wednesdayai 0.6.1-dev.32 → 0.6.1-dev.33

package/dist/{nudge-iXg_oCkW.js → nudge-Dg8Pe_sD.js}

@@ -1,12 +1,12 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { Bi as secretRefKey, Ca as listAgentIds, Fi as resolveSecretRefValues, Gr as GATEWAY_CLIENT_MODES, H as loadConfig, Kr as GATEWAY_CLIENT_NAMES, Oa as resolveDefaultAgentId, Oo as isAcpSessionKey, Wr as GATEWAY_CLIENT_IDS, Xa as logError, Ya as logDebug, da as hasConfiguredSecretInput, do as normalizeAgentId, fo as normalizeMainKey, jo as isSubagentSessionKey, kt as docsSiteUrl, lt as ASSISTANT_IDENTITY_COLORS, mo as resolveAgentIdFromSessionKey, ni as optionalStringEnum, pa as resolveSecretInputRef, ri as stringEnum, yo as sessionKeyAgentMatches } from "./model-selection-DfBJgjil.js";
+import { Bi as secretRefKey, Ca as listAgentIds, Fi as resolveSecretRefValues, Gr as GATEWAY_CLIENT_MODES, H as loadConfig, Kr as GATEWAY_CLIENT_NAMES, Oa as resolveDefaultAgentId, Oo as isAcpSessionKey, Wr as GATEWAY_CLIENT_IDS, Xa as logError, Ya as logDebug, da as hasConfiguredSecretInput, do as normalizeAgentId, fo as normalizeMainKey, jo as isSubagentSessionKey, kt as docsSiteUrl, lt as ASSISTANT_IDENTITY_COLORS, mo as resolveAgentIdFromSessionKey, ni as optionalStringEnum, pa as resolveSecretInputRef, ri as stringEnum, yo as sessionKeyAgentMatches } from "./model-selection-BkyEkRcd.js";
 import { l as resolveStateDir, o as resolveGatewayPort, r as resolveConfigPath } from "./paths-B_gs59ga.js";
 import { Z as CONFIG_DIR, et as ensureDir$1, lt as shortenHomeInString, st as resolveUserPath, t as createSubsystemLogger } from "./subsystem-DynBFcQj.js";
 import { t as emitDiagnosticEvent } from "./diagnostic-events-q1w77c25.js";
-import { H as readJsonFile, I as resolveAgentMainSessionKey, Lt as INPUT_PROVENANCE_KIND_VALUES, O as SESSION_RUN_STATUSES, U as writeJsonAtomic, V as createAsyncLock, W as resolveGatewayCredentialsFromConfig, f as TASK_RUN_MODES, p as TASK_RUN_STATUSES } from "./sessions-DFfMZLkJ.js";
+import { H as readJsonFile, I as resolveAgentMainSessionKey, Lt as INPUT_PROVENANCE_KIND_VALUES, O as SESSION_RUN_STATUSES, U as writeJsonAtomic, V as createAsyncLock, W as resolveGatewayCredentialsFromConfig, f as TASK_RUN_MODES, p as TASK_RUN_STATUSES } from "./sessions-C98njXHy.js";
 import { t as redactIdentifier } from "./redact-identifier-DLySVyKh.js";
-import { i as isSecureWebSocketUrl, t as rawDataToString } from "./ws-kGFg1v4B.js";
-import { a as agentTurnIdempotencyKey, c as enqueueAgentTurn, i as AGENT_TURN_TOPIC, l as isClaimableAgentTurnWorkId, n as getAgentTurnRuntime, o as buildAgentTurnWork } from "./agent-turn-runner-T5NCMyJ_.js";
+import { i as isSecureWebSocketUrl, t as rawDataToString } from "./ws-B4SUb9f_.js";
+import { a as agentTurnIdempotencyKey, c as enqueueAgentTurn, i as AGENT_TURN_TOPIC, l as isClaimableAgentTurnWorkId, n as getAgentTurnRuntime, o as buildAgentTurnWork } from "./agent-turn-runner-BUl_5WBC.js";
 import path from "node:path";
 import syncFs from "node:fs";
 import fs from "node:fs/promises";
@@ -14,7 +14,7 @@ import { promisify } from "node:util";
 import { execFile } from "node:child_process";
 import crypto, { X509Certificate, createHash, randomBytes, randomUUID } from "node:crypto";
 import { Type } from "@sinclair/typebox";
-import { WebSocket as WebSocket$1 } from "ws";
+import { WebSocket } from "ws";
 import AjvPkg from "ajv";
 
 //#region src/shared/device-auth.ts
@@ -2990,7 +2990,7 @@ var GatewayClient = class {
 				if (fingerprint !== expected) return /* @__PURE__ */ new Error("gateway tls fingerprint mismatch");
 			});
 		}
-		this.ws = new WebSocket$1(url, wsOptions);
+		this.ws = new WebSocket(url, wsOptions);
 		this.ws.on("open", () => {
 			if (url.startsWith("wss://") && this.opts.tlsFingerprint) {
 				const tlsError = this.validateTlsFingerprint();
@@ -3186,7 +3186,7 @@ var GatewayClient = class {
 		const connectChallengeTimeoutMs = typeof rawConnectDelayMs === "number" && Number.isFinite(rawConnectDelayMs) ? Math.max(250, Math.min(1e4, rawConnectDelayMs)) : 2e3;
 		if (this.connectTimer) clearTimeout(this.connectTimer);
 		this.connectTimer = setTimeout(() => {
-			if (this.connectSent || this.ws?.readyState !== WebSocket$1.OPEN) return;
+			if (this.connectSent || this.ws?.readyState !== WebSocket.OPEN) return;
 			this.opts.onConnectError?.(/* @__PURE__ */ new Error("gateway connect challenge timeout"));
 			this.ws?.close(1008, "connect challenge timeout");
 		}, connectChallengeTimeoutMs);
@@ -3228,7 +3228,7 @@ var GatewayClient = class {
 		return null;
 	}
 	async request(method, params, opts) {
-		if (!this.ws || this.ws.readyState !== WebSocket$1.OPEN) throw new Error("gateway not connected");
+		if (!this.ws || this.ws.readyState !== WebSocket.OPEN) throw new Error("gateway not connected");
 		const id = randomUUID();
 		const frame = {
 			type: "req",
@@ -4587,7 +4587,7 @@ function indentUntrustedBody(body) {
 }
 function trackNudgeClaimChain(runner, id, sessionKey) {
 	const tracked = (async () => {
-		const { runMainAgentTurn } = await import("./pi-embedded-CM4cbQEb.js").then((n) => n.a);
+		const { runMainAgentTurn } = await import("./pi-embedded-BUj1tpxL.js").then((n) => n.a);
 		await runner.claimAndExecute({
 			workId: id,
 			execute: (claim) => runMainAgentTurn(claim.message.payload)

package/dist/{nudge-D6LqS1z9.js → nudge-DyQYIOed.js}

@@ -1,21 +1,21 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { $r as stringEnum, Br as GATEWAY_CLIENT_IDS, H as loadConfig, Hr as GATEWAY_CLIENT_NAMES, Ii as secretRefKey, Qr as optionalStringEnum, Ta as resolveDefaultAgentId, Vr as GATEWAY_CLIENT_MODES, ca as resolveSecretInputRef, ji as resolveSecretRefValues, kt as docsSiteUrl, lt as ASSISTANT_IDENTITY_COLORS, oa as hasConfiguredSecretInput, va as listAgentIds } from "./model-selection-BKz1FEg5.js";
-import { l as resolveStateDir, o as resolveGatewayPort, r as resolveConfigPath } from "./paths-BIDPYPVC.js";
-import { Z as CONFIG_DIR, et as ensureDir$1, lt as shortenHomeInString, st as resolveUserPath, t as createSubsystemLogger } from "./subsystem-DoQFckDJ.js";
-import { D as logError, E as logDebug, G as resolveAgentIdFromSessionKey, H as normalizeAgentId, U as normalizeMainKey, X as sessionKeyAgentMatches, at as isAcpSessionKey, ct as isSubagentSessionKey } from "./legacy-names-6uH6aLhq.js";
+import { $r as stringEnum, Br as GATEWAY_CLIENT_IDS, H as loadConfig, Hr as GATEWAY_CLIENT_NAMES, Ii as secretRefKey, Qr as optionalStringEnum, Ta as resolveDefaultAgentId, Vr as GATEWAY_CLIENT_MODES, ca as resolveSecretInputRef, ji as resolveSecretRefValues, kt as docsSiteUrl, lt as ASSISTANT_IDENTITY_COLORS, oa as hasConfiguredSecretInput, va as listAgentIds } from "./model-selection-ik2bHbgK.js";
+import { l as resolveStateDir, o as resolveGatewayPort, r as resolveConfigPath } from "./paths-B_gs59ga.js";
+import { Z as CONFIG_DIR, et as ensureDir$1, lt as shortenHomeInString, st as resolveUserPath, t as createSubsystemLogger } from "./subsystem-cFv2jJm-.js";
+import { D as logError, E as logDebug, G as resolveAgentIdFromSessionKey, H as normalizeAgentId, U as normalizeMainKey, X as sessionKeyAgentMatches, at as isAcpSessionKey, ct as isSubagentSessionKey } from "./legacy-names-chsmo2vs.js";
 import { t as emitDiagnosticEvent } from "./diagnostic-events-RfJYFlJM.js";
-import { H as readJsonFile, I as resolveAgentMainSessionKey, Lt as INPUT_PROVENANCE_KIND_VALUES, O as SESSION_RUN_STATUSES, U as writeJsonAtomic, V as createAsyncLock, W as resolveGatewayCredentialsFromConfig, f as TASK_RUN_MODES, p as TASK_RUN_STATUSES } from "./sessions-CoqAntnj.js";
+import { H as readJsonFile, I as resolveAgentMainSessionKey, Lt as INPUT_PROVENANCE_KIND_VALUES, O as SESSION_RUN_STATUSES, U as writeJsonAtomic, V as createAsyncLock, W as resolveGatewayCredentialsFromConfig, f as TASK_RUN_MODES, p as TASK_RUN_STATUSES } from "./sessions-Dwd5H-eS.js";
 import { t as redactIdentifier } from "./redact-identifier-bNChjxxW.js";
-import { i as isSecureWebSocketUrl, t as rawDataToString } from "./ws-BJ7VU-8f.js";
-import { a as agentTurnIdempotencyKey, c as enqueueAgentTurn, i as AGENT_TURN_TOPIC, l as isClaimableAgentTurnWorkId, n as getAgentTurnRuntime, o as buildAgentTurnWork } from "./agent-turn-runner-B4cl3TsM.js";
+import { i as isSecureWebSocketUrl, t as rawDataToString } from "./ws-BOnegOZK.js";
+import { a as agentTurnIdempotencyKey, c as enqueueAgentTurn, i as AGENT_TURN_TOPIC, l as isClaimableAgentTurnWorkId, n as getAgentTurnRuntime, o as buildAgentTurnWork } from "./agent-turn-runner-Pc5bI_FG.js";
 import path from "node:path";
-import fs from "node:fs";
-import fs$1 from "node:fs/promises";
+import syncFs from "node:fs";
+import fs from "node:fs/promises";
 import { promisify } from "node:util";
 import { execFile } from "node:child_process";
 import crypto, { X509Certificate, createHash, randomBytes, randomUUID } from "node:crypto";
 import { Type } from "@sinclair/typebox";
-import { WebSocket } from "ws";
+import { WebSocket as WebSocket$1 } from "ws";
 import AjvPkg from "ajv";
 
 //#region src/shared/device-auth.ts
@@ -135,7 +135,7 @@ function resolveDefaultIdentityPath() {
 	return path.join(resolveStateDir(), "identity", "device.json");
 }
 function ensureDir(filePath) {
-	fs.mkdirSync(path.dirname(filePath), { recursive: true });
+	syncFs.mkdirSync(path.dirname(filePath), { recursive: true });
 }
 const ED25519_SPKI_PREFIX = Buffer.from("302a300506032b6570032100", "hex");
 function base64UrlEncode(buf) {
@@ -171,8 +171,8 @@ function generateIdentity() {
 }
 function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 	try {
-		if (fs.existsSync(filePath)) {
-			const raw = fs.readFileSync(filePath, "utf8");
+		if (syncFs.existsSync(filePath)) {
+			const raw = syncFs.readFileSync(filePath, "utf8");
 			const parsed = JSON.parse(raw);
 			if (parsed?.version === 1 && typeof parsed.deviceId === "string" && typeof parsed.publicKeyPem === "string" && typeof parsed.privateKeyPem === "string") {
 				const derivedId = fingerprintPublicKey(parsed.publicKeyPem);
@@ -181,9 +181,9 @@ function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 						...parsed,
 						deviceId: derivedId
 					};
-					fs.writeFileSync(filePath, `${JSON.stringify(updated, null, 2)}\n`, { mode: 384 });
+					syncFs.writeFileSync(filePath, `${JSON.stringify(updated, null, 2)}\n`, { mode: 384 });
 					try {
-						fs.chmodSync(filePath, 384);
+						syncFs.chmodSync(filePath, 384);
 					} catch {}
 					return {
 						deviceId: derivedId,
@@ -208,9 +208,9 @@ function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 		privateKeyPem: identity.privateKeyPem,
 		createdAtMs: Date.now()
 	};
-	fs.writeFileSync(filePath, `${JSON.stringify(stored, null, 2)}\n`, { mode: 384 });
+	syncFs.writeFileSync(filePath, `${JSON.stringify(stored, null, 2)}\n`, { mode: 384 });
 	try {
-		fs.chmodSync(filePath, 384);
+		syncFs.chmodSync(filePath, 384);
 	} catch {}
 	return identity;
 }
@@ -233,7 +233,7 @@ function normalizeFingerprint(input) {
 const execFileAsync = promisify(execFile);
 async function fileExists(filePath) {
 	try {
-		await fs$1.access(filePath);
+		await fs.access(filePath);
 		return true;
 	} catch {
 		return false;
@@ -260,8 +260,8 @@ async function generateSelfSignedCert(params) {
 		"-subj",
 		"/CN=openclaw-gateway"
 	]);
-	await fs$1.chmod(params.keyPath, 384).catch(() => {});
-	await fs$1.chmod(params.certPath, 384).catch(() => {});
+	await fs.chmod(params.keyPath, 384).catch(() => {});
+	await fs.chmod(params.certPath, 384).catch(() => {});
 	params.log?.info?.(`gateway tls: generated self-signed cert at ${shortenHomeInString(params.certPath)}`);
 }
 async function loadGatewayTlsRuntime(cfg, log) {
@@ -299,9 +299,9 @@ async function loadGatewayTlsRuntime(cfg, log) {
 		error: "gateway tls: cert/key missing"
 	};
 	try {
-		const cert = await fs$1.readFile(certPath, "utf8");
-		const key = await fs$1.readFile(keyPath, "utf8");
-		const ca = caPath ? await fs$1.readFile(caPath, "utf8") : void 0;
+		const cert = await fs.readFile(certPath, "utf8");
+		const key = await fs.readFile(keyPath, "utf8");
+		const ca = caPath ? await fs.readFile(caPath, "utf8") : void 0;
 		const fingerprintSha256 = normalizeFingerprint(new X509Certificate(cert).fingerprint256 ?? "");
 		if (!fingerprintSha256) return {
 			enabled: false,
@@ -387,8 +387,8 @@ function resolveDeviceAuthPath(env = process.env) {
 }
 function readStore(filePath) {
 	try {
-		if (!fs.existsSync(filePath)) return null;
-		const raw = fs.readFileSync(filePath, "utf8");
+		if (!syncFs.existsSync(filePath)) return null;
+		const raw = syncFs.readFileSync(filePath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (parsed?.version !== 1 || typeof parsed.deviceId !== "string") return null;
 		if (!parsed.tokens || typeof parsed.tokens !== "object") return null;
@@ -398,10 +398,10 @@ function readStore(filePath) {
 	}
 }
 function writeStore(filePath, store) {
-	fs.mkdirSync(path.dirname(filePath), { recursive: true });
-	fs.writeFileSync(filePath, `${JSON.stringify(store, null, 2)}\n`, { mode: 384 });
+	syncFs.mkdirSync(path.dirname(filePath), { recursive: true });
+	syncFs.writeFileSync(filePath, `${JSON.stringify(store, null, 2)}\n`, { mode: 384 });
 	try {
-		fs.chmodSync(filePath, 384);
+		syncFs.chmodSync(filePath, 384);
 	} catch {}
 }
 function loadDeviceAuthToken(params) {
@@ -2991,7 +2991,7 @@ var GatewayClient = class {
 				if (fingerprint !== expected) return /* @__PURE__ */ new Error("gateway tls fingerprint mismatch");
 			});
 		}
-		this.ws = new WebSocket(url, wsOptions);
+		this.ws = new WebSocket$1(url, wsOptions);
 		this.ws.on("open", () => {
 			if (url.startsWith("wss://") && this.opts.tlsFingerprint) {
 				const tlsError = this.validateTlsFingerprint();
@@ -3187,7 +3187,7 @@ var GatewayClient = class {
 		const connectChallengeTimeoutMs = typeof rawConnectDelayMs === "number" && Number.isFinite(rawConnectDelayMs) ? Math.max(250, Math.min(1e4, rawConnectDelayMs)) : 2e3;
 		if (this.connectTimer) clearTimeout(this.connectTimer);
 		this.connectTimer = setTimeout(() => {
-			if (this.connectSent || this.ws?.readyState !== WebSocket.OPEN) return;
+			if (this.connectSent || this.ws?.readyState !== WebSocket$1.OPEN) return;
 			this.opts.onConnectError?.(/* @__PURE__ */ new Error("gateway connect challenge timeout"));
 			this.ws?.close(1008, "connect challenge timeout");
 		}, connectChallengeTimeoutMs);
@@ -3229,7 +3229,7 @@ var GatewayClient = class {
 		return null;
 	}
 	async request(method, params, opts) {
-		if (!this.ws || this.ws.readyState !== WebSocket.OPEN) throw new Error("gateway not connected");
+		if (!this.ws || this.ws.readyState !== WebSocket$1.OPEN) throw new Error("gateway not connected");
 		const id = randomUUID();
 		const frame = {
 			type: "req",
@@ -4588,7 +4588,7 @@ function indentUntrustedBody(body) {
 }
 function trackNudgeClaimChain(runner, id, sessionKey) {
 	const tracked = (async () => {
-		const { runMainAgentTurn } = await import("./pi-embedded-BJeshpuP.js").then((n) => n.a);
+		const { runMainAgentTurn } = await import("./pi-embedded-DRpnAuxu.js").then((n) => n.a);
 		await runner.claimAndExecute({
 			workId: id,
 			execute: (claim) => runMainAgentTurn(claim.message.payload)

package/dist/{outbound-attachment-DkplciK0.js → outbound-attachment-C3f9uSt-.js}

@@ -1,13 +1,13 @@
-import { Da as resolveAgentWorkspaceDir, Dr as resolveAccountEntry, Fr as INTERNAL_MESSAGE_CHANNEL, H as loadConfig, So as normalizeAccountId, mr as normalizeChannelId } from "./model-selection-DfBJgjil.js";
+import { Da as resolveAgentWorkspaceDir, Dr as resolveAccountEntry, Fr as INTERNAL_MESSAGE_CHANNEL, H as loadConfig, So as normalizeAccountId, mr as normalizeChannelId } from "./model-selection-BkyEkRcd.js";
 import { l as resolveStateDir } from "./paths-B_gs59ga.js";
 import { f as logVerbose, h as shouldLogVerbose, i as chunkTextByBreakResolver, mt as resolvePreferredOpenClawTmpDir, r as avoidTrailingHighSurrogateBreak, st as resolveUserPath, t as createSubsystemLogger } from "./subsystem-DynBFcQj.js";
 import { n as resolveProcessScopedMap } from "./plain-object-Doc_YkH1.js";
 import { t as redactSensitiveText } from "./redact-CEFvBGJg.js";
-import { C as maxBytesForKind, b as kindFromMime, c as hasAlphaChannel, g as extensionForMime, h as detectMime, l as optimizeImageToPng, m as saveMediaBuffer, n as isSafeFenceBreak, o as convertHeicToJpeg, r as parseFenceSpans, t as findFenceSpanAt, u as resizeToJpeg } from "./fences-DxsYNv6D.js";
-import { o as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-QppbBgli.js";
+import { C as maxBytesForKind, b as kindFromMime, c as hasAlphaChannel, g as extensionForMime, h as detectMime, l as optimizeImageToPng, m as saveMediaBuffer, n as isSafeFenceBreak, o as convertHeicToJpeg, r as parseFenceSpans, t as findFenceSpanAt, u as resizeToJpeg } from "./fences-qAryzYhN.js";
+import { o as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-BFMvT9d3.js";
 import { n as formatErrorChainMessage } from "./errors-yyPKpoXR.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-DYF6dHGu.js";
-import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-CIElogmD.js";
+import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-C1e2uLCm.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { fileURLToPath } from "node:url";

package/dist/{outbound-attachment-6hHA3eSm.js → outbound-attachment-DQtDt9Ne.js}

@@ -1,14 +1,14 @@
-import { Cr as resolveAccountEntry, H as loadConfig, jr as INTERNAL_MESSAGE_CHANNEL, ur as normalizeChannelId, wa as resolveAgentWorkspaceDir } from "./model-selection-BKz1FEg5.js";
-import { l as resolveStateDir } from "./paths-BIDPYPVC.js";
-import { f as logVerbose, h as shouldLogVerbose, i as chunkTextByBreakResolver, mt as resolvePreferredOpenClawTmpDir, r as avoidTrailingHighSurrogateBreak, st as resolveUserPath, t as createSubsystemLogger } from "./subsystem-DoQFckDJ.js";
+import { Cr as resolveAccountEntry, H as loadConfig, jr as INTERNAL_MESSAGE_CHANNEL, ur as normalizeChannelId, wa as resolveAgentWorkspaceDir } from "./model-selection-ik2bHbgK.js";
+import { l as resolveStateDir } from "./paths-B_gs59ga.js";
+import { f as logVerbose, h as shouldLogVerbose, i as chunkTextByBreakResolver, mt as resolvePreferredOpenClawTmpDir, r as avoidTrailingHighSurrogateBreak, st as resolveUserPath, t as createSubsystemLogger } from "./subsystem-cFv2jJm-.js";
 import { n as resolveProcessScopedMap } from "./plain-object-Doc_YkH1.js";
-import { $ as normalizeAccountId } from "./legacy-names-6uH6aLhq.js";
-import { t as redactSensitiveText } from "./redact-C4XKILzo.js";
-import { C as maxBytesForKind, b as kindFromMime, c as hasAlphaChannel, g as extensionForMime, h as detectMime, l as optimizeImageToPng, m as saveMediaBuffer, n as isSafeFenceBreak, o as convertHeicToJpeg, r as parseFenceSpans, t as findFenceSpanAt, u as resizeToJpeg } from "./fences-Dtk43Q2a.js";
-import { o as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-CyG0wflg.js";
-import { n as formatErrorChainMessage } from "./errors-BRYMqzPb.js";
+import { $ as normalizeAccountId } from "./legacy-names-chsmo2vs.js";
+import { t as redactSensitiveText } from "./redact-LOuk7TRy.js";
+import { C as maxBytesForKind, b as kindFromMime, c as hasAlphaChannel, g as extensionForMime, h as detectMime, l as optimizeImageToPng, m as saveMediaBuffer, n as isSafeFenceBreak, o as convertHeicToJpeg, r as parseFenceSpans, t as findFenceSpanAt, u as resizeToJpeg } from "./fences-Z8d1dj8p.js";
+import { o as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-DMWtsz4J.js";
+import { n as formatErrorChainMessage } from "./errors-0-at0aYV.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-CIKAlvUL.js";
-import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-BfFAgAdL.js";
+import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-jXOgaL7k.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { fileURLToPath } from "node:url";

package/dist/{outbound-attachment-DFE9e7Dz.js → outbound-attachment-DwgRvpkl.js}

@@ -1,13 +1,13 @@
-import { Jt as resolveAccountEntry, Lt as normalizeChannelId, Yi as resolveAgentWorkspaceDir, go as normalizeAccountId, in as loadConfig, r as INTERNAL_MESSAGE_CHANNEL } from "./group-DNWpfMve.js";
+import { Jt as resolveAccountEntry, Lt as normalizeChannelId, Yi as resolveAgentWorkspaceDir, go as normalizeAccountId, in as loadConfig, r as INTERNAL_MESSAGE_CHANNEL } from "./group-Dvl8dfJ2.js";
 import { u as resolveStateDir } from "./paths-2qlGWRjc.js";
-import { M as shouldLogVerbose, b as resolveUserPath, gt as resolvePreferredOpenClawTmpDir, i as chunkTextByBreakResolver, k as logVerbose, r as avoidTrailingHighSurrogateBreak, t as createSubsystemLogger } from "./subsystem-DY5Ww-lX.js";
+import { M as shouldLogVerbose, b as resolveUserPath, gt as resolvePreferredOpenClawTmpDir, i as chunkTextByBreakResolver, k as logVerbose, r as avoidTrailingHighSurrogateBreak, t as createSubsystemLogger } from "./subsystem-BntNuBAj.js";
 import { n as resolveProcessScopedMap } from "./plain-object-Doc_YkH1.js";
-import { t as redactSensitiveText } from "./redact-DU9QXIsh.js";
-import { n as formatErrorChainMessage } from "./errors-CK3mNfUZ.js";
-import { C as maxBytesForKind, b as kindFromMime, c as hasAlphaChannel, g as extensionForMime, h as detectMime, l as optimizeImageToPng, m as saveMediaBuffer, n as isSafeFenceBreak, o as convertHeicToJpeg, r as parseFenceSpans, t as findFenceSpanAt, u as resizeToJpeg } from "./fences-DdMLzXvz.js";
-import { o as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-BXAFIPNF.js";
+import { t as redactSensitiveText } from "./redact-BvO7EAk7.js";
+import { n as formatErrorChainMessage } from "./errors-7NHaEHOi.js";
+import { C as maxBytesForKind, b as kindFromMime, c as hasAlphaChannel, g as extensionForMime, h as detectMime, l as optimizeImageToPng, m as saveMediaBuffer, n as isSafeFenceBreak, o as convertHeicToJpeg, r as parseFenceSpans, t as findFenceSpanAt, u as resizeToJpeg } from "./fences-BXndK9rN.js";
+import { o as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-B9UKPVRL.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-CGwuoZjW.js";
-import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-huDqYgcZ.js";
+import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-DVq681NM.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { fileURLToPath } from "node:url";

package/dist/{pi-embedded-CM4cbQEb.js → pi-embedded-BUj1tpxL.js}

@@ -1,41 +1,41 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { $ as setConfigValueAtPath, $i as listProfilesForProvider, $t as setActivePluginRegistry, A as resolveApiKeyForProvider, Aa as resolveRunModelFallbacksOverride, Ai as splitShellArgs, An as commitPreparedConfiguredSessionStorageRuntimeActivation, Ar as deliveryContextFromSession, At as BUNDLED_ENABLED_BY_DEFAULT, B as resolveProfilesUnavailableReason, Bi as secretRefKey, Br as listDeliverableMessageChannels, C as buildAssistantMessage, Ca as listAgentIds, Ci as resolveAllowlistCandidatePath, Cn as recordSessionMetaFromInbound, Co as normalizeOptionalAccountId, Cr as resolveIMessageAccount, D as getApiKeyForModel, Da as resolveAgentWorkspaceDir, Di as isShellWrapperExecutable, Dn as updateSessionStoreEntry, Do as getSubagentDepth, Dr as resolveAccountEntry, Dt as loadPluginManifestRegistry, E as buildUsageWithNoCost, Ea as resolveAgentSkillsFilter, Ei as isDispatchWrapperExecutable, En as updateSessionStore, Eo as WAKE_GATE_SESSION_KEY_SEGMENT, Er as resolveChannelGroupToolsPolicy, Et as validateJsonSchemaValue, F as resolveAuthProfileOrder, Fa as DEFAULT_BOOTSTRAP_FILENAME, Fi as resolveSecretRefValues, Fn as readSessionUpdatedAt, Fo as resolveAgentModelFallbackValues, Fr as INTERNAL_MESSAGE_CHANNEL, Ft as resolveMemorySlotDecision, G as writeConfigFile, Gi as resolveShellEnvFallbackTimeoutMs, Gr as GATEWAY_CLIENT_MODES, Gt as normalizeChannelId$2, H as loadConfig, Ha as filterBootstrapFilesForSession, Hi as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, Hr as resolveGatewayMessageChannel, Ht as getChatChannelMeta, I as getSoonestCooldownExpiry, Ia as DEFAULT_HEARTBEAT_FILENAME, Ii as describeUnknownError$1, In as parseDurationMs, Io as resolveAgentModelPrimaryValue, Ir as isDeliverableMessageChannel, It as discoverOpenClawPlugins, J as resetConfigOverrides, Ja as spawnWithFallback, Ji as resolveOwnerDisplaySetting, Jn as resolveSessionTranscriptPath, Jr as CtxProjectionCorruptionError, Jt as getActiveGatewayPluginRegistry, K as createConfigIO, Ka as runCommandWithTimeout, Ki as isTruthyEnvValue, Kn as resolveSessionFilePath, Kr as GATEWAY_CLIENT_NAMES, Kt as normalizeChatChannelId, L as isProfileInCooldown, Li as isNonEmptyString, Ln as getConfiguredSessionStorageRuntime, Lo as toAgentModelListLike, Lt as isPathInside, M as resolveModelAuthMode, Ma as resolveSessionAgentIds, Mi as normalizeSafeBinProfileFixtures, Mn as refreshConfiguredSessionBindingEntry, Mo as parseAgentSessionKey, Mr as mergeDeliveryContext, Mt as isBundledChannelEnabledByChannelConfig, N as resolveModelProviderConfig, Ni as resolveSafeBinProfiles, Nn as loadSessionStore, No as resolveThreadParentSessionKey, Nr as normalizeDeliveryContext, Nt as normalizePluginsConfig, O as getCustomProviderApiKey, Oa as resolveDefaultAgentId, Oi as unwrapKnownDispatchWrapperInvocation, On as closeConfiguredSessionStorageRuntime, Oo as isAcpSessionKey, Or as resolveConversationLabel, Ot as DOCS_SITE_URL, Pa as DEFAULT_AGENT_WORKSPACE_DIR, Pi as isSafeExecutableValue, Pn as loadSessionStoreFromDisk, Po as stripAgentSessionKeyPrefix, Pr as normalizeSessionDeliveryFields, Pt as resolveEffectiveEnableState, Q as parseConfigPath, Qa as logWarn, Qi as dedupeProfileIds, Qn as resolveSessionLockMaxHoldFromTimeout, Qt as requireActivePluginRegistry, R as markAuthProfileFailure, Ri as isRecord$1, Rr as isInternalMessageChannel, Rt as safeStatSync, S as createOllamaStreamFn, Si as matchAllowlist, Sn as requireSessionStorageRuntime, So as normalizeAccountId$1, Sr as resolveCliName, T as buildStreamErrorAssistantMessage, Ta as resolveAgentDir, Ti as extractShellWrapperInlineCommand, Tn as updateLastRoute, Tr as resolveChannelGroupRequireMention, Tt as listBindings, U as readConfigFileSnapshot, Ua as loadWorkspaceBootstrapFiles, Ui as VERSION, Un as SAFE_SESSION_ID_RE, Ur as resolveMessageChannel, Ut as listChatChannels, V as resolveApiKeyForProfile, Va as ensureAgentWorkspace, Vi as runTasksWithConcurrency, Vr as normalizeMessageChannel, Vt as CHAT_CHANNEL_ORDER, W as readConfigFileSnapshotForWrite, Wa as resolveOpenClawPackageRoot, Wi as getShellPathFromLoginShell, Wn as SESSION_RUN_STORE_FILE_NAME, Wr as GATEWAY_CLIENT_IDS, Wt as normalizeAnyChannelId, X as unsetConfigOverride, Xa as logError, Xi as getRuntimeConfigSnapshot, Xn as resolveStorePath, Xt as getActivePluginRegistryKey, Y as setConfigOverride, Ya as logDebug, Yi as advanceRuntimeConfigSnapshot, Yr as readTaskWorkStates, Yt as getActivePluginRegistry, Z as getConfigValueAtPath, Za as logInfo, Zi as applyMergePatch, Zn as acquireSessionWriteLock, _a as DEFAULT_PROVIDER, _i as analyzeShellCommand, _n as triggerInternalHook, _o as resolveThreadSessionKeys, _r as isWhatsAppGroupJid, a as isCliProvider, aa as isPidAlive, ai as actionHasTarget, an as clearPluginCommands, ao as buildAgentPeerSessionKey, ar as resolveGroupSessionKey, at as resolveIMessageAttachmentRoots, b as retryAsync, ba as isAgentUserFacing, bi as splitCommandChain, bn as getConversationReadQuery, bo as toAgentStoreSessionKey, br as resolveWhatsAppAccount, c as normalizeProviderId, ci as discardBufferedPluginTaskPasses, cn as matchPluginCommand, cr as normalizeStringEntries, ct as parseNonNegativeByteSize, d as resolveDefaultModelForAgent, da as hasConfiguredSecretInput, di as RecoveryAdmissionError, dn as getRegisteredSpeechProviders, do as normalizeAgentId, dr as normalizeSignalMessagingTarget, ea as markAuthProfileGood, ei as channelTargetSchema, en as addRegisteredPluginApi, eo as DEFAULT_AGENT_ID, er as DEFAULT_RESET_TRIGGERS, et as unsetConfigValueAtPath, f as resolveModelRefFromString, fa as normalizeResolvedSecretInputString, fi as getTrustedSafeBinDirs, fn as getSpeechProvider, fo as normalizeMainKey, fr as getChannelPlugin, ga as DEFAULT_MODEL, gi as validateSafeBinArgv, gn as createInternalHookEvent, go as resolveConfiguredCanonicalIdentity, gr as resolveSignalAccount, h as resolveThinkingDefault, ha as DEFAULT_CONTEXT_TOKENS, hi as normalizeTrustedSafeBinDirs, hn as normalizeProviderId$1, ho as resolveCanonicalIdentity, hr as listEnabledSignalAccounts, i as findNormalizedProviderValue, ia as withFileLock$1, ii as applyTargetToParams, in as buildPluginHealthReport, io as buildAgentMainSessionKey, ir as deriveSessionMetaPatch, it as mergeInboundPathRoots, j as resolveEnvApiKey, ja as resolveSessionAgentId, ji as SAFE_BIN_PROFILES, jn as prepareConfiguredSessionStorageRuntimeActivation, jo as isSubagentSessionKey, jr as deliveryContextKey, jt as applyTestPluginDefaults, k as requireApiKey, ki as unwrapKnownShellMultiplexerInvocation, kn as closeReplacedConfiguredSessionStorageRuntime, ko as isCronSessionKey, kr as normalizeChatType, kt as docsSiteUrl, l as parseModelRef, la as normalizeSecretInput, li as listBufferedPluginTaskPasses, ln as registerPluginCommand, lo as isKnownAgentMainSessionKey, lr as getChannelDock, m as resolveSubagentSpawnModelSelection, ma as splitTrailingAuthProfile, mi as listWritableExplicitTrustedSafeBinDirs, mn as replaceSpeechProviders, mo as resolveAgentIdFromSessionKey, mr as normalizeChannelId$1, n as buildConfiguredAllowlistKeys, na as resolveAuthStorePathForDisplay, ni as optionalStringEnum, nn as createPluginRegistry, no as DEVICE_SENDER_PREFIX, nr as resolveFreshSessionTotalTokens, nt as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, o as modelKey, oa as readProcessElapsedSeconds, oi as actionRequiresTarget, on as executePluginCommand, oo as classifySessionKeyShape, or as resolveParentSessionGroupId, ot as resolveIMessageRemoteAttachmentRoots, p as resolveReasoningDefault, pa as resolveSecretInputRef, pi as isTrustedSafeBinPath, pn as isBuiltinTtsProvider, po as normalizeToken$1, pr as listChannelPlugins, q as getConfigOverrides, qa as runExec, qi as parseBooleanValue$1, qn as resolveSessionFilePathOptions, qt as resolveChannelConfigId, r as buildModelAliasIndex, ra as resolveOpenClawAgentDir, ri as stringEnum, rn as normalizePluginHttpPath, rt as isInboundPathAllowed, s as normalizeModelRef$1, sa as resolveAuthProfileDisplayLabel, sn as listPluginCommands, sr as normalizeAtHashSlug, st as normalizeScpRemoteHost, t as buildAllowedModelSet, ta as ensureAuthProfileStore, ti as channelTargetsSchema, tn as clearRegisteredPluginApis, to as DEFAULT_MAIN_KEY, tr as mergeSessionEntry, tt as validateConfigObjectWithPlugins, u as resolveConfiguredModelRef, ua as coerceSecretRef, ui as replaceBufferedPluginTaskPasses, un as BUILTIN_TTS_PROVIDER_IDS, uo as isValidAgentId, ur as listChannelDocks, ut as resolveExecPolicyPreset, va as acceptsInheritedIdentity, vi as buildEnforcedShellCommand, vn as StorageReadAccessError, vo as sanitizeAgentId, vr as normalizeWhatsAppTarget, w as buildAssistantMessageWithZeroUsage, wa as resolveAgentConfig, wi as resolveCommandResolutionFromArgv, wr as resolveChannelGroupPolicy, wt as buildChannelAccountBindings, x as OLLAMA_NATIVE_BASE_URL, xa as isInternalAgentSessionKey, xi as DEFAULT_SAFE_BINS, xo as DEFAULT_ACCOUNT_ID, xr as formatCliCommand, ya as hasConfiguredModelFallbacks, yi as isWindowsPlatform, yn as createConversationReadQuery, yo as sessionKeyAgentMatches, yr as hasAnyWhatsAppAuth, z as markAuthProfileUsed, zi as parseDotPath, zn as parseSessionIndexRecordKey, zr as isMarkdownCapableMessageChannel, zt as readManifestNamespace } from "./model-selection-DfBJgjil.js";
+import { $ as setConfigValueAtPath, $i as listProfilesForProvider, $t as setActivePluginRegistry, A as resolveApiKeyForProvider, Aa as resolveRunModelFallbacksOverride, Ai as splitShellArgs, An as commitPreparedConfiguredSessionStorageRuntimeActivation, Ar as deliveryContextFromSession, At as BUNDLED_ENABLED_BY_DEFAULT, B as resolveProfilesUnavailableReason, Bi as secretRefKey, Br as listDeliverableMessageChannels, C as buildAssistantMessage, Ca as listAgentIds, Ci as resolveAllowlistCandidatePath, Cn as recordSessionMetaFromInbound, Co as normalizeOptionalAccountId, Cr as resolveIMessageAccount, D as getApiKeyForModel, Da as resolveAgentWorkspaceDir, Di as isShellWrapperExecutable, Dn as updateSessionStoreEntry, Do as getSubagentDepth, Dr as resolveAccountEntry, Dt as loadPluginManifestRegistry, E as buildUsageWithNoCost, Ea as resolveAgentSkillsFilter, Ei as isDispatchWrapperExecutable, En as updateSessionStore, Eo as WAKE_GATE_SESSION_KEY_SEGMENT, Er as resolveChannelGroupToolsPolicy, Et as validateJsonSchemaValue, F as resolveAuthProfileOrder, Fa as DEFAULT_BOOTSTRAP_FILENAME, Fi as resolveSecretRefValues, Fn as readSessionUpdatedAt, Fo as resolveAgentModelFallbackValues, Fr as INTERNAL_MESSAGE_CHANNEL, Ft as resolveMemorySlotDecision, G as writeConfigFile, Gi as resolveShellEnvFallbackTimeoutMs, Gr as GATEWAY_CLIENT_MODES, Gt as normalizeChannelId$2, H as loadConfig, Ha as filterBootstrapFilesForSession, Hi as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, Hr as resolveGatewayMessageChannel, Ht as getChatChannelMeta, I as getSoonestCooldownExpiry, Ia as DEFAULT_HEARTBEAT_FILENAME, Ii as describeUnknownError$1, In as parseDurationMs, Io as resolveAgentModelPrimaryValue, Ir as isDeliverableMessageChannel, It as discoverOpenClawPlugins, J as resetConfigOverrides, Ja as spawnWithFallback, Ji as resolveOwnerDisplaySetting, Jn as resolveSessionTranscriptPath, Jr as CtxProjectionCorruptionError, Jt as getActiveGatewayPluginRegistry, K as createConfigIO, Ka as runCommandWithTimeout, Ki as isTruthyEnvValue, Kn as resolveSessionFilePath, Kr as GATEWAY_CLIENT_NAMES, Kt as normalizeChatChannelId, L as isProfileInCooldown, Li as isNonEmptyString, Ln as getConfiguredSessionStorageRuntime, Lo as toAgentModelListLike, Lt as isPathInside, M as resolveModelAuthMode, Ma as resolveSessionAgentIds, Mi as normalizeSafeBinProfileFixtures, Mn as refreshConfiguredSessionBindingEntry, Mo as parseAgentSessionKey, Mr as mergeDeliveryContext, Mt as isBundledChannelEnabledByChannelConfig, N as resolveModelProviderConfig, Ni as resolveSafeBinProfiles, Nn as loadSessionStore, No as resolveThreadParentSessionKey, Nr as normalizeDeliveryContext, Nt as normalizePluginsConfig, O as getCustomProviderApiKey, Oa as resolveDefaultAgentId, Oi as unwrapKnownDispatchWrapperInvocation, On as closeConfiguredSessionStorageRuntime, Oo as isAcpSessionKey, Or as resolveConversationLabel, Ot as DOCS_SITE_URL, Pa as DEFAULT_AGENT_WORKSPACE_DIR, Pi as isSafeExecutableValue, Pn as loadSessionStoreFromDisk, Po as stripAgentSessionKeyPrefix, Pr as normalizeSessionDeliveryFields, Pt as resolveEffectiveEnableState, Q as parseConfigPath, Qa as logWarn, Qi as dedupeProfileIds, Qn as resolveSessionLockMaxHoldFromTimeout, Qt as requireActivePluginRegistry, R as markAuthProfileFailure, Ri as isRecord$1, Rr as isInternalMessageChannel, Rt as safeStatSync, S as createOllamaStreamFn, Si as matchAllowlist, Sn as requireSessionStorageRuntime, So as normalizeAccountId$1, Sr as resolveCliName, T as buildStreamErrorAssistantMessage, Ta as resolveAgentDir, Ti as extractShellWrapperInlineCommand, Tn as updateLastRoute, Tr as resolveChannelGroupRequireMention, Tt as listBindings, U as readConfigFileSnapshot, Ua as loadWorkspaceBootstrapFiles, Ui as VERSION, Un as SAFE_SESSION_ID_RE, Ur as resolveMessageChannel, Ut as listChatChannels, V as resolveApiKeyForProfile, Va as ensureAgentWorkspace, Vi as runTasksWithConcurrency, Vr as normalizeMessageChannel, Vt as CHAT_CHANNEL_ORDER, W as readConfigFileSnapshotForWrite, Wa as resolveOpenClawPackageRoot, Wi as getShellPathFromLoginShell, Wn as SESSION_RUN_STORE_FILE_NAME, Wr as GATEWAY_CLIENT_IDS, Wt as normalizeAnyChannelId, X as unsetConfigOverride, Xa as logError, Xi as getRuntimeConfigSnapshot, Xn as resolveStorePath, Xt as getActivePluginRegistryKey, Y as setConfigOverride, Ya as logDebug, Yi as advanceRuntimeConfigSnapshot, Yr as readTaskWorkStates, Yt as getActivePluginRegistry, Z as getConfigValueAtPath, Za as logInfo, Zi as applyMergePatch, Zn as acquireSessionWriteLock, _a as DEFAULT_PROVIDER, _i as analyzeShellCommand, _n as triggerInternalHook, _o as resolveThreadSessionKeys, _r as isWhatsAppGroupJid, a as isCliProvider, aa as isPidAlive, ai as actionHasTarget, an as clearPluginCommands, ao as buildAgentPeerSessionKey, ar as resolveGroupSessionKey, at as resolveIMessageAttachmentRoots, b as retryAsync, ba as isAgentUserFacing, bi as splitCommandChain, bn as getConversationReadQuery, bo as toAgentStoreSessionKey, br as resolveWhatsAppAccount, c as normalizeProviderId, ci as discardBufferedPluginTaskPasses, cn as matchPluginCommand, cr as normalizeStringEntries, ct as parseNonNegativeByteSize, d as resolveDefaultModelForAgent, da as hasConfiguredSecretInput, di as RecoveryAdmissionError, dn as getRegisteredSpeechProviders, do as normalizeAgentId, dr as normalizeSignalMessagingTarget, ea as markAuthProfileGood, ei as channelTargetSchema, en as addRegisteredPluginApi, eo as DEFAULT_AGENT_ID, er as DEFAULT_RESET_TRIGGERS, et as unsetConfigValueAtPath, f as resolveModelRefFromString, fa as normalizeResolvedSecretInputString, fi as getTrustedSafeBinDirs, fn as getSpeechProvider, fo as normalizeMainKey, fr as getChannelPlugin, ga as DEFAULT_MODEL, gi as validateSafeBinArgv, gn as createInternalHookEvent, go as resolveConfiguredCanonicalIdentity, gr as resolveSignalAccount, h as resolveThinkingDefault, ha as DEFAULT_CONTEXT_TOKENS, hi as normalizeTrustedSafeBinDirs, hn as normalizeProviderId$1, ho as resolveCanonicalIdentity, hr as listEnabledSignalAccounts, i as findNormalizedProviderValue, ia as withFileLock$1, ii as applyTargetToParams, in as buildPluginHealthReport, io as buildAgentMainSessionKey, ir as deriveSessionMetaPatch, it as mergeInboundPathRoots, j as resolveEnvApiKey, ja as resolveSessionAgentId, ji as SAFE_BIN_PROFILES, jn as prepareConfiguredSessionStorageRuntimeActivation, jo as isSubagentSessionKey, jr as deliveryContextKey, jt as applyTestPluginDefaults, k as requireApiKey, ki as unwrapKnownShellMultiplexerInvocation, kn as closeReplacedConfiguredSessionStorageRuntime, ko as isCronSessionKey, kr as normalizeChatType, kt as docsSiteUrl, l as parseModelRef, la as normalizeSecretInput, li as listBufferedPluginTaskPasses, ln as registerPluginCommand, lo as isKnownAgentMainSessionKey, lr as getChannelDock, m as resolveSubagentSpawnModelSelection, ma as splitTrailingAuthProfile, mi as listWritableExplicitTrustedSafeBinDirs, mn as replaceSpeechProviders, mo as resolveAgentIdFromSessionKey, mr as normalizeChannelId$1, n as buildConfiguredAllowlistKeys, na as resolveAuthStorePathForDisplay, ni as optionalStringEnum, nn as createPluginRegistry, no as DEVICE_SENDER_PREFIX, nr as resolveFreshSessionTotalTokens, nt as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, o as modelKey, oa as readProcessElapsedSeconds, oi as actionRequiresTarget, on as executePluginCommand, oo as classifySessionKeyShape, or as resolveParentSessionGroupId, ot as resolveIMessageRemoteAttachmentRoots, p as resolveReasoningDefault, pa as resolveSecretInputRef, pi as isTrustedSafeBinPath, pn as isBuiltinTtsProvider, po as normalizeToken$1, pr as listChannelPlugins, q as getConfigOverrides, qa as runExec, qi as parseBooleanValue$1, qn as resolveSessionFilePathOptions, qt as resolveChannelConfigId, r as buildModelAliasIndex, ra as resolveOpenClawAgentDir, ri as stringEnum, rn as normalizePluginHttpPath, rt as isInboundPathAllowed, s as normalizeModelRef$1, sa as resolveAuthProfileDisplayLabel, sn as listPluginCommands, sr as normalizeAtHashSlug, st as normalizeScpRemoteHost, t as buildAllowedModelSet, ta as ensureAuthProfileStore, ti as channelTargetsSchema, tn as clearRegisteredPluginApis, to as DEFAULT_MAIN_KEY, tr as mergeSessionEntry, tt as validateConfigObjectWithPlugins, u as resolveConfiguredModelRef, ua as coerceSecretRef, ui as replaceBufferedPluginTaskPasses, un as BUILTIN_TTS_PROVIDER_IDS, uo as isValidAgentId, ur as listChannelDocks, ut as resolveExecPolicyPreset, va as acceptsInheritedIdentity, vi as buildEnforcedShellCommand, vn as StorageReadAccessError, vo as sanitizeAgentId, vr as normalizeWhatsAppTarget, w as buildAssistantMessageWithZeroUsage, wa as resolveAgentConfig, wi as resolveCommandResolutionFromArgv, wr as resolveChannelGroupPolicy, wt as buildChannelAccountBindings, x as OLLAMA_NATIVE_BASE_URL, xa as isInternalAgentSessionKey, xi as DEFAULT_SAFE_BINS, xo as DEFAULT_ACCOUNT_ID, xr as formatCliCommand, ya as hasConfiguredModelFallbacks, yi as isWindowsPlatform, yn as createConversationReadQuery, yo as sessionKeyAgentMatches, yr as hasAnyWhatsAppAuth, z as markAuthProfileUsed, zi as parseDotPath, zn as parseSessionIndexRecordKey, zr as isMarkdownCapableMessageChannel, zt as readManifestNamespace } from "./model-selection-BkyEkRcd.js";
 import { a as resolveGatewayLockDir, f as resolveRequiredHomeDir, l as resolveStateDir, o as resolveGatewayPort, r as resolveConfigPath, s as resolveOAuthDir, u as expandHomePrefix } from "./paths-B_gs59ga.js";
 import { C as appendFileLog, F as openBoundaryFileSync, K as isDangerousHostEnvVarName, O as INCLUDE_KEY, P as openBoundaryFile, Q as clampInt, T as normalizeLogLevel, U as isSymlinkOpenError, V as isNotFoundPathError, W as normalizeWindowsPathForComparison, Z as CONFIG_DIR, _ as colorize, a as createNonExitingRuntime, b as getChildLogger, c as registerActiveProgressLine, ct as safeParseJson, dt as sleep$2, f as logVerbose, ft as sliceUtf16Safe, g as warn, h as shouldLogVerbose, it as normalizeE164, j as isBlockedObjectKey, l as unregisterActiveProgressLine, lt as shortenHomeInString, m as setVerbose, mt as resolvePreferredOpenClawTmpDir, nt as formatTerminalLink, o as defaultRuntime, pt as truncateUtf16Safe, rt as isRecord$2, s as clearActiveProgressLine, st as resolveUserPath, t as createSubsystemLogger, tt as escapeRegExp, u as danger, ut as shortenHomePath, v as isRich, y as theme } from "./subsystem-DynBFcQj.js";
 import { n as resolveProcessScopedMap, t as isPlainObject } from "./plain-object-Doc_YkH1.js";
 import { a as saveJsonFile, i as loadJsonFile, r as resolveCopilotApiToken } from "./github-copilot-token-C-29TbW-.js";
-import { $ as resolveSandboxRuntimeStatus, A as classifyFailoverReason, At as listCoreToolIds, B as isFailoverAssistantError, Bt as isSilentReplyText, C as resolveImageSanitizationLimits, Ct as collectExplicitAllowlist, D as downgradeOpenAIReasoningBlocks, Dt as expandToolGroups, E as downgradeOpenAIFunctionCallReasoningPairs, Et as stripPluginOnlyAllowlist, F as isAuthAssistantError, Ft as resolveBootstrapTotalMaxChars, G as isTransientHttpError, H as isLikelyContextOverflowError, I as isBillingAssistantError, It as sanitizeGoogleTurnOrdering, J as sanitizeUserFacingText, K as parseImageDimensionError, L as isCloudCodeAssistFormatError, Lt as HEARTBEAT_TOKEN, M as formatBillingErrorMessage, Mt as matchesAnyGlobPattern, N as formatRawAssistantErrorForUi, Nt as buildBootstrapContextFiles, O as isGoogleModelApi, Ot as normalizeToolName, P as getApiErrorPayloadFingerprint, Pt as resolveBootstrapMaxChars, Q as resolveSandboxContext, R as isCompactionFailureError, Rt as SILENT_REPLY_TOKEN, S as sanitizeToolResultImages, St as buildPluginToolGroups, T as estimateBase64DecodedBytes, Tt as mergeAlsoAllowPolicy, U as isRateLimitAssistantError, V as isFailoverErrorMessage, Vt as stripSilentToken, W as isRawApiErrorPayload, X as isTimeoutErrorMessage, Y as isAuthPermanentErrorMessage, Z as ensureSandboxWorkspaceForSession, _t as applySkillEnvOverridesFromSnapshot, a as validateGeminiTurns, at as buildWorkspaceSkillCommandSpecs, b as sanitizeSessionMessagesImages, bt as resolveSandboxConfigForAgent, c as formatXHighModelHint, ct as resolveManagedSkillsDir, d as normalizeReasoningLevel, dt as resolvePluginSkillDirs, et as createBrowserRouteContext, f as normalizeThinkLevel, ft as assertMediaNotDataUrl, g as supportsXHighThinking, gt as applySkillEnvOverrides, h as resolveResponseUsageMode, ht as resolveSandboxedMediaSource, i as validateAnthropicTurns, it as getBridgeAuthForPort, j as formatAssistantErrorText, jt as compileGlobPatterns, k as BILLING_ERROR_USER_MESSAGE, kt as resolveToolProfilePolicy, l as listThinkingLevels, lt as resolveSkillsPromptForRun, m as normalizeVerboseLevel, mt as resolveSandboxInputPath, n as splitMediaFromOutput, nt as resolveBrowserConfig, o as pickFallbackThinkingLevel, ot as buildWorkspaceSkillSnapshot, p as normalizeUsageDisplay, pt as assertSandboxPath, q as parseImageSizeError, r as extractTextFromChatContent, rt as resolveProfile, s as formatThinkingLevels, st as loadWorkspaceSkillEntries, t as parseReplyDirectives, tt as registerBrowserRoutes, u as normalizeElevatedLevel, ut as skillsSnapshotSourceDiffers, v as isMessagingToolDuplicateNormalized, vt as ensureBrowserControlAuth, w as canonicalizeBase64, wt as expandPolicyWithPluginGroups, x as sanitizeImageBlocks, xt as applyOwnerOnlyToolPolicy, y as normalizeTextForComparison, yt as resolveBrowserControlAuth, z as isContextOverflowError, zt as isSilentReplyPrefixText } from "./reply-directives-DQdLCsf7.js";
+import { $ as resolveSandboxRuntimeStatus, A as classifyFailoverReason, At as listCoreToolIds, B as isFailoverAssistantError, Bt as isSilentReplyText, C as resolveImageSanitizationLimits, Ct as collectExplicitAllowlist, D as downgradeOpenAIReasoningBlocks, Dt as expandToolGroups, E as downgradeOpenAIFunctionCallReasoningPairs, Et as stripPluginOnlyAllowlist, F as isAuthAssistantError, Ft as resolveBootstrapTotalMaxChars, G as isTransientHttpError, H as isLikelyContextOverflowError, I as isBillingAssistantError, It as sanitizeGoogleTurnOrdering, J as sanitizeUserFacingText, K as parseImageDimensionError, L as isCloudCodeAssistFormatError, Lt as HEARTBEAT_TOKEN, M as formatBillingErrorMessage, Mt as matchesAnyGlobPattern, N as formatRawAssistantErrorForUi, Nt as buildBootstrapContextFiles, O as isGoogleModelApi, Ot as normalizeToolName, P as getApiErrorPayloadFingerprint, Pt as resolveBootstrapMaxChars, Q as resolveSandboxContext, R as isCompactionFailureError, Rt as SILENT_REPLY_TOKEN, S as sanitizeToolResultImages, St as buildPluginToolGroups, T as estimateBase64DecodedBytes, Tt as mergeAlsoAllowPolicy, U as isRateLimitAssistantError, V as isFailoverErrorMessage, Vt as stripSilentToken, W as isRawApiErrorPayload, X as isTimeoutErrorMessage, Y as isAuthPermanentErrorMessage, Z as ensureSandboxWorkspaceForSession, _t as applySkillEnvOverridesFromSnapshot, a as validateGeminiTurns, at as buildWorkspaceSkillCommandSpecs, b as sanitizeSessionMessagesImages, bt as resolveSandboxConfigForAgent, c as formatXHighModelHint, ct as resolveManagedSkillsDir, d as normalizeReasoningLevel, dt as resolvePluginSkillDirs, et as createBrowserRouteContext, f as normalizeThinkLevel, ft as assertMediaNotDataUrl, g as supportsXHighThinking, gt as applySkillEnvOverrides, h as resolveResponseUsageMode, ht as resolveSandboxedMediaSource, i as validateAnthropicTurns, it as getBridgeAuthForPort, j as formatAssistantErrorText, jt as compileGlobPatterns, k as BILLING_ERROR_USER_MESSAGE, kt as resolveToolProfilePolicy, l as listThinkingLevels, lt as resolveSkillsPromptForRun, m as normalizeVerboseLevel, mt as resolveSandboxInputPath, n as splitMediaFromOutput, nt as resolveBrowserConfig, o as pickFallbackThinkingLevel, ot as buildWorkspaceSkillSnapshot, p as normalizeUsageDisplay, pt as assertSandboxPath, q as parseImageSizeError, r as extractTextFromChatContent, rt as resolveProfile, s as formatThinkingLevels, st as loadWorkspaceSkillEntries, t as parseReplyDirectives, tt as registerBrowserRoutes, u as normalizeElevatedLevel, ut as skillsSnapshotSourceDiffers, v as isMessagingToolDuplicateNormalized, vt as ensureBrowserControlAuth, w as canonicalizeBase64, wt as expandPolicyWithPluginGroups, x as sanitizeImageBlocks, xt as applyOwnerOnlyToolPolicy, y as normalizeTextForComparison, yt as resolveBrowserControlAuth, z as isContextOverflowError, zt as isSilentReplyPrefixText } from "./reply-directives-CzQd7ai4.js";
 import { n as isDiagnosticsEnabled, t as emitDiagnosticEvent } from "./diagnostic-events-q1w77c25.js";
-import { $ as buildInboundMetaSystemPrompt, A as evaluateSessionFreshness, At as openRawToolResultStash, B as isSessionArchiveArtifactName, Bt as getGlobalHookRunner, C as normalizeHttpWebhookUrl, Ct as TOOL_RESULT_CHARS_PER_TOKEN_ESTIMATE, D as SESSION_RUN_CONTEXT_MAX_NAMES, Dt as getToolResultText$1, E as parseAbsoluteTimeMs, Et as estimateMessageCharsCached, F as canonicalizeMainSessionAlias, Ft as canonicalToolCallIdBase, Gt as createCurrentUserPromptEnvelope, Ht as initializeGlobalHookRunner, I as resolveAgentMainSessionKey, It as sanitizeToolCallIdsForCloudCodeAssist, J as runSerializedBySession, Jt as buildPluginRuntimeIdentity, K as trimToUndefined, Kt as mergePromptContributions, M as resolveSessionResetPolicy, Mt as sanitizeToolCallInputs, N as resolveSessionResetType, Nt as sanitizeToolUseResultPairing, Ot as isToolResultMessage, P as resolveThreadFlag, Pt as stripToolResultDetails, Q as sha256, R as resolveMainSessionKey, Rt as hasInterSessionUserProvenance, S as inferLegacyName, St as CHARS_PER_TOKEN_ESTIMATE$2, T as resolveDefaultCronStaggerMs, Tt as estimateContextChars$1, U as writeJsonAtomic, Ut as hasHookForPlugin, V as createAsyncLock, Vt as getGlobalPluginRegistry, W as resolveGatewayCredentialsFromConfig, Wt as promptBuildResultToContribution, X as extractLegacyTranscriptEntryFields, Xt as resolveProviderPromptCacheKey, Y as drainPendingPrimaryWrites, Yt as buildPluginTurnIdentity, Z as sanitizeJsonb, Zt as resolveProviderRuntimeIdentity, _ as derivePromptTokens, _t as sessionLikelyHasOversizedToolResults, a as resolveMirroredTranscriptText, at as messageTime, b as makeZeroUsageSnapshot, bt as truncateTextHeadTail, c as createSessionStorageRuntimeFromConfig, ct as formatZonedTimestamp, d as buildEqualityProjection, dt as DB_SESSION_HYDRATION_LIMIT, et as collectInboundUserContext, ft as eventOrder, g as sanitizeAppendEntry, gt as HARD_MAX_TOOL_RESULT_CHARS, h as CREATE_CTX_STORAGE_OWNER_SQL, ht as capToolResultContent, i as appendAssistantMessageToSessionTranscript, it as isRepresentableEpochMs, j as resolveChannelResetConfig, jt as repairToolUseResultPairing, k as resolveSessionKey, kt as guardSessionManager, l as resolveSessionStorageConfig, lt as resolveTimezone, m as deriveLegacyActorIdentity, mt as HIDDEN_HEARTBEAT_CUSTOM_TYPE, n as parseSessionThreadInfo, nt as attachMessageIngress, o as parseInlineDirectives$1, ot as stripMessageCarriers, pt as pickLeaf, q as openDbSessionManager, qt as toJsonValue$1, r as resolveAndPersistSessionFile, rt as getMessageIngress, s as attachPgPoolErrorListeners, st as formatMessageStamp, t as extractDeliveryInfo, tt as renderInboundUserContext, u as validateCtxStorage, ut as resolveSenderLabel, v as deriveSessionTotalTokens, vt as PREEMPTIVE_TOOL_RESULT_COMPACTION_PLACEHOLDER, w as normalizeCronStaggerMs, wt as createMessageCharEstimateCache, x as normalizeUsage, xt as truncateToolResultToChars, y as hasNonzeroUsage, yt as TOOL_RESULT_TEXT_WEIGHT, z as isPrimarySessionTranscriptFileName, zt as normalizeInputProvenance } from "./sessions-DFfMZLkJ.js";
+import { $ as buildInboundMetaSystemPrompt, A as evaluateSessionFreshness, At as openRawToolResultStash, B as isSessionArchiveArtifactName, Bt as getGlobalHookRunner, C as normalizeHttpWebhookUrl, Ct as TOOL_RESULT_CHARS_PER_TOKEN_ESTIMATE, D as SESSION_RUN_CONTEXT_MAX_NAMES, Dt as getToolResultText$1, E as parseAbsoluteTimeMs, Et as estimateMessageCharsCached, F as canonicalizeMainSessionAlias, Ft as canonicalToolCallIdBase, Gt as createCurrentUserPromptEnvelope, Ht as initializeGlobalHookRunner, I as resolveAgentMainSessionKey, It as sanitizeToolCallIdsForCloudCodeAssist, J as runSerializedBySession, Jt as buildPluginRuntimeIdentity, K as trimToUndefined, Kt as mergePromptContributions, M as resolveSessionResetPolicy, Mt as sanitizeToolCallInputs, N as resolveSessionResetType, Nt as sanitizeToolUseResultPairing, Ot as isToolResultMessage, P as resolveThreadFlag, Pt as stripToolResultDetails, Q as sha256, R as resolveMainSessionKey, Rt as hasInterSessionUserProvenance, S as inferLegacyName, St as CHARS_PER_TOKEN_ESTIMATE$2, T as resolveDefaultCronStaggerMs, Tt as estimateContextChars$1, U as writeJsonAtomic, Ut as hasHookForPlugin, V as createAsyncLock, Vt as getGlobalPluginRegistry, W as resolveGatewayCredentialsFromConfig, Wt as promptBuildResultToContribution, X as extractLegacyTranscriptEntryFields, Xt as resolveProviderPromptCacheKey, Y as drainPendingPrimaryWrites, Yt as buildPluginTurnIdentity, Z as sanitizeJsonb, Zt as resolveProviderRuntimeIdentity, _ as derivePromptTokens, _t as sessionLikelyHasOversizedToolResults, a as resolveMirroredTranscriptText, at as messageTime, b as makeZeroUsageSnapshot, bt as truncateTextHeadTail, c as createSessionStorageRuntimeFromConfig, ct as formatZonedTimestamp, d as buildEqualityProjection, dt as DB_SESSION_HYDRATION_LIMIT, et as collectInboundUserContext, ft as eventOrder, g as sanitizeAppendEntry, gt as HARD_MAX_TOOL_RESULT_CHARS, h as CREATE_CTX_STORAGE_OWNER_SQL, ht as capToolResultContent, i as appendAssistantMessageToSessionTranscript, it as isRepresentableEpochMs, j as resolveChannelResetConfig, jt as repairToolUseResultPairing, k as resolveSessionKey, kt as guardSessionManager, l as resolveSessionStorageConfig, lt as resolveTimezone, m as deriveLegacyActorIdentity, mt as HIDDEN_HEARTBEAT_CUSTOM_TYPE, n as parseSessionThreadInfo, nt as attachMessageIngress, o as parseInlineDirectives$1, ot as stripMessageCarriers, pt as pickLeaf, q as openDbSessionManager, qt as toJsonValue$1, r as resolveAndPersistSessionFile, rt as getMessageIngress, s as attachPgPoolErrorListeners, st as formatMessageStamp, t as extractDeliveryInfo, tt as renderInboundUserContext, u as validateCtxStorage, ut as resolveSenderLabel, v as deriveSessionTotalTokens, vt as PREEMPTIVE_TOOL_RESULT_COMPACTION_PLACEHOLDER, w as normalizeCronStaggerMs, wt as createMessageCharEstimateCache, x as normalizeUsage, xt as truncateToolResultToChars, y as hasNonzeroUsage, yt as TOOL_RESULT_TEXT_WEIGHT, z as isPrimarySessionTranscriptFileName, zt as normalizeInputProvenance } from "./sessions-C98njXHy.js";
 import { n as onSessionTranscriptUpdate } from "./transcript-events-DGL7W2cG.js";
 import { n as generateSecureUuid, t as generateSecureToken } from "./secure-random-gljjQeWv.js";
-import { _ as recordSystemPromptHashComparison, b as recordCommandPoll, d as logRunCompleted, f as logRunStarted, g as logToolExecutionStarted, h as logToolExecutionCompleted, l as logModelCallError, m as logToolExecutionBlocked, o as logMessageProcessed, p as logSessionStateChange, s as logMessageQueued, v as refreshRunProgress, x as resetCommandPollCount, y as boundDiagnosticContent } from "./diagnostic-DutvZ2o1.js";
+import { _ as recordSystemPromptHashComparison, b as recordCommandPoll, d as logRunCompleted, f as logRunStarted, g as logToolExecutionStarted, h as logToolExecutionCompleted, l as logModelCallError, m as logToolExecutionBlocked, o as logMessageProcessed, p as logSessionStateChange, s as logMessageQueued, v as refreshRunProgress, x as resetCommandPollCount, y as boundDiagnosticContent } from "./diagnostic-dKeDyhIs.js";
 import { o as redactChannelCorrelation, r as getDiagnosticSessionState } from "./diagnostic-session-state-jW46P4IL.js";
 import { t as redactIdentifier } from "./redact-identifier-DLySVyKh.js";
 import { t as redactSensitiveText } from "./redact-CEFvBGJg.js";
 import { t as CommandLane } from "./lanes-DWpYhh13.js";
-import { a as getCommandLaneSnapshots, c as isQueuedCommandCancellation, i as enqueueCommandInLane, n as clearCommandLane, o as getQueueSize, s as isGatewayDraining, t as CommandLaneAbortedError } from "./command-queue-DogAVmq_.js";
-import { S as MAX_IMAGE_BYTES, _ as getFileExtension, b as kindFromMime, d as MEDIA_MAX_BYTES, g as extensionForMime, h as detectMime, m as saveMediaBuffer, n as isSafeFenceBreak, p as getMediaDir, r as parseFenceSpans, s as getImageMetadata, t as findFenceSpanAt, u as resizeToJpeg, v as imageMimeFromFormat, w as mediaKindFromMime, x as normalizeMimeType$1, y as isAudioFileName } from "./fences-DxsYNv6D.js";
-import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-Dy1iZEn3.js";
-import { A as stripLeadingInboundMetadata, B as buildTargetResolverSignature, C as extractToolCallNames, D as sleepWithAbort, E as computeBackoff, F as isRenderablePayload, G as ensureOpenClawModelsJson, H as normalizeTargetForProvider, I as shouldSuppressMessagingToolReplies, K as resolveLedTeam, L as shouldSuppressReasoningPayload, M as applyReplyThreading, N as filterMessagingToolDuplicates, O as readFullTranscriptEntriesFromBackend, P as filterMessagingToolMediaDuplicates, R as createReplyToModeFilterForChannel, S as countToolResults, T as resolveContextTokensForModel, U as buildOutboundSessionContext, V as normalizeChannelTargetInput, W as resolveOutboundSessionId, _ as loadCombinedSessionStoreForGateway, b as throwIfAborted$1, c as createMessageSentEmitter, d as toInternalMessageReceivedContext, f as toInternalMessageTranscribedContext, g as stampReplyActivity, h as fireAndForgetHook, j as applyReplyTagsToPayload, k as transcriptEntriesToMessages, l as deriveInboundMessageHookContext, m as toPluginMessageReceivedEvent, o as normalizeReplyPayloadsForDelivery, p as toPluginMessageContext, q as resolveTeamRoster, s as applyMessageSendingHook, t as deliverOutboundPayloads, u as toInternalMessagePreprocessedContext, v as capArrayByJsonBytes, w as lookupContextTokens, x as loadChannelOutboundAdapter, y as jsonUtf8Bytes, z as resolveReplyToMode } from "./deliver-uol2d4WF.js";
-import { B as DEFAULT_AI_SNAPSHOT_MAX_CHARS, C as ensureChromeExtensionRelayServer, M as DEFAULT_UPLOAD_DIR, N as resolveExistingPathsWithinRoot, s as resolveLsofCommandSync } from "./chrome-CQUZm4YB.js";
-import { r as isLoopbackHost } from "./ws-kGFg1v4B.js";
-import { a as readFileWithinRoot, c as writeFileWithinRoot, i as openFileWithinRoot, l as PATH_ALIAS_POLICIES, n as copyFileWithinRoot, r as createRootScopedReadFile, t as SafeOpenError } from "./fs-safe-QppbBgli.js";
+import { a as getCommandLaneSnapshots, c as isQueuedCommandCancellation, i as enqueueCommandInLane, n as clearCommandLane, o as getQueueSize, s as isGatewayDraining, t as CommandLaneAbortedError } from "./command-queue-CYUdNrXN.js";
+import { S as MAX_IMAGE_BYTES, _ as getFileExtension, b as kindFromMime, d as MEDIA_MAX_BYTES, g as extensionForMime, h as detectMime, m as saveMediaBuffer, n as isSafeFenceBreak, p as getMediaDir, r as parseFenceSpans, s as getImageMetadata, t as findFenceSpanAt, u as resizeToJpeg, v as imageMimeFromFormat, w as mediaKindFromMime, x as normalizeMimeType$1, y as isAudioFileName } from "./fences-qAryzYhN.js";
+import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-MJKT8QcH.js";
+import { A as stripLeadingInboundMetadata, B as buildTargetResolverSignature, C as extractToolCallNames, D as sleepWithAbort, E as computeBackoff, F as isRenderablePayload, G as ensureOpenClawModelsJson, H as normalizeTargetForProvider, I as shouldSuppressMessagingToolReplies, K as resolveLedTeam, L as shouldSuppressReasoningPayload, M as applyReplyThreading, N as filterMessagingToolDuplicates, O as readFullTranscriptEntriesFromBackend, P as filterMessagingToolMediaDuplicates, R as createReplyToModeFilterForChannel, S as countToolResults, T as resolveContextTokensForModel, U as buildOutboundSessionContext, V as normalizeChannelTargetInput, W as resolveOutboundSessionId, _ as loadCombinedSessionStoreForGateway, b as throwIfAborted$1, c as createMessageSentEmitter, d as toInternalMessageReceivedContext, f as toInternalMessageTranscribedContext, g as stampReplyActivity, h as fireAndForgetHook, j as applyReplyTagsToPayload, k as transcriptEntriesToMessages, l as deriveInboundMessageHookContext, m as toPluginMessageReceivedEvent, o as normalizeReplyPayloadsForDelivery, p as toPluginMessageContext, q as resolveTeamRoster, s as applyMessageSendingHook, t as deliverOutboundPayloads, u as toInternalMessagePreprocessedContext, v as capArrayByJsonBytes, w as lookupContextTokens, x as loadChannelOutboundAdapter, y as jsonUtf8Bytes, z as resolveReplyToMode } from "./deliver-CZ0gpdcA.js";
+import { B as DEFAULT_AI_SNAPSHOT_MAX_CHARS, C as ensureChromeExtensionRelayServer, M as DEFAULT_UPLOAD_DIR, N as resolveExistingPathsWithinRoot, s as resolveLsofCommandSync } from "./chrome-B_WMQAhO.js";
+import { r as isLoopbackHost } from "./ws-B4SUb9f_.js";
+import { a as readFileWithinRoot, c as writeFileWithinRoot, i as openFileWithinRoot, l as PATH_ALIAS_POLICIES, n as copyFileWithinRoot, r as createRootScopedReadFile, t as SafeOpenError } from "./fs-safe-BFMvT9d3.js";
 import { i as hasErrnoCode, o as readErrorName, r as formatErrorMessage } from "./errors-yyPKpoXR.js";
-import { a as isBlockedHostnameOrIp, l as normalizeHostname, n as SsrFBlockedError } from "./proxy-env-E2mZELS1.js";
+import { a as isBlockedHostnameOrIp, l as normalizeHostname, n as SsrFBlockedError } from "./proxy-env-DQFy-pBt.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-DYF6dHGu.js";
-import { A as issueDeviceBootstrapToken, C as callGatewayLeastPrivilege, D as gatewayErrorShapeOf, E as gatewayErrorReason, O as validateSecretsResolveResult, S as callGateway, T as resolveLeastPrivilegeOperatorScopesForMethod, _ as resolveSessionReference, a as buildAgentToAgentReplyContext, b as clearActiveCoordinationDepth, c as resolvePingPongTurns, d as createSessionVisibilityGuard, f as resolveEffectiveSessionToolsVisibility, g as resolveMainSessionAlias, h as resolveInternalSessionKey, i as buildAgentToAgentMessageContext, k as SESSION_LABEL_MAX_LENGTH, l as AuthorizationError, m as resolveDisplaySessionKey, n as requestAuthorizedNudge, o as isAnnounceSkip, p as resolveSandboxedSessionToolContext, r as buildAgentToAgentAnnounceContext, s as isReplySkip, u as createAgentToAgentPolicy, v as resolveVisibleSessionReference, w as randomIdempotencyKey, x as setActiveCoordinationDepth, y as shouldResolveSessionIdInput } from "./nudge-iXg_oCkW.js";
-import { A as formatToolSummary, C as extractAssistantThinking, D as stripDowngradedToolCallText, E as isAssistantMessage, M as stripReasoningTagsFromText, O as stripMinimaxToolCallXml, S as extractAssistantText$1, T as inferToolMetaFromArgs, _ as createInlineCodeState, a as isEmbeddedPiRunActive, b as onAgentEvent, d as handleMessageEnd, f as handleMessageStart, g as buildCodeSpanIndex, h as emitEmbeddedAgentEvent, i as endInFlightEmbeddedAttempt, j as resolveToolDisplay, k as stripThinkingTagsFromText, l as setActiveEmbeddedRun, m as endModelCall, n as beginInFlightEmbeddedAttempt, o as isEmbeddedPiRunStreaming, p as handleMessageUpdate, r as clearActiveEmbeddedRun, s as queueEmbeddedPiMessage, t as abortEmbeddedPiRun, u as waitForEmbeddedPiRunEnd, w as formatReasoningMessage, x as registerAgentRunContext, y as emitAgentEvent } from "./runs-CRfwfxl9.js";
-import { C as getDefaultMediaLocalRoots, S as getAgentScopedMediaLocalRoots, _ as resolveChunkNewlinePacking, a as resolveMarkdownTableMode, b as fetchRemoteMedia, c as loadWebMediaRaw, d as chunkMarkdownText, f as chunkMarkdownTextWithMode, g as resolveChunkMode, h as resolveChunkDelivery, l as chunkByNewline, m as chunkTextWithMode, o as getDefaultLocalRoots, p as chunkText, s as loadWebMedia, v as resolveTextChunkLimit, x as readResponseWithLimit, y as MediaFetchError } from "./outbound-attachment-DkplciK0.js";
-import { a as bindAbortRelay, i as resolveProxyFetchFromEnv, n as withStrictGuardedFetchMode, o as fetchWithTimeout, r as withTrustedEnvProxyGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-CIElogmD.js";
-import { i as executeWithApiKeyRotation, n as resolveMemorySearchConfig, r as collectProviderApiKeysForExecution } from "./manager-BNDUt5V7.js";
-import { i as AGENT_LANE_SUBAGENT, r as AGENT_LANE_NESTED, t as startUserSessionRun } from "./user-run-recording-Dw1uyV3d.js";
-import { a as getGatewayInstanceId, n as deriveSessionRunId, o as resolveSessionRunStore, r as inferSessionRunKind, t as createSessionRunRecorder } from "./recorder-tm_DPmVq.js";
-import { c as enqueueAgentTurn, d as peekDelayedAgentTurn, f as setDelayedReleaseHold, i as AGENT_TURN_TOPIC, l as isClaimableAgentTurnWorkId, m as KeyedAsyncQueue, p as WORKSPACE_LANE_DENIED_REASON, r as tryGetAgentTurnRuntime, s as clearDelayedReleaseHold, u as mergeDelayedAgentTurn } from "./agent-turn-runner-T5NCMyJ_.js";
-import { a as resolveSignalRpcContext, c as streamSignalEvents, n as sendReadReceiptSignal, o as signalCheck, r as sendTypingSignal, s as signalRpcRequest, t as sendMessageSignal, u as resolveFetch } from "./send-x0brK-7B.js";
-import { a as DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS, c as normalizeIMessageHandle, i as createIMessageRpcClient, l as parseIMessageTarget, o as formatIMessageChatTarget, r as convertMarkdownTables, s as isAllowedIMessageSender, t as sendMessageIMessage } from "./send-CQXAcrXk.js";
-import { m as normalizeExtraMemoryPaths, p as listMemoryFiles } from "./query-expansion-DUYY60_G.js";
-import { t as isQmdScopeAllowed } from "./qmd-scope-C3LDIy_f.js";
+import { A as issueDeviceBootstrapToken, C as callGatewayLeastPrivilege, D as gatewayErrorShapeOf, E as gatewayErrorReason, O as validateSecretsResolveResult, S as callGateway, T as resolveLeastPrivilegeOperatorScopesForMethod, _ as resolveSessionReference, a as buildAgentToAgentReplyContext, b as clearActiveCoordinationDepth, c as resolvePingPongTurns, d as createSessionVisibilityGuard, f as resolveEffectiveSessionToolsVisibility, g as resolveMainSessionAlias, h as resolveInternalSessionKey, i as buildAgentToAgentMessageContext, k as SESSION_LABEL_MAX_LENGTH, l as AuthorizationError, m as resolveDisplaySessionKey, n as requestAuthorizedNudge, o as isAnnounceSkip, p as resolveSandboxedSessionToolContext, r as buildAgentToAgentAnnounceContext, s as isReplySkip, u as createAgentToAgentPolicy, v as resolveVisibleSessionReference, w as randomIdempotencyKey, x as setActiveCoordinationDepth, y as shouldResolveSessionIdInput } from "./nudge-Dg8Pe_sD.js";
+import { A as formatToolSummary, C as extractAssistantThinking, D as stripDowngradedToolCallText, E as isAssistantMessage, M as stripReasoningTagsFromText, O as stripMinimaxToolCallXml, S as extractAssistantText$1, T as inferToolMetaFromArgs, _ as createInlineCodeState, a as isEmbeddedPiRunActive, b as onAgentEvent, d as handleMessageEnd, f as handleMessageStart, g as buildCodeSpanIndex, h as emitEmbeddedAgentEvent, i as endInFlightEmbeddedAttempt, j as resolveToolDisplay, k as stripThinkingTagsFromText, l as setActiveEmbeddedRun, m as endModelCall, n as beginInFlightEmbeddedAttempt, o as isEmbeddedPiRunStreaming, p as handleMessageUpdate, r as clearActiveEmbeddedRun, s as queueEmbeddedPiMessage, t as abortEmbeddedPiRun, u as waitForEmbeddedPiRunEnd, w as formatReasoningMessage, x as registerAgentRunContext, y as emitAgentEvent } from "./runs-CX5t6UjO.js";
+import { C as getDefaultMediaLocalRoots, S as getAgentScopedMediaLocalRoots, _ as resolveChunkNewlinePacking, a as resolveMarkdownTableMode, b as fetchRemoteMedia, c as loadWebMediaRaw, d as chunkMarkdownText, f as chunkMarkdownTextWithMode, g as resolveChunkMode, h as resolveChunkDelivery, l as chunkByNewline, m as chunkTextWithMode, o as getDefaultLocalRoots, p as chunkText, s as loadWebMedia, v as resolveTextChunkLimit, x as readResponseWithLimit, y as MediaFetchError } from "./outbound-attachment-C3f9uSt-.js";
+import { a as bindAbortRelay, i as resolveProxyFetchFromEnv, n as withStrictGuardedFetchMode, o as fetchWithTimeout, r as withTrustedEnvProxyGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-C1e2uLCm.js";
+import { i as executeWithApiKeyRotation, n as resolveMemorySearchConfig, r as collectProviderApiKeysForExecution } from "./manager-Edt-T8Bi.js";
+import { i as AGENT_LANE_SUBAGENT, r as AGENT_LANE_NESTED, t as startUserSessionRun } from "./user-run-recording-BsWiQH6f.js";
+import { a as getGatewayInstanceId, n as deriveSessionRunId, o as resolveSessionRunStore, r as inferSessionRunKind, t as createSessionRunRecorder } from "./recorder-jtfym7ix.js";
+import { c as enqueueAgentTurn, d as peekDelayedAgentTurn, f as setDelayedReleaseHold, i as AGENT_TURN_TOPIC, l as isClaimableAgentTurnWorkId, m as KeyedAsyncQueue, p as WORKSPACE_LANE_DENIED_REASON, r as tryGetAgentTurnRuntime, s as clearDelayedReleaseHold, u as mergeDelayedAgentTurn } from "./agent-turn-runner-BUl_5WBC.js";
+import { a as resolveSignalRpcContext, c as streamSignalEvents, n as sendReadReceiptSignal, o as signalCheck, r as sendTypingSignal, s as signalRpcRequest, t as sendMessageSignal, u as resolveFetch } from "./send-Bb4J4QPH.js";
+import { a as DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS, c as normalizeIMessageHandle, i as createIMessageRpcClient, l as parseIMessageTarget, o as formatIMessageChatTarget, r as convertMarkdownTables, s as isAllowedIMessageSender, t as sendMessageIMessage } from "./send-C9EWa4Gn.js";
+import { m as normalizeExtraMemoryPaths, p as listMemoryFiles } from "./query-expansion-BC9pRVpQ.js";
+import { t as isQmdScopeAllowed } from "./qmd-scope-DxmwIijL.js";
 import { createRequire } from "node:module";
 import * as path$1 from "node:path";
 import path, { basename, isAbsolute, join } from "node:path";
@@ -56,7 +56,7 @@ import { DefaultResourceLoader, SessionManager, SettingsManager, convertToLlm, c
 import { EdgeTTS } from "node-edge-tts";
 import MarkdownIt from "markdown-it";
 import net from "node:net";
-import WebSocket from "ws";
+import WebSocket$1 from "ws";
 import { Worker } from "node:worker_threads";
 import { createJiti } from "jiti";
 import { AsyncLocalStorage } from "node:async_hooks";
@@ -4482,7 +4482,7 @@ async function linkIdentity(params) {
 const log$69 = createSubsystemLogger("model-catalog");
 const modelCatalogPromiseState = resolveProcessScopedMap(Symbol.for("openclaw.agents.model-catalog.modelCatalogPromise"));
 const hasLoggedModelCatalogErrorState = resolveProcessScopedMap(Symbol.for("openclaw.agents.model-catalog.hasLoggedModelCatalogError"));
-const defaultImportPiSdk = () => import("./pi-model-discovery-Dy1iZEn3.js").then((n) => n.r);
+const defaultImportPiSdk = () => import("./pi-model-discovery-MJKT8QcH.js").then((n) => n.r);
 let importPiSdk = defaultImportPiSdk;
 function getModelCatalogPromise() {
 	return modelCatalogPromiseState.get("value") ?? null;
@@ -12847,7 +12847,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-uol2d4WF.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-CZ0gpdcA.js").then((n) => n.n);
 		const outboundSession = buildOutboundSessionContext({
 			cfg,
 			agentId: resolvedAgentId,
@@ -14892,7 +14892,7 @@ async function sendTranscriptEcho(params) {
 	}
 	const text = formatEchoTranscript(transcript, params.format ?? DEFAULT_ECHO_TRANSCRIPT_FORMAT);
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-uol2d4WF.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-CZ0gpdcA.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg,
 			channel: normalizedChannel,
@@ -34596,7 +34596,7 @@ async function createModelSelectionState(params) {
 		}
 	}
 	if (sessionEntry && sessionStore && sessionKey && sessionEntry.authProfileOverride) {
-		const { ensureAuthProfileStore } = await import("./model-selection-DfBJgjil.js").then((n) => n.P);
+		const { ensureAuthProfileStore } = await import("./model-selection-BkyEkRcd.js").then((n) => n.P);
 		const profile = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false }).profiles[sessionEntry.authProfileOverride];
 		const providerKey = normalizeProviderId(provider);
 		if (!profile || normalizeProviderId(profile.provider) !== providerKey) await clearSessionAuthProfileOverride({
@@ -54459,7 +54459,7 @@ async function deliverSessionMaintenanceWarning(params) {
 		return;
 	}
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-uol2d4WF.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-CZ0gpdcA.js").then((n) => n.n);
 		const outboundSession = buildOutboundSessionContext({
 			cfg: params.cfg,
 			sessionKey: params.sessionKey
@@ -67734,7 +67734,7 @@ function createRuntimeChannel() {
 		reply: {
 			dispatchReplyWithBufferedBlockDispatcher,
 			dispatchInboundMessage,
-			agentCommandFromIngress: async (...args) => (await import("./agent-3FzVgs63.js")).agentCommandFromIngress(...args),
+			agentCommandFromIngress: async (...args) => (await import("./agent-2N9tEN3b.js")).agentCommandFromIngress(...args),
 			dispatchReplyWithDispatcher,
 			createReplyDispatcherWithTyping,
 			resolveEffectiveMessagesConfig,
@@ -68163,7 +68163,7 @@ async function getMemorySearchManager(params) {
 			if (cached) return { manager: cached };
 		}
 		try {
-			const { QmdMemoryManager } = await import("./qmd-manager-B4bmSWg6.js");
+			const { QmdMemoryManager } = await import("./qmd-manager-DbHyIFsT.js");
 			const primary = await QmdMemoryManager.create({
 				cfg: params.cfg,
 				agentId: params.agentId,
@@ -68175,7 +68175,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-BNDUt5V7.js").then((n) => n.t);
+						const { MemoryIndexManager } = await import("./manager-Edt-T8Bi.js").then((n) => n.t);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => {
@@ -68190,7 +68190,7 @@ async function getMemorySearchManager(params) {
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-BNDUt5V7.js").then((n) => n.t);
+		const { MemoryIndexManager } = await import("./manager-Edt-T8Bi.js").then((n) => n.t);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		return {
@@ -75968,7 +75968,7 @@ function createPluginRuntime(options = {}) {
 			workStates: readTaskWorkStates
 		},
 		resolveLearningWorkspaceDir: (agentId) => resolveLearningWorkspaceDir(loadConfig(), agentId),
-		sessions: { startUserRun: async (params) => (await import("./user-run-recording-Dw1uyV3d.js").then((n) => n.n)).startUserSessionRun(params) }
+		sessions: { startUserRun: async (params) => (await import("./user-run-recording-BsWiQH6f.js").then((n) => n.n)).startUserSessionRun(params) }
 	};
 	Object.defineProperty(runtime, "analysis", {
 		enumerable: true,
@@ -77528,7 +77528,7 @@ async function runBeforeToolCallHook(args) {
 	const params = args.params;
 	if (args.ctx?.sessionKey) {
 		const { getDiagnosticSessionState } = await import("./diagnostic-session-state-jW46P4IL.js").then((n) => n.n);
-		const { logToolLoopAction } = await import("./diagnostic-DutvZ2o1.js").then((n) => n.n);
+		const { logToolLoopAction } = await import("./diagnostic-dKeDyhIs.js").then((n) => n.n);
 		const { detectToolCallLoop, recordToolCall } = await import("./tool-loop-detection-B-v0TDX5.js");
 		const sessionState = getDiagnosticSessionState({
 			sessionKey: args.ctx.sessionKey,
@@ -82376,7 +82376,7 @@ var OpenAIWebSocketManager = class extends EventEmitter {
 	* Throws if the connection is not open.
 	*/
 	send(event) {
-		if (!this.ws || this.ws.readyState !== WebSocket.OPEN) throw new Error(`OpenAIWebSocketManager: cannot send — connection is not open (readyState=${this.ws?.readyState ?? "no socket"})`);
+		if (!this.ws || this.ws.readyState !== WebSocket$1.OPEN) throw new Error(`OpenAIWebSocketManager: cannot send — connection is not open (readyState=${this.ws?.readyState ?? "no socket"})`);
 		this.ws.send(JSON.stringify(event));
 	}
 	/**
@@ -82393,7 +82393,7 @@ var OpenAIWebSocketManager = class extends EventEmitter {
 	* Returns true if the WebSocket is currently open and ready to send.
 	*/
 	isConnected() {
-		return this.ws !== null && this.ws.readyState === WebSocket.OPEN;
+		return this.ws !== null && this.ws.readyState === WebSocket$1.OPEN;
 	}
 	/**
 	* Permanently closes the WebSocket connection and disables auto-reconnect.
@@ -82403,7 +82403,7 @@ var OpenAIWebSocketManager = class extends EventEmitter {
 		this._cancelRetryTimer();
 		if (this.ws) {
 			this.ws.removeAllListeners();
-			if (this.ws.readyState === WebSocket.OPEN || this.ws.readyState === WebSocket.CONNECTING) this.ws.close(1e3, "Client closed");
+			if (this.ws.readyState === WebSocket$1.OPEN || this.ws.readyState === WebSocket$1.CONNECTING) this.ws.close(1e3, "Client closed");
 			this.ws = null;
 		}
 	}
@@ -82413,7 +82413,7 @@ var OpenAIWebSocketManager = class extends EventEmitter {
 				reject(/* @__PURE__ */ new Error("OpenAIWebSocketManager: apiKey is required before connecting."));
 				return;
 			}
-			const socket = new WebSocket(this.wsUrl, { headers: {
+			const socket = new WebSocket$1(this.wsUrl, { headers: {
 				Authorization: `Bearer ${this.apiKey}`,
 				"OpenAI-Beta": "responses-websocket=v1"
 			} });