@agent-vm/agent-vm 0.0.64 → 0.0.65

package/dist/cli/codex-harness-auth-command.d.ts

@@ -0,0 +1,11 @@
+import { type SystemConfig } from '../config/system-config.js';
+import { type CliDependencies, type CliIo } from './agent-vm-cli-support.js';
+export declare function runCodexHarnessAuthCommand(options: {
+    readonly agentId?: string;
+    readonly allAgents: boolean;
+    readonly dependencies: Pick<CliDependencies, 'createControllerClient' | 'createSecretResolver' | 'resolveServiceAccountToken' | 'runInteractiveProcess'>;
+    readonly io: CliIo;
+    readonly systemConfig: SystemConfig;
+    readonly zone: SystemConfig['zones'][number];
+}): Promise<void>;
+//# sourceMappingURL=codex-harness-auth-command.d.ts.map

package/dist/cli/codex-harness-auth-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-harness-auth-command.d.ts","sourceRoot":"","sources":["../../src/cli/codex-harness-auth-command.ts"],"names":[],"mappings":"AAEA,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EACN,KAAK,eAAe,EACpB,KAAK,KAAK,EAEV,MAAM,2BAA2B,CAAC;AA0NnC,wBAAsB,0BAA0B,CAAC,OAAO,EAAE;IACzD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,IAAI,CAC1B,eAAe,EACb,wBAAwB,GACxB,sBAAsB,GACtB,4BAA4B,GAC5B,uBAAuB,CACzB,CAAC;IACF,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;CAC7C,GAAG,OAAO,CAAC,IAAI,CAAC,CAyDhB"}

package/dist/cli/codex-harness-auth-command.js

@@ -0,0 +1,242 @@
+import { execa } from 'execa';
+import { agentIdSchema } from '../config/system-config.js';
+import { resolveControllerBaseUrl, } from './agent-vm-cli-support.js';
+import { formatZodError } from './format-zod-error.js';
+import { shellQuote, wrapWithOpenClawShellEnvironment } from './openclaw-shell-prefix.js';
+import { resolveZoneAdminToken, zoneSshAccessResponseSchema, } from './ssh-commands.js';
+function buildCodexHarnessAuthRemoteCommand(agentId) {
+    const script = [
+        'set -euo pipefail',
+        `agent_id=${shellQuote(agentId)}`,
+        'state_dir="${OPENCLAW_STATE_DIR:-/home/openclaw/.openclaw/state}"',
+        'agent_dir="$state_dir/agents/$agent_id/agent"',
+        'codex_home="$agent_dir/codex-home"',
+        'auth_json="$codex_home/auth.json"',
+        'mkdir -p "$agent_dir" "$codex_home"',
+        'if ! chmod 700 "$agent_dir" "$codex_home"; then',
+        '  echo "WARNING: could not chmod 700 $agent_dir and $codex_home; auth.json contains a refresh token." >&2',
+        'fi',
+        'codex_binary="$(command -v codex || true)"',
+        'if [ -z "$codex_binary" ]; then',
+        '  codex_js="$({',
+        '    if command -v pnpm >/dev/null 2>&1; then pnpm root -g 2>/dev/null || true; fi',
+        '    if command -v npm >/dev/null 2>&1; then npm root -g 2>/dev/null || true; fi',
+        '    printf "%s\\n" /usr/local/lib/node_modules',
+        '  } | while IFS= read -r search_root; do',
+        '    [ -n "$search_root" ] || continue',
+        '    [ -d "$search_root" ] || continue',
+        '    find "$search_root" -path \'*/node_modules/@openai/codex/bin/codex.js\' -type f -print -quit',
+        '  done)"',
+        '  if [ -z "$codex_js" ]; then',
+        '    echo "Could not locate the Codex CLI binary in PATH or pnpm global install paths." >&2',
+        '    echo "Install @openai/codex in the OpenClaw gateway image, or add it to the gateway overlay extraOpenClawPackages before running auth codex-harness." >&2',
+        '    exit 127',
+        '  fi',
+        '  codex_binary="node $codex_js"',
+        'fi',
+        'echo "Starting native Codex CLI login for agent: $agent_id"',
+        'echo "CODEX_HOME=$codex_home"',
+        'if [ "${codex_binary#node }" != "$codex_binary" ]; then',
+        '  codex_js="${codex_binary#node }"',
+        '  CODEX_HOME="$codex_home" node "$codex_js" login --device-auth',
+        'else',
+        '  CODEX_HOME="$codex_home" "$codex_binary" login --device-auth',
+        'fi',
+        'if [ ! -f "$auth_json" ]; then',
+        '  echo "Codex login did not create auth.json at $auth_json." >&2',
+        '  exit 1',
+        'fi',
+        'auth_mtime="$(stat -c "%y" "$auth_json" 2>/dev/null || true)"',
+        'if [ -z "$auth_mtime" ]; then',
+        '  auth_mtime="$(date -r "$auth_json" "+%Y-%m-%dT%H:%M:%S%z" 2>/dev/null || true)"',
+        'fi',
+        'if [ -z "$auth_mtime" ]; then',
+        '  echo "WARNING: could not stat auth.json mtime at $auth_json." >&2',
+        '  auth_mtime="unknown"',
+        'fi',
+        'profile_file="$agent_dir/auth-profiles.json"',
+        'profile_count="unknown"',
+        'if command -v node >/dev/null 2>&1; then',
+        '  profile_count="$(node - "$profile_file" <<\'NODE\'',
+        'const fs = require("node:fs");',
+        'const profileFile = process.argv[2];',
+        'try {',
+        '  if (!fs.existsSync(profileFile)) {',
+        '    console.log("0");',
+        '    process.exit(0);',
+        '  }',
+        '  const parsed = JSON.parse(fs.readFileSync(profileFile, "utf8"));',
+        '  const profiles = Object.values(parsed.profiles ?? {});',
+        '  console.log(profiles.filter((profile) => profile && typeof profile === "object" && profile.provider === "openai-codex").length);',
+        '} catch (error) {',
+        '  console.error(`WARNING: Could not read OpenClaw auth profile count from ${profileFile}: ${error instanceof Error ? error.message : String(error)}`);',
+        '  console.log("unknown");',
+        '}',
+        'NODE',
+        '  )"',
+        'else',
+        '  echo "WARNING: node is unavailable; skipping OpenClaw auth profile count." >&2',
+        'fi',
+        'echo "Codex auth post-check:"',
+        'echo "  auth.json: present"',
+        'echo "  auth.json mtime: $auth_mtime"',
+        'echo "  openai-codex profiles: $profile_count"',
+        'legacy_main="$state_dir/agents/main/agent/auth-profiles.json"',
+        'if [ -f "$legacy_main" ]; then',
+        '  echo "WARNING: $legacy_main exists. If main is not an intentionally configured agent/global auth profile, it may shadow per-agent OpenClaw auth profiles." >&2',
+        'fi',
+        'if [ -d "$state_dir/agents" ]; then',
+        '  if command -v node >/dev/null 2>&1; then',
+        '    if ! node - "$auth_json" "$state_dir/agents" <<\'NODE\'',
+        'const fs = require("node:fs");',
+        'const path = require("node:path");',
+        'const currentAuthPath = process.argv[2];',
+        'const agentsDir = process.argv[3];',
+        'function warning(message) {',
+        '  console.error(`WARNING: ${message}`);',
+        '}',
+        'function readRefreshToken(authPath) {',
+        '  try {',
+        '    const parsed = JSON.parse(fs.readFileSync(authPath, "utf8"));',
+        '    return typeof parsed.refresh_token === "string" && parsed.refresh_token.trim() ? parsed.refresh_token : undefined;',
+        '  } catch (error) {',
+        '    warning(`could not read Codex auth token metadata from ${authPath}: ${error instanceof Error ? error.message : String(error)}`);',
+        '    return undefined;',
+        '  }',
+        '}',
+        'function findAuthFiles(rootDir) {',
+        '  const matches = [];',
+        '  const pending = [rootDir];',
+        '  while (pending.length > 0) {',
+        '    const currentDir = pending.pop();',
+        '    if (!currentDir) {',
+        '      continue;',
+        '    }',
+        '    for (const entry of fs.readdirSync(currentDir, { withFileTypes: true })) {',
+        '      const entryPath = path.join(currentDir, entry.name);',
+        '      if (entry.isDirectory()) {',
+        '        pending.push(entryPath);',
+        '        continue;',
+        '      }',
+        '      if (entry.isFile() && entryPath.split(path.sep).slice(-3).join("/") === "agent/codex-home/auth.json") {',
+        '        matches.push(entryPath);',
+        '      }',
+        '    }',
+        '  }',
+        '  return matches;',
+        '}',
+        'let currentAuthBytes;',
+        'try {',
+        '  currentAuthBytes = fs.readFileSync(currentAuthPath);',
+        '} catch (error) {',
+        '  warning(`could not compare current Codex auth bytes from ${currentAuthPath}: ${error instanceof Error ? error.message : String(error)}`);',
+        '  currentAuthBytes = undefined;',
+        '}',
+        'const currentRefreshToken = readRefreshToken(currentAuthPath);',
+        'for (const otherAuthPath of findAuthFiles(agentsDir)) {',
+        '  if (otherAuthPath === currentAuthPath) {',
+        '    continue;',
+        '  }',
+        '  let byteIdentical = false;',
+        '  try {',
+        '    byteIdentical = Boolean(currentAuthBytes?.equals(fs.readFileSync(otherAuthPath)));',
+        '  } catch (error) {',
+        '    warning(`could not compare Codex auth bytes between ${currentAuthPath} and ${otherAuthPath}: ${error instanceof Error ? error.message : String(error)}`);',
+        '    byteIdentical = false;',
+        '  }',
+        '  const otherRefreshToken = readRefreshToken(otherAuthPath);',
+        '  if (currentRefreshToken && otherRefreshToken === currentRefreshToken) {',
+        '    console.error(`WARNING: ${currentAuthPath} and ${otherAuthPath} share a Codex refresh token; shared refresh tokens rotate badly across agents.`);',
+        '  } else if (byteIdentical) {',
+        '    console.error(`WARNING: ${currentAuthPath} is byte-identical to ${otherAuthPath}; shared Codex refresh tokens rotate badly across agents.`);',
+        '  }',
+        '}',
+        'NODE',
+        '    then',
+        '      echo "WARNING: shared-refresh-token diagnostic failed." >&2',
+        '    fi',
+        '  else',
+        '    while IFS= read -r other_auth; do',
+        '      if [ "$other_auth" != "$auth_json" ] && cmp -s "$auth_json" "$other_auth"; then',
+        '        echo "WARNING: $auth_json is byte-identical to $other_auth; shared Codex refresh tokens rotate badly across agents." >&2',
+        '      fi',
+        '    done < <(find "$state_dir/agents" -path \'*/agent/codex-home/auth.json\' -type f 2>/dev/null)',
+        '  fi',
+        'fi',
+    ].join('\n');
+    return wrapWithOpenClawShellEnvironment(script);
+}
+function buildSshArguments(sshResponse, remoteCommand) {
+    if (!sshResponse.host || !sshResponse.port) {
+        throw new Error('Controller returned incomplete SSH access details.');
+    }
+    return [
+        '-t',
+        '-o',
+        'StrictHostKeyChecking=no',
+        '-o',
+        'UserKnownHostsFile=/dev/null',
+        ...(sshResponse.identityFile ? ['-i', sshResponse.identityFile] : []),
+        '-p',
+        String(sshResponse.port),
+        `${sshResponse.user ?? 'root'}@${sshResponse.host}`,
+        remoteCommand,
+    ];
+}
+function resolveTargetAgentIds(options) {
+    if (options.agentId && options.allAgents) {
+        throw new Error('Use either --agent or --all-agents, not both.');
+    }
+    if (options.agentId) {
+        return [agentIdSchema.parse(options.agentId)];
+    }
+    if (!options.allAgents) {
+        throw new Error('auth codex-harness requires --agent <agentId> or --all-agents.');
+    }
+    const agentIds = (options.zone.agents ?? []).map((agent) => agent.id);
+    if (agentIds.length === 0) {
+        throw new Error(`Zone '${options.zone.id}' has no configured agents; use --agent <agentId> for a one-off login.`);
+    }
+    return agentIds;
+}
+export async function runCodexHarnessAuthCommand(options) {
+    if (options.zone.gateway.type !== 'openclaw') {
+        throw new Error(`auth codex-harness requires an OpenClaw zone, got '${options.zone.gateway.type}'.`);
+    }
+    const agentIds = resolveTargetAgentIds({
+        agentId: options.agentId,
+        allAgents: options.allAgents,
+        zone: options.zone,
+    });
+    const controllerClient = options.dependencies.createControllerClient({
+        baseUrl: resolveControllerBaseUrl(options.systemConfig),
+    });
+    const adminToken = await resolveZoneAdminToken({
+        dependencies: options.dependencies,
+        systemConfig: options.systemConfig,
+        zone: options.zone,
+    });
+    const parsedSshResponse = zoneSshAccessResponseSchema.safeParse(await controllerClient.enableZoneSsh(options.zone.id, {
+        ...(adminToken ? { adminToken } : {}),
+        secretEnv: 'default',
+    }));
+    if (!parsedSshResponse.success) {
+        throw new Error(formatZodError('Controller returned an invalid SSH response:', parsedSshResponse.error), { cause: parsedSshResponse.error });
+    }
+    const sshResponse = parsedSshResponse.data;
+    const runInteractiveProcess = options.dependencies.runInteractiveProcess ??
+        (async (command, arguments_) => {
+            await execa(command, arguments_, { stdio: 'inherit' });
+        });
+    for (const agentId of agentIds) {
+        options.io.stdout.write(`Opening native Codex login for zone '${options.zone.id}' agent '${agentId}'.\n`);
+        try {
+            // oxlint-disable-next-line no-await-in-loop -- device-auth flows are intentionally interactive and must run one agent at a time
+            await runInteractiveProcess('ssh', buildSshArguments(sshResponse, buildCodexHarnessAuthRemoteCommand(agentId)));
+        }
+        catch (error) {
+            throw new Error(`Codex login failed for zone '${options.zone.id}' agent '${agentId}': ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+        }
+    }
+}
+//# sourceMappingURL=codex-harness-auth-command.js.map

package/dist/cli/codex-harness-auth-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-harness-auth-command.js","sourceRoot":"","sources":["../../src/cli/codex-harness-auth-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAE9B,OAAO,EAAE,aAAa,EAAqB,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAGN,wBAAwB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAC1F,OAAO,EACN,qBAAqB,EACrB,2BAA2B,GAE3B,MAAM,mBAAmB,CAAC;AAE3B,SAAS,kCAAkC,CAAC,OAAe;IAC1D,MAAM,MAAM,GAAG;QACd,mBAAmB;QACnB,YAAY,UAAU,CAAC,OAAO,CAAC,EAAE;QACjC,mEAAmE;QACnE,+CAA+C;QAC/C,oCAAoC;QACpC,mCAAmC;QACnC,qCAAqC;QACrC,iDAAiD;QACjD,2GAA2G;QAC3G,IAAI;QACJ,4CAA4C;QAC5C,iCAAiC;QACjC,iBAAiB;QACjB,mFAAmF;QACnF,iFAAiF;QACjF,gDAAgD;QAChD,0CAA0C;QAC1C,uCAAuC;QACvC,uCAAuC;QACvC,kGAAkG;QAClG,UAAU;QACV,+BAA+B;QAC/B,4FAA4F;QAC5F,+JAA+J;QAC/J,cAAc;QACd,MAAM;QACN,iCAAiC;QACjC,IAAI;QACJ,6DAA6D;QAC7D,+BAA+B;QAC/B,yDAAyD;QACzD,oCAAoC;QACpC,iEAAiE;QACjE,MAAM;QACN,gEAAgE;QAChE,IAAI;QACJ,gCAAgC;QAChC,kEAAkE;QAClE,UAAU;QACV,IAAI;QACJ,+DAA+D;QAC/D,+BAA+B;QAC/B,mFAAmF;QACnF,IAAI;QACJ,+BAA+B;QAC/B,qEAAqE;QACrE,wBAAwB;QACxB,IAAI;QACJ,8CAA8C;QAC9C,yBAAyB;QACzB,0CAA0C;QAC1C,sDAAsD;QACtD,gCAAgC;QAChC,sCAAsC;QACtC,OAAO;QACP,sCAAsC;QACtC,uBAAuB;QACvB,sBAAsB;QACtB,KAAK;QACL,oEAAoE;QACpE,0DAA0D;QAC1D,oIAAoI;QACpI,mBAAmB;QACnB,wJAAwJ;QACxJ,2BAA2B;QAC3B,GAAG;QACH,MAAM;QACN,MAAM;QACN,MAAM;QACN,kFAAkF;QAClF,IAAI;QACJ,+BAA+B;QAC/B,6BAA6B;QAC7B,uCAAuC;QACvC,gDAAgD;QAChD,+DAA+D;QAC/D,gCAAgC;QAChC,kKAAkK;QAClK,IAAI;QACJ,qCAAqC;QACrC,4CAA4C;QAC5C,6DAA6D;QAC7D,gCAAgC;QAChC,oCAAoC;QACpC,0CAA0C;QAC1C,oCAAoC;QACpC,6BAA6B;QAC7B,yCAAyC;QACzC,GAAG;QACH,uCAAuC;QACvC,SAAS;QACT,mEAAmE;QACnE,wHAAwH;QACxH,qBAAqB;QACrB,sIAAsI;QACtI,uBAAuB;QACvB,KAAK;QACL,GAAG;QACH,mCAAmC;QACnC,uBAAuB;QACvB,8BAA8B;QAC9B,gCAAgC;QAChC,uCAAuC;QACvC,wBAAwB;QACxB,iBAAiB;QACjB,OAAO;QACP,gFAAgF;QAChF,4DAA4D;QAC5D,kCAAkC;QAClC,kCAAkC;QAClC,mBAAmB;QACnB,SAAS;QACT,+GAA+G;QAC/G,kCAAkC;QAClC,SAAS;QACT,OAAO;QACP,KAAK;QACL,mBAAmB;QACnB,GAAG;QACH,uBAAuB;QACvB,OAAO;QACP,wDAAwD;QACxD,mBAAmB;QACnB,6IAA6I;QAC7I,iCAAiC;QACjC,GAAG;QACH,gEAAgE;QAChE,yDAAyD;QACzD,4CAA4C;QAC5C,eAAe;QACf,KAAK;QACL,8BAA8B;QAC9B,SAAS;QACT,wFAAwF;QACxF,qBAAqB;QACrB,+JAA+J;QAC/J,4BAA4B;QAC5B,KAAK;QACL,8DAA8D;QAC9D,2EAA2E;QAC3E,uJAAuJ;QACvJ,+BAA+B;QAC/B,kJAAkJ;QAClJ,KAAK;QACL,GAAG;QACH,MAAM;QACN,UAAU;QACV,mEAAmE;QACnE,QAAQ;QACR,QAAQ;QACR,uCAAuC;QACvC,uFAAuF;QACvF,kIAAkI;QAClI,UAAU;QACV,mGAAmG;QACnG,MAAM;QACN,IAAI;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,gCAAgC,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,iBAAiB,CACzB,WAAkC,EAClC,aAAqB;IAErB,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IAED,OAAO;QACN,IAAI;QACJ,IAAI;QACJ,0BAA0B;QAC1B,IAAI;QACJ,8BAA8B;QAC9B,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,IAAI;QACJ,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;QACxB,GAAG,WAAW,CAAC,IAAI,IAAI,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE;QACnD,aAAa;KACb,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAI9B;IACA,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACd,SAAS,OAAO,CAAC,IAAI,CAAC,EAAE,wEAAwE,CAChG,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAahD;IACA,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACd,sDAAsD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CACnF,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC;QACtC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;KAClB,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,sBAAsB,CAAC;QACpE,OAAO,EAAE,wBAAwB,CAAC,OAAO,CAAC,YAAY,CAAC;KACvD,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC;QAC9C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,IAAI,EAAE,OAAO,CAAC,IAAI;KAClB,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,2BAA2B,CAAC,SAAS,CAC9D,MAAM,gBAAgB,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE;QACrD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,SAAS,EAAE,SAAS;KACpB,CAAC,CACF,CAAC;IACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACd,cAAc,CAAC,8CAA8C,EAAE,iBAAiB,CAAC,KAAK,CAAC,EACvF,EAAE,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,CAClC,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC;IAE3C,MAAM,qBAAqB,GAC1B,OAAO,CAAC,YAAY,CAAC,qBAAqB;QAC1C,CAAC,KAAK,EAAE,OAAe,EAAE,UAA6B,EAAiB,EAAE;YACxE,MAAM,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IAEJ,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CACtB,wCAAwC,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,OAAO,MAAM,CAChF,CAAC;QACF,IAAI,CAAC;YACJ,gIAAgI;YAChI,MAAM,qBAAqB,CAC1B,KAAK,EACL,iBAAiB,CAAC,WAAW,EAAE,kCAAkC,CAAC,OAAO,CAAC,CAAC,CAC3E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACd,gCAAgC,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,OAAO,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAChI,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;QACH,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/cli/commands/auth-definition.d.ts

@@ -0,0 +1,53 @@
+import { type CliDependencies, type CliIo } from '../agent-vm-cli-support.js';
+export declare function createAuthSubcommands(io: CliIo, dependencies: CliDependencies): Partial<import("cmd-ts/dist/cjs/argparser.js").Register> & {
+    parse(context: import("cmd-ts/dist/cjs/argparser.js").ParseContext): Promise<import("cmd-ts/dist/cjs/argparser.js").ParsingResult<{
+        command: "openclaw";
+        args: {
+            config: string | undefined;
+            deviceCode: boolean;
+            provider: string;
+            setDefault: boolean;
+            zone: string | undefined;
+        };
+    } | {
+        command: "codex-harness";
+        args: {
+            agent: string | undefined;
+            allAgents: boolean;
+            config: string | undefined;
+            zone: string | undefined;
+        };
+    }>>;
+} & import("cmd-ts/dist/cjs/helpdoc.js").Named & Partial<import("cmd-ts/dist/cjs/helpdoc.js").Descriptive & import("cmd-ts/dist/cjs/helpdoc.js").Versioned> & import("cmd-ts/dist/cjs/helpdoc.js").PrintHelp & Partial<import("cmd-ts/dist/cjs/helpdoc.js").Versioned> & import("cmd-ts/dist/cjs/argparser.js").Register & import("cmd-ts/dist/cjs/runner.js").Handling<{
+    command: "openclaw";
+    args: {
+        config: string | undefined;
+        deviceCode: boolean;
+        provider: string;
+        setDefault: boolean;
+        zone: string | undefined;
+    };
+} | {
+    command: "codex-harness";
+    args: {
+        agent: string | undefined;
+        allAgents: boolean;
+        config: string | undefined;
+        zone: string | undefined;
+    };
+}, {
+    command: "openclaw";
+    value: Promise<void>;
+} | {
+    command: "codex-harness";
+    value: Promise<void>;
+}> & {
+    run(context: import("cmd-ts/dist/cjs/argparser.js").ParseContext): Promise<import("cmd-ts/dist/cjs/argparser.js").ParsingResult<{
+        command: "openclaw";
+        value: Promise<void>;
+    } | {
+        command: "codex-harness";
+        value: Promise<void>;
+    }>>;
+};
+//# sourceMappingURL=auth-definition.d.ts.map

package/dist/cli/commands/auth-definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-definition.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/auth-definition.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,KAAK,EAAe,MAAM,4BAA4B,CAAC;AAS3F,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyE7E"}

package/dist/cli/commands/auth-definition.js

@@ -0,0 +1,81 @@
+// oxlint-disable typescript-eslint/explicit-function-return-type
+import { command, flag, option, optional, positional, string, subcommands } from 'cmd-ts';
+import { loadGatewayLifecycle } from '../../gateway/gateway-lifecycle-loader.js';
+import { requireZone } from '../agent-vm-cli-support.js';
+import { runCodexHarnessAuthCommand } from '../codex-harness-auth-command.js';
+import { runOpenClawAuthCommand } from '../openclaw-auth-command.js';
+import { createConfigOption, createZoneOption, loadSystemConfigFromOption, } from './command-definition-support.js';
+export function createAuthSubcommands(io, dependencies) {
+    return subcommands({
+        name: 'auth',
+        description: 'Manage gateway auth.',
+        cmds: {
+            openclaw: command({
+                name: 'openclaw',
+                description: 'Run OpenClaw-managed provider auth for a gateway zone.',
+                args: {
+                    config: createConfigOption(),
+                    deviceCode: flag({
+                        long: 'device-code',
+                        description: 'Use the provider device-code flow instead of browser callback auth.',
+                    }),
+                    provider: positional({
+                        displayName: 'provider',
+                        type: string,
+                        description: 'Provider name (for example: openai).',
+                    }),
+                    setDefault: flag({
+                        long: 'set-default',
+                        description: 'Set the provider as the default model auth target after login.',
+                    }),
+                    zone: createZoneOption(),
+                },
+                handler: async ({ config, deviceCode, provider, setDefault, zone }) => {
+                    const systemConfig = await loadSystemConfigFromOption(config, dependencies);
+                    const selectedZone = requireZone(systemConfig, zone);
+                    const lifecycle = loadGatewayLifecycle(selectedZone.gateway.type);
+                    await runOpenClawAuthCommand({
+                        authConfig: lifecycle.authConfig,
+                        dependencies,
+                        deviceCode,
+                        io,
+                        provider,
+                        setDefault,
+                        systemConfig,
+                        zoneId: selectedZone.id,
+                    });
+                },
+            }),
+            'codex-harness': command({
+                name: 'codex-harness',
+                description: 'Run native Codex CLI device auth for one or all OpenClaw agents.',
+                args: {
+                    agent: option({
+                        type: optional(string),
+                        long: 'agent',
+                        description: 'OpenClaw agent id whose isolated CODEX_HOME should receive auth.',
+                    }),
+                    allAgents: flag({
+                        long: 'all-agents',
+                        description: 'Run native Codex CLI device auth once for every configured zone agent.',
+                    }),
+                    config: createConfigOption(),
+                    zone: createZoneOption(),
+                },
+                handler: async ({ agent, allAgents, config, zone }) => {
+                    const systemConfig = await loadSystemConfigFromOption(config, dependencies);
+                    const selectedZone = requireZone(systemConfig, zone);
+                    await runCodexHarnessAuthCommand({
+                        ...(agent ? { agentId: agent } : {}),
+                        allAgents,
+                        dependencies,
+                        io,
+                        systemConfig,
+                        zone: selectedZone,
+                    });
+                },
+            }),
+        },
+    });
+}
+//# sourceMappingURL=auth-definition.js.map

package/dist/cli/commands/auth-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-definition.js","sourceRoot":"","sources":["../../../src/cli/commands/auth-definition.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAE1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAoC,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EACN,kBAAkB,EAClB,gBAAgB,EAChB,0BAA0B,GAC1B,MAAM,iCAAiC,CAAC;AAEzC,MAAM,UAAU,qBAAqB,CAAC,EAAS,EAAE,YAA6B;IAC7E,OAAO,WAAW,CAAC;QAClB,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,sBAAsB;QACnC,IAAI,EAAE;YACL,QAAQ,EAAE,OAAO,CAAC;gBACjB,IAAI,EAAE,UAAU;gBAChB,WAAW,EAAE,wDAAwD;gBACrE,IAAI,EAAE;oBACL,MAAM,EAAE,kBAAkB,EAAE;oBAC5B,UAAU,EAAE,IAAI,CAAC;wBAChB,IAAI,EAAE,aAAa;wBACnB,WAAW,EAAE,qEAAqE;qBAClF,CAAC;oBACF,QAAQ,EAAE,UAAU,CAAC;wBACpB,WAAW,EAAE,UAAU;wBACvB,IAAI,EAAE,MAAM;wBACZ,WAAW,EAAE,sCAAsC;qBACnD,CAAC;oBACF,UAAU,EAAE,IAAI,CAAC;wBAChB,IAAI,EAAE,aAAa;wBACnB,WAAW,EAAE,gEAAgE;qBAC7E,CAAC;oBACF,IAAI,EAAE,gBAAgB,EAAE;iBACxB;gBACD,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE;oBACrE,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;oBAC5E,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;oBACrD,MAAM,SAAS,GAAG,oBAAoB,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAElE,MAAM,sBAAsB,CAAC;wBAC5B,UAAU,EAAE,SAAS,CAAC,UAAU;wBAChC,YAAY;wBACZ,UAAU;wBACV,EAAE;wBACF,QAAQ;wBACR,UAAU;wBACV,YAAY;wBACZ,MAAM,EAAE,YAAY,CAAC,EAAE;qBACvB,CAAC,CAAC;gBACJ,CAAC;aACD,CAAC;YACF,eAAe,EAAE,OAAO,CAAC;gBACxB,IAAI,EAAE,eAAe;gBACrB,WAAW,EAAE,kEAAkE;gBAC/E,IAAI,EAAE;oBACL,KAAK,EAAE,MAAM,CAAC;wBACb,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;wBACtB,IAAI,EAAE,OAAO;wBACb,WAAW,EAAE,kEAAkE;qBAC/E,CAAC;oBACF,SAAS,EAAE,IAAI,CAAC;wBACf,IAAI,EAAE,YAAY;wBAClB,WAAW,EAAE,wEAAwE;qBACrF,CAAC;oBACF,MAAM,EAAE,kBAAkB,EAAE;oBAC5B,IAAI,EAAE,gBAAgB,EAAE;iBACxB;gBACD,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;oBACrD,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;oBAC5E,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;oBACrD,MAAM,0BAA0B,CAAC;wBAChC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACpC,SAAS;wBACT,YAAY;wBACZ,EAAE;wBACF,YAAY;wBACZ,IAAI,EAAE,YAAY;qBAClB,CAAC,CAAC;gBACJ,CAAC;aACD,CAAC;SACF;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/cli/commands/create-app.d.ts

@@ -170,13 +170,24 @@ export declare function createAgentVmApp(io: CliIo, dependencies: CliDependencie
             force: boolean;
         };
     } | {
-        command: "auth-interactive";
+        command: "auth";
         args: {
-            config: string | undefined;
-            deviceCode: boolean;
-            provider: string;
-            setDefault: boolean;
-            zone: string | undefined;
+            command: "openclaw";
+            args: {
+                config: string | undefined;
+                deviceCode: boolean;
+                provider: string;
+                setDefault: boolean;
+                zone: string | undefined;
+            };
+        } | {
+            command: "codex-harness";
+            args: {
+                agent: string | undefined;
+                allAgents: boolean;
+                config: string | undefined;
+                zone: string | undefined;
+            };
         };
     } | {
         command: "backup";
@@ -410,13 +421,24 @@ export declare function createAgentVmApp(io: CliIo, dependencies: CliDependencie
         force: boolean;
     };
 } | {
-    command: "auth-interactive";
+    command: "auth";
     args: {
-        config: string | undefined;
-        deviceCode: boolean;
-        provider: string;
-        setDefault: boolean;
-        zone: string | undefined;
+        command: "openclaw";
+        args: {
+            config: string | undefined;
+            deviceCode: boolean;
+            provider: string;
+            setDefault: boolean;
+            zone: string | undefined;
+        };
+    } | {
+        command: "codex-harness";
+        args: {
+            agent: string | undefined;
+            allAgents: boolean;
+            config: string | undefined;
+            zone: string | undefined;
+        };
     };
 } | {
     command: "backup";
@@ -570,8 +592,14 @@ export declare function createAgentVmApp(io: CliIo, dependencies: CliDependencie
     command: "build";
     value: Promise<void>;
 } | {
-    command: "auth-interactive";
-    value: Promise<void>;
+    command: "auth";
+    value: {
+        command: "openclaw";
+        value: Promise<void>;
+    } | {
+        command: "codex-harness";
+        value: Promise<void>;
+    };
 } | {
     command: "backup";
     value: {
@@ -700,8 +728,14 @@ export declare function createAgentVmApp(io: CliIo, dependencies: CliDependencie
         command: "build";
         value: Promise<void>;
     } | {
-        command: "auth-interactive";
-        value: Promise<void>;
+        command: "auth";
+        value: {
+            command: "openclaw";
+            value: Promise<void>;
+        } | {
+            command: "codex-harness";
+            value: Promise<void>;
+        };
     } | {
         command: "backup";
         value: {

package/dist/cli/commands/create-app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-app.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/create-app.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AAgBzE,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsB5F"}
+{"version":3,"file":"create-app.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/create-app.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AAgBzE,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsB5F"}

package/dist/cli/commands/create-app.js

@@ -1,6 +1,6 @@
 // oxlint-disable typescript-eslint/explicit-function-return-type
 import { subcommands } from 'cmd-ts';
-import { createAuthInteractiveCommand } from './auth-interactive-definition.js';
+import { createAuthSubcommands } from './auth-definition.js';
 import { createBackupSubcommands } from './backup-definition.js';
 import { createBuildCommand } from './build-definition.js';
 import { createCacheSubcommands } from './cache-definition.js';
@@ -31,7 +31,7 @@ export function createAgentVmApp(io, dependencies, cliVersion) {
             config: createConfigSubcommands(io, dependencies),
             paths: createPathsSubcommands(io, dependencies),
             backup: createBackupSubcommands(io, dependencies),
-            'auth-interactive': createAuthInteractiveCommand(io, dependencies),
+            auth: createAuthSubcommands(io, dependencies),
             controller: createControllerSubcommands(io, dependencies),
             'zone-git': createZoneGitSubcommands(io, dependencies),
         },

package/dist/cli/commands/create-app.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-app.js","sourceRoot":"","sources":["../../../src/cli/commands/create-app.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAGrC,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,MAAM,UAAU,gBAAgB,CAAC,EAAS,EAAE,YAA6B,EAAE,UAAkB;IAC5F,OAAO,WAAW,CAAC;QAClB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,UAAU;QACnB,WAAW,EAAE,6DAA6D;QAC1E,IAAI,EAAE;YACL,IAAI,EAAE,iBAAiB,CAAC,EAAE,EAAE,YAAY,CAAC;YACzC,MAAM,EAAE,uBAAuB,CAAC,EAAE,EAAE,YAAY,CAAC;YACjD,OAAO,EAAE,wBAAwB,CAAC,EAAE,EAAE,YAAY,CAAC;YACnD,SAAS,EAAE,0BAA0B,CAAC,EAAE,EAAE,YAAY,CAAC;YACvD,KAAK,EAAE,kBAAkB,CAAC,EAAE,EAAE,YAAY,CAAC;YAC3C,QAAQ,EAAE,qBAAqB,CAAC,EAAE,EAAE,YAAY,CAAC;YACjD,MAAM,EAAE,mBAAmB,CAAC,EAAE,EAAE,YAAY,CAAC;YAC7C,KAAK,EAAE,sBAAsB,CAAC,EAAE,EAAE,YAAY,CAAC;YAC/C,MAAM,EAAE,uBAAuB,CAAC,EAAE,EAAE,YAAY,CAAC;YACjD,KAAK,EAAE,sBAAsB,CAAC,EAAE,EAAE,YAAY,CAAC;YAC/C,MAAM,EAAE,uBAAuB,CAAC,EAAE,EAAE,YAAY,CAAC;YACjD,kBAAkB,EAAE,4BAA4B,CAAC,EAAE,EAAE,YAAY,CAAC;YAClE,UAAU,EAAE,2BAA2B,CAAC,EAAE,EAAE,YAAY,CAAC;YACzD,UAAU,EAAE,wBAAwB,CAAC,EAAE,EAAE,YAAY,CAAC;SACtD;KACD,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"create-app.js","sourceRoot":"","sources":["../../../src/cli/commands/create-app.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAGrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,MAAM,UAAU,gBAAgB,CAAC,EAAS,EAAE,YAA6B,EAAE,UAAkB;IAC5F,OAAO,WAAW,CAAC;QAClB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,UAAU;QACnB,WAAW,EAAE,6DAA6D;QAC1E,IAAI,EAAE;YACL,IAAI,EAAE,iBAAiB,CAAC,EAAE,EAAE,YAAY,CAAC;YACzC,MAAM,EAAE,uBAAuB,CAAC,EAAE,EAAE,YAAY,CAAC;YACjD,OAAO,EAAE,wBAAwB,CAAC,EAAE,EAAE,YAAY,CAAC;YACnD,SAAS,EAAE,0BAA0B,CAAC,EAAE,EAAE,YAAY,CAAC;YACvD,KAAK,EAAE,kBAAkB,CAAC,EAAE,EAAE,YAAY,CAAC;YAC3C,QAAQ,EAAE,qBAAqB,CAAC,EAAE,EAAE,YAAY,CAAC;YACjD,MAAM,EAAE,mBAAmB,CAAC,EAAE,EAAE,YAAY,CAAC;YAC7C,KAAK,EAAE,sBAAsB,CAAC,EAAE,EAAE,YAAY,CAAC;YAC/C,MAAM,EAAE,uBAAuB,CAAC,EAAE,EAAE,YAAY,CAAC;YACjD,KAAK,EAAE,sBAAsB,CAAC,EAAE,EAAE,YAAY,CAAC;YAC/C,MAAM,EAAE,uBAAuB,CAAC,EAAE,EAAE,YAAY,CAAC;YACjD,IAAI,EAAE,qBAAqB,CAAC,EAAE,EAAE,YAAY,CAAC;YAC7C,UAAU,EAAE,2BAA2B,CAAC,EAAE,EAAE,YAAY,CAAC;YACzD,UAAU,EAAE,wBAAwB,CAAC,EAAE,EAAE,YAAY,CAAC;SACtD;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/cli/manual-templates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manual-templates.d.ts","sourceRoot":"","sources":["../../src/cli/manual-templates.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,uBAAuB,uDAAuD,CAAC;AAE5F,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC9B;AAWD,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAsBjF;AAED,wBAAgB,wBAAwB,CACvC,OAAO,EAAE,qBAAqB,GAC5B,SAAS,kBAAkB,EAAE,CAoV/B"}
+{"version":3,"file":"manual-templates.d.ts","sourceRoot":"","sources":["../../src/cli/manual-templates.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,uBAAuB,uDAAuD,CAAC;AAE5F,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC9B;AAWD,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAsBjF;AAED,wBAAgB,wBAAwB,CACvC,OAAO,EAAE,qBAAqB,GAC5B,SAAS,kBAAkB,EAAE,CAuV/B"}

package/dist/cli/manual-templates.js

@@ -200,7 +200,9 @@ Do not bake secrets into Dockerfiles or images.
 Each zone can protect controller-mediated SSH with adminAccess. For 1Password-backed configs, create op://agent-vm/<zoneId>-ssh-access/token.
 Use agent-vm controller ssh --zone <zoneId> for a gateway admin shell with runtime environment and gateway secrets loaded.
 Controller SSH opens an interactive shell only. Do not use it as a one-shot command runner, and do not try to print raw SSH commands from the CLI.
-For auth flows, prefer agent-vm auth-interactive <provider> --zone <zoneId>.
+For OpenClaw provider auth flows, prefer agent-vm auth openclaw <provider> --zone <zoneId>.
+For native Codex harness auth, use agent-vm auth codex-harness --zone <zoneId> --agent <agentId>.
+Managed OpenClaw gateway base images include the native Codex CLI so codex-harness auth can run inside the gateway VM. If a deployment overrides the base image, install @openai/codex in that image before running codex-harness auth.
 Tool VMs and agent sandboxes do not receive gateway SSH secrets.
 `),
         },
@@ -279,7 +281,8 @@ When gateway.zoneGit is configured:
             content: generatedPage('Per-Agent Setup', `
 A single OpenClaw gateway can host multiple agents. Use scope=agent when each agent should have a stable work mount and reusable Tool VM lease identity.
 
-Per-agent auth isolation works by writing auth profiles through gateway.authProfilesByAgent and first-boot files through agentSandboxSeeds. Seeds target paths relative to the agent sandbox's /work backing directory and do not overwrite existing files.
+Per-agent auth isolation works by using agent-vm auth codex-harness for native Codex CLI auth, gateway.authProfilesByAgent for OpenClaw auth profiles, and first-boot files through agentSandboxSeeds. Seeds target paths relative to the agent sandbox's /work backing directory and do not overwrite existing files.
+agent-vm auth codex-harness --all-agents runs one device-auth session per agent listed in the zone's system config. Use --agent <agentId> for a one-off login outside that configured list.
 
 OpenClaw tool allowlists are a policy layer. They do not remove binaries from the Tool VM image if a broad shell tool can still run them.
 

package/dist/cli/manual-templates.js.map

@@ -1 +1 @@
-{"version":3,"file":"manual-templates.js","sourceRoot":"","sources":["../../src/cli/manual-templates.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,uBAAuB,GAAG,oDAAoD,CAAC;AAY5F,SAAS,aAAa,CAAC,KAAa,EAAE,IAAY;IACjD,OAAO,QAAQ,uBAAuB;;IAEnC,KAAK;;EAEP,IAAI,CAAC,IAAI,EAAE;CACZ,CAAC;AACF,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAA8B;IACxE,OAAO,aAAa,CACnB,oBAAoB,EACpB;;;;mBAIiB,OAAO,CAAC,gBAAgB;kBACzB,OAAO,CAAC,aAAa;;;;;;;;;;;;CAYtC,CACC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACvC,OAA8B;IAE9B,OAAO;QACN;YACC,YAAY,EAAE,uBAAuB;YACrC,OAAO,EAAE,aAAa,CACrB,4BAA4B,EAC5B;;;;;;;;;;;;;;;;;;CAkBH,CACG;SACD;QACD;YACC,YAAY,EAAE,uBAAuB;YACrC,OAAO,EAAE,aAAa,CACrB,kBAAkB,EAClB;EACF,OAAO,CAAC,gBAAgB;;;;;;;;;;;;;;;;;CAiBzB,CACG;SACD;QACD;YACC,YAAY,EAAE,iCAAiC;YAC/C,OAAO,EAAE,aAAa,CACrB,kBAAkB,EAClB;;;;;;;;;;;;;;;;;;;;CAoBH,CACG;SACD;QACD;YACC,YAAY,EAAE,sBAAsB;YACpC,OAAO,EAAE,aAAa,CACrB,yBAAyB,EACzB;;;;;;;;;;;;;;;;;CAiBH,CACG;SACD;QACD;YACC,YAAY,EAAE,yBAAyB;YACvC,OAAO,EAAE,aAAa,CACrB,kBAAkB,EAClB;;;;;;;;CAQH,CACG;SACD;QACD;YACC,YAAY,EAAE,kCAAkC;YAChD,OAAO,EAAE,aAAa,CACrB,mBAAmB,EACnB;;;;;;;;;;;;;;;;;;;;;;;EAuBF,CACE;SACD;QACD;YACC,YAAY,EAAE,2BAA2B;YACzC,OAAO,EAAE,aAAa,CACrB,YAAY,EACZ;;;;;;;;;;;;;;;;;;;;CAoBH,CACG;SACD;QACD;YACC,YAAY,EAAE,6BAA6B;YAC3C,OAAO,EAAE,aAAa,CACrB,sBAAsB,EACtB;;;;CAIH,CACG;SACD;QACD;YACC,YAAY,EAAE,wBAAwB;YACtC,OAAO,EAAE,aAAa,CACrB,0BAA0B,EAC1B;0BACsB,OAAO,CAAC,gBAAgB;;;;;;;;;;CAUjD,CACG;SACD;QACD;YACC,YAAY,EAAE,4BAA4B;YAC1C,OAAO,EAAE,aAAa,CACrB,2BAA2B,EAC3B;;;;;;;;;;;;;;;;;CAiBH,CACG;SACD;QACD;YACC,YAAY,EAAE,yBAAyB;YACvC,OAAO,EAAE,aAAa,CACrB,mBAAmB,EACnB;;;;;6BAKyB,OAAO,CAAC,gBAAgB;;;;;;;;;;;;;;;CAepD,CACG;SACD;QACD;YACC,YAAY,EAAE,8BAA8B;YAC5C,OAAO,EAAE,aAAa,CACrB,eAAe,EACf;;;;;;;;;;;;;;;;;;;;;CAqBH,CACG;SACD;QACD;YACC,YAAY,EAAE,gCAAgC;YAC9C,OAAO,EAAE,aAAa,CACrB,iBAAiB,EACjB;;;;;;;;;;;;;;CAcH,CACG;SACD;QACD;YACC,YAAY,EAAE,kCAAkC;YAChD,OAAO,EAAE,aAAa,CACrB,mBAAmB,EACnB;;;;;+BAK2B,OAAO,CAAC,gBAAgB;;;;;CAKtD,CACG;SACD;QACD;YACC,YAAY,EAAE,gCAAgC;YAC9C,OAAO,EAAE,aAAa,CACrB,iBAAiB,EACjB;;;;;;;;;;;CAWH,CACG;SACD;KACD,CAAC;AACH,CAAC"}
+{"version":3,"file":"manual-templates.js","sourceRoot":"","sources":["../../src/cli/manual-templates.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,uBAAuB,GAAG,oDAAoD,CAAC;AAY5F,SAAS,aAAa,CAAC,KAAa,EAAE,IAAY;IACjD,OAAO,QAAQ,uBAAuB;;IAEnC,KAAK;;EAEP,IAAI,CAAC,IAAI,EAAE;CACZ,CAAC;AACF,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAA8B;IACxE,OAAO,aAAa,CACnB,oBAAoB,EACpB;;;;mBAIiB,OAAO,CAAC,gBAAgB;kBACzB,OAAO,CAAC,aAAa;;;;;;;;;;;;CAYtC,CACC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACvC,OAA8B;IAE9B,OAAO;QACN;YACC,YAAY,EAAE,uBAAuB;YACrC,OAAO,EAAE,aAAa,CACrB,4BAA4B,EAC5B;;;;;;;;;;;;;;;;;;CAkBH,CACG;SACD;QACD;YACC,YAAY,EAAE,uBAAuB;YACrC,OAAO,EAAE,aAAa,CACrB,kBAAkB,EAClB;EACF,OAAO,CAAC,gBAAgB;;;;;;;;;;;;;;;;;CAiBzB,CACG;SACD;QACD;YACC,YAAY,EAAE,iCAAiC;YAC/C,OAAO,EAAE,aAAa,CACrB,kBAAkB,EAClB;;;;;;;;;;;;;;;;;;;;CAoBH,CACG;SACD;QACD;YACC,YAAY,EAAE,sBAAsB;YACpC,OAAO,EAAE,aAAa,CACrB,yBAAyB,EACzB;;;;;;;;;;;;;;;;;CAiBH,CACG;SACD;QACD;YACC,YAAY,EAAE,yBAAyB;YACvC,OAAO,EAAE,aAAa,CACrB,kBAAkB,EAClB;;;;;;;;CAQH,CACG;SACD;QACD;YACC,YAAY,EAAE,kCAAkC;YAChD,OAAO,EAAE,aAAa,CACrB,mBAAmB,EACnB;;;;;;;;;;;;;;;;;;;;;;;EAuBF,CACE;SACD;QACD;YACC,YAAY,EAAE,2BAA2B;YACzC,OAAO,EAAE,aAAa,CACrB,YAAY,EACZ;;;;;;;;;;;;;;;;;;;;CAoBH,CACG;SACD;QACD;YACC,YAAY,EAAE,6BAA6B;YAC3C,OAAO,EAAE,aAAa,CACrB,sBAAsB,EACtB;;;;CAIH,CACG;SACD;QACD;YACC,YAAY,EAAE,wBAAwB;YACtC,OAAO,EAAE,aAAa,CACrB,0BAA0B,EAC1B;0BACsB,OAAO,CAAC,gBAAgB;;;;;;;;;;;;CAYjD,CACG;SACD;QACD;YACC,YAAY,EAAE,4BAA4B;YAC1C,OAAO,EAAE,aAAa,CACrB,2BAA2B,EAC3B;;;;;;;;;;;;;;;;;CAiBH,CACG;SACD;QACD;YACC,YAAY,EAAE,yBAAyB;YACvC,OAAO,EAAE,aAAa,CACrB,mBAAmB,EACnB;;;;;6BAKyB,OAAO,CAAC,gBAAgB;;;;;;;;;;;;;;;CAepD,CACG;SACD;QACD;YACC,YAAY,EAAE,8BAA8B;YAC5C,OAAO,EAAE,aAAa,CACrB,eAAe,EACf;;;;;;;;;;;;;;;;;;;;;CAqBH,CACG;SACD;QACD;YACC,YAAY,EAAE,gCAAgC;YAC9C,OAAO,EAAE,aAAa,CACrB,iBAAiB,EACjB;;;;;;;;;;;;;;;CAeH,CACG;SACD;QACD;YACC,YAAY,EAAE,kCAAkC;YAChD,OAAO,EAAE,aAAa,CACrB,mBAAmB,EACnB;;;;;+BAK2B,OAAO,CAAC,gBAAgB;;;;;CAKtD,CACG;SACD;QACD;YACC,YAAY,EAAE,gCAAgC;YAC9C,OAAO,EAAE,aAAa,CACrB,iBAAiB,EACjB;;;;;;;;;;;CAWH,CACG;SACD;KACD,CAAC;AACH,CAAC"}

package/dist/cli/openclaw-auth-command.d.ts

@@ -0,0 +1,14 @@
+import type { GatewayAuthConfig } from '@agent-vm/gateway-interface';
+import type { SystemConfig } from '../config/system-config.js';
+import { type CliDependencies, type CliIo } from './agent-vm-cli-support.js';
+export declare function runOpenClawAuthCommand(options: {
+    readonly authConfig: GatewayAuthConfig | undefined;
+    readonly dependencies: Pick<CliDependencies, 'createControllerClient' | 'createSecretResolver' | 'resolveServiceAccountToken' | 'runInteractiveProcess'>;
+    readonly deviceCode?: boolean;
+    readonly io: CliIo;
+    readonly provider: string;
+    readonly systemConfig: SystemConfig;
+    readonly setDefault?: boolean;
+    readonly zoneId: string;
+}): Promise<void>;
+//# sourceMappingURL=openclaw-auth-command.d.ts.map

package/dist/cli/openclaw-auth-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw-auth-command.d.ts","sourceRoot":"","sources":["../../src/cli/openclaw-auth-command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAGrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EACN,KAAK,eAAe,EACpB,KAAK,KAAK,EAGV,MAAM,2BAA2B,CAAC;AAKnC,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACrD,QAAQ,CAAC,UAAU,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,YAAY,EAAE,IAAI,CAC1B,eAAe,EACb,wBAAwB,GACxB,sBAAsB,GACtB,4BAA4B,GAC5B,uBAAuB,CACzB,CAAC;IACF,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyEhB"}

package/dist/cli/{auth-interactive-command.js → openclaw-auth-command.js}

@@ -1,46 +1,12 @@
 import { execa } from 'execa';
 import { requireZone, resolveControllerBaseUrl, } from './agent-vm-cli-support.js';
-import { resolveZoneAdminToken, zoneSshAccessResponseSchema, } from './ssh-commands.js';
-const openClawShellEnvFilePath = '/etc/profile.d/openclaw-env.sh';
-function shellQuote(value) {
-    return `'${value.replace(/'/gu, `'\\''`)}'`;
-}
-function wrapWithOpenClawShellEnvironment(command) {
-    return `bash -lc ${shellQuote(`source ${openClawShellEnvFilePath} && ${command}`)}`;
-}
-export async function listAuthProviders(options) {
-    if (!options.sshAccess.host || !options.sshAccess.port) {
-        throw new Error('Cannot list auth providers: controller returned incomplete SSH access.');
+import { formatZodError } from './format-zod-error.js';
+import { wrapWithOpenClawShellEnvironment } from './openclaw-shell-prefix.js';
+import { resolveZoneAdminToken, zoneSshAccessResponseSchema } from './ssh-commands.js';
+export async function runOpenClawAuthCommand(options) {
+    if (options.provider === 'openai-codex') {
+        throw new Error(`Refusing to run OpenClaw provider login for 'openai-codex'. Use 'agent-vm auth codex-harness --zone ${options.zoneId} --agent <agentId>' for native Codex CLI auth, or use provider 'openai' for OpenClaw-managed auth.`);
     }
-    const runCommand = options.runCommand ??
-        (async (command, arguments_) => {
-            const result = await execa(command, arguments_, { reject: false });
-            return {
-                exitCode: result.exitCode ?? 0,
-                stderr: result.stderr,
-                stdout: result.stdout,
-            };
-        });
-    const commandResult = await runCommand('ssh', [
-        '-o',
-        'StrictHostKeyChecking=no',
-        '-o',
-        'UserKnownHostsFile=/dev/null',
-        ...(options.sshAccess.identityFile ? ['-i', options.sshAccess.identityFile] : []),
-        '-p',
-        String(options.sshAccess.port),
-        `${options.sshAccess.user ?? 'root'}@${options.sshAccess.host}`,
-        wrapWithOpenClawShellEnvironment(options.listProvidersCommand),
-    ]);
-    if (commandResult.exitCode !== 0) {
-        throw new Error(`Failed to list auth providers: ${commandResult.stderr || `ssh exited with ${commandResult.exitCode}`}`);
-    }
-    return commandResult.stdout
-        .split('\n')
-        .map((line) => line.trim())
-        .filter((line) => line.length > 0);
-}
-export async function runAuthInteractiveCommand(options) {
     if (!options.authConfig) {
         throw new Error(`Zone '${options.zoneId}' does not support interactive auth.`);
     }
@@ -58,7 +24,7 @@ export async function runAuthInteractiveCommand(options) {
         secretEnv: 'default',
     }));
     if (!parsedSshResponse.success) {
-        throw new Error('Controller returned an invalid SSH response.');
+        throw new Error(formatZodError('Controller returned an invalid SSH response:', parsedSshResponse.error), { cause: parsedSshResponse.error });
     }
     const sshResponse = parsedSshResponse.data;
     if (!sshResponse.host || !sshResponse.port) {
@@ -92,4 +58,4 @@ export async function runAuthInteractiveCommand(options) {
         throw new Error(`Auth failed for ${options.provider} in zone '${options.zoneId}': ${error instanceof Error ? error.message : String(error)}`, { cause: error });
     }
 }
-//# sourceMappingURL=auth-interactive-command.js.map
+//# sourceMappingURL=openclaw-auth-command.js.map

package/dist/cli/openclaw-auth-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw-auth-command.js","sourceRoot":"","sources":["../../src/cli/openclaw-auth-command.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAG9B,OAAO,EAGN,WAAW,EACX,wBAAwB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAEvF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAe5C;IACA,IAAI,OAAO,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACd,uGAAuG,OAAO,CAAC,MAAM,oGAAoG,CACzN,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,SAAS,OAAO,CAAC,MAAM,sCAAsC,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,sBAAsB,CAAC;QACpE,OAAO,EAAE,wBAAwB,CAAC,OAAO,CAAC,YAAY,CAAC;KACvD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC;QAC9C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,IAAI;KACJ,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,2BAA2B,CAAC,SAAS,CAC9D,MAAM,gBAAgB,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE;QACpD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,SAAS,EAAE,SAAS;KACpB,CAAC,CACF,CAAC;IACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACd,cAAc,CAAC,8CAA8C,EAAE,iBAAiB,CAAC,KAAK,CAAC,EACvF,EAAE,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,CAClC,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC;IAC3C,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACd,oEAAoE,OAAO,CAAC,MAAM,IAAI,CACtF,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG;QACpB,IAAI;QACJ,IAAI;QACJ,0BAA0B;QAC1B,IAAI;QACJ,8BAA8B;QAC9B,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,IAAI;QACJ,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;QACxB,GAAG,WAAW,CAAC,IAAI,IAAI,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE;QACnD,gCAAgC,CAC/B,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE;YACtD,UAAU,EAAE,OAAO,CAAC,UAAU,KAAK,IAAI;YACvC,UAAU,EAAE,OAAO,CAAC,UAAU,KAAK,IAAI;SACvC,CAAC,CACF;KACD,CAAC;IAEF,MAAM,qBAAqB,GAC1B,OAAO,CAAC,YAAY,CAAC,qBAAqB;QAC1C,CAAC,KAAK,EAAE,OAAe,EAAE,UAA6B,EAAiB,EAAE;YACxE,MAAM,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE;gBAChC,KAAK,EAAE,SAAS;aAChB,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IAEJ,IAAI,CAAC;QACJ,MAAM,qBAAqB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACd,mBAAmB,OAAO,CAAC,QAAQ,aAAa,OAAO,CAAC,MAAM,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC5H,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;IACH,CAAC;AACF,CAAC"}

package/dist/cli/openclaw-shell-prefix.d.ts

@@ -0,0 +1,7 @@
+export declare const openClawShellEnvFilePath = "/etc/profile.d/openclaw-env.sh";
+export declare const openClawRuntimeSecretsEnvFilePath = "/run/openclaw/secrets.env";
+export declare function shellQuote(value: string): string;
+export declare function wrapWithOpenClawShellEnvironment(command: string): string;
+export declare function buildOpenClawSecretShellPrefix(): string;
+export declare function wrapWithOpenClawSecretShellEnvironment(command: string): string;
+//# sourceMappingURL=openclaw-shell-prefix.d.ts.map

package/dist/cli/openclaw-shell-prefix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw-shell-prefix.d.ts","sourceRoot":"","sources":["../../src/cli/openclaw-shell-prefix.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,wBAAwB,mCAAmC,CAAC;AACzE,eAAO,MAAM,iCAAiC,8BAA8B,CAAC;AAE7E,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAExE;AAED,wBAAgB,8BAA8B,IAAI,MAAM,CAEvD;AAED,wBAAgB,sCAAsC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9E"}

package/dist/cli/openclaw-shell-prefix.js

@@ -0,0 +1,15 @@
+export const openClawShellEnvFilePath = '/etc/profile.d/openclaw-env.sh';
+export const openClawRuntimeSecretsEnvFilePath = '/run/openclaw/secrets.env';
+export function shellQuote(value) {
+    return `'${value.replace(/'/gu, `'\\''`)}'`;
+}
+export function wrapWithOpenClawShellEnvironment(command) {
+    return `bash -lc ${shellQuote(`source ${openClawShellEnvFilePath} && ${command}`)}`;
+}
+export function buildOpenClawSecretShellPrefix() {
+    return `source ${openClawShellEnvFilePath} && set -a && . ${openClawRuntimeSecretsEnvFilePath} && set +a && `;
+}
+export function wrapWithOpenClawSecretShellEnvironment(command) {
+    return `bash -lc ${shellQuote(`${buildOpenClawSecretShellPrefix()}${command}`)}`;
+}
+//# sourceMappingURL=openclaw-shell-prefix.js.map

package/dist/cli/openclaw-shell-prefix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw-shell-prefix.js","sourceRoot":"","sources":["../../src/cli/openclaw-shell-prefix.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AACzE,MAAM,CAAC,MAAM,iCAAiC,GAAG,2BAA2B,CAAC;AAE7E,MAAM,UAAU,UAAU,CAAC,KAAa;IACvC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,OAAe;IAC/D,OAAO,YAAY,UAAU,CAAC,UAAU,wBAAwB,OAAO,OAAO,EAAE,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC7C,OAAO,UAAU,wBAAwB,mBAAmB,iCAAiC,gBAAgB,CAAC;AAC/G,CAAC;AAED,MAAM,UAAU,sCAAsC,CAAC,OAAe;IACrE,OAAO,YAAY,UAAU,CAAC,GAAG,8BAA8B,EAAE,GAAG,OAAO,EAAE,CAAC,EAAE,CAAC;AAClF,CAAC"}

package/dist/cli/ssh-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ssh-commands.d.ts","sourceRoot":"","sources":["../../src/cli/ssh-commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EACN,KAAK,eAAe,EACpB,KAAK,KAAK,EAKV,MAAM,2BAA2B,CAAC;AAEnC,UAAU,oBAAoB;IAC7B,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;CACpC;AAED,eAAO,MAAM,2BAA2B;;;;;;;iBASzB,CAAC;AAEhB,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAiBhF,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACpD,QAAQ,CAAC,YAAY,EAAE,IAAI,CAC1B,eAAe,EACf,sBAAsB,GAAG,4BAA4B,CACrD,CAAC;IACF,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;CAC7C,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAgB9B;AAED,wBAAsB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqEhF"}
+{"version":3,"file":"ssh-commands.d.ts","sourceRoot":"","sources":["../../src/cli/ssh-commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EACN,KAAK,eAAe,EACpB,KAAK,KAAK,EAKV,MAAM,2BAA2B,CAAC;AAInC,UAAU,oBAAoB;IAC7B,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;CACpC;AAED,eAAO,MAAM,2BAA2B;;;;;;;iBASzB,CAAC;AAEhB,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACpD,QAAQ,CAAC,YAAY,EAAE,IAAI,CAC1B,eAAe,EACf,sBAAsB,GAAG,4BAA4B,CACrD,CAAC;IACF,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;CAC7C,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAgB9B;AAED,wBAAsB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwEhF"}

package/dist/cli/ssh-commands.js

@@ -1,6 +1,8 @@
 import { execa } from 'execa';
 import { z } from 'zod';
 import { createResolverFromSystemConfig, readZoneFlag, requireZone, resolveControllerBaseUrl, } from './agent-vm-cli-support.js';
+import { formatZodError } from './format-zod-error.js';
+import { wrapWithOpenClawSecretShellEnvironment } from './openclaw-shell-prefix.js';
 export const zoneSshAccessResponseSchema = z
     .object({
     command: z.string().min(1).optional(),
@@ -11,17 +13,6 @@ export const zoneSshAccessResponseSchema = z
     user: z.string().min(1).optional(),
 })
     .passthrough();
-const openClawShellEnvFilePath = '/etc/profile.d/openclaw-env.sh';
-const openClawRuntimeSecretsEnvFilePath = '/run/openclaw/secrets.env';
-function buildInteractiveSecretShellPrefix() {
-    return `source ${openClawShellEnvFilePath} && set -a && . ${openClawRuntimeSecretsEnvFilePath} && set +a && `;
-}
-function shellQuote(value) {
-    return `'${value.replace(/'/gu, `'\\''`)}'`;
-}
-function buildInteractiveSecretShellCommand() {
-    return `bash -lc ${shellQuote(`${buildInteractiveSecretShellPrefix()}exec bash -l`)}`;
-}
 export async function resolveZoneAdminToken(options) {
     const adminAccess = options.zone.adminAccess ?? { mode: 'none' };
     if (adminAccess.mode === 'none') {
@@ -55,7 +46,7 @@ export async function runSshCommand(options) {
         secretEnv: 'with-secrets',
     }));
     if (!parsedSshResponse.success) {
-        throw new Error('Controller returned an invalid SSH response.');
+        throw new Error(formatZodError('Controller returned an invalid SSH response:', parsedSshResponse.error), { cause: parsedSshResponse.error });
     }
     const sshResponse = parsedSshResponse.data;
     if (!sshResponse.host || !sshResponse.port) {
@@ -75,7 +66,7 @@ export async function runSshCommand(options) {
         '-p',
         String(sshResponse.port),
         `${sshResponse.user ?? 'root'}@${sshResponse.host}`,
-        buildInteractiveSecretShellCommand(),
+        wrapWithOpenClawSecretShellEnvironment('exec bash -l'),
     ];
     const runInteractiveProcess = options.dependencies.runInteractiveProcess ??
         (async (command, arguments_) => {

package/dist/cli/ssh-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"ssh-commands.js","sourceRoot":"","sources":["../../src/cli/ssh-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAGN,8BAA8B,EAC9B,YAAY,EACZ,WAAW,EACX,wBAAwB,GACxB,MAAM,2BAA2B,CAAC;AASnC,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,WAAW,EAAE,CAAC;AAIhB,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAClE,MAAM,iCAAiC,GAAG,2BAA2B,CAAC;AAEtE,SAAS,iCAAiC;IACzC,OAAO,UAAU,wBAAwB,mBAAmB,iCAAiC,gBAAgB,CAAC;AAC/G,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAChC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,kCAAkC;IAC1C,OAAO,YAAY,UAAU,CAAC,GAAG,iCAAiC,EAAE,cAAc,CAAC,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAO3C;IACA,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC;IAC1E,IAAI,WAAW,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,8BAA8B,CAC1D,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,YAAY,CACpB,CAAC;IACF,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAClC,OAAO,MAAM,cAAc,CAAC,OAAO,CAClC,MAAM,CAAC,MAAM,KAAK,aAAa;QAC9B,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE;QAC/C,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAC3C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA6B;IAChE,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,sBAAsB,CAAC;QACpE,OAAO,EAAE,wBAAwB,CAAC,OAAO,CAAC,YAAY,CAAC;KACvD,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACd,oFAAoF,CACpF,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC5C,IAAI,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC;QAC9C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,IAAI;KACJ,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,2BAA2B,CAAC,SAAS,CAC9D,MAAM,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE;QAC7C,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,SAAS,EAAE,cAAc;KACzB,CAAC,CACF,CAAC;IACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,WAAW,GAA0B,iBAAiB,CAAC,IAAI,CAAC;IAElE,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,gBAAgB,GAAG,WAAW,CAAC,gBAAgB,KAAK,IAAI,CAAC;IAC/D,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACd,0IAA0I,CAC1I,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG;QACpB,IAAI;QACJ,IAAI;QACJ,0BAA0B;QAC1B,IAAI;QACJ,8BAA8B;QAC9B,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,IAAI;QACJ,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;QACxB,GAAG,WAAW,CAAC,IAAI,IAAI,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE;QACnD,kCAAkC,EAAE;KACpC,CAAC;IACF,MAAM,qBAAqB,GAC1B,OAAO,CAAC,YAAY,CAAC,qBAAqB;QAC1C,CAAC,KAAK,EAAE,OAAe,EAAE,UAA6B,EAAiB,EAAE;YACxE,MAAM,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE;gBAChC,KAAK,EAAE,SAAS;aAChB,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,IAAI,CAAC;QACJ,MAAM,qBAAqB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACd,iCAAiC,WAAW,CAAC,IAAI,IAAI,MAAM,IAAI,WAAW,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAChK;YACC,KAAK,EAAE,KAAK;SACZ,CACD,CAAC;IACH,CAAC;AACF,CAAC"}
+{"version":3,"file":"ssh-commands.js","sourceRoot":"","sources":["../../src/cli/ssh-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAGN,8BAA8B,EAC9B,YAAY,EACZ,WAAW,EACX,wBAAwB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,sCAAsC,EAAE,MAAM,4BAA4B,CAAC;AASpF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,WAAW,EAAE,CAAC;AAIhB,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAO3C;IACA,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC;IAC1E,IAAI,WAAW,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,8BAA8B,CAC1D,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,YAAY,CACpB,CAAC;IACF,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAClC,OAAO,MAAM,cAAc,CAAC,OAAO,CAClC,MAAM,CAAC,MAAM,KAAK,aAAa;QAC9B,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE;QAC/C,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAC3C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA6B;IAChE,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,sBAAsB,CAAC;QACpE,OAAO,EAAE,wBAAwB,CAAC,OAAO,CAAC,YAAY,CAAC;KACvD,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACd,oFAAoF,CACpF,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC5C,IAAI,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC;QAC9C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,IAAI;KACJ,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,2BAA2B,CAAC,SAAS,CAC9D,MAAM,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE;QAC7C,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,SAAS,EAAE,cAAc;KACzB,CAAC,CACF,CAAC;IACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACd,cAAc,CAAC,8CAA8C,EAAE,iBAAiB,CAAC,KAAK,CAAC,EACvF,EAAE,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,CAClC,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAA0B,iBAAiB,CAAC,IAAI,CAAC;IAElE,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,gBAAgB,GAAG,WAAW,CAAC,gBAAgB,KAAK,IAAI,CAAC;IAC/D,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACd,0IAA0I,CAC1I,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG;QACpB,IAAI;QACJ,IAAI;QACJ,0BAA0B;QAC1B,IAAI;QACJ,8BAA8B;QAC9B,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,IAAI;QACJ,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;QACxB,GAAG,WAAW,CAAC,IAAI,IAAI,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE;QACnD,sCAAsC,CAAC,cAAc,CAAC;KACtD,CAAC;IACF,MAAM,qBAAqB,GAC1B,OAAO,CAAC,YAAY,CAAC,qBAAqB;QAC1C,CAAC,KAAK,EAAE,OAAe,EAAE,UAA6B,EAAiB,EAAE;YACxE,MAAM,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE;gBAChC,KAAK,EAAE,SAAS;aAChB,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,IAAI,CAAC;QACJ,MAAM,qBAAqB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACd,iCAAiC,WAAW,CAAC,IAAI,IAAI,MAAM,IAAI,WAAW,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAChK;YACC,KAAK,EAAE,KAAK;SACZ,CACD,CAAC;IACH,CAAC;AACF,CAAC"}

package/dist/operations/openclaw-deployment-doctor.d.ts

@@ -6,8 +6,15 @@ interface PortalServerExpectation {
     readonly host: string;
     readonly port: number;
 }
+interface CodexHarnessAuthReadError {
+    readonly agentId: string;
+    readonly message: string;
+    readonly path: string;
+}
 export interface OpenClawDeploymentDoctorTarget {
     readonly configuredAuthProfileAgentIds?: readonly string[];
+    readonly configuredCodexHarnessAuthAgentIds?: readonly string[];
+    readonly codexHarnessAuthReadErrors?: readonly CodexHarnessAuthReadError[];
     readonly config: OpenClawDeploymentConfig;
     readonly configPath?: string | undefined;
     readonly configReadError?: string | undefined;

package/dist/operations/openclaw-deployment-doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openclaw-deployment-doctor.d.ts","sourceRoot":"","sources":["../../src/operations/openclaw-deployment-doctor.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAIN,KAAK,wBAAwB,EAC7B,KAAK,mCAAmC,EACxC,MAAM,uCAAuC,CAAC;AAS/C,UAAU,uBAAuB;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACtB;AAQD,MAAM,WAAW,8BAA8B;IAC9C,QAAQ,CAAC,6BAA6B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3D,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,YAAY,CAAC,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,mCAAmC,CAAC,QAAQ,CAAC,CAAC;CAC/D;AAsMD,wBAAgB,mCAAmC,CAClD,OAAO,EAAE,SAAS,8BAA8B,EAAE,GAChD,SAAS,WAAW,EAAE,CA+DxB;AA4BD,wBAAsB,qCAAqC,CAC1D,YAAY,EAAE,kBAAkB,GAC9B,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CA0CjC"}
+{"version":3,"file":"openclaw-deployment-doctor.d.ts","sourceRoot":"","sources":["../../src/operations/openclaw-deployment-doctor.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAIN,KAAK,wBAAwB,EAC7B,KAAK,mCAAmC,EACxC,MAAM,uCAAuC,CAAC;AAS/C,UAAU,uBAAuB;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,yBAAyB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACtB;AAaD,MAAM,WAAW,8BAA8B;IAC9C,QAAQ,CAAC,6BAA6B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3D,QAAQ,CAAC,kCAAkC,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC3E,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,YAAY,CAAC,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,mCAAmC,CAAC,QAAQ,CAAC,CAAC;CAC/D;AA0ND,wBAAgB,mCAAmC,CAClD,OAAO,EAAE,SAAS,8BAA8B,EAAE,GAChD,SAAS,WAAW,EAAE,CAgExB;AAiED,wBAAsB,qCAAqC,CAC1D,YAAY,EAAE,kBAAkB,GAC9B,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CAoDjC"}

package/dist/operations/openclaw-deployment-doctor.js

@@ -1,3 +1,4 @@
+import { access } from 'node:fs/promises';
 import { join } from 'node:path';
 import { loadMcpPortalConfig } from '@agent-vm/config-contracts';
 import { materializedPortalToolNames, portalServerNameForAgent, } from '@agent-vm/openclaw-mcp-portal-plugin';
@@ -120,17 +121,29 @@ function hasValidPortalEndpointTopology(config, agentId, portalServer) {
 }
 function buildAgentAuthProfileChecks(target) {
     const configuredAuthProfileAgentIds = new Set(target.configuredAuthProfileAgentIds ?? []);
+    const configuredCodexHarnessAuthAgentIds = new Set(target.configuredCodexHarnessAuthAgentIds ?? []);
     return collectOpenClawCodexAgentIds(target.config).map((agentId) => {
         const hasAuthProfile = configuredAuthProfileAgentIds.has(agentId);
+        const hasCodexHarnessAuth = configuredCodexHarnessAuthAgentIds.has(agentId);
+        const hasAuthMaterial = hasAuthProfile || hasCodexHarnessAuth;
         return {
             name: `openclaw-agent-auth-profile-${target.zoneId}-${agentId}`,
-            ok: hasAuthProfile,
+            ok: hasAuthMaterial,
             hint: hasAuthProfile
-                ? `auth profile configured for agent ${agentId}`
-                : `Configure gateway.authProfilesByAgent.${agentId} or run OpenClaw auth onboarding for agent ${agentId}.`,
+                ? `OpenClaw auth profile configured for agent ${agentId}`
+                : hasCodexHarnessAuth
+                    ? `Codex harness auth.json present for agent ${agentId}`
+                    : `Run agent-vm auth codex-harness --zone ${target.zoneId} --agent ${agentId} or configure gateway.authProfilesByAgent.${agentId}.`,
         };
     });
 }
+function buildCodexHarnessAuthReadErrorChecks(target) {
+    return (target.codexHarnessAuthReadErrors ?? []).map((readError) => ({
+        name: `openclaw-codex-harness-auth-readable-${target.zoneId}-${readError.agentId}`,
+        ok: false,
+        hint: `Cannot read Codex harness auth.json at ${readError.path}: ${readError.message}`,
+    }));
+}
 function buildRequirementChecks(target) {
     const requirementTarget = target.configReadError === undefined
         ? {
@@ -205,6 +218,7 @@ export function buildOpenClawDeploymentDoctorChecks(targets) {
                     ? 'plugins.slots.memory=memory-core'
                     : 'Set plugins.slots.memory to "memory-core" when memory-core is enabled.',
             },
+            ...buildCodexHarnessAuthReadErrorChecks(target),
             ...buildAgentAuthProfileChecks(target),
         ];
     });
@@ -228,30 +242,63 @@ async function loadPortalServerExpectation(zone) {
         return undefined;
     }
 }
+async function collectCodexHarnessAuthAgentIds(zone, config) {
+    const agentIds = [];
+    const readErrors = [];
+    for (const agentId of collectOpenClawCodexAgentIds(config)) {
+        const authJsonPath = join(zone.gateway.stateDir, 'agents', agentId, 'agent', 'codex-home', 'auth.json');
+        try {
+            // Auth contents are secret; doctor only checks file presence.
+            // oxlint-disable-next-line no-await-in-loop -- each agent maps to a separate auth path
+            await access(authJsonPath);
+            agentIds.push(agentId);
+        }
+        catch (error) {
+            const errorCode = isObjectRecord(error) && typeof error.code === 'string' ? error.code : undefined;
+            if (errorCode === 'ENOENT' || errorCode === 'ENOTDIR') {
+                // Missing auth.json is reported by buildAgentAuthProfileChecks.
+                continue;
+            }
+            readErrors.push({
+                agentId,
+                message: error instanceof Error ? error.message : String(error),
+                path: authJsonPath,
+            });
+        }
+    }
+    return { agentIds, readErrors };
+}
 export async function collectOpenClawDeploymentDoctorChecks(systemConfig) {
     const openClawZones = systemConfig.zones.filter(isOpenClawSystemZone);
     const configuredAuthProfileAgentIdsByZone = new Map(openClawZones.map((zone) => [zone.id, Object.keys(zone.gateway.authProfilesByAgent ?? {})]));
     const portalServerByZone = new Map((await Promise.all(openClawZones.map(async (zone) => [zone.id, await loadPortalServerExpectation(zone)]))).filter((entry) => entry[1] !== undefined));
     const targets = await collectOpenClawDeploymentRequirementTargets(systemConfig);
-    const doctorTargets = [];
-    for (const target of targets) {
+    const doctorTargets = await Promise.all(targets.map(async (target) => {
+        const zone = openClawZones.find((candidate) => candidate.id === target.zoneId);
+        const codexHarnessAuthScan = target.kind === 'readable' && zone
+            ? await collectCodexHarnessAuthAgentIds(zone, target.config)
+            : { agentIds: [], readErrors: [] };
         const baseTarget = target.kind === 'readable'
             ? {
                 config: target.config,
+                codexHarnessAuthReadErrors: codexHarnessAuthScan.readErrors,
+                configuredCodexHarnessAuthAgentIds: codexHarnessAuthScan.agentIds,
                 configuredAuthProfileAgentIds: configuredAuthProfileAgentIdsByZone.get(target.zoneId) ?? [],
                 configPath: target.configPath,
                 zoneId: target.zoneId,
             }
             : {
                 config: {},
+                codexHarnessAuthReadErrors: codexHarnessAuthScan.readErrors,
+                configuredCodexHarnessAuthAgentIds: codexHarnessAuthScan.agentIds,
                 configuredAuthProfileAgentIds: configuredAuthProfileAgentIdsByZone.get(target.zoneId) ?? [],
                 configPath: target.configPath,
                 configReadError: target.configReadError,
                 zoneId: target.zoneId,
             };
         const portalServer = portalServerByZone.get(target.zoneId);
-        doctorTargets.push(portalServer === undefined ? baseTarget : { ...baseTarget, portalServer });
-    }
+        return portalServer === undefined ? baseTarget : Object.assign(baseTarget, { portalServer });
+    }));
     return buildOpenClawDeploymentDoctorChecks(doctorTargets);
 }
 //# sourceMappingURL=openclaw-deployment-doctor.js.map

package/dist/operations/openclaw-deployment-doctor.js.map

@@ -1 +1 @@
-{"version":3,"file":"openclaw-deployment-doctor.js","sourceRoot":"","sources":["../../src/operations/openclaw-deployment-doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EACN,2BAA2B,EAC3B,wBAAwB,GACxB,MAAM,sCAAsC,CAAC;AAI9C,OAAO,EACN,2CAA2C,EAC3C,sCAAsC,EACtC,cAAc,GAGd,MAAM,uCAAuC,CAAC;AAe/C,MAAM,8BAA8B,GAA4B;IAC/D,gBAAgB,EAAE,8BAA8B;IAChD,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,KAAK;CACX,CAAC;AAWF,SAAS,cAAc,CAAC,MAAsC,EAAE,aAAqB;IACpF,OAAO,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,aAAa,CAAC,KAAK,IAAI,CAAC;AAClE,CAAC;AAED,SAAS,eAAe,CACvB,OAA4C,EAC5C,UAAkB;IAElB,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC;IACpC,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC;AACxD,CAAC;AAED,SAAS,0BAA0B,CAClC,OAA4C,EAC5C,UAAkB;IAElB,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,oBAAoB,KAAK,IAAI,CAAC;AACrE,CAAC;AAED,SAAS,gCAAgC,CAAC,OAA4C;IACrF,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;IACtD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC;AAED,SAAS,kBAAkB,CAAC,SAA6B;IACxD,OAAO,SAAS,EAAE,UAAU,CAAC,eAAe,CAAC,KAAK,IAAI,IAAI,SAAS,KAAK,cAAc,CAAC;AACxF,CAAC;AAED,SAAS,4BAA4B,CAAC,MAAgC;IACrE,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAClF,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;SAChC,MAAM,CAAC,cAAc,CAAC;SACtB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACjB,kBAAkB,CAAC,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,CAC7E;SACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAe;IAC/C,OAAO,2BAA2B,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAgC;IAClE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;SAChC,MAAM,CAAC,cAAc,CAAC;SACtB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,uBAAuB,CAAC,YAAqC,EAAE,OAAe;IACtF,OAAO,UAAU,YAAY,CAAC,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC;AAC7G,CAAC;AAED,SAAS,cAAc,CAAC,MAAgC;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB;IAC7C,OAAO,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,uBAAuB,CAC/B,MAAgC,EAChC,OAAe,EACf,YAAqC;IAErC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,MAAM,iBAAiB,GAAG,cAAc,CAAC,OAAO,CAAC;QAChD,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC;QACxC,CAAC,CAAC,SAAS,CAAC;IACb,OAAO,CACN,MAAM,CAAC,SAAS,KAAK,iBAAiB;QACtC,MAAM,CAAC,GAAG,KAAK,uBAAuB,CAAC,YAAY,EAAE,OAAO,CAAC;QAC7D,OAAO,iBAAiB,KAAK,QAAQ;QACrC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAC5B,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAgC;IACjE,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAClC,yBAAyB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CACrF,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAChC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CACtF,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC9B,MAAgC,EAChC,OAAe;IAEf,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;SACvC,MAAM,CAAC,cAAc,CAAC;SACtB,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IAChD,OAAO,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAChG,CAAC;AAED,SAAS,8BAA8B,CACtC,MAAgC,EAChC,OAAe,EACf,YAAqC;IAErC,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;QAC7D,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,kBAAkB;SACrC,MAAM,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,KAAK,OAAO,CAAC;SAC1D,OAAO,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,uBAAuB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3E,OAAO,CACN,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7D,YAAY,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAChE,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CACnC,MAAsC;IAEtC,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;IAC1F,OAAO,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAClE,MAAM,cAAc,GAAG,6BAA6B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClE,OAAO;YACN,IAAI,EAAE,+BAA+B,MAAM,CAAC,MAAM,IAAI,OAAO,EAAE;YAC/D,EAAE,EAAE,cAAc;YAClB,IAAI,EAAE,cAAc;gBACnB,CAAC,CAAC,qCAAqC,OAAO,EAAE;gBAChD,CAAC,CAAC,yCAAyC,OAAO,8CAA8C,OAAO,GAAG;SACrF,CAAC;IACzB,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAsC;IACrE,MAAM,iBAAiB,GACtB,MAAM,CAAC,eAAe,KAAK,SAAS;QACnC,CAAC,CAAC;YACA,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,MAAM,CAAC,MAAM;SACrB;QACF,CAAC,CAAC;YACA,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,MAAM,CAAC,MAAM;SACrB,CAAC;IACL,OAAO,sCAAsC,CAAC,iBAAiB,CAAC,CAAC,GAAG,CACnE,CAAC,OAAO,EAAE,EAAE,CACX,CAAC;QACA,IAAI,EAAE,OAAO,CAAC,EAAE;QAChB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,OAAO,CAAC,IAAI;KAClB,CAAuB,CACzB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mCAAmC,CAClD,OAAkD;IAElD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACjC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,iBAAiB,CAAC;QAC1B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,8BAA8B,CAAC;QAC3E,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC;QACpD,MAAM,aAAa,GAClB,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC;YACpD,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;QACzD,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAC7D,OAAO;YACN,GAAG,iBAAiB;YACpB;gBACC,IAAI,EAAE,8BAA8B,MAAM,CAAC,MAAM,EAAE;gBACnD,EAAE,EAAE,cAAc,CAAC,eAAe,EAAE,8CAA8C,CAAC;gBACnF,IAAI,EAAE,0EAA0E;aAChF;YACD;gBACC,IAAI,EAAE,iCAAiC,MAAM,CAAC,MAAM,EAAE;gBACtD,EAAE,EAAE,cAAc,CAAC,eAAe,EAAE,gDAAgD,CAAC;gBACrF,IAAI,EAAE,4EAA4E;aAClF;YACD;gBACC,IAAI,EAAE,+BAA+B,MAAM,CAAC,MAAM,EAAE;gBACpD,EAAE,EACD,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC;oBACnD,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC;gBACvD,IAAI,EAAE,yCAAyC;aAC/C;YACD;gBACC,IAAI,EAAE,wCAAwC,MAAM,CAAC,MAAM,EAAE;gBAC7D,EAAE,EAAE,0BAA0B,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC;gBACrE,IAAI,EAAE,iEAAiE;aACvE;YACD;gBACC,IAAI,EAAE,qCAAqC,MAAM,CAAC,MAAM,EAAE;gBAC1D,EAAE,EAAE,gCAAgC,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC;gBAC7D,IAAI,EAAE,4HAA4H;aAClI;YACD;gBACC,IAAI,EAAE,uCAAuC,MAAM,CAAC,MAAM,EAAE;gBAC5D,EAAE,EACD,kBAAkB,CAAC,MAAM,GAAG,CAAC;oBAC7B,wBAAwB,CAAC,MAAM,CAAC;oBAChC,kBAAkB,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CACpC,8BAA8B,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAC7D;gBACF,IAAI,EAAE,+GAA+G;aACrH;YACD;gBACC,IAAI,EAAE,wBAAwB,MAAM,CAAC,MAAM,EAAE;gBAC7C,EAAE,EAAE,CAAC,aAAa,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,aAAa;gBACrE,IAAI,EACH,CAAC,aAAa,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,aAAa;oBAChE,CAAC,CAAC,kCAAkC;oBACpC,CAAC,CAAC,wEAAwE;aAC5E;YACD,GAAG,2BAA2B,CAAC,MAAM,CAAC;SACI,CAAC;IAC7C,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC5B,IAAyC;IAEzC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,2BAA2B,CACzC,IAAwB;IAExB,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,yBAAyB,CAAC,CACnD,CAAC;QACF,OAAO;YACN,gBAAgB,EAAE,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI;YACvD,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI;YAC9B,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI;SAC9B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CAC1D,YAAgC;IAEhC,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACtE,MAAM,mCAAmC,GAAG,IAAI,GAAG,CAClD,aAAa,CAAC,GAAG,CAChB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAU,CACjF,CACD,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CACjC,CACC,MAAM,OAAO,CAAC,GAAG,CAChB,aAAa,CAAC,GAAG,CAChB,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAU,CAC3E,CACD,CACD,CAAC,MAAM,CACP,CAAC,KAAK,EAAuD,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CACtF,CACD,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,2CAA2C,CAAC,YAAY,CAAC,CAAC;IAChF,MAAM,aAAa,GAAqC,EAAE,CAAC;IAC3D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,UAAU,GACf,MAAM,CAAC,IAAI,KAAK,UAAU;YACzB,CAAC,CAAC;gBACA,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,6BAA6B,EAC5B,mCAAmC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC7D,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;aACrB;YACF,CAAC,CAAC;gBACA,MAAM,EAAE,EAAE;gBACV,6BAA6B,EAC5B,mCAAmC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC7D,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,MAAM,EAAE,MAAM,CAAC,MAAM;aACrB,CAAC;QACL,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,aAAa,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,mCAAmC,CAAC,aAAa,CAAC,CAAC;AAC3D,CAAC"}
+{"version":3,"file":"openclaw-deployment-doctor.js","sourceRoot":"","sources":["../../src/operations/openclaw-deployment-doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EACN,2BAA2B,EAC3B,wBAAwB,GACxB,MAAM,sCAAsC,CAAC;AAI9C,OAAO,EACN,2CAA2C,EAC3C,sCAAsC,EACtC,cAAc,GAGd,MAAM,uCAAuC,CAAC;AA0B/C,MAAM,8BAA8B,GAA4B;IAC/D,gBAAgB,EAAE,8BAA8B;IAChD,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,KAAK;CACX,CAAC;AAaF,SAAS,cAAc,CAAC,MAAsC,EAAE,aAAqB;IACpF,OAAO,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,aAAa,CAAC,KAAK,IAAI,CAAC;AAClE,CAAC;AAED,SAAS,eAAe,CACvB,OAA4C,EAC5C,UAAkB;IAElB,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC;IACpC,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC;AACxD,CAAC;AAED,SAAS,0BAA0B,CAClC,OAA4C,EAC5C,UAAkB;IAElB,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,oBAAoB,KAAK,IAAI,CAAC;AACrE,CAAC;AAED,SAAS,gCAAgC,CAAC,OAA4C;IACrF,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;IACtD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC;AAED,SAAS,kBAAkB,CAAC,SAA6B;IACxD,OAAO,SAAS,EAAE,UAAU,CAAC,eAAe,CAAC,KAAK,IAAI,IAAI,SAAS,KAAK,cAAc,CAAC;AACxF,CAAC;AAED,SAAS,4BAA4B,CAAC,MAAgC;IACrE,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAClF,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;SAChC,MAAM,CAAC,cAAc,CAAC;SACtB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACjB,kBAAkB,CAAC,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,CAC7E;SACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAe;IAC/C,OAAO,2BAA2B,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAgC;IAClE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;SAChC,MAAM,CAAC,cAAc,CAAC;SACtB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,uBAAuB,CAAC,YAAqC,EAAE,OAAe;IACtF,OAAO,UAAU,YAAY,CAAC,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC;AAC7G,CAAC;AAED,SAAS,cAAc,CAAC,MAAgC;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB;IAC7C,OAAO,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,uBAAuB,CAC/B,MAAgC,EAChC,OAAe,EACf,YAAqC;IAErC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,MAAM,iBAAiB,GAAG,cAAc,CAAC,OAAO,CAAC;QAChD,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC;QACxC,CAAC,CAAC,SAAS,CAAC;IACb,OAAO,CACN,MAAM,CAAC,SAAS,KAAK,iBAAiB;QACtC,MAAM,CAAC,GAAG,KAAK,uBAAuB,CAAC,YAAY,EAAE,OAAO,CAAC;QAC7D,OAAO,iBAAiB,KAAK,QAAQ;QACrC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAC5B,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAgC;IACjE,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAClC,yBAAyB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CACrF,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAChC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CACtF,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC9B,MAAgC,EAChC,OAAe;IAEf,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;SACvC,MAAM,CAAC,cAAc,CAAC;SACtB,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IAChD,OAAO,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAChG,CAAC;AAED,SAAS,8BAA8B,CACtC,MAAgC,EAChC,OAAe,EACf,YAAqC;IAErC,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;QAC7D,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,kBAAkB;SACrC,MAAM,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,KAAK,OAAO,CAAC;SAC1D,OAAO,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,uBAAuB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3E,OAAO,CACN,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7D,YAAY,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAChE,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CACnC,MAAsC;IAEtC,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;IAC1F,MAAM,kCAAkC,GAAG,IAAI,GAAG,CACjD,MAAM,CAAC,kCAAkC,IAAI,EAAE,CAC/C,CAAC;IACF,OAAO,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAClE,MAAM,cAAc,GAAG,6BAA6B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,mBAAmB,GAAG,kCAAkC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5E,MAAM,eAAe,GAAG,cAAc,IAAI,mBAAmB,CAAC;QAC9D,OAAO;YACN,IAAI,EAAE,+BAA+B,MAAM,CAAC,MAAM,IAAI,OAAO,EAAE;YAC/D,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,cAAc;gBACnB,CAAC,CAAC,8CAA8C,OAAO,EAAE;gBACzD,CAAC,CAAC,mBAAmB;oBACpB,CAAC,CAAC,6CAA6C,OAAO,EAAE;oBACxD,CAAC,CAAC,0CAA0C,MAAM,CAAC,MAAM,YAAY,OAAO,6CAA6C,OAAO,GAAG;SAC/G,CAAC;IACzB,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,oCAAoC,CAC5C,MAAsC;IAEtC,OAAO,CAAC,MAAM,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,GAAG,CACnD,CAAC,SAAS,EAAE,EAAE,CACb,CAAC;QACA,IAAI,EAAE,wCAAwC,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE;QAClF,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,0CAA0C,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE;KACtF,CAAuB,CACzB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAsC;IACrE,MAAM,iBAAiB,GACtB,MAAM,CAAC,eAAe,KAAK,SAAS;QACnC,CAAC,CAAC;YACA,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,MAAM,CAAC,MAAM;SACrB;QACF,CAAC,CAAC;YACA,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,MAAM,CAAC,MAAM;SACrB,CAAC;IACL,OAAO,sCAAsC,CAAC,iBAAiB,CAAC,CAAC,GAAG,CACnE,CAAC,OAAO,EAAE,EAAE,CACX,CAAC;QACA,IAAI,EAAE,OAAO,CAAC,EAAE;QAChB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,OAAO,CAAC,IAAI;KAClB,CAAuB,CACzB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mCAAmC,CAClD,OAAkD;IAElD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACjC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,iBAAiB,CAAC;QAC1B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,8BAA8B,CAAC;QAC3E,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC;QACpD,MAAM,aAAa,GAClB,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC;YACpD,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;QACzD,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAC7D,OAAO;YACN,GAAG,iBAAiB;YACpB;gBACC,IAAI,EAAE,8BAA8B,MAAM,CAAC,MAAM,EAAE;gBACnD,EAAE,EAAE,cAAc,CAAC,eAAe,EAAE,8CAA8C,CAAC;gBACnF,IAAI,EAAE,0EAA0E;aAChF;YACD;gBACC,IAAI,EAAE,iCAAiC,MAAM,CAAC,MAAM,EAAE;gBACtD,EAAE,EAAE,cAAc,CAAC,eAAe,EAAE,gDAAgD,CAAC;gBACrF,IAAI,EAAE,4EAA4E;aAClF;YACD;gBACC,IAAI,EAAE,+BAA+B,MAAM,CAAC,MAAM,EAAE;gBACpD,EAAE,EACD,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC;oBACnD,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC;gBACvD,IAAI,EAAE,yCAAyC;aAC/C;YACD;gBACC,IAAI,EAAE,wCAAwC,MAAM,CAAC,MAAM,EAAE;gBAC7D,EAAE,EAAE,0BAA0B,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC;gBACrE,IAAI,EAAE,iEAAiE;aACvE;YACD;gBACC,IAAI,EAAE,qCAAqC,MAAM,CAAC,MAAM,EAAE;gBAC1D,EAAE,EAAE,gCAAgC,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC;gBAC7D,IAAI,EAAE,4HAA4H;aAClI;YACD;gBACC,IAAI,EAAE,uCAAuC,MAAM,CAAC,MAAM,EAAE;gBAC5D,EAAE,EACD,kBAAkB,CAAC,MAAM,GAAG,CAAC;oBAC7B,wBAAwB,CAAC,MAAM,CAAC;oBAChC,kBAAkB,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CACpC,8BAA8B,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAC7D;gBACF,IAAI,EAAE,+GAA+G;aACrH;YACD;gBACC,IAAI,EAAE,wBAAwB,MAAM,CAAC,MAAM,EAAE;gBAC7C,EAAE,EAAE,CAAC,aAAa,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,aAAa;gBACrE,IAAI,EACH,CAAC,aAAa,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,aAAa;oBAChE,CAAC,CAAC,kCAAkC;oBACpC,CAAC,CAAC,wEAAwE;aAC5E;YACD,GAAG,oCAAoC,CAAC,MAAM,CAAC;YAC/C,GAAG,2BAA2B,CAAC,MAAM,CAAC;SACI,CAAC;IAC7C,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC5B,IAAyC;IAEzC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,2BAA2B,CACzC,IAAwB;IAExB,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,yBAAyB,CAAC,CACnD,CAAC;QACF,OAAO;YACN,gBAAgB,EAAE,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI;YACvD,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI;YAC9B,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI;SAC9B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC7C,IAAwB,EACxB,MAAgC;IAEhC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAgC,EAAE,CAAC;IACnD,KAAK,MAAM,OAAO,IAAI,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5D,MAAM,YAAY,GAAG,IAAI,CACxB,IAAI,CAAC,OAAO,CAAC,QAAQ,EACrB,QAAQ,EACR,OAAO,EACP,OAAO,EACP,YAAY,EACZ,WAAW,CACX,CAAC;QACF,IAAI,CAAC;YACJ,8DAA8D;YAC9D,uFAAuF;YACvF,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,SAAS,GACd,cAAc,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBACvD,gEAAgE;gBAChE,SAAS;YACV,CAAC;YACD,UAAU,CAAC,IAAI,CAAC;gBACf,OAAO;gBACP,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC/D,IAAI,EAAE,YAAY;aAClB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CAC1D,YAAgC;IAEhC,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACtE,MAAM,mCAAmC,GAAG,IAAI,GAAG,CAClD,aAAa,CAAC,GAAG,CAChB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAU,CACjF,CACD,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CACjC,CACC,MAAM,OAAO,CAAC,GAAG,CAChB,aAAa,CAAC,GAAG,CAChB,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAU,CAC3E,CACD,CACD,CAAC,MAAM,CACP,CAAC,KAAK,EAAuD,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CACtF,CACD,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,2CAA2C,CAAC,YAAY,CAAC,CAAC;IAChF,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CACtC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAA2C,EAAE;QACrE,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/E,MAAM,oBAAoB,GACzB,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI;YACjC,CAAC,CAAC,MAAM,+BAA+B,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;YAC5D,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QACrC,MAAM,UAAU,GACf,MAAM,CAAC,IAAI,KAAK,UAAU;YACzB,CAAC,CAAC;gBACA,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,0BAA0B,EAAE,oBAAoB,CAAC,UAAU;gBAC3D,kCAAkC,EAAE,oBAAoB,CAAC,QAAQ;gBACjE,6BAA6B,EAC5B,mCAAmC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC7D,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;aACrB;YACF,CAAC,CAAC;gBACA,MAAM,EAAE,EAAE;gBACV,0BAA0B,EAAE,oBAAoB,CAAC,UAAU;gBAC3D,kCAAkC,EAAE,oBAAoB,CAAC,QAAQ;gBACjE,6BAA6B,EAC5B,mCAAmC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC7D,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,MAAM,EAAE,MAAM,CAAC,MAAM;aACrB,CAAC;QACL,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IAC9F,CAAC,CAAC,CACF,CAAC;IACF,OAAO,mCAAmC,CAAC,aAAa,CAAC,CAAC;AAC3D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-vm/agent-vm",
-  "version": "0.0.64",
+  "version": "0.0.65",
   "description": "Controller CLI and HTTP server for sandboxed VM coding agents.",
   "homepage": "https://github.com/ShravanSunder/agent-vm#readme",
   "bugs": {
@@ -40,15 +40,15 @@
     "jsonc-parser": "^3.3.1",
     "tasuku": "^2.3.0",
     "zod": "^4.4.3",
-    "@agent-vm/agent-vm-worker": "0.0.64",
-    "@agent-vm/config-contracts": "0.0.64",
-    "@agent-vm/mcp-portal": "0.0.64",
-    "@agent-vm/gondolin-adapter": "0.0.64",
-    "@agent-vm/openclaw-agent-vm-plugin": "0.0.64",
-    "@agent-vm/gateway-interface": "0.0.64",
-    "@agent-vm/openclaw-gateway": "0.0.64",
-    "@agent-vm/openclaw-mcp-portal-plugin": "0.0.64",
-    "@agent-vm/worker-gateway": "0.0.64"
+    "@agent-vm/agent-vm-worker": "0.0.65",
+    "@agent-vm/gateway-interface": "0.0.65",
+    "@agent-vm/config-contracts": "0.0.65",
+    "@agent-vm/openclaw-agent-vm-plugin": "0.0.65",
+    "@agent-vm/gondolin-adapter": "0.0.65",
+    "@agent-vm/openclaw-mcp-portal-plugin": "0.0.65",
+    "@agent-vm/openclaw-gateway": "0.0.65",
+    "@agent-vm/worker-gateway": "0.0.65",
+    "@agent-vm/mcp-portal": "0.0.65"
   },
   "scripts": {
     "build": "rm -rf dist && tsc -p tsconfig.build.json",

package/dist/cli/auth-interactive-command.d.ts

@@ -1,29 +0,0 @@
-import type { GatewayAuthConfig } from '@agent-vm/gateway-interface';
-import type { SystemConfig } from '../config/system-config.js';
-import { type CliDependencies, type CliIo } from './agent-vm-cli-support.js';
-import { type ZoneSshAccessResponse } from './ssh-commands.js';
-export declare function listAuthProviders(options: {
-    readonly listProvidersCommand: string;
-    readonly runCommand?: (command: string, arguments_: readonly string[]) => Promise<{
-        readonly exitCode: number;
-        readonly stderr: string;
-        readonly stdout: string;
-    }>;
-    readonly sshAccess: ZoneSshAccessResponse;
-}): Promise<readonly string[]>;
-export declare function runAuthInteractiveCommand(options: {
-    readonly authConfig: GatewayAuthConfig | undefined;
-    readonly dependencies: Pick<CliDependencies, 'createControllerClient' | 'createSecretResolver' | 'resolveServiceAccountToken' | 'runCommand' | 'runInteractiveProcess'>;
-    readonly deviceCode?: boolean;
-    readonly io: CliIo;
-    readonly provider: string;
-    readonly runCommand?: (command: string, arguments_: readonly string[]) => Promise<{
-        readonly exitCode: number;
-        readonly stderr: string;
-        readonly stdout: string;
-    }>;
-    readonly systemConfig: SystemConfig;
-    readonly setDefault?: boolean;
-    readonly zoneId: string;
-}): Promise<void>;
-//# sourceMappingURL=auth-interactive-command.d.ts.map

package/dist/cli/auth-interactive-command.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-interactive-command.d.ts","sourceRoot":"","sources":["../../src/cli/auth-interactive-command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAGrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EACN,KAAK,eAAe,EACpB,KAAK,KAAK,EAGV,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAGN,KAAK,qBAAqB,EAC1B,MAAM,mBAAmB,CAAC;AAY3B,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAChD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,CACrB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,SAAS,MAAM,EAAE,KACzB,OAAO,CAAC;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9F,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAC;CAC1C,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAuC7B;AAED,wBAAsB,yBAAyB,CAAC,OAAO,EAAE;IACxD,QAAQ,CAAC,UAAU,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,YAAY,EAAE,IAAI,CAC1B,eAAe,EACb,wBAAwB,GACxB,sBAAsB,GACtB,4BAA4B,GAC5B,YAAY,GACZ,uBAAuB,CACzB,CAAC;IACF,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,CACrB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,SAAS,MAAM,EAAE,KACzB,OAAO,CAAC;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9F,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiEhB"}

package/dist/cli/auth-interactive-command.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-interactive-command.js","sourceRoot":"","sources":["../../src/cli/auth-interactive-command.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAG9B,OAAO,EAGN,WAAW,EACX,wBAAwB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACN,qBAAqB,EACrB,2BAA2B,GAE3B,MAAM,mBAAmB,CAAC;AAE3B,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAElE,SAAS,UAAU,CAAC,KAAa;IAChC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,gCAAgC,CAAC,OAAe;IACxD,OAAO,YAAY,UAAU,CAAC,UAAU,wBAAwB,OAAO,OAAO,EAAE,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAOvC;IACA,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,UAAU,GACf,OAAO,CAAC,UAAU;QAClB,CAAC,KAAK,EACL,OAAe,EACf,UAA6B,EAC8D,EAAE;YAC7F,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACnE,OAAO;gBACN,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;gBAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;aACrB,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE;QAC7C,IAAI;QACJ,0BAA0B;QAC1B,IAAI;QACJ,8BAA8B;QAC9B,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,IAAI;QACJ,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;QAC9B,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,MAAM,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE;QAC/D,gCAAgC,CAAC,OAAO,CAAC,oBAAoB,CAAC;KAC9D,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACd,kCAAkC,aAAa,CAAC,MAAM,IAAI,mBAAmB,aAAa,CAAC,QAAQ,EAAE,EAAE,CACvG,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC,MAAM;SACzB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAoB/C;IACA,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,SAAS,OAAO,CAAC,MAAM,sCAAsC,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,sBAAsB,CAAC;QACpE,OAAO,EAAE,wBAAwB,CAAC,OAAO,CAAC,YAAY,CAAC;KACvD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC;QAC9C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,IAAI;KACJ,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,2BAA2B,CAAC,SAAS,CAC9D,MAAM,gBAAgB,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE;QACpD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,SAAS,EAAE,SAAS;KACpB,CAAC,CACF,CAAC;IACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC;IAC3C,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACd,oEAAoE,OAAO,CAAC,MAAM,IAAI,CACtF,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG;QACpB,IAAI;QACJ,IAAI;QACJ,0BAA0B;QAC1B,IAAI;QACJ,8BAA8B;QAC9B,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,IAAI;QACJ,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;QACxB,GAAG,WAAW,CAAC,IAAI,IAAI,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE;QACnD,gCAAgC,CAC/B,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE;YACtD,UAAU,EAAE,OAAO,CAAC,UAAU,KAAK,IAAI;YACvC,UAAU,EAAE,OAAO,CAAC,UAAU,KAAK,IAAI;SACvC,CAAC,CACF;KACD,CAAC;IAEF,MAAM,qBAAqB,GAC1B,OAAO,CAAC,YAAY,CAAC,qBAAqB;QAC1C,CAAC,KAAK,EAAE,OAAe,EAAE,UAA6B,EAAiB,EAAE;YACxE,MAAM,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE;gBAChC,KAAK,EAAE,SAAS;aAChB,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IAEJ,IAAI,CAAC;QACJ,MAAM,qBAAqB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACd,mBAAmB,OAAO,CAAC,QAAQ,aAAa,OAAO,CAAC,MAAM,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC5H,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;IACH,CAAC;AACF,CAAC"}

package/dist/cli/commands/auth-interactive-definition.d.ts

@@ -1,19 +0,0 @@
-import { type CliDependencies, type CliIo } from '../agent-vm-cli-support.js';
-export declare function createAuthInteractiveCommand(io: CliIo, dependencies: CliDependencies): Partial<import("cmd-ts/dist/cjs/argparser.js").Register> & {
-    parse(context: import("cmd-ts/dist/cjs/argparser.js").ParseContext): Promise<import("cmd-ts/dist/cjs/argparser.js").ParsingResult<{
-        config: string | undefined;
-        deviceCode: boolean;
-        provider: string;
-        setDefault: boolean;
-        zone: string | undefined;
-    }>>;
-} & import("cmd-ts/dist/cjs/helpdoc.js").PrintHelp & import("cmd-ts/dist/cjs/helpdoc.js").ProvidesHelp & import("cmd-ts/dist/cjs/helpdoc.js").Named & Partial<import("cmd-ts/dist/cjs/helpdoc.js").Versioned> & import("cmd-ts/dist/cjs/argparser.js").Register & import("cmd-ts/dist/cjs/runner.js").Handling<{
-    config: string | undefined;
-    deviceCode: boolean;
-    provider: string;
-    setDefault: boolean;
-    zone: string | undefined;
-}, Promise<void>> & {
-    run(context: import("cmd-ts/dist/cjs/argparser.js").ParseContext): Promise<import("cmd-ts/dist/cjs/argparser.js").ParsingResult<Promise<void>>>;
-} & Partial<import("cmd-ts/dist/cjs/helpdoc.js").Versioned & import("cmd-ts/dist/cjs/helpdoc.js").Descriptive & import("cmd-ts/dist/cjs/helpdoc.js").Aliased>;
-//# sourceMappingURL=auth-interactive-definition.d.ts.map

package/dist/cli/commands/auth-interactive-definition.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-interactive-definition.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/auth-interactive-definition.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,KAAK,EAAe,MAAM,4BAA4B,CAAC;AAQ3F,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,eAAe;;;;;;;;;;;;;;;;8JAuCpF"}

package/dist/cli/commands/auth-interactive-definition.js

@@ -1,46 +0,0 @@
-// oxlint-disable typescript-eslint/explicit-function-return-type
-import { command, flag, positional, string } from 'cmd-ts';
-import { loadGatewayLifecycle } from '../../gateway/gateway-lifecycle-loader.js';
-import { requireZone } from '../agent-vm-cli-support.js';
-import { runAuthInteractiveCommand } from '../auth-interactive-command.js';
-import { createConfigOption, createZoneOption, loadSystemConfigFromOption, } from './command-definition-support.js';
-export function createAuthInteractiveCommand(io, dependencies) {
-    return command({
-        name: 'auth-interactive',
-        description: 'Run interactive auth for a gateway zone.',
-        args: {
-            config: createConfigOption(),
-            deviceCode: flag({
-                long: 'device-code',
-                description: 'Use the provider device-code flow instead of browser callback auth.',
-            }),
-            provider: positional({
-                displayName: 'provider',
-                type: string,
-                description: 'Provider name (for example: codex).',
-            }),
-            setDefault: flag({
-                long: 'set-default',
-                description: 'Set the provider as the default model auth target after login.',
-            }),
-            zone: createZoneOption(),
-        },
-        handler: async ({ config, deviceCode, provider, setDefault, zone }) => {
-            const systemConfig = await loadSystemConfigFromOption(config, dependencies);
-            const selectedZone = requireZone(systemConfig, zone);
-            const lifecycle = loadGatewayLifecycle(selectedZone.gateway.type);
-            await runAuthInteractiveCommand({
-                authConfig: lifecycle.authConfig,
-                dependencies,
-                deviceCode,
-                io,
-                provider,
-                setDefault,
-                systemConfig,
-                zoneId: selectedZone.id,
-                ...(dependencies.runCommand ? { runCommand: dependencies.runCommand } : {}),
-            });
-        },
-    });
-}
-//# sourceMappingURL=auth-interactive-definition.js.map

package/dist/cli/commands/auth-interactive-definition.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-interactive-definition.js","sourceRoot":"","sources":["../../../src/cli/commands/auth-interactive-definition.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAoC,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EACN,kBAAkB,EAClB,gBAAgB,EAChB,0BAA0B,GAC1B,MAAM,iCAAiC,CAAC;AAEzC,MAAM,UAAU,4BAA4B,CAAC,EAAS,EAAE,YAA6B;IACpF,OAAO,OAAO,CAAC;QACd,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,0CAA0C;QACvD,IAAI,EAAE;YACL,MAAM,EAAE,kBAAkB,EAAE;YAC5B,UAAU,EAAE,IAAI,CAAC;gBAChB,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,qEAAqE;aAClF,CAAC;YACF,QAAQ,EAAE,UAAU,CAAC;gBACpB,WAAW,EAAE,UAAU;gBACvB,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,qCAAqC;aAClD,CAAC;YACF,UAAU,EAAE,IAAI,CAAC;gBAChB,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,gEAAgE;aAC7E,CAAC;YACF,IAAI,EAAE,gBAAgB,EAAE;SACxB;QACD,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE;YACrE,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YAC5E,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YACrD,MAAM,SAAS,GAAG,oBAAoB,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAElE,MAAM,yBAAyB,CAAC;gBAC/B,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,YAAY;gBACZ,UAAU;gBACV,EAAE;gBACF,QAAQ;gBACR,UAAU;gBACV,YAAY;gBACZ,MAAM,EAAE,YAAY,CAAC,EAAE;gBACvB,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3E,CAAC,CAAC;QACJ,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}