@byokit/openclaw 0.9.0 → 0.11.0

package/dist/engine.js

@@ -2,12 +2,12 @@ import { spawn, spawnSync } from 'node:child_process';
 import { randomBytes, generateKeyPairSync, randomUUID } from 'node:crypto';
 import { closeSync, existsSync, mkdirSync, openSync, readFileSync, writeFileSync, copyFileSync, rmSync, realpathSync, statSync } from 'node:fs';
 import { createServer } from 'node:net';
-import { join, dirname } from 'node:path';
+import { basename, join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { setTimeout as delay } from 'node:timers/promises';
-import { AuthStore, AuthStoreUnreadableError } from "./auth-store.js";
+import { AuthStore, AuthStoreUnreadableError, AuthStoreSealSizeError } from "./auth-store.js";
 import { EngineAlreadyRunningError, pidAlive, StartedProcesses } from "./engine-status.js";
-import { EnginePatchError, atomic, prepareEngineSet, processStartTime, readPatchSet, verifyEngineSet } from "./engine-patches.js";
+import { EnginePatchError, atomic, prepareEngineSet, processStartTime, readPatchSet, sha256, verifyEngineSet } from "./engine-patches.js";
 import { ENGINE_VERSION } from "./constants.js";
 import { appendUsageBoot } from "./usage-boots.js";
 import { reconcileConfig, appRecoveryPrefixes } from "./config.js";
@@ -21,7 +21,11 @@ const putChanged = (path, data) => {
 };
 const supports = (list, value) => !list ||
     (!list.includes(`!${value}`) && (list.includes('any') || list.every(item => item.startsWith('!')) || list.includes(value)));
+// First failed check of the most recent installMatches call; retained with the npm facts in
+// <stateDir>/logs/engine-install-drift.json before the failed temp is deleted.
+let installDrift;
 function installMatches(dir) {
+    installDrift = undefined;
     const manifests = ['package.json', 'package-lock.json'].map(file => ({
         path: join(dir, file), shipped: readFileSync(join(kitDir, 'engine', file)),
     }));
@@ -29,24 +33,37 @@ function installMatches(dir) {
     // npm omits optional binaries for other platforms (including the other Linux libc).
     const report = process.platform === 'linux' ? process.report.getReport() : undefined;
     const libc = report?.header.glibcVersionRuntime ? 'glibc' : process.platform === 'linux' ? 'musl' : '';
+    let reading = 'package.json';
     try {
-        if (manifests.some(({ path, shipped }) => !readFileSync(path).equals(shipped)))
-            return false;
+        for (const { path, shipped } of manifests) {
+            const installed = readFileSync(path);
+            if (!installed.equals(shipped)) {
+                installDrift = { setDir: dir, check: 'root-manifest', path: basename(path), expected: sha256(shipped), actual: sha256(installed) };
+                return false;
+            }
+        }
         for (const [path, pkg] of Object.entries(lock.packages)) {
             if (!path)
                 continue; // The root manifest is checked byte for byte above.
             if (pkg.optional && (!supports(pkg.os, process.platform) || !supports(pkg.cpu, process.arch) || !supports(pkg.libc, libc)))
                 continue;
-            if (JSON.parse(readFileSync(join(dir, path, 'package.json'), 'utf8')).version !== pkg.version)
+            reading = `${path}/package.json`;
+            const version = JSON.parse(readFileSync(join(dir, path, 'package.json'), 'utf8')).version;
+            if (version !== pkg.version) {
+                installDrift = { setDir: dir, check: 'package-version', path, expected: pkg.version, actual: String(version) };
                 return false;
+            }
         }
         return true;
     }
-    catch {
+    catch (error) {
         // Missing or unreadable manifests and malformed installed package metadata need repair too.
+        installDrift = { setDir: dir, check: 'read', path: reading, readError: String(error.message).slice(0, 300) };
         return false;
     }
 }
+export const refusedOnly = (error) => { if (error instanceof AuthStoreSealSizeError)
+    return error; throw error; };
 export class Engine {
     root;
     bridgeSock;
@@ -77,7 +94,32 @@ export class Engine {
         this.paramPrefix = bridge.paramPrefix;
         this.authStore = new AuthStore({ root: this.root, stateDir: o.stateDir, engineDir: this.dir, seal: o.authSeal, log: o.log });
     }
-    state(phase, why, retryAt) { this.o.onState({ phase, ...(why ? { why } : {}), ...(retryAt ? { retryAt } : {}), ...(this.patchSet !== undefined ? { patchSet: this.patchSet } : {}) }); }
+    state(phase, why, retryAt, sealSize) { this.o.onState({ phase, ...(why ? { why } : {}), ...(retryAt ? { retryAt } : {}), ...(sealSize ? { sealSize } : {}), ...(this.patchSet !== undefined ? { patchSet: this.patchSet } : {}) }); }
+    // Retained at <stateDir>/logs/engine-install-drift.json (overwritten per failure) after the failed
+    // temporary set is deleted: the first failed check, the npm identity and the npm stderr tail.
+    // Bounded fields, no environment values or secrets; diagnostics never mask the failure they describe.
+    retainInstallDiagnostics(error, npmPath, npmStderrTail) {
+        try {
+            const npm = spawnSync(npmPath, ['--version'], { encoding: 'utf8', timeout: 5000 });
+            const drift = installDrift;
+            writeFileSync(join(this.o.stateDir, 'logs', 'engine-install-drift.json'), JSON.stringify({
+                at: new Date().toISOString(),
+                failedDir: error.file ?? null,
+                firstFailedCheck: drift && drift.setDir === error.file
+                    ? { check: drift.check, path: drift.path, expected: drift.expected ?? null, actual: drift.actual ?? null, readError: drift.readError ?? null }
+                    : null,
+                npm: { path: npmPath, version: npm.status === 0 && npm.stdout ? npm.stdout.trim().slice(0, 100) : null },
+                npmStderrTail: npmStderrTail.slice(0, 500),
+            }), { mode: 0o600 });
+        }
+        catch { /* diagnostics must never mask the failure being diagnosed */ }
+    }
+    exitedState(refused) {
+        if (refused instanceof AuthStoreSealSizeError)
+            this.state('failed', 'auth-store-seal-size', undefined, { size: refused.size, cap: refused.cap });
+        else
+            this.state('failed', 'exited');
+    }
     get entry() {
         if (this.o.spawnEngine && !this.setDir)
             throw new EnginePatchError('spec', 'engine-set');
@@ -104,6 +146,8 @@ export class Engine {
             }
             if (error instanceof AuthStoreUnreadableError)
                 this.state('failed', 'auth-store-unreadable');
+            if (error instanceof AuthStoreSealSizeError)
+                this.exitedState(error);
             throw error;
         });
         this.prepared = pending;
@@ -129,12 +173,14 @@ export class Engine {
         if (this.o.spawnEngine) {
             const lock = JSON.parse(readFileSync(join(kitDir, 'engine/package-lock.json'), 'utf8'));
             const patches = readPatchSet(join(kitDir, 'engine/patches.json'), ENGINE_VERSION, lock.packages['node_modules/openclaw'].integrity);
+            const npmPath = this.o.npmPath ?? 'npm';
+            let npmStderrTail = '';
             const install = async (dir) => {
                 this.state('installing');
                 for (const f of ['package.json', 'package-lock.json'])
                     copyFileSync(join(kitDir, 'engine', f), join(dir, f));
                 await new Promise((resolve, reject) => {
-                    const child = spawn(this.o.npmPath ?? 'npm', ['ci', '--ignore-scripts', '--no-audit', '--no-fund', '--prefix', dir], {
+                    const child = spawn(npmPath, ['ci', '--ignore-scripts', '--no-audit', '--no-fund', '--prefix', dir], {
                         env: { PATH: process.env.PATH ?? '/usr/bin:/bin', HOME: join(this.root, 'install-home'), npm_config_cache: join(this.root, 'npm-cache'), OPENCLAW_DISABLE_BUNDLED_PLUGIN_POSTINSTALL: '1' },
                         stdio: ['ignore', 'ignore', 'pipe'],
                     });
@@ -142,10 +188,11 @@ export class Engine {
                     this.started.add(child);
                     child.stderr.on('data', chunk => { stderr = (stderr + chunk).slice(-500); });
                     const timer = setTimeout(() => { expired = true; child.kill('SIGKILL'); }, 300_000);
-                    child.once('error', error => { clearTimeout(timer); this.started.forget(child); reject(error); });
+                    child.once('error', error => { clearTimeout(timer); this.started.forget(child); npmStderrTail = stderr; reject(error); });
                     child.once('exit', code => {
                         clearTimeout(timer);
                         this.started.forget(child);
+                        npmStderrTail = stderr;
                         if (code === 0 && !expired)
                             resolve();
                         else {
@@ -154,8 +201,44 @@ export class Engine {
                         }
                     });
                 });
+                // Newer pins ship a pending package-lifecycle marker that the gateway completes on first boot by
+                // running its own scripts, which needs a writable tree. Complete it here, while the set is still
+                // writable, with bundled plugin installs disabled: on a fresh install the prune is a no-op and
+                // upstream's own script removes the marker. Pins without the script (pre-8.33) skip this.
+                const lifecycle = join(dir, 'node_modules/openclaw/scripts/postinstall-bundled-plugins.mjs');
+                if (!existsSync(lifecycle))
+                    return;
+                await new Promise((resolve, reject) => {
+                    const child = spawn(process.execPath, [lifecycle], {
+                        env: { PATH: process.env.PATH ?? '/usr/bin:/bin', HOME: join(this.root, 'install-home'), npm_config_cache: join(this.root, 'npm-cache'), OPENCLAW_DISABLE_BUNDLED_PLUGIN_POSTINSTALL: '1' },
+                        stdio: ['ignore', 'ignore', 'pipe'],
+                    });
+                    let stderr = '', expired = false;
+                    this.started.add(child);
+                    child.stderr.on('data', chunk => { stderr = (stderr + chunk).slice(-500); });
+                    const timer = setTimeout(() => { expired = true; child.kill('SIGKILL'); }, 120_000);
+                    child.once('error', error => { clearTimeout(timer); this.started.forget(child); reject(error); });
+                    child.once('exit', code => {
+                        clearTimeout(timer);
+                        this.started.forget(child);
+                        if (code === 0 && !expired)
+                            resolve();
+                        else {
+                            this.state('failed', 'install');
+                            reject(new Error(`engine lifecycle: ${expired ? 'timeout' : stderr}`));
+                        }
+                    });
+                });
             };
-            this.setDir = await prepareEngineSet(this.dir, patches, install, installMatches);
+            try {
+                this.setDir = await prepareEngineSet(this.dir, patches, install, installMatches);
+            }
+            catch (error) {
+                // The failed temp is already deleted; keep its diagnosis for the next natural failure.
+                if (error instanceof EnginePatchError && (error.cause === 'drift-after-build' || error.cause === 'write'))
+                    this.retainInstallDiagnostics(error, npmPath, npmStderrTail);
+                throw error;
+            }
             this.wantedSet = patches;
             atomic(join(this.root, 'engine-set'), this.setDir);
             this.patchSet = patches.id;
@@ -173,7 +256,7 @@ export class Engine {
         const pluginDir = join(this.root, 'plugin');
         mkdirSync(pluginDir, { recursive: true, mode: 0o700 });
         // The shipped plugin follows the kit on every prepare too: a state dir from an older kit must not keep its gate.
-        for (const f of ['package.json', 'index.js', 'keys.js', 'usage.js']) {
+        for (const f of ['package.json', 'index.js', 'keys.js', 'usage.js', 'accounts.js']) {
             const source = join(kitDir, 'plugin', f);
             putChanged(join(pluginDir, f), readFileSync(source, 'utf8'));
         }
@@ -183,8 +266,8 @@ export class Engine {
         const path = join(this.root, 'openclaw.json');
         const saved = existsSync(path) ? JSON.parse(readFileSync(path, 'utf8')) : undefined;
         const config = reconcileConfig(saved, { root: this.root, stateDir: this.o.stateDir, port: this.port, pluginId: this.o.pluginId,
-            pluginDir, policyPath: join(kitDir, 'policy', 'policy.mjs'), app: this.o.config, installPolicy: this.o.installPolicy,
-            browser: this.o.browserConfig?.() });
+            pluginDir, policyPath: join(kitDir, 'policy', 'policy.mjs'), app: this.o.config, offered: this.o.offered,
+            installPolicy: this.o.installPolicy, browser: this.o.browserConfig?.() });
         putChanged(path, JSON.stringify(config, null, 2) + '\n');
     }
     doctorContext() {
@@ -332,7 +415,8 @@ export class Engine {
         const fd = openSync(join(this.o.stateDir, 'logs', 'openclaw.log'), 'a', 0o600);
         const usageDir = join(this.root, 'usage'), bootId = randomUUID();
         try {
-            const accounted = this.wantedSet.files.some(file => file.path === 'dist/experience-review-default-6DPIIJds.js');
+            // The bundle hash in the Workshop file name changes per release; the stable prefix names the seam.
+            const accounted = this.wantedSet.files.some(file => file.path.startsWith('dist/experience-review-default-') && file.path.endsWith('.js'));
             if (accounted) {
                 appendUsageBoot(usageDir, { bootId, startedAt: Date.now() });
                 env.BYOKIT_ENGINE_USAGE_LEDGER = usageDir;
@@ -365,7 +449,7 @@ export class Engine {
             if (this.child !== child || this.stopping)
                 return;
             this.child = undefined;
-            void this.authStore.stop().then(() => { this.state('failed', 'exited'); this.o.onExit(null); }, () => this.state('failed', 'exited'));
+            void this.authStore.stop().then(() => undefined, refusedOnly).then((refused) => { this.exitedState(refused); this.o.onExit(null); }, () => this.state('failed', 'exited'));
         });
         if (!child.pid) {
             this.state('failed', 'exited');
@@ -382,19 +466,24 @@ export class Engine {
             this.child = undefined;
             this.removeOwnedPid(child.pid);
             void (async () => {
-                await this.authStore.stop();
+                let refused = await this.authStore.stop().then(() => undefined, refusedOnly);
                 if (this.stopping)
                     return;
-                if (code === 78 && !this.repaired) {
+                if (!refused && code === 78 && !this.repaired) {
                     this.repaired = true;
                     this.state('repairing');
-                    const result = await this.withAuthStore(async () => this.doctor(60_000));
-                    if (result.status === 0 && !this.stopping) {
-                        await this.start();
-                        return;
+                    try {
+                        const result = await this.withAuthStore(async () => this.doctor(60_000));
+                        if (result.status === 0 && !this.stopping) {
+                            await this.start();
+                            return;
+                        }
+                    }
+                    catch (error) {
+                        refused = refusedOnly(error);
                     }
                 }
-                this.state('failed', 'exited');
+                this.exitedState(refused);
                 this.o.onExit(code);
             })().catch(() => this.state('failed', 'exited'));
         });

package/dist/generated/methods.d.ts

@@ -1,4 +1,4 @@
-import type { AgentWaitParams, AgentsCreateParams, AgentsCreateResult, AgentsDeleteParams, AgentsDeleteResult, AgentsFilesGetParams, AgentsFilesGetResult, AgentsFilesListParams, AgentsFilesListResult, AgentsFilesSetParams, AgentsFilesSetResult, AgentsListParams, AgentsListResult, AgentsUpdateParams, AgentsUpdateResult, AgentsWorkspaceGetParams, AgentsWorkspaceGetResult, AgentsWorkspaceListParams, AgentsWorkspaceListResult, ApprovalGetParams, ApprovalGetResult, ApprovalHistoryParams, ApprovalHistoryResult, ApprovalResolveParams, ApprovalResolveResult, ArtifactsDownloadParams, ArtifactsDownloadResult, ArtifactsGetParams, ArtifactsGetResult, ArtifactsListParams, ArtifactsListResult, AuditActivityListParams, AuditActivityListResult, AuditListParams, AuditListResult, AuditRunInspectResult, BoardDataReadParams, BoardGetParams, BoardPromptAuthorizeParams, BoardUpdateParams, BoardWidgetAppViewParams, BoardWidgetAppViewResult, BoardWidgetGrantParams, BoardWidgetPutParams, BoardWidgetPutResult, ChannelsLogoutParams, ChannelsPairingApproveParams, ChannelsPairingApproveResult, ChannelsPairingDismissParams, ChannelsPairingDismissResult, ChannelsPairingListParams, ChannelsPairingListResult, ChannelsStartParams, ChannelsStatusParams, ChannelsStatusResult, ChannelsStopParams, ChatAbortParams, ChatHistoryParams, ChatInjectParams, ChatMessageGetResult, ChatMetadataParams, ChatToolTitlesParams, ChatToolTitlesResult, CommandsListParams, CommandsListResult, ConfigApplyParams, ConfigGetParams, ConfigPatchParams, ConfigSchemaLookupParams, ConfigSchemaLookupResult, ConfigSchemaParams, ConfigSetParams, ConnectParams, ConversationListParams, ConversationListResult, ConversationSendParams, ConversationSendResult, ConversationTurnCancelParams, ConversationTurnCancelResult, ConversationTurnParams, CronAddParams, CronListParams, CronRunsParams, CronScratchGetResult, CronStatusParams, DesktopLaunchParams, DesktopObserveResult, DevicePairApproveParams, DevicePairListParams, DevicePairRejectParams, DevicePairRemoveParams, DevicePairRenameParams, DevicePairSetupCodeParams, DevicePairSetupCodeResult, DevicePairSetupStatusParams, DevicePairSetupStatusResult, DeviceTokenRevokeParams, DeviceTokenRotateParams, DeviceTokenRotateResult, EnvironmentsCreateParams, EnvironmentsCreateResult, EnvironmentsDestroyParams, EnvironmentsDestroyResult, EnvironmentsListParams, EnvironmentsListResult, EnvironmentsStatusParams, EnvironmentsStatusResult, ExecApprovalGetParams, ExecApprovalGrantsListParams, ExecApprovalGrantsListResult, ExecApprovalGrantsRevokeParams, ExecApprovalGrantsRevokeResult, ExecApprovalRequestParams, ExecApprovalResolveParams, ExecApprovalsGetParams, ExecApprovalsNodeGetParams, ExecApprovalsSetParams, FsListDirParams, FsListDirResult, GatewaySuspendPrepareParams, GatewaySuspendResumeParams, GatewaySuspendResumeResult, GatewaySuspendStatusParams, HooksStatusParams, LogsTailParams, LogsTailResult, MessageActionParams, MigrationsMemoryApplyResult, MigrationsMemoryPlanResult, ModelsAuthLogoutParams, ModelsAuthStatusParams, ModelsListParams, ModelsListResult, ModelsProbeParams, ModelsProbeResult, NodeDescribeParams, NodeEventParams, NodeEventResult, NodeInvokeParams, NodeInvokeProgressParams, NodeInvokeResultParams, NodeListParams, NodePairApproveParams, NodePairListParams, NodePairRejectParams, NodePairRemoveParams, NodePendingAckParams, NodePendingDrainParams, NodePendingDrainResult, NodePendingEnqueueParams, NodePendingEnqueueResult, NodePluginToolsUpdateParams, NodeRenameParams, NodeSkillsUpdateParams, PluginApprovalRequestParams, PluginApprovalResolveParams, PluginsInspectParams, PluginsInspectResult, PluginsInstallResult, PluginsListParams, PluginsListResult, PluginsRefreshParams, PluginsRefreshResult, PluginsSearchParams, PluginsSearchResult, PluginsSessionActionParams, PluginsSetEnabledParams, PluginsSetEnabledResult, PluginsUiDescriptorsParams, PluginsUiDescriptorsResult, PluginsUninstallParams, PluginsUninstallResult, PollParams, PortalCloseParams, PortalCloseResult, PortalListParams, PortalListResult, PortalOpenParams, PortalOpenResult, ProgressCardGetParams, ProgressCardGetResult, ProgressCardPutParams, ProgressCardPutResult, ProjectsAddParams, ProjectsAddResult, ProjectsListParams, ProjectsListResult, ProjectsRegisterParams, ProjectsRegisterResult, ProjectsRemoveParams, ProjectsRemoveResult, ProjectsSearchRemoteParams, ProjectsSearchRemoteResult, PushTestParams, PushTestResult, QuestionGetParams, QuestionGetResult, QuestionListParams, QuestionListResult, QuestionRequestParams, QuestionRequestResult, QuestionWaitAnswerParams, SecretsResolveParams, SecretsResolveResult, SecretsStoreDeleteParams, SecretsStoreListResult, SecretsStoreSetParams, SessionDiscussionInfoParams, SessionDiscussionInfoResult, SessionDiscussionOpenParams, SessionDiscussionOpenResult, SessionMemberAddParams, SessionMemberRemoveParams, SessionMembersListEvidenceResult, SessionMembersListParams, SessionMembersListResult, SessionSuggestionsAddParams, SessionSuggestionsAddResult, SessionSuggestionsListParams, SessionSuggestionsListResult, SessionSuggestionsResolveParams, SessionSuggestionsResolveResult, SessionTypingParams, SessionTypingResult, SessionVisibilitySetParams, SessionVisibilitySetResult, SessionsAbortParams, SessionsAssignOwnerParams, SessionsAssignOwnerResult, SessionsBranchesListParams, SessionsBranchesListResult, SessionsBranchesSwitchParams, SessionsBranchesSwitchResult, SessionsCatalogArchiveParams, SessionsCatalogArchiveResult, SessionsCatalogContinueParams, SessionsCatalogContinueResult, SessionsCatalogListParams, SessionsCatalogListResult, SessionsCatalogReadParams, SessionsCatalogReadResult, SessionsCatalogStartTerminalParams, SessionsCatalogStartTerminalResult, SessionsCleanupParams, SessionsCompactParams, SessionsCompactionBranchParams, SessionsCompactionBranchResult, SessionsCompactionListParams, SessionsCompactionListResult, SessionsCompactionRestoreParams, SessionsCompactionRestoreResult, SessionsCompanionAskParams, SessionsCompanionAskResult, SessionsCompanionResetParams, SessionsCompanionResetResult, SessionsCompanionStateParams, SessionsCompanionStateResult, SessionsCreateParams, SessionsCreateResult, SessionsDeleteParams, SessionsDeleteResult, SessionsDescribeParams, SessionsDiffParams, SessionsDiffResult, SessionsDispatchResult, SessionsFilesGetParams, SessionsFilesGetResult, SessionsFilesListParams, SessionsFilesListResult, SessionsFilesRevealParams, SessionsFilesRevealResult, SessionsFilesSetParams, SessionsFilesSetResult, SessionsForkParams, SessionsForkResult, SessionsGoalClearParams, SessionsGroupsDefaultsParams, SessionsGroupsDefaultsResult, SessionsGroupsDeleteParams, SessionsGroupsListParams, SessionsGroupsListResult, SessionsGroupsPutParams, SessionsGroupsRenameParams, SessionsGroupsUpdateParams, SessionsGroupsUpdateResult, SessionsListParams, SessionsMessagesSubscribeParams, SessionsMessagesUnsubscribeParams, SessionsMoveParams, SessionsMoveResult, SessionsObserverVisibilityParams, SessionsObserverVisibilityResult, SessionsPatchManyParams, SessionsPatchManyResult, SessionsPatchParams, SessionsPatchResult, SessionsPluginPatchParams, SessionsPluginPatchResult, SessionsPreviewParams, SessionsReclaimParams, SessionsReclaimResult, SessionsRecoverParams, SessionsRecoverResult, SessionsResetParams, SessionsResolveParams, SessionsRewindParams, SessionsRewindResult, SessionsSearchParams, SessionsSearchResult, SessionsSendParams, SessionsUsageParams, SkillsBinsParams, SkillsBinsResult, SkillsCuratorStatusParams, SkillsCuratorStatusResult, SkillsDetailParams, SkillsDetailResult, SkillsProposalActionParams, SkillsProposalCreateParams, SkillsProposalDecisionParams, SkillsProposalEvaluateParams, SkillsProposalEvaluateResult, SkillsProposalEventsListParams, SkillsProposalEventsListResult, SkillsProposalHistoryScanParams, SkillsProposalHistoryScanResult, SkillsProposalHistoryStatusParams, SkillsProposalInspectParams, SkillsProposalInspectResult, SkillsProposalRequestRevisionParams, SkillsProposalRequestRevisionResult, SkillsProposalReviseParams, SkillsProposalUpdateParams, SkillsProposalsListParams, SkillsProposalsListResult, SkillsSearchParams, SkillsSearchResult, SkillsSecurityVerdictsParams, SkillsSecurityVerdictsResult, SkillsSkillCardParams, SkillsSkillCardResult, SkillsStatusParams, SkillsUploadBeginParams, SkillsUploadChunkParams, SkillsUploadCommitParams, SystemAgentChatHistoryParams, SystemAgentChatHistoryResult, SystemAgentChatParams, SystemAgentChatResult, SystemAgentSetupActivateParams, SystemAgentSetupActivateResult, SystemAgentSetupAuthStartParams, SystemAgentSetupAuthStartResult, SystemAgentSetupDetectParams, SystemAgentSetupDetectResult, SystemAgentSetupVerifyParams, SystemChangesListParams, SystemChangesListResult, SystemInfoParams, SystemInfoResult, TalkCatalogParams, TalkCatalogResult, TalkClientCloseParams, TalkClientCreateParams, TalkClientSteerParams, TalkClientToolCallParams, TalkClientToolCallResult, TalkClientTranscriptParams, TalkConfigParams, TalkConfigResult, TalkModeParams, TalkSessionAcknowledgeMarkParams, TalkSessionAppendAudioParams, TalkSessionCancelOutputParams, TalkSessionCancelOutputResult, TalkSessionCloseParams, TalkSessionCreateParams, TalkSessionCreateResult, TalkSessionSteerParams, TalkSessionSubmitToolResultParams, TalkSpeakParams, TalkSpeakResult, TaskSuggestionsAcceptParams, TaskSuggestionsAcceptResult, TaskSuggestionsCreateParams, TaskSuggestionsCreateResult, TaskSuggestionsDismissParams, TaskSuggestionsDismissResult, TaskSuggestionsListParams, TaskSuggestionsListResult, TasksCancelParams, TasksCancelResult, TasksGetParams, TasksGetResult, TasksListParams, TasksListResult, TerminalAttachParams, TerminalAttachResult, TerminalCloseParams, TerminalInputParams, TerminalListResult, TerminalOpenParams, TerminalOpenResult, TerminalResizeParams, TerminalUploadParams, TerminalUploadResult, ToolsCatalogParams, ToolsCatalogResult, ToolsEffectiveParams, ToolsEffectiveResult, ToolsInvokeParams, ToolsInvokeResult, TtsSpeakParams, TtsSpeakResult, UiCommandParams, UiCommandResult, UpdateHoldParams, UpdateHoldResult, UpdateRunParams, UpdateStatusParams, UpdateStatusResult, UsersLinkEmailParams, UsersLinkEmailResult, UsersListParams, UsersListResult, UsersPrefsGetParams, UsersPrefsGetResult, UsersPrefsSetParams, UsersPrefsSetResult, UsersSelfParams, UsersSelfResult, UsersSetAvatarParams, UsersSetAvatarResult, UsersSetDisplayNameParams, UsersSetDisplayNameResult, UsersSetRoleParams, UsersSetRoleResult, WakeParams, WebLoginStartParams, WebLoginWaitParams, WebPushTestParams, WizardCancelParams, WizardNextParams, WizardNextResult, WizardStartParams, WizardStartResult, WizardStatusParams, WizardStatusResult, WorkerDesktopLaunchParams, WorkerDesktopLaunchResult, WorkerDesktopObserveParams, WorkerDesktopObserveResult, WorktreesBranchesParams, WorktreesBranchesResult, WorktreesCreateParams, WorktreesGcParams, WorktreesGcResult, WorktreesListParams, WorktreesListResult, WorktreesRemoveParams, WorktreesRemoveResult, WorktreesRestoreParams } from '@openclaw/gateway-protocol';
+import type { AgentWaitParams, AgentsCreateParams, AgentsCreateResult, AgentsDeleteParams, AgentsDeleteResult, AgentsFilesGetParams, AgentsFilesGetResult, AgentsFilesListParams, AgentsFilesListResult, AgentsFilesSetParams, AgentsFilesSetResult, AgentsListParams, AgentsListResult, AgentsUpdateParams, AgentsUpdateResult, AgentsWorkspaceGetParams, AgentsWorkspaceGetResult, AgentsWorkspaceListParams, AgentsWorkspaceListResult, ApprovalGetParams, ApprovalGetResult, ApprovalHistoryParams, ApprovalHistoryResult, ApprovalResolveParams, ApprovalResolveResult, ArtifactsDownloadParams, ArtifactsDownloadResult, ArtifactsGetParams, ArtifactsGetResult, ArtifactsListParams, ArtifactsListResult, AuditActivityListParams, AuditActivityListResult, AuditListParams, AuditListResult, AuditRunInspectResult, BoardDataReadParams, BoardGetParams, BoardPromptAuthorizeParams, BoardUpdateParams, BoardWidgetAppViewParams, BoardWidgetAppViewResult, BoardWidgetGrantParams, BoardWidgetPutParams, BoardWidgetPutResult, ChannelsLogoutParams, ChannelsPairingApproveParams, ChannelsPairingApproveResult, ChannelsPairingDismissParams, ChannelsPairingDismissResult, ChannelsPairingListParams, ChannelsPairingListResult, ChannelsStartParams, ChannelsStatusParams, ChannelsStatusResult, ChannelsStopParams, ChatAbortParams, ChatHistoryParams, ChatInjectParams, ChatMessageGetResult, ChatMetadataParams, ChatToolTitlesParams, ChatToolTitlesResult, CommandsListParams, CommandsListResult, ConfigApplyParams, ConfigGetParams, ConfigPatchParams, ConfigSchemaLookupParams, ConfigSchemaLookupResult, ConfigSchemaParams, ConfigSetParams, ConnectParams, ConversationListParams, ConversationListResult, ConversationSendParams, ConversationSendResult, ConversationTurnCancelParams, ConversationTurnCancelResult, ConversationTurnParams, CronAddParams, CronListParams, CronRunsParams, CronScratchGetResult, CronStatusParams, DesktopLaunchParams, DesktopObserveResult, DevicePairApproveParams, DevicePairListParams, DevicePairRejectParams, DevicePairRemoveParams, DevicePairRenameParams, DevicePairSetupCodeParams, DevicePairSetupCodeResult, DevicePairSetupStatusParams, DevicePairSetupStatusResult, DeviceTokenRevokeParams, DeviceTokenRotateParams, DeviceTokenRotateResult, EnvironmentsCreateParams, EnvironmentsCreateResult, EnvironmentsDestroyParams, EnvironmentsDestroyResult, EnvironmentsListParams, EnvironmentsListResult, EnvironmentsStatusParams, EnvironmentsStatusResult, ExecApprovalGetParams, ExecApprovalGrantsListParams, ExecApprovalGrantsListResult, ExecApprovalGrantsRevokeParams, ExecApprovalGrantsRevokeResult, ExecApprovalRequestParams, ExecApprovalResolveParams, ExecApprovalsGetParams, ExecApprovalsNodeGetParams, ExecApprovalsSetParams, FsListDirParams, FsListDirResult, GatewaySuspendPrepareParams, GatewaySuspendResumeParams, GatewaySuspendResumeResult, GatewaySuspendStatusParams, HooksStatusParams, LogsTailParams, LogsTailResult, MessageActionParams, MigrationsMemoryApplyResult, MigrationsMemoryPlanResult, ModelsAuthLogoutParams, ModelsAuthStatusParams, ModelsListParams, ModelsListResult, ModelsProbeParams, ModelsProbeResult, NodeDescribeParams, NodeEventParams, NodeEventResult, NodeInvokeParams, NodeInvokeProgressParams, NodeInvokeResultParams, NodeListParams, NodePairApproveParams, NodePairListParams, NodePairRejectParams, NodePairRemoveParams, NodePendingAckParams, NodePendingDrainParams, NodePendingDrainResult, NodePendingEnqueueParams, NodePendingEnqueueResult, NodePluginToolsUpdateParams, NodeRenameParams, NodeSkillsUpdateParams, PluginApprovalRequestParams, PluginApprovalResolveParams, PluginsInspectParams, PluginsInspectResult, PluginsInstallResult, PluginsListParams, PluginsListResult, PluginsRefreshParams, PluginsRefreshResult, PluginsSearchParams, PluginsSearchResult, PluginsSessionActionParams, PluginsSetEnabledParams, PluginsSetEnabledResult, PluginsUiDescriptorsParams, PluginsUiDescriptorsResult, PluginsUninstallParams, PluginsUninstallResult, PollParams, PortalCloseParams, PortalCloseResult, PortalListParams, PortalListResult, PortalOpenParams, PortalOpenResult, ProgressCardGetParams, ProgressCardGetResult, ProgressCardPutParams, ProgressCardPutResult, ProjectsAddParams, ProjectsAddResult, ProjectsListParams, ProjectsListResult, ProjectsRegisterParams, ProjectsRegisterResult, ProjectsRemoveParams, ProjectsRemoveResult, ProjectsSearchRemoteParams, ProjectsSearchRemoteResult, PushTestParams, PushTestResult, QuestionGetParams, QuestionGetResult, QuestionListParams, QuestionListResult, QuestionRequestParams, QuestionRequestResult, QuestionWaitAnswerParams, SecretsResolveParams, SecretsResolveResult, SecretsStoreDeleteParams, SecretsStoreListResult, SecretsStoreSetParams, SessionDiscussionInfoParams, SessionDiscussionInfoResult, SessionDiscussionOpenParams, SessionDiscussionOpenResult, SessionMemberAddParams, SessionMemberRemoveParams, SessionMembersListEvidenceResult, SessionMembersListParams, SessionMembersListResult, SessionSuggestionsAddParams, SessionSuggestionsAddResult, SessionSuggestionsListParams, SessionSuggestionsListResult, SessionSuggestionsResolveParams, SessionSuggestionsResolveResult, SessionTypingParams, SessionTypingResult, SessionVisibilitySetParams, SessionVisibilitySetResult, SessionsAbortParams, SessionsAssignOwnerParams, SessionsAssignOwnerResult, SessionsBranchesListParams, SessionsBranchesListResult, SessionsBranchesSwitchParams, SessionsBranchesSwitchResult, SessionsCatalogArchiveParams, SessionsCatalogArchiveResult, SessionsCatalogContinueParams, SessionsCatalogContinueResult, SessionsCatalogListParams, SessionsCatalogListResult, SessionsCatalogReadParams, SessionsCatalogReadResult, SessionsCatalogStartTerminalParams, SessionsCatalogStartTerminalResult, SessionsCleanupParams, SessionsCompactParams, SessionsCompactionBranchParams, SessionsCompactionBranchResult, SessionsCompactionListParams, SessionsCompactionListResult, SessionsCompactionRestoreParams, SessionsCompactionRestoreResult, SessionsCompanionAskParams, SessionsCompanionAskResult, SessionsCompanionResetParams, SessionsCompanionResetResult, SessionsCompanionStateParams, SessionsCompanionStateResult, SessionsCreateParams, SessionsCreateResult, SessionsDeleteParams, SessionsDeleteResult, SessionsDescribeParams, SessionsDiffParams, SessionsDiffResult, SessionsDispatchResult, SessionsFilesGetParams, SessionsFilesGetResult, SessionsFilesListParams, SessionsFilesListResult, SessionsFilesRevealParams, SessionsFilesRevealResult, SessionsFilesSetParams, SessionsFilesSetResult, SessionsForkParams, SessionsForkResult, SessionsGoalClearParams, SessionsGroupsDefaultsParams, SessionsGroupsDefaultsResult, SessionsGroupsDeleteParams, SessionsGroupsListParams, SessionsGroupsListResult, SessionsGroupsPutParams, SessionsGroupsRenameParams, SessionsGroupsUpdateParams, SessionsGroupsUpdateResult, SessionsListParams, SessionsMessagesSubscribeParams, SessionsMessagesUnsubscribeParams, SessionsMoveParams, SessionsMoveResult, SessionsObserverVisibilityParams, SessionsObserverVisibilityResult, SessionsPatchManyParams, SessionsPatchManyResult, SessionsPatchParams, SessionsPatchResult, SessionsPluginPatchParams, SessionsPluginPatchResult, SessionsPreviewParams, SessionsReclaimParams, SessionsReclaimResult, SessionsRecoverParams, SessionsRecoverResult, SessionsResetParams, SessionsResolveParams, SessionsRewindParams, SessionsRewindResult, SessionsSearchParams, SessionsSearchResult, SessionsSendParams, SessionsUsageParams, SkillsBinsParams, SkillsBinsResult, SkillsCuratorStatusParams, SkillsCuratorStatusResult, SkillsDetailParams, SkillsDetailResult, SkillsProposalActionParams, SkillsProposalCreateParams, SkillsProposalDecisionParams, SkillsProposalEvaluateParams, SkillsProposalEvaluateResult, SkillsProposalEventsListParams, SkillsProposalEventsListResult, SkillsProposalHistoryScanParams, SkillsProposalHistoryScanResult, SkillsProposalHistoryStatusParams, SkillsProposalInspectParams, SkillsProposalInspectResult, SkillsProposalRequestRevisionParams, SkillsProposalRequestRevisionResult, SkillsProposalReviseParams, SkillsProposalUpdateParams, SkillsProposalsListParams, SkillsProposalsListResult, SkillsSearchParams, SkillsSearchResult, SkillsSecurityVerdictsParams, SkillsSecurityVerdictsResult, SkillsSkillCardParams, SkillsSkillCardResult, SkillsStatusParams, SkillsUploadBeginParams, SkillsUploadChunkParams, SkillsUploadCommitParams, SystemAgentChatHistoryParams, SystemAgentChatHistoryResult, SystemAgentChatParams, SystemAgentChatResult, SystemAgentSetupActivateParams, SystemAgentSetupActivateResult, SystemAgentSetupActivateStartParams, SystemAgentSetupActivateStartResult, SystemAgentSetupAuthStartParams, SystemAgentSetupAuthStartResult, SystemAgentSetupDetectParams, SystemAgentSetupDetectResult, SystemAgentSetupVerifyParams, SystemChangesListParams, SystemChangesListResult, SystemInfoParams, SystemInfoResult, TalkCatalogParams, TalkCatalogResult, TalkClientCloseParams, TalkClientCreateParams, TalkClientSteerParams, TalkClientToolCallParams, TalkClientToolCallResult, TalkClientTranscriptParams, TalkConfigParams, TalkConfigResult, TalkModeParams, TalkSessionAcknowledgeMarkParams, TalkSessionAppendAudioParams, TalkSessionCancelOutputParams, TalkSessionCancelOutputResult, TalkSessionCloseParams, TalkSessionCreateParams, TalkSessionCreateResult, TalkSessionSteerParams, TalkSessionSubmitToolResultParams, TalkSpeakParams, TalkSpeakResult, TaskSuggestionsAcceptParams, TaskSuggestionsAcceptResult, TaskSuggestionsCreateParams, TaskSuggestionsCreateResult, TaskSuggestionsDismissParams, TaskSuggestionsDismissResult, TaskSuggestionsListParams, TaskSuggestionsListResult, TasksCancelParams, TasksCancelResult, TasksGetParams, TasksGetResult, TasksListParams, TasksListResult, TerminalAttachParams, TerminalAttachResult, TerminalCloseParams, TerminalInputParams, TerminalListResult, TerminalOpenParams, TerminalOpenResult, TerminalResizeParams, TerminalUploadParams, TerminalUploadResult, ToolsCatalogParams, ToolsCatalogResult, ToolsEffectiveParams, ToolsEffectiveResult, ToolsInvokeParams, ToolsInvokeResult, TtsSpeakParams, TtsSpeakResult, UiCommandParams, UiCommandResult, UpdateHoldParams, UpdateHoldResult, UpdateRunParams, UpdateStatusParams, UpdateStatusResult, UsersLinkEmailParams, UsersLinkEmailResult, UsersListParams, UsersListResult, UsersPrefsGetParams, UsersPrefsGetResult, UsersPrefsSetParams, UsersPrefsSetResult, UsersSelfParams, UsersSelfResult, UsersSetAvatarParams, UsersSetAvatarResult, UsersSetDisplayNameParams, UsersSetDisplayNameResult, UsersSetRoleParams, UsersSetRoleResult, WakeParams, WebLoginStartParams, WebLoginWaitParams, WebPushTestParams, WizardCancelParams, WizardNextParams, WizardNextResult, WizardStartParams, WizardStartResult, WizardStatusParams, WizardStatusResult, WorkerDesktopLaunchParams, WorkerDesktopLaunchResult, WorkerDesktopObserveParams, WorkerDesktopObserveResult, WorktreesBranchesParams, WorktreesBranchesResult, WorktreesCreateParams, WorktreesGcParams, WorktreesGcResult, WorktreesListParams, WorktreesListResult, WorktreesRemoveParams, WorktreesRemoveResult, WorktreesRestoreParams } from '@openclaw/gateway-protocol';
 import type { AuditRunInspectParams, BoardActionParams, BoardEventParams, ConversationTurnResult, CronAddResult, CronGetParams, CronRemoveParams, CronRunParams, CronScratchGetParams, CronScratchSetParams, CronScratchSetResult, CronUpdateParams, DesktopObserveParams, ExecApprovalsNodeSetParams, GatewaySuspendPrepareResult, GatewaySuspendStatusResult, PluginsInstallParams, PluginsSessionActionResult, QuestionResolveParams, QuestionResolveResult, QuestionWaitAnswerResult, SessionsDispatchParams, SessionsGoalUpdateParams, SessionsResolveResult, SkillsInstallParams, SkillsUpdateParams, SystemAgentSetupVerifyResult, TalkClientCreateResult } from './params.ts';
 export interface GatewayMethods {
     'agent': {
@@ -913,6 +913,12 @@ export interface GatewayMethods {
         scope: 'operator.admin';
         role: 'operator';
     };
+    'openclaw.setup.activate.start': {
+        params: SystemAgentSetupActivateStartParams;
+        result: SystemAgentSetupActivateStartResult;
+        scope: 'operator.admin';
+        role: 'operator';
+    };
     'openclaw.setup.auth.start': {
         params: SystemAgentSetupAuthStartParams;
         result: SystemAgentSetupAuthStartResult;

package/dist/generated/params.d.ts

@@ -1178,6 +1178,10 @@ export type SessionApprovalEvent = {
                 expiresInDays?: number;
             };
             allowedDecisions: ("allow-once" | "allow-always" | "deny")[];
+            externalResolution?: {
+                label: string;
+                decisions: ("allow-once" | "allow-always")[];
+            };
         } | {
             kind: "system-agent";
             title: string;
@@ -1260,6 +1264,10 @@ export type SessionApprovalEvent = {
                 expiresInDays?: number;
             };
             allowedDecisions: ("allow-once" | "allow-always" | "deny")[];
+            externalResolution?: {
+                label: string;
+                decisions: ("allow-once" | "allow-always")[];
+            };
         } | {
             kind: "system-agent";
             title: string;
@@ -1346,6 +1354,10 @@ export type SessionApprovalEvent = {
                 expiresInDays?: number;
             };
             allowedDecisions: ("allow-once" | "allow-always" | "deny")[];
+            externalResolution?: {
+                label: string;
+                decisions: ("allow-once" | "allow-always")[];
+            };
         } | {
             kind: "system-agent";
             title: string;
@@ -1432,6 +1444,10 @@ export type SessionApprovalEvent = {
                 expiresInDays?: number;
             };
             allowedDecisions: ("allow-once" | "allow-always" | "deny")[];
+            externalResolution?: {
+                label: string;
+                decisions: ("allow-once" | "allow-always")[];
+            };
         } | {
             kind: "system-agent";
             title: string;
@@ -1517,6 +1533,10 @@ export type SessionApprovalEvent = {
                 expiresInDays?: number;
             };
             allowedDecisions: ("allow-once" | "allow-always" | "deny")[];
+            externalResolution?: {
+                label: string;
+                decisions: ("allow-once" | "allow-always")[];
+            };
         } | {
             kind: "system-agent";
             title: string;

package/dist/generated/params.js

@@ -1,4 +1,4 @@
-// Generated by scripts/gen-methods.ts from the pinned openclaw@2026.8.1 tarball (docs/runtime-kits.md 5.10). Regenerated with `npm run gen:openclaw`, never hand-edited.
+// Generated by scripts/gen-methods.ts from the pinned openclaw@2026.8.35 tarball (docs/runtime-kits.md 5.10). Regenerated with `npm run gen:openclaw`, never hand-edited.
 // Union patch-ups (Gap 6): these mirror the protocol.schema.json definitions of the same
 // name, with every anyOf/oneOf branch carrying its full property set (see the generator). The
 // gateway validates against the same schemas, so the kit accepts exactly what the gateway accepts.

package/dist/generated/report.json

@@ -1,13 +1,13 @@
 {
-    "engine": "2026.8.1",
+    "engine": "2026.8.35",
     "protocol": 4,
     "package": "openclaw",
-    "methods": 393,
-    "operatorMethods": 382,
+    "methods": 394,
+    "operatorMethods": 383,
     "nodeMethods": 11,
     "events": 55,
-    "matchedParams": 301,
-    "matchedResults": 192,
+    "matchedParams": 302,
+    "matchedResults": 193,
     "matchedEvents": 21,
     "patchedTypes": [
         "AuditRunInspectParams",

package/dist/index.d.ts

@@ -1,12 +1,13 @@
 export { ENGINE_VERSION, OPERATOR_SCOPES, PROTOCOL_VERSION } from './constants.ts';
-export type { Approval, CallOptions, Decision, GatewayEventName, GatewayEventPayload, GatewayMethod, GatewayParams, GatewayResult, GatewayTransport, GateResult, Hello, KitState, KitEventName, KitEventPayload, BrowserPing, LearningCapture, LearningMode, Member, PlanWindow, Route, RunEnd, RunEvent, RunRef, RunSpec, OutputSchema, SchemaOutput, RunUsage, SignInOptions, SignInView, ToolHost, ToolSpec, } from './types.ts';
+export type { Account, AccountId, AccountPick, AccountRef, Approval, CallOptions, Considered, Decision, Defaults, ModelInfo, MoveResult, PickWhy, Room, RoomSpan, RunSelection, SignInState, GatewayEventName, GatewayEventPayload, GatewayMethod, GatewayParams, GatewayResult, GatewayTransport, GateResult, Hello, KitState, KitEventName, KitEventPayload, BrowserPing, LearningCapture, LearningMode, Member, PlanWindow, Route, RunEnd, RunEvent, RunRef, RunSpec, OutputSchema, SchemaOutput, RunUsage, SignInOptions, SignInView, ToolHost, ToolSpec, } from './types.ts';
 export type { GatewayMethods } from './generated/methods.ts';
 export type { JsonValue } from './output.ts';
 export type { RouteFacts, RouteView } from './routes.ts';
 export { OpenClawKit, type KitOptions, type RetainedLogin } from './kit.ts';
 export type { AddKeyResult } from './keys.ts';
 export { stateWords, toAccountView, words, type AccountView, type WordKey } from './words.ts';
-export { AuthStoreUnreadableError } from './auth-store.ts';
+export { chooseAccount, consider, resolveSelection, type RoomOf } from './pick.ts';
+export { AuthStoreUnreadableError, AuthStoreSealSizeError } from './auth-store.ts';
 export { EngineAlreadyRunningError } from './engine-status.ts';
 export { readAgentDayUsage } from './day-usage.ts';
 export type { AgentDayUsage, DayUsageClient, EngineStartedCharge, EngineStartedKind } from './day-usage.ts';

package/dist/index.js

@@ -3,7 +3,8 @@
 export { ENGINE_VERSION, OPERATOR_SCOPES, PROTOCOL_VERSION } from "./constants.js";
 export { OpenClawKit } from "./kit.js";
 export { stateWords, toAccountView, words } from "./words.js";
-export { AuthStoreUnreadableError } from "./auth-store.js";
+export { chooseAccount, consider, resolveSelection } from "./pick.js";
+export { AuthStoreUnreadableError, AuthStoreSealSizeError } from "./auth-store.js";
 export { EngineAlreadyRunningError } from "./engine-status.js";
 export { readAgentDayUsage } from "./day-usage.js";
 export { readAgentUsage, agentUsageOf } from "./usage.js";

package/dist/kit.d.ts

@@ -2,7 +2,7 @@ import type { SealingAdapter } from '@byokit/secrets';
 import { type AddKeyResult } from './keys.ts';
 import { type RouteView } from './routes.ts';
 import type { BrowserHost, BrowserOptions } from './browser.ts';
-import type { Approval, CallOptions, Decision, GatewayMethod, GatewayParams, GatewayResult, GatewayTransport, Hello, KitState, KitEventName, KitEventPayload, LearningCapture, LearningMode, Member, RunEnd, RunEvent, RunSpec, OutputSchema, SchemaOutput, SignInOptions, SignInView, ToolHost, ToolSpec } from './types.ts';
+import type { Account, AccountId, Approval, CallOptions, Decision, Defaults, GatewayMethod, GatewayParams, GatewayResult, GatewayTransport, Hello, KitState, KitEventName, KitEventPayload, LearningCapture, LearningMode, Member, RunEnd, RunEvent, RunSpec, OutputSchema, SchemaOutput, SignInOptions, SignInView, ToolHost, ToolSpec } from './types.ts';
 export type KitOptions = {
     stateDir: string;
     authSeal?: SealingAdapter;
@@ -21,6 +21,7 @@ export type KitOptions = {
     permitted?: (tool: string) => boolean;
     gateBuiltins?: boolean;
     config?: object;
+    offered?: readonly string[];
     appOwnedSessions?: {
         keyPrefixes: string[];
     };
@@ -53,6 +54,8 @@ export declare class OpenClawKit {
     private transport?;
     private greeting?;
     private members?;
+    private readonly locks;
+    private accountsCtl?;
     private readonly bridge;
     private readonly keys;
     private readonly admission;
@@ -109,6 +112,10 @@ export declare class OpenClawKit {
         done: Promise<SignInView>;
     };
     signOut(member: Member, provider: string): Promise<void>;
+    accounts(member: Member): Promise<Account[]>;
+    renameAccount(member: Member, id: AccountId, name: string): Promise<Account>;
+    defaults(member: Member): Promise<Defaults>;
+    setDefaults(member: Member, d: Defaults): Promise<void>;
     /** Save an explicitly supplied API key (billed per use) in this member's separate key agent. */
     addKey(agentId: Member, o: {
         authChoice: string;

package/dist/kit.js

@@ -6,9 +6,12 @@ import { PROTOCOL_VERSION } from "./constants.js";
 import { atomic } from "./engine-patches.js";
 import { Approvals } from "./approvals.js";
 import { Bridge } from "./bridge.js";
-import { Engine } from "./engine.js";
+import { Engine, refusedOnly } from "./engine.js";
+import { AuthStoreSealSizeError } from "./auth-store.js";
 import { gatewayTransport } from "./transport.js";
 import { createMembers } from "./members.js";
+import { createAccounts } from "./accounts.js";
+import { createLocks } from "./locks.js";
 import { keyAgentId, KEY_PREFIX, MEMBER_ID } from "./members.js";
 import { confirmRetainedLogin as confirmLogin, migrateRetainedLogin as migrateLogin } from "./migrate.js";
 import { createRuns, signedInProviders } from "./runs.js";
@@ -176,6 +179,7 @@ const operatorMethods = new Set([
     'openclaw.chat',
     'openclaw.chat.history',
     'openclaw.setup.activate',
+    'openclaw.setup.activate.start',
     'openclaw.setup.auth.start',
     'openclaw.setup.detect',
     'openclaw.setup.prepare.start',
@@ -427,6 +431,8 @@ export class OpenClawKit {
     transport;
     greeting;
     members;
+    locks = createLocks();
+    accountsCtl;
     // One bridge and one approval surface per kit: listeners and run registrations survive reconnects (B3).
     // Only the socket itself is per-connection. Approvals always reaches the live transport through this.request().
     bridge;
@@ -739,6 +745,8 @@ export class OpenClawKit {
                 if (!operatorMethods.has(name) && !nodeMethods.has(name))
                     this.o.log?.(`gateway has unknown method: ${name}`);
             this.members = createMembers({ request: transport.request.bind(transport), root: this.engine.root });
+            this.accountsCtl = createAccounts({ request: transport.request.bind(transport), root: this.engine.root,
+                ensure: (member) => this.ensureMember(member), locks: this.locks });
             // The fail-closed tool bridge feeds the kit's single Approval surface (5.9, O5).
             await this.bridge.start();
             this.off.push(transport.onEvent((e) => this.approvalsCtl.handleEvent(e)));
@@ -754,8 +762,13 @@ export class OpenClawKit {
             const patchFailure = this.current.why === 'engine-patch';
             if (transport && this.transport === transport)
                 await this.disconnect();
-            await this.engine.stop();
+            const refused = await this.engine.stop().then(() => undefined, refusedOnly);
             await this.closeBrowsers();
+            const sealRefusal = refused ?? (error instanceof AuthStoreSealSizeError ? error : undefined);
+            if (sealRefusal) {
+                this.setState({ phase: 'failed', why: 'auth-store-seal-size', sealSize: { size: sealRefusal.size, cap: sealRefusal.cap, file: sealRefusal.file } });
+                throw sealRefusal;
+            }
             if (error instanceof Error && 'code' in error && error.code === 'engine-already-running') {
                 this.setState({ phase: 'failed', why: 'engine-already-running' });
                 throw error;
@@ -782,6 +795,7 @@ export class OpenClawKit {
         this.transport = undefined;
         this.greeting = undefined;
         this.members = undefined;
+        this.accountsCtl = undefined;
         this.browserPolicySessions.clear();
         this.bridge.stop();
         await transport?.stop();
@@ -912,6 +926,28 @@ export class OpenClawKit {
     signOut(member, provider) {
         return engineSignOut(this.signInCtx(), member, provider);
     }
+    // accounts (5.15, O14 step S5): the per-member index with listing, defaults and rename. Adding,
+    // removing, models, room, pick and move arrive in later steps.
+    accounts(member) {
+        if (!this.accountsCtl)
+            return Promise.reject(new Error('gateway not ready'));
+        return this.accountsCtl.list(member);
+    }
+    renameAccount(member, id, name) {
+        if (!this.accountsCtl)
+            return Promise.reject(new Error('gateway not ready'));
+        return this.accountsCtl.rename(member, id, name);
+    }
+    defaults(member) {
+        if (!this.accountsCtl)
+            return Promise.reject(new Error('gateway not ready'));
+        return this.accountsCtl.defaults(member);
+    }
+    setDefaults(member, d) {
+        if (!this.accountsCtl)
+            return Promise.reject(new Error('gateway not ready'));
+        return this.accountsCtl.setDefaults(member, d);
+    }
     /** Save an explicitly supplied API key (billed per use) in this member's separate key agent. */
     addKey(agentId, o) {
         return this.keys.add(agentId, o);
@@ -1012,7 +1048,7 @@ export class OpenClawKit {
         const safe = reconcileConfig(response.config, { root: this.engine.root, stateDir: this.o.stateDir,
             port: Number(readFileSync(join(this.engine.root, 'port'), 'utf8')), pluginId: this.o.plugin?.id ?? 'byokit',
             pluginDir: join(this.engine.root, 'plugin'), policyPath: fileURLToPath(new URL('../policy/policy.mjs', import.meta.url)), app: patch,
-            installPolicy: this.o.installPolicy, ...(this.o.browser ? { browser: this.browserConfig() } : {}) });
+            offered: this.o.offered, installPolicy: this.o.installPolicy, ...(this.o.browser ? { browser: this.browserConfig() } : {}) });
         if (this.o.browser && !browserToolPolicySafe(safe, this.toolNames()))
             throw new Error('browser tool policy refused');
         if (this.o.browser) {

package/dist/link.d.ts

@@ -1,6 +1,6 @@
 import type { BrowserHost } from './browser.ts';
 import { type IncomingMessage, type ServerResponse } from 'node:http';
-import { type Grant, type Host, type HostOptions } from '@byokit/link';
+import { type Grant, type Host, type HostOptions } from '@byokit/pair';
 import { type ServeIngress, type Via } from '@byokit/discover';
 import type { PushAction, RelayClient } from '@byokit/relay';
 import type { OpenClawKit } from './kit.ts';

package/dist/link.js

@@ -1,11 +1,11 @@
-// Host-side link adapter (7.1): typed, member-checked ops over @byokit/link, sealed approval push
+// Host-side link adapter (7.1): typed, member-checked ops over @byokit/pair, sealed approval push
 // via the relay (7.3). Node only.
 import { randomUUID } from 'node:crypto';
 import { sealBox } from '@byokit/seal';
 import { readFileSync } from 'node:fs';
 import { createServer } from 'node:http';
 import { WebSocketServer } from 'ws';
-import { PublicLinkError, } from '@byokit/link';
+import { PublicLinkError, } from '@byokit/pair';
 import { reach } from '@byokit/discover';
 import { ENGINE_VERSION } from "./constants.js";
 import { b64urlDecode, b64urlEncode, sealNotice } from "./notices.js";
@@ -232,7 +232,7 @@ export function openclawLink(kit, o) {
             throw refused();
         const args = isRecord(req.args) ? req.args : {};
         if (req.op.startsWith('oc.browser.')) {
-            // Keyed answers may be persisted by @byokit/link. Lease nonces and JPEGs are transient only.
+            // Keyed answers may be persisted by @byokit/pair. Lease nonces and JPEGs are transient only.
             if (req.key !== undefined)
                 throw refused();
             const host = browser();

package/dist/locks.d.ts

@@ -0,0 +1,5 @@
+export declare function createLocks(): {
+    shared<T>(agentId: string, work: () => Promise<T>): Promise<T>;
+    exclusive<T>(agentIds: string[], work: () => Promise<T>): Promise<T>;
+    live(agentId: string): boolean;
+};