@gaodefa/daocore 2026.5.99 → 2026.5.100

package/dist/channel-send-result-C7dNbwxw.d.ts

@@ -0,0 +1,41 @@
+import { b as OutboundDeliveryResult, n as ChannelOutboundAdapter } from "./outbound.types-BgOkffIj.js";
+import { A as ChannelPollResult } from "./types.core-tk4nkbSB.js";
+//#region src/plugin-sdk/channel-send-result.d.ts
+type ChannelSendRawResult = {
+  ok: boolean;
+  messageId?: string | null;
+  error?: string | null;
+};
+declare function attachChannelToResult<T extends object>(channel: string, result: T): {
+  channel: string;
+} & T;
+declare function attachChannelToResults<T extends object>(channel: string, results: readonly T[]): ({
+  channel: string;
+} & T)[];
+declare function createEmptyChannelResult(channel: string, result?: Partial<Omit<OutboundDeliveryResult, "channel" | "messageId">> & {
+  messageId?: string;
+}): OutboundDeliveryResult;
+type MaybePromise<T> = T | Promise<T>;
+type SendTextParams = Parameters<NonNullable<ChannelOutboundAdapter["sendText"]>>[0];
+type SendMediaParams = Parameters<NonNullable<ChannelOutboundAdapter["sendMedia"]>>[0];
+type SendPollParams = Parameters<NonNullable<ChannelOutboundAdapter["sendPoll"]>>[0];
+declare function createAttachedChannelResultAdapter(params: {
+  channel: string;
+  sendText?: (ctx: SendTextParams) => MaybePromise<Omit<OutboundDeliveryResult, "channel">>;
+  sendMedia?: (ctx: SendMediaParams) => MaybePromise<Omit<OutboundDeliveryResult, "channel">>;
+  sendPoll?: (ctx: SendPollParams) => MaybePromise<Omit<ChannelPollResult, "channel">>;
+}): Pick<ChannelOutboundAdapter, "sendText" | "sendMedia" | "sendPoll">;
+declare function createRawChannelSendResultAdapter(params: {
+  channel: string;
+  sendText?: (ctx: SendTextParams) => MaybePromise<ChannelSendRawResult>;
+  sendMedia?: (ctx: SendMediaParams) => MaybePromise<ChannelSendRawResult>;
+}): Pick<ChannelOutboundAdapter, "sendText" | "sendMedia">;
+/** Normalize raw channel send results into the shape shared outbound callers expect. */
+declare function buildChannelSendResult(channel: string, result: ChannelSendRawResult): {
+  channel: string;
+  ok: boolean;
+  messageId: string;
+  error: Error | undefined;
+};
+//#endregion
+export { createAttachedChannelResultAdapter as a, buildChannelSendResult as i, attachChannelToResult as n, createEmptyChannelResult as o, attachChannelToResults as r, createRawChannelSendResultAdapter as s, ChannelSendRawResult as t };

package/dist/channel-setup-DLpPZwLd.d.ts

@@ -0,0 +1,29 @@
+import { s as ChannelSetupWizard } from "./setup-wizard-types-gkEuMVal.js";
+import { H as ChannelSetupAdapter } from "./types.adapters-Ca58O0tl.js";
+//#region src/plugin-sdk/optional-channel-setup.d.ts
+type OptionalChannelSetupParams$1 = {
+  channel: string;
+  label: string;
+  npmSpec?: string;
+  docsPath?: string;
+};
+declare function createOptionalChannelSetupAdapter(params: OptionalChannelSetupParams$1): ChannelSetupAdapter;
+declare function createOptionalChannelSetupWizard(params: OptionalChannelSetupParams$1): ChannelSetupWizard;
+//#endregion
+//#region src/plugin-sdk/channel-setup.d.ts
+/** Metadata used to advertise an optional channel plugin during setup flows. */
+type OptionalChannelSetupParams = {
+  channel: string;
+  label: string;
+  npmSpec?: string;
+  docsPath?: string;
+};
+/** Paired setup adapter + setup wizard for channels that may not be installed yet. */
+type OptionalChannelSetupSurface = {
+  setupAdapter: ChannelSetupAdapter;
+  setupWizard: ChannelSetupWizard;
+};
+/** Build both optional setup surfaces from one metadata object. */
+declare function createOptionalChannelSetupSurface(params: OptionalChannelSetupParams): OptionalChannelSetupSurface;
+//#endregion
+export { createOptionalChannelSetupWizard as i, createOptionalChannelSetupSurface as n, createOptionalChannelSetupAdapter as r, OptionalChannelSetupSurface as t };

package/dist/channel-status-7YUg1y_r.d.ts

@@ -0,0 +1,9 @@
+import { r as ChannelAccountSnapshot } from "./types.core-tk4nkbSB.js";
+//#region src/channels/account-snapshot-fields.d.ts
+declare const CREDENTIAL_STATUS_KEYS: readonly ["tokenStatus", "botTokenStatus", "appTokenStatus", "signingSecretStatus", "userTokenStatus"];
+type CredentialStatusKey = (typeof CREDENTIAL_STATUS_KEYS)[number];
+declare function resolveConfiguredFromCredentialStatuses(account: unknown): boolean | undefined;
+declare function resolveConfiguredFromRequiredCredentialStatuses(account: unknown, requiredKeys: CredentialStatusKey[]): boolean | undefined;
+declare function projectCredentialSnapshotFields(account: unknown): Pick<Partial<ChannelAccountSnapshot>, "tokenSource" | "botTokenSource" | "appTokenSource" | "signingSecretSource" | "tokenStatus" | "botTokenStatus" | "appTokenStatus" | "signingSecretStatus" | "userTokenStatus">;
+//#endregion
+export { resolveConfiguredFromCredentialStatuses as n, resolveConfiguredFromRequiredCredentialStatuses as r, projectCredentialSnapshotFields as t };

package/dist/channel-targets-BNaq6c50.d.ts

@@ -0,0 +1,94 @@
+import { H as ChannelTtsVoiceDeliveryCapabilities } from "./types.core-tk4nkbSB.js";
+//#region src/channels/plugins/chat-target-prefixes.d.ts
+type ServicePrefix<TService extends string> = {
+  prefix: string;
+  service: TService;
+};
+type ChatTargetPrefixesParams = {
+  trimmed: string;
+  lower: string;
+  chatIdPrefixes: string[];
+  chatGuidPrefixes: string[];
+  chatIdentifierPrefixes: string[];
+};
+type ParsedChatTarget = {
+  kind: "chat_id";
+  chatId: number;
+} | {
+  kind: "chat_guid";
+  chatGuid: string;
+} | {
+  kind: "chat_identifier";
+  chatIdentifier: string;
+};
+type ParsedChatAllowTarget = ParsedChatTarget | {
+  kind: "handle";
+  handle: string;
+};
+type ChatSenderAllowParams = {
+  allowFrom: Array<string | number>;
+  sender: string;
+  chatId?: number | null;
+  chatGuid?: string | null;
+  chatIdentifier?: string | null;
+  allowConversationTargets?: boolean | null;
+};
+declare function resolveServicePrefixedTarget<TService extends string, TTarget>(params: {
+  trimmed: string;
+  lower: string;
+  servicePrefixes: Array<ServicePrefix<TService>>;
+  isChatTarget: (remainderLower: string) => boolean;
+  parseTarget: (remainder: string) => TTarget;
+}): ({
+  kind: "handle";
+  to: string;
+  service: TService;
+} | TTarget) | null;
+declare function resolveServicePrefixedChatTarget<TService extends string, TTarget>(params: {
+  trimmed: string;
+  lower: string;
+  servicePrefixes: Array<ServicePrefix<TService>>;
+  chatIdPrefixes: string[];
+  chatGuidPrefixes: string[];
+  chatIdentifierPrefixes: string[];
+  extraChatPrefixes?: string[];
+  parseTarget: (remainder: string) => TTarget;
+}): ({
+  kind: "handle";
+  to: string;
+  service: TService;
+} | TTarget) | null;
+declare function parseChatTargetPrefixesOrThrow(params: ChatTargetPrefixesParams): ParsedChatTarget | null;
+declare function resolveServicePrefixedAllowTarget<TAllowTarget>(params: {
+  trimmed: string;
+  lower: string;
+  servicePrefixes: Array<{
+    prefix: string;
+  }>;
+  parseAllowTarget: (remainder: string) => TAllowTarget;
+}): (TAllowTarget | {
+  kind: "handle";
+  handle: string;
+}) | null;
+declare function resolveServicePrefixedOrChatAllowTarget<TAllowTarget extends ParsedChatAllowTarget>(params: {
+  trimmed: string;
+  lower: string;
+  servicePrefixes: Array<{
+    prefix: string;
+  }>;
+  parseAllowTarget: (remainder: string) => TAllowTarget;
+  chatIdPrefixes: string[];
+  chatGuidPrefixes: string[];
+  chatIdentifierPrefixes: string[];
+}): TAllowTarget | null;
+declare function createAllowedChatSenderMatcher(params: {
+  normalizeSender: (sender: string) => string;
+  parseAllowTarget: (entry: string) => ParsedChatAllowTarget;
+  allowConversationTargets?: boolean;
+}): (input: ChatSenderAllowParams) => boolean;
+declare function parseChatAllowTargetPrefixes(params: ChatTargetPrefixesParams): ParsedChatTarget | null;
+//#endregion
+//#region src/channels/plugins/tts-capabilities.d.ts
+declare function resolveChannelTtsVoiceDelivery(channel: string | undefined): ChannelTtsVoiceDeliveryCapabilities | undefined;
+//#endregion
+export { ParsedChatTarget as a, parseChatAllowTargetPrefixes as c, resolveServicePrefixedChatTarget as d, resolveServicePrefixedOrChatAllowTarget as f, ParsedChatAllowTarget as i, parseChatTargetPrefixesOrThrow as l, ChatSenderAllowParams as n, ServicePrefix as o, resolveServicePrefixedTarget as p, ChatTargetPrefixesParams as r, createAllowedChatSenderMatcher as s, resolveChannelTtsVoiceDelivery as t, resolveServicePrefixedAllowTarget as u };

package/dist/channel.setup-D-WVlHP_.d.ts

@@ -0,0 +1,7 @@
+import { n as ChannelPlugin } from "./types.public-zY4a1Bje.js";
+import { t as ResolvedDiscordAccount } from "./accounts-qPfl2Ie9.js";
+
+//#region extensions/discord/src/channel.setup.d.ts
+declare const discordSetupPlugin: ChannelPlugin<ResolvedDiscordAccount>;
+//#endregion
+export { discordSetupPlugin as t };

package/dist/channel.setup-DeRLZagr.d.ts

@@ -0,0 +1,6 @@
+import { n as ChannelPlugin } from "./types.public-zY4a1Bje.js";
+import { o as ResolvedZalouserAccount } from "./accounts-UqEgY-46.js";
+//#region extensions/zalouser/src/channel.setup.d.ts
+declare const zalouserSetupPlugin: ChannelPlugin<ResolvedZalouserAccount>;
+//#endregion
+export { zalouserSetupPlugin as t };

package/dist/channel.setup-DoiZXTGE.d.ts

@@ -0,0 +1,8 @@
+import { n as ChannelPlugin } from "./types.public-zY4a1Bje.js";
+import { t as TelegramProbe } from "./probe-BbNtYDEv.js";
+import { t as ResolvedTelegramAccount } from "./accounts-21vIfbL5.js";
+
+//#region extensions/telegram/src/channel.setup.d.ts
+declare const telegramSetupPlugin: ChannelPlugin<ResolvedTelegramAccount, TelegramProbe>;
+//#endregion
+export { telegramSetupPlugin as t };

package/dist/chrome.executables-rw5QWCcx.d.ts

@@ -0,0 +1,13 @@
+import { n as ResolvedBrowserConfig } from "./config-DTo248hs.js";
+
+//#region extensions/browser/src/browser/chrome.executables.d.ts
+type BrowserExecutable = {
+  kind: "brave" | "canary" | "chromium" | "chrome" | "custom" | "edge";
+  path: string;
+};
+declare function resolveGoogleChromeExecutableForPlatform(platform: NodeJS.Platform): BrowserExecutable | null;
+declare function readBrowserVersion(executablePath: string): string | null;
+declare function parseBrowserMajorVersion(rawVersion: string | null | undefined): number | null;
+declare function resolveBrowserExecutableForPlatform(resolved: ResolvedBrowserConfig, platform: NodeJS.Platform): BrowserExecutable | null;
+//#endregion
+export { resolveGoogleChromeExecutableForPlatform as a, resolveBrowserExecutableForPlatform as i, parseBrowserMajorVersion as n, readBrowserVersion as r, BrowserExecutable as t };

package/dist/cli/gateway-lifecycle.runtime.d.ts

@@ -1,7 +1,7 @@
-import { r as DaoCoreConfig } from "../types.daocore-z1fablj2.js";
-import { l as getRuntimeConfig } from "../io-BQcJSWd2.js";
+import { r as DaoCoreConfig } from "../types.daocore-CNMq809i.js";
+import { l as getRuntimeConfig } from "../io-CeNW52s1.js";
 import { i as TaskRecord, l as TaskStatus } from "../task-registry.types-CicKx6sv.js";
-import { x as DiagnosticMemoryUsage, y as DiagnosticMemoryPressureEvent } from "../diagnostic-events-40PKpvsr.js";
+import { x as DiagnosticMemoryUsage, y as DiagnosticMemoryPressureEvent } from "../diagnostic-events-B6fVt4GX.js";
 import { a as waitForActiveEmbeddedRuns, c as listActiveEmbeddedRunSessionIds, l as listActiveEmbeddedRunSessionKeys, s as getActiveEmbeddedRunCount, t as abortEmbeddedPiRun } from "../runs-D-yUHGfK.js";
 import { i as waitForActiveTasks, n as markGatewayDraining, r as resetAllLanes, t as getActiveTaskCount } from "../command-queue-CvXXfohG.js";
 import { t as reloadTaskRegistryFromStore } from "../runtime-internal-Do-5YMUX.js";

package/dist/cli/run-main.d.ts

@@ -1,4 +1,4 @@
-import { r as DaoCoreConfig } from "../types.daocore-z1fablj2.js";
+import { r as DaoCoreConfig } from "../types.daocore-CNMq809i.js";
 import { n as PluginManifestCommandAliasRegistry } from "../manifest-command-aliases-BBRdBljz.js";
 
 //#region src/cli/run-main-policy.d.ts

package/dist/cli-BRVhT33V.d.ts

@@ -0,0 +1,20 @@
+import { n as AzAccount, t as AzAccessToken } from "./shared-DDUDRInT.js";
+
+//#region extensions/microsoft-foundry/cli.d.ts
+declare function execAz(args: string[]): string;
+declare function isAzCliInstalled(): boolean;
+declare function getLoggedInAccount(): AzAccount | null;
+declare function listSubscriptions(): AzAccount[];
+type AccessTokenParams = {
+  subscriptionId?: string;
+  tenantId?: string;
+};
+declare function getAccessTokenResult(params?: AccessTokenParams): AzAccessToken;
+declare function getAccessTokenResultAsync(params?: AccessTokenParams): Promise<AzAccessToken>;
+declare function azLoginDeviceCode(): Promise<void>;
+declare function azLoginDeviceCodeWithOptions(params: {
+  tenantId?: string;
+  allowNoSubscriptions?: boolean;
+}): Promise<void>;
+//#endregion
+export { getAccessTokenResultAsync as a, listSubscriptions as c, getAccessTokenResult as i, azLoginDeviceCodeWithOptions as n, getLoggedInAccount as o, execAz as r, isAzCliInstalled as s, azLoginDeviceCode as t };

package/dist/cli-auth-seam-3GHVw7uv.d.ts

@@ -0,0 +1,8 @@
+import { t as ClaudeCliCredential } from "./cli-credentials-CxkjuyGb.js";
+
+//#region extensions/anthropic/cli-auth-seam.d.ts
+declare function readClaudeCliCredentialsForSetup(): ClaudeCliCredential | null;
+declare function readClaudeCliCredentialsForSetupNonInteractive(): ClaudeCliCredential | null;
+declare function readClaudeCliCredentialsForRuntime(): ClaudeCliCredential | null;
+//#endregion
+export { readClaudeCliCredentialsForSetup as n, readClaudeCliCredentialsForSetupNonInteractive as r, readClaudeCliCredentialsForRuntime as t };

package/dist/cli-backend-B03Nm5_a.d.ts

@@ -0,0 +1,5 @@
+import { gr as CliBackendPlugin } from "./types-DEEPn4W72.js";
+//#region extensions/anthropic/cli-backend.d.ts
+declare function buildAnthropicCliBackend(): CliBackendPlugin;
+//#endregion
+export { buildAnthropicCliBackend as t };

package/dist/cli-backend-DEyxT0h5.d.ts

@@ -0,0 +1,5 @@
+import { gr as CliBackendPlugin } from "./types-DEEPn4W72.js";
+//#region extensions/google/cli-backend.d.ts
+declare function buildGoogleGeminiCliBackend(): CliBackendPlugin;
+//#endregion
+export { buildGoogleGeminiCliBackend as t };

package/dist/cli-credentials-CxkjuyGb.d.ts

@@ -0,0 +1,43 @@
+import { l as OAuthProvider } from "./types-DCT-w72n.js";
+import { execFileSync, execSync } from "node:child_process";
+
+//#region src/agents/cli-credentials.d.ts
+type ClaudeCliCredential = {
+  type: "oauth";
+  provider: "anthropic";
+  access: string;
+  refresh: string;
+  expires: number;
+} | {
+  type: "token";
+  provider: "anthropic";
+  token: string;
+  expires: number;
+};
+type CodexCliCredential = {
+  type: "oauth";
+  provider: OAuthProvider;
+  access: string;
+  refresh: string;
+  expires: number;
+  accountId?: string;
+  idToken?: string;
+};
+type ExecSyncFn = typeof execSync;
+/** @deprecated Anthropic provider-owned CLI credential helper; do not use from third-party plugins. */
+declare function readClaudeCliCredentialsCached(options?: {
+  allowKeychainPrompt?: boolean;
+  ttlMs?: number;
+  platform?: NodeJS.Platform;
+  homeDir?: string;
+  execSync?: ExecSyncFn;
+}): ClaudeCliCredential | null;
+declare function readCodexCliCredentialsCached(options?: {
+  codexHome?: string;
+  allowKeychainPrompt?: boolean;
+  ttlMs?: number;
+  platform?: NodeJS.Platform;
+  execSync?: ExecSyncFn;
+}): CodexCliCredential | null;
+//#endregion
+export { readClaudeCliCredentialsCached as n, readCodexCliCredentialsCached as r, ClaudeCliCredential as t };

package/dist/cli-shared-pap7Q065.d.ts

@@ -0,0 +1,20 @@
+import { On as CliBackendConfig } from "./types.daocore-CNMq809i.js";
+import { br as CliBackendResolveExecutionArgsContext, hr as CliBackendNormalizeConfigContext } from "./types-DEEPn4W72.js";
+//#region extensions/anthropic/cli-shared.d.ts
+declare const CLAUDE_CLI_CLEAR_ENV: readonly ["ANTHROPIC_API_KEY", "ANTHROPIC_API_KEY_OLD", "ANTHROPIC_API_TOKEN", "ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_BASE_URL", "ANTHROPIC_CUSTOM_HEADERS", "ANTHROPIC_OAUTH_TOKEN", "ANTHROPIC_UNIX_SOCKET", "CLAUDE_CONFIG_DIR", "CLAUDE_CODE_API_KEY_FILE_DESCRIPTOR", "CLAUDE_CODE_ENTRYPOINT", "CLAUDE_CODE_OAUTH_REFRESH_TOKEN", "CLAUDE_CODE_OAUTH_SCOPES", "CLAUDE_CODE_OAUTH_TOKEN", "CLAUDE_CODE_OAUTH_TOKEN_FILE_DESCRIPTOR", "CLAUDE_CODE_PLUGIN_CACHE_DIR", "CLAUDE_CODE_PLUGIN_SEED_DIR", "CLAUDE_CODE_REMOTE", "CLAUDE_CODE_USE_COWORK_PLUGINS", "CLAUDE_CODE_USE_BEDROCK", "CLAUDE_CODE_USE_FOUNDRY", "CLAUDE_CODE_USE_VERTEX", "OTEL_EXPORTER_OTLP_ENDPOINT", "OTEL_EXPORTER_OTLP_HEADERS", "OTEL_EXPORTER_OTLP_LOGS_ENDPOINT", "OTEL_EXPORTER_OTLP_LOGS_HEADERS", "OTEL_EXPORTER_OTLP_LOGS_PROTOCOL", "OTEL_EXPORTER_OTLP_METRICS_ENDPOINT", "OTEL_EXPORTER_OTLP_METRICS_HEADERS", "OTEL_EXPORTER_OTLP_METRICS_PROTOCOL", "OTEL_EXPORTER_OTLP_PROTOCOL", "OTEL_EXPORTER_OTLP_TRACES_ENDPOINT", "OTEL_EXPORTER_OTLP_TRACES_HEADERS", "OTEL_EXPORTER_OTLP_TRACES_PROTOCOL", "OTEL_LOGS_EXPORTER", "OTEL_METRICS_EXPORTER", "OTEL_SDK_DISABLED", "OTEL_TRACES_EXPORTER"];
+type ClaudeCliEffort = "low" | "medium" | "high" | "xhigh" | "max";
+declare function isClaudeCliProvider(providerId: string): boolean;
+declare function resolveClaudePermissionMode(context?: CliBackendNormalizeConfigContext): {
+  mode?: string;
+  overrideExisting: boolean;
+};
+declare function normalizeClaudePermissionArgs(args?: string[], options?: {
+  mode?: string;
+  overrideExisting?: boolean;
+}): string[] | undefined;
+declare function normalizeClaudeSettingSourcesArgs(args?: string[]): string[] | undefined;
+declare function mapClaudeCliThinkingLevelToEffort(thinkingLevel?: string | null): ClaudeCliEffort | undefined;
+declare function resolveClaudeCliExecutionArgs(context: CliBackendResolveExecutionArgsContext): string[];
+declare function normalizeClaudeBackendConfig(config: CliBackendConfig, context?: CliBackendNormalizeConfigContext): CliBackendConfig;
+//#endregion
+export { normalizeClaudePermissionArgs as a, resolveClaudePermissionMode as c, normalizeClaudeBackendConfig as i, isClaudeCliProvider as n, normalizeClaudeSettingSourcesArgs as o, mapClaudeCliThinkingLevelToEffort as r, resolveClaudeCliExecutionArgs as s, CLAUDE_CLI_CLEAR_ENV as t };

package/dist/cli-startup-metadata.json

@@ -31,14 +31,14 @@
   "secretsHelpSourceSignature": "98f16f85bbf79bf5f2b44f095dfd660e6e316890",
   "nodesHelpSourceSignature": "250d758110b3ffd7e90be1e132cd932880ab84ca",
   "subcommandHelpSourceSignature": "bcdfecba02dea9425970635f7e5646e001ff814e",
-  "browserHelpText": "\nDaoCore 2026.5.99 (f07ac4c) — All your chats, one DaoCore.\n\nUsage: daocore browser [options] [command]\n\nManage DaoCore's dedicated browser (Chrome/Chromium)\n\nOptions:\n  --browser-profile <name>  Browser profile name (default from config)\n  --expect-final            Wait for final response (agent) (default: false)\n  -h, --help                Display help for command\n  --json                    Output machine-readable JSON (default: false)\n  --timeout <ms>            Timeout in ms (default: \"30000\")\n  --token <token>           Gateway token (if required)\n  --url <url>               Gateway WebSocket URL (defaults to\n                            gateway.remote.url when configured)\n\nCommands:\n  click                     Click an element by ref from snapshot\n  click-coords              Click viewport coordinates\n  close                     Close a tab (target id optional)\n  console                   Get recent console messages\n  cookies                   Read/write cookies\n  create-profile            Create a new browser profile\n  delete-profile            Delete a browser profile\n  dialog                    Arm the next modal dialog (alert/confirm/prompt)\n  doctor                    Check browser plugin readiness\n  download                  Click a ref and save the resulting download\n  drag                      Drag from one ref to another\n  errors                    Get recent page errors\n  evaluate                  Evaluate a function against the page or a ref\n  fill                      Fill a form with JSON field descriptors\n  focus                     Focus a tab by target id, tab id, label, or unique\n                            target id prefix\n  highlight                 Highlight an element by ref\n  hover                     Hover an element by ai ref\n  navigate                  Navigate the current tab to a URL\n  open                      Open a URL in a new tab\n  pdf                       Save page as PDF\n  press                     Press a key\n  profiles                  List all browser profiles\n  requests                  Get recent network requests (best-effort)\n  reset-profile             Reset browser profile (moves it to Trash)\n  resize                    Resize the viewport\n  responsebody              Wait for a network response and return its body\n  screenshot                Capture a screenshot (MEDIA:<path>)\n  scrollintoview            Scroll an element into view by ref from snapshot\n  select                    Select option(s) in a select element\n  set                       Browser environment settings\n  snapshot                  Capture a snapshot (default: ai; aria is the\n                            accessibility tree)\n  start                     Start the browser (no-op if already running)\n  status                    Show browser status\n  stop                      Stop the browser (best-effort)\n  storage                   Read/write localStorage/sessionStorage\n  tab                       Tab shortcuts (index-based)\n  tabs                      List open tabs\n  trace                     Record a Playwright trace\n  type                      Type into an element by ref from snapshot\n  upload                    Arm file upload for the next file chooser\n  wait                      Wait for time, selector, URL, load state, or JS\n                            conditions\n  waitfordownload           Wait for the next download (and save it)\n\nExamples:\n  daocore browser status\n  daocore browser start\n  daocore browser start --headless\n  daocore browser stop\n  daocore browser tabs\n  daocore browser open https://example.com\n  daocore browser focus abcd1234\n  daocore browser close abcd1234\n  daocore browser screenshot\n  daocore browser screenshot --full-page\n  daocore browser screenshot --ref 12\n  daocore browser snapshot\n  daocore browser snapshot --format aria --limit 200\n  daocore browser snapshot --efficient\n  daocore browser snapshot --labels\n  daocore browser navigate https://example.com\n  daocore browser resize 1280 720\n  daocore browser click 12 --double\n  daocore browser click-coords 120 340\n  daocore browser type 23 \"hello\" --submit\n  daocore browser press Enter\n  daocore browser hover 44\n  daocore browser drag 10 11\n  daocore browser select 9 OptionA OptionB\n  daocore browser upload /tmp/daocore/uploads/file.pdf\n  daocore browser fill --fields '[{\"ref\":\"1\",\"value\":\"Ada\"}]'\n  daocore browser dialog --accept\n  daocore browser wait --text \"Done\"\n  daocore browser evaluate --fn '(el) => el.textContent' --ref 7\n  daocore browser console --level error\n  daocore browser pdf\n\nDocs: https://daocore-ai.vercel.app/cli/browser\n\n",
-  "secretsHelpText": "\nDaoCore 2026.5.99 (f07ac4c) — All your chats, one DaoCore.\n\nUsage: daocore secrets [options] [command]\n\nSecrets runtime controls\n\nOptions:\n  -h, --help  Display help for command\n\nCommands:\n  apply       Apply a previously generated secrets plan\n  audit       Audit plaintext secrets, unresolved refs, and precedence drift\n  configure   Interactive secrets helper (provider setup + SecretRef mapping +\n              preflight)\n  help        Display help for command\n  reload      Re-resolve secret references and atomically swap runtime snapshot\n\nDocs: https://daocore-ai.vercel.app/gateway/security\n\n",
-  "nodesHelpText": "\nDaoCore 2026.5.99 (f07ac4c) — All your chats, one DaoCore.\n\nUsage: daocore nodes [options] [command]\n\nManage gateway-owned nodes (pairing, status, invoke, and media)\n\nOptions:\n  -h, --help  Display help for command\n\nCommands:\n  approve     Approve a pending pairing request\n  camera      Capture camera media from a paired node\n  canvas      Capture or render canvas content from a paired node\n  describe    Describe a node (capabilities + supported invoke commands)\n  help        Display help for command\n  invoke      Invoke a command on a paired node\n  list        List pending and paired nodes\n  location    Fetch location from a paired node\n  notify      Send a local notification on a node (mac only)\n  pending     List pending pairing requests\n  push        Send an APNs test push to an iOS node\n  reject      Reject a pending pairing request\n  remove      Remove a paired node entry\n  rename      Rename a paired node (display name override)\n  screen      Capture screen recordings from a paired node\n  status      List known nodes with connection status and capabilities\n\nExamples:\n  daocore nodes status\n    List known nodes with live status.\n  daocore nodes pairing pending\n    Show pending node pairing requests.\n  daocore nodes remove --node <id|name|ip>\n    Remove a stale paired node entry.\n  daocore nodes invoke --node <id> --command system.which --params '{\"name\":\"uname\"}'\n    Invoke a node command directly.\n  daocore nodes camera snap --node <id>\n    Capture a photo from a node camera.\n\nDocs: https://daocore-ai.vercel.app/cli/nodes\n\n",
+  "browserHelpText": "\nDaoCore 2026.5.100 (a211b6a) — All your chats, one DaoCore.\n\nUsage: daocore browser [options] [command]\n\nManage DaoCore's dedicated browser (Chrome/Chromium)\n\nOptions:\n  --browser-profile <name>  Browser profile name (default from config)\n  --expect-final            Wait for final response (agent) (default: false)\n  -h, --help                Display help for command\n  --json                    Output machine-readable JSON (default: false)\n  --timeout <ms>            Timeout in ms (default: \"30000\")\n  --token <token>           Gateway token (if required)\n  --url <url>               Gateway WebSocket URL (defaults to\n                            gateway.remote.url when configured)\n\nCommands:\n  click                     Click an element by ref from snapshot\n  click-coords              Click viewport coordinates\n  close                     Close a tab (target id optional)\n  console                   Get recent console messages\n  cookies                   Read/write cookies\n  create-profile            Create a new browser profile\n  delete-profile            Delete a browser profile\n  dialog                    Arm the next modal dialog (alert/confirm/prompt)\n  doctor                    Check browser plugin readiness\n  download                  Click a ref and save the resulting download\n  drag                      Drag from one ref to another\n  errors                    Get recent page errors\n  evaluate                  Evaluate a function against the page or a ref\n  fill                      Fill a form with JSON field descriptors\n  focus                     Focus a tab by target id, tab id, label, or unique\n                            target id prefix\n  highlight                 Highlight an element by ref\n  hover                     Hover an element by ai ref\n  navigate                  Navigate the current tab to a URL\n  open                      Open a URL in a new tab\n  pdf                       Save page as PDF\n  press                     Press a key\n  profiles                  List all browser profiles\n  requests                  Get recent network requests (best-effort)\n  reset-profile             Reset browser profile (moves it to Trash)\n  resize                    Resize the viewport\n  responsebody              Wait for a network response and return its body\n  screenshot                Capture a screenshot (MEDIA:<path>)\n  scrollintoview            Scroll an element into view by ref from snapshot\n  select                    Select option(s) in a select element\n  set                       Browser environment settings\n  snapshot                  Capture a snapshot (default: ai; aria is the\n                            accessibility tree)\n  start                     Start the browser (no-op if already running)\n  status                    Show browser status\n  stop                      Stop the browser (best-effort)\n  storage                   Read/write localStorage/sessionStorage\n  tab                       Tab shortcuts (index-based)\n  tabs                      List open tabs\n  trace                     Record a Playwright trace\n  type                      Type into an element by ref from snapshot\n  upload                    Arm file upload for the next file chooser\n  wait                      Wait for time, selector, URL, load state, or JS\n                            conditions\n  waitfordownload           Wait for the next download (and save it)\n\nExamples:\n  daocore browser status\n  daocore browser start\n  daocore browser start --headless\n  daocore browser stop\n  daocore browser tabs\n  daocore browser open https://example.com\n  daocore browser focus abcd1234\n  daocore browser close abcd1234\n  daocore browser screenshot\n  daocore browser screenshot --full-page\n  daocore browser screenshot --ref 12\n  daocore browser snapshot\n  daocore browser snapshot --format aria --limit 200\n  daocore browser snapshot --efficient\n  daocore browser snapshot --labels\n  daocore browser navigate https://example.com\n  daocore browser resize 1280 720\n  daocore browser click 12 --double\n  daocore browser click-coords 120 340\n  daocore browser type 23 \"hello\" --submit\n  daocore browser press Enter\n  daocore browser hover 44\n  daocore browser drag 10 11\n  daocore browser select 9 OptionA OptionB\n  daocore browser upload /tmp/daocore/uploads/file.pdf\n  daocore browser fill --fields '[{\"ref\":\"1\",\"value\":\"Ada\"}]'\n  daocore browser dialog --accept\n  daocore browser wait --text \"Done\"\n  daocore browser evaluate --fn '(el) => el.textContent' --ref 7\n  daocore browser console --level error\n  daocore browser pdf\n\nDocs: https://daocore-ai.vercel.app/cli/browser\n\n",
+  "secretsHelpText": "\nDaoCore 2026.5.100 (a211b6a) — All your chats, one DaoCore.\n\nUsage: daocore secrets [options] [command]\n\nSecrets runtime controls\n\nOptions:\n  -h, --help  Display help for command\n\nCommands:\n  apply       Apply a previously generated secrets plan\n  audit       Audit plaintext secrets, unresolved refs, and precedence drift\n  configure   Interactive secrets helper (provider setup + SecretRef mapping +\n              preflight)\n  help        Display help for command\n  reload      Re-resolve secret references and atomically swap runtime snapshot\n\nDocs: https://daocore-ai.vercel.app/gateway/security\n\n",
+  "nodesHelpText": "\nDaoCore 2026.5.100 (a211b6a) — All your chats, one DaoCore.\n\nUsage: daocore nodes [options] [command]\n\nManage gateway-owned nodes (pairing, status, invoke, and media)\n\nOptions:\n  -h, --help  Display help for command\n\nCommands:\n  approve     Approve a pending pairing request\n  camera      Capture camera media from a paired node\n  canvas      Capture or render canvas content from a paired node\n  describe    Describe a node (capabilities + supported invoke commands)\n  help        Display help for command\n  invoke      Invoke a command on a paired node\n  list        List pending and paired nodes\n  location    Fetch location from a paired node\n  notify      Send a local notification on a node (mac only)\n  pending     List pending pairing requests\n  push        Send an APNs test push to an iOS node\n  reject      Reject a pending pairing request\n  remove      Remove a paired node entry\n  rename      Rename a paired node (display name override)\n  screen      Capture screen recordings from a paired node\n  status      List known nodes with connection status and capabilities\n\nExamples:\n  daocore nodes status\n    List known nodes with live status.\n  daocore nodes pairing pending\n    Show pending node pairing requests.\n  daocore nodes remove --node <id|name|ip>\n    Remove a stale paired node entry.\n  daocore nodes invoke --node <id> --command system.which --params '{\"name\":\"uname\"}'\n    Invoke a node command directly.\n  daocore nodes camera snap --node <id>\n    Capture a photo from a node camera.\n\nDocs: https://daocore-ai.vercel.app/cli/nodes\n\n",
   "subcommandHelpText": {
-    "doctor": "\nDaoCore 2026.5.99 (f07ac4c) — All your chats, one DaoCore.\n\nUsage: daocore doctor [options]\n\nHealth checks + quick fixes for the gateway and channels\n\nOptions:\n  --deep                      Scan system services for extra gateway installs\n                              (default: false)\n  --fix                       Apply recommended repairs (alias for --repair)\n                              (default: false)\n  --fix-update                Fix update issues: check npm cache, compare\n                              version, reinstall if behind, clear stale state\n                              (default: false)\n  --force                     Apply aggressive repairs (overwrites custom\n                              service config) (default: false)\n  --generate-gateway-token    Generate and configure a gateway token (default:\n                              false)\n  -h, --help                  Display help for command\n  --json                      With --lint: emit JSON findings instead of human\n                              output (default: false)\n  --lint                      Run read-only health checks and report findings\n                              (default: false)\n  --no-workspace-suggestions  Disable workspace memory system suggestions\n  --non-interactive           Run without prompts (safe migrations only)\n                              (default: false)\n  --only <id>                 With --lint: run only the specified check id\n                              (repeatable) (default: [])\n  --repair                    Apply recommended repairs without prompting\n                              (default: false)\n  --severity-min <level>      With --lint: drop findings below this severity\n                              (info|warning|error)\n  --skip <id>                 With --lint: skip a specific check id (repeatable)\n                              (default: [])\n  --yes                       Accept defaults without prompting (default: false)\n\nDocs: https://daocore-ai.vercel.app/cli/doctor\n\n",
-    "gateway": "\nDaoCore 2026.5.99 (f07ac4c) — All your chats, one DaoCore.\n\nUsage: daocore gateway [options] [command]\n\nRun, inspect, and query the WebSocket Gateway\n\nOptions:\n  --allow-unconfigured       Allow gateway start without enforcing\n                             gateway.mode=local in config (does not repair\n                             config) (default: false)\n  --auth <mode>              Gateway auth mode\n                             (\"none\"|\"token\"|\"password\"|\"trusted-proxy\")\n  --bind <mode>              Bind mode\n                             (\"loopback\"|\"lan\"|\"tailnet\"|\"auto\"|\"custom\").\n                             Defaults to config gateway.bind (or loopback).\n  --claude-cli-logs          Deprecated alias for --cli-backend-logs (default:\n                             false)\n  --cli-backend-logs         Only show CLI backend logs in the console (includes\n                             stdout/stderr) (default: false)\n  --compact                  Alias for \"--ws-log compact\" (default: false)\n  --dev                      Create a dev config + workspace if missing (no\n                             BOOTSTRAP.md) (default: false)\n  --force                    Kill any existing listener on the target port\n                             before starting (default: false)\n  -h, --help                 Display help for command\n  --password <password>      Password for auth mode=password\n  --password-file <path>     Read gateway password from file\n  --port <port>              Port for the gateway WebSocket\n  --raw-stream               Log raw model stream events to jsonl (default:\n                             false)\n  --raw-stream-path <path>   Raw stream jsonl path\n  --reset                    Reset dev config + credentials + sessions +\n                             workspace (requires --dev) (default: false)\n  --tailscale <mode>         Tailscale exposure mode (\"off\"|\"serve\"|\"funnel\")\n  --tailscale-reset-on-exit  Reset Tailscale serve/funnel configuration on\n                             shutdown (default: false)\n  --token <token>            Shared token required in connect.params.auth.token\n                             (default: DAOCORE_GATEWAY_TOKEN env if set)\n  --verbose                  Verbose logging to stdout/stderr (default: false)\n  --ws-log <style>           WebSocket log style (\"auto\"|\"full\"|\"compact\")\n                             (default: \"auto\")\n\nCommands:\n  call                       Call a Gateway method\n  diagnostics                Export local support diagnostics\n  discover                   Discover gateways via Bonjour (local + wide-area if\n                             configured)\n  health                     Fetch Gateway health\n  install                    Install the Gateway service\n                             (launchd/systemd/schtasks)\n  probe                      Show gateway reachability, auth capability, and\n                             read-probe summary (local + remote)\n  restart                    Restart the Gateway service\n                             (launchd/systemd/schtasks)\n  run                        Run the WebSocket Gateway (foreground)\n  stability                  Fetch payload-free Gateway stability diagnostics\n  start                      Start the Gateway service\n                             (launchd/systemd/schtasks)\n  status                     Show gateway service status + probe\n                             connectivity/capability\n  stop                       Stop the Gateway service (launchd/systemd/schtasks)\n  uninstall                  Uninstall the Gateway service\n                             (launchd/systemd/schtasks)\n  usage-cost                 Fetch usage cost summary from session logs\n\nExamples:\n  daocore gateway run\n    Run the gateway in the foreground.\n  daocore gateway status\n    Show service status plus connectivity/capability.\n  daocore gateway discover\n    Find local and wide-area gateway beacons.\n  daocore gateway stability\n    Show recent stability diagnostics.\n  daocore gateway call health\n    Call a gateway RPC method directly.\n\nDocs: https://daocore-ai.vercel.app/cli/gateway\n\n",
-    "models": "\nDaoCore 2026.5.99 (f07ac4c) — All your chats, one DaoCore.\n\nUsage: daocore models [options] [command]\n\nModel discovery, scanning, and configuration\n\nOptions:\n  --agent <id>     Agent id to inspect (overrides\n                   DAOCORE_AGENT_DIR/PI_CODING_AGENT_DIR)\n  -h, --help       Display help for command\n  --status-json    Output JSON (alias for `models status --json`) (default:\n                   false)\n  --status-plain   Plain output (alias for `models status --plain`) (default:\n                   false)\n\nCommands:\n  aliases          Manage model aliases\n  auth             Manage model auth profiles\n  fallbacks        Manage model fallback list\n  image-fallbacks  Manage image model fallback list\n  list             List models (configured by default)\n  scan             Scan OpenRouter free models for tools + images\n  set              Set the default model\n  set-image        Set the image model\n  status           Show configured model state\n\nDocs: https://daocore-ai.vercel.app/cli/models\n\n",
-    "plugins": "\nDaoCore 2026.5.99 (f07ac4c) — All your chats, one DaoCore.\n\nUsage: daocore plugins [options] [command]\n\nManage DaoCore plugins and extensions\n\nOptions:\n  -h, --help   Display help for command\n\nCommands:\n  build        Generate simple tool plugin metadata\n  disable      Disable a plugin in config\n  doctor       Report plugin load issues\n  enable       Enable a plugin in config\n  init         Create a simple tool plugin project\n  inspect      Inspect plugin details\n  install      Install a plugin or hook pack (path, archive, npm spec, git repo,\n               clawhub:package, or marketplace entry)\n  list         List discovered plugins\n  marketplace  Inspect Claude-compatible plugin marketplaces\n  registry     Inspect or rebuild the persisted plugin registry\n  search       Search ClawHub plugin packages\n  uninstall    Uninstall a plugin\n  update       Update installed plugins and tracked hook packs\n  validate     Validate simple tool plugin metadata\n\nDocs: https://daocore-ai.vercel.app/cli/plugins\n\n"
+    "doctor": "\nDaoCore 2026.5.100 (a211b6a) — All your chats, one DaoCore.\n\nUsage: daocore doctor [options]\n\nHealth checks + quick fixes for the gateway and channels\n\nOptions:\n  --deep                      Scan system services for extra gateway installs\n                              (default: false)\n  --fix                       Apply recommended repairs (alias for --repair)\n                              (default: false)\n  --fix-update                Fix update issues: check npm cache, compare\n                              version, reinstall if behind, clear stale state\n                              (default: false)\n  --force                     Apply aggressive repairs (overwrites custom\n                              service config) (default: false)\n  --generate-gateway-token    Generate and configure a gateway token (default:\n                              false)\n  -h, --help                  Display help for command\n  --json                      With --lint: emit JSON findings instead of human\n                              output (default: false)\n  --lint                      Run read-only health checks and report findings\n                              (default: false)\n  --no-workspace-suggestions  Disable workspace memory system suggestions\n  --non-interactive           Run without prompts (safe migrations only)\n                              (default: false)\n  --only <id>                 With --lint: run only the specified check id\n                              (repeatable) (default: [])\n  --repair                    Apply recommended repairs without prompting\n                              (default: false)\n  --severity-min <level>      With --lint: drop findings below this severity\n                              (info|warning|error)\n  --skip <id>                 With --lint: skip a specific check id (repeatable)\n                              (default: [])\n  --yes                       Accept defaults without prompting (default: false)\n\nDocs: https://daocore-ai.vercel.app/cli/doctor\n\n",
+    "gateway": "\nDaoCore 2026.5.100 (a211b6a) — All your chats, one DaoCore.\n\nUsage: daocore gateway [options] [command]\n\nRun, inspect, and query the WebSocket Gateway\n\nOptions:\n  --allow-unconfigured       Allow gateway start without enforcing\n                             gateway.mode=local in config (does not repair\n                             config) (default: false)\n  --auth <mode>              Gateway auth mode\n                             (\"none\"|\"token\"|\"password\"|\"trusted-proxy\")\n  --bind <mode>              Bind mode\n                             (\"loopback\"|\"lan\"|\"tailnet\"|\"auto\"|\"custom\").\n                             Defaults to config gateway.bind (or loopback).\n  --claude-cli-logs          Deprecated alias for --cli-backend-logs (default:\n                             false)\n  --cli-backend-logs         Only show CLI backend logs in the console (includes\n                             stdout/stderr) (default: false)\n  --compact                  Alias for \"--ws-log compact\" (default: false)\n  --dev                      Create a dev config + workspace if missing (no\n                             BOOTSTRAP.md) (default: false)\n  --force                    Kill any existing listener on the target port\n                             before starting (default: false)\n  -h, --help                 Display help for command\n  --password <password>      Password for auth mode=password\n  --password-file <path>     Read gateway password from file\n  --port <port>              Port for the gateway WebSocket\n  --raw-stream               Log raw model stream events to jsonl (default:\n                             false)\n  --raw-stream-path <path>   Raw stream jsonl path\n  --reset                    Reset dev config + credentials + sessions +\n                             workspace (requires --dev) (default: false)\n  --tailscale <mode>         Tailscale exposure mode (\"off\"|\"serve\"|\"funnel\")\n  --tailscale-reset-on-exit  Reset Tailscale serve/funnel configuration on\n                             shutdown (default: false)\n  --token <token>            Shared token required in connect.params.auth.token\n                             (default: DAOCORE_GATEWAY_TOKEN env if set)\n  --verbose                  Verbose logging to stdout/stderr (default: false)\n  --ws-log <style>           WebSocket log style (\"auto\"|\"full\"|\"compact\")\n                             (default: \"auto\")\n\nCommands:\n  call                       Call a Gateway method\n  diagnostics                Export local support diagnostics\n  discover                   Discover gateways via Bonjour (local + wide-area if\n                             configured)\n  health                     Fetch Gateway health\n  install                    Install the Gateway service\n                             (launchd/systemd/schtasks)\n  probe                      Show gateway reachability, auth capability, and\n                             read-probe summary (local + remote)\n  restart                    Restart the Gateway service\n                             (launchd/systemd/schtasks)\n  run                        Run the WebSocket Gateway (foreground)\n  stability                  Fetch payload-free Gateway stability diagnostics\n  start                      Start the Gateway service\n                             (launchd/systemd/schtasks)\n  status                     Show gateway service status + probe\n                             connectivity/capability\n  stop                       Stop the Gateway service (launchd/systemd/schtasks)\n  uninstall                  Uninstall the Gateway service\n                             (launchd/systemd/schtasks)\n  usage-cost                 Fetch usage cost summary from session logs\n\nExamples:\n  daocore gateway run\n    Run the gateway in the foreground.\n  daocore gateway status\n    Show service status plus connectivity/capability.\n  daocore gateway discover\n    Find local and wide-area gateway beacons.\n  daocore gateway stability\n    Show recent stability diagnostics.\n  daocore gateway call health\n    Call a gateway RPC method directly.\n\nDocs: https://daocore-ai.vercel.app/cli/gateway\n\n",
+    "models": "\nDaoCore 2026.5.100 (a211b6a) — All your chats, one DaoCore.\n\nUsage: daocore models [options] [command]\n\nModel discovery, scanning, and configuration\n\nOptions:\n  --agent <id>     Agent id to inspect (overrides\n                   DAOCORE_AGENT_DIR/PI_CODING_AGENT_DIR)\n  -h, --help       Display help for command\n  --status-json    Output JSON (alias for `models status --json`) (default:\n                   false)\n  --status-plain   Plain output (alias for `models status --plain`) (default:\n                   false)\n\nCommands:\n  aliases          Manage model aliases\n  auth             Manage model auth profiles\n  fallbacks        Manage model fallback list\n  image-fallbacks  Manage image model fallback list\n  list             List models (configured by default)\n  scan             Scan OpenRouter free models for tools + images\n  set              Set the default model\n  set-image        Set the image model\n  status           Show configured model state\n\nDocs: https://daocore-ai.vercel.app/cli/models\n\n",
+    "plugins": "\nDaoCore 2026.5.100 (a211b6a) — All your chats, one DaoCore.\n\nUsage: daocore plugins [options] [command]\n\nManage DaoCore plugins and extensions\n\nOptions:\n  -h, --help   Display help for command\n\nCommands:\n  build        Generate simple tool plugin metadata\n  disable      Disable a plugin in config\n  doctor       Report plugin load issues\n  enable       Enable a plugin in config\n  init         Create a simple tool plugin project\n  inspect      Inspect plugin details\n  install      Install a plugin or hook pack (path, archive, npm spec, git repo,\n               clawhub:package, or marketplace entry)\n  list         List discovered plugins\n  marketplace  Inspect Claude-compatible plugin marketplaces\n  registry     Inspect or rebuild the persisted plugin registry\n  search       Search ClawHub plugin packages\n  uninstall    Uninstall a plugin\n  update       Update installed plugins and tracked hook packs\n  validate     Validate simple tool plugin metadata\n\nDocs: https://daocore-ai.vercel.app/cli/plugins\n\n"
   },
-  "rootHelpText": "\nDaoCore 2026.5.99 (f07ac4c) — All your chats, one DaoCore.\n\nUsage: daocore [options] [command]\n\nOptions:\n  --container <name>   Run the CLI inside a running Podman/Docker container\n                       named <name> (default: env DAOCORE_CONTAINER)\n  --dev                Dev profile: isolate state under ~/.daocore-dev, default\n                       gateway port 19001, and shift derived ports\n                       (browser/canvas)\n  -h, --help           Display help for command\n  --log-level <level>  Global log level override for file + console\n                       (silent|fatal|error|warn|info|debug|trace)\n  --no-color           Disable ANSI colors\n  --profile <name>     Use a named profile (isolates\n                       DAOCORE_STATE_DIR/DAOCORE_CONFIG_PATH under\n                       ~/.daocore-<name>)\n  -V, --version        output the version number\n\nCommands:\n  Hint: commands suffixed with * have subcommands. Run <command> --help for details.\n  acp *                Run and manage ACP-backed coding agents\n  agent                Run one agent turn via the Gateway\n  agents *             Manage isolated agents (workspaces, auth, routing)\n  approvals *          Manage exec approvals (gateway or node host)\n  backup *             Create and verify local backup archives for DaoCore state\n  capability *         Run provider capability commands (fallback alias: infer)\n  channels *           Add, remove, login, and inspect messaging channels\n  chat                 Open a local terminal UI (alias for tui --local)\n  clawbot *            Legacy clawbot command aliases\n  commitments *        List and manage inferred follow-up commitments\n  completion           Generate shell completion script\n  config *             Non-interactive config helpers\n                       (get/set/unset/file/validate). Default: starts guided\n                       setup.\n  configure            Interactive configuration for credentials, channels,\n                       gateway, and agent defaults\n  crestodian           Open the interactive setup and repair assistant\n  cron *               Schedule and inspect Gateway background jobs\n  daemon *             Manage the Gateway service (legacy alias)\n  dashboard            Open the Control UI with your current token\n  devices *            Device pairing + token management\n  directory *          Lookup contact and group IDs (self, peers, groups) for\n                       supported chat channels\n  dns *                DNS helpers for wide-area discovery (Tailscale + CoreDNS)\n  docs                 Search the live DaoCore docs\n  doctor               Diagnose and repair config, Gateway, plugin, and channel\n                       problems\n  exec-policy *        Show or synchronize requested exec policy with host\n                       approvals\n  gateway *            Run, inspect, and query the DaoCore Gateway\n  health               Fetch detailed health from the running Gateway\n  help                 Display help for command\n  hooks *              Manage internal agent hooks\n  infer *              Run provider-backed model, media, search, and embedding\n                       commands\n  logs                 Tail Gateway logs locally or via RPC\n  mcp *                Manage DaoCore MCP config and channel bridge\n  memory               Search, inspect, and reindex memory files\n  message *            Send, read, and manage channel messages\n  migrate *            Import state from another agent system\n  models *             List, scan, and set model providers\n  node *               Run and manage the headless node host service\n  nodes *              Pair nodes and run node-host commands through the Gateway\n  onboard              Interactive onboarding for gateway, workspace, and skills\n  pairing *            Secure DM pairing (approve inbound requests)\n  plugins *            Install, enable, disable, and inspect plugins\n  proxy *              Run the DaoCore debug proxy and inspect captured traffic\n  qr                   Generate mobile pairing QR/setup code\n  reset                Reset local config/state (keeps the CLI installed)\n  sandbox *            Manage sandbox containers for agent isolation\n  secrets *            Audit, apply, and reload SecretRef-backed credentials\n  security *           Security tools and local config audits\n  sessions *           List stored conversation sessions\n  setup                Initialize local config and an agent workspace\n  skills *             List, inspect, and install agent skills\n  status               Show Gateway, channel, model, and recent-session status\n  system *             System events, heartbeat, and presence\n  tasks *              Inspect durable background tasks and flows\n  terminal             Open a local terminal UI (alias for tui --local)\n  tui                  Open a terminal UI connected to the Gateway\n  uninstall            Uninstall the gateway service + local data (CLI remains)\n  update *             Update DaoCore and inspect update channel status\n  webhooks *           Webhook helpers and integrations\n\nExamples:\n  daocore onboard\n    Run guided setup for a local Gateway, workspace, auth, and channels.\n  daocore setup\n    Create the baseline config, workspace, and session folders.\n  daocore configure\n    Change models, Gateway, channels, plugins, skills, and health checks.\n  daocore status\n    Check Gateway, channel, model, and recent-session status.\n  daocore doctor --fix\n    Repair common config, service, plugin, and channel problems.\n  daocore channels add\n    Add or update a chat channel account with guided prompts.\n  daocore channels status\n    See connected messaging accounts and login state.\n  daocore --dev gateway\n    Run a dev Gateway (isolated state/config) on ws://127.0.0.1:19001.\n  daocore gateway run --force\n    Start the Gateway and replace anything bound to its port.\n  daocore models status\n    Show model/provider auth health before running agents.\n  daocore plugins list\n    Inspect enabled, disabled, and installed plugins.\n  daocore agent --to +15555550123 --message \"Run summary\" --deliver\n    Run one agent turn through the Gateway and optionally deliver the reply.\n  daocore message send --channel telegram --target @mychat --message \"Hi\"\n    Send via your Telegram bot.\n\nDocs: https://daocore-ai.vercel.app/cli\n\n"
+  "rootHelpText": "\nDaoCore 2026.5.100 (a211b6a) — All your chats, one DaoCore.\n\nUsage: daocore [options] [command]\n\nOptions:\n  --container <name>   Run the CLI inside a running Podman/Docker container\n                       named <name> (default: env DAOCORE_CONTAINER)\n  --dev                Dev profile: isolate state under ~/.daocore-dev, default\n                       gateway port 19001, and shift derived ports\n                       (browser/canvas)\n  -h, --help           Display help for command\n  --log-level <level>  Global log level override for file + console\n                       (silent|fatal|error|warn|info|debug|trace)\n  --no-color           Disable ANSI colors\n  --profile <name>     Use a named profile (isolates\n                       DAOCORE_STATE_DIR/DAOCORE_CONFIG_PATH under\n                       ~/.daocore-<name>)\n  -V, --version        output the version number\n\nCommands:\n  Hint: commands suffixed with * have subcommands. Run <command> --help for details.\n  acp *                Run and manage ACP-backed coding agents\n  agent                Run one agent turn via the Gateway\n  agents *             Manage isolated agents (workspaces, auth, routing)\n  approvals *          Manage exec approvals (gateway or node host)\n  backup *             Create and verify local backup archives for DaoCore state\n  capability *         Run provider capability commands (fallback alias: infer)\n  channels *           Add, remove, login, and inspect messaging channels\n  chat                 Open a local terminal UI (alias for tui --local)\n  clawbot *            Legacy clawbot command aliases\n  commitments *        List and manage inferred follow-up commitments\n  completion           Generate shell completion script\n  config *             Non-interactive config helpers\n                       (get/set/unset/file/validate). Default: starts guided\n                       setup.\n  configure            Interactive configuration for credentials, channels,\n                       gateway, and agent defaults\n  crestodian           Open the interactive setup and repair assistant\n  cron *               Schedule and inspect Gateway background jobs\n  daemon *             Manage the Gateway service (legacy alias)\n  dashboard            Open the Control UI with your current token\n  devices *            Device pairing + token management\n  directory *          Lookup contact and group IDs (self, peers, groups) for\n                       supported chat channels\n  dns *                DNS helpers for wide-area discovery (Tailscale + CoreDNS)\n  docs                 Search the live DaoCore docs\n  doctor               Diagnose and repair config, Gateway, plugin, and channel\n                       problems\n  exec-policy *        Show or synchronize requested exec policy with host\n                       approvals\n  gateway *            Run, inspect, and query the DaoCore Gateway\n  health               Fetch detailed health from the running Gateway\n  help                 Display help for command\n  hooks *              Manage internal agent hooks\n  infer *              Run provider-backed model, media, search, and embedding\n                       commands\n  logs                 Tail Gateway logs locally or via RPC\n  mcp *                Manage DaoCore MCP config and channel bridge\n  memory               Search, inspect, and reindex memory files\n  message *            Send, read, and manage channel messages\n  migrate *            Import state from another agent system\n  models *             List, scan, and set model providers\n  node *               Run and manage the headless node host service\n  nodes *              Pair nodes and run node-host commands through the Gateway\n  onboard              Interactive onboarding for gateway, workspace, and skills\n  pairing *            Secure DM pairing (approve inbound requests)\n  plugins *            Install, enable, disable, and inspect plugins\n  proxy *              Run the DaoCore debug proxy and inspect captured traffic\n  qr                   Generate mobile pairing QR/setup code\n  reset                Reset local config/state (keeps the CLI installed)\n  sandbox *            Manage sandbox containers for agent isolation\n  secrets *            Audit, apply, and reload SecretRef-backed credentials\n  security *           Security tools and local config audits\n  sessions *           List stored conversation sessions\n  setup                Initialize local config and an agent workspace\n  skills *             List, inspect, and install agent skills\n  status               Show Gateway, channel, model, and recent-session status\n  system *             System events, heartbeat, and presence\n  tasks *              Inspect durable background tasks and flows\n  terminal             Open a local terminal UI (alias for tui --local)\n  tui                  Open a terminal UI connected to the Gateway\n  uninstall            Uninstall the gateway service + local data (CLI remains)\n  update *             Update DaoCore and inspect update channel status\n  webhooks *           Webhook helpers and integrations\n\nExamples:\n  daocore onboard\n    Run guided setup for a local Gateway, workspace, auth, and channels.\n  daocore setup\n    Create the baseline config, workspace, and session folders.\n  daocore configure\n    Change models, Gateway, channels, plugins, skills, and health checks.\n  daocore status\n    Check Gateway, channel, model, and recent-session status.\n  daocore doctor --fix\n    Repair common config, service, plugin, and channel problems.\n  daocore channels add\n    Add or update a chat channel account with guided prompts.\n  daocore channels status\n    See connected messaging accounts and login state.\n  daocore --dev gateway\n    Run a dev Gateway (isolated state/config) on ws://127.0.0.1:19001.\n  daocore gateway run --force\n    Start the Gateway and replace anything bound to its port.\n  daocore models status\n    Show model/provider auth health before running agents.\n  daocore plugins list\n    Inspect enabled, disabled, and installed plugins.\n  daocore agent --to +15555550123 --message \"Run summary\" --deliver\n    Run one agent turn through the Gateway and optionally deliver the reply.\n  daocore message send --channel telegram --target @mychat --message \"Hi\"\n    Send via your Telegram bot.\n\nDocs: https://daocore-ai.vercel.app/cli\n\n"
 }

package/dist/combined-store-gateway-Bx3Mc2CU.d.ts

@@ -0,0 +1,13 @@
+import { r as DaoCoreConfig } from "./types.daocore-CNMq809i.js";
+import { o as SessionEntry } from "./types-DyE5xc5O.js";
+
+//#region src/config/sessions/combined-store-gateway.d.ts
+declare function loadCombinedSessionStoreForGateway(cfg: DaoCoreConfig, opts?: {
+  agentId?: string;
+  configuredAgentsOnly?: boolean;
+}): {
+  storePath: string;
+  store: Record<string, SessionEntry>;
+};
+//#endregion
+export { loadCombinedSessionStoreForGateway as t };

package/dist/command-auth-Bs9fqk3P.d.ts

@@ -0,0 +1,74 @@
+import { r as DaoCoreConfig } from "./types.daocore-CNMq809i.js";
+import { t as ChannelId } from "./channel-id.types-ClK6B_QE.js";
+import { n as AccessGroupMembershipResolver } from "./access-groups-ByRGVskC.js";
+import { a as buildHelpMessage$1, i as buildCommandsMessagePaginated$1, r as buildCommandsMessage$1 } from "./command-status-builders-CigRAxC5.js";
+
+//#region src/plugin-sdk/telegram-command-ui.d.ts
+declare function buildCommandsPaginationKeyboard(currentPage: number, totalPages: number, agentId?: string): Array<Array<{
+  text: string;
+  callback_data: string;
+}>>;
+//#endregion
+//#region src/plugin-sdk/command-auth.d.ts
+/** @deprecated Use `resolveChannelMessageIngress` from `daocore/plugin-sdk/channel-ingress-runtime`. */
+type ResolveSenderCommandAuthorizationParams = {
+  cfg: DaoCoreConfig;
+  rawBody: string;
+  isGroup: boolean;
+  dmPolicy: string;
+  configuredAllowFrom: string[];
+  configuredGroupAllowFrom?: string[];
+  senderId: string;
+  isSenderAllowed: (senderId: string, allowFrom: string[]) => boolean;
+  channel?: ChannelId;
+  accountId?: string;
+  resolveAccessGroupMembership?: AccessGroupMembershipResolver;
+  readAllowFromStore: () => Promise<string[]>;
+  shouldComputeCommandAuthorized: (rawBody: string, cfg: DaoCoreConfig) => boolean; /** @deprecated Command authorization is resolved by channel ingress. Kept for runtime injection compatibility. */
+  resolveCommandAuthorizedFromAuthorizers?: (params: {
+    useAccessGroups: boolean;
+    authorizers: Array<{
+      configured: boolean;
+      allowed: boolean;
+    }>;
+  }) => boolean;
+};
+/** @deprecated Use `resolveChannelMessageIngress` from `daocore/plugin-sdk/channel-ingress-runtime`. */
+type CommandAuthorizationRuntime = {
+  shouldComputeCommandAuthorized: (rawBody: string, cfg: DaoCoreConfig) => boolean;
+  resolveCommandAuthorizedFromAuthorizers: (params: {
+    useAccessGroups: boolean;
+    authorizers: Array<{
+      configured: boolean;
+      allowed: boolean;
+    }>;
+  }) => boolean;
+};
+/** @deprecated Use `resolveChannelMessageIngress` from `daocore/plugin-sdk/channel-ingress-runtime`. */
+type ResolveSenderCommandAuthorizationWithRuntimeParams = Omit<ResolveSenderCommandAuthorizationParams, "shouldComputeCommandAuthorized" | "resolveCommandAuthorizedFromAuthorizers"> & {
+  runtime: CommandAuthorizationRuntime;
+};
+/** @deprecated Use `resolveChannelMessageIngress` from `daocore/plugin-sdk/channel-ingress-runtime`. */
+declare function resolveDirectDmAuthorizationOutcome(params: {
+  isGroup: boolean;
+  dmPolicy: string;
+  senderAllowedForCommands: boolean;
+}): "disabled" | "unauthorized" | "allowed";
+/** @deprecated Use `resolveChannelMessageIngress` from `daocore/plugin-sdk/channel-ingress-runtime`. */
+declare function resolveSenderCommandAuthorizationWithRuntime(params: ResolveSenderCommandAuthorizationWithRuntimeParams): ReturnType<typeof resolveSenderCommandAuthorization>;
+/** @deprecated Use `resolveChannelMessageIngress` from `daocore/plugin-sdk/channel-ingress-runtime`. */
+declare function resolveSenderCommandAuthorization(params: ResolveSenderCommandAuthorizationParams): Promise<{
+  shouldComputeAuth: boolean;
+  effectiveAllowFrom: string[];
+  effectiveGroupAllowFrom: string[];
+  senderAllowedForCommands: boolean;
+  commandAuthorized: boolean | undefined;
+}>;
+/** @deprecated Use `daocore/plugin-sdk/command-status` instead. */
+declare function buildCommandsMessage(...args: Parameters<typeof buildCommandsMessage$1>): ReturnType<typeof buildCommandsMessage$1>;
+/** @deprecated Use `daocore/plugin-sdk/command-status` instead. */
+declare function buildCommandsMessagePaginated(...args: Parameters<typeof buildCommandsMessagePaginated$1>): ReturnType<typeof buildCommandsMessagePaginated$1>;
+/** @deprecated Use `daocore/plugin-sdk/command-status` instead. */
+declare function buildHelpMessage(...args: Parameters<typeof buildHelpMessage$1>): ReturnType<typeof buildHelpMessage$1>;
+//#endregion
+export { buildCommandsMessagePaginated as a, resolveSenderCommandAuthorization as c, buildCommandsMessage as i, resolveSenderCommandAuthorizationWithRuntime as l, ResolveSenderCommandAuthorizationParams as n, buildHelpMessage as o, ResolveSenderCommandAuthorizationWithRuntimeParams as r, resolveDirectDmAuthorizationOutcome as s, CommandAuthorizationRuntime as t, buildCommandsPaginationKeyboard as u };

package/dist/command-detection-hlxikOSQ.d.ts

@@ -0,0 +1,17 @@
+import { r as DaoCoreConfig } from "./types.daocore-CNMq809i.js";
+import { s as CommandNormalizeOptions } from "./commands-registry.types-DCplf4zw.js";
+
+//#region src/auto-reply/command-detection.d.ts
+declare function hasControlCommand(text?: string, cfg?: DaoCoreConfig, options?: CommandNormalizeOptions): boolean;
+declare function isControlCommandMessage(text?: string, cfg?: DaoCoreConfig, options?: CommandNormalizeOptions): boolean;
+/**
+ * Coarse detection for inline directives/shortcuts (e.g. "hey /status") so channel monitors
+ * can decide whether to compute CommandAuthorized for a message.
+ *
+ * This intentionally errs on the side of false positives; CommandAuthorized only gates
+ * command/directive execution, not normal chat replies.
+ */
+declare function hasInlineCommandTokens(text?: string): boolean;
+declare function shouldComputeCommandAuthorized(text?: string, cfg?: DaoCoreConfig, options?: CommandNormalizeOptions): boolean;
+//#endregion
+export { shouldComputeCommandAuthorized as i, hasInlineCommandTokens as n, isControlCommandMessage as r, hasControlCommand as t };

package/dist/command-secret-gateway-BCrTDEzG.d.ts

@@ -0,0 +1,23 @@
+import { r as DaoCoreConfig } from "./types.daocore-CNMq809i.js";
+//#region src/cli/command-secret-gateway.d.ts
+type ResolveCommandSecretsResult = {
+  resolvedConfig: DaoCoreConfig;
+  diagnostics: string[];
+  targetStatesByPath: Record<string, CommandSecretTargetState>;
+  hadUnresolvedTargets: boolean;
+};
+type CommandSecretResolutionMode = "enforce_resolved" | "read_only_status" | "read_only_operational";
+type LegacyCommandSecretResolutionMode = "strict" | "summary" | "operational_readonly";
+type CommandSecretResolutionModeInput = CommandSecretResolutionMode | LegacyCommandSecretResolutionMode;
+type CommandSecretTargetState = "resolved_gateway" | "resolved_local" | "inactive_surface" | "unresolved";
+declare function resolveCommandSecretRefsViaGateway(params: {
+  config: DaoCoreConfig;
+  commandName: string;
+  targetIds: Set<string>;
+  mode?: CommandSecretResolutionModeInput;
+  allowedPaths?: ReadonlySet<string>;
+  forcedActivePaths?: ReadonlySet<string>;
+  optionalActivePaths?: ReadonlySet<string>;
+}): Promise<ResolveCommandSecretsResult>;
+//#endregion
+export { resolveCommandSecretRefsViaGateway as t };

package/dist/command-specs-D55ZSGuR.d.ts

@@ -0,0 +1,23 @@
+import { r as DaoCoreConfig } from "./types.daocore-CNMq809i.js";
+
+//#region src/plugins/command-specs.d.ts
+declare function getPluginCommandSpecs(provider?: string, options?: {
+  env?: NodeJS.ProcessEnv;
+  stateDir?: string;
+  workspaceDir?: string;
+  config?: DaoCoreConfig;
+}): Array<{
+  name: string;
+  description: string;
+  descriptionLocalizations?: Record<string, string>;
+  acceptsArgs: boolean;
+}>;
+/** Resolve plugin command specs for a provider's native naming surface without support gating. */
+declare function listProviderPluginCommandSpecs(provider?: string): Array<{
+  name: string;
+  description: string;
+  descriptionLocalizations?: Record<string, string>;
+  acceptsArgs: boolean;
+}>;
+//#endregion
+export { listProviderPluginCommandSpecs as n, getPluginCommandSpecs as t };