winclaw 2026.4.2 → 2026.4.3

package/dist/{audio-transcription-runner-BLGEfPAB.js → audio-transcription-runner-D4tmQb8q.js}

@@ -1,15 +1,15 @@
-import { g as resolveAgentModelPrimaryValue, h as resolveAgentModelFallbackValues } from "./run-with-concurrency-ZZIcz2Jg.js";
-import { p as shouldLogVerbose, t as createSubsystemLogger, u as logVerbose, w as resolvePreferredWinClawTmpDir } from "./subsystem-BaUpVOqv.js";
-import { _ as runExec } from "./workspace-B62PSnAp.js";
-import { M as resolveApiKeyForProvider, X as loadConfig, at as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, c as normalizeProviderId, ct as resolveIMessageAttachmentRoots, g as normalizeGoogleModelId, ir as resolveWinClawAgentDir, j as requireApiKey, ot as isInboundPathAllowed, st as mergeInboundPathRoots } from "./model-selection-DPCN8XlV.js";
-import { _ as normalizeChatType } from "./plugins-BTNZZNxf.js";
-import { E as kindFromMime, S as getFileExtension, b as detectMime, w as isAudioFileName } from "./image-ops-rQAvBPng.js";
-import { t as describeImageWithModel, w as ensureWinClawModelsJson } from "./image-Dr0dcvw9.js";
-import { a as getDefaultMediaLocalRoots, n as fetchRemoteMedia, t as MediaFetchError } from "./fetch-CYQj70i4.js";
+import { g as resolveAgentModelPrimaryValue, h as resolveAgentModelFallbackValues } from "./run-with-concurrency-B1BFXO4d.js";
+import { p as shouldLogVerbose, t as createSubsystemLogger, u as logVerbose, w as resolvePreferredWinClawTmpDir } from "./subsystem-BXFWKvR-.js";
+import { _ as runExec } from "./workspace-gDVhJaYu.js";
+import { M as resolveApiKeyForProvider, X as loadConfig, at as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, c as normalizeProviderId, ct as resolveIMessageAttachmentRoots, g as normalizeGoogleModelId, ir as resolveWinClawAgentDir, j as requireApiKey, ot as isInboundPathAllowed, st as mergeInboundPathRoots } from "./model-selection-w1nq3keW.js";
+import { _ as normalizeChatType } from "./plugins-BjKWVodH.js";
+import { E as kindFromMime, S as getFileExtension, b as detectMime, w as isAudioFileName } from "./image-ops-D2IiRc9z.js";
+import { t as describeImageWithModel, w as ensureWinClawModelsJson } from "./image-cgeQwq0Z.js";
+import { a as getDefaultMediaLocalRoots, n as fetchRemoteMedia, t as MediaFetchError } from "./fetch-CBwzVS3g.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-Bghlv-lk.js";
-import { t as fetchWithSsrFGuard } from "./fetch-guard-ClnW3Whm.js";
-import { n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation-CRL09xew.js";
-import { n as resolveProxyFetchFromEnv } from "./proxy-fetch-Cdd34osp.js";
+import { t as fetchWithSsrFGuard } from "./fetch-guard-xqnMBVqQ.js";
+import { n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation-DQvswLYB.js";
+import { n as resolveProxyFetchFromEnv } from "./proxy-fetch-B7RFVnmM.js";
 import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
@@ -22,7 +22,7 @@ import crypto from "node:crypto";
 const log = createSubsystemLogger("model-catalog");
 let modelCatalogPromise = null;
 let hasLoggedModelCatalogError = false;
-const defaultImportPiSdk = () => import("./pi-model-discovery-HdkINIbT.js").then((n) => n.r);
+const defaultImportPiSdk = () => import("./pi-model-discovery-YrFX2ycu.js").then((n) => n.r);
 let importPiSdk = defaultImportPiSdk;
 const CODEX_PROVIDER = "openai-codex";
 const OPENAI_CODEX_GPT53_MODEL_ID = "gpt-5.3-codex";

package/dist/{audio-transcription-runner-CRSNM03k.js → audio-transcription-runner-UjPRrQgJ.js}

@@ -1,23 +1,23 @@
 import { E as logVerbose, k as shouldLogVerbose, st as resolvePreferredWinClawTmpDir } from "./entry.js";
-import { $ as mergeInboundPathRoots, Cr as normalizeProviderId, Hr as normalizeGoogleModelId, Q as isInboundPathAllowed, Z as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, et as resolveIMessageAttachmentRoots, hi as resolveApiKeyForProvider, mi as requireApiKey } from "./auth-profiles-Ckp5jw_h.js";
-import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue } from "./agent-scope-Dany4R2i.js";
+import { $ as mergeInboundPathRoots, Cr as normalizeProviderId, Hr as normalizeGoogleModelId, Q as isInboundPathAllowed, Z as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, et as resolveIMessageAttachmentRoots, hi as resolveApiKeyForProvider, mi as requireApiKey } from "./auth-profiles-C0_vbRBI.js";
+import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue } from "./agent-scope-D-i-vMLS.js";
 import { n as runExec } from "./exec-CaapFZaD.js";
-import { j as normalizeChatType } from "./plugins-IFacUN_Q.js";
-import { c as detectMime, f as isAudioFileName, m as kindFromMime, u as getFileExtension } from "./image-ops-DWGnyTvC.js";
+import { j as normalizeChatType } from "./plugins-C1OgLvb4.js";
+import { c as detectMime, f as isAudioFileName, m as kindFromMime, u as getFileExtension } from "./image-ops-eFMqXMDE.js";
 import { i as formatUncaughtError, n as extractErrorCode, s as readErrorName, t as collectErrorGraphCandidates } from "./errors-Dt_4okVn.js";
-import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-qN_RooIW.js";
-import { a as getDefaultMediaLocalRoots, n as fetchRemoteMedia, t as MediaFetchError } from "./fetch-CVGiNhuf.js";
+import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-B-CI_Q76.js";
+import { a as getDefaultMediaLocalRoots, n as fetchRemoteMedia, t as MediaFetchError } from "./fetch-DyoRWiT-.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-B3GDS_vc.js";
-import { t as fetchWithSsrFGuard } from "./fetch-guard-BdJ7lME2.js";
-import { t as describeImageWithModel } from "./image-COh2_3E2.js";
-import { n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation-DX8FQ-la.js";
+import { t as fetchWithSsrFGuard } from "./fetch-guard-DF0_kLSc.js";
+import { t as describeImageWithModel } from "./image-zu8Q4gsy.js";
+import { n as executeWithApiKeyRotation, r as parseGeminiAuth, t as collectProviderApiKeysForExecution } from "./api-key-rotation-6yvrHUjY.js";
 import { n as resolveProxyFetchFromEnv } from "./proxy-fetch-BqEHARvZ.js";
 import process$1 from "node:process";
 import { fileURLToPath } from "node:url";
 import os from "node:os";
 import path from "node:path";
 import { constants } from "node:fs";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import crypto from "node:crypto";
 
 //#region src/media-understanding/attachments.normalize.ts
@@ -426,7 +426,7 @@ var MediaAttachmentCache = class {
 			const size = await this.ensureLocalStat(entry);
 			if (entry.resolvedPath) {
 				if (size !== void 0 && size > params.maxBytes) throw new MediaUnderstandingSkipError("maxBytes", `Attachment ${params.attachmentIndex + 1} exceeds maxBytes ${params.maxBytes}`);
-				const buffer = await fs$1.readFile(entry.resolvedPath);
+				const buffer = await fsPromises.readFile(entry.resolvedPath);
 				entry.buffer = buffer;
 				entry.bufferMime = entry.bufferMime ?? entry.attachment.mime ?? await detectMime({
 					buffer,
@@ -496,10 +496,10 @@ var MediaAttachmentCache = class {
 			prefix: "winclaw-media",
 			extension: path.extname(bufferResult.fileName || "") || ""
 		});
-		await fs$1.writeFile(tmpPath, bufferResult.buffer);
+		await fsPromises.writeFile(tmpPath, bufferResult.buffer);
 		entry.tempPath = tmpPath;
 		entry.tempCleanup = async () => {
-			await fs$1.unlink(tmpPath).catch(() => {});
+			await fsPromises.unlink(tmpPath).catch(() => {});
 		};
 		return {
 			path: tmpPath,
@@ -546,12 +546,12 @@ var MediaAttachmentCache = class {
 		if (entry.statSize !== void 0) return entry.statSize;
 		try {
 			const currentPath = entry.resolvedPath;
-			const stat = await fs$1.stat(currentPath);
+			const stat = await fsPromises.stat(currentPath);
 			if (!stat.isFile()) {
 				entry.resolvedPath = void 0;
 				return;
 			}
-			const canonicalPath = await fs$1.realpath(currentPath).catch(() => currentPath);
+			const canonicalPath = await fsPromises.realpath(currentPath).catch(() => currentPath);
 			if (!isInboundPathAllowed({
 				filePath: canonicalPath,
 				roots: await this.getCanonicalLocalPathRoots()
@@ -573,7 +573,7 @@ var MediaAttachmentCache = class {
 		if (this.canonicalLocalPathRoots) return await this.canonicalLocalPathRoots;
 		this.canonicalLocalPathRoots = (async () => mergeInboundPathRoots(this.localPathRoots, await Promise.all(this.localPathRoots.map(async (root) => {
 			if (root.includes("*")) return root;
-			return await fs$1.realpath(root).catch(() => root);
+			return await fsPromises.realpath(root).catch(() => root);
 		}))))();
 		return await this.canonicalLocalPathRoots;
 	}
@@ -646,7 +646,7 @@ const MIN_AUDIO_FILE_BYTES = 1024;
 async function fileExists(filePath) {
 	if (!filePath) return false;
 	try {
-		await fs$1.stat(filePath);
+		await fsPromises.stat(filePath);
 		return true;
 	} catch {
 		return false;
@@ -1237,7 +1237,7 @@ async function resolveCliOutput(params) {
 	const commandId = commandBase(params.command);
 	const fileOutput = commandId === "whisper-cli" ? resolveWhisperCppOutputPath(params.args) : commandId === "whisper" ? resolveWhisperOutputPath(params.args, params.mediaPath) : commandId === "parakeet-mlx" ? resolveParakeetOutputPath(params.args, params.mediaPath) : null;
 	if (fileOutput && await fileExists(fileOutput)) try {
-		const content = await fs$1.readFile(fileOutput, "utf8");
+		const content = await fsPromises.readFile(fileOutput, "utf8");
 		if (content.trim()) return content.trim();
 	} catch {}
 	if (commandId === "gemini") {
@@ -1546,10 +1546,10 @@ async function runCliEntry(params) {
 		timeoutMs
 	});
 	if (capability === "audio") assertMinAudioSize({
-		size: (await fs$1.stat(pathResult.path)).size,
+		size: (await fsPromises.stat(pathResult.path)).size,
 		attachmentIndex: params.attachmentIndex
 	});
-	const outputDir = await fs$1.mkdtemp(path.join(resolvePreferredWinClawTmpDir(), "winclaw-media-cli-"));
+	const outputDir = await fsPromises.mkdtemp(path.join(resolvePreferredWinClawTmpDir(), "winclaw-media-cli-"));
 	const mediaPath = pathResult.path;
 	const outputBase = path.join(outputDir, path.parse(mediaPath).name);
 	const templCtx = {
@@ -1583,7 +1583,7 @@ async function runCliEntry(params) {
 			model: command
 		};
 	} finally {
-		await fs$1.rm(outputDir, {
+		await fsPromises.rm(outputDir, {
 			recursive: true,
 			force: true
 		}).catch(() => {});
@@ -1627,9 +1627,9 @@ function candidateBinaryNames(name) {
 }
 async function isExecutable(filePath) {
 	try {
-		if (!(await fs$1.stat(filePath)).isFile()) return false;
+		if (!(await fsPromises.stat(filePath)).isFile()) return false;
 		if (process.platform === "win32") return true;
-		await fs$1.access(filePath, constants.X_OK);
+		await fsPromises.access(filePath, constants.X_OK);
 		return true;
 	} catch {
 		return false;

package/dist/{audit-CyNXGkn3.js → audit-DRPXorDm.js}

@@ -1,36 +1,36 @@
 import { X as resolveConfigPath, it as resolveOAuthDir, ot as resolveStateDir } from "./entry.js";
-import { A as formatPermissionRemediation, M as safeStat, Qt as normalizeTrustedSafeBinDirs, R as createConfigIO, Rn as INCLUDE_KEY, dt as isDangerousNetworkMode, ft as normalizeNetworkMode, j as inspectPathPermissions, k as formatPermissionDetail, zn as MAX_INCLUDE_DEPTH } from "./auth-profiles-Ckp5jw_h.js";
+import { A as formatPermissionRemediation, M as safeStat, Qt as normalizeTrustedSafeBinDirs, R as createConfigIO, Rn as INCLUDE_KEY, dt as isDangerousNetworkMode, ft as normalizeNetworkMode, j as inspectPathPermissions, k as formatPermissionDetail, zn as MAX_INCLUDE_DEPTH } from "./auth-profiles-C0_vbRBI.js";
 import { t as formatCliCommand } from "./command-format-C2YuTuPp.js";
-import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue, d as resolveDefaultAgentId } from "./agent-scope-Dany4R2i.js";
+import { M as resolveAgentModelFallbackValues, N as resolveAgentModelPrimaryValue, d as resolveDefaultAgentId } from "./agent-scope-D-i-vMLS.js";
 import { c as normalizeAgentId } from "./session-key-9-yI-GU_.js";
 import { A as hasConfiguredSecretInput } from "./registry-BcRQUSsJ.js";
 import { i as isPathInside, n as MANIFEST_KEY, r as extensionUsesSkippedScannerPath } from "./legacy-names-DfPyDvWW.js";
-import { d as normalizePluginsConfig } from "./manifest-registry-_liSV_Vx.js";
-import { l as normalizeStringEntries } from "./dock-C-w5XvOS.js";
-import { i as loadWorkspaceSkillEntries } from "./skills-CFYm0xdh.js";
-import { n as listChannelPlugins } from "./plugins-IFacUN_Q.js";
-import { t as buildGatewayConnectionDetails } from "./call-yVj9RKC4.js";
+import { d as normalizePluginsConfig } from "./manifest-registry-CI-UuKUO.js";
+import { l as normalizeStringEntries } from "./dock-ClcGZ0LV.js";
+import { i as loadWorkspaceSkillEntries } from "./skills-BpN5EUZU.js";
+import { n as listChannelPlugins } from "./plugins-C1OgLvb4.js";
+import { t as buildGatewayConnectionDetails } from "./call-CmNNda8m.js";
 import { t as resolveGatewayCredentialsFromConfig } from "./credentials-D4_agdBB.js";
-import { C as resolveToolProfilePolicy, f as resolveSandboxConfigForAgent, k as SANDBOX_BROWSER_SECURITY_HASH_EPOCH, l as execDockerRaw, m as resolveSandboxToolPolicyForAgent, u as getBlockedBindReason } from "./sandbox-CBt528hA.js";
-import { a as resolveGatewayAuth } from "./auth-CnAV77Sn.js";
-import { a as resolveProfile, c as resolveBrowserControlAuth, i as resolveBrowserConfig } from "./server-context-05Fm5Kkz.js";
-import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-C7sG8mhp.js";
-import { a as resolveNativeSkillsEnabled, i as resolveNativeCommandsEnabled } from "./commands-DmBkhPD-.js";
-import { i as readChannelAllowFromStore } from "./pairing-store-Dv0sC8Jz.js";
-import { t as listAgentWorkspaceDirs } from "./workspace-dirs-C5erYAob.js";
-import { l as resolveDmAllowState, n as isToolAllowedByPolicies, o as pickSandboxToolPolicy } from "./pi-tools.policy-UvhsU9iG.js";
+import { C as resolveToolProfilePolicy, f as resolveSandboxConfigForAgent, k as SANDBOX_BROWSER_SECURITY_HASH_EPOCH, l as execDockerRaw, m as resolveSandboxToolPolicyForAgent, u as getBlockedBindReason } from "./sandbox-CHQOIPj9.js";
+import { a as resolveGatewayAuth } from "./auth--KDo_E_4.js";
+import { a as resolveProfile, c as resolveBrowserControlAuth, i as resolveBrowserConfig } from "./server-context-CJiG1msd.js";
+import { r as resolveMergedSafeBinProfileFixtures, t as listInterpreterLikeSafeBins } from "./exec-safe-bin-runtime-policy-By-anRPS.js";
+import { a as resolveNativeSkillsEnabled, i as resolveNativeCommandsEnabled } from "./commands-4mnxaSoA.js";
+import { i as readChannelAllowFromStore } from "./pairing-store-Jfk6MAHv.js";
+import { t as listAgentWorkspaceDirs } from "./workspace-dirs-C13vnqQQ.js";
+import { l as resolveDmAllowState, n as isToolAllowedByPolicies, o as pickSandboxToolPolicy } from "./pi-tools.policy-bVlHvdWR.js";
 import { n as isDangerousNameMatchingEnabled } from "./dangerous-name-matching-PRkNIyQj.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-B9LIt3MU.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-dV2m_On0.js";
-import { t as scanDirectoryWithSummary } from "./skill-scanner-DOOfjrYo.js";
-import { t as probeGateway } from "./probe-BHa1tp-C.js";
-import { r as resolveNodeCommandAllowlist, t as DEFAULT_DANGEROUS_NODE_COMMANDS } from "./node-command-policy-CmGM0UDZ.js";
+import { t as scanDirectoryWithSummary } from "./skill-scanner-DqqhF5of.js";
+import { t as probeGateway } from "./probe-DB96HNqH.js";
+import { r as resolveNodeCommandAllowlist, t as DEFAULT_DANGEROUS_NODE_COMMANDS } from "./node-command-policy-hSqGZL6Y.js";
 import { c as normalizeTelegramAllowFromEntry, s as isNumericTelegramUserId, t as isDiscordMutableAllowEntry } from "./mutable-allowlist-detectors-7oJa2b5V.js";
 import { t as inferParamBFromIdOrName } from "./model-param-b-CrBJZsiI.js";
 import path from "node:path";
 import JSON5 from "json5";
-import * as fs$1 from "node:fs/promises";
-import fs from "node:fs/promises";
+import * as fs from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { isIP } from "node:net";
 
 //#region src/gateway/probe-auth.ts
@@ -1252,7 +1252,7 @@ async function collectIncludePathsRecursive(params) {
 			if (visited.has(resolved)) continue;
 			visited.add(resolved);
 			result.push(resolved);
-			const rawText = await fs$1.readFile(resolved, "utf-8").catch(() => null);
+			const rawText = await fs.readFile(resolved, "utf-8").catch(() => null);
 			if (!rawText) continue;
 			const nestedParsed = (() => {
 				try {
@@ -1287,7 +1287,7 @@ function expandTilde(p, env) {
 }
 async function readPluginManifestExtensions(pluginPath) {
 	const manifestPath = path.join(pluginPath, "package.json");
-	const raw = await fs.readFile(manifestPath, "utf-8").catch(() => "");
+	const raw = await fsPromises.readFile(manifestPath, "utf-8").catch(() => "");
 	if (!raw.trim()) return [];
 	const extensions = JSON.parse(raw)?.[MANIFEST_KEY]?.extensions;
 	if (!Array.isArray(extensions)) return [];
@@ -1309,7 +1309,7 @@ async function listInstalledPluginDirs(params) {
 	};
 	return {
 		extensionsDir,
-		pluginDirs: (await fs.readdir(extensionsDir, { withFileTypes: true }).catch((err) => {
+		pluginDirs: (await fsPromises.readdir(extensionsDir, { withFileTypes: true }).catch((err) => {
 			params.onReadError?.(err);
 			return [];
 		})).filter((entry) => entry.isDirectory()).map((entry) => entry.name).filter(Boolean)
@@ -1372,7 +1372,7 @@ function isPinnedRegistrySpec(spec) {
 }
 async function readInstalledPackageVersion(dir) {
 	try {
-		const raw = await fs.readFile(path.join(dir, "package.json"), "utf-8");
+		const raw = await fsPromises.readFile(path.join(dir, "package.json"), "utf-8");
 		const parsed = JSON.parse(raw);
 		return typeof parsed.version === "string" ? parsed.version : void 0;
 	} catch {
@@ -1408,10 +1408,10 @@ async function listWorkspaceSkillMarkdownFiles(workspaceDir) {
 	const visitedDirs = /* @__PURE__ */ new Set();
 	while (queue.length > 0 && skillFiles.length < MAX_WORKSPACE_SKILL_SCAN_FILES_PER_WORKSPACE) {
 		const dir = queue.shift();
-		const dirRealPath = await fs.realpath(dir).catch(() => path.resolve(dir));
+		const dirRealPath = await fsPromises.realpath(dir).catch(() => path.resolve(dir));
 		if (visitedDirs.has(dirRealPath)) continue;
 		visitedDirs.add(dirRealPath);
-		const entries = await fs.readdir(dir, { withFileTypes: true }).catch(() => []);
+		const entries = await fsPromises.readdir(dir, { withFileTypes: true }).catch(() => []);
 		for (const entry of entries) {
 			if (entry.name.startsWith(".") || entry.name === "node_modules") continue;
 			const fullPath = path.join(dir, entry.name);
@@ -1420,7 +1420,7 @@ async function listWorkspaceSkillMarkdownFiles(workspaceDir) {
 				continue;
 			}
 			if (entry.isSymbolicLink()) {
-				const stat = await fs.stat(fullPath).catch(() => null);
+				const stat = await fsPromises.stat(fullPath).catch(() => null);
 				if (!stat) continue;
 				if (stat.isDirectory()) {
 					queue.push(fullPath);
@@ -1710,13 +1710,13 @@ async function collectWorkspaceSkillSymlinkEscapeFindings(params) {
 	const seenSkillPaths = /* @__PURE__ */ new Set();
 	for (const workspaceDir of workspaceDirs) {
 		const workspacePath = path.resolve(workspaceDir);
-		const workspaceRealPath = await fs.realpath(workspacePath).catch(() => workspacePath);
+		const workspaceRealPath = await fsPromises.realpath(workspacePath).catch(() => workspacePath);
 		const skillFilePaths = await listWorkspaceSkillMarkdownFiles(workspacePath);
 		for (const skillFilePath of skillFilePaths) {
 			const canonicalSkillPath = path.resolve(skillFilePath);
 			if (seenSkillPaths.has(canonicalSkillPath)) continue;
 			seenSkillPaths.add(canonicalSkillPath);
-			const skillRealPath = await fs.realpath(canonicalSkillPath).catch(() => null);
+			const skillRealPath = await fsPromises.realpath(canonicalSkillPath).catch(() => null);
 			if (!skillRealPath) continue;
 			if (isPathInside(workspaceRealPath, skillRealPath)) continue;
 			escapedSkillFiles.push({

package/dist/{audit-membership-runtime-2MsoqrOe.js → audit-membership-runtime-CGEw2gyt.js}

@@ -1,8 +1,8 @@
-import "./paths-B9IfjJ_z.js";
-import "./subsystem-BaUpVOqv.js";
-import { f as isRecord } from "./logger-Bb1Weo6w.js";
+import "./paths-C7wI-mFU.js";
+import "./subsystem-BXFWKvR-.js";
+import { f as isRecord } from "./logger-DywNda3z.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-Bghlv-lk.js";
-import { t as makeProxyFetch } from "./proxy-fetch-Cdd34osp.js";
+import { t as makeProxyFetch } from "./proxy-fetch-B7RFVnmM.js";
 import "./proxy-DULbDMaI.js";
 
 //#region src/telegram/audit-membership-runtime.ts

package/dist/{auth-CnAV77Sn.js → auth--KDo_E_4.js}

@@ -1,5 +1,5 @@
 import { t as safeEqualSecret } from "./secret-equal-DyYamV7h.js";
-import { a as isTrustedProxyAddress, l as resolveClientIp, n as isLoopbackAddress, t as isLocalishHost } from "./net-Bj5kyhic.js";
+import { a as isTrustedProxyAddress, l as resolveClientIp, n as isLoopbackAddress, t as isLocalishHost } from "./net-CXrvhn9o.js";
 import { n as resolveGatewayCredentialsFromValues } from "./credentials-D4_agdBB.js";
 import { c as readTailscaleWhoisIdentity } from "./tailscale-CB_lUnsU.js";
 

package/dist/{auth-choice-CqvYUlqy.js → auth-choice-CqtbkSRG.js}

@@ -7,7 +7,7 @@ import { f as openUrl } from "./onboard-helpers-DFRRiZxm.js";
 import { t as enablePluginInConfig } from "./enable-h83wrujL.js";
 import { a as normalizeSecretInputModeInput, c as resolveSecretInputModeForEnvSelection, d as normalizeApiKeyInput, f as validateApiKeyInput, i as ensureApiKeyFromOptionEnvOrPrompt, l as applyDefaultModelChoice, n as createAuthChoiceDefaultModelApplierForMutableState, o as normalizeTokenProviderInput, s as promptSecretRefForOnboarding, t as createAuthChoiceAgentModelNoter, u as ensureModelAllowlistEntry } from "./auth-choice.apply-helpers-DPRF9yFZ.js";
 import { $ as ZAI_DEFAULT_MODEL_REF, A as applyTogetherConfig, B as applyLitellmConfig, C as applyMoonshotProviderConfigCn, Ct as writeOAuthCredentials, D as applyQianfanProviderConfig, Dt as QIANFAN_DEFAULT_MODEL_REF, E as applyQianfanConfig, Et as MOONSHOT_DEFAULT_MODEL_REF, F as applyXaiProviderConfig, G as applyVercelAiGatewayProviderConfig, H as applyCloudflareAiGatewayConfig, I as applyXiaomiConfig, J as LITELLM_DEFAULT_MODEL_REF, K as applyAgentDefaultModelPrimary, L as applyXiaomiProviderConfig, M as applyVeniceConfig, N as applyVeniceProviderConfig, O as applySyntheticConfig, Ot as XAI_DEFAULT_MODEL_REF, P as applyXaiConfig, Q as XIAOMI_DEFAULT_MODEL_REF, R as applyZaiConfig, S as applyMoonshotProviderConfig, St as setZaiApiKey, T as applyOpenrouterProviderConfig, Tt as MISTRAL_DEFAULT_MODEL_REF, U as applyCloudflareAiGatewayProviderConfig, V as applyLitellmProviderConfig, W as applyVercelAiGatewayConfig, X as TOGETHER_DEFAULT_MODEL_REF, Y as OPENROUTER_DEFAULT_MODEL_REF, Z as VERCEL_AI_GATEWAY_DEFAULT_MODEL_REF, _ as applyKimiCodeProviderConfig, _t as setVeniceApiKey, a as applyMinimaxApiConfig, at as setKilocodeApiKey, b as applyMoonshotConfig, bt as setXaiApiKey, c as applyMinimaxApiProviderConfigCn, ct as setMinimaxApiKey, d as applyAuthProfileConfig, dt as setOpenaiApiKey, et as setAnthropicApiKey, ft as setOpencodeZenApiKey, g as applyKimiCodeConfig, gt as setTogetherApiKey, h as applyKilocodeProviderConfig, ht as setSyntheticApiKey, i as applyOpencodeZenProviderConfig, it as setHuggingfaceApiKey, j as applyTogetherProviderConfig, k as applySyntheticProviderConfig, l as applyMinimaxConfig, lt as setMistralApiKey, m as applyKilocodeConfig, mt as setQianfanApiKey, n as validateAnthropicSetupToken, nt as setCloudflareAiGatewayConfig, o as applyMinimaxApiConfigCn, ot as setKimiCodingApiKey, p as applyHuggingfaceProviderConfig, pt as setOpenrouterApiKey, q as HUGGINGFACE_DEFAULT_MODEL_REF, r as applyOpencodeZenConfig, rt as setGeminiApiKey, s as applyMinimaxApiProviderConfig, st as setLitellmApiKey, t as buildTokenProfileId, tt as setByteplusApiKey, u as applyMinimaxProviderConfig, ut as setMoonshotApiKey, v as applyMistralConfig, vt as setVercelAiGatewayApiKey, w as applyOpenrouterConfig, wt as KIMI_CODING_MODEL_REF, x as applyMoonshotConfigCn, xt as setXiaomiApiKey, y as applyMistralProviderConfig, yt as setVolcengineApiKey, z as applyZaiProviderConfig } from "./auth-token-BRJy8_CO.js";
-import { a as createVpsAwareOAuthHandlers, c as githubCopilotLoginCommand, i as resolveProviderMatch, n as mergeConfigPatch, o as isRemoteEnvironment, r as pickAuthMethod, s as resolvePluginProviders, t as applyDefaultModel } from "./provider-auth-helpers-BdTAe8Ts.js";
+import { a as createVpsAwareOAuthHandlers, c as githubCopilotLoginCommand, i as resolveProviderMatch, n as mergeConfigPatch, o as isRemoteEnvironment, r as pickAuthMethod, s as resolvePluginProviders, t as applyDefaultModel } from "./provider-auth-helpers-DtFxRdIx.js";
 import { a as GOOGLE_GEMINI_DEFAULT_MODEL, i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault, r as applyOpenAIProviderConfig, t as OPENAI_DEFAULT_MODEL } from "./openai-model-default-CCzw_-KH.js";
 import { c as OPENAI_CODEX_DEFAULT_MODEL, l as applyOpenAICodexModelDefault, r as applyPrimaryModel, s as promptAndConfigureVllm } from "./model-picker-CYgU81oA.js";
 import { r as runOpenAIOAuthTlsPreflight, t as formatOpenAIOAuthTlsPreflightFix } from "./oauth-tls-preflight-s2FxaqDA.js";

package/dist/{auth-choice-VaQfxfmJ.js → auth-choice-DM5Plhrj.js}

@@ -1,7 +1,7 @@
-import { Cr as normalizeProviderId, Mi as normalizeSecretInput, Zn as upsertAuthProfile, _i as resolveEnvApiKey, ct as resolveDefaultSecretProviderAlias, d as resolveApiKeyForProfile, er as ensureAuthProfileStore, ji as normalizeOptionalSecretInput, pt as parseDurationMs, r as resolveAuthProfileOrder } from "./auth-profiles-Ckp5jw_h.js";
-import "./agent-scope-Dany4R2i.js";
+import { Cr as normalizeProviderId, Mi as normalizeSecretInput, Zn as upsertAuthProfile, _i as resolveEnvApiKey, ct as resolveDefaultSecretProviderAlias, d as resolveApiKeyForProfile, er as ensureAuthProfileStore, ji as normalizeOptionalSecretInput, pt as parseDurationMs, r as resolveAuthProfileOrder } from "./auth-profiles-C0_vbRBI.js";
+import "./agent-scope-D-i-vMLS.js";
 import "./utils-hiIKrqOK.js";
-import "./winclaw-root-DEqOOeOw.js";
+import "./winclaw-root-D0OUuGl7.js";
 import "./logger-BcqRk323.js";
 import "./exec-CaapFZaD.js";
 import "./registry-BcRQUSsJ.js";
@@ -9,16 +9,16 @@ import "./github-copilot-token-DHTToceK.js";
 import "./host-env-security-CIiLt2Mi.js";
 import "./version-TiOyTfO4.js";
 import "./env-vars-CE3cUIrz.js";
-import "./manifest-registry-_liSV_Vx.js";
-import "./models-config-Dp2QIxnd.js";
-import "./model-catalog-qN_RooIW.js";
-import { a as normalizeSecretInputModeInput } from "./auth-choice.apply-helpers-DcSztsOH.js";
-import "./issue-format-rXDeQGUX.js";
-import "./shared-_43GPoqz.js";
-import { A as applyTogetherConfig, B as applyLitellmConfig, E as applyQianfanConfig, H as applyCloudflareAiGatewayConfig, I as applyXiaomiConfig, M as applyVeniceConfig, O as applySyntheticConfig, P as applyXaiConfig, R as applyZaiConfig, St as setZaiApiKey, W as applyVercelAiGatewayConfig, _t as setVeniceApiKey, a as applyMinimaxApiConfig, at as setKilocodeApiKey, b as applyMoonshotConfig, bt as setXaiApiKey, ct as setMinimaxApiKey, d as applyAuthProfileConfig, dt as setOpenaiApiKey, et as setAnthropicApiKey, f as applyHuggingfaceConfig, ft as setOpencodeZenApiKey, g as applyKimiCodeConfig, gt as setTogetherApiKey, ht as setSyntheticApiKey, it as setHuggingfaceApiKey, l as applyMinimaxConfig, lt as setMistralApiKey, m as applyKilocodeConfig, mt as setQianfanApiKey, n as validateAnthropicSetupToken, nt as setCloudflareAiGatewayConfig, o as applyMinimaxApiConfigCn, ot as setKimiCodingApiKey, pt as setOpenrouterApiKey, r as applyOpencodeZenConfig, rt as setGeminiApiKey, st as setLitellmApiKey, t as buildTokenProfileId, tt as setByteplusApiKey, ut as setMoonshotApiKey, v as applyMistralConfig, vt as setVercelAiGatewayApiKey, w as applyOpenrouterConfig, x as applyMoonshotConfigCn, xt as setXiaomiApiKey, yt as setVolcengineApiKey } from "./auth-token-BxX2fAIF.js";
-import { i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault } from "./openai-model-default-WrjUZSLr.js";
-import { r as applyPrimaryModel } from "./model-picker-DWShnz0q.js";
-import { i as parseNonInteractiveCustomApiFlags, n as applyCustomApiConfig, o as resolveCustomProviderId, t as CustomApiError } from "./onboard-custom-B_v0Ajog.js";
+import "./manifest-registry-CI-UuKUO.js";
+import "./models-config-tPZvlEX4.js";
+import "./model-catalog-B-CI_Q76.js";
+import { a as normalizeSecretInputModeInput } from "./auth-choice.apply-helpers-CJy8V2Xp.js";
+import "./issue-format-DUrssptL.js";
+import "./shared-CaXgHNH2.js";
+import { A as applyTogetherConfig, B as applyLitellmConfig, E as applyQianfanConfig, H as applyCloudflareAiGatewayConfig, I as applyXiaomiConfig, M as applyVeniceConfig, O as applySyntheticConfig, P as applyXaiConfig, R as applyZaiConfig, St as setZaiApiKey, W as applyVercelAiGatewayConfig, _t as setVeniceApiKey, a as applyMinimaxApiConfig, at as setKilocodeApiKey, b as applyMoonshotConfig, bt as setXaiApiKey, ct as setMinimaxApiKey, d as applyAuthProfileConfig, dt as setOpenaiApiKey, et as setAnthropicApiKey, f as applyHuggingfaceConfig, ft as setOpencodeZenApiKey, g as applyKimiCodeConfig, gt as setTogetherApiKey, ht as setSyntheticApiKey, it as setHuggingfaceApiKey, l as applyMinimaxConfig, lt as setMistralApiKey, m as applyKilocodeConfig, mt as setQianfanApiKey, n as validateAnthropicSetupToken, nt as setCloudflareAiGatewayConfig, o as applyMinimaxApiConfigCn, ot as setKimiCodingApiKey, pt as setOpenrouterApiKey, r as applyOpencodeZenConfig, rt as setGeminiApiKey, st as setLitellmApiKey, t as buildTokenProfileId, tt as setByteplusApiKey, ut as setMoonshotApiKey, v as applyMistralConfig, vt as setVercelAiGatewayApiKey, w as applyOpenrouterConfig, x as applyMoonshotConfigCn, xt as setXiaomiApiKey, yt as setVolcengineApiKey } from "./auth-token-BsypkvZB.js";
+import { i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault } from "./openai-model-default-Duce_n_s.js";
+import { r as applyPrimaryModel } from "./model-picker-BZqbkINL.js";
+import { i as parseNonInteractiveCustomApiFlags, n as applyCustomApiConfig, o as resolveCustomProviderId, t as CustomApiError } from "./onboard-custom-DW1WeR_n.js";
 
 //#region src/commands/onboard-non-interactive/api-keys.ts
 function parseEnvVarNameFromSourceLabel(source) {

package/dist/{auth-choice-_mgzqtsu.js → auth-choice-ipCgzgej.js}

@@ -1,15 +1,15 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { Di as isHuggingfacePolicyLocked, Ei as discoverHuggingfaceModels, Jn as listProfilesForProvider, Jr as VENICE_DEFAULT_MODEL_REF, Oi as CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_REF, Or as resolveDefaultModelForAgent, Pi as KILOCODE_DEFAULT_MODEL_REF, Zn as upsertAuthProfile, _ as parseOAuthCallbackInput, _i as resolveEnvApiKey, cr as resolveWinClawAgentDir, er as ensureAuthProfileStore, g as generateChutesPkce, h as exchangeChutesCodeForTokens, m as CHUTES_AUTHORIZE_ENDPOINT, pi as getCustomProviderApiKey, r as resolveAuthProfileOrder, ri as SYNTHETIC_DEFAULT_MODEL_REF } from "./auth-profiles-Ckp5jw_h.js";
-import { A as resolveDefaultAgentWorkspaceDir, P as toAgentModelListLike, a as resolveAgentDir, d as resolveDefaultAgentId, u as resolveAgentWorkspaceDir } from "./agent-scope-Dany4R2i.js";
-import { r as isLoopbackHost } from "./net-Bj5kyhic.js";
-import { n as loadModelCatalog } from "./model-catalog-qN_RooIW.js";
-import { f as openUrl } from "./onboard-helpers-6Smrn-T1.js";
-import { t as enablePluginInConfig } from "./enable-BQen2xUb.js";
-import { a as normalizeSecretInputModeInput, c as resolveSecretInputModeForEnvSelection, d as normalizeApiKeyInput, f as validateApiKeyInput, i as ensureApiKeyFromOptionEnvOrPrompt, l as applyDefaultModelChoice, n as createAuthChoiceDefaultModelApplierForMutableState, o as normalizeTokenProviderInput, s as promptSecretRefForOnboarding, t as createAuthChoiceAgentModelNoter, u as ensureModelAllowlistEntry } from "./auth-choice.apply-helpers-DcSztsOH.js";
-import { $ as ZAI_DEFAULT_MODEL_REF, A as applyTogetherConfig, B as applyLitellmConfig, C as applyMoonshotProviderConfigCn, Ct as writeOAuthCredentials, D as applyQianfanProviderConfig, Dt as QIANFAN_DEFAULT_MODEL_REF, E as applyQianfanConfig, Et as MOONSHOT_DEFAULT_MODEL_REF, F as applyXaiProviderConfig, G as applyVercelAiGatewayProviderConfig, H as applyCloudflareAiGatewayConfig, I as applyXiaomiConfig, J as LITELLM_DEFAULT_MODEL_REF, K as applyAgentDefaultModelPrimary, L as applyXiaomiProviderConfig, M as applyVeniceConfig, N as applyVeniceProviderConfig, O as applySyntheticConfig, Ot as XAI_DEFAULT_MODEL_REF, P as applyXaiConfig, Q as XIAOMI_DEFAULT_MODEL_REF, R as applyZaiConfig, S as applyMoonshotProviderConfig, St as setZaiApiKey, T as applyOpenrouterProviderConfig, Tt as MISTRAL_DEFAULT_MODEL_REF, U as applyCloudflareAiGatewayProviderConfig, V as applyLitellmProviderConfig, W as applyVercelAiGatewayConfig, X as TOGETHER_DEFAULT_MODEL_REF, Y as OPENROUTER_DEFAULT_MODEL_REF, Z as VERCEL_AI_GATEWAY_DEFAULT_MODEL_REF, _ as applyKimiCodeProviderConfig, _t as setVeniceApiKey, a as applyMinimaxApiConfig, at as setKilocodeApiKey, b as applyMoonshotConfig, bt as setXaiApiKey, c as applyMinimaxApiProviderConfigCn, ct as setMinimaxApiKey, d as applyAuthProfileConfig, dt as setOpenaiApiKey, et as setAnthropicApiKey, ft as setOpencodeZenApiKey, g as applyKimiCodeConfig, gt as setTogetherApiKey, h as applyKilocodeProviderConfig, ht as setSyntheticApiKey, i as applyOpencodeZenProviderConfig, it as setHuggingfaceApiKey, j as applyTogetherProviderConfig, k as applySyntheticProviderConfig, l as applyMinimaxConfig, lt as setMistralApiKey, m as applyKilocodeConfig, mt as setQianfanApiKey, n as validateAnthropicSetupToken, nt as setCloudflareAiGatewayConfig, o as applyMinimaxApiConfigCn, ot as setKimiCodingApiKey, p as applyHuggingfaceProviderConfig, pt as setOpenrouterApiKey, q as HUGGINGFACE_DEFAULT_MODEL_REF, r as applyOpencodeZenConfig, rt as setGeminiApiKey, s as applyMinimaxApiProviderConfig, st as setLitellmApiKey, t as buildTokenProfileId, tt as setByteplusApiKey, u as applyMinimaxProviderConfig, ut as setMoonshotApiKey, v as applyMistralConfig, vt as setVercelAiGatewayApiKey, w as applyOpenrouterConfig, wt as KIMI_CODING_MODEL_REF, x as applyMoonshotConfigCn, xt as setXiaomiApiKey, y as applyMistralProviderConfig, yt as setVolcengineApiKey, z as applyZaiProviderConfig } from "./auth-token-BxX2fAIF.js";
-import { a as createVpsAwareOAuthHandlers, c as githubCopilotLoginCommand, i as resolveProviderMatch, n as mergeConfigPatch, o as isRemoteEnvironment, r as pickAuthMethod, s as resolvePluginProviders, t as applyDefaultModel } from "./provider-auth-helpers-BqcEPaTu.js";
-import { a as GOOGLE_GEMINI_DEFAULT_MODEL, i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault, r as applyOpenAIProviderConfig, t as OPENAI_DEFAULT_MODEL } from "./openai-model-default-WrjUZSLr.js";
-import { c as OPENAI_CODEX_DEFAULT_MODEL, l as applyOpenAICodexModelDefault, r as applyPrimaryModel, s as promptAndConfigureVllm } from "./model-picker-DWShnz0q.js";
+import { Di as isHuggingfacePolicyLocked, Ei as discoverHuggingfaceModels, Jn as listProfilesForProvider, Jr as VENICE_DEFAULT_MODEL_REF, Oi as CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_REF, Or as resolveDefaultModelForAgent, Pi as KILOCODE_DEFAULT_MODEL_REF, Zn as upsertAuthProfile, _ as parseOAuthCallbackInput, _i as resolveEnvApiKey, cr as resolveWinClawAgentDir, er as ensureAuthProfileStore, g as generateChutesPkce, h as exchangeChutesCodeForTokens, m as CHUTES_AUTHORIZE_ENDPOINT, pi as getCustomProviderApiKey, r as resolveAuthProfileOrder, ri as SYNTHETIC_DEFAULT_MODEL_REF } from "./auth-profiles-C0_vbRBI.js";
+import { A as resolveDefaultAgentWorkspaceDir, P as toAgentModelListLike, a as resolveAgentDir, d as resolveDefaultAgentId, u as resolveAgentWorkspaceDir } from "./agent-scope-D-i-vMLS.js";
+import { r as isLoopbackHost } from "./net-CXrvhn9o.js";
+import { n as loadModelCatalog } from "./model-catalog-B-CI_Q76.js";
+import { f as openUrl } from "./onboard-helpers-b9T97_8S.js";
+import { t as enablePluginInConfig } from "./enable-DawrgAnk.js";
+import { a as normalizeSecretInputModeInput, c as resolveSecretInputModeForEnvSelection, d as normalizeApiKeyInput, f as validateApiKeyInput, i as ensureApiKeyFromOptionEnvOrPrompt, l as applyDefaultModelChoice, n as createAuthChoiceDefaultModelApplierForMutableState, o as normalizeTokenProviderInput, s as promptSecretRefForOnboarding, t as createAuthChoiceAgentModelNoter, u as ensureModelAllowlistEntry } from "./auth-choice.apply-helpers-CJy8V2Xp.js";
+import { $ as ZAI_DEFAULT_MODEL_REF, A as applyTogetherConfig, B as applyLitellmConfig, C as applyMoonshotProviderConfigCn, Ct as writeOAuthCredentials, D as applyQianfanProviderConfig, Dt as QIANFAN_DEFAULT_MODEL_REF, E as applyQianfanConfig, Et as MOONSHOT_DEFAULT_MODEL_REF, F as applyXaiProviderConfig, G as applyVercelAiGatewayProviderConfig, H as applyCloudflareAiGatewayConfig, I as applyXiaomiConfig, J as LITELLM_DEFAULT_MODEL_REF, K as applyAgentDefaultModelPrimary, L as applyXiaomiProviderConfig, M as applyVeniceConfig, N as applyVeniceProviderConfig, O as applySyntheticConfig, Ot as XAI_DEFAULT_MODEL_REF, P as applyXaiConfig, Q as XIAOMI_DEFAULT_MODEL_REF, R as applyZaiConfig, S as applyMoonshotProviderConfig, St as setZaiApiKey, T as applyOpenrouterProviderConfig, Tt as MISTRAL_DEFAULT_MODEL_REF, U as applyCloudflareAiGatewayProviderConfig, V as applyLitellmProviderConfig, W as applyVercelAiGatewayConfig, X as TOGETHER_DEFAULT_MODEL_REF, Y as OPENROUTER_DEFAULT_MODEL_REF, Z as VERCEL_AI_GATEWAY_DEFAULT_MODEL_REF, _ as applyKimiCodeProviderConfig, _t as setVeniceApiKey, a as applyMinimaxApiConfig, at as setKilocodeApiKey, b as applyMoonshotConfig, bt as setXaiApiKey, c as applyMinimaxApiProviderConfigCn, ct as setMinimaxApiKey, d as applyAuthProfileConfig, dt as setOpenaiApiKey, et as setAnthropicApiKey, ft as setOpencodeZenApiKey, g as applyKimiCodeConfig, gt as setTogetherApiKey, h as applyKilocodeProviderConfig, ht as setSyntheticApiKey, i as applyOpencodeZenProviderConfig, it as setHuggingfaceApiKey, j as applyTogetherProviderConfig, k as applySyntheticProviderConfig, l as applyMinimaxConfig, lt as setMistralApiKey, m as applyKilocodeConfig, mt as setQianfanApiKey, n as validateAnthropicSetupToken, nt as setCloudflareAiGatewayConfig, o as applyMinimaxApiConfigCn, ot as setKimiCodingApiKey, p as applyHuggingfaceProviderConfig, pt as setOpenrouterApiKey, q as HUGGINGFACE_DEFAULT_MODEL_REF, r as applyOpencodeZenConfig, rt as setGeminiApiKey, s as applyMinimaxApiProviderConfig, st as setLitellmApiKey, t as buildTokenProfileId, tt as setByteplusApiKey, u as applyMinimaxProviderConfig, ut as setMoonshotApiKey, v as applyMistralConfig, vt as setVercelAiGatewayApiKey, w as applyOpenrouterConfig, wt as KIMI_CODING_MODEL_REF, x as applyMoonshotConfigCn, xt as setXiaomiApiKey, y as applyMistralProviderConfig, yt as setVolcengineApiKey, z as applyZaiProviderConfig } from "./auth-token-BsypkvZB.js";
+import { a as createVpsAwareOAuthHandlers, c as githubCopilotLoginCommand, i as resolveProviderMatch, n as mergeConfigPatch, o as isRemoteEnvironment, r as pickAuthMethod, s as resolvePluginProviders, t as applyDefaultModel } from "./provider-auth-helpers-B6dLIZhZ.js";
+import { a as GOOGLE_GEMINI_DEFAULT_MODEL, i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault, r as applyOpenAIProviderConfig, t as OPENAI_DEFAULT_MODEL } from "./openai-model-default-Duce_n_s.js";
+import { c as OPENAI_CODEX_DEFAULT_MODEL, l as applyOpenAICodexModelDefault, r as applyPrimaryModel, s as promptAndConfigureVllm } from "./model-picker-BZqbkINL.js";
 import { r as runOpenAIOAuthTlsPreflight, t as formatOpenAIOAuthTlsPreflightFix } from "./oauth-tls-preflight-DQJBchsr.js";
 import { loginOpenAICodex } from "@mariozechner/pi-ai";
 import { randomBytes } from "node:crypto";

package/dist/{auth-choice.apply-helpers-DcSztsOH.js → auth-choice.apply-helpers-CJy8V2Xp.js}

@@ -1,4 +1,4 @@
-import { Er as resolveAllowlistModelKey, O as encodeJsonPointerToken, Ri as DEFAULT_PROVIDER, _i as resolveEnvApiKey, ct as resolveDefaultSecretProviderAlias, ot as isValidFileSecretRefId, y as resolveSecretRefString } from "./auth-profiles-Ckp5jw_h.js";
+import { Er as resolveAllowlistModelKey, O as encodeJsonPointerToken, Ri as DEFAULT_PROVIDER, _i as resolveEnvApiKey, ct as resolveDefaultSecretProviderAlias, ot as isValidFileSecretRefId, y as resolveSecretRefString } from "./auth-profiles-C0_vbRBI.js";
 import { t as PROVIDER_ENV_VARS } from "./provider-env-vars-DYZiYet-.js";
 
 //#region src/commands/auth-choice.api-key.ts

package/dist/{auth-profiles-Ckp5jw_h.js → auth-profiles-C0_vbRBI.js}

@@ -1,10 +1,10 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { $ as resolveGatewayLockDir, G as CONFIG_PATH, J as isNixMode, K as DEFAULT_GATEWAY_PORT, Q as resolveDefaultConfigCandidates, X as resolveConfigPath, Y as resolveCanonicalConfigPath, Z as resolveConfigPathCandidate, at as resolveOAuthPath, et as resolveGatewayPort, ft as expandHomePrefix, it as resolveOAuthDir, m as stripAnsi, mt as resolveRequiredHomeDir, nt as resolveLegacyStateDirs, ot as resolveStateDir, q as STATE_DIR, r as isTruthyEnvValue, rt as resolveNewStateDir, s as createSubsystemLogger, tt as resolveIsNixMode } from "./entry.js";
 import { t as formatCliCommand } from "./command-format-C2YuTuPp.js";
-import { N as resolveAgentModelPrimaryValue, P as toAgentModelListLike, d as resolveDefaultAgentId, i as resolveAgentConfig, o as resolveAgentEffectiveModelPrimary, u as resolveAgentWorkspaceDir } from "./agent-scope-Dany4R2i.js";
+import { N as resolveAgentModelPrimaryValue, P as toAgentModelListLike, d as resolveDefaultAgentId, i as resolveAgentConfig, o as resolveAgentEffectiveModelPrimary, u as resolveAgentWorkspaceDir } from "./agent-scope-D-i-vMLS.js";
 import { c as normalizeAgentId, t as DEFAULT_AGENT_ID, y as isBlockedObjectKey } from "./session-key-9-yI-GU_.js";
 import { E as isPlainObject$2, S as sleep, h as resolveConfigDir, u as isRecord$2, v as resolveUserPath } from "./utils-hiIKrqOK.js";
-import { a as openBoundaryFileSync, r as canUseBoundaryFileOpen } from "./winclaw-root-DEqOOeOw.js";
+import { a as openBoundaryFileSync, r as canUseBoundaryFileOpen } from "./winclaw-root-D0OUuGl7.js";
 import { n as runExec } from "./exec-CaapFZaD.js";
 import { A as hasConfiguredSecretInput, D as DEFAULT_SECRET_PROVIDER_ALIAS, F as resolveSecretInputRef, M as normalizeResolvedSecretInputString, N as normalizeSecretInputString, O as assertSecretInputResolved, P as parseEnvTemplateSecretRef, j as isSecretRef, k as coerceSecretRef, l as normalizeChatChannelId, t as CHANNEL_IDS } from "./registry-BcRQUSsJ.js";
 import { a as saveJsonFile, i as loadJsonFile, r as resolveCopilotApiToken, t as DEFAULT_COPILOT_API_BASE_URL } from "./github-copilot-token-DHTToceK.js";
@@ -12,8 +12,8 @@ import { i as sanitizeHostExecEnv } from "./host-env-security-CIiLt2Mi.js";
 import { t as VERSION } from "./version-TiOyTfO4.js";
 import { t as applyConfigEnvVars } from "./env-vars-CE3cUIrz.js";
 import { i as isPathInside } from "./legacy-names-DfPyDvWW.js";
-import { d as normalizePluginsConfig, f as resolveEffectiveEnableState, n as loadPluginManifestRegistry, p as resolveMemorySlotDecision } from "./manifest-registry-_liSV_Vx.js";
-import { d as TOOLS_BY_SENDER_KEY_TYPES, f as parseToolsBySenderTypedKey } from "./dock-C-w5XvOS.js";
+import { d as normalizePluginsConfig, f as resolveEffectiveEnableState, n as loadPluginManifestRegistry, p as resolveMemorySlotDecision } from "./manifest-registry-CI-UuKUO.js";
+import { d as TOOLS_BY_SENDER_KEY_TYPES, f as parseToolsBySenderTypedKey } from "./dock-ClcGZ0LV.js";
 import { t as runTasksWithConcurrency } from "./run-with-concurrency-CzLnwXXV.js";
 import { createRequire } from "node:module";
 import { execFileSync, spawn } from "node:child_process";
@@ -22,7 +22,7 @@ import path from "node:path";
 import fs from "node:fs";
 import JSON5 from "json5";
 import { isDeepStrictEqual } from "node:util";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { BedrockClient, ListFoundationModelsCommand } from "@aws-sdk/client-bedrock";
 import { createAssistantMessageEventStream, getEnvApiKey, getOAuthApiKey, getOAuthProviders } from "@mariozechner/pi-ai";
 import crypto, { createHash, randomBytes, randomUUID } from "node:crypto";
@@ -3558,7 +3558,7 @@ function computeDelayMs(retries, attempt) {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fs$1.readFile(lockPath, "utf8");
+		const raw = await fsPromises.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number" || typeof parsed.createdAt !== "string") return null;
 		return {
@@ -3572,9 +3572,9 @@ async function readLockPayload(lockPath) {
 async function resolveNormalizedFilePath(filePath) {
 	const resolved = path.resolve(filePath);
 	const dir = path.dirname(resolved);
-	await fs$1.mkdir(dir, { recursive: true });
+	await fsPromises.mkdir(dir, { recursive: true });
 	try {
-		const realDir = await fs$1.realpath(dir);
+		const realDir = await fsPromises.realpath(dir);
 		return path.join(realDir, path.basename(resolved));
 	} catch {
 		return resolved;
@@ -3588,7 +3588,7 @@ async function isStaleLock(lockPath, staleMs) {
 		if (!Number.isFinite(createdAt) || Date.now() - createdAt > staleMs) return true;
 	}
 	try {
-		const stat = await fs$1.stat(lockPath);
+		const stat = await fsPromises.stat(lockPath);
 		return Date.now() - stat.mtimeMs > staleMs;
 	} catch {
 		return true;
@@ -3601,7 +3601,7 @@ async function releaseHeldLock(normalizedFile) {
 	if (current.count > 0) return;
 	HELD_LOCKS.delete(normalizedFile);
 	await current.handle.close().catch(() => void 0);
-	await fs$1.rm(current.lockPath, { force: true }).catch(() => void 0);
+	await fsPromises.rm(current.lockPath, { force: true }).catch(() => void 0);
 }
 async function acquireFileLock(filePath, options) {
 	const normalizedFile = await resolveNormalizedFilePath(filePath);
@@ -3616,7 +3616,7 @@ async function acquireFileLock(filePath, options) {
 	}
 	const attempts = Math.max(1, options.retries.retries + 1);
 	for (let attempt = 0; attempt < attempts; attempt += 1) try {
-		const handle = await fs$1.open(lockPath, "wx");
+		const handle = await fsPromises.open(lockPath, "wx");
 		await handle.writeFile(JSON.stringify({
 			pid: process.pid,
 			createdAt: (/* @__PURE__ */ new Date()).toISOString()
@@ -3633,7 +3633,7 @@ async function acquireFileLock(filePath, options) {
 	} catch (err) {
 		if (err.code !== "EEXIST") throw err;
 		if (await isStaleLock(lockPath, options.stale)) {
-			await fs$1.rm(lockPath, { force: true }).catch(() => void 0);
+			await fsPromises.rm(lockPath, { force: true }).catch(() => void 0);
 			continue;
 		}
 		if (attempt >= attempts - 1) break;
@@ -14833,7 +14833,7 @@ function createIcaclsResetCommand(targetPath, opts) {
 //#region src/security/audit-fs.ts
 async function safeStat(targetPath) {
 	try {
-		const lst = await fs$1.lstat(targetPath);
+		const lst = await fsPromises.lstat(targetPath);
 		return {
 			ok: true,
 			isSymlink: lst.isSymbolicLink(),
@@ -14872,7 +14872,7 @@ async function inspectPathPermissions(targetPath, opts) {
 	let effectiveMode = st.mode;
 	let effectiveIsDir = st.isDir;
 	if (st.isSymlink) try {
-		const target = await fs$1.stat(targetPath);
+		const target = await fsPromises.stat(targetPath);
 		effectiveMode = typeof target.mode === "number" ? target.mode : st.mode;
 		effectiveIsDir = target.isDirectory();
 	} catch {}
@@ -15126,7 +15126,7 @@ async function assertSecurePath(params) {
 	if (stat.isSymlink) {
 		if (!params.allowSymlinkPath) throw new Error(`${params.label} must not be a symlink: ${effectivePath}`);
 		try {
-			effectivePath = await fs$1.realpath(effectivePath);
+			effectivePath = await fsPromises.realpath(effectivePath);
 		} catch {
 			throw new Error(`${params.label} symlink target is not readable: ${params.targetPath}`);
 		}
@@ -15174,7 +15174,7 @@ async function readFileProviderPayload(params) {
 			}, timeoutMs);
 		});
 		try {
-			const payload = await Promise.race([fs$1.readFile(secureFilePath, { signal: abortController.signal }), timeoutPromise]);
+			const payload = await Promise.race([fsPromises.readFile(secureFilePath, { signal: abortController.signal }), timeoutPromise]);
 			if (payload.byteLength > maxBytes) throw new Error(`File provider "${params.providerName}" exceeded maxBytes (${maxBytes}).`);
 			const text = payload.toString("utf8");
 			if (params.providerConfig.mode === "singleValue") return text.replace(/\r?\n$/, "");

package/dist/{auth-token-BxX2fAIF.js → auth-token-BsypkvZB.js}

@@ -1,5 +1,5 @@
 import { ot as resolveStateDir, s as createSubsystemLogger } from "./entry.js";
-import { $r as TOGETHER_BASE_URL, Ai as resolveCloudflareAiGatewayBaseUrl, Br as buildQianfanProvider, Ci as HUGGINGFACE_BASE_URL, Cr as normalizeProviderId, Fr as QIANFAN_BASE_URL, Ir as QIANFAN_DEFAULT_MODEL_ID, Jr as VENICE_DEFAULT_MODEL_REF, Lr as XIAOMI_DEFAULT_MODEL_ID, Mi as normalizeSecretInput, Ni as KILOCODE_BASE_URL, Oi as CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_REF, Pi as KILOCODE_DEFAULT_MODEL_REF, Rr as buildKilocodeProvider, Ti as buildHuggingfaceModelDefinition, Vr as buildXiaomiProvider, Xr as buildVeniceModelDefinition, Yr as VENICE_MODEL_CATALOG, Zn as upsertAuthProfile, ai as buildSyntheticModelDefinition, cr as resolveWinClawAgentDir, ei as TOGETHER_MODEL_CATALOG, ii as SYNTHETIC_MODEL_CATALOG, ki as buildCloudflareAiGatewayModelDefinition, ni as SYNTHETIC_BASE_URL, qr as VENICE_BASE_URL, ri as SYNTHETIC_DEFAULT_MODEL_REF, ti as buildTogetherModelDefinition, wi as HUGGINGFACE_MODEL_CATALOG, zr as buildKimiCodingProvider } from "./auth-profiles-Ckp5jw_h.js";
+import { $r as TOGETHER_BASE_URL, Ai as resolveCloudflareAiGatewayBaseUrl, Br as buildQianfanProvider, Ci as HUGGINGFACE_BASE_URL, Cr as normalizeProviderId, Fr as QIANFAN_BASE_URL, Ir as QIANFAN_DEFAULT_MODEL_ID, Jr as VENICE_DEFAULT_MODEL_REF, Lr as XIAOMI_DEFAULT_MODEL_ID, Mi as normalizeSecretInput, Ni as KILOCODE_BASE_URL, Oi as CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_REF, Pi as KILOCODE_DEFAULT_MODEL_REF, Rr as buildKilocodeProvider, Ti as buildHuggingfaceModelDefinition, Vr as buildXiaomiProvider, Xr as buildVeniceModelDefinition, Yr as VENICE_MODEL_CATALOG, Zn as upsertAuthProfile, ai as buildSyntheticModelDefinition, cr as resolveWinClawAgentDir, ei as TOGETHER_MODEL_CATALOG, ii as SYNTHETIC_MODEL_CATALOG, ki as buildCloudflareAiGatewayModelDefinition, ni as SYNTHETIC_BASE_URL, qr as VENICE_BASE_URL, ri as SYNTHETIC_DEFAULT_MODEL_REF, ti as buildTogetherModelDefinition, wi as HUGGINGFACE_MODEL_CATALOG, zr as buildKimiCodingProvider } from "./auth-profiles-C0_vbRBI.js";
 import { D as DEFAULT_SECRET_PROVIDER_ALIAS, k as coerceSecretRef } from "./registry-BcRQUSsJ.js";
 import { t as PROVIDER_ENV_VARS } from "./provider-env-vars-DYZiYet-.js";
 import path from "node:path";

package/dist/{banner-DCilTGJi.js → banner-CqhuY9h_.js}

@@ -1,6 +1,6 @@
 import { N as isRich, P as theme, h as visibleWidth, wt as hasRootVersionAlias } from "./entry.js";
-import { z as loadConfig } from "./auth-profiles-Ckp5jw_h.js";
-import { Un as resolveCommitHash } from "./subagent-registry-BZH9LmBn.js";
+import { z as loadConfig } from "./auth-profiles-C0_vbRBI.js";
+import { Un as resolveCommitHash } from "./subagent-registry-gTbkVczB.js";
 
 //#region src/cli/tagline.ts
 const DEFAULT_TAGLINE = "All your chats, one WinClaw.";

package/dist/{bonjour-discovery-TLpgifVr.js → bonjour-discovery-ZXskIxLW.js}

@@ -1,5 +1,5 @@
 import { t as runCommandWithTimeout } from "./exec-CaapFZaD.js";
-import { t as isTailnetIPv4 } from "./tailnet-D6miw7DJ.js";
+import { t as isTailnetIPv4 } from "./tailnet-BXTXJnWv.js";
 import { n as resolveWideAreaDiscoveryDomain } from "./widearea-dns-CkVHlwIZ.js";
 
 //#region src/infra/bonjour-discovery.ts