@alfe.ai/gateway 0.10.5 → 0.10.7

package/dist/health.js

@@ -1,242 +1,52 @@
-import { a as ErrorLineDetector, c as createLogger, f as parseOpenClawVersion, h as __require, i as CaptureThrottle, m as __commonJSMin, n as OPENCLAW_EXTERNAL_SUPERVISOR_ENV, o as STRICT_ERROR_CAPTURE_PROFILE, r as RuntimeProcess, s as toFingerprintKey, t as DRAIN_GRACE_MS } from "./runtime-process.js";
+import { C as resolveOpenClawUpgradeTarget, E as __require, S as parseOpenClawVersion, T as __commonJSMin, _ as createLogger, a as recoverInterruptedRuntimeUpgrade, d as OPENCLAW_EXTERNAL_SUPERVISOR_ENV, f as RuntimeProcess, g as toFingerprintKey, h as STRICT_ERROR_CAPTURE_PROFILE, i as detectUpgradeIsolation, m as ErrorLineDetector, o as startBootUpgradeRecovery, p as CaptureThrottle, r as defaultRuntimeUpgradeMarkerPath, u as DRAIN_GRACE_MS } from "./runtime-upgrade-recovery.js";
 import { a as captureFatal, d as flushSentry, f as initAgentSentry, h as logger, o as captureIntegrationFailure, p as setAgentContext, s as captureMcpFailure } from "./sentry.js";
 import { chmod, mkdir, readFile, rename, stat, unlink, writeFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
 import { homedir } from "node:os";
 import { chmodSync, existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
+import { ClaudeCodeApplier, ClaudeCodeMcpSync, HermesApplier, HermesMcpSync, IntegrationManager, IntegrationManagerAdapter, LockManager, McpApplier, NoopOpenClawCliLock, OpenClawApplier, SerialOpenClawCliLock } from "@alfe.ai/integrations";
+import { execFile, execSync } from "node:child_process";
+import { promisify } from "node:util";
 import { getEndpointFromToken, readConfig } from "@alfe.ai/config";
 import { AgentApiClient } from "@alfe.ai/agent-api-client";
 import { parse } from "smol-toml";
 import WebSocket from "ws";
-import { execFile, execSync } from "node:child_process";
-import { promisify } from "node:util";
-import { ClaudeCodeApplier, ClaudeCodeMcpSync, HermesApplier, HermesMcpSync, IntegrationManager, IntegrationManagerAdapter, McpApplier, NoopOpenClawCliLock, OpenClawApplier, SerialOpenClawCliLock } from "@alfe.ai/integrations";
+import { createHash, randomUUID } from "node:crypto";
 import { Manager, McpBundler, defaultConnect, serverLaunchFingerprint } from "@alfe.ai/mcp-bundler";
 import { createConnection, createServer } from "node:net";
 import { pathToFileURL } from "node:url";
-import { randomUUID } from "node:crypto";
-//#region src/claude-code-host-version.ts
+//#region src/openclaw-plugin-ownership.ts
 /**
-* The `@alfe.ai/claude-code-host` version Alfe pins the claude-code runtime to —
-* the single source of truth for its install paths:
-*   - `@alfe.ai/cli` `installClaudeCodeHost` (fresh `alfe setup`)
-*   - the daemon `runtime.update` default (this package)
+* Runtime-lock plugin ownership for the OpenClaw upgrade preflight.
 *
-* Pinning (rather than floating `npm install -g @alfe.ai/claude-code-host` →
-* `latest`) is deliberate: the host is the claude-code runtime child on every
-* self-hosted claude-code agent, so a bad `latest` publish would auto-reach
-* every new `alfe setup` with no CLI gate. Bump deliberately after validating a
-* new host, then cut a CLI release so the pin travels with the CLI version. The
-* dashboard still surfaces npm-`latest` as an explicit opt-in upgrade.
-*
-* NOTE: claude-code is self-hosted-only (no managed Docker image), so — unlike
-* `PINNED_OPENCLAW_VERSION` — there is no `services/compute/Dockerfile` mirror to
-* keep in sync.
+* `~/.alfe/runtime-lock.json` (the integrations package's `LockManager`) records
+* which integration contributed each OpenClaw plugin. A plugin that is not in
+* it is owned by nothing the daemon manages. The upgrade only ever acts on such
+* a plugin when it is ALSO an `@alfe.ai/*` package and definitively
+* activate-only (see openclaw-plugin-compat.ts). A missing lock file or one
+* with no OpenClaw rows is "ownership unknown" (block, never sweep). The
+* residual risk is a lock that lists SOME plugins but dropped a row for one
+* still in use; that plugin is activate-only, so it would fail to load on the
+* target runtime anyway (`alfe remove` scope rule: only Alfe artifacts).
 */
-const PINNED_CLAUDE_CODE_HOST_VERSION = "0.1.6";
-//#endregion
-//#region ../../packages-internal/ids/dist/prefixes.js
-const ID_PREFIXES = {
-	agent: "agt",
-	organization: "org",
-	person: "per",
-	auditEvent: "evt",
-	token: "tok",
-	transaction: "txn",
-	subscription: "sub",
-	conversation: "conv",
-	referral: "ref",
-	promoCode: "prc",
-	promoRedemption: "prr",
-	pendingPromo: "pdp",
-	remoteSession: "rms",
-	webhook: "whk",
-	webhookDelivery: "wdl",
-	onboardingSession: "obs",
-	inviteToken: "inv",
-	claimToken: "clm",
-	usageLimit: "lim",
-	team: "team",
-	project: "proj",
-	goal: "goal",
-	memory: "mem",
-	knowledgeTriple: "kgt",
-	accessCode: "acc",
-	pendingInject: "pij",
-	identity: "idn",
-	identityNote: "ino",
-	identityTag: "itg",
-	identityAlias: "ial",
-	identityVerification: "ivf",
-	role: "role",
-	directGrant: "dgr",
-	revision: "rev",
-	fact: "kfc",
-	changeRequest: "chr",
-	oauthConnection: "con",
-	channel: "chn",
-	oauthConnectionRequest: "crq",
-	deviceCode: "dvc",
-	attachment: "att",
-	run: "run",
-	request: "req",
-	connection: "conn",
-	correlation: "cor",
-	command: "cmd",
-	message: "msg",
-	ipcRequest: "ipc",
-	pluginConnection: "plg"
-};
-//#endregion
-//#region ../../packages-internal/ids/dist/create.js
-var import_index_umd = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
-	(function(global, factory) {
-		typeof exports === "object" && typeof module !== "undefined" ? factory(exports) : typeof define === "function" && define.amd ? define(["exports"], factory) : (global = typeof globalThis !== "undefined" ? globalThis : global || self, factory(global.ULID = {}));
-	})(exports, (function(exports$1) {
-		"use strict";
-		function createError(message) {
-			const err = new Error(message);
-			err.source = "ulid";
-			return err;
-		}
-		const ENCODING = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
-		const ENCODING_LEN = 32;
-		const TIME_MAX = Math.pow(2, 48) - 1;
-		const TIME_LEN = 10;
-		const RANDOM_LEN = 16;
-		function replaceCharAt(str, index, char) {
-			if (index > str.length - 1) return str;
-			return str.substr(0, index) + char + str.substr(index + 1);
-		}
-		function incrementBase32(str) {
-			let done = void 0;
-			let index = str.length;
-			let char;
-			let charIndex;
-			const maxCharIndex = ENCODING_LEN - 1;
-			while (!done && index-- >= 0) {
-				char = str[index];
-				charIndex = ENCODING.indexOf(char);
-				if (charIndex === -1) throw createError("incorrectly encoded string");
-				if (charIndex === maxCharIndex) {
-					str = replaceCharAt(str, index, ENCODING[0]);
-					continue;
-				}
-				done = replaceCharAt(str, index, ENCODING[charIndex + 1]);
-			}
-			if (typeof done === "string") return done;
-			throw createError("cannot increment this string");
-		}
-		function randomChar(prng) {
-			let rand = Math.floor(prng() * ENCODING_LEN);
-			if (rand === ENCODING_LEN) rand = ENCODING_LEN - 1;
-			return ENCODING.charAt(rand);
-		}
-		function encodeTime(now, len) {
-			if (isNaN(now)) throw new Error(now + " must be a number");
-			if (now > TIME_MAX) throw createError("cannot encode time greater than " + TIME_MAX);
-			if (now < 0) throw createError("time must be positive");
-			if (Number.isInteger(Number(now)) === false) throw createError("time must be an integer");
-			let mod;
-			let str = "";
-			for (; len > 0; len--) {
-				mod = now % ENCODING_LEN;
-				str = ENCODING.charAt(mod) + str;
-				now = (now - mod) / ENCODING_LEN;
-			}
-			return str;
-		}
-		function encodeRandom(len, prng) {
-			let str = "";
-			for (; len > 0; len--) str = randomChar(prng) + str;
-			return str;
-		}
-		function decodeTime(id) {
-			if (id.length !== TIME_LEN + RANDOM_LEN) throw createError("malformed ulid");
-			var time = id.substr(0, TIME_LEN).split("").reverse().reduce((carry, char, index) => {
-				const encodingIndex = ENCODING.indexOf(char);
-				if (encodingIndex === -1) throw createError("invalid character found: " + char);
-				return carry += encodingIndex * Math.pow(ENCODING_LEN, index);
-			}, 0);
-			if (time > TIME_MAX) throw createError("malformed ulid, timestamp too large");
-			return time;
-		}
-		function detectPrng(allowInsecure = false, root) {
-			if (!root) root = typeof window !== "undefined" ? window : null;
-			const browserCrypto = root && (root.crypto || root.msCrypto);
-			if (browserCrypto) return () => {
-				const buffer = new Uint8Array(1);
-				browserCrypto.getRandomValues(buffer);
-				return buffer[0] / 255;
-			};
-			else try {
-				const nodeCrypto = __require("crypto");
-				return () => nodeCrypto.randomBytes(1).readUInt8() / 255;
-			} catch (e) {}
-			if (allowInsecure) {
-				try {
-					console.error("secure crypto unusable, falling back to insecure Math.random()!");
-				} catch (e) {}
-				return () => Math.random();
-			}
-			throw createError("secure crypto unusable, insecure Math.random not allowed");
-		}
-		function factory(currPrng) {
-			if (!currPrng) currPrng = detectPrng();
-			return function ulid(seedTime) {
-				if (isNaN(seedTime)) seedTime = Date.now();
-				return encodeTime(seedTime, TIME_LEN) + encodeRandom(RANDOM_LEN, currPrng);
-			};
-		}
-		function monotonicFactory(currPrng) {
-			if (!currPrng) currPrng = detectPrng();
-			let lastTime = 0;
-			let lastRandom;
-			return function ulid(seedTime) {
-				if (isNaN(seedTime)) seedTime = Date.now();
-				if (seedTime <= lastTime) {
-					const incrementedRandom = lastRandom = incrementBase32(lastRandom);
-					return encodeTime(lastTime, TIME_LEN) + incrementedRandom;
-				}
-				lastTime = seedTime;
-				const newRandom = lastRandom = encodeRandom(RANDOM_LEN, currPrng);
-				return encodeTime(seedTime, TIME_LEN) + newRandom;
-			};
-		}
-		const ulid = factory();
-		exports$1.decodeTime = decodeTime;
-		exports$1.detectPrng = detectPrng;
-		exports$1.encodeRandom = encodeRandom;
-		exports$1.encodeTime = encodeTime;
-		exports$1.factory = factory;
-		exports$1.incrementBase32 = incrementBase32;
-		exports$1.monotonicFactory = monotonicFactory;
-		exports$1.randomChar = randomChar;
-		exports$1.replaceCharAt = replaceCharAt;
-		exports$1.ulid = ulid;
-	}));
-})))();
-function createId(prefix) {
-	return `${prefix}_${(0, import_index_umd.ulid)()}`;
-}
-function correlationId() {
-	return createId(ID_PREFIXES.correlation);
-}
-function pluginConnectionId() {
-	return createId(ID_PREFIXES.pluginConnection);
+/** Bare npm package name from a manifest plugin spec (`@scope/name@1.2.3` → `@scope/name`). */
+function barePluginPackage(spec) {
+	const at = spec.lastIndexOf("@");
+	return at <= 0 ? spec : spec.slice(0, at);
 }
-//#endregion
-//#region ../../packages-internal/types/dist/lib/enum-values.js
-/**
-* Converts a const enum object into a non-empty readonly tuple.
-*
-* Satisfies both `z.enum()` and ElectroDB `type` field requirements
-* (both need `readonly [string, ...string[]]`).
-*/
-function enumValues(obj) {
-	const values = Object.values(obj);
-	if (values.length === 0) throw new TypeError("enumValues requires at least one value");
-	return values;
+const DEFAULT_LOCK_PATH = join(homedir(), ".alfe", "runtime-lock.json");
+function buildOpenClawPluginOwnership(applier, lockPath = DEFAULT_LOCK_PATH, lock = new LockManager(lockPath)) {
+	return {
+		ownedPlugins() {
+			if (!existsSync(lockPath)) throw new Error(`runtime lock ${lockPath} does not exist`);
+			const plugins = lock.read().runtimes.openclaw?.plugins ?? [];
+			if (plugins.length === 0) throw new Error("runtime lock records no OpenClaw plugin owners");
+			const owned = /* @__PURE__ */ new Map();
+			for (const entry of plugins) owned.set(barePluginPackage(entry.package), entry.sourceIntegration);
+			return owned;
+		},
+		removePlugin: (pkg) => applier.removePlugin(pkg)
+	};
 }
 Object.freeze({ status: "aborted" });
 function $constructor(name, initializer, params) {
@@ -758,7 +568,7 @@ const _safeDecodeAsync = (_Err) => async (schema, value, _ctx) => {
 //#region ../../node_modules/.pnpm/zod@4.3.6/node_modules/zod/v4/core/regexes.js
 const cuid = /^[cC][^\s-]{8,}$/;
 const cuid2 = /^[0-9a-z]+$/;
-const ulid = /^[0-9A-HJKMNP-TV-Za-hjkmnp-tv-z]{26}$/;
+const ulid$1 = /^[0-9A-HJKMNP-TV-Za-hjkmnp-tv-z]{26}$/;
 const xid = /^[0-9a-vA-V]{20}$/;
 const ksuid = /^[A-Za-z0-9]{27}$/;
 const nanoid = /^[a-zA-Z0-9_-]{21}$/;
@@ -1405,7 +1215,7 @@ const $ZodCUID2 = /* @__PURE__ */ $constructor("$ZodCUID2", (inst, def) => {
 	$ZodStringFormat.init(inst, def);
 });
 const $ZodULID = /* @__PURE__ */ $constructor("$ZodULID", (inst, def) => {
-	def.pattern ?? (def.pattern = ulid);
+	def.pattern ?? (def.pattern = ulid$1);
 	$ZodStringFormat.init(inst, def);
 });
 const $ZodXID = /* @__PURE__ */ $constructor("$ZodXID", (inst, def) => {
@@ -3838,86 +3648,310 @@ function _default(innerType, defaultValue) {
 		get defaultValue() {
 			return typeof defaultValue === "function" ? defaultValue() : shallowClone(defaultValue);
 		}
-	});
-}
-const ZodPrefault = /* @__PURE__ */ $constructor("ZodPrefault", (inst, def) => {
-	$ZodPrefault.init(inst, def);
-	ZodType.init(inst, def);
-	inst._zod.processJSONSchema = (ctx, json, params) => prefaultProcessor(inst, ctx, json, params);
-	inst.unwrap = () => inst._zod.def.innerType;
-});
-function prefault(innerType, defaultValue) {
-	return new ZodPrefault({
-		type: "prefault",
-		innerType,
-		get defaultValue() {
-			return typeof defaultValue === "function" ? defaultValue() : shallowClone(defaultValue);
+	});
+}
+const ZodPrefault = /* @__PURE__ */ $constructor("ZodPrefault", (inst, def) => {
+	$ZodPrefault.init(inst, def);
+	ZodType.init(inst, def);
+	inst._zod.processJSONSchema = (ctx, json, params) => prefaultProcessor(inst, ctx, json, params);
+	inst.unwrap = () => inst._zod.def.innerType;
+});
+function prefault(innerType, defaultValue) {
+	return new ZodPrefault({
+		type: "prefault",
+		innerType,
+		get defaultValue() {
+			return typeof defaultValue === "function" ? defaultValue() : shallowClone(defaultValue);
+		}
+	});
+}
+const ZodNonOptional = /* @__PURE__ */ $constructor("ZodNonOptional", (inst, def) => {
+	$ZodNonOptional.init(inst, def);
+	ZodType.init(inst, def);
+	inst._zod.processJSONSchema = (ctx, json, params) => nonoptionalProcessor(inst, ctx, json, params);
+	inst.unwrap = () => inst._zod.def.innerType;
+});
+function nonoptional(innerType, params) {
+	return new ZodNonOptional({
+		type: "nonoptional",
+		innerType,
+		...normalizeParams(params)
+	});
+}
+const ZodCatch = /* @__PURE__ */ $constructor("ZodCatch", (inst, def) => {
+	$ZodCatch.init(inst, def);
+	ZodType.init(inst, def);
+	inst._zod.processJSONSchema = (ctx, json, params) => catchProcessor(inst, ctx, json, params);
+	inst.unwrap = () => inst._zod.def.innerType;
+	inst.removeCatch = inst.unwrap;
+});
+function _catch(innerType, catchValue) {
+	return new ZodCatch({
+		type: "catch",
+		innerType,
+		catchValue: typeof catchValue === "function" ? catchValue : () => catchValue
+	});
+}
+const ZodPipe = /* @__PURE__ */ $constructor("ZodPipe", (inst, def) => {
+	$ZodPipe.init(inst, def);
+	ZodType.init(inst, def);
+	inst._zod.processJSONSchema = (ctx, json, params) => pipeProcessor(inst, ctx, json, params);
+	inst.in = def.in;
+	inst.out = def.out;
+});
+function pipe(in_, out) {
+	return new ZodPipe({
+		type: "pipe",
+		in: in_,
+		out
+	});
+}
+const ZodReadonly = /* @__PURE__ */ $constructor("ZodReadonly", (inst, def) => {
+	$ZodReadonly.init(inst, def);
+	ZodType.init(inst, def);
+	inst._zod.processJSONSchema = (ctx, json, params) => readonlyProcessor(inst, ctx, json, params);
+	inst.unwrap = () => inst._zod.def.innerType;
+});
+function readonly(innerType) {
+	return new ZodReadonly({
+		type: "readonly",
+		innerType
+	});
+}
+const ZodCustom = /* @__PURE__ */ $constructor("ZodCustom", (inst, def) => {
+	$ZodCustom.init(inst, def);
+	ZodType.init(inst, def);
+	inst._zod.processJSONSchema = (ctx, json, params) => customProcessor(inst, ctx, json, params);
+});
+function refine(fn, _params = {}) {
+	return /* @__PURE__ */ _refine(ZodCustom, fn, _params);
+}
+function superRefine(fn) {
+	return /* @__PURE__ */ _superRefine(fn);
+}
+//#endregion
+//#region src/claude-code-host-version.ts
+/**
+* The `@alfe.ai/claude-code-host` version Alfe pins the claude-code runtime to —
+* the single source of truth for its install paths:
+*   - `@alfe.ai/cli` `installClaudeCodeHost` (fresh `alfe setup`)
+*   - the daemon `runtime.update` default (this package)
+*
+* Pinning (rather than floating `npm install -g @alfe.ai/claude-code-host` →
+* `latest`) is deliberate: the host is the claude-code runtime child on every
+* self-hosted claude-code agent, so a bad `latest` publish would auto-reach
+* every new `alfe setup` with no CLI gate. Bump deliberately after validating a
+* new host, then cut a CLI release so the pin travels with the CLI version. The
+* dashboard still surfaces npm-`latest` as an explicit opt-in upgrade.
+*
+* NOTE: claude-code is self-hosted-only (no managed Docker image), so — unlike
+* `PINNED_OPENCLAW_VERSION` — there is no `services/compute/Dockerfile` mirror to
+* keep in sync.
+*/
+const PINNED_CLAUDE_CODE_HOST_VERSION = "0.1.6";
+//#endregion
+//#region ../../packages-internal/ids/dist/prefixes.js
+const ID_PREFIXES = {
+	agent: "agt",
+	organization: "org",
+	person: "per",
+	auditEvent: "evt",
+	token: "tok",
+	transaction: "txn",
+	subscription: "sub",
+	conversation: "conv",
+	referral: "ref",
+	promoCode: "prc",
+	promoRedemption: "prr",
+	pendingPromo: "pdp",
+	remoteSession: "rms",
+	webhook: "whk",
+	webhookDelivery: "wdl",
+	onboardingSession: "obs",
+	inviteToken: "inv",
+	claimToken: "clm",
+	usageLimit: "lim",
+	team: "team",
+	project: "proj",
+	goal: "goal",
+	memory: "mem",
+	knowledgeTriple: "kgt",
+	accessCode: "acc",
+	pendingInject: "pij",
+	identity: "idn",
+	identityNote: "ino",
+	identityTag: "itg",
+	identityAlias: "ial",
+	identityVerification: "ivf",
+	role: "role",
+	directGrant: "dgr",
+	revision: "rev",
+	fact: "kfc",
+	changeRequest: "chr",
+	oauthConnection: "con",
+	channel: "chn",
+	oauthConnectionRequest: "crq",
+	deviceCode: "dvc",
+	attachment: "att",
+	run: "run",
+	request: "req",
+	connection: "conn",
+	correlation: "cor",
+	command: "cmd",
+	message: "msg",
+	ipcRequest: "ipc",
+	pluginConnection: "plg"
+};
+//#endregion
+//#region ../../packages-internal/ids/dist/create.js
+var import_index_umd = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
+	(function(global, factory) {
+		typeof exports === "object" && typeof module !== "undefined" ? factory(exports) : typeof define === "function" && define.amd ? define(["exports"], factory) : (global = typeof globalThis !== "undefined" ? globalThis : global || self, factory(global.ULID = {}));
+	})(exports, (function(exports$1) {
+		"use strict";
+		function createError(message) {
+			const err = new Error(message);
+			err.source = "ulid";
+			return err;
+		}
+		const ENCODING = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+		const ENCODING_LEN = 32;
+		const TIME_MAX = Math.pow(2, 48) - 1;
+		const TIME_LEN = 10;
+		const RANDOM_LEN = 16;
+		function replaceCharAt(str, index, char) {
+			if (index > str.length - 1) return str;
+			return str.substr(0, index) + char + str.substr(index + 1);
+		}
+		function incrementBase32(str) {
+			let done = void 0;
+			let index = str.length;
+			let char;
+			let charIndex;
+			const maxCharIndex = ENCODING_LEN - 1;
+			while (!done && index-- >= 0) {
+				char = str[index];
+				charIndex = ENCODING.indexOf(char);
+				if (charIndex === -1) throw createError("incorrectly encoded string");
+				if (charIndex === maxCharIndex) {
+					str = replaceCharAt(str, index, ENCODING[0]);
+					continue;
+				}
+				done = replaceCharAt(str, index, ENCODING[charIndex + 1]);
+			}
+			if (typeof done === "string") return done;
+			throw createError("cannot increment this string");
+		}
+		function randomChar(prng) {
+			let rand = Math.floor(prng() * ENCODING_LEN);
+			if (rand === ENCODING_LEN) rand = ENCODING_LEN - 1;
+			return ENCODING.charAt(rand);
+		}
+		function encodeTime(now, len) {
+			if (isNaN(now)) throw new Error(now + " must be a number");
+			if (now > TIME_MAX) throw createError("cannot encode time greater than " + TIME_MAX);
+			if (now < 0) throw createError("time must be positive");
+			if (Number.isInteger(Number(now)) === false) throw createError("time must be an integer");
+			let mod;
+			let str = "";
+			for (; len > 0; len--) {
+				mod = now % ENCODING_LEN;
+				str = ENCODING.charAt(mod) + str;
+				now = (now - mod) / ENCODING_LEN;
+			}
+			return str;
+		}
+		function encodeRandom(len, prng) {
+			let str = "";
+			for (; len > 0; len--) str = randomChar(prng) + str;
+			return str;
+		}
+		function decodeTime(id) {
+			if (id.length !== TIME_LEN + RANDOM_LEN) throw createError("malformed ulid");
+			var time = id.substr(0, TIME_LEN).split("").reverse().reduce((carry, char, index) => {
+				const encodingIndex = ENCODING.indexOf(char);
+				if (encodingIndex === -1) throw createError("invalid character found: " + char);
+				return carry += encodingIndex * Math.pow(ENCODING_LEN, index);
+			}, 0);
+			if (time > TIME_MAX) throw createError("malformed ulid, timestamp too large");
+			return time;
+		}
+		function detectPrng(allowInsecure = false, root) {
+			if (!root) root = typeof window !== "undefined" ? window : null;
+			const browserCrypto = root && (root.crypto || root.msCrypto);
+			if (browserCrypto) return () => {
+				const buffer = new Uint8Array(1);
+				browserCrypto.getRandomValues(buffer);
+				return buffer[0] / 255;
+			};
+			else try {
+				const nodeCrypto = __require("crypto");
+				return () => nodeCrypto.randomBytes(1).readUInt8() / 255;
+			} catch (e) {}
+			if (allowInsecure) {
+				try {
+					console.error("secure crypto unusable, falling back to insecure Math.random()!");
+				} catch (e) {}
+				return () => Math.random();
+			}
+			throw createError("secure crypto unusable, insecure Math.random not allowed");
+		}
+		function factory(currPrng) {
+			if (!currPrng) currPrng = detectPrng();
+			return function ulid(seedTime) {
+				if (isNaN(seedTime)) seedTime = Date.now();
+				return encodeTime(seedTime, TIME_LEN) + encodeRandom(RANDOM_LEN, currPrng);
+			};
 		}
-	});
-}
-const ZodNonOptional = /* @__PURE__ */ $constructor("ZodNonOptional", (inst, def) => {
-	$ZodNonOptional.init(inst, def);
-	ZodType.init(inst, def);
-	inst._zod.processJSONSchema = (ctx, json, params) => nonoptionalProcessor(inst, ctx, json, params);
-	inst.unwrap = () => inst._zod.def.innerType;
-});
-function nonoptional(innerType, params) {
-	return new ZodNonOptional({
-		type: "nonoptional",
-		innerType,
-		...normalizeParams(params)
-	});
-}
-const ZodCatch = /* @__PURE__ */ $constructor("ZodCatch", (inst, def) => {
-	$ZodCatch.init(inst, def);
-	ZodType.init(inst, def);
-	inst._zod.processJSONSchema = (ctx, json, params) => catchProcessor(inst, ctx, json, params);
-	inst.unwrap = () => inst._zod.def.innerType;
-	inst.removeCatch = inst.unwrap;
-});
-function _catch(innerType, catchValue) {
-	return new ZodCatch({
-		type: "catch",
-		innerType,
-		catchValue: typeof catchValue === "function" ? catchValue : () => catchValue
-	});
-}
-const ZodPipe = /* @__PURE__ */ $constructor("ZodPipe", (inst, def) => {
-	$ZodPipe.init(inst, def);
-	ZodType.init(inst, def);
-	inst._zod.processJSONSchema = (ctx, json, params) => pipeProcessor(inst, ctx, json, params);
-	inst.in = def.in;
-	inst.out = def.out;
-});
-function pipe(in_, out) {
-	return new ZodPipe({
-		type: "pipe",
-		in: in_,
-		out
-	});
+		function monotonicFactory(currPrng) {
+			if (!currPrng) currPrng = detectPrng();
+			let lastTime = 0;
+			let lastRandom;
+			return function ulid(seedTime) {
+				if (isNaN(seedTime)) seedTime = Date.now();
+				if (seedTime <= lastTime) {
+					const incrementedRandom = lastRandom = incrementBase32(lastRandom);
+					return encodeTime(lastTime, TIME_LEN) + incrementedRandom;
+				}
+				lastTime = seedTime;
+				const newRandom = lastRandom = encodeRandom(RANDOM_LEN, currPrng);
+				return encodeTime(seedTime, TIME_LEN) + newRandom;
+			};
+		}
+		const ulid = factory();
+		exports$1.decodeTime = decodeTime;
+		exports$1.detectPrng = detectPrng;
+		exports$1.encodeRandom = encodeRandom;
+		exports$1.encodeTime = encodeTime;
+		exports$1.factory = factory;
+		exports$1.incrementBase32 = incrementBase32;
+		exports$1.monotonicFactory = monotonicFactory;
+		exports$1.randomChar = randomChar;
+		exports$1.replaceCharAt = replaceCharAt;
+		exports$1.ulid = ulid;
+	}));
+})))();
+function createId(prefix) {
+	return `${prefix}_${(0, import_index_umd.ulid)()}`;
 }
-const ZodReadonly = /* @__PURE__ */ $constructor("ZodReadonly", (inst, def) => {
-	$ZodReadonly.init(inst, def);
-	ZodType.init(inst, def);
-	inst._zod.processJSONSchema = (ctx, json, params) => readonlyProcessor(inst, ctx, json, params);
-	inst.unwrap = () => inst._zod.def.innerType;
-});
-function readonly(innerType) {
-	return new ZodReadonly({
-		type: "readonly",
-		innerType
-	});
+function correlationId() {
+	return createId(ID_PREFIXES.correlation);
 }
-const ZodCustom = /* @__PURE__ */ $constructor("ZodCustom", (inst, def) => {
-	$ZodCustom.init(inst, def);
-	ZodType.init(inst, def);
-	inst._zod.processJSONSchema = (ctx, json, params) => customProcessor(inst, ctx, json, params);
-});
-function refine(fn, _params = {}) {
-	return /* @__PURE__ */ _refine(ZodCustom, fn, _params);
+function pluginConnectionId() {
+	return createId(ID_PREFIXES.pluginConnection);
 }
-function superRefine(fn) {
-	return /* @__PURE__ */ _superRefine(fn);
+//#endregion
+//#region ../../packages-internal/types/dist/lib/enum-values.js
+/**
+* Converts a const enum object into a non-empty readonly tuple.
+*
+* Satisfies both `z.enum()` and ElectroDB `type` field requirements
+* (both need `readonly [string, ...string[]]`).
+*/
+function enumValues(obj) {
+	const values = Object.values(obj);
+	if (values.length === 0) throw new TypeError("enumValues requires at least one value");
+	return values;
 }
 //#endregion
 //#region ../../packages-internal/types/dist/lib/usd.js
@@ -4349,6 +4383,7 @@ function isClerkReverificationResponse(value) {
 //#endregion
 //#region ../../packages-internal/types/dist/models.js
 const AnthropicModel = {
+	Opus55: "claude-opus-5-5",
 	Opus5: "claude-opus-5",
 	Opus48: "claude-opus-4-8",
 	Opus47: "claude-opus-4-7",
@@ -4359,6 +4394,7 @@ const AnthropicModel = {
 };
 const ANTHROPIC_MODELS = enumValues(AnthropicModel);
 const OpenAIModel = {
+	GPT6Astra: "gpt-6-astra",
 	GPT4o: "gpt-4o",
 	GPT4oMini: "gpt-4o-mini",
 	O3: "o3",
@@ -4381,20 +4417,22 @@ const OpenAIModel = {
 };
 const OPENAI_MODELS = enumValues(OpenAIModel);
 const DeepSeekModel = {
-	Chat: "deepseek-chat",
-	Reasoner: "deepseek-reasoner",
-	V4Flash: "deepseek-v4-flash",
-	V4Pro: "deepseek-v4-pro"
+	Flash: "deepseek-flash",
+	V4Pro: "deepseek-v4-pro",
+	V4Flash: "deepseek-v4-flash"
 };
 const DEEPSEEK_MODELS = enumValues(DeepSeekModel);
 const GoogleModel = {
+	Gemini38Flash: "gemini-3.8-flash",
+	Gemini37Flash: "gemini-3.7-flash",
+	Gemini36Flash: "gemini-3.6-flash",
 	Gemini35Flash: "gemini-3.5-flash",
+	Gemini35FlashLite: "gemini-3.5-flash-lite",
 	Gemini31Pro: "gemini-3.1-pro-preview",
 	Gemini31FlashLite: "gemini-3.1-flash-lite",
 	Gemini25Pro: "gemini-2.5-pro",
 	Gemini25Flash: "gemini-2.5-flash",
-	Gemini25FlashLite: "gemini-2.5-flash-lite",
-	Gemini20Flash: "gemini-2.0-flash"
+	Gemini25FlashLite: "gemini-2.5-flash-lite"
 };
 const GOOGLE_MODELS = enumValues(GoogleModel);
 const MiniMaxModel = {
@@ -4412,20 +4450,23 @@ const MistralModel = {
 	Small: "mistral-small-latest",
 	Codestral: "codestral-latest",
 	Ministral8b: "ministral-8b-latest",
-	Ministral3b: "ministral-3b-latest",
-	MagistralMedium: "magistral-medium-latest",
-	MagistralSmall: "magistral-small-latest",
-	DevstralMedium: "devstral-medium-latest"
+	Ministral3b: "ministral-3b-latest"
 };
 const MISTRAL_MODELS = enumValues(MistralModel);
 const XAIModel = {
+	Grok47: "grok-4.7",
+	Grok46: "grok-4.6",
 	Grok45: "grok-4.5",
 	Grok43: "grok-4.3",
+	GrokBuild01: "grok-build-0.1",
 	Grok4: "grok-4",
 	Grok41Fast: "grok-4.1-fast"
 };
 const XAI_MODELS = enumValues(XAIModel);
 const ZhipuModel = {
+	GLM53: "glm-5.3",
+	GLM53Flash: "glm-5.3-flash",
+	GLM53FlashX: "glm-5.3-flashx",
 	GLM52: "glm-5.2",
 	GLM51: "glm-5.1",
 	GLM46: "glm-4.6",
@@ -4441,6 +4482,8 @@ const MoonshotModel = {
 };
 const MOONSHOT_MODELS = enumValues(MoonshotModel);
 const QwenModel = {
+	Qwen38Max: "qwen3.8-max",
+	Qwen38Flash: "qwen3.8-flash",
 	Qwen37Max: "qwen3.7-max",
 	Qwen37Plus: "qwen3.7-plus",
 	Qwen36Flash: "qwen3.6-flash",
@@ -4471,7 +4514,7 @@ _enum(ZHIPU_MODELS);
 _enum(MOONSHOT_MODELS);
 _enum(QWEN_MODELS);
 string().trim().min(1);
-AnthropicModel.Opus5, AnthropicModel.Opus48, AnthropicModel.Opus47, AnthropicModel.Opus46, AnthropicModel.Sonnet5, AnthropicModel.Sonnet46, AnthropicModel.Haiku45, OpenAIModel.GPT4o, OpenAIModel.GPT4oMini, OpenAIModel.O3, OpenAIModel.GPT41, OpenAIModel.GPT41Mini, OpenAIModel.GPT41Nano, OpenAIModel.GPT54, OpenAIModel.GPT54Mini, OpenAIModel.GPT54Nano, OpenAIModel.GPT54Pro, OpenAIModel.GPT55, OpenAIModel.GPT55Pro, OpenAIModel.GPT56Sol, OpenAIModel.GPT56Terra, OpenAIModel.GPT56Luna, OpenAIModel.O3Mini, OpenAIModel.O4Mini, OpenAIModel.TextEmbedding3Small, OpenAIModel.TextEmbedding3Large, DeepSeekModel.Chat, DeepSeekModel.Reasoner, DeepSeekModel.V4Flash, DeepSeekModel.V4Pro, GoogleModel.Gemini35Flash, GoogleModel.Gemini31Pro, GoogleModel.Gemini31FlashLite, GoogleModel.Gemini25Pro, GoogleModel.Gemini25Flash, GoogleModel.Gemini25FlashLite, GoogleModel.Gemini20Flash, MiniMaxModel.M3, MiniMaxModel.M27, MiniMaxModel.M27HighSpeed, MiniMaxModel.M25, MiniMaxModel.M21, MiniMaxModel.M2, MistralModel.Large, MistralModel.Medium, MistralModel.Small, MistralModel.Codestral, MistralModel.Ministral8b, MistralModel.Ministral3b, MistralModel.MagistralMedium, MistralModel.MagistralSmall, MistralModel.DevstralMedium, XAIModel.Grok45, XAIModel.Grok43, XAIModel.Grok4, XAIModel.Grok41Fast, ZhipuModel.GLM52, ZhipuModel.GLM51, ZhipuModel.GLM46, ZhipuModel.GLM45, ZhipuModel.GLM45Air, MoonshotModel.K3, MoonshotModel.K26, MoonshotModel.K27Code, MoonshotModel.K27CodeHighSpeed, QwenModel.Qwen37Max, QwenModel.Qwen37Plus, QwenModel.Qwen36Flash, QwenModel.Qwen35Flash;
+AnthropicModel.Opus55, AnthropicModel.Opus5, AnthropicModel.Opus48, AnthropicModel.Opus47, AnthropicModel.Opus46, AnthropicModel.Sonnet5, AnthropicModel.Sonnet46, AnthropicModel.Haiku45, OpenAIModel.GPT6Astra, OpenAIModel.GPT4o, OpenAIModel.GPT4oMini, OpenAIModel.O3, OpenAIModel.GPT41, OpenAIModel.GPT41Mini, OpenAIModel.GPT41Nano, OpenAIModel.GPT54, OpenAIModel.GPT54Mini, OpenAIModel.GPT54Nano, OpenAIModel.GPT54Pro, OpenAIModel.GPT55, OpenAIModel.GPT55Pro, OpenAIModel.GPT56Sol, OpenAIModel.GPT56Terra, OpenAIModel.GPT56Luna, OpenAIModel.O3Mini, OpenAIModel.O4Mini, OpenAIModel.TextEmbedding3Small, OpenAIModel.TextEmbedding3Large, DeepSeekModel.Flash, DeepSeekModel.V4Pro, DeepSeekModel.V4Flash, GoogleModel.Gemini38Flash, GoogleModel.Gemini37Flash, GoogleModel.Gemini36Flash, GoogleModel.Gemini35Flash, GoogleModel.Gemini35FlashLite, GoogleModel.Gemini31Pro, GoogleModel.Gemini31FlashLite, GoogleModel.Gemini25Pro, GoogleModel.Gemini25Flash, GoogleModel.Gemini25FlashLite, MiniMaxModel.M3, MiniMaxModel.M27, MiniMaxModel.M27HighSpeed, MiniMaxModel.M25, MiniMaxModel.M21, MiniMaxModel.M2, MistralModel.Large, MistralModel.Medium, MistralModel.Small, MistralModel.Codestral, MistralModel.Ministral8b, MistralModel.Ministral3b, XAIModel.Grok47, XAIModel.Grok46, XAIModel.Grok45, XAIModel.Grok43, XAIModel.GrokBuild01, XAIModel.Grok4, XAIModel.Grok41Fast, ZhipuModel.GLM53, ZhipuModel.GLM53Flash, ZhipuModel.GLM53FlashX, ZhipuModel.GLM52, ZhipuModel.GLM51, ZhipuModel.GLM46, ZhipuModel.GLM45, ZhipuModel.GLM45Air, MoonshotModel.K3, MoonshotModel.K26, MoonshotModel.K27Code, MoonshotModel.K27CodeHighSpeed, QwenModel.Qwen38Max, QwenModel.Qwen38Flash, QwenModel.Qwen37Max, QwenModel.Qwen37Plus, QwenModel.Qwen36Flash, QwenModel.Qwen35Flash;
 /**
 * Alfe-hosted open-weight models are promoted dynamically only in regions
 * whose private data plane exists. Keep them out of ALL_MODELS so the standard
@@ -4531,7 +4574,7 @@ const AWS_PRIVATE_MODEL_PRICING = {
 	[BedrockModel.TitanEmbedTextV2]: { input: .026004 }
 };
 Object.fromEntries(AWS_PRIVATE_BEDROCK_CHAT_MODELS.map((modelId) => [`alfe-bedrock-${modelId}`, AWS_PRIVATE_MODEL_PRICING[modelId]]));
-AnthropicModel.Opus5, AnthropicModel.Opus48, AnthropicModel.Opus47, AnthropicModel.Opus46, AnthropicModel.Sonnet5, AnthropicModel.Sonnet46, AnthropicModel.Haiku45, OpenAIModel.GPT4o, OpenAIModel.GPT4oMini, OpenAIModel.O3, OpenAIModel.GPT41, OpenAIModel.GPT41Mini, OpenAIModel.GPT41Nano, OpenAIModel.GPT54, OpenAIModel.GPT54Mini, OpenAIModel.GPT54Nano, OpenAIModel.GPT54Pro, OpenAIModel.GPT55, OpenAIModel.GPT55Pro, OpenAIModel.GPT56Sol, OpenAIModel.GPT56Terra, OpenAIModel.GPT56Luna, OpenAIModel.O3Mini, OpenAIModel.O4Mini, OpenAIModel.TextEmbedding3Small, OpenAIModel.TextEmbedding3Large, DeepSeekModel.Chat, DeepSeekModel.Reasoner, DeepSeekModel.V4Flash, DeepSeekModel.V4Pro, GoogleModel.Gemini35Flash, GoogleModel.Gemini31Pro, GoogleModel.Gemini31FlashLite, GoogleModel.Gemini25Pro, GoogleModel.Gemini25Flash, GoogleModel.Gemini25FlashLite, GoogleModel.Gemini20Flash, MiniMaxModel.M3, MiniMaxModel.M27, MiniMaxModel.M27HighSpeed, MiniMaxModel.M25, MiniMaxModel.M21, MiniMaxModel.M2, MistralModel.Large, MistralModel.Medium, MistralModel.Small, MistralModel.Codestral, MistralModel.Ministral8b, MistralModel.Ministral3b, MistralModel.MagistralMedium, MistralModel.MagistralSmall, MistralModel.DevstralMedium, XAIModel.Grok45, XAIModel.Grok43, XAIModel.Grok4, XAIModel.Grok41Fast, ZhipuModel.GLM52, ZhipuModel.GLM51, ZhipuModel.GLM46, ZhipuModel.GLM45, ZhipuModel.GLM45Air, MoonshotModel.K3, MoonshotModel.K26, MoonshotModel.K27Code, MoonshotModel.K27CodeHighSpeed, QwenModel.Qwen37Max, QwenModel.Qwen37Plus, QwenModel.Qwen36Flash, QwenModel.Qwen35Flash;
+AnthropicModel.Opus55, AnthropicModel.Opus5, AnthropicModel.Opus48, AnthropicModel.Opus47, AnthropicModel.Opus46, AnthropicModel.Sonnet5, AnthropicModel.Sonnet46, AnthropicModel.Haiku45, OpenAIModel.GPT6Astra, OpenAIModel.GPT4o, OpenAIModel.GPT4oMini, OpenAIModel.O3, OpenAIModel.GPT41, OpenAIModel.GPT41Mini, OpenAIModel.GPT41Nano, OpenAIModel.GPT54, OpenAIModel.GPT54Mini, OpenAIModel.GPT54Nano, OpenAIModel.GPT54Pro, OpenAIModel.GPT55, OpenAIModel.GPT55Pro, OpenAIModel.GPT56Sol, OpenAIModel.GPT56Terra, OpenAIModel.GPT56Luna, OpenAIModel.O3Mini, OpenAIModel.O4Mini, OpenAIModel.TextEmbedding3Small, OpenAIModel.TextEmbedding3Large, DeepSeekModel.Flash, DeepSeekModel.V4Pro, DeepSeekModel.V4Flash, GoogleModel.Gemini38Flash, GoogleModel.Gemini37Flash, GoogleModel.Gemini36Flash, GoogleModel.Gemini35Flash, GoogleModel.Gemini35FlashLite, GoogleModel.Gemini31Pro, GoogleModel.Gemini31FlashLite, GoogleModel.Gemini25Pro, GoogleModel.Gemini25Flash, GoogleModel.Gemini25FlashLite, MiniMaxModel.M3, MiniMaxModel.M27, MiniMaxModel.M27HighSpeed, MiniMaxModel.M25, MiniMaxModel.M21, MiniMaxModel.M2, MistralModel.Large, MistralModel.Medium, MistralModel.Small, MistralModel.Codestral, MistralModel.Ministral8b, MistralModel.Ministral3b, XAIModel.Grok47, XAIModel.Grok46, XAIModel.Grok45, XAIModel.Grok43, XAIModel.GrokBuild01, XAIModel.Grok4, XAIModel.Grok41Fast, ZhipuModel.GLM53, ZhipuModel.GLM53Flash, ZhipuModel.GLM53FlashX, ZhipuModel.GLM52, ZhipuModel.GLM51, ZhipuModel.GLM46, ZhipuModel.GLM45, ZhipuModel.GLM45Air, MoonshotModel.K3, MoonshotModel.K26, MoonshotModel.K27Code, MoonshotModel.K27CodeHighSpeed, QwenModel.Qwen38Max, QwenModel.Qwen38Flash, QwenModel.Qwen37Max, QwenModel.Qwen37Plus, QwenModel.Qwen36Flash, QwenModel.Qwen35Flash;
 enumValues({
 	Standard: "standard",
 	AwsPrivate: "aws_private"
@@ -4746,7 +4789,8 @@ var AlfeApiClient = class {
 						ok: false,
 						error: errorMessage ?? (typeof body === "string" ? body : `API error: ${String(res.status)}`),
 						status: res.status,
-						...typeof errBody?.code === "string" ? { code: errBody.code } : {}
+						...typeof errBody?.code === "string" ? { code: errBody.code } : {},
+						...Array.isArray(errBody?.ineligibleUserIds) && errBody.ineligibleUserIds.every((id) => typeof id === "string") ? { ineligibleUserIds: [...errBody.ineligibleUserIds] } : {}
 					}
 				};
 			}
@@ -4875,7 +4919,33 @@ var AlfeApiClient = class {
 	}
 };
 //#endregion
+//#region ../../packages-internal/api-client/dist/services/billing.js
+/** Sizes every deployed billing API returns. */
+const BASE_MANAGED_AGENT_SIZES = [
+	"small",
+	"medium",
+	"large"
+];
+/**
+* Fill `agentAddonSizesCovered` for an API that predates it. Such an API
+* predates xl too, so the all-sizes flag meant the sizes that existed then;
+* xl stays uncovered (an undiscounted price is the safe display).
+*/
+function normalizeSubscriptionDiscount(wire) {
+	return {
+		...wire,
+		agentAddonSizesCovered: wire.agentAddonSizesCovered ?? (wire.appliesToAgentAddons ? [...BASE_MANAGED_AGENT_SIZES] : [])
+	};
+}
+//#endregion
 //#region ../../packages-internal/api-client/dist/services/auth.js
+function normalizePlatformSubscriptionStatus(wire) {
+	const { discount, ...rest } = wire;
+	return discount ? {
+		...rest,
+		discount: normalizeSubscriptionDiscount(discount)
+	} : rest;
+}
 var AuthService = class {
 	client;
 	constructor(client) {
@@ -5030,7 +5100,10 @@ var AuthService = class {
 		});
 	}
 	getSubscriptionStatus() {
-		return this.client.request(`${this.prefix}/subscription`);
+		return this.client.request(`${this.prefix}/subscription`).then((r) => r.ok ? {
+			...r,
+			data: normalizePlatformSubscriptionStatus(r.data)
+		} : r);
 	}
 	/**
 	* Mint a short-lived, single-use Clerk sign-in token for the calling user so
@@ -5854,13 +5927,17 @@ function isIPCResponse(msg) {
 const PROTOCOL_VERSION = 1;
 //#endregion
 //#region src/runtime-gate.ts
-const log$5 = logger.child({ component: "RuntimeGate" });
+const log$6 = logger.child({ component: "RuntimeGate" });
 var RuntimeGate = class {
 	depth = 0;
 	wasRunning = false;
 	exclusive = false;
 	/** Brackets parked behind an exclusive hold (or an exclusive request parked behind open brackets). */
 	waiters = [];
+	/** `suspendExclusive()` callers currently parked behind open brackets. */
+	parkedExclusive = 0;
+	/** The daemon is holding the runtime's FIRST start (fresh managed box); see {@link deferFirstStart}. */
+	firstStartDeferred = false;
 	constructor(getRuntime) {
 		this.getRuntime = getRuntime;
 	}
@@ -5872,6 +5949,9 @@ var RuntimeGate = class {
 	get isExclusive() {
 		return this.exclusive;
 	}
+	get hasParkedExclusive() {
+		return this.parkedExclusive > 0;
+	}
 	waitFor(ready) {
 		if (ready()) return Promise.resolve();
 		return new Promise((resolve) => {
@@ -5894,26 +5974,33 @@ var RuntimeGate = class {
 	* up (e.g. autoStartRuntime=false). Waits while an exclusive bracket is open.
 	*/
 	async suspend() {
-		if (this.exclusive) log$5.info("Mutating reconcile parked behind an exclusive runtime hold (upgrade in flight)");
+		if (this.exclusive) log$6.info("Mutating reconcile parked behind an exclusive runtime hold (upgrade in flight)");
 		while (this.exclusive) await this.waitFor(() => !this.exclusive);
 		await this.enter();
 	}
 	async suspendExclusive() {
-		if (this.exclusive || this.depth !== 0) log$5.info({
+		if (this.exclusive || this.depth !== 0) log$6.info({
 			depth: this.depth,
 			exclusive: this.exclusive
 		}, "Exclusive runtime hold parked behind open brackets (reconcile in flight)");
-		while (this.exclusive || this.depth !== 0) await this.waitFor(() => !this.exclusive && this.depth === 0);
-		log$5.info("Exclusive runtime hold acquired");
+		if (this.exclusive || this.depth !== 0) {
+			this.parkedExclusive += 1;
+			try {
+				while (this.exclusive || this.depth !== 0) await this.waitFor(() => !this.exclusive && this.depth === 0);
+			} finally {
+				this.parkedExclusive -= 1;
+			}
+		}
+		log$6.info("Exclusive runtime hold acquired");
 		this.exclusive = true;
 		await this.enter();
 	}
 	async enter() {
 		if (this.depth++ > 0) return;
 		const rp = this.getRuntime();
-		this.wasRunning = rp?.isRunning ?? false;
+		this.wasRunning = rp?.isActive ?? false;
 		if (rp && this.wasRunning) {
-			log$5.info("Suspending runtime for mutating reconcile (avoid concurrent SQLite writers)");
+			log$6.info("Suspending runtime for mutating reconcile (avoid concurrent SQLite writers)");
 			await rp.stopWhenIdle();
 		}
 	}
@@ -5928,7 +6015,7 @@ var RuntimeGate = class {
 		if (this.depth < 0) this.depth = 0;
 		const rp = this.getRuntime();
 		if (rp && this.wasRunning) {
-			log$5.info("Resuming runtime after mutating reconcile");
+			log$6.info("Resuming runtime after mutating reconcile");
 			rp.resume();
 		}
 		this.wasRunning = false;
@@ -5937,6 +6024,32 @@ var RuntimeGate = class {
 		return Promise.resolve();
 	}
 	/**
+	* Start a runtime that has not been started yet (daemon boot, deferred first
+	* start). Never spawns while a bracket is open: the start is folded into the
+	* pending outermost `resume()` instead, so a first start can't land in the
+	* middle of a mutating reconcile or an exclusive upgrade.
+	*/
+	requestStart() {
+		this.firstStartDeferred = false;
+		const rp = this.getRuntime();
+		if (!rp) return;
+		if (this.depth > 0) {
+			log$6.info("Runtime start requested while suspended — deferring to pending resume");
+			this.wasRunning = true;
+			return;
+		}
+		rp.start();
+	}
+	/**
+	* Mark the runtime's first start as deferred (fresh managed box, see
+	* first-runtime-start.ts). Until {@link requestStart} runs, an out-of-band
+	* {@link requestRestart} of the never-started runtime is folded into that
+	* pending start instead of spawning it early.
+	*/
+	deferFirstStart() {
+		this.firstStartDeferred = true;
+	}
+	/**
 	* Out-of-band restart request (e.g. `alfe.config_set`, Hermes MCP sync).
 	* Deferred while a suspend is active — the pending `resume()` will bring the
 	* runtime back with fresh config, so restarting mid-suspend would just fight
@@ -5945,12 +6058,16 @@ var RuntimeGate = class {
 	*/
 	requestRestart() {
 		if (this.depth > 0) {
-			log$5.info("Runtime restart requested while suspended — deferring to pending resume");
+			log$6.info("Runtime restart requested while suspended — deferring to pending resume");
 			return;
 		}
 		const rp = this.getRuntime();
+		if (rp && this.firstStartDeferred && !rp.isActive) {
+			log$6.info("Runtime restart requested before the deferred first start — folding into that start");
+			return;
+		}
 		if (rp) rp.restart().catch((err) => {
-			log$5.error({ err: err instanceof Error ? err.message : String(err) }, "Failed to restart runtime");
+			log$6.error({ err: err instanceof Error ? err.message : String(err) }, "Failed to restart runtime");
 		});
 	}
 };
@@ -5973,7 +6090,23 @@ var NoopRuntimeGate = class {
 };
 //#endregion
 //#region src/reconciliation.ts
-const log$4 = logger.child({ component: "Reconciliation" });
+/**
+* ReconciliationEngine — converges local integration state toward cloud desired state.
+*
+* Takes: desired integrations from cloud + reference to the local integration manager.
+* Produces: a ReconciliationReport of actions taken and resulting actual statuses.
+*
+* For each desired integration with desiredStatus="active":
+*   1. Check if installed at correct version (from ~/.alfe/integrations.json)
+*   2. If not installed or wrong version: call integrationManager.install()
+*   3. If installed but not active: call integrationManager.activate()
+*
+* For each locally installed integration NOT in desired list (or desiredStatus="removed"):
+*   1. Call integrationManager.deactivate() then integrationManager.uninstall()
+*
+* Returns ReconciliationReport with results for each integration processed.
+*/
+const log$5 = logger.child({ component: "Reconciliation" });
 /**
 * How many times reconcile will re-attempt activation of an intact integration
 * stuck in `error` (with no reinstall requested) before giving up and waiting
@@ -5994,6 +6127,32 @@ var ReconciliationEngine = class {
 	*/
 	suspended = false;
 	/**
+	* A suspension carried from the previous pass because the caller already
+	* had another DESIRED_STATE queued (see {@link ReconcileOptions.holdSuspension}).
+	* The next pass adopts it instead of resuming → re-suspending the runtime;
+	* {@link releaseHeldSuspension} gives it back once the queue is drained.
+	*/
+	heldSuspension = false;
+	/**
+	* Most recent per-attempt re-activation error per integration. Becomes the
+	* error signature of the "re-activation attempts exhausted" report, so the
+	* terminal event says WHY the integration is stuck.
+	*/
+	lastReactivateError = /* @__PURE__ */ new Map();
+	/**
+	* Sentry dedupe for reconcile outcomes that RECUR on every DESIRED_STATE
+	* push once a budget is spent (re-activation exhausted, auto-reinstall
+	* blocked) or that repeat identically across attempts. Keyed on
+	* integration + phase + error signature, for one stuck EPISODE: the keys
+	* are cleared by {@link resetSelfHealBudget} whenever the retry budget
+	* resets (reinstall, upgrade, successful activation, healthy pass), so a
+	* manual reinstall that fails with the same error reports again. The engine
+	* lives as long as the daemon process (owned by `CloudClient`). Without it
+	* a single stuck integration produced one event per push (51 for one agent).
+	* Logs and the cloud-facing report are NOT deduped, only the Sentry capture.
+	*/
+	reportedFailures = /* @__PURE__ */ new Set();
+	/**
 	* @param manager The integration manager to converge.
 	* @param gate    Runtime gate used to suspend the runtime child around
 	*                mutating branches so `openclaw` CLI subprocesses don't write
@@ -6006,6 +6165,29 @@ var ReconciliationEngine = class {
 		this.gate = gate;
 	}
 	/**
+	* Capture an integration failure to Sentry at most once per
+	* `(integration, phase, signature)` within the current stuck episode. A new
+	* signature (a different underlying error) reports again.
+	*/
+	captureFailureOnce(integrationId, phase, signature, cause, fingerprint) {
+		const key = `${integrationId}\u0000${phase}\u0000${createHash("sha256").update(signature).digest("hex")}`;
+		if (this.reportedFailures.has(key)) return;
+		this.reportedFailures.add(key);
+		if (fingerprint) captureIntegrationFailure(integrationId, phase, cause, { fingerprint });
+		else captureIntegrationFailure(integrationId, phase, cause);
+	}
+	/**
+	* Start a fresh self-heal episode for an integration: a new re-activation
+	* budget, and a cleared Sentry dedupe so a repeat of the same failure in the
+	* new episode is reported again.
+	*/
+	resetSelfHealBudget(integrationId) {
+		this.activateAttempts.delete(integrationId);
+		this.lastReactivateError.delete(integrationId);
+		const prefix = `${integrationId}\u0000`;
+		for (const key of this.reportedFailures) if (key.startsWith(prefix)) this.reportedFailures.delete(key);
+	}
+	/**
 	* Suspend the runtime on the first mutating branch of a reconcile pass.
 	* Idempotent within a pass — subsequent mutating branches are covered by the
 	* single suspend held until the `finally` in {@link reconcile}.
@@ -6022,14 +6204,43 @@ var ReconciliationEngine = class {
 	* so the mutation performed by {@link ensureSuspended} in a different method
 	* isn't narrowed away by control-flow analysis at the callsite.
 	*/
-	async resumeIfSuspended() {
-		if (this.suspended) await this.gate.resume();
+	async resumeIfSuspended(opts) {
+		if (!this.suspended) return;
+		if (opts?.holdSuspension?.()) {
+			log$5.info("Holding runtime suspension across queued reconcile pass");
+			if (this.gate.hasParkedExclusive) log$5.warn("Exclusive runtime hold (upgrade) is parked behind a suspension held for queued reconcile passes");
+			this.heldSuspension = true;
+			return;
+		}
+		await this.gate.resume();
+	}
+	/**
+	* Resume a suspension held across passes by {@link ReconcileOptions.holdSuspension}.
+	* The caller MUST call this once its queue of passes is drained (success or
+	* failure), otherwise the runtime stays suspended. No-op when nothing is held.
+	*/
+	async releaseHeldSuspension() {
+		if (!this.heldSuspension) return;
+		this.heldSuspension = false;
+		await this.gate.resume();
+	}
+	/** True while a suspension is carried between passes (tests/diagnostics). */
+	get isHoldingSuspension() {
+		return this.heldSuspension;
 	}
 	/**
 	* Reconcile local state against desired state from cloud.
 	*/
-	async reconcile(desiredIntegrations) {
-		this.suspended = false;
+	async reconcile(desiredIntegrations, opts) {
+		this.suspended = this.heldSuspension;
+		this.heldSuspension = false;
+		try {
+			return await this.reconcilePass(desiredIntegrations);
+		} finally {
+			await this.resumeIfSuspended(opts);
+		}
+	}
+	async reconcilePass(desiredIntegrations) {
 		const report = {
 			results: [],
 			installed: [],
@@ -6043,7 +6254,7 @@ var ReconciliationEngine = class {
 		try {
 			localIntegrations = await this.manager.getInstalledIntegrations();
 		} catch (err) {
-			log$4.error({ err }, "Failed to get local integrations");
+			log$5.error({ err }, "Failed to get local integrations");
 			captureIntegrationFailure("_reconciliation", "read_local_state", err);
 			const errorMessage = "Failed to read local integration state; reconciliation skipped";
 			const affectedIds = desiredIntegrations.length > 0 ? desiredIntegrations.map((desired) => desired.integrationId) : ["*"];
@@ -6061,34 +6272,30 @@ var ReconciliationEngine = class {
 		}
 		const localMap = new Map(localIntegrations.map((i) => [i.id, i]));
 		const desiredMap = new Map(desiredIntegrations.map((d) => [d.integrationId, d]));
-		try {
-			for (const desired of desiredIntegrations) if (desired.desiredStatus === "active") {
-				const local = localMap.get(desired.integrationId);
-				if (desired.connectionAuthorityVersion !== void 0 && local?.connectionAuthorityPendingVersion !== void 0 && local.status === "error" && (local.version === desired.version || desired.version === "" || local.version === "unknown") && !(desired.reinstallRequestedAt && local.installedAt && desired.reinstallRequestedAt > local.installedAt) && await this.manager.isInstallIntact(desired.integrationId)) report.results.push({
+		for (const desired of desiredIntegrations) if (desired.desiredStatus === "active") {
+			const local = localMap.get(desired.integrationId);
+			if (desired.connectionAuthorityVersion !== void 0 && local?.connectionAuthorityPendingVersion !== void 0 && local.status === "error" && (local.version === desired.version || desired.version === "" || local.version === "unknown") && !(desired.reinstallRequestedAt && local.installedAt && desired.reinstallRequestedAt > local.installedAt) && await this.manager.isInstallIntact(desired.integrationId)) report.results.push({
+				integrationId: desired.integrationId,
+				action: "activated",
+				actualStatus: "active"
+			});
+			else await this.reconcileActive(desired, local, report);
+			const result = report.results.find((item) => item.integrationId === desired.integrationId);
+			if (result?.actualStatus === "active" && desired.connectionAuthorityVersion !== void 0 && (local?.connectionAuthorityPendingVersion !== void 0 || desired.connectionAuthorityVersion !== local?.connectionAuthorityVersion)) try {
+				await this.manager.refreshConnections(desired.integrationId, desired.connectionAuthorityVersion, { onBeforeRuntimeMutation: () => this.ensureSuspended() });
+			} catch (err) {
+				captureIntegrationFailure(desired.integrationId, "refresh_connections", err);
+				const error = err instanceof Error ? err.message : String(err);
+				report.errors.push({
 					integrationId: desired.integrationId,
-					action: "activated",
-					actualStatus: "active"
+					error
 				});
-				else await this.reconcileActive(desired, local, report);
-				const result = report.results.find((item) => item.integrationId === desired.integrationId);
-				if (result?.actualStatus === "active" && desired.connectionAuthorityVersion !== void 0 && (local?.connectionAuthorityPendingVersion !== void 0 || desired.connectionAuthorityVersion !== local?.connectionAuthorityVersion)) try {
-					await this.manager.refreshConnections(desired.integrationId, desired.connectionAuthorityVersion, { onBeforeRuntimeMutation: () => this.ensureSuspended() });
-				} catch (err) {
-					captureIntegrationFailure(desired.integrationId, "refresh_connections", err);
-					const error = err instanceof Error ? err.message : String(err);
-					report.errors.push({
-						integrationId: desired.integrationId,
-						error
-					});
-					result.action = "error";
-					result.actualStatus = "error";
-					result.errorMessage = error;
-				}
-			} else await this.reconcileRemoved(desired.integrationId, localMap.get(desired.integrationId), report);
-			for (const local of localIntegrations) if (!desiredMap.has(local.id)) await this.reconcileRemoved(local.id, local, report);
-		} finally {
-			await this.resumeIfSuspended();
-		}
+				result.action = "error";
+				result.actualStatus = "error";
+				result.errorMessage = error;
+			}
+		} else await this.reconcileRemoved(desired.integrationId, localMap.get(desired.integrationId), report);
+		for (const local of localIntegrations) if (!desiredMap.has(local.id)) await this.reconcileRemoved(local.id, local, report);
 		return report;
 	}
 	async reconcileActive(desired, local, report) {
@@ -6096,10 +6303,11 @@ var ReconciliationEngine = class {
 		try {
 			if (!local) {
 				await this.ensureSuspended();
-				log$4.info(`Installing ${id}@${desired.version}`);
+				this.resetSelfHealBudget(id);
+				log$5.info(`Installing ${id}@${desired.version}`);
 				await this.manager.install(id, desired.version, desired.config, desired.customSource);
 				report.installed.push(id);
-				log$4.info(`Activating ${id}`);
+				log$5.info(`Activating ${id}`);
 				if ((await this.manager.activate(id)).configApplied) report.configApplied = true;
 				report.activated.push(id);
 				report.results.push({
@@ -6112,9 +6320,9 @@ var ReconciliationEngine = class {
 			if (local.version !== desired.version && desired.version !== "" && local.version !== "unknown") {
 				if (desired.reinstallRequestedAt && local.installedAt && desired.reinstallRequestedAt > local.installedAt) {
 					await this.ensureSuspended();
-					log$4.info(`Reinstalling ${id} on version change (reinstall requested: ${desired.reinstallRequestedAt}, installed: ${local.installedAt}): ${local.version} → ${desired.version}`);
+					log$5.info(`Reinstalling ${id} on version change (reinstall requested: ${desired.reinstallRequestedAt}, installed: ${local.installedAt}): ${local.version} → ${desired.version}`);
 					this.manager.resetReinstallAttempts(id);
-					this.activateAttempts.delete(id);
+					this.resetSelfHealBudget(id);
 					if ((await this.manager.reinstall(id, desired.version, desired.config, desired.customSource, { reinstallRequestedAt: desired.reinstallRequestedAt })).configApplied) report.configApplied = true;
 					report.installed.push(id);
 					report.activated.push(id);
@@ -6125,11 +6333,11 @@ var ReconciliationEngine = class {
 					});
 					return;
 				}
-				log$4.info(`Upgrading ${id} in place: ${local.version} → ${desired.version}`);
+				log$5.info(`Upgrading ${id} in place: ${local.version} → ${desired.version}`);
 				try {
 					if ((await this.manager.upgrade(id, desired.version, desired.config, desired.customSource, { onBeforeRuntimeMutation: () => this.ensureSuspended() })).configApplied) report.configApplied = true;
 					this.manager.resetReinstallAttempts(id);
-					this.activateAttempts.delete(id);
+					this.resetSelfHealBudget(id);
 					report.installed.push(id);
 					report.activated.push(id);
 					report.results.push({
@@ -6139,7 +6347,7 @@ var ReconciliationEngine = class {
 					});
 				} catch (upgradeErr) {
 					const upgradeMsg = upgradeErr instanceof Error ? upgradeErr.message : String(upgradeErr);
-					log$4.error({ err: upgradeErr }, `Upgrade failed for ${id}`);
+					log$5.error({ err: upgradeErr }, `Upgrade failed for ${id}`);
 					captureIntegrationFailure(id, "upgrade", upgradeErr);
 					report.errors.push({
 						integrationId: id,
@@ -6157,9 +6365,9 @@ var ReconciliationEngine = class {
 			if (local.status === "error") {
 				if (desired.reinstallRequestedAt && local.installedAt && desired.reinstallRequestedAt > local.installedAt) {
 					await this.ensureSuspended();
-					log$4.info(`Reinstalling ${id} from error state (requested: ${desired.reinstallRequestedAt}, installed: ${local.installedAt})`);
+					log$5.info(`Reinstalling ${id} from error state (requested: ${desired.reinstallRequestedAt}, installed: ${local.installedAt})`);
 					this.manager.resetReinstallAttempts(id);
-					this.activateAttempts.delete(id);
+					this.resetSelfHealBudget(id);
 					if ((await this.manager.reinstall(id, desired.version, desired.config, desired.customSource, { reinstallRequestedAt: desired.reinstallRequestedAt })).configApplied) report.configApplied = true;
 					report.installed.push(id);
 					report.activated.push(id);
@@ -6173,8 +6381,9 @@ var ReconciliationEngine = class {
 				if (!await this.manager.isInstallIntact(id)) {
 					const attempts = this.manager.getReinstallAttempts(id);
 					if (attempts >= 3) {
-						log$4.error(`Auto-reinstall blocked for ${id} — ${String(attempts)} consecutive failures. Manual reinstall required.`);
-						captureIntegrationFailure(id, "reinstall", `Max auto-reinstall attempts (${String(attempts)}) reached — manual reinstall required`);
+						log$5.error(`Auto-reinstall blocked for ${id} — ${String(attempts)} consecutive failures. Manual reinstall required.`);
+						const blockedMessage = `Max auto-reinstall attempts (${String(attempts)}) reached — manual reinstall required`;
+						this.captureFailureOnce(id, "reinstall", `blocked:${blockedMessage}`, blockedMessage);
 						report.errors.push({
 							integrationId: id,
 							error: `Max auto-reinstall attempts (${String(attempts)}) reached`
@@ -6188,12 +6397,12 @@ var ReconciliationEngine = class {
 						return;
 					}
 					await this.ensureSuspended();
-					log$4.info(`Auto-reinstalling ${id} — install directory is corrupted or missing (attempt ${String(attempts + 1)}/3)`);
+					log$5.info(`Auto-reinstalling ${id} — install directory is corrupted or missing (attempt ${String(attempts + 1)}/3)`);
 					this.manager.incrementReinstallAttempts(id);
 					try {
 						if ((await this.manager.reinstall(id, desired.version, desired.config, desired.customSource)).configApplied) report.configApplied = true;
 						this.manager.resetReinstallAttempts(id);
-						this.activateAttempts.delete(id);
+						this.resetSelfHealBudget(id);
 						report.installed.push(id);
 						report.activated.push(id);
 						report.results.push({
@@ -6203,7 +6412,7 @@ var ReconciliationEngine = class {
 						});
 					} catch (reinstallErr) {
 						const reinstallMsg = reinstallErr instanceof Error ? reinstallErr.message : String(reinstallErr);
-						log$4.error({ err: reinstallErr }, `Auto-reinstall failed for ${id}`);
+						log$5.error({ err: reinstallErr }, `Auto-reinstall failed for ${id}`);
 						captureIntegrationFailure(id, "reinstall", reinstallErr);
 						report.errors.push({
 							integrationId: id,
@@ -6222,10 +6431,10 @@ var ReconciliationEngine = class {
 				if (activateAttempts < MAX_ERROR_ACTIVATE_ATTEMPTS) {
 					this.activateAttempts.set(id, activateAttempts + 1);
 					await this.ensureSuspended();
-					log$4.info(`Re-activating ${id} from error state (attempt ${String(activateAttempts + 1)}/${String(MAX_ERROR_ACTIVATE_ATTEMPTS)})`);
+					log$5.info(`Re-activating ${id} from error state (attempt ${String(activateAttempts + 1)}/${String(MAX_ERROR_ACTIVATE_ATTEMPTS)})`);
 					try {
 						if ((await this.manager.activate(id, { forcePlugins: true })).configApplied) report.configApplied = true;
-						this.activateAttempts.delete(id);
+						this.resetSelfHealBudget(id);
 						report.activated.push(id);
 						report.results.push({
 							integrationId: id,
@@ -6235,8 +6444,9 @@ var ReconciliationEngine = class {
 						return;
 					} catch (reactivateErr) {
 						const reactivateMsg = reactivateErr instanceof Error ? reactivateErr.message : String(reactivateErr);
-						log$4.warn(`Re-activation of ${id} from error state failed (attempt ${String(activateAttempts + 1)}/${String(MAX_ERROR_ACTIVATE_ATTEMPTS)}): ${reactivateMsg}`);
-						captureIntegrationFailure(id, "reactivate", reactivateErr);
+						log$5.warn(`Re-activation of ${id} from error state failed (attempt ${String(activateAttempts + 1)}/${String(MAX_ERROR_ACTIVATE_ATTEMPTS)}): ${reactivateMsg}`);
+						this.lastReactivateError.set(id, reactivateMsg);
+						this.captureFailureOnce(id, "reactivate", `attempt:${reactivateMsg}`, reactivateErr);
 						report.errors.push({
 							integrationId: id,
 							error: reactivateMsg
@@ -6250,8 +6460,9 @@ var ReconciliationEngine = class {
 						return;
 					}
 				}
-				log$4.warn(`Integration ${id} is in error state — re-activation exhausted, waiting for reinstall request`);
-				captureIntegrationFailure(id, "reactivate", `Integration ${id} stuck in error state — re-activation attempts exhausted`);
+				log$5.warn(`Integration ${id} is in error state — re-activation exhausted, waiting for reinstall request`);
+				const lastReactivateError = this.lastReactivateError.get(id);
+				this.captureFailureOnce(id, "reactivate", `exhausted:${lastReactivateError ?? ""}`, `Integration ${id} stuck in error state — re-activation attempts exhausted${lastReactivateError ? ` (last error: ${lastReactivateError})` : ""}`, ["integration-reactivate-exhausted", id]);
 				report.errors.push({
 					integrationId: id,
 					error: "Integration is in error state"
@@ -6267,9 +6478,9 @@ var ReconciliationEngine = class {
 			if (local.status === "installing") {
 				if (desired.reinstallRequestedAt && local.installedAt && desired.reinstallRequestedAt > local.installedAt) {
 					await this.ensureSuspended();
-					log$4.info(`Reinstalling ${id} from stale installing state (requested: ${desired.reinstallRequestedAt}, installed: ${local.installedAt})`);
+					log$5.info(`Reinstalling ${id} from stale installing state (requested: ${desired.reinstallRequestedAt}, installed: ${local.installedAt})`);
 					this.manager.resetReinstallAttempts(id);
-					this.activateAttempts.delete(id);
+					this.resetSelfHealBudget(id);
 					if ((await this.manager.reinstall(id, desired.version, desired.config, desired.customSource, { reinstallRequestedAt: desired.reinstallRequestedAt })).configApplied) report.configApplied = true;
 					report.installed.push(id);
 					report.activated.push(id);
@@ -6283,8 +6494,8 @@ var ReconciliationEngine = class {
 				const attempts = this.manager.getReinstallAttempts(id);
 				if (attempts >= 3) {
 					const errorMessage = `Stale installing state — max auto-reinstall attempts (${String(attempts)}) reached — manual reinstall required`;
-					log$4.error(`Auto-reinstall blocked for ${id} — stuck in "installing", ${String(attempts)} consecutive failures. Manual reinstall required.`);
-					captureIntegrationFailure(id, "reinstall", errorMessage);
+					log$5.error(`Auto-reinstall blocked for ${id} — stuck in "installing", ${String(attempts)} consecutive failures. Manual reinstall required.`);
+					this.captureFailureOnce(id, "reinstall", `blocked:${errorMessage}`, errorMessage);
 					report.errors.push({
 						integrationId: id,
 						error: `Max auto-reinstall attempts (${String(attempts)}) reached`
@@ -6298,12 +6509,12 @@ var ReconciliationEngine = class {
 					return;
 				}
 				await this.ensureSuspended();
-				log$4.info(`Recovering ${id} from stale installing state via reinstall (attempt ${String(attempts + 1)}/3)`);
+				log$5.info(`Recovering ${id} from stale installing state via reinstall (attempt ${String(attempts + 1)}/3)`);
 				this.manager.incrementReinstallAttempts(id);
 				try {
 					if ((await this.manager.reinstall(id, desired.version, desired.config, desired.customSource)).configApplied) report.configApplied = true;
 					this.manager.resetReinstallAttempts(id);
-					this.activateAttempts.delete(id);
+					this.resetSelfHealBudget(id);
 					report.installed.push(id);
 					report.activated.push(id);
 					report.results.push({
@@ -6313,7 +6524,7 @@ var ReconciliationEngine = class {
 					});
 				} catch (reinstallErr) {
 					const reinstallMsg = reinstallErr instanceof Error ? reinstallErr.message : String(reinstallErr);
-					log$4.error({ err: reinstallErr }, `Reinstall from stale installing state failed for ${id}`);
+					log$5.error({ err: reinstallErr }, `Reinstall from stale installing state failed for ${id}`);
 					captureIntegrationFailure(id, "reinstall", reinstallErr);
 					report.errors.push({
 						integrationId: id,
@@ -6330,8 +6541,9 @@ var ReconciliationEngine = class {
 			}
 			if (local.status !== "active") {
 				await this.ensureSuspended();
-				log$4.info(`Activating ${id}`);
+				log$5.info(`Activating ${id}`);
 				if ((await this.manager.activate(id, { forcePlugins: true })).configApplied) report.configApplied = true;
+				this.resetSelfHealBudget(id);
 				report.activated.push(id);
 				report.results.push({
 					integrationId: id,
@@ -6342,9 +6554,9 @@ var ReconciliationEngine = class {
 			}
 			if (desired.reinstallRequestedAt && local.installedAt && desired.reinstallRequestedAt > local.installedAt) {
 				await this.ensureSuspended();
-				log$4.info(`Reinstall requested for ${id} (requested: ${desired.reinstallRequestedAt}, installed: ${local.installedAt})`);
+				log$5.info(`Reinstall requested for ${id} (requested: ${desired.reinstallRequestedAt}, installed: ${local.installedAt})`);
 				this.manager.resetReinstallAttempts(id);
-				this.activateAttempts.delete(id);
+				this.resetSelfHealBudget(id);
 				if ((await this.manager.reinstall(id, desired.version, desired.config, desired.customSource, { reinstallRequestedAt: desired.reinstallRequestedAt })).configApplied) report.configApplied = true;
 				report.installed.push(id);
 				report.activated.push(id);
@@ -6355,7 +6567,7 @@ var ReconciliationEngine = class {
 				});
 				return;
 			}
-			this.activateAttempts.delete(id);
+			this.resetSelfHealBudget(id);
 			report.results.push({
 				integrationId: id,
 				action: "up_to_date",
@@ -6363,7 +6575,7 @@ var ReconciliationEngine = class {
 			});
 		} catch (err) {
 			const message = err instanceof Error ? err.message : String(err);
-			log$4.error({ err }, `Error reconciling ${id}`);
+			log$5.error({ err }, `Error reconciling ${id}`);
 			captureIntegrationFailure(id, "reconcile_active", err);
 			report.errors.push({
 				integrationId: id,
@@ -6388,12 +6600,13 @@ var ReconciliationEngine = class {
 		}
 		try {
 			await this.ensureSuspended();
-			log$4.info(`Removing ${id}`);
+			log$5.info(`Removing ${id}`);
 			if (local.status === "active") {
 				await this.manager.deactivate(id);
 				report.deactivated.push(id);
 			}
 			await this.manager.uninstall(id);
+			this.resetSelfHealBudget(id);
 			report.uninstalled.push(id);
 			report.results.push({
 				integrationId: id,
@@ -6402,7 +6615,7 @@ var ReconciliationEngine = class {
 			});
 		} catch (err) {
 			const message = err instanceof Error ? err.message : String(err);
-			log$4.error({ err }, `Error removing ${id}`);
+			log$5.error({ err }, `Error removing ${id}`);
 			captureIntegrationFailure(id, "reconcile_removed", err);
 			report.errors.push({
 				integrationId: id,
@@ -6440,6 +6653,7 @@ var CloudClient = class {
 	onConnectionChange = null;
 	onRuntimeRestartNeeded = null;
 	onReconciliationComplete = null;
+	onReconciliationSettled = null;
 	reconciliationEngine = null;
 	configReconciler = null;
 	reconciling = false;
@@ -6479,6 +6693,16 @@ var CloudClient = class {
 		this.onReconciliationComplete = handler;
 	}
 	/**
+	* Set a callback for when a DESIRED_STATE burst has fully SETTLED: the
+	* received snapshot and every queued one have run (each may have succeeded
+	* or failed) and any runtime suspension held across them was released.
+	* Fires on success AND failure — the daemon's deferred first runtime start
+	* hangs off it, and a failed reconcile must not strand the runtime.
+	*/
+	setOnReconciliationSettled(handler) {
+		this.onReconciliationSettled = handler;
+	}
+	/**
 	* Set the integration manager (and optionally the runtime gate) for
 	* reconciliation. When set, the cloud client handles DESIRED_STATE messages
 	* automatically. The gate is passed to the ReconciliationEngine so mutating
@@ -6725,20 +6949,43 @@ var CloudClient = class {
 			const message = err instanceof Error ? err.message : String(err);
 			logger.error({ err: message }, "Cloud: reconciliation failed");
 		} finally {
-			while (this.pendingDesiredState) {
-				const next = this.pendingDesiredState;
-				this.pendingDesiredState = null;
-				logger.info({ count: next.integrations.length }, "Cloud: processing queued DESIRED_STATE");
+			for (;;) {
+				while (this.pendingDesiredState) {
+					const next = this.pendingDesiredState;
+					this.pendingDesiredState = null;
+					logger.info({ count: next.integrations.length }, "Cloud: processing queued DESIRED_STATE");
+					try {
+						await this.runReconciliation(next);
+					} catch (err) {
+						const message = err instanceof Error ? err.message : String(err);
+						logger.error({ err: message }, "Cloud: queued reconciliation failed");
+					}
+				}
 				try {
-					await this.runReconciliation(next);
+					await this.reconciliationEngine.releaseHeldSuspension();
 				} catch (err) {
 					const message = err instanceof Error ? err.message : String(err);
-					logger.error({ err: message }, "Cloud: queued reconciliation failed");
+					logger.error({ err: message }, "Cloud: failed to resume runtime after queued reconciliation");
 				}
+				if (!this.hasQueuedDesiredState()) break;
 			}
 			this.reconciling = false;
+			try {
+				this.onReconciliationSettled?.();
+			} catch (err) {
+				const message = err instanceof Error ? err.message : String(err);
+				logger.error({ err: message }, "Cloud: reconciliation-settled handler failed");
+			}
 		}
 	}
+	/**
+	* Read through a method so control-flow narrowing from the drain loop above
+	* doesn't treat `pendingDesiredState` as still null across an `await` (a
+	* snapshot can be queued by another message while we're suspended).
+	*/
+	hasQueuedDesiredState() {
+		return this.pendingDesiredState !== null;
+	}
 	async runReconciliation(msg) {
 		if (msg.config && this.configReconciler) try {
 			const configReport = await this.configReconciler.reconcile(msg.config);
@@ -6754,7 +7001,7 @@ var CloudClient = class {
 			logger.error({ err: message }, "Cloud: config reconcile failed");
 		}
 		if (!this.reconciliationEngine) return;
-		const report = await this.reconciliationEngine.reconcile(msg.integrations);
+		const report = await this.reconciliationEngine.reconcile(msg.integrations, { holdSuspension: () => this.hasQueuedDesiredState() });
 		logger.info({
 			installed: report.installed.length,
 			activated: report.activated.length,
@@ -6817,7 +7064,7 @@ var CloudClient = class {
 };
 //#endregion
 //#region src/config-reconciler.ts
-const log$3 = logger.child({ component: "ConfigReconciler" });
+const log$4 = logger.child({ component: "ConfigReconciler" });
 const DEFAULT_VERIFY_RETRIES = 3;
 const DEFAULT_VERIFY_RETRY_DELAY_MS = 750;
 const delay = (ms) => new Promise((resolve) => {
@@ -6839,7 +7086,7 @@ var ConfigReconciler = class {
 	async reconcile(desired) {
 		const applier = this.getApplier();
 		if (!applier?.setConfigRaw) {
-			log$3.debug("No applier with setConfigRaw — skipping config reconcile");
+			log$4.debug("No applier with setConfigRaw — skipping config reconcile");
 			return null;
 		}
 		const setConfigRaw = applier.setConfigRaw.bind(applier);
@@ -6857,13 +7104,13 @@ var ConfigReconciler = class {
 				try {
 					current = await getConfigRaw(key);
 				} catch (err) {
-					log$3.warn({
+					log$4.warn({
 						key,
 						err: err instanceof Error ? err.message : String(err)
 					}, "Config diff read failed — attempting the write");
 				}
 				if (current === want) {
-					log$3.debug({ key }, "Config already at desired value — no-op");
+					log$4.debug({ key }, "Config already at desired value — no-op");
 					continue;
 				}
 			}
@@ -6878,7 +7125,7 @@ var ConfigReconciler = class {
 			if (getConfigRaw) {
 				const outcome = await this.verify(getConfigRaw, key, want);
 				if (outcome === "matched") {
-					log$3.warn({
+					log$4.warn({
 						key,
 						err: msg
 					}, "config set errored but value landed — treating as applied");
@@ -6894,7 +7141,7 @@ var ConfigReconciler = class {
 		if (failures.length > 0) {
 			const joined = failures.join("; ");
 			const reason = joined.length > 480 ? `${joined.slice(0, 480)}… (truncated)` : joined;
-			log$3.warn({
+			log$4.warn({
 				version: desired.version,
 				reason
 			}, "Config reconcile failed");
@@ -6905,13 +7152,13 @@ var ConfigReconciler = class {
 			};
 		}
 		if (inconclusiveKeys.length > 0) {
-			log$3.warn({
+			log$4.warn({
 				version: desired.version,
 				keys: inconclusiveKeys
 			}, "Config reconcile verification was inconclusive — leaving version pending");
 			return null;
 		}
-		log$3.info({
+		log$4.info({
 			version: desired.version,
 			keys: entries.length
 		}, "Config reconcile applied");
@@ -6928,7 +7175,7 @@ var ConfigReconciler = class {
 				if (current === want) return "matched";
 				if (current !== void 0) observedValue = true;
 			} catch (err) {
-				log$3.debug({
+				log$4.debug({
 					key,
 					err: err instanceof Error ? err.message : String(err)
 				}, "Config verify read failed");
@@ -8945,7 +9192,7 @@ function reportAvailableCommands(deps) {
 * arrive — the grace deadline is a backstop, but fail-open-to-idle means the
 * common "nothing to drain" case restarts immediately with no added latency.
 */
-const log$2 = logger.child({ component: "TurnActivity" });
+const log$3 = logger.child({ component: "TurnActivity" });
 /** The IPC method the daemon calls on plugins to ask "is a turn active?". */
 const RUNTIME_ACTIVITY_METHOD = "runtime.activity";
 /**
@@ -8964,17 +9211,122 @@ var IpcTurnActivityProbe = class {
 		try {
 			const responses = await ipc.broadcastRequest(RUNTIME_ACTIVITY_METHOD, {}, this.probeTimeoutMs);
 			for (const [pluginId, res] of responses) if (res.ok && res.payload != null && typeof res.payload === "object" && res.payload.active === true) {
-				log$2.debug({ pluginId }, "Plugin reports an in-flight turn");
+				log$3.debug({ pluginId }, "Plugin reports an in-flight turn");
 				return true;
 			}
 			return false;
 		} catch (err) {
-			log$2.debug({ err: err instanceof Error ? err.message : String(err) }, "Turn-activity probe failed — assuming idle");
+			log$3.debug({ err: err instanceof Error ? err.message : String(err) }, "Turn-activity probe failed — assuming idle");
 			return false;
 		}
 	}
 };
 //#endregion
+//#region src/first-runtime-start.ts
+/**
+* Deferred first runtime start for fresh managed boxes.
+*
+* On a brand-new managed VM the first DESIRED_STATE always installs the core
+* integrations, and every mutating reconcile suspends the runtime through the
+* RuntimeGate. Starting the runtime at daemon boot therefore buys nothing: it
+* boots (and runs its first-boot migrations) only to be stopped ~seconds later
+* by that first reconcile, then started again after it. Deferring the first
+* start until the first reconcile burst settles removes that whole cycle.
+*
+* The deferral is released by whichever comes first:
+*  - the cloud client's "reconciliation settled" hook (success OR failure),
+*  - a fallback timer armed when the cloud client first REGISTERS
+*    ({@link DeferredRuntimeStart.armFallback}), so slow boot/connect time
+*    doesn't eat the window the first DESIRED_STATE needs;
+*  - a longer boot ceiling measured from daemon boot, so a daemon that never
+*    registers (gateway down, registration failing) still brings the runtime up.
+*
+* Only fresh managed boxes defer (managed mode AND no integrations in local
+* state). Self-hosted daemons and restarts of an already-provisioned box start
+* the runtime immediately, exactly as before.
+*/
+const log$2 = logger.child({ component: "FirstRuntimeStart" });
+/** How long a fresh box waits, after first registering with the cloud, for its first reconcile to settle. */
+const FIRST_START_FALLBACK_MS = 18e4;
+/** Hard ceiling from daemon boot, for a daemon that never registers with the cloud. */
+const FIRST_START_BOOT_CEILING_MS = 6e5;
+/**
+* Fresh managed box ⇔ managed mode AND local integration state is readable and
+* empty. An unreadable state is NOT treated as fresh — fall back to the old
+* start-immediately behaviour rather than delay a box we know nothing about.
+*/
+function shouldDeferFirstRuntimeStart(input) {
+	return input.managed && input.installedIntegrationCount === 0;
+}
+var DeferredRuntimeStart = class {
+	released = false;
+	cancelled = false;
+	startFn = null;
+	fallbackArmed = false;
+	fallbackTimer = null;
+	ceilingTimer;
+	/** Arms the boot ceiling immediately; the fallback waits for {@link armFallback}. */
+	constructor(fallbackMs = FIRST_START_FALLBACK_MS, bootCeilingMs = FIRST_START_BOOT_CEILING_MS) {
+		this.fallbackMs = fallbackMs;
+		this.ceilingTimer = setTimeout(() => {
+			this.ceilingTimer = null;
+			this.release("boot-ceiling");
+		}, bootCeilingMs);
+	}
+	/**
+	* Start the fallback clock. Called when the cloud client registers; only
+	* the FIRST call arms it (a reconnect must not push the deadline out).
+	*/
+	armFallback() {
+		if (this.released || this.cancelled || this.fallbackArmed) return;
+		this.fallbackArmed = true;
+		this.fallbackTimer = setTimeout(() => {
+			this.fallbackTimer = null;
+			this.release("fallback-timeout");
+		}, this.fallbackMs);
+	}
+	/** True once released (by either path). */
+	get isReleased() {
+		return this.released;
+	}
+	/**
+	* Provide the start action once the runtime process exists. If the deferral
+	* was already released (a reconcile settled before the runtime object was
+	* built), starts right away.
+	*/
+	attach(start) {
+		if (this.cancelled) return;
+		this.startFn = start;
+		if (this.released) start();
+	}
+	/** Release the deferral. Idempotent — only the first call starts the runtime. */
+	release(reason) {
+		if (this.released || this.cancelled) return;
+		this.released = true;
+		this.clearTimers();
+		log$2.info({
+			reason,
+			fallbackMs: this.fallbackMs
+		}, "Releasing deferred first runtime start");
+		this.startFn?.();
+	}
+	/** Daemon shutdown: never start the runtime after this. */
+	cancel() {
+		this.cancelled = true;
+		this.clearTimers();
+	}
+	clearTimers() {
+		if (this.fallbackTimer) {
+			clearTimeout(this.fallbackTimer);
+			this.fallbackTimer = null;
+		}
+		if (this.ceilingTimer) {
+			clearTimeout(this.ceilingTimer);
+			this.ceilingTimer = null;
+		}
+	}
+};
+//#endregion
 //#region src/command-registry.ts
 /**
 * Command Registry — maps integration command names to local handler files.
@@ -9656,8 +10008,49 @@ let stopPairingApprovalPoller = null;
 let runtimeAppliersRef = null;
 let openclawCliLockRef = null;
 let runtimeGateRef = null;
+/** Pending deferred first runtime start (fresh managed box only). */
+let firstRuntimeStart = null;
 const LEGACY_CONFIG_SET_KEYS = new Set(["agents.defaults.model"]);
 const MAX_LEGACY_CONFIG_VALUE_LENGTH = 16 * 1024;
+/** Daemon-only `upgradeRuntime` options for OpenClaw (see runtime-upgrade.ts). */
+function openClawUpgradeExtras() {
+	const applier = runtimeAppliersRef?.get("openclaw");
+	const isolation = detectUpgradeIsolation();
+	return {
+		markerPath: defaultRuntimeUpgradeMarkerPath(),
+		...applier ? { pluginOwnership: buildOpenClawPluginOwnership(applier) } : {},
+		...isolation ? { isolation } : {}
+	};
+}
+/**
+* Boot-time repair of an interrupted OpenClaw upgrade (see
+* `startBootUpgradeRecovery`). Must be called BEFORE the runtime's first
+* `requestStart()`.
+*/
+function recoverInterruptedOpenClawUpgrade(gate, cliLock) {
+	const recovery = startBootUpgradeRecovery({
+		gate,
+		cliLock,
+		markerPath: defaultRuntimeUpgradeMarkerPath(),
+		recover: (markerPath) => {
+			const isolation = detectUpgradeIsolation();
+			return recoverInterruptedRuntimeUpgrade({
+				markerPath,
+				...isolation ? { isolation } : {}
+			});
+		},
+		onRecovered: (version) => {
+			if (version === resolvedRuntimeVersion) return;
+			resolvedRuntimeVersion = version;
+			cloudClient.updateRuntimeVersionAndReRegister(version);
+		}
+	});
+	if (!recovery) return;
+	upgradingRuntime = true;
+	recovery.finally(() => {
+		upgradingRuntime = false;
+	});
+}
 async function startDaemon() {
 	startedAt = Date.now();
 	const managed = isManagedMode();
@@ -9744,6 +10137,7 @@ async function startDaemon() {
 	cloudClient.setConnectionChangeHandler((connected) => {
 		cloudConnected = connected;
 		logger.info({ connected }, "Cloud connection state changed");
+		if (connected) firstRuntimeStart?.armFallback();
 		ipcServer?.broadcastEvent("cloud.status", { connected });
 	});
 	const openclawCliLock = new SerialOpenClawCliLock();
@@ -9874,6 +10268,28 @@ async function startDaemon() {
 			cloudClient
 		});
 	});
+	if (config.autoStartRuntime && config.runtime) {
+		let installedIntegrationCount;
+		try {
+			installedIntegrationCount = integrationManager.list().length;
+		} catch (err) {
+			logger.warn({ err: err instanceof Error ? err.message : String(err) }, "Could not read local integration state — starting runtime immediately");
+			installedIntegrationCount = null;
+		}
+		if (shouldDeferFirstRuntimeStart({
+			managed,
+			installedIntegrationCount
+		})) {
+			logger.info("Fresh managed box — deferring first runtime start until the first reconcile settles");
+			const deferral = new DeferredRuntimeStart();
+			firstRuntimeStart = deferral;
+			runtimeGate.deferFirstStart();
+			cloudClient.setOnReconciliationSettled(() => {
+				deferral.release("reconcile-settled");
+			});
+		}
+	}
+	if (config.autoStartRuntime && config.runtime === "openclaw") recoverInterruptedOpenClawUpgrade(runtimeGate, openclawCliLock);
 	cloudClient.start();
 	logger.debug("Cloud client started");
 	if (!config.autoStartRuntime && config.runtime) logger.warn({ runtime: config.runtime }, "Runtime configured but auto_start_runtime=false — runtime will not be spawned; in-runtime plugins (chat/console/sync) will be offline until you start it manually");
@@ -9892,8 +10308,15 @@ async function startDaemon() {
 				env: config.runtime === "claude-code" && config.defaultModel ? { ALFE_DEFAULT_MODEL: config.defaultModel } : {}
 			});
 			runtimeProcess.setTurnActivityProbe(turnActivityProbe);
-			runtimeProcess.start();
-			logger.debug("Runtime process started");
+			if (firstRuntimeStart) {
+				firstRuntimeStart.attach(() => {
+					runtimeGate.requestStart();
+				});
+				logger.debug("Runtime process created — first start deferred");
+			} else {
+				runtimeGate.requestStart();
+				logger.debug("Runtime process started");
+			}
 			if (config.runtime === "openclaw") {
 				stopPairingApprovalPoller = startPairingApprovalPoller({
 					log: logger,
@@ -9913,9 +10336,10 @@ async function startDaemon() {
 			stopPairingApprovalPoller();
 			stopPairingApprovalPoller = null;
 		}
+		firstRuntimeStart?.cancel();
 		if (runtimeProcess) {
 			logger.debug("Stopping runtime process...");
-			await runtimeProcess.stop();
+			await runtimeProcess.shutdown();
 			logger.debug("Runtime process stopped");
 		}
 		if (hermesMcpSync) {
@@ -10091,7 +10515,15 @@ async function executeCloudCommand(command) {
 		};
 		const payload = command.payload;
 		const runtime = config.runtime;
-		const version = payload?.version ?? (runtime === "openclaw" ? "2026.9.5" : runtime === "claude-code" ? "0.1.6" : void 0);
+		let version;
+		if (runtime === "openclaw") {
+			const target = resolveOpenClawUpgradeTarget(payload?.version);
+			if (target.clamped) logger.warn({
+				requestedVersion: payload?.version,
+				pinnedVersion: target.version
+			}, "runtime.update requested an OpenClaw version above the pin — upgrading to the pin instead");
+			version = target.version;
+		} else version = payload?.version ?? (runtime === "claude-code" ? "0.1.6" : void 0);
 		upgradingRuntime = true;
 		setTimeout(() => {
 			(async () => {
@@ -10100,7 +10532,8 @@ async function executeCloudCommand(command) {
 					const result = await upgradeRuntime(runtime, version, runtimeProcess, {
 						...runtime === "openclaw" && openclawCliLockRef ? { cliLock: openclawCliLockRef } : {},
 						...runtime === "openclaw" && isManagedMode() && process.env.ALFE_PRIVATE_DATA_PLANE !== "true" ? { nodeRemediation: {} } : {},
-						...runtime === "openclaw" && runtimeGateRef ? { gate: runtimeGateRef } : {}
+						...runtime === "openclaw" && runtimeGateRef ? { gate: runtimeGateRef } : {},
+						...runtime === "openclaw" ? openClawUpgradeExtras() : {}
 					});
 					if (result.success || result.runtimeChanged) {
 						resolvedRuntimeVersion = await getRuntimeVersion(runtime);