@silicaclaw/cli 2026.3.20-2 → 2026.3.20-21

package/apps/local-console/dist/apps/local-console/src/server.js

@@ -36,7 +36,10 @@ const DEFAULT_GLOBAL_ROOM = silicaclaw_defaults_json_1.default.network.global_pr
 const DEFAULT_BRIDGE_API_BASE = silicaclaw_defaults_json_1.default.bridge.api_base;
 const OPENCLAW_GATEWAY_PORT = silicaclaw_defaults_json_1.default.ports.openclaw_gateway;
 const OPENCLAW_GATEWAY_URL = `http://${OPENCLAW_GATEWAY_HOST}:${OPENCLAW_GATEWAY_PORT}/`;
+const OPENCLAW_RUNTIME_CACHE_MS = 15_000;
+const OPENCLAW_BRIDGE_STATUS_CACHE_MS = 5_000;
 const NETWORK_PEER_REMOVE_AFTER_MS = Number(process.env.NETWORK_PEER_REMOVE_AFTER_MS || 180_000);
+const DIRECTORY_REMOTE_PROFILE_SOFT_LIMIT = Number(process.env.DIRECTORY_REMOTE_PROFILE_SOFT_LIMIT || 1000);
 const NETWORK_UDP_BIND_ADDRESS = process.env.NETWORK_UDP_BIND_ADDRESS || "0.0.0.0";
 const NETWORK_UDP_BROADCAST_ADDRESS = process.env.NETWORK_UDP_BROADCAST_ADDRESS || "255.255.255.255";
 const NETWORK_PEER_ID = process.env.NETWORK_PEER_ID;
@@ -49,6 +52,12 @@ const WEBRTC_BOOTSTRAP_HINTS = process.env.WEBRTC_BOOTSTRAP_HINTS || "";
 const PROFILE_VERSION = "v0.9";
 const SOCIAL_MESSAGE_TOPIC = "social.message";
 const SOCIAL_MESSAGE_OBSERVATION_TOPIC = "social.message.observation";
+const PRIVATE_MESSAGE_TOPIC = "private.message";
+const PRIVATE_MESSAGE_RECEIPT_TOPIC = "private.message.receipt";
+const PRIVATE_MESSAGE_HISTORY_LIMIT = Number(process.env.PRIVATE_MESSAGE_HISTORY_LIMIT || 1000);
+const PRIVATE_MESSAGE_RECEIPT_HISTORY_LIMIT = Number(process.env.PRIVATE_MESSAGE_RECEIPT_HISTORY_LIMIT || 2000);
+const PRIVATE_MESSAGE_QUERY_LIMIT = Number(process.env.PRIVATE_MESSAGE_QUERY_LIMIT || 100);
+const PRIVATE_MESSAGE_PERSIST_DEBOUNCE_MS = Number(process.env.PRIVATE_MESSAGE_PERSIST_DEBOUNCE_MS || 750);
 const DEFAULT_SOCIAL_MESSAGE_CHANNEL = "global";
 const SOCIAL_MESSAGE_MAX_BODY_CHARS = Number(process.env.SOCIAL_MESSAGE_MAX_BODY_CHARS || 500);
 const SOCIAL_MESSAGE_HISTORY_LIMIT = Number(process.env.SOCIAL_MESSAGE_HISTORY_LIMIT || 100);
@@ -62,6 +71,8 @@ const SOCIAL_MESSAGE_MAX_AGE_MS = Number(process.env.SOCIAL_MESSAGE_MAX_AGE_MS |
 const SOCIAL_MESSAGE_OBSERVATION_HISTORY_LIMIT = Number(process.env.SOCIAL_MESSAGE_OBSERVATION_HISTORY_LIMIT || 500);
 const SOCIAL_MESSAGE_REPLAY_WINDOW_MS = Number(process.env.SOCIAL_MESSAGE_REPLAY_WINDOW_MS || 10 * 60_000);
 const SOCIAL_MESSAGE_REPLAY_MAX_PER_BROADCAST = Number(process.env.SOCIAL_MESSAGE_REPLAY_MAX_PER_BROADCAST || 3);
+const SOCIAL_MESSAGE_REPLAY_REFRESH_INTERVAL_MS = Number(process.env.SOCIAL_MESSAGE_REPLAY_REFRESH_INTERVAL_MS || 120_000);
+const PROFILE_RELAY_REFRESH_INTERVAL_MS = Number(process.env.PROFILE_RELAY_REFRESH_INTERVAL_MS || 120_000);
 const SOCIAL_MESSAGE_BLOCKED_AGENT_IDS = new Set(dedupeStrings(parseListEnv(process.env.SOCIAL_MESSAGE_BLOCKED_AGENT_IDS || "")));
 const SOCIAL_MESSAGE_BLOCKED_TERMS = dedupeStrings(parseListEnv(process.env.SOCIAL_MESSAGE_BLOCKED_TERMS || ""))
     .map((term) => term.trim().toLowerCase())
@@ -101,6 +112,9 @@ function normalizeVersionText(value) {
     const text = String(value || "").trim();
     return text.startsWith("v") ? text.slice(1) : text;
 }
+function formatBytesToMiB(value) {
+    return Math.round((value / (1024 * 1024)) * 10) / 10;
+}
 function tokenizeVersion(value) {
     return normalizeVersionText(value)
         .split(/[^0-9A-Za-z]+/)
@@ -133,7 +147,19 @@ function compareVersionTokens(left, right) {
     }
     return 0;
 }
+function userNpmCacheDir() {
+    return (0, path_1.resolve)((0, os_1.homedir)(), ".silicaclaw", "npm-cache");
+}
+function userShimPath() {
+    return (0, path_1.resolve)((0, os_1.homedir)(), ".silicaclaw", "bin", "silicaclaw");
+}
 function resolveWorkspaceRoot(cwd = process.cwd()) {
+    const envAppRoot = String(process.env.SILICACLAW_APP_DIR || "").trim();
+    if (envAppRoot &&
+        (0, fs_1.existsSync)((0, path_1.resolve)(envAppRoot, "apps", "local-console", "package.json")) &&
+        (0, fs_1.existsSync)((0, path_1.resolve)(envAppRoot, "package.json"))) {
+        return (0, path_1.resolve)(envAppRoot);
+    }
     if ((0, fs_1.existsSync)((0, path_1.resolve)(cwd, "apps", "local-console", "package.json"))) {
         return cwd;
     }
@@ -380,44 +406,56 @@ function readOpenClawConfiguredGateway(workspaceRoot) {
         gateway_url: OPENCLAW_GATEWAY_URL,
     };
 }
+function resolveOpenClawStatusCommand(workspaceRoot) {
+    const explicitBin = String(process.env.OPENCLAW_BIN || "").trim();
+    if (explicitBin) {
+        return { cmd: explicitBin, args: ["status"] };
+    }
+    const configuredSourceDir = String(process.env.OPENCLAW_SOURCE_DIR || "").trim();
+    const defaultSourceDir = defaultOpenClawSourceDir(workspaceRoot);
+    const sourceDir = configuredSourceDir || defaultSourceDir;
+    const sourceEntry = existingPathOrNull((0, path_1.resolve)(sourceDir, "openclaw.mjs"));
+    if (sourceEntry) {
+        return { cmd: process.execPath, args: [sourceEntry, "status"] };
+    }
+    const commandPath = resolveExecutableInPath("openclaw");
+    if (commandPath) {
+        return { cmd: commandPath, args: ["status"] };
+    }
+    return null;
+}
+function resolveOpenClawGatewayProbeCommand(workspaceRoot) {
+    const explicitBin = String(process.env.OPENCLAW_BIN || "").trim();
+    if (explicitBin) {
+        return { cmd: explicitBin, args: ["gateway", "probe"] };
+    }
+    const configuredSourceDir = String(process.env.OPENCLAW_SOURCE_DIR || "").trim();
+    const defaultSourceDir = defaultOpenClawSourceDir(workspaceRoot);
+    const sourceDir = configuredSourceDir || defaultSourceDir;
+    const sourceEntry = existingPathOrNull((0, path_1.resolve)(sourceDir, "openclaw.mjs"));
+    if (sourceEntry) {
+        return { cmd: process.execPath, args: [sourceEntry, "gateway", "probe"] };
+    }
+    const commandPath = resolveExecutableInPath("openclaw");
+    if (commandPath) {
+        return { cmd: commandPath, args: ["gateway", "probe"] };
+    }
+    return null;
+}
 function detectOpenClawRuntime(workspaceRoot) {
     const configuredGateway = readOpenClawConfiguredGateway(workspaceRoot);
-    const result = (0, child_process_1.spawnSync)("ps", ["-Ao", "pid=,ppid=,command="], {
-        encoding: "utf8",
-    });
-    const stdout = String(result.stdout || "");
-    const lines = stdout
-        .split("\n")
-        .map((line) => line.trim())
-        .filter(Boolean);
-    const processes = lines
-        .map((line) => {
-        const match = line.match(/^(\d+)\s+(\d+)\s+(.+)$/);
-        if (!match)
-            return null;
-        const command = match[3] || "";
-        const lower = command.toLowerCase();
-        const isOpenClaw = lower.includes(" openclaw ") ||
-            lower.endsWith(" openclaw") ||
-            lower.includes("/openclaw ") ||
-            lower.includes("openclaw.mjs") ||
-            lower.includes("openclaw gateway") ||
-            lower.includes("openclaw agent") ||
-            lower.includes("openclaw message");
-        if (!isOpenClaw)
-            return null;
-        return {
-            pid: Number(match[1]),
-            ppid: Number(match[2]),
-            command,
-        };
-    })
-        .filter((item) => Boolean(item));
-    const openclawPids = new Set(processes.map((item) => item.pid));
-    const gatewayProbe = (0, child_process_1.spawnSync)("lsof", ["-nP", "-iTCP", "-sTCP:LISTEN"], {
+    const statusCommand = resolveOpenClawStatusCommand(workspaceRoot);
+    const statusLooksConfigured = Boolean(statusCommand ||
+        configuredGateway.config_path ||
+        detectOpenClawInstallation(workspaceRoot).detected);
+    const gatewayProbeCommand = ["lsof", "-nP", `-iTCP:${configuredGateway.gateway_port}`, "-sTCP:LISTEN"];
+    const gatewayProbe = (0, child_process_1.spawnSync)(gatewayProbeCommand[0], gatewayProbeCommand.slice(1), {
         encoding: "utf8",
+        timeout: 1200,
     });
-    const gatewayLines = String(gatewayProbe.stdout || "")
+    const gatewayStatusStdout = String(gatewayProbe.stdout || "");
+    const gatewayStatusStderr = String(gatewayProbe.stderr || "");
+    const gatewayLines = gatewayStatusStdout
         .split("\n")
         .map((line) => line.trim())
         .filter(Boolean);
@@ -427,15 +465,10 @@ function detectOpenClawRuntime(workspaceRoot) {
         const parts = line.split(/\s+/);
         const pid = Number(parts[1] || 0);
         const command = parts[0] || "";
-        const lowerCommand = command.toLowerCase();
         const endpoint = parts[8] || parts[parts.length - 1] || "";
         const portMatch = endpoint.match(/:(\d+)(?:\s*\(|$)/);
         if (!pid || !command || !portMatch)
             return null;
-        const isOpenClawListener = openclawPids.has(pid) ||
-            lowerCommand.includes("openclaw");
-        if (!isOpenClawListener)
-            return null;
         const port = Number(portMatch[1]);
         if (!Number.isFinite(port) || port <= 0)
             return null;
@@ -447,49 +480,107 @@ function detectOpenClawRuntime(workspaceRoot) {
         };
     })
         .filter((item) => Boolean(item));
+    const gatewayProbeOk = gatewayListeners.length > 0;
+    let processes = gatewayListeners.map((item) => ({
+        pid: item.pid,
+        ppid: item.ppid,
+        command: item.command,
+    }));
+    let processResult = null;
+    if (!gatewayProbeOk) {
+        processResult = (0, child_process_1.spawnSync)("ps", ["-Ao", "pid=,ppid=,command="], {
+            encoding: "utf8",
+            timeout: 1200,
+        });
+        const stdout = String(processResult.stdout || "");
+        const lines = stdout
+            .split("\n")
+            .map((line) => line.trim())
+            .filter(Boolean);
+        processes = lines
+            .map((line) => {
+            const match = line.match(/^(\d+)\s+(\d+)\s+(.+)$/);
+            if (!match)
+                return null;
+            const command = match[3] || "";
+            const lower = command.toLowerCase();
+            const isOpenClaw = lower.includes(" openclaw ") ||
+                lower.endsWith(" openclaw") ||
+                lower.includes("/openclaw ") ||
+                lower.includes("openclaw.mjs") ||
+                lower.includes("openclaw gateway") ||
+                lower.includes("openclaw agent") ||
+                lower.includes("openclaw message");
+            if (!isOpenClaw)
+                return null;
+            return {
+                pid: Number(match[1]),
+                ppid: Number(match[2]),
+                command,
+            };
+        })
+            .filter((item) => Boolean(item));
+    }
     const preferredListener = gatewayListeners.find((item) => item.port === configuredGateway.gateway_port) ||
         gatewayListeners[0] ||
         null;
-    const combinedProcesses = new Map();
-    for (const process of [...processes, ...gatewayListeners]) {
-        if (!combinedProcesses.has(process.pid)) {
-            combinedProcesses.set(process.pid, process);
-            continue;
-        }
-        const current = combinedProcesses.get(process.pid);
-        if (current && current.command.length < process.command.length) {
-            combinedProcesses.set(process.pid, process);
-        }
-    }
-    const allProcesses = Array.from(combinedProcesses.values());
-    const gatewayReachable = gatewayListeners.length > 0;
+    const allProcesses = processes.slice(0, 10);
+    const gatewayReachable = gatewayProbeOk;
     const detectionNotes = [];
-    if (result.status !== 0)
-        detectionNotes.push(String(result.stderr || "ps failed").trim());
     if (gatewayProbe.status !== 0 && gatewayLines.length === 0) {
-        detectionNotes.push(String(gatewayProbe.stderr || "lsof failed").trim());
+        detectionNotes.push(String(gatewayStatusStderr || "openclaw gateway probe failed").trim());
+    }
+    if (processResult && processResult.status !== 0) {
+        detectionNotes.push(String(processResult.stderr || "ps failed").trim());
     }
     const gatewayPort = preferredListener?.port || configuredGateway.gateway_port;
     const gatewayUrl = `http://${OPENCLAW_GATEWAY_HOST}:${gatewayPort}/`;
     return {
-        running: allProcesses.length > 0 || gatewayReachable,
+        running: gatewayProbeOk || allProcesses.length > 0 || gatewayReachable,
         process_count: allProcesses.length,
         processes: allProcesses.slice(0, 10),
         detection_error: detectionNotes.filter(Boolean).join(" | ") || null,
         gateway_url: gatewayUrl,
         gateway_port: gatewayPort,
         gateway_reachable: gatewayReachable,
+        status_command: statusCommand ? [statusCommand.cmd, ...statusCommand.args].join(" ") : null,
+        status_ok: statusLooksConfigured,
+        status_summary: statusLooksConfigured
+            ? configuredGateway.config_path
+                ? `configured via ${configuredGateway.config_path}`
+                : statusCommand
+                    ? `command available: ${[statusCommand.cmd, ...statusCommand.args].join(" ")}`
+                    : "OpenClaw environment detected"
+            : null,
+        gateway_probe_command: gatewayProbeCommand.join(" "),
+        gateway_probe_ok: gatewayProbeOk,
+        gateway_probe_summary: gatewayProbeOk
+            ? gatewayStatusStdout
+                .split("\n")
+                .map((line) => line.trim())
+                .filter(Boolean)
+                .slice(0, 4)
+                .join(" | ")
+            : null,
         configured_gateway_url: configuredGateway.gateway_url,
         configured_gateway_port: configuredGateway.gateway_port,
         configured_gateway_bind: configuredGateway.gateway_bind,
         configured_gateway_config_path: configuredGateway.config_path,
-        detection_mode: processes.length > 0 && gatewayReachable
-            ? "process+gateway"
-            : gatewayReachable
-                ? "gateway"
-                : processes.length > 0
-                    ? "process"
-                    : "not_running",
+        detection_mode: gatewayProbeOk
+            ? (processes.length > 0 && gatewayReachable
+                ? "gateway-probe+process+gateway"
+                : gatewayReachable
+                    ? "gateway-probe+gateway"
+                    : processes.length > 0
+                        ? "gateway-probe+process"
+                        : "gateway-probe")
+            : processes.length > 0 && gatewayReachable
+                ? "process+gateway"
+                : gatewayReachable
+                    ? "gateway"
+                    : processes.length > 0
+                        ? "process"
+                        : "not_running",
     };
 }
 function detectOpenClawSkillInstallation() {
@@ -688,20 +779,43 @@ class LocalNodeService {
     socialMessageGovernanceRepo;
     socialMessageRepo;
     socialMessageObservationRepo;
+    privateMessageRepo;
+    privateMessageReceiptRepo;
+    privateEncryptionKeyRepo;
+    privateMessagingRuntimeRepo;
     socialRuntimeRepo;
     identity = null;
     profile = null;
     directory = (0, core_1.createEmptyDirectoryState)();
     socialMessages = [];
     socialMessageObservations = [];
+    privateMessages = [];
+    privateMessageReceipts = [];
+    privateEncryptionKeyPair = null;
+    privateMessagingRuntime = null;
+    privatePeerRoutes = {};
+    privatePeerEncryptionKeys = {};
+    privateMessageBodyCache = new Map();
+    privateMessageDeliveryStatusCache = new Map();
     messageGovernance;
+    privateMessagesPersistDirty = false;
+    privateMessageReceiptsPersistDirty = false;
+    privateMessagesPersistTimer = null;
+    privateMessageReceiptsPersistTimer = null;
     receivedCount = 0;
     broadcastCount = 0;
     lastMessageAt = 0;
     lastBroadcastAt = 0;
+    lastProfileBroadcastAt = 0;
+    lastProfileBroadcastSignature = "";
+    lastReplayBroadcastAt = 0;
+    lastReplayBroadcastSignature = "";
     lastBroadcastErrorAt = 0;
     lastBroadcastError = null;
     broadcastFailureCount = 0;
+    consecutiveBroadcastFailures = 0;
+    lastBroadcastRecoveryAttemptAt = 0;
+    broadcastRecoveryInFlight = false;
     broadcaster = null;
     subscriptionsBound = false;
     broadcastEnabled = true;
@@ -739,6 +853,8 @@ class LocalNodeService {
     networkReconnectTimer = null;
     networkReconnectDelayMs = 5_000;
     appVersion = "unknown";
+    openclawRuntimeCache = null;
+    openclawBridgeStatusCache = null;
     constructor(options) {
         this.workspaceRoot = options?.workspaceRoot || resolveWorkspaceRoot();
         this.projectRoot = options?.projectRoot || resolveProjectRoot(this.workspaceRoot);
@@ -752,6 +868,10 @@ class LocalNodeService {
         this.socialMessageGovernanceRepo = new storage_1.SocialMessageGovernanceRepo(this.storageRoot);
         this.socialMessageRepo = new storage_1.SocialMessageRepo(this.storageRoot);
         this.socialMessageObservationRepo = new storage_1.SocialMessageObservationRepo(this.storageRoot);
+        this.privateMessageRepo = new storage_1.PrivateMessageRepo(this.storageRoot);
+        this.privateMessageReceiptRepo = new storage_1.PrivateMessageReceiptRepo(this.storageRoot);
+        this.privateEncryptionKeyRepo = new storage_1.PrivateEncryptionKeyRepo(this.storageRoot);
+        this.privateMessagingRuntimeRepo = new storage_1.PrivateMessagingRuntimeRepo(this.storageRoot);
         this.socialRuntimeRepo = new storage_1.SocialRuntimeRepo(this.storageRoot);
         this.messageGovernance = this.defaultMessageGovernance();
         let loadedSocial = (0, core_1.loadSocialConfig)(this.projectRoot);
@@ -779,6 +899,22 @@ class LocalNodeService {
         this.adapterMode = resolved.mode;
         this.networkPort = resolved.port;
     }
+    getCachedOpenClawRuntime() {
+        const now = Date.now();
+        if (this.openclawRuntimeCache && this.openclawRuntimeCache.expiresAt > now) {
+            return this.openclawRuntimeCache.value;
+        }
+        const value = detectOpenClawRuntime(this.projectRoot);
+        this.openclawRuntimeCache = {
+            value,
+            expiresAt: now + OPENCLAW_RUNTIME_CACHE_MS,
+        };
+        return value;
+    }
+    invalidateOpenClawCaches() {
+        this.openclawRuntimeCache = null;
+        this.openclawBridgeStatusCache = null;
+    }
     async start() {
         await this.hydrateFromDisk();
         this.bindNetworkSubscriptions();
@@ -790,6 +926,7 @@ class LocalNodeService {
             clearInterval(this.broadcaster);
             this.broadcaster = null;
         }
+        await this.flushPrivatePersistence();
         if (this.networkStarted) {
             await this.network.stop();
         }
@@ -808,6 +945,9 @@ class LocalNodeService {
     getOverview() {
         const discovered = this.search("");
         const onlineCount = discovered.filter((profile) => profile.online).length;
+        const openclawInstallation = detectOpenClawInstallation(this.projectRoot);
+        const openclawRuntime = this.getCachedOpenClawRuntime();
+        const openclawSkillInstallation = detectOpenClawSkillInstallation();
         return {
             app_version: this.appVersion,
             agent_id: this.identity?.agent_id ?? "",
@@ -823,6 +963,15 @@ class LocalNodeService {
             init_state: this.initState,
             presence_ttl_ms: PRESENCE_TTL_MS,
             onboarding: this.getOnboardingSummary(),
+            openclaw: {
+                detected: openclawInstallation.detected,
+                running: openclawRuntime.running,
+                detection_mode: openclawRuntime.detection_mode,
+                gateway_url: openclawRuntime.gateway_url,
+                gateway_probe_ok: openclawRuntime.gateway_probe_ok,
+                status_ok: openclawRuntime.status_ok,
+                skill_installed: openclawSkillInstallation.installed,
+            },
             social: {
                 found: this.socialFound,
                 enabled: this.socialConfig.enabled,
@@ -965,6 +1114,7 @@ class LocalNodeService {
         const relayCapable = this.adapterMode === "webrtc-preview" || this.adapterMode === "relay-preview";
         const peers = diagnostics?.peers?.items ?? [];
         const online = peers.filter((peer) => peer.status === "online").length;
+        const memory = process.memoryUsage();
         return {
             adapter: this.adapterMode,
             mode: this.networkMode,
@@ -988,6 +1138,23 @@ class LocalNodeService {
             adapter_stats: diagnostics?.stats ?? null,
             adapter_transport_stats: diagnostics?.transport_stats ?? null,
             adapter_discovery_stats: diagnostics?.discovery_stats ?? null,
+            runtime_diagnostics: {
+                memory_mib: {
+                    rss: formatBytesToMiB(memory.rss),
+                    heap_used: formatBytesToMiB(memory.heapUsed),
+                    heap_total: formatBytesToMiB(memory.heapTotal),
+                    external: formatBytesToMiB(memory.external),
+                },
+                directory: {
+                    profile_count: Object.keys(this.directory.profiles).length,
+                    presence_count: Object.keys(this.directory.presence).length,
+                    index_key_count: Object.keys(this.directory.index).length,
+                },
+                social: {
+                    message_count: this.socialMessages.length,
+                    observation_count: this.socialMessageObservations.length,
+                },
+            },
             adapter_diagnostics_summary: relayCapable || diagnostics
                 ? {
                     started: this.networkStarted,
@@ -1099,6 +1266,91 @@ class LocalNodeService {
             social_source_path: this.socialSourcePath,
         };
     }
+    getAppUpdateStatus() {
+        const currentVersion = normalizeVersionText(this.appVersion) || "unknown";
+        const fallback = {
+            current_version: currentVersion,
+            latest_version: currentVersion,
+            update_available: false,
+            channel: "latest",
+            platform: process.platform,
+            checked_at: Date.now(),
+            can_update: true,
+            check_error: null,
+        };
+        try {
+            const result = (0, child_process_1.spawnSync)("npm", ["view", "@silicaclaw/cli", "dist-tags", "--json"], {
+                cwd: this.projectRoot,
+                encoding: "utf8",
+                env: {
+                    ...process.env,
+                    SILICACLAW_WORKSPACE_DIR: this.projectRoot,
+                    SILICACLAW_APP_DIR: this.workspaceRoot,
+                    npm_config_cache: process.env.npm_config_cache || userNpmCacheDir(),
+                },
+            });
+            if ((result.status ?? 1) !== 0) {
+                return {
+                    ...fallback,
+                    check_error: String(result.stderr || result.stdout || "npm view failed").trim() || "npm view failed",
+                };
+            }
+            const tags = JSON.parse(String(result.stdout || "{}").trim() || "{}");
+            const latestVersion = normalizeVersionText(tags.latest || currentVersion) || currentVersion;
+            return {
+                ...fallback,
+                latest_version: latestVersion,
+                update_available: compareVersionTokens(latestVersion, currentVersion) > 0,
+            };
+        }
+        catch (error) {
+            return {
+                ...fallback,
+                check_error: error instanceof Error ? error.message : String(error),
+            };
+        }
+    }
+    startAppUpdate() {
+        const status = this.getAppUpdateStatus();
+        if (!status.update_available || !status.latest_version) {
+            return {
+                started: false,
+                target_version: status.latest_version || status.current_version,
+                platform: process.platform,
+                reason: status.check_error || "already_current",
+            };
+        }
+        const shimPath = userShimPath();
+        const scriptPath = (0, path_1.resolve)(this.workspaceRoot, "scripts", "silicaclaw-cli.mjs");
+        const useShim = (0, fs_1.existsSync)(shimPath);
+        if (!useShim && !(0, fs_1.existsSync)(scriptPath)) {
+            return {
+                started: false,
+                target_version: status.latest_version,
+                platform: process.platform,
+                reason: "missing_cli_script",
+            };
+        }
+        const command = useShim ? shimPath : process.execPath;
+        const args = useShim ? ["update"] : [scriptPath, "update"];
+        const child = (0, child_process_1.spawn)(command, args, {
+            cwd: this.projectRoot,
+            detached: true,
+            stdio: "ignore",
+            env: {
+                ...process.env,
+                SILICACLAW_WORKSPACE_DIR: this.projectRoot,
+                SILICACLAW_APP_DIR: this.workspaceRoot,
+                npm_config_cache: process.env.npm_config_cache || userNpmCacheDir(),
+            },
+        });
+        child.unref();
+        return {
+            started: true,
+            target_version: status.latest_version,
+            platform: process.platform,
+        };
+    }
     getIntegrationSummary() {
         const status = this.getIntegrationStatus();
         const runtimeGenerated = Boolean(this.socialRuntime && this.socialRuntime.last_loaded_at > 0);
@@ -1355,6 +1607,7 @@ class LocalNodeService {
                 return {
                     ...message,
                     display_name: profile?.display_name || message.display_name || "Unnamed",
+                    avatar_url: profile?.avatar_url || "",
                     is_self: message.agent_id === this.identity?.agent_id,
                     online: (0, core_1.isAgentOnline)(lastSeenAt, Date.now(), PRESENCE_TTL_MS),
                     last_seen_at: lastSeenAt || null,
@@ -1373,10 +1626,136 @@ class LocalNodeService {
             },
         };
     }
+    getPrivateMessagingState() {
+        return {
+            enabled: Boolean(this.identity && this.privateEncryptionKeyPair),
+            agent_id: this.identity?.agent_id || "",
+            encryption_public_key: this.privateEncryptionKeyPair?.public_key || "",
+            conversation_count: this.getPrivateConversations().length,
+            message_count: this.privateMessages.length,
+            runtime: this.privateMessagingRuntime,
+        };
+    }
+    getPrivateConversations() {
+        const conversations = new Map();
+        for (const message of this.privateMessages) {
+            if (message.from_agent_id === message.to_agent_id) {
+                continue;
+            }
+            const peerAgentId = message.from_agent_id === this.identity?.agent_id ? message.to_agent_id : message.from_agent_id;
+            if (!peerAgentId || peerAgentId === this.identity?.agent_id) {
+                continue;
+            }
+            const peerProfile = this.directory.profiles[peerAgentId];
+            const current = conversations.get(message.conversation_id);
+            const nextLast = Math.max(current?.last_message_at || 0, message.created_at || 0) || null;
+            const learnedPeerKey = this.privatePeerEncryptionKeys[peerAgentId] || "";
+            conversations.set(message.conversation_id, {
+                conversation_id: message.conversation_id,
+                peer_agent_id: peerAgentId,
+                peer_display_name: peerProfile?.display_name || peerAgentId,
+                peer_avatar_url: peerProfile?.avatar_url || "",
+                peer_public_key: learnedPeerKey || peerProfile?.private_encryption_public_key || "",
+                last_message_at: nextLast,
+                unread_count: current?.unread_count || 0,
+            });
+        }
+        return Array.from(conversations.values()).sort((a, b) => (b.last_message_at || 0) - (a.last_message_at || 0));
+    }
+    getPrivateMessages(conversationId, limit = PRIVATE_MESSAGE_QUERY_LIMIT) {
+        const normalizedConversationId = String(conversationId || "").trim();
+        const resolvedLimit = Math.max(1, Math.min(PRIVATE_MESSAGE_QUERY_LIMIT, Number(limit) || PRIVATE_MESSAGE_QUERY_LIMIT));
+        const receiptsByMessageId = new Map(this.privateMessageReceipts.map((receipt) => [receipt.message_id, receipt.status]));
+        return this.privateMessages
+            .filter((message) => {
+            if (message.from_agent_id === message.to_agent_id) {
+                return false;
+            }
+            const peerAgentId = message.from_agent_id === this.identity?.agent_id ? message.to_agent_id : message.from_agent_id;
+            if (!peerAgentId || peerAgentId === this.identity?.agent_id) {
+                return false;
+            }
+            return !normalizedConversationId || message.conversation_id === normalizedConversationId;
+        })
+            .sort((a, b) => b.created_at - a.created_at)
+            .slice(0, resolvedLimit)
+            .map((message) => ({
+            message_id: message.message_id,
+            conversation_id: message.conversation_id,
+            from_agent_id: message.from_agent_id,
+            to_agent_id: message.to_agent_id,
+            body: this.decryptPrivateMessageBody(message),
+            created_at: message.created_at,
+            is_self: message.from_agent_id === this.identity?.agent_id,
+            delivery_status: receiptsByMessageId.get(message.message_id) ||
+                this.privateMessageDeliveryStatusCache.get(message.message_id) ||
+                (message.from_agent_id === this.identity?.agent_id ? "fallback-sent" : "sent"),
+        }));
+    }
+    async sendPrivateMessage(input) {
+        if (!this.identity || !this.privateEncryptionKeyPair) {
+            return { sent: false, reason: "missing_identity_or_private_key" };
+        }
+        const toAgentId = String(input.to_agent_id || "").trim();
+        const learnedRecipientKey = this.privatePeerEncryptionKeys[toAgentId] || "";
+        const profileRecipientKey = this.directory.profiles[toAgentId]?.private_encryption_public_key || "";
+        const recipientKey = String(learnedRecipientKey || input.recipient_encryption_public_key || profileRecipientKey || "").trim();
+        const body = String(input.body || "").trim();
+        if (toAgentId === this.identity.agent_id) {
+            return { sent: false, reason: "self_private_message_not_allowed" };
+        }
+        const toPeerId = this.privatePeerRoutes[toAgentId] || "";
+        if (!toAgentId || !recipientKey || !body) {
+            return { sent: false, reason: "invalid_private_message_input" };
+        }
+        const encrypted = (0, core_1.encryptPrivatePayload)({
+            plaintext: body,
+            recipient_public_key: recipientKey,
+            sender_keypair: this.privateEncryptionKeyPair,
+        });
+        const message = (0, core_1.signPrivateMessage)({
+            identity: this.identity,
+            message_id: (0, crypto_1.createHash)("sha256").update(`${this.identity.agent_id}:${toAgentId}:${Date.now()}:${body}:${Math.random()}`, "utf8").digest("hex"),
+            conversation_id: this.buildPrivateConversationId(this.identity.agent_id, toAgentId),
+            to_agent_id: toAgentId,
+            sender_encryption_public_key: encrypted.sender_encryption_public_key,
+            recipient_encryption_public_key: recipientKey,
+            ciphertext: encrypted.ciphertext,
+            nonce: encrypted.nonce,
+            created_at: Date.now(),
+        });
+        this.privateMessageBodyCache.set(message.message_id, body);
+        this.ingestPrivateMessage(message);
+        await this.persistPrivateMessages();
+        let reason = "fallback-sent";
+        if (toPeerId && typeof this.network.sendDirect === "function") {
+            try {
+                await this.network.sendDirect(toPeerId, PRIVATE_MESSAGE_TOPIC, message);
+                await this.publish(PRIVATE_MESSAGE_TOPIC, message);
+                reason = "direct-sent";
+            }
+            catch {
+                await this.publish(PRIVATE_MESSAGE_TOPIC, message);
+            }
+        }
+        else {
+            await this.publish(PRIVATE_MESSAGE_TOPIC, message);
+        }
+        this.privateMessageDeliveryStatusCache.set(message.message_id, reason);
+        const view = this.getPrivateMessages(message.conversation_id).find((item) => item.message_id === message.message_id);
+        if (view) {
+            view.delivery_status = reason;
+        }
+        return { sent: true, reason, message: view };
+    }
     getOpenClawBridgeStatus() {
+        const now = Date.now();
+        if (this.openclawBridgeStatusCache && this.openclawBridgeStatusCache.expiresAt > now) {
+            return this.openclawBridgeStatusCache.value;
+        }
         const integration = this.getIntegrationStatus();
         const openclawInstallation = detectOpenClawInstallation(this.projectRoot);
-        const openclawRuntime = detectOpenClawRuntime(this.projectRoot);
+        const openclawRuntime = this.getCachedOpenClawRuntime();
         const skillInstallation = detectOpenClawSkillInstallation();
         const ownerDelivery = detectOwnerDeliveryStatus({
             workspaceRoot: this.projectRoot,
@@ -1384,7 +1763,7 @@ class LocalNodeService {
             openclawRunning: openclawRuntime.running,
             skillInstalled: skillInstallation.installed,
         });
-        return {
+        const value = {
             enabled: this.socialConfig.enabled,
             connected_to_silicaclaw: integration.connected_to_silicaclaw,
             public_enabled: integration.public_enabled,
@@ -1440,6 +1819,11 @@ class LocalNodeService {
                 install_skill: "/api/openclaw/bridge/skill-install",
             },
         };
+        this.openclawBridgeStatusCache = {
+            value,
+            expiresAt: now + OPENCLAW_BRIDGE_STATUS_CACHE_MS,
+        };
+        return value;
     }
     async installOpenClawSkill(skillName) {
         const scriptPath = (0, path_1.resolve)(this.workspaceRoot, "scripts", "install-openclaw-skill.mjs");
@@ -1453,6 +1837,7 @@ class LocalNodeService {
             maxBuffer: 1024 * 1024,
         });
         const parsed = JSON.parse(String(stdout || "{}"));
+        this.invalidateOpenClawCaches();
         return {
             ...parsed,
             bridge: this.getOpenClawBridgeStatus(),
@@ -1472,7 +1857,7 @@ class LocalNodeService {
         const workspaceSkillDir = (0, path_1.resolve)(homeDir, "workspace", "skills");
         const legacySkillDir = (0, path_1.resolve)(homeDir, "skills");
         const openclawSourceDir = defaultOpenClawSourceDir(this.projectRoot);
-        const openclawRuntime = detectOpenClawRuntime(this.projectRoot);
+        const openclawRuntime = this.getCachedOpenClawRuntime();
         return {
             bridge_api_base: DEFAULT_BRIDGE_API_BASE,
             openclaw_detected: detectOpenClawInstallation(this.projectRoot).detected,
@@ -1511,7 +1896,11 @@ class LocalNodeService {
         };
     }
     getSkillsView() {
-        const bundledRoot = (0, path_1.resolve)(this.workspaceRoot, "openclaw-skills");
+        const bundledRootCandidates = [
+            (0, path_1.resolve)(this.workspaceRoot, "openclaw-skills"),
+            (0, path_1.resolve)(this.projectRoot, "openclaw-skills"),
+        ];
+        const bundledRoot = bundledRootCandidates.find((candidate) => (0, fs_1.existsSync)(candidate)) || bundledRootCandidates[0];
         const openclawHome = (0, path_1.resolve)(process.env.HOME || "", ".openclaw");
         const workspaceInstallRoot = (0, path_1.resolve)(openclawHome, "workspace", "skills");
         const legacyInstallRoot = (0, path_1.resolve)(openclawHome, "skills");
@@ -1845,14 +2234,13 @@ class LocalNodeService {
             profile: this.profile,
         };
         const presenceRecord = (0, core_1.signPresence)(this.identity, Date.now());
-        const indexRecords = (0, core_1.buildIndexRecords)(this.profile);
-        const replayMessages = this.getReplayableSelfSocialMessages();
+        const shouldPublishProfile = this.shouldPublishProfileRecord(profileRecord, reason, presenceRecord.timestamp);
+        const replayMessages = this.getReplayableSelfSocialMessages(reason);
         try {
-            await this.publish("profile", profileRecord);
-            await this.publish("presence", presenceRecord);
-            for (const record of indexRecords) {
-                await this.publish("index", record);
+            if (shouldPublishProfile) {
+                await this.publish("profile", profileRecord);
             }
+            await this.publish("presence", presenceRecord);
             for (const message of replayMessages) {
                 await this.publish(SOCIAL_MESSAGE_TOPIC, message);
             }
@@ -1862,23 +2250,67 @@ class LocalNodeService {
             this.lastBroadcastErrorAt = Date.now();
             this.lastBroadcastError = message;
             this.broadcastFailureCount += 1;
+            this.consecutiveBroadcastFailures += 1;
             await this.log("error", `Broadcast failed (reason=${reason}): ${message}`);
+            await this.maybeRecoverFromBroadcastFailure(reason, message);
             return { sent: false, reason: "publish_failed", error: message };
         }
         this.lastBroadcastAt = Date.now();
         this.broadcastCount += 1;
         this.lastBroadcastError = null;
         this.lastBroadcastErrorAt = 0;
+        this.consecutiveBroadcastFailures = 0;
         this.directory = (0, core_1.ingestProfileRecord)(this.directory, profileRecord);
         this.directory = (0, core_1.ingestPresenceRecord)(this.directory, presenceRecord);
-        for (const record of indexRecords) {
-            this.directory = (0, core_1.ingestIndexRecord)(this.directory, record);
-        }
         this.compactCacheInMemory();
         await this.persistCache();
-        await this.log("info", `Broadcast sent (${indexRecords.length} index refs, replayed_messages=${replayMessages.length}, reason=${reason})`);
+        await this.log("info", `Broadcast sent (${shouldPublishProfile ? "profile + " : ""}presence, replayed_messages=${replayMessages.length}, reason=${reason})`);
         return { sent: true, reason };
     }
+    shouldPublishProfileRecord(profileRecord, reason, now = Date.now()) {
+        if (reason !== "interval") {
+            this.lastProfileBroadcastSignature = profileRecord.profile.signature;
+            this.lastProfileBroadcastAt = now;
+            return true;
+        }
+        const signature = profileRecord.profile.signature;
+        const changedSinceLastPublish = signature !== this.lastProfileBroadcastSignature;
+        const refreshDue = now - this.lastProfileBroadcastAt >= PROFILE_RELAY_REFRESH_INTERVAL_MS;
+        if (!changedSinceLastPublish && !refreshDue) {
+            return false;
+        }
+        this.lastProfileBroadcastSignature = signature;
+        this.lastProfileBroadcastAt = now;
+        return true;
+    }
+    async maybeRecoverFromBroadcastFailure(reason, errorMessage) {
+        const recoveryThreshold = 3;
+        const recoveryCooldownMs = 60_000;
+        if (this.broadcastRecoveryInFlight) {
+            return;
+        }
+        if (this.consecutiveBroadcastFailures < recoveryThreshold) {
+            return;
+        }
+        if (Date.now() - this.lastBroadcastRecoveryAttemptAt < recoveryCooldownMs) {
+            return;
+        }
+        if (this.adapterMode !== "relay-preview" && this.adapterMode !== "webrtc-preview" && this.adapterMode !== "real-preview") {
+            return;
+        }
+        this.broadcastRecoveryInFlight = true;
+        this.lastBroadcastRecoveryAttemptAt = Date.now();
+        try {
+            await this.log("warn", `Broadcast recovery triggered after ${this.consecutiveBroadcastFailures} consecutive failures (${reason}): ${errorMessage}`);
+            await this.restartNetworkAdapter("broadcast_failure_recovery");
+        }
+        catch (recoveryError) {
+            await this.log("error", `Broadcast recovery failed: ${recoveryError instanceof Error ? recoveryError.message : String(recoveryError)}`);
+        }
+        finally {
+            this.broadcastRecoveryInFlight = false;
+        }
+    }
     async hydrateFromDisk() {
         this.initState = {
             identity_auto_created: false,
@@ -1907,6 +2339,8 @@ class LocalNodeService {
             await this.log("info", `Bound existing OpenClaw identity: ${resolvedIdentity.openclaw_source_path}`);
         }
         await this.identityRepo.set(this.identity);
+        this.privateEncryptionKeyPair = (await this.privateEncryptionKeyRepo.get()) || (0, core_1.createPrivateEncryptionKeyPair)();
+        await this.privateEncryptionKeyRepo.set(this.privateEncryptionKeyPair);
         const existingProfile = await this.profileRepo.get();
         const profileInput = (0, core_1.resolveProfileInputWithSocial)({
             socialConfig: this.socialConfig,
@@ -1914,7 +2348,10 @@ class LocalNodeService {
             existingProfile: existingProfile && existingProfile.agent_id === this.identity.agent_id ? existingProfile : null,
             rootDir: this.projectRoot,
         });
-        this.profile = (0, core_1.signProfile)(profileInput, this.identity);
+        this.profile = (0, core_1.signProfile)({
+            ...profileInput,
+            private_encryption_public_key: this.privateEncryptionKeyPair?.public_key || profileInput.private_encryption_public_key || "",
+        }, this.identity);
         if (!existingProfile || existingProfile.agent_id !== this.identity.agent_id) {
             this.initState.profile_auto_created = true;
             await this.log("info", "profile.json missing/invalid, initialized from social/default profile");
@@ -1927,6 +2364,11 @@ class LocalNodeService {
         };
         this.socialMessages = this.normalizeSocialMessages(await this.socialMessageRepo.get());
         this.socialMessageObservations = this.normalizeSocialMessageObservations(await this.socialMessageObservationRepo.get());
+        const storedPrivateMessages = await this.privateMessageRepo.get();
+        this.hydratePrivateMessageBodyCache(storedPrivateMessages);
+        this.privateMessages = this.normalizePrivateMessages(storedPrivateMessages);
+        this.privateMessageReceipts = this.normalizePrivateMessageReceipts(await this.privateMessageReceiptRepo.get());
+        await this.refreshPrivateMessagingRuntime();
         this.directory = (0, core_1.ingestProfileRecord)(this.directory, { type: "profile", profile: this.profile });
         this.compactCacheInMemory();
         await this.persistCache();
@@ -1943,7 +2385,10 @@ class LocalNodeService {
             existingProfile: this.profile,
             rootDir: this.projectRoot,
         });
-        const nextProfile = (0, core_1.signProfile)(nextProfileInput, this.identity);
+        const nextProfile = (0, core_1.signProfile)({
+            ...nextProfileInput,
+            private_encryption_public_key: this.privateEncryptionKeyPair?.public_key || nextProfileInput.private_encryption_public_key || "",
+        }, this.identity);
         this.profile = nextProfile;
         await this.profileRepo.set(nextProfile);
         this.directory = (0, core_1.ingestProfileRecord)(this.directory, { type: "profile", profile: nextProfile });
@@ -2001,7 +2446,7 @@ class LocalNodeService {
         this.socialRuntime = runtime;
         await this.socialRuntimeRepo.set(runtime);
     }
-    async onMessage(topic, data) {
+    async onMessage(topic, data, meta) {
         this.receivedCount += 1;
         this.receivedByTopic[topic] = (this.receivedByTopic[topic] ?? 0) + 1;
         this.lastMessageAt = Date.now();
@@ -2016,6 +2461,9 @@ class LocalNodeService {
                     return;
                 }
             }
+            if (meta?.peerId && record.profile.agent_id && !this.privatePeerRoutes[record.profile.agent_id]) {
+                this.privatePeerRoutes[record.profile.agent_id] = meta.peerId;
+            }
             this.directory = (0, core_1.ingestProfileRecord)(this.directory, record);
             this.compactCacheInMemory();
             await this.persistCache();
@@ -2032,6 +2480,9 @@ class LocalNodeService {
                     return;
                 }
             }
+            if (meta?.peerId && record.agent_id && !this.privatePeerRoutes[record.agent_id]) {
+                this.privatePeerRoutes[record.agent_id] = meta.peerId;
+            }
             this.directory = (0, core_1.ingestPresenceRecord)(this.directory, record);
             this.compactCacheInMemory();
             await this.persistCache();
@@ -2046,6 +2497,9 @@ class LocalNodeService {
                 await this.log("warn", `Rejected social message with invalid signature (${record.message_id.slice(0, 10)})`);
                 return;
             }
+            if (meta?.peerId && record.agent_id && !this.privatePeerRoutes[record.agent_id]) {
+                this.privatePeerRoutes[record.agent_id] = meta.peerId;
+            }
             if (this.hasSocialMessage(record.message_id)) {
                 await this.publishObservationForMessage(record);
                 return;
@@ -2081,6 +2535,39 @@ class LocalNodeService {
         this.directory = (0, core_1.dedupeIndex)(this.directory);
         await this.persistCache();
     }
+    async onDirectMessage(topic, data, meta) {
+        if (topic === PRIVATE_MESSAGE_TOPIC) {
+            const record = this.normalizeIncomingPrivateMessage(data);
+            if (!record || !(0, core_1.verifyPrivateMessage)(record)) {
+                return;
+            }
+            if (meta?.peerId && record.from_agent_id) {
+                this.privatePeerRoutes[record.from_agent_id] = meta.peerId;
+            }
+            if (record.from_agent_id && record.sender_encryption_public_key) {
+                this.privatePeerEncryptionKeys[record.from_agent_id] = record.sender_encryption_public_key;
+            }
+            if (record.to_agent_id !== this.identity?.agent_id || this.hasPrivateMessage(record.message_id)) {
+                return;
+            }
+            this.ingestPrivateMessage(record);
+            await this.persistPrivateMessages();
+            await this.sendPrivateMessageReceipt(record, meta?.peerId);
+            return;
+        }
+        const receipt = this.normalizeIncomingPrivateMessageReceipt(data);
+        if (!receipt || !(0, core_1.verifyPrivateMessageReceipt)(receipt)) {
+            return;
+        }
+        if (meta?.peerId && receipt.from_agent_id) {
+            this.privatePeerRoutes[receipt.from_agent_id] = meta.peerId;
+        }
+        if (receipt.to_agent_id !== this.identity?.agent_id) {
+            return;
+        }
+        this.ingestPrivateMessageReceipt(receipt);
+        await this.persistPrivateMessageReceipts();
+    }
     startBroadcastLoop() {
         if (this.broadcaster) {
             clearInterval(this.broadcaster);
@@ -2101,21 +2588,35 @@ class LocalNodeService {
         if (this.subscriptionsBound) {
             return;
         }
-        this.network.subscribe("profile", (data) => {
-            this.onMessage("profile", data);
+        this.network.subscribe("profile", (data, meta) => {
+            this.onMessage("profile", data, meta);
         });
-        this.network.subscribe("presence", (data) => {
-            this.onMessage("presence", data);
+        this.network.subscribe("presence", (data, meta) => {
+            this.onMessage("presence", data, meta);
         });
-        this.network.subscribe("index", (data) => {
-            this.onMessage("index", data);
+        this.network.subscribe("index", (data, meta) => {
+            this.onMessage("index", data, meta);
         });
-        this.network.subscribe(SOCIAL_MESSAGE_TOPIC, (data) => {
-            this.onMessage(SOCIAL_MESSAGE_TOPIC, data);
+        this.network.subscribe(SOCIAL_MESSAGE_TOPIC, (data, meta) => {
+            this.onMessage(SOCIAL_MESSAGE_TOPIC, data, meta);
         });
-        this.network.subscribe(SOCIAL_MESSAGE_OBSERVATION_TOPIC, (data) => {
-            this.onMessage(SOCIAL_MESSAGE_OBSERVATION_TOPIC, data);
+        this.network.subscribe(SOCIAL_MESSAGE_OBSERVATION_TOPIC, (data, meta) => {
+            this.onMessage(SOCIAL_MESSAGE_OBSERVATION_TOPIC, data, meta);
         });
+        this.network.subscribe(PRIVATE_MESSAGE_TOPIC, (data, meta) => {
+            this.onDirectMessage(PRIVATE_MESSAGE_TOPIC, data, meta);
+        });
+        this.network.subscribe(PRIVATE_MESSAGE_RECEIPT_TOPIC, (data, meta) => {
+            this.onDirectMessage(PRIVATE_MESSAGE_RECEIPT_TOPIC, data, meta);
+        });
+        if (typeof this.network.subscribeDirect === "function") {
+            this.network.subscribeDirect(PRIVATE_MESSAGE_TOPIC, (data, meta) => {
+                this.onDirectMessage(PRIVATE_MESSAGE_TOPIC, data, meta);
+            });
+            this.network.subscribeDirect(PRIVATE_MESSAGE_RECEIPT_TOPIC, (data, meta) => {
+                this.onDirectMessage(PRIVATE_MESSAGE_RECEIPT_TOPIC, data, meta);
+            });
+        }
         this.subscriptionsBound = true;
     }
     buildNetworkAdapter() {
@@ -2255,9 +2756,58 @@ class LocalNodeService {
         }, delayMs);
         this.networkReconnectDelayMs = Math.min(30_000, Math.max(5_000, Math.floor(delayMs * 1.5)));
     }
+    pruneRemoteProfilesInMemory(now = Date.now()) {
+        if (!Number.isFinite(DIRECTORY_REMOTE_PROFILE_SOFT_LIMIT) || DIRECTORY_REMOTE_PROFILE_SOFT_LIMIT <= 0) {
+            return 0;
+        }
+        const selfAgentId = this.profile?.agent_id || this.identity?.agent_id || "";
+        const remoteProfiles = Object.values(this.directory.profiles).filter((profile) => profile.agent_id !== selfAgentId);
+        if (remoteProfiles.length <= DIRECTORY_REMOTE_PROFILE_SOFT_LIMIT) {
+            return 0;
+        }
+        const onlineRemoteProfiles = remoteProfiles.filter((profile) => (0, core_1.isAgentOnline)(this.directory.presence[profile.agent_id], now, PRESENCE_TTL_MS));
+        const offlineRemoteProfiles = remoteProfiles
+            .filter((profile) => !(0, core_1.isAgentOnline)(this.directory.presence[profile.agent_id], now, PRESENCE_TTL_MS))
+            .sort((a, b) => (b.updated_at || 0) - (a.updated_at || 0));
+        const keepOfflineCount = Math.max(0, DIRECTORY_REMOTE_PROFILE_SOFT_LIMIT - onlineRemoteProfiles.length);
+        const keptRemoteProfiles = [
+            ...onlineRemoteProfiles,
+            ...offlineRemoteProfiles.slice(0, keepOfflineCount),
+        ];
+        const keptRemoteIds = new Set(keptRemoteProfiles.map((profile) => profile.agent_id));
+        const removedIds = remoteProfiles
+            .map((profile) => profile.agent_id)
+            .filter((agentId) => !keptRemoteIds.has(agentId));
+        if (removedIds.length === 0) {
+            return 0;
+        }
+        const next = (0, core_1.createEmptyDirectoryState)();
+        const selfProfile = selfAgentId ? this.directory.profiles[selfAgentId] : null;
+        if (selfProfile) {
+            next.profiles[selfAgentId] = selfProfile;
+            const selfPresence = this.directory.presence[selfAgentId];
+            if (typeof selfPresence === "number" && Number.isFinite(selfPresence)) {
+                next.presence[selfAgentId] = selfPresence;
+            }
+            const rebuilt = (0, core_1.rebuildIndexForProfile)(next, selfProfile);
+            next.index = rebuilt.index;
+        }
+        for (const profile of keptRemoteProfiles) {
+            next.profiles[profile.agent_id] = profile;
+            const seenAt = this.directory.presence[profile.agent_id];
+            if (typeof seenAt === "number" && Number.isFinite(seenAt)) {
+                next.presence[profile.agent_id] = seenAt;
+            }
+            const rebuilt = (0, core_1.rebuildIndexForProfile)(next, profile);
+            next.index = rebuilt.index;
+        }
+        this.directory = (0, core_1.dedupeIndex)(next);
+        return removedIds.length;
+    }
     compactCacheInMemory() {
         const cleaned = (0, core_1.cleanupExpiredPresence)(this.directory, Date.now(), PRESENCE_TTL_MS);
         this.directory = (0, core_1.dedupeIndex)(cleaned.state);
+        this.pruneRemoteProfilesInMemory();
         return cleaned.removed;
     }
     async publish(topic, data) {
@@ -2288,6 +2838,82 @@ class LocalNodeService {
     async persistSocialMessageObservations() {
         await this.socialMessageObservationRepo.set(this.socialMessageObservations);
     }
+    async persistPrivateMessages() {
+        this.privateMessagesPersistDirty = true;
+        if (this.privateMessagesPersistTimer) {
+            return;
+        }
+        this.privateMessagesPersistTimer = setTimeout(() => {
+            this.flushPrivateMessagesPersist().catch(() => { });
+        }, PRIVATE_MESSAGE_PERSIST_DEBOUNCE_MS);
+    }
+    async persistPrivateMessageReceipts() {
+        this.privateMessageReceiptsPersistDirty = true;
+        if (this.privateMessageReceiptsPersistTimer) {
+            return;
+        }
+        this.privateMessageReceiptsPersistTimer = setTimeout(() => {
+            this.flushPrivateMessageReceiptsPersist().catch(() => { });
+        }, PRIVATE_MESSAGE_PERSIST_DEBOUNCE_MS);
+    }
+    async flushPrivatePersistence() {
+        await Promise.all([
+            this.flushPrivateMessagesPersist(),
+            this.flushPrivateMessageReceiptsPersist(),
+        ]);
+    }
+    async flushPrivateMessagesPersist() {
+        if (this.privateMessagesPersistTimer) {
+            clearTimeout(this.privateMessagesPersistTimer);
+            this.privateMessagesPersistTimer = null;
+        }
+        if (!this.privateMessagesPersistDirty) {
+            return;
+        }
+        this.privateMessagesPersistDirty = false;
+        await this.privateMessageRepo.set(this.buildPersistedPrivateMessages());
+    }
+    hydratePrivateMessageBodyCache(items) {
+        if (!Array.isArray(items)) {
+            return;
+        }
+        for (const item of items) {
+            if (typeof item !== "object" || item === null) {
+                continue;
+            }
+            const record = item;
+            const messageId = String(record.message_id || "").trim();
+            const localPlaintext = typeof record.local_plaintext === "string" ? record.local_plaintext : "";
+            if (messageId && localPlaintext) {
+                this.privateMessageBodyCache.set(messageId, localPlaintext);
+            }
+        }
+    }
+    buildPersistedPrivateMessages() {
+        return this.privateMessages.map((message) => {
+            const localPlaintext = message.from_agent_id === this.identity?.agent_id
+                ? this.privateMessageBodyCache.get(message.message_id) || ""
+                : "";
+            if (!localPlaintext) {
+                return { ...message };
+            }
+            return {
+                ...message,
+                local_plaintext: localPlaintext,
+            };
+        });
+    }
+    async flushPrivateMessageReceiptsPersist() {
+        if (this.privateMessageReceiptsPersistTimer) {
+            clearTimeout(this.privateMessageReceiptsPersistTimer);
+            this.privateMessageReceiptsPersistTimer = null;
+        }
+        if (!this.privateMessageReceiptsPersistDirty) {
+            return;
+        }
+        this.privateMessageReceiptsPersistDirty = false;
+        await this.privateMessageReceiptRepo.set(this.privateMessageReceipts);
+    }
     async log(level, message) {
         await this.logRepo.append({
             level,
@@ -2334,6 +2960,7 @@ class LocalNodeService {
             (0, core_1.verifyProfile)(profile, selfPublicKey));
         return (0, core_1.buildPublicProfileSummary)({
             profile,
+            is_self: isSelf,
             online,
             last_seen_at: lastSeenAt || null,
             network_mode: isSelf ? this.networkMode : "unknown",
@@ -2379,6 +3006,7 @@ class LocalNodeService {
                     updated_at: message.created_at,
                     signature: "",
                 },
+                is_self: message.agent_id === this.identity?.agent_id,
                 online: false,
                 last_seen_at: null,
                 network_mode: "unknown",
@@ -2408,6 +3036,45 @@ class LocalNodeService {
         const digest = (0, crypto_1.createHash)("sha256").update(publicKey, "utf8").digest("hex");
         return `${digest.slice(0, 12)}:${digest.slice(-8)}`;
     }
+    buildPrivateMessagingRuntimeState() {
+        const warnings = [];
+        const keypair = this.privateEncryptionKeyPair;
+        const selfSentMessages = this.privateMessages.filter((message) => message.from_agent_id === this.identity?.agent_id);
+        let cachedPlaintextCount = 0;
+        for (const message of selfSentMessages) {
+            if (this.privateMessageBodyCache.get(message.message_id)) {
+                cachedPlaintextCount += 1;
+            }
+        }
+        if (!keypair?.public_key || !keypair?.private_key) {
+            warnings.push("missing_private_encryption_keypair");
+        }
+        if (selfSentMessages.length > 0 && cachedPlaintextCount === 0) {
+            warnings.push("missing_local_plaintext_cache_for_self_messages");
+        }
+        if (selfSentMessages.length > 0 && cachedPlaintextCount < selfSentMessages.length) {
+            warnings.push("partial_local_plaintext_cache_for_self_messages");
+        }
+        return {
+            schema_version: 1,
+            app_version: this.appVersion,
+            last_started_at: Date.now(),
+            encryption_public_key: keypair?.public_key || "",
+            encryption_public_key_fingerprint: keypair?.public_key ? this.fingerprintPublicKey(keypair.public_key) : "",
+            message_count: this.privateMessages.length,
+            self_sent_count: selfSentMessages.length,
+            cached_plaintext_count: cachedPlaintextCount,
+            warnings,
+        };
+    }
+    async refreshPrivateMessagingRuntime() {
+        const runtime = this.buildPrivateMessagingRuntimeState();
+        this.privateMessagingRuntime = runtime;
+        await this.privateMessagingRuntimeRepo.set(runtime);
+        for (const warning of runtime.warnings) {
+            await this.log("warn", `Private messaging startup check: ${warning}`);
+        }
+    }
     getOnboardingSummary() {
         const summary = this.getIntegrationSummary();
         const publicEnabled = Boolean(this.profile?.public_enabled);
@@ -2566,6 +3233,32 @@ class LocalNodeService {
             .join("\n")
             .trim();
     }
+    buildPrivateConversationId(leftAgentId, rightAgentId) {
+        return [String(leftAgentId || "").trim(), String(rightAgentId || "").trim()].sort().join(":");
+    }
+    decryptPrivateMessageBody(message) {
+        const cached = this.privateMessageBodyCache.get(message.message_id);
+        if (typeof cached === "string") {
+            return cached;
+        }
+        if (!this.privateEncryptionKeyPair) {
+            return "[encrypted]";
+        }
+        const decrypted = (0, core_1.decryptPrivatePayload)({
+            ciphertext: message.ciphertext,
+            nonce: message.nonce,
+            sender_encryption_public_key: message.sender_encryption_public_key,
+            recipient_private_key: this.privateEncryptionKeyPair.private_key,
+        }) || "[encrypted]";
+        this.privateMessageBodyCache.set(message.message_id, decrypted);
+        if (this.privateMessageBodyCache.size > PRIVATE_MESSAGE_HISTORY_LIMIT * 2) {
+            const firstKey = this.privateMessageBodyCache.keys().next().value;
+            if (firstKey) {
+                this.privateMessageBodyCache.delete(firstKey);
+            }
+        }
+        return decrypted;
+    }
     normalizeWindowTimestamps(timestamps, windowMs, now = Date.now()) {
         return timestamps.filter((timestamp) => now - timestamp <= windowMs);
     }
@@ -2586,16 +3279,30 @@ class LocalNodeService {
     hasSocialMessage(messageId) {
         return this.socialMessages.some((item) => item.message_id === messageId);
     }
-    getReplayableSelfSocialMessages(now = Date.now()) {
+    getReplayableSelfSocialMessages(reason = "manual", now = Date.now()) {
         const maxCount = Math.max(0, SOCIAL_MESSAGE_REPLAY_MAX_PER_BROADCAST);
         if (!this.identity || maxCount === 0) {
             return [];
         }
-        return this.socialMessages
+        const replayable = this.socialMessages
             .filter((item) => (item.agent_id === this.identity?.agent_id &&
             now - item.created_at <= SOCIAL_MESSAGE_REPLAY_WINDOW_MS))
             .sort((a, b) => a.created_at - b.created_at)
             .slice(-maxCount);
+        if (!replayable.length) {
+            this.lastReplayBroadcastSignature = "";
+            return [];
+        }
+        const signature = replayable.map((item) => item.message_id).join(",");
+        const isIntervalReplay = reason === "interval";
+        const changedSinceLastReplay = signature !== this.lastReplayBroadcastSignature;
+        const refreshDue = now - this.lastReplayBroadcastAt >= SOCIAL_MESSAGE_REPLAY_REFRESH_INTERVAL_MS;
+        if (isIntervalReplay && !changedSinceLastReplay && !refreshDue) {
+            return [];
+        }
+        this.lastReplayBroadcastSignature = signature;
+        this.lastReplayBroadcastAt = now;
+        return replayable;
     }
     hasRecentDuplicateMessage(agentId, body, topic, now = Date.now()) {
         return this.socialMessages.some((item) => (item.agent_id === agentId &&
@@ -2659,6 +3366,181 @@ class LocalNodeService {
         await this.publish(SOCIAL_MESSAGE_OBSERVATION_TOPIC, observation);
         await this.persistSocialMessageObservations();
     }
+    async sendPrivateMessageReceipt(message, replyPeerId) {
+        if (!this.identity || typeof this.network.sendDirect !== "function" || !replyPeerId) {
+            return;
+        }
+        const receipt = (0, core_1.signPrivateMessageReceipt)({
+            identity: this.identity,
+            receipt_id: (0, crypto_1.createHash)("sha256").update(`${message.message_id}:${this.identity.agent_id}:${Date.now()}`, "utf8").digest("hex"),
+            message_id: message.message_id,
+            conversation_id: message.conversation_id,
+            to_agent_id: message.from_agent_id,
+            status: "received",
+            created_at: Date.now(),
+        });
+        this.ingestPrivateMessageReceipt(receipt);
+        try {
+            await this.network.sendDirect(replyPeerId, PRIVATE_MESSAGE_RECEIPT_TOPIC, receipt);
+            await this.publish(PRIVATE_MESSAGE_RECEIPT_TOPIC, receipt);
+        }
+        catch {
+            await this.publish(PRIVATE_MESSAGE_RECEIPT_TOPIC, receipt);
+        }
+        await this.persistPrivateMessageReceipts();
+    }
+    normalizeIncomingPrivateMessage(value) {
+        if (typeof value !== "object" || value === null) {
+            return null;
+        }
+        const record = value;
+        const createdAt = Number(record.created_at || 0);
+        const fromAgentId = String(record.from_agent_id || "").trim();
+        const toAgentId = String(record.to_agent_id || "").trim();
+        const conversationId = String(record.conversation_id || "").trim();
+        if (record.type !== PRIVATE_MESSAGE_TOPIC ||
+            !String(record.message_id || "").trim() ||
+            !conversationId ||
+            !fromAgentId ||
+            !toAgentId ||
+            !String(record.sender_public_key || "").trim() ||
+            !String(record.sender_encryption_public_key || "").trim() ||
+            !String(record.recipient_encryption_public_key || "").trim() ||
+            !String(record.ciphertext || "").trim() ||
+            !String(record.nonce || "").trim() ||
+            String(record.cipher_scheme || "") !== "nacl-box-v1" ||
+            !String(record.signature || "").trim() ||
+            !Number.isFinite(createdAt)) {
+            return null;
+        }
+        if (fromAgentId === toAgentId) {
+            return null;
+        }
+        if (conversationId !== this.buildPrivateConversationId(fromAgentId, toAgentId)) {
+            return null;
+        }
+        return {
+            type: PRIVATE_MESSAGE_TOPIC,
+            message_id: String(record.message_id).trim(),
+            conversation_id: conversationId,
+            from_agent_id: fromAgentId,
+            to_agent_id: toAgentId,
+            sender_public_key: String(record.sender_public_key).trim(),
+            sender_encryption_public_key: String(record.sender_encryption_public_key).trim(),
+            recipient_encryption_public_key: String(record.recipient_encryption_public_key).trim(),
+            cipher_scheme: "nacl-box-v1",
+            ciphertext: String(record.ciphertext).trim(),
+            nonce: String(record.nonce).trim(),
+            created_at: createdAt,
+            signature: String(record.signature).trim(),
+        };
+    }
+    normalizePrivateMessages(items) {
+        if (!Array.isArray(items)) {
+            return [];
+        }
+        const deduped = new Set();
+        return items
+            .map((item) => this.normalizeIncomingPrivateMessage(item))
+            .filter((item) => Boolean(item))
+            .sort((a, b) => a.created_at - b.created_at)
+            .filter((item) => {
+            if (deduped.has(item.message_id)) {
+                return false;
+            }
+            deduped.add(item.message_id);
+            return true;
+        })
+            .slice(-PRIVATE_MESSAGE_HISTORY_LIMIT);
+    }
+    normalizeIncomingPrivateMessageReceipt(value) {
+        if (typeof value !== "object" || value === null) {
+            return null;
+        }
+        const record = value;
+        const createdAt = Number(record.created_at || 0);
+        const status = String(record.status || "").trim();
+        if (record.type !== PRIVATE_MESSAGE_RECEIPT_TOPIC ||
+            !String(record.receipt_id || "").trim() ||
+            !String(record.message_id || "").trim() ||
+            !String(record.conversation_id || "").trim() ||
+            !String(record.from_agent_id || "").trim() ||
+            !String(record.to_agent_id || "").trim() ||
+            !String(record.sender_public_key || "").trim() ||
+            (status !== "received" && status !== "read") ||
+            !String(record.signature || "").trim() ||
+            !Number.isFinite(createdAt)) {
+            return null;
+        }
+        return {
+            type: PRIVATE_MESSAGE_RECEIPT_TOPIC,
+            receipt_id: String(record.receipt_id).trim(),
+            message_id: String(record.message_id).trim(),
+            conversation_id: String(record.conversation_id).trim(),
+            from_agent_id: String(record.from_agent_id).trim(),
+            to_agent_id: String(record.to_agent_id).trim(),
+            sender_public_key: String(record.sender_public_key).trim(),
+            status: status,
+            created_at: createdAt,
+            signature: String(record.signature).trim(),
+        };
+    }
+    normalizePrivateMessageReceipts(items) {
+        if (!Array.isArray(items)) {
+            return [];
+        }
+        const deduped = new Set();
+        return items
+            .map((item) => this.normalizeIncomingPrivateMessageReceipt(item))
+            .filter((item) => Boolean(item))
+            .sort((a, b) => a.created_at - b.created_at)
+            .filter((item) => {
+            if (deduped.has(item.receipt_id)) {
+                return false;
+            }
+            deduped.add(item.receipt_id);
+            return true;
+        })
+            .slice(-PRIVATE_MESSAGE_RECEIPT_HISTORY_LIMIT);
+    }
+    hasPrivateMessage(messageId) {
+        return this.privateMessages.some((item) => item.message_id === messageId);
+    }
+    ingestPrivateMessage(message) {
+        const existing = this.privateMessages.findIndex((item) => item.message_id === message.message_id);
+        if (existing >= 0) {
+            this.privateMessages[existing] = message;
+        }
+        else {
+            this.privateMessages.push(message);
+        }
+        this.privateMessages = this.normalizePrivateMessages(this.privateMessages);
+        const validIds = new Set(this.privateMessages.map((item) => item.message_id));
+        if (message.from_agent_id !== this.identity?.agent_id) {
+            this.privateMessageBodyCache.delete(message.message_id);
+        }
+        for (const key of Array.from(this.privateMessageBodyCache.keys())) {
+            if (!validIds.has(key)) {
+                this.privateMessageBodyCache.delete(key);
+            }
+        }
+        for (const key of Array.from(this.privateMessageDeliveryStatusCache.keys())) {
+            if (!validIds.has(key)) {
+                this.privateMessageDeliveryStatusCache.delete(key);
+            }
+        }
+    }
+    ingestPrivateMessageReceipt(receipt) {
+        const existing = this.privateMessageReceipts.findIndex((item) => item.receipt_id === receipt.receipt_id);
+        if (existing >= 0) {
+            this.privateMessageReceipts[existing] = receipt;
+        }
+        else {
+            this.privateMessageReceipts.push(receipt);
+        }
+        this.privateMessageReceipts = this.normalizePrivateMessageReceipts(this.privateMessageReceipts);
+        this.privateMessageDeliveryStatusCache.set(receipt.message_id, receipt.status);
+    }
     normalizeIncomingSocialMessage(value) {
         if (typeof value !== "object" || value === null) {
             return null;
@@ -2905,6 +3787,36 @@ async function main() {
     app.get("/api/runtime/paths", (_req, res) => {
         sendOk(res, node.getRuntimePaths());
     });
+    app.get("/api/app/update-status", (_req, res) => {
+        sendOk(res, node.getAppUpdateStatus());
+    });
+    app.post("/api/app/update", asyncRoute(async (_req, res) => {
+        const status = node.getAppUpdateStatus();
+        if (!status.update_available || !status.latest_version) {
+            sendOk(res, {
+                started: false,
+                current_version: status.current_version,
+                latest_version: status.latest_version,
+                platform: status.platform,
+                reason: status.check_error || "already_current",
+            }, { message: "Already on the latest version" });
+            return;
+        }
+        sendOk(res, {
+            started: true,
+            current_version: status.current_version,
+            target_version: status.latest_version,
+            platform: status.platform,
+        }, { message: `Updating to ${status.latest_version}` });
+        setTimeout(() => {
+            try {
+                node.startAppUpdate();
+            }
+            catch {
+                // best effort after response has been sent
+            }
+        }, 1200);
+    }));
     app.put("/api/profile", asyncRoute(async (req, res) => {
         const body = req.body;
         const tags = Array.isArray(body.tags)
@@ -3003,6 +3915,31 @@ async function main() {
         const agentId = String(req.query.agent_id ?? "").trim();
         sendOk(res, node.getSocialMessages(limit, { agent_id: agentId || null }));
     });
+    app.get("/api/private/state", (_req, res) => {
+        sendOk(res, node.getPrivateMessagingState());
+    });
+    app.get("/api/private/conversations", (_req, res) => {
+        sendOk(res, node.getPrivateConversations());
+    });
+    app.get("/api/private/messages", (req, res) => {
+        const conversationId = String(req.query.conversation_id ?? "").trim();
+        const limit = Number(req.query.limit ?? PRIVATE_MESSAGE_QUERY_LIMIT);
+        sendOk(res, node.getPrivateMessages(conversationId, limit));
+    });
+    app.post("/api/private/messages/send", asyncRoute(async (req, res) => {
+        const result = await node.sendPrivateMessage({
+            to_agent_id: String(req.body?.to_agent_id || ""),
+            recipient_encryption_public_key: String(req.body?.recipient_encryption_public_key || ""),
+            body: String(req.body?.body || ""),
+        });
+        sendOk(res, result, {
+            message: result.sent
+                ? (result.reason === "direct-sent"
+                    ? "Private message sent directly"
+                    : "Private message sent via encrypted fallback")
+                : `Private message skipped: ${result.reason}`,
+        });
+    }));
     app.get("/api/openclaw/bridge", (_req, res) => {
         sendOk(res, node.getOpenClawBridgeStatus());
     });