import { A as ExecApprovalChannelRuntime, D as ExecApprovalChannelRuntimeTerminalStartError, E as deliverApprovalRequestViaChannelNativePlan, F as PreparedChannelNativeApprovalTarget, I as ChannelApprovalNativeDeliveryPlan, L as ChannelApprovalNativePlannedTarget, M as ExecApprovalChannelRuntimeEventKind, O as createExecApprovalChannelRuntime, R as resolveChannelNativeApprovalDeliveryPlan, T as createChannelNativeApprovalRuntime, j as ExecApprovalChannelRuntimeAdapter, k as isExecApprovalChannelRuntimeTerminalStartError } from "./approval-handler-runtime-types-Dv85jHOd.js";
import { $ as resolveExecApprovalsPath, A as isExecApprovalDecisionAllowed, At as splitCommandChain, B as normalizeExecTarget, Bt as resolveApprovalAuditTrustPath, C as SystemRunApprovalPlan, Ct as analyzeArgvCommand, D as ensureExecApprovals, Dt as buildSafeShellCommand, E as commandRequiresSecurityAuditSuppressionApproval, Et as buildSafeBinsShellCommand, F as normalizeExecApprovals, Ft as ExecutableResolution, G as requestExecApprovalViaSocket, Gt as resolveExecutionTargetResolution, H as readExecApprovalsSnapshot, Ht as resolveCommandResolutionFromArgv, I as normalizeExecAsk, It as matchAllowlist, J as resolveAllowAlwaysPatternCoverage, Jt as resolvePolicyTargetCandidatePath, K as requireValidExecTarget, Kt as resolveExecutionTargetTrustPath, L as normalizeExecHost, Lt as parseExecArgvToken, M as maxAsk, Mt as windowsEscapeArg, N as mergeExecApprovalsSocketDefaults, Nt as CommandResolution, O as hasDurableExecApproval, Ot as isWindowsPlatform, P as minSecurity, Pt as ExecArgvToken, Q as resolveExecApprovalsFromFile, R as normalizeExecMode, Rt as resolveAllowlistCandidatePath, S as SystemRunApprovalFileOperand, St as ShellChainPart, T as addDurableCommandApproval, Tt as buildEnforcedShellCommand, U as recordAllowlistMatchesUse, Ut as resolveExecutableTrustPath, V as persistAllowAlwaysPatterns, Vt as resolveCommandResolution, W as recordAllowlistUse, Wt as resolveExecutionTargetCandidatePath, X as resolveExecApprovalRequestAllowedDecisions, Xt as resolvePolicyTargetTrustPath, Y as resolveExecApprovalAllowedDecisions, Yt as resolvePolicyTargetResolution, Z as resolveExecApprovals, Zt as ExecAllowlistEntry, _ as ExecHost, _t as resolveSafeBins, a as ExecApprovalCommandSpan, at as saveExecApprovals, b as ExecTarget, bt as ExecCommandSegment, c as ExecApprovalRequestPayload, ct as ExecAllowlistEvaluation, d as ExecApprovalsDefaultOverrides, dt as evaluateExecAllowlist, et as resolveExecApprovalsSocketPath, f as ExecApprovalsDefaults, ft as evaluateShellAllowlist, g as ExecAsk, gt as resolveAllowAlwaysPatterns, h as ExecApprovalsSnapshot, ht as resolveAllowAlwaysPatternEntries, i as EXEC_TARGET_VALUES, it as restoreExecApprovalsSnapshot, j as loadExecApprovals, jt as splitCommandChainWithOperators, k as hasNodeCommandAllowAlwaysMarker, kt as resolvePlannedSegmentArgv, l as ExecApprovalResolved, lt as ExecSegmentSatisfiedBy, m as ExecApprovalsResolved, mt as normalizeSafeBins, n as DEFAULT_EXEC_APPROVAL_DECISIONS, nt as resolveExecModePolicy, o as ExecApprovalDecision, ot as AllowAlwaysPattern, p as ExecApprovalsFile, pt as isSafeBinUsage, q as requiresExecApproval, qt as resolvePolicyAllowlistCandidatePath, r as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS, rt as resolveExecPolicyForMode, s as ExecApprovalRequest, st as ExecAllowlistAnalysis, t as DEFAULT_EXEC_APPROVAL_ASK_FALLBACK, tt as resolveExecModeFromPolicy, u as ExecApprovalsAgent, ut as SkillBinTrustEntry, v as ExecMode, w as addAllowlistEntry, wt as analyzeShellCommand, x as SystemRunApprovalBinding, xt as ShellChainOperator, y as ExecSecurity, yt as ExecCommandAnalysis, z as normalizeExecSecurity, zt as resolveApprovalAuditCandidatePath } from "./exec-approvals-BMVAZXjT.js";
import { a as PLUGIN_APPROVAL_TITLE_MAX_LENGTH, c as PluginApprovalRequestPayload, d as buildPluginApprovalExpiredMessage, f as buildPluginApprovalRequestMessage, h as resolvePluginApprovalTimeoutMs, i as PLUGIN_APPROVAL_DESCRIPTION_MAX_LENGTH, l as PluginApprovalResolved, m as resolvePluginApprovalRequestAllowedDecisions, n as DEFAULT_PLUGIN_APPROVAL_TIMEOUT_MS, o as PluginApprovalActionView, p as buildPluginApprovalResolvedMessage, r as MAX_PLUGIN_APPROVAL_TIMEOUT_MS, s as PluginApprovalRequest, t as DEFAULT_PLUGIN_APPROVAL_DECISIONS, u as approvalDecisionLabel } from "./plugin-approvals-B-1AuXnw.js";
import { i as resolveOutboundSendDep, n as ResolveOutboundSendDepOptions, r as resolveLegacyOutboundSendDepKeys, t as OutboundSendDeps } from "./send-deps-Ds6JW9s7.js";
import { u as OutboundIdentity } from "./outbound.types-CfSE45o1.js";
import { C as resolveSsrFPolicyForUrl, E as ssrfPolicyFromHttpBaseUrlFakeIpHostnameAllowlist, S as resolvePinnedHostnameWithPolicy, T as ssrfPolicyFromHttpBaseUrlAllowedOrigin, _ as isSameSsrFPolicy, a as SsrFBlockedError, b as normalizeHostnameAllowlist, c as assertPublicHostname, d as createPinnedLookup, f as isBlockedHostname, g as isPrivateNetworkAllowedByPolicy, h as isPrivateIpAddress, i as PinnedHostnameOverride, l as closeDispatcher, m as isHostnameAllowedByPattern, n as PinnedDispatcherPolicy, o as SsrFPolicy, p as isBlockedHostnameOrIp, r as PinnedHostname, s as assertHostnameAllowedWithPolicy, t as LookupFn, u as createPinnedDispatcher, v as matchesHostnameAllowlist, w as ssrfPolicyFromHttpBaseUrlAllowedHostname, x as resolvePinnedHostname, y as mergeSsrFPolicies } from "./ssrf-skjEI_i5.js";
import { a as drainSystemEvents, c as isSystemEventContextChanged, d as resetSystemEventsForTest, f as resolveSystemEventDeliveryContext, i as drainSystemEventEntries, l as peekSystemEventEntries, n as consumeSelectedSystemEventEntries, o as enqueueSystemEvent, r as consumeSystemEventEntries, s as hasSystemEvents, t as SystemEvent, u as peekSystemEvents } from "./system-events-BPINBuYn.js";
import { i as resolveHeartbeatSummaryForAgent, n as isHeartbeatEnabledForAgent, r as resolveHeartbeatIntervalMs, t as HeartbeatSummary } from "./heartbeat-summary-CAVLXl2a.js";
import { $ as DiagnosticSessionStuckEvent, A as DiagnosticMessageQueuedEvent, At as onTrustedInternalDiagnosticEvent, B as DiagnosticRunAttemptEvent, C as DiagnosticMessageDeliveryCompletedEvent, Ct as formatDiagnosticTraceparentForPropagation, D as DiagnosticMessageDispatchCompletedEvent, Dt as isInternalDiagnosticEventMetadata, E as DiagnosticMessageDeliveryStartedEvent, Et as isDiagnosticsEnabled, F as DiagnosticModelCallStartedEvent, G as DiagnosticSessionAttentionClassification, H as DiagnosticRunProgressEvent, I as DiagnosticPayloadLargeEvent, J as DiagnosticSessionRecoveryRequestedEvent, K as DiagnosticSessionLongRunningEvent, L as DiagnosticPhaseCompletedEvent, M as DiagnosticModelCallCompletedEvent, Mt as setDiagnosticsEnabledForProcess, N as DiagnosticModelCallContent, Nt as waitForDiagnosticEventsDrained, O as DiagnosticMessageDispatchStartedEvent, Ot as onDiagnosticEvent, P as DiagnosticModelCallErrorEvent, Q as DiagnosticSessionStateEvent, R as DiagnosticPhaseDetails, S as DiagnosticMemoryUsage, St as emitTrustedDiagnosticEventWithPrivateData, T as DiagnosticMessageDeliveryKind, Tt as hasPendingInternalDiagnosticEvent, U as DiagnosticRunStartedEvent, V as DiagnosticRunCompletedEvent, W as DiagnosticSessionActiveWorkKind, X as DiagnosticSessionStalledEvent, Y as DiagnosticSessionRecoveryStatus, Z as DiagnosticSessionState, _ as DiagnosticLivenessWarningEvent, _t as areDiagnosticsEnabledForProcess, a as DiagnosticEventPayload, at as DiagnosticTelemetryExporterEvent, b as DiagnosticMemoryPressureEvent, bt as emitInternalDiagnosticEvent, c as DiagnosticFailoverEvent, ct as DiagnosticToolExecutionErrorEvent, d as DiagnosticHarnessRunOutcome, dt as DiagnosticToolParamsSummary, et as DiagnosticSessionTurnCreatedEvent, f as DiagnosticHarnessRunPhase, ft as DiagnosticToolSource, g as DiagnosticLaneEnqueueEvent, gt as DiagnosticWebhookReceivedEvent, h as DiagnosticLaneDequeueEvent, ht as DiagnosticWebhookProcessedEvent, i as DiagnosticEventMetadata, it as DiagnosticTalkEvent, j as DiagnosticMessageReceivedEvent, jt as resetDiagnosticEventsForTest, k as DiagnosticMessageProcessedEvent, kt as onInternalDiagnosticEvent, l as DiagnosticHarnessRunCompletedEvent, lt as DiagnosticToolExecutionStartedEvent, m as DiagnosticHeartbeatEvent, mt as DiagnosticWebhookErrorEvent, n as DiagnosticContextAssembledEvent, nt as DiagnosticSkillTelemetrySource, o as DiagnosticEventPrivateData, ot as DiagnosticToolExecutionBlockedEvent, p as DiagnosticHarnessRunStartedEvent, pt as DiagnosticUsageEvent, q as DiagnosticSessionRecoveryCompletedEvent, r as DiagnosticEventInput, rt as DiagnosticSkillUsedEvent, s as DiagnosticExecProcessCompletedEvent, st as DiagnosticToolExecutionCompletedEvent, t as DiagnosticAsyncQueueDroppedEvent, tt as DiagnosticSkillActivation, u as DiagnosticHarnessRunErrorEvent, ut as DiagnosticToolLoopEvent, v as DiagnosticLivenessWarningReason, vt as emitDiagnosticEvent, w as DiagnosticMessageDeliveryErrorEvent, wt as getInternalDiagnosticEventSequence, x as DiagnosticMemorySampleEvent, xt as emitTrustedDiagnosticEvent, y as DiagnosticLogRecordEvent, yt as emitFailoverEvent, z as DiagnosticPhaseSnapshot } from "./diagnostic-events-D1iQK7Zc.js";
import { a as retryAsync, i as resolveRetryConfig, n as RetryInfo, r as RetryOptions, t as RetryConfig } from "./retry-iCQJ-qpp.js";
import { i as resetChannelActivityForTest, n as getChannelActivity, r as recordChannelActivity, t as ChannelDirection } from "./channel-activity-B4WQX84y.js";
import { l as normalizeOutboundIdentity, u as resolveAgentOutboundIdentity } from "./delivery-queue-CtsceLcr.js";
import { a as formatErrorMessage, c as isErrno, d as toErrorObject, i as extractErrorCode, l as readErrorName, n as collectErrorGraphCandidates, o as formatUncaughtError, r as detectErrorKind, s as hasErrnoCode, t as ErrorKind, u as stringifyNonErrorCause } from "./errors-BICDLNaN.js";
import { t as formatApprovalDisplayPath } from "./approval-display-paths-Hb4BQ_zR.js";
import { n as fetchWithRuntimeDispatcher } from "./runtime-fetch-BXfVBfRP.js";
import { a as fetchWithSsrFGuard, c as withTrustedEnvProxyGuardedFetchMode, i as GuardedFetchResult, l as withTrustedExplicitProxyGuardedFetchMode, n as GuardedFetchMode, o as retainSafeHeadersForCrossOriginRedirectHeaders, r as GuardedFetchOptions, s as withStrictGuardedFetchMode, t as GUARDED_FETCH_MODE } from "./fetch-guard-BKvfwdRa.js";
import { _ as formatExecApprovalExpiresIn, a as ExecApprovalUnavailableReason, b as parseExecApprovalCommandText, c as buildApprovalInteractiveReplyFromActionDescriptors, d as buildExecApprovalActionDescriptors, f as buildExecApprovalCommandText, g as buildExecApprovalUnavailableReplyPayload, h as buildExecApprovalPresentation, i as ExecApprovalReplyMetadata, l as buildApprovalPresentation, m as buildExecApprovalPendingReplyPayload, n as ExecApprovalPendingReplyParams, o as ExecApprovalUnavailableReplyParams, p as buildExecApprovalInteractiveReply, r as ExecApprovalReplyDecision, s as buildApprovalInteractiveReply, t as ExecApprovalActionDescriptor, u as buildApprovalPresentationFromActionDescriptors, v as getExecApprovalApproverDmNoticeText, y as getExecApprovalReplyMetadata } from "./exec-approval-reply-CaWzd-Iz.js";
import { a as resolveApprovalRequestSessionTarget, i as resolveApprovalRequestSessionConversation, n as ExecApprovalSessionTarget, o as resolveExecApprovalSessionTarget, r as resolveApprovalRequestOriginTarget, t as ApprovalRequestSessionConversation } from "./exec-approval-session-target-8gsu0bwV.js";
import { a as sanitizeExecApprovalWarningText, i as sanitizeExecApprovalDisplayTextWithStatus, n as resolveExecApprovalCommandDisplay, r as sanitizeExecApprovalDisplayText, t as SanitizedExecApprovalDisplayText } from "./exec-approval-command-display-Bu0fUW4P.js";
import { _ as writeJsonAtomic, a as readJson, c as readJsonFileSync, d as readRootJsonObjectSync, f as readRootJsonSync, g as writeJson, h as tryReadJsonSync, i as readDurableJsonFile, l as readJsonIfExists, m as tryReadJson, n as WriteTextAtomicOptions, o as readJsonFile, p as readRootStructuredFileSync, r as createAsyncLock, s as readJsonFileStrict, t as JsonFileReadError, u as readJsonSync, v as writeJsonSync, y as writeTextAtomic } from "./json-files-CJRQm2a_.js";
import { a as emitHeartbeatEvent, c as resetHeartbeatEventsForTest, i as HeartbeatIndicatorType, l as resolveIndicatorType, n as resolveHeartbeatVisibility, o as getLastHeartbeatEvent, r as HeartbeatEventPayload, s as onHeartbeatEvent, t as ResolvedHeartbeatVisibility } from "./heartbeat-visibility-BIcv3VMq.js";
import { n as WaitForTransportReadyParams, r as waitForTransportReady, t as TransportReadyResult } from "./transport-ready-Dc0_wy9k.js";
import { a as resolveNonNegativeIntegerOption, i as resolveGlobalDedupeCache, n as DedupeCacheOptions, r as createDedupeCache, t as DedupeCache } from "./dedupe-D3F9WT__.js";
import { a as generateSecureUuid, i as generateSecureToken, n as generateSecureHex, r as generateSecureInt, t as generateSecureFraction } from "./secure-random-BTcaoAnv.js";
import { a as SecretFileReadResult, c as tryReadSecretFileSync, i as SecretFileReadOptions, l as writePrivateSecretFileAtomic, n as PRIVATE_SECRET_DIR_MODE, o as loadSecretFileSync, r as PRIVATE_SECRET_FILE_MODE, s as readSecretFileSync, t as DEFAULT_SECRET_FILE_MAX_BYTES } from "./secret-file-CjbjgOXf.js";
import { C as resolveExpiresAtMsFromDurationOrEpoch, T as resolveExpiresAtMsFromEpochSeconds, _ as parseStrictInteger, b as positiveSecondsToSafeMilliseconds, d as clampTimerTimeoutMs, f as finiteSecondsToTimerSafeMilliseconds, g as parseStrictFiniteNumber, h as parseFiniteNumber, m as nonNegativeSecondsToSafeMilliseconds, n as MAX_TIMER_TIMEOUT_MS, r as MAX_TIMER_TIMEOUT_SECONDS, v as parseStrictNonNegativeInteger, w as resolveExpiresAtMsFromDurationSeconds, y as parseStrictPositiveInteger } from "./number-coercion-Ds_8dOjj.js";
import { n as createRuntimeOutboundDelegates } from "./runtime-forwarders-1plWk1I1.js";
import { n as stripInternalRuntimeScaffolding, t as sanitizeForPlainText } from "./sanitize-text-BMx_OmdN.js";
import { t as pruneMapToMaxSize } from "./map-size-Cxg6PuCO.js";
import { n as ResolvePreferredOpenClawTmpDirOptions, r as resolvePreferredOpenClawTmpDir, t as POSIX_OPENCLAW_TMP_DIR } from "./tmp-openclaw-dir-ubX-9dkk.js";
import { i as runTasksWithConcurrency, n as RunTasksWithConcurrencyOptions, r as RunTasksWithConcurrencyResult, t as ConcurrencyErrorMode } from "./run-with-concurrency-D8f3owDy.js";
import { drainPendingDeliveries } from "./delivery-queue-runtime.js";
import { n as matchesDiagnosticFlag, r as resolveDiagnosticFlags, t as isDiagnosticFlagEnabled } from "./diagnostic-flags-CtFYYhRU.js";
import { n as buildTimeoutAbortSignal, r as fetchWithTimeout, t as bindAbortRelay } from "./fetch-timeout-D2yvPshT.js";
import { a as resolveFetch, i as resolveProxyFetchFromEnv, n as getProxyUrlFromFetch, o as wrapFetchWithAbortSignal, r as makeProxyFetch, t as PROXY_FETCH_PROXY_URL } from "./proxy-fetch-DPt1dxTl.js";
import { a as hasProxyEnvConfigured, c as resolveEnvHttpProxyUrl, i as hasEnvHttpProxyConfigured, l as shouldUseEnvHttpProxyForUrl, n as PROXY_ENV_KEYS, o as matchesNoProxy, r as hasEnvHttpProxyAgentConfigured, s as resolveEnvHttpProxyAgentOptions, t as EnvHttpProxyAgentProxyOptions } from "./proxy-env-CRHrWZla.js";
import { A as readLocalFileFromRoots, B as root, C as findExistingAncestor, D as pathExists, E as openLocalFileSafely, F as resolveAbsolutePathForRead, G as walkDirectorySync, H as statRegularFile, I as resolveAbsolutePathForWrite, J as writeFileWithinRoot, K as withTimeout, L as resolveLocalPathFromRootsSync, M as readRegularFile, N as readRegularFileSync, O as pathExistsSync, P as readSecureFile, R as resolveOpenedFileRealPathForHandle, S as ensureAbsoluteDirectory, T as movePathToTrash, U as statRegularFileSync, V as sanitizeUntrustedFileName, W as walkDirectory, _ as WalkDirectoryResult, a as ExternalFileWriteResult, b as assertAbsolutePathInput, c as MovePathToTrashOptions, d as ResolvedAbsolutePath, f as ResolvedWritableAbsolutePath, g as WalkDirectoryOptions, h as WalkDirectoryEntry, i as ExternalFileWriteOptions, j as readLocalFileSafely, k as readFileWithinRoot, l as OpenResult, m as SecureFileReadResult, n as EnsureAbsoluteDirectoryOptions, o as FsSafeError, p as SecureFileReadOptions, q as writeExternalFileWithinRoot, r as EnsureAbsoluteDirectoryResult, s as FsSafeErrorCode, t as AbsolutePathSymlinkPolicy, u as ReadResult, v as appendRegularFile, w as isPathInside, x as canonicalPathFromExistingAncestor, y as appendRegularFileSync, z as resolveRegularFileAppendFlags } from "./fs-safe-DGWa_p_W.js";
import { a as safeFileURLToPath, i as isWindowsNetworkPath, n as basenameFromMediaSource, o as trySafeFileURLToPath, r as hasEncodedFileUrlSeparator, t as assertNoWindowsNetworkPath } from "./local-file-access-CCj2ALZB.js";
import { c as drainFileLockStateForTest, i as FileLockOptions, l as resetFileLockStateForTest, n as FILE_LOCK_TIMEOUT_ERROR_CODE, o as FileLockTimeoutError, r as FileLockHandle, s as acquireFileLock, u as withFileLock } from "./file-lock-JSDrNuSX.js";
import { t as normalizeHostname } from "./hostname-BVCWBh-K.js";
import { i as normalizeScpRemotePath, n as isSafeScpRemotePath, r as normalizeScpRemoteHost, t as isSafeScpRemoteHost } from "./scp-host-yP_sSiFf.js";
import { C as normalizeZaiEnv, E as sleepWithAbort, S as normalizeEnv, T as computeBackoff, _ as formatDurationPrecise, a as resetWSLStateForTests, b as isVitestRuntimeEnv, c as ensureGlobalUndiciEnvProxyDispatcher, d as globalUndiciStreamTimeoutMs, f as resetGlobalUndiciStreamTimeoutsForTests, g as formatDurationHuman, h as formatDurationCompact, i as isWSLSync, l as ensureGlobalUndiciStreamTimeouts, m as FormatDurationSecondsOptions, n as isWSL2Sync, o as DEFAULT_UNDICI_STREAM_TIMEOUT_MS, p as FormatDurationCompactOptions, r as isWSLEnv, s as ensureGlobalUndiciDispatcherStreamTimeouts, t as isWSL, u as forceResetGlobalDispatcher, v as formatDurationSeconds, w as BackoffPolicy, x as logAcceptedEnvOption, y as isTruthyEnvValue } from "./wsl-wI2fbgu8.js";
import { a as resolveOsHomeRelativePath, c as resolveUserPath, i as resolveOsHomeDir, n as resolveEffectiveHomeDir, o as resolveRequiredHomeDir, r as resolveHomeRelativePath, s as resolveRequiredOsHomeDir, t as expandHomePrefix } from "./home-dir-CsTKsPTB.js";
import { a as ReadRequestBodyOptions, c as RequestBodyLimitGuard, d as isRequestBodyLimitError, f as readJsonBodyWithLimit, h as testApi, i as ReadJsonBodyResult, l as RequestBodyLimitGuardOptions, m as requestBodyErrorToText, n as DEFAULT_WEBHOOK_MAX_BODY_BYTES, o as RequestBodyLimitError, p as readRequestBodyWithLimit, r as ReadJsonBodyOptions, s as RequestBodyLimitErrorCode, t as DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, u as installRequestBodyLimitGuard } from "./http-body-CbF0Hltn.js";
import { i as createRateLimitRetryRunner, n as RetryRunner, r as createChannelApiRetryRunner, t as CHANNEL_API_RETRY_DEFAULTS } from "./retry-policy-DhepAljj.js";
import { n as hasSystemMark, r as prefixSystemMessage, t as SYSTEM_MARK } from "./system-message-BaqODHMh.js";
import { a as hasLegacyFlatAllowPrivateNetworkAlias, c as migrateLegacyFlatAllowPrivateNetworkAlias, d as ssrfPolicyFromDangerouslyAllowPrivateNetwork, f as ssrfPolicyFromPrivateNetworkOptIn, i as createLegacyPrivateNetworkDoctorContract, l as normalizeHostnameSuffixAllowlist, n as assertHttpUrlTargetsPrivateNetwork, o as isHttpsUrlAllowedByHostnameSuffixAllowlist, r as buildHostnameAllowlistPolicyFromSuffixAllowlist, s as isPrivateNetworkOptInEnabled, t as PrivateNetworkOptInInput, u as ssrfPolicyFromAllowPrivateNetwork } from "./ssrf-policy-CHKXpjmQ.js";
export { type AbsolutePathSymlinkPolicy, AllowAlwaysPattern, ApprovalRequestSessionConversation, BackoffPolicy, CHANNEL_API_RETRY_DEFAULTS, ChannelApprovalNativeDeliveryPlan, ChannelApprovalNativePlannedTarget, ChannelDirection, type CommandResolution, ConcurrencyErrorMode, DEFAULT_EXEC_APPROVAL_ASK_FALLBACK, DEFAULT_EXEC_APPROVAL_DECISIONS, DEFAULT_EXEC_APPROVAL_TIMEOUT_MS, DEFAULT_PLUGIN_APPROVAL_DECISIONS, DEFAULT_PLUGIN_APPROVAL_TIMEOUT_MS, DEFAULT_SECRET_FILE_MAX_BYTES, DEFAULT_UNDICI_STREAM_TIMEOUT_MS, DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, DEFAULT_WEBHOOK_MAX_BODY_BYTES, DedupeCache, DedupeCacheOptions, type DiagnosticAsyncQueueDroppedEvent, type DiagnosticContextAssembledEvent, type DiagnosticEventInput, type DiagnosticEventMetadata, type DiagnosticEventPayload, type DiagnosticEventPrivateData, type DiagnosticExecProcessCompletedEvent, type DiagnosticFailoverEvent, type DiagnosticHarnessRunCompletedEvent, type DiagnosticHarnessRunErrorEvent, type DiagnosticHarnessRunOutcome, type DiagnosticHarnessRunPhase, type DiagnosticHarnessRunStartedEvent, type DiagnosticHeartbeatEvent, type DiagnosticLaneDequeueEvent, type DiagnosticLaneEnqueueEvent, type DiagnosticLivenessWarningEvent, type DiagnosticLivenessWarningReason, type DiagnosticLogRecordEvent, type DiagnosticMemoryPressureEvent, type DiagnosticMemorySampleEvent, type DiagnosticMemoryUsage, type DiagnosticMessageDeliveryCompletedEvent, type DiagnosticMessageDeliveryErrorEvent, type DiagnosticMessageDeliveryKind, type DiagnosticMessageDeliveryStartedEvent, type DiagnosticMessageDispatchCompletedEvent, type DiagnosticMessageDispatchStartedEvent, type DiagnosticMessageProcessedEvent, type DiagnosticMessageQueuedEvent, type DiagnosticMessageReceivedEvent, type DiagnosticModelCallCompletedEvent, type DiagnosticModelCallContent, type DiagnosticModelCallErrorEvent, type DiagnosticModelCallStartedEvent, type DiagnosticPayloadLargeEvent, type DiagnosticPhaseCompletedEvent, type DiagnosticPhaseDetails, type DiagnosticPhaseSnapshot, type DiagnosticRunAttemptEvent, type DiagnosticRunCompletedEvent, type DiagnosticRunProgressEvent, type DiagnosticRunStartedEvent, type DiagnosticSessionActiveWorkKind, type DiagnosticSessionAttentionClassification, type DiagnosticSessionLongRunningEvent, type DiagnosticSessionRecoveryCompletedEvent, type DiagnosticSessionRecoveryRequestedEvent, type DiagnosticSessionRecoveryStatus, type DiagnosticSessionStalledEvent, type DiagnosticSessionState, type DiagnosticSessionStateEvent, type DiagnosticSessionStuckEvent, type DiagnosticSessionTurnCreatedEvent, type DiagnosticSkillActivation, type DiagnosticSkillTelemetrySource, type DiagnosticSkillUsedEvent, type DiagnosticTalkEvent, type DiagnosticTelemetryExporterEvent, type DiagnosticToolExecutionBlockedEvent, type DiagnosticToolExecutionCompletedEvent, type DiagnosticToolExecutionErrorEvent, type DiagnosticToolExecutionStartedEvent, type DiagnosticToolLoopEvent, type DiagnosticToolParamsSummary, type DiagnosticToolSource, type DiagnosticUsageEvent, type DiagnosticWebhookErrorEvent, type DiagnosticWebhookProcessedEvent, type DiagnosticWebhookReceivedEvent, EXEC_TARGET_VALUES, type EnsureAbsoluteDirectoryOptions, type EnsureAbsoluteDirectoryResult, EnvHttpProxyAgentProxyOptions, ErrorKind, ExecAllowlistAnalysis, type ExecAllowlistEntry, ExecAllowlistEvaluation, ExecApprovalActionDescriptor, type ExecApprovalChannelRuntime, type ExecApprovalChannelRuntimeAdapter, type ExecApprovalChannelRuntimeEventKind, ExecApprovalChannelRuntimeTerminalStartError, ExecApprovalCommandSpan, ExecApprovalDecision, ExecApprovalPendingReplyParams, ExecApprovalReplyDecision, ExecApprovalReplyMetadata, ExecApprovalRequest, ExecApprovalRequestPayload, ExecApprovalResolved, ExecApprovalSessionTarget, ExecApprovalUnavailableReason, ExecApprovalUnavailableReplyParams, ExecApprovalsAgent, ExecApprovalsDefaultOverrides, ExecApprovalsDefaults, ExecApprovalsFile, ExecApprovalsResolved, ExecApprovalsSnapshot, type ExecArgvToken, ExecAsk, ExecCommandAnalysis, ExecCommandSegment, ExecHost, ExecMode, ExecSecurity, ExecSegmentSatisfiedBy, ExecTarget, type ExecutableResolution, ExternalFileWriteOptions, ExternalFileWriteResult, FILE_LOCK_TIMEOUT_ERROR_CODE, type FileLockHandle, type FileLockOptions, type FileLockTimeoutError, FormatDurationCompactOptions, FormatDurationSecondsOptions, FsSafeError, type FsSafeErrorCode, GUARDED_FETCH_MODE, type GuardedFetchMode, type GuardedFetchOptions, type GuardedFetchResult, HeartbeatEventPayload, HeartbeatIndicatorType, HeartbeatSummary, JsonFileReadError, LookupFn, MAX_PLUGIN_APPROVAL_TIMEOUT_MS, MAX_TIMER_TIMEOUT_MS, MAX_TIMER_TIMEOUT_SECONDS, type MovePathToTrashOptions, type OpenResult, type OutboundIdentity, OutboundSendDeps, PLUGIN_APPROVAL_DESCRIPTION_MAX_LENGTH, PLUGIN_APPROVAL_TITLE_MAX_LENGTH, POSIX_OPENCLAW_TMP_DIR, PRIVATE_SECRET_DIR_MODE, PRIVATE_SECRET_FILE_MODE, PROXY_ENV_KEYS, PROXY_FETCH_PROXY_URL, PinnedDispatcherPolicy, PinnedHostname, PinnedHostnameOverride, PluginApprovalActionView, PluginApprovalRequest, PluginApprovalRequestPayload, PluginApprovalResolved, type PreparedChannelNativeApprovalTarget, PrivateNetworkOptInInput, ReadJsonBodyOptions, ReadJsonBodyResult, ReadRequestBodyOptions, type ReadResult, RequestBodyLimitError, RequestBodyLimitErrorCode, RequestBodyLimitGuard, RequestBodyLimitGuardOptions, ResolveOutboundSendDepOptions, ResolvePreferredOpenClawTmpDirOptions, type ResolvedAbsolutePath, ResolvedHeartbeatVisibility, type ResolvedWritableAbsolutePath, RetryConfig, RetryInfo, RetryOptions, RetryRunner, RunTasksWithConcurrencyOptions, RunTasksWithConcurrencyResult, SYSTEM_MARK, SanitizedExecApprovalDisplayText, type SecretFileReadOptions, SecretFileReadResult, type SecureFileReadOptions, type SecureFileReadResult, ShellChainOperator, ShellChainPart, SkillBinTrustEntry, SsrFBlockedError, SsrFPolicy, SystemEvent, SystemRunApprovalBinding, SystemRunApprovalFileOperand, SystemRunApprovalPlan, TransportReadyResult, WaitForTransportReadyParams, type WalkDirectoryEntry, type WalkDirectoryOptions, type WalkDirectoryResult, WriteTextAtomicOptions, testApi as __test__, testApi, acquireFileLock, addAllowlistEntry, addDurableCommandApproval, analyzeArgvCommand, analyzeShellCommand, appendRegularFile, appendRegularFileSync, approvalDecisionLabel, areDiagnosticsEnabledForProcess, assertAbsolutePathInput, assertHostnameAllowedWithPolicy, assertHttpUrlTargetsPrivateNetwork, assertNoWindowsNetworkPath, assertPublicHostname, basenameFromMediaSource, bindAbortRelay, buildApprovalInteractiveReply, buildApprovalInteractiveReplyFromActionDescriptors, buildApprovalPresentation, buildApprovalPresentationFromActionDescriptors, buildEnforcedShellCommand, buildExecApprovalActionDescriptors, buildExecApprovalCommandText, buildExecApprovalInteractiveReply, buildExecApprovalPendingReplyPayload, buildExecApprovalPresentation, buildExecApprovalUnavailableReplyPayload, buildHostnameAllowlistPolicyFromSuffixAllowlist, buildPluginApprovalExpiredMessage, buildPluginApprovalRequestMessage, buildPluginApprovalResolvedMessage, buildSafeBinsShellCommand, buildSafeShellCommand, buildTimeoutAbortSignal, canonicalPathFromExistingAncestor, clampTimerTimeoutMs, closeDispatcher, collectErrorGraphCandidates, commandRequiresSecurityAuditSuppressionApproval, computeBackoff, consumeSelectedSystemEventEntries, consumeSystemEventEntries, createAsyncLock, createChannelApiRetryRunner, createChannelNativeApprovalRuntime, createDedupeCache, createExecApprovalChannelRuntime, createLegacyPrivateNetworkDoctorContract, createPinnedDispatcher, createPinnedLookup, createRateLimitRetryRunner, createRuntimeOutboundDelegates, deliverApprovalRequestViaChannelNativePlan, detectErrorKind, drainFileLockStateForTest, drainPendingDeliveries, drainSystemEventEntries, drainSystemEvents, emitDiagnosticEvent, type emitFailoverEvent, emitHeartbeatEvent, type emitInternalDiagnosticEvent, type emitTrustedDiagnosticEvent, type emitTrustedDiagnosticEventWithPrivateData, enqueueSystemEvent, ensureAbsoluteDirectory, ensureExecApprovals, ensureGlobalUndiciDispatcherStreamTimeouts, ensureGlobalUndiciEnvProxyDispatcher, ensureGlobalUndiciStreamTimeouts, evaluateExecAllowlist, evaluateShellAllowlist, expandHomePrefix, extractErrorCode, fetchWithRuntimeDispatcher, fetchWithSsrFGuard, fetchWithTimeout, findExistingAncestor, finiteSecondsToTimerSafeMilliseconds, forceResetGlobalDispatcher, formatApprovalDisplayPath, type formatDiagnosticTraceparentForPropagation, formatDurationCompact, formatDurationHuman, formatDurationPrecise, formatDurationSeconds, formatErrorMessage, formatExecApprovalExpiresIn, formatUncaughtError, generateSecureFraction, generateSecureHex, generateSecureInt, generateSecureToken, generateSecureUuid, getChannelActivity, getExecApprovalApproverDmNoticeText, getExecApprovalReplyMetadata, type getInternalDiagnosticEventSequence, getLastHeartbeatEvent, getProxyUrlFromFetch, globalUndiciStreamTimeoutMs, hasDurableExecApproval, hasEncodedFileUrlSeparator, hasEnvHttpProxyAgentConfigured, hasEnvHttpProxyConfigured, hasErrnoCode, hasLegacyFlatAllowPrivateNetworkAlias, hasNodeCommandAllowAlwaysMarker, type hasPendingInternalDiagnosticEvent, hasProxyEnvConfigured, hasSystemEvents, hasSystemMark, installRequestBodyLimitGuard, isBlockedHostname, isBlockedHostnameOrIp, isDiagnosticFlagEnabled, isDiagnosticsEnabled, isErrno, isExecApprovalChannelRuntimeTerminalStartError, isExecApprovalDecisionAllowed, isHeartbeatEnabledForAgent, isHostnameAllowedByPattern, isHttpsUrlAllowedByHostnameSuffixAllowlist, type isInternalDiagnosticEventMetadata, isPathInside, isPrivateIpAddress, isPrivateNetworkAllowedByPolicy, isPrivateNetworkOptInEnabled, isRequestBodyLimitError, isSafeBinUsage, isSafeScpRemoteHost, isSafeScpRemotePath, isSameSsrFPolicy, isSystemEventContextChanged, isTruthyEnvValue, isVitestRuntimeEnv, isWSL, isWSL2Sync, isWSLEnv, isWSLSync, isWindowsNetworkPath, isWindowsPlatform, loadExecApprovals, loadSecretFileSync, logAcceptedEnvOption, makeProxyFetch, matchAllowlist, matchesDiagnosticFlag, matchesHostnameAllowlist, matchesNoProxy, maxAsk, mergeExecApprovalsSocketDefaults, mergeSsrFPolicies, migrateLegacyFlatAllowPrivateNetworkAlias, minSecurity, movePathToTrash, nonNegativeSecondsToSafeMilliseconds, normalizeEnv, normalizeExecApprovals, normalizeExecAsk, normalizeExecHost, normalizeExecMode, normalizeExecSecurity, normalizeExecTarget, normalizeHostname, normalizeHostnameAllowlist, normalizeHostnameSuffixAllowlist, normalizeOutboundIdentity, normalizeSafeBins, normalizeScpRemoteHost, normalizeScpRemotePath, normalizeZaiEnv, onDiagnosticEvent, onHeartbeatEvent, type onInternalDiagnosticEvent, type onTrustedInternalDiagnosticEvent, openLocalFileSafely, parseExecApprovalCommandText, parseExecArgvToken, parseFiniteNumber, parseStrictFiniteNumber, parseStrictInteger, parseStrictNonNegativeInteger, parseStrictPositiveInteger, pathExists, pathExistsSync, peekSystemEventEntries, peekSystemEvents, persistAllowAlwaysPatterns, positiveSecondsToSafeMilliseconds, prefixSystemMessage, pruneMapToMaxSize, readDurableJsonFile, readErrorName, readExecApprovalsSnapshot, readFileWithinRoot, readJson, readJsonBodyWithLimit, readJsonFile, readJsonFileStrict, readJsonFileSync, readJsonIfExists, readJsonSync, readLocalFileFromRoots, readLocalFileSafely, readRegularFile, readRegularFileSync, readRequestBodyWithLimit, readRootJsonObjectSync, readRootJsonSync, readRootStructuredFileSync, readSecretFileSync, readSecureFile, recordAllowlistMatchesUse, recordAllowlistUse, recordChannelActivity, requestBodyErrorToText, requestExecApprovalViaSocket, requireValidExecTarget, requiresExecApproval, resetChannelActivityForTest, type resetDiagnosticEventsForTest, resetFileLockStateForTest, resetGlobalUndiciStreamTimeoutsForTests, resetHeartbeatEventsForTest, resetSystemEventsForTest, resetWSLStateForTests, resolveAbsolutePathForRead, resolveAbsolutePathForWrite, resolveAgentOutboundIdentity, resolveAllowAlwaysPatternCoverage, resolveAllowAlwaysPatternEntries, resolveAllowAlwaysPatterns, resolveAllowlistCandidatePath, resolveApprovalAuditCandidatePath, resolveApprovalAuditTrustPath, resolveApprovalRequestOriginTarget, resolveApprovalRequestSessionConversation, resolveApprovalRequestSessionTarget, resolveChannelNativeApprovalDeliveryPlan, resolveCommandResolution, resolveCommandResolutionFromArgv, resolveNonNegativeIntegerOption as resolveDedupeNonNegativeInteger, resolveDiagnosticFlags, resolveEffectiveHomeDir, resolveEnvHttpProxyAgentOptions, resolveEnvHttpProxyUrl, resolveExecApprovalAllowedDecisions, resolveExecApprovalCommandDisplay, resolveExecApprovalRequestAllowedDecisions, resolveExecApprovalSessionTarget, resolveExecApprovals, resolveExecApprovalsFromFile, resolveExecApprovalsPath, resolveExecApprovalsSocketPath, resolveExecModeFromPolicy, resolveExecModePolicy, resolveExecPolicyForMode, resolveExecutableTrustPath, resolveExecutionTargetCandidatePath, resolveExecutionTargetResolution, resolveExecutionTargetTrustPath, resolveExpiresAtMsFromDurationOrEpoch, resolveExpiresAtMsFromDurationSeconds, resolveExpiresAtMsFromEpochSeconds, resolveFetch, resolveGlobalDedupeCache, resolveHeartbeatIntervalMs, resolveHeartbeatSummaryForAgent, resolveHeartbeatVisibility, resolveHomeRelativePath, resolveIndicatorType, resolveLegacyOutboundSendDepKeys, resolveLocalPathFromRootsSync, resolveOpenedFileRealPathForHandle, resolveOsHomeDir, resolveOsHomeRelativePath, resolveOutboundSendDep, resolvePinnedHostname, resolvePinnedHostnameWithPolicy, resolvePlannedSegmentArgv, resolvePluginApprovalRequestAllowedDecisions, resolvePluginApprovalTimeoutMs, resolvePolicyAllowlistCandidatePath, resolvePolicyTargetCandidatePath, resolvePolicyTargetResolution, resolvePolicyTargetTrustPath, resolvePreferredOpenClawTmpDir, resolveProxyFetchFromEnv, resolveRegularFileAppendFlags, resolveRequiredHomeDir, resolveRequiredOsHomeDir, resolveRetryConfig, resolveSafeBins, resolveSsrFPolicyForUrl, resolveSystemEventDeliveryContext, resolveUserPath, restoreExecApprovalsSnapshot, retainSafeHeadersForCrossOriginRedirectHeaders, retryAsync, root, runTasksWithConcurrency, safeFileURLToPath, sanitizeExecApprovalDisplayText, sanitizeExecApprovalDisplayTextWithStatus, sanitizeExecApprovalWarningText, sanitizeForPlainText, sanitizeUntrustedFileName, saveExecApprovals, type setDiagnosticsEnabledForProcess, shouldUseEnvHttpProxyForUrl, sleepWithAbort, splitCommandChain, splitCommandChainWithOperators, ssrfPolicyFromAllowPrivateNetwork, ssrfPolicyFromDangerouslyAllowPrivateNetwork, ssrfPolicyFromHttpBaseUrlAllowedHostname, ssrfPolicyFromHttpBaseUrlAllowedOrigin, ssrfPolicyFromHttpBaseUrlFakeIpHostnameAllowlist, ssrfPolicyFromPrivateNetworkOptIn, statRegularFile, statRegularFileSync, stringifyNonErrorCause, stripInternalRuntimeScaffolding, toErrorObject, tryReadJson, tryReadJsonSync, tryReadSecretFileSync, trySafeFileURLToPath, type waitForDiagnosticEventsDrained, waitForTransportReady, walkDirectory, walkDirectorySync, windowsEscapeArg, withFileLock, withStrictGuardedFetchMode, withTimeout, withTrustedEnvProxyGuardedFetchMode, withTrustedExplicitProxyGuardedFetchMode, wrapFetchWithAbortSignal, writeExternalFileWithinRoot, writeFileWithinRoot, writeJson, writeJsonAtomic, writeJsonSync, writePrivateSecretFileAtomic, writeTextAtomic };