+		await fs.lstat(targetPath);
 		return true;
 	} catch {
 		return false;
@@ -3670,9 +3670,9 @@ async function copyIfMissing(params) {
 	if (!opened.ok) return opened.reason === "path" ? "missing-source" : "invalid";
 	let content;
 	try {
-		content = fs.readFileSync(opened.fd);
+		content = syncFs.readFileSync(opened.fd);
 	} finally {
-		fs.closeSync(opened.fd);
+		syncFs.closeSync(opened.fd);
 	}
 	try {
 		await writeFileWithinRoot({
@@ -3716,7 +3716,7 @@ async function resolveWorkspaceLaneForTurn(params) {
 	const config = resolveWorkspaceLaneConfig(params.cfg, resolution.agentId);
 	if ((config?.create ?? "on-first-message") !== "on-first-message") return resolution;
 	const existed = pathState === "directory";
-	if (!existed) await fs$1.mkdir(resolution.effectiveWorkspaceDir, { recursive: true });
+	if (!existed) await fs.mkdir(resolution.effectiveWorkspaceDir, { recursive: true });
 	for (const file of config?.copiedOnCreate ?? DEFAULT_COPIED_ON_CREATE_FILES) {
 		const decision = await copyIfMissing({
 			sourceRoot: resolution.personaWorkspaceDir,
@@ -4040,7 +4040,7 @@ async function resolveOpenClawDocsPath(params) {
 	const workspaceDir = params.workspaceDir?.trim();
 	if (workspaceDir) {
 		const workspaceDocs = path.join(workspaceDir, "docs");
-		if (fs.existsSync(workspaceDocs)) return workspaceDocs;
+		if (syncFs.existsSync(workspaceDocs)) return workspaceDocs;
 	}
 	const packageRoot = await resolveOpenClawPackageRoot({
 		cwd: params.cwd,
@@ -4049,7 +4049,7 @@ async function resolveOpenClawDocsPath(params) {
 	});
 	if (packageRoot) {
 		const packageDocs = path.join(packageRoot, "docs");
-		if (fs.existsSync(path.join(packageDocs, "docs.json"))) return packageDocs;
+		if (syncFs.existsSync(path.join(packageDocs, "docs.json"))) return packageDocs;
 	}
 	return DOCS_SITE_URL;
 }
@@ -6523,7 +6523,7 @@ async function imageResult(params) {
 	}, params.label, params.imageSanitization);
 }
 async function imageResultFromFile(params) {
-	const buf = await fs$1.readFile(params.path);
+	const buf = await fs.readFile(params.path);
 	const mimeType = await detectMime({ buffer: buf.slice(0, 256) }) ?? "image/png";
 	return await imageResult({
 		label: params.label,
@@ -7434,7 +7434,7 @@ async function resolveAgentSessionDirs(stateDir) {
 	const agentsDir = path.join(stateDir, "agents");
 	let entries = [];
 	try {
-		entries = await fs$1.readdir(agentsDir, { withFileTypes: true });
+		entries = await fs.readdir(agentsDir, { withFileTypes: true });
 	} catch (err) {
 		if (err.code === "ENOENT") return [];
 		throw err;
@@ -8896,7 +8896,7 @@ function resolveDefaultIdentityPath() {
 	return path.join(resolveStateDir(), "identity", "device.json");
 }
 function ensureDir$2(filePath) {
-	fs.mkdirSync(path.dirname(filePath), { recursive: true });
+	syncFs.mkdirSync(path.dirname(filePath), { recursive: true });
 }
 const ED25519_SPKI_PREFIX = Buffer.from("302a300506032b6570032100", "hex");
 function base64UrlEncode(buf) {
@@ -8932,8 +8932,8 @@ function generateIdentity() {
 }
 function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 	try {
-		if (fs.existsSync(filePath)) {
-			const raw = fs.readFileSync(filePath, "utf8");
+		if (syncFs.existsSync(filePath)) {
+			const raw = syncFs.readFileSync(filePath, "utf8");
 			const parsed = JSON.parse(raw);
 			if (parsed?.version === 1 && typeof parsed.deviceId === "string" && typeof parsed.publicKeyPem === "string" && typeof parsed.privateKeyPem === "string") {
 				const derivedId = fingerprintPublicKey(parsed.publicKeyPem);
@@ -8942,9 +8942,9 @@ function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 						...parsed,
 						deviceId: derivedId
 					};
-					fs.writeFileSync(filePath, `${JSON.stringify(updated, null, 2)}\n`, { mode: 384 });
+					syncFs.writeFileSync(filePath, `${JSON.stringify(updated, null, 2)}\n`, { mode: 384 });
 					try {
-						fs.chmodSync(filePath, 384);
+						syncFs.chmodSync(filePath, 384);
 					} catch {}
 					return {
 						deviceId: derivedId,
@@ -8969,9 +8969,9 @@ function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 		privateKeyPem: identity.privateKeyPem,
 		createdAtMs: Date.now()
 	};
-	fs.writeFileSync(filePath, `${JSON.stringify(stored, null, 2)}\n`, { mode: 384 });
+	syncFs.writeFileSync(filePath, `${JSON.stringify(stored, null, 2)}\n`, { mode: 384 });
 	try {
-		fs.chmodSync(filePath, 384);
+		syncFs.chmodSync(filePath, 384);
 	} catch {}
 	return identity;
 }
@@ -8994,7 +8994,7 @@ function normalizeFingerprint(input) {
 const execFileAsync = promisify(execFile);
 async function fileExists(filePath) {
 	try {
-		await fs$1.access(filePath);
+		await fs.access(filePath);
 		return true;
 	} catch {
 		return false;
@@ -9021,8 +9021,8 @@ async function generateSelfSignedCert(params) {
 		"-subj",
 		"/CN=openclaw-gateway"
 	]);
-	await fs$1.chmod(params.keyPath, 384).catch(() => {});
-	await fs$1.chmod(params.certPath, 384).catch(() => {});
+	await fs.chmod(params.keyPath, 384).catch(() => {});
+	await fs.chmod(params.certPath, 384).catch(() => {});
 	params.log?.info?.(`gateway tls: generated self-signed cert at ${shortenHomeInString(params.certPath)}`);
 }
 async function loadGatewayTlsRuntime(cfg, log) {
@@ -9060,9 +9060,9 @@ async function loadGatewayTlsRuntime(cfg, log) {
 		error: "gateway tls: cert/key missing"
 	};
 	try {
-		const cert = await fs$1.readFile(certPath, "utf8");
-		const key = await fs$1.readFile(keyPath, "utf8");
-		const ca = caPath ? await fs$1.readFile(caPath, "utf8") : void 0;
+		const cert = await fs.readFile(certPath, "utf8");
+		const key = await fs.readFile(keyPath, "utf8");
+		const ca = caPath ? await fs.readFile(caPath, "utf8") : void 0;
 		const fingerprintSha256 = normalizeFingerprint(new X509Certificate(cert).fingerprint256 ?? "");
 		if (!fingerprintSha256) return {
 			enabled: false,
@@ -9163,8 +9163,8 @@ function resolveDeviceAuthPath(env = process.env) {
 }
 function readStore(filePath) {
 	try {
-		if (!fs.existsSync(filePath)) return null;
-		const raw = fs.readFileSync(filePath, "utf8");
+		if (!syncFs.existsSync(filePath)) return null;
+		const raw = syncFs.readFileSync(filePath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (parsed?.version !== 1 || typeof parsed.deviceId !== "string") return null;
 		if (!parsed.tokens || typeof parsed.tokens !== "object") return null;
@@ -9174,10 +9174,10 @@ function readStore(filePath) {
 	}
 }
 function writeStore(filePath, store) {
-	fs.mkdirSync(path.dirname(filePath), { recursive: true });
-	fs.writeFileSync(filePath, `${JSON.stringify(store, null, 2)}\n`, { mode: 384 });
+	syncFs.mkdirSync(path.dirname(filePath), { recursive: true });
+	syncFs.writeFileSync(filePath, `${JSON.stringify(store, null, 2)}\n`, { mode: 384 });
 	try {
-		fs.chmodSync(filePath, 384);
+		syncFs.chmodSync(filePath, 384);
 	} catch {}
 }
 function loadDeviceAuthToken(params) {
@@ -13469,7 +13469,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-BKt_OVTK.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-BoOCdGXY.js").then((n) => n.n);
 		const outboundSession = buildOutboundSessionContext({
 			cfg,
 			agentId: resolvedAgentId,
@@ -15124,7 +15124,7 @@ async function sendTranscriptEcho(params) {
 	}
 	const text = formatEchoTranscript(transcript, params.format ?? DEFAULT_ECHO_TRANSCRIPT_FORMAT);
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-BKt_OVTK.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-BoOCdGXY.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg,
 			channel: normalizedChannel,
@@ -18276,7 +18276,7 @@ async function resolveDiscordUserAllowlist(params) {
 //#region src/plugin-sdk/json-store.ts
 async function readJsonFileWithFallback(filePath, fallback) {
 	try {
-		const parsed = safeParseJson(await fs.promises.readFile(filePath, "utf-8"));
+		const parsed = safeParseJson(await syncFs.promises.readFile(filePath, "utf-8"));
 		if (parsed == null) return {
 			value: fallback,
 			exists: true
@@ -18363,7 +18363,7 @@ async function readPairingRequests(filePath) {
 }
 async function ensureJsonFile(filePath, fallback) {
 	try {
-		await fs.promises.access(filePath);
+		await syncFs.promises.access(filePath);
 	} catch {
 		await writeJsonFile(filePath, fallback);
 	}
@@ -18519,7 +18519,7 @@ function resolveAllowFromReadCacheOrMissing(filePath, stat) {
 async function readAllowFromStateForPathWithExists(channel, filePath) {
 	let stat = null;
 	try {
-		stat = await fs.promises.stat(filePath);
+		stat = await syncFs.promises.stat(filePath);
 	} catch (err) {
 		if (err.code !== "ENOENT") throw err;
 	}
@@ -18562,7 +18562,7 @@ async function writeAllowFromState(filePath, allowFrom) {
 	});
 	let stat = null;
 	try {
-		stat = await fs.promises.stat(filePath);
+		stat = await syncFs.promises.stat(filePath);
 	} catch {}
 	setAllowFromReadCache(filePath, {
 		exists: true,
@@ -19852,7 +19852,7 @@ function mergeLegacyAgent(current, legacy) {
 }
 function ensureDir$1(filePath) {
 	const dir = path.dirname(filePath);
-	fs.mkdirSync(dir, { recursive: true });
+	syncFs.mkdirSync(dir, { recursive: true });
 }
 function coerceAllowlistEntries(allowlist) {
 	if (!Array.isArray(allowlist) || allowlist.length === 0) return Array.isArray(allowlist) ? allowlist : void 0;
@@ -19922,11 +19922,11 @@ function generateToken() {
 function loadExecApprovals() {
 	const filePath = resolveExecApprovalsPath();
 	try {
-		if (!fs.existsSync(filePath)) return normalizeExecApprovals({
+		if (!syncFs.existsSync(filePath)) return normalizeExecApprovals({
 			version: 1,
 			agents: {}
 		});
-		const raw = fs.readFileSync(filePath, "utf8");
+		const raw = syncFs.readFileSync(filePath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (parsed?.version !== 1) return normalizeExecApprovals({
 			version: 1,
@@ -19943,9 +19943,9 @@ function loadExecApprovals() {
 function saveExecApprovals(file) {
 	const filePath = resolveExecApprovalsPath();
 	ensureDir$1(filePath);
-	fs.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}\n`, { mode: 384 });
+	syncFs.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}\n`, { mode: 384 });
 	try {
-		fs.chmodSync(filePath, 384);
+		syncFs.chmodSync(filePath, 384);
 	} catch {}
 }
 function ensureExecApprovals() {
@@ -20511,18 +20511,18 @@ function peekSystemEventEntries(sessionKey) {
 function resolvePowerShellPath() {
 	const programFiles = process.env.ProgramFiles || process.env.PROGRAMFILES || "C:\\Program Files";
 	const pwsh7 = path.join(programFiles, "PowerShell", "7", "pwsh.exe");
-	if (fs.existsSync(pwsh7)) return pwsh7;
+	if (syncFs.existsSync(pwsh7)) return pwsh7;
 	const programW6432 = process.env.ProgramW6432;
 	if (programW6432 && programW6432 !== programFiles) {
 		const pwsh7Alt = path.join(programW6432, "PowerShell", "7", "pwsh.exe");
-		if (fs.existsSync(pwsh7Alt)) return pwsh7Alt;
+		if (syncFs.existsSync(pwsh7Alt)) return pwsh7Alt;
 	}
 	const pwshInPath = resolveShellFromPath("pwsh");
 	if (pwshInPath) return pwshInPath;
 	const systemRoot = process.env.SystemRoot || process.env.WINDIR;
 	if (systemRoot) {
 		const candidate = path.join(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
-		if (fs.existsSync(candidate)) return candidate;
+		if (syncFs.existsSync(candidate)) return candidate;
 	}
 	return "powershell.exe";
 }
@@ -20560,7 +20560,7 @@ function resolveShellFromPath(name) {
 	for (const entry of entries) {
 		const candidate = path.join(entry, name);
 		try {
-			fs.accessSync(candidate, fs.constants.X_OK);
+			syncFs.accessSync(candidate, syncFs.constants.X_OK);
 			return candidate;
 		} catch {}
 	}
@@ -21498,7 +21498,7 @@ async function resolveSandboxWorkdir(params) {
 			cwd: process.cwd(),
 			root: params.sandbox.workspaceDir
 		});
-		if (!(await fs$1.stat(resolved.resolved)).isDirectory()) throw new Error("workdir is not a directory");
+		if (!(await fs.stat(resolved.resolved)).isDirectory()) throw new Error("workdir is not a directory");
 		const relative = resolved.relative ? resolved.relative.split(path.sep).join(path.posix.sep) : "";
 		const containerWorkdir = relative ? path.posix.join(params.sandbox.containerWorkdir, relative) : params.sandbox.containerWorkdir;
 		return {
@@ -22888,13 +22888,13 @@ async function validateScriptFileForShellBleed(params) {
 			cwd: params.workdir,
 			root: params.workdir
 		});
-		stat = await fs$1.stat(absPath);
+		stat = await fs.stat(absPath);
 	} catch {
 		return;
 	}
 	if (!stat.isFile()) return;
 	if (stat.size > 512 * 1024) return;
-	const content = await fs$1.readFile(absPath, "utf-8");
+	const content = await fs.readFile(absPath, "utf-8");
 	const first = /\$[A-Z_][A-Z0-9_]{1,}/g.exec(content);
 	if (first) {
 		const idx = first.index;
@@ -24323,7 +24323,7 @@ function walkUpFrom(startDir, opts, resolveAtDir) {
 function hasGitMarker(repoRoot) {
 	const gitPath = path.join(repoRoot, ".git");
 	try {
-		const stat = fs.statSync(gitPath);
+		const stat = syncFs.statSync(gitPath);
 		return stat.isDirectory() || stat.isFile();
 	} catch {
 		return false;
@@ -24335,10 +24335,10 @@ function findGitRoot(startDir, opts = {}) {
 function resolveGitDirFromMarker(repoRoot) {
 	const gitPath = path.join(repoRoot, ".git");
 	try {
-		const stat = fs.statSync(gitPath);
+		const stat = syncFs.statSync(gitPath);
 		if (stat.isDirectory()) return gitPath;
 		if (!stat.isFile()) return null;
-		const match = fs.readFileSync(gitPath, "utf-8").match(/gitdir:\s*(.+)/i);
+		const match = syncFs.readFileSync(gitPath, "utf-8").match(/gitdir:\s*(.+)/i);
 		if (!match?.[1]) return null;
 		return path.resolve(repoRoot, match[1].trim());
 	} catch {
@@ -24405,7 +24405,7 @@ const resolveCommitHash = (options = {}) => {
 			cachedCommit = null;
 			return cachedCommit;
 		}
-		const head = fs.readFileSync(headPath, "utf-8").trim();
+		const head = syncFs.readFileSync(headPath, "utf-8").trim();
 		if (!head) {
 			cachedCommit = null;
 			return cachedCommit;
@@ -24413,7 +24413,7 @@ const resolveCommitHash = (options = {}) => {
 		if (head.startsWith("ref:")) {
 			const ref = head.replace(/^ref:\s*/i, "").trim();
 			const refPath = path.resolve(path.dirname(headPath), ref);
-			cachedCommit = formatCommit(fs.readFileSync(refPath, "utf-8").trim());
+			cachedCommit = formatCommit(syncFs.readFileSync(refPath, "utf-8").trim());
 			return cachedCommit;
 		}
 		cachedCommit = formatCommit(head);
@@ -29041,7 +29041,7 @@ function resolveRepoRoot(params) {
 	const configured = params.config?.agents?.defaults?.repoRoot?.trim();
 	if (configured) try {
 		const resolved = path.resolve(configured);
-		if (fs.statSync(resolved).isDirectory()) return resolved;
+		if (syncFs.statSync(resolved).isDirectory()) return resolved;
 	} catch {}
 	const candidates = [params.workspaceDir, params.cwd].map((value) => value?.trim()).filter(Boolean);
 	const seen = /* @__PURE__ */ new Set();
@@ -29558,7 +29558,7 @@ async function readForwardAndSort(query, sessionId) {
 //#region src/auto-reply/reply/commands-export-session.ts
 const EXPORT_HTML_DIR = path.join(path.dirname(fileURLToPath(import.meta.url)), "export-html");
 function loadTemplate(fileName) {
-	return fs.readFileSync(path.join(EXPORT_HTML_DIR, fileName), "utf-8");
+	return syncFs.readFileSync(path.join(EXPORT_HTML_DIR, fileName), "utf-8");
 }
 function generateHtml(sessionData) {
 	const template = loadTemplate("template.html");
@@ -29661,8 +29661,8 @@ async function buildExportSessionReply(params) {
 	const defaultFileName = `openclaw-session-${entry.sessionId.slice(0, 8)}-${timestamp}.html`;
 	const outputPath = args.outputPath ? path.resolve(args.outputPath.startsWith("~") ? args.outputPath.replace("~", process.env.HOME ?? "") : args.outputPath) : path.join(params.workspaceDir, defaultFileName);
 	const outputDir = path.dirname(outputPath);
-	if (!fs.existsSync(outputDir)) fs.mkdirSync(outputDir, { recursive: true });
-	fs.writeFileSync(outputPath, html, "utf-8");
+	if (!syncFs.existsSync(outputDir)) syncFs.mkdirSync(outputDir, { recursive: true });
+	syncFs.writeFileSync(outputPath, html, "utf-8");
 	const relativePath = path.relative(params.workspaceDir, outputPath);
 	return { text: [
 		"✅ Session exported!",
@@ -29837,8 +29837,8 @@ function resolveZaiApiKey() {
 	}
 	try {
 		const authPath = path.join(resolveRequiredHomeDir(process.env, os.homedir), ".pi", "agent", "auth.json");
-		if (!fs.existsSync(authPath)) return;
-		const data = JSON.parse(fs.readFileSync(authPath, "utf-8"));
+		if (!syncFs.existsSync(authPath)) return;
+		const data = JSON.parse(syncFs.readFileSync(authPath, "utf-8"));
 		return data["z-ai"]?.access || data.zai?.access;
 	} catch {
 		return;
@@ -31597,7 +31597,7 @@ function shouldPersistAnyBindingState() {
 }
 function shouldPersistBindingMutations() {
 	if (shouldPersistAnyBindingState()) return true;
-	return fs.existsSync(resolveThreadBindingsPath());
+	return syncFs.existsSync(resolveThreadBindingsPath());
 }
 function saveBindingsToDisk(params = {}) {
 	if (!params.force && !shouldPersistAnyBindingState()) return;
@@ -34204,8 +34204,8 @@ function normalizeSessionKey(value) {
 }
 function readSessionStore(storePath) {
 	try {
-		const raw = fs.readFileSync(storePath, "utf-8");
-		const parsed = json5.parse(raw);
+		const raw = syncFs.readFileSync(storePath, "utf-8");
+		const parsed = JSON5.parse(raw);
 		if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) return parsed;
 	} catch {}
 	return {};
@@ -35891,7 +35891,7 @@ async function createModelSelectionState(params) {
 		}
 	}
 	if (sessionEntry && sessionStore && sessionKey && sessionEntry.authProfileOverride) {
-		const { ensureAuthProfileStore } = await import("./model-selection-BJZFC8fA.js").then((n) => n.P);
+		const { ensureAuthProfileStore } = await import("./model-selection-B7FYf8Fo.js").then((n) => n.P);
 		const profile = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false }).profiles[sessionEntry.authProfileOverride];
 		const providerKey = normalizeProviderId(provider);
 		if (!profile || normalizeProviderId(profile.provider) !== providerKey) await clearSessionAuthProfileOverride({
@@ -39414,7 +39414,7 @@ function asBoolean(value) {
 }
 function resolveTempPathParts(opts) {
 	const tmpDir = opts.tmpDir ?? resolvePreferredOpenClawTmpDir();
-	if (!opts.tmpDir) fs.mkdirSync(tmpDir, {
+	if (!opts.tmpDir) syncFs.mkdirSync(tmpDir, {
 		recursive: true,
 		mode: 448
 	});
@@ -39500,7 +39500,7 @@ async function writeUrlToFile(filePath, url, opts) {
 		if (typeof contentLength === "number" && Number.isFinite(contentLength) && contentLength > MAX_CAMERA_URL_DOWNLOAD_BYTES) throw new Error(`writeUrlToFile: content-length ${contentLength} exceeds max ${MAX_CAMERA_URL_DOWNLOAD_BYTES}`);
 		const body = res.body;
 		if (!body) throw new Error(`failed to download ${url}: empty response body`);
-		const fileHandle = await fs$2.open(filePath, "w");
+		const fileHandle = await fs$1.open(filePath, "w");
 		let thrown;
 		try {
 			const reader = body.getReader();
@@ -39518,7 +39518,7 @@ async function writeUrlToFile(filePath, url, opts) {
 			await fileHandle.close();
 		}
 		if (thrown) {
-			await fs$2.unlink(filePath).catch(() => {});
+			await fs$1.unlink(filePath).catch(() => {});
 			throw thrown;
 		}
 	} finally {
@@ -39531,7 +39531,7 @@ async function writeUrlToFile(filePath, url, opts) {
 }
 async function writeBase64ToFile(filePath, base64) {
 	const buf = Buffer.from(base64, "base64");
-	await fs$2.writeFile(filePath, buf);
+	await fs$1.writeFile(filePath, buf);
 	return {
 		path: filePath,
 		bytes: buf.length
@@ -39616,7 +39616,7 @@ async function readJsonlFromPath(jsonlPath) {
 		if (shouldLogVerbose()) logVerbose(`Blocked canvas jsonlPath outside allowed roots: ${resolved}`);
 		throw new Error("jsonlPath outside allowed roots");
 	}
-	const canonical = await fs$1.realpath(resolved).catch(() => resolved);
+	const canonical = await fs.realpath(resolved).catch(() => resolved);
 	if (!isInboundPathAllowed({
 		filePath: canonical,
 		roots
@@ -39624,7 +39624,7 @@ async function readJsonlFromPath(jsonlPath) {
 		if (shouldLogVerbose()) logVerbose(`Blocked canvas jsonlPath outside allowed roots: ${canonical}`);
 		throw new Error("jsonlPath outside allowed roots");
 	}
-	return await fs$1.readFile(canonical, "utf8");
+	return await fs.readFile(canonical, "utf8");
 }
 const CanvasToolSchema = Type.Object({
 	action: stringEnum(CANVAS_ACTIONS),
@@ -40475,12 +40475,12 @@ function resolveRestartSentinelPath(env = process.env) {
 }
 async function writeRestartSentinel(payload, env = process.env) {
 	const filePath = resolveRestartSentinelPath(env);
-	await fs$1.mkdir(path.dirname(filePath), { recursive: true });
+	await fs.mkdir(path.dirname(filePath), { recursive: true });
 	const data = {
 		version: 1,
 		payload
 	};
-	await fs$1.writeFile(filePath, `${JSON.stringify(data, null, 2)}\n`, "utf-8");
+	await fs.writeFile(filePath, `${JSON.stringify(data, null, 2)}\n`, "utf-8");
 	return filePath;
 }
 
@@ -42889,9 +42889,9 @@ function loadExternalCatalogEntries(options) {
 	const entries = [];
 	for (const rawPath of paths) {
 		const resolved = resolveUserPath(rawPath);
-		if (!fs.existsSync(resolved)) continue;
+		if (!syncFs.existsSync(resolved)) continue;
 		try {
-			const payload = JSON.parse(fs.readFileSync(resolved, "utf-8"));
+			const payload = JSON.parse(syncFs.readFileSync(resolved, "utf-8"));
 			entries.push(...parseCatalogEntries(payload));
 		} catch {}
 	}
@@ -51911,18 +51911,18 @@ function appendImagePathsToPrompt(prompt, paths) {
 	return `${trimmed}${trimmed ? "\n\n" : ""}${paths.join("\n")}`;
 }
 async function writeCliImages(images) {
-	const tempDir = await fs$1.mkdtemp(path.join(os.tmpdir(), "openclaw-cli-images-"));
+	const tempDir = await fs.mkdtemp(path.join(os.tmpdir(), "openclaw-cli-images-"));
 	const paths = [];
 	for (let i = 0; i < images.length; i += 1) {
 		const image = images[i];
 		const ext = resolveImageExtension(image.mimeType);
 		const filePath = path.join(tempDir, `image-${i + 1}.${ext}`);
 		const buffer = Buffer.from(image.data, "base64");
-		await fs$1.writeFile(filePath, buffer, { mode: 384 });
+		await fs.writeFile(filePath, buffer, { mode: 384 });
 		paths.push(filePath);
 	}
 	const cleanup = async () => {
-		await fs$1.rm(tempDir, {
+		await fs.rm(tempDir, {
 			recursive: true,
 			force: true
 		});
@@ -53822,10 +53822,10 @@ function resolveCronStorePath(storePath) {
 }
 async function loadCronStore(storePath) {
 	try {
-		const raw = await fs.promises.readFile(storePath, "utf-8");
+		const raw = await syncFs.promises.readFile(storePath, "utf-8");
 		let parsed;
 		try {
-			parsed = json5.parse(raw);
+			parsed = JSON5.parse(raw);
 		} catch (err) {
 			throw new Error(`Failed to parse cron store at ${storePath}: ${String(err)}`, { cause: err });
 		}
@@ -54392,9 +54392,9 @@ async function readPostCompactionContext(workspaceDir) {
 		if (!opened.ok) return null;
 		const sections = extractSections((() => {
 			try {
-				return fs.readFileSync(opened.fd, "utf-8");
+				return syncFs.readFileSync(opened.fd, "utf-8");
 			} finally {
-				fs.closeSync(opened.fd);
+				syncFs.closeSync(opened.fd);
 			}
 		})(), ["Session Startup", "Red Lines"]);
 		if (sections.length === 0) return null;
@@ -55642,7 +55642,7 @@ async function deliverSessionMaintenanceWarning(params) {
 		return;
 	}
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-BKt_OVTK.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-BoOCdGXY.js").then((n) => n.n);
 		const outboundSession = buildOutboundSessionContext({
 			cfg: params.cfg,
 			sessionKey: params.sessionKey
@@ -56591,7 +56591,7 @@ async function stageSandboxMedia(params) {
 	const remoteMediaCacheDir = ctx.MediaRemoteHost ? path.join(workspaceDir, ".openclaw", "media", "remote-cache", sessionKey) : null;
 	const effectiveWorkspaceDir = sandbox?.workspaceDir ?? remoteMediaCacheDir;
 	if (!effectiveWorkspaceDir) return;
-	await fs$1.mkdir(effectiveWorkspaceDir, { recursive: true });
+	await fs.mkdir(effectiveWorkspaceDir, { recursive: true });
 	const remoteAttachmentRoots = resolveIMessageRemoteAttachmentRoots({
 		cfg,
 		accountId: ctx.AccountId
@@ -56650,8 +56650,8 @@ async function stageLocalFileIntoRoot(params) {
 }
 async function stageRemoteFileIntoRoot(params) {
 	const tmpRoot = resolvePreferredOpenClawTmpDir();
-	await fs$1.mkdir(tmpRoot, { recursive: true });
-	const tmpDir = await fs$1.mkdtemp(path.join(tmpRoot, "stage-sandbox-media-"));
+	await fs.mkdir(tmpRoot, { recursive: true });
+	const tmpDir = await fs.mkdtemp(path.join(tmpRoot, "stage-sandbox-media-"));
 	const tmpPath = path.join(tmpDir, "download");
 	try {
 		await scpFile(params.remoteHost, params.remotePath, tmpPath);
@@ -56662,7 +56662,7 @@ async function stageRemoteFileIntoRoot(params) {
 			maxBytes: params.maxBytes
 		});
 	} finally {
-		await fs$1.rm(tmpDir, {
+		await fs.rm(tmpDir, {
 			recursive: true,
 			force: true
 		}).catch(() => {});
@@ -57900,7 +57900,7 @@ async function runModelGate(spec, ctx) {
 		const isolatedSessionId = randomNonce;
 		const isolatedRunId = randomNonce;
 		const tmpBaseDir = resolvePreferredOpenClawTmpDir();
-		tmpDir = await fs$1.mkdtemp(path.join(tmpBaseDir, "wake-gate-"));
+		tmpDir = await fs.mkdtemp(path.join(tmpBaseDir, "wake-gate-"));
 		const workspaceDir = tmpDir;
 		const prompt = spec.prompt ?? DEFAULT_MODEL_PROMPT;
 		const timeoutMs = spec.timeoutMs ?? DEFAULT_MODEL_TIMEOUT_MS;
@@ -57958,7 +57958,7 @@ async function runModelGate(spec, ctx) {
 		log$35.warn("model gate error", { error: err instanceof Error ? err.message : String(err) });
 		return { wake: false };
 	} finally {
-		if (tmpDir) await fs$1.rm(tmpDir, {
+		if (tmpDir) await fs.rm(tmpDir, {
 			recursive: true,
 			force: true
 		}).catch(() => void 0);
@@ -58188,7 +58188,7 @@ async function resolveHeartbeatPreflight(params) {
 	const workspaceDir = resolveAgentWorkspaceDir(params.cfg, params.agentId);
 	const heartbeatFilePath = path.join(workspaceDir, DEFAULT_HEARTBEAT_FILENAME);
 	try {
-		if (isHeartbeatContentEffectivelyEmpty(await fs$1.readFile(heartbeatFilePath, "utf-8"))) return {
+		if (isHeartbeatContentEffectivelyEmpty(await fs.readFile(heartbeatFilePath, "utf-8"))) return {
 			...basePreflight,
 			skipReason: "empty-heartbeat-file"
 		};
@@ -66765,7 +66765,7 @@ async function resolveDiscordPreflightAudioMentionContext(params) {
 	let transcript;
 	let carry;
 	if (needsPreflightTranscription) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-C9EHsVrE.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-BV83ctbI.js");
 		const uploadable = audioAttachments.filter((att) => typeof att.url === "string" && att.url.length > 0);
 		if (uploadable.length > 0) {
 			const preflight = await transcribeFirstAudio({
@@ -68226,7 +68226,7 @@ function identityHasValues(identity) {
 }
 function loadIdentityFromFile(identityPath) {
 	try {
-		const parsed = parseIdentityMarkdown(fs.readFileSync(identityPath, "utf-8"));
+		const parsed = parseIdentityMarkdown(syncFs.readFileSync(identityPath, "utf-8"));
 		if (!identityHasValues(parsed)) return null;
 		return parsed;
 	} catch {
@@ -68250,7 +68250,7 @@ function resolveAvatarSource(cfg, agentId) {
 }
 function resolveExistingPath(value) {
 	try {
-		return fs.realpathSync(value);
+		return syncFs.realpathSync(value);
 	} catch {
 		return path.resolve(value);
 	}
@@ -68268,7 +68268,7 @@ function resolveLocalAvatarPath(params) {
 		reason: "unsupported_extension"
 	};
 	try {
-		const stat = fs.statSync(realPath);
+		const stat = syncFs.statSync(realPath);
 		if (!stat.isFile()) return {
 			ok: false,
 			reason: "missing"
@@ -74035,19 +74035,19 @@ function createDefaultDeps() {
 			};
 		}),
 		sendMessageDiscord: async (...args) => {
-			const { sendMessageDiscord } = await import("./send-lY0a6iA2.js").then((n) => n.t);
+			const { sendMessageDiscord } = await import("./send-4WdiWuFu.js").then((n) => n.t);
 			return await sendMessageDiscord(...args);
 		},
 		sendMessageSlack: async (...args) => {
-			const { sendMessageSlack } = await import("./send-D1aXT71a.js").then((n) => n.n);
+			const { sendMessageSlack } = await import("./send-bmlVFiBl.js").then((n) => n.n);
 			return await sendMessageSlack(...args);
 		},
 		sendMessageSignal: async (...args) => {
-			const { sendMessageSignal } = await import("./send-80rMjd6V.js").then((n) => n.i);
+			const { sendMessageSignal } = await import("./send-CjR30q4U.js").then((n) => n.i);
 			return await sendMessageSignal(...args);
 		},
 		sendMessageIMessage: async (...args) => {
-			const { sendMessageIMessage } = await import("./send-CFG2EYja.js").then((n) => n.n);
+			const { sendMessageIMessage } = await import("./send-BZv91SjC.js").then((n) => n.n);
 			return await sendMessageIMessage(...args);
 		}
 	};
@@ -75299,10 +75299,10 @@ function estimateDurationSeconds(pcm) {
 	return pcm.length / (bytesPerSample * SAMPLE_RATE);
 }
 async function writeWavFile(pcm) {
-	const tempDir = await fs$1.mkdtemp(path.join(resolvePreferredOpenClawTmpDir(), "discord-voice-"));
+	const tempDir = await fs.mkdtemp(path.join(resolvePreferredOpenClawTmpDir(), "discord-voice-"));
 	const filePath = path.join(tempDir, `segment-${randomUUID()}.wav`);
 	const wav = buildWavBuffer(pcm);
-	await fs$1.writeFile(filePath, wav);
+	await fs.writeFile(filePath, wav);
 	scheduleTempCleanup(tempDir);
 	return {
 		path: filePath,
@@ -75311,7 +75311,7 @@ async function writeWavFile(pcm) {
 }
 function scheduleTempCleanup(tempDir, delayMs = 1800 * 1e3) {
 	setTimeout(() => {
-		fs$1.rm(tempDir, {
+		fs.rm(tempDir, {
 			recursive: true,
 			force: true
 		}).catch((err) => {
@@ -79096,7 +79096,7 @@ async function detectBinary(name) {
 	if (!isSafeExecutableValue(name)) return false;
 	const resolved = name.startsWith("~") ? resolveUserPath(name) : name;
 	if (path.isAbsolute(resolved) || resolved.startsWith(".") || resolved.includes("/") || resolved.includes("\\")) try {
-		await fs$1.access(resolved);
+		await fs.access(resolved);
 		return true;
 	} catch {
 		return false;
@@ -79760,7 +79760,7 @@ function normalizeAllowList$1(list) {
 async function detectRemoteHostFromCliPath(cliPath) {
 	try {
 		const expanded = cliPath.startsWith("~") ? cliPath.replace(/^~/, process.env.HOME ?? "") : cliPath;
-		const content = await fs$1.readFile(expanded, "utf8");
+		const content = await fs.readFile(expanded, "utf8");
 		const userHostMatch = content.match(/\bssh\b[^\n]*?\s+([a-zA-Z0-9._-]+@[a-zA-Z0-9._-]+)/);
 		if (userHostMatch) return userHostMatch[1];
 		return content.match(/\bssh\b[^\n]*?\s+([a-zA-Z][a-zA-Z0-9._-]*)\s+\S*\bimsg\b/)?.[1];
@@ -80096,7 +80096,7 @@ async function monitorIMessageProvider(opts = {}) {
 function readFileIfExists(filePath) {
 	if (!filePath) return;
 	try {
-		return fs.readFileSync(filePath, "utf-8").trim();
+		return syncFs.readFileSync(filePath, "utf-8").trim();
 	} catch {
 		return;
 	}
@@ -80759,7 +80759,7 @@ async function downloadLineMedia(messageId, channelAccessToken, maxBytes = 10 *
 		prefix: "line-media",
 		extension: getExtensionForContentType(contentType)
 	});
-	await fs.promises.writeFile(filePath, buffer);
+	await syncFs.promises.writeFile(filePath, buffer);
 	logVerbose(`line: downloaded media ${messageId} to ${filePath} (${buffer.length} bytes)`);
 	return {
 		path: filePath,
@@ -86532,7 +86532,7 @@ function readSlackExternalArgMenuToken(raw) {
 }
 let commandsRegistry;
 async function getCommandsRegistry() {
-	if (!commandsRegistry) commandsRegistry = await import("./commands-registry-Vo5C1XbD.js").then((n) => n.n);
+	if (!commandsRegistry) commandsRegistry = await import("./commands-registry-D3lOVOa7.js").then((n) => n.n);
 	return commandsRegistry;
 }
 function encodeSlackCommandArgValue(parts) {
@@ -86862,14 +86862,14 @@ async function registerSlackMonitorSlashCommands(params) {
 			const channelName = channelInfo?.name;
 			const roomLabel = channelName ? `#${channelName}` : `#${command.channel_id}`;
 			const [{ resolveAgentRoute }, { finalizeInboundContext }, { dispatchReplyWithDispatcher }] = await Promise.all([
-				import("./resolve-route-WUZ7lH6L.js").then((n) => n.r),
+				import("./resolve-route-BvD1w4_v.js").then((n) => n.r),
 				import("./inbound-context-C5qOxoGs.js").then((n) => n.n),
 				Promise.resolve().then(() => provider_dispatcher_exports)
 			]);
 			const [{ resolveConversationLabel }, { createReplyPrefixOptions }, { recordInboundSessionMetaSafe }] = await Promise.all([
 				import("./conversation-label-Ckfze_uK.js").then((n) => n.t),
-				import("./reply-prefix-BCu_i91I.js").then((n) => n.n),
-				import("./session-meta-BjRAI6ON.js").then((n) => n.n)
+				import("./reply-prefix-C7r81KLS.js").then((n) => n.n),
+				import("./session-meta-BeqTuIFU.js").then((n) => n.n)
 			]);
 			const route = resolveAgentRoute({
 				cfg,
@@ -86934,9 +86934,9 @@ async function registerSlackMonitorSlashCommands(params) {
 			});
 			const deliverSlashPayloads = async (replies) => {
 				const [{ deliverSlackSlashReplies }, { resolveChunkMode, resolveChunkNewlinePacking }, { resolveMarkdownTableMode }] = await Promise.all([
-					import("./replies-j6q2EArA.js").then((n) => n.r),
-					import("./chunk-zortZzCP.js").then((n) => n.s),
-					import("./markdown-tables-CmGUH7Wy.js").then((n) => n.t)
+					import("./replies-CP8xbTSR.js").then((n) => n.r),
+					import("./chunk-BRJHaAd6.js").then((n) => n.s),
+					import("./markdown-tables-DfqPFbkZ.js").then((n) => n.t)
 				]);
 				await deliverSlackSlashReplies({
 					replies,
@@ -86990,7 +86990,7 @@ async function registerSlackMonitorSlashCommands(params) {
 	let nativeCommands = [];
 	if (nativeEnabled) {
 		reg = await getCommandsRegistry();
-		const skillCommands = nativeSkillsEnabled ? (await import("./skill-commands-BG0ravVA.js").then((n) => n.a)).listSkillCommandsForAgents({ cfg }) : [];
+		const skillCommands = nativeSkillsEnabled ? (await import("./skill-commands-CcrQquVr.js").then((n) => n.a)).listSkillCommandsForAgents({ cfg }) : [];
 		nativeCommands = reg.listNativeCommandSpecsForConfig(cfg, {
 			skillCommands,
 			provider: "slack"
@@ -87940,7 +87940,7 @@ async function getMemorySearchManager(params) {
 			if (cached) return { manager: cached };
 		}
 		try {
-			const { QmdMemoryManager } = await import("./qmd-manager-CPPURYfg.js");
+			const { QmdMemoryManager } = await import("./qmd-manager-BYC9bX-E.js");
 			const primary = await QmdMemoryManager.create({
 				cfg: params.cfg,
 				agentId: params.agentId,
@@ -87952,7 +87952,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-ywiQQ5nv.js").then((n) => n.t);
+						const { MemoryIndexManager } = await import("./manager-yAtdyPwQ.js").then((n) => n.t);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => {
@@ -87967,7 +87967,7 @@ async function getMemorySearchManager(params) {
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-ywiQQ5nv.js").then((n) => n.t);
+		const { MemoryIndexManager } = await import("./manager-yAtdyPwQ.js").then((n) => n.t);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		return {
@@ -88317,7 +88317,7 @@ const LEGACY_ARCHIVE_DEFAULT_RETENTION_MS = 720 * 60 * 60 * 1e3;
 const log$25 = createSubsystemLogger("config/sessions/legacy-import/archive");
 /** SHA-256 over the file's bytes; null when the file is gone (ENOENT). Other errors propagate. */
 async function sourceIdentity(filePath) {
-	const handle = await fs$1.open(filePath, "r").catch((error) => {
+	const handle = await fs.open(filePath, "r").catch((error) => {
 		if (error.code === "ENOENT") return null;
 		throw error;
 	});
@@ -88370,9 +88370,9 @@ function fallbackArchiveDest(source, archiveRoot) {
 async function copyVerifiedTo(sourcePath, dest, expected) {
 	const tmp = `${dest}.tmp-${randomUUID()}`;
 	try {
-		const handle = await fs$1.open(tmp, "wx", 384);
+		const handle = await fs.open(tmp, "wx", 384);
 		try {
-			const sourceHandle = await fs$1.open(sourcePath, "r");
+			const sourceHandle = await fs.open(sourcePath, "r");
 			try {
 				const chunk = Buffer.allocUnsafe(256 * 1024);
 				let size = 0;
@@ -88389,18 +88389,18 @@ async function copyVerifiedTo(sourcePath, dest, expected) {
 		} finally {
 			await handle.close();
 		}
-		await fs$1.chmod(tmp, 384);
+		await fs.chmod(tmp, 384);
 		const copied = await identityOf(tmp);
 		if (!copied || copied.fingerprint !== expected.fingerprint) throw new Error(`legacy archive cross-device copy diverged from the imported bytes: ${dest}`);
 		try {
-			await fs$1.link(tmp, dest);
+			await fs.link(tmp, dest);
 		} catch (error) {
 			if (error.code !== "EEXIST") throw error;
 			const existing = await identityOf(dest);
 			if (!existing || existing.fingerprint !== expected.fingerprint) throw new Error(`legacy archive destination exists with different content: ${dest}`, { cause: error });
 		}
 	} finally {
-		await fs$1.rm(tmp, { force: true });
+		await fs.rm(tmp, { force: true });
 	}
 }
 /**
@@ -88416,7 +88416,7 @@ async function planLegacyArchiveDest(source, archiveRoot, expected) {
 	const resolvedRoot = path.resolve(archiveRoot);
 	const { dir, dest } = archivePathsFor(source, resolvedRoot);
 	try {
-		await fs$1.mkdir(dir, {
+		await fs.mkdir(dir, {
 			recursive: true,
 			mode: 448
 		});
@@ -88456,7 +88456,7 @@ async function archiveLegacySource(source, archiveRoot, expected) {
 */
 async function archiveLegacySourceTo(source, dest, archiveRoot, expected) {
 	const resolvedRoot = path.resolve(archiveRoot);
-	await fs$1.mkdir(path.dirname(dest), {
+	await fs.mkdir(path.dirname(dest), {
 		recursive: true,
 		mode: 448
 	});
@@ -88466,14 +88466,14 @@ async function archiveLegacySourceTo(source, dest, archiveRoot, expected) {
 	const expectedIdentity = expected ?? sourceIdentityValue;
 	if (sourceIdentityValue.fingerprint !== expectedIdentity.fingerprint) throw new Error(`legacy source changed after import; failing closed: ${source.path}`);
 	const destInodeVerified = async (destPath) => {
-		const [sourceStat, destStat] = await Promise.all([fs$1.stat(source.path), fs$1.stat(destPath).catch(() => void 0)]);
+		const [sourceStat, destStat] = await Promise.all([fs.stat(source.path), fs.stat(destPath).catch(() => void 0)]);
 		return destStat !== void 0 && destStat.dev === sourceStat.dev && destStat.ino === sourceStat.ino;
 	};
 	const moveInto = async (destPath) => {
 		let moved = false;
 		let independentArchive = false;
 		try {
-			await fs$1.link(source.path, destPath);
+			await fs.link(source.path, destPath);
 			moved = true;
 		} catch (error) {
 			const code = error.code;
@@ -88481,7 +88481,7 @@ async function archiveLegacySourceTo(source, dest, archiveRoot, expected) {
 				const existing = await identityOf(destPath);
 				if (existing && existing.fingerprint === expectedIdentity.fingerprint) {
 					moved = true;
-					const [sourceStat, destStat] = await Promise.all([fs$1.stat(source.path), fs$1.stat(destPath)]);
+					const [sourceStat, destStat] = await Promise.all([fs.stat(source.path), fs.stat(destPath)]);
 					independentArchive = sourceStat.dev !== destStat.dev || sourceStat.ino !== destStat.ino;
 				} else return {
 					moved: false,
@@ -88502,13 +88502,13 @@ async function archiveLegacySourceTo(source, dest, archiveRoot, expected) {
 	};
 	const outcome = await moveInto(dest);
 	if (outcome.divergent) throw new Error(`legacy archive destination exists with different content: ${dest}`);
-	await fs$1.chmod(dest, 384);
+	await fs.chmod(dest, 384);
 	if (!await destInodeVerified(dest)) {
 		const archived = await identityOf(dest);
 		if (!archived || archived.fingerprint !== expectedIdentity.fingerprint) throw new Error(`legacy archive verification failed: ${dest}`);
 	}
 	if (outcome.moved) if (outcome.independentArchive) await unlinkSourceIfUnchanged(source.path, expectedIdentity);
-	else await fs$1.unlink(source.path);
+	else await fs.unlink(source.path);
 	return dest;
 }
 /**
@@ -88522,12 +88522,12 @@ async function unlinkSourceIfUnchanged(sourcePath, expected) {
 	const current = await sourceIdentity(sourcePath);
 	if (!current) return;
 	if (current.fingerprint !== expected.fingerprint) throw new Error(`legacy source changed before removal; failing closed: ${sourcePath}`);
-	await fs$1.unlink(sourcePath);
+	await fs.unlink(sourcePath);
 }
 async function chmodDirs(dir, stopAt) {
 	let current = dir;
 	while (current.startsWith(stopAt) && current !== stopAt) {
-		await fs$1.chmod(current, 448).catch(() => void 0);
+		await fs.chmod(current, 448).catch(() => void 0);
 		const parent = path.dirname(current);
 		if (parent === current) return;
 		current = parent;
@@ -88556,11 +88556,11 @@ async function purgeExpiredLegacyArchives(runtime, opts) {
 			log$25.warn("skipping legacy archive outside the archive root", { sourcePath: receipt.sourcePath });
 			continue;
 		}
-		if (!await fs$1.stat(archivePath).then(() => true).catch((error) => {
+		if (!await fs.stat(archivePath).then(() => true).catch((error) => {
 			if (error.code === "ENOENT") return false;
 			throw error;
 		})) continue;
-		await fs$1.rm(archivePath, { force: true });
+		await fs.rm(archivePath, { force: true });
 		purged += 1;
 		await pruneEmptyArchiveDirs(path.dirname(archivePath), archiveRoot);
 	}
@@ -88571,12 +88571,12 @@ async function pruneEmptyArchiveDirs(dir, stopAt) {
 	while (current.startsWith(stopAt + path.sep)) {
 		let entries;
 		try {
-			entries = await fs$1.readdir(current);
+			entries = await fs.readdir(current);
 		} catch {
 			return;
 		}
 		if (entries.length > 0) return;
-		await fs$1.rmdir(current).catch(() => void 0);
+		await fs.rmdir(current).catch(() => void 0);
 		current = path.dirname(current);
 	}
 }
@@ -88859,7 +88859,7 @@ function byPath(a, b) {
 }
 function readDirents(dirPath) {
 	try {
-		return fs.readdirSync(dirPath, { withFileTypes: true });
+		return syncFs.readdirSync(dirPath, { withFileTypes: true });
 	} catch {
 		return [];
 	}
@@ -88872,7 +88872,7 @@ function isUnderQuarantine(rootDir, candidatePath) {
 }
 function statSource(filePath) {
 	try {
-		const stats = fs.statSync(filePath);
+		const stats = syncFs.statSync(filePath);
 		if (!stats.isFile()) return;
 		return {
 			mtimeMs: stats.mtimeMs,
@@ -89063,12 +89063,12 @@ async function censusLegacySources(cfg, env) {
 	for (const agentDir of readDirents(agentsRoot).filter((entry) => entry.isDirectory()).toSorted((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0)) {
 		const agentId = normalizeAgentId(agentDir.name);
 		const sessionsDir = path.join(agentsRoot, agentDir.name, LEGACY_SESSIONS_DIR_NAME);
-		if (fs.existsSync(sessionsDir)) censusAgentDir(sessionsDir, agentId);
+		if (syncFs.existsSync(sessionsDir)) censusAgentDir(sessionsDir, agentId);
 	}
 	const legacyRoot = path.join(stateDir, LEGACY_SESSIONS_DIR_NAME);
-	if (fs.existsSync(legacyRoot)) censusAgentDir(legacyRoot, defaultAgent);
+	if (syncFs.existsSync(legacyRoot)) censusAgentDir(legacyRoot, defaultAgent);
 	const recoveryDir = path.join(stateDir, RECOVERY_DIR_NAME);
-	if (fs.existsSync(recoveryDir)) censusRecoveryTree(sources, recoveryDir);
+	if (syncFs.existsSync(recoveryDir)) censusRecoveryTree(sources, recoveryDir);
 	return sources.values();
 }
 /**
@@ -89152,7 +89152,7 @@ async function admitDurableKeyMappings(registry, listKeys, opts) {
 			await opts?.clearMappingSourcePath?.(mapping.agentId, mapping.sessionId).catch(() => void 0);
 			continue;
 		}
-		const stats = await fs$1.stat(mapping.sourcePath).catch(() => void 0);
+		const stats = await fs.stat(mapping.sourcePath).catch(() => void 0);
 		if (!stats?.isFile()) continue;
 		registry.admit({
 			path: mapping.sourcePath,
@@ -89352,7 +89352,7 @@ function createLegacySourceRegistry() {
 				if (!isSettledReceipt(receipt, source.sizeBytes)) trackPendingPath(key, source);
 				return;
 			}
-			const stats = await fs$1.stat(key).catch(() => void 0);
+			const stats = await fs.stat(key).catch(() => void 0);
 			if (!stats?.isFile() && receipt.status !== "imported") return;
 			admit({
 				path: key,
@@ -89569,12 +89569,12 @@ function canonicalSqliteIdentityPathSync(sqlitePath) {
 	for (let hops = 0; hops < MAX_SYMLINK_HOPS; hops += 1) {
 		let stats;
 		try {
-			stats = fs.lstatSync(current);
+			stats = syncFs.lstatSync(current);
 		} catch {
 			return canonicalPathSync(current);
 		}
 		if (!stats.isSymbolicLink()) return canonicalPathSync(current);
-		current = path.resolve(canonicalPathSync(path.dirname(current)), fs.readlinkSync(current));
+		current = path.resolve(canonicalPathSync(path.dirname(current)), syncFs.readlinkSync(current));
 	}
 	return canonicalPathSync(sqlitePath);
 }
@@ -89588,12 +89588,12 @@ function sleep$1(ms) {
 	return new Promise((resolve) => setTimeout(resolve, ms));
 }
 function acquireKernelOwnerLock(lock) {
-	fs.mkdirSync(path.dirname(lock.lockPath), {
+	syncFs.mkdirSync(path.dirname(lock.lockPath), {
 		recursive: true,
 		mode: 448
 	});
 	try {
-		fs.closeSync(fs.openSync(lock.lockPath, "wx", 384));
+		syncFs.closeSync(syncFs.openSync(lock.lockPath, "wx", 384));
 	} catch (err) {
 		if (err.code !== "EEXIST") throw err;
 	}
@@ -89627,7 +89627,7 @@ function closeSqliteQuietly(db) {
 function releaseKernelOwnerLock(lock, db, info) {
 	try {
 		const current = readHolderSidecar(lock.sidecarPath);
-		if (current !== void 0 && current.pid === info.pid && current.startedAt === info.startedAt) fs.rmSync(lock.sidecarPath, { force: true });
+		if (current !== void 0 && current.pid === info.pid && current.startedAt === info.startedAt) syncFs.rmSync(lock.sidecarPath, { force: true });
 	} finally {
 		closeSqliteQuietly(db);
 	}
@@ -89635,17 +89635,17 @@ function releaseKernelOwnerLock(lock, db, info) {
 function writeHolderSidecar(sidecarPath, info) {
 	const temp = `${sidecarPath}.${process.pid}.tmp`;
 	try {
-		const fd = fs.openSync(temp, "w", 384);
+		const fd = syncFs.openSync(temp, "w", 384);
 		try {
-			fs.writeFileSync(fd, `${JSON.stringify(info)}\n`);
-			fs.fsyncSync(fd);
+			syncFs.writeFileSync(fd, `${JSON.stringify(info)}\n`);
+			syncFs.fsyncSync(fd);
 		} finally {
-			fs.closeSync(fd);
+			syncFs.closeSync(fd);
 		}
-		fs.renameSync(temp, sidecarPath);
+		syncFs.renameSync(temp, sidecarPath);
 	} catch (err) {
 		try {
-			fs.rmSync(temp, { force: true });
+			syncFs.rmSync(temp, { force: true });
 		} catch {}
 		throw err;
 	}
@@ -89670,7 +89670,7 @@ function parseHolderSidecar(raw) {
 function readHolderSidecar(sidecarPath) {
 	let raw;
 	try {
-		raw = fs.readFileSync(sidecarPath, "utf8");
+		raw = syncFs.readFileSync(sidecarPath, "utf8");
 	} catch {
 		return;
 	}
@@ -89681,7 +89681,7 @@ async function readHolderSidecarBriefly(sidecarPath, timeoutMs = 1e3) {
 	for (;;) {
 		let raw;
 		try {
-			raw = fs.readFileSync(sidecarPath, "utf8");
+			raw = syncFs.readFileSync(sidecarPath, "utf8");
 		} catch {
 			raw = void 0;
 		}
@@ -89845,7 +89845,7 @@ async function claimExclusivePartial(destPath) {
 	for (let attempt = 0; attempt < 3; attempt += 1) {
 		const candidate = `${destPath}.${process.pid}.${randomBytes(8).toString("hex")}.partial`;
 		try {
-			await (await fs$1.open(candidate, "wx", 384)).close();
+			await (await fs.open(candidate, "wx", 384)).close();
 			return candidate;
 		} catch (err) {
 			if (err.code !== "EEXIST") throw err;
@@ -89864,7 +89864,7 @@ async function backupSqliteSessionDatabase(params) {
 	const dbPath = path.resolve(params.dbPath);
 	const destPath = path.resolve(params.destPath);
 	for (const guarded of protectedLivePaths(dbPath)) if (sameFile$1(destPath, guarded)) throw new Error("backup destination must not be the live database or its owner lock, holder sidecar, or journal files");
-	await fs$1.mkdir(path.dirname(destPath), {
+	await fs.mkdir(path.dirname(destPath), {
 		recursive: true,
 		mode: 448
 	});
@@ -89876,14 +89876,14 @@ async function backupSqliteSessionDatabase(params) {
 			gated: sqliteBackupTestHooks.holdWorkerAtGate === true,
 			writableSource: false
 		});
-		await fs$1.rename(partialPath, destPath);
+		await fs.rename(partialPath, destPath);
 	} catch (err) {
-		await fs$1.rm(partialPath, { force: true }).catch(() => {});
+		await fs.rm(partialPath, { force: true }).catch(() => {});
 		throw err;
 	}
 	return {
 		path: destPath,
-		bytes: (await fs$1.stat(destPath)).size
+		bytes: (await fs.stat(destPath)).size
 	};
 }
 
@@ -89905,7 +89905,7 @@ const INCARNATION_SELECT_SQL = "SELECT id FROM ctx_legacy_import_incarnation LIM
 async function readDbIncarnationId(dbPath) {
 	let db;
 	try {
-		await fs$1.stat(dbPath);
+		await fs.stat(dbPath);
 		db = new DatabaseSync(dbPath);
 		const row = db.prepare(INCARNATION_SELECT_SQL).get();
 		return typeof row?.id === "string" ? row.id : void 0;
@@ -89957,7 +89957,7 @@ async function takePreImportLegacySnapshot(params) {
 	const marked = await readSnapshotMarker(backupsDir, canonicalDbPath);
 	if (marked) return marked;
 	if ((await params.listReceipts()).length > 0) return;
-	await fs$1.mkdir(backupsDir, {
+	await fs.mkdir(backupsDir, {
 		recursive: true,
 		mode: 448
 	});
@@ -89968,7 +89968,7 @@ async function takePreImportLegacySnapshot(params) {
 		dbPath,
 		destPath
 	});
-	if (dbId !== void 0) await fs$1.writeFile(path.join(backupsDir, snapshotMarkerFile(canonicalDbPath)), `${JSON.stringify({
+	if (dbId !== void 0) await fs.writeFile(path.join(backupsDir, snapshotMarkerFile(canonicalDbPath)), `${JSON.stringify({
 		path: backup.path,
 		createdAt: (/* @__PURE__ */ new Date()).toISOString(),
 		canonicalDbPath,
@@ -89986,17 +89986,17 @@ async function takePreImportLegacySnapshot(params) {
 */
 async function cleanupPartialLegacyBackups(stateDir) {
 	const backupsDir = path.join(stateDir, "backups");
-	const names = await fs$1.readdir(backupsDir).catch(() => []);
+	const names = await fs.readdir(backupsDir).catch(() => []);
 	for (const name of names) {
 		if (!name.endsWith(".partial")) continue;
-		await fs$1.rm(path.join(backupsDir, name), { force: true }).catch(() => void 0);
+		await fs.rm(path.join(backupsDir, name), { force: true }).catch(() => void 0);
 	}
 }
 async function readSnapshotMarker(backupsDir, canonicalDbPath) {
 	const currentIncarnationId = await readDbIncarnationId(canonicalDbPath);
 	const keyed = await readMarkerFile(path.join(backupsDir, snapshotMarkerFile(canonicalDbPath)), canonicalDbPath, currentIncarnationId);
 	if (keyed !== void 0) return keyed;
-	const names = await fs$1.readdir(backupsDir).catch(() => []);
+	const names = await fs.readdir(backupsDir).catch(() => []);
 	for (const name of names) {
 		if (!name.startsWith(SNAPSHOT_MARKER_PREFIX) || !name.endsWith(".json")) continue;
 		const found = await readMarkerFile(path.join(backupsDir, name), canonicalDbPath, currentIncarnationId);
@@ -90005,7 +90005,7 @@ async function readSnapshotMarker(backupsDir, canonicalDbPath) {
 	return readMarkerFile(path.join(backupsDir, SNAPSHOT_MARKER_FILE), canonicalDbPath, currentIncarnationId);
 }
 async function readMarkerFile(markerFile, canonicalDbPath, currentIncarnationId) {
-	const raw = await fs$1.readFile(markerFile, "utf8").catch(() => void 0);
+	const raw = await fs.readFile(markerFile, "utf8").catch(() => void 0);
 	if (!raw) return;
 	try {
 		const parsed = JSON.parse(raw);
@@ -90017,7 +90017,7 @@ async function readMarkerFile(markerFile, canonicalDbPath, currentIncarnationId)
 				if (currentIncarnationId !== void 0 && currentIncarnationId === markerId) return markerPath;
 				return;
 			}
-			const [markerStat, dbStat] = await Promise.all([fs$1.stat(markerDbPath).catch(() => void 0), fs$1.stat(canonicalDbPath).catch(() => void 0)]);
+			const [markerStat, dbStat] = await Promise.all([fs.stat(markerDbPath).catch(() => void 0), fs.stat(canonicalDbPath).catch(() => void 0)]);
 			if (markerStat !== void 0 && dbStat !== void 0 ? markerStat.dev === dbStat.dev && markerStat.ino === dbStat.ino : markerDbPath === canonicalDbPath) return markerPath;
 		}
 	} catch {}
@@ -90283,7 +90283,7 @@ const log$17 = createSubsystemLogger("config/sessions/legacy-import/index-import
 async function readLegacyIndexStore(storePath) {
 	let raw;
 	try {
-		raw = await fs$1.readFile(storePath, "utf8");
+		raw = await fs.readFile(storePath, "utf8");
 	} catch (error) {
 		throw new Error(`legacy index source unreadable: ${storePath}`, { cause: error });
 	}
@@ -90522,7 +90522,7 @@ async function importLegacyIndex(runtime, source, opts = {}) {
 			actorExplicit: entry.actor !== void 0
 		}), opts.signal);
 		if (transcriptPath && opts.discoveredTranscripts && path.resolve(transcriptPath) !== path.resolve(source.path)) try {
-			const stats = await fs$1.stat(transcriptPath);
+			const stats = await fs.stat(transcriptPath);
 			if (stats.isFile()) opts.discoveredTranscripts.push({
 				path: transcriptPath,
 				kind: "transcript",
@@ -90638,7 +90638,7 @@ async function loadSessionKeyOverrides(stateDir) {
 	const filePath = path.join(stateDir, "recovery", SESSION_KEY_OVERRIDES_FILENAME);
 	let raw;
 	try {
-		raw = await fs$1.readFile(filePath, "utf8");
+		raw = await fs.readFile(filePath, "utf8");
 	} catch (error) {
 		if (error.code !== "ENOENT") log$15.warn("session key overrides unreadable; ignoring", { error });
 		return /* @__PURE__ */ new Map();
@@ -92114,14 +92114,14 @@ function isGatewayArgv(args) {
 }
 function readLinuxCmdline(pid) {
 	try {
-		return parseProcCmdline(fs.readFileSync(`/proc/${pid}/cmdline`, "utf8"));
+		return parseProcCmdline(syncFs.readFileSync(`/proc/${pid}/cmdline`, "utf8"));
 	} catch {
 		return null;
 	}
 }
 function readLinuxStartTime(pid) {
 	try {
-		const raw = fs.readFileSync(`/proc/${pid}/stat`, "utf8").trim();
+		const raw = syncFs.readFileSync(`/proc/${pid}/stat`, "utf8").trim();
 		const closeParen = raw.lastIndexOf(")");
 		if (closeParen < 0) return null;
 		const fields = raw.slice(closeParen + 1).trim().split(/\s+/);
@@ -92175,7 +92175,7 @@ async function resolveGatewayOwnerStatus(pid, payload, platform, port) {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fs$1.readFile(lockPath, "utf8");
+		const raw = await fs.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number") return null;
 		if (typeof parsed.createdAt !== "string") return null;
@@ -92560,7 +92560,7 @@ async function withMemoryManagerForAgent(params) {
 }
 async function checkReadableFile(pathname) {
 	try {
-		await fs$1.access(pathname, fs.constants.R_OK);
+		await fs.access(pathname, syncFs.constants.R_OK);
 		return { exists: true };
 	} catch (err) {
 		const code = err.code;
@@ -92595,7 +92595,7 @@ async function scanMemoryFiles(workspaceDir, extraPaths = []) {
 	if (alt.issue) issues.push(alt.issue);
 	const resolvedExtraPaths = normalizeExtraMemoryPaths(workspaceDir, extraPaths);
 	for (const extraPath of resolvedExtraPaths) try {
-		if ((await fs$1.lstat(extraPath)).isSymbolicLink()) continue;
+		if ((await fs.lstat(extraPath)).isSymbolicLink()) continue;
 		const extraCheck = await checkReadableFile(extraPath);
 		if (extraCheck.issue) issues.push(extraCheck.issue);
 	} catch (err) {
@@ -92605,7 +92605,7 @@ async function scanMemoryFiles(workspaceDir, extraPaths = []) {
 	}
 	let dirReadable = null;
 	try {
-		await fs$1.access(memoryDir, fs.constants.R_OK);
+		await fs.access(memoryDir, syncFs.constants.R_OK);
 		dirReadable = true;
 	} catch (err) {
 		const code = err.code;
@@ -92653,7 +92653,7 @@ async function summarizeQmdIndexArtifact(manager) {
 	if (!dbPath) return null;
 	let stat;
 	try {
-		stat = await fs$1.stat(dbPath);
+		stat = await fs.stat(dbPath);
 	} catch (err) {
 		const code = err.code;
 		if (code === "ENOENT") throw new Error(`QMD index file not found: ${shortenHomePath(dbPath)}`, { cause: err });
@@ -93132,7 +93132,7 @@ function createPluginRuntime(options = {}) {
 			workStates: readTaskWorkStates
 		},
 		resolveLearningWorkspaceDir: (agentId) => resolveLearningWorkspaceDir(loadConfig(), agentId),
-		sessions: { startUserRun: async (params) => (await import("./user-run-recording-DNsWtMOn.js").then((n) => n.n)).startUserSessionRun(params) }
+		sessions: { startUserRun: async (params) => (await import("./user-run-recording-COpooN64.js").then((n) => n.n)).startUserSessionRun(params) }
 	};
 	Object.defineProperty(runtime, "analysis", {
 		enumerable: true,
@@ -93175,7 +93175,7 @@ const resolvePluginSdkAliasFile = (params) => {
 			const srcCandidate = path.join(cursor, "src", "plugin-sdk", params.srcFile);
 			const distCandidate = path.join(cursor, "dist", "plugin-sdk", params.distFile);
 			const orderedCandidates = isDistRuntime ? [distCandidate, srcCandidate] : isTest ? [distCandidate, srcCandidate] : [distCandidate];
-			for (const candidate of orderedCandidates) if (fs.existsSync(candidate)) return candidate;
+			for (const candidate of orderedCandidates) if (syncFs.existsSync(candidate)) return candidate;
 			const parent = path.dirname(cursor);
 			if (parent === cursor) break;
 			cursor = parent;
@@ -93728,7 +93728,7 @@ function loadOpenClawPlugins(options = {}) {
 			continue;
 		}
 		const safeSource = opened.path;
-		fs.closeSync(opened.fd);
+		syncFs.closeSync(opened.fd);
 		let mod = null;
 		try {
 			mod = getJiti()(safeSource);
@@ -93891,7 +93891,7 @@ function loadOpenClawPlugins(options = {}) {
 }
 function safeRealpathOrResolve(value) {
 	try {
-		return fs.realpathSync(value);
+		return syncFs.realpathSync(value);
 	} catch {
 		return path.resolve(value);
 	}
@@ -94049,7 +94049,7 @@ function resolvePluginWebSearchProviders(params) {
 //#endregion
 //#region src/agents/apply-patch-update.ts
 async function defaultReadFile(filePath) {
-	return fs$1.readFile(filePath, "utf8");
+	return fs.readFile(filePath, "utf8");
 }
 async function applyUpdateHunk(filePath, chunks, options) {
 	const originalLines = (await (options?.readFile ?? defaultReadFile)(filePath).catch((err) => {
@@ -94370,7 +94370,7 @@ function resolvePatchFileOps(options) {
 	const workspaceOnly = options.workspaceOnly !== false;
 	return {
 		readFile: async (filePath) => {
-			if (!workspaceOnly) return await fs$1.readFile(filePath, "utf8");
+			if (!workspaceOnly) return await fs.readFile(filePath, "utf8");
 			const opened = await openBoundaryFile({
 				absolutePath: filePath,
 				rootPath: options.cwd,
@@ -94378,14 +94378,14 @@ function resolvePatchFileOps(options) {
 			});
 			assertBoundaryRead(opened, filePath);
 			try {
-				return fs.readFileSync(opened.fd, "utf8");
+				return syncFs.readFileSync(opened.fd, "utf8");
 			} finally {
-				fs.closeSync(opened.fd);
+				syncFs.closeSync(opened.fd);
 			}
 		},
 		writeFile: async (filePath, content) => {
 			if (!workspaceOnly) {
-				await fs$1.writeFile(filePath, content, "utf8");
+				await fs.writeFile(filePath, content, "utf8");
 				return;
 			}
 			const relative = toRelativeSandboxPath(options.cwd, filePath);
@@ -94396,8 +94396,8 @@ function resolvePatchFileOps(options) {
 				encoding: "utf8"
 			});
 		},
-		remove: (filePath) => fs$1.rm(filePath),
-		mkdirp: (dir) => fs$1.mkdir(dir, { recursive: true }).then(() => {})
+		remove: (filePath) => fs.rm(filePath),
+		mkdirp: (dir) => fs.mkdir(dir, { recursive: true }).then(() => {})
 	};
 }
 async function ensureDir(filePath, ops) {
@@ -94676,7 +94676,7 @@ async function recordLoopOutcome(args) {
 	if (!args.ctx?.sessionKey) return;
 	try {
 		const { getDiagnosticSessionState } = await import("./diagnostic-session-state-DJQj3Ka7.js").then((n) => n.n);
-		const { recordToolCallOutcome } = await import("./tool-loop-detection-CVIDnpv_.js");
+		const { recordToolCallOutcome } = await import("./tool-loop-detection-B0Jj6y2H.js");
 		recordToolCallOutcome(getDiagnosticSessionState({
 			sessionKey: args.ctx.sessionKey,
 			sessionId: args.ctx?.agentId
@@ -94703,8 +94703,8 @@ async function runBeforeToolCallHook(args) {
 	const params = args.params;
 	if (args.ctx?.sessionKey) {
 		const { getDiagnosticSessionState } = await import("./diagnostic-session-state-DJQj3Ka7.js").then((n) => n.n);
-		const { logToolLoopAction } = await import("./diagnostic-8jsvSbYs.js").then((n) => n.n);
-		const { detectToolCallLoop, recordToolCall } = await import("./tool-loop-detection-CVIDnpv_.js");
+		const { logToolLoopAction } = await import("./diagnostic-BSnQ1U_E.js").then((n) => n.n);
+		const { detectToolCallLoop, recordToolCall } = await import("./tool-loop-detection-B0Jj6y2H.js");
 		const sessionState = getDiagnosticSessionState({
 			sessionKey: args.ctx.sessionKey,
 			sessionId: args.ctx?.agentId
@@ -94922,7 +94922,7 @@ function wrapHostEditToolWithPostWriteRecovery(base, root) {
 				if (!pathParam || !newText) throw err;
 				try {
 					const absolutePath = resolveHostEditPath(root, pathParam);
-					const content = await fs$1.readFile(absolutePath, "utf-8");
+					const content = await fs.readFile(absolutePath, "utf-8");
 					const hasNew = content.includes(newText);
 					const stillHasOld = oldText !== void 0 && oldText.length > 0 && content.includes(oldText);
 					if (hasNew && !stillHasOld) return {
@@ -95393,14 +95393,14 @@ function createSandboxEditOperations(params) {
 }
 async function writeHostFile(absolutePath, content) {
 	const resolved = path.resolve(absolutePath);
-	await fs$1.mkdir(path.dirname(resolved), { recursive: true });
-	await fs$1.writeFile(resolved, content, "utf-8");
+	await fs.mkdir(path.dirname(resolved), { recursive: true });
+	await fs.writeFile(resolved, content, "utf-8");
 }
 function createHostWriteOperations(root, options) {
 	if (!(options?.workspaceOnly ?? false)) return {
 		mkdir: async (dir) => {
 			const resolved = path.resolve(dir);
-			await fs$1.mkdir(resolved, { recursive: true });
+			await fs.mkdir(resolved, { recursive: true });
 		},
 		writeFile: writeHostFile
 	};
@@ -95413,7 +95413,7 @@ function createHostWriteOperations(root, options) {
 				cwd: root,
 				root
 			});
-			await fs$1.mkdir(resolved, { recursive: true });
+			await fs.mkdir(resolved, { recursive: true });
 		},
 		writeFile: async (absolutePath, content) => {
 			await writeFileWithinRoot({
@@ -95429,12 +95429,12 @@ function createHostEditOperations(root, options) {
 	if (!(options?.workspaceOnly ?? false)) return {
 		readFile: async (absolutePath) => {
 			const resolved = path.resolve(absolutePath);
-			return await fs$1.readFile(resolved);
+			return await fs.readFile(resolved);
 		},
 		writeFile: writeHostFile,
 		access: async (absolutePath) => {
 			const resolved = path.resolve(absolutePath);
-			await fs$1.access(resolved);
+			await fs.access(resolved);
 		}
 	};
 	return {
@@ -96609,9 +96609,9 @@ async function readWorkspaceContextForSummary() {
 		if (!opened.ok) return "";
 		const sections = extractSections((() => {
 			try {
-				return fs.readFileSync(opened.fd, "utf-8");
+				return syncFs.readFileSync(opened.fd, "utf-8");
 			} finally {
-				fs.closeSync(opened.fd);
+				syncFs.closeSync(opened.fd);
 			}
 		})(), ["Session Startup", "Red Lines"]);
 		if (sections.length === 0) return "";
@@ -98243,14 +98243,14 @@ async function compactEmbeddedPiSessionDirect(params) {
 		if (!apiKeyInfo.apiKey) {
 			if (apiKeyInfo.mode !== "aws-sdk") throw new Error(`No API key resolved for provider "${model.provider}" (auth mode: ${apiKeyInfo.mode}).`);
 		} else if (model.provider === "github-copilot") {
-			const { resolveCopilotApiToken } = await import("./github-copilot-token-DrVydgnY.js").then((n) => n.n);
+			const { resolveCopilotApiToken } = await import("./github-copilot-token-BJeEWDJb.js").then((n) => n.n);
 			const copilotToken = await resolveCopilotApiToken({ githubToken: apiKeyInfo.apiKey });
 			authStorage.setRuntimeApiKey(model.provider, copilotToken.token);
 		} else authStorage.setRuntimeApiKey(model.provider, apiKeyInfo.apiKey);
 	} catch (err) {
 		return fail(describeUnknownError(err));
 	}
-	await fs$1.mkdir(resolvedWorkspace, { recursive: true });
+	await fs.mkdir(resolvedWorkspace, { recursive: true });
 	const sandboxSessionKey = params.sessionKey?.trim() || params.sessionId;
 	const sandbox = await resolveSandboxContext({
 		config: params.config,
@@ -98259,7 +98259,7 @@ async function compactEmbeddedPiSessionDirect(params) {
 		workspaceLane: params.workspaceLane
 	});
 	const effectiveWorkspace = sandbox?.enabled ? sandbox.workspaceAccess === "rw" ? resolvedWorkspace : sandbox.workspaceDir : resolvedWorkspace;
-	await fs$1.mkdir(effectiveWorkspace, { recursive: true });
+	await fs.mkdir(effectiveWorkspace, { recursive: true });
 	let restoreSkillEnv;
 	const releaseWorkspaceCwd = acquireWorkspaceCwd(effectiveWorkspace);
 	try {
@@ -105275,7 +105275,7 @@ async function runEmbeddedAttempt(params) {
 	let embeddedAttemptBegun = false;
 	const runAbortController = new AbortController();
 	log$54.debug(`embedded run start: runId=${params.runId} sessionId=${params.sessionId} provider=${params.provider} model=${params.modelId} thinking=${params.thinkLevel} messageChannel=${params.messageChannel ?? params.messageProvider ?? "unknown"}`);
-	await fs$1.mkdir(resolvedWorkspace, { recursive: true });
+	await fs.mkdir(resolvedWorkspace, { recursive: true });
 	const sandboxSessionKey = params.sessionKey?.trim() || params.sessionId;
 	const toolSessionKey = params.toolSessionKey?.trim() || sandboxSessionKey;
 	const sandbox = params.skipSandbox ? null : await resolveSandboxContext({
@@ -105285,7 +105285,7 @@ async function runEmbeddedAttempt(params) {
 		workspaceLane: params.workspaceLane
 	});
 	const effectiveWorkspace = sandbox?.enabled ? sandbox.workspaceAccess === "rw" ? resolvedWorkspace : sandbox.workspaceDir : resolvedWorkspace;
-	await fs$1.mkdir(effectiveWorkspace, { recursive: true });
+	await fs.mkdir(effectiveWorkspace, { recursive: true });
 	let restoreSkillEnv;
 	const releaseWorkspaceCwd = params.skipCwdChange ? void 0 : acquireWorkspaceCwd(effectiveWorkspace);
 	const rawToolResultStash = openRawToolResultStash(params.sessionId);
@@ -106962,7 +106962,7 @@ async function runEmbeddedPiAgent(params) {
 				await copilotTokenState.refreshInFlight;
 				return;
 			}
-			const { resolveCopilotApiToken } = await import("./github-copilot-token-DrVydgnY.js").then((n) => n.n);
+			const { resolveCopilotApiToken } = await import("./github-copilot-token-BJeEWDJb.js").then((n) => n.n);
 			copilotTokenState.refreshInFlight = (async () => {
 				const githubToken = copilotTokenState.githubToken.trim();
 				if (!githubToken) throw new Error("Copilot refresh requires a GitHub token.");
@@ -107054,7 +107054,7 @@ async function runEmbeddedPiAgent(params) {
 				return;
 			}
 			if (model.provider === "github-copilot") {
-				const { resolveCopilotApiToken } = await import("./github-copilot-token-DrVydgnY.js").then((n) => n.n);
+				const { resolveCopilotApiToken } = await import("./github-copilot-token-BJeEWDJb.js").then((n) => n.n);
 				const copilotToken = await resolveCopilotApiToken({ githubToken: apiKeyInfo.apiKey });
 				authStorage.setRuntimeApiKey(model.provider, copilotToken.token);
 				if (copilotTokenState) {
@@ -107176,7 +107176,7 @@ async function runEmbeddedPiAgent(params) {
 				const copilotAuthRetry = authRetryPending;
 				authRetryPending = false;
 				attemptedThinking.add(thinkLevel);
-				await fs$1.mkdir(resolvedWorkspace, { recursive: true });
+				await fs.mkdir(resolvedWorkspace, { recursive: true });
 				const prompt = provider === "anthropic" ? scrubAnthropicRefusalMagic(params.prompt) : params.prompt;
 				const attempt = await runEmbeddedAttempt({
 					sessionId: params.sessionId,