activeclaw 2026.4.5 → 2026.4.6

package/dist/{gateway-cli-C88jp3Aw.js → gateway-cli-DYQv0bbi.js}

@@ -1,11 +1,11 @@
 import { g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-BJV7vkaX.js";
 import { A as theme, M as getLogger, N as getResolvedLoggerSettings, O as colorize, S as logVerbose, a as setConsoleSubsystemFilter, b as isVerbose, j as getChildLogger, k as isRich, n as runtimeForLogger, o as setConsoleTimestampPrefix, p as defaultRuntime, s as shouldLogSubsystemToConsole, t as createSubsystemLogger, w as setVerbose } from "./subsystem-Dk5WUhC2.js";
 import { C as truncateUtf16Safe, b as sleep, g as resolveUserPath, r as clamp, w as isPlainObject, y as shortenHomePath } from "./utils-CGU7Q77u.js";
-import { $a as writeConfigFile, $i as PROFILE_OPTIONS, $n as deliveryContextFromSession, Ac as normalizeReasoningLevel, Ai as GATEWAY_CLIENT_IDS, Ba as migrateLegacyConfig, Bi as writeJsonAtomic, Br as snapshotSessionOrigin, Dc as formatXHighModelHint, Do as parseDurationMs, Dr as resolveSessionResetPolicy, Ec as formatThinkingLevels, Ei as normalizeMessageChannel, Fc as supportsXHighThinking, Fn as parseSessionThreadInfo, Fr as resolveAgentMainSessionKey, Ga as parseConfigJson5, Gn as updateSessionStore, Go as isAvatarImageDataUrl, Gs as resolveRuntimeServiceVersion, Ha as createConfigIO, Hs as resolveAgentMaxConcurrent, Ii as cleanStaleLockFiles, Ir as resolveExplicitAgentSessionKey, Ja as readConfigFileSnapshot, Ji as mergeAlsoAllowPolicy, Ki as collectExplicitAllowlist, Ko as isPathWithinRoot, Lr as resolveMainSessionKey, Mc as normalizeUsageDisplay, Mi as GATEWAY_CLIENT_NAMES, Nc as normalizeVerboseLevel, Ni as hasGatewayClientCap, Nr as setSessionRuntimeModel, Os as applyMergePatch, Pn as extractDeliveryInfo, Pr as canonicalizeMainSessionAlias, Qi as resolveToolProfilePolicy, Ri as createAsyncLock, Rn as archiveRemovedSessionTranscripts, Rr as resolveMainSessionKeyFromConfig, S as resolveThinkingDefault, Sr as jsonUtf8Bytes, Tc as DEFAULT_PROVIDER, Tr as evaluateSessionFreshness, Uo as isAvatarDataUrl, Us as resolveSubagentMaxConcurrent, Vs as buildTalkConfigResponse, Wa as loadConfig, Wo as isAvatarHttpUrl, Ws as VERSION, Xa as resolveConfigSnapshotHash, Xt as estimateBase64DecodedBytes, Ya as readConfigFileSnapshotForWrite, Yo as looksLikeAvatarPath, _ as resolveHooksGmailModel, _r as stripInlineDirectiveTagsFromMessageForDisplay, a as getModelRefStatus, ar as archiveFileOnDisk, b as resolveSubagentConfiguredModelSelection, bi as isGatewayCliClient, cr as cleanupArchivedSessionTranscripts, eo as validateConfigObjectWithPlugins, fi as mapAllowFromEntries, fr as resolveSessionTranscriptCandidates, g as resolveDefaultModelForAgent, gc as isPidAlive, gr as stripInlineDirectiveTagsForDisplay, h as resolveConfiguredModelRef, jc as normalizeThinkLevel, ji as GATEWAY_CLIENT_MODES, jr as mergeSessionEntry, kc as normalizeElevatedLevel, ki as GATEWAY_CLIENT_CAPS, ks as applyLegacyMigrations, lr as readSessionMessages, mr as stripEnvelopeFromMessages, na as resolveCoreToolProfiles, or as archiveSessionTranscripts, p as resolveAllowedModelRef, pi as resolveChannelDefaultAccountId, pr as stripEnvelopeFromMessage, qa as readBestEffortConfig, qo as isSupportedLocalAvatarExtension, ri as buildChannelAccountBindings, rr as normalizeSessionDeliveryFields, s as isCliProvider, sr as capArrayByJsonBytes, t as buildAllowedModelSet, ta as listCoreToolSections, to as OpenClawSchema, tr as mergeDeliveryContext, u as normalizeModelSelection, ur as readSessionPreviewItemsFromTranscript, vi as INTERNAL_MESSAGE_CHANNEL, wc as DEFAULT_MODEL, wi as isWebchatClient, xi as isGatewayMessageChannel, xr as normalizeInputProvenance, yi as isDeliverableMessageChannel, zi as readJsonFile, zn as loadSessionStore } from "./model-selection-CftqhKNS.js";
-import { $n as setCommandLaneConcurrency, $t as buildOutboundSessionContext, A as requestBodyErrorToText, An as isSystemEventContextChanged, Ar as resolveAgentSessionDirs, B as formatZonedTimestamp, Bn as getPluginToolMeta, Cn as normalizeOptionalSessionKey, Cr as emitAgentEvent, Ct as resolveNestedAgentLane, D as loadOpenClawPlugins, Dr as normalizeSendPolicy, En as normalizeRequiredName, Er as registerAgentRunContext, Fr as extractFileContentFromSource, Ft as pruneLegacyStoreKeys, G as stopSubagentsForRequester, Gn as clearBootstrapSnapshot, Gt as normalizeGroupActivation, H as createReplyDispatcher, Ht as sleepWithAbort, I as buildHistoryContextFromEntries, In as setHeartbeatsEnabled, Ir as extractImageContentFromSource, It as resolveGatewaySessionStoreTarget, J as abortEmbeddedPiRun, Jn as getActiveTaskCount, Jt as resolveOutboundSessionRoute, K as runEmbeddedPiAgent, Kn as clearBootstrapSnapshotOnSessionRollover, L as buildTelegramExecApprovalButtons, Lr as normalizeMimeList, Lt as resolveSessionModelRef, M as createReplyPrefixOptions, Mr as DEFAULT_INPUT_IMAGE_MAX_BYTES, Mt as listSessionsFromStore, Nr as DEFAULT_INPUT_IMAGE_MIMES, Nt as loadCombinedSessionStoreForGateway, O as createPluginRuntime, On as normalizeLegacyDeliveryInput, Or as resolveSendPolicy, P as resolveSessionAuthProfileOverride, Pn as requestHeartbeatNow, Pr as DEFAULT_INPUT_TIMEOUT_MS, Pt as loadSessionEntry, Qn as resetAllLanes, Qt as resolveSessionDeliveryTarget, R as resolveExecApprovalCommandDisplay, Rn as ToolInputError, Rr as resolveInputFileLimits, S as listDescendantRunsForRequester, Sn as normalizeOptionalAgentId, Sr as clearAgentRunContext, Tn as normalizePayloadToSystemText, Tr as onAgentEvent, Tt as loadProviderUsageSummary, U as getTotalPendingReplies, Un as resolveUserTimezone, Ut as clearSessionQueues, V as dispatchInboundMessage, Vn as resolvePluginTools, Vt as computeBackoff, W as isAbortRequestText, X as waitForActiveEmbeddedRuns, Xn as getTotalQueueSize, Y as getActiveEmbeddedRunCount, Z as waitForEmbeddedPiRunEnd, Zn as markGatewayDraining, Zt as resolveOutboundTarget, _ as countActiveDescendantRuns, _r as setTtsProvider, a as runCliAgent, an as runWithModelFallback, ar as stripHeartbeatToken, at as buildDefaultToolPolicyPipelineSteps, b as initSubagentRegistry, bn as normalizeCronJobPatch, br as OPENAI_TTS_VOICES, bt as resolveAnnounceTargetFromKey, cn as resolveFailoverReasonFromError, cr as getTtsProvider, ct as buildSafeExternalPrompt, d as parseVerboseOverride, dn as formatRestartSentinelMessage, dr as resolveTtsApiKey, dt as isExternalHookSession, en as resolveOutboundChannelPlugin, er as waitForActiveTasks, et as resolveBootstrapWarningSignaturesSeen, fr as resolveTtsAutoMode, gr as setTtsEnabled, hn as writeRestartSentinel, hr as resolveTtsProviderOrder, ht as resolveIngressWorkspaceOverrideForSpawnedRun, i as setCliSessionId, it as applyToolPolicyPipeline, jt as listAgentsForGateway, k as readJsonBodyWithLimit, kn as enqueueSystemEvent, kr as getAcpSessionManager, kt as canonicalizeSpawnedByForAgent, ln as consumeRestartSentinel, lr as isTtsEnabled, lt as detectSuspiciousPatterns, mr as resolveTtsPrefsPath, mt as normalizeSpawnedRunMetadata, n as buildBareSessionResetPrompt, nn as maybeResolveIdLikeTarget, nr as getMachineDisplayName, or as resolveAgentIdentity, ot as sniffMimeFromBase64, pn as summarizeRestartSentinel, pr as resolveTtsConfig, qn as enqueueCommandInLane, qt as ensureOutboundSessionEntry, r as getCliSessionId, rn as resetDirectoryCache, rt as resolveCronStyleNow, st as createOpenClawTools, tr as CommandLane, u as applyVerboseOverride, un as formatDoctorNonInteractiveHint, ur as isTtsProviderConfigured, ut as getHookType, vn as normalizeHttpWebhookUrl, vr as textToSpeech, wn as normalizeOptionalText, wr as getAgentRunContext, wt as applyModelOverrideToSessionEntry, yn as normalizeCronJobCreate, yr as OPENAI_TTS_MODELS, yt as readLatestAssistantReply, z as cleanOldMedia, zn as buildExecApprovalPendingReplyPayload, zr as resolveAgentTimeoutMs, zt as lookupContextTokens } from "./reply-Bf21Hr1C.js";
-import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-Dv5h0qQE.js";
+import { $a as writeConfigFile, $i as PROFILE_OPTIONS, $n as deliveryContextFromSession, Ac as normalizeReasoningLevel, Ai as GATEWAY_CLIENT_IDS, Ba as migrateLegacyConfig, Bi as writeJsonAtomic, Br as snapshotSessionOrigin, Dc as formatXHighModelHint, Do as parseDurationMs, Dr as resolveSessionResetPolicy, Ec as formatThinkingLevels, Ei as normalizeMessageChannel, Fc as supportsXHighThinking, Fn as parseSessionThreadInfo, Fr as resolveAgentMainSessionKey, Ga as parseConfigJson5, Gn as updateSessionStore, Go as isAvatarImageDataUrl, Gs as resolveRuntimeServiceVersion, Ha as createConfigIO, Hs as resolveAgentMaxConcurrent, Ii as cleanStaleLockFiles, Ir as resolveExplicitAgentSessionKey, Ja as readConfigFileSnapshot, Ji as mergeAlsoAllowPolicy, Ki as collectExplicitAllowlist, Ko as isPathWithinRoot, Lr as resolveMainSessionKey, Mc as normalizeUsageDisplay, Mi as GATEWAY_CLIENT_NAMES, Nc as normalizeVerboseLevel, Ni as hasGatewayClientCap, Nr as setSessionRuntimeModel, Os as applyMergePatch, Pn as extractDeliveryInfo, Pr as canonicalizeMainSessionAlias, Qi as resolveToolProfilePolicy, Ri as createAsyncLock, Rn as archiveRemovedSessionTranscripts, Rr as resolveMainSessionKeyFromConfig, S as resolveThinkingDefault, Sr as jsonUtf8Bytes, Tc as DEFAULT_PROVIDER, Tr as evaluateSessionFreshness, Uo as isAvatarDataUrl, Us as resolveSubagentMaxConcurrent, Vs as buildTalkConfigResponse, Wa as loadConfig, Wo as isAvatarHttpUrl, Ws as VERSION, Xa as resolveConfigSnapshotHash, Xt as estimateBase64DecodedBytes, Ya as readConfigFileSnapshotForWrite, Yo as looksLikeAvatarPath, _ as resolveHooksGmailModel, _r as stripInlineDirectiveTagsFromMessageForDisplay, a as getModelRefStatus, ar as archiveFileOnDisk, b as resolveSubagentConfiguredModelSelection, bi as isGatewayCliClient, cr as cleanupArchivedSessionTranscripts, eo as validateConfigObjectWithPlugins, fi as mapAllowFromEntries, fr as resolveSessionTranscriptCandidates, g as resolveDefaultModelForAgent, gc as isPidAlive, gr as stripInlineDirectiveTagsForDisplay, h as resolveConfiguredModelRef, jc as normalizeThinkLevel, ji as GATEWAY_CLIENT_MODES, jr as mergeSessionEntry, kc as normalizeElevatedLevel, ki as GATEWAY_CLIENT_CAPS, ks as applyLegacyMigrations, lr as readSessionMessages, mr as stripEnvelopeFromMessages, na as resolveCoreToolProfiles, or as archiveSessionTranscripts, p as resolveAllowedModelRef, pi as resolveChannelDefaultAccountId, pr as stripEnvelopeFromMessage, qa as readBestEffortConfig, qo as isSupportedLocalAvatarExtension, ri as buildChannelAccountBindings, rr as normalizeSessionDeliveryFields, s as isCliProvider, sr as capArrayByJsonBytes, t as buildAllowedModelSet, ta as listCoreToolSections, to as OpenClawSchema, tr as mergeDeliveryContext, u as normalizeModelSelection, ur as readSessionPreviewItemsFromTranscript, vi as INTERNAL_MESSAGE_CHANNEL, wc as DEFAULT_MODEL, wi as isWebchatClient, xi as isGatewayMessageChannel, xr as normalizeInputProvenance, yi as isDeliverableMessageChannel, zi as readJsonFile, zn as loadSessionStore } from "./model-selection-DU-DNNW7.js";
+import { $n as setCommandLaneConcurrency, $t as buildOutboundSessionContext, A as requestBodyErrorToText, An as isSystemEventContextChanged, Ar as resolveAgentSessionDirs, B as formatZonedTimestamp, Bn as getPluginToolMeta, Cn as normalizeOptionalSessionKey, Cr as emitAgentEvent, Ct as resolveNestedAgentLane, D as loadOpenClawPlugins, Dr as normalizeSendPolicy, En as normalizeRequiredName, Er as registerAgentRunContext, Fr as extractFileContentFromSource, Ft as pruneLegacyStoreKeys, G as stopSubagentsForRequester, Gn as clearBootstrapSnapshot, Gt as normalizeGroupActivation, H as createReplyDispatcher, Ht as sleepWithAbort, I as buildHistoryContextFromEntries, In as setHeartbeatsEnabled, Ir as extractImageContentFromSource, It as resolveGatewaySessionStoreTarget, J as abortEmbeddedPiRun, Jn as getActiveTaskCount, Jt as resolveOutboundSessionRoute, K as runEmbeddedPiAgent, Kn as clearBootstrapSnapshotOnSessionRollover, L as buildTelegramExecApprovalButtons, Lr as normalizeMimeList, Lt as resolveSessionModelRef, M as createReplyPrefixOptions, Mr as DEFAULT_INPUT_IMAGE_MAX_BYTES, Mt as listSessionsFromStore, Nr as DEFAULT_INPUT_IMAGE_MIMES, Nt as loadCombinedSessionStoreForGateway, O as createPluginRuntime, On as normalizeLegacyDeliveryInput, Or as resolveSendPolicy, P as resolveSessionAuthProfileOverride, Pn as requestHeartbeatNow, Pr as DEFAULT_INPUT_TIMEOUT_MS, Pt as loadSessionEntry, Qn as resetAllLanes, Qt as resolveSessionDeliveryTarget, R as resolveExecApprovalCommandDisplay, Rn as ToolInputError, Rr as resolveInputFileLimits, S as listDescendantRunsForRequester, Sn as normalizeOptionalAgentId, Sr as clearAgentRunContext, Tn as normalizePayloadToSystemText, Tr as onAgentEvent, Tt as loadProviderUsageSummary, U as getTotalPendingReplies, Un as resolveUserTimezone, Ut as clearSessionQueues, V as dispatchInboundMessage, Vn as resolvePluginTools, Vt as computeBackoff, W as isAbortRequestText, X as waitForActiveEmbeddedRuns, Xn as getTotalQueueSize, Y as getActiveEmbeddedRunCount, Z as waitForEmbeddedPiRunEnd, Zn as markGatewayDraining, Zt as resolveOutboundTarget, _ as countActiveDescendantRuns, _r as setTtsProvider, a as runCliAgent, an as runWithModelFallback, ar as stripHeartbeatToken, at as buildDefaultToolPolicyPipelineSteps, b as initSubagentRegistry, bn as normalizeCronJobPatch, br as OPENAI_TTS_VOICES, bt as resolveAnnounceTargetFromKey, cn as resolveFailoverReasonFromError, cr as getTtsProvider, ct as buildSafeExternalPrompt, d as parseVerboseOverride, dn as formatRestartSentinelMessage, dr as resolveTtsApiKey, dt as isExternalHookSession, en as resolveOutboundChannelPlugin, er as waitForActiveTasks, et as resolveBootstrapWarningSignaturesSeen, fr as resolveTtsAutoMode, gr as setTtsEnabled, hn as writeRestartSentinel, hr as resolveTtsProviderOrder, ht as resolveIngressWorkspaceOverrideForSpawnedRun, i as setCliSessionId, it as applyToolPolicyPipeline, jt as listAgentsForGateway, k as readJsonBodyWithLimit, kn as enqueueSystemEvent, kr as getAcpSessionManager, kt as canonicalizeSpawnedByForAgent, ln as consumeRestartSentinel, lr as isTtsEnabled, lt as detectSuspiciousPatterns, mr as resolveTtsPrefsPath, mt as normalizeSpawnedRunMetadata, n as buildBareSessionResetPrompt, nn as maybeResolveIdLikeTarget, nr as getMachineDisplayName, or as resolveAgentIdentity, ot as sniffMimeFromBase64, pn as summarizeRestartSentinel, pr as resolveTtsConfig, qn as enqueueCommandInLane, qt as ensureOutboundSessionEntry, r as getCliSessionId, rn as resetDirectoryCache, rt as resolveCronStyleNow, st as createOpenClawTools, tr as CommandLane, u as applyVerboseOverride, un as formatDoctorNonInteractiveHint, ur as isTtsProviderConfigured, ut as getHookType, vn as normalizeHttpWebhookUrl, vr as textToSpeech, wn as normalizeOptionalText, wr as getAgentRunContext, wt as applyModelOverrideToSessionEntry, yn as normalizeCronJobCreate, yr as OPENAI_TTS_MODELS, yt as readLatestAssistantReply, z as cleanOldMedia, zn as buildExecApprovalPendingReplyPayload, zr as resolveAgentTimeoutMs, zt as lookupContextTokens } from "./reply-OIc7wENR.js";
+import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-BrJT9Gf9.js";
 import { S as isCronRunSessionKey, T as parseAgentSessionKey, a as classifySessionKeyShape, c as normalizeMainKey, g as normalizeAccountId$1, h as DEFAULT_ACCOUNT_ID, l as resolveAgentIdFromSessionKey, m as toAgentStoreSessionKey, p as toAgentRequestSessionKey, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, w as isSubagentSessionKey, x as isAcpSessionKey } from "./session-key-VV3RvEri.js";
-import { f as isNotFoundPathError, i as openBoundaryFile, s as sameFileIdentity, t as resolveOpenClawPackageRoot } from "./openclaw-root-B6cGCDGF.js";
+import { f as isNotFoundPathError, i as openBoundaryFile, s as sameFileIdentity, t as resolveOpenClawPackageRoot } from "./openclaw-root-DbbVtnL2.js";
 import { i as logWarn, t as logDebug } from "./logger-m0MK99MT.js";
 import { n as runExec, t as runCommandWithTimeout } from "./exec-B8ip-O6u.js";
 import { a as hasConfiguredSecretInput } from "./types.secrets-ZqKzSyNC.js";
@@ -15,110 +15,110 @@ import "./boolean-CJxfhBkG.js";
 import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-6my-UEm4.js";
 import { y as normalizeEnvVarKey } from "./env-overrides-CSdE_DWV.js";
 import { D as registerInternalHook, E as createInternalHookEvent, O as triggerInternalHook, T as clearInternalHooks, _ as PROTECTED_PLUGIN_ROUTE_PREFIXES, h as createEmptyPluginRegistry, t as CHANNEL_IDS, u as getActivePluginRegistry, v as canonicalizePathForSecurity, y as canonicalizePathVariant } from "./registry-BKJyEPHE.js";
-import { x as isTestDefaultMemorySlotDisabled } from "./skills-Mq1GCIyL.js";
+import { x as isTestDefaultMemorySlotDisabled } from "./skills-D7xInzjY.js";
 import { f as hasBinary } from "./frontmatter-DTFXPyoL.js";
-import { i as redactSensitiveText, n as assertNoPathAliasEscape, o as compileSafeRegex, r as getDefaultRedactPatterns, s as testRegexWithBoundedInput } from "./path-alias-guards-DJQOJx9a.js";
+import { i as redactSensitiveText, n as assertNoPathAliasEscape, o as compileSafeRegex, r as getDefaultRedactPatterns, s as testRegexWithBoundedInput } from "./path-alias-guards-DBFU_Tqb.js";
 import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-Delv1GbW.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, s as resolveSessionTranscriptsDirForAgent } from "./paths-DHrunYJK.js";
 import "./chat-envelope-CKaJSmSH.js";
-import { l as registerUnhandledRejectionHandler } from "./audio-transcription-runner-Uz2dTIDx.js";
-import { C as extractTextFromChatContent } from "./image-DAEA1-oq.js";
-import "./models-config-yo6Auh6b.js";
-import { i as SsrFBlockedError, t as fetchWithSsrFGuard } from "./fetch-guard-Dsd8UoGA.js";
-import "./api-key-rotation-Cyf-Q4MB.js";
-import "./fetch-C-yIjbz-.js";
-import { o as isErrno, r as formatErrorMessage } from "./errors-B27FlGCB.js";
-import "./local-roots-B0MExwb7.js";
-import { n as loadModelCatalog } from "./model-catalog-C6EpVMgn.js";
+import { l as registerUnhandledRejectionHandler } from "./audio-transcription-runner-B02iDYTW.js";
+import { C as extractTextFromChatContent } from "./image-BUEhx-b4.js";
+import "./models-config-xqqHZFkg.js";
+import { i as SsrFBlockedError, t as fetchWithSsrFGuard } from "./fetch-guard-DGuF8Mhb.js";
+import "./api-key-rotation-DeP9Nazr.js";
+import "./fetch-DAiV9-bR.js";
+import { o as isErrno, r as formatErrorMessage } from "./errors-Bqf8bSUd.js";
+import "./local-roots-BZvUgFKO.js";
+import { n as loadModelCatalog } from "./model-catalog-BtBiWr2U.js";
 import "./proxy-fetch-Cbsa1-1O.js";
-import { B as isSilentReplyText, E as emitCronHistory, F as runGlobalGatewayStopSafely, N as getGlobalHookRunner, R as SILENT_REPLY_TOKEN, o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-kqa-lgew.js";
+import { B as isSilentReplyText, E as emitCronHistory, F as runGlobalGatewayStopSafely, N as getGlobalHookRunner, R as SILENT_REPLY_TOKEN, o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-BBYhSw-z.js";
 import { r as isRestartEnabled } from "./commands-CH9PY2Dm.js";
-import "./chunk-I6GfHIkA.js";
-import { $ as validateCronRemoveParams, $t as pickPrimaryLanIPv4, A as validateAgentsCreateParams, At as validateTalkModeParams, B as validateChatHistoryParams, Bt as ErrorCodes, C as readGatewayTokenEnv, Ct as validateSessionsListParams, D as validateAgentIdentityParams, Dt as validateSessionsResolveParams, E as formatValidationErrors, Et as validateSessionsResetParams, F as validateAgentsListParams, Ft as validateWebLoginWaitParams, G as validateConfigPatchParams, Gt as resolveDeviceAuthConnectErrorDetailCode, H as validateChatSendParams, Ht as parseSessionLabel, I as validateAgentsUpdateParams, It as validateWizardCancelParams, J as validateConfigSchemaParams, Jt as isLoopbackHost, K as validateConfigSchemaLookupParams, Kt as isLocalishHost, L as validateChannelsLogoutParams, Lt as validateWizardNextParams, M as validateAgentsFilesGetParams, Mt as validateUpdateRunParams, N as validateAgentsFilesListParams, Nt as validateWakeParams, O as validateAgentParams, Ot as validateSessionsUsageParams, P as validateAgentsFilesSetParams, Pt as validateWebLoginStartParams, Q as validateCronListParams, Qt as normalizeHostHeader, R as validateChannelsStatusParams, Rt as validateWizardStartParams, S as readGatewayPasswordEnv, St as validateSessionsDeleteParams, Tt as validateSessionsPreviewParams, U as validateConfigApplyParams, Ut as ConnectErrorDetailCodes, V as validateChatInjectParams, Vt as errorShape, W as validateConfigGetParams, Wt as resolveAuthConnectErrorDetailCode, X as validateConnectParams, Xt as isTrustedProxyAddress, Y as validateConfigSetParams, Z as validateCronAddParams, Zt as isValidIPv4, _t as validateRequestFrame, an as normalizeDeviceMetadataForAuth, at as validateDevicePairListParams, b as hasGatewayPasswordEnvCandidate, bt as validateSendParams, c as PAIRING_SCOPE$1, cn as loadGatewayTlsRuntime$1, ct as validateDeviceTokenRevokeParams, d as authorizeOperatorScopesForMethod, dn as verifyDeviceSignature, dt as validateExecApprovalResolveParams, en as resolveClientIp, et as validateCronRunParams, f as isNodeRoleMethod, ft as validateExecApprovalsGetParams, gt as validatePollParams, ht as validateModelsListParams, in as buildDeviceAuthPayloadV3, it as validateDevicePairApproveParams, j as validateAgentsDeleteParams, jt as validateToolsCatalogParams, k as validateAgentWaitParams, kt as validateTalkConfigParams, ln as deriveDeviceIdFromPublicKey, lt as validateDeviceTokenRotateParams, mt as validateLogsTailParams, n as callGateway, nn as resolveGatewayListenHosts, nt as validateCronStatusParams, o as ADMIN_SCOPE$3, on as rawDataToString, ot as validateDevicePairRejectParams, pt as validateExecApprovalsSetParams, q as validateConfigSchemaLookupResult, qt as isLoopbackAddress, rn as buildDeviceAuthPayload, rt as validateCronUpdateParams, s as APPROVALS_SCOPE$1, sn as normalizeDeviceAuthScopes, st as validateDevicePairRemoveParams, tn as resolveGatewayBindHost, tt as validateCronRunsParams, u as WRITE_SCOPE, un as normalizeDevicePublicKeyBase64Url, ut as validateExecApprovalRequestParams, vt as validateSecretsResolveParams, wt as validateSessionsPatchParams, x as hasGatewayTokenEnvCandidate, xt as validateSessionsCompactParams, yt as validateSecretsResolveResult, z as validateChatAbortParams, zt as validateWizardStatusParams } from "./call-CKFLqNkw.js";
-import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-GA0Saj6K.js";
-import { h as resolveSubagentToolPolicy, m as resolveGroupToolPolicy, p as resolveEffectiveToolPolicy } from "./read-only-account-inspect-CWAyFOOe.js";
-import { T as getChannelActivity, tt as normalizePollInput, u as sendTypingTelegram } from "./send-DAr4cmzw.js";
-import "./pi-model-discovery-CocLN2I9.js";
+import "./chunk-D4AO1AEe.js";
+import { $ as validateCronRemoveParams, $t as pickPrimaryLanIPv4, A as validateAgentsCreateParams, At as validateTalkModeParams, B as validateChatHistoryParams, Bt as ErrorCodes, C as readGatewayTokenEnv, Ct as validateSessionsListParams, D as validateAgentIdentityParams, Dt as validateSessionsResolveParams, E as formatValidationErrors, Et as validateSessionsResetParams, F as validateAgentsListParams, Ft as validateWebLoginWaitParams, G as validateConfigPatchParams, Gt as resolveDeviceAuthConnectErrorDetailCode, H as validateChatSendParams, Ht as parseSessionLabel, I as validateAgentsUpdateParams, It as validateWizardCancelParams, J as validateConfigSchemaParams, Jt as isLoopbackHost, K as validateConfigSchemaLookupParams, Kt as isLocalishHost, L as validateChannelsLogoutParams, Lt as validateWizardNextParams, M as validateAgentsFilesGetParams, Mt as validateUpdateRunParams, N as validateAgentsFilesListParams, Nt as validateWakeParams, O as validateAgentParams, Ot as validateSessionsUsageParams, P as validateAgentsFilesSetParams, Pt as validateWebLoginStartParams, Q as validateCronListParams, Qt as normalizeHostHeader, R as validateChannelsStatusParams, Rt as validateWizardStartParams, S as readGatewayPasswordEnv, St as validateSessionsDeleteParams, Tt as validateSessionsPreviewParams, U as validateConfigApplyParams, Ut as ConnectErrorDetailCodes, V as validateChatInjectParams, Vt as errorShape, W as validateConfigGetParams, Wt as resolveAuthConnectErrorDetailCode, X as validateConnectParams, Xt as isTrustedProxyAddress, Y as validateConfigSetParams, Z as validateCronAddParams, Zt as isValidIPv4, _t as validateRequestFrame, an as normalizeDeviceMetadataForAuth, at as validateDevicePairListParams, b as hasGatewayPasswordEnvCandidate, bt as validateSendParams, c as PAIRING_SCOPE$1, cn as loadGatewayTlsRuntime$1, ct as validateDeviceTokenRevokeParams, d as authorizeOperatorScopesForMethod, dn as verifyDeviceSignature, dt as validateExecApprovalResolveParams, en as resolveClientIp, et as validateCronRunParams, f as isNodeRoleMethod, ft as validateExecApprovalsGetParams, gt as validatePollParams, ht as validateModelsListParams, in as buildDeviceAuthPayloadV3, it as validateDevicePairApproveParams, j as validateAgentsDeleteParams, jt as validateToolsCatalogParams, k as validateAgentWaitParams, kt as validateTalkConfigParams, ln as deriveDeviceIdFromPublicKey, lt as validateDeviceTokenRotateParams, mt as validateLogsTailParams, n as callGateway, nn as resolveGatewayListenHosts, nt as validateCronStatusParams, o as ADMIN_SCOPE$3, on as rawDataToString, ot as validateDevicePairRejectParams, pt as validateExecApprovalsSetParams, q as validateConfigSchemaLookupResult, qt as isLoopbackAddress, rn as buildDeviceAuthPayload, rt as validateCronUpdateParams, s as APPROVALS_SCOPE$1, sn as normalizeDeviceAuthScopes, st as validateDevicePairRemoveParams, tn as resolveGatewayBindHost, tt as validateCronRunsParams, u as WRITE_SCOPE, un as normalizeDevicePublicKeyBase64Url, ut as validateExecApprovalRequestParams, vt as validateSecretsResolveParams, wt as validateSessionsPatchParams, x as hasGatewayTokenEnvCandidate, xt as validateSessionsCompactParams, yt as validateSecretsResolveResult, z as validateChatAbortParams, zt as validateWizardStatusParams } from "./call-7be5mSn_.js";
+import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-lUwvztzP.js";
+import { h as resolveSubagentToolPolicy, m as resolveGroupToolPolicy, p as resolveEffectiveToolPolicy } from "./read-only-account-inspect-sMyuBIwr.js";
+import { T as getChannelActivity, tt as normalizePollInput, u as sendTypingTelegram } from "./send-BeUTtwRC.js";
+import "./pi-model-discovery-7pqY2wzA.js";
 import { a as generateSecureToken } from "./delivery-queue-BjDC-rSc.js";
-import { d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, h as isDiagnosticsEnabled } from "./diagnostic-Booor3n0.js";
-import "./exec-approvals-allowlist-CWZm-Xjt.js";
-import "./exec-safe-bin-runtime-policy-CjDG3QJD.js";
-import { c as readLocalFileSafely, t as SafeOpenError, u as writeFileWithinRoot } from "./fs-safe-BLWbfoa6.js";
+import { d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, h as isDiagnosticsEnabled } from "./diagnostic-BgC5_P-R.js";
+import "./exec-approvals-allowlist-BSEL6MhC.js";
+import "./exec-safe-bin-runtime-policy-DbbnAmrV.js";
+import { c as readLocalFileSafely, t as SafeOpenError, u as writeFileWithinRoot } from "./fs-safe-B_UpcQBp.js";
 import { _ as saveExecApprovals, i as ensureExecApprovals, l as normalizeExecApprovals, n as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS, p as readExecApprovalsSnapshot, s as mergeExecApprovalsSocketDefaults } from "./format-relative-CsSUDXfJ.js";
-import { a as markGatewaySigusr1RestartHandled, c as setPreRestartDeferralCheck, i as isGatewaySigusr1RestartExternallyAllowed, n as deferGatewayRestartUntilIdle, o as scheduleGatewaySigusr1Restart, r as emitGatewayRestart, s as setGatewaySigusr1RestartPolicy, t as consumeGatewaySigusr1RestartAuthorization, u as cleanStaleGatewayProcessesSync } from "./logging-B9OKCko2.js";
-import { i as evaluateGatewayAuthSurfaceStates, m as isKnownSecretTargetId, r as GATEWAY_AUTH_SURFACE_PATHS } from "./runtime-web-tools-gpT7ZniL.js";
-import { a as prepareSecretsRuntimeSnapshot, i as getActiveSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, o as resolveCommandSecretsFromActiveRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-CCYCyl1P.js";
+import { a as markGatewaySigusr1RestartHandled, c as setPreRestartDeferralCheck, i as isGatewaySigusr1RestartExternallyAllowed, n as deferGatewayRestartUntilIdle, o as scheduleGatewaySigusr1Restart, r as emitGatewayRestart, s as setGatewaySigusr1RestartPolicy, t as consumeGatewaySigusr1RestartAuthorization, u as cleanStaleGatewayProcessesSync } from "./logging-59CroxmQ.js";
+import { i as evaluateGatewayAuthSurfaceStates, m as isKnownSecretTargetId, r as GATEWAY_AUTH_SURFACE_PATHS } from "./runtime-web-tools-BZcX_oAn.js";
+import { a as prepareSecretsRuntimeSnapshot, i as getActiveSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, o as resolveCommandSecretsFromActiveRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-hakwcpul.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-BtegmH1U.js";
-import { n as resolveMessageChannelSelection } from "./channel-selection-CrnnQqyM.js";
-import { i as buildChannelUiCatalog, t as applyPluginAutoEnable } from "./plugin-auto-enable-POm3kIKs.js";
-import "./writer-DW7GwLNb.js";
-import "./pairing-store-CGmLbKax.js";
+import { n as resolveMessageChannelSelection } from "./channel-selection-Cz7kZ_dd.js";
+import { i as buildChannelUiCatalog, t as applyPluginAutoEnable } from "./plugin-auto-enable-BYUBkHiG.js";
+import "./writer-Mpvw_WMM.js";
+import "./pairing-store-Dr8a_B6n.js";
 import { c as formatUsd, d as deriveSessionTotalTokens, f as hasNonzeroUsage, i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, s as formatTokenCount, t as discoverAllSessions } from "./session-cost-usage-1EN6nQFQ.js";
 import "./fetch-CLE5aXgx.js";
-import "./sqlite-DMwlw8gY.js";
+import "./sqlite-BXiqNpZr.js";
 import { n as resolveCronStorePath, r as saveCronStore, t as loadCronStore } from "./store-BYAXpd4r.js";
-import "./connection-auth-_DWNXAV0.js";
-import { n as getMemorySearchManager, r as resolveMemoryBackendConfig, t as evictAllMemorySearchManagers } from "./memory-qo2PyyGc.js";
-import { s as resolveMemorySearchConfig } from "./manager-D4NBKxDJ.js";
+import "./connection-auth-tv7E7e3R.js";
+import { n as getMemorySearchManager, r as resolveMemoryBackendConfig, t as evictAllMemorySearchManagers } from "./memory-adblmZ7U.js";
+import { s as resolveMemorySearchConfig } from "./manager-BaDp-h4i.js";
 import { t as formatDocsLink } from "./links-BM5olEmW.js";
 import { n as runCommandWithRuntime } from "./cli-utils-B1CUwwWQ.js";
-import "./command-secret-targets-DXU9DFeM.js";
+import "./command-secret-targets-BQ5lbER9.js";
 import { t as formatHelpExamples } from "./help-format-CVafmYlm.js";
 import { n as withProgress } from "./progress-DVG93Lop.js";
-import "./memory-cli-DhQM5b25.js";
-import { n as createOutboundSendDeps, t as createDefaultDeps } from "./deps-CLLCZe9I.js";
+import "./memory-cli-C5dGMHKl.js";
+import { n as createOutboundSendDeps, t as createDefaultDeps } from "./deps-Y7mMaM9D.js";
 import "./prompt-Dw2SzW-X.js";
 import "./binaries-AvCyfzgx.js";
 import { t as ensureOpenClawCliOnPath } from "./path-env-CeV-X7QB.js";
-import { a as inspectPortUsage, c as formatPortDiagnostics, r as ensurePortAvailable } from "./ports-DoRPPhz1.js";
+import { a as inspectPortUsage, c as formatPortDiagnostics, r as ensurePortAvailable } from "./ports-BKzkl2Nt.js";
 import "./runtime-guard-BbTH9fjr.js";
-import { n as waitForPortBindable, t as forceFreePortAndWait } from "./ports-BgVXI3Be.js";
+import { n as waitForPortBindable, t as forceFreePortAndWait } from "./ports-C6HO6zSD.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-BgP2XPPl.js";
-import { t as readSecretFromFile } from "./secret-file-DcuJtucq.js";
+import { t as readSecretFromFile } from "./secret-file-BCAZa3Jw.js";
 import { n as inheritOptionFromParent } from "./command-options-arOgkwup.js";
 import "./prompt-style-Dc8jJv7n.js";
 import { t as WizardCancelledError } from "./prompts-BAsxDmRr.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, s as loadAgentIdentityFromWorkspace, t as applyAgentConfig } from "./agents.config-CxFlr00u.js";
-import "./skill-scanner-B8J7JGHG.js";
-import { n as formatConfigIssueLines } from "./issue-format-Dbw0ZKZU.js";
-import { t as buildChannelAccountSnapshot } from "./status-C2lZy-Fn.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, s as loadAgentIdentityFromWorkspace, t as applyAgentConfig } from "./agents.config-63M2f6aF.js";
+import "./skill-scanner-djTgcKux.js";
+import { n as formatConfigIssueLines } from "./issue-format-hszNX8Io.js";
+import { t as buildChannelAccountSnapshot } from "./status-DlhZNZRA.js";
 import "./channels-status-issues-HL-uv6_6.js";
-import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-CHOdPFBK.js";
-import { n as assertExplicitGatewayAuthModeWhenBothConfigured } from "./gateway-install-token-qIxBiiV_.js";
+import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-BhnwKwS_.js";
+import { n as assertExplicitGatewayAuthModeWhenBothConfigured } from "./gateway-install-token-CVO9K6d2.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-BypHVf47.js";
-import { a as resolveGatewayAuth, c as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, d as safeEqualSecret, i as isLocalDirectRequest, l as createAuthRateLimiter, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH, t as assertGatewayAuthConfigured, u as normalizeRateLimitClientIp } from "./auth-Cp-1JzUb.js";
-import { o as handleReset } from "./onboard-helpers-xbYuvLLu.js";
-import "./systemd-B5QGtWUt.js";
-import "./service-Cfk6VWeP.js";
-import { c as parseProcCmdline, n as addGatewayServiceCommands, s as isGatewayArgv } from "./daemon-cli-Be1vZo5e.js";
-import "./diagnostics-DU5X6chC.js";
-import "./inspect-3xM6J2Z_.js";
+import { a as resolveGatewayAuth, c as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, d as safeEqualSecret, i as isLocalDirectRequest, l as createAuthRateLimiter, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH, t as assertGatewayAuthConfigured, u as normalizeRateLimitClientIp } from "./auth-Bu24hYWH.js";
+import { o as handleReset } from "./onboard-helpers-C-tI0ORj.js";
+import "./systemd-lqHMKF03.js";
+import "./service-kXk8K3mn.js";
+import { c as parseProcCmdline, n as addGatewayServiceCommands, s as isGatewayArgv } from "./daemon-cli-qKu_98e8.js";
+import "./diagnostics-C-VDJRVJ.js";
+import "./inspect-0yj9c1e2.js";
 import { t as parsePort$1 } from "./parse-port-B8IlBkRL.js";
-import { r as probeGateway } from "./probe-auth-ClUveUpg.js";
+import { r as probeGateway } from "./probe-auth-BhN3PhE1.js";
 import "./table-ByNbkdzT.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-CFzloIhd.js";
-import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-C6ksnJEO.js";
-import { t as discoverGatewayBeacons } from "./bonjour-discovery-LLqnJbvr.js";
-import { d as coerceFiniteScheduleNumber, f as computeNextRunAtMs, g as resolveRequiredConfiguredSecretRefInputString, m as resolveConfiguredSecretInputString, p as computePreviousRunAtMs, t as runGatewayUpdate, u as normalizeStoredCronJobs } from "./update-runner-Dk9ujIjY.js";
-import { n as getStatusSummary, r as pickGatewaySelfPresence } from "./status-DN1kwt_G.js";
-import { a as styleHealthChannelLine, c as startHeartbeatRunner, d as onHeartbeatEvent, l as resolveHeartbeatVisibility, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines, u as getLastHeartbeatEvent } from "./health-DKId61cm.js";
-import { m as normalizeUpdateChannel, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-BI023AHZ.js";
-import "./onboarding.secret-input-BI289pRS.js";
-import { t as runOnboardingWizard } from "./onboarding-CGx-wanB.js";
+import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-C_hG8rgh.js";
+import { t as discoverGatewayBeacons } from "./bonjour-discovery-Cak-jClv.js";
+import { d as coerceFiniteScheduleNumber, f as computeNextRunAtMs, g as resolveRequiredConfiguredSecretRefInputString, m as resolveConfiguredSecretInputString, p as computePreviousRunAtMs, t as runGatewayUpdate, u as normalizeStoredCronJobs } from "./update-runner-Dh84Ivzm.js";
+import { n as getStatusSummary, r as pickGatewaySelfPresence } from "./status-XHz3g6hB.js";
+import { a as styleHealthChannelLine, c as startHeartbeatRunner, d as onHeartbeatEvent, l as resolveHeartbeatVisibility, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines, u as getLastHeartbeatEvent } from "./health-TMNIIFvC.js";
+import { m as normalizeUpdateChannel, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-D9S5HJn4.js";
+import "./onboarding.secret-input-DkAfkFVQ.js";
+import { t as runOnboardingWizard } from "./onboarding-BXIBW9kp.js";
 import { _ as buildGogWatchStartArgs, g as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, w as resolveGmailHookRuntimeConfig } from "./gmail-setup-utils-tlW4Go6J.js";
-import { t as createOutboundSendDeps$1 } from "./outbound-send-deps-BfOiemtW.js";
-import { a as resolveCronRunLogPath, i as readCronRunLogEntriesPageAll, o as resolveCronRunLogPruneOptions, r as readCronRunLogEntriesPage, t as appendCronRunLog } from "./run-log-BqSHMnAd.js";
-import { a as resolveAgentOutboundTarget, i as resolveAgentDeliveryPlan, n as agentCommandFromIngress } from "./agent-CCHm3dnF.js";
-import { n as collectEnabledInsecureOrDangerousFlags } from "./audit-CmbdapG_.js";
-import "./status.update-B7WMKBpu.js";
-import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-DaDGuTlc.js";
+import { t as createOutboundSendDeps$1 } from "./outbound-send-deps-ClezclXA.js";
+import { a as resolveCronRunLogPath, i as readCronRunLogEntriesPageAll, o as resolveCronRunLogPruneOptions, r as readCronRunLogEntriesPage, t as appendCronRunLog } from "./run-log-D3XR2BLm.js";
+import { a as resolveAgentOutboundTarget, i as resolveAgentDeliveryPlan, n as agentCommandFromIngress } from "./agent-o_NVopFC.js";
+import { n as collectEnabledInsecureOrDangerousFlags } from "./audit-Cg4EdF12.js";
+import "./status.update-s77gig85.js";
+import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-DY5PSKK1.js";
 import { pathToFileURL } from "node:url";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import chalk from "chalk";
 import { isDeepStrictEqual } from "node:util";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { spawn, spawnSync } from "node:child_process";
 import crypto, { createHash, randomBytes, randomUUID } from "node:crypto";
 import { z } from "zod";
@@ -1291,7 +1291,7 @@ function resolveCheckIntervalMs(cfg) {
 }
 async function readState(statePath) {
 	try {
-		const raw = await fs$1.readFile(statePath, "utf-8");
+		const raw = await fsPromises.readFile(statePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		return parsed && typeof parsed === "object" ? parsed : {};
 	} catch {
@@ -1372,7 +1372,7 @@ async function runAutoUpdateCommand(params) {
 			path.join(params.root, "dist", "index.mjs")
 		];
 		for (const candidate of candidates) try {
-			await fs$1.access(candidate);
+			await fsPromises.access(candidate);
 			argv.push(execPath, candidate, ...baseArgs);
 			break;
 		} catch {}
@@ -9399,7 +9399,7 @@ function resolveWorkspaceFilePathResultOrThrow(params) {
 }
 async function resolveWorkspaceRealPath(workspaceDir) {
 	try {
-		return await fs$1.realpath(workspaceDir);
+		return await fsPromises.realpath(workspaceDir);
 	} catch {
 		return path.resolve(workspaceDir);
 	}
@@ -9428,7 +9428,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 	};
 	let candidateLstat;
 	try {
-		candidateLstat = await fs$1.lstat(candidatePath);
+		candidateLstat = await fsPromises.lstat(candidatePath);
 	} catch (err) {
 		return resolveWorkspaceFilePathResultOrThrow({
 			error: err,
@@ -9439,7 +9439,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 	if (candidateLstat.isSymbolicLink()) {
 		let targetReal;
 		try {
-			targetReal = await fs$1.realpath(candidatePath);
+			targetReal = await fsPromises.realpath(candidatePath);
 		} catch (err) {
 			return resolveWorkspaceFilePathResultOrThrow({
 				error: err,
@@ -9449,7 +9449,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 		}
 		let targetStat;
 		try {
-			targetStat = await fs$1.stat(targetReal);
+			targetStat = await fsPromises.stat(targetReal);
 		} catch (err) {
 			return resolveWorkspaceFilePathResultOrThrow({
 				error: err,
@@ -9487,13 +9487,13 @@ async function resolveAgentWorkspaceFilePath(params) {
 	return {
 		kind: "ready",
 		requestPath,
-		ioPath: await fs$1.realpath(candidatePath).catch(() => candidatePath),
+		ioPath: await fsPromises.realpath(candidatePath).catch(() => candidatePath),
 		workspaceReal
 	};
 }
 async function statFileSafely(filePath) {
 	try {
-		const [stat, lstat] = await Promise.all([fs$1.stat(filePath), fs$1.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([fsPromises.stat(filePath), fsPromises.lstat(filePath)]);
 		if (lstat.isSymbolicLink() || !stat.isFile()) return null;
 		if (stat.nlink > 1) return null;
 		if (!sameFileIdentity(stat, lstat)) return null;
@@ -9587,7 +9587,7 @@ function respondAgentNotFound(respond, agentId) {
 async function moveToTrashBestEffort(pathname) {
 	if (!pathname) return;
 	try {
-		await fs$1.access(pathname);
+		await fsPromises.access(pathname);
 	} catch {
 		return;
 	}
@@ -9663,7 +9663,7 @@ const agentsHandlers = {
 			dir: workspaceDir,
 			ensureBootstrapFiles: !Boolean(nextConfig.agents?.defaults?.skipBootstrap)
 		});
-		await fs$1.mkdir(resolveSessionTranscriptsDirForAgent(agentId), { recursive: true });
+		await fsPromises.mkdir(resolveSessionTranscriptsDirForAgent(agentId), { recursive: true });
 		await writeConfigFile(nextConfig);
 		const safeName = sanitizeIdentityLine(rawName);
 		const emoji = resolveOptionalStringParam(params.emoji);
@@ -9676,7 +9676,7 @@ const agentsHandlers = {
 			...avatar ? [`- Avatar: ${sanitizeIdentityLine(avatar)}`] : [],
 			""
 		];
-		await fs$1.appendFile(identityPath, lines.join("\n"), "utf-8");
+		await fsPromises.appendFile(identityPath, lines.join("\n"), "utf-8");
 		respond(true, {
 			ok: true,
 			agentId,
@@ -9711,9 +9711,9 @@ const agentsHandlers = {
 		});
 		if (avatar) {
 			const workspace = workspaceDir ?? resolveAgentWorkspaceDir(nextConfig, agentId);
-			await fs$1.mkdir(workspace, { recursive: true });
+			await fsPromises.mkdir(workspace, { recursive: true });
 			const identityPath = path.join(workspace, DEFAULT_IDENTITY_FILENAME);
-			await fs$1.appendFile(identityPath, `\n- Avatar: ${sanitizeIdentityLine(avatar)}\n`, "utf-8");
+			await fsPromises.appendFile(identityPath, `\n- Avatar: ${sanitizeIdentityLine(avatar)}\n`, "utf-8");
 		}
 		respond(true, {
 			ok: true,
@@ -9837,7 +9837,7 @@ const agentsHandlers = {
 		const resolved = resolveAgentWorkspaceFileOrRespondError(params, respond);
 		if (!resolved) return;
 		const { agentId, workspaceDir, name } = resolved;
-		await fs$1.mkdir(workspaceDir, { recursive: true });
+		await fsPromises.mkdir(workspaceDir, { recursive: true });
 		const filePath = path.join(workspaceDir, name);
 		const resolvedPath = await resolveWorkspaceFilePathOrRespond({
 			respond,
@@ -12696,14 +12696,14 @@ function isRollingLogFile(file) {
 	return ROLLING_LOG_RE.test(path.basename(file));
 }
 async function resolveLogFile(file) {
-	if (await fs$1.stat(file).catch(() => null)) return file;
+	if (await fsPromises.stat(file).catch(() => null)) return file;
 	if (!isRollingLogFile(file)) return file;
 	const dir = path.dirname(file);
-	const entries = await fs$1.readdir(dir, { withFileTypes: true }).catch(() => null);
+	const entries = await fsPromises.readdir(dir, { withFileTypes: true }).catch(() => null);
 	if (!entries) return file;
 	return (await Promise.all(entries.filter((entry) => entry.isFile() && ROLLING_LOG_RE.test(entry.name)).map(async (entry) => {
 		const fullPath = path.join(dir, entry.name);
-		const fileStat = await fs$1.stat(fullPath).catch(() => null);
+		const fileStat = await fsPromises.stat(fullPath).catch(() => null);
 		return fileStat ? {
 			path: fullPath,
 			mtimeMs: fileStat.mtimeMs
@@ -12711,7 +12711,7 @@ async function resolveLogFile(file) {
 	}))).filter((entry) => Boolean(entry)).toSorted((a, b) => b.mtimeMs - a.mtimeMs)[0]?.path ?? file;
 }
 async function readLogSlice(params) {
-	const stat = await fs$1.stat(params.file).catch(() => null);
+	const stat = await fsPromises.stat(params.file).catch(() => null);
 	if (!stat) return {
 		cursor: 0,
 		size: 0,
@@ -12749,7 +12749,7 @@ async function readLogSlice(params) {
 		truncated,
 		reset
 	};
-	const handle = await fs$1.open(params.file, "r");
+	const handle = await fsPromises.open(params.file, "r");
 	try {
 		let prefix = "";
 		if (start > 0) {
@@ -19275,7 +19275,7 @@ async function resolveGatewayOwnerStatus(pid, payload, platform, port) {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fs$1.readFile(lockPath, "utf8");
+		const raw = await fsPromises.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number") return null;
 		if (typeof parsed.createdAt !== "string") return null;
@@ -19310,11 +19310,11 @@ async function acquireGatewayLock(opts = {}) {
 	const platform = opts.platform ?? process.platform;
 	const port = opts.port;
 	const { lockPath, configPath } = resolveGatewayLockPath(env);
-	await fs$1.mkdir(path.dirname(lockPath), { recursive: true });
+	await fsPromises.mkdir(path.dirname(lockPath), { recursive: true });
 	const startedAt = Date.now();
 	let lastPayload = null;
 	while (Date.now() - startedAt < timeoutMs) try {
-		const handle = await fs$1.open(lockPath, "wx");
+		const handle = await fsPromises.open(lockPath, "wx");
 		const startTime = platform === "linux" ? readLinuxStartTime(process.pid) : null;
 		const payload = {
 			pid: process.pid,
@@ -19328,7 +19328,7 @@ async function acquireGatewayLock(opts = {}) {
 			configPath,
 			release: async () => {
 				await handle.close().catch(() => void 0);
-				await fs$1.rm(lockPath, { force: true });
+				await fsPromises.rm(lockPath, { force: true });
 			}
 		};
 	} catch (err) {
@@ -19337,7 +19337,7 @@ async function acquireGatewayLock(opts = {}) {
 		const ownerPid = lastPayload?.pid;
 		const ownerStatus = ownerPid ? await resolveGatewayOwnerStatus(ownerPid, lastPayload, platform, port) : "unknown";
 		if (ownerStatus === "dead" && ownerPid) {
-			await fs$1.rm(lockPath, { force: true });
+			await fsPromises.rm(lockPath, { force: true });
 			continue;
 		}
 		if (ownerStatus !== "alive") {
@@ -19347,13 +19347,13 @@ async function acquireGatewayLock(opts = {}) {
 				stale = Number.isFinite(createdAt) ? Date.now() - createdAt > staleMs : false;
 			}
 			if (!stale) try {
-				const st = await fs$1.stat(lockPath);
+				const st = await fsPromises.stat(lockPath);
 				stale = Date.now() - st.mtimeMs > staleMs;
 			} catch {
 				stale = false;
 			}
 			if (stale) {
-				await fs$1.rm(lockPath, { force: true });
+				await fsPromises.rm(lockPath, { force: true });
 				continue;
 			}
 		}
@@ -21554,7 +21554,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-BjDC-rSc.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-kqa-lgew.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-BBYhSw-z.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),