activeclaw 2026.4.5 → 2026.4.9

package/dist/{gateway-cli-BOZLG619.js → gateway-cli-X1ZtTIn1.js}

@@ -2,7 +2,7 @@ import { A as theme, M as getLogger, N as getResolvedLoggerSettings, O as colori
 import { g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-BfR2LXbA.js";
 import "./boolean-BHdNsbzF.js";
 import { a as logAcceptedEnvOption, i as isTruthyEnvValue } from "./entry.js";
-import { $t as readSessionPreviewItemsFromTranscript, Aa as isAvatarDataUrl, Ai as createConfigIO, Br as resolveToolProfilePolicy, C as normalizeVerboseLevel, Cn as resolveAgentMainSessionKey, Ct as extractDeliveryInfo, Dc as DEFAULT_PROVIDER, Do as buildTalkConfigResponse, Dr as readJsonFile, Dt as archiveRemovedSessionTranscripts, Ec as DEFAULT_MODEL, En as resolveMainSessionKeyFromConfig, Er as createAsyncLock, Fi as readBestEffortConfig, Gn as buildChannelAccountBindings, Hi as validateConfigObjectWithPlugins, Ht as deliveryContextFromSession, Ia as looksLikeAvatarPath, Ii as readConfigFileSnapshot, Ir as mergeAlsoAllowPolicy, Jt as archiveFileOnDisk, Kt as normalizeSessionDeliveryFields, Li as readConfigFileSnapshotForWrite, Ma as isAvatarImageDataUrl, Mi as loadConfig, Na as isPathWithinRoot, Ni as parseConfigJson5, Oi as migrateLegacyConfig, On as snapshotSessionOrigin, Oo as resolveAgentMaxConcurrent, Or as writeJsonAtomic, Ot as loadSessionStore, Pa as isSupportedLocalAvatarExtension, Pr as collectExplicitAllowlist, Pt as updateSessionStore, Qt as readSessionMessages, Ri as resolveConfigSnapshotHash, S as normalizeUsageDisplay, Sn as canonicalizeMainSessionAlias, T as supportsXHighThinking, Tn as resolveMainSessionKey, Ui as OpenClawSchema, Ur as listCoreToolSections, Vi as writeConfigFile, Vr as PROFILE_OPTIONS, Wr as resolveCoreToolProfiles, Wt as mergeDeliveryContext, Xo as isPidAlive, Xt as capArrayByJsonBytes, Yt as archiveSessionTranscripts, Zo as buildAllowedModelSet, Zt as cleanupArchivedSessionTranscripts, _ as formatXHighModelHint, _r as GATEWAY_CLIENT_CAPS, an as stripInlineDirectiveTagsForDisplay, b as normalizeReasoningLevel, br as GATEWAY_CLIENT_NAMES, cr as isGatewayCliClient, dn as jsonUtf8Bytes, ds as resolveConfiguredModelRef, er as mapAllowFromEntries, fr as isWebchatClient, fs as resolveDefaultModelForAgent, g as formatThinkingLevels, gs as resolveSubagentConfiguredModelSelection, hn as resolveSessionResetPolicy, ho as applyLegacyMigrations, ja as isAvatarHttpUrl, ko as resolveSubagentMaxConcurrent, lr as isGatewayMessageChannel, ls as resolveAllowedModelRef, mo as applyMergePatch, mr as normalizeMessageChannel, nn as stripEnvelopeFromMessage, on as stripInlineDirectiveTagsFromMessageForDisplay, or as INTERNAL_MESSAGE_CHANNEL, os as normalizeModelSelection, pn as evaluateSessionFreshness, ps as resolveHooksGmailModel, rn as stripEnvelopeFromMessages, rs as isCliProvider, sr as isDeliverableMessageChannel, tn as resolveSessionTranscriptCandidates, tr as resolveChannelDefaultAccountId, ts as getModelRefStatus, un as normalizeInputProvenance, vr as GATEWAY_CLIENT_IDS, vs as resolveThinkingDefault, wn as resolveExplicitAgentSessionKey, wr as cleanStaleLockFiles, wt as parseSessionThreadInfo, x as normalizeThinkLevel, xn as setSessionRuntimeModel, xr as hasGatewayClientCap, y as normalizeElevatedLevel, yn as mergeSessionEntry, yr as GATEWAY_CLIENT_MODES, z as estimateBase64DecodedBytes } from "./auth-profiles-B5hyImOM.js";
+import { $t as readSessionPreviewItemsFromTranscript, Aa as isAvatarDataUrl, Ai as createConfigIO, Br as resolveToolProfilePolicy, C as normalizeVerboseLevel, Cn as resolveAgentMainSessionKey, Ct as extractDeliveryInfo, Dc as DEFAULT_PROVIDER, Do as buildTalkConfigResponse, Dr as readJsonFile, Dt as archiveRemovedSessionTranscripts, Ec as DEFAULT_MODEL, En as resolveMainSessionKeyFromConfig, Er as createAsyncLock, Fi as readBestEffortConfig, Gn as buildChannelAccountBindings, Hi as validateConfigObjectWithPlugins, Ht as deliveryContextFromSession, Ia as looksLikeAvatarPath, Ii as readConfigFileSnapshot, Ir as mergeAlsoAllowPolicy, Jt as archiveFileOnDisk, Kt as normalizeSessionDeliveryFields, Li as readConfigFileSnapshotForWrite, Ma as isAvatarImageDataUrl, Mi as loadConfig, Na as isPathWithinRoot, Ni as parseConfigJson5, Oi as migrateLegacyConfig, On as snapshotSessionOrigin, Oo as resolveAgentMaxConcurrent, Or as writeJsonAtomic, Ot as loadSessionStore, Pa as isSupportedLocalAvatarExtension, Pr as collectExplicitAllowlist, Pt as updateSessionStore, Qt as readSessionMessages, Ri as resolveConfigSnapshotHash, S as normalizeUsageDisplay, Sn as canonicalizeMainSessionAlias, T as supportsXHighThinking, Tn as resolveMainSessionKey, Ui as OpenClawSchema, Ur as listCoreToolSections, Vi as writeConfigFile, Vr as PROFILE_OPTIONS, Wr as resolveCoreToolProfiles, Wt as mergeDeliveryContext, Xo as isPidAlive, Xt as capArrayByJsonBytes, Yt as archiveSessionTranscripts, Zo as buildAllowedModelSet, Zt as cleanupArchivedSessionTranscripts, _ as formatXHighModelHint, _r as GATEWAY_CLIENT_CAPS, an as stripInlineDirectiveTagsForDisplay, b as normalizeReasoningLevel, br as GATEWAY_CLIENT_NAMES, cr as isGatewayCliClient, dn as jsonUtf8Bytes, ds as resolveConfiguredModelRef, er as mapAllowFromEntries, fr as isWebchatClient, fs as resolveDefaultModelForAgent, g as formatThinkingLevels, gs as resolveSubagentConfiguredModelSelection, hn as resolveSessionResetPolicy, ho as applyLegacyMigrations, ja as isAvatarHttpUrl, ko as resolveSubagentMaxConcurrent, lr as isGatewayMessageChannel, ls as resolveAllowedModelRef, mo as applyMergePatch, mr as normalizeMessageChannel, nn as stripEnvelopeFromMessage, on as stripInlineDirectiveTagsFromMessageForDisplay, or as INTERNAL_MESSAGE_CHANNEL, os as normalizeModelSelection, pn as evaluateSessionFreshness, ps as resolveHooksGmailModel, rn as stripEnvelopeFromMessages, rs as isCliProvider, sr as isDeliverableMessageChannel, tn as resolveSessionTranscriptCandidates, tr as resolveChannelDefaultAccountId, ts as getModelRefStatus, un as normalizeInputProvenance, vr as GATEWAY_CLIENT_IDS, vs as resolveThinkingDefault, wn as resolveExplicitAgentSessionKey, wr as cleanStaleLockFiles, wt as parseSessionThreadInfo, x as normalizeThinkLevel, xn as setSessionRuntimeModel, xr as hasGatewayClientCap, y as normalizeElevatedLevel, yn as mergeSessionEntry, yr as GATEWAY_CLIENT_MODES, z as estimateBase64DecodedBytes } from "./auth-profiles-D9Wn945p.js";
 import { i as formatCliCommand } from "./scan-paths-1Ht0wvdC.js";
 import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-OAwT1oHV.js";
 import { S as isCronRunSessionKey, T as parseAgentSessionKey, a as classifySessionKeyShape, c as normalizeMainKey, g as normalizeAccountId$1, h as DEFAULT_ACCOUNT_ID, l as resolveAgentIdFromSessionKey, m as toAgentStoreSessionKey, p as toAgentRequestSessionKey, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, w as isSubagentSessionKey, x as isAcpSessionKey } from "./session-key-9lbhEIb9.js";
@@ -21,100 +21,100 @@ import { x as isTestDefaultMemorySlotDisabled } from "./skills-VQO3Anke.js";
 import { f as hasBinary } from "./frontmatter-DAfBRAy7.js";
 import { a as testRegexWithBoundedInput, i as compileSafeRegex, n as redactSensitiveText, t as getDefaultRedactPatterns } from "./redact-CxtZhh9L.js";
 import { n as assertNoPathAliasEscape } from "./path-alias-guards-DHv0a8uY.js";
-import { $ as normalizeHttpWebhookUrl, $n as getTtsProvider, $t as resolveSendPolicy, A as isExternalHookSession, An as ToolInputError, B as maybeResolveIdLikeTarget, Bt as setHeartbeatsEnabled, C as getCliSessionId, D as buildSafeExternalPrompt, Dn as waitForEmbeddedPiRunEnd, Dt as formatZonedTimestamp, E as createOpenClawTools, En as waitForActiveEmbeddedRuns, Fn as onAgentEvent, G as formatDoctorNonInteractiveHint, Gn as resolveAgentSessionDirs, Gt as DEFAULT_INPUT_IMAGE_MAX_BYTES, I as resolveOutboundTarget, In as registerAgentRunContext, J as summarizeRestartSentinel, Jt as extractFileContentFromSource, K as formatRestartSentinelMessage, Kt as DEFAULT_INPUT_IMAGE_MIMES, L as resolveSessionDeliveryTarget, M as ensureOutboundSessionEntry, Mn as clearAgentRunContext, N as resolveOutboundSessionRoute, Nn as emitAgentEvent, Nt as enqueueSystemEvent, O as detectSuspiciousPatterns, Pn as getAgentRunContext, Pt as isSystemEventContextChanged, Qn as clearBootstrapSnapshotOnSessionRollover, Qt as normalizeSendPolicy, R as resolveOutboundChannelPlugin, Rt as requestHeartbeatNow, S as buildBareSessionResetPrompt, Sn as runEmbeddedPiAgent, Sr as getMachineDisplayName, St as loadProviderUsageSummary, T as runCliAgent, Tn as getActiveEmbeddedRunCount, Tr as stripHeartbeatToken, U as runWithModelFallback, Un as resolveFailoverReasonFromError, V as resetDirectoryCache, W as consumeRestartSentinel, Wn as getAcpSessionManager, X as writeRestartSentinel, Xt as normalizeMimeList, Yn as resolveUserTimezone, Yt as extractImageContentFromSource, Zn as clearBootstrapSnapshot, Zt as resolveInputFileLimits, _ as dispatchInboundMessage, _n as resolveNestedAgentLane, _r as markGatewayDraining, _t as applyVerboseOverride, a as getPluginToolMeta, an as initSubagentRegistry, ar as resolveTtsPrefsPath, at as normalizeOptionalText, br as waitForActiveTasks, bt as resolveIngressWorkspaceOverrideForSpawnedRun, c as loadOpenClawPlugins, cr as setTtsProvider, d as requestBodyErrorToText, dr as OPENAI_TTS_VOICES, dt as resolveSessionAuthProfileOverride, en as isAbortRequestText, er as isTtsEnabled, et as normalizeCronJobCreate, fn as resolveAgentTimeoutMs, g as resolveExecApprovalCommandDisplay, gr as getTotalQueueSize, gt as applyModelOverrideToSessionEntry, h as buildTelegramExecApprovalButtons, i as sniffMimeFromBase64, ir as resolveTtsConfig, it as normalizeOptionalSessionKey, jn as buildExecApprovalPendingReplyPayload, k as getHookType, kn as resolveCronStyleNow, l as createPluginRuntime, lr as textToSpeech, lt as normalizeLegacyDeliveryInput, m as buildHistoryContextFromEntries, mn as readLatestAssistantReply, mr as getActiveTaskCount, n as applyToolPolicyPipeline, nn as countActiveDescendantRuns, nr as resolveTtsApiKey, o as resolvePluginTools, or as resolveTtsProviderOrder, ot as normalizePayloadToSystemText, p as createReplyPrefixOptions, pn as resolveAnnounceTargetFromKey, pr as enqueueCommandInLane, qn as resolveAgentIdentity, qt as DEFAULT_INPUT_TIMEOUT_MS, r as buildDefaultToolPolicyPipelineSteps, rr as resolveTtsAutoMode, rt as normalizeOptionalAgentId, sn as listDescendantRunsForRequester, sr as setTtsEnabled, st as normalizeRequiredName, tn as stopSubagentsForRequester, tr as isTtsProviderConfigured, tt as normalizeCronJobPatch, u as readJsonBodyWithLimit, ur as OPENAI_TTS_MODELS, v as createReplyDispatcher, vr as resetAllLanes, vt as parseVerboseOverride, w as setCliSessionId, wn as abortEmbeddedPiRun, x as cleanOldMedia, xn as buildOutboundSessionContext, xr as CommandLane, xt as normalizeGroupActivation, y as getTotalPendingReplies, yn as clearSessionQueues, yr as setCommandLaneConcurrency, yt as normalizeSpawnedRunMetadata, zn as resolveBootstrapWarningSignaturesSeen } from "./compact-qJ63Ml29.js";
+import { $ as normalizeHttpWebhookUrl, $n as getTtsProvider, $t as resolveSendPolicy, A as isExternalHookSession, An as ToolInputError, B as maybeResolveIdLikeTarget, Bt as setHeartbeatsEnabled, C as getCliSessionId, D as buildSafeExternalPrompt, Dn as waitForEmbeddedPiRunEnd, Dt as formatZonedTimestamp, E as createOpenClawTools, En as waitForActiveEmbeddedRuns, Fn as onAgentEvent, G as formatDoctorNonInteractiveHint, Gn as resolveAgentSessionDirs, Gt as DEFAULT_INPUT_IMAGE_MAX_BYTES, I as resolveOutboundTarget, In as registerAgentRunContext, J as summarizeRestartSentinel, Jt as extractFileContentFromSource, K as formatRestartSentinelMessage, Kt as DEFAULT_INPUT_IMAGE_MIMES, L as resolveSessionDeliveryTarget, M as ensureOutboundSessionEntry, Mn as clearAgentRunContext, N as resolveOutboundSessionRoute, Nn as emitAgentEvent, Nt as enqueueSystemEvent, O as detectSuspiciousPatterns, Pn as getAgentRunContext, Pt as isSystemEventContextChanged, Qn as clearBootstrapSnapshotOnSessionRollover, Qt as normalizeSendPolicy, R as resolveOutboundChannelPlugin, Rt as requestHeartbeatNow, S as buildBareSessionResetPrompt, Sn as runEmbeddedPiAgent, Sr as getMachineDisplayName, St as loadProviderUsageSummary, T as runCliAgent, Tn as getActiveEmbeddedRunCount, Tr as stripHeartbeatToken, U as runWithModelFallback, Un as resolveFailoverReasonFromError, V as resetDirectoryCache, W as consumeRestartSentinel, Wn as getAcpSessionManager, X as writeRestartSentinel, Xt as normalizeMimeList, Yn as resolveUserTimezone, Yt as extractImageContentFromSource, Zn as clearBootstrapSnapshot, Zt as resolveInputFileLimits, _ as dispatchInboundMessage, _n as resolveNestedAgentLane, _r as markGatewayDraining, _t as applyVerboseOverride, a as getPluginToolMeta, an as initSubagentRegistry, ar as resolveTtsPrefsPath, at as normalizeOptionalText, br as waitForActiveTasks, bt as resolveIngressWorkspaceOverrideForSpawnedRun, c as loadOpenClawPlugins, cr as setTtsProvider, d as requestBodyErrorToText, dr as OPENAI_TTS_VOICES, dt as resolveSessionAuthProfileOverride, en as isAbortRequestText, er as isTtsEnabled, et as normalizeCronJobCreate, fn as resolveAgentTimeoutMs, g as resolveExecApprovalCommandDisplay, gr as getTotalQueueSize, gt as applyModelOverrideToSessionEntry, h as buildTelegramExecApprovalButtons, i as sniffMimeFromBase64, ir as resolveTtsConfig, it as normalizeOptionalSessionKey, jn as buildExecApprovalPendingReplyPayload, k as getHookType, kn as resolveCronStyleNow, l as createPluginRuntime, lr as textToSpeech, lt as normalizeLegacyDeliveryInput, m as buildHistoryContextFromEntries, mn as readLatestAssistantReply, mr as getActiveTaskCount, n as applyToolPolicyPipeline, nn as countActiveDescendantRuns, nr as resolveTtsApiKey, o as resolvePluginTools, or as resolveTtsProviderOrder, ot as normalizePayloadToSystemText, p as createReplyPrefixOptions, pn as resolveAnnounceTargetFromKey, pr as enqueueCommandInLane, qn as resolveAgentIdentity, qt as DEFAULT_INPUT_TIMEOUT_MS, r as buildDefaultToolPolicyPipelineSteps, rr as resolveTtsAutoMode, rt as normalizeOptionalAgentId, sn as listDescendantRunsForRequester, sr as setTtsEnabled, st as normalizeRequiredName, tn as stopSubagentsForRequester, tr as isTtsProviderConfigured, tt as normalizeCronJobPatch, u as readJsonBodyWithLimit, ur as OPENAI_TTS_MODELS, v as createReplyDispatcher, vr as resetAllLanes, vt as parseVerboseOverride, w as setCliSessionId, wn as abortEmbeddedPiRun, x as cleanOldMedia, xn as buildOutboundSessionContext, xr as CommandLane, xt as normalizeGroupActivation, y as getTotalPendingReplies, yn as clearSessionQueues, yr as setCommandLaneConcurrency, yt as normalizeSpawnedRunMetadata, zn as resolveBootstrapWarningSignaturesSeen } from "./compact-DBxHCU3Q.js";
 import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-DRDN4jFP.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, s as resolveSessionTranscriptsDirForAgent } from "./paths-B-JdyKTL.js";
 import "./chat-envelope-t_PEbhWC.js";
-import "./models-config-B9HFg-NI.js";
-import { B as isSilentReplyText, F as runGlobalGatewayStopSafely, N as getGlobalHookRunner, R as SILENT_REPLY_TOKEN, o as normalizeReplyPayloadsForDelivery, s as emitCronHistory, t as deliverOutboundPayloads } from "./deliver-C1juSywI.js";
+import "./models-config-Cg9vUkxp.js";
+import { B as isSilentReplyText, F as runGlobalGatewayStopSafely, N as getGlobalHookRunner, R as SILENT_REPLY_TOKEN, o as normalizeReplyPayloadsForDelivery, s as emitCronHistory, t as deliverOutboundPayloads } from "./deliver-DvOSE6dK.js";
 import { a as generateSecureToken } from "./delivery-queue-DDn4phct.js";
-import { d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, h as isDiagnosticsEnabled } from "./diagnostic-BXoxaU4W.js";
-import "./chunk-cNotV828.js";
-import "./fetch-3V1gxxYH.js";
-import { T as getChannelActivity, tt as normalizePollInput, u as sendTypingTelegram } from "./send-CeA0VP-c.js";
-import "./pi-model-discovery-DmsAxxli.js";
-import "./exec-approvals-allowlist-DnjttVeB.js";
-import "./exec-safe-bin-runtime-policy-CObmLqq8.js";
-import { n as loadModelCatalog } from "./model-catalog-C8EYz2dm.js";
+import { d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, h as isDiagnosticsEnabled } from "./diagnostic-Bbd8nFqt.js";
+import "./chunk-B0PHAL_m.js";
+import "./fetch-hiM4UODI.js";
+import { T as getChannelActivity, tt as normalizePollInput, u as sendTypingTelegram } from "./send-TlYsQWZw.js";
+import "./pi-model-discovery-DFqVpswz.js";
+import "./exec-approvals-allowlist-Be63T3oT.js";
+import "./exec-safe-bin-runtime-policy-BnTNRx5O.js";
+import { n as loadModelCatalog } from "./model-catalog-DlYPcFqP.js";
 import "./local-roots-CY11yrWR.js";
-import { _ as registerUnhandledRejectionHandler } from "./audio-transcription-runner-CovQeJJ8.js";
+import { _ as registerUnhandledRejectionHandler } from "./audio-transcription-runner-B8jxT-MB.js";
 import { o as isErrno, r as formatErrorMessage } from "./errors-BaSZYLcU.js";
-import { i as SsrFBlockedError, t as fetchWithSsrFGuard } from "./fetch-guard-DkMZHPzY.js";
-import { C as extractTextFromChatContent } from "./image-xmUgWF9P.js";
-import "./api-key-rotation-cqcPDbSb.js";
+import { i as SsrFBlockedError, t as fetchWithSsrFGuard } from "./fetch-guard-dTCN4rW8.js";
+import { C as extractTextFromChatContent } from "./image-B4HCDVUj.js";
+import "./api-key-rotation--yH6WXh1.js";
 import "./proxy-fetch-DNrsTLo-.js";
 import { r as isRestartEnabled } from "./commands-BWrE-bab.js";
 import { c as formatUsd, d as deriveSessionTotalTokens, f as hasNonzeroUsage, i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, s as formatTokenCount, t as discoverAllSessions } from "./session-cost-usage-BFC_eRBY.js";
-import { a as loadCombinedSessionStoreForGateway, c as resolveGatewaySessionStoreTarget, f as computeBackoff, i as listSessionsFromStore, l as resolveSessionModelRef, o as loadSessionEntry, p as sleepWithAbort, r as listAgentsForGateway, s as pruneLegacyStoreKeys, t as canonicalizeSpawnedByForAgent, u as lookupContextTokens } from "./session-utils-G8TPVqDh.js";
+import { a as loadCombinedSessionStoreForGateway, c as resolveGatewaySessionStoreTarget, f as computeBackoff, i as listSessionsFromStore, l as resolveSessionModelRef, o as loadSessionEntry, p as sleepWithAbort, r as listAgentsForGateway, s as pruneLegacyStoreKeys, t as canonicalizeSpawnedByForAgent, u as lookupContextTokens } from "./session-utils-5dTolcMA.js";
 import "./sqlite-Cz3Hl_xa.js";
 import { c as readLocalFileSafely, t as SafeOpenError, u as writeFileWithinRoot } from "./fs-safe-DOZviZ8W.js";
-import { $ as validateCronRemoveParams, $t as pickPrimaryLanIPv4, A as validateAgentsCreateParams, At as validateTalkModeParams, B as validateChatHistoryParams, Bt as ErrorCodes, C as readGatewayTokenEnv, Ct as validateSessionsListParams, D as validateAgentIdentityParams, Dt as validateSessionsResolveParams, E as formatValidationErrors, Et as validateSessionsResetParams, F as validateAgentsListParams, Ft as validateWebLoginWaitParams, G as validateConfigPatchParams, Gt as resolveDeviceAuthConnectErrorDetailCode, H as validateChatSendParams, Ht as parseSessionLabel, I as validateAgentsUpdateParams, It as validateWizardCancelParams, J as validateConfigSchemaParams, Jt as isLoopbackHost, K as validateConfigSchemaLookupParams, Kt as isLocalishHost, L as validateChannelsLogoutParams, Lt as validateWizardNextParams, M as validateAgentsFilesGetParams, Mt as validateUpdateRunParams, N as validateAgentsFilesListParams, Nt as validateWakeParams, O as validateAgentParams, Ot as validateSessionsUsageParams, P as validateAgentsFilesSetParams, Pt as validateWebLoginStartParams, Q as validateCronListParams, Qt as normalizeHostHeader, R as validateChannelsStatusParams, Rt as validateWizardStartParams, S as readGatewayPasswordEnv, St as validateSessionsDeleteParams, Tt as validateSessionsPreviewParams, U as validateConfigApplyParams, Ut as ConnectErrorDetailCodes, V as validateChatInjectParams, Vt as errorShape, W as validateConfigGetParams, Wt as resolveAuthConnectErrorDetailCode, X as validateConnectParams, Xt as isTrustedProxyAddress, Y as validateConfigSetParams, Z as validateCronAddParams, Zt as isValidIPv4, _t as validateRequestFrame, an as normalizeDeviceMetadataForAuth, at as validateDevicePairListParams, b as hasGatewayPasswordEnvCandidate, bt as validateSendParams, c as PAIRING_SCOPE$1, cn as loadGatewayTlsRuntime$1, ct as validateDeviceTokenRevokeParams, d as authorizeOperatorScopesForMethod, dn as verifyDeviceSignature, dt as validateExecApprovalResolveParams, en as resolveClientIp, et as validateCronRunParams, f as isNodeRoleMethod, ft as validateExecApprovalsGetParams, gt as validatePollParams, ht as validateModelsListParams, in as buildDeviceAuthPayloadV3, it as validateDevicePairApproveParams, j as validateAgentsDeleteParams, jt as validateToolsCatalogParams, k as validateAgentWaitParams, kt as validateTalkConfigParams, ln as deriveDeviceIdFromPublicKey, lt as validateDeviceTokenRotateParams, mt as validateLogsTailParams, n as callGateway, nn as resolveGatewayListenHosts, nt as validateCronStatusParams, o as ADMIN_SCOPE$3, on as rawDataToString, ot as validateDevicePairRejectParams, pt as validateExecApprovalsSetParams, q as validateConfigSchemaLookupResult, qt as isLoopbackAddress, rn as buildDeviceAuthPayload, rt as validateCronUpdateParams, s as APPROVALS_SCOPE$1, sn as normalizeDeviceAuthScopes, st as validateDevicePairRemoveParams, tn as resolveGatewayBindHost, tt as validateCronRunsParams, u as WRITE_SCOPE, un as normalizeDevicePublicKeyBase64Url, ut as validateExecApprovalRequestParams, vt as validateSecretsResolveParams, wt as validateSessionsPatchParams, x as hasGatewayTokenEnvCandidate, xt as validateSessionsCompactParams, yt as validateSecretsResolveResult, z as validateChatAbortParams, zt as validateWizardStatusParams } from "./call-5htJiVxi.js";
-import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-BII1rF_F.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-B8nfuYT3.js";
-import "./pairing-store-4ajjzoih.js";
+import { $ as validateCronRemoveParams, $t as pickPrimaryLanIPv4, A as validateAgentsCreateParams, At as validateTalkModeParams, B as validateChatHistoryParams, Bt as ErrorCodes, C as readGatewayTokenEnv, Ct as validateSessionsListParams, D as validateAgentIdentityParams, Dt as validateSessionsResolveParams, E as formatValidationErrors, Et as validateSessionsResetParams, F as validateAgentsListParams, Ft as validateWebLoginWaitParams, G as validateConfigPatchParams, Gt as resolveDeviceAuthConnectErrorDetailCode, H as validateChatSendParams, Ht as parseSessionLabel, I as validateAgentsUpdateParams, It as validateWizardCancelParams, J as validateConfigSchemaParams, Jt as isLoopbackHost, K as validateConfigSchemaLookupParams, Kt as isLocalishHost, L as validateChannelsLogoutParams, Lt as validateWizardNextParams, M as validateAgentsFilesGetParams, Mt as validateUpdateRunParams, N as validateAgentsFilesListParams, Nt as validateWakeParams, O as validateAgentParams, Ot as validateSessionsUsageParams, P as validateAgentsFilesSetParams, Pt as validateWebLoginStartParams, Q as validateCronListParams, Qt as normalizeHostHeader, R as validateChannelsStatusParams, Rt as validateWizardStartParams, S as readGatewayPasswordEnv, St as validateSessionsDeleteParams, Tt as validateSessionsPreviewParams, U as validateConfigApplyParams, Ut as ConnectErrorDetailCodes, V as validateChatInjectParams, Vt as errorShape, W as validateConfigGetParams, Wt as resolveAuthConnectErrorDetailCode, X as validateConnectParams, Xt as isTrustedProxyAddress, Y as validateConfigSetParams, Z as validateCronAddParams, Zt as isValidIPv4, _t as validateRequestFrame, an as normalizeDeviceMetadataForAuth, at as validateDevicePairListParams, b as hasGatewayPasswordEnvCandidate, bt as validateSendParams, c as PAIRING_SCOPE$1, cn as loadGatewayTlsRuntime$1, ct as validateDeviceTokenRevokeParams, d as authorizeOperatorScopesForMethod, dn as verifyDeviceSignature, dt as validateExecApprovalResolveParams, en as resolveClientIp, et as validateCronRunParams, f as isNodeRoleMethod, ft as validateExecApprovalsGetParams, gt as validatePollParams, ht as validateModelsListParams, in as buildDeviceAuthPayloadV3, it as validateDevicePairApproveParams, j as validateAgentsDeleteParams, jt as validateToolsCatalogParams, k as validateAgentWaitParams, kt as validateTalkConfigParams, ln as deriveDeviceIdFromPublicKey, lt as validateDeviceTokenRotateParams, mt as validateLogsTailParams, n as callGateway, nn as resolveGatewayListenHosts, nt as validateCronStatusParams, o as ADMIN_SCOPE$3, on as rawDataToString, ot as validateDevicePairRejectParams, pt as validateExecApprovalsSetParams, q as validateConfigSchemaLookupResult, qt as isLoopbackAddress, rn as buildDeviceAuthPayload, rt as validateCronUpdateParams, s as APPROVALS_SCOPE$1, sn as normalizeDeviceAuthScopes, st as validateDevicePairRemoveParams, tn as resolveGatewayBindHost, tt as validateCronRunsParams, u as WRITE_SCOPE, un as normalizeDevicePublicKeyBase64Url, ut as validateExecApprovalRequestParams, vt as validateSecretsResolveParams, wt as validateSessionsPatchParams, x as hasGatewayTokenEnvCandidate, xt as validateSessionsCompactParams, yt as validateSecretsResolveResult, z as validateChatAbortParams, zt as validateWizardStatusParams } from "./call-Ce8vjHmH.js";
+import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-Dd530XEB.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-D6UiE_gG.js";
+import "./pairing-store-BeeSJLPy.js";
 import { c as normalizeExecApprovals, f as readExecApprovalsSnapshot, g as saveExecApprovals, o as mergeExecApprovalsSocketDefaults, r as ensureExecApprovals, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-BVT7PLEI.js";
 import { a as markGatewaySigusr1RestartHandled, c as setPreRestartDeferralCheck, i as isGatewaySigusr1RestartExternallyAllowed, n as deferGatewayRestartUntilIdle, o as scheduleGatewaySigusr1Restart, r as emitGatewayRestart, s as setGatewaySigusr1RestartPolicy, t as consumeGatewaySigusr1RestartAuthorization, u as cleanStaleGatewayProcessesSync } from "./logging-Cc9zHf-m.js";
 import "./fetch-Dp611IaP.js";
-import { i as evaluateGatewayAuthSurfaceStates, m as isKnownSecretTargetId, r as GATEWAY_AUTH_SURFACE_PATHS } from "./runtime-web-tools-CRJ-iI9c.js";
-import { a as prepareSecretsRuntimeSnapshot, i as getActiveSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, o as resolveCommandSecretsFromActiveRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-B8hPSCRB.js";
+import { i as evaluateGatewayAuthSurfaceStates, m as isKnownSecretTargetId, r as GATEWAY_AUTH_SURFACE_PATHS } from "./runtime-web-tools-CWlvqBpH.js";
+import { a as prepareSecretsRuntimeSnapshot, i as getActiveSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, o as resolveCommandSecretsFromActiveRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-DpfmBWKQ.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-BLMcBL-k.js";
-import { n as resolveMessageChannelSelection } from "./channel-selection-Dh-j4PE7.js";
-import { i as buildChannelUiCatalog, t as applyPluginAutoEnable } from "./plugin-auto-enable-DKIdWd3o.js";
-import "./writer-CBLUHPFY.js";
-import { s as resolveMemorySearchConfig } from "./manager-BTf5kl5K.js";
+import { n as resolveMessageChannelSelection } from "./channel-selection-DMlnEgJc.js";
+import { i as buildChannelUiCatalog, t as applyPluginAutoEnable } from "./plugin-auto-enable-fQ-uJndS.js";
+import "./writer-ChWOWmJt.js";
+import { s as resolveMemorySearchConfig } from "./manager-DF7UBoKp.js";
 import "./internal-BMd38Zvr.js";
 import "./diagnostics-CQtxkHQh.js";
-import { i as resolveMemoryBackendConfig, n as getMemorySearchManager, t as evictAllMemorySearchManagers } from "./search-manager-CjC4g5lJ.js";
+import { i as resolveMemoryBackendConfig, n as getMemorySearchManager, t as evictAllMemorySearchManagers } from "./search-manager-Bj4BRNiF.js";
 import { n as resolveCronStorePath, r as saveCronStore, t as loadCronStore } from "./store-Dinmjfnl.js";
-import "./connection-auth-DoyMyMj7.js";
+import "./connection-auth-Uq6_taV8.js";
 import "./memory-Scyulszq.js";
 import { t as formatDocsLink } from "./links-hlmnhfEU.js";
 import { n as runCommandWithRuntime } from "./cli-utils-CaS04_6b.js";
-import "./command-secret-targets-CpKxsR1T.js";
+import "./command-secret-targets-lNjgc0CR.js";
 import { t as formatHelpExamples } from "./help-format-D89JlW3L.js";
 import { n as withProgress } from "./progress-DvzcL_95.js";
-import "./memory-cli-B3Wdf8cX.js";
+import "./memory-cli-BLSGcKsi.js";
 import { t as ensureOpenClawCliOnPath } from "./path-env-BzShNuO6.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-BZDxNIXz.js";
-import { t as readSecretFromFile } from "./secret-file-BaxohaZh.js";
+import { t as readSecretFromFile } from "./secret-file-9CYwZJSc.js";
 import { n as inheritOptionFromParent } from "./command-options-DY6Sg-kn.js";
 import "./prompt-style-BmwLwm5B.js";
 import { t as WizardCancelledError } from "./prompts-DT1GFNGw.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, s as loadAgentIdentityFromWorkspace, t as applyAgentConfig } from "./agents.config-BF0K3aA6.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, s as loadAgentIdentityFromWorkspace, t as applyAgentConfig } from "./agents.config-CLmETqUQ.js";
 import "./skill-scanner-owyfHlsM.js";
-import { n as formatConfigIssueLines } from "./issue-format-BnnZmmHz.js";
-import { t as buildChannelAccountSnapshot } from "./status-BkoerIVk.js";
+import { n as formatConfigIssueLines } from "./issue-format-DbKknWy1.js";
+import { t as buildChannelAccountSnapshot } from "./status-BWvpeDQr.js";
 import "./channels-status-issues-CEWI6i2Y.js";
-import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-D2yDzyhm.js";
-import { n as assertExplicitGatewayAuthModeWhenBothConfigured } from "./gateway-install-token-BnQ74gB8.js";
+import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-esDYkCHN.js";
+import { n as assertExplicitGatewayAuthModeWhenBothConfigured } from "./gateway-install-token-B7z4nya5.js";
 import "./runtime-guard-ENMKovXj.js";
 import "./prompt-Bz3qtVYy.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-aoZb27we.js";
-import { a as resolveGatewayAuth, c as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, d as safeEqualSecret, i as isLocalDirectRequest, l as createAuthRateLimiter, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH, t as assertGatewayAuthConfigured, u as normalizeRateLimitClientIp } from "./auth-CCGOm7j4.js";
-import { o as handleReset } from "./onboard-helpers-B1g1N_R7.js";
+import { a as resolveGatewayAuth, c as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, d as safeEqualSecret, i as isLocalDirectRequest, l as createAuthRateLimiter, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH, t as assertGatewayAuthConfigured, u as normalizeRateLimitClientIp } from "./auth-B7N969mv.js";
+import { o as handleReset } from "./onboard-helpers-Dt3bHndL.js";
 import "./systemd-qW6d6kEI.js";
 import "./service-D91QofaA.js";
-import { c as parseProcCmdline, n as addGatewayServiceCommands, s as isGatewayArgv } from "./daemon-cli-BtKr1oQT.js";
+import { c as parseProcCmdline, n as addGatewayServiceCommands, s as isGatewayArgv } from "./daemon-cli-DhF5rs_a.js";
 import { a as formatPortDiagnostics, n as ensurePortAvailable, r as inspectPortUsage } from "./diagnostics-B0ei2Nxu.js";
-import "./inspect-5BGzxifc.js";
+import "./inspect-CmvIDefh.js";
 import { t as parsePort$1 } from "./parse-port-B_OvsOrL.js";
-import { r as probeGateway } from "./probe-auth-Dzz0uFIe.js";
+import { r as probeGateway } from "./probe-auth-CBWjkGhd.js";
 import "./table-B-mQ0pe0.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-CDSm4SkS.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-BdlXNsAA.js";
-import { t as discoverGatewayBeacons } from "./bonjour-discovery-B4Fsf8u3.js";
-import { d as coerceFiniteScheduleNumber, f as computeNextRunAtMs, g as resolveRequiredConfiguredSecretRefInputString, m as resolveConfiguredSecretInputString, p as computePreviousRunAtMs, t as runGatewayUpdate, u as normalizeStoredCronJobs } from "./update-runner-D0FkcfIv.js";
-import { i as pickGatewaySelfPresence, r as getStatusSummary } from "./status-CLNIJHL1.js";
-import { a as styleHealthChannelLine, c as startHeartbeatRunner, d as onHeartbeatEvent, l as resolveHeartbeatVisibility, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines, u as getLastHeartbeatEvent } from "./health-DhuzyE57.js";
-import { n as createDefaultDeps, r as createOutboundSendDeps$1, t as createOutboundSendDeps } from "./outbound-send-deps-Ds9befoI.js";
-import { m as normalizeUpdateChannel, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-CZgEeotA.js";
-import "./onboarding.secret-input-DSFE38xZ.js";
-import { t as runOnboardingWizard } from "./onboarding-CuMZLiwZ.js";
+import { t as discoverGatewayBeacons } from "./bonjour-discovery-CHN01_kY.js";
+import { d as coerceFiniteScheduleNumber, f as computeNextRunAtMs, g as resolveRequiredConfiguredSecretRefInputString, m as resolveConfiguredSecretInputString, p as computePreviousRunAtMs, t as runGatewayUpdate, u as normalizeStoredCronJobs } from "./update-runner-CSPTpzlG.js";
+import { i as pickGatewaySelfPresence, r as getStatusSummary } from "./status-DdFy329n.js";
+import { a as styleHealthChannelLine, c as startHeartbeatRunner, d as onHeartbeatEvent, l as resolveHeartbeatVisibility, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines, u as getLastHeartbeatEvent } from "./health-D22GmS6O.js";
+import { n as createDefaultDeps, r as createOutboundSendDeps$1, t as createOutboundSendDeps } from "./outbound-send-deps-DBVk1Se1.js";
+import { m as normalizeUpdateChannel, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-XxNxKPcm.js";
+import "./onboarding.secret-input-Bmjiy8T4.js";
+import { t as runOnboardingWizard } from "./onboarding-B47HB8MD.js";
 import { _ as buildGogWatchStartArgs, g as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, w as resolveGmailHookRuntimeConfig } from "./gmail-setup-utils-BnJUlltY.js";
-import { a as resolveCronRunLogPath, i as readCronRunLogEntriesPageAll, o as resolveCronRunLogPruneOptions, r as readCronRunLogEntriesPage, t as appendCronRunLog } from "./run-log-CjYAiVe8.js";
-import { a as resolveAgentOutboundTarget, i as resolveAgentDeliveryPlan, n as agentCommandFromIngress } from "./agent-BLSLlPLk.js";
-import { n as collectEnabledInsecureOrDangerousFlags } from "./audit-Dk_eftLe.js";
-import "./status.update-CVnOl9T7.js";
+import { a as resolveCronRunLogPath, i as readCronRunLogEntriesPageAll, o as resolveCronRunLogPruneOptions, r as readCronRunLogEntriesPage, t as appendCronRunLog } from "./run-log-Q89iJgvA.js";
+import { a as resolveAgentOutboundTarget, i as resolveAgentDeliveryPlan, n as agentCommandFromIngress } from "./agent-JPiOsp4w.js";
+import { n as collectEnabledInsecureOrDangerousFlags } from "./audit-u873Aqoz.js";
+import "./status.update-BC8_WNUD.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-DxmHTMT7.js";
 import { n as forceFreePortAndWait, r as waitForPortBindable } from "./ports-DPHA85ZY.js";
 import { spawn, spawnSync } from "node:child_process";
@@ -21559,7 +21559,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-DDn4phct.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-C1juSywI.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-DvOSE6dK.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),