@agenthippo-ai/agenthippo 0.1.0

package/out/scripts/gateway/setup-gateway.ps1

@@ -0,0 +1,1813 @@
+#
+# Agent Anywhere -- Gateway Setup (Windows)
+#
+# Installs OpenClaw Gateway and builds the web UI so users can
+# configure messaging channels (Telegram, WhatsApp, Slack, etc.)
+#
+# Usage:
+#   .\setup-gateway.ps1                                          # Interactive
+#   .\setup-gateway.ps1 -Source "openclaw/openclaw#branch"       # Specify source
+#   .\setup-gateway.ps1 -Source "github:org/repo"                # npm git protocol
+#   .\setup-gateway.ps1 -Source "C:\dev\openclaw"                # Local source
+#   .\setup-gateway.ps1 -Check                                  # Check status only
+#   .\setup-gateway.ps1 -Uninstall                              # stop gateway + npm uninstall -g openclaw
+#   .\setup-gateway.ps1 -Reinstall -Source <src>               # uninstall, verify, then install
+#   .\setup-gateway.ps1 -NoModifyPath                           # opt out: skip adding wrapper dir to PATH
+#
+
+param(
+    [string]$Source = "",
+    [switch]$Check,
+    [switch]$Uninstall,
+    [switch]$Reinstall,
+    [switch]$ModifyPath,
+    [switch]$NoModifyPath,
+    [int]$Port = 18789,
+    [string]$ConfigTemplate = ""
+)
+
+$ErrorActionPreference = "Stop"
+
+function Read-OpenclawConfigGatewayPort {
+    $cfg = Join-Path $env:USERPROFILE ".openclaw\openclaw.json"
+    if (-not (Test-Path -LiteralPath $cfg)) { return $null }
+    if (-not (Get-Command node -ErrorAction SilentlyContinue)) { return $null }
+    $expr = 'const fs=require("fs");const p=require("path");const o=require("os");const f=p.join(o.homedir(),".openclaw","openclaw.json");if(!fs.existsSync(f))process.exit(1);let t=fs.readFileSync(f,"utf8");t=t.replace(/^\s*\/\/.*$/gm,"").replace(/,\s*([\]}])/g,"$1");try{const j=JSON.parse(t);const x=j&&j.gateway&&j.gateway.port;if(typeof x==="number"&&x>=1&&x<=65535){process.stdout.write(String(x));process.exit(0)}if(typeof x==="string"&&/^[0-9]+$/.test(x)){process.stdout.write(x);process.exit(0)}}catch(z){}process.exit(1);'
+    try {
+        $raw = & node -e $expr 2>$null
+        if ($null -ne $raw -and "$raw" -match '^[0-9]+$') { return [int]"$raw" }
+    } catch { }
+    return $null
+}
+
+if (-not $PSBoundParameters.ContainsKey('Port')) {
+    $cfgPort = Read-OpenclawConfigGatewayPort
+    if ($null -ne $cfgPort) { $Port = $cfgPort }
+}
+
+# ============================================================================
+# Logging helpers
+# ============================================================================
+function Log-Info    { param([string]$msg) Write-Host "[INFO] $msg" -ForegroundColor Blue }
+function Log-Success { param([string]$msg) Write-Host "  [OK] $msg" -ForegroundColor Green }
+function Log-Warn    { param([string]$msg) Write-Host "  [WARN] $msg" -ForegroundColor Yellow }
+function Log-Error   { param([string]$msg) Write-Host "[ERROR] $msg" -ForegroundColor Red }
+function Log-Step    { param([string]$msg) Write-Host "`n$msg" -ForegroundColor Cyan }
+
+$script:NodeRequiredVersion = "22.14.0"
+$script:NodeBootstrapVersion = if ($env:AGENT_ANYWHERE_NODE_VERSION) { $env:AGENT_ANYWHERE_NODE_VERSION.TrimStart('v') } else { "22.22.0" }
+$script:NodeBootstrapRoot = Join-Path $env:USERPROFILE ".agenthippo\tools\node"
+$script:NpmGlobalPrefix = Join-Path $env:USERPROFILE ".npm-global"
+$script:ManagedGatewayStateDir = Join-Path $env:USERPROFILE ".agenthippo\gateway"
+$script:ManagedGatewayManifestPath = Join-Path $script:ManagedGatewayStateDir "install.json"
+$script:GatewayInstallStatusPath = Join-Path $script:ManagedGatewayStateDir "install-status.json"
+$script:ManagedGatewayWrapperDir = if ($env:LOCALAPPDATA) { Join-Path $env:LOCALAPPDATA "AgentHippo\bin" } else { Join-Path (Join-Path $env:USERPROFILE "AppData\Local") "AgentHippo\bin" }
+$script:ManagedGatewayWrapperMarker = "REM Managed by Agent Anywhere"
+$script:GatewayInstallStatus = $null
+$script:ModifyPath = $true
+if ($NoModifyPath -or $env:AGENT_ANYWHERE_MODIFY_PATH -eq "0") {
+    $script:ModifyPath = $false
+}
+
+function Reset-GatewayInstallStatus {
+    $script:GatewayInstallStatus = @{
+        phase = "starting"
+        message = "Starting Agent Anywhere setup..."
+        lastError = $null
+        updatedAt = $null
+        steps = @{
+            cliVersionWorks = $false
+            npmInstallComplete = $false
+            wrapperExists = $false
+            configExists = $false
+            distExists = $false
+            webUiExists = $false
+            finalCheckPassed = $false
+        }
+    }
+}
+
+function Write-GatewayInstallStatus {
+    if ($null -eq $script:GatewayInstallStatus) {
+        return
+    }
+
+    New-Item -ItemType Directory -Path $script:ManagedGatewayStateDir -Force | Out-Null
+    $script:GatewayInstallStatus.updatedAt = [DateTimeOffset]::UtcNow.ToString("o")
+    $json = $script:GatewayInstallStatus | ConvertTo-Json -Depth 6
+    $utf8NoBom = [System.Text.UTF8Encoding]::new($false)
+    [System.IO.File]::WriteAllText($script:GatewayInstallStatusPath, $json, $utf8NoBom)
+}
+
+function Initialize-GatewayInstallStatus {
+    param(
+        [string]$Phase,
+        [string]$Message
+    )
+
+    Reset-GatewayInstallStatus
+    if ($Phase) {
+        $script:GatewayInstallStatus.phase = $Phase
+    }
+    if ($Message) {
+        $script:GatewayInstallStatus.message = $Message
+    }
+    Write-GatewayInstallStatus
+}
+
+function Update-GatewayInstallStatus {
+    param(
+        [string]$Phase,
+        [string]$Message,
+        [hashtable]$StepUpdates,
+        [string]$LastError
+    )
+
+    if ($null -eq $script:GatewayInstallStatus) {
+        Reset-GatewayInstallStatus
+    }
+
+    if ($Phase) {
+        $script:GatewayInstallStatus.phase = $Phase
+    }
+    if ($Message) {
+        $script:GatewayInstallStatus.message = $Message
+    }
+    if ($PSBoundParameters.ContainsKey('LastError')) {
+        $script:GatewayInstallStatus.lastError = $LastError
+    }
+    if ($StepUpdates) {
+        foreach ($key in $StepUpdates.Keys) {
+            $script:GatewayInstallStatus.steps[$key] = [bool]$StepUpdates[$key]
+        }
+    }
+
+    Write-GatewayInstallStatus
+}
+
+function Complete-GatewayInstallStatus {
+    param(
+        [hashtable]$StepUpdates,
+        [string]$Message = "Agent Anywhere is fully installed!"
+    )
+
+    Update-GatewayInstallStatus -Phase "complete" -Message $Message -StepUpdates $StepUpdates -LastError $null
+}
+
+function Fail-GatewayInstallStatus {
+    param(
+        [string]$Message,
+        [hashtable]$StepUpdates
+    )
+
+    Update-GatewayInstallStatus -Phase "failed" -Message $Message -StepUpdates $StepUpdates -LastError $Message
+}
+
+function Add-PathEntry {
+    param([string]$Entry)
+    if (-not $Entry) { return }
+    if (-not (Test-Path -LiteralPath $Entry)) { return }
+    $parts = @($env:PATH -split ';' | Where-Object { $_ -ne "" })
+    if ($parts -contains $Entry) { return }
+    $env:PATH = "$Entry;$($env:PATH)"
+}
+
+function Test-PathContainsEntry {
+    param([string]$Entry)
+    if (-not $Entry) { return $false }
+    $parts = @($env:PATH -split ';' | Where-Object { $_ -and $_.Trim() -ne "" })
+    $needle = Normalize-PathForCompare -PathValue $Entry
+    foreach ($part in $parts) {
+        if ((Normalize-PathForCompare -PathValue $part) -eq $needle) {
+            return $true
+        }
+    }
+    return $false
+}
+
+function Normalize-PathForCompare {
+    param([string]$PathValue)
+    if (-not $PathValue) { return "" }
+    return $PathValue.Trim().TrimEnd('\').ToLowerInvariant()
+}
+
+function Get-PreferredGitBashPath {
+    $candidates = @()
+    if ($env:ProgramFiles) {
+        $candidates += (Join-Path $env:ProgramFiles "Git\usr\bin\bash.exe")
+        $candidates += (Join-Path $env:ProgramFiles "Git\bin\bash.exe")
+    }
+    $programFilesX86 = [Environment]::GetEnvironmentVariable("ProgramFiles(x86)")
+    if ($programFilesX86) {
+        $candidates += (Join-Path $programFilesX86 "Git\usr\bin\bash.exe")
+        $candidates += (Join-Path $programFilesX86 "Git\bin\bash.exe")
+    }
+
+    foreach ($candidate in $candidates) {
+        if ($candidate -and (Test-Path -LiteralPath $candidate)) {
+            return $candidate
+        }
+    }
+
+    try {
+        $commands = @(Get-Command bash -All -ErrorAction SilentlyContinue)
+        foreach ($command in $commands) {
+            if ($command.Source -and $command.Source -match '[\\/]Git[\\/]usr[\\/]bin[\\/]bash\.exe$') {
+                return $command.Source
+            }
+        }
+        foreach ($command in $commands) {
+            if ($command.Source -and $command.Source -match '[\\/]Git[\\/].*bash\.exe$') {
+                return $command.Source
+            }
+        }
+    } catch { }
+
+    return $null
+}
+
+function Invoke-WithPreferredWindowsBash {
+    param([scriptblock]$ScriptBlock)
+
+    $originalPath = $env:PATH
+    $originalScriptShell = $env:npm_config_script_shell
+    $shimDir = $null
+    try {
+        $gitBashPath = Get-PreferredGitBashPath
+        if ($gitBashPath) {
+            $gitBashDir = Split-Path -Parent $gitBashPath
+            $shimDir = Join-Path ([System.IO.Path]::GetTempPath()) ("agent-anywhere-bash-" + [guid]::NewGuid().ToString("n"))
+            New-Item -ItemType Directory -Path $shimDir -Force | Out-Null
+            $shimPath = Join-Path $shimDir "bash.cmd"
+            $shimContent = @(
+                "@echo off",
+                ('"{0}" %*' -f $gitBashPath)
+            ) -join "`r`n"
+            Set-Content -Path $shimPath -Value $shimContent -Encoding Ascii
+            $env:PATH = "$shimDir;$gitBashDir;$env:PATH"
+            $env:npm_config_script_shell = $gitBashPath
+            Log-Info "Using Git Bash for source build scripts: $gitBashPath"
+        }
+        & $ScriptBlock
+    } finally {
+        $env:PATH = $originalPath
+        if ($null -eq $originalScriptShell) {
+            Remove-Item Env:npm_config_script_shell -ErrorAction SilentlyContinue
+        } else {
+            $env:npm_config_script_shell = $originalScriptShell
+        }
+        if ($shimDir -and (Test-Path -LiteralPath $shimDir)) {
+            Remove-Item -LiteralPath $shimDir -Recurse -Force -ErrorAction SilentlyContinue
+        }
+    }
+}
+
+# Write the user-scope PATH via direct HKCU registry update plus a bounded,
+# best-effort WM_SETTINGCHANGE broadcast.
+#
+# Background: [Environment]::SetEnvironmentVariable("Path", $v, "User") writes
+# the registry AND synchronously broadcasts WM_SETTINGCHANGE to every top-level
+# window. On Windows desktops with a wedged message pump (Explorer, an
+# unresponsive Electron/Chrome window, an old Slack/Teams instance, etc.) this
+# can stall the calling process for many minutes — observed during Agent
+# Anywhere uninstall as a hang with the script alive but using <1s CPU and no
+# child processes. We split the two steps so the registry update always
+# completes, then fire-and-forget a bounded broadcast that explicitly skips
+# hung windows.
+function Set-UserPathRegistry {
+    param([AllowEmptyString()][string]$Value)
+    try {
+        $key = 'HKCU:\Environment'
+        if ([string]::IsNullOrEmpty($Value)) {
+            Remove-ItemProperty -Path $key -Name 'Path' -Force -ErrorAction SilentlyContinue
+        } else {
+            $kind = [Microsoft.Win32.RegistryValueKind]::ExpandString
+            try {
+                $existing = Get-Item -Path $key -ErrorAction Stop
+                $existingKind = $existing.GetValueKind('Path')
+                if ($existingKind -eq [Microsoft.Win32.RegistryValueKind]::String -or
+                    $existingKind -eq [Microsoft.Win32.RegistryValueKind]::ExpandString) {
+                    $kind = $existingKind
+                }
+            } catch { }
+            New-ItemProperty -Path $key -Name 'Path' -PropertyType $kind -Value $Value -Force | Out-Null
+        }
+    } catch {
+        return $false
+    }
+
+    Send-EnvironmentChangeBroadcast
+    return $true
+}
+
+# Bounded WM_SETTINGCHANGE broadcast. Uses SMTO_ABORTIFHUNG with a short
+# per-window timeout so wedged windows do not block the script. Never throws.
+$script:EnvBroadcastTypeLoaded = $false
+function Send-EnvironmentChangeBroadcast {
+    if (-not $script:EnvBroadcastTypeLoaded) {
+        try {
+            Add-Type -Namespace AgentAnywhereWin32 -Name NativeMethods -MemberDefinition @'
+[System.Runtime.InteropServices.DllImport("user32.dll", SetLastError = true, CharSet = System.Runtime.InteropServices.CharSet.Auto)]
+public static extern System.IntPtr SendMessageTimeout(
+    System.IntPtr hWnd,
+    uint Msg,
+    System.IntPtr wParam,
+    string lParam,
+    uint fuFlags,
+    uint uTimeout,
+    out System.UIntPtr lpdwResult);
+'@ -ErrorAction Stop
+            $script:EnvBroadcastTypeLoaded = $true
+        } catch {
+            return
+        }
+    }
+    try {
+        $HWND_BROADCAST    = [IntPtr]0xFFFF
+        $WM_SETTINGCHANGE  = [uint32]0x001A
+        $SMTO_ABORTIFHUNG  = [uint32]0x0002
+        $perWindowTimeoutMs = [uint32]500
+        $result = [UIntPtr]::Zero
+        [AgentAnywhereWin32.NativeMethods]::SendMessageTimeout(
+            $HWND_BROADCAST,
+            $WM_SETTINGCHANGE,
+            [IntPtr]::Zero,
+            'Environment',
+            $SMTO_ABORTIFHUNG,
+            $perWindowTimeoutMs,
+            [ref]$result) | Out-Null
+    } catch { }
+}
+
+function Ensure-UserPathEntry {
+    param([string]$Entry)
+    if (-not $Entry) { return $false }
+    try {
+        New-Item -ItemType Directory -Path $Entry -Force | Out-Null
+    } catch { }
+
+    $current = [Environment]::GetEnvironmentVariable("Path", "User")
+    $parts = @()
+    if ($current) {
+        $parts = @($current -split ';' | Where-Object { $_ -and $_.Trim() -ne "" })
+    }
+    $needle = Normalize-PathForCompare -PathValue $Entry
+    foreach ($part in $parts) {
+        if ((Normalize-PathForCompare -PathValue $part) -eq $needle) {
+            return $false
+        }
+    }
+    $nextPath = if ([string]::IsNullOrWhiteSpace($current)) { $Entry } else { "$Entry;$current" }
+    if (Set-UserPathRegistry -Value $nextPath) {
+        return $true
+    }
+    Log-Warn "Could not persist PATH entry: $Entry"
+    return $false
+}
+
+function Remove-UserPathEntry {
+    param([string]$Entry)
+    if (-not $Entry) { return $false }
+    $current = [Environment]::GetEnvironmentVariable("Path", "User")
+    if (-not $current) { return $false }
+
+    $needle = Normalize-PathForCompare -PathValue $Entry
+    $parts = @($current -split ';' | Where-Object { $_ -and $_.Trim() -ne "" })
+    $nextParts = @()
+    $removed = $false
+    foreach ($part in $parts) {
+        if ((Normalize-PathForCompare -PathValue $part) -eq $needle) {
+            $removed = $true
+            continue
+        }
+        $nextParts += $part
+    }
+
+    if (-not $removed) { return $false }
+    $nextPath = if ($nextParts.Count -gt 0) { ($nextParts -join ';') } else { '' }
+    if (Set-UserPathRegistry -Value $nextPath) {
+        return $true
+    }
+    Log-Warn "Could not remove PATH entry: $Entry"
+    return $false
+}
+
+function Persist-UserGatewayEnvironment {
+    $changed = $false
+
+    if ($script:ModifyPath -and (Ensure-UserPathEntry -Entry $script:ManagedGatewayWrapperDir)) {
+        $changed = $true
+    }
+
+    if ($changed) {
+        Log-Info "Persisted PATH for future terminals (open a new terminal window after setup)."
+    }
+}
+
+function Set-NpmUserPrefix {
+    New-Item -ItemType Directory -Path $script:NpmGlobalPrefix -Force | Out-Null
+    $env:npm_config_prefix = $script:NpmGlobalPrefix
+    Add-PathEntry -Entry $script:NpmGlobalPrefix
+}
+
+function Test-DirectoryWritable {
+    param([string]$PathValue)
+    if (-not $PathValue) { return $false }
+    if (-not (Test-Path -LiteralPath $PathValue)) { return $false }
+    $probe = Join-Path $PathValue (".agent-anywhere-write-test-" + [guid]::NewGuid().ToString("n") + ".tmp")
+    try {
+        Set-Content -LiteralPath $probe -Value "" -NoNewline
+        Remove-Item -LiteralPath $probe -Force -ErrorAction SilentlyContinue
+        return $true
+    } catch {
+        Remove-Item -LiteralPath $probe -Force -ErrorAction SilentlyContinue
+        return $false
+    }
+}
+
+function Test-NpmGlobalInstallWritable {
+    if (-not (Get-Command npm -ErrorAction SilentlyContinue)) { return $false }
+    try {
+        $prefix = (& npm prefix -g 2>$null)
+        if (-not $prefix) { return $false }
+        $prefix = "$prefix".Trim()
+        if (-not (Test-DirectoryWritable -PathValue $prefix)) { return $false }
+
+        $root = (& npm root -g 2>$null)
+        if (-not $root) { return $false }
+        $root = "$root".Trim()
+        $rootParent = Split-Path -Parent $root
+        if (-not (Test-DirectoryWritable -PathValue $rootParent)) { return $false }
+        return $true
+    } catch {
+        return $false
+    }
+}
+
+function Clear-ManagedNpmPrefixOverride {
+    if ((Normalize-PathForCompare -PathValue $env:npm_config_prefix) -eq (Normalize-PathForCompare -PathValue $script:NpmGlobalPrefix)) {
+        Remove-Item Env:npm_config_prefix -ErrorAction SilentlyContinue
+    }
+}
+
+function Configure-NpmGlobalContext {
+    Clear-ManagedNpmPrefixOverride
+    if (Test-NpmGlobalInstallWritable) {
+        return
+    }
+    Set-NpmUserPrefix
+}
+
+function Cleanup-UserGatewayEnvironment {
+    $changed = $false
+
+    if (Remove-UserPathEntry -Entry $script:ManagedGatewayWrapperDir) {
+        $changed = $true
+    }
+
+    if ($changed) {
+        Log-Info "Removed Agent Anywhere PATH setting from user environment."
+    }
+}
+
+function Test-NodeVersionCompatible {
+    param([string]$VersionText)
+    if (-not $VersionText) { return $false }
+    $trimmed = $VersionText.TrimStart('v')
+    $version = $null
+    if (-not [version]::TryParse($trimmed, [ref]$version)) {
+        return $false
+    }
+    $requiredVersion = $null
+    if (-not [version]::TryParse($script:NodeRequiredVersion, [ref]$requiredVersion)) {
+        return $false
+    }
+    return ($version -ge $requiredVersion)
+}
+
+function Test-NodeCompatible {
+    try {
+        $version = (& node -v 2>$null)
+        if (-not $version) { return $false }
+        return (Test-NodeVersionCompatible -VersionText $version)
+    } catch {
+        return $false
+    }
+}
+
+function Use-BootstrappedNodeIfAvailable {
+    if (-not (Test-Path -LiteralPath $script:NodeBootstrapRoot)) { return $false }
+    $dirs = Get-ChildItem -LiteralPath $script:NodeBootstrapRoot -Directory -ErrorAction SilentlyContinue |
+        Sort-Object Name -Descending
+    foreach ($dir in $dirs) {
+        $nodeExe = Join-Path $dir.FullName "node.exe"
+        $npmCli = Join-Path $dir.FullName "npm.cmd"
+        if (-not (Test-Path -LiteralPath $nodeExe) -or -not (Test-Path -LiteralPath $npmCli)) {
+            continue
+        }
+        $version = & $nodeExe -v 2>$null
+        if (Test-NodeVersionCompatible -VersionText $version) {
+            Add-PathEntry -Entry $dir.FullName
+            return $true
+        }
+    }
+    return $false
+}
+
+function Get-ManagedGatewayWrapperPath {
+    return Join-Path $script:ManagedGatewayWrapperDir "hippoclaw.cmd"
+}
+
+function Get-ManagedOpenclawWrapperPath {
+    return Join-Path $script:ManagedGatewayWrapperDir "openclaw.cmd"
+}
+
+function Test-AgentAnywhereManagedWrapper {
+    param([string]$PathValue)
+    if (-not $PathValue -or -not (Test-Path -LiteralPath $PathValue)) { return $false }
+    try {
+        return (Get-Content -LiteralPath $PathValue -TotalCount 2 | Select-String -SimpleMatch $script:ManagedGatewayWrapperMarker -Quiet)
+    } catch {
+        return $false
+    }
+}
+
+function Write-ManagedGatewayCmdWrapper {
+    param(
+        [string]$NodePath,
+        [string]$EntryScriptPath,
+        [string]$WrapperPath
+    )
+    New-Item -ItemType Directory -Path (Split-Path -Parent $WrapperPath) -Force | Out-Null
+    $content = @"
+@echo off
+$($script:ManagedGatewayWrapperMarker)
+"$NodePath" "$EntryScriptPath" %*
+"@
+    Set-Content -LiteralPath $WrapperPath -Value $content -Encoding ASCII
+}
+
+function Resolve-ManagedGatewayInstallFromRoot {
+    param(
+        [string]$NodePath,
+        [string]$PackageRoot,
+        [string]$BinDir
+    )
+    if (-not $NodePath -or -not (Test-Path -LiteralPath $NodePath)) { return $null }
+    if (-not $PackageRoot -or -not (Test-Path -LiteralPath $PackageRoot)) { return $null }
+    try {
+        $pkgJsonPath = Join-Path $PackageRoot "package.json"
+        if (-not (Test-Path -LiteralPath $pkgJsonPath)) { return $null }
+        $pkg = Get-Content -LiteralPath $pkgJsonPath -Raw | ConvertFrom-Json
+        $binMap = @{}
+        if ($pkg.bin) {
+            if ($pkg.bin -is [string]) {
+                $binName = if ($pkg.name) { [string]$pkg.name } else { "openclaw" }
+                $binMap[$binName] = [string]$pkg.bin
+            } elseif ($pkg.bin.PSObject.Properties) {
+                foreach ($prop in $pkg.bin.PSObject.Properties) {
+                    $binMap[$prop.Name] = [string]$prop.Value
+                }
+            }
+        }
+
+        $names = [System.Collections.Generic.List[string]]::new()
+        foreach ($name in @("hippoclaw", "openclaw")) {
+            if (-not $names.Contains($name)) { [void]$names.Add($name) }
+        }
+        foreach ($name in $binMap.Keys) {
+            if (-not $names.Contains($name)) { [void]$names.Add($name) }
+        }
+
+        foreach ($name in $names) {
+            $relativeEntry = if ($binMap.ContainsKey($name)) { $binMap[$name] } else { $null }
+            if (-not $relativeEntry) { continue }
+            $entryScriptPath = [System.IO.Path]::GetFullPath((Join-Path $PackageRoot $relativeEntry))
+            if (-not (Test-Path -LiteralPath $entryScriptPath)) { continue }
+
+            $cliPath = $null
+            foreach ($candidate in @(
+                (Join-Path $BinDir "$name.cmd"),
+                (Join-Path $BinDir "$name.ps1"),
+                (Join-Path $BinDir $name)
+            )) {
+                if (Test-Path -LiteralPath $candidate) {
+                    $cliPath = $candidate
+                    break
+                }
+            }
+
+            return [pscustomobject]@{
+                NodePath = $NodePath
+                CliPath = $cliPath
+                EntryScriptPath = $entryScriptPath
+                PackageRoot = $PackageRoot
+            }
+        }
+    } catch { }
+    return $null
+}
+
+function Resolve-ManagedGatewayInstall {
+    $currentNode = (Get-Command node -ErrorAction SilentlyContinue | Select-Object -ExpandProperty Source -ErrorAction SilentlyContinue)
+
+    if ($currentNode) {
+        try {
+            $npmRoot = (npm root -g 2>$null).Trim()
+            $prefix = (& npm prefix -g 2>$null).Trim()
+            if ($npmRoot -and $prefix) {
+                $resolved = Resolve-ManagedGatewayInstallFromRoot -NodePath $currentNode -PackageRoot (Join-Path $npmRoot "openclaw") -BinDir $prefix
+                if ($resolved) { return $resolved }
+            }
+        } catch { }
+
+        # Windows npm uses node_modules/ directly (no lib/ prefix); Unix uses lib/node_modules/
+        $resolved = Resolve-ManagedGatewayInstallFromRoot -NodePath $currentNode -PackageRoot (Join-Path $script:NpmGlobalPrefix "node_modules\openclaw") -BinDir $script:NpmGlobalPrefix
+        if ($resolved) { return $resolved }
+    }
+
+    if (Test-Path -LiteralPath $script:NodeBootstrapRoot) {
+        $dirs = Get-ChildItem -LiteralPath $script:NodeBootstrapRoot -Directory -ErrorAction SilentlyContinue |
+            Sort-Object Name -Descending
+        foreach ($dir in $dirs) {
+            # Windows portable Node layout: node_modules/ at the dist root (no lib/ prefix)
+            $resolved = Resolve-ManagedGatewayInstallFromRoot -NodePath (Join-Path $dir.FullName "node.exe") -PackageRoot (Join-Path $dir.FullName "node_modules\openclaw") -BinDir $dir.FullName
+            if ($resolved) { return $resolved }
+        }
+    }
+
+    return $null
+}
+
+function Write-ManagedGatewayManifest {
+    param(
+        [string]$NodePath,
+        [string]$CliPath,
+        [string]$EntryScriptPath,
+        [string]$PackageRoot,
+        [string]$WrapperPath,
+        [string]$OpenclawWrapperPath = ""
+    )
+    New-Item -ItemType Directory -Path $script:ManagedGatewayStateDir -Force | Out-Null
+    $record = [ordered]@{
+        nodePath = $NodePath
+        cliPath = $CliPath
+        entryScriptPath = $EntryScriptPath
+        packageRoot = $PackageRoot
+        wrapperPath = $WrapperPath
+        wrapperDir = $script:ManagedGatewayWrapperDir
+        updatedAt = [DateTime]::UtcNow.ToString("o")
+    }
+    if ($OpenclawWrapperPath) {
+        $record.openclawWrapperPath = $OpenclawWrapperPath
+    }
+    # Write without BOM - PowerShell 5.1's -Encoding UTF8 emits BOM, which breaks JSON.parse in Node.js
+    $json = $record | ConvertTo-Json
+    [System.IO.File]::WriteAllBytes($script:ManagedGatewayManifestPath, [System.Text.Encoding]::UTF8.GetBytes($json))
+}
+
+function Resolve-ManagedGatewayCliPath {
+    if (-not (Test-Path -LiteralPath $script:ManagedGatewayManifestPath)) { return $null }
+    try {
+        $record = Get-Content -LiteralPath $script:ManagedGatewayManifestPath -Raw | ConvertFrom-Json
+        foreach ($candidate in @($record.wrapperPath, $record.cliPath)) {
+            if ($candidate -and (Test-Path -LiteralPath $candidate)) {
+                return $candidate
+            }
+        }
+    } catch { }
+    return $null
+}
+
+function Resolve-ManagedGatewayPackageRoot {
+    if (-not (Test-Path -LiteralPath $script:ManagedGatewayManifestPath)) { return $null }
+    try {
+        $record = Get-Content -LiteralPath $script:ManagedGatewayManifestPath -Raw | ConvertFrom-Json
+        if ($record.packageRoot -and (Test-Path -LiteralPath $record.packageRoot)) {
+            return $record.packageRoot
+        }
+    } catch { }
+    return $null
+}
+
+function Ensure-ManagedGatewayWrappers {
+    $resolved = Resolve-ManagedGatewayInstall
+    if (-not $resolved) {
+        Log-Warn "Could not resolve managed gateway install location after setup"
+        return $false
+    }
+
+    $wrapperPath = Get-ManagedGatewayWrapperPath
+    Write-ManagedGatewayCmdWrapper -NodePath $resolved.NodePath -EntryScriptPath $resolved.EntryScriptPath -WrapperPath $wrapperPath
+
+    $openclawWrapperPath = ""
+    $existingOpenclawWrapper = Get-ManagedOpenclawWrapperPath
+    if (Test-AgentAnywhereManagedWrapper -PathValue $existingOpenclawWrapper) {
+        Write-ManagedGatewayCmdWrapper -NodePath $resolved.NodePath -EntryScriptPath $resolved.EntryScriptPath -WrapperPath $existingOpenclawWrapper
+        $openclawWrapperPath = $existingOpenclawWrapper
+    }
+
+    Write-ManagedGatewayManifest -NodePath $resolved.NodePath -CliPath $resolved.CliPath -EntryScriptPath $resolved.EntryScriptPath -PackageRoot $resolved.PackageRoot -WrapperPath $wrapperPath -OpenclawWrapperPath $openclawWrapperPath
+
+    if ($script:ModifyPath) {
+        Persist-UserGatewayEnvironment
+    }
+
+    Log-Info "Stable CLI wrapper ready: $wrapperPath"
+    if (-not (Test-PathContainsEntry -Entry $script:ManagedGatewayWrapperDir)) {
+        if ($script:ModifyPath) {
+            Log-Info "Open a new terminal after setup so $($script:ManagedGatewayWrapperDir) is available on PATH."
+        } else {
+            Log-Info "Add $($script:ManagedGatewayWrapperDir) to PATH if you want to run hippoclaw directly from new terminals."
+        }
+    }
+
+    return $true
+}
+
+function Remove-ManagedGatewayWrapperState {
+    foreach ($wrapperPath in @((Get-ManagedGatewayWrapperPath), (Get-ManagedOpenclawWrapperPath))) {
+        if (Test-AgentAnywhereManagedWrapper -PathValue $wrapperPath) {
+            Remove-Item -LiteralPath $wrapperPath -Force -ErrorAction SilentlyContinue
+        }
+    }
+    Remove-Item -LiteralPath $script:ManagedGatewayManifestPath -Force -ErrorAction SilentlyContinue
+}
+
+function Install-NodeRuntime {
+    $archRaw = [System.Runtime.InteropServices.RuntimeInformation]::OSArchitecture.ToString().ToLowerInvariant()
+    $nodeArch = switch ($archRaw) {
+        "arm64" { "arm64" }
+        "x64" { "x64" }
+        "x86" { "x86" }
+        default { $null }
+    }
+    if (-not $nodeArch) {
+        Log-Error "Automatic Node bootstrap unsupported on architecture: $archRaw"
+        return $false
+    }
+
+    $version = $script:NodeBootstrapVersion
+    $distName = "node-v$version-win-$nodeArch"
+    $destDir = Join-Path $script:NodeBootstrapRoot $distName
+    $nodeExe = Join-Path $destDir "node.exe"
+    $npmCmd = Join-Path $destDir "npm.cmd"
+    if ((Test-Path -LiteralPath $nodeExe) -and (Test-Path -LiteralPath $npmCmd)) {
+        Add-PathEntry -Entry $destDir
+        return $true
+    }
+
+    $url = "https://nodejs.org/dist/v$version/$distName.zip"
+    Log-Info "Installing Node.js v$version (win-$nodeArch) to $script:NodeBootstrapRoot"
+    New-Item -ItemType Directory -Path $script:NodeBootstrapRoot -Force | Out-Null
+
+    $work = Join-Path ([System.IO.Path]::GetTempPath()) ("agent-anywhere-node-" + [guid]::NewGuid().ToString("n"))
+    New-Item -ItemType Directory -Path $work -Force | Out-Null
+    $zipPath = Join-Path $work "node.zip"
+
+    try {
+        Invoke-WebRequest -Uri $url -OutFile $zipPath
+        Expand-Archive -LiteralPath $zipPath -DestinationPath $work -Force
+        $extracted = Join-Path $work $distName
+        if (-not (Test-Path -LiteralPath $extracted)) {
+            Log-Error "Downloaded Node.js archive did not contain $distName"
+            return $false
+        }
+        if (Test-Path -LiteralPath $destDir) {
+            Remove-Item -Recurse -Force $destDir -ErrorAction SilentlyContinue
+        }
+        Move-Item -LiteralPath $extracted -Destination $destDir -Force
+        Add-PathEntry -Entry $destDir
+        return $true
+    } catch {
+        Log-Error "Failed to download/install Node.js runtime from $url"
+        return $false
+    } finally {
+        Remove-Item -Recurse -Force $work -ErrorAction SilentlyContinue
+    }
+}
+
+function Ensure-NodeNpm {
+    if (Test-NodeCompatible) {
+        try {
+            $npmVersion = (npm -v 2>$null)
+            if ($npmVersion) {
+                Configure-NpmGlobalContext
+                return $true
+            }
+        } catch { }
+    }
+
+    $null = Use-BootstrappedNodeIfAvailable
+    if (Test-NodeCompatible) {
+        try {
+            $npmVersion = (npm -v 2>$null)
+            if ($npmVersion) {
+                Configure-NpmGlobalContext
+                return $true
+            }
+        } catch { }
+    }
+
+    if (-not (Install-NodeRuntime)) {
+        return $false
+    }
+    if (-not (Test-NodeCompatible)) { return $false }
+    try {
+        $npmVersion = (npm -v 2>$null)
+        if (-not $npmVersion) { return $false }
+    } catch {
+        return $false
+    }
+
+    Configure-NpmGlobalContext
+    return $true
+}
+
+# ============================================================================
+# Git / GitHub-style sources need a local UI build
+# ============================================================================
+function Test-SourceNeedsBuild {
+    param([string]$S)
+    if (-not $S) { return $false }
+    if ($S.StartsWith("\\") -or $S.StartsWith("/") -or $S.StartsWith(".")) { return $true }
+    if ($S -match '^[A-Za-z]:') { return $true }
+    if ($S.StartsWith("github:")) { return $true }
+    if ($S.StartsWith("git+http:") -or $S.StartsWith("git+https:")) { return $true }
+    if ($S.Contains("#")) { return $true }
+    if ($S -match '^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$') { return $true }
+    return $false
+}
+
+function Needs-Pnpm {
+    return Test-SourceNeedsBuild -S $Source
+}
+
+function Test-InstallSourceLocal {
+    param([string]$S)
+    if (-not $S) { return $false }
+    return $S.StartsWith("\\") -or $S.StartsWith("/") -or $S.StartsWith(".") -or ($S -match '^[A-Za-z]:')
+}
+
+# Remote github:/git+: npm global git install can leave a broken symlink; clone -> npm pack -> install .tgz.
+# Git checkouts omit dist/; run pnpm build + ui:build in clone before npm pack (dist/entry + control-ui).
+function Install-OpenclawFromRemoteGitSpec {
+    param([string]$Spec)
+
+    $s = $Spec
+    $ref = $null
+    if ($s.Contains("#")) {
+        $ref = $s.Substring($s.LastIndexOf("#") + 1)
+        $s = $s.Substring(0, $s.LastIndexOf("#"))
+    }
+
+    $cloneUrl = $null
+    if ($s.StartsWith("git+https:") -or $s.StartsWith("git+http:")) {
+        $cloneUrl = $s.Substring(4)
+    } elseif ($s.StartsWith("github:")) {
+        $rest = $s.Substring("github:".Length)
+        $cloneUrl = "https://github.com/$rest.git"
+    } elseif ($s -match '^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$') {
+        $cloneUrl = "https://github.com/$s.git"
+    } else {
+        Log-Error "Unsupported git install source: $Spec"
+        throw "Unsupported git install source"
+    }
+
+    $work = Join-Path ([System.IO.Path]::GetTempPath()) ("openclaw-gateway-src-" + [guid]::NewGuid().ToString("n"))
+    New-Item -ItemType Directory -Path $work -Force | Out-Null
+    $srcDir = Join-Path $work "src"
+
+    try {
+        Log-Info "Cloning $(Split-Path -Leaf $cloneUrl) (shallow) for npm pack install..."
+        if ($ref) {
+            git clone --depth 1 -b $ref $cloneUrl $srcDir
+        } else {
+            git clone --depth 1 $cloneUrl $srcDir
+        }
+        if ($LASTEXITCODE -ne 0) {
+            if (Test-Path $work) { Remove-Item -Recurse -Force $work -ErrorAction SilentlyContinue }
+            Log-Error "git clone failed (check ref and network)"
+            throw "git clone failed"
+        }
+
+        Log-Info "Building OpenClaw in clone before npm pack (may take several minutes)..."
+        try {
+            Invoke-OpenclawRepoBuild -RepoDir $srcDir
+        } catch {
+            if (Test-Path $work) { Remove-Item -Recurse -Force $work -ErrorAction SilentlyContinue }
+            Log-Error "OpenClaw source build failed: $_"
+            throw
+        }
+
+        Log-Info "npm pack --ignore-scripts ..."
+        Push-Location $srcDir
+        try {
+            npm pack --ignore-scripts
+            if ($LASTEXITCODE -ne 0) {
+                if (Test-Path $work) { Remove-Item -Recurse -Force $work -ErrorAction SilentlyContinue }
+                Log-Error "npm pack failed"
+                throw "npm pack failed"
+            }
+        } finally {
+            Pop-Location
+        }
+
+        $tgz = Get-ChildItem -Path $srcDir -Filter "openclaw-*.tgz" | Sort-Object LastWriteTime -Descending | Select-Object -First 1
+        if (-not $tgz) {
+            if (Test-Path $work) { Remove-Item -Recurse -Force $work -ErrorAction SilentlyContinue }
+            Log-Error "npm pack did not produce openclaw-*.tgz under clone"
+            throw "npm pack produced no tarball"
+        }
+
+        Log-Info "npm install -g $($tgz.Name) ..."
+        npm install -g $tgz.FullName
+        if ($LASTEXITCODE -ne 0) {
+            if (Test-Path $work) { Remove-Item -Recurse -Force $work -ErrorAction SilentlyContinue }
+            Log-Error "npm install -g tarball failed"
+            throw "npm install tarball failed"
+        }
+
+        $script:RemoteGatewayCloneSrc = $srcDir
+        $script:RemoteGatewayWorkDir = $work
+    } catch {
+        if (Test-Path $work) {
+            Remove-Item -Recurse -Force $work -ErrorAction SilentlyContinue
+        }
+        throw
+    }
+}
+
+# ============================================================================
+# Check prerequisites
+# ============================================================================
+function Check-Prerequisites {
+    Log-Step "Checking prerequisites..."
+
+    $allGood = $true
+
+    if (-not (Ensure-NodeNpm)) {
+        Log-Warn "Could not automatically provision Node.js/npm"
+        $allGood = $false
+    }
+
+    # Node.js >= 22.14
+    try {
+        $nodeVersion = (node -v 2>$null)
+        if ($nodeVersion) {
+            if (Test-NodeVersionCompatible -VersionText $nodeVersion) {
+                Log-Success "Node.js $nodeVersion"
+            } else {
+                Log-Warn "Node.js $nodeVersion -- version 22.14+ required"
+                $allGood = $false
+            }
+        } else {
+            throw "not found"
+        }
+    } catch {
+        Log-Warn "Node.js not found (version 22.14+ required)"
+        Write-Host "       Install: https://nodejs.org/" -ForegroundColor Gray
+        $allGood = $false
+    }
+
+    # npm
+    try {
+        $npmVersion = (npm -v 2>$null)
+        if ($npmVersion) {
+            Log-Success "npm $npmVersion"
+        } else {
+            throw "not found"
+        }
+    } catch {
+        Log-Warn "npm not found"
+        $allGood = $false
+    }
+
+    if (Test-SourceNeedsBuild -S $Source) {
+        $localSrc = Test-InstallSourceLocal -S $Source
+        if (-not $localSrc) {
+            try {
+                $gitVersion = (git --version 2>$null)
+                if ($gitVersion) {
+                    Log-Success "git $gitVersion"
+                } else {
+                    throw "not found"
+                }
+            } catch {
+                Log-Warn "git not found (required for GitHub / git URL gateway install sources)"
+                $allGood = $false
+            }
+        }
+    }
+
+    # pnpm
+    if (Needs-Pnpm) {
+        try {
+            $pnpmVersion = (pnpm -v 2>$null)
+            if ($pnpmVersion) {
+                Log-Success "pnpm $pnpmVersion"
+            } else {
+                throw "not found"
+            }
+        } catch {
+            if (Ensure-Pnpm) {
+                $pnpmVersion = (pnpm -v 2>$null)
+                Log-Success "pnpm $pnpmVersion"
+            } else {
+                Log-Warn "pnpm not found (needed to build OpenClaw from source)"
+                $allGood = $false
+            }
+        }
+    } else {
+        Log-Info "pnpm not required for published package install"
+    }
+
+    return $allGood
+}
+
+# ============================================================================
+# Ensure pnpm is available when we need to build the UI
+# ============================================================================
+function Ensure-Pnpm {
+    try {
+        $pnpmVersion = (pnpm -v 2>$null)
+        if ($pnpmVersion) {
+            Log-Success "pnpm $pnpmVersion"
+            return $true
+        }
+    } catch { }
+
+    Log-Warn "pnpm not found - attempting to install"
+
+    try {
+        Log-Info "Installing pnpm via npm..."
+        npm install -g pnpm | Out-Null
+        $pnpmVersion = (pnpm -v 2>$null)
+        if ($pnpmVersion) {
+            Log-Success "pnpm $pnpmVersion"
+            return $true
+        }
+    } catch { }
+
+    try {
+        $corepackVersion = (corepack -v 2>$null)
+        if ($corepackVersion) {
+            Log-Info "Installing pnpm via corepack..."
+            $previousPromptValue = $env:COREPACK_ENABLE_DOWNLOAD_PROMPT
+            try {
+                $env:COREPACK_ENABLE_DOWNLOAD_PROMPT = "0"
+                corepack prepare pnpm@latest --activate | Out-Null
+            } finally {
+                if ($null -eq $previousPromptValue) {
+                    Remove-Item Env:COREPACK_ENABLE_DOWNLOAD_PROMPT -ErrorAction SilentlyContinue
+                } else {
+                    $env:COREPACK_ENABLE_DOWNLOAD_PROMPT = $previousPromptValue
+                }
+            }
+            $pnpmVersion = (pnpm -v 2>$null)
+            if ($pnpmVersion) {
+                Log-Success "pnpm $pnpmVersion"
+                return $true
+            }
+        }
+    } catch { }
+
+    Log-Warn "pnpm install failed - cannot build OpenClaw from source"
+    return $false
+}
+
+function Invoke-OpenclawRepoBuild {
+    param([string]$RepoDir)
+    if (-not (Test-Path -LiteralPath $RepoDir)) {
+        Log-Error "Repo directory missing: $RepoDir"
+        throw "missing repo dir"
+    }
+    if (-not (Ensure-Pnpm)) {
+        Log-Error "pnpm is required to build OpenClaw from a git checkout"
+        throw "pnpm missing"
+    }
+    $lock = Join-Path $RepoDir "pnpm-lock.yaml"
+    if (-not (Test-Path $lock)) {
+        Log-Error "pnpm-lock.yaml missing in $RepoDir"
+        throw "missing pnpm-lock.yaml"
+    }
+    Push-Location $RepoDir
+    try {
+        $previousCi = $env:CI
+        try {
+            $env:CI = "true"
+            Invoke-WithPreferredWindowsBash {
+                Log-Info "pnpm install..."
+                pnpm install
+                if ($LASTEXITCODE -ne 0) { throw "pnpm install failed (exit $LASTEXITCODE)" }
+                Log-Info "pnpm build..."
+                pnpm build
+                if ($LASTEXITCODE -ne 0) { throw "pnpm build failed (exit $LASTEXITCODE)" }
+                Log-Info "pnpm ui:build..."
+                pnpm ui:build
+                if ($LASTEXITCODE -ne 0) { throw "pnpm ui:build failed (exit $LASTEXITCODE)" }
+            }
+        } finally {
+            if ($null -eq $previousCi) {
+                Remove-Item Env:CI -ErrorAction SilentlyContinue
+            } else {
+                $env:CI = $previousCi
+            }
+        }
+    } finally {
+        Pop-Location
+    }
+}
+
+# ============================================================================
+# Check installed components
+# ============================================================================
+function Get-GatewayCliCommand {
+    $managed = Resolve-ManagedGatewayCliPath
+    if ($managed) {
+        return [pscustomobject]@{
+            Source = $managed
+            Name = [System.IO.Path]::GetFileNameWithoutExtension($managed)
+        }
+    }
+    $hc = Get-Command hippoclaw -ErrorAction SilentlyContinue
+    if ($hc) { return $hc }
+    $oc = Get-Command openclaw -ErrorAction SilentlyContinue
+    if ($oc) { return $oc }
+
+    try {
+        $prefix = (& npm prefix -g 2>$null).Trim()
+        if ($prefix) {
+            foreach ($name in @("hippoclaw.cmd", "hippoclaw.ps1", "hippoclaw", "openclaw.cmd", "openclaw.ps1", "openclaw")) {
+                $candidate = Join-Path $prefix $name
+                if (Test-Path -LiteralPath $candidate) {
+                    return [pscustomobject]@{
+                        Source = $candidate
+                        Name = [System.IO.Path]::GetFileNameWithoutExtension($candidate)
+                    }
+                }
+            }
+        }
+    } catch { }
+
+    if (Test-Path -LiteralPath $script:NodeBootstrapRoot) {
+        $dirs = Get-ChildItem -LiteralPath $script:NodeBootstrapRoot -Directory -ErrorAction SilentlyContinue |
+            Sort-Object Name -Descending
+        foreach ($dir in $dirs) {
+            foreach ($name in @("hippoclaw.cmd", "hippoclaw.ps1", "hippoclaw", "openclaw.cmd", "openclaw.ps1", "openclaw")) {
+                $candidate = Join-Path $dir.FullName $name
+                if (Test-Path -LiteralPath $candidate) {
+                    return [pscustomobject]@{
+                        Source = $candidate
+                        Name = [System.IO.Path]::GetFileNameWithoutExtension($candidate)
+                    }
+                }
+            }
+        }
+    }
+
+    return $null
+}
+
+# A CLI shim can exist while the underlying package is broken (e.g. a half-finished
+# npm install that left dist/ missing). Treat the CLI as functional only when it both
+# reports a version AND has its dist entry on disk -- otherwise a plain (non-reinstall)
+# run must still repair it instead of skipping the install and "finishing" broken.
+function Test-GatewayCliFunctional {
+    $cli = Get-GatewayCliCommand
+    if (-not $cli) { return $false }
+
+    # --version inside a job with a hard timeout, so a broken/hanging shim can never wedge setup.
+    $ver = $null
+    try {
+        $job = Start-Job -ScriptBlock { param($exe) (& $exe --version 2>$null | Select-Object -First 1) } -ArgumentList $cli.Source
+        if (Wait-Job $job -Timeout 20) { $ver = Receive-Job $job } else { Stop-Job $job -ErrorAction SilentlyContinue }
+        Remove-Job $job -Force -ErrorAction SilentlyContinue
+    } catch { $ver = $null }
+    if (-not $ver) { return $false }
+
+    # Verify the package dist entry exists where the CLI resolves (mirrors Check-Installed).
+    $groot = Resolve-ManagedGatewayPackageRoot
+    if (-not $groot -or -not (Test-Path -LiteralPath $groot)) {
+        $groot = Join-Path $script:NpmGlobalPrefix "node_modules\openclaw"
+    }
+    if (-not (Test-Path -LiteralPath $groot)) {
+        $npmRoot = $null
+        try { $npmRoot = (npm root -g 2>$null).Trim() } catch { }
+        if ($npmRoot) { $groot = Join-Path $npmRoot "openclaw" }
+    }
+    if ($groot -and (Test-Path -LiteralPath $groot)) {
+        if ((Test-Path -LiteralPath (Join-Path $groot "dist\entry.mjs")) -or
+            (Test-Path -LiteralPath (Join-Path $groot "dist\entry.js"))) {
+            return $true
+        }
+    }
+    return $false
+}
+
+function Remove-ManagedGatewayShims {
+    param([string]$PrefixDir)
+    if (-not $PrefixDir) { return }
+    foreach ($name in @("openclaw", "openclaw.cmd", "openclaw.ps1", "hippoclaw", "hippoclaw.cmd", "hippoclaw.ps1")) {
+        Remove-Item -Force (Join-Path $PrefixDir $name) -ErrorAction SilentlyContinue
+    }
+}
+
+function Remove-ManagedOpenclawArtifacts {
+    $legacyManagedOpenclaw = Join-Path $script:NpmGlobalPrefix "lib\node_modules\openclaw"
+    if (Test-Path $legacyManagedOpenclaw) {
+        Log-Info "Removing managed openclaw package from $legacyManagedOpenclaw"
+        Remove-Item -Recurse -Force $legacyManagedOpenclaw -ErrorAction SilentlyContinue
+    }
+    Remove-ManagedGatewayShims -PrefixDir $script:NpmGlobalPrefix
+
+    if (-not (Test-Path -LiteralPath $script:NodeBootstrapRoot)) { return }
+    $dirs = Get-ChildItem -LiteralPath $script:NodeBootstrapRoot -Directory -ErrorAction SilentlyContinue
+    foreach ($dir in $dirs) {
+        $pkgRoot = Join-Path $dir.FullName "lib\node_modules\openclaw"
+        if (Test-Path $pkgRoot) {
+            Log-Info "Removing managed openclaw package from $pkgRoot"
+            Remove-Item -Recurse -Force $pkgRoot -ErrorAction SilentlyContinue
+        }
+        Remove-ManagedGatewayShims -PrefixDir $dir.FullName
+    }
+}
+
+function Check-Installed {
+    param([switch]$UpdateInstallStatus)
+
+    if ($UpdateInstallStatus) {
+        Update-GatewayInstallStatus -Phase "verifying" -Message "Checking installed components..."
+    }
+
+    Log-Step "Checking installed components..."
+
+    $allOk = $true
+    $cliVersionWorks = $false
+    $wrapperExists = $false
+    $configExists = $false
+    $distExists = $false
+    $webUiExists = $false
+
+    $managedWrapper = Resolve-ManagedGatewayCliPath
+    if ($managedWrapper -and (Test-Path -LiteralPath $managedWrapper)) {
+        $wrapperExists = $true
+    }
+
+    # Gateway CLI binary (prefer hippoclaw from fork, fallback to openclaw)
+    $cliPath = Get-GatewayCliCommand
+    if ($cliPath) {
+        try {
+            $ocVersion = (& $cliPath.Source --version 2>$null | Select-Object -First 1)
+            if ($ocVersion) {
+                Log-Success "Gateway CLI installed ($($cliPath.Name)): $ocVersion"
+                Log-Info "Gateway CLI path: $($cliPath.Source)"
+                $cliVersionWorks = $true
+            } else {
+                throw "version unavailable"
+            }
+        } catch {
+            Log-Warn "Gateway CLI found ($($cliPath.Source)) but command failed (stale/broken shim)"
+            $allOk = $false
+        }
+    } else {
+        Log-Warn "Gateway CLI not installed (hippoclaw/openclaw)"
+        $allOk = $false
+    }
+
+    try {
+        $groot = Resolve-ManagedGatewayPackageRoot
+        if (-not $groot -or -not (Test-Path $groot)) {
+            $groot = Join-Path $script:NpmGlobalPrefix "node_modules\openclaw"
+        }
+        if (-not (Test-Path $groot)) {
+            $npmRoot = (npm root -g 2>$null).Trim()
+            $groot = if ($npmRoot) { Join-Path $npmRoot "openclaw" } else { $null }
+        }
+        if ($groot -and (Test-Path $groot)) {
+            $entryMjs = Join-Path $groot "dist\entry.mjs"
+            $entryJs = Join-Path $groot "dist\entry.js"
+            if ((Test-Path $entryMjs) -or (Test-Path $entryJs)) {
+                Log-Success "CLI dist present ($groot\dist\entry.*)"
+                $distExists = $true
+            } else {
+                Log-Warn "CLI dist missing (reinstall from npm or rerun setup with source build)"
+                $allOk = $false
+            }
+            $uiDir = Join-Path $groot "dist\control-ui"
+            if (Test-Path (Join-Path $uiDir "index.html")) {
+                Log-Success "Web UI built ($uiDir)"
+                $webUiExists = $true
+            } else {
+                Log-Warn "Web UI not built"
+                $allOk = $false
+            }
+        } else {
+            if ($cliPath) {
+                Log-Warn "Global npm openclaw package not found (CLI appears external/non-npm)"
+            } else {
+                Log-Warn "Global npm openclaw package not found"
+            }
+            $allOk = $false
+        }
+    } catch {
+        Log-Warn "Could not verify global openclaw dist (npm root?)"
+        $allOk = $false
+    }
+
+    # Gateway running? Informational only; install succeeds even when stopped.
+    try {
+        $tcp = New-Object System.Net.Sockets.TcpClient
+        $tcp.Connect("127.0.0.1", $Port)
+        $tcp.Close()
+        Log-Success "Gateway running on 127.0.0.1:$Port"
+    } catch {
+        Log-Info "Gateway not running on port $Port (this is OK; start it from Agent Anywhere when needed)"
+    }
+
+    # Config file
+    $configPath = Join-Path $env:USERPROFILE ".openclaw\openclaw.json"
+    if (Test-Path $configPath) {
+        Log-Success "Config file present ($configPath)"
+        $configExists = $true
+    } else {
+        Log-Warn "Config file not found ($configPath)"
+        $allOk = $false
+    }
+
+    if ($UpdateInstallStatus) {
+        $stepUpdates = @{
+            cliVersionWorks = $cliVersionWorks
+            wrapperExists = $wrapperExists
+            configExists = $configExists
+            distExists = $distExists
+            webUiExists = $webUiExists
+            finalCheckPassed = $allOk
+        }
+        if ($allOk) {
+            Complete-GatewayInstallStatus -StepUpdates $stepUpdates -Message "Agent Anywhere is fully installed!"
+        } else {
+            Update-GatewayInstallStatus -Phase "verifying" -Message "Install verification incomplete." -StepUpdates $stepUpdates
+        }
+    }
+
+    Write-Host ""
+    if ($allOk) {
+        Write-Host "Agent Anywhere is fully installed!" -ForegroundColor Green
+    } else {
+        Write-Host "Agent Anywhere setup is incomplete." -ForegroundColor Yellow
+    }
+
+    return $allOk
+}
+
+function Check-Uninstalled {
+    Log-Step "Checking uninstall state..."
+
+    $allOk = $true
+
+    $cliPath = Get-GatewayCliCommand
+    if ($cliPath) {
+        Log-Warn "Gateway CLI still resolves to $($cliPath.Source) (likely external/non-npm install)"
+    } else {
+        Log-Success "Gateway CLI not installed (hippoclaw/openclaw)"
+    }
+
+    try {
+        $groot = Resolve-ManagedGatewayPackageRoot
+        if (-not $groot -or -not (Test-Path $groot)) {
+            $groot = Join-Path $script:NpmGlobalPrefix "node_modules\openclaw"
+        }
+        if ($groot -and (Test-Path $groot)) {
+            Log-Warn "Managed npm openclaw package still present ($groot)"
+            $allOk = $false
+        } else {
+            Log-Success "Managed npm openclaw package not found"
+        }
+    } catch {
+        Log-Warn "Could not verify managed openclaw package path"
+        $allOk = $false
+    }
+
+    try {
+        $tcp = New-Object System.Net.Sockets.TcpClient
+        $tcp.Connect("127.0.0.1", $Port)
+        $tcp.Close()
+        Log-Warn "Gateway still running on 127.0.0.1:$Port"
+        $allOk = $false
+    } catch {
+        Log-Success "Gateway not running on port $Port"
+    }
+
+    $configPath = Join-Path $env:USERPROFILE ".openclaw\openclaw.json"
+    if (Test-Path $configPath) {
+        Log-Success "Config file preserved ($configPath)"
+    } else {
+        Log-Info "Config file already absent ($configPath)"
+    }
+
+    Write-Host ""
+    if ($allOk) {
+        Write-Host "Agent Anywhere uninstall complete." -ForegroundColor Green
+    } else {
+        Write-Host "Agent Anywhere uninstall needs attention." -ForegroundColor Yellow
+    }
+
+    return $allOk
+}
+
+# ============================================================================
+# Install gateway
+# ============================================================================
+
+# Windows holds file handles on running executables/DLLs, so a live gateway node
+# process keeps the global openclaw tree locked. Stop those processes so the tree
+# (and its nested deps like @slack/@smithy) can actually be removed before reinstall.
+function Stop-GatewayProcessesLockingTree {
+    param([string]$PkgRoot)
+
+    # 1) pid recorded by a running gateway
+    $pidPath = Join-Path $env:USERPROFILE ".openclaw\gateway.pid"
+    if (Test-Path $pidPath) {
+        try {
+            $gpid = (Get-Content -LiteralPath $pidPath -ErrorAction SilentlyContinue | Select-Object -First 1)
+            if ($gpid) { Stop-Process -Id ([int]$gpid) -Force -ErrorAction SilentlyContinue }
+        } catch { }
+    }
+
+    # 2) listeners bound to the gateway port(s)
+    $sweepPorts = @($Port)
+    if ($Port -ne 18789) { $sweepPorts += 18789 }
+    foreach ($sp in ($sweepPorts | Select-Object -Unique)) {
+        Stop-ListenersOnGatewayPort $sp
+    }
+
+    # 3) any node process running from inside the global openclaw tree
+    if ($PkgRoot) {
+        try {
+            $procs = Get-CimInstance Win32_Process -Filter "Name='node.exe'" -ErrorAction SilentlyContinue
+            foreach ($p in $procs) {
+                if ($p.CommandLine -and $p.CommandLine -like "*$PkgRoot*") {
+                    Stop-Process -Id $p.ProcessId -Force -ErrorAction SilentlyContinue
+                }
+            }
+        } catch { }
+    }
+
+    Start-Sleep -Milliseconds 500
+}
+
+# Robustly remove the global openclaw package tree: stop lockers, then retry with
+# backoff so npm's own rmdir doesn't fail later with EPERM/ENOTEMPTY on Windows.
+function Remove-OpenclawGlobalTreeRobust {
+    param([string]$PkgRoot)
+    if (-not $PkgRoot -or -not (Test-Path -LiteralPath $PkgRoot)) { return $true }
+    Stop-GatewayProcessesLockingTree -PkgRoot $PkgRoot
+    for ($i = 0; $i -lt 5; $i++) {
+        Remove-Item -Recurse -Force -LiteralPath $PkgRoot -ErrorAction SilentlyContinue
+        if (-not (Test-Path -LiteralPath $PkgRoot)) { return $true }
+        Start-Sleep -Milliseconds (400 * ($i + 1))
+    }
+    return (-not (Test-Path -LiteralPath $PkgRoot))
+}
+
+function Install-Gateway {
+    if (-not $Source) {
+        Log-Error "No install source specified. Use -Source <source>"
+        Fail-GatewayInstallStatus -Message "No install source specified."
+        exit 1
+    }
+
+    $script:RemoteGatewayCloneSrc = $null
+    $script:RemoteGatewayWorkDir = $null
+
+    Log-Step "Installing OpenClaw Gateway..."
+    Log-Info "Source: $Source"
+    Update-GatewayInstallStatus -Phase "installing" -Message "Installing Gateway CLI..."
+
+    $npmRoot = $null
+    try {
+        $npmRoot = (npm root -g 2>$null).Trim()
+    } catch { }
+
+    if ($npmRoot -and (Test-Path (Join-Path $npmRoot "openclaw"))) {
+        $existingPkg = Join-Path $npmRoot "openclaw"
+        Log-Info "Removing existing global openclaw tree (avoids partial install)..."
+        if (-not (Remove-OpenclawGlobalTreeRobust -PkgRoot $existingPkg)) {
+            Log-Warn "Could not fully remove $existingPkg (files may be locked by a running gateway)."
+            Log-Warn "Close any running gateway/openclaw process and retry, or run with -Uninstall first."
+        }
+    }
+
+    $isLocal = Test-InstallSourceLocal -S $Source
+
+    try {
+        if (Test-SourceNeedsBuild -S $Source) {
+            if ($isLocal) {
+                $absSrc = (Resolve-Path -LiteralPath $Source).Path
+                try {
+                    Invoke-OpenclawRepoBuild -RepoDir $absSrc
+                } catch {
+                    Log-Error "OpenClaw source build failed: $_"
+                    Fail-GatewayInstallStatus -Message "OpenClaw source build failed."
+                    exit 1
+                }
+                npm install -g $absSrc
+                if ($LASTEXITCODE -ne 0) {
+                    Log-Error "npm install failed"
+                    Fail-GatewayInstallStatus -Message "npm install failed."
+                    exit 1
+                }
+            } else {
+                Install-OpenclawFromRemoteGitSpec -Spec $Source
+            }
+        } else {
+            npm install -g $Source
+            if ($LASTEXITCODE -ne 0) {
+                Log-Error "npm install failed"
+                Fail-GatewayInstallStatus -Message "npm install failed."
+                exit 1
+            }
+        }
+        Log-Success "npm install complete"
+        Update-GatewayInstallStatus -Phase "installing" -Message "CLI install complete; preparing managed wrapper..." -StepUpdates @{ npmInstallComplete = $true }
+        Ensure-ManagedGatewayWrappers | Out-Null
+        $wrapperPath = Resolve-ManagedGatewayCliPath
+        if ($wrapperPath -and (Test-Path -LiteralPath $wrapperPath)) {
+            Update-GatewayInstallStatus -Phase "installing" -Message "Managed wrapper ready; preparing config..." -StepUpdates @{ wrapperExists = $true }
+        }
+
+        if (Test-SourceNeedsBuild -S $Source) {
+            Log-Info "OpenClaw built from source; global install includes dist/."
+        } else {
+            Log-Info "Published package -- web UI should be pre-built"
+        }
+    } finally {
+        if ($script:RemoteGatewayWorkDir -and (Test-Path $script:RemoteGatewayWorkDir)) {
+            Remove-Item -Recurse -Force $script:RemoteGatewayWorkDir -ErrorAction SilentlyContinue
+        }
+        $script:RemoteGatewayWorkDir = $null
+        $script:RemoteGatewayCloneSrc = $null
+    }
+}
+
+function Test-GatewayPortOpen([int]$ListenPort) {
+    try {
+        $tcp = New-Object System.Net.Sockets.TcpClient
+        $tcp.Connect("127.0.0.1", $ListenPort)
+        $tcp.Close()
+        return $true
+    } catch { return $false }
+}
+
+function Stop-ListenersOnGatewayPort([int]$ListenPort) {
+    if (-not (Test-GatewayPortOpen $ListenPort)) { return }
+    Log-Info "Port $ListenPort still in use - stopping listener process(es)..."
+    try {
+        $conns = Get-NetTCPConnection -LocalPort $ListenPort -State Listen -ErrorAction SilentlyContinue
+        foreach ($c in $conns) {
+            Stop-Process -Id $c.OwningProcess -Force -ErrorAction SilentlyContinue
+        }
+    } catch { }
+}
+
+# After npm removes the CLI: free loopback listener(s). Service teardown is openclaw uninstall --service.
+function Stop-OrphanGatewayListenersOnPorts {
+    Log-Step "Clearing local gateway listener(s) if still bound..."
+    $pidPath = Join-Path $env:USERPROFILE ".openclaw\gateway.pid"
+    Remove-Item -Path $pidPath -ErrorAction SilentlyContinue
+    $sweepPorts = @($Port)
+    if ($Port -ne 18789) { $sweepPorts += 18789 }
+    foreach ($sp in ($sweepPorts | Select-Object -Unique)) {
+        Stop-ListenersOnGatewayPort $sp
+    }
+    Start-Sleep -Seconds 1
+    $anyUp = $false
+    foreach ($sp in ($sweepPorts | Select-Object -Unique)) {
+        if (Test-GatewayPortOpen $sp) { $anyUp = $true; break }
+    }
+    if ($anyUp) {
+        Log-Warn "A process may still be listening on 127.0.0.1 (ports: $($sweepPorts -join ', '))"
+    } else {
+        Log-Success "Gateway port(s) free on 127.0.0.1 ($($sweepPorts -join ', '))"
+    }
+}
+
+function Invoke-OpenclawUninstallService {
+    $oc = Get-GatewayCliCommand
+    if (-not $oc) { return }
+    Log-Step "OpenClaw CLI: uninstall gateway service..."
+    Log-Info "Running: $($oc.Source) uninstall --service --yes --non-interactive"
+    $prevEap = $ErrorActionPreference
+    $ErrorActionPreference = "Continue"
+    try {
+        & $oc.Source uninstall --service --yes --non-interactive
+    } catch { }
+    $ErrorActionPreference = $prevEap
+    if ($LASTEXITCODE -eq 0) {
+        Log-Success "openclaw uninstall --service completed"
+    } else {
+        Log-Info "openclaw uninstall --service failed or skipped (continuing)"
+    }
+}
+
+function Remove-ResolvedCliOpenclawInstall {
+    # Remove the openclaw package wherever the CLI on PATH actually resolves to (the npm global
+    # prefix that owns the shim), not just the active/managed prefix `npm uninstall -g` covers.
+    # Bounded loop in case more than one install is present on PATH.
+    for ($i = 0; $i -lt 8; $i++) {
+        $cli = $null
+        $hc = Get-Command hippoclaw -ErrorAction SilentlyContinue
+        if ($hc) { $cli = $hc.Source }
+        else {
+            $oc = Get-Command openclaw -ErrorAction SilentlyContinue
+            if ($oc) { $cli = $oc.Source }
+        }
+        if (-not $cli) { break }
+        $prefix = Split-Path -Parent $cli
+        if (-not $prefix) { break }
+        # Windows npm global layout: <prefix>\node_modules\openclaw plus shims in <prefix>.
+        $pkgRoot = Join-Path $prefix "node_modules\openclaw"
+        if (Test-Path -LiteralPath $pkgRoot) {
+            Log-Info "Removing openclaw package tree resolved via CLI on PATH: $pkgRoot"
+            Remove-Item -Recurse -Force -LiteralPath $pkgRoot -ErrorAction SilentlyContinue
+        }
+        Remove-ManagedGatewayShims -PrefixDir $prefix
+        $still = Get-Command hippoclaw -ErrorAction SilentlyContinue
+        if (-not $still) { $still = Get-Command openclaw -ErrorAction SilentlyContinue }
+        if (-not $still) { break }
+        if ($still.Source -eq $cli) { break }
+    }
+}
+
+function Uninstall-Gateway {
+    $null = Ensure-NodeNpm
+    Invoke-OpenclawUninstallService
+    Write-Host ""
+    Log-Step "Uninstalling OpenClaw (global npm package)..."
+    if (-not (Get-Command npm -ErrorAction SilentlyContinue)) {
+        Log-Error "npm not found"
+        exit 1
+    }
+    npm uninstall -g openclaw 2>$null
+    if ($LASTEXITCODE -ne 0) {
+        Log-Warn "npm uninstall returned exit code $LASTEXITCODE (package may not have been installed)"
+    }
+    Remove-ManagedGatewayWrapperState
+    Cleanup-UserGatewayEnvironment
+    # Also remove the install wherever the CLI actually resolves (other Node global prefixes),
+    # not just the active node + managed prefix that `npm uninstall -g` above covers.
+    Remove-ResolvedCliOpenclawInstall
+    Log-Success "Ran: npm uninstall -g openclaw (global tree removed if present)"
+    Log-Info "~/.openclaw was not removed (config, sessions, and credentials stay on disk)."
+    $ocAfter = Get-Command hippoclaw -ErrorAction SilentlyContinue
+    if (-not $ocAfter) { $ocAfter = Get-Command openclaw -ErrorAction SilentlyContinue }
+    if ($ocAfter) {
+        Log-Warn "CLI still resolves to $($ocAfter.Source) (could not be removed automatically; remove it manually)."
+    }
+    Write-Host ""
+    Stop-OrphanGatewayListenersOnPorts
+}
+
+# ============================================================================
+# Write starter config
+# ============================================================================
+function Write-Config {
+    $configPath = Join-Path $env:USERPROFILE ".openclaw\openclaw.json"
+
+    if (Test-Path $configPath) {
+        Log-Info "Config already exists at $configPath -- skipping"
+        Update-GatewayInstallStatus -Phase "installing" -Message "Config already exists; verifying install..." -StepUpdates @{ configExists = $true }
+        return
+    }
+
+    Log-Step "Writing starter config..."
+    Update-GatewayInstallStatus -Phase "installing" -Message "Writing starter config..."
+    $configDir = Split-Path $configPath -Parent
+    New-Item -ItemType Directory -Path $configDir -Force | Out-Null
+
+    # Generate a random auth token
+    $bytes = New-Object byte[] 24
+    [System.Security.Cryptography.RandomNumberGenerator]::Create().GetBytes($bytes)
+    $randomToken = "ah-" + ([System.BitConverter]::ToString($bytes) -replace '-','').ToLower()
+
+    if ($ConfigTemplate -and (Test-Path $ConfigTemplate)) {
+        # Copy template and replace placeholder token
+        $content = Get-Content $ConfigTemplate -Raw
+        $content = $content -replace '__GENERATED_TOKEN__', $randomToken
+        [System.IO.File]::WriteAllBytes($configPath, [System.Text.Encoding]::UTF8.GetBytes($content))
+        Log-Success "Config written from template: $configPath"
+        Update-GatewayInstallStatus -Phase "installing" -Message "Config written; verifying install..." -StepUpdates @{ configExists = $true }
+    } else {
+        $minimalConfig = @"
+// OpenClaw Gateway Configuration (JSON5)
+// Docs: https://docs.openclaw.ai/configuration
+{
+  "gateway": { "mode": "local", "auth": { "token": "$randomToken" } },
+  "update": { "checkOnStart": false, "managedMode": true },
+  "bindings": [],
+  "channels": {},
+  "plugins": { "entries": {} },
+  "session": { "dmScope": "per-peer" },
+  "agents": { "defaults": { "maxConcurrent": 4 } }
+}
+"@
+        [System.IO.File]::WriteAllBytes($configPath, [System.Text.Encoding]::UTF8.GetBytes($minimalConfig))
+        Log-Success "Starter config written: $configPath"
+        Update-GatewayInstallStatus -Phase "installing" -Message "Config written; verifying install..." -StepUpdates @{ configExists = $true }
+    }
+
+    Write-Host ""
+    Write-Host "Next: Edit $configPath to add your channels (Telegram, WhatsApp, etc.)" -ForegroundColor Cyan
+}
+
+# ============================================================================
+# Main
+# ============================================================================
+
+Write-Host ""
+Write-Host "  +---------------------------------------+" -ForegroundColor Cyan
+Write-Host "  |        Agent Anywhere Setup           |" -ForegroundColor Cyan
+Write-Host "  |   Reach your agents from anywhere     |" -ForegroundColor Cyan
+Write-Host "  +---------------------------------------+" -ForegroundColor Cyan
+Write-Host ""
+
+if ($Check) {
+    $result = Check-Installed
+    if ($result) { exit 0 } else { exit 1 }
+}
+
+if ($Reinstall) {
+    if (-not $Source) {
+        Log-Error "-Reinstall requires -Source <src>"
+        Fail-GatewayInstallStatus -Message "Reinstall requires an install source."
+        exit 1
+    }
+    Initialize-GatewayInstallStatus -Phase "checking-prerequisites" -Message "Starting reinstall..."
+    Log-Step "Reinstall: uninstall -> verify -> install"
+    Uninstall-Gateway
+    Write-Host ""
+    Log-Step "Post-uninstall verification (-Check)..."
+    Check-Uninstalled | Out-Null
+    Write-Host ""
+    if (-not (Check-Prerequisites)) {
+        Write-Host ""
+        Log-Error "Prerequisites not met. Install the missing tools and try again."
+        Fail-GatewayInstallStatus -Message "Prerequisites not met."
+        exit 1
+    }
+    Write-Host ""
+    Install-Gateway
+    Write-Config
+    Write-Host ""
+    Check-Installed -UpdateInstallStatus | Out-Null
+    Write-Host ""
+    Write-Host "Reinstall complete. Next steps:" -ForegroundColor White
+    Write-Host "  1. Edit " -NoNewline; Write-Host "~\.openclaw\openclaw.json" -ForegroundColor Cyan -NoNewline; Write-Host " to add your channels"
+    Write-Host "  2. Click " -NoNewline; Write-Host "Agent Anywhere" -ForegroundColor Cyan -NoNewline; Write-Host " to start."
+    Write-Host ""
+    exit 0
+}
+
+if ($Uninstall) {
+    Remove-Item -Path $script:GatewayInstallStatusPath -Force -ErrorAction SilentlyContinue
+    Uninstall-Gateway
+    Write-Host ""
+    Check-Uninstalled | Out-Null
+    exit 0
+}
+
+Initialize-GatewayInstallStatus -Phase "checking-prerequisites" -Message "Checking prerequisites..."
+
+# Prerequisites
+if (-not (Check-Prerequisites)) {
+    Write-Host ""
+    Log-Error "Prerequisites not met. Install the missing tools and try again."
+    Fail-GatewayInstallStatus -Message "Prerequisites not met."
+    exit 1
+}
+
+# Install if not present OR if the resolved CLI is broken (shim exists but dist/ missing,
+# e.g. left behind by an earlier failed npm install). A bare presence check would skip the
+# install and "finish" in a broken state.
+if (-not (Test-GatewayCliFunctional)) {
+    Write-Host ""
+    Install-Gateway
+}
+
+if (-not (Resolve-ManagedGatewayCliPath) -and (Resolve-ManagedGatewayInstall)) {
+    Ensure-ManagedGatewayWrappers | Out-Null
+}
+
+# Write config if missing
+Write-Config
+
+# Final status
+Write-Host ""
+Check-Installed -UpdateInstallStatus | Out-Null
+
+Write-Host ""
+Write-Host "Done! Next steps:" -ForegroundColor White
+Write-Host "  1. Edit " -NoNewline; Write-Host "~\.openclaw\openclaw.json" -ForegroundColor Cyan -NoNewline; Write-Host " to add your channels"
+Write-Host "  2. Click " -NoNewline; Write-Host "Agent Anywhere" -ForegroundColor Cyan -NoNewline; Write-Host " to start."
+Write-Host ""