@gguf/claw 2026.2.1 → 2026.2.2

package/dist/browser/extension-relay.js

@@ -1,6 +1,20 @@
+import { randomBytes } from "node:crypto";
 import { createServer } from "node:http";
 import WebSocket, { WebSocketServer } from "ws";
 import { rawDataToString } from "../infra/ws.js";
+const RELAY_AUTH_HEADER = "x-openclaw-relay-token";
+function headerValue(value) {
+    if (!value) {
+        return undefined;
+    }
+    if (Array.isArray(value)) {
+        return value[0];
+    }
+    return value;
+}
+function getHeader(req, name) {
+    return headerValue(req.headers[name.toLowerCase()]);
+}
 function isLoopbackHost(host) {
     const h = host.trim().toLowerCase();
     return (h === "localhost" ||
@@ -61,6 +75,34 @@ function rejectUpgrade(socket, status, bodyText) {
     }
 }
 const serversByPort = new Map();
+const relayAuthByPort = new Map();
+function relayAuthTokenForUrl(url) {
+    try {
+        const parsed = new URL(url);
+        if (!isLoopbackHost(parsed.hostname)) {
+            return null;
+        }
+        const port = parsed.port?.trim() !== ""
+            ? Number(parsed.port)
+            : parsed.protocol === "https:" || parsed.protocol === "wss:"
+                ? 443
+                : 80;
+        if (!Number.isFinite(port)) {
+            return null;
+        }
+        return relayAuthByPort.get(port) ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+export function getChromeExtensionRelayAuthHeaders(url) {
+    const token = relayAuthTokenForUrl(url);
+    if (!token) {
+        return {};
+    }
+    return { [RELAY_AUTH_HEADER]: token };
+}
 export async function ensureChromeExtensionRelayServer(opts) {
     const info = parseBaseUrl(opts.cdpUrl);
     if (!isLoopbackHost(info.host)) {
@@ -192,9 +234,18 @@ export async function ensureChromeExtensionRelayServer(opts) {
             }
         }
     };
+    const relayAuthToken = randomBytes(32).toString("base64url");
     const server = createServer((req, res) => {
         const url = new URL(req.url ?? "/", info.baseUrl);
         const path = url.pathname;
+        if (path.startsWith("/json")) {
+            const token = getHeader(req, RELAY_AUTH_HEADER);
+            if (!token || token !== relayAuthToken) {
+                res.writeHead(401);
+                res.end("Unauthorized");
+                return;
+            }
+        }
         if (req.method === "HEAD" && path === "/") {
             res.writeHead(200);
             res.end();
@@ -303,6 +354,11 @@ export async function ensureChromeExtensionRelayServer(opts) {
             rejectUpgrade(socket, 403, "Forbidden");
             return;
         }
+        const origin = headerValue(req.headers.origin);
+        if (origin && !origin.startsWith("chrome-extension://")) {
+            rejectUpgrade(socket, 403, "Forbidden: invalid origin");
+            return;
+        }
         if (pathname === "/extension") {
             if (extensionWs) {
                 rejectUpgrade(socket, 409, "Extension already connected");
@@ -314,6 +370,11 @@ export async function ensureChromeExtensionRelayServer(opts) {
             return;
         }
         if (pathname === "/cdp") {
+            const token = getHeader(req, RELAY_AUTH_HEADER);
+            if (!token || token !== relayAuthToken) {
+                rejectUpgrade(socket, 401, "Unauthorized");
+                return;
+            }
             if (!extensionWs) {
                 rejectUpgrade(socket, 503, "Extension not connected");
                 return;
@@ -530,6 +591,7 @@ export async function ensureChromeExtensionRelayServer(opts) {
         extensionConnected: () => Boolean(extensionWs),
         stop: async () => {
             serversByPort.delete(port);
+            relayAuthByPort.delete(port);
             try {
                 extensionWs?.close(1001, "server stopping");
             }
@@ -551,6 +613,7 @@ export async function ensureChromeExtensionRelayServer(opts) {
             wssCdp.close();
         },
     };
+    relayAuthByPort.set(port, relayAuthToken);
     serversByPort.set(port, relay);
     return relay;
 }
@@ -561,5 +624,6 @@ export async function stopChromeExtensionRelayServer(opts) {
         return false;
     }
     await existing.stop();
+    relayAuthByPort.delete(info.port);
     return true;
 }

package/dist/browser/profiles-service.js

@@ -2,9 +2,9 @@ import fs from "node:fs";
 import path from "node:path";
 import { loadConfig, writeConfigFile } from "../config/config.js";
 import { deriveDefaultBrowserCdpPortRange } from "../config/port-defaults.js";
-import { DEFAULT_BROWSER_DEFAULT_PROFILE_NAME } from "./constants.js";
 import { resolveOpenClawUserDataDir } from "./chrome.js";
 import { parseHttpUrl, resolveProfile } from "./config.js";
+import { DEFAULT_BROWSER_DEFAULT_PROFILE_NAME } from "./constants.js";
 import { allocateCdpPort, allocateColor, getUsedColors, getUsedPorts, isValidProfileName, } from "./profiles.js";
 import { movePathToTrash } from "./trash.js";
 const HEX_COLOR_RE = /^#[0-9A-Fa-f]{6}$/;

package/dist/browser/profiles.js

@@ -88,7 +88,6 @@ export function allocateColor(usedColors) {
     }
     // All colors used, cycle based on count
     const index = usedColors.size % PROFILE_COLORS.length;
-    // biome-ignore lint/style/noNonNullAssertion: Array is non-empty constant
     return PROFILE_COLORS[index] ?? PROFILE_COLORS[0];
 }
 export function getUsedColors(profiles) {

package/dist/browser/pw-session.js

@@ -276,7 +276,8 @@ async function findPageByTargetId(browser, targetId, cdpUrl) {
                 .replace(/\/+$/, "")
                 .replace(/^ws:/, "http:")
                 .replace(/\/cdp$/, "");
-            const response = await fetch(`${baseUrl}/json/list`);
+            const listUrl = `${baseUrl}/json/list`;
+            const response = await fetch(listUrl, { headers: getHeadersWithAuth(listUrl) });
             if (response.ok) {
                 const targets = (await response.json());
                 const target = targets.find((t) => t.id === targetId);

package/dist/browser/routes/agent.shared.d.ts

@@ -1,5 +1,5 @@
-import type { BrowserRouteContext, ProfileContext } from "../server-context.js";
 import type { PwAiModule } from "../pw-ai-module.js";
+import type { BrowserRouteContext, ProfileContext } from "../server-context.js";
 import type { BrowserRequest, BrowserResponse } from "./types.js";
 export declare const SELECTOR_UNSUPPORTED_MESSAGE: string;
 export declare function readBody(req: BrowserRequest): Record<string, unknown>;

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "2026.2.1",
+  "version": "2026.2.2",
   "commit": null,
-  "builtAt": "2026-02-01T18:58:29.884Z"
+  "builtAt": "2026-02-03T07:48:37.567Z"
 }

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-ac511f11ce7a638d4523bfa1fd02fe942c732afe8a90e7309a28fccb234fd5c1
+b786047c6a2ab0d1f4de5892cabd7ac33f4d1d09b79be66af08f97f8ea3f545b

package/dist/canvas-host/server.d.ts

@@ -1,5 +1,5 @@
-import { type IncomingMessage, type ServerResponse } from "node:http";
 import type { Duplex } from "node:stream";
+import { type IncomingMessage, type ServerResponse } from "node:http";
 import type { RuntimeEnv } from "../runtime.js";
 export type CanvasHostOpts = {
     runtime: RuntimeEnv;

package/dist/canvas-host/server.js

@@ -1,9 +1,9 @@
+import chokidar from "chokidar";
 import * as fsSync from "node:fs";
 import fs from "node:fs/promises";
 import http from "node:http";
 import os from "node:os";
 import path from "node:path";
-import chokidar from "chokidar";
 import { WebSocketServer } from "ws";
 import { isTruthyEnvValue } from "../infra/env.js";
 import { SafeOpenError, openFileWithinRoot } from "../infra/fs-safe.js";

package/dist/channels/dock.js

@@ -1,14 +1,14 @@
 import { resolveDiscordAccount } from "../discord/accounts.js";
 import { resolveIMessageAccount } from "../imessage/accounts.js";
+import { requireActivePluginRegistry } from "../plugins/runtime.js";
+import { normalizeAccountId } from "../routing/session-key.js";
 import { resolveSignalAccount } from "../signal/accounts.js";
 import { resolveSlackAccount, resolveSlackReplyToMode } from "../slack/accounts.js";
 import { buildSlackThreadingToolContext } from "../slack/threading-tool-context.js";
 import { resolveTelegramAccount } from "../telegram/accounts.js";
-import { normalizeAccountId } from "../routing/session-key.js";
 import { normalizeE164 } from "../utils.js";
 import { resolveWhatsAppAccount } from "../web/accounts.js";
 import { normalizeWhatsAppTarget } from "../whatsapp/normalize.js";
-import { requireActivePluginRegistry } from "../plugins/runtime.js";
 import { resolveDiscordGroupRequireMention, resolveDiscordGroupToolPolicy, resolveGoogleChatGroupRequireMention, resolveGoogleChatGroupToolPolicy, resolveIMessageGroupRequireMention, resolveIMessageGroupToolPolicy, resolveSlackGroupRequireMention, resolveSlackGroupToolPolicy, resolveTelegramGroupRequireMention, resolveTelegramGroupToolPolicy, resolveWhatsAppGroupRequireMention, resolveWhatsAppGroupToolPolicy, } from "./plugins/group-mentions.js";
 import { CHAT_CHANNEL_ORDER, getChatChannelMeta } from "./registry.js";
 const formatLower = (allowFrom) => allowFrom

package/dist/channels/plugins/actions/discord/handle-action.js

@@ -1,7 +1,7 @@
 import { readNumberParam, readStringArrayParam, readStringParam, } from "../../../../agents/tools/common.js";
 import { handleDiscordAction } from "../../../../agents/tools/discord-actions.js";
-import { tryHandleDiscordMessageActionGuildAdmin } from "./handle-action.guild-admin.js";
 import { resolveDiscordChannelId } from "../../../../discord/targets.js";
+import { tryHandleDiscordMessageActionGuildAdmin } from "./handle-action.guild-admin.js";
 const providerId = "discord";
 function readParentIdParam(params) {
     if (params.clearParent === true) {

package/dist/channels/plugins/directory-config.js

@@ -1,9 +1,9 @@
-import { resolveSlackAccount } from "../../slack/accounts.js";
 import { resolveDiscordAccount } from "../../discord/accounts.js";
+import { resolveSlackAccount } from "../../slack/accounts.js";
 import { resolveTelegramAccount } from "../../telegram/accounts.js";
 import { resolveWhatsAppAccount } from "../../web/accounts.js";
-import { normalizeSlackMessagingTarget } from "./normalize/slack.js";
 import { isWhatsAppGroupJid, normalizeWhatsAppTarget } from "../../whatsapp/normalize.js";
+import { normalizeSlackMessagingTarget } from "./normalize/slack.js";
 export async function listSlackDirectoryPeersFromConfig(params) {
     const account = resolveSlackAccount({ cfg: params.cfg, accountId: params.accountId });
     const q = params.query?.trim().toLowerCase() || "";

package/dist/channels/plugins/index.js

@@ -1,5 +1,5 @@
-import { CHAT_CHANNEL_ORDER, normalizeAnyChannelId } from "../registry.js";
 import { requireActivePluginRegistry } from "../../plugins/runtime.js";
+import { CHAT_CHANNEL_ORDER, normalizeAnyChannelId } from "../registry.js";
 // Channel plugins registry (runtime).
 //
 // This module is intentionally "heavy" (plugins may import channel monitors, web login, etc).

package/dist/channels/plugins/onboarding/discord.js

@@ -1,7 +1,7 @@
 import { listDiscordAccountIds, resolveDefaultDiscordAccountId, resolveDiscordAccount, } from "../../../discord/accounts.js";
 import { normalizeDiscordSlug } from "../../../discord/monitor/allow-list.js";
-import { resolveDiscordUserAllowlist } from "../../../discord/resolve-users.js";
 import { resolveDiscordChannelAllowlist, } from "../../../discord/resolve-channels.js";
+import { resolveDiscordUserAllowlist } from "../../../discord/resolve-users.js";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "../../../routing/session-key.js";
 import { formatDocsLink } from "../../../terminal/links.js";
 import { promptChannelAccessConfig } from "./channel-access.js";

package/dist/channels/plugins/onboarding/signal.js

@@ -1,9 +1,9 @@
+import { formatCliCommand } from "../../../cli/command-format.js";
 import { detectBinary } from "../../../commands/onboard-helpers.js";
 import { installSignalCli } from "../../../commands/signal-install.js";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "../../../routing/session-key.js";
 import { listSignalAccountIds, resolveDefaultSignalAccountId, resolveSignalAccount, } from "../../../signal/accounts.js";
 import { formatDocsLink } from "../../../terminal/links.js";
-import { formatCliCommand } from "../../../cli/command-format.js";
 import { normalizeE164 } from "../../../utils.js";
 import { addWildcardAllowFrom, promptAccountId } from "./helpers.js";
 const channel = "signal";

package/dist/channels/plugins/onboarding/telegram.js

@@ -1,7 +1,7 @@
+import { formatCliCommand } from "../../../cli/command-format.js";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "../../../routing/session-key.js";
 import { listTelegramAccountIds, resolveDefaultTelegramAccountId, resolveTelegramAccount, } from "../../../telegram/accounts.js";
 import { formatDocsLink } from "../../../terminal/links.js";
-import { formatCliCommand } from "../../../cli/command-format.js";
 import { addWildcardAllowFrom, promptAccountId } from "./helpers.js";
 const channel = "telegram";
 function setTelegramDmPolicy(cfg, dmPolicy) {

package/dist/channels/plugins/onboarding/whatsapp.js

@@ -1,10 +1,10 @@
 import fs from "node:fs/promises";
 import path from "node:path";
 import { loginWeb } from "../../../channel-web.js";
+import { formatCliCommand } from "../../../cli/command-format.js";
 import { mergeWhatsAppConfig } from "../../../config/merge-config.js";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "../../../routing/session-key.js";
 import { formatDocsLink } from "../../../terminal/links.js";
-import { formatCliCommand } from "../../../cli/command-format.js";
 import { normalizeE164 } from "../../../utils.js";
 import { listWhatsAppAccountIds, resolveDefaultWhatsAppAccountId, resolveWhatsAppAuthDir, } from "../../../web/accounts.js";
 import { promptAccountId } from "./helpers.js";

package/dist/channels/plugins/outbound/whatsapp.js

@@ -1,8 +1,8 @@
 import { chunkText } from "../../../auto-reply/chunk.js";
 import { shouldLogVerbose } from "../../../globals.js";
+import { missingTargetError } from "../../../infra/outbound/target-errors.js";
 import { sendPollWhatsApp } from "../../../web/outbound.js";
 import { isWhatsAppGroupJid, normalizeWhatsAppTarget } from "../../../whatsapp/normalize.js";
-import { missingTargetError } from "../../../infra/outbound/target-errors.js";
 export const whatsappOutbound = {
     deliveryMode: "gateway",
     chunker: chunkText,

package/dist/channels/plugins/pairing.d.ts

@@ -1,7 +1,7 @@
 import type { OpenClawConfig } from "../../config/config.js";
 import type { RuntimeEnv } from "../../runtime.js";
-import { type ChannelId } from "./index.js";
 import type { ChannelPairingAdapter } from "./types.js";
+import { type ChannelId } from "./index.js";
 export declare function listPairingChannels(): ChannelId[];
 export declare function getPairingAdapter(channelId: ChannelId): ChannelPairingAdapter | null;
 export declare function requirePairingAdapter(channelId: ChannelId): ChannelPairingAdapter;

package/dist/channels/plugins/types.adapters.d.ts

@@ -1,5 +1,5 @@
-import type { OpenClawConfig } from "../../config/config.js";
 import type { ReplyPayload } from "../../auto-reply/types.js";
+import type { OpenClawConfig } from "../../config/config.js";
 import type { GroupToolPolicyConfig } from "../../config/types.tools.js";
 import type { OutboundDeliveryResult, OutboundSendDeps } from "../../infra/outbound/deliver.js";
 import type { RuntimeEnv } from "../../runtime.js";

package/dist/channels/reply-prefix.d.ts

@@ -1,5 +1,5 @@
-import type { OpenClawConfig } from "../config/config.js";
 import type { GetReplyOptions } from "../auto-reply/types.js";
+import type { OpenClawConfig } from "../config/config.js";
 import { type ResponsePrefixContext } from "../auto-reply/reply/response-prefix-template.js";
 type ModelSelectionContext = Parameters<NonNullable<GetReplyOptions["onModelSelected"]>>[0];
 export type ReplyPrefixContextBundle = {

package/dist/cli/browser-cli-actions-input/register.files-downloads.js

@@ -1,8 +1,8 @@
 import { danger } from "../../globals.js";
 import { defaultRuntime } from "../../runtime.js";
+import { shortenHomePath } from "../../utils.js";
 import { callBrowserRequest } from "../browser-cli-shared.js";
 import { resolveBrowserActionContext } from "./shared.js";
-import { shortenHomePath } from "../../utils.js";
 export function registerBrowserFilesAndDownloadsCommands(browser, parentOpts) {
     browser
         .command("upload")

package/dist/cli/browser-cli-actions-observe.js

@@ -1,8 +1,8 @@
 import { danger } from "../globals.js";
 import { defaultRuntime } from "../runtime.js";
+import { shortenHomePath } from "../utils.js";
 import { callBrowserRequest } from "./browser-cli-shared.js";
 import { runCommandWithRuntime } from "./cli-utils.js";
-import { shortenHomePath } from "../utils.js";
 function runBrowserObserve(action) {
     return runCommandWithRuntime(defaultRuntime, action, (err) => {
         defaultRuntime.error(danger(String(err)));

package/dist/cli/browser-cli-debug.js

@@ -1,8 +1,8 @@
 import { danger } from "../globals.js";
 import { defaultRuntime } from "../runtime.js";
+import { shortenHomePath } from "../utils.js";
 import { callBrowserRequest } from "./browser-cli-shared.js";
 import { runCommandWithRuntime } from "./cli-utils.js";
-import { shortenHomePath } from "../utils.js";
 function runBrowserDebug(action) {
     return runCommandWithRuntime(defaultRuntime, action, (err) => {
         defaultRuntime.error(danger(String(err)));

package/dist/cli/browser-cli-extension.js

@@ -1,11 +1,11 @@
 import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { movePathToTrash } from "../browser/trash.js";
 import { STATE_DIR } from "../config/paths.js";
 import { danger, info } from "../globals.js";
 import { copyToClipboard } from "../infra/clipboard.js";
 import { defaultRuntime } from "../runtime.js";
-import { movePathToTrash } from "../browser/trash.js";
 import { formatDocsLink } from "../terminal/links.js";
 import { theme } from "../terminal/theme.js";
 import { shortenHomePath } from "../utils.js";

package/dist/cli/browser-cli.js

@@ -2,8 +2,6 @@ import { danger } from "../globals.js";
 import { defaultRuntime } from "../runtime.js";
 import { formatDocsLink } from "../terminal/links.js";
 import { theme } from "../terminal/theme.js";
-import { formatCliCommand } from "./command-format.js";
-import { formatHelpExamples } from "./help-format.js";
 import { registerBrowserActionInputCommands } from "./browser-cli-actions-input.js";
 import { registerBrowserActionObserveCommands } from "./browser-cli-actions-observe.js";
 import { registerBrowserDebugCommands } from "./browser-cli-debug.js";
@@ -12,7 +10,9 @@ import { registerBrowserExtensionCommands } from "./browser-cli-extension.js";
 import { registerBrowserInspectCommands } from "./browser-cli-inspect.js";
 import { registerBrowserManageCommands } from "./browser-cli-manage.js";
 import { registerBrowserStateCommands } from "./browser-cli-state.js";
+import { formatCliCommand } from "./command-format.js";
 import { addGatewayClientOptions } from "./gateway-rpc.js";
+import { formatHelpExamples } from "./help-format.js";
 export function registerBrowserCli(program) {
     const browser = program
         .command("browser")

package/dist/cli/channel-options.js

@@ -1,6 +1,6 @@
 import { listChannelPluginCatalogEntries } from "../channels/plugins/catalog.js";
-import { CHAT_CHANNEL_ORDER } from "../channels/registry.js";
 import { listChannelPlugins } from "../channels/plugins/index.js";
+import { CHAT_CHANNEL_ORDER } from "../channels/registry.js";
 import { isTruthyEnvValue } from "../infra/env.js";
 import { ensurePluginRegistryLoaded } from "./plugin-registry.js";
 function dedupe(values) {

package/dist/cli/channels-cli.js

@@ -1,10 +1,10 @@
-import { formatCliChannelOptions } from "./channel-options.js";
 import { channelsAddCommand, channelsCapabilitiesCommand, channelsListCommand, channelsLogsCommand, channelsRemoveCommand, channelsResolveCommand, channelsStatusCommand, } from "../commands/channels.js";
 import { danger } from "../globals.js";
 import { defaultRuntime } from "../runtime.js";
 import { formatDocsLink } from "../terminal/links.js";
 import { theme } from "../terminal/theme.js";
 import { runChannelLogin, runChannelLogout } from "./channel-auth.js";
+import { formatCliChannelOptions } from "./channel-options.js";
 import { runCommandWithRuntime } from "./cli-utils.js";
 import { hasExplicitOptions } from "./command-options.js";
 const optionNamesAdd = [

package/dist/cli/command-format.js

@@ -1,5 +1,5 @@
-import { normalizeProfileName } from "./profile-utils.js";
 import { replaceCliName, resolveCliName } from "./cli-name.js";
+import { normalizeProfileName } from "./profile-utils.js";
 const CLI_PREFIX_RE = /^(?:pnpm|npm|bunx|npx)\s+openclaw\b|^openclaw\b/;
 const PROFILE_FLAG_RE = /(?:^|\s)--profile(?:\s|=|$)/;
 const DEV_FLAG_RE = /(?:^|\s)--dev(?:\s|$)/;

package/dist/cli/config-cli.js

@@ -3,9 +3,9 @@ import { readConfigFileSnapshot, writeConfigFile } from "../config/config.js";
 import { danger, info } from "../globals.js";
 import { defaultRuntime } from "../runtime.js";
 import { formatDocsLink } from "../terminal/links.js";
-import { formatCliCommand } from "./command-format.js";
 import { theme } from "../terminal/theme.js";
 import { shortenHomePath } from "../utils.js";
+import { formatCliCommand } from "./command-format.js";
 function isIndexSegment(raw) {
     return /^[0-9]+$/.test(raw);
 }

package/dist/cli/cron-cli/register.cron-add.js

@@ -1,6 +1,6 @@
 import { danger } from "../../globals.js";
-import { defaultRuntime } from "../../runtime.js";
 import { sanitizeAgentId } from "../../routing/session-key.js";
+import { defaultRuntime } from "../../runtime.js";
 import { addGatewayClientOptions, callGatewayFromCli } from "../gateway-rpc.js";
 import { parsePositiveIntOrUndefined } from "../program/helpers.js";
 import { getCronChannelOptions, parseAtMs, parseDurationMs, printCronList, warnIfCronSchedulerDisabled, } from "./shared.js";

package/dist/cli/cron-cli/register.cron-edit.js

@@ -1,6 +1,6 @@
 import { danger } from "../../globals.js";
-import { defaultRuntime } from "../../runtime.js";
 import { sanitizeAgentId } from "../../routing/session-key.js";
+import { defaultRuntime } from "../../runtime.js";
 import { addGatewayClientOptions, callGatewayFromCli } from "../gateway-rpc.js";
 import { getCronChannelOptions, parseAtMs, parseDurationMs, warnIfCronSchedulerDisabled, } from "./shared.js";
 const assignIf = (target, key, value, shouldAssign) => {

package/dist/cli/daemon-cli/install.js

@@ -1,5 +1,5 @@
-import { DEFAULT_GATEWAY_DAEMON_RUNTIME, isGatewayDaemonRuntime, } from "../../commands/daemon-runtime.js";
 import { buildGatewayInstallPlan } from "../../commands/daemon-install-helpers.js";
+import { DEFAULT_GATEWAY_DAEMON_RUNTIME, isGatewayDaemonRuntime, } from "../../commands/daemon-runtime.js";
 import { loadConfig, resolveGatewayPort } from "../../config/config.js";
 import { resolveIsNixMode } from "../../config/paths.js";
 import { resolveGatewayService } from "../../daemon/service.js";

package/dist/cli/daemon-cli/lifecycle.js

@@ -1,7 +1,7 @@
 import { resolveIsNixMode } from "../../config/paths.js";
 import { resolveGatewayService } from "../../daemon/service.js";
-import { isSystemdUserServiceAvailable } from "../../daemon/systemd.js";
 import { renderSystemdUnavailableHints } from "../../daemon/systemd-hints.js";
+import { isSystemdUserServiceAvailable } from "../../daemon/systemd.js";
 import { isWSL } from "../../infra/wsl.js";
 import { defaultRuntime } from "../../runtime.js";
 import { buildDaemonServiceSnapshot, createNullWriter, emitDaemonActionJson } from "./response.js";

package/dist/cli/daemon-cli/status.gather.d.ts

@@ -1,8 +1,8 @@
 import type { GatewayBindMode, GatewayControlUiConfig } from "../../config/types.js";
 import type { FindExtraGatewayServicesOptions } from "../../daemon/inspect.js";
 import type { ServiceConfigAudit } from "../../daemon/service-audit.js";
-import { type PortListener, type PortUsageStatus } from "../../infra/ports.js";
 import type { GatewayRpcOpts } from "./types.js";
+import { type PortListener, type PortUsageStatus } from "../../infra/ports.js";
 type ConfigSummary = {
     path: string;
     exists: boolean;

package/dist/cli/daemon-cli/status.gather.js

@@ -1,8 +1,8 @@
 import { createConfigIO, resolveConfigPath, resolveGatewayPort, resolveStateDir, } from "../../config/config.js";
 import { readLastGatewayErrorLine } from "../../daemon/diagnostics.js";
 import { findExtraGatewayServices } from "../../daemon/inspect.js";
-import { resolveGatewayService } from "../../daemon/service.js";
 import { auditGatewayServiceConfig } from "../../daemon/service-audit.js";
+import { resolveGatewayService } from "../../daemon/service.js";
 import { resolveGatewayBindHost } from "../../gateway/net.js";
 import { formatPortDiagnostics, inspectPortUsage, } from "../../infra/ports.js";
 import { pickPrimaryTailnetIPv4 } from "../../infra/tailnet.js";

package/dist/cli/deps.d.ts

@@ -1,7 +1,7 @@
+import type { OutboundSendDeps } from "../infra/outbound/deliver.js";
 import { logWebSelfId, sendMessageWhatsApp } from "../channels/web/index.js";
 import { sendMessageDiscord } from "../discord/send.js";
 import { sendMessageIMessage } from "../imessage/send.js";
-import type { OutboundSendDeps } from "../infra/outbound/deliver.js";
 import { sendMessageSignal } from "../signal/send.js";
 import { sendMessageSlack } from "../slack/send.js";
 import { sendMessageTelegram } from "../telegram/send.js";

package/dist/cli/devices-cli.js

@@ -1,8 +1,8 @@
 import { callGateway } from "../gateway/call.js";
-import { GATEWAY_CLIENT_MODES, GATEWAY_CLIENT_NAMES } from "../utils/message-channel.js";
 import { defaultRuntime } from "../runtime.js";
 import { renderTable } from "../terminal/table.js";
 import { theme } from "../terminal/theme.js";
+import { GATEWAY_CLIENT_MODES, GATEWAY_CLIENT_NAMES } from "../utils/message-channel.js";
 import { withProgress } from "./progress.js";
 function formatAge(msAgo) {
     const s = Math.max(0, Math.floor(msAgo / 1000));

package/dist/cli/directory-cli.js

@@ -5,8 +5,8 @@ import { danger } from "../globals.js";
 import { resolveMessageChannelSelection } from "../infra/outbound/channel-selection.js";
 import { defaultRuntime } from "../runtime.js";
 import { formatDocsLink } from "../terminal/links.js";
-import { theme } from "../terminal/theme.js";
 import { renderTable } from "../terminal/table.js";
+import { theme } from "../terminal/theme.js";
 function parseLimit(value) {
     if (typeof value === "number" && Number.isFinite(value)) {
         if (value <= 0) {
@@ -79,7 +79,7 @@ export function registerDirectoryCli(program) {
                 return;
             }
             const tableWidth = Math.max(60, (process.stdout.columns ?? 120) - 1);
-            defaultRuntime.log(`${theme.heading("Self")}`);
+            defaultRuntime.log(theme.heading("Self"));
             defaultRuntime.log(renderTable({
                 width: tableWidth,
                 columns: [

package/dist/cli/exec-approvals-cli.js

@@ -1,12 +1,12 @@
-import fs from "node:fs/promises";
 import JSON5 from "json5";
+import fs from "node:fs/promises";
 import { readExecApprovalsSnapshot, saveExecApprovals, } from "../infra/exec-approvals.js";
 import { defaultRuntime } from "../runtime.js";
 import { formatDocsLink } from "../terminal/links.js";
-import { isRich, theme } from "../terminal/theme.js";
 import { renderTable } from "../terminal/table.js";
-import { callGatewayFromCli } from "./gateway-rpc.js";
+import { isRich, theme } from "../terminal/theme.js";
 import { describeUnknownError } from "./gateway-cli/shared.js";
+import { callGatewayFromCli } from "./gateway-rpc.js";
 import { nodesCallOpts, resolveNodeId } from "./nodes-cli/rpc.js";
 function formatAge(msAgo) {
     const s = Math.max(0, Math.floor(msAgo / 1000));

package/dist/cli/gateway-cli/dev.js

@@ -1,8 +1,8 @@
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { resolveDefaultAgentWorkspaceDir } from "../../agents/workspace.js";
 import { resolveWorkspaceTemplateDir } from "../../agents/workspace-templates.js";
+import { resolveDefaultAgentWorkspaceDir } from "../../agents/workspace.js";
 import { handleReset } from "../../commands/onboard-helpers.js";
 import { createConfigIO, writeConfigFile } from "../../config/config.js";
 import { defaultRuntime } from "../../runtime.js";

package/dist/cli/gateway-cli/register.js

@@ -7,9 +7,9 @@ import { defaultRuntime } from "../../runtime.js";
 import { formatDocsLink } from "../../terminal/links.js";
 import { colorize, isRich, theme } from "../../terminal/theme.js";
 import { formatTokenCount, formatUsd } from "../../utils/usage-format.js";
-import { withProgress } from "../progress.js";
 import { runCommandWithRuntime } from "../cli-utils.js";
 import { runDaemonInstall, runDaemonRestart, runDaemonStart, runDaemonStatus, runDaemonStop, runDaemonUninstall, } from "../daemon-cli.js";
+import { withProgress } from "../progress.js";
 import { callGatewayCli, gatewayCallOpts } from "./call.js";
 import { dedupeBeacons, parseDiscoverTimeoutMs, pickBeaconHost, pickGatewayPort, renderBeaconLines, } from "./discover.js";
 import { addGatewayRunCommand } from "./run.js";

package/dist/cli/hooks-cli.js

@@ -2,19 +2,19 @@ import fs from "node:fs";
 import fsp from "node:fs/promises";
 import path from "node:path";
 import { resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agents/agent-scope.js";
-import { resolveArchiveKind } from "../infra/archive.js";
-import { buildWorkspaceHookStatus, } from "../hooks/hooks-status.js";
-import { loadWorkspaceHookEntries } from "../hooks/workspace.js";
 import { loadConfig, writeConfigFile } from "../config/io.js";
+import { buildWorkspaceHookStatus, } from "../hooks/hooks-status.js";
 import { installHooksFromNpmSpec, installHooksFromPath, resolveHookInstallDir, } from "../hooks/install.js";
 import { recordHookInstall } from "../hooks/installs.js";
+import { loadWorkspaceHookEntries } from "../hooks/workspace.js";
+import { resolveArchiveKind } from "../infra/archive.js";
 import { buildPluginStatusReport } from "../plugins/status.js";
 import { defaultRuntime } from "../runtime.js";
 import { formatDocsLink } from "../terminal/links.js";
 import { renderTable } from "../terminal/table.js";
 import { theme } from "../terminal/theme.js";
-import { formatCliCommand } from "./command-format.js";
 import { resolveUserPath, shortenHomePath } from "../utils.js";
+import { formatCliCommand } from "./command-format.js";
 function mergeHookEntries(pluginEntries, workspaceEntries) {
     const merged = new Map();
     for (const entry of pluginEntries) {
@@ -640,7 +640,14 @@ export function registerHooksCli(program) {
                 defaultRuntime.log(theme.warn(`Skipping "${hookId}" (missing npm spec).`));
                 continue;
             }
-            const installPath = record.installPath ?? resolveHookInstallDir(hookId);
+            let installPath;
+            try {
+                installPath = record.installPath ?? resolveHookInstallDir(hookId);
+            }
+            catch (err) {
+                defaultRuntime.log(theme.error(`Invalid install path for "${hookId}": ${String(err)}`));
+                continue;
+            }
             const currentVersion = await readInstalledPackageVersion(installPath);
             if (opts.dryRun) {
                 const probe = await installHooksFromNpmSpec({