wednesdayai 0.6.1-dev.27 → 0.6.1-dev.28

package/dist/{model-selection-CbMZx9fR.js → model-selection-Ds5bEVQ2.js}

@@ -1,15 +1,15 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { c as resolveOAuthPath, f as resolveRequiredHomeDir, i as resolveDefaultConfigCandidates, l as resolveStateDir, r as resolveConfigPath, s as resolveOAuthDir, t as DEFAULT_GATEWAY_PORT, u as expandHomePrefix } from "./paths-BIDPYPVC.js";
-import { A as resolveConfigIncludes, D as ConfigIncludeError, E as normalizeConfigPaths, F as openBoundaryFileSync, G as applyConfigEnvVars, H as isPathInside$2, J as MissingEnvVarError, M as isPathInside$1, O as INCLUDE_KEY, X as resolveConfigEnvVars, Y as containsEnvVarReference, b as getChildLogger, dt as sleep, f as logVerbose, it as normalizeE164, j as isBlockedObjectKey, k as readConfigIncludeFileWithGuards, n as stripAnsi, ot as resolveConfigDir, q as sanitizeHostExecEnv, rt as isRecord$3, st as resolveUserPath, t as createSubsystemLogger, tt as escapeRegExp, w as createFileLogWriter } from "./subsystem-DoQFckDJ.js";
+import { c as resolveOAuthPath, f as resolveRequiredHomeDir, i as resolveDefaultConfigCandidates, l as resolveStateDir, r as resolveConfigPath, s as resolveOAuthDir, t as DEFAULT_GATEWAY_PORT, u as expandHomePrefix } from "./paths-B_gs59ga.js";
+import { A as resolveConfigIncludes, D as ConfigIncludeError, E as normalizeConfigPaths, F as openBoundaryFileSync, G as applyConfigEnvVars, H as isPathInside$2, J as MissingEnvVarError, M as isPathInside$1, O as INCLUDE_KEY, X as resolveConfigEnvVars, Y as containsEnvVarReference, b as getChildLogger, dt as sleep, f as logVerbose, it as normalizeE164, j as isBlockedObjectKey, k as readConfigIncludeFileWithGuards, n as stripAnsi, ot as resolveConfigDir, q as sanitizeHostExecEnv, rt as isRecord$3, st as resolveUserPath, t as createSubsystemLogger, tt as escapeRegExp, w as createFileLogWriter } from "./subsystem-cFv2jJm-.js";
 import { n as resolveProcessScopedMap, t as isPlainObject$2 } from "./plain-object-Doc_YkH1.js";
-import { $ as normalizeAccountId$1, A as DEFAULT_AGENT_ID, G as resolveAgentIdFromSessionKey, H as normalizeAgentId, N as RAW_PEER_KEY_PREFIX, Q as DEFAULT_ACCOUNT_ID, a as registerInternalHook, b as resolveDefaultAgentWorkspaceDir, dt as stripAgentSessionKeyPrefix, et as normalizeOptionalAccountId, lt as parseAgentSessionKey, s as parseBooleanValue, t as readManifestNamespace, w as runExec, z as expandIdentityLinksToMatchKeys } from "./legacy-names-6uH6aLhq.js";
-import { a as saveJsonFile, i as loadJsonFile, r as resolveCopilotApiToken, t as DEFAULT_COPILOT_API_BASE_URL } from "./github-copilot-token-Bm6yG6tw.js";
+import { $ as normalizeAccountId$1, A as DEFAULT_AGENT_ID, G as resolveAgentIdFromSessionKey, H as normalizeAgentId, N as RAW_PEER_KEY_PREFIX, Q as DEFAULT_ACCOUNT_ID, a as registerInternalHook, b as resolveDefaultAgentWorkspaceDir, dt as stripAgentSessionKeyPrefix, et as normalizeOptionalAccountId, lt as parseAgentSessionKey, s as parseBooleanValue, t as readManifestNamespace, w as runExec, z as expandIdentityLinksToMatchKeys } from "./legacy-names-chsmo2vs.js";
+import { a as saveJsonFile, i as loadJsonFile, r as resolveCopilotApiToken, t as DEFAULT_COPILOT_API_BASE_URL } from "./github-copilot-token-C-29TbW-.js";
 import { createRequire } from "node:module";
 import path from "node:path";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os, { userInfo } from "node:os";
-import JSON5 from "json5";
-import fs$1 from "node:fs/promises";
+import json5 from "json5";
+import fs from "node:fs/promises";
 import { isDeepStrictEqual } from "node:util";
 import { execFileSync, spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
@@ -464,7 +464,7 @@ function isValidPid(pid) {
 function isZombieProcess(pid) {
 	if (process.platform !== "linux") return false;
 	try {
-		return fs.readFileSync(`/proc/${pid}/status`, "utf8").match(/^State:\s+(\S)/m)?.[1] === "Z";
+		return syncFs.readFileSync(`/proc/${pid}/status`, "utf8").match(/^State:\s+(\S)/m)?.[1] === "Z";
 	} catch {
 		return false;
 	}
@@ -491,7 +491,7 @@ function getProcessStartTime(pid) {
 	if (process.platform !== "linux") return null;
 	if (!isValidPid(pid)) return null;
 	try {
-		const stat = fs.readFileSync(`/proc/${pid}/stat`, "utf8");
+		const stat = syncFs.readFileSync(`/proc/${pid}/stat`, "utf8");
 		const commEndIndex = stat.lastIndexOf(")");
 		if (commEndIndex < 0) return null;
 		const fields = stat.slice(commEndIndex + 1).trimStart().split(/\s+/);
@@ -559,7 +559,7 @@ function readLinuxProcessElapsedSeconds(pid) {
 	const starttimeTicks = getProcessStartTime(pid);
 	if (starttimeTicks === null) {
 		try {
-			fs.readFileSync(`/proc/${pid}/stat`, "utf8");
+			syncFs.readFileSync(`/proc/${pid}/stat`, "utf8");
 		} catch (err) {
 			return err.code === "ENOENT" ? null : "unknown";
 		}
@@ -567,7 +567,7 @@ function readLinuxProcessElapsedSeconds(pid) {
 	}
 	let uptimeSeconds;
 	try {
-		const raw = fs.readFileSync("/proc/uptime", "utf8");
+		const raw = syncFs.readFileSync("/proc/uptime", "utf8");
 		uptimeSeconds = Number.parseFloat(raw.split(" ")[0] ?? "");
 	} catch {
 		return "unknown";
@@ -624,7 +624,7 @@ function isCreatedAtStale(createdAt, staleMs) {
 }
 async function readLockPayload$1(lockPath) {
 	try {
-		const raw = await fs$1.readFile(lockPath, "utf8");
+		const raw = await fs.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number" || typeof parsed.createdAt !== "string") return null;
 		const payload = {
@@ -641,7 +641,7 @@ async function readLockPayload$1(lockPath) {
 }
 async function chmodIfSupported(filePath, mode) {
 	try {
-		await fs$1.chmod(filePath, mode);
+		await fs.chmod(filePath, mode);
 	} catch (err) {
 		if (process.platform === "win32") return;
 		throw err;
@@ -650,15 +650,15 @@ async function chmodIfSupported(filePath, mode) {
 async function resolveNormalizedFilePath(filePath, options) {
 	const resolved = path.resolve(filePath);
 	const dir = path.dirname(resolved);
-	if (options.directoryMode === void 0) await fs$1.mkdir(dir, { recursive: true });
+	if (options.directoryMode === void 0) await fs.mkdir(dir, { recursive: true });
 	else {
-		await fs$1.mkdir(dir, {
+		await fs.mkdir(dir, {
 			recursive: true,
 			mode: options.directoryMode
 		});
 		await chmodIfSupported(dir, options.directoryMode);
 	}
-	const realDir = await fs$1.realpath(dir);
+	const realDir = await fs.realpath(dir);
 	return path.join(realDir, path.basename(resolved));
 }
 async function isStaleLock(lockPath, staleMs) {
@@ -673,7 +673,7 @@ async function isStaleLock(lockPath, staleMs) {
 		return false;
 	}
 	try {
-		const stat = await fs$1.stat(lockPath);
+		const stat = await fs.stat(lockPath);
 		return Date.now() - stat.mtimeMs > staleMs;
 	} catch {
 		return true;
@@ -697,7 +697,7 @@ async function releaseHeldLock$1(normalizedFile) {
 		throw emitLockReleaseWarning("close", current.lockPath, err);
 	}
 	try {
-		await fs$1.rm(current.lockPath, { force: true });
+		await fs.rm(current.lockPath, { force: true });
 	} catch (err) {
 		current.count = 1;
 		throw emitLockReleaseWarning("remove", current.lockPath, err);
@@ -720,7 +720,7 @@ async function acquireFileLock(filePath, options) {
 	let attempt = 0;
 	let staleReclaims = 0;
 	while (attempt < attempts) try {
-		const handle = await fs$1.open(lockPath, "wx");
+		const handle = await fs.open(lockPath, "wx");
 		try {
 			await handle.writeFile(JSON.stringify({
 				pid: process.pid,
@@ -729,7 +729,7 @@ async function acquireFileLock(filePath, options) {
 			}, null, 2), "utf8");
 		} catch (writeErr) {
 			await handle.close().catch(() => void 0);
-			await fs$1.rm(lockPath, { force: true }).catch(() => void 0);
+			await fs.rm(lockPath, { force: true }).catch(() => void 0);
 			throw writeErr;
 		}
 		HELD_LOCKS$1.set(normalizedFile, {
@@ -745,7 +745,7 @@ async function acquireFileLock(filePath, options) {
 	} catch (err) {
 		if (err.code !== "EEXIST") throw err;
 		if (await isStaleLock(lockPath, options.stale)) {
-			await fs$1.rm(lockPath, { force: true }).catch(() => void 0);
+			await fs.rm(lockPath, { force: true }).catch(() => void 0);
 			if (staleReclaims < attempts) {
 				staleReclaims += 1;
 				continue;
@@ -911,7 +911,7 @@ function resolveAuthStorePathForDisplay(agentDir) {
 	return pathname.startsWith("~") ? pathname : resolveUserPath(pathname);
 }
 function ensureAuthStoreFile(pathname) {
-	if (fs.existsSync(pathname)) return;
+	if (syncFs.existsSync(pathname)) return;
 	saveJsonFile(pathname, {
 		version: AUTH_STORE_VERSION,
 		profiles: {}
@@ -1174,7 +1174,7 @@ function loadAuthProfileStoreForAgent(agentDir, options) {
 	if (shouldWrite && legacy !== null) {
 		const legacyPath = resolveLegacyAuthStorePath(agentDir);
 		try {
-			fs.unlinkSync(legacyPath);
+			syncFs.unlinkSync(legacyPath);
 		} catch (err) {
 			if (err?.code !== "ENOENT") log$14.warn("failed to delete legacy auth.json after migration", {
 				err,
@@ -1644,7 +1644,7 @@ function resolveTimeoutMs(timeoutMs) {
 function readEtcShells() {
 	if (shellEnvState.cachedEtcShells !== void 0) return shellEnvState.cachedEtcShells;
 	try {
-		const entries = fs.readFileSync("/etc/shells", "utf8").split(/\r?\n/).map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#") && path.isAbsolute(line));
+		const entries = syncFs.readFileSync("/etc/shells", "utf8").split(/\r?\n/).map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#") && path.isAbsolute(line));
 		shellEnvState.cachedEtcShells = new Set(entries);
 	} catch {
 		shellEnvState.cachedEtcShells = null;
@@ -2192,7 +2192,7 @@ function formatWindowsAclSummary(summary) {
 //#region src/security/audit-fs.ts
 async function safeStat(targetPath) {
 	try {
-		const lst = await fs$1.lstat(targetPath);
+		const lst = await fs.lstat(targetPath);
 		return {
 			ok: true,
 			isSymlink: lst.isSymbolicLink(),
@@ -2231,7 +2231,7 @@ async function inspectPathPermissions(targetPath, opts) {
 	let effectiveMode = st.mode;
 	let effectiveIsDir = st.isDir;
 	if (st.isSymlink) try {
-		const target = await fs$1.stat(targetPath);
+		const target = await fs.stat(targetPath);
 		effectiveMode = typeof target.mode === "number" ? target.mode : st.mode;
 		effectiveIsDir = target.isDirectory();
 	} catch {}
@@ -2513,7 +2513,7 @@ async function assertSecurePath(params) {
 	if (stat.isSymlink) {
 		if (!params.allowSymlinkPath) throw new Error(`${params.label} must not be a symlink: ${effectivePath}`);
 		try {
-			effectivePath = await fs$1.realpath(effectivePath);
+			effectivePath = await fs.realpath(effectivePath);
 		} catch {
 			throw new Error(`${params.label} symlink target is not readable: ${params.targetPath}`);
 		}
@@ -2561,7 +2561,7 @@ async function readFileProviderPayload(params) {
 			}, timeoutMs);
 		});
 		try {
-			const payload = await Promise.race([fs$1.readFile(secureFilePath, { signal: abortController.signal }), timeoutPromise]);
+			const payload = await Promise.race([fs.readFile(secureFilePath, { signal: abortController.signal }), timeoutPromise]);
 			if (payload.byteLength > maxBytes) throw new Error(`File provider "${params.providerName}" exceeded maxBytes (${maxBytes}).`);
 			const text = payload.toString("utf8");
 			if (params.providerConfig.mode === "singleValue") return text.replace(/\r?\n$/, "");
@@ -3187,7 +3187,7 @@ function resolveActiveTalkProviderConfig(talk) {
 	};
 }
 function readTalkApiKeyFromProfile(deps = {}) {
-	const fsImpl = deps.fs ?? fs;
+	const fsImpl = deps.fs ?? syncFs;
 	const osImpl = deps.os ?? os;
 	const pathImpl = deps.path ?? path;
 	const home = osImpl.homedir();
@@ -3851,7 +3851,7 @@ function loadDotEnv(opts) {
 	const quiet = opts?.quiet ?? true;
 	dotenv.config({ quiet });
 	const globalEnvPath = path.join(resolveConfigDir(process.env), ".env");
-	if (!fs.existsSync(globalEnvPath)) return;
+	if (!syncFs.existsSync(globalEnvPath)) return;
 	dotenv.config({
 		quiet,
 		path: globalEnvPath,
@@ -3867,8 +3867,8 @@ function resolveConfigPathForDeps(deps) {
 }
 function normalizeDeps(overrides = {}) {
 	return {
-		fs: overrides.fs ?? fs,
-		json5: overrides.json5 ?? JSON5,
+		fs: overrides.fs ?? syncFs,
+		json5: overrides.json5 ?? json5,
 		env: overrides.env ?? process.env,
 		homedir: overrides.homedir ?? (() => resolveRequiredHomeDir(overrides.env ?? process.env, os.homedir)),
 		configPath: overrides.configPath ?? "",
@@ -5817,7 +5817,7 @@ function normalizeMatchTarget(value) {
 }
 function tryRealpath(value) {
 	try {
-		return fs.realpathSync(value);
+		return syncFs.realpathSync(value);
 	} catch {
 		return null;
 	}
@@ -6370,8 +6370,8 @@ function resolveWindowsExecutableExtensions(executable, env) {
 }
 function isExecutableFile(filePath) {
 	try {
-		if (!fs.statSync(filePath).isFile()) return false;
-		if (process.platform !== "win32") fs.accessSync(filePath, fs.constants.X_OK);
+		if (!syncFs.statSync(filePath).isFile()) return false;
+		if (process.platform !== "win32") syncFs.accessSync(filePath, syncFs.constants.X_OK);
 		return true;
 	} catch {
 		return false;
@@ -6410,7 +6410,7 @@ const DEFAULT_SAFE_BINS = [
 function tryResolveRealpath(filePath) {
 	if (!filePath) return;
 	try {
-		return fs.realpathSync(filePath);
+		return syncFs.realpathSync(filePath);
 	} catch {
 		return;
 	}
@@ -7285,7 +7285,7 @@ function listWritableExplicitTrustedSafeBinDirs(entries) {
 	for (const dir of resolved) {
 		let stat;
 		try {
-			stat = fs.statSync(dir);
+			stat = syncFs.statSync(dir);
 		} catch {
 			continue;
 		}
@@ -8250,7 +8250,7 @@ const credsSaveQueues = resolveProcessScopedMap(Symbol.for("openclaw.webCredsSav
 function canonicalWebAuthDir(authDir) {
 	const resolvedAuthDir = resolveUserPath(authDir);
 	try {
-		return fs.realpathSync.native(resolvedAuthDir);
+		return syncFs.realpathSync.native(resolvedAuthDir);
 	} catch (err) {
 		if (err.code === "ENOENT") return resolvedAuthDir;
 		throw err;
@@ -8265,7 +8265,7 @@ function isWebAuthBeingCleared(authDir) {
 }
 function statFileSync(filePath) {
 	try {
-		return fs.statSync(filePath);
+		return syncFs.statSync(filePath);
 	} catch {
 		return null;
 	}
@@ -8277,7 +8277,7 @@ function hasWebCredsSync(authDir) {
 	const resolvedAuthDir = resolveUserPath(authDir);
 	maybeRestoreCredsFromBackup(resolvedAuthDir);
 	try {
-		const stats = fs.statSync(resolveWebCredsPath(resolvedAuthDir));
+		const stats = syncFs.statSync(resolveWebCredsPath(resolvedAuthDir));
 		return stats.isFile() && stats.size > 1;
 	} catch {
 		return false;
@@ -8285,10 +8285,10 @@ function hasWebCredsSync(authDir) {
 }
 function readCredsJsonRaw(filePath) {
 	try {
-		if (!fs.existsSync(filePath)) return null;
-		const stats = fs.statSync(filePath);
+		if (!syncFs.existsSync(filePath)) return null;
+		const stats = syncFs.statSync(filePath);
 		if (!stats.isFile() || stats.size <= 1) return null;
-		return fs.readFileSync(filePath, "utf-8");
+		return syncFs.readFileSync(filePath, "utf-8");
 	} catch {
 		return null;
 	}
@@ -8313,12 +8313,12 @@ function maybeRestoreCredsFromBackup(authDir) {
 		const backupRaw = readCredsJsonRaw(backupPath);
 		const backupStats = statFileSync(backupPath);
 		if (!backupStats?.isFile() || !backupRaw || !isParseableJson(backupRaw)) return;
-		fs.copyFileSync(backupPath, credsPath);
+		syncFs.copyFileSync(backupPath, credsPath);
 		try {
-			fs.chmodSync(credsPath, 384);
+			syncFs.chmodSync(credsPath, 384);
 		} catch {}
 		try {
-			fs.utimesSync(credsPath, backupStats.atime, backupStats.mtime);
+			syncFs.utimesSync(credsPath, backupStats.atime, backupStats.mtime);
 		} catch {}
 		logger.warn({ credsPath }, "restored corrupted WhatsApp creds.json from backup");
 	} catch {}
@@ -8338,7 +8338,7 @@ function listWhatsAppAuthDirs(cfg) {
 		accountId
 	}).authDir);
 	try {
-		const entries = fs.readdirSync(whatsappDir, { withFileTypes: true });
+		const entries = syncFs.readdirSync(whatsappDir, { withFileTypes: true });
 		for (const entry of entries) {
 			if (!entry.isDirectory()) continue;
 			authDirs.add(path.join(whatsappDir, entry.name));
@@ -8360,7 +8360,7 @@ function resolveLegacyAuthDir() {
 }
 function legacyAuthExists(authDir) {
 	try {
-		return fs.existsSync(path.join(authDir, "creds.json"));
+		return syncFs.existsSync(path.join(authDir, "creds.json"));
 	} catch {
 		return false;
 	}
@@ -9300,7 +9300,7 @@ async function releaseHeldLock(normalizedSessionFile, held, opts = {}) {
 			await held.handle.close();
 		} catch {}
 		try {
-			await fs$1.rm(held.lockPath, { force: true });
+			await fs.rm(held.lockPath, { force: true });
 		} catch {}
 	})();
 	try {
@@ -9320,7 +9320,7 @@ function releaseAllLocksSync() {
 			if (typeof held.handle.close === "function") held.handle.close().catch(() => {});
 		} catch {}
 		try {
-			fs.rmSync(held.lockPath, { force: true });
+			syncFs.rmSync(held.lockPath, { force: true });
 		} catch {}
 		HELD_LOCKS.delete(sessionFile);
 	}
@@ -9379,7 +9379,7 @@ function registerCleanupHandlers() {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fs$1.readFile(lockPath, "utf8");
+		const raw = await fs.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		const payload = {};
 		if (isValidLockNumber(parsed.pid) && parsed.pid > 0) payload.pid = parsed.pid;
@@ -9423,7 +9423,7 @@ async function shouldReclaimContendedLockFile(lockPath, details, staleMs, nowMs)
 	if (!details.stale) return false;
 	if (!lockInspectionNeedsMtimeStaleFallback(details)) return true;
 	try {
-		const stat = await fs$1.stat(lockPath);
+		const stat = await fs.stat(lockPath);
 		return Math.max(0, nowMs - stat.mtimeMs) > staleMs;
 	} catch (error) {
 		return error?.code !== "ENOENT";
@@ -9441,10 +9441,10 @@ async function acquireSessionWriteLockWithProcessIdentity(params, processIdentit
 	const maxHoldMs = resolvePositiveMs(params.maxHoldMs, DEFAULT_MAX_HOLD_MS);
 	const sessionFile = path.resolve(params.sessionFile);
 	const sessionDir = path.dirname(sessionFile);
-	await fs$1.mkdir(sessionDir, { recursive: true });
+	await fs.mkdir(sessionDir, { recursive: true });
 	let normalizedDir = sessionDir;
 	try {
-		normalizedDir = await fs$1.realpath(sessionDir);
+		normalizedDir = await fs.realpath(sessionDir);
 	} catch {}
 	const normalizedSessionFile = path.join(normalizedDir, path.basename(sessionFile));
 	const lockPath = `${normalizedSessionFile}.lock`;
@@ -9462,7 +9462,7 @@ async function acquireSessionWriteLockWithProcessIdentity(params, processIdentit
 		attempt += 1;
 		let handle = null;
 		try {
-			handle = await fs$1.open(lockPath, "wx");
+			handle = await fs.open(lockPath, "wx");
 			const createdAt = (/* @__PURE__ */ new Date()).toISOString();
 			const starttime = processIdentity.getProcessStartTime(process.pid);
 			const lockPayload = {
@@ -9488,7 +9488,7 @@ async function acquireSessionWriteLockWithProcessIdentity(params, processIdentit
 					await handle.close();
 				} catch {}
 				try {
-					await fs$1.rm(lockPath, { force: true });
+					await fs.rm(lockPath, { force: true });
 				} catch {}
 			}
 			if (err.code !== "EEXIST") throw err;
@@ -9503,7 +9503,7 @@ async function acquireSessionWriteLockWithProcessIdentity(params, processIdentit
 				stale: true,
 				staleReasons: inspected.staleReasons.includes("orphan-self-pid") ? inspected.staleReasons : [...inspected.staleReasons, "orphan-self-pid"]
 			} : inspected, staleMs, nowMs)) {
-				await fs$1.rm(lockPath, { force: true });
+				await fs.rm(lockPath, { force: true });
 				continue;
 			}
 			const delay = Math.min(1e3, 50 * attempt);
@@ -9634,7 +9634,7 @@ function resolveStructuralSessionFallbackPath(candidateAbsPath, expectedAgentId)
 }
 function safeRealpathSync$1(filePath) {
 	try {
-		return fs.realpathSync(filePath);
+		return syncFs.realpathSync(filePath);
 	} catch {
 		return;
 	}
@@ -10011,7 +10011,7 @@ function isCacheEnabled(ttlMs) {
 }
 function getFileStatSnapshot(filePath) {
 	try {
-		const stats = fs.statSync(filePath);
+		const stats = syncFs.statSync(filePath);
 		return {
 			mtimeMs: stats.mtimeMs,
 			sizeBytes: stats.size
@@ -10293,7 +10293,7 @@ function loadSessionStoreFromDisk(storePath, opts = {}) {
 	const maxReadAttempts = process.platform === "win32" ? 3 : 1;
 	const retryBuf = maxReadAttempts > 1 ? new Int32Array(new SharedArrayBuffer(4)) : void 0;
 	for (let attempt = 0; attempt < maxReadAttempts; attempt++) try {
-		const raw = fs.readFileSync(storePath, "utf-8");
+		const raw = syncFs.readFileSync(storePath, "utf-8");
 		if (raw.length === 0 && attempt < maxReadAttempts - 1) {
 			Atomics.wait(retryBuf, 0, 0, 50);
 			continue;
@@ -12170,7 +12170,7 @@ function createPluginRegistry(registryParams) {
 			configurable: true,
 			value: {
 				...registryParams.runtime.signals,
-				nudge: async (input) => (await import("./nudge-Dd9wU1K5.js").then((n) => n.t)).requestAuthorizedNudge({
+				nudge: async (input) => (await import("./nudge-DZuNGDE_.js").then((n) => n.t)).requestAuthorizedNudge({
 					kind: "plugin",
 					pluginId: record.id
 				}, input)
@@ -12538,13 +12538,13 @@ function resolveBundledPluginsDir() {
 	try {
 		const execDir = path.dirname(process.execPath);
 		const sibling = path.join(execDir, "extensions");
-		if (fs.existsSync(sibling)) return sibling;
+		if (syncFs.existsSync(sibling)) return sibling;
 	} catch {}
 	try {
 		let cursor = path.dirname(fileURLToPath(import.meta.url));
 		for (let i = 0; i < 6; i += 1) {
 			const candidate = path.join(cursor, "extensions");
-			if (fs.existsSync(candidate) && fs.existsSync(path.join(cursor, "package.json"))) return candidate;
+			if (syncFs.existsSync(candidate) && syncFs.existsSync(path.join(cursor, "package.json"))) return candidate;
 			const parent = path.dirname(cursor);
 			if (parent === cursor) break;
 			cursor = parent;
@@ -12622,7 +12622,7 @@ function parseSessionConsumers(raw) {
 function resolvePluginManifestPath(rootDir) {
 	for (const filename of PLUGIN_MANIFEST_FILENAMES) {
 		const candidate = path.join(rootDir, filename);
-		if (fs.existsSync(candidate)) return candidate;
+		if (syncFs.existsSync(candidate)) return candidate;
 	}
 	return path.join(rootDir, PLUGIN_MANIFEST_FILENAME);
 }
@@ -12648,7 +12648,7 @@ function loadPluginManifest(rootDir, rejectHardlinks = true) {
 	}
 	let raw;
 	try {
-		raw = JSON.parse(fs.readFileSync(opened.fd, "utf-8"));
+		raw = JSON.parse(syncFs.readFileSync(opened.fd, "utf-8"));
 	} catch (err) {
 		return {
 			ok: false,
@@ -12656,7 +12656,7 @@ function loadPluginManifest(rootDir, rejectHardlinks = true) {
 			manifestPath
 		};
 	} finally {
-		fs.closeSync(opened.fd);
+		syncFs.closeSync(opened.fd);
 	}
 	return {
 		...loadPluginManifestFromObject(raw, rejectHardlinks),
@@ -12861,7 +12861,7 @@ function safeRealpathSync(targetPath, cache) {
 	const cached = cache?.get(targetPath);
 	if (cached) return cached;
 	try {
-		const resolved = fs.realpathSync(targetPath);
+		const resolved = syncFs.realpathSync(targetPath);
 		cache?.set(targetPath, resolved);
 		return resolved;
 	} catch {
@@ -12870,7 +12870,7 @@ function safeRealpathSync(targetPath, cache) {
 }
 function safeStatSync(targetPath) {
 	try {
-		return fs.statSync(targetPath);
+		return syncFs.statSync(targetPath);
 	} catch {
 		return null;
 	}
@@ -13002,12 +13002,12 @@ function readPackageManifest(dir, rejectHardlinks = true) {
 	});
 	if (!opened.ok) return null;
 	try {
-		const raw = fs.readFileSync(opened.fd, "utf-8");
+		const raw = syncFs.readFileSync(opened.fd, "utf-8");
 		return JSON.parse(raw);
 	} catch {
 		return null;
 	} finally {
-		fs.closeSync(opened.fd);
+		syncFs.closeSync(opened.fd);
 	}
 }
 function deriveIdHint(params) {
@@ -13075,14 +13075,14 @@ function resolvePackageEntrySource(params) {
 		return null;
 	}
 	const safeSource = opened.path;
-	fs.closeSync(opened.fd);
+	syncFs.closeSync(opened.fd);
 	return safeSource;
 }
 function discoverInDirectory(params) {
-	if (!fs.existsSync(params.dir)) return;
+	if (!syncFs.existsSync(params.dir)) return;
 	let entries = [];
 	try {
-		entries = fs.readdirSync(params.dir, { withFileTypes: true });
+		entries = syncFs.readdirSync(params.dir, { withFileTypes: true });
 	} catch (err) {
 		params.diagnostics.push({
 			level: "warn",
@@ -13145,7 +13145,7 @@ function discoverInDirectory(params) {
 			}
 			continue;
 		}
-		const indexFile = [...DEFAULT_PLUGIN_ENTRY_CANDIDATES].map((candidate) => path.join(fullPath, candidate)).find((candidate) => fs.existsSync(candidate));
+		const indexFile = [...DEFAULT_PLUGIN_ENTRY_CANDIDATES].map((candidate) => path.join(fullPath, candidate)).find((candidate) => syncFs.existsSync(candidate));
 		if (indexFile && isExtensionFile(indexFile)) addCandidate({
 			candidates: params.candidates,
 			diagnostics: params.diagnostics,
@@ -13163,7 +13163,7 @@ function discoverInDirectory(params) {
 }
 function discoverFromPath(params) {
 	const resolved = resolveUserPath(params.rawPath);
-	if (!fs.existsSync(resolved)) {
+	if (!syncFs.existsSync(resolved)) {
 		params.diagnostics.push({
 			level: "error",
 			code: "PLUGIN_LOAD_ERROR",
@@ -13172,7 +13172,7 @@ function discoverFromPath(params) {
 		});
 		return;
 	}
-	const stat = fs.statSync(resolved);
+	const stat = syncFs.statSync(resolved);
 	if (stat.isFile()) {
 		if (!isExtensionFile(resolved)) {
 			params.diagnostics.push({
@@ -13232,7 +13232,7 @@ function discoverFromPath(params) {
 			}
 			return;
 		}
-		const indexFile = [...DEFAULT_PLUGIN_ENTRY_CANDIDATES].map((candidate) => path.join(resolved, candidate)).find((candidate) => fs.existsSync(candidate));
+		const indexFile = [...DEFAULT_PLUGIN_ENTRY_CANDIDATES].map((candidate) => path.join(resolved, candidate)).find((candidate) => syncFs.existsSync(candidate));
 		if (indexFile && isExtensionFile(indexFile)) {
 			addCandidate({
 				candidates: params.candidates,
@@ -13691,7 +13691,7 @@ function buildCacheKey$1(params) {
 }
 function safeStatMtimeMs(filePath) {
 	try {
-		return fs.statSync(filePath).mtimeMs;
+		return syncFs.statSync(filePath).mtimeMs;
 	} catch {
 		return null;
 	}
@@ -19039,7 +19039,7 @@ function validateConfigObjectWithPluginsBase(raw, opts) {
 	};
 	const buildManifestSchemaCacheKey = (manifestPath) => {
 		try {
-			const mtimeMs = fs.statSync(manifestPath).mtimeMs;
+			const mtimeMs = syncFs.statSync(manifestPath).mtimeMs;
 			return mtimeMs ? `${manifestPath}:${mtimeMs}` : manifestPath;
 		} catch {
 			return manifestPath;
@@ -19064,7 +19064,7 @@ function validateConfigObjectWithPluginsBase(raw, opts) {
 			manifestRoot = record.sourcePath;
 		} else if (sources.size === 0) {
 			const bundledDir = resolveBundledPluginsDir();
-			if (bundledDir && fs.existsSync(bundledDir)) {
+			if (bundledDir && syncFs.existsSync(bundledDir)) {
 				const realSourcePath = safeRealpathSync(resolveUserPath(record.sourcePath), bundledInstallRealpathCache);
 				const realBundledDir = safeRealpathSync(bundledDir, bundledInstallRealpathCache) ?? bundledDir;
 				if (!realSourcePath || !isPathWithinRoot(realBundledDir, realSourcePath)) {
@@ -19460,11 +19460,11 @@ function warnIfConfigFromFuture(params) {
 		logger.warn(`Config was last written by a newer WednesdayAI (${touched}); current version is ${VERSION}.`);
 	}
 }
-function parseConfigJson5(raw, json5 = JSON5) {
+function parseConfigJson5(raw, json5$1 = json5) {
 	try {
 		return {
 			ok: true,
-			parsed: json5.parse(raw)
+			parsed: json5$1.parse(raw)
 		};
 	} catch (err) {
 		return {

package/dist/{nudge-DelcKR7z.js → nudge-CKFTN2YI.js}

@@ -1,12 +1,12 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { Ao as isSubagentSessionKey, Da as resolveDefaultAgentId, Do as isAcpSessionKey, Gr as GATEWAY_CLIENT_NAMES, Ja as logDebug, Ot as docsSiteUrl, Pi as resolveSecretRefValues, Sa as listAgentIds, Ur as GATEWAY_CLIENT_IDS, V as loadConfig, Wr as GATEWAY_CLIENT_MODES, Ya as logError, ct as ASSISTANT_IDENTITY_COLORS, do as normalizeMainKey, fa as resolveSecretInputRef, ni as stringEnum, po as resolveAgentIdFromSessionKey, ti as optionalStringEnum, ua as hasConfiguredSecretInput, uo as normalizeAgentId, vo as sessionKeyAgentMatches, zi as secretRefKey } from "./model-selection-Ca4WCV4n.js";
+import { Ao as isSubagentSessionKey, Da as resolveDefaultAgentId, Do as isAcpSessionKey, Gr as GATEWAY_CLIENT_NAMES, Ja as logDebug, Ot as docsSiteUrl, Pi as resolveSecretRefValues, Sa as listAgentIds, Ur as GATEWAY_CLIENT_IDS, V as loadConfig, Wr as GATEWAY_CLIENT_MODES, Ya as logError, ct as ASSISTANT_IDENTITY_COLORS, do as normalizeMainKey, fa as resolveSecretInputRef, ni as stringEnum, po as resolveAgentIdFromSessionKey, ti as optionalStringEnum, ua as hasConfiguredSecretInput, uo as normalizeAgentId, vo as sessionKeyAgentMatches, zi as secretRefKey } from "./model-selection-CYS--Nqz.js";
 import { l as resolveStateDir, o as resolveGatewayPort, r as resolveConfigPath } from "./paths-B_gs59ga.js";
 import { Z as CONFIG_DIR, et as ensureDir$1, lt as shortenHomeInString, st as resolveUserPath, t as createSubsystemLogger } from "./subsystem-DynBFcQj.js";
 import { t as emitDiagnosticEvent } from "./diagnostic-events-q1w77c25.js";
-import { B as createAsyncLock, D as SESSION_RUN_STATUSES, F as resolveAgentMainSessionKey, H as writeJsonAtomic, It as INPUT_PROVENANCE_KIND_VALUES, U as resolveGatewayCredentialsFromConfig, V as readJsonFile, f as TASK_RUN_MODES, p as TASK_RUN_STATUSES } from "./sessions-CXuFR_IY.js";
+import { B as createAsyncLock, D as SESSION_RUN_STATUSES, F as resolveAgentMainSessionKey, H as writeJsonAtomic, It as INPUT_PROVENANCE_KIND_VALUES, U as resolveGatewayCredentialsFromConfig, V as readJsonFile, f as TASK_RUN_MODES, p as TASK_RUN_STATUSES } from "./sessions-DKv9bCbi.js";
 import { t as redactIdentifier } from "./redact-identifier-DLySVyKh.js";
-import { i as isSecureWebSocketUrl, t as rawDataToString } from "./ws-2U5gNvRt.js";
-import { a as agentTurnIdempotencyKey, c as enqueueAgentTurn, i as AGENT_TURN_TOPIC, l as isClaimableAgentTurnWorkId, n as getAgentTurnRuntime, o as buildAgentTurnWork } from "./agent-turn-runner-ClBJoKQQ.js";
+import { i as isSecureWebSocketUrl, t as rawDataToString } from "./ws-Dt2EocLN.js";
+import { a as agentTurnIdempotencyKey, c as enqueueAgentTurn, i as AGENT_TURN_TOPIC, l as isClaimableAgentTurnWorkId, n as getAgentTurnRuntime, o as buildAgentTurnWork } from "./agent-turn-runner-CHm-I95T.js";
 import path from "node:path";
 import syncFs from "node:fs";
 import fs from "node:fs/promises";
@@ -14,7 +14,7 @@ import { promisify } from "node:util";
 import { execFile } from "node:child_process";
 import crypto, { X509Certificate, createHash, randomBytes, randomUUID } from "node:crypto";
 import { Type } from "@sinclair/typebox";
-import { WebSocket } from "ws";
+import { WebSocket as WebSocket$1 } from "ws";
 import AjvPkg from "ajv";
 
 //#region src/shared/device-auth.ts
@@ -2990,7 +2990,7 @@ var GatewayClient = class {
 				if (fingerprint !== expected) return /* @__PURE__ */ new Error("gateway tls fingerprint mismatch");
 			});
 		}
-		this.ws = new WebSocket(url, wsOptions);
+		this.ws = new WebSocket$1(url, wsOptions);
 		this.ws.on("open", () => {
 			if (url.startsWith("wss://") && this.opts.tlsFingerprint) {
 				const tlsError = this.validateTlsFingerprint();
@@ -3186,7 +3186,7 @@ var GatewayClient = class {
 		const connectChallengeTimeoutMs = typeof rawConnectDelayMs === "number" && Number.isFinite(rawConnectDelayMs) ? Math.max(250, Math.min(1e4, rawConnectDelayMs)) : 2e3;
 		if (this.connectTimer) clearTimeout(this.connectTimer);
 		this.connectTimer = setTimeout(() => {
-			if (this.connectSent || this.ws?.readyState !== WebSocket.OPEN) return;
+			if (this.connectSent || this.ws?.readyState !== WebSocket$1.OPEN) return;
 			this.opts.onConnectError?.(/* @__PURE__ */ new Error("gateway connect challenge timeout"));
 			this.ws?.close(1008, "connect challenge timeout");
 		}, connectChallengeTimeoutMs);
@@ -3228,7 +3228,7 @@ var GatewayClient = class {
 		return null;
 	}
 	async request(method, params, opts) {
-		if (!this.ws || this.ws.readyState !== WebSocket.OPEN) throw new Error("gateway not connected");
+		if (!this.ws || this.ws.readyState !== WebSocket$1.OPEN) throw new Error("gateway not connected");
 		const id = randomUUID();
 		const frame = {
 			type: "req",
@@ -4587,7 +4587,7 @@ function indentUntrustedBody(body) {
 }
 function trackNudgeClaimChain(runner, id, sessionKey) {
 	const tracked = (async () => {
-		const { runMainAgentTurn } = await import("./pi-embedded-ApthdT0k.js").then((n) => n.a);
+		const { runMainAgentTurn } = await import("./pi-embedded-C8SqFziv.js").then((n) => n.a);
 		await runner.claimAndExecute({
 			workId: id,
 			execute: (claim) => runMainAgentTurn(claim.message.payload)