openclaw/dist/plugin-sdk/security-runtime.d.ts

Multi-channel AI gateway with extensible messaging integrations

import { i_ as expandAllowFromWithAccessGroups, mv as resolvePinnedMainDmOwnerFromAllowlist, xb as formatErrorMessage } from "../config-contracts-DzLaG7FV.js";
import { C as truncateSanitizedExternalContent, S as hasProxyEnvConfigured, T as wrapWebContent, _ as buildUntrustedChannelMetadata, a as resolveStrictExistingPathsWithinRoot, b as fileExists, c as privateFileStoreSync, d as compileSafeRegexDetailed, f as ContextVisibilityDecision, g as buildChannelMetadata, h as shouldIncludeSupplementalContext, i as resolveExistingPathsWithinRoot, l as normalizeHostname, m as filterSupplementalContextItems, n as pathScope, o as sanitizeUntrustedFileName, p as evaluateSupplementalContextVisibility, r as replaceFileAtomic, s as safeEqualSecret, t as movePathWithCopyFallback, u as SafeRegexRejectReason, v as assertNoSymlinkParents, w as wrapExternalContent, x as isPathInside, y as assertNoSymlinkParentsSync } from "../security-runtime-CtZOrOht.js";
import { n as redactSensitiveText } from "../diagnostic-run-activity-0gZbjqFY.js";
import { t as resolvePreferredOpenClawTmpDir } from "../tmp-openclaw-dir-CZvFGQqf.js";
import { i as SsrFPolicy, l as isPrivateNetworkAllowedByPolicy, p as resolvePinnedHostnameWithPolicy, r as SsrFBlockedError, t as LookupFn, u as matchesHostnameAllowlist } from "../ssrf-Df8OYfGp.js";
import { _ as writeExternalFileWithinRoot, a as openLocalFileSafely, c as readRegularFile, d as resolveAbsolutePathForWrite, f as resolveLocalPathFromRootsSync, g as withTimeout, h as statRegularFileSync, i as findExistingAncestor, l as readRegularFileSync, m as statRegularFile, n as appendRegularFile, o as pathExists, p as root, r as canonicalPathFromExistingAncestor, s as pathExistsSync, t as FsSafeError, u as resolveAbsolutePathForRead } from "../fs-safe-KRE4Cckk.js";
import { r as extractErrorCode } from "../error-coercion-BcU5CC86.js";
import { i as parseAccessGroupAllowFromEntry } from "../allow-from-DFqtsHlu.js";
import { r as ensurePortAvailable } from "../ports-CWmLT6Ni.js";
export { type ContextVisibilityDecision, FsSafeError, type LookupFn, type SafeRegexRejectReason, SsrFBlockedError, type SsrFPolicy, appendRegularFile, assertNoSymlinkParents, assertNoSymlinkParentsSync, buildChannelMetadata, buildUntrustedChannelMetadata, canonicalPathFromExistingAncestor, compileSafeRegexDetailed, ensurePortAvailable, evaluateSupplementalContextVisibility, expandAllowFromWithAccessGroups, extractErrorCode, fileExists, filterSupplementalContextItems, findExistingAncestor, formatErrorMessage, hasProxyEnvConfigured, isPathInside, isPrivateNetworkAllowedByPolicy, matchesHostnameAllowlist, movePathWithCopyFallback, normalizeHostname, openLocalFileSafely, parseAccessGroupAllowFromEntry, pathExists, pathExistsSync, pathScope, privateFileStoreSync, readRegularFile, readRegularFileSync, redactSensitiveText, replaceFileAtomic, resolveAbsolutePathForRead, resolveAbsolutePathForWrite, resolveExistingPathsWithinRoot, resolveLocalPathFromRootsSync, resolvePinnedHostnameWithPolicy, resolvePinnedMainDmOwnerFromAllowlist, resolvePreferredOpenClawTmpDir, resolveStrictExistingPathsWithinRoot, root, safeEqualSecret, sanitizeUntrustedFileName, shouldIncludeSupplementalContext, statRegularFile, statRegularFileSync, truncateSanitizedExternalContent, withTimeout, wrapExternalContent, wrapWebContent, writeExternalFileWithinRoot };