@agenthippo-ai/agenthippo 0.1.0

package/out/scripts/gateway/setup-gateway.sh

@@ -0,0 +1,1541 @@
+#!/usr/bin/env bash
+#
+# Copyright (c) AgentHippo.ai. All rights reserved.
+#
+# Agent Anywhere — Gateway Setup
+#
+# Installs OpenClaw Gateway and builds the web UI so users can
+# configure messaging channels (Telegram, WhatsApp, Slack, etc.)
+#
+# Usage:
+#   ./setup-gateway.sh                                    # Interactive
+#   ./setup-gateway.sh --source openclaw/openclaw#branch  # Specify source
+#   ./setup-gateway.sh --source github:org/repo           # npm git protocol
+#   ./setup-gateway.sh --source /path/to/local/openclaw   # Local source
+#   ./setup-gateway.sh --check                            # Check status only
+#   ./setup-gateway.sh --uninstall                        # stop gateway + npm uninstall -g (config kept)
+#   ./setup-gateway.sh --reinstall --source <src>         # uninstall, verify (--check), then install
+#   ./setup-gateway.sh --no-modify-path                   # opt out: skip adding wrapper dir to PATH
+#
+
+set -euo pipefail
+
+# npm/@npmcli: lifecycle hooks use promise-spawn with shell=true → spawns bare `sh` (not /bin/sh).
+# @npmcli/run-script setPATH() rebuilds PATH from node_modules/.bin walk + parent PATH; if PATH was
+# empty/unset, `sh` is not on PATH → spawn sh ENOENT (baileys preinstall, etc.).
+export PATH="/usr/bin:/bin:/usr/sbin:/sbin${PATH:+:$PATH}"
+export npm_config_script_shell=/bin/sh
+# Corepack should never block Agent Anywhere setup waiting for interactive approval.
+export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
+# Colors
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+CYAN='\033[0;36m'
+BOLD='\033[1m'
+NC='\033[0m'
+
+# Defaults
+INSTALL_SOURCE="${INSTALL_SOURCE:-}"
+CHECK_ONLY=false
+UNINSTALL=false
+REINSTALL=false
+GATEWAY_PORT="${GATEWAY_PORT:-18789}"
+CONFIG_TEMPLATE="${CONFIG_TEMPLATE:-}"
+PORT_FROM_CLI=false
+MODIFY_PATH=true
+
+if [[ "${AGENT_ANYWHERE_MODIFY_PATH:-0}" == "0" ]]; then
+    MODIFY_PATH=false
+fi
+
+# Parse arguments
+while [[ $# -gt 0 ]]; do
+    case "$1" in
+        --source|-s)
+            INSTALL_SOURCE="$2"
+            shift 2
+            ;;
+        --uninstall)
+            UNINSTALL=true
+            shift
+            ;;
+        --reinstall)
+            REINSTALL=true
+            shift
+            ;;
+        --check|-c)
+            CHECK_ONLY=true
+            shift
+            ;;
+        --port|-p)
+            GATEWAY_PORT="$2"
+            PORT_FROM_CLI=true
+            shift 2
+            ;;
+        --config-template)
+            CONFIG_TEMPLATE="$2"
+            shift 2
+            ;;
+        --modify-path)
+            MODIFY_PATH=true
+            shift
+            ;;
+        --no-modify-path)
+            MODIFY_PATH=false
+            shift
+            ;;
+        --help|-h)
+            echo "Usage: $0 [options]"
+            echo ""
+            echo "Options:"
+            echo "  --source, -s <src>     npm install source (git repo or local path)"
+            echo "  --check, -c            Check installation status only"
+            echo "  --uninstall            Stop gateway, remove global openclaw (~/.openclaw unchanged)"
+            echo "  --reinstall            With --source: uninstall, run check, then full install"
+            echo "  --port, -p <port>      Gateway port (default: gateway.port in ~/.openclaw/openclaw.json, else 18789)"
+            echo "  --config-template <f>  Path to starter config template"
+            echo "  --modify-path          Persist only the stable wrapper dir to your shell profile (default: on)"
+            echo "  --no-modify-path       Do not write the wrapper-dir PATH block to shell profiles"
+            echo "                         (set AGENT_ANYWHERE_MODIFY_PATH=0 to disable)"
+            echo "  --help, -h             Show this help"
+            exit 0
+            ;;
+        *)
+            echo "Unknown option: $1"
+            exit 1
+            ;;
+    esac
+done
+
+# Read gateway.port from ~/.openclaw/openclaw.json (JSON5-ish: strip // comments) for stop/check/start alignment with OpenClaw.
+read_openclaw_config_gateway_port() {
+    local f="$HOME/.openclaw/openclaw.json"
+    [[ -f "$f" ]] || return 1
+    command -v node &>/dev/null || return 1
+    node -e '
+const fs = require("fs");
+const path = require("path");
+const os = require("os");
+const fp = path.join(os.homedir(), ".openclaw", "openclaw.json");
+if (!fs.existsSync(fp)) process.exit(1);
+let t = fs.readFileSync(fp, "utf8");
+t = t.replace(/^\s*\/\/.*$/gm, "").replace(/,\s*([\]}])/g, "$1");
+try {
+  const j = JSON.parse(t);
+  const p = j && j.gateway && j.gateway.port;
+  if (typeof p === "number" && p >= 1 && p <= 65535) { process.stdout.write(String(p)); process.exit(0); }
+  if (typeof p === "string" && /^[0-9]+$/.test(p)) { process.stdout.write(p); process.exit(0); }
+} catch (e) {}
+process.exit(1);
+' 2>/dev/null
+}
+
+# When --port is omitted, match the running gateway / OpenClaw config (IDE uses the same file).
+if ! $PORT_FROM_CLI; then
+    _cfg_port=""
+    _cfg_port=$(read_openclaw_config_gateway_port) || true
+    if [[ -n "$_cfg_port" ]]; then
+        GATEWAY_PORT="$_cfg_port"
+    fi
+fi
+
+# Logging
+log_info()    { echo -e "${BLUE}[INFO]${NC} $1"; }
+log_success() { echo -e "${GREEN}  ✓${NC} $1"; }
+log_warn()    { echo -e "${YELLOW}  ✗${NC} $1"; }
+log_error()   { echo -e "${RED}[ERROR]${NC} $1"; }
+log_step()    { echo -e "\n${BOLD}${CYAN}$1${NC}"; }
+
+NODE_REQUIRED_VERSION="${NODE_REQUIRED_VERSION:-22.14.0}"
+NODE_BOOTSTRAP_VERSION="${AGENT_ANYWHERE_NODE_VERSION:-22.22.0}"
+NODE_BOOTSTRAP_ROOT="${HOME}/.agenthippo/tools/node"
+NPM_GLOBAL_PREFIX="${HOME}/.npm-global"
+USING_BOOTSTRAP_NODE=false
+MANAGED_GATEWAY_STATE_DIR="${HOME}/.agenthippo/gateway"
+MANAGED_GATEWAY_MANIFEST_PATH="${MANAGED_GATEWAY_STATE_DIR}/install.json"
+MANAGED_GATEWAY_WRAPPER_DIR="${HOME}/.local/bin"
+AGENT_ANYWHERE_PATH_MARKER_BEGIN="# >>> Agent Anywhere PATH >>>"
+AGENT_ANYWHERE_PATH_MARKER_END="# <<< Agent Anywhere PATH <<<"
+MANAGED_GATEWAY_WRAPPER_MARKER="# Managed by Agent Anywhere"
+
+add_path_entry() {
+    local entry="$1"
+    [[ -n "$entry" ]] || return 0
+    local p new_path=""
+    IFS=':' read -r -a _path_parts <<<"${PATH:-}"
+    for p in "${_path_parts[@]}"; do
+        [[ -z "$p" || "$p" == "$entry" ]] && continue
+        if [[ -z "$new_path" ]]; then
+            new_path="$p"
+        else
+            new_path="$new_path:$p"
+        fi
+    done
+    export PATH="$entry${new_path:+:$new_path}"
+}
+
+path_contains_entry() {
+    local entry="$1"
+    [[ -n "$entry" ]] || return 1
+    local part
+    IFS=':' read -r -a _path_parts <<<"${PATH:-}"
+    for part in "${_path_parts[@]}"; do
+        [[ "$part" == "$entry" ]] && return 0
+    done
+    return 1
+}
+
+is_fish_profile() {
+    local file="$1"
+    [[ "$file" == "$HOME/.config/fish/config.fish" ]]
+}
+
+build_agent_anywhere_shell_path_block() {
+    local profile_file="${1:-}"
+    if is_fish_profile "$profile_file"; then
+        cat <<'EOF'
+# >>> Agent Anywhere PATH >>>
+# Added by Agent Anywhere setup: keep the stable wrapper dir on PATH.
+function _agent_anywhere_prepend_path --argument-names entry
+    test -n "$entry"; or return 0
+    set -l filtered_path
+    for p in $PATH
+        if test "$p" != "$entry"
+            set -a filtered_path "$p"
+        end
+    end
+    set -gx PATH "$entry" $filtered_path
+end
+EOF
+        cat <<'EOF'
+if test -d "$HOME/.local/bin"
+    _agent_anywhere_prepend_path "$HOME/.local/bin"
+end
+functions -e _agent_anywhere_prepend_path 2>/dev/null
+# <<< Agent Anywhere PATH <<<
+EOF
+        return 0
+    fi
+
+    cat <<'EOF'
+# >>> Agent Anywhere PATH >>>
+# Added by Agent Anywhere setup: keep the stable wrapper dir on PATH.
+_agent_anywhere_prepend_path() {
+    [ -n "${1:-}" ] || return 0
+    PATH=":${PATH}:"
+    PATH="${PATH//:$1:/:}"
+    PATH="${PATH#:}"
+    PATH="${PATH%:}"
+    PATH="$1${PATH:+:$PATH}"
+}
+EOF
+    cat <<'EOF'
+if [ -d "$HOME/.local/bin" ]; then
+    _agent_anywhere_prepend_path "$HOME/.local/bin"
+fi
+export PATH
+unset -f _agent_anywhere_prepend_path 2>/dev/null || true
+# <<< Agent Anywhere PATH <<<
+EOF
+}
+
+upsert_shell_block_in_file() {
+    local file="$1"
+    local block tmp_file
+    block="$(build_agent_anywhere_shell_path_block "$file")"
+    if [[ ! -f "$file" ]]; then
+        if ! touch "$file" 2>/dev/null; then
+            log_warn "Could not update shell profile $file"
+            return 1
+        fi
+    fi
+    tmp_file="$(mktemp "${TMPDIR:-/tmp}/agent-anywhere-profile.XXXXXX")"
+    awk -v begin="$AGENT_ANYWHERE_PATH_MARKER_BEGIN" -v end="$AGENT_ANYWHERE_PATH_MARKER_END" '
+        $0 == begin { skip = 1; next }
+        $0 == end { skip = 0; next }
+        skip != 1 { print }
+    ' "$file" > "$tmp_file"
+    printf '\n%s\n' "$block" >> "$tmp_file"
+    if cmp -s "$file" "$tmp_file"; then
+        rm -f "$tmp_file"
+        return 1
+    fi
+    mv "$tmp_file" "$file"
+    return 0
+}
+
+resolve_active_shell_profile() {
+    local shell_name
+    shell_name="$(basename "${SHELL:-}")"
+    case "$shell_name" in
+        zsh)
+            printf '%s\n' "$HOME/.zshrc"
+            ;;
+        bash)
+            if [[ "$(uname -s 2>/dev/null)" == "Darwin" ]]; then
+                printf '%s\n' "$HOME/.bash_profile"
+            else
+                printf '%s\n' "$HOME/.bashrc"
+            fi
+            ;;
+        fish)
+            printf '%s\n' "$HOME/.config/fish/config.fish"
+            ;;
+        *)
+            printf '%s\n' "$HOME/.profile"
+            ;;
+    esac
+}
+
+persist_shell_path_setup() {
+    $MODIFY_PATH || return 0
+
+    local file changed=false
+    file="$(resolve_active_shell_profile)"
+    if upsert_shell_block_in_file "$file"; then
+        changed=true
+    fi
+
+    if $changed; then
+        log_info "Persisted PATH for future terminals in $file (open a new terminal window after setup)."
+    fi
+}
+
+remove_agent_anywhere_shell_block_from_file() {
+    local file="$1"
+    [[ -f "$file" ]] || return 1
+
+    local tmp_file
+    tmp_file="$(mktemp "${TMPDIR:-/tmp}/agent-anywhere-profile-clean.XXXXXX")"
+    awk -v begin="$AGENT_ANYWHERE_PATH_MARKER_BEGIN" -v end="$AGENT_ANYWHERE_PATH_MARKER_END" '
+        $0 == begin { skip = 1; next }
+        $0 == end { skip = 0; next }
+        skip != 1 { print }
+    ' "$file" > "$tmp_file"
+
+    if cmp -s "$file" "$tmp_file"; then
+        rm -f "$tmp_file"
+        return 1
+    fi
+
+    mv "$tmp_file" "$file"
+    return 0
+}
+
+cleanup_shell_path_setup() {
+    local file changed=false
+    local -a profile_targets=(
+        "$HOME/.zprofile"
+        "$HOME/.zshrc"
+        "$HOME/.bash_profile"
+        "$HOME/.bashrc"
+        "$HOME/.profile"
+        "$HOME/.config/fish/config.fish"
+    )
+
+    for file in "${profile_targets[@]}"; do
+        if remove_agent_anywhere_shell_block_from_file "$file"; then
+            changed=true
+        fi
+    done
+
+    if $changed; then
+        log_info "Removed Agent Anywhere PATH block from shell profiles."
+    fi
+}
+
+set_npm_user_prefix() {
+    mkdir -p "$NPM_GLOBAL_PREFIX/bin" "$NPM_GLOBAL_PREFIX/lib" 2>/dev/null || true
+    export npm_config_prefix="$NPM_GLOBAL_PREFIX"
+    add_path_entry "$NPM_GLOBAL_PREFIX/bin"
+}
+
+npm_global_install_writable() {
+    command -v npm &>/dev/null || return 1
+    local prefix root root_parent
+    prefix="$(npm prefix -g 2>/dev/null || true)"
+    [[ -n "$prefix" && -d "$prefix" && -w "$prefix" ]] || return 1
+    if [[ -d "$prefix/bin" && ! -w "$prefix/bin" ]]; then
+        return 1
+    fi
+    root="$(npm root -g 2>/dev/null || true)"
+    [[ -n "$root" ]] || return 1
+    root_parent="$(dirname "$root")"
+    [[ -d "$root_parent" && -w "$root_parent" ]]
+}
+
+configure_npm_global_context() {
+    if [[ "${npm_config_prefix:-}" == "$NPM_GLOBAL_PREFIX" ]]; then
+        unset npm_config_prefix
+    fi
+    if [[ "${NPM_CONFIG_PREFIX:-}" == "$NPM_GLOBAL_PREFIX" ]]; then
+        unset NPM_CONFIG_PREFIX
+    fi
+
+    # Default: use npm's normal global prefix (nvm/fnm/homebrew/system).
+    # Fallback to ~/.npm-global only when the default prefix is not writable.
+    if npm_global_install_writable; then
+        return 0
+    fi
+    set_npm_user_prefix
+}
+
+node_version_is_compatible() {
+    local version="${1:-}"
+    version="${version#v}"
+    local required="${NODE_REQUIRED_VERSION#v}"
+    local major minor patch_rest patch req_major req_minor req_patch_rest req_patch
+    IFS='.' read -r major minor patch_rest <<<"$version"
+    IFS='.' read -r req_major req_minor req_patch_rest <<<"$required"
+    patch="${patch_rest%%[^0-9]*}"
+    req_patch="${req_patch_rest%%[^0-9]*}"
+    major="${major:-0}"
+    minor="${minor:-0}"
+    patch="${patch:-0}"
+    req_major="${req_major:-0}"
+    req_minor="${req_minor:-0}"
+    req_patch="${req_patch:-0}"
+    [[ "$major" =~ ^[0-9]+$ && "$minor" =~ ^[0-9]+$ && "$patch" =~ ^[0-9]+$ ]] || return 1
+    [[ "$req_major" =~ ^[0-9]+$ && "$req_minor" =~ ^[0-9]+$ && "$req_patch" =~ ^[0-9]+$ ]] || return 1
+    if [[ "$major" -gt "$req_major" ]]; then
+        return 0
+    fi
+    if [[ "$major" -lt "$req_major" ]]; then
+        return 1
+    fi
+    if [[ "$minor" -gt "$req_minor" ]]; then
+        return 0
+    fi
+    if [[ "$minor" -lt "$req_minor" ]]; then
+        return 1
+    fi
+    [[ "$patch" -ge "$req_patch" ]]
+}
+
+node_is_compatible() {
+    if ! command -v node &>/dev/null; then
+        return 1
+    fi
+    local version
+    version=$(node -v 2>/dev/null || true)
+    node_version_is_compatible "$version"
+}
+
+activate_bootstrap_node_if_available() {
+    local candidate_dir candidate_node version
+    [[ -d "$NODE_BOOTSTRAP_ROOT" ]] || return 1
+    while IFS= read -r candidate_node; do
+        candidate_dir="${candidate_node%/node}"
+        [[ -x "$candidate_node" ]] || continue
+        version=$("$candidate_node" -v 2>/dev/null || true)
+        if node_version_is_compatible "$version"; then
+            add_path_entry "$candidate_dir"
+            USING_BOOTSTRAP_NODE=true
+            return 0
+        fi
+    done < <(find "$NODE_BOOTSTRAP_ROOT" -maxdepth 4 -type f -path '*/bin/node' 2>/dev/null | sort -r)
+    return 1
+}
+
+resolve_gateway_wrapper_path() {
+    printf '%s\n' "${MANAGED_GATEWAY_WRAPPER_DIR}/hippoclaw"
+}
+
+resolve_openclaw_wrapper_path() {
+    printf '%s\n' "${MANAGED_GATEWAY_WRAPPER_DIR}/openclaw"
+}
+
+wrapper_is_managed_by_agent_anywhere() {
+    local wrapper_path="$1"
+    [[ -f "$wrapper_path" ]] || return 1
+    grep -Fq "$MANAGED_GATEWAY_WRAPPER_MARKER" "$wrapper_path" 2>/dev/null
+}
+
+write_gateway_wrapper() {
+    local node_path="$1"
+    local entry_script_path="$2"
+    local wrapper_path="$3"
+    mkdir -p "$(dirname "$wrapper_path")"
+    cat > "$wrapper_path" <<EOF
+#!/bin/sh
+$MANAGED_GATEWAY_WRAPPER_MARKER
+exec "$node_path" "$entry_script_path" "\$@"
+EOF
+    chmod +x "$wrapper_path"
+}
+
+resolve_managed_gateway_install_from_root() {
+    local node_path="$1"
+    local package_root="$2"
+    local bin_dir="$3"
+    [[ -x "$node_path" && -d "$package_root" ]] || return 1
+    node - "$node_path" "$package_root" "$bin_dir" <<'EOF'
+const fs = require("fs");
+const path = require("path");
+const [nodePath, pkgRoot, binDir] = process.argv.slice(2);
+const pkgJsonPath = path.join(pkgRoot, "package.json");
+if (!fs.existsSync(pkgJsonPath)) {
+	process.exit(1);
+}
+const pkg = JSON.parse(fs.readFileSync(pkgJsonPath, "utf8"));
+let bins = pkg.bin;
+if (typeof bins === "string") {
+	bins = { [pkg.name || "openclaw"]: bins };
+}
+const names = [...new Set(["hippoclaw", "openclaw", ...Object.keys(bins || {})])];
+for (const name of names) {
+	const relativeEntry = bins && typeof bins[name] === "string" ? bins[name] : undefined;
+	if (!relativeEntry) {
+		continue;
+	}
+	const entryScriptPath = path.resolve(pkgRoot, relativeEntry);
+	if (!fs.existsSync(entryScriptPath)) {
+		continue;
+	}
+	const launcherPath = binDir ? path.join(binDir, name) : "";
+	if (!launcherPath || fs.existsSync(launcherPath)) {
+		process.stdout.write(`${nodePath}\n${launcherPath}\n${entryScriptPath}\n${pkgRoot}\n`);
+		process.exit(0);
+	}
+}
+process.exit(1);
+EOF
+}
+
+resolve_managed_gateway_install() {
+    local current_node npm_root prefix package_root
+    current_node="$(command -v node 2>/dev/null || true)"
+
+    if [[ -n "$current_node" ]]; then
+        npm_root="$(npm root -g 2>/dev/null || true)"
+        prefix="$(npm prefix -g 2>/dev/null || true)"
+        package_root="${npm_root}/openclaw"
+        if [[ -n "$npm_root" && -n "$prefix" && -d "$package_root" ]]; then
+            resolve_managed_gateway_install_from_root "$current_node" "$package_root" "${prefix}/bin" && return 0
+        fi
+
+        package_root="${NPM_GLOBAL_PREFIX}/lib/node_modules/openclaw"
+        if [[ -d "$package_root" ]]; then
+            resolve_managed_gateway_install_from_root "$current_node" "$package_root" "${NPM_GLOBAL_PREFIX}/bin" && return 0
+        fi
+    fi
+
+    local candidate_node candidate_dir install_dir
+    [[ -d "$NODE_BOOTSTRAP_ROOT" ]] || return 1
+    while IFS= read -r candidate_node; do
+        candidate_dir="${candidate_node%/node}"
+        install_dir="$(dirname "$candidate_dir")"
+        package_root="${install_dir}/lib/node_modules/openclaw"
+        if [[ -d "$package_root" ]]; then
+            resolve_managed_gateway_install_from_root "$candidate_node" "$package_root" "$candidate_dir" && return 0
+        fi
+    done < <(find "$NODE_BOOTSTRAP_ROOT" -maxdepth 4 -type f -path '*/bin/node' 2>/dev/null | sort -r)
+    return 1
+}
+
+write_managed_gateway_manifest() {
+    local node_path="$1"
+    local cli_path="$2"
+    local entry_script_path="$3"
+    local package_root="$4"
+    local wrapper_path="$5"
+    local openclaw_wrapper_path="${6:-}"
+    mkdir -p "$MANAGED_GATEWAY_STATE_DIR"
+    node - "$MANAGED_GATEWAY_MANIFEST_PATH" "$node_path" "$cli_path" "$entry_script_path" "$package_root" "$wrapper_path" "$MANAGED_GATEWAY_WRAPPER_DIR" "$openclaw_wrapper_path" <<'EOF'
+const fs = require("fs");
+const path = require("path");
+const [manifestPath, nodePath, cliPath, entryScriptPath, packageRoot, wrapperPath, wrapperDir, openclawWrapperPath] = process.argv.slice(2);
+const record = {
+	nodePath,
+	cliPath,
+	entryScriptPath,
+	packageRoot,
+	wrapperPath,
+	wrapperDir,
+	updatedAt: new Date().toISOString(),
+};
+if (openclawWrapperPath) {
+	record.openclawWrapperPath = openclawWrapperPath;
+}
+fs.mkdirSync(path.dirname(manifestPath), { recursive: true });
+fs.writeFileSync(manifestPath, JSON.stringify(record, null, 2));
+EOF
+}
+
+resolve_gateway_cli_bin_from_manifest() {
+    [[ -f "$MANAGED_GATEWAY_MANIFEST_PATH" ]] || return 1
+    node - "$MANAGED_GATEWAY_MANIFEST_PATH" <<'EOF'
+const fs = require("fs");
+const manifestPath = process.argv[2];
+try {
+	const record = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+	for (const candidate of [record.wrapperPath, record.cliPath]) {
+		if (candidate && fs.existsSync(candidate)) {
+			process.stdout.write(candidate);
+			process.exit(0);
+		}
+	}
+} catch {
+	// ignore
+}
+process.exit(1);
+EOF
+}
+
+resolve_managed_gateway_package_root_from_manifest() {
+    [[ -f "$MANAGED_GATEWAY_MANIFEST_PATH" ]] || return 1
+    node - "$MANAGED_GATEWAY_MANIFEST_PATH" <<'EOF'
+const fs = require("fs");
+const manifestPath = process.argv[2];
+try {
+	const record = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+	if (record.packageRoot && fs.existsSync(record.packageRoot)) {
+		process.stdout.write(record.packageRoot);
+		process.exit(0);
+	}
+} catch {
+	// ignore
+}
+process.exit(1);
+EOF
+}
+
+ensure_gateway_wrappers() {
+    local resolved_output node_path cli_path entry_script_path package_root wrapper_path openclaw_wrapper_path=""
+    resolved_output="$(resolve_managed_gateway_install)" || {
+        log_warn "Could not resolve managed gateway install location after setup"
+        return 1
+    }
+    node_path="$(printf '%s\n' "$resolved_output" | sed -n '1p')"
+    cli_path="$(printf '%s\n' "$resolved_output" | sed -n '2p')"
+    entry_script_path="$(printf '%s\n' "$resolved_output" | sed -n '3p')"
+    package_root="$(printf '%s\n' "$resolved_output" | sed -n '4p')"
+    [[ -n "$node_path" && -n "$entry_script_path" && -n "$package_root" ]] || {
+        log_warn "Managed gateway install metadata was incomplete"
+        return 1
+    }
+
+    wrapper_path="$(resolve_gateway_wrapper_path)"
+    write_gateway_wrapper "$node_path" "$entry_script_path" "$wrapper_path"
+
+    local existing_openclaw_wrapper
+    existing_openclaw_wrapper="$(resolve_openclaw_wrapper_path)"
+    if wrapper_is_managed_by_agent_anywhere "$existing_openclaw_wrapper"; then
+        write_gateway_wrapper "$node_path" "$entry_script_path" "$existing_openclaw_wrapper"
+        openclaw_wrapper_path="$existing_openclaw_wrapper"
+    fi
+
+    write_managed_gateway_manifest "$node_path" "$cli_path" "$entry_script_path" "$package_root" "$wrapper_path" "$openclaw_wrapper_path"
+
+    if $MODIFY_PATH; then
+        persist_shell_path_setup
+    fi
+
+    log_info "Stable CLI wrapper ready: $wrapper_path"
+    if ! path_contains_entry "$MANAGED_GATEWAY_WRAPPER_DIR"; then
+        if $MODIFY_PATH; then
+            log_info "Open a new terminal after setup so $MANAGED_GATEWAY_WRAPPER_DIR is available on PATH."
+        else
+            log_info "Add $MANAGED_GATEWAY_WRAPPER_DIR to PATH if you want to run hippoclaw directly from new terminals."
+        fi
+    fi
+}
+
+remove_managed_gateway_wrapper_state() {
+    local wrapper_path openclaw_wrapper_path
+    wrapper_path="$(resolve_gateway_wrapper_path)"
+    openclaw_wrapper_path="$(resolve_openclaw_wrapper_path)"
+    if wrapper_is_managed_by_agent_anywhere "$wrapper_path"; then
+        rm -f "$wrapper_path"
+    fi
+    if wrapper_is_managed_by_agent_anywhere "$openclaw_wrapper_path"; then
+        rm -f "$openclaw_wrapper_path"
+    fi
+    rm -f "$MANAGED_GATEWAY_MANIFEST_PATH"
+}
+
+install_node_runtime() {
+    local uname_s uname_m node_os node_arch archive_ext version dist_name url
+    uname_s="$(uname -s)"
+    uname_m="$(uname -m)"
+
+    case "$uname_s" in
+        Darwin)
+            node_os="darwin"
+            archive_ext="tar.gz"
+            ;;
+        Linux)
+            node_os="linux"
+            archive_ext="tar.xz"
+            ;;
+        *)
+            log_error "Automatic Node bootstrap unsupported on OS: $uname_s"
+            return 1
+            ;;
+    esac
+
+    case "$uname_m" in
+        x86_64|amd64) node_arch="x64" ;;
+        arm64|aarch64) node_arch="arm64" ;;
+        *)
+            log_error "Automatic Node bootstrap unsupported on architecture: $uname_m"
+            return 1
+            ;;
+    esac
+
+    version="${NODE_BOOTSTRAP_VERSION#v}"
+    dist_name="node-v${version}-${node_os}-${node_arch}"
+    url="https://nodejs.org/dist/v${version}/${dist_name}.${archive_ext}"
+    local install_dir="${NODE_BOOTSTRAP_ROOT}/${dist_name}"
+    local bin_dir="${install_dir}/bin"
+
+    if [[ -x "${bin_dir}/node" && -x "${bin_dir}/npm" ]]; then
+        add_path_entry "$bin_dir"
+        USING_BOOTSTRAP_NODE=true
+        return 0
+    fi
+
+    log_info "Installing Node.js v${version} (${node_os}-${node_arch}) to ${NODE_BOOTSTRAP_ROOT}"
+    mkdir -p "$NODE_BOOTSTRAP_ROOT"
+
+    local work_dir archive_path
+    work_dir="$(mktemp -d "${TMPDIR:-/tmp}/agent-anywhere-node.XXXXXX")"
+    archive_path="${work_dir}/${dist_name}.${archive_ext}"
+
+    if ! curl -fsSL "$url" -o "$archive_path"; then
+        rm -rf "$work_dir"
+        log_error "Failed to download Node.js runtime from $url"
+        return 1
+    fi
+
+    if [[ "$archive_ext" == "tar.xz" ]]; then
+        tar -xJf "$archive_path" -C "$work_dir" || {
+            rm -rf "$work_dir"
+            log_error "Failed to extract Node.js archive (.tar.xz)"
+            return 1
+        }
+    else
+        tar -xzf "$archive_path" -C "$work_dir" || {
+            rm -rf "$work_dir"
+            log_error "Failed to extract Node.js archive (.tar.gz)"
+            return 1
+        }
+    fi
+
+    if [[ ! -d "${work_dir}/${dist_name}" ]]; then
+        rm -rf "$work_dir"
+        log_error "Downloaded Node.js archive did not contain ${dist_name}"
+        return 1
+    fi
+
+    rm -rf "$install_dir"
+    mv "${work_dir}/${dist_name}" "$install_dir"
+    rm -rf "$work_dir"
+
+    add_path_entry "$bin_dir"
+    USING_BOOTSTRAP_NODE=true
+    return 0
+}
+
+ensure_node_npm() {
+    if node_is_compatible && command -v npm &>/dev/null; then
+        configure_npm_global_context
+        return 0
+    fi
+
+    activate_bootstrap_node_if_available || true
+    if node_is_compatible && command -v npm &>/dev/null; then
+        configure_npm_global_context
+        return 0
+    fi
+
+    install_node_runtime || return 1
+    if node_is_compatible && command -v npm &>/dev/null; then
+        configure_npm_global_context
+        return 0
+    fi
+
+    log_error "Node.js bootstrap finished but node/npm are still unavailable"
+    return 1
+}
+
+# Git / GitHub-style sources need a local UI build (published tarballs ship dist/).
+needs_source_build() {
+    if [[ -z "$INSTALL_SOURCE" ]]; then
+        return 1
+    fi
+    local s="$INSTALL_SOURCE"
+    if [[ "$s" == /* || "$s" == ./* ]]; then
+        return 0
+    fi
+    if [[ "$s" == github:* || "$s" == git+http:* || "$s" == git+https:* ]]; then
+        return 0
+    fi
+    if [[ "$s" == *"#"* ]]; then
+        return 0
+    fi
+    # npm GitHub shorthand: owner/repo (not @scope/pkg)
+    if [[ "$s" =~ ^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$ ]]; then
+        return 0
+    fi
+    return 1
+}
+
+needs_pnpm() {
+    needs_source_build
+}
+
+# Remote GitHub / git URL: npm install -g github:... can leave a dangling symlink; we clone, npm pack,
+# and npm install -g the .tgz for a real global tree. Git checkouts do not include compiled dist/ (gitignored);
+# we must pnpm build + ui:build in the clone before npm pack so dist/entry.(m)js and dist/control-ui exist.
+install_openclaw_from_remote_git_spec() {
+    local spec="$1"
+    local s="$spec" ref=""
+    if [[ "$s" == *"#"* ]]; then
+        ref="${s##*#}"
+        s="${s%#*}"
+    fi
+
+    local clone_url=""
+    if [[ "$s" == git+https:* || "$s" == git+http:* ]]; then
+        clone_url="${s#git+}"
+    elif [[ "$s" == github:* ]]; then
+        clone_url="https://github.com/${s#github:}.git"
+    elif [[ "$s" =~ ^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$ ]]; then
+        clone_url="https://github.com/${s}.git"
+    else
+        log_error "Unsupported git install source: $spec"
+        exit 1
+    fi
+
+    local work
+    work="$(mktemp -d "${TMPDIR:-/tmp}/openclaw-gateway-src.XXXXXX")"
+
+    log_info "Cloning $(basename "$clone_url" .git) (shallow) for npm pack install..."
+    if [[ -n "$ref" ]]; then
+        git clone --depth 1 -b "$ref" "$clone_url" "$work/src" || {
+            log_error "git clone failed (check ref and network)"
+            rm -rf "$work"
+            exit 1
+        }
+    else
+        git clone --depth 1 "$clone_url" "$work/src" || {
+            log_error "git clone failed"
+            rm -rf "$work"
+            exit 1
+        }
+    fi
+
+    build_openclaw_in_dir "$work/src" || {
+        log_error "OpenClaw build failed in clone (need pnpm, Node 22.14+, network for deps)"
+        rm -rf "$work"
+        exit 1
+    }
+
+    log_info "npm pack --ignore-scripts (no publish prepare hooks required)..."
+    (cd "$work/src" && npm pack --ignore-scripts) || {
+        log_error "npm pack failed"
+        rm -rf "$work"
+        exit 1
+    }
+
+    local tgz
+    tgz="$(ls -t "$work/src"/openclaw-*.tgz 2>/dev/null | head -1)"
+    if [[ -z "$tgz" || ! -f "$tgz" ]]; then
+        log_error "npm pack did not produce openclaw-*.tgz under clone"
+        rm -rf "$work"
+        exit 1
+    fi
+
+    log_info "npm install -g $(basename "$tgz") ..."
+    npm install -g "$tgz" || {
+        log_error "npm install -g tarball failed"
+        rm -rf "$work"
+        exit 1
+    }
+
+    REMOTE_GATEWAY_CLONE_SRC="$work/src"
+    REMOTE_GATEWAY_WORK_DIR="$work"
+}
+
+# ============================================================================
+# Check prerequisites
+# ============================================================================
+check_prerequisites() {
+    log_step "Checking prerequisites..."
+
+    local all_good=true
+
+    if ! ensure_node_npm; then
+        log_warn "Could not automatically provision Node.js/npm"
+        all_good=false
+    fi
+
+    # Node.js >= 22.14
+    if node_is_compatible; then
+        log_success "Node.js $(node -v)"
+    elif command -v node &>/dev/null; then
+        log_warn "Node.js $(node -v) — version 22.14+ required"
+        all_good=false
+    else
+        log_warn "Node.js not found (version 22.14+ required)"
+        echo "       Automatic bootstrap failed. Install manually: https://nodejs.org/"
+        all_good=false
+    fi
+
+    # npm
+    if command -v npm &>/dev/null; then
+        log_success "npm $(npm -v)"
+    else
+        log_warn "npm not found"
+        all_good=false
+    fi
+
+    # git (clone + npm pack path for remote GitHub/git install sources)
+    if needs_pnpm; then
+        local src="$INSTALL_SOURCE"
+        if [[ "$src" != /* && "$src" != ./* ]]; then
+            if command -v git &>/dev/null; then
+                log_success "git $(git --version | head -1)"
+            else
+                log_warn "git not found (required for GitHub / git URL gateway install sources)"
+                all_good=false
+            fi
+        fi
+    fi
+
+    # pnpm (needed for pnpm build + ui:build when installing from git/local source)
+    if needs_pnpm; then
+        if command -v pnpm &>/dev/null; then
+            log_success "pnpm $(pnpm -v)"
+        else
+            if ensure_pnpm; then
+                log_success "pnpm $(pnpm -v)"
+            else
+                log_warn "pnpm not found (needed to build OpenClaw from source)"
+                all_good=false
+            fi
+        fi
+    else
+        log_info "pnpm not required for published package install"
+    fi
+
+    $all_good
+}
+
+# ============================================================================
+# Ensure pnpm is available when we need to build the UI
+# ============================================================================
+ensure_pnpm() {
+    if command -v pnpm &>/dev/null; then
+        log_success "pnpm $(pnpm -v)"
+        return 0
+    fi
+
+    log_warn "pnpm not found — attempting to install"
+
+    if command -v corepack &>/dev/null; then
+        log_info "Installing pnpm via corepack..."
+        export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+        if corepack prepare pnpm@latest --activate &>/dev/null; then
+            if command -v pnpm &>/dev/null; then
+                log_success "pnpm $(pnpm -v)"
+                return 0
+            fi
+        fi
+    fi
+
+    if command -v npm &>/dev/null; then
+        log_info "Installing pnpm via npm..."
+        if npm install -g pnpm; then
+            log_success "pnpm $(pnpm -v)"
+            return 0
+        fi
+    fi
+
+    log_warn "pnpm install failed — skipping web UI build"
+    return 1
+}
+
+# Full compile + control UI in a repo checkout (dist/ is not committed to git).
+build_openclaw_in_dir() {
+    local dir="$1"
+    if [[ ! -d "$dir" ]]; then
+        log_error "build_openclaw_in_dir: not a directory: $dir"
+        return 1
+    fi
+    ensure_pnpm || {
+        log_error "pnpm is required to build OpenClaw from a git checkout"
+        return 1
+    }
+    log_info "pnpm install && pnpm build && pnpm ui:build in $(basename "$dir") (may take several minutes)..."
+    (
+        cd "$dir" || exit 1
+        if [[ ! -f pnpm-lock.yaml ]]; then
+            log_error "pnpm-lock.yaml missing — expected an OpenClaw repo checkout"
+            exit 1
+        fi
+        pnpm install || {
+            log_error "pnpm install failed"
+            exit 1
+        }
+        pnpm build || {
+            log_error "pnpm build failed"
+            exit 1
+        }
+        pnpm ui:build || {
+            log_error "pnpm ui:build failed"
+            exit 1
+        }
+    )
+}
+
+# ============================================================================
+# Check installed components
+# ============================================================================
+check_installed() {
+    log_step "Checking installed components..."
+
+    local all_ok=true
+
+    # Gateway CLI binary (prefer hippoclaw from fork, fallback to openclaw)
+    local cli_bin=""
+    cli_bin="$(resolve_gateway_cli_bin || true)"
+    if [[ -n "$cli_bin" ]]; then
+        local oc_version
+        if oc_version="$("$cli_bin" --version 2>/dev/null | head -1)" && [[ -n "$oc_version" ]]; then
+            log_success "Gateway CLI installed ($(basename "$cli_bin")): $oc_version"
+            log_info "Gateway CLI path: $cli_bin"
+        else
+            log_warn "Gateway CLI found ($cli_bin) but command failed (stale/broken shim)"
+            all_ok=false
+        fi
+    else
+        # Check common install locations
+        local found=false
+        local dir name candidate
+        for dir in \
+            "$HOME/Library/pnpm" \
+            "$HOME/.local/share/pnpm" \
+            "$HOME/.npm-global/bin" \
+            "/usr/local/bin" \
+            "/usr/bin"; do
+            for name in hippoclaw openclaw; do
+                candidate="$dir/$name"
+                if [[ -x "$candidate" ]]; then
+                    local oc_version
+                    oc_version=$("$candidate" --version 2>/dev/null | head -1 || echo "unknown")
+                    log_success "Gateway CLI installed at $candidate: $oc_version"
+                    found=true
+                    break 2
+                fi
+            done
+        done
+        if ! $found; then
+            log_warn "Gateway CLI not installed (hippoclaw/openclaw)"
+            all_ok=false
+        fi
+    fi
+
+    # CLI dist and Web UI under global npm package (npm root first; ~/.npm-global legacy fallback)
+    local npm_root groot ui_dir
+    groot="$(resolve_managed_gateway_package_root_from_manifest || true)"
+    if [[ -z "$groot" || ! -d "$groot" ]]; then
+        npm_root="$(npm root -g 2>/dev/null || true)"
+        groot=""
+        [[ -n "$npm_root" ]] && groot="$npm_root/openclaw"
+        if [[ -z "$groot" || ! -d "$groot" ]]; then
+            groot="$NPM_GLOBAL_PREFIX/lib/node_modules/openclaw"
+        fi
+    fi
+    if [[ -n "$groot" && -d "$groot" ]]; then
+        if [[ -f "$groot/dist/entry.mjs" || -f "$groot/dist/entry.js" ]]; then
+            log_success "CLI dist present ($groot/dist/entry.*)"
+        else
+            log_warn "CLI dist missing (run setup with source build or reinstall from npm)"
+            all_ok=false
+        fi
+
+        ui_dir="$groot/dist/control-ui"
+        if [[ -f "$ui_dir/index.html" ]]; then
+            log_success "Web UI built ($ui_dir)"
+        else
+            log_warn "Web UI not built"
+            all_ok=false
+        fi
+    else
+        if [[ -n "$cli_bin" ]]; then
+            log_warn "Global npm openclaw package not found (CLI appears external/non-npm)"
+        else
+            log_warn "Global npm openclaw package not found"
+        fi
+        all_ok=false
+    fi
+
+    # Gateway running? Informational only; install succeeds even when stopped.
+    if nc -z 127.0.0.1 "$GATEWAY_PORT" 2>/dev/null; then
+        log_success "Gateway running on 127.0.0.1:$GATEWAY_PORT"
+    else
+        log_info "Gateway not running on port $GATEWAY_PORT (this is OK; start it from Agent Anywhere when needed)"
+    fi
+
+    # Config file
+    local config_path="$HOME/.openclaw/openclaw.json"
+    if [[ -f "$config_path" ]]; then
+        log_success "Config file present ($config_path)"
+    else
+        log_warn "Config file not found ($config_path)"
+        all_ok=false
+    fi
+
+    echo ""
+    if $all_ok; then
+        echo -e "${GREEN}${BOLD}Agent Anywhere is fully installed!${NC}"
+        return 0
+    else
+        echo -e "${YELLOW}${BOLD}Agent Anywhere setup is incomplete.${NC}"
+        return 1
+    fi
+}
+
+check_uninstalled() {
+    log_step "Checking uninstall state..."
+
+    local all_ok=true
+    local cli_bin=""
+
+    cli_bin="$(resolve_gateway_cli_bin_on_path 2>/dev/null || true)"
+    if [[ -n "$cli_bin" ]]; then
+        log_warn "Gateway CLI still resolves to $cli_bin (likely external/non-npm install)"
+    else
+        log_success "Gateway CLI not installed (hippoclaw/openclaw)"
+    fi
+
+    local groot=""
+    groot="$(resolve_managed_gateway_package_root_from_manifest || true)"
+    if [[ -z "$groot" || ! -d "$groot" ]]; then
+        groot="$NPM_GLOBAL_PREFIX/lib/node_modules/openclaw"
+    fi
+    if [[ -n "$groot" && -d "$groot" ]]; then
+        log_warn "Managed npm openclaw package still present ($groot)"
+        all_ok=false
+    else
+        log_success "Managed npm openclaw package not found"
+    fi
+
+    if nc -z 127.0.0.1 "$GATEWAY_PORT" 2>/dev/null; then
+        log_warn "Gateway still running on 127.0.0.1:$GATEWAY_PORT"
+        all_ok=false
+    else
+        log_success "Gateway not running on port $GATEWAY_PORT"
+    fi
+
+    local config_path="$HOME/.openclaw/openclaw.json"
+    if [[ -f "$config_path" ]]; then
+        log_success "Config file preserved ($config_path)"
+    else
+        log_info "Config file already absent ($config_path)"
+    fi
+
+    echo ""
+    if $all_ok; then
+        echo -e "${GREEN}${BOLD}Agent Anywhere uninstall complete.${NC}"
+        return 0
+    else
+        echo -e "${YELLOW}${BOLD}Agent Anywhere uninstall needs attention.${NC}"
+        return 1
+    fi
+}
+
+# ============================================================================
+# Install gateway
+# ============================================================================
+install_gateway() {
+    if [[ -z "$INSTALL_SOURCE" ]]; then
+        log_error "No install source specified. Use --source <source>"
+        exit 1
+    fi
+
+    REMOTE_GATEWAY_CLONE_SRC=""
+    REMOTE_GATEWAY_WORK_DIR=""
+
+    log_step "Installing OpenClaw Gateway..."
+    log_info "Source: $INSTALL_SOURCE"
+
+    local _npm_root
+    _npm_root="$(npm root -g 2>/dev/null || true)"
+    if [[ -n "$_npm_root" && -e "$_npm_root/openclaw" ]]; then
+        log_info "Removing existing global openclaw tree (avoids partial install / tar errors)..."
+        rm -rf "$_npm_root/openclaw"
+    fi
+
+    # Local directory: npm links to that path (stable). Remote github:/git+: use clone+pack+tgz
+    # so global node_modules/openclaw is a real tree (npm git+ignore-scripts leaves a dangling symlink).
+    if needs_source_build; then
+        if [[ "$INSTALL_SOURCE" == /* || "$INSTALL_SOURCE" == ./* ]]; then
+            local abs_src
+            abs_src="$(cd "$INSTALL_SOURCE" && pwd)"
+            build_openclaw_in_dir "$abs_src" || exit 1
+            npm install -g "$abs_src"
+        else
+            install_openclaw_from_remote_git_spec "$INSTALL_SOURCE"
+        fi
+    else
+        npm install -g "$INSTALL_SOURCE"
+    fi
+    log_success "npm install complete"
+    ensure_gateway_wrappers || true
+
+    if needs_source_build; then
+        # dist/ was built before pack (remote) or before npm install -g (local); remove temp clone only.
+        if [[ -n "${REMOTE_GATEWAY_WORK_DIR:-}" ]]; then
+            log_info "Removing temporary clone directory..."
+            rm -rf "$REMOTE_GATEWAY_WORK_DIR"
+            REMOTE_GATEWAY_WORK_DIR=""
+            REMOTE_GATEWAY_CLONE_SRC=""
+        fi
+    else
+        log_info "Published package — web UI should be pre-built"
+    fi
+}
+
+# ============================================================================
+# Stop gateway listeners (graceful CLI stop, then best-effort process/port cleanup)
+# ============================================================================
+resolve_gateway_cli_bin_on_path() {
+    if command -v hippoclaw &>/dev/null; then
+        command -v hippoclaw
+        return 0
+    fi
+    if command -v openclaw &>/dev/null; then
+        command -v openclaw
+        return 0
+    fi
+    return 1
+}
+
+resolve_gateway_cli_bin() {
+    if resolve_gateway_cli_bin_from_manifest >/dev/null 2>&1; then
+        resolve_gateway_cli_bin_from_manifest
+        return 0
+    fi
+    if resolve_gateway_cli_bin_on_path >/dev/null 2>&1; then
+        resolve_gateway_cli_bin_on_path
+        return 0
+    fi
+    local candidate
+    local dir name
+    local current_prefix
+    current_prefix="$(npm prefix -g 2>/dev/null || true)"
+    for dir in \
+        "$MANAGED_GATEWAY_WRAPPER_DIR" \
+        "${current_prefix}/bin" \
+        "$HOME/Library/pnpm" \
+        "$HOME/.local/share/pnpm" \
+        "$HOME/.npm-global/bin" \
+        "/usr/local/bin" \
+        "/usr/bin"; do
+        for name in hippoclaw openclaw; do
+            candidate="$dir/$name"
+            if [[ -x "$candidate" ]]; then
+                printf '%s\n' "$candidate"
+                return 0
+            fi
+        done
+    done
+    if [[ -d "$NODE_BOOTSTRAP_ROOT" ]]; then
+        while IFS= read -r dir; do
+            for name in hippoclaw openclaw; do
+                candidate="$dir/$name"
+                if [[ -x "$candidate" ]]; then
+                    printf '%s\n' "$candidate"
+                    return 0
+                fi
+            done
+        done < <(
+            find "$NODE_BOOTSTRAP_ROOT" -maxdepth 4 -type f -path '*/bin/node' -print 2>/dev/null \
+                | xargs -I{} dirname "{}" 2>/dev/null \
+                | sort -u
+        )
+    fi
+    return 1
+}
+
+remove_managed_openclaw_artifacts() {
+    local dir install_dir pkg_root
+
+    pkg_root="$NPM_GLOBAL_PREFIX/lib/node_modules/openclaw"
+    if [[ -d "$pkg_root" ]]; then
+        log_info "Removing managed openclaw package from $pkg_root"
+        rm -rf "$pkg_root"
+    fi
+    rm -f "$NPM_GLOBAL_PREFIX/bin/openclaw" "$NPM_GLOBAL_PREFIX/bin/hippoclaw" 2>/dev/null || true
+
+    [[ -d "$NODE_BOOTSTRAP_ROOT" ]] || return 0
+    while IFS= read -r dir; do
+        install_dir="$(dirname "$dir")"
+        pkg_root="$install_dir/lib/node_modules/openclaw"
+        if [[ -d "$pkg_root" ]]; then
+            log_info "Removing managed openclaw package from $pkg_root"
+            rm -rf "$pkg_root"
+        fi
+        rm -f "$dir/openclaw" "$dir/hippoclaw" 2>/dev/null || true
+    done < <(
+        find "$NODE_BOOTSTRAP_ROOT" -maxdepth 4 -type f -path '*/bin/node' -print 2>/dev/null \
+            | xargs -I{} dirname "{}" 2>/dev/null \
+            | sort -u
+    )
+}
+
+# Remove the openclaw package wherever the CLI on PATH actually resolves to, including per-version
+# Node global trees (e.g. nvm) that the managed-prefix cleanup above does not cover. Equivalent to
+# `npm uninstall -g openclaw` for that prefix (remove the package tree + its bin shims), but
+# reliable regardless of which Node owns the install. Bounded loop in case several Node versions
+# each have a copy.
+remove_resolved_cli_openclaw_install() {
+    local i cli_bin node_bin_dir prefix pkg_root removed_any=false
+    for ((i = 0; i < 8; i++)); do
+        hash -r 2>/dev/null || true
+        cli_bin="$(resolve_gateway_cli_bin_on_path 2>/dev/null || true)"
+        [[ -n "$cli_bin" ]] || break
+        node_bin_dir="$(cd "$(dirname "$cli_bin")" 2>/dev/null && pwd)" || break
+        # npm global layout: <prefix>/bin/<cli> and <prefix>/lib/node_modules/openclaw.
+        prefix="$(dirname "$node_bin_dir")"
+        pkg_root="$prefix/lib/node_modules/openclaw"
+        if [[ -d "$pkg_root" ]]; then
+            log_info "Removing openclaw package tree resolved via CLI on PATH: $pkg_root"
+            rm -rf "$pkg_root" 2>/dev/null || true
+            removed_any=true
+        fi
+        rm -f "$node_bin_dir/openclaw" "$node_bin_dir/hippoclaw" 2>/dev/null || true
+        # Bail if the same path still resolves (could not delete, e.g. permissions) to avoid looping.
+        hash -r 2>/dev/null || true
+        if [[ "$(resolve_gateway_cli_bin_on_path 2>/dev/null || true)" == "$cli_bin" ]]; then
+            break
+        fi
+    done
+    $removed_any && log_success "Removed openclaw install(s) the CLI resolved to outside the managed prefix"
+    return 0
+}
+
+# After npm removes the CLI, clear any leftover listener (e.g. detached node). Service teardown is
+# openclaw uninstall --service; we do not duplicate launchd/systemd/pkill here.
+free_local_gateway_ports_if_busy() {
+    log_step "Clearing local gateway listener(s) if still bound..."
+    rm -f "$HOME/.openclaw/gateway.pid" 2>/dev/null || true
+    local sweep_ports=("$GATEWAY_PORT")
+    [[ "$GATEWAY_PORT" != "18789" ]] && sweep_ports+=(18789)
+    local sp pids
+    for sp in "${sweep_ports[@]}"; do
+        nc -z 127.0.0.1 "$sp" 2>/dev/null || continue
+        command -v lsof &>/dev/null || {
+            log_warn "Port $sp in use but lsof not available — stop the process manually"
+            continue
+        }
+        log_info "Port $sp in use — stopping listener PID(s)..."
+        pids=$(lsof -nP -iTCP:"$sp" -sTCP:LISTEN -t 2>/dev/null | tr '\n' ' ' || true)
+        if [[ -n "${pids// }" ]]; then
+            # shellcheck disable=SC2086
+            kill $pids 2>/dev/null || true
+            sleep 1
+            pids=$(lsof -nP -iTCP:"$sp" -sTCP:LISTEN -t 2>/dev/null | tr '\n' ' ' || true)
+            if [[ -n "${pids// }" ]]; then
+                # shellcheck disable=SC2086
+                kill -9 $pids 2>/dev/null || true
+            fi
+        fi
+    done
+    local any_up=false
+    for sp in "${sweep_ports[@]}"; do
+        if nc -z 127.0.0.1 "$sp" 2>/dev/null; then
+            any_up=true
+            break
+        fi
+    done
+    if $any_up; then
+        log_warn "A process may still be listening on 127.0.0.1 (${sweep_ports[*]})"
+    else
+        log_success "Gateway port(s) free on 127.0.0.1 (${sweep_ports[*]})"
+    fi
+}
+
+# Official teardown: openclaw uninstall --service (launchd/systemd/schtasks) before npm remove.
+# Docs: https://docs.openclaw.ai/cli/uninstall — does not remove ~/.openclaw unless --state.
+openclaw_cli_uninstall_service() {
+    local oc_bin=""
+    oc_bin=$(resolve_gateway_cli_bin) || true
+    if [[ -z "$oc_bin" ]]; then
+        return 0
+    fi
+    log_step "OpenClaw CLI: uninstall gateway service..."
+    log_info "Running: $oc_bin uninstall --service --yes --non-interactive"
+    if "$oc_bin" uninstall --service --yes --non-interactive; then
+        log_success "openclaw uninstall --service completed"
+    else
+        log_info "openclaw uninstall --service failed or skipped (continuing)"
+    fi
+}
+
+# ============================================================================
+# Uninstall gateway (OpenClaw service uninstall + npm global remove + port cleanup)
+# ============================================================================
+uninstall_gateway() {
+    ensure_node_npm || true
+    openclaw_cli_uninstall_service
+    echo ""
+    log_step "Uninstalling OpenClaw (global npm package)..."
+    if ! command -v npm &>/dev/null; then
+        log_error "npm not found"
+        exit 1
+    fi
+    npm uninstall -g openclaw 2>/dev/null || true
+    remove_managed_gateway_wrapper_state
+    cleanup_shell_path_setup
+    # Also remove the install wherever the CLI actually resolves (nvm/other Node global trees),
+    # not just the active node + managed prefix that `npm uninstall -g` above covers.
+    remove_resolved_cli_openclaw_install
+    log_success "Ran: npm uninstall -g openclaw (global tree removed if present)"
+    log_info "~/.openclaw was not removed (config, sessions, and credentials stay on disk)."
+    local oc_after=""
+    hash -r 2>/dev/null || true
+    oc_after="$(resolve_gateway_cli_bin_on_path 2>/dev/null || true)"
+    if [[ -n "$oc_after" ]]; then
+        log_warn "CLI still resolves to $oc_after (could not be removed automatically; remove it manually)."
+    fi
+    echo ""
+    free_local_gateway_ports_if_busy
+}
+
+# ============================================================================
+# Write starter config
+# ============================================================================
+write_config() {
+    local config_path="$HOME/.openclaw/openclaw.json"
+
+    if [[ -f "$config_path" ]]; then
+        log_info "Config already exists at $config_path — skipping"
+        return
+    fi
+
+    log_step "Writing starter config..."
+    mkdir -p "$HOME/.openclaw"
+
+    # Generate a random auth token
+    local random_token="ah-$(openssl rand -hex 24 2>/dev/null || head -c 48 /dev/urandom | od -An -tx1 | tr -d ' \n')"
+
+    if [[ -n "$CONFIG_TEMPLATE" && -f "$CONFIG_TEMPLATE" ]]; then
+        # Copy template and replace placeholder token
+        sed "s/__GENERATED_TOKEN__/${random_token}/" "$CONFIG_TEMPLATE" > "$config_path"
+        log_success "Config written from template: $config_path"
+    else
+        # Minimal inline config with generated token
+        cat > "$config_path" <<CONF
+// OpenClaw Gateway Configuration (JSON5)
+// Docs: https://docs.openclaw.ai/configuration
+{
+  "gateway": { "mode": "local", "auth": { "token": "${random_token}" } },
+  "update": { "checkOnStart": false, "managedMode": true },
+  "bindings": [],
+  "channels": {},
+  "plugins": { "entries": {} },
+  "session": { "dmScope": "per-peer" },
+  "agents": { "defaults": { "maxConcurrent": 4 } }
+}
+CONF
+        log_success "Starter config written: $config_path"
+    fi
+
+    # Restrict permissions — config contains auth token
+    chmod 600 "$config_path" 2>/dev/null || true
+
+    echo ""
+    echo -e "${CYAN}Next: Edit $config_path to add your channels (Telegram, WhatsApp, etc.)${NC}"
+}
+
+# ============================================================================
+# Main
+# ============================================================================
+
+echo -e "${BOLD}${CYAN}"
+echo "  ╔═══════════════════════════════════════╗"
+echo "  ║        Agent Anywhere Setup           ║"
+echo "  ║   Reach your agents from anywhere     ║"
+echo "  ╚═══════════════════════════════════════╝"
+echo -e "${NC}"
+
+if $CHECK_ONLY; then
+    check_installed
+    exit $?
+fi
+
+if $REINSTALL; then
+    if [[ -z "$INSTALL_SOURCE" ]]; then
+        log_error "--reinstall requires --source <src> (or set INSTALL_SOURCE)"
+        exit 1
+    fi
+    log_step "Reinstall: uninstall → verify → install"
+    uninstall_gateway
+    echo ""
+    log_step "Post-uninstall verification (--check)..."
+    check_uninstalled || true
+    echo ""
+    if ! check_prerequisites; then
+        echo ""
+        log_error "Prerequisites not met. Install the missing tools and try again."
+        exit 1
+    fi
+    echo ""
+    install_gateway
+    write_config
+    echo ""
+    check_installed || true
+    echo ""
+    echo -e "${BOLD}Reinstall complete.${NC} Next steps:"
+    echo -e "  1. Edit ${CYAN}~/.openclaw/openclaw.json${NC} to add your channels"
+    echo -e "  2. Click ${CYAN}Agent Anywhere${NC} to start."
+    echo ""
+    exit 0
+fi
+
+if $UNINSTALL; then
+    uninstall_gateway
+    echo ""
+    check_uninstalled || true
+    exit 0
+fi
+
+# Prerequisites
+if ! check_prerequisites; then
+    echo ""
+    log_error "Prerequisites not met. Install the missing tools and try again."
+    exit 1
+fi
+
+# Install if not present
+if ! resolve_gateway_cli_bin &>/dev/null; then
+    echo ""
+    install_gateway
+fi
+
+# Backfill stable wrappers/manifest for existing managed installs.
+if ! resolve_gateway_cli_bin_from_manifest >/dev/null 2>&1 && resolve_managed_gateway_install >/dev/null 2>&1; then
+    ensure_gateway_wrappers || true
+fi
+
+# Write config if missing
+write_config
+
+# Final status
+echo ""
+check_installed || true
+
+echo ""
+echo -e "${BOLD}Done!${NC} Next steps:"
+echo -e "  1. Edit ${CYAN}~/.openclaw/openclaw.json${NC} to add your channels"
+echo -e "  2. Click ${CYAN}Agent Anywhere${NC} to start."
+echo ""