@sahu-01/openpaw 1.0.1 → 1.0.2

package/dist/index.js

@@ -9,7 +9,7 @@ var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
 };
-var __commonJS = (cb, mod) => function __require() {
+var __commonJS = (cb, mod) => function __require2() {
   return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
 };
 var __copyProps = (to, from, except, desc) => {
@@ -3234,7 +3234,7 @@ var require_typescript = __commonJS({
         walkUpParenthesizedTypesAndGetParentAndChild: () => walkUpParenthesizedTypesAndGetParentAndChild,
         whitespaceOrMapCommentRegExp: () => whitespaceOrMapCommentRegExp,
         writeCommentRange: () => writeCommentRange,
-        writeFile: () => writeFile3,
+        writeFile: () => writeFile4,
         writeFileEnsuringDirectories: () => writeFileEnsuringDirectories,
         zipWith: () => zipWith
       });
@@ -9566,7 +9566,7 @@ ${lanes.join("\n")}
             writeOutputIsTTY() {
               return process.stdout.isTTY;
             },
-            readFile: readFile4,
+            readFile: readFile5,
             writeFile: writeFile22,
             watchFile: watchFile2,
             watchDirectory,
@@ -9772,7 +9772,7 @@ ${lanes.join("\n")}
               callback
             );
           }
-          function readFile4(fileName, _encoding) {
+          function readFile5(fileName, _encoding) {
             let buffer;
             try {
               buffer = _fs.readFileSync(fileName);
@@ -21877,7 +21877,7 @@ ${lanes.join("\n")}
         sourceFilePath = isSourceFileInCommonSourceDirectory ? sourceFilePath.substring(commonSourceDirectory.length) : sourceFilePath;
         return combinePaths(newDirPath, sourceFilePath);
       }
-      function writeFile3(host, diagnostics, fileName, text, writeByteOrderMark, sourceFiles, data) {
+      function writeFile4(host, diagnostics, fileName, text, writeByteOrderMark, sourceFiles, data) {
         host.writeFile(
           fileName,
           text,
@@ -46328,7 +46328,7 @@ ${lanes.join("\n")}
         const possibleOption = getSpellingSuggestion(unknownOption, diagnostics.optionDeclarations, getOptionName);
         return possibleOption ? createDiagnosticForNodeInSourceFileOrCompilerDiagnostic(sourceFile, node, diagnostics.unknownDidYouMeanDiagnostic, unknownOptionErrorText || unknownOption, possibleOption.name) : createDiagnosticForNodeInSourceFileOrCompilerDiagnostic(sourceFile, node, diagnostics.unknownOptionDiagnostic, unknownOptionErrorText || unknownOption);
       }
-      function parseCommandLineWorker(diagnostics, commandLine, readFile4) {
+      function parseCommandLineWorker(diagnostics, commandLine, readFile5) {
         const options = {};
         let watchOptions;
         const fileNames = [];
@@ -46376,7 +46376,7 @@ ${lanes.join("\n")}
           }
         }
         function parseResponseFile(fileName) {
-          const text = tryReadFile(fileName, readFile4 || ((fileName2) => sys.readFile(fileName2)));
+          const text = tryReadFile(fileName, readFile5 || ((fileName2) => sys.readFile(fileName2)));
           if (!isString(text)) {
             errors.push(text);
             return;
@@ -46479,8 +46479,8 @@ ${lanes.join("\n")}
         unknownDidYouMeanDiagnostic: Diagnostics.Unknown_compiler_option_0_Did_you_mean_1,
         optionTypeMismatchDiagnostic: Diagnostics.Compiler_option_0_expects_an_argument
       };
-      function parseCommandLine(commandLine, readFile4) {
-        return parseCommandLineWorker(compilerOptionsDidYouMeanDiagnostics, commandLine, readFile4);
+      function parseCommandLine(commandLine, readFile5) {
+        return parseCommandLineWorker(compilerOptionsDidYouMeanDiagnostics, commandLine, readFile5);
       }
       function getOptionFromName(optionName, allowShort) {
         return getOptionDeclarationFromName(getOptionsNameMap, optionName, allowShort);
@@ -46562,8 +46562,8 @@ ${lanes.join("\n")}
           watchOptionsToExtend
         );
       }
-      function readConfigFile(fileName, readFile4) {
-        const textOrDiagnostic = tryReadFile(fileName, readFile4);
+      function readConfigFile(fileName, readFile5) {
+        const textOrDiagnostic = tryReadFile(fileName, readFile5);
         return isString(textOrDiagnostic) ? parseConfigFileTextToJson(fileName, textOrDiagnostic) : { config: {}, error: textOrDiagnostic };
       }
       function parseConfigFileTextToJson(fileName, jsonText) {
@@ -46578,14 +46578,14 @@ ${lanes.join("\n")}
           error: jsonSourceFile.parseDiagnostics.length ? jsonSourceFile.parseDiagnostics[0] : void 0
         };
       }
-      function readJsonConfigFile(fileName, readFile4) {
-        const textOrDiagnostic = tryReadFile(fileName, readFile4);
+      function readJsonConfigFile(fileName, readFile5) {
+        const textOrDiagnostic = tryReadFile(fileName, readFile5);
         return isString(textOrDiagnostic) ? parseJsonText(fileName, textOrDiagnostic) : { fileName, parseDiagnostics: [textOrDiagnostic] };
       }
-      function tryReadFile(fileName, readFile4) {
+      function tryReadFile(fileName, readFile5) {
         let text;
         try {
-          text = readFile4(fileName);
+          text = readFile5(fileName);
         } catch (e) {
           return createCompilerDiagnostic(Diagnostics.Cannot_read_file_0_Colon_1, fileName, e.message);
         }
@@ -130628,7 +130628,7 @@ ${lanes.join("\n")}
             return;
           }
           const buildInfo = host.getBuildInfo() || { version };
-          writeFile3(
+          writeFile4(
             host,
             emitterDiagnostics,
             buildInfoPath,
@@ -130840,7 +130840,7 @@ ${lanes.join("\n")}
             }
             if (sourceMapFilePath) {
               const sourceMap = sourceMapGenerator.toString();
-              writeFile3(
+              writeFile4(
                 host,
                 emitterDiagnostics,
                 sourceMapFilePath,
@@ -130855,7 +130855,7 @@ ${lanes.join("\n")}
           }
           const text = writer.getText();
           const data = { sourceMapUrlPos, diagnostics: transform2.diagnostics };
-          writeFile3(host, emitterDiagnostics, jsFilePath, text, !!compilerOptions.emitBOM, sourceFiles, data);
+          writeFile4(host, emitterDiagnostics, jsFilePath, text, !!compilerOptions.emitBOM, sourceFiles, data);
           writer.clear();
           return !data.skippedDtsWrite;
         }
@@ -136243,12 +136243,12 @@ ${lanes.join("\n")}
       function createCompilerHost(options, setParentNodes) {
         return createCompilerHostWorker(options, setParentNodes);
       }
-      function createGetSourceFile(readFile4, setParentNodes) {
+      function createGetSourceFile(readFile5, setParentNodes) {
         return (fileName, languageVersionOrOptions, onError) => {
           let text;
           try {
             mark("beforeIORead");
-            text = readFile4(fileName);
+            text = readFile5(fileName);
             mark("afterIORead");
             measure("I/O Read", "beforeIORead", "afterIORead");
           } catch (e) {
@@ -137152,7 +137152,7 @@ ${lanes.join("\n")}
           getRedirectFromOutput,
           forEachResolvedProjectReference: forEachResolvedProjectReference2
         });
-        const readFile4 = host.readFile.bind(host);
+        const readFile5 = host.readFile.bind(host);
         (_e = tracing) == null ? void 0 : _e.push(tracing.Phase.Program, "shouldProgramCreateNewSourceFiles", { hasOldProgram: !!oldProgram });
         const shouldCreateNewSourceFile = shouldProgramCreateNewSourceFiles(oldProgram, options);
         (_f = tracing) == null ? void 0 : _f.pop();
@@ -137378,7 +137378,7 @@ ${lanes.join("\n")}
           shouldTransformImportCall,
           emitBuildInfo,
           fileExists: fileExists2,
-          readFile: readFile4,
+          readFile: readFile5,
           directoryExists,
           getSymlinkCache,
           realpath: (_o = host.realpath) == null ? void 0 : _o.bind(host),
@@ -198737,7 +198737,7 @@ ${options.prefix}` : "\n" : options.prefix
         walkUpParenthesizedTypesAndGetParentAndChild: () => walkUpParenthesizedTypesAndGetParentAndChild,
         whitespaceOrMapCommentRegExp: () => whitespaceOrMapCommentRegExp,
         writeCommentRange: () => writeCommentRange,
-        writeFile: () => writeFile3,
+        writeFile: () => writeFile4,
         writeFileEnsuringDirectories: () => writeFileEnsuringDirectories,
         zipWith: () => zipWith
       });
@@ -212795,19 +212795,19 @@ var require_range = __commonJS({
     var replaceCaret = (comp, options) => {
       debug("caret", comp, options);
       const r = options.loose ? re[t.CARETLOOSE] : re[t.CARET];
-      const z5 = options.includePrerelease ? "-0" : "";
+      const z6 = options.includePrerelease ? "-0" : "";
       return comp.replace(r, (_, M, m, p, pr) => {
         debug("caret", comp, _, M, m, p, pr);
         let ret;
         if (isX(M)) {
           ret = "";
         } else if (isX(m)) {
-          ret = `>=${M}.0.0${z5} <${+M + 1}.0.0-0`;
+          ret = `>=${M}.0.0${z6} <${+M + 1}.0.0-0`;
         } else if (isX(p)) {
           if (M === "0") {
-            ret = `>=${M}.${m}.0${z5} <${M}.${+m + 1}.0-0`;
+            ret = `>=${M}.${m}.0${z6} <${M}.${+m + 1}.0-0`;
           } else {
-            ret = `>=${M}.${m}.0${z5} <${+M + 1}.0.0-0`;
+            ret = `>=${M}.${m}.0${z6} <${+M + 1}.0.0-0`;
           }
         } else if (pr) {
           debug("replaceCaret pr", pr);
@@ -212824,9 +212824,9 @@ var require_range = __commonJS({
           debug("no pr");
           if (M === "0") {
             if (m === "0") {
-              ret = `>=${M}.${m}.${p}${z5} <${M}.${m}.${+p + 1}-0`;
+              ret = `>=${M}.${m}.${p}${z6} <${M}.${m}.${+p + 1}-0`;
             } else {
-              ret = `>=${M}.${m}.${p}${z5} <${M}.${+m + 1}.0-0`;
+              ret = `>=${M}.${m}.${p}${z6} <${M}.${+m + 1}.0-0`;
             }
           } else {
             ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
@@ -225441,7 +225441,7 @@ var require_async2 = __commonJS({
         readdirWithFileTypes(directory, settings, callback);
         return;
       }
-      readdir3(directory, settings, callback);
+      readdir4(directory, settings, callback);
     }
     exports2.read = read;
     function readdirWithFileTypes(directory, settings, callback) {
@@ -225490,7 +225490,7 @@ var require_async2 = __commonJS({
         });
       };
     }
-    function readdir3(directory, settings, callback) {
+    function readdir4(directory, settings, callback) {
       settings.fs.readdir(directory, (readdirError, names) => {
         if (readdirError !== null) {
           callFailureCallback(callback, readdirError);
@@ -225525,7 +225525,7 @@ var require_async2 = __commonJS({
         });
       });
     }
-    exports2.readdir = readdir3;
+    exports2.readdir = readdir4;
     function callFailureCallback(callback, error) {
       callback(error);
     }
@@ -225549,7 +225549,7 @@ var require_sync2 = __commonJS({
       if (!settings.stats && constants_1.IS_SUPPORT_READDIR_WITH_FILE_TYPES) {
         return readdirWithFileTypes(directory, settings);
       }
-      return readdir3(directory, settings);
+      return readdir4(directory, settings);
     }
     exports2.read = read;
     function readdirWithFileTypes(directory, settings) {
@@ -225574,7 +225574,7 @@ var require_sync2 = __commonJS({
       });
     }
     exports2.readdirWithFileTypes = readdirWithFileTypes;
-    function readdir3(directory, settings) {
+    function readdir4(directory, settings) {
       const names = settings.fs.readdirSync(directory);
       return names.map((name) => {
         const entryPath = common.joinPathSegments(directory, name, settings.pathSegmentSeparator);
@@ -225590,7 +225590,7 @@ var require_sync2 = __commonJS({
         return entry;
       });
     }
-    exports2.readdir = readdir3;
+    exports2.readdir = readdir4;
   }
 });
 
@@ -228553,11 +228553,11 @@ var require_brace_expansion = __commonJS({
               if (pad) {
                 var need = width - c.length;
                 if (need > 0) {
-                  var z5 = new Array(need + 1).join("0");
+                  var z6 = new Array(need + 1).join("0");
                   if (i < 0)
-                    c = "-" + z5 + c.slice(1);
+                    c = "-" + z6 + c.slice(1);
                   else
-                    c = z5 + c;
+                    c = z6 + c;
                 }
               }
             }
@@ -230700,8 +230700,8 @@ function scanSource(source, fileName) {
   return findings;
 }
 async function scanFile(filePath) {
-  const { readFile: readFile4 } = await import("fs/promises");
-  const source = await readFile4(filePath, "utf8");
+  const { readFile: readFile5 } = await import("fs/promises");
+  const source = await readFile5(filePath, "utf8");
   return scanSource(source, filePath);
 }
 function scanCredentialsSource(source, fileName) {
@@ -230729,20 +230729,20 @@ function scanCredentialsSource(source, fileName) {
   return findings;
 }
 async function scanCredentials(filePath) {
-  const { readFile: readFile4 } = await import("fs/promises");
-  const source = await readFile4(filePath, "utf8");
+  const { readFile: readFile5 } = await import("fs/promises");
+  const source = await readFile5(filePath, "utf8");
   return scanCredentialsSource(source, filePath);
 }
 async function scanDirectory(dirPath) {
-  const { readdir: readdir3, stat: stat3 } = await import("fs/promises");
-  const { join: join4 } = await import("path");
+  const { readdir: readdir4, stat: stat3 } = await import("fs/promises");
+  const { join: join5 } = await import("path");
   const findings = [];
   const credentialFindings = [];
   let scannedFiles = 0;
   async function scanRecursive(currentPath) {
-    const entries = await readdir3(currentPath);
+    const entries = await readdir4(currentPath);
     for (const entry of entries) {
-      const fullPath = join4(currentPath, entry);
+      const fullPath = join5(currentPath, entry);
       const stats = await stat3(fullPath);
       if (stats.isDirectory()) {
         if (!["node_modules", "dist", "build", ".git", ".turbo"].includes(entry)) {
@@ -230786,22 +230786,22 @@ var OpenClawAuthProfilesSchema = import_zod4.z.object({
 });
 var WORKSPACE_FILES = ["AGENTS.md", "SOUL.md", ".cursorrules", "CLAUDE.md"];
 async function copyWorkspaceFiles(sourceDir, destDir) {
-  const { readdir: readdir3, copyFile, mkdir: mkdir3 } = await import("fs/promises");
-  const { join: join4 } = await import("path");
-  await mkdir3(destDir, { recursive: true });
-  const files = await readdir3(sourceDir);
+  const { readdir: readdir4, copyFile: copyFile2, mkdir: mkdir4 } = await import("fs/promises");
+  const { join: join5 } = await import("path");
+  await mkdir4(destDir, { recursive: true });
+  const files = await readdir4(sourceDir);
   const copied = [];
   for (const file of files) {
     if (WORKSPACE_FILES.includes(file)) {
-      await copyFile(join4(sourceDir, file), join4(destDir, file));
+      await copyFile2(join5(sourceDir, file), join5(destDir, file));
       copied.push(file);
     }
   }
   return copied;
 }
 async function translateConfig(sourcePath, destPath, source) {
-  const { readFile: readFile4, writeFile: writeFile3 } = await import("fs/promises");
-  const content = await readFile4(sourcePath, "utf8");
+  const { readFile: readFile5, writeFile: writeFile4 } = await import("fs/promises");
+  const content = await readFile5(sourcePath, "utf8");
   const sourceConfig = JSON.parse(content);
   const openpawConfig = {
     version: "1.0.0",
@@ -230809,7 +230809,7 @@ async function translateConfig(sourcePath, destPath, source) {
     migrated_at: (/* @__PURE__ */ new Date()).toISOString(),
     ...sourceConfig
   };
-  await writeFile3(destPath, JSON.stringify(openpawConfig, null, 2));
+  await writeFile4(destPath, JSON.stringify(openpawConfig, null, 2));
 }
 function mapProviderToCredentialType(type) {
   if (type === "oauth" || type === "oauth_token") return "oauth_token";
@@ -230818,8 +230818,8 @@ function mapProviderToCredentialType(type) {
   return "api_key";
 }
 async function migrateCredentials(openclawDir, vault) {
-  const { readFile: readFile4, writeFile: writeFile3, copyFile, readdir: readdir3, stat: stat3 } = await import("fs/promises");
-  const { join: join4 } = await import("path");
+  const { readFile: readFile5, writeFile: writeFile4, copyFile: copyFile2, readdir: readdir4, stat: stat3 } = await import("fs/promises");
+  const { join: join5 } = await import("path");
   const result = {
     profilesProcessed: 0,
     credentialsImported: 0,
@@ -230827,10 +230827,10 @@ async function migrateCredentials(openclawDir, vault) {
     credentialIds: [],
     errors: []
   };
-  const agentsDir = join4(openclawDir, "agents");
+  const agentsDir = join5(openclawDir, "agents");
   let agentDirs;
   try {
-    agentDirs = await readdir3(agentsDir);
+    agentDirs = await readdir4(agentsDir);
   } catch (error) {
     if (error.code === "ENOENT") {
       return result;
@@ -230838,7 +230838,7 @@ async function migrateCredentials(openclawDir, vault) {
     throw error;
   }
   for (const agentDir of agentDirs) {
-    const authProfilesPath = join4(agentsDir, agentDir, "agent", "auth-profiles.json");
+    const authProfilesPath = join5(agentsDir, agentDir, "agent", "auth-profiles.json");
     try {
       await stat3(authProfilesPath);
     } catch (error) {
@@ -230848,11 +230848,11 @@ async function migrateCredentials(openclawDir, vault) {
       throw error;
     }
     try {
-      const content = await readFile4(authProfilesPath, "utf8");
+      const content = await readFile5(authProfilesPath, "utf8");
       const parsed = JSON.parse(content);
       const authProfiles = OpenClawAuthProfilesSchema.parse(parsed);
       const backupPath = `${authProfilesPath}.bak`;
-      await copyFile(authProfilesPath, backupPath);
+      await copyFile2(authProfilesPath, backupPath);
       result.filesBackedUp.push(backupPath);
       const updatedProfiles = {};
       for (const [profileName, profile] of Object.entries(authProfiles.profiles)) {
@@ -230875,7 +230875,7 @@ async function migrateCredentials(openclawDir, vault) {
         version: authProfiles.version,
         profiles: updatedProfiles
       };
-      await writeFile3(authProfilesPath, JSON.stringify(updatedAuthProfiles, null, 2));
+      await writeFile4(authProfilesPath, JSON.stringify(updatedAuthProfiles, null, 2));
     } catch (error) {
       result.errors.push(`Error processing ${authProfilesPath}: ${error.message}`);
     }
@@ -230883,8 +230883,230 @@ async function migrateCredentials(openclawDir, vault) {
   return result;
 }
 
-// src/index.ts
+// ../gateway/dist/index.js
+var import_ws = require("ws");
 var import_promises3 = require("fs/promises");
+var import_path3 = require("path");
+var import_os2 = require("os");
+var import_child_process = require("child_process");
+var import_fs = require("fs");
+var import_zod5 = require("zod");
+init_dist();
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+var DEFAULT_PORT = 18789;
+var SessionSchema = import_zod5.z.object({
+  id: import_zod5.z.string(),
+  createdAt: import_zod5.z.string(),
+  lastActivity: import_zod5.z.string(),
+  metadata: import_zod5.z.record(import_zod5.z.unknown())
+});
+var MessageSchema = import_zod5.z.object({
+  sessionId: import_zod5.z.string().optional(),
+  channelId: import_zod5.z.string().optional(),
+  userId: import_zod5.z.string().optional(),
+  content: import_zod5.z.string(),
+  metadata: import_zod5.z.record(import_zod5.z.unknown()).optional()
+});
+async function findOpenClawBinary(openclawDir) {
+  const pathBinary = process.platform === "win32" ? "openclaw.cmd" : "openclaw";
+  const pathDirs = (process.env["PATH"] ?? "").split(process.platform === "win32" ? ";" : ":");
+  for (const dir of pathDirs) {
+    const fullPath = (0, import_path3.join)(dir, pathBinary);
+    if ((0, import_fs.existsSync)(fullPath)) {
+      return fullPath;
+    }
+  }
+  const localBinary = (0, import_path3.join)(openclawDir, "node_modules", ".bin", "openclaw");
+  if ((0, import_fs.existsSync)(localBinary)) {
+    return localBinary;
+  }
+  return null;
+}
+async function findAuthProfileFiles(openclawDir) {
+  const agentsDir = (0, import_path3.join)(openclawDir, "agents");
+  const profileFiles = [];
+  try {
+    const agents = await (0, import_promises3.readdir)(agentsDir);
+    for (const agent of agents) {
+      const agentDir = (0, import_path3.join)(agentsDir, agent, "agent");
+      const profilePath = (0, import_path3.join)(agentDir, "auth-profiles.json");
+      if ((0, import_fs.existsSync)(profilePath)) {
+        profileFiles.push(profilePath);
+      }
+    }
+  } catch {
+  }
+  return profileFiles;
+}
+async function processAuthProfiles(profilePath, vault, backupSuffix) {
+  const content = await (0, import_promises3.readFile)(profilePath, "utf8");
+  const data = JSON.parse(content);
+  let modified = false;
+  if (data.profiles) {
+    for (const profileName of Object.keys(data.profiles)) {
+      const profile = data.profiles[profileName];
+      if (profile && typeof profile.key === "string" && profile.key.startsWith("openpaw:vault:")) {
+        const credId = profile.key.replace("openpaw:vault:", "");
+        const result = vault.get(credId);
+        if (result) {
+          profile.key = result.value;
+          modified = true;
+        }
+      }
+    }
+  }
+  if (modified) {
+    await (0, import_promises3.copyFile)(profilePath, `${profilePath}${backupSuffix}`);
+    await (0, import_promises3.writeFile)(profilePath, JSON.stringify(data, null, 2), { mode: 384 });
+  }
+  return { original: content, processed: modified };
+}
+async function restoreAuthProfiles(profilePath, backupSuffix) {
+  const backupPath = `${profilePath}${backupSuffix}`;
+  if ((0, import_fs.existsSync)(backupPath)) {
+    await (0, import_promises3.copyFile)(backupPath, profilePath);
+    await (0, import_promises3.unlink)(backupPath);
+  }
+}
+async function startGateway(config = {}) {
+  const openpawDir = config.openpawDir ?? (0, import_path3.join)((0, import_os2.homedir)(), ".openpaw");
+  const openclawDir = config.openclawDir ?? (0, import_path3.join)((0, import_os2.homedir)(), ".openclaw");
+  const keyFile = (0, import_path3.join)(openpawDir, "master.key");
+  const vaultFile = (0, import_path3.join)(openpawDir, "vault.json");
+  let port = config.port ?? DEFAULT_PORT;
+  try {
+    const openclawConfig = JSON.parse(await (0, import_promises3.readFile)((0, import_path3.join)(openclawDir, "openclaw.json"), "utf8"));
+    if (openclawConfig.port) {
+      port = openclawConfig.port;
+    }
+  } catch {
+  }
+  let vault;
+  try {
+    const keyData = await (0, import_promises3.readFile)(keyFile);
+    vault = await createVault(keyData, vaultFile);
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      throw new Error('Vault not initialized. Run "openpaw vault import" first to set up credentials.');
+    }
+    throw error;
+  }
+  const profileFiles = await findAuthProfileFiles(openclawDir);
+  const backupSuffix = ".openpaw-backup";
+  const processedFiles = [];
+  for (const profilePath of profileFiles) {
+    const result = await processAuthProfiles(profilePath, vault, backupSuffix);
+    if (result.processed) {
+      processedFiles.push(profilePath);
+    }
+  }
+  let cleanedUp = false;
+  let openclawProcess = null;
+  const cleanup = async () => {
+    if (cleanedUp) return;
+    cleanedUp = true;
+    console.log("\nRe-encrypting credentials...");
+    for (const profilePath of processedFiles) {
+      try {
+        await restoreAuthProfiles(profilePath, backupSuffix);
+        console.log(`  Restored: ${profilePath}`);
+      } catch (err) {
+        console.error(`  Failed to restore ${profilePath}: ${err.message}`);
+      }
+    }
+    if (openclawProcess && !openclawProcess.killed) {
+      openclawProcess.kill("SIGTERM");
+    }
+    console.log("Credentials secured.");
+  };
+  const cleanupSync = () => {
+    if (cleanedUp) return;
+    cleanedUp = true;
+    const fs = __require("fs");
+    for (const profilePath of processedFiles) {
+      try {
+        const backupPath = `${profilePath}${backupSuffix}`;
+        if (fs.existsSync(backupPath)) {
+          fs.copyFileSync(backupPath, profilePath);
+          fs.unlinkSync(backupPath);
+        }
+      } catch {
+      }
+    }
+    if (openclawProcess && !openclawProcess.killed) {
+      openclawProcess.kill("SIGTERM");
+    }
+  };
+  process.on("exit", cleanupSync);
+  process.on("SIGINT", async () => {
+    await cleanup();
+    process.exit(0);
+  });
+  process.on("SIGTERM", async () => {
+    await cleanup();
+    process.exit(0);
+  });
+  process.on("uncaughtException", async (err) => {
+    console.error("Uncaught exception:", err);
+    await cleanup();
+    process.exit(1);
+  });
+  process.on("unhandledRejection", async (reason) => {
+    console.error("Unhandled rejection:", reason);
+    await cleanup();
+    process.exit(1);
+  });
+  const openclawBinary = await findOpenClawBinary(openclawDir);
+  console.log(`Gateway running on port ${port}. Credentials decrypted in memory. Press Ctrl+C to stop and re-encrypt.`);
+  if (processedFiles.length > 0) {
+    console.log(`Decrypted ${processedFiles.length} auth-profiles.json file(s)`);
+  }
+  if (openclawBinary) {
+    console.log(`Starting OpenClaw: ${openclawBinary}`);
+    openclawProcess = (0, import_child_process.spawn)(openclawBinary, [], {
+      stdio: "inherit",
+      env: { ...process.env }
+    });
+    openclawProcess.on("exit", async (code) => {
+      console.log(`OpenClaw exited with code ${code}`);
+      await cleanup();
+      process.exit(code ?? 0);
+    });
+    openclawProcess.on("error", async (err) => {
+      console.error(`Failed to start OpenClaw: ${err.message}`);
+      await cleanup();
+    });
+  } else {
+    console.log("Starting OpenClaw via npx...");
+    openclawProcess = (0, import_child_process.spawn)("npx", ["openclaw"], {
+      stdio: "inherit",
+      env: { ...process.env },
+      shell: true
+    });
+    openclawProcess.on("exit", async (code) => {
+      console.log(`OpenClaw exited with code ${code}`);
+      await cleanup();
+      process.exit(code ?? 0);
+    });
+    openclawProcess.on("error", async (err) => {
+      console.error(`Failed to start OpenClaw: ${err.message}`);
+      console.log("OpenClaw not found. Gateway running in standalone mode.");
+    });
+  }
+  return {
+    port,
+    openclawProcess,
+    cleanup
+  };
+}
+
+// src/index.ts
+var import_promises4 = require("fs/promises");
 var import_node_path = require("path");
 var import_node_os = require("os");
 var import_node_readline = require("readline");
@@ -230906,13 +231128,13 @@ async function readLine(prompt) {
 }
 async function getMasterKey() {
   try {
-    const keyData = await (0, import_promises3.readFile)(KEY_FILE);
+    const keyData = await (0, import_promises4.readFile)(KEY_FILE);
     return keyData;
   } catch (error) {
     if (error.code === "ENOENT") {
       const key = generateMasterKey();
-      await (0, import_promises3.mkdir)(CONFIG_DIR, { recursive: true });
-      await (0, import_promises3.writeFile)(KEY_FILE, key, { mode: 384 });
+      await (0, import_promises4.mkdir)(CONFIG_DIR, { recursive: true });
+      await (0, import_promises4.writeFile)(KEY_FILE, key, { mode: 384 });
       console.log(`Created new master key at ${KEY_FILE}`);
       return key;
     }
@@ -231117,15 +231339,15 @@ program.command("migrate").description("Migrate from another agent framework").r
     const key = await getMasterKey();
     const sessionDir = (0, import_node_path.join)(options.source, "sessions");
     try {
-      const sessionFiles = await (0, import_promises3.readdir)(sessionDir);
+      const sessionFiles = await (0, import_promises4.readdir)(sessionDir);
       const jsonlFiles = sessionFiles.filter((f) => f.endsWith(".jsonl"));
       for (const file of jsonlFiles) {
         const sourcePath = (0, import_node_path.join)(sessionDir, file);
         const destPath = (0, import_node_path.join)(options.dest, "sessions", `${file}.enc`);
-        await (0, import_promises3.mkdir)((0, import_node_path.join)(options.dest, "sessions"), { recursive: true });
-        const content = await (0, import_promises3.readFile)(sourcePath, "utf8");
+        await (0, import_promises4.mkdir)((0, import_node_path.join)(options.dest, "sessions"), { recursive: true });
+        const content = await (0, import_promises4.readFile)(sourcePath, "utf8");
         const encrypted = encrypt(content, key);
-        await (0, import_promises3.writeFile)(destPath, encrypted);
+        await (0, import_promises4.writeFile)(destPath, encrypted);
         console.log(`   Encrypted: ${file}`);
       }
     } catch (error) {
@@ -231185,9 +231407,16 @@ program.command("migrate").description("Migrate from another agent framework").r
     process.exit(1);
   }
 });
-program.command("start").description("Start OpenPaw services").action(async () => {
-  console.log("Starting OpenPaw services...");
-  console.log("(Gateway and MCP proxy not yet implemented)");
+program.command("start").description("Start OpenPaw services").option("--port <port>", "Gateway port", "18789").option("--openclaw-dir <path>", "OpenClaw config directory", (0, import_node_path.join)((0, import_node_os.homedir)(), ".openclaw")).action(async (options) => {
+  try {
+    await startGateway({
+      port: parseInt(options.port, 10),
+      openclawDir: options.openclawDir
+    });
+  } catch (error) {
+    console.error(`Error: ${error.message}`);
+    process.exit(1);
+  }
 });
 program.command("stop").description("Stop OpenPaw services").action(async () => {
   console.log("Stopping OpenPaw services...");
@@ -231235,13 +231464,13 @@ program.command("doctor").description("Check dependencies and configuration").op
     checks.push({ name: "Node.js", status: "FAIL", message: `${nodeVersion} (>= 18 required)` });
   }
   try {
-    await (0, import_promises3.mkdir)(CONFIG_DIR, { recursive: true });
+    await (0, import_promises4.mkdir)(CONFIG_DIR, { recursive: true });
     checks.push({ name: "Config directory", status: "PASS", message: CONFIG_DIR });
   } catch (error) {
     checks.push({ name: "Config directory", status: "FAIL", message: error.message });
   }
   try {
-    const keyStats = await (0, import_promises3.readFile)(KEY_FILE);
+    const keyStats = await (0, import_promises4.readFile)(KEY_FILE);
     if (keyStats.length === 32) {
       checks.push({ name: "Master key", status: "PASS", message: "Valid 256-bit key" });
     } else {
@@ -231255,7 +231484,7 @@ program.command("doctor").description("Check dependencies and configuration").op
     }
   }
   try {
-    await (0, import_promises3.readFile)(VAULT_FILE);
+    await (0, import_promises4.readFile)(VAULT_FILE);
     checks.push({ name: "Vault file", status: "PASS", message: VAULT_FILE });
   } catch (error) {
     if (error.code === "ENOENT") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sahu-01/openpaw",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "OpenPaw CLI - Security-first wrapper for AI agents",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -22,13 +22,15 @@
   },
   "dependencies": {
     "commander": "^12.0.0",
+    "ws": "^8.16.0",
     "zod": "^3.22.0"
   },
   "devDependencies": {
-    "@sahu-01/openpaw-detect": "workspace:*",
-    "@sahu-01/openpaw-vault": "workspace:*",
-    "@sahu-01/openpaw-scanner": "workspace:*",
-    "@sahu-01/openpaw-migrate": "workspace:*",
+    "@zkagi/openpaw-detect": "workspace:*",
+    "@zkagi/openpaw-vault": "workspace:*",
+    "@zkagi/openpaw-scanner": "workspace:*",
+    "@zkagi/openpaw-migrate": "workspace:*",
+    "@zkagi/openpaw-gateway": "workspace:*",
     "tsup": "^8.0.0",
     "tsx": "^4.7.0",
     "typescript": "^5.4.0",