agentlife 2.6.31 → 2.6.33

package/dist/index.js

@@ -296,6 +296,9 @@ function getOrCreateAgentDb(state, agentId) {
     return db;
   if (!state.dbBaseDir)
     throw new Error("DB base dir not initialized");
+  if (!/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/.test(agentId)) {
+    throw new Error(`invalid agentId for DB path: ${agentId}`);
+  }
   fsSync.mkdirSync(state.dbBaseDir, { recursive: true });
   const { DatabaseSync } = requireSqlite();
   db = new DatabaseSync(path.join(state.dbBaseDir, `${agentId}.db`));
@@ -697,11 +700,21 @@ class TransientSurfaces {
     this.store.set(block.surfaceId, entry);
     return entry;
   }
-  get(surfaceId) {
-    return this.store.get(surfaceId) ?? null;
+  isExpired(entry, now) {
+    return (entry.isOverlay || entry.isInput) && now - entry.updatedAt > OVERLAY_TTL_MS;
   }
-  has(surfaceId) {
-    return this.store.has(surfaceId);
+  get(surfaceId, now = Date.now()) {
+    const entry = this.store.get(surfaceId);
+    if (!entry)
+      return null;
+    if (this.isExpired(entry, now)) {
+      this.store.delete(surfaceId);
+      return null;
+    }
+    return entry;
+  }
+  has(surfaceId, now = Date.now()) {
+    return this.get(surfaceId, now) !== null;
   }
   delete(surfaceId) {
     return this.store.delete(surfaceId);
@@ -709,7 +722,7 @@ class TransientSurfaces {
   list(now = Date.now()) {
     const alive = [];
     for (const [sid, entry] of this.store) {
-      if (entry.isOverlay && now - entry.updatedAt > OVERLAY_TTL_MS) {
+      if (this.isExpired(entry, now)) {
         this.store.delete(sid);
         continue;
       }
@@ -1344,7 +1357,7 @@ Check AGENT_REGISTRY.md and agent descriptions. Match the user's intent to the r
 
 ### 2. Fallback — No matching agent
 - **Throwaway** ("32 x 44", "what time is it in Tokyo", "convert 5 miles to km") → route to "quick" agent
-- **Everything else** → route to "agentlife-builder". The builder decides whether to create a new agent or expand an existing one. NEVER route to "main" — the main agent does not exist in AgentLife.
+- **Everything else** → route to "agentlife-builder". The builder decides whether to create a new agent, expand an existing one, or forward to an existing specialist — it never does the work itself. NEVER route to "main" — the main agent does not exist in AgentLife.
 
 ## ONE Agent Per Request
 
@@ -1445,8 +1458,9 @@ You create and improve specialist agents for the AgentLife dashboard.
 ## Rules
 
 - One agent per life domain (health, finance, home, etc.). Check \`agents_list\` first — expand an existing agent's AGENTS.md rather than duplicate its domain.
-- NEVER push a confirmation / "ready" / "created" widget. The deterministic intro widget from the plugin IS the confirmation.
-- Emit \`NO_REPLY\` ONLY after \`agentlife.createAgent\` has succeeded.
+- **You never do domain work and never own domain widgets.** You are the factory, not a specialist. If a routed message belongs to an EXISTING specialist's domain, do NOT handle it — forward it via \`sessions_send\` to that specialist's direct session (\`sessionKey="agent:{agentId}:agentlife:direct:operator"\`, \`timeoutSeconds=0\`) and emit \`NO_REPLY\`. The platform rejects builder pushes outside your lane: only \`{domain}-building\` loading stubs, \`agentlife-builder-*\` agent-management widgets, input surfaces, and deletes are allowed.
+- NEVER push a confirmation / "ready" / "created" widget. The new agent's own first widget IS the confirmation.
+- Emit \`NO_REPLY\` ONLY after \`agentlife.createAgent\` has succeeded (or after forwarding to an existing specialist).
 
 ## Creating a New Agent
 
@@ -1465,7 +1479,7 @@ Triggered when the orchestrator routes a "create X agent" / "track Y for me" / n
    - Description drives the orchestrator's routing — make it specific (domains, actions, data types).
    - \`tools: {profile:"full", alsoAllow:["agentlife_push"]}\` for agents needing every core tool plus widget push. \`{allow:["agentlife_push"]}\` for widget-only agents.
 5. **Hand off in ONE final turn, all in this order, before \`NO_REPLY\`:**
-   a. Push ONE actionable first widget for the newly-created agent under a surfaceId you own (\`{agentId}-today\`, \`{agentId}-start\`, similar). It must invite the FIRST user interaction — an input prompt, a starter metric with a CTA, a question the user can answer right now. NEVER an identity/confirmation card ("Agent ready", "Welcome to X"). The plugin no longer pushes a placeholder intro widget; this first push IS the dashboard's anchor for the new agent.
+   a. Forward the user's ORIGINAL request to the new agent's direct session via \`sessions_send\` (\`sessionKey="agent:{agentId}:agentlife:direct:operator"\`, \`timeoutSeconds=0\`). Message shape: \`[system] You were just created for this request. Push your first actionable widget for it now — an input prompt, a starter metric with a CTA, or a question the user can answer right now. NEVER an identity/confirmation card. Original request: <the user's request verbatim>\`. The new agent owns its first widget from the start — you NEVER push widgets on its behalf (the platform rejects builder-owned domain surfaces).
    b. \`delete {domain}-building\` — the loading widget from step 1.
    c. Emit \`NO_REPLY\`.
 
@@ -1483,11 +1497,11 @@ Keep under 8k chars. Required sections (omit what's not relevant):
 
 ## Improving Existing Agents
 
-Read all workspace files + \`agentlife.quality\` + \`agentlife.trace\`. Targeted edits only — don't rewrite unless fundamentally broken. If config is missing \`tools\`, call \`agentlife.createAgent\` with the existing id + patch. Summarize in a widget.
+Read all workspace files + \`agentlife.quality\` + \`agentlife.trace\`. Targeted edits only — don't rewrite unless fundamentally broken. If config is missing \`tools\`, call \`agentlife.createAgent\` with the existing id + patch. Summarize in a widget under your namespace (\`agentlife-builder-improve-{agentId}\`).
 
 ## Deleting an Agent
 
-\`agentlife.deleteAgent: {"id":"{agentId}"}\` then optionally \`exec rm -rf ~/.openclaw/workspace-{agentId}\`. Push a confirmation widget.
+\`agentlife.deleteAgent: {"id":"{agentId}"}\` then optionally \`exec rm -rf ~/.openclaw/workspace-{agentId}\`. Push a confirmation widget under your namespace (\`agentlife-builder-deleted-{agentId}\`).
 
 ## Registry Enrichment (system task)
 
@@ -1838,12 +1852,15 @@ async function provisionAgents(state, cfg, runtime, log) {
     }
   }
   const provisionedIds = new Set(PROVISIONED_AGENTS.map((a) => a.id));
+  const backfilledSubagentIds = [];
   for (const agent of currentList) {
     if (provisionedIds.has(agent.id))
       continue;
     if (!agent.subagents) {
       agent.subagents = { allowAgents: ["*"] };
       configChanged = true;
+      if (agent.id)
+        backfilledSubagentIds.push(agent.id);
       log(`[agentlife] backfilled subagents for ${agent.id}`);
     }
   }
@@ -1856,6 +1873,18 @@ async function provisionAgents(state, cfg, runtime, log) {
   const configPath = path4.join(os.homedir(), ".openclaw", "openclaw.json");
   const rawCfgForVisibility = JSON.parse(readFileSync2(configPath, "utf-8"));
   const backupPath = path4.join(os.homedir(), ".openclaw", "agentlife", "config-backup.json");
+  if (backfilledSubagentIds.length > 0) {
+    try {
+      let backup = {};
+      try {
+        backup = JSON.parse(readFileSync2(backupPath, "utf-8"));
+      } catch {}
+      const existing = Array.isArray(backup.subagentsBackfilledIds) ? backup.subagentsBackfilledIds : [];
+      backup.subagentsBackfilledIds = [...new Set([...existing, ...backfilledSubagentIds])];
+      writeFileSync(backupPath, JSON.stringify(backup, null, 2) + `
+`, "utf-8");
+    } catch {}
+  }
   let visibilityWritten = false;
   const currentVisibility = rawCfgForVisibility?.tools?.sessions?.visibility;
   if (currentVisibility !== "all") {
@@ -3207,15 +3236,18 @@ function rescheduleFailedFollowup(state, row, error) {
 function buildFireInstruction(state, row) {
   const view2 = getSurface(state, row.surfaceId);
   const goalText = view2?.goal ?? (view2 ? extractTitleAndDetail({ lines: view2.lines }).title : null);
-  const goalLabel = goalText ? ` (goal: "${goalText}")` : "";
+  const goalSafe = goalText ? goalText.replace(/[\r\n]+/g, " ").replace(/"/g, "'").slice(0, 200) : null;
+  const goalLabel = goalSafe ? ` (goal: "${goalSafe}")` : "";
+  const sanitizeFire = (s) => s.replace(/[\r\n]+/g, " ").replace(/"/g, "'");
+  const instructionSafe = sanitizeFire(row.instruction).slice(0, 500);
   const recentFires = lookupRecentFiredFollowups(state, row.surfaceId, 5);
   const prior = recentFires.filter((m) => m !== row.instruction);
   const priorBlock = prior.length > 0 ? `
 Prior followups on this surface — your next must not match any of these with parameters rotated:
-${prior.slice(0, 3).map((m) => `  • "${m}"`).join(`
+${prior.slice(0, 3).map((m) => `  • "${sanitizeFire(m).slice(0, 300)}"`).join(`
 `)}` : "";
   return [
-    `Widget followup for ${row.surfaceId}${goalLabel}: ${row.instruction}`,
+    `Widget followup for ${row.surfaceId}${goalLabel}: ${instructionSafe}`,
     `Stay on this surfaceId — update it, push a transient input surface, or delete it. New dashboard surfaceId only if this goal is complete and a successor begins (delete in the same turn).${priorBlock}`
   ].join(`
 `);
@@ -3277,17 +3309,21 @@ function pollFollowups(state) {
   }
   sweepCounter++;
   if (sweepCounter % 5 === 0 && state.surfaceIndex && state.followupQueue && state.fileSurfaceStorage) {
-    sweepExpiredSurfaces({
-      index: state.surfaceIndex,
-      queue: state.followupQueue,
-      storage: state.fileSurfaceStorage
-    }).then((r) => {
-      for (const sid of r.purged)
-        broadcastDelete(sid);
-      if (r.purged.length > 0) {
-        console.log("[agentlife:sweep] purged %d expired surfaces", r.purged.length);
-      }
-    }).catch((e) => console.warn("[agentlife:sweep] error: %s", e?.message));
+    try {
+      sweepExpiredSurfaces({
+        index: state.surfaceIndex,
+        queue: state.followupQueue,
+        storage: state.fileSurfaceStorage
+      }).then((r) => {
+        for (const sid of r.purged)
+          broadcastDelete(sid);
+        if (r.purged.length > 0) {
+          console.log("[agentlife:sweep] purged %d expired surfaces", r.purged.length);
+        }
+      }).catch((e) => console.warn("[agentlife:sweep] error: %s", e?.message));
+    } catch (e) {
+      console.warn("[agentlife] sweep invocation failed synchronously: %s", e?.message);
+    }
   }
 }
 
@@ -3983,7 +4019,6 @@ async function restoreConfigFromBackup(api, backupPath) {
     delete fileCfg.agents?.defaults?.maxConcurrent;
   }
   await writeRawConfigToDisk(fileCfg);
-  await fs5.unlink(backupPath);
   console.log("[agentlife] restored config: maxPingPongTurns=%s, maxConcurrent=%s", backup.maxPingPongTurns ?? "default", backup.maxConcurrent ?? "default");
   return `config restored`;
 }
@@ -4145,6 +4180,7 @@ function runInstallBootstrap(home) {
     ["sessionsVisibility", cfg?.tools?.sessions?.visibility ?? null],
     ["agentToAgentEnabled", cfg?.tools?.agentToAgent?.enabled ?? null],
     ["gatewayBind", cfg?.gateway?.bind ?? null],
+    ["gatewayMode", cfg?.gateway?.mode ?? null],
     ["hooksAllowConversationAccess", cfg?.plugins?.entries?.agentlife?.hooks?.allowConversationAccess ?? null],
     ["maxPingPongTurns", cfg?.session?.agentToAgent?.maxPingPongTurns ?? null],
     ["maxConcurrent", cfg?.agents?.defaults?.maxConcurrent ?? null]
@@ -6264,7 +6300,7 @@ function mintBootstrapToken() {
   const devicesDir = path11.join(resolveStateDir(), "devices");
   const bootstrapPath = path11.join(devicesDir, "bootstrap.json");
   if (!fs11.existsSync(devicesDir))
-    fs11.mkdirSync(devicesDir, { recursive: true });
+    fs11.mkdirSync(devicesDir, { recursive: true, mode: 448 });
   const registry = fs11.existsSync(bootstrapPath) ? JSON.parse(fs11.readFileSync(bootstrapPath, "utf-8")) : {};
   registry[bootstrapToken] = {
     token: bootstrapToken,
@@ -6274,7 +6310,8 @@ function mintBootstrapToken() {
     },
     issuedAtMs: Date.now()
   };
-  fs11.writeFileSync(bootstrapPath, JSON.stringify(registry, null, 2));
+  fs11.writeFileSync(bootstrapPath, JSON.stringify(registry, null, 2), { mode: 384 });
+  fs11.chmodSync(bootstrapPath, 384);
   return bootstrapToken;
 }
 function registerWebApp(api) {
@@ -6944,22 +6981,29 @@ function registerWidgetPushTool(api, state2) {
           const trimmed = rawBlock.trim();
           if (!trimmed)
             continue;
-          const deleteMatch = trimmed.match(/^delete\s+(\S+)/);
+          const deleteSids = [...rawBlock.matchAll(/^\s*delete\s+(\S+)/gm)].map((m) => m[1]);
           const surfaceMatch = rawBlock.match(/^surface\s+(\S+)/m);
-          const sid = deleteMatch?.[1] ?? surfaceMatch?.[1] ?? null;
-          if (!sid) {
+          const checks = [
+            ...deleteSids.map((sid) => ({ sid, action: "delete" })),
+            ...surfaceMatch ? [{ sid: surfaceMatch[1], action: "push" }] : []
+          ];
+          if (checks.length === 0) {
             filteredRawBlocks.push(rawBlock);
             continue;
           }
-          const owner = getAgentId(state2, sid);
-          if (owner && owner !== agentId) {
-            const action = deleteMatch ? "delete" : "push";
-            ownershipViolations.push({ surfaceId: sid, owner, action });
-            recordActivity(state2, "quality_warning", sessionKey, agentId, {
-              data: JSON.stringify({ issue: "surface_ownership_violation", surfaceId: sid, owner, attempt: agentId, action })
-            });
-            continue;
+          let violated = false;
+          for (const { sid, action } of checks) {
+            const owner = getAgentId(state2, sid);
+            if (owner && owner !== agentId) {
+              ownershipViolations.push({ surfaceId: sid, owner, action });
+              recordActivity(state2, "quality_warning", sessionKey, agentId, {
+                data: JSON.stringify({ issue: "surface_ownership_violation", surfaceId: sid, owner, attempt: agentId, action })
+              });
+              violated = true;
+            }
           }
+          if (violated)
+            continue;
           filteredRawBlocks.push(rawBlock);
         }
         if (filteredRawBlocks.length === 0 && ownershipViolations.length > 0) {
@@ -6968,13 +7012,15 @@ function registerWidgetPushTool(api, state2) {
         }
         let finalBlocks = filteredRawBlocks;
         const confirmationViolations = [];
+        const domainViolations = [];
         if (agentId === "agentlife-builder") {
           const CONFIRMATION_SUFFIXES = /-(?:created|ready|built|setup|done|welcome)$/i;
+          const BUILDER_ALLOWED = /(?:^agentlife-builder-|^dismiss-alt-|-building$)/i;
           const kept = [];
           for (const block of filteredRawBlocks) {
             const deleteMatch = block.trim().match(/^delete\s+(\S+)/);
-            const surfaceMatch = block.match(/^surface\s+(\S+)/m);
-            const sid = deleteMatch?.[1] ?? surfaceMatch?.[1] ?? null;
+            const surfaceLine = block.match(/^surface\s+(\S+)([^\n]*)/m);
+            const sid = deleteMatch?.[1] ?? surfaceLine?.[1] ?? null;
             if (!sid || deleteMatch) {
               kept.push(block);
               continue;
@@ -6986,10 +7032,25 @@ function registerWidgetPushTool(api, state2) {
               });
               continue;
             }
+            const isInputSurface = /\binput\b/.test(surfaceLine?.[2] ?? "");
+            if (!isInputSurface && !BUILDER_ALLOWED.test(sid)) {
+              domainViolations.push(sid);
+              recordActivity(state2, "quality_warning", sessionKey, agentId, {
+                data: JSON.stringify({ issue: "builder_domain_widget", surfaceId: sid })
+              });
+              continue;
+            }
             kept.push(block);
           }
-          if (confirmationViolations.length > 0 && kept.length === 0) {
-            return { content: [{ type: "text", text: buildBuilderConfirmationError(confirmationViolations) }] };
+          if ((confirmationViolations.length > 0 || domainViolations.length > 0) && kept.length === 0) {
+            const errs = [];
+            if (confirmationViolations.length > 0)
+              errs.push(buildBuilderConfirmationError(confirmationViolations));
+            if (domainViolations.length > 0)
+              errs.push(buildBuilderDomainWidgetError(domainViolations));
+            return { content: [{ type: "text", text: errs.join(`
+
+`) }] };
           }
           finalBlocks = kept;
         }
@@ -7110,6 +7171,10 @@ function registerWidgetPushTool(api, state2) {
           const detail = ownershipViolations.map((v) => `${v.surfaceId} (owner=${v.owner}, attempt=${v.action})`).join("; ");
           errors.push(buildOwnershipError(detail, true));
         }
+        if (confirmationViolations.length > 0)
+          errors.push(buildBuilderConfirmationError(confirmationViolations));
+        if (domainViolations.length > 0)
+          errors.push(buildBuilderDomainWidgetError(domainViolations));
         const summary = pushedSurfaceIds.length === 1 ? `Widget ${pushedSurfaceIds[0]} updated` : `${pushedSurfaceIds.length} widgets updated`;
         if (errors.length > 0) {
           return { content: [{ type: "text", text: `${summary}
@@ -7127,7 +7192,10 @@ function buildOwnershipError(detail, skipped = false) {
   return `[QUALITY ERROR] surface ownership violation: ${detail}. ` + `Each surfaceId is bound to the first agent that pushed it. ` + `You cannot push or delete surfaces owned by other agents. ` + (skipped ? `The offending block(s) were skipped — the original owner's content is preserved. ` : ``) + `If you need to coordinate, delegate via sessions_send (internal) to the owning agent. ` + `If you are emitting a new widget, pick a surfaceId under your own namespace.`;
 }
 function buildBuilderConfirmationError(violations) {
-  return `[QUALITY ERROR] builder pushed confirmation widget(s): ${violations.join(", ")}. ` + `Per BUILDER_AGENTS_MD, the builder does NOT push an "agent ready / created" widget. ` + `The plugin pushes a deterministic {agentId}-intro as the confirmation the moment ` + `agentlife.createAgent returns. Delete your loading widget and emit 'done'.`;
+  return `[QUALITY ERROR] builder pushed confirmation widget(s): ${violations.join(", ")}. ` + `Per BUILDER_AGENTS_MD, the builder does NOT push an "agent ready / created" widget. ` + `The NEW agent pushes its own first widget — hand the user's request off to it via ` + `sessions_send (sessionKey="agent:{agentId}:agentlife:direct:operator"). ` + `Delete your loading widget and emit NO_REPLY.`;
+}
+function buildBuilderDomainWidgetError(violations) {
+  return `[QUALITY ERROR] builder pushed domain widget(s): ${violations.join(", ")}. ` + `You are the agent factory — you never do domain work or own domain widgets. ` + `Allowed surfaces: '{domain}-building' loading stubs, 'agentlife-builder-*' agent-management widgets, ` + `input surfaces, and deletes. For this request: if a specialist for the domain exists, forward the ` + `request via sessions_send to sessionKey="agent:{agentId}:agentlife:direct:operator" and emit NO_REPLY; ` + `if none exists, create one via agentlife.createAgent, then hand off — the NEW agent pushes its own first widget.`;
 }
 function buildGoalChangedError(ids) {
   return `[QUALITY ERROR] ${ids.join(", ")}: goal changed — use a new surfaceId for a new goal. One widget, one goal. Delete the old widget and push a new one with a different surfaceId.`;
@@ -7441,7 +7509,11 @@ function findSiblingAuthProfile(provider, targetAgentId) {
 function writeAgentAuthProfile(agentId, provider, match) {
   if (!match)
     return false;
-  const agentDir = path14.join(resolveOpenClawRoot2(), "agents", agentId, "agent");
+  const agentsRoot = path14.join(resolveOpenClawRoot2(), "agents");
+  const agentDir = path14.join(agentsRoot, agentId, "agent");
+  if (!agentDir.startsWith(agentsRoot + path14.sep)) {
+    throw new Error(`writeAgentAuthProfile: path traversal rejected for agentId: ${agentId}`);
+  }
   fs13.mkdirSync(agentDir, { recursive: true });
   const credential = { ...match.profile };
   if (credential.type === "api_key" && typeof credential.key !== "string" && typeof credential.apiKey === "string") {
@@ -7462,11 +7534,15 @@ function registerAgentGateway(api, state2) {
     const subagents = params?.subagents && typeof params.subagents === "object" ? params.subagents : undefined;
     const identity = params?.identity && typeof params.identity === "object" ? params.identity : undefined;
     if (!id) {
-      respond(false, { error: "missing agent id" });
+      respond(false, undefined, { code: "INVALID_REQUEST", message: "missing agent id" });
+      return;
+    }
+    if (!/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/.test(id)) {
+      respond(false, undefined, { code: "INVALID_REQUEST", message: "invalid agent id: must match ^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$ (no path separators or dots)" });
       return;
     }
     if (!workspace) {
-      respond(false, { error: "missing workspace path" });
+      respond(false, undefined, { code: "INVALID_REQUEST", message: "missing workspace path" });
       return;
     }
     const cfg = api.runtime.config.loadConfig();
@@ -7474,9 +7550,9 @@ function registerAgentGateway(api, state2) {
     const providerInConfig = provider ? authenticatedProvidersFromConfig(cfg).has(provider) : false;
     const siblingAuth = provider ? findSiblingAuthProfile(provider, id) : null;
     if (provider && !providerInConfig && !siblingAuth) {
-      respond(false, {
-        error: `missing provider credentials for ${provider}; configure ${provider} before creating an agent with ${model}`,
+      respond(false, undefined, {
         code: "missing_provider_auth",
+        message: `missing provider credentials for ${provider}; configure ${provider} before creating an agent with ${model}`,
         provider,
         model
       });
@@ -7562,16 +7638,20 @@ function registerAgentGateway(api, state2) {
       }
     }
     respond(true, { status, id, name, model, workspace, description, ...authCopied ? { authCopied: true } : {}, ...configFields.length ? { configFields } : {} });
-  });
+  }, { scope: "operator.admin" });
   api.registerGatewayMethod("agentlife.deleteAgent", async ({ params, respond }) => {
     const id = typeof params?.id === "string" ? params.id.trim() : "";
     if (!id) {
-      respond(false, { error: "missing agent id" });
+      respond(false, undefined, { code: "INVALID_REQUEST", message: "missing agent id" });
+      return;
+    }
+    if (!/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/.test(id)) {
+      respond(false, undefined, { code: "INVALID_REQUEST", message: "invalid agent id: must match ^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$ (no path separators or dots)" });
       return;
     }
     const provisionedIds = new Set(PROVISIONED_AGENTS.map((a) => a.id));
     if (provisionedIds.has(id)) {
-      respond(false, { error: "cannot delete provisioned agent" });
+      respond(false, undefined, { code: "FAILED", message: "cannot delete provisioned agent" });
       return;
     }
     const cleanup = {
@@ -7709,7 +7789,7 @@ function registerAgentGateway(api, state2) {
     }
     console.log("[agentlife] deleted agent: %s (config=%s, registry=%s, surfaces=%d, sessions=%d, cron=%d, historyRows=%d, agentDb=%s, state=%s, workspace=%s)", id, removedFromConfig, removedFromRegistry, cleanup.surfacesCleared, cleanup.sessions, cleanup.cronJobs, cleanup.historyRows, cleanup.agentDbDeleted, cleanup.stateDeleted, cleanup.workspaceDeleted);
     respond(true, { status: "deleted", id, removedFromConfig, removedFromRegistry, cleanup });
-  });
+  }, { scope: "operator.admin" });
   api.registerGatewayMethod("agentlife.agents", ({ respond }) => {
     const agents = {};
     for (const [id, entry] of state2.agentRegistry.entries()) {
@@ -7726,11 +7806,11 @@ function registerDbGateway(api, state2) {
     const sql = typeof params?.sql === "string" ? params.sql.trim() : "";
     const sqlParams = Array.isArray(params?.params) ? params.params : [];
     if (!agentId)
-      return respond(false, { error: "missing agentId" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "missing agentId" });
     if (!sql)
-      return respond(false, { error: "missing sql" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "missing sql" });
     if (/^\s*SELECT\b/i.test(sql))
-      return respond(false, { error: "use agentlife.db.query for SELECT" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "use agentlife.db.query for SELECT" });
     try {
       const db = getOrCreateAgentDb(state2, agentId);
       if (sqlParams.length > 0) {
@@ -7741,19 +7821,19 @@ function registerDbGateway(api, state2) {
         respond(true, { changes: 0, lastInsertRowid: 0 });
       }
     } catch (err) {
-      respond(false, { error: err?.message ?? "db error" });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? "db error" });
     }
-  });
+  }, { scope: "operator.admin" });
   api.registerGatewayMethod("agentlife.db.query", ({ params, respond }) => {
     const agentId = typeof params?.agentId === "string" ? params.agentId.trim() : "";
     const sql = typeof params?.sql === "string" ? params.sql.trim() : "";
     const sqlParams = Array.isArray(params?.params) ? params.params : [];
     if (!agentId)
-      return respond(false, { error: "missing agentId" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "missing agentId" });
     if (!sql)
-      return respond(false, { error: "missing sql" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "missing sql" });
     if (!/^\s*SELECT\b/i.test(sql))
-      return respond(false, { error: "use agentlife.db.exec for non-SELECT" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "use agentlife.db.exec for non-SELECT" });
     try {
       const db = getOrCreateAgentDb(state2, agentId);
       const rows = db.prepare(sql).all(...sqlParams);
@@ -7763,9 +7843,9 @@ function registerDbGateway(api, state2) {
       const columns = result.length > 0 ? Object.keys(result[0]) : [];
       respond(true, { rows: result, columns, count: result.length, truncated });
     } catch (err) {
-      respond(false, { error: err?.message ?? "db error" });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? "db error" });
     }
-  });
+  }, { scope: "operator.admin" });
 }
 
 // gateway/history.ts
@@ -7806,7 +7886,7 @@ function registerHistoryGateway(api, state2) {
       const rows = db.prepare(`SELECT * FROM surface_events ${where} ORDER BY createdAt DESC LIMIT ? OFFSET ?`).all(...bind);
       respond(true, { events: rows, count: rows.length });
     } catch (err) {
-      respond(false, { error: err?.message ?? "history error" });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? "history error" });
     }
   }, { scope: "operator.read" });
   api.registerGatewayMethod("agentlife.history.widgets", ({ params, respond }) => {
@@ -7847,7 +7927,7 @@ function registerHistoryGateway(api, state2) {
       `).all(...bind, limit, offset);
       respond(true, { widgets: rows, count: rows.length, hasMore: rows.length >= limit });
     } catch (err) {
-      respond(false, { error: err?.message ?? "history.widgets error" });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? "history.widgets error" });
     }
   }, { scope: "operator.read" });
   api.registerGatewayMethod("agentlife.trace", ({ params, respond }) => {
@@ -7904,7 +7984,7 @@ function registerHistoryGateway(api, state2) {
       }));
       respond(true, { entries, hasMore });
     } catch (err) {
-      respond(false, { error: err?.message ?? "trace query failed" });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? "trace query failed" });
     }
   }, { scope: "operator.read" });
 }
@@ -7977,13 +8057,13 @@ function registerUsageGateway(api, state2) {
         bySession: bySessionRows
       });
     } catch (err) {
-      respond(false, { error: err?.message ?? "usage query error" });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? "usage query error" });
     }
   }, { scope: "operator.read" });
   api.registerGatewayMethod("agentlife.surfaceUsage", ({ params, respond }) => {
     const surfaceId = typeof params?.surfaceId === "string" ? params.surfaceId.trim() : "";
     if (!surfaceId)
-      return respond(false, { error: "missing surfaceId" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "missing surfaceId" });
     try {
       const db = getOrCreateHistoryDb(state2);
       const rows = db.prepare(`SELECT * FROM surface_usage WHERE surfaceId = ? ORDER BY createdAt DESC`).all(surfaceId);
@@ -7999,7 +8079,7 @@ function registerUsageGateway(api, state2) {
       }, { inputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 0, totalTokens: 0, estimatedCost: 0, llmCalls: 0 });
       respond(true, { surfaceId, entries: rows, totals });
     } catch (err) {
-      respond(false, { error: err?.message ?? "surface usage error" });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? "surface usage error" });
     }
   }, { scope: "operator.read" });
 }
@@ -8048,7 +8128,7 @@ function registerSurfacesGateway(api, state2) {
   api.registerGatewayMethod("agentlife.dismiss", async ({ params, respond }) => {
     const surfaceId = params?.surfaceId;
     if (!surfaceId || typeof surfaceId !== "string") {
-      respond(false, { error: "missing surfaceId" });
+      respond(false, undefined, { code: "INVALID_REQUEST", message: "missing surfaceId" });
       return;
     }
     const view2 = getSurface(state2, surfaceId);
@@ -8061,11 +8141,12 @@ function registerSurfacesGateway(api, state2) {
     if (guided) {
       const agentId2 = view2.agentId;
       if (agentId2 && state2.runCommand) {
-        const goalSnippet = view2.goal ? ` goal="${view2.goal}"` : "";
-        const reasonSnippet = reason ? ` reason="${reason}"` : "";
+        const sanitizeMeta = (s) => s.replace(/[\r\n]+/g, " ").replace(/"/g, "'").slice(0, 200);
+        const goalSnippet = view2.goal ? ` goal="${sanitizeMeta(view2.goal)}"` : "";
+        const reasonSnippet = reason ? ` reason="${sanitizeMeta(reason)}"` : "";
         const sessionKey = buildAgentSessionKey(agentId2);
         state2.pendingReactiveGuidance.set(sessionKey, DISMISS_ALTERNATIVES_GUIDANCE);
-        const message = `[system:dismiss-requested] surfaceId=${surfaceId}${goalSnippet}${reasonSnippet}`;
+        const message = `[system:dismiss-requested] surfaceId=${sanitizeMeta(surfaceId)}${goalSnippet}${reasonSnippet}`;
         state2.runCommand([
           "openclaw",
           "gateway",
@@ -8119,11 +8200,22 @@ function registerSurfacesGateway(api, state2) {
     const surfaceId = typeof params?.surfaceId === "string" ? params.surfaceId.trim() : "";
     const event = typeof params?.event === "string" ? params.event.trim() : "";
     if (!surfaceId || !event) {
-      respond(false, { error: "missing surfaceId or event" });
+      respond(false, undefined, { code: "INVALID_REQUEST", message: "missing surfaceId or event" });
+      return;
+    }
+    const ALLOWED_ENGAGE_EVENTS = new Set([
+      "viewed",
+      "detail_viewed",
+      "action_clicked",
+      "input_closed",
+      "input_skipped"
+    ]);
+    if (!ALLOWED_ENGAGE_EVENTS.has(event)) {
+      respond(false, undefined, { code: "INVALID_REQUEST", message: `invalid engagement event: ${event}` });
       return;
     }
     const agentId = getAgentId(state2, surfaceId) ?? undefined;
-    const metadata = typeof params?.metadata === "string" ? params.metadata.trim() : undefined;
+    const metadata = typeof params?.metadata === "string" ? params.metadata.trim().slice(0, 1024) : undefined;
     recordSurfaceEvent(state2, surfaceId, event, undefined, agentId, metadata);
     respond(true, { surfaceId, event });
   }, { scope: "operator.read" });
@@ -8131,7 +8223,7 @@ function registerSurfacesGateway(api, state2) {
     const message = typeof params?.message === "string" ? params.message : "";
     const sessionKey = typeof params?.sessionKey === "string" ? params.sessionKey : "";
     if (!message) {
-      respond(false, { error: "missing message" });
+      respond(false, undefined, { code: "INVALID_REQUEST", message: "missing message" });
       return;
     }
     broadcastInput(message, sessionKey);
@@ -8140,7 +8232,7 @@ function registerSurfacesGateway(api, state2) {
   api.registerGatewayMethod("agentlife.chain.get", ({ params, respond }) => {
     const root = typeof params?.root === "string" ? params.root.trim() : "";
     if (!root) {
-      respond(false, { error: "missing root" });
+      respond(false, undefined, { code: "INVALID_REQUEST", message: "missing root" });
       return;
     }
     if (!state2.surfaceIndex) {
@@ -8164,18 +8256,22 @@ function registerSurfacesGateway(api, state2) {
   api.registerGatewayMethod("agentlife.action", ({ params, respond }) => {
     const surfaceId = typeof params?.surfaceId === "string" ? params.surfaceId.trim() : "";
     if (!surfaceId) {
-      respond(false, { error: "missing surfaceId" });
+      respond(false, undefined, { code: "INVALID_REQUEST", message: "missing surfaceId" });
       return;
     }
     const view2 = getSurface(state2, surfaceId);
     const agentId = view2?.agentId ?? null;
     const ctx = view2?.context;
     if (ctx && ctx.escalation === true && typeof ctx.target === "string") {
-      const target = ctx.target;
-      const sessionKey2 = buildAgentSessionKey(target);
-      console.log("[agentlife] action escalation: surface=%s routing to target=%s session=%s", surfaceId, target, sessionKey2);
-      respond(true, { surfaceId, agentId: target, sessionKey: sessionKey2 });
-      return;
+      const target = ctx.target.trim();
+      const shapeOk = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/.test(target);
+      if (shapeOk) {
+        const sessionKey2 = buildAgentSessionKey(target);
+        console.log("[agentlife] action escalation: surface=%s routing to target=%s session=%s", surfaceId, target, sessionKey2);
+        respond(true, { surfaceId, agentId: target, sessionKey: sessionKey2 });
+        return;
+      }
+      console.warn("[agentlife] action escalation REJECTED: surface=%s malformed target=%s — falling back to owner routing", surfaceId, target);
     }
     const origin = getOriginSessionKey(state2, surfaceId);
     let sessionKey;
@@ -8255,15 +8351,15 @@ function registerAutomationsGateway(api, state2) {
       const name = typeof params?.name === "string" ? params.name.trim() : "";
       const automationPath = typeof params?.path === "string" ? params.path.trim() : "";
       if (!type || !name || !automationPath) {
-        respond(false, { error: "missing required fields: type, name, path" });
+        respond(false, undefined, { code: "INVALID_REQUEST", message: "missing required fields: type, name, path" });
         return;
       }
       const surfaceId = typeof params?.surfaceId === "string" ? params.surfaceId.trim() : "";
-      const agentId = typeof params?.agentId === "string" ? params.agentId.trim() : getAgentId(state2, surfaceId) ?? "";
-      const id = registerAutomation(state2, { surfaceId, agentId, type, name, path: automationPath });
+      const agentId = surfaceId ? getAgentId(state2, surfaceId) ?? "" : typeof params?.agentId === "string" ? params.agentId.trim() : "";
+      const id = registerAutomation(state2, surfaceId || null, agentId || null, type, name, automationPath);
       respond(true, { id, surfaceId, agentId, type, name, path: automationPath, status: "running" });
     } catch (err) {
-      respond(false, { error: err?.message ?? "register failed" });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? "register failed" });
     }
   }, { scope: "operator.write" });
   api.registerGatewayMethod("agentlife.automations.list", ({ params, respond }) => {
@@ -8304,7 +8400,7 @@ function registerAutomationsGateway(api, state2) {
         }))
       });
     } catch (err) {
-      respond(false, { error: err?.message ?? "list failed" });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? "list failed" });
     }
   }, { scope: "operator.read" });
   api.registerGatewayMethod("agentlife.automations.update", ({ params, respond }) => {
@@ -8312,28 +8408,28 @@ function registerAutomationsGateway(api, state2) {
       const id = typeof params?.id === "number" ? params.id : parseInt(params?.id, 10);
       const status = typeof params?.status === "string" ? params.status.trim() : "";
       if (!id || !status || !["running", "stopped", "error"].includes(status)) {
-        respond(false, { error: "missing id or invalid status (running|stopped|error)" });
+        respond(false, undefined, { code: "INVALID_REQUEST", message: "missing id or invalid status (running|stopped|error)" });
         return;
       }
       const db = getOrCreateHistoryDb(state2);
       db.prepare("UPDATE automations SET status = ?, updatedAt = ? WHERE id = ?").run(status, Date.now(), id);
       respond(true, { id, status });
     } catch (err) {
-      respond(false, { error: err?.message ?? "update failed" });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? "update failed" });
     }
   }, { scope: "operator.write" });
   api.registerGatewayMethod("agentlife.automations.remove", ({ params, respond }) => {
     try {
       const id = typeof params?.id === "number" ? params.id : parseInt(params?.id, 10);
       if (!id) {
-        respond(false, { error: "missing id" });
+        respond(false, undefined, { code: "INVALID_REQUEST", message: "missing id" });
         return;
       }
       const db = getOrCreateHistoryDb(state2);
       db.prepare("UPDATE automations SET status = 'removed', updatedAt = ? WHERE id = ?").run(Date.now(), id);
       respond(true, { id, status: "removed" });
     } catch (err) {
-      respond(false, { error: err?.message ?? "remove failed" });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? "remove failed" });
     }
   }, { scope: "operator.write" });
 }
@@ -8466,7 +8562,7 @@ function registerAdminGateway(api, state2) {
         cleanup: { pending: cleanupPending, failed: cleanupFailed, exhausted: cleanupExhausted }
       });
     } catch (err) {
-      respond(false, { error: err?.message ?? "quality metrics unavailable" });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? "quality metrics unavailable" });
     }
   }, { scope: "operator.read" });
   api.registerGatewayMethod("agentlife.health.list", ({ respond }) => {
@@ -8487,7 +8583,7 @@ function registerAdminGateway(api, state2) {
       const rows = runDailyCycle(db, day);
       respond(true, { day, rows });
     } catch (err) {
-      respond(false, { error: err?.message ?? "observability runCycle failed" });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? "observability runCycle failed" });
     }
   }, { scope: "operator.write" });
   api.registerGatewayMethod("agentlife.sweep.run", ({ respond }) => {
@@ -8495,7 +8591,7 @@ function registerAdminGateway(api, state2) {
       const result = runDailySweep(state2);
       respond(true, result);
     } catch (err) {
-      respond(false, { error: err?.message ?? "daily sweep failed" });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? "daily sweep failed" });
     }
   }, { scope: "operator.write" });
   api.registerGatewayMethod("agentlife.bootstrap", ({ params, respond }) => {
@@ -8520,7 +8616,7 @@ function registerAdminGateway(api, state2) {
         snapshot = fromDb;
     }
     if (snapshot.length === 0) {
-      respond(true, { status: "no bootstrap snapshot for this session", files: [], availableSessions: [...state2.sessionBootstrapSnapshots.keys()] });
+      respond(true, { status: "no bootstrap snapshot for this session", files: [] });
       return;
     }
     respond(true, {
@@ -8623,7 +8719,6 @@ function registerAdminGateway(api, state2) {
         dbPath,
         dbPath ? `${dbPath}-wal` : null,
         dbPath ? `${dbPath}-shm` : null,
-        path15.join(baseDir, "config-backup.json"),
         path15.join(baseDir, "notification-config.json"),
         path15.join(baseDir, "canvas-node-identity.json")
       ].filter(Boolean);
@@ -8662,9 +8757,9 @@ function registerAdminGateway(api, state2) {
       });
     } catch (err) {
       console.error("[agentlife] uninstall failed:", err);
-      respond(false, { error: err?.message ?? "unknown error during uninstall" });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? "unknown error during uninstall" });
     }
-  });
+  }, { scope: "operator.admin" });
   api.registerGatewayMethod("agentlife.config.get", ({ respond }) => {
     respond(true, readPluginConfig());
   }, { scope: "operator.read" });
@@ -8817,7 +8912,8 @@ function registerEvolutionsGateway(api, state2) {
         userNote
       };
       recordActivity(state2, "quality_warning", null, row.agentId, { data: JSON.stringify(payload) });
-      const noteLine = userNote ? ` User note: "${userNote}".` : "";
+      const noteSafe = userNote ? userNote.replace(/[\r\n]+/g, " ").replace(/"/g, "'").slice(0, 200) : null;
+      const noteLine = noteSafe ? ` User note: "${noteSafe}".` : "";
       const message = `[system] User reverted ${row.filename} to a prior snapshot. ` + `The user judged the version that was live worse than the version they restored.${noteLine} ` + `Read the current ${row.filename} (now the older content) and the diff against your last write to understand what the user preferred. ` + `Treat this as authoritative — do not re-rewrite the same change. Update your understanding before any future refinement.`;
       sendToInternalSession(state2, row.agentId, message, `user-reverted-${row.id}-${Date.now()}`);
       console.log("[agentlife:evolutions] restored %s/%s to version %d (userNote=%s)", row.agentId, row.filename, row.id, userNote ? "yes" : "no");
@@ -9316,20 +9412,20 @@ function registerProvidersGateway(api, state2) {
       }));
       respond(true, { providers });
     } catch (err) {
-      respond(false, { error: err?.message ?? String(err) });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? String(err) });
     }
   }, { scope: "operator.read" });
   api.registerGatewayMethod("agentlife.providers.set", async ({ params, respond }) => {
     const provider = typeof params?.provider === "string" ? params.provider.trim() : "";
     const apiKey = typeof params?.apiKey === "string" ? params.apiKey.trim() : "";
     if (!provider)
-      return respond(false, { error: "provider is empty" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "provider is empty" });
     if (!apiKey)
-      return respond(false, { error: "apiKey is empty" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "apiKey is empty" });
     try {
       const catalog = await ensureCatalog(run ?? null);
       if (catalog.length > 0 && !catalog.some((e) => e.provider === provider)) {
-        return respond(false, { error: `unknown provider: ${provider}` });
+        return respond(false, undefined, { code: "NOT_FOUND", message: `unknown provider: ${provider}` });
       }
     } catch {}
     try {
@@ -9350,13 +9446,13 @@ function registerProvidersGateway(api, state2) {
       writeConfig(nextCfg);
       respond(true, { provider, configured: true, profileId });
     } catch (err) {
-      respond(false, { error: err?.message ?? String(err) });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? String(err) });
     }
   }, { scope: "operator.write" });
   api.registerGatewayMethod("agentlife.providers.delete", ({ params, respond }) => {
     const provider = typeof params?.provider === "string" ? params.provider.trim() : "";
     if (!provider)
-      return respond(false, { error: "provider is empty" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "provider is empty" });
     try {
       const cfg = readConfig();
       const profiles = cfg?.auth?.profiles;
@@ -9395,14 +9491,14 @@ function registerProvidersGateway(api, state2) {
       }
       respond(true, { provider, configured: false });
     } catch (err) {
-      respond(false, { error: err?.message ?? String(err) });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? String(err) });
     }
   }, { scope: "operator.write" });
   api.registerGatewayMethod("agentlife.providers.test", async ({ params, respond }) => {
     const provider = typeof params?.provider === "string" ? params.provider.trim() : "";
     const apiKey = typeof params?.apiKey === "string" ? params.apiKey.trim() : "";
     if (!provider)
-      return respond(false, { error: "provider is empty" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "provider is empty" });
     if (!apiKey)
       return respond(true, { ok: false, error: "apiKey required — type a key before testing" });
     try {
@@ -9428,7 +9524,7 @@ function registerProvidersGateway(api, state2) {
       });
       respond(true, { models: deduped });
     } catch (err) {
-      respond(false, { error: err?.message ?? String(err) });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? String(err) });
     }
   }, { scope: "operator.read" });
   api.registerGatewayMethod("agentlife.providers.health", ({ respond }) => {
@@ -9458,23 +9554,23 @@ function registerProvidersGateway(api, state2) {
       }
       respond(true, { probes });
     } catch (err) {
-      respond(false, { error: err?.message ?? String(err) });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? String(err) });
     }
   }, { scope: "operator.read" });
   api.registerGatewayMethod("agentlife.providers.loginCodex", async ({ respond }) => {
     if (!run)
-      return respond(false, { error: "runCommand unavailable" });
+      return respond(false, undefined, { code: "UNAVAILABLE", message: "runCommand unavailable" });
     try {
       const result = await run(["openclaw", "capability", "model", "auth", "login", "--provider", "openai-codex"], { timeoutMs: 180000 });
       const combined = `${result?.stdout ?? ""}
 ${result?.stderr ?? ""}`;
       const urlMatch = combined.match(/https:\/\/\S+/);
       if ((result?.code ?? 0) !== 0 && !urlMatch) {
-        return respond(false, { error: (result?.stderr ?? "").trim() || "codex login failed" });
+        return respond(false, undefined, { code: "FAILED", message: (result?.stderr ?? "").trim() || "codex login failed" });
       }
       respond(true, { url: urlMatch?.[0] ?? null, completed: (result?.code ?? 0) === 0 });
     } catch (err) {
-      respond(false, { error: err?.message ?? String(err) });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? String(err) });
     }
   }, { scope: "operator.write" });
 }
@@ -9510,13 +9606,13 @@ function registerModelsConfigGateway(api) {
         fallbacks: Array.isArray(m.fallbacks) ? m.fallbacks.filter((x) => typeof x === "string") : []
       });
     } catch (err) {
-      respond(false, { error: err?.message ?? String(err) });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? String(err) });
     }
   }, { scope: "operator.read" });
   api.registerGatewayMethod("agentlife.models.defaults.setPrimary", ({ params, respond }) => {
     const model = typeof params?.model === "string" ? params.model.trim() : "";
     if (!model)
-      return respond(false, { error: "model is required" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "model is required" });
     try {
       const cfg = readConfig();
       cfg.agents = cfg.agents ?? {};
@@ -9526,26 +9622,26 @@ function registerModelsConfigGateway(api) {
       writeConfig(cfg);
       respond(true, { ok: true });
     } catch (err) {
-      respond(false, { error: err?.message ?? String(err) });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? String(err) });
     }
   }, { scope: "operator.write" });
   api.registerGatewayMethod("agentlife.models.defaults.setInternal", ({ params, respond }) => {
     const model = typeof params?.model === "string" ? params.model.trim() : "";
     if (!model)
-      return respond(false, { error: "model is required" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "model is required" });
     try {
       const cfg = readPluginConfig2();
       cfg.internalModel = model;
       writePluginConfig2(cfg);
       respond(true, { ok: true });
     } catch (err) {
-      respond(false, { error: err?.message ?? String(err) });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? String(err) });
     }
   }, { scope: "operator.write" });
   api.registerGatewayMethod("agentlife.models.fallbacks.set", ({ params, respond }) => {
     const models = Array.isArray(params?.models) ? params.models.filter((x) => typeof x === "string") : null;
     if (!models)
-      return respond(false, { error: "models must be an array of strings" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "models must be an array of strings" });
     try {
       const cfg = readConfig();
       cfg.agents = cfg.agents ?? {};
@@ -9555,7 +9651,7 @@ function registerModelsConfigGateway(api) {
       writeConfig(cfg);
       respond(true, { ok: true });
     } catch (err) {
-      respond(false, { error: err?.message ?? String(err) });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? String(err) });
     }
   }, { scope: "operator.write" });
   api.registerGatewayMethod("agentlife.agents.list", ({ respond }) => {
@@ -9569,23 +9665,23 @@ function registerModelsConfigGateway(api) {
       })).filter((a) => a.id !== null && a.name !== null);
       respond(true, { agents });
     } catch (err) {
-      respond(false, { error: err?.message ?? String(err) });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? String(err) });
     }
   }, { scope: "operator.read" });
   api.registerGatewayMethod("agentlife.agents.setModel", ({ params, respond }) => {
     const agentId = typeof params?.agentId === "string" ? params.agentId.trim() : "";
     if (!agentId)
-      return respond(false, { error: "agentId is required" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "agentId is required" });
     const model = params?.model;
     if (model !== null && typeof model !== "string") {
-      return respond(false, { error: "model must be string or null" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "model must be string or null" });
     }
     try {
       const cfg = readConfig();
       const list = Array.isArray(cfg?.agents?.list) ? cfg.agents.list : [];
       const idx = list.findIndex((a) => a?.id === agentId);
       if (idx < 0)
-        return respond(false, { error: `agent not found: ${agentId}` });
+        return respond(false, undefined, { code: "NOT_FOUND", message: `agent not found: ${agentId}` });
       if (model === null) {
         delete list[idx].model;
       } else {
@@ -9594,19 +9690,19 @@ function registerModelsConfigGateway(api) {
       writeConfig(cfg);
       respond(true, { ok: true });
     } catch (err) {
-      respond(false, { error: err?.message ?? String(err) });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? String(err) });
     }
   }, { scope: "operator.write" });
   api.registerGatewayMethod("agentlife.agents.setModel.bulk", ({ params, respond }) => {
     const updates = Array.isArray(params?.updates) ? params.updates : null;
     if (!updates)
-      return respond(false, { error: "updates must be an array" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "updates must be an array" });
     for (const u of updates) {
       if (!u || typeof u.agentId !== "string" || !u.agentId.trim()) {
-        return respond(false, { error: "each update needs agentId (string)" });
+        return respond(false, undefined, { code: "INVALID_REQUEST", message: "each update needs agentId (string)" });
       }
       if (u.model !== null && typeof u.model !== "string") {
-        return respond(false, { error: "each update model must be string or null" });
+        return respond(false, undefined, { code: "INVALID_REQUEST", message: "each update model must be string or null" });
       }
     }
     try {
@@ -9627,7 +9723,7 @@ function registerModelsConfigGateway(api) {
       writeConfig(cfg);
       respond(true, { ok: true, applied });
     } catch (err) {
-      respond(false, { error: err?.message ?? String(err) });
+      respond(false, undefined, { code: "INTERNAL", message: err?.message ?? String(err) });
     }
   }, { scope: "operator.write" });
 }
@@ -9818,13 +9914,25 @@ function register(api) {
     const serverUrl = typeof params?.serverUrl === "string" ? params.serverUrl.trim() : "";
     const apiKey = typeof params?.apiKey === "string" ? params.apiKey.trim() : "";
     if (!serverUrl || !apiKey) {
-      return respond(false, { error: "missing serverUrl or apiKey" });
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "missing serverUrl or apiKey" });
     }
+    let parsedUrl;
     try {
-      const { writeFileSync: writeFileSync12, mkdirSync: mkdirSync10 } = __require("node:fs");
-      mkdirSync10(path20.dirname(notifyConfigPath), { recursive: true });
-      writeFileSync12(notifyConfigPath, JSON.stringify({ serverUrl, apiKey }));
-    } catch {}
+      parsedUrl = new URL(serverUrl);
+    } catch {
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "serverUrl must be a valid URL" });
+    }
+    if (parsedUrl.protocol !== "https:") {
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "serverUrl must use https://" });
+    }
+    try {
+      const { writeFileSync: writeFileSync12, mkdirSync: mkdirSync10, chmodSync: chmodSync4 } = __require("node:fs");
+      mkdirSync10(path20.dirname(notifyConfigPath), { recursive: true, mode: 448 });
+      writeFileSync12(notifyConfigPath, JSON.stringify({ serverUrl, apiKey }), { mode: 384 });
+      chmodSync4(notifyConfigPath, 384);
+    } catch (e) {
+      return respond(false, undefined, { code: "INTERNAL", message: `failed to persist notification config: ${e?.message ?? "write error"}` });
+    }
     respond(true, { registered: true });
   }, { scope: "operator.write" });
 }