@bitseek/claw 1.2.0 → 1.2.2

package/dist/{gateway-cli-BKhQZ6rL.js → gateway-cli-BVn-fVbw.js}

@@ -2,7 +2,7 @@ import { g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as
 import { a as logVerbose, d as colorize, f as isRich, g as getResolvedLoggerSettings, h as getLogger, m as getChildLogger, p as theme, s as setVerbose } from "./globals-uLeGcRW1.js";
 import { D as isPlainObject, E as truncateUtf16Safe, S as shortenHomePath, c as ensureDir, r as clamp, y as resolveUserPath } from "./utils-CP51tiAi.js";
 import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, l as normalizeVerboseLevel, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels } from "./thinking-44rmAw5o.js";
-import { $ as normalizeOptionalText, $n as registerAgentRunContext, An as resolveSessionDeliveryTarget, Ar as enqueueSystemEvent, B as consumeRestartSentinel, Bn as countActiveDescendantRuns, Br as getAcpSessionManager, Bt as runWithModelFallback, C as listAgentsForGateway, Cr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, Ct as handleSlackHttpRequest, D as pruneLegacyStoreKeys, Dr as stripHeartbeatToken, Dt as computeBackoff, E as loadSessionEntry, En as resolveOutboundSessionRoute, F as markGatewaySigusr1RestartHandled, Ft as createOutboundSendDeps, Gn as resolveAnnounceTargetFromKey, Gr as DEFAULT_INPUT_IMAGE_MIMES, H as formatRestartSentinelMessage, Hn as listDescendantRunsForRequester, Hr as normalizeSendPolicy, Ht as setCliSessionId, I as scheduleGatewaySigusr1Restart, It as applyVerboseOverride, J as normalizeCronJobCreate, Jn as buildOutboundSessionContext, Jr as extractFileContentFromSource, K as writeRestartSentinel, Kn as readLatestAssistantReply, Kr as DEFAULT_INPUT_MAX_REDIRECTS, Kt as applyModelOverrideToSessionEntry, L as setGatewaySigusr1RestartPolicy, Lt as parseVerboseOverride, M as deferGatewayRestartUntilIdle, N as emitGatewayRestart, Nn as resetDirectoryCache, Nt as resolveAgentDeliveryPlan, O as resolveGatewaySessionStoreTarget, Ot as sleepWithAbort, P as isGatewaySigusr1RestartExternallyAllowed, Pr as requestHeartbeatNow, Pt as resolveAgentOutboundTarget, Q as normalizeOptionalSessionKey, Qn as onAgentEvent, Qr as resolveAgentTimeoutMs, R as setPreRestartDeferralCheck, Rn as isAbortRequestText, Rt as createDefaultDeps, Sn as getTotalPendingReplies, Sr as CommandLane, T as loadCombinedSessionStoreForGateway, Tn as ensureOutboundSessionEntry, Tt as requestBodyErrorToText, Ur as resolveSendPolicy, Ut as runCliAgent, V as formatDoctorNonInteractiveHint, Vn as initSubagentRegistry, Vr as resolveAgentSessionDirs, Vt as getCliSessionId, W as summarizeRestartSentinel, Wn as runSubagentAnnounceFlow, Wr as DEFAULT_INPUT_IMAGE_MAX_BYTES, X as inferLegacyName, Xn as emitAgentEvent, Xr as normalizeMimeList, Xt as resolveAgentAvatar, Y as normalizeCronJobPatch, Yn as clearAgentRunContext, Yr as extractImageContentFromSource, Yt as resolveSessionAuthProfileOverride, Z as normalizeOptionalAgentId, Zn as getAgentRunContext, Zr as resolveInputFileLimits, _ as applyToolPolicyPipeline, _r as getTotalQueueSize, ar as resolveTtsApiKey, at as stripLegacyDeliveryFields, b as createOpenClawTools, bn as dispatchInboundMessage, br as setCommandLaneConcurrency, cn as buildHistoryContextFromEntries, cr as resolveTtsPrefsPath, ct as getPluginToolMeta, dr as setTtsProvider, dt as loadOpenClawPlugins, en as buildSafeExternalPrompt, er as resolveUserTimezone, et as normalizePayloadToSystemText, fr as textToSpeech, ft as createPluginRuntime, g as waitForEmbeddedPiRunEnd, gt as loadProviderUsageSummary, h as getActiveEmbeddedRunCount, hr as getActiveTaskCount, i as resolveCronStyleNow, in as unbindThreadBindingsBySessionKey, ir as isTtsProviderConfigured, it as hasLegacyDeliveryHints, j as consumeGatewaySigusr1RestartAuthorization, jn as resolveOutboundChannelPlugin, jr as isSystemEventContextChanged, jt as agentCommandFromIngress, k as resolveSessionModelRef, kn as resolveOutboundTarget, lr as resolveTtsProviderOrder, lt as resolvePluginTools, m as abortEmbeddedPiRun, mr as OPENAI_TTS_VOICES, mt as normalizeGroupActivation, n as BARE_SESSION_RESET_PROMPT, nn as getHookType, nr as getTtsProvider, nt as migrateLegacyCronPayload, or as resolveTtsAutoMode, ot as applyBrowserProxyPaths, p as runEmbeddedPiAgent, pr as OPENAI_TTS_MODELS, q as normalizeHttpWebhookUrl, qn as clearSessionQueues, qr as DEFAULT_INPUT_TIMEOUT_MS, qt as lookupContextTokens, rn as isExternalHookSession, rr as isTtsEnabled, rt as buildDeliveryFromLegacyPayload, sr as resolveTtsConfig, st as persistBrowserProxyFiles, tn as detectSuspiciousPatterns, tr as clearBootstrapSnapshot, tt as normalizeRequiredName, ur as setTtsEnabled, v as buildDefaultToolPolicyPipelineSteps, vr as markGatewayDraining, w as listSessionsFromStore, wt as readJsonBodyWithLimit, x as canonicalizeSpawnedByForAgent, xn as createReplyDispatcher, xr as waitForActiveTasks, xt as resolveAgentOutboundIdentity, yn as formatZonedTimestamp, yr as resetAllLanes, z as triggerOpenClawRestart, zn as stopSubagentsForRequester, zr as ACP_SESSION_IDENTITY_RENDERER_VERSION, zt as createOutboundSendDeps$1 } from "./reply-Dpf9qyV4.js";
+import { $ as normalizeOptionalText, $n as registerAgentRunContext, An as resolveSessionDeliveryTarget, Ar as enqueueSystemEvent, B as consumeRestartSentinel, Bn as countActiveDescendantRuns, Br as getAcpSessionManager, Bt as runWithModelFallback, C as listAgentsForGateway, Cr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, Ct as handleSlackHttpRequest, D as pruneLegacyStoreKeys, Dr as stripHeartbeatToken, Dt as computeBackoff, E as loadSessionEntry, En as resolveOutboundSessionRoute, F as markGatewaySigusr1RestartHandled, Ft as createOutboundSendDeps, Gn as resolveAnnounceTargetFromKey, Gr as DEFAULT_INPUT_IMAGE_MIMES, H as formatRestartSentinelMessage, Hn as listDescendantRunsForRequester, Hr as normalizeSendPolicy, Ht as setCliSessionId, I as scheduleGatewaySigusr1Restart, It as applyVerboseOverride, J as normalizeCronJobCreate, Jn as buildOutboundSessionContext, Jr as extractFileContentFromSource, K as writeRestartSentinel, Kn as readLatestAssistantReply, Kr as DEFAULT_INPUT_MAX_REDIRECTS, Kt as applyModelOverrideToSessionEntry, L as setGatewaySigusr1RestartPolicy, Lt as parseVerboseOverride, M as deferGatewayRestartUntilIdle, N as emitGatewayRestart, Nn as resetDirectoryCache, Nt as resolveAgentDeliveryPlan, O as resolveGatewaySessionStoreTarget, Ot as sleepWithAbort, P as isGatewaySigusr1RestartExternallyAllowed, Pr as requestHeartbeatNow, Pt as resolveAgentOutboundTarget, Q as normalizeOptionalSessionKey, Qn as onAgentEvent, Qr as resolveAgentTimeoutMs, R as setPreRestartDeferralCheck, Rn as isAbortRequestText, Rt as createDefaultDeps, Sn as getTotalPendingReplies, Sr as CommandLane, T as loadCombinedSessionStoreForGateway, Tn as ensureOutboundSessionEntry, Tt as requestBodyErrorToText, Ur as resolveSendPolicy, Ut as runCliAgent, V as formatDoctorNonInteractiveHint, Vn as initSubagentRegistry, Vr as resolveAgentSessionDirs, Vt as getCliSessionId, W as summarizeRestartSentinel, Wn as runSubagentAnnounceFlow, Wr as DEFAULT_INPUT_IMAGE_MAX_BYTES, X as inferLegacyName, Xn as emitAgentEvent, Xr as normalizeMimeList, Xt as resolveAgentAvatar, Y as normalizeCronJobPatch, Yn as clearAgentRunContext, Yr as extractImageContentFromSource, Yt as resolveSessionAuthProfileOverride, Z as normalizeOptionalAgentId, Zn as getAgentRunContext, Zr as resolveInputFileLimits, _ as applyToolPolicyPipeline, _r as getTotalQueueSize, ar as resolveTtsApiKey, at as stripLegacyDeliveryFields, b as createOpenClawTools, bn as dispatchInboundMessage, br as setCommandLaneConcurrency, cn as buildHistoryContextFromEntries, cr as resolveTtsPrefsPath, ct as getPluginToolMeta, dr as setTtsProvider, dt as loadOpenClawPlugins, en as buildSafeExternalPrompt, er as resolveUserTimezone, et as normalizePayloadToSystemText, fr as textToSpeech, ft as createPluginRuntime, g as waitForEmbeddedPiRunEnd, gt as loadProviderUsageSummary, h as getActiveEmbeddedRunCount, hr as getActiveTaskCount, i as resolveCronStyleNow, in as unbindThreadBindingsBySessionKey, ir as isTtsProviderConfigured, it as hasLegacyDeliveryHints, j as consumeGatewaySigusr1RestartAuthorization, jn as resolveOutboundChannelPlugin, jr as isSystemEventContextChanged, jt as agentCommandFromIngress, k as resolveSessionModelRef, kn as resolveOutboundTarget, lr as resolveTtsProviderOrder, lt as resolvePluginTools, m as abortEmbeddedPiRun, mr as OPENAI_TTS_VOICES, mt as normalizeGroupActivation, n as BARE_SESSION_RESET_PROMPT, nn as getHookType, nr as getTtsProvider, nt as migrateLegacyCronPayload, or as resolveTtsAutoMode, ot as applyBrowserProxyPaths, p as runEmbeddedPiAgent, pr as OPENAI_TTS_MODELS, q as normalizeHttpWebhookUrl, qn as clearSessionQueues, qr as DEFAULT_INPUT_TIMEOUT_MS, qt as lookupContextTokens, rn as isExternalHookSession, rr as isTtsEnabled, rt as buildDeliveryFromLegacyPayload, sr as resolveTtsConfig, st as persistBrowserProxyFiles, tn as detectSuspiciousPatterns, tr as clearBootstrapSnapshot, tt as normalizeRequiredName, ur as setTtsEnabled, v as buildDefaultToolPolicyPipelineSteps, vr as markGatewayDraining, w as listSessionsFromStore, wt as readJsonBodyWithLimit, x as canonicalizeSpawnedByForAgent, xn as createReplyDispatcher, xr as waitForActiveTasks, xt as resolveAgentOutboundIdentity, yn as formatZonedTimestamp, yr as resetAllLanes, z as triggerOpenClawRestart, zn as stopSubagentsForRequester, zr as ACP_SESSION_IDENTITY_RENDERER_VERSION, zt as createOutboundSendDeps$1 } from "./reply-ezOUjaUp.js";
 import { a as resolveAgentDir, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, i as resolveAgentConfig, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir } from "./agent-scope-CiBV1K6b.js";
 import { a as setConsoleSubsystemFilter, d as defaultRuntime, n as runtimeForLogger, o as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-BT74-yyS.js";
 import { S as isCronRunSessionKey, T as parseAgentSessionKey, c as normalizeAgentId, g as normalizeAccountId$1, h as DEFAULT_ACCOUNT_ID, l as normalizeMainKey, m as toAgentStoreSessionKey, o as classifySessionKeyShape, p as toAgentRequestSessionKey, r as buildAgentMainSessionKey, t as DEFAULT_AGENT_ID, u as resolveAgentIdFromSessionKey, w as isSubagentSessionKey } from "./session-key-C9z4VQtw.js";
@@ -21,12 +21,12 @@ import { u as isTestDefaultMemorySlotDisabled } from "./manifest-registry-B_U2pK
 import "./dock-BXksV3sC.js";
 import { _ as normalizeGatewayClientMode, f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, h as GATEWAY_CLIENT_NAMES, i as isGatewayMessageChannel, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient, t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-CKAn7Lf7.js";
 import "./send-ByUfPpKj.js";
-import { u as registerUnhandledRejectionHandler } from "./audio-transcription-runner-TitMttNg.js";
-import { x as extractTextFromChatContent } from "./image-CpFh9AzK.js";
+import { u as registerUnhandledRejectionHandler } from "./audio-transcription-runner-CF_UP4C7.js";
+import { x as extractTextFromChatContent } from "./image-B270IRGo.js";
 import "./models-config-Do1Ur_ov.js";
 import "./pi-model-discovery-DVhDvAnA.js";
-import "./pi-embedded-helpers-BDEokG0n.js";
-import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-SrM4-oQp.js";
+import "./pi-embedded-helpers-ZTn-T7tW.js";
+import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-BKa5RrBl.js";
 import { i as listCoreToolSections, n as PROFILE_OPTIONS, o as resolveCoreToolProfiles } from "./tool-catalog-zFhF8IWN.js";
 import "./chrome-DzGCPEQK.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-OcOGSzmc.js";
@@ -34,7 +34,7 @@ import { t as safeEqualSecret } from "./secret-equal-D7A3Bol7.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-BYBKD8Kh.js";
 import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-DKbBt0us.js";
 import { a as resolveGatewayAuth, c as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, i as isLocalDirectRequest, l as createAuthRateLimiter, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH, t as assertGatewayAuthConfigured, u as normalizeRateLimitClientIp } from "./auth-Co2g3d8d.js";
-import { l as ensureGatewayStartupAuth, u as mergeGatewayTailscaleConfig } from "./server-context-LDDpCiyT.js";
+import { l as ensureGatewayStartupAuth, u as mergeGatewayTailscaleConfig } from "./server-context-DWxmyV-0.js";
 import { d as hasBinary } from "./frontmatter-f69paAeU.js";
 import { c as resolveBundledSkillsDir, i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-BeFcXCoN.js";
 import { n as assertNoPathAliasEscape } from "./path-alias-guards-DWh6tSaP.js";
@@ -68,7 +68,7 @@ import "./local-roots-jW0nhxVT.js";
 import { n as loadModelCatalog } from "./model-catalog-CjA5pRJF.js";
 import "./proxy-fetch-7LT9tml2.js";
 import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-BK5VYCE_.js";
-import { j as runGlobalGatewayStopSafely, k as getGlobalHookRunner, o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-BjVMpWfF.js";
+import { j as runGlobalGatewayStopSafely, k as getGlobalHookRunner, o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-Bn10XzRP.js";
 import { r as isRestartEnabled } from "./commands-C6OLhl3n.js";
 import "./commands-registry-CVzTBX51.js";
 import { $ as validateNodePairApproveParams, $t as roleScopesAllow, A as validateCronStatusParams, At as validateWizardStartParams, B as validateExecApprovalsGetParams, C as validateConfigSetParams, Ct as validateToolsCatalogParams, D as validateCronRemoveParams, Dt as validateWebLoginWaitParams, E as validateCronListParams, Et as validateWebLoginStartParams, F as validateDevicePairRemoveParams, G as validateModelsAuthSetParams, Gt as rejectDevicePairing, H as validateExecApprovalsNodeSetParams, Ht as ensureDeviceToken, I as validateDeviceTokenRevokeParams, It as parseSessionLabel, J as validateNodeDescribeParams, Jt as revokeDeviceToken, K as validateModelsListParams, Kt as removePairedDevice, L as validateDeviceTokenRotateParams, Lt as buildDeviceAuthPayload, M as validateDevicePairApproveParams, Mt as PROTOCOL_VERSION, N as validateDevicePairListParams, Nt as ErrorCodes, O as validateCronRunParams, Ot as validateWizardCancelParams, P as validateDevicePairRejectParams, Pt as errorShape, Q as validateNodeListParams, Qt as verifyDeviceToken, R as validateExecApprovalRequestParams, Rt as buildDeviceAuthPayloadV3, S as validateConfigSchemaParams, St as validateTalkModeParams, T as validateCronAddParams, Tt as validateWakeParams, U as validateExecApprovalsSetParams, Ut as getPairedDevice, V as validateExecApprovalsNodeGetParams, Vt as approveDevicePairing, W as validateLogsTailParams, Wt as listDevicePairing, X as validateNodeInvokeParams, Xt as summarizeDeviceTokens, Y as validateNodeEventParams, Yt as rotateDeviceToken, Z as validateNodeInvokeResultParams, Zt as updatePairedDeviceMetadata, _ as validateChatInjectParams, _t as validateSkillsBinsParams, a as validateAgentWaitParams, at as validatePollParams, b as validateConfigGetParams, bt as validateSkillsUpdateParams, c as validateAgentsFilesGetParams, ct as validateSendParams, d as validateAgentsListParams, dt as validateSessionsListParams, et as validateNodePairListParams, f as validateAgentsUpdateParams, ft as validateSessionsPatchParams, g as validateChatHistoryParams, gt as validateSessionsUsageParams, h as validateChatAbortParams, ht as validateSessionsResolveParams, i as validateAgentParams, in as verifyDeviceSignature, it as validateNodeRenameParams, j as validateCronUpdateParams, jt as validateWizardStatusParams, k as validateCronRunsParams, kt as validateWizardNextParams, l as validateAgentsFilesListParams, lt as validateSessionsCompactParams, m as validateChannelsStatusParams, mt as validateSessionsResetParams, n as formatValidationErrors, nt as validateNodePairRequestParams, o as validateAgentsCreateParams, ot as validatePushTestParams, p as validateChannelsLogoutParams, pt as validateSessionsPreviewParams, q as validateModelsVerifyParams, qt as requestDevicePairing, r as validateAgentIdentityParams, rn as normalizeDevicePublicKeyBase64Url, rt as validateNodePairVerifyParams, s as validateAgentsDeleteParams, st as validateRequestFrame, tn as deriveDeviceIdFromPublicKey, tt as validateNodePairRejectParams, u as validateAgentsFilesSetParams, ut as validateSessionsDeleteParams, v as validateChatSendParams, vt as validateSkillsInstallParams, w as validateConnectParams, wt as validateUpdateRunParams, x as validateConfigPatchParams, xt as validateTalkConfigParams, y as validateConfigApplyParams, yt as validateSkillsStatusParams, z as validateExecApprovalResolveParams, zt as normalizeDeviceMetadataForAuth } from "./client-B91adiXh.js";
@@ -84,7 +84,7 @@ import { _ as matchSystemRunApprovalBinding, g as buildSystemRunApprovalBinding,
 import { a as ToolInputError } from "./target-errors-B1cYmIjq.js";
 import { n as resolveSystemRunCommand } from "./system-run-command-C3OIMtEu.js";
 import "./diagnostic-session-state-DtDi2x-e.js";
-import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-B1c4PuYt.js";
+import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-tSH4Tex_.js";
 import { d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, m as isDiagnosticsEnabled } from "./diagnostic-DRPetA8l.js";
 import { d as loadCronStore, f as resolveCronStorePath, p as saveCronStore } from "./send-SZBhACLn.js";
 import "./model-FnrgCVyS.js";
@@ -101,7 +101,7 @@ import "./outbound-attachment-CZh4VjhT.js";
 import "./delivery-queue-EvfYzqtX.js";
 import "./send-BntubUtK.js";
 import "./resolve-route-Ck23oGqS.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-BNhf9xbt.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-eyXj0EY5.js";
 import { t as getChannelActivity } from "./channel-activity-C--BGtPd.js";
 import "./tables-C9_oCtRN.js";
 import "./proxy-D8dYXgWo.js";
@@ -121,54 +121,55 @@ import { t as formatDocsLink } from "./links-CM7pO4C5.js";
 import { n as runCommandWithRuntime } from "./cli-utils-BKqG4ZT-.js";
 import { t as formatHelpExamples } from "./help-format-DUJs-8Xi.js";
 import { n as withProgress } from "./progress-86COuAnG.js";
-import "./server-lifecycle-CkyOrO43.js";
+import "./server-lifecycle-B7aXKxY3.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-C-R8Eo-4.js";
-import { i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-_K4bnQDH.js";
-import { t as ensureOpenClawCliOnPath } from "./path-env-C0LQFNBL.js";
-import "./runtime-guard-8RRYRGZL.js";
-import { t as forceFreePortAndWait } from "./ports-CF46wKRL.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-CU7YkOva.js";
-import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-DYhQ651h.js";
-import { n as inheritOptionFromParent } from "./command-options-DEPpN8NK.js";
-import { t as WizardCancelledError } from "./prompts-ULYkmWPj.js";
-import { t as resolveChannelDefaultAccountId } from "./helpers-DtWQVY6N.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-BVV8yXyh.js";
-import { t as isWithinDir } from "./path-safety-CKvIjU2Y.js";
-import { t as assertCanonicalPathWithinBase } from "./install-safe-path-DlUmof-g.js";
-import "./skill-scanner-CNK-3AZh.js";
-import { n as formatConfigIssueLines } from "./issue-format-BvgMk0hd.js";
-import { t as buildChannelAccountSnapshot } from "./status-BwiJpA37.js";
-import "./channels-status-issues-DXY75b-O.js";
-import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-B_ApSuEH.js";
-import "./daemon-install-helpers-B_sQ4Mox.js";
-import "./systemd-C177Z-Zv.js";
-import "./service-B5Fw5CQO.js";
-import "./lifecycle-core-nY3ix4oA.js";
-import "./systemd-hints-Clojvvvd.js";
-import { t as parsePort$1 } from "./parse-port-CLydiXaJ.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-D_QKAnN1.js";
-import "./diagnostics-BCFJKFDe.js";
-import "./table-MuA2LQfi.js";
-import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-Bd2x2P2m.js";
-import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-BTBgx0-C.js";
-import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-R36cTwJM.js";
-import { t as discoverGatewayBeacons } from "./bonjour-discovery-1e3NxSsT.js";
-import { n as getStatusSummary, r as pickGatewaySelfPresence } from "./status-B4v5QI5X.js";
-import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines, u as isCronSystemEvent } from "./health-CGGup1fo.js";
-import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-DjJ-kYlx.js";
-import { o as isBitseekBuild } from "./status.update-DIamQqHr.js";
-import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-D0zX-Gup.js";
-import { i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-DNtFeWu6.js";
-import { t as runOnboardingWizard } from "./onboarding-H5cLNUFG.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-DeCoFR7G.js";
-import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-D953PUOL.js";
-import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-B5h8i-3t.js";
-import "./node-service-DoxDrTkh.js";
-import "./constants-CrJmimS2.js";
-import "./shared-Brai19f9.js";
-import { d as verifyOpenAiCompatibleModel } from "./onboard-custom.shared-CEUWEsKs.js";
-import { n as formatInstallFailureMessage, t as installSkill } from "./skills-install-BMPfx9IL.js";
-import { t as runGatewayUpdate } from "./update-runner-BA9B0S60.js";
+import "./constants-BJiQF5Ae.js";
+import "./context-window-guard-BNuaId5E.js";
+import { i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-BdDIMad6.js";
+import { t as ensureOpenClawCliOnPath } from "./path-env-DzEqwLCq.js";
+import "./runtime-guard-p6l4jDOj.js";
+import { t as forceFreePortAndWait } from "./ports-BL-FP2jP.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-BEq0_fOn.js";
+import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-DHq9RLRQ.js";
+import { n as inheritOptionFromParent } from "./command-options-D4YE45pL.js";
+import { t as WizardCancelledError } from "./prompts-iXdBMk3j.js";
+import { t as resolveChannelDefaultAccountId } from "./helpers-D0Q6sarx.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-BSY7Z6IC.js";
+import { t as isWithinDir } from "./path-safety-COhgvniC.js";
+import { t as assertCanonicalPathWithinBase } from "./install-safe-path-CSqVUjL8.js";
+import "./skill-scanner-CsmM5F4F.js";
+import { n as formatConfigIssueLines } from "./issue-format-rk9Vpcxd.js";
+import { t as buildChannelAccountSnapshot } from "./status-yrDGXYZM.js";
+import "./channels-status-issues-DeT1Znlx.js";
+import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-DCGL0k2M.js";
+import "./daemon-install-helpers-CMWYg4_W.js";
+import "./systemd-DJ5Red-Q.js";
+import "./service-DqxfCr8y.js";
+import "./lifecycle-core-Bqse41aA.js";
+import "./systemd-hints-D40Qx3hg.js";
+import { t as parsePort$1 } from "./parse-port-DEJJlpU0.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-RKWFtF-K.js";
+import "./diagnostics-BHQgZbuI.js";
+import "./table-DZBPnHSy.js";
+import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-D1fyqK-r.js";
+import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-BmSv3K8N.js";
+import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-1YVlVmk7.js";
+import { t as discoverGatewayBeacons } from "./bonjour-discovery-CtUQb94i.js";
+import { n as getStatusSummary, r as pickGatewaySelfPresence } from "./status-DjnNnvyr.js";
+import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines, u as isCronSystemEvent } from "./health-DmJq2Wph.js";
+import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-B_3g_YF0.js";
+import { o as isBitseekBuild } from "./status.update-HwSPC5ZX.js";
+import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-C6rIxLzo.js";
+import { i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-Rd7ooKB0.js";
+import { t as runOnboardingWizard } from "./onboarding-Wve1--YA.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-B_GGZO2Z.js";
+import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-mNwdQcKy.js";
+import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-BKUs_pS2.js";
+import "./node-service-6W3vqgVv.js";
+import "./shared-CgFPGTLU.js";
+import { d as verifyOpenAiCompatibleModel } from "./onboard-custom.shared-CBRRhb95.js";
+import { n as formatInstallFailureMessage, t as installSkill } from "./skills-install-B_Vda3dM.js";
+import { t as runGatewayUpdate } from "./update-runner-rrlmopJw.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-dKMB109Q.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import * as fsSync from "node:fs";
@@ -13610,7 +13611,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-BLz-kdvu.js");
+			const { handleNodeEvent } = await import("./server-node-events-BHkXD38g.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -14005,120 +14006,283 @@ const sendHandlers = {
 //#region src/agents/skills-market-catalog.ts
 const OFFICIAL_MARKET_CATALOG = [
 	{
-		id: "bnbchain-mcp-skill",
-		skillKey: "bnbchain-mcp-skill",
-		name: "BNB Chain MCP Toolkit",
-		summary: "Install and use BNB Chain MCP for blocks, transactions, contracts, token/NFT transfers, ERC-8004, and Greenfield operations.",
-		provider: "BNB Chain",
-		category: "infrastructure",
+		id: "xiaohongshu-mcp",
+		skillKey: "xiaohongshu-mcp",
+		name: "Xiaohongshu Automation",
+		summary: "Automate Xiaohongshu workflows for content operations and publishing tasks through a ClawHub skill.",
+		provider: "Borye",
+		category: "automation",
 		tags: [
-			"web3",
-			"bnb",
-			"bsc",
-			"opbnb",
-			"mcp",
-			"greenfield",
-			"erc-8004"
+			"xiaohongshu",
+			"automation",
+			"social",
+			"publishing",
+			"mcp"
 		],
-		sourceType: "local",
-		templateDir: "bnbchain-mcp-skill",
+		stars: 60,
+		downloads: 15840,
+		sourceType: "clawhub",
+		slug: "xiaohongshu-mcp",
 		official: true
 	},
 	{
-		id: "okx-dex-market",
-		skillKey: "okx-dex-market",
-		name: "OKX DEX Market Data",
-		summary: "Fetch real-time prices, candlesticks, trade history, and index prices across XLayer, Solana, Ethereum, Base, BSC, and more.",
-		provider: "OKX",
-		category: "onchain-data",
+		id: "github",
+		skillKey: "github",
+		name: "Github",
+		summary: "Work with GitHub repositories, issues, pull requests, and other developer workflows from ClawHub.",
+		provider: "steipete",
+		category: "developer-tools",
 		tags: [
-			"web3",
-			"okx",
-			"dex",
-			"price",
-			"candles",
-			"market",
-			"index"
+			"github",
+			"git",
+			"developer",
+			"issues",
+			"pull-requests"
 		],
-		sourceType: "local",
-		templateDir: "okx-dex-market",
+		stars: 323,
+		downloads: 99937,
+		sourceType: "clawhub",
+		slug: "github",
 		official: true
 	},
 	{
-		id: "okx-dex-token",
-		skillKey: "okx-dex-token",
-		name: "OKX Token Discovery",
-		summary: "Search tokens, inspect metadata, market cap, liquidity, rankings, and holder distribution across 20+ chains.",
-		provider: "OKX",
-		category: "onchain-data",
+		id: "openai-whisper",
+		skillKey: "openai-whisper",
+		name: "Openai Whisper",
+		summary: "Transcribe and process audio with Whisper via a ClawHub skill for speech-to-text workflows.",
+		provider: "steipete",
+		category: "audio-media",
+		tags: [
+			"audio",
+			"transcription",
+			"whisper",
+			"speech-to-text",
+			"media"
+		],
+		stars: 197,
+		downloads: 42056,
+		sourceType: "clawhub",
+		slug: "openai-whisper",
+		official: true
+	},
+	{
+		id: "skill-vetter",
+		skillKey: "skill-vetter",
+		name: "Skill Vetter",
+		summary: "Review and vet skills before adoption to help evaluate quality, fit, and readiness.",
+		provider: "spclaudehome",
+		category: "meta-security",
+		tags: [
+			"skills",
+			"review",
+			"vetting",
+			"quality",
+			"evaluation"
+		],
+		stars: 290,
+		downloads: 73729,
+		sourceType: "clawhub",
+		slug: "skill-vetter",
+		official: true
+	},
+	{
+		id: "gog",
+		skillKey: "gog",
+		name: "Gog",
+		summary: "Use Gog from ClawHub for developer and command-line workflows that benefit from fast utility tooling.",
+		provider: "steipete",
+		category: "developer-tools",
+		tags: [
+			"developer",
+			"cli",
+			"tooling",
+			"workflow",
+			"utility"
+		],
+		stars: 705,
+		downloads: 106425,
+		sourceType: "clawhub",
+		slug: "gog",
+		official: true
+	},
+	{
+		id: "openclaw-tavily-search",
+		skillKey: "openclaw-tavily-search",
+		name: "Tavily Web Search",
+		summary: "Search the web with Tavily through ClawHub for current information gathering and lightweight research.",
+		provider: "Jacky1n7",
+		category: "search-research",
 		tags: [
-			"web3",
-			"okx",
-			"token",
 			"search",
-			"market-cap",
-			"holders",
-			"ranking"
+			"web",
+			"research",
+			"tavily",
+			"current-events"
+		],
+		stars: 26,
+		downloads: 17437,
+		sourceType: "clawhub",
+		slug: "openclaw-tavily-search",
+		official: true
+	},
+	{
+		id: "summarize",
+		skillKey: "summarize",
+		name: "Summarize",
+		summary: "Summarize documents, pages, and other text content through a focused ClawHub skill.",
+		provider: "steipete",
+		category: "search-research",
+		tags: [
+			"summarization",
+			"text",
+			"research",
+			"documents",
+			"analysis"
 		],
-		sourceType: "local",
-		templateDir: "okx-dex-token",
+		stars: 542,
+		downloads: 139326,
+		sourceType: "clawhub",
+		slug: "summarize",
 		official: true
 	},
 	{
-		id: "okx-wallet-portfolio",
-		skillKey: "okx-wallet-portfolio",
-		name: "OKX Wallet Portfolio",
-		summary: "Check wallet total value, token holdings, and per-token balances across XLayer, Solana, Ethereum, Base, BSC, and more.",
-		provider: "OKX",
-		category: "wallet",
+		id: "skill-security-auditor",
+		skillKey: "skill-security-auditor",
+		name: "Skill Security Auditor",
+		summary: "Audit skills for security concerns and suspicious patterns before enabling them in production workflows.",
+		provider: "akhmittra",
+		category: "meta-security",
 		tags: [
-			"web3",
-			"okx",
-			"wallet",
-			"portfolio",
-			"balance",
-			"holdings"
+			"security",
+			"audit",
+			"skills",
+			"review",
+			"risk"
 		],
-		sourceType: "local",
-		templateDir: "okx-wallet-portfolio",
+		stars: 2,
+		downloads: 2547,
+		sourceType: "clawhub",
+		slug: "skill-security-auditor",
 		official: true
 	},
 	{
-		id: "okx-dex-swap",
-		skillKey: "okx-dex-swap",
-		name: "OKX DEX Swap Aggregator",
-		summary: "Get optimized swap routes and execution payloads using 500+ liquidity sources with slippage controls.",
-		provider: "OKX",
-		category: "defi",
+		id: "self-improving-agent",
+		skillKey: "self-improving-agent",
+		name: "Self Improving Agent",
+		summary: "Use a ClawHub agent focused on iterating on its own behavior and improving workflows over time.",
+		provider: "pskoett",
+		category: "meta-security",
 		tags: [
-			"web3",
-			"okx",
-			"dex",
-			"swap",
-			"routing",
-			"liquidity"
+			"agent",
+			"self-improvement",
+			"iteration",
+			"optimization",
+			"meta"
 		],
-		sourceType: "local",
-		templateDir: "okx-dex-swap",
+		stars: 1863,
+		downloads: 185770,
+		sourceType: "clawhub",
+		slug: "self-improving-agent",
 		official: true
 	},
 	{
-		id: "okx-onchain-gateway",
-		skillKey: "okx-onchain-gateway",
-		name: "OKX Onchain Gateway",
-		summary: "Estimate gas, simulate transactions, broadcast signed transactions, and track transaction orders on 20+ chains.",
-		provider: "OKX",
-		category: "infrastructure",
+		id: "find-skills",
+		skillKey: "find-skills",
+		name: "Find Skills",
+		summary: "Discover relevant ClawHub skills for a task so agents can expand capabilities on demand.",
+		provider: "JimLiuxinghai",
+		category: "meta-security",
 		tags: [
-			"web3",
-			"okx",
-			"transaction",
-			"gas",
-			"simulate",
-			"broadcast"
+			"skills",
+			"discovery",
+			"registry",
+			"clawhub",
+			"meta"
 		],
-		sourceType: "local",
-		templateDir: "okx-onchain-gateway",
+		stars: 766,
+		downloads: 181109,
+		sourceType: "clawhub",
+		slug: "find-skills",
+		official: true
+	},
+	{
+		id: "obsidian",
+		skillKey: "obsidian",
+		name: "Obsidian",
+		summary: "Work with Obsidian notes and knowledge-base content through a ClawHub integration skill.",
+		provider: "steipete",
+		category: "developer-tools",
+		tags: [
+			"obsidian",
+			"notes",
+			"knowledge-base",
+			"markdown",
+			"productivity"
+		],
+		stars: 187,
+		downloads: 47182,
+		sourceType: "clawhub",
+		slug: "obsidian",
+		official: true
+	},
+	{
+		id: "skill-creator-2",
+		skillKey: "skill-creator-2",
+		name: "Skill creator",
+		summary: "Create new skills with a ClawHub-assisted builder aimed at packaging and publishing reusable capabilities.",
+		provider: "yixinli867",
+		category: "meta-security",
+		tags: [
+			"skills",
+			"creator",
+			"builder",
+			"packaging",
+			"clawhub"
+		],
+		stars: 26,
+		downloads: 5116,
+		sourceType: "clawhub",
+		slug: "skill-creator-2",
+		official: true
+	},
+	{
+		id: "upload-post",
+		skillKey: "upload-post",
+		name: "Upload Post",
+		summary: "Upload and publish posts through a ClawHub automation skill for social and content workflows.",
+		provider: "victorcavero14",
+		category: "automation",
+		tags: [
+			"upload",
+			"post",
+			"publishing",
+			"social",
+			"automation"
+		],
+		stars: 35,
+		downloads: 6588,
+		sourceType: "clawhub",
+		slug: "upload-post",
+		official: true
+	},
+	{
+		id: "security-auditor",
+		skillKey: "security-auditor",
+		name: "Security Auditor",
+		summary: "Run security-oriented reviews and checks with a general-purpose ClawHub security auditing skill.",
+		provider: "jgarrison929",
+		category: "meta-security",
+		tags: [
+			"security",
+			"auditor",
+			"review",
+			"analysis",
+			"checks"
+		],
+		stars: 14,
+		downloads: 10926,
+		sourceType: "clawhub",
+		slug: "security-auditor",
 		official: true
 	}
 ];
@@ -14136,6 +14300,17 @@ function isCommandNotFoundResult(result) {
 	const output = `${result.stderr}\n${result.stdout}`.toLowerCase();
 	return output.includes("enoent") || output.includes("command not found") || output.includes("not recognized as an internal or external command");
 }
+async function runMarketInstallCommand(runCommand, argv, options) {
+	try {
+		return await runCommand(argv, options);
+	} catch (err) {
+		return {
+			code: null,
+			stdout: "",
+			stderr: err instanceof Error ? err.message : String(err)
+		};
+	}
+}
 async function installLocalMarketSkill(params) {
 	const templateDir = params.templateDir.trim();
 	if (hasPathTraversal(templateDir)) return {
@@ -14204,7 +14379,7 @@ async function installClawhubMarketSkill(params, deps) {
 	const workspaceDir = resolveUserPath(params.workspaceDir);
 	const timeoutMs = Math.min(Math.max(params.timeoutMs ?? 3e5, 1e3), 9e5);
 	const runCommand = deps?.runCommand ?? runCommandWithTimeout;
-	const first = await runCommand([
+	const first = await runMarketInstallCommand(runCommand, [
 		"clawhub",
 		"install",
 		slug
@@ -14220,7 +14395,7 @@ async function installClawhubMarketSkill(params, deps) {
 		ok: false,
 		message: `ClawHub install failed: ${formatInstallFailureMessage(first)}`
 	};
-	const fallback = await runCommand([
+	const fallback = await runMarketInstallCommand(runCommand, [
 		"npx",
 		"-y",
 		"clawhub",
@@ -16966,7 +17141,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.OPENCLAW_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.OPENCLAW_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./server-_jtA2MKi.js");
+	const mod = override ? await import(override) : await import("./server-Ct0J5VXf.js");
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -22863,7 +23038,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-EvfYzqtX.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-BjVMpWfF.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-Bn10XzRP.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),