@poolzin/pool-bot 1.28.0 → 2026.1.26

package/dist/telegram/send.js

@@ -2,7 +2,6 @@ import { Bot, HttpError, InputFile } from "grammy";
 import { loadConfig } from "../config/config.js";
 import { logVerbose } from "../globals.js";
 import { recordChannelActivity } from "../infra/channel-activity.js";
-import { withTelegramApiErrorLogging } from "./api-logging.js";
 import { formatErrorMessage, formatUncaughtError } from "../infra/errors.js";
 import { isDiagnosticFlagEnabled } from "../infra/diagnostic-flags.js";
 import { createTelegramRetryRunner } from "../infra/retry-policy.js";
@@ -16,7 +15,6 @@ import { resolveTelegramFetch } from "./fetch.js";
 import { makeProxyFetch } from "./proxy.js";
 import { renderTelegramHtmlText } from "./format.js";
 import { resolveMarkdownTableMode } from "../config/markdown-tables.js";
-import { isRecoverableTelegramNetworkError } from "./network-errors.js";
 import { splitTelegramCaption } from "./caption.js";
 import { recordSentMessage } from "./sent-message-cache.js";
 import { parseTelegramTarget, stripTelegramInternalPrefixes } from "./targets.js";
@@ -39,9 +37,7 @@ function createTelegramHttpLogger(cfg) {
 function resolveTelegramClientOptions(account) {
     const proxyUrl = account.config.proxy?.trim();
     const proxyFetch = proxyUrl ? makeProxyFetch(proxyUrl) : undefined;
-    const fetchImpl = resolveTelegramFetch(proxyFetch, {
-        network: account.config.network,
-    });
+    const fetchImpl = resolveTelegramFetch(proxyFetch);
     const timeoutSeconds = typeof account.config.timeoutSeconds === "number" &&
         Number.isFinite(account.config.timeoutSeconds)
         ? Math.max(1, Math.floor(account.config.timeoutSeconds))
@@ -144,13 +140,9 @@ export async function sendMessageTelegram(to, text, opts = {}) {
         retry: opts.retry,
         configRetry: account.config.retry,
         verbose: opts.verbose,
-        shouldRetry: (err) => isRecoverableTelegramNetworkError(err, { context: "send" }),
     });
     const logHttpError = createTelegramHttpLogger(cfg);
-    const requestWithDiag = (fn, label) => withTelegramApiErrorLogging({
-        operation: label ?? "request",
-        fn: () => request(fn, label),
-    }).catch((err) => {
+    const requestWithDiag = (fn, label) => request(fn, label).catch((err) => {
         logHttpError(label ?? "request", err);
         throw err;
     });
@@ -183,7 +175,6 @@ export async function sendMessageTelegram(to, text, opts = {}) {
         const sendParams = {
             parse_mode: "HTML",
             ...baseParams,
-            ...(opts.silent === true ? { disable_notification: true } : {}),
         };
         const res = await requestWithDiag(() => api.sendMessage(chatId, htmlText, sendParams), "message").catch(async (err) => {
             // Telegram rejects malformed HTML (e.g., unsupported tags or entities).
@@ -229,7 +220,6 @@ export async function sendMessageTelegram(to, text, opts = {}) {
             caption: htmlCaption,
             ...(htmlCaption ? { parse_mode: "HTML" } : {}),
             ...baseMediaParams,
-            ...(opts.silent === true ? { disable_notification: true } : {}),
         };
         let result;
         if (isGif) {
@@ -334,13 +324,9 @@ export async function reactMessageTelegram(chatIdInput, messageIdInput, emoji, o
         retry: opts.retry,
         configRetry: account.config.retry,
         verbose: opts.verbose,
-        shouldRetry: (err) => isRecoverableTelegramNetworkError(err, { context: "send" }),
     });
     const logHttpError = createTelegramHttpLogger(cfg);
-    const requestWithDiag = (fn, label) => withTelegramApiErrorLogging({
-        operation: label ?? "request",
-        fn: () => request(fn, label),
-    }).catch((err) => {
+    const requestWithDiag = (fn, label) => request(fn, label).catch((err) => {
         logHttpError(label ?? "request", err);
         throw err;
     });
@@ -372,13 +358,9 @@ export async function deleteMessageTelegram(chatIdInput, messageIdInput, opts =
         retry: opts.retry,
         configRetry: account.config.retry,
         verbose: opts.verbose,
-        shouldRetry: (err) => isRecoverableTelegramNetworkError(err, { context: "send" }),
     });
     const logHttpError = createTelegramHttpLogger(cfg);
-    const requestWithDiag = (fn, label) => withTelegramApiErrorLogging({
-        operation: label ?? "request",
-        fn: () => request(fn, label),
-    }).catch((err) => {
+    const requestWithDiag = (fn, label) => request(fn, label).catch((err) => {
         logHttpError(label ?? "request", err);
         throw err;
     });
@@ -386,70 +368,6 @@ export async function deleteMessageTelegram(chatIdInput, messageIdInput, opts =
     logVerbose(`[telegram] Deleted message ${messageId} from chat ${chatId}`);
     return { ok: true };
 }
-export async function editMessageTelegram(chatIdInput, messageIdInput, text, opts = {}) {
-    const cfg = opts.cfg ?? loadConfig();
-    const account = resolveTelegramAccount({
-        cfg,
-        accountId: opts.accountId,
-    });
-    const token = resolveToken(opts.token, account);
-    const chatId = normalizeChatId(String(chatIdInput));
-    const messageId = normalizeMessageId(messageIdInput);
-    const client = resolveTelegramClientOptions(account);
-    const api = opts.api ?? new Bot(token, client ? { client } : undefined).api;
-    const request = createTelegramRetryRunner({
-        retry: opts.retry,
-        configRetry: account.config.retry,
-        verbose: opts.verbose,
-    });
-    const logHttpError = createTelegramHttpLogger(cfg);
-    const requestWithDiag = (fn, label) => withTelegramApiErrorLogging({
-        operation: label ?? "request",
-        fn: () => request(fn, label),
-    }).catch((err) => {
-        logHttpError(label ?? "request", err);
-        throw err;
-    });
-    const textMode = opts.textMode ?? "markdown";
-    const tableMode = resolveMarkdownTableMode({
-        cfg,
-        channel: "telegram",
-        accountId: account.accountId,
-    });
-    const htmlText = renderTelegramHtmlText(text, { textMode, tableMode });
-    // Reply markup semantics:
-    // - buttons === undefined → don't send reply_markup (keep existing)
-    // - buttons is [] (or filters to empty) → send { inline_keyboard: [] } (remove)
-    // - otherwise → send built inline keyboard
-    const shouldTouchButtons = opts.buttons !== undefined;
-    const builtKeyboard = shouldTouchButtons ? buildInlineKeyboard(opts.buttons) : undefined;
-    const replyMarkup = shouldTouchButtons ? (builtKeyboard ?? { inline_keyboard: [] }) : undefined;
-    const editParams = {
-        parse_mode: "HTML",
-    };
-    if (replyMarkup !== undefined) {
-        editParams.reply_markup = replyMarkup;
-    }
-    await requestWithDiag(() => api.editMessageText(chatId, messageId, htmlText, editParams), "editMessage").catch(async (err) => {
-        // Telegram rejects malformed HTML. Fall back to plain text.
-        const errText = formatErrorMessage(err);
-        if (PARSE_ERR_RE.test(errText)) {
-            if (opts.verbose) {
-                console.warn(`telegram HTML parse failed, retrying as plain text: ${errText}`);
-            }
-            const plainParams = {};
-            if (replyMarkup !== undefined) {
-                plainParams.reply_markup = replyMarkup;
-            }
-            return await requestWithDiag(() => Object.keys(plainParams).length > 0
-                ? api.editMessageText(chatId, messageId, text, plainParams)
-                : api.editMessageText(chatId, messageId, text), "editMessage-plain");
-        }
-        throw err;
-    });
-    logVerbose(`[telegram] Edited message ${messageId} in chat ${chatId}`);
-    return { ok: true, messageId: String(messageId), chatId };
-}
 function inferFilename(kind) {
     switch (kind) {
         case "image":
@@ -462,65 +380,3 @@ function inferFilename(kind) {
             return "file.bin";
     }
 }
-/**
- * Send a sticker to a Telegram chat by file_id.
- * @param to - Chat ID or username (e.g., "123456789" or "@username")
- * @param fileId - Telegram file_id of the sticker to send
- * @param opts - Optional configuration
- */
-export async function sendStickerTelegram(to, fileId, opts = {}) {
-    if (!fileId?.trim()) {
-        throw new Error("Telegram sticker file_id is required");
-    }
-    const cfg = loadConfig();
-    const account = resolveTelegramAccount({
-        cfg,
-        accountId: opts.accountId,
-    });
-    const token = resolveToken(opts.token, account);
-    const target = parseTelegramTarget(to);
-    const chatId = normalizeChatId(target.chatId);
-    const client = resolveTelegramClientOptions(account);
-    const api = opts.api ?? new Bot(token, client ? { client } : undefined).api;
-    const messageThreadId = opts.messageThreadId != null ? opts.messageThreadId : target.messageThreadId;
-    const threadIdParams = buildTelegramThreadParams(messageThreadId);
-    const threadParams = threadIdParams ? { ...threadIdParams } : {};
-    if (opts.replyToMessageId != null) {
-        threadParams.reply_to_message_id = Math.trunc(opts.replyToMessageId);
-    }
-    const hasThreadParams = Object.keys(threadParams).length > 0;
-    const request = createTelegramRetryRunner({
-        retry: opts.retry,
-        configRetry: account.config.retry,
-        verbose: opts.verbose,
-    });
-    const logHttpError = createTelegramHttpLogger(cfg);
-    const requestWithDiag = (fn, label) => request(fn, label).catch((err) => {
-        logHttpError(label ?? "request", err);
-        throw err;
-    });
-    const wrapChatNotFound = (err) => {
-        if (!/400: Bad Request: chat not found/i.test(formatErrorMessage(err)))
-            return err;
-        return new Error([
-            `Telegram send failed: chat not found (chat_id=${chatId}).`,
-            "Likely: bot not started in DM, bot removed from group/channel, group migrated (new -100… id), or wrong bot token.",
-            `Input was: ${JSON.stringify(to)}.`,
-        ].join(" "));
-    };
-    const stickerParams = hasThreadParams ? threadParams : undefined;
-    const result = await requestWithDiag(() => api.sendSticker(chatId, fileId.trim(), stickerParams), "sticker").catch((err) => {
-        throw wrapChatNotFound(err);
-    });
-    const messageId = String(result?.message_id ?? "unknown");
-    const resolvedChatId = String(result?.chat?.id ?? chatId);
-    if (result?.message_id) {
-        recordSentMessage(chatId, result.message_id);
-    }
-    recordChannelActivity({
-        channel: "telegram",
-        accountId: account.accountId,
-        direction: "outbound",
-    });
-    return { messageId, chatId: resolvedChatId };
-}

package/dist/telegram/webhook-set.js

@@ -1,28 +1,21 @@
 import { Bot } from "grammy";
 import { resolveTelegramFetch } from "./fetch.js";
-import { withTelegramApiErrorLogging } from "./api-logging.js";
 export async function setTelegramWebhook(opts) {
-    const fetchImpl = resolveTelegramFetch(undefined, { network: opts.network });
+    const fetchImpl = resolveTelegramFetch();
     const client = fetchImpl
         ? { fetch: fetchImpl }
         : undefined;
     const bot = new Bot(opts.token, client ? { client } : undefined);
-    await withTelegramApiErrorLogging({
-        operation: "setWebhook",
-        fn: () => bot.api.setWebhook(opts.url, {
-            secret_token: opts.secret,
-            drop_pending_updates: opts.dropPendingUpdates ?? false,
-        }),
+    await bot.api.setWebhook(opts.url, {
+        secret_token: opts.secret,
+        drop_pending_updates: opts.dropPendingUpdates ?? false,
     });
 }
 export async function deleteTelegramWebhook(opts) {
-    const fetchImpl = resolveTelegramFetch(undefined, { network: opts.network });
+    const fetchImpl = resolveTelegramFetch();
     const client = fetchImpl
         ? { fetch: fetchImpl }
         : undefined;
     const bot = new Bot(opts.token, client ? { client } : undefined);
-    await withTelegramApiErrorLogging({
-        operation: "deleteWebhook",
-        fn: () => bot.api.deleteWebhook(),
-    });
+    await bot.api.deleteWebhook();
 }

package/dist/telegram/webhook.js

@@ -6,7 +6,6 @@ import { defaultRuntime } from "../runtime.js";
 import { logWebhookError, logWebhookProcessed, logWebhookReceived, startDiagnosticHeartbeat, stopDiagnosticHeartbeat, } from "../logging/diagnostic.js";
 import { resolveTelegramAllowedUpdates } from "./allowed-updates.js";
 import { createTelegramBot } from "./bot.js";
-import { withTelegramApiErrorLogging } from "./api-logging.js";
 export async function startTelegramWebhook(opts) {
     const path = opts.path ?? "/telegram-webhook";
     const healthPath = opts.healthPath ?? "/healthz";
@@ -71,13 +70,9 @@ export async function startTelegramWebhook(opts) {
         }
     });
     const publicUrl = opts.publicUrl ?? `http://${host === "0.0.0.0" ? "localhost" : host}:${port}${path}`;
-    await withTelegramApiErrorLogging({
-        operation: "setWebhook",
-        runtime,
-        fn: () => bot.api.setWebhook(publicUrl, {
-            secret_token: opts.secret,
-            allowed_updates: resolveTelegramAllowedUpdates(),
-        }),
+    await bot.api.setWebhook(publicUrl, {
+        secret_token: opts.secret,
+        allowed_updates: resolveTelegramAllowedUpdates(),
     });
     await new Promise((resolve) => server.listen(port, host, resolve));
     runtime.log?.(`webhook listening on ${publicUrl}`);

package/dist/terminal/links.js

@@ -1,5 +1,5 @@
 import { formatTerminalLink } from "../utils.js";
-export const DOCS_ROOT = "https://docs.molt.bot";
+export const DOCS_ROOT = "https://docs.clawd.bot";
 export function formatDocsLink(path, label, opts) {
     const trimmed = path.trim();
     const url = trimmed.startsWith("http")

package/dist/tts/tts.js

@@ -13,7 +13,7 @@ import { resolveModel } from "../agents/pi-embedded-runner/model.js";
 const DEFAULT_TIMEOUT_MS = 30_000;
 const DEFAULT_TTS_MAX_LENGTH = 1500;
 const DEFAULT_TTS_SUMMARIZE = true;
-const DEFAULT_MAX_TEXT_LENGTH = 4096;
+const DEFAULT_MAX_TEXT_LENGTH = 4000;
 const TEMP_FILE_CLEANUP_DELAY_MS = 5 * 60 * 1000; // 5 minutes
 const DEFAULT_ELEVENLABS_BASE_URL = "https://api.elevenlabs.io";
 const DEFAULT_ELEVENLABS_VOICE_ID = "pMsXgVXv3BLzUgSXRplE";
@@ -1085,33 +1085,29 @@ export async function maybeApplyTtsToPayload(params) {
     let wasSummarized = false;
     if (textForAudio.length > maxLength) {
         if (!isSummarizationEnabled(prefsPath)) {
-            // Truncate text when summarization is disabled
-            logVerbose(`TTS: truncating long text (${textForAudio.length} > ${maxLength}), summarization disabled.`);
-            textForAudio = `${textForAudio.slice(0, maxLength - 3)}...`;
+            logVerbose(`TTS: skipping long text (${textForAudio.length} > ${maxLength}), summarization disabled.`);
+            return nextPayload;
         }
-        else {
-            // Summarize text when enabled
-            try {
-                const summary = await summarizeText({
-                    text: textForAudio,
-                    targetLength: maxLength,
-                    cfg: params.cfg,
-                    config,
-                    timeoutMs: config.timeoutMs,
-                });
-                textForAudio = summary.summary;
-                wasSummarized = true;
-                if (textForAudio.length > config.maxTextLength) {
-                    logVerbose(`TTS: summary exceeded hard limit (${textForAudio.length} > ${config.maxTextLength}); truncating.`);
-                    textForAudio = `${textForAudio.slice(0, config.maxTextLength - 3)}...`;
-                }
-            }
-            catch (err) {
-                const error = err;
-                logVerbose(`TTS: summarization failed, truncating instead: ${error.message}`);
-                textForAudio = `${textForAudio.slice(0, maxLength - 3)}...`;
+        try {
+            const summary = await summarizeText({
+                text: textForAudio,
+                targetLength: maxLength,
+                cfg: params.cfg,
+                config,
+                timeoutMs: config.timeoutMs,
+            });
+            textForAudio = summary.summary;
+            wasSummarized = true;
+            if (textForAudio.length > config.maxTextLength) {
+                logVerbose(`TTS: summary exceeded hard limit (${textForAudio.length} > ${config.maxTextLength}); truncating.`);
+                textForAudio = `${textForAudio.slice(0, config.maxTextLength - 3)}...`;
             }
         }
+        catch (err) {
+            const error = err;
+            logVerbose(`TTS: summarization failed: ${error.message}`);
+            return nextPayload;
+        }
     }
     const ttsStart = Date.now();
     const result = await textToSpeech({
@@ -1132,12 +1128,11 @@ export async function maybeApplyTtsToPayload(params) {
         };
         const channelId = resolveChannelId(params.channel);
         const shouldVoice = channelId === "telegram" && result.voiceCompatible === true;
-        const finalPayload = {
+        return {
             ...nextPayload,
             mediaUrl: result.audioPath,
             audioAsVoice: shouldVoice || params.payload.audioAsVoice,
         };
-        return finalPayload;
     }
     lastTtsAttempt = {
         timestamp: Date.now(),

package/dist/tui/components/filterable-select-list.js

@@ -42,7 +42,7 @@ export class FilterableSelectList {
         const inputText = inputLines[0] ?? "";
         lines.push(filterLabel + inputText);
         // Separator
-        lines.push(chalk.dim("─".repeat(Math.max(0, width))));
+        lines.push(chalk.dim("─".repeat(width)));
         // Select list
         const listLines = this.selectList.render(width);
         lines.push(...listLines);

package/dist/tui/components/searchable-select-list.js

@@ -159,8 +159,7 @@ export class SearchableSelectList {
             const maxValueWidth = Math.min(30, width - prefixWidth - 4);
             const truncatedValue = truncateToWidth(displayValue, maxValueWidth, "");
             const valueText = this.highlightMatch(truncatedValue, query);
-            const spacingWidth = Math.max(1, 32 - visibleWidth(valueText));
-            const spacing = " ".repeat(spacingWidth);
+            const spacing = " ".repeat(Math.max(1, 32 - visibleWidth(valueText)));
             const descriptionStart = prefixWidth + visibleWidth(valueText) + spacing.length;
             const remainingWidth = width - descriptionStart - 2;
             if (remainingWidth > 10) {

package/dist/tui/gateway-chat.js

@@ -25,7 +25,7 @@ export class GatewayChatClient {
             token: resolved.token,
             password: resolved.password,
             clientName: GATEWAY_CLIENT_NAMES.GATEWAY_CLIENT,
-            clientDisplayName: "moltbot-tui",
+            clientDisplayName: "clawdbot-tui",
             clientVersion: VERSION,
             platform: process.platform,
             mode: GATEWAY_CLIENT_MODES.UI,

package/dist/tui/tui.js

@@ -241,7 +241,7 @@ export async function runTui(opts) {
     const updateHeader = () => {
         const sessionLabel = formatSessionKey(currentSessionKey);
         const agentLabel = formatAgentLabel(currentAgentId);
-        header.setText(theme.header(`moltbot tui - ${client.connection.url} - agent ${agentLabel} - session ${sessionLabel}`));
+        header.setText(theme.header(`clawdbot tui - ${client.connection.url} - agent ${agentLabel} - session ${sessionLabel}`));
     };
     const busyStates = new Set(["sending", "waiting", "streaming", "running"]);
     let statusText = null;

package/dist/version.js

@@ -9,7 +9,7 @@ function readVersionFromPackageJson() {
         return null;
     }
 }
-// Single source of truth for the current moltbot version.
+// Single source of truth for the current clawdbot version.
 // - Embedded/bundled builds: injected define or env var.
 // - Dev/npm builds: package.json.
 export const VERSION = (typeof __CLAWDBOT_VERSION__ === "string" && __CLAWDBOT_VERSION__) ||

package/dist/web/active-listener.js

@@ -9,7 +9,7 @@ export function requireActiveWebListener(accountId) {
     const id = resolveWebAccountId(accountId);
     const listener = listeners.get(id) ?? null;
     if (!listener) {
-        throw new Error(`No active WhatsApp Web listener (account: ${id}). Start the gateway, then link WhatsApp with: ${formatCliCommand(`moltbot channels login --channel whatsapp --account ${id}`)}.`);
+        throw new Error(`No active WhatsApp Web listener (account: ${id}). Start the gateway, then link WhatsApp with: ${formatCliCommand(`clawdbot channels login --channel whatsapp --account ${id}`)}.`);
     }
     return { accountId: id, listener };
 }

package/dist/web/auth-store.js

@@ -162,7 +162,7 @@ export async function pickWebChannel(pref, authDir = resolveDefaultWebAuthDir())
     const choice = pref === "auto" ? "web" : pref;
     const hasWeb = await webAuthExists(authDir);
     if (!hasWeb) {
-        throw new Error(`No WhatsApp Web session found. Run \`${formatCliCommand("moltbot channels login --channel whatsapp --verbose")}\` to link.`);
+        throw new Error(`No WhatsApp Web session found. Run \`${formatCliCommand("clawdbot channels login --channel whatsapp --verbose")}\` to link.`);
     }
     return choice;
 }

package/dist/web/auto-reply/monitor/process-message.js

@@ -177,7 +177,7 @@ export async function processMessage(params) {
         normalizeE164(params.msg.from) === normalizeE164(params.msg.selfE164 ?? "");
     const responsePrefix = prefixContext.responsePrefix ??
         (configuredResponsePrefix === undefined && isSelfChat
-            ? (resolveIdentityNamePrefix(params.cfg, params.route.agentId) ?? "[moltbot]")
+            ? (resolveIdentityNamePrefix(params.cfg, params.route.agentId) ?? "[clawdbot]")
             : undefined);
     const ctxPayload = finalizeInboundContext({
         Body: combinedBody,

package/dist/web/auto-reply/monitor.js

@@ -312,7 +312,7 @@ export async function monitorWebChannel(verbose, listenerFactory = monitorWebInb
             sessionKey: connectRoute.sessionKey,
         });
         if (loggedOut) {
-            runtime.error(`WhatsApp session logged out. Run \`${formatCliCommand("moltbot channels login --channel web")}\` to relink.`);
+            runtime.error(`WhatsApp session logged out. Run \`${formatCliCommand("clawdbot channels login --channel web")}\` to relink.`);
             await closeListener();
             break;
         }

package/dist/web/login.js

@@ -47,7 +47,7 @@ export async function loginWeb(verbose, waitForConnection, runtime = defaultRunt
                 isLegacyAuthDir: account.isLegacyAuthDir,
                 runtime,
             });
-            console.error(danger(`WhatsApp reported the session is logged out. Cleared cached web session; please rerun ${formatCliCommand("moltbot channels login")} and scan the QR again.`));
+            console.error(danger(`WhatsApp reported the session is logged out. Cleared cached web session; please rerun ${formatCliCommand("clawdbot channels login")} and scan the QR again.`));
             throw new Error("Session logged out; cache cleared. Re-run login.");
         }
         const formatted = formatError(err);

package/dist/web/session.js

@@ -80,7 +80,7 @@ export async function createWaSocket(printQr, verbose, opts = {}) {
         version,
         logger,
         printQRInTerminal: false,
-        browser: ["moltbot", "cli", VERSION],
+        browser: ["clawdbot", "cli", VERSION],
         syncFullHistory: false,
         markOnlineOnConnect: false,
     });
@@ -98,7 +98,7 @@ export async function createWaSocket(printQr, verbose, opts = {}) {
             if (connection === "close") {
                 const status = getStatusCode(lastDisconnect?.error);
                 if (status === DisconnectReason.loggedOut) {
-                    console.error(danger(`WhatsApp session logged out. Run: ${formatCliCommand("moltbot channels login")}`));
+                    console.error(danger(`WhatsApp session logged out. Run: ${formatCliCommand("clawdbot channels login")}`));
                 }
             }
             if (connection === "open" && verbose) {

package/dist/wizard/onboarding.finalize.js

@@ -218,9 +218,9 @@ export async function finalizeOnboardingWizard(options) {
         }
         await prompter.note([
             "Gateway token: shared auth for the Gateway + Control UI.",
-            "Stored in: ~/.clawdbot/moltbot.json (gateway.auth.token) or CLAWDBOT_GATEWAY_TOKEN.",
-            "Web UI stores a copy in this browser's localStorage (moltbot.control.settings.v1).",
-            `Get the tokenized link anytime: ${formatCliCommand("moltbot dashboard --no-open")}`,
+            "Stored in: ~/.clawdbot/clawdbot.json (gateway.auth.token) or CLAWDBOT_GATEWAY_TOKEN.",
+            "Web UI stores a copy in this browser's localStorage (clawdbot.control.settings.v1).",
+            `Get the tokenized link anytime: ${formatCliCommand("clawdbot dashboard --no-open")}`,
         ].join("\n"), "Token");
         hatchChoice = (await prompter.select({
             message: "How do you want to hatch your bot?",
@@ -244,7 +244,7 @@ export async function finalizeOnboardingWizard(options) {
                 seededInBackground = await openUrlInBackground(authedUrl);
             }
             if (seededInBackground) {
-                await prompter.note(`Web UI seeded in the background. Open later with: ${formatCliCommand("moltbot dashboard --no-open")}`, "Web UI");
+                await prompter.note(`Web UI seeded in the background. Open later with: ${formatCliCommand("clawdbot dashboard --no-open")}`, "Web UI");
             }
         }
         else if (hatchChoice === "web") {
@@ -269,15 +269,15 @@ export async function finalizeOnboardingWizard(options) {
             await prompter.note([
                 `Dashboard link (with token): ${authedUrl}`,
                 controlUiOpened
-                    ? "Opened in your browser. Keep that tab to control Moltbot."
-                    : "Copy/paste this URL in a browser on this machine to control Moltbot.",
+                    ? "Opened in your browser. Keep that tab to control Clawdbot."
+                    : "Copy/paste this URL in a browser on this machine to control Clawdbot.",
                 controlUiOpenHint,
             ]
                 .filter(Boolean)
                 .join("\n"), "Dashboard ready");
         }
         else {
-            await prompter.note(`When you're ready: ${formatCliCommand("moltbot dashboard --no-open")}`, "Later");
+            await prompter.note(`When you're ready: ${formatCliCommand("clawdbot dashboard --no-open")}`, "Later");
         }
     }
     else if (opts.skipUi) {
@@ -311,8 +311,8 @@ export async function finalizeOnboardingWizard(options) {
         await prompter.note([
             `Dashboard link (with token): ${authedUrl}`,
             controlUiOpened
-                ? "Opened in your browser. Keep that tab to control Moltbot."
-                : "Copy/paste this URL in a browser on this machine to control Moltbot.",
+                ? "Opened in your browser. Keep that tab to control Clawdbot."
+                : "Copy/paste this URL in a browser on this machine to control Clawdbot.",
             controlUiOpenHint,
         ]
             .filter(Boolean)
@@ -333,19 +333,19 @@ export async function finalizeOnboardingWizard(options) {
         : [
             "If you want your agent to be able to search the web, you’ll need an API key.",
             "",
-            "Moltbot uses Brave Search for the `web_search` tool. Without a Brave Search API key, web search won’t work.",
+            "Clawdbot uses Brave Search for the `web_search` tool. Without a Brave Search API key, web search won’t work.",
             "",
             "Set it up interactively:",
-            `- Run: ${formatCliCommand("moltbot configure --section web")}`,
+            `- Run: ${formatCliCommand("clawdbot configure --section web")}`,
             "- Enable web_search and paste your Brave Search API key",
             "",
             "Alternative: set BRAVE_API_KEY in the Gateway environment (no config changes).",
             "Docs: https://docs.clawd.bot/tools/web",
         ].join("\n"), "Web search (optional)");
-    await prompter.note('What now: https://molt.bot/showcase ("What People Are Building").', "What now");
+    await prompter.note('What now: https://clawd.bot/showcase ("What People Are Building").', "What now");
     await prompter.outro(controlUiOpened
-        ? "Onboarding complete. Dashboard opened with your token; keep that tab to control Moltbot."
+        ? "Onboarding complete. Dashboard opened with your token; keep that tab to control Clawdbot."
         : seededInBackground
             ? "Onboarding complete. Web UI seeded in the background; open it anytime with the tokenized link above."
-            : "Onboarding complete. Use the tokenized dashboard link above to control Moltbot.");
+            : "Onboarding complete. Use the tokenized dashboard link above to control Clawdbot.");
 }

package/dist/wizard/onboarding.gateway-config.js

@@ -53,6 +53,11 @@ export async function configureGatewayForOnboarding(opts) {
         : (await prompter.select({
             message: "Gateway auth",
             options: [
+                {
+                    value: "off",
+                    label: "Off (loopback only)",
+                    hint: "Not recommended unless you fully trust local processes",
+                },
                 {
                     value: "token",
                     label: "Token",
@@ -95,7 +100,7 @@ export async function configureGatewayForOnboarding(opts) {
     }
     let tailscaleResetOnExit = flow === "quickstart" ? quickstartGateway.tailscaleResetOnExit : false;
     if (tailscaleMode !== "off" && flow !== "quickstart") {
-        await prompter.note(["Docs:", "https://docs.molt.bot/gateway/tailscale", "https://docs.molt.bot/web"].join("\n"), "Tailscale");
+        await prompter.note(["Docs:", "https://docs.clawd.bot/gateway/tailscale", "https://docs.clawd.bot/web"].join("\n"), "Tailscale");
         tailscaleResetOnExit = Boolean(await prompter.confirm({
             message: "Reset Tailscale serve/funnel on exit?",
             initialValue: false,
@@ -103,12 +108,17 @@ export async function configureGatewayForOnboarding(opts) {
     }
     // Safety + constraints:
     // - Tailscale wants bind=loopback so we never expose a non-loopback server + tailscale serve/funnel at once.
+    // - Auth off only allowed for bind=loopback.
     // - Funnel requires password auth.
     if (tailscaleMode !== "off" && bind !== "loopback") {
         await prompter.note("Tailscale requires bind=loopback. Adjusting bind to loopback.", "Note");
         bind = "loopback";
         customBindHost = undefined;
     }
+    if (authMode === "off" && bind !== "loopback") {
+        await prompter.note("Non-loopback bind requires auth. Switching to token auth.", "Note");
+        authMode = "token";
+    }
     if (tailscaleMode === "funnel" && authMode !== "password") {
         await prompter.note("Tailscale funnel requires password auth.", "Note");
         authMode = "password";