visionclaw 0.1.185 → 0.1.186

package/dist-agent/bundle.cjs

@@ -20414,7 +20414,7 @@ var require_prompts3 = __commonJS({
 
 // dist/utils/version-check.js
 function isBundled() {
-  const v15 = "0.1.185";
+  const v15 = "0.1.186";
   return typeof v15 === "string" && v15 !== "undefined";
 }
 function getPackageRoot() {
@@ -20431,7 +20431,7 @@ function getInstallationInfo() {
   };
 }
 function getCurrentVersion() {
-  const bundledVersion = "0.1.185";
+  const bundledVersion = "0.1.186";
   if (bundledVersion && bundledVersion !== "undefined") {
     return bundledVersion;
   }
@@ -29748,22 +29748,22 @@ var require_crypto2 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.NodeCrypto = void 0;
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var NodeCrypto = class {
       async sha256DigestBase64(str3) {
-        return crypto19.createHash("sha256").update(str3).digest("base64");
+        return crypto20.createHash("sha256").update(str3).digest("base64");
       }
       randomBytesBase64(count) {
-        return crypto19.randomBytes(count).toString("base64");
+        return crypto20.randomBytes(count).toString("base64");
       }
       async verify(pubkey, data2, signature) {
-        const verifier = crypto19.createVerify("RSA-SHA256");
+        const verifier = crypto20.createVerify("RSA-SHA256");
         verifier.update(data2);
         verifier.end();
         return verifier.verify(pubkey, signature, "base64");
       }
       async sign(privateKey, data2) {
-        const signer = crypto19.createSign("RSA-SHA256");
+        const signer = crypto20.createSign("RSA-SHA256");
         signer.update(data2);
         signer.end();
         return signer.sign(privateKey, "base64");
@@ -29781,7 +29781,7 @@ var require_crypto2 = __commonJS({
        *   string in hexadecimal encoding.
        */
       async sha256DigestHex(str3) {
-        return crypto19.createHash("sha256").update(str3).digest("hex");
+        return crypto20.createHash("sha256").update(str3).digest("hex");
       }
       /**
        * Computes the HMAC hash of a message using the provided crypto key and the
@@ -29793,7 +29793,7 @@ var require_crypto2 = __commonJS({
        */
       async signWithHmacSha256(key, msg) {
         const cryptoKey = typeof key === "string" ? key : toBuffer(key);
-        return toArrayBuffer(crypto19.createHmac("sha256", cryptoKey).update(msg).digest());
+        return toArrayBuffer(crypto20.createHmac("sha256", cryptoKey).update(msg).digest());
       }
     };
     exports2.NodeCrypto = NodeCrypto;
@@ -30571,10 +30571,10 @@ var require_oauth2client = __commonJS({
        * https://github.com/googleapis/google-auth-library-nodejs/blob/main/samples/oauth2-codeVerifier.js
        */
       async generateCodeVerifierAsync() {
-        const crypto19 = (0, crypto_1.createCrypto)();
-        const randomString2 = crypto19.randomBytesBase64(96);
+        const crypto20 = (0, crypto_1.createCrypto)();
+        const randomString2 = crypto20.randomBytesBase64(96);
         const codeVerifier = randomString2.replace(/\+/g, "~").replace(/=/g, "_").replace(/\//g, "-");
-        const unencodedCodeChallenge = await crypto19.sha256DigestBase64(codeVerifier);
+        const unencodedCodeChallenge = await crypto20.sha256DigestBase64(codeVerifier);
         const codeChallenge = unencodedCodeChallenge.split("=")[0].replace(/\+/g, "-").replace(/\//g, "_");
         return { codeVerifier, codeChallenge };
       }
@@ -31018,7 +31018,7 @@ var require_oauth2client = __commonJS({
        * @return Returns a promise resolving to LoginTicket on verification.
        */
       async verifySignedJwtWithCertsAsync(jwt2, certs, requiredAudience, issuers, maxExpiry) {
-        const crypto19 = (0, crypto_1.createCrypto)();
+        const crypto20 = (0, crypto_1.createCrypto)();
         if (!maxExpiry) {
           maxExpiry = _OAuth2Client.DEFAULT_MAX_TOKEN_LIFETIME_SECS_;
         }
@@ -31031,7 +31031,7 @@ var require_oauth2client = __commonJS({
         let envelope;
         let payload2;
         try {
-          envelope = JSON.parse(crypto19.decodeBase64StringUtf8(segments[0]));
+          envelope = JSON.parse(crypto20.decodeBase64StringUtf8(segments[0]));
         } catch (err7) {
           if (err7 instanceof Error) {
             err7.message = `Can't parse token envelope: ${segments[0]}': ${err7.message}`;
@@ -31042,7 +31042,7 @@ var require_oauth2client = __commonJS({
           throw new Error("Can't parse token envelope: " + segments[0]);
         }
         try {
-          payload2 = JSON.parse(crypto19.decodeBase64StringUtf8(segments[1]));
+          payload2 = JSON.parse(crypto20.decodeBase64StringUtf8(segments[1]));
         } catch (err7) {
           if (err7 instanceof Error) {
             err7.message = `Can't parse token payload '${segments[0]}`;
@@ -31059,7 +31059,7 @@ var require_oauth2client = __commonJS({
         if (envelope.alg === "ES256") {
           signature = formatEcdsa.joseToDer(signature, "ES256").toString("base64");
         }
-        const verified = await crypto19.verify(cert, signed, signature);
+        const verified = await crypto20.verify(cert, signed, signature);
         if (!verified) {
           throw new Error("Invalid token signature: " + jwt2);
         }
@@ -31427,14 +31427,14 @@ var require_buffer_equal_constant_time = __commonJS({
 var require_jwa = __commonJS({
   "node_modules/.pnpm/jwa@2.0.1/node_modules/jwa/index.js"(exports2, module2) {
     var Buffer5 = require_safe_buffer().Buffer;
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var formatEcdsa = require_ecdsa_sig_formatter();
     var util2 = require("util");
     var MSG_INVALID_ALGORITHM = '"%s" is not a valid algorithm.\n  Supported algorithms are:\n  "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES384", "ES512" and "none".';
     var MSG_INVALID_SECRET = "secret must be a string or buffer";
     var MSG_INVALID_VERIFIER_KEY = "key must be a string or a buffer";
     var MSG_INVALID_SIGNER_KEY = "key must be a string, a buffer or an object";
-    var supportsKeyObjects = typeof crypto19.createPublicKey === "function";
+    var supportsKeyObjects = typeof crypto20.createPublicKey === "function";
     if (supportsKeyObjects) {
       MSG_INVALID_VERIFIER_KEY += " or a KeyObject";
       MSG_INVALID_SECRET += "or a KeyObject";
@@ -31524,17 +31524,17 @@ var require_jwa = __commonJS({
       return function sign(thing, secret) {
         checkIsSecretKey(secret);
         thing = normalizeInput2(thing);
-        var hmac3 = crypto19.createHmac("sha" + bits, secret);
+        var hmac3 = crypto20.createHmac("sha" + bits, secret);
         var sig = (hmac3.update(thing), hmac3.digest("base64"));
         return fromBase6410(sig);
       };
     }
     var bufferEqual;
-    var timingSafeEqual = "timingSafeEqual" in crypto19 ? function timingSafeEqual2(a11, b11) {
+    var timingSafeEqual = "timingSafeEqual" in crypto20 ? function timingSafeEqual2(a11, b11) {
       if (a11.byteLength !== b11.byteLength) {
         return false;
       }
-      return crypto19.timingSafeEqual(a11, b11);
+      return crypto20.timingSafeEqual(a11, b11);
     } : function timingSafeEqual2(a11, b11) {
       if (!bufferEqual) {
         bufferEqual = require_buffer_equal_constant_time();
@@ -31551,7 +31551,7 @@ var require_jwa = __commonJS({
       return function sign(thing, privateKey) {
         checkIsPrivateKey(privateKey);
         thing = normalizeInput2(thing);
-        var signer = crypto19.createSign("RSA-SHA" + bits);
+        var signer = crypto20.createSign("RSA-SHA" + bits);
         var sig = (signer.update(thing), signer.sign(privateKey, "base64"));
         return fromBase6410(sig);
       };
@@ -31561,7 +31561,7 @@ var require_jwa = __commonJS({
         checkIsPublicKey(publicKey);
         thing = normalizeInput2(thing);
         signature = toBase6410(signature);
-        var verifier = crypto19.createVerify("RSA-SHA" + bits);
+        var verifier = crypto20.createVerify("RSA-SHA" + bits);
         verifier.update(thing);
         return verifier.verify(publicKey, signature, "base64");
       };
@@ -31570,11 +31570,11 @@ var require_jwa = __commonJS({
       return function sign(thing, privateKey) {
         checkIsPrivateKey(privateKey);
         thing = normalizeInput2(thing);
-        var signer = crypto19.createSign("RSA-SHA" + bits);
+        var signer = crypto20.createSign("RSA-SHA" + bits);
         var sig = (signer.update(thing), signer.sign({
           key: privateKey,
-          padding: crypto19.constants.RSA_PKCS1_PSS_PADDING,
-          saltLength: crypto19.constants.RSA_PSS_SALTLEN_DIGEST
+          padding: crypto20.constants.RSA_PKCS1_PSS_PADDING,
+          saltLength: crypto20.constants.RSA_PSS_SALTLEN_DIGEST
         }, "base64"));
         return fromBase6410(sig);
       };
@@ -31584,12 +31584,12 @@ var require_jwa = __commonJS({
         checkIsPublicKey(publicKey);
         thing = normalizeInput2(thing);
         signature = toBase6410(signature);
-        var verifier = crypto19.createVerify("RSA-SHA" + bits);
+        var verifier = crypto20.createVerify("RSA-SHA" + bits);
         verifier.update(thing);
         return verifier.verify({
           key: publicKey,
-          padding: crypto19.constants.RSA_PKCS1_PSS_PADDING,
-          saltLength: crypto19.constants.RSA_PSS_SALTLEN_DIGEST
+          padding: crypto20.constants.RSA_PKCS1_PSS_PADDING,
+          saltLength: crypto20.constants.RSA_PSS_SALTLEN_DIGEST
         }, signature, "base64");
       };
     }
@@ -33747,14 +33747,14 @@ var require_awsrequestsigner = __commonJS({
       }
     };
     exports2.AwsRequestSigner = AwsRequestSigner;
-    async function sign(crypto19, key, msg) {
-      return await crypto19.signWithHmacSha256(key, msg);
-    }
-    async function getSigningKey(crypto19, key, dateStamp, region, serviceName) {
-      const kDate = await sign(crypto19, `AWS4${key}`, dateStamp);
-      const kRegion = await sign(crypto19, kDate, region);
-      const kService = await sign(crypto19, kRegion, serviceName);
-      const kSigning = await sign(crypto19, kService, "aws4_request");
+    async function sign(crypto20, key, msg) {
+      return await crypto20.signWithHmacSha256(key, msg);
+    }
+    async function getSigningKey(crypto20, key, dateStamp, region, serviceName) {
+      const kDate = await sign(crypto20, `AWS4${key}`, dateStamp);
+      const kRegion = await sign(crypto20, kDate, region);
+      const kService = await sign(crypto20, kRegion, serviceName);
+      const kSigning = await sign(crypto20, kService, "aws4_request");
       return kSigning;
     }
     async function generateAuthenticationHeaderMap(options3) {
@@ -35339,24 +35339,24 @@ var require_googleauth = __commonJS({
           const signed = await client.sign(data2);
           return signed.signedBlob;
         }
-        const crypto19 = (0, crypto_1.createCrypto)();
+        const crypto20 = (0, crypto_1.createCrypto)();
         if (client instanceof jwtclient_1.JWT && client.key) {
-          const sign = await crypto19.sign(client.key, data2);
+          const sign = await crypto20.sign(client.key, data2);
           return sign;
         }
         const creds = await this.getCredentials();
         if (!creds.client_email) {
           throw new Error("Cannot sign data without `client_email`.");
         }
-        return this.signBlob(crypto19, creds.client_email, data2, endpoint);
+        return this.signBlob(crypto20, creds.client_email, data2, endpoint);
       }
-      async signBlob(crypto19, emailOrUniqueId, data2, endpoint) {
+      async signBlob(crypto20, emailOrUniqueId, data2, endpoint) {
         const url2 = new URL(endpoint + `${emailOrUniqueId}:signBlob`);
         const res = await this.request({
           method: "POST",
           url: url2.href,
           data: {
-            payload: crypto19.encodeBase64StringUtf8(data2)
+            payload: crypto20.encodeBase64StringUtf8(data2)
           },
           retry: true,
           retryConfig: {
@@ -705612,7 +705612,7 @@ var require_dist_cjs53 = __commonJS({
     var utilBufferFrom = require_dist_cjs7();
     var utilUtf8 = require_dist_cjs8();
     var buffer = require("buffer");
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var Hash5 = class {
       algorithmIdentifier;
       secret;
@@ -705629,7 +705629,7 @@ var require_dist_cjs53 = __commonJS({
         return Promise.resolve(this.hash.digest());
       }
       reset() {
-        this.hash = this.secret ? crypto19.createHmac(this.algorithmIdentifier, castSourceData(this.secret)) : crypto19.createHash(this.algorithmIdentifier);
+        this.hash = this.secret ? crypto20.createHmac(this.algorithmIdentifier, castSourceData(this.secret)) : crypto20.createHash(this.algorithmIdentifier);
       }
     };
     function castSourceData(toCast, encoding) {
@@ -781502,22 +781502,22 @@ var require_crypto5 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.NodeCrypto = void 0;
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var NodeCrypto = class {
       async sha256DigestBase64(str3) {
-        return crypto19.createHash("sha256").update(str3).digest("base64");
+        return crypto20.createHash("sha256").update(str3).digest("base64");
       }
       randomBytesBase64(count) {
-        return crypto19.randomBytes(count).toString("base64");
+        return crypto20.randomBytes(count).toString("base64");
       }
       async verify(pubkey, data2, signature) {
-        const verifier = crypto19.createVerify("RSA-SHA256");
+        const verifier = crypto20.createVerify("RSA-SHA256");
         verifier.update(data2);
         verifier.end();
         return verifier.verify(pubkey, signature, "base64");
       }
       async sign(privateKey, data2) {
-        const signer = crypto19.createSign("RSA-SHA256");
+        const signer = crypto20.createSign("RSA-SHA256");
         signer.update(data2);
         signer.end();
         return signer.sign(privateKey, "base64");
@@ -781535,7 +781535,7 @@ var require_crypto5 = __commonJS({
        *   string in hexadecimal encoding.
        */
       async sha256DigestHex(str3) {
-        return crypto19.createHash("sha256").update(str3).digest("hex");
+        return crypto20.createHash("sha256").update(str3).digest("hex");
       }
       /**
        * Computes the HMAC hash of a message using the provided crypto key and the
@@ -781547,7 +781547,7 @@ var require_crypto5 = __commonJS({
        */
       async signWithHmacSha256(key, msg) {
         const cryptoKey = typeof key === "string" ? key : toBuffer(key);
-        return toArrayBuffer(crypto19.createHmac("sha256", cryptoKey).update(msg).digest());
+        return toArrayBuffer(crypto20.createHmac("sha256", cryptoKey).update(msg).digest());
       }
     };
     exports2.NodeCrypto = NodeCrypto;
@@ -782240,10 +782240,10 @@ var require_oauth2client2 = __commonJS({
        * https://github.com/googleapis/google-auth-library-nodejs/blob/main/samples/oauth2-codeVerifier.js
        */
       async generateCodeVerifierAsync() {
-        const crypto19 = (0, crypto_1.createCrypto)();
-        const randomString2 = crypto19.randomBytesBase64(96);
+        const crypto20 = (0, crypto_1.createCrypto)();
+        const randomString2 = crypto20.randomBytesBase64(96);
         const codeVerifier = randomString2.replace(/\+/g, "~").replace(/=/g, "_").replace(/\//g, "-");
-        const unencodedCodeChallenge = await crypto19.sha256DigestBase64(codeVerifier);
+        const unencodedCodeChallenge = await crypto20.sha256DigestBase64(codeVerifier);
         const codeChallenge = unencodedCodeChallenge.split("=")[0].replace(/\+/g, "-").replace(/\//g, "_");
         return { codeVerifier, codeChallenge };
       }
@@ -782684,7 +782684,7 @@ var require_oauth2client2 = __commonJS({
        * @return Returns a promise resolving to LoginTicket on verification.
        */
       async verifySignedJwtWithCertsAsync(jwt2, certs, requiredAudience, issuers, maxExpiry) {
-        const crypto19 = (0, crypto_1.createCrypto)();
+        const crypto20 = (0, crypto_1.createCrypto)();
         if (!maxExpiry) {
           maxExpiry = _OAuth2Client.DEFAULT_MAX_TOKEN_LIFETIME_SECS_;
         }
@@ -782697,7 +782697,7 @@ var require_oauth2client2 = __commonJS({
         let envelope;
         let payload2;
         try {
-          envelope = JSON.parse(crypto19.decodeBase64StringUtf8(segments[0]));
+          envelope = JSON.parse(crypto20.decodeBase64StringUtf8(segments[0]));
         } catch (err7) {
           if (err7 instanceof Error) {
             err7.message = `Can't parse token envelope: ${segments[0]}': ${err7.message}`;
@@ -782708,7 +782708,7 @@ var require_oauth2client2 = __commonJS({
           throw new Error("Can't parse token envelope: " + segments[0]);
         }
         try {
-          payload2 = JSON.parse(crypto19.decodeBase64StringUtf8(segments[1]));
+          payload2 = JSON.parse(crypto20.decodeBase64StringUtf8(segments[1]));
         } catch (err7) {
           if (err7 instanceof Error) {
             err7.message = `Can't parse token payload '${segments[0]}`;
@@ -782725,7 +782725,7 @@ var require_oauth2client2 = __commonJS({
         if (envelope.alg === "ES256") {
           signature = formatEcdsa.joseToDer(signature, "ES256").toString("base64");
         }
-        const verified = await crypto19.verify(cert, signed, signature);
+        const verified = await crypto20.verify(cert, signed, signature);
         if (!verified) {
           throw new Error("Invalid token signature: " + jwt2);
         }
@@ -785295,14 +785295,14 @@ var require_awsrequestsigner2 = __commonJS({
       }
     };
     exports2.AwsRequestSigner = AwsRequestSigner;
-    async function sign(crypto19, key, msg) {
-      return await crypto19.signWithHmacSha256(key, msg);
-    }
-    async function getSigningKey(crypto19, key, dateStamp, region, serviceName) {
-      const kDate = await sign(crypto19, `AWS4${key}`, dateStamp);
-      const kRegion = await sign(crypto19, kDate, region);
-      const kService = await sign(crypto19, kRegion, serviceName);
-      const kSigning = await sign(crypto19, kService, "aws4_request");
+    async function sign(crypto20, key, msg) {
+      return await crypto20.signWithHmacSha256(key, msg);
+    }
+    async function getSigningKey(crypto20, key, dateStamp, region, serviceName) {
+      const kDate = await sign(crypto20, `AWS4${key}`, dateStamp);
+      const kRegion = await sign(crypto20, kDate, region);
+      const kService = await sign(crypto20, kRegion, serviceName);
+      const kSigning = await sign(crypto20, kService, "aws4_request");
       return kSigning;
     }
     async function generateAuthenticationHeaderMap(options3) {
@@ -787021,24 +787021,24 @@ var require_googleauth2 = __commonJS({
           const signed = await client.sign(data2);
           return signed.signedBlob;
         }
-        const crypto19 = (0, crypto_1.createCrypto)();
+        const crypto20 = (0, crypto_1.createCrypto)();
         if (client instanceof jwtclient_1.JWT && client.key) {
-          const sign = await crypto19.sign(client.key, data2);
+          const sign = await crypto20.sign(client.key, data2);
           return sign;
         }
         const creds = await this.getCredentials();
         if (!creds.client_email) {
           throw new Error("Cannot sign data without `client_email`.");
         }
-        return this.signBlob(crypto19, creds.client_email, data2, endpoint);
+        return this.signBlob(crypto20, creds.client_email, data2, endpoint);
       }
-      async signBlob(crypto19, emailOrUniqueId, data2, endpoint) {
+      async signBlob(crypto20, emailOrUniqueId, data2, endpoint) {
         const url2 = new URL(endpoint + `${emailOrUniqueId}:signBlob`);
         const res = await this.request({
           method: "POST",
           url: url2.href,
           data: {
-            payload: crypto19.encodeBase64StringUtf8(data2)
+            payload: crypto20.encodeBase64StringUtf8(data2)
           },
           retry: true,
           retryConfig: {
@@ -803498,13 +803498,13 @@ var init_node = __esm({
       }
     };
     uuid4Internal = function() {
-      const { crypto: crypto19 } = globalThis;
-      if (crypto19 === null || crypto19 === void 0 ? void 0 : crypto19.randomUUID) {
-        uuid4Internal = crypto19.randomUUID.bind(crypto19);
-        return crypto19.randomUUID();
+      const { crypto: crypto20 } = globalThis;
+      if (crypto20 === null || crypto20 === void 0 ? void 0 : crypto20.randomUUID) {
+        uuid4Internal = crypto20.randomUUID.bind(crypto20);
+        return crypto20.randomUUID();
       }
       const u82 = new Uint8Array(1);
-      const randomByte = crypto19 ? () => crypto19.getRandomValues(u82)[0] : () => Math.random() * 255 & 255;
+      const randomByte = crypto20 ? () => crypto20.getRandomValues(u82)[0] : () => Math.random() * 255 & 255;
       return "10000000-1000-4000-8000-100000000000".replace(/[018]/g, (c12) => (+c12 ^ randomByte() & 15 >> +c12 / 4).toString(16));
     };
     uuid44 = () => uuid4Internal();
@@ -826017,7 +826017,7 @@ var require_helpers2 = __commonJS({
   "node_modules/.pnpm/@cypress+request@3.0.10/node_modules/@cypress/request/lib/helpers.js"(exports2) {
     "use strict";
     var jsonSafeStringify = require_stringify3();
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var Buffer5 = require_safe_buffer().Buffer;
     var defer = typeof setImmediate === "undefined" ? process.nextTick : setImmediate;
     function paramsHaveRequestBody(params) {
@@ -826033,7 +826033,7 @@ var require_helpers2 = __commonJS({
       return ret2;
     }
     function md53(str3) {
-      return crypto19.createHash("md5").update(str3).digest("hex");
+      return crypto20.createHash("md5").update(str3).digest("hex");
     }
     function isReadStream(rs) {
       return rs.readable && rs.path && rs.mode;
@@ -826070,7 +826070,7 @@ var require_helpers2 = __commonJS({
 // node_modules/.pnpm/aws-sign2@0.7.0/node_modules/aws-sign2/index.js
 var require_aws_sign2 = __commonJS({
   "node_modules/.pnpm/aws-sign2@0.7.0/node_modules/aws-sign2/index.js"(exports2, module2) {
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var parse5 = require("url").parse;
     var keys = [
       "acl",
@@ -826094,7 +826094,7 @@ var require_aws_sign2 = __commonJS({
     module2.exports = authorization;
     module2.exports.authorization = authorization;
     function hmacSha1(options3) {
-      return crypto19.createHmac("sha1", options3.secret).update(options3.message).digest("base64");
+      return crypto20.createHmac("sha1", options3.secret).update(options3.message).digest("base64");
     }
     module2.exports.hmacSha1 = hmacSha1;
     function sign(options3) {
@@ -826241,14 +826241,14 @@ var require_aws4 = __commonJS({
     var aws4 = exports2;
     var url2 = require("url");
     var querystring = require("querystring");
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var lru = require_lru();
     var credentialsCache = lru(1e3);
     function hmac3(key, string6, encoding) {
-      return crypto19.createHmac("sha256", key).update(string6, "utf8").digest(encoding);
+      return crypto20.createHmac("sha256", key).update(string6, "utf8").digest(encoding);
     }
     function hash3(string6, encoding) {
-      return crypto19.createHash("sha256").update(string6, "utf8").digest(encoding);
+      return crypto20.createHash("sha256").update(string6, "utf8").digest(encoding);
     }
     function encodeRfc3986(urlEncodedString) {
       return urlEncodedString.replace(/[!'()*]/g, function(c12) {
@@ -831291,22 +831291,22 @@ var require_nacl_fast = __commonJS({
         randombytes = fn2;
       };
       (function() {
-        var crypto19 = typeof self !== "undefined" ? self.crypto || self.msCrypto : null;
-        if (crypto19 && crypto19.getRandomValues) {
+        var crypto20 = typeof self !== "undefined" ? self.crypto || self.msCrypto : null;
+        if (crypto20 && crypto20.getRandomValues) {
           var QUOTA = 65536;
           nacl.setPRNG(function(x14, n6) {
             var i11, v15 = new Uint8Array(n6);
             for (i11 = 0; i11 < n6; i11 += QUOTA) {
-              crypto19.getRandomValues(v15.subarray(i11, i11 + Math.min(n6 - i11, QUOTA)));
+              crypto20.getRandomValues(v15.subarray(i11, i11 + Math.min(n6 - i11, QUOTA)));
             }
             for (i11 = 0; i11 < n6; i11++) x14[i11] = v15[i11];
             cleanup(v15);
           });
         } else if (typeof require !== "undefined") {
-          crypto19 = require("crypto");
-          if (crypto19 && crypto19.randomBytes) {
+          crypto20 = require("crypto");
+          if (crypto20 && crypto20.randomBytes) {
             nacl.setPRNG(function(x14, n6) {
-              var i11, v15 = crypto19.randomBytes(n6);
+              var i11, v15 = crypto20.randomBytes(n6);
               for (i11 = 0; i11 < n6; i11++) x14[i11] = v15[i11];
               cleanup(v15);
             });
@@ -831344,7 +831344,7 @@ var require_utils7 = __commonJS({
     var Buffer5 = require_safer().Buffer;
     var PrivateKey = require_private_key();
     var Key = require_key();
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var algs = require_algs();
     var asn1 = require_lib7();
     var ec = require_ec();
@@ -831428,7 +831428,7 @@ var require_utils7 = __commonJS({
         bufs.push(salt);
         D8 = Buffer5.concat(bufs);
         for (var j8 = 0; j8 < count; ++j8)
-          D8 = crypto19.createHash("md5").update(D8).digest();
+          D8 = crypto20.createHash("md5").update(D8).digest();
         material = Buffer5.concat([material, D8]);
         D_prev = D8;
       }
@@ -831450,13 +831450,13 @@ var require_utils7 = __commonJS({
       return Buffer5.concat(ts).slice(0, size);
       function T13(I11) {
         hkey.writeUInt32BE(I11, hkey.length - 4);
-        var hmac3 = crypto19.createHmac(hashAlg, passphrase);
+        var hmac3 = crypto20.createHmac(hashAlg, passphrase);
         hmac3.update(hkey);
         var Ti = hmac3.digest();
         var Uc = Ti;
         var c12 = 1;
         while (c12++ < iterations) {
-          hmac3 = crypto19.createHmac(hashAlg, passphrase);
+          hmac3 = crypto20.createHmac(hashAlg, passphrase);
           hmac3.update(Uc);
           Uc = hmac3.digest();
           for (var x14 = 0; x14 < Ti.length; ++x14)
@@ -831825,7 +831825,7 @@ var require_signature = __commonJS({
     var assert4 = require_assert();
     var Buffer5 = require_safer().Buffer;
     var algs = require_algs();
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var errs = require_errors8();
     var utils = require_utils7();
     var asn1 = require_lib7();
@@ -832203,7 +832203,7 @@ var require_sec = __commonJS({
 // node_modules/.pnpm/ecc-jsbn@0.1.2/node_modules/ecc-jsbn/index.js
 var require_ecc_jsbn = __commonJS({
   "node_modules/.pnpm/ecc-jsbn@0.1.2/node_modules/ecc-jsbn/index.js"(exports2) {
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var BigInteger = require_jsbn().BigInteger;
     var ECPointFp = require_ec().ECPointFp;
     var Buffer5 = require_safer().Buffer;
@@ -832226,7 +832226,7 @@ var require_ecc_jsbn = __commonJS({
         }
       } else {
         var n1 = n6.subtract(BigInteger.ONE);
-        var r11 = new BigInteger(crypto19.randomBytes(n6.bitLength()));
+        var r11 = new BigInteger(crypto20.randomBytes(n6.bitLength()));
         priv = r11.mod(n1).add(BigInteger.ONE);
         this.P = c12.getG().multiply(priv);
       }
@@ -832254,14 +832254,14 @@ var require_dhe = __commonJS({
       generateED25519
     };
     var assert4 = require_assert();
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var Buffer5 = require_safer().Buffer;
     var algs = require_algs();
     var utils = require_utils7();
     var nacl = require_nacl_fast();
     var Key = require_key();
     var PrivateKey = require_private_key();
-    var CRYPTO_HAVE_ECDH = crypto19.createECDH !== void 0;
+    var CRYPTO_HAVE_ECDH = crypto20.createECDH !== void 0;
     var ecdh = require_ecc_jsbn();
     var ec = require_ec();
     var jsbn = require_jsbn().BigInteger;
@@ -832275,7 +832275,7 @@ var require_dhe = __commonJS({
         if (!CRYPTO_HAVE_ECDH) {
           throw new Error("Due to bugs in the node 0.10 crypto API, node 0.12.x or later is required to use DH");
         }
-        this._dh = crypto19.createDiffieHellman(
+        this._dh = crypto20.createDiffieHellman(
           key.part.p.data,
           void 0,
           key.part.g.data,
@@ -832302,7 +832302,7 @@ var require_dhe = __commonJS({
           "nistp384": "secp384r1",
           "nistp521": "secp521r1"
         }[key.curve];
-        this._dh = crypto19.createECDH(curve);
+        this._dh = crypto20.createECDH(curve);
         if (typeof this._dh !== "object" || typeof this._dh.setPrivateKey !== "function") {
           CRYPTO_HAVE_ECDH = false;
           DiffieHellman.call(this, key);
@@ -832454,7 +832454,7 @@ var require_dhe = __commonJS({
           return this._key;
         } else {
           var n6 = this._ecParams.getN();
-          var r11 = new jsbn(crypto19.randomBytes(n6.bitLength()));
+          var r11 = new jsbn(crypto20.randomBytes(n6.bitLength()));
           var n1 = n6.subtract(jsbn.ONE);
           priv = r11.mod(n1).add(jsbn.ONE);
           pub = this._ecParams.getG().multiply(priv);
@@ -832560,7 +832560,7 @@ var require_dhe = __commonJS({
           "nistp384": "secp384r1",
           "nistp521": "secp521r1"
         }[curve];
-        var dh = crypto19.createECDH(osCurve);
+        var dh = crypto20.createECDH(osCurve);
         dh.generateKeys();
         parts.push({
           name: "curve",
@@ -832578,7 +832578,7 @@ var require_dhe = __commonJS({
         var ecParams = new X9ECParameters(curve);
         var n6 = ecParams.getN();
         var cByteLen = Math.ceil((n6.bitLength() + 64) / 8);
-        var c12 = new jsbn(crypto19.randomBytes(cByteLen));
+        var c12 = new jsbn(crypto20.randomBytes(cByteLen));
         var n1 = n6.subtract(jsbn.ONE);
         var priv = c12.mod(n1).add(jsbn.ONE);
         var pub = ecParams.getG().multiply(priv);
@@ -834927,7 +834927,7 @@ var require_ssh_private = __commonJS({
     var Buffer5 = require_safer().Buffer;
     var algs = require_algs();
     var utils = require_utils7();
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var Key = require_key();
     var PrivateKey = require_private_key();
     var pem = require_pem();
@@ -835001,7 +835001,7 @@ var require_ssh_private = __commonJS({
           out = Buffer5.from(out);
           var ckey = out.slice(0, cinf.keySize);
           var iv2 = out.slice(cinf.keySize, cinf.keySize + cinf.blockSize);
-          var cipherStream = crypto19.createDecipheriv(
+          var cipherStream = crypto20.createDecipheriv(
             cinf.opensslName,
             ckey,
             iv2
@@ -835066,7 +835066,7 @@ var require_ssh_private = __commonJS({
       var privBuf;
       if (PrivateKey.isPrivateKey(key)) {
         privBuf = new SSHBuffer({});
-        var checkInt = crypto19.randomBytes(4).readUInt32BE(0);
+        var checkInt = crypto20.randomBytes(4).readUInt32BE(0);
         privBuf.writeInt(checkInt);
         privBuf.writeInt(checkInt);
         privBuf.write(key.toBuffer("rfc4253"));
@@ -835080,7 +835080,7 @@ var require_ssh_private = __commonJS({
         case "none":
           break;
         case "bcrypt":
-          var salt = crypto19.randomBytes(16);
+          var salt = crypto20.randomBytes(16);
           var rounds = 16;
           var kdfssh = new SSHBuffer({});
           kdfssh.writeBuffer(salt);
@@ -835107,7 +835107,7 @@ var require_ssh_private = __commonJS({
           out = Buffer5.from(out);
           var ckey = out.slice(0, cinf.keySize);
           var iv2 = out.slice(cinf.keySize, cinf.keySize + cinf.blockSize);
-          var cipherStream = crypto19.createCipheriv(
+          var cipherStream = crypto20.createCipheriv(
             cinf.opensslName,
             ckey,
             iv2
@@ -835169,7 +835169,7 @@ var require_pem = __commonJS({
     };
     var assert4 = require_assert();
     var asn1 = require_lib7();
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var Buffer5 = require_safer().Buffer;
     var algs = require_algs();
     var utils = require_utils7();
@@ -835337,7 +835337,7 @@ var require_pem = __commonJS({
         alg = void 0;
       }
       if (cipher && key && iv2) {
-        var cipherStream = crypto19.createDecipheriv(cipher, key, iv2);
+        var cipherStream = crypto20.createDecipheriv(cipher, key, iv2);
         var chunk, chunks = [];
         cipherStream.once("error", function(e11) {
           if (e11.toString().indexOf("bad decrypt") !== -1) {
@@ -835762,7 +835762,7 @@ var require_putty = __commonJS({
     var rfc4253 = require_rfc4253();
     var Key = require_key();
     var SSHBuffer = require_ssh_buffer();
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var PrivateKey = require_private_key();
     var errors2 = require_errors8();
     function read(buf, options3) {
@@ -835832,7 +835832,7 @@ var require_putty = __commonJS({
             );
           }
           var iv2 = Buffer5.alloc(16, 0);
-          var decipher = crypto19.createDecipheriv(
+          var decipher = crypto20.createDecipheriv(
             "aes-256-cbc",
             derivePPK2EncryptionKey(options3.passphrase),
             iv2
@@ -835883,11 +835883,11 @@ var require_putty = __commonJS({
       return key;
     }
     function derivePPK2EncryptionKey(passphrase) {
-      var hash1 = crypto19.createHash("sha1").update(Buffer5.concat([
+      var hash1 = crypto20.createHash("sha1").update(Buffer5.concat([
         Buffer5.from([0, 0, 0, 0]),
         Buffer5.from(passphrase)
       ])).digest();
-      var hash22 = crypto19.createHash("sha1").update(Buffer5.concat([
+      var hash22 = crypto20.createHash("sha1").update(Buffer5.concat([
         Buffer5.from([0, 0, 0, 1]),
         Buffer5.from(passphrase)
       ])).digest();
@@ -836041,7 +836041,7 @@ var require_private_key = __commonJS({
     var assert4 = require_assert();
     var Buffer5 = require_safer().Buffer;
     var algs = require_algs();
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var Fingerprint = require_fingerprint();
     var Signature2 = require_signature();
     var errs = require_errors8();
@@ -836152,14 +836152,14 @@ var require_private_key = __commonJS({
       var v15, nm, err7;
       try {
         nm = hashAlgo.toUpperCase();
-        v15 = crypto19.createSign(nm);
+        v15 = crypto20.createSign(nm);
       } catch (e11) {
         err7 = e11;
       }
       if (v15 === void 0 || err7 instanceof Error && err7.message.match(/Unknown message digest/)) {
         nm = "RSA-";
         nm += hashAlgo.toUpperCase();
-        v15 = crypto19.createSign(nm);
+        v15 = crypto20.createSign(nm);
       }
       assert4.ok(v15, "failed to create verifier");
       var oldSign = v15.sign.bind(v15);
@@ -836244,7 +836244,7 @@ var require_identity = __commonJS({
     module2.exports = Identity;
     var assert4 = require_assert();
     var algs = require_algs();
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var Fingerprint = require_fingerprint();
     var Signature2 = require_signature();
     var errs = require_errors8();
@@ -836561,7 +836561,7 @@ var require_openssh_cert = __commonJS({
     };
     var assert4 = require_assert();
     var SSHBuffer = require_ssh_buffer();
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var Buffer5 = require_safer().Buffer;
     var algs = require_algs();
     var Key = require_key();
@@ -836750,7 +836750,7 @@ var require_openssh_cert = __commonJS({
       assert4.object(cert.signatures.openssh, "signature for openssh format");
       var sig = cert.signatures.openssh;
       if (sig.nonce === void 0)
-        sig.nonce = crypto19.randomBytes(16);
+        sig.nonce = crypto20.randomBytes(16);
       var buf = new SSHBuffer({});
       buf.writeString(getCertType(cert.subjectKey));
       buf.writeBuffer(sig.nonce);
@@ -837553,7 +837553,7 @@ var require_certificate = __commonJS({
     var assert4 = require_assert();
     var Buffer5 = require_safer().Buffer;
     var algs = require_algs();
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var Fingerprint = require_fingerprint();
     var Signature2 = require_signature();
     var errs = require_errors8();
@@ -837640,7 +837640,7 @@ var require_certificate = __commonJS({
         throw new InvalidAlgorithmError(algo);
       if (this._hashCache[algo])
         return this._hashCache[algo];
-      var hash3 = crypto19.createHash(algo).update(this.toBuffer("x509")).digest();
+      var hash3 = crypto20.createHash(algo).update(this.toBuffer("x509")).digest();
       this._hashCache[algo] = hash3;
       return hash3;
     };
@@ -837910,7 +837910,7 @@ var require_fingerprint = __commonJS({
     var assert4 = require_assert();
     var Buffer5 = require_safer().Buffer;
     var algs = require_algs();
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var errs = require_errors8();
     var Key = require_key();
     var PrivateKey = require_private_key();
@@ -837977,9 +837977,9 @@ var require_fingerprint = __commonJS({
         );
       }
       var theirHash = other.hash(this.algorithm, this.hashType);
-      var theirHash2 = crypto19.createHash(this.algorithm).update(theirHash).digest("base64");
+      var theirHash2 = crypto20.createHash(this.algorithm).update(theirHash).digest("base64");
       if (this.hash2 === void 0)
-        this.hash2 = crypto19.createHash(this.algorithm).update(this.hash).digest("base64");
+        this.hash2 = crypto20.createHash(this.algorithm).update(this.hash).digest("base64");
       return this.hash2 === theirHash2;
     };
     var base64RE = /^[A-Za-z0-9+\/=]+$/;
@@ -838104,7 +838104,7 @@ var require_key = __commonJS({
     module2.exports = Key;
     var assert4 = require_assert();
     var algs = require_algs();
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var Fingerprint = require_fingerprint();
     var Signature2 = require_signature();
     var DiffieHellman = require_dhe().DiffieHellman;
@@ -838202,7 +838202,7 @@ var require_key = __commonJS({
       } else {
         throw new Error("Hash type " + type + " not supported");
       }
-      var hash3 = crypto19.createHash(algo).update(buf).digest();
+      var hash3 = crypto20.createHash(algo).update(buf).digest();
       this._hashCache[cacheKey] = hash3;
       return hash3;
     };
@@ -838250,14 +838250,14 @@ var require_key = __commonJS({
       var v15, nm, err7;
       try {
         nm = hashAlgo.toUpperCase();
-        v15 = crypto19.createVerify(nm);
+        v15 = crypto20.createVerify(nm);
       } catch (e11) {
         err7 = e11;
       }
       if (v15 === void 0 || err7 instanceof Error && err7.message.match(/Unknown message digest/)) {
         nm = "RSA-";
         nm += hashAlgo.toUpperCase();
-        v15 = crypto19.createVerify(nm);
+        v15 = crypto20.createVerify(nm);
       }
       assert4.ok(v15, "failed to create verifier");
       var oldVerify = v15.verify.bind(v15);
@@ -839927,7 +839927,7 @@ var require_jsprim = __commonJS({
 var require_signer = __commonJS({
   "node_modules/.pnpm/http-signature@1.4.0/node_modules/http-signature/lib/signer.js"(exports2, module2) {
     var assert4 = require_assert();
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var util2 = require("util");
     var sshpk = require_lib8();
     var jsprim = require_jsprim();
@@ -839990,7 +839990,7 @@ var require_signer = __commonJS({
         this.rs_keyId = options3.keyId;
         if (typeof options3.key !== "string" && !Buffer.isBuffer(options3.key))
           throw new TypeError("options.key for HMAC must be a string or Buffer");
-        this.rs_signer = crypto19.createHmac(alg[1].toUpperCase(), options3.key);
+        this.rs_signer = crypto20.createHmac(alg[1].toUpperCase(), options3.key);
         this.rs_signer.sign = function() {
           var digest = this.digest("base64");
           return {
@@ -840271,7 +840271,7 @@ var require_signer = __commonJS({
         }
         var signature;
         if (alg[0] === "hmac") {
-          var hmac3 = crypto19.createHmac(alg[1].toUpperCase(), key);
+          var hmac3 = crypto20.createHmac(alg[1].toUpperCase(), key);
           hmac3.update(stringToSign);
           signature = hmac3.digest("base64");
         } else {
@@ -840307,7 +840307,7 @@ var require_signer = __commonJS({
 var require_verify = __commonJS({
   "node_modules/.pnpm/http-signature@1.4.0/node_modules/http-signature/lib/verify.js"(exports2, module2) {
     var assert4 = require_assert();
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var sshpk = require_lib8();
     var utils = require_utils8();
     var HASH_ALGOS = utils.HASH_ALGOS;
@@ -840355,12 +840355,12 @@ var require_verify = __commonJS({
         if (alg[0] !== "hmac")
           return false;
         var hashAlg = alg[1].toUpperCase();
-        var hmac3 = crypto19.createHmac(hashAlg, secret);
+        var hmac3 = crypto20.createHmac(hashAlg, secret);
         hmac3.update(parsedSignature.signingString);
-        var h14 = crypto19.createHmac(hashAlg, secret);
+        var h14 = crypto20.createHmac(hashAlg, secret);
         h14.update(hmac3.digest());
         h14 = h14.digest();
-        var h23 = crypto19.createHmac(hashAlg, secret);
+        var h23 = crypto20.createHmac(hashAlg, secret);
         h23.update(new Buffer(parsedSignature.params.signature, "base64"));
         h23 = h23.digest();
         if (typeof h14 === "string")
@@ -849731,7 +849731,7 @@ var require_form_data = __commonJS({
     var parseUrl4 = require("url").parse;
     var fs80 = require("fs");
     var Stream7 = require("stream").Stream;
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     var mime = require_mime_types();
     var asynckit = require_asynckit();
     var setToStringTag = require_es_set_tostringtag();
@@ -849937,7 +849937,7 @@ var require_form_data = __commonJS({
       return Buffer.concat([dataBuffer, Buffer.from(this._lastBoundary())]);
     };
     FormData4.prototype._generateBoundary = function() {
-      this._boundary = "--------------------------" + crypto19.randomBytes(12).toString("hex");
+      this._boundary = "--------------------------" + crypto20.randomBytes(12).toString("hex");
     };
     FormData4.prototype.getLengthSync = function() {
       var knownLength = this._overheadLength + this._valueLength;
@@ -851698,15 +851698,15 @@ var require_auth = __commonJS({
 var require_hawk = __commonJS({
   "node_modules/.pnpm/@cypress+request@3.0.10/node_modules/@cypress/request/lib/hawk.js"(exports2) {
     "use strict";
-    var crypto19 = require("crypto");
+    var crypto20 = require("crypto");
     function randomString2(size) {
       var bits = (size + 1) * 6;
-      var buffer = crypto19.randomBytes(Math.ceil(bits / 8));
+      var buffer = crypto20.randomBytes(Math.ceil(bits / 8));
       var string6 = buffer.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
       return string6.slice(0, size);
     }
     function calculatePayloadHash(payload2, algorithm, contentType) {
-      var hash3 = crypto19.createHash(algorithm);
+      var hash3 = crypto20.createHash(algorithm);
       hash3.update("hawk.1.payload\n");
       hash3.update((contentType ? contentType.split(";")[0].trim().toLowerCase() : "") + "\n");
       hash3.update(payload2 || "");
@@ -851722,7 +851722,7 @@ var require_hawk = __commonJS({
       if (opts.app) {
         normalized = normalized + opts.app + "\n" + (opts.dlg || "") + "\n";
       }
-      var hmac3 = crypto19.createHmac(credentials.algorithm, credentials.key).update(normalized);
+      var hmac3 = crypto20.createHmac(credentials.algorithm, credentials.key).update(normalized);
       var digest = hmac3.digest("base64");
       return digest;
     };
@@ -869742,11 +869742,11 @@ var require_util12 = __commonJS({
     var { isUint8Array } = require("node:util/types");
     var { webidl } = require_webidl();
     var supportedHashes = [];
-    var crypto19;
+    var crypto20;
     try {
-      crypto19 = require("node:crypto");
+      crypto20 = require("node:crypto");
       const possibleRelevantHashes = ["sha256", "sha384", "sha512"];
-      supportedHashes = crypto19.getHashes().filter((hash3) => possibleRelevantHashes.includes(hash3));
+      supportedHashes = crypto20.getHashes().filter((hash3) => possibleRelevantHashes.includes(hash3));
     } catch {
     }
     function responseURL(response) {
@@ -870019,7 +870019,7 @@ var require_util12 = __commonJS({
       }
     }
     function bytesMatch(bytes2, metadataList) {
-      if (crypto19 === void 0) {
+      if (crypto20 === void 0) {
         return true;
       }
       const parsedMetadata = parseMetadata(metadataList);
@@ -870034,7 +870034,7 @@ var require_util12 = __commonJS({
       for (const item of metadata) {
         const algorithm = item.algo;
         const expectedValue = item.hash;
-        let actualValue = crypto19.createHash(algorithm).update(bytes2).digest("base64");
+        let actualValue = crypto20.createHash(algorithm).update(bytes2).digest("base64");
         if (actualValue[actualValue.length - 1] === "=") {
           if (actualValue[actualValue.length - 2] === "=") {
             actualValue = actualValue.slice(0, -2);
@@ -871098,8 +871098,8 @@ var require_body = __commonJS({
     var { multipartFormDataParser } = require_formdata_parser();
     var random2;
     try {
-      const crypto19 = require("node:crypto");
-      random2 = (max) => crypto19.randomInt(0, max);
+      const crypto20 = require("node:crypto");
+      random2 = (max) => crypto20.randomInt(0, max);
     } catch {
       random2 = (max) => Math.floor(Math.random(max));
     }
@@ -882507,13 +882507,13 @@ var require_frame = __commonJS({
     "use strict";
     var { maxUnsigned16Bit } = require_constants8();
     var BUFFER_SIZE = 16386;
-    var crypto19;
+    var crypto20;
     var buffer = null;
     var bufIdx = BUFFER_SIZE;
     try {
-      crypto19 = require("node:crypto");
+      crypto20 = require("node:crypto");
     } catch {
-      crypto19 = {
+      crypto20 = {
         // not full compatibility, but minimum.
         randomFillSync: function randomFillSync(buffer2, _offset2, _size2) {
           for (let i11 = 0; i11 < buffer2.length; ++i11) {
@@ -882526,7 +882526,7 @@ var require_frame = __commonJS({
     function generateMask() {
       if (bufIdx === BUFFER_SIZE) {
         bufIdx = 0;
-        crypto19.randomFillSync(buffer ??= Buffer.allocUnsafe(BUFFER_SIZE), 0, BUFFER_SIZE);
+        crypto20.randomFillSync(buffer ??= Buffer.allocUnsafe(BUFFER_SIZE), 0, BUFFER_SIZE);
       }
       return [buffer[bufIdx++], buffer[bufIdx++], buffer[bufIdx++], buffer[bufIdx++]];
     }
@@ -882598,9 +882598,9 @@ var require_connection = __commonJS({
     var { Headers: Headers3, getHeadersList } = require_headers();
     var { getDecodeSplit } = require_util12();
     var { WebsocketFrameSend } = require_frame();
-    var crypto19;
+    var crypto20;
     try {
-      crypto19 = require("node:crypto");
+      crypto20 = require("node:crypto");
     } catch {
     }
     function establishWebSocketConnection(url2, protocols, client, ws, onEstablish, options3) {
@@ -882620,7 +882620,7 @@ var require_connection = __commonJS({
         const headersList = getHeadersList(new Headers3(options3.headers));
         request.headersList = headersList;
       }
-      const keyValue = crypto19.randomBytes(16).toString("base64");
+      const keyValue = crypto20.randomBytes(16).toString("base64");
       request.headersList.append("sec-websocket-key", keyValue);
       request.headersList.append("sec-websocket-version", "13");
       for (const protocol of protocols) {
@@ -882650,7 +882650,7 @@ var require_connection = __commonJS({
             return;
           }
           const secWSAccept = response.headersList.get("Sec-WebSocket-Accept");
-          const digest = crypto19.createHash("sha1").update(keyValue + uid).digest("base64");
+          const digest = crypto20.createHash("sha1").update(keyValue + uid).digest("base64");
           if (secWSAccept !== digest) {
             failWebsocketConnection(ws, "Incorrect hash received in Sec-WebSocket-Accept header.");
             return;
@@ -948171,7 +948171,7 @@ function copyToImagesDir(archiveId, cachedPath, mediaType, cache5) {
   return `images/${filename}`;
 }
 function externalizeBase64Image(base64Data, mediaType, cache5) {
-  const hash3 = (0, import_node_crypto16.createHash)("sha256").update(base64Data).digest("hex").slice(0, 12);
+  const hash3 = (0, import_node_crypto17.createHash)("sha256").update(base64Data).digest("hex").slice(0, 12);
   const ext = mediaType === "image/jpeg" ? ".jpg" : mediaType === "image/webp" ? ".webp" : ".png";
   const filename = `raw_${hash3}${ext}`;
   if (!cache5.written.has(filename)) {
@@ -948335,11 +948335,11 @@ async function recoverImagesInContent(content, sidecarIndex, stats, cache5) {
   }
   return out;
 }
-var import_node_crypto16, import_node_child_process29, import_node_fs59, import_node_path60, import_node_readline4, DEFAULT_TOSUTIL_PATH, DEFAULT_BUCKET, TEXT_CHUNK_KEYWORD2;
+var import_node_crypto17, import_node_child_process29, import_node_fs59, import_node_path60, import_node_readline4, DEFAULT_TOSUTIL_PATH, DEFAULT_BUCKET, TEXT_CHUNK_KEYWORD2;
 var init_image_recovery = __esm({
   "dist/data-processing/image-recovery.js"() {
     "use strict";
-    import_node_crypto16 = require("node:crypto");
+    import_node_crypto17 = require("node:crypto");
     import_node_child_process29 = require("node:child_process");
     import_node_fs59 = __toESM(require("node:fs"), 1);
     import_node_path60 = __toESM(require("node:path"), 1);
@@ -950150,7 +950150,7 @@ function convertRecord(record2, fallbackSystemPrompt, seq) {
   if (record2.wake_cycle_id) {
     uid = seq === 0 ? record2.wake_cycle_id : `${record2.wake_cycle_id}#${seq}`;
   } else {
-    uid = (0, import_node_crypto17.randomUUID)();
+    uid = (0, import_node_crypto18.randomUUID)();
   }
   return {
     uid,
@@ -950257,14 +950257,14 @@ async function convertOpenaiChat(opts) {
   }
   console.log(`  Total: ${totalRecords} records`);
 }
-var import_node_fs64, import_node_path65, import_node_readline7, import_node_crypto17;
+var import_node_fs64, import_node_path65, import_node_readline7, import_node_crypto18;
 var init_convert_openai_chat = __esm({
   "dist/data-processing/convert-openai-chat.js"() {
     "use strict";
     import_node_fs64 = __toESM(require("node:fs"), 1);
     import_node_path65 = __toESM(require("node:path"), 1);
     import_node_readline7 = __toESM(require("node:readline"), 1);
-    import_node_crypto17 = require("node:crypto");
+    import_node_crypto18 = require("node:crypto");
   }
 });
 
@@ -950947,7 +950947,7 @@ function convertSubAgentTranscript(transcriptPath, parentUid, subagentIndex, des
           chatMessages.push({
             role: "tool",
             content: resultContent,
-            tool_call_id: tr3.tool_use_id ?? `call_${(0, import_node_crypto18.randomUUID)().slice(0, 8)}`
+            tool_call_id: tr3.tool_use_id ?? `call_${(0, import_node_crypto19.randomUUID)().slice(0, 8)}`
           });
         }
       } else if (textBlocks.length > 0) {
@@ -950975,7 +950975,7 @@ function convertSubAgentTranscript(transcriptPath, parentUid, subagentIndex, des
           textBuf += block.text ?? "";
         } else if (block.type === "tool_use") {
           toolCalls.push({
-            id: block.id ?? `call_${(0, import_node_crypto18.randomUUID)().slice(0, 8)}`,
+            id: block.id ?? `call_${(0, import_node_crypto19.randomUUID)().slice(0, 8)}`,
             type: "function",
             function: {
               name: block.name ?? "unknown",
@@ -950995,7 +950995,7 @@ function convertSubAgentTranscript(transcriptPath, parentUid, subagentIndex, des
   const lastMsg = chatMessages[chatMessages.length - 1];
   const success2 = lastMsg.role === "assistant" && !!lastMsg.content;
   return {
-    uid: (0, import_node_crypto18.randomUUID)(),
+    uid: (0, import_node_crypto19.randomUUID)(),
     agent_type: "subagent",
     subagent_index: subagentIndex,
     parent_uid: parentUid,
@@ -951129,7 +951129,7 @@ async function runExpandSubagents(args) {
       parent_uid: null
     };
     if (!mainOutput.uid)
-      mainOutput.uid = (0, import_node_crypto18.randomUUID)();
+      mainOutput.uid = (0, import_node_crypto19.randomUUID)();
     allOutput.push(mainOutput);
     const groupSubagents = [];
     for (let si = 0; si < entry.agentCalls.length; si++) {
@@ -951205,14 +951205,14 @@ Wrote output files:`);
   console.log(`  ${groupsFile} (${groups.length} groups)`);
   console.log(`  ${summaryFile}`);
 }
-var import_node_fs69, import_node_path70, import_node_readline8, import_node_crypto18;
+var import_node_fs69, import_node_path70, import_node_readline8, import_node_crypto19;
 var init_subagent_expand = __esm({
   "dist/data-processing/subagent-expand.js"() {
     "use strict";
     import_node_fs69 = __toESM(require("node:fs"), 1);
     import_node_path70 = __toESM(require("node:path"), 1);
     import_node_readline8 = __toESM(require("node:readline"), 1);
-    import_node_crypto18 = require("node:crypto");
+    import_node_crypto19 = require("node:crypto");
   }
 });
 
@@ -953448,13 +953448,13 @@ function __classPrivateFieldGet5(receiver2, state2, kind, f13) {
 
 // node_modules/.pnpm/@anthropic-ai+sdk@0.78.0_zod@4.3.6/node_modules/@anthropic-ai/sdk/internal/utils/uuid.mjs
 var uuid42 = function() {
-  const { crypto: crypto19 } = globalThis;
-  if (crypto19?.randomUUID) {
-    uuid42 = crypto19.randomUUID.bind(crypto19);
-    return crypto19.randomUUID();
+  const { crypto: crypto20 } = globalThis;
+  if (crypto20?.randomUUID) {
+    uuid42 = crypto20.randomUUID.bind(crypto20);
+    return crypto20.randomUUID();
   }
   const u82 = new Uint8Array(1);
-  const randomByte = crypto19 ? () => crypto19.getRandomValues(u82)[0] : () => Math.random() * 255 & 255;
+  const randomByte = crypto20 ? () => crypto20.getRandomValues(u82)[0] : () => Math.random() * 255 & 255;
   return "10000000-1000-4000-8000-100000000000".replace(/[018]/g, (c12) => (+c12 ^ randomByte() & 15 >> +c12 / 4).toString(16));
 };
 
@@ -959096,13 +959096,13 @@ function __classPrivateFieldGet8(receiver2, state2, kind, f13) {
 
 // node_modules/.pnpm/openai@6.34.0_ws@8.20.0_zod@4.3.6/node_modules/openai/internal/utils/uuid.mjs
 var uuid43 = function() {
-  const { crypto: crypto19 } = globalThis;
-  if (crypto19?.randomUUID) {
-    uuid43 = crypto19.randomUUID.bind(crypto19);
-    return crypto19.randomUUID();
+  const { crypto: crypto20 } = globalThis;
+  if (crypto20?.randomUUID) {
+    uuid43 = crypto20.randomUUID.bind(crypto20);
+    return crypto20.randomUUID();
   }
   const u82 = new Uint8Array(1);
-  const randomByte = crypto19 ? () => crypto19.getRandomValues(u82)[0] : () => Math.random() * 255 & 255;
+  const randomByte = crypto20 ? () => crypto20.getRandomValues(u82)[0] : () => Math.random() * 255 & 255;
   return "10000000-1000-4000-8000-100000000000".replace(/[018]/g, (c12) => (+c12 ^ randomByte() & 15 >> +c12 / 4).toString(16));
 };
 
@@ -1033447,6 +1033447,7 @@ var import_node_fs55 = __toESM(require("node:fs"), 1);
 var import_node_http5 = __toESM(require("node:http"), 1);
 var import_node_os28 = __toESM(require("node:os"), 1);
 var import_node_path56 = __toESM(require("node:path"), 1);
+var import_node_crypto16 = __toESM(require("node:crypto"), 1);
 var import_node_url7 = require("node:url");
 init_config();
 init_version_check();
@@ -1034040,7 +1034041,6 @@ async function startTunnel(port, provider, options3) {
 }
 
 // dist/obs/server.js
-init_notify();
 init_state();
 
 // dist/obs/ui.js
@@ -1035094,464 +1035094,6 @@ function renderIndexHtml() {
 </html>`;
 }
 
-// dist/obs/console/ui.js
-function renderConsoleHtml() {
-  return `<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1" />
-  <title>VisionClaw Console</title>
-  <link rel="icon" type="image/png" href="https://files.catbox.moe/au9xqh.png" />
-  <style>
-    :root {
-      --bg: #0b1020;
-      --border: rgba(255,255,255,0.10);
-      --text: rgba(255,255,255,0.92);
-      --muted: rgba(255,255,255,0.70);
-      --dim: rgba(255,255,255,0.55);
-      --good: #31d0aa;
-      --warn: #ffcc66;
-      --bad: #ff5c7a;
-      --accent: #7aa2ff;
-      --sans: ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, Helvetica, Arial, "Apple Color Emoji", "Segoe UI Emoji";
-      --mono: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;
-    }
-    *, *::before, *::after { box-sizing: border-box; }
-    body {
-      margin: 0;
-      background: radial-gradient(1200px 800px at 15% 10%, rgba(122,162,255,0.18), transparent 60%), var(--bg);
-      color: var(--text);
-      font-family: var(--sans);
-      min-height: 100vh;
-    }
-
-    /* \u2500\u2500 Header \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 */
-    header {
-      position: sticky; top: 0; z-index: 10;
-      backdrop-filter: blur(10px);
-      background: rgba(22,32,55,0.55);
-      border-bottom: 1px solid var(--border);
-    }
-    .wrap { max-width: 720px; margin: 0 auto; padding: 0 20px; }
-    .header-inner { display: flex; align-items: center; gap: 12px; padding: 10px 0; flex-wrap: wrap; }
-    h1 { margin: 0; font-size: 15px; font-weight: 650; display: flex; align-items: center; gap: 8px; }
-    .logo { width: 36px; height: 36px; border-radius: 8px; }
-    .spacer { flex: 1; }
-
-    /* \u2500\u2500 Status (in header) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 */
-    .status-indicator { display: flex; align-items: center; gap: 8px; font-size: 13px; font-weight: 600; }
-    .dot { width: 9px; height: 9px; border-radius: 999px; background: var(--dim); flex-shrink: 0; }
-    .dot.idle { background: var(--good); box-shadow: 0 0 0 3px rgba(49,208,170,0.20); }
-    .dot.busy { background: var(--accent); box-shadow: 0 0 0 3px rgba(122,162,255,0.22); animation: pulse 1.4s ease-in-out infinite; }
-    .dot.stop { background: var(--warn); box-shadow: 0 0 0 3px rgba(255,204,102,0.22); }
-    .dot.disconnected { background: var(--bad); box-shadow: 0 0 0 3px rgba(255,92,122,0.20); }
-    @keyframes pulse { 0%,100%{opacity:1} 50%{opacity:0.45} }
-    .status-label { color: var(--text); }
-    .stop-btn {
-      cursor: pointer;
-      border: 1px solid rgba(255,92,122,0.45); background: rgba(255,92,122,0.10); color: #ff5c7a;
-      padding: 6px 14px; border-radius: 8px; font-size: 12px; font-weight: 600; font-family: var(--sans);
-      transition: background 0.15s, transform 0.1s;
-    }
-    .stop-btn:hover:not(:disabled) { background: rgba(255,92,122,0.20); }
-    .stop-btn:active:not(:disabled) { transform: translateY(1px); }
-    .stop-btn:disabled { opacity: 0.38; cursor: not-allowed; }
-    .stop-btn.stopping { border-color: rgba(255,204,102,0.5); background: rgba(255,204,102,0.12); color: var(--warn); }
-
-    /* \u2500\u2500 Feed \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 */
-    .feed { padding: 16px 0 24px; }
-    .feed-list { display: flex; flex-direction: column; gap: 6px; max-height: calc(100vh - 100px); overflow-y: auto; padding-right: 4px; }
-    .feed-empty { padding: 48px 24px; text-align: center; color: var(--dim); font-size: 14px; }
-
-    /* \u2500\u2500 Bubble \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 */
-    .bubble {
-      padding: 10px 14px; border-radius: 12px;
-      font-size: 13px; line-height: 1.5;
-      max-width: 100%; animation: fadeIn 0.15s ease;
-    }
-    @keyframes fadeIn { from{opacity:0;transform:translateY(4px)} to{opacity:1;transform:none} }
-
-    .bubble .time { font-size: 10px; color: var(--dim); margin-top: 4px; }
-
-    /* Type variants */
-    .bubble.wake {
-      background: rgba(49,208,170,0.08); border: 1px solid rgba(49,208,170,0.18);
-      color: var(--good); font-weight: 600; font-size: 12px; text-align: center;
-      align-self: center; padding: 6px 16px;
-    }
-    .bubble.thinking {
-      background: rgba(208,156,240,0.08); border: 1px solid rgba(208,156,240,0.14); color: var(--text);
-    }
-    .bubble.tool {
-      background: rgba(92,201,245,0.06); border: 1px solid rgba(92,201,245,0.14);
-      font-family: var(--mono); font-size: 12px; color: var(--muted);
-    }
-    .bubble.tool .tool-name { color: #5cc9f5; font-weight: 600; }
-    .bubble.tool .tool-input { color: var(--dim); margin-top: 2px; word-break: break-word; }
-    .bubble.message {
-      background: rgba(102,224,184,0.08); border: 1px solid rgba(102,224,184,0.16); color: var(--text);
-    }
-    .bubble.message .sender { color: #66e0b8; font-weight: 600; font-size: 12px; }
-    .bubble.reply {
-      background: rgba(122,200,255,0.08); border: 1px solid rgba(122,200,255,0.14); color: var(--text);
-    }
-    .bubble.error {
-      background: rgba(255,92,122,0.08); border: 1px solid rgba(255,92,122,0.18); color: var(--bad);
-    }
-    .bubble.done {
-      background: rgba(255,255,255,0.04); border: 1px solid var(--border);
-      color: var(--dim); font-size: 12px; text-align: center;
-      align-self: center; padding: 6px 16px;
-    }
-    .bubble.done .cost { color: var(--muted); font-weight: 600; }
-    .bubble.screenshot {
-      background: rgba(255,255,255,0.03); border: 1px solid var(--border); padding: 8px;
-    }
-    .bubble.screenshot .screenshot-label { font-size: 11px; color: var(--dim); margin-bottom: 6px; }
-    .bubble.screenshot img {
-      display: block; max-width: 100%; height: auto; border-radius: 8px;
-      border: 1px solid rgba(255,255,255,0.08); cursor: pointer;
-    }
-    .bubble.info {
-      background: rgba(255,255,255,0.03); border: 1px solid var(--border);
-      color: var(--muted); font-size: 12px;
-    }
-
-    /* \u2500\u2500 Lightbox \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 */
-    .lightbox {
-      display: none; position: fixed; inset: 0; z-index: 200;
-      background: rgba(0,0,0,0.85); align-items: center; justify-content: center; cursor: zoom-out;
-    }
-    .lightbox.open { display: flex; }
-    .lightbox img { max-width: 95vw; max-height: 95vh; border-radius: 8px; }
-
-    /* \u2500\u2500 Toast \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 */
-    .toast {
-      position: fixed; bottom: 24px; left: 50%; transform: translateX(-50%);
-      background: rgba(30,40,60,0.96); border: 1px solid var(--border);
-      color: var(--text); padding: 10px 20px; border-radius: 10px;
-      font-size: 13px; z-index: 100; pointer-events: none;
-      opacity: 0; transition: opacity 0.2s;
-    }
-    .toast.show { opacity: 1; }
-
-    @media (max-width: 600px) {
-      .bubble { font-size: 13px; }
-    }
-  </style>
-</head>
-<body>
-<header>
-  <div class="wrap">
-    <div class="header-inner">
-      <h1><img class="logo" src="https://files.catbox.moe/au9xqh.png" alt="" />VisionClaw Console</h1>
-      <span class="spacer"></span>
-      <div class="status-indicator">
-        <div class="dot" id="status-dot"></div>
-        <span class="status-label" id="status-label">Unknown</span>
-      </div>
-      <button class="stop-btn" id="stop-btn" disabled>Stop Agent</button>
-    </div>
-  </div>
-</header>
-
-<main>
-  <div class="wrap">
-    <div class="feed">
-      <div class="feed-list" id="feed-list">
-        <div class="feed-empty" id="feed-empty">Waiting for activity\u2026</div>
-      </div>
-    </div>
-  </div>
-</main>
-
-<div class="lightbox" id="lightbox"><img id="lightbox-img" /></div>
-<div class="toast" id="toast"></div>
-
-<script>
-  const MAX = 80;
-  let agentBusy = false, stopRequested = false, sseConnected = false, stopInFlight = false, count = 0;
-
-  const $ = (id) => document.getElementById(id);
-  const $dot = $('status-dot'), $label = $('status-label');
-  const $btn = $('stop-btn'), $list = $('feed-list'), $empty = $('feed-empty');
-  const $toast = $('toast');
-  const $lightbox = $('lightbox'), $lbImg = $('lightbox-img');
-
-  // \u2500\u2500 Lightbox \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-  $lightbox.addEventListener('click', () => $lightbox.classList.remove('open'));
-
-  function openLightbox(src) {
-    $lbImg.src = src;
-    $lightbox.classList.add('open');
-  }
-
-  // \u2500\u2500 Toast \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-  let toastT = null;
-  function showToast(msg) {
-    $toast.textContent = msg;
-    $toast.classList.add('show');
-    if (toastT) clearTimeout(toastT);
-    toastT = setTimeout(() => $toast.classList.remove('show'), 3000);
-  }
-
-  // \u2500\u2500 Status \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-  function renderStatus() {
-    if (!sseConnected) {
-      $dot.className = 'dot disconnected'; $label.textContent = 'Disconnected';
-      $btn.disabled = true;
-    } else if (stopRequested || stopInFlight) {
-      $dot.className = 'dot stop'; $label.textContent = 'Stopping\u2026';
-      $btn.disabled = true;
-    } else if (agentBusy) {
-      $dot.className = 'dot busy'; $label.textContent = 'Working';
-      $btn.disabled = false;
-    } else {
-      $dot.className = 'dot idle'; $label.textContent = 'Idle';
-      $btn.disabled = true;
-    }
-    $btn.textContent = (stopRequested || stopInFlight) ? 'Stopping\u2026' : 'Stop Agent';
-    $btn.className = (stopRequested || stopInFlight) ? 'stop-btn stopping' : 'stop-btn';
-  }
-
-  // \u2500\u2500 Stop \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-  $btn.addEventListener('click', async () => {
-    if ($btn.disabled || stopInFlight) return;
-    stopInFlight = true;
-    $btn.disabled = true;
-    $btn.textContent = 'Stopping\u2026';
-    $btn.className = 'stop-btn stopping';
-    try {
-      const res = await fetch('/console/stop', { method: 'POST' });
-      if (res.ok) { stopRequested = true; renderStatus(); showToast('Stop signal sent'); }
-      else { showToast('Stop failed (' + res.status + ')'); }
-    } catch { showToast('Stop failed (network)'); }
-    stopInFlight = false;
-  });
-
-  // \u2500\u2500 Helpers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-  function fmtTime(iso) {
-    if (!iso) return '';
-    const d = new Date(iso);
-    const h = String(d.getHours()).padStart(2,'0');
-    const m = String(d.getMinutes()).padStart(2,'0');
-    return h + ':' + m;
-  }
-
-  function esc(s) {
-    const el = document.createElement('span');
-    el.textContent = s;
-    return el.innerHTML;
-  }
-
-  function safeStr(v) {
-    if (v == null) return '';
-    if (typeof v === 'string') return v;
-    try { return JSON.stringify(v); } catch { return String(v); }
-  }
-
-  function addBubble(html, cls) {
-    if ($empty && $empty.parentNode) $empty.remove();
-    const el = document.createElement('div');
-    el.className = 'bubble ' + cls;
-    el.innerHTML = html;
-    $list.appendChild(el);
-    count++;
-    while ($list.childElementCount > MAX) { $list.removeChild($list.firstChild); count--; }
-    $list.scrollTop = $list.scrollHeight;
-
-    // Wire up any screenshot click-to-zoom
-    el.querySelectorAll('img.ss-img').forEach(img => {
-      img.addEventListener('click', () => openLightbox(img.src));
-    });
-  }
-
-  // \u2500\u2500 Entry processing \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-  function processEntry(entry) {
-    const cat = entry.category || '';
-    const lvl = entry.level || 'info';
-    const msg = entry.message || '';
-    const d   = entry.data || {};
-    const t   = fmtTime(entry.timestamp);
-
-    // Skip debug-level entries entirely
-    if (lvl === 'debug') return;
-
-    switch (cat) {
-      case 'wake': {
-        const trigger = d.trigger || '';
-        const label = trigger === 'heartbeat' ? 'Heartbeat check' : 'New message received';
-        addBubble(esc(label), 'wake');
-        return;
-      }
-
-      case 'assistant': {
-        if (!msg || msg.startsWith('[thinking]') || msg.startsWith('[subagent')) return;
-        addBubble(esc(msg) + '<div class="time">' + esc(t) + '</div>', 'thinking');
-        return;
-      }
-
-      case 'tool_call': {
-        const name = safeStr(d.name || '');
-        if (!name) return;
-        // Skip internal/noisy tools
-        if (['finish', 'mcp__visionclaw__finish'].includes(name)) return;
-
-        const friendly = friendlyToolName(name);
-        const input = d.input ? friendlyToolInput(name, d.input) : '';
-        let html = '<span class="tool-name">' + esc(friendly) + '</span>';
-        if (input) html += '<div class="tool-input">' + esc(input) + '</div>';
-        addBubble(html, 'tool');
-        return;
-      }
-
-      case 'screenshot': {
-        const b64 = d.base64;
-        if (!b64) return;
-        addBubble(
-          '<div class="screenshot-label">Desktop screenshot</div>' +
-          '<img class="ss-img" src="data:image/png;base64,' + b64 + '" alt="Desktop screenshot" loading="lazy" />',
-          'screenshot'
-        );
-        return;
-      }
-
-      case 'incoming': {
-        const sender = safeStr(d.sender || '');
-        const channel = safeStr(d.channel || '');
-        const text = safeStr(d.text || msg);
-        addBubble(
-          '<div class="sender">' + esc(sender) + ' via ' + esc(channel) + '</div>' +
-          esc(text) +
-          '<div class="time">' + esc(t) + '</div>',
-          'message'
-        );
-        return;
-      }
-
-      case 'fast_response': {
-        if (!msg) return;
-        addBubble(esc(msg) + '<div class="time">' + esc(t) + '</div>', 'reply');
-        return;
-      }
-
-      case 'result': {
-        const cost = d.cost != null ? '$' + d.cost : '';
-        const turns = d.turns != null ? d.turns + ' steps' : '';
-        const parts = [turns, cost].filter(Boolean).join(' \xB7 ');
-        addBubble('Done' + (parts ? ' <span class="cost">(' + esc(parts) + ')</span>' : ''), 'done');
-        return;
-      }
-
-      case 'error': {
-        addBubble(esc(msg) + '<div class="time">' + esc(t) + '</div>', 'error');
-        return;
-      }
-
-      case 'channel': {
-        if (lvl === 'warn' || lvl === 'error') {
-          addBubble(esc(msg), 'error');
-        }
-        return;
-      }
-
-      case 'system': {
-        if (lvl === 'warn' || lvl === 'error') {
-          addBubble(esc(msg), 'error');
-        }
-        // Silently skip info-level system messages (startup noise, compaction, etc.)
-        return;
-      }
-
-      // Everything else (send, tool_result, etc.) is hidden
-      default:
-        return;
-    }
-  }
-
-  // \u2500\u2500 Friendly tool names \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-  function friendlyToolName(name) {
-    const map = {
-      'mcp__visionclaw__notify_user': 'Sending notification',
-      'mcp__visionclaw__manage_skills': 'Managing skills',
-      'mcp__visionclaw__upgrade': 'Checking for updates',
-      'mcp__visionclaw__manage_calendar': 'Managing calendar',
-      'mcp__visionclaw__memory': 'Accessing memory',
-      'mcp__visionclaw__computer_use_click': 'Clicking on screen',
-      'mcp__visionclaw__computer_use_scroll': 'Scrolling',
-      'mcp__visionclaw__computer_use_drag': 'Dragging',
-      'mcp__visionclaw__computer_use_type': 'Typing text',
-      'mcp__visionclaw__computer_use_key': 'Pressing keys',
-      'mcp__visionclaw__computer_use_screenshot': 'Taking screenshot',
-      'mcp__playwright__browser_navigate': 'Opening webpage',
-      'mcp__playwright__browser_click': 'Clicking in browser',
-      'mcp__playwright__browser_fill_form': 'Filling form',
-      'mcp__playwright__browser_snapshot': 'Reading page',
-      'mcp__playwright__browser_take_screenshot': 'Browser screenshot',
-      'mcp__playwright__browser_hover': 'Hovering in browser',
-      'mcp__playwright__browser_press_key': 'Pressing key in browser',
-      'mcp__playwright__browser_evaluate': 'Running browser script',
-      'mcp__playwright__browser_tabs': 'Managing browser tabs',
-      'mcp__playwright__browser_close': 'Closing browser',
-      'mcp__playwright__browser_wait': 'Waiting for page',
-      'Bash': 'Running command',
-      'Read': 'Reading file',
-      'Write': 'Writing file',
-      'Edit': 'Editing file',
-      'Glob': 'Searching files',
-      'Grep': 'Searching in files',
-      'WebSearch': 'Searching the web',
-      'web_search': 'Searching the web',
-      'WebFetch': 'Fetching webpage',
-      'Task': 'Running sub-task',
-    };
-    return map[name] || name.replace(/^mcp__\\w+__/, '').replace(/_/g, ' ');
-  }
-
-  function friendlyToolInput(name, input) {
-    if (!input || typeof input !== 'object') return '';
-    if (input.url) return input.url;
-    if (input.path) return input.path;
-    if (input.command) return input.command.length > 80 ? input.command.substring(0, 80) + '\u2026' : input.command;
-    if (input.query) return input.query;
-    if (input.text && typeof input.text === 'string') return input.text.length > 80 ? input.text.substring(0, 80) + '\u2026' : input.text;
-    if (input.action) return input.action;
-    return '';
-  }
-
-  // \u2500\u2500 Status polling \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-  function pollStatus() {
-    fetch('/console/status').then(r => r.json()).then(d => {
-      agentBusy = !!d.busy; stopRequested = !!d.stopRequested; renderStatus();
-    }).catch(() => {});
-  }
-  pollStatus();
-  setInterval(pollStatus, 3000);
-
-  // \u2500\u2500 SSE + snapshot \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-  fetch('/obs/snapshot').then(r => r.json()).then(items => {
-    for (const e of items) processEntry(e);
-  }).catch(() => {});
-
-  const es = new EventSource('/obs/events');
-  es.onopen  = () => { sseConnected = true; renderStatus(); };
-  es.onerror = () => { sseConnected = false; renderStatus(); };
-  es.onmessage = (ev) => {
-    try {
-      const entry = JSON.parse(ev.data);
-      processEntry(entry);
-      if (entry.category === 'wake')   { agentBusy = true;  stopRequested = false; renderStatus(); }
-      if (entry.category === 'result') { agentBusy = false; stopRequested = false; renderStatus(); }
-    } catch {}
-  };
-
-  renderStatus();
-</script>
-</body>
-</html>`;
-}
-
 // dist/obs/server.js
 init_wrapper();
 init_token();
@@ -1036300,6 +1035842,7 @@ function renderDesktopHtml(wsUrl, expiresAt, screens = [], opts = {}) {
 }
 
 // dist/obs/server.js
+var OBS_AUTH_COOKIE = "visionclaw_obs_auth";
 function escHtml(s11) {
   return s11.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&#39;");
 }
@@ -1036373,6 +1035916,114 @@ function maskSecret(val) {
     return "****";
   return val.slice(0, 4) + "\u2026" + val.slice(-4);
 }
+function getObsOwnerEmail() {
+  try {
+    const ownerEmail = loadOwnerConfig().ownerEmail.trim().toLowerCase();
+    return ownerEmail && ownerEmail.length > 0 ? ownerEmail : null;
+  } catch {
+    return null;
+  }
+}
+function parseCookies(header) {
+  const cookies = /* @__PURE__ */ new Map();
+  if (!header)
+    return cookies;
+  for (const part of header.split(";")) {
+    const trimmed = part.trim();
+    if (!trimmed)
+      continue;
+    const eq2 = trimmed.indexOf("=");
+    if (eq2 <= 0)
+      continue;
+    const key = trimmed.slice(0, eq2).trim();
+    const value = trimmed.slice(eq2 + 1).trim();
+    if (!key)
+      continue;
+    cookies.set(key, value);
+  }
+  return cookies;
+}
+function renderObsLoginHtml(errorMessage) {
+  const errorBlock = errorMessage ? `<p style="margin:0 0 16px;color:#b91c1c;">${escHtml(errorMessage)}</p>` : "";
+  return `<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <title>VisionClaw OBS Access</title>
+    <style>
+      :root {
+        color-scheme: light;
+        font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+        background: #f5f1e8;
+        color: #1f2937;
+      }
+      body {
+        margin: 0;
+        min-height: 100vh;
+        display: grid;
+        place-items: center;
+        background:
+          radial-gradient(circle at top, rgba(196, 181, 253, 0.14), transparent 32rem),
+          linear-gradient(180deg, #f7f4ed 0%, #efe8dc 100%);
+      }
+      main {
+        width: min(28rem, calc(100vw - 2rem));
+        padding: 2rem;
+        background: rgba(255, 255, 255, 0.92);
+        border: 1px solid rgba(15, 23, 42, 0.08);
+        border-radius: 1rem;
+        box-shadow: 0 18px 45px rgba(15, 23, 42, 0.10);
+      }
+      h1 {
+        margin: 0 0 0.75rem;
+        font-size: 1.5rem;
+      }
+      p {
+        margin: 0 0 1rem;
+        line-height: 1.5;
+      }
+      label {
+        display: block;
+        margin: 0 0 0.5rem;
+        font-weight: 600;
+      }
+      input {
+        width: 100%;
+        box-sizing: border-box;
+        padding: 0.8rem 0.9rem;
+        border: 1px solid #cbd5e1;
+        border-radius: 0.75rem;
+        font: inherit;
+      }
+      button {
+        margin-top: 1rem;
+        width: 100%;
+        border: 0;
+        border-radius: 0.75rem;
+        padding: 0.85rem 1rem;
+        font: inherit;
+        font-weight: 600;
+        color: white;
+        background: #0f766e;
+        cursor: pointer;
+      }
+    </style>
+  </head>
+  <body>
+    <main>
+      <h1>VisionClaw OBS</h1>
+      <p>Enter the owner's email to access the observability console.</p>
+      ${errorBlock}
+      <form method="POST" action="/obs/login">
+        <label for="ownerEmail">Owner email</label>
+        <input id="ownerEmail" name="ownerEmail" type="email" autocomplete="email" required>
+        <button type="submit">Continue</button>
+      </form>
+    </main>
+  </body>
+</html>`;
+}
 function readConfigInfo() {
   try {
     const config2 = loadConfig();
@@ -1036477,6 +1036128,8 @@ function startObsServer(options3 = {}) {
     }
   });
   const rdpStreamManager = new StreamManager();
+  const obsOwnerEmail = getObsOwnerEmail();
+  const obsOwnerEmailHash = obsOwnerEmail ? import_node_crypto16.default.createHash("sha256").update(obsOwnerEmail).digest("hex") : null;
   const server = import_node_http5.default.createServer((req, res) => {
     try {
       handleRequest(req, res);
@@ -1036492,7 +1036145,70 @@ function startObsServer(options3 = {}) {
     try {
       const url2 = new import_node_url7.URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
       const pathname = url2.pathname;
-      if (pathname === "/" || pathname === "/obs" || pathname === "/obs/") {
+      const cookies = parseCookies(req.headers.cookie);
+      const hasObsSession = obsOwnerEmailHash !== null && cookies.get(OBS_AUTH_COOKIE) === obsOwnerEmailHash;
+      const requireObsAuth = () => {
+        if (hasObsSession)
+          return true;
+        res.statusCode = 401;
+        res.setHeader("content-type", "text/html; charset=utf-8");
+        res.setHeader("cache-control", "no-store");
+        res.end(renderObsLoginHtml());
+        return false;
+      };
+      if (pathname === "/") {
+        res.statusCode = 404;
+        res.setHeader("content-type", "text/plain; charset=utf-8");
+        res.setHeader("cache-control", "no-store");
+        res.end("Not found");
+        return;
+      }
+      if (pathname === "/obs/login" && req.method === "GET") {
+        if (hasObsSession) {
+          res.statusCode = 302;
+          res.setHeader("location", "/obs");
+          res.end();
+          return;
+        }
+        res.statusCode = 200;
+        res.setHeader("content-type", "text/html; charset=utf-8");
+        res.setHeader("cache-control", "no-store");
+        res.end(renderObsLoginHtml());
+        return;
+      }
+      if (pathname === "/obs/login" && req.method === "POST") {
+        const chunks = [];
+        req.on("data", (chunk) => {
+          chunks.push(chunk);
+        });
+        req.on("end", () => {
+          const body = Buffer.concat(chunks).toString("utf8");
+          const form = new URLSearchParams(body);
+          const submittedEmail = form.get("ownerEmail")?.trim().toLowerCase() ?? "";
+          if (obsOwnerEmail && submittedEmail === obsOwnerEmail) {
+            res.statusCode = 302;
+            res.setHeader("location", "/obs");
+            res.setHeader("set-cookie", `${OBS_AUTH_COOKIE}=${obsOwnerEmailHash}; Path=/obs; HttpOnly; SameSite=Strict`);
+            res.end();
+            return;
+          }
+          res.statusCode = 401;
+          res.setHeader("content-type", "text/html; charset=utf-8");
+          res.setHeader("cache-control", "no-store");
+          res.end(renderObsLoginHtml("That email does not match the configured owner."));
+        });
+        return;
+      }
+      if (pathname === "/obs/logout" && req.method === "POST") {
+        res.statusCode = 302;
+        res.setHeader("location", "/obs/login");
+        res.setHeader("set-cookie", `${OBS_AUTH_COOKIE}=; Path=/obs; HttpOnly; SameSite=Strict; Max-Age=0`);
+        res.end();
+        return;
+      }
+      if (pathname === "/obs" || pathname === "/obs/") {
+        if (!requireObsAuth())
+          return;
         const html = renderIndexHtml();
         res.statusCode = 200;
         res.setHeader("content-type", "text/html; charset=utf-8");
@@ -1036501,6 +1036217,8 @@ function startObsServer(options3 = {}) {
         return;
       }
       if (pathname === "/obs/health") {
+        if (!requireObsAuth())
+          return;
         res.statusCode = 200;
         res.setHeader("content-type", "application/json; charset=utf-8");
         res.setHeader("cache-control", "no-store");
@@ -1036508,6 +1036226,8 @@ function startObsServer(options3 = {}) {
         return;
       }
       if (pathname === "/obs/snapshot") {
+        if (!requireObsAuth())
+          return;
         res.statusCode = 200;
         res.setHeader("content-type", "application/json; charset=utf-8");
         res.setHeader("cache-control", "no-store");
@@ -1036515,6 +1036235,8 @@ function startObsServer(options3 = {}) {
         return;
       }
       if (pathname === "/obs/memory") {
+        if (!requireObsAuth())
+          return;
         res.statusCode = 200;
         res.setHeader("content-type", "application/json; charset=utf-8");
         res.setHeader("cache-control", "no-store");
@@ -1036522,6 +1036244,8 @@ function startObsServer(options3 = {}) {
         return;
       }
       if (pathname === "/obs/skills") {
+        if (!requireObsAuth())
+          return;
         res.statusCode = 200;
         res.setHeader("content-type", "application/json; charset=utf-8");
         res.setHeader("cache-control", "no-store");
@@ -1036529,6 +1036253,8 @@ function startObsServer(options3 = {}) {
         return;
       }
       if (pathname === "/obs/config") {
+        if (!requireObsAuth())
+          return;
         res.statusCode = 200;
         res.setHeader("content-type", "application/json; charset=utf-8");
         res.setHeader("cache-control", "no-store");
@@ -1036536,6 +1036262,8 @@ function startObsServer(options3 = {}) {
         return;
       }
       if (pathname === "/obs/todos") {
+        if (!requireObsAuth())
+          return;
         res.statusCode = 200;
         res.setHeader("content-type", "application/json; charset=utf-8");
         res.setHeader("cache-control", "no-store");
@@ -1036548,6 +1036276,8 @@ function startObsServer(options3 = {}) {
         return;
       }
       if (pathname === "/obs/tunnel-url") {
+        if (!requireObsAuth())
+          return;
         res.statusCode = 200;
         res.setHeader("content-type", "application/json; charset=utf-8");
         res.setHeader("cache-control", "no-store");
@@ -1036555,6 +1036285,8 @@ function startObsServer(options3 = {}) {
         return;
       }
       if (pathname === "/obs/status") {
+        if (!requireObsAuth())
+          return;
         res.setHeader("content-type", "text/plain; charset=utf-8");
         res.setHeader("cache-control", "no-store");
         const forceRefresh = url2.searchParams.get("refresh") === "1";
@@ -1036573,6 +1036305,8 @@ function startObsServer(options3 = {}) {
         return;
       }
       if (pathname === "/obs/events") {
+        if (!requireObsAuth())
+          return;
         res.statusCode = 200;
         res.setHeader("content-type", "text/event-stream; charset=utf-8");
         res.setHeader("cache-control", "no-store");
@@ -1036599,11 +1036333,10 @@ function startObsServer(options3 = {}) {
         return;
       }
       if (pathname === "/console" || pathname === "/console/") {
-        const html = renderConsoleHtml();
-        res.statusCode = 200;
-        res.setHeader("content-type", "text/html; charset=utf-8");
+        res.statusCode = 501;
+        res.setHeader("content-type", "text/plain; charset=utf-8");
         res.setHeader("cache-control", "no-store");
-        res.end(html);
+        res.end("Not implemented");
         return;
       }
       if (pathname === "/console/status") {
@@ -1036632,6 +1036365,8 @@ function startObsServer(options3 = {}) {
         return;
       }
       if (pathname === "/obs/tunnel/status") {
+        if (!requireObsAuth())
+          return;
         res.statusCode = 200;
         res.setHeader("content-type", "application/json; charset=utf-8");
         res.setHeader("cache-control", "no-store");
@@ -1036643,6 +1036378,8 @@ function startObsServer(options3 = {}) {
         return;
       }
       if (pathname === "/obs/tunnel/start" && req.method === "POST") {
+        if (!requireObsAuth())
+          return;
         res.setHeader("content-type", "application/json; charset=utf-8");
         if (!tunnelProvider) {
           res.statusCode = 400;
@@ -1036654,7 +1036391,7 @@ function startObsServer(options3 = {}) {
           res.end(JSON.stringify({ ok: false, error: "server not yet bound" }));
           return;
         }
-        doStartTunnel(boundPort, { notify: true }).then((url3) => {
+        doStartTunnel(boundPort).then((url3) => {
           res.statusCode = 200;
           res.end(JSON.stringify({ ok: true, url: url3 }));
         }).catch((err7) => {
@@ -1036664,6 +1036401,8 @@ function startObsServer(options3 = {}) {
         return;
       }
       if (pathname === "/obs/tunnel/stop" && req.method === "POST") {
+        if (!requireObsAuth())
+          return;
         res.setHeader("content-type", "application/json; charset=utf-8");
         if (tunnelStop) {
           tunnelStop().then(() => {
@@ -1036830,7 +1036569,7 @@ function startObsServer(options3 = {}) {
     };
   }
   let tunnelLifecycleChain = Promise.resolve(null);
-  async function doStartTunnelInner(actualPort2, opts) {
+  async function doStartTunnelInner(actualPort2) {
     if (!tunnelProvider)
       return null;
     let url2 = null;
@@ -1036856,14 +1036595,10 @@ function startObsServer(options3 = {}) {
       getAgentState().consoleUrl = url2 ?? void 0;
     } catch {
     }
-    if (opts?.notify && options3.config) {
-      notifyOwnerTunnelUrl(url2, options3.config).catch((_err) => {
-      });
-    }
     return url2;
   }
-  function doStartTunnel(actualPort2, opts) {
-    const next = tunnelLifecycleChain.catch(() => null).then(() => doStartTunnelInner(actualPort2, opts));
+  function doStartTunnel(actualPort2) {
+    const next = tunnelLifecycleChain.catch(() => null).then(() => doStartTunnelInner(actualPort2));
     tunnelLifecycleChain = next;
     return next;
   }
@@ -1036889,7 +1036624,7 @@ function startObsServer(options3 = {}) {
       if (!p10 || !tunnelProvider)
         return null;
       logger.system("Restarting tunnel...");
-      const url2 = await doStartTunnel(p10, { notify: true });
+      const url2 = await doStartTunnel(p10);
       if (url2) {
         logger.system(`Tunnel restarted: ${url2}`);
       }