winclaw 2026.3.16 → 2026.3.18

package/dist/{accounts-DLBe7Iqu.js → accounts-CO790By2.js}

@@ -1,5 +1,5 @@
 import { _ as normalizeAccountId } from "./session-key-CIXZm7v4.js";
-import { v as createAccountListHelpers, y as resolveAccountEntry } from "./accounts-CwcDKrII.js";
+import { v as createAccountListHelpers, y as resolveAccountEntry } from "./accounts-D56YQyn8.js";
 
 //#region src/signal/accounts.ts
 const { listAccountIds, resolveDefaultAccountId } = createAccountListHelpers("signal");

package/dist/{accounts-3dw6Wt7z.js → accounts-CpVr4v3z.js}

@@ -1,5 +1,5 @@
 import { _ as normalizeAccountId } from "./session-key-CIXZm7v4.js";
-import { v as createAccountListHelpers, y as resolveAccountEntry } from "./accounts-CwcDKrII.js";
+import { v as createAccountListHelpers, y as resolveAccountEntry } from "./accounts-D56YQyn8.js";
 
 //#region src/imessage/accounts.ts
 const { listAccountIds, resolveDefaultAccountId } = createAccountListHelpers("imessage");

package/dist/{accounts-CwcDKrII.js → accounts-D56YQyn8.js}

@@ -6,7 +6,7 @@ import { _ as normalizeAccountId, g as DEFAULT_ACCOUNT_ID, v as normalizeOptiona
 import { t as formatCliCommand } from "./command-format-BU9fEGrc.js";
 import fs from "node:fs";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 
 //#region src/routing/account-lookup.ts
 function resolveAccountEntry(accounts, accountId) {
@@ -105,14 +105,14 @@ async function webAuthExists(authDir = resolveDefaultWebAuthDir()) {
 	maybeRestoreCredsFromBackup(resolvedAuthDir);
 	const credsPath = resolveWebCredsPath(resolvedAuthDir);
 	try {
-		await fs$1.access(resolvedAuthDir);
+		await fsPromises.access(resolvedAuthDir);
 	} catch {
 		return false;
 	}
 	try {
-		const stats = await fs$1.stat(credsPath);
+		const stats = await fsPromises.stat(credsPath);
 		if (!stats.isFile() || stats.size <= 1) return false;
-		const raw = await fs$1.readFile(credsPath, "utf-8");
+		const raw = await fsPromises.readFile(credsPath, "utf-8");
 		JSON.parse(raw);
 		return true;
 	} catch {
@@ -120,7 +120,7 @@ async function webAuthExists(authDir = resolveDefaultWebAuthDir()) {
 	}
 }
 async function clearLegacyBaileysAuthState(authDir) {
-	const entries = await fs$1.readdir(authDir, { withFileTypes: true });
+	const entries = await fsPromises.readdir(authDir, { withFileTypes: true });
 	const shouldDelete = (name) => {
 		if (name === "oauth.json") return false;
 		if (name === "creds.json" || name === "creds.json.bak") return true;
@@ -130,7 +130,7 @@ async function clearLegacyBaileysAuthState(authDir) {
 	await Promise.all(entries.map(async (entry) => {
 		if (!entry.isFile()) return;
 		if (!shouldDelete(entry.name)) return;
-		await fs$1.rm(path.join(authDir, entry.name), { force: true });
+		await fsPromises.rm(path.join(authDir, entry.name), { force: true });
 	}));
 }
 async function logoutWeb(params) {
@@ -141,7 +141,7 @@ async function logoutWeb(params) {
 		return false;
 	}
 	if (params.isLegacyAuthDir) await clearLegacyBaileysAuthState(resolvedAuthDir);
-	else await fs$1.rm(resolvedAuthDir, {
+	else await fsPromises.rm(resolvedAuthDir, {
 		recursive: true,
 		force: true
 	});

package/dist/{acp-cli-DJYDrN4p.js → acp-cli-C1suYXou.js}

@@ -1,26 +1,26 @@
 import "./paths-D358qawm.js";
 import { p as theme } from "./globals-mxjDvm3x.js";
 import { S as shortenHomePath, y as resolveUserPath } from "./utils-D2mWpsBR.js";
-import "./agent-scope-BjM05Snq.js";
+import "./agent-scope-DMzhkNwl.js";
 import { d as defaultRuntime } from "./subsystem-notCuUgs.js";
-import "./winclaw-root-ExuHY0xi.js";
+import "./winclaw-root-Dz4DRGIq.js";
 import "./logger-B82a6bdc.js";
 import "./exec-BQMqbouM.js";
-import { $t as loadConfig } from "./model-selection-sZzgGuDI.js";
+import { $t as loadConfig } from "./model-selection-DMALgc-K.js";
 import "./registry-IKNezRAG.js";
 import "./github-copilot-token-CnG2OsWc.js";
 import "./boolean-C6Pbt2Ue.js";
 import "./env-oWPhHfdK.js";
 import "./host-env-security-Zh9nrO6T.js";
 import { r as VERSION } from "./env-vars-BCyi4V6_.js";
-import "./manifest-registry-Bc4-t_4c.js";
+import "./manifest-registry-Dd_jTCh5.js";
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-C9d1B5oJ.js";
 import { r as isKnownCoreToolId } from "./tool-catalog-BOZwge8c.js";
-import "./tailnet-CwWtFpCl.js";
-import "./ws-jOuSOOrR.js";
+import "./tailnet-BSNItVDW.js";
+import "./ws-qa_Mt4Jq.js";
 import { n as resolveWindowsSpawnProgram, t as materializeWindowsSpawnProgram } from "./windows-spawn-i7m7Lua5.js";
-import { t as GatewayClient } from "./client-D_fo1kMD.js";
-import { s as resolveGatewayCredentialsWithSecretInputs, t as buildGatewayConnectionDetails } from "./call-jAJr36nx.js";
+import { t as GatewayClient } from "./client-2l5l_bWZ.js";
+import { s as resolveGatewayCredentialsWithSecretInputs, t as buildGatewayConnectionDetails } from "./call-C8L99wK_.js";
 import "./pairing-token-CLjS0Ugp.js";
 import { t as formatDocsLink } from "./links-UVNtH_G6.js";
 import { t as isMainModule } from "./is-main-TPRg8r91.js";

package/dist/{agent-scope-BjM05Snq.js → agent-scope-DMzhkNwl.js}

@@ -2,13 +2,13 @@ import { g as resolveStateDir, y as resolveRequiredHomeDir } from "./paths-D358q
 import { h as pathExists, y as resolveUserPath } from "./utils-D2mWpsBR.js";
 import { t as createSubsystemLogger } from "./subsystem-notCuUgs.js";
 import { E as parseAgentSessionKey, T as isSubagentSessionKey, c as normalizeAgentId, t as DEFAULT_AGENT_ID, u as resolveAgentIdFromSessionKey, w as isCronSessionKey } from "./session-key-CIXZm7v4.js";
-import { _ as normalizeSkillFilter, i as openBoundaryFile, t as resolveWinClawPackageRoot } from "./winclaw-root-ExuHY0xi.js";
+import { _ as normalizeSkillFilter, i as openBoundaryFile, t as resolveWinClawPackageRoot } from "./winclaw-root-Dz4DRGIq.js";
 import { t as runCommandWithTimeout } from "./exec-BQMqbouM.js";
 import { fileURLToPath } from "node:url";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 
 //#region src/config/model-input.ts
 function resolveAgentModelPrimaryValue(model) {
@@ -150,7 +150,7 @@ async function loadTemplate(name) {
 		const templateDir = await resolveWorkspaceTemplateDir();
 		const templatePath = path.join(templateDir, name);
 		try {
-			return stripFrontMatter(await fs$1.readFile(templatePath, "utf-8"));
+			return stripFrontMatter(await fsPromises.readFile(templatePath, "utf-8"));
 		} catch {
 			throw new Error(`Missing workspace template: ${name} (${templatePath}). Ensure docs/reference/templates are packaged.`);
 		}
@@ -165,7 +165,7 @@ async function loadTemplate(name) {
 }
 async function writeFileIfMissing(filePath, content) {
 	try {
-		await fs$1.writeFile(filePath, content, {
+		await fsPromises.writeFile(filePath, content, {
 			encoding: "utf-8",
 			flag: "wx"
 		});
@@ -177,7 +177,7 @@ async function writeFileIfMissing(filePath, content) {
 }
 async function fileExists(filePath) {
 	try {
-		await fs$1.access(filePath);
+		await fsPromises.access(filePath);
 		return true;
 	} catch {
 		return false;
@@ -201,7 +201,7 @@ function parseWorkspaceOnboardingState(raw) {
 }
 async function readWorkspaceOnboardingState(statePath) {
 	try {
-		return parseWorkspaceOnboardingState(await fs$1.readFile(statePath, "utf-8")) ?? { version: WORKSPACE_STATE_VERSION };
+		return parseWorkspaceOnboardingState(await fsPromises.readFile(statePath, "utf-8")) ?? { version: WORKSPACE_STATE_VERSION };
 	} catch (err) {
 		if (err.code !== "ENOENT") throw err;
 		return { version: WORKSPACE_STATE_VERSION };
@@ -215,20 +215,20 @@ async function isWorkspaceOnboardingCompleted(dir) {
 	return typeof state.onboardingCompletedAt === "string" && state.onboardingCompletedAt.trim().length > 0;
 }
 async function writeWorkspaceOnboardingState(statePath, state) {
-	await fs$1.mkdir(path.dirname(statePath), { recursive: true });
+	await fsPromises.mkdir(path.dirname(statePath), { recursive: true });
 	const payload = `${JSON.stringify(state, null, 2)}\n`;
 	const tmpPath = `${statePath}.tmp-${process.pid}-${Date.now().toString(36)}`;
 	try {
-		await fs$1.writeFile(tmpPath, payload, { encoding: "utf-8" });
-		await fs$1.rename(tmpPath, statePath);
+		await fsPromises.writeFile(tmpPath, payload, { encoding: "utf-8" });
+		await fsPromises.rename(tmpPath, statePath);
 	} catch (err) {
-		await fs$1.unlink(tmpPath).catch(() => {});
+		await fsPromises.unlink(tmpPath).catch(() => {});
 		throw err;
 	}
 }
 async function hasGitRepo(dir) {
 	try {
-		await fs$1.stat(path.join(dir, ".git"));
+		await fsPromises.stat(path.join(dir, ".git"));
 		return true;
 	} catch {
 		return false;
@@ -258,7 +258,7 @@ async function ensureGitRepo(dir, isBrandNewWorkspace) {
 }
 async function ensureAgentWorkspace(params) {
 	const dir = resolveUserPath(params?.dir?.trim() ? params.dir.trim() : DEFAULT_AGENT_WORKSPACE_DIR);
-	await fs$1.mkdir(dir, { recursive: true });
+	await fsPromises.mkdir(dir, { recursive: true });
 	if (!params?.ensureBootstrapFiles) return { dir };
 	const agentsPath = path.join(dir, DEFAULT_AGENTS_FILENAME);
 	const soulPath = path.join(dir, DEFAULT_SOUL_FILENAME);
@@ -285,7 +285,7 @@ async function ensureAgentWorkspace(params) {
 		const paths = [...templatePaths, ...userContentPaths];
 		return (await Promise.all(paths.map(async (p) => {
 			try {
-				await fs$1.access(p);
+				await fsPromises.access(p);
 				return true;
 			} catch {
 				return false;
@@ -318,7 +318,7 @@ async function ensureAgentWorkspace(params) {
 	if (!state.bootstrapSeededAt && bootstrapExists) markState({ bootstrapSeededAt: nowIso() });
 	if (!state.onboardingCompletedAt && state.bootstrapSeededAt && !bootstrapExists) markState({ onboardingCompletedAt: nowIso() });
 	if (!state.bootstrapSeededAt && !state.onboardingCompletedAt && !bootstrapExists) {
-		const [identityContent, userContent] = await Promise.all([fs$1.readFile(identityPath, "utf-8"), fs$1.readFile(userPath, "utf-8")]);
+		const [identityContent, userContent] = await Promise.all([fsPromises.readFile(identityPath, "utf-8"), fsPromises.readFile(userPath, "utf-8")]);
 		const hasUserContent = await (async () => {
 			const indicators = [
 				path.join(dir, "memory"),
@@ -326,7 +326,7 @@ async function ensureAgentWorkspace(params) {
 				path.join(dir, ".git")
 			];
 			for (const indicator of indicators) try {
-				await fs$1.access(indicator);
+				await fsPromises.access(indicator);
 				return true;
 			} catch {}
 			return false;
@@ -357,7 +357,7 @@ async function resolveMemoryBootstrapEntries(resolvedDir) {
 	for (const name of candidates) {
 		const filePath = path.join(resolvedDir, name);
 		try {
-			await fs$1.access(filePath);
+			await fsPromises.access(filePath);
 			entries.push({
 				name,
 				filePath
@@ -370,7 +370,7 @@ async function resolveMemoryBootstrapEntries(resolvedDir) {
 	for (const entry of entries) {
 		let key = entry.filePath;
 		try {
-			key = await fs$1.realpath(entry.filePath);
+			key = await fsPromises.realpath(entry.filePath);
 		} catch {}
 		if (seen.has(key)) continue;
 		seen.add(key);

package/dist/{agents.config-SJHFouLt.js → agents.config-CxXq-sKs.js}

@@ -1,5 +1,5 @@
-import { in as loadAgentIdentityFromWorkspace, rn as identityHasValues } from "./reply-CgJoL4Ke.js";
-import { a as resolveAgentDir, d as resolveDefaultAgentId, n as listAgentEntries, u as resolveAgentWorkspaceDir } from "./agent-scope-BjM05Snq.js";
+import { in as loadAgentIdentityFromWorkspace, rn as identityHasValues } from "./reply-BOdfdXaW.js";
+import { a as resolveAgentDir, d as resolveDefaultAgentId, n as listAgentEntries, u as resolveAgentWorkspaceDir } from "./agent-scope-DMzhkNwl.js";
 import { c as normalizeAgentId } from "./session-key-CIXZm7v4.js";
 
 //#region src/commands/agents.config.ts

package/dist/{api-key-rotation-DF1fmKqf.js → api-key-rotation-CirBQV5-.js}

@@ -1,4 +1,4 @@
-import { d as normalizeProviderId } from "./model-selection-sZzgGuDI.js";
+import { d as normalizeProviderId } from "./model-selection-DMALgc-K.js";
 import { r as formatErrorMessage } from "./errors-B7K-Wp-z.js";
 
 //#region src/infra/gemini-auth.ts

package/dist/{audio-preflight-DeRje3xF.js → audio-preflight-C8-gU1ab.js}

@@ -2,60 +2,60 @@ import "./paths-D358qawm.js";
 import { a as logVerbose, c as shouldLogVerbose } from "./globals-mxjDvm3x.js";
 import "./utils-D2mWpsBR.js";
 import "./thinking-44rmAw5o.js";
-import "./agent-scope-BjM05Snq.js";
+import "./agent-scope-DMzhkNwl.js";
 import "./subsystem-notCuUgs.js";
-import "./winclaw-root-ExuHY0xi.js";
+import "./winclaw-root-Dz4DRGIq.js";
 import "./logger-B82a6bdc.js";
 import "./exec-BQMqbouM.js";
-import "./model-selection-sZzgGuDI.js";
+import "./model-selection-DMALgc-K.js";
 import "./registry-IKNezRAG.js";
 import "./github-copilot-token-CnG2OsWc.js";
 import "./boolean-C6Pbt2Ue.js";
 import "./env-oWPhHfdK.js";
 import "./host-env-security-Zh9nrO6T.js";
 import "./env-vars-BCyi4V6_.js";
-import "./manifest-registry-Bc4-t_4c.js";
-import "./dock-CU6afu_e.js";
+import "./manifest-registry-Dd_jTCh5.js";
+import "./dock-DxyPdXq3.js";
 import "./message-channel-C9d1B5oJ.js";
-import "./plugins-BciWft73.js";
-import "./sessions-B4vm2bHb.js";
-import { d as isAudioAttachment, i as normalizeMediaAttachments, o as resolveMediaAttachmentLocalRoots, t as runAudioTranscription } from "./audio-transcription-runner-BU8VYzG0.js";
-import "./image-BxZvMdUY.js";
-import "./models-config-BY5CO6fC.js";
-import "./pi-embedded-helpers-COBH2wUD.js";
-import "./sandbox-BEAOQQ5z.js";
+import "./plugins-BUdux3tD.js";
+import "./sessions-DtgNloM9.js";
+import { d as isAudioAttachment, i as normalizeMediaAttachments, o as resolveMediaAttachmentLocalRoots, t as runAudioTranscription } from "./audio-transcription-runner-DJbn-fP-.js";
+import "./image-DTDQdHxB.js";
+import "./models-config-CIsVY8hB.js";
+import "./pi-embedded-helpers-ByLe6_4t.js";
+import "./sandbox-C259T0mP.js";
 import "./tool-catalog-BOZwge8c.js";
-import "./chrome-gS-mqtxv.js";
+import "./chrome-CmfmicCj.js";
 import "./tailscale-DZ6XAzwZ.js";
-import "./tailnet-CwWtFpCl.js";
-import "./ws-jOuSOOrR.js";
-import "./auth-C-QV87h1.js";
-import "./server-context-CmXEOTqC.js";
+import "./tailnet-BSNItVDW.js";
+import "./ws-qa_Mt4Jq.js";
+import "./auth-BXzrYbOm.js";
+import "./server-context-B1sy4EZS.js";
 import "./frontmatter-DKeT_3NA.js";
-import "./skills-D2dkcKi5.js";
-import "./path-alias-guards-BS80tJKY.js";
-import "./paths-DxdR1V10.js";
+import "./skills-B3SRvP-E.js";
+import "./path-alias-guards-ByVIlbty.js";
+import "./paths-Dtw-Ctab.js";
 import "./redact-BDmMjK3z.js";
 import "./errors-B7K-Wp-z.js";
-import "./fs-safe-DDV_eBKQ.js";
-import "./proxy-env-BkeMGpvY.js";
-import "./image-ops-CARXq-EU.js";
-import "./store-agwqDWjp.js";
-import "./ports-CCEnJo8a.js";
+import "./fs-safe-BYADg7n_.js";
+import "./proxy-env-CxZg3TjS.js";
+import "./image-ops-h79c4OIk.js";
+import "./store-BLTV3TiR.js";
+import "./ports-Dc3sky5h.js";
 import "./trash-CyMeC5UH.js";
-import "./server-middleware-DQRuZDG_.js";
-import "./accounts-CwcDKrII.js";
-import "./accounts-3dw6Wt7z.js";
+import "./server-middleware-DJroQh0U.js";
+import "./accounts-D56YQyn8.js";
+import "./accounts-CpVr4v3z.js";
 import "./logging-xYH6GmRT.js";
-import "./accounts-DLBe7Iqu.js";
+import "./accounts-CO790By2.js";
 import "./paths-DU7PeCrd.js";
 import "./chat-envelope-COWebMOw.js";
-import "./tool-images-D5XpYJWd.js";
+import "./tool-images-Hu02Mrxq.js";
 import "./tool-display-bEFG-U4B.js";
-import "./fetch-guard-CkHmJoEM.js";
-import "./api-key-rotation-DF1fmKqf.js";
-import "./local-roots-DUfgcCfd.js";
-import "./model-catalog-CfgDRJ71.js";
+import "./fetch-guard-BFaEFa50.js";
+import "./api-key-rotation-CirBQV5-.js";
+import "./local-roots-uJjC65ik.js";
+import "./model-catalog-BZ_SScDX.js";
 import "./proxy-fetch-zulQ_7aB.js";
 
 //#region src/media-understanding/audio-preflight.ts

package/dist/{audio-transcription-runner-BU8VYzG0.js → audio-transcription-runner-DJbn-fP-.js}

@@ -1,23 +1,23 @@
 import { a as logVerbose, c as shouldLogVerbose, k as resolvePreferredWinClawTmpDir } from "./globals-mxjDvm3x.js";
-import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue } from "./agent-scope-BjM05Snq.js";
+import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue } from "./agent-scope-DMzhkNwl.js";
 import { n as runExec } from "./exec-BQMqbouM.js";
-import { A as normalizeGoogleModelId, d as normalizeProviderId, dn as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, fn as isInboundPathAllowed, mn as resolveIMessageAttachmentRoots, nt as requireApiKey, pn as mergeInboundPathRoots, rt as resolveApiKeyForProvider } from "./model-selection-sZzgGuDI.js";
-import { j as normalizeChatType } from "./plugins-BciWft73.js";
-import { t as describeImageWithModel } from "./image-BxZvMdUY.js";
+import { A as normalizeGoogleModelId, d as normalizeProviderId, dn as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, fn as isInboundPathAllowed, mn as resolveIMessageAttachmentRoots, nt as requireApiKey, pn as mergeInboundPathRoots, rt as resolveApiKeyForProvider } from "./model-selection-DMALgc-K.js";
+import { j as normalizeChatType } from "./plugins-BUdux3tD.js";
+import { t as describeImageWithModel } from "./image-DTDQdHxB.js";
 import { i as formatUncaughtError, n as extractErrorCode, s as readErrorName, t as collectErrorGraphCandidates } from "./errors-B7K-Wp-z.js";
-import { c as detectMime, f as isAudioFileName, m as kindFromMime, u as getFileExtension } from "./image-ops-CARXq-EU.js";
+import { c as detectMime, f as isAudioFileName, m as kindFromMime, u as getFileExtension } from "./image-ops-h79c4OIk.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-CHeFTo4J.js";
-import { t as fetchWithSsrFGuard } from "./fetch-guard-CkHmJoEM.js";
-import { n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation-DF1fmKqf.js";
-import { i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, r as MediaFetchError } from "./local-roots-DUfgcCfd.js";
-import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-CfgDRJ71.js";
+import { t as fetchWithSsrFGuard } from "./fetch-guard-BFaEFa50.js";
+import { n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation-CirBQV5-.js";
+import { i as fetchRemoteMedia, n as getDefaultMediaLocalRoots, r as MediaFetchError } from "./local-roots-uJjC65ik.js";
+import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-BZ_SScDX.js";
 import { n as resolveProxyFetchFromEnv } from "./proxy-fetch-zulQ_7aB.js";
 import process$1 from "node:process";
 import { fileURLToPath } from "node:url";
 import { constants } from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import crypto from "node:crypto";
 
 //#region src/auto-reply/templating.ts
@@ -971,7 +971,7 @@ var MediaAttachmentCache = class {
 			const size = await this.ensureLocalStat(entry);
 			if (entry.resolvedPath) {
 				if (size !== void 0 && size > params.maxBytes) throw new MediaUnderstandingSkipError("maxBytes", `Attachment ${params.attachmentIndex + 1} exceeds maxBytes ${params.maxBytes}`);
-				const buffer = await fs$1.readFile(entry.resolvedPath);
+				const buffer = await fsPromises.readFile(entry.resolvedPath);
 				entry.buffer = buffer;
 				entry.bufferMime = entry.bufferMime ?? entry.attachment.mime ?? await detectMime({
 					buffer,
@@ -1041,10 +1041,10 @@ var MediaAttachmentCache = class {
 			prefix: "winclaw-media",
 			extension: path.extname(bufferResult.fileName || "") || ""
 		});
-		await fs$1.writeFile(tmpPath, bufferResult.buffer);
+		await fsPromises.writeFile(tmpPath, bufferResult.buffer);
 		entry.tempPath = tmpPath;
 		entry.tempCleanup = async () => {
-			await fs$1.unlink(tmpPath).catch(() => {});
+			await fsPromises.unlink(tmpPath).catch(() => {});
 		};
 		return {
 			path: tmpPath,
@@ -1091,12 +1091,12 @@ var MediaAttachmentCache = class {
 		if (entry.statSize !== void 0) return entry.statSize;
 		try {
 			const currentPath = entry.resolvedPath;
-			const stat = await fs$1.stat(currentPath);
+			const stat = await fsPromises.stat(currentPath);
 			if (!stat.isFile()) {
 				entry.resolvedPath = void 0;
 				return;
 			}
-			const canonicalPath = await fs$1.realpath(currentPath).catch(() => currentPath);
+			const canonicalPath = await fsPromises.realpath(currentPath).catch(() => currentPath);
 			if (!isInboundPathAllowed({
 				filePath: canonicalPath,
 				roots: await this.getCanonicalLocalPathRoots()
@@ -1118,7 +1118,7 @@ var MediaAttachmentCache = class {
 		if (this.canonicalLocalPathRoots) return await this.canonicalLocalPathRoots;
 		this.canonicalLocalPathRoots = (async () => mergeInboundPathRoots(this.localPathRoots, await Promise.all(this.localPathRoots.map(async (root) => {
 			if (root.includes("*")) return root;
-			return await fs$1.realpath(root).catch(() => root);
+			return await fsPromises.realpath(root).catch(() => root);
 		}))))();
 		return await this.canonicalLocalPathRoots;
 	}
@@ -1129,7 +1129,7 @@ var MediaAttachmentCache = class {
 async function fileExists(filePath) {
 	if (!filePath) return false;
 	try {
-		await fs$1.stat(filePath);
+		await fsPromises.stat(filePath);
 		return true;
 	} catch {
 		return false;
@@ -1237,7 +1237,7 @@ async function resolveCliOutput(params) {
 	const commandId = commandBase(params.command);
 	const fileOutput = commandId === "whisper-cli" ? resolveWhisperCppOutputPath(params.args) : commandId === "whisper" ? resolveWhisperOutputPath(params.args, params.mediaPath) : commandId === "parakeet-mlx" ? resolveParakeetOutputPath(params.args, params.mediaPath) : null;
 	if (fileOutput && await fileExists(fileOutput)) try {
-		const content = await fs$1.readFile(fileOutput, "utf8");
+		const content = await fsPromises.readFile(fileOutput, "utf8");
 		if (content.trim()) return content.trim();
 	} catch {}
 	if (commandId === "gemini") {
@@ -1546,10 +1546,10 @@ async function runCliEntry(params) {
 		timeoutMs
 	});
 	if (capability === "audio") assertMinAudioSize({
-		size: (await fs$1.stat(pathResult.path)).size,
+		size: (await fsPromises.stat(pathResult.path)).size,
 		attachmentIndex: params.attachmentIndex
 	});
-	const outputDir = await fs$1.mkdtemp(path.join(resolvePreferredWinClawTmpDir(), "winclaw-media-cli-"));
+	const outputDir = await fsPromises.mkdtemp(path.join(resolvePreferredWinClawTmpDir(), "winclaw-media-cli-"));
 	const mediaPath = pathResult.path;
 	const outputBase = path.join(outputDir, path.parse(mediaPath).name);
 	const templCtx = {
@@ -1583,7 +1583,7 @@ async function runCliEntry(params) {
 			model: command
 		};
 	} finally {
-		await fs$1.rm(outputDir, {
+		await fsPromises.rm(outputDir, {
 			recursive: true,
 			force: true
 		}).catch(() => {});
@@ -1627,9 +1627,9 @@ function candidateBinaryNames(name) {
 }
 async function isExecutable(filePath) {
 	try {
-		if (!(await fs$1.stat(filePath)).isFile()) return false;
+		if (!(await fsPromises.stat(filePath)).isFile()) return false;
 		if (process.platform === "win32") return true;
-		await fs$1.access(filePath, constants.X_OK);
+		await fsPromises.access(filePath, constants.X_OK);
 		return true;
 	} catch {
 		return false;

package/dist/{audit-DvYeSXje.js → audit-B0zW_DIt.js}

@@ -1,36 +1,36 @@
 import { g as resolveStateDir, m as resolveOAuthDir, o as resolveConfigPath } from "./paths-D358qawm.js";
-import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue, d as resolveDefaultAgentId } from "./agent-scope-BjM05Snq.js";
+import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue, d as resolveDefaultAgentId } from "./agent-scope-DMzhkNwl.js";
 import { c as normalizeAgentId } from "./session-key-CIXZm7v4.js";
-import { $r as MAX_INCLUDE_DEPTH, En as normalizeNetworkMode, Gt as inspectPathPermissions, Kt as safeStat, Qr as INCLUDE_KEY, Qt as createConfigIO, Tn as isDangerousNetworkMode, Ut as formatPermissionDetail, Wt as formatPermissionRemediation, fr as normalizeTrustedSafeBinDirs } from "./model-selection-sZzgGuDI.js";
+import { $r as MAX_INCLUDE_DEPTH, En as normalizeNetworkMode, Gt as inspectPathPermissions, Kt as safeStat, Qr as INCLUDE_KEY, Qt as createConfigIO, Tn as isDangerousNetworkMode, Ut as formatPermissionDetail, Wt as formatPermissionRemediation, fr as normalizeTrustedSafeBinDirs } from "./model-selection-DMALgc-K.js";
 import { A as hasConfiguredSecretInput } from "./registry-IKNezRAG.js";
 import { t as formatCliCommand } from "./command-format-BU9fEGrc.js";
 import { i as isPathInside, n as MANIFEST_KEY, r as extensionUsesSkippedScannerPath } from "./legacy-names-BG8snB-z.js";
-import { d as normalizePluginsConfig } from "./manifest-registry-Bc4-t_4c.js";
-import { l as normalizeStringEntries } from "./dock-CU6afu_e.js";
-import { n as listChannelPlugins } from "./plugins-BciWft73.js";
-import { C as resolveToolProfilePolicy, f as resolveSandboxConfigForAgent, k as SANDBOX_BROWSER_SECURITY_HASH_EPOCH, l as execDockerRaw, m as resolveSandboxToolPolicyForAgent, u as getBlockedBindReason } from "./sandbox-BEAOQQ5z.js";
-import { a as resolveGatewayAuth } from "./auth-C-QV87h1.js";
+import { d as normalizePluginsConfig } from "./manifest-registry-Dd_jTCh5.js";
+import { l as normalizeStringEntries } from "./dock-DxyPdXq3.js";
+import { n as listChannelPlugins } from "./plugins-BUdux3tD.js";
+import { C as resolveToolProfilePolicy, f as resolveSandboxConfigForAgent, k as SANDBOX_BROWSER_SECURITY_HASH_EPOCH, l as execDockerRaw, m as resolveSandboxToolPolicyForAgent, u as getBlockedBindReason } from "./sandbox-C259T0mP.js";
+import { a as resolveGatewayAuth } from "./auth-BXzrYbOm.js";
 import { t as resolveGatewayCredentialsFromConfig } from "./credentials-C45WhjLr.js";
-import { a as resolveProfile, c as resolveBrowserControlAuth, i as resolveBrowserConfig } from "./server-context-CmXEOTqC.js";
-import { i as loadWorkspaceSkillEntries } from "./skills-D2dkcKi5.js";
-import { a as resolveNativeSkillsEnabled, i as resolveNativeCommandsEnabled } from "./commands-d2key1Fi.js";
-import { t as buildGatewayConnectionDetails } from "./call-jAJr36nx.js";
-import { i as readChannelAllowFromStore } from "./pairing-store-DYBSZwK1.js";
-import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-BLhaJ0EJ.js";
-import { l as resolveDmAllowState, n as isToolAllowedByPolicies, o as pickSandboxToolPolicy } from "./pi-tools.policy-Cdy3Az5h.js";
+import { a as resolveProfile, c as resolveBrowserControlAuth, i as resolveBrowserConfig } from "./server-context-B1sy4EZS.js";
+import { i as loadWorkspaceSkillEntries } from "./skills-B3SRvP-E.js";
+import { a as resolveNativeSkillsEnabled, i as resolveNativeCommandsEnabled } from "./commands-BwQQ7zsb.js";
+import { t as buildGatewayConnectionDetails } from "./call-C8L99wK_.js";
+import { i as readChannelAllowFromStore } from "./pairing-store-CO5T6xRl.js";
+import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-DS35E0fx.js";
+import { l as resolveDmAllowState, n as isToolAllowedByPolicies, o as pickSandboxToolPolicy } from "./pi-tools.policy-CDC0KLfN.js";
 import { n as isDangerousNameMatchingEnabled } from "./dangerous-name-matching-CoifQXX-.js";
-import { t as listAgentWorkspaceDirs } from "./workspace-dirs-Cbc2KiPi.js";
+import { t as listAgentWorkspaceDirs } from "./workspace-dirs---CM3Zs7.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-gv_rp-w_.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-_v26w_1X.js";
-import { t as scanDirectoryWithSummary } from "./skill-scanner-Cxf7IqSj.js";
-import { t as probeGateway } from "./probe-BiWGmrZT.js";
-import { r as resolveNodeCommandAllowlist, t as DEFAULT_DANGEROUS_NODE_COMMANDS } from "./node-command-policy-CO4I99O1.js";
+import { t as scanDirectoryWithSummary } from "./skill-scanner-CqspV0GZ.js";
+import { t as probeGateway } from "./probe-CRMvvOZh.js";
+import { r as resolveNodeCommandAllowlist, t as DEFAULT_DANGEROUS_NODE_COMMANDS } from "./node-command-policy-DRgKhxFr.js";
 import { c as normalizeTelegramAllowFromEntry, s as isNumericTelegramUserId, t as isDiscordMutableAllowEntry } from "./mutable-allowlist-detectors-C7fvoibT.js";
 import { t as inferParamBFromIdOrName } from "./model-param-b-CMJBkHox.js";
 import path from "node:path";
 import JSON5 from "json5";
-import * as fs$1 from "node:fs/promises";
-import fs from "node:fs/promises";
+import * as fs from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { isIP } from "node:net";
 
 //#region src/gateway/probe-auth.ts
@@ -1252,7 +1252,7 @@ async function collectIncludePathsRecursive(params) {
 			if (visited.has(resolved)) continue;
 			visited.add(resolved);
 			result.push(resolved);
-			const rawText = await fs$1.readFile(resolved, "utf-8").catch(() => null);
+			const rawText = await fs.readFile(resolved, "utf-8").catch(() => null);
 			if (!rawText) continue;
 			const nestedParsed = (() => {
 				try {
@@ -1287,7 +1287,7 @@ function expandTilde(p, env) {
 }
 async function readPluginManifestExtensions(pluginPath) {
 	const manifestPath = path.join(pluginPath, "package.json");
-	const raw = await fs.readFile(manifestPath, "utf-8").catch(() => "");
+	const raw = await fsPromises.readFile(manifestPath, "utf-8").catch(() => "");
 	if (!raw.trim()) return [];
 	const extensions = JSON.parse(raw)?.[MANIFEST_KEY]?.extensions;
 	if (!Array.isArray(extensions)) return [];
@@ -1309,7 +1309,7 @@ async function listInstalledPluginDirs(params) {
 	};
 	return {
 		extensionsDir,
-		pluginDirs: (await fs.readdir(extensionsDir, { withFileTypes: true }).catch((err) => {
+		pluginDirs: (await fsPromises.readdir(extensionsDir, { withFileTypes: true }).catch((err) => {
 			params.onReadError?.(err);
 			return [];
 		})).filter((entry) => entry.isDirectory()).map((entry) => entry.name).filter(Boolean)
@@ -1372,7 +1372,7 @@ function isPinnedRegistrySpec(spec) {
 }
 async function readInstalledPackageVersion(dir) {
 	try {
-		const raw = await fs.readFile(path.join(dir, "package.json"), "utf-8");
+		const raw = await fsPromises.readFile(path.join(dir, "package.json"), "utf-8");
 		const parsed = JSON.parse(raw);
 		return typeof parsed.version === "string" ? parsed.version : void 0;
 	} catch {
@@ -1408,10 +1408,10 @@ async function listWorkspaceSkillMarkdownFiles(workspaceDir) {
 	const visitedDirs = /* @__PURE__ */ new Set();
 	while (queue.length > 0 && skillFiles.length < MAX_WORKSPACE_SKILL_SCAN_FILES_PER_WORKSPACE) {
 		const dir = queue.shift();
-		const dirRealPath = await fs.realpath(dir).catch(() => path.resolve(dir));
+		const dirRealPath = await fsPromises.realpath(dir).catch(() => path.resolve(dir));
 		if (visitedDirs.has(dirRealPath)) continue;
 		visitedDirs.add(dirRealPath);
-		const entries = await fs.readdir(dir, { withFileTypes: true }).catch(() => []);
+		const entries = await fsPromises.readdir(dir, { withFileTypes: true }).catch(() => []);
 		for (const entry of entries) {
 			if (entry.name.startsWith(".") || entry.name === "node_modules") continue;
 			const fullPath = path.join(dir, entry.name);
@@ -1420,7 +1420,7 @@ async function listWorkspaceSkillMarkdownFiles(workspaceDir) {
 				continue;
 			}
 			if (entry.isSymbolicLink()) {
-				const stat = await fs.stat(fullPath).catch(() => null);
+				const stat = await fsPromises.stat(fullPath).catch(() => null);
 				if (!stat) continue;
 				if (stat.isDirectory()) {
 					queue.push(fullPath);
@@ -1710,13 +1710,13 @@ async function collectWorkspaceSkillSymlinkEscapeFindings(params) {
 	const seenSkillPaths = /* @__PURE__ */ new Set();
 	for (const workspaceDir of workspaceDirs) {
 		const workspacePath = path.resolve(workspaceDir);
-		const workspaceRealPath = await fs.realpath(workspacePath).catch(() => workspacePath);
+		const workspaceRealPath = await fsPromises.realpath(workspacePath).catch(() => workspacePath);
 		const skillFilePaths = await listWorkspaceSkillMarkdownFiles(workspacePath);
 		for (const skillFilePath of skillFilePaths) {
 			const canonicalSkillPath = path.resolve(skillFilePath);
 			if (seenSkillPaths.has(canonicalSkillPath)) continue;
 			seenSkillPaths.add(canonicalSkillPath);
-			const skillRealPath = await fs.realpath(canonicalSkillPath).catch(() => null);
+			const skillRealPath = await fsPromises.realpath(canonicalSkillPath).catch(() => null);
 			if (!skillRealPath) continue;
 			if (isPathInside(workspaceRealPath, skillRealPath)) continue;
 			escapedSkillFiles.push({

package/dist/{auth-C-QV87h1.js → auth-BXzrYbOm.js}

@@ -1,6 +1,6 @@
 import { c as readTailscaleWhoisIdentity } from "./tailscale-DZ6XAzwZ.js";
 import { t as safeEqualSecret } from "./secret-equal-CXJEZiWb.js";
-import { n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, u as resolveClientIp } from "./ws-jOuSOOrR.js";
+import { n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, u as resolveClientIp } from "./ws-qa_Mt4Jq.js";
 import { n as resolveGatewayCredentialsFromValues } from "./credentials-C45WhjLr.js";
 
 //#region src/gateway/auth-rate-limit.ts