@nikolasp98/minion 2026.6.14-dev.20260616061802 → 2026.6.16-dev

package/dist/{gateway-cli-BrM4d8E7.js → gateway-cli-C-AMSwgo.js}

@@ -1,8 +1,8 @@
 import { C as expandHomePrefix, c as resolveConfigPath, d as resolveGatewayLockDir, f as resolveGatewayPort, n as STATE_DIR, r as isNixMode, t as CONFIG_PATH, v as resolveStateDir } from "./paths-Ce170Tex.js";
 import { C as shortenHomePath, D as truncateUtf16Safe, L as getChildLogger, P as setVerbose, R as getLogger, _ as resolveConfigDir, b as resolveUserPath, c as ensureDir, d as isPlainObject, r as clamp, t as CONFIG_DIR, z as getResolvedLoggerSettings } from "./utils-DsgtGH3c.js";
 import { n as isRich, r as theme, t as colorize } from "./theme-CDbj88LB.js";
-import { F as resolveBootstrapMaxChars, G as normalizeUsageDisplay, H as normalizeElevatedLevel, I as resolveBootstrapTotalMaxChars, J as supportsXHighThinking, K as normalizeVerboseLevel, R as formatThinkingLevels, U as normalizeReasoningLevel, V as listThinkingLevels, W as normalizeThinkLevel, z as formatXHighModelHint } from "./pi-embedded-helpers-CkhQP2gU.js";
-import { $ as renamePairedNode, $n as getAgentRunContext, $t as applyToolPolicyPipeline, An as formatZonedTimestamp, At as abortEmbeddedPiRun, Br as extractImageContentFromSource, Bt as openInFlightTurnsStore, C as initTemplateLoader, Cr as parseVerboseOverride, Ct as loadCombinedSessionStoreForGateway, Dt as resolveSessionModelRef, Et as resolveGatewaySessionStoreTarget, Fr as registerUnhandledRejectionHandler, Ft as deleteRow, G as recordRemoteNodeInfo, H as resolveSendPolicy, Hn as countActiveDescendantRuns, Hr as resolveInputFileLimits, Ht as readConsolidationState, In as isAbortTrigger, It as listForCurrentInstance, J as removeRemoteNodeInfo, Jt as PromptSectionRegistry, K as refreshRemoteBinsForConnectedNodes, Kt as buildSectionRenderContext, Ln as stopSubagentsForRequester, Lr as DEFAULT_INPUT_IMAGE_MIMES, Lt as listFromOtherInstances, Mt as queueEmbeddedPiMessage, Nn as resolveUserTimezone, Nt as waitForEmbeddedPiRunEnd, Ot as normalizeOrgIds, Pt as closeInFlightTurnsStore, Q as rejectNodePairing, Qn as emitAgentEvent, Rt as markInterrupted, S as getTemplateUsageStats, Sn as getTotalPendingReplies, Sr as applyVerboseOverride, St as listSessionsFromStore, Tr as isSystemEventContextChanged, Tt as pruneLegacyStoreKeys, U as getRemoteSkillEligibility, Un as initSubagentRegistry, Ut as assembleAgentSystemPromptWithSections, V as normalizeSendPolicy, Vr as normalizeMimeList, W as primeRemoteSkillsCache, Wn as listDescendantRunsForRequester, Wr as transcribeOpenAiCompatibleAudio, Wt as getBuiltinSectionRegistry, X as approveNodePairing, Xt as _clearProseCache, Y as setSkillsRemoteRegistry, Yn as runSubagentAnnounceFlow, Yt as PROSE_GLOBAL_ROOT, Z as listNodePairing, Zn as clearAgentRunContext, Zt as createOpenClawCodingTools, _ as spawnSubagentDirect, _n as record, _t as buildSystemPromptReport, a as getCliSessionId, at as verifyPairingToken, b as getTemplateCache, bn as dispatchInboundMessage, c as debugSkipAll, cn as loadMinionPlugins, cr as resolveBootstrapContextForRun, ct as readJsonFile, d as setDebugStepBroadcaster, dn as claimBatch, dr as getTotalQueueSize, dt as getSkillsSnapshotVersion, en as buildDefaultToolPolicyPipelineSteps, er as onAgentEvent, et as requestNodePairing, f as setSteppedBuild, fn as closeMessageLedger, fr as resetAllLanes, ft as registerSkillsChangeListener, gn as patchRouting, gt as runEmbeddedPiAgent, hn as openMessageLedger, hr as lookupContextTokens, ht as clearSessionQueues, i as resolveCronStyleNow, it as hashToken, j as loadProviderUsageSummary, jt as getActiveEmbeddedRunCount, k as normalizeGroupActivation, kt as orgScopeVisible, l as debugStepContinue, ln as loadOpenClawPlugins, lr as getActiveTaskCount, lt as writeJsonAtomic, mn as markSynced, mr as waitForActiveTasks, n as BARE_SESSION_RESET_PROMPT, nn as TOOL_REGISTRY, nt as verifyNodeToken, o as setCliSessionId, on as getPluginToolMeta, ot as pruneExpiredPending, pn as markFailed, pr as setCommandLaneConcurrency, q as refreshRemoteNodeBins, qn as markSubagentRunTerminated, qr as resolveAgentTimeoutMs, qt as buildToolSummaryMap, rn as requestHeartbeatNow, rr as resolveAgentIdentity, rt as generatePairingToken, s as runCliAgent, st as resolvePairingPaths, tn as createOpenClawTools, tr as registerAgentRunContext, tt as updatePairedNodeMetadata, u as isSteppedBuildEnabled, ut as createAsyncLock, v as getLastReloadAt, vt as buildSystemPromptParams, w as stopTemplateWatcher, wr as enqueueSystemEvent, wt as loadSessionEntry, x as getTemplateLoadErrors, xn as createReplyDispatcher, xr as applyModelOverrideToSessionEntry, xt as listAgentsForGateway, y as getTemplate, yr as buildAuthHealthSummary, yt as canonicalizeSpawnedByForAgent, zr as extractFileContentFromSource, zt as markRecoveryAttempt } from "./reply-D_uwJ_hb.js";
+import { F as resolveBootstrapMaxChars, G as normalizeUsageDisplay, H as normalizeElevatedLevel, I as resolveBootstrapTotalMaxChars, J as supportsXHighThinking, K as normalizeVerboseLevel, R as formatThinkingLevels, U as normalizeReasoningLevel, V as listThinkingLevels, W as normalizeThinkLevel, z as formatXHighModelHint } from "./pi-embedded-helpers-CSxJBpFl.js";
+import { $ as renamePairedNode, $n as emitAgentEvent, At as abortEmbeddedPiRun, Br as extractFileContentFromSource, Bt as markRecoveryAttempt, C as initTemplateLoader, Cn as getTotalPendingReplies, Cr as applyVerboseOverride, Ct as loadCombinedSessionStoreForGateway, Dt as resolveSessionModelRef, Er as isSystemEventContextChanged, Et as resolveGatewaySessionStoreTarget, Ft as closeInFlightTurnsStore, G as recordRemoteNodeInfo, Gn as listDescendantRunsForRequester, Gr as transcribeOpenAiCompatibleAudio, Gt as getBuiltinSectionRegistry, H as resolveSendPolicy, Hr as normalizeMimeList, Ir as registerUnhandledRejectionHandler, It as deleteRow, J as removeRemoteNodeInfo, Jn as markSubagentRunTerminated, Jr as resolveAgentTimeoutMs, Jt as buildToolSummaryMap, K as refreshRemoteBinsForConnectedNodes, Ln as isAbortTrigger, Lt as listForCurrentInstance, Mt as queueEmbeddedPiMessage, Nt as waitForEmbeddedPiRunEnd, Ot as normalizeOrgIds, Pn as resolveUserTimezone, Pt as registerLifecycleHooks, Q as rejectNodePairing, Qn as clearAgentRunContext, Qt as createOpenClawCodingTools, Rn as stopSubagentsForRequester, Rr as DEFAULT_INPUT_IMAGE_MIMES, Rt as listFromOtherInstances, S as getTemplateUsageStats, Sn as createReplyDispatcher, Sr as applyModelOverrideToSessionEntry, St as listSessionsFromStore, Tr as enqueueSystemEvent, Tt as pruneLegacyStoreKeys, U as getRemoteSkillEligibility, Un as countActiveDescendantRuns, Ur as resolveInputFileLimits, Ut as readConsolidationState, V as normalizeSendPolicy, Vr as extractImageContentFromSource, Vt as openInFlightTurnsStore, W as primeRemoteSkillsCache, Wn as initSubagentRegistry, Wt as assembleAgentSystemPromptWithSections, X as approveNodePairing, Xn as runSubagentAnnounceFlow, Xt as PROSE_GLOBAL_ROOT, Y as setSkillsRemoteRegistry, Yt as PromptSectionRegistry, Z as listNodePairing, Zt as _clearProseCache, _ as spawnSubagentDirect, _n as patchRouting, _t as buildSystemPromptReport, a as getCliSessionId, at as verifyPairingToken, b as getTemplateCache, br as buildAuthHealthSummary, c as debugSkipAll, ct as readJsonFile, d as setDebugStepBroadcaster, dt as getSkillsSnapshotVersion, en as applyToolPolicyPipeline, er as getAgentRunContext, et as requestNodePairing, f as setSteppedBuild, fn as claimBatch, fr as getTotalQueueSize, ft as registerSkillsChangeListener, gn as openMessageLedger, gr as lookupContextTokens, gt as runEmbeddedPiAgent, hn as markSynced, hr as waitForActiveTasks, ht as clearSessionQueues, i as resolveCronStyleNow, in as requestHeartbeatNow, ir as resolveAgentIdentity, it as hashToken, j as loadProviderUsageSummary, jn as formatZonedTimestamp, jt as getActiveEmbeddedRunCount, k as normalizeGroupActivation, kt as orgScopeVisible, l as debugStepContinue, ln as loadMinionPlugins, lr as resolveBootstrapContextForRun, lt as writeJsonAtomic, mn as markFailed, mr as setCommandLaneConcurrency, n as BARE_SESSION_RESET_PROMPT, nn as createOpenClawTools, nr as registerAgentRunContext, nt as verifyNodeToken, o as setCliSessionId, ot as pruneExpiredPending, pn as closeMessageLedger, pr as resetAllLanes, q as refreshRemoteNodeBins, qt as buildSectionRenderContext, rn as TOOL_REGISTRY, rt as generatePairingToken, s as runCliAgent, sn as getPluginToolMeta, st as resolvePairingPaths, tn as buildDefaultToolPolicyPipelineSteps, tr as onAgentEvent, tt as updatePairedNodeMetadata, u as isSteppedBuildEnabled, un as loadOpenClawPlugins, ur as getActiveTaskCount, ut as createAsyncLock, v as getLastReloadAt, vn as record, vt as buildSystemPromptParams, w as stopTemplateWatcher, wr as parseVerboseOverride, wt as loadSessionEntry, x as getTemplateLoadErrors, xn as dispatchInboundMessage, xt as listAgentsForGateway, y as getTemplate, yt as canonicalizeSpawnedByForAgent, zt as markInterrupted } from "./reply-CNJWciSj.js";
 import { B as listMcpTools, E as createEmptyPluginRegistry, F as triggerInternalHook, H as registerMcpTool, I as addMcpSseSubscriber, L as getMcpDispatcher, M as clearInternalHooks, N as createInternalHookEvent, P as registerInternalHook, R as getMcpIdentityResolver, U as setMcpDispatcher, V as reconcileMcpPluginTools, W as setMcpIdentityResolver, a as setConsoleSubsystemFilter, d as CHANNEL_IDS, n as runtimeForLogger, o as setConsoleTimestampPrefix, t as createSubsystemLogger, w as setActivePluginRegistryConfig, x as getActivePluginRegistry, z as getMcpToolMethod } from "./subsystem-Cnn1-kOi.js";
 import { t as defaultRuntime } from "./runtime-Da615Z-K.js";
 import { b as isSubagentSessionKey, d as resolveAgentIdFromSessionKey, h as toAgentStoreSessionKey, i as buildAgentMainSessionKey, l as normalizeAgentId, m as toAgentRequestSessionKey, n as DEFAULT_AGENT_ID, s as classifySessionKeyShape, t as DEFAULT_ACCOUNT_ID, u as normalizeMainKey, v as isCronRunSessionKey, x as parseAgentSessionKey } from "./session-key-BcXqsG0l.js";
@@ -16,21 +16,21 @@ import { t as applySqlitePragmas } from "./sqlite-pragmas-C_o_lU6a.js";
 import { t as requireNodeSqlite } from "./sqlite-TEJFfaDd.js";
 import { d as setSentryTag, n as getReliabilityUptimeStartMs, r as initReliability, t as emitReliabilityEvent, u as setSentryContext } from "./reliability-sDt3TayA.js";
 import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-Ceu1fF46.js";
-import { E as parseDurationMs, c as applyLegacyMigrations, i as MinionSchema, n as validateConfigObjectWithPlugins, v as resolveAgentMaxConcurrent, w as sensitive, y as resolveSubagentMaxConcurrent } from "./validation-T0CNq_JP.js";
-import { C as resolveRuntimeServiceVersion, S as VERSION, a as parseConfigJson5, c as resolveConfigSnapshotHash, i as loadConfig, l as writeConfigFile, n as clearConfigCache, o as readConfigFileSnapshot, r as createConfigIO, s as readConfigFileSnapshotForWrite, t as applySnapshotDefaults, y as applyMergePatch } from "./io-oiyyZuuG.js";
+import { E as parseDurationMs, c as applyLegacyMigrations, i as MinionSchema, n as validateConfigObjectWithPlugins, v as resolveAgentMaxConcurrent, w as sensitive, y as resolveSubagentMaxConcurrent } from "./validation-DuFmPzCB.js";
+import { C as resolveRuntimeServiceVersion, S as VERSION, a as parseConfigJson5, c as resolveConfigSnapshotHash, i as loadConfig, l as writeConfigFile, n as clearConfigCache, o as readConfigFileSnapshot, r as createConfigIO, s as readConfigFileSnapshotForWrite, t as applySnapshotDefaults, y as applyMergePatch } from "./io-CpUiX-Lv.js";
 import { l as isTestDefaultMemorySlotDisabled, n as loadPluginManifestRegistry } from "./manifest-registry-CGpdVni_.js";
-import { n as migrateLegacyConfig } from "./config-BgqD6SVw.js";
+import { n as migrateLegacyConfig } from "./config-DJTLRK5S.js";
 import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin, v as buildChannelAccountBindings } from "./plugins-DQY2DPZw.js";
-import { A as evaluateSessionFreshness, B as resolveMainSessionKey, C as readSessionMessages, D as stripEnvelopeFromMessages, E as resolveSessionTranscriptCandidates, I as resolveFreshSessionTotalTokens, L as canonicalizeMainSessionAlias, M as resolveSessionResetPolicy, R as resolveAgentMainSessionKey, S as capArrayByJsonBytes, U as snapshotSessionOrigin, V as resolveMainSessionKeyFromConfig, a as loadSessionStore, b as archiveFileOnDisk, g as mergeDeliveryContext, m as deliveryContextFromSession, n as parseSessionThreadInfo, t as extractDeliveryInfo, tt as cleanStaleLockFiles, u as updateSessionStore, v as normalizeSessionDeliveryFields, w as readSessionPreviewItemsFromTranscript, x as archiveSessionTranscripts, z as resolveExplicitAgentSessionKey } from "./sessions-Z8JCL_sa.js";
-import { n as runWithModelFallback } from "./model-fallback-DsefSc26.js";
-import { c as resolveSandboxRuntimeStatus, g as collectExplicitAllowlist, p as TOOL_GROUPS, v as expandToolGroups, x as resolveToolProfilePolicy, y as mergeAlsoAllowPolicy } from "./sandbox-DX1DKAJb.js";
+import { A as evaluateSessionFreshness, B as resolveMainSessionKey, C as readSessionMessages, D as stripEnvelopeFromMessages, E as resolveSessionTranscriptCandidates, I as resolveFreshSessionTotalTokens, L as canonicalizeMainSessionAlias, M as resolveSessionResetPolicy, R as resolveAgentMainSessionKey, S as capArrayByJsonBytes, U as snapshotSessionOrigin, V as resolveMainSessionKeyFromConfig, a as loadSessionStore, b as archiveFileOnDisk, g as mergeDeliveryContext, m as deliveryContextFromSession, n as parseSessionThreadInfo, t as extractDeliveryInfo, tt as cleanStaleLockFiles, u as updateSessionStore, v as normalizeSessionDeliveryFields, w as readSessionPreviewItemsFromTranscript, x as archiveSessionTranscripts, z as resolveExplicitAgentSessionKey } from "./sessions-CW4tzKA-.js";
+import { n as runWithModelFallback } from "./model-fallback--afWtYyY.js";
+import { c as resolveSandboxRuntimeStatus, g as collectExplicitAllowlist, p as TOOL_GROUPS, v as expandToolGroups, x as resolveToolProfilePolicy, y as mergeAlsoAllowPolicy } from "./sandbox-BYK6Qgnd.js";
 import { a as enableTailscaleServeFunnel, i as enableTailscaleServe, n as disableTailscaleServe, r as enableTailscaleFunnel, s as getTailnetHostname, t as disableTailscaleFunnel } from "./tailscale-CTwxLN7C.js";
 import { a as resolveRequestClientIp, c as createAuthRateLimiter, i as resolveGatewayAuth, l as safeEqualSecret, n as authorizeGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as isLocalDirectRequest, s as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, t as assertGatewayAuthConfigured } from "./auth-2GwvV8-B.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-C0DLwT7t.js";
 import { a as isTrustedProxyAddress, d as resolveGatewayClientIp, f as resolveGatewayListenHosts, i as isPrivateOrLoopbackAddress, l as pickPrimaryLanIPv4, n as isLoopbackAddress, p as resolveHostName, r as isLoopbackHost, s as normalizeHostHeader, t as rawDataToString, u as resolveGatewayBindHost } from "./ws-D1BO6u3O.js";
-import { h as mergeGatewayTailscaleConfig, m as ensureGatewayStartupAuth } from "./server-context-BlUcP_zF.js";
-import { n as buildWorkspaceSkillSnapshot, r as loadWorkspaceSkillEntries } from "./workspace-CSGZ3DZ_.js";
-import "./skills-DkeUrhAT.js";
+import { h as mergeGatewayTailscaleConfig, m as ensureGatewayStartupAuth } from "./server-context-CvEQbenq.js";
+import { n as buildWorkspaceSkillSnapshot, r as loadWorkspaceSkillEntries } from "./workspace-CVAkpBJa.js";
+import "./skills-Bf4ZPGHe.js";
 import { a as isErrno, n as formatErrorMessage } from "./errors-iV4-NKRR.js";
 import { c as detectMime } from "./image-ops-BGSWtWRb.js";
 import { a as inspectPortUsage, r as ensurePortAvailable, s as formatPortDiagnostics } from "./ports-Cwx06Uji.js";
@@ -41,20 +41,20 @@ import { r as resolveUserDir } from "./user-directory-D27je39W.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, s as resolveSessionTranscriptsDirForAgent } from "./paths-Ds2czhyU.js";
 import { i as normalizeInputProvenance } from "./input-provenance-ChJN5mZj.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-qmA7mTor.js";
-import { n as loadModelCatalog } from "./model-catalog-CIgjk707.js";
+import { n as loadModelCatalog } from "./model-catalog-B1R3eepi.js";
 import { n as SILENT_REPLY_TOKEN, r as isSilentReplyText } from "./tokens-DRSqc0S5.js";
 import { a as stripHeartbeatToken } from "./lanes-D8quZPN3.js";
-import { i as resolveSessionDeliveryTarget, r as resolveOutboundTarget } from "./targets-BWPxk4rU.js";
+import { i as resolveSessionDeliveryTarget, r as resolveOutboundTarget } from "./targets-BpZ7t54u.js";
 import { n as getMachineDisplayName } from "./with-timeout-B2r_vm3n.js";
 import { c as startDiagnosticHeartbeat, d as isDiagnosticsEnabled, l as stopDiagnosticHeartbeat } from "./diagnostic-BGtWFYHO.js";
-import { g as getGlobalHookRunner, v as runGlobalGatewayStopSafely } from "./reply-payloads-BBHotu7W.js";
-import { C as OPENAI_TTS_MODELS, _ as setTtsEnabled, d as resolveTtsAutoMode, f as resolveTtsConfig, i as getTtsProvider, m as resolveTtsProviderOrder, o as isTtsEnabled, p as resolveTtsPrefsPath, s as isTtsProviderConfigured, t as buildTtsSystemPromptHint, u as resolveTtsApiKey, w as OPENAI_TTS_VOICES, x as textToSpeech, y as setTtsProvider } from "./tts-CC3WSaW9.js";
-import { a as defineDrone, i as runDrone, t as createGatewayDroneHost } from "./host-D3VZGype.js";
+import { g as getGlobalHookRunner, v as runGlobalGatewayStopSafely } from "./reply-payloads-BS889lPA.js";
+import { C as OPENAI_TTS_MODELS, _ as setTtsEnabled, d as resolveTtsAutoMode, f as resolveTtsConfig, i as getTtsProvider, m as resolveTtsProviderOrder, o as isTtsEnabled, p as resolveTtsPrefsPath, s as isTtsProviderConfigured, t as buildTtsSystemPromptHint, u as resolveTtsApiKey, w as OPENAI_TTS_VOICES, x as textToSpeech, y as setTtsProvider } from "./tts-BhWpmVdG.js";
+import { a as defineDrone, i as runDrone, t as createGatewayDroneHost } from "./host-C8oRBLB6.js";
 import { a as traceGatewayEvent, n as pruneOldTraceFiles } from "./chat-trace-B7hAMbQe.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-BxVGlaEm.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-Bz--RMDo.js";
 import { t as ToolInputError } from "./common-CRD8HhuP.js";
 import { $ as validateNodeDescribeParams, A as validateCronRunsParams, At as validateToolsUpdateParams, B as validateExecApprovalRequestParams, Bt as errorShape, C as validateConfigSchemaParams, Ct as validateSkillsStatusParams, D as validateCronListParams, Dt as validateTelegramValidateTokenParams, E as validateCronAddParams, Et as validateTalkModeParams, F as validateDevicePairRejectParams, Ft as validateWizardCancelParams, G as validateExecApprovalsSetParams, Gt as deriveDeviceIdFromPublicKey, H as validateExecApprovalsGetParams, Ht as buildDeviceAuthPayload, I as validateDevicePairRemoveParams, It as validateWizardNextParams, J as validateMeshPlanParams, Jt as verifyDeviceSignature, K as validateLogsTailParams, L as validateDeviceTokenRevokeParams, Lt as validateWizardStartParams, M as validateCronUpdateParams, Mt as validateWakeParams, N as validateDevicePairApproveParams, Nt as validateWebLoginStartParams, O as validateCronRemoveParams, Ot as validateToolsOverridesSetParams, P as validateDevicePairListParams, Pt as validateWebLoginWaitParams, Q as validateModelsListParams, R as validateDeviceTokenRotateParams, Rt as validateWizardStatusParams, S as validateConfigPatchParams, St as validateSkillsInstallParams, T as validateConnectParams, Tt as validateTalkConfigParams, U as validateExecApprovalsNodeGetParams, Ut as normalizeDeviceAuthScopes, V as validateExecApprovalResolveParams, Vt as parseSessionLabel, W as validateExecApprovalsNodeSetParams, X as validateMeshRunParams, Y as validateMeshRetryParams, Z as validateMeshStatusParams, _ as validateChatHistoryParams, _t as validateSessionsPreviewParams, a as validateAgentWaitParams, at as validateNodePairListParams, b as validateConfigApplyParams, bt as validateSessionsUsageParams, c as validateAgentsFilesGetParams, ct as validateNodePairVerifyParams, d as validateAgentsListParams, dt as validateRequestFrame, et as validateNodeEventParams, f as validateAgentsSkillsSetParams, ft as validateSendParams, g as validateChatAbortParams, gt as validateSessionsPatchParams, h as validateChannelsStatusParams, ht as validateSessionsListParams, i as validateAgentParams, it as validateNodePairApproveParams, j as validateCronStatusParams, jt as validateUpdateRunParams, k as validateCronRunParams, kt as validateToolsStatusParams, l as validateAgentsFilesListParams, lt as validateNodeRenameParams, m as validateChannelsLogoutParams, mt as validateSessionsDeleteParams, n as formatValidationErrors, nt as validateNodeInvokeResultParams, o as validateAgentsCreateParams, ot as validateNodePairRejectParams, p as validateAgentsUpdateParams, pt as validateSessionsCompactParams, q as validateMeshPlanAutoParams, qt as normalizeDevicePublicKeyBase64Url, r as validateAgentIdentityParams, rt as validateNodeListParams, s as validateAgentsDeleteParams, st as validateNodePairRequestParams, tt as validateNodeInvokeParams, u as validateAgentsFilesSetParams, ut as validatePollParams, v as validateChatInjectParams, vt as validateSessionsResetParams, w as validateConfigSetParams, wt as validateSkillsUpdateParams, x as validateConfigGetParams, xt as validateSkillsBinsParams, y as validateChatSendParams, yt as validateSessionsResolveParams, z as validateDiscordValidateTokenParams, zt as ErrorCodes } from "./client-u0H6YbL4.js";
-import { n as callGateway, o as loadGatewayTlsRuntime$1 } from "./call-COjGFB_A.js";
+import { n as callGateway, o as loadGatewayTlsRuntime$1 } from "./call-Di0NGY7s.js";
 import { i as isExternalHookSession, n as detectSuspiciousPatterns, r as getHookType, t as buildSafeExternalPrompt } from "./external-content-Css-cJoz.js";
 import { t as formatDocsLink } from "./links-C1xb6h4b.js";
 import { n as runCommandWithRuntime } from "./cli-utils-Cg2c3XDf.js";
@@ -62,7 +62,7 @@ import { t as formatHelpExamples } from "./help-format-D20I7z1G.js";
 import { n as withProgress } from "./progress-8_pqhNaq.js";
 import { t as getChannelActivity } from "./channel-activity-mLVM0GeJ.js";
 import { a as mergeExecApprovalsSocketDefaults, c as readExecApprovalsSnapshot, p as saveExecApprovals, r as ensureExecApprovals, s as normalizeExecApprovals, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-DWRoIcX_.js";
-import { a as resolveGroupToolPolicy, i as resolveEffectiveToolPolicy, o as resolveSubagentToolPolicy, t as listAgentWorkspaceDirs } from "./workspace-dirs-Yo4RZm7s.js";
+import { a as resolveGroupToolPolicy, i as resolveEffectiveToolPolicy, o as resolveSubagentToolPolicy, t as listAgentWorkspaceDirs } from "./workspace-dirs-CJDJUlno.js";
 import { r as recallMemories, t as configureMemorySink } from "./memory-sink-D19pkCCX.js";
 import { t as KnowledgeGraphSession } from "./knowledge-graph-DoB5Rkcc.js";
 import { c as hasNonzeroUsage, i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, s as deriveSessionTotalTokens, t as discoverAllSessions } from "./session-cost-usage-7pQyzV4m.js";
@@ -70,25 +70,25 @@ import { n as formatTokenCount, r as formatUsd } from "./usage-format--dK3YoXf.j
 import { a as markGatewaySigusr1RestartHandled, c as setPreRestartDeferralCheck, i as isGatewaySigusr1RestartExternallyAllowed, n as deferGatewayRestartUntilIdle, o as scheduleGatewaySigusr1Restart, r as emitGatewayRestart, s as setGatewaySigusr1RestartPolicy, t as consumeGatewaySigusr1RestartAuthorization } from "./restart-CrIJvqAZ.js";
 import { i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-CCq47bb-.js";
 import { t as normalizePollInput } from "./polls-8i6CJXI7.js";
-import { a as computeBackoff, n as resolveChannelSenderIdentity, o as sleepWithAbort, r as buildHistoryContextFromEntries, t as createReplyPrefixOptions } from "./reply-prefix-eSF5kXs5.js";
+import { a as computeBackoff, n as resolveChannelSenderIdentity, o as sleepWithAbort, r as buildHistoryContextFromEntries, t as createReplyPrefixOptions } from "./reply-prefix-CfrIMbCM.js";
 import { n as handleHubAssignmentChanged, r as initUserSubsystem, t as getActiveUserSubsystem } from "./server-startup-users-DPCSImrP.js";
 import { t as mapRoleToScopes } from "./types-DI5uGqkl.js";
-import { n as createOutboundSendDeps, t as createDefaultDeps } from "./deps-DRyTOIPO.js";
+import { n as createOutboundSendDeps, t as createDefaultDeps } from "./deps-DFeGFeii.js";
 import { t as ensureMinionCliOnPath } from "./path-env-D7TwuZdr.js";
 import { t as forceFreePortAndWait } from "./ports-BsrFZzjz.js";
 import { t as buildChannelUiCatalog } from "./catalog-gQ7yZnqz.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-D54inzOP.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-8p-KrlIF.js";
 import { n as setGoogleAdcClient, t as getGoogleAdcClient } from "./hub-credential-client-registry-Do4Y6KWZ.js";
 import { a as normalizeOptionalAgentId, c as normalizePayloadToSystemText, d as buildDeliveryFromLegacyPayload, f as hasLegacyDeliveryHints, i as inferLegacyName, l as normalizeRequiredName, n as normalizeCronJobCreate, o as normalizeOptionalSessionKey, p as stripLegacyDeliveryFields, r as normalizeCronJobPatch, s as normalizeOptionalText, t as normalizeHttpWebhookUrl, u as migrateLegacyCronPayload } from "./webhook-url-_cSEQkJk.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-BlvVswOf.js";
 import { a as summarizeRestartSentinel, n as formatDoctorNonInteractiveHint, r as formatRestartSentinelMessage, s as writeRestartSentinel, t as consumeRestartSentinel } from "./restart-sentinel-B7OftYJp.js";
-import { c as loadChannelOutboundAdapter, o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-Dhut24vc.js";
+import { c as loadChannelOutboundAdapter, o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-Ds0o_rCY.js";
 import { n as resolveMessageChannelSelection } from "./channel-selection-ERVd9FwM.js";
-import { a as resetDirectoryCache, n as ensureOutboundSessionEntry, t as resolveOutboundSessionRoute } from "./outbound-session-pZGUQ4vz.js";
-import { c as resolveAnnounceTargetFromKey, t as readLatestAssistantReply } from "./agent-step-C3wXb9Cx.js";
+import { a as resetDirectoryCache, n as ensureOutboundSessionEntry, t as resolveOutboundSessionRoute } from "./outbound-session-BG0ZMrIB.js";
+import { c as resolveAnnounceTargetFromKey, t as readLatestAssistantReply } from "./agent-step-D5w2xNfi.js";
 import { a as runAggregation, n as executeOrchestration, r as readStatusJson, t as executePipeline } from "./orchestration-pipeline-BBscBgru.js";
 import { r as readManifest, t as completeManifest } from "./orchestration-manifest-ByxGsjSI.js";
-import { i as startBrowserControlServiceFromConfig, r as createBrowserControlContext, t as createBrowserRouteDispatcher } from "./dispatcher-DefEQC4n.js";
+import { i as startBrowserControlServiceFromConfig, r as createBrowserControlContext, t as createBrowserRouteDispatcher } from "./dispatcher-D8fgAnwH.js";
 import { n as persistBrowserProxyFiles, t as applyBrowserProxyPaths } from "./proxy-files-BG6FSWAt.js";
 import { r as cachedJson } from "./ttl-cache-D8U8y0By.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-_OH_n-zu.js";
@@ -97,32 +97,32 @@ import { t as WizardCancelledError } from "./prompts-E0FayNjJ.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-BcEbnHmz.js";
 import { t as applyPluginAutoEnable } from "./plugin-auto-enable-DARQAsaF.js";
 import { t as buildChannelAccountSnapshot } from "./status-Dg720jp3.js";
-import { C as resolveAssistantAvatarUrl, S as normalizeControlUiBasePath, b as CONTROL_UI_AVATAR_PREFIX, c as handleReset, x as buildControlUiAvatarUrl } from "./onboard-helpers-D60Qp1ne.js";
-import "./onboard-helpers-xGGsG9to.js";
+import { C as resolveAssistantAvatarUrl, S as normalizeControlUiBasePath, b as CONTROL_UI_AVATAR_PREFIX, c as handleReset, x as buildControlUiAvatarUrl } from "./onboard-helpers-B9IGa3vx.js";
+import "./onboard-helpers-HkYz_NGi.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-C0ucbd84.js";
-import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, s as setHeartbeatsEnabled, t as formatHealthChannelLines } from "./health-BJ-Irw3K.js";
+import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, s as setHeartbeatsEnabled, t as formatHealthChannelLines } from "./health-BJbAa4df.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-BatXL6LW.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-C1bt62Sk.js";
-import { t as installSkill } from "./skills-install-BNR2Nfa3.js";
+import { t as installSkill } from "./skills-install-DkZHLCih.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-Do82z49r.js";
 import { t as parsePort$1 } from "./parse-port-DA32M3gA.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-Bs0GD5xF.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-CHfZAu4w.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-CnK9cDZ7.js";
-import { a as resolveNodeCommandAllowlist, i as isNodeCommandAllowed, o as probeGateway } from "./audit-DmbpL3cv.js";
-import { n as getStatusSummary, r as pickGatewaySelfPresence } from "./status-DosDYGut.js";
+import { a as resolveNodeCommandAllowlist, i as isNodeCommandAllowed, o as probeGateway } from "./audit-B8L_aShb.js";
+import { n as getStatusSummary, r as pickGatewaySelfPresence } from "./status-DyQwrglF.js";
 import { a as resolveNpmChannelTag, n as compareSemverStrings, p as normalizeUpdateChannel, t as checkUpdateStatus } from "./update-check-Dy4Ru8ir.js";
 import { i as initCrypto, n as ProbeRegistry, r as SecretsManager, t as SecretStore } from "./store-BBswqFUs.js";
-import { t as runOnboardingWizard } from "./onboarding-BkiZ3JkU.js";
-import { a as normalizeRpcAttachmentsToChatAttachments, c as logWs, d as setGatewayWsLogStyle, i as sendApnsBackgroundWake, l as shouldLogWs, o as parseMessageWithAttachments, r as resolveApnsAuthConfigFromEnv, s as formatForLog, t as loadApnsRegistration, u as summarizeAgentEventForWsLog } from "./push-apns-Dh6xZki_.js";
-import { h as resolveGmailPullRuntimeConfig } from "./gmail-Dkq3kngs.js";
+import { t as runOnboardingWizard } from "./onboarding-Cg42Uf0E.js";
+import { a as normalizeRpcAttachmentsToChatAttachments, c as logWs, d as setGatewayWsLogStyle, i as sendApnsBackgroundWake, l as shouldLogWs, o as parseMessageWithAttachments, r as resolveApnsAuthConfigFromEnv, s as formatForLog, t as loadApnsRegistration, u as summarizeAgentEventForWsLog } from "./push-apns-BhtcU_Da.js";
+import { h as resolveGmailPullRuntimeConfig } from "./gmail-BuCz-KEp.js";
 import { t as createOutboundSendDeps$1 } from "./outbound-send-deps-BF7Fp5DR.js";
-import { a as pruneAgentConfig, c as resolveAgentDeliveryPlan, d as loadAgentIdentityFromWorkspace, i as loadAgentIdentity, l as resolveAgentOutboundTarget, o as agentCommand, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-1imA1H12.js";
+import { a as pruneAgentConfig, c as resolveAgentDeliveryPlan, d as loadAgentIdentityFromWorkspace, i as loadAgentIdentity, l as resolveAgentOutboundTarget, o as agentCommand, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-Di1Fb5KI.js";
 import { n as validateSystemRunCommandConsistency, t as formatExecCommand } from "./system-run-command-BRxsVIll.js";
 import { n as runGatewayUpdate, t as resolveAgentSessionDirs } from "./session-dirs-COKJbLTF.js";
 import { n as setEmbedConcurrency } from "./qmd-embed-semaphore-B8ApTrxs.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import * as fs$3 from "node:fs";
-import fs, { constants, promises, readFileSync } from "node:fs";
+import fs, { appendFileSync, constants, existsSync, mkdirSync, promises, readFileSync, statSync } from "node:fs";
 import os, { homedir } from "node:os";
 import * as path$1 from "node:path";
 import path, { dirname, join } from "node:path";
@@ -147,8 +147,8 @@ import chokidar from "chokidar";
 import { Type } from "@sinclair/typebox";
 import { EventEmitter } from "node:events";
 import Database from "better-sqlite3";
-import { monitorEventLoopDelay } from "node:perf_hooks";
 import { SignJWT, createRemoteJWKSet, jwtVerify } from "jose";
+import { monitorEventLoopDelay } from "node:perf_hooks";
 import { Cron } from "croner";
 import { DatabaseSync } from "node:sqlite";
 import { encode } from "gpt-tokenizer";
@@ -1398,177 +1398,8 @@ function scanForInterruptedOrchestrations(agentWorkspaces) {
 	return interrupted;
 }
 //#endregion
-//#region src/gateway/gateway-request-metrics.ts
-/**
-* Gateway request performance metrics.
-*
-* Records per-method handler latency at the request dispatch chokepoint and
-* samples Node's event-loop delay, then emits a single aggregated
-* `gateway.perf_snapshot` event per window (default 60s) into the unified
-* event store — the same surface the hub reliability dashboard reads.
-*
-* Why this exists: the legacy `gateway.ws_slow_response` event fired per-call
-* at a 50ms bar, flooding the dashboard with non-actionable noise while
-* measuring *total* WS round-trip time (which is dominated by event-loop
-* scheduling, not handler work). This module instead measures handler CPU
-* time per method AND event-loop delay separately, so slow responses can be
-* correctly attributed (heavy handler vs. a congested event loop) from
-* percentile aggregates rather than guesswork.
-*
-* Metric points emitted (in `gateway.perf_snapshot` metadata):
-* - requests          — count + throughput (req/s) over the window
-* - errorRate         — fraction of requests that responded `ok: false`
-* - latencyMs         — p50 / p95 / p99 / max handler latency across all methods
-* - slowestMethods    — top methods by p95 latency (count, p50, p95, max, errors)
-* - eventLoopDelayMs  — mean / p50 / p99 / max event-loop lag over the window
-*
-* @module
-*/
-const log$26 = createSubsystemLogger("gateway/metrics");
-/** Cap on retained latency samples per method (reservoir) to bound memory. */
-const MAX_SAMPLES_PER_METHOD = 512;
-/** Default snapshot window. Matches the reliability rate-limiter granularity. */
-const DEFAULT_INTERVAL_MS = 6e4;
-const methodStats = /* @__PURE__ */ new Map();
-let reporterTimer = null;
-let eventLoopHist = null;
-let windowStartMs = 0;
-/**
-* Record one dispatched request's handler latency and outcome.
-* Called at the dispatch chokepoint. Best-effort — never throws.
-*/
-function recordMethodLatency(method, durationMs, ok) {
-	if (!Number.isFinite(durationMs) || durationMs < 0) return;
-	let stat = methodStats.get(method);
-	if (!stat) {
-		stat = {
-			count: 0,
-			errors: 0,
-			samples: []
-		};
-		methodStats.set(method, stat);
-	}
-	stat.count += 1;
-	if (!ok) stat.errors += 1;
-	if (stat.samples.length < MAX_SAMPLES_PER_METHOD) stat.samples.push(durationMs);
-	else stat.samples[Math.floor(Math.random() * MAX_SAMPLES_PER_METHOD)] = durationMs;
-}
-function percentiles(samples) {
-	if (samples.length === 0) return {
-		p50: 0,
-		p95: 0,
-		p99: 0,
-		max: 0
-	};
-	const sorted = [...samples].sort((a, b) => a - b);
-	const at = (q) => sorted[Math.min(Math.floor(sorted.length * q), sorted.length - 1)];
-	return {
-		p50: Math.round(at(.5)),
-		p95: Math.round(at(.95)),
-		p99: Math.round(at(.99)),
-		max: Math.round(sorted[sorted.length - 1])
-	};
-}
-/** Build a snapshot from the current window without resetting state. */
-function buildGatewayPerfSnapshot(windowMs, topN = 5) {
-	const allSamples = [];
-	let requests = 0;
-	let errors = 0;
-	const perMethod = [];
-	for (const [method, stat] of methodStats) {
-		requests += stat.count;
-		errors += stat.errors;
-		for (const s of stat.samples) allSamples.push(s);
-		const p = percentiles(stat.samples);
-		perMethod.push({
-			method,
-			count: stat.count,
-			errors: stat.errors,
-			p50: p.p50,
-			p95: p.p95,
-			max: p.max
-		});
-	}
-	perMethod.sort((a, b) => b.p95 - a.p95 || b.max - a.max);
-	const windowSec = windowMs > 0 ? windowMs / 1e3 : 1;
-	const el = eventLoopHist;
-	const elMs = (ns) => Math.round(ns / 1e6 * 100) / 100;
-	return {
-		windowMs,
-		requests,
-		throughputPerSec: Math.round(requests / windowSec * 100) / 100,
-		errorRate: requests > 0 ? Math.round(errors / requests * 1e3) / 1e3 : 0,
-		latencyMs: percentiles(allSamples),
-		slowestMethods: perMethod.slice(0, topN),
-		eventLoopDelayMs: el ? {
-			mean: elMs(el.mean),
-			p50: elMs(el.percentile(50)),
-			p99: elMs(el.percentile(99)),
-			max: elMs(el.max)
-		} : {
-			mean: 0,
-			p50: 0,
-			p99: 0,
-			max: 0
-		}
-	};
-}
-function emitSnapshot(windowMs) {
-	const snap = buildGatewayPerfSnapshot(windowMs);
-	if (snap.requests === 0 && snap.eventLoopDelayMs.max < 100) return;
-	const { latencyMs: lat, eventLoopDelayMs: el } = snap;
-	emitEvent({
-		category: "gateway",
-		severity: "info",
-		event: "gateway.perf_snapshot",
-		message: `Gateway perf: ${snap.requests} req (${snap.throughputPerSec}/s), p95 ${lat.p95}ms / max ${lat.max}ms, evloop p99 ${el.p99}ms / max ${el.max}ms`,
-		metadata: { ...snap },
-		timestamp: Date.now()
-	});
-}
-/**
-* Start the periodic metrics reporter and event-loop delay monitor.
-* Idempotent — a second call is a no-op until {@link stopGatewayRequestMetrics}.
-* Returns a stop function.
-*/
-function startGatewayRequestMetrics(opts) {
-	if (reporterTimer) return stopGatewayRequestMetrics;
-	const intervalMs = opts?.intervalMs ?? DEFAULT_INTERVAL_MS;
-	try {
-		eventLoopHist = monitorEventLoopDelay({ resolution: 20 });
-		eventLoopHist.enable();
-	} catch (err) {
-		log$26.debug(`event-loop delay monitor unavailable: ${err instanceof Error ? err.message : String(err)}`);
-		eventLoopHist = null;
-	}
-	windowStartMs = Date.now();
-	reporterTimer = setInterval(() => {
-		const now = Date.now();
-		try {
-			emitSnapshot(now - windowStartMs);
-		} catch (err) {
-			log$26.debug(`perf snapshot emit failed: ${err instanceof Error ? err.message : String(err)}`);
-		}
-		methodStats.clear();
-		eventLoopHist?.reset();
-		windowStartMs = now;
-	}, intervalMs);
-	reporterTimer.unref?.();
-	return stopGatewayRequestMetrics;
-}
-/** Stop the reporter and clear accumulated state. */
-function stopGatewayRequestMetrics() {
-	if (reporterTimer) {
-		clearInterval(reporterTimer);
-		reporterTimer = null;
-	}
-	eventLoopHist?.disable();
-	eventLoopHist = null;
-	methodStats.clear();
-}
-//#endregion
 //#region src/infra/exec-approval-forwarder.ts
-const log$25 = createSubsystemLogger("gateway/exec-approvals");
+const log$26 = createSubsystemLogger("gateway/exec-approvals");
 const DEFAULT_MODE = "session";
 function normalizeMode(mode) {
 	return mode ?? DEFAULT_MODE;
@@ -1686,7 +1517,7 @@ async function deliverToTargets(params) {
 				payloads: [{ text: params.text }]
 			});
 		} catch (err) {
-			log$25.error(`exec approvals: failed to deliver to ${channel}:${target.to}: ${String(err)}`);
+			log$26.error(`exec approvals: failed to deliver to ${channel}:${target.to}: ${String(err)}`);
 		}
 	});
 	await Promise.allSettled(deliveries);
@@ -1847,12 +1678,12 @@ function stopLedgerFlusher() {
 }
 //#endregion
 //#region src/infra/message-ledger-hooks.ts
-const PLUGIN_ID$2 = "minion:message-ledger";
+const PLUGIN_ID$3 = "minion:message-ledger";
 const recentInbound = /* @__PURE__ */ new Map();
 const keyFor = (channel, accountId, chatId) => `${channel}|${accountId ?? ""}|${chatId ?? ""}`;
 function registerMessageLedgerHooks(registry, dbPath, flusher) {
 	registry.typedHooks.push({
-		pluginId: PLUGIN_ID$2,
+		pluginId: PLUGIN_ID$3,
 		hookName: "gateway_start",
 		handler: () => {
 			openMessageLedger(dbPath);
@@ -1860,7 +1691,7 @@ function registerMessageLedgerHooks(registry, dbPath, flusher) {
 		},
 		source: "internal"
 	}, {
-		pluginId: PLUGIN_ID$2,
+		pluginId: PLUGIN_ID$3,
 		hookName: "gateway_stop",
 		handler: () => {
 			stopLedgerFlusher();
@@ -1868,7 +1699,7 @@ function registerMessageLedgerHooks(registry, dbPath, flusher) {
 		},
 		source: "internal"
 	}, {
-		pluginId: PLUGIN_ID$2,
+		pluginId: PLUGIN_ID$3,
 		hookName: "message_inbound",
 		handler: (event) => {
 			const row = record({
@@ -1893,7 +1724,7 @@ function registerMessageLedgerHooks(registry, dbPath, flusher) {
 		},
 		source: "internal"
 	}, {
-		pluginId: PLUGIN_ID$2,
+		pluginId: PLUGIN_ID$3,
 		hookName: "message_received",
 		handler: (_event, ctx) => {
 			if (!ctx.sessionKey) return;
@@ -1909,7 +1740,7 @@ function registerMessageLedgerHooks(registry, dbPath, flusher) {
 		},
 		source: "internal"
 	}, {
-		pluginId: PLUGIN_ID$2,
+		pluginId: PLUGIN_ID$3,
 		hookName: "message_sent",
 		handler: (event, ctx) => {
 			record({
@@ -2347,24 +2178,24 @@ function ensureWorkspaceSafely(userId) {
 		ensurePersonalAgentWorkspace(userId);
 	} catch {}
 }
-const PLUGIN_ID$1 = "minion:personal-agent-observations";
+const PLUGIN_ID$2 = "minion:personal-agent-observations";
 function registerPersonalAgentObservationHooks(registry, dbPath) {
 	registry.typedHooks.push({
-		pluginId: PLUGIN_ID$1,
+		pluginId: PLUGIN_ID$2,
 		hookName: "gateway_start",
 		handler: () => {
 			openObservationStore(dbPath);
 		},
 		source: "internal"
 	}, {
-		pluginId: PLUGIN_ID$1,
+		pluginId: PLUGIN_ID$2,
 		hookName: "gateway_stop",
 		handler: () => {
 			closeObservationStore();
 		},
 		source: "internal"
 	}, {
-		pluginId: PLUGIN_ID$1,
+		pluginId: PLUGIN_ID$2,
 		hookName: "message_inbound",
 		handler: (event) => {
 			if (event.isGroup) return;
@@ -2387,7 +2218,7 @@ function registerPersonalAgentObservationHooks(registry, dbPath) {
 		},
 		source: "internal"
 	}, {
-		pluginId: PLUGIN_ID$1,
+		pluginId: PLUGIN_ID$2,
 		hookName: "message_received",
 		handler: (event, ctx) => {
 			const channel = ctx.channelId;
@@ -2404,7 +2235,7 @@ function registerPersonalAgentObservationHooks(registry, dbPath) {
 		},
 		source: "internal"
 	}, {
-		pluginId: PLUGIN_ID$1,
+		pluginId: PLUGIN_ID$2,
 		hookName: "message_sent",
 		handler: (event, ctx) => {
 			const channel = ctx.channelId;
@@ -3146,6 +2977,86 @@ function asStringArray(v) {
 	return v.filter((x) => typeof x === "string");
 }
 //#endregion
+//#region src/trajectory/writer.ts
+const DEFAULT_MAX_BYTES$2 = 5 * 1024 * 1024;
+var TrajectoryWriter = class {
+	constructor(file, opts) {
+		this.file = file;
+		this.bytes = 0;
+		this.dropped = 0;
+		this.maxBytes = opts?.maxBytes ?? DEFAULT_MAX_BYTES$2;
+		mkdirSync(dirname(file), { recursive: true });
+		if (existsSync(file)) this.bytes = statSync(file).size;
+	}
+	append(event) {
+		if (this.bytes >= this.maxBytes) {
+			this.dropped += 1;
+			return;
+		}
+		const line = `${JSON.stringify(event)}\n`;
+		try {
+			appendFileSync(this.file, line);
+			this.bytes += Buffer.byteLength(line);
+		} catch {
+			this.dropped += 1;
+		}
+	}
+};
+//#endregion
+//#region src/trajectory/recorder.ts
+const PLUGIN_ID$1 = "trajectory-recorder";
+const writers = /* @__PURE__ */ new Map();
+const MAX_LIVE_SESSIONS = 500;
+function writerFor(sessionId, agentId) {
+	let w = writers.get(sessionId);
+	if (!w) {
+		if (writers.size >= MAX_LIVE_SESSIONS) {
+			const oldest = writers.keys().next().value;
+			if (oldest !== void 0) writers.delete(oldest);
+		}
+		w = new TrajectoryWriter(join(resolveSessionTranscriptsDirForAgent(agentId), `trajectory-${sessionId}.jsonl`));
+		writers.set(sessionId, w);
+	}
+	return w;
+}
+/** Idempotent: enable per-session JSONL trajectory recording via lifecycle hooks. */
+function enableTrajectoryRecording() {
+	registerLifecycleHooks(PLUGIN_ID$1, {
+		onSessionStart: async (s) => {
+			writerFor(s.sessionId, s.agentId).append({
+				kind: "session_start",
+				sessionId: s.sessionId,
+				agentId: s.agentId,
+				channelType: s.channelType,
+				timestamp: s.startedAt
+			});
+		},
+		postLlmCall: async (ctx, result) => {
+			writerFor(ctx.sessionId, ctx.agentId).append({
+				kind: "llm_call",
+				turn: ctx.turn,
+				model: result.model,
+				inputTokens: result.inputTokens,
+				outputTokens: result.outputTokens,
+				durationMs: result.durationMs,
+				hasToolCalls: result.hasToolCalls,
+				error: result.error,
+				timestamp: ctx.timestamp
+			});
+		},
+		onSessionEnd: async (s, summary) => {
+			writerFor(s.sessionId, s.agentId).append({
+				kind: "session_end",
+				turns: summary.turns,
+				durationMs: summary.durationMs,
+				endReason: summary.endReason,
+				timestamp: Date.now()
+			});
+			writers.delete(s.sessionId);
+		}
+	});
+}
+//#endregion
 //#region src/gateway/auth/auth-jwt.ts
 /**
 * JWT validation module for the multi-tenant gateway.
@@ -3251,7 +3162,7 @@ async function validateGatewayJwt(token, config) {
 }
 //#endregion
 //#region src/gateway/channel-health-monitor.ts
-const log$24 = createSubsystemLogger("gateway/health-monitor");
+const log$25 = createSubsystemLogger("gateway/health-monitor");
 const DEFAULT_CHECK_INTERVAL_MS$1 = 5 * 6e4;
 const DEFAULT_STARTUP_GRACE_MS = 6e4;
 const DEFAULT_COOLDOWN_CYCLES = 2;
@@ -3300,11 +3211,11 @@ function startChannelHealthMonitor(deps) {
 					if (now - record.lastRestartAt <= cooldownMs) continue;
 					pruneOldRestarts(record, now);
 					if (record.restartsThisHour.length >= maxRestartsPerHour) {
-						log$24.warn?.(`[${channelId}:${accountId}] health-monitor: hit ${maxRestartsPerHour} restarts/hour limit, skipping`);
+						log$25.warn?.(`[${channelId}:${accountId}] health-monitor: hit ${maxRestartsPerHour} restarts/hour limit, skipping`);
 						continue;
 					}
 					const reason = !status.running ? status.reconnectAttempts && status.reconnectAttempts >= 10 ? "gave-up" : "stopped" : "stuck";
-					log$24.info?.(`[${channelId}:${accountId}] health-monitor: restarting (reason: ${reason})`);
+					log$25.info?.(`[${channelId}:${accountId}] health-monitor: restarting (reason: ${reason})`);
 					try {
 						if (status.running) await channelManager.stopChannel(channelId, accountId);
 						channelManager.resetRestartAttempts(channelId, accountId);
@@ -3313,7 +3224,7 @@ function startChannelHealthMonitor(deps) {
 						record.restartsThisHour.push({ at: now });
 						restartRecords.set(key, record);
 					} catch (err) {
-						log$24.error?.(`[${channelId}:${accountId}] health-monitor: restart failed: ${String(err)}`);
+						log$25.error?.(`[${channelId}:${accountId}] health-monitor: restart failed: ${String(err)}`);
 					}
 				}
 			}
@@ -3333,7 +3244,7 @@ function startChannelHealthMonitor(deps) {
 		abortSignal?.addEventListener("abort", stop, { once: true });
 		timer = setInterval(() => void runCheck(), checkIntervalMs);
 		if (typeof timer === "object" && "unref" in timer) timer.unref();
-		log$24.info?.(`started (interval: ${Math.round(checkIntervalMs / 1e3)}s, grace: ${Math.round(startupGraceMs / 1e3)}s)`);
+		log$25.info?.(`started (interval: ${Math.round(checkIntervalMs / 1e3)}s, grace: ${Math.round(startupGraceMs / 1e3)}s)`);
 	}
 	return { stop };
 }
@@ -3827,7 +3738,7 @@ var ExecApprovalManager = class {
 * Opens the SQLite database, applies WAL pragmas, and runs the
 * 004_free_tier_users migration. Returns the DatabaseSync instance.
 */
-const log$23 = createSubsystemLogger("free-tier/db");
+const log$24 = createSubsystemLogger("free-tier/db");
 const MIGRATION_SQL_PATH = join(dirname(fileURLToPath(import.meta.url)), "../../db/migrations/004_free_tier_users.sql");
 function openFreeTierDb(dbPath) {
 	const { DatabaseSync } = requireNodeSqlite();
@@ -3836,9 +3747,9 @@ function openFreeTierDb(dbPath) {
 	try {
 		const sql = readFileSync(MIGRATION_SQL_PATH, "utf8");
 		db.exec(sql);
-		log$23.info("free-tier DB migration applied", { dbPath });
+		log$24.info("free-tier DB migration applied", { dbPath });
 	} catch (err) {
-		log$23.error("free-tier DB migration failed", {
+		log$24.error("free-tier DB migration failed", {
 			dbPath,
 			error: String(err)
 		});
@@ -3977,13 +3888,13 @@ var UserRepository = class {
 };
 //#endregion
 //#region src/gateway/free-tier/email.ts
-const log$22 = createSubsystemLogger("free-tier/email");
+const log$23 = createSubsystemLogger("free-tier/email");
 const RESEND_API = "https://api.resend.com/emails";
 const FROM = "OpenClaw <noreply@minion.ai>";
 async function send$1(to, subject, html) {
 	const apiKey = process.env["RESEND_API_KEY"];
 	if (!apiKey) {
-		log$22.warn("RESEND_API_KEY not set — email not sent", {
+		log$23.warn("RESEND_API_KEY not set — email not sent", {
 			to,
 			subject
 		});
@@ -4004,7 +3915,7 @@ async function send$1(to, subject, html) {
 	});
 	if (!res.ok) {
 		const text = await res.text().catch(() => "");
-		log$22.error("Resend API error", {
+		log$23.error("Resend API error", {
 			status: res.status,
 			body: text
 		});
@@ -4017,7 +3928,7 @@ async function sendVerificationEmail(email, token, baseUrl) {
 }
 //#endregion
 //#region src/gateway/free-tier/auth-http.ts
-const log$21 = createSubsystemLogger("free-tier/auth");
+const log$22 = createSubsystemLogger("free-tier/auth");
 function json$1(res, status, body) {
 	res.statusCode = status;
 	res.setHeader("Content-Type", "application/json; charset=utf-8");
@@ -4079,7 +3990,7 @@ async function handleSignup(req, res, users) {
 		passwordHash
 	});
 	await sendVerificationEmail(email, verifyToken, process.env["HUB_BASE_URL"] ?? "https://hub.minion.ai").catch((e) => {
-		log$21.error("failed to send verification email", {
+		log$22.error("failed to send verification email", {
 			userId: user.id,
 			error: String(e)
 		});
@@ -4386,6 +4297,175 @@ function createFreeTierApiHandler(db) {
 	};
 }
 //#endregion
+//#region src/gateway/gateway-request-metrics.ts
+/**
+* Gateway request performance metrics.
+*
+* Records per-method handler latency at the request dispatch chokepoint and
+* samples Node's event-loop delay, then emits a single aggregated
+* `gateway.perf_snapshot` event per window (default 60s) into the unified
+* event store — the same surface the hub reliability dashboard reads.
+*
+* Why this exists: the legacy `gateway.ws_slow_response` event fired per-call
+* at a 50ms bar, flooding the dashboard with non-actionable noise while
+* measuring *total* WS round-trip time (which is dominated by event-loop
+* scheduling, not handler work). This module instead measures handler CPU
+* time per method AND event-loop delay separately, so slow responses can be
+* correctly attributed (heavy handler vs. a congested event loop) from
+* percentile aggregates rather than guesswork.
+*
+* Metric points emitted (in `gateway.perf_snapshot` metadata):
+* - requests          — count + throughput (req/s) over the window
+* - errorRate         — fraction of requests that responded `ok: false`
+* - latencyMs         — p50 / p95 / p99 / max handler latency across all methods
+* - slowestMethods    — top methods by p95 latency (count, p50, p95, max, errors)
+* - eventLoopDelayMs  — mean / p50 / p99 / max event-loop lag over the window
+*
+* @module
+*/
+const log$21 = createSubsystemLogger("gateway/metrics");
+/** Cap on retained latency samples per method (reservoir) to bound memory. */
+const MAX_SAMPLES_PER_METHOD = 512;
+/** Default snapshot window. Matches the reliability rate-limiter granularity. */
+const DEFAULT_INTERVAL_MS = 6e4;
+const methodStats = /* @__PURE__ */ new Map();
+let reporterTimer = null;
+let eventLoopHist = null;
+let windowStartMs = 0;
+/**
+* Record one dispatched request's handler latency and outcome.
+* Called at the dispatch chokepoint. Best-effort — never throws.
+*/
+function recordMethodLatency(method, durationMs, ok) {
+	if (!Number.isFinite(durationMs) || durationMs < 0) return;
+	let stat = methodStats.get(method);
+	if (!stat) {
+		stat = {
+			count: 0,
+			errors: 0,
+			samples: []
+		};
+		methodStats.set(method, stat);
+	}
+	stat.count += 1;
+	if (!ok) stat.errors += 1;
+	if (stat.samples.length < MAX_SAMPLES_PER_METHOD) stat.samples.push(durationMs);
+	else stat.samples[Math.floor(Math.random() * MAX_SAMPLES_PER_METHOD)] = durationMs;
+}
+function percentiles(samples) {
+	if (samples.length === 0) return {
+		p50: 0,
+		p95: 0,
+		p99: 0,
+		max: 0
+	};
+	const sorted = [...samples].sort((a, b) => a - b);
+	const at = (q) => sorted[Math.min(Math.floor(sorted.length * q), sorted.length - 1)];
+	return {
+		p50: Math.round(at(.5)),
+		p95: Math.round(at(.95)),
+		p99: Math.round(at(.99)),
+		max: Math.round(sorted[sorted.length - 1])
+	};
+}
+/** Build a snapshot from the current window without resetting state. */
+function buildGatewayPerfSnapshot(windowMs, topN = 5) {
+	const allSamples = [];
+	let requests = 0;
+	let errors = 0;
+	const perMethod = [];
+	for (const [method, stat] of methodStats) {
+		requests += stat.count;
+		errors += stat.errors;
+		for (const s of stat.samples) allSamples.push(s);
+		const p = percentiles(stat.samples);
+		perMethod.push({
+			method,
+			count: stat.count,
+			errors: stat.errors,
+			p50: p.p50,
+			p95: p.p95,
+			max: p.max
+		});
+	}
+	perMethod.sort((a, b) => b.p95 - a.p95 || b.max - a.max);
+	const windowSec = windowMs > 0 ? windowMs / 1e3 : 1;
+	const el = eventLoopHist;
+	const elMs = (ns) => Math.round(ns / 1e6 * 100) / 100;
+	return {
+		windowMs,
+		requests,
+		throughputPerSec: Math.round(requests / windowSec * 100) / 100,
+		errorRate: requests > 0 ? Math.round(errors / requests * 1e3) / 1e3 : 0,
+		latencyMs: percentiles(allSamples),
+		slowestMethods: perMethod.slice(0, topN),
+		eventLoopDelayMs: el ? {
+			mean: elMs(el.mean),
+			p50: elMs(el.percentile(50)),
+			p99: elMs(el.percentile(99)),
+			max: elMs(el.max)
+		} : {
+			mean: 0,
+			p50: 0,
+			p99: 0,
+			max: 0
+		}
+	};
+}
+function emitSnapshot(windowMs) {
+	const snap = buildGatewayPerfSnapshot(windowMs);
+	if (snap.requests === 0 && snap.eventLoopDelayMs.max < 100) return;
+	const { latencyMs: lat, eventLoopDelayMs: el } = snap;
+	emitEvent({
+		category: "gateway",
+		severity: "info",
+		event: "gateway.perf_snapshot",
+		message: `Gateway perf: ${snap.requests} req (${snap.throughputPerSec}/s), p95 ${lat.p95}ms / max ${lat.max}ms, evloop p99 ${el.p99}ms / max ${el.max}ms`,
+		metadata: { ...snap },
+		timestamp: Date.now()
+	});
+}
+/**
+* Start the periodic metrics reporter and event-loop delay monitor.
+* Idempotent — a second call is a no-op until {@link stopGatewayRequestMetrics}.
+* Returns a stop function.
+*/
+function startGatewayRequestMetrics(opts) {
+	if (reporterTimer) return stopGatewayRequestMetrics;
+	const intervalMs = opts?.intervalMs ?? DEFAULT_INTERVAL_MS;
+	try {
+		eventLoopHist = monitorEventLoopDelay({ resolution: 20 });
+		eventLoopHist.enable();
+	} catch (err) {
+		log$21.debug(`event-loop delay monitor unavailable: ${err instanceof Error ? err.message : String(err)}`);
+		eventLoopHist = null;
+	}
+	windowStartMs = Date.now();
+	reporterTimer = setInterval(() => {
+		const now = Date.now();
+		try {
+			emitSnapshot(now - windowStartMs);
+		} catch (err) {
+			log$21.debug(`perf snapshot emit failed: ${err instanceof Error ? err.message : String(err)}`);
+		}
+		methodStats.clear();
+		eventLoopHist?.reset();
+		windowStartMs = now;
+	}, intervalMs);
+	reporterTimer.unref?.();
+	return stopGatewayRequestMetrics;
+}
+/** Stop the reporter and clear accumulated state. */
+function stopGatewayRequestMetrics() {
+	if (reporterTimer) {
+		clearInterval(reporterTimer);
+		reporterTimer = null;
+	}
+	eventLoopHist?.disable();
+	eventLoopHist = null;
+	methodStats.clear();
+}
+//#endregion
 //#region src/gateway/http-utils.ts
 function getHeader(req, name) {
 	const raw = req.headers[name.toLowerCase()];
@@ -18904,7 +18984,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-DQqHB_8B.js");
+			const { handleNodeEvent } = await import("./server-node-events-B6rUT0PE.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			const nodeConnId = client?.connId;
 			await handleNodeEvent({
@@ -26411,7 +26491,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.MINION_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.MINION_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./dispatcher-DefEQC4n.js").then((n) => n.n);
+	const mod = override ? await import(override) : await import("./dispatcher-D8fgAnwH.js").then((n) => n.n);
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -32270,7 +32350,7 @@ async function deliverFlowReply(sessionKey, reply) {
 	}
 	try {
 		const cfg = loadConfig();
-		const { deliverOutboundPayloads } = await import("./deliver-Dhut24vc.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-Ds0o_rCY.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg,
 			channel: target.channel,
@@ -35638,6 +35718,10 @@ async function startGatewayServer(port = 18789, opts = {}) {
 			key: "MINION_PERSONAL_AGENT_OBSERVATIONS_PATH",
 			description: "personal-agent observations database path override"
 		});
+		if (cfgAtStart.gateway?.trajectory?.enabled === true) {
+			enableTrajectoryRecording();
+			log.info("trajectory recording enabled");
+		}
 	}
 	const channelLogs = Object.fromEntries(listChannelPlugins().map((plugin) => [plugin.id, logChannels.child(plugin.id)]));
 	const channelRuntimeEnvs = Object.fromEntries(Object.entries(channelLogs).map(([id, logger]) => [id, runtimeForLogger(logger)]));
@@ -35936,8 +36020,8 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	});
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
-		const { recoverPendingDeliveries } = await import("./deliver-Dhut24vc.js").then((n) => n.s);
-		const { deliverOutboundPayloads } = await import("./deliver-Dhut24vc.js").then((n) => n.n);
+		const { recoverPendingDeliveries } = await import("./deliver-Ds0o_rCY.js").then((n) => n.s);
+		const { deliverOutboundPayloads } = await import("./deliver-Ds0o_rCY.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),