@agent-vm/agent-vm 0.0.57 → 0.0.59

package/dist/cli/commands/zone-git-definition.js

@@ -0,0 +1,46 @@
+// oxlint-disable typescript-eslint/explicit-function-return-type
+import { command, flag, subcommands } from 'cmd-ts';
+import { requireZone } from '../agent-vm-cli-support.js';
+import { runZoneGitCommand } from '../zone-git-commands.js';
+import { createConfigOption, createZoneOption, loadSystemConfigFromOption, } from './command-definition-support.js';
+function createJsonFlag() {
+    return flag({
+        long: 'json',
+        description: 'Print JSON output',
+    });
+}
+function createZoneGitCommand(action, description, io, dependencies) {
+    return command({
+        name: action,
+        description,
+        args: {
+            config: createConfigOption(),
+            json: createJsonFlag(),
+            zone: createZoneOption(),
+        },
+        handler: async ({ config, json, zone }) => {
+            const systemConfig = await loadSystemConfigFromOption(config, dependencies);
+            const selectedZone = requireZone(systemConfig, zone);
+            await runZoneGitCommand({
+                action,
+                dependencies,
+                io,
+                json,
+                systemConfig,
+                zoneId: selectedZone.id,
+            });
+        },
+    });
+}
+export function createZoneGitSubcommands(io, dependencies) {
+    return subcommands({
+        name: 'zone-git',
+        description: 'Manage OpenClaw zone Git state',
+        cmds: {
+            init: createZoneGitCommand('init', 'Initialize OpenClaw zone Git metadata', io, dependencies),
+            status: createZoneGitCommand('status', 'Show OpenClaw zone Git status', io, dependencies),
+            push: createZoneGitCommand('push', 'Push committed OpenClaw zone changes', io, dependencies),
+        },
+    });
+}
+//# sourceMappingURL=zone-git-definition.js.map

package/dist/cli/commands/zone-git-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zone-git-definition.js","sourceRoot":"","sources":["../../../src/cli/commands/zone-git-definition.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAEpD,OAAO,EAAoC,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAA6B,MAAM,yBAAyB,CAAC;AACvF,OAAO,EACN,kBAAkB,EAClB,gBAAgB,EAChB,0BAA0B,GAC1B,MAAM,iCAAiC,CAAC;AAEzC,SAAS,cAAc;IACtB,OAAO,IAAI,CAAC;QACX,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,mBAAmB;KAChC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC5B,MAA4B,EAC5B,WAAmB,EACnB,EAAS,EACT,YAA6B;IAE7B,OAAO,OAAO,CAAC;QACd,IAAI,EAAE,MAAM;QACZ,WAAW;QACX,IAAI,EAAE;YACL,MAAM,EAAE,kBAAkB,EAAE;YAC5B,IAAI,EAAE,cAAc,EAAE;YACtB,IAAI,EAAE,gBAAgB,EAAE;SACxB;QACD,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;YACzC,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YAC5E,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YACrD,MAAM,iBAAiB,CAAC;gBACvB,MAAM;gBACN,YAAY;gBACZ,EAAE;gBACF,IAAI;gBACJ,YAAY;gBACZ,MAAM,EAAE,YAAY,CAAC,EAAE;aACvB,CAAC,CAAC;QACJ,CAAC;KACD,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,EAAS,EAAE,YAA6B;IAChF,OAAO,WAAW,CAAC;QAClB,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,gCAAgC;QAC7C,IAAI,EAAE;YACL,IAAI,EAAE,oBAAoB,CAAC,MAAM,EAAE,uCAAuC,EAAE,EAAE,EAAE,YAAY,CAAC;YAC7F,MAAM,EAAE,oBAAoB,CAAC,QAAQ,EAAE,+BAA+B,EAAE,EAAE,EAAE,YAAY,CAAC;YACzF,IAAI,EAAE,oBAAoB,CAAC,MAAM,EAAE,sCAAsC,EAAE,EAAE,EAAE,YAAY,CAAC;SAC5F;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/cli/controller-operation-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controller-operation-commands.d.ts","sourceRoot":"","sources":["../../src/cli/controller-operation-commands.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AASrE,OAAO,EAEN,KAAK,eAAe,EACpB,KAAK,KAAK,EAKV,MAAM,2BAA2B,CAAC;AAEnC,UAAU,oCAAoC;IAC7C,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAChB,aAAa,GACb,SAAS,GACT,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,MAAM,GACN,SAAS,CAAC;IACb,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;CAC1C;AA4ND,wBAAsB,6BAA6B,CAClD,OAAO,EAAE,oCAAoC,GAC3C,OAAO,CAAC,IAAI,CAAC,CA6Hf"}
+{"version":3,"file":"controller-operation-commands.d.ts","sourceRoot":"","sources":["../../src/cli/controller-operation-commands.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAYrE,OAAO,EAEN,KAAK,eAAe,EACpB,KAAK,KAAK,EAKV,MAAM,2BAA2B,CAAC;AAEnC,UAAU,oCAAoC;IAC7C,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAChB,aAAa,GACb,SAAS,GACT,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,MAAM,GACN,SAAS,CAAC;IACb,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;CAC1C;AA4ND,wBAAsB,6BAA6B,CAClD,OAAO,EAAE,oCAAoC,GAC3C,OAAO,CAAC,IAAI,CAAC,CA0If"}

package/dist/cli/controller-operation-commands.js

@@ -4,10 +4,13 @@ import path from 'node:path';
 import { loadWorkerConfigDraft } from '@agent-vm/agent-vm-worker';
 import { execa } from 'execa';
 import { loadJsonConfigFile } from '../config/json-config-file.js';
+import { resolveControllerGithubToken } from '../controller/controller-runtime-support.js';
+import { isOpenClawZoneGitConfigured } from '../controller/zone-git/zone-git-paths.js';
 import { resolveZoneSecrets } from '../gateway/credential-manager.js';
 import { collectOpenClawConfigChecks, resolveProjectCheckoutPath, } from '../operations/config-validation.js';
 import { collectVmHostSystemDoctorCheck } from '../operations/doctor.js';
 import { collectOpenClawDeploymentDoctorChecks } from '../operations/openclaw-deployment-doctor.js';
+import { collectZoneGitDoctorChecks } from '../operations/zone-git-doctor.js';
 import { createResolverFromSystemConfig, readZoneFlag, requireZone, resolveControllerBaseUrl, writeJson, } from './agent-vm-cli-support.js';
 function isObjectRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
@@ -195,6 +198,14 @@ export async function runControllerOperationCommand(options) {
                 ? convertConfigValidationChecksToDoctorChecks(await collectOpenClawConfigChecks(options.systemConfig))
                 : [];
             const openClawDeploymentChecks = await collectOpenClawDeploymentDoctorChecks(options.systemConfig);
+            const hasZoneGitConfig = options.systemConfig.zones.some(isOpenClawZoneGitConfigured);
+            const controllerGithubToken = hasZoneGitConfig
+                ? await resolveControllerGithubToken(options.systemConfig, await createResolverFromSystemConfig(options.systemConfig, options.dependencies))
+                : null;
+            const zoneGitChecks = await collectZoneGitDoctorChecks({
+                githubToken: controllerGithubToken,
+                systemConfig: options.systemConfig,
+            });
             const imageProfileDockerfileChecks = await collectImageProfileDockerfileChecks(options.systemConfig, availableBinaries.has('docker') && dockerDaemonReady);
             const vmHostSystemCheck = await collectVmHostSystemDoctorCheck(options.systemConfig);
             const dynamicChecks = [
@@ -203,6 +214,7 @@ export async function runControllerOperationCommand(options) {
                 ...workerGatewayConfigChecks,
                 ...openClawConfigChecks,
                 ...openClawDeploymentChecks,
+                ...zoneGitChecks,
             ];
             const checks = [...doctorResult.checks, ...dynamicChecks];
             const failed = checks.filter((check) => !check.ok).length;
@@ -244,6 +256,7 @@ export async function runControllerOperationCommand(options) {
             const zoneId = requireZone(options.systemConfig, readZoneFlag(options.restArguments)).id;
             const secretResolver = await createResolverFromSystemConfig(options.systemConfig, options.dependencies);
             await resolveZoneSecrets({
+                audience: 'gateway',
                 secretResolver,
                 systemConfig: options.systemConfig,
                 zoneId,

package/dist/cli/controller-operation-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"controller-operation-commands.js","sourceRoot":"","sources":["../../src/cli/controller-operation-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAG9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACN,2BAA2B,EAE3B,0BAA0B,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,8BAA8B,EAAoB,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,EACN,8BAA8B,EAG9B,YAAY,EACZ,WAAW,EACX,wBAAwB,EACxB,SAAS,GACT,MAAM,2BAA2B,CAAC;AA0BnC,SAAS,cAAc,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,8BAA8B,CACtC,SAAiB,EACjB,oBAA4B,EAC5B,IAAsC,EACtC,WAAmB,EACnB,UAA8B,EAC9B,MAAsC;IAEtC,MAAM,MAAM,GAOR,EAAE,WAAW,EAAE,oBAAoB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IAChC,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,kBAA4C;IAC5E,OAAO,CACN,kBAAkB,CAAC,UAAU,KAAK,SAAS,IAAI,kBAAkB,CAAC,MAAM,EAAE,IAAI,KAAK,aAAa,CAChG,CAAC;AACH,CAAC;AAED,SAAS,8BAA8B,CACtC,kBAA4C,EAC5C,SAAiB;IAEjB,IAAI,kBAAkB,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO,kBAAkB,CAAC,UAAU,CAAC;IACtC,CAAC;IACD,IAAI,kBAAkB,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7C,OAAO,CACN,kBAAkB,CAAC,MAAM,CAAC,OAAO;YACjC,UAAU,kBAAkB,CAAC,MAAM,CAAC,IAAI,SAAS,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,CACjF,CAAC;IACH,CAAC;IACD,OAAO,uDAAuD,SAAS,EAAE,CAAC;AAC3E,CAAC;AAED,KAAK,UAAU,2BAA2B,CACzC,gBAAmC,EACnC,oBAA6B;IAE7B,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;QACvC,IAAI,CAAC;YACJ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,oGAAoG;gBACpG,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACP,oGAAoG;gBACpG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;oBAC9B,GAAG,CAAC,oBAAoB;wBACvB,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,EAAE;wBACxE,CAAC,CAAC,EAAE,CAAC;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,QAAQ;iBAChB,CAAC,CAAC;YACJ,CAAC;YACD,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACR,gCAAgC;QACjC,CAAC;IACF,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,oBAAoB,CAClC,OAAe,EACf,UAA6B;IAE7B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,iBAAsC;IAC7E,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,KAAK,UAAU,mCAAmC,CACjD,YAAgC,EAChC,mBAA4B;IAE5B,MAAM,mBAAmB,GAAwC;QAChE,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE,CACrF,8BAA8B,CAC7B,yBAAyB,WAAW,aAAa,EACjD,yBAAyB,WAAW,eAAe,EACnD,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,MAAM,CACd,CACD;QACD,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE,CACpF,8BAA8B,CAC7B,yBAAyB,WAAW,aAAa,EACjD,yBAAyB,WAAW,eAAe,EACnD,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,MAAM,CACd,CACD;KACD,CAAC;IACF,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,KAAK,MAAM,kBAAkB,IAAI,mBAAmB,EAAE,CAAC;QACtD,IAAI,WAAoB,CAAC;QACzB,IAAI,CAAC;YACJ,oGAAoG;YACpG,WAAW,GAAG,MAAM,kBAAkB,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,kBAAkB,CAAC,oBAAoB;gBAC7C,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,eAAe,kBAAkB,CAAC,WAAW,KAAK,OAAO,EAAE;aACjE,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QAED,MAAM,SAAS,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YACpE,IAAI,kBAAkB,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC5F,SAAS;YACV,CAAC;QACF,CAAC;QAED,MAAM,SAAS,GACd,cAAc,CAAC,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;YAC/D,CAAC,CAAC,SAAS,CAAC,KAAK;YACjB,CAAC,CAAC,kBAAkB,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,kBAAkB,CAAC,SAAS;YAClC,EAAE,EAAE,uBAAuB,CAAC,kBAAkB,CAAC;YAC/C,IAAI,EAAE,8BAA8B,CAAC,kBAAkB,EAAE,SAAS,CAAC;SACnE,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC9C,YAAgC;IAEhC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,SAAS;QACV,CAAC;QACD,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvF,IAAI,CAAC;YACJ,mDAAmD;YACnD,MAAM,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,iBAAiB,IAAI,CAAC,EAAE,EAAE;gBAChC,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,gBAAgB;aACtB,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,iBAAiB,IAAI,CAAC,EAAE,EAAE;gBAChC,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,OAAO;aACb,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,2CAA2C,CACnD,MAAwC;IAExC,OAAO,MAAM,CAAC,GAAG,CAChB,CAAC,KAAK,EAAE,EAAE,CACT,CAAC;QACA,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3C,CAAuB,CACzB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,OAA6C;IAE7C,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,sBAAsB,CAAC;QACpE,OAAO,EAAE,wBAAwB,CAAC,OAAO,CAAC,YAAY,CAAC;KACvD,CAAC,CAAC;IAEH,QAAQ,OAAO,CAAC,UAAU,EAAE,CAAC;QAC5B,KAAK,QAAQ,CAAC,CAAC,CAAC;YACf,MAAM,iBAAiB,GAAG,MAAM,2BAA2B,CAC1D;gBACC,qBAAqB;gBACrB,oBAAoB;gBACpB,UAAU;gBACV,QAAQ;gBACR,IAAI;gBACJ,UAAU;gBACV,QAAQ;gBACR,WAAW;gBACX,yCAAyC;gBACzC,sCAAsC;gBACtC,SAAS;gBACT,0CAA0C;gBAC1C,uCAAuC;gBACvC,MAAM;gBACN,KAAK;gBACL,UAAU;aACD,EACV,IAAI,CAAC,OAAO,CACX,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC,EACnD,IAAI,EACJ,cAAc,EACd,MAAM,CACN,CACD,CAAC;YACF,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,gCAAgC,EAAE,CAAC;YACzF,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;YAClE,MAAM,iBAAiB,GAAG,MAAM,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;YAC5E,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,mBAAmB,CAAC;gBAC7D,iBAAiB;gBACjB,iBAAiB;gBACjB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,WAAW,EAAE,OAAO,CAAC,OAAO;gBAC5B,kBAAkB;gBAClB,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrC,CAAC,CAAC;YACH,MAAM,yBAAyB,GAAG,MAAM,gCAAgC,CACvE,OAAO,CAAC,YAAY,CACpB,CAAC;YACF,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC;gBAC7D,CAAC,CAAC,2CAA2C,CAC3C,MAAM,2BAA2B,CAAC,OAAO,CAAC,YAAY,CAAC,CACvD;gBACF,CAAC,CAAC,EAAE,CAAC;YACN,MAAM,wBAAwB,GAAG,MAAM,qCAAqC,CAC3E,OAAO,CAAC,YAAY,CACpB,CAAC;YACF,MAAM,4BAA4B,GAAG,MAAM,mCAAmC,CAC7E,OAAO,CAAC,YAAY,EACpB,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,iBAAiB,CACpD,CAAC;YACF,MAAM,iBAAiB,GAAG,MAAM,8BAA8B,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACrF,MAAM,aAAa,GAAG;gBACrB,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,GAAG,4BAA4B;gBAC/B,GAAG,yBAAyB;gBAC5B,GAAG,oBAAoB;gBACvB,GAAG,wBAAwB;aACe,CAAC;YAC5C,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YACtC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE;gBACrB,EAAE,EAAE,YAAY,CAAC,EAAE,IAAI,MAAM,KAAK,CAAC;gBACnC,OAAO,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,MAAM,kBAAkB;gBACzE,MAAM;gBACN,MAAM;gBACN,MAAM;aACN,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,KAAK,QAAQ;YACZ,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,gBAAgB,CAAC,mBAAmB,EAAE,CAAC,CAAC;YACpE,OAAO;QACR,KAAK,MAAM;YACV,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,gBAAgB,CAAC,cAAc,EAAE,CAAC,CAAC;YAC/D,OAAO;QACR,KAAK,SAAS,CAAC,CAAC,CAAC;YAChB,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,SAAS,CACR,OAAO,CAAC,EAAE,EACV,MAAM,gBAAgB,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CACrF,CAAC;YACF,OAAO;QACR,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YAChB,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACb,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACpB,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CACd,8CAA8C,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,WAAW,IAAI,CACzF,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,MAAM,cAAc,GAAG,MAAM,8BAA8B,CAC1D,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,YAAY,CACpB,CAAC;YACF,MAAM,kBAAkB,CAAC;gBACxB,cAAc;gBACd,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,MAAM;aACN,CAAC,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,gBAAgB,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7E,OAAO;QACR,CAAC;IACF,CAAC;AACF,CAAC"}
+{"version":3,"file":"controller-operation-commands.js","sourceRoot":"","sources":["../../src/cli/controller-operation-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAG9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACN,2BAA2B,EAE3B,0BAA0B,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,8BAA8B,EAAoB,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EACN,8BAA8B,EAG9B,YAAY,EACZ,WAAW,EACX,wBAAwB,EACxB,SAAS,GACT,MAAM,2BAA2B,CAAC;AA0BnC,SAAS,cAAc,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,8BAA8B,CACtC,SAAiB,EACjB,oBAA4B,EAC5B,IAAsC,EACtC,WAAmB,EACnB,UAA8B,EAC9B,MAAsC;IAEtC,MAAM,MAAM,GAOR,EAAE,WAAW,EAAE,oBAAoB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IAChC,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,kBAA4C;IAC5E,OAAO,CACN,kBAAkB,CAAC,UAAU,KAAK,SAAS,IAAI,kBAAkB,CAAC,MAAM,EAAE,IAAI,KAAK,aAAa,CAChG,CAAC;AACH,CAAC;AAED,SAAS,8BAA8B,CACtC,kBAA4C,EAC5C,SAAiB;IAEjB,IAAI,kBAAkB,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO,kBAAkB,CAAC,UAAU,CAAC;IACtC,CAAC;IACD,IAAI,kBAAkB,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7C,OAAO,CACN,kBAAkB,CAAC,MAAM,CAAC,OAAO;YACjC,UAAU,kBAAkB,CAAC,MAAM,CAAC,IAAI,SAAS,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,CACjF,CAAC;IACH,CAAC;IACD,OAAO,uDAAuD,SAAS,EAAE,CAAC;AAC3E,CAAC;AAED,KAAK,UAAU,2BAA2B,CACzC,gBAAmC,EACnC,oBAA6B;IAE7B,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;QACvC,IAAI,CAAC;YACJ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,oGAAoG;gBACpG,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACP,oGAAoG;gBACpG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;oBAC9B,GAAG,CAAC,oBAAoB;wBACvB,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,EAAE;wBACxE,CAAC,CAAC,EAAE,CAAC;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,QAAQ;iBAChB,CAAC,CAAC;YACJ,CAAC;YACD,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACR,gCAAgC;QACjC,CAAC;IACF,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,oBAAoB,CAClC,OAAe,EACf,UAA6B;IAE7B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,iBAAsC;IAC7E,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,KAAK,UAAU,mCAAmC,CACjD,YAAgC,EAChC,mBAA4B;IAE5B,MAAM,mBAAmB,GAAwC;QAChE,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE,CACrF,8BAA8B,CAC7B,yBAAyB,WAAW,aAAa,EACjD,yBAAyB,WAAW,eAAe,EACnD,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,MAAM,CACd,CACD;QACD,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE,CACpF,8BAA8B,CAC7B,yBAAyB,WAAW,aAAa,EACjD,yBAAyB,WAAW,eAAe,EACnD,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,MAAM,CACd,CACD;KACD,CAAC;IACF,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,KAAK,MAAM,kBAAkB,IAAI,mBAAmB,EAAE,CAAC;QACtD,IAAI,WAAoB,CAAC;QACzB,IAAI,CAAC;YACJ,oGAAoG;YACpG,WAAW,GAAG,MAAM,kBAAkB,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,kBAAkB,CAAC,oBAAoB;gBAC7C,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,eAAe,kBAAkB,CAAC,WAAW,KAAK,OAAO,EAAE;aACjE,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QAED,MAAM,SAAS,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YACpE,IAAI,kBAAkB,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC5F,SAAS;YACV,CAAC;QACF,CAAC;QAED,MAAM,SAAS,GACd,cAAc,CAAC,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;YAC/D,CAAC,CAAC,SAAS,CAAC,KAAK;YACjB,CAAC,CAAC,kBAAkB,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,kBAAkB,CAAC,SAAS;YAClC,EAAE,EAAE,uBAAuB,CAAC,kBAAkB,CAAC;YAC/C,IAAI,EAAE,8BAA8B,CAAC,kBAAkB,EAAE,SAAS,CAAC;SACnE,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC9C,YAAgC;IAEhC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,SAAS;QACV,CAAC;QACD,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvF,IAAI,CAAC;YACJ,mDAAmD;YACnD,MAAM,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,iBAAiB,IAAI,CAAC,EAAE,EAAE;gBAChC,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,gBAAgB;aACtB,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,iBAAiB,IAAI,CAAC,EAAE,EAAE;gBAChC,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,OAAO;aACb,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,2CAA2C,CACnD,MAAwC;IAExC,OAAO,MAAM,CAAC,GAAG,CAChB,CAAC,KAAK,EAAE,EAAE,CACT,CAAC;QACA,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3C,CAAuB,CACzB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,OAA6C;IAE7C,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,sBAAsB,CAAC;QACpE,OAAO,EAAE,wBAAwB,CAAC,OAAO,CAAC,YAAY,CAAC;KACvD,CAAC,CAAC;IAEH,QAAQ,OAAO,CAAC,UAAU,EAAE,CAAC;QAC5B,KAAK,QAAQ,CAAC,CAAC,CAAC;YACf,MAAM,iBAAiB,GAAG,MAAM,2BAA2B,CAC1D;gBACC,qBAAqB;gBACrB,oBAAoB;gBACpB,UAAU;gBACV,QAAQ;gBACR,IAAI;gBACJ,UAAU;gBACV,QAAQ;gBACR,WAAW;gBACX,yCAAyC;gBACzC,sCAAsC;gBACtC,SAAS;gBACT,0CAA0C;gBAC1C,uCAAuC;gBACvC,MAAM;gBACN,KAAK;gBACL,UAAU;aACD,EACV,IAAI,CAAC,OAAO,CACX,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC,EACnD,IAAI,EACJ,cAAc,EACd,MAAM,CACN,CACD,CAAC;YACF,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,gCAAgC,EAAE,CAAC;YACzF,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;YAClE,MAAM,iBAAiB,GAAG,MAAM,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;YAC5E,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,mBAAmB,CAAC;gBAC7D,iBAAiB;gBACjB,iBAAiB;gBACjB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,WAAW,EAAE,OAAO,CAAC,OAAO;gBAC5B,kBAAkB;gBAClB,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrC,CAAC,CAAC;YACH,MAAM,yBAAyB,GAAG,MAAM,gCAAgC,CACvE,OAAO,CAAC,YAAY,CACpB,CAAC;YACF,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC;gBAC7D,CAAC,CAAC,2CAA2C,CAC3C,MAAM,2BAA2B,CAAC,OAAO,CAAC,YAAY,CAAC,CACvD;gBACF,CAAC,CAAC,EAAE,CAAC;YACN,MAAM,wBAAwB,GAAG,MAAM,qCAAqC,CAC3E,OAAO,CAAC,YAAY,CACpB,CAAC;YACF,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YACtF,MAAM,qBAAqB,GAAG,gBAAgB;gBAC7C,CAAC,CAAC,MAAM,4BAA4B,CAClC,OAAO,CAAC,YAAY,EACpB,MAAM,8BAA8B,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,CAChF;gBACF,CAAC,CAAC,IAAI,CAAC;YACR,MAAM,aAAa,GAAG,MAAM,0BAA0B,CAAC;gBACtD,WAAW,EAAE,qBAAqB;gBAClC,YAAY,EAAE,OAAO,CAAC,YAAY;aAClC,CAAC,CAAC;YACH,MAAM,4BAA4B,GAAG,MAAM,mCAAmC,CAC7E,OAAO,CAAC,YAAY,EACpB,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,iBAAiB,CACpD,CAAC;YACF,MAAM,iBAAiB,GAAG,MAAM,8BAA8B,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACrF,MAAM,aAAa,GAAG;gBACrB,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,GAAG,4BAA4B;gBAC/B,GAAG,yBAAyB;gBAC5B,GAAG,oBAAoB;gBACvB,GAAG,wBAAwB;gBAC3B,GAAG,aAAa;aAC0B,CAAC;YAC5C,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YACtC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE;gBACrB,EAAE,EAAE,YAAY,CAAC,EAAE,IAAI,MAAM,KAAK,CAAC;gBACnC,OAAO,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,MAAM,kBAAkB;gBACzE,MAAM;gBACN,MAAM;gBACN,MAAM;aACN,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,KAAK,QAAQ;YACZ,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,gBAAgB,CAAC,mBAAmB,EAAE,CAAC,CAAC;YACpE,OAAO;QACR,KAAK,MAAM;YACV,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,gBAAgB,CAAC,cAAc,EAAE,CAAC,CAAC;YAC/D,OAAO;QACR,KAAK,SAAS,CAAC,CAAC,CAAC;YAChB,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,SAAS,CACR,OAAO,CAAC,EAAE,EACV,MAAM,gBAAgB,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CACrF,CAAC;YACF,OAAO;QACR,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YAChB,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACb,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACpB,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CACd,8CAA8C,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,WAAW,IAAI,CACzF,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,MAAM,cAAc,GAAG,MAAM,8BAA8B,CAC1D,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,YAAY,CACpB,CAAC;YACF,MAAM,kBAAkB,CAAC;gBACxB,QAAQ,EAAE,SAAS;gBACnB,cAAc;gBACd,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,MAAM;aACN,CAAC,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,gBAAgB,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7E,OAAO;QACR,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/cli/init-command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init-command.d.ts","sourceRoot":"","sources":["../../src/cli/init-command.ts"],"names":[],"mappings":"AAEA,OAAO,QAAQ,MAAM,wBAAwB,CAAC;AAU9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EACN,gCAAgC,EAEhC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAkBxB,eAAO,MAAM,qBAAqB;;;EAAuC,CAAC;AAC1E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,eAAO,MAAM,uBAAuB;;;EAAgC,CAAC;AACrE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,WAAW,CAAC;AAExD,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,UAAU,kCAAkC;IAC3C,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CACpC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,KACf,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC;IACnC,QAAQ,CAAC,gCAAgC,CAAC,EAAE,OAAO,gCAAgC,CAAC;CACpF;AAED,MAAM,WAAW,+BAA+B;IAC/C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC;IAC1C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACtD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,QAAQ,CAAC,SAAS,CAAC;CAC5D;AAED,YAAY,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE/D,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,GAAG,UAAU,CAAC;AAq0B5D,wBAAgB,sBAAsB,CACrC,OAAO,EAAE,6BAA6B,EACtC,YAAY,GAAE,kCAAuC,GACnD,OAAO,CAAC,4BAA4B,CAAC,CAEvC;AAkPD;;;GAGG;AACH,wBAAsB,iCAAiC,CACtD,YAAY,GAAE,+BAAoC,GAChD,OAAO,CAAC,OAAO,CAAC,CA0ClB"}
+{"version":3,"file":"init-command.d.ts","sourceRoot":"","sources":["../../src/cli/init-command.ts"],"names":[],"mappings":"AAEA,OAAO,QAAQ,MAAM,wBAAwB,CAAC;AAc9C,OAAO,KAAK,EAAoB,WAAW,EAAc,MAAM,6BAA6B,CAAC;AAC7F,OAAO,EACN,gCAAgC,EAEhC,MAAM,4BAA4B,CAAC;AAKpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmBxB,eAAO,MAAM,qBAAqB;;;EAAuC,CAAC;AAC1E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,eAAO,MAAM,uBAAuB;;;EAAgC,CAAC;AACrE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,WAAW,CAAC;AAExD,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,UAAU,kCAAkC;IAC3C,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CACpC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,KACf,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC;IACnC,QAAQ,CAAC,gCAAgC,CAAC,EAAE,OAAO,gCAAgC,CAAC;CACpF;AAED,MAAM,WAAW,+BAA+B;IAC/C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC;IAC1C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACtD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,QAAQ,CAAC,SAAS,CAAC;CAC5D;AAED,YAAY,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE/D,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,GAAG,UAAU,CAAC;AAm+B5D,wBAAgB,sBAAsB,CACrC,OAAO,EAAE,6BAA6B,EACtC,YAAY,GAAE,kCAAuC,GACnD,OAAO,CAAC,4BAA4B,CAAC,CAEvC;AAiSD;;;GAGG;AACH,wBAAsB,iCAAiC,CACtD,YAAY,GAAE,+BAAoC,GAChD,OAAO,CAAC,OAAO,CAAC,CA0ClB"}

package/dist/cli/init-command.js

@@ -2,10 +2,13 @@ import { access, mkdir, writeFile } from 'node:fs/promises';
 import path from 'node:path';
 import readline from 'node:readline/promises';
 import { DEFAULT_COMMON_AGENT_INSTRUCTIONS, DEFAULT_PLAN_AGENT_INSTRUCTIONS, DEFAULT_PLAN_REVIEWER_INSTRUCTIONS, DEFAULT_WORK_AGENT_INSTRUCTIONS, DEFAULT_WORK_REVIEWER_INSTRUCTIONS, DEFAULT_WRAPUP_INSTRUCTIONS, } from '@agent-vm/agent-vm-worker';
+import { createConfigContractSchemaArtifacts, mcpPortalConfigSchemaPaths, } from '@agent-vm/config-contracts';
 import { resolveGondolinMinimumZigVersion, resolveGondolinPackageSpec, } from '@agent-vm/gondolin-adapter';
+import { materializedPortalToolNames, portalServerNameForAgent, } from '@agent-vm/openclaw-mcp-portal-plugin';
 import { z } from 'zod';
 import { loadJsonConfigFile } from '../config/json-config-file.js';
 import { resolveConfigPath } from '../config/path-resolver.js';
+import { createSystemConfigSchemaArtifact } from '../config/system-config.js';
 import { buildDefaultProjectNamespace } from '../runtime/project-namespace.js';
 import { getKeychainTokenSource, hasServiceAccountToken, storeServiceAccountToken, } from './keychain-credential.js';
 import { updateAgentVmManual } from './manual-commands.js';
@@ -13,7 +16,8 @@ import { renderVmHostSystemDockerfile, renderVmHostSystemReadme, renderVmHostSys
 export const secretsProviderSchema = z.enum(['1password', 'environment']);
 export const imageArchitectureSchema = z.enum(['aarch64', 'x86_64']);
 const defaultGatewayIngressPort = 18791;
-const defaultOpenClawExtensionsPath = '/home/openclaw/.openclaw/extensions';
+const defaultOpenClawExtensionsPath = '/home/openclaw/.openclaw/extensions/gondolin';
+const defaultOpenClawMcpPortalExtensionsPath = '/home/openclaw/.openclaw/extensions/mcp-portal';
 const scaffoldedGatewayPortSystemConfigSchema = z
     .object({
     zones: z.array(z.object({
@@ -32,6 +36,7 @@ const localPathProfile = {
     runtimeDir: '../runtime',
     createLocalRuntimeDirectories: true,
     gatewayConfig: (zoneId, gatewayType) => `./gateways/${zoneId}/${resolveGatewayConfigFileName(gatewayType)}`,
+    gatewayConfigDir: (zoneId) => `./gateways/${zoneId}`,
     gatewayStateDir: (zoneId) => `../state/${zoneId}`,
     gatewayZoneFilesDir: (zoneId) => `../zone-files/${zoneId}`,
     gatewayBackupDir: (zoneId) => `../backups/${zoneId}`,
@@ -45,6 +50,7 @@ const podPathProfile = {
     runtimeDir: '/var/agent-vm/runtime',
     createLocalRuntimeDirectories: false,
     gatewayConfig: (zoneId, gatewayType) => `/etc/agent-vm/gateways/${zoneId}/${resolveGatewayConfigFileName(gatewayType)}`,
+    gatewayConfigDir: (zoneId) => `/etc/agent-vm/gateways/${zoneId}`,
     gatewayStateDir: () => '/var/agent-vm/state',
     gatewayZoneFilesDir: () => '/var/agent-vm/zone-files',
     gatewayBackupDir: () => '/var/agent-vm/backups',
@@ -64,6 +70,7 @@ const userDirPathProfile = {
     runtimeDir: '~/.agent-vm/runtime',
     createLocalRuntimeDirectories: true,
     gatewayConfig: (zoneId, gatewayType) => `./gateways/${zoneId}/${resolveGatewayConfigFileName(gatewayType)}`,
+    gatewayConfigDir: (zoneId) => `./gateways/${zoneId}`,
     gatewayStateDir: (zoneId) => `~/.agent-vm/state/${zoneId}`,
     gatewayZoneFilesDir: (zoneId) => `~/.agent-vm/zone-files/${zoneId}`,
     gatewayBackupDir: (zoneId) => `~/.agent-vm-backups/${zoneId}`,
@@ -142,7 +149,9 @@ function defaultToolVmProfiles(gatewayType) {
         },
     };
 }
-const defaultSystemConfig = (zoneId, gatewayType, projectNamespace, secretsProvider, pathProfile) => ({
+const defaultSystemConfig = (zoneId, gatewayType, projectNamespace, secretsProvider, pathProfile, agentIds) => ({
+    $schema: './schemas/system.schema.json',
+    schemaVersion: 1,
     host: {
         controllerPort: 18800,
         projectNamespace,
@@ -197,12 +206,20 @@ const defaultSystemConfig = (zoneId, gatewayType, projectNamespace, secretsProvi
                 backupDir: pathProfile.gatewayBackupDir(zoneId),
             },
             secrets: defaultSecretsForGatewayType(zoneId, gatewayType, secretsProvider),
-            runtimeAuthHints: defaultRuntimeAuthHintsForGatewayType(gatewayType),
-            allowedHosts: defaultAllowedHostsForGatewayType(gatewayType),
+            ...(gatewayType === 'worker'
+                ? { runtimeAuthHints: defaultRuntimeAuthHintsForGatewayType(gatewayType) }
+                : {}),
+            egressHosts: defaultEgressHostsForGatewayType(gatewayType),
             websocketBypass: defaultWebsocketBypassForGatewayType(gatewayType),
             ...(gatewayType === 'openclaw'
                 ? { defaultToolVmProfile: 'standard', agentToolVmProfiles: {}, agentSandboxSeeds: {} }
                 : {}),
+            ...(gatewayType === 'openclaw'
+                ? {
+                    agents: (agentIds ?? []).map((agentId) => ({ id: agentId })),
+                    mcp: { configDir: pathProfile.gatewayConfigDir(zoneId) },
+                }
+                : {}),
         },
     ],
     toolVmProfiles: defaultToolVmProfiles(gatewayType),
@@ -249,6 +266,7 @@ function secretFromShape(shape, secretsProvider) {
                 source: '1password',
                 ref: shape.opRef,
                 injection: shape.injection,
+                audience: shape.audience,
                 ...hostsField,
             };
         case 'environment':
@@ -256,6 +274,7 @@ function secretFromShape(shape, secretsProvider) {
                 source: 'environment',
                 envVar: shape.envVar,
                 injection: shape.injection,
+                audience: shape.audience,
                 ...hostsField,
             };
         default:
@@ -269,12 +288,14 @@ function defaultSecretsForGatewayType(zoneId, gatewayType, secretsProvider) {
                 envVar: 'GITHUB_TOKEN',
                 opRef: 'op://agent-vm/github-token/credential',
                 injection: 'http-mediation',
+                audience: 'gateway',
                 hosts: ['api.github.com'],
             }, secretsProvider),
             OPENAI_API_KEY: secretFromShape({
                 envVar: 'OPENAI_API_KEY',
                 opRef: 'op://agent-vm/workers-openai/credential',
                 injection: 'http-mediation',
+                audience: 'gateway',
                 hosts: ['api.openai.com'],
             }, secretsProvider),
         };
@@ -284,12 +305,14 @@ function defaultSecretsForGatewayType(zoneId, gatewayType, secretsProvider) {
             envVar: 'PERPLEXITY_API_KEY',
             opRef: `op://agent-vm/${zoneId}-perplexity/credential`,
             injection: 'http-mediation',
+            audience: 'gateway',
             hosts: ['api.perplexity.ai'],
         }, secretsProvider),
         OPENCLAW_GATEWAY_TOKEN: secretFromShape({
             envVar: 'OPENCLAW_GATEWAY_TOKEN',
             opRef: `op://agent-vm/${zoneId}-gateway-auth/password`,
             injection: 'env',
+            audience: 'gateway',
         }, secretsProvider),
     };
 }
@@ -307,7 +330,7 @@ function defaultRuntimeAuthHintsForGatewayType(gatewayType) {
         },
     ];
 }
-function defaultAllowedHostsForGatewayType(gatewayType) {
+function defaultEgressHostsForGatewayType(gatewayType) {
     if (gatewayType === 'worker') {
         return [
             'api.anthropic.com',
@@ -317,7 +340,7 @@ function defaultAllowedHostsForGatewayType(gatewayType) {
             'github.com',
             'registry.npmjs.org',
             'mcp.deepwiki.com',
-        ];
+        ].map((host) => ({ host, audience: 'gateway' }));
     }
     return [
         'api.anthropic.com',
@@ -340,7 +363,7 @@ function defaultAllowedHostsForGatewayType(gatewayType) {
         'api.cohere.ai',
         'api.github.com',
         'registry.npmjs.org',
-    ];
+    ].map((host) => ({ host, audience: 'gateway' }));
 }
 function defaultWebsocketBypassForGatewayType(gatewayType) {
     if (gatewayType === 'worker') {
@@ -354,7 +377,13 @@ function envVarsForGatewayType(gatewayType, zoneId) {
         case 'worker':
             return ['GITHUB_TOKEN', 'OPENAI_API_KEY', zoneSshAccessEnvVar];
         case 'openclaw':
-            return ['GITHUB_TOKEN', 'PERPLEXITY_API_KEY', 'OPENCLAW_GATEWAY_TOKEN', zoneSshAccessEnvVar];
+            return [
+                'GITHUB_TOKEN',
+                'PERPLEXITY_API_KEY',
+                'OPENCLAW_GATEWAY_TOKEN',
+                'MCP_PORTAL_SERVER_SECRET',
+                zoneSshAccessEnvVar,
+            ];
         default: {
             const exhaustive = gatewayType;
             throw new Error(`Unhandled gateway type: ${String(exhaustive)}`);
@@ -423,6 +452,11 @@ const defaultToolBuildConfig = (architecture) => ({
 function formatAgentIdentityName(agentId) {
     return agentId.charAt(0).toUpperCase() + agentId.slice(1);
 }
+function defaultOpenClawPortalToolDenyList(agentId, agentIds) {
+    return agentIds
+        .filter((candidateAgentId) => candidateAgentId !== agentId)
+        .flatMap((candidateAgentId) => materializedPortalToolNames(portalServerNameForAgent(candidateAgentId)));
+}
 function defaultOpenClawAgentsConfig(agentIds) {
     return {
         defaults: {
@@ -442,11 +476,75 @@ function defaultOpenClawAgentsConfig(agentIds) {
                     id: agentId,
                     workspace: `/zone/agents/${agentId}`,
                     identity: { name: formatAgentIdentityName(agentId) },
+                    tools: { deny: defaultOpenClawPortalToolDenyList(agentId, agentIds) },
                 })),
             }
             : {}),
     };
 }
+function defaultOpenClawMcpPortalServers(agentIds) {
+    if (!agentIds || agentIds.length === 0) {
+        return {};
+    }
+    return Object.fromEntries(agentIds.map((agentId) => {
+        const serverName = portalServerNameForAgent(agentId);
+        return [
+            serverName,
+            {
+                transport: 'streamable-http',
+                url: `http://127.0.0.1:18790/agents/${encodeURIComponent(agentId)}/mcp`,
+                headers: {
+                    'x-agent-vm-mcp-portal-secret': '${MCP_PORTAL_SERVER_SECRET}',
+                },
+            },
+        ];
+    }));
+}
+function defaultMcpProviderConfig() {
+    return {
+        $schema: mcpPortalConfigSchemaPaths.mcpFromGatewayConfig,
+        schemaVersion: 1,
+        providers: {},
+    };
+}
+function defaultMcpPortalAgentAssignments(agentIds) {
+    if (!agentIds || agentIds.length === 0) {
+        return {};
+    }
+    return Object.fromEntries(agentIds.map((agentId) => [agentId, { profile: 'default' }]));
+}
+function defaultMcpPortalConfig(agentIds) {
+    return {
+        $schema: mcpPortalConfigSchemaPaths.mcpPortalFromGatewayConfig,
+        schemaVersion: 1,
+        server: {
+            host: '127.0.0.1',
+            port: 18790,
+            accessHeader: {
+                name: 'x-agent-vm-mcp-portal-secret',
+                secret: { source: 'environment', name: 'MCP_PORTAL_SERVER_SECRET' },
+            },
+        },
+        agents: defaultMcpPortalAgentAssignments(agentIds),
+        profiles: {
+            default: {
+                enabledNamespaces: [],
+                enabledToolsByNamespace: {},
+                hiddenToolsByNamespace: {},
+                approval: {
+                    allowWithoutApprovalTools: [],
+                    alwaysAskTools: [],
+                    annotationPolicy: 'destructive-requires-approval',
+                    trustedAnnotationNamespaces: [],
+                    writeTools: [],
+                },
+                promptContext: { enabled: true, maxNamespaces: 12 },
+                cache: { catalogTtlMs: 60_000 },
+                logging: { enabled: false },
+            },
+        },
+    };
+}
 const defaultOpenClawConfig = (zoneId, gatewayIngressPort, agentIds) => ({
     gateway: {
         auth: { mode: 'token' },
@@ -461,7 +559,11 @@ const defaultOpenClawConfig = (zoneId, gatewayIngressPort, agentIds) => ({
         port: 18789,
     },
     agents: defaultOpenClawAgentsConfig(agentIds),
+    mcp: {
+        servers: defaultOpenClawMcpPortalServers(agentIds),
+    },
     tools: {
+        allow: ['zone_git_push'],
         elevated: { enabled: false },
         sandbox: {
             tools: {
@@ -481,9 +583,9 @@ const defaultOpenClawConfig = (zoneId, gatewayIngressPort, agentIds) => ({
     session: { dmScope: 'per-channel-peer' },
     plugins: {
         load: {
-            paths: [defaultOpenClawExtensionsPath, '/pnpm/global/5/node_modules/@openclaw'],
+            paths: [defaultOpenClawExtensionsPath, defaultOpenClawMcpPortalExtensionsPath],
         },
-        allow: ['gondolin', 'memory-core'],
+        allow: ['gondolin', 'memory-core', 'mcp-portal'],
         slots: { memory: 'memory-core' },
         entries: {
             gondolin: {
@@ -496,6 +598,10 @@ const defaultOpenClawConfig = (zoneId, gatewayIngressPort, agentIds) => ({
             'memory-core': {
                 enabled: true,
             },
+            'mcp-portal': {
+                enabled: true,
+                hooks: { allowPromptInjection: true },
+            },
         },
     },
     channels: {},
@@ -523,6 +629,9 @@ async function resolveOpenClawControlUiIngressPort(systemConfigPath, zoneId) {
 function formatJsoncConfig(comment, value) {
     return `// ${comment}\n${JSON.stringify(value, null, '\t')}\n`;
 }
+function formatJsonSchemaArtifact(value) {
+    return `${JSON.stringify(value, null, '\t')}\n`;
+}
 function formatAuthoredConfig(filePath, comment, value) {
     if (filePath.endsWith('.jsonc')) {
         return formatJsoncConfig(comment, value);
@@ -542,6 +651,24 @@ async function resolveScaffoldSystemConfigPath(configDir) {
     }
     return path.join(configDir, 'system.jsonc');
 }
+async function writeConfigSchemaArtifacts(options) {
+    const contractSchemas = createConfigContractSchemaArtifacts();
+    const schemas = {
+        'system.schema.json': createSystemConfigSchemaArtifact(),
+        'mcp.schema.json': contractSchemas.mcp,
+        'mcp-portal.schema.json': contractSchemas.mcpPortal,
+    };
+    const schemaWriteResults = await Promise.all(Object.entries(schemas).map(async ([fileName, schema]) => {
+        const schemaPath = path.join(options.configDir, 'schemas', fileName);
+        return {
+            schemaPath,
+            status: await writeFileIfMissing(schemaPath, formatJsonSchemaArtifact(schema), options.overwrite),
+        };
+    }));
+    for (const { schemaPath, status } of schemaWriteResults) {
+        (status === 'created' ? options.created : options.skipped).push(path.relative(options.targetDir, schemaPath));
+    }
+}
 const defaultWorkerPromptFiles = [
     { fileName: 'common-agent-instructions.md', content: DEFAULT_COMMON_AGENT_INSTRUCTIONS },
     { fileName: 'plan-agent.md', content: DEFAULT_PLAN_AGENT_INSTRUCTIONS },
@@ -634,8 +761,15 @@ async function scaffoldAgentVmProjectInternal(options, dependencies = {}) {
     const configWritablePathProfile = resolveConfigWritablePathProfile(pathProfile, configDir, homeDir);
     const systemConfigPath = await resolveScaffoldSystemConfigPath(configDir);
     const systemConfigRelativePath = path.relative(options.targetDir, systemConfigPath);
-    const systemConfigStatus = await writeFileIfMissing(systemConfigPath, formatAuthoredConfig(systemConfigPath, 'Human-authored agent-vm system config. Comments are allowed here; runtime effective files stay strict JSON.', defaultSystemConfig(options.zoneId, gatewayType, projectNamespace, options.secretsProvider, configWritablePathProfile)), overwrite);
+    const systemConfigStatus = await writeFileIfMissing(systemConfigPath, formatAuthoredConfig(systemConfigPath, 'Human-authored agent-vm system config. Comments are allowed here; runtime effective files stay strict JSON.', defaultSystemConfig(options.zoneId, gatewayType, projectNamespace, options.secretsProvider, configWritablePathProfile, options.agents)), overwrite);
     (systemConfigStatus === 'created' ? created : skipped).push(systemConfigRelativePath);
+    await writeConfigSchemaArtifacts({
+        configDir,
+        created,
+        overwrite,
+        skipped,
+        targetDir: options.targetDir,
+    });
     if (options.writeLocalEnvironmentFile) {
         const envFilePath = path.join(options.targetDir, '.env.local');
         const envFileStatus = await writeFileIfMissing(envFilePath, defaultEnvTemplate(gatewayType, options.secretsProvider, options.zoneId), overwrite);
@@ -647,6 +781,14 @@ async function scaffoldAgentVmProjectInternal(options, dependencies = {}) {
         ? `${JSON.stringify(defaultOpenClawConfig(options.zoneId, await resolveOpenClawControlUiIngressPort(systemConfigPath, options.zoneId), options.agents), null, '\t')}\n`
         : formatJsoncConfig('Human-authored Agent Worker gateway config. Comments are allowed here; /state/effective-worker.json stays strict JSON.', defaultWorkerGatewayConfig()), overwrite);
     (configStatus === 'created' ? created : skipped).push(`config/gateways/${options.zoneId}/${configFileName}`);
+    if (gatewayType === 'openclaw') {
+        const mcpConfigPath = path.join(options.targetDir, 'config', 'gateways', options.zoneId, 'mcp.config.jsonc');
+        const mcpConfigStatus = await writeFileIfMissing(mcpConfigPath, formatJsoncConfig('Human-authored upstream MCP provider catalog for the MCP Portal.', defaultMcpProviderConfig()), overwrite);
+        (mcpConfigStatus === 'created' ? created : skipped).push(`config/gateways/${options.zoneId}/mcp.config.jsonc`);
+        const mcpPortalConfigPath = path.join(options.targetDir, 'config', 'gateways', options.zoneId, 'mcp-portal.config.jsonc');
+        const mcpPortalConfigStatus = await writeFileIfMissing(mcpPortalConfigPath, formatJsoncConfig('Human-authored MCP Portal agent/profile policy config.', defaultMcpPortalConfig(options.agents)), overwrite);
+        (mcpPortalConfigStatus === 'created' ? created : skipped).push(`config/gateways/${options.zoneId}/mcp-portal.config.jsonc`);
+    }
     if (gatewayType === 'worker') {
         const promptFileResults = await Promise.all(defaultWorkerPromptFiles.map(async (promptFile) => {
             const promptFilePath = path.join(options.targetDir, 'config', 'gateways', options.zoneId, 'prompts', promptFile.fileName);