@nextclaw/server 0.12.12 → 0.12.13-beta.1

package/dist/index.d.ts

@@ -4,6 +4,7 @@ import { Config, ConfigActionExecuteRequest as ConfigActionExecuteRequest$1, Con
 import { NcpHttpAgentStreamProvider } from "@nextclaw/ncp-http-agent-server";
 import { PluginChannelBinding, PluginUiMetadata } from "@nextclaw/openclaw-compat";
 import { NcpAgentClientEndpoint, NcpMessage, NcpSessionApi, NcpSessionStatus, NcpSessionSummary } from "@nextclaw/ncp";
+import { UpdatePreferences, UpdateSnapshot } from "@nextclaw/kernel/update-contract";
 import { IncomingMessage } from "node:http";
 
 //#region src/ui/ncp-attachment.types.d.ts
@@ -191,6 +192,7 @@ type MarketplaceMcpInstallRequest = {
   inputs?: Record<string, string>;
   template?: MarketplaceMcpInstallSpec;
 };
+type MarketplaceInstallRequest = MarketplacePluginInstallRequest | MarketplaceSkillInstallRequest | MarketplaceMcpInstallRequest;
 type MarketplacePluginInstallResult = {
   type: "plugin";
   spec: string;
@@ -210,9 +212,11 @@ type MarketplaceMcpInstallResult = {
   message: string;
   output?: string;
 };
+type MarketplaceInstallResult = MarketplacePluginInstallResult | MarketplaceSkillInstallResult | MarketplaceMcpInstallResult;
 type MarketplacePluginManageAction = "enable" | "disable" | "uninstall";
 type MarketplaceSkillManageAction = "uninstall";
 type MarketplaceMcpManageAction = "enable" | "disable" | "remove";
+type MarketplaceManageAction = MarketplacePluginManageAction | MarketplaceSkillManageAction | MarketplaceMcpManageAction;
 type MarketplacePluginManageRequest = {
   type?: "plugin";
   action: MarketplacePluginManageAction;
@@ -231,6 +235,7 @@ type MarketplaceMcpManageRequest = {
   id?: string;
   spec?: string;
 };
+type MarketplaceManageRequest = MarketplacePluginManageRequest | MarketplaceSkillManageRequest | MarketplaceMcpManageRequest;
 type MarketplacePluginManageResult = {
   type: "plugin";
   action: MarketplacePluginManageAction;
@@ -252,6 +257,7 @@ type MarketplaceMcpManageResult = {
   message: string;
   output?: string;
 };
+type MarketplaceManageResult = MarketplacePluginManageResult | MarketplaceSkillManageResult | MarketplaceMcpManageResult;
 type MarketplaceMcpDoctorResult = {
   name: string;
   enabled: boolean;
@@ -401,6 +407,7 @@ type UiRouterOptions = {
   authService?: UiAuthService;
   remoteAccess?: UiRemoteAccessHost;
   runtimeControl?: UiRuntimeControlHost;
+  runtimeUpdate?: UiRuntimeUpdateHost;
   getBootstrapStatus?: () => BootstrapStatusView;
   getPluginChannelBindings?: () => PluginChannelBinding[];
   getPluginUiMetadata?: () => PluginUiMetadata[];
@@ -422,6 +429,14 @@ type UiRuntimeControlHost = {
   restartService: () => Promise<RuntimeControlActionResult> | RuntimeControlActionResult;
   stopService: () => Promise<RuntimeControlActionResult> | RuntimeControlActionResult;
 };
+type UiRuntimeUpdateHost = {
+  getState: () => Promise<UpdateSnapshot> | UpdateSnapshot;
+  checkForUpdates: () => Promise<UpdateSnapshot> | UpdateSnapshot;
+  downloadUpdate: () => Promise<UpdateSnapshot> | UpdateSnapshot;
+  applyDownloadedUpdate: () => Promise<UpdateSnapshot> | UpdateSnapshot;
+  updatePreferences: (preferences: Partial<UpdatePreferences>) => Promise<UpdateSnapshot> | UpdateSnapshot;
+  updateChannel: (channel: UpdateSnapshot["channel"]) => Promise<UpdateSnapshot> | UpdateSnapshot;
+};
 //#endregion
 //#region src/ui/chat-session-type.types.d.ts
 type ChatSessionTypeIconView = {
@@ -989,6 +1004,9 @@ type CronActionResult = {
   executed?: boolean;
 };
 type RuntimeConfigUpdate = {
+  companion?: {
+    enabled?: boolean;
+  };
   agents?: {
     defaults?: {
       contextTokens?: number;
@@ -1077,6 +1095,9 @@ type UiNcpAgent = {
   basePath?: string;
 };
 type ConfigView = {
+  companion?: {
+    enabled?: boolean;
+  };
   agents: {
     defaults: {
       model: string;
@@ -1094,7 +1115,6 @@ type ConfigView = {
       bootstrap?: {
         files?: string[];
         minimalFiles?: string[];
-        heartbeatFiles?: string[];
         perFileChars?: number;
         totalChars?: number;
       };
@@ -1318,8 +1338,9 @@ type UiServerHandle = {
 //#region src/ui/server.d.ts
 type UiServerStartOptions = UiServerOptions & {
   applyLiveConfigReload?: () => Promise<void>;
+  runtimeUpdate?: UiRuntimeUpdateHost;
 };
-declare function startUiServer(options: UiServerStartOptions): UiServerHandle;
+declare function startUiServer(options: UiServerStartOptions): Promise<UiServerHandle>;
 //#endregion
 //#region src/ui/router.d.ts
 declare function createUiRouter(options: UiRouterOptions): Hono;
@@ -1375,7 +1396,7 @@ declare function patchSession(configPath: string, key: string, patch: SessionPat
   availableSessionTypes?: string[];
 }): SessionHistoryView | null;
 declare function deleteSession(configPath: string, key: string): boolean;
-declare function updateRuntime(configPath: string, patch: RuntimeConfigUpdate): Pick<ConfigView, "agents" | "bindings" | "session">;
+declare function updateRuntime(configPath: string, patch: RuntimeConfigUpdate): Pick<ConfigView, "companion" | "agents" | "bindings" | "session">;
 declare function updateSecrets(configPath: string, patch: SecretsConfigUpdate): SecretsView;
 //#endregion
 //#region src/ui/auth-bridge.d.ts
@@ -1383,4 +1404,4 @@ declare function getUiBridgeSecretPath(): string;
 declare function readUiBridgeSecret(): string | null;
 declare function ensureUiBridgeSecret(): string;
 //#endregion
-export { AgentBindingView, AgentCreateRequest, AgentDeleteResult, AgentProfileView, AgentUpdateRequest, ApiError, ApiResponse, AppMetaView, AuthEnabledUpdateRequest, AuthLoginRequest, AuthPasswordUpdateRequest, AuthSetupRequest, AuthStatusView, BindingPeerView, BochaFreshnessValue, BootstrapPhase, BootstrapRemoteState, BootstrapStageState, BootstrapStatusView, ChannelAuthPollRequest, ChannelAuthPollResult, ChannelAuthStartRequest, ChannelAuthStartResult, ChannelSpecView, type ChatSessionTypeCtaView, type ChatSessionTypeOptionView, type ChatSessionTypesView, ConfigActionExecuteRequest, ConfigActionExecuteResult, ConfigActionManifest, ConfigActionType, ConfigMetaView, ConfigSchemaResponse, ConfigUiHint, ConfigUiHints, ConfigView, CronActionResult, CronCreateRequest, CronCreateResult, CronEnableRequest, CronJobStateView, CronJobView, CronListView, CronPayloadView, CronRunRequest, CronScheduleView, DEFAULT_SESSION_TYPE, MarketplaceApiConfig, MarketplaceInstallKind, MarketplaceInstallSkillParams, MarketplaceInstallSpec, MarketplaceInstalledRecord, MarketplaceInstalledView, MarketplaceInstaller, MarketplaceItemSummary, MarketplaceItemType, MarketplaceItemView, MarketplaceListView, MarketplaceLocalizedTextMap, MarketplaceMcpContentView, MarketplaceMcpDoctorResult, MarketplaceMcpInstallKind, MarketplaceMcpInstallRequest, MarketplaceMcpInstallResult, MarketplaceMcpInstallSpec, MarketplaceMcpManageAction, MarketplaceMcpManageRequest, MarketplaceMcpManageResult, MarketplaceMcpTemplateInput, MarketplacePluginContentView, MarketplacePluginInstallKind, MarketplacePluginInstallRequest, MarketplacePluginInstallResult, MarketplacePluginManageAction, MarketplacePluginManageRequest, MarketplacePluginManageResult, MarketplaceRecommendationView, MarketplaceSkillContentView, MarketplaceSkillInstallKind, MarketplaceSkillInstallRequest, MarketplaceSkillInstallResult, MarketplaceSkillManageAction, MarketplaceSkillManageRequest, MarketplaceSkillManageResult, MarketplaceSort, NcpSessionSkillsView, ProviderAuthImportResult, ProviderAuthPollRequest, ProviderAuthPollResult, ProviderAuthStartRequest, ProviderAuthStartResult, ProviderConfigUpdate, ProviderConfigView, ProviderConnectionTestRequest, ProviderConnectionTestResult, ProviderCreateRequest, ProviderCreateResult, ProviderDeleteResult, ProviderSpecView, RemoteAccessView, RemoteAccountProfileUpdateRequest, RemoteAccountView, RemoteBrowserAuthPollRequest, RemoteBrowserAuthPollResult, RemoteBrowserAuthStartRequest, RemoteBrowserAuthStartResult, RemoteDoctorCheckView, RemoteDoctorView, RemoteLoginRequest, RemoteRuntimeView, RemoteServiceAction, RemoteServiceActionResult, RemoteServiceView, RemoteSettingsUpdateRequest, RemoteSettingsView, RuntimeActionCapability, RuntimeActionImpact, RuntimeConfigUpdate, RuntimeControlAction, RuntimeControlActionResult, RuntimeControlEnvironment, RuntimeControlView, RuntimeEntryView, RuntimeLifecycleState, RuntimePendingRestart, RuntimeServiceState, SearchConfigUpdate, SearchConfigView, SearchProviderConfigView, SearchProviderName, SearchProviderSpecView, SecretProviderEnvView, SecretProviderExecView, SecretProviderFileView, SecretProviderView, SecretRefView, SecretSourceView, SecretsConfigUpdate, SecretsView, ServerPathBreadcrumbView, ServerPathBrowseView, ServerPathEntryView, ServerPathReadView, SessionConfigView, SessionEntryView, SessionEventView, SessionHistoryView, SessionMessageView, SessionPatchUpdate, SessionPatchValidationError, SessionSkillEntryView, SessionTypeDescribeParams, SessionsListView, TavilySearchDepthValue, UiNcpAgent, UiNcpAssetPutView, UiNcpAssetView, UiNcpSessionListView, UiNcpSessionMessagesView, UiNcpSessionService, UiNcpStoredAssetRecord, type UiRemoteAccessHost, type UiRuntimeControlHost, UiServerEvent, UiServerHandle, UiServerOptions, buildConfigMeta, buildConfigSchemaView, buildConfigView, createCustomProvider, createUiRouter, deleteCustomProvider, deleteSession, ensureUiBridgeSecret, executeConfigAction, getSessionHistory, getUiBridgeSecretPath, listSessions, loadConfigOrDefault, patchSession, readUiBridgeSecret, startUiServer, testProviderConnection, updateChannel, updateModel, updateProvider, updateRuntime, updateSearch, updateSecrets };
+export { AgentBindingView, AgentCreateRequest, AgentDeleteResult, AgentProfileView, AgentUpdateRequest, ApiError, ApiResponse, AppMetaView, AuthEnabledUpdateRequest, AuthLoginRequest, AuthPasswordUpdateRequest, AuthSetupRequest, AuthStatusView, BindingPeerView, BochaFreshnessValue, BootstrapPhase, BootstrapRemoteState, BootstrapStageState, BootstrapStatusView, ChannelAuthPollRequest, ChannelAuthPollResult, ChannelAuthStartRequest, ChannelAuthStartResult, ChannelSpecView, type ChatSessionTypeCtaView, type ChatSessionTypeOptionView, type ChatSessionTypesView, ConfigActionExecuteRequest, ConfigActionExecuteResult, ConfigActionManifest, ConfigActionType, ConfigMetaView, ConfigSchemaResponse, ConfigUiHint, ConfigUiHints, ConfigView, CronActionResult, CronCreateRequest, CronCreateResult, CronEnableRequest, CronJobStateView, CronJobView, CronListView, CronPayloadView, CronRunRequest, CronScheduleView, DEFAULT_SESSION_TYPE, MarketplaceApiConfig, MarketplaceInstallKind, MarketplaceInstallRequest, MarketplaceInstallResult, MarketplaceInstallSkillParams, MarketplaceInstallSpec, MarketplaceInstalledRecord, MarketplaceInstalledView, MarketplaceInstaller, MarketplaceItemSummary, MarketplaceItemType, MarketplaceItemView, MarketplaceListView, MarketplaceLocalizedTextMap, MarketplaceManageAction, MarketplaceManageRequest, MarketplaceManageResult, MarketplaceMcpContentView, MarketplaceMcpDoctorResult, MarketplaceMcpInstallKind, MarketplaceMcpInstallRequest, MarketplaceMcpInstallResult, MarketplaceMcpInstallSpec, MarketplaceMcpManageAction, MarketplaceMcpManageRequest, MarketplaceMcpManageResult, MarketplaceMcpTemplateInput, MarketplacePluginContentView, MarketplacePluginInstallKind, MarketplacePluginInstallRequest, MarketplacePluginInstallResult, MarketplacePluginManageAction, MarketplacePluginManageRequest, MarketplacePluginManageResult, MarketplaceRecommendationView, MarketplaceSkillContentView, MarketplaceSkillInstallKind, MarketplaceSkillInstallRequest, MarketplaceSkillInstallResult, MarketplaceSkillManageAction, MarketplaceSkillManageRequest, MarketplaceSkillManageResult, MarketplaceSort, NcpSessionSkillsView, ProviderAuthImportResult, ProviderAuthPollRequest, ProviderAuthPollResult, ProviderAuthStartRequest, ProviderAuthStartResult, ProviderConfigUpdate, ProviderConfigView, ProviderConnectionTestRequest, ProviderConnectionTestResult, ProviderCreateRequest, ProviderCreateResult, ProviderDeleteResult, ProviderSpecView, RemoteAccessView, RemoteAccountProfileUpdateRequest, RemoteAccountView, RemoteBrowserAuthPollRequest, RemoteBrowserAuthPollResult, RemoteBrowserAuthStartRequest, RemoteBrowserAuthStartResult, RemoteDoctorCheckView, RemoteDoctorView, RemoteLoginRequest, RemoteRuntimeView, RemoteServiceAction, RemoteServiceActionResult, RemoteServiceView, RemoteSettingsUpdateRequest, RemoteSettingsView, RuntimeActionCapability, RuntimeActionImpact, RuntimeConfigUpdate, RuntimeControlAction, RuntimeControlActionResult, RuntimeControlEnvironment, RuntimeControlView, RuntimeEntryView, RuntimeLifecycleState, RuntimePendingRestart, RuntimeServiceState, SearchConfigUpdate, SearchConfigView, SearchProviderConfigView, SearchProviderName, SearchProviderSpecView, SecretProviderEnvView, SecretProviderExecView, SecretProviderFileView, SecretProviderView, SecretRefView, SecretSourceView, SecretsConfigUpdate, SecretsView, ServerPathBreadcrumbView, ServerPathBrowseView, ServerPathEntryView, ServerPathReadView, SessionConfigView, SessionEntryView, SessionEventView, SessionHistoryView, SessionMessageView, SessionPatchUpdate, SessionPatchValidationError, SessionSkillEntryView, SessionTypeDescribeParams, SessionsListView, TavilySearchDepthValue, UiNcpAgent, UiNcpAssetPutView, UiNcpAssetView, UiNcpSessionListView, UiNcpSessionMessagesView, UiNcpSessionService, UiNcpStoredAssetRecord, type UiRemoteAccessHost, type UiRuntimeControlHost, type UiRuntimeUpdateHost, UiServerEvent, UiServerHandle, UiServerOptions, buildConfigMeta, buildConfigSchemaView, buildConfigView, createCustomProvider, createUiRouter, deleteCustomProvider, deleteSession, ensureUiBridgeSecret, executeConfigAction, getSessionHistory, getUiBridgeSecretPath, listSessions, loadConfigOrDefault, patchSession, readUiBridgeSecret, startUiServer, testProviderConnection, updateChannel, updateModel, updateProvider, updateRuntime, updateSearch, updateSecrets };

package/dist/index.js

@@ -1332,6 +1332,7 @@ function buildConfigView(config, options) {
 	const providers = {};
 	for (const [name, provider] of Object.entries(config.providers)) providers[name] = toProviderView(config, provider, name, uiHints, findServerBuiltinProviderByName(name));
 	return {
+		companion: sanitizePublicConfigValue(config.companion, "companion", uiHints),
 		agents: sanitizePublicConfigValue(config.agents, "agents", uiHints),
 		providers,
 		search: buildSearchView(config),
@@ -1907,18 +1908,22 @@ function deleteSession(configPath, key) {
 	if (!normalizedKey) return false;
 	return createSessionManager(loadConfigOrDefault(configPath)).delete(normalizedKey);
 }
-function updateRuntime(configPath, patch) {
-	const config = loadConfigOrDefault(configPath);
-	const defaultsPatch = patch.agents?.defaults;
-	if (defaultsPatch && Object.prototype.hasOwnProperty.call(defaultsPatch, "contextTokens")) {
+function applyRuntimeAgentDefaultsPatch(config, defaultsPatch) {
+	if (!defaultsPatch) return;
+	if (Object.prototype.hasOwnProperty.call(defaultsPatch, "contextTokens")) {
 		const nextContextTokens = defaultsPatch.contextTokens;
 		if (typeof nextContextTokens === "number" && Number.isFinite(nextContextTokens)) config.agents.defaults.contextTokens = Math.max(1e3, Math.trunc(nextContextTokens));
 	}
-	if (defaultsPatch && Object.prototype.hasOwnProperty.call(defaultsPatch, "engine")) config.agents.defaults.engine = normalizeOptionalString(defaultsPatch.engine) ?? "native";
-	if (defaultsPatch && Object.prototype.hasOwnProperty.call(defaultsPatch, "engineConfig")) {
+	if (Object.prototype.hasOwnProperty.call(defaultsPatch, "engine")) config.agents.defaults.engine = normalizeOptionalString(defaultsPatch.engine) ?? "native";
+	if (Object.prototype.hasOwnProperty.call(defaultsPatch, "engineConfig")) {
 		const nextEngineConfig = defaultsPatch.engineConfig;
 		if (nextEngineConfig && typeof nextEngineConfig === "object" && !Array.isArray(nextEngineConfig)) config.agents.defaults.engineConfig = { ...nextEngineConfig };
 	}
+}
+function updateRuntime(configPath, patch) {
+	const config = loadConfigOrDefault(configPath);
+	if (patch.companion && Object.prototype.hasOwnProperty.call(patch.companion, "enabled")) config.companion.enabled = Boolean(patch.companion.enabled);
+	applyRuntimeAgentDefaultsPatch(config, patch.agents?.defaults);
 	if (patch.agents && Object.prototype.hasOwnProperty.call(patch.agents, "list")) config.agents.list = (patch.agents.list ?? []).map((entry) => {
 		const normalizedEngine = normalizeOptionalString(entry.engine);
 		const hasEngineConfig = entry.engineConfig && typeof entry.engineConfig === "object" && !Array.isArray(entry.engineConfig);
@@ -1939,6 +1944,7 @@ function updateRuntime(configPath, patch) {
 	saveConfig(next, configPath);
 	const view = buildConfigView(next);
 	return {
+		companion: view.companion,
 		agents: view.agents,
 		bindings: view.bindings ?? [],
 		session: view.session ?? {}
@@ -2707,6 +2713,7 @@ var ConfigRoutesController = class {
 		if (body.data.agents?.defaults && Object.prototype.hasOwnProperty.call(body.data.agents.defaults, "engine")) changedPaths.push("agents.defaults.engine");
 		if (body.data.agents?.defaults && Object.prototype.hasOwnProperty.call(body.data.agents.defaults, "engineConfig")) changedPaths.push("agents.defaults.engineConfig");
 		if (body.data.agents?.runtimes && Object.prototype.hasOwnProperty.call(body.data.agents.runtimes, "entries")) changedPaths.push("agents.runtimes.entries");
+		if (body.data.companion && Object.prototype.hasOwnProperty.call(body.data.companion, "enabled")) changedPaths.push("companion.enabled");
 		changedPaths.push("agents.list", "bindings", "session");
 		await this.publishConfigUpdates(changedPaths);
 		return c.json(ok(result));
@@ -3207,6 +3214,7 @@ var NcpSessionRoutesController = class {
 			sessionId,
 			status: session.status ?? "idle",
 			messages,
+			...session.contextWindow ? { contextWindow: session.contextWindow } : {},
 			total: messages.length
 		};
 		return c.json(ok(payload));
@@ -4530,6 +4538,64 @@ var RuntimeControlRoutesController = class {
 	};
 };
 //#endregion
+//#region src/ui/ui-routes/runtime-update.controller.ts
+var RuntimeUpdateRoutesController = class {
+	constructor(host) {
+		this.host = host;
+	}
+	getState = async (c) => {
+		try {
+			return c.json(ok(await this.host.getState()));
+		} catch (error) {
+			return c.json(err("RUNTIME_UPDATE_STATE_FAILED", formatUserFacingError(error)), 500);
+		}
+	};
+	checkForUpdates = async (c) => {
+		try {
+			return c.json(ok(await this.host.checkForUpdates()));
+		} catch (error) {
+			return c.json(err("RUNTIME_UPDATE_CHECK_FAILED", formatUserFacingError(error)), 400);
+		}
+	};
+	downloadUpdate = async (c) => {
+		try {
+			return c.json(ok(await this.host.downloadUpdate()));
+		} catch (error) {
+			return c.json(err("RUNTIME_UPDATE_DOWNLOAD_FAILED", formatUserFacingError(error)), 400);
+		}
+	};
+	applyDownloadedUpdate = async (c) => {
+		try {
+			return c.json(ok(await this.host.applyDownloadedUpdate()));
+		} catch (error) {
+			return c.json(err("RUNTIME_UPDATE_APPLY_FAILED", formatUserFacingError(error)), 400);
+		}
+	};
+	updatePreferences = async (c) => {
+		const body = await readJson(c.req.raw);
+		if (!body.ok) return c.json(err("INVALID_BODY", "invalid json body"), 400);
+		try {
+			return c.json(ok(await this.host.updatePreferences({
+				...typeof body.data.automaticChecks === "boolean" ? { automaticChecks: body.data.automaticChecks } : {},
+				...typeof body.data.autoDownload === "boolean" ? { autoDownload: body.data.autoDownload } : {}
+			})));
+		} catch (error) {
+			return c.json(err("RUNTIME_UPDATE_PREFERENCES_FAILED", formatUserFacingError(error)), 400);
+		}
+	};
+	updateChannel = async (c) => {
+		const body = await readJson(c.req.raw);
+		if (!body.ok) return c.json(err("INVALID_BODY", "invalid json body"), 400);
+		const channel = body.data.channel;
+		if (channel !== "stable" && channel !== "beta") return c.json(err("INVALID_BODY", "channel must be stable or beta"), 400);
+		try {
+			return c.json(ok(await this.host.updateChannel(channel)));
+		} catch (error) {
+			return c.json(err("RUNTIME_UPDATE_CHANNEL_FAILED", formatUserFacingError(error)), 400);
+		}
+	};
+};
+//#endregion
 //#region src/ui/server-path/server-path-browse.utils.ts
 var ServerPathBrowseError = class extends Error {
 	constructor(code, message) {
@@ -4866,7 +4932,17 @@ function registerRuntimeControlRoutes(app, runtimeControlController) {
 	app.post("/api/runtime/control/restart-service", runtimeControlController.restartService);
 	app.post("/api/runtime/control/stop-service", runtimeControlController.stopService);
 }
+function registerRuntimeUpdateRoutes(app, runtimeUpdateController) {
+	if (!runtimeUpdateController) return;
+	app.get("/api/runtime/update", runtimeUpdateController.getState);
+	app.post("/api/runtime/update/check", runtimeUpdateController.checkForUpdates);
+	app.post("/api/runtime/update/download", runtimeUpdateController.downloadUpdate);
+	app.post("/api/runtime/update/apply", runtimeUpdateController.applyDownloadedUpdate);
+	app.put("/api/runtime/update/preferences", runtimeUpdateController.updatePreferences);
+	app.put("/api/runtime/update/channel", runtimeUpdateController.updateChannel);
+}
 function createUiRouteControllers(options, authService, marketplaceBaseUrl) {
+	const { remoteAccess, runtimeControl, runtimeUpdate } = options;
 	return {
 		app: new AppRoutesController(options),
 		agents: new AgentsRoutesController(options),
@@ -4876,8 +4952,9 @@ function createUiRouteControllers(options, authService, marketplaceBaseUrl) {
 		ncpSession: new NcpSessionRoutesController(options),
 		ncpAsset: new NcpAssetRoutesController(options),
 		serverPath: new ServerPathRoutesController(),
-		remote: options.remoteAccess ? new RemoteRoutesController(options.remoteAccess) : null,
-		runtimeControl: options.runtimeControl ? new RuntimeControlRoutesController(options.runtimeControl) : null,
+		remote: remoteAccess ? new RemoteRoutesController(remoteAccess) : null,
+		runtimeControl: runtimeControl ? new RuntimeControlRoutesController(runtimeControl) : null,
+		runtimeUpdate: runtimeUpdate ? new RuntimeUpdateRoutesController(runtimeUpdate) : null,
 		pluginMarketplace: new PluginMarketplaceController(options, marketplaceBaseUrl),
 		skillMarketplace: new SkillMarketplaceController(options, marketplaceBaseUrl),
 		mcpMarketplace: new McpMarketplaceController(options, marketplaceBaseUrl)
@@ -4914,6 +4991,7 @@ function createUiRouter(options) {
 	registerCronRoutes(app, controllers.cron);
 	registerRemoteRoutes(app, controllers.remote);
 	registerRuntimeControlRoutes(app, controllers.runtimeControl);
+	registerRuntimeUpdateRoutes(app, controllers.runtimeUpdate);
 	mountMarketplaceRoutes(app, {
 		plugin: controllers.pluginMarketplace,
 		skill: controllers.skillMarketplace,
@@ -4956,11 +5034,66 @@ function applyCorsHeaders(params) {
 	appendVaryHeader(params.headers, "Origin");
 	appendVaryHeader(params.headers, "Access-Control-Request-Headers");
 }
-function startUiServer(options) {
+function createUiEventPublisher(clients) {
+	return (event) => {
+		const payload = JSON.stringify(event);
+		for (const client of clients) if (client.readyState === WebSocket.OPEN) client.send(payload);
+	};
+}
+function mountUiStaticAssets(app, staticDir) {
+	if (!existsSync(join(staticDir, "index.html"))) return;
+	const indexHtml = readFileSync(join(staticDir, "index.html"), "utf-8");
+	app.use("/*", serveStatic({
+		root: staticDir,
+		join,
+		getContent: async (path) => {
+			try {
+				return await readFile(path);
+			} catch {
+				return null;
+			}
+		},
+		isDir: async (path) => {
+			try {
+				return (await stat(path)).isDirectory();
+			} catch {
+				return false;
+			}
+		}
+	}));
+	app.get("*", (c) => {
+		const path = c.req.path;
+		if (path.startsWith("/api") || path.startsWith("/ws") || path.startsWith("/_remote")) return c.notFound();
+		return c.html(indexHtml);
+	});
+}
+function attachUiSocketServer(httpServer, authService, clients) {
+	const wss = new WebSocketServer({ noServer: true });
+	httpServer.on("upgrade", (request, socket, head) => {
+		const host = request.headers.host ?? "127.0.0.1";
+		const url = request.url ?? "/";
+		if (new URL(url, `http://${host}`).pathname !== "/ws") return;
+		if (!authService.isSocketAuthenticated(request)) {
+			socket.write("HTTP/1.1 401 Unauthorized\r\nConnection: close\r\n\r\n");
+			socket.destroy();
+			return;
+		}
+		wss.handleUpgrade(request, socket, head, (ws) => {
+			wss.emit("connection", ws, request);
+		});
+	});
+	wss.on("connection", (socket) => {
+		clients.add(socket);
+		socket.on("close", () => clients.delete(socket));
+	});
+	return wss;
+}
+async function startUiServer(options) {
+	const { applyLiveConfigReload, configPath, corsOrigins, cronService, getBootstrapStatus, getPluginChannelBindings, getPluginUiMetadata, host, initializeAgentHomeDirectory, marketplace, ncpAgent, ncpSessionService, port, productVersion, remoteAccess, runtimeControl, runtimeUpdate, staticDir } = options;
 	const app = new Hono();
 	app.use("/*", compress());
-	const corsPolicy = options.corsOrigins ?? DEFAULT_CORS_ORIGINS;
-	const authService = new UiAuthService(options.configPath);
+	const corsPolicy = corsOrigins ?? DEFAULT_CORS_ORIGINS;
+	const authService = new UiAuthService(configPath);
 	app.use("/api/*", async (c, next) => {
 		const allowOrigin = resolveAllowedCorsOrigin(readRequestHeader(c.req.raw, "origin"), corsPolicy);
 		const allowHeaders = readRequestHeader(c.req.raw, "access-control-request-headers");
@@ -4987,86 +5120,43 @@ function startUiServer(options) {
 		});
 	});
 	const clients = /* @__PURE__ */ new Set();
-	const publish = (event) => {
-		const payload = JSON.stringify(event);
-		for (const client of clients) if (client.readyState === WebSocket.OPEN) client.send(payload);
-	};
+	const publish = createUiEventPublisher(clients);
 	app.route("/", createUiRouter({
-		configPath: options.configPath,
-		productVersion: options.productVersion,
+		configPath,
+		productVersion,
 		publish,
-		applyLiveConfigReload: options.applyLiveConfigReload,
-		initializeAgentHomeDirectory: options.initializeAgentHomeDirectory,
-		marketplace: options.marketplace,
-		cronService: options.cronService,
-		ncpAgent: options.ncpAgent,
-		ncpSessionService: options.ncpSessionService,
+		applyLiveConfigReload,
+		initializeAgentHomeDirectory,
+		marketplace,
+		cronService,
+		ncpAgent,
+		ncpSessionService,
 		authService,
-		remoteAccess: options.remoteAccess,
-		runtimeControl: options.runtimeControl,
-		getBootstrapStatus: options.getBootstrapStatus,
-		getPluginChannelBindings: options.getPluginChannelBindings,
-		getPluginUiMetadata: options.getPluginUiMetadata
+		remoteAccess,
+		runtimeControl,
+		runtimeUpdate,
+		getBootstrapStatus,
+		getPluginChannelBindings,
+		getPluginUiMetadata
 	}));
-	const staticDir = options.staticDir;
-	if (staticDir && existsSync(join(staticDir, "index.html"))) {
-		const indexHtml = readFileSync(join(staticDir, "index.html"), "utf-8");
-		app.use("/*", serveStatic({
-			root: staticDir,
-			join,
-			getContent: async (path) => {
-				try {
-					return await readFile(path);
-				} catch {
-					return null;
-				}
-			},
-			isDir: async (path) => {
-				try {
-					return (await stat(path)).isDirectory();
-				} catch {
-					return false;
-				}
-			}
-		}));
-		app.get("*", (c) => {
-			const path = c.req.path;
-			if (path.startsWith("/api") || path.startsWith("/ws") || path.startsWith("/_remote")) return c.notFound();
-			return c.html(indexHtml);
-		});
-	}
-	const server = serve({
-		fetch: app.fetch,
-		port: options.port,
-		hostname: options.host
-	});
-	const httpServer = server;
-	const wss = new WebSocketServer({ noServer: true });
-	httpServer.on("upgrade", (request, socket, head) => {
-		const host = request.headers.host ?? "127.0.0.1";
-		const url = request.url ?? "/";
-		if (new URL(url, `http://${host}`).pathname !== "/ws") return;
-		if (!authService.isSocketAuthenticated(request)) {
-			socket.write("HTTP/1.1 401 Unauthorized\r\nConnection: close\r\n\r\n");
-			socket.destroy();
-			return;
-		}
-		wss.handleUpgrade(request, socket, head, (ws) => {
-			wss.emit("connection", ws, request);
-		});
-	});
-	wss.on("connection", (socket) => {
-		clients.add(socket);
-		socket.on("close", () => clients.delete(socket));
+	if (staticDir) mountUiStaticAssets(app, staticDir);
+	const server = await new Promise((resolve, reject) => {
+		const httpServer = serve({
+			fetch: app.fetch,
+			port,
+			hostname: host
+		}, () => resolve(httpServer));
+		httpServer.once("error", reject);
 	});
+	const wss = attachUiSocketServer(server, authService, clients);
 	return {
-		host: options.host,
-		port: options.port,
+		host,
+		port,
 		publish,
 		close: () => new Promise((resolve) => {
 			wss.close(() => {
 				server.close(() => {
-					Promise.resolve(options.ncpAgent?.agentClientEndpoint.stop()).catch(() => void 0).finally(() => resolve());
+					Promise.resolve(ncpAgent?.agentClientEndpoint.stop()).catch(() => void 0).finally(() => resolve());
 				});
 			});
 		})

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nextclaw/server",
-  "version": "0.12.12",
+  "version": "0.12.13-beta.1",
   "private": false,
   "description": "Nextclaw UI/API server.",
   "type": "module",
@@ -18,12 +18,13 @@
     "@hono/node-server": "^1.13.3",
     "hono": "^4.6.2",
     "ws": "^8.18.0",
-    "@nextclaw/core": "0.12.12",
-    "@nextclaw/mcp": "0.1.77",
-    "@nextclaw/ncp": "0.5.5",
-    "@nextclaw/ncp-http-agent-server": "0.3.17",
-    "@nextclaw/openclaw-compat": "1.0.12",
-    "@nextclaw/runtime": "0.2.44"
+    "@nextclaw/core": "0.12.13-beta.1",
+    "@nextclaw/kernel": "0.1.2-beta.2",
+    "@nextclaw/mcp": "0.1.78-beta.1",
+    "@nextclaw/ncp": "0.5.6-beta.0",
+    "@nextclaw/openclaw-compat": "1.0.13-beta.1",
+    "@nextclaw/ncp-http-agent-server": "0.3.18-beta.1",
+    "@nextclaw/runtime": "0.2.45-beta.0"
   },
   "devDependencies": {
     "@types/node": "^20.17.6",