@nikolasp98/minion 2026.7.4-dev → 2026.7.4-dev.20260709144240

package/dist/{gateway-cli-DWNvy97w.js → gateway-cli-B2zp0e2L.js}

@@ -14,53 +14,53 @@ import { n as getEventStore, r as initEventSystem, t as emitEvent } from "./emit
 import { t as applySqlitePragmas } from "./sqlite-pragmas-C_o_lU6a.js";
 import { t as requireNodeSqlite } from "./sqlite-C3xwcWJn.js";
 import { d as setSentryContext, f as setSentryTag, n as getReliabilityUptimeStartMs, r as initReliability, t as emitReliabilityEvent } from "./reliability-B8aPy4cP.js";
-import { $n as setCommandLaneConcurrency, $t as updatePairedNodeMetadata, A as loadMinionPlugins, An as normalizeMimeList, At as buildSystemPromptReport, B as resolveCronStyleNow, Bt as resolveSendPolicy, C as readConsolidationState, D as buildDefaultToolPolicyPipelineSteps, Dt as PROSE_GLOBAL_ROOT, E as applyToolPolicyPipeline, En as DEFAULT_INPUT_IMAGE_MIMES, Et as PromptSectionRegistry, G as debugSkipAll, Gn as resolveAgentIdentity, Gt as refreshRemoteNodeBins, H as setCliSessionId, Ht as primeRemoteSkillsCache, It as requestHeartbeatNow, J as setDebugStepBroadcaster, Jn as resolveBootstrapContextForRun, Jt as approveNodePairing, K as debugStepContinue, Kt as removeRemoteNodeInfo, Ln as resolveUserTimezone, M as dispatchInboundMessage, N as createReplyDispatcher, Nn as transcribeOpenAiCompatibleAudio, O as getPluginToolMeta, On as extractFileContentFromSource, Ot as _clearProseCache, P as getTotalPendingReplies, Pn as formatZonedTimestamp, Qn as resetAllLanes, Qt as requestNodePairing, R as BARE_SESSION_RESET_PROMPT, Rn as isAbortTrigger, S as openInFlightTurnsStore, St as getBuiltinSectionRegistry, Tt as buildToolSummaryMap, U as runCliAgent, Un as clearSessionQueues, Ut as recordRemoteNodeInfo, V as getCliSessionId, Vt as getRemoteSkillEligibility, Wt as refreshRemoteBinsForConnectedNodes, X as createMinionTools, Xt as rejectNodePairing, Y as setSteppedBuild, Yn as getActiveTaskCount, Yt as listNodePairing, Z as TOOL_REGISTRY, Zn as getTotalQueueSize, Zt as renamePairedNode, _ as deleteRow, _n as applyVerboseOverride, an as resolvePairingPaths, ar as onAgentEvent, at as getTemplateCache, b as markInterrupted, bn as isSystemEventContextChanged, cn as createAsyncLock, ct as initTemplateLoader, d as abortEmbeddedPiRun, en as verifyNodeToken, er as waitForActiveTasks, f as getActiveEmbeddedRunCount, g as closeInFlightTurnsStore, gn as applyModelOverrideToSessionEntry, gt as loadProviderUsageSummary, h as registerLifecycleHooks, ht as normalizeGroupActivation, i as listDescendantRunsForRequester, in as pruneExpiredPending, ir as getAgentRunContext, it as getTemplate, j as loadOpenClawPlugins, jn as resolveInputFileLimits, kn as extractImageContentFromSource, kt as buildSystemPromptParams, l as runSubagentAnnounceFlow, ln as getSkillsSnapshotVersion, lt as stopTemplateWatcher, m as waitForEmbeddedPiRunEnd, mn as buildAuthHealthSummary, n as countActiveDescendantRuns, nn as hashToken, nr as clearAgentRunContext, nt as spawnSubagentDirect, on as readJsonFile, or as registerAgentRunContext, ot as getTemplateLoadErrors, p as queueEmbeddedPiMessage, q as isSteppedBuildEnabled, qt as setSkillsRemoteRegistry, r as initSubagentRegistry, rn as verifyPairingToken, rr as emitAgentEvent, rt as getLastReloadAt, s as markSubagentRunTerminated, sn as writeJsonAtomic, st as getTemplateUsageStats, tn as generatePairingToken, tr as resolveAgentTimeoutMs, u as runEmbeddedPiAgent, un as registerSkillsChangeListener, v as listForCurrentInstance, vn as parseVerboseOverride, w as createOpenClawCodingTools, wn as registerUnhandledRejectionHandler, wt as buildSectionRenderContext, x as markRecoveryAttempt, xt as assembleAgentSystemPromptWithSections, y as listFromOtherInstances, yn as enqueueSystemEvent, zn as stopSubagentsForRequester, zt as normalizeSendPolicy } from "./subagent-registry-CW6S0hCt.js";
+import { $n as setCommandLaneConcurrency, $t as updatePairedNodeMetadata, A as loadMinionPlugins, An as normalizeMimeList, At as buildSystemPromptReport, B as resolveCronStyleNow, Bt as resolveSendPolicy, C as readConsolidationState, D as buildDefaultToolPolicyPipelineSteps, Dt as PROSE_GLOBAL_ROOT, E as applyToolPolicyPipeline, En as DEFAULT_INPUT_IMAGE_MIMES, Et as PromptSectionRegistry, G as debugSkipAll, Gn as resolveAgentIdentity, Gt as refreshRemoteNodeBins, H as setCliSessionId, Ht as primeRemoteSkillsCache, It as requestHeartbeatNow, J as setDebugStepBroadcaster, Jn as resolveBootstrapContextForRun, Jt as approveNodePairing, K as debugStepContinue, Kt as removeRemoteNodeInfo, Ln as resolveUserTimezone, M as dispatchInboundMessage, N as createReplyDispatcher, Nn as transcribeOpenAiCompatibleAudio, O as getPluginToolMeta, On as extractFileContentFromSource, Ot as _clearProseCache, P as getTotalPendingReplies, Pn as formatZonedTimestamp, Qn as resetAllLanes, Qt as requestNodePairing, R as BARE_SESSION_RESET_PROMPT, Rn as isAbortTrigger, S as openInFlightTurnsStore, St as getBuiltinSectionRegistry, Tt as buildToolSummaryMap, U as runCliAgent, Un as clearSessionQueues, Ut as recordRemoteNodeInfo, V as getCliSessionId, Vt as getRemoteSkillEligibility, Wt as refreshRemoteBinsForConnectedNodes, X as createMinionTools, Xt as rejectNodePairing, Y as setSteppedBuild, Yn as getActiveTaskCount, Yt as listNodePairing, Z as TOOL_REGISTRY, Zn as getTotalQueueSize, Zt as renamePairedNode, _ as deleteRow, _n as applyVerboseOverride, an as resolvePairingPaths, ar as onAgentEvent, at as getTemplateCache, b as markInterrupted, bn as isSystemEventContextChanged, cn as createAsyncLock, ct as initTemplateLoader, d as abortEmbeddedPiRun, en as verifyNodeToken, er as waitForActiveTasks, f as getActiveEmbeddedRunCount, g as closeInFlightTurnsStore, gn as applyModelOverrideToSessionEntry, gt as loadProviderUsageSummary, h as registerLifecycleHooks, ht as normalizeGroupActivation, i as listDescendantRunsForRequester, in as pruneExpiredPending, ir as getAgentRunContext, it as getTemplate, j as loadOpenClawPlugins, jn as resolveInputFileLimits, kn as extractImageContentFromSource, kt as buildSystemPromptParams, l as runSubagentAnnounceFlow, ln as getSkillsSnapshotVersion, lt as stopTemplateWatcher, m as waitForEmbeddedPiRunEnd, mn as buildAuthHealthSummary, n as countActiveDescendantRuns, nn as hashToken, nr as clearAgentRunContext, nt as spawnSubagentDirect, on as readJsonFile, or as registerAgentRunContext, ot as getTemplateLoadErrors, p as queueEmbeddedPiMessage, q as isSteppedBuildEnabled, qt as setSkillsRemoteRegistry, r as initSubagentRegistry, rn as verifyPairingToken, rr as emitAgentEvent, rt as getLastReloadAt, s as markSubagentRunTerminated, sn as writeJsonAtomic, st as getTemplateUsageStats, tn as generatePairingToken, tr as resolveAgentTimeoutMs, u as runEmbeddedPiAgent, un as registerSkillsChangeListener, v as listForCurrentInstance, vn as parseVerboseOverride, w as createOpenClawCodingTools, wn as registerUnhandledRejectionHandler, wt as buildSectionRenderContext, x as markRecoveryAttempt, xt as assembleAgentSystemPromptWithSections, y as listFromOtherInstances, yn as enqueueSystemEvent, zn as stopSubagentsForRequester, zt as normalizeSendPolicy } from "./subagent-registry-CtFQu2XK.js";
 import { n as resolveModel } from "./model-Cyy-PjVo.js";
 import { n as buildWorkspaceSkillSnapshot, r as loadWorkspaceSkillEntries } from "./workspace-pEoxpxC2.js";
 import "./skills-3GqMCeaa.js";
 import { l as isTestDefaultMemorySlotDisabled, n as loadPluginManifestRegistry } from "./manifest-registry-ByjgBm6U.js";
 import { t as buildWorkspaceSkillStatus } from "./skills-status-CIEf_GHk.js";
-import { E as parseDurationMs, c as applyLegacyMigrations, i as MinionSchema, n as validateConfigObjectWithPlugins, v as resolveAgentMaxConcurrent, w as sensitive, y as resolveSubagentMaxConcurrent } from "./validation-CMXTA_lT.js";
-import { C as resolveRuntimeServiceVersion, S as VERSION, a as parseConfigJson5, c as resolveConfigSnapshotHash, i as loadConfig, l as writeConfigFile, n as clearConfigCache, o as readConfigFileSnapshot, r as createConfigIO, s as readConfigFileSnapshotForWrite, t as applySnapshotDefaults, y as applyMergePatch } from "./io-D25qfBsN.js";
-import { n as migrateLegacyConfig } from "./config-Cm8MqYN8.js";
+import { E as parseDurationMs, c as applyLegacyMigrations, i as MinionSchema, n as validateConfigObjectWithPlugins, v as resolveAgentMaxConcurrent, w as sensitive, y as resolveSubagentMaxConcurrent } from "./validation-NFMJmuUc.js";
+import { C as resolveRuntimeServiceVersion, S as VERSION, a as parseConfigJson5, c as resolveConfigSnapshotHash, i as loadConfig, l as writeConfigFile, n as clearConfigCache, o as readConfigFileSnapshot, r as createConfigIO, s as readConfigFileSnapshotForWrite, t as applySnapshotDefaults, y as applyMergePatch } from "./io-ixUbjx-d.js";
+import { n as migrateLegacyConfig } from "./config-DhxWEGQB.js";
 import { $ as validateModelsSetEnabledParams, A as validateCronRunsParams, At as validateToolsOverridesSetParams, B as validateExecApprovalRequestParams, Bt as validateWizardStatusParams, C as validateConfigSchemaParams, Ct as validateSkillsBinsParams, D as validateCronListParams, Dt as validateTalkConfigParams, E as validateCronAddParams, Et as validateSkillsUpdateParams, F as validateDevicePairRejectParams, Ft as validateWebLoginStartParams, G as validateExecApprovalsSetParams, Gt as deriveDeviceIdFromPublicKey, H as validateExecApprovalsGetParams, Ht as buildDeviceAuthPayload, I as validateDevicePairRemoveParams, It as validateWebLoginWaitParams, J as validateMeshPlanParams, Jt as verifyDeviceSignature, K as validateLogsTailParams, L as validateDeviceTokenRevokeParams, Lt as validateWizardCancelParams, M as validateCronUpdateParams, Mt as validateToolsUpdateParams, N as validateDevicePairApproveParams, Nt as validateUpdateRunParams, O as validateCronRemoveParams, Ot as validateTalkModeParams, P as validateDevicePairListParams, Pt as validateWakeParams, Q as validateModelsListParams, R as validateDeviceTokenRotateParams, Rt as validateWizardNextParams, S as validateConfigPatchParams, St as validateSessionsUsageParams, T as validateConnectParams, Tt as validateSkillsStatusParams, U as validateExecApprovalsNodeGetParams, Ut as normalizeDeviceAuthScopes, V as validateExecApprovalResolveParams, Vt as parseSessionLabel, W as validateExecApprovalsNodeSetParams, X as validateMeshRunParams, Y as validateMeshRetryParams, Z as validateMeshStatusParams, _ as validateChatHistoryParams, _t as validateSessionsListParams, a as validateAgentWaitParams, at as validateNodePairApproveParams, b as validateConfigApplyParams, bt as validateSessionsResetParams, c as validateAgentsFilesGetParams, ct as validateNodePairRequestParams, d as validateAgentsListParams, dt as validatePlaygroundCompleteParams, et as validateNodeDescribeParams, f as validateAgentsSkillsSetParams, ft as validatePollParams, g as validateChatAbortParams, gt as validateSessionsDeleteParams, h as validateChannelsStatusParams, ht as validateSessionsCompactParams, i as validateAgentParams, it as validateNodeListParams, j as validateCronStatusParams, jt as validateToolsStatusParams, k as validateCronRunParams, kt as validateTelegramValidateTokenParams, l as validateAgentsFilesListParams, lt as validateNodePairVerifyParams, m as validateChannelsLogoutParams, mt as validateSendParams, n as formatValidationErrors, nt as validateNodeInvokeParams, o as validateAgentsCreateParams, ot as validateNodePairListParams, p as validateAgentsUpdateParams, pt as validateRequestFrame, q as validateMeshPlanAutoParams, qt as normalizeDevicePublicKeyBase64Url, r as validateAgentIdentityParams, rt as validateNodeInvokeResultParams, s as validateAgentsDeleteParams, st as validateNodePairRejectParams, tt as validateNodeEventParams, u as validateAgentsFilesSetParams, ut as validateNodeRenameParams, v as validateChatInjectParams, vt as validateSessionsPatchParams, w as validateConfigSetParams, wt as validateSkillsInstallParams, x as validateConfigGetParams, xt as validateSessionsResolveParams, y as validateChatSendParams, yt as validateSessionsPreviewParams, z as validateDiscordValidateTokenParams, zt as validateWizardStartParams } from "./client-Bze4rUhk.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-C0DLwT7t.js";
-import { n as callGateway, o as loadGatewayTlsRuntime$1 } from "./call-Dkmv0jiT.js";
+import { n as callGateway, o as loadGatewayTlsRuntime$1 } from "./call-XTvSS1II.js";
 import { f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, h as GATEWAY_CLIENT_NAMES, i as isGatewayMessageChannel, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient, t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-BKpbLfdK.js";
 import { c as pickPrimaryLanIPv4, d as resolveGatewayListenHosts, f as resolveHostName, i as isTrustedProxyAddress, l as resolveGatewayBindHost, n as isLoopbackHost, o as normalizeHostHeader, p as rawDataToString, r as isPrivateOrLoopbackAddress, t as isLoopbackAddress, u as resolveGatewayClientIp } from "./net-C0W-QK7p.js";
 import { i as normalizeInputProvenance } from "./input-provenance-ChJN5mZj.js";
-import { B as snapshotSessionOrigin, D as evaluateSessionFreshness, F as resolveAgentMainSessionKey, I as resolveExplicitAgentSessionKey, L as resolveMainSessionKey, N as resolveFreshSessionTotalTokens, P as canonicalizeMainSessionAlias, Q as deliveryContextFromSession, R as resolveMainSessionKeyFromConfig, S as stripMessageIdHints, _ as readSessionMessages, a as loadSessionStore, b as resolveSessionTranscriptCandidates, et as mergeDeliveryContext, g as capArrayByJsonBytes, h as archiveSessionTranscripts, k as resolveSessionResetPolicy, m as archiveFileOnDisk, n as parseSessionThreadInfo, nt as normalizeSessionDeliveryFields, t as extractDeliveryInfo, u as updateSessionStore, v as readSessionPreviewItemsFromTranscript, w as cleanStaleLockFiles, x as stripEnvelope } from "./sessions-zdScGHgW.js";
+import { B as snapshotSessionOrigin, D as evaluateSessionFreshness, F as resolveAgentMainSessionKey, I as resolveExplicitAgentSessionKey, L as resolveMainSessionKey, N as resolveFreshSessionTotalTokens, P as canonicalizeMainSessionAlias, Q as deliveryContextFromSession, R as resolveMainSessionKeyFromConfig, S as stripMessageIdHints, _ as readSessionMessages, a as loadSessionStore, b as resolveSessionTranscriptCandidates, et as mergeDeliveryContext, g as capArrayByJsonBytes, h as archiveSessionTranscripts, k as resolveSessionResetPolicy, m as archiveFileOnDisk, n as parseSessionThreadInfo, nt as normalizeSessionDeliveryFields, t as extractDeliveryInfo, u as updateSessionStore, v as readSessionPreviewItemsFromTranscript, w as cleanStaleLockFiles, x as stripEnvelope } from "./sessions-B-cuXd6I.js";
 import { n as SILENT_REPLY_TOKEN, r as isSilentReplyText } from "./tokens-CCCwddgc.js";
-import { A as resolveHubMetricsConfig, C as getMirrorSnapshot, D as seedMirror, M as setMirrorAccountSource, O as setChannelRestartHandler, S as getMirrorEntry, b as applyChannelRestart, c as resolveWhatsAppAccount, d as buildChannelAccountBindings, k as startMirrorRefreshTick, n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin, u as resolveTelegramAccount, w as listMirrorAccountIds, x as channelConfigSource } from "./plugins-BBxVrybd.js";
+import { A as resolveHubMetricsConfig, C as getMirrorSnapshot, D as seedMirror, M as setMirrorAccountSource, O as setChannelRestartHandler, S as getMirrorEntry, b as applyChannelRestart, c as resolveWhatsAppAccount, d as buildChannelAccountBindings, k as startMirrorRefreshTick, n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin, u as resolveTelegramAccount, w as listMirrorAccountIds, x as channelConfigSource } from "./plugins-CDfgbD2S.js";
 import "./logging-CyBpyZLp.js";
 import { r as resolveUserDir } from "./user-directory-D27je39W.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, s as resolveSessionTranscriptsDirForAgent } from "./paths-Dm5-em7b.js";
 import { a as stripHeartbeatToken } from "./lanes-BEZu7L5R.js";
-import { a as resolveOutboundTarget, o as resolveSessionDeliveryTarget } from "./resolve-route-U1dN8gZq.js";
+import { a as resolveOutboundTarget, o as resolveSessionDeliveryTarget } from "./resolve-route-CQ8m3Y_1.js";
 import { n as getMachineDisplayName } from "./with-timeout-BVhDEOTB.js";
 import { n as isDiagnosticsEnabled } from "./diagnostic-events-BIoHynd0.js";
 import { c as startDiagnosticHeartbeat, l as stopDiagnosticHeartbeat } from "./diagnostic-DYs0_0mX.js";
-import { D as getGlobalHookRunner, a as markSynced, i as markFailed, j as isPluginEnabledForOrg, k as runGlobalGatewayStopSafely, l as deterministicClientId, n as closeMessageLedger, o as openMessageLedger, s as patchRouting, t as claimBatch } from "./message-ledger-B25yZ2QH.js";
-import { C as OPENAI_TTS_MODELS, T as defineDrone, _ as setTtsEnabled, d as resolveTtsAutoMode, f as resolveTtsConfig, i as getTtsProvider, m as resolveTtsProviderOrder, o as isTtsEnabled, p as resolveTtsPrefsPath, s as isTtsProviderConfigured, t as buildTtsSystemPromptHint, u as resolveTtsApiKey, w as OPENAI_TTS_VOICES, x as textToSpeech, y as setTtsProvider } from "./tts-CjrwccM4.js";
+import { D as getGlobalHookRunner, a as markSynced, i as markFailed, j as isPluginEnabledForOrg, k as runGlobalGatewayStopSafely, l as deterministicClientId, n as closeMessageLedger, o as openMessageLedger, s as patchRouting, t as claimBatch } from "./message-ledger-Dxdjwnp5.js";
+import { C as OPENAI_TTS_MODELS, T as defineDrone, _ as setTtsEnabled, d as resolveTtsAutoMode, f as resolveTtsConfig, i as getTtsProvider, m as resolveTtsProviderOrder, o as isTtsEnabled, p as resolveTtsPrefsPath, s as isTtsProviderConfigured, t as buildTtsSystemPromptHint, u as resolveTtsApiKey, w as OPENAI_TTS_VOICES, x as textToSpeech, y as setTtsProvider } from "./tts-BFst7lT8.js";
 import { c as detectMime } from "./image-ops-C3SpAWwm.js";
 import { i as runDrone, t as createGatewayDroneHost } from "./host-DUzTARxx.js";
-import { B as resolveBootstrapMaxChars, V as resolveBootstrapTotalMaxChars, a as listThinkingLevels, c as normalizeThinkLevel, f as supportsXHighThinking, l as normalizeUsageDisplay, n as formatThinkingLevels, o as normalizeElevatedLevel, r as formatXHighModelHint, s as normalizeReasoningLevel, u as normalizeVerboseLevel } from "./pi-embedded-helpers-DdMwVhWo.js";
-import { c as resolveSandboxRuntimeStatus, g as collectExplicitAllowlist, p as TOOL_GROUPS, v as expandToolGroups, x as resolveToolProfilePolicy, y as mergeAlsoAllowPolicy } from "./sandbox-DKbtOnC4.js";
+import { B as resolveBootstrapMaxChars, V as resolveBootstrapTotalMaxChars, a as listThinkingLevels, c as normalizeThinkLevel, f as supportsXHighThinking, l as normalizeUsageDisplay, n as formatThinkingLevels, o as normalizeElevatedLevel, r as formatXHighModelHint, s as normalizeReasoningLevel, u as normalizeVerboseLevel } from "./pi-embedded-helpers-BfVIc4c5.js";
+import { c as resolveSandboxRuntimeStatus, g as collectExplicitAllowlist, p as TOOL_GROUPS, v as expandToolGroups, x as resolveToolProfilePolicy, y as mergeAlsoAllowPolicy } from "./sandbox-DwGbzphU.js";
 import { a as enableTailscaleServeFunnel, i as enableTailscaleServe, n as disableTailscaleServe, r as enableTailscaleFunnel, s as getTailnetHostname, t as disableTailscaleFunnel } from "./tailscale-DdVOGsI9.js";
 import { a as resolveRequestClientIp, c as createAuthRateLimiter, i as resolveGatewayAuth, l as safeEqualSecret, n as authorizeGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as isLocalDirectRequest, s as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, t as assertGatewayAuthConfigured } from "./auth-DPXV6BW7.js";
-import { h as mergeGatewayTailscaleConfig, m as ensureGatewayStartupAuth } from "./server-context-BUJezTt7.js";
+import { h as mergeGatewayTailscaleConfig, m as ensureGatewayStartupAuth } from "./server-context-68HV9bpp.js";
 import { a as isErrno, n as formatErrorMessage } from "./errors-iV4-NKRR.js";
 import { i as formatPortDiagnostics, n as inspectPortUsage, t as ensurePortAvailable } from "./ports-DHJ3IPPA.js";
 import { t as movePathToTrash } from "./trash--L0YM4v3.js";
-import { n as runWithModelFallback } from "./model-fallback-BI2APyvK.js";
+import { n as runWithModelFallback } from "./model-fallback-xPeowZyn.js";
 import { a as traceGatewayEvent, n as pruneOldTraceFiles } from "./chat-trace-DMQCLCi7.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-C-GpnDhy.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-BPA2VF2K.js";
 import { t as ToolInputError } from "./common-DaYU0QCr.js";
 import { i as isExternalHookSession, n as detectSuspiciousPatterns, r as getHookType, t as buildSafeExternalPrompt } from "./external-content-Css-cJoz.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-Cz8ylHLg.js";
-import { n as loadModelCatalog } from "./model-catalog-DAyuGuaM.js";
-import { a as loadCombinedSessionStoreForGateway, c as resolveGatewaySessionStoreTarget, d as orgScopeVisible, f as lookupContextTokens, i as listSessionsFromStore, l as resolveSessionModelRef, o as loadSessionEntry, r as listAgentsForGateway, s as pruneLegacyStoreKeys, t as canonicalizeSpawnedByForAgent, u as normalizeOrgIds } from "./session-utils-WPz6l6QB.js";
-import { a as resolveSubagentToolPolicy, d as listAgentWorkspaceDirs, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-CFHuM9wa.js";
+import { n as loadModelCatalog } from "./model-catalog-BSiv3f8K.js";
+import { a as loadCombinedSessionStoreForGateway, c as resolveGatewaySessionStoreTarget, d as orgScopeVisible, f as lookupContextTokens, i as listSessionsFromStore, l as resolveSessionModelRef, o as loadSessionEntry, r as listAgentsForGateway, s as pruneLegacyStoreKeys, t as canonicalizeSpawnedByForAgent, u as normalizeOrgIds } from "./session-utils--BgIkPfi.js";
+import { a as resolveSubagentToolPolicy, d as listAgentWorkspaceDirs, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-BEqjC5lp.js";
 import { a as mergeExecApprovalsSocketDefaults, c as readExecApprovalsSnapshot, p as saveExecApprovals, r as ensureExecApprovals, s as normalizeExecApprovals, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-BeHGjZzx.js";
 import { c as hasNonzeroUsage, i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, s as deriveSessionTotalTokens, t as discoverAllSessions } from "./session-cost-usage-yBL75k4k.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format--dK3YoXf.js";
@@ -78,19 +78,19 @@ import { a as normalizeOptionalAgentId, c as normalizePayloadToSystemText, d as
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-BlvVswOf.js";
 import { a as summarizeRestartSentinel, n as formatDoctorNonInteractiveHint, r as formatRestartSentinelMessage, s as writeRestartSentinel, t as consumeRestartSentinel } from "./restart-sentinel-f8KHn8x4.js";
 import { n as setHubRest } from "./hub-rest-registry-DQyDHHy2.js";
-import { o as normalizeReplyPayloadsForDelivery, s as loadChannelOutboundAdapter, t as deliverOutboundPayloads } from "./deliver-PUOUs4ol.js";
-import { n as resolveMessageChannelSelection } from "./channel-selection-BewMTsqq.js";
-import { n as ensureOutboundSessionEntry, o as resetDirectoryCache, r as normalizePollInput, t as resolveOutboundSessionRoute } from "./outbound-session-BfiNGbxM.js";
-import { c as resolveAnnounceTargetFromKey, t as readLatestAssistantReply } from "./agent-step-DSsPpXT3.js";
+import { o as normalizeReplyPayloadsForDelivery, s as loadChannelOutboundAdapter, t as deliverOutboundPayloads } from "./deliver-p_wWlh7d.js";
+import { n as resolveMessageChannelSelection } from "./channel-selection-C0mWZNWy.js";
+import { n as ensureOutboundSessionEntry, o as resetDirectoryCache, r as normalizePollInput, t as resolveOutboundSessionRoute } from "./outbound-session-SmzP0oiG.js";
+import { c as resolveAnnounceTargetFromKey, t as readLatestAssistantReply } from "./agent-step-Urh1ULgm.js";
 import { a as runAggregation, n as executeOrchestration, r as readStatusJson, t as executePipeline } from "./orchestration-pipeline-Bi3YT3Jf.js";
 import { r as readManifest, t as completeManifest } from "./orchestration-manifest-DXWf2_x7.js";
-import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-0L910S2Q.js";
-import { t as createBrowserRouteDispatcher } from "./dispatcher-nmVyfQFp.js";
+import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-5kw5OYIx.js";
+import { t as createBrowserRouteDispatcher } from "./dispatcher-DJI5AwTt.js";
 import { n as persistBrowserProxyFiles, t as applyBrowserProxyPaths } from "./proxy-files-CndZU0gq.js";
 import { r as cachedJson } from "./ttl-cache-UdlZ-zJd.js";
-import { a as styleHealthChannelLine, c as runHeartbeatOnce, d as resolveHeartbeatVisibility, l as setHeartbeatsEnabled, n as formatHealthChannelLines, o as areHeartbeatsEnabled, r as getHealthSnapshot, u as startHeartbeatRunner } from "./health-CTFvDTD7.js";
+import { a as styleHealthChannelLine, c as runHeartbeatOnce, d as resolveHeartbeatVisibility, l as setHeartbeatsEnabled, n as formatHealthChannelLines, o as areHeartbeatsEnabled, r as getHealthSnapshot, u as startHeartbeatRunner } from "./health-bhWSy0iT.js";
 import { n as getLastHeartbeatEvent, r as onHeartbeatEvent } from "./heartbeat-events-DLgkBgdw.js";
-import { n as resolveChannelSenderIdentity, r as buildHistoryContextFromEntries, t as createReplyPrefixOptions } from "./reply-prefix-COgNJVi7.js";
+import { n as resolveChannelSenderIdentity, r as buildHistoryContextFromEntries, t as createReplyPrefixOptions } from "./reply-prefix-CqR6xBt8.js";
 import { n as handleHubAssignmentChanged, r as initUserSubsystem, t as getActiveUserSubsystem } from "./server-startup-users-B1IlQBSa.js";
 import { t as mapRoleToScopes } from "./types-Utz3c3Qq.js";
 import { t as ensureMinionCliOnPath } from "./path-env-DpsCNe2h.js";
@@ -99,10 +99,10 @@ import { n as inheritOptionFromParent } from "./command-options-Dhjl7AMa.js";
 import { t as buildChannelUiCatalog } from "./catalog-DOKauHFd.js";
 import { t as WizardCancelledError } from "./prompts-E0FayNjJ.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-HNAIOJ_3.js";
-import { t as applyPluginAutoEnable } from "./plugin-auto-enable-tbz6JDnp.js";
+import { t as applyPluginAutoEnable } from "./plugin-auto-enable-FIoIz-a0.js";
 import { t as buildChannelAccountSnapshot } from "./status-Dg720jp3.js";
-import { C as resolveAssistantAvatarUrl, S as normalizeControlUiBasePath, b as CONTROL_UI_AVATAR_PREFIX, c as handleReset, x as buildControlUiAvatarUrl } from "./onboard-helpers-BAjkjDC1.js";
-import "./onboard-helpers-DIRlPtVB.js";
+import { C as resolveAssistantAvatarUrl, S as normalizeControlUiBasePath, b as CONTROL_UI_AVATAR_PREFIX, c as handleReset, x as buildControlUiAvatarUrl } from "./onboard-helpers-D4NUWUH4.js";
+import "./onboard-helpers-CAp6xUvG.js";
 import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, s as loadAgentIdentityFromWorkspace, t as applyAgentConfig } from "./agents.config-BRZczxkO.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-C7sF_VNq.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-DJ67yyP8.js";
@@ -110,17 +110,17 @@ import { t as discoverGatewayBeacons } from "./bonjour-discovery-DzKslgdA.js";
 import { t as installSkill } from "./skills-install-C-t6jFVR.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-DKaLYbe_.js";
 import { a as resolveNpmChannelTag, n as compareSemverStrings, p as normalizeUpdateChannel, t as checkUpdateStatus } from "./update-check-C3c5TuO_.js";
-import { i as pickGatewaySelfPresence, r as getStatusSummary } from "./status-Z8UvQv14.js";
-import { a as probeGateway, i as resolveNodeCommandAllowlist, r as isNodeCommandAllowed } from "./audit-BQa9UHqw.js";
-import { m as parsePort$1 } from "./lifecycle-core-DzUG_Ssw.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-DoYeUpfT.js";
+import { i as pickGatewaySelfPresence, r as getStatusSummary } from "./status-Bxo5Qgkm.js";
+import { a as probeGateway, i as resolveNodeCommandAllowlist, r as isNodeCommandAllowed } from "./audit-DjsxBT25.js";
+import { m as parsePort$1 } from "./lifecycle-core-DcELCz73.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-eMnGI3zL.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-BjuB2JdU.js";
-import { n as createDefaultDeps, r as createOutboundSendDeps$1, t as createOutboundSendDeps } from "./outbound-send-deps-D_xee69M.js";
+import { n as createDefaultDeps, r as createOutboundSendDeps$1, t as createOutboundSendDeps } from "./outbound-send-deps-CLdxbXZ4.js";
 import { i as initCrypto, n as ProbeRegistry, r as SecretsManager, t as SecretStore } from "./store-DR4Ip_0q.js";
-import { t as runOnboardingWizard } from "./onboarding-BRTMRUY5.js";
-import { a as normalizeRpcAttachmentsToChatAttachments, c as logWs, d as setGatewayWsLogStyle, i as sendApnsBackgroundWake, l as shouldLogWs, o as parseMessageWithAttachments, r as resolveApnsAuthConfigFromEnv, s as formatForLog, t as loadApnsRegistration, u as summarizeAgentEventForWsLog } from "./push-apns-D61x7OCA.js";
-import { h as resolveGmailPullRuntimeConfig } from "./gmail-zhEe5Z8O.js";
-import { i as resolveAgentOutboundTarget, r as resolveAgentDeliveryPlan, t as agentCommand } from "./agent-CXpwHFOG.js";
+import { t as runOnboardingWizard } from "./onboarding-CA28TXPp.js";
+import { a as normalizeRpcAttachmentsToChatAttachments, c as logWs, d as setGatewayWsLogStyle, i as sendApnsBackgroundWake, l as shouldLogWs, o as parseMessageWithAttachments, r as resolveApnsAuthConfigFromEnv, s as formatForLog, t as loadApnsRegistration, u as summarizeAgentEventForWsLog } from "./push-apns-BYvlu7xE.js";
+import { h as resolveGmailPullRuntimeConfig } from "./gmail-smcTnAL4.js";
+import { i as resolveAgentOutboundTarget, r as resolveAgentDeliveryPlan, t as agentCommand } from "./agent-DICZ1SNs.js";
 import { n as validateSystemRunCommandConsistency, t as formatExecCommand } from "./system-run-command-BRxsVIll.js";
 import { n as runGatewayUpdate, t as resolveAgentSessionDirs } from "./session-dirs-DGKCBPrM.js";
 import { n as setEmbedConcurrency } from "./qmd-embed-semaphore-CnC0D_l5.js";
@@ -1396,7 +1396,7 @@ async function stripLegacyConfigOverrides(cfg, stateDir, log) {
 * Orchestration event bus — typed EventEmitter for orchestration progress
 * with auto-cleanup on completion and optional gateway bridge.
 */
-const log$29 = createSubsystemLogger("orchestration-events");
+const log$30 = createSubsystemLogger("orchestration-events");
 var OrchestrationEventBus = class {
 	constructor() {
 		this.listeners = /* @__PURE__ */ new Map();
@@ -1494,7 +1494,7 @@ function scanForInterruptedOrchestrations(agentWorkspaces) {
 			if (manifest.status === "running") {
 				completeManifest(orchestrationDir, "interrupted");
 				interrupted.push(manifest.orchestrationId);
-				log$29.info(`crash recovery: marked orchestration ${manifest.orchestrationId} as interrupted`);
+				log$30.info(`crash recovery: marked orchestration ${manifest.orchestrationId} as interrupted`);
 			}
 		}
 	}
@@ -1502,7 +1502,7 @@ function scanForInterruptedOrchestrations(agentWorkspaces) {
 }
 //#endregion
 //#region src/infra/exec-approval-forwarder.ts
-const log$28 = createSubsystemLogger("gateway/exec-approvals");
+const log$29 = createSubsystemLogger("gateway/exec-approvals");
 const DEFAULT_MODE = "session";
 function normalizeMode(mode) {
 	return mode ?? DEFAULT_MODE;
@@ -1620,7 +1620,7 @@ async function deliverToTargets(params) {
 				payloads: [{ text: params.text }]
 			});
 		} catch (err) {
-			log$28.error(`exec approvals: failed to deliver to ${channel}:${target.to}: ${String(err)}`);
+			log$29.error(`exec approvals: failed to deliver to ${channel}:${target.to}: ${String(err)}`);
 		}
 	});
 	await Promise.allSettled(deliveries);
@@ -3233,7 +3233,7 @@ async function validateGatewayJwt(token, config) {
 }
 //#endregion
 //#region src/gateway/channel-health-monitor.ts
-const log$27 = createSubsystemLogger("gateway/health-monitor");
+const log$28 = createSubsystemLogger("gateway/health-monitor");
 const DEFAULT_CHECK_INTERVAL_MS$1 = 5 * 6e4;
 const DEFAULT_STARTUP_GRACE_MS = 6e4;
 const DEFAULT_COOLDOWN_CYCLES = 2;
@@ -3283,11 +3283,11 @@ function startChannelHealthMonitor(deps) {
 					if (now - record.lastRestartAt <= cooldownMs) continue;
 					pruneOldRestarts(record, now);
 					if (record.restartsThisHour.length >= maxRestartsPerHour) {
-						log$27.warn?.(`[${channelId}:${accountId}] health-monitor: hit ${maxRestartsPerHour} restarts/hour limit, skipping`);
+						log$28.warn?.(`[${channelId}:${accountId}] health-monitor: hit ${maxRestartsPerHour} restarts/hour limit, skipping`);
 						continue;
 					}
 					const reason = !status.running ? status.reconnectAttempts && status.reconnectAttempts >= 10 ? "gave-up" : "stopped" : "stuck";
-					log$27.info?.(`[${channelId}:${accountId}] health-monitor: restarting (reason: ${reason})`);
+					log$28.info?.(`[${channelId}:${accountId}] health-monitor: restarting (reason: ${reason})`);
 					try {
 						if (status.running) await channelManager.stopChannel(channelId, accountId);
 						channelManager.resetRestartAttempts(channelId, accountId);
@@ -3296,7 +3296,7 @@ function startChannelHealthMonitor(deps) {
 						record.restartsThisHour.push({ at: now });
 						restartRecords.set(key, record);
 					} catch (err) {
-						log$27.error?.(`[${channelId}:${accountId}] health-monitor: restart failed: ${String(err)}`);
+						log$28.error?.(`[${channelId}:${accountId}] health-monitor: restart failed: ${String(err)}`);
 					}
 				}
 			}
@@ -3316,7 +3316,7 @@ function startChannelHealthMonitor(deps) {
 		abortSignal?.addEventListener("abort", stop, { once: true });
 		timer = setInterval(() => void runCheck(), checkIntervalMs);
 		if (typeof timer === "object" && "unref" in timer) timer.unref();
-		log$27.info?.(`started (interval: ${Math.round(checkIntervalMs / 1e3)}s, grace: ${Math.round(startupGraceMs / 1e3)}s)`);
+		log$28.info?.(`started (interval: ${Math.round(checkIntervalMs / 1e3)}s, grace: ${Math.round(startupGraceMs / 1e3)}s)`);
 	}
 	return { stop };
 }
@@ -3336,7 +3336,7 @@ function startChannelHealthMonitor(deps) {
 * compare) before any phase flips dispatch to the mirror. whatsapp + telegram compare
 * fully; discord is compare-deferred. See specs/2026-06-26-gateway-config-db-migration-plan.md.
 */
-const log$26 = createSubsystemLogger("channel-mirror");
+const log$27 = createSubsystemLogger("channel-mirror");
 /** The gateway's live (gateway.json-resolved) comparable projection for an account.
 *  Type-aware: whatsapp + telegram resolve cleanly; discord's per-guild/channel model
 *  has no flat account projection → returns null (compare deferred, logged honestly). */
@@ -3395,7 +3395,7 @@ async function channelMirrorCompareFromTags(tags) {
 	try {
 		await seedMirror();
 	} catch (err) {
-		log$26.warn(`mirror refresh on signal failed: ${String(err)}`);
+		log$27.warn(`mirror refresh on signal failed: ${String(err)}`);
 	}
 	const affectedTypes = /* @__PURE__ */ new Set();
 	for (const tag of channelTags) {
@@ -3407,7 +3407,7 @@ async function channelMirrorCompareFromTags(tags) {
 		try {
 			compareOne(type, accountId);
 		} catch (err) {
-			log$26.warn(`compare failed for ${tag}: ${String(err)}`);
+			log$27.warn(`compare failed for ${tag}: ${String(err)}`);
 		}
 	}
 	for (const type of affectedTypes) await applyChannelRestart(type);
@@ -3416,18 +3416,18 @@ async function channelMirrorCompareFromTags(tags) {
 function compareOne(type, accountId) {
 	const entry = getMirrorEntry(type, accountId);
 	if (!entry) {
-		log$26.info(`signal for ${type}:${accountId}: not in mirror (Valkey/hub hydrate empty)`);
+		log$27.info(`signal for ${type}:${accountId}: not in mirror (Valkey/hub hydrate empty)`);
 		return;
 	}
 	const shadow = entry.projection;
 	const live = liveProjection(type, accountId);
 	if (!live) {
-		log$26.info(`signal for ${type}:${accountId}: no live comparable (new account or compare-deferred type) [observe-only]`);
+		log$27.info(`signal for ${type}:${accountId}: no live comparable (new account or compare-deferred type) [observe-only]`);
 		return;
 	}
 	const diff = diffFields(shadow, live);
 	const intended = shadow.enabled ? live.enabled ? "noop(running)" : "START" : "STOP";
-	log$26.info(`mirror ${type}:${accountId}: diff=[${diff.join(",") || "none"}] intended=${intended} shadow=${JSON.stringify(shadow)} live=${JSON.stringify(live)} [observe-only]`);
+	log$27.info(`mirror ${type}:${accountId}: diff=[${diff.join(",") || "none"}] intended=${intended} shadow=${JSON.stringify(shadow)} live=${JSON.stringify(live)} [observe-only]`);
 }
 /**
 * Boot parity check: read the seeded mirror snapshot and log how many accounts diverge
@@ -3447,10 +3447,10 @@ async function channelMirrorBootParity() {
 			}
 			if (diffFields(projection, live).length > 0) diffs += 1;
 		}
-		log$26.info(`boot hydration: ${shadows.size} accounts from hub, ${diffs} diff(s), ${deferred} deferred vs gateway.json [observe-only]`);
-		log$26.info(`boot hydration keys: [${Array.from(shadows.keys()).sort().join(", ")}]`);
+		log$27.info(`boot hydration: ${shadows.size} accounts from hub, ${diffs} diff(s), ${deferred} deferred vs gateway.json [observe-only]`);
+		log$27.info(`boot hydration keys: [${Array.from(shadows.keys()).sort().join(", ")}]`);
 	} catch (err) {
-		log$26.warn(`boot hydration parity failed: ${String(err)}`);
+		log$27.warn(`boot hydration parity failed: ${String(err)}`);
 	}
 }
 //#endregion
@@ -3950,7 +3950,7 @@ var ExecApprovalManager = class {
 * Opens the SQLite database, applies WAL pragmas, and runs the
 * 004_free_tier_users migration. Returns the DatabaseSync instance.
 */
-const log$25 = createSubsystemLogger("free-tier/db");
+const log$26 = createSubsystemLogger("free-tier/db");
 const MIGRATION_SQL_PATH = join(dirname(fileURLToPath(import.meta.url)), "../../db/migrations/004_free_tier_users.sql");
 function openFreeTierDb(dbPath) {
 	const { DatabaseSync } = requireNodeSqlite();
@@ -3959,9 +3959,9 @@ function openFreeTierDb(dbPath) {
 	try {
 		const sql = readFileSync(MIGRATION_SQL_PATH, "utf8");
 		db.exec(sql);
-		log$25.info("free-tier DB migration applied", { dbPath });
+		log$26.info("free-tier DB migration applied", { dbPath });
 	} catch (err) {
-		log$25.error("free-tier DB migration failed", {
+		log$26.error("free-tier DB migration failed", {
 			dbPath,
 			error: String(err)
 		});
@@ -4101,13 +4101,13 @@ var UserRepository = class {
 };
 //#endregion
 //#region src/gateway/free-tier/email.ts
-const log$24 = createSubsystemLogger("free-tier/email");
+const log$25 = createSubsystemLogger("free-tier/email");
 const RESEND_API = "https://api.resend.com/emails";
 const FROM = "OpenClaw <noreply@minion.ai>";
 async function send$1(to, subject, html) {
 	const apiKey = process.env["RESEND_API_KEY"];
 	if (!apiKey) {
-		log$24.warn("RESEND_API_KEY not set — email not sent", {
+		log$25.warn("RESEND_API_KEY not set — email not sent", {
 			to,
 			subject
 		});
@@ -4128,7 +4128,7 @@ async function send$1(to, subject, html) {
 	});
 	if (!res.ok) {
 		const text = await res.text().catch(() => "");
-		log$24.error("Resend API error", {
+		log$25.error("Resend API error", {
 			status: res.status,
 			body: text
 		});
@@ -4141,7 +4141,7 @@ async function sendVerificationEmail(email, token, baseUrl) {
 }
 //#endregion
 //#region src/gateway/free-tier/auth-http.ts
-const log$23 = createSubsystemLogger("free-tier/auth");
+const log$24 = createSubsystemLogger("free-tier/auth");
 function json$1(res, status, body) {
 	res.statusCode = status;
 	res.setHeader("Content-Type", "application/json; charset=utf-8");
@@ -4203,7 +4203,7 @@ async function handleSignup(req, res, users) {
 		passwordHash
 	});
 	await sendVerificationEmail(email, verifyToken, process.env["HUB_BASE_URL"] ?? "https://hub.minion.ai").catch((e) => {
-		log$23.error("failed to send verification email", {
+		log$24.error("failed to send verification email", {
 			userId: user.id,
 			error: String(e)
 		});
@@ -4536,7 +4536,7 @@ function createFreeTierApiHandler(db) {
 *
 * @module
 */
-const log$22 = createSubsystemLogger("gateway/metrics");
+const log$23 = createSubsystemLogger("gateway/metrics");
 /** Cap on retained latency samples per method (reservoir) to bound memory. */
 const MAX_SAMPLES_PER_METHOD = 512;
 /** Default snapshot window. Matches the reliability rate-limiter granularity. */
@@ -4650,7 +4650,7 @@ function startGatewayRequestMetrics(opts) {
 		eventLoopHist = monitorEventLoopDelay({ resolution: 20 });
 		eventLoopHist.enable();
 	} catch (err) {
-		log$22.debug(`event-loop delay monitor unavailable: ${err instanceof Error ? err.message : String(err)}`);
+		log$23.debug(`event-loop delay monitor unavailable: ${err instanceof Error ? err.message : String(err)}`);
 		eventLoopHist = null;
 	}
 	windowStartMs = Date.now();
@@ -4659,7 +4659,7 @@ function startGatewayRequestMetrics(opts) {
 		try {
 			emitSnapshot(now - windowStartMs);
 		} catch (err) {
-			log$22.debug(`perf snapshot emit failed: ${err instanceof Error ? err.message : String(err)}`);
+			log$23.debug(`perf snapshot emit failed: ${err instanceof Error ? err.message : String(err)}`);
 		}
 		methodStats.clear();
 		eventLoopHist?.reset();
@@ -5832,7 +5832,7 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 *
 * See specs/2026-05-22-gateway-turn-recovery.md.
 */
-const log$21 = createSubsystemLogger("agents/in-flight-turns");
+const log$22 = createSubsystemLogger("agents/in-flight-turns");
 const STALE_AFTER_MS = 1800 * 1e3;
 const MAX_RECOVERY_ATTEMPTS = 2;
 const APOLOGY_SEND_TIMEOUT_MS = 3e3;
@@ -5865,7 +5865,7 @@ async function sendApology(cfg, row) {
 		});
 		return await Promise.race([send, timeout]);
 	} catch (err) {
-		log$21.warn(`apology send failed for ${row.channel}:${row.chatId}: ${String(err)}`);
+		log$22.warn(`apology send failed for ${row.channel}:${row.chatId}: ${String(err)}`);
 		return false;
 	} finally {
 		if (timer) clearTimeout(timer);
@@ -5890,14 +5890,14 @@ async function recoverInterruptedTurns(deps) {
 		if (isStale || looped) {
 			deleteRow(row.id);
 			summary.dropped++;
-			log$21.info(`dropped row ${row.id} (${isStale ? "stale" : "loop guard"}): ${row.channel}:${row.chatId} agent=${row.agentId}`);
+			log$22.info(`dropped row ${row.id} (${isStale ? "stale" : "loop guard"}): ${row.channel}:${row.chatId} agent=${row.agentId}`);
 			continue;
 		}
 		markRecoveryAttempt(row.id);
 		if (await sendApology(deps.cfg, row)) summary.apologized++;
 		deleteRow(row.id);
 	}
-	log$21.info(`recovery scanned=${summary.scanned} apologized=${summary.apologized} dropped=${summary.dropped}`);
+	log$22.info(`recovery scanned=${summary.scanned} apologized=${summary.apologized} dropped=${summary.dropped}`);
 	return summary;
 }
 /**
@@ -5920,7 +5920,7 @@ async function drainInFlightTurns(deps) {
 			deleteRow(row.id);
 		}
 	}
-	log$21.info(`drain drained=${summary.drained} apologized=${summary.apologized}`);
+	log$22.info(`drain drained=${summary.drained} apologized=${summary.apologized}`);
 	return summary;
 }
 //#endregion
@@ -5949,7 +5949,7 @@ async function drainInFlightTurns(deps) {
 *
 * Spec: specs/2026-06-11-gog-nuke-execution-plan.md (Phase D)
 */
-const log$20 = createSubsystemLogger("gmail-gws");
+const log$21 = createSubsystemLogger("gmail-gws");
 /**
 * Run a `gws gmail …` command with the watcher's Gmail credentials file
 * injected. Returns parsed JSON on success. A non-zero exit is surfaced as
@@ -6030,7 +6030,7 @@ async function registerWatch(opts) {
 		error: "users.watch response missing historyId"
 	};
 	const expiration = data.expiration != null && Number.isFinite(Number(data.expiration)) ? Number(data.expiration) : void 0;
-	log$20.info(`watch registered (historyId=${historyId}, expiration=${expiration ?? "?"})`);
+	log$21.info(`watch registered (historyId=${historyId}, expiration=${expiration ?? "?"})`);
 	return {
 		ok: true,
 		historyId,
@@ -6164,7 +6164,7 @@ async function getMessage(opts) {
 		timeoutMs: opts.timeoutMs ?? 6e4
 	});
 	if (!res.ok) {
-		log$20.warn(`messages.get ${opts.id} failed: ${res.error}`);
+		log$21.warn(`messages.get ${opts.id} failed: ${res.error}`);
 		return null;
 	}
 	return parseGmailMessage(res.data, {
@@ -6245,6 +6245,177 @@ function truncateUtf8(value, maxBytes) {
 	return `${text}…`;
 }
 //#endregion
+//#region src/hooks/gmail-auto-label.ts
+/**
+* AI auto-labeling for the Gmail pull watcher.
+*
+* As Pub/Sub notifications deliver new messages, each one is classified by a
+* schema-output drone (same primitive as the personal-agent email summaries —
+* works on OpenRouter-only deployments) into ONE of the configured labels,
+* and that Gmail label is applied via `gws gmail users messages modify`.
+*
+* Labels are resolved name → id via `users labels list` and created on first
+* use (`users labels create`), cached per credentials file. Applying a label
+* is idempotent (addLabelIds), so a redelivered notification re-labels
+* harmlessly.
+*
+* Everything here is best-effort: a classify or gws failure logs and skips
+* the message — it never blocks the watcher's history baseline from
+* advancing. Requires the watched account's token to hold gmail.modify scope
+* (a 403 here means the account must be re-linked with the current scopes).
+*/
+const log$20 = createSubsystemLogger("gmail-auto-label");
+const classifyDrone = defineDrone({
+	id: "gmail-auto-label",
+	description: "Classifies an incoming email into one configured Gmail label.",
+	systemPrompt: "You label incoming email for a small-business inbox. Given the allowed labels with their meanings and one email, answer with exactly one label name — the best fit — or \"none\" when no label clearly applies. Never invent labels not in the list.",
+	model: {
+		provider: "anthropic",
+		model: "claude-haiku-4-5"
+	},
+	output: Type.Object({ label: Type.String({ description: "Exactly one of the allowed label names (verbatim), or \"none\" when no label clearly applies." }) }),
+	timeoutMs: 15e3
+});
+/** Cap what we feed the classifier — triage metadata + a body slice is plenty. */
+const BODY_CHARS_FOR_CLASSIFY = 2e3;
+/** Build the classify prompt for one message. Exported for tests. */
+function buildClassifyPrompt(msg, labels) {
+	const lines = [
+		"Allowed labels:",
+		...labels.map((l) => `- ${l.name}${l.description ? `: ${l.description}` : ""}`),
+		"",
+		`From: ${msg.from}`,
+		`Subject: ${msg.subject}`
+	];
+	const preview = (msg.body || msg.snippet || "").slice(0, BODY_CHARS_FOR_CLASSIFY).trim();
+	if (preview) lines.push("", preview);
+	return lines.join("\n");
+}
+/**
+* Match the drone's answer against the configured rules. Case-insensitive;
+* returns the canonical configured name, or null for "none"/unknown answers.
+* Exported for tests.
+*/
+function matchLabel(raw, labels) {
+	const answer = raw.trim().toLowerCase();
+	if (!answer || answer === "none") return null;
+	return labels.find((l) => l.name.trim().toLowerCase() === answer)?.name ?? null;
+}
+const labelCaches = /* @__PURE__ */ new Map();
+async function loadLabelCache(credentialsFile) {
+	const res = await runGwsGmail([
+		"gmail",
+		"users",
+		"labels",
+		"list",
+		"--params",
+		JSON.stringify({ userId: "me" })
+	], {
+		credentialsFile,
+		timeoutMs: 3e4
+	});
+	if (!res.ok) {
+		log$20.warn(`labels.list failed: ${res.error}`);
+		return null;
+	}
+	const cache = /* @__PURE__ */ new Map();
+	for (const label of res.data.labels ?? []) if (label.id && label.name) cache.set(label.name.trim().toLowerCase(), label.id);
+	return cache;
+}
+async function createLabel(credentialsFile, name) {
+	const res = await runGwsGmail([
+		"gmail",
+		"users",
+		"labels",
+		"create",
+		"--params",
+		JSON.stringify({ userId: "me" }),
+		"--json",
+		JSON.stringify({
+			name,
+			labelListVisibility: "labelShow",
+			messageListVisibility: "show"
+		})
+	], {
+		credentialsFile,
+		timeoutMs: 3e4
+	});
+	if (!res.ok) {
+		log$20.warn(`labels.create "${name}" failed: ${res.error}`);
+		return null;
+	}
+	return res.data.id ?? null;
+}
+/** Resolve a label name to its Gmail id, creating the label on first use. */
+async function ensureLabelId(credentialsFile, name) {
+	let cache = labelCaches.get(credentialsFile);
+	if (!cache) {
+		const loaded = await loadLabelCache(credentialsFile);
+		if (!loaded) return null;
+		cache = loaded;
+		labelCaches.set(credentialsFile, cache);
+	}
+	const key = name.trim().toLowerCase();
+	const existing = cache.get(key);
+	if (existing) return existing;
+	const created = await createLabel(credentialsFile, name);
+	if (created) cache.set(key, created);
+	return created;
+}
+async function applyLabel(credentialsFile, messageId, labelId) {
+	const res = await runGwsGmail([
+		"gmail",
+		"users",
+		"messages",
+		"modify",
+		"--params",
+		JSON.stringify({
+			userId: "me",
+			id: messageId
+		}),
+		"--json",
+		JSON.stringify({ addLabelIds: [labelId] })
+	], {
+		credentialsFile,
+		timeoutMs: 3e4
+	});
+	if (!res.ok) {
+		log$20.warn(`messages.modify ${messageId} failed: ${res.error}`);
+		return false;
+	}
+	return true;
+}
+async function classifyWithDrone(prompt) {
+	const result = await runDrone(classifyDrone, { prompt }, createGatewayDroneHost());
+	if (!result.ok) {
+		log$20.debug(`classify drone failed: ${result.error.code} ${result.error.message}`);
+		return null;
+	}
+	return result.data.label;
+}
+/**
+* Classify + label a batch of freshly delivered messages. Never throws;
+* per-message failures are logged and skipped. `classify` is injectable for
+* tests and defaults to the Haiku drone.
+*/
+async function autoLabelMessages(opts) {
+	const classify = opts.classify ?? classifyWithDrone;
+	for (const msg of opts.messages) try {
+		const answer = await classify(buildClassifyPrompt(msg, opts.labels));
+		if (answer === null) continue;
+		const name = matchLabel(answer, opts.labels);
+		if (!name) {
+			log$20.debug(`no label for ${msg.id} (classifier said "${answer}")`);
+			continue;
+		}
+		const labelId = await ensureLabelId(opts.credentialsFile, name);
+		if (!labelId) continue;
+		if (await applyLabel(opts.credentialsFile, msg.id, labelId)) log$20.info(`labeled ${msg.id} as "${name}"`);
+	} catch (err) {
+		log$20.warn(`auto-label failed for ${msg.id}: ${String(err)}`);
+	}
+}
+//#endregion
 //#region src/hooks/gmail-history-state.ts
 /**
 * Durable historyId persistence for the Gmail pull watcher.
@@ -6533,12 +6704,17 @@ async function syncOnce(notification) {
 		if (msg) messages.push(msg);
 	}
 	if (messages.length > 0) {
-		if (!await postToHook(cfg, messages)) {
+		if (cfg.autoLabel.enabled) await autoLabelMessages({
+			credentialsFile: cfg.credentialsFile,
+			labels: cfg.autoLabel.labels,
+			messages
+		});
+		if (!(cfg.deliver ? await postToHook(cfg, messages) : true)) {
 			log$17.warn("hook POST failed; will retry on next notification");
 			return;
 		}
 		for (const msg of messages) rememberProcessed(current, msg.id);
-		log$17.info(`delivered ${messages.length} message(s) to ${cfg.hookUrl}`);
+		if (cfg.deliver) log$17.info(`delivered ${messages.length} message(s) to ${cfg.hookUrl}`);
 	} else for (const id of freshIds) rememberProcessed(current, id);
 	advanceHistory(current, history.historyId ?? notification.historyId);
 	await saveHistoryId(current.stateDir, cfg.account, current.lastHistoryId);
@@ -6570,19 +6746,34 @@ async function renewWatch() {
 /**
 * POST the normalized payload to the gateway's local `/hooks/gmail` endpoint
 * with the bearer hook token. Returns true on a 2xx response.
+*
+* Uses node:http(s) directly instead of global fetch: the default hookUrl is
+* the gateway POSTing to itself on 127.0.0.1, and undici's process-global
+* dispatcher state (mutable by other subsystems/extensions) broke that fetch
+* in production for weeks ("TypeError: fetch failed") while the endpoint was
+* reachable from every other client.
 */
 async function postToHook(cfg, messages) {
+	const body = JSON.stringify({ messages });
 	try {
-		const res = await fetch(cfg.hookUrl, {
-			method: "POST",
-			headers: {
-				"content-type": "application/json",
-				authorization: `Bearer ${cfg.hookToken}`
-			},
-			body: JSON.stringify({ messages })
+		const status = await new Promise((resolve, reject) => {
+			const req = (cfg.hookUrl.startsWith("https:") ? https : http).request(cfg.hookUrl, {
+				method: "POST",
+				headers: {
+					"content-type": "application/json",
+					authorization: `Bearer ${cfg.hookToken}`,
+					"content-length": Buffer.byteLength(body)
+				}
+			}, (res) => {
+				res.resume();
+				res.on("end", () => resolve(res.statusCode ?? 0));
+			});
+			req.setTimeout(3e4, () => req.destroy(/* @__PURE__ */ new Error("hook POST timed out")));
+			req.on("error", reject);
+			req.end(body);
 		});
-		if (!res.ok) {
-			log$17.warn(`hook POST returned ${res.status}`);
+		if (status < 200 || status >= 300) {
+			log$17.warn(`hook POST returned ${status}`);
 			return false;
 		}
 		return true;
@@ -19744,7 +19935,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-B6R9PtsE.js");
+			const { handleNodeEvent } = await import("./server-node-events-CJsgH2Am.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			const nodeConnId = client?.connId;
 			await handleNodeEvent({
@@ -27520,7 +27711,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.MINION_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.MINION_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./control-service-0L910S2Q.js").then((n) => n.t);
+	const mod = override ? await import(override) : await import("./control-service-5kw5OYIx.js").then((n) => n.t);
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -33482,7 +33673,7 @@ async function deliverFlowReply(sessionKey, reply) {
 	}
 	try {
 		const cfg = loadConfig();
-		const { deliverOutboundPayloads } = await import("./deliver-PUOUs4ol.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-p_wWlh7d.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg,
 			channel: target.channel,
@@ -37201,7 +37392,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	}
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-4i2kXntr.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-PUOUs4ol.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-p_wWlh7d.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),