@gguf/claw 2026.2.4 → 2026.2.5

package/dist/{gateway-cli-BTlr6Uwl.js → gateway-cli-ape0pnBU.js}

@@ -1,91 +1,95 @@
-import { B as normalizeThinkLevel, F as formatXHighModelHint, H as normalizeVerboseLevel, P as formatThinkingLevels, R as normalizeElevatedLevel, V as normalizeUsageDisplay, W as supportsXHighThinking, z as normalizeReasoningLevel } from "./pi-embedded-helpers-CC00lEFI.js";
-import { $n as setCommandLaneConcurrency, An as resolveEffectiveMessagesConfig, Ar as normalizeMimeList, At as recordRemoteNodeInfo, B as isGatewaySigusr1RestartExternallyAllowed, Bn as OPENAI_TTS_VOICES, Bt as verifyNodeToken, C as readSessionPreviewItemsFromTranscript, Cn as registerAgentRunContext, Cr as DEFAULT_INPUT_MAX_REDIRECTS, D as ensureOutboundSessionEntry, Dr as DEFAULT_INPUT_TIMEOUT_MS, Dt as resolveAssistantAvatarUrl, Er as DEFAULT_INPUT_PDF_MIN_TEXT_CHARS, Et as normalizeControlUiBasePath, Fn as clearInternalHooks, Ft as listNodePairing, G as migrateLegacyCronPayload, Gn as resolveTtsAutoMode, Gt as getHookType, H as setGatewaySigusr1RestartPolicy, Hn as isTtsEnabled, Ht as registerSkillsChangeListener, I as runWithModelFallback, In as createInternalHookEvent, It as rejectNodePairing, J as requestHeartbeatNow, Jn as resolveTtsProviderOrder, Kn as resolveTtsConfig, Kt as isExternalHookSession, Ln as registerInternalHook, Lt as renamePairedNode, M as resolveSessionDeliveryTarget, Mn as formatUserTime, Mr as resolveAgentTimeoutMs, Mt as refreshRemoteNodeBins, Nn as resolveUserTimeFormat, Nt as setSkillsRemoteRegistry, O as resolveOutboundSessionRoute, Or as extractFileContentFromSource, Ot as getRemoteSkillEligibility, P as resetDirectoryCache, Pn as resolveUserTimezone, Pt as approveNodePairing, Q as loadProviderUsageSummary, Qt as registerUnhandledRejectionHandler, R as authorizeGatewaySigusr1Restart, Rn as triggerInternalHook, Rt as requestNodePairing, S as readSessionMessages, Sn as onAgentEvent, Sr as DEFAULT_INPUT_IMAGE_MIMES, T as stripEnvelopeFromMessages, Tn as normalizePollInput, Tr as DEFAULT_INPUT_PDF_MAX_PIXELS, Tt as buildControlUiAvatarUrl, U as normalizeCronJobCreate, Un as isTtsProviderConfigured, Ut as buildSafeExternalPrompt, V as scheduleGatewaySigusr1Restart, Vn as getTtsProvider, Vt as getSkillsSnapshotVersion, W as normalizeCronJobPatch, Wn as resolveTtsApiKey, Wt as detectSuspiciousPatterns, X as getPluginToolMeta, Xn as setTtsProvider, Xt as normalizeGroupActivation, Yn as setTtsEnabled, Z as loadOpenClawPlugins, Zn as textToSpeech, _ as loadSessionEntry, _n as initSubagentRegistry, _r as loadModelCatalog, a as loadCostUsageSummary, b as archiveFileOnDisk, bn as emitAgentEvent, br as DEFAULT_INPUT_FILE_MIMES, c as clearSessionQueues, cn as getChannelActivity, cr as stripHeartbeatToken, d as waitForEmbeddedPiRunEnd, dn as dispatchInboundMessage, dr as applyModelOverrideToSessionEntry, en as buildHistoryContextFromEntries, er as CommandLane, f as createOpenClawTools, fn as createReplyDispatcher, fr as applyVerboseOverride, g as loadCombinedSessionStoreForGateway, gn as stopSubagentsForRequester, h as listSessionsFromStore, hn as isAbortTrigger, hr as isSystemEventContextChanged, i as runCliAgent, in as onHeartbeatEvent, ir as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, it as handleSlackHttpRequest, j as resolveOutboundTarget, jn as resolveIdentityName, jt as refreshRemoteBinsForConnectedNodes, kn as resolveAgentIdentity, kr as extractImageContentFromSource, kt as primeRemoteSkillsCache, l as runEmbeddedPiAgent, lr as lookupContextTokens, m as listAgentsForGateway, mn as formatZonedTimestamp, mr as enqueueSystemEvent, n as getCliSessionId, nr as stopDiagnosticHeartbeat, o as normalizeSendPolicy, p as resolveAnnounceTargetFromKey, pn as extractShortModelName, pr as parseVerboseOverride, pt as handleReset, qn as resolveTtsPrefsPath, r as setCliSessionId, rn as getLastHeartbeatEvent, rr as isDiagnosticsEnabled, rt as hasNonzeroUsage, s as resolveSendPolicy, tn as resolveHeartbeatVisibility, tr as startDiagnosticHeartbeat, u as abortEmbeddedPiRun, v as resolveGatewaySessionStoreTarget, vr as DEFAULT_INPUT_FILE_MAX_BYTES, w as resolveSessionTranscriptCandidates, wr as DEFAULT_INPUT_PDF_MAX_PAGES, wt as CONTROL_UI_AVATAR_PREFIX, x as capArrayByJsonBytes, xn as getAgentRunContext, xr as DEFAULT_INPUT_IMAGE_MAX_BYTES, y as resolveSessionModelRef, yn as clearAgentRunContext, yr as DEFAULT_INPUT_FILE_MAX_CHARS, z as consumeGatewaySigusr1RestartAuthorization, zn as OPENAI_TTS_MODELS, zt as updatePairedNodeMetadata } from "./reply-CoztdrN_.js";
-import { g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-BDd7_JUB.js";
-import { E as DEFAULT_ACCOUNT_ID, F as resolveAgentIdFromSessionKey, H as parseAgentSessionKey, N as normalizeAgentId, P as normalizeMainKey, R as toAgentRequestSessionKey, T as resolveWorkspaceTemplateDir, V as isSubagentSessionKey, _ as DEFAULT_MEMORY_FILENAME, b as DEFAULT_USER_FILENAME, c as resolveDefaultAgentId, d as DEFAULT_AGENTS_FILENAME, g as DEFAULT_MEMORY_ALT_FILENAME, h as DEFAULT_IDENTITY_FILENAME, i as resolveAgentModelFallbacksOverride, k as buildAgentMainSessionKey, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, v as DEFAULT_SOUL_FILENAME, w as resolveDefaultAgentWorkspaceDir, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-CrgUOY3f.js";
-import { B as getLogger, C as getActivePluginRegistry, I as colorize, L as isRich, M as setVerbose, R as theme, V as getResolvedLoggerSettings, a as setConsoleTimestampPrefix, c as defaultRuntime, h as DEFAULT_CHAT_CHANNEL, i as setConsoleSubsystemFilter, n as runtimeForLogger, p as CHANNEL_IDS, t as createSubsystemLogger, z as getChildLogger } from "./subsystem-46MXi6Ip.js";
-import { _ as shortenHomePath, h as resolveUserPath, s as ensureDir, t as CONFIG_DIR, x as truncateUtf16Safe } from "./utils-Dg0Xbl6w.js";
-import { a as logDebug, c as logWarn, n as runExec, t as runCommandWithTimeout } from "./exec-CTo4hK94.js";
-import { t as resolveOpenClawPackageRoot } from "./openclaw-root-CJKDUIBP.js";
-import { bt as DEFAULT_MODEL, c as resolveAllowedModelRef, d as resolveHooksGmailModel, i as isCliProvider, l as resolveConfiguredModelRef, p as resolveThinkingDefault, r as getModelRefStatus, xt as DEFAULT_PROVIDER, yt as DEFAULT_CONTEXT_TOKENS } from "./model-selection-Cp1maz7B.js";
-import "./github-copilot-token-VZsS4013.js";
-import { t as formatCliCommand } from "./command-format-BQK1OIvH.js";
-import "./boolean-CE7i9tBR.js";
-import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-DOcCob95.js";
-import { A as resolveAgentMaxConcurrent, E as applyLegacyMigrations, M as VERSION, a as readConfigFileSnapshot, i as parseConfigJson5, j as resolveSubagentMaxConcurrent, l as validateConfigObjectWithPlugins, n as createConfigIO, o as resolveConfigSnapshotHash, r as loadConfig, s as writeConfigFile, t as migrateLegacyConfig, u as OpenClawSchema } from "./config-qgIz1lbh.js";
-import { o as isTestDefaultMemorySlotDisabled } from "./manifest-registry-BFpLJJDB.js";
-import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-D1CxUobm.js";
-import { B as snapshotSessionOrigin, F as resolveAgentMainSessionKey, I as resolveExplicitAgentSessionKey, L as resolveMainSessionKey, R as resolveMainSessionKeyFromConfig, S as mergeDeliveryContext, at as resolveToolProfilePolicy, b as deliveryContextFromSession, d as loadSessionStore, et as buildPluginToolGroups, g as updateSessionStore, it as normalizeToolName, nt as expandPolicyWithPluginGroups, ot as stripPluginOnlyAllowlist, tt as collectExplicitAllowlist, w as normalizeSessionDeliveryFields } from "./sandbox-BXUfp_qv.js";
-import "./image-ClOB6QDJ.js";
-import "./pi-model-discovery-DjGamP_B.js";
-import { T as formatErrorMessage, d as inspectPortUsage, l as ensurePortAvailable, p as formatPortDiagnostics } from "./chrome-D2LUApAY.js";
-import { d as hasBinary, i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-C4b1FA1e.js";
-import { c as saveMediaBuffer, l as detectMime } from "./routes-Ds-tIZFJ.js";
-import "./server-context-D2cv-pIA.js";
-import { t as rawDataToString } from "./ws-Cxo2p9fH.js";
-import { f as GATEWAY_CLIENT_IDS, i as isGatewayMessageChannel, l as normalizeMessageChannel, m as GATEWAY_CLIENT_NAMES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_MODES, r as isGatewayCliClient, s as isWebchatClient, t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-CQGWXVL4.js";
-import "./logging-BdnOSVPD.js";
-import "./accounts-BlHoTziG.js";
-import { o as resolveStorePath, r as resolveSessionTranscriptPath } from "./paths-50eo6DV6.js";
-import "./redact-BKh-zp-c.js";
-import "./tool-display-rIUh61kT.js";
-import { a as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-Bsvrattg.js";
-import { i as getMachineDisplayName, t as createBrowserRouteDispatcher } from "./dispatcher-BNB5aCZ6.js";
-import "./manager-BArueSTR.js";
-import "./sqlite-Dz6S6ijV.js";
-import { m as formatUsd, p as formatTokenCount } from "./channel-summary-C8GoEKgH.js";
-import { $ as validatePollParams, A as validateDevicePairListParams, B as validateLogsTailParams, C as validateCronListParams, Ct as ErrorCodes, D as validateCronStatusParams, Dt as buildDeviceAuthPayload, E as validateCronRunsParams, Et as parseSessionLabel, F as validateExecApprovalResolveParams, G as validateNodeInvokeResultParams, H as validateNodeDescribeParams, I as validateExecApprovalsGetParams, J as validateNodePairListParams, K as validateNodeListParams, L as validateExecApprovalsNodeGetParams, M as validateDeviceTokenRevokeParams, Mt as verifyDeviceSignature, N as validateDeviceTokenRotateParams, O as validateCronUpdateParams, P as validateExecApprovalRequestParams, Q as validateNodeRenameParams, R as validateExecApprovalsNodeSetParams, S as validateCronAddParams, St as PROTOCOL_VERSION, T as validateCronRunParams, U as validateNodeEventParams, V as validateModelsListParams, W as validateNodeInvokeParams, X as validateNodePairRequestParams, Y as validateNodePairRejectParams, Z as validateNodePairVerifyParams, _ as validateConfigGetParams, _t as validateWebLoginWaitParams, a as validateAgentWaitParams, at as validateSessionsPatchParams, b as validateConfigSetParams, bt as validateWizardStartParams, c as validateAgentsFilesSetParams, ct as validateSessionsResolveParams, d as validateChannelsStatusParams, dt as validateSkillsStatusParams, et as validateRequestFrame, f as validateChatAbortParams, ft as validateSkillsUpdateParams, g as validateConfigApplyParams, gt as validateWebLoginStartParams, h as validateChatSendParams, ht as validateWakeParams, i as validateAgentParams, it as validateSessionsListParams, j as validateDevicePairRejectParams, jt as normalizeDevicePublicKeyBase64Url, k as validateDevicePairApproveParams, kt as deriveDeviceIdFromPublicKey, l as validateAgentsListParams, lt as validateSkillsBinsParams, m as validateChatInjectParams, mt as validateUpdateRunParams, n as formatValidationErrors, nt as validateSessionsCompactParams, o as validateAgentsFilesGetParams, ot as validateSessionsPreviewParams, p as validateChatHistoryParams, pt as validateTalkModeParams, q as validateNodePairApproveParams, r as validateAgentIdentityParams, rt as validateSessionsDeleteParams, s as validateAgentsFilesListParams, st as validateSessionsResetParams, tt as validateSendParams, u as validateChannelsLogoutParams, ut as validateSkillsInstallParams, v as validateConfigPatchParams, vt as validateWizardCancelParams, w as validateCronRemoveParams, wt as errorShape, x as validateConnectParams, xt as validateWizardStatusParams, y as validateConfigSchemaParams, yt as validateWizardNextParams, z as validateExecApprovalsSetParams } from "./client-zqMhLTAX.js";
-import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-Bk5cGmwE.js";
-import { i as loadGatewayTlsRuntime$1, n as callGateway } from "./call-CPBhMXxo.js";
-import "./login-qr-C2H_iQJU.js";
-import "./pairing-store-BnMngoWQ.js";
-import { t as formatDocsLink } from "./links-C9fyAH-V.js";
-import { r as runCommandWithRuntime } from "./cli-utils-CukoNm8O.js";
-import { n as withProgress } from "./progress-uNDQDtGB.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy, t as filterToolsByPolicy } from "./pi-tools.policy-DleRi9eC.js";
-import "./prompt-style-gfROyHgB.js";
-import "./pairing-labels-DK2aLSd2.js";
-import { c as normalizeExecApprovals, g as saveExecApprovals, l as readExecApprovalsSnapshot, m as resolveExecApprovalsSocketPath, r as ensureExecApprovals } from "./exec-approvals-CK-Umdr3.js";
-import { r as startBrowserControlServiceFromConfig, t as createBrowserControlContext } from "./control-service-BW5sW2U1.js";
-import { t as parseAbsoluteTimeMs } from "./parse-DLFPuO7w.js";
-import { a as summarizeRestartSentinel, n as formatDoctorNonInteractiveHint, r as formatRestartSentinelMessage, s as writeRestartSentinel, t as consumeRestartSentinel } from "./restart-sentinel-CdcBcziq.js";
-import { n as resolveMessageChannelSelection } from "./channel-selection-BCn8_qun.js";
-import { n as createOutboundSendDeps, t as createDefaultDeps } from "./deps-BrcOX0ht.js";
-import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-Cvk3mQDZ.js";
-import { t as ensureOpenClawCliOnPath } from "./path-env-CuGC6r1F.js";
-import { c as loadAgentIdentity, d as loadAgentIdentityFromWorkspace, p as forceFreePortAndWait, r as getStatusSummary, t as runOnboardingWizard } from "./onboarding-DcN1avQK.js";
-import { t as resolveChannelDefaultAccountId } from "./helpers-Cw9kFCkw.js";
-import "./logging-CLCWl7Iu.js";
-import { t as WizardCancelledError } from "./prompts-CIDznuZR.js";
-import { d as resolveControlUiRootOverrideSync, f as resolveControlUiRootSync, i as discoverGatewayBeacons, n as installSkill, u as ensureControlUiAssetsBuilt } from "./onboard-skills-fL84FI8F.js";
-import "./github-copilot-auth-BoRchp_Q.js";
-import "./onboard-channels-CJCy7TTQ.js";
-import { r as buildChannelUiCatalog, t as applyPluginAutoEnable } from "./plugin-auto-enable-JQ63k0Ce.js";
-import "./archive-BrH5WBhI.js";
-import "./installs-W4Pc1LJz.js";
-import { c as startHeartbeatRunner, n as formatHealthChannelLines, o as runHeartbeatOnce, r as getHealthSnapshot, s as setHeartbeatsEnabled } from "./health-format-B4_A88V3.js";
-import { c as compareSemverStrings, f as DEFAULT_PACKAGE_CHANNEL, h as normalizeUpdateChannel, s as checkUpdateStatus, t as runGatewayUpdate, u as resolveNpmChannelTag } from "./update-runner-s8Rs8ex3.js";
-import { a as resolveGatewayBindHost, n as isLoopbackHost$2, o as resolveGatewayClientIp, r as isTrustedProxyAddress, s as resolveGatewayListenHosts, t as isLoopbackAddress } from "./net-DeiCIMU6.js";
-import { i as resolveGatewayAuth, n as authorizeGatewayConnect, r as isLocalDirectRequest, t as assertGatewayAuthConfigured } from "./auth-DK3l201_.js";
-import { i as probeGateway } from "./audit-CWGOX7Eh.js";
-import "./table-DuNe7Qes.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-CSCMqNZP.js";
-import "./service-CAxAjHNB.js";
-import "./systemd-CNYEkRek.js";
-import "./service-audit-DBSAGhm8.js";
-import "./node-service-CjtBRyjp.js";
-import "./channels-status-issues-C9vMMPG0.js";
-import "./status.update-2ZdxeIeT.js";
-import { a as createOutboundSendDeps$1, i as resolveAgentOutboundTarget, r as resolveAgentDeliveryPlan, t as agentCommand } from "./agent-DuQt3QDO.js";
-import "./daemon-runtime-vNkYv9tq.js";
-import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-BIhjVRG1.js";
-import { i as shouldIncludeHook, n as loadWorkspaceHookEntries, r as resolveHookConfig } from "./hooks-status-XV9oQICf.js";
-import "./tui-cV-R-JXi.js";
-import { t as buildChannelAccountSnapshot } from "./status-DkW6wMxZ.js";
-import "./shared-ChNOqAzp.js";
-import { a as runDaemonStop, i as runDaemonStart, n as runDaemonStatus, o as runDaemonUninstall, r as runDaemonRestart, s as runDaemonInstall } from "./daemon-cli-fHXAapHL.js";
-import { a as toOptionString, i as parsePort$1, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-xZjRQa6y.js";
-import { i as setGatewayWsLogStyle, n as logWs, r as summarizeAgentEventForWsLog, t as formatForLog } from "./ws-log-DQ6nkLys.js";
-import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-B1CTmT2V.js";
+import { B as normalizeElevatedLevel, H as normalizeThinkLevel, I as formatThinkingLevels, K as supportsXHighThinking, L as formatXHighModelHint, U as normalizeUsageDisplay, V as normalizeReasoningLevel, W as normalizeVerboseLevel } from "./pi-embedded-helpers-BB4uACeq.js";
+import { $n as setTtsEnabled, A as resolveOutboundTarget, An as normalizePollInput, Ar as DEFAULT_INPUT_PDF_MIN_TEXT_CHARS, At as buildControlUiAvatarUrl, B as scheduleGatewaySigusr1Restart, Bn as createInternalHookEvent, Bt as listNodePairing, C as resolveSessionTranscriptCandidates, Cr as DEFAULT_INPUT_FILE_MAX_CHARS, D as resolveOutboundSessionRoute, Dn as onAgentEvent, Dr as DEFAULT_INPUT_MAX_REDIRECTS, E as ensureOutboundSessionEntry, En as getAgentRunContext, Er as DEFAULT_INPUT_IMAGE_MIMES, F as runWithModelFallback, Ft as recordRemoteNodeInfo, Gn as getTtsProvider, Gt as verifyNodeToken, H as consumeRestartSentinel, Hn as triggerInternalHook, Ht as renamePairedNode, In as formatUserTime, Ir as resolveAgentTimeoutMs, It as refreshRemoteBinsForConnectedNodes, J as writeRestartSentinel, Jn as resolveTtsApiKey, Jt as buildSafeExternalPrompt, K as summarizeRestartSentinel, Kn as isTtsEnabled, Kt as getSkillsSnapshotVersion, L as authorizeGatewaySigusr1Restart, Ln as resolveUserTimeFormat, Lt as refreshRemoteNodeBins, Mr as extractFileContentFromSource, Mt as resolveAssistantAvatarUrl, N as resetDirectoryCache, Nr as extractImageContentFromSource, Nt as getRemoteSkillEligibility, On as registerAgentRunContext, Or as DEFAULT_INPUT_PDF_MAX_PAGES, Pn as resolveAgentIdentity, Pr as normalizeMimeList, Pt as primeRemoteSkillsCache, Qn as resolveTtsProviderOrder, R as consumeGatewaySigusr1RestartAuthorization, Rn as resolveUserTimezone, Rt as setSkillsRemoteRegistry, S as readSessionPreviewItemsFromTranscript, Sn as initSubagentRegistry, Sr as DEFAULT_INPUT_FILE_MAX_BYTES, Tn as emitAgentEvent, Tr as DEFAULT_INPUT_IMAGE_MAX_BYTES, U as formatDoctorNonInteractiveHint, Un as OPENAI_TTS_MODELS, Ut as requestNodePairing, V as setGatewaySigusr1RestartPolicy, Vn as registerInternalHook, Vt as rejectNodePairing, W as formatRestartSentinelMessage, Wn as OPENAI_TTS_VOICES, Wt as updatePairedNodeMetadata, X as normalizeCronJobPatch, Xn as resolveTtsConfig, Xt as getHookType, Y as normalizeCronJobCreate, Yn as resolveTtsAutoMode, Yt as detectSuspiciousPatterns, Z as migrateLegacyCronPayload, Zn as resolveTtsPrefsPath, Zt as isExternalHookSession, _ as resolveGatewaySessionStoreTarget, _n as dispatchInboundMessage, _r as parseVerboseOverride, a as normalizeSendPolicy, ar as startDiagnosticHeartbeat, b as capArrayByJsonBytes, bn as isAbortTrigger, c as runEmbeddedPiAgent, cr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, d as createOpenClawTools, er as setTtsProvider, et as requestHeartbeatNow, f as resolveAnnounceTargetFromKey, fr as stripHeartbeatToken, g as loadSessionEntry, gr as applyVerboseOverride, h as loadCombinedSessionStoreForGateway, hr as applyModelOverrideToSessionEntry, i as runCliAgent, in as registerUnhandledRejectionHandler, ir as CommandLane, it as loadProviderUsageSummary, j as resolveSessionDeliveryTarget, jr as DEFAULT_INPUT_TIMEOUT_MS, jt as normalizeControlUiBasePath, kr as DEFAULT_INPUT_PDF_MAX_PIXELS, kt as CONTROL_UI_AVATAR_PREFIX, l as abortEmbeddedPiRun, ln as getLastHeartbeatEvent, lt as handleSlackHttpRequest, m as listSessionsFromStore, mn as getChannelActivity, n as getCliSessionId, nn as normalizeGroupActivation, nt as getPluginToolMeta, o as resolveSendPolicy, on as buildHistoryContextFromEntries, or as stopDiagnosticHeartbeat, p as listAgentsForGateway, pr as lookupContextTokens, qn as isTtsProviderConfigured, qt as registerSkillsChangeListener, r as setCliSessionId, rr as setCommandLaneConcurrency, rt as loadOpenClawPlugins, s as clearSessionQueues, sn as resolveHeartbeatVisibility, sr as isDiagnosticsEnabled, tn as createReplyPrefixOptions, tr as textToSpeech, u as waitForEmbeddedPiRunEnd, un as onHeartbeatEvent, v as resolveSessionModelRef, vn as createReplyDispatcher, vr as enqueueSystemEvent, vt as handleReset, w as stripEnvelopeFromMessages, wn as clearAgentRunContext, wr as DEFAULT_INPUT_FILE_MIMES, x as readSessionMessages, xn as stopSubagentsForRequester, xr as loadModelCatalog, y as archiveFileOnDisk, yn as formatZonedTimestamp, yr as isSystemEventContextChanged, z as isGatewaySigusr1RestartExternallyAllowed, zn as clearInternalHooks, zt as approveNodePairing } from "./reply-B8pOiUNN.js";
+import { g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-scjhy7N2.js";
+import { _ as parseAgentSessionKey, c as normalizeAgentId, g as isSubagentSessionKey, i as buildAgentMainSessionKey, l as normalizeMainKey, p as toAgentRequestSessionKey, t as DEFAULT_ACCOUNT_ID, u as resolveAgentIdFromSessionKey } from "./session-key-Dm2EOhrH.js";
+import { B as getLogger, C as getActivePluginRegistry, I as colorize, L as isRich, M as setVerbose, R as theme, V as getResolvedLoggerSettings, a as setConsoleTimestampPrefix, c as defaultRuntime, h as DEFAULT_CHAT_CHANNEL, i as setConsoleSubsystemFilter, n as runtimeForLogger, p as CHANNEL_IDS, t as createSubsystemLogger, z as getChildLogger } from "./subsystem-CAq3uyo7.js";
+import { _ as shortenHomePath, h as resolveUserPath, s as ensureDir, t as CONFIG_DIR, x as truncateUtf16Safe } from "./utils-CKSrBNwq.js";
+import { a as logDebug, c as logWarn, n as runExec, t as runCommandWithTimeout } from "./exec-HEWTMJ7j.js";
+import { t as resolveOpenClawPackageRoot } from "./openclaw-root-Cvotktkd.js";
+import { T as resolveWorkspaceTemplateDir, _ as DEFAULT_MEMORY_FILENAME, b as DEFAULT_USER_FILENAME, c as resolveDefaultAgentId, d as DEFAULT_AGENTS_FILENAME, g as DEFAULT_MEMORY_ALT_FILENAME, h as DEFAULT_IDENTITY_FILENAME, i as resolveAgentModelFallbacksOverride, l as resolveSessionAgentId, m as DEFAULT_HEARTBEAT_FILENAME, n as resolveAgentConfig, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, v as DEFAULT_SOUL_FILENAME, w as resolveDefaultAgentWorkspaceDir, x as ensureAgentWorkspace, y as DEFAULT_TOOLS_FILENAME } from "./agent-scope-CMs5Y7l-.js";
+import { a as isCliProvider, bt as DEFAULT_PROVIDER, d as resolveConfiguredModelRef, f as resolveDefaultModelForAgent, h as resolveThinkingDefault, i as getModelRefStatus, l as resolveAllowedModelRef, p as resolveHooksGmailModel, vt as DEFAULT_CONTEXT_TOKENS, yt as DEFAULT_MODEL } from "./model-selection-DMUrNhQP.js";
+import "./github-copilot-token-pGSmVaW-.js";
+import { t as formatCliCommand } from "./command-format-ChfKqObn.js";
+import "./boolean-BgXe2hyu.js";
+import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-0_mKbEWW.js";
+import { A as resolveSubagentMaxConcurrent, T as applyLegacyMigrations, a as parseConfigJson5, c as writeConfigFile, i as loadConfig, j as VERSION, k as resolveAgentMaxConcurrent, l as validateConfigObjectWithPlugins, n as migrateLegacyConfig, o as readConfigFileSnapshot, r as createConfigIO, s as resolveConfigSnapshotHash, u as OpenClawSchema } from "./config-CAuZ-EkU.js";
+import { o as isTestDefaultMemorySlotDisabled } from "./manifest-registry-DHaa1SJb.js";
+import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-BYIWo0Cp.js";
+import { B as snapshotSessionOrigin, F as resolveAgentMainSessionKey, I as resolveExplicitAgentSessionKey, L as resolveMainSessionKey, R as resolveMainSessionKeyFromConfig, S as mergeDeliveryContext, at as normalizeToolName, b as deliveryContextFromSession, d as loadSessionStore, g as updateSessionStore, nt as collectExplicitAllowlist, ot as resolveToolProfilePolicy, rt as expandPolicyWithPluginGroups, st as stripPluginOnlyAllowlist, tt as buildPluginToolGroups, w as normalizeSessionDeliveryFields } from "./sandbox-CV8VwPij.js";
+import "./image-Ca_PtqY7.js";
+import "./pi-model-discovery-CV2V1HHz.js";
+import { T as formatErrorMessage, d as inspectPortUsage, l as ensurePortAvailable, p as formatPortDiagnostics } from "./chrome-BNSd7Bie.js";
+import { d as hasBinary, i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-D5JDj3TR.js";
+import { c as saveMediaBuffer, l as detectMime } from "./routes-DchZU3EK.js";
+import "./server-context-vChIAqjH.js";
+import { t as rawDataToString } from "./ws-CEcdsnN9.js";
+import { f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, h as GATEWAY_CLIENT_NAMES, i as isGatewayMessageChannel, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient, t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-Bpfe5l5f.js";
+import "./logging-BWRYHvLp.js";
+import "./accounts-BgZmhIm6.js";
+import { n as resolveSessionFilePath, o as resolveStorePath, r as resolveSessionTranscriptPath } from "./paths-Bb0nwPeu.js";
+import "./redact-DJCFY628.js";
+import "./tool-display-BxZG0o1b.js";
+import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-C3bnXkg5.js";
+import { i as getMachineDisplayName, t as createBrowserRouteDispatcher } from "./dispatcher-6oI-H42S.js";
+import "./manager-LpytrxUw.js";
+import "./sqlite-BKl1HJFe.js";
+import "./channel-summary-DUiKDBLv.js";
+import { $ as validatePollParams, A as validateDevicePairListParams, At as deriveDeviceIdFromPublicKey, B as validateLogsTailParams, C as validateCronListParams, Ct as PROTOCOL_VERSION, D as validateCronStatusParams, Dt as parseSessionLabel, E as validateCronRunsParams, F as validateExecApprovalResolveParams, G as validateNodeInvokeResultParams, H as validateNodeDescribeParams, I as validateExecApprovalsGetParams, J as validateNodePairListParams, K as validateNodeListParams, L as validateExecApprovalsNodeGetParams, M as validateDeviceTokenRevokeParams, Mt as normalizeDevicePublicKeyBase64Url, N as validateDeviceTokenRotateParams, Nt as verifyDeviceSignature, O as validateCronUpdateParams, Ot as buildDeviceAuthPayload, P as validateExecApprovalRequestParams, Q as validateNodeRenameParams, R as validateExecApprovalsNodeSetParams, S as validateCronAddParams, St as validateWizardStatusParams, T as validateCronRunParams, Tt as errorShape, U as validateNodeEventParams, V as validateModelsListParams, W as validateNodeInvokeParams, X as validateNodePairRequestParams, Y as validateNodePairRejectParams, Z as validateNodePairVerifyParams, _ as validateConfigGetParams, _t as validateWebLoginStartParams, a as validateAgentWaitParams, at as validateSessionsPatchParams, b as validateConfigSetParams, bt as validateWizardNextParams, c as validateAgentsFilesSetParams, ct as validateSessionsResolveParams, d as validateChannelsStatusParams, dt as validateSkillsInstallParams, et as validateRequestFrame, f as validateChatAbortParams, ft as validateSkillsStatusParams, g as validateConfigApplyParams, gt as validateWakeParams, h as validateChatSendParams, ht as validateUpdateRunParams, i as validateAgentParams, it as validateSessionsListParams, j as validateDevicePairRejectParams, k as validateDevicePairApproveParams, l as validateAgentsListParams, lt as validateSessionsUsageParams, m as validateChatInjectParams, mt as validateTalkModeParams, n as formatValidationErrors, nt as validateSessionsCompactParams, o as validateAgentsFilesGetParams, ot as validateSessionsPreviewParams, p as validateChatHistoryParams, pt as validateSkillsUpdateParams, q as validateNodePairApproveParams, r as validateAgentIdentityParams, rt as validateSessionsDeleteParams, s as validateAgentsFilesListParams, st as validateSessionsResetParams, tt as validateSendParams, u as validateChannelsLogoutParams, ut as validateSkillsBinsParams, v as validateConfigPatchParams, vt as validateWebLoginWaitParams, w as validateCronRemoveParams, wt as ErrorCodes, x as validateConnectParams, xt as validateWizardStartParams, y as validateConfigSchemaParams, yt as validateWizardCancelParams, z as validateExecApprovalsSetParams } from "./client-BYVbRnuQ.js";
+import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-DLDGNuH2.js";
+import { n as callGateway, o as loadGatewayTlsRuntime$1 } from "./call-BTbA5OB4.js";
+import "./login-qr-BIlr0vwe.js";
+import "./pairing-store-DFq7WtOv.js";
+import { t as formatDocsLink } from "./links-B5pRdmo1.js";
+import { r as runCommandWithRuntime } from "./cli-utils-BkRQdAoC.js";
+import { n as withProgress } from "./progress-xpLtQsNY.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy, t as filterToolsByPolicy } from "./pi-tools.policy-BQ8N5y8a.js";
+import "./prompt-style-vzh0MGHs.js";
+import "./pairing-labels-CtqLxbG6.js";
+import { i as loadSessionUsageTimeSeries, l as hasNonzeroUsage, n as loadCostUsageSummary, r as loadSessionCostSummary, t as discoverAllSessions } from "./session-cost-usage-CBP4Hv9D.js";
+import { n as formatTokenCount, r as formatUsd } from "./usage-format-DvowRSs-.js";
+import { c as normalizeExecApprovals, g as saveExecApprovals, l as readExecApprovalsSnapshot, m as resolveExecApprovalsSocketPath, r as ensureExecApprovals } from "./exec-approvals-DZixgolZ.js";
+import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-CS61Road.js";
+import { t as parseAbsoluteTimeMs } from "./parse-BZz5lHzQ.js";
+import { n as resolveMessageChannelSelection } from "./channel-selection-CJWYmCLf.js";
+import { n as createOutboundSendDeps, t as createDefaultDeps } from "./deps-BG1LonF6.js";
+import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-BVGD9gSD.js";
+import { t as ensureOpenClawCliOnPath } from "./path-env-DP3DsVge.js";
+import "./daemon-runtime-DMd0mgTK.js";
+import { c as loadAgentIdentity, d as loadAgentIdentityFromWorkspace, p as forceFreePortAndWait, r as getStatusSummary, t as runOnboardingWizard } from "./onboarding-BP4-5uzE.js";
+import { t as resolveChannelDefaultAccountId } from "./helpers-BIc7L8EF.js";
+import "./logging-TXWhN8jG.js";
+import "./note-B5HnoeZX.js";
+import { t as WizardCancelledError } from "./prompts-FbZThK8w.js";
+import { i as discoverGatewayBeacons, n as installSkill } from "./onboard-skills-s8J5xbUr.js";
+import "./github-copilot-auth-C8Uf0Q03.js";
+import "./onboard-channels-DKT27PdN.js";
+import { r as buildChannelUiCatalog, t as applyPluginAutoEnable } from "./plugin-auto-enable-Ci7TBlH2.js";
+import "./archive-Dy3Ezb-5.js";
+import "./skill-scanner-BoGjHXUZ.js";
+import "./installs-BhEjOqPy.js";
+import { a as resolveControlUiRootOverrideSync, c as getHealthSnapshot, d as runHeartbeatOnce, f as setHeartbeatsEnabled, n as ensureControlUiAssetsBuilt, o as resolveControlUiRootSync, p as startHeartbeatRunner, s as formatHealthChannelLines } from "./health-format-B3eStY5r.js";
+import { S as normalizeUpdateChannel, _ as resolveNpmChannelTag, h as compareSemverStrings, m as checkUpdateStatus, t as runGatewayUpdate, y as DEFAULT_PACKAGE_CHANNEL } from "./update-runner-BDdk_K2S.js";
+import { a as resolveGatewayBindHost, n as isLoopbackHost$2, o as resolveGatewayClientIp, r as isTrustedProxyAddress, s as resolveGatewayListenHosts, t as isLoopbackAddress } from "./net-C8YRVt16.js";
+import { i as resolveGatewayAuth, n as authorizeGatewayConnect, r as isLocalDirectRequest, t as assertGatewayAuthConfigured } from "./auth-CbhB03Rz.js";
+import { i as probeGateway } from "./audit-ZY6Dk5Ec.js";
+import "./table-CLtGjVsx.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-CEvVUD3U.js";
+import "./service-BZesBIaG.js";
+import "./systemd-B-3NdMmA.js";
+import "./service-audit-C-IA4omi.js";
+import "./node-service-BAYHx0E7.js";
+import "./channels-status-issues-CrS1r5sr.js";
+import "./completion-cli-BPIeQDFy.js";
+import { a as createOutboundSendDeps$1, i as resolveAgentOutboundTarget, r as resolveAgentDeliveryPlan, t as agentCommand } from "./agent-_H-0rbHV.js";
+import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-D9Al4QRv.js";
+import { i as shouldIncludeHook, n as loadWorkspaceHookEntries, r as resolveHookConfig } from "./hooks-status-DepPyfBb.js";
+import "./tui-XH6_v0qC.js";
+import { t as buildChannelAccountSnapshot } from "./status-tCu4RWZH.js";
+import "./shared-BmtNKsPq.js";
+import { a as runDaemonStop, i as runDaemonStart, n as runDaemonStatus, o as runDaemonUninstall, r as runDaemonRestart, s as runDaemonInstall } from "./daemon-cli-B6aLZ8OE.js";
+import { a as toOptionString, i as parsePort$1, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-C8_5pNbb.js";
+import { i as setGatewayWsLogStyle, n as logWs, r as summarizeAgentEventForWsLog, t as formatForLog } from "./ws-log-B7UNLFLC.js";
+import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-QpN7TEXS.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import os from "node:os";
 import path from "node:path";
@@ -1964,7 +1968,48 @@ function createChatRunState() {
 		clear
 	};
 }
-function createAgentEventHandler({ broadcast, nodeSendToSession, agentRunSeq, chatRunState, resolveSessionKeyForRun, clearAgentRunContext }) {
+const TOOL_EVENT_RECIPIENT_TTL_MS = 600 * 1e3;
+const TOOL_EVENT_RECIPIENT_FINAL_GRACE_MS = 30 * 1e3;
+function createToolEventRecipientRegistry() {
+	const recipients = /* @__PURE__ */ new Map();
+	const prune = () => {
+		if (recipients.size === 0) return;
+		const now = Date.now();
+		for (const [runId, entry] of recipients) if (now >= (entry.finalizedAt ? entry.finalizedAt + TOOL_EVENT_RECIPIENT_FINAL_GRACE_MS : entry.updatedAt + TOOL_EVENT_RECIPIENT_TTL_MS)) recipients.delete(runId);
+	};
+	const add = (runId, connId) => {
+		if (!runId || !connId) return;
+		const now = Date.now();
+		const existing = recipients.get(runId);
+		if (existing) {
+			existing.connIds.add(connId);
+			existing.updatedAt = now;
+		} else recipients.set(runId, {
+			connIds: new Set([connId]),
+			updatedAt: now
+		});
+		prune();
+	};
+	const get = (runId) => {
+		const entry = recipients.get(runId);
+		if (!entry) return;
+		entry.updatedAt = Date.now();
+		prune();
+		return entry.connIds;
+	};
+	const markFinal = (runId) => {
+		const entry = recipients.get(runId);
+		if (!entry) return;
+		entry.finalizedAt = Date.now();
+		prune();
+	};
+	return {
+		add,
+		get,
+		markFinal
+	};
+}
+function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSession, agentRunSeq, chatRunState, resolveSessionKeyForRun, clearAgentRunContext, toolEventRecipients }) {
 	const emitChatDelta = (sessionKey, clientRunId, seq, text) => {
 		chatRunState.buffers.set(clientRunId, text);
 		const now = Date.now();
@@ -2020,17 +2065,17 @@ function createAgentEventHandler({ broadcast, nodeSendToSession, agentRunSeq, ch
 		broadcast("chat", payload);
 		nodeSendToSession(sessionKey, "chat", payload);
 	};
-	const shouldEmitToolEvents = (runId, sessionKey) => {
+	const resolveToolVerboseLevel = (runId, sessionKey) => {
 		const runVerbose = normalizeVerboseLevel(getAgentRunContext(runId)?.verboseLevel);
-		if (runVerbose) return runVerbose === "on";
-		if (!sessionKey) return false;
+		if (runVerbose) return runVerbose;
+		if (!sessionKey) return "off";
 		try {
 			const { cfg, entry } = loadSessionEntry(sessionKey);
 			const sessionVerbose = normalizeVerboseLevel(entry?.verboseLevel);
-			if (sessionVerbose) return sessionVerbose === "on";
-			return normalizeVerboseLevel(cfg.agents?.defaults?.verboseDefault) === "on";
+			if (sessionVerbose) return sessionVerbose;
+			return normalizeVerboseLevel(cfg.agents?.defaults?.verboseDefault) ?? "off";
 		} catch {
-			return false;
+			return "off";
 		}
 	};
 	return (evt) => {
@@ -2043,10 +2088,25 @@ function createAgentEventHandler({ broadcast, nodeSendToSession, agentRunSeq, ch
 			sessionKey
 		} : evt;
 		const last = agentRunSeq.get(evt.runId) ?? 0;
-		if (evt.stream === "tool" && !shouldEmitToolEvents(evt.runId, sessionKey)) {
+		const isToolEvent = evt.stream === "tool";
+		const toolVerbose = isToolEvent ? resolveToolVerboseLevel(evt.runId, sessionKey) : "off";
+		if (isToolEvent && toolVerbose === "off") {
 			agentRunSeq.set(evt.runId, evt.seq);
 			return;
 		}
+		const toolPayload = isToolEvent && toolVerbose !== "full" ? (() => {
+			const data = evt.data ? { ...evt.data } : {};
+			delete data.result;
+			delete data.partialResult;
+			return sessionKey ? {
+				...evt,
+				sessionKey,
+				data
+			} : {
+				...evt,
+				data
+			};
+		})() : agentPayload;
 		if (evt.seq !== last + 1) broadcast("agent", {
 			runId: evt.runId,
 			stream: "error",
@@ -2059,10 +2119,13 @@ function createAgentEventHandler({ broadcast, nodeSendToSession, agentRunSeq, ch
 			}
 		});
 		agentRunSeq.set(evt.runId, evt.seq);
-		broadcast("agent", agentPayload);
+		if (isToolEvent) {
+			const recipients = toolEventRecipients.get(evt.runId);
+			if (recipients && recipients.size > 0) broadcastToConnIds("agent", toolPayload, recipients);
+		} else broadcast("agent", agentPayload);
 		const lifecyclePhase = evt.stream === "lifecycle" && typeof evt.data?.phase === "string" ? evt.data.phase : null;
 		if (sessionKey) {
-			nodeSendToSession(sessionKey, "agent", agentPayload);
+			nodeSendToSession(sessionKey, "agent", isToolEvent ? toolPayload : agentPayload);
 			if (!isAborted && evt.stream === "assistant" && typeof evt.data?.text === "string") emitChatDelta(sessionKey, clientRunId, evt.seq, evt.data.text);
 			else if (!isAborted && (lifecyclePhase === "end" || lifecyclePhase === "error")) if (chatLink) {
 				const finished = chatRunState.registry.shift(evt.runId);
@@ -2080,7 +2143,10 @@ function createAgentEventHandler({ broadcast, nodeSendToSession, agentRunSeq, ch
 				if (chatLink) chatRunState.registry.remove(evt.runId, clientRunId, sessionKey);
 			}
 		}
-		if (lifecyclePhase === "end" || lifecyclePhase === "error") clearAgentRunContext(evt.runId);
+		if (lifecyclePhase === "end" || lifecyclePhase === "error") {
+			toolEventRecipients.markFinal(evt.runId);
+			clearAgentRunContext(evt.runId);
+		}
 	};
 }
 
@@ -2580,7 +2646,10 @@ async function runCronIsolatedAgentTurn(params) {
 		model,
 		catalog: await loadCatalog()
 	});
-	if (thinkLevel === "xhigh" && !supportsXHighThinking(provider, model)) throw new Error(`Thinking level "xhigh" is only supported for ${formatXHighModelHint()}.`);
+	if (thinkLevel === "xhigh" && !supportsXHighThinking(provider, model)) {
+		logWarn(`[cron:${params.job.id}] Thinking level "xhigh" is not supported for ${provider}/${model}; downgrading to "high".`);
+		thinkLevel = "high";
+	}
 	const timeoutMs = resolveAgentTimeoutMs({
 		cfg: cfgWithAgentDefaults,
 		overrideSeconds: params.job.payload.kind === "agentTurn" ? params.job.payload.timeoutSeconds : void 0
@@ -2857,7 +2926,8 @@ async function readCronRunLogEntries(filePath, opts) {
 //#region src/cron/schedule.ts
 function computeNextRunAtMs(schedule, nowMs) {
 	if (schedule.kind === "at") {
-		const atMs = parseAbsoluteTimeMs(schedule.at);
+		const sched = schedule;
+		const atMs = typeof sched.atMs === "number" && Number.isFinite(sched.atMs) && sched.atMs > 0 ? sched.atMs : typeof sched.atMs === "string" ? parseAbsoluteTimeMs(sched.atMs) : typeof sched.at === "string" ? parseAbsoluteTimeMs(sched.at) : null;
 		if (atMs === null) return;
 		return atMs > nowMs ? atMs : void 0;
 	}
@@ -2933,7 +3003,8 @@ function computeJobNextRunAtMs(job, nowMs) {
 	if (!job.enabled) return;
 	if (job.schedule.kind === "at") {
 		if (job.state.lastStatus === "ok" && job.state.lastRunAtMs) return;
-		const atMs = parseAbsoluteTimeMs(job.schedule.at);
+		const schedule = job.schedule;
+		const atMs = typeof schedule.atMs === "number" && Number.isFinite(schedule.atMs) && schedule.atMs > 0 ? schedule.atMs : typeof schedule.atMs === "string" ? parseAbsoluteTimeMs(schedule.atMs) : typeof schedule.at === "string" ? parseAbsoluteTimeMs(schedule.at) : null;
 		return atMs !== null ? atMs : void 0;
 	}
 	return computeNextRunAtMs(job.schedule, nowMs);
@@ -3253,10 +3324,6 @@ async function getFileMtimeMs(path) {
 }
 async function ensureLoaded(state, opts) {
 	if (state.store && !opts?.forceReload) return;
-	if (opts?.forceReload && state.store) {
-		const mtime = await getFileMtimeMs(state.deps.storePath);
-		if (mtime !== null && state.storeFileMtimeMs !== null && mtime === state.storeFileMtimeMs) return;
-	}
 	const fileMtimeMs = await getFileMtimeMs(state.deps.storePath);
 	const jobs = (await loadCronStore(state.deps.storePath)).jobs ?? [];
 	let mutated = false;
@@ -3343,7 +3410,7 @@ async function ensureLoaded(state, opts) {
 	};
 	state.storeLoadedAtMs = state.deps.nowMs();
 	state.storeFileMtimeMs = fileMtimeMs;
-	recomputeNextRuns(state);
+	if (!opts?.skipRecompute) recomputeNextRuns(state);
 	if (mutated) await persist(state);
 }
 function warnIfDisabled(state, action) {
@@ -3378,20 +3445,23 @@ function armTimer(state) {
 			state.deps.log.error({ err: String(err) }, "cron: timer tick failed");
 		});
 	}, clampedDelay);
-	state.timer.unref?.();
 }
 async function onTimer(state) {
 	if (state.running) return;
 	state.running = true;
 	try {
 		await locked(state, async () => {
-			await ensureLoaded(state, { forceReload: true });
+			await ensureLoaded(state, {
+				forceReload: true,
+				skipRecompute: true
+			});
 			await runDueJobs(state);
+			recomputeNextRuns(state);
 			await persist(state);
-			armTimer(state);
 		});
 	} finally {
 		state.running = false;
+		armTimer(state);
 	}
 }
 async function runDueJobs(state) {
@@ -4934,7 +5004,7 @@ function timestampOptsFromConfig(cfg) {
 //#endregion
 //#region src/gateway/server-methods/agent.ts
 const agentHandlers = {
-	agent: async ({ params, respond, context }) => {
+	agent: async ({ params, respond, context, client }) => {
 		const p = params;
 		if (!validateAgentParams(p)) {
 			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, `invalid agent params: ${formatValidationErrors(validateAgentParams.errors)}`));
@@ -5084,6 +5154,9 @@ const agentHandlers = {
 			registerAgentRunContext(idem, { sessionKey: requestedSessionKey });
 		}
 		const runId = idem;
+		const connId = typeof client?.connId === "string" ? client.connId : void 0;
+		const wantsToolEvents = hasGatewayClientCap(client?.connect?.caps, GATEWAY_CLIENT_CAPS.TOOL_EVENTS);
+		if (connId && wantsToolEvents) context.registerToolEventRecipient(runId, connId);
 		const wantsDelivery = request.deliver === true;
 		const explicitTo = typeof request.replyTo === "string" && request.replyTo.trim() ? request.replyTo.trim() : typeof request.to === "string" && request.to.trim() ? request.to.trim() : void 0;
 		const explicitThreadId = typeof request.threadId === "string" && request.threadId.trim() ? request.threadId.trim() : void 0;
@@ -6038,7 +6111,10 @@ const chatHandlers = {
 			const configured = cfg.agents?.defaults?.thinkingDefault;
 			if (configured) thinkingLevel = configured;
 			else {
-				const { provider, model } = resolveSessionModelRef(cfg, entry);
+				const { provider, model } = resolveSessionModelRef(cfg, entry, resolveSessionAgentId({
+					sessionKey,
+					config: cfg
+				}));
 				thinkingLevel = resolveThinkingDefault({
 					cfg,
 					provider,
@@ -6047,11 +6123,13 @@ const chatHandlers = {
 				});
 			}
 		}
+		const verboseLevel = entry?.verboseLevel ?? cfg.agents?.defaults?.verboseDefault;
 		respond(true, {
 			sessionKey,
 			sessionId,
 			messages: capped,
-			thinkingLevel
+			thinkingLevel,
+			verboseLevel
 		});
 	},
 	"chat.abort": ({ params, respond, context }) => {
@@ -6227,15 +6305,17 @@ const chatHandlers = {
 				SenderUsername: clientInfo?.displayName,
 				GatewayClientScopes: client?.connect?.scopes
 			};
-			const agentId = resolveSessionAgentId({
-				sessionKey: p.sessionKey,
-				config: cfg
+			const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
+				cfg,
+				agentId: resolveSessionAgentId({
+					sessionKey: p.sessionKey,
+					config: cfg
+				}),
+				channel: INTERNAL_MESSAGE_CHANNEL
 			});
-			let prefixContext = { identityName: resolveIdentityName(cfg, agentId) };
 			const finalReplyParts = [];
 			const dispatcher = createReplyDispatcher({
-				responsePrefix: resolveEffectiveMessagesConfig(cfg, agentId).responsePrefix,
-				responsePrefixContextProvider: () => prefixContext,
+				...prefixOptions,
 				onError: (err) => {
 					context.logGateway.warn(`webchat dispatch failed: ${formatForLog(err)}`);
 				},
@@ -6256,15 +6336,13 @@ const chatHandlers = {
 					abortSignal: abortController.signal,
 					images: parsedImages.length > 0 ? parsedImages : void 0,
 					disableBlockStreaming: true,
-					onAgentRunStart: () => {
+					onAgentRunStart: (runId) => {
 						agentRunStarted = true;
+						const connId = typeof client?.connId === "string" ? client.connId : void 0;
+						const wantsToolEvents = hasGatewayClientCap(client?.connect?.caps, GATEWAY_CLIENT_CAPS.TOOL_EVENTS);
+						if (connId && wantsToolEvents) context.registerToolEventRecipient(runId, connId);
 					},
-					onModelSelected: (ctx) => {
-						prefixContext.provider = ctx.provider;
-						prefixContext.model = extractShortModelName(ctx.model);
-						prefixContext.modelFull = `${ctx.provider}/${ctx.model}`;
-						prefixContext.thinkingLevel = ctx.thinkLevel ?? "off";
-					}
+					onModelSelected
 				}
 			}).then(() => {
 				if (!agentRunStarted) {
@@ -6438,6 +6516,123 @@ function applyMergePatch(base, patch) {
 	return result;
 }
 
+//#endregion
+//#region src/config/redact-snapshot.ts
+/**
+* Sentinel value used to replace sensitive config fields in gateway responses.
+* Write-side handlers (config.set, config.apply, config.patch) detect this
+* sentinel and restore the original value from the on-disk config, so a
+* round-trip through the Web UI does not corrupt credentials.
+*/
+const REDACTED_SENTINEL = "__OPENCLAW_REDACTED__";
+/**
+* Patterns that identify sensitive config field names.
+* Aligned with the UI-hint logic in schema.ts.
+*/
+const SENSITIVE_KEY_PATTERNS = [
+	/token/i,
+	/password/i,
+	/secret/i,
+	/api.?key/i
+];
+function isSensitiveKey(key) {
+	return SENSITIVE_KEY_PATTERNS.some((pattern) => pattern.test(key));
+}
+/**
+* Deep-walk an object and replace values whose key matches a sensitive pattern
+* with the redaction sentinel.
+*/
+function redactObject(obj) {
+	if (obj === null || obj === void 0) return obj;
+	if (typeof obj !== "object") return obj;
+	if (Array.isArray(obj)) return obj.map(redactObject);
+	const result = {};
+	for (const [key, value] of Object.entries(obj)) if (isSensitiveKey(key) && value !== null && value !== void 0) result[key] = REDACTED_SENTINEL;
+	else if (typeof value === "object" && value !== null) result[key] = redactObject(value);
+	else result[key] = value;
+	return result;
+}
+function redactConfigObject(value) {
+	return redactObject(value);
+}
+/**
+* Collect all sensitive string values from a config object.
+* Used for text-based redaction of the raw JSON5 source.
+*/
+function collectSensitiveValues(obj) {
+	const values = [];
+	if (obj === null || obj === void 0 || typeof obj !== "object") return values;
+	if (Array.isArray(obj)) {
+		for (const item of obj) values.push(...collectSensitiveValues(item));
+		return values;
+	}
+	for (const [key, value] of Object.entries(obj)) if (isSensitiveKey(key) && typeof value === "string" && value.length > 0) values.push(value);
+	else if (typeof value === "object" && value !== null) values.push(...collectSensitiveValues(value));
+	return values;
+}
+/**
+* Replace known sensitive values in a raw JSON5 string with the sentinel.
+* Values are replaced longest-first to avoid partial matches.
+*/
+function redactRawText(raw, config) {
+	const sensitiveValues = collectSensitiveValues(config);
+	sensitiveValues.sort((a, b) => b.length - a.length);
+	let result = raw;
+	for (const value of sensitiveValues) {
+		const escaped = value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+		result = result.replace(new RegExp(escaped, "g"), REDACTED_SENTINEL);
+	}
+	result = result.replace(/(^|[{\s,])((["'])([^"']+)\3|([A-Za-z0-9_$.-]+))(\s*:\s*)(["'])([^"']*)\7/g, (match, prefix, keyExpr, _keyQuote, keyQuoted, keyBare, sep, valQuote, val) => {
+		const key = keyQuoted ?? keyBare;
+		if (!key || !isSensitiveKey(key)) return match;
+		if (val === REDACTED_SENTINEL) return match;
+		return `${prefix}${keyExpr}${sep}${valQuote}${REDACTED_SENTINEL}${valQuote}`;
+	});
+	return result;
+}
+/**
+* Returns a copy of the config snapshot with all sensitive fields
+* replaced by {@link REDACTED_SENTINEL}. The `hash` is preserved
+* (it tracks config identity, not content).
+*
+* Both `config` (the parsed object) and `raw` (the JSON5 source) are scrubbed
+* so no credential can leak through either path.
+*/
+function redactConfigSnapshot(snapshot) {
+	const redactedConfig = redactConfigObject(snapshot.config);
+	const redactedRaw = snapshot.raw ? redactRawText(snapshot.raw, snapshot.config) : null;
+	const redactedParsed = snapshot.parsed ? redactConfigObject(snapshot.parsed) : snapshot.parsed;
+	return {
+		...snapshot,
+		config: redactedConfig,
+		raw: redactedRaw,
+		parsed: redactedParsed
+	};
+}
+/**
+* Deep-walk `incoming` and replace any {@link REDACTED_SENTINEL} values
+* (on sensitive keys) with the corresponding value from `original`.
+*
+* This is called by config.set / config.apply / config.patch before writing,
+* so that credentials survive a Web UI round-trip unmodified.
+*/
+function restoreRedactedValues(incoming, original) {
+	if (incoming === null || incoming === void 0) return incoming;
+	if (typeof incoming !== "object") return incoming;
+	if (Array.isArray(incoming)) {
+		const origArr = Array.isArray(original) ? original : [];
+		return incoming.map((item, i) => restoreRedactedValues(item, origArr[i]));
+	}
+	const orig = original && typeof original === "object" && !Array.isArray(original) ? original : {};
+	const result = {};
+	for (const [key, value] of Object.entries(incoming)) if (isSensitiveKey(key) && value === REDACTED_SENTINEL) {
+		if (!(key in orig)) throw new Error(`config write rejected: "${key}" is redacted; set an explicit value instead of ${REDACTED_SENTINEL}`);
+		result[key] = orig[key];
+	} else if (typeof value === "object" && value !== null) result[key] = restoreRedactedValues(value, orig[key]);
+	else result[key] = value;
+	return result;
+}
+
 //#endregion
 //#region src/config/schema.ts
 const GROUP_LABELS = {
@@ -6692,6 +6887,7 @@ const FIELD_LABELS = {
 	"commands.debug": "Allow /debug",
 	"commands.restart": "Allow Restart",
 	"commands.useAccessGroups": "Use Access Groups",
+	"commands.ownerAllowFrom": "Command Owners",
 	"ui.seamColor": "Accent Color",
 	"ui.assistant.name": "Assistant Name",
 	"ui.assistant.avatar": "Assistant Avatar",
@@ -6954,6 +7150,7 @@ const FIELD_HELP = {
 	"commands.debug": "Allow /debug chat command for runtime-only overrides (default: false).",
 	"commands.restart": "Allow /restart and gateway restart tool actions (default: false).",
 	"commands.useAccessGroups": "Enforce access-group allowlists/policies for commands.",
+	"commands.ownerAllowFrom": "Explicit owner allowlist for owner-only tools/commands. Use channel-native IDs (optionally prefixed like \"whatsapp:+15551234567\"). '*' is ignored.",
 	"session.dmScope": "DM session scoping: \"main\" keeps continuity; \"per-peer\", \"per-channel-peer\", or \"per-account-channel-peer\" isolates DM history (recommended for shared inboxes/multi-account).",
 	"session.identityLinks": "Map canonical identities to provider-prefixed peer IDs for DM session linking (example: telegram:123456).",
 	"channels.telegram.configWrites": "Allow Telegram to write config in response to channel events/commands (default: true).",
@@ -7294,7 +7491,7 @@ const configHandlers = {
 			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, `invalid config.get params: ${formatValidationErrors(validateConfigGetParams.errors)}`));
 			return;
 		}
-		respond(true, await readConfigFileSnapshot(), void 0);
+		respond(true, redactConfigSnapshot(await readConfigFileSnapshot()), void 0);
 	},
 	"config.schema": ({ params, respond }) => {
 		if (!validateConfigSchemaParams(params)) {
@@ -7333,7 +7530,8 @@ const configHandlers = {
 			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, `invalid config.set params: ${formatValidationErrors(validateConfigSetParams.errors)}`));
 			return;
 		}
-		if (!requireConfigBaseHash(params, await readConfigFileSnapshot(), respond)) return;
+		const snapshot = await readConfigFileSnapshot();
+		if (!requireConfigBaseHash(params, snapshot, respond)) return;
 		const rawValue = params.raw;
 		if (typeof rawValue !== "string") {
 			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, "invalid config.set params: raw (string) required"));
@@ -7349,11 +7547,18 @@ const configHandlers = {
 			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, "invalid config", { details: { issues: validated.issues } }));
 			return;
 		}
-		await writeConfigFile(validated.config);
+		let restored;
+		try {
+			restored = restoreRedactedValues(validated.config, snapshot.config);
+		} catch (err) {
+			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, String(err instanceof Error ? err.message : err)));
+			return;
+		}
+		await writeConfigFile(restored);
 		respond(true, {
 			ok: true,
 			path: CONFIG_PATH,
-			config: validated.config
+			config: redactConfigObject(restored)
 		}, void 0);
 	},
 	"config.patch": async ({ params, respond }) => {
@@ -7382,7 +7587,14 @@ const configHandlers = {
 			return;
 		}
 		const merged = applyMergePatch(snapshot.config, parsedRes.parsed);
-		const validated = validateConfigObjectWithPlugins(applyLegacyMigrations(merged).next ?? merged);
+		let restoredMerge;
+		try {
+			restoredMerge = restoreRedactedValues(merged, snapshot.config);
+		} catch (err) {
+			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, String(err instanceof Error ? err.message : err)));
+			return;
+		}
+		const validated = validateConfigObjectWithPlugins(applyLegacyMigrations(restoredMerge).next ?? restoredMerge);
 		if (!validated.ok) {
 			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, "invalid config", { details: { issues: validated.issues } }));
 			return;
@@ -7417,7 +7629,7 @@ const configHandlers = {
 		respond(true, {
 			ok: true,
 			path: CONFIG_PATH,
-			config: validated.config,
+			config: redactConfigObject(validated.config),
 			restart,
 			sentinel: {
 				path: sentinelPath,
@@ -7430,7 +7642,8 @@ const configHandlers = {
 			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, `invalid config.apply params: ${formatValidationErrors(validateConfigApplyParams.errors)}`));
 			return;
 		}
-		if (!requireConfigBaseHash(params, await readConfigFileSnapshot(), respond)) return;
+		const snapshot = await readConfigFileSnapshot();
+		if (!requireConfigBaseHash(params, snapshot, respond)) return;
 		const rawValue = params.raw;
 		if (typeof rawValue !== "string") {
 			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, "invalid config.apply params: raw (string) required"));
@@ -7446,7 +7659,14 @@ const configHandlers = {
 			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, "invalid config", { details: { issues: validated.issues } }));
 			return;
 		}
-		await writeConfigFile(validated.config);
+		let restoredApply;
+		try {
+			restoredApply = restoreRedactedValues(validated.config, snapshot.config);
+		} catch (err) {
+			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, String(err instanceof Error ? err.message : err)));
+			return;
+		}
+		await writeConfigFile(restoredApply);
 		const sessionKey = typeof params.sessionKey === "string" ? params.sessionKey?.trim() || void 0 : void 0;
 		const note = typeof params.note === "string" ? params.note?.trim() || void 0 : void 0;
 		const restartDelayMsRaw = params.restartDelayMs;
@@ -7476,7 +7696,7 @@ const configHandlers = {
 		respond(true, {
 			ok: true,
 			path: CONFIG_PATH,
-			config: validated.config,
+			config: redactConfigObject(restoredApply),
 			restart,
 			sentinel: {
 				path: sentinelPath,
@@ -8776,7 +8996,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-C5EqDe_U.js");
+			const { handleNodeEvent } = await import("./server-node-events-D39FA0NG.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -9076,6 +9296,10 @@ function normalizeExecAsk(raw) {
 async function applySessionsPatchToStore(params) {
 	const { cfg, store, storeKey, patch } = params;
 	const now = Date.now();
+	const resolvedDefault = resolveDefaultModelForAgent({
+		cfg,
+		agentId: normalizeAgentId(parseAgentSessionKey(storeKey)?.agentId ?? resolveDefaultAgentId(cfg))
+	});
 	const existing = store[storeKey];
 	const next = existing ? {
 		...existing,
@@ -9114,14 +9338,7 @@ async function applySessionsPatchToStore(params) {
 		if (raw === null) delete next.thinkingLevel;
 		else if (raw !== void 0) {
 			const normalized = normalizeThinkLevel(String(raw));
-			if (!normalized) {
-				const resolvedDefault = resolveConfiguredModelRef({
-					cfg,
-					defaultProvider: DEFAULT_PROVIDER,
-					defaultModel: DEFAULT_MODEL
-				});
-				return invalid(`invalid thinkingLevel (use ${formatThinkingLevels(existing?.providerOverride?.trim() || resolvedDefault.provider, existing?.modelOverride?.trim() || resolvedDefault.model, "|")})`);
-			}
+			if (!normalized) return invalid(`invalid thinkingLevel (use ${formatThinkingLevels(existing?.providerOverride?.trim() || resolvedDefault.provider, existing?.modelOverride?.trim() || resolvedDefault.model, "|")})`);
 			if (normalized === "off") delete next.thinkingLevel;
 			else next.thinkingLevel = normalized;
 		}
@@ -9199,11 +9416,6 @@ async function applySessionsPatchToStore(params) {
 	}
 	if ("model" in patch) {
 		const raw = patch.model;
-		const resolvedDefault = resolveConfiguredModelRef({
-			cfg,
-			defaultProvider: DEFAULT_PROVIDER,
-			defaultModel: DEFAULT_MODEL
-		});
 		if (raw === null) applyModelOverrideToSessionEntry({
 			entry: next,
 			selection: {
@@ -9239,11 +9451,6 @@ async function applySessionsPatchToStore(params) {
 		}
 	}
 	if (next.thinkingLevel === "xhigh") {
-		const resolvedDefault = resolveConfiguredModelRef({
-			cfg,
-			defaultProvider: DEFAULT_PROVIDER,
-			defaultModel: DEFAULT_MODEL
-		});
 		if (!supportsXHighThinking(next.providerOverride ?? resolvedDefault.provider, next.modelOverride ?? resolvedDefault.model)) {
 			if ("thinkingLevel" in patch) return invalid(`thinkingLevel "xhigh" is only supported for ${formatXHighModelHint()}`);
 			next.thinkingLevel = "high";
@@ -9503,11 +9710,17 @@ const sessionsHandlers = {
 			respond(false, void 0, applied.error);
 			return;
 		}
+		const agentId = normalizeAgentId(parseAgentSessionKey(target.canonicalKey ?? key)?.agentId ?? resolveDefaultAgentId(cfg));
+		const resolved = resolveSessionModelRef(cfg, applied.entry, agentId);
 		respond(true, {
 			ok: true,
 			path: storePath,
 			key: target.canonicalKey,
-			entry: applied.entry
+			entry: applied.entry,
+			resolved: {
+				modelProvider: resolved.provider,
+				model: resolved.model
+			}
 		}, void 0);
 	},
 	"sessions.reset": async ({ params, respond }) => {
@@ -10161,18 +10374,54 @@ const updateHandlers = { "update.run": async ({ params, respond }) => {
 //#region src/gateway/server-methods/usage.ts
 const COST_USAGE_CACHE_TTL_MS = 3e4;
 const costUsageCache = /* @__PURE__ */ new Map();
+/**
+* Parse a date string (YYYY-MM-DD) to start of day timestamp in UTC.
+* Returns undefined if invalid.
+*/
+const parseDateToMs = (raw) => {
+	if (typeof raw !== "string" || !raw.trim()) return;
+	const match = /^(\d{4})-(\d{2})-(\d{2})$/.exec(raw.trim());
+	if (!match) return;
+	const [, year, month, day] = match;
+	const ms = Date.UTC(parseInt(year), parseInt(month) - 1, parseInt(day));
+	if (Number.isNaN(ms)) return;
+	return ms;
+};
 const parseDays = (raw) => {
 	if (typeof raw === "number" && Number.isFinite(raw)) return Math.floor(raw);
 	if (typeof raw === "string" && raw.trim() !== "") {
 		const parsed = Number(raw);
 		if (Number.isFinite(parsed)) return Math.floor(parsed);
 	}
-	return 30;
+};
+/**
+* Get date range from params (startDate/endDate or days).
+* Falls back to last 30 days if not provided.
+*/
+const parseDateRange = (params) => {
+	const now = /* @__PURE__ */ new Date();
+	const todayStartMs = Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate());
+	const todayEndMs = todayStartMs + 1440 * 60 * 1e3 - 1;
+	const startMs = parseDateToMs(params.startDate);
+	const endMs = parseDateToMs(params.endDate);
+	if (startMs !== void 0 && endMs !== void 0) return {
+		startMs,
+		endMs: endMs + 1440 * 60 * 1e3 - 1
+	};
+	const days = parseDays(params.days);
+	if (days !== void 0) return {
+		startMs: todayStartMs - (Math.max(1, days) - 1) * 24 * 60 * 60 * 1e3,
+		endMs: todayEndMs
+	};
+	return {
+		startMs: todayStartMs - 696 * 60 * 60 * 1e3,
+		endMs: todayEndMs
+	};
 };
 async function loadCostUsageSummaryCached(params) {
-	const days = Math.max(1, params.days);
+	const cacheKey = `${params.startMs}-${params.endMs}`;
 	const now = Date.now();
-	const cached = costUsageCache.get(days);
+	const cached = costUsageCache.get(cacheKey);
 	if (cached?.summary && cached.updatedAt && now - cached.updatedAt < COST_USAGE_CACHE_TTL_MS) return cached.summary;
 	if (cached?.inFlight) {
 		if (cached.summary) return cached.summary;
@@ -10180,10 +10429,11 @@ async function loadCostUsageSummaryCached(params) {
 	}
 	const entry = cached ?? {};
 	const inFlight = loadCostUsageSummary({
-		days,
+		startMs: params.startMs,
+		endMs: params.endMs,
 		config: params.config
 	}).then((summary) => {
-		costUsageCache.set(days, {
+		costUsageCache.set(cacheKey, {
 			summary,
 			updatedAt: Date.now()
 		});
@@ -10192,14 +10442,14 @@ async function loadCostUsageSummaryCached(params) {
 		if (entry.summary) return entry.summary;
 		throw err;
 	}).finally(() => {
-		const current = costUsageCache.get(days);
+		const current = costUsageCache.get(cacheKey);
 		if (current?.inFlight === inFlight) {
 			current.inFlight = void 0;
-			costUsageCache.set(days, current);
+			costUsageCache.set(cacheKey, current);
 		}
 	});
 	entry.inFlight = inFlight;
-	costUsageCache.set(days, entry);
+	costUsageCache.set(cacheKey, entry);
 	if (entry.summary) return entry.summary;
 	return await inFlight;
 }
@@ -10209,10 +10459,395 @@ const usageHandlers = {
 	},
 	"usage.cost": async ({ respond, params }) => {
 		const config = loadConfig();
+		const { startMs, endMs } = parseDateRange({
+			startDate: params?.startDate,
+			endDate: params?.endDate,
+			days: params?.days
+		});
 		respond(true, await loadCostUsageSummaryCached({
-			days: parseDays(params?.days),
+			startMs,
+			endMs,
 			config
 		}), void 0);
+	},
+	"sessions.usage": async ({ respond, params }) => {
+		if (!validateSessionsUsageParams(params)) {
+			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, `invalid sessions.usage params: ${formatValidationErrors(validateSessionsUsageParams.errors)}`));
+			return;
+		}
+		const p = params;
+		const config = loadConfig();
+		const { startMs, endMs } = parseDateRange({
+			startDate: p.startDate,
+			endDate: p.endDate
+		});
+		const limit = typeof p.limit === "number" && Number.isFinite(p.limit) ? p.limit : 50;
+		const includeContextWeight = p.includeContextWeight ?? false;
+		const specificKey = typeof p.key === "string" ? p.key.trim() : null;
+		const { store } = loadCombinedSessionStoreForGateway(config);
+		const now = Date.now();
+		const mergedEntries = [];
+		if (specificKey) {
+			const storeEntry = store[specificKey];
+			let sessionId = storeEntry?.sessionId ?? specificKey;
+			const sessionFile = resolveSessionFilePath(sessionId, storeEntry);
+			try {
+				const stats = fs.statSync(sessionFile);
+				if (stats.isFile()) mergedEntries.push({
+					key: specificKey,
+					sessionId,
+					sessionFile,
+					label: storeEntry?.label,
+					updatedAt: storeEntry?.updatedAt ?? stats.mtimeMs,
+					storeEntry
+				});
+			} catch {}
+		} else {
+			const discoveredSessions = await discoverAllSessions({
+				startMs,
+				endMs
+			});
+			const storeBySessionId = /* @__PURE__ */ new Map();
+			for (const [key, entry] of Object.entries(store)) if (entry?.sessionId) storeBySessionId.set(entry.sessionId, {
+				key,
+				entry
+			});
+			for (const discovered of discoveredSessions) {
+				const storeMatch = storeBySessionId.get(discovered.sessionId);
+				if (storeMatch) mergedEntries.push({
+					key: storeMatch.key,
+					sessionId: discovered.sessionId,
+					sessionFile: discovered.sessionFile,
+					label: storeMatch.entry.label,
+					updatedAt: storeMatch.entry.updatedAt ?? discovered.mtime,
+					storeEntry: storeMatch.entry
+				});
+				else mergedEntries.push({
+					key: discovered.sessionId,
+					sessionId: discovered.sessionId,
+					sessionFile: discovered.sessionFile,
+					label: void 0,
+					updatedAt: discovered.mtime
+				});
+			}
+		}
+		mergedEntries.sort((a, b) => b.updatedAt - a.updatedAt);
+		const limitedEntries = mergedEntries.slice(0, limit);
+		const sessions = [];
+		const aggregateTotals = {
+			input: 0,
+			output: 0,
+			cacheRead: 0,
+			cacheWrite: 0,
+			totalTokens: 0,
+			totalCost: 0,
+			inputCost: 0,
+			outputCost: 0,
+			cacheReadCost: 0,
+			cacheWriteCost: 0,
+			missingCostEntries: 0
+		};
+		const aggregateMessages = {
+			total: 0,
+			user: 0,
+			assistant: 0,
+			toolCalls: 0,
+			toolResults: 0,
+			errors: 0
+		};
+		const toolAggregateMap = /* @__PURE__ */ new Map();
+		const byModelMap = /* @__PURE__ */ new Map();
+		const byProviderMap = /* @__PURE__ */ new Map();
+		const byAgentMap = /* @__PURE__ */ new Map();
+		const byChannelMap = /* @__PURE__ */ new Map();
+		const dailyAggregateMap = /* @__PURE__ */ new Map();
+		const latencyTotals = {
+			count: 0,
+			sum: 0,
+			min: Number.POSITIVE_INFINITY,
+			max: 0,
+			p95Max: 0
+		};
+		const dailyLatencyMap = /* @__PURE__ */ new Map();
+		const modelDailyMap = /* @__PURE__ */ new Map();
+		const emptyTotals = () => ({
+			input: 0,
+			output: 0,
+			cacheRead: 0,
+			cacheWrite: 0,
+			totalTokens: 0,
+			totalCost: 0,
+			inputCost: 0,
+			outputCost: 0,
+			cacheReadCost: 0,
+			cacheWriteCost: 0,
+			missingCostEntries: 0
+		});
+		const mergeTotals = (target, source) => {
+			target.input += source.input;
+			target.output += source.output;
+			target.cacheRead += source.cacheRead;
+			target.cacheWrite += source.cacheWrite;
+			target.totalTokens += source.totalTokens;
+			target.totalCost += source.totalCost;
+			target.inputCost += source.inputCost;
+			target.outputCost += source.outputCost;
+			target.cacheReadCost += source.cacheReadCost;
+			target.cacheWriteCost += source.cacheWriteCost;
+			target.missingCostEntries += source.missingCostEntries;
+		};
+		for (const merged of limitedEntries) {
+			const usage = await loadSessionCostSummary({
+				sessionId: merged.sessionId,
+				sessionEntry: merged.storeEntry,
+				sessionFile: merged.sessionFile,
+				config,
+				startMs,
+				endMs
+			});
+			if (usage) {
+				aggregateTotals.input += usage.input;
+				aggregateTotals.output += usage.output;
+				aggregateTotals.cacheRead += usage.cacheRead;
+				aggregateTotals.cacheWrite += usage.cacheWrite;
+				aggregateTotals.totalTokens += usage.totalTokens;
+				aggregateTotals.totalCost += usage.totalCost;
+				aggregateTotals.inputCost += usage.inputCost;
+				aggregateTotals.outputCost += usage.outputCost;
+				aggregateTotals.cacheReadCost += usage.cacheReadCost;
+				aggregateTotals.cacheWriteCost += usage.cacheWriteCost;
+				aggregateTotals.missingCostEntries += usage.missingCostEntries;
+			}
+			const agentId = parseAgentSessionKey(merged.key)?.agentId;
+			const channel = merged.storeEntry?.channel ?? merged.storeEntry?.origin?.provider;
+			const chatType = merged.storeEntry?.chatType ?? merged.storeEntry?.origin?.chatType;
+			if (usage) {
+				if (usage.messageCounts) {
+					aggregateMessages.total += usage.messageCounts.total;
+					aggregateMessages.user += usage.messageCounts.user;
+					aggregateMessages.assistant += usage.messageCounts.assistant;
+					aggregateMessages.toolCalls += usage.messageCounts.toolCalls;
+					aggregateMessages.toolResults += usage.messageCounts.toolResults;
+					aggregateMessages.errors += usage.messageCounts.errors;
+				}
+				if (usage.toolUsage) for (const tool of usage.toolUsage.tools) toolAggregateMap.set(tool.name, (toolAggregateMap.get(tool.name) ?? 0) + tool.count);
+				if (usage.modelUsage) for (const entry of usage.modelUsage) {
+					const modelKey = `${entry.provider ?? "unknown"}::${entry.model ?? "unknown"}`;
+					const modelExisting = byModelMap.get(modelKey) ?? {
+						provider: entry.provider,
+						model: entry.model,
+						count: 0,
+						totals: emptyTotals()
+					};
+					modelExisting.count += entry.count;
+					mergeTotals(modelExisting.totals, entry.totals);
+					byModelMap.set(modelKey, modelExisting);
+					const providerKey = entry.provider ?? "unknown";
+					const providerExisting = byProviderMap.get(providerKey) ?? {
+						provider: entry.provider,
+						model: void 0,
+						count: 0,
+						totals: emptyTotals()
+					};
+					providerExisting.count += entry.count;
+					mergeTotals(providerExisting.totals, entry.totals);
+					byProviderMap.set(providerKey, providerExisting);
+				}
+				if (usage.latency) {
+					const { count, avgMs, minMs, maxMs, p95Ms } = usage.latency;
+					if (count > 0) {
+						latencyTotals.count += count;
+						latencyTotals.sum += avgMs * count;
+						latencyTotals.min = Math.min(latencyTotals.min, minMs);
+						latencyTotals.max = Math.max(latencyTotals.max, maxMs);
+						latencyTotals.p95Max = Math.max(latencyTotals.p95Max, p95Ms);
+					}
+				}
+				if (usage.dailyLatency) for (const day of usage.dailyLatency) {
+					const existing = dailyLatencyMap.get(day.date) ?? {
+						date: day.date,
+						count: 0,
+						sum: 0,
+						min: Number.POSITIVE_INFINITY,
+						max: 0,
+						p95Max: 0
+					};
+					existing.count += day.count;
+					existing.sum += day.avgMs * day.count;
+					existing.min = Math.min(existing.min, day.minMs);
+					existing.max = Math.max(existing.max, day.maxMs);
+					existing.p95Max = Math.max(existing.p95Max, day.p95Ms);
+					dailyLatencyMap.set(day.date, existing);
+				}
+				if (usage.dailyModelUsage) for (const entry of usage.dailyModelUsage) {
+					const key = `${entry.date}::${entry.provider ?? "unknown"}::${entry.model ?? "unknown"}`;
+					const existing = modelDailyMap.get(key) ?? {
+						date: entry.date,
+						provider: entry.provider,
+						model: entry.model,
+						tokens: 0,
+						cost: 0,
+						count: 0
+					};
+					existing.tokens += entry.tokens;
+					existing.cost += entry.cost;
+					existing.count += entry.count;
+					modelDailyMap.set(key, existing);
+				}
+				if (agentId) {
+					const agentTotals = byAgentMap.get(agentId) ?? emptyTotals();
+					mergeTotals(agentTotals, usage);
+					byAgentMap.set(agentId, agentTotals);
+				}
+				if (channel) {
+					const channelTotals = byChannelMap.get(channel) ?? emptyTotals();
+					mergeTotals(channelTotals, usage);
+					byChannelMap.set(channel, channelTotals);
+				}
+				if (usage.dailyBreakdown) for (const day of usage.dailyBreakdown) {
+					const daily = dailyAggregateMap.get(day.date) ?? {
+						date: day.date,
+						tokens: 0,
+						cost: 0,
+						messages: 0,
+						toolCalls: 0,
+						errors: 0
+					};
+					daily.tokens += day.tokens;
+					daily.cost += day.cost;
+					dailyAggregateMap.set(day.date, daily);
+				}
+				if (usage.dailyMessageCounts) for (const day of usage.dailyMessageCounts) {
+					const daily = dailyAggregateMap.get(day.date) ?? {
+						date: day.date,
+						tokens: 0,
+						cost: 0,
+						messages: 0,
+						toolCalls: 0,
+						errors: 0
+					};
+					daily.messages += day.total;
+					daily.toolCalls += day.toolCalls;
+					daily.errors += day.errors;
+					dailyAggregateMap.set(day.date, daily);
+				}
+			}
+			sessions.push({
+				key: merged.key,
+				label: merged.label,
+				sessionId: merged.sessionId,
+				updatedAt: merged.updatedAt,
+				agentId,
+				channel,
+				chatType,
+				origin: merged.storeEntry?.origin,
+				modelOverride: merged.storeEntry?.modelOverride,
+				providerOverride: merged.storeEntry?.providerOverride,
+				modelProvider: merged.storeEntry?.modelProvider,
+				model: merged.storeEntry?.model,
+				usage,
+				contextWeight: includeContextWeight ? merged.storeEntry?.systemPromptReport ?? null : void 0
+			});
+		}
+		const formatDateStr = (ms) => {
+			const d = new Date(ms);
+			return `${d.getUTCFullYear()}-${String(d.getUTCMonth() + 1).padStart(2, "0")}-${String(d.getUTCDate()).padStart(2, "0")}`;
+		};
+		const aggregates = {
+			messages: aggregateMessages,
+			tools: {
+				totalCalls: Array.from(toolAggregateMap.values()).reduce((sum, count) => sum + count, 0),
+				uniqueTools: toolAggregateMap.size,
+				tools: Array.from(toolAggregateMap.entries()).map(([name, count]) => ({
+					name,
+					count
+				})).toSorted((a, b) => b.count - a.count)
+			},
+			byModel: Array.from(byModelMap.values()).toSorted((a, b) => {
+				const costDiff = b.totals.totalCost - a.totals.totalCost;
+				if (costDiff !== 0) return costDiff;
+				return b.totals.totalTokens - a.totals.totalTokens;
+			}),
+			byProvider: Array.from(byProviderMap.values()).toSorted((a, b) => {
+				const costDiff = b.totals.totalCost - a.totals.totalCost;
+				if (costDiff !== 0) return costDiff;
+				return b.totals.totalTokens - a.totals.totalTokens;
+			}),
+			byAgent: Array.from(byAgentMap.entries()).map(([id, totals]) => ({
+				agentId: id,
+				totals
+			})).toSorted((a, b) => b.totals.totalCost - a.totals.totalCost),
+			byChannel: Array.from(byChannelMap.entries()).map(([name, totals]) => ({
+				channel: name,
+				totals
+			})).toSorted((a, b) => b.totals.totalCost - a.totals.totalCost),
+			latency: latencyTotals.count > 0 ? {
+				count: latencyTotals.count,
+				avgMs: latencyTotals.sum / latencyTotals.count,
+				minMs: latencyTotals.min === Number.POSITIVE_INFINITY ? 0 : latencyTotals.min,
+				maxMs: latencyTotals.max,
+				p95Ms: latencyTotals.p95Max
+			} : void 0,
+			dailyLatency: Array.from(dailyLatencyMap.values()).map((entry) => ({
+				date: entry.date,
+				count: entry.count,
+				avgMs: entry.count ? entry.sum / entry.count : 0,
+				minMs: entry.min === Number.POSITIVE_INFINITY ? 0 : entry.min,
+				maxMs: entry.max,
+				p95Ms: entry.p95Max
+			})).toSorted((a, b) => a.date.localeCompare(b.date)),
+			modelDaily: Array.from(modelDailyMap.values()).toSorted((a, b) => a.date.localeCompare(b.date) || b.cost - a.cost),
+			daily: Array.from(dailyAggregateMap.values()).toSorted((a, b) => a.date.localeCompare(b.date))
+		};
+		respond(true, {
+			updatedAt: now,
+			startDate: formatDateStr(startMs),
+			endDate: formatDateStr(endMs),
+			sessions,
+			totals: aggregateTotals,
+			aggregates
+		}, void 0);
+	},
+	"sessions.usage.timeseries": async ({ respond, params }) => {
+		const key = typeof params?.key === "string" ? params.key.trim() : null;
+		if (!key) {
+			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, "key is required for timeseries"));
+			return;
+		}
+		const config = loadConfig();
+		const { entry } = loadSessionEntry(key);
+		const timeseries = await loadSessionUsageTimeSeries({
+			sessionId: entry?.sessionId ?? key,
+			sessionEntry: entry,
+			sessionFile: entry?.sessionFile ?? resolveSessionFilePath(key),
+			config,
+			maxPoints: 200
+		});
+		if (!timeseries) {
+			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, `No transcript found for session: ${key}`));
+			return;
+		}
+		respond(true, timeseries, void 0);
+	},
+	"sessions.usage.logs": async ({ respond, params }) => {
+		const key = typeof params?.key === "string" ? params.key.trim() : null;
+		if (!key) {
+			respond(false, void 0, errorShape(ErrorCodes.INVALID_REQUEST, "key is required for logs"));
+			return;
+		}
+		const limit = typeof params?.limit === "number" && Number.isFinite(params.limit) ? Math.min(params.limit, 1e3) : 200;
+		const config = loadConfig();
+		const { entry } = loadSessionEntry(key);
+		const sessionId = entry?.sessionId ?? key;
+		const sessionFile = entry?.sessionFile ?? resolveSessionFilePath(key);
+		const { loadSessionLogs } = await import("./session-cost-usage-CBP4Hv9D.js").then((n) => n.a);
+		respond(true, { logs: await loadSessionLogs({
+			sessionId,
+			sessionEntry: entry,
+			sessionFile,
+			config,
+			limit
+		}) ?? [] }, void 0);
 	}
 };
 
@@ -11212,29 +11847,14 @@ function resolveHooksConfig(cfg) {
 		mappings: resolveHookMappings(cfg.hooks)
 	};
 }
-function extractHookToken(req, url) {
+function extractHookToken(req) {
 	const auth = typeof req.headers.authorization === "string" ? req.headers.authorization.trim() : "";
 	if (auth.toLowerCase().startsWith("bearer ")) {
 		const token = auth.slice(7).trim();
-		if (token) return {
-			token,
-			fromQuery: false
-		};
+		if (token) return token;
 	}
 	const headerToken = typeof req.headers["x-openclaw-token"] === "string" ? req.headers["x-openclaw-token"].trim() : "";
-	if (headerToken) return {
-		token: headerToken,
-		fromQuery: false
-	};
-	const queryToken = url.searchParams.get("token");
-	if (queryToken) return {
-		token: queryToken.trim(),
-		fromQuery: true
-	};
-	return {
-		token: void 0,
-		fromQuery: false
-	};
+	if (headerToken) return headerToken;
 }
 async function readJsonBody(req, maxBytes) {
 	return await new Promise((resolve) => {
@@ -11372,7 +11992,7 @@ function normalizeAgentPayload(payload, opts) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.OPENCLAW_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.OPENCLAW_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./control-service-Dag9b-dU.js");
+	const mod = override ? await import(override) : await import("./control-service-CS61Road.js").then((n) => n.t);
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -12040,8 +12660,8 @@ function hasEventScope(client, event) {
 }
 function createGatewayBroadcaster(params) {
 	let seq = 0;
-	const broadcast = (event, payload, opts) => {
-		const eventSeq = ++seq;
+	const broadcastInternal = (event, payload, opts, targetConnIds) => {
+		const eventSeq = Boolean(targetConnIds) ? void 0 : ++seq;
 		const frame = JSON.stringify({
 			type: "event",
 			event,
@@ -12051,8 +12671,9 @@ function createGatewayBroadcaster(params) {
 		});
 		const logMeta = {
 			event,
-			seq: eventSeq,
+			seq: eventSeq ?? "targeted",
 			clients: params.clients.size,
+			targets: targetConnIds ? targetConnIds.size : void 0,
 			dropIfSlow: opts?.dropIfSlow,
 			presenceVersion: opts?.stateVersion?.presence,
 			healthVersion: opts?.stateVersion?.health
@@ -12060,6 +12681,7 @@ function createGatewayBroadcaster(params) {
 		if (event === "agent") Object.assign(logMeta, summarizeAgentEventForWsLog(payload));
 		logWs("out", "event", logMeta);
 		for (const c of params.clients) {
+			if (targetConnIds && !targetConnIds.has(c.connId)) continue;
 			if (!hasEventScope(c, event)) continue;
 			const slow = c.socket.bufferedAmount > MAX_BUFFERED_BYTES;
 			if (slow && opts?.dropIfSlow) continue;
@@ -12074,7 +12696,15 @@ function createGatewayBroadcaster(params) {
 			} catch {}
 		}
 	};
-	return { broadcast };
+	const broadcast = (event, payload, opts) => broadcastInternal(event, payload, opts);
+	const broadcastToConnIds = (event, payload, connIds, opts) => {
+		if (connIds.size === 0) return;
+		broadcastInternal(event, payload, opts, connIds);
+	};
+	return {
+		broadcast,
+		broadcastToConnIds
+	};
 }
 
 //#endregion
@@ -13814,6 +14444,40 @@ function sendJson(res, status, body) {
 	res.setHeader("Content-Type", "application/json; charset=utf-8");
 	res.end(JSON.stringify(body));
 }
+function isCanvasPath(pathname) {
+	return pathname === A2UI_PATH || pathname.startsWith(`${A2UI_PATH}/`) || pathname === CANVAS_HOST_PATH || pathname.startsWith(`${CANVAS_HOST_PATH}/`) || pathname === CANVAS_WS_PATH;
+}
+function hasAuthorizedWsClientForIp(clients, clientIp) {
+	for (const client of clients) if (client.clientIp && client.clientIp === clientIp) return true;
+	return false;
+}
+async function authorizeCanvasRequest(params) {
+	const { req, auth, trustedProxies, clients } = params;
+	if (isLocalDirectRequest(req, trustedProxies)) return true;
+	const token = getBearerToken(req);
+	if (token) {
+		if ((await authorizeGatewayConnect({
+			auth: {
+				...auth,
+				allowTailscale: false
+			},
+			connectAuth: {
+				token,
+				password: token
+			},
+			req,
+			trustedProxies
+		})).ok) return true;
+	}
+	const clientIp = resolveGatewayClientIp({
+		remoteAddr: req.socket?.remoteAddress ?? "",
+		forwardedFor: getHeader(req, "x-forwarded-for"),
+		realIp: getHeader(req, "x-real-ip"),
+		trustedProxies
+	});
+	if (!clientIp) return false;
+	return hasAuthorizedWsClientForIp(clients, clientIp);
+}
 function createHooksRequestHandler(opts) {
 	const { getHooksConfig, bindHost, port, logHooks, dispatchAgentHook, dispatchWakeHook } = opts;
 	return async (req, res) => {
@@ -13822,14 +14486,19 @@ function createHooksRequestHandler(opts) {
 		const url = new URL(req.url ?? "/", `http://${bindHost}:${port}`);
 		const basePath = hooksConfig.basePath;
 		if (url.pathname !== basePath && !url.pathname.startsWith(`${basePath}/`)) return false;
-		const { token, fromQuery } = extractHookToken(req, url);
+		if (url.searchParams.has("token")) {
+			res.statusCode = 400;
+			res.setHeader("Content-Type", "text/plain; charset=utf-8");
+			res.end("Hook token must be provided via Authorization: Bearer <token> or X-OpenClaw-Token header (query parameters are not allowed).");
+			return true;
+		}
+		const token = extractHookToken(req);
 		if (!token || token !== hooksConfig.token) {
 			res.statusCode = 401;
 			res.setHeader("Content-Type", "text/plain; charset=utf-8");
 			res.end("Unauthorized");
 			return true;
 		}
-		if (fromQuery) logHooks.warn("Hook token provided via query parameter is deprecated for security reasons. Tokens in URLs appear in logs, browser history, and referrer headers. Use Authorization: Bearer <token> or X-OpenClaw-Token header instead.");
 		if (req.method !== "POST") {
 			res.statusCode = 405;
 			res.setHeader("Allow", "POST");
@@ -13957,7 +14626,7 @@ function createHooksRequestHandler(opts) {
 	};
 }
 function createGatewayHttpServer(opts) {
-	const { canvasHost, controlUiEnabled, controlUiBasePath, controlUiRoot, openAiChatCompletionsEnabled, openResponsesEnabled, openResponsesConfig, handleHooksRequest, handlePluginRequest, resolvedAuth } = opts;
+	const { canvasHost, clients, controlUiEnabled, controlUiBasePath, controlUiRoot, openAiChatCompletionsEnabled, openResponsesEnabled, openResponsesConfig, handleHooksRequest, handlePluginRequest, resolvedAuth } = opts;
 	const httpServer = opts.tlsOptions ? createServer$1(opts.tlsOptions, (req, res) => {
 		handleRequest(req, res);
 	}) : createServer((req, res) => {
@@ -13989,6 +14658,17 @@ function createGatewayHttpServer(opts) {
 				})) return;
 			}
 			if (canvasHost) {
+				if (isCanvasPath(new URL(req.url ?? "/", "http://localhost").pathname)) {
+					if (!await authorizeCanvasRequest({
+						req,
+						auth: resolvedAuth,
+						trustedProxies,
+						clients
+					})) {
+						sendUnauthorized(res);
+						return;
+					}
+				}
 				if (await handleA2uiHttpRequest(req, res)) return;
 				if (await canvasHost.handleHttpRequest(req, res)) return;
 			}
@@ -14015,11 +14695,29 @@ function createGatewayHttpServer(opts) {
 	return httpServer;
 }
 function attachGatewayUpgradeHandler(opts) {
-	const { httpServer, wss, canvasHost } = opts;
+	const { httpServer, wss, canvasHost, clients, resolvedAuth } = opts;
 	httpServer.on("upgrade", (req, socket, head) => {
-		if (canvasHost?.handleUpgrade(req, socket, head)) return;
-		wss.handleUpgrade(req, socket, head, (ws) => {
-			wss.emit("connection", ws, req);
+		(async () => {
+			if (canvasHost) {
+				if (new URL(req.url ?? "/", "http://localhost").pathname === CANVAS_WS_PATH) {
+					if (!await authorizeCanvasRequest({
+						req,
+						auth: resolvedAuth,
+						trustedProxies: loadConfig().gateway?.trustedProxies ?? [],
+						clients
+					})) {
+						socket.write("HTTP/1.1 401 Unauthorized\r\nConnection: close\r\n\r\n");
+						socket.destroy();
+						return;
+					}
+				}
+				if (canvasHost.handleUpgrade(req, socket, head)) return;
+			}
+			wss.handleUpgrade(req, socket, head, (ws) => {
+				wss.emit("connection", ws, req);
+			});
+		})().catch(() => {
+			socket.destroy();
 		});
 	});
 }
@@ -14338,6 +15036,8 @@ async function createGatewayRuntimeState(params) {
 	} catch (err) {
 		params.logCanvas.warn(`canvas host failed to start: ${String(err)}`);
 	}
+	const clients = /* @__PURE__ */ new Set();
+	const { broadcast, broadcastToConnIds } = createGatewayBroadcaster({ clients });
 	const handleHooksRequest = createGatewayHooksRequestHandler({
 		deps: params.deps,
 		getHooksConfig: params.hooksConfig,
@@ -14355,6 +15055,7 @@ async function createGatewayRuntimeState(params) {
 	for (const host of bindHosts) {
 		const httpServer = createGatewayHttpServer({
 			canvasHost,
+			clients,
 			controlUiEnabled: params.controlUiEnabled,
 			controlUiBasePath: params.controlUiBasePath,
 			controlUiRoot: params.controlUiRoot,
@@ -14388,10 +15089,10 @@ async function createGatewayRuntimeState(params) {
 	for (const server of httpServers) attachGatewayUpgradeHandler({
 		httpServer: server,
 		wss,
-		canvasHost
+		canvasHost,
+		clients,
+		resolvedAuth: params.resolvedAuth
 	});
-	const clients = /* @__PURE__ */ new Set();
-	const { broadcast } = createGatewayBroadcaster({ clients });
 	const agentRunSeq = /* @__PURE__ */ new Map();
 	const dedupe = /* @__PURE__ */ new Map();
 	const chatRunState = createChatRunState();
@@ -14400,6 +15101,8 @@ async function createGatewayRuntimeState(params) {
 	const chatDeltaSentAt = chatRunState.deltaSentAt;
 	const addChatRun = chatRunRegistry.add;
 	const removeChatRun = chatRunRegistry.remove;
+	const chatAbortControllers = /* @__PURE__ */ new Map();
+	const toolEventRecipients = createToolEventRecipientRegistry();
 	return {
 		canvasHost,
 		httpServer,
@@ -14408,6 +15111,7 @@ async function createGatewayRuntimeState(params) {
 		wss,
 		clients,
 		broadcast,
+		broadcastToConnIds,
 		agentRunSeq,
 		dedupe,
 		chatRunState,
@@ -14415,7 +15119,8 @@ async function createGatewayRuntimeState(params) {
 		chatDeltaSentAt,
 		addChatRun,
 		removeChatRun,
-		chatAbortControllers: /* @__PURE__ */ new Map()
+		chatAbortControllers,
+		toolEventRecipients
 	};
 }
 
@@ -14884,7 +15589,7 @@ function formatGatewayAuthFailureMessage(params) {
 	const isCli = isGatewayCliClient(client);
 	const isControlUi = client?.id === GATEWAY_CLIENT_IDS.CONTROL_UI;
 	const isWebchat = isWebchatClient(client);
-	const tokenHint = isCli ? "set gateway.remote.token to match gateway.auth.token" : isControlUi || isWebchat ? "open a tokenized dashboard URL or paste token in Control UI settings" : "provide gateway auth token";
+	const tokenHint = isCli ? "set gateway.remote.token to match gateway.auth.token" : isControlUi || isWebchat ? "open the dashboard URL and paste the token in Control UI settings" : "provide gateway auth token";
 	const passwordHint = isCli ? "set gateway.remote.password to match gateway.auth.password" : isControlUi || isWebchat ? "enter the password in Control UI settings" : "provide gateway auth password";
 	switch (reason) {
 		case "token_missing": return `unauthorized: gateway token missing (${tokenHint})`;
@@ -15452,7 +16157,8 @@ function attachGatewayWsMessageHandler(params) {
 					socket,
 					connect: connectParams,
 					connId,
-					presenceKey
+					presenceKey,
+					clientIp: reportedClientIp
 				};
 				setClient(nextClient);
 				setHandshakeState("connected");
@@ -15872,7 +16578,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	let canvasHostServer = null;
 	const gatewayTls = await loadGatewayTlsRuntime(cfgAtStart.gateway?.tls, log.child("tls"));
 	if (cfgAtStart.gateway?.tls?.enabled && !gatewayTls.enabled) throw new Error(gatewayTls.error ?? "gateway tls: failed to enable");
-	const { canvasHost, httpServer, httpServers, httpBindHosts, wss, clients, broadcast, agentRunSeq, dedupe, chatRunState, chatRunBuffers, chatDeltaSentAt, addChatRun, removeChatRun, chatAbortControllers } = await createGatewayRuntimeState({
+	const { canvasHost, httpServer, httpServers, httpBindHosts, wss, clients, broadcast, broadcastToConnIds, agentRunSeq, dedupe, chatRunState, chatRunBuffers, chatDeltaSentAt, addChatRun, removeChatRun, chatAbortControllers, toolEventRecipients } = await createGatewayRuntimeState({
 		cfg: cfgAtStart,
 		bindHost,
 		port,
@@ -15967,11 +16673,13 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	});
 	const agentUnsub = onAgentEvent(createAgentEventHandler({
 		broadcast,
+		broadcastToConnIds,
 		nodeSendToSession,
 		agentRunSeq,
 		chatRunState,
 		resolveSessionKeyForRun,
-		clearAgentRunContext
+		clearAgentRunContext,
+		toolEventRecipients
 	}));
 	const heartbeatUnsub = onHeartbeatEvent((evt) => {
 		broadcast("heartbeat", evt, { dropIfSlow: true });
@@ -16010,6 +16718,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 			incrementPresenceVersion,
 			getHealthVersion,
 			broadcast,
+			broadcastToConnIds,
 			nodeSendToSession,
 			nodeSendToAllSubscribed,
 			nodeSubscribe,
@@ -16024,6 +16733,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 			chatDeltaSentAt: chatRunState.deltaSentAt,
 			addChatRun,
 			removeChatRun,
+			registerToolEventRecipient: toolEventRecipients.add,
 			dedupe,
 			wizardSessions,
 			findRunningWizard,