@heretek-ai/openclaw 2026.3.30 → 2026.3.32

package/dist/chunks/setup.finalize-Cc2mg8-p.mjs

@@ -0,0 +1,544 @@
+import "./redact-CtGOTRBK.mjs";
+import "./errors-CbvpN2RP.mjs";
+import "./logger-vRSRu9wD.mjs";
+import "./paths-CNST7z3O.mjs";
+import "./node-startup-env-Vn3Qa5f_.mjs";
+import "./tmp-openclaw-dir-BeWwpCKM.mjs";
+import "./theme-w86ra_7m.mjs";
+import "./globals-DZFR3wyP.mjs";
+import { g as restoreTerminalState } from "./subsystem-yLe4Gjha.mjs";
+import "./ansi-BJ9IOlIp.mjs";
+import "./boolean-Bwxxidw8.mjs";
+import "./env-9fhyzTaG.mjs";
+import { h as pathExists, y as resolveUserPath } from "./utils-Dc9DiBqf.mjs";
+import "./links-BNNF54ea.mjs";
+import "./paths-B5L5nZjW.mjs";
+import "./auth-profiles-ByaVWjmJ.mjs";
+import "./agent-scope-CnAwGoC2.mjs";
+import "./boundary-path-DnlNnNbU.mjs";
+import "./boundary-file-read-BB4JbZzx.mjs";
+import "./logger-DWOgrQoS.mjs";
+import "./exec-DX0zVVG7.mjs";
+import "./openclaw-root-CSfnLaqO.mjs";
+import { r as DEFAULT_BOOTSTRAP_FILENAME } from "./workspace-CoFl73GV.mjs";
+import "./model-selection-BJk_hQeE.mjs";
+import "./io-CDQGJKjg.mjs";
+import "./shell-env-CP5vTYhw.mjs";
+import "./safe-text-Bsdm3bQS.mjs";
+import "./version-Ckv-IbvB.mjs";
+import "./env-substitution-DGlYO8jV.mjs";
+import "./scan-paths-ahOy4FCQ.mjs";
+import "./includes-DcO1JxKG.mjs";
+import "./zod-schema.providers-core-CjdAU1TY.mjs";
+import "./legacy-web-search-B1O8hiGy.mjs";
+import "./schema-validator-BOH34EXk.mjs";
+import "./registry-DBJv0dvl.mjs";
+import "./config-state-kmbzTT63.mjs";
+import "./min-host-version-EA11e8I5.mjs";
+import "./manifest-registry-dO1qi1iI.mjs";
+import "./runtime-guard-CWHkkioa.mjs";
+import "./avatar-policy-uRVtZ7lJ.mjs";
+import "./ip-BtMd9ssR.mjs";
+import "./zod-schema.agent-runtime-BtGT59eP.mjs";
+import "./zod-schema.core-CMT7g7UX.mjs";
+import "./zod-schema.channels-BAG3dUtC.mjs";
+import "./zod-schema.providers-whatsapp-qnpQepaf.mjs";
+import "./config-Bhjk4Vel.mjs";
+import "./process-scoped-map-BmLEe6nP.mjs";
+import "./file-lock-hqfE8fCo.mjs";
+import "./file-lock-CjVc7LJY.mjs";
+import "./audit-fs-kb-rv_ZT.mjs";
+import "./shared-VxKfp8Uy.mjs";
+import "./resolve-DI6cKS4v.mjs";
+import "./chutes-oauth-BLrDl-qw.mjs";
+import "./json-file-ZNWqd95a.mjs";
+import "./profiles-CqdEUxnl.mjs";
+import "./redact-identifier-DTBisVz0.mjs";
+import { n as resolveCliName } from "./cli-name-lEyorNIN.mjs";
+import { t as formatCliCommand } from "./command-format-D1DrcTDP.mjs";
+import "./daemon-install-plan.shared-MtLyPLVq.mjs";
+import "./runtime-paths-qezFSLu3.mjs";
+import { n as buildGatewayInstallPlan, r as gatewayInstallErrorHint, t as resolveGatewayInstallToken } from "./gateway-install-token-3hijf3Zd.mjs";
+import { n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-D8rTbK9d.mjs";
+import "./prompt-hGCcgj-D.mjs";
+import "./tailscale-DZJRdd6v.mjs";
+import "./secret-equal-DcNDdUBf.mjs";
+import "./tailnet-Bc7IPWjH.mjs";
+import "./net-OJiOmwY1.mjs";
+import "./auth-C5eSR-m1.mjs";
+import "./credentials-DTsHVnAc.mjs";
+import "./message-channel-DCt8BIP7.mjs";
+import "./store-B0V1qm_-.mjs";
+import "./runtime-a4e8n7tq.mjs";
+import "./registry-9YpVWxKb.mjs";
+import "./plugins-D8oapapr.mjs";
+import "./sessions-CYgBPqrc.mjs";
+import "./paths-CGxgQvpf.mjs";
+import "./types-DoAKcnWC.mjs";
+import "./session-write-lock-DE8KASyZ.mjs";
+import "./json-files-BcpXnc9i.mjs";
+import "./delivery-info-CGNfeMd6.mjs";
+import "./method-scopes-hu-4urbi.mjs";
+import "./call-CcXWxOVG.mjs";
+import "./ws-Dv5Afaxu.mjs";
+import "./control-ui-shared-Dhzx9It_.mjs";
+import { b as waitForGatewayReachable, d as openUrl, g as resolveControlUiLinks, i as detectBrowserOpenSupport, o as formatControlUiSshHint, p as probeGatewayReachable } from "./onboard-helpers-C5GCWoDO.mjs";
+import "./wsl-BW8_A9_i.mjs";
+import "./prompt-style-Dua6SIJh.mjs";
+import "./ports-lsof-D1pMGdtZ.mjs";
+import "./restart-stale-pids-DpJ5KhNO.mjs";
+import "./runtime-parse-Dv1L_ID-.mjs";
+import "./launchd-CFtZl6rs.mjs";
+import { n as resolveGatewayService, t as describeGatewayServiceRestart } from "./service-eLNsotU2.mjs";
+import "./kill-tree-C7sbsfc4.mjs";
+import "./ports-0KspCIU9.mjs";
+import "./ports-probe-CW8QePv6.mjs";
+import { i as isSystemdUserServiceAvailable } from "./systemd-B1Tl3zeB.mjs";
+import "./commands-CibL1v-k.mjs";
+import "./progress-BxDdsPK3.mjs";
+import "./tokens-CIQuw4-h.mjs";
+import "./heartbeat-B3sryw3e.mjs";
+import "./registry-CFSnIRx_.mjs";
+import "./internal-hooks-VOrTrqjW.mjs";
+import "./provider-runtime-CRmI76OF.mjs";
+import "./providers.runtime-CtdkYDy2.mjs";
+import "./accounts-DCMTPA3m.mjs";
+import "./loader-CYgWRKc6.mjs";
+import "./config-presence-DzY-U322.mjs";
+import "./types-BaXbwBIP.mjs";
+import "./hook-runner-global-z_Icpwvo.mjs";
+import "./session-binding-service-Bmkk4TGJ.mjs";
+import "./conversation-binding-elBCYjlA.mjs";
+import "./sdk-alias-C5qDxQv2.mjs";
+import "./anthropic-vertex-provider-Davkw2Ua.mjs";
+import "./provider-env-vars-BvHq384O.mjs";
+import "./model-auth-markers-D9P0hXHx.mjs";
+import "./model-auth-env-D5wfS1i-.mjs";
+import "./model-auth-DtPujlPX.mjs";
+import "./helpers-DxddeIS7.mjs";
+import "./thinking-DvqE1iCX.mjs";
+import "./provider-catalog-BDbid2d6.mjs";
+import "./models-config.providers-4zEBpqdF.mjs";
+import "./models-config.providers.discovery-BjIw3Rrd.mjs";
+import "./web-search-providers.runtime-C9cFlSM-.mjs";
+import "./image-generation-provider-6Bn9TpiN.mjs";
+import "./web-search-providers-D1Ywb8m5.mjs";
+import "./tool-display-BAeitKtC.mjs";
+import "./resolve-configured-secret-input-string-BG1RVESA.mjs";
+import "./bindings-B0u6nL3P.mjs";
+import "./strip-inbound-meta-B47L4pVc.mjs";
+import "./commands-registry.data-CmXNmvUH.mjs";
+import "./commands-registry-D9AHOLEZ.mjs";
+import { t as listConfiguredWebSearchProviders } from "./runtime-XqqgCXDc.mjs";
+import "./read-only-account-inspect-CoN81Eok.mjs";
+import "./note-CaQ2HD-A.mjs";
+import { r as installCompletion } from "./completion-cli-BDWbmV-o.mjs";
+import "./register.subclis-B6xOze_R.mjs";
+import "./command-registry-DPx6M6gw.mjs";
+import "./program-context-9v4H9od4.mjs";
+import "./heartbeat-summary-CUbo9b9F.mjs";
+import { r as healthCommand } from "./health-C4WG9Yfr.mjs";
+import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-CW49D85b.mjs";
+import { t as resolveSetupSecretInputString } from "./setup.secret-input-DPX4L6ht.mjs";
+import { t as formatHealthCheckFailure } from "./health-format-DnRUP-NJ.mjs";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-B_LLsQm-.mjs";
+import { t as runTui } from "./tui-CCssIqEB.mjs";
+import path from "node:path";
+import os from "node:os";
+import fs from "node:fs/promises";
+
+//#region src/wizard/setup.completion.ts
+async function resolveProfileHint(shell) {
+	const home = process.env.HOME || os.homedir();
+	if (shell === "zsh") return "~/.zshrc";
+	if (shell === "bash") return await pathExists(path.join(home, ".bashrc")) ? "~/.bashrc" : "~/.bash_profile";
+	if (shell === "fish") return "~/.config/fish/config.fish";
+	return "$PROFILE";
+}
+function formatReloadHint(shell, profileHint) {
+	if (shell === "powershell") return "Restart your shell (or reload your PowerShell profile).";
+	return `Restart your shell or run: source ${profileHint}`;
+}
+async function setupWizardShellCompletion(params) {
+	const deps = {
+		resolveCliName,
+		checkShellCompletionStatus,
+		ensureCompletionCacheExists,
+		installCompletion,
+		...params.deps
+	};
+	const cliName = deps.resolveCliName();
+	const completionStatus = await deps.checkShellCompletionStatus(cliName);
+	if (completionStatus.usesSlowPattern) {
+		if (await deps.ensureCompletionCacheExists(cliName)) await deps.installCompletion(completionStatus.shell, true, cliName);
+		return;
+	}
+	if (completionStatus.profileInstalled && !completionStatus.cacheExists) {
+		await deps.ensureCompletionCacheExists(cliName);
+		return;
+	}
+	if (!completionStatus.profileInstalled) {
+		if (!(params.flow === "quickstart" ? true : await params.prompter.confirm({
+			message: `Enable ${completionStatus.shell} shell completion for ${cliName}?`,
+			initialValue: true
+		}))) return;
+		if (!await deps.ensureCompletionCacheExists(cliName)) {
+			await params.prompter.note(`Failed to generate completion cache. Run \`${cliName} completion --install\` later.`, "Shell completion");
+			return;
+		}
+		await deps.installCompletion(completionStatus.shell, true, cliName);
+		const profileHint = await resolveProfileHint(completionStatus.shell);
+		await params.prompter.note(`Shell completion installed. ${formatReloadHint(completionStatus.shell, profileHint)}`, "Shell completion");
+	}
+}
+
+//#endregion
+//#region src/wizard/setup.finalize.ts
+async function finalizeSetupWizard(options) {
+	const { flow, opts, baseConfig, nextConfig, settings, prompter, runtime } = options;
+	const withWizardProgress = async (label, options$1, work) => {
+		const progress = prompter.progress(label);
+		try {
+			return await work(progress);
+		} finally {
+			progress.stop(typeof options$1.doneMessage === "function" ? options$1.doneMessage() : options$1.doneMessage);
+		}
+	};
+	const systemdAvailable = process.platform === "linux" ? await isSystemdUserServiceAvailable() : true;
+	if (process.platform === "linux" && !systemdAvailable) await prompter.note("Systemd user services are unavailable. Skipping lingering checks and service install.", "Systemd");
+	if (process.platform === "linux" && systemdAvailable) {
+		const { ensureSystemdUserLingerInteractive } = await import("./systemd-linger-Cxd_lIj7.mjs");
+		await ensureSystemdUserLingerInteractive({
+			runtime,
+			prompter: {
+				confirm: prompter.confirm,
+				note: prompter.note
+			},
+			reason: "Linux installs use a systemd user service by default. Without lingering, systemd stops the user session on logout/idle and kills the Gateway.",
+			requireConfirm: false
+		});
+	}
+	const explicitInstallDaemon = typeof opts.installDaemon === "boolean" ? opts.installDaemon : void 0;
+	let installDaemon;
+	if (explicitInstallDaemon !== void 0) installDaemon = explicitInstallDaemon;
+	else if (process.platform === "linux" && !systemdAvailable) installDaemon = false;
+	else if (flow === "quickstart") installDaemon = true;
+	else installDaemon = await prompter.confirm({
+		message: "Install Gateway service (recommended)",
+		initialValue: true
+	});
+	if (process.platform === "linux" && !systemdAvailable && installDaemon) {
+		await prompter.note("Systemd user services are unavailable; skipping service install. Use your container supervisor or `docker compose up -d`.", "Gateway service");
+		installDaemon = false;
+	}
+	if (installDaemon) {
+		const daemonRuntime = flow === "quickstart" ? DEFAULT_GATEWAY_DAEMON_RUNTIME : await prompter.select({
+			message: "Gateway service runtime",
+			options: GATEWAY_DAEMON_RUNTIME_OPTIONS,
+			initialValue: opts.daemonRuntime ?? DEFAULT_GATEWAY_DAEMON_RUNTIME
+		});
+		if (flow === "quickstart") await prompter.note("QuickStart uses Node for the Gateway service (stable + supported).", "Gateway service runtime");
+		const service = resolveGatewayService();
+		const loaded = await service.isLoaded({ env: process.env });
+		let restartWasScheduled = false;
+		if (loaded) {
+			const action = await prompter.select({
+				message: "Gateway service already installed",
+				options: [
+					{
+						value: "restart",
+						label: "Restart"
+					},
+					{
+						value: "reinstall",
+						label: "Reinstall"
+					},
+					{
+						value: "skip",
+						label: "Skip"
+					}
+				]
+			});
+			if (action === "restart") {
+				let restartDoneMessage = "Gateway service restarted.";
+				await withWizardProgress("Gateway service", { doneMessage: () => restartDoneMessage }, async (progress) => {
+					progress.update("Restarting Gateway service…");
+					const restartStatus = describeGatewayServiceRestart("Gateway", await service.restart({
+						env: process.env,
+						stdout: process.stdout
+					}));
+					restartDoneMessage = restartStatus.progressMessage;
+					restartWasScheduled = restartStatus.scheduled;
+				});
+			} else if (action === "reinstall") await withWizardProgress("Gateway service", { doneMessage: "Gateway service uninstalled." }, async (progress) => {
+				progress.update("Uninstalling Gateway service…");
+				await service.uninstall({
+					env: process.env,
+					stdout: process.stdout
+				});
+			});
+		}
+		if (!loaded || !restartWasScheduled && loaded && !await service.isLoaded({ env: process.env })) {
+			const progress = prompter.progress("Gateway service");
+			let installError = null;
+			try {
+				progress.update("Preparing Gateway service…");
+				const tokenResolution = await resolveGatewayInstallToken({
+					config: nextConfig,
+					env: process.env
+				});
+				for (const warning of tokenResolution.warnings) await prompter.note(warning, "Gateway service");
+				if (tokenResolution.unavailableReason) installError = [
+					"Gateway install blocked:",
+					tokenResolution.unavailableReason,
+					"Fix gateway auth config/token input and rerun setup."
+				].join(" ");
+				else {
+					const { programArguments, workingDirectory, environment } = await buildGatewayInstallPlan({
+						env: process.env,
+						port: settings.port,
+						runtime: daemonRuntime,
+						warn: (message, title) => prompter.note(message, title),
+						config: nextConfig
+					});
+					progress.update("Installing Gateway service…");
+					await service.install({
+						env: process.env,
+						stdout: process.stdout,
+						programArguments,
+						workingDirectory,
+						environment
+					});
+				}
+			} catch (err) {
+				installError = err instanceof Error ? err.message : String(err);
+			} finally {
+				progress.stop(installError ? "Gateway service install failed." : "Gateway service installed.");
+			}
+			if (installError) {
+				await prompter.note(`Gateway service install failed: ${installError}`, "Gateway");
+				await prompter.note(gatewayInstallErrorHint(), "Gateway");
+			}
+		}
+	}
+	if (!opts.skipHealth) {
+		await waitForGatewayReachable({
+			url: resolveControlUiLinks({
+				bind: nextConfig.gateway?.bind ?? "loopback",
+				port: settings.port,
+				customBindHost: nextConfig.gateway?.customBindHost,
+				basePath: void 0
+			}).wsUrl,
+			token: settings.gatewayToken,
+			deadlineMs: 15e3
+		});
+		try {
+			await healthCommand({
+				json: false,
+				timeoutMs: 1e4
+			}, runtime);
+		} catch (err) {
+			runtime.error(formatHealthCheckFailure(err));
+			await prompter.note([
+				"Docs:",
+				"https://docs.openclaw.ai/gateway/health",
+				"https://docs.openclaw.ai/gateway/troubleshooting"
+			].join("\n"), "Health check help");
+		}
+	}
+	const controlUiEnabled = nextConfig.gateway?.controlUi?.enabled ?? baseConfig.gateway?.controlUi?.enabled ?? true;
+	if (!opts.skipUi && controlUiEnabled) {
+		const controlUiAssets = await ensureControlUiAssetsBuilt(runtime);
+		if (!controlUiAssets.ok && controlUiAssets.message) runtime.error(controlUiAssets.message);
+	}
+	await prompter.note([
+		"Add nodes for extra features:",
+		"- macOS app (system + notifications)",
+		"- iOS app (camera/canvas)",
+		"- Android app (camera/canvas)"
+	].join("\n"), "Optional apps");
+	const controlUiBasePath = nextConfig.gateway?.controlUi?.basePath ?? baseConfig.gateway?.controlUi?.basePath;
+	const links = resolveControlUiLinks({
+		bind: settings.bind,
+		port: settings.port,
+		customBindHost: settings.customBindHost,
+		basePath: controlUiBasePath
+	});
+	const authedUrl = settings.authMode === "token" && settings.gatewayToken ? `${links.httpUrl}#token=${encodeURIComponent(settings.gatewayToken)}` : links.httpUrl;
+	let resolvedGatewayPassword = "";
+	if (settings.authMode === "password") try {
+		resolvedGatewayPassword = await resolveSetupSecretInputString({
+			config: nextConfig,
+			value: nextConfig.gateway?.auth?.password,
+			path: "gateway.auth.password",
+			env: process.env
+		}) ?? "";
+	} catch (error) {
+		await prompter.note(["Could not resolve gateway.auth.password SecretRef for setup auth.", error instanceof Error ? error.message : String(error)].join("\n"), "Gateway auth");
+	}
+	const gatewayProbe = await probeGatewayReachable({
+		url: links.wsUrl,
+		token: settings.authMode === "token" ? settings.gatewayToken : void 0,
+		password: settings.authMode === "password" ? resolvedGatewayPassword : ""
+	});
+	const gatewayStatusLine = gatewayProbe.ok ? "Gateway: reachable" : `Gateway: not detected${gatewayProbe.detail ? ` (${gatewayProbe.detail})` : ""}`;
+	const bootstrapPath = path.join(resolveUserPath(options.workspaceDir), DEFAULT_BOOTSTRAP_FILENAME);
+	const hasBootstrap = await fs.access(bootstrapPath).then(() => true).catch(() => false);
+	await prompter.note([
+		`Web UI: ${links.httpUrl}`,
+		settings.authMode === "token" && settings.gatewayToken ? `Web UI (with token): ${authedUrl}` : void 0,
+		`Gateway WS: ${links.wsUrl}`,
+		gatewayStatusLine,
+		"Docs: https://docs.openclaw.ai/web/control-ui"
+	].filter(Boolean).join("\n"), "Control UI");
+	let controlUiOpened = false;
+	let controlUiOpenHint;
+	let hatchChoice = null;
+	let launchedTui = false;
+	if (!opts.skipUi && gatewayProbe.ok) {
+		if (hasBootstrap) await prompter.note([
+			"This is the defining action that makes your agent you.",
+			"Please take your time.",
+			"The more you tell it, the better the experience will be.",
+			"We will send: \"Wake up, my friend!\""
+		].join("\n"), "Start TUI (best option!)");
+		await prompter.note([
+			"Gateway token: shared auth for the Gateway + Control UI.",
+			"Stored in: ~/.Heretek-AI/openclaw.json (gateway.auth.token) or OPENCLAW_GATEWAY_TOKEN.",
+			`View token: ${formatCliCommand("openclaw config get gateway.auth.token")}`,
+			`Generate token: ${formatCliCommand("openclaw doctor --generate-gateway-token")}`,
+			"Web UI keeps dashboard URL tokens in memory for the current tab and strips them from the URL after load.",
+			`Open the dashboard anytime: ${formatCliCommand("openclaw dashboard --no-open")}`,
+			"If prompted: paste the token into Control UI settings (or use the tokenized dashboard URL)."
+		].join("\n"), "Token");
+		hatchChoice = await prompter.select({
+			message: "How do you want to hatch your bot?",
+			options: [
+				{
+					value: "tui",
+					label: "Hatch in TUI (recommended)"
+				},
+				{
+					value: "web",
+					label: "Open the Web UI"
+				},
+				{
+					value: "later",
+					label: "Do this later"
+				}
+			],
+			initialValue: "tui"
+		});
+		if (hatchChoice === "tui") {
+			restoreTerminalState("pre-setup tui", { resumeStdinIfPaused: true });
+			await runTui({
+				url: links.wsUrl,
+				token: settings.authMode === "token" ? settings.gatewayToken : void 0,
+				password: settings.authMode === "password" ? resolvedGatewayPassword : "",
+				deliver: false,
+				message: hasBootstrap ? "Wake up, my friend!" : void 0
+			});
+			launchedTui = true;
+		} else if (hatchChoice === "web") {
+			if ((await detectBrowserOpenSupport()).ok) {
+				controlUiOpened = await openUrl(authedUrl);
+				if (!controlUiOpened) controlUiOpenHint = formatControlUiSshHint({
+					port: settings.port,
+					basePath: controlUiBasePath,
+					token: settings.authMode === "token" ? settings.gatewayToken : void 0
+				});
+			} else controlUiOpenHint = formatControlUiSshHint({
+				port: settings.port,
+				basePath: controlUiBasePath,
+				token: settings.authMode === "token" ? settings.gatewayToken : void 0
+			});
+			await prompter.note([
+				`Dashboard link (with token): ${authedUrl}`,
+				controlUiOpened ? "Opened in your browser. Keep that tab to control OpenClaw." : "Copy/paste this URL in a browser on this machine to control OpenClaw.",
+				controlUiOpenHint
+			].filter(Boolean).join("\n"), "Dashboard ready");
+		} else await prompter.note(`When you're ready: ${formatCliCommand("openclaw dashboard --no-open")}`, "Later");
+	} else if (opts.skipUi) await prompter.note("Skipping Control UI/TUI prompts.", "Control UI");
+	await prompter.note(["Back up your agent workspace.", "Docs: https://docs.openclaw.ai/concepts/agent-workspace"].join("\n"), "Workspace backup");
+	await prompter.note("Running agents on your computer is risky — harden your setup: https://docs.openclaw.ai/security", "Security");
+	await setupWizardShellCompletion({
+		flow,
+		prompter
+	});
+	if (!opts.skipUi && settings.authMode === "token" && Boolean(settings.gatewayToken) && hatchChoice === null) {
+		if ((await detectBrowserOpenSupport()).ok) {
+			controlUiOpened = await openUrl(authedUrl);
+			if (!controlUiOpened) controlUiOpenHint = formatControlUiSshHint({
+				port: settings.port,
+				basePath: controlUiBasePath,
+				token: settings.gatewayToken
+			});
+		} else controlUiOpenHint = formatControlUiSshHint({
+			port: settings.port,
+			basePath: controlUiBasePath,
+			token: settings.gatewayToken
+		});
+		await prompter.note([
+			`Dashboard link (with token): ${authedUrl}`,
+			controlUiOpened ? "Opened in your browser. Keep that tab to control OpenClaw." : "Copy/paste this URL in a browser on this machine to control OpenClaw.",
+			controlUiOpenHint
+		].filter(Boolean).join("\n"), "Dashboard ready");
+	}
+	const webSearchProvider = nextConfig.tools?.web?.search?.provider;
+	const webSearchEnabled = nextConfig.tools?.web?.search?.enabled;
+	const configuredSearchProviders = listConfiguredWebSearchProviders({ config: nextConfig });
+	if (webSearchProvider) {
+		const { resolveExistingKey, hasExistingKey, hasKeyInEnv } = await import("./onboard-search-BUF1Kic8.mjs");
+		const entry = configuredSearchProviders.find((e) => e.id === webSearchProvider);
+		const label = entry?.label ?? webSearchProvider;
+		const storedKey = entry ? resolveExistingKey(nextConfig, webSearchProvider) : void 0;
+		const keyConfigured = entry ? hasExistingKey(nextConfig, webSearchProvider) : false;
+		const envAvailable = entry ? hasKeyInEnv(entry) : false;
+		const hasKey = keyConfigured || envAvailable;
+		const keySource = storedKey ? "API key: stored in config." : keyConfigured ? "API key: configured via secret reference." : envAvailable ? `API key: provided via ${entry?.envVars.join(" / ")} env var.` : void 0;
+		if (!entry) await prompter.note([
+			`Web search provider ${label} is selected but unavailable under the current plugin policy.`,
+			"web_search will not work until the provider is re-enabled or a different provider is selected.",
+			`  ${formatCliCommand("openclaw configure --section web")}`,
+			"",
+			"Docs: https://docs.openclaw.ai/tools/web"
+		].join("\n"), "Web search");
+		else if (webSearchEnabled !== false && hasKey) await prompter.note([
+			"Web search is enabled, so your agent can look things up online when needed.",
+			"",
+			`Provider: ${label}`,
+			...keySource ? [keySource] : [],
+			"Docs: https://docs.openclaw.ai/tools/web"
+		].join("\n"), "Web search");
+		else if (!hasKey) await prompter.note([
+			`Provider ${label} is selected but no API key was found.`,
+			"web_search will not work until a key is added.",
+			`  ${formatCliCommand("openclaw configure --section web")}`,
+			"",
+			`Get your key at: ${entry?.signupUrl ?? "https://docs.openclaw.ai/tools/web"}`,
+			"Docs: https://docs.openclaw.ai/tools/web"
+		].join("\n"), "Web search");
+		else await prompter.note([
+			`Web search (${label}) is configured but disabled.`,
+			`Re-enable: ${formatCliCommand("openclaw configure --section web")}`,
+			"",
+			"Docs: https://docs.openclaw.ai/tools/web"
+		].join("\n"), "Web search");
+	} else {
+		const { hasExistingKey, hasKeyInEnv } = await import("./onboard-search-BUF1Kic8.mjs");
+		const legacyDetected = configuredSearchProviders.find((e) => hasExistingKey(nextConfig, e.id) || hasKeyInEnv(e));
+		if (legacyDetected) await prompter.note([`Web search is available via ${legacyDetected.label} (auto-detected).`, "Docs: https://docs.openclaw.ai/tools/web"].join("\n"), "Web search");
+		else await prompter.note([
+			"Web search was skipped. You can enable it later:",
+			`  ${formatCliCommand("openclaw configure --section web")}`,
+			"",
+			"Docs: https://docs.openclaw.ai/tools/web"
+		].join("\n"), "Web search");
+	}
+	await prompter.note("What now: https://openclaw.ai/showcase (\"What People Are Building\").", "What now");
+	await prompter.outro(controlUiOpened ? "Onboarding complete. Dashboard opened; keep that tab to control OpenClaw." : "Onboarding complete. Use the dashboard link above to control OpenClaw.");
+	return { launchedTui };
+}
+
+//#endregion
+export { finalizeSetupWizard };