@alfe.ai/gateway 0.2.0 → 0.2.2

package/README.md

@@ -161,3 +161,8 @@ See `src/protocol.ts` for full type definitions.
 
 - Dashboard integration management (backend wired, UI in progress)
 - Voice migration to integration model (`packages/openclaw-voice/` exists, not yet full integration)
+
+## Links
+
+- 🌐 Website: <https://alfe.ai>
+- 📚 Docs: <https://docs.alfe.ai>

package/dist/health.js

@@ -495,6 +495,15 @@ var AuthService = class {
 	getSubscriptionStatus() {
 		return this.client.request(`${this.prefix}/subscription`);
 	}
+	/**
+	* Mint a short-lived, single-use Clerk sign-in token for the calling user so
+	* a native client can hand its logged-in session to the web dashboard
+	* (`${dashboard}/handoff?__clerk_ticket=<token>`). Server mints only for the
+	* authenticated user — never a caller-supplied id.
+	*/
+	createHandoffToken() {
+		return this.client.request(`${this.prefix}/handoff-token`, { method: "POST" });
+	}
 	applyForStartup(input) {
 		return this.client.request(`${this.prefix}/subscription/apply-startup`, {
 			method: "POST",
@@ -566,10 +575,8 @@ var AuthService = class {
 //#region ../../packages-internal/api-client/dist/services/integrations.js
 var IntegrationsService = class {
 	client;
-	voiceClient;
-	constructor(client, voiceClient) {
+	constructor(client) {
 		this.client = client;
-		this.voiceClient = voiceClient;
 	}
 	listScopedInstalls(scope, scopeId) {
 		const params = new URLSearchParams({
@@ -618,8 +625,11 @@ var IntegrationsService = class {
 		});
 	}
 	listIntegrations(agentId, options) {
-		const qs = options?.includeInherited ? "?includeInherited=true" : "";
-		return this.client.request(`/integrations/agents/${agentId}${qs}`);
+		const params = new URLSearchParams();
+		if (options?.includeInherited) params.set("includeInherited", "true");
+		if (options?.effective) params.set("effective", "true");
+		const qs = params.toString();
+		return this.client.request(`/integrations/agents/${agentId}${qs ? `?${qs}` : ""}`);
 	}
 	installIntegration(agentId, data) {
 		return this.client.request(`/integrations/agents/${agentId}`, {
@@ -651,10 +661,6 @@ var IntegrationsService = class {
 			body: JSON.stringify({ agentId })
 		});
 	}
-	listVoices() {
-		if (this.voiceClient) return this.voiceClient.request("/api/voices");
-		return this.client.request("/integrations/voices");
-	}
 	getDiscordGuildChannels(guildId) {
 		return this.client.request(`/discord/guilds/${encodeURIComponent(guildId)}/channels`);
 	}
@@ -4483,6 +4489,15 @@ enumValues({
 	NanoClaw: "nanoclaw",
 	Hermes: "hermes"
 });
+const TTS_MODELS = enumValues({
+	ElevenLabsTurbo: "elevenlabs-turbo",
+	ElevenLabsStandard: "elevenlabs-standard"
+});
+object({
+	voiceId: string().regex(/^[A-Za-z0-9]{8,64}$/).optional(),
+	ttsModel: _enum(TTS_MODELS).optional(),
+	enabled: boolean().optional()
+});
 enumValues({
 	Org: "org",
 	Team: "team",
@@ -4769,10 +4784,12 @@ const NotificationType = {
 	SubscriptionCancelled: "subscription.cancelled",
 	SubscriptionPastDue: "subscription.past_due",
 	BalanceThresholdWarning: "balance.threshold.warning",
+	PlatformTierPriceIncrease: "platform.tier_price_increase",
 	AgentCreated: "agent.created",
 	AgentProvisionFailed: "agent.provision.failed",
 	AgentBillingSuspended: "agent.billing.suspended",
 	AgentDisconnectedExtended: "agent.disconnected.extended",
+	BrowserTakeoverRequested: "browser_takeover_requested",
 	InviteCreated: "onboarding.invite.created",
 	OrgClaimed: "onboarding.org.claimed",
 	TeamMemberAdded: "team.member.added",
@@ -4789,7 +4806,7 @@ const RecipientStrategy = {
 	TenantAdmins: "tenant_admins",
 	SpecificUser: "specific_user"
 };
-NotificationType.PaymentSucceeded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.PaymentFailed, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.TopUpCompleted, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AutoRechargeCompleted, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.AutoRechargeFailed, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.SubscriptionCreated, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.SubscriptionCancelled, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.SubscriptionPastDue, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.BalanceThresholdWarning, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentCreated, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentProvisionFailed, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentBillingSuspended, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentDisconnectedExtended, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Push, NotificationType.InviteCreated, NotificationCategory.System, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationType.OrgClaimed, NotificationCategory.System, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.TeamMemberAdded, NotificationCategory.Team, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationChannel.Push, NotificationType.ProjectMemberAdded, NotificationCategory.Team, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationChannel.Push, NotificationType.IntegrationInstalled, NotificationCategory.Integrations, RecipientStrategy.TenantAdmins, NotificationChannel.Push, NotificationType.IntegrationRemoved, NotificationCategory.Integrations, RecipientStrategy.TenantAdmins, NotificationChannel.Push;
+NotificationType.PaymentSucceeded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.PaymentFailed, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.TopUpCompleted, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AutoRechargeCompleted, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.AutoRechargeFailed, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.SubscriptionCreated, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.SubscriptionCancelled, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.SubscriptionPastDue, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.BalanceThresholdWarning, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.PlatformTierPriceIncrease, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.AgentCreated, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentProvisionFailed, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentBillingSuspended, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentDisconnectedExtended, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Push, NotificationType.BrowserTakeoverRequested, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.InviteCreated, NotificationCategory.System, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationType.OrgClaimed, NotificationCategory.System, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.TeamMemberAdded, NotificationCategory.Team, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationChannel.Push, NotificationType.ProjectMemberAdded, NotificationCategory.Team, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationChannel.Push, NotificationType.IntegrationInstalled, NotificationCategory.Integrations, RecipientStrategy.TenantAdmins, NotificationChannel.Push, NotificationType.IntegrationRemoved, NotificationCategory.Integrations, RecipientStrategy.TenantAdmins, NotificationChannel.Push;
 //#endregion
 //#region src/config.ts
 /**
@@ -5047,6 +5064,7 @@ async function fetchAgentConfig(apiKey, apiEndpoint) {
 		const wsResult = await wsResponse.json();
 		const templateKey = wsResult.data?.templateKey;
 		const defaultModel = wsResult.data?.defaultModel ?? void 0;
+		const installedFrom = wsResult.data?.installedFrom;
 		if (!templateKey) {
 			logger$1.debug("No templateKey in workspace response");
 			return defaultModel ? {
@@ -5054,8 +5072,14 @@ async function fetchAgentConfig(apiKey, apiEndpoint) {
 				files: {}
 			} : null;
 		}
-		logger$1.debug({ templateKey }, "Fetching template files...");
-		const filesResponse = await fetch(`${apiEndpoint}/templates/${encodeURIComponent(templateKey)}/files`, {
+		const pinnedVersion = installedFrom?.templateKey === templateKey ? installedFrom.version : void 0;
+		const filesUrl = new URL(`${apiEndpoint}/templates/${encodeURIComponent(templateKey)}/files`);
+		if (pinnedVersion !== void 0) filesUrl.searchParams.set("version", String(pinnedVersion));
+		logger$1.debug({
+			templateKey,
+			version: pinnedVersion
+		}, "Fetching template files...");
+		const filesResponse = await fetch(filesUrl.toString(), {
 			method: "GET",
 			headers: { "Authorization": `Bearer ${apiKey}` }
 		});
@@ -5067,16 +5091,18 @@ async function fetchAgentConfig(apiKey, apiEndpoint) {
 				files: {}
 			};
 		}
-		const filesResult = await filesResponse.json();
-		const fileCount = Object.keys(filesResult.data?.files ?? {}).length;
+		const files = (await filesResponse.json()).data?.files ?? {};
+		const fileCount = Object.keys(files).length;
 		logger$1.debug({
 			templateKey,
+			version: pinnedVersion,
 			fileCount
 		}, "Template files fetched");
 		return {
 			templateKey,
 			defaultModel,
-			files: filesResult.data?.files ?? {}
+			files,
+			personaFiles: Object.keys(files)
 		};
 	} catch (err) {
 		logger$1.debug({ err: err instanceof Error ? err.message : String(err) }, "fetchAgentConfig failed");
@@ -5231,6 +5257,79 @@ function isIPCResponse(msg) {
 /** Current IPC protocol version */
 const PROTOCOL_VERSION = 1;
 //#endregion
+//#region src/runtime-gate.ts
+const log$3 = logger$1.child({ component: "RuntimeGate" });
+var RuntimeGate = class {
+	depth = 0;
+	wasRunning = false;
+	constructor(getRuntime) {
+		this.getRuntime = getRuntime;
+	}
+	/**
+	* Suspend the runtime child. Only the outermost call (depth 0 → 1) actually
+	* stops it; nested calls just bump the refcount. Remembers whether the child
+	* was running so `resume()` doesn't spuriously start a runtime that was never
+	* up (e.g. autoStartRuntime=false).
+	*/
+	async suspend() {
+		if (this.depth++ > 0) return;
+		const rp = this.getRuntime();
+		this.wasRunning = rp?.isRunning ?? false;
+		if (rp && this.wasRunning) {
+			log$3.info("Suspending runtime for mutating reconcile (avoid concurrent SQLite writers)");
+			await rp.stop();
+		}
+	}
+	/**
+	* Resume the runtime child. Only the outermost call (depth 1 → 0) actually
+	* restarts it, and only if it was running when we suspended. This subsumes
+	* the old post-reconcile "restart if plugins changed" step — bringing the
+	* runtime back is exactly what a restart-after-reconcile did.
+	*/
+	resume() {
+		if (--this.depth > 0) return Promise.resolve();
+		if (this.depth < 0) this.depth = 0;
+		const rp = this.getRuntime();
+		if (rp && this.wasRunning) {
+			log$3.info("Resuming runtime after mutating reconcile");
+			rp.resume();
+		}
+		this.wasRunning = false;
+		return Promise.resolve();
+	}
+	/**
+	* Out-of-band restart request (e.g. `alfe.config_set`, Hermes MCP sync).
+	* Deferred while a suspend is active — the pending `resume()` will bring the
+	* runtime back with fresh config, so restarting mid-suspend would just fight
+	* the gate (and risk spawning the runtime while a CLI mutation is still
+	* writing the DB).
+	*/
+	requestRestart() {
+		if (this.depth > 0) {
+			log$3.info("Runtime restart requested while suspended — deferring to pending resume");
+			return;
+		}
+		const rp = this.getRuntime();
+		if (rp) rp.restart().catch((err) => {
+			log$3.error({ err: err instanceof Error ? err.message : String(err) }, "Failed to restart runtime");
+		});
+	}
+};
+/**
+* A gate that never touches the runtime — for runtimes that don't share the
+* single-writer SQLite hazard, or for tests. `suspend`/`resume` are no-ops and
+* `requestRestart` does nothing.
+*/
+var NoopRuntimeGate = class {
+	suspend() {
+		return Promise.resolve();
+	}
+	resume() {
+		return Promise.resolve();
+	}
+	requestRestart() {}
+};
+//#endregion
 //#region src/reconciliation.ts
 const log$2 = logger$1.child({ component: "Reconciliation" });
 /**
@@ -5245,13 +5344,50 @@ const MAX_ERROR_ACTIVATE_ATTEMPTS = 3;
 var ReconciliationEngine = class {
 	/** Consecutive re-activation attempts for an intact error-state integration, keyed by id. */
 	activateAttempts = /* @__PURE__ */ new Map();
-	constructor(manager) {
+	/**
+	* Whether this reconcile pass has already suspended the runtime. Reset at the
+	* start of every {@link reconcile} call. The runtime is suspended lazily on
+	* the first mutating branch (install / reinstall / activate / removal-of-
+	* existing) so an all-`up_to_date` pass never touches the runtime.
+	*/
+	suspended = false;
+	/**
+	* @param manager The integration manager to converge.
+	* @param gate    Runtime gate used to suspend the runtime child around
+	*                mutating branches so `openclaw` CLI subprocesses don't write
+	*                `~/.openclaw/state/openclaw.sqlite` concurrently with a live
+	*                `openclaw gateway run` (see runtime-gate.ts). Defaults to a
+	*                no-op gate for runtimes/tests that don't need protection.
+	*/
+	constructor(manager, gate = new NoopRuntimeGate()) {
 		this.manager = manager;
+		this.gate = gate;
+	}
+	/**
+	* Suspend the runtime on the first mutating branch of a reconcile pass.
+	* Idempotent within a pass — subsequent mutating branches are covered by the
+	* single suspend held until the `finally` in {@link reconcile}.
+	*/
+	async ensureSuspended() {
+		if (!this.suspended) {
+			this.suspended = true;
+			await this.gate.suspend();
+		}
+	}
+	/**
+	* Resume the runtime if this pass suspended it. Called from `reconcile()`'s
+	* `finally`. Kept as a method (rather than an inline `if (this.suspended)`)
+	* so the mutation performed by {@link ensureSuspended} in a different method
+	* isn't narrowed away by control-flow analysis at the callsite.
+	*/
+	async resumeIfSuspended() {
+		if (this.suspended) await this.gate.resume();
 	}
 	/**
 	* Reconcile local state against desired state from cloud.
 	*/
 	async reconcile(desiredIntegrations) {
+		this.suspended = false;
 		const report = {
 			results: [],
 			installed: [],
@@ -5270,15 +5406,20 @@ var ReconciliationEngine = class {
 		}
 		const localMap = new Map(localIntegrations.map((i) => [i.id, i]));
 		const desiredMap = new Map(desiredIntegrations.map((d) => [d.integrationId, d]));
-		for (const desired of desiredIntegrations) if (desired.desiredStatus === "active") await this.reconcileActive(desired, localMap.get(desired.integrationId), report);
-		else await this.reconcileRemoved(desired.integrationId, localMap.get(desired.integrationId), report);
-		for (const local of localIntegrations) if (!desiredMap.has(local.id)) await this.reconcileRemoved(local.id, local, report);
+		try {
+			for (const desired of desiredIntegrations) if (desired.desiredStatus === "active") await this.reconcileActive(desired, localMap.get(desired.integrationId), report);
+			else await this.reconcileRemoved(desired.integrationId, localMap.get(desired.integrationId), report);
+			for (const local of localIntegrations) if (!desiredMap.has(local.id)) await this.reconcileRemoved(local.id, local, report);
+		} finally {
+			await this.resumeIfSuspended();
+		}
 		return report;
 	}
 	async reconcileActive(desired, local, report) {
 		const id = desired.integrationId;
 		try {
 			if (!local) {
+				await this.ensureSuspended();
 				log$2.info(`Installing ${id}@${desired.version}`);
 				await this.manager.install(id, desired.version, desired.config, desired.customSource);
 				report.installed.push(id);
@@ -5293,6 +5434,7 @@ var ReconciliationEngine = class {
 				return;
 			}
 			if (local.version !== desired.version && desired.version !== "" && local.version !== "unknown") {
+				await this.ensureSuspended();
 				log$2.info(`Upgrading ${id}: ${local.version} → ${desired.version}`);
 				if ((await this.manager.reinstall(id, desired.version, desired.config, desired.customSource)).configApplied) report.configApplied = true;
 				report.installed.push(id);
@@ -5306,6 +5448,7 @@ var ReconciliationEngine = class {
 			}
 			if (local.status === "error") {
 				if (desired.reinstallRequestedAt && local.installedAt && desired.reinstallRequestedAt > local.installedAt) {
+					await this.ensureSuspended();
 					log$2.info(`Reinstalling ${id} from error state (requested: ${desired.reinstallRequestedAt}, installed: ${local.installedAt})`);
 					this.manager.resetReinstallAttempts(id);
 					this.activateAttempts.delete(id);
@@ -5335,6 +5478,7 @@ var ReconciliationEngine = class {
 						});
 						return;
 					}
+					await this.ensureSuspended();
 					log$2.info(`Auto-reinstalling ${id} — install directory is corrupted or missing (attempt ${String(attempts + 1)}/3)`);
 					this.manager.incrementReinstallAttempts(id);
 					try {
@@ -5367,6 +5511,7 @@ var ReconciliationEngine = class {
 				const activateAttempts = this.activateAttempts.get(id) ?? 0;
 				if (activateAttempts < MAX_ERROR_ACTIVATE_ATTEMPTS) {
 					this.activateAttempts.set(id, activateAttempts + 1);
+					await this.ensureSuspended();
 					log$2.info(`Re-activating ${id} from error state (attempt ${String(activateAttempts + 1)}/${String(MAX_ERROR_ACTIVATE_ATTEMPTS)})`);
 					try {
 						if ((await this.manager.activate(id)).configApplied) report.configApplied = true;
@@ -5408,6 +5553,7 @@ var ReconciliationEngine = class {
 				return;
 			}
 			if (local.status !== "active") {
+				await this.ensureSuspended();
 				log$2.info(`Activating ${id}`);
 				if ((await this.manager.activate(id)).configApplied) report.configApplied = true;
 				report.activated.push(id);
@@ -5419,6 +5565,7 @@ var ReconciliationEngine = class {
 				return;
 			}
 			if (desired.reinstallRequestedAt && local.installedAt && desired.reinstallRequestedAt > local.installedAt) {
+				await this.ensureSuspended();
 				log$2.info(`Reinstall requested for ${id} (requested: ${desired.reinstallRequestedAt}, installed: ${local.installedAt})`);
 				this.manager.resetReinstallAttempts(id);
 				this.activateAttempts.delete(id);
@@ -5463,6 +5610,7 @@ var ReconciliationEngine = class {
 			return;
 		}
 		try {
+			await this.ensureSuspended();
 			log$2.info(`Removing ${id}`);
 			if (local.status === "active") {
 				await this.manager.deactivate(id);
@@ -5550,8 +5698,16 @@ var CloudClient = class {
 	setOnReconciliationComplete(handler) {
 		this.onReconciliationComplete = handler;
 	}
-	setIntegrationManager(manager) {
-		this.reconciliationEngine = new ReconciliationEngine(manager);
+	/**
+	* Set the integration manager (and optionally the runtime gate) for
+	* reconciliation. When set, the cloud client handles DESIRED_STATE messages
+	* automatically. The gate is passed to the ReconciliationEngine so mutating
+	* reconcile branches suspend the runtime child around runtime-CLI mutations
+	* (avoids concurrent SQLite writers — see runtime-gate.ts). Resuming the
+	* runtime after a mutating pass subsumes the old post-reconcile restart.
+	*/
+	setIntegrationManager(manager, gate) {
+		this.reconciliationEngine = new ReconciliationEngine(manager, gate);
 	}
 	/**
 	* Start the cloud connection with auto-reconnect.
@@ -5787,7 +5943,6 @@ var CloudClient = class {
 		}, "Cloud: reconciliation complete");
 		const reportMsg = createReconciliationReport(report.results);
 		this.send(reportMsg);
-		if ((report.installed.length > 0 || report.uninstalled.length > 0 || report.configApplied) && this.onRuntimeRestartNeeded) this.onRuntimeRestartNeeded();
 		this.onReconciliationComplete?.();
 	}
 	send(msg) {
@@ -21746,6 +21901,17 @@ var RuntimeProcess = class {
 		});
 	}
 	/**
+	* Resume after a suspend (stop). `start()` alone is a no-op while stopped
+	* because `stop()` latches `this.stopped = true`; resume clears that latch,
+	* resets the crash backoff, and re-spawns. Used by the RuntimeGate to bring
+	* the runtime back after a mutating reconcile branch has finished.
+	*/
+	resume() {
+		this.stopped = false;
+		this.backoffMs = BACKOFF_INITIAL_MS;
+		this.start();
+	}
+	/**
 	* Restart the runtime process (stop then start with fresh backoff).
 	*/
 	async restart() {
@@ -22593,14 +22759,11 @@ async function startDaemon() {
 		}
 	});
 	const integrationAdapter = new IntegrationManagerAdapter(integrationManager);
-	cloudClient.setIntegrationManager(integrationAdapter);
+	const runtimeGate = new RuntimeGate(() => runtimeProcess);
+	cloudClient.setIntegrationManager(integrationAdapter, runtimeGate);
 	const requestRuntimeRestart = () => {
-		if (runtimeProcess) {
-			logger$1.info("Runtime state changed — restarting runtime");
-			runtimeProcess.restart().catch((err) => {
-				logger$1.error({ err: err instanceof Error ? err.message : String(err) }, "Failed to restart runtime");
-			});
-		}
+		logger$1.info("Runtime state changed — requesting runtime restart");
+		runtimeGate.requestRestart();
 	};
 	cloudClient.setRuntimeRestartNeededHandler(requestRuntimeRestart);
 	if (config.runtime === "hermes") {

package/dist/src/index.d.ts

@@ -60,6 +60,18 @@ interface AgentWorkspaceConfig {
   templateKey?: string;
   defaultModel?: string;
   files: Record<string, string>;
+  /**
+   * Filenames within `files` that are agent-owned persona files (SOUL.md,
+   * IDENTITY.md, AGENTS.md, USER.md, BOOTSTRAP.md, …). The consumer
+   * (`writeWorkspaceFiles`) seeds these ONLY IF ABSENT so an agent's own edits
+   * — restored by the openclaw-sync backup on a fresh VM — are never clobbered
+   * by a setup-time re-seed. Filenames NOT in this set keep overwrite-on-write
+   * semantics. The templates `/files` endpoint returns persona files
+   * exclusively today, so `fetchAgentConfig` populates this with every key; the
+   * field is threaded explicitly rather than assumed so a future workspace-file
+   * source can mix persona (seed-if-missing) and non-persona (overwrite) files.
+   */
+  personaFiles?: string[];
 }
 declare const ALFE_DIR: string;
 declare const SOCKET_PATH: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alfe.ai/gateway",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "Alfe local gateway daemon — persistent control plane for agent integrations",
   "type": "module",
   "bin": {
@@ -22,14 +22,22 @@
     "pino-roll": "^1.2.0",
     "smol-toml": ">=1.6.1",
     "ws": "^8.18.0",
-    "@alfe.ai/agent-api-client": "^0.3.0",
-    "@alfe.ai/ai-proxy-local": "^0.0.11",
-    "@alfe.ai/config": "^0.1.0",
-    "@alfe.ai/integration-manifest": "^0.3.0",
-    "@alfe.ai/integrations": "^0.2.0",
-    "@alfe.ai/mcp-bundler": "^0.2.1"
+    "@alfe.ai/agent-api-client": "^0.4.0",
+    "@alfe.ai/ai-proxy-local": "^0.0.12",
+    "@alfe.ai/config": "^0.2.0",
+    "@alfe.ai/integration-manifest": "^0.3.1",
+    "@alfe.ai/integrations": "^0.2.5",
+    "@alfe.ai/mcp-bundler": "^0.2.2"
   },
   "license": "UNLICENSED",
+  "homepage": "https://alfe.ai",
+  "author": "Alfe (https://alfe.ai)",
+  "keywords": [
+    "alfe",
+    "ai-agents",
+    "agent",
+    "llm"
+  ],
   "scripts": {
     "build": "tsdown",
     "dev": "tsdown --watch",