@alfe.ai/gateway 0.9.5 → 0.9.7

package/dist/health.js

@@ -1,7 +1,7 @@
 import { n as logger$1 } from "./logger.js";
 import { a as captureFatal, c as captureRuntimeCrash, d as initAgentSentry, f as setAgentContext, l as captureRuntimeErrorOutput, o as captureIntegrationFailure, s as captureMcpFailure, u as flushSentry } from "./sentry.js";
 import { createRequire } from "node:module";
-import { mkdir, readFile, rename, stat, unlink, writeFile } from "node:fs/promises";
+import { chmod, mkdir, readFile, rename, stat, unlink, writeFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
 import { homedir } from "node:os";
 import pino from "pino";
@@ -12,9 +12,9 @@ import { AgentApiClient } from "@alfe.ai/agent-api-client";
 import { parse } from "smol-toml";
 import WebSocket from "ws";
 import { execFile, execSync, spawn } from "node:child_process";
-import { ClaudeCodeApplier, ClaudeCodeMcpSync, HermesApplier, HermesMcpSync, IntegrationManager, IntegrationManagerAdapter, McpApplier, NoopOpenClawCliLock, OpenClawApplier, SerialOpenClawCliLock } from "@alfe.ai/integrations";
-import { Manager, McpBundler, defaultConnect } from "@alfe.ai/mcp-bundler";
 import { promisify } from "node:util";
+import { ClaudeCodeApplier, ClaudeCodeMcpSync, HermesApplier, HermesMcpSync, IntegrationManager, IntegrationManagerAdapter, McpApplier, NoopOpenClawCliLock, OpenClawApplier, SerialOpenClawCliLock } from "@alfe.ai/integrations";
+import { Manager, McpBundler, defaultConnect, serverLaunchFingerprint } from "@alfe.ai/mcp-bundler";
 import { createConnection, createServer } from "node:net";
 import stream, { Readable } from "stream";
 import util, { format } from "util";
@@ -94,7 +94,7 @@ const PINNED_OPENCLAW_VERSION = "2026.6.11";
 * `PINNED_OPENCLAW_VERSION` — there is no `services/compute/Dockerfile` mirror to
 * keep in sync.
 */
-const PINNED_CLAUDE_CODE_HOST_VERSION = "0.1.3";
+const PINNED_CLAUDE_CODE_HOST_VERSION = "0.1.6";
 //#endregion
 //#region ../../packages-internal/ids/dist/prefixes.js
 const ID_PREFIXES = {
@@ -110,6 +110,7 @@ const ID_PREFIXES = {
 	promoCode: "prc",
 	promoRedemption: "prr",
 	pendingPromo: "pdp",
+	remoteSession: "rms",
 	webhook: "whk",
 	webhookDelivery: "wdl",
 	onboardingSession: "obs",
@@ -298,7 +299,7 @@ var AlfeApiClient = class {
 	getToken;
 	onAuthFailure;
 	constructor(options) {
-		this.apiBaseUrl = options.apiBaseUrl;
+		this.apiBaseUrl = options.apiBaseUrl.replace(/\/+$/, "");
 		this.getToken = options.getToken;
 		this.onAuthFailure = options.onAuthFailure;
 	}
@@ -315,7 +316,7 @@ var AlfeApiClient = class {
 		try {
 			const url = `${this.apiBaseUrl}${path}`;
 			const headers = new Headers(options?.headers);
-			headers.set("Content-Type", "application/json");
+			if (typeof options?.body === "string" && !headers.has("Content-Type")) headers.set("Content-Type", "application/json");
 			headers.set("x-correlation-id", correlationId());
 			if (!skipAuth) {
 				const token = await this.getToken();
@@ -347,15 +348,24 @@ var AlfeApiClient = class {
 					}
 				};
 			}
-			const body = await res.json();
-			if (!res.ok) return {
-				ok: false,
-				result: {
+			const text = res.status === 204 ? "" : await res.text();
+			let body;
+			if (text) try {
+				body = JSON.parse(text);
+			} catch {
+				body = text;
+			}
+			if (!res.ok) {
+				const errBody = body;
+				return {
 					ok: false,
-					error: body.message || `API error: ${String(res.status)}`,
-					status: res.status
-				}
-			};
+					result: {
+						ok: false,
+						error: (typeof errBody === "object" ? errBody.message : void 0) ?? (typeof body === "string" ? body : `API error: ${String(res.status)}`),
+						status: res.status
+					}
+				};
+			}
 			return {
 				ok: true,
 				res,
@@ -378,6 +388,10 @@ var AlfeApiClient = class {
 	async request(path, options) {
 		const result = await this._fetch(path, options);
 		if (!result.ok) return result.result;
+		if (result.body === void 0) return {
+			ok: true,
+			data: void 0
+		};
 		return {
 			ok: true,
 			data: result.body.data
@@ -392,6 +406,10 @@ var AlfeApiClient = class {
 	async publicRequest(path, options) {
 		const result = await this._fetch(path, options, true);
 		if (!result.ok) return result.result;
+		if (result.body === void 0) return {
+			ok: true,
+			data: void 0
+		};
 		return {
 			ok: true,
 			data: result.body.data
@@ -422,7 +440,9 @@ var AlfeApiClient = class {
 * (both need `readonly [string, ...string[]]`).
 */
 function enumValues(obj) {
-	return Object.values(obj);
+	const values = Object.values(obj);
+	if (values.length === 0) throw new TypeError("enumValues requires at least one value");
+	return values;
 }
 Object.freeze({ status: "aborted" });
 function $constructor(name, initializer, params) {
@@ -4105,6 +4125,12 @@ function refine(fn, _params = {}) {
 function superRefine(fn) {
 	return /* @__PURE__ */ _superRefine(fn);
 }
+//#endregion
+//#region ../../packages-internal/types/dist/lib/usd.js
+function isWholeUsdCentAmount(amountUsd) {
+	const roundedCents = Math.round(amountUsd * 100);
+	return Math.abs(amountUsd - roundedCents / 100) < 1e-9;
+}
 enumValues({
 	Active: "active",
 	PastDue: "past_due",
@@ -4127,12 +4153,14 @@ enumValues({
 	Twilio: "twilio",
 	ClaudeMax: "claude-max",
 	OpenAICodexMax: "openai-codex-max",
+	OpenAICodexSubscription: "openai-codex-subscription",
 	GeminiMax: "gemini-max"
 });
 enumValues({
 	Month: "month",
 	Year: "year"
 });
+number().min(0).max(1e6).refine(isWholeUsdCentAmount, "Stripe price amounts cannot contain fractional cents");
 object({
 	gracePeriodDays: number().int().positive().optional(),
 	launchDiscountEnabled: boolean().optional()
@@ -4268,6 +4296,7 @@ enumValues({
 	Completed: "completed",
 	Failed: "failed"
 });
+number().min(.01).max(1e6).refine(isWholeUsdCentAmount, "discountAmountUsd cannot contain fractional cents");
 enumValues({
 	BalanceCredit: "balance_credit",
 	SubscriptionDiscount: "subscription_discount",
@@ -4448,7 +4477,7 @@ _enum(XAI_MODELS);
 _enum(ZHIPU_MODELS);
 _enum(MOONSHOT_MODELS);
 _enum(QWEN_MODELS);
-string().min(1);
+string().trim().min(1);
 AnthropicModel.Opus5, AnthropicModel.Opus48, AnthropicModel.Opus47, AnthropicModel.Opus46, AnthropicModel.Sonnet5, AnthropicModel.Sonnet46, AnthropicModel.Haiku45, OpenAIModel.GPT4o, OpenAIModel.GPT4oMini, OpenAIModel.O3, OpenAIModel.GPT41, OpenAIModel.GPT41Mini, OpenAIModel.GPT41Nano, OpenAIModel.GPT54, OpenAIModel.GPT54Mini, OpenAIModel.GPT54Nano, OpenAIModel.GPT54Pro, OpenAIModel.GPT55, OpenAIModel.GPT55Pro, OpenAIModel.GPT56Sol, OpenAIModel.GPT56Terra, OpenAIModel.GPT56Luna, OpenAIModel.O3Mini, OpenAIModel.O4Mini, OpenAIModel.TextEmbedding3Small, OpenAIModel.TextEmbedding3Large, DeepSeekModel.Chat, DeepSeekModel.Reasoner, DeepSeekModel.V4Flash, DeepSeekModel.V4Pro, GoogleModel.Gemini35Flash, GoogleModel.Gemini31Pro, GoogleModel.Gemini31FlashLite, GoogleModel.Gemini25Pro, GoogleModel.Gemini25Flash, GoogleModel.Gemini25FlashLite, GoogleModel.Gemini20Flash, MiniMaxModel.M3, MiniMaxModel.M27, MiniMaxModel.M27HighSpeed, MiniMaxModel.M25, MiniMaxModel.M21, MiniMaxModel.M2, MistralModel.Large, MistralModel.Medium, MistralModel.Small, MistralModel.Codestral, MistralModel.Ministral8b, MistralModel.Ministral3b, MistralModel.MagistralMedium, MistralModel.MagistralSmall, MistralModel.DevstralMedium, XAIModel.Grok45, XAIModel.Grok43, XAIModel.Grok4, XAIModel.Grok41Fast, ZhipuModel.GLM52, ZhipuModel.GLM51, ZhipuModel.GLM46, ZhipuModel.GLM45, ZhipuModel.GLM45Air, MoonshotModel.K3, MoonshotModel.K26, MoonshotModel.K27Code, MoonshotModel.K27CodeHighSpeed, QwenModel.Qwen37Max, QwenModel.Qwen37Plus, QwenModel.Qwen36Flash, QwenModel.Qwen35Flash;
 AnthropicModel.Opus5, AnthropicModel.Opus48, AnthropicModel.Opus47, AnthropicModel.Opus46, AnthropicModel.Sonnet5, AnthropicModel.Sonnet46, AnthropicModel.Haiku45, OpenAIModel.GPT4o, OpenAIModel.GPT4oMini, OpenAIModel.O3, OpenAIModel.GPT41, OpenAIModel.GPT41Mini, OpenAIModel.GPT41Nano, OpenAIModel.GPT54, OpenAIModel.GPT54Mini, OpenAIModel.GPT54Nano, OpenAIModel.GPT54Pro, OpenAIModel.GPT55, OpenAIModel.GPT55Pro, OpenAIModel.GPT56Sol, OpenAIModel.GPT56Terra, OpenAIModel.GPT56Luna, OpenAIModel.O3Mini, OpenAIModel.O4Mini, OpenAIModel.TextEmbedding3Small, OpenAIModel.TextEmbedding3Large, DeepSeekModel.Chat, DeepSeekModel.Reasoner, DeepSeekModel.V4Flash, DeepSeekModel.V4Pro, GoogleModel.Gemini35Flash, GoogleModel.Gemini31Pro, GoogleModel.Gemini31FlashLite, GoogleModel.Gemini25Pro, GoogleModel.Gemini25Flash, GoogleModel.Gemini25FlashLite, GoogleModel.Gemini20Flash, MiniMaxModel.M3, MiniMaxModel.M27, MiniMaxModel.M27HighSpeed, MiniMaxModel.M25, MiniMaxModel.M21, MiniMaxModel.M2, MistralModel.Large, MistralModel.Medium, MistralModel.Small, MistralModel.Codestral, MistralModel.Ministral8b, MistralModel.Ministral3b, MistralModel.MagistralMedium, MistralModel.MagistralSmall, MistralModel.DevstralMedium, XAIModel.Grok45, XAIModel.Grok43, XAIModel.Grok4, XAIModel.Grok41Fast, ZhipuModel.GLM52, ZhipuModel.GLM51, ZhipuModel.GLM46, ZhipuModel.GLM45, ZhipuModel.GLM45Air, MoonshotModel.K3, MoonshotModel.K26, MoonshotModel.K27Code, MoonshotModel.K27CodeHighSpeed, QwenModel.Qwen37Max, QwenModel.Qwen37Plus, QwenModel.Qwen36Flash, QwenModel.Qwen35Flash;
 enumValues({
@@ -4553,7 +4582,7 @@ const RecipientStrategy = {
 	TenantAdmins: "tenant_admins",
 	SpecificUser: "specific_user"
 };
-NotificationType.PaymentSucceeded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.PaymentFailed, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.TopUpCompleted, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AutoRechargeCompleted, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.AutoRechargeFailed, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.SubscriptionCreated, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.SubscriptionCancelled, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.StartupGrantEnded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.GrantEnded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.EnterpriseGrantEnded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.SubscriptionPastDue, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.BalanceThresholdWarning, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.PlatformTierPriceIncrease, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.AgentCreated, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentProvisionFailed, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentBillingSuspended, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentDisconnectedExtended, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Push, NotificationType.BrowserTakeoverRequested, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.InviteCreated, NotificationCategory.System, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationType.OrgClaimed, NotificationCategory.System, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.TeamMemberAdded, NotificationCategory.Team, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationChannel.Push, NotificationType.ProjectMemberAdded, NotificationCategory.Team, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationChannel.Push, NotificationType.IntegrationInstalled, NotificationCategory.Integrations, RecipientStrategy.TenantAdmins, NotificationChannel.Push, NotificationType.IntegrationRemoved, NotificationCategory.Integrations, RecipientStrategy.TenantAdmins, NotificationChannel.Push;
+NotificationType.PaymentSucceeded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.PaymentFailed, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.TopUpCompleted, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AutoRechargeCompleted, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.AutoRechargeFailed, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.SubscriptionCreated, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.SubscriptionCancelled, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.StartupGrantEnded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.GrantEnded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.EnterpriseGrantEnded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.SubscriptionPastDue, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.BalanceThresholdWarning, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.PlatformTierPriceIncrease, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.AgentCreated, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentProvisionFailed, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentBillingSuspended, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentDisconnectedExtended, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Push, NotificationType.BrowserTakeoverRequested, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.InviteCreated, NotificationCategory.System, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.OrgClaimed, NotificationCategory.System, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.TeamMemberAdded, NotificationCategory.Team, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationChannel.Push, NotificationType.ProjectMemberAdded, NotificationCategory.Team, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationChannel.Push, NotificationType.IntegrationInstalled, NotificationCategory.Integrations, RecipientStrategy.TenantAdmins, NotificationChannel.Push, NotificationType.IntegrationRemoved, NotificationCategory.Integrations, RecipientStrategy.TenantAdmins, NotificationChannel.Push;
 //#endregion
 //#region ../../packages-internal/api-client/dist/services/auth.js
 var AuthService = class {
@@ -4578,7 +4607,7 @@ var AuthService = class {
 		});
 	}
 	deleteToken(tokenId) {
-		return this.client.request(`${this.prefix}/tokens/${tokenId}`, { method: "DELETE" });
+		return this.client.request(`${this.prefix}/tokens/${encodeURIComponent(tokenId)}`, { method: "DELETE" });
 	}
 	/**
 	* Start a device-code flow. Called by the CLI when the user runs
@@ -4798,6 +4827,12 @@ var IntegrationsService = class {
 	constructor(client) {
 		this.client = client;
 	}
+	agentIntegrationsPath(agentId) {
+		return `/integrations/agents/${encodeURIComponent(agentId)}`;
+	}
+	agentIntegrationPath(agentId, integrationId) {
+		return `${this.agentIntegrationsPath(agentId)}/${encodeURIComponent(integrationId)}`;
+	}
 	listScopedInstalls(scope, scopeId) {
 		const params = new URLSearchParams({
 			scope,
@@ -4846,31 +4881,31 @@ var IntegrationsService = class {
 	}
 	listIntegrations(agentId, options) {
 		const params = new URLSearchParams();
-		if (options?.includeInherited) params.set("includeInherited", "true");
-		if (options?.effective) params.set("effective", "true");
+		if (options?.includeInherited !== void 0) params.set("includeInherited", String(options.includeInherited));
+		if (options?.effective !== void 0) params.set("effective", String(options.effective));
 		const qs = params.toString();
-		return this.client.request(`/integrations/agents/${agentId}${qs ? `?${qs}` : ""}`);
+		return this.client.request(`${this.agentIntegrationsPath(agentId)}${qs ? `?${qs}` : ""}`);
 	}
 	installIntegration(agentId, data) {
-		return this.client.request(`/integrations/agents/${agentId}`, {
+		return this.client.request(this.agentIntegrationsPath(agentId), {
 			method: "POST",
 			body: JSON.stringify(data)
 		});
 	}
 	getIntegrationConfig(agentId, integrationId) {
-		return this.client.request(`/integrations/agents/${agentId}/${integrationId}/config`);
+		return this.client.request(`${this.agentIntegrationPath(agentId, integrationId)}/config`);
 	}
 	updateIntegration(agentId, integrationId, data) {
-		return this.client.request(`/integrations/agents/${agentId}/${integrationId}`, {
+		return this.client.request(this.agentIntegrationPath(agentId, integrationId), {
 			method: "PATCH",
 			body: JSON.stringify(data)
 		});
 	}
 	removeIntegration(agentId, integrationId) {
-		return this.client.request(`/integrations/agents/${agentId}/${integrationId}`, { method: "DELETE" });
+		return this.client.request(this.agentIntegrationPath(agentId, integrationId), { method: "DELETE" });
 	}
 	reinstallIntegration(agentId, integrationId) {
-		return this.client.request(`/integrations/agents/${agentId}/${integrationId}/reinstall`, { method: "POST" });
+		return this.client.request(`${this.agentIntegrationPath(agentId, integrationId)}/reinstall`, { method: "POST" });
 	}
 	/**
 	* Upgrade an integration to the registry's latest version via the fast,
@@ -4879,7 +4914,7 @@ var IntegrationsService = class {
 	* {@link reinstallIntegration}, which is the destructive repair path.
 	*/
 	upgradeIntegration(agentId, integrationId) {
-		return this.client.request(`/integrations/agents/${agentId}/${integrationId}/upgrade`, { method: "POST" });
+		return this.client.request(`${this.agentIntegrationPath(agentId, integrationId)}/upgrade`, { method: "POST" });
 	}
 	getRegistry() {
 		return this.client.request("/integrations/registry");
@@ -4890,17 +4925,16 @@ var IntegrationsService = class {
 			body: JSON.stringify({ agentId })
 		});
 	}
-	getDiscordGuildChannels(guildId) {
-		return this.client.request(`/discord/guilds/${encodeURIComponent(guildId)}/channels`);
-	}
-	listMobileNumbers() {
-		return this.client.request("/mobile/numbers");
+	getDiscordGuildChannels(agentId, guildId) {
+		const query = new URLSearchParams({ agentId });
+		return this.client.request(`/discord/guilds/${encodeURIComponent(guildId)}/channels?${query}`);
 	}
 	searchMobileNumbers(country, query) {
 		const params = new URLSearchParams();
-		if (country) params.set("country", country);
-		if (query) params.set("query", query);
-		return this.client.request(`/mobile/numbers/search?${params}`);
+		if (country !== void 0) params.set("country", country);
+		if (query !== void 0) params.set("query", query);
+		const qs = params.toString();
+		return this.client.request(`/mobile/numbers/search${qs ? `?${qs}` : ""}`);
 	}
 	assignMobileNumber(agentId, phoneNumber, countryCode) {
 		return this.client.request("/mobile/numbers/assign", {
@@ -4921,10 +4955,6 @@ var IntegrationsService = class {
 	getMobileNumber(agentId) {
 		return this.client.request(`/mobile/numbers?agentId=${encodeURIComponent(agentId)}`);
 	}
-	disconnectGoogle(agentId, email) {
-		const query = email ? `?email=${encodeURIComponent(email)}` : "";
-		return this.client.request(`/google/agents/${encodeURIComponent(agentId)}/account${query}`, { method: "DELETE" });
-	}
 	getAtlassianSites(agentId) {
 		return this.client.request(`/atlassian/agents/${encodeURIComponent(agentId)}/sites`);
 	}
@@ -4966,10 +4996,7 @@ const PID_PATH = join(ALFE_DIR, "gateway.pid");
 * Returns agentId (derived from tokenId) and orgId (tenantId).
 */
 async function resolveAgentIdentity(apiKey, apiEndpoint) {
-	logger$1.debug({
-		apiEndpoint,
-		keyPrefix: apiKey.slice(0, 8) + "..."
-	}, "Resolving agent identity...");
+	logger$1.debug({ apiEndpoint }, "Resolving agent identity...");
 	const auth = new AuthService(new AlfeApiClient({
 		apiBaseUrl: apiEndpoint,
 		getToken: () => Promise.resolve(apiKey)
@@ -5065,21 +5092,32 @@ function deriveAgentWorkspace(runtime, home) {
 	if (runtime === "claude-code") return join(home, "workspace");
 	return home;
 }
+const UNSAFE_RECORD_KEYS = new Set([
+	"__proto__",
+	"constructor",
+	"prototype"
+]);
+function isRecord$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseRuntimeConfigs(parsed) {
+	if (!isRecord$1(parsed) || !isRecord$1(parsed.runtimes)) return {};
+	const result = {};
+	for (const [name, candidate] of Object.entries(parsed.runtimes)) {
+		if (name.length === 0 || name.length > 128 || UNSAFE_RECORD_KEYS.has(name) || !isRecord$1(candidate) || typeof candidate.workspace !== "string" || candidate.workspace.length === 0 || candidate.workspace.length > 4096) continue;
+		const workspace = candidate.workspace.startsWith("~/") ? join(homedir(), candidate.workspace.slice(2)) : candidate.workspace;
+		result[name] = {
+			workspace,
+			agentWorkspace: deriveAgentWorkspace(name, workspace)
+		};
+	}
+	return result;
+}
 async function loadRuntimeConfigs() {
 	const configPath = join(ALFE_DIR, "config.toml");
 	if (!existsSync(configPath)) return {};
 	try {
-		const runtimes = parse(await readFile(configPath, "utf-8")).runtimes;
-		if (!runtimes) return {};
-		const result = {};
-		for (const [name, cfg] of Object.entries(runtimes)) if (typeof cfg.workspace === "string") {
-			const workspace = cfg.workspace.startsWith("~/") ? join(homedir(), cfg.workspace.slice(2)) : cfg.workspace;
-			result[name] = {
-				workspace,
-				agentWorkspace: deriveAgentWorkspace(name, workspace)
-			};
-		}
-		return result;
+		return parseRuntimeConfigs(parse(await readFile(configPath, "utf-8")));
 	} catch {
 		return {};
 	}
@@ -5255,6 +5293,8 @@ async function fetchAgentConfig(apiKey, apiEndpoint) {
 }
 //#endregion
 //#region src/protocol.ts
+/** Maximum size of one newline-delimited local IPC message. */
+const MAX_IPC_MESSAGE_BYTES = 1024 * 1024;
 /**
 * Map a cloud command name to an IPC method name.
 * Cloud commands use dot-notation matching IPC methods.
@@ -5353,23 +5393,56 @@ function parseMessage(raw) {
 		return null;
 	}
 }
+const MAX_DESIRED_INTEGRATIONS = 4096;
+const MAX_CONFIG_VALUES = 512;
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isNonEmptyString(value) {
+	return typeof value === "string" && value.trim().length > 0;
+}
+function isDesiredCustomSource(value) {
+	if (!isRecord(value)) return false;
+	return isNonEmptyString(value.connectionId) && isNonEmptyString(value.manifestRepo) && isNonEmptyString(value.manifestPath) && isNonEmptyString(value.manifestRef) && isNonEmptyString(value.manifestSha) && isNonEmptyString(value.manifestCommit) && isRecord(value.manifest);
+}
+function isDesiredConfig(value) {
+	if (!isRecord(value)) return false;
+	if (!Number.isSafeInteger(value.version) || value.version < 0) return false;
+	if (!isRecord(value.values)) return false;
+	const entries = Object.entries(value.values);
+	return entries.length <= MAX_CONFIG_VALUES && entries.every(([key, configValue]) => key.trim().length > 0 && (typeof configValue === "string" || configValue === null));
+}
+function isDesiredIntegration(value) {
+	if (!isRecord(value)) return false;
+	return isNonEmptyString(value.integrationId) && typeof value.version === "string" && (value.desiredStatus === "active" || value.desiredStatus === "removed") && (value.reinstallRequestedAt === void 0 || typeof value.reinstallRequestedAt === "string") && (value.customSource === void 0 || isDesiredCustomSource(value.customSource));
+}
 /**
 * Type guard: is this a cloud COMMAND message?
 */
 function isCloudCommand(msg) {
-	return typeof msg === "object" && msg !== null && msg.type === "COMMAND" && typeof msg.commandId === "string";
+	if (!isRecord(msg)) return false;
+	return msg.type === "COMMAND" && isNonEmptyString(msg.commandId) && isNonEmptyString(msg.agentId) && isNonEmptyString(msg.command);
 }
 /**
 * Type guard: is this a cloud SERVICE_ACK message?
 */
 function isCloudServiceAck(msg) {
-	return typeof msg === "object" && msg !== null && msg.type === "SERVICE_ACK";
+	return isRecord(msg) && msg.type === "SERVICE_ACK" && (msg.status === "ok" || msg.status === "error");
 }
 /**
 * Type guard: is this a cloud DESIRED_STATE message?
 */
 function isCloudDesiredState(msg) {
-	return typeof msg === "object" && msg !== null && msg.type === "DESIRED_STATE" && Array.isArray(msg.integrations);
+	if (!isRecord(msg) || msg.type !== "DESIRED_STATE" || !Array.isArray(msg.integrations)) return false;
+	if (msg.integrations.length > MAX_DESIRED_INTEGRATIONS) return false;
+	if (msg.config !== void 0 && !isDesiredConfig(msg.config)) return false;
+	const integrationIds = /* @__PURE__ */ new Set();
+	for (const integration of msg.integrations) {
+		if (!isDesiredIntegration(integration)) return false;
+		if (integrationIds.has(integration.integrationId)) return false;
+		integrationIds.add(integration.integrationId);
+	}
+	return true;
 }
 /**
 * Create a RECONCILIATION_REPORT message.
@@ -5402,7 +5475,7 @@ function isCloudPing(msg) {
 * Type guard: is this an IPC request?
 */
 function isIPCRequest(msg) {
-	return typeof msg === "object" && msg !== null && msg.type === "req" && typeof msg.id === "string" && typeof msg.method === "string";
+	return isRecord(msg) && msg.type === "req" && isNonEmptyString(msg.id) && isNonEmptyString(msg.method) && isRecord(msg.params);
 }
 /**
 * Type guard: is this an IPC response?
@@ -5558,7 +5631,20 @@ var ReconciliationEngine = class {
 			localIntegrations = await this.manager.getInstalledIntegrations();
 		} catch (err) {
 			log$5.error({ err }, "Failed to get local integrations");
-			localIntegrations = [];
+			captureIntegrationFailure("_reconciliation", "read_local_state", err);
+			const errorMessage = "Failed to read local integration state; reconciliation skipped";
+			const affectedIds = desiredIntegrations.length > 0 ? desiredIntegrations.map((desired) => desired.integrationId) : ["*"];
+			report.errors.push(...affectedIds.map((integrationId) => ({
+				integrationId,
+				error: errorMessage
+			})));
+			report.results.push(...desiredIntegrations.map((desired) => ({
+				integrationId: desired.integrationId,
+				action: "error",
+				actualStatus: "unknown",
+				errorMessage
+			})));
+			return report;
 		}
 		const localMap = new Map(localIntegrations.map((i) => [i.id, i]));
 		const desiredMap = new Map(desiredIntegrations.map((d) => [d.integrationId, d]));
@@ -5913,6 +5999,7 @@ var CloudClient = class {
 	closed = false;
 	registered = false;
 	pingTimer = null;
+	reconnectTimer = null;
 	lastPong = 0;
 	config;
 	onCommand = null;
@@ -5985,6 +6072,7 @@ var CloudClient = class {
 			agentId: this.config.agentId
 		}, "Cloud client starting...");
 		this.closed = false;
+		if (this.ws || this.reconnectTimer) return;
 		this.doConnect();
 	}
 	/**
@@ -5994,12 +6082,14 @@ var CloudClient = class {
 		logger$1.debug("Cloud client stopping...");
 		this.closed = true;
 		this.stopPingTimer();
+		this.stopReconnectTimer();
 		if (this.ws) {
-			logger$1.debug({ readyState: this.ws.readyState }, "Cloud: closing WebSocket");
+			const ws = this.ws;
+			this.ws = null;
+			logger$1.debug({ readyState: ws.readyState }, "Cloud: closing WebSocket");
 			try {
-				this.ws.close(1e3, "Daemon shutting down");
+				ws.close(1e3, "Daemon shutting down");
 			} catch {}
-			this.ws = null;
 		}
 		this.registered = false;
 		this.reconciling = false;
@@ -6034,35 +6124,45 @@ var CloudClient = class {
 			logger$1.debug("Cloud: doConnect skipped — client is closed");
 			return;
 		}
+		if (this.ws) {
+			logger$1.debug("Cloud: doConnect skipped — connection already exists");
+			return;
+		}
 		logger$1.info({
 			url: this.config.wsUrl,
 			backoffMs: this.backoffMs
 		}, "Connecting to cloud gateway...");
-		logger$1.debug({
-			agentId: this.config.agentId,
-			keyPrefix: this.config.apiKey.slice(0, 12) + "..."
-		}, "Cloud: connection details");
-		this.ws = new WebSocket(this.config.wsUrl, {
+		logger$1.debug({ agentId: this.config.agentId }, "Cloud: connection details");
+		const ws = new WebSocket(this.config.wsUrl, {
 			headers: { authorization: `Bearer ${this.config.apiKey}` },
 			maxPayload: 10 * 1024 * 1024,
 			handshakeTimeout: 1e4
 		});
-		this.ws.on("open", () => {
+		this.ws = ws;
+		ws.on("open", () => {
+			if (this.ws !== ws) return;
 			logger$1.info("Cloud WebSocket connected");
-			logger$1.debug({ readyState: this.ws?.readyState }, "Cloud: WebSocket open, sending registration...");
+			logger$1.debug({ readyState: ws.readyState }, "Cloud: WebSocket open, sending registration...");
 			this.backoffMs = 1e3;
 			this.sendRegister();
 		});
-		this.ws.on("message", (data) => {
+		ws.on("message", (data) => {
+			if (this.ws !== ws) return;
 			const text = Buffer.isBuffer(data) ? data.toString("utf-8") : Buffer.from(data).toString("utf-8");
 			logger$1.debug({ size: text.length }, "Cloud: received message");
 			this.handleMessage(text);
 		});
-		this.ws.on("ping", () => {
+		ws.on("ping", () => {
+			if (this.ws !== ws) return;
 			logger$1.debug("Cloud: received ping, sending pong");
-			this.ws?.pong();
+			ws.pong();
 		});
-		this.ws.on("close", (code, reason) => {
+		ws.on("close", (code, reason) => {
+			if (this.ws !== ws) {
+				logger$1.debug("Cloud: ignoring close from superseded WebSocket");
+				return;
+			}
+			this.ws = null;
 			logger$1.warn({
 				code,
 				reason: reason.toString()
@@ -6072,7 +6172,8 @@ var CloudClient = class {
 			this.onConnectionChange?.(false);
 			this.scheduleReconnect();
 		});
-		this.ws.on("error", (err) => {
+		ws.on("error", (err) => {
+			if (this.ws !== ws) return;
 			logger$1.error({
 				err: err.message,
 				url: this.config.wsUrl
@@ -6119,10 +6220,16 @@ var CloudClient = class {
 		if (ack.status === "ok") {
 			logger$1.info("Cloud: registered successfully ✅");
 			this.registered = true;
+			this.lastPong = Date.now();
 			this.startPingTimer();
 			this.onConnectionChange?.(true);
+		} else if (ack.retryable === false) {
+			logger$1.error({ message: ack.message }, "Cloud: registration rejected — not retrying");
+			this.closed = true;
+			this.stopReconnectTimer();
+			this.ws?.close(1008, "Registration rejected");
 		} else {
-			logger$1.error({ message: ack.message }, "Cloud: registration failed");
+			logger$1.error({ message: ack.message }, "Cloud: registration failed — will retry");
 			this.ws?.close(1008, "Registration rejected");
 		}
 	}
@@ -6252,16 +6359,27 @@ var CloudClient = class {
 			logger$1.debug("Cloud: reconnect skipped — client is closed");
 			return;
 		}
+		if (this.reconnectTimer) {
+			logger$1.debug("Cloud: reconnect already scheduled");
+			return;
+		}
 		const delay = this.backoffMs;
 		this.backoffMs = Math.min(this.backoffMs * 2, 3e4);
 		logger$1.info({
 			delayMs: delay,
 			nextBackoffMs: this.backoffMs
 		}, "Cloud: scheduling reconnect...");
-		setTimeout(() => {
+		this.reconnectTimer = setTimeout(() => {
+			this.reconnectTimer = null;
 			this.doConnect();
 		}, delay);
 	}
+	stopReconnectTimer() {
+		if (this.reconnectTimer) {
+			clearTimeout(this.reconnectTimer);
+			this.reconnectTimer = null;
+		}
+	}
 };
 //#endregion
 //#region src/config-reconciler.ts
@@ -6353,11 +6471,15 @@ var ConfigReconciler = class {
 //#endregion
 //#region src/command-queue.ts
 const DEFAULT_TTL_MS$1 = 300 * 1e3;
+const DEFAULT_MAX_PER_SERVICE = 100;
+const DEFAULT_MAX_TOTAL = 1e3;
 var CommandQueue = class {
 	queues = /* @__PURE__ */ new Map();
 	ttlMs;
 	gcTimer = null;
-	constructor(ttlMs = DEFAULT_TTL_MS$1) {
+	constructor(ttlMs = DEFAULT_TTL_MS$1, maxPerService = DEFAULT_MAX_PER_SERVICE, maxTotal = DEFAULT_MAX_TOTAL) {
+		this.maxPerService = maxPerService;
+		this.maxTotal = maxTotal;
 		this.ttlMs = ttlMs;
 	}
 	/**
@@ -6380,16 +6502,22 @@ var CommandQueue = class {
 	* Enqueue a command for a specific service.
 	*/
 	enqueue(serviceId, request, commandId) {
+		this.purgeExpired();
 		let queue = this.queues.get(serviceId);
 		if (!queue) {
 			queue = [];
 			this.queues.set(serviceId, queue);
 		}
+		if (queue.length >= this.maxPerService || this.totalPending() >= this.maxTotal) {
+			if (queue.length === 0) this.queues.delete(serviceId);
+			return false;
+		}
 		queue.push({
 			request,
 			queuedAt: Date.now(),
 			commandId
 		});
+		return true;
 	}
 	/**
 	* Drain all pending (non-expired) commands for a service.
@@ -6458,6 +6586,13 @@ var CommandQueue = class {
 */
 const LAUNCHD_LABEL = "ai.alfe.gateway";
 const SYSTEMD_SERVICE = "alfe-gateway";
+const MANAGED_ENV_VARS = [
+	"ALFE_MANAGED",
+	"ALFE_API_KEY",
+	"LOG_LEVEL",
+	"ALFE_CLI_VERSION"
+];
+const execFileAsync$3 = promisify(execFile);
 /**
 * On-disk path for the boot-time self-heal guard script (Linux only).
 * Written next to the systemd unit at setup time and invoked via
@@ -6472,6 +6607,21 @@ function isRootUser() {
 function getSystemdSystemServicePath() {
 	return `/etc/systemd/system/${SYSTEMD_SERVICE}.service`;
 }
+function getManagedEnvironmentPath() {
+	return isRootUser() ? "/etc/alfe/gateway.env" : join(homedir(), ".alfe", "gateway.env");
+}
+function escapeEnvironmentFileValue(value) {
+	if (/[\0\r\n]/.test(value)) throw new Error("Managed environment values cannot contain NUL or newlines");
+	return value.replaceAll("\\", "\\\\").replaceAll("\"", "\\\"");
+}
+/** @internal exported for unit tests; not re-exported from the barrel. */
+function generateManagedEnvironmentFile() {
+	const lines = MANAGED_ENV_VARS.flatMap((key) => {
+		const value = process.env[key];
+		return value === void 0 ? [] : [`${key}="${escapeEnvironmentFileValue(value)}"`];
+	});
+	return lines.length > 0 ? `${lines.join("\n")}\n` : "";
+}
 function getLaunchdPlistPath() {
 	return join(homedir(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
 }
@@ -6566,7 +6716,7 @@ function generateLaunchdPlist() {
 */
 /** @internal exported for unit tests; not re-exported from the barrel. */
 function generateGuardScript() {
-	const version = process.env.ALFE_CLI_VERSION;
+	const exactVersion = process.env.ALFE_CLI_VERSION?.match(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/)?.[0];
 	return `#!/bin/sh
 # Alfe CLI boot-time self-heal guard. Auto-generated by 'alfe setup' — do not edit.
 # Repairs an interrupted 'npm install -g @alfe.ai/cli' before the daemon starts,
@@ -6574,7 +6724,7 @@ function generateGuardScript() {
 # Must never wedge boot: every failure path logs and exits 0.
 set -u
 
-TARGET='${version && version.length > 0 ? `@alfe.ai/cli@${version}` : "@alfe.ai/cli@latest"}'
+TARGET='${exactVersion ? `@alfe.ai/cli@${exactVersion}` : "@alfe.ai/cli@latest"}'
 log() { echo "[alfe-cli-guard] $*" >&2; }
 
 # Resolve the alfe bin and its real target (dist/index.js). readlink -f follows
@@ -6638,12 +6788,7 @@ exit 0
 function generateSystemdUnit() {
 	const alfeBin = getAlfeBinPath();
 	const root = isRootUser();
-	const envLines = [
-		"ALFE_MANAGED",
-		"ALFE_API_KEY",
-		"LOG_LEVEL",
-		"ALFE_CLI_VERSION"
-	].filter((key) => process.env[key]).map((key) => `Environment=${key}=${process.env[key] ?? ""}`).join("\n");
+	const managedEnvironmentPath = getManagedEnvironmentPath();
 	return `[Unit]
 Description=Alfe Gateway Daemon
 After=network-online.target
@@ -6662,7 +6807,7 @@ RestartSec=10
 # SIGKILL when the stop timeout expires.
 KillMode=mixed
 Environment=NODE_ENV=production${root ? "\nEnvironment=HOME=/root\nWorkingDirectory=/root" : ""}
-${envLines}
+EnvironmentFile=-${managedEnvironmentPath}
 
 [Install]
 WantedBy=${root ? "multi-user.target" : "default.target"}`;
@@ -6680,6 +6825,19 @@ async function writeGuardScript() {
 	});
 	logger$1.info({ path: guardPath }, "Wrote CLI self-heal guard script");
 }
+async function writeManagedEnvironmentFile() {
+	const environmentPath = getManagedEnvironmentPath();
+	await mkdir(dirname(environmentPath), {
+		recursive: true,
+		mode: 448
+	});
+	await writeFile(environmentPath, generateManagedEnvironmentFile(), {
+		encoding: "utf-8",
+		mode: 384
+	});
+	await chmod(environmentPath, 384);
+	logger$1.info({ path: environmentPath }, "Wrote managed environment file");
+}
 /**
 * Install the service unit for the current platform.
 */
@@ -6743,6 +6901,7 @@ async function installSystemd() {
 	const ctl = root ? "systemctl" : "systemctl --user";
 	if (!root) await mkdir(dir, { recursive: true });
 	await writeGuardScript();
+	await writeManagedEnvironmentFile();
 	await writeFile(unitPath, generateSystemdUnit(), "utf-8");
 	logger$1.info({
 		path: unitPath,
@@ -6768,6 +6927,9 @@ async function uninstallSystemd() {
 	try {
 		await unlink(getGuardScriptPath());
 	} catch {}
+	try {
+		await unlink(getManagedEnvironmentPath());
+	} catch {}
 	try {
 		execSync(`${ctl} daemon-reload`, { stdio: "pipe" });
 	} catch {}
@@ -6862,6 +7024,26 @@ function isServiceInstalled() {
 async function writePidFile() {
 	await writeFile(PID_PATH, String(process.pid), "utf-8");
 }
+/** @internal exported for unit tests; not re-exported from the barrel. */
+function isGatewayDaemonCommand(command) {
+	const normalized = command.replaceAll("\0", " ").replace(/\s+/g, " ").trim();
+	const hasGatewayEntrypoint = /(?:^|[\s/])(?:alfe-gateway|gateway(?:\.js)?)(?:\s|$)/.test(normalized) || /(?:^|\s)alfe(?:\s|$)/.test(normalized) && /(?:^|\s)gateway(?:\s|$)/.test(normalized);
+	const hasDaemonVerb = /(?:^|\s)(?:daemon|start|restart)(?:\s|$)/.test(normalized);
+	return hasGatewayEntrypoint && hasDaemonVerb;
+}
+async function isGatewayDaemonProcess(pid) {
+	try {
+		const { stdout } = await execFileAsync$3("ps", [
+			"-p",
+			String(pid),
+			"-o",
+			"command="
+		], { timeout: 2e3 });
+		return isGatewayDaemonCommand(stdout);
+	} catch {
+		return false;
+	}
+}
 /**
 * Remove the PID file.
 */
@@ -6877,15 +7059,18 @@ async function removePidFile() {
 async function checkExistingDaemon() {
 	if (!existsSync(PID_PATH)) return null;
 	try {
-		const pidStr = await readFile(PID_PATH, "utf-8");
-		const pid = parseInt(pidStr.trim(), 10);
-		if (isNaN(pid)) {
+		const trimmedPid = (await readFile(PID_PATH, "utf-8")).trim();
+		const pid = /^\d+$/.test(trimmedPid) ? Number(trimmedPid) : NaN;
+		if (!Number.isSafeInteger(pid) || pid <= 1) {
 			await removePidFile();
 			return null;
 		}
 		try {
 			process.kill(pid, 0);
-			return pid;
+			if (await isGatewayDaemonProcess(pid)) return pid;
+			logger$1.warn({ pid }, "Ignoring stale daemon PID owned by another process");
+			await removePidFile();
+			return null;
 		} catch {
 			await removePidFile();
 			return null;
@@ -6911,7 +7096,8 @@ async function stopExistingDaemon() {
 				return true;
 			}
 		}
-		process.kill(pid, "SIGKILL");
+		if (await isGatewayDaemonProcess(pid)) process.kill(pid, "SIGKILL");
+		else logger$1.warn({ pid }, "Skipping SIGKILL because daemon PID ownership changed");
 		await removePidFile();
 		return true;
 	} catch {
@@ -6937,7 +7123,8 @@ var IPCServer = class {
 	connections = /* @__PURE__ */ new Map();
 	socketPath;
 	requestHandler = null;
-	constructor(socketPath) {
+	constructor(socketPath, daemonVersion = "unknown") {
+		this.daemonVersion = daemonVersion;
 		this.socketPath = socketPath;
 	}
 	/**
@@ -7112,6 +7299,7 @@ var IPCServer = class {
 		socket.on("data", (data) => {
 			conn.buffer += data.toString();
 			this.processBuffer(conn);
+			if (Buffer.byteLength(conn.buffer, "utf8") > 1048576) this.closeOversizedConnection(conn);
 		});
 		socket.on("close", () => {
 			logger$1.info({
@@ -7141,8 +7329,13 @@ var IPCServer = class {
 	processBuffer(conn) {
 		let newlineIdx;
 		while ((newlineIdx = conn.buffer.indexOf("\n")) !== -1) {
-			const line = conn.buffer.slice(0, newlineIdx).trim();
+			const rawLine = conn.buffer.slice(0, newlineIdx);
 			conn.buffer = conn.buffer.slice(newlineIdx + 1);
+			if (Buffer.byteLength(rawLine, "utf8") > 1048576) {
+				this.closeOversizedConnection(conn);
+				return;
+			}
+			const line = rawLine.trim();
 			if (!line) continue;
 			let parsed;
 			try {
@@ -7165,6 +7358,14 @@ var IPCServer = class {
 			}, "IPC: unhandled message");
 		}
 	}
+	closeOversizedConnection(conn) {
+		logger$1.warn({
+			connId: conn.id,
+			maxBytes: MAX_IPC_MESSAGE_BYTES
+		}, "IPC: message exceeded size limit — closing connection");
+		conn.buffer = "";
+		conn.socket.destroy();
+	}
 	handlePluginResponse(conn, response) {
 		const pending = conn.pending.get(response.id);
 		if (!pending) return;
@@ -7190,8 +7391,11 @@ var IPCServer = class {
 	}
 	handleRegister(conn, request) {
 		const { name, version, protocolVersion, capabilities, pid } = request.params;
-		if (!name || !version) {
-			this.sendResponse(conn, createIPCError(request.id, "INVALID_REGISTER", "name and version are required"));
+		const validCapabilities = capabilities === void 0 || Array.isArray(capabilities) && capabilities.length <= 256 && capabilities.every((capability) => typeof capability === "string" && capability.trim().length > 0 && capability.length <= 256);
+		const validPid = pid === void 0 || Number.isSafeInteger(pid) && pid > 0;
+		const validProtocolVersion = protocolVersion === void 0 || Number.isSafeInteger(protocolVersion);
+		if (typeof name !== "string" || name.trim().length === 0 || name.length > 256 || typeof version !== "string" || version.trim().length === 0 || version.length > 256 || !validCapabilities || !validPid || !validProtocolVersion) {
+			this.sendResponse(conn, createIPCError(request.id, "INVALID_REGISTER", "Invalid plugin registration fields"));
 			return;
 		}
 		if (protocolVersion !== void 0 && protocolVersion !== 1) {
@@ -7228,7 +7432,7 @@ var IPCServer = class {
 			name,
 			version,
 			protocolVersion: protocolVersion ?? 1,
-			capabilities: capabilities ?? [],
+			capabilities: capabilities ? [...capabilities] : [],
 			pid: pid ?? null,
 			connectedAt: Date.now(),
 			lastSeen: Date.now()
@@ -7241,7 +7445,7 @@ var IPCServer = class {
 		}, "IPC: plugin registered");
 		this.sendResponse(conn, createIPCResponse(request.id, {
 			status: "registered",
-			daemonVersion: "0.1.0",
+			daemonVersion: this.daemonVersion,
 			protocolVersion: 1
 		}));
 	}
@@ -7462,9 +7666,9 @@ async function startAiProxy(apiKey) {
 * here is fatal — plugins have no other path to the daemon — so this flushes
 * logs and exits instead of returning.
 */
-async function startIpcServer(socketPath, requestHandler) {
+async function startIpcServer(socketPath, requestHandler, daemonVersion) {
 	logger$1.debug({ socketPath }, "Starting IPC server...");
-	const ipcServer = new IPCServer(socketPath);
+	const ipcServer = new IPCServer(socketPath, daemonVersion);
 	ipcServer.setRequestHandler(requestHandler);
 	try {
 		await ipcServer.start();
@@ -7545,7 +7749,8 @@ function handleMcpListServers(manager) {
 		ok: true,
 		payload: { servers: manager.listServers().map(({ id, entry }) => ({
 			id,
-			entry,
+			entry: toPublicServerEntry(entry),
+			fingerprint: serverLaunchFingerprint(entry),
 			status: byName.get(id) ?? {
 				name: id,
 				connected: false,
@@ -7555,6 +7760,14 @@ function handleMcpListServers(manager) {
 		})) }
 	};
 }
+function toPublicServerEntry(entry) {
+	return {
+		owner: entry.owner,
+		addedAt: entry.addedAt,
+		transport: entry.transport,
+		...entry.version !== void 0 ? { version: entry.version } : {}
+	};
+}
 /**
 * How long the add-confirm probe waits for the freshly-added server to
 * connect before replying. This is effectively the whole budget for
@@ -23114,7 +23327,7 @@ var RuntimeProcess = class {
 	* Start the runtime process.
 	*/
 	start() {
-		if (this.stopped) return;
+		if (this.stopped || this.child !== null) return;
 		const { command, args } = this.resolveCommand();
 		this.lastStartTime = Date.now();
 		log$3.info({
@@ -23123,7 +23336,7 @@ var RuntimeProcess = class {
 			args,
 			workspace: this.options.workspace
 		}, "Starting runtime process");
-		this.child = spawn(command, args, {
+		const child = spawn(command, args, {
 			cwd: this.options.workspace,
 			env: {
 				...process.env,
@@ -23135,7 +23348,9 @@ var RuntimeProcess = class {
 				"pipe"
 			]
 		});
-		this.child.stdout?.on("data", (data) => {
+		this.child = child;
+		let terminalHandled = false;
+		child.stdout.on("data", (data) => {
 			const lines = data.toString().trim().split("\n");
 			for (const line of lines) {
 				log$3.info({
@@ -23145,7 +23360,7 @@ var RuntimeProcess = class {
 				this.observeLine("stdout", line);
 			}
 		});
-		this.child.stderr?.on("data", (data) => {
+		child.stderr.on("data", (data) => {
 			const lines = data.toString().trim().split("\n");
 			for (const line of lines) {
 				log$3.warn({
@@ -23155,8 +23370,14 @@ var RuntimeProcess = class {
 				this.observeLine("stderr", line);
 			}
 		});
-		this.child.on("exit", (code, signal) => {
-			this.child = null;
+		const handleTermination = (code, signal, spawnError) => {
+			if (terminalHandled) return;
+			terminalHandled = true;
+			if (this.child === child) this.child = null;
+			if (spawnError) log$3.error({
+				runtime: this.options.runtime,
+				err: spawnError.message
+			}, "Runtime process error");
 			if (this.stopped) {
 				log$3.info({
 					runtime: this.options.runtime,
@@ -23165,7 +23386,7 @@ var RuntimeProcess = class {
 				}, "Runtime stopped (expected)");
 				return;
 			}
-			if (code === 0 && signal == null) {
+			if (!spawnError && code === 0 && signal == null) {
 				log$3.info({
 					runtime: this.options.runtime,
 					code
@@ -23180,6 +23401,7 @@ var RuntimeProcess = class {
 				runtime: this.options.runtime,
 				code,
 				signal,
+				spawnError: spawnError?.message,
 				backoffMs: this.backoffMs
 			}, "Runtime crashed — scheduling restart with backoff");
 			const uptime = Date.now() - this.lastStartTime;
@@ -23195,7 +23417,8 @@ var RuntimeProcess = class {
 				signal,
 				uptimeMs: uptime,
 				recentOutput: this.ringBuffer.snapshot(),
-				crashesSuppressed: crash.suppressedCount
+				crashesSuppressed: crash.suppressedCount,
+				...spawnError ? { spawnError } : {}
 			});
 			else log$3.debug({
 				runtime: this.options.runtime,
@@ -23207,23 +23430,12 @@ var RuntimeProcess = class {
 				this.start();
 			}, this.backoffMs);
 			this.backoffMs = Math.min(this.backoffMs * 2, BACKOFF_MAX_MS);
+		};
+		child.on("exit", (code, signal) => {
+			handleTermination(code, signal);
 		});
-		this.child.on("error", (err) => {
-			log$3.error({
-				runtime: this.options.runtime,
-				err: err.message
-			}, "Runtime process error");
-			if (this.stopped) return;
-			const crash = this.throttle.allowCrashCapture(Date.now() - this.lastStartTime);
-			if (crash.allow) captureRuntimeCrash({
-				runtime: this.options.runtime,
-				code: null,
-				signal: null,
-				uptimeMs: Date.now() - this.lastStartTime,
-				recentOutput: this.ringBuffer.snapshot(),
-				crashesSuppressed: crash.suppressedCount,
-				spawnError: err
-			});
+		child.on("error", (err) => {
+			handleTermination(null, null, err);
 		});
 	}
 	/**
@@ -23292,14 +23504,19 @@ var RuntimeProcess = class {
 		const child = this.child;
 		if (!child) return;
 		return new Promise((resolve) => {
+			let settled = false;
+			const finish = () => {
+				if (settled) return;
+				settled = true;
+				clearTimeout(killTimer);
+				resolve();
+			};
 			const killTimer = setTimeout(() => {
 				log$3.warn({ runtime: this.options.runtime }, "Runtime did not exit in time — sending SIGKILL");
 				child.kill("SIGKILL");
 			}, 5e3);
-			child.on("exit", () => {
-				clearTimeout(killTimer);
-				resolve();
-			});
+			child.once("exit", finish);
+			child.once("error", finish);
 			child.kill("SIGTERM");
 		});
 	}
@@ -23471,6 +23688,8 @@ var IpcTurnActivityProbe = class {
 * via ESM dynamic import on first use and cached until the registry is cleared.
 */
 const log$1 = createLogger("CommandRegistry");
+const DEFAULT_COMMAND_TIMEOUT_MS = 3e4;
+const MAX_COMMAND_TIMEOUT_MS = 1800 * 1e3;
 var CommandRegistry = class {
 	commands = /* @__PURE__ */ new Map();
 	version = 0;
@@ -23478,7 +23697,7 @@ var CommandRegistry = class {
 	* Register a command from an integration.
 	* Rejects duplicate command names — first registration wins.
 	*/
-	register(integrationId, name, handlerPath, method = "handle", timeoutMs = 3e4) {
+	register(integrationId, name, handlerPath, method = "handle", timeoutMs = DEFAULT_COMMAND_TIMEOUT_MS) {
 		const existing = this.commands.get(name);
 		if (existing) {
 			log$1.warn({
@@ -23496,12 +23715,13 @@ var CommandRegistry = class {
 			}, "Handler file does not exist — skipping registration");
 			return;
 		}
+		const boundedTimeoutMs = Number.isSafeInteger(timeoutMs) && timeoutMs > 0 ? Math.min(timeoutMs, MAX_COMMAND_TIMEOUT_MS) : DEFAULT_COMMAND_TIMEOUT_MS;
 		this.commands.set(name, {
 			commandName: name,
 			integrationId,
 			handlerPath,
 			handlerMethod: method,
-			timeoutMs,
+			timeoutMs: boundedTimeoutMs,
 			handler: null
 		});
 		log$1.info({
@@ -23509,7 +23729,7 @@ var CommandRegistry = class {
 			integrationId,
 			handlerPath,
 			method,
-			timeoutMs
+			timeoutMs: boundedTimeoutMs
 		}, "Registered command");
 	}
 	/**
@@ -23569,9 +23789,10 @@ var CommandRegistry = class {
 				}
 			};
 		}
+		let timeout;
 		try {
 			return await Promise.race([entry.handler(payload, context), new Promise((_, reject) => {
-				setTimeout(() => {
+				timeout = setTimeout(() => {
 					reject(/* @__PURE__ */ new Error(`Command "${name}" timed out after ${String(entry.timeoutMs)}ms`));
 				}, entry.timeoutMs);
 			})]);
@@ -23588,6 +23809,8 @@ var CommandRegistry = class {
 					message
 				}
 			};
+		} finally {
+			if (timeout) clearTimeout(timeout);
 		}
 	}
 	/**
@@ -23637,13 +23860,18 @@ var CommandDedupe = class {
 			duplicate: true
 		};
 		const promise = exec();
-		this.entries.set(commandId, {
+		const entry = {
 			insertedAt: this.now(),
-			promise
-		});
+			promise,
+			settled: false
+		};
+		this.entries.set(commandId, entry);
 		this.evictOverCap();
-		promise.catch(() => {
-			this.entries.delete(commandId);
+		promise.then(() => {
+			entry.settled = true;
+			this.evictOverCap();
+		}, () => {
+			if (this.entries.get(commandId) === entry) this.entries.delete(commandId);
 		});
 		return {
 			ack: await promise,
@@ -23658,7 +23886,7 @@ var CommandDedupe = class {
 	has(commandId) {
 		const e = this.entries.get(commandId);
 		if (!e) return false;
-		if (this.now() - e.insertedAt > this.ttlMs) {
+		if (e.settled && this.now() - e.insertedAt > this.ttlMs) {
 			this.entries.delete(commandId);
 			return false;
 		}
@@ -23666,13 +23894,13 @@ var CommandDedupe = class {
 	}
 	evictExpired() {
 		const cutoff = this.now() - this.ttlMs;
-		for (const [id, entry] of this.entries) if (entry.insertedAt <= cutoff) this.entries.delete(id);
+		for (const [id, entry] of this.entries) if (entry.settled && entry.insertedAt <= cutoff) this.entries.delete(id);
 	}
 	evictOverCap() {
 		while (this.entries.size > this.maxEntries) {
-			const oldest = this.entries.keys().next().value;
-			if (oldest === void 0) break;
-			this.entries.delete(oldest);
+			const oldestSettled = Array.from(this.entries).find(([, entry]) => entry.settled);
+			if (!oldestSettled) break;
+			this.entries.delete(oldestSettled[0]);
 		}
 	}
 };
@@ -24126,6 +24354,8 @@ let stopPairingApprovalPoller = null;
 * runtime's applier (mirrors `mcpManagerRef`). Null until start() builds it.
 */
 let runtimeAppliersRef = null;
+const LEGACY_CONFIG_SET_KEYS = new Set(["agents.defaults.model"]);
+const MAX_LEGACY_CONFIG_VALUE_LENGTH = 16 * 1024;
 async function startDaemon() {
 	startedAt = Date.now();
 	const managed = isManagedMode();
@@ -24133,9 +24363,10 @@ async function startDaemon() {
 		managed,
 		pid: process.pid
 	}, "Starting Alfe Gateway Daemon...");
+	resolvedCliVersion = await getCliVersion();
 	await initAgentSentry({
 		surface: "daemon",
-		release: await getCliVersion()
+		release: resolvedCliVersion
 	});
 	let fatalExiting = false;
 	process.on("uncaughtException", (err) => {
@@ -24189,9 +24420,8 @@ async function startDaemon() {
 	aiProxyServer = aiProxy.server;
 	aiProxyUrl = aiProxy.url;
 	aiProxyRunning = aiProxy.running;
-	ipcServer = await startIpcServer(config.socketPath, handlePluginRequest);
+	ipcServer = await startIpcServer(config.socketPath, handlePluginRequest, resolvedCliVersion);
 	turnActivityProbe = new IpcTurnActivityProbe(() => ipcServer);
-	resolvedCliVersion = await getCliVersion();
 	resolvedRuntimeVersion = await getRuntimeVersion(config.runtime);
 	logger$1.info({
 		cliVersion: resolvedCliVersion,
@@ -24547,7 +24777,7 @@ async function executeCloudCommand(command) {
 		};
 		const payload = command.payload;
 		const runtime = config.runtime;
-		const version = payload?.version ?? (runtime === "openclaw" ? "2026.6.11" : runtime === "claude-code" ? "0.1.3" : void 0);
+		const version = payload?.version ?? (runtime === "openclaw" ? "2026.6.11" : runtime === "claude-code" ? "0.1.6" : void 0);
 		upgradingRuntime = true;
 		setTimeout(() => {
 			(async () => {
@@ -24662,6 +24892,15 @@ async function executeCloudCommand(command) {
 				message: "alfe.config_set requires key and value"
 			}
 		};
+		if (!LEGACY_CONFIG_SET_KEYS.has(key) || value.length > MAX_LEGACY_CONFIG_VALUE_LENGTH) return {
+			type: "COMMAND_ACK",
+			commandId: command.commandId,
+			status: "error",
+			result: {
+				code: "CONFIG_KEY_UNSUPPORTED",
+				message: "Config key is not supported by the legacy command path"
+			}
+		};
 		const runtime = config.runtime;
 		const applier = runtimeAppliersRef?.get(runtime);
 		if (!applier || typeof applier.setConfigRaw !== "function") {
@@ -24692,7 +24931,7 @@ async function executeCloudCommand(command) {
 				status: "ok",
 				result: {
 					key,
-					value
+					applied: true
 				}
 			};
 		} catch (err) {
@@ -24757,7 +24996,21 @@ async function executeCloudCommand(command) {
 			commandId: command.commandId,
 			command: command.command
 		}, "No plugins connected — queuing command");
-		commandQueue.enqueue("_default", ipcRequest, command.commandId);
+		if (!commandQueue.enqueue("_default", ipcRequest, command.commandId)) {
+			logger$1.warn({
+				commandId: command.commandId,
+				command: command.command
+			}, "Plugin command queue is full");
+			return {
+				type: "COMMAND_ACK",
+				commandId: command.commandId,
+				status: "error",
+				result: {
+					code: "QUEUE_FULL",
+					message: "Plugin command queue is at capacity"
+				}
+			};
+		}
 		return {
 			type: "COMMAND_ACK",
 			commandId: command.commandId,
@@ -24843,7 +25096,7 @@ function handleStatus() {
 				status: "running",
 				pid: process.pid,
 				uptime: (Date.now() - startedAt) / 1e3,
-				version: "0.1.0",
+				version: resolvedCliVersion,
 				runtimeVersion: resolvedRuntimeVersion
 			},
 			cloud: {
@@ -24870,18 +25123,18 @@ function handleIntegrationList() {
 }
 function handleIntegrationReport(params, pluginId) {
 	const { name, status, detail } = params;
-	if (!name || !status) return {
+	if (typeof name !== "string" || name.length === 0 || name.length > 256 || typeof status !== "string" || status.length === 0 || status.length > 64) return {
 		ok: false,
 		error: {
 			code: "INVALID_PARAMS",
-			message: "name and status are required"
+			message: "name and status must be non-empty bounded strings"
 		}
 	};
 	logger$1.info({
 		pluginId,
 		integration: name,
 		status,
-		detail
+		hasDetail: detail !== void 0
 	}, "Integration status report");
 	return {
 		ok: true,
@@ -24919,6 +25172,12 @@ async function queryDaemonHealth(socketPath, timeoutMs = 5e3) {
 		}, timeoutMs);
 		socket.on("data", (data) => {
 			buffer += data.toString();
+			if (Buffer.byteLength(buffer, "utf8") > 1048576) {
+				clearTimeout(timer);
+				socket.destroy();
+				reject(/* @__PURE__ */ new Error("Health response exceeded IPC size limit"));
+				return;
+			}
 			const newlineIdx = buffer.indexOf("\n");
 			if (newlineIdx === -1) return;
 			const line = buffer.slice(0, newlineIdx).trim();
@@ -24927,7 +25186,8 @@ async function queryDaemonHealth(socketPath, timeoutMs = 5e3) {
 			socket.end();
 			try {
 				const response = JSON.parse(line);
-				if (response.ok && response.payload) resolve(response.payload);
+				if (!isIPCResponse(response)) reject(/* @__PURE__ */ new Error("Invalid health response"));
+				else if (response.ok && response.payload) resolve(response.payload);
 				else reject(new Error(response.error?.message ?? "Health check failed"));
 			} catch {
 				reject(/* @__PURE__ */ new Error("Invalid health response"));