openclaw/dist/plugin-sdk/infra-runtime.d.ts

Multi-channel AI gateway with extensible messaging integrations

import { It as AgentDefaultsConfig, r as OpenClawConfig } from "../types.openclaw-BdCLfP4c.js";
import { n as RuntimeEnv } from "../runtime-DlqUc5_p.js";
import { $ as readExecApprovalsSnapshot, $t as normalizeSafeBins, A as recordAllowlistUse, At as SystemRunApprovalFileOperand, B as DEFAULT_EXEC_APPROVAL_DECISIONS, Bt as resolveExecPolicyForMode, C as resolvePluginApprovalTimeoutMs, Cn as resolvePolicyTargetTrustPath, Ct as ExecApprovalsSnapshot, D as resolveExecApprovalsFromFile, Dt as ExecSecurity, E as resolveExecApprovals, Et as ExecMode, F as hasNodeCommandAllowAlwaysMarker, Ft as normalizeExecSecurity, G as minSecurity, Gt as ExecAllowlistEvaluation, H as commandRequiresSecurityAuditSuppressionApproval, I as persistAllowAlwaysDecision, It as normalizeExecTarget, J as resolveExecApprovalAllowedDecisions, Jt as evaluateExecAllowlist, K as normalizeExecApprovalUnavailableDecisions, Kt as ExecSegmentSatisfiedBy, L as persistAllowAlwaysPatterns, Lt as requireValidExecTarget, M as addDurableCommandApproval, Mt as normalizeExecAsk, N as hasDurableExecApproval, Nt as normalizeExecHost, O as requestExecApprovalViaSocket, Ot as ExecTarget, P as hasExactCommandDurableExecApproval, Pt as normalizeExecMode, Q as loadExecApprovals, Qt as isSafeBinUsage, R as resolveAllowAlwaysPatternCoverage, Rt as resolveExecModeFromPolicy, S as resolvePluginApprovalRequestAllowedDecisions, Sn as resolvePolicyTargetResolution, St as ExecApprovalsResolved, T as normalizeExecApprovals, Tt as ExecHost, U as isExecApprovalDecisionAllowed, Ut as AllowAlwaysPattern, V as OPTIONAL_EXEC_APPROVAL_DECISIONS, W as maxAsk, Wt as ExecAllowlistAnalysis, X as resolveExecApprovalUnavailableDecisions, Xt as evaluateShellAllowlist, Y as resolveExecApprovalRequestAllowedDecisions, Yt as evaluateExecAllowlistWithAuthorization, Z as ensureExecApprovals, Zt as evaluateShellAllowlistWithAuthorization, _ as PluginApprovalResolved, _n as resolveExecutionTargetCandidatePath, _t as ExecApprovalResolved, an as ShellChainOperator, at as resolveExecApprovalsPath, b as buildPluginApprovalRequestMessage, bn as resolvePolicyAllowlistCandidatePath, bt as ExecApprovalsDefaults, c as DEFAULT_PLUGIN_APPROVAL_DECISIONS, cn as ExecutableResolution, ct as AllowAlwaysPersistenceDecision, d as PLUGIN_APPROVAL_DESCRIPTION_MAX_LENGTH, dn as resolveAllowlistCandidatePath, dt as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS, en as resolveAllowAlwaysPatternEntries, et as restoreExecApprovalsSnapshot, f as PLUGIN_APPROVAL_DETAIL_MAX_LENGTH, fn as resolveApprovalAuditCandidatePath, ft as EXEC_TARGET_VALUES, g as PluginApprovalRequestPayload, gn as resolveExecutableTrustPath, gt as ExecApprovalRequestPayload, h as PluginApprovalRequest, hn as resolveCommandResolutionFromArgv, ht as ExecApprovalRequest, in as ExecCommandSegment, it as resolveExecApprovalsDisplayPath, j as addAllowlistEntry, jt as SystemRunApprovalPlan, k as recordAllowlistMatchesUse, kt as SystemRunApprovalBinding, l as DEFAULT_PLUGIN_APPROVAL_TIMEOUT_MS, ln as matchAllowlist, lt as AllowAlwaysPersistenceReason, m as PluginApprovalActionView, mn as resolveCommandResolution, mt as ExecApprovalDecision, nn as resolveSafeBins, nt as DEFAULT_EXEC_APPROVAL_ASK_FALLBACK, on as CommandResolution, ot as resolveExecApprovalsSocketPath, p as PLUGIN_APPROVAL_TITLE_MAX_LENGTH, pn as resolveApprovalAuditTrustPath, pt as ExecApprovalCommandSpan, q as requiresExecApproval, qt as SkillBinTrustEntry, rn as ExecCommandAnalysis, rt as mergeExecApprovalsSocketDefaults, sn as ExecArgvToken, st as resolveExecApprovalsTranscriptPath, tn as resolveAllowAlwaysPatterns, tt as saveExecApprovals, u as MAX_PLUGIN_APPROVAL_TIMEOUT_MS, un as parseExecArgvToken, ut as ExecApprovalsDefaultOverrides, v as approvalDecisionLabel, vn as resolveExecutionTargetResolution, vt as ExecApprovalUnavailableDecision, w as truncatePluginApprovalDetail, wn as ExecAllowlistEntry, wt as ExecAsk, x as buildPluginApprovalResolvedMessage, xn as resolvePolicyTargetCandidatePath, xt as ExecApprovalsFile, y as buildPluginApprovalExpiredMessage, yn as resolveExecutionTargetTrustPath, yt as ExecApprovalsAgent, z as resolveAllowAlwaysPersistenceDecision, zt as resolveExecModePolicy } from "../approval-types-ClyNB7BE.js";
import { A as OutboundSendDeps, M as resolveLegacyOutboundSendDepKeys, N as resolveOutboundSendDep, j as ResolveOutboundSendDepOptions } from "../types-DmbWkZnE.js";
import { a as resolveOsHomeRelativePath, c as resolveUserPath, i as resolveOsHomeDir, n as resolveEffectiveHomeDir, o as resolveRequiredHomeDir, r as resolveHomeRelativePath, s as resolveRequiredOsHomeDir, t as expandHomePrefix } from "../home-dir-4pOw9r_P.js";
import { D as ChannelApprovalNativeDeliveryPlan, E as PreparedChannelNativeApprovalTarget, O as ChannelApprovalNativePlannedTarget, k as resolveChannelNativeApprovalDeliveryPlan } from "../approval-handler-runtime-types-Dpfy9HAW.js";
import "../deliver-types-CDcuf7l2.js";
import { o as OutboundIdentity } from "../outbound.types-CvZiVBTg.js";
import { d as QueuedDelivery, h as resolveAgentOutboundIdentity, m as normalizeOutboundIdentity, t as DeliverOutboundPayloadsParams } from "../deliver-contracts-cXf8Y4vh.js";
import { C as resolveSsrFPolicyForUrl, E as ssrfPolicyFromHttpBaseUrlFakeIpHostnameAllowlist, S as resolvePinnedHostnameWithPolicy, T as ssrfPolicyFromHttpBaseUrlAllowedOrigin, _ as isSameSsrFPolicy, a as SsrFBlockedError, b as normalizeHostnameAllowlist, c as assertPublicHostname, d as createPinnedLookup, f as isBlockedHostname, g as isPrivateNetworkAllowedByPolicy, h as isPrivateIpAddress, i as PinnedHostnameOverride, l as closeDispatcher, m as isHostnameAllowedByPattern, n as PinnedDispatcherPolicy, o as SsrFPolicy, p as isBlockedHostnameOrIp, r as PinnedHostname, s as assertHostnameAllowedWithPolicy, t as LookupFn, u as createPinnedDispatcher, v as matchesHostnameAllowlist, w as ssrfPolicyFromHttpBaseUrlAllowedHostname, x as resolvePinnedHostname, y as mergeSsrFPolicies } from "../ssrf-CkjpArdF.js";
import { $ as DiagnosticSessionLongRunningEvent, A as DiagnosticMessageProcessedEvent, At as emitDiagnosticEventWithTrustedTraceContext, B as DiagnosticPhaseSnapshot, Bt as isInternalDiagnosticEventMetadata, C as DiagnosticMemoryUsage, Ct as DiagnosticUsageEvent, D as DiagnosticMessageDeliveryStartedEvent, Dt as TrustedToolExecutionEvent, E as DiagnosticMessageDeliveryKind, Et as DiagnosticWebhookReceivedEvent, F as DiagnosticModelCallErrorEvent, Ft as emitTrustedSecurityEvent, G as DiagnosticSecurityEvent, Gt as resetDiagnosticEventsForTest, H as DiagnosticRunCompletedEvent, Ht as onInternalDiagnosticEvent, I as DiagnosticModelCallStartedEvent, It as emitTrustedSkillUsedDiagnosticEvent, J as DiagnosticSecurityEventInput, K as DiagnosticSecurityEventActor, Kt as setDiagnosticsEnabledForProcess, L as DiagnosticPayloadLargeEvent, Lt as getInternalDiagnosticEventSequence, M as DiagnosticMessageReceivedEvent, Mt as emitInternalDiagnosticEvent, N as DiagnosticModelCallCompletedEvent, Nt as emitTrustedDiagnosticEvent, O as DiagnosticMessageDispatchCompletedEvent, Ot as areDiagnosticsEnabledForProcess, P as DiagnosticModelCallContent, Pt as emitTrustedDiagnosticEventWithPrivateData, Q as DiagnosticSessionAttentionClassification, R as DiagnosticPhaseCompletedEvent, Rt as hasPendingInternalDiagnosticEvent, S as DiagnosticMemorySampleEvent, St as DiagnosticToolTerminalReason, T as DiagnosticMessageDeliveryErrorEvent, Tt as DiagnosticWebhookProcessedEvent, U as DiagnosticRunProgressEvent, Ut as onTrustedInternalDiagnosticEvent, V as DiagnosticRunAttemptEvent, Vt as onDiagnosticEvent, W as DiagnosticRunStartedEvent, Wt as onTrustedToolExecutionEvent, X as DiagnosticSecurityEventTarget, Y as DiagnosticSecurityEventPolicy, Z as DiagnosticSessionActiveWorkKind, _ as DiagnosticLaneEnqueueEvent, _t as DiagnosticToolExecutionErrorEvent, a as DiagnosticEventPayload, at as DiagnosticSessionStateEvent, b as DiagnosticLogRecordEvent, bt as DiagnosticToolParamsSummary, c as DiagnosticExecProcessCompletedEvent, ct as DiagnosticSkillActivation, d as DiagnosticHarnessRunErrorEvent, dt as DiagnosticSkillUsedEvent, et as DiagnosticSessionRecoveryCompletedEvent, f as DiagnosticHarnessRunOutcome, ft as DiagnosticTalkEvent, g as DiagnosticLaneDequeueEvent, gt as DiagnosticToolExecutionCompletedEvent, h as DiagnosticHeartbeatEvent, ht as DiagnosticToolExecutionBlockedEvent, i as DiagnosticEventMetadata, it as DiagnosticSessionState, j as DiagnosticMessageQueuedEvent, jt as emitFailoverEvent, k as DiagnosticMessageDispatchStartedEvent, kt as emitDiagnosticEvent, l as DiagnosticFailoverEvent, lt as DiagnosticSkillTelemetrySource, m as DiagnosticHarnessRunStartedEvent, mt as DiagnosticToolCallContent, n as DiagnosticContextAssembledEvent, nt as DiagnosticSessionRecoveryStatus, o as DiagnosticEventPrivateData, ot as DiagnosticSessionStuckEvent, p as DiagnosticHarnessRunPhase, pt as DiagnosticTelemetryExporterEvent, q as DiagnosticSecurityEventControl, qt as waitForDiagnosticEventsDrained, r as DiagnosticEventInput, rt as DiagnosticSessionStalledEvent, s as DiagnosticExecApprovalFollowupSuppressedEvent, st as DiagnosticSessionTurnCreatedEvent, t as DiagnosticAsyncQueueDroppedEvent, tt as DiagnosticSessionRecoveryRequestedEvent, u as DiagnosticHarnessRunCompletedEvent, ut as DiagnosticSkillUsagePrivateData, v as DiagnosticLivenessWarningEvent, vt as DiagnosticToolExecutionStartedEvent, w as DiagnosticMessageDeliveryCompletedEvent, wt as DiagnosticWebhookErrorEvent, x as DiagnosticMemoryPressureEvent, xt as DiagnosticToolSource, y as DiagnosticLivenessWarningReason, yt as DiagnosticToolLoopEvent, z as DiagnosticPhaseDetails, zt as isDiagnosticsEnabled } from "../diagnostic-events-C27YcnlB.js";
import { a as computeBackoff, i as RetryOptions, n as RetryConfig, o as resolveRetryConfig, r as RetryInfo, s as sleepWithAbort, t as BackoffPolicy } from "../index-CVK1du31.js";
import { a as GuardedFetchResult, c as withStrictGuardedFetchMode, d as fetchWithRuntimeDispatcher, l as withTrustedEnvProxyGuardedFetchMode, n as GuardedFetchMode, o as fetchWithSsrFGuard, r as GuardedFetchOptions, s as retainSafeHeadersForCrossOriginRedirectHeaders, t as GUARDED_FETCH_MODE, u as withTrustedExplicitProxyGuardedFetchMode } from "../fetch-guard-1Aivi_O4.js";
import { a as isWindowsNetworkPath, c as EnvHttpProxyAgentProxyOptions, d as hasEnvHttpProxyConfigured, f as hasProxyEnvConfigured, g as shouldUseEnvHttpProxyForUrl, h as resolveEnvHttpProxyUrl, i as hasEncodedFileUrlSeparator, l as PROXY_ENV_KEYS, m as resolveEnvHttpProxyAgentOptions, n as assertNoWindowsNetworkPath, o as safeFileURLToPath, p as matchesNoProxy, r as basenameFromMediaSource, s as trySafeFileURLToPath, t as normalizeHostname, u as hasEnvHttpProxyAgentConfigured } from "../hostname-ecNPFfxV.js";
import { C as peekSystemEvents, S as peekSystemEventEntries, T as resolveSystemEventDeliveryContext, _ as drainSystemEvents, a as generateSecureUuid, b as hasSystemEvents, c as createDedupeCache, d as getChannelActivity, f as recordChannelActivity, g as drainSystemEventEntries, h as consumeSystemEventEntries, i as generateSecureToken, l as resolveGlobalDedupeCache, m as consumeSelectedSystemEventEntries, n as generateSecureHex, o as DedupeCache, p as SystemEvent, r as generateSecureInt, s as DedupeCacheOptions, t as generateSecureFraction, u as ChannelDirection, v as enqueueSystemEvent, w as resetSystemEventsForTest, x as isSystemEventContextChanged, y as enqueueSystemEventEntry } from "../secure-random-CCRfWpw-.js";
import { C as normalizeZaiEnv, S as normalizeEnv, T as retryAsync, _ as formatDurationPrecise, a as resetWSLStateForTests, b as isTruthyEnvValue, c as ensureGlobalUndiciEnvProxyDispatcher, d as globalUndiciStreamTimeoutMs, f as resetGlobalUndiciStreamTimeoutsForTests, g as formatDurationHuman, h as formatDurationCompact, i as isWSLSync, l as ensureGlobalUndiciStreamTimeouts, m as FormatDurationSecondsOptions, n as isWSL2Sync, o as DEFAULT_UNDICI_STREAM_TIMEOUT_MS, p as FormatDurationCompactOptions, r as isWSLEnv, s as ensureGlobalUndiciDispatcherStreamTimeouts, t as isWSL, u as forceResetGlobalDispatcher, v as formatDurationSeconds, w as resolveEnvNormalizationKeys, x as logAcceptedEnvOption, y as expandEnvNormalizationKeys } from "../wsl-LvaavS_E.js";
import { a as ReadRequestBodyOptions, c as RequestBodyLimitGuard, d as isRequestBodyLimitError, f as readJsonBodyWithLimit, h as testApi, i as ReadJsonBodyResult, l as RequestBodyLimitGuardOptions, m as requestBodyErrorToText, n as DEFAULT_WEBHOOK_MAX_BODY_BYTES, o as RequestBodyLimitError, p as readRequestBodyWithLimit, r as ReadJsonBodyOptions, s as RequestBodyLimitErrorCode, t as DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, u as installRequestBodyLimitGuard } from "../http-body-BodHsDOM.js";
import { _ as resolveExpiresAtMsFromDurationOrEpoch, b as resolveNonNegativeIntegerOption, c as clampTimerTimeoutMs, d as parseFiniteNumber, f as parseStrictFiniteNumber, g as positiveSecondsToSafeMilliseconds, h as parseStrictPositiveInteger, l as finiteSecondsToTimerSafeMilliseconds, m as parseStrictNonNegativeInteger, n as MAX_TIMER_TIMEOUT_SECONDS, p as parseStrictInteger, t as MAX_TIMER_TIMEOUT_MS, u as nonNegativeSecondsToSafeMilliseconds, v as resolveExpiresAtMsFromDurationSeconds, y as resolveExpiresAtMsFromEpochSeconds } from "../number-coercion-Cob_F-CH.js";
import { a as stringifyNonErrorCause, i as readErrorName, n as collectErrorGraphCandidates, o as toErrorObject, r as extractErrorCode } from "../error-coercion-vrFGEpI-.js";
import { n as formatUncaughtError, t as formatErrorMessage } from "../errors-D-udqO7F.js";
import { a as SecretFileReadResult, d as writePrivateSecretFileAtomic, i as SecretFileReadOptions, l as readSecretFileSync, n as PRIVATE_SECRET_DIR_MODE, r as PRIVATE_SECRET_FILE_MODE, s as loadSecretFileSync, t as DEFAULT_SECRET_FILE_MAX_BYTES, u as tryReadSecretFileSync } from "../secret-file-gJ6YUzr1.js";
import { t as formatApprovalDisplayPath } from "../approval-display-paths-Hb4BQ_zR.js";
import { S as parseExecApprovalCommandText, _ as buildTypedExecApprovalPendingReplyPayload, a as ExecApprovalUnavailableReason, b as getExecApprovalApproverDmNoticeText, c as buildApprovalButtonPresentation, d as buildExecApprovalCommandText, f as buildExecApprovalPendingReplyPayload, g as buildTypedApprovalPresentation, h as buildTypedApprovalActionDescriptors, i as ExecApprovalReplyMetadata, l as buildApprovalPresentationFromActionDescriptors, m as buildExecApprovalUnavailableReplyPayload, n as ExecApprovalPendingReplyParams, o as ExecApprovalUnavailableReplyParams, p as buildExecApprovalPresentation, r as ExecApprovalReplyDecision, s as TypedApprovalActionDescriptor, t as ExecApprovalActionDescriptor, u as buildExecApprovalActionDescriptors, v as buildTypedExecApprovalPresentation, x as getExecApprovalReplyMetadata, y as formatExecApprovalExpiresIn } from "../exec-approval-reply-BjgOe5l7.js";
import { a as resolveApprovalRequestSessionTarget, i as resolveApprovalRequestSessionConversation, n as ExecApprovalSessionTarget, o as resolveExecApprovalSessionTarget, r as resolveApprovalRequestOriginTarget, t as ApprovalRequestSessionConversation } from "../exec-approval-session-target-D5Dyjvzf.js";
import { a as ExecApprovalChannelRuntimeAdapter, i as ExecApprovalChannelRuntime, n as createExecApprovalChannelRuntime, r as isExecApprovalChannelRuntimeTerminalStartError, t as ExecApprovalChannelRuntimeTerminalStartError } from "../exec-approval-channel-runtime-DdRctW3k.js";
import { t as resolveExecApprovalCommandDisplay } from "../exec-approval-command-display-DteW0von.js";
import { n as deliverApprovalRequestViaChannelNativePlan, t as createChannelNativeApprovalRuntime } from "../approval-native-runtime-n1E0TXzE.js";
import { i as normalizeScpRemotePath, n as isSafeScpRemotePath, r as normalizeScpRemoteHost, t as isSafeScpRemoteHost } from "../scp-host-yP_sSiFf.js";
import { n as createRuntimeOutboundDelegates } from "../runtime-forwarders-BXwi5QIF.js";
import { t as sanitizeForPlainText } from "../sanitize-text-CVPN3pRC.js";
import { t as pruneMapToMaxSize } from "../map-size-Cxg6PuCO.js";
import { n as matchesDiagnosticFlag, r as resolveDiagnosticFlags, t as isDiagnosticFlagEnabled } from "../diagnostic-flags-BEk7Regl.js";
import { n as buildTimeoutAbortSignal, r as fetchWithTimeout, t as bindAbortRelay } from "../fetch-timeout-D2yvPshT.js";
import { a as acquireFileLock, c as withFileLock, i as FileLockTimeoutError, n as FileLockHandle, o as drainFileLockStateForTest, r as FileLockOptions, s as resetFileLockStateForTest, t as FILE_LOCK_TIMEOUT_ERROR_CODE } from "../file-lock-BkoQbRDt.js";
import { A as readFileWithinRoot, B as resolveRegularFileAppendFlags, C as ensureAbsoluteDirectory, D as openLocalFileSafely, E as movePathToTrash, F as readSecureFile, G as walkDirectorySync, H as statRegularFile, I as resolveAbsolutePathForRead, J as writeFileWithinRoot, K as withTimeout, L as resolveAbsolutePathForWrite, M as readLocalFileSafely, N as readRegularFile, O as pathExists, P as readRegularFileSync, R as resolveLocalPathFromRootsSync, S as canonicalPathFromExistingAncestor, T as isPathInside, U as statRegularFileSync, V as root, W as walkDirectory, Z as sanitizeUntrustedFileName, _ as WalkDirectoryOptions, a as ExternalFileWriteResult, b as appendRegularFileSync, c as MovePathToTrashOptions, d as ResolvedAbsolutePath, f as ResolvedWritableAbsolutePath, g as WalkDirectoryEntry, h as SecureFileReadResult, i as ExternalFileWriteOptions, j as readLocalFileFromRoots, k as pathExistsSync, l as OpenResult, m as SecureFileReadOptions, n as EnsureAbsoluteDirectoryOptions, o as FsSafeError, p as Root, q as writeExternalFileWithinRoot, r as EnsureAbsoluteDirectoryResult, s as FsSafeErrorCode, t as AbsolutePathSymlinkPolicy, u as ReadResult, v as WalkDirectoryResult, w as findExistingAncestor, x as assertAbsolutePathInput, y as appendRegularFile, z as resolveOpenedFileRealPathForHandle } from "../fs-safe-CpD5NC5g.js";
import { _ as writeJsonAtomic, a as readJson, c as readJsonFileSync, d as readRootJsonObjectSync, f as readRootJsonSync, g as writeJson, h as tryReadJsonSync, i as readDurableJsonFile, l as readJsonIfExists, m as tryReadJson, n as WriteTextAtomicOptions, o as readJsonFile, p as readRootStructuredFileSync, r as createAsyncLock, s as readJsonFileStrict, t as JsonFileReadError, u as readJsonSync, v as writeJsonSync, y as writeTextAtomic } from "../json-files-6Aff0MDp.js";
import { n as hasSystemMark, r as prefixSystemMessage, t as SYSTEM_MARK } from "../system-message-CItK8lzT.js";
import { n as ResolvePreferredOpenClawTmpDirOptions, r as resolvePreferredOpenClawTmpDir, t as DEFAULT_POSIX_TMP_ROOT } from "../tmp-openclaw-dir-BVXh5Mbm.js";
import { a as isPrivateNetworkOptInEnabled, c as ssrfPolicyFromDangerouslyAllowPrivateNetwork, d as hasLegacyFlatAllowPrivateNetworkAlias, f as migrateLegacyFlatAllowPrivateNetworkAlias, i as isHttpsUrlAllowedByHostnameSuffixAllowlist, l as ssrfPolicyFromPrivateNetworkOptIn, n as assertHttpUrlTargetsPrivateNetwork, o as normalizeHostnameSuffixAllowlist, r as buildHostnameAllowlistPolicyFromSuffixAllowlist, s as ssrfPolicyFromAllowPrivateNetwork, t as PrivateNetworkOptInInput, u as createLegacyPrivateNetworkDoctorContract } from "../ssrf-policy-CusYZvjK.js";
//#region src/infra/exec-argv-analysis.d.ts
export declare function analyzeArgvCommand(params: {
  argv: string[];
  cwd?: string;
  env?: NodeJS.ProcessEnv;
  platform?: string | null;
}): ExecCommandAnalysis;
//#endregion
//#region src/infra/windows-shell-command.d.ts
export declare function tokenizeWindowsSegment(segment: string): string[] | null;
export declare function analyzeWindowsShellCommand(params: {
  command: string;
  cwd?: string;
  env?: NodeJS.ProcessEnv;
  platform?: string | null;
}): ExecCommandAnalysis;
export declare function isWindowsPlatform(platform?: string | null): boolean;
export declare function windowsEscapeArg(value: string): {
  ok: true;
  escaped: string;
} | {
  ok: false;
};
//#endregion
//#region src/infra/exec-approvals-analysis.d.ts
export declare function resolvePlannedSegmentArgv(segment: ExecCommandSegment): string[] | null;
export declare function buildEnforcedShellCommand(params: {
  command: string;
  segments: ExecCommandSegment[];
  platform?: string | null;
}): {
  ok: boolean;
  command?: string;
  reason?: string;
};
//#endregion
//#region src/infra/errno.d.ts
/** Type guard for NodeJS.ErrnoException (any object with a `code` property). */
export declare function isErrno(err: unknown): err is NodeJS.ErrnoException;
/** Checks whether an errno-shaped value has the exact code. */
export declare function hasErrnoCode(err: unknown, code: string): boolean;
//#endregion
//#region src/infra/outbound/protocol-scaffolding.d.ts
export declare function stripInternalRuntimeScaffolding(text: string): string;
//#endregion
//#region src/infra/delivery-recovery.shared.d.ts
type DeliveryRecoveryDrainDecision = {
  match: boolean;
  bypassBackoff?: boolean;
};
//#endregion
//#region src/infra/outbound/delivery-queue-recovery.d.ts
type DeliverFn = (params: DeliverOutboundPayloadsParams) => Promise<unknown>;
interface RecoveryLogger {
  info(msg: string): void;
  warn(msg: string): void;
  error(msg: string): void;
}
declare function drainPendingDeliveriesCore(opts: {
  drainKey: string;
  logLabel: string;
  cfg: OpenClawConfig;
  log: RecoveryLogger;
  stateDir?: string;
  deliver: DeliverFn;
  selectEntry: (entry: QueuedDelivery, now: number) => DeliveryRecoveryDrainDecision;
  shouldContinue?: () => boolean;
}): Promise<void>;
//#endregion
//#region src/plugin-sdk/delivery-queue-runtime.d.ts
type DrainPendingDeliveriesOptions = Omit<Parameters<typeof drainPendingDeliveriesCore>[0], "deliver"> & {
  /** Optional delivery implementation for tests or plugin-owned send paths. */
  deliver?: DeliverFn;
};
/**
 * Drain queued outbound payloads after a channel reconnect or transport recovery.
 * When no deliver function is provided, the heavy outbound delivery runtime is
 * loaded lazily so importing this SDK subpath does not eagerly bind send internals.
 */
export declare function drainPendingDeliveries(opts: DrainPendingDeliveriesOptions): Promise<void>;
//#endregion
//#region src/infra/test-runtime-env.d.ts
/** Detects Vitest/test execution from the env shape used by local and worker processes. */
export declare function isVitestRuntimeEnv(env?: NodeJS.ProcessEnv): boolean;
/** Enables the shared fast-test shortcuts only inside a detected test runtime. */
export declare function isFastTestRuntimeEnv(env?: NodeJS.ProcessEnv): boolean;
//#endregion
//#region src/infra/fetch.d.ts
/**
 * Wraps fetch so Node-compatible duplex bodies, normalized headers, and foreign
 * AbortSignal implementations work against runtimes expecting native signals.
 */
export declare function wrapFetchWithAbortSignal(fetchImpl: typeof fetch): typeof fetch;
/** Resolves an optional fetch implementation, wrapping it when fetch is available. */
export declare function resolveFetch(fetchImpl?: typeof fetch): typeof fetch | undefined;
//#endregion
//#region src/infra/heartbeat-events.d.ts
export type HeartbeatIndicatorType = "ok" | "alert" | "error";
export type HeartbeatEventPayload = {
  ts: number;
  status: "sent" | "ok-empty" | "ok-token" | "skipped" | "failed";
  to?: string;
  accountId?: string;
  preview?: string;
  durationMs?: number;
  hasMedia?: boolean;
  reason?: string;
  /** Operator-facing companion to the machine-stable reason code. */
  message?: string;
  /** The channel this heartbeat was sent to. */
  channel?: string;
  /** Whether the message was silently suppressed (showOk: false). */
  silent?: boolean;
  /** Indicator type for UI status display. */
  indicatorType?: HeartbeatIndicatorType;
};
export declare function resolveIndicatorType(status: HeartbeatEventPayload["status"]): HeartbeatIndicatorType | undefined;
export declare function emitHeartbeatEvent(evt: Omit<HeartbeatEventPayload, "ts">): void;
export declare function onHeartbeatEvent(listener: (evt: HeartbeatEventPayload) => void): () => void;
export declare function getLastHeartbeatEvent(): HeartbeatEventPayload | null;
export declare function resetHeartbeatEventsForTest(): void;
//#endregion
//#region src/infra/heartbeat-config.d.ts
type HeartbeatConfig = AgentDefaultsConfig["heartbeat"];
/** Resolve the cadence owned by the effective heartbeat configuration. */
export declare function resolveHeartbeatIntervalMs(cfg: OpenClawConfig, overrideEvery?: string, heartbeat?: HeartbeatConfig): number | null;
//#endregion
//#region src/infra/heartbeat-summary-projection.d.ts
/** Normalized heartbeat configuration for one agent. */
type HeartbeatSummary = {
  enabled: boolean;
  every: string;
  everyMs: number | null;
  prompt: string;
  target: string;
  model?: string;
  session?: string;
  ackMaxChars: number;
};
//#endregion
//#region src/infra/heartbeat-summary.d.ts
/** Return whether heartbeat scheduling applies to an agent. */
export declare function isHeartbeatEnabledForAgent(cfg: OpenClawConfig, agentId?: string): boolean;
/** Resolve display-ready heartbeat settings for an agent. */
export declare function resolveHeartbeatSummaryForAgent(cfg: OpenClawConfig, agentId?: string): HeartbeatSummary;
//#endregion
//#region src/infra/heartbeat-visibility.d.ts
/** Resolved heartbeat presentation toggles after defaults/channel/account precedence. */
export type ResolvedHeartbeatVisibility = {
  /** Whether successful heartbeat content should be sent as visible chat text. */
  showOk: boolean;
  /** Whether warning/error heartbeat content should be sent as visible chat text. */
  showAlerts: boolean;
  /** Whether heartbeat status should emit indicator events for UI surfaces. */
  useIndicator: boolean;
};
/** Resolves heartbeat visibility for a channel, applying account > channel > defaults precedence. */
export declare function resolveHeartbeatVisibility(params: {
  cfg: OpenClawConfig;
  channel: string;
  accountId?: string;
}): ResolvedHeartbeatVisibility;
//#endregion
//#region src/infra/net/proxy-fetch.d.ts
/** Non-enumerable marker used to recover the explicit proxy URL from proxy fetch wrappers. */
export declare const PROXY_FETCH_PROXY_URL: unique symbol;
/**
 * Create a fetch function that routes requests through the given HTTP proxy.
 * Uses undici's ProxyAgent under the hood.
 */
export declare function makeProxyFetch(proxyUrl: string): typeof fetch;
/** Return the explicit proxy URL attached by {@link makeProxyFetch}, if present. */
export declare function getProxyUrlFromFetch(fetchImpl?: typeof fetch): string | undefined;
/**
 * Resolve a proxy-aware fetch from standard environment variables.
 * Respects NO_PROXY / no_proxy exclusions via undici's EnvHttpProxyAgent.
 * Returns undefined when no proxy is configured.
 * Gracefully returns undefined if the proxy URL is malformed.
 */
export declare function resolveProxyFetchFromEnv(env?: NodeJS.ProcessEnv): typeof fetch | undefined;
//#endregion
//#region src/infra/retry-policy.d.ts
/** Runs an async operation with a policy-specific retry wrapper and optional log label. */
export type RetryRunner = <T>(fn: () => Promise<T>, label?: string) => Promise<T>;
/** Default retry envelope for channel API operations that hit transient network edges. */
export declare const CHANNEL_API_RETRY_DEFAULTS: {
  attempts: number;
  minDelayMs: number;
  maxDelayMs: number;
  jitter: number;
};
/** Creates a generic rate-limit-aware retry runner from explicit retry policy pieces. */
export declare function createRateLimitRetryRunner(params: {
  retry?: RetryConfig;
  configRetry?: RetryConfig;
  verbose?: boolean;
  defaults: Required<RetryConfig>;
  logLabel: string;
  shouldRetry: (err: unknown) => boolean;
  retryAfterMs?: (err: unknown) => number | undefined;
}): RetryRunner;
/** Creates the channel API retry runner used by outbound messaging integrations. */
export declare function createChannelApiRetryRunner(params: {
  retry?: RetryConfig;
  configRetry?: RetryConfig;
  verbose?: boolean;
  retryAfterMaxDelayMs?: number;
  shouldRetry?: RetryOptions["shouldRetry"];
  retryAfterMs?: RetryOptions["retryAfterMs"];
  /**
   * When true, the custom shouldRetry predicate is used exclusively —
   * the default channel API fallback regex is NOT OR'd in.
   * Use this for non-idempotent operations (e.g. sendMessage) where
   * the regex fallback would cause duplicate message delivery.
   */
  strictShouldRetry?: boolean;
}): RetryRunner;
//#endregion
//#region src/infra/transport-ready.d.ts
/** Result returned by one transport readiness probe attempt. */
export type TransportReadyResult = {
  ok: boolean;
  error?: string | null;
};
/** Parameters for polling a channel transport until it can accept runtime work. */
export type WaitForTransportReadyParams = {
  label: string;
  timeoutMs: number;
  logAfterMs?: number;
  logIntervalMs?: number;
  pollIntervalMs?: number;
  abortSignal?: AbortSignal;
  runtime: RuntimeEnv;
  check: () => Promise<TransportReadyResult>;
};
/**
 * Polls a channel transport readiness probe until it succeeds, times out, or aborts.
 *
 * Used by channel plugins that start external daemons or subscribe to local transports before
 * processing inbound events, with bounded retry logging through the caller's runtime sink.
 */
export declare function waitForTransportReady(params: WaitForTransportReadyParams): Promise<void>;
//#endregion
//#region src/utils/run-with-concurrency.d.ts
/** Controls whether the worker pool keeps scheduling after a task failure. */
export type ConcurrencyErrorMode = "continue" | "stop";
/** Options for running a fixed list of promise factories through a bounded worker pool. */
export type RunTasksWithConcurrencyOptions<T> = {
  /** Task factories are started lazily so the helper can enforce `limit`. */
  tasks: Array<() => Promise<T>>;
  /** Maximum number of tasks allowed to run at the same time; clamped to at least one. */
  limit: number;
  /** `stop` prevents new work after the first failure; in-flight workers still settle. */
  errorMode?: ConcurrencyErrorMode;
  /** Reject immediately on a task failure instead of returning aggregate error state. */
  throwOnError?: boolean;
  /** Called once per failed task with the original task index. */
  onTaskError?: (error: unknown, index: number) => void;
};
/** Ordered task results plus aggregate error state for callers that keep partial success. */
export type RunTasksWithConcurrencyResult<T> = {
  /** Results are written at their original task indexes; failed or unscheduled indexes stay empty. */
  results: T[];
  /** First task error observed by the worker pool, if any. */
  firstError: unknown;
  /** True when at least one task rejected. */
  hasError: boolean;
};
/** Runs async tasks with bounded concurrency while preserving result indexes. */
export declare function runTasksWithConcurrency<T>(params: RunTasksWithConcurrencyOptions<T>): Promise<RunTasksWithConcurrencyResult<T>>;
//#endregion
//#region src/plugin-sdk/infra-runtime.d.ts
/** @deprecated Shipped compat only (removed from core in #104546); no core caller. Removal with the next plugin-SDK major. */
export type ErrorKind = "refusal" | "timeout" | "rate_limit" | "context_length" | "unknown";
/**
 * @deprecated Shipped compat only; preserves the old substring semantics for
 * external plugins. Core chat classification now maps canonical failover
 * reasons (see gateway resolveChatErrorKindFromError). Removal with the next
 * plugin-SDK major.
 */
export declare function detectErrorKind(err: unknown): ErrorKind | undefined;
//#endregion
export { type AbsolutePathSymlinkPolicy, type AllowAlwaysPattern, type AllowAlwaysPersistenceDecision, type AllowAlwaysPersistenceReason, ApprovalRequestSessionConversation, type BackoffPolicy, ChannelApprovalNativeDeliveryPlan, ChannelApprovalNativePlannedTarget, ChannelDirection, type CommandResolution, DEFAULT_EXEC_APPROVAL_ASK_FALLBACK, DEFAULT_EXEC_APPROVAL_DECISIONS, DEFAULT_EXEC_APPROVAL_TIMEOUT_MS, DEFAULT_PLUGIN_APPROVAL_DECISIONS, DEFAULT_PLUGIN_APPROVAL_TIMEOUT_MS, DEFAULT_POSIX_TMP_ROOT, DEFAULT_SECRET_FILE_MAX_BYTES, DEFAULT_UNDICI_STREAM_TIMEOUT_MS, DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, DEFAULT_WEBHOOK_MAX_BODY_BYTES, DedupeCache, DedupeCacheOptions, type DiagnosticAsyncQueueDroppedEvent, type DiagnosticContextAssembledEvent, type DiagnosticEventInput, type DiagnosticEventMetadata, type DiagnosticEventPayload, type DiagnosticEventPrivateData, type DiagnosticExecApprovalFollowupSuppressedEvent, type DiagnosticExecProcessCompletedEvent, type DiagnosticFailoverEvent, type DiagnosticHarnessRunCompletedEvent, type DiagnosticHarnessRunErrorEvent, type DiagnosticHarnessRunOutcome, type DiagnosticHarnessRunPhase, type DiagnosticHarnessRunStartedEvent, type DiagnosticHeartbeatEvent, type DiagnosticLaneDequeueEvent, type DiagnosticLaneEnqueueEvent, type DiagnosticLivenessWarningEvent, type DiagnosticLivenessWarningReason, type DiagnosticLogRecordEvent, type DiagnosticMemoryPressureEvent, type DiagnosticMemorySampleEvent, type DiagnosticMemoryUsage, type DiagnosticMessageDeliveryCompletedEvent, type DiagnosticMessageDeliveryErrorEvent, type DiagnosticMessageDeliveryKind, type DiagnosticMessageDeliveryStartedEvent, type DiagnosticMessageDispatchCompletedEvent, type DiagnosticMessageDispatchStartedEvent, type DiagnosticMessageProcessedEvent, type DiagnosticMessageQueuedEvent, type DiagnosticMessageReceivedEvent, type DiagnosticModelCallCompletedEvent, type DiagnosticModelCallContent, type DiagnosticModelCallErrorEvent, type DiagnosticModelCallStartedEvent, type DiagnosticPayloadLargeEvent, type DiagnosticPhaseCompletedEvent, type DiagnosticPhaseDetails, type DiagnosticPhaseSnapshot, type DiagnosticRunAttemptEvent, type DiagnosticRunCompletedEvent, type DiagnosticRunProgressEvent, type DiagnosticRunStartedEvent, type DiagnosticSecurityEvent, type DiagnosticSecurityEventActor, type DiagnosticSecurityEventControl, type DiagnosticSecurityEventInput, type DiagnosticSecurityEventPolicy, type DiagnosticSecurityEventTarget, type DiagnosticSessionActiveWorkKind, type DiagnosticSessionAttentionClassification, type DiagnosticSessionLongRunningEvent, type DiagnosticSessionRecoveryCompletedEvent, type DiagnosticSessionRecoveryRequestedEvent, type DiagnosticSessionRecoveryStatus, type DiagnosticSessionStalledEvent, type DiagnosticSessionState, type DiagnosticSessionStateEvent, type DiagnosticSessionStuckEvent, type DiagnosticSessionTurnCreatedEvent, type DiagnosticSkillActivation, type DiagnosticSkillTelemetrySource, type DiagnosticSkillUsagePrivateData, type DiagnosticSkillUsedEvent, type DiagnosticTalkEvent, type DiagnosticTelemetryExporterEvent, type DiagnosticToolCallContent, type DiagnosticToolExecutionBlockedEvent, type DiagnosticToolExecutionCompletedEvent, type DiagnosticToolExecutionErrorEvent, type DiagnosticToolExecutionStartedEvent, type DiagnosticToolLoopEvent, type DiagnosticToolParamsSummary, type DiagnosticToolSource, type DiagnosticToolTerminalReason, type DiagnosticUsageEvent, type DiagnosticWebhookErrorEvent, type DiagnosticWebhookProcessedEvent, type DiagnosticWebhookReceivedEvent, EXEC_TARGET_VALUES, type EnsureAbsoluteDirectoryOptions, type EnsureAbsoluteDirectoryResult, EnvHttpProxyAgentProxyOptions, type ExecAllowlistAnalysis, type ExecAllowlistEntry, type ExecAllowlistEvaluation, ExecApprovalActionDescriptor, type ExecApprovalChannelRuntime, type ExecApprovalChannelRuntimeAdapter, ExecApprovalChannelRuntimeTerminalStartError, type ExecApprovalCommandSpan, type ExecApprovalDecision, ExecApprovalPendingReplyParams, ExecApprovalReplyDecision, ExecApprovalReplyMetadata, type ExecApprovalRequest, type ExecApprovalRequestPayload, type ExecApprovalResolved, ExecApprovalSessionTarget, type ExecApprovalUnavailableDecision, ExecApprovalUnavailableReason, ExecApprovalUnavailableReplyParams, type ExecApprovalsAgent, type ExecApprovalsDefaultOverrides, type ExecApprovalsDefaults, type ExecApprovalsFile, type ExecApprovalsResolved, type ExecApprovalsSnapshot, type ExecArgvToken, type ExecAsk, type ExecCommandAnalysis, type ExecCommandSegment, type ExecHost, type ExecMode, type ExecSecurity, type ExecSegmentSatisfiedBy, type ExecTarget, type ExecutableResolution, ExternalFileWriteOptions, ExternalFileWriteResult, FILE_LOCK_TIMEOUT_ERROR_CODE, type FileLockHandle, type FileLockOptions, type FileLockTimeoutError, FormatDurationCompactOptions, FormatDurationSecondsOptions, FsSafeError, type FsSafeErrorCode, GUARDED_FETCH_MODE, type GuardedFetchMode, type GuardedFetchOptions, type GuardedFetchResult, type HeartbeatSummary, JsonFileReadError, LookupFn, MAX_PLUGIN_APPROVAL_TIMEOUT_MS, MAX_TIMER_TIMEOUT_MS, MAX_TIMER_TIMEOUT_SECONDS, type MovePathToTrashOptions, OPTIONAL_EXEC_APPROVAL_DECISIONS, type OpenResult, type OutboundIdentity, OutboundSendDeps, PLUGIN_APPROVAL_DESCRIPTION_MAX_LENGTH, PLUGIN_APPROVAL_DETAIL_MAX_LENGTH, PLUGIN_APPROVAL_TITLE_MAX_LENGTH, PRIVATE_SECRET_DIR_MODE, PRIVATE_SECRET_FILE_MODE, PROXY_ENV_KEYS, PinnedDispatcherPolicy, PinnedHostname, PinnedHostnameOverride, PluginApprovalActionView, PluginApprovalRequest, PluginApprovalRequestPayload, PluginApprovalResolved, type PreparedChannelNativeApprovalTarget, PrivateNetworkOptInInput, type ReadJsonBodyOptions, type ReadJsonBodyResult, type ReadRequestBodyOptions, type ReadResult, RequestBodyLimitError, type RequestBodyLimitErrorCode, type RequestBodyLimitGuard, type RequestBodyLimitGuardOptions, ResolveOutboundSendDepOptions, ResolvePreferredOpenClawTmpDirOptions, type ResolvedAbsolutePath, type ResolvedWritableAbsolutePath, type RetryConfig, type RetryInfo, type RetryOptions, Root, SYSTEM_MARK, type SecretFileReadOptions, type SecretFileReadResult, type SecureFileReadOptions, type SecureFileReadResult, type ShellChainOperator, type SkillBinTrustEntry, SsrFBlockedError, SsrFPolicy, type SystemEvent, type SystemRunApprovalBinding, type SystemRunApprovalFileOperand, type SystemRunApprovalPlan, type TrustedToolExecutionEvent, TypedApprovalActionDescriptor, type WalkDirectoryEntry, type WalkDirectoryOptions, type WalkDirectoryResult, WriteTextAtomicOptions, testApi as __test__, testApi, acquireFileLock, addAllowlistEntry, addDurableCommandApproval, appendRegularFile, appendRegularFileSync, approvalDecisionLabel, areDiagnosticsEnabledForProcess, assertAbsolutePathInput, assertHostnameAllowedWithPolicy, assertHttpUrlTargetsPrivateNetwork, assertNoWindowsNetworkPath, assertPublicHostname, basenameFromMediaSource, bindAbortRelay, buildApprovalButtonPresentation, buildApprovalPresentationFromActionDescriptors, buildExecApprovalActionDescriptors, buildExecApprovalCommandText, buildExecApprovalPendingReplyPayload, buildExecApprovalPresentation, buildExecApprovalUnavailableReplyPayload, buildHostnameAllowlistPolicyFromSuffixAllowlist, buildPluginApprovalExpiredMessage, buildPluginApprovalRequestMessage, buildPluginApprovalResolvedMessage, buildTimeoutAbortSignal, buildTypedApprovalActionDescriptors, buildTypedApprovalPresentation, buildTypedExecApprovalPendingReplyPayload, buildTypedExecApprovalPresentation, canonicalPathFromExistingAncestor, clampTimerTimeoutMs, closeDispatcher, collectErrorGraphCandidates, commandRequiresSecurityAuditSuppressionApproval, computeBackoff, consumeSelectedSystemEventEntries, consumeSystemEventEntries, createAsyncLock, createChannelNativeApprovalRuntime, createDedupeCache, createExecApprovalChannelRuntime, createLegacyPrivateNetworkDoctorContract, createPinnedDispatcher, createPinnedLookup, createRuntimeOutboundDelegates, deliverApprovalRequestViaChannelNativePlan, drainFileLockStateForTest, drainSystemEventEntries, drainSystemEvents, emitDiagnosticEvent, type emitDiagnosticEventWithTrustedTraceContext, type emitFailoverEvent, type emitInternalDiagnosticEvent, type emitTrustedDiagnosticEvent, type emitTrustedDiagnosticEventWithPrivateData, type emitTrustedSecurityEvent, type emitTrustedSkillUsedDiagnosticEvent, enqueueSystemEvent, enqueueSystemEventEntry, ensureAbsoluteDirectory, ensureExecApprovals, ensureGlobalUndiciDispatcherStreamTimeouts, ensureGlobalUndiciEnvProxyDispatcher, ensureGlobalUndiciStreamTimeouts, evaluateExecAllowlist, evaluateExecAllowlistWithAuthorization, evaluateShellAllowlist, evaluateShellAllowlistWithAuthorization, expandEnvNormalizationKeys, expandHomePrefix, extractErrorCode, fetchWithRuntimeDispatcher, fetchWithSsrFGuard, fetchWithTimeout, findExistingAncestor, finiteSecondsToTimerSafeMilliseconds, forceResetGlobalDispatcher, formatApprovalDisplayPath, formatDurationCompact, formatDurationHuman, formatDurationPrecise, formatDurationSeconds, formatErrorMessage, formatExecApprovalExpiresIn, formatUncaughtError, generateSecureFraction, generateSecureHex, generateSecureInt, generateSecureToken, generateSecureUuid, getChannelActivity, getExecApprovalApproverDmNoticeText, getExecApprovalReplyMetadata, type getInternalDiagnosticEventSequence, globalUndiciStreamTimeoutMs, hasDurableExecApproval, hasEncodedFileUrlSeparator, hasEnvHttpProxyAgentConfigured, hasEnvHttpProxyConfigured, hasExactCommandDurableExecApproval, hasLegacyFlatAllowPrivateNetworkAlias, hasNodeCommandAllowAlwaysMarker, type hasPendingInternalDiagnosticEvent, hasProxyEnvConfigured, hasSystemEvents, hasSystemMark, installRequestBodyLimitGuard, isBlockedHostname, isBlockedHostnameOrIp, isDiagnosticFlagEnabled, isDiagnosticsEnabled, isExecApprovalChannelRuntimeTerminalStartError, isExecApprovalDecisionAllowed, isHostnameAllowedByPattern, isHttpsUrlAllowedByHostnameSuffixAllowlist, type isInternalDiagnosticEventMetadata, isPathInside, isPrivateIpAddress, isPrivateNetworkAllowedByPolicy, isPrivateNetworkOptInEnabled, isRequestBodyLimitError, isSafeBinUsage, isSafeScpRemoteHost, isSafeScpRemotePath, isSameSsrFPolicy, isSystemEventContextChanged, isTruthyEnvValue, isWSL, isWSL2Sync, isWSLEnv, isWSLSync, isWindowsNetworkPath, loadExecApprovals, loadSecretFileSync, logAcceptedEnvOption, matchAllowlist, matchesDiagnosticFlag, matchesHostnameAllowlist, matchesNoProxy, maxAsk, mergeExecApprovalsSocketDefaults, mergeSsrFPolicies, migrateLegacyFlatAllowPrivateNetworkAlias, minSecurity, movePathToTrash, nonNegativeSecondsToSafeMilliseconds, normalizeEnv, normalizeExecApprovalUnavailableDecisions, normalizeExecApprovals, normalizeExecAsk, normalizeExecHost, normalizeExecMode, normalizeExecSecurity, normalizeExecTarget, normalizeHostname, normalizeHostnameAllowlist, normalizeHostnameSuffixAllowlist, normalizeOutboundIdentity, normalizeSafeBins, normalizeScpRemoteHost, normalizeScpRemotePath, normalizeZaiEnv, onDiagnosticEvent, type onInternalDiagnosticEvent, type onTrustedInternalDiagnosticEvent, type onTrustedToolExecutionEvent, openLocalFileSafely, parseExecApprovalCommandText, parseExecArgvToken, parseFiniteNumber, parseStrictFiniteNumber, parseStrictInteger, parseStrictNonNegativeInteger, parseStrictPositiveInteger, pathExists, pathExistsSync, peekSystemEventEntries, peekSystemEvents, persistAllowAlwaysDecision, persistAllowAlwaysPatterns, positiveSecondsToSafeMilliseconds, prefixSystemMessage, pruneMapToMaxSize, readDurableJsonFile, readErrorName, readExecApprovalsSnapshot, readFileWithinRoot, readJson, readJsonBodyWithLimit, readJsonFile, readJsonFileStrict, readJsonFileSync, readJsonIfExists, readJsonSync, readLocalFileFromRoots, readLocalFileSafely, readRegularFile, readRegularFileSync, readRequestBodyWithLimit, readRootJsonObjectSync, readRootJsonSync, readRootStructuredFileSync, readSecretFileSync, readSecureFile, recordAllowlistMatchesUse, recordAllowlistUse, recordChannelActivity, requestBodyErrorToText, requestExecApprovalViaSocket, requireValidExecTarget, requiresExecApproval, type resetDiagnosticEventsForTest, resetFileLockStateForTest, resetGlobalUndiciStreamTimeoutsForTests, resetSystemEventsForTest, resetWSLStateForTests, resolveAbsolutePathForRead, resolveAbsolutePathForWrite, resolveAgentOutboundIdentity, resolveAllowAlwaysPatternCoverage, resolveAllowAlwaysPatternEntries, resolveAllowAlwaysPatterns, resolveAllowAlwaysPersistenceDecision, resolveAllowlistCandidatePath, resolveApprovalAuditCandidatePath, resolveApprovalAuditTrustPath, resolveApprovalRequestOriginTarget, resolveApprovalRequestSessionConversation, resolveApprovalRequestSessionTarget, resolveChannelNativeApprovalDeliveryPlan, resolveCommandResolution, resolveCommandResolutionFromArgv, resolveNonNegativeIntegerOption as resolveDedupeNonNegativeInteger, resolveDiagnosticFlags, resolveEffectiveHomeDir, resolveEnvHttpProxyAgentOptions, resolveEnvHttpProxyUrl, resolveEnvNormalizationKeys, resolveExecApprovalAllowedDecisions, resolveExecApprovalCommandDisplay, resolveExecApprovalRequestAllowedDecisions, resolveExecApprovalSessionTarget, resolveExecApprovalUnavailableDecisions, resolveExecApprovals, resolveExecApprovalsDisplayPath, resolveExecApprovalsFromFile, resolveExecApprovalsPath, resolveExecApprovalsSocketPath, resolveExecApprovalsTranscriptPath, resolveExecModeFromPolicy, resolveExecModePolicy, resolveExecPolicyForMode, resolveExecutableTrustPath, resolveExecutionTargetCandidatePath, resolveExecutionTargetResolution, resolveExecutionTargetTrustPath, resolveExpiresAtMsFromDurationOrEpoch, resolveExpiresAtMsFromDurationSeconds, resolveExpiresAtMsFromEpochSeconds, resolveGlobalDedupeCache, resolveHomeRelativePath, resolveLegacyOutboundSendDepKeys, resolveLocalPathFromRootsSync, resolveOpenedFileRealPathForHandle, resolveOsHomeDir, resolveOsHomeRelativePath, resolveOutboundSendDep, resolvePinnedHostname, resolvePinnedHostnameWithPolicy, resolvePluginApprovalRequestAllowedDecisions, resolvePluginApprovalTimeoutMs, resolvePolicyAllowlistCandidatePath, resolvePolicyTargetCandidatePath, resolvePolicyTargetResolution, resolvePolicyTargetTrustPath, resolvePreferredOpenClawTmpDir, resolveRegularFileAppendFlags, resolveRequiredHomeDir, resolveRequiredOsHomeDir, resolveRetryConfig, resolveSafeBins, resolveSsrFPolicyForUrl, resolveSystemEventDeliveryContext, resolveUserPath, restoreExecApprovalsSnapshot, retainSafeHeadersForCrossOriginRedirectHeaders, retryAsync, root, safeFileURLToPath, sanitizeForPlainText, sanitizeUntrustedFileName, saveExecApprovals, type setDiagnosticsEnabledForProcess, shouldUseEnvHttpProxyForUrl, sleepWithAbort, ssrfPolicyFromAllowPrivateNetwork, ssrfPolicyFromDangerouslyAllowPrivateNetwork, ssrfPolicyFromHttpBaseUrlAllowedHostname, ssrfPolicyFromHttpBaseUrlAllowedOrigin, ssrfPolicyFromHttpBaseUrlFakeIpHostnameAllowlist, ssrfPolicyFromPrivateNetworkOptIn, statRegularFile, statRegularFileSync, stringifyNonErrorCause, toErrorObject, truncatePluginApprovalDetail, tryReadJson, tryReadJsonSync, tryReadSecretFileSync, trySafeFileURLToPath, type waitForDiagnosticEventsDrained, walkDirectory, walkDirectorySync, withFileLock, withStrictGuardedFetchMode, withTimeout, withTrustedEnvProxyGuardedFetchMode, withTrustedExplicitProxyGuardedFetchMode, writeExternalFileWithinRoot, writeFileWithinRoot, writeJson, writeJsonAtomic, writeJsonSync, writePrivateSecretFileAtomic, writeTextAtomic };