squidclaw 3.0.13 → 3.0.15

package/dist/{gateway-cli-B2fScwuY.js → gateway-cli-CF1kp5f9.js}

@@ -2,14 +2,14 @@ import { g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as
 import { a as logVerbose, d as colorize, f as isRich, g as getResolvedLoggerSettings, h as getLogger, m as getChildLogger, p as theme, s as setVerbose } from "./globals-xfUIfxbE.js";
 import { C as sleep, D as isPlainObject, E as truncateUtf16Safe, S as shortenHomePath, c as ensureDir, r as clamp, y as resolveUserPath } from "./utils-DMGXr25O.js";
 import { a as normalizeElevatedLevel, c as normalizeUsageDisplay, d as supportsXHighThinking, l as normalizeVerboseLevel, n as formatXHighModelHint, o as normalizeReasoningLevel, s as normalizeThinkLevel, t as formatThinkingLevels } from "./thinking-44rmAw5o.js";
-import { $ as normalizeOptionalSessionKey, $n as listDescendantRunsForRequester, $t as sleepWithAbort, A as resolveSessionModelRef, Ar as OPENAI_TTS_VOICES, B as triggerSquidClawRestart, Bt as createOutboundSendDeps$1, Cr as resolveTtsConfig, D as loadSessionEntry, Dn as createReplyDispatcher, Dr as setTtsProvider, Dt as readJsonBodyWithLimit, E as loadCombinedSessionStoreForGateway, En as dispatchInboundMessage, Er as setTtsEnabled, Et as handleSlackHttpRequest, F as isGatewaySigusr1RestartExternallyAllowed, Fr as resetAllLanes, Ft as resolveAgentOutboundTarget, G as summarizeRestartSentinel, H as formatDoctorNonInteractiveHint, Ht as getCliSessionId, I as markGatewaySigusr1RestartHandled, Ir as setCommandLaneConcurrency, It as createOutboundSendDeps, J as normalizeHttpWebhookUrl, Jn as countActiveDescendantRuns, Jt as resolveBootstrapWarningSignaturesSeen, Kn as isAbortRequestText, Kr as enqueueSystemEvent, L as scheduleGatewaySigusr1Restart, Ln as resolveOutboundTarget, Lr as waitForActiveTasks, Lt as applyVerboseOverride, M as consumeGatewaySigusr1RestartAuthorization, Mn as resolveOutboundSessionRoute, Mt as agentCommandFromIngress, N as deferGatewayRestartUntilIdle, Nr as getTotalQueueSize, O as pruneLegacyStoreKeys, On as getTotalPendingReplies, Or as textToSpeech, Ot as requestBodyErrorToText, P as emitGatewayRestart, Pr as markGatewayDraining, Pt as resolveAgentDeliveryPlan, Q as normalizeOptionalAgentId, Qt as computeBackoff, R as setGatewaySigusr1RestartPolicy, Rn as resolveSessionDeliveryTarget, Rr as CommandLane, Rt as parseVerboseOverride, S as canonicalizeSpawnedByForAgent, Sr as resolveTtsAutoMode, T as listSessionsFromStore, Tn as formatZonedTimestamp, Tr as resolveTtsProviderOrder, U as formatRestartSentinelMessage, Ur as stripHeartbeatToken, Ut as setCliSessionId, V as consumeRestartSentinel, Vn as resetDirectoryCache, Vt as runWithModelFallback, Wt as runCliAgent, X as normalizeCronJobPatch, Xr as requestHeartbeatNow, Xt as lookupContextTokens, Y as normalizeCronJobCreate, Yt as applyModelOverrideToSessionEntry, Z as inferLegacyName, Zn as initSubagentRegistry, _ as resolveCronStyleNow, _r as clearBootstrapSnapshot, ai as resolveSendPolicy, an as buildSafeExternalPrompt, ar as buildOutboundSessionContext, at as hasLegacyDeliveryHints, br as isTtsProviderConfigured, ci as DEFAULT_INPUT_MAX_REDIRECTS, cn as isExternalHookSession, cr as getAgentRunContext, ct as persistBrowserProxyFiles, di as extractImageContentFromSource, dr as resolveAgentIdentity, en as resolveSessionAuthProfileOverride, et as normalizeOptionalText, f as runEmbeddedPiAgent, fi as normalizeMimeList, ft as loadSquidClawPlugins, gt as normalizeGroupActivation, h as waitForEmbeddedPiRunEnd, hi as resolveAgentTimeoutMs, hr as resolveUserTimezone, ii as normalizeSendPolicy, ir as clearSessionQueues, it as buildDeliveryFromLegacyPayload, jn as ensureOutboundSessionEntry, jr as getActiveTaskCount, k as resolveGatewaySessionStoreTarget, kr as OPENAI_TTS_MODELS, li as DEFAULT_INPUT_TIMEOUT_MS, ln as createReplyPrefixOptions, lr as onAgentEvent, lt as getPluginToolMeta, m as getActiveEmbeddedRunCount, mn as buildHistoryContextFromEntries, n as buildBareSessionResetPrompt, ni as getAcpSessionManager, nr as resolveAnnounceTargetFromKey, nt as normalizeRequiredName, oi as DEFAULT_INPUT_IMAGE_MAX_BYTES, on as detectSuspiciousPatterns, or as clearAgentRunContext, ot as stripLegacyDeliveryFields, p as abortEmbeddedPiRun, pi as resolveInputFileLimits, pt as createPluginRuntime, q as writeRestartSentinel, qn as stopSubagentsForRequester, qr as isSystemEventContextChanged, ri as resolveAgentSessionDirs, rr as readLatestAssistantReply, rt as migrateLegacyCronPayload, si as DEFAULT_INPUT_IMAGE_MIMES, sn as getHookType, sr as emitAgentEvent, st as applyBrowserProxyPaths, ti as ACP_SESSION_IDENTITY_RENDERER_VERSION, tn as resolveAgentAvatar, tr as runSubagentAnnounceFlow, tt as normalizePayloadToSystemText, ui as extractFileContentFromSource, un as unbindThreadBindingsBySessionKey, ur as registerAgentRunContext, ut as resolvePluginTools, v as applyToolPolicyPipeline, vr as getTtsProvider, vt as loadProviderUsageSummary, w as listAgentsForGateway, wr as resolveTtsPrefsPath, wt as resolveAgentOutboundIdentity, x as createSquidClawTools, xr as resolveTtsApiKey, y as buildDefaultToolPolicyPipelineSteps, yr as isTtsEnabled, z as setPreRestartDeferralCheck, zn as resolveOutboundChannelPlugin, zr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, zt as createDefaultDeps } from "./reply-CeUYZhWu.js";
-import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-tUxfsPYq.js";
+import { $ as normalizeOptionalSessionKey, $n as listDescendantRunsForRequester, $t as sleepWithAbort, A as resolveSessionModelRef, Ar as OPENAI_TTS_VOICES, B as triggerSquidClawRestart, Bt as createOutboundSendDeps$1, Cr as resolveTtsConfig, D as loadSessionEntry, Dn as createReplyDispatcher, Dr as setTtsProvider, Dt as readJsonBodyWithLimit, E as loadCombinedSessionStoreForGateway, En as dispatchInboundMessage, Er as setTtsEnabled, Et as handleSlackHttpRequest, F as isGatewaySigusr1RestartExternallyAllowed, Fr as resetAllLanes, Ft as resolveAgentOutboundTarget, G as summarizeRestartSentinel, H as formatDoctorNonInteractiveHint, Ht as getCliSessionId, I as markGatewaySigusr1RestartHandled, Ir as setCommandLaneConcurrency, It as createOutboundSendDeps, J as normalizeHttpWebhookUrl, Jn as countActiveDescendantRuns, Jt as resolveBootstrapWarningSignaturesSeen, Kn as isAbortRequestText, Kr as enqueueSystemEvent, L as scheduleGatewaySigusr1Restart, Ln as resolveOutboundTarget, Lr as waitForActiveTasks, Lt as applyVerboseOverride, M as consumeGatewaySigusr1RestartAuthorization, Mn as resolveOutboundSessionRoute, Mt as agentCommandFromIngress, N as deferGatewayRestartUntilIdle, Nr as getTotalQueueSize, O as pruneLegacyStoreKeys, On as getTotalPendingReplies, Or as textToSpeech, Ot as requestBodyErrorToText, P as emitGatewayRestart, Pr as markGatewayDraining, Pt as resolveAgentDeliveryPlan, Q as normalizeOptionalAgentId, Qt as computeBackoff, R as setGatewaySigusr1RestartPolicy, Rn as resolveSessionDeliveryTarget, Rr as CommandLane, Rt as parseVerboseOverride, S as canonicalizeSpawnedByForAgent, Sr as resolveTtsAutoMode, T as listSessionsFromStore, Tn as formatZonedTimestamp, Tr as resolveTtsProviderOrder, U as formatRestartSentinelMessage, Ur as stripHeartbeatToken, Ut as setCliSessionId, V as consumeRestartSentinel, Vn as resetDirectoryCache, Vt as runWithModelFallback, Wt as runCliAgent, X as normalizeCronJobPatch, Xr as requestHeartbeatNow, Xt as lookupContextTokens, Y as normalizeCronJobCreate, Yt as applyModelOverrideToSessionEntry, Z as inferLegacyName, Zn as initSubagentRegistry, _ as resolveCronStyleNow, _r as clearBootstrapSnapshot, ai as resolveSendPolicy, an as buildSafeExternalPrompt, ar as buildOutboundSessionContext, at as hasLegacyDeliveryHints, br as isTtsProviderConfigured, ci as DEFAULT_INPUT_MAX_REDIRECTS, cn as isExternalHookSession, cr as getAgentRunContext, ct as persistBrowserProxyFiles, di as extractImageContentFromSource, dr as resolveAgentIdentity, en as resolveSessionAuthProfileOverride, et as normalizeOptionalText, f as runEmbeddedPiAgent, fi as normalizeMimeList, ft as loadSquidClawPlugins, gt as normalizeGroupActivation, h as waitForEmbeddedPiRunEnd, hi as resolveAgentTimeoutMs, hr as resolveUserTimezone, ii as normalizeSendPolicy, ir as clearSessionQueues, it as buildDeliveryFromLegacyPayload, jn as ensureOutboundSessionEntry, jr as getActiveTaskCount, k as resolveGatewaySessionStoreTarget, kr as OPENAI_TTS_MODELS, li as DEFAULT_INPUT_TIMEOUT_MS, ln as createReplyPrefixOptions, lr as onAgentEvent, lt as getPluginToolMeta, m as getActiveEmbeddedRunCount, mn as buildHistoryContextFromEntries, n as buildBareSessionResetPrompt, ni as getAcpSessionManager, nr as resolveAnnounceTargetFromKey, nt as normalizeRequiredName, oi as DEFAULT_INPUT_IMAGE_MAX_BYTES, on as detectSuspiciousPatterns, or as clearAgentRunContext, ot as stripLegacyDeliveryFields, p as abortEmbeddedPiRun, pi as resolveInputFileLimits, pt as createPluginRuntime, q as writeRestartSentinel, qn as stopSubagentsForRequester, qr as isSystemEventContextChanged, ri as resolveAgentSessionDirs, rr as readLatestAssistantReply, rt as migrateLegacyCronPayload, si as DEFAULT_INPUT_IMAGE_MIMES, sn as getHookType, sr as emitAgentEvent, st as applyBrowserProxyPaths, ti as ACP_SESSION_IDENTITY_RENDERER_VERSION, tn as resolveAgentAvatar, tr as runSubagentAnnounceFlow, tt as normalizePayloadToSystemText, ui as extractFileContentFromSource, un as unbindThreadBindingsBySessionKey, ur as registerAgentRunContext, ut as resolvePluginTools, v as applyToolPolicyPipeline, vr as getTtsProvider, vt as loadProviderUsageSummary, w as listAgentsForGateway, wr as resolveTtsPrefsPath, wt as resolveAgentOutboundIdentity, x as createSquidClawTools, xr as resolveTtsApiKey, y as buildDefaultToolPolicyPipelineSteps, yr as isTtsEnabled, z as setPreRestartDeferralCheck, zn as resolveOutboundChannelPlugin, zr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, zt as createDefaultDeps } from "./reply-BWXzPVSJ.js";
+import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-C1XMay0T.js";
 import { a as setConsoleSubsystemFilter, d as defaultRuntime, n as runtimeForLogger, o as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-DC87CPVS.js";
 import { C as isCronRunSessionKey, E as parseAgentSessionKey, T as isSubagentSessionKey, _ as normalizeAccountId$1, c as normalizeAgentId, g as DEFAULT_ACCOUNT_ID, h as toAgentStoreSessionKey, l as normalizeMainKey, m as toAgentRequestSessionKey, o as classifySessionKeyShape, r as buildAgentMainSessionKey, t as DEFAULT_AGENT_ID, u as resolveAgentIdFromSessionKey } from "./session-key-CIXZm7v4.js";
-import { a as openBoundaryFileSync, f as isNotFoundPathError, g as matchesSkillFilter, i as openBoundaryFile, o as openVerifiedFileSync, s as sameFileIdentity, t as resolveSquidClawPackageRoot } from "./squidclaw-root-BcB7vo9M.js";
+import { a as openBoundaryFileSync, f as isNotFoundPathError, g as matchesSkillFilter, i as openBoundaryFile, o as openVerifiedFileSync, s as sameFileIdentity, t as resolveSquidClawPackageRoot } from "./squidclaw-root-CnE19yKj.js";
 import { i as logWarn, t as logDebug } from "./logger-DEmOJ9C3.js";
 import { n as runExec, t as runCommandWithTimeout } from "./exec-Dfgi8amS.js";
-import { $t as loadConfig, Bi as DEFAULT_MODEL, Dn as parseDurationMs, Fi as normalizeSecretInput, Hr as applyLegacyMigrations, Kn as isAvatarHttpUrl, On as parseByteSize, Qt as createConfigIO, S as resolveThinkingDefault, Ur as ensureControlUiAllowedOriginsForNonLoopbackBind, Vi as DEFAULT_PROVIDER, Vr as applyMergePatch, Wn as AVATAR_MAX_BYTES, Xt as migrateLegacyConfig, Zn as looksLikeAvatarPath, _ as resolveHooksGmailModel, a as getModelRefStatus, an as writeConfigFile, b as resolveSubagentConfiguredModelSelection, ei as buildTalkConfigResponse, en as parseConfigJson5, g as resolveDefaultModelForAgent, h as resolveConfiguredModelRef, ki as isPidAlive, ni as resolveAgentMaxConcurrent, nn as readConfigFileSnapshotForWrite, on as validateConfigObjectWithPlugins, p as resolveAllowedModelRef, qn as isAvatarImageDataUrl, ri as resolveSubagentMaxConcurrent, rn as resolveConfigSnapshotHash, s as isCliProvider, sn as SquidClawSchema, t as buildAllowedModelSet, tn as readConfigFileSnapshot, u as normalizeModelSelection, zi as DEFAULT_CONTEXT_TOKENS } from "./model-selection-ZV3PuYVR.js";
+import { $t as loadConfig, Bi as DEFAULT_MODEL, Dn as parseDurationMs, Fi as normalizeSecretInput, Hr as applyLegacyMigrations, Kn as isAvatarHttpUrl, On as parseByteSize, Qt as createConfigIO, S as resolveThinkingDefault, Ur as ensureControlUiAllowedOriginsForNonLoopbackBind, Vi as DEFAULT_PROVIDER, Vr as applyMergePatch, Wn as AVATAR_MAX_BYTES, Xt as migrateLegacyConfig, Zn as looksLikeAvatarPath, _ as resolveHooksGmailModel, a as getModelRefStatus, an as writeConfigFile, b as resolveSubagentConfiguredModelSelection, ei as buildTalkConfigResponse, en as parseConfigJson5, g as resolveDefaultModelForAgent, h as resolveConfiguredModelRef, ki as isPidAlive, ni as resolveAgentMaxConcurrent, nn as readConfigFileSnapshotForWrite, on as validateConfigObjectWithPlugins, p as resolveAllowedModelRef, qn as isAvatarImageDataUrl, ri as resolveSubagentMaxConcurrent, rn as resolveConfigSnapshotHash, s as isCliProvider, sn as SquidClawSchema, t as buildAllowedModelSet, tn as readConfigFileSnapshot, u as normalizeModelSelection, zi as DEFAULT_CONTEXT_TOKENS } from "./model-selection-QgM_TOjC.js";
 import { C as clearInternalHooks, E as triggerInternalHook, T as registerInternalHook, h as createEmptyPluginRegistry, t as CHANNEL_IDS, u as getActivePluginRegistry, w as createInternalHookEvent } from "./registry-CpzNS8-a.js";
 import "./github-copilot-token-Xh3EqlDM.js";
 import { t as formatCliCommand } from "./command-format-z1t1m-Kx.js";
@@ -17,150 +17,150 @@ import "./boolean-BsqeuxE6.js";
 import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-DeB9SeAQ.js";
 import "./host-env-security-DkAVVuaw.js";
 import { i as resolveRuntimeServiceVersion, r as VERSION } from "./env-vars-DpyLwTjM.js";
-import { u as isTestDefaultMemorySlotDisabled } from "./manifest-registry-Cx3mB9zS.js";
-import "./dock-CVTqzMqE.js";
+import { u as isTestDefaultMemorySlotDisabled } from "./manifest-registry-BaUPjNKb.js";
+import "./dock-C7N1CmcP.js";
 import { _ as normalizeGatewayClientMode, f as GATEWAY_CLIENT_CAPS, g as hasGatewayClientCap, h as GATEWAY_CLIENT_NAMES, i as isGatewayMessageChannel, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, p as GATEWAY_CLIENT_IDS, r as isGatewayCliClient, s as isWebchatClient, t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-CSxZnhaV.js";
-import "./send-CPFNtAP8.js";
-import { m as buildChannelAccountBindings, n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin, w as normalizeWhatsAppTarget } from "./plugins-Cl_3OCyK.js";
-import { $ as resolveMainSessionKey, A as readSessionPreviewItemsFromTranscript, C as normalizeSessionDeliveryFields, D as capArrayByJsonBytes, E as archiveSessionTranscripts, I as stripInlineDirectiveTagsForDisplay, L as stripInlineDirectiveTagsFromMessageForDisplay, M as resolveSessionTranscriptCandidates, N as stripEnvelopeFromMessage, O as cleanupArchivedSessionTranscripts, P as stripEnvelopeFromMessages, Q as resolveExplicitAgentSessionKey, R as jsonUtf8Bytes, T as archiveFileOnDisk, U as resolveSessionResetPolicy, V as evaluateSessionFreshness, X as canonicalizeMainSessionAlias, Y as setSessionRuntimeModel, Z as resolveAgentMainSessionKey, ct as cleanStaleLockFiles, d as updateSessionStore, et as resolveMainSessionKeyFromConfig, k as readSessionMessages, n as parseSessionThreadInfo, nt as snapshotSessionOrigin, o as loadSessionStore, q as mergeSessionEntry, t as extractDeliveryInfo, x as mergeDeliveryContext, y as deliveryContextFromSession } from "./sessions-CmjcNTJ3.js";
-import { u as registerUnhandledRejectionHandler } from "./audio-transcription-runner-B7oPsr3U.js";
-import { b as extractTextFromChatContent } from "./image-CulZw1up.js";
-import "./models-config-BLdDYoxi.js";
-import "./pi-embedded-helpers-D8WkqLZt.js";
-import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-BgsD1lf7.js";
+import "./send-DX_fR45p.js";
+import { m as buildChannelAccountBindings, n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin, w as normalizeWhatsAppTarget } from "./plugins-H53_4Gxb.js";
+import { $ as resolveMainSessionKey, A as readSessionPreviewItemsFromTranscript, C as normalizeSessionDeliveryFields, D as capArrayByJsonBytes, E as archiveSessionTranscripts, I as stripInlineDirectiveTagsForDisplay, L as stripInlineDirectiveTagsFromMessageForDisplay, M as resolveSessionTranscriptCandidates, N as stripEnvelopeFromMessage, O as cleanupArchivedSessionTranscripts, P as stripEnvelopeFromMessages, Q as resolveExplicitAgentSessionKey, R as jsonUtf8Bytes, T as archiveFileOnDisk, U as resolveSessionResetPolicy, V as evaluateSessionFreshness, X as canonicalizeMainSessionAlias, Y as setSessionRuntimeModel, Z as resolveAgentMainSessionKey, ct as cleanStaleLockFiles, d as updateSessionStore, et as resolveMainSessionKeyFromConfig, k as readSessionMessages, n as parseSessionThreadInfo, nt as snapshotSessionOrigin, o as loadSessionStore, q as mergeSessionEntry, t as extractDeliveryInfo, x as mergeDeliveryContext, y as deliveryContextFromSession } from "./sessions-C5H_BZSr.js";
+import { u as registerUnhandledRejectionHandler } from "./audio-transcription-runner-Bnl3Ubjo.js";
+import { b as extractTextFromChatContent } from "./image-D2a7rcK1.js";
+import "./models-config-DOD5jluc.js";
+import "./pi-embedded-helpers-DctimJJI.js";
+import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-Cuk1IWYT.js";
 import { i as listCoreToolSections, n as PROFILE_OPTIONS, o as resolveCoreToolProfiles } from "./tool-catalog-DEbNxV11.js";
-import "./chrome-gIqO4t7T.js";
+import "./chrome-BNfSmFAM.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-D0l0E6wR.js";
 import { t as safeEqualSecret } from "./secret-equal-B7oJEPub.js";
-import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-gTCqUBfJ.js";
-import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-Bx8lpC1N.js";
-import { a as resolveGatewayAuth, c as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, i as isLocalDirectRequest, l as createAuthRateLimiter, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH, t as assertGatewayAuthConfigured, u as normalizeRateLimitClientIp } from "./auth-HYiP0mxx.js";
-import { l as ensureGatewayStartupAuth, u as mergeGatewayTailscaleConfig } from "./server-context-B-0KzcZE.js";
+import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-CLkKVwDq.js";
+import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-DKt5HoA5.js";
+import { a as resolveGatewayAuth, c as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, i as isLocalDirectRequest, l as createAuthRateLimiter, n as authorizeHttpGatewayConnect, o as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, r as authorizeWsControlUiGatewayConnect, s as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH, t as assertGatewayAuthConfigured, u as normalizeRateLimitClientIp } from "./auth-DHSeaNcB.js";
+import { l as ensureGatewayStartupAuth, u as mergeGatewayTailscaleConfig } from "./server-context-CX28l04l.js";
 import { d as hasBinary } from "./frontmatter-2aKLThq2.js";
-import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-Rnr7zPen.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-B7H6jIIw.js";
-import "./paths-BguvT84s.js";
+import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-BnBOxX1c.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-CCRXJArp.js";
+import "./paths-Bg6h1q3v.js";
 import { a as testRegexWithBoundedInput, i as compileSafeRegex } from "./redact-BHOzodtN.js";
 import { o as isErrno, r as formatErrorMessage } from "./errors-oMAXKmXG.js";
-import { i as openFileWithinRoot, l as writeFileWithinRoot, s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-CjHYKGbt.js";
-import { n as SsrFBlockedError } from "./proxy-env-CRD7fbqp.js";
-import { c as detectMime } from "./image-ops-BpsIdA2j.js";
-import "./store-aa15VM42.js";
-import { a as inspectPortUsage, l as formatPortDiagnostics, r as ensurePortAvailable } from "./ports-Bop51hz6.js";
+import { i as openFileWithinRoot, l as writeFileWithinRoot, s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-CKHYu4Vz.js";
+import { n as SsrFBlockedError } from "./proxy-env-D1tz4Z6a.js";
+import { c as detectMime } from "./image-ops-BIWika4g.js";
+import "./store-PDMRmC5Z.js";
+import { a as inspectPortUsage, l as formatPortDiagnostics, r as ensurePortAvailable } from "./ports-CKXuQJST.js";
 import { t as movePathToTrash } from "./trash-C4dj1x0P.js";
-import "./server-middleware-7cXowO4W.js";
-import { n as readJsonFile, r as writeJsonAtomic, t as createAsyncLock } from "./json-files-DIEpaxUj.js";
-import { i as resolveWhatsAppAccount } from "./accounts-BFC1okn9.js";
-import "./accounts-Xp5W2xrR.js";
+import "./server-middleware-DIc4WJOS.js";
+import { n as readJsonFile, r as writeJsonAtomic, t as createAsyncLock } from "./json-files-D6M304Qd.js";
+import { i as resolveWhatsAppAccount } from "./accounts-D095MOmG.js";
+import "./accounts-CyBVeR-N.js";
 import "./logging-D3KTM1pH.js";
-import "./accounts-PhtBJ8mA.js";
-import "./send-CDms2FQA.js";
+import "./accounts-BjEXPlGc.js";
+import "./send-C9UJKBSM.js";
 import { c as resolveStorePath, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, s as resolveSessionTranscriptsDirForAgent } from "./paths-B9v1dJHA.js";
 import { i as normalizeInputProvenance } from "./input-provenance-K1purPKY.js";
 import "./chat-envelope-D5xd2cOr.js";
-import "./tool-images-DTl_LHMa.js";
+import "./tool-images-FhSCiY-o.js";
 import "./tool-display-j0Y5n8v7.js";
-import { t as fetchWithSsrFGuard } from "./fetch-guard-VcWeni3c.js";
-import "./api-key-rotation-Y59kKrr0.js";
-import "./local-roots-BrxGyJnb.js";
-import { n as loadModelCatalog } from "./model-catalog-kpDOW8eY.js";
+import { t as fetchWithSsrFGuard } from "./fetch-guard-DNykKlIv.js";
+import "./api-key-rotation-BcKKu9kK.js";
+import "./local-roots-CMxJ8L4w.js";
+import { n as loadModelCatalog } from "./model-catalog-BfoWgIDd.js";
 import "./proxy-fetch-C4C5I8Js.js";
 import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-B4_ntOSs.js";
-import { j as runGlobalGatewayStopSafely, k as getGlobalHookRunner, o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-CVl43oM1.js";
-import { r as isRestartEnabled } from "./commands-CD6EMOiw.js";
-import "./commands-registry-DCUj1QOi.js";
-import { $ as validateNodePairRejectParams, $t as roleScopesAllow, A as validateCronStatusParams, At as validateWizardStartParams, B as validateExecApprovalsGetParams, C as validateConfigSetParams, Ct as validateToolsCatalogParams, D as validateCronRemoveParams, Dt as validateWebLoginWaitParams, E as validateCronListParams, Et as validateWebLoginStartParams, F as validateDevicePairRemoveParams, G as validateModelsListParams, Gt as rejectDevicePairing, H as validateExecApprovalsNodeSetParams, Ht as ensureDeviceToken, I as validateDeviceTokenRevokeParams, It as parseSessionLabel, J as validateNodeInvokeParams, Jt as revokeDeviceToken, K as validateNodeDescribeParams, Kt as removePairedDevice, L as validateDeviceTokenRotateParams, Lt as buildDeviceAuthPayload, M as validateDevicePairApproveParams, Mt as PROTOCOL_VERSION, N as validateDevicePairListParams, Nt as ErrorCodes, O as validateCronRunParams, Ot as validateWizardCancelParams, P as validateDevicePairRejectParams, Pt as errorShape, Q as validateNodePairListParams, Qt as verifyDeviceToken, R as validateExecApprovalRequestParams, Rt as buildDeviceAuthPayloadV3, S as validateConfigSchemaParams, St as validateTalkModeParams, T as validateCronAddParams, Tt as validateWakeParams, U as validateExecApprovalsSetParams, Ut as getPairedDevice, V as validateExecApprovalsNodeGetParams, Vt as approveDevicePairing, W as validateLogsTailParams, Wt as listDevicePairing, X as validateNodeListParams, Xt as summarizeDeviceTokens, Y as validateNodeInvokeResultParams, Yt as rotateDeviceToken, Z as validateNodePairApproveParams, Zt as updatePairedDeviceMetadata, _ as validateChatInjectParams, _t as validateSkillsBinsParams, a as validateAgentWaitParams, at as validateRequestFrame, b as validateConfigGetParams, bt as validateSkillsUpdateParams, c as validateAgentsFilesGetParams, ct as validateSendParams, d as validateAgentsListParams, dt as validateSessionsListParams, et as validateNodePairRequestParams, f as validateAgentsUpdateParams, ft as validateSessionsPatchParams, g as validateChatHistoryParams, gt as validateSessionsUsageParams, h as validateChatAbortParams, ht as validateSessionsResolveParams, i as validateAgentParams, in as verifyDeviceSignature, it as validatePushTestParams, j as validateCronUpdateParams, jt as validateWizardStatusParams, k as validateCronRunsParams, kt as validateWizardNextParams, l as validateAgentsFilesListParams, lt as validateSessionsCompactParams, m as validateChannelsStatusParams, mt as validateSessionsResetParams, n as formatValidationErrors, nt as validateNodeRenameParams, o as validateAgentsCreateParams, ot as validateSecretsResolveParams, p as validateChannelsLogoutParams, pt as validateSessionsPreviewParams, q as validateNodeEventParams, qt as requestDevicePairing, r as validateAgentIdentityParams, rn as normalizeDevicePublicKeyBase64Url, rt as validatePollParams, s as validateAgentsDeleteParams, st as validateSecretsResolveResult, tn as deriveDeviceIdFromPublicKey, tt as validateNodePairVerifyParams, u as validateAgentsFilesSetParams, ut as validateSessionsDeleteParams, v as validateChatSendParams, vt as validateSkillsInstallParams, w as validateConnectParams, wt as validateUpdateRunParams, x as validateConfigPatchParams, xt as validateTalkConfigParams, y as validateConfigApplyParams, yt as validateSkillsStatusParams, z as validateExecApprovalResolveParams, zt as normalizeDeviceMetadataForAuth } from "./client-CeaUCJtL.js";
-import { c as ADMIN_SCOPE$3, d as isNodeRoleMethod, n as callGateway, p as loadGatewayTlsRuntime$1, u as authorizeOperatorScopesForMethod } from "./call-DbkLm3eP.js";
+import { j as runGlobalGatewayStopSafely, k as getGlobalHookRunner, o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-B1sllFkh.js";
+import { r as isRestartEnabled } from "./commands-CiY9HjRt.js";
+import "./commands-registry-0bpX7A_Q.js";
+import { $ as validateNodePairRejectParams, $t as roleScopesAllow, A as validateCronStatusParams, At as validateWizardStartParams, B as validateExecApprovalsGetParams, C as validateConfigSetParams, Ct as validateToolsCatalogParams, D as validateCronRemoveParams, Dt as validateWebLoginWaitParams, E as validateCronListParams, Et as validateWebLoginStartParams, F as validateDevicePairRemoveParams, G as validateModelsListParams, Gt as rejectDevicePairing, H as validateExecApprovalsNodeSetParams, Ht as ensureDeviceToken, I as validateDeviceTokenRevokeParams, It as parseSessionLabel, J as validateNodeInvokeParams, Jt as revokeDeviceToken, K as validateNodeDescribeParams, Kt as removePairedDevice, L as validateDeviceTokenRotateParams, Lt as buildDeviceAuthPayload, M as validateDevicePairApproveParams, Mt as PROTOCOL_VERSION, N as validateDevicePairListParams, Nt as ErrorCodes, O as validateCronRunParams, Ot as validateWizardCancelParams, P as validateDevicePairRejectParams, Pt as errorShape, Q as validateNodePairListParams, Qt as verifyDeviceToken, R as validateExecApprovalRequestParams, Rt as buildDeviceAuthPayloadV3, S as validateConfigSchemaParams, St as validateTalkModeParams, T as validateCronAddParams, Tt as validateWakeParams, U as validateExecApprovalsSetParams, Ut as getPairedDevice, V as validateExecApprovalsNodeGetParams, Vt as approveDevicePairing, W as validateLogsTailParams, Wt as listDevicePairing, X as validateNodeListParams, Xt as summarizeDeviceTokens, Y as validateNodeInvokeResultParams, Yt as rotateDeviceToken, Z as validateNodePairApproveParams, Zt as updatePairedDeviceMetadata, _ as validateChatInjectParams, _t as validateSkillsBinsParams, a as validateAgentWaitParams, at as validateRequestFrame, b as validateConfigGetParams, bt as validateSkillsUpdateParams, c as validateAgentsFilesGetParams, ct as validateSendParams, d as validateAgentsListParams, dt as validateSessionsListParams, et as validateNodePairRequestParams, f as validateAgentsUpdateParams, ft as validateSessionsPatchParams, g as validateChatHistoryParams, gt as validateSessionsUsageParams, h as validateChatAbortParams, ht as validateSessionsResolveParams, i as validateAgentParams, in as verifyDeviceSignature, it as validatePushTestParams, j as validateCronUpdateParams, jt as validateWizardStatusParams, k as validateCronRunsParams, kt as validateWizardNextParams, l as validateAgentsFilesListParams, lt as validateSessionsCompactParams, m as validateChannelsStatusParams, mt as validateSessionsResetParams, n as formatValidationErrors, nt as validateNodeRenameParams, o as validateAgentsCreateParams, ot as validateSecretsResolveParams, p as validateChannelsLogoutParams, pt as validateSessionsPreviewParams, q as validateNodeEventParams, qt as requestDevicePairing, r as validateAgentIdentityParams, rn as normalizeDevicePublicKeyBase64Url, rt as validatePollParams, s as validateAgentsDeleteParams, st as validateSecretsResolveResult, tn as deriveDeviceIdFromPublicKey, tt as validateNodePairVerifyParams, u as validateAgentsFilesSetParams, ut as validateSessionsDeleteParams, v as validateChatSendParams, vt as validateSkillsInstallParams, w as validateConnectParams, wt as validateUpdateRunParams, x as validateConfigPatchParams, xt as validateTalkConfigParams, y as validateConfigApplyParams, yt as validateSkillsStatusParams, z as validateExecApprovalResolveParams, zt as normalizeDeviceMetadataForAuth } from "./client-BURktNyH.js";
+import { c as ADMIN_SCOPE$3, d as isNodeRoleMethod, n as callGateway, p as loadGatewayTlsRuntime$1, u as authorizeOperatorScopesForMethod } from "./call-DkR5OGhh.js";
 import "./pairing-token-C0LPdqAt.js";
 import "./fetch-C7NOAcr0.js";
-import { a as readChannelAllowFromStoreSync } from "./pairing-store-KII9MIZX.js";
+import { a as readChannelAllowFromStoreSync } from "./pairing-store-C1FvWpDK.js";
 import { a as mergeExecApprovalsSocketDefaults, c as readExecApprovalsSnapshot, p as saveExecApprovals, r as ensureExecApprovals, s as normalizeExecApprovals, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-B7ShUtAS.js";
-import "./exec-approvals-allowlist-BO4EEQUI.js";
-import "./exec-safe-bin-runtime-policy-CSnpe1AT.js";
-import { _ as matchSystemRunApprovalBinding, g as buildSystemRunApprovalBinding, h as resolveSystemRunApprovalRuntimeContext, m as resolveSystemRunApprovalRequestContext, v as missingSystemRunApprovalBinding, y as toSystemRunApprovalMismatchError } from "./nodes-screen-C-tuRhA1.js";
-import { a as ToolInputError } from "./target-errors-DlzVutaL.js";
-import { n as resolveSystemRunCommand } from "./system-run-command-Ny1SbbOD.js";
-import { d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, m as isDiagnosticsEnabled } from "./diagnostic-5bqrhGEp.js";
-import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-BjaANd4G.js";
-import { d as resolveCronStorePath, f as saveCronStore, u as loadCronStore } from "./send-C3Aeswif.js";
-import "./model-DYzjrxpA.js";
-import "./pi-model-discovery-Bfyzj3Lq.js";
-import "./ir-xnftdkOo.js";
+import "./exec-approvals-allowlist-Bu_oaDJC.js";
+import "./exec-safe-bin-runtime-policy-DRQwt8kj.js";
+import { _ as matchSystemRunApprovalBinding, g as buildSystemRunApprovalBinding, h as resolveSystemRunApprovalRuntimeContext, m as resolveSystemRunApprovalRequestContext, v as missingSystemRunApprovalBinding, y as toSystemRunApprovalMismatchError } from "./nodes-screen-iR_FzGNs.js";
+import { a as ToolInputError } from "./target-errors-BxwxgIDk.js";
+import { n as resolveSystemRunCommand } from "./system-run-command-BgnCyvrj.js";
+import { d as startDiagnosticHeartbeat, f as stopDiagnosticHeartbeat, m as isDiagnosticsEnabled } from "./diagnostic-CNl71AzW.js";
+import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-BCAfkt03.js";
+import { d as resolveCronStorePath, f as saveCronStore, u as loadCronStore } from "./send-FTQaNJPj.js";
+import "./model-Jy6fO59G.js";
+import "./pi-model-discovery-D63dINOn.js";
+import "./ir-BPM7rQYq.js";
 import "./render-Bwu_WxwA.js";
-import { n as resolveMessageChannelSelection } from "./channel-selection-BwbXcgj2.js";
+import { n as resolveMessageChannelSelection } from "./channel-selection-D_20zq3H.js";
 import { n as normalizePollInput } from "./polls-Dc-wk6Mc.js";
-import { i as buildChannelUiCatalog, t as applyPluginAutoEnable } from "./plugin-auto-enable-BJw5Rcbx.js";
-import "./send-tK0H9nwq.js";
-import "./outbound-attachment-BATDqOuj.js";
+import { i as buildChannelUiCatalog, t as applyPluginAutoEnable } from "./plugin-auto-enable-DMABTEO-.js";
+import "./send-Bw8LNCit.js";
+import "./outbound-attachment-WnXMTJC4.js";
 import "./delivery-queue-BHAfJDuf.js";
-import "./send-BvlkshC1.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-DCE9mhtw.js";
-import { t as getChannelActivity } from "./channel-activity-7kixHIgY.js";
-import "./tables-jZMI8hLl.js";
+import "./send-BfVgGHK6.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-CXvZtJB7.js";
+import { t as getChannelActivity } from "./channel-activity-CCjlTlcN.js";
+import "./tables-DUSFF9-W.js";
 import "./proxy-CzncRRd4.js";
-import { _ as updatePairedNodeMetadata, a as getRemoteSkillEligibility, b as getSkillsSnapshotVersion, c as refreshRemoteBinsForConnectedNodes, d as setSkillsRemoteRegistry, f as approveNodePairing, g as requestNodePairing, h as renamePairedNode, l as refreshRemoteNodeBins, m as rejectNodePairing, o as primeRemoteSkillsCache, p as listNodePairing, s as recordRemoteNodeInfo, u as removeRemoteNodeInfo, v as verifyNodeToken, x as registerSkillsChangeListener } from "./skill-commands-BEWkEml_.js";
-import { t as listAgentWorkspaceDirs } from "./workspace-dirs-B7O9BAHp.js";
-import { f as isKnownSecretTargetId, n as GATEWAY_AUTH_SURFACE_PATHS, r as evaluateGatewayAuthSurfaceStates } from "./runtime-config-collectors-jhc1wDBg.js";
-import "./command-secret-targets-BF4WzaME.js";
+import { _ as updatePairedNodeMetadata, a as getRemoteSkillEligibility, b as getSkillsSnapshotVersion, c as refreshRemoteBinsForConnectedNodes, d as setSkillsRemoteRegistry, f as approveNodePairing, g as requestNodePairing, h as renamePairedNode, l as refreshRemoteNodeBins, m as rejectNodePairing, o as primeRemoteSkillsCache, p as listNodePairing, s as recordRemoteNodeInfo, u as removeRemoteNodeInfo, v as verifyNodeToken, x as registerSkillsChangeListener } from "./skill-commands-BSRPnzXp.js";
+import { t as listAgentWorkspaceDirs } from "./workspace-dirs-B2dNahfe.js";
+import { f as isKnownSecretTargetId, n as GATEWAY_AUTH_SURFACE_PATHS, r as evaluateGatewayAuthSurfaceStates } from "./runtime-config-collectors-CKmGmTQ5.js";
+import "./command-secret-targets-WwcPUFAf.js";
 import { c as hasNonzeroUsage, i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, s as deriveSessionTotalTokens, t as discoverAllSessions } from "./session-cost-usage-B4DbYmaL.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-Bcs_1b81.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-DRk4Y5uA.js";
 import "./prompt-style-BoYH_ODs.js";
-import "./pairing-labels-MH31IXn_.js";
+import "./pairing-labels-BXfoinTP.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-CpAFclrX.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-Bhoc-n_1.js";
-import { r as resolveMemorySearchConfig } from "./manager-DBgRFvYb.js";
-import "./query-expansion-CV2Z4_mS.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-BUJHSsW6.js";
+import { r as resolveMemorySearchConfig } from "./manager-XeZQ6ws7.js";
+import "./query-expansion-Bf60ekMj.js";
 import { t as formatDocsLink } from "./links-De9M3AmU.js";
 import { n as runCommandWithRuntime } from "./cli-utils-Ca0KE-dW.js";
 import { t as formatHelpExamples } from "./help-format-BMkyP_P-.js";
 import { n as withProgress } from "./progress-BHN121Ps.js";
-import "./server-lifecycle-D6VNKVvQ.js";
+import "./server-lifecycle-yAUMTJhv.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-DL-XRpny.js";
 import { i as onHeartbeatEvent, r as getLastHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-D3fxcg9H.js";
 import { t as ensureSquidClawCliOnPath } from "./path-env-kSxA2INU.js";
 import "./runtime-guard-pMNmDPEU.js";
-import { n as waitForPortBindable, t as forceFreePortAndWait } from "./ports-6i8smH3e.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-BCU-5otB.js";
+import { n as waitForPortBindable, t as forceFreePortAndWait } from "./ports-CXjhFS7T.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-DQw98BkG.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-D0u9YNYf.js";
 import { n as inheritOptionFromParent } from "./command-options-D0bXi5Pl.js";
 import { t as WizardCancelledError } from "./prompts-knTF_LVq.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-CvsgDup6.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-DNPisWCH.js";
-import { t as isWithinDir } from "./path-safety-3wUzDqI9.js";
-import "./install-safe-path-BoN-MLvX.js";
-import "./skill-scanner-Bb5SMbCz.js";
-import { n as formatConfigIssueLines } from "./issue-format-8t_ncgFx.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-CRKsD30n.js";
+import { t as isWithinDir } from "./path-safety-BWiXz6D4.js";
+import "./install-safe-path-iCmVuopp.js";
+import "./skill-scanner-rdr9cQew.js";
+import { n as formatConfigIssueLines } from "./issue-format-sA05c-6t.js";
 import { t as buildChannelAccountSnapshot } from "./status-D98glect.js";
-import "./channels-status-issues-DeoqSoo-.js";
-import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-C9T1079O.js";
-import "./daemon-install-helpers-Cdo6Pryw.js";
-import "./systemd-zbKl2Q3E.js";
-import "./service-Dk-UMipf.js";
-import "./lifecycle-core-DKiBjZdv.js";
-import "./systemd-hints-C9_7ouv7.js";
+import "./channels-status-issues-N9kzQrD8.js";
+import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-DRqM8Vla.js";
+import "./daemon-install-helpers-a4pGEsbA.js";
+import "./systemd-fP8tz4aL.js";
+import "./service-D4y0_Q5Z.js";
+import "./lifecycle-core-DsfZ6965.js";
+import "./systemd-hints-BG_t__ZD.js";
 import { t as parsePort$1 } from "./parse-port-OBGBQwYB.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-B-8-rGND.js";
-import "./diagnostics-C0CazfQM.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-BVcrlw5o.js";
+import "./diagnostics-DZ99A0EW.js";
 import "./table-BPiDGg8F.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-CrTl2Q0i.js";
-import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-BcB-feC8.js";
-import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-Bq3iosCf.js";
-import { t as discoverGatewayBeacons } from "./bonjour-discovery-BenDpM0y.js";
-import { n as getStatusSummary, r as pickGatewaySelfPresence } from "./status-COTRBaam.js";
-import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines, u as isCronSystemEvent } from "./health-BZcB9SMe.js";
-import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-x69xyZH-.js";
-import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-C_WQRa6U.js";
-import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-Dw7Yw4OJ.js";
-import "./onboarding.secret-input-CIN4p8mg.js";
-import { t as runOnboardingWizard } from "./onboarding-wx00blu5.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-DoYzx3tH.js";
+import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-DwNtcoQg.js";
+import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-B4s_5Gn1.js";
+import { t as discoverGatewayBeacons } from "./bonjour-discovery-mtNewKSx.js";
+import { n as getStatusSummary, r as pickGatewaySelfPresence } from "./status-rb5Jz-VU.js";
+import { a as styleHealthChannelLine, c as setHeartbeatsEnabled, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines, u as isCronSystemEvent } from "./health-Cia3g9r1.js";
+import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-Bz7TCLpb.js";
+import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-e4ysObLI.js";
+import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-Ci7mtLvH.js";
+import "./onboarding.secret-input-DlDt-I2O.js";
+import { t as runOnboardingWizard } from "./onboarding-BW7AN6GP.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-C-YdARdy.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-CDJE1jBL.js";
-import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-CKTXVa3D.js";
-import "./node-service-DGPVb5ri.js";
-import "./status.update-BUql4yz-.js";
-import { t as installSkill } from "./skills-install-BLNCKuex.js";
-import { t as runGatewayUpdate } from "./update-runner-DOXPSA_-.js";
-import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-BITWyKG4.js";
+import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-CwVo8Z1X.js";
+import "./node-service-xGYkt3vb.js";
+import "./status.update-BNODJGA9.js";
+import { t as installSkill } from "./skills-install-BE04CZ6e.js";
+import { t as runGatewayUpdate } from "./update-runner-C2UrF4oZ.js";
+import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-B-k5DNiQ.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import * as fsSync from "node:fs";
 import fs from "node:fs";
@@ -168,7 +168,7 @@ import os from "node:os";
 import path from "node:path";
 import chalk from "chalk";
 import { isDeepStrictEqual } from "node:util";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import { spawn, spawnSync } from "node:child_process";
 import crypto, { createHash, randomBytes, randomUUID } from "node:crypto";
 import { z } from "zod";
@@ -1239,7 +1239,7 @@ function resolveCheckIntervalMs(cfg) {
 }
 async function readState(statePath) {
 	try {
-		const raw = await fsPromises.readFile(statePath, "utf-8");
+		const raw = await fs$1.readFile(statePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		return parsed && typeof parsed === "object" ? parsed : {};
 	} catch {
@@ -1320,7 +1320,7 @@ async function runAutoUpdateCommand(params) {
 			path.join(params.root, "dist", "index.mjs")
 		];
 		for (const candidate of candidates) try {
-			await fsPromises.access(candidate);
+			await fs$1.access(candidate);
 			argv.push(execPath, candidate, ...baseArgs);
 			break;
 		} catch {}
@@ -4451,20 +4451,20 @@ async function drainPendingWrite(filePath) {
 	if (pending) await pending.catch(() => void 0);
 }
 async function pruneIfNeeded(filePath, opts) {
-	const stat = await fsPromises.stat(filePath).catch(() => null);
+	const stat = await fs$1.stat(filePath).catch(() => null);
 	if (!stat || stat.size <= opts.maxBytes) return;
-	const lines = (await fsPromises.readFile(filePath, "utf-8").catch(() => "")).split("\n").map((l) => l.trim()).filter(Boolean);
+	const lines = (await fs$1.readFile(filePath, "utf-8").catch(() => "")).split("\n").map((l) => l.trim()).filter(Boolean);
 	const kept = lines.slice(Math.max(0, lines.length - opts.keepLines));
 	const { randomBytes } = await import("node:crypto");
 	const tmp = `${filePath}.${process.pid}.${randomBytes(8).toString("hex")}.tmp`;
-	await fsPromises.writeFile(tmp, `${kept.join("\n")}\n`, "utf-8");
-	await fsPromises.rename(tmp, filePath);
+	await fs$1.writeFile(tmp, `${kept.join("\n")}\n`, "utf-8");
+	await fs$1.rename(tmp, filePath);
 }
 async function appendCronRunLog(filePath, entry, opts) {
 	const resolved = path.resolve(filePath);
 	const next = (writesByPath.get(resolved) ?? Promise.resolve()).catch(() => void 0).then(async () => {
-		await fsPromises.mkdir(path.dirname(resolved), { recursive: true });
-		await fsPromises.appendFile(resolved, `${JSON.stringify(entry)}\n`, "utf-8");
+		await fs$1.mkdir(path.dirname(resolved), { recursive: true });
+		await fs$1.appendFile(resolved, `${JSON.stringify(entry)}\n`, "utf-8");
 		await pruneIfNeeded(resolved, {
 			maxBytes: opts?.maxBytes ?? DEFAULT_CRON_RUN_LOG_MAX_BYTES,
 			keepLines: opts?.keepLines ?? DEFAULT_CRON_RUN_LOG_KEEP_LINES
@@ -4558,7 +4558,7 @@ function filterRunLogEntries(entries, opts) {
 async function readCronRunLogEntriesPage(filePath, opts) {
 	await drainPendingWrite(filePath);
 	const limit = Math.max(1, Math.min(200, Math.floor(opts?.limit ?? 50)));
-	const raw = await fsPromises.readFile(path.resolve(filePath), "utf-8").catch(() => "");
+	const raw = await fs$1.readFile(path.resolve(filePath), "utf-8").catch(() => "");
 	const statuses = normalizeRunStatuses(opts);
 	const deliveryStatuses = normalizeDeliveryStatuses(opts);
 	const query = opts?.query?.trim().toLowerCase() ?? "";
@@ -4594,7 +4594,7 @@ async function readCronRunLogEntriesPageAll(opts) {
 	const query = opts.query?.trim().toLowerCase() ?? "";
 	const sortDir = opts.sortDir === "asc" ? "asc" : "desc";
 	const runsDir = path.resolve(path.dirname(path.resolve(opts.storePath)), "runs");
-	const jsonlFiles = (await fsPromises.readdir(runsDir, { withFileTypes: true }).catch(() => [])).filter((entry) => entry.isFile() && entry.name.endsWith(".jsonl")).map((entry) => path.join(runsDir, entry.name));
+	const jsonlFiles = (await fs$1.readdir(runsDir, { withFileTypes: true }).catch(() => [])).filter((entry) => entry.isFile() && entry.name.endsWith(".jsonl")).map((entry) => path.join(runsDir, entry.name));
 	if (jsonlFiles.length === 0) return {
 		entries: [],
 		total: 0,
@@ -4605,7 +4605,7 @@ async function readCronRunLogEntriesPageAll(opts) {
 	};
 	await Promise.all(jsonlFiles.map((f) => drainPendingWrite(f)));
 	const filtered = filterRunLogEntries((await Promise.all(jsonlFiles.map(async (filePath) => {
-		return parseAllRunLogEntries(await fsPromises.readFile(filePath, "utf-8").catch(() => ""));
+		return parseAllRunLogEntries(await fs$1.readFile(filePath, "utf-8").catch(() => ""));
 	}))).flat(), {
 		statuses,
 		deliveryStatuses,
@@ -10013,7 +10013,7 @@ function resolveWorkspaceFilePathResultOrThrow(params) {
 }
 async function resolveWorkspaceRealPath(workspaceDir) {
 	try {
-		return await fsPromises.realpath(workspaceDir);
+		return await fs$1.realpath(workspaceDir);
 	} catch {
 		return path.resolve(workspaceDir);
 	}
@@ -10042,7 +10042,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 	};
 	let candidateLstat;
 	try {
-		candidateLstat = await fsPromises.lstat(candidatePath);
+		candidateLstat = await fs$1.lstat(candidatePath);
 	} catch (err) {
 		return resolveWorkspaceFilePathResultOrThrow({
 			error: err,
@@ -10053,7 +10053,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 	if (candidateLstat.isSymbolicLink()) {
 		let targetReal;
 		try {
-			targetReal = await fsPromises.realpath(candidatePath);
+			targetReal = await fs$1.realpath(candidatePath);
 		} catch (err) {
 			return resolveWorkspaceFilePathResultOrThrow({
 				error: err,
@@ -10063,7 +10063,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 		}
 		let targetStat;
 		try {
-			targetStat = await fsPromises.stat(targetReal);
+			targetStat = await fs$1.stat(targetReal);
 		} catch (err) {
 			return resolveWorkspaceFilePathResultOrThrow({
 				error: err,
@@ -10101,13 +10101,13 @@ async function resolveAgentWorkspaceFilePath(params) {
 	return {
 		kind: "ready",
 		requestPath,
-		ioPath: await fsPromises.realpath(candidatePath).catch(() => candidatePath),
+		ioPath: await fs$1.realpath(candidatePath).catch(() => candidatePath),
 		workspaceReal
 	};
 }
 async function statFileSafely(filePath) {
 	try {
-		const [stat, lstat] = await Promise.all([fsPromises.stat(filePath), fsPromises.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([fs$1.stat(filePath), fs$1.lstat(filePath)]);
 		if (lstat.isSymbolicLink() || !stat.isFile()) return null;
 		if (stat.nlink > 1) return null;
 		if (!sameFileIdentity(stat, lstat)) return null;
@@ -10201,7 +10201,7 @@ function respondAgentNotFound(respond, agentId) {
 async function moveToTrashBestEffort(pathname) {
 	if (!pathname) return;
 	try {
-		await fsPromises.access(pathname);
+		await fs$1.access(pathname);
 	} catch {
 		return;
 	}
@@ -10277,7 +10277,7 @@ const agentsHandlers = {
 			dir: workspaceDir,
 			ensureBootstrapFiles: !Boolean(nextConfig.agents?.defaults?.skipBootstrap)
 		});
-		await fsPromises.mkdir(resolveSessionTranscriptsDirForAgent(agentId), { recursive: true });
+		await fs$1.mkdir(resolveSessionTranscriptsDirForAgent(agentId), { recursive: true });
 		await writeConfigFile(nextConfig);
 		const safeName = sanitizeIdentityLine(rawName);
 		const emoji = resolveOptionalStringParam(params.emoji);
@@ -10290,7 +10290,7 @@ const agentsHandlers = {
 			...avatar ? [`- Avatar: ${sanitizeIdentityLine(avatar)}`] : [],
 			""
 		];
-		await fsPromises.appendFile(identityPath, lines.join("\n"), "utf-8");
+		await fs$1.appendFile(identityPath, lines.join("\n"), "utf-8");
 		respond(true, {
 			ok: true,
 			agentId,
@@ -10325,9 +10325,9 @@ const agentsHandlers = {
 		});
 		if (avatar) {
 			const workspace = workspaceDir ?? resolveAgentWorkspaceDir(nextConfig, agentId);
-			await fsPromises.mkdir(workspace, { recursive: true });
+			await fs$1.mkdir(workspace, { recursive: true });
 			const identityPath = path.join(workspace, DEFAULT_IDENTITY_FILENAME);
-			await fsPromises.appendFile(identityPath, `\n- Avatar: ${sanitizeIdentityLine(avatar)}\n`, "utf-8");
+			await fs$1.appendFile(identityPath, `\n- Avatar: ${sanitizeIdentityLine(avatar)}\n`, "utf-8");
 		}
 		respond(true, {
 			ok: true,
@@ -10451,7 +10451,7 @@ const agentsHandlers = {
 		const resolved = resolveAgentWorkspaceFileOrRespondError(params, respond);
 		if (!resolved) return;
 		const { agentId, workspaceDir, name } = resolved;
-		await fsPromises.mkdir(workspaceDir, { recursive: true });
+		await fs$1.mkdir(workspaceDir, { recursive: true });
 		const filePath = path.join(workspaceDir, name);
 		const resolvedPath = await resolveWorkspaceFilePathOrRespond({
 			respond,
@@ -12782,14 +12782,14 @@ function isRollingLogFile(file) {
 	return ROLLING_LOG_RE.test(path.basename(file));
 }
 async function resolveLogFile(file) {
-	if (await fsPromises.stat(file).catch(() => null)) return file;
+	if (await fs$1.stat(file).catch(() => null)) return file;
 	if (!isRollingLogFile(file)) return file;
 	const dir = path.dirname(file);
-	const entries = await fsPromises.readdir(dir, { withFileTypes: true }).catch(() => null);
+	const entries = await fs$1.readdir(dir, { withFileTypes: true }).catch(() => null);
 	if (!entries) return file;
 	return (await Promise.all(entries.filter((entry) => entry.isFile() && ROLLING_LOG_RE.test(entry.name)).map(async (entry) => {
 		const fullPath = path.join(dir, entry.name);
-		const fileStat = await fsPromises.stat(fullPath).catch(() => null);
+		const fileStat = await fs$1.stat(fullPath).catch(() => null);
 		return fileStat ? {
 			path: fullPath,
 			mtimeMs: fileStat.mtimeMs
@@ -12797,7 +12797,7 @@ async function resolveLogFile(file) {
 	}))).filter((entry) => Boolean(entry)).toSorted((a, b) => b.mtimeMs - a.mtimeMs)[0]?.path ?? file;
 }
 async function readLogSlice(params) {
-	const stat = await fsPromises.stat(params.file).catch(() => null);
+	const stat = await fs$1.stat(params.file).catch(() => null);
 	if (!stat) return {
 		cursor: 0,
 		size: 0,
@@ -12835,7 +12835,7 @@ async function readLogSlice(params) {
 		truncated,
 		reset
 	};
-	const handle = await fsPromises.open(params.file, "r");
+	const handle = await fs$1.open(params.file, "r");
 	try {
 		let prefix = "";
 		if (start > 0) {
@@ -13817,7 +13817,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-DWQhNK-0.js");
+			const { handleNodeEvent } = await import("./server-node-events-qU3NTncQ.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -16848,7 +16848,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.SQUIDCLAW_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.SQUIDCLAW_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./server-OfKJG6Bo.js");
+	const mod = override ? await import(override) : await import("./server-Q9nnn04D.js");
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -17076,7 +17076,7 @@ async function resolveFileWithinRoot(rootReal, urlPath) {
 	if (normalized.endsWith("/")) return await tryOpen(path.posix.join(rel, "index.html"));
 	const candidate = path.join(rootReal, rel);
 	try {
-		const st = await fsPromises.lstat(candidate);
+		const st = await fs$1.lstat(candidate);
 		if (st.isSymbolicLink()) return null;
 		if (st.isDirectory()) return await tryOpen(path.posix.join(rel, "index.html"));
 	} catch {}
@@ -17113,8 +17113,8 @@ async function resolveA2uiRoot() {
 	for (const dir of candidates) try {
 		const indexPath = path.join(dir, "index.html");
 		const bundlePath = path.join(dir, "a2ui.bundle.js");
-		await fsPromises.stat(indexPath);
-		await fsPromises.stat(bundlePath);
+		await fs$1.stat(indexPath);
+		await fs$1.stat(bundlePath);
 		return dir;
 	} catch {}
 	return null;
@@ -17123,7 +17123,7 @@ async function resolveA2uiRootReal() {
 	if (cachedA2uiRootReal !== void 0 && (cachedA2uiRootReal !== null || Date.now() - cachedA2uiResolvedAtMs < A2UI_ROOT_RETRY_NULL_AFTER_MS)) return cachedA2uiRootReal;
 	if (!resolvingA2uiRoot) resolvingA2uiRoot = (async () => {
 		const root = await resolveA2uiRoot();
-		cachedA2uiRootReal = root ? await fsPromises.realpath(root) : null;
+		cachedA2uiRootReal = root ? await fs$1.realpath(root) : null;
 		cachedA2uiResolvedAtMs = Date.now();
 		resolvingA2uiRoot = null;
 		return cachedA2uiRootReal;
@@ -17344,13 +17344,13 @@ function normalizeBasePath(rawPath) {
 }
 async function prepareCanvasRoot(rootDir) {
 	await ensureDir(rootDir);
-	const rootReal = await fsPromises.realpath(rootDir);
+	const rootReal = await fs$1.realpath(rootDir);
 	try {
 		const indexPath = path.join(rootReal, "index.html");
-		await fsPromises.stat(indexPath);
+		await fs$1.stat(indexPath);
 	} catch {
 		try {
-			await fsPromises.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
+			await fs$1.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
 		} catch {}
 	}
 	return rootReal;
@@ -20396,7 +20396,7 @@ async function resolveGatewayOwnerStatus(pid, payload, platform, port) {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fsPromises.readFile(lockPath, "utf8");
+		const raw = await fs$1.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number") return null;
 		if (typeof parsed.createdAt !== "string") return null;
@@ -20431,11 +20431,11 @@ async function acquireGatewayLock(opts = {}) {
 	const platform = opts.platform ?? process.platform;
 	const port = opts.port;
 	const { lockPath, configPath } = resolveGatewayLockPath(env);
-	await fsPromises.mkdir(path.dirname(lockPath), { recursive: true });
+	await fs$1.mkdir(path.dirname(lockPath), { recursive: true });
 	const startedAt = Date.now();
 	let lastPayload = null;
 	while (Date.now() - startedAt < timeoutMs) try {
-		const handle = await fsPromises.open(lockPath, "wx");
+		const handle = await fs$1.open(lockPath, "wx");
 		const startTime = platform === "linux" ? readLinuxStartTime(process.pid) : null;
 		const payload = {
 			pid: process.pid,
@@ -20449,7 +20449,7 @@ async function acquireGatewayLock(opts = {}) {
 			configPath,
 			release: async () => {
 				await handle.close().catch(() => void 0);
-				await fsPromises.rm(lockPath, { force: true });
+				await fs$1.rm(lockPath, { force: true });
 			}
 		};
 	} catch (err) {
@@ -20458,7 +20458,7 @@ async function acquireGatewayLock(opts = {}) {
 		const ownerPid = lastPayload?.pid;
 		const ownerStatus = ownerPid ? await resolveGatewayOwnerStatus(ownerPid, lastPayload, platform, port) : "unknown";
 		if (ownerStatus === "dead" && ownerPid) {
-			await fsPromises.rm(lockPath, { force: true });
+			await fs$1.rm(lockPath, { force: true });
 			continue;
 		}
 		if (ownerStatus !== "alive") {
@@ -20468,13 +20468,13 @@ async function acquireGatewayLock(opts = {}) {
 				stale = Number.isFinite(createdAt) ? Date.now() - createdAt > staleMs : false;
 			}
 			if (!stale) try {
-				const st = await fsPromises.stat(lockPath);
+				const st = await fs$1.stat(lockPath);
 				stale = Date.now() - st.mtimeMs > staleMs;
 			} catch {
 				stale = false;
 			}
 			if (stale) {
-				await fsPromises.rm(lockPath, { force: true });
+				await fs$1.rm(lockPath, { force: true });
 				continue;
 			}
 		}
@@ -22826,7 +22826,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	if (!minimalTestGateway) cron.start().catch((err) => logCron.error(`failed to start: ${String(err)}`));
 	if (!minimalTestGateway) (async () => {
 		const { recoverPendingDeliveries } = await import("./delivery-queue-BHAfJDuf.js").then((n) => n.n);
-		const { deliverOutboundPayloads } = await import("./deliver-CVl43oM1.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-B1sllFkh.js").then((n) => n.n);
 		await recoverPendingDeliveries({
 			deliver: deliverOutboundPayloads,
 			log: log.child("delivery-recovery"),