@hanzo/bot 2026.3.7 → 2026.3.8

package/dist/{image-BdZcUz8M.js → image-nUHQF6BX.js}

@@ -1,7 +1,7 @@
 import { mt as resolveAgentModelPrimaryValue, pt as resolveAgentModelFallbackValues } from "./run-with-concurrency-CzKd3TyW.js";
 import { f as isRecord, x as shortenHomeInString } from "./logger-03l-fZAz.js";
 import { A as requireApiKey, O as getApiKeyForModel, X as loadConfig, Xn as applyConfigEnvVars, _ as resolveImplicitBedrockProvider, br as normalizeSecretInput, dr as resolveOpenClawAgentDir, g as normalizeProviders, v as resolveImplicitCopilotProvider, y as resolveImplicitProviders } from "./model-selection-fkPvwOlf.js";
-import { P as sanitizeUserFacingText } from "./pi-embedded-helpers-DLm1Mtr2.js";
+import { P as sanitizeUserFacingText } from "./pi-embedded-helpers-Ck1qEeMH.js";
 import { n as redactToolDetail } from "./redact-BYyl-Ec1.js";
 import path from "node:path";
 import fs from "node:fs/promises";

package/dist/{image-ops-DBPCaLYI.js → image-ops-Bnk-bI_x.js}

@@ -1,4 +1,4 @@
-import { n as runExec } from "./exec-B45rafWZ.js";
+import { n as runExec } from "./exec-B8Hv4Nkd.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs/promises";

package/dist/{image-runtime-ueqmfx1a.js → image-runtime-B5M_-diF.js}

@@ -8,8 +8,8 @@ import "./accounts-CBuRL55f.js";
 import "./plugins-DRylFNZC.js";
 import "./accounts-CGE0qwJa.js";
 import "./image-ops-CZyK9ORn.js";
-import "./pi-embedded-helpers-DLm1Mtr2.js";
-import "./chrome--CFg5C_H.js";
+import "./pi-embedded-helpers-Ck1qEeMH.js";
+import "./chrome-B24-8NDM.js";
 import "./skills-CrM4sG5V.js";
 import "./path-alias-guards-CJ-rXOZR.js";
 import "./redact-BYyl-Ec1.js";
@@ -20,6 +20,6 @@ import "./store--iimBXGR.js";
 import "./accounts-BAQCqsoB.js";
 import "./paths-BtoBqtXI.js";
 import "./tool-images-CH22eok3.js";
-import { t as describeImageWithModel } from "./image-BdZcUz8M.js";
+import { t as describeImageWithModel } from "./image-nUHQF6BX.js";
 
 export { describeImageWithModel };

package/dist/image-runtime-CesErRak.js

@@ -0,0 +1,57 @@
+import "./globals-d3aR1MYC.js";
+import "./paths-BMo6kTge.js";
+import "./runtime-CvdZtNmJ.js";
+import "./subsystem-C6poMade.js";
+import "./boolean-ydSOedIP.js";
+import "./store-D8F_4CRR.js";
+import "./auth-profiles-BtxyXCZY.js";
+import "./agent-scope-BcruZHHR.js";
+import "./utils-BnC3HGtm.js";
+import "./openclaw-root-T5G2ldGE.js";
+import "./logger-DyQjakwH.js";
+import "./exec-B8Hv4Nkd.js";
+import "./github-copilot-token-BKQ4nXAw.js";
+import "./manifest-registry-m_hXBIk-.js";
+import "./version-DT-JIO28.js";
+import "./registry-DnJ84ILp.js";
+import "./ip-C7WWCRN7.js";
+import "./dock-nMBfeGKa.js";
+import "./accounts-C04lw_uh.js";
+import "./plugins-CCkC0dRo.js";
+import "./logging-kuFzZMsG.js";
+import "./accounts-CtzU1wJb.js";
+import "./image-ops-Bnk-bI_x.js";
+import "./message-channel-DOpIvru6.js";
+import "./pi-embedded-helpers-CCkKNz_h.js";
+import "./sandbox-DKscghPx.js";
+import "./tool-catalog-3w4XiWhy.js";
+import "./chrome-D4EfbMKb.js";
+import "./tailscale-DRFhBuh-.js";
+import "./tailnet-CInGXmk9.js";
+import "./ws-BwH2d97O.js";
+import "./auth-CWHo884l.js";
+import "./server-context-CcW_Z5sB.js";
+import "./frontmatter-B0viix_h.js";
+import "./skills-Cp-zTGor.js";
+import "./path-alias-guards-Bz8AnRb7.js";
+import "./paths-BBXgPm_n.js";
+import "./redact-B1GVGbib.js";
+import "./errors-ClLWB67m.js";
+import "./fs-safe-CFIinCN2.js";
+import "./proxy-env-a_fwG5uV.js";
+import "./store-DCoVH3mG.js";
+import "./ports-BxwhTkI2.js";
+import "./ports-lsof-C-KFQ3hh.js";
+import "./trash-DHZNy01S.js";
+import "./server-middleware-BtyTo4hI.js";
+import "./sessions-BkKVGWHa.js";
+import "./accounts-BVV0eCmx.js";
+import "./paths-gTdorMgW.js";
+import "./chat-envelope-DVKDDTSu.js";
+import "./tool-images-BwtNIRsT.js";
+import "./thinking-C0gzzPsv.js";
+import "./models-config-D_IvpQGa.js";
+import { t as describeImageWithModel } from "./image-m1GU1uco.js";
+import "./tool-display-qTfeZx-b.js";
+
+export { describeImageWithModel };

package/dist/{image-runtime-xqxW2PQA.js → image-runtime-y4msd5bn.js}

@@ -11,8 +11,8 @@ import "./accounts-Cp7zE1zb.js";
 import "./plugins-YJZX7mvv.js";
 import "./accounts-C_LXSS3x.js";
 import "./image-ops-C-QWxnVw.js";
-import "./pi-embedded-helpers-BtnBVL-4.js";
-import "./chrome-jCt9JCU8.js";
+import "./pi-embedded-helpers-xIXwvwuE.js";
+import "./chrome-C7OwLtx9.js";
 import "./frontmatter-B6XNqDx2.js";
 import "./skills-BDJUqEFI.js";
 import "./path-alias-guards-BCv18tKc.js";
@@ -24,6 +24,6 @@ import "./store-cJlS-gR6.js";
 import "./accounts-B4Cft76I.js";
 import "./paths-l8GkNRRD.js";
 import "./tool-images-D9pdW1gE.js";
-import { t as describeImageWithModel } from "./image-DSK1hSSV.js";
+import { t as describeImageWithModel } from "./image-BOybyCis.js";
 
 export { describeImageWithModel };

package/dist/{inspect-BVm4U2OP.js → inspect-CMuOPXUf.js}

@@ -1,5 +1,5 @@
-import { f as resolveGatewaySystemdServiceName, l as resolveGatewayLaunchAgentLabel, n as GATEWAY_SERVICE_KIND, p as resolveGatewayWindowsTaskName, r as GATEWAY_SERVICE_MARKER } from "./constants-BgSj-mRP.js";
-import { n as execSchtasks } from "./service-BJxGQl0h.js";
+import { f as resolveGatewaySystemdServiceName, l as resolveGatewayLaunchAgentLabel, n as GATEWAY_SERVICE_KIND, p as resolveGatewayWindowsTaskName, r as GATEWAY_SERVICE_MARKER } from "./constants-CkIxhEvX.js";
+import { n as execSchtasks } from "./service-DnXLOpYd.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 

package/dist/{install-safe-path-Df97RWiJ.js → install-safe-path-BxdyoAni.js}

@@ -1,6 +1,6 @@
-import { f as isNotFoundPathError, p as isPathInside } from "./openclaw-root-BFfBQ6FD.js";
-import { a as openWritableFileWithinRoot, t as SafeOpenError } from "./fs-safe-DtMJsayp.js";
-import { n as resolveSafeBaseDir } from "./path-safety-DwIbN_B2.js";
+import { f as isNotFoundPathError, p as isPathInside } from "./openclaw-root-T5G2ldGE.js";
+import { a as openWritableFileWithinRoot, t as SafeOpenError } from "./fs-safe-CFIinCN2.js";
+import { n as resolveSafeBaseDir } from "./path-safety-EkGa1GqP.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { createHash } from "node:crypto";

package/dist/{installs-BGMsioU1.js → installs-c4kWJSG4.js}

@@ -1,11 +1,11 @@
-import { t as CONFIG_DIR, v as resolveUserPath } from "./utils-cwpAMi-t.js";
-import { o as loadPluginManifest, s as resolvePackageExtensionEntries } from "./manifest-registry-9oWnIuht.js";
-import { i as isPathInside, r as extensionUsesSkippedScannerPath } from "./legacy-names-D3aIn6ij.js";
-import { S as validateRegistryNpmSpec } from "./skills-DjMDgmlj.js";
-import { c as writeFileFromPathWithinRoot } from "./fs-safe-DtMJsayp.js";
-import { a as unscopedPackageName, c as fileExists, l as readJsonFile, n as resolveSafeInstallDir, r as safeDirName, u as resolveArchiveKind } from "./install-safe-path-Df97RWiJ.js";
-import { a as installPackageDir, c as resolveTimedInstallModeOptions, d as buildNpmResolutionFields, f as resolveArchiveSourcePath, i as resolveCanonicalInstallTarget, l as resolveExistingInstallPath, n as installFromNpmSpecArchiveWithInstaller, r as ensureInstallTargetAvailable, s as resolveInstallModeOptions, t as finalizeNpmSpecArchiveInstall, u as withExtractedArchiveRoot } from "./npm-pack-install-_OjtFm2J.js";
-import { t as scanDirectoryWithSummary } from "./skill-scanner-B5APVdka.js";
+import { t as CONFIG_DIR, v as resolveUserPath } from "./utils-BnC3HGtm.js";
+import { o as loadPluginManifest, s as resolvePackageExtensionEntries } from "./manifest-registry-m_hXBIk-.js";
+import { i as isPathInside, r as extensionUsesSkippedScannerPath } from "./legacy-names-DV-6rguu.js";
+import { S as validateRegistryNpmSpec } from "./skills-Cp-zTGor.js";
+import { c as writeFileFromPathWithinRoot } from "./fs-safe-CFIinCN2.js";
+import { a as unscopedPackageName, c as fileExists, l as readJsonFile, n as resolveSafeInstallDir, r as safeDirName, u as resolveArchiveKind } from "./install-safe-path-BxdyoAni.js";
+import { a as installPackageDir, c as resolveTimedInstallModeOptions, d as buildNpmResolutionFields, f as resolveArchiveSourcePath, i as resolveCanonicalInstallTarget, l as resolveExistingInstallPath, n as installFromNpmSpecArchiveWithInstaller, r as ensureInstallTargetAvailable, s as resolveInstallModeOptions, t as finalizeNpmSpecArchiveInstall, u as withExtractedArchiveRoot } from "./npm-pack-install-B0X6q-Co.js";
+import { t as scanDirectoryWithSummary } from "./skill-scanner-C6efDeWr.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 

package/dist/ip-C7WWCRN7.js

@@ -0,0 +1,204 @@
+import ipaddr from "ipaddr.js";
+
+//#region src/shared/net/ip.ts
+const BLOCKED_IPV4_SPECIAL_USE_RANGES = new Set([
+	"unspecified",
+	"broadcast",
+	"multicast",
+	"linkLocal",
+	"loopback",
+	"carrierGradeNat",
+	"private",
+	"reserved"
+]);
+const PRIVATE_OR_LOOPBACK_IPV4_RANGES = new Set([
+	"loopback",
+	"private",
+	"linkLocal",
+	"carrierGradeNat"
+]);
+const BLOCKED_IPV6_SPECIAL_USE_RANGES = new Set([
+	"unspecified",
+	"loopback",
+	"linkLocal",
+	"uniqueLocal",
+	"multicast"
+]);
+const RFC2544_BENCHMARK_PREFIX = [ipaddr.IPv4.parse("198.18.0.0"), 15];
+const EMBEDDED_IPV4_SENTINEL_RULES = [
+	{
+		matches: (parts) => parts[0] === 0 && parts[1] === 0 && parts[2] === 0 && parts[3] === 0 && parts[4] === 0 && parts[5] === 0,
+		toHextets: (parts) => [parts[6], parts[7]]
+	},
+	{
+		matches: (parts) => parts[0] === 100 && parts[1] === 65435 && parts[2] === 1 && parts[3] === 0 && parts[4] === 0 && parts[5] === 0,
+		toHextets: (parts) => [parts[6], parts[7]]
+	},
+	{
+		matches: (parts) => parts[0] === 8194,
+		toHextets: (parts) => [parts[1], parts[2]]
+	},
+	{
+		matches: (parts) => parts[0] === 8193 && parts[1] === 0,
+		toHextets: (parts) => [parts[6] ^ 65535, parts[7] ^ 65535]
+	},
+	{
+		matches: (parts) => (parts[4] & 64767) === 0 && parts[5] === 24318,
+		toHextets: (parts) => [parts[6], parts[7]]
+	}
+];
+function stripIpv6Brackets(value) {
+	if (value.startsWith("[") && value.endsWith("]")) return value.slice(1, -1);
+	return value;
+}
+function isNumericIpv4LiteralPart(value) {
+	return /^[0-9]+$/.test(value) || /^0x[0-9a-f]+$/i.test(value);
+}
+function parseIpv6WithEmbeddedIpv4(raw) {
+	if (!raw.includes(":") || !raw.includes(".")) return;
+	const match = /^(.*:)([^:%]+(?:\.[^:%]+){3})(%[0-9A-Za-z]+)?$/i.exec(raw);
+	if (!match) return;
+	const [, prefix, embeddedIpv4, zoneSuffix = ""] = match;
+	if (!ipaddr.IPv4.isValidFourPartDecimal(embeddedIpv4)) return;
+	const octets = embeddedIpv4.split(".").map((part) => Number.parseInt(part, 10));
+	const normalizedIpv6 = `${prefix}${(octets[0] << 8 | octets[1]).toString(16)}:${(octets[2] << 8 | octets[3]).toString(16)}${zoneSuffix}`;
+	if (!ipaddr.IPv6.isValid(normalizedIpv6)) return;
+	return ipaddr.IPv6.parse(normalizedIpv6);
+}
+function isIpv4Address(address) {
+	return address.kind() === "ipv4";
+}
+function isIpv6Address(address) {
+	return address.kind() === "ipv6";
+}
+function normalizeIpv4MappedAddress(address) {
+	if (!isIpv6Address(address)) return address;
+	if (!address.isIPv4MappedAddress()) return address;
+	return address.toIPv4Address();
+}
+function parseCanonicalIpAddress(raw) {
+	const trimmed = raw?.trim();
+	if (!trimmed) return;
+	const normalized = stripIpv6Brackets(trimmed);
+	if (!normalized) return;
+	if (ipaddr.IPv4.isValid(normalized)) {
+		if (!ipaddr.IPv4.isValidFourPartDecimal(normalized)) return;
+		return ipaddr.IPv4.parse(normalized);
+	}
+	if (ipaddr.IPv6.isValid(normalized)) return ipaddr.IPv6.parse(normalized);
+	return parseIpv6WithEmbeddedIpv4(normalized);
+}
+function parseLooseIpAddress(raw) {
+	const trimmed = raw?.trim();
+	if (!trimmed) return;
+	const normalized = stripIpv6Brackets(trimmed);
+	if (!normalized) return;
+	if (ipaddr.isValid(normalized)) return ipaddr.parse(normalized);
+	return parseIpv6WithEmbeddedIpv4(normalized);
+}
+function normalizeIpAddress(raw) {
+	const parsed = parseCanonicalIpAddress(raw);
+	if (!parsed) return;
+	return normalizeIpv4MappedAddress(parsed).toString().toLowerCase();
+}
+function isCanonicalDottedDecimalIPv4(raw) {
+	const trimmed = raw?.trim();
+	if (!trimmed) return false;
+	const normalized = stripIpv6Brackets(trimmed);
+	if (!normalized) return false;
+	return ipaddr.IPv4.isValidFourPartDecimal(normalized);
+}
+function isLegacyIpv4Literal(raw) {
+	const trimmed = raw?.trim();
+	if (!trimmed) return false;
+	const normalized = stripIpv6Brackets(trimmed);
+	if (!normalized || normalized.includes(":")) return false;
+	if (isCanonicalDottedDecimalIPv4(normalized)) return false;
+	const parts = normalized.split(".");
+	if (parts.length === 0 || parts.length > 4) return false;
+	if (parts.some((part) => part.length === 0)) return false;
+	if (!parts.every((part) => isNumericIpv4LiteralPart(part))) return false;
+	return true;
+}
+function isLoopbackIpAddress(raw) {
+	const parsed = parseCanonicalIpAddress(raw);
+	if (!parsed) return false;
+	return normalizeIpv4MappedAddress(parsed).range() === "loopback";
+}
+function isPrivateOrLoopbackIpAddress(raw) {
+	const parsed = parseCanonicalIpAddress(raw);
+	if (!parsed) return false;
+	const normalized = normalizeIpv4MappedAddress(parsed);
+	if (isIpv4Address(normalized)) return PRIVATE_OR_LOOPBACK_IPV4_RANGES.has(normalized.range());
+	return isBlockedSpecialUseIpv6Address(normalized);
+}
+function isBlockedSpecialUseIpv6Address(address) {
+	if (BLOCKED_IPV6_SPECIAL_USE_RANGES.has(address.range())) return true;
+	return (address.parts[0] & 65472) === 65216;
+}
+function isRfc1918Ipv4Address(raw) {
+	const parsed = parseCanonicalIpAddress(raw);
+	if (!parsed || !isIpv4Address(parsed)) return false;
+	return parsed.range() === "private";
+}
+function isCarrierGradeNatIpv4Address(raw) {
+	const parsed = parseCanonicalIpAddress(raw);
+	if (!parsed || !isIpv4Address(parsed)) return false;
+	return parsed.range() === "carrierGradeNat";
+}
+function isBlockedSpecialUseIpv4Address(address, options = {}) {
+	const inRfc2544BenchmarkRange = address.match(RFC2544_BENCHMARK_PREFIX);
+	if (inRfc2544BenchmarkRange && options.allowRfc2544BenchmarkRange === true) return false;
+	return BLOCKED_IPV4_SPECIAL_USE_RANGES.has(address.range()) || inRfc2544BenchmarkRange;
+}
+function decodeIpv4FromHextets(high, low) {
+	const octets = [
+		high >>> 8 & 255,
+		high & 255,
+		low >>> 8 & 255,
+		low & 255
+	];
+	return ipaddr.IPv4.parse(octets.join("."));
+}
+function extractEmbeddedIpv4FromIpv6(address) {
+	if (address.isIPv4MappedAddress()) return address.toIPv4Address();
+	if (address.range() === "rfc6145") return decodeIpv4FromHextets(address.parts[6], address.parts[7]);
+	if (address.range() === "rfc6052") return decodeIpv4FromHextets(address.parts[6], address.parts[7]);
+	for (const rule of EMBEDDED_IPV4_SENTINEL_RULES) {
+		if (!rule.matches(address.parts)) continue;
+		const [high, low] = rule.toHextets(address.parts);
+		return decodeIpv4FromHextets(high, low);
+	}
+}
+function isIpInCidr(ip, cidr) {
+	const normalizedIp = parseCanonicalIpAddress(ip);
+	if (!normalizedIp) return false;
+	const candidate = cidr.trim();
+	if (!candidate) return false;
+	const comparableIp = normalizeIpv4MappedAddress(normalizedIp);
+	if (!candidate.includes("/")) {
+		const exact = parseCanonicalIpAddress(candidate);
+		if (!exact) return false;
+		const comparableExact = normalizeIpv4MappedAddress(exact);
+		return comparableIp.kind() === comparableExact.kind() && comparableIp.toString() === comparableExact.toString();
+	}
+	let parsedCidr;
+	try {
+		parsedCidr = ipaddr.parseCIDR(candidate);
+	} catch {
+		return false;
+	}
+	const [baseAddress, prefixLength] = parsedCidr;
+	const comparableBase = normalizeIpv4MappedAddress(baseAddress);
+	if (comparableIp.kind() !== comparableBase.kind()) return false;
+	try {
+		if (isIpv4Address(comparableIp) && isIpv4Address(comparableBase)) return comparableIp.match([comparableBase, prefixLength]);
+		if (isIpv6Address(comparableIp) && isIpv6Address(comparableBase)) return comparableIp.match([comparableBase, prefixLength]);
+		return false;
+	} catch {
+		return false;
+	}
+}
+
+//#endregion
+export { isCarrierGradeNatIpv4Address as a, isIpv6Address as c, isPrivateOrLoopbackIpAddress as d, isRfc1918Ipv4Address as f, parseLooseIpAddress as h, isCanonicalDottedDecimalIPv4 as i, isLegacyIpv4Literal as l, parseCanonicalIpAddress as m, isBlockedSpecialUseIpv4Address as n, isIpInCidr as o, normalizeIpAddress as p, isBlockedSpecialUseIpv6Address as r, isIpv4Address as s, extractEmbeddedIpv4FromIpv6 as t, isLoopbackIpAddress as u };

package/dist/{ipv4-Difv_P0_.js → ipv4-DcjwXncJ.js}

@@ -1,5 +1,5 @@
-import { Ot as parseCanonicalIpAddress, St as isIpv6Address, vt as isCanonicalDottedDecimalIPv4 } from "./auth-profiles-BCHBDrea.js";
-import { o as getTailnetHostname } from "./tailscale-DOG3cjSj.js";
+import { c as isIpv6Address, i as isCanonicalDottedDecimalIPv4, m as parseCanonicalIpAddress } from "./ip-C7WWCRN7.js";
+import { o as getTailnetHostname } from "./tailscale-DRFhBuh-.js";
 
 //#region src/gateway/gateway-config-prompts.shared.ts
 const TAILSCALE_EXPOSURE_OPTIONS = [

package/dist/{ir-CaGizvli.js → ir-BjnGKA2N.js}

@@ -1,12 +1,12 @@
 import { a as logVerbose, c as shouldLogVerbose } from "./globals-d3aR1MYC.js";
-import { _ as normalizeAccountId } from "./session-key-k6urs9r-.js";
-import { v as resolveUserPath } from "./utils-cwpAMi-t.js";
-import { y as resolveAccountEntry } from "./accounts-Da-TWEIc.js";
-import { r as normalizeChannelId } from "./plugins-D3Wuignn.js";
-import { _ as maxBytesForKind, a as hasAlphaChannel, c as detectMime, l as extensionForMime, m as kindFromMime, o as optimizeImageToPng, r as convertHeicToJpeg, s as resizeToJpeg } from "./image-ops-DBPCaLYI.js";
-import { t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-7mpcAPwa.js";
-import { s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-DtMJsayp.js";
-import { a as getDefaultMediaLocalRoots, n as fetchRemoteMedia } from "./fetch-COQIeEVX.js";
+import { _ as normalizeAccountId } from "./session-key-CC77ya0a.js";
+import { v as resolveUserPath } from "./utils-BnC3HGtm.js";
+import { y as resolveAccountEntry } from "./accounts-C04lw_uh.js";
+import { r as normalizeChannelId } from "./plugins-CCkC0dRo.js";
+import { _ as maxBytesForKind, a as hasAlphaChannel, c as detectMime, l as extensionForMime, m as kindFromMime, o as optimizeImageToPng, r as convertHeicToJpeg, s as resizeToJpeg } from "./image-ops-Bnk-bI_x.js";
+import { t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-DOpIvru6.js";
+import { s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-CFIinCN2.js";
+import { a as getDefaultMediaLocalRoots, n as fetchRemoteMedia } from "./fetch-BPh3R9xH.js";
 import { fileURLToPath } from "node:url";
 import path from "node:path";
 import fs from "node:fs/promises";

package/dist/{issue-format-DjqrcimU.js → issue-format-BMPYbT1P.js}

@@ -1,4 +1,4 @@
-import { Bt as sanitizeTerminalText } from "./auth-profiles-BCHBDrea.js";
+import { Tt as sanitizeTerminalText } from "./auth-profiles-BtxyXCZY.js";
 
 //#region src/config/issue-format.ts
 function normalizeConfigIssuePath(path) {

package/dist/json-file-CNp4GTiH.js

@@ -0,0 +1,25 @@
+import path from "node:path";
+import fs from "node:fs";
+
+//#region src/infra/json-file.ts
+function loadJsonFile(pathname) {
+	try {
+		if (!fs.existsSync(pathname)) return;
+		const raw = fs.readFileSync(pathname, "utf8");
+		return JSON.parse(raw);
+	} catch {
+		return;
+	}
+}
+function saveJsonFile(pathname, data) {
+	const dir = path.dirname(pathname);
+	if (!fs.existsSync(dir)) fs.mkdirSync(dir, {
+		recursive: true,
+		mode: 448
+	});
+	fs.writeFileSync(pathname, `${JSON.stringify(data, null, 2)}\n`, "utf8");
+	fs.chmodSync(pathname, 384);
+}
+
+//#endregion
+export { saveJsonFile as n, loadJsonFile as t };

package/dist/{lifecycle-core-BXWGDU3R.js → lifecycle-core-fN_BonzB.js}

@@ -1,15 +1,15 @@
 import { d as colorize, f as isRich, g as getResolvedLoggerSettings, p as theme } from "./globals-d3aR1MYC.js";
 import { d as resolveIsNixMode } from "./paths-BMo6kTge.js";
-import { d as defaultRuntime } from "./subsystem-Cfn2Pryx.js";
-import { z as loadConfig } from "./auth-profiles-BCHBDrea.js";
-import { t as formatCliCommand } from "./command-format-CLEQe4bk.js";
-import { n as resolveGatewayCredentialsFromConfig, t as isGatewaySecretRefUnavailableError } from "./credentials-DVX7Krq5.js";
-import { f as resolveGatewaySystemdServiceName, l as resolveGatewayLaunchAgentLabel, p as resolveGatewayWindowsTaskName } from "./constants-BgSj-mRP.js";
-import { t as isWSL } from "./wsl-Cx5T6MYb.js";
-import { r as isSystemdUserServiceAvailable } from "./systemd-tpTWQ79a.js";
-import { s as resolveGatewayLogPaths } from "./service-BJxGQl0h.js";
-import { a as checkTokenDrift, n as renderSystemdUnavailableHints } from "./systemd-hints-CLH4_-IK.js";
-import { t as parsePort } from "./parse-port-CboE2EQm.js";
+import { n as defaultRuntime } from "./runtime-CvdZtNmJ.js";
+import { z as loadConfig } from "./auth-profiles-BtxyXCZY.js";
+import { t as formatCliCommand } from "./command-format-MESnUO9S.js";
+import { n as resolveGatewayCredentialsFromConfig, t as isGatewaySecretRefUnavailableError } from "./credentials-SIFZMlmo.js";
+import { f as resolveGatewaySystemdServiceName, l as resolveGatewayLaunchAgentLabel, p as resolveGatewayWindowsTaskName } from "./constants-CkIxhEvX.js";
+import { t as isWSL } from "./wsl-DLw4LET-.js";
+import { r as isSystemdUserServiceAvailable } from "./systemd-tjVNbfBk.js";
+import { s as resolveGatewayLogPaths } from "./service-DnXLOpYd.js";
+import { a as checkTokenDrift, n as renderSystemdUnavailableHints } from "./systemd-hints-Da4Q7Orc.js";
+import { t as parsePort } from "./parse-port-DjjWDROB.js";
 import { Writable } from "node:stream";
 
 //#region src/cli/daemon-cli/response.ts

package/dist/{links-C7eMwu1P.js → links-DZZ9QxWA.js}

@@ -1,4 +1,4 @@
-import { l as formatTerminalLink } from "./utils-cwpAMi-t.js";
+import { l as formatTerminalLink } from "./utils-BnC3HGtm.js";
 
 //#region src/terminal/links.ts
 const DOCS_ROOT = "https://docs.openclaw.ai";

package/dist/llm-slug-generator.js

@@ -8,19 +8,19 @@ import "./github-copilot-token-BDioPmd6.js";
 import "./legacy-names-DZdACm3t.js";
 import "./thinking-C3b10cHs.js";
 import "./tokens-mtgzW7UN.js";
-import { t as runEmbeddedPiAgent } from "./pi-embedded-DBn841N-.js";
+import { t as runEmbeddedPiAgent } from "./pi-embedded-BHXPs-Ix.js";
 import "./accounts-Cp7zE1zb.js";
 import "./plugins-YJZX7mvv.js";
 import "./send-BrlM68Dd.js";
 import "./send-CKIMBFLs.js";
-import "./deliver-BVtVDxwX.js";
+import "./deliver-D8dBbzpu.js";
 import "./diagnostic-D1IbJfJM.js";
 import "./accounts-C_LXSS3x.js";
 import "./image-ops-C-QWxnVw.js";
 import "./send-Cp6dmr2f.js";
 import "./pi-model-discovery-Cucu_uXw.js";
-import "./pi-embedded-helpers-BtnBVL-4.js";
-import "./chrome-jCt9JCU8.js";
+import "./pi-embedded-helpers-xIXwvwuE.js";
+import "./chrome-C7OwLtx9.js";
 import "./frontmatter-B6XNqDx2.js";
 import "./skills-BDJUqEFI.js";
 import "./path-alias-guards-BCv18tKc.js";
@@ -32,8 +32,8 @@ import "./store-cJlS-gR6.js";
 import "./accounts-B4Cft76I.js";
 import "./paths-l8GkNRRD.js";
 import "./tool-images-D9pdW1gE.js";
-import "./image-DSK1hSSV.js";
-import "./audio-transcription-runner-CAOjjGxN.js";
+import "./image-BOybyCis.js";
+import "./audio-transcription-runner-X1KzI7dF.js";
 import "./fetch-C6doVJxZ.js";
 import "./fetch-guard-C-neMX4E.js";
 import "./api-key-rotation-iYITGuLK.js";

package/dist/local-launch-C2RER-G3.js

@@ -0,0 +1,126 @@
+import "./globals-d3aR1MYC.js";
+import "./paths-BMo6kTge.js";
+import "./runtime-CvdZtNmJ.js";
+import "./subsystem-C6poMade.js";
+import "./boolean-ydSOedIP.js";
+import "./store-D8F_4CRR.js";
+import { G as writeConfigFile } from "./auth-profiles-BtxyXCZY.js";
+import "./agent-scope-BcruZHHR.js";
+import "./utils-BnC3HGtm.js";
+import "./openclaw-root-T5G2ldGE.js";
+import "./logger-DyQjakwH.js";
+import "./exec-B8Hv4Nkd.js";
+import "./github-copilot-token-BKQ4nXAw.js";
+import "./manifest-registry-m_hXBIk-.js";
+import "./version-DT-JIO28.js";
+import "./registry-DnJ84ILp.js";
+import "./ip-C7WWCRN7.js";
+import "./dock-nMBfeGKa.js";
+import "./accounts-C04lw_uh.js";
+import "./plugins-CCkC0dRo.js";
+import "./logging-kuFzZMsG.js";
+import "./accounts-CtzU1wJb.js";
+import "./message-channel-DOpIvru6.js";
+import "./tailnet-CInGXmk9.js";
+import "./ws-BwH2d97O.js";
+import "./sessions-BkKVGWHa.js";
+import "./accounts-BVV0eCmx.js";
+import "./paths-gTdorMgW.js";
+import "./chat-envelope-DVKDDTSu.js";
+import "./device-identity-DtdLP7QQ.js";
+import "./client-Bvvecv3V.js";
+import "./call-DL23sPxF.js";
+import "./pairing-token-BIAdQuAM.js";
+import { f as openUrl } from "./onboard-helpers-BkwNJPNU.js";
+import "./prompt-style-DB_OyH4q.js";
+import os from "node:os";
+import path from "node:path";
+import { randomUUID } from "node:crypto";
+
+//#region src/commands/local-launch.ts
+/**
+* Local launch — starts the bot gateway on this machine and registers it
+* as a node on gw.hanzo.bot so it appears in the Hanzo Playground.
+*
+* Flow:
+* 1. Write config with gateway.mode = "local"
+* 2. Start the gateway server (HTTP + WS on port 18789)
+* 3. Connect to wss://gw.hanzo.bot as a remote node
+* 4. Open the Control UI in the user's browser
+* 5. Keep running until Ctrl+C
+*/
+const CLOUD_GATEWAY_URL = "wss://gw.hanzo.bot";
+const PLAYGROUND_NODES_URL = "https://app.hanzo.bot/nodes";
+const PLAYGROUND_URL = "https://app.hanzo.bot/playground";
+const DEFAULT_PORT = 18789;
+async function launchLocal(params) {
+	const { accessToken } = params;
+	await writeConfigFile({
+		gateway: {
+			mode: "local",
+			bind: "loopback",
+			auth: { mode: "token" }
+		},
+		agents: { defaults: { workspace: path.join(os.homedir(), ".hanzo", "bot", "workspace") } }
+	});
+	console.log("\n  Starting local gateway...\n");
+	const [{ startGatewayServer }, { GatewayClient }, { runGatewayLoop }, { getMachineDisplayName }, { loadOrCreateDeviceIdentity }, { VERSION }, { GATEWAY_CLIENT_MODES, GATEWAY_CLIENT_NAMES }, { NODE_SYSTEM_RUN_COMMANDS, NODE_EXEC_APPROVALS_COMMANDS, NODE_BROWSER_PROXY_COMMAND }, { defaultRuntime }] = await Promise.all([
+		import("./server-CG9eco0N.js").then((n) => n.t),
+		import("./client-Bvvecv3V.js").then((n) => n.n),
+		import("./run-loop-Zvh_699t.js").then((n) => n.n),
+		import("./machine-name-BWZ0tBHk.js").then((n) => n.n),
+		import("./device-identity-DtdLP7QQ.js").then((n) => n.n),
+		import("./version-DT-JIO28.js").then((n) => n.r),
+		import("./message-channel-DOpIvru6.js").then((n) => n.l),
+		import("./node-commands-sMomb3e1.js").then((n) => n.a),
+		import("./runtime-CvdZtNmJ.js").then((n) => n.r)
+	]);
+	const port = DEFAULT_PORT;
+	const displayName = await getMachineDisplayName();
+	const nodeId = randomUUID();
+	try {
+		await runGatewayLoop({
+			runtime: defaultRuntime,
+			lockPort: port,
+			start: async () => {
+				const server = await startGatewayServer(port, { bind: "loopback" });
+				new GatewayClient({
+					url: CLOUD_GATEWAY_URL,
+					token: accessToken,
+					instanceId: nodeId,
+					clientName: GATEWAY_CLIENT_NAMES.NODE_HOST,
+					clientDisplayName: displayName,
+					clientVersion: VERSION,
+					platform: process.platform,
+					mode: GATEWAY_CLIENT_MODES.NODE,
+					role: "node",
+					scopes: [],
+					caps: ["system"],
+					commands: [...NODE_SYSTEM_RUN_COMMANDS, ...NODE_EXEC_APPROVALS_COMMANDS],
+					deviceIdentity: loadOrCreateDeviceIdentity(),
+					onConnectError: (err) => {
+						console.error(`  Cloud gateway connect failed: ${err.message}`);
+					},
+					onClose: (code, reason) => {
+						console.error(`  Cloud gateway closed (${code}): ${reason}`);
+					}
+				}).start();
+				try {
+					await openUrl(`http://127.0.0.1:${port}/`);
+				} catch {}
+				console.log(`  Gateway running on http://127.0.0.1:${port}/`);
+				console.log(`  Connected to Hanzo Cloud as "${displayName}"\n`);
+				console.log(`  View your node:    ${PLAYGROUND_NODES_URL}`);
+				console.log(`  Open Playground:   ${PLAYGROUND_URL}\n`);
+				console.log("  Press Ctrl+C to disconnect.\n");
+				return server;
+			}
+		});
+	} catch (err) {
+		console.error(`  Gateway failed to start: ${err instanceof Error ? err.message : String(err)}`);
+		process.exit(1);
+	}
+}
+
+//#endregion
+export { launchLocal };

package/dist/{logger-DB-PHqB2.js → logger-DyQjakwH.js}

@@ -1,5 +1,6 @@
 import { h as getLogger, n as info, o as logVerboseConsole, t as danger, u as warn } from "./globals-d3aR1MYC.js";
-import { d as defaultRuntime, t as createSubsystemLogger } from "./subsystem-Cfn2Pryx.js";
+import { n as defaultRuntime } from "./runtime-CvdZtNmJ.js";
+import { t as createSubsystemLogger } from "./subsystem-C6poMade.js";
 
 //#region src/logger.ts
 const subsystemPrefixRe = /^([a-z][a-z0-9-]{1,20}):\s+(.*)$/i;

package/dist/{logging-CS4C9VwV.js → logging--bXnY6uw.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { t as CONFIG_PATH } from "./paths-BMo6kTge.js";
-import { a as displayPath } from "./utils-cwpAMi-t.js";
+import { a as displayPath } from "./utils-BnC3HGtm.js";
 
 //#region src/config/logging.ts
 var logging_exports = /* @__PURE__ */ __exportAll({