nextclaw 0.13.1 → 0.13.3

package/dist/cli/index.js

@@ -6,10 +6,10 @@ import { APP_NAME as APP_NAME5, APP_TAGLINE } from "@nextclaw/core";
 
 // src/cli/runtime.ts
 import {
-  loadConfig as loadConfig11,
-  saveConfig as saveConfig8,
-  getConfigPath as getConfigPath4,
-  getDataDir as getDataDir8,
+  loadConfig as loadConfig13,
+  saveConfig as saveConfig9,
+  getConfigPath as getConfigPath6,
+  getDataDir as getDataDir9,
   ConfigSchema as ConfigSchema2,
   getWorkspacePath as getWorkspacePath10,
   expandHome as expandHome2,
@@ -26,9 +26,9 @@ import {
   resolvePluginChannelMessageToolHints as resolvePluginChannelMessageToolHints2,
   setPluginRuntimeBridge as setPluginRuntimeBridge2
 } from "@nextclaw/openclaw-compat";
-import { existsSync as existsSync12, mkdirSync as mkdirSync7, readFileSync as readFileSync10, writeFileSync as writeFileSync6 } from "fs";
-import { join as join8, resolve as resolve12 } from "path";
-import { createInterface as createInterface2 } from "readline";
+import { existsSync as existsSync13, mkdirSync as mkdirSync8, readFileSync as readFileSync11, writeFileSync as writeFileSync7 } from "fs";
+import { join as join9, resolve as resolve12 } from "path";
+import { createInterface as createInterface3 } from "readline";
 import { fileURLToPath as fileURLToPath4 } from "url";
 import { spawn as spawn3 } from "child_process";
 
@@ -74,9 +74,9 @@ var RestartCoordinator = class {
           message: "Restart already scheduled; skipping duplicate request."
         };
       }
-      const delay = typeof request.delayMs === "number" && Number.isFinite(request.delayMs) ? Math.max(0, Math.floor(request.delayMs)) : 100;
+      const delay2 = typeof request.delayMs === "number" && Number.isFinite(request.delayMs) ? Math.max(0, Math.floor(request.delayMs)) : 100;
       this.exitScheduled = true;
-      this.deps.scheduleProcessExit(delay, reason);
+      this.deps.scheduleProcessExit(delay2, reason);
       return {
         status: "exit-scheduled",
         message: `Restart scheduled (${reason}).`
@@ -1440,27 +1440,7 @@ async function installPluginMutation(pathOrSpec, opts = {}) {
   };
 }
 
-// src/cli/commands/plugins.ts
-function loadPluginRegistry(config2, workspaceDir) {
-  const workspaceExtensionsDir = process.env.NEXTCLAW_DEV_FIRST_PARTY_PLUGIN_DIR;
-  const configWithDevPluginPaths = applyDevFirstPartyPluginLoadPaths(
-    config2,
-    workspaceExtensionsDir
-  );
-  const excludedRoots = resolveDevFirstPartyPluginInstallRoots(config2, workspaceExtensionsDir);
-  return loadOpenClawPlugins({
-    config: configWithDevPluginPaths,
-    workspaceDir,
-    excludeRoots: excludedRoots,
-    ...buildReservedPluginLoadOptions(),
-    logger: {
-      info: (message) => console.log(message),
-      warn: (message) => console.warn(message),
-      error: (message) => console.error(message),
-      debug: (message) => console.debug(message)
-    }
-  });
-}
+// src/cli/commands/plugin-extension-registry.ts
 function toExtensionRegistry(pluginRegistry) {
   return {
     tools: pluginRegistry.tools.map((tool) => ({
@@ -1486,6 +1466,7 @@ function toExtensionRegistry(pluginRegistry) {
       kind: runtime2.kind,
       label: runtime2.label,
       createRuntime: runtime2.createRuntime,
+      describeSessionType: runtime2.describeSessionType,
       source: runtime2.source
     })),
     diagnostics: pluginRegistry.diagnostics.map((diag) => ({
@@ -1496,6 +1477,28 @@ function toExtensionRegistry(pluginRegistry) {
     }))
   };
 }
+
+// src/cli/commands/plugins.ts
+function loadPluginRegistry(config2, workspaceDir) {
+  const workspaceExtensionsDir = process.env.NEXTCLAW_DEV_FIRST_PARTY_PLUGIN_DIR;
+  const configWithDevPluginPaths = applyDevFirstPartyPluginLoadPaths(
+    config2,
+    workspaceExtensionsDir
+  );
+  const excludedRoots = resolveDevFirstPartyPluginInstallRoots(config2, workspaceExtensionsDir);
+  return loadOpenClawPlugins({
+    config: configWithDevPluginPaths,
+    workspaceDir,
+    excludeRoots: excludedRoots,
+    ...buildReservedPluginLoadOptions(),
+    logger: {
+      info: (message) => console.log(message),
+      warn: (message) => console.warn(message),
+      error: (message) => console.error(message),
+      debug: (message) => console.debug(message)
+    }
+  });
+}
 function logPluginDiagnostics(registry) {
   for (const diag of registry.diagnostics) {
     const prefix = diag.pluginId ? `${diag.pluginId}: ` : "";
@@ -2858,17 +2861,438 @@ var CronCommands = class {
   }
 };
 
+// src/cli/commands/platform-auth.ts
+import { getConfigPath as getConfigPath2, loadConfig as loadConfig7, saveConfig as saveConfig6 } from "@nextclaw/core";
+import { createInterface as createInterface2 } from "readline";
+
+// src/cli/commands/platform-api-base.ts
+var DEFAULT_PLATFORM_API_BASE = "https://ai-gateway-api.nextclaw.io/v1";
+var INVALID_PLATFORM_HINT = `Use ${DEFAULT_PLATFORM_API_BASE} or the platform root URL without a trailing path.`;
+function trimTrailingSlash(value) {
+  return value.replace(/\/+$/, "");
+}
+function normalizeExplicitApiBase(rawApiBase) {
+  const trimmed = trimTrailingSlash(rawApiBase.trim());
+  if (!trimmed) {
+    return "";
+  }
+  return trimmed.replace(/\/v1?$/i, "");
+}
+function resolvePlatformApiBase(params) {
+  const explicitApiBase = typeof params.explicitApiBase === "string" ? params.explicitApiBase.trim() : "";
+  const configuredApiBase = typeof params.configuredApiBase === "string" ? params.configuredApiBase.trim() : "";
+  const fallbackApiBase = params.fallbackApiBase ?? DEFAULT_PLATFORM_API_BASE;
+  const inputApiBase = explicitApiBase || configuredApiBase || (params.requireConfigured ? "" : fallbackApiBase);
+  if (!inputApiBase) {
+    throw new Error("Platform API base is missing. Pass --api-base or run nextclaw login.");
+  }
+  const platformBase = normalizeExplicitApiBase(inputApiBase);
+  if (!platformBase) {
+    throw new Error(`Invalid --api-base "${inputApiBase}". ${INVALID_PLATFORM_HINT}`);
+  }
+  let parsedUrl;
+  try {
+    parsedUrl = new URL(platformBase);
+  } catch {
+    throw new Error(`Invalid --api-base "${inputApiBase}". ${INVALID_PLATFORM_HINT}`);
+  }
+  if (parsedUrl.pathname !== "" && parsedUrl.pathname !== "/") {
+    throw new Error(`Invalid --api-base "${inputApiBase}". ${INVALID_PLATFORM_HINT}`);
+  }
+  const normalizedPlatformBase = trimTrailingSlash(parsedUrl.toString());
+  return {
+    platformBase: normalizedPlatformBase,
+    v1Base: `${normalizedPlatformBase}/v1`,
+    inputApiBase
+  };
+}
+function buildPlatformApiBaseErrorMessage(inputApiBase, rawMessage) {
+  if (rawMessage.includes("Remote session cookie missing") || rawMessage.includes("endpoint not found") || rawMessage.includes("NOT_FOUND")) {
+    return `Invalid --api-base "${inputApiBase}". ${INVALID_PLATFORM_HINT}`;
+  }
+  return rawMessage;
+}
+
+// src/cli/commands/platform-auth.ts
+function resolveProviderConfig(opts) {
+  const configPath = getConfigPath2();
+  const config2 = loadConfig7(configPath);
+  const providers = config2.providers;
+  const nextclawProvider = providers.nextclaw ?? {
+    displayName: "",
+    apiKey: "",
+    apiBase: null,
+    extraHeaders: null,
+    wireApi: "auto",
+    models: []
+  };
+  const configuredApiBase = typeof nextclawProvider.apiBase === "string" && nextclawProvider.apiBase.trim().length > 0 ? nextclawProvider.apiBase.trim() : "https://ai-gateway-api.nextclaw.io/v1";
+  const requestedApiBase = typeof opts.apiBase === "string" && opts.apiBase.trim().length > 0 ? opts.apiBase.trim() : configuredApiBase;
+  const { platformBase, v1Base, inputApiBase } = resolvePlatformApiBase({
+    explicitApiBase: requestedApiBase,
+    fallbackApiBase: "https://ai-gateway-api.nextclaw.io/v1"
+  });
+  return {
+    configPath,
+    config: config2,
+    providers,
+    nextclawProvider,
+    platformBase,
+    v1Base,
+    inputApiBase
+  };
+}
+async function resolveCredentials(opts) {
+  let email = typeof opts.email === "string" ? opts.email.trim() : "";
+  let password = typeof opts.password === "string" ? opts.password : "";
+  if (email && password) {
+    return { email, password };
+  }
+  const rl = createInterface2({
+    input: process.stdin,
+    output: process.stdout
+  });
+  try {
+    if (!email) {
+      email = (await prompt(rl, "Email: ")).trim();
+    }
+    if (!password) {
+      password = await prompt(rl, "Password: ");
+    }
+  } finally {
+    rl.close();
+  }
+  if (!email || !password) {
+    throw new Error("Email and password are required.");
+  }
+  return { email, password };
+}
+function readLoginPayload(raw) {
+  let parsed = null;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    parsed = null;
+  }
+  const token = typeof parsed === "object" && parsed && "data" in parsed && typeof parsed.data?.token === "string" ? parsed.data.token : "";
+  const role = typeof parsed === "object" && parsed && "data" in parsed && typeof parsed.data?.user?.role === "string" ? parsed.data.user.role : "user";
+  if (!token) {
+    throw new Error("Login succeeded but token is missing.");
+  }
+  return { token, role };
+}
+var PlatformAuthCommands = class {
+  async login(opts = {}) {
+    const { configPath, config: config2, providers, nextclawProvider, platformBase, v1Base, inputApiBase } = resolveProviderConfig(opts);
+    const { email, password } = await resolveCredentials(opts);
+    const endpoint = opts.register ? `${platformBase}/platform/auth/register` : `${platformBase}/platform/auth/login`;
+    const response = await fetch(endpoint, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({ email, password })
+    });
+    const raw = await response.text();
+    if (!response.ok) {
+      let parsed = null;
+      try {
+        parsed = JSON.parse(raw);
+      } catch {
+        parsed = null;
+      }
+      const maybeMessage = typeof parsed === "object" && parsed && "error" in parsed && typeof parsed.error?.message === "string" ? parsed.error.message : raw || `Request failed (${response.status})`;
+      throw new Error(buildPlatformApiBaseErrorMessage(inputApiBase, maybeMessage));
+    }
+    const { token, role } = readLoginPayload(raw);
+    nextclawProvider.apiBase = v1Base;
+    nextclawProvider.apiKey = token;
+    providers.nextclaw = nextclawProvider;
+    saveConfig6(config2, configPath);
+    console.log(`\u2713 Logged in to NextClaw platform (${platformBase})`);
+    console.log(`\u2713 Account: ${email} (${role})`);
+    console.log(`\u2713 Token saved into providers.nextclaw.apiKey`);
+  }
+};
+
+// src/cli/commands/remote.ts
+import { getConfigPath as getConfigPath3, getDataDir as getDataDir4, loadConfig as loadConfig8 } from "@nextclaw/core";
+import { ensureUiBridgeSecret } from "@nextclaw/server";
+import { existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "fs";
+import { dirname as dirname2, join as join4 } from "path";
+import { hostname, platform as readPlatform } from "os";
+function encodeBase64(bytes) {
+  return Buffer.from(bytes).toString("base64");
+}
+function decodeBase64(base64) {
+  if (!base64) {
+    return new Uint8Array();
+  }
+  return new Uint8Array(Buffer.from(base64, "base64"));
+}
+function delay(ms) {
+  return new Promise((resolveDelay) => setTimeout(resolveDelay, ms));
+}
+function ensureDir(path2) {
+  mkdirSync4(path2, { recursive: true });
+}
+function readJsonFile2(path2) {
+  if (!existsSync6(path2)) {
+    return null;
+  }
+  try {
+    return JSON.parse(readFileSync6(path2, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function writeJsonFile(path2, value) {
+  ensureDir(dirname2(path2));
+  writeFileSync4(path2, `${JSON.stringify(value, null, 2)}
+`, "utf-8");
+}
+var RemoteCommands = class {
+  remoteDir = join4(getDataDir4(), "remote");
+  devicePath = join4(this.remoteDir, "device.json");
+  ensureDeviceInstallId() {
+    const existing = readJsonFile2(this.devicePath);
+    if (existing?.deviceInstallId?.trim()) {
+      return existing.deviceInstallId.trim();
+    }
+    const deviceInstallId = crypto.randomUUID();
+    ensureDir(this.remoteDir);
+    writeJsonFile(this.devicePath, { deviceInstallId });
+    return deviceInstallId;
+  }
+  resolvePlatformAccess(opts) {
+    const config2 = loadConfig8(getConfigPath3());
+    const providers = config2.providers;
+    const nextclawProvider = providers.nextclaw;
+    const token = typeof nextclawProvider?.apiKey === "string" ? nextclawProvider.apiKey.trim() : "";
+    if (!token) {
+      throw new Error('NextClaw platform token is missing. Run "nextclaw login" first.');
+    }
+    const configuredApiBase = typeof nextclawProvider?.apiBase === "string" ? nextclawProvider.apiBase.trim() : "";
+    const rawApiBase = typeof opts.apiBase === "string" && opts.apiBase.trim().length > 0 ? opts.apiBase.trim() : configuredApiBase;
+    if (!rawApiBase) {
+      throw new Error("Platform API base is missing. Pass --api-base or run nextclaw login.");
+    }
+    const { platformBase } = resolvePlatformApiBase({
+      explicitApiBase: rawApiBase,
+      requireConfigured: true
+    });
+    return { platformBase, token, config: config2 };
+  }
+  resolveLocalOrigin(config2, opts) {
+    if (typeof opts.localOrigin === "string" && opts.localOrigin.trim().length > 0) {
+      return opts.localOrigin.trim().replace(/\/$/, "");
+    }
+    const state = readServiceState();
+    if (state && isProcessRunning(state.pid) && Number.isFinite(state.uiPort)) {
+      return `http://127.0.0.1:${state.uiPort}`;
+    }
+    const configuredPort = typeof config2.ui?.port === "number" && Number.isFinite(config2.ui.port) ? config2.ui.port : 18791;
+    return `http://127.0.0.1:${configuredPort}`;
+  }
+  async ensureLocalUiHealthy(localOrigin) {
+    const response = await fetch(`${localOrigin}/api/health`);
+    if (!response.ok) {
+      throw new Error(`Local UI is not healthy at ${localOrigin}. Start NextClaw first.`);
+    }
+  }
+  async registerDevice(params) {
+    const response = await fetch(`${params.platformBase}/platform/remote/devices/register`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        authorization: `Bearer ${params.token}`
+      },
+      body: JSON.stringify({
+        deviceInstallId: params.deviceInstallId,
+        displayName: params.displayName,
+        platform: readPlatform(),
+        appVersion: getPackageVersion(),
+        localOrigin: params.localOrigin
+      })
+    });
+    const payload = await response.json();
+    if (!response.ok || !payload.ok || !payload.data?.device) {
+      throw new Error(payload.error?.message ?? `Failed to register remote device (${response.status}).`);
+    }
+    return payload.data.device;
+  }
+  async requestBridgeCookie(localOrigin) {
+    const response = await fetch(`${localOrigin}/api/auth/bridge`, {
+      method: "POST",
+      headers: {
+        "x-nextclaw-ui-bridge-secret": ensureUiBridgeSecret()
+      }
+    });
+    const payload = await response.json();
+    if (!response.ok || !payload.ok) {
+      throw new Error(payload.error?.message ?? `Failed to request local auth bridge (${response.status}).`);
+    }
+    return typeof payload.data?.cookie === "string" && payload.data.cookie.trim().length > 0 ? payload.data.cookie.trim() : null;
+  }
+  async handleRelayRequest(params) {
+    const bridgeCookie = await this.requestBridgeCookie(params.localOrigin);
+    const url = new URL(params.frame.path, params.localOrigin);
+    const headers = new Headers();
+    for (const [key, value] of params.frame.headers) {
+      const lower = key.toLowerCase();
+      if ([
+        "host",
+        "connection",
+        "content-length",
+        "cookie",
+        "x-forwarded-for",
+        "x-forwarded-proto",
+        "cf-connecting-ip"
+      ].includes(lower)) {
+        continue;
+      }
+      headers.set(key, value);
+    }
+    if (bridgeCookie) {
+      headers.set("cookie", bridgeCookie);
+    }
+    const bodyBytes = decodeBase64(params.frame.bodyBase64);
+    const response = await fetch(url, {
+      method: params.frame.method,
+      headers,
+      body: params.frame.method === "GET" || params.frame.method === "HEAD" ? void 0 : bodyBytes
+    });
+    const responseHeaders = Array.from(response.headers.entries()).filter(([key]) => {
+      const lower = key.toLowerCase();
+      return !["content-length", "connection", "transfer-encoding", "set-cookie"].includes(lower);
+    });
+    const contentType = response.headers.get("content-type")?.toLowerCase() ?? "";
+    if (response.body && contentType.startsWith("text/event-stream")) {
+      params.socket.send(JSON.stringify({
+        type: "response.start",
+        requestId: params.frame.requestId,
+        status: response.status,
+        headers: responseHeaders
+      }));
+      const reader = response.body.getReader();
+      try {
+        while (true) {
+          const { value, done } = await reader.read();
+          if (done) {
+            break;
+          }
+          if (value && value.length > 0) {
+            params.socket.send(JSON.stringify({
+              type: "response.chunk",
+              requestId: params.frame.requestId,
+              bodyBase64: encodeBase64(value)
+            }));
+          }
+        }
+      } finally {
+        reader.releaseLock();
+      }
+      params.socket.send(JSON.stringify({
+        type: "response.end",
+        requestId: params.frame.requestId
+      }));
+      return;
+    }
+    const responseBody = response.body ? new Uint8Array(await response.arrayBuffer()) : new Uint8Array();
+    params.socket.send(JSON.stringify({
+      type: "response",
+      requestId: params.frame.requestId,
+      status: response.status,
+      headers: responseHeaders,
+      bodyBase64: encodeBase64(responseBody)
+    }));
+  }
+  async connectOnce(params) {
+    await new Promise((resolve13, reject) => {
+      const socket = new WebSocket(params.wsUrl);
+      const pingTimer = setInterval(() => {
+        if (socket.readyState === WebSocket.OPEN) {
+          socket.send(JSON.stringify({ type: "ping", at: (/* @__PURE__ */ new Date()).toISOString() }));
+        }
+      }, 15e3);
+      socket.addEventListener("open", () => {
+        console.log(`\u2713 Remote connector connected: ${params.wsUrl}`);
+      });
+      socket.addEventListener("message", (event) => {
+        void (async () => {
+          let frame = null;
+          try {
+            frame = JSON.parse(String(event.data ?? ""));
+          } catch {
+            return;
+          }
+          if (!frame || frame.type !== "request") {
+            return;
+          }
+          try {
+            await this.handleRelayRequest({ frame, localOrigin: params.localOrigin, socket });
+          } catch (error) {
+            socket.send(JSON.stringify({
+              type: "response.error",
+              requestId: frame.requestId,
+              message: error instanceof Error ? error.message : String(error)
+            }));
+          }
+        })();
+      });
+      socket.addEventListener("close", () => {
+        clearInterval(pingTimer);
+        resolve13();
+      });
+      socket.addEventListener("error", () => {
+        clearInterval(pingTimer);
+        reject(new Error("Remote connector websocket failed."));
+      });
+    });
+  }
+  async connect(opts = {}) {
+    const { platformBase, token, config: config2 } = this.resolvePlatformAccess(opts);
+    const localOrigin = this.resolveLocalOrigin(config2, opts);
+    await this.ensureLocalUiHealthy(localOrigin);
+    const deviceInstallId = this.ensureDeviceInstallId();
+    const displayName = typeof opts.name === "string" && opts.name.trim().length > 0 ? opts.name.trim() : hostname();
+    const device = await this.registerDevice({
+      platformBase,
+      token,
+      deviceInstallId,
+      displayName,
+      localOrigin
+    });
+    console.log(`\u2713 Remote device registered: ${device.displayName} (${device.id})`);
+    console.log(`\u2713 Local origin: ${localOrigin}`);
+    console.log(`\u2713 Platform: ${platformBase}`);
+    const wsUrl = `${platformBase.replace(/^http/i, "ws")}/platform/remote/connect?deviceId=${encodeURIComponent(device.id)}&token=${encodeURIComponent(token)}`;
+    do {
+      try {
+        await this.connectOnce({ wsUrl, localOrigin });
+      } catch (error) {
+        console.error(`Remote connector error: ${error instanceof Error ? error.message : String(error)}`);
+      }
+      if (opts.once) {
+        break;
+      }
+      console.log("Remote connector disconnected. Reconnecting in 3s...");
+      await delay(3e3);
+    } while (!opts.once);
+  }
+};
+
 // src/cli/commands/diagnostics.ts
 import { createServer as createNetServer } from "net";
-import { existsSync as existsSync6, readFileSync as readFileSync6 } from "fs";
+import { existsSync as existsSync7, readFileSync as readFileSync7 } from "fs";
 import { resolve as resolve8 } from "path";
 import {
   APP_NAME,
-  getConfigPath as getConfigPath2,
-  getDataDir as getDataDir4,
+  getConfigPath as getConfigPath4,
+  getDataDir as getDataDir5,
   getWorkspacePath as getWorkspacePath4,
   hasSecretRef,
-  loadConfig as loadConfig7
+  loadConfig as loadConfig9
 } from "@nextclaw/core";
 import { listBuiltinProviders } from "@nextclaw/runtime";
 var DiagnosticsCommands = class {
@@ -3029,10 +3453,10 @@ var DiagnosticsCommands = class {
     process.exitCode = exitCode;
   }
   async collectRuntimeStatus(params) {
-    const configPath = getConfigPath2();
-    const config2 = loadConfig7();
+    const configPath = getConfigPath4();
+    const config2 = loadConfig9();
     const workspacePath = getWorkspacePath4(config2.agents.defaults.workspace);
-    const serviceStatePath = resolve8(getDataDir4(), "run", "service.json");
+    const serviceStatePath = resolve8(getDataDir5(), "run", "service.json");
     const fixActions = [];
     let serviceState = readServiceState();
     if (params.fix && serviceState && !isProcessRunning(serviceState.pid)) {
@@ -3072,11 +3496,11 @@ var DiagnosticsCommands = class {
     });
     const issues = [];
     const recommendations = [];
-    if (!existsSync6(configPath)) {
+    if (!existsSync7(configPath)) {
       issues.push("Config file is missing.");
       recommendations.push(`Run ${APP_NAME} init to create config files.`);
     }
-    if (!existsSync6(workspacePath)) {
+    if (!existsSync7(workspacePath)) {
       issues.push("Workspace directory does not exist.");
       recommendations.push(`Run ${APP_NAME} init to create workspace templates.`);
     }
@@ -3109,13 +3533,13 @@ var DiagnosticsCommands = class {
     return {
       generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
       configPath,
-      configExists: existsSync6(configPath),
+      configExists: existsSync7(configPath),
       workspacePath,
-      workspaceExists: existsSync6(workspacePath),
+      workspaceExists: existsSync7(workspacePath),
       model: config2.agents.defaults.model,
       providers,
       serviceStatePath,
-      serviceStateExists: existsSync6(serviceStatePath),
+      serviceStateExists: existsSync7(serviceStatePath),
       fixActions,
       process: {
         managedByState,
@@ -3165,11 +3589,11 @@ var DiagnosticsCommands = class {
     }
   }
   readLogTail(path2, maxLines = 25) {
-    if (!existsSync6(path2)) {
+    if (!existsSync7(path2)) {
       return [];
     }
     try {
-      const lines = readFileSync6(path2, "utf-8").split(/\r?\n/).filter(Boolean);
+      const lines = readFileSync7(path2, "utf-8").split(/\r?\n/).filter(Boolean);
       if (lines.length <= maxLines) {
         return lines;
       }
@@ -3209,8 +3633,8 @@ import {
   stopPluginChannelGateways as stopPluginChannelGateways2
 } from "@nextclaw/openclaw-compat";
 import { startUiServer } from "@nextclaw/server";
-import { appendFileSync, closeSync, cpSync as cpSync2, existsSync as existsSync10, mkdirSync as mkdirSync5, openSync } from "fs";
-import { dirname as dirname2, join as join6, resolve as resolve10 } from "path";
+import { appendFileSync, closeSync, cpSync as cpSync2, existsSync as existsSync11, mkdirSync as mkdirSync6, openSync } from "fs";
+import { dirname as dirname3, join as join7, resolve as resolve10 } from "path";
 import { spawn as spawn2 } from "child_process";
 import { request as httpRequest } from "http";
 import { request as httpsRequest } from "https";
@@ -3219,7 +3643,7 @@ import chokidar from "chokidar";
 
 // src/cli/gateway/controller.ts
 import { createHash } from "crypto";
-import { existsSync as existsSync7, readFileSync as readFileSync7 } from "fs";
+import { existsSync as existsSync8, readFileSync as readFileSync8 } from "fs";
 import {
   buildConfigSchema,
   ConfigSchema,
@@ -3227,12 +3651,12 @@ import {
   redactConfigObject
 } from "@nextclaw/core";
 var hashRaw = (raw) => createHash("sha256").update(raw).digest("hex");
-var readConfigSnapshot = (getConfigPath5) => {
-  const path2 = getConfigPath5();
+var readConfigSnapshot = (getConfigPath7) => {
+  const path2 = getConfigPath7();
   let raw = "";
   let parsed = {};
-  if (existsSync7(path2)) {
-    raw = readFileSync7(path2, "utf-8");
+  if (existsSync8(path2)) {
+    raw = readFileSync8(path2, "utf-8");
     try {
       parsed = JSON.parse(raw);
     } catch {
@@ -3339,11 +3763,11 @@ var GatewayControllerImpl = class {
       await this.deps.requestRestart(options);
       return;
     }
-    const delay = typeof options?.delayMs === "number" && Number.isFinite(options.delayMs) ? Math.max(0, options.delayMs) : 100;
+    const delay2 = typeof options?.delayMs === "number" && Number.isFinite(options.delayMs) ? Math.max(0, options.delayMs) : 100;
     console.log(`Gateway restart requested via tool${options?.reason ? ` (${options.reason})` : ""}.`);
     setTimeout(() => {
       process.exit(0);
-    }, delay);
+    }, delay2);
   }
   status() {
     return {
@@ -3689,9 +4113,9 @@ var MissingProvider = class extends LLMProvider {
 };
 
 // src/cli/commands/service-marketplace-installer.ts
-import { getWorkspacePath as getWorkspacePath5, loadConfig as loadConfig9 } from "@nextclaw/core";
-import { existsSync as existsSync8, rmSync as rmSync4 } from "fs";
-import { join as join4 } from "path";
+import { getWorkspacePath as getWorkspacePath5, loadConfig as loadConfig11 } from "@nextclaw/core";
+import { existsSync as existsSync9, rmSync as rmSync4 } from "fs";
+import { join as join5 } from "path";
 
 // src/cli/commands/service-marketplace-helpers.ts
 var containsAbsoluteFsPath = (line) => {
@@ -3739,7 +4163,7 @@ var buildMarketplaceSkillInstallArgs = (params) => {
 };
 
 // src/cli/commands/service-mcp-marketplace-ops.ts
-import { loadConfig as loadConfig8, saveConfig as saveConfig6 } from "@nextclaw/core";
+import { loadConfig as loadConfig10, saveConfig as saveConfig7 } from "@nextclaw/core";
 import { McpDoctorFacade as McpDoctorFacade2, McpMutationService as McpMutationService2 } from "@nextclaw/mcp";
 var ServiceMcpMarketplaceOps = class {
   constructor(options) {
@@ -3807,13 +4231,13 @@ var ServiceMcpMarketplaceOps = class {
   }
   createMutationService() {
     return new McpMutationService2({
-      getConfig: () => loadConfig8(),
-      saveConfig: (config2) => saveConfig6(config2)
+      getConfig: () => loadConfig10(),
+      saveConfig: (config2) => saveConfig7(config2)
     });
   }
   createDoctorFacade() {
     return new McpDoctorFacade2({
-      getConfig: () => loadConfig8()
+      getConfig: () => loadConfig10()
     });
   }
 };
@@ -3854,7 +4278,7 @@ var ServiceMarketplaceInstaller = class {
     if (params.kind && params.kind !== "marketplace") {
       throw new Error(`Unsupported marketplace skill kind: ${params.kind}`);
     }
-    const workspace = getWorkspacePath5(loadConfig9().agents.defaults.workspace);
+    const workspace = getWorkspacePath5(loadConfig11().agents.defaults.workspace);
     const args = buildMarketplaceSkillInstallArgs({
       slug: params.slug,
       workspace,
@@ -3893,9 +4317,9 @@ var ServiceMarketplaceInstaller = class {
     return { message: result.message };
   }
   async uninstallSkill(slug) {
-    const workspace = getWorkspacePath5(loadConfig9().agents.defaults.workspace);
-    const targetDir = join4(workspace, "skills", slug);
-    if (!existsSync8(targetDir)) {
+    const workspace = getWorkspacePath5(loadConfig11().agents.defaults.workspace);
+    const targetDir = join5(workspace, "skills", slug);
+    if (!existsSync9(targetDir)) {
       throw new Error(`Skill not installed in workspace: ${slug}`);
     }
     rmSync4(targetDir, { recursive: true, force: true });
@@ -5675,22 +6099,33 @@ var UiNcpRuntimeRegistry = class {
       sessionMetadata: nextSessionMetadata
     });
   }
-  listSessionTypes() {
-    const options = [...this.registrations.values()].map((registration) => ({
-      value: registration.kind,
-      label: registration.label
-    })).sort((left, right) => {
-      if (left.value === this.defaultKind) {
-        return -1;
-      }
-      if (right.value === this.defaultKind) {
-        return 1;
-      }
-      return left.value.localeCompare(right.value);
-    });
+  async listSessionTypes() {
+    const options = await Promise.all(
+      [...this.registrations.values()].map(async (registration) => {
+        const descriptor = await registration.describeSessionType?.();
+        return {
+          value: registration.kind,
+          label: registration.label,
+          ready: descriptor?.ready ?? true,
+          reason: descriptor?.reason ?? null,
+          reasonMessage: descriptor?.reasonMessage ?? null,
+          recommendedModel: descriptor?.recommendedModel ?? null,
+          cta: descriptor?.cta ?? null,
+          ...descriptor?.supportedModels ? { supportedModels: descriptor.supportedModels } : {}
+        };
+      })
+    );
     return {
       defaultType: this.defaultKind,
-      options
+      options: options.sort((left, right) => {
+        if (left.value === this.defaultKind) {
+          return -1;
+        }
+        if (right.value === this.defaultKind) {
+          return 1;
+        }
+        return left.value.localeCompare(right.value);
+      })
     };
   }
 };
@@ -5796,7 +6231,8 @@ async function createUiNcpAgent(params) {
       scope.add(runtimeRegistry.register({
         kind: registration.kind,
         label: registration.label,
-        createRuntime: registration.createRuntime
+        createRuntime: registration.createRuntime,
+        describeSessionType: registration.describeSessionType
       }));
     }
   };
@@ -5844,14 +6280,14 @@ async function createUiNcpAgent(params) {
 }
 
 // src/cli/commands/ui-chat-run-coordinator.ts
-import { existsSync as existsSync9, mkdirSync as mkdirSync4, readdirSync as readdirSync2, readFileSync as readFileSync8, writeFileSync as writeFileSync4 } from "fs";
-import { join as join5 } from "path";
+import { existsSync as existsSync10, mkdirSync as mkdirSync5, readdirSync as readdirSync2, readFileSync as readFileSync9, writeFileSync as writeFileSync5 } from "fs";
+import { join as join6 } from "path";
 import {
-  getDataDir as getDataDir5,
+  getDataDir as getDataDir6,
   parseAgentScopedSessionKey as parseAgentScopedSessionKey2,
   safeFilename
 } from "@nextclaw/core";
-var RUNS_DIR = join5(getDataDir5(), "runs");
+var RUNS_DIR = join6(getDataDir6(), "runs");
 var NON_TERMINAL_STATES = /* @__PURE__ */ new Set(["queued", "running"]);
 var DEFAULT_SESSION_TYPE = "native";
 var SESSION_TYPE_METADATA_KEY = "session_type";
@@ -5910,7 +6346,7 @@ function hasToolSessionEvent(run) {
 var UiChatRunCoordinator = class {
   constructor(options) {
     this.options = options;
-    mkdirSync4(RUNS_DIR, { recursive: true });
+    mkdirSync5(RUNS_DIR, { recursive: true });
     this.loadPersistedRuns();
   }
   runs = /* @__PURE__ */ new Map();
@@ -6377,7 +6813,7 @@ var UiChatRunCoordinator = class {
     };
   }
   getRunPath(runId) {
-    return join5(RUNS_DIR, `${safeFilename(runId)}.json`);
+    return join6(RUNS_DIR, `${safeFilename(runId)}.json`);
   }
   persistRun(run) {
     const persisted = {
@@ -6395,20 +6831,20 @@ var UiChatRunCoordinator = class {
       ...typeof run.reply === "string" ? { reply: run.reply } : {},
       events: run.events
     };
-    writeFileSync4(this.getRunPath(run.runId), `${JSON.stringify(persisted, null, 2)}
+    writeFileSync5(this.getRunPath(run.runId), `${JSON.stringify(persisted, null, 2)}
 `);
   }
   loadPersistedRuns() {
-    if (!existsSync9(RUNS_DIR)) {
+    if (!existsSync10(RUNS_DIR)) {
       return;
     }
     for (const entry of readdirSync2(RUNS_DIR, { withFileTypes: true })) {
       if (!entry.isFile() || !entry.name.endsWith(".json")) {
         continue;
       }
-      const path2 = join5(RUNS_DIR, entry.name);
+      const path2 = join6(RUNS_DIR, entry.name);
       try {
-        const parsed = JSON.parse(readFileSync8(path2, "utf-8"));
+        const parsed = JSON.parse(readFileSync9(path2, "utf-8"));
         const runId = readOptionalString(parsed.runId);
         const sessionKey = readOptionalString(parsed.sessionKey);
         if (!runId || !sessionKey) {
@@ -6467,18 +6903,18 @@ var {
   ChannelManager: ChannelManager2,
   CronService: CronService2,
   getApiBase,
-  getConfigPath: getConfigPath3,
-  getDataDir: getDataDir6,
+  getConfigPath: getConfigPath5,
+  getDataDir: getDataDir7,
   getProvider,
   getProviderName,
   getWorkspacePath: getWorkspacePath9,
   HeartbeatService,
   LiteLLMProvider,
-  loadConfig: loadConfig10,
+  loadConfig: loadConfig12,
   MessageBus,
   ProviderManager,
   resolveConfigSecrets: resolveConfigSecrets2,
-  saveConfig: saveConfig7,
+  saveConfig: saveConfig8,
   SessionManager,
   parseAgentScopedSessionKey: parseAgentScopedSessionKey3
 } = NextclawCore;
@@ -6498,8 +6934,8 @@ var ServiceCommands = class {
   async startGateway(options = {}) {
     this.applyLiveConfigReload = null;
     this.liveUiNcpAgent = null;
-    const runtimeConfigPath = getConfigPath3();
-    const config2 = resolveConfigSecrets2(loadConfig10(), { configPath: runtimeConfigPath });
+    const runtimeConfigPath = getConfigPath5();
+    const config2 = resolveConfigSecrets2(loadConfig12(), { configPath: runtimeConfigPath });
     const workspace = getWorkspacePath9(config2.agents.defaults.workspace);
     let pluginRegistry = loadPluginRegistry(config2, workspace);
     let extensionRegistry = toExtensionRegistry(pluginRegistry);
@@ -6529,7 +6965,7 @@ var ServiceCommands = class {
         }
       }
     };
-    const cronStorePath = join6(getDataDir6(), "cron", "jobs.json");
+    const cronStorePath = join7(getDataDir7(), "cron", "jobs.json");
     const cron2 = new CronService2(cronStorePath);
     const uiConfig = resolveUiConfig(config2, options.uiOverrides);
     const uiStaticDir = options.uiStaticDir === void 0 ? resolveUiStaticDir() : options.uiStaticDir;
@@ -6544,7 +6980,7 @@ var ServiceCommands = class {
       sessionManager,
       providerManager,
       makeProvider: (nextConfig) => this.makeProvider(nextConfig, { allowMissing: true }) ?? this.makeMissingProvider(nextConfig),
-      loadConfig: () => resolveConfigSecrets2(loadConfig10(), { configPath: runtimeConfigPath }),
+      loadConfig: () => resolveConfigSecrets2(loadConfig12(), { configPath: runtimeConfigPath }),
       getExtensionChannels: () => extensionRegistry.channels,
       onRestartRequired: (paths) => {
         void this.deps.requestRestart({
@@ -6555,14 +6991,14 @@ var ServiceCommands = class {
       }
     });
     this.applyLiveConfigReload = async () => {
-      await reloader.applyReloadPlan(resolveConfigSecrets2(loadConfig10(), { configPath: runtimeConfigPath }));
+      await reloader.applyReloadPlan(resolveConfigSecrets2(loadConfig12(), { configPath: runtimeConfigPath }));
     };
     const gatewayController = new GatewayControllerImpl({
       reloader,
       cron: cron2,
       sessionManager,
-      getConfigPath: getConfigPath3,
-      saveConfig: saveConfig7,
+      getConfigPath: getConfigPath5,
+      saveConfig: saveConfig8,
       requestRestart: async (options2) => {
         await this.deps.requestRestart({
           reason: options2?.reason ?? "gateway tool restart",
@@ -6588,7 +7024,7 @@ var ServiceCommands = class {
       resolveMessageToolHints: ({ channel, accountId }) => resolvePluginChannelMessageToolHints({
         registry: pluginRegistry,
         channel,
-        cfg: resolveConfigSecrets2(loadConfig10(), { configPath: runtimeConfigPath }),
+        cfg: resolveConfigSecrets2(loadConfig12(), { configPath: runtimeConfigPath }),
         accountId
       })
     });
@@ -6621,14 +7057,14 @@ var ServiceCommands = class {
     });
     let pluginChannelBindings = getPluginChannelBindings3(pluginRegistry);
     setPluginRuntimeBridge({
-      loadConfig: () => toPluginConfigView(resolveConfigSecrets2(loadConfig10(), { configPath: runtimeConfigPath }), pluginChannelBindings),
+      loadConfig: () => toPluginConfigView(resolveConfigSecrets2(loadConfig12(), { configPath: runtimeConfigPath }), pluginChannelBindings),
       writeConfigFile: async (nextConfigView) => {
         if (!nextConfigView || typeof nextConfigView !== "object" || Array.isArray(nextConfigView)) {
           throw new Error("plugin runtime writeConfigFile expects an object config");
         }
-        const current = loadConfig10();
+        const current = loadConfig12();
         const next = mergePluginConfigView(current, nextConfigView, pluginChannelBindings);
-        saveConfig7(next);
+        saveConfig8(next);
       },
       dispatchReplyWithBufferedBlockDispatcher: async ({ ctx, dispatcherOptions }) => {
         const bodyForAgent = typeof ctx.BodyForAgent === "string" ? ctx.BodyForAgent : "";
@@ -6702,12 +7138,12 @@ var ServiceCommands = class {
       providerManager,
       bus,
       gatewayController,
-      () => resolveConfigSecrets2(loadConfig10(), { configPath: runtimeConfigPath }),
+      () => resolveConfigSecrets2(loadConfig12(), { configPath: runtimeConfigPath }),
       () => extensionRegistry,
       ({ channel, accountId }) => resolvePluginChannelMessageToolHints({
         registry: pluginRegistry,
         channel,
-        cfg: resolveConfigSecrets2(loadConfig10(), { configPath: runtimeConfigPath }),
+        cfg: resolveConfigSecrets2(loadConfig12(), { configPath: runtimeConfigPath }),
         accountId
       })
     );
@@ -6744,7 +7180,7 @@ var ServiceCommands = class {
     return trimmed || void 0;
   }
   watchConfigFile(reloader) {
-    const configPath = resolve10(getConfigPath3());
+    const configPath = resolve10(getConfigPath5());
     const watcher = chokidar.watch(configPath, {
       ignoreInitial: true,
       awaitWriteFinish: { stabilityThreshold: 200, pollInterval: 50 }
@@ -6865,7 +7301,7 @@ var ServiceCommands = class {
     });
   }
   async runForeground(options) {
-    const config2 = loadConfig10();
+    const config2 = loadConfig12();
     const uiConfig = resolveUiConfig(config2, options.uiOverrides);
     const uiUrl = resolveUiApiBase(uiConfig.host, uiConfig.port);
     if (options.open) {
@@ -6878,7 +7314,7 @@ var ServiceCommands = class {
     });
   }
   async startService(options) {
-    const config2 = loadConfig10();
+    const config2 = loadConfig12();
     const uiConfig = resolveUiConfig(config2, options.uiOverrides);
     const uiUrl = resolveUiApiBase(uiConfig.host, uiConfig.port);
     const apiUrl = `${uiUrl}/api`;
@@ -6939,7 +7375,7 @@ var ServiceCommands = class {
     }
     const logPath = resolveServiceLogPath();
     const logDir = resolve10(logPath, "..");
-    mkdirSync5(logDir, { recursive: true });
+    mkdirSync6(logDir, { recursive: true });
     const logFd = openSync(logPath, "a");
     const readinessTimeoutMs = this.resolveStartupTimeoutMs(options.startupTimeoutMs);
     const quickPhaseTimeoutMs = Math.min(8e3, readinessTimeoutMs);
@@ -7292,7 +7728,7 @@ var ServiceCommands = class {
         return null;
       }
       console.error("Error: No API key configured.");
-      console.error(`Set one in ${getConfigPath3()} under providers section`);
+      console.error(`Set one in ${getConfigPath5()} under providers section`);
       process.exit(1);
     }
     return new LiteLLMProvider({
@@ -7419,7 +7855,7 @@ var ServiceCommands = class {
     const uiServer = startUiServer({
       host: uiConfig.host,
       port: uiConfig.port,
-      configPath: getConfigPath3(),
+      configPath: getConfigPath5(),
       productVersion: getPackageVersion(),
       staticDir: uiStaticDir ?? void 0,
       cronService,
@@ -7507,10 +7943,10 @@ var ServiceCommands = class {
     }
   }
   installBuiltinMarketplaceSkill(slug, force) {
-    const workspace = getWorkspacePath9(loadConfig10().agents.defaults.workspace);
-    const destination = join6(workspace, "skills", slug);
-    const destinationSkillFile = join6(destination, "SKILL.md");
-    if (existsSync10(destinationSkillFile) && !force) {
+    const workspace = getWorkspacePath9(loadConfig12().agents.defaults.workspace);
+    const destination = join7(workspace, "skills", slug);
+    const destinationSkillFile = join7(destination, "SKILL.md");
+    if (existsSync11(destinationSkillFile) && !force) {
       return {
         message: `${slug} is already installed`
       };
@@ -7518,15 +7954,15 @@ var ServiceCommands = class {
     const loader = createSkillsLoader(workspace);
     const builtin = (loader?.listSkills(false) ?? []).find((skill) => skill.name === slug && skill.source === "builtin");
     if (!builtin) {
-      if (existsSync10(destinationSkillFile)) {
+      if (existsSync11(destinationSkillFile)) {
         return {
           message: `${slug} is already installed`
         };
       }
       return null;
     }
-    mkdirSync5(join6(workspace, "skills"), { recursive: true });
-    cpSync2(dirname2(builtin.path), destination, { recursive: true, force: true });
+    mkdirSync6(join7(workspace, "skills"), { recursive: true });
+    cpSync2(dirname3(builtin.path), destination, { recursive: true, force: true });
     return {
       message: `Installed skill: ${slug}`
     };
@@ -7585,11 +8021,11 @@ ${stderr}`.trim();
 };
 
 // src/cli/workspace.ts
-import { cpSync as cpSync3, existsSync as existsSync11, mkdirSync as mkdirSync6, readFileSync as readFileSync9, readdirSync as readdirSync3, rmSync as rmSync5, writeFileSync as writeFileSync5 } from "fs";
+import { cpSync as cpSync3, existsSync as existsSync12, mkdirSync as mkdirSync7, readFileSync as readFileSync10, readdirSync as readdirSync3, rmSync as rmSync5, writeFileSync as writeFileSync6 } from "fs";
 import { createRequire as createRequire2 } from "module";
-import { dirname as dirname3, join as join7, resolve as resolve11 } from "path";
+import { dirname as dirname4, join as join8, resolve as resolve11 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
-import { APP_NAME as APP_NAME3, getDataDir as getDataDir7 } from "@nextclaw/core";
+import { APP_NAME as APP_NAME3, getDataDir as getDataDir8 } from "@nextclaw/core";
 import { spawnSync as spawnSync3 } from "child_process";
 var WorkspaceManager = class {
   constructor(logo) {
@@ -7617,30 +8053,30 @@ var WorkspaceManager = class {
       { source: "memory/MEMORY.md", target: "memory/MEMORY.md" }
     ];
     for (const entry of templateFiles) {
-      const filePath = join7(workspace, entry.target);
-      if (!force && existsSync11(filePath)) {
+      const filePath = join8(workspace, entry.target);
+      if (!force && existsSync12(filePath)) {
         continue;
       }
-      const templatePath = join7(templateDir, entry.source);
-      if (!existsSync11(templatePath)) {
+      const templatePath = join8(templateDir, entry.source);
+      if (!existsSync12(templatePath)) {
         console.warn(`Warning: Template file missing: ${templatePath}`);
         continue;
       }
-      const raw = readFileSync9(templatePath, "utf-8");
+      const raw = readFileSync10(templatePath, "utf-8");
       const content = raw.replace(/\$\{APP_NAME\}/g, APP_NAME3);
-      mkdirSync6(dirname3(filePath), { recursive: true });
-      writeFileSync5(filePath, content);
+      mkdirSync7(dirname4(filePath), { recursive: true });
+      writeFileSync6(filePath, content);
       created.push(entry.target);
     }
-    const memoryDir = join7(workspace, "memory");
-    if (!existsSync11(memoryDir)) {
-      mkdirSync6(memoryDir, { recursive: true });
-      created.push(join7("memory", ""));
+    const memoryDir = join8(workspace, "memory");
+    if (!existsSync12(memoryDir)) {
+      mkdirSync7(memoryDir, { recursive: true });
+      created.push(join8("memory", ""));
     }
-    const skillsDir = join7(workspace, "skills");
-    if (!existsSync11(skillsDir)) {
-      mkdirSync6(skillsDir, { recursive: true });
-      created.push(join7("skills", ""));
+    const skillsDir = join8(workspace, "skills");
+    if (!existsSync12(skillsDir)) {
+      mkdirSync7(skillsDir, { recursive: true });
+      created.push(join8("skills", ""));
     }
     const seeded = this.seedBuiltinSkills(skillsDir, { force });
     if (seeded > 0) {
@@ -7659,12 +8095,12 @@ var WorkspaceManager = class {
       if (!entry.isDirectory()) {
         continue;
       }
-      const src = join7(sourceDir, entry.name);
-      if (!existsSync11(join7(src, "SKILL.md"))) {
+      const src = join8(sourceDir, entry.name);
+      if (!existsSync12(join8(src, "SKILL.md"))) {
         continue;
       }
-      const dest = join7(targetDir, entry.name);
-      if (!force && existsSync11(dest)) {
+      const dest = join8(targetDir, entry.name);
+      if (!force && existsSync12(dest)) {
         continue;
       }
       try {
@@ -7681,13 +8117,13 @@ var WorkspaceManager = class {
     try {
       const require3 = createRequire2(import.meta.url);
       const entry = require3.resolve("@nextclaw/core");
-      const pkgRoot = resolve11(dirname3(entry), "..");
-      const distSkills = join7(pkgRoot, "dist", "skills");
-      if (existsSync11(distSkills)) {
+      const pkgRoot = resolve11(dirname4(entry), "..");
+      const distSkills = join8(pkgRoot, "dist", "skills");
+      if (existsSync12(distSkills)) {
         return distSkills;
       }
-      const srcSkills = join7(pkgRoot, "src", "agent", "skills");
-      if (existsSync11(srcSkills)) {
+      const srcSkills = join8(pkgRoot, "src", "agent", "skills");
+      if (existsSync12(srcSkills)) {
         return srcSkills;
       }
       return null;
@@ -7702,17 +8138,17 @@ var WorkspaceManager = class {
     }
     const cliDir = resolve11(fileURLToPath3(new URL(".", import.meta.url)));
     const pkgRoot = resolve11(cliDir, "..", "..");
-    const candidates = [join7(pkgRoot, "templates")];
+    const candidates = [join8(pkgRoot, "templates")];
     for (const candidate of candidates) {
-      if (existsSync11(candidate)) {
+      if (existsSync12(candidate)) {
         return candidate;
       }
     }
     return null;
   }
   getBridgeDir() {
-    const userBridge = join7(getDataDir7(), "bridge");
-    if (existsSync11(join7(userBridge, "dist", "index.js"))) {
+    const userBridge = join8(getDataDir8(), "bridge");
+    if (existsSync12(join8(userBridge, "dist", "index.js"))) {
       return userBridge;
     }
     if (!which("npm")) {
@@ -7721,12 +8157,12 @@ var WorkspaceManager = class {
     }
     const cliDir = resolve11(fileURLToPath3(new URL(".", import.meta.url)));
     const pkgRoot = resolve11(cliDir, "..", "..");
-    const pkgBridge = join7(pkgRoot, "bridge");
-    const srcBridge = join7(pkgRoot, "..", "..", "bridge");
+    const pkgBridge = join8(pkgRoot, "bridge");
+    const srcBridge = join8(pkgRoot, "..", "..", "bridge");
     let source = null;
-    if (existsSync11(join7(pkgBridge, "package.json"))) {
+    if (existsSync12(join8(pkgBridge, "package.json"))) {
       source = pkgBridge;
-    } else if (existsSync11(join7(srcBridge, "package.json"))) {
+    } else if (existsSync12(join8(srcBridge, "package.json"))) {
       source = srcBridge;
     }
     if (!source) {
@@ -7734,8 +8170,8 @@ var WorkspaceManager = class {
       process.exit(1);
     }
     console.log(`${this.logo} Setting up bridge...`);
-    mkdirSync6(resolve11(userBridge, ".."), { recursive: true });
-    if (existsSync11(userBridge)) {
+    mkdirSync7(resolve11(userBridge, ".."), { recursive: true });
+    if (existsSync12(userBridge)) {
       rmSync5(userBridge, { recursive: true, force: true });
     }
     cpSync3(source, userBridge, {
@@ -7786,6 +8222,8 @@ var CliRuntime = class {
   pluginCommands;
   channelCommands;
   cronCommands;
+  platformAuthCommands;
+  remoteCommands;
   diagnosticsCommands;
   constructor(options = {}) {
     this.logo = options.logo ?? LOGO;
@@ -7807,6 +8245,8 @@ var CliRuntime = class {
       requestRestart: (params) => this.requestRestart(params)
     });
     this.cronCommands = new CronCommands();
+    this.platformAuthCommands = new PlatformAuthCommands();
+    this.remoteCommands = new RemoteCommands();
     this.diagnosticsCommands = new DiagnosticsCommands({ logo: this.logo });
     this.restartCoordinator = new RestartCoordinator({
       readServiceState,
@@ -7872,7 +8312,7 @@ var CliRuntime = class {
     const delayMs = typeof params.delayMs === "number" && Number.isFinite(params.delayMs) ? Math.max(0, Math.floor(params.delayMs)) : 100;
     const cliPath = process.env.NEXTCLAW_SELF_RELAUNCH_CLI?.trim() || fileURLToPath4(new URL("./index.js", import.meta.url));
     const startArgs = [cliPath, "start", "--ui-port", String(uiPort)];
-    const serviceStatePath = resolve12(getDataDir8(), "run", "service.json");
+    const serviceStatePath = resolve12(getDataDir9(), "run", "service.json");
     const helperScript = [
       'const { spawnSync } = require("node:child_process");',
       'const { readFileSync } = require("node:fs");',
@@ -8000,18 +8440,18 @@ var CliRuntime = class {
     const source = options.source ?? "init";
     const prefix = options.auto ? "Auto init" : "Init";
     const force = Boolean(options.force);
-    const configPath = getConfigPath4();
+    const configPath = getConfigPath6();
     let createdConfig = false;
-    if (!existsSync12(configPath)) {
+    if (!existsSync13(configPath)) {
       const config3 = ConfigSchema2.parse({});
-      saveConfig8(config3);
+      saveConfig9(config3);
       createdConfig = true;
     }
-    const config2 = loadConfig11();
+    const config2 = loadConfig13();
     const workspaceSetting = config2.agents.defaults.workspace;
-    const workspacePath = !workspaceSetting || workspaceSetting === DEFAULT_WORKSPACE_PATH ? join8(getDataDir8(), DEFAULT_WORKSPACE_DIR) : expandHome2(workspaceSetting);
-    const workspaceExisted = existsSync12(workspacePath);
-    mkdirSync7(workspacePath, { recursive: true });
+    const workspacePath = !workspaceSetting || workspaceSetting === DEFAULT_WORKSPACE_PATH ? join9(getDataDir9(), DEFAULT_WORKSPACE_DIR) : expandHome2(workspaceSetting);
+    const workspaceExisted = existsSync13(workspacePath);
+    mkdirSync8(workspacePath, { recursive: true });
     const templateResult = this.workspaceManager.createWorkspaceTemplates(
       workspacePath,
       { force }
@@ -8042,73 +8482,10 @@ ${this.logo} ${APP_NAME4} is ready! (${source})`);
   }
   async login(opts = {}) {
     await this.init({ source: "login", auto: true });
-    const configPath = getConfigPath4();
-    const config2 = loadConfig11(configPath);
-    const providers = config2.providers;
-    const nextclawProvider = providers.nextclaw ?? {
-      displayName: "",
-      apiKey: "",
-      apiBase: null,
-      extraHeaders: null,
-      wireApi: "auto",
-      models: []
-    };
-    const configuredApiBase = typeof nextclawProvider.apiBase === "string" && nextclawProvider.apiBase.trim().length > 0 ? nextclawProvider.apiBase.trim() : "https://ai-gateway-api.nextclaw.io/v1";
-    const requestedApiBase = typeof opts.apiBase === "string" && opts.apiBase.trim().length > 0 ? opts.apiBase.trim() : configuredApiBase;
-    const platformBase = requestedApiBase.replace(/\/v1\/?$/i, "");
-    const v1Base = `${platformBase}/v1`;
-    let email = typeof opts.email === "string" ? opts.email.trim() : "";
-    let password = typeof opts.password === "string" ? opts.password : "";
-    if (!email || !password) {
-      const rl = createInterface2({
-        input: process.stdin,
-        output: process.stdout
-      });
-      try {
-        if (!email) {
-          email = (await prompt(rl, "Email: ")).trim();
-        }
-        if (!password) {
-          password = await prompt(rl, "Password: ");
-        }
-      } finally {
-        rl.close();
-      }
-    }
-    if (!email || !password) {
-      throw new Error("Email and password are required.");
-    }
-    const endpoint = opts.register ? `${platformBase}/platform/auth/register` : `${platformBase}/platform/auth/login`;
-    const response = await fetch(endpoint, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      body: JSON.stringify({ email, password })
-    });
-    const raw = await response.text();
-    let parsed = null;
-    try {
-      parsed = JSON.parse(raw);
-    } catch {
-      parsed = null;
-    }
-    if (!response.ok) {
-      const maybeMessage = typeof parsed === "object" && parsed && "error" in parsed && typeof parsed.error?.message === "string" ? parsed.error.message : raw || `Request failed (${response.status})`;
-      throw new Error(maybeMessage);
-    }
-    const token = typeof parsed === "object" && parsed && "data" in parsed && typeof parsed.data?.token === "string" ? parsed.data.token : "";
-    const role = typeof parsed === "object" && parsed && "data" in parsed && typeof parsed.data?.user?.role === "string" ? parsed.data.user.role : "user";
-    if (!token) {
-      throw new Error("Login succeeded but token is missing.");
-    }
-    nextclawProvider.apiBase = v1Base;
-    nextclawProvider.apiKey = token;
-    providers.nextclaw = nextclawProvider;
-    saveConfig8(config2, configPath);
-    console.log(`\u2713 Logged in to NextClaw platform (${platformBase})`);
-    console.log(`\u2713 Account: ${email} (${role})`);
-    console.log(`\u2713 Token saved into providers.nextclaw.apiKey`);
+    await this.platformAuthCommands.login(opts);
+  }
+  async remoteConnect(opts = {}) {
+    await this.remoteCommands.connect(opts);
   }
   async gateway(opts) {
     const uiOverrides = {
@@ -8199,8 +8576,8 @@ ${this.logo} ${APP_NAME4} is ready! (${source})`);
     await this.serviceCommands.stopService();
   }
   async agent(opts) {
-    const configPath = getConfigPath4();
-    const config2 = resolveConfigSecrets3(loadConfig11(), { configPath });
+    const configPath = getConfigPath6();
+    const config2 = resolveConfigSecrets3(loadConfig13(), { configPath });
     const workspace = getWorkspacePath10(config2.agents.defaults.workspace);
     const pluginRegistry = loadPluginRegistry(config2, workspace);
     const extensionRegistry = toExtensionRegistry(pluginRegistry);
@@ -8208,7 +8585,7 @@ ${this.logo} ${APP_NAME4} is ready! (${source})`);
     const pluginChannelBindings = getPluginChannelBindings4(pluginRegistry);
     setPluginRuntimeBridge2({
       loadConfig: () => toPluginConfigView(
-        resolveConfigSecrets3(loadConfig11(), { configPath }),
+        resolveConfigSecrets3(loadConfig13(), { configPath }),
         pluginChannelBindings
       ),
       writeConfigFile: async (nextConfigView) => {
@@ -8217,13 +8594,13 @@ ${this.logo} ${APP_NAME4} is ready! (${source})`);
             "plugin runtime writeConfigFile expects an object config"
           );
         }
-        const current = loadConfig11();
+        const current = loadConfig13();
         const next = mergePluginConfigView(
           current,
           nextConfigView,
           pluginChannelBindings
         );
-        saveConfig8(next);
+        saveConfig9(next);
       }
     });
     try {
@@ -8249,7 +8626,7 @@ ${this.logo} ${APP_NAME4} is ready! (${source})`);
         resolveMessageToolHints: ({ channel, accountId }) => resolvePluginChannelMessageToolHints2({
           registry: pluginRegistry,
           channel,
-          cfg: resolveConfigSecrets3(loadConfig11(), { configPath }),
+          cfg: resolveConfigSecrets3(loadConfig13(), { configPath }),
           accountId
         })
       });
@@ -8268,11 +8645,11 @@ ${this.logo} ${APP_NAME4} is ready! (${source})`);
         `${this.logo} Interactive mode (type exit or Ctrl+C to quit)
 `
       );
-      const historyFile = join8(getDataDir8(), "history", "cli_history");
+      const historyFile = join9(getDataDir9(), "history", "cli_history");
       const historyDir = resolve12(historyFile, "..");
-      mkdirSync7(historyDir, { recursive: true });
-      const history = existsSync12(historyFile) ? readFileSync10(historyFile, "utf-8").split("\n").filter(Boolean) : [];
-      const rl = createInterface2({
+      mkdirSync8(historyDir, { recursive: true });
+      const history = existsSync13(historyFile) ? readFileSync11(historyFile, "utf-8").split("\n").filter(Boolean) : [];
+      const rl = createInterface3({
         input: process.stdin,
         output: process.stdout
       });
@@ -8280,7 +8657,7 @@ ${this.logo} ${APP_NAME4} is ready! (${source})`);
         const merged = history.concat(
           rl.history ?? []
         );
-        writeFileSync6(historyFile, merged.join("\n"));
+        writeFileSync7(historyFile, merged.join("\n"));
         process.exit(0);
       });
       let running = true;
@@ -8444,7 +8821,7 @@ ${this.logo} ${APP_NAME4} is ready! (${source})`);
     await this.diagnosticsCommands.doctor(opts);
   }
   async skillsInstall(options) {
-    const config2 = loadConfig11();
+    const config2 = loadConfig13();
     const workdir = resolveSkillsInstallWorkdir({
       explicitWorkdir: options.workdir,
       configuredWorkspace: config2.agents.defaults.workspace
@@ -8512,6 +8889,8 @@ program.name(APP_NAME5).description(`${LOGO} ${APP_NAME5} - ${APP_TAGLINE}`).ver
 program.command("onboard").description(`Initialize ${APP_NAME5} configuration and workspace`).action(async () => runtime.onboard());
 program.command("init").description(`Initialize ${APP_NAME5} configuration and workspace`).option("-f, --force", "Overwrite existing template files").action(async (opts) => runtime.init({ force: Boolean(opts.force) }));
 program.command("login").description("Login to NextClaw platform and save token into providers.nextclaw.apiKey").option("--api-base <url>", "Platform API base (supports /v1 suffix)").option("--email <email>", "Login email").option("--password <password>", "Login password").option("--register", "Register first, then login", false).action(async (opts) => runtime.login(opts));
+var remote = program.command("remote").description("Manage remote access");
+remote.command("connect").description("Register this machine as a remote device and keep the connector online").option("--api-base <url>", "Platform API base (supports /v1 suffix)").option("--local-origin <url>", "Local NextClaw UI origin (default: active service or http://127.0.0.1:18791)").option("--name <name>", "Device display name").option("--once", "Connect once without auto-reconnect", false).action(async (opts) => runtime.remoteConnect(opts));
 program.command("gateway").description(`Start the ${APP_NAME5} gateway`).option("-p, --port <port>", "Gateway port", "18790").option("-v, --verbose", "Verbose output", false).option("--ui", "Enable UI server", false).option("--ui-port <port>", "UI port").option("--ui-open", "Open browser when UI starts", false).action(async (opts) => runtime.gateway(opts));
 program.command("ui").description(`Start the ${APP_NAME5} UI with gateway`).option("--port <port>", "UI port").option("--no-open", "Disable opening browser").action(async (opts) => runtime.ui(opts));
 program.command("start").description(`Start the ${APP_NAME5} gateway + UI in the background`).option("--ui-port <port>", "UI port").option("--start-timeout <ms>", "Maximum wait time for startup readiness in milliseconds").option("--open", "Open browser after start", false).action(async (opts) => runtime.start(opts));