@guadskill/openclaw-proxy 2026.3.7 → 2026.3.9

package/dist/{gateway-cli-FCR2v3fN.js → gateway-cli-B-C_BUeg.js}

@@ -1,10 +1,10 @@
 import { $ as resolveGatewayLockDir, E as logVerbose, F as getChildLogger, G as CONFIG_PATH, I as getLogger, J as isNixMode, L as getResolvedLoggerSettings, M as colorize, N as isRich, O as setVerbose, P as theme, X as resolveConfigPath, _ as defaultRuntime, c as runtimeForLogger, d as setConsoleSubsystemFilter, et as resolveGatewayPort, f as setConsoleTimestampPrefix, i as logAcceptedEnvOption, ot as resolveStateDir, q as STATE_DIR, r as isTruthyEnvValue, s as createSubsystemLogger } from "./entry.js";
-import { An as ensureControlUiAllowedOriginsForNonLoopbackBind, Ar as resolveDefaultModelForAgent, B as loadConfig, Bi as DEFAULT_PROVIDER, Dr as resolveAllowedModelRef, Gn as resolveAgentMaxConcurrent, H as readConfigFileSnapshot, Ir as resolveThinkingDefault, J as OpenClawSchema, K as writeConfigFile, Kn as resolveSubagentMaxConcurrent, L as migrateLegacyConfig, Nt as isAvatarHttpUrl, On as applyMergePatch, Pi as normalizeSecretInput, Pr as resolveSubagentConfiguredModelSelection, Pt as isAvatarImageDataUrl, Ri as DEFAULT_CONTEXT_TOKENS, Rt as looksLikeAvatarPath, U as readConfigFileSnapshotForWrite, Un as buildTalkConfigResponse, V as parseConfigJson5, W as resolveConfigSnapshotHash, hr as buildAllowedModelSet, ht as parseByteSize, jr as resolveHooksGmailModel, jt as AVATAR_MAX_BYTES, kn as applyLegacyMigrations, kr as resolveConfiguredModelRef, mr as isPidAlive, mt as parseDurationMs, q as validateConfigObjectWithPlugins, wr as normalizeModelSelection, xr as isCliProvider, yr as getModelRefStatus, z as createConfigIO, zi as DEFAULT_MODEL } from "./auth-profiles-Bh2dHooQ.js";
+import { An as ensureControlUiAllowedOriginsForNonLoopbackBind, Ar as resolveDefaultModelForAgent, B as loadConfig, Bi as DEFAULT_PROVIDER, Dr as resolveAllowedModelRef, Gn as resolveAgentMaxConcurrent, H as readConfigFileSnapshot, Ir as resolveThinkingDefault, J as OpenClawSchema, K as writeConfigFile, Kn as resolveSubagentMaxConcurrent, L as migrateLegacyConfig, Nt as isAvatarHttpUrl, On as applyMergePatch, Pi as normalizeSecretInput, Pr as resolveSubagentConfiguredModelSelection, Pt as isAvatarImageDataUrl, Ri as DEFAULT_CONTEXT_TOKENS, Rt as looksLikeAvatarPath, U as readConfigFileSnapshotForWrite, Un as buildTalkConfigResponse, V as parseConfigJson5, W as resolveConfigSnapshotHash, hr as buildAllowedModelSet, ht as parseByteSize, jr as resolveHooksGmailModel, jt as AVATAR_MAX_BYTES, kn as applyLegacyMigrations, kr as resolveConfiguredModelRef, mr as isPidAlive, mt as parseDurationMs, q as validateConfigObjectWithPlugins, wr as normalizeModelSelection, xr as isCliProvider, yr as getModelRefStatus, z as createConfigIO, zi as DEFAULT_MODEL } from "./auth-profiles-QXvcpjIT.js";
 import { t as formatCliCommand } from "./command-format-DdHwx_z_.js";
-import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-CT92dyCK.js";
+import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-Dd2_TNoB.js";
 import { C as isCronRunSessionKey, E as parseAgentSessionKey, T as isSubagentSessionKey, _ as normalizeAccountId$1, c as normalizeAgentId, g as DEFAULT_ACCOUNT_ID, h as toAgentStoreSessionKey, l as normalizeMainKey, m as toAgentRequestSessionKey, o as classifySessionKeyShape, r as buildAgentMainSessionKey, t as DEFAULT_AGENT_ID, u as resolveAgentIdFromSessionKey } from "./session-key-9-yI-GU_.js";
 import { E as isPlainObject, S as sleep, T as truncateUtf16Safe, n as clamp, s as ensureDir, v as resolveUserPath, x as shortenHomePath } from "./utils-DanSccFf.js";
-import { a as openBoundaryFileSync, f as isNotFoundPathError, g as matchesSkillFilter, i as openBoundaryFile, o as openVerifiedFileSync, s as sameFileIdentity, t as resolveOpenClawPackageRoot } from "./openclaw-root-Dh_Sm1l8.js";
+import { a as openBoundaryFileSync, f as isNotFoundPathError, g as matchesSkillFilter, i as openBoundaryFile, o as openVerifiedFileSync, s as sameFileIdentity, t as resolveOpenClawPackageRoot } from "./openclaw-root-Gv7Ob-5V.js";
 import { i as logWarn, t as logDebug } from "./logger-BcqRk323.js";
 import { n as runExec, t as runCommandWithTimeout } from "./exec-OWC_Lkz4.js";
 import { a as hasConfiguredSecretInput } from "./types.secrets-CZ26uLlg.js";
@@ -12,157 +12,157 @@ import "./github-copilot-token-DHTToceK.js";
 import "./host-env-security-CIiLt2Mi.js";
 import { n as resolveRuntimeServiceVersion, t as VERSION } from "./version-BKzmSBiX.js";
 import { C as clearInternalHooks, E as triggerInternalHook, T as registerInternalHook, h as createEmptyPluginRegistry, t as CHANNEL_IDS, u as getActivePluginRegistry, w as createInternalHookEvent } from "./registry-CZbmSOj8.js";
-import { u as isTestDefaultMemorySlotDisabled } from "./manifest-registry-DjjgwuVC.js";
-import "./dock-tPqNmtNL.js";
+import { u as isTestDefaultMemorySlotDisabled } from "./manifest-registry-C_atL4ID.js";
+import "./dock-wtxEAACu.js";
 import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-Df74FoY2.js";
-import { $ as buildBareSessionResetPrompt, $t as consumeGatewaySigusr1RestartAuthorization, Ar as resolveAgentIdentity, At as normalizePayloadToSystemText, Bn as normalizeMimeList, Br as isTtsProviderConfigured, Bt as getHookType, C as resolveAgentDeliveryPlan, Cn as isSystemEventContextChanged, Cr as registerAgentRunContext, Ct as normalizeHttpWebhookUrl, D as createOutboundSendDeps$1, Dt as normalizeOptionalAgentId, E as createDefaultDeps, En as requestHeartbeatNow, Er as resolveBootstrapWarningSignaturesSeen, Et as inferLegacyName, F as createReplyPrefixOptions, Fn as DEFAULT_INPUT_IMAGE_MIMES, Ft as stripLegacyDeliveryFields, Gr as resolveTtsProviderOrder, Gt as resolveSessionAuthProfileOverride, Hr as resolveTtsAutoMode, Ht as closeTrackedBrowserTabsForSessions, In as DEFAULT_INPUT_MAX_REDIRECTS, Ir as clearBootstrapSnapshot, J as dispatchInboundMessage, Jn as stopSubagentsForRequester, Jr as textToSpeech, Kr as setTtsEnabled, L as buildHistoryContextFromEntries, Ln as DEFAULT_INPUT_TIMEOUT_MS, Lr as clearBootstrapSnapshotOnSessionRollover, Mt as migrateLegacyCronPayload, Nt as buildDeliveryFromLegacyPayload, Or as getAcpSessionManager, Ot as normalizeOptionalSessionKey, Pn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Pr as resolveUserTimezone, Pt as hasLegacyDeliveryHints, Qr as getActiveTaskCount, Qt as parseVerboseOverride, Rn as extractFileContentFromSource, Rr as getTtsProvider, Rt as buildSafeExternalPrompt, Sn as enqueueSystemEvent, Sr as onAgentEvent, St as writeRestartSentinel, T as createOutboundSendDeps, Tt as normalizeCronJobPatch, Un as normalizeSendPolicy, Ur as resolveTtsConfig, Ut as applyBrowserProxyPaths, Vn as resolveInputFileLimits, Vr as resolveTtsApiKey, Vt as isExternalHookSession, Wn as resolveSendPolicy, Wr as resolveTtsPrefsPath, Wt as persistBrowserProxyFiles, X as getTotalPendingReplies, Xr as OPENAI_TTS_VOICES, Xt as applyModelOverrideToSessionEntry, Y as createReplyDispatcher, Yr as OPENAI_TTS_MODELS, Zn as countActiveDescendantRuns, Zt as applyVerboseOverride, _ as requestBodyErrorToText, _t as formatDoctorNonInteractiveHint, a as getPluginToolMeta, ai as CommandLane, an as setGatewaySigusr1RestartPolicy, at as ensureOutboundSessionEntry, br as emitAgentEvent, bt as summarizeRestartSentinel, c as loadOpenClawPlugins, cn as unbindThreadBindingsBySessionKey, cr as runSubagentAnnounceFlow, dn as loadProviderUsageSummary, dr as clearSessionQueues, dt as resolveOutboundChannelPlugin, ei as getTotalQueueSize, en as deferGatewayRestartUntilIdle, er as initSubagentRegistry, et as getCliSessionId, fr as buildOutboundSessionContext, g as readJsonBodyWithLimit, gr as waitForEmbeddedPiRunEnd, gt as consumeRestartSentinel, h as handleSlackHttpRequest, hn as formatZonedTimestamp, hr as getActiveEmbeddedRunCount, ht as runWithModelFallback, ii as waitForActiveTasks, in as scheduleGatewaySigusr1Restart, j as resolveAgentAvatar, jn as ACP_SESSION_IDENTITY_RENDERER_VERSION, jt as normalizeRequiredName, kr as resolveAgentSessionDirs, kt as normalizeOptionalText, l as createPluginRuntime, ln as normalizeGroupActivation, lr as resolveAnnounceTargetFromKey, lt as resolveOutboundTarget, mr as abortEmbeddedPiRun, n as applyToolPolicyPipeline, ni as resetAllLanes, nn as isGatewaySigusr1RestartExternallyAllowed, nr as listDescendantRunsForRequester, nt as runCliAgent, o as resolvePluginTools, oi as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, on as setPreRestartDeferralCheck, ot as resolveOutboundSessionRoute, p as resolveAgentOutboundIdentity, pr as runEmbeddedPiAgent, pt as resetDirectoryCache, qn as isAbortRequestText, qr as setTtsProvider, r as buildDefaultToolPolicyPipelineSteps, ri as setCommandLaneConcurrency, rn as markGatewaySigusr1RestartHandled, rt as createOpenClawTools, sn as triggerOpenClawRestart, sr as resolveAgentTimeoutMs, ti as markGatewayDraining, tn as emitGatewayRestart, tt as setCliSessionId, ui as stripHeartbeatToken, ur as readLatestAssistantReply, ut as resolveSessionDeliveryTarget, vr as resolveCronStyleNow, vt as formatRestartSentinelMessage, w as resolveAgentOutboundTarget, wt as normalizeCronJobCreate, x as agentCommandFromIngress, xr as getAgentRunContext, yr as clearAgentRunContext, zn as extractImageContentFromSource, zr as isTtsEnabled, zt as detectSuspiciousPatterns } from "./compact-SZ3BDWQp.js";
-import { i as resolveWhatsAppAccount } from "./accounts-DDk7Alkl.js";
-import { n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId, t as getChannelPlugin, v as buildChannelAccountBindings } from "./plugins-BB30X9Wg.js";
+import { $ as buildBareSessionResetPrompt, $t as consumeGatewaySigusr1RestartAuthorization, Ar as resolveAgentIdentity, At as normalizePayloadToSystemText, Bn as normalizeMimeList, Br as isTtsProviderConfigured, Bt as getHookType, C as resolveAgentDeliveryPlan, Cn as isSystemEventContextChanged, Cr as registerAgentRunContext, Ct as normalizeHttpWebhookUrl, D as createOutboundSendDeps$1, Dt as normalizeOptionalAgentId, E as createDefaultDeps, En as requestHeartbeatNow, Er as resolveBootstrapWarningSignaturesSeen, Et as inferLegacyName, F as createReplyPrefixOptions, Fn as DEFAULT_INPUT_IMAGE_MIMES, Ft as stripLegacyDeliveryFields, Gr as resolveTtsProviderOrder, Gt as resolveSessionAuthProfileOverride, Hr as resolveTtsAutoMode, Ht as closeTrackedBrowserTabsForSessions, In as DEFAULT_INPUT_MAX_REDIRECTS, Ir as clearBootstrapSnapshot, J as dispatchInboundMessage, Jn as stopSubagentsForRequester, Jr as textToSpeech, Kr as setTtsEnabled, L as buildHistoryContextFromEntries, Ln as DEFAULT_INPUT_TIMEOUT_MS, Lr as clearBootstrapSnapshotOnSessionRollover, Mt as migrateLegacyCronPayload, Nt as buildDeliveryFromLegacyPayload, Or as getAcpSessionManager, Ot as normalizeOptionalSessionKey, Pn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Pr as resolveUserTimezone, Pt as hasLegacyDeliveryHints, Qr as getActiveTaskCount, Qt as parseVerboseOverride, Rn as extractFileContentFromSource, Rr as getTtsProvider, Rt as buildSafeExternalPrompt, Sn as enqueueSystemEvent, Sr as onAgentEvent, St as writeRestartSentinel, T as createOutboundSendDeps, Tt as normalizeCronJobPatch, Un as normalizeSendPolicy, Ur as resolveTtsConfig, Ut as applyBrowserProxyPaths, Vn as resolveInputFileLimits, Vr as resolveTtsApiKey, Vt as isExternalHookSession, Wn as resolveSendPolicy, Wr as resolveTtsPrefsPath, Wt as persistBrowserProxyFiles, X as getTotalPendingReplies, Xr as OPENAI_TTS_VOICES, Xt as applyModelOverrideToSessionEntry, Y as createReplyDispatcher, Yr as OPENAI_TTS_MODELS, Zn as countActiveDescendantRuns, Zt as applyVerboseOverride, _ as requestBodyErrorToText, _t as formatDoctorNonInteractiveHint, a as getPluginToolMeta, ai as CommandLane, an as setGatewaySigusr1RestartPolicy, at as ensureOutboundSessionEntry, br as emitAgentEvent, bt as summarizeRestartSentinel, c as loadOpenClawPlugins, cn as unbindThreadBindingsBySessionKey, cr as runSubagentAnnounceFlow, dn as loadProviderUsageSummary, dr as clearSessionQueues, dt as resolveOutboundChannelPlugin, ei as getTotalQueueSize, en as deferGatewayRestartUntilIdle, er as initSubagentRegistry, et as getCliSessionId, fr as buildOutboundSessionContext, g as readJsonBodyWithLimit, gr as waitForEmbeddedPiRunEnd, gt as consumeRestartSentinel, h as handleSlackHttpRequest, hn as formatZonedTimestamp, hr as getActiveEmbeddedRunCount, ht as runWithModelFallback, ii as waitForActiveTasks, in as scheduleGatewaySigusr1Restart, j as resolveAgentAvatar, jn as ACP_SESSION_IDENTITY_RENDERER_VERSION, jt as normalizeRequiredName, kr as resolveAgentSessionDirs, kt as normalizeOptionalText, l as createPluginRuntime, ln as normalizeGroupActivation, lr as resolveAnnounceTargetFromKey, lt as resolveOutboundTarget, mr as abortEmbeddedPiRun, n as applyToolPolicyPipeline, ni as resetAllLanes, nn as isGatewaySigusr1RestartExternallyAllowed, nr as listDescendantRunsForRequester, nt as runCliAgent, o as resolvePluginTools, oi as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, on as setPreRestartDeferralCheck, ot as resolveOutboundSessionRoute, p as resolveAgentOutboundIdentity, pr as runEmbeddedPiAgent, pt as resetDirectoryCache, qn as isAbortRequestText, qr as setTtsProvider, r as buildDefaultToolPolicyPipelineSteps, ri as setCommandLaneConcurrency, rn as markGatewaySigusr1RestartHandled, rt as createOpenClawTools, sn as triggerOpenClawRestart, sr as resolveAgentTimeoutMs, ti as markGatewayDraining, tn as emitGatewayRestart, tt as setCliSessionId, ui as stripHeartbeatToken, ur as readLatestAssistantReply, ut as resolveSessionDeliveryTarget, vr as resolveCronStyleNow, vt as formatRestartSentinelMessage, w as resolveAgentOutboundTarget, wt as normalizeCronJobCreate, x as agentCommandFromIngress, xr as getAgentRunContext, yr as clearAgentRunContext, zn as extractImageContentFromSource, zr as isTtsEnabled, zt as detectSuspiciousPatterns } from "./compact-BBdhRYXH.js";
+import { i as resolveWhatsAppAccount } from "./accounts-CGMgxUfN.js";
+import { n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId, t as getChannelPlugin, v as buildChannelAccountBindings } from "./plugins-Bv9ZfJVO.js";
 import "./logging-BdnOSVPD.js";
-import "./send-DsIy0owU.js";
-import "./send-CHUBkOx4.js";
-import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-xWhqcPuu.js";
-import { j as runGlobalGatewayStopSafely, k as getGlobalHookRunner, o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-754C3f2C.js";
-import { d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, h as isDiagnosticsEnabled } from "./diagnostic-D0TftuxK.js";
-import "./accounts-BAXPpGUT.js";
-import { c as detectMime } from "./image-ops-Dt4M7xkd.js";
-import { b as resolveCronStorePath, x as saveCronStore, y as loadCronStore } from "./send-D0TbCIOU.js";
-import "./pi-model-discovery-BJyAkuau.js";
+import "./send-DExcQWAf.js";
+import "./send-Don_FZgW.js";
+import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-gotbjCau.js";
+import { j as runGlobalGatewayStopSafely, k as getGlobalHookRunner, o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-BSlI6o2D.js";
+import { d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, h as isDiagnosticsEnabled } from "./diagnostic-CFCd8W0m.js";
+import "./accounts-B_Mf6Ybe.js";
+import { c as detectMime } from "./image-ops-sooGTpsU.js";
+import { b as resolveCronStorePath, x as saveCronStore, y as loadCronStore } from "./send-DgUi3bl8.js";
+import "./pi-model-discovery-qGBDJI9t.js";
 import { _ as normalizeGatewayClientMode, f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, h as GATEWAY_CLIENT_NAMES, i as isGatewayMessageChannel, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient, t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-6rkF5KkO.js";
-import "./pi-embedded-helpers-C1kbyX9C.js";
-import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-QUwr5BiV.js";
+import "./pi-embedded-helpers-BUubsAcJ.js";
+import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-Ey0spRTA.js";
 import { i as listCoreToolSections, n as PROFILE_OPTIONS, o as resolveCoreToolProfiles } from "./tool-catalog-BCkWN5F6.js";
-import "./chrome-8g2ppizL.js";
+import "./chrome-CjADilJt.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-BRTAbJuN.js";
 import { t as safeEqualSecret } from "./secret-equal-C6Ey0YcX.js";
-import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-CcjaRS5e.js";
-import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-DUfuK8DQ.js";
-import { a as resolveGatewayAuth, c as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, i as isLocalDirectRequest, l as createAuthRateLimiter, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH, t as assertGatewayAuthConfigured, u as normalizeRateLimitClientIp } from "./auth-DfEti-nH.js";
-import { d as mergeGatewayTailscaleConfig, l as ensureGatewayStartupAuth, u as mergeGatewayAuthConfig } from "./server-context-BOMErxlB.js";
+import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-CoMmrqa1.js";
+import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-DrZBk8aE.js";
+import { a as resolveGatewayAuth, c as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, i as isLocalDirectRequest, l as createAuthRateLimiter, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH, t as assertGatewayAuthConfigured, u as normalizeRateLimitClientIp } from "./auth-DkciOmKe.js";
+import { d as mergeGatewayTailscaleConfig, l as ensureGatewayStartupAuth, u as mergeGatewayAuthConfig } from "./server-context-DDDYJ1E5.js";
 import { f as hasBinary } from "./frontmatter-ukO4UPgE.js";
 import "./env-overrides-DliONB2B.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-OAUIyvyc.js";
-import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-Bme_5_Wh.js";
-import "./paths-C6-x9jb-.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-BndjEKU2.js";
+import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-C3DzmT-s.js";
+import "./paths-B-3rcnCY.js";
 import { a as testRegexWithBoundedInput, i as compileSafeRegex } from "./redact-BCIqtHJW.js";
 import { o as isErrno, r as formatErrorMessage } from "./errors-DMBofubI.js";
-import { i as openFileWithinRoot, l as writeFileWithinRoot, s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-CgWykA_r.js";
-import { n as SsrFBlockedError } from "./proxy-env-CHINy-_C.js";
-import { n as cleanOldMedia } from "./store-dO9FxwIh.js";
-import { n as inspectPortUsage, o as formatPortDiagnostics, t as ensurePortAvailable } from "./ports-CRHQM_CU.js";
+import { i as openFileWithinRoot, l as writeFileWithinRoot, s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-DZPN9PEp.js";
+import { n as SsrFBlockedError } from "./proxy-env-C4Sv8mbU.js";
+import { n as cleanOldMedia } from "./store-BxDf7hdp.js";
+import { n as inspectPortUsage, o as formatPortDiagnostics, t as ensurePortAvailable } from "./ports-JXKx9QTu.js";
 import { t as movePathToTrash } from "./trash-BvQCk4Sz.js";
-import "./server-middleware-COJNPqNx.js";
-import { n as readJsonFile, r as writeJsonAtomic, t as createAsyncLock } from "./json-files-Byf92VOl.js";
-import { $ as resolveExplicitAgentSessionKey, A as cleanupArchivedSessionTranscripts, B as jsonUtf8Bytes, C as mergeDeliveryContext, D as archiveFileOnDisk, F as stripEnvelopeFromMessage, H as evaluateSessionFreshness, I as stripEnvelopeFromMessages, J as mergeSessionEntry, M as readSessionPreviewItemsFromTranscript, O as archiveSessionTranscripts, P as resolveSessionTranscriptCandidates, Q as resolveAgentMainSessionKey, R as stripInlineDirectiveTagsForDisplay, T as normalizeSessionDeliveryFields, W as resolveSessionResetPolicy, X as setSessionRuntimeModel, Z as canonicalizeMainSessionAlias, et as resolveMainSessionKey, j as readSessionMessages, k as capArrayByJsonBytes, n as parseSessionThreadInfo, o as archiveRemovedSessionTranscripts, p as updateSessionStore, rt as snapshotSessionOrigin, s as loadSessionStore, t as extractDeliveryInfo, tt as resolveMainSessionKeyFromConfig, ut as cleanStaleLockFiles, x as deliveryContextFromSession, z as stripInlineDirectiveTagsFromMessageForDisplay } from "./sessions-TCNQfcSW.js";
-import "./accounts-DIGnwOCI.js";
+import "./server-middleware-CUHXrp2x.js";
+import { n as readJsonFile, r as writeJsonAtomic, t as createAsyncLock } from "./json-files-D-hzuOc8.js";
+import { $ as resolveExplicitAgentSessionKey, A as cleanupArchivedSessionTranscripts, B as jsonUtf8Bytes, C as mergeDeliveryContext, D as archiveFileOnDisk, F as stripEnvelopeFromMessage, H as evaluateSessionFreshness, I as stripEnvelopeFromMessages, J as mergeSessionEntry, M as readSessionPreviewItemsFromTranscript, O as archiveSessionTranscripts, P as resolveSessionTranscriptCandidates, Q as resolveAgentMainSessionKey, R as stripInlineDirectiveTagsForDisplay, T as normalizeSessionDeliveryFields, W as resolveSessionResetPolicy, X as setSessionRuntimeModel, Z as canonicalizeMainSessionAlias, et as resolveMainSessionKey, j as readSessionMessages, k as capArrayByJsonBytes, n as parseSessionThreadInfo, o as archiveRemovedSessionTranscripts, p as updateSessionStore, rt as snapshotSessionOrigin, s as loadSessionStore, t as extractDeliveryInfo, tt as resolveMainSessionKeyFromConfig, ut as cleanStaleLockFiles, x as deliveryContextFromSession, z as stripInlineDirectiveTagsFromMessageForDisplay } from "./sessions-BJu8U8kz.js";
+import "./accounts-NKTm9o4M.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, s as resolveSessionTranscriptsDirForAgent } from "./paths-CA9zLiBI.js";
 import { i as normalizeInputProvenance } from "./input-provenance-CFnw8yhY.js";
 import "./chat-envelope-Ccu0M1Es.js";
-import { o as estimateBase64DecodedBytes } from "./tool-images-C1FdHV43.js";
+import { o as estimateBase64DecodedBytes } from "./tool-images-ByGbgP3W.js";
 import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, l as normalizeVerboseLevel, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels } from "./thinking-Bkhiq_gH.js";
-import "./models-config-Do_bkbr3.js";
-import "./exec-approvals-allowlist-BKsPjl3W.js";
-import "./exec-safe-bin-runtime-policy-Cm7TKqpY.js";
-import { n as loadModelCatalog } from "./model-catalog-CyL_QlZd.js";
-import "./fetch-OsQusEch.js";
-import { g as registerUnhandledRejectionHandler } from "./audio-transcription-runner-Cdvz7bpD.js";
-import { t as fetchWithSsrFGuard } from "./fetch-guard-CYvHLcm1.js";
-import { b as extractTextFromChatContent } from "./image-gKRn4k2T.js";
+import "./models-config-ioRkhhh4.js";
+import "./exec-approvals-allowlist-BTePmA7R.js";
+import "./exec-safe-bin-runtime-policy-B8a4-DkO.js";
+import { n as loadModelCatalog } from "./model-catalog-Crm5h6fz.js";
+import "./fetch-CLpizcRC.js";
+import { g as registerUnhandledRejectionHandler } from "./audio-transcription-runner-Cl9Pu_e3.js";
+import { t as fetchWithSsrFGuard } from "./fetch-guard-CTJIkmOy.js";
+import { b as extractTextFromChatContent } from "./image-C-OScNLH.js";
 import "./tool-display-C82F9dil.js";
-import "./api-key-rotation-D7uyLcCV.js";
+import "./api-key-rotation-DsHx0Ttu.js";
 import "./proxy-fetch-D5sLhh0l.js";
-import "./ir-DTl0TSQX.js";
+import "./ir-MJchm-P0.js";
 import "./render-CumKrTIx.js";
-import { a as ToolInputError } from "./target-errors-018oJFiB.js";
-import { r as isRestartEnabled } from "./commands-DP7Bcuo2.js";
-import "./commands-registry-B5lrLxcS.js";
+import { a as ToolInputError } from "./target-errors-N10oAD8K.js";
+import { r as isRestartEnabled } from "./commands-C-YxTe08.js";
+import "./commands-registry-WI8KXlO7.js";
 import { c as hasNonzeroUsage, i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, s as deriveSessionTotalTokens, t as discoverAllSessions } from "./session-cost-usage-cBObXwSm.js";
-import { a as loadCombinedSessionStoreForGateway, c as resolveGatewaySessionStoreTarget, f as computeBackoff, i as listSessionsFromStore, l as resolveSessionModelRef, o as loadSessionEntry, p as sleepWithAbort, r as listAgentsForGateway, s as pruneLegacyStoreKeys, t as canonicalizeSpawnedByForAgent, u as lookupContextTokens } from "./session-utils-HmD-1G9e.js";
-import "./sqlite-CVpjz_Fn.js";
-import { $ as validateNodePairApproveParams, $t as summarizeDeviceTokens, A as validateCronRunParams, At as validateWizardCancelParams, B as validateExecApprovalRequestParams, Bt as buildDeviceAuthPayload, C as validateConfigSchemaLookupResult, Ct as validateTalkConfigParams, D as validateCronAddParams, Dt as validateWakeParams, E as validateConnectParams, Et as validateUpdateRunParams, F as validateDevicePairListParams, Ft as ErrorCodes, G as validateExecApprovalsSetParams, Gt as ensureDeviceToken, H as validateExecApprovalsGetParams, Ht as normalizeDeviceMetadataForAuth, I as validateDevicePairRejectParams, It as errorShape, J as validateNodeDescribeParams, Jt as rejectDevicePairing, K as validateLogsTailParams, Kt as getPairedDevice, L as validateDevicePairRemoveParams, Lt as CHAT_SEND_SESSION_KEY_MAX_LENGTH, M as validateCronStatusParams, Mt as validateWizardStartParams, N as validateCronUpdateParams, Nt as validateWizardStatusParams, O as validateCronListParams, Ot as validateWebLoginStartParams, P as validateDevicePairApproveParams, Pt as PROTOCOL_VERSION, Q as validateNodeListParams, Qt as rotateDeviceToken, R as validateDeviceTokenRevokeParams, S as validateConfigSchemaLookupParams, St as validateSkillsUpdateParams, T as validateConfigSetParams, Tt as validateToolsCatalogParams, U as validateExecApprovalsNodeGetParams, V as validateExecApprovalResolveParams, Vt as buildDeviceAuthPayloadV3, W as validateExecApprovalsNodeSetParams, Wt as approveDevicePairing, X as validateNodeInvokeParams, Xt as requestDevicePairing, Y as validateNodeEventParams, Yt as removePairedDevice, Z as validateNodeInvokeResultParams, Zt as revokeDeviceToken, _ as validateChatInjectParams, _t as validateSessionsResolveParams, a as validateAgentWaitParams, an as deriveDeviceIdFromPublicKey, at as validatePollParams, b as validateConfigGetParams, bt as validateSkillsInstallParams, c as validateAgentsFilesGetParams, cn as verifyDeviceSignature, ct as validateSecretsResolveParams, d as validateAgentsListParams, dt as validateSessionsCompactParams, en as updatePairedDeviceMetadata, et as validateNodePairListParams, f as validateAgentsUpdateParams, ft as validateSessionsDeleteParams, g as validateChatHistoryParams, gt as validateSessionsResetParams, h as validateChatAbortParams, ht as validateSessionsPreviewParams, i as validateAgentParams, it as validateNodeRenameParams, j as validateCronRunsParams, jt as validateWizardNextParams, k as validateCronRemoveParams, kt as validateWebLoginWaitParams, l as validateAgentsFilesListParams, lt as validateSecretsResolveResult, m as validateChannelsStatusParams, mt as validateSessionsPatchParams, n as formatValidationErrors, nn as roleScopesAllow, nt as validateNodePairRequestParams, o as validateAgentsCreateParams, ot as validatePushTestParams, p as validateChannelsLogoutParams, pt as validateSessionsListParams, q as validateModelsListParams, qt as listDevicePairing, r as validateAgentIdentityParams, rt as validateNodePairVerifyParams, s as validateAgentsDeleteParams, sn as normalizeDevicePublicKeyBase64Url, st as validateRequestFrame, tn as verifyDeviceToken, tt as validateNodePairRejectParams, u as validateAgentsFilesSetParams, ut as validateSendParams, v as validateChatSendParams, vt as validateSessionsUsageParams, w as validateConfigSchemaParams, wt as validateTalkModeParams, x as validateConfigPatchParams, xt as validateSkillsStatusParams, y as validateConfigApplyParams, yt as validateSkillsBinsParams, z as validateDeviceTokenRotateParams, zt as parseSessionLabel } from "./client-IQ7AZ1A-.js";
-import { c as ADMIN_SCOPE$3, d as isNodeRoleMethod, n as callGateway, p as loadGatewayTlsRuntime$1, u as authorizeOperatorScopesForMethod } from "./call-Bl8osGeS.js";
+import { a as loadCombinedSessionStoreForGateway, c as resolveGatewaySessionStoreTarget, f as computeBackoff, i as listSessionsFromStore, l as resolveSessionModelRef, o as loadSessionEntry, p as sleepWithAbort, r as listAgentsForGateway, s as pruneLegacyStoreKeys, t as canonicalizeSpawnedByForAgent, u as lookupContextTokens } from "./session-utils-DqcL4tRB.js";
+import "./sqlite-B6J7wlgb.js";
+import { $ as validateNodePairApproveParams, $t as summarizeDeviceTokens, A as validateCronRunParams, At as validateWizardCancelParams, B as validateExecApprovalRequestParams, Bt as buildDeviceAuthPayload, C as validateConfigSchemaLookupResult, Ct as validateTalkConfigParams, D as validateCronAddParams, Dt as validateWakeParams, E as validateConnectParams, Et as validateUpdateRunParams, F as validateDevicePairListParams, Ft as ErrorCodes, G as validateExecApprovalsSetParams, Gt as ensureDeviceToken, H as validateExecApprovalsGetParams, Ht as normalizeDeviceMetadataForAuth, I as validateDevicePairRejectParams, It as errorShape, J as validateNodeDescribeParams, Jt as rejectDevicePairing, K as validateLogsTailParams, Kt as getPairedDevice, L as validateDevicePairRemoveParams, Lt as CHAT_SEND_SESSION_KEY_MAX_LENGTH, M as validateCronStatusParams, Mt as validateWizardStartParams, N as validateCronUpdateParams, Nt as validateWizardStatusParams, O as validateCronListParams, Ot as validateWebLoginStartParams, P as validateDevicePairApproveParams, Pt as PROTOCOL_VERSION, Q as validateNodeListParams, Qt as rotateDeviceToken, R as validateDeviceTokenRevokeParams, S as validateConfigSchemaLookupParams, St as validateSkillsUpdateParams, T as validateConfigSetParams, Tt as validateToolsCatalogParams, U as validateExecApprovalsNodeGetParams, V as validateExecApprovalResolveParams, Vt as buildDeviceAuthPayloadV3, W as validateExecApprovalsNodeSetParams, Wt as approveDevicePairing, X as validateNodeInvokeParams, Xt as requestDevicePairing, Y as validateNodeEventParams, Yt as removePairedDevice, Z as validateNodeInvokeResultParams, Zt as revokeDeviceToken, _ as validateChatInjectParams, _t as validateSessionsResolveParams, a as validateAgentWaitParams, an as deriveDeviceIdFromPublicKey, at as validatePollParams, b as validateConfigGetParams, bt as validateSkillsInstallParams, c as validateAgentsFilesGetParams, cn as verifyDeviceSignature, ct as validateSecretsResolveParams, d as validateAgentsListParams, dt as validateSessionsCompactParams, en as updatePairedDeviceMetadata, et as validateNodePairListParams, f as validateAgentsUpdateParams, ft as validateSessionsDeleteParams, g as validateChatHistoryParams, gt as validateSessionsResetParams, h as validateChatAbortParams, ht as validateSessionsPreviewParams, i as validateAgentParams, it as validateNodeRenameParams, j as validateCronRunsParams, jt as validateWizardNextParams, k as validateCronRemoveParams, kt as validateWebLoginWaitParams, l as validateAgentsFilesListParams, lt as validateSecretsResolveResult, m as validateChannelsStatusParams, mt as validateSessionsPatchParams, n as formatValidationErrors, nn as roleScopesAllow, nt as validateNodePairRequestParams, o as validateAgentsCreateParams, ot as validatePushTestParams, p as validateChannelsLogoutParams, pt as validateSessionsListParams, q as validateModelsListParams, qt as listDevicePairing, r as validateAgentIdentityParams, rt as validateNodePairVerifyParams, s as validateAgentsDeleteParams, sn as normalizeDevicePublicKeyBase64Url, st as validateRequestFrame, tn as verifyDeviceToken, tt as validateNodePairRejectParams, u as validateAgentsFilesSetParams, ut as validateSendParams, v as validateChatSendParams, vt as validateSessionsUsageParams, w as validateConfigSchemaParams, wt as validateTalkModeParams, x as validateConfigPatchParams, xt as validateSkillsStatusParams, y as validateConfigApplyParams, yt as validateSkillsBinsParams, z as validateDeviceTokenRotateParams, zt as parseSessionLabel } from "./client-DaFloLVI.js";
+import { c as ADMIN_SCOPE$3, d as isNodeRoleMethod, n as callGateway, p as loadGatewayTlsRuntime$1, u as authorizeOperatorScopesForMethod } from "./call-B56A9tyz.js";
 import "./pairing-token-fl66UgDc.js";
 import "./fetch-CT-djTs1.js";
-import { a as readChannelAllowFromStoreSync } from "./pairing-store-gcbFdvn2.js";
+import { a as readChannelAllowFromStoreSync } from "./pairing-store-BsYNiJyH.js";
 import { a as mergeExecApprovalsSocketDefaults, d as readExecApprovalsSnapshot, g as saveExecApprovals, r as ensureExecApprovals, s as normalizeExecApprovals, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-C9sQPnw_.js";
-import { _ as matchSystemRunApprovalBinding, g as buildSystemRunApprovalBinding, h as resolveSystemRunApprovalRuntimeContext, m as resolveSystemRunApprovalRequestContext, v as missingSystemRunApprovalBinding, y as toSystemRunApprovalMismatchError } from "./nodes-screen-gvENU0qT.js";
-import { n as resolveSystemRunCommand } from "./system-run-command-B6YFaIn3.js";
+import { _ as matchSystemRunApprovalBinding, g as buildSystemRunApprovalBinding, h as resolveSystemRunApprovalRuntimeContext, m as resolveSystemRunApprovalRequestContext, v as missingSystemRunApprovalBinding, y as toSystemRunApprovalMismatchError } from "./nodes-screen-B7eOQ14A.js";
+import { n as resolveSystemRunCommand } from "./system-run-command-BlvZfJeb.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-EdDmn0JB.js";
-import { _ as updatePairedNodeMetadata, a as getRemoteSkillEligibility, b as getSkillsSnapshotVersion, c as refreshRemoteBinsForConnectedNodes, d as setSkillsRemoteRegistry, f as approveNodePairing, g as requestNodePairing, h as renamePairedNode, l as refreshRemoteNodeBins, m as rejectNodePairing, o as primeRemoteSkillsCache, p as listNodePairing, s as recordRemoteNodeInfo, u as removeRemoteNodeInfo, v as verifyNodeToken, x as registerSkillsChangeListener } from "./skill-commands-BvomqRJm.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-dFXahmgF.js";
-import { t as listAgentWorkspaceDirs } from "./workspace-dirs-Ch8qs0UH.js";
-import { t as getChannelActivity } from "./channel-activity-DFfVKdMC.js";
+import { _ as updatePairedNodeMetadata, a as getRemoteSkillEligibility, b as getSkillsSnapshotVersion, c as refreshRemoteBinsForConnectedNodes, d as setSkillsRemoteRegistry, f as approveNodePairing, g as requestNodePairing, h as renamePairedNode, l as refreshRemoteNodeBins, m as rejectNodePairing, o as primeRemoteSkillsCache, p as listNodePairing, s as recordRemoteNodeInfo, u as removeRemoteNodeInfo, v as verifyNodeToken, x as registerSkillsChangeListener } from "./skill-commands-C7_32HvU.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-CSPrerKx.js";
+import { t as listAgentWorkspaceDirs } from "./workspace-dirs--0e3kMf7.js";
+import { t as getChannelActivity } from "./channel-activity-ClJu0F_1.js";
 import { n as normalizePollInput } from "./polls-CPccP3Bz.js";
-import "./tables-Ckhi6C4h.js";
-import "./server-lifecycle-Bz_tILpw.js";
+import "./tables-DVqUjPRa.js";
+import "./server-lifecycle-5QwrD-pI.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-CiDn7D2Z.js";
-import { n as resolveMessageChannelSelection } from "./channel-selection-TEB-oKFB.js";
-import { i as buildChannelUiCatalog, t as applyPluginAutoEnable } from "./plugin-auto-enable-CPLdiF-6.js";
-import "./send-DR8brNFF.js";
-import "./outbound-attachment-BE3KAIhc.js";
+import { n as resolveMessageChannelSelection } from "./channel-selection-DHlVN8Pr.js";
+import { i as buildChannelUiCatalog, t as applyPluginAutoEnable } from "./plugin-auto-enable-BAHkcVP4.js";
+import "./send-Cms8uhN1.js";
+import "./outbound-attachment-Bui79r_g.js";
 import "./delivery-queue-B_HOp2X3.js";
-import "./send-BRb_0Ibb.js";
+import "./send-Dlp3HAiX.js";
 import "./proxy-CUsDSClP.js";
 import "./timeouts-DEnpCqGd.js";
-import { n as GATEWAY_AUTH_SURFACE_PATHS, p as isKnownSecretTargetId, r as evaluateGatewayAuthSurfaceStates } from "./runtime-config-collectors-DVZ-fK7E.js";
-import "./command-secret-targets-B1PuKXnU.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-BqSYoJSO.js";
+import { n as GATEWAY_AUTH_SURFACE_PATHS, p as isKnownSecretTargetId, r as evaluateGatewayAuthSurfaceStates } from "./runtime-config-collectors-DM4YW0m9.js";
+import "./command-secret-targets-CsIlET0p.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-BJ2MHcp9.js";
 import "./prompt-style-ezqCM_Sr.js";
-import "./pairing-labels-c6cTWTzi.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-CXFqQMtN.js";
-import { i as resolveMemorySearchConfig } from "./manager-DyZ-LIQS.js";
+import "./pairing-labels-DvrRVH1N.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-DjSgQlDO.js";
+import { i as resolveMemorySearchConfig } from "./manager-Mu3eMmUj.js";
 import { t as formatDocsLink } from "./links-BUkYLQQF.js";
 import { n as runCommandWithRuntime } from "./cli-utils-CI_KkT8q.js";
 import { t as formatHelpExamples } from "./help-format-B08o9IQj.js";
 import { n as withProgress } from "./progress-BNL5DRrQ.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-DDy1p1bH.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-n9vgDHer.js";
 import { i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-B3tx2v3N.js";
 import { t as ensureOpenClawCliOnPath } from "./path-env-CYGiAYuP.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-DYhQ651h.js";
 import { n as inheritOptionFromParent } from "./command-options-DEPpN8NK.js";
 import { t as WizardCancelledError } from "./prompts-ULYkmWPj.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-BAv58r5B.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-7ZBT3aJH.js";
-import { t as isWithinDir } from "./path-safety-h4lG_U1h.js";
-import "./install-safe-path-Brs51UVy.js";
-import "./skill-scanner-B_VveqAF.js";
-import { n as formatConfigIssueLines } from "./issue-format-8vbMtP-9.js";
-import { t as buildChannelAccountSnapshot } from "./status-CZmvZ4Du.js";
-import "./channels-status-issues-CHYRNB54.js";
-import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-DfzfKriI.js";
-import "./daemon-install-helpers-CVfc_ZXM.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-iby7tWX6.js";
+import { t as isWithinDir } from "./path-safety-FANXxHHr.js";
+import "./install-safe-path-NpGSerww.js";
+import "./skill-scanner-CTA9_1Ad.js";
+import { n as formatConfigIssueLines } from "./issue-format-BhYUpe8G.js";
+import { t as buildChannelAccountSnapshot } from "./status-CzDUyBhZ.js";
+import "./channels-status-issues-CmDh358n.js";
+import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-sxLRRmfh.js";
+import "./daemon-install-helpers-BWyx8Sx7.js";
 import "./runtime-guard-kzIyHhvr.js";
-import "./gateway-install-token-DpBkW5NL.js";
-import "./systemd-DunyHHc7.js";
-import "./service-A9LH2cqi.js";
-import "./lifecycle-core-D57bmaEM.js";
-import "./systemd-hints-Cc1WoU1g.js";
+import "./gateway-install-token-DUJ-X-CS.js";
+import "./systemd-QfmEIyC_.js";
+import "./service-VB8hrx3m.js";
+import "./lifecycle-core-BDRJ-gZl.js";
+import "./systemd-hints-C8DMAujY.js";
 import { t as parsePort$1 } from "./parse-port-DnJYkByg.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-DDOlXF-y.js";
-import { t as probeGateway } from "./probe-B01qwW3t.js";
-import "./diagnostics-BrA18SV4.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-Di0mFZWs.js";
+import { t as probeGateway } from "./probe-BSiLGREe.js";
+import "./diagnostics-CJLP-HQK.js";
 import "./table-n1r43DsC.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-e4-5Q3_T.js";
-import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-0ohfVTdd.js";
-import { t as discoverGatewayBeacons } from "./bonjour-discovery-Dk22JKmo.js";
-import { t as resolveConfiguredSecretInputString } from "./resolve-configured-secret-input-string-BdkI2Dl0.js";
-import { i as pickGatewaySelfPresence, r as getStatusSummary } from "./status-DGNyj-My.js";
-import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines, u as isCronSystemEvent } from "./health-CX11t-Su.js";
-import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-DIBwwDAL.js";
-import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-Bkq8Tao4.js";
-import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-DIn_d_mi.js";
-import "./onboarding.secret-input-D28tCmCi.js";
-import { t as runOnboardingWizard } from "./onboarding-C2ZQIZ5e.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-Dv9W1mnb.js";
+import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-Bto9UlKB.js";
+import { t as discoverGatewayBeacons } from "./bonjour-discovery-DBClG9uw.js";
+import { t as resolveConfiguredSecretInputString } from "./resolve-configured-secret-input-string-DvKJxAtp.js";
+import { i as pickGatewaySelfPresence, r as getStatusSummary } from "./status-BvATDhyx.js";
+import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines, u as isCronSystemEvent } from "./health-CqfjbU3N.js";
+import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-B1qVA62q.js";
+import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-CkpkengK.js";
+import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-BC8kvHYq.js";
+import "./onboarding.secret-input-yXmtdEMi.js";
+import { t as runOnboardingWizard } from "./onboarding-BV3dioI3.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-JhqWOAwU.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-C9AnxMKs.js";
-import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-Bqp9nIUg.js";
-import { n as collectEnabledInsecureOrDangerousFlags } from "./audit-qqRogHSL.js";
-import "./node-service-BirxNntZ.js";
-import "./status.update-CMY8gTu2.js";
-import { t as installSkill } from "./skills-install-jgMttMiG.js";
-import { t as runGatewayUpdate } from "./update-runner-BSMIDJ-p.js";
-import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-Ct8qaDh3.js";
-import { n as forceFreePortAndWait, r as waitForPortBindable } from "./ports-CrkPY1HU.js";
+import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-DdF7xJQa.js";
+import { n as collectEnabledInsecureOrDangerousFlags } from "./audit-DtKtvGnO.js";
+import "./node-service-DCfQospz.js";
+import "./status.update-DndHNWm3.js";
+import { t as installSkill } from "./skills-install-xhIs9n_2.js";
+import { t as runGatewayUpdate } from "./update-runner-CCB_wRmi.js";
+import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-ST8Op53v.js";
+import { n as forceFreePortAndWait, r as waitForPortBindable } from "./ports-CFvWMNlt.js";
 import { spawn, spawnSync } from "node:child_process";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import os from "node:os";
@@ -171,7 +171,7 @@ import * as fsSync from "node:fs";
 import fs from "node:fs";
 import chalk from "chalk";
 import { isDeepStrictEqual } from "node:util";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import crypto, { createHash, randomBytes, randomUUID } from "node:crypto";
 import { z } from "zod";
 import { CURRENT_SESSION_VERSION, SessionManager } from "@mariozechner/pi-coding-agent";
@@ -1313,7 +1313,7 @@ function resolveCheckIntervalMs(cfg) {
 }
 async function readState(statePath) {
 	try {
-		const raw = await fs$1.readFile(statePath, "utf-8");
+		const raw = await fsPromises.readFile(statePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		return parsed && typeof parsed === "object" ? parsed : {};
 	} catch {
@@ -1394,7 +1394,7 @@ async function runAutoUpdateCommand(params) {
 			path.join(params.root, "dist", "index.mjs")
 		];
 		for (const candidate of candidates) try {
-			await fs$1.access(candidate);
+			await fsPromises.access(candidate);
 			argv.push(execPath, candidate, ...baseArgs);
 			break;
 		} catch {}
@@ -4620,7 +4620,7 @@ function resolveCronRunLogPath(params) {
 }
 const writesByPath = /* @__PURE__ */ new Map();
 async function setSecureFileMode(filePath) {
-	await fs$1.chmod(filePath, 384).catch(() => void 0);
+	await fsPromises.chmod(filePath, 384).catch(() => void 0);
 }
 const DEFAULT_CRON_RUN_LOG_MAX_BYTES = 2e6;
 const DEFAULT_CRON_RUN_LOG_KEEP_LINES = 2e3;
@@ -4644,30 +4644,30 @@ async function drainPendingWrite(filePath) {
 	if (pending) await pending.catch(() => void 0);
 }
 async function pruneIfNeeded(filePath, opts) {
-	const stat = await fs$1.stat(filePath).catch(() => null);
+	const stat = await fsPromises.stat(filePath).catch(() => null);
 	if (!stat || stat.size <= opts.maxBytes) return;
-	const lines = (await fs$1.readFile(filePath, "utf-8").catch(() => "")).split("\n").map((l) => l.trim()).filter(Boolean);
+	const lines = (await fsPromises.readFile(filePath, "utf-8").catch(() => "")).split("\n").map((l) => l.trim()).filter(Boolean);
 	const kept = lines.slice(Math.max(0, lines.length - opts.keepLines));
 	const { randomBytes } = await import("node:crypto");
 	const tmp = `${filePath}.${process.pid}.${randomBytes(8).toString("hex")}.tmp`;
-	await fs$1.writeFile(tmp, `${kept.join("\n")}\n`, {
+	await fsPromises.writeFile(tmp, `${kept.join("\n")}\n`, {
 		encoding: "utf-8",
 		mode: 384
 	});
 	await setSecureFileMode(tmp);
-	await fs$1.rename(tmp, filePath);
+	await fsPromises.rename(tmp, filePath);
 	await setSecureFileMode(filePath);
 }
 async function appendCronRunLog(filePath, entry, opts) {
 	const resolved = path.resolve(filePath);
 	const next = (writesByPath.get(resolved) ?? Promise.resolve()).catch(() => void 0).then(async () => {
 		const runDir = path.dirname(resolved);
-		await fs$1.mkdir(runDir, {
+		await fsPromises.mkdir(runDir, {
 			recursive: true,
 			mode: 448
 		});
-		await fs$1.chmod(runDir, 448).catch(() => void 0);
-		await fs$1.appendFile(resolved, `${JSON.stringify(entry)}\n`, {
+		await fsPromises.chmod(runDir, 448).catch(() => void 0);
+		await fsPromises.appendFile(resolved, `${JSON.stringify(entry)}\n`, {
 			encoding: "utf-8",
 			mode: 384
 		});
@@ -4765,7 +4765,7 @@ function filterRunLogEntries(entries, opts) {
 async function readCronRunLogEntriesPage(filePath, opts) {
 	await drainPendingWrite(filePath);
 	const limit = Math.max(1, Math.min(200, Math.floor(opts?.limit ?? 50)));
-	const raw = await fs$1.readFile(path.resolve(filePath), "utf-8").catch(() => "");
+	const raw = await fsPromises.readFile(path.resolve(filePath), "utf-8").catch(() => "");
 	const statuses = normalizeRunStatuses(opts);
 	const deliveryStatuses = normalizeDeliveryStatuses(opts);
 	const query = opts?.query?.trim().toLowerCase() ?? "";
@@ -4801,7 +4801,7 @@ async function readCronRunLogEntriesPageAll(opts) {
 	const query = opts.query?.trim().toLowerCase() ?? "";
 	const sortDir = opts.sortDir === "asc" ? "asc" : "desc";
 	const runsDir = path.resolve(path.dirname(path.resolve(opts.storePath)), "runs");
-	const jsonlFiles = (await fs$1.readdir(runsDir, { withFileTypes: true }).catch(() => [])).filter((entry) => entry.isFile() && entry.name.endsWith(".jsonl")).map((entry) => path.join(runsDir, entry.name));
+	const jsonlFiles = (await fsPromises.readdir(runsDir, { withFileTypes: true }).catch(() => [])).filter((entry) => entry.isFile() && entry.name.endsWith(".jsonl")).map((entry) => path.join(runsDir, entry.name));
 	if (jsonlFiles.length === 0) return {
 		entries: [],
 		total: 0,
@@ -4812,7 +4812,7 @@ async function readCronRunLogEntriesPageAll(opts) {
 	};
 	await Promise.all(jsonlFiles.map((f) => drainPendingWrite(f)));
 	const filtered = filterRunLogEntries((await Promise.all(jsonlFiles.map(async (filePath) => {
-		return parseAllRunLogEntries(await fs$1.readFile(filePath, "utf-8").catch(() => ""));
+		return parseAllRunLogEntries(await fsPromises.readFile(filePath, "utf-8").catch(() => ""));
 	}))).flat(), {
 		statuses,
 		deliveryStatuses,
@@ -10390,7 +10390,7 @@ function resolveWorkspaceFilePathResultOrThrow(params) {
 }
 async function resolveWorkspaceRealPath(workspaceDir) {
 	try {
-		return await fs$1.realpath(workspaceDir);
+		return await fsPromises.realpath(workspaceDir);
 	} catch {
 		return path.resolve(workspaceDir);
 	}
@@ -10419,7 +10419,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 	};
 	let candidateLstat;
 	try {
-		candidateLstat = await fs$1.lstat(candidatePath);
+		candidateLstat = await fsPromises.lstat(candidatePath);
 	} catch (err) {
 		return resolveWorkspaceFilePathResultOrThrow({
 			error: err,
@@ -10430,7 +10430,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 	if (candidateLstat.isSymbolicLink()) {
 		let targetReal;
 		try {
-			targetReal = await fs$1.realpath(candidatePath);
+			targetReal = await fsPromises.realpath(candidatePath);
 		} catch (err) {
 			return resolveWorkspaceFilePathResultOrThrow({
 				error: err,
@@ -10440,7 +10440,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 		}
 		let targetStat;
 		try {
-			targetStat = await fs$1.stat(targetReal);
+			targetStat = await fsPromises.stat(targetReal);
 		} catch (err) {
 			return resolveWorkspaceFilePathResultOrThrow({
 				error: err,
@@ -10478,13 +10478,13 @@ async function resolveAgentWorkspaceFilePath(params) {
 	return {
 		kind: "ready",
 		requestPath,
-		ioPath: await fs$1.realpath(candidatePath).catch(() => candidatePath),
+		ioPath: await fsPromises.realpath(candidatePath).catch(() => candidatePath),
 		workspaceReal
 	};
 }
 async function statFileSafely(filePath) {
 	try {
-		const [stat, lstat] = await Promise.all([fs$1.stat(filePath), fs$1.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([fsPromises.stat(filePath), fsPromises.lstat(filePath)]);
 		if (lstat.isSymbolicLink() || !stat.isFile()) return null;
 		if (stat.nlink > 1) return null;
 		if (!sameFileIdentity(stat, lstat)) return null;
@@ -10578,7 +10578,7 @@ function respondAgentNotFound(respond, agentId) {
 async function moveToTrashBestEffort(pathname) {
 	if (!pathname) return;
 	try {
-		await fs$1.access(pathname);
+		await fsPromises.access(pathname);
 	} catch {
 		return;
 	}
@@ -10654,7 +10654,7 @@ const agentsHandlers = {
 			dir: workspaceDir,
 			ensureBootstrapFiles: !Boolean(nextConfig.agents?.defaults?.skipBootstrap)
 		});
-		await fs$1.mkdir(resolveSessionTranscriptsDirForAgent(agentId), { recursive: true });
+		await fsPromises.mkdir(resolveSessionTranscriptsDirForAgent(agentId), { recursive: true });
 		await writeConfigFile(nextConfig);
 		const safeName = sanitizeIdentityLine(rawName);
 		const emoji = resolveOptionalStringParam(params.emoji);
@@ -10667,7 +10667,7 @@ const agentsHandlers = {
 			...avatar ? [`- Avatar: ${sanitizeIdentityLine(avatar)}`] : [],
 			""
 		];
-		await fs$1.appendFile(identityPath, lines.join("\n"), "utf-8");
+		await fsPromises.appendFile(identityPath, lines.join("\n"), "utf-8");
 		respond(true, {
 			ok: true,
 			agentId,
@@ -10702,9 +10702,9 @@ const agentsHandlers = {
 		});
 		if (avatar) {
 			const workspace = workspaceDir ?? resolveAgentWorkspaceDir(nextConfig, agentId);
-			await fs$1.mkdir(workspace, { recursive: true });
+			await fsPromises.mkdir(workspace, { recursive: true });
 			const identityPath = path.join(workspace, DEFAULT_IDENTITY_FILENAME);
-			await fs$1.appendFile(identityPath, `\n- Avatar: ${sanitizeIdentityLine(avatar)}\n`, "utf-8");
+			await fsPromises.appendFile(identityPath, `\n- Avatar: ${sanitizeIdentityLine(avatar)}\n`, "utf-8");
 		}
 		respond(true, {
 			ok: true,
@@ -10828,7 +10828,7 @@ const agentsHandlers = {
 		const resolved = resolveAgentWorkspaceFileOrRespondError(params, respond);
 		if (!resolved) return;
 		const { agentId, workspaceDir, name } = resolved;
-		await fs$1.mkdir(workspaceDir, { recursive: true });
+		await fsPromises.mkdir(workspaceDir, { recursive: true });
 		const filePath = path.join(workspaceDir, name);
 		const resolvedPath = await resolveWorkspaceFilePathOrRespond({
 			respond,
@@ -13392,14 +13392,14 @@ function isRollingLogFile(file) {
 	return ROLLING_LOG_RE.test(path.basename(file));
 }
 async function resolveLogFile(file) {
-	if (await fs$1.stat(file).catch(() => null)) return file;
+	if (await fsPromises.stat(file).catch(() => null)) return file;
 	if (!isRollingLogFile(file)) return file;
 	const dir = path.dirname(file);
-	const entries = await fs$1.readdir(dir, { withFileTypes: true }).catch(() => null);
+	const entries = await fsPromises.readdir(dir, { withFileTypes: true }).catch(() => null);
 	if (!entries) return file;
 	return (await Promise.all(entries.filter((entry) => entry.isFile() && ROLLING_LOG_RE.test(entry.name)).map(async (entry) => {
 		const fullPath = path.join(dir, entry.name);
-		const fileStat = await fs$1.stat(fullPath).catch(() => null);
+		const fileStat = await fsPromises.stat(fullPath).catch(() => null);
 		return fileStat ? {
 			path: fullPath,
 			mtimeMs: fileStat.mtimeMs
@@ -13407,7 +13407,7 @@ async function resolveLogFile(file) {
 	}))).filter((entry) => Boolean(entry)).toSorted((a, b) => b.mtimeMs - a.mtimeMs)[0]?.path ?? file;
 }
 async function readLogSlice(params) {
-	const stat = await fs$1.stat(params.file).catch(() => null);
+	const stat = await fsPromises.stat(params.file).catch(() => null);
 	if (!stat) return {
 		cursor: 0,
 		size: 0,
@@ -13445,7 +13445,7 @@ async function readLogSlice(params) {
 		truncated,
 		reset
 	};
-	const handle = await fs$1.open(params.file, "r");
+	const handle = await fsPromises.open(params.file, "r");
 	try {
 		let prefix = "";
 		if (start > 0) {
@@ -14428,7 +14428,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-Bkfa7nls.js");
+			const { handleNodeEvent } = await import("./server-node-events-D8EKx-Ef.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -17567,7 +17567,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.OPENCLAW_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.OPENCLAW_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./server-CsG3vwY6.js");
+	const mod = override ? await import(override) : await import("./server-DUXr6A6B.js");
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -17800,7 +17800,7 @@ async function resolveFileWithinRoot(rootReal, urlPath) {
 	if (normalized.endsWith("/")) return await tryOpen(path.posix.join(rel, "index.html"));
 	const candidate = path.join(rootReal, rel);
 	try {
-		const st = await fs$1.lstat(candidate);
+		const st = await fsPromises.lstat(candidate);
 		if (st.isSymbolicLink()) return null;
 		if (st.isDirectory()) return await tryOpen(path.posix.join(rel, "index.html"));
 	} catch {}
@@ -17837,8 +17837,8 @@ async function resolveA2uiRoot() {
 	for (const dir of candidates) try {
 		const indexPath = path.join(dir, "index.html");
 		const bundlePath = path.join(dir, "a2ui.bundle.js");
-		await fs$1.stat(indexPath);
-		await fs$1.stat(bundlePath);
+		await fsPromises.stat(indexPath);
+		await fsPromises.stat(bundlePath);
 		return dir;
 	} catch {}
 	return null;
@@ -17847,7 +17847,7 @@ async function resolveA2uiRootReal() {
 	if (cachedA2uiRootReal !== void 0 && (cachedA2uiRootReal !== null || Date.now() - cachedA2uiResolvedAtMs < A2UI_ROOT_RETRY_NULL_AFTER_MS)) return cachedA2uiRootReal;
 	if (!resolvingA2uiRoot) resolvingA2uiRoot = (async () => {
 		const root = await resolveA2uiRoot();
-		cachedA2uiRootReal = root ? await fs$1.realpath(root) : null;
+		cachedA2uiRootReal = root ? await fsPromises.realpath(root) : null;
 		cachedA2uiResolvedAtMs = Date.now();
 		resolvingA2uiRoot = null;
 		return cachedA2uiRootReal;
@@ -18068,13 +18068,13 @@ function normalizeBasePath(rawPath) {
 }
 async function prepareCanvasRoot(rootDir) {
 	await ensureDir(rootDir);
-	const rootReal = await fs$1.realpath(rootDir);
+	const rootReal = await fsPromises.realpath(rootDir);
 	try {
 		const indexPath = path.join(rootReal, "index.html");
-		await fs$1.stat(indexPath);
+		await fsPromises.stat(indexPath);
 	} catch {
 		try {
-			await fs$1.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
+			await fsPromises.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
 		} catch {}
 	}
 	return rootReal;
@@ -21309,7 +21309,7 @@ async function resolveGatewayOwnerStatus(pid, payload, platform, port) {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fs$1.readFile(lockPath, "utf8");
+		const raw = await fsPromises.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number") return null;
 		if (typeof parsed.createdAt !== "string") return null;
@@ -21344,11 +21344,11 @@ async function acquireGatewayLock(opts = {}) {
 	const platform = opts.platform ?? process.platform;
 	const port = opts.port;
 	const { lockPath, configPath } = resolveGatewayLockPath(env);
-	await fs$1.mkdir(path.dirname(lockPath), { recursive: true });
+	await fsPromises.mkdir(path.dirname(lockPath), { recursive: true });
 	const startedAt = Date.now();
 	let lastPayload = null;
 	while (Date.now() - startedAt < timeoutMs) try {
-		const handle = await fs$1.open(lockPath, "wx");
+		const handle = await fsPromises.open(lockPath, "wx");
 		const startTime = platform === "linux" ? readLinuxStartTime(process.pid) : null;
 		const payload = {
 			pid: process.pid,
@@ -21362,7 +21362,7 @@ async function acquireGatewayLock(opts = {}) {
 			configPath,
 			release: async () => {
 				await handle.close().catch(() => void 0);
-				await fs$1.rm(lockPath, { force: true });
+				await fsPromises.rm(lockPath, { force: true });
 			}
 		};
 	} catch (err) {
@@ -21371,7 +21371,7 @@ async function acquireGatewayLock(opts = {}) {
 		const ownerPid = lastPayload?.pid;
 		const ownerStatus = ownerPid ? await resolveGatewayOwnerStatus(ownerPid, lastPayload, platform, port) : "unknown";
 		if (ownerStatus === "dead" && ownerPid) {
-			await fs$1.rm(lockPath, { force: true });
+			await fsPromises.rm(lockPath, { force: true });
 			continue;
 		}
 		if (ownerStatus !== "alive") {
@@ -21381,13 +21381,13 @@ async function acquireGatewayLock(opts = {}) {
 				stale = Number.isFinite(createdAt) ? Date.now() - createdAt > staleMs : false;
 			}
 			if (!stale) try {
-				const st = await fs$1.stat(lockPath);
+				const st = await fsPromises.stat(lockPath);
 				stale = Date.now() - st.mtimeMs > staleMs;
 			} catch {
 				stale = false;
 			}
 			if (stale) {
-				await fs$1.rm(lockPath, { force: true });
+				await fsPromises.rm(lockPath, { force: true });
 				continue;
 			}
 		}
@@ -23825,7 +23825,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-B_HOp2X3.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-754C3f2C.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-BSlI6o2D.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),