@gaodefa/daocore 2026.5.73 → 2026.5.75

package/dist/cli-runner-FnNwgi9z.js

@@ -0,0 +1,540 @@
+import { i as formatErrorMessage } from "./errors-D_oyTIw2.js";
+import { t as createSubsystemLogger } from "./subsystem-CppbuBPw.js";
+import { s as resolveBlockMessage, t as getGlobalHookRunner } from "./hook-runner-global-RR7B_IHd.js";
+import "./tokens-D8MVQSp9.js";
+import { _ as buildAgentHookContextChannelFields } from "./attempt.prompt-helpers--NxxT8xy.js";
+import "./pi-embedded-helpers-4s4Sorfy.js";
+import { p as isFailoverErrorMessage, t as classifyFailoverReason } from "./errors-D02TXWxc.js";
+import { c as resolveFailoverStatus, i as isFailoverError, t as FailoverError } from "./failover-error-BIrBMqAb.js";
+import { a as finalizeHarnessContextEngineTurn, n as bootstrapHarnessContextEngine, s as runHarnessContextEngineMaintenance } from "./context-engine-lifecycle-BRYjJ_xx.js";
+import { i as loadCliSessionHistoryMessages, o as buildAgentHookConversationMessages, r as loadCliSessionContextEngineMessages } from "./session-history-CcywzaUH.js";
+import { a as runAgentHarnessLlmOutputHook, i as runAgentHarnessLlmInputHook, n as runAgentHarnessAgentEndHook, o as buildAgentHookContext, t as awaitAgentHarnessAgentEndHook } from "./lifecycle-hook-helpers-DsCr5Yp0.js";
+import { SessionManager } from "@earendil-works/pi-coding-agent";
+//#region src/agents/cli-runner.ts
+const log = createSubsystemLogger("agents/cli-runner");
+function flushSessionManagerFile(sessionManager) {
+	sessionManager["_rewriteFile"]?.();
+}
+function buildHandledReplyPayloads(reply) {
+	const normalized = reply ?? { text: "NO_REPLY" };
+	return [{
+		text: normalized.text,
+		mediaUrl: normalized.mediaUrl,
+		mediaUrls: normalized.mediaUrls,
+		replyToId: normalized.replyToId,
+		audioAsVoice: normalized.audioAsVoice,
+		isError: normalized.isError,
+		isReasoning: normalized.isReasoning
+	}];
+}
+function buildCliHookUserMessage(prompt) {
+	return {
+		role: "user",
+		content: prompt,
+		timestamp: Date.now()
+	};
+}
+function buildCliHookAssistantMessage(params) {
+	return {
+		role: "assistant",
+		content: [{
+			type: "text",
+			text: params.text
+		}],
+		api: "responses",
+		provider: params.provider,
+		model: params.model,
+		...params.usage ? { usage: params.usage } : {},
+		stopReason: "stop",
+		timestamp: Date.now()
+	};
+}
+function isAgentMessage(value) {
+	return Boolean(value && typeof value === "object" && "role" in value);
+}
+function buildCliContextEngineUserMessage(prompt) {
+	return {
+		role: "user",
+		content: prompt,
+		timestamp: Date.now()
+	};
+}
+function buildCliContextEngineAssistantMessage(params) {
+	return buildCliHookAssistantMessage(params);
+}
+function shouldAwaitCliAgentEndHook(params) {
+	return !params.messageChannel && !params.messageProvider;
+}
+async function runCliAgentEndHook(params, hookParams) {
+	if (shouldAwaitCliAgentEndHook(params)) {
+		await awaitAgentHarnessAgentEndHook(hookParams);
+		return;
+	}
+	runAgentHarnessAgentEndHook(hookParams);
+}
+async function finalizeCliContextEngineTurn(params) {
+	const { context } = params;
+	if (!context.contextEngine) return;
+	const { params: runParams } = context;
+	const prePromptMessages = params.historyMessages.filter(isAgentMessage);
+	const turnMessages = [];
+	if (context.contextEngineTurnPrompt) turnMessages.push(buildCliContextEngineUserMessage(context.contextEngineTurnPrompt));
+	if (params.assistantText) turnMessages.push(buildCliContextEngineAssistantMessage({
+		text: params.assistantText,
+		provider: runParams.provider,
+		model: context.modelId,
+		usage: params.output.usage
+	}));
+	let deferredTurnMaintenance;
+	if ((await finalizeHarnessContextEngineTurn({
+		contextEngine: context.contextEngine,
+		promptError: false,
+		aborted: runParams.abortSignal?.aborted === true,
+		yieldAborted: false,
+		sessionIdUsed: runParams.sessionId,
+		sessionKey: runParams.sessionKey,
+		sessionFile: runParams.sessionFile,
+		messagesSnapshot: [...prePromptMessages, ...turnMessages],
+		prePromptMessageCount: prePromptMessages.length,
+		config: context.contextEngineConfig,
+		runMaintenance: async (maintenanceParams) => await runHarnessContextEngineMaintenance({
+			...maintenanceParams,
+			onDeferredMaintenance: (promise) => {
+				deferredTurnMaintenance = promise;
+			}
+		}),
+		warn: (message) => log.warn(message)
+	})).postTurnFinalizationSucceeded && deferredTurnMaintenance) context.contextEngineDeferredTurnMaintenance = deferredTurnMaintenance;
+}
+async function runCliAgent(params) {
+	params.onExecutionStarted?.();
+	if (params.trigger === "cron") {
+		const startedAt = Date.now();
+		const hookRunner = getGlobalHookRunner();
+		if (hookRunner?.hasHooks("before_agent_reply")) {
+			const hookContext = {
+				runId: params.runId,
+				jobId: params.jobId,
+				agentId: params.agentId,
+				sessionKey: params.sessionKey,
+				sessionId: params.sessionId,
+				workspaceDir: params.workspaceDir,
+				trigger: params.trigger,
+				...buildAgentHookContextChannelFields(params)
+			};
+			params.onExecutionPhase?.({
+				phase: "before_agent_reply",
+				provider: params.provider,
+				model: params.model ?? ""
+			});
+			const hookResult = await hookRunner.runBeforeAgentReply({ cleanedBody: params.prompt }, hookContext);
+			if (hookResult?.handled) return {
+				payloads: buildHandledReplyPayloads(hookResult.reply),
+				meta: {
+					durationMs: Date.now() - startedAt,
+					agentMeta: {
+						sessionId: params.sessionId,
+						provider: params.provider,
+						model: params.model ?? ""
+					},
+					finalAssistantVisibleText: hookResult.reply?.text ?? "NO_REPLY",
+					finalAssistantRawText: hookResult.reply?.text ?? "NO_REPLY"
+				}
+			};
+			params.onExecutionPhase?.({
+				phase: "runtime_plugins",
+				provider: params.provider,
+				model: params.model ?? ""
+			});
+		}
+	}
+	const { prepareCliRunContext } = await import("./prepare.runtime.js");
+	const context = await prepareCliRunContext(params);
+	try {
+		return await runPreparedCliAgent(context);
+	} finally {
+		if (params.cleanupCliLiveSessionOnRunEnd === true) {
+			const { closeClaudeLiveSessionForContext } = await import("./claude-live-session-x1WK_J-1.js");
+			await closeClaudeLiveSessionForContext(context);
+		}
+		if (params.cleanupBundleMcpOnRunEnd === true) {
+			const { closeMcpLoopbackServer } = await import("./mcp-http-Bcx2IvUV.js");
+			await closeMcpLoopbackServer();
+		}
+	}
+}
+async function runPreparedCliAgent(context) {
+	const { executePreparedCliRun } = await import("./execute.runtime.js");
+	const { params } = context;
+	const hookRunner = getGlobalHookRunner();
+	const hasLlmInputHooks = hookRunner?.hasHooks("llm_input") === true;
+	const hasLlmOutputHooks = hookRunner?.hasHooks("llm_output") === true;
+	const hasAgentEndHooks = hookRunner?.hasHooks("agent_end") === true;
+	const hasBeforeAgentRunHooks = hookRunner?.hasHooks("before_agent_run") === true;
+	const historyMessages = hasLlmInputHooks || hasAgentEndHooks || hasBeforeAgentRunHooks ? await loadCliSessionHistoryMessages({
+		sessionId: params.sessionId,
+		sessionFile: params.sessionFile,
+		sessionKey: params.sessionKey,
+		agentId: params.agentId,
+		config: params.config
+	}) : [];
+	const llmInputEvent = {
+		runId: params.runId,
+		sessionId: params.sessionId,
+		provider: params.provider,
+		model: context.modelId,
+		systemPrompt: context.systemPrompt,
+		prompt: params.prompt,
+		historyMessages,
+		imagesCount: params.images?.length ?? 0
+	};
+	const hookContext = {
+		runId: params.runId,
+		jobId: params.jobId,
+		agentId: params.agentId,
+		sessionKey: params.sessionKey,
+		sessionId: params.sessionId,
+		workspaceDir: params.workspaceDir,
+		trigger: params.trigger,
+		...context.contextWindowInfo?.tokens ? { contextTokenBudget: context.contextWindowInfo.tokens } : {},
+		...context.contextWindowInfo?.source ? { contextWindowSource: context.contextWindowInfo.source } : {},
+		...context.contextWindowInfo?.referenceTokens ? { contextWindowReferenceTokens: context.contextWindowInfo.referenceTokens } : {},
+		...buildAgentHookContextChannelFields(params)
+	};
+	const buildAgentEndMessages = (lastAssistant) => [...buildAgentHookConversationMessages({
+		historyMessages,
+		currentTurnMessages: [buildCliHookUserMessage(params.prompt), ...lastAssistant ? [lastAssistant] : []]
+	})];
+	const buildFailedAgentEndEvent = (error) => ({
+		messages: buildAgentEndMessages(),
+		success: false,
+		error,
+		durationMs: Date.now() - context.started
+	});
+	const buildBlockedAgentEndEvent = (message) => ({
+		messages: buildAgentHookConversationMessages({
+			historyMessages,
+			currentTurnMessages: [buildCliHookUserMessage(message)]
+		}),
+		success: false,
+		error: message,
+		durationMs: Date.now() - context.started
+	});
+	const buildBlockedBeforeAgentRunResult = (message) => ({
+		payloads: [{
+			text: message,
+			isError: true
+		}],
+		meta: {
+			durationMs: Date.now() - context.started,
+			finalAssistantVisibleText: message,
+			finalAssistantRawText: message,
+			livenessState: "blocked",
+			error: {
+				kind: "hook_block",
+				message
+			},
+			systemPromptReport: context.systemPromptReport,
+			executionTrace: {
+				winnerProvider: params.provider,
+				winnerModel: context.modelId,
+				attempts: [{
+					provider: params.provider,
+					model: context.modelId,
+					result: "error",
+					reason: "before_agent_run blocked the run"
+				}],
+				fallbackUsed: false,
+				runner: "cli"
+			},
+			requestShaping: {
+				...params.thinkLevel ? { thinking: params.thinkLevel } : {},
+				...context.effectiveAuthProfileId ? { authMode: "auth-profile" } : {}
+			},
+			completion: {
+				finishReason: "blocked",
+				stopReason: "blocked",
+				refusal: true
+			},
+			agentMeta: {
+				sessionId: params.sessionId ?? "",
+				provider: params.provider,
+				model: context.modelId
+			}
+		}
+	});
+	const persistBlockedBeforeAgentRun = async (block) => {
+		try {
+			const nowMs = Date.now();
+			const sessionManager = SessionManager.open(params.sessionFile);
+			sessionManager.appendMessage({
+				role: "user",
+				content: [{
+					type: "text",
+					text: block.message
+				}],
+				timestamp: nowMs,
+				idempotencyKey: `hook-block:before_agent_run:user:${params.runId}`,
+				__daocore: { beforeAgentRunBlocked: {
+					blockedBy: block.pluginId,
+					blockedAt: nowMs
+				} }
+			});
+			flushSessionManagerFile(sessionManager);
+		} catch (err) {
+			log.warn(`before_agent_run block: failed to persist redacted CLI user message: ${formatErrorMessage(err)}`);
+		}
+	};
+	const toCliRunFailure = (error) => {
+		if (isFailoverError(error)) throw error;
+		const message = formatErrorMessage(error);
+		if (isFailoverErrorMessage(message, { provider: params.provider })) {
+			const reason = classifyFailoverReason(message, { provider: params.provider }) ?? "unknown";
+			const status = resolveFailoverStatus(reason);
+			throw new FailoverError(message, {
+				reason,
+				provider: params.provider,
+				model: context.modelId,
+				sessionId: params.sessionId,
+				lane: params.lane,
+				status
+			});
+		}
+		throw error;
+	};
+	const executeCliAttempt = async (cliSessionIdToUse) => {
+		const output = await executePreparedCliRun(context, cliSessionIdToUse);
+		const assistantText = output.text.trim();
+		if (!assistantText) throw new FailoverError("CLI backend returned an empty response.", {
+			reason: "empty_response",
+			provider: params.provider,
+			model: context.modelId,
+			sessionId: params.sessionId,
+			lane: params.lane
+		});
+		const assistantTexts = assistantText ? [assistantText] : [];
+		const lastAssistant = assistantText.length > 0 ? buildCliHookAssistantMessage({
+			text: assistantText,
+			provider: params.provider,
+			model: context.modelId,
+			usage: output.usage
+		}) : void 0;
+		if (assistantText.length > 0 && hasLlmOutputHooks) runAgentHarnessLlmOutputHook({
+			event: {
+				runId: params.runId,
+				sessionId: params.sessionId,
+				provider: params.provider,
+				model: context.modelId,
+				...context.contextWindowInfo?.tokens ? { contextTokenBudget: context.contextWindowInfo.tokens } : {},
+				...context.contextWindowInfo?.source ? { contextWindowSource: context.contextWindowInfo.source } : {},
+				...context.contextWindowInfo?.referenceTokens ? { contextWindowReferenceTokens: context.contextWindowInfo.referenceTokens } : {},
+				resolvedRef: `${params.provider}/${context.modelId}`,
+				assistantTexts,
+				...lastAssistant ? { lastAssistant } : {},
+				...output.usage ? { usage: output.usage } : {}
+			},
+			ctx: hookContext,
+			hookRunner
+		});
+		return {
+			output,
+			assistantText,
+			lastAssistant
+		};
+	};
+	const buildCliRunResult = (resultParams) => {
+		const text = resultParams.output.text?.trim();
+		const rawText = resultParams.output.rawText?.trim();
+		return {
+			payloads: text ? [{ text }] : void 0,
+			meta: {
+				durationMs: Date.now() - context.started,
+				...resultParams.output.finalPromptText ? { finalPromptText: resultParams.output.finalPromptText } : {},
+				...text || rawText ? {
+					...text ? { finalAssistantVisibleText: text } : {},
+					...rawText ? { finalAssistantRawText: rawText } : {}
+				} : {},
+				systemPromptReport: context.systemPromptReport,
+				executionTrace: {
+					winnerProvider: params.provider,
+					winnerModel: context.modelId,
+					attempts: [{
+						provider: params.provider,
+						model: context.modelId,
+						result: "success"
+					}],
+					fallbackUsed: false,
+					runner: "cli"
+				},
+				requestShaping: {
+					...params.thinkLevel ? { thinking: params.thinkLevel } : {},
+					...context.effectiveAuthProfileId ? { authMode: "auth-profile" } : {}
+				},
+				completion: {
+					finishReason: "stop",
+					stopReason: "completed",
+					refusal: false
+				},
+				agentMeta: {
+					sessionId: resultParams.effectiveCliSessionId ?? params.sessionId ?? "",
+					provider: params.provider,
+					model: context.modelId,
+					usage: resultParams.output.usage,
+					...resultParams.output.usage ? { lastCallUsage: resultParams.output.usage } : {},
+					...resultParams.effectiveCliSessionId ? { cliSessionBinding: {
+						sessionId: resultParams.effectiveCliSessionId,
+						...context.effectiveAuthProfileId ? { authProfileId: context.effectiveAuthProfileId } : {},
+						...context.authEpoch ? { authEpoch: context.authEpoch } : {},
+						authEpochVersion: context.authEpochVersion,
+						...context.extraSystemPromptHash ? { extraSystemPromptHash: context.extraSystemPromptHash } : {},
+						...context.promptToolNamesHash ? { promptToolNamesHash: context.promptToolNamesHash } : {},
+						...context.preparedBackend.mcpConfigHash ? { mcpConfigHash: context.preparedBackend.mcpConfigHash } : {},
+						...context.preparedBackend.mcpResumeHash ? { mcpResumeHash: context.preparedBackend.mcpResumeHash } : {}
+					} } : {}
+				}
+			}
+		};
+	};
+	try {
+		await bootstrapHarnessContextEngine({
+			hadSessionFile: context.hadSessionFile,
+			contextEngine: context.contextEngine,
+			sessionId: params.sessionId,
+			sessionKey: params.sessionKey,
+			sessionFile: params.sessionFile,
+			config: context.contextEngineConfig,
+			warn: (message) => log.warn(message)
+		});
+		const contextEngineHistoryMessages = context.contextEngine ? await loadCliSessionContextEngineMessages({
+			sessionId: params.sessionId,
+			sessionFile: params.sessionFile,
+			sessionKey: params.sessionKey,
+			agentId: params.agentId,
+			config: params.config
+		}) : [];
+		if (hasBeforeAgentRunHooks && hookRunner) {
+			let beforeRunResult;
+			try {
+				beforeRunResult = await hookRunner.runBeforeAgentRun({
+					prompt: params.prompt,
+					systemPrompt: context.systemPrompt,
+					messages: buildAgentHookConversationMessages({
+						historyMessages,
+						currentTurnMessages: []
+					}),
+					channelId: hookContext.channelId,
+					accountId: params.agentAccountId
+				}, buildAgentHookContext(hookContext));
+			} catch {
+				const blockMessage = resolveBlockMessage({
+					outcome: "block",
+					reason: "before_agent_run hook failed"
+				}, { blockedBy: "before_agent_run" });
+				await persistBlockedBeforeAgentRun({
+					message: blockMessage,
+					pluginId: "before_agent_run"
+				});
+				await runCliAgentEndHook(params, {
+					event: buildBlockedAgentEndEvent(blockMessage),
+					ctx: hookContext,
+					hookRunner
+				});
+				return buildBlockedBeforeAgentRunResult(blockMessage);
+			}
+			const beforeRunDecision = beforeRunResult?.decision;
+			if (beforeRunDecision?.outcome === "block") {
+				const blockMessage = resolveBlockMessage(beforeRunDecision, { blockedBy: beforeRunResult?.pluginId ?? "unknown" });
+				await persistBlockedBeforeAgentRun({
+					message: blockMessage,
+					pluginId: beforeRunResult?.pluginId ?? "unknown"
+				});
+				await runCliAgentEndHook(params, {
+					event: buildBlockedAgentEndEvent(blockMessage),
+					ctx: hookContext,
+					hookRunner
+				});
+				return buildBlockedBeforeAgentRunResult(blockMessage);
+			}
+		}
+		runAgentHarnessLlmInputHook({
+			event: llmInputEvent,
+			ctx: hookContext,
+			hookRunner
+		});
+		try {
+			const { output, lastAssistant } = await executeCliAttempt(context.reusableCliSession.sessionId);
+			const assistantText = output.text.trim();
+			const effectiveCliSessionId = output.sessionId ?? context.reusableCliSession.sessionId;
+			await finalizeCliContextEngineTurn({
+				context,
+				historyMessages: context.contextEngine ? contextEngineHistoryMessages : historyMessages,
+				assistantText,
+				output
+			});
+			await runCliAgentEndHook(params, {
+				event: {
+					messages: buildAgentEndMessages(lastAssistant),
+					success: true,
+					durationMs: Date.now() - context.started
+				},
+				ctx: hookContext,
+				hookRunner
+			});
+			return buildCliRunResult({
+				output,
+				effectiveCliSessionId
+			});
+		} catch (err) {
+			if (isFailoverError(err)) {
+				const retryableSessionId = context.reusableCliSession.sessionId ?? params.cliSessionId;
+				if (err.reason === "session_expired" && retryableSessionId && params.sessionKey) try {
+					const { output, lastAssistant } = await executeCliAttempt(void 0);
+					const assistantText = output.text.trim();
+					const effectiveCliSessionId = output.sessionId;
+					await finalizeCliContextEngineTurn({
+						context,
+						historyMessages: context.contextEngine ? contextEngineHistoryMessages : historyMessages,
+						assistantText,
+						output
+					});
+					await runCliAgentEndHook(params, {
+						event: {
+							messages: buildAgentEndMessages(lastAssistant),
+							success: true,
+							durationMs: Date.now() - context.started
+						},
+						ctx: hookContext,
+						hookRunner
+					});
+					return buildCliRunResult({
+						output,
+						effectiveCliSessionId
+					});
+				} catch (retryErr) {
+					await runCliAgentEndHook(params, {
+						event: buildFailedAgentEndEvent(formatErrorMessage(retryErr)),
+						ctx: hookContext,
+						hookRunner
+					});
+					return toCliRunFailure(retryErr);
+				}
+				await runCliAgentEndHook(params, {
+					event: buildFailedAgentEndEvent(formatErrorMessage(err)),
+					ctx: hookContext,
+					hookRunner
+				});
+				throw err;
+			}
+			await runCliAgentEndHook(params, {
+				event: buildFailedAgentEndEvent(formatErrorMessage(err)),
+				ctx: hookContext,
+				hookRunner
+			});
+			return toCliRunFailure(err);
+		}
+	} finally {
+		await context.preparedBackend.cleanup?.();
+	}
+}
+//#endregion
+export { runPreparedCliAgent as n, runCliAgent as t };

package/dist/cli-runner.runtime-3y8ztIrM.js

@@ -0,0 +1,4 @@
+import { c as setCliSessionId, i as getCliSessionId } from "./cli-session-2-w0GHt8.js";
+import { t as runCliAgent } from "./cli-runner-FnNwgi9z.js";
+import "./cli-runner.runtime-DjJNUNqh.js";
+export { getCliSessionId, runCliAgent, setCliSessionId };

package/dist/cli-runner.runtime-DjJNUNqh.js

@@ -0,0 +1,3 @@
+import "./cli-session-2-w0GHt8.js";
+import "./cli-runner-FnNwgi9z.js";
+export {};

package/dist/cli-runner.runtime.js

@@ -1 +1 @@
-export * from "./cli-runner.runtime-CQLSyTQY.js";
+export * from "./cli-runner.runtime-3y8ztIrM.js";

package/dist/cli-startup-metadata.json

@@ -31,14 +31,14 @@
   "secretsHelpSourceSignature": "98f16f85bbf79bf5f2b44f095dfd660e6e316890",
   "nodesHelpSourceSignature": "250d758110b3ffd7e90be1e132cd932880ab84ca",
   "subcommandHelpSourceSignature": "1febb6841dd88685cfba33c5699f782a68091cb7",
-  "browserHelpText": "\nDaoCore 2026.5.73 (0284ba3) — All your chats, one DaoCore.\n\nUsage: daocore browser [options] [command]\n\nManage DaoCore's dedicated browser (Chrome/Chromium)\n\nOptions:\n  --browser-profile <name>  Browser profile name (default from config)\n  --expect-final            Wait for final response (agent) (default: false)\n  -h, --help                Display help for command\n  --json                    Output machine-readable JSON (default: false)\n  --timeout <ms>            Timeout in ms (default: \"30000\")\n  --token <token>           Gateway token (if required)\n  --url <url>               Gateway WebSocket URL (defaults to\n                            gateway.remote.url when configured)\n\nCommands:\n  click                     Click an element by ref from snapshot\n  click-coords              Click viewport coordinates\n  close                     Close a tab (target id optional)\n  console                   Get recent console messages\n  cookies                   Read/write cookies\n  create-profile            Create a new browser profile\n  delete-profile            Delete a browser profile\n  dialog                    Arm the next modal dialog (alert/confirm/prompt)\n  doctor                    Check browser plugin readiness\n  download                  Click a ref and save the resulting download\n  drag                      Drag from one ref to another\n  errors                    Get recent page errors\n  evaluate                  Evaluate a function against the page or a ref\n  fill                      Fill a form with JSON field descriptors\n  focus                     Focus a tab by target id, tab id, label, or unique\n                            target id prefix\n  highlight                 Highlight an element by ref\n  hover                     Hover an element by ai ref\n  navigate                  Navigate the current tab to a URL\n  open                      Open a URL in a new tab\n  pdf                       Save page as PDF\n  press                     Press a key\n  profiles                  List all browser profiles\n  requests                  Get recent network requests (best-effort)\n  reset-profile             Reset browser profile (moves it to Trash)\n  resize                    Resize the viewport\n  responsebody              Wait for a network response and return its body\n  screenshot                Capture a screenshot (MEDIA:<path>)\n  scrollintoview            Scroll an element into view by ref from snapshot\n  select                    Select option(s) in a select element\n  set                       Browser environment settings\n  snapshot                  Capture a snapshot (default: ai; aria is the\n                            accessibility tree)\n  start                     Start the browser (no-op if already running)\n  status                    Show browser status\n  stop                      Stop the browser (best-effort)\n  storage                   Read/write localStorage/sessionStorage\n  tab                       Tab shortcuts (index-based)\n  tabs                      List open tabs\n  trace                     Record a Playwright trace\n  type                      Type into an element by ref from snapshot\n  upload                    Arm file upload for the next file chooser\n  wait                      Wait for time, selector, URL, load state, or JS\n                            conditions\n  waitfordownload           Wait for the next download (and save it)\n\nExamples:\n  daocore browser status\n  daocore browser start\n  daocore browser start --headless\n  daocore browser stop\n  daocore browser tabs\n  daocore browser open https://example.com\n  daocore browser focus abcd1234\n  daocore browser close abcd1234\n  daocore browser screenshot\n  daocore browser screenshot --full-page\n  daocore browser screenshot --ref 12\n  daocore browser snapshot\n  daocore browser snapshot --format aria --limit 200\n  daocore browser snapshot --efficient\n  daocore browser snapshot --labels\n  daocore browser navigate https://example.com\n  daocore browser resize 1280 720\n  daocore browser click 12 --double\n  daocore browser click-coords 120 340\n  daocore browser type 23 \"hello\" --submit\n  daocore browser press Enter\n  daocore browser hover 44\n  daocore browser drag 10 11\n  daocore browser select 9 OptionA OptionB\n  daocore browser upload /tmp/daocore/uploads/file.pdf\n  daocore browser fill --fields '[{\"ref\":\"1\",\"value\":\"Ada\"}]'\n  daocore browser dialog --accept\n  daocore browser wait --text \"Done\"\n  daocore browser evaluate --fn '(el) => el.textContent' --ref 7\n  daocore browser console --level error\n  daocore browser pdf\n\nDocs: https://daocore-ai.vercel.app/cli/browser\n\n",
-  "secretsHelpText": "\nDaoCore 2026.5.73 (0284ba3) — All your chats, one DaoCore.\n\nUsage: daocore secrets [options] [command]\n\nSecrets runtime controls\n\nOptions:\n  -h, --help  Display help for command\n\nCommands:\n  apply       Apply a previously generated secrets plan\n  audit       Audit plaintext secrets, unresolved refs, and precedence drift\n  configure   Interactive secrets helper (provider setup + SecretRef mapping +\n              preflight)\n  help        Display help for command\n  reload      Re-resolve secret references and atomically swap runtime snapshot\n\nDocs: https://daocore-ai.vercel.app/gateway/security\n\n",
-  "nodesHelpText": "\nDaoCore 2026.5.73 (0284ba3) — All your chats, one DaoCore.\n\nUsage: daocore nodes [options] [command]\n\nManage gateway-owned nodes (pairing, status, invoke, and media)\n\nOptions:\n  -h, --help  Display help for command\n\nCommands:\n  approve     Approve a pending pairing request\n  camera      Capture camera media from a paired node\n  canvas      Capture or render canvas content from a paired node\n  describe    Describe a node (capabilities + supported invoke commands)\n  help        Display help for command\n  invoke      Invoke a command on a paired node\n  list        List pending and paired nodes\n  location    Fetch location from a paired node\n  notify      Send a local notification on a node (mac only)\n  pending     List pending pairing requests\n  push        Send an APNs test push to an iOS node\n  reject      Reject a pending pairing request\n  remove      Remove a paired node entry\n  rename      Rename a paired node (display name override)\n  screen      Capture screen recordings from a paired node\n  status      List known nodes with connection status and capabilities\n\nExamples:\n  daocore nodes status\n    List known nodes with live status.\n  daocore nodes pairing pending\n    Show pending node pairing requests.\n  daocore nodes remove --node <id|name|ip>\n    Remove a stale paired node entry.\n  daocore nodes invoke --node <id> --command system.which --params '{\"name\":\"uname\"}'\n    Invoke a node command directly.\n  daocore nodes camera snap --node <id>\n    Capture a photo from a node camera.\n\nDocs: https://daocore-ai.vercel.app/cli/nodes\n\n",
+  "browserHelpText": "\nDaoCore 2026.5.75 (a7b2b6d) — All your chats, one DaoCore.\n\nUsage: daocore browser [options] [command]\n\nManage DaoCore's dedicated browser (Chrome/Chromium)\n\nOptions:\n  --browser-profile <name>  Browser profile name (default from config)\n  --expect-final            Wait for final response (agent) (default: false)\n  -h, --help                Display help for command\n  --json                    Output machine-readable JSON (default: false)\n  --timeout <ms>            Timeout in ms (default: \"30000\")\n  --token <token>           Gateway token (if required)\n  --url <url>               Gateway WebSocket URL (defaults to\n                            gateway.remote.url when configured)\n\nCommands:\n  click                     Click an element by ref from snapshot\n  click-coords              Click viewport coordinates\n  close                     Close a tab (target id optional)\n  console                   Get recent console messages\n  cookies                   Read/write cookies\n  create-profile            Create a new browser profile\n  delete-profile            Delete a browser profile\n  dialog                    Arm the next modal dialog (alert/confirm/prompt)\n  doctor                    Check browser plugin readiness\n  download                  Click a ref and save the resulting download\n  drag                      Drag from one ref to another\n  errors                    Get recent page errors\n  evaluate                  Evaluate a function against the page or a ref\n  fill                      Fill a form with JSON field descriptors\n  focus                     Focus a tab by target id, tab id, label, or unique\n                            target id prefix\n  highlight                 Highlight an element by ref\n  hover                     Hover an element by ai ref\n  navigate                  Navigate the current tab to a URL\n  open                      Open a URL in a new tab\n  pdf                       Save page as PDF\n  press                     Press a key\n  profiles                  List all browser profiles\n  requests                  Get recent network requests (best-effort)\n  reset-profile             Reset browser profile (moves it to Trash)\n  resize                    Resize the viewport\n  responsebody              Wait for a network response and return its body\n  screenshot                Capture a screenshot (MEDIA:<path>)\n  scrollintoview            Scroll an element into view by ref from snapshot\n  select                    Select option(s) in a select element\n  set                       Browser environment settings\n  snapshot                  Capture a snapshot (default: ai; aria is the\n                            accessibility tree)\n  start                     Start the browser (no-op if already running)\n  status                    Show browser status\n  stop                      Stop the browser (best-effort)\n  storage                   Read/write localStorage/sessionStorage\n  tab                       Tab shortcuts (index-based)\n  tabs                      List open tabs\n  trace                     Record a Playwright trace\n  type                      Type into an element by ref from snapshot\n  upload                    Arm file upload for the next file chooser\n  wait                      Wait for time, selector, URL, load state, or JS\n                            conditions\n  waitfordownload           Wait for the next download (and save it)\n\nExamples:\n  daocore browser status\n  daocore browser start\n  daocore browser start --headless\n  daocore browser stop\n  daocore browser tabs\n  daocore browser open https://example.com\n  daocore browser focus abcd1234\n  daocore browser close abcd1234\n  daocore browser screenshot\n  daocore browser screenshot --full-page\n  daocore browser screenshot --ref 12\n  daocore browser snapshot\n  daocore browser snapshot --format aria --limit 200\n  daocore browser snapshot --efficient\n  daocore browser snapshot --labels\n  daocore browser navigate https://example.com\n  daocore browser resize 1280 720\n  daocore browser click 12 --double\n  daocore browser click-coords 120 340\n  daocore browser type 23 \"hello\" --submit\n  daocore browser press Enter\n  daocore browser hover 44\n  daocore browser drag 10 11\n  daocore browser select 9 OptionA OptionB\n  daocore browser upload /tmp/daocore/uploads/file.pdf\n  daocore browser fill --fields '[{\"ref\":\"1\",\"value\":\"Ada\"}]'\n  daocore browser dialog --accept\n  daocore browser wait --text \"Done\"\n  daocore browser evaluate --fn '(el) => el.textContent' --ref 7\n  daocore browser console --level error\n  daocore browser pdf\n\nDocs: https://daocore-ai.vercel.app/cli/browser\n\n",
+  "secretsHelpText": "\nDaoCore 2026.5.75 (a7b2b6d) — All your chats, one DaoCore.\n\nUsage: daocore secrets [options] [command]\n\nSecrets runtime controls\n\nOptions:\n  -h, --help  Display help for command\n\nCommands:\n  apply       Apply a previously generated secrets plan\n  audit       Audit plaintext secrets, unresolved refs, and precedence drift\n  configure   Interactive secrets helper (provider setup + SecretRef mapping +\n              preflight)\n  help        Display help for command\n  reload      Re-resolve secret references and atomically swap runtime snapshot\n\nDocs: https://daocore-ai.vercel.app/gateway/security\n\n",
+  "nodesHelpText": "\nDaoCore 2026.5.75 (a7b2b6d) — All your chats, one DaoCore.\n\nUsage: daocore nodes [options] [command]\n\nManage gateway-owned nodes (pairing, status, invoke, and media)\n\nOptions:\n  -h, --help  Display help for command\n\nCommands:\n  approve     Approve a pending pairing request\n  camera      Capture camera media from a paired node\n  canvas      Capture or render canvas content from a paired node\n  describe    Describe a node (capabilities + supported invoke commands)\n  help        Display help for command\n  invoke      Invoke a command on a paired node\n  list        List pending and paired nodes\n  location    Fetch location from a paired node\n  notify      Send a local notification on a node (mac only)\n  pending     List pending pairing requests\n  push        Send an APNs test push to an iOS node\n  reject      Reject a pending pairing request\n  remove      Remove a paired node entry\n  rename      Rename a paired node (display name override)\n  screen      Capture screen recordings from a paired node\n  status      List known nodes with connection status and capabilities\n\nExamples:\n  daocore nodes status\n    List known nodes with live status.\n  daocore nodes pairing pending\n    Show pending node pairing requests.\n  daocore nodes remove --node <id|name|ip>\n    Remove a stale paired node entry.\n  daocore nodes invoke --node <id> --command system.which --params '{\"name\":\"uname\"}'\n    Invoke a node command directly.\n  daocore nodes camera snap --node <id>\n    Capture a photo from a node camera.\n\nDocs: https://daocore-ai.vercel.app/cli/nodes\n\n",
   "subcommandHelpText": {
-    "doctor": "\nDaoCore 2026.5.73 (0284ba3) — All your chats, one DaoCore.\n\nUsage: daocore doctor [options]\n\nHealth checks + quick fixes for the gateway and channels\n\nOptions:\n  --deep                      Scan system services for extra gateway installs\n                              (default: false)\n  --fix                       Apply recommended repairs (alias for --repair)\n                              (default: false)\n  --force                     Apply aggressive repairs (overwrites custom\n                              service config) (default: false)\n  --generate-gateway-token    Generate and configure a gateway token (default:\n                              false)\n  -h, --help                  Display help for command\n  --json                      With --lint: emit JSON findings instead of human\n                              output (default: false)\n  --lint                      Run read-only health checks and report findings\n                              (default: false)\n  --no-workspace-suggestions  Disable workspace memory system suggestions\n  --non-interactive           Run without prompts (safe migrations only)\n                              (default: false)\n  --only <id>                 With --lint: run only the specified check id\n                              (repeatable) (default: [])\n  --repair                    Apply recommended repairs without prompting\n                              (default: false)\n  --severity-min <level>      With --lint: drop findings below this severity\n                              (info|warning|error)\n  --skip <id>                 With --lint: skip a specific check id (repeatable)\n                              (default: [])\n  --yes                       Accept defaults without prompting (default: false)\n\nDocs: https://daocore-ai.vercel.app/cli/doctor\n\n",
-    "gateway": "\nDaoCore 2026.5.73 (0284ba3) — All your chats, one DaoCore.\n\nUsage: daocore gateway [options] [command]\n\nRun, inspect, and query the WebSocket Gateway\n\nOptions:\n  --allow-unconfigured       Allow gateway start without enforcing\n                             gateway.mode=local in config (does not repair\n                             config) (default: false)\n  --auth <mode>              Gateway auth mode\n                             (\"none\"|\"token\"|\"password\"|\"trusted-proxy\")\n  --bind <mode>              Bind mode\n                             (\"loopback\"|\"lan\"|\"tailnet\"|\"auto\"|\"custom\").\n                             Defaults to config gateway.bind (or loopback).\n  --claude-cli-logs          Deprecated alias for --cli-backend-logs (default:\n                             false)\n  --cli-backend-logs         Only show CLI backend logs in the console (includes\n                             stdout/stderr) (default: false)\n  --compact                  Alias for \"--ws-log compact\" (default: false)\n  --dev                      Create a dev config + workspace if missing (no\n                             BOOTSTRAP.md) (default: false)\n  --force                    Kill any existing listener on the target port\n                             before starting (default: false)\n  -h, --help                 Display help for command\n  --password <password>      Password for auth mode=password\n  --password-file <path>     Read gateway password from file\n  --port <port>              Port for the gateway WebSocket\n  --raw-stream               Log raw model stream events to jsonl (default:\n                             false)\n  --raw-stream-path <path>   Raw stream jsonl path\n  --reset                    Reset dev config + credentials + sessions +\n                             workspace (requires --dev) (default: false)\n  --tailscale <mode>         Tailscale exposure mode (\"off\"|\"serve\"|\"funnel\")\n  --tailscale-reset-on-exit  Reset Tailscale serve/funnel configuration on\n                             shutdown (default: false)\n  --token <token>            Shared token required in connect.params.auth.token\n                             (default: DAOCORE_GATEWAY_TOKEN env if set)\n  --verbose                  Verbose logging to stdout/stderr (default: false)\n  --ws-log <style>           WebSocket log style (\"auto\"|\"full\"|\"compact\")\n                             (default: \"auto\")\n\nCommands:\n  call                       Call a Gateway method\n  diagnostics                Export local support diagnostics\n  discover                   Discover gateways via Bonjour (local + wide-area if\n                             configured)\n  health                     Fetch Gateway health\n  install                    Install the Gateway service\n                             (launchd/systemd/schtasks)\n  probe                      Show gateway reachability, auth capability, and\n                             read-probe summary (local + remote)\n  restart                    Restart the Gateway service\n                             (launchd/systemd/schtasks)\n  run                        Run the WebSocket Gateway (foreground)\n  stability                  Fetch payload-free Gateway stability diagnostics\n  start                      Start the Gateway service\n                             (launchd/systemd/schtasks)\n  status                     Show gateway service status + probe\n                             connectivity/capability\n  stop                       Stop the Gateway service (launchd/systemd/schtasks)\n  uninstall                  Uninstall the Gateway service\n                             (launchd/systemd/schtasks)\n  usage-cost                 Fetch usage cost summary from session logs\n\nExamples:\n  daocore gateway run\n    Run the gateway in the foreground.\n  daocore gateway status\n    Show service status plus connectivity/capability.\n  daocore gateway discover\n    Find local and wide-area gateway beacons.\n  daocore gateway stability\n    Show recent stability diagnostics.\n  daocore gateway call health\n    Call a gateway RPC method directly.\n\nDocs: https://daocore-ai.vercel.app/cli/gateway\n\n",
-    "models": "\nDaoCore 2026.5.73 (0284ba3) — All your chats, one DaoCore.\n\nUsage: daocore models [options] [command]\n\nModel discovery, scanning, and configuration\n\nOptions:\n  --agent <id>     Agent id to inspect (overrides\n                   DAOCORE_AGENT_DIR/PI_CODING_AGENT_DIR)\n  -h, --help       Display help for command\n  --status-json    Output JSON (alias for `models status --json`) (default:\n                   false)\n  --status-plain   Plain output (alias for `models status --plain`) (default:\n                   false)\n\nCommands:\n  aliases          Manage model aliases\n  auth             Manage model auth profiles\n  fallbacks        Manage model fallback list\n  image-fallbacks  Manage image model fallback list\n  list             List models (configured by default)\n  scan             Scan OpenRouter free models for tools + images\n  set              Set the default model\n  set-image        Set the image model\n  status           Show configured model state\n\nDocs: https://daocore-ai.vercel.app/cli/models\n\n",
-    "plugins": "\nDaoCore 2026.5.73 (0284ba3) — All your chats, one DaoCore.\n\nUsage: daocore plugins [options] [command]\n\nManage DaoCore plugins and extensions\n\nOptions:\n  -h, --help   Display help for command\n\nCommands:\n  build        Generate simple tool plugin metadata\n  disable      Disable a plugin in config\n  doctor       Report plugin load issues\n  enable       Enable a plugin in config\n  init         Create a simple tool plugin project\n  inspect      Inspect plugin details\n  install      Install a plugin or hook pack (path, archive, npm spec, git repo,\n               clawhub:package, or marketplace entry)\n  list         List discovered plugins\n  marketplace  Inspect Claude-compatible plugin marketplaces\n  registry     Inspect or rebuild the persisted plugin registry\n  search       Search ClawHub plugin packages\n  uninstall    Uninstall a plugin\n  update       Update installed plugins and tracked hook packs\n  validate     Validate simple tool plugin metadata\n\nDocs: https://daocore-ai.vercel.app/cli/plugins\n\n"
+    "doctor": "\nDaoCore 2026.5.75 (a7b2b6d) — All your chats, one DaoCore.\n\nUsage: daocore doctor [options]\n\nHealth checks + quick fixes for the gateway and channels\n\nOptions:\n  --deep                      Scan system services for extra gateway installs\n                              (default: false)\n  --fix                       Apply recommended repairs (alias for --repair)\n                              (default: false)\n  --force                     Apply aggressive repairs (overwrites custom\n                              service config) (default: false)\n  --generate-gateway-token    Generate and configure a gateway token (default:\n                              false)\n  -h, --help                  Display help for command\n  --json                      With --lint: emit JSON findings instead of human\n                              output (default: false)\n  --lint                      Run read-only health checks and report findings\n                              (default: false)\n  --no-workspace-suggestions  Disable workspace memory system suggestions\n  --non-interactive           Run without prompts (safe migrations only)\n                              (default: false)\n  --only <id>                 With --lint: run only the specified check id\n                              (repeatable) (default: [])\n  --repair                    Apply recommended repairs without prompting\n                              (default: false)\n  --severity-min <level>      With --lint: drop findings below this severity\n                              (info|warning|error)\n  --skip <id>                 With --lint: skip a specific check id (repeatable)\n                              (default: [])\n  --yes                       Accept defaults without prompting (default: false)\n\nDocs: https://daocore-ai.vercel.app/cli/doctor\n\n",
+    "gateway": "\nDaoCore 2026.5.75 (a7b2b6d) — All your chats, one DaoCore.\n\nUsage: daocore gateway [options] [command]\n\nRun, inspect, and query the WebSocket Gateway\n\nOptions:\n  --allow-unconfigured       Allow gateway start without enforcing\n                             gateway.mode=local in config (does not repair\n                             config) (default: false)\n  --auth <mode>              Gateway auth mode\n                             (\"none\"|\"token\"|\"password\"|\"trusted-proxy\")\n  --bind <mode>              Bind mode\n                             (\"loopback\"|\"lan\"|\"tailnet\"|\"auto\"|\"custom\").\n                             Defaults to config gateway.bind (or loopback).\n  --claude-cli-logs          Deprecated alias for --cli-backend-logs (default:\n                             false)\n  --cli-backend-logs         Only show CLI backend logs in the console (includes\n                             stdout/stderr) (default: false)\n  --compact                  Alias for \"--ws-log compact\" (default: false)\n  --dev                      Create a dev config + workspace if missing (no\n                             BOOTSTRAP.md) (default: false)\n  --force                    Kill any existing listener on the target port\n                             before starting (default: false)\n  -h, --help                 Display help for command\n  --password <password>      Password for auth mode=password\n  --password-file <path>     Read gateway password from file\n  --port <port>              Port for the gateway WebSocket\n  --raw-stream               Log raw model stream events to jsonl (default:\n                             false)\n  --raw-stream-path <path>   Raw stream jsonl path\n  --reset                    Reset dev config + credentials + sessions +\n                             workspace (requires --dev) (default: false)\n  --tailscale <mode>         Tailscale exposure mode (\"off\"|\"serve\"|\"funnel\")\n  --tailscale-reset-on-exit  Reset Tailscale serve/funnel configuration on\n                             shutdown (default: false)\n  --token <token>            Shared token required in connect.params.auth.token\n                             (default: DAOCORE_GATEWAY_TOKEN env if set)\n  --verbose                  Verbose logging to stdout/stderr (default: false)\n  --ws-log <style>           WebSocket log style (\"auto\"|\"full\"|\"compact\")\n                             (default: \"auto\")\n\nCommands:\n  call                       Call a Gateway method\n  diagnostics                Export local support diagnostics\n  discover                   Discover gateways via Bonjour (local + wide-area if\n                             configured)\n  health                     Fetch Gateway health\n  install                    Install the Gateway service\n                             (launchd/systemd/schtasks)\n  probe                      Show gateway reachability, auth capability, and\n                             read-probe summary (local + remote)\n  restart                    Restart the Gateway service\n                             (launchd/systemd/schtasks)\n  run                        Run the WebSocket Gateway (foreground)\n  stability                  Fetch payload-free Gateway stability diagnostics\n  start                      Start the Gateway service\n                             (launchd/systemd/schtasks)\n  status                     Show gateway service status + probe\n                             connectivity/capability\n  stop                       Stop the Gateway service (launchd/systemd/schtasks)\n  uninstall                  Uninstall the Gateway service\n                             (launchd/systemd/schtasks)\n  usage-cost                 Fetch usage cost summary from session logs\n\nExamples:\n  daocore gateway run\n    Run the gateway in the foreground.\n  daocore gateway status\n    Show service status plus connectivity/capability.\n  daocore gateway discover\n    Find local and wide-area gateway beacons.\n  daocore gateway stability\n    Show recent stability diagnostics.\n  daocore gateway call health\n    Call a gateway RPC method directly.\n\nDocs: https://daocore-ai.vercel.app/cli/gateway\n\n",
+    "models": "\nDaoCore 2026.5.75 (a7b2b6d) — All your chats, one DaoCore.\n\nUsage: daocore models [options] [command]\n\nModel discovery, scanning, and configuration\n\nOptions:\n  --agent <id>     Agent id to inspect (overrides\n                   DAOCORE_AGENT_DIR/PI_CODING_AGENT_DIR)\n  -h, --help       Display help for command\n  --status-json    Output JSON (alias for `models status --json`) (default:\n                   false)\n  --status-plain   Plain output (alias for `models status --plain`) (default:\n                   false)\n\nCommands:\n  aliases          Manage model aliases\n  auth             Manage model auth profiles\n  fallbacks        Manage model fallback list\n  image-fallbacks  Manage image model fallback list\n  list             List models (configured by default)\n  scan             Scan OpenRouter free models for tools + images\n  set              Set the default model\n  set-image        Set the image model\n  status           Show configured model state\n\nDocs: https://daocore-ai.vercel.app/cli/models\n\n",
+    "plugins": "\nDaoCore 2026.5.75 (a7b2b6d) — All your chats, one DaoCore.\n\nUsage: daocore plugins [options] [command]\n\nManage DaoCore plugins and extensions\n\nOptions:\n  -h, --help   Display help for command\n\nCommands:\n  build        Generate simple tool plugin metadata\n  disable      Disable a plugin in config\n  doctor       Report plugin load issues\n  enable       Enable a plugin in config\n  init         Create a simple tool plugin project\n  inspect      Inspect plugin details\n  install      Install a plugin or hook pack (path, archive, npm spec, git repo,\n               clawhub:package, or marketplace entry)\n  list         List discovered plugins\n  marketplace  Inspect Claude-compatible plugin marketplaces\n  registry     Inspect or rebuild the persisted plugin registry\n  search       Search ClawHub plugin packages\n  uninstall    Uninstall a plugin\n  update       Update installed plugins and tracked hook packs\n  validate     Validate simple tool plugin metadata\n\nDocs: https://daocore-ai.vercel.app/cli/plugins\n\n"
   },
-  "rootHelpText": "\nDaoCore 2026.5.73 (0284ba3) — All your chats, one DaoCore.\n\nUsage: daocore [options] [command]\n\nOptions:\n  --container <name>   Run the CLI inside a running Podman/Docker container\n                       named <name> (default: env DAOCORE_CONTAINER)\n  --dev                Dev profile: isolate state under ~/.daocore-dev, default\n                       gateway port 19001, and shift derived ports\n                       (browser/canvas)\n  -h, --help           Display help for command\n  --log-level <level>  Global log level override for file + console\n                       (silent|fatal|error|warn|info|debug|trace)\n  --no-color           Disable ANSI colors\n  --profile <name>     Use a named profile (isolates\n                       DAOCORE_STATE_DIR/DAOCORE_CONFIG_PATH under\n                       ~/.daocore-<name>)\n  -V, --version        output the version number\n\nCommands:\n  Hint: commands suffixed with * have subcommands. Run <command> --help for details.\n  acp *                Run and manage ACP-backed coding agents\n  agent                Run one agent turn via the Gateway\n  agents *             Manage isolated agents (workspaces, auth, routing)\n  approvals *          Manage exec approvals (gateway or node host)\n  backup *             Create and verify local backup archives for DaoCore state\n  capability *         Run provider capability commands (fallback alias: infer)\n  channels *           Add, remove, login, and inspect messaging channels\n  chat                 Open a local terminal UI (alias for tui --local)\n  clawbot *            Legacy clawbot command aliases\n  commitments *        List and manage inferred follow-up commitments\n  completion           Generate shell completion script\n  config *             Non-interactive config helpers\n                       (get/set/unset/file/validate). Default: starts guided\n                       setup.\n  configure            Interactive configuration for credentials, channels,\n                       gateway, and agent defaults\n  crestodian           Open the interactive setup and repair assistant\n  cron *               Schedule and inspect Gateway background jobs\n  daemon *             Manage the Gateway service (legacy alias)\n  dashboard            Open the Control UI with your current token\n  devices *            Device pairing + token management\n  directory *          Lookup contact and group IDs (self, peers, groups) for\n                       supported chat channels\n  dns *                DNS helpers for wide-area discovery (Tailscale + CoreDNS)\n  docs                 Search the live DaoCore docs\n  doctor               Diagnose and repair config, Gateway, plugin, and channel\n                       problems\n  exec-policy *        Show or synchronize requested exec policy with host\n                       approvals\n  gateway *            Run, inspect, and query the DaoCore Gateway\n  health               Fetch detailed health from the running Gateway\n  help                 Display help for command\n  hooks *              Manage internal agent hooks\n  infer *              Run provider-backed model, media, search, and embedding\n                       commands\n  logs                 Tail Gateway logs locally or via RPC\n  mcp *                Manage DaoCore MCP config and channel bridge\n  memory               Search, inspect, and reindex memory files\n  message *            Send, read, and manage channel messages\n  migrate *            Import state from another agent system\n  models *             List, scan, and set model providers\n  node *               Run and manage the headless node host service\n  nodes *              Pair nodes and run node-host commands through the Gateway\n  onboard              Interactive onboarding for gateway, workspace, and skills\n  pairing *            Secure DM pairing (approve inbound requests)\n  plugins *            Install, enable, disable, and inspect plugins\n  proxy *              Run the DaoCore debug proxy and inspect captured traffic\n  qr                   Generate mobile pairing QR/setup code\n  reset                Reset local config/state (keeps the CLI installed)\n  sandbox *            Manage sandbox containers for agent isolation\n  secrets *            Audit, apply, and reload SecretRef-backed credentials\n  security *           Security tools and local config audits\n  sessions *           List stored conversation sessions\n  setup                Initialize local config and an agent workspace\n  skills *             List, inspect, and install agent skills\n  status               Show Gateway, channel, model, and recent-session status\n  system *             System events, heartbeat, and presence\n  tasks *              Inspect durable background tasks and flows\n  terminal             Open a local terminal UI (alias for tui --local)\n  tui                  Open a terminal UI connected to the Gateway\n  uninstall            Uninstall the gateway service + local data (CLI remains)\n  update *             Update DaoCore and inspect update channel status\n  webhooks *           Webhook helpers and integrations\n\nExamples:\n  daocore onboard\n    Run guided setup for a local Gateway, workspace, auth, and channels.\n  daocore setup\n    Create the baseline config, workspace, and session folders.\n  daocore configure\n    Change models, Gateway, channels, plugins, skills, and health checks.\n  daocore status\n    Check Gateway, channel, model, and recent-session status.\n  daocore doctor --fix\n    Repair common config, service, plugin, and channel problems.\n  daocore channels add\n    Add or update a chat channel account with guided prompts.\n  daocore channels status\n    See connected messaging accounts and login state.\n  daocore --dev gateway\n    Run a dev Gateway (isolated state/config) on ws://127.0.0.1:19001.\n  daocore gateway run --force\n    Start the Gateway and replace anything bound to its port.\n  daocore models status\n    Show model/provider auth health before running agents.\n  daocore plugins list\n    Inspect enabled, disabled, and installed plugins.\n  daocore agent --to +15555550123 --message \"Run summary\" --deliver\n    Run one agent turn through the Gateway and optionally deliver the reply.\n  daocore message send --channel telegram --target @mychat --message \"Hi\"\n    Send via your Telegram bot.\n\nDocs: https://daocore-ai.vercel.app/cli\n\n"
+  "rootHelpText": "\nDaoCore 2026.5.75 (a7b2b6d) — All your chats, one DaoCore.\n\nUsage: daocore [options] [command]\n\nOptions:\n  --container <name>   Run the CLI inside a running Podman/Docker container\n                       named <name> (default: env DAOCORE_CONTAINER)\n  --dev                Dev profile: isolate state under ~/.daocore-dev, default\n                       gateway port 19001, and shift derived ports\n                       (browser/canvas)\n  -h, --help           Display help for command\n  --log-level <level>  Global log level override for file + console\n                       (silent|fatal|error|warn|info|debug|trace)\n  --no-color           Disable ANSI colors\n  --profile <name>     Use a named profile (isolates\n                       DAOCORE_STATE_DIR/DAOCORE_CONFIG_PATH under\n                       ~/.daocore-<name>)\n  -V, --version        output the version number\n\nCommands:\n  Hint: commands suffixed with * have subcommands. Run <command> --help for details.\n  acp *                Run and manage ACP-backed coding agents\n  agent                Run one agent turn via the Gateway\n  agents *             Manage isolated agents (workspaces, auth, routing)\n  approvals *          Manage exec approvals (gateway or node host)\n  backup *             Create and verify local backup archives for DaoCore state\n  capability *         Run provider capability commands (fallback alias: infer)\n  channels *           Add, remove, login, and inspect messaging channels\n  chat                 Open a local terminal UI (alias for tui --local)\n  clawbot *            Legacy clawbot command aliases\n  commitments *        List and manage inferred follow-up commitments\n  completion           Generate shell completion script\n  config *             Non-interactive config helpers\n                       (get/set/unset/file/validate). Default: starts guided\n                       setup.\n  configure            Interactive configuration for credentials, channels,\n                       gateway, and agent defaults\n  crestodian           Open the interactive setup and repair assistant\n  cron *               Schedule and inspect Gateway background jobs\n  daemon *             Manage the Gateway service (legacy alias)\n  dashboard            Open the Control UI with your current token\n  devices *            Device pairing + token management\n  directory *          Lookup contact and group IDs (self, peers, groups) for\n                       supported chat channels\n  dns *                DNS helpers for wide-area discovery (Tailscale + CoreDNS)\n  docs                 Search the live DaoCore docs\n  doctor               Diagnose and repair config, Gateway, plugin, and channel\n                       problems\n  exec-policy *        Show or synchronize requested exec policy with host\n                       approvals\n  gateway *            Run, inspect, and query the DaoCore Gateway\n  health               Fetch detailed health from the running Gateway\n  help                 Display help for command\n  hooks *              Manage internal agent hooks\n  infer *              Run provider-backed model, media, search, and embedding\n                       commands\n  logs                 Tail Gateway logs locally or via RPC\n  mcp *                Manage DaoCore MCP config and channel bridge\n  memory               Search, inspect, and reindex memory files\n  message *            Send, read, and manage channel messages\n  migrate *            Import state from another agent system\n  models *             List, scan, and set model providers\n  node *               Run and manage the headless node host service\n  nodes *              Pair nodes and run node-host commands through the Gateway\n  onboard              Interactive onboarding for gateway, workspace, and skills\n  pairing *            Secure DM pairing (approve inbound requests)\n  plugins *            Install, enable, disable, and inspect plugins\n  proxy *              Run the DaoCore debug proxy and inspect captured traffic\n  qr                   Generate mobile pairing QR/setup code\n  reset                Reset local config/state (keeps the CLI installed)\n  sandbox *            Manage sandbox containers for agent isolation\n  secrets *            Audit, apply, and reload SecretRef-backed credentials\n  security *           Security tools and local config audits\n  sessions *           List stored conversation sessions\n  setup                Initialize local config and an agent workspace\n  skills *             List, inspect, and install agent skills\n  status               Show Gateway, channel, model, and recent-session status\n  system *             System events, heartbeat, and presence\n  tasks *              Inspect durable background tasks and flows\n  terminal             Open a local terminal UI (alias for tui --local)\n  tui                  Open a terminal UI connected to the Gateway\n  uninstall            Uninstall the gateway service + local data (CLI remains)\n  update *             Update DaoCore and inspect update channel status\n  webhooks *           Webhook helpers and integrations\n\nExamples:\n  daocore onboard\n    Run guided setup for a local Gateway, workspace, auth, and channels.\n  daocore setup\n    Create the baseline config, workspace, and session folders.\n  daocore configure\n    Change models, Gateway, channels, plugins, skills, and health checks.\n  daocore status\n    Check Gateway, channel, model, and recent-session status.\n  daocore doctor --fix\n    Repair common config, service, plugin, and channel problems.\n  daocore channels add\n    Add or update a chat channel account with guided prompts.\n  daocore channels status\n    See connected messaging accounts and login state.\n  daocore --dev gateway\n    Run a dev Gateway (isolated state/config) on ws://127.0.0.1:19001.\n  daocore gateway run --force\n    Start the Gateway and replace anything bound to its port.\n  daocore models status\n    Show model/provider auth health before running agents.\n  daocore plugins list\n    Inspect enabled, disabled, and installed plugins.\n  daocore agent --to +15555550123 --message \"Run summary\" --deliver\n    Run one agent turn through the Gateway and optionally deliver the reply.\n  daocore message send --channel telegram --target @mychat --message \"Hi\"\n    Send via your Telegram bot.\n\nDocs: https://daocore-ai.vercel.app/cli\n\n"
 }