@hanzo/bot 2026.3.7 → 2026.3.8

package/dist/cli-DXbYdTNH.js

@@ -0,0 +1,162 @@
+import "./globals-d3aR1MYC.js";
+import "./paths-BMo6kTge.js";
+import "./runtime-CvdZtNmJ.js";
+import { t as createSubsystemLogger } from "./subsystem-C6poMade.js";
+import "./boolean-ydSOedIP.js";
+import "./store-D8F_4CRR.js";
+import { z as loadConfig } from "./auth-profiles-BtxyXCZY.js";
+import { d as resolveDefaultAgentId, u as resolveAgentWorkspaceDir } from "./agent-scope-BcruZHHR.js";
+import "./utils-BnC3HGtm.js";
+import "./openclaw-root-T5G2ldGE.js";
+import "./logger-DyQjakwH.js";
+import "./exec-B8Hv4Nkd.js";
+import "./github-copilot-token-BKQ4nXAw.js";
+import "./manifest-registry-m_hXBIk-.js";
+import "./version-DT-JIO28.js";
+import "./registry-DnJ84ILp.js";
+import "./ip-C7WWCRN7.js";
+import "./dock-nMBfeGKa.js";
+import "./tokens-C3eENCf9.js";
+import { c as loadBotPlugins } from "./compact-CuLMew-8.js";
+import "./accounts-C04lw_uh.js";
+import "./plugins-CCkC0dRo.js";
+import "./logging-kuFzZMsG.js";
+import "./send-CIW-foVz.js";
+import "./send-CFNNbHEA.js";
+import "./machine-name-BWZ0tBHk.js";
+import "./deliver-Bge0HwrF.js";
+import "./diagnostic-CXxZq_XY.js";
+import "./restart-D97MOP8K.js";
+import "./accounts-CtzU1wJb.js";
+import "./image-ops-Bnk-bI_x.js";
+import "./send-CZtdjq0Y.js";
+import "./pi-model-discovery-6_opNECD.js";
+import "./message-channel-DOpIvru6.js";
+import "./pi-embedded-helpers-CCkKNz_h.js";
+import "./sandbox-DKscghPx.js";
+import "./tool-catalog-3w4XiWhy.js";
+import "./chrome-D4EfbMKb.js";
+import "./tailscale-DRFhBuh-.js";
+import "./tailnet-CInGXmk9.js";
+import "./ws-BwH2d97O.js";
+import "./auth-CWHo884l.js";
+import "./server-context-CcW_Z5sB.js";
+import "./frontmatter-B0viix_h.js";
+import "./skills-Cp-zTGor.js";
+import "./path-alias-guards-Bz8AnRb7.js";
+import "./paths-BBXgPm_n.js";
+import "./redact-B1GVGbib.js";
+import "./errors-ClLWB67m.js";
+import "./fs-safe-CFIinCN2.js";
+import "./proxy-env-a_fwG5uV.js";
+import "./store-DCoVH3mG.js";
+import "./ports-BxwhTkI2.js";
+import "./ports-lsof-C-KFQ3hh.js";
+import "./trash-DHZNy01S.js";
+import "./server-middleware-BtyTo4hI.js";
+import "./sessions-BkKVGWHa.js";
+import "./accounts-BVV0eCmx.js";
+import "./paths-gTdorMgW.js";
+import "./chat-envelope-DVKDDTSu.js";
+import "./tool-images-BwtNIRsT.js";
+import "./thinking-C0gzzPsv.js";
+import "./models-config-D_IvpQGa.js";
+import "./exec-approvals-allowlist-dlIMsRq0.js";
+import "./exec-safe-bin-runtime-policy-Ds-cMyOt.js";
+import "./model-catalog-DtjVcDuN.js";
+import "./fetch-BPh3R9xH.js";
+import "./audio-transcription-runner-bvBQs8UB.js";
+import "./fetch-guard-hL-C2yQz.js";
+import "./image-m1GU1uco.js";
+import "./tool-display-qTfeZx-b.js";
+import "./api-key-rotation-C0toONXd.js";
+import "./proxy-fetch-B-9MM6tH.js";
+import "./ir-BjnGKA2N.js";
+import "./render-CUAKPmvZ.js";
+import "./target-errors-CkcKdefZ.js";
+import "./commands-BoGUirwW.js";
+import "./commands-registry-Dn_5_JYs.js";
+import "./session-cost-usage-CBHvFXhD.js";
+import "./sqlite-BOrw_KhN.js";
+import "./device-identity-DtdLP7QQ.js";
+import "./client-Bvvecv3V.js";
+import "./call-DL23sPxF.js";
+import "./pairing-token-BIAdQuAM.js";
+import "./fetch-DyJnPUwL.js";
+import "./pairing-store-CXFEv3Gr.js";
+import "./exec-approvals-Bh1osORd.js";
+import "./nodes-screen-X8daVm8e.js";
+import "./system-run-command-Kw0jxir0.js";
+import "./session-utils-t4ZmEDMj.js";
+import "./skill-commands-Dyi0nIIE.js";
+import "./pi-tools.policy-U1G3dAzL.js";
+import "./workspace-dirs-BgwJ2Axm.js";
+import "./channel-activity-DItBzFyQ.js";
+import "./tables-D4LxfXpk.js";
+import "./server-lifecycle-DWK8vMXD.js";
+import "./with-timeout-DKgjtZv2.js";
+import "./stagger-Cek4Eizw.js";
+import "./channel-selection-BnXQH0vV.js";
+import "./plugin-auto-enable-3v7X3qMK.js";
+import "./send-C2xEPjDg.js";
+import "./outbound-attachment-Bm82Qbyl.js";
+import "./delivery-queue-BVKd_xSI.js";
+import "./send-BSbPEzn5.js";
+import "./proxy-CUsDSClP.js";
+import "./timeouts-DEnpCqGd.js";
+import "./runtime-config-collectors-CML7zUqZ.js";
+import "./command-secret-targets-C382v6Qd.js";
+import "./onboard-helpers-BkwNJPNU.js";
+import "./prompt-style-DB_OyH4q.js";
+import "./pairing-labels-B_3GjgjR.js";
+import "./memory-cli-yvsbLFgi.js";
+import "./manager-BVqjeGyT.js";
+import "./links-DZZ9QxWA.js";
+import "./cli-utils-CCaEbxAz.js";
+import "./help-format-Ce4Xueed.js";
+import "./progress-DB5E2Y0L.js";
+
+//#region src/plugins/cli.ts
+const log = createSubsystemLogger("plugins");
+function registerPluginCliCommands(program, cfg) {
+	const config = cfg ?? loadConfig();
+	const workspaceDir = resolveAgentWorkspaceDir(config, resolveDefaultAgentId(config));
+	const logger = {
+		info: (msg) => log.info(msg),
+		warn: (msg) => log.warn(msg),
+		error: (msg) => log.error(msg),
+		debug: (msg) => log.debug(msg)
+	};
+	const registry = loadBotPlugins({
+		config,
+		workspaceDir,
+		logger
+	});
+	const existingCommands = new Set(program.commands.map((cmd) => cmd.name()));
+	for (const entry of registry.cliRegistrars) {
+		if (entry.commands.length > 0) {
+			const overlaps = entry.commands.filter((command) => existingCommands.has(command));
+			if (overlaps.length > 0) {
+				log.debug(`plugin CLI register skipped (${entry.pluginId}): command already registered (${overlaps.join(", ")})`);
+				continue;
+			}
+		}
+		try {
+			const result = entry.register({
+				program,
+				config,
+				workspaceDir,
+				logger
+			});
+			if (result && typeof result.then === "function") result.catch((err) => {
+				log.warn(`plugin CLI register failed (${entry.pluginId}): ${String(err)}`);
+			});
+			for (const command of entry.commands) existingCommands.add(command);
+		} catch (err) {
+			log.warn(`plugin CLI register failed (${entry.pluginId}): ${String(err)}`);
+		}
+	}
+}
+
+//#endregion
+export { registerPluginCliCommands };

package/dist/{client-DWdu7Vc_.js → client-Bvvecv3V.js}

@@ -1,151 +1,20 @@
+import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { g as resolveStateDir } from "./paths-BMo6kTge.js";
-import { n as logError, t as logDebug } from "./logger-DB-PHqB2.js";
-import { t as VERSION } from "./version-DdJhsIqk.js";
-import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES, p as GATEWAY_CLIENT_IDS } from "./message-channel-7mpcAPwa.js";
-import { a as isSecureWebSocketUrl, t as rawDataToString } from "./ws-ChEZbUss.js";
-import { n as readJsonFile, r as writeJsonAtomic, t as createAsyncLock } from "./json-files-UKlMS7yU.js";
-import { t as INPUT_PROVENANCE_KIND_VALUES } from "./input-provenance-ByYWugDu.js";
-import { a as resolvePairingPaths, i as pruneExpiredPending, n as verifyPairingToken, r as rejectPendingPairingRequest, t as generatePairingToken } from "./pairing-token-Tb0YsOGr.js";
+import { n as logError, t as logDebug } from "./logger-DyQjakwH.js";
+import { t as VERSION } from "./version-DT-JIO28.js";
+import { g as GATEWAY_CLIENT_NAMES, h as GATEWAY_CLIENT_MODES, m as GATEWAY_CLIENT_IDS } from "./message-channel-DOpIvru6.js";
+import { a as isSecureWebSocketUrl, t as rawDataToString } from "./ws-BwH2d97O.js";
+import { n as readJsonFile, r as writeJsonAtomic, t as createAsyncLock } from "./json-files-BH1UBATr.js";
+import { t as INPUT_PROVENANCE_KIND_VALUES } from "./input-provenance-qgaZGYuK.js";
+import { a as publicKeyRawBase64UrlFromPem, o as signDevicePayload, r as loadOrCreateDeviceIdentity } from "./device-identity-DtdLP7QQ.js";
+import { a as resolvePairingPaths, i as pruneExpiredPending, n as verifyPairingToken, r as rejectPendingPairingRequest, t as generatePairingToken } from "./pairing-token-BIAdQuAM.js";
 import path from "node:path";
 import fs from "node:fs";
-import crypto, { randomUUID } from "node:crypto";
+import { randomUUID } from "node:crypto";
 import { WebSocket as WebSocket$1 } from "ws";
 import AjvPkg from "ajv";
 import { Type } from "@sinclair/typebox";
 
-//#region src/infra/device-identity.ts
-function resolveDefaultIdentityPath() {
-	return path.join(resolveStateDir(), "identity", "device.json");
-}
-function ensureDir(filePath) {
-	fs.mkdirSync(path.dirname(filePath), { recursive: true });
-}
-const ED25519_SPKI_PREFIX = Buffer.from("302a300506032b6570032100", "hex");
-function base64UrlEncode(buf) {
-	return buf.toString("base64").replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/g, "");
-}
-function base64UrlDecode(input) {
-	const normalized = input.replaceAll("-", "+").replaceAll("_", "/");
-	const padded = normalized + "=".repeat((4 - normalized.length % 4) % 4);
-	return Buffer.from(padded, "base64");
-}
-function derivePublicKeyRaw(publicKeyPem) {
-	const spki = crypto.createPublicKey(publicKeyPem).export({
-		type: "spki",
-		format: "der"
-	});
-	if (spki.length === ED25519_SPKI_PREFIX.length + 32 && spki.subarray(0, ED25519_SPKI_PREFIX.length).equals(ED25519_SPKI_PREFIX)) return spki.subarray(ED25519_SPKI_PREFIX.length);
-	return spki;
-}
-function fingerprintPublicKey(publicKeyPem) {
-	const raw = derivePublicKeyRaw(publicKeyPem);
-	return crypto.createHash("sha256").update(raw).digest("hex");
-}
-function generateIdentity() {
-	const { publicKey, privateKey } = crypto.generateKeyPairSync("ed25519");
-	const publicKeyPem = publicKey.export({
-		type: "spki",
-		format: "pem"
-	}).toString();
-	const privateKeyPem = privateKey.export({
-		type: "pkcs8",
-		format: "pem"
-	}).toString();
-	return {
-		deviceId: fingerprintPublicKey(publicKeyPem),
-		publicKeyPem,
-		privateKeyPem
-	};
-}
-function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
-	try {
-		if (fs.existsSync(filePath)) {
-			const raw = fs.readFileSync(filePath, "utf8");
-			const parsed = JSON.parse(raw);
-			if (parsed?.version === 1 && typeof parsed.deviceId === "string" && typeof parsed.publicKeyPem === "string" && typeof parsed.privateKeyPem === "string") {
-				const derivedId = fingerprintPublicKey(parsed.publicKeyPem);
-				if (derivedId && derivedId !== parsed.deviceId) {
-					const updated = {
-						...parsed,
-						deviceId: derivedId
-					};
-					fs.writeFileSync(filePath, `${JSON.stringify(updated, null, 2)}\n`, { mode: 384 });
-					try {
-						fs.chmodSync(filePath, 384);
-					} catch {}
-					return {
-						deviceId: derivedId,
-						publicKeyPem: parsed.publicKeyPem,
-						privateKeyPem: parsed.privateKeyPem
-					};
-				}
-				return {
-					deviceId: parsed.deviceId,
-					publicKeyPem: parsed.publicKeyPem,
-					privateKeyPem: parsed.privateKeyPem
-				};
-			}
-		}
-	} catch {}
-	const identity = generateIdentity();
-	ensureDir(filePath);
-	const stored = {
-		version: 1,
-		deviceId: identity.deviceId,
-		publicKeyPem: identity.publicKeyPem,
-		privateKeyPem: identity.privateKeyPem,
-		createdAtMs: Date.now()
-	};
-	fs.writeFileSync(filePath, `${JSON.stringify(stored, null, 2)}\n`, { mode: 384 });
-	try {
-		fs.chmodSync(filePath, 384);
-	} catch {}
-	return identity;
-}
-function signDevicePayload(privateKeyPem, payload) {
-	const key = crypto.createPrivateKey(privateKeyPem);
-	return base64UrlEncode(crypto.sign(null, Buffer.from(payload, "utf8"), key));
-}
-function normalizeDevicePublicKeyBase64Url(publicKey) {
-	try {
-		if (publicKey.includes("BEGIN")) return base64UrlEncode(derivePublicKeyRaw(publicKey));
-		return base64UrlEncode(base64UrlDecode(publicKey));
-	} catch {
-		return null;
-	}
-}
-function deriveDeviceIdFromPublicKey(publicKey) {
-	try {
-		const raw = publicKey.includes("BEGIN") ? derivePublicKeyRaw(publicKey) : base64UrlDecode(publicKey);
-		return crypto.createHash("sha256").update(raw).digest("hex");
-	} catch {
-		return null;
-	}
-}
-function publicKeyRawBase64UrlFromPem(publicKeyPem) {
-	return base64UrlEncode(derivePublicKeyRaw(publicKeyPem));
-}
-function verifyDeviceSignature(publicKey, payload, signatureBase64Url) {
-	try {
-		const key = publicKey.includes("BEGIN") ? crypto.createPublicKey(publicKey) : crypto.createPublicKey({
-			key: Buffer.concat([ED25519_SPKI_PREFIX, base64UrlDecode(publicKey)]),
-			type: "spki",
-			format: "der"
-		});
-		const sig = (() => {
-			try {
-				return base64UrlDecode(signatureBase64Url);
-			} catch {
-				return Buffer.from(signatureBase64Url, "base64");
-			}
-		})();
-		return crypto.verify(null, Buffer.from(payload, "utf8"), key, sig);
-	} catch {
-		return false;
-	}
-}
-
-//#endregion
 //#region src/infra/tls/fingerprint.ts
 function normalizeFingerprint(input) {
 	return input.trim().replace(/^sha-?256\s*:?\s*/i, "").replace(/[^a-fA-F0-9]/g, "").toLowerCase();
@@ -2233,6 +2102,20 @@ function formatValidationErrors(errors) {
 
 //#endregion
 //#region src/gateway/client.ts
+var client_exports = /* @__PURE__ */ __exportAll({
+	GATEWAY_CLOSE_CODE_HINTS: () => GATEWAY_CLOSE_CODE_HINTS,
+	GatewayClient: () => GatewayClient,
+	describeGatewayCloseCode: () => describeGatewayCloseCode
+});
+const GATEWAY_CLOSE_CODE_HINTS = {
+	1e3: "normal closure",
+	1006: "abnormal closure (no close frame)",
+	1008: "policy violation",
+	1012: "service restart"
+};
+function describeGatewayCloseCode(code) {
+	return GATEWAY_CLOSE_CODE_HINTS[code];
+}
 var GatewayClient = class {
 	constructor(opts) {
 		this.ws = null;
@@ -2541,4 +2424,4 @@ var GatewayClient = class {
 };
 
 //#endregion
-export { validateNodePairApproveParams as $, updatePairedDeviceMetadata as $t, validateCronRunParams as A, validateWizardCancelParams as At, validateExecApprovalRequestParams as B, buildDeviceAuthPayloadV3 as Bt, validateConfigSchemaLookupResult as C, validateTalkConfigParams as Ct, validateCronAddParams as D, validateWakeParams as Dt, validateConnectParams as E, validateUpdateRunParams as Et, validateDevicePairListParams as F, ErrorCodes as Ft, validateExecApprovalsSetParams as G, getPairedDevice as Gt, validateExecApprovalsGetParams as H, normalizeDeviceMetadataForPolicy as Ht, validateDevicePairRejectParams as I, errorShape as It, validateNodeDescribeParams as J, removePairedDevice as Jt, validateLogsTailParams as K, listDevicePairing as Kt, validateDevicePairRemoveParams as L, SESSION_LABEL_MAX_LENGTH as Lt, validateCronStatusParams as M, validateWizardStartParams as Mt, validateCronUpdateParams as N, validateWizardStatusParams as Nt, validateCronListParams as O, validateWebLoginStartParams as Ot, validateDevicePairApproveParams as P, PROTOCOL_VERSION as Pt, validateNodeListParams as Q, summarizeDeviceTokens as Qt, validateDeviceTokenRevokeParams as R, parseSessionLabel as Rt, validateConfigSchemaLookupParams as S, validateSkillsUpdateParams as St, validateConfigSetParams as T, validateToolsCatalogParams as Tt, validateExecApprovalsNodeGetParams as U, approveDevicePairing as Ut, validateExecApprovalResolveParams as V, normalizeDeviceMetadataForAuth as Vt, validateExecApprovalsNodeSetParams as W, ensureDeviceToken as Wt, validateNodeInvokeParams as X, revokeDeviceToken as Xt, validateNodeEventParams as Y, requestDevicePairing as Yt, validateNodeInvokeResultParams as Z, rotateDeviceToken as Zt, validateChatInjectParams as _, validateSessionsResolveParams as _t, validateAgentWaitParams as a, normalizeDevicePublicKeyBase64Url as an, validatePollParams as at, validateConfigGetParams as b, validateSkillsInstallParams as bt, validateAgentsFilesGetParams as c, validateSecretsResolveParams as ct, validateAgentsListParams as d, validateSessionsCompactParams as dt, verifyDeviceToken as en, validateNodePairListParams as et, validateAgentsUpdateParams as f, validateSessionsDeleteParams as ft, validateChatHistoryParams as g, validateSessionsResetParams as gt, validateChatAbortParams as h, validateSessionsPreviewParams as ht, validateAgentParams as i, loadOrCreateDeviceIdentity as in, validateNodeRenameParams as it, validateCronRunsParams as j, validateWizardNextParams as jt, validateCronRemoveParams as k, validateWebLoginWaitParams as kt, validateAgentsFilesListParams as l, validateSecretsResolveResult as lt, validateChannelsStatusParams as m, validateSessionsPatchParams as mt, formatValidationErrors as n, normalizeFingerprint as nn, validateNodePairRequestParams as nt, validateAgentsCreateParams as o, verifyDeviceSignature as on, validatePushTestParams as ot, validateChannelsLogoutParams as p, validateSessionsListParams as pt, validateModelsListParams as q, rejectDevicePairing as qt, validateAgentIdentityParams as r, deriveDeviceIdFromPublicKey as rn, validateNodePairVerifyParams as rt, validateAgentsDeleteParams as s, validateRequestFrame as st, GatewayClient as t, roleScopesAllow as tn, validateNodePairRejectParams as tt, validateAgentsFilesSetParams as u, validateSendParams as ut, validateChatSendParams as v, validateSessionsUsageParams as vt, validateConfigSchemaParams as w, validateTalkModeParams as wt, validateConfigPatchParams as x, validateSkillsStatusParams as xt, validateConfigApplyParams as y, validateSkillsBinsParams as yt, validateDeviceTokenRotateParams as z, buildDeviceAuthPayload as zt };
+export { validateNodeListParams as $, summarizeDeviceTokens as $t, validateCronRemoveParams as A, validateWebLoginWaitParams as At, validateDeviceTokenRotateParams as B, buildDeviceAuthPayload as Bt, validateConfigSchemaLookupParams as C, validateSkillsUpdateParams as Ct, validateConnectParams as D, validateUpdateRunParams as Dt, validateConfigSetParams as E, validateToolsCatalogParams as Et, validateDevicePairApproveParams as F, PROTOCOL_VERSION as Ft, validateExecApprovalsNodeSetParams as G, ensureDeviceToken as Gt, validateExecApprovalResolveParams as H, normalizeDeviceMetadataForAuth as Ht, validateDevicePairListParams as I, ErrorCodes as It, validateModelsListParams as J, rejectDevicePairing as Jt, validateExecApprovalsSetParams as K, getPairedDevice as Kt, validateDevicePairRejectParams as L, errorShape as Lt, validateCronRunsParams as M, validateWizardNextParams as Mt, validateCronStatusParams as N, validateWizardStartParams as Nt, validateCronAddParams as O, validateWakeParams as Ot, validateCronUpdateParams as P, validateWizardStatusParams as Pt, validateNodeInvokeResultParams as Q, rotateDeviceToken as Qt, validateDevicePairRemoveParams as R, SESSION_LABEL_MAX_LENGTH as Rt, validateConfigPatchParams as S, validateSkillsStatusParams as St, validateConfigSchemaParams as T, validateTalkModeParams as Tt, validateExecApprovalsGetParams as U, normalizeDeviceMetadataForPolicy as Ut, validateExecApprovalRequestParams as V, buildDeviceAuthPayloadV3 as Vt, validateExecApprovalsNodeGetParams as W, approveDevicePairing as Wt, validateNodeEventParams as X, requestDevicePairing as Xt, validateNodeDescribeParams as Y, removePairedDevice as Yt, validateNodeInvokeParams as Z, revokeDeviceToken as Zt, validateChatHistoryParams as _, validateSessionsResetParams as _t, validateAgentParams as a, validateNodeRenameParams as at, validateConfigApplyParams as b, validateSkillsBinsParams as bt, validateAgentsDeleteParams as c, validateRequestFrame as ct, validateAgentsFilesSetParams as d, validateSendParams as dt, updatePairedDeviceMetadata as en, validateNodePairApproveParams as et, validateAgentsListParams as f, validateSessionsCompactParams as ft, validateChatAbortParams as g, validateSessionsPreviewParams as gt, validateChannelsStatusParams as h, validateSessionsPatchParams as ht, validateAgentIdentityParams as i, validateNodePairVerifyParams as it, validateCronRunParams as j, validateWizardCancelParams as jt, validateCronListParams as k, validateWebLoginStartParams as kt, validateAgentsFilesGetParams as l, validateSecretsResolveParams as lt, validateChannelsLogoutParams as m, validateSessionsListParams as mt, client_exports as n, roleScopesAllow as nn, validateNodePairRejectParams as nt, validateAgentWaitParams as o, validatePollParams as ot, validateAgentsUpdateParams as p, validateSessionsDeleteParams as pt, validateLogsTailParams as q, listDevicePairing as qt, formatValidationErrors as r, normalizeFingerprint as rn, validateNodePairRequestParams as rt, validateAgentsCreateParams as s, validatePushTestParams as st, GatewayClient as t, verifyDeviceToken as tn, validateNodePairListParams as tt, validateAgentsFilesListParams as u, validateSecretsResolveResult as ut, validateChatInjectParams as v, validateSessionsResolveParams as vt, validateConfigSchemaLookupResult as w, validateTalkConfigParams as wt, validateConfigGetParams as x, validateSkillsInstallParams as xt, validateChatSendParams as y, validateSessionsUsageParams as yt, validateDeviceTokenRevokeParams as z, parseSessionLabel as zt };

package/dist/{clipboard-Bfhk9cp3.js → clipboard-DwO9zZBK.js}

@@ -1,4 +1,4 @@
-import { t as runCommandWithTimeout } from "./exec-B45rafWZ.js";
+import { t as runCommandWithTimeout } from "./exec-B8Hv4Nkd.js";
 
 //#region src/infra/clipboard.ts
 async function copyToClipboard(value) {

package/dist/{cloud-connect-BERMG0cQ.js → cloud-connect-CknfBF39.js}

@@ -1,40 +1,43 @@
 import "./globals-d3aR1MYC.js";
 import "./paths-BMo6kTge.js";
-import "./subsystem-Cfn2Pryx.js";
-import "./boolean-DtWR5bt3.js";
-import { G as writeConfigFile } from "./auth-profiles-BCHBDrea.js";
-import "./agent-scope-C5bklqr1.js";
-import "./utils-cwpAMi-t.js";
-import "./openclaw-root-BFfBQ6FD.js";
-import "./logger-DB-PHqB2.js";
-import "./exec-B45rafWZ.js";
-import "./registry-CxLUHPLp.js";
-import "./github-copilot-token-Byc_YVYE.js";
-import "./manifest-registry-9oWnIuht.js";
-import "./version-DdJhsIqk.js";
-import "./dock-D1Nz-RwP.js";
-import "./accounts-Da-TWEIc.js";
-import "./plugins-D3Wuignn.js";
-import "./logging-DRwtiLIS.js";
-import "./accounts-DRUpcCkN.js";
-import "./message-channel-7mpcAPwa.js";
-import "./tailnet-B-wq8YXh.js";
-import "./ws-ChEZbUss.js";
-import "./sessions-Db2DF_68.js";
-import "./accounts-D-CXitCL.js";
-import "./paths-0GcCtgXm.js";
-import "./chat-envelope-CrWMMV_a.js";
-import "./client-DWdu7Vc_.js";
-import "./call-C4z2LJrI.js";
-import "./pairing-token-Tb0YsOGr.js";
-import { f as openUrl } from "./onboard-helpers-Dtu3-e93.js";
-import "./prompt-style-C1jf_-k5.js";
-import { j as writeOAuthCredentials } from "./onboard-auth.credentials-CtuA7DuT.js";
-import { t as isRemoteEnvironment } from "./oauth-env-DKoO0B8-.js";
-import os from "node:os";
-import path from "node:path";
+import "./runtime-CvdZtNmJ.js";
+import "./subsystem-C6poMade.js";
+import "./boolean-ydSOedIP.js";
+import "./store-D8F_4CRR.js";
+import "./auth-profiles-BtxyXCZY.js";
+import "./agent-scope-BcruZHHR.js";
+import "./utils-BnC3HGtm.js";
+import "./openclaw-root-T5G2ldGE.js";
+import "./logger-DyQjakwH.js";
+import "./exec-B8Hv4Nkd.js";
+import "./github-copilot-token-BKQ4nXAw.js";
+import "./manifest-registry-m_hXBIk-.js";
+import "./version-DT-JIO28.js";
+import "./registry-DnJ84ILp.js";
+import "./ip-C7WWCRN7.js";
+import "./dock-nMBfeGKa.js";
+import "./accounts-C04lw_uh.js";
+import "./plugins-CCkC0dRo.js";
+import "./logging-kuFzZMsG.js";
+import "./accounts-CtzU1wJb.js";
+import "./message-channel-DOpIvru6.js";
+import "./tailnet-CInGXmk9.js";
+import "./ws-BwH2d97O.js";
+import "./sessions-BkKVGWHa.js";
+import "./accounts-BVV0eCmx.js";
+import "./paths-gTdorMgW.js";
+import "./chat-envelope-DVKDDTSu.js";
+import "./device-identity-DtdLP7QQ.js";
+import "./client-Bvvecv3V.js";
+import "./call-DL23sPxF.js";
+import "./pairing-token-BIAdQuAM.js";
+import { f as openUrl } from "./onboard-helpers-BkwNJPNU.js";
+import "./prompt-style-DB_OyH4q.js";
+import { j as writeOAuthCredentials } from "./onboard-auth.credentials-CMsut-0h.js";
+import { t as isRemoteEnvironment } from "./oauth-env-9SRuwpTK.js";
 import { createHash, randomBytes } from "node:crypto";
 import { createServer } from "node:http";
+import { isCancel, select } from "@clack/prompts";
 
 //#region src/commands/cloud-connect.ts
 const HANZO_IAM_AUTHORIZE_ENDPOINT = "https://hanzo.id/login/oauth/authorize";
@@ -42,9 +45,6 @@ const HANZO_IAM_TOKEN_ENDPOINT = "https://hanzo.id/api/login/oauth/access_token"
 const HANZO_CLIENT_ID = "hanzobot-client-id";
 const HANZO_REDIRECT_URI = "http://127.0.0.1:1456/oauth-callback";
 const HANZO_SCOPES = "openid profile email";
-const HANZO_GATEWAY_URL = "wss://gw.hanzo.bot";
-const PLAYGROUND_NODES_URL = "https://app.hanzo.bot/nodes";
-const PLAYGROUND_URL = "https://app.hanzo.bot/playground";
 function generateCodeVerifier() {
 	return randomBytes(32).toString("base64url");
 }
@@ -215,24 +215,61 @@ async function completeLogin(code, codeVerifier) {
 		tokenType: tokens.token_type,
 		createdAt: Date.now()
 	});
-	await writeConfigFile({
-		gateway: {
-			mode: "remote",
-			remote: {
-				url: process.env.HANZO_GATEWAY_URL?.trim() || HANZO_GATEWAY_URL,
-				token: tokens.access_token
-			},
-			auth: { mode: "token" }
-		},
-		agents: { defaults: { workspace: path.join(os.homedir(), ".hanzo", "bot", "workspace") } }
-	});
 	process.env.HANZO_API_KEY = tokens.access_token;
 	console.log("  Logged in to Hanzo Cloud\n");
-	console.log(`  View your node:    ${PLAYGROUND_NODES_URL}`);
-	console.log(`  Open Playground:   ${PLAYGROUND_URL}\n`);
-	console.log("  Your machine will appear in the Playground momentarily.");
-	console.log("  Press Ctrl+C to disconnect.\n");
+	await showPostAuthMenu(tokens.access_token);
+}
+async function showPostAuthMenu(accessToken) {
+	const choice = await select({
+		message: "How would you like to run your bot?",
+		options: [{
+			value: "local",
+			label: "Run Locally",
+			hint: "Start bot on this machine, visible in Playground"
+		}, {
+			value: "cloud",
+			label: "Launch in Cloud",
+			hint: "Spin up a cloud VM (Digital Ocean Linux)"
+		}]
+	});
+	if (isCancel(choice)) {
+		console.log("  Setup cancelled.\n");
+		process.exit(0);
+	}
+	if (choice === "local") {
+		const { launchLocal } = await import("./local-launch-C2RER-G3.js");
+		await launchLocal({ accessToken });
+	} else {
+		const { launchCloudNode } = await import("./cloud-launch-7mm4ZKXy.js");
+		await launchCloudNode({ accessToken });
+	}
+}
+/**
+* Launch menu for returning users (config already exists).
+* Reuses saved credentials or re-runs OAuth if expired.
+*/
+async function showLaunchMenu() {
+	let accessToken = null;
+	try {
+		const { ensureAuthProfileStore } = await import("./store-D8F_4CRR.js").then((n) => n.s);
+		const store = ensureAuthProfileStore();
+		for (const [profileId, cred] of Object.entries(store.profiles)) {
+			if (!profileId.startsWith("hanzo-iam:")) continue;
+			if (cred.type !== "oauth") continue;
+			const access = cred.access?.trim();
+			if (!access) continue;
+			const expires = cred.expires;
+			if (typeof expires === "number" && Date.now() > expires - 6e4) continue;
+			accessToken = access;
+			break;
+		}
+	} catch {}
+	if (!accessToken) accessToken = process.env.HANZO_API_KEY?.trim() || null;
+	if (accessToken) {
+		process.env.HANZO_API_KEY = accessToken;
+		await showPostAuthMenu(accessToken);
+	} else await runFirstRunCloudConnect();
 }
 
 //#endregion
-export { runFirstRunCloudConnect };
+export { runFirstRunCloudConnect, showLaunchMenu };