@byokit/openclaw 0.9.0 → 0.10.0

package/dist/engine.js

@@ -2,12 +2,12 @@ import { spawn, spawnSync } from 'node:child_process';
 import { randomBytes, generateKeyPairSync, randomUUID } from 'node:crypto';
 import { closeSync, existsSync, mkdirSync, openSync, readFileSync, writeFileSync, copyFileSync, rmSync, realpathSync, statSync } from 'node:fs';
 import { createServer } from 'node:net';
-import { join, dirname } from 'node:path';
+import { basename, join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { setTimeout as delay } from 'node:timers/promises';
-import { AuthStore, AuthStoreUnreadableError } from "./auth-store.js";
+import { AuthStore, AuthStoreUnreadableError, AuthStoreSealSizeError } from "./auth-store.js";
 import { EngineAlreadyRunningError, pidAlive, StartedProcesses } from "./engine-status.js";
-import { EnginePatchError, atomic, prepareEngineSet, processStartTime, readPatchSet, verifyEngineSet } from "./engine-patches.js";
+import { EnginePatchError, atomic, prepareEngineSet, processStartTime, readPatchSet, sha256, verifyEngineSet } from "./engine-patches.js";
 import { ENGINE_VERSION } from "./constants.js";
 import { appendUsageBoot } from "./usage-boots.js";
 import { reconcileConfig, appRecoveryPrefixes } from "./config.js";
@@ -21,7 +21,11 @@ const putChanged = (path, data) => {
 };
 const supports = (list, value) => !list ||
     (!list.includes(`!${value}`) && (list.includes('any') || list.every(item => item.startsWith('!')) || list.includes(value)));
+// First failed check of the most recent installMatches call; retained with the npm facts in
+// <stateDir>/logs/engine-install-drift.json before the failed temp is deleted.
+let installDrift;
 function installMatches(dir) {
+    installDrift = undefined;
     const manifests = ['package.json', 'package-lock.json'].map(file => ({
         path: join(dir, file), shipped: readFileSync(join(kitDir, 'engine', file)),
     }));
@@ -29,24 +33,37 @@ function installMatches(dir) {
     // npm omits optional binaries for other platforms (including the other Linux libc).
     const report = process.platform === 'linux' ? process.report.getReport() : undefined;
     const libc = report?.header.glibcVersionRuntime ? 'glibc' : process.platform === 'linux' ? 'musl' : '';
+    let reading = 'package.json';
     try {
-        if (manifests.some(({ path, shipped }) => !readFileSync(path).equals(shipped)))
-            return false;
+        for (const { path, shipped } of manifests) {
+            const installed = readFileSync(path);
+            if (!installed.equals(shipped)) {
+                installDrift = { setDir: dir, check: 'root-manifest', path: basename(path), expected: sha256(shipped), actual: sha256(installed) };
+                return false;
+            }
+        }
         for (const [path, pkg] of Object.entries(lock.packages)) {
             if (!path)
                 continue; // The root manifest is checked byte for byte above.
             if (pkg.optional && (!supports(pkg.os, process.platform) || !supports(pkg.cpu, process.arch) || !supports(pkg.libc, libc)))
                 continue;
-            if (JSON.parse(readFileSync(join(dir, path, 'package.json'), 'utf8')).version !== pkg.version)
+            reading = `${path}/package.json`;
+            const version = JSON.parse(readFileSync(join(dir, path, 'package.json'), 'utf8')).version;
+            if (version !== pkg.version) {
+                installDrift = { setDir: dir, check: 'package-version', path, expected: pkg.version, actual: String(version) };
                 return false;
+            }
         }
         return true;
     }
-    catch {
+    catch (error) {
         // Missing or unreadable manifests and malformed installed package metadata need repair too.
+        installDrift = { setDir: dir, check: 'read', path: reading, readError: String(error.message).slice(0, 300) };
         return false;
     }
 }
+export const refusedOnly = (error) => { if (error instanceof AuthStoreSealSizeError)
+    return error; throw error; };
 export class Engine {
     root;
     bridgeSock;
@@ -77,7 +94,32 @@ export class Engine {
         this.paramPrefix = bridge.paramPrefix;
         this.authStore = new AuthStore({ root: this.root, stateDir: o.stateDir, engineDir: this.dir, seal: o.authSeal, log: o.log });
     }
-    state(phase, why, retryAt) { this.o.onState({ phase, ...(why ? { why } : {}), ...(retryAt ? { retryAt } : {}), ...(this.patchSet !== undefined ? { patchSet: this.patchSet } : {}) }); }
+    state(phase, why, retryAt, sealSize) { this.o.onState({ phase, ...(why ? { why } : {}), ...(retryAt ? { retryAt } : {}), ...(sealSize ? { sealSize } : {}), ...(this.patchSet !== undefined ? { patchSet: this.patchSet } : {}) }); }
+    // Retained at <stateDir>/logs/engine-install-drift.json (overwritten per failure) after the failed
+    // temporary set is deleted: the first failed check, the npm identity and the npm stderr tail.
+    // Bounded fields, no environment values or secrets; diagnostics never mask the failure they describe.
+    retainInstallDiagnostics(error, npmPath, npmStderrTail) {
+        try {
+            const npm = spawnSync(npmPath, ['--version'], { encoding: 'utf8', timeout: 5000 });
+            const drift = installDrift;
+            writeFileSync(join(this.o.stateDir, 'logs', 'engine-install-drift.json'), JSON.stringify({
+                at: new Date().toISOString(),
+                failedDir: error.file ?? null,
+                firstFailedCheck: drift && drift.setDir === error.file
+                    ? { check: drift.check, path: drift.path, expected: drift.expected ?? null, actual: drift.actual ?? null, readError: drift.readError ?? null }
+                    : null,
+                npm: { path: npmPath, version: npm.status === 0 && npm.stdout ? npm.stdout.trim().slice(0, 100) : null },
+                npmStderrTail: npmStderrTail.slice(0, 500),
+            }), { mode: 0o600 });
+        }
+        catch { /* diagnostics must never mask the failure being diagnosed */ }
+    }
+    exitedState(refused) {
+        if (refused instanceof AuthStoreSealSizeError)
+            this.state('failed', 'auth-store-seal-size', undefined, { size: refused.size, cap: refused.cap });
+        else
+            this.state('failed', 'exited');
+    }
     get entry() {
         if (this.o.spawnEngine && !this.setDir)
             throw new EnginePatchError('spec', 'engine-set');
@@ -104,6 +146,8 @@ export class Engine {
             }
             if (error instanceof AuthStoreUnreadableError)
                 this.state('failed', 'auth-store-unreadable');
+            if (error instanceof AuthStoreSealSizeError)
+                this.exitedState(error);
             throw error;
         });
         this.prepared = pending;
@@ -129,12 +173,14 @@ export class Engine {
         if (this.o.spawnEngine) {
             const lock = JSON.parse(readFileSync(join(kitDir, 'engine/package-lock.json'), 'utf8'));
             const patches = readPatchSet(join(kitDir, 'engine/patches.json'), ENGINE_VERSION, lock.packages['node_modules/openclaw'].integrity);
+            const npmPath = this.o.npmPath ?? 'npm';
+            let npmStderrTail = '';
             const install = async (dir) => {
                 this.state('installing');
                 for (const f of ['package.json', 'package-lock.json'])
                     copyFileSync(join(kitDir, 'engine', f), join(dir, f));
                 await new Promise((resolve, reject) => {
-                    const child = spawn(this.o.npmPath ?? 'npm', ['ci', '--ignore-scripts', '--no-audit', '--no-fund', '--prefix', dir], {
+                    const child = spawn(npmPath, ['ci', '--ignore-scripts', '--no-audit', '--no-fund', '--prefix', dir], {
                         env: { PATH: process.env.PATH ?? '/usr/bin:/bin', HOME: join(this.root, 'install-home'), npm_config_cache: join(this.root, 'npm-cache'), OPENCLAW_DISABLE_BUNDLED_PLUGIN_POSTINSTALL: '1' },
                         stdio: ['ignore', 'ignore', 'pipe'],
                     });
@@ -142,10 +188,11 @@ export class Engine {
                     this.started.add(child);
                     child.stderr.on('data', chunk => { stderr = (stderr + chunk).slice(-500); });
                     const timer = setTimeout(() => { expired = true; child.kill('SIGKILL'); }, 300_000);
-                    child.once('error', error => { clearTimeout(timer); this.started.forget(child); reject(error); });
+                    child.once('error', error => { clearTimeout(timer); this.started.forget(child); npmStderrTail = stderr; reject(error); });
                     child.once('exit', code => {
                         clearTimeout(timer);
                         this.started.forget(child);
+                        npmStderrTail = stderr;
                         if (code === 0 && !expired)
                             resolve();
                         else {
@@ -154,8 +201,44 @@ export class Engine {
                         }
                     });
                 });
+                // Newer pins ship a pending package-lifecycle marker that the gateway completes on first boot by
+                // running its own scripts, which needs a writable tree. Complete it here, while the set is still
+                // writable, with bundled plugin installs disabled: on a fresh install the prune is a no-op and
+                // upstream's own script removes the marker. Pins without the script (pre-8.33) skip this.
+                const lifecycle = join(dir, 'node_modules/openclaw/scripts/postinstall-bundled-plugins.mjs');
+                if (!existsSync(lifecycle))
+                    return;
+                await new Promise((resolve, reject) => {
+                    const child = spawn(process.execPath, [lifecycle], {
+                        env: { PATH: process.env.PATH ?? '/usr/bin:/bin', HOME: join(this.root, 'install-home'), npm_config_cache: join(this.root, 'npm-cache'), OPENCLAW_DISABLE_BUNDLED_PLUGIN_POSTINSTALL: '1' },
+                        stdio: ['ignore', 'ignore', 'pipe'],
+                    });
+                    let stderr = '', expired = false;
+                    this.started.add(child);
+                    child.stderr.on('data', chunk => { stderr = (stderr + chunk).slice(-500); });
+                    const timer = setTimeout(() => { expired = true; child.kill('SIGKILL'); }, 120_000);
+                    child.once('error', error => { clearTimeout(timer); this.started.forget(child); reject(error); });
+                    child.once('exit', code => {
+                        clearTimeout(timer);
+                        this.started.forget(child);
+                        if (code === 0 && !expired)
+                            resolve();
+                        else {
+                            this.state('failed', 'install');
+                            reject(new Error(`engine lifecycle: ${expired ? 'timeout' : stderr}`));
+                        }
+                    });
+                });
             };
-            this.setDir = await prepareEngineSet(this.dir, patches, install, installMatches);
+            try {
+                this.setDir = await prepareEngineSet(this.dir, patches, install, installMatches);
+            }
+            catch (error) {
+                // The failed temp is already deleted; keep its diagnosis for the next natural failure.
+                if (error instanceof EnginePatchError && (error.cause === 'drift-after-build' || error.cause === 'write'))
+                    this.retainInstallDiagnostics(error, npmPath, npmStderrTail);
+                throw error;
+            }
             this.wantedSet = patches;
             atomic(join(this.root, 'engine-set'), this.setDir);
             this.patchSet = patches.id;
@@ -183,8 +266,8 @@ export class Engine {
         const path = join(this.root, 'openclaw.json');
         const saved = existsSync(path) ? JSON.parse(readFileSync(path, 'utf8')) : undefined;
         const config = reconcileConfig(saved, { root: this.root, stateDir: this.o.stateDir, port: this.port, pluginId: this.o.pluginId,
-            pluginDir, policyPath: join(kitDir, 'policy', 'policy.mjs'), app: this.o.config, installPolicy: this.o.installPolicy,
-            browser: this.o.browserConfig?.() });
+            pluginDir, policyPath: join(kitDir, 'policy', 'policy.mjs'), app: this.o.config, offered: this.o.offered,
+            installPolicy: this.o.installPolicy, browser: this.o.browserConfig?.() });
         putChanged(path, JSON.stringify(config, null, 2) + '\n');
     }
     doctorContext() {
@@ -332,7 +415,8 @@ export class Engine {
         const fd = openSync(join(this.o.stateDir, 'logs', 'openclaw.log'), 'a', 0o600);
         const usageDir = join(this.root, 'usage'), bootId = randomUUID();
         try {
-            const accounted = this.wantedSet.files.some(file => file.path === 'dist/experience-review-default-6DPIIJds.js');
+            // The bundle hash in the Workshop file name changes per release; the stable prefix names the seam.
+            const accounted = this.wantedSet.files.some(file => file.path.startsWith('dist/experience-review-default-') && file.path.endsWith('.js'));
             if (accounted) {
                 appendUsageBoot(usageDir, { bootId, startedAt: Date.now() });
                 env.BYOKIT_ENGINE_USAGE_LEDGER = usageDir;
@@ -365,7 +449,7 @@ export class Engine {
             if (this.child !== child || this.stopping)
                 return;
             this.child = undefined;
-            void this.authStore.stop().then(() => { this.state('failed', 'exited'); this.o.onExit(null); }, () => this.state('failed', 'exited'));
+            void this.authStore.stop().then(() => undefined, refusedOnly).then((refused) => { this.exitedState(refused); this.o.onExit(null); }, () => this.state('failed', 'exited'));
         });
         if (!child.pid) {
             this.state('failed', 'exited');
@@ -382,19 +466,24 @@ export class Engine {
             this.child = undefined;
             this.removeOwnedPid(child.pid);
             void (async () => {
-                await this.authStore.stop();
+                let refused = await this.authStore.stop().then(() => undefined, refusedOnly);
                 if (this.stopping)
                     return;
-                if (code === 78 && !this.repaired) {
+                if (!refused && code === 78 && !this.repaired) {
                     this.repaired = true;
                     this.state('repairing');
-                    const result = await this.withAuthStore(async () => this.doctor(60_000));
-                    if (result.status === 0 && !this.stopping) {
-                        await this.start();
-                        return;
+                    try {
+                        const result = await this.withAuthStore(async () => this.doctor(60_000));
+                        if (result.status === 0 && !this.stopping) {
+                            await this.start();
+                            return;
+                        }
+                    }
+                    catch (error) {
+                        refused = refusedOnly(error);
                     }
                 }
-                this.state('failed', 'exited');
+                this.exitedState(refused);
                 this.o.onExit(code);
             })().catch(() => this.state('failed', 'exited'));
         });

package/dist/generated/methods.d.ts

@@ -1,4 +1,4 @@
-import type { AgentWaitParams, AgentsCreateParams, AgentsCreateResult, AgentsDeleteParams, AgentsDeleteResult, AgentsFilesGetParams, AgentsFilesGetResult, AgentsFilesListParams, AgentsFilesListResult, AgentsFilesSetParams, AgentsFilesSetResult, AgentsListParams, AgentsListResult, AgentsUpdateParams, AgentsUpdateResult, AgentsWorkspaceGetParams, AgentsWorkspaceGetResult, AgentsWorkspaceListParams, AgentsWorkspaceListResult, ApprovalGetParams, ApprovalGetResult, ApprovalHistoryParams, ApprovalHistoryResult, ApprovalResolveParams, ApprovalResolveResult, ArtifactsDownloadParams, ArtifactsDownloadResult, ArtifactsGetParams, ArtifactsGetResult, ArtifactsListParams, ArtifactsListResult, AuditActivityListParams, AuditActivityListResult, AuditListParams, AuditListResult, AuditRunInspectResult, BoardDataReadParams, BoardGetParams, BoardPromptAuthorizeParams, BoardUpdateParams, BoardWidgetAppViewParams, BoardWidgetAppViewResult, BoardWidgetGrantParams, BoardWidgetPutParams, BoardWidgetPutResult, ChannelsLogoutParams, ChannelsPairingApproveParams, ChannelsPairingApproveResult, ChannelsPairingDismissParams, ChannelsPairingDismissResult, ChannelsPairingListParams, ChannelsPairingListResult, ChannelsStartParams, ChannelsStatusParams, ChannelsStatusResult, ChannelsStopParams, ChatAbortParams, ChatHistoryParams, ChatInjectParams, ChatMessageGetResult, ChatMetadataParams, ChatToolTitlesParams, ChatToolTitlesResult, CommandsListParams, CommandsListResult, ConfigApplyParams, ConfigGetParams, ConfigPatchParams, ConfigSchemaLookupParams, ConfigSchemaLookupResult, ConfigSchemaParams, ConfigSetParams, ConnectParams, ConversationListParams, ConversationListResult, ConversationSendParams, ConversationSendResult, ConversationTurnCancelParams, ConversationTurnCancelResult, ConversationTurnParams, CronAddParams, CronListParams, CronRunsParams, CronScratchGetResult, CronStatusParams, DesktopLaunchParams, DesktopObserveResult, DevicePairApproveParams, DevicePairListParams, DevicePairRejectParams, DevicePairRemoveParams, DevicePairRenameParams, DevicePairSetupCodeParams, DevicePairSetupCodeResult, DevicePairSetupStatusParams, DevicePairSetupStatusResult, DeviceTokenRevokeParams, DeviceTokenRotateParams, DeviceTokenRotateResult, EnvironmentsCreateParams, EnvironmentsCreateResult, EnvironmentsDestroyParams, EnvironmentsDestroyResult, EnvironmentsListParams, EnvironmentsListResult, EnvironmentsStatusParams, EnvironmentsStatusResult, ExecApprovalGetParams, ExecApprovalGrantsListParams, ExecApprovalGrantsListResult, ExecApprovalGrantsRevokeParams, ExecApprovalGrantsRevokeResult, ExecApprovalRequestParams, ExecApprovalResolveParams, ExecApprovalsGetParams, ExecApprovalsNodeGetParams, ExecApprovalsSetParams, FsListDirParams, FsListDirResult, GatewaySuspendPrepareParams, GatewaySuspendResumeParams, GatewaySuspendResumeResult, GatewaySuspendStatusParams, HooksStatusParams, LogsTailParams, LogsTailResult, MessageActionParams, MigrationsMemoryApplyResult, MigrationsMemoryPlanResult, ModelsAuthLogoutParams, ModelsAuthStatusParams, ModelsListParams, ModelsListResult, ModelsProbeParams, ModelsProbeResult, NodeDescribeParams, NodeEventParams, NodeEventResult, NodeInvokeParams, NodeInvokeProgressParams, NodeInvokeResultParams, NodeListParams, NodePairApproveParams, NodePairListParams, NodePairRejectParams, NodePairRemoveParams, NodePendingAckParams, NodePendingDrainParams, NodePendingDrainResult, NodePendingEnqueueParams, NodePendingEnqueueResult, NodePluginToolsUpdateParams, NodeRenameParams, NodeSkillsUpdateParams, PluginApprovalRequestParams, PluginApprovalResolveParams, PluginsInspectParams, PluginsInspectResult, PluginsInstallResult, PluginsListParams, PluginsListResult, PluginsRefreshParams, PluginsRefreshResult, PluginsSearchParams, PluginsSearchResult, PluginsSessionActionParams, PluginsSetEnabledParams, PluginsSetEnabledResult, PluginsUiDescriptorsParams, PluginsUiDescriptorsResult, PluginsUninstallParams, PluginsUninstallResult, PollParams, PortalCloseParams, PortalCloseResult, PortalListParams, PortalListResult, PortalOpenParams, PortalOpenResult, ProgressCardGetParams, ProgressCardGetResult, ProgressCardPutParams, ProgressCardPutResult, ProjectsAddParams, ProjectsAddResult, ProjectsListParams, ProjectsListResult, ProjectsRegisterParams, ProjectsRegisterResult, ProjectsRemoveParams, ProjectsRemoveResult, ProjectsSearchRemoteParams, ProjectsSearchRemoteResult, PushTestParams, PushTestResult, QuestionGetParams, QuestionGetResult, QuestionListParams, QuestionListResult, QuestionRequestParams, QuestionRequestResult, QuestionWaitAnswerParams, SecretsResolveParams, SecretsResolveResult, SecretsStoreDeleteParams, SecretsStoreListResult, SecretsStoreSetParams, SessionDiscussionInfoParams, SessionDiscussionInfoResult, SessionDiscussionOpenParams, SessionDiscussionOpenResult, SessionMemberAddParams, SessionMemberRemoveParams, SessionMembersListEvidenceResult, SessionMembersListParams, SessionMembersListResult, SessionSuggestionsAddParams, SessionSuggestionsAddResult, SessionSuggestionsListParams, SessionSuggestionsListResult, SessionSuggestionsResolveParams, SessionSuggestionsResolveResult, SessionTypingParams, SessionTypingResult, SessionVisibilitySetParams, SessionVisibilitySetResult, SessionsAbortParams, SessionsAssignOwnerParams, SessionsAssignOwnerResult, SessionsBranchesListParams, SessionsBranchesListResult, SessionsBranchesSwitchParams, SessionsBranchesSwitchResult, SessionsCatalogArchiveParams, SessionsCatalogArchiveResult, SessionsCatalogContinueParams, SessionsCatalogContinueResult, SessionsCatalogListParams, SessionsCatalogListResult, SessionsCatalogReadParams, SessionsCatalogReadResult, SessionsCatalogStartTerminalParams, SessionsCatalogStartTerminalResult, SessionsCleanupParams, SessionsCompactParams, SessionsCompactionBranchParams, SessionsCompactionBranchResult, SessionsCompactionListParams, SessionsCompactionListResult, SessionsCompactionRestoreParams, SessionsCompactionRestoreResult, SessionsCompanionAskParams, SessionsCompanionAskResult, SessionsCompanionResetParams, SessionsCompanionResetResult, SessionsCompanionStateParams, SessionsCompanionStateResult, SessionsCreateParams, SessionsCreateResult, SessionsDeleteParams, SessionsDeleteResult, SessionsDescribeParams, SessionsDiffParams, SessionsDiffResult, SessionsDispatchResult, SessionsFilesGetParams, SessionsFilesGetResult, SessionsFilesListParams, SessionsFilesListResult, SessionsFilesRevealParams, SessionsFilesRevealResult, SessionsFilesSetParams, SessionsFilesSetResult, SessionsForkParams, SessionsForkResult, SessionsGoalClearParams, SessionsGroupsDefaultsParams, SessionsGroupsDefaultsResult, SessionsGroupsDeleteParams, SessionsGroupsListParams, SessionsGroupsListResult, SessionsGroupsPutParams, SessionsGroupsRenameParams, SessionsGroupsUpdateParams, SessionsGroupsUpdateResult, SessionsListParams, SessionsMessagesSubscribeParams, SessionsMessagesUnsubscribeParams, SessionsMoveParams, SessionsMoveResult, SessionsObserverVisibilityParams, SessionsObserverVisibilityResult, SessionsPatchManyParams, SessionsPatchManyResult, SessionsPatchParams, SessionsPatchResult, SessionsPluginPatchParams, SessionsPluginPatchResult, SessionsPreviewParams, SessionsReclaimParams, SessionsReclaimResult, SessionsRecoverParams, SessionsRecoverResult, SessionsResetParams, SessionsResolveParams, SessionsRewindParams, SessionsRewindResult, SessionsSearchParams, SessionsSearchResult, SessionsSendParams, SessionsUsageParams, SkillsBinsParams, SkillsBinsResult, SkillsCuratorStatusParams, SkillsCuratorStatusResult, SkillsDetailParams, SkillsDetailResult, SkillsProposalActionParams, SkillsProposalCreateParams, SkillsProposalDecisionParams, SkillsProposalEvaluateParams, SkillsProposalEvaluateResult, SkillsProposalEventsListParams, SkillsProposalEventsListResult, SkillsProposalHistoryScanParams, SkillsProposalHistoryScanResult, SkillsProposalHistoryStatusParams, SkillsProposalInspectParams, SkillsProposalInspectResult, SkillsProposalRequestRevisionParams, SkillsProposalRequestRevisionResult, SkillsProposalReviseParams, SkillsProposalUpdateParams, SkillsProposalsListParams, SkillsProposalsListResult, SkillsSearchParams, SkillsSearchResult, SkillsSecurityVerdictsParams, SkillsSecurityVerdictsResult, SkillsSkillCardParams, SkillsSkillCardResult, SkillsStatusParams, SkillsUploadBeginParams, SkillsUploadChunkParams, SkillsUploadCommitParams, SystemAgentChatHistoryParams, SystemAgentChatHistoryResult, SystemAgentChatParams, SystemAgentChatResult, SystemAgentSetupActivateParams, SystemAgentSetupActivateResult, SystemAgentSetupAuthStartParams, SystemAgentSetupAuthStartResult, SystemAgentSetupDetectParams, SystemAgentSetupDetectResult, SystemAgentSetupVerifyParams, SystemChangesListParams, SystemChangesListResult, SystemInfoParams, SystemInfoResult, TalkCatalogParams, TalkCatalogResult, TalkClientCloseParams, TalkClientCreateParams, TalkClientSteerParams, TalkClientToolCallParams, TalkClientToolCallResult, TalkClientTranscriptParams, TalkConfigParams, TalkConfigResult, TalkModeParams, TalkSessionAcknowledgeMarkParams, TalkSessionAppendAudioParams, TalkSessionCancelOutputParams, TalkSessionCancelOutputResult, TalkSessionCloseParams, TalkSessionCreateParams, TalkSessionCreateResult, TalkSessionSteerParams, TalkSessionSubmitToolResultParams, TalkSpeakParams, TalkSpeakResult, TaskSuggestionsAcceptParams, TaskSuggestionsAcceptResult, TaskSuggestionsCreateParams, TaskSuggestionsCreateResult, TaskSuggestionsDismissParams, TaskSuggestionsDismissResult, TaskSuggestionsListParams, TaskSuggestionsListResult, TasksCancelParams, TasksCancelResult, TasksGetParams, TasksGetResult, TasksListParams, TasksListResult, TerminalAttachParams, TerminalAttachResult, TerminalCloseParams, TerminalInputParams, TerminalListResult, TerminalOpenParams, TerminalOpenResult, TerminalResizeParams, TerminalUploadParams, TerminalUploadResult, ToolsCatalogParams, ToolsCatalogResult, ToolsEffectiveParams, ToolsEffectiveResult, ToolsInvokeParams, ToolsInvokeResult, TtsSpeakParams, TtsSpeakResult, UiCommandParams, UiCommandResult, UpdateHoldParams, UpdateHoldResult, UpdateRunParams, UpdateStatusParams, UpdateStatusResult, UsersLinkEmailParams, UsersLinkEmailResult, UsersListParams, UsersListResult, UsersPrefsGetParams, UsersPrefsGetResult, UsersPrefsSetParams, UsersPrefsSetResult, UsersSelfParams, UsersSelfResult, UsersSetAvatarParams, UsersSetAvatarResult, UsersSetDisplayNameParams, UsersSetDisplayNameResult, UsersSetRoleParams, UsersSetRoleResult, WakeParams, WebLoginStartParams, WebLoginWaitParams, WebPushTestParams, WizardCancelParams, WizardNextParams, WizardNextResult, WizardStartParams, WizardStartResult, WizardStatusParams, WizardStatusResult, WorkerDesktopLaunchParams, WorkerDesktopLaunchResult, WorkerDesktopObserveParams, WorkerDesktopObserveResult, WorktreesBranchesParams, WorktreesBranchesResult, WorktreesCreateParams, WorktreesGcParams, WorktreesGcResult, WorktreesListParams, WorktreesListResult, WorktreesRemoveParams, WorktreesRemoveResult, WorktreesRestoreParams } from '@openclaw/gateway-protocol';
+import type { AgentWaitParams, AgentsCreateParams, AgentsCreateResult, AgentsDeleteParams, AgentsDeleteResult, AgentsFilesGetParams, AgentsFilesGetResult, AgentsFilesListParams, AgentsFilesListResult, AgentsFilesSetParams, AgentsFilesSetResult, AgentsListParams, AgentsListResult, AgentsUpdateParams, AgentsUpdateResult, AgentsWorkspaceGetParams, AgentsWorkspaceGetResult, AgentsWorkspaceListParams, AgentsWorkspaceListResult, ApprovalGetParams, ApprovalGetResult, ApprovalHistoryParams, ApprovalHistoryResult, ApprovalResolveParams, ApprovalResolveResult, ArtifactsDownloadParams, ArtifactsDownloadResult, ArtifactsGetParams, ArtifactsGetResult, ArtifactsListParams, ArtifactsListResult, AuditActivityListParams, AuditActivityListResult, AuditListParams, AuditListResult, AuditRunInspectResult, BoardDataReadParams, BoardGetParams, BoardPromptAuthorizeParams, BoardUpdateParams, BoardWidgetAppViewParams, BoardWidgetAppViewResult, BoardWidgetGrantParams, BoardWidgetPutParams, BoardWidgetPutResult, ChannelsLogoutParams, ChannelsPairingApproveParams, ChannelsPairingApproveResult, ChannelsPairingDismissParams, ChannelsPairingDismissResult, ChannelsPairingListParams, ChannelsPairingListResult, ChannelsStartParams, ChannelsStatusParams, ChannelsStatusResult, ChannelsStopParams, ChatAbortParams, ChatHistoryParams, ChatInjectParams, ChatMessageGetResult, ChatMetadataParams, ChatToolTitlesParams, ChatToolTitlesResult, CommandsListParams, CommandsListResult, ConfigApplyParams, ConfigGetParams, ConfigPatchParams, ConfigSchemaLookupParams, ConfigSchemaLookupResult, ConfigSchemaParams, ConfigSetParams, ConnectParams, ConversationListParams, ConversationListResult, ConversationSendParams, ConversationSendResult, ConversationTurnCancelParams, ConversationTurnCancelResult, ConversationTurnParams, CronAddParams, CronListParams, CronRunsParams, CronScratchGetResult, CronStatusParams, DesktopLaunchParams, DesktopObserveResult, DevicePairApproveParams, DevicePairListParams, DevicePairRejectParams, DevicePairRemoveParams, DevicePairRenameParams, DevicePairSetupCodeParams, DevicePairSetupCodeResult, DevicePairSetupStatusParams, DevicePairSetupStatusResult, DeviceTokenRevokeParams, DeviceTokenRotateParams, DeviceTokenRotateResult, EnvironmentsCreateParams, EnvironmentsCreateResult, EnvironmentsDestroyParams, EnvironmentsDestroyResult, EnvironmentsListParams, EnvironmentsListResult, EnvironmentsStatusParams, EnvironmentsStatusResult, ExecApprovalGetParams, ExecApprovalGrantsListParams, ExecApprovalGrantsListResult, ExecApprovalGrantsRevokeParams, ExecApprovalGrantsRevokeResult, ExecApprovalRequestParams, ExecApprovalResolveParams, ExecApprovalsGetParams, ExecApprovalsNodeGetParams, ExecApprovalsSetParams, FsListDirParams, FsListDirResult, GatewaySuspendPrepareParams, GatewaySuspendResumeParams, GatewaySuspendResumeResult, GatewaySuspendStatusParams, HooksStatusParams, LogsTailParams, LogsTailResult, MessageActionParams, MigrationsMemoryApplyResult, MigrationsMemoryPlanResult, ModelsAuthLogoutParams, ModelsAuthStatusParams, ModelsListParams, ModelsListResult, ModelsProbeParams, ModelsProbeResult, NodeDescribeParams, NodeEventParams, NodeEventResult, NodeInvokeParams, NodeInvokeProgressParams, NodeInvokeResultParams, NodeListParams, NodePairApproveParams, NodePairListParams, NodePairRejectParams, NodePairRemoveParams, NodePendingAckParams, NodePendingDrainParams, NodePendingDrainResult, NodePendingEnqueueParams, NodePendingEnqueueResult, NodePluginToolsUpdateParams, NodeRenameParams, NodeSkillsUpdateParams, PluginApprovalRequestParams, PluginApprovalResolveParams, PluginsInspectParams, PluginsInspectResult, PluginsInstallResult, PluginsListParams, PluginsListResult, PluginsRefreshParams, PluginsRefreshResult, PluginsSearchParams, PluginsSearchResult, PluginsSessionActionParams, PluginsSetEnabledParams, PluginsSetEnabledResult, PluginsUiDescriptorsParams, PluginsUiDescriptorsResult, PluginsUninstallParams, PluginsUninstallResult, PollParams, PortalCloseParams, PortalCloseResult, PortalListParams, PortalListResult, PortalOpenParams, PortalOpenResult, ProgressCardGetParams, ProgressCardGetResult, ProgressCardPutParams, ProgressCardPutResult, ProjectsAddParams, ProjectsAddResult, ProjectsListParams, ProjectsListResult, ProjectsRegisterParams, ProjectsRegisterResult, ProjectsRemoveParams, ProjectsRemoveResult, ProjectsSearchRemoteParams, ProjectsSearchRemoteResult, PushTestParams, PushTestResult, QuestionGetParams, QuestionGetResult, QuestionListParams, QuestionListResult, QuestionRequestParams, QuestionRequestResult, QuestionWaitAnswerParams, SecretsResolveParams, SecretsResolveResult, SecretsStoreDeleteParams, SecretsStoreListResult, SecretsStoreSetParams, SessionDiscussionInfoParams, SessionDiscussionInfoResult, SessionDiscussionOpenParams, SessionDiscussionOpenResult, SessionMemberAddParams, SessionMemberRemoveParams, SessionMembersListEvidenceResult, SessionMembersListParams, SessionMembersListResult, SessionSuggestionsAddParams, SessionSuggestionsAddResult, SessionSuggestionsListParams, SessionSuggestionsListResult, SessionSuggestionsResolveParams, SessionSuggestionsResolveResult, SessionTypingParams, SessionTypingResult, SessionVisibilitySetParams, SessionVisibilitySetResult, SessionsAbortParams, SessionsAssignOwnerParams, SessionsAssignOwnerResult, SessionsBranchesListParams, SessionsBranchesListResult, SessionsBranchesSwitchParams, SessionsBranchesSwitchResult, SessionsCatalogArchiveParams, SessionsCatalogArchiveResult, SessionsCatalogContinueParams, SessionsCatalogContinueResult, SessionsCatalogListParams, SessionsCatalogListResult, SessionsCatalogReadParams, SessionsCatalogReadResult, SessionsCatalogStartTerminalParams, SessionsCatalogStartTerminalResult, SessionsCleanupParams, SessionsCompactParams, SessionsCompactionBranchParams, SessionsCompactionBranchResult, SessionsCompactionListParams, SessionsCompactionListResult, SessionsCompactionRestoreParams, SessionsCompactionRestoreResult, SessionsCompanionAskParams, SessionsCompanionAskResult, SessionsCompanionResetParams, SessionsCompanionResetResult, SessionsCompanionStateParams, SessionsCompanionStateResult, SessionsCreateParams, SessionsCreateResult, SessionsDeleteParams, SessionsDeleteResult, SessionsDescribeParams, SessionsDiffParams, SessionsDiffResult, SessionsDispatchResult, SessionsFilesGetParams, SessionsFilesGetResult, SessionsFilesListParams, SessionsFilesListResult, SessionsFilesRevealParams, SessionsFilesRevealResult, SessionsFilesSetParams, SessionsFilesSetResult, SessionsForkParams, SessionsForkResult, SessionsGoalClearParams, SessionsGroupsDefaultsParams, SessionsGroupsDefaultsResult, SessionsGroupsDeleteParams, SessionsGroupsListParams, SessionsGroupsListResult, SessionsGroupsPutParams, SessionsGroupsRenameParams, SessionsGroupsUpdateParams, SessionsGroupsUpdateResult, SessionsListParams, SessionsMessagesSubscribeParams, SessionsMessagesUnsubscribeParams, SessionsMoveParams, SessionsMoveResult, SessionsObserverVisibilityParams, SessionsObserverVisibilityResult, SessionsPatchManyParams, SessionsPatchManyResult, SessionsPatchParams, SessionsPatchResult, SessionsPluginPatchParams, SessionsPluginPatchResult, SessionsPreviewParams, SessionsReclaimParams, SessionsReclaimResult, SessionsRecoverParams, SessionsRecoverResult, SessionsResetParams, SessionsResolveParams, SessionsRewindParams, SessionsRewindResult, SessionsSearchParams, SessionsSearchResult, SessionsSendParams, SessionsUsageParams, SkillsBinsParams, SkillsBinsResult, SkillsCuratorStatusParams, SkillsCuratorStatusResult, SkillsDetailParams, SkillsDetailResult, SkillsProposalActionParams, SkillsProposalCreateParams, SkillsProposalDecisionParams, SkillsProposalEvaluateParams, SkillsProposalEvaluateResult, SkillsProposalEventsListParams, SkillsProposalEventsListResult, SkillsProposalHistoryScanParams, SkillsProposalHistoryScanResult, SkillsProposalHistoryStatusParams, SkillsProposalInspectParams, SkillsProposalInspectResult, SkillsProposalRequestRevisionParams, SkillsProposalRequestRevisionResult, SkillsProposalReviseParams, SkillsProposalUpdateParams, SkillsProposalsListParams, SkillsProposalsListResult, SkillsSearchParams, SkillsSearchResult, SkillsSecurityVerdictsParams, SkillsSecurityVerdictsResult, SkillsSkillCardParams, SkillsSkillCardResult, SkillsStatusParams, SkillsUploadBeginParams, SkillsUploadChunkParams, SkillsUploadCommitParams, SystemAgentChatHistoryParams, SystemAgentChatHistoryResult, SystemAgentChatParams, SystemAgentChatResult, SystemAgentSetupActivateParams, SystemAgentSetupActivateResult, SystemAgentSetupActivateStartParams, SystemAgentSetupActivateStartResult, SystemAgentSetupAuthStartParams, SystemAgentSetupAuthStartResult, SystemAgentSetupDetectParams, SystemAgentSetupDetectResult, SystemAgentSetupVerifyParams, SystemChangesListParams, SystemChangesListResult, SystemInfoParams, SystemInfoResult, TalkCatalogParams, TalkCatalogResult, TalkClientCloseParams, TalkClientCreateParams, TalkClientSteerParams, TalkClientToolCallParams, TalkClientToolCallResult, TalkClientTranscriptParams, TalkConfigParams, TalkConfigResult, TalkModeParams, TalkSessionAcknowledgeMarkParams, TalkSessionAppendAudioParams, TalkSessionCancelOutputParams, TalkSessionCancelOutputResult, TalkSessionCloseParams, TalkSessionCreateParams, TalkSessionCreateResult, TalkSessionSteerParams, TalkSessionSubmitToolResultParams, TalkSpeakParams, TalkSpeakResult, TaskSuggestionsAcceptParams, TaskSuggestionsAcceptResult, TaskSuggestionsCreateParams, TaskSuggestionsCreateResult, TaskSuggestionsDismissParams, TaskSuggestionsDismissResult, TaskSuggestionsListParams, TaskSuggestionsListResult, TasksCancelParams, TasksCancelResult, TasksGetParams, TasksGetResult, TasksListParams, TasksListResult, TerminalAttachParams, TerminalAttachResult, TerminalCloseParams, TerminalInputParams, TerminalListResult, TerminalOpenParams, TerminalOpenResult, TerminalResizeParams, TerminalUploadParams, TerminalUploadResult, ToolsCatalogParams, ToolsCatalogResult, ToolsEffectiveParams, ToolsEffectiveResult, ToolsInvokeParams, ToolsInvokeResult, TtsSpeakParams, TtsSpeakResult, UiCommandParams, UiCommandResult, UpdateHoldParams, UpdateHoldResult, UpdateRunParams, UpdateStatusParams, UpdateStatusResult, UsersLinkEmailParams, UsersLinkEmailResult, UsersListParams, UsersListResult, UsersPrefsGetParams, UsersPrefsGetResult, UsersPrefsSetParams, UsersPrefsSetResult, UsersSelfParams, UsersSelfResult, UsersSetAvatarParams, UsersSetAvatarResult, UsersSetDisplayNameParams, UsersSetDisplayNameResult, UsersSetRoleParams, UsersSetRoleResult, WakeParams, WebLoginStartParams, WebLoginWaitParams, WebPushTestParams, WizardCancelParams, WizardNextParams, WizardNextResult, WizardStartParams, WizardStartResult, WizardStatusParams, WizardStatusResult, WorkerDesktopLaunchParams, WorkerDesktopLaunchResult, WorkerDesktopObserveParams, WorkerDesktopObserveResult, WorktreesBranchesParams, WorktreesBranchesResult, WorktreesCreateParams, WorktreesGcParams, WorktreesGcResult, WorktreesListParams, WorktreesListResult, WorktreesRemoveParams, WorktreesRemoveResult, WorktreesRestoreParams } from '@openclaw/gateway-protocol';
 import type { AuditRunInspectParams, BoardActionParams, BoardEventParams, ConversationTurnResult, CronAddResult, CronGetParams, CronRemoveParams, CronRunParams, CronScratchGetParams, CronScratchSetParams, CronScratchSetResult, CronUpdateParams, DesktopObserveParams, ExecApprovalsNodeSetParams, GatewaySuspendPrepareResult, GatewaySuspendStatusResult, PluginsInstallParams, PluginsSessionActionResult, QuestionResolveParams, QuestionResolveResult, QuestionWaitAnswerResult, SessionsDispatchParams, SessionsGoalUpdateParams, SessionsResolveResult, SkillsInstallParams, SkillsUpdateParams, SystemAgentSetupVerifyResult, TalkClientCreateResult } from './params.ts';
 export interface GatewayMethods {
     'agent': {
@@ -913,6 +913,12 @@ export interface GatewayMethods {
         scope: 'operator.admin';
         role: 'operator';
     };
+    'openclaw.setup.activate.start': {
+        params: SystemAgentSetupActivateStartParams;
+        result: SystemAgentSetupActivateStartResult;
+        scope: 'operator.admin';
+        role: 'operator';
+    };
     'openclaw.setup.auth.start': {
         params: SystemAgentSetupAuthStartParams;
         result: SystemAgentSetupAuthStartResult;

package/dist/generated/params.d.ts

@@ -1178,6 +1178,10 @@ export type SessionApprovalEvent = {
                 expiresInDays?: number;
             };
             allowedDecisions: ("allow-once" | "allow-always" | "deny")[];
+            externalResolution?: {
+                label: string;
+                decisions: ("allow-once" | "allow-always")[];
+            };
         } | {
             kind: "system-agent";
             title: string;
@@ -1260,6 +1264,10 @@ export type SessionApprovalEvent = {
                 expiresInDays?: number;
             };
             allowedDecisions: ("allow-once" | "allow-always" | "deny")[];
+            externalResolution?: {
+                label: string;
+                decisions: ("allow-once" | "allow-always")[];
+            };
         } | {
             kind: "system-agent";
             title: string;
@@ -1346,6 +1354,10 @@ export type SessionApprovalEvent = {
                 expiresInDays?: number;
             };
             allowedDecisions: ("allow-once" | "allow-always" | "deny")[];
+            externalResolution?: {
+                label: string;
+                decisions: ("allow-once" | "allow-always")[];
+            };
         } | {
             kind: "system-agent";
             title: string;
@@ -1432,6 +1444,10 @@ export type SessionApprovalEvent = {
                 expiresInDays?: number;
             };
             allowedDecisions: ("allow-once" | "allow-always" | "deny")[];
+            externalResolution?: {
+                label: string;
+                decisions: ("allow-once" | "allow-always")[];
+            };
         } | {
             kind: "system-agent";
             title: string;
@@ -1517,6 +1533,10 @@ export type SessionApprovalEvent = {
                 expiresInDays?: number;
             };
             allowedDecisions: ("allow-once" | "allow-always" | "deny")[];
+            externalResolution?: {
+                label: string;
+                decisions: ("allow-once" | "allow-always")[];
+            };
         } | {
             kind: "system-agent";
             title: string;

package/dist/generated/params.js

@@ -1,4 +1,4 @@
-// Generated by scripts/gen-methods.ts from the pinned openclaw@2026.8.1 tarball (docs/runtime-kits.md 5.10). Regenerated with `npm run gen:openclaw`, never hand-edited.
+// Generated by scripts/gen-methods.ts from the pinned openclaw@2026.8.35 tarball (docs/runtime-kits.md 5.10). Regenerated with `npm run gen:openclaw`, never hand-edited.
 // Union patch-ups (Gap 6): these mirror the protocol.schema.json definitions of the same
 // name, with every anyOf/oneOf branch carrying its full property set (see the generator). The
 // gateway validates against the same schemas, so the kit accepts exactly what the gateway accepts.

package/dist/generated/report.json

@@ -1,13 +1,13 @@
 {
-    "engine": "2026.8.1",
+    "engine": "2026.8.35",
     "protocol": 4,
     "package": "openclaw",
-    "methods": 393,
-    "operatorMethods": 382,
+    "methods": 394,
+    "operatorMethods": 383,
     "nodeMethods": 11,
     "events": 55,
-    "matchedParams": 301,
-    "matchedResults": 192,
+    "matchedParams": 302,
+    "matchedResults": 193,
     "matchedEvents": 21,
     "patchedTypes": [
         "AuditRunInspectParams",

package/dist/index.d.ts

@@ -1,12 +1,13 @@
 export { ENGINE_VERSION, OPERATOR_SCOPES, PROTOCOL_VERSION } from './constants.ts';
-export type { Approval, CallOptions, Decision, GatewayEventName, GatewayEventPayload, GatewayMethod, GatewayParams, GatewayResult, GatewayTransport, GateResult, Hello, KitState, KitEventName, KitEventPayload, BrowserPing, LearningCapture, LearningMode, Member, PlanWindow, Route, RunEnd, RunEvent, RunRef, RunSpec, OutputSchema, SchemaOutput, RunUsage, SignInOptions, SignInView, ToolHost, ToolSpec, } from './types.ts';
+export type { Account, AccountId, AccountPick, AccountRef, Approval, CallOptions, Considered, Decision, Defaults, ModelInfo, MoveResult, PickWhy, Room, RoomSpan, RunSelection, SignInState, GatewayEventName, GatewayEventPayload, GatewayMethod, GatewayParams, GatewayResult, GatewayTransport, GateResult, Hello, KitState, KitEventName, KitEventPayload, BrowserPing, LearningCapture, LearningMode, Member, PlanWindow, Route, RunEnd, RunEvent, RunRef, RunSpec, OutputSchema, SchemaOutput, RunUsage, SignInOptions, SignInView, ToolHost, ToolSpec, } from './types.ts';
 export type { GatewayMethods } from './generated/methods.ts';
 export type { JsonValue } from './output.ts';
 export type { RouteFacts, RouteView } from './routes.ts';
 export { OpenClawKit, type KitOptions, type RetainedLogin } from './kit.ts';
 export type { AddKeyResult } from './keys.ts';
 export { stateWords, toAccountView, words, type AccountView, type WordKey } from './words.ts';
-export { AuthStoreUnreadableError } from './auth-store.ts';
+export { chooseAccount, consider, resolveSelection, type RoomOf } from './pick.ts';
+export { AuthStoreUnreadableError, AuthStoreSealSizeError } from './auth-store.ts';
 export { EngineAlreadyRunningError } from './engine-status.ts';
 export { readAgentDayUsage } from './day-usage.ts';
 export type { AgentDayUsage, DayUsageClient, EngineStartedCharge, EngineStartedKind } from './day-usage.ts';

package/dist/index.js

@@ -3,7 +3,8 @@
 export { ENGINE_VERSION, OPERATOR_SCOPES, PROTOCOL_VERSION } from "./constants.js";
 export { OpenClawKit } from "./kit.js";
 export { stateWords, toAccountView, words } from "./words.js";
-export { AuthStoreUnreadableError } from "./auth-store.js";
+export { chooseAccount, consider, resolveSelection } from "./pick.js";
+export { AuthStoreUnreadableError, AuthStoreSealSizeError } from "./auth-store.js";
 export { EngineAlreadyRunningError } from "./engine-status.js";
 export { readAgentDayUsage } from "./day-usage.js";
 export { readAgentUsage, agentUsageOf } from "./usage.js";

package/dist/kit.d.ts

@@ -21,6 +21,7 @@ export type KitOptions = {
     permitted?: (tool: string) => boolean;
     gateBuiltins?: boolean;
     config?: object;
+    offered?: readonly string[];
     appOwnedSessions?: {
         keyPrefixes: string[];
     };

package/dist/kit.js

@@ -6,7 +6,8 @@ import { PROTOCOL_VERSION } from "./constants.js";
 import { atomic } from "./engine-patches.js";
 import { Approvals } from "./approvals.js";
 import { Bridge } from "./bridge.js";
-import { Engine } from "./engine.js";
+import { Engine, refusedOnly } from "./engine.js";
+import { AuthStoreSealSizeError } from "./auth-store.js";
 import { gatewayTransport } from "./transport.js";
 import { createMembers } from "./members.js";
 import { keyAgentId, KEY_PREFIX, MEMBER_ID } from "./members.js";
@@ -176,6 +177,7 @@ const operatorMethods = new Set([
     'openclaw.chat',
     'openclaw.chat.history',
     'openclaw.setup.activate',
+    'openclaw.setup.activate.start',
     'openclaw.setup.auth.start',
     'openclaw.setup.detect',
     'openclaw.setup.prepare.start',
@@ -754,8 +756,13 @@ export class OpenClawKit {
             const patchFailure = this.current.why === 'engine-patch';
             if (transport && this.transport === transport)
                 await this.disconnect();
-            await this.engine.stop();
+            const refused = await this.engine.stop().then(() => undefined, refusedOnly);
             await this.closeBrowsers();
+            const sealRefusal = refused ?? (error instanceof AuthStoreSealSizeError ? error : undefined);
+            if (sealRefusal) {
+                this.setState({ phase: 'failed', why: 'auth-store-seal-size', sealSize: { size: sealRefusal.size, cap: sealRefusal.cap, file: sealRefusal.file } });
+                throw sealRefusal;
+            }
             if (error instanceof Error && 'code' in error && error.code === 'engine-already-running') {
                 this.setState({ phase: 'failed', why: 'engine-already-running' });
                 throw error;
@@ -1012,7 +1019,7 @@ export class OpenClawKit {
         const safe = reconcileConfig(response.config, { root: this.engine.root, stateDir: this.o.stateDir,
             port: Number(readFileSync(join(this.engine.root, 'port'), 'utf8')), pluginId: this.o.plugin?.id ?? 'byokit',
             pluginDir: join(this.engine.root, 'plugin'), policyPath: fileURLToPath(new URL('../policy/policy.mjs', import.meta.url)), app: patch,
-            installPolicy: this.o.installPolicy, ...(this.o.browser ? { browser: this.browserConfig() } : {}) });
+            offered: this.o.offered, installPolicy: this.o.installPolicy, ...(this.o.browser ? { browser: this.browserConfig() } : {}) });
         if (this.o.browser && !browserToolPolicySafe(safe, this.toolNames()))
             throw new Error('browser tool policy refused');
         if (this.o.browser) {

package/dist/link.d.ts

@@ -1,6 +1,6 @@
 import type { BrowserHost } from './browser.ts';
 import { type IncomingMessage, type ServerResponse } from 'node:http';
-import { type Grant, type Host, type HostOptions } from '@byokit/link';
+import { type Grant, type Host, type HostOptions } from '@byokit/pair';
 import { type ServeIngress, type Via } from '@byokit/discover';
 import type { PushAction, RelayClient } from '@byokit/relay';
 import type { OpenClawKit } from './kit.ts';

package/dist/link.js

@@ -1,11 +1,11 @@
-// Host-side link adapter (7.1): typed, member-checked ops over @byokit/link, sealed approval push
+// Host-side link adapter (7.1): typed, member-checked ops over @byokit/pair, sealed approval push
 // via the relay (7.3). Node only.
 import { randomUUID } from 'node:crypto';
 import { sealBox } from '@byokit/seal';
 import { readFileSync } from 'node:fs';
 import { createServer } from 'node:http';
 import { WebSocketServer } from 'ws';
-import { PublicLinkError, } from '@byokit/link';
+import { PublicLinkError, } from '@byokit/pair';
 import { reach } from '@byokit/discover';
 import { ENGINE_VERSION } from "./constants.js";
 import { b64urlDecode, b64urlEncode, sealNotice } from "./notices.js";
@@ -232,7 +232,7 @@ export function openclawLink(kit, o) {
             throw refused();
         const args = isRecord(req.args) ? req.args : {};
         if (req.op.startsWith('oc.browser.')) {
-            // Keyed answers may be persisted by @byokit/link. Lease nonces and JPEGs are transient only.
+            // Keyed answers may be persisted by @byokit/pair. Lease nonces and JPEGs are transient only.
             if (req.key !== undefined)
                 throw refused();
             const host = browser();

package/dist/members.d.ts

@@ -1,6 +1,7 @@
 import type { GatewayTransport, Member } from './types.ts';
 export declare const MEMBER_ID: RegExp;
 export declare const KEY_PREFIX = "byokit-key-";
+export declare const BASE_AGENT = "byokit-base";
 export declare const keyAgentId: (member: Member) => string;
 export declare function createMembers(ctx: {
     request: GatewayTransport['request'];

package/dist/members.js

@@ -1,6 +1,13 @@
 import { join } from 'node:path';
+// Any member that may run: D9's older rule, which a member created before O14 still matches (D17).
 export const MEMBER_ID = /^[a-z][a-z0-9-]{0,31}$/;
+// D9 for a member the kit creates: no `--` (account agents are `<member>--<6 hex>`) and at most 24 characters.
+const NEW_MEMBER_ID = /^[a-z](?!.*--)[a-z0-9-]{0,23}$/;
 export const KEY_PREFIX = 'byokit-key-';
+// The inherited auth base every agent reads through (5.15): the kit never creates, signs in to or runs it.
+export const BASE_AGENT = 'byokit-base';
+// The engine's own agents (`main` exists on every install) and the base are never a member, existing or not.
+const RESERVED = new Set(['main', 'openclaw', 'crestodian', BASE_AGENT]);
 export const keyAgentId = (member) => `${KEY_PREFIX}${member}`;
 // The engine answers agents.create before its roster hot-reload applies (up to ~113 ms observed), so a turn sent
 // at once fails as 'unknown agent id'. ensure resolves only once agents.list shows the member.
@@ -10,14 +17,17 @@ export function createMembers(ctx) {
     const cache = new Map();
     const listed = (member) => ctx.request('agents.list').then((list) => list.agents.some((agent) => agent.id === member));
     return { ensure(member) {
-            if (!MEMBER_ID.test(member) || member.startsWith(KEY_PREFIX))
-                return Promise.reject(new Error(`invalid member id: ${member}`));
+            const invalid = () => new Error(`invalid member id: ${member}`);
+            if (!MEMBER_ID.test(member) || member.startsWith(KEY_PREFIX) || RESERVED.has(member))
+                return Promise.reject(invalid());
             const existing = cache.get(member);
             if (existing)
                 return existing;
             const workspace = join(ctx.root, 'workspaces', member);
             const result = (async () => {
                 if (!await listed(member)) {
+                    if (!NEW_MEMBER_ID.test(member) || member.startsWith('byokit-'))
+                        throw invalid();
                     await ctx.request('agents.create', { name: member, workspace });
                     const deadline = Date.now() + VISIBLE_TIMEOUT_MS;
                     while (!await listed(member)) {

package/dist/pick.d.ts

@@ -0,0 +1,11 @@
+import type { Account, AccountId, AccountPick, Considered, Defaults, ModelInfo, PickWhy, Room, RunSelection } from './types.ts';
+export type RoomOf = (a: Account, demand: readonly string[]) => Room;
+/** Every account's `Considered` row, in list order, with the kit-only `bound` applied. */
+export declare function consider(accounts: readonly Account[], defaults: Defaults, sel: RunSelection, room: RoomOf, nowMs: number, models?: (a: Account) => readonly ModelInfo[], bound?: readonly AccountId[]): Considered[];
+/** Auto's winner only; `candidates` are the eligible accounts. Pure and portable; no timers, reads or mid-run switching. */
+export declare function chooseAccount(candidates: readonly Account[], room: (a: Account) => Room, nowMs: number): {
+    account: Account;
+    why: PickWhy;
+} | undefined;
+/** Resolve once before starting. Without `models`, membership is host-validated and a missing model is ''. */
+export declare function resolveSelection(accounts: readonly Account[], defaults: Defaults, sel: RunSelection, room: RoomOf, nowMs: number, models?: (a: Account) => readonly ModelInfo[], bound?: readonly AccountId[]): AccountPick;