@alfe.ai/gateway 0.9.0 → 0.9.1

package/dist/health.js

@@ -94,7 +94,7 @@ const PINNED_OPENCLAW_VERSION = "2026.6.11";
 * `PINNED_OPENCLAW_VERSION` — there is no `services/compute/Dockerfile` mirror to
 * keep in sync.
 */
-const PINNED_CLAUDE_CODE_HOST_VERSION = "0.1.2";
+const PINNED_CLAUDE_CODE_HOST_VERSION = "0.1.3";
 //#endregion
 //#region ../../packages-internal/ids/dist/prefixes.js
 const ID_PREFIXES = {
@@ -414,399 +414,6 @@ var AlfeApiClient = class {
 	}
 };
 //#endregion
-//#region ../../packages-internal/api-client/dist/services/auth.js
-var AuthService = class {
-	client;
-	constructor(client) {
-		this.client = client;
-	}
-	prefix = "/auth";
-	validate(token) {
-		return this.client.request(`${this.prefix}/validate`, {
-			method: "POST",
-			body: JSON.stringify({ token })
-		});
-	}
-	listTokens() {
-		return this.client.request(`${this.prefix}/tokens`);
-	}
-	createToken(data) {
-		return this.client.request(`${this.prefix}/tokens`, {
-			method: "POST",
-			body: JSON.stringify(data)
-		});
-	}
-	deleteToken(tokenId) {
-		return this.client.request(`${this.prefix}/tokens/${tokenId}`, { method: "DELETE" });
-	}
-	/**
-	* Start a device-code flow. Called by the CLI when the user runs
-	* `alfe login` and picks the browser path. The returned `device_code`
-	* is the CLI's bearer secret for polling /auth/device-token; the
-	* `user_code` is what the user types/sees on the dashboard.
-	*
-	* Uses `publicRequest` because the CLI has no token yet — the standard
-	* `request` path would short-circuit with a synthetic 401.
-	*/
-	startDeviceCode(input) {
-		return this.client.publicRequest(`${this.prefix}/device-code`, {
-			method: "POST",
-			body: JSON.stringify(input)
-		});
-	}
-	/**
-	* Poll for the minted API key. Public endpoint. Returns:
-	*   200 → { api_key, tenantId, tokenExpiresAt } (success — write to config)
-	*   428 → still pending (caller should sleep `interval` and retry)
-	*   429 → polling too fast; caller should back off
-	*   410 → device-code expired; user must run `alfe login` again
-	*   400 → already redeemed (security: do not retry)
-	*
-	* Surface the HTTP-status code via the standard ApiResult error shape
-	* so callers can branch.
-	*/
-	pollDeviceToken(deviceCode) {
-		return this.client.publicRequest(`${this.prefix}/device-token`, {
-			method: "POST",
-			body: JSON.stringify({ device_code: deviceCode })
-		});
-	}
-	/** Dashboard-side. Fetch the device fingerprint for an approval card. */
-	lookupDeviceCode(userCode) {
-		return this.client.request(`${this.prefix}/device-code/lookup`, {
-			method: "POST",
-			body: JSON.stringify({ user_code: userCode })
-		});
-	}
-	/** Dashboard-side. Approve the pending device-code; CLI's next poll gets the key. */
-	approveDeviceCode(input) {
-		return this.client.request(`${this.prefix}/device-code/approve`, {
-			method: "POST",
-			body: JSON.stringify({
-				user_code: input.userCode,
-				expiresIn: input.expiresIn
-			})
-		});
-	}
-	getOnboardingStatus() {
-		return this.client.request(`${this.prefix}/onboarding/status`);
-	}
-	completeOnboarding(input) {
-		return this.client.request(`${this.prefix}/onboarding/complete`, {
-			method: "POST",
-			body: JSON.stringify(input)
-		});
-	}
-	getAccessStatus() {
-		return this.client.request(`${this.prefix}/access/status`);
-	}
-	redeemAccessCode(code) {
-		return this.client.request(`${this.prefix}/access/redeem`, {
-			method: "POST",
-			body: JSON.stringify({ code })
-		});
-	}
-	/**
-	* Fetch the caller's current permission list as enforced by the gateway.
-	* UI permission providers should call this on mount and refetch on
-	* Clerk org switch to stay in sync with sub-tenant permission changes.
-	*/
-	getMyPermissions() {
-		return this.client.request(`${this.prefix}/me/permissions`);
-	}
-	/**
-	* Preview what deleting the caller's own account will do. Drives the Danger
-	* Zone copy so the user sees an honest, kind-appropriate warning before the
-	* irreversible action (a last-admin cascade wipes the whole workspace).
-	*/
-	getDeletionPreview() {
-		return this.client.request(`${this.prefix}/me/deletion-preview`);
-	}
-	/**
-	* Permanently delete the caller's own account. Returns `{ status: "deleting" }`
-	* and tears the account down asynchronously — the Clerk user is deleted shortly
-	* after, so the caller's session dies. On success, sign out and route the user
-	* to a terminal "account is being deleted" state; do NOT retry.
-	*
-	* Pass `confirmKind` (the accountKind the user actually confirmed, from the
-	* deletion preview): if membership changed between preview and execute, the
-	* server answers 409 `account_kind_changed` instead of cascading a scope the
-	* user never agreed to.
-	*/
-	deleteAccount(confirmKind) {
-		return this.client.request(`${this.prefix}/me`, {
-			method: "DELETE",
-			...confirmKind ? { body: JSON.stringify({ confirmKind }) } : {}
-		});
-	}
-	getSubscriptionStatus() {
-		return this.client.request(`${this.prefix}/subscription`);
-	}
-	/**
-	* Mint a short-lived, single-use Clerk sign-in token for the calling user so
-	* a native client can hand its logged-in session to the web dashboard
-	* (`${dashboard}/handoff?__clerk_ticket=<token>`). Server mints only for the
-	* authenticated user — never a caller-supplied id.
-	*/
-	createHandoffToken() {
-		return this.client.request(`${this.prefix}/handoff-token`, { method: "POST" });
-	}
-	applyForStartup(input) {
-		return this.client.request(`${this.prefix}/subscription/apply-startup`, {
-			method: "POST",
-			body: JSON.stringify(input)
-		});
-	}
-	/**
-	* Accept an approved Startup Program invite. Call after the applicant has a
-	* card on file (confirmed or freshly added) — this mints the Professional
-	* grant subscription. Idempotent: a repeat call on an already-accepted
-	* application returns `{ status: "accepted" }` without re-charging.
-	*/
-	acceptStartup() {
-		return this.client.request(`${this.prefix}/subscription/accept-startup`, { method: "POST" });
-	}
-	createCheckoutSession(input) {
-		return this.client.request(`${this.prefix}/subscription/checkout`, {
-			method: "POST",
-			body: JSON.stringify(input)
-		});
-	}
-	/**
-	* Change a personal (individual-tier) subscriber's platform plan in place on
-	* their existing Stripe subscription — no second Checkout, no duplicate sub,
-	* no double charge. Upgrades prorate immediately; downgrades apply with no
-	* immediate charge/refund. Returns the updated subscription.
-	*/
-	changePlatformPlan(input) {
-		return this.client.request(`${this.prefix}/subscription/change`, {
-			method: "POST",
-			body: JSON.stringify(input)
-		});
-	}
-	/**
-	* Preview the proration cost for changing a personal (individual-tier)
-	* subscriber's platform plan — read-only companion to `changePlatformPlan`.
-	* Nothing is charged.
-	*/
-	previewPlatformPlanChange(input) {
-		return this.client.request(`${this.prefix}/subscription/change/preview`, {
-			method: "POST",
-			body: JSON.stringify(input)
-		});
-	}
-	updateSeats(seats) {
-		return this.client.request(`${this.prefix}/subscription/seats`, {
-			method: "POST",
-			body: JSON.stringify({ seats })
-		});
-	}
-	previewSeatChange(seats) {
-		return this.client.request(`${this.prefix}/subscription/seats/preview`, {
-			method: "POST",
-			body: JSON.stringify({ seats })
-		});
-	}
-	listOrgMembers() {
-		return this.client.request(`${this.prefix}/org/members`);
-	}
-	patchOrgMember(userId, body) {
-		return this.client.request(`${this.prefix}/org/members/${encodeURIComponent(userId)}`, {
-			method: "PATCH",
-			body: JSON.stringify(body)
-		});
-	}
-	removeOrgMember(userId) {
-		return this.client.request(`${this.prefix}/org/members/${encodeURIComponent(userId)}`, { method: "DELETE" });
-	}
-	listOrgInvitations() {
-		return this.client.request(`${this.prefix}/org/invitations`);
-	}
-	createOrgInvitation(input) {
-		return this.client.request(`${this.prefix}/org/invitations`, {
-			method: "POST",
-			body: JSON.stringify(input)
-		});
-	}
-	revokeOrgInvitation(invitationId) {
-		return this.client.request(`${this.prefix}/org/invitations/${encodeURIComponent(invitationId)}`, { method: "DELETE" });
-	}
-	listOrgDomains() {
-		return this.client.request(`${this.prefix}/org/domains`);
-	}
-	createOrgDomain(input) {
-		return this.client.request(`${this.prefix}/org/domains`, {
-			method: "POST",
-			body: JSON.stringify(input)
-		});
-	}
-	deleteOrgDomain(domainId) {
-		return this.client.request(`${this.prefix}/org/domains/${encodeURIComponent(domainId)}`, { method: "DELETE" });
-	}
-	updateOrgSettings(input) {
-		return this.client.request(`${this.prefix}/org/settings`, {
-			method: "PATCH",
-			body: JSON.stringify(input)
-		});
-	}
-};
-//#endregion
-//#region ../../packages-internal/api-client/dist/services/integrations.js
-var IntegrationsService = class {
-	client;
-	constructor(client) {
-		this.client = client;
-	}
-	listScopedInstalls(scope, scopeId) {
-		const params = new URLSearchParams({
-			scope,
-			scopeId
-		});
-		return this.client.request(`/integrations/scoped?${params}`);
-	}
-	installScoped(data) {
-		return this.client.request("/integrations/scoped", {
-			method: "POST",
-			body: JSON.stringify(data)
-		});
-	}
-	getScopedInstall(integrationId, scope, scopeId) {
-		const params = new URLSearchParams({
-			scope,
-			scopeId
-		});
-		return this.client.request(`/integrations/scoped/${encodeURIComponent(integrationId)}?${params}`);
-	}
-	updateScopedInstall(integrationId, data) {
-		return this.client.request(`/integrations/scoped/${encodeURIComponent(integrationId)}`, {
-			method: "PATCH",
-			body: JSON.stringify(data)
-		});
-	}
-	removeScopedInstall(integrationId, scope, scopeId) {
-		const params = new URLSearchParams({
-			scope,
-			scopeId
-		});
-		return this.client.request(`/integrations/scoped/${encodeURIComponent(integrationId)}?${params}`, { method: "DELETE" });
-	}
-	/**
-	* Reinstall (re-apply latest) a scope-level install. Agent scope is rejected
-	* by the route — use {@link reinstallIntegration} for agent-scoped reinstall.
-	*/
-	reinstallScoped(integrationId, scope, scopeId) {
-		return this.client.request(`/integrations/scoped/${encodeURIComponent(integrationId)}/reinstall`, {
-			method: "POST",
-			body: JSON.stringify({
-				scope,
-				scopeId
-			})
-		});
-	}
-	listIntegrations(agentId, options) {
-		const params = new URLSearchParams();
-		if (options?.includeInherited) params.set("includeInherited", "true");
-		if (options?.effective) params.set("effective", "true");
-		const qs = params.toString();
-		return this.client.request(`/integrations/agents/${agentId}${qs ? `?${qs}` : ""}`);
-	}
-	installIntegration(agentId, data) {
-		return this.client.request(`/integrations/agents/${agentId}`, {
-			method: "POST",
-			body: JSON.stringify(data)
-		});
-	}
-	getIntegrationConfig(agentId, integrationId) {
-		return this.client.request(`/integrations/agents/${agentId}/${integrationId}/config`);
-	}
-	updateIntegration(agentId, integrationId, data) {
-		return this.client.request(`/integrations/agents/${agentId}/${integrationId}`, {
-			method: "PATCH",
-			body: JSON.stringify(data)
-		});
-	}
-	removeIntegration(agentId, integrationId) {
-		return this.client.request(`/integrations/agents/${agentId}/${integrationId}`, { method: "DELETE" });
-	}
-	reinstallIntegration(agentId, integrationId) {
-		return this.client.request(`/integrations/agents/${agentId}/${integrationId}/reinstall`, { method: "POST" });
-	}
-	/**
-	* Upgrade an integration to the registry's latest version via the fast,
-	* diff-based daemon path (bumps `version` without `reinstallRequestedAt`).
-	* The agent stays online — no destructive teardown. Distinct from
-	* {@link reinstallIntegration}, which is the destructive repair path.
-	*/
-	upgradeIntegration(agentId, integrationId) {
-		return this.client.request(`/integrations/agents/${agentId}/${integrationId}/upgrade`, { method: "POST" });
-	}
-	getRegistry() {
-		return this.client.request("/integrations/registry");
-	}
-	triggerSync(agentId) {
-		return this.client.request("/integrations/sync/trigger", {
-			method: "POST",
-			body: JSON.stringify({ agentId })
-		});
-	}
-	getDiscordGuildChannels(guildId) {
-		return this.client.request(`/discord/guilds/${encodeURIComponent(guildId)}/channels`);
-	}
-	listMobileNumbers() {
-		return this.client.request("/mobile/numbers");
-	}
-	searchMobileNumbers(country, query) {
-		const params = new URLSearchParams();
-		if (country) params.set("country", country);
-		if (query) params.set("query", query);
-		return this.client.request(`/mobile/numbers/search?${params}`);
-	}
-	assignMobileNumber(agentId, phoneNumber, countryCode) {
-		return this.client.request("/mobile/numbers/assign", {
-			method: "POST",
-			body: JSON.stringify({
-				agentId,
-				phoneNumber,
-				countryCode
-			})
-		});
-	}
-	releaseMobileNumber(agentId) {
-		return this.client.request("/mobile/numbers/release", {
-			method: "POST",
-			body: JSON.stringify({ agentId })
-		});
-	}
-	getMobileNumber(agentId) {
-		return this.client.request(`/mobile/numbers?agentId=${encodeURIComponent(agentId)}`);
-	}
-	disconnectGoogle(agentId, email) {
-		const query = email ? `?email=${encodeURIComponent(email)}` : "";
-		return this.client.request(`/google/agents/${encodeURIComponent(agentId)}/account${query}`, { method: "DELETE" });
-	}
-	getAtlassianSites(agentId) {
-		return this.client.request(`/atlassian/agents/${encodeURIComponent(agentId)}/sites`);
-	}
-	selectAtlassianSite(agentId, cloudId) {
-		return this.client.request(`/atlassian/agents/${encodeURIComponent(agentId)}/sites`, {
-			method: "PUT",
-			body: JSON.stringify({ cloudId })
-		});
-	}
-	listSlackChannels(agentId) {
-		return this.client.request(`/slack/agents/${encodeURIComponent(agentId)}/channels`);
-	}
-	sendSlackMessage(agentId, channel, text) {
-		return this.client.request(`/slack/agents/${encodeURIComponent(agentId)}/send`, {
-			method: "POST",
-			body: JSON.stringify({
-				channel,
-				text
-			})
-		});
-	}
-};
-//#endregion
 //#region ../../packages-internal/types/dist/lib/enum-values.js
 /**
 * Converts a const enum object into a non-empty readonly tuple.
@@ -4535,6 +4142,7 @@ enumValues({
 	Other: "other"
 });
 enumValues({
+	IndividualPayg: "individual_payg",
 	IndividualLite: "individual_lite",
 	IndividualNormal: "individual_normal",
 	IndividualPro: "individual_pro",
@@ -4898,6 +4506,7 @@ const NotificationType = {
 	SubscriptionCreated: "subscription.created",
 	SubscriptionCancelled: "subscription.cancelled",
 	StartupGrantEnded: "startup.grant_ended",
+	GrantEnded: "subscription.grant_ended",
 	SubscriptionPastDue: "subscription.past_due",
 	BalanceThresholdWarning: "balance.threshold.warning",
 	PlatformTierPriceIncrease: "platform.tier_price_increase",
@@ -4918,11 +4527,404 @@ const NotificationChannel = {
 	Push: "push",
 	Sms: "sms"
 };
-const RecipientStrategy = {
-	TenantAdmins: "tenant_admins",
-	SpecificUser: "specific_user"
+const RecipientStrategy = {
+	TenantAdmins: "tenant_admins",
+	SpecificUser: "specific_user"
+};
+NotificationType.PaymentSucceeded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.PaymentFailed, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.TopUpCompleted, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AutoRechargeCompleted, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.AutoRechargeFailed, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.SubscriptionCreated, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.SubscriptionCancelled, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.StartupGrantEnded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.GrantEnded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.SubscriptionPastDue, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.BalanceThresholdWarning, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.PlatformTierPriceIncrease, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.AgentCreated, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentProvisionFailed, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentBillingSuspended, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentDisconnectedExtended, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Push, NotificationType.BrowserTakeoverRequested, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.InviteCreated, NotificationCategory.System, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationType.OrgClaimed, NotificationCategory.System, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.TeamMemberAdded, NotificationCategory.Team, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationChannel.Push, NotificationType.ProjectMemberAdded, NotificationCategory.Team, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationChannel.Push, NotificationType.IntegrationInstalled, NotificationCategory.Integrations, RecipientStrategy.TenantAdmins, NotificationChannel.Push, NotificationType.IntegrationRemoved, NotificationCategory.Integrations, RecipientStrategy.TenantAdmins, NotificationChannel.Push;
+//#endregion
+//#region ../../packages-internal/api-client/dist/services/auth.js
+var AuthService = class {
+	client;
+	constructor(client) {
+		this.client = client;
+	}
+	prefix = "/auth";
+	validate(token) {
+		return this.client.request(`${this.prefix}/validate`, {
+			method: "POST",
+			body: JSON.stringify({ token })
+		});
+	}
+	listTokens() {
+		return this.client.request(`${this.prefix}/tokens`);
+	}
+	createToken(data) {
+		return this.client.request(`${this.prefix}/tokens`, {
+			method: "POST",
+			body: JSON.stringify(data)
+		});
+	}
+	deleteToken(tokenId) {
+		return this.client.request(`${this.prefix}/tokens/${tokenId}`, { method: "DELETE" });
+	}
+	/**
+	* Start a device-code flow. Called by the CLI when the user runs
+	* `alfe login` and picks the browser path. The returned `device_code`
+	* is the CLI's bearer secret for polling /auth/device-token; the
+	* `user_code` is what the user types/sees on the dashboard.
+	*
+	* Uses `publicRequest` because the CLI has no token yet — the standard
+	* `request` path would short-circuit with a synthetic 401.
+	*/
+	startDeviceCode(input) {
+		return this.client.publicRequest(`${this.prefix}/device-code`, {
+			method: "POST",
+			body: JSON.stringify(input)
+		});
+	}
+	/**
+	* Poll for the minted API key. Public endpoint. Returns:
+	*   200 → { api_key, tenantId, tokenExpiresAt } (success — write to config)
+	*   428 → still pending (caller should sleep `interval` and retry)
+	*   429 → polling too fast; caller should back off
+	*   410 → device-code expired; user must run `alfe login` again
+	*   400 → already redeemed (security: do not retry)
+	*
+	* Surface the HTTP-status code via the standard ApiResult error shape
+	* so callers can branch.
+	*/
+	pollDeviceToken(deviceCode) {
+		return this.client.publicRequest(`${this.prefix}/device-token`, {
+			method: "POST",
+			body: JSON.stringify({ device_code: deviceCode })
+		});
+	}
+	/** Dashboard-side. Fetch the device fingerprint for an approval card. */
+	lookupDeviceCode(userCode) {
+		return this.client.request(`${this.prefix}/device-code/lookup`, {
+			method: "POST",
+			body: JSON.stringify({ user_code: userCode })
+		});
+	}
+	/** Dashboard-side. Approve the pending device-code; CLI's next poll gets the key. */
+	approveDeviceCode(input) {
+		return this.client.request(`${this.prefix}/device-code/approve`, {
+			method: "POST",
+			body: JSON.stringify({
+				user_code: input.userCode,
+				expiresIn: input.expiresIn
+			})
+		});
+	}
+	getOnboardingStatus() {
+		return this.client.request(`${this.prefix}/onboarding/status`);
+	}
+	completeOnboarding(input) {
+		return this.client.request(`${this.prefix}/onboarding/complete`, {
+			method: "POST",
+			body: JSON.stringify(input)
+		});
+	}
+	getAccessStatus() {
+		return this.client.request(`${this.prefix}/access/status`);
+	}
+	redeemAccessCode(code) {
+		return this.client.request(`${this.prefix}/access/redeem`, {
+			method: "POST",
+			body: JSON.stringify({ code })
+		});
+	}
+	/**
+	* Fetch the caller's current permission list as enforced by the gateway.
+	* UI permission providers should call this on mount and refetch on
+	* Clerk org switch to stay in sync with sub-tenant permission changes.
+	*/
+	getMyPermissions() {
+		return this.client.request(`${this.prefix}/me/permissions`);
+	}
+	/**
+	* Preview what deleting the caller's own account will do. Drives the Danger
+	* Zone copy so the user sees an honest, kind-appropriate warning before the
+	* irreversible action (a last-admin cascade wipes the whole workspace).
+	*/
+	getDeletionPreview() {
+		return this.client.request(`${this.prefix}/me/deletion-preview`);
+	}
+	/**
+	* Permanently delete the caller's own account. Returns `{ status: "deleting" }`
+	* and tears the account down asynchronously — the Clerk user is deleted shortly
+	* after, so the caller's session dies. On success, sign out and route the user
+	* to a terminal "account is being deleted" state; do NOT retry.
+	*
+	* Pass `confirmKind` (the accountKind the user actually confirmed, from the
+	* deletion preview): if membership changed between preview and execute, the
+	* server answers 409 `account_kind_changed` instead of cascading a scope the
+	* user never agreed to.
+	*/
+	deleteAccount(confirmKind) {
+		return this.client.request(`${this.prefix}/me`, {
+			method: "DELETE",
+			...confirmKind ? { body: JSON.stringify({ confirmKind }) } : {}
+		});
+	}
+	getSubscriptionStatus() {
+		return this.client.request(`${this.prefix}/subscription`);
+	}
+	/**
+	* Mint a short-lived, single-use Clerk sign-in token for the calling user so
+	* a native client can hand its logged-in session to the web dashboard
+	* (`${dashboard}/handoff?__clerk_ticket=<token>`). Server mints only for the
+	* authenticated user — never a caller-supplied id.
+	*/
+	createHandoffToken() {
+		return this.client.request(`${this.prefix}/handoff-token`, { method: "POST" });
+	}
+	applyForStartup(input) {
+		return this.client.request(`${this.prefix}/subscription/apply-startup`, {
+			method: "POST",
+			body: JSON.stringify(input)
+		});
+	}
+	/**
+	* Accept an approved Startup Program invite. Call after the applicant has a
+	* card on file (confirmed or freshly added) — this mints the Professional
+	* grant subscription. Idempotent: a repeat call on an already-accepted
+	* application returns `{ status: "accepted" }` without re-charging.
+	*/
+	acceptStartup() {
+		return this.client.request(`${this.prefix}/subscription/accept-startup`, { method: "POST" });
+	}
+	createCheckoutSession(input) {
+		return this.client.request(`${this.prefix}/subscription/checkout`, {
+			method: "POST",
+			body: JSON.stringify(input)
+		});
+	}
+	/**
+	* Change a personal (individual-tier) subscriber's platform plan in place on
+	* their existing Stripe subscription — no second Checkout, no duplicate sub,
+	* no double charge. Upgrades prorate immediately; downgrades apply with no
+	* immediate charge/refund. Returns the updated subscription.
+	*/
+	changePlatformPlan(input) {
+		return this.client.request(`${this.prefix}/subscription/change`, {
+			method: "POST",
+			body: JSON.stringify(input)
+		});
+	}
+	/**
+	* Preview the proration cost for changing a personal (individual-tier)
+	* subscriber's platform plan — read-only companion to `changePlatformPlan`.
+	* Nothing is charged.
+	*/
+	previewPlatformPlanChange(input) {
+		return this.client.request(`${this.prefix}/subscription/change/preview`, {
+			method: "POST",
+			body: JSON.stringify(input)
+		});
+	}
+	updateSeats(seats) {
+		return this.client.request(`${this.prefix}/subscription/seats`, {
+			method: "POST",
+			body: JSON.stringify({ seats })
+		});
+	}
+	previewSeatChange(seats) {
+		return this.client.request(`${this.prefix}/subscription/seats/preview`, {
+			method: "POST",
+			body: JSON.stringify({ seats })
+		});
+	}
+	listOrgMembers() {
+		return this.client.request(`${this.prefix}/org/members`);
+	}
+	patchOrgMember(userId, body) {
+		return this.client.request(`${this.prefix}/org/members/${encodeURIComponent(userId)}`, {
+			method: "PATCH",
+			body: JSON.stringify(body)
+		});
+	}
+	removeOrgMember(userId) {
+		return this.client.request(`${this.prefix}/org/members/${encodeURIComponent(userId)}`, { method: "DELETE" });
+	}
+	listOrgInvitations() {
+		return this.client.request(`${this.prefix}/org/invitations`);
+	}
+	createOrgInvitation(input) {
+		return this.client.request(`${this.prefix}/org/invitations`, {
+			method: "POST",
+			body: JSON.stringify(input)
+		});
+	}
+	revokeOrgInvitation(invitationId) {
+		return this.client.request(`${this.prefix}/org/invitations/${encodeURIComponent(invitationId)}`, { method: "DELETE" });
+	}
+	listOrgDomains() {
+		return this.client.request(`${this.prefix}/org/domains`);
+	}
+	createOrgDomain(input) {
+		return this.client.request(`${this.prefix}/org/domains`, {
+			method: "POST",
+			body: JSON.stringify(input)
+		});
+	}
+	deleteOrgDomain(domainId) {
+		return this.client.request(`${this.prefix}/org/domains/${encodeURIComponent(domainId)}`, { method: "DELETE" });
+	}
+	updateOrgSettings(input) {
+		return this.client.request(`${this.prefix}/org/settings`, {
+			method: "PATCH",
+			body: JSON.stringify(input)
+		});
+	}
+};
+//#endregion
+//#region ../../packages-internal/api-client/dist/services/integrations.js
+var IntegrationsService = class {
+	client;
+	constructor(client) {
+		this.client = client;
+	}
+	listScopedInstalls(scope, scopeId) {
+		const params = new URLSearchParams({
+			scope,
+			scopeId
+		});
+		return this.client.request(`/integrations/scoped?${params}`);
+	}
+	installScoped(data) {
+		return this.client.request("/integrations/scoped", {
+			method: "POST",
+			body: JSON.stringify(data)
+		});
+	}
+	getScopedInstall(integrationId, scope, scopeId) {
+		const params = new URLSearchParams({
+			scope,
+			scopeId
+		});
+		return this.client.request(`/integrations/scoped/${encodeURIComponent(integrationId)}?${params}`);
+	}
+	updateScopedInstall(integrationId, data) {
+		return this.client.request(`/integrations/scoped/${encodeURIComponent(integrationId)}`, {
+			method: "PATCH",
+			body: JSON.stringify(data)
+		});
+	}
+	removeScopedInstall(integrationId, scope, scopeId) {
+		const params = new URLSearchParams({
+			scope,
+			scopeId
+		});
+		return this.client.request(`/integrations/scoped/${encodeURIComponent(integrationId)}?${params}`, { method: "DELETE" });
+	}
+	/**
+	* Reinstall (re-apply latest) a scope-level install. Agent scope is rejected
+	* by the route — use {@link reinstallIntegration} for agent-scoped reinstall.
+	*/
+	reinstallScoped(integrationId, scope, scopeId) {
+		return this.client.request(`/integrations/scoped/${encodeURIComponent(integrationId)}/reinstall`, {
+			method: "POST",
+			body: JSON.stringify({
+				scope,
+				scopeId
+			})
+		});
+	}
+	listIntegrations(agentId, options) {
+		const params = new URLSearchParams();
+		if (options?.includeInherited) params.set("includeInherited", "true");
+		if (options?.effective) params.set("effective", "true");
+		const qs = params.toString();
+		return this.client.request(`/integrations/agents/${agentId}${qs ? `?${qs}` : ""}`);
+	}
+	installIntegration(agentId, data) {
+		return this.client.request(`/integrations/agents/${agentId}`, {
+			method: "POST",
+			body: JSON.stringify(data)
+		});
+	}
+	getIntegrationConfig(agentId, integrationId) {
+		return this.client.request(`/integrations/agents/${agentId}/${integrationId}/config`);
+	}
+	updateIntegration(agentId, integrationId, data) {
+		return this.client.request(`/integrations/agents/${agentId}/${integrationId}`, {
+			method: "PATCH",
+			body: JSON.stringify(data)
+		});
+	}
+	removeIntegration(agentId, integrationId) {
+		return this.client.request(`/integrations/agents/${agentId}/${integrationId}`, { method: "DELETE" });
+	}
+	reinstallIntegration(agentId, integrationId) {
+		return this.client.request(`/integrations/agents/${agentId}/${integrationId}/reinstall`, { method: "POST" });
+	}
+	/**
+	* Upgrade an integration to the registry's latest version via the fast,
+	* diff-based daemon path (bumps `version` without `reinstallRequestedAt`).
+	* The agent stays online — no destructive teardown. Distinct from
+	* {@link reinstallIntegration}, which is the destructive repair path.
+	*/
+	upgradeIntegration(agentId, integrationId) {
+		return this.client.request(`/integrations/agents/${agentId}/${integrationId}/upgrade`, { method: "POST" });
+	}
+	getRegistry() {
+		return this.client.request("/integrations/registry");
+	}
+	triggerSync(agentId) {
+		return this.client.request("/integrations/sync/trigger", {
+			method: "POST",
+			body: JSON.stringify({ agentId })
+		});
+	}
+	getDiscordGuildChannels(guildId) {
+		return this.client.request(`/discord/guilds/${encodeURIComponent(guildId)}/channels`);
+	}
+	listMobileNumbers() {
+		return this.client.request("/mobile/numbers");
+	}
+	searchMobileNumbers(country, query) {
+		const params = new URLSearchParams();
+		if (country) params.set("country", country);
+		if (query) params.set("query", query);
+		return this.client.request(`/mobile/numbers/search?${params}`);
+	}
+	assignMobileNumber(agentId, phoneNumber, countryCode) {
+		return this.client.request("/mobile/numbers/assign", {
+			method: "POST",
+			body: JSON.stringify({
+				agentId,
+				phoneNumber,
+				countryCode
+			})
+		});
+	}
+	releaseMobileNumber(agentId) {
+		return this.client.request("/mobile/numbers/release", {
+			method: "POST",
+			body: JSON.stringify({ agentId })
+		});
+	}
+	getMobileNumber(agentId) {
+		return this.client.request(`/mobile/numbers?agentId=${encodeURIComponent(agentId)}`);
+	}
+	disconnectGoogle(agentId, email) {
+		const query = email ? `?email=${encodeURIComponent(email)}` : "";
+		return this.client.request(`/google/agents/${encodeURIComponent(agentId)}/account${query}`, { method: "DELETE" });
+	}
+	getAtlassianSites(agentId) {
+		return this.client.request(`/atlassian/agents/${encodeURIComponent(agentId)}/sites`);
+	}
+	selectAtlassianSite(agentId, cloudId) {
+		return this.client.request(`/atlassian/agents/${encodeURIComponent(agentId)}/sites`, {
+			method: "PUT",
+			body: JSON.stringify({ cloudId })
+		});
+	}
+	listSlackChannels(agentId) {
+		return this.client.request(`/slack/agents/${encodeURIComponent(agentId)}/channels`);
+	}
+	sendSlackMessage(agentId, channel, text) {
+		return this.client.request(`/slack/agents/${encodeURIComponent(agentId)}/send`, {
+			method: "POST",
+			body: JSON.stringify({
+				channel,
+				text
+			})
+		});
+	}
 };
-NotificationType.PaymentSucceeded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.PaymentFailed, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.TopUpCompleted, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AutoRechargeCompleted, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.AutoRechargeFailed, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.SubscriptionCreated, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.SubscriptionCancelled, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.StartupGrantEnded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.SubscriptionPastDue, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.BalanceThresholdWarning, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.PlatformTierPriceIncrease, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.AgentCreated, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentProvisionFailed, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentBillingSuspended, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentDisconnectedExtended, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Push, NotificationType.BrowserTakeoverRequested, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.InviteCreated, NotificationCategory.System, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationType.OrgClaimed, NotificationCategory.System, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.TeamMemberAdded, NotificationCategory.Team, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationChannel.Push, NotificationType.ProjectMemberAdded, NotificationCategory.Team, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationChannel.Push, NotificationType.IntegrationInstalled, NotificationCategory.Integrations, RecipientStrategy.TenantAdmins, NotificationChannel.Push, NotificationType.IntegrationRemoved, NotificationCategory.Integrations, RecipientStrategy.TenantAdmins, NotificationChannel.Push;
 //#endregion
 //#region src/config.ts
 /**
@@ -5146,6 +5148,17 @@ async function loadDaemonConfig() {
 	const gatewayWsUrl = alfeConfig.gateway_url ?? deriveGatewayWsUrl(apiEndpoint);
 	const runtimes = await loadRuntimeConfigs();
 	const runtime = alfeConfig.runtime ?? identity.runtime;
+	let defaultModel;
+	if (runtime === "claude-code") {
+		let timer;
+		const ws = await Promise.race([fetchAgentConfig(alfeConfig.api_key, apiEndpoint), new Promise((resolve) => {
+			timer = setTimeout(() => {
+				resolve(null);
+			}, 5e3);
+		})]);
+		if (timer) clearTimeout(timer);
+		defaultModel = ws?.defaultModel;
+	}
 	return {
 		apiKey: alfeConfig.api_key,
 		apiEndpoint,
@@ -5156,7 +5169,8 @@ async function loadDaemonConfig() {
 		orgId: identity.orgId,
 		runtime,
 		runtimes,
-		autoStartRuntime: alfeConfig.auto_start_runtime ?? true
+		autoStartRuntime: alfeConfig.auto_start_runtime ?? true,
+		...defaultModel ? { defaultModel } : {}
 	};
 }
 /**
@@ -23999,7 +24013,7 @@ async function startDaemon() {
 			runtimeProcess = new RuntimeProcess({
 				runtime: config.runtime,
 				workspace: runtimeCfg.workspace,
-				env: {}
+				env: config.runtime === "claude-code" && config.defaultModel ? { ALFE_DEFAULT_MODEL: config.defaultModel } : {}
 			});
 			runtimeProcess.setTurnActivityProbe(turnActivityProbe);
 			runtimeProcess.start();
@@ -24191,7 +24205,7 @@ async function executeCloudCommand(command) {
 		};
 		const payload = command.payload;
 		const runtime = config.runtime;
-		const version = payload?.version ?? (runtime === "openclaw" ? "2026.6.11" : runtime === "claude-code" ? "0.1.2" : void 0);
+		const version = payload?.version ?? (runtime === "openclaw" ? "2026.6.11" : runtime === "claude-code" ? "0.1.3" : void 0);
 		upgradingRuntime = true;
 		setTimeout(() => {
 			(async () => {

package/dist/src/index.d.ts

@@ -77,7 +77,7 @@ declare const PINNED_OPENCLAW_VERSION = "2026.6.11";
  * `PINNED_OPENCLAW_VERSION` — there is no `services/compute/Dockerfile` mirror to
  * keep in sync.
  */
-declare const PINNED_CLAUDE_CODE_HOST_VERSION = "0.1.2";
+declare const PINNED_CLAUDE_CODE_HOST_VERSION = "0.1.3";
 //#endregion
 //#region src/sentry.d.ts
 /**
@@ -281,6 +281,13 @@ interface DaemonConfig {
   runtimes: Record<string, RuntimeConfig>;
   /** Whether to auto-start the agent runtime process (e.g. openclaw) */
   autoStartRuntime: boolean;
+  /**
+   * The agent's bare `defaultModel`, resolved for claude-code only (other
+   * runtimes receive their model via the desired-state reconcile, not here).
+   * The daemon injects it into the host env so `claude -p --model` uses the
+   * dashboard-selected model. Never provider-qualified.
+   */
+  defaultModel?: string;
 }
 interface AgentIdentity {
   agentId: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alfe.ai/gateway",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "Alfe local gateway daemon — persistent control plane for agent integrations",
   "type": "module",
   "bin": {
@@ -23,11 +23,11 @@
     "pino-roll": "^1.2.0",
     "smol-toml": ">=1.6.1",
     "ws": "^8.18.0",
-    "@alfe.ai/agent-api-client": "^0.11.0",
+    "@alfe.ai/agent-api-client": "^0.11.1",
     "@alfe.ai/ai-proxy-local": "^0.0.13",
     "@alfe.ai/config": "^0.3.0",
-    "@alfe.ai/integration-manifest": "^0.3.2",
-    "@alfe.ai/integrations": "^0.5.2",
+    "@alfe.ai/integration-manifest": "^0.3.3",
+    "@alfe.ai/integrations": "^0.5.3",
     "@alfe.ai/mcp-bundler": "^0.3.2"
   },
   "license": "UNLICENSED",