wednesdayai 0.5.1-dev.40 → 0.5.1-dev.41

package/dist/{fs-safe-C3qJHn62.js → fs-safe-BH37Yhl8.js}

@@ -1,12 +1,12 @@
 import { v as expandHomePrefix } from "./paths-C7aURmuZ.js";
-import { $ as sameFileIdentity, at as isPathInside, it as isNotFoundPathError, ot as isSymlinkOpenError, rt as hasNodeErrorCode } from "./subsystem-BTMrlJ-R.js";
-import { M as logWarn } from "./agent-scope-BJFJ0deZ.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-B9AcbQl6.js";
+import { $ as sameFileIdentity, at as isPathInside, it as isNotFoundPathError, ot as isSymlinkOpenError, rt as hasNodeErrorCode } from "./subsystem-B9soUuXQ.js";
+import { M as logWarn } from "./agent-scope-DUbhjnHb.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-CGcezGX3.js";
 import { randomUUID } from "node:crypto";
 import { constants } from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fsp from "node:fs/promises";
 import { pipeline } from "node:stream/promises";
 
 //#region src/infra/fs-safe.ts
@@ -25,19 +25,19 @@ const ensureTrailingSep = (value) => value.endsWith(path.sep) ? value : value +
 async function expandRelativePathWithHome(relativePath) {
 	let home = process.env.HOME || process.env.USERPROFILE || os.homedir();
 	try {
-		home = await fs$1.realpath(home);
+		home = await fsp.realpath(home);
 	} catch {}
 	return expandHomePrefix(relativePath, { home });
 }
 async function openVerifiedLocalFile(filePath, options) {
 	try {
-		if ((await fs$1.lstat(filePath)).isDirectory()) throw new SafeOpenError("not-file", "not a file");
+		if ((await fsp.lstat(filePath)).isDirectory()) throw new SafeOpenError("not-file", "not a file");
 	} catch (err) {
 		if (err instanceof SafeOpenError) throw err;
 	}
 	let handle;
 	try {
-		handle = await fs$1.open(filePath, OPEN_READ_FLAGS);
+		handle = await fsp.open(filePath, OPEN_READ_FLAGS);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "file not found");
 		if (isSymlinkOpenError(err)) throw new SafeOpenError("symlink", "symlink open blocked", { cause: err });
@@ -45,13 +45,13 @@ async function openVerifiedLocalFile(filePath, options) {
 		throw err;
 	}
 	try {
-		const [stat, lstat] = await Promise.all([handle.stat(), fs$1.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([handle.stat(), fsp.lstat(filePath)]);
 		if (lstat.isSymbolicLink()) throw new SafeOpenError("symlink", "symlink not allowed");
 		if (!stat.isFile()) throw new SafeOpenError("not-file", "not a file");
 		if (options?.rejectHardlinks && stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during read");
-		const realPath = await fs$1.realpath(filePath);
-		const realStat = await fs$1.stat(realPath);
+		const realPath = await fsp.realpath(filePath);
+		const realStat = await fsp.stat(realPath);
 		if (options?.rejectHardlinks && realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		return {
@@ -69,7 +69,7 @@ async function openVerifiedLocalFile(filePath, options) {
 async function resolvePathWithinRoot(params) {
 	let rootReal;
 	try {
-		rootReal = await fs$1.realpath(params.rootDir);
+		rootReal = await fsp.realpath(params.rootDir);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "root dir not found");
 		throw err;
@@ -170,7 +170,7 @@ function buildAtomicWriteTempPath(targetPath) {
 	return path.join(dir, `.${base}.${process.pid}.${randomUUID()}.tmp`);
 }
 async function writeTempFileForAtomicReplace(params) {
-	const tempHandle = await fs$1.open(params.tempPath, OPEN_WRITE_CREATE_FLAGS, params.mode);
+	const tempHandle = await fsp.open(params.tempPath, OPEN_WRITE_CREATE_FLAGS, params.mode);
 	try {
 		if (typeof params.data === "string") await tempHandle.writeFile(params.data, params.encoding ?? "utf8");
 		else await tempHandle.writeFile(params.data);
@@ -180,7 +180,7 @@ async function writeTempFileForAtomicReplace(params) {
 	}
 }
 async function verifyAtomicWriteResult(params) {
-	const rootWithSep = ensureTrailingSep(await fs$1.realpath(params.rootDir));
+	const rootWithSep = ensureTrailingSep(await fsp.realpath(params.rootDir));
 	const opened = await openVerifiedLocalFile(params.targetPath, { rejectHardlinks: true });
 	try {
 		if (!sameFileIdentity(opened.stat, params.expectedStat)) throw new SafeOpenError("path-mismatch", "path changed during write");
@@ -191,13 +191,13 @@ async function verifyAtomicWriteResult(params) {
 }
 async function resolveOpenedFileRealPathForHandle(handle, ioPath) {
 	try {
-		return await fs$1.realpath(ioPath);
+		return await fsp.realpath(ioPath);
 	} catch (err) {
 		if (!isNotFoundPathError(err)) throw err;
 	}
 	const fdCandidates = process.platform === "linux" ? [`/proc/self/fd/${handle.fd}`, `/dev/fd/${handle.fd}`] : process.platform === "win32" ? [] : [`/dev/fd/${handle.fd}`];
 	for (const fdPath of fdCandidates) try {
-		return await fs$1.realpath(fdPath);
+		return await fsp.realpath(fdPath);
 	} catch {}
 	throw new SafeOpenError("path-mismatch", "unable to resolve opened file path");
 }
@@ -212,10 +212,10 @@ async function openWritableFileWithinRoot(params) {
 	} catch (err) {
 		throw new SafeOpenError("invalid-path", "path alias escape blocked", { cause: err });
 	}
-	if (params.mkdir !== false) await fs$1.mkdir(path.dirname(resolved), { recursive: true });
+	if (params.mkdir !== false) await fsp.mkdir(path.dirname(resolved), { recursive: true });
 	let ioPath = resolved;
 	try {
-		const resolvedRealPath = await fs$1.realpath(resolved);
+		const resolvedRealPath = await fsp.realpath(resolved);
 		if (!isPathInside(rootWithSep, resolvedRealPath)) throw new SafeOpenError("outside-workspace", "file is outside workspace root");
 		ioPath = resolvedRealPath;
 	} catch (err) {
@@ -227,10 +227,10 @@ async function openWritableFileWithinRoot(params) {
 	let createdForWrite = false;
 	try {
 		try {
-			handle = await fs$1.open(ioPath, OPEN_WRITE_EXISTING_FLAGS, fileMode);
+			handle = await fsp.open(ioPath, OPEN_WRITE_EXISTING_FLAGS, fileMode);
 		} catch (err) {
 			if (!isNotFoundPathError(err)) throw err;
-			handle = await fs$1.open(ioPath, OPEN_WRITE_CREATE_FLAGS, fileMode);
+			handle = await fsp.open(ioPath, OPEN_WRITE_CREATE_FLAGS, fileMode);
 			createdForWrite = true;
 		}
 	} catch (err) {
@@ -244,7 +244,7 @@ async function openWritableFileWithinRoot(params) {
 		if (!stat.isFile()) throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 		if (stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		try {
-			const lstat = await fs$1.lstat(ioPath);
+			const lstat = await fsp.lstat(ioPath);
 			if (lstat.isSymbolicLink() || !lstat.isFile()) throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 			if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during write");
 		} catch (err) {
@@ -252,7 +252,7 @@ async function openWritableFileWithinRoot(params) {
 		}
 		const realPath = await resolveOpenedFileRealPathForHandle(handle, ioPath);
 		openedRealPath = realPath;
-		const realStat = await fs$1.stat(realPath);
+		const realStat = await fsp.stat(realPath);
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		if (realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!isPathInside(rootWithSep, realPath)) throw new SafeOpenError("outside-workspace", "file is outside workspace root");
@@ -267,7 +267,7 @@ async function openWritableFileWithinRoot(params) {
 		const cleanupCreatedPath = createdForWrite && err instanceof SafeOpenError;
 		const cleanupPath = openedRealPath ?? ioPath;
 		await handle.close().catch(() => {});
-		if (cleanupCreatedPath) await fs$1.rm(cleanupPath, { force: true }).catch(() => {});
+		if (cleanupCreatedPath) await fsp.rm(cleanupPath, { force: true }).catch(() => {});
 		throw err;
 	}
 }
@@ -290,7 +290,7 @@ async function writeFileWithinRoot(params) {
 			encoding: params.encoding,
 			mode: targetMode || 384
 		});
-		await fs$1.rename(tempPath, destinationPath);
+		await fsp.rename(tempPath, destinationPath);
 		tempPath = null;
 		try {
 			await verifyAtomicWriteResult({
@@ -303,7 +303,7 @@ async function writeFileWithinRoot(params) {
 			throw err;
 		}
 	} finally {
-		if (tempPath) await fs$1.rm(tempPath, { force: true }).catch(() => {});
+		if (tempPath) await fsp.rm(tempPath, { force: true }).catch(() => {});
 	}
 }
 async function copyFileWithinRoot(params) {
@@ -331,7 +331,7 @@ async function copyFileWithinRoot(params) {
 		});
 		await pipeline(sourceStream, targetStream);
 	} catch (err) {
-		if (target?.createdForWrite) await fs$1.rm(target.openedRealPath, { force: true }).catch(() => {});
+		if (target?.createdForWrite) await fsp.rm(target.openedRealPath, { force: true }).catch(() => {});
 		throw err;
 	} finally {
 		if (!sourceClosedByStream) await source.handle.close().catch(() => {});

package/dist/{fs-safe-D96d8swI.js → fs-safe-BjrptUz1.js}

@@ -1,11 +1,11 @@
-import { u as expandHomePrefix } from "./paths-BIDPYPVC.js";
-import { B as hasNodeErrorCode, H as isPathInside, I as sameFileIdentity, U as isSymlinkOpenError, V as isNotFoundPathError } from "./subsystem-DoQFckDJ.js";
-import { S as logWarn } from "./workspace-DOy2M7yN.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-BXXI1YTn.js";
+import { u as expandHomePrefix } from "./paths-B_gs59ga.js";
+import { B as hasNodeErrorCode, H as isPathInside, I as sameFileIdentity, U as isSymlinkOpenError, V as isNotFoundPathError } from "./subsystem-cFv2jJm-.js";
+import { S as logWarn } from "./workspace-D5PKyvm-.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-CgO2FpVx.js";
 import path from "node:path";
 import { constants } from "node:fs";
 import os from "node:os";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 import { randomUUID } from "node:crypto";
 import { pipeline } from "node:stream/promises";
 
@@ -25,19 +25,19 @@ const ensureTrailingSep = (value) => value.endsWith(path.sep) ? value : value +
 async function expandRelativePathWithHome(relativePath) {
 	let home = process.env.HOME || process.env.USERPROFILE || os.homedir();
 	try {
-		home = await fs$1.realpath(home);
+		home = await fs.realpath(home);
 	} catch {}
 	return expandHomePrefix(relativePath, { home });
 }
 async function openVerifiedLocalFile(filePath, options) {
 	try {
-		if ((await fs$1.lstat(filePath)).isDirectory()) throw new SafeOpenError("not-file", "not a file");
+		if ((await fs.lstat(filePath)).isDirectory()) throw new SafeOpenError("not-file", "not a file");
 	} catch (err) {
 		if (err instanceof SafeOpenError) throw err;
 	}
 	let handle;
 	try {
-		handle = await fs$1.open(filePath, OPEN_READ_FLAGS);
+		handle = await fs.open(filePath, OPEN_READ_FLAGS);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "file not found");
 		if (isSymlinkOpenError(err)) throw new SafeOpenError("symlink", "symlink open blocked", { cause: err });
@@ -45,13 +45,13 @@ async function openVerifiedLocalFile(filePath, options) {
 		throw err;
 	}
 	try {
-		const [stat, lstat] = await Promise.all([handle.stat(), fs$1.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([handle.stat(), fs.lstat(filePath)]);
 		if (lstat.isSymbolicLink()) throw new SafeOpenError("symlink", "symlink not allowed");
 		if (!stat.isFile()) throw new SafeOpenError("not-file", "not a file");
 		if (options?.rejectHardlinks && stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during read");
-		const realPath = await fs$1.realpath(filePath);
-		const realStat = await fs$1.stat(realPath);
+		const realPath = await fs.realpath(filePath);
+		const realStat = await fs.stat(realPath);
 		if (options?.rejectHardlinks && realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		return {
@@ -69,7 +69,7 @@ async function openVerifiedLocalFile(filePath, options) {
 async function resolvePathWithinRoot(params) {
 	let rootReal;
 	try {
-		rootReal = await fs$1.realpath(params.rootDir);
+		rootReal = await fs.realpath(params.rootDir);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "root dir not found");
 		throw err;
@@ -170,7 +170,7 @@ function buildAtomicWriteTempPath(targetPath) {
 	return path.join(dir, `.${base}.${process.pid}.${randomUUID()}.tmp`);
 }
 async function writeTempFileForAtomicReplace(params) {
-	const tempHandle = await fs$1.open(params.tempPath, OPEN_WRITE_CREATE_FLAGS, params.mode);
+	const tempHandle = await fs.open(params.tempPath, OPEN_WRITE_CREATE_FLAGS, params.mode);
 	try {
 		if (typeof params.data === "string") await tempHandle.writeFile(params.data, params.encoding ?? "utf8");
 		else await tempHandle.writeFile(params.data);
@@ -180,7 +180,7 @@ async function writeTempFileForAtomicReplace(params) {
 	}
 }
 async function verifyAtomicWriteResult(params) {
-	const rootWithSep = ensureTrailingSep(await fs$1.realpath(params.rootDir));
+	const rootWithSep = ensureTrailingSep(await fs.realpath(params.rootDir));
 	const opened = await openVerifiedLocalFile(params.targetPath, { rejectHardlinks: true });
 	try {
 		if (!sameFileIdentity(opened.stat, params.expectedStat)) throw new SafeOpenError("path-mismatch", "path changed during write");
@@ -191,13 +191,13 @@ async function verifyAtomicWriteResult(params) {
 }
 async function resolveOpenedFileRealPathForHandle(handle, ioPath) {
 	try {
-		return await fs$1.realpath(ioPath);
+		return await fs.realpath(ioPath);
 	} catch (err) {
 		if (!isNotFoundPathError(err)) throw err;
 	}
 	const fdCandidates = process.platform === "linux" ? [`/proc/self/fd/${handle.fd}`, `/dev/fd/${handle.fd}`] : process.platform === "win32" ? [] : [`/dev/fd/${handle.fd}`];
 	for (const fdPath of fdCandidates) try {
-		return await fs$1.realpath(fdPath);
+		return await fs.realpath(fdPath);
 	} catch {}
 	throw new SafeOpenError("path-mismatch", "unable to resolve opened file path");
 }
@@ -212,10 +212,10 @@ async function openWritableFileWithinRoot(params) {
 	} catch (err) {
 		throw new SafeOpenError("invalid-path", "path alias escape blocked", { cause: err });
 	}
-	if (params.mkdir !== false) await fs$1.mkdir(path.dirname(resolved), { recursive: true });
+	if (params.mkdir !== false) await fs.mkdir(path.dirname(resolved), { recursive: true });
 	let ioPath = resolved;
 	try {
-		const resolvedRealPath = await fs$1.realpath(resolved);
+		const resolvedRealPath = await fs.realpath(resolved);
 		if (!isPathInside(rootWithSep, resolvedRealPath)) throw new SafeOpenError("outside-workspace", "file is outside workspace root");
 		ioPath = resolvedRealPath;
 	} catch (err) {
@@ -227,10 +227,10 @@ async function openWritableFileWithinRoot(params) {
 	let createdForWrite = false;
 	try {
 		try {
-			handle = await fs$1.open(ioPath, OPEN_WRITE_EXISTING_FLAGS, fileMode);
+			handle = await fs.open(ioPath, OPEN_WRITE_EXISTING_FLAGS, fileMode);
 		} catch (err) {
 			if (!isNotFoundPathError(err)) throw err;
-			handle = await fs$1.open(ioPath, OPEN_WRITE_CREATE_FLAGS, fileMode);
+			handle = await fs.open(ioPath, OPEN_WRITE_CREATE_FLAGS, fileMode);
 			createdForWrite = true;
 		}
 	} catch (err) {
@@ -244,7 +244,7 @@ async function openWritableFileWithinRoot(params) {
 		if (!stat.isFile()) throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 		if (stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		try {
-			const lstat = await fs$1.lstat(ioPath);
+			const lstat = await fs.lstat(ioPath);
 			if (lstat.isSymbolicLink() || !lstat.isFile()) throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 			if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during write");
 		} catch (err) {
@@ -252,7 +252,7 @@ async function openWritableFileWithinRoot(params) {
 		}
 		const realPath = await resolveOpenedFileRealPathForHandle(handle, ioPath);
 		openedRealPath = realPath;
-		const realStat = await fs$1.stat(realPath);
+		const realStat = await fs.stat(realPath);
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		if (realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!isPathInside(rootWithSep, realPath)) throw new SafeOpenError("outside-workspace", "file is outside workspace root");
@@ -267,7 +267,7 @@ async function openWritableFileWithinRoot(params) {
 		const cleanupCreatedPath = createdForWrite && err instanceof SafeOpenError;
 		const cleanupPath = openedRealPath ?? ioPath;
 		await handle.close().catch(() => {});
-		if (cleanupCreatedPath) await fs$1.rm(cleanupPath, { force: true }).catch(() => {});
+		if (cleanupCreatedPath) await fs.rm(cleanupPath, { force: true }).catch(() => {});
 		throw err;
 	}
 }
@@ -290,7 +290,7 @@ async function writeFileWithinRoot(params) {
 			encoding: params.encoding,
 			mode: targetMode || 384
 		});
-		await fs$1.rename(tempPath, destinationPath);
+		await fs.rename(tempPath, destinationPath);
 		tempPath = null;
 		try {
 			await verifyAtomicWriteResult({
@@ -303,7 +303,7 @@ async function writeFileWithinRoot(params) {
 			throw err;
 		}
 	} finally {
-		if (tempPath) await fs$1.rm(tempPath, { force: true }).catch(() => {});
+		if (tempPath) await fs.rm(tempPath, { force: true }).catch(() => {});
 	}
 }
 async function copyFileWithinRoot(params) {
@@ -331,7 +331,7 @@ async function copyFileWithinRoot(params) {
 		});
 		await pipeline(sourceStream, targetStream);
 	} catch (err) {
-		if (target?.createdForWrite) await fs$1.rm(target.openedRealPath, { force: true }).catch(() => {});
+		if (target?.createdForWrite) await fs.rm(target.openedRealPath, { force: true }).catch(() => {});
 		throw err;
 	} finally {
 		if (!sourceClosedByStream) await source.handle.close().catch(() => {});

package/dist/{gateway-cli-B0WWrjnY.js → gateway-cli-D17zAbrY.js}

@@ -175,7 +175,7 @@ import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUp
 import { t as reconcileBundledInstalls } from "./reconcile-bundled-DVtY46J8.js";
 import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-FLRpN4Mm.js";
 import "./onboarding.secret-input-DHve3Wa-.js";
-import { t as runOnboardingWizard } from "./onboarding-vLVDuEr7.js";
+import { t as runOnboardingWizard } from "./onboarding-DXRhSAcO.js";
 import { a as CONTROL_UI_V2_SERVICE_NAME, i as webBundleMissingMessage, n as buildUserClientRuntimeConfig, o as buildControlUiV2RuntimeConfig, r as resolvePackagedWebBundleRootSync, t as USER_CLIENT_ID } from "./runtime-config-60rqOPs5.js";
 import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-D1g_JEFQ.js";
 import { a as readChatHistoryPage, c as REPLY_CONTEXT_CUSTOM_TYPE, d as admitUiActionHead, f as bindUiActionTurn, g as UiSurfaceRefSchema, h as assertValidParams, i as decodeHistoryCursor, l as buildReplyContextPayload, m as unsubscribeSessionChanges, o as resolveDbLeafEntryId, p as reserveUiActionAdmission, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers, u as UI_ACTION_CUSTOM_TYPE } from "./sessions-CqTY6R_o.js";
@@ -9688,6 +9688,7 @@ function isGatewayErrorShape(value) {
 function stripUndefinedEntryFields(patch) {
 	return Object.fromEntries(Object.entries(patch).filter(([, value]) => value !== void 0));
 }
+var SessionSendPolicyDenied = class extends Error {};
 async function runSessionResetFromAgent(params) {
 	return await new Promise((resolve) => {
 		let settled = false;
@@ -9976,7 +9977,7 @@ const agentHandlers = {
 					});
 				}
 			}
-			if (resolveSendPolicy({
+			if (!(storePath && !oneShotPlan.internalSessionEffects) && resolveSendPolicy({
 				cfg,
 				entry: entry ? {
 					...entry,
@@ -9992,7 +9993,7 @@ const agentHandlers = {
 			}
 			if (storePath && !oneShotPlan.internalSessionEffects) {
 				let admissionCollision = false;
-				let policyRecheckDenied = false;
+				let policyDenied = false;
 				const persisted = await updateSessionStore(storePath, (store) => {
 					const held = store[canonicalSessionKey]?.sessionId;
 					if (admittedNewSessionId && held && held !== admittedNewSessionId) {
@@ -10015,7 +10016,7 @@ const agentHandlers = {
 						}
 					}
 					const effectiveEntry = source ? mergeSessionEntry(source, stripUndefinedEntryFields({
-						sessionId: nextEntryPatch.sessionId,
+						sessionId: admittedNewSessionId ?? (source.sessionId ? void 0 : nextEntryPatch.sessionId),
 						updatedAt: nextEntryPatch.updatedAt,
 						spawnedBy: nextEntryPatch.spawnedBy,
 						channel: source.channel ? void 0 : request.channel?.trim() || void 0,
@@ -10030,12 +10031,17 @@ const agentHandlers = {
 					}));
 					if (resolveSendPolicy({
 						cfg,
-						entry: effectiveEntry,
+						entry: source ? {
+							...source,
+							actor: source.actor ?? routeStampCandidate
+						} : {
+							...effectiveEntry,
+							channel: entry?.channel,
+							chatType: entry?.chatType,
+							actor: entry?.actor ?? routeStampCandidate
+						},
 						sessionKey: canonicalKey
-					}) === "deny") {
-						policyRecheckDenied = true;
-						return;
-					}
+					}) === "deny") throw new SessionSendPolicyDenied();
 					pruneLegacyStoreKeys({
 						store,
 						canonicalKey: target.canonicalKey,
@@ -10043,8 +10049,11 @@ const agentHandlers = {
 					});
 					store[canonicalSessionKey] = effectiveEntry;
 					return effectiveEntry;
+				}).catch((err) => {
+					if (!(err instanceof SessionSendPolicyDenied)) throw err;
+					policyDenied = true;
 				});
-				if (policyRecheckDenied) {
+				if (policyDenied) {
 					respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, "send blocked by session policy"));
 					return;
 				}
@@ -10053,6 +10062,7 @@ const agentHandlers = {
 					return;
 				}
 				sessionEntry = persisted;
+				resolvedSessionId = persisted?.sessionId ?? resolvedSessionId;
 			}
 			if (!oneShotPlan.internalSessionEffects && (canonicalSessionKey === mainSessionKey || canonicalSessionKey === "global")) {
 				context.addChatRun(idem, {

package/dist/{gateway-cli-BRUhDHZW.js → gateway-cli-DktZhN9y.js}

@@ -175,7 +175,7 @@ import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUp
 import { t as reconcileBundledInstalls } from "./reconcile-bundled-C2O6l6xl.js";
 import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-C6jPY8mC.js";
 import "./onboarding.secret-input-CGZRLs69.js";
-import { t as runOnboardingWizard } from "./onboarding-CDHMZKiy.js";
+import { t as runOnboardingWizard } from "./onboarding-C1f94rh1.js";
 import { a as CONTROL_UI_V2_SERVICE_NAME, i as webBundleMissingMessage, n as buildUserClientRuntimeConfig, o as buildControlUiV2RuntimeConfig, r as resolvePackagedWebBundleRootSync, t as USER_CLIENT_ID } from "./runtime-config-C3elfZ8o.js";
 import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-BnRCjqCx.js";
 import { a as readChatHistoryPage, c as REPLY_CONTEXT_CUSTOM_TYPE, d as admitUiActionHead, f as bindUiActionTurn, g as UiSurfaceRefSchema, h as assertValidParams, i as decodeHistoryCursor, l as buildReplyContextPayload, m as unsubscribeSessionChanges, o as resolveDbLeafEntryId, p as reserveUiActionAdmission, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers, u as UI_ACTION_CUSTOM_TYPE } from "./sessions-C2ZQ1A-F.js";
@@ -9690,6 +9690,7 @@ function isGatewayErrorShape(value) {
 function stripUndefinedEntryFields(patch) {
 	return Object.fromEntries(Object.entries(patch).filter(([, value]) => value !== void 0));
 }
+var SessionSendPolicyDenied = class extends Error {};
 async function runSessionResetFromAgent(params) {
 	return await new Promise((resolve) => {
 		let settled = false;
@@ -9978,7 +9979,7 @@ const agentHandlers = {
 					});
 				}
 			}
-			if (resolveSendPolicy({
+			if (!(storePath && !oneShotPlan.internalSessionEffects) && resolveSendPolicy({
 				cfg,
 				entry: entry ? {
 					...entry,
@@ -9994,7 +9995,7 @@ const agentHandlers = {
 			}
 			if (storePath && !oneShotPlan.internalSessionEffects) {
 				let admissionCollision = false;
-				let policyRecheckDenied = false;
+				let policyDenied = false;
 				const persisted = await updateSessionStore(storePath, (store) => {
 					const held = store[canonicalSessionKey]?.sessionId;
 					if (admittedNewSessionId && held && held !== admittedNewSessionId) {
@@ -10017,7 +10018,7 @@ const agentHandlers = {
 						}
 					}
 					const effectiveEntry = source ? mergeSessionEntry(source, stripUndefinedEntryFields({
-						sessionId: nextEntryPatch.sessionId,
+						sessionId: admittedNewSessionId ?? (source.sessionId ? void 0 : nextEntryPatch.sessionId),
 						updatedAt: nextEntryPatch.updatedAt,
 						spawnedBy: nextEntryPatch.spawnedBy,
 						channel: source.channel ? void 0 : request.channel?.trim() || void 0,
@@ -10032,12 +10033,17 @@ const agentHandlers = {
 					}));
 					if (resolveSendPolicy({
 						cfg,
-						entry: effectiveEntry,
+						entry: source ? {
+							...source,
+							actor: source.actor ?? routeStampCandidate
+						} : {
+							...effectiveEntry,
+							channel: entry?.channel,
+							chatType: entry?.chatType,
+							actor: entry?.actor ?? routeStampCandidate
+						},
 						sessionKey: canonicalKey
-					}) === "deny") {
-						policyRecheckDenied = true;
-						return;
-					}
+					}) === "deny") throw new SessionSendPolicyDenied();
 					pruneLegacyStoreKeys({
 						store,
 						canonicalKey: target.canonicalKey,
@@ -10045,8 +10051,11 @@ const agentHandlers = {
 					});
 					store[canonicalSessionKey] = effectiveEntry;
 					return effectiveEntry;
+				}).catch((err) => {
+					if (!(err instanceof SessionSendPolicyDenied)) throw err;
+					policyDenied = true;
 				});
-				if (policyRecheckDenied) {
+				if (policyDenied) {
 					respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, "send blocked by session policy"));
 					return;
 				}
@@ -10055,6 +10064,7 @@ const agentHandlers = {
 					return;
 				}
 				sessionEntry = persisted;
+				resolvedSessionId = persisted?.sessionId ?? resolvedSessionId;
 			}
 			if (!oneShotPlan.internalSessionEffects && (canonicalSessionKey === mainSessionKey || canonicalSessionKey === "global")) {
 				context.addChatRun(idem, {

package/dist/{image-ops-BiBI-uAf.js → image-ops-BWgZn39_.js}

@@ -1,4 +1,4 @@
-import { _ as runExec } from "./workspace-DOy2M7yN.js";
+import { _ as runExec } from "./workspace-D5PKyvm-.js";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs/promises";

package/dist/{image-ops-BTgGxcIG.js → image-ops-C54shfkj.js}

@@ -1,7 +1,7 @@
-import { D as runExec } from "./agent-scope-BJFJ0deZ.js";
+import { D as runExec } from "./agent-scope-DUbhjnHb.js";
 import os from "node:os";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fsp from "node:fs/promises";
 import { fileTypeFromBuffer } from "file-type";
 
 //#region src/media/constants.ts
@@ -233,11 +233,11 @@ function readJpegExifOrientation(buffer) {
 	return null;
 }
 async function withTempDir(fn) {
-	const dir = await fs.mkdtemp(path.join(os.tmpdir(), "openclaw-img-"));
+	const dir = await fsp.mkdtemp(path.join(os.tmpdir(), "openclaw-img-"));
 	try {
 		return await fn(dir);
 	} finally {
-		await fs.rm(dir, {
+		await fsp.rm(dir, {
 			recursive: true,
 			force: true
 		}).catch(() => {});
@@ -246,7 +246,7 @@ async function withTempDir(fn) {
 async function sipsMetadataFromBuffer(buffer) {
 	return await withTempDir(async (dir) => {
 		const input = path.join(dir, "in.img");
-		await fs.writeFile(input, buffer);
+		await fsp.writeFile(input, buffer);
 		const { stdout } = await runExec("/usr/bin/sips", [
 			"-g",
 			"pixelWidth",
@@ -274,7 +274,7 @@ async function sipsResizeToJpeg(params) {
 	return await withTempDir(async (dir) => {
 		const input = path.join(dir, "in.img");
 		const output = path.join(dir, "out.jpg");
-		await fs.writeFile(input, params.buffer);
+		await fsp.writeFile(input, params.buffer);
 		await runExec("/usr/bin/sips", [
 			"-Z",
 			String(Math.max(1, Math.round(params.maxSide))),
@@ -291,14 +291,14 @@ async function sipsResizeToJpeg(params) {
 			timeoutMs: 2e4,
 			maxBuffer: 1024 * 1024
 		});
-		return await fs.readFile(output);
+		return await fsp.readFile(output);
 	});
 }
 async function sipsConvertToJpeg(buffer) {
 	return await withTempDir(async (dir) => {
 		const input = path.join(dir, "in.heic");
 		const output = path.join(dir, "out.jpg");
-		await fs.writeFile(input, buffer);
+		await fsp.writeFile(input, buffer);
 		await runExec("/usr/bin/sips", [
 			"-s",
 			"format",
@@ -310,7 +310,7 @@ async function sipsConvertToJpeg(buffer) {
 			timeoutMs: 2e4,
 			maxBuffer: 1024 * 1024
 		});
-		return await fs.readFile(output);
+		return await fsp.readFile(output);
 	});
 }
 async function getImageMetadata(buffer) {
@@ -361,7 +361,7 @@ async function sipsApplyOrientation(buffer, orientation) {
 	return await withTempDir(async (dir) => {
 		const input = path.join(dir, "in.jpg");
 		const output = path.join(dir, "out.jpg");
-		await fs.writeFile(input, buffer);
+		await fsp.writeFile(input, buffer);
 		await runExec("/usr/bin/sips", [
 			...ops,
 			input,
@@ -371,7 +371,7 @@ async function sipsApplyOrientation(buffer, orientation) {
 			timeoutMs: 2e4,
 			maxBuffer: 1024 * 1024
 		});
-		return await fs.readFile(output);
+		return await fsp.readFile(output);
 	});
 }
 async function resizeToJpeg(params) {

package/dist/index.js

@@ -125,7 +125,7 @@ import { t as isMainModule } from "./is-main-B3FbWStI.js";
 import { t as ensureOpenClawCliOnPath } from "./path-env-DnW5y1gm.js";
 import { t as assertSupportedRuntime } from "./runtime-guard-BSmtNHNu.js";
 import "./ports-BP-0f1b5.js";
-import { i as getCoreCliCommandsWithSubcommands, n as setProgramContext, o as registerProgramCommands, s as getSubCliCommandsWithSubcommands } from "./program-context-X8qIC1Px.js";
+import { i as getCoreCliCommandsWithSubcommands, n as setProgramContext, o as registerProgramCommands, s as getSubCliCommandsWithSubcommands } from "./program-context-BM_flY1J.js";
 import "./plugin-registry-CJ-2Wr1t.js";
 import { n as resolveCliChannelOptions } from "./channel-options-Bx_pFXKx.js";
 import process$1 from "node:process";

package/dist/{ir-IKFrcD2H.js → ir-Btci3Wse.js}

@@ -1,10 +1,10 @@
-import { M as shouldLogVerbose, b as resolveUserPath, k as logVerbose } from "./subsystem-BTMrlJ-R.js";
-import { o as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-C3qJHn62.js";
-import { a as hasAlphaChannel, c as detectMime, g as maxBytesForKind, l as extensionForMime, o as optimizeImageToPng, p as kindFromMime, r as convertHeicToJpeg, s as resizeToJpeg } from "./image-ops-BTgGxcIG.js";
-import { a as getDefaultMediaLocalRoots, n as fetchRemoteMedia } from "./fetch-BJ9kDOw8.js";
-import { a as chunkText } from "./chunk-BEuk6eCG.js";
+import { M as shouldLogVerbose, b as resolveUserPath, k as logVerbose } from "./subsystem-B9soUuXQ.js";
+import { o as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-BH37Yhl8.js";
+import { a as hasAlphaChannel, c as detectMime, g as maxBytesForKind, l as extensionForMime, o as optimizeImageToPng, p as kindFromMime, r as convertHeicToJpeg, s as resizeToJpeg } from "./image-ops-C54shfkj.js";
+import { a as getDefaultMediaLocalRoots, n as fetchRemoteMedia } from "./fetch-TzOudNO4.js";
+import { a as chunkText } from "./chunk-50mU2Avf.js";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fsp from "node:fs/promises";
 import { fileURLToPath } from "node:url";
 import MarkdownIt from "markdown-it";
 
@@ -36,7 +36,7 @@ async function assertLocalMediaAllowed(mediaPath, localRoots) {
 	const roots = localRoots ?? getDefaultLocalRoots();
 	let resolved;
 	try {
-		resolved = await fs.realpath(mediaPath);
+		resolved = await fsp.realpath(mediaPath);
 	} catch {
 		resolved = path.resolve(mediaPath);
 	}
@@ -53,7 +53,7 @@ async function assertLocalMediaAllowed(mediaPath, localRoots) {
 	for (const root of roots) {
 		let resolvedRoot;
 		try {
-			resolvedRoot = await fs.realpath(root);
+			resolvedRoot = await fsp.realpath(root);
 		} catch {
 			resolvedRoot = path.resolve(root);
 		}