wednesdayai 0.6.1-dev.27 → 0.6.1-dev.28

package/dist/{pi-embedded-D-4wht-f.js → pi-embedded-yXKiYEGf.js}

@@ -1,50 +1,50 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { $ as unsetConfigValueAtPath, $i as isPidAlive, $n as deriveSessionMetaPatch, $r as applyTargetToParams, $t as clearRegisteredPluginApis, A as resolveApiKeyForProvider, Aa as resolveAgentModelFallbackValues, Ai as resolveSecretRefValues, An as readSessionUpdatedAt, Ar as INTERNAL_MESSAGE_CHANNEL, At as applyTestPluginDefaults, B as resolveApiKeyForProfile, Bi as resolveShellEnvFallbackTimeoutMs, Br as GATEWAY_CLIENT_MODES, Bt as getChatChannelMeta, C as buildAssistantMessage, Ca as resolveAgentWorkspaceDir, Ci as unwrapKnownDispatchWrapperInvocation, Cn as closeConfiguredSessionStorageRuntime, Cr as resolveConversationLabel, Ct as buildChannelAccountBindings, D as getApiKeyForModel, Da as resolveSessionAgentId, Di as normalizeSafeBinProfileFixtures, Dn as refreshConfiguredSessionBindingEntry, Dr as mergeDeliveryContext, Dt as DOCS_SITE_URL, E as buildUsageWithNoCost, Ea as resolveRunModelFallbacksOverride, Ei as SAFE_BIN_PROFILES, En as prepareConfiguredSessionStorageRuntimeActivation, Er as deliveryContextKey, Et as loadPluginManifestRegistry, F as getSoonestCooldownExpiry, Fi as secretRefKey, Fr as listDeliverableMessageChannels, Ft as discoverOpenClawPlugins, G as createConfigIO, Gi as applyMergePatch, Gn as resolveStorePath, Gt as resolveChannelConfigId, H as readConfigFileSnapshot, Hi as resolveOwnerDisplaySetting, Hn as resolveSessionFilePathOptions, Ht as normalizeAnyChannelId, I as isProfileInCooldown, Ii as runTasksWithConcurrency, Ir as normalizeMessageChannel, It as isPathInside, J as setConfigOverride, Ji as markAuthProfileGood, Jt as getActivePluginRegistryKey, K as getConfigOverrides, Ki as dedupeProfileIds, Kn as acquireSessionWriteLock, Kt as getActiveGatewayPluginRegistry, L as markAuthProfileFailure, Li as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, Lr as resolveGatewayMessageChannel, Lt as safeStatSync, M as resolveModelAuthMode, Ma as toAgentModelListLike, Mi as isNonEmptyString, Mn as getConfiguredSessionStorageRuntime, Mt as normalizePluginsConfig, Ni as isRecord$1, Nr as isInternalMessageChannel, Nt as resolveEffectiveEnableState, O as getCustomProviderApiKey, Oa as resolveSessionAgentIds, Oi as resolveSafeBinProfiles, On as loadSessionStore, Or as normalizeDeliveryContext, Ot as docsSiteUrl, P as resolveAuthProfileOrder, Pi as parseDotPath, Pn as parseSessionIndexRecordKey, Pr as isMarkdownCapableMessageChannel, Pt as resolveMemorySlotDecision, Q as setConfigValueAtPath, Qi as withFileLock$1, Qr as stringEnum, Qt as addRegisteredPluginApi, R as markAuthProfileUsed, Ri as VERSION, Rn as SAFE_SESSION_ID_RE, Rr as resolveMessageChannel, S as createOllamaStreamFn, Sa as resolveAgentSkillsFilter, Si as isShellWrapperExecutable, Sn as updateSessionStoreEntry, Sr as resolveAccountEntry, T as buildStreamErrorAssistantMessage, Ti as splitShellArgs, Tn as commitPreparedConfiguredSessionStorageRuntimeActivation, Tr as deliveryContextFromSession, Tt as validateJsonSchemaValue, U as readConfigFileSnapshotForWrite, Ui as advanceRuntimeConfigSnapshot, Un as resolveSessionTranscriptPath, Ur as CtxProjectionCorruptionError, Ut as normalizeChannelId$2, V as loadConfig, Vi as isTruthyEnvValue, Vn as resolveSessionFilePath, Vr as GATEWAY_CLIENT_NAMES, Vt as listChatChannels, W as writeConfigFile, Wi as getRuntimeConfigSnapshot, Wr as readTaskWorkStates, Wt as normalizeChatChannelId, X as getConfigValueAtPath, Xi as resolveAuthStorePathForDisplay, Xn as mergeSessionEntry, Xr as channelTargetsSchema, Xt as requireActivePluginRegistry, Y as unsetConfigOverride, Yi as ensureAuthProfileStore, Yn as DEFAULT_RESET_TRIGGERS, Yr as channelTargetSchema, Z as parseConfigPath, Zi as resolveOpenClawAgentDir, Zn as resolveFreshSessionTotalTokens, Zr as optionalStringEnum, Zt as setActivePluginRegistry, _a as listAgentIds, _i as matchAllowlist, _r as resolveCliName, a as isCliProvider, aa as hasConfiguredSecretInput, ai as replaceBufferedPluginTaskPasses, an as listPluginCommands, ar as listChannelDocks, at as resolveIMessageRemoteAttachmentRoots, b as retryAsync, bi as extractShellWrapperInlineCommand, bn as updateLastRoute, br as resolveChannelGroupRequireMention, c as normalizeProviderId, ca as splitTrailingAuthProfile, ci as isTrustedSafeBinPath, cn as BUILTIN_TTS_PROVIDER_IDS, cr as listChannelPlugins, d as resolveDefaultModelForAgent, da as DEFAULT_PROVIDER, di as validateSafeBinArgv, dn as isBuiltinTtsProvider, dr as resolveSignalAccount, ea as readProcessElapsedSeconds, ei as actionHasTarget, en as createPluginRegistry, er as resolveGroupSessionKey, et as validateConfigObjectWithPlugins, f as resolveModelRefFromString, fa as acceptsInheritedIdentity, fi as analyzeShellCommand, fn as replaceSpeechProviders, fr as isWhatsAppGroupJid, gi as DEFAULT_SAFE_BINS, gn as getConversationReadQuery, gr as formatCliCommand, h as resolveThinkingDefault, ha as isInternalAgentSessionKey, hi as splitCommandChain, hn as createConversationReadQuery, hr as resolveWhatsAppAccount, i as findNormalizedProviderValue, ia as coerceSecretRef, ii as listBufferedPluginTaskPasses, in as executePluginCommand, ir as getChannelDock, it as resolveIMessageAttachmentRoots, j as resolveEnvApiKey, ja as resolveAgentModelPrimaryValue, ji as describeUnknownError$1, jn as parseDurationMs, jr as isDeliverableMessageChannel, jt as isBundledChannelEnabledByChannelConfig, k as requireApiKey, ki as isSafeExecutableValue, kn as loadSessionStoreFromDisk, kr as normalizeSessionDeliveryFields, kt as BUNDLED_ENABLED_BY_DEFAULT, l as parseModelRef, la as DEFAULT_CONTEXT_TOKENS, li as listWritableExplicitTrustedSafeBinDirs, ln as getRegisteredSpeechProviders, lr as normalizeChannelId$1, lt as resolveExecPolicyPreset, m as resolveSubagentSpawnModelSelection, ma as isAgentUserFacing, mi as isWindowsPlatform, mn as StorageReadAccessError, mr as hasAnyWhatsAppAuth, n as buildConfiguredAllowlistKeys, nn as buildPluginHealthReport, nr as normalizeAtHashSlug, nt as isInboundPathAllowed, o as modelKey, oa as normalizeResolvedSecretInputString, oi as RecoveryAdmissionError, on as matchPluginCommand, or as normalizeSignalMessagingTarget, ot as normalizeScpRemoteHost, p as resolveReasoningDefault, pa as hasConfiguredModelFallbacks, pi as buildEnforcedShellCommand, pn as normalizeProviderId$1, pr as normalizeWhatsAppTarget, q as resetConfigOverrides, qi as listProfilesForProvider, qn as resolveSessionLockMaxHoldFromTimeout, qt as getActivePluginRegistry, r as buildModelAliasIndex, ra as normalizeSecretInput, ri as discardBufferedPluginTaskPasses, rn as clearPluginCommands, rr as normalizeStringEntries, rt as mergeInboundPathRoots, s as normalizeModelRef$1, sa as resolveSecretInputRef, si as getTrustedSafeBinDirs, sn as registerPluginCommand, sr as getChannelPlugin, st as parseNonNegativeByteSize, t as buildAllowedModelSet, ta as resolveAuthProfileDisplayLabel, ti as actionRequiresTarget, tn as normalizePluginHttpPath, tr as resolveParentSessionGroupId, tt as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, u as resolveConfiguredModelRef, ua as DEFAULT_MODEL, ui as normalizeTrustedSafeBinDirs, un as getSpeechProvider, ur as listEnabledSignalAccounts, va as resolveAgentConfig, vi as resolveAllowlistCandidatePath, vn as requireSessionStorageRuntime, vr as resolveIMessageAccount, w as buildAssistantMessageWithZeroUsage, wa as resolveDefaultAgentId, wi as unwrapKnownShellMultiplexerInvocation, wn as closeReplacedConfiguredSessionStorageRuntime, wr as normalizeChatType, wt as listBindings, x as OLLAMA_NATIVE_BASE_URL, xi as isDispatchWrapperExecutable, xn as updateSessionStore, xr as resolveChannelGroupToolsPolicy, ya as resolveAgentDir, yi as resolveCommandResolutionFromArgv, yn as recordSessionMetaFromInbound, yr as resolveChannelGroupPolicy, z as resolveProfilesUnavailableReason, zi as getShellPathFromLoginShell, zn as SESSION_RUN_STORE_FILE_NAME, zr as GATEWAY_CLIENT_IDS, zt as CHAT_CHANNEL_ORDER } from "./model-selection-CbMZx9fR.js";
-import { a as resolveGatewayLockDir, f as resolveRequiredHomeDir, l as resolveStateDir, o as resolveGatewayPort, r as resolveConfigPath, s as resolveOAuthDir, u as expandHomePrefix } from "./paths-BIDPYPVC.js";
-import { C as appendFileLog, F as openBoundaryFileSync, K as isDangerousHostEnvVarName, O as INCLUDE_KEY, P as openBoundaryFile, Q as clampInt, T as normalizeLogLevel, U as isSymlinkOpenError, V as isNotFoundPathError, W as normalizeWindowsPathForComparison, Z as CONFIG_DIR, _ as colorize, a as createNonExitingRuntime, b as getChildLogger, c as registerActiveProgressLine, ct as safeParseJson, dt as sleep$2, f as logVerbose, ft as sliceUtf16Safe, g as warn, h as shouldLogVerbose, it as normalizeE164, j as isBlockedObjectKey, l as unregisterActiveProgressLine, lt as shortenHomeInString, m as setVerbose, mt as resolvePreferredOpenClawTmpDir, nt as formatTerminalLink, o as defaultRuntime, pt as truncateUtf16Safe, rt as isRecord$2, s as clearActiveProgressLine, st as resolveUserPath, t as createSubsystemLogger, tt as escapeRegExp, u as danger, ut as shortenHomePath, v as isRich, y as theme } from "./subsystem-DoQFckDJ.js";
+import { $ as unsetConfigValueAtPath, $i as isPidAlive, $n as deriveSessionMetaPatch, $r as applyTargetToParams, $t as clearRegisteredPluginApis, A as resolveApiKeyForProvider, Aa as resolveAgentModelFallbackValues, Ai as resolveSecretRefValues, An as readSessionUpdatedAt, Ar as INTERNAL_MESSAGE_CHANNEL, At as applyTestPluginDefaults, B as resolveApiKeyForProfile, Bi as resolveShellEnvFallbackTimeoutMs, Br as GATEWAY_CLIENT_MODES, Bt as getChatChannelMeta, C as buildAssistantMessage, Ca as resolveAgentWorkspaceDir, Ci as unwrapKnownDispatchWrapperInvocation, Cn as closeConfiguredSessionStorageRuntime, Cr as resolveConversationLabel, Ct as buildChannelAccountBindings, D as getApiKeyForModel, Da as resolveSessionAgentId, Di as normalizeSafeBinProfileFixtures, Dn as refreshConfiguredSessionBindingEntry, Dr as mergeDeliveryContext, Dt as DOCS_SITE_URL, E as buildUsageWithNoCost, Ea as resolveRunModelFallbacksOverride, Ei as SAFE_BIN_PROFILES, En as prepareConfiguredSessionStorageRuntimeActivation, Er as deliveryContextKey, Et as loadPluginManifestRegistry, F as getSoonestCooldownExpiry, Fi as secretRefKey, Fr as listDeliverableMessageChannels, Ft as discoverOpenClawPlugins, G as createConfigIO, Gi as applyMergePatch, Gn as resolveStorePath, Gt as resolveChannelConfigId, H as readConfigFileSnapshot, Hi as resolveOwnerDisplaySetting, Hn as resolveSessionFilePathOptions, Ht as normalizeAnyChannelId, I as isProfileInCooldown, Ii as runTasksWithConcurrency, Ir as normalizeMessageChannel, It as isPathInside, J as setConfigOverride, Ji as markAuthProfileGood, Jt as getActivePluginRegistryKey, K as getConfigOverrides, Ki as dedupeProfileIds, Kn as acquireSessionWriteLock, Kt as getActiveGatewayPluginRegistry, L as markAuthProfileFailure, Li as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, Lr as resolveGatewayMessageChannel, Lt as safeStatSync, M as resolveModelAuthMode, Ma as toAgentModelListLike, Mi as isNonEmptyString, Mn as getConfiguredSessionStorageRuntime, Mt as normalizePluginsConfig, Ni as isRecord$1, Nr as isInternalMessageChannel, Nt as resolveEffectiveEnableState, O as getCustomProviderApiKey, Oa as resolveSessionAgentIds, Oi as resolveSafeBinProfiles, On as loadSessionStore, Or as normalizeDeliveryContext, Ot as docsSiteUrl, P as resolveAuthProfileOrder, Pi as parseDotPath, Pn as parseSessionIndexRecordKey, Pr as isMarkdownCapableMessageChannel, Pt as resolveMemorySlotDecision, Q as setConfigValueAtPath, Qi as withFileLock$1, Qr as stringEnum, Qt as addRegisteredPluginApi, R as markAuthProfileUsed, Ri as VERSION, Rn as SAFE_SESSION_ID_RE, Rr as resolveMessageChannel, S as createOllamaStreamFn, Sa as resolveAgentSkillsFilter, Si as isShellWrapperExecutable, Sn as updateSessionStoreEntry, Sr as resolveAccountEntry, T as buildStreamErrorAssistantMessage, Ti as splitShellArgs, Tn as commitPreparedConfiguredSessionStorageRuntimeActivation, Tr as deliveryContextFromSession, Tt as validateJsonSchemaValue, U as readConfigFileSnapshotForWrite, Ui as advanceRuntimeConfigSnapshot, Un as resolveSessionTranscriptPath, Ur as CtxProjectionCorruptionError, Ut as normalizeChannelId$2, V as loadConfig, Vi as isTruthyEnvValue, Vn as resolveSessionFilePath, Vr as GATEWAY_CLIENT_NAMES, Vt as listChatChannels, W as writeConfigFile, Wi as getRuntimeConfigSnapshot, Wr as readTaskWorkStates, Wt as normalizeChatChannelId, X as getConfigValueAtPath, Xi as resolveAuthStorePathForDisplay, Xn as mergeSessionEntry, Xr as channelTargetsSchema, Xt as requireActivePluginRegistry, Y as unsetConfigOverride, Yi as ensureAuthProfileStore, Yn as DEFAULT_RESET_TRIGGERS, Yr as channelTargetSchema, Z as parseConfigPath, Zi as resolveOpenClawAgentDir, Zn as resolveFreshSessionTotalTokens, Zr as optionalStringEnum, Zt as setActivePluginRegistry, _a as listAgentIds, _i as matchAllowlist, _r as resolveCliName, a as isCliProvider, aa as hasConfiguredSecretInput, ai as replaceBufferedPluginTaskPasses, an as listPluginCommands, ar as listChannelDocks, at as resolveIMessageRemoteAttachmentRoots, b as retryAsync, bi as extractShellWrapperInlineCommand, bn as updateLastRoute, br as resolveChannelGroupRequireMention, c as normalizeProviderId, ca as splitTrailingAuthProfile, ci as isTrustedSafeBinPath, cn as BUILTIN_TTS_PROVIDER_IDS, cr as listChannelPlugins, d as resolveDefaultModelForAgent, da as DEFAULT_PROVIDER, di as validateSafeBinArgv, dn as isBuiltinTtsProvider, dr as resolveSignalAccount, ea as readProcessElapsedSeconds, ei as actionHasTarget, en as createPluginRegistry, er as resolveGroupSessionKey, et as validateConfigObjectWithPlugins, f as resolveModelRefFromString, fa as acceptsInheritedIdentity, fi as analyzeShellCommand, fn as replaceSpeechProviders, fr as isWhatsAppGroupJid, gi as DEFAULT_SAFE_BINS, gn as getConversationReadQuery, gr as formatCliCommand, h as resolveThinkingDefault, ha as isInternalAgentSessionKey, hi as splitCommandChain, hn as createConversationReadQuery, hr as resolveWhatsAppAccount, i as findNormalizedProviderValue, ia as coerceSecretRef, ii as listBufferedPluginTaskPasses, in as executePluginCommand, ir as getChannelDock, it as resolveIMessageAttachmentRoots, j as resolveEnvApiKey, ja as resolveAgentModelPrimaryValue, ji as describeUnknownError$1, jn as parseDurationMs, jr as isDeliverableMessageChannel, jt as isBundledChannelEnabledByChannelConfig, k as requireApiKey, ki as isSafeExecutableValue, kn as loadSessionStoreFromDisk, kr as normalizeSessionDeliveryFields, kt as BUNDLED_ENABLED_BY_DEFAULT, l as parseModelRef, la as DEFAULT_CONTEXT_TOKENS, li as listWritableExplicitTrustedSafeBinDirs, ln as getRegisteredSpeechProviders, lr as normalizeChannelId$1, lt as resolveExecPolicyPreset, m as resolveSubagentSpawnModelSelection, ma as isAgentUserFacing, mi as isWindowsPlatform, mn as StorageReadAccessError, mr as hasAnyWhatsAppAuth, n as buildConfiguredAllowlistKeys, nn as buildPluginHealthReport, nr as normalizeAtHashSlug, nt as isInboundPathAllowed, o as modelKey, oa as normalizeResolvedSecretInputString, oi as RecoveryAdmissionError, on as matchPluginCommand, or as normalizeSignalMessagingTarget, ot as normalizeScpRemoteHost, p as resolveReasoningDefault, pa as hasConfiguredModelFallbacks, pi as buildEnforcedShellCommand, pn as normalizeProviderId$1, pr as normalizeWhatsAppTarget, q as resetConfigOverrides, qi as listProfilesForProvider, qn as resolveSessionLockMaxHoldFromTimeout, qt as getActivePluginRegistry, r as buildModelAliasIndex, ra as normalizeSecretInput, ri as discardBufferedPluginTaskPasses, rn as clearPluginCommands, rr as normalizeStringEntries, rt as mergeInboundPathRoots, s as normalizeModelRef$1, sa as resolveSecretInputRef, si as getTrustedSafeBinDirs, sn as registerPluginCommand, sr as getChannelPlugin, st as parseNonNegativeByteSize, t as buildAllowedModelSet, ta as resolveAuthProfileDisplayLabel, ti as actionRequiresTarget, tn as normalizePluginHttpPath, tr as resolveParentSessionGroupId, tt as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, u as resolveConfiguredModelRef, ua as DEFAULT_MODEL, ui as normalizeTrustedSafeBinDirs, un as getSpeechProvider, ur as listEnabledSignalAccounts, va as resolveAgentConfig, vi as resolveAllowlistCandidatePath, vn as requireSessionStorageRuntime, vr as resolveIMessageAccount, w as buildAssistantMessageWithZeroUsage, wa as resolveDefaultAgentId, wi as unwrapKnownShellMultiplexerInvocation, wn as closeReplacedConfiguredSessionStorageRuntime, wr as normalizeChatType, wt as listBindings, x as OLLAMA_NATIVE_BASE_URL, xi as isDispatchWrapperExecutable, xn as updateSessionStore, xr as resolveChannelGroupToolsPolicy, ya as resolveAgentDir, yi as resolveCommandResolutionFromArgv, yn as recordSessionMetaFromInbound, yr as resolveChannelGroupPolicy, z as resolveProfilesUnavailableReason, zi as getShellPathFromLoginShell, zn as SESSION_RUN_STORE_FILE_NAME, zr as GATEWAY_CLIENT_IDS, zt as CHAT_CHANNEL_ORDER } from "./model-selection-Ds5bEVQ2.js";
+import { a as resolveGatewayLockDir, f as resolveRequiredHomeDir, l as resolveStateDir, o as resolveGatewayPort, r as resolveConfigPath, s as resolveOAuthDir, u as expandHomePrefix } from "./paths-B_gs59ga.js";
+import { C as appendFileLog, F as openBoundaryFileSync, K as isDangerousHostEnvVarName, O as INCLUDE_KEY, P as openBoundaryFile, Q as clampInt, T as normalizeLogLevel, U as isSymlinkOpenError, V as isNotFoundPathError, W as normalizeWindowsPathForComparison, Z as CONFIG_DIR, _ as colorize, a as createNonExitingRuntime, b as getChildLogger, c as registerActiveProgressLine, ct as safeParseJson, dt as sleep$2, f as logVerbose, ft as sliceUtf16Safe, g as warn, h as shouldLogVerbose, it as normalizeE164, j as isBlockedObjectKey, l as unregisterActiveProgressLine, lt as shortenHomeInString, m as setVerbose, mt as resolvePreferredOpenClawTmpDir, nt as formatTerminalLink, o as defaultRuntime, pt as truncateUtf16Safe, rt as isRecord$2, s as clearActiveProgressLine, st as resolveUserPath, t as createSubsystemLogger, tt as escapeRegExp, u as danger, ut as shortenHomePath, v as isRich, y as theme } from "./subsystem-cFv2jJm-.js";
 import { n as resolveProcessScopedMap, t as isPlainObject } from "./plain-object-Doc_YkH1.js";
-import { $ as normalizeAccountId$1, A as DEFAULT_AGENT_ID, B as isKnownAgentMainSessionKey, C as runCommandWithTimeout, D as logError, E as logDebug, F as buildAgentPeerSessionKey, G as resolveAgentIdFromSessionKey, H as normalizeAgentId, I as classifySessionKeyShape, J as resolveThreadSessionKeys, K as resolveCanonicalIdentity, M as DEVICE_SENDER_PREFIX, O as logInfo, P as buildAgentMainSessionKey, Q as DEFAULT_ACCOUNT_ID, T as spawnWithFallback, U as normalizeMainKey, V as isValidAgentId, W as normalizeToken$1, X as sessionKeyAgentMatches, Y as sanitizeAgentId, Z as toAgentStoreSessionKey, _ as filterBootstrapFilesForSession, at as isAcpSessionKey, ct as isSubagentSessionKey, d as DEFAULT_HEARTBEAT_FILENAME, dt as stripAgentSessionKeyPrefix, et as normalizeOptionalAccountId, g as ensureAgentWorkspace, it as getSubagentDepth, j as DEFAULT_MAIN_KEY, k as logWarn, l as DEFAULT_AGENT_WORKSPACE_DIR, lt as parseAgentSessionKey, n as createInternalHookEvent, o as triggerInternalHook, ot as isCronSessionKey, q as resolveConfiguredCanonicalIdentity, rt as WAKE_GATE_SESSION_KEY_SEGMENT, s as parseBooleanValue$1, t as readManifestNamespace, u as DEFAULT_BOOTSTRAP_FILENAME, ut as resolveThreadParentSessionKey, w as runExec, x as resolveOpenClawPackageRoot, y as loadWorkspaceBootstrapFiles } from "./legacy-names-6uH6aLhq.js";
-import { a as saveJsonFile, i as loadJsonFile, r as resolveCopilotApiToken } from "./github-copilot-token-Bm6yG6tw.js";
-import { $ as resolveSandboxRuntimeStatus, A as classifyFailoverReason, At as compileGlobPatterns, B as isFailoverAssistantError, Bt as stripSilentToken, C as resolveImageSanitizationLimits, Ct as expandPolicyWithPluginGroups, D as downgradeOpenAIReasoningBlocks, Dt as normalizeToolName, E as downgradeOpenAIFunctionCallReasoningPairs, Et as expandToolGroups, F as isAuthAssistantError, Ft as sanitizeGoogleTurnOrdering, G as isTransientHttpError, H as isLikelyContextOverflowError, I as isBillingAssistantError, It as HEARTBEAT_TOKEN, J as sanitizeUserFacingText, K as parseImageDimensionError, L as isCloudCodeAssistFormatError, Lt as SILENT_REPLY_TOKEN, M as formatBillingErrorMessage, Mt as buildBootstrapContextFiles, N as formatRawAssistantErrorForUi, Nt as resolveBootstrapMaxChars, O as isGoogleModelApi, Ot as resolveToolProfilePolicy, P as getApiErrorPayloadFingerprint, Pt as resolveBootstrapTotalMaxChars, Q as resolveSandboxContext, R as isCompactionFailureError, Rt as isSilentReplyPrefixText, S as sanitizeToolResultImages, St as collectExplicitAllowlist, T as estimateBase64DecodedBytes, Tt as stripPluginOnlyAllowlist, U as isRateLimitAssistantError, V as isFailoverErrorMessage, W as isRawApiErrorPayload, X as isTimeoutErrorMessage, Y as isAuthPermanentErrorMessage, Z as ensureSandboxWorkspaceForSession, _t as ensureBrowserControlAuth, a as validateGeminiTurns, at as buildWorkspaceSkillCommandSpecs, b as sanitizeSessionMessagesImages, bt as applyOwnerOnlyToolPolicy, c as formatXHighModelHint, ct as resolveSkillsPromptForRun, d as normalizeReasoningLevel, dt as assertMediaNotDataUrl, et as createBrowserRouteContext, f as normalizeThinkLevel, ft as assertSandboxPath, g as supportsXHighThinking, gt as applySkillEnvOverridesFromSnapshot, h as resolveResponseUsageMode, ht as applySkillEnvOverrides, i as validateAnthropicTurns, it as getBridgeAuthForPort, j as formatAssistantErrorText, jt as matchesAnyGlobPattern, k as BILLING_ERROR_USER_MESSAGE, kt as listCoreToolIds, l as listThinkingLevels, lt as skillsSnapshotSourceDiffers, m as normalizeVerboseLevel, mt as resolveSandboxedMediaSource, n as splitMediaFromOutput, nt as resolveBrowserConfig, o as pickFallbackThinkingLevel, ot as buildWorkspaceSkillSnapshot, p as normalizeUsageDisplay, pt as resolveSandboxInputPath, q as parseImageSizeError, r as extractTextFromChatContent, rt as resolveProfile, s as formatThinkingLevels, st as loadWorkspaceSkillEntries, t as parseReplyDirectives, tt as registerBrowserRoutes, u as normalizeElevatedLevel, ut as resolvePluginSkillDirs, v as isMessagingToolDuplicateNormalized, vt as resolveBrowserControlAuth, w as canonicalizeBase64, wt as mergeAlsoAllowPolicy, x as sanitizeImageBlocks, xt as buildPluginToolGroups, y as normalizeTextForComparison, yt as resolveSandboxConfigForAgent, z as isContextOverflowError, zt as isSilentReplyText } from "./reply-directives-ToqsETSh.js";
+import { $ as normalizeAccountId$1, A as DEFAULT_AGENT_ID, B as isKnownAgentMainSessionKey, C as runCommandWithTimeout, D as logError, E as logDebug, F as buildAgentPeerSessionKey, G as resolveAgentIdFromSessionKey, H as normalizeAgentId, I as classifySessionKeyShape, J as resolveThreadSessionKeys, K as resolveCanonicalIdentity, M as DEVICE_SENDER_PREFIX, O as logInfo, P as buildAgentMainSessionKey, Q as DEFAULT_ACCOUNT_ID, T as spawnWithFallback, U as normalizeMainKey, V as isValidAgentId, W as normalizeToken$1, X as sessionKeyAgentMatches, Y as sanitizeAgentId, Z as toAgentStoreSessionKey, _ as filterBootstrapFilesForSession, at as isAcpSessionKey, ct as isSubagentSessionKey, d as DEFAULT_HEARTBEAT_FILENAME, dt as stripAgentSessionKeyPrefix, et as normalizeOptionalAccountId, g as ensureAgentWorkspace, it as getSubagentDepth, j as DEFAULT_MAIN_KEY, k as logWarn, l as DEFAULT_AGENT_WORKSPACE_DIR, lt as parseAgentSessionKey, n as createInternalHookEvent, o as triggerInternalHook, ot as isCronSessionKey, q as resolveConfiguredCanonicalIdentity, rt as WAKE_GATE_SESSION_KEY_SEGMENT, s as parseBooleanValue$1, t as readManifestNamespace, u as DEFAULT_BOOTSTRAP_FILENAME, ut as resolveThreadParentSessionKey, w as runExec, x as resolveOpenClawPackageRoot, y as loadWorkspaceBootstrapFiles } from "./legacy-names-chsmo2vs.js";
+import { a as saveJsonFile, i as loadJsonFile, r as resolveCopilotApiToken } from "./github-copilot-token-C-29TbW-.js";
+import { $ as resolveSandboxRuntimeStatus, A as classifyFailoverReason, At as compileGlobPatterns, B as isFailoverAssistantError, Bt as stripSilentToken, C as resolveImageSanitizationLimits, Ct as expandPolicyWithPluginGroups, D as downgradeOpenAIReasoningBlocks, Dt as normalizeToolName, E as downgradeOpenAIFunctionCallReasoningPairs, Et as expandToolGroups, F as isAuthAssistantError, Ft as sanitizeGoogleTurnOrdering, G as isTransientHttpError, H as isLikelyContextOverflowError, I as isBillingAssistantError, It as HEARTBEAT_TOKEN, J as sanitizeUserFacingText, K as parseImageDimensionError, L as isCloudCodeAssistFormatError, Lt as SILENT_REPLY_TOKEN, M as formatBillingErrorMessage, Mt as buildBootstrapContextFiles, N as formatRawAssistantErrorForUi, Nt as resolveBootstrapMaxChars, O as isGoogleModelApi, Ot as resolveToolProfilePolicy, P as getApiErrorPayloadFingerprint, Pt as resolveBootstrapTotalMaxChars, Q as resolveSandboxContext, R as isCompactionFailureError, Rt as isSilentReplyPrefixText, S as sanitizeToolResultImages, St as collectExplicitAllowlist, T as estimateBase64DecodedBytes, Tt as stripPluginOnlyAllowlist, U as isRateLimitAssistantError, V as isFailoverErrorMessage, W as isRawApiErrorPayload, X as isTimeoutErrorMessage, Y as isAuthPermanentErrorMessage, Z as ensureSandboxWorkspaceForSession, _t as ensureBrowserControlAuth, a as validateGeminiTurns, at as buildWorkspaceSkillCommandSpecs, b as sanitizeSessionMessagesImages, bt as applyOwnerOnlyToolPolicy, c as formatXHighModelHint, ct as resolveSkillsPromptForRun, d as normalizeReasoningLevel, dt as assertMediaNotDataUrl, et as createBrowserRouteContext, f as normalizeThinkLevel, ft as assertSandboxPath, g as supportsXHighThinking, gt as applySkillEnvOverridesFromSnapshot, h as resolveResponseUsageMode, ht as applySkillEnvOverrides, i as validateAnthropicTurns, it as getBridgeAuthForPort, j as formatAssistantErrorText, jt as matchesAnyGlobPattern, k as BILLING_ERROR_USER_MESSAGE, kt as listCoreToolIds, l as listThinkingLevels, lt as skillsSnapshotSourceDiffers, m as normalizeVerboseLevel, mt as resolveSandboxedMediaSource, n as splitMediaFromOutput, nt as resolveBrowserConfig, o as pickFallbackThinkingLevel, ot as buildWorkspaceSkillSnapshot, p as normalizeUsageDisplay, pt as resolveSandboxInputPath, q as parseImageSizeError, r as extractTextFromChatContent, rt as resolveProfile, s as formatThinkingLevels, st as loadWorkspaceSkillEntries, t as parseReplyDirectives, tt as registerBrowserRoutes, u as normalizeElevatedLevel, ut as resolvePluginSkillDirs, v as isMessagingToolDuplicateNormalized, vt as resolveBrowserControlAuth, w as canonicalizeBase64, wt as mergeAlsoAllowPolicy, x as sanitizeImageBlocks, xt as buildPluginToolGroups, y as normalizeTextForComparison, yt as resolveSandboxConfigForAgent, z as isContextOverflowError, zt as isSilentReplyText } from "./reply-directives-CE9WoRyW.js";
 import { n as isDiagnosticsEnabled, t as emitDiagnosticEvent } from "./diagnostic-events-RfJYFlJM.js";
-import { $ as collectInboundUserContext, A as resolveChannelResetConfig, At as repairToolUseResultPairing, B as createAsyncLock, Bt as getGlobalPluginRegistry, C as normalizeHttpWebhookUrl, Ct as createMessageCharEstimateCache, Dt as isToolResultMessage, E as parseAbsoluteTimeMs, Et as getToolResultText$1, F as resolveAgentMainSessionKey, Ft as sanitizeToolCallIdsForCloudCodeAssist, G as trimToUndefined, Gt as mergePromptContributions, H as writeJsonAtomic, Ht as hasHookForPlugin, J as drainPendingPrimaryWrites, Jt as buildPluginTurnIdentity, K as openDbSessionManager, Kt as toJsonValue$1, L as resolveMainSessionKey, Lt as hasInterSessionUserProvenance, M as resolveSessionResetType, Mt as sanitizeToolUseResultPairing, N as resolveThreadFlag, Nt as stripToolResultDetails, O as resolveSessionKey, Ot as guardSessionManager, P as canonicalizeMainSessionAlias, Pt as canonicalToolCallIdBase, Q as buildInboundMetaSystemPrompt, R as isPrimarySessionTranscriptFileName, Rt as normalizeInputProvenance, S as inferLegacyName, St as TOOL_RESULT_CHARS_PER_TOKEN_ESTIMATE, T as resolveDefaultCronStaggerMs, Tt as estimateMessageCharsCached, U as resolveGatewayCredentialsFromConfig, Ut as promptBuildResultToContribution, Vt as initializeGlobalHookRunner, Wt as createCurrentUserPromptEnvelope, X as sanitizeJsonb, Xt as resolveProviderRuntimeIdentity, Y as extractLegacyTranscriptEntryFields, Yt as resolveProviderPromptCacheKey, Z as sha256, _ as derivePromptTokens, _t as PREEMPTIVE_TOOL_RESULT_COMPACTION_PLACEHOLDER, a as resolveMirroredTranscriptText, at as stripMessageCarriers, b as makeZeroUsageSnapshot, bt as truncateToolResultToChars, c as createSessionStorageRuntimeFromConfig, ct as resolveTimezone, d as buildEqualityProjection, dt as eventOrder, et as renderInboundUserContext, ft as pickLeaf, g as sanitizeAppendEntry, gt as sessionLikelyHasOversizedToolResults, h as CREATE_CTX_STORAGE_OWNER_SQL, ht as HARD_MAX_TOOL_RESULT_CHARS, i as appendAssistantMessageToSessionTranscript, it as messageTime, j as resolveSessionResetPolicy, jt as sanitizeToolCallInputs, k as evaluateSessionFreshness, kt as openRawToolResultStash, l as resolveSessionStorageConfig, lt as resolveSenderLabel, m as deriveLegacyActorIdentity, mt as capToolResultContent, n as parseSessionThreadInfo, nt as getMessageIngress, o as parseInlineDirectives$1, ot as formatMessageStamp, pt as HIDDEN_HEARTBEAT_CUSTOM_TYPE, q as runSerializedBySession, qt as buildPluginRuntimeIdentity, r as resolveAndPersistSessionFile, rt as isRepresentableEpochMs, s as attachPgPoolErrorListeners, st as formatZonedTimestamp, t as extractDeliveryInfo, tt as attachMessageIngress, u as validateCtxStorage, ut as DB_SESSION_HYDRATION_LIMIT, v as deriveSessionTotalTokens, vt as TOOL_RESULT_TEXT_WEIGHT, w as normalizeCronStaggerMs, wt as estimateContextChars$1, x as normalizeUsage, xt as CHARS_PER_TOKEN_ESTIMATE$2, y as hasNonzeroUsage, yt as truncateTextHeadTail, z as isSessionArchiveArtifactName, zt as getGlobalHookRunner } from "./sessions-zel35iDK.js";
+import { $ as collectInboundUserContext, A as resolveChannelResetConfig, At as repairToolUseResultPairing, B as createAsyncLock, Bt as getGlobalPluginRegistry, C as normalizeHttpWebhookUrl, Ct as createMessageCharEstimateCache, Dt as isToolResultMessage, E as parseAbsoluteTimeMs, Et as getToolResultText$1, F as resolveAgentMainSessionKey, Ft as sanitizeToolCallIdsForCloudCodeAssist, G as trimToUndefined, Gt as mergePromptContributions, H as writeJsonAtomic, Ht as hasHookForPlugin, J as drainPendingPrimaryWrites, Jt as buildPluginTurnIdentity, K as openDbSessionManager, Kt as toJsonValue$1, L as resolveMainSessionKey, Lt as hasInterSessionUserProvenance, M as resolveSessionResetType, Mt as sanitizeToolUseResultPairing, N as resolveThreadFlag, Nt as stripToolResultDetails, O as resolveSessionKey, Ot as guardSessionManager, P as canonicalizeMainSessionAlias, Pt as canonicalToolCallIdBase, Q as buildInboundMetaSystemPrompt, R as isPrimarySessionTranscriptFileName, Rt as normalizeInputProvenance, S as inferLegacyName, St as TOOL_RESULT_CHARS_PER_TOKEN_ESTIMATE, T as resolveDefaultCronStaggerMs, Tt as estimateMessageCharsCached, U as resolveGatewayCredentialsFromConfig, Ut as promptBuildResultToContribution, Vt as initializeGlobalHookRunner, Wt as createCurrentUserPromptEnvelope, X as sanitizeJsonb, Xt as resolveProviderRuntimeIdentity, Y as extractLegacyTranscriptEntryFields, Yt as resolveProviderPromptCacheKey, Z as sha256, _ as derivePromptTokens, _t as PREEMPTIVE_TOOL_RESULT_COMPACTION_PLACEHOLDER, a as resolveMirroredTranscriptText, at as stripMessageCarriers, b as makeZeroUsageSnapshot, bt as truncateToolResultToChars, c as createSessionStorageRuntimeFromConfig, ct as resolveTimezone, d as buildEqualityProjection, dt as eventOrder, et as renderInboundUserContext, ft as pickLeaf, g as sanitizeAppendEntry, gt as sessionLikelyHasOversizedToolResults, h as CREATE_CTX_STORAGE_OWNER_SQL, ht as HARD_MAX_TOOL_RESULT_CHARS, i as appendAssistantMessageToSessionTranscript, it as messageTime, j as resolveSessionResetPolicy, jt as sanitizeToolCallInputs, k as evaluateSessionFreshness, kt as openRawToolResultStash, l as resolveSessionStorageConfig, lt as resolveSenderLabel, m as deriveLegacyActorIdentity, mt as capToolResultContent, n as parseSessionThreadInfo, nt as getMessageIngress, o as parseInlineDirectives$1, ot as formatMessageStamp, pt as HIDDEN_HEARTBEAT_CUSTOM_TYPE, q as runSerializedBySession, qt as buildPluginRuntimeIdentity, r as resolveAndPersistSessionFile, rt as isRepresentableEpochMs, s as attachPgPoolErrorListeners, st as formatZonedTimestamp, t as extractDeliveryInfo, tt as attachMessageIngress, u as validateCtxStorage, ut as DB_SESSION_HYDRATION_LIMIT, v as deriveSessionTotalTokens, vt as TOOL_RESULT_TEXT_WEIGHT, w as normalizeCronStaggerMs, wt as estimateContextChars$1, x as normalizeUsage, xt as CHARS_PER_TOKEN_ESTIMATE$2, y as hasNonzeroUsage, yt as truncateTextHeadTail, z as isSessionArchiveArtifactName, zt as getGlobalHookRunner } from "./sessions-Bz8mUwgo.js";
 import { n as onSessionTranscriptUpdate } from "./transcript-events-k21fdARq.js";
 import { n as generateSecureUuid, t as generateSecureToken } from "./secure-random-CSsVRTTy.js";
-import { _ as recordSystemPromptHashComparison, b as recordCommandPoll, d as logRunCompleted, f as logRunStarted, g as logToolExecutionStarted, h as logToolExecutionCompleted, l as logModelCallError, m as logToolExecutionBlocked, o as logMessageProcessed, p as logSessionStateChange, s as logMessageQueued, v as refreshRunProgress, x as resetCommandPollCount, y as boundDiagnosticContent } from "./diagnostic-BZYYYnMx.js";
+import { _ as recordSystemPromptHashComparison, b as recordCommandPoll, d as logRunCompleted, f as logRunStarted, g as logToolExecutionStarted, h as logToolExecutionCompleted, l as logModelCallError, m as logToolExecutionBlocked, o as logMessageProcessed, p as logSessionStateChange, s as logMessageQueued, v as refreshRunProgress, x as resetCommandPollCount, y as boundDiagnosticContent } from "./diagnostic-DJ11ZJIJ.js";
 import { o as redactChannelCorrelation, r as getDiagnosticSessionState } from "./diagnostic-session-state-Di8oqY0E.js";
 import { t as redactIdentifier } from "./redact-identifier-bNChjxxW.js";
-import { t as redactSensitiveText } from "./redact-C4XKILzo.js";
+import { t as redactSensitiveText } from "./redact-LOuk7TRy.js";
 import { t as CommandLane } from "./lanes-D1Q3LLIs.js";
-import { a as getCommandLaneSnapshots, c as isQueuedCommandCancellation, i as enqueueCommandInLane, n as clearCommandLane, o as getQueueSize, s as isGatewayDraining, t as CommandLaneAbortedError } from "./command-queue-BSbitNdP.js";
-import { S as MAX_IMAGE_BYTES, _ as getFileExtension, b as kindFromMime, d as MEDIA_MAX_BYTES, g as extensionForMime, h as detectMime, m as saveMediaBuffer, n as isSafeFenceBreak, p as getMediaDir, r as parseFenceSpans, s as getImageMetadata, t as findFenceSpanAt, u as resizeToJpeg, v as imageMimeFromFormat, w as mediaKindFromMime, x as normalizeMimeType$1, y as isAudioFileName } from "./fences-Dtk43Q2a.js";
-import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-Dgbp4zjx.js";
-import { A as transcriptEntriesToMessages, B as resolveReplyToMode, C as extractToolCallNames, D as sleepWithAbort, E as computeBackoff, F as filterMessagingToolMediaDuplicates, G as resolveOutboundSessionId, H as normalizeChannelTargetInput, I as isRenderablePayload, J as resolveTeamRoster, K as ensureOpenClawModelsJson, L as shouldSuppressMessagingToolReplies, M as applyReplyTagsToPayload, N as applyReplyThreading, P as filterMessagingToolDuplicates, R as shouldSuppressReasoningPayload, S as countToolResults, T as resolveContextTokensForModel, U as normalizeTargetForProvider, V as buildTargetResolverSignature, W as buildOutboundSessionContext, _ as loadCombinedSessionStoreForGateway, b as throwIfAborted$1, c as createMessageSentEmitter, d as toInternalMessageReceivedContext, f as toInternalMessageTranscribedContext, g as stampReplyActivity, h as fireAndForgetHook, j as stripLeadingInboundMetadata, k as readFullTranscriptEntriesFromBackend, l as deriveInboundMessageHookContext, m as toPluginMessageReceivedEvent, o as normalizeReplyPayloadsForDelivery, p as toPluginMessageContext, q as resolveLedTeam, s as applyMessageSendingHook, t as deliverOutboundPayloads, u as toInternalMessagePreprocessedContext, v as capArrayByJsonBytes, w as lookupContextTokens, x as loadChannelOutboundAdapter, y as jsonUtf8Bytes, z as createReplyToModeFilterForChannel } from "./deliver-CY4Fs4RX.js";
-import { B as DEFAULT_AI_SNAPSHOT_MAX_CHARS, C as ensureChromeExtensionRelayServer, M as DEFAULT_UPLOAD_DIR, N as resolveExistingPathsWithinRoot, s as resolveLsofCommandSync } from "./chrome-B3nEcesV.js";
-import { r as isLoopbackHost } from "./ws-DrXm3NWZ.js";
-import { a as readFileWithinRoot, c as writeFileWithinRoot, i as openFileWithinRoot, l as PATH_ALIAS_POLICIES, n as copyFileWithinRoot, r as createRootScopedReadFile, t as SafeOpenError } from "./fs-safe-CyG0wflg.js";
-import { i as hasErrnoCode, o as readErrorName, r as formatErrorMessage } from "./errors-BRYMqzPb.js";
-import { a as isBlockedHostnameOrIp, l as normalizeHostname, n as SsrFBlockedError } from "./proxy-env-v_oj7Urd.js";
+import { a as getCommandLaneSnapshots, c as isQueuedCommandCancellation, i as enqueueCommandInLane, n as clearCommandLane, o as getQueueSize, s as isGatewayDraining, t as CommandLaneAbortedError } from "./command-queue-AIWqKnVD.js";
+import { S as MAX_IMAGE_BYTES, _ as getFileExtension, b as kindFromMime, d as MEDIA_MAX_BYTES, g as extensionForMime, h as detectMime, m as saveMediaBuffer, n as isSafeFenceBreak, p as getMediaDir, r as parseFenceSpans, s as getImageMetadata, t as findFenceSpanAt, u as resizeToJpeg, v as imageMimeFromFormat, w as mediaKindFromMime, x as normalizeMimeType$1, y as isAudioFileName } from "./fences-Z8d1dj8p.js";
+import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-CtfGh_up.js";
+import { A as transcriptEntriesToMessages, B as resolveReplyToMode, C as extractToolCallNames, D as sleepWithAbort, E as computeBackoff, F as filterMessagingToolMediaDuplicates, G as resolveOutboundSessionId, H as normalizeChannelTargetInput, I as isRenderablePayload, J as resolveTeamRoster, K as ensureOpenClawModelsJson, L as shouldSuppressMessagingToolReplies, M as applyReplyTagsToPayload, N as applyReplyThreading, P as filterMessagingToolDuplicates, R as shouldSuppressReasoningPayload, S as countToolResults, T as resolveContextTokensForModel, U as normalizeTargetForProvider, V as buildTargetResolverSignature, W as buildOutboundSessionContext, _ as loadCombinedSessionStoreForGateway, b as throwIfAborted$1, c as createMessageSentEmitter, d as toInternalMessageReceivedContext, f as toInternalMessageTranscribedContext, g as stampReplyActivity, h as fireAndForgetHook, j as stripLeadingInboundMetadata, k as readFullTranscriptEntriesFromBackend, l as deriveInboundMessageHookContext, m as toPluginMessageReceivedEvent, o as normalizeReplyPayloadsForDelivery, p as toPluginMessageContext, q as resolveLedTeam, s as applyMessageSendingHook, t as deliverOutboundPayloads, u as toInternalMessagePreprocessedContext, v as capArrayByJsonBytes, w as lookupContextTokens, x as loadChannelOutboundAdapter, y as jsonUtf8Bytes, z as createReplyToModeFilterForChannel } from "./deliver-DsuMPE0S.js";
+import { B as DEFAULT_AI_SNAPSHOT_MAX_CHARS, C as ensureChromeExtensionRelayServer, M as DEFAULT_UPLOAD_DIR, N as resolveExistingPathsWithinRoot, s as resolveLsofCommandSync } from "./chrome-CKy31bWh.js";
+import { r as isLoopbackHost } from "./ws-Do6yaRWR.js";
+import { a as readFileWithinRoot, c as writeFileWithinRoot, i as openFileWithinRoot, l as PATH_ALIAS_POLICIES, n as copyFileWithinRoot, r as createRootScopedReadFile, t as SafeOpenError } from "./fs-safe-DMWtsz4J.js";
+import { i as hasErrnoCode, o as readErrorName, r as formatErrorMessage } from "./errors-0-at0aYV.js";
+import { a as isBlockedHostnameOrIp, l as normalizeHostname, n as SsrFBlockedError } from "./proxy-env-D4WYaw6X.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-CIKAlvUL.js";
-import { A as issueDeviceBootstrapToken, C as callGatewayLeastPrivilege, D as gatewayErrorShapeOf, E as gatewayErrorReason, O as validateSecretsResolveResult, S as callGateway, T as resolveLeastPrivilegeOperatorScopesForMethod, _ as resolveSessionReference, a as buildAgentToAgentReplyContext, b as clearActiveCoordinationDepth, c as resolvePingPongTurns, d as createSessionVisibilityGuard, f as resolveEffectiveSessionToolsVisibility, g as resolveMainSessionAlias, h as resolveInternalSessionKey, i as buildAgentToAgentMessageContext, k as SESSION_LABEL_MAX_LENGTH, l as AuthorizationError, m as resolveDisplaySessionKey, n as requestAuthorizedNudge, o as isAnnounceSkip, p as resolveSandboxedSessionToolContext, r as buildAgentToAgentAnnounceContext, s as isReplySkip, u as createAgentToAgentPolicy, v as resolveVisibleSessionReference, w as randomIdempotencyKey, x as setActiveCoordinationDepth, y as shouldResolveSessionIdInput } from "./nudge-Dd9wU1K5.js";
-import { A as formatToolSummary, C as extractAssistantThinking, D as stripDowngradedToolCallText, E as isAssistantMessage, M as stripReasoningTagsFromText, O as stripMinimaxToolCallXml, S as extractAssistantText$1, T as inferToolMetaFromArgs, _ as createInlineCodeState, a as isEmbeddedPiRunActive, b as onAgentEvent, d as handleMessageEnd, f as handleMessageStart, g as buildCodeSpanIndex, h as emitEmbeddedAgentEvent, i as endInFlightEmbeddedAttempt, j as resolveToolDisplay, k as stripThinkingTagsFromText, l as setActiveEmbeddedRun, m as endModelCall, n as beginInFlightEmbeddedAttempt, o as isEmbeddedPiRunStreaming, p as handleMessageUpdate, r as clearActiveEmbeddedRun, s as queueEmbeddedPiMessage, t as abortEmbeddedPiRun, u as waitForEmbeddedPiRunEnd, w as formatReasoningMessage, x as registerAgentRunContext, y as emitAgentEvent } from "./runs-CPjMwHXQ.js";
-import { C as getDefaultMediaLocalRoots, S as getAgentScopedMediaLocalRoots, _ as resolveChunkNewlinePacking, a as resolveMarkdownTableMode, b as fetchRemoteMedia, c as loadWebMediaRaw, d as chunkMarkdownText, f as chunkMarkdownTextWithMode, g as resolveChunkMode, h as resolveChunkDelivery, l as chunkByNewline, m as chunkTextWithMode, o as getDefaultLocalRoots, p as chunkText, s as loadWebMedia, v as resolveTextChunkLimit, x as readResponseWithLimit, y as MediaFetchError } from "./outbound-attachment-CKATrxgO.js";
-import { a as bindAbortRelay, i as resolveProxyFetchFromEnv, n as withStrictGuardedFetchMode, o as fetchWithTimeout, r as withTrustedEnvProxyGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-DuBGo4VE.js";
-import { i as executeWithApiKeyRotation, n as resolveMemorySearchConfig, r as collectProviderApiKeysForExecution } from "./manager-BvLLls5L.js";
-import { i as AGENT_LANE_SUBAGENT, r as AGENT_LANE_NESTED, t as startUserSessionRun } from "./user-run-recording-BVpLQDqe.js";
-import { a as getGatewayInstanceId, n as deriveSessionRunId, o as resolveSessionRunStore, r as inferSessionRunKind, t as createSessionRunRecorder } from "./recorder-C3f7IlHZ.js";
-import { c as enqueueAgentTurn, d as peekDelayedAgentTurn, f as setDelayedReleaseHold, i as AGENT_TURN_TOPIC, l as isClaimableAgentTurnWorkId, m as KeyedAsyncQueue, p as WORKSPACE_LANE_DENIED_REASON, r as tryGetAgentTurnRuntime, s as clearDelayedReleaseHold, u as mergeDelayedAgentTurn } from "./agent-turn-runner-faZvyYiv.js";
-import { a as resolveSignalRpcContext, c as streamSignalEvents, n as sendReadReceiptSignal, o as signalCheck, r as sendTypingSignal, s as signalRpcRequest, t as sendMessageSignal, u as resolveFetch } from "./send-BnVk7V-5.js";
-import { a as DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS, c as normalizeIMessageHandle, i as createIMessageRpcClient, l as parseIMessageTarget, o as formatIMessageChatTarget, r as convertMarkdownTables, s as isAllowedIMessageSender, t as sendMessageIMessage } from "./send-DDBl5H1k.js";
-import { m as normalizeExtraMemoryPaths, p as listMemoryFiles } from "./query-expansion-feTsk3WF.js";
-import { t as isQmdScopeAllowed } from "./qmd-scope-CyWbQgiS.js";
+import { A as issueDeviceBootstrapToken, C as callGatewayLeastPrivilege, D as gatewayErrorShapeOf, E as gatewayErrorReason, O as validateSecretsResolveResult, S as callGateway, T as resolveLeastPrivilegeOperatorScopesForMethod, _ as resolveSessionReference, a as buildAgentToAgentReplyContext, b as clearActiveCoordinationDepth, c as resolvePingPongTurns, d as createSessionVisibilityGuard, f as resolveEffectiveSessionToolsVisibility, g as resolveMainSessionAlias, h as resolveInternalSessionKey, i as buildAgentToAgentMessageContext, k as SESSION_LABEL_MAX_LENGTH, l as AuthorizationError, m as resolveDisplaySessionKey, n as requestAuthorizedNudge, o as isAnnounceSkip, p as resolveSandboxedSessionToolContext, r as buildAgentToAgentAnnounceContext, s as isReplySkip, u as createAgentToAgentPolicy, v as resolveVisibleSessionReference, w as randomIdempotencyKey, x as setActiveCoordinationDepth, y as shouldResolveSessionIdInput } from "./nudge-DZuNGDE_.js";
+import { A as formatToolSummary, C as extractAssistantThinking, D as stripDowngradedToolCallText, E as isAssistantMessage, M as stripReasoningTagsFromText, O as stripMinimaxToolCallXml, S as extractAssistantText$1, T as inferToolMetaFromArgs, _ as createInlineCodeState, a as isEmbeddedPiRunActive, b as onAgentEvent, d as handleMessageEnd, f as handleMessageStart, g as buildCodeSpanIndex, h as emitEmbeddedAgentEvent, i as endInFlightEmbeddedAttempt, j as resolveToolDisplay, k as stripThinkingTagsFromText, l as setActiveEmbeddedRun, m as endModelCall, n as beginInFlightEmbeddedAttempt, o as isEmbeddedPiRunStreaming, p as handleMessageUpdate, r as clearActiveEmbeddedRun, s as queueEmbeddedPiMessage, t as abortEmbeddedPiRun, u as waitForEmbeddedPiRunEnd, w as formatReasoningMessage, x as registerAgentRunContext, y as emitAgentEvent } from "./runs-BIabbRe5.js";
+import { C as getDefaultMediaLocalRoots, S as getAgentScopedMediaLocalRoots, _ as resolveChunkNewlinePacking, a as resolveMarkdownTableMode, b as fetchRemoteMedia, c as loadWebMediaRaw, d as chunkMarkdownText, f as chunkMarkdownTextWithMode, g as resolveChunkMode, h as resolveChunkDelivery, l as chunkByNewline, m as chunkTextWithMode, o as getDefaultLocalRoots, p as chunkText, s as loadWebMedia, v as resolveTextChunkLimit, x as readResponseWithLimit, y as MediaFetchError } from "./outbound-attachment-BsEApkFu.js";
+import { a as bindAbortRelay, i as resolveProxyFetchFromEnv, n as withStrictGuardedFetchMode, o as fetchWithTimeout, r as withTrustedEnvProxyGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-BaBd9ZVm.js";
+import { i as executeWithApiKeyRotation, n as resolveMemorySearchConfig, r as collectProviderApiKeysForExecution } from "./manager-B4xc1xN6.js";
+import { i as AGENT_LANE_SUBAGENT, r as AGENT_LANE_NESTED, t as startUserSessionRun } from "./user-run-recording-C1LRU5Lb.js";
+import { a as getGatewayInstanceId, n as deriveSessionRunId, o as resolveSessionRunStore, r as inferSessionRunKind, t as createSessionRunRecorder } from "./recorder-dKE74HOC.js";
+import { c as enqueueAgentTurn, d as peekDelayedAgentTurn, f as setDelayedReleaseHold, i as AGENT_TURN_TOPIC, l as isClaimableAgentTurnWorkId, m as KeyedAsyncQueue, p as WORKSPACE_LANE_DENIED_REASON, r as tryGetAgentTurnRuntime, s as clearDelayedReleaseHold, u as mergeDelayedAgentTurn } from "./agent-turn-runner-BfXiXNe2.js";
+import { a as resolveSignalRpcContext, c as streamSignalEvents, n as sendReadReceiptSignal, o as signalCheck, r as sendTypingSignal, s as signalRpcRequest, t as sendMessageSignal, u as resolveFetch } from "./send-BQzswQlt.js";
+import { a as DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS, c as normalizeIMessageHandle, i as createIMessageRpcClient, l as parseIMessageTarget, o as formatIMessageChatTarget, r as convertMarkdownTables, s as isAllowedIMessageSender, t as sendMessageIMessage } from "./send-BTp_lz-m.js";
+import { m as normalizeExtraMemoryPaths, p as listMemoryFiles } from "./query-expansion-GZKwviqQ.js";
+import { t as isQmdScopeAllowed } from "./qmd-scope-DMUA3Vq9.js";
 import { createRequire } from "node:module";
 import * as path$1 from "node:path";
 import path, { basename, isAbsolute, join } from "node:path";
-import fs, { constants, existsSync, mkdirSync, mkdtempSync, promises, readFileSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import syncFs, { constants, existsSync, mkdirSync, mkdtempSync, promises, readFileSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import os, { homedir } from "node:os";
-import JSON5 from "json5";
-import * as fs$2 from "node:fs/promises";
-import fs$1, { open } from "node:fs/promises";
+import json5 from "json5";
+import * as fs$1 from "node:fs/promises";
+import fs, { open } from "node:fs/promises";
 import { isDeepStrictEqual, promisify } from "node:util";
 import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
 import process$1 from "node:process";
@@ -57,7 +57,7 @@ import { DefaultResourceLoader, SessionManager, SettingsManager, convertToLlm, c
 import { EdgeTTS } from "node-edge-tts";
 import MarkdownIt from "markdown-it";
 import net from "node:net";
-import WebSocket$1 from "ws";
+import WebSocket from "ws";
 import { Worker } from "node:worker_threads";
 import { createJiti } from "jiti";
 import { AsyncLocalStorage } from "node:async_hooks";
@@ -2742,7 +2742,7 @@ function setPromptSourceCacheEntry(key, entry) {
 }
 function readOpenFileUtf8(fd) {
 	return new Promise((resolve, reject) => {
-		fs.readFile(fd, "utf-8", (error, data) => {
+		syncFs.readFile(fd, "utf-8", (error, data) => {
 			if (error) {
 				reject(error);
 				return;
@@ -2753,7 +2753,7 @@ function readOpenFileUtf8(fd) {
 }
 function closeOpenFile(fd) {
 	return new Promise((resolve, reject) => {
-		fs.close(fd, (error) => {
+		syncFs.close(fd, (error) => {
 			if (error) {
 				reject(error);
 				return;
@@ -3162,7 +3162,7 @@ function resolveWorkspaceLane(params) {
 }
 async function pathExists(targetPath) {
 	try {
-		await fs$1.access(targetPath);
+		await fs.access(targetPath);
 		return true;
 	} catch {
 		return false;
@@ -3170,7 +3170,7 @@ async function pathExists(targetPath) {
 }
 async function getExistingPathState(targetPath) {
 	try {
-		const stats = await fs$1.lstat(targetPath);
+		const stats = await fs.lstat(targetPath);
 		if (stats.isSymbolicLink()) return "other";
 		return stats.isDirectory() ? "directory" : "other";
 	} catch {
@@ -3179,7 +3179,7 @@ async function getExistingPathState(targetPath) {
 }
 async function pathLexicallyExists(targetPath) {
 	try {
-		await fs$1.lstat(targetPath);
+		await fs.lstat(targetPath);
 		return true;
 	} catch {
 		return false;
@@ -3200,9 +3200,9 @@ async function copyIfMissing(params) {
 	if (!opened.ok) return opened.reason === "path" ? "missing-source" : "invalid";
 	let content;
 	try {
-		content = fs.readFileSync(opened.fd);
+		content = syncFs.readFileSync(opened.fd);
 	} finally {
-		fs.closeSync(opened.fd);
+		syncFs.closeSync(opened.fd);
 	}
 	await writeFileWithinRoot({
 		rootDir: params.targetRoot,
@@ -3244,9 +3244,9 @@ async function resolveWorkspaceLaneForTurn(params) {
 	const existed = pathState === "directory";
 	if (!existed) {
 		const parentDir = path.dirname(resolution.effectiveWorkspaceDir);
-		await fs$1.mkdir(parentDir, { recursive: true });
+		await fs.mkdir(parentDir, { recursive: true });
 		const tempDir = path.join(parentDir, `.${path.basename(resolution.effectiveWorkspaceDir)}.creating-${randomUUID()}`);
-		await fs$1.mkdir(tempDir);
+		await fs.mkdir(tempDir);
 		try {
 			for (const file of config?.copiedOnCreate ?? DEFAULT_COPIED_ON_CREATE_FILES) {
 				const decision = await copyIfMissing({
@@ -3262,7 +3262,7 @@ async function resolveWorkspaceLaneForTurn(params) {
 					decision
 				});
 			}
-			if (!await fs$1.rename(tempDir, resolution.effectiveWorkspaceDir).then(() => true, (err) => {
+			if (!await fs.rename(tempDir, resolution.effectiveWorkspaceDir).then(() => true, (err) => {
 				if (err.code === "EEXIST" || err.code === "ENOTEMPTY") return false;
 				throw err;
 			})) return {
@@ -3270,7 +3270,7 @@ async function resolveWorkspaceLaneForTurn(params) {
 				created: false
 			};
 		} finally {
-			await fs$1.rm(tempDir, {
+			await fs.rm(tempDir, {
 				recursive: true,
 				force: true
 			});
@@ -3545,7 +3545,7 @@ async function resolveOpenClawDocsPath(params) {
 	const workspaceDir = params.workspaceDir?.trim();
 	if (workspaceDir) {
 		const workspaceDocs = path.join(workspaceDir, "docs");
-		if (fs.existsSync(workspaceDocs)) return workspaceDocs;
+		if (syncFs.existsSync(workspaceDocs)) return workspaceDocs;
 	}
 	const packageRoot = await resolveOpenClawPackageRoot({
 		cwd: params.cwd,
@@ -3554,7 +3554,7 @@ async function resolveOpenClawDocsPath(params) {
 	});
 	if (packageRoot) {
 		const packageDocs = path.join(packageRoot, "docs");
-		if (fs.existsSync(path.join(packageDocs, "docs.json"))) return packageDocs;
+		if (syncFs.existsSync(path.join(packageDocs, "docs.json"))) return packageDocs;
 	}
 	return DOCS_SITE_URL;
 }
@@ -4414,7 +4414,7 @@ async function linkIdentity(params) {
 const log$69 = createSubsystemLogger("model-catalog");
 const modelCatalogPromiseState = resolveProcessScopedMap(Symbol.for("openclaw.agents.model-catalog.modelCatalogPromise"));
 const hasLoggedModelCatalogErrorState = resolveProcessScopedMap(Symbol.for("openclaw.agents.model-catalog.hasLoggedModelCatalogError"));
-const defaultImportPiSdk = () => import("./pi-model-discovery-Dgbp4zjx.js").then((n) => n.r);
+const defaultImportPiSdk = () => import("./pi-model-discovery-CtfGh_up.js").then((n) => n.r);
 let importPiSdk = defaultImportPiSdk;
 function getModelCatalogPromise() {
 	return modelCatalogPromiseState.get("value") ?? null;
@@ -4893,7 +4893,7 @@ var MediaAttachmentCache = class {
 			const size = await this.ensureLocalStat(entry);
 			if (entry.resolvedPath) {
 				if (size !== void 0 && size > params.maxBytes) throw new MediaUnderstandingSkipError("maxBytes", `Attachment ${params.attachmentIndex + 1} exceeds maxBytes ${params.maxBytes}`);
-				const buffer = await fs$1.readFile(entry.resolvedPath);
+				const buffer = await fs.readFile(entry.resolvedPath);
 				entry.buffer = buffer;
 				entry.bufferMime = entry.bufferMime ?? entry.attachment.mime ?? await detectMime({
 					buffer,
@@ -4962,10 +4962,10 @@ var MediaAttachmentCache = class {
 			prefix: "openclaw-media",
 			extension: path.extname(bufferResult.fileName || "") || ""
 		});
-		await fs$1.writeFile(tmpPath, bufferResult.buffer);
+		await fs.writeFile(tmpPath, bufferResult.buffer);
 		entry.tempPath = tmpPath;
 		entry.tempCleanup = async () => {
-			await fs$1.unlink(tmpPath).catch(() => {});
+			await fs.unlink(tmpPath).catch(() => {});
 		};
 		return {
 			path: tmpPath,
@@ -5013,13 +5013,13 @@ var MediaAttachmentCache = class {
 		if (entry.statSize !== void 0) return entry.statSize;
 		try {
 			const currentPath = entry.resolvedPath;
-			const stat = await fs$1.stat(currentPath);
+			const stat = await fs.stat(currentPath);
 			if (!stat.isFile()) {
 				entry.resolvedPath = void 0;
 				entry.localPathSecurityRejected = true;
 				return;
 			}
-			const canonicalPath = await fs$1.realpath(currentPath);
+			const canonicalPath = await fs.realpath(currentPath);
 			if (!isInboundPathAllowed({
 				filePath: canonicalPath,
 				roots: await this.getCanonicalLocalPathRoots()
@@ -5043,7 +5043,7 @@ var MediaAttachmentCache = class {
 		if (this.canonicalLocalPathRoots) return await this.canonicalLocalPathRoots;
 		this.canonicalLocalPathRoots = (async () => mergeInboundPathRoots(this.localPathRoots, await Promise.all(this.localPathRoots.map(async (root) => {
 			if (root.includes("*")) return root;
-			return await fs$1.realpath(root).catch(() => root);
+			return await fs.realpath(root).catch(() => root);
 		}))))();
 		return await this.canonicalLocalPathRoots;
 	}
@@ -5109,7 +5109,7 @@ function stripCarriedTranscriptFromBody(body, carried) {
 async function fileExists(filePath) {
 	if (!filePath) return false;
 	try {
-		await fs$1.stat(filePath);
+		await fs.stat(filePath);
 		return true;
 	} catch {
 		return false;
@@ -5743,7 +5743,7 @@ async function resolveCliOutput(params) {
 	const commandId = commandBase(params.command);
 	const fileOutput = commandId === "whisper-cli" ? resolveWhisperCppOutputPath(params.args) : commandId === "whisper" ? resolveWhisperOutputPath(params.args, params.mediaPath) : commandId === "parakeet-mlx" ? resolveParakeetOutputPath(params.args, params.mediaPath) : null;
 	if (fileOutput && await fileExists(fileOutput)) try {
-		const content = await fs$1.readFile(fileOutput, "utf8");
+		const content = await fs.readFile(fileOutput, "utf8");
 		if (content.trim()) return content.trim();
 	} catch {}
 	if (commandId === "gemini") {
@@ -6080,10 +6080,10 @@ async function runCliEntry$1(params) {
 		timeoutMs
 	});
 	if (capability === "audio") assertMinAudioSize({
-		size: (await fs$1.stat(pathResult.path)).size,
+		size: (await fs.stat(pathResult.path)).size,
 		attachmentIndex: params.attachmentIndex
 	});
-	const outputDir = await fs$1.mkdtemp(path.join(resolvePreferredOpenClawTmpDir(), "openclaw-media-cli-"));
+	const outputDir = await fs.mkdtemp(path.join(resolvePreferredOpenClawTmpDir(), "openclaw-media-cli-"));
 	const mediaPath = pathResult.path;
 	const outputBase = path.join(outputDir, path.parse(mediaPath).name);
 	const templCtx = {
@@ -6117,7 +6117,7 @@ async function runCliEntry$1(params) {
 			model: command
 		};
 	} finally {
-		await fs$1.rm(outputDir, {
+		await fs.rm(outputDir, {
 			recursive: true,
 			force: true
 		}).catch(() => {});
@@ -6162,9 +6162,9 @@ function candidateBinaryNames(name) {
 }
 async function isExecutable(filePath) {
 	try {
-		if (!(await fs$1.stat(filePath)).isFile()) return false;
+		if (!(await fs.stat(filePath)).isFile()) return false;
 		if (process.platform === "win32") return true;
-		await fs$1.access(filePath, constants.X_OK);
+		await fs.access(filePath, constants.X_OK);
 		return true;
 	} catch {
 		return false;
@@ -9259,7 +9259,7 @@ async function resolveAgentSessionDirs(stateDir) {
 	const agentsDir = path.join(stateDir, "agents");
 	let entries = [];
 	try {
-		entries = await fs$1.readdir(agentsDir, { withFileTypes: true });
+		entries = await fs.readdir(agentsDir, { withFileTypes: true });
 	} catch (err) {
 		if (err.code === "ENOENT") return [];
 		throw err;
@@ -12742,7 +12742,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-CY4Fs4RX.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-DsuMPE0S.js").then((n) => n.n);
 		const outboundSession = buildOutboundSessionContext({
 			cfg,
 			agentId: resolvedAgentId,
@@ -14787,7 +14787,7 @@ async function sendTranscriptEcho(params) {
 	}
 	const text = formatEchoTranscript(transcript, params.format ?? DEFAULT_ECHO_TRANSCRIPT_FORMAT);
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-CY4Fs4RX.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-DsuMPE0S.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg,
 			channel: normalizedChannel,
@@ -17489,7 +17489,7 @@ function getPairingAdapter(channelId) {
 //#region src/plugin-sdk/json-store.ts
 async function readJsonFileWithFallback(filePath, fallback) {
 	try {
-		const parsed = safeParseJson(await fs.promises.readFile(filePath, "utf-8"));
+		const parsed = safeParseJson(await syncFs.promises.readFile(filePath, "utf-8"));
 		if (parsed == null) return {
 			value: fallback,
 			exists: true
@@ -17576,7 +17576,7 @@ async function readPairingRequests(filePath) {
 }
 async function ensureJsonFile(filePath, fallback) {
 	try {
-		await fs.promises.access(filePath);
+		await syncFs.promises.access(filePath);
 	} catch {
 		await writeJsonFile(filePath, fallback);
 	}
@@ -17732,7 +17732,7 @@ function resolveAllowFromReadCacheOrMissing(filePath, stat) {
 async function readAllowFromStateForPathWithExists(channel, filePath) {
 	let stat = null;
 	try {
-		stat = await fs.promises.stat(filePath);
+		stat = await syncFs.promises.stat(filePath);
 	} catch (err) {
 		if (err.code !== "ENOENT") throw err;
 	}
@@ -17775,7 +17775,7 @@ async function writeAllowFromState(filePath, allowFrom) {
 	});
 	let stat = null;
 	try {
-		stat = await fs.promises.stat(filePath);
+		stat = await syncFs.promises.stat(filePath);
 	} catch {}
 	setAllowFromReadCache(filePath, {
 		exists: true,
@@ -18942,7 +18942,7 @@ function mergeLegacyAgent(current, legacy) {
 }
 function ensureDir$1(filePath) {
 	const dir = path.dirname(filePath);
-	fs.mkdirSync(dir, { recursive: true });
+	syncFs.mkdirSync(dir, { recursive: true });
 }
 function coerceAllowlistEntries(allowlist) {
 	if (!Array.isArray(allowlist) || allowlist.length === 0) return Array.isArray(allowlist) ? allowlist : void 0;
@@ -19012,11 +19012,11 @@ function generateToken() {
 function loadExecApprovals() {
 	const filePath = resolveExecApprovalsPath();
 	try {
-		if (!fs.existsSync(filePath)) return normalizeExecApprovals({
+		if (!syncFs.existsSync(filePath)) return normalizeExecApprovals({
 			version: 1,
 			agents: {}
 		});
-		const raw = fs.readFileSync(filePath, "utf8");
+		const raw = syncFs.readFileSync(filePath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (parsed?.version !== 1) return normalizeExecApprovals({
 			version: 1,
@@ -19033,9 +19033,9 @@ function loadExecApprovals() {
 function saveExecApprovals(file) {
 	const filePath = resolveExecApprovalsPath();
 	ensureDir$1(filePath);
-	fs.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}\n`, { mode: 384 });
+	syncFs.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}\n`, { mode: 384 });
 	try {
-		fs.chmodSync(filePath, 384);
+		syncFs.chmodSync(filePath, 384);
 	} catch {}
 }
 function ensureExecApprovals() {
@@ -19499,18 +19499,18 @@ function applyPathPrepend(env, prepend, options) {
 function resolvePowerShellPath() {
 	const programFiles = process.env.ProgramFiles || process.env.PROGRAMFILES || "C:\\Program Files";
 	const pwsh7 = path.join(programFiles, "PowerShell", "7", "pwsh.exe");
-	if (fs.existsSync(pwsh7)) return pwsh7;
+	if (syncFs.existsSync(pwsh7)) return pwsh7;
 	const programW6432 = process.env.ProgramW6432;
 	if (programW6432 && programW6432 !== programFiles) {
 		const pwsh7Alt = path.join(programW6432, "PowerShell", "7", "pwsh.exe");
-		if (fs.existsSync(pwsh7Alt)) return pwsh7Alt;
+		if (syncFs.existsSync(pwsh7Alt)) return pwsh7Alt;
 	}
 	const pwshInPath = resolveShellFromPath("pwsh");
 	if (pwshInPath) return pwshInPath;
 	const systemRoot = process.env.SystemRoot || process.env.WINDIR;
 	if (systemRoot) {
 		const candidate = path.join(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
-		if (fs.existsSync(candidate)) return candidate;
+		if (syncFs.existsSync(candidate)) return candidate;
 	}
 	return "powershell.exe";
 }
@@ -19548,7 +19548,7 @@ function resolveShellFromPath(name) {
 	for (const entry of entries) {
 		const candidate = path.join(entry, name);
 		try {
-			fs.accessSync(candidate, fs.constants.X_OK);
+			syncFs.accessSync(candidate, syncFs.constants.X_OK);
 			return candidate;
 		} catch {}
 	}
@@ -20486,7 +20486,7 @@ async function resolveSandboxWorkdir(params) {
 			cwd: process.cwd(),
 			root: params.sandbox.workspaceDir
 		});
-		if (!(await fs$1.stat(resolved.resolved)).isDirectory()) throw new Error("workdir is not a directory");
+		if (!(await fs.stat(resolved.resolved)).isDirectory()) throw new Error("workdir is not a directory");
 		const relative = resolved.relative ? resolved.relative.split(path.sep).join(path.posix.sep) : "";
 		const containerWorkdir = relative ? path.posix.join(params.sandbox.containerWorkdir, relative) : params.sandbox.containerWorkdir;
 		return {
@@ -21071,7 +21071,7 @@ async function imageResult(params) {
 	}, params.label, params.imageSanitization);
 }
 async function imageResultFromFile(params) {
-	const buf = await fs$1.readFile(params.path);
+	const buf = await fs.readFile(params.path);
 	const mimeType = await detectMime({ buffer: buf.slice(0, 256) }) ?? "image/png";
 	return await imageResult({
 		label: params.label,
@@ -22006,13 +22006,13 @@ async function validateScriptFileForShellBleed(params) {
 			cwd: params.workdir,
 			root: params.workdir
 		});
-		stat = await fs$1.stat(absPath);
+		stat = await fs.stat(absPath);
 	} catch {
 		return;
 	}
 	if (!stat.isFile()) return;
 	if (stat.size > 512 * 1024) return;
-	const content = await fs$1.readFile(absPath, "utf-8");
+	const content = await fs.readFile(absPath, "utf-8");
 	const first = /\$[A-Z_][A-Z0-9_]{1,}/g.exec(content);
 	if (first) {
 		const idx = first.index;
@@ -23432,7 +23432,7 @@ function walkUpFrom(startDir, opts, resolveAtDir) {
 function hasGitMarker(repoRoot) {
 	const gitPath = path.join(repoRoot, ".git");
 	try {
-		const stat = fs.statSync(gitPath);
+		const stat = syncFs.statSync(gitPath);
 		return stat.isDirectory() || stat.isFile();
 	} catch {
 		return false;
@@ -23444,10 +23444,10 @@ function findGitRoot(startDir, opts = {}) {
 function resolveGitDirFromMarker(repoRoot) {
 	const gitPath = path.join(repoRoot, ".git");
 	try {
-		const stat = fs.statSync(gitPath);
+		const stat = syncFs.statSync(gitPath);
 		if (stat.isDirectory()) return gitPath;
 		if (!stat.isFile()) return null;
-		const match = fs.readFileSync(gitPath, "utf-8").match(/gitdir:\s*(.+)/i);
+		const match = syncFs.readFileSync(gitPath, "utf-8").match(/gitdir:\s*(.+)/i);
 		if (!match?.[1]) return null;
 		return path.resolve(repoRoot, match[1].trim());
 	} catch {
@@ -23514,7 +23514,7 @@ const resolveCommitHash = (options = {}) => {
 			cachedCommit = null;
 			return cachedCommit;
 		}
-		const head = fs.readFileSync(headPath, "utf-8").trim();
+		const head = syncFs.readFileSync(headPath, "utf-8").trim();
 		if (!head) {
 			cachedCommit = null;
 			return cachedCommit;
@@ -23522,7 +23522,7 @@ const resolveCommitHash = (options = {}) => {
 		if (head.startsWith("ref:")) {
 			const ref = head.replace(/^ref:\s*/i, "").trim();
 			const refPath = path.resolve(path.dirname(headPath), ref);
-			cachedCommit = formatCommit(fs.readFileSync(refPath, "utf-8").trim());
+			cachedCommit = formatCommit(syncFs.readFileSync(refPath, "utf-8").trim());
 			return cachedCommit;
 		}
 		cachedCommit = formatCommit(head);
@@ -27338,13 +27338,13 @@ function listSkillCommandsForAgents(params) {
 	const workspaceFilters = /* @__PURE__ */ new Map();
 	for (const agentId of agentIds) {
 		const workspaceDir = resolveAgentWorkspaceDir(params.cfg, agentId);
-		if (!fs.existsSync(workspaceDir)) {
+		if (!syncFs.existsSync(workspaceDir)) {
 			logVerbose(`Skipping agent "${agentId}": workspace does not exist: ${workspaceDir}`);
 			continue;
 		}
 		let canonicalDir;
 		try {
-			canonicalDir = fs.realpathSync(workspaceDir);
+			canonicalDir = syncFs.realpathSync(workspaceDir);
 		} catch {
 			logVerbose(`Skipping agent "${agentId}": cannot resolve workspace: ${workspaceDir}`);
 			continue;
@@ -28534,7 +28534,7 @@ function resolveRepoRoot(params) {
 	const configured = params.config?.agents?.defaults?.repoRoot?.trim();
 	if (configured) try {
 		const resolved = path.resolve(configured);
-		if (fs.statSync(resolved).isDirectory()) return resolved;
+		if (syncFs.statSync(resolved).isDirectory()) return resolved;
 	} catch {}
 	const candidates = [params.workspaceDir, params.cwd].map((value) => value?.trim()).filter(Boolean);
 	const seen = /* @__PURE__ */ new Set();
@@ -29053,7 +29053,7 @@ async function readForwardAndSort(query, sessionId) {
 //#region src/auto-reply/reply/commands-export-session.ts
 const EXPORT_HTML_DIR = path.join(path.dirname(fileURLToPath(import.meta.url)), "export-html");
 function loadTemplate(fileName) {
-	return fs.readFileSync(path.join(EXPORT_HTML_DIR, fileName), "utf-8");
+	return syncFs.readFileSync(path.join(EXPORT_HTML_DIR, fileName), "utf-8");
 }
 function generateHtml(sessionData) {
 	const template = loadTemplate("template.html");
@@ -29156,8 +29156,8 @@ async function buildExportSessionReply(params) {
 	const defaultFileName = `openclaw-session-${entry.sessionId.slice(0, 8)}-${timestamp}.html`;
 	const outputPath = args.outputPath ? path.resolve(args.outputPath.startsWith("~") ? args.outputPath.replace("~", process.env.HOME ?? "") : args.outputPath) : path.join(params.workspaceDir, defaultFileName);
 	const outputDir = path.dirname(outputPath);
-	if (!fs.existsSync(outputDir)) fs.mkdirSync(outputDir, { recursive: true });
-	fs.writeFileSync(outputPath, html, "utf-8");
+	if (!syncFs.existsSync(outputDir)) syncFs.mkdirSync(outputDir, { recursive: true });
+	syncFs.writeFileSync(outputPath, html, "utf-8");
 	const relativePath = path.relative(params.workspaceDir, outputPath);
 	return { text: [
 		"✅ Session exported!",
@@ -29332,8 +29332,8 @@ function resolveZaiApiKey() {
 	}
 	try {
 		const authPath = path.join(resolveRequiredHomeDir(process.env, os.homedir), ".pi", "agent", "auth.json");
-		if (!fs.existsSync(authPath)) return;
-		const data = JSON.parse(fs.readFileSync(authPath, "utf-8"));
+		if (!syncFs.existsSync(authPath)) return;
+		const data = JSON.parse(syncFs.readFileSync(authPath, "utf-8"));
 		return data["z-ai"]?.access || data.zai?.access;
 	} catch {
 		return;
@@ -32752,8 +32752,8 @@ function normalizeSessionKey(value) {
 }
 function readSessionStore(storePath) {
 	try {
-		const raw = fs.readFileSync(storePath, "utf-8");
-		const parsed = JSON5.parse(raw);
+		const raw = syncFs.readFileSync(storePath, "utf-8");
+		const parsed = json5.parse(raw);
 		if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) return parsed;
 	} catch {}
 	return {};
@@ -34465,7 +34465,7 @@ async function createModelSelectionState(params) {
 		}
 	}
 	if (sessionEntry && sessionStore && sessionKey && sessionEntry.authProfileOverride) {
-		const { ensureAuthProfileStore } = await import("./model-selection-CbMZx9fR.js").then((n) => n.N);
+		const { ensureAuthProfileStore } = await import("./model-selection-Ds5bEVQ2.js").then((n) => n.N);
 		const profile = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false }).profiles[sessionEntry.authProfileOverride];
 		const providerKey = normalizeProviderId(provider);
 		if (!profile || normalizeProviderId(profile.provider) !== providerKey) await clearSessionAuthProfileOverride({
@@ -38063,7 +38063,7 @@ function asBoolean(value) {
 }
 function resolveTempPathParts(opts) {
 	const tmpDir = opts.tmpDir ?? resolvePreferredOpenClawTmpDir();
-	if (!opts.tmpDir) fs.mkdirSync(tmpDir, {
+	if (!opts.tmpDir) syncFs.mkdirSync(tmpDir, {
 		recursive: true,
 		mode: 448
 	});
@@ -38149,7 +38149,7 @@ async function writeUrlToFile(filePath, url, opts) {
 		if (typeof contentLength === "number" && Number.isFinite(contentLength) && contentLength > MAX_CAMERA_URL_DOWNLOAD_BYTES) throw new Error(`writeUrlToFile: content-length ${contentLength} exceeds max ${MAX_CAMERA_URL_DOWNLOAD_BYTES}`);
 		const body = res.body;
 		if (!body) throw new Error(`failed to download ${url}: empty response body`);
-		const fileHandle = await fs$2.open(filePath, "w");
+		const fileHandle = await fs$1.open(filePath, "w");
 		let thrown;
 		try {
 			const reader = body.getReader();
@@ -38167,7 +38167,7 @@ async function writeUrlToFile(filePath, url, opts) {
 			await fileHandle.close();
 		}
 		if (thrown) {
-			await fs$2.unlink(filePath).catch(() => {});
+			await fs$1.unlink(filePath).catch(() => {});
 			throw thrown;
 		}
 	} finally {
@@ -38180,7 +38180,7 @@ async function writeUrlToFile(filePath, url, opts) {
 }
 async function writeBase64ToFile(filePath, base64) {
 	const buf = Buffer.from(base64, "base64");
-	await fs$2.writeFile(filePath, buf);
+	await fs$1.writeFile(filePath, buf);
 	return {
 		path: filePath,
 		bytes: buf.length
@@ -38265,7 +38265,7 @@ async function readJsonlFromPath(jsonlPath) {
 		if (shouldLogVerbose()) logVerbose(`Blocked canvas jsonlPath outside allowed roots: ${resolved}`);
 		throw new Error("jsonlPath outside allowed roots");
 	}
-	const canonical = await fs$1.realpath(resolved).catch(() => resolved);
+	const canonical = await fs.realpath(resolved).catch(() => resolved);
 	if (!isInboundPathAllowed({
 		filePath: canonical,
 		roots
@@ -38273,7 +38273,7 @@ async function readJsonlFromPath(jsonlPath) {
 		if (shouldLogVerbose()) logVerbose(`Blocked canvas jsonlPath outside allowed roots: ${canonical}`);
 		throw new Error("jsonlPath outside allowed roots");
 	}
-	return await fs$1.readFile(canonical, "utf8");
+	return await fs.readFile(canonical, "utf8");
 }
 const CanvasToolSchema = Type.Object({
 	action: stringEnum(CANVAS_ACTIONS),
@@ -39128,12 +39128,12 @@ function resolveRestartSentinelPath(env = process.env) {
 }
 async function writeRestartSentinel(payload, env = process.env) {
 	const filePath = resolveRestartSentinelPath(env);
-	await fs$1.mkdir(path.dirname(filePath), { recursive: true });
+	await fs.mkdir(path.dirname(filePath), { recursive: true });
 	const data = {
 		version: 1,
 		payload
 	};
-	await fs$1.writeFile(filePath, `${JSON.stringify(data, null, 2)}\n`, "utf-8");
+	await fs.writeFile(filePath, `${JSON.stringify(data, null, 2)}\n`, "utf-8");
 	return filePath;
 }
 
@@ -41496,9 +41496,9 @@ function loadExternalCatalogEntries(options) {
 	const entries = [];
 	for (const rawPath of paths) {
 		const resolved = resolveUserPath(rawPath);
-		if (!fs.existsSync(resolved)) continue;
+		if (!syncFs.existsSync(resolved)) continue;
 		try {
-			const payload = JSON.parse(fs.readFileSync(resolved, "utf-8"));
+			const payload = JSON.parse(syncFs.readFileSync(resolved, "utf-8"));
 			entries.push(...parseCatalogEntries(payload));
 		} catch {}
 	}
@@ -50725,18 +50725,18 @@ function appendImagePathsToPrompt(prompt, paths) {
 	return `${trimmed}${trimmed ? "\n\n" : ""}${paths.join("\n")}`;
 }
 async function writeCliImages(images) {
-	const tempDir = await fs$1.mkdtemp(path.join(os.tmpdir(), "openclaw-cli-images-"));
+	const tempDir = await fs.mkdtemp(path.join(os.tmpdir(), "openclaw-cli-images-"));
 	const paths = [];
 	for (let i = 0; i < images.length; i += 1) {
 		const image = images[i];
 		const ext = resolveImageExtension(image.mimeType);
 		const filePath = path.join(tempDir, `image-${i + 1}.${ext}`);
 		const buffer = Buffer.from(image.data, "base64");
-		await fs$1.writeFile(filePath, buffer, { mode: 384 });
+		await fs.writeFile(filePath, buffer, { mode: 384 });
 		paths.push(filePath);
 	}
 	const cleanup = async () => {
-		await fs$1.rm(tempDir, {
+		await fs.rm(tempDir, {
 			recursive: true,
 			force: true
 		});
@@ -52624,10 +52624,10 @@ function resolveCronStorePath(storePath) {
 }
 async function loadCronStore(storePath) {
 	try {
-		const raw = await fs.promises.readFile(storePath, "utf-8");
+		const raw = await syncFs.promises.readFile(storePath, "utf-8");
 		let parsed;
 		try {
-			parsed = JSON5.parse(raw);
+			parsed = json5.parse(raw);
 		} catch (err) {
 			throw new Error(`Failed to parse cron store at ${storePath}: ${String(err)}`, { cause: err });
 		}
@@ -53195,9 +53195,9 @@ async function readPostCompactionContext(workspaceDir) {
 		if (!opened.ok) return null;
 		const sections = extractSections((() => {
 			try {
-				return fs.readFileSync(opened.fd, "utf-8");
+				return syncFs.readFileSync(opened.fd, "utf-8");
 			} finally {
-				fs.closeSync(opened.fd);
+				syncFs.closeSync(opened.fd);
 			}
 		})(), ["Session Startup", "Red Lines"]);
 		if (sections.length === 0) return null;
@@ -54246,7 +54246,7 @@ async function deliverSessionMaintenanceWarning(params) {
 		return;
 	}
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-CY4Fs4RX.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-DsuMPE0S.js").then((n) => n.n);
 		const outboundSession = buildOutboundSessionContext({
 			cfg: params.cfg,
 			sessionKey: params.sessionKey
@@ -55195,7 +55195,7 @@ async function stageSandboxMedia(params) {
 	const remoteMediaCacheDir = ctx.MediaRemoteHost ? path.join(workspaceDir, ".openclaw", "media", "remote-cache", sessionKey) : null;
 	const effectiveWorkspaceDir = sandbox?.workspaceDir ?? remoteMediaCacheDir;
 	if (!effectiveWorkspaceDir) return;
-	await fs$1.mkdir(effectiveWorkspaceDir, { recursive: true });
+	await fs.mkdir(effectiveWorkspaceDir, { recursive: true });
 	const remoteAttachmentRoots = resolveIMessageRemoteAttachmentRoots({
 		cfg,
 		accountId: ctx.AccountId
@@ -55254,8 +55254,8 @@ async function stageLocalFileIntoRoot(params) {
 }
 async function stageRemoteFileIntoRoot(params) {
 	const tmpRoot = resolvePreferredOpenClawTmpDir();
-	await fs$1.mkdir(tmpRoot, { recursive: true });
-	const tmpDir = await fs$1.mkdtemp(path.join(tmpRoot, "stage-sandbox-media-"));
+	await fs.mkdir(tmpRoot, { recursive: true });
+	const tmpDir = await fs.mkdtemp(path.join(tmpRoot, "stage-sandbox-media-"));
 	const tmpPath = path.join(tmpDir, "download");
 	try {
 		await scpFile(params.remoteHost, params.remotePath, tmpPath);
@@ -55266,7 +55266,7 @@ async function stageRemoteFileIntoRoot(params) {
 			maxBytes: params.maxBytes
 		});
 	} finally {
-		await fs$1.rm(tmpDir, {
+		await fs.rm(tmpDir, {
 			recursive: true,
 			force: true
 		}).catch(() => {});
@@ -56284,7 +56284,7 @@ async function resolveHeartbeatPreflight(params) {
 	const workspaceDir = resolveAgentWorkspaceDir(params.cfg, params.agentId);
 	const heartbeatFilePath = path.join(workspaceDir, DEFAULT_HEARTBEAT_FILENAME);
 	try {
-		if (isHeartbeatContentEffectivelyEmpty(await fs$1.readFile(heartbeatFilePath, "utf-8"))) return {
+		if (isHeartbeatContentEffectivelyEmpty(await fs.readFile(heartbeatFilePath, "utf-8"))) return {
 			...basePreflight,
 			skipReason: "empty-heartbeat-file"
 		};
@@ -56560,7 +56560,7 @@ async function runModelGate(spec, ctx) {
 		const isolatedSessionId = randomNonce;
 		const isolatedRunId = randomNonce;
 		const tmpBaseDir = resolvePreferredOpenClawTmpDir();
-		tmpDir = await fs$1.mkdtemp(path.join(tmpBaseDir, "wake-gate-"));
+		tmpDir = await fs.mkdtemp(path.join(tmpBaseDir, "wake-gate-"));
 		const workspaceDir = tmpDir;
 		const prompt = spec.prompt ?? DEFAULT_MODEL_PROMPT;
 		const timeoutMs = spec.timeoutMs ?? DEFAULT_MODEL_TIMEOUT_MS;
@@ -56618,7 +56618,7 @@ async function runModelGate(spec, ctx) {
 		log$35.warn("model gate error", { error: err instanceof Error ? err.message : String(err) });
 		return { wake: false };
 	} finally {
-		if (tmpDir) await fs$1.rm(tmpDir, {
+		if (tmpDir) await fs.rm(tmpDir, {
 			recursive: true,
 			force: true
 		}).catch(() => void 0);
@@ -62939,7 +62939,7 @@ async function detectBinary(name) {
 	if (!isSafeExecutableValue(name)) return false;
 	const resolved = name.startsWith("~") ? resolveUserPath(name) : name;
 	if (path.isAbsolute(resolved) || resolved.startsWith(".") || resolved.includes("/") || resolved.includes("\\")) try {
-		await fs$1.access(resolved);
+		await fs.access(resolved);
 		return true;
 	} catch {
 		return false;
@@ -63615,7 +63615,7 @@ function normalizeAllowList$1(list) {
 async function detectRemoteHostFromCliPath(cliPath) {
 	try {
 		const expanded = cliPath.startsWith("~") ? cliPath.replace(/^~/, process.env.HOME ?? "") : cliPath;
-		const content = await fs$1.readFile(expanded, "utf8");
+		const content = await fs.readFile(expanded, "utf8");
 		const userHostMatch = content.match(/\bssh\b[^\n]*?\s+([a-zA-Z0-9._-]+@[a-zA-Z0-9._-]+)/);
 		if (userHostMatch) return userHostMatch[1];
 		return content.match(/\bssh\b[^\n]*?\s+([a-zA-Z][a-zA-Z0-9._-]*)\s+\S*\bimsg\b/)?.[1];
@@ -63983,7 +63983,7 @@ function getChannelActivity(params) {
 function readFileIfExists(filePath) {
 	if (!filePath) return;
 	try {
-		return fs.readFileSync(filePath, "utf-8").trim();
+		return syncFs.readFileSync(filePath, "utf-8").trim();
 	} catch {
 		return;
 	}
@@ -64646,7 +64646,7 @@ async function downloadLineMedia(messageId, channelAccessToken, maxBytes = 10 *
 		prefix: "line-media",
 		extension: getExtensionForContentType(contentType)
 	});
-	await fs.promises.writeFile(filePath, buffer);
+	await syncFs.promises.writeFile(filePath, buffer);
 	logVerbose(`line: downloaded media ${messageId} to ${filePath} (${buffer.length} bytes)`);
 	return {
 		path: filePath,
@@ -67521,7 +67521,7 @@ function createRuntimeChannel() {
 		reply: {
 			dispatchReplyWithBufferedBlockDispatcher,
 			dispatchInboundMessage,
-			agentCommandFromIngress: async (...args) => (await import("./agent-Y_2aRBZH.js").then((n) => n.n)).agentCommandFromIngress(...args),
+			agentCommandFromIngress: async (...args) => (await import("./agent-BW-Yan08.js").then((n) => n.n)).agentCommandFromIngress(...args),
 			dispatchReplyWithDispatcher,
 			createReplyDispatcherWithTyping,
 			resolveEffectiveMessagesConfig,
@@ -67950,7 +67950,7 @@ async function getMemorySearchManager(params) {
 			if (cached) return { manager: cached };
 		}
 		try {
-			const { QmdMemoryManager } = await import("./qmd-manager-Cdz2xlNp.js");
+			const { QmdMemoryManager } = await import("./qmd-manager-2dro3Ccn.js");
 			const primary = await QmdMemoryManager.create({
 				cfg: params.cfg,
 				agentId: params.agentId,
@@ -67962,7 +67962,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-BvLLls5L.js").then((n) => n.t);
+						const { MemoryIndexManager } = await import("./manager-B4xc1xN6.js").then((n) => n.t);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => {
@@ -67977,7 +67977,7 @@ async function getMemorySearchManager(params) {
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-BvLLls5L.js").then((n) => n.t);
+		const { MemoryIndexManager } = await import("./manager-B4xc1xN6.js").then((n) => n.t);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		return {
@@ -68327,7 +68327,7 @@ const LEGACY_ARCHIVE_DEFAULT_RETENTION_MS = 720 * 60 * 60 * 1e3;
 const log$25 = createSubsystemLogger("config/sessions/legacy-import/archive");
 /** SHA-256 over the file's bytes; null when the file is gone (ENOENT). Other errors propagate. */
 async function sourceIdentity(filePath) {
-	const handle = await fs$1.open(filePath, "r").catch((error) => {
+	const handle = await fs.open(filePath, "r").catch((error) => {
 		if (error.code === "ENOENT") return null;
 		throw error;
 	});
@@ -68380,9 +68380,9 @@ function fallbackArchiveDest(source, archiveRoot) {
 async function copyVerifiedTo(sourcePath, dest, expected) {
 	const tmp = `${dest}.tmp-${randomUUID()}`;
 	try {
-		const handle = await fs$1.open(tmp, "wx", 384);
+		const handle = await fs.open(tmp, "wx", 384);
 		try {
-			const sourceHandle = await fs$1.open(sourcePath, "r");
+			const sourceHandle = await fs.open(sourcePath, "r");
 			try {
 				const chunk = Buffer.allocUnsafe(256 * 1024);
 				let size = 0;
@@ -68399,18 +68399,18 @@ async function copyVerifiedTo(sourcePath, dest, expected) {
 		} finally {
 			await handle.close();
 		}
-		await fs$1.chmod(tmp, 384);
+		await fs.chmod(tmp, 384);
 		const copied = await identityOf(tmp);
 		if (!copied || copied.fingerprint !== expected.fingerprint) throw new Error(`legacy archive cross-device copy diverged from the imported bytes: ${dest}`);
 		try {
-			await fs$1.link(tmp, dest);
+			await fs.link(tmp, dest);
 		} catch (error) {
 			if (error.code !== "EEXIST") throw error;
 			const existing = await identityOf(dest);
 			if (!existing || existing.fingerprint !== expected.fingerprint) throw new Error(`legacy archive destination exists with different content: ${dest}`, { cause: error });
 		}
 	} finally {
-		await fs$1.rm(tmp, { force: true });
+		await fs.rm(tmp, { force: true });
 	}
 }
 /**
@@ -68426,7 +68426,7 @@ async function planLegacyArchiveDest(source, archiveRoot, expected) {
 	const resolvedRoot = path.resolve(archiveRoot);
 	const { dir, dest } = archivePathsFor(source, resolvedRoot);
 	try {
-		await fs$1.mkdir(dir, {
+		await fs.mkdir(dir, {
 			recursive: true,
 			mode: 448
 		});
@@ -68466,7 +68466,7 @@ async function archiveLegacySource(source, archiveRoot, expected) {
 */
 async function archiveLegacySourceTo(source, dest, archiveRoot, expected) {
 	const resolvedRoot = path.resolve(archiveRoot);
-	await fs$1.mkdir(path.dirname(dest), {
+	await fs.mkdir(path.dirname(dest), {
 		recursive: true,
 		mode: 448
 	});
@@ -68476,14 +68476,14 @@ async function archiveLegacySourceTo(source, dest, archiveRoot, expected) {
 	const expectedIdentity = expected ?? sourceIdentityValue;
 	if (sourceIdentityValue.fingerprint !== expectedIdentity.fingerprint) throw new Error(`legacy source changed after import; failing closed: ${source.path}`);
 	const destInodeVerified = async (destPath) => {
-		const [sourceStat, destStat] = await Promise.all([fs$1.stat(source.path), fs$1.stat(destPath).catch(() => void 0)]);
+		const [sourceStat, destStat] = await Promise.all([fs.stat(source.path), fs.stat(destPath).catch(() => void 0)]);
 		return destStat !== void 0 && destStat.dev === sourceStat.dev && destStat.ino === sourceStat.ino;
 	};
 	const moveInto = async (destPath) => {
 		let moved = false;
 		let independentArchive = false;
 		try {
-			await fs$1.link(source.path, destPath);
+			await fs.link(source.path, destPath);
 			moved = true;
 		} catch (error) {
 			const code = error.code;
@@ -68491,7 +68491,7 @@ async function archiveLegacySourceTo(source, dest, archiveRoot, expected) {
 				const existing = await identityOf(destPath);
 				if (existing && existing.fingerprint === expectedIdentity.fingerprint) {
 					moved = true;
-					const [sourceStat, destStat] = await Promise.all([fs$1.stat(source.path), fs$1.stat(destPath)]);
+					const [sourceStat, destStat] = await Promise.all([fs.stat(source.path), fs.stat(destPath)]);
 					independentArchive = sourceStat.dev !== destStat.dev || sourceStat.ino !== destStat.ino;
 				} else return {
 					moved: false,
@@ -68512,13 +68512,13 @@ async function archiveLegacySourceTo(source, dest, archiveRoot, expected) {
 	};
 	const outcome = await moveInto(dest);
 	if (outcome.divergent) throw new Error(`legacy archive destination exists with different content: ${dest}`);
-	await fs$1.chmod(dest, 384);
+	await fs.chmod(dest, 384);
 	if (!await destInodeVerified(dest)) {
 		const archived = await identityOf(dest);
 		if (!archived || archived.fingerprint !== expectedIdentity.fingerprint) throw new Error(`legacy archive verification failed: ${dest}`);
 	}
 	if (outcome.moved) if (outcome.independentArchive) await unlinkSourceIfUnchanged(source.path, expectedIdentity);
-	else await fs$1.unlink(source.path);
+	else await fs.unlink(source.path);
 	return dest;
 }
 /**
@@ -68532,12 +68532,12 @@ async function unlinkSourceIfUnchanged(sourcePath, expected) {
 	const current = await sourceIdentity(sourcePath);
 	if (!current) return;
 	if (current.fingerprint !== expected.fingerprint) throw new Error(`legacy source changed before removal; failing closed: ${sourcePath}`);
-	await fs$1.unlink(sourcePath);
+	await fs.unlink(sourcePath);
 }
 async function chmodDirs(dir, stopAt) {
 	let current = dir;
 	while (current.startsWith(stopAt) && current !== stopAt) {
-		await fs$1.chmod(current, 448).catch(() => void 0);
+		await fs.chmod(current, 448).catch(() => void 0);
 		const parent = path.dirname(current);
 		if (parent === current) return;
 		current = parent;
@@ -68566,11 +68566,11 @@ async function purgeExpiredLegacyArchives(runtime, opts) {
 			log$25.warn("skipping legacy archive outside the archive root", { sourcePath: receipt.sourcePath });
 			continue;
 		}
-		if (!await fs$1.stat(archivePath).then(() => true).catch((error) => {
+		if (!await fs.stat(archivePath).then(() => true).catch((error) => {
 			if (error.code === "ENOENT") return false;
 			throw error;
 		})) continue;
-		await fs$1.rm(archivePath, { force: true });
+		await fs.rm(archivePath, { force: true });
 		purged += 1;
 		await pruneEmptyArchiveDirs(path.dirname(archivePath), archiveRoot);
 	}
@@ -68581,12 +68581,12 @@ async function pruneEmptyArchiveDirs(dir, stopAt) {
 	while (current.startsWith(stopAt + path.sep)) {
 		let entries;
 		try {
-			entries = await fs$1.readdir(current);
+			entries = await fs.readdir(current);
 		} catch {
 			return;
 		}
 		if (entries.length > 0) return;
-		await fs$1.rmdir(current).catch(() => void 0);
+		await fs.rmdir(current).catch(() => void 0);
 		current = path.dirname(current);
 	}
 }
@@ -68869,7 +68869,7 @@ function byPath(a, b) {
 }
 function readDirents(dirPath) {
 	try {
-		return fs.readdirSync(dirPath, { withFileTypes: true });
+		return syncFs.readdirSync(dirPath, { withFileTypes: true });
 	} catch {
 		return [];
 	}
@@ -68882,7 +68882,7 @@ function isUnderQuarantine(rootDir, candidatePath) {
 }
 function statSource(filePath) {
 	try {
-		const stats = fs.statSync(filePath);
+		const stats = syncFs.statSync(filePath);
 		if (!stats.isFile()) return;
 		return {
 			mtimeMs: stats.mtimeMs,
@@ -69073,12 +69073,12 @@ async function censusLegacySources(cfg, env) {
 	for (const agentDir of readDirents(agentsRoot).filter((entry) => entry.isDirectory()).toSorted((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0)) {
 		const agentId = normalizeAgentId(agentDir.name);
 		const sessionsDir = path.join(agentsRoot, agentDir.name, LEGACY_SESSIONS_DIR_NAME);
-		if (fs.existsSync(sessionsDir)) censusAgentDir(sessionsDir, agentId);
+		if (syncFs.existsSync(sessionsDir)) censusAgentDir(sessionsDir, agentId);
 	}
 	const legacyRoot = path.join(stateDir, LEGACY_SESSIONS_DIR_NAME);
-	if (fs.existsSync(legacyRoot)) censusAgentDir(legacyRoot, defaultAgent);
+	if (syncFs.existsSync(legacyRoot)) censusAgentDir(legacyRoot, defaultAgent);
 	const recoveryDir = path.join(stateDir, RECOVERY_DIR_NAME);
-	if (fs.existsSync(recoveryDir)) censusRecoveryTree(sources, recoveryDir);
+	if (syncFs.existsSync(recoveryDir)) censusRecoveryTree(sources, recoveryDir);
 	return sources.values();
 }
 /**
@@ -69162,7 +69162,7 @@ async function admitDurableKeyMappings(registry, listKeys, opts) {
 			await opts?.clearMappingSourcePath?.(mapping.agentId, mapping.sessionId).catch(() => void 0);
 			continue;
 		}
-		const stats = await fs$1.stat(mapping.sourcePath).catch(() => void 0);
+		const stats = await fs.stat(mapping.sourcePath).catch(() => void 0);
 		if (!stats?.isFile()) continue;
 		registry.admit({
 			path: mapping.sourcePath,
@@ -69362,7 +69362,7 @@ function createLegacySourceRegistry() {
 				if (!isSettledReceipt(receipt, source.sizeBytes)) trackPendingPath(key, source);
 				return;
 			}
-			const stats = await fs$1.stat(key).catch(() => void 0);
+			const stats = await fs.stat(key).catch(() => void 0);
 			if (!stats?.isFile() && receipt.status !== "imported") return;
 			admit({
 				path: key,
@@ -69602,12 +69602,12 @@ function canonicalSqliteIdentityPathSync(sqlitePath) {
 	for (let hops = 0; hops < MAX_SYMLINK_HOPS; hops += 1) {
 		let stats;
 		try {
-			stats = fs.lstatSync(current);
+			stats = syncFs.lstatSync(current);
 		} catch {
 			return canonicalPathSync(current);
 		}
 		if (!stats.isSymbolicLink()) return canonicalPathSync(current);
-		current = path.resolve(canonicalPathSync(path.dirname(current)), fs.readlinkSync(current));
+		current = path.resolve(canonicalPathSync(path.dirname(current)), syncFs.readlinkSync(current));
 	}
 	return canonicalPathSync(sqlitePath);
 }
@@ -69621,12 +69621,12 @@ function sleep$1(ms) {
 	return new Promise((resolve) => setTimeout(resolve, ms));
 }
 function acquireKernelOwnerLock(lock) {
-	fs.mkdirSync(path.dirname(lock.lockPath), {
+	syncFs.mkdirSync(path.dirname(lock.lockPath), {
 		recursive: true,
 		mode: 448
 	});
 	try {
-		fs.closeSync(fs.openSync(lock.lockPath, "wx", 384));
+		syncFs.closeSync(syncFs.openSync(lock.lockPath, "wx", 384));
 	} catch (err) {
 		if (err.code !== "EEXIST") throw err;
 	}
@@ -69660,7 +69660,7 @@ function closeSqliteQuietly(db) {
 function releaseKernelOwnerLock(lock, db, info) {
 	try {
 		const current = readHolderSidecar(lock.sidecarPath);
-		if (current !== void 0 && current.pid === info.pid && current.startedAt === info.startedAt) fs.rmSync(lock.sidecarPath, { force: true });
+		if (current !== void 0 && current.pid === info.pid && current.startedAt === info.startedAt) syncFs.rmSync(lock.sidecarPath, { force: true });
 	} finally {
 		closeSqliteQuietly(db);
 	}
@@ -69668,17 +69668,17 @@ function releaseKernelOwnerLock(lock, db, info) {
 function writeHolderSidecar(sidecarPath, info) {
 	const temp = `${sidecarPath}.${process.pid}.tmp`;
 	try {
-		const fd = fs.openSync(temp, "w", 384);
+		const fd = syncFs.openSync(temp, "w", 384);
 		try {
-			fs.writeFileSync(fd, `${JSON.stringify(info)}\n`);
-			fs.fsyncSync(fd);
+			syncFs.writeFileSync(fd, `${JSON.stringify(info)}\n`);
+			syncFs.fsyncSync(fd);
 		} finally {
-			fs.closeSync(fd);
+			syncFs.closeSync(fd);
 		}
-		fs.renameSync(temp, sidecarPath);
+		syncFs.renameSync(temp, sidecarPath);
 	} catch (err) {
 		try {
-			fs.rmSync(temp, { force: true });
+			syncFs.rmSync(temp, { force: true });
 		} catch {}
 		throw err;
 	}
@@ -69703,7 +69703,7 @@ function parseHolderSidecar(raw) {
 function readHolderSidecar(sidecarPath) {
 	let raw;
 	try {
-		raw = fs.readFileSync(sidecarPath, "utf8");
+		raw = syncFs.readFileSync(sidecarPath, "utf8");
 	} catch {
 		return;
 	}
@@ -69714,7 +69714,7 @@ async function readHolderSidecarBriefly(sidecarPath, timeoutMs = 1e3) {
 	for (;;) {
 		let raw;
 		try {
-			raw = fs.readFileSync(sidecarPath, "utf8");
+			raw = syncFs.readFileSync(sidecarPath, "utf8");
 		} catch {
 			raw = void 0;
 		}
@@ -69878,7 +69878,7 @@ async function claimExclusivePartial(destPath) {
 	for (let attempt = 0; attempt < 3; attempt += 1) {
 		const candidate = `${destPath}.${process.pid}.${randomBytes(8).toString("hex")}.partial`;
 		try {
-			await (await fs$1.open(candidate, "wx", 384)).close();
+			await (await fs.open(candidate, "wx", 384)).close();
 			return candidate;
 		} catch (err) {
 			if (err.code !== "EEXIST") throw err;
@@ -69897,7 +69897,7 @@ async function backupSqliteSessionDatabase(params) {
 	const dbPath = path.resolve(params.dbPath);
 	const destPath = path.resolve(params.destPath);
 	for (const guarded of protectedLivePaths(dbPath)) if (sameFile$1(destPath, guarded)) throw new Error("backup destination must not be the live database or its owner lock, holder sidecar, or journal files");
-	await fs$1.mkdir(path.dirname(destPath), {
+	await fs.mkdir(path.dirname(destPath), {
 		recursive: true,
 		mode: 448
 	});
@@ -69909,14 +69909,14 @@ async function backupSqliteSessionDatabase(params) {
 			gated: sqliteBackupTestHooks.holdWorkerAtGate === true,
 			writableSource: false
 		});
-		await fs$1.rename(partialPath, destPath);
+		await fs.rename(partialPath, destPath);
 	} catch (err) {
-		await fs$1.rm(partialPath, { force: true }).catch(() => {});
+		await fs.rm(partialPath, { force: true }).catch(() => {});
 		throw err;
 	}
 	return {
 		path: destPath,
-		bytes: (await fs$1.stat(destPath)).size
+		bytes: (await fs.stat(destPath)).size
 	};
 }
 
@@ -69938,7 +69938,7 @@ const INCARNATION_SELECT_SQL = "SELECT id FROM ctx_legacy_import_incarnation LIM
 async function readDbIncarnationId(dbPath) {
 	let db;
 	try {
-		await fs$1.stat(dbPath);
+		await fs.stat(dbPath);
 		db = new DatabaseSync(dbPath);
 		const row = db.prepare(INCARNATION_SELECT_SQL).get();
 		return typeof row?.id === "string" ? row.id : void 0;
@@ -69990,7 +69990,7 @@ async function takePreImportLegacySnapshot(params) {
 	const marked = await readSnapshotMarker(backupsDir, canonicalDbPath);
 	if (marked) return marked;
 	if ((await params.listReceipts()).length > 0) return;
-	await fs$1.mkdir(backupsDir, {
+	await fs.mkdir(backupsDir, {
 		recursive: true,
 		mode: 448
 	});
@@ -70001,7 +70001,7 @@ async function takePreImportLegacySnapshot(params) {
 		dbPath,
 		destPath
 	});
-	if (dbId !== void 0) await fs$1.writeFile(path.join(backupsDir, snapshotMarkerFile(canonicalDbPath)), `${JSON.stringify({
+	if (dbId !== void 0) await fs.writeFile(path.join(backupsDir, snapshotMarkerFile(canonicalDbPath)), `${JSON.stringify({
 		path: backup.path,
 		createdAt: (/* @__PURE__ */ new Date()).toISOString(),
 		canonicalDbPath,
@@ -70019,17 +70019,17 @@ async function takePreImportLegacySnapshot(params) {
 */
 async function cleanupPartialLegacyBackups(stateDir) {
 	const backupsDir = path.join(stateDir, "backups");
-	const names = await fs$1.readdir(backupsDir).catch(() => []);
+	const names = await fs.readdir(backupsDir).catch(() => []);
 	for (const name of names) {
 		if (!name.endsWith(".partial")) continue;
-		await fs$1.rm(path.join(backupsDir, name), { force: true }).catch(() => void 0);
+		await fs.rm(path.join(backupsDir, name), { force: true }).catch(() => void 0);
 	}
 }
 async function readSnapshotMarker(backupsDir, canonicalDbPath) {
 	const currentIncarnationId = await readDbIncarnationId(canonicalDbPath);
 	const keyed = await readMarkerFile(path.join(backupsDir, snapshotMarkerFile(canonicalDbPath)), canonicalDbPath, currentIncarnationId);
 	if (keyed !== void 0) return keyed;
-	const names = await fs$1.readdir(backupsDir).catch(() => []);
+	const names = await fs.readdir(backupsDir).catch(() => []);
 	for (const name of names) {
 		if (!name.startsWith(SNAPSHOT_MARKER_PREFIX) || !name.endsWith(".json")) continue;
 		const found = await readMarkerFile(path.join(backupsDir, name), canonicalDbPath, currentIncarnationId);
@@ -70038,7 +70038,7 @@ async function readSnapshotMarker(backupsDir, canonicalDbPath) {
 	return readMarkerFile(path.join(backupsDir, SNAPSHOT_MARKER_FILE), canonicalDbPath, currentIncarnationId);
 }
 async function readMarkerFile(markerFile, canonicalDbPath, currentIncarnationId) {
-	const raw = await fs$1.readFile(markerFile, "utf8").catch(() => void 0);
+	const raw = await fs.readFile(markerFile, "utf8").catch(() => void 0);
 	if (!raw) return;
 	try {
 		const parsed = JSON.parse(raw);
@@ -70050,7 +70050,7 @@ async function readMarkerFile(markerFile, canonicalDbPath, currentIncarnationId)
 				if (currentIncarnationId !== void 0 && currentIncarnationId === markerId) return markerPath;
 				return;
 			}
-			const [markerStat, dbStat] = await Promise.all([fs$1.stat(markerDbPath).catch(() => void 0), fs$1.stat(canonicalDbPath).catch(() => void 0)]);
+			const [markerStat, dbStat] = await Promise.all([fs.stat(markerDbPath).catch(() => void 0), fs.stat(canonicalDbPath).catch(() => void 0)]);
 			if (markerStat !== void 0 && dbStat !== void 0 ? markerStat.dev === dbStat.dev && markerStat.ino === dbStat.ino : markerDbPath === canonicalDbPath) return markerPath;
 		}
 	} catch {}
@@ -70316,7 +70316,7 @@ const log$17 = createSubsystemLogger("config/sessions/legacy-import/index-import
 async function readLegacyIndexStore(storePath) {
 	let raw;
 	try {
-		raw = await fs$1.readFile(storePath, "utf8");
+		raw = await fs.readFile(storePath, "utf8");
 	} catch (error) {
 		throw new Error(`legacy index source unreadable: ${storePath}`, { cause: error });
 	}
@@ -70555,7 +70555,7 @@ async function importLegacyIndex(runtime, source, opts = {}) {
 			actorExplicit: entry.actor !== void 0
 		}), opts.signal);
 		if (transcriptPath && opts.discoveredTranscripts && path.resolve(transcriptPath) !== path.resolve(source.path)) try {
-			const stats = await fs$1.stat(transcriptPath);
+			const stats = await fs.stat(transcriptPath);
 			if (stats.isFile()) opts.discoveredTranscripts.push({
 				path: transcriptPath,
 				kind: "transcript",
@@ -70671,7 +70671,7 @@ async function loadSessionKeyOverrides(stateDir) {
 	const filePath = path.join(stateDir, "recovery", SESSION_KEY_OVERRIDES_FILENAME);
 	let raw;
 	try {
-		raw = await fs$1.readFile(filePath, "utf8");
+		raw = await fs.readFile(filePath, "utf8");
 	} catch (error) {
 		if (error.code !== "ENOENT") log$15.warn("session key overrides unreadable; ignoring", { error });
 		return /* @__PURE__ */ new Map();
@@ -72148,14 +72148,14 @@ function isGatewayArgv(args) {
 }
 function readLinuxCmdline(pid) {
 	try {
-		return parseProcCmdline(fs.readFileSync(`/proc/${pid}/cmdline`, "utf8"));
+		return parseProcCmdline(syncFs.readFileSync(`/proc/${pid}/cmdline`, "utf8"));
 	} catch {
 		return null;
 	}
 }
 function readLinuxStartTime(pid) {
 	try {
-		const raw = fs.readFileSync(`/proc/${pid}/stat`, "utf8").trim();
+		const raw = syncFs.readFileSync(`/proc/${pid}/stat`, "utf8").trim();
 		const closeParen = raw.lastIndexOf(")");
 		if (closeParen < 0) return null;
 		const fields = raw.slice(closeParen + 1).trim().split(/\s+/);
@@ -72209,7 +72209,7 @@ async function resolveGatewayOwnerStatus(pid, payload, platform, port) {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fs$1.readFile(lockPath, "utf8");
+		const raw = await fs.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number") return null;
 		if (typeof parsed.createdAt !== "string") return null;
@@ -75142,7 +75142,7 @@ async function withMemoryManagerForAgent(params) {
 }
 async function checkReadableFile(pathname) {
 	try {
-		await fs$1.access(pathname, fs.constants.R_OK);
+		await fs.access(pathname, syncFs.constants.R_OK);
 		return { exists: true };
 	} catch (err) {
 		const code = err.code;
@@ -75177,7 +75177,7 @@ async function scanMemoryFiles(workspaceDir, extraPaths = []) {
 	if (alt.issue) issues.push(alt.issue);
 	const resolvedExtraPaths = normalizeExtraMemoryPaths(workspaceDir, extraPaths);
 	for (const extraPath of resolvedExtraPaths) try {
-		if ((await fs$1.lstat(extraPath)).isSymbolicLink()) continue;
+		if ((await fs.lstat(extraPath)).isSymbolicLink()) continue;
 		const extraCheck = await checkReadableFile(extraPath);
 		if (extraCheck.issue) issues.push(extraCheck.issue);
 	} catch (err) {
@@ -75187,7 +75187,7 @@ async function scanMemoryFiles(workspaceDir, extraPaths = []) {
 	}
 	let dirReadable = null;
 	try {
-		await fs$1.access(memoryDir, fs.constants.R_OK);
+		await fs.access(memoryDir, syncFs.constants.R_OK);
 		dirReadable = true;
 	} catch (err) {
 		const code = err.code;
@@ -75235,7 +75235,7 @@ async function summarizeQmdIndexArtifact(manager) {
 	if (!dbPath) return null;
 	let stat;
 	try {
-		stat = await fs$1.stat(dbPath);
+		stat = await fs.stat(dbPath);
 	} catch (err) {
 		const code = err.code;
 		if (code === "ENOENT") throw new Error(`QMD index file not found: ${shortenHomePath(dbPath)}`, { cause: err });
@@ -75755,7 +75755,7 @@ function createPluginRuntime(options = {}) {
 			workStates: readTaskWorkStates
 		},
 		resolveLearningWorkspaceDir: (agentId) => resolveLearningWorkspaceDir(loadConfig(), agentId),
-		sessions: { startUserRun: async (params) => (await import("./user-run-recording-BVpLQDqe.js").then((n) => n.n)).startUserSessionRun(params) }
+		sessions: { startUserRun: async (params) => (await import("./user-run-recording-C1LRU5Lb.js").then((n) => n.n)).startUserSessionRun(params) }
 	};
 	Object.defineProperty(runtime, "analysis", {
 		enumerable: true,
@@ -75779,7 +75779,7 @@ const resolvePluginSdkAliasFile = (params) => {
 			const srcCandidate = path.join(cursor, "src", "plugin-sdk", params.srcFile);
 			const distCandidate = path.join(cursor, "dist", "plugin-sdk", params.distFile);
 			const orderedCandidates = isDistRuntime ? [distCandidate, srcCandidate] : isTest ? [distCandidate, srcCandidate] : [distCandidate];
-			for (const candidate of orderedCandidates) if (fs.existsSync(candidate)) return candidate;
+			for (const candidate of orderedCandidates) if (syncFs.existsSync(candidate)) return candidate;
 			const parent = path.dirname(cursor);
 			if (parent === cursor) break;
 			cursor = parent;
@@ -76335,7 +76335,7 @@ function loadOpenClawPlugins(options = {}) {
 			continue;
 		}
 		const safeSource = opened.path;
-		fs.closeSync(opened.fd);
+		syncFs.closeSync(opened.fd);
 		let mod = null;
 		try {
 			mod = getJiti()(safeSource);
@@ -76498,7 +76498,7 @@ function loadOpenClawPlugins(options = {}) {
 }
 function safeRealpathOrResolve(value) {
 	try {
-		return fs.realpathSync(value);
+		return syncFs.realpathSync(value);
 	} catch {
 		return path.resolve(value);
 	}
@@ -76656,7 +76656,7 @@ function resolvePluginWebSearchProviders(params) {
 //#endregion
 //#region src/agents/apply-patch-update.ts
 async function defaultReadFile(filePath) {
-	return fs$1.readFile(filePath, "utf8");
+	return fs.readFile(filePath, "utf8");
 }
 async function applyUpdateHunk(filePath, chunks, options) {
 	const originalLines = (await (options?.readFile ?? defaultReadFile)(filePath).catch((err) => {
@@ -76977,7 +76977,7 @@ function resolvePatchFileOps(options) {
 	const workspaceOnly = options.workspaceOnly !== false;
 	return {
 		readFile: async (filePath) => {
-			if (!workspaceOnly) return await fs$1.readFile(filePath, "utf8");
+			if (!workspaceOnly) return await fs.readFile(filePath, "utf8");
 			const opened = await openBoundaryFile({
 				absolutePath: filePath,
 				rootPath: options.cwd,
@@ -76985,14 +76985,14 @@ function resolvePatchFileOps(options) {
 			});
 			assertBoundaryRead(opened, filePath);
 			try {
-				return fs.readFileSync(opened.fd, "utf8");
+				return syncFs.readFileSync(opened.fd, "utf8");
 			} finally {
-				fs.closeSync(opened.fd);
+				syncFs.closeSync(opened.fd);
 			}
 		},
 		writeFile: async (filePath, content) => {
 			if (!workspaceOnly) {
-				await fs$1.writeFile(filePath, content, "utf8");
+				await fs.writeFile(filePath, content, "utf8");
 				return;
 			}
 			const relative = toRelativeSandboxPath(options.cwd, filePath);
@@ -77003,8 +77003,8 @@ function resolvePatchFileOps(options) {
 				encoding: "utf8"
 			});
 		},
-		remove: (filePath) => fs$1.rm(filePath),
-		mkdirp: (dir) => fs$1.mkdir(dir, { recursive: true }).then(() => {})
+		remove: (filePath) => fs.rm(filePath),
+		mkdirp: (dir) => fs.mkdir(dir, { recursive: true }).then(() => {})
 	};
 }
 async function ensureDir(filePath, ops) {
@@ -77283,7 +77283,7 @@ async function recordLoopOutcome(args) {
 	if (!args.ctx?.sessionKey) return;
 	try {
 		const { getDiagnosticSessionState } = await import("./diagnostic-session-state-Di8oqY0E.js").then((n) => n.n);
-		const { recordToolCallOutcome } = await import("./tool-loop-detection-CtOkwPJY.js");
+		const { recordToolCallOutcome } = await import("./tool-loop-detection-9fAxiikd.js");
 		recordToolCallOutcome(getDiagnosticSessionState({
 			sessionKey: args.ctx.sessionKey,
 			sessionId: args.ctx?.agentId
@@ -77310,8 +77310,8 @@ async function runBeforeToolCallHook(args) {
 	const params = args.params;
 	if (args.ctx?.sessionKey) {
 		const { getDiagnosticSessionState } = await import("./diagnostic-session-state-Di8oqY0E.js").then((n) => n.n);
-		const { logToolLoopAction } = await import("./diagnostic-BZYYYnMx.js").then((n) => n.n);
-		const { detectToolCallLoop, recordToolCall } = await import("./tool-loop-detection-CtOkwPJY.js");
+		const { logToolLoopAction } = await import("./diagnostic-DJ11ZJIJ.js").then((n) => n.n);
+		const { detectToolCallLoop, recordToolCall } = await import("./tool-loop-detection-9fAxiikd.js");
 		const sessionState = getDiagnosticSessionState({
 			sessionKey: args.ctx.sessionKey,
 			sessionId: args.ctx?.agentId
@@ -77653,10 +77653,10 @@ function createWorkspaceDeleteTool(params) {
 				containWithinHostRoot: root
 			}).catch(async (error) => {
 				if (String(error).includes("No such file or directory")) throw Object.assign(/* @__PURE__ */ new Error(`Sandbox FS error (ENOENT): ${display}`), { code: "ENOENT" });
-				if (await fs$1.lstat(contained.resolved).then((stats) => stats.isDirectory() ? stats : null, () => null)) throw Object.assign(/* @__PURE__ */ new Error(`Sandbox FS error (EISDIR): ${display}`), { code: "EISDIR" });
+				if (await fs.lstat(contained.resolved).then((stats) => stats.isDirectory() ? stats : null, () => null)) throw Object.assign(/* @__PURE__ */ new Error(`Sandbox FS error (EISDIR): ${display}`), { code: "EISDIR" });
 				throw error;
 			});
-			else await fs$1.unlink(contained.resolved);
+			else await fs.unlink(contained.resolved);
 			return {
 				content: [{
 					type: "text",
@@ -78051,14 +78051,14 @@ function createSandboxEditOperations(params) {
 }
 async function writeHostFile(absolutePath, content) {
 	const resolved = path.resolve(absolutePath);
-	await fs$1.mkdir(path.dirname(resolved), { recursive: true });
-	await fs$1.writeFile(resolved, content, "utf-8");
+	await fs.mkdir(path.dirname(resolved), { recursive: true });
+	await fs.writeFile(resolved, content, "utf-8");
 }
 function createHostWriteOperations(root, options) {
 	if (!(options?.workspaceOnly ?? false)) return {
 		mkdir: async (dir) => {
 			const resolved = path.resolve(dir);
-			await fs$1.mkdir(resolved, { recursive: true });
+			await fs.mkdir(resolved, { recursive: true });
 		},
 		writeFile: writeHostFile
 	};
@@ -78071,7 +78071,7 @@ function createHostWriteOperations(root, options) {
 				cwd: root,
 				root
 			});
-			await fs$1.mkdir(resolved, { recursive: true });
+			await fs.mkdir(resolved, { recursive: true });
 		},
 		writeFile: async (absolutePath, content) => {
 			await writeFileWithinRoot({
@@ -78087,12 +78087,12 @@ function createHostEditOperations(root, options) {
 	if (!(options?.workspaceOnly ?? false)) return {
 		readFile: async (absolutePath) => {
 			const resolved = path.resolve(absolutePath);
-			return await fs$1.readFile(resolved);
+			return await fs.readFile(resolved);
 		},
 		writeFile: writeHostFile,
 		access: async (absolutePath) => {
 			const resolved = path.resolve(absolutePath);
-			await fs$1.access(resolved);
+			await fs.access(resolved);
 		}
 	};
 	return {
@@ -79271,9 +79271,9 @@ async function readWorkspaceContextForSummary() {
 		if (!opened.ok) return "";
 		const sections = extractSections((() => {
 			try {
-				return fs.readFileSync(opened.fd, "utf-8");
+				return syncFs.readFileSync(opened.fd, "utf-8");
 			} finally {
-				fs.closeSync(opened.fd);
+				syncFs.closeSync(opened.fd);
 			}
 		})(), ["Session Startup", "Red Lines"]);
 		if (sections.length === 0) return "";
@@ -80906,14 +80906,14 @@ async function compactEmbeddedPiSessionDirect(params) {
 		if (!apiKeyInfo.apiKey) {
 			if (apiKeyInfo.mode !== "aws-sdk") throw new Error(`No API key resolved for provider "${model.provider}" (auth mode: ${apiKeyInfo.mode}).`);
 		} else if (model.provider === "github-copilot") {
-			const { resolveCopilotApiToken } = await import("./github-copilot-token-Bm6yG6tw.js").then((n) => n.n);
+			const { resolveCopilotApiToken } = await import("./github-copilot-token-C-29TbW-.js").then((n) => n.n);
 			const copilotToken = await resolveCopilotApiToken({ githubToken: apiKeyInfo.apiKey });
 			authStorage.setRuntimeApiKey(model.provider, copilotToken.token);
 		} else authStorage.setRuntimeApiKey(model.provider, apiKeyInfo.apiKey);
 	} catch (err) {
 		return fail(describeUnknownError(err));
 	}
-	await fs$1.mkdir(resolvedWorkspace, { recursive: true });
+	await fs.mkdir(resolvedWorkspace, { recursive: true });
 	const sandboxSessionKey = params.sessionKey?.trim() || params.sessionId;
 	const sandbox = await resolveSandboxContext({
 		config: params.config,
@@ -80922,7 +80922,7 @@ async function compactEmbeddedPiSessionDirect(params) {
 		workspaceLane: params.workspaceLane
 	});
 	const effectiveWorkspace = sandbox?.enabled ? sandbox.workspaceAccess === "rw" ? resolvedWorkspace : sandbox.workspaceDir : resolvedWorkspace;
-	await fs$1.mkdir(effectiveWorkspace, { recursive: true });
+	await fs.mkdir(effectiveWorkspace, { recursive: true });
 	let restoreSkillEnv;
 	const releaseWorkspaceCwd = acquireWorkspaceCwd(effectiveWorkspace);
 	try {
@@ -82141,7 +82141,7 @@ var OpenAIWebSocketManager = class extends EventEmitter {
 	* Throws if the connection is not open.
 	*/
 	send(event) {
-		if (!this.ws || this.ws.readyState !== WebSocket$1.OPEN) throw new Error(`OpenAIWebSocketManager: cannot send — connection is not open (readyState=${this.ws?.readyState ?? "no socket"})`);
+		if (!this.ws || this.ws.readyState !== WebSocket.OPEN) throw new Error(`OpenAIWebSocketManager: cannot send — connection is not open (readyState=${this.ws?.readyState ?? "no socket"})`);
 		this.ws.send(JSON.stringify(event));
 	}
 	/**
@@ -82158,7 +82158,7 @@ var OpenAIWebSocketManager = class extends EventEmitter {
 	* Returns true if the WebSocket is currently open and ready to send.
 	*/
 	isConnected() {
-		return this.ws !== null && this.ws.readyState === WebSocket$1.OPEN;
+		return this.ws !== null && this.ws.readyState === WebSocket.OPEN;
 	}
 	/**
 	* Permanently closes the WebSocket connection and disables auto-reconnect.
@@ -82168,7 +82168,7 @@ var OpenAIWebSocketManager = class extends EventEmitter {
 		this._cancelRetryTimer();
 		if (this.ws) {
 			this.ws.removeAllListeners();
-			if (this.ws.readyState === WebSocket$1.OPEN || this.ws.readyState === WebSocket$1.CONNECTING) this.ws.close(1e3, "Client closed");
+			if (this.ws.readyState === WebSocket.OPEN || this.ws.readyState === WebSocket.CONNECTING) this.ws.close(1e3, "Client closed");
 			this.ws = null;
 		}
 	}
@@ -82178,7 +82178,7 @@ var OpenAIWebSocketManager = class extends EventEmitter {
 				reject(/* @__PURE__ */ new Error("OpenAIWebSocketManager: apiKey is required before connecting."));
 				return;
 			}
-			const socket = new WebSocket$1(this.wsUrl, { headers: {
+			const socket = new WebSocket(this.wsUrl, { headers: {
 				Authorization: `Bearer ${this.apiKey}`,
 				"OpenAI-Beta": "responses-websocket=v1"
 			} });
@@ -88419,7 +88419,7 @@ async function runEmbeddedAttempt(params) {
 	let embeddedAttemptBegun = false;
 	const runAbortController = new AbortController();
 	log$51.debug(`embedded run start: runId=${params.runId} sessionId=${params.sessionId} provider=${params.provider} model=${params.modelId} thinking=${params.thinkLevel} messageChannel=${params.messageChannel ?? params.messageProvider ?? "unknown"}`);
-	await fs$1.mkdir(resolvedWorkspace, { recursive: true });
+	await fs.mkdir(resolvedWorkspace, { recursive: true });
 	const sandboxSessionKey = params.sessionKey?.trim() || params.sessionId;
 	const toolSessionKey = params.toolSessionKey?.trim() || sandboxSessionKey;
 	const sandbox = params.skipSandbox ? null : await resolveSandboxContext({
@@ -88429,7 +88429,7 @@ async function runEmbeddedAttempt(params) {
 		workspaceLane: params.workspaceLane
 	});
 	const effectiveWorkspace = sandbox?.enabled ? sandbox.workspaceAccess === "rw" ? resolvedWorkspace : sandbox.workspaceDir : resolvedWorkspace;
-	await fs$1.mkdir(effectiveWorkspace, { recursive: true });
+	await fs.mkdir(effectiveWorkspace, { recursive: true });
 	let restoreSkillEnv;
 	const releaseWorkspaceCwd = params.skipCwdChange ? void 0 : acquireWorkspaceCwd(effectiveWorkspace);
 	const rawToolResultStash = openRawToolResultStash(params.sessionId);
@@ -89324,7 +89324,7 @@ async function runEmbeddedPiAgent(params) {
 				await copilotTokenState.refreshInFlight;
 				return;
 			}
-			const { resolveCopilotApiToken } = await import("./github-copilot-token-Bm6yG6tw.js").then((n) => n.n);
+			const { resolveCopilotApiToken } = await import("./github-copilot-token-C-29TbW-.js").then((n) => n.n);
 			copilotTokenState.refreshInFlight = (async () => {
 				const githubToken = copilotTokenState.githubToken.trim();
 				if (!githubToken) throw new Error("Copilot refresh requires a GitHub token.");
@@ -89416,7 +89416,7 @@ async function runEmbeddedPiAgent(params) {
 				return;
 			}
 			if (model.provider === "github-copilot") {
-				const { resolveCopilotApiToken } = await import("./github-copilot-token-Bm6yG6tw.js").then((n) => n.n);
+				const { resolveCopilotApiToken } = await import("./github-copilot-token-C-29TbW-.js").then((n) => n.n);
 				const copilotToken = await resolveCopilotApiToken({ githubToken: apiKeyInfo.apiKey });
 				authStorage.setRuntimeApiKey(model.provider, copilotToken.token);
 				if (copilotTokenState) {
@@ -89538,7 +89538,7 @@ async function runEmbeddedPiAgent(params) {
 				const copilotAuthRetry = authRetryPending;
 				authRetryPending = false;
 				attemptedThinking.add(thinkLevel);
-				await fs$1.mkdir(resolvedWorkspace, { recursive: true });
+				await fs.mkdir(resolvedWorkspace, { recursive: true });
 				const prompt = provider === "anthropic" ? scrubAnthropicRefusalMagic(params.prompt) : params.prompt;
 				const attempt = await runEmbeddedAttempt({
 					sessionId: params.sessionId,