activeclaw 2026.2.12 → 2026.2.13

package/dist/{config-DH9TLUNc.js → config-aFQssWKX.js}

@@ -1,11 +1,11 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { a as resolveCanonicalConfigPath, c as resolveDefaultConfigCandidates, d as resolveIsNixMode, f as resolveLegacyStateDirs, g as resolveStateDir, h as resolveOAuthPath, i as isNixMode, l as resolveGatewayLockDir, m as resolveOAuthDir, n as DEFAULT_GATEWAY_PORT, o as resolveConfigPath, p as resolveNewStateDir, r as STATE_DIR, s as resolveConfigPathCandidate, t as CONFIG_PATH, u as resolveGatewayPort, y as resolveRequiredHomeDir } from "./paths-DVBShlw6.js";
-import { S as normalizeChatChannelId, p as CHANNEL_IDS } from "./subsystem-Bv7dGhES.js";
-import { _ as resolveConfigDir, b as resolveUserPath, d as isPlainObject, f as isRecord } from "./utils-BHPdZE4h.js";
+import { S as normalizeChatChannelId, p as CHANNEL_IDS } from "./subsystem-BoExtIHo.js";
+import { _ as resolveConfigDir, b as resolveUserPath, d as isPlainObject, f as isRecord } from "./utils-Cd9QdCHh.js";
 import { l as normalizeAgentId, n as DEFAULT_AGENT_ID } from "./session-key-BWxPj0z_.js";
-import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope---6LLHj0.js";
-import { Et as DEFAULT_CONTEXT_TOKENS, J as shouldDeferShellEnvFallback, K as loadShellEnvFallback, Y as shouldEnableShellEnvFallback, c as parseModelRef, q as resolveShellEnvFallbackTimeoutMs } from "./model-selection-unMJyUIE.js";
-import { d as resolveMemorySlotDecision, l as normalizePluginsConfig, t as loadPluginManifestRegistry, u as resolveEnableState } from "./manifest-registry-DFckk-L8.js";
+import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-CQCus0rI.js";
+import { Et as DEFAULT_CONTEXT_TOKENS, J as shouldDeferShellEnvFallback, K as loadShellEnvFallback, Y as shouldEnableShellEnvFallback, c as parseModelRef, q as resolveShellEnvFallbackTimeoutMs } from "./model-selection-BLuqsGVB.js";
+import { d as resolveMemorySlotDecision, l as normalizePluginsConfig, t as loadPluginManifestRegistry, u as resolveEnableState } from "./manifest-registry-CQhdnDBZ.js";
 import { createRequire } from "node:module";
 import fs from "node:fs";
 import os from "node:os";
@@ -2763,7 +2763,8 @@ const BindingsSchema = z.array(z.object({
 			id: z.string()
 		}).strict().optional(),
 		guildId: z.string().optional(),
-		teamId: z.string().optional()
+		teamId: z.string().optional(),
+		roles: z.array(z.string()).optional()
 	}).strict()
 }).strict()).optional();
 const BroadcastStrategySchema = z.enum(["parallel", "sequential"]);
@@ -3149,6 +3150,7 @@ const DiscordGuildChannelSchema = z.object({
 	skills: z.array(z.string()).optional(),
 	enabled: z.boolean().optional(),
 	users: z.array(z.union([z.string(), z.number()])).optional(),
+	roles: z.array(z.union([z.string(), z.number()])).optional(),
 	systemPrompt: z.string().optional(),
 	includeThreadStarter: z.boolean().optional(),
 	autoThread: z.boolean().optional()
@@ -3165,6 +3167,7 @@ const DiscordGuildSchema = z.object({
 		"allowlist"
 	]).optional(),
 	users: z.array(z.union([z.string(), z.number()])).optional(),
+	roles: z.array(z.union([z.string(), z.number()])).optional(),
 	channels: z.record(z.string(), DiscordGuildChannelSchema.optional()).optional()
 }).strict();
 const DiscordAccountSchema = z.object({
@@ -4188,6 +4191,9 @@ const OpenClawSchema = z.object({
 		enabled: z.boolean().optional(),
 		path: z.string().optional(),
 		token: z.string().optional(),
+		defaultSessionKey: z.string().optional(),
+		allowRequestSessionKey: z.boolean().optional(),
+		allowedSessionKeyPrefixes: z.array(z.string()).optional(),
 		allowedAgentIds: z.array(z.string()).optional(),
 		maxBodyBytes: z.number().int().positive().optional(),
 		presets: z.array(z.string()).optional(),
@@ -4293,8 +4299,10 @@ const OpenClawSchema = z.object({
 			responses: z.object({
 				enabled: z.boolean().optional(),
 				maxBodyBytes: z.number().int().positive().optional(),
+				maxUrlParts: z.number().int().nonnegative().optional(),
 				files: z.object({
 					allowUrl: z.boolean().optional(),
+					urlAllowlist: z.array(z.string()).optional(),
 					allowedMimes: z.array(z.string()).optional(),
 					maxBytes: z.number().int().positive().optional(),
 					maxChars: z.number().int().positive().optional(),
@@ -4308,6 +4316,7 @@ const OpenClawSchema = z.object({
 				}).strict().optional(),
 				images: z.object({
 					allowUrl: z.boolean().optional(),
+					urlAllowlist: z.array(z.string()).optional(),
 					allowedMimes: z.array(z.string()).optional(),
 					maxBytes: z.number().int().positive().optional(),
 					maxRedirects: z.number().int().nonnegative().optional(),

package/dist/{config-guard-DPxxY1iw.js → config-guard-CljaSxJd.js}

@@ -1,46 +1,46 @@
-import { $ as DEFAULT_CHAT_CHANNEL, B as resolveConfigPath, C as setVerbose, D as colorize, J as resolveOAuthDir, L as STATE_DIR, O as isRich, R as isNixMode, W as resolveGatewayPort, X as resolveStateDir, a as parseBooleanValue, f as visibleWidth, k as theme, m as restoreTerminalState, nt as getChatChannelMeta, ot as normalizeChatChannelId, p as defaultRuntime, v as danger, y as info } from "./entry.js";
-import { Ct as DEFAULT_CONTEXT_TOKENS, N as resolveConfiguredModelRef, Tt as DEFAULT_PROVIDER, _ as ensureAuthProfileStore, b as resolveAuthStorePath, ft as normalizeOptionalSecretInput, g as upsertAuthProfile, k as normalizeProviderId, n as resolveAuthProfileOrder, pt as normalizeSecretInput, s as resolveApiKeyForProfile, ut as resolveEnvApiKey, wt as DEFAULT_MODEL } from "./auth-profiles-CcJ3hrog.js";
-import { t as formatCliCommand } from "./command-format-ayFsmwwz.js";
+import { A as theme, G as resolveGatewayPort, O as colorize, R as STATE_DIR, V as resolveConfigPath, Y as resolveOAuthDir, Z as resolveStateDir, a as parseBooleanValue, ct as normalizeChatChannelId, f as visibleWidth, it as getChatChannelMeta, k as isRich, m as restoreTerminalState, p as defaultRuntime, tt as DEFAULT_CHAT_CHANNEL, v as danger, w as setVerbose, y as info, z as isNixMode } from "./entry.js";
+import { Ct as DEFAULT_CONTEXT_TOKENS, N as resolveConfiguredModelRef, Tt as DEFAULT_PROVIDER, _ as ensureAuthProfileStore, b as resolveAuthStorePath, ft as normalizeOptionalSecretInput, g as upsertAuthProfile, k as normalizeProviderId, n as resolveAuthProfileOrder, pt as normalizeSecretInput, s as resolveApiKeyForProfile, ut as resolveEnvApiKey, wt as DEFAULT_MODEL } from "./auth-profiles-ByNs3eEm.js";
+import { t as formatCliCommand } from "./command-format-Bxe0mWee.js";
 import { l as normalizeAgentId, n as DEFAULT_AGENT_ID, t as DEFAULT_ACCOUNT_ID } from "./session-key-DVvxnFKg.js";
-import { S as shortenHomePath, _ as resolveHomeDir, x as shortenHomeInString, y as resolveUserPath } from "./utils-Dk86IbEs.js";
-import { t as runCommandWithTimeout } from "./exec-B8JKbXKW.js";
-import { c as resolveDefaultAgentId, f as DEFAULT_AGENT_WORKSPACE_DIR, h as DEFAULT_IDENTITY_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, w as resolveDefaultAgentWorkspaceDir, x as ensureAgentWorkspace } from "./agent-scope-RCSw6gHy.js";
-import { c as writeConfigFile, g as parseDurationMs, i as loadConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-B7sno9eI.js";
-import { n as movePathToTrash } from "./server-context-fX4xiYRh.js";
-import { i as randomIdempotencyKey, n as callGateway } from "./call-Yxns4CVq.js";
-import { h as GATEWAY_CLIENT_NAMES, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES } from "./message-channel-BlgPSDAh.js";
-import { t as formatDocsLink } from "./links-7M-j83As.js";
-import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-3GyCj5KL.js";
-import { D as runMemoryStatus, E as registerMemoryCli, En as CHANNEL_MESSAGE_ACTION_NAMES, Xn as CHANNEL_TARGET_DESCRIPTION, Yn as CHANNEL_TARGETS_DESCRIPTION, _ as randomToken, a as applyWizardMetadata, c as ensureWorkspaceAndSessions, d as handleReset, f as moveToTrash, fn as resolveCommitHash, gn as runMessageAction, i as DEFAULT_WORKSPACE, l as formatControlUiSshHint, m as openUrl, pn as lookupContextTokens, s as detectBrowserOpenSupport, v as resolveControlUiLinks, wn as formatTargetDisplay, x as waitForGatewayReachable } from "./loader-Caow9TPA.js";
-import { n as withProgress } from "./progress-Da1ehW-x.js";
-import { n as stylePromptMessage, r as stylePromptTitle, t as stylePromptHint } from "./prompt-style-Dc0C5HC9.js";
+import { S as shortenHomePath, _ as resolveHomeDir, x as shortenHomeInString, y as resolveUserPath } from "./utils-BLJAc3ZV.js";
+import { t as runCommandWithTimeout } from "./exec-CACT5OAW.js";
+import { c as resolveDefaultAgentId, f as DEFAULT_AGENT_WORKSPACE_DIR, h as DEFAULT_IDENTITY_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, w as resolveDefaultAgentWorkspaceDir, x as ensureAgentWorkspace } from "./agent-scope-CsRbLH4l.js";
+import { c as writeConfigFile, g as parseDurationMs, i as loadConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-Bdhomfei.js";
+import { n as movePathToTrash } from "./server-context-BGpGs3qd.js";
+import { i as randomIdempotencyKey, n as callGateway } from "./call-DVYCIV8m.js";
+import { h as GATEWAY_CLIENT_NAMES, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES } from "./message-channel-C_MmebBt.js";
+import { t as formatDocsLink } from "./links-B8LAzWwg.js";
+import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-4Hqd1WGf.js";
+import { D as runMemoryStatus, E as registerMemoryCli, Gn as CHANNEL_TARGETS_DESCRIPTION, Kn as CHANNEL_TARGET_DESCRIPTION, Sn as CHANNEL_MESSAGE_ACTION_NAMES, _ as randomToken, a as applyWizardMetadata, bn as formatTargetDisplay, c as ensureWorkspaceAndSessions, cn as resolveCommitHash, d as handleReset, f as moveToTrash, fn as runMessageAction, i as DEFAULT_WORKSPACE, l as formatControlUiSshHint, ln as lookupContextTokens, m as openUrl, s as detectBrowserOpenSupport, v as resolveControlUiLinks, x as waitForGatewayReachable } from "./loader-KjT074JR.js";
+import { n as withProgress } from "./progress-DWqhRakV.js";
+import { n as stylePromptMessage, r as stylePromptTitle, t as stylePromptHint } from "./prompt-style-BFH5D5LN.js";
 import { t as WizardCancelledError } from "./prompts-CXLLIBwP.js";
-import { t as createClackPrompter } from "./clack-prompter-DuBVnTKy.js";
+import { t as createClackPrompter } from "./clack-prompter-ChCGXfyt.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-DdwqKAAS.js";
-import { n as setupChannels } from "./onboard-channels-DMcOT0dj.js";
-import { a as resolveSessionTranscriptsDirForAgent, i as resolveSessionTranscriptsDir, o as resolveStorePath } from "./paths-IivnSNkP.js";
-import { d as loadSessionStore } from "./sandbox-B0K9e6Fw.js";
+import { n as setupChannels } from "./onboard-channels-C501x8GI.js";
+import { a as resolveSessionTranscriptsDir, o as resolveSessionTranscriptsDirForAgent, s as resolveStorePath } from "./paths-DLINmNFQ.js";
+import { d as loadSessionStore } from "./sandbox-BKYnhYQH.js";
 import { n as formatTimeAgo } from "./format-relative-CZOlQ2pA.js";
 import { n as runCommandWithRuntime } from "./cli-utils-LcHOt63h.js";
-import { n as ensurePluginRegistryLoaded, t as hasExplicitOptions } from "./command-options-BSDiKuyX.js";
-import { l as getVerboseFlag, o as getFlagValue, r as registerSubCliCommands, s as getPositiveIntFlagValue, u as hasFlag } from "./register.subclis-BpX3ulH1.js";
+import { n as ensurePluginRegistryLoaded, t as hasExplicitOptions } from "./command-options-BvgxzPbK.js";
+import { l as getVerboseFlag, o as getFlagValue, r as registerSubCliCommands, s as getPositiveIntFlagValue, u as hasFlag } from "./register.subclis-C02e4zuJ.js";
 import { n as parsePositiveIntOrUndefined, t as collectOption } from "./helpers-D_jqdWkd.js";
-import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-8gue7Qjt.js";
-import { t as createDefaultDeps } from "./deps-Cva7QM_t.js";
-import { a as gatewayInstallErrorHint, h as assertSupportedRuntime, i as buildGatewayInstallPlan, r as isGatewayDaemonRuntime, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-BHF5NjQ7.js";
-import { t as resolveGatewayService } from "./service-DNcIZ5Kp.js";
-import { r as isSystemdUserServiceAvailable } from "./systemd-CNTodvCO.js";
-import { t as renderTable } from "./table-oJQPTUL6.js";
-import { _ as applyOpenAIConfig, a as applyCustomApiConfig, b as applyGoogleGeminiModelDefault, c as resolveCustomProviderId, g as applyAuthChoice, h as warnIfModelConfigLooksOff, i as CustomApiError, o as parseNonInteractiveCustomApiFlags, v as upsertSharedEnvVar, x as promptAuthChoiceGrouped, y as detectZaiEndpoint } from "./onboard-skills-DoxkpnEU.js";
-import { l as healthCommand } from "./health-format-gLMfE2wf.js";
-import { $ as setAnthropicApiKey, C as applyLitellmConfig, E as applyMoonshotConfigCn, Et as validateAnthropicSetupToken, F as applyTogetherConfig, G as applyZaiConfig, L as applyVeniceConfig, N as applySyntheticConfig, T as applyMoonshotConfig, Tt as buildTokenProfileId, U as applyXiaomiConfig, V as applyXaiConfig, at as setMoonshotApiKey, ct as setQianfanApiKey, dt as setVeniceApiKey, et as setCloudflareAiGatewayConfig, f as applyOpencodeZenConfig, ft as setVercelAiGatewayApiKey, g as applyMinimaxConfig, ht as setZaiApiKey, it as setMinimaxApiKey, j as applyQianfanConfig, k as applyOpenrouterConfig, lt as setSyntheticApiKey, m as applyMinimaxApiConfig, mt as setXiaomiApiKey, nt as setKimiCodingApiKey, ot as setOpencodeZenApiKey, pt as setXaiApiKey, rt as setLitellmApiKey, st as setOpenrouterApiKey, tt as setGeminiApiKey, ut as setTogetherApiKey, v as applyAuthProfileConfig, x as applyKimiCodeConfig, y as applyCloudflareAiGatewayConfig, z as applyVercelAiGatewayConfig } from "./github-copilot-auth-Cm2SB8Qf.js";
-import { n as logConfigUpdated, t as formatConfigPath } from "./logging-D0MyqUlV.js";
-import { a as findAgentEntryIndex, c as pruneAgentConfig, d as parseIdentityMarkdown, f as runOnboardingWizard, i as buildAgentSummaries, l as identityHasValues, o as listAgentEntries, r as applyAgentConfig, s as loadAgentIdentity, t as statusCommand } from "./status-CxhnUa5J.js";
-import { a as createOutboundSendDeps, n as resolveSessionKeyForRequest, t as agentCommand } from "./agent-DZvDwqnd.js";
-import { t as formatHelpExamples } from "./help-format-DUy1KRxq.js";
-import { i as CONFIGURE_WIZARD_SECTIONS, n as configureCommand, r as configureCommandWithSections } from "./configure-BZQ9uSVX.js";
-import { n as ensureSystemdUserLingerNonInteractive } from "./systemd-linger-CArPbmvv.js";
-import { n as loadAndMaybeMigrateDoctorConfig, t as doctorCommand } from "./doctor-BZfxDGUg.js";
+import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-BByb2Snz.js";
+import { t as createDefaultDeps } from "./deps-QSwGcoNZ.js";
+import { a as gatewayInstallErrorHint, h as assertSupportedRuntime, i as buildGatewayInstallPlan, r as isGatewayDaemonRuntime, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-B0tg_LsX.js";
+import { t as resolveGatewayService } from "./service-99RDXwX4.js";
+import { r as isSystemdUserServiceAvailable } from "./systemd-C0VZriGM.js";
+import { t as renderTable } from "./table-CwulTLQp.js";
+import { _ as applyOpenAIConfig, a as applyCustomApiConfig, b as applyGoogleGeminiModelDefault, c as resolveCustomProviderId, g as applyAuthChoice, h as warnIfModelConfigLooksOff, i as CustomApiError, o as parseNonInteractiveCustomApiFlags, v as upsertSharedEnvVar, x as promptAuthChoiceGrouped, y as detectZaiEndpoint } from "./onboard-skills-DV0Qzvjj.js";
+import { l as healthCommand } from "./health-format-LZDxu3rv.js";
+import { $ as setAnthropicApiKey, C as applyLitellmConfig, E as applyMoonshotConfigCn, Et as validateAnthropicSetupToken, F as applyTogetherConfig, G as applyZaiConfig, L as applyVeniceConfig, N as applySyntheticConfig, T as applyMoonshotConfig, Tt as buildTokenProfileId, U as applyXiaomiConfig, V as applyXaiConfig, at as setMoonshotApiKey, ct as setQianfanApiKey, dt as setVeniceApiKey, et as setCloudflareAiGatewayConfig, f as applyOpencodeZenConfig, ft as setVercelAiGatewayApiKey, g as applyMinimaxConfig, ht as setZaiApiKey, it as setMinimaxApiKey, j as applyQianfanConfig, k as applyOpenrouterConfig, lt as setSyntheticApiKey, m as applyMinimaxApiConfig, mt as setXiaomiApiKey, nt as setKimiCodingApiKey, ot as setOpencodeZenApiKey, pt as setXaiApiKey, rt as setLitellmApiKey, st as setOpenrouterApiKey, tt as setGeminiApiKey, ut as setTogetherApiKey, v as applyAuthProfileConfig, x as applyKimiCodeConfig, y as applyCloudflareAiGatewayConfig, z as applyVercelAiGatewayConfig } from "./github-copilot-auth-DDispnyz.js";
+import { n as logConfigUpdated, t as formatConfigPath } from "./logging-CRq4h04P.js";
+import { a as findAgentEntryIndex, c as pruneAgentConfig, d as parseIdentityMarkdown, f as runOnboardingWizard, i as buildAgentSummaries, l as identityHasValues, o as listAgentEntries, r as applyAgentConfig, s as loadAgentIdentity, t as statusCommand } from "./status-DDWoOpeB.js";
+import { a as createOutboundSendDeps, n as resolveSessionKeyForRequest, t as agentCommand } from "./agent-CyMxTyrG.js";
+import { t as formatHelpExamples } from "./help-format-R5fLToDw.js";
+import { i as CONFIGURE_WIZARD_SECTIONS, n as configureCommand, r as configureCommandWithSections } from "./configure-BXLiucXo.js";
+import { n as ensureSystemdUserLingerNonInteractive } from "./systemd-linger-xdn3BdPh.js";
+import { n as loadAndMaybeMigrateDoctorConfig, t as doctorCommand } from "./doctor-sYG5V4Co.js";
 import path from "node:path";
 import fs from "node:fs";
 import JSON5 from "json5";
@@ -1234,7 +1234,7 @@ function registerBrowserFilesAndDownloadsCommands(browser, parentOpts) {
 			defaultRuntime.exit(1);
 		}
 	});
-	browser.command("waitfordownload").description("Wait for the next download (and save it)").argument("[path]", "Save path (default: /tmp/openclaw/downloads/...)").option("--target-id <id>", "CDP target id (or unique prefix)").option("--timeout-ms <ms>", "How long to wait for the next download (default: 120000)", (v) => Number(v)).action(async (outPath, opts, cmd) => {
+	browser.command("waitfordownload").description("Wait for the next download (and save it)").argument("[path]", "Save path (default: /tmp/openclaw/downloads/...; fallback: os.tmpdir()/openclaw/downloads/...)").option("--target-id <id>", "CDP target id (or unique prefix)").option("--timeout-ms <ms>", "How long to wait for the next download (default: 120000)", (v) => Number(v)).action(async (outPath, opts, cmd) => {
 		const { parent, profile } = resolveBrowserActionContext(cmd, parentOpts);
 		try {
 			const timeoutMs = Number.isFinite(opts.timeoutMs) ? opts.timeoutMs : void 0;
@@ -2782,7 +2782,7 @@ async function loadValidConfig() {
 }
 function registerConfigCli(program) {
 	const cmd = program.command("config").description("Config helpers (get/set/unset). Run without subcommand for the wizard.").addHelpText("after", () => `\n${theme.muted("Docs:")} ${formatDocsLink("/cli/config", "docs.openclaw.ai/cli/config")}\n`).option("--section <section>", "Configure wizard sections (repeatable). Use with no subcommand.", (value, previous) => [...previous, value], []).action(async (opts) => {
-		const { CONFIGURE_WIZARD_SECTIONS, configureCommand, configureCommandWithSections } = await import("./configure-BZQ9uSVX.js").then((n) => n.t);
+		const { CONFIGURE_WIZARD_SECTIONS, configureCommand, configureCommandWithSections } = await import("./configure-BXLiucXo.js").then((n) => n.t);
 		const sections = Array.isArray(opts.section) ? opts.section.map((value) => typeof value === "string" ? value.trim() : "").filter(Boolean) : [];
 		if (sections.length === 0) {
 			await configureCommand(defaultRuntime);

package/dist/{configure-BZQ9uSVX.js → configure-BXLiucXo.js}

@@ -1,24 +1,24 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { F as CONFIG_PATH, W as resolveGatewayPort, p as defaultRuntime } from "./entry.js";
-import { _ as ensureAuthProfileStore } from "./auth-profiles-CcJ3hrog.js";
-import { t as formatCliCommand } from "./command-format-ayFsmwwz.js";
-import { S as shortenHomePath, y as resolveUserPath } from "./utils-Dk86IbEs.js";
-import { c as writeConfigFile, i as loadConfig, o as readConfigFileSnapshot } from "./config-B7sno9eI.js";
-import { a as findTailscaleBinary } from "./tailscale-DU6DgqVy.js";
-import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-3GyCj5KL.js";
-import { _ as randomToken, a as applyWizardMetadata, b as summarizeExistingConfig, c as ensureWorkspaceAndSessions, g as probeGatewayReachable, h as printWizardHeader, i as DEFAULT_WORKSPACE, p as normalizeGatewayTokenInput, u as guardCancel, v as resolveControlUiLinks, x as waitForGatewayReachable } from "./loader-Caow9TPA.js";
-import { n as withProgress } from "./progress-Da1ehW-x.js";
-import { n as stylePromptMessage, r as stylePromptTitle, t as stylePromptHint } from "./prompt-style-Dc0C5HC9.js";
-import { t as note$1 } from "./note-Ci08TSbV.js";
+import { G as resolveGatewayPort, I as CONFIG_PATH, p as defaultRuntime } from "./entry.js";
+import { _ as ensureAuthProfileStore } from "./auth-profiles-ByNs3eEm.js";
+import { t as formatCliCommand } from "./command-format-Bxe0mWee.js";
+import { S as shortenHomePath, y as resolveUserPath } from "./utils-BLJAc3ZV.js";
+import { c as writeConfigFile, i as loadConfig, o as readConfigFileSnapshot } from "./config-Bdhomfei.js";
+import { u as findTailscaleBinary } from "./auth-9x3lqfIY.js";
+import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-4Hqd1WGf.js";
+import { _ as randomToken, a as applyWizardMetadata, b as summarizeExistingConfig, c as ensureWorkspaceAndSessions, g as probeGatewayReachable, h as printWizardHeader, i as DEFAULT_WORKSPACE, p as normalizeGatewayTokenInput, u as guardCancel, v as resolveControlUiLinks, x as waitForGatewayReachable } from "./loader-KjT074JR.js";
+import { n as withProgress } from "./progress-DWqhRakV.js";
+import { n as stylePromptMessage, r as stylePromptTitle, t as stylePromptHint } from "./prompt-style-BFH5D5LN.js";
+import { t as note$1 } from "./note-hhtubr2j.js";
 import { t as WizardCancelledError } from "./prompts-CXLLIBwP.js";
-import { t as createClackPrompter } from "./clack-prompter-DuBVnTKy.js";
-import { n as setupChannels, t as noteChannelStatus } from "./onboard-channels-DMcOT0dj.js";
-import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-BHF5NjQ7.js";
-import { t as resolveGatewayService } from "./service-DNcIZ5Kp.js";
-import { d as applyPrimaryModel, f as promptDefaultModel, g as applyAuthChoice, l as applyModelAllowlist, m as resolvePreferredProviderForAuthChoice, p as promptModelAllowlist, r as promptRemoteGatewayConfig, s as promptCustomApiConfig, t as setupSkills, u as applyModelFallbacksFromSelection, x as promptAuthChoiceGrouped } from "./onboard-skills-DoxkpnEU.js";
-import { l as healthCommand, n as ensureControlUiAssetsBuilt, t as formatHealthCheckFailure } from "./health-format-gLMfE2wf.js";
-import { n as logConfigUpdated } from "./logging-D0MyqUlV.js";
-import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-CArPbmvv.js";
+import { t as createClackPrompter } from "./clack-prompter-ChCGXfyt.js";
+import { n as setupChannels, t as noteChannelStatus } from "./onboard-channels-C501x8GI.js";
+import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-B0tg_LsX.js";
+import { t as resolveGatewayService } from "./service-99RDXwX4.js";
+import { d as applyPrimaryModel, f as promptDefaultModel, g as applyAuthChoice, l as applyModelAllowlist, m as resolvePreferredProviderForAuthChoice, p as promptModelAllowlist, r as promptRemoteGatewayConfig, s as promptCustomApiConfig, t as setupSkills, u as applyModelFallbacksFromSelection, x as promptAuthChoiceGrouped } from "./onboard-skills-DV0Qzvjj.js";
+import { l as healthCommand, n as ensureControlUiAssetsBuilt, t as formatHealthCheckFailure } from "./health-format-LZDxu3rv.js";
+import { n as logConfigUpdated } from "./logging-CRq4h04P.js";
+import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-xdn3BdPh.js";
 import { confirm, intro, outro, select, text } from "@clack/prompts";
 
 //#region src/commands/configure.shared.ts

package/dist/{configure-Cg5IKSUy.js → configure-BYPqXzGZ.js}

@@ -1,25 +1,25 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-DVBShlw6.js";
-import { c as defaultRuntime } from "./subsystem-Bv7dGhES.js";
-import { C as shortenHomePath, b as resolveUserPath } from "./utils-BHPdZE4h.js";
-import { At as probeGatewayReachable, Dt as normalizeGatewayTokenInput, Ft as waitForGatewayReachable, Mt as resolveControlUiLinks, Pt as summarizeExistingConfig, St as ensureWorkspaceAndSessions, jt as randomToken, kt as printWizardHeader, vt as DEFAULT_WORKSPACE, wt as guardCancel, yt as applyWizardMetadata } from "./reply-m467_fOC.js";
-import { ht as ensureAuthProfileStore } from "./model-selection-unMJyUIE.js";
+import { c as defaultRuntime } from "./subsystem-BoExtIHo.js";
+import { C as shortenHomePath, b as resolveUserPath } from "./utils-Cd9QdCHh.js";
+import { At as probeGatewayReachable, Dt as normalizeGatewayTokenInput, Ft as waitForGatewayReachable, Mt as resolveControlUiLinks, Pt as summarizeExistingConfig, St as ensureWorkspaceAndSessions, jt as randomToken, kt as printWizardHeader, vt as DEFAULT_WORKSPACE, wt as guardCancel, yt as applyWizardMetadata } from "./reply-DICXkh_C.js";
+import { ht as ensureAuthProfileStore } from "./model-selection-BLuqsGVB.js";
 import { t as formatCliCommand } from "./command-format-ChfKqObn.js";
-import { c as writeConfigFile, i as loadConfig, o as readConfigFileSnapshot } from "./config-DH9TLUNc.js";
-import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-BL9lIXSA.js";
-import { n as withProgress } from "./progress-g9R--HZD.js";
-import { n as stylePromptMessage, r as stylePromptTitle, t as stylePromptHint } from "./prompt-style-lmJDcgtA.js";
-import { a as findTailscaleBinary } from "./tailscale-DHfcfRCx.js";
-import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-B05PME1z.js";
-import { n as logConfigUpdated } from "./logging-CeHn2itV.js";
-import { t as note$1 } from "./note-CAM9PbSJ.js";
-import { t as WizardCancelledError } from "./prompts-BOz5176z.js";
-import { t as createClackPrompter } from "./clack-prompter-Dmvcu3gn.js";
-import { S as promptAuthChoiceGrouped, _ as applyAuthChoice, c as promptCustomApiConfig, d as applyModelFallbacksFromSelection, f as applyPrimaryModel, h as resolvePreferredProviderForAuthChoice, m as promptModelAllowlist, p as promptDefaultModel, r as promptRemoteGatewayConfig, t as setupSkills, u as applyModelAllowlist } from "./onboard-skills-D-BrCoRN.js";
-import { n as setupChannels, t as noteChannelStatus } from "./onboard-channels-CsT3E4bT.js";
-import { l as healthCommand, n as ensureControlUiAssetsBuilt, t as formatHealthCheckFailure } from "./health-format-C0C_Apce.js";
-import { t as resolveGatewayService } from "./service-DZMXgMra.js";
-import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-XvT9Y9sb.js";
+import { c as writeConfigFile, i as loadConfig, o as readConfigFileSnapshot } from "./config-aFQssWKX.js";
+import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-X7d_tfTE.js";
+import { n as withProgress } from "./progress-C9kngsTD.js";
+import { n as stylePromptMessage, r as stylePromptTitle, t as stylePromptHint } from "./prompt-style-CIbmaxSa.js";
+import { u as findTailscaleBinary } from "./auth-CQNl_IaI.js";
+import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-Bsjeut6m.js";
+import { n as logConfigUpdated } from "./logging-BAyPwvdH.js";
+import { t as note$1 } from "./note-BhRSeNeu.js";
+import { t as WizardCancelledError } from "./prompts-Bg96reub.js";
+import { t as createClackPrompter } from "./clack-prompter-Bz3Mmcl-.js";
+import { S as promptAuthChoiceGrouped, _ as applyAuthChoice, c as promptCustomApiConfig, d as applyModelFallbacksFromSelection, f as applyPrimaryModel, h as resolvePreferredProviderForAuthChoice, m as promptModelAllowlist, p as promptDefaultModel, r as promptRemoteGatewayConfig, t as setupSkills, u as applyModelAllowlist } from "./onboard-skills-rlBHcu3Q.js";
+import { n as setupChannels, t as noteChannelStatus } from "./onboard-channels-Dxzroasd.js";
+import { l as healthCommand, n as ensureControlUiAssetsBuilt, t as formatHealthCheckFailure } from "./health-format-KGPokKJH.js";
+import { t as resolveGatewayService } from "./service--nPk7DvT.js";
+import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-NC2kl1SC.js";
 import { confirm, intro, outro, select, text } from "@clack/prompts";
 
 //#region src/commands/configure.shared.ts

package/dist/control-auth-8Cf4WXpR.js

@@ -0,0 +1,54 @@
+import { c as writeConfigFile, i as loadConfig } from "./config-Bdhomfei.js";
+import { i as resolveGatewayAuth } from "./auth-9x3lqfIY.js";
+import crypto from "node:crypto";
+
+//#region src/browser/control-auth.ts
+function resolveBrowserControlAuth(cfg, env = process.env) {
+	const auth = resolveGatewayAuth({
+		authConfig: cfg?.gateway?.auth,
+		env,
+		tailscaleMode: cfg?.gateway?.tailscale?.mode
+	});
+	const token = typeof auth.token === "string" ? auth.token.trim() : "";
+	const password = typeof auth.password === "string" ? auth.password.trim() : "";
+	return {
+		token: token || void 0,
+		password: password || void 0
+	};
+}
+function shouldAutoGenerateBrowserAuth(env) {
+	if ((env.NODE_ENV ?? "").trim().toLowerCase() === "test") return false;
+	const vitest = (env.VITEST ?? "").trim().toLowerCase();
+	if (vitest && vitest !== "0" && vitest !== "false" && vitest !== "off") return false;
+	return true;
+}
+async function ensureBrowserControlAuth(params) {
+	const env = params.env ?? process.env;
+	const auth = resolveBrowserControlAuth(params.cfg, env);
+	if (auth.token || auth.password) return { auth };
+	if (!shouldAutoGenerateBrowserAuth(env)) return { auth };
+	if (params.cfg.gateway?.auth?.mode === "password") return { auth };
+	const latestCfg = loadConfig();
+	const latestAuth = resolveBrowserControlAuth(latestCfg, env);
+	if (latestAuth.token || latestAuth.password) return { auth: latestAuth };
+	if (latestCfg.gateway?.auth?.mode === "password") return { auth: latestAuth };
+	const generatedToken = crypto.randomBytes(24).toString("hex");
+	await writeConfigFile({
+		...latestCfg,
+		gateway: {
+			...latestCfg.gateway,
+			auth: {
+				...latestCfg.gateway?.auth,
+				mode: "token",
+				token: generatedToken
+			}
+		}
+	});
+	return {
+		auth: { token: generatedToken },
+		generatedToken
+	};
+}
+
+//#endregion
+export { resolveBrowserControlAuth as n, ensureBrowserControlAuth as t };

package/dist/control-auth-DBCu3qyv.js

@@ -0,0 +1,54 @@
+import { c as writeConfigFile, i as loadConfig } from "./config-aFQssWKX.js";
+import { i as resolveGatewayAuth } from "./auth-CQNl_IaI.js";
+import crypto from "node:crypto";
+
+//#region src/browser/control-auth.ts
+function resolveBrowserControlAuth(cfg, env = process.env) {
+	const auth = resolveGatewayAuth({
+		authConfig: cfg?.gateway?.auth,
+		env,
+		tailscaleMode: cfg?.gateway?.tailscale?.mode
+	});
+	const token = typeof auth.token === "string" ? auth.token.trim() : "";
+	const password = typeof auth.password === "string" ? auth.password.trim() : "";
+	return {
+		token: token || void 0,
+		password: password || void 0
+	};
+}
+function shouldAutoGenerateBrowserAuth(env) {
+	if ((env.NODE_ENV ?? "").trim().toLowerCase() === "test") return false;
+	const vitest = (env.VITEST ?? "").trim().toLowerCase();
+	if (vitest && vitest !== "0" && vitest !== "false" && vitest !== "off") return false;
+	return true;
+}
+async function ensureBrowserControlAuth(params) {
+	const env = params.env ?? process.env;
+	const auth = resolveBrowserControlAuth(params.cfg, env);
+	if (auth.token || auth.password) return { auth };
+	if (!shouldAutoGenerateBrowserAuth(env)) return { auth };
+	if (params.cfg.gateway?.auth?.mode === "password") return { auth };
+	const latestCfg = loadConfig();
+	const latestAuth = resolveBrowserControlAuth(latestCfg, env);
+	if (latestAuth.token || latestAuth.password) return { auth: latestAuth };
+	if (latestCfg.gateway?.auth?.mode === "password") return { auth: latestAuth };
+	const generatedToken = crypto.randomBytes(24).toString("hex");
+	await writeConfigFile({
+		...latestCfg,
+		gateway: {
+			...latestCfg.gateway,
+			auth: {
+				...latestCfg.gateway?.auth,
+				mode: "token",
+				token: generatedToken
+			}
+		}
+	});
+	return {
+		auth: { token: generatedToken },
+		generatedToken
+	};
+}
+
+//#endregion
+export { resolveBrowserControlAuth as n, ensureBrowserControlAuth as t };

package/dist/{control-service-CBlMVTRu.js → control-service-B5KnPqGP.js}

@@ -1,8 +1,9 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { t as createSubsystemLogger } from "./subsystem-Bv7dGhES.js";
-import { i as loadConfig } from "./config-DH9TLUNc.js";
-import { w as ensureChromeExtensionRelayServer } from "./chrome-juQxt0zf.js";
-import { a as resolveProfile, i as resolveBrowserConfig, t as createBrowserRouteContext } from "./server-context-Lb-eUZG_.js";
+import { t as createSubsystemLogger } from "./subsystem-BoExtIHo.js";
+import { i as loadConfig } from "./config-aFQssWKX.js";
+import { w as ensureChromeExtensionRelayServer } from "./chrome-Cvr-57lg.js";
+import { a as resolveProfile, i as resolveBrowserConfig, t as createBrowserRouteContext } from "./server-context-Cl0U0vE3.js";
+import { t as ensureBrowserControlAuth } from "./control-auth-DBCu3qyv.js";
 
 //#region src/browser/control-service.ts
 var control_service_exports = /* @__PURE__ */ __exportAll({
@@ -24,6 +25,11 @@ async function startBrowserControlServiceFromConfig() {
 	const cfg = loadConfig();
 	const resolved = resolveBrowserConfig(cfg.browser, cfg);
 	if (!resolved.enabled) return null;
+	try {
+		if ((await ensureBrowserControlAuth({ cfg })).generatedToken) logService.info("No browser auth configured; generated gateway.auth.token automatically.");
+	} catch (err) {
+		logService.warn(`failed to auto-configure browser auth: ${String(err)}`);
+	}
 	state = {
 		server: null,
 		port: resolved.controlPort,
@@ -53,7 +59,7 @@ async function stopBrowserControlService() {
 	}
 	state = null;
 	try {
-		await (await import("./pw-ai-DTZVjndL.js")).closePlaywrightBrowserConnection();
+		await (await import("./pw-ai-CM1IsSgZ.js")).closePlaywrightBrowserConnection();
 	} catch {}
 }
 

package/dist/{control-service-B2er20Ke.js → control-service-DKnttEus.js}

@@ -1,8 +1,9 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { o as createSubsystemLogger } from "./entry.js";
-import { i as loadConfig } from "./config-B7sno9eI.js";
-import { a as resolveBrowserConfig, o as resolveProfile, t as createBrowserRouteContext } from "./server-context-fX4xiYRh.js";
-import { x as ensureChromeExtensionRelayServer } from "./chrome-yIKmOzCO.js";
+import { i as loadConfig } from "./config-Bdhomfei.js";
+import { a as resolveBrowserConfig, o as resolveProfile, t as createBrowserRouteContext } from "./server-context-BGpGs3qd.js";
+import { x as ensureChromeExtensionRelayServer } from "./chrome-foEwx3lN.js";
+import { t as ensureBrowserControlAuth } from "./control-auth-8Cf4WXpR.js";
 
 //#region src/browser/control-service.ts
 var control_service_exports = /* @__PURE__ */ __exportAll({
@@ -24,6 +25,11 @@ async function startBrowserControlServiceFromConfig() {
 	const cfg = loadConfig();
 	const resolved = resolveBrowserConfig(cfg.browser, cfg);
 	if (!resolved.enabled) return null;
+	try {
+		if ((await ensureBrowserControlAuth({ cfg })).generatedToken) logService.info("No browser auth configured; generated gateway.auth.token automatically.");
+	} catch (err) {
+		logService.warn(`failed to auto-configure browser auth: ${String(err)}`);
+	}
 	state = {
 		server: null,
 		port: resolved.controlPort,
@@ -53,7 +59,7 @@ async function stopBrowserControlService() {
 	}
 	state = null;
 	try {
-		await (await import("./pw-ai-C43wv1ZF.js")).closePlaywrightBrowserConnection();
+		await (await import("./pw-ai-8mdv3h-d.js")).closePlaywrightBrowserConnection();
 	} catch {}
 }
 

package/dist/{cron-cli-B2Zwhy_r.js → cron-cli-D7BRjDv2.js}

@@ -1,26 +1,26 @@
 import "./paths-DVBShlw6.js";
-import { E as danger, I as colorize, L as isRich, R as theme, c as defaultRuntime } from "./subsystem-Bv7dGhES.js";
-import "./utils-BHPdZE4h.js";
+import { E as danger, I as colorize, L as isRich, R as theme, c as defaultRuntime } from "./subsystem-BoExtIHo.js";
+import "./utils-Cd9QdCHh.js";
 import { p as sanitizeAgentId } from "./session-key-BWxPj0z_.js";
-import "./exec-DXtR2fhb.js";
-import "./agent-scope---6LLHj0.js";
-import "./model-selection-unMJyUIE.js";
+import "./exec-YIosokWE.js";
+import "./agent-scope-CQCus0rI.js";
+import "./model-selection-BLuqsGVB.js";
 import "./github-copilot-token-BW-SEg7E.js";
 import "./boolean-BgXe2hyu.js";
-import "./env-DE9xvYOL.js";
-import "./config-DH9TLUNc.js";
-import "./manifest-registry-DFckk-L8.js";
-import { n as listChannelPlugins } from "./plugins-BL9lIXSA.js";
-import "./message-channel-0717wOz-.js";
+import "./env-ONzUVAG2.js";
+import "./config-aFQssWKX.js";
+import "./manifest-registry-CQhdnDBZ.js";
+import { n as listChannelPlugins } from "./plugins-X7d_tfTE.js";
+import "./message-channel-BLi2a6Yw.js";
 import "./logging-fywhKCmE.js";
-import "./accounts-DimKrt7j.js";
-import "./client-B0_GiCjB.js";
-import "./call-C9az806y.js";
+import "./accounts-DeqIQjo1.js";
+import "./client-BrYfyoDK.js";
+import "./call-SolyGS1r.js";
 import { n as formatDurationHuman } from "./format-duration-84n6_DgO.js";
-import { t as formatDocsLink } from "./links-CV4oki2u.js";
-import "./progress-g9R--HZD.js";
-import { t as parseAbsoluteTimeMs } from "./parse-Cjiudy6x.js";
-import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-DjuxyOm-.js";
+import { t as formatDocsLink } from "./links-Eax1UO3w.js";
+import "./progress-C9kngsTD.js";
+import { t as parseAbsoluteTimeMs } from "./parse-Bw0oH-rT.js";
+import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-wXSCUZXj.js";
 import { n as parsePositiveIntOrUndefined } from "./helpers-8O7IVGO-.js";
 
 //#region src/cli/cron-cli/shared.ts

package/dist/{cron-cli-EaRUVd0p.js → cron-cli-z1zk_FXQ.js}

@@ -1,24 +1,24 @@
-import { D as colorize, O as isRich, k as theme, p as defaultRuntime, v as danger } from "./entry.js";
-import "./auth-profiles-CcJ3hrog.js";
+import { A as theme, O as colorize, k as isRich, p as defaultRuntime, v as danger } from "./entry.js";
+import "./auth-profiles-ByNs3eEm.js";
 import { p as sanitizeAgentId } from "./session-key-DVvxnFKg.js";
-import "./utils-Dk86IbEs.js";
-import "./exec-B8JKbXKW.js";
-import "./agent-scope-RCSw6gHy.js";
-import "./github-copilot-token-SLWintYd.js";
-import "./config-B7sno9eI.js";
-import "./manifest-registry-BTgLN_W2.js";
-import "./client-D7wrC1Ug.js";
-import "./call-Yxns4CVq.js";
-import "./message-channel-BlgPSDAh.js";
-import { t as formatDocsLink } from "./links-7M-j83As.js";
-import { n as listChannelPlugins } from "./plugins-3GyCj5KL.js";
+import "./utils-BLJAc3ZV.js";
+import "./exec-CACT5OAW.js";
+import "./agent-scope-CsRbLH4l.js";
+import "./github-copilot-token-Cfs0Wxr8.js";
+import "./config-Bdhomfei.js";
+import "./manifest-registry-u0okVSkU.js";
+import "./client-CTwXnRl7.js";
+import "./call-DVYCIV8m.js";
+import "./message-channel-C_MmebBt.js";
+import { t as formatDocsLink } from "./links-B8LAzWwg.js";
+import { n as listChannelPlugins } from "./plugins-4Hqd1WGf.js";
 import "./logging-CfEk_PnX.js";
-import "./accounts-DbzMEfKN.js";
-import "./progress-Da1ehW-x.js";
+import "./accounts-DCDeFTra.js";
+import "./progress-DWqhRakV.js";
 import { n as formatDurationHuman } from "./format-duration-Bo9zNKwO.js";
 import { t as parseAbsoluteTimeMs } from "./parse-ioZhOtha.js";
 import { n as parsePositiveIntOrUndefined } from "./helpers-D_jqdWkd.js";
-import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-8gue7Qjt.js";
+import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-BByb2Snz.js";
 
 //#region src/cli/cron-cli/shared.ts
 const getCronChannelOptions = () => ["last", ...listChannelPlugins().map((plugin) => plugin.id)].join("|");

package/dist/{daemon-cli-CVNzObIF.js → daemon-cli-BDkU2ocb.js}

@@ -1,27 +1,27 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { d as resolveIsNixMode, g as resolveStateDir, o as resolveConfigPath, u as resolveGatewayPort } from "./paths-DVBShlw6.js";
-import { I as colorize, L as isRich, R as theme, V as getResolvedLoggerSettings, c as defaultRuntime } from "./subsystem-Bv7dGhES.js";
-import { C as shortenHomePath } from "./utils-BHPdZE4h.js";
-import { Mt as resolveControlUiLinks, jt as randomToken } from "./reply-m467_fOC.js";
+import { I as colorize, L as isRich, R as theme, V as getResolvedLoggerSettings, c as defaultRuntime } from "./subsystem-BoExtIHo.js";
+import { C as shortenHomePath } from "./utils-Cd9QdCHh.js";
+import { Mt as resolveControlUiLinks, jt as randomToken } from "./reply-DICXkh_C.js";
 import { t as formatCliCommand } from "./command-format-ChfKqObn.js";
-import { c as writeConfigFile, i as loadConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-DH9TLUNc.js";
-import { d as inspectPortUsage, p as formatPortDiagnostics } from "./chrome-juQxt0zf.js";
+import { c as writeConfigFile, i as loadConfig, o as readConfigFileSnapshot, r as createConfigIO } from "./config-aFQssWKX.js";
+import { d as inspectPortUsage, p as formatPortDiagnostics } from "./chrome-Cvr-57lg.js";
 import { t as pickPrimaryTailnetIPv4 } from "./tailnet-DATIFSsY.js";
 import { c as resolveGatewayBindHost } from "./ws-CHCQHs0F.js";
-import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-0717wOz-.js";
-import { n as isWSL, r as isWSLEnv } from "./dispatcher-BHsNwFe-.js";
-import { n as callGateway } from "./call-C9az806y.js";
-import { t as formatDocsLink } from "./links-CV4oki2u.js";
-import { n as withProgress } from "./progress-g9R--HZD.js";
-import { d as resolveGatewaySystemdServiceName, l as resolveGatewayLaunchAgentLabel } from "./constants-DuoCkWRh.js";
-import { t as createDefaultDeps } from "./deps-B6602Wid.js";
-import { i as buildGatewayInstallPlan, r as isGatewayDaemonRuntime, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-B05PME1z.js";
-import { i as resolveGatewayAuth } from "./auth-jrfLXze7.js";
-import { o as resolveGatewayLogPaths, t as resolveGatewayService } from "./service-DZMXgMra.js";
-import { r as isSystemdUserServiceAvailable } from "./systemd-CUJJHgHa.js";
-import { a as renderGatewayServiceCleanupHints, i as findExtraGatewayServices, n as auditGatewayServiceConfig, o as readLastGatewayErrorLine } from "./service-audit-0WLGnoNT.js";
+import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-BLi2a6Yw.js";
+import { n as isWSL, r as isWSLEnv } from "./dispatcher-DY51b-Zc.js";
+import { n as callGateway } from "./call-SolyGS1r.js";
+import { t as formatDocsLink } from "./links-Eax1UO3w.js";
+import { n as withProgress } from "./progress-C9kngsTD.js";
+import { i as resolveGatewayAuth } from "./auth-CQNl_IaI.js";
+import { d as resolveGatewaySystemdServiceName, l as resolveGatewayLaunchAgentLabel } from "./constants-BvQ6S8j5.js";
+import { t as createDefaultDeps } from "./deps-lAAA2zYI.js";
+import { i as buildGatewayInstallPlan, r as isGatewayDaemonRuntime, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-Bsjeut6m.js";
+import { o as resolveGatewayLogPaths, t as resolveGatewayService } from "./service--nPk7DvT.js";
+import { r as isSystemdUserServiceAvailable } from "./systemd-DrmBtJ5T.js";
+import { a as renderGatewayServiceCleanupHints, i as findExtraGatewayServices, n as auditGatewayServiceConfig, o as readLastGatewayErrorLine } from "./service-audit-DnLmRGQt.js";
 import { n as renderSystemdUnavailableHints, t as isSystemdUnavailableDetail } from "./systemd-hints-CXNtLw9Q.js";
-import { a as parsePortFromArgs, c as renderRuntimeHints, d as createNullWriter, f as emitDaemonActionJson, i as parsePort, l as safeDaemonEnv, n as formatRuntimeStatus, o as pickProbeHostForBind, r as normalizeListenerAddress, s as renderGatewayServiceStartHints, t as filterDaemonEnv, u as buildDaemonServiceSnapshot } from "./shared-DOZs2SoH.js";
+import { a as parsePortFromArgs, c as renderRuntimeHints, d as createNullWriter, f as emitDaemonActionJson, i as parsePort, l as safeDaemonEnv, n as formatRuntimeStatus, o as pickProbeHostForBind, r as normalizeListenerAddress, s as renderGatewayServiceStartHints, t as filterDaemonEnv, u as buildDaemonServiceSnapshot } from "./shared-DRohONn_.js";
 
 //#region src/cli/daemon-cli/install.ts
 async function runDaemonInstall(opts) {