skykoi 2026.3.32 → 2026.3.33

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "2026.3.32",
-  "commit": "e5dd87a50ce9315067889b9a506365fe951bba83",
-  "builtAt": "2026-03-18T10:15:10.395Z"
+  "version": "2026.3.33",
+  "commit": "5fbcd086c33c81f370f0ab3c4f8745b139975fef",
+  "builtAt": "2026-03-18T10:21:05.965Z"
 }

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-da41fce9ab97ac409fb0ece5889972c284ee42710df6f37b9b77e77f94f883ce
+390eda7f2c7ce7c437b8463d706583fd1a1bc16b5b8d209ecbc555ddec23673b

package/dist/{completion-cli-52VvoM_K.js → completion-cli-BFpMGGJp.js}

@@ -124,7 +124,7 @@ const entries = [
 		name: "gateway",
 		description: "Gateway control",
 		register: async (program) => {
-			(await import("./gateway-cli-VBGOf-7z.js")).registerGatewayCli(program);
+			(await import("./gateway-cli-Uf3L1tlp.js")).registerGatewayCli(program);
 		}
 	},
 	{
@@ -282,7 +282,7 @@ const entries = [
 		name: "update",
 		description: "CLI update helpers",
 		register: async (program) => {
-			(await import("./update-cli-D4bfteVO.js")).registerUpdateCli(program);
+			(await import("./update-cli-BJw0FEUf.js")).registerUpdateCli(program);
 		}
 	},
 	{

package/dist/{completion-cli-BT_5u1b7.js → completion-cli-DXt5J6NO.js}

@@ -1,6 +1,6 @@
 import { n as __exportAll } from "./chunk-BXK9XSlF.js";
 import { X as resolveStateDir } from "./entry.js";
-import { n as registerSubCliByName, t as getSubCliEntries } from "./register.subclis-C00vuiWz.js";
+import { n as registerSubCliByName, t as getSubCliEntries } from "./register.subclis-CtdazzCK.js";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs/promises";

package/dist/{config-guard-D-C6wp6Q.js → config-guard-Ct1PT1ZL.js}

@@ -22,7 +22,7 @@ import { a as resolveSessionTranscriptsDirForAgent, i as resolveSessionTranscrip
 import { d as loadSessionStore } from "./sandbox-DyDrMxBF.js";
 import { r as runCommandWithRuntime } from "./cli-utils-CQTTNUIq.js";
 import { n as ensurePluginRegistryLoaded, t as hasExplicitOptions } from "./command-options-YP_dvMez.js";
-import { l as getVerboseFlag, o as getFlagValue, r as registerSubCliCommands, s as getPositiveIntFlagValue, u as hasFlag } from "./register.subclis-C00vuiWz.js";
+import { l as getVerboseFlag, o as getFlagValue, r as registerSubCliCommands, s as getPositiveIntFlagValue, u as hasFlag } from "./register.subclis-CtdazzCK.js";
 import { n as parsePositiveIntOrUndefined, t as collectOption } from "./helpers-CEFiyjZQ.js";
 import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-DQcPueX1.js";
 import { t as createDefaultDeps } from "./deps-DZVkCyfF.js";
@@ -34,12 +34,12 @@ import { d as applyAuthChoice, f as applyOpenAIConfig, h as promptAuthChoiceGrou
 import { l as healthCommand } from "./health-format-BL3M1y4s.js";
 import { $ as setOpenrouterApiKey, C as applyMoonshotConfig, D as applyOpenrouterConfig, F as applyVercelAiGatewayConfig, J as setGeminiApiKey, K as setAnthropicApiKey, L as applyXaiConfig, N as applyVeniceConfig, Q as setOpencodeZenApiKey, V as applyZaiConfig, X as setMinimaxApiKey, Y as setKimiCodingApiKey, Z as setMoonshotApiKey, at as setXiaomiApiKey, et as setQianfanApiKey, f as applyOpencodeZenConfig, ft as buildTokenProfileId, g as applyMinimaxConfig, it as setXaiApiKey, j as applySyntheticConfig, k as applyQianfanConfig, m as applyMinimaxApiConfig, nt as setVeniceApiKey, ot as setZaiApiKey, pt as validateAnthropicSetupToken, q as setCloudflareAiGatewayConfig, rt as setVercelAiGatewayApiKey, tt as setSyntheticApiKey, v as applyAuthProfileConfig, w as applyMoonshotConfigCn, x as applyKimiCodeConfig, y as applyCloudflareAiGatewayConfig, z as applyXiaomiConfig } from "./github-copilot-auth-DJ_95veW.js";
 import { n as logConfigUpdated, t as formatConfigPath } from "./logging-D15QDE2U.js";
-import { a as findAgentEntryIndex, c as pruneAgentConfig, d as parseIdentityMarkdown, f as runOnboardingWizard, i as buildAgentSummaries, l as identityHasValues, o as listAgentEntries, r as applyAgentConfig, s as loadAgentIdentity, t as statusCommand } from "./status-B9gw1tPc.js";
+import { a as findAgentEntryIndex, c as pruneAgentConfig, d as parseIdentityMarkdown, f as runOnboardingWizard, i as buildAgentSummaries, l as identityHasValues, o as listAgentEntries, r as applyAgentConfig, s as loadAgentIdentity, t as statusCommand } from "./status-UAO83kNe.js";
 import { a as createOutboundSendDeps, n as resolveSessionKeyForRequest, t as agentCommand } from "./agent-BKhAPOvN.js";
 import { t as formatHelpExamples } from "./help-format-tZizD4BR.js";
 import { i as CONFIGURE_WIZARD_SECTIONS, n as configureCommand, r as configureCommandWithSections } from "./configure-D50d4QdJ.js";
 import { n as ensureSystemdUserLingerNonInteractive } from "./systemd-linger-CEreLGmo.js";
-import { n as loadAndMaybeMigrateDoctorConfig, t as doctorCommand } from "./doctor-D3FZptHG.js";
+import { n as loadAndMaybeMigrateDoctorConfig, t as doctorCommand } from "./doctor-BA4__Mx7.js";
 import path from "node:path";
 import fs from "node:fs";
 import JSON5 from "json5";

package/dist/{doctor-D3FZptHG.js → doctor-BA4__Mx7.js}

@@ -29,7 +29,7 @@ import { r as isSystemdUserServiceAvailable } from "./systemd-DQvm8tRB.js";
 import { n as renderSystemdUnavailableHints, t as isSystemdUnavailableDetail } from "./systemd-hints-DiosV8jd.js";
 import { a as renderGatewayServiceCleanupHints, i as findExtraGatewayServices, n as auditGatewayServiceConfig, o as readLastGatewayErrorLine, r as needsNodeRuntimeMigration, t as SERVICE_AUDIT_CODES } from "./service-audit-CQ1bUSCH.js";
 import { i as resolveControlUiDistIndexPathForRoot, l as healthCommand, r as resolveControlUiDistIndexHealth, t as formatHealthCheckFailure } from "./health-format-BL3M1y4s.js";
-import { f as doctorShellCompletion, t as runGatewayUpdate } from "./update-runner-D2rkfIG-.js";
+import { f as doctorShellCompletion, t as runGatewayUpdate } from "./update-runner-CqR4E_QO.js";
 import { n as logConfigUpdated } from "./logging-D15QDE2U.js";
 import { t as buildWorkspaceSkillStatus } from "./skills-status-C4wmQlJW.js";
 import { n as buildAuthHealthSummary, r as formatRemainingShort, t as DEFAULT_OAUTH_WARN_MS } from "./auth-health-BtHeU2M-.js";

package/dist/{doctor-D7gplt7y.js → doctor-DPA2jDpR.js}

@@ -26,7 +26,7 @@ import { n as logConfigUpdated } from "./logging-CLxV9Na7.js";
 import { t as note$1 } from "./note-CrCSjpk3.js";
 import { t as applyPluginAutoEnable } from "./plugin-auto-enable-KzIwJe0A.js";
 import { i as resolveControlUiDistIndexPathForRoot, l as healthCommand, r as resolveControlUiDistIndexHealth, t as formatHealthCheckFailure } from "./health-format-DUFBNWnB.js";
-import { c as doctorShellCompletion, t as runGatewayUpdate } from "./update-runner--JLGNdGD.js";
+import { c as doctorShellCompletion, t as runGatewayUpdate } from "./update-runner-D9NZDqxe.js";
 import { i as resolveGatewayAuth } from "./auth-DSrYkGU-.js";
 import { t as buildWorkspaceSkillStatus } from "./skills-status-BVaiHzFh.js";
 import { a as repairLaunchAgentBootstrap, i as launchAgentPlistExists, n as isLaunchAgentListed, o as resolveGatewayLogPaths, r as isLaunchAgentLoaded, t as resolveGatewayService } from "./service-BKQOHHW6.js";

package/dist/entry.js

@@ -1334,7 +1334,7 @@ if (!ensureExperimentalWarningSuppressed()) {
 		applyCliProfileEnv({ profile: parsed.profile });
 		process$1.argv = parsed.argv;
 	}
-	import("./run-main-B4K_5H7e.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
+	import("./run-main-DEA5tZby.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
 		console.error("[SKYKOI] Failed to start CLI:", error instanceof Error ? error.stack ?? error.message : error);
 		process$1.exitCode = 1;
 	});

package/dist/{gateway-cli-DIr4w7H1.js → gateway-cli-Dfp03Bdx.js}

@@ -61,8 +61,8 @@ import { r as runCommandWithRuntime } from "./cli-utils-CQTTNUIq.js";
 import "./pairing-labels-DxpfDscO.js";
 import { t as buildChannelAccountSnapshot } from "./status-t7_XFd6z.js";
 import "./channels-status-issues-Cx4DwKM8.js";
-import "./register.subclis-C00vuiWz.js";
-import "./completion-cli-BT_5u1b7.js";
+import "./register.subclis-CtdazzCK.js";
+import "./completion-cli-DXt5J6NO.js";
 import { n as createOutboundSendDeps, t as createDefaultDeps } from "./deps-DZVkCyfF.js";
 import "./daemon-runtime-HqcnmSTj.js";
 import "./service-DV05Mtg_.js";
@@ -76,11 +76,11 @@ import { a as toOptionString, i as parsePort$1, n as extractGatewayMiskeys, r as
 import { i as probeGateway } from "./audit-D0OQ_h8g.js";
 import { g as discoverGatewayBeacons, n as installSkill } from "./onboard-skills-Bmw1Vd5a.js";
 import { a as resolveControlUiRootOverrideSync, c as getHealthSnapshot, d as runHeartbeatOnce, f as setHeartbeatsEnabled, n as ensureControlUiAssetsBuilt, o as resolveControlUiRootSync, p as startHeartbeatRunner, s as formatHealthChannelLines } from "./health-format-BL3M1y4s.js";
-import { S as normalizeUpdateChannel, _ as resolveNpmChannelTag, h as compareSemverStrings, m as checkUpdateStatus, t as runGatewayUpdate, y as DEFAULT_PACKAGE_CHANNEL } from "./update-runner-D2rkfIG-.js";
+import { S as normalizeUpdateChannel, _ as resolveNpmChannelTag, h as compareSemverStrings, m as checkUpdateStatus, t as runGatewayUpdate, y as DEFAULT_PACKAGE_CHANNEL } from "./update-runner-CqR4E_QO.js";
 import "./github-copilot-auth-DJ_95veW.js";
 import "./logging-D15QDE2U.js";
 import { i as shouldIncludeHook, n as loadWorkspaceHookEntries, r as resolveHookConfig } from "./hooks-status-CRG1w6AU.js";
-import { a as findAgentEntryIndex, c as pruneAgentConfig, f as runOnboardingWizard, n as getStatusSummary, o as listAgentEntries, r as applyAgentConfig, s as loadAgentIdentity, u as loadAgentIdentityFromWorkspace } from "./status-B9gw1tPc.js";
+import { a as findAgentEntryIndex, c as pruneAgentConfig, f as runOnboardingWizard, n as getStatusSummary, o as listAgentEntries, r as applyAgentConfig, s as loadAgentIdentity, u as loadAgentIdentityFromWorkspace } from "./status-UAO83kNe.js";
 import { t as buildWorkspaceSkillStatus } from "./skills-status-C4wmQlJW.js";
 import "./tui-_aG7l29T.js";
 import { i as setGatewayWsLogStyle, n as logWs, r as summarizeAgentEventForWsLog, t as formatForLog } from "./ws-log-C4lXq6b4.js";
@@ -89,11 +89,11 @@ import { a as createOutboundSendDeps$1, i as resolveAgentOutboundTarget, r as re
 import "./node-service-C2JDeXPT.js";
 import { n as forceFreePortAndWait } from "./ports-Bc_X7vVa.js";
 import { spawn, spawnSync } from "node:child_process";
-import path from "node:path";
-import os from "node:os";
+import path, { join } from "node:path";
+import os, { homedir } from "node:os";
 import chalk from "chalk";
 import * as fsSync from "node:fs";
-import fs, { constants } from "node:fs";
+import fs, { constants, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import JSON5 from "json5";
 import fs$1 from "node:fs/promises";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -15895,7 +15895,45 @@ async function startPluginServices(params) {
 
 //#endregion
 //#region src/gateway/bedrock-credentials.ts
-let refreshTimer = null;
+/**
+* Auto-fetch AWS Bedrock credentials from the SkyKoi platform.
+*
+* Credential flow (ordered by priority):
+* 1. AWS env vars already set (e.g. EC2 instance profile) → use as-is
+* 2. Local credential cache (~/.skykoi/bedrock-credentials.json) → load from disk
+* 3. Platform credential proxy → fetch, inject into env, persist to disk
+*
+* Credentials are permanent IAM access keys (no expiration). Once fetched from
+* the platform they're cached locally so the gateway works after reboots without
+* any network calls to the platform.
+*/
+function getCredentialCachePath() {
+	const dir = join(homedir(), ".skykoi");
+	if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+	return join(dir, "bedrock-credentials.json");
+}
+function loadCachedCredentials() {
+	try {
+		const path = getCredentialCachePath();
+		if (!existsSync(path)) return null;
+		const raw = readFileSync(path, "utf-8");
+		const data = JSON.parse(raw);
+		if (data.accessKeyId && data.secretAccessKey) return data;
+		return null;
+	} catch {
+		return null;
+	}
+}
+function saveCachedCredentials(creds) {
+	try {
+		writeFileSync(getCredentialCachePath(), JSON.stringify(creds, null, 2), { mode: 384 });
+	} catch {}
+}
+function injectCredentials(creds) {
+	process.env.AWS_ACCESS_KEY_ID = creds.accessKeyId;
+	process.env.AWS_SECRET_ACCESS_KEY = creds.secretAccessKey;
+	if (creds.region) process.env.AWS_REGION = creds.region;
+}
 function resolveGatewayToken(cfg) {
 	const gw = cfg.gateway;
 	if (!gw?.auth) return void 0;
@@ -15903,6 +15941,11 @@ function resolveGatewayToken(cfg) {
 }
 async function bootstrapBedrockCredentials(cfg) {
 	if (resolveAwsSdkEnvVarName() !== void 0) return false;
+	const cached = loadCachedCredentials();
+	if (cached) {
+		injectCredentials(cached);
+		return true;
+	}
 	const appUrl = process.env.SKYKOI_APP_URL?.trim();
 	const agentId = process.env.SKYKOI_AGENT_ID?.trim();
 	const gatewayToken = process.env.SKYKOI_GATEWAY_TOKEN?.trim() || resolveGatewayToken(cfg);
@@ -15911,38 +15954,23 @@ async function bootstrapBedrockCredentials(cfg) {
 		const url = `${appUrl}/api/agents/${agentId}/credentials/proxy?provider=amazon-bedrock`;
 		const res = await fetch(url, {
 			headers: { "x-gateway-token": gatewayToken },
-			signal: AbortSignal.timeout(1e4)
+			signal: AbortSignal.timeout(3e4)
 		});
 		if (!res.ok) return false;
 		const cred = (await res.json()).credentials?.find((c) => c.data?.accessKeyId && c.data?.secretAccessKey);
 		if (!cred) return false;
-		process.env.AWS_ACCESS_KEY_ID = cred.data.accessKeyId;
-		process.env.AWS_SECRET_ACCESS_KEY = cred.data.secretAccessKey;
-		if (cred.data.sessionToken) process.env.AWS_SESSION_TOKEN = cred.data.sessionToken;
-		if (cred.data.region) process.env.AWS_REGION = cred.data.region;
-		if (cred.data.expiresAt) scheduleCredentialRefresh(cfg, cred.data.expiresAt);
+		const credentials = {
+			accessKeyId: cred.data.accessKeyId,
+			secretAccessKey: cred.data.secretAccessKey,
+			region: cred.data.region || "us-east-1"
+		};
+		injectCredentials(credentials);
+		saveCachedCredentials(credentials);
 		return true;
 	} catch {
 		return false;
 	}
 }
-function scheduleCredentialRefresh(cfg, expiresAt) {
-	if (refreshTimer) clearTimeout(refreshTimer);
-	const expiresMs = new Date(expiresAt).getTime();
-	const now = Date.now();
-	const refreshIn = Math.max(expiresMs - now - 10 * 6e4, 6e4);
-	refreshTimer = setTimeout(async () => {
-		try {
-			delete process.env.AWS_ACCESS_KEY_ID;
-			delete process.env.AWS_SECRET_ACCESS_KEY;
-			delete process.env.AWS_SESSION_TOKEN;
-			await bootstrapBedrockCredentials(cfg);
-		} catch {
-			scheduleCredentialRefresh(cfg, new Date(Date.now() + 15 * 6e4).toISOString());
-		}
-	}, refreshIn);
-	if (refreshTimer.unref) refreshTimer.unref();
-}
 
 //#endregion
 //#region src/gateway/server-restart-sentinel.ts

package/dist/{gateway-cli-VBGOf-7z.js → gateway-cli-Uf3L1tlp.js}

@@ -55,7 +55,7 @@ import { n as createOutboundSendDeps, t as createDefaultDeps } from "./deps-DRCH
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-C9oNI3cv.js";
 import { t as ensureSKYKOICliOnPath } from "./path-env-BnUKFCos.js";
 import "./daemon-runtime-B7p4kL16.js";
-import { c as loadAgentIdentity, d as loadAgentIdentityFromWorkspace, i as applyAgentConfig, l as pruneAgentConfig, o as findAgentEntryIndex, p as forceFreePortAndWait, r as getStatusSummary, s as listAgentEntries, t as runOnboardingWizard } from "./onboarding-D__7Nlsl.js";
+import { c as loadAgentIdentity, d as loadAgentIdentityFromWorkspace, i as applyAgentConfig, l as pruneAgentConfig, o as findAgentEntryIndex, p as forceFreePortAndWait, r as getStatusSummary, s as listAgentEntries, t as runOnboardingWizard } from "./onboarding-ByEvNN8_.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-yjIEMzi8.js";
 import "./logging-CLxV9Na7.js";
 import "./note-CrCSjpk3.js";
@@ -68,7 +68,7 @@ import "./archive-Dy3Ezb-5.js";
 import "./skill-scanner-BoGjHXUZ.js";
 import "./installs-ChtZhX65.js";
 import { a as resolveControlUiRootOverrideSync, c as getHealthSnapshot, d as runHeartbeatOnce, f as setHeartbeatsEnabled, n as ensureControlUiAssetsBuilt, o as resolveControlUiRootSync, p as startHeartbeatRunner, s as formatHealthChannelLines } from "./health-format-DUFBNWnB.js";
-import { S as normalizeUpdateChannel, _ as resolveNpmChannelTag, h as compareSemverStrings, m as checkUpdateStatus, t as runGatewayUpdate, y as DEFAULT_PACKAGE_CHANNEL } from "./update-runner--JLGNdGD.js";
+import { S as normalizeUpdateChannel, _ as resolveNpmChannelTag, h as compareSemverStrings, m as checkUpdateStatus, t as runGatewayUpdate, y as DEFAULT_PACKAGE_CHANNEL } from "./update-runner-D9NZDqxe.js";
 import { i as resolveGatewayAuth, n as authorizeGatewayConnect, r as isLocalDirectRequest, t as assertGatewayAuthConfigured } from "./auth-DSrYkGU-.js";
 import { i as probeGateway } from "./audit-zzBGcjIg.js";
 import "./table-BOthYYmp.js";
@@ -78,7 +78,7 @@ import "./systemd-DyrxDxSB.js";
 import "./service-audit-Cyagv33t.js";
 import "./node-service-DPiAKtp-.js";
 import "./channels-status-issues-CbB072Pz.js";
-import "./completion-cli-52VvoM_K.js";
+import "./completion-cli-BFpMGGJp.js";
 import { a as createOutboundSendDeps$1, i as resolveAgentOutboundTarget, r as resolveAgentDeliveryPlan, t as agentCommand } from "./agent-D3YXnrX0.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-Cr9yVcsB.js";
 import { i as shouldIncludeHook, n as loadWorkspaceHookEntries, r as resolveHookConfig } from "./hooks-status-CdjD9QYu.js";
@@ -90,10 +90,10 @@ import { a as toOptionString, i as parsePort$1, n as extractGatewayMiskeys, r as
 import { i as setGatewayWsLogStyle, n as logWs, r as summarizeAgentEventForWsLog, t as formatForLog } from "./ws-log-DQL_wvbk.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-Dt0EMX-c.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
-import os from "node:os";
-import path from "node:path";
+import os, { homedir } from "node:os";
+import path, { join } from "node:path";
 import * as fsSync from "node:fs";
-import fs, { constants } from "node:fs";
+import fs, { constants, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import JSON5 from "json5";
 import chalk from "chalk";
 import fs$1 from "node:fs/promises";
@@ -15896,7 +15896,45 @@ async function startPluginServices(params) {
 
 //#endregion
 //#region src/gateway/bedrock-credentials.ts
-let refreshTimer = null;
+/**
+* Auto-fetch AWS Bedrock credentials from the SkyKoi platform.
+*
+* Credential flow (ordered by priority):
+* 1. AWS env vars already set (e.g. EC2 instance profile) → use as-is
+* 2. Local credential cache (~/.skykoi/bedrock-credentials.json) → load from disk
+* 3. Platform credential proxy → fetch, inject into env, persist to disk
+*
+* Credentials are permanent IAM access keys (no expiration). Once fetched from
+* the platform they're cached locally so the gateway works after reboots without
+* any network calls to the platform.
+*/
+function getCredentialCachePath() {
+	const dir = join(homedir(), ".skykoi");
+	if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+	return join(dir, "bedrock-credentials.json");
+}
+function loadCachedCredentials() {
+	try {
+		const path = getCredentialCachePath();
+		if (!existsSync(path)) return null;
+		const raw = readFileSync(path, "utf-8");
+		const data = JSON.parse(raw);
+		if (data.accessKeyId && data.secretAccessKey) return data;
+		return null;
+	} catch {
+		return null;
+	}
+}
+function saveCachedCredentials(creds) {
+	try {
+		writeFileSync(getCredentialCachePath(), JSON.stringify(creds, null, 2), { mode: 384 });
+	} catch {}
+}
+function injectCredentials(creds) {
+	process.env.AWS_ACCESS_KEY_ID = creds.accessKeyId;
+	process.env.AWS_SECRET_ACCESS_KEY = creds.secretAccessKey;
+	if (creds.region) process.env.AWS_REGION = creds.region;
+}
 function resolveGatewayToken(cfg) {
 	const gw = cfg.gateway;
 	if (!gw?.auth) return void 0;
@@ -15904,6 +15942,11 @@ function resolveGatewayToken(cfg) {
 }
 async function bootstrapBedrockCredentials(cfg) {
 	if (resolveAwsSdkEnvVarName() !== void 0) return false;
+	const cached = loadCachedCredentials();
+	if (cached) {
+		injectCredentials(cached);
+		return true;
+	}
 	const appUrl = process.env.SKYKOI_APP_URL?.trim();
 	const agentId = process.env.SKYKOI_AGENT_ID?.trim();
 	const gatewayToken = process.env.SKYKOI_GATEWAY_TOKEN?.trim() || resolveGatewayToken(cfg);
@@ -15912,38 +15955,23 @@ async function bootstrapBedrockCredentials(cfg) {
 		const url = `${appUrl}/api/agents/${agentId}/credentials/proxy?provider=amazon-bedrock`;
 		const res = await fetch(url, {
 			headers: { "x-gateway-token": gatewayToken },
-			signal: AbortSignal.timeout(1e4)
+			signal: AbortSignal.timeout(3e4)
 		});
 		if (!res.ok) return false;
 		const cred = (await res.json()).credentials?.find((c) => c.data?.accessKeyId && c.data?.secretAccessKey);
 		if (!cred) return false;
-		process.env.AWS_ACCESS_KEY_ID = cred.data.accessKeyId;
-		process.env.AWS_SECRET_ACCESS_KEY = cred.data.secretAccessKey;
-		if (cred.data.sessionToken) process.env.AWS_SESSION_TOKEN = cred.data.sessionToken;
-		if (cred.data.region) process.env.AWS_REGION = cred.data.region;
-		if (cred.data.expiresAt) scheduleCredentialRefresh(cfg, cred.data.expiresAt);
+		const credentials = {
+			accessKeyId: cred.data.accessKeyId,
+			secretAccessKey: cred.data.secretAccessKey,
+			region: cred.data.region || "us-east-1"
+		};
+		injectCredentials(credentials);
+		saveCachedCredentials(credentials);
 		return true;
 	} catch {
 		return false;
 	}
 }
-function scheduleCredentialRefresh(cfg, expiresAt) {
-	if (refreshTimer) clearTimeout(refreshTimer);
-	const expiresMs = new Date(expiresAt).getTime();
-	const now = Date.now();
-	const refreshIn = Math.max(expiresMs - now - 10 * 6e4, 6e4);
-	refreshTimer = setTimeout(async () => {
-		try {
-			delete process.env.AWS_ACCESS_KEY_ID;
-			delete process.env.AWS_SECRET_ACCESS_KEY;
-			delete process.env.AWS_SESSION_TOKEN;
-			await bootstrapBedrockCredentials(cfg);
-		} catch {
-			scheduleCredentialRefresh(cfg, new Date(Date.now() + 15 * 6e4).toISOString());
-		}
-	}, refreshIn);
-	if (refreshTimer.unref) refreshTimer.unref();
-}
 
 //#endregion
 //#region src/gateway/server-restart-sentinel.ts

package/dist/index.js

@@ -51,7 +51,7 @@ import { l as ensureBinary, u as promptYesNo } from "./tailscale-C9oNI3cv.js";
 import { t as isMainModule } from "./is-main-B6kCyqsv.js";
 import { t as ensureSKYKOICliOnPath } from "./path-env-BnUKFCos.js";
 import { a as gatewayInstallErrorHint, g as assertSupportedRuntime, i as buildGatewayInstallPlan, r as isGatewayDaemonRuntime, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-B7p4kL16.js";
-import { a as buildAgentSummaries, c as loadAgentIdentity, f as parseIdentityMarkdown, i as applyAgentConfig, l as pruneAgentConfig, n as statusCommand, o as findAgentEntryIndex, s as listAgentEntries, t as runOnboardingWizard, u as identityHasValues } from "./onboarding-D__7Nlsl.js";
+import { a as buildAgentSummaries, c as loadAgentIdentity, f as parseIdentityMarkdown, i as applyAgentConfig, l as pruneAgentConfig, n as statusCommand, o as findAgentEntryIndex, s as listAgentEntries, t as runOnboardingWizard, u as identityHasValues } from "./onboarding-ByEvNN8_.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-yjIEMzi8.js";
 import { n as logConfigUpdated, t as formatConfigPath } from "./logging-CLxV9Na7.js";
 import "./note-CrCSjpk3.js";
@@ -65,7 +65,7 @@ import "./archive-Dy3Ezb-5.js";
 import "./skill-scanner-BoGjHXUZ.js";
 import "./installs-ChtZhX65.js";
 import { l as healthCommand } from "./health-format-DUFBNWnB.js";
-import "./update-runner--JLGNdGD.js";
+import "./update-runner-D9NZDqxe.js";
 import "./auth-DSrYkGU-.js";
 import "./audit-zzBGcjIg.js";
 import { t as renderTable } from "./table-BOthYYmp.js";
@@ -75,7 +75,7 @@ import { r as isSystemdUserServiceAvailable } from "./systemd-DyrxDxSB.js";
 import "./service-audit-Cyagv33t.js";
 import "./node-service-DPiAKtp-.js";
 import "./channels-status-issues-CbB072Pz.js";
-import { c as registerSubCliCommands, d as getPositiveIntFlagValue, f as getVerboseFlag, l as getCommandPath, m as hasHelpOrVersion, p as hasFlag, u as getFlagValue } from "./completion-cli-52VvoM_K.js";
+import { c as registerSubCliCommands, d as getPositiveIntFlagValue, f as getVerboseFlag, l as getCommandPath, m as hasHelpOrVersion, p as hasFlag, u as getFlagValue } from "./completion-cli-BFpMGGJp.js";
 import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-CbL6geDo.js";
 import { t as formatHelpExamples } from "./help-format-q-N7n7vs.js";
 import { a as createOutboundSendDeps, n as resolveSessionKeyForRequest, t as agentCommand } from "./agent-D3YXnrX0.js";
@@ -85,7 +85,7 @@ import { i as CONFIGURE_WIZARD_SECTIONS, n as configureCommand, r as configureCo
 import { n as ensureSystemdUserLingerNonInteractive } from "./systemd-linger-C5NE1TWa.js";
 import "./widearea-dns-Cr9yVcsB.js";
 import "./auth-health-DLdo_EBm.js";
-import { n as loadAndMaybeMigrateDoctorConfig, t as doctorCommand } from "./doctor-D7gplt7y.js";
+import { n as loadAndMaybeMigrateDoctorConfig, t as doctorCommand } from "./doctor-DPA2jDpR.js";
 import "./hooks-status-CdjD9QYu.js";
 import { i as hasEmittedCliBanner, n as emitCliBanner, r as formatCliBannerLine } from "./tui-CQVWQGBQ.js";
 import process$1 from "node:process";

package/dist/{onboarding-D__7Nlsl.js → onboarding-ByEvNN8_.js}

@@ -24,7 +24,7 @@ import { t as WizardCancelledError } from "./prompts-FbZThK8w.js";
 import { c as promptDefaultModel, d as warnIfModelConfigLooksOff, f as applyAuthChoice, g as promptAuthChoiceGrouped, r as promptRemoteGatewayConfig, s as applyPrimaryModel, t as setupSkills, u as resolvePreferredProviderForAuthChoice } from "./onboard-skills-C0FcXPym.js";
 import { n as setupChannels } from "./onboard-channels-yENZymbS.js";
 import { l as healthCommand, n as ensureControlUiAssetsBuilt, s as formatHealthChannelLines, t as formatHealthCheckFailure, u as resolveHeartbeatSummaryForAgent } from "./health-format-DUFBNWnB.js";
-import { C as resolveEffectiveUpdateChannel, S as normalizeUpdateChannel, d as formatUpdateOneLiner, f as getUpdateCheckResult, h as compareSemverStrings, l as ensureCompletionCacheExists, m as checkUpdateStatus, p as resolveUpdateAvailability, s as checkShellCompletionStatus, u as formatUpdateAvailableHint, x as formatUpdateChannelLabel } from "./update-runner--JLGNdGD.js";
+import { C as resolveEffectiveUpdateChannel, S as normalizeUpdateChannel, d as formatUpdateOneLiner, f as getUpdateCheckResult, h as compareSemverStrings, l as ensureCompletionCacheExists, m as checkUpdateStatus, p as resolveUpdateAvailability, s as checkShellCompletionStatus, u as formatUpdateAvailableHint, x as formatUpdateChannelLabel } from "./update-runner-D9NZDqxe.js";
 import { i as probeGateway, t as runSecurityAudit } from "./audit-zzBGcjIg.js";
 import { t as renderTable } from "./table-BOthYYmp.js";
 import { t as buildWorkspaceSkillStatus } from "./skills-status-BVaiHzFh.js";
@@ -34,7 +34,7 @@ import { o as readLastGatewayErrorLine } from "./service-audit-Cyagv33t.js";
 import { t as resolveNodeService } from "./node-service-DPiAKtp-.js";
 import { t as collectChannelStatusIssues } from "./channels-status-issues-CbB072Pz.js";
 import { i as redactSecrets, n as formatDuration$1, r as formatGatewayAuthUsed, t as formatAge$1 } from "./format-8citvr_1.js";
-import { r as installCompletion } from "./completion-cli-52VvoM_K.js";
+import { r as installCompletion } from "./completion-cli-BFpMGGJp.js";
 import { t as buildWorkspaceHookStatus } from "./hooks-status-CdjD9QYu.js";
 import { t as runTui } from "./tui-CQVWQGBQ.js";
 import os from "node:os";

package/dist/{program-DgFnkvu_.js → program-DsqhEBlx.js}

@@ -52,8 +52,8 @@ import "./pairing-labels-DxpfDscO.js";
 import "./channels-status-issues-Cx4DwKM8.js";
 import { n as ensurePluginRegistryLoaded } from "./command-options-YP_dvMez.js";
 import { n as resolveCliChannelOptions } from "./channel-options-DoRr2LmL.js";
-import { a as getCommandPath, d as hasHelpOrVersion, l as getVerboseFlag } from "./register.subclis-C00vuiWz.js";
-import "./completion-cli-BT_5u1b7.js";
+import { a as getCommandPath, d as hasHelpOrVersion, l as getVerboseFlag } from "./register.subclis-CtdazzCK.js";
+import "./completion-cli-DXt5J6NO.js";
 import "./gateway-rpc-DQcPueX1.js";
 import "./deps-DZVkCyfF.js";
 import "./daemon-runtime-HqcnmSTj.js";
@@ -65,22 +65,22 @@ import "./widearea-dns-DHSIgmLp.js";
 import "./audit-D0OQ_h8g.js";
 import "./onboard-skills-Bmw1Vd5a.js";
 import "./health-format-BL3M1y4s.js";
-import "./update-runner-D2rkfIG-.js";
+import "./update-runner-CqR4E_QO.js";
 import "./github-copilot-auth-DJ_95veW.js";
 import "./logging-D15QDE2U.js";
 import "./hooks-status-CRG1w6AU.js";
-import "./status-B9gw1tPc.js";
+import "./status-UAO83kNe.js";
 import "./skills-status-C4wmQlJW.js";
 import { i as hasEmittedCliBanner, n as emitCliBanner, r as formatCliBannerLine } from "./tui-_aG7l29T.js";
 import "./agent-BKhAPOvN.js";
 import "./node-service-C2JDeXPT.js";
 import { t as forceFreePort } from "./ports-Bc_X7vVa.js";
 import "./auth-health-BtHeU2M-.js";
-import { r as registerProgramCommands, t as ensureConfigReady } from "./config-guard-D-C6wp6Q.js";
+import { r as registerProgramCommands, t as ensureConfigReady } from "./config-guard-Ct1PT1ZL.js";
 import "./help-format-tZizD4BR.js";
 import "./configure-D50d4QdJ.js";
 import "./systemd-linger-CEreLGmo.js";
-import "./doctor-D3FZptHG.js";
+import "./doctor-BA4__Mx7.js";
 import { Command } from "commander";
 
 //#region src/cli/program/context.ts

package/dist/{register.subclis-C00vuiWz.js → register.subclis-CtdazzCK.js}

@@ -124,7 +124,7 @@ const entries = [
 		name: "gateway",
 		description: "Gateway control",
 		register: async (program) => {
-			(await import("./gateway-cli-DIr4w7H1.js")).registerGatewayCli(program);
+			(await import("./gateway-cli-Dfp03Bdx.js")).registerGatewayCli(program);
 		}
 	},
 	{
@@ -282,14 +282,14 @@ const entries = [
 		name: "update",
 		description: "CLI update helpers",
 		register: async (program) => {
-			(await import("./update-cli-TpiKYwkG.js")).registerUpdateCli(program);
+			(await import("./update-cli-uktSZBAl.js")).registerUpdateCli(program);
 		}
 	},
 	{
 		name: "completion",
 		description: "Generate shell completion script",
 		register: async (program) => {
-			(await import("./completion-cli-BT_5u1b7.js").then((n) => n.n)).registerCompletionCli(program);
+			(await import("./completion-cli-DXt5J6NO.js").then((n) => n.n)).registerCompletionCli(program);
 		}
 	}
 ];

package/dist/{run-main-B4K_5H7e.js → run-main-DEA5tZby.js}

@@ -51,8 +51,8 @@ import "./login-qr-BHTIpk7i.js";
 import "./pairing-labels-DxpfDscO.js";
 import "./channels-status-issues-Cx4DwKM8.js";
 import { n as ensurePluginRegistryLoaded } from "./command-options-YP_dvMez.js";
-import { a as getCommandPath, c as getPrimaryCommand, d as hasHelpOrVersion } from "./register.subclis-C00vuiWz.js";
-import "./completion-cli-BT_5u1b7.js";
+import { a as getCommandPath, c as getPrimaryCommand, d as hasHelpOrVersion } from "./register.subclis-CtdazzCK.js";
+import "./completion-cli-DXt5J6NO.js";
 import "./gateway-rpc-DQcPueX1.js";
 import "./deps-DZVkCyfF.js";
 import { h as assertSupportedRuntime } from "./daemon-runtime-HqcnmSTj.js";
@@ -64,21 +64,21 @@ import "./widearea-dns-DHSIgmLp.js";
 import "./audit-D0OQ_h8g.js";
 import "./onboard-skills-Bmw1Vd5a.js";
 import "./health-format-BL3M1y4s.js";
-import "./update-runner-D2rkfIG-.js";
+import "./update-runner-CqR4E_QO.js";
 import "./github-copilot-auth-DJ_95veW.js";
 import "./logging-D15QDE2U.js";
 import "./hooks-status-CRG1w6AU.js";
-import "./status-B9gw1tPc.js";
+import "./status-UAO83kNe.js";
 import "./skills-status-C4wmQlJW.js";
 import { n as emitCliBanner } from "./tui-_aG7l29T.js";
 import "./agent-BKhAPOvN.js";
 import "./node-service-C2JDeXPT.js";
 import "./auth-health-BtHeU2M-.js";
-import { n as findRoutedCommand, t as ensureConfigReady } from "./config-guard-D-C6wp6Q.js";
+import { n as findRoutedCommand, t as ensureConfigReady } from "./config-guard-Ct1PT1ZL.js";
 import "./help-format-tZizD4BR.js";
 import "./configure-D50d4QdJ.js";
 import "./systemd-linger-CEreLGmo.js";
-import "./doctor-D3FZptHG.js";
+import "./doctor-BA4__Mx7.js";
 import path from "node:path";
 import process$1 from "node:process";
 import fs from "node:fs";
@@ -140,7 +140,7 @@ async function runCli(argv = process$1.argv) {
 	assertSupportedRuntime();
 	if (await tryRouteCli(normalizedArgv)) return;
 	enableConsoleCapture();
-	const { buildProgram } = await import("./program-DgFnkvu_.js");
+	const { buildProgram } = await import("./program-DsqhEBlx.js");
 	const program = buildProgram();
 	installUnhandledRejectionHandler();
 	process$1.on("uncaughtException", (error) => {
@@ -150,7 +150,7 @@ async function runCli(argv = process$1.argv) {
 	const parseArgv = rewriteUpdateFlagArgv(normalizedArgv);
 	const primary = getPrimaryCommand(parseArgv);
 	if (primary) {
-		const { registerSubCliByName } = await import("./register.subclis-C00vuiWz.js").then((n) => n.i);
+		const { registerSubCliByName } = await import("./register.subclis-CtdazzCK.js").then((n) => n.i);
 		await registerSubCliByName(program, primary);
 	}
 	if (!(!primary && hasHelpOrVersion(parseArgv))) {

package/dist/{status-B9gw1tPc.js → status-UAO83kNe.js}

@@ -20,7 +20,7 @@ import { o as resolveStorePath } from "./paths-DPLOvGLU.js";
 import { I as resolveMainSessionKey, d as loadSessionStore } from "./sandbox-DyDrMxBF.js";
 import { t as buildChannelSummary } from "./channel-summary-BfmMtKO5.js";
 import { t as collectChannelStatusIssues } from "./channels-status-issues-Cx4DwKM8.js";
-import { r as installCompletion } from "./completion-cli-BT_5u1b7.js";
+import { r as installCompletion } from "./completion-cli-DXt5J6NO.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-HqcnmSTj.js";
 import { o as resolveGatewayLogPaths, t as resolveGatewayService } from "./service-DV05Mtg_.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-DQvm8tRB.js";
@@ -29,7 +29,7 @@ import { t as renderTable } from "./table-Kzsd53ks.js";
 import { i as probeGateway, t as runSecurityAudit } from "./audit-D0OQ_h8g.js";
 import { d as applyAuthChoice, h as promptAuthChoiceGrouped, l as resolvePreferredProviderForAuthChoice, o as applyPrimaryModel, r as promptRemoteGatewayConfig, s as promptDefaultModel, t as setupSkills, u as warnIfModelConfigLooksOff } from "./onboard-skills-Bmw1Vd5a.js";
 import { l as healthCommand, n as ensureControlUiAssetsBuilt, s as formatHealthChannelLines, t as formatHealthCheckFailure, u as resolveHeartbeatSummaryForAgent } from "./health-format-BL3M1y4s.js";
-import { C as resolveEffectiveUpdateChannel, S as normalizeUpdateChannel, c as formatUpdateOneLiner, d as checkShellCompletionStatus, h as compareSemverStrings, l as getUpdateCheckResult, m as checkUpdateStatus, p as ensureCompletionCacheExists, s as formatUpdateAvailableHint, u as resolveUpdateAvailability, x as formatUpdateChannelLabel } from "./update-runner-D2rkfIG-.js";
+import { C as resolveEffectiveUpdateChannel, S as normalizeUpdateChannel, c as formatUpdateOneLiner, d as checkShellCompletionStatus, h as compareSemverStrings, l as getUpdateCheckResult, m as checkUpdateStatus, p as ensureCompletionCacheExists, s as formatUpdateAvailableHint, u as resolveUpdateAvailability, x as formatUpdateChannelLabel } from "./update-runner-CqR4E_QO.js";
 import { n as logConfigUpdated } from "./logging-D15QDE2U.js";
 import { t as buildWorkspaceHookStatus } from "./hooks-status-CRG1w6AU.js";
 import { t as buildWorkspaceSkillStatus } from "./skills-status-C4wmQlJW.js";

package/dist/{update-cli-D4bfteVO.js → update-cli-BJw0FEUf.js}

@@ -54,7 +54,7 @@ import "./archive-Dy3Ezb-5.js";
 import "./skill-scanner-BoGjHXUZ.js";
 import "./installs-ChtZhX65.js";
 import "./health-format-DUFBNWnB.js";
-import { C as resolveEffectiveUpdateChannel, S as normalizeUpdateChannel, _ as resolveNpmChannelTag, a as globalInstallArgs, b as channelToNpmTag, d as formatUpdateOneLiner, g as fetchNpmTagVersion, h as compareSemverStrings, i as detectGlobalInstallManagerForRoot, l as ensureCompletionCacheExists, m as checkUpdateStatus, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, p as resolveUpdateAvailability, r as detectGlobalInstallManagerByPresence, s as checkShellCompletionStatus, t as runGatewayUpdate, u as formatUpdateAvailableHint, v as DEFAULT_GIT_CHANNEL, x as formatUpdateChannelLabel, y as DEFAULT_PACKAGE_CHANNEL } from "./update-runner--JLGNdGD.js";
+import { C as resolveEffectiveUpdateChannel, S as normalizeUpdateChannel, _ as resolveNpmChannelTag, a as globalInstallArgs, b as channelToNpmTag, d as formatUpdateOneLiner, g as fetchNpmTagVersion, h as compareSemverStrings, i as detectGlobalInstallManagerForRoot, l as ensureCompletionCacheExists, m as checkUpdateStatus, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, p as resolveUpdateAvailability, r as detectGlobalInstallManagerByPresence, s as checkShellCompletionStatus, t as runGatewayUpdate, u as formatUpdateAvailableHint, v as DEFAULT_GIT_CHANNEL, x as formatUpdateChannelLabel, y as DEFAULT_PACKAGE_CHANNEL } from "./update-runner-D9NZDqxe.js";
 import "./auth-DSrYkGU-.js";
 import { t as renderTable } from "./table-BOthYYmp.js";
 import "./skills-status-BVaiHzFh.js";
@@ -62,11 +62,11 @@ import "./service-BKQOHHW6.js";
 import "./systemd-DyrxDxSB.js";
 import "./service-audit-Cyagv33t.js";
 import "./channels-status-issues-CbB072Pz.js";
-import { r as installCompletion } from "./completion-cli-52VvoM_K.js";
+import { r as installCompletion } from "./completion-cli-BFpMGGJp.js";
 import { t as formatHelpExamples } from "./help-format-q-N7n7vs.js";
 import "./systemd-linger-C5NE1TWa.js";
 import "./auth-health-DLdo_EBm.js";
-import { t as doctorCommand } from "./doctor-D7gplt7y.js";
+import { t as doctorCommand } from "./doctor-DPA2jDpR.js";
 import "./shared-CX7eJEGL.js";
 import { r as runDaemonRestart } from "./daemon-cli-DC0OyoyG.js";
 import { n as updateNpmInstalledPlugins, t as syncPluginsForUpdateChannel } from "./update-BM7DEuEF.js";

package/dist/{update-cli-TpiKYwkG.js → update-cli-uktSZBAl.js}

@@ -49,8 +49,8 @@ import "./pairing-store-D5pH_THY.js";
 import "./login-qr-BHTIpk7i.js";
 import "./pairing-labels-DxpfDscO.js";
 import "./channels-status-issues-Cx4DwKM8.js";
-import "./register.subclis-C00vuiWz.js";
-import { r as installCompletion } from "./completion-cli-BT_5u1b7.js";
+import "./register.subclis-CtdazzCK.js";
+import { r as installCompletion } from "./completion-cli-DXt5J6NO.js";
 import "./deps-DZVkCyfF.js";
 import { g as parseSemver } from "./daemon-runtime-HqcnmSTj.js";
 import "./service-DV05Mtg_.js";
@@ -60,14 +60,14 @@ import { r as runDaemonRestart } from "./daemon-cli-CMZsQu2M.js";
 import "./service-audit-CQ1bUSCH.js";
 import { t as renderTable } from "./table-Kzsd53ks.js";
 import "./health-format-BL3M1y4s.js";
-import { C as resolveEffectiveUpdateChannel, S as normalizeUpdateChannel, _ as resolveNpmChannelTag, a as globalInstallArgs, b as channelToNpmTag, c as formatUpdateOneLiner, d as checkShellCompletionStatus, g as fetchNpmTagVersion, h as compareSemverStrings, i as detectGlobalInstallManagerForRoot, m as checkUpdateStatus, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, p as ensureCompletionCacheExists, r as detectGlobalInstallManagerByPresence, s as formatUpdateAvailableHint, t as runGatewayUpdate, u as resolveUpdateAvailability, v as DEFAULT_GIT_CHANNEL, x as formatUpdateChannelLabel, y as DEFAULT_PACKAGE_CHANNEL } from "./update-runner-D2rkfIG-.js";
+import { C as resolveEffectiveUpdateChannel, S as normalizeUpdateChannel, _ as resolveNpmChannelTag, a as globalInstallArgs, b as channelToNpmTag, c as formatUpdateOneLiner, d as checkShellCompletionStatus, g as fetchNpmTagVersion, h as compareSemverStrings, i as detectGlobalInstallManagerForRoot, m as checkUpdateStatus, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, p as ensureCompletionCacheExists, r as detectGlobalInstallManagerByPresence, s as formatUpdateAvailableHint, t as runGatewayUpdate, u as resolveUpdateAvailability, v as DEFAULT_GIT_CHANNEL, x as formatUpdateChannelLabel, y as DEFAULT_PACKAGE_CHANNEL } from "./update-runner-CqR4E_QO.js";
 import "./logging-D15QDE2U.js";
 import "./skills-status-C4wmQlJW.js";
 import "./auth-health-BtHeU2M-.js";
 import { n as updateNpmInstalledPlugins, t as syncPluginsForUpdateChannel } from "./update-NeXgYicE.js";
 import { t as formatHelpExamples } from "./help-format-tZizD4BR.js";
 import "./systemd-linger-CEreLGmo.js";
-import { t as doctorCommand } from "./doctor-D3FZptHG.js";
+import { t as doctorCommand } from "./doctor-BA4__Mx7.js";
 import { spawnSync } from "node:child_process";
 import path from "node:path";
 import os from "node:os";

package/dist/{update-runner-D2rkfIG-.js → update-runner-CqR4E_QO.js}

@@ -4,7 +4,7 @@ import { t as resolveSKYKOIPackageRoot } from "./SKYKOI-root-B5HYTPZX.js";
 import { j as VERSION } from "./config-CtkB7u5D.js";
 import { Ln as trimLogTail } from "./loader-BY97YNZi.js";
 import { t as note } from "./note-YmyPRD-3.js";
-import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-BT_5u1b7.js";
+import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-DXt5J6NO.js";
 import { g as parseSemver } from "./daemon-runtime-HqcnmSTj.js";
 import { i as resolveControlUiDistIndexPathForRoot, r as resolveControlUiDistIndexHealth } from "./health-format-BL3M1y4s.js";
 import { spawnSync } from "node:child_process";

package/dist/{update-runner--JLGNdGD.js → update-runner-D9NZDqxe.js}

@@ -6,7 +6,7 @@ import { j as VERSION } from "./config-CJhjWqlt.js";
 import { _ as parseSemver } from "./daemon-runtime-B7p4kL16.js";
 import { t as note } from "./note-CrCSjpk3.js";
 import { i as resolveControlUiDistIndexPathForRoot, r as resolveControlUiDistIndexHealth } from "./health-format-DUFBNWnB.js";
-import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-52VvoM_K.js";
+import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-BFpMGGJp.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs/promises";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skykoi",
-  "version": "2026.3.32",
+  "version": "2026.3.33",
   "description": "SkyKoi — AI agent runtime. Multi-channel gateway CLI with RPC agent. Forked from SkyKoi.",
   "keywords": [
     "skykoi",