@noxsoft/anima 2.0.6 → 2.0.7

package/dist/{gateway-cli-BTjUHLX7.js → gateway-cli-4F4fyNVX.js}

@@ -1,6 +1,6 @@
 import { $ as resolveStateDir, A as colorize, B as STATE_DIR, E as setVerbose, F as getResolvedLoggerSettings, K as resolveGatewayLockDir, M as theme, N as getChildLogger, P as getLogger, R as CONFIG_PATH, Tt as expandHomePrefix, U as resolveConfigPath, V as isNixMode, d as setConsoleTimestampPrefix, dt as getActivePluginRegistry, h as defaultRuntime, j as isRich, n as isTruthyEnvValue, o as createSubsystemLogger, q as resolveGatewayPort, r as logAcceptedEnvOption, rt as DEFAULT_CHAT_CHANNEL, s as runtimeForLogger, tt as CHANNEL_IDS, u as setConsoleSubsystemFilter } from "./entry.js";
-import { D as getModelRefStatus, Dt as DEFAULT_PROVIDER, Et as DEFAULT_MODEL, F as resolveConfiguredModelRef, I as resolveDefaultModelForAgent, L as resolveHooksGmailModel, N as resolveAllowedModelRef, O as isCliProvider, Tt as DEFAULT_CONTEXT_TOKENS, ut as normalizeSecretInput, z as resolveThinkingDefault } from "./auth-profiles-CC3TFfvS.js";
-import { t as formatCliCommand } from "./command-format-DAaqLG8J.js";
+import { D as getModelRefStatus, Dt as DEFAULT_PROVIDER, Et as DEFAULT_MODEL, F as resolveConfiguredModelRef, I as resolveDefaultModelForAgent, L as resolveHooksGmailModel, N as resolveAllowedModelRef, O as isCliProvider, Tt as DEFAULT_CONTEXT_TOKENS, ut as normalizeSecretInput, z as resolveThinkingDefault } from "./auth-profiles-Duc5USNQ.js";
+import { t as formatCliCommand } from "./command-format-DAvTwbVn.js";
 import { b as isSubagentSessionKey, d as resolveAgentIdFromSessionKey, i as buildAgentMainSessionKey, l as normalizeAgentId, m as toAgentRequestSessionKey, n as DEFAULT_AGENT_ID, t as DEFAULT_ACCOUNT_ID, u as normalizeMainKey, v as isCronRunSessionKey, x as parseAgentSessionKey } from "./session-key-BGiG_JcT.js";
 import { E as truncateUtf16Safe, S as shortenHomePath, n as clamp, s as ensureDir, t as CONFIG_DIR, u as isPlainObject, y as resolveUserPath } from "./utils-C9sj30YY.js";
 import { a as logDebug, c as logWarn, n as runExec, t as runCommandWithTimeout } from "./exec-BizYYQgP.js";
@@ -10,64 +10,64 @@ import "./pi-model-discovery-DsRqYJLy.js";
 import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot, x as hasBinary } from "./skills-B5LQx4lT.js";
 import { o as isTestDefaultMemorySlotDisabled } from "./manifest-registry-D4lM2RdV.js";
 import { t as buildWorkspaceSkillStatus } from "./skills-status-JQluhU-P.js";
-import { A as resolveAgentMaxConcurrent, M as VERSION, T as applyLegacyMigrations, a as parseConfigJson5, c as resolveConfigSnapshotHash, d as AnimaSchema, i as loadConfig, j as resolveSubagentMaxConcurrent, l as writeConfigFile, m as parseDurationMs, n as migrateLegacyConfig, o as readConfigFileSnapshot, p as sensitive, r as createConfigIO, s as readConfigFileSnapshotForWrite, u as validateConfigObjectWithPlugins, w as applyMergePatch } from "./config-BeuAT94o.js";
+import { A as resolveAgentMaxConcurrent, M as VERSION, T as applyLegacyMigrations, a as parseConfigJson5, c as resolveConfigSnapshotHash, d as AnimaSchema, i as loadConfig, j as resolveSubagentMaxConcurrent, l as writeConfigFile, m as parseDurationMs, n as migrateLegacyConfig, o as readConfigFileSnapshot, p as sensitive, r as createConfigIO, s as readConfigFileSnapshotForWrite, u as validateConfigObjectWithPlugins, w as applyMergePatch } from "./config-BTrnoeUT.js";
 import { $ as validateNodePairRequestParams, A as validateCronStatusParams, B as validateExecApprovalsNodeGetParams, C as validateConfigSetParams, Ct as validateWizardCancelParams, D as validateCronRemoveParams, Dt as PROTOCOL_VERSION, E as validateCronListParams, Et as validateWizardStatusParams, F as validateDeviceTokenRevokeParams, G as validateNodeDescribeParams, H as validateExecApprovalsSetParams, I as validateDeviceTokenRotateParams, It as normalizeDevicePublicKeyBase64Url, J as validateNodeInvokeResultParams, K as validateNodeEventParams, L as validateExecApprovalRequestParams, Lt as verifyDeviceSignature, M as validateDevicePairApproveParams, Mt as buildDeviceAuthPayload, N as validateDevicePairListParams, O as validateCronRunParams, Ot as ErrorCodes, P as validateDevicePairRejectParams, Pt as deriveDeviceIdFromPublicKey, Q as validateNodePairRejectParams, R as validateExecApprovalResolveParams, S as validateConfigSchemaParams, St as validateWebLoginWaitParams, T as validateCronAddParams, Tt as validateWizardStartParams, U as validateLogsTailParams, V as validateExecApprovalsNodeSetParams, W as validateModelsListParams, X as validateNodePairApproveParams, Y as validateNodeListParams, Z as validateNodePairListParams, _ as validateChatInjectParams, _t as validateTalkConfigParams, a as validateAgentWaitParams, at as validateSessionsCompactParams, b as validateConfigGetParams, bt as validateWakeParams, c as validateAgentsFilesGetParams, ct as validateSessionsPatchParams, d as validateAgentsListParams, dt as validateSessionsResolveParams, et as validateNodePairVerifyParams, f as validateAgentsUpdateParams, ft as validateSessionsUsageParams, g as validateChatHistoryParams, gt as validateSkillsUpdateParams, h as validateChatAbortParams, ht as validateSkillsStatusParams, i as validateAgentParams, it as validateSendParams, j as validateCronUpdateParams, jt as parseSessionLabel, k as validateCronRunsParams, kt as errorShape, l as validateAgentsFilesListParams, lt as validateSessionsPreviewParams, m as validateChannelsStatusParams, mt as validateSkillsInstallParams, n as formatValidationErrors, nt as validatePollParams, o as validateAgentsCreateParams, ot as validateSessionsDeleteParams, p as validateChannelsLogoutParams, pt as validateSkillsBinsParams, q as validateNodeInvokeParams, r as validateAgentIdentityParams, rt as validateRequestFrame, s as validateAgentsDeleteParams, st as validateSessionsListParams, tt as validateNodeRenameParams, u as validateAgentsFilesSetParams, ut as validateSessionsResetParams, v as validateChatSendParams, vt as validateTalkModeParams, w as validateConnectParams, wt as validateWizardNextParams, x as validateConfigPatchParams, xt as validateWebLoginStartParams, y as validateConfigApplyParams, yt as validateUpdateRunParams, z as validateExecApprovalsGetParams } from "./client-C1avc0vD.js";
 import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-CuiNECdL.js";
-import { n as callGateway, o as loadGatewayTlsRuntime$1 } from "./call-CTMQygkz.js";
+import { n as callGateway, o as loadGatewayTlsRuntime$1 } from "./call-BCq1DIZp.js";
 import { f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, h as GATEWAY_CLIENT_NAMES, i as isGatewayMessageChannel, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient, t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-w4F2b2F6.js";
 import { c as resolveGatewayBindHost, d as rawDataToString, i as isTrustedProxyAddress, l as resolveGatewayClientIp, n as isLoopbackHost, r as isPrivateOrLoopbackAddress, s as pickPrimaryLanIPv4, t as isLoopbackAddress, u as resolveGatewayListenHosts } from "./net-B5lXhYLV.js";
 import { r as normalizeInputProvenance } from "./input-provenance-DJBdpeKk.js";
 import { S as registerAgentRunContext, _ as waitForEmbeddedPiRunEnd, b as getAgentRunContext, c as stripHeartbeatToken, g as runEmbeddedPiAgent, i as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, l as CommandLane, t as resolveAgentTimeoutMs, u as abortEmbeddedPiRun, v as clearAgentRunContext, x as onAgentEvent, y as emitAgentEvent } from "./timeout-CswI_K-U.js";
-import { A as deliveryContextFromSession, C as resolveMainSessionKeyFromConfig, M as mergeDeliveryContext, P as normalizeSessionDeliveryFields, S as resolveMainSessionKey, T as snapshotSessionOrigin, b as resolveAgentMainSessionKey, i as loadSessionStore, l as updateSessionStore, t as extractDeliveryInfo, x as resolveExplicitAgentSessionKey } from "./sessions-Gf_kQenz.js";
-import { $ as startDiagnosticHeartbeat, H as clearSessionQueues, I as resolveAgentIdentity, J as setCommandLaneConcurrency, K as getTotalQueueSize, W as getActiveTaskCount, Y as waitForActiveTasks, a as listDescendantRunsForRequester, et as stopDiagnosticHeartbeat, i as initSubagentRegistry, m as readLatestAssistantReply, n as countActiveDescendantRuns, nt as isDiagnosticsEnabled, p as runSubagentAnnounceFlow, q as resetAllLanes } from "./subagent-registry-CPlMIIq4.js";
+import { A as deliveryContextFromSession, C as resolveMainSessionKeyFromConfig, M as mergeDeliveryContext, P as normalizeSessionDeliveryFields, S as resolveMainSessionKey, T as snapshotSessionOrigin, b as resolveAgentMainSessionKey, i as loadSessionStore, l as updateSessionStore, t as extractDeliveryInfo, x as resolveExplicitAgentSessionKey } from "./sessions-CiJ1eNyx.js";
+import { $ as startDiagnosticHeartbeat, H as clearSessionQueues, I as resolveAgentIdentity, J as setCommandLaneConcurrency, K as getTotalQueueSize, W as getActiveTaskCount, Y as waitForActiveTasks, a as listDescendantRunsForRequester, et as stopDiagnosticHeartbeat, i as initSubagentRegistry, m as readLatestAssistantReply, n as countActiveDescendantRuns, nt as isDiagnosticsEnabled, p as runSubagentAnnounceFlow, q as resetAllLanes } from "./subagent-registry-CkAbKMlw.js";
 import "./logging-BdnOSVPD.js";
-import "./accounts-CP1IAWeM.js";
-import { A as formatRestartSentinelMessage, At as registerUnhandledRejectionHandler, B as normalizePayloadToSystemText, Bt as DEFAULT_INPUT_TIMEOUT_MS, C as isGatewaySigusr1RestartExternallyAllowed, D as setPreRestartDeferralCheck, E as setGatewaySigusr1RestartPolicy, F as normalizeCronJobCreate, Ft as DEFAULT_INPUT_IMAGE_MIMES, G as buildSafeExternalPrompt, H as migrateLegacyCronPayload, Ht as extractImageContentFromSource, I as normalizeCronJobPatch, It as DEFAULT_INPUT_MAX_REDIRECTS, J as isExternalHookSession, K as detectSuspiciousPatterns, L as inferLegacyName, Lt as DEFAULT_INPUT_PDF_MAX_PAGES, M as summarizeRestartSentinel, Mt as DEFAULT_INPUT_FILE_MAX_CHARS, Nt as DEFAULT_INPUT_FILE_MIMES, O as consumeRestartSentinel, P as writeRestartSentinel, Pt as DEFAULT_INPUT_IMAGE_MAX_BYTES, Q as loadAnimaPlugins, R as normalizeOptionalAgentId, Rt as DEFAULT_INPUT_PDF_MAX_PIXELS, S as emitGatewayRestart, T as scheduleGatewaySigusr1Restart, Ut as normalizeMimeList, V as normalizeRequiredName, Vt as extractFileContentFromSource, Wt as estimateBase64DecodedBytes, X as persistBrowserProxyFiles, Y as applyBrowserProxyPaths, Z as getPluginToolMeta, a as sniffMimeFromBase64, b as consumeGatewaySigusr1RestartAuthorization, bt as stopSubagentsForRequester, c as loadProviderUsageSummary, dt as getTotalPendingReplies, f as normalizeGroupActivation, g as resolveOutboundSessionRoute, h as ensureOutboundSessionEntry, i as buildDefaultToolPolicyPipelineSteps, it as getChannelActivity, jt as DEFAULT_INPUT_FILE_MAX_BYTES, k as formatDoctorNonInteractiveHint, lt as dispatchInboundMessage, n as BARE_SESSION_RESET_PROMPT, o as createAnimaTools, q as getHookType, r as applyToolPolicyPipeline, s as resolveAnnounceTargetFromKey, ut as createReplyDispatcher, v as resetDirectoryCache, w as markGatewaySigusr1RestartHandled, x as deferGatewayRestartUntilIdle, xt as formatZonedTimestamp, yt as isAbortTrigger, z as normalizeOptionalText, zt as DEFAULT_INPUT_PDF_MIN_TEXT_CHARS } from "./reply-7WXXmeTT.js";
+import "./accounts-gb7RRjHj.js";
+import { A as formatRestartSentinelMessage, At as registerUnhandledRejectionHandler, B as normalizePayloadToSystemText, Bt as DEFAULT_INPUT_TIMEOUT_MS, C as isGatewaySigusr1RestartExternallyAllowed, D as setPreRestartDeferralCheck, E as setGatewaySigusr1RestartPolicy, F as normalizeCronJobCreate, Ft as DEFAULT_INPUT_IMAGE_MIMES, G as buildSafeExternalPrompt, H as migrateLegacyCronPayload, Ht as extractImageContentFromSource, I as normalizeCronJobPatch, It as DEFAULT_INPUT_MAX_REDIRECTS, J as isExternalHookSession, K as detectSuspiciousPatterns, L as inferLegacyName, Lt as DEFAULT_INPUT_PDF_MAX_PAGES, M as summarizeRestartSentinel, Mt as DEFAULT_INPUT_FILE_MAX_CHARS, Nt as DEFAULT_INPUT_FILE_MIMES, O as consumeRestartSentinel, P as writeRestartSentinel, Pt as DEFAULT_INPUT_IMAGE_MAX_BYTES, Q as loadAnimaPlugins, R as normalizeOptionalAgentId, Rt as DEFAULT_INPUT_PDF_MAX_PIXELS, S as emitGatewayRestart, T as scheduleGatewaySigusr1Restart, Ut as normalizeMimeList, V as normalizeRequiredName, Vt as extractFileContentFromSource, Wt as estimateBase64DecodedBytes, X as persistBrowserProxyFiles, Y as applyBrowserProxyPaths, Z as getPluginToolMeta, a as sniffMimeFromBase64, b as consumeGatewaySigusr1RestartAuthorization, bt as stopSubagentsForRequester, c as loadProviderUsageSummary, dt as getTotalPendingReplies, f as normalizeGroupActivation, g as resolveOutboundSessionRoute, h as ensureOutboundSessionEntry, i as buildDefaultToolPolicyPipelineSteps, it as getChannelActivity, jt as DEFAULT_INPUT_FILE_MAX_BYTES, k as formatDoctorNonInteractiveHint, lt as dispatchInboundMessage, n as BARE_SESSION_RESET_PROMPT, o as createAnimaTools, q as getHookType, r as applyToolPolicyPipeline, s as resolveAnnounceTargetFromKey, ut as createReplyDispatcher, v as resetDirectoryCache, w as markGatewaySigusr1RestartHandled, x as deferGatewayRestartUntilIdle, xt as formatZonedTimestamp, yt as isAbortTrigger, z as normalizeOptionalText, zt as DEFAULT_INPUT_PDF_MIN_TEXT_CHARS } from "./reply-z4aWqqxB.js";
 import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-CDJw924T.js";
 import { n as SILENT_REPLY_TOKEN, r as isSilentReplyText } from "./tokens-C-X7wDKj.js";
-import "./dock-Dmxj3en_.js";
+import "./dock-CoGVtP1y.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, s as resolveSessionTranscriptsDirForAgent } from "./paths-CxRf2rBG.js";
 import "./chunk-mxPVo000.js";
-import { f as normalizePollInput } from "./media-Bu2L8c_7.js";
+import { f as normalizePollInput } from "./media-VkOdfl_3.js";
 import { t as detectMime } from "./mime-B1ZoR53M.js";
 import "./image-ops-Dlt3T7th.js";
 import { t as ToolInputError } from "./common-D6bu0zHC.js";
-import "./server-context-Cu88BsgT.js";
-import "./chrome-DlcCwfo_.js";
+import "./server-context-BcYxU3h8.js";
+import "./chrome-LK5Lr0_d.js";
 import { a as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, c as disableTailscaleFunnel, d as enableTailscaleServe, i as resolveGatewayAuth, l as disableTailscaleServe, n as authorizeGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, p as getTailnetHostname, r as isLocalDirectRequest, s as createAuthRateLimiter, t as assertGatewayAuthConfigured, u as enableTailscaleFunnel } from "./auth-lZ26wsbN.js";
 import { t as safeEqualSecret } from "./secret-equal-Dghy3xsA.js";
 import { a as isErrno, n as formatErrorMessage } from "./errors-CHow2wtt.js";
-import { i as formatPortDiagnostics, n as inspectPortUsage, t as ensurePortAvailable } from "./ports-B3Vuo92o.js";
+import { i as formatPortDiagnostics, n as inspectPortUsage, t as ensurePortAvailable } from "./ports-BJcDDRTO.js";
 import { t as movePathToTrash } from "./trash-BJLK1vMn.js";
-import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-DXYImShH.js";
-import { $ as OPENAI_TTS_MODELS, $t as resolveUserTimezone, At as createAsyncLock, Bt as applyModelOverrideToSessionEntry, Ct as rejectNodePairing, Dt as verifyNodeToken, Et as updatePairedNodeMetadata, F as getTtsProvider, G as resolveTtsProviderOrder, Gt as isSystemEventContextChanged, H as resolveTtsAutoMode, Ht as parseVerboseOverride, It as getSkillsSnapshotVersion, J as setTtsEnabled, L as isTtsEnabled, Lt as registerSkillsChangeListener, Mt as readJsonFile, Nt as resolvePairingPaths, Ot as generatePairingToken, Pt as writeJsonAtomic, R as isTtsProviderConfigured, St as listNodePairing, T as resolveSessionDeliveryTarget, Tt as requestNodePairing, U as resolveTtsConfig, V as resolveTtsApiKey, Vt as applyVerboseOverride, W as resolveTtsPrefsPath, Wt as enqueueSystemEvent, X as setTtsProvider, Yt as loadModelCatalog, Z as textToSpeech, _ as capArrayByJsonBytes, _t as refreshRemoteBinsForConnectedNodes, b as resolveSessionTranscriptCandidates, bt as setSkillsRemoteRegistry, c as listAgentsForGateway, ct as normalizeSendPolicy, d as loadSessionEntry, dt as createInternalHookEvent, et as OPENAI_TTS_VOICES, f as pruneLegacyStoreKeys, ft as registerInternalHook, g as archiveSessionTranscripts, gt as recordRemoteNodeInfo, h as archiveFileOnDisk, ht as primeRemoteSkillsCache, jt as pruneExpiredPending, k as runWithModelFallback, kt as verifyPairingToken, l as listSessionsFromStore, lt as resolveSendPolicy, m as resolveSessionModelRef, mt as getRemoteSkillEligibility, n as setCliSessionId, ot as requestHeartbeatNow, p as resolveGatewaySessionStoreTarget, pt as triggerInternalHook, r as runCliAgent, s as canonicalizeSpawnedByForAgent, t as getCliSessionId, u as loadCombinedSessionStoreForGateway, ut as clearInternalHooks, v as readSessionMessages, vt as refreshRemoteNodeBins, w as resolveOutboundTarget, wt as renamePairedNode, x as stripEnvelopeFromMessages, xt as approveNodePairing, y as readSessionPreviewItemsFromTranscript, yt as removeRemoteNodeInfo } from "./cli-session-Ce28JlWH.js";
-import { c as resolveCronStyleNow, i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-DjUBgbLw.js";
+import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-BlUVduEF.js";
+import { $ as OPENAI_TTS_MODELS, $t as resolveUserTimezone, At as createAsyncLock, Bt as applyModelOverrideToSessionEntry, Ct as rejectNodePairing, Dt as verifyNodeToken, Et as updatePairedNodeMetadata, F as getTtsProvider, G as resolveTtsProviderOrder, Gt as isSystemEventContextChanged, H as resolveTtsAutoMode, Ht as parseVerboseOverride, It as getSkillsSnapshotVersion, J as setTtsEnabled, L as isTtsEnabled, Lt as registerSkillsChangeListener, Mt as readJsonFile, Nt as resolvePairingPaths, Ot as generatePairingToken, Pt as writeJsonAtomic, R as isTtsProviderConfigured, St as listNodePairing, T as resolveSessionDeliveryTarget, Tt as requestNodePairing, U as resolveTtsConfig, V as resolveTtsApiKey, Vt as applyVerboseOverride, W as resolveTtsPrefsPath, Wt as enqueueSystemEvent, X as setTtsProvider, Yt as loadModelCatalog, Z as textToSpeech, _ as capArrayByJsonBytes, _t as refreshRemoteBinsForConnectedNodes, b as resolveSessionTranscriptCandidates, bt as setSkillsRemoteRegistry, c as listAgentsForGateway, ct as normalizeSendPolicy, d as loadSessionEntry, dt as createInternalHookEvent, et as OPENAI_TTS_VOICES, f as pruneLegacyStoreKeys, ft as registerInternalHook, g as archiveSessionTranscripts, gt as recordRemoteNodeInfo, h as archiveFileOnDisk, ht as primeRemoteSkillsCache, jt as pruneExpiredPending, k as runWithModelFallback, kt as verifyPairingToken, l as listSessionsFromStore, lt as resolveSendPolicy, m as resolveSessionModelRef, mt as getRemoteSkillEligibility, n as setCliSessionId, ot as requestHeartbeatNow, p as resolveGatewaySessionStoreTarget, pt as triggerInternalHook, r as runCliAgent, s as canonicalizeSpawnedByForAgent, t as getCliSessionId, u as loadCombinedSessionStoreForGateway, ut as clearInternalHooks, v as readSessionMessages, vt as refreshRemoteNodeBins, w as resolveOutboundTarget, wt as renamePairedNode, x as stripEnvelopeFromMessages, xt as approveNodePairing, y as readSessionPreviewItemsFromTranscript, yt as removeRemoteNodeInfo } from "./cli-session-CguGsiXn.js";
+import { c as resolveCronStyleNow, i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-CTy9sXG6.js";
 import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, l as normalizeVerboseLevel, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels } from "./thinking-BXEswx1X.js";
-import { t as lookupContextTokens } from "./context-ChaAWbwZ.js";
-import { _ as resolveToolProfilePolicy, p as collectExplicitAllowlist } from "./sandbox-C6QwCGAa.js";
-import "./routes-C5ylAnNV.js";
+import { t as lookupContextTokens } from "./context-DZCXqjby.js";
+import { _ as resolveToolProfilePolicy, p as collectExplicitAllowlist } from "./sandbox-BbYdqrqj.js";
+import "./routes-Ce9kvPam.js";
 import "./paths-DcVEkYX5.js";
-import "./commands-registry-sLFieXCB.js";
-import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads, x as runGlobalGatewayStopSafely, y as getGlobalHookRunner } from "./deliver-BcW8mBAi.js";
-import "./pairing-store-uUh4DCdc.js";
+import "./commands-registry-C3tfxtp5.js";
+import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads, x as runGlobalGatewayStopSafely, y as getGlobalHookRunner } from "./deliver-CV2fff0Z.js";
+import "./pairing-store-BnSNq5os.js";
 import { f as resolveExecApprovalsSocketPath, o as normalizeExecApprovals, p as saveExecApprovals, r as ensureExecApprovals, s as readExecApprovalsSnapshot, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-CdLmKX2R.js";
-import "./nodes-screen-BST4qOFR.js";
+import "./nodes-screen-Dx8tBoH3.js";
 import { a as deriveSessionTotalTokens, o as hasNonzeroUsage } from "./transcript-tools-DuyYOkUq.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-BAirWUSO.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-CvrdGRvA.js";
-import "./manager-iFc0bAWS.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-DyQSX11d.js";
+import "./manager-xfVCqZZ_.js";
 import "./sqlite-BukcjdJa.js";
 import "./redact-ClVwO7Nn.js";
 import { t as formatDocsLink } from "./links-BfjHVTB_.js";
 import { n as runCommandWithRuntime } from "./cli-utils-DtAxdCte.js";
 import { n as withProgress } from "./progress-CbZ2D53A.js";
-import { t as createBrowserRouteDispatcher } from "./dispatcher-CoqsaA3f.js";
+import { t as createBrowserRouteDispatcher } from "./dispatcher-LuAx_TUN.js";
 import { t as parseAbsoluteTimeMs } from "./parse-6-2MDhdT.js";
 import { n as resolveMessageChannelSelection } from "./channel-selection-DfGpCyh2.js";
 import "./delivery-queue-B6IHz4Ry.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-B6TsNKSH.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-B0vbnO8Z.js";
 import { i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, t as discoverAllSessions } from "./session-cost-usage-BwiTZuKl.js";
-import { r as buildHistoryContextFromEntries, t as createReplyPrefixOptions } from "./reply-prefix-MDrZpOVC.js";
+import { r as buildHistoryContextFromEntries, t as createReplyPrefixOptions } from "./reply-prefix-kysStOWi.js";
 import { t as ensureAnimaCliOnPath } from "./path-env-Bu6k0jDQ.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-5ObDWy1N.js";
 import { t as buildChannelUiCatalog } from "./catalog-BAayBt1L.js";
@@ -75,53 +75,53 @@ import "./prompt-style-DKy6qQxR.js";
 import "./note-uiuPxhyX.js";
 import { t as WizardCancelledError } from "./prompts-_dDWkCAz.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-ZKNRexvX.js";
-import { t as applyPluginAutoEnable } from "./plugin-auto-enable-DVD5Kls3.js";
-import "./onboard-channels-Dlf4Shqz.js";
+import { t as applyPluginAutoEnable } from "./plugin-auto-enable-D5sOSYle.js";
+import "./onboard-channels-BZmKZOw7.js";
 import "./npm-registry-spec-za3itb5Y.js";
 import "./skill-scanner-CkaVLABv.js";
 import "./installs-D-cPGdCw.js";
 import { t as buildChannelAccountSnapshot } from "./status-CMnlcBVc.js";
 import "./channels-status-issues-DBc1pU_R.js";
-import "./register.subclis-k2sMszH8.js";
-import "./command-registry-ClvgG8A4.js";
+import "./register.subclis-CF3H5HUB.js";
+import "./command-registry-DJezCovh.js";
 import "./program-context-Bvn8046-.js";
-import "./completion-cli-OneShplj.js";
-import "./daemon-runtime-cglglYsH.js";
-import { C as resolveAssistantAvatarUrl, S as normalizeControlUiBasePath, b as CONTROL_UI_AVATAR_PREFIX, c as handleReset, x as buildControlUiAvatarUrl } from "./onboard-helpers-CwcaOee8.js";
+import "./completion-cli-BWQ_7enL.js";
+import "./daemon-runtime-C0hF11tz.js";
+import { C as resolveAssistantAvatarUrl, S as normalizeControlUiBasePath, b as CONTROL_UI_AVATAR_PREFIX, c as handleReset, x as buildControlUiAvatarUrl } from "./onboard-helpers-DP7_Nx2H.js";
 import "./systemd-BSrHDyeU.js";
 import "./service-BNVpYcQe.js";
-import "./lifecycle-core-BZo7U2jW.js";
+import "./lifecycle-core-DPinD7NS.js";
 import { t as parsePort$1 } from "./parse-port-DrfvwwiL.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-CKOoYhs-.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-CkxxKtei.js";
 import "./diagnostics-DlIw6fqD.js";
-import "./service-audit-DP4USmzf.js";
+import "./service-audit-BkDkj1v1.js";
 import "./table-DoiRPsn0.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-NsEUNYwz.js";
-import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-BcqU-KU2.js";
-import { c as probeGateway, o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-DXdRifi2.js";
-import { h as discoverGatewayBeacons, r as installSkill } from "./ipv4-CH0OhdjF.js";
-import { i as pickGatewaySelfPresence, r as getStatusSummary } from "./status-CrKjEsYI.js";
-import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-B7ybadPd.js";
-import { n as createDefaultDeps, r as createOutboundSendDeps$1, t as createOutboundSendDeps } from "./outbound-send-deps-BccDjBEk.js";
+import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-c5pL32-X.js";
+import { c as probeGateway, o as isNodeCommandAllowed, s as resolveNodeCommandAllowlist } from "./audit-CUvL1KG9.js";
+import { h as discoverGatewayBeacons, r as installSkill } from "./ipv4-9hRK6DK8.js";
+import { i as pickGatewaySelfPresence, r as getStatusSummary } from "./status-Dm-yhVrY.js";
+import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-BgLOo0ri.js";
+import { n as createDefaultDeps, r as createOutboundSendDeps$1, t as createOutboundSendDeps } from "./outbound-send-deps-Cu7_tR1D.js";
 import { a as resolveControlUiRootOverrideSync, n as ensureControlUiAssetsBuilt, o as resolveControlUiRootSync } from "./health-format-CdP99j3Y.js";
 import { n as validateSystemRunCommandConsistency, r as getMachineDisplayName, t as formatExecCommand } from "./system-run-command-DGk7dwQP.js";
-import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-DmODY9MR.js";
-import "./auth-choice-D8eoe09e.js";
-import "./github-copilot-auth-BsXG6mVD.js";
-import "./shared-CkGP1Gie.js";
+import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-N38t7MOS.js";
+import "./auth-choice-DGxPH-1k.js";
+import "./github-copilot-auth-BXvjjCiz.js";
+import "./shared-BN9uxK4c.js";
 import { i as shouldIncludeHook, n as loadWorkspaceHookEntries, r as resolveHookConfig } from "./hooks-status-B-e96dZj.js";
-import { t as runOnboardingWizard } from "./onboarding-BKOdAnhC.js";
+import { t as runOnboardingWizard } from "./onboarding-CQDElLwK.js";
 import "./logging-DB6BQmhi.js";
-import "./tui-BfPtiXD1.js";
-import "./doctor-completion-CAtF5ON2.js";
+import "./tui-BZJbmdKL.js";
+import "./doctor-completion-CFJG9_md.js";
 import { a as setGatewayWsLogStyle, i as summarizeAgentEventForWsLog, n as logWs, r as shouldLogWs, t as formatForLog } from "./ws-log-N8R5MvGE.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-BPo_LkKI.js";
 import { a as loadAgentIdentity, c as loadAgentIdentityFromWorkspace, i as listAgentEntries, o as pruneAgentConfig, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-Dvo2ULxs.js";
-import { i as resolveAgentOutboundTarget, r as resolveAgentDeliveryPlan, t as agentCommand } from "./agent-84TJKGEv.js";
+import { i as resolveAgentOutboundTarget, r as resolveAgentDeliveryPlan, t as agentCommand } from "./agent-DvuHCWqD.js";
 import "./node-service-BFxHJsno.js";
-import "./status.update-ZVrSK04Z.js";
-import { t as runGatewayUpdate } from "./update-runner-DDFr9N7A.js";
-import { n as forceFreePortAndWait } from "./ports-Co1kd5qX.js";
+import "./status.update-C-AO6o6i.js";
+import { t as runGatewayUpdate } from "./update-runner-BognabpZ.js";
+import { n as forceFreePortAndWait } from "./ports-DCPzF_E4.js";
 import { spawn, spawnSync } from "node:child_process";
 import os from "node:os";
 import path from "node:path";
@@ -11434,7 +11434,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-QoKjpjYR.js");
+			const { handleNodeEvent } = await import("./server-node-events-DwmJj3A5.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -14228,7 +14228,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.ANIMA_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.ANIMA_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./control-service-DXYImShH.js").then((n) => n.t);
+	const mod = override ? await import(override) : await import("./control-service-BlUVduEF.js").then((n) => n.t);
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -19222,7 +19222,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-B6IHz4Ry.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-BcW8mBAi.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-CV2fff0Z.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),
@@ -19619,7 +19619,7 @@ async function runGatewayLoop(params) {
 						params.runtime.exit(0);
 					} else {
 						if (respawn.mode === "failed") gatewayLog$1.warn(`full process restart failed (${respawn.detail ?? "unknown error"}); falling back to in-process restart`);
-						else gatewayLog$1.info("restart mode: in-process restart (OPENCLAW_NO_RESPAWN)");
+						else gatewayLog$1.info("restart mode: in-process restart (ANIMA_NO_RESPAWN)");
 						shuttingDown = false;
 						restartResolver?.();
 					}
@@ -19786,7 +19786,7 @@ async function runGatewayCommand$1(opts) {
 	if (resolvedAuthMode === "token" && !hasToken && !resolvedAuth.allowTailscale) {
 		defaultRuntime.error([
 			"Gateway auth is set to token, but no token is configured.",
-			"Set gateway.auth.token (or OPENCLAW_GATEWAY_TOKEN), or pass --token.",
+			"Set gateway.auth.token (or ANIMA_GATEWAY_TOKEN), or pass --token.",
 			...authHints
 		].filter(Boolean).join("\n"));
 		defaultRuntime.exit(1);
@@ -19795,7 +19795,7 @@ async function runGatewayCommand$1(opts) {
 	if (resolvedAuthMode === "password" && !hasPassword) {
 		defaultRuntime.error([
 			"Gateway auth is set to password, but no password is configured.",
-			"Set gateway.auth.password (or OPENCLAW_GATEWAY_PASSWORD), or pass --password.",
+			"Set gateway.auth.password (or ANIMA_GATEWAY_PASSWORD), or pass --password.",
 			...authHints
 		].filter(Boolean).join("\n"));
 		defaultRuntime.exit(1);
@@ -19804,7 +19804,7 @@ async function runGatewayCommand$1(opts) {
 	if (bind !== "loopback" && !hasSharedSecret && resolvedAuthMode !== "trusted-proxy") {
 		defaultRuntime.error([
 			`Refusing to bind gateway to ${bind} without auth.`,
-			"Set gateway.auth.token/password (or OPENCLAW_GATEWAY_TOKEN/OPENCLAW_GATEWAY_PASSWORD) or pass --token/--password.",
+			"Set gateway.auth.token/password (or ANIMA_GATEWAY_TOKEN/ANIMA_GATEWAY_PASSWORD) or pass --token/--password.",
 			...authHints
 		].filter(Boolean).join("\n"));
 		defaultRuntime.exit(1);
@@ -19843,7 +19843,7 @@ async function runGatewayCommand$1(opts) {
 	}
 }
 function addGatewayRunCommand(cmd) {
-	return cmd.option("--port <port>", "Port for the gateway WebSocket").option("--bind <mode>", "Bind mode (\"loopback\"|\"lan\"|\"tailnet\"|\"auto\"|\"custom\"). Defaults to config gateway.bind (or loopback).").option("--token <token>", "Shared token required in connect.params.auth.token (default: OPENCLAW_GATEWAY_TOKEN env if set)").option("--auth <mode>", "Gateway auth mode (\"token\"|\"password\")").option("--password <password>", "Password for auth mode=password").option("--tailscale <mode>", "Tailscale exposure mode (\"off\"|\"serve\"|\"funnel\")").option("--tailscale-reset-on-exit", "Reset Tailscale serve/funnel configuration on shutdown", false).option("--allow-unconfigured", "Allow gateway start without gateway.mode=local in config", false).option("--dev", "Create a dev config + workspace if missing (no BOOTSTRAP.md)", false).option("--reset", "Reset dev config + credentials + sessions + workspace (requires --dev)", false).option("--force", "Kill any existing listener on the target port before starting", false).option("--verbose", "Verbose logging to stdout/stderr", false).option("--claude-cli-logs", "Only show claude-cli logs in the console (includes stdout/stderr)", false).option("--ws-log <style>", "WebSocket log style (\"auto\"|\"full\"|\"compact\")", "auto").option("--compact", "Alias for \"--ws-log compact\"", false).option("--raw-stream", "Log raw model stream events to jsonl", false).option("--raw-stream-path <path>", "Raw stream jsonl path").action(async (opts) => {
+	return cmd.option("--port <port>", "Port for the gateway WebSocket").option("--bind <mode>", "Bind mode (\"loopback\"|\"lan\"|\"tailnet\"|\"auto\"|\"custom\"). Defaults to config gateway.bind (or loopback).").option("--token <token>", "Shared token required in connect.params.auth.token (default: ANIMA_GATEWAY_TOKEN env if set)").option("--auth <mode>", "Gateway auth mode (\"token\"|\"password\")").option("--password <password>", "Password for auth mode=password").option("--tailscale <mode>", "Tailscale exposure mode (\"off\"|\"serve\"|\"funnel\")").option("--tailscale-reset-on-exit", "Reset Tailscale serve/funnel configuration on shutdown", false).option("--allow-unconfigured", "Allow gateway start without gateway.mode=local in config", false).option("--dev", "Create a dev config + workspace if missing (no BOOTSTRAP.md)", false).option("--reset", "Reset dev config + credentials + sessions + workspace (requires --dev)", false).option("--force", "Kill any existing listener on the target port before starting", false).option("--verbose", "Verbose logging to stdout/stderr", false).option("--claude-cli-logs", "Only show claude-cli logs in the console (includes stdout/stderr)", false).option("--ws-log <style>", "WebSocket log style (\"auto\"|\"full\"|\"compact\")", "auto").option("--compact", "Alias for \"--ws-log compact\"", false).option("--raw-stream", "Log raw model stream events to jsonl", false).option("--raw-stream-path <path>", "Raw stream jsonl path").action(async (opts) => {
 		await runGatewayCommand$1(opts);
 	});
 }