wednesdayai 0.4.12-dev.711 → 0.4.12-dev.715

package/dist/{gateway-cli-BtV-wVjj.js → gateway-cli-BTuK5wC4.js}

@@ -1,188 +1,188 @@
 import { g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-BBP4yd-2.js";
-import { $ as readLoggingConfig, A as setVerbose, At as resolvePreferredOpenClawTmpDir, C as truncateUtf16Safe, F as isRich, I as theme, K as resolveFileLogProfile, L as getChildLogger, P as colorize, R as getLogger, W as appendFileLog, _t as isNotFoundPathError, c as ensureDir, dt as openVerifiedFileSync, ft as sameFileIdentity, g as resolveUserPath, lt as openBoundaryFile, t as CONFIG_DIR, ut as openBoundaryFileSync, vt as isPathInside, y as shortenHomePath, z as getResolvedLoggerSettings } from "./utils-CmAaKeiM.js";
+import { $ as readLoggingConfig, A as setVerbose, At as resolvePreferredOpenClawTmpDir, C as truncateUtf16Safe, F as isRich, I as theme, K as resolveFileLogProfile, L as getChildLogger, P as colorize, R as getLogger, W as appendFileLog, _t as isNotFoundPathError, c as ensureDir, dt as openVerifiedFileSync, ft as sameFileIdentity, g as resolveUserPath, lt as openBoundaryFile, t as CONFIG_DIR, ut as openBoundaryFileSync, vt as isPathInside, y as shortenHomePath, z as getResolvedLoggerSettings } from "./utils-CMEUUHmM.js";
 import { t as isPlainObject } from "./plain-object-DHRdTVMa.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-DDYFn78t.js";
-import { $ as deferGatewayRestartUntilIdle, $n as OPENAI_TTS_MODELS, $t as createOutboundSendDeps$1, A as resolveCronSession, An as resolveHeartbeatDeliveryTarget, At as requestNudge, B as readLatestAssistantReply, Bn as resolveUserTimezone, Bt as handleSlackHttpRequest, C as startHeartbeatRunner, Cn as dispatchInboundMessage, Cr as DEFAULT_INPUT_TIMEOUT_MS, Ct as resolvePluginTools, D as onHeartbeatEvent, Dr as resolveInputFileLimits, Dt as loadOpenClawPlugins, E as getLastHeartbeatEvent, En as getTotalPendingReplies, Er as normalizeMimeList, Et as getLoadedAnalysisConcurrency, F as resolveExecConfig, Fn as resetDirectoryCache, Gn as resolveTtsApiKey, Gt as agentCommandFromIngress, H as canonicalizeSpawnedByForAgent, Hn as getTtsProvider, Ht as requestBodyErrorToText, I as applyToolPolicyPipeline, In as isAbortRequestText, J as pruneLegacyStoreKeys, Jn as resolveTtsPrefsPath, Jt as resolveAgentOutboundTarget, K as loadCombinedSessionStoreForGateway, Kn as resolveTtsAutoMode, L as buildDefaultToolPolicyPipelineSteps, M as runEmbeddedPiAgent, Mn as resolveSessionDeliveryTarget, N as prepareSessionManagerForRun, Nn as resolveOutboundChannelPlugin, Nt as loadProviderUsageSummary, O as redactSensitiveHeartbeatEvent, On as ensureOutboundSessionEntry, Or as resolveAgentTimeoutMs, Ot as takePendingActivationMigration, Q as consumeGatewaySigusr1RestartAuthorization, Qn as textToSpeech, Qt as createDefaultDeps, Rn as setTaskPipelineStatus, Rt as resolveAgentOutboundIdentity, S as setHeartbeatsEnabled, Sr as DEFAULT_INPUT_MAX_REDIRECTS, St as getPluginToolMeta, T as resolveHeartbeatVisibility, Tn as createReplyDispatcher, Tr as extractImageContentFromSource, Tt as clearPluginRegistryCaches, Un as isTtsEnabled, V as resolveAnnounceTargetFromKey, Vt as readJsonBodyWithLimit, W as listAgentsForGateway, Wn as isTtsProviderConfigured, X as resolveSessionModelRef, Xn as setTtsEnabled, Y as resolveGatewaySessionStoreTarget, Yn as resolveTtsProviderOrder, Yt as createOutboundSendDeps, Zn as setTtsProvider, _ as runMainAgentTurn, _n as detectSuspiciousPatterns, _r as resolveAgentSessionDirs, _t as buildDeliveryFromLegacyPayload, ar as stripHeartbeatToken, at as setPreRestartDeferralCheck, b as runHeartbeatOnce, br as DEFAULT_INPUT_IMAGE_MAX_BYTES, bt as applyBrowserProxyPaths, cr as isSystemEventContextChanged, ct as formatDoctorNonInteractiveHint, d as countActiveDescendantRuns, dn as resolveSessionAuthProfileOverride, dt as summarizeRestartSentinel, en as runWithModelFallback, er as OPENAI_TTS_VOICES, et as emitGatewayRestart, f as initSubagentRegistry, fn as resolveAgentAvatar, fr as requestHeartbeatNow, gn as buildSafeExternalPrompt, gr as getAcpSessionManager, gt as migrateLegacyCronPayload, h as runSubagentAnnounceFlow, hr as ACP_SESSION_IDENTITY_RENDERER_VERSION, ht as normalizeCronJobPatch, ir as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, it as setGatewaySigusr1RestartPolicy, j as resolveCronStyleNow, jn as resolveOutboundTarget, k as isCronSystemEvent, kn as resolveOutboundSessionRoute, kt as createPluginRuntime, ln as computeBackoff, lt as formatRestartSentinelMessage, mt as normalizeCronJobCreate, nn as setCliSessionId, nr as getExistingFollowupQueue, nt as markGatewaySigusr1RestartHandled, o as resolveChannelAccountEnabled, or as ToolInputError, ot as triggerOpenClawRestart, p as listDescendantRunsForRequester, pt as writeRestartSentinel, q as loadSessionEntry, qn as resolveTtsConfig, qt as resolveAgentDeliveryPlan, rn as runCliAgent, rr as removeQueuedFollowupRun, rt as scheduleGatewaySigusr1Restart, s as BARE_SESSION_RESET_PROMPT, sn as lookupContextTokens, sr as enqueueSystemEvent, st as consumeRestartSentinel, tn as getCliSessionId, tr as clearSessionQueues, tt as isGatewaySigusr1RestartExternallyAllowed, un as sleepWithAbort, v as resolveHeartbeatConfig, vn as getHookType, vt as hasLegacyDeliveryHints, w as runWakeGate, wn as setDispatchInboundAdmissionRejectionFor, wr as extractFileContentFromSource, xn as buildHistoryContextFromEntries, xr as DEFAULT_INPUT_IMAGE_MIMES, xt as persistBrowserProxyFiles, y as resolveHeartbeatSummaryForAgent, yn as isExternalHookSession, yr as resolveSendPolicy, yt as stripLegacyDeliveryFields, z as createOpenClawTools, zn as DEFAULT_MAX_PARALLEL } from "./reply-BsDGtY7Y.js";
-import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, M as matchesSkillFilter, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-BAXIXdUR.js";
-import { m as defaultRuntime, n as runtimeForLogger, o as setConsoleSubsystemFilter, s as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-DRdkfGsB.js";
+import { $ as deferGatewayRestartUntilIdle, $n as OPENAI_TTS_MODELS, $t as createOutboundSendDeps$1, A as resolveCronSession, An as resolveHeartbeatDeliveryTarget, At as requestNudge, B as readLatestAssistantReply, Bn as resolveUserTimezone, Bt as handleSlackHttpRequest, C as startHeartbeatRunner, Cn as dispatchInboundMessage, Cr as DEFAULT_INPUT_TIMEOUT_MS, Ct as resolvePluginTools, D as onHeartbeatEvent, Dr as resolveInputFileLimits, Dt as loadOpenClawPlugins, E as getLastHeartbeatEvent, En as getTotalPendingReplies, Er as normalizeMimeList, Et as getLoadedAnalysisConcurrency, F as resolveExecConfig, Fn as resetDirectoryCache, Gn as resolveTtsApiKey, Gt as agentCommandFromIngress, H as canonicalizeSpawnedByForAgent, Hn as getTtsProvider, Ht as requestBodyErrorToText, I as applyToolPolicyPipeline, In as isAbortRequestText, J as pruneLegacyStoreKeys, Jn as resolveTtsPrefsPath, Jt as resolveAgentOutboundTarget, K as loadCombinedSessionStoreForGateway, Kn as resolveTtsAutoMode, L as buildDefaultToolPolicyPipelineSteps, M as runEmbeddedPiAgent, Mn as resolveSessionDeliveryTarget, N as prepareSessionManagerForRun, Nn as resolveOutboundChannelPlugin, Nt as loadProviderUsageSummary, O as redactSensitiveHeartbeatEvent, On as ensureOutboundSessionEntry, Or as resolveAgentTimeoutMs, Ot as takePendingActivationMigration, Q as consumeGatewaySigusr1RestartAuthorization, Qn as textToSpeech, Qt as createDefaultDeps, Rn as setTaskPipelineStatus, Rt as resolveAgentOutboundIdentity, S as setHeartbeatsEnabled, Sr as DEFAULT_INPUT_MAX_REDIRECTS, St as getPluginToolMeta, T as resolveHeartbeatVisibility, Tn as createReplyDispatcher, Tr as extractImageContentFromSource, Tt as clearPluginRegistryCaches, Un as isTtsEnabled, V as resolveAnnounceTargetFromKey, Vt as readJsonBodyWithLimit, W as listAgentsForGateway, Wn as isTtsProviderConfigured, X as resolveSessionModelRef, Xn as setTtsEnabled, Y as resolveGatewaySessionStoreTarget, Yn as resolveTtsProviderOrder, Yt as createOutboundSendDeps, Zn as setTtsProvider, _ as runMainAgentTurn, _n as detectSuspiciousPatterns, _r as resolveAgentSessionDirs, _t as buildDeliveryFromLegacyPayload, ar as stripHeartbeatToken, at as setPreRestartDeferralCheck, b as runHeartbeatOnce, br as DEFAULT_INPUT_IMAGE_MAX_BYTES, bt as applyBrowserProxyPaths, cr as isSystemEventContextChanged, ct as formatDoctorNonInteractiveHint, d as countActiveDescendantRuns, dn as resolveSessionAuthProfileOverride, dt as summarizeRestartSentinel, en as runWithModelFallback, er as OPENAI_TTS_VOICES, et as emitGatewayRestart, f as initSubagentRegistry, fn as resolveAgentAvatar, fr as requestHeartbeatNow, gn as buildSafeExternalPrompt, gr as getAcpSessionManager, gt as migrateLegacyCronPayload, h as runSubagentAnnounceFlow, hr as ACP_SESSION_IDENTITY_RENDERER_VERSION, ht as normalizeCronJobPatch, ir as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, it as setGatewaySigusr1RestartPolicy, j as resolveCronStyleNow, jn as resolveOutboundTarget, k as isCronSystemEvent, kn as resolveOutboundSessionRoute, kt as createPluginRuntime, ln as computeBackoff, lt as formatRestartSentinelMessage, mt as normalizeCronJobCreate, nn as setCliSessionId, nr as getExistingFollowupQueue, nt as markGatewaySigusr1RestartHandled, o as resolveChannelAccountEnabled, or as ToolInputError, ot as triggerOpenClawRestart, p as listDescendantRunsForRequester, pt as writeRestartSentinel, q as loadSessionEntry, qn as resolveTtsConfig, qt as resolveAgentDeliveryPlan, rn as runCliAgent, rr as removeQueuedFollowupRun, rt as scheduleGatewaySigusr1Restart, s as BARE_SESSION_RESET_PROMPT, sn as lookupContextTokens, sr as enqueueSystemEvent, st as consumeRestartSentinel, tn as getCliSessionId, tr as clearSessionQueues, tt as isGatewaySigusr1RestartExternallyAllowed, un as sleepWithAbort, v as resolveHeartbeatConfig, vn as getHookType, vt as hasLegacyDeliveryHints, w as runWakeGate, wn as setDispatchInboundAdmissionRejectionFor, wr as extractFileContentFromSource, xn as buildHistoryContextFromEntries, xr as DEFAULT_INPUT_IMAGE_MIMES, xt as persistBrowserProxyFiles, y as resolveHeartbeatSummaryForAgent, yn as isExternalHookSession, yr as resolveSendPolicy, yt as stripLegacyDeliveryFields, z as createOpenClawTools, zn as DEFAULT_MAX_PARALLEL } from "./reply-BIZ2zaUq.js";
+import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, M as matchesSkillFilter, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-CWTkr4pS.js";
+import { m as defaultRuntime, n as runtimeForLogger, o as setConsoleSubsystemFilter, s as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-DDZBycwS.js";
 import { A as isCronRunSessionKey, M as isSubagentSessionKey, N as parseAgentSessionKey, S as normalizeAccountId$1, a as classifySessionKeyShape, b as toAgentStoreSessionKey, d as normalizeAgentId, f as normalizeMainKey, g as resolveLinkedPeerIdForChannel, h as resolveConfiguredCanonicalIdentity, p as resolveAgentIdFromSessionKey, r as buildAgentMainSessionKey, t as DEFAULT_AGENT_ID, x as DEFAULT_ACCOUNT_ID, y as toAgentRequestSessionKey } from "./session-key-B1wN38jV.js";
-import { i as logWarn, t as logDebug } from "./logger-BCqJpXqF.js";
-import { n as runExec, t as runCommandWithTimeout } from "./exec-Cg_eKCg0.js";
-import { n as resolveOpenClawPackageRoot } from "./openclaw-root-B2l0kAM1.js";
-import { $a as clientResumeRecordArtifactId, $r as closeConfiguredSessionStorageRuntime, Aa as parseDurationMs, Ac as setPluginTaskAdmissionRejectionFor, Ai as capArrayByJsonBytes, At as advanceRuntimeConfigSnapshot, Ba as isJsonlSessionBackend, Bt as validateConfigObjectWithPlugins, C as resolveThinkingDefault, Cl as applyLegacyMigrations, Da as createAsyncLock, Dn as isAvatarImageDataUrl, Dr as getRegisteredPluginApis, Ds as normalizeWhatsAppTarget, Du as loadAuthProfileStoreForRuntime, Ei as normalizeSessionDeliveryFields, En as isAvatarHttpUrl, Fl as normalizeTalkSection, Ft as readConfigFileSnapshot, Gr as listRealtimeVoiceProviders, Hr as getRegisteredRealtimeTranscriptionProviders, Il as resolveActiveTalkProviderConfig, It as readConfigFileSnapshotForWrite, Ja as createSessionStorageRuntimeFromConfig, Ji as stripEnvelopeFromMessage, Jo as resolveAgentMainSessionKey, Jr as registerInternalHook, Js as isGatewayCliClient, Ki as buildReplyContextPayload, Ko as setSessionRuntimeModel, Kr as clearInternalHooks, Ks as INTERNAL_MESSAGE_CHANNEL, Ll as resolveTalkCatalogApiKeyStatus, Lt as resolveConfigSnapshotHash, Lu as isPidAlive, Ma as extractDeliveryInfo, Mc as RecoveryAdmissionError, Mi as findNewestMessageEntryIdInTranscript, Mt as createConfigIO, Na as parseSessionThreadInfo, Nc as composeRestartDeferralWithAdmission, Ni as findTranscriptMessageEntryById, Nl as DEFAULT_TALK_CONVERSATION_MODEL_ID, No as decodeKeysetCursor, Nt as loadConfig, Oa as readJsonFile, Or as listRestartRecoveryAdapters, Pc as createRootWorkAdmission, Pl as buildTalkConfigResponse, Po as encodeKeysetCursor, Pr as emitStartupPluginHealthReport, Pt as parseConfigJson5, Qa as CLIENT_RESUME_RECORD_KIND, Qi as stripInlineDirectiveTagsFromMessageForDisplay, Qr as activateConfiguredSessionStorageRuntime, Qs as isWebchatClient, Ra as createPreservationLeaseService, Rl as resolveTalkConversationConfig, Ru as resolveAuthProfileDisplayLabel, Si as deliveryContextFromSession, Sl as applyMergePatch, Sr as setGatewayPluginRegistry, Tr as createEmptyPluginRegistry, Un as isTestDefaultMemorySlotDisabled, Ur as getRegisteredRealtimeVoiceProviders, Uu as normalizeSecretInput, Va as hydrateAndAppendToBackend, Vr as getRealtimeVoiceProvider, Vt as OpenClawSchema, Wi as REPLY_CONTEXT_CUSTOM_TYPE, Wo as mergeSessionEntry, Wr as getRegisteredStreamingSpeechProviders, Xo as resolveMainSessionKey, Xr as StorageReadAccessError, Ya as resolveSessionStorageConfig, Yi as stripEnvelopeFromMessages, Yn as defaultSlotIdForKey, Yo as resolveExplicitAgentSessionKey, Yr as triggerInternalHook, Ys as isGatewayMessageChannel, Za as validateCtxStorage, Zi as stripInlineDirectiveTagsForDisplay, Zo as resolveMainSessionKeyFromConfig, _ as resolveDefaultModelForAgent, a as getModelRefStatus, ac as GATEWAY_CLIENT_MODES, ai as isPreservationArmed, al as resolveExecutablePath, ao as PASS_METRICS_MAX_BYTES, ci as mirrorPreparedConfiguredSessionStorageRuntimeRecord, co as onRunInvalidation, cu as resolveAgentMaxConcurrent, do as diffManifestOwnedReconcileIndexRecords, ec as normalizeMessageChannel, ed as DEFAULT_CONTEXT_TOKENS, ei as closeReplacedConfiguredSessionStorageRuntime, eo as isVerificationStoreError, es as getChannelPlugin, et as getApiKeyForModel, f as normalizeProviderIdForAuth, fi as refreshPreparedConfiguredSessionStorageRuntimeActivation, fo as fingerprintReconcileIndexRecords, g as resolveConfiguredModelRef, gi as syncConfiguredSessionTranscriptToRuntime, hc as cleanStaleLockFiles, ho as reconcileSessionIndex, hr as getActivePluginRegistry, ic as GATEWAY_CLIENT_IDS, ii as getConfiguredSessionStorageRuntime, io as PASS_MEASUREMENT_SCHEMA_VERSION, ir as CHANNEL_IDS, ja as parseByteSize, ji as cleanupArchivedSessionTranscripts, jn as looksLikeAvatarPath, jr as setSessionWorkAvailableNotifier, ka as writeJsonAtomic, ki as archiveSessionTranscripts, ko as formatZonedTimestamp, ks as resolveWhatsAppAccount, kt as migrateLegacyConfig, lc as normalizeGatewayClientMode, li as prepareConfiguredSessionStorageRuntimeActivation, lu as resolveNestedAgentMaxConcurrent, m as resolveAllowedModelRef, mi as setActivePreservationLease, mo as projectManifestOwnedReconcileIndexRecords, na as normalizeInputProvenance, nd as DEFAULT_PROVIDER, ni as createJsonlSessionStorageFallbackRuntime, nn as EXEC_POLICY_PRESET_IDS, ns as normalizeChannelId, oc as GATEWAY_CLIENT_NAMES, oi as loadSessionStore, ps as buildChannelAccountBindings, qo as canonicalizeMainSessionAlias, qr as createInternalHookEvent, qs as isDeliverableMessageChannel, ra as jsonUtf8Bytes, rc as GATEWAY_CLIENT_CAPS, ri as getActivePreservationLease, ro as PASS_ITEMS_MAX_KEYS, rt as resolveApiKeyForProvider, s as isCliProvider, sc as hasGatewayClientCap, si as loadSessionStoreFromDisk, sn as resolveGatewayWebClientBasePath, so as isPassIdentifier, t as buildAllowedModelSet, td as DEFAULT_MODEL, ti as commitPreparedConfiguredSessionStorageRuntimeActivation, tn as coerceIdentityValue, ts as listChannelPlugins, u as normalizeModelSelection, uo as applyReconcileSessionIndex, uu as resolveSubagentMaxConcurrent, v as resolveHooksGmailModel, vi as updateSessionStore, vo as serializeSessionIndexRecordKey, wi as mergeDeliveryContext, wl as ensureControlUiAllowedOriginsForNonLoopbackBind, wn as AVATAR_MAX_BYTES, xt as resolveProfileUnusableUntilForDisplay, za as withPreservationWriterPermit, zl as resolveTalkProviderConfigApiKey, zt as writeConfigFile } from "./model-selection-C8GCtGby.js";
+import { i as logWarn, t as logDebug } from "./logger-0VqfDbvM.js";
+import { n as runExec, t as runCommandWithTimeout } from "./exec-CHq-p5L0.js";
+import { n as resolveOpenClawPackageRoot } from "./openclaw-root-BGUYWYDG.js";
+import { $a as clientResumeRecordArtifactId, $r as closeConfiguredSessionStorageRuntime, Aa as parseDurationMs, Ac as setPluginTaskAdmissionRejectionFor, Ai as capArrayByJsonBytes, At as advanceRuntimeConfigSnapshot, Ba as isJsonlSessionBackend, Bt as validateConfigObjectWithPlugins, C as resolveThinkingDefault, Cl as applyLegacyMigrations, Da as createAsyncLock, Dn as isAvatarImageDataUrl, Dr as getRegisteredPluginApis, Ds as normalizeWhatsAppTarget, Du as loadAuthProfileStoreForRuntime, Ei as normalizeSessionDeliveryFields, En as isAvatarHttpUrl, Fl as normalizeTalkSection, Ft as readConfigFileSnapshot, Gr as listRealtimeVoiceProviders, Hr as getRegisteredRealtimeTranscriptionProviders, Il as resolveActiveTalkProviderConfig, It as readConfigFileSnapshotForWrite, Ja as createSessionStorageRuntimeFromConfig, Ji as stripEnvelopeFromMessage, Jo as resolveAgentMainSessionKey, Jr as registerInternalHook, Js as isGatewayCliClient, Ki as buildReplyContextPayload, Ko as setSessionRuntimeModel, Kr as clearInternalHooks, Ks as INTERNAL_MESSAGE_CHANNEL, Ll as resolveTalkCatalogApiKeyStatus, Lt as resolveConfigSnapshotHash, Lu as isPidAlive, Ma as extractDeliveryInfo, Mc as RecoveryAdmissionError, Mi as findNewestMessageEntryIdInTranscript, Mt as createConfigIO, Na as parseSessionThreadInfo, Nc as composeRestartDeferralWithAdmission, Ni as findTranscriptMessageEntryById, Nl as DEFAULT_TALK_CONVERSATION_MODEL_ID, No as decodeKeysetCursor, Nt as loadConfig, Oa as readJsonFile, Or as listRestartRecoveryAdapters, Pc as createRootWorkAdmission, Pl as buildTalkConfigResponse, Po as encodeKeysetCursor, Pr as emitStartupPluginHealthReport, Pt as parseConfigJson5, Qa as CLIENT_RESUME_RECORD_KIND, Qi as stripInlineDirectiveTagsFromMessageForDisplay, Qr as activateConfiguredSessionStorageRuntime, Qs as isWebchatClient, Ra as createPreservationLeaseService, Rl as resolveTalkConversationConfig, Ru as resolveAuthProfileDisplayLabel, Si as deliveryContextFromSession, Sl as applyMergePatch, Sr as setGatewayPluginRegistry, Tr as createEmptyPluginRegistry, Un as isTestDefaultMemorySlotDisabled, Ur as getRegisteredRealtimeVoiceProviders, Uu as normalizeSecretInput, Va as hydrateAndAppendToBackend, Vr as getRealtimeVoiceProvider, Vt as OpenClawSchema, Wi as REPLY_CONTEXT_CUSTOM_TYPE, Wo as mergeSessionEntry, Wr as getRegisteredStreamingSpeechProviders, Xo as resolveMainSessionKey, Xr as StorageReadAccessError, Ya as resolveSessionStorageConfig, Yi as stripEnvelopeFromMessages, Yn as defaultSlotIdForKey, Yo as resolveExplicitAgentSessionKey, Yr as triggerInternalHook, Ys as isGatewayMessageChannel, Za as validateCtxStorage, Zi as stripInlineDirectiveTagsForDisplay, Zo as resolveMainSessionKeyFromConfig, _ as resolveDefaultModelForAgent, a as getModelRefStatus, ac as GATEWAY_CLIENT_MODES, ai as isPreservationArmed, al as resolveExecutablePath, ao as PASS_METRICS_MAX_BYTES, ci as mirrorPreparedConfiguredSessionStorageRuntimeRecord, co as onRunInvalidation, cu as resolveAgentMaxConcurrent, do as diffManifestOwnedReconcileIndexRecords, ec as normalizeMessageChannel, ed as DEFAULT_CONTEXT_TOKENS, ei as closeReplacedConfiguredSessionStorageRuntime, eo as isVerificationStoreError, es as getChannelPlugin, et as getApiKeyForModel, f as normalizeProviderIdForAuth, fi as refreshPreparedConfiguredSessionStorageRuntimeActivation, fo as fingerprintReconcileIndexRecords, g as resolveConfiguredModelRef, gi as syncConfiguredSessionTranscriptToRuntime, hc as cleanStaleLockFiles, ho as reconcileSessionIndex, hr as getActivePluginRegistry, ic as GATEWAY_CLIENT_IDS, ii as getConfiguredSessionStorageRuntime, io as PASS_MEASUREMENT_SCHEMA_VERSION, ir as CHANNEL_IDS, ja as parseByteSize, ji as cleanupArchivedSessionTranscripts, jn as looksLikeAvatarPath, jr as setSessionWorkAvailableNotifier, ka as writeJsonAtomic, ki as archiveSessionTranscripts, ko as formatZonedTimestamp, ks as resolveWhatsAppAccount, kt as migrateLegacyConfig, lc as normalizeGatewayClientMode, li as prepareConfiguredSessionStorageRuntimeActivation, lu as resolveNestedAgentMaxConcurrent, m as resolveAllowedModelRef, mi as setActivePreservationLease, mo as projectManifestOwnedReconcileIndexRecords, na as normalizeInputProvenance, nd as DEFAULT_PROVIDER, ni as createJsonlSessionStorageFallbackRuntime, nn as EXEC_POLICY_PRESET_IDS, ns as normalizeChannelId, oc as GATEWAY_CLIENT_NAMES, oi as loadSessionStore, ps as buildChannelAccountBindings, qo as canonicalizeMainSessionAlias, qr as createInternalHookEvent, qs as isDeliverableMessageChannel, ra as jsonUtf8Bytes, rc as GATEWAY_CLIENT_CAPS, ri as getActivePreservationLease, ro as PASS_ITEMS_MAX_KEYS, rt as resolveApiKeyForProvider, s as isCliProvider, sc as hasGatewayClientCap, si as loadSessionStoreFromDisk, sn as resolveGatewayWebClientBasePath, so as isPassIdentifier, t as buildAllowedModelSet, td as DEFAULT_MODEL, ti as commitPreparedConfiguredSessionStorageRuntimeActivation, tn as coerceIdentityValue, ts as listChannelPlugins, u as normalizeModelSelection, uo as applyReconcileSessionIndex, uu as resolveSubagentMaxConcurrent, v as resolveHooksGmailModel, vi as updateSessionStore, vo as serializeSessionIndexRecordKey, wi as mergeDeliveryContext, wl as ensureControlUiAllowedOriginsForNonLoopbackBind, wn as AVATAR_MAX_BYTES, xt as resolveProfileUnusableUntilForDisplay, za as withPreservationWriterPermit, zl as resolveTalkProviderConfigApiKey, zt as writeConfigFile } from "./model-selection-k68XU4oS.js";
 import { r as resolveCopilotApiToken } from "./github-copilot-token-D9l3eOWF.js";
 import "./boolean-BsqeuxE6.js";
-import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-DtoMyFfk.js";
+import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-ESh4ZX9l.js";
 import { r as resolveRuntimeServiceVersion, t as VERSION } from "./version-D7fFgMO6.js";
 import { c as optionalStringEnum, l as stringEnum } from "./retry-policy-BIRWkDiU.js";
 import { c as resolveSessionFilePath, l as resolveSessionFilePathOptions, m as resolveStorePath, p as resolveSessionTranscriptsDirForAgent, u as resolveSessionTranscriptPath } from "./artifacts-qv_OgPMd.js";
 import { t as formatCliCommand } from "./command-format-CGUNQYjt.js";
-import "./send-ZT3Ekuty.js";
-import "./send-CgTUSkhw.js";
+import "./send-BA9PXvuC.js";
+import "./send-DQQFc4N0.js";
 import { l as deriveSessionTotalTokens, u as hasNonzeroUsage } from "./chat-envelope-DOpfcKGq.js";
 import { c as isDiagnosticsEnabled, l as onDiagnosticEvent, s as emitDiagnosticEvent } from "./task-run-types-B5uIC1Y7.js";
 import { n as USER_CLIENT_ID, o as buildUserClientRuntimeConfig, s as handleUserClientHttpRequest } from "./static-server-C-iTMRyz.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-DaLVcmyn.js";
-import { i as openFileWithinRoot, l as writeFileWithinRoot, s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-D3vN4fQ5.js";
-import { D as normalizeMediaProviderId, E as listAutoDetectableProviders, T as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, g as registerUnhandledRejectionHandler, n as buildProviderRegistry, x as resolveModelEntries, y as resolveCapabilityConfig } from "./audio-transcription-runner-DbLu4y_x.js";
-import { t as fetchWithSsrFGuard } from "./fetch-guard-BCFGxdCb.js";
-import { t as SsrFBlockedError } from "./ssrf-BsWmJWfu.js";
-import "./proxy-fetch-k-wYHddO.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-BSmwo1rT.js";
+import { i as openFileWithinRoot, l as writeFileWithinRoot, s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-DD7KXuvI.js";
+import { D as normalizeMediaProviderId, E as listAutoDetectableProviders, T as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, g as registerUnhandledRejectionHandler, n as buildProviderRegistry, x as resolveModelEntries, y as resolveCapabilityConfig } from "./audio-transcription-runner-D-d42kdt.js";
+import { t as fetchWithSsrFGuard } from "./fetch-guard-CjyGDRXN.js";
+import { t as SsrFBlockedError } from "./ssrf-B85AIIOO.js";
+import "./proxy-fetch-Czv8kxaL.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-BXebcnwh.js";
-import "./pi-embedded-helpers-DxQslB8x.js";
-import "./local-roots-DrpBY-AE.js";
-import { c as detectMime } from "./image-ops-D-__yDh-.js";
+import "./pi-embedded-helpers-DEHXX7Dr.js";
+import "./local-roots-_qt4-Ma5.js";
+import { c as detectMime } from "./image-ops-DcqCZEUY.js";
 import { a as testRegexWithBoundedInput, i as compileSafeRegex } from "./redact-CQtYLB4a.js";
 import { i as formatErrorMessage, o as hasErrnoCode, s as isErrno } from "./errors-z_JCBnTo.js";
-import "./models-config-CcPjsQTv.js";
-import { n as loadModelCatalog } from "./model-catalog-C300CH2M.js";
-import "./api-key-rotation-BEJklVjh.js";
-import "./provider-image-GVjHOAmk.js";
-import "./pi-model-discovery-B9wn9y4o.js";
-import { h as extractTextFromChatContent } from "./pi-embedded-utils-39kuXd-l.js";
-import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-BnwxiNjx.js";
+import "./models-config-Burwt3mB.js";
+import { n as loadModelCatalog } from "./model-catalog-C7itJJDM.js";
+import "./api-key-rotation-BEt1ZchD.js";
+import "./provider-image-RxbXQIow.js";
+import "./pi-model-discovery-CfUi22Es.js";
+import { h as extractTextFromChatContent } from "./pi-embedded-utils-BhOMYPQU.js";
+import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-Ft7cM-PQ.js";
 import { i as listCoreToolSections, n as PROFILE_OPTIONS, o as resolveCoreToolProfiles } from "./tool-catalog-B6wH7-iE.js";
-import { i as resolveRelayAuthTokenForPort, n as resolveGatewayRelayToken } from "./extension-relay-auth-IPIDjhZx.js";
-import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-C-_dOj1h.js";
+import { i as resolveRelayAuthTokenForPort, n as resolveGatewayRelayToken } from "./extension-relay-auth-C-1c9CZk.js";
+import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-DbsrfsUT.js";
 import { t as safeEqualSecret } from "./secret-equal-DyYamV7h.js";
-import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-CA8Lq90p.js";
-import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-E-wJFDgg.js";
-import { a as isDirectLoopbackProvenance, c as AUTH_RATE_LIMIT_SCOPE_BROWSER_EXTENSION, d as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, f as createAuthRateLimiter, i as captureTransportProvenance, l as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, n as authorizeHttpGatewayConnect, o as isLocalDirectRequest, p as normalizeRateLimitClientIp, r as authorizeWsControlUiGatewayConnect, s as resolveGatewayAuth, t as assertGatewayAuthConfigured, u as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH } from "./auth-CO4L12L5.js";
-import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-qqDarnk8.js";
+import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-G5phL2pY.js";
+import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-BuVK_u9S.js";
+import { a as isDirectLoopbackProvenance, c as AUTH_RATE_LIMIT_SCOPE_BROWSER_EXTENSION, d as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, f as createAuthRateLimiter, i as captureTransportProvenance, l as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, n as authorizeHttpGatewayConnect, o as isLocalDirectRequest, p as normalizeRateLimitClientIp, r as authorizeWsControlUiGatewayConnect, s as resolveGatewayAuth, t as assertGatewayAuthConfigured, u as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH } from "./auth-DeLQvx-N.js";
+import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-Dezs5R_M.js";
 import { d as hasBinary } from "./frontmatter-B8Zb_8go.js";
-import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-DT7dF3Z_.js";
-import "./store-BKJfMltr.js";
-import { S as ensureChromeExtensionRelayServer } from "./chrome-CBrgxie9.js";
-import { i as resolveProfile, r as resolveBrowserConfig, t as movePathToTrash } from "./trash-CYaie1Ci.js";
-import { a as inspectPortUsage, l as formatPortDiagnostics, r as ensurePortAvailable } from "./ports-CmgxsJei.js";
-import "./server-middleware-CHvpqowx.js";
-import "./tool-display-CwPZlMoS.js";
-import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-C6a47LiJ.js";
-import { f as getGlobalHookRunner, h as runGlobalGatewayStopSafely, m as resetGlobalHookRunner, u as buildOutboundSessionContext } from "./outbound-message-hooks-DOSD8zCU.js";
-import { r as isRestartEnabled } from "./commands-CpMRpWle.js";
-import "./commands-registry-DY2vMgw6.js";
+import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-Buc1RWDY.js";
+import "./store-DoqX9VsZ.js";
+import { S as ensureChromeExtensionRelayServer } from "./chrome-DXHMnxHS.js";
+import { i as resolveProfile, r as resolveBrowserConfig, t as movePathToTrash } from "./trash-BcRk_NVC.js";
+import { a as inspectPortUsage, l as formatPortDiagnostics, r as ensurePortAvailable } from "./ports-CX4cOSom.js";
+import "./server-middleware-BND1EkTO.js";
+import "./tool-display-D63I3y22.js";
+import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-BvecxQYg.js";
+import { f as getGlobalHookRunner, h as runGlobalGatewayStopSafely, m as resetGlobalHookRunner, u as buildOutboundSessionContext } from "./outbound-message-hooks-t1DDjQX_.js";
+import { r as isRestartEnabled } from "./commands-tFdLuF5k.js";
+import "./commands-registry-BMswme6t.js";
 import { t as redactIdentifier } from "./redact-identifier-CSPL9LuH.js";
 import "./registry-D9ygkK-J.js";
-import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-BQ4JOmUN.js";
-import { $ as validateNodeListParams, $t as validateTalkSessionCreateParams, A as validateCronRunParams, B as validateExecApprovalRequestParams, Bn as verifyDeviceToken, Bt as validateTalkConfigParams, C as validateConfigPatchParams, Cn as normalizeDeviceMetadataForAuth, D as validateCronAddParams, Dn as consumeDeviceBootstrapToken, E as validateConnectParams, En as approveDevicePairing, F as validateDevicePairListParams, Fn as revokeDeviceToken, Ft as validateSkillsBinsParams, G as validateExecApprovalsSetParams, Gt as validateTalkRealtimeSessionParams, H as validateExecApprovalsGetParams, Ht as validateTalkRealtimeAudioParams, I as validateDevicePairRejectParams, In as rotateDeviceToken, It as validateSkillsInstallParams, J as validateModelsListParams, Jt as validateTalkRealtimeToolResultParams, K as validateLogsTailParams, Kt as validateTalkRealtimeStatusParams, L as validateDevicePairRemoveParams, Ln as summarizeDeviceTokens, Lt as validateSkillsStatusParams, M as validateCronStatusParams, Mn as rejectDevicePairing, N as validateCronUpdateParams, Nn as removePairedDevice, Nt as validateSessionsTitlePrepareParams, O as validateCronListParams, On as ensureDeviceToken, P as validateDevicePairApproveParams, Pn as requestDevicePairing, Pt as validateSessionsUsageParams, Q as validateNodeInvokeResultParams, Qt as validateTalkSessionCloseParams, R as validateDeviceTokenRevokeParams, Rn as updatePairedDeviceMetadata, Rt as validateSkillsUpdateParams, S as validateConfigGetParams, Sn as buildDeviceAuthPayloadV3, T as validateConfigSetParams, Tn as approveBootstrapDevicePairing, U as validateExecApprovalsNodeGetParams, Un as operatorScopeSatisfied, Ut as validateTalkRealtimeBargeInParams, V as validateExecApprovalResolveParams, Vt as validateTalkModeParams, W as validateExecApprovalsNodeSetParams, Wn as roleScopesAllow, Wt as validateTalkRealtimeMarkParams, X as validateNodeEventParams, Xn as verifyDeviceSignature, Xt as validateTalkSessionBargeInParams, Y as validateNodeDescribeParams, Yn as normalizeDevicePublicKeyBase64Url, Yt as validateTalkSessionAppendAudioParams, Z as validateNodeInvokeParams, Zt as validateTalkSessionCancelTurnParams, _ as validateChatAbortParams, _n as ErrorCodes, a as validateAgentNudgeParams, an as validateToolsCatalogParams, at as validateNodeRenameParams, b as validateChatSendParams, c as validateAgentsCreateParams, cn as validateWebLoginStartParams, ct as validateRequestFrame, d as validateAgentsFilesListParams, dn as validateWizardNextParams, dt as validateSendParams, en as validateTalkSessionMarkParams, et as validateNodePairApproveParams, f as validateAgentsFilesSetParams, fn as validateWizardStartParams, ft as validateSessionsAbortParams, g as validateChannelsStatusParams, h as validateChannelsLogoutParams, hn as RUNS_INVALIDATED_EVENT, i as validateAgentIdentityParams, in as validateTasksRunsListParams, it as validateNodePairVerifyParams, j as validateCronRunsParams, jn as listDevicePairing, jt as validateSessionsSteerParams, k as validateCronRemoveParams, kn as getPairedDevice, l as validateAgentsDeleteParams, ln as validateWebLoginWaitParams, lt as validateSecretsResolveParams, m as validateAgentsUpdateParams, mn as PROTOCOL_VERSION, nn as validateTasksRunsEventsParams, nt as validateNodePairRejectParams, o as validateAgentParams, on as validateUpdateRunParams, ot as validatePollParams, p as validateAgentsListParams, pn as validateWizardStatusParams, q as validateModelsAuthStatusParams, qn as deriveDeviceIdFromPublicKey, qt as validateTalkRealtimeStopParams, r as formatValidationErrors, rn as validateTasksRunsGetParams, rt as validateNodePairRequestParams, s as validateAgentWaitParams, sn as validateWakeParams, st as validatePushTestParams, tn as validateTasksRunEventsParams, tt as validateNodePairListParams, u as validateAgentsFilesGetParams, un as validateWizardCancelParams, ut as validateSecretsResolveResult, v as validateChatHistoryParams, vn as errorShape, w as validateConfigSchemaParams, x as validateConfigApplyParams, xn as buildDeviceAuthPayload, y as validateChatInjectParams, z as validateDeviceTokenRotateParams, zn as verifyDeviceBootstrapToken, zt as validateTalkCatalogParams } from "./client-MNVuOIDb.js";
-import { _ as hasNarrowSessionScope, d as APPROVALS_SCOPE, f as PAIRING_SCOPE, g as authorizeOperatorScopesForMethod, h as WRITE_SCOPE, m as SESSION_READ_SCOPE, n as callGateway, p as READ_SCOPE, u as ADMIN_SCOPE$1, v as isHealthProbeAllowedForScopes, x as loadGatewayTlsRuntime$1, y as isNodeRoleMethod } from "./call-CMjUSitZ.js";
+import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-Dwz_R_DW.js";
+import { $ as validateNodeListParams, $t as validateTalkSessionCreateParams, A as validateCronRunParams, B as validateExecApprovalRequestParams, Bn as verifyDeviceToken, Bt as validateTalkConfigParams, C as validateConfigPatchParams, Cn as normalizeDeviceMetadataForAuth, D as validateCronAddParams, Dn as consumeDeviceBootstrapToken, E as validateConnectParams, En as approveDevicePairing, F as validateDevicePairListParams, Fn as revokeDeviceToken, Ft as validateSkillsBinsParams, G as validateExecApprovalsSetParams, Gt as validateTalkRealtimeSessionParams, H as validateExecApprovalsGetParams, Ht as validateTalkRealtimeAudioParams, I as validateDevicePairRejectParams, In as rotateDeviceToken, It as validateSkillsInstallParams, J as validateModelsListParams, Jt as validateTalkRealtimeToolResultParams, K as validateLogsTailParams, Kt as validateTalkRealtimeStatusParams, L as validateDevicePairRemoveParams, Ln as summarizeDeviceTokens, Lt as validateSkillsStatusParams, M as validateCronStatusParams, Mn as rejectDevicePairing, N as validateCronUpdateParams, Nn as removePairedDevice, Nt as validateSessionsTitlePrepareParams, O as validateCronListParams, On as ensureDeviceToken, P as validateDevicePairApproveParams, Pn as requestDevicePairing, Pt as validateSessionsUsageParams, Q as validateNodeInvokeResultParams, Qt as validateTalkSessionCloseParams, R as validateDeviceTokenRevokeParams, Rn as updatePairedDeviceMetadata, Rt as validateSkillsUpdateParams, S as validateConfigGetParams, Sn as buildDeviceAuthPayloadV3, T as validateConfigSetParams, Tn as approveBootstrapDevicePairing, U as validateExecApprovalsNodeGetParams, Un as operatorScopeSatisfied, Ut as validateTalkRealtimeBargeInParams, V as validateExecApprovalResolveParams, Vt as validateTalkModeParams, W as validateExecApprovalsNodeSetParams, Wn as roleScopesAllow, Wt as validateTalkRealtimeMarkParams, X as validateNodeEventParams, Xn as verifyDeviceSignature, Xt as validateTalkSessionBargeInParams, Y as validateNodeDescribeParams, Yn as normalizeDevicePublicKeyBase64Url, Yt as validateTalkSessionAppendAudioParams, Z as validateNodeInvokeParams, Zt as validateTalkSessionCancelTurnParams, _ as validateChatAbortParams, _n as ErrorCodes, a as validateAgentNudgeParams, an as validateToolsCatalogParams, at as validateNodeRenameParams, b as validateChatSendParams, c as validateAgentsCreateParams, cn as validateWebLoginStartParams, ct as validateRequestFrame, d as validateAgentsFilesListParams, dn as validateWizardNextParams, dt as validateSendParams, en as validateTalkSessionMarkParams, et as validateNodePairApproveParams, f as validateAgentsFilesSetParams, fn as validateWizardStartParams, ft as validateSessionsAbortParams, g as validateChannelsStatusParams, h as validateChannelsLogoutParams, hn as RUNS_INVALIDATED_EVENT, i as validateAgentIdentityParams, in as validateTasksRunsListParams, it as validateNodePairVerifyParams, j as validateCronRunsParams, jn as listDevicePairing, jt as validateSessionsSteerParams, k as validateCronRemoveParams, kn as getPairedDevice, l as validateAgentsDeleteParams, ln as validateWebLoginWaitParams, lt as validateSecretsResolveParams, m as validateAgentsUpdateParams, mn as PROTOCOL_VERSION, nn as validateTasksRunsEventsParams, nt as validateNodePairRejectParams, o as validateAgentParams, on as validateUpdateRunParams, ot as validatePollParams, p as validateAgentsListParams, pn as validateWizardStatusParams, q as validateModelsAuthStatusParams, qn as deriveDeviceIdFromPublicKey, qt as validateTalkRealtimeStopParams, r as formatValidationErrors, rn as validateTasksRunsGetParams, rt as validateNodePairRequestParams, s as validateAgentWaitParams, sn as validateWakeParams, st as validatePushTestParams, tn as validateTasksRunEventsParams, tt as validateNodePairListParams, u as validateAgentsFilesGetParams, un as validateWizardCancelParams, ut as validateSecretsResolveResult, v as validateChatHistoryParams, vn as errorShape, w as validateConfigSchemaParams, x as validateConfigApplyParams, xn as buildDeviceAuthPayload, y as validateChatInjectParams, z as validateDeviceTokenRotateParams, zn as verifyDeviceBootstrapToken, zt as validateTalkCatalogParams } from "./client-BbpMX08n.js";
+import { _ as hasNarrowSessionScope, d as APPROVALS_SCOPE, f as PAIRING_SCOPE, g as authorizeOperatorScopesForMethod, h as WRITE_SCOPE, m as SESSION_READ_SCOPE, n as callGateway, p as READ_SCOPE, u as ADMIN_SCOPE$1, v as isHealthProbeAllowedForScopes, x as loadGatewayTlsRuntime$1, y as isNodeRoleMethod } from "./call-Cl6Q0T5z.js";
 import "./pairing-token-A_0lRJCJ.js";
 import "./fetch-CY39qjQT.js";
-import { a as readChannelAllowFromStoreSync } from "./pairing-store-CL-UFd1J.js";
-import { a as maxAsk, c as normalizeExecApprovals, g as saveExecApprovalsV2, h as saveExecApprovals, i as loadExecApprovalsV2, l as readExecApprovalsSnapshot, m as resolveExecApprovalsReadOnly, o as mergeExecApprovalsSocketDefaults, r as ensureExecApprovals, s as minSecurity, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-C-_jrhwb.js";
-import { i as resolveSafeBins } from "./exec-approvals-allowlist-B2foVOBU.js";
-import "./exec-safe-bin-runtime-policy-CfsF46fx.js";
-import { _ as matchSystemRunApprovalBinding, g as buildSystemRunApprovalBinding, h as resolveSystemRunApprovalRuntimeContext, m as resolveSystemRunApprovalRequestContext, v as missingSystemRunApprovalBinding, y as toSystemRunApprovalMismatchError } from "./nodes-screen-Bu5K5Iky.js";
-import { r as resolveSystemRunCommand, t as canonicalizeLegacySystemRunParams } from "./system-run-command-uuNBjw5D.js";
+import { a as readChannelAllowFromStoreSync } from "./pairing-store-CQ7fjFFo.js";
+import { a as maxAsk, c as normalizeExecApprovals, g as saveExecApprovalsV2, h as saveExecApprovals, i as loadExecApprovalsV2, l as readExecApprovalsSnapshot, m as resolveExecApprovalsReadOnly, o as mergeExecApprovalsSocketDefaults, r as ensureExecApprovals, s as minSecurity, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-D8Tqfo34.js";
+import { i as resolveSafeBins } from "./exec-approvals-allowlist-0xON2SZW.js";
+import "./exec-safe-bin-runtime-policy-KSPaR73B.js";
+import { _ as matchSystemRunApprovalBinding, g as buildSystemRunApprovalBinding, h as resolveSystemRunApprovalRuntimeContext, m as resolveSystemRunApprovalRequestContext, v as missingSystemRunApprovalBinding, y as toSystemRunApprovalMismatchError } from "./nodes-screen-BRZLdw3g.js";
+import { r as resolveSystemRunCommand, t as canonicalizeLegacySystemRunParams } from "./system-run-command-AF8TLlEl.js";
 import { u as snapshotActiveRuns } from "./diagnostic-session-state-C6JXU3l4.js";
-import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-BRYj59Hw.js";
+import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-BTSirPP0.js";
 import { t as CommandLane } from "./lanes-DA0g5tPR.js";
-import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-B3mLUDEo.js";
-import { a as getActiveTaskCount, c as getTotalQueueSize, d as setCommandLaneConcurrency, f as setGatewayDrainState, l as markGatewayDraining, p as waitForActiveTasks, u as resetAllLanes } from "./command-queue-Banup9vQ.js";
-import { a as resolveAgentIdentity, t as createReplyPrefixOptions } from "./reply-prefix-Cur1savb.js";
-import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-BpzzrBKl.js";
-import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-6n6HxT65.js";
-import { T as collectTelegramDuplicatePollerDiagnostics, d as loadCronStore, f as resolveCronStorePath, p as saveCronStore } from "./send-DweRAIgI.js";
-import { n as resolveModel } from "./model-CR-oCFb_.js";
-import "./session-consumer-agents-D_hiCJHw.js";
+import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-Yajg-SST.js";
+import { a as getActiveTaskCount, c as getTotalQueueSize, d as setCommandLaneConcurrency, f as setGatewayDrainState, l as markGatewayDraining, p as waitForActiveTasks, u as resetAllLanes } from "./command-queue-B1RxJ6bM.js";
+import { a as resolveAgentIdentity, t as createReplyPrefixOptions } from "./reply-prefix-D0xrt6Z-.js";
+import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-Bhlx9VG9.js";
+import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-NhJMC1fC.js";
+import { T as collectTelegramDuplicatePollerDiagnostics, d as loadCronStore, f as resolveCronStorePath, p as saveCronStore } from "./send-Cy2xiH02.js";
+import { n as resolveModel } from "./model-BI6n6kVo.js";
+import "./session-consumer-agents-DWh7Mygv.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-F-4FwfCE.js";
-import "./chunk-BTTi6And.js";
-import "./markdown-tables-pIjKFnaZ.js";
-import "./ir-D--2OWCl.js";
+import "./chunk-BDQQgsxn.js";
+import "./markdown-tables-BEZ0s08w.js";
+import "./ir-DDAVSgbQ.js";
 import "./render-B5HNUbes.js";
-import "./reply-directives-HkwESo_w.js";
-import { n as resolveMessageChannelSelection } from "./channel-selection-WlHA0Mjg.js";
-import { o as normalizePollInput, t as getChannelActivity } from "./channel-activity-etjAZzDh.js";
-import { i as applyPluginAutoEnable, n as collectUnsafeTelegramPollingTimeouts, s as buildChannelUiCatalog } from "./polling-timeout-DQakFlgy.js";
-import "./send-DkVvmrg9.js";
-import "./outbound-attachment-BqIKnptw.js";
+import "./reply-directives-D5wW1el3.js";
+import { n as resolveMessageChannelSelection } from "./channel-selection-zg0Iqza4.js";
+import { o as normalizePollInput, t as getChannelActivity } from "./channel-activity-CE3dhlxR.js";
+import { i as applyPluginAutoEnable, n as collectUnsafeTelegramPollingTimeouts, s as buildChannelUiCatalog } from "./polling-timeout-lNYd7owP.js";
+import "./send-9toI8d1j.js";
+import "./outbound-attachment-Bg7WvYcG.js";
 import "./delivery-queue-DhBE3s1K.js";
-import "./send-BXSNB2Gu.js";
-import "./resolve-route-C7CVSjFi.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-BViSZbge.js";
-import "./tables-CI3gYRvQ.js";
-import "./proxy-XUweXx3b.js";
-import "./replies-Bg8KJkdJ.js";
-import { S as registerSkillsChangeListener, _ as requestNodePairing, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, g as renamePairedNode, h as rejectNodePairing, l as refreshRemoteBinsForConnectedNodes, m as listNodePairing, o as getRemoteSkillEligibility, p as approveNodePairing, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion, y as verifyNodeToken } from "./skill-commands-D0sJs3ds.js";
-import { t as listAgentWorkspaceDirs } from "./workspace-dirs-B9yugPA_.js";
-import "./user-run-recording-DjkX5Mx3.js";
-import { n as GATEWAY_AUTH_SURFACE_PATHS, p as isKnownSecretTargetId, r as evaluateGatewayAuthSurfaceStates } from "./runtime-config-collectors-CwBbdMqb.js";
-import "./command-secret-targets-84-Vq1Kn.js";
-import { a as getGatewayInstanceId, o as resolveSessionRunStore, t as createSessionRunRecorder } from "./recorder-B9RfsO1r.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-Dxgs6IKs.js";
-import "./prompt-style-DdJb0dOL.js";
-import "./pairing-labels-BCnxr7Pt.js";
-import "./session-meta-CXWLeYOC.js";
-import { A as registerBeforeCreate, C as artifactTokenFor, D as markRemoved, E as markClientRemovedAcknowledged, M as buildVerificationEnvelope, N as redactVerificationProjection, O as markRetained, P as verificationEnvelopeFingerprint, S as accountSessionArtifactsAtTerminalSweep, T as listSessionArtifacts, _ as requireProcessBootIdentityPair, a as setAgentTurnRuntime, b as installGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as isBootIdentityError, h as deriveBootIdentityPair, i as getAgentTurnRuntime, j as VERIFICATION_CONFIG_SCENARIO, k as redactArtifactLogId, l as buildSoakDeploymentRecord, m as armBarrier, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as acceptSuccessorExecution, r as getActiveAgentTurnCount, u as evaluateSoak, v as clearGatewayRestartRecoveryRuntimeIf, w as isArtifactRegistrationError, x as RETAINED_ARTIFACT_KIND, y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-BGmkN_A8.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-CFyBR_Pp.js";
-import { r as resolveMemorySearchConfig } from "./manager-LX1QQ8aK.js";
-import "./query-expansion-DNw0oY0W.js";
-import { t as formatDocsLink } from "./links-DZMDihQ-.js";
+import "./send-26KAC8EW.js";
+import "./resolve-route-DnhX9nWr.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-4GqIom7_.js";
+import "./tables-CzW-cMQN.js";
+import "./proxy-Df2WAHRA.js";
+import "./replies-DoejQAqN.js";
+import { S as registerSkillsChangeListener, _ as requestNodePairing, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, g as renamePairedNode, h as rejectNodePairing, l as refreshRemoteBinsForConnectedNodes, m as listNodePairing, o as getRemoteSkillEligibility, p as approveNodePairing, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion, y as verifyNodeToken } from "./skill-commands-Be2Bqqsm.js";
+import { t as listAgentWorkspaceDirs } from "./workspace-dirs-_vJAsBIN.js";
+import "./user-run-recording-CTVI96gC.js";
+import { n as GATEWAY_AUTH_SURFACE_PATHS, p as isKnownSecretTargetId, r as evaluateGatewayAuthSurfaceStates } from "./runtime-config-collectors-B4N79pBu.js";
+import "./command-secret-targets-DtDJB3vv.js";
+import { a as getGatewayInstanceId, o as resolveSessionRunStore, t as createSessionRunRecorder } from "./recorder-BntUAL0_.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-ziqfw3UR.js";
+import "./prompt-style-D0wRuIYC.js";
+import "./pairing-labels-CGUWaZ3f.js";
+import "./session-meta-DzjDKcgW.js";
+import { A as registerBeforeCreate, C as artifactTokenFor, D as markRemoved, E as markClientRemovedAcknowledged, M as buildVerificationEnvelope, N as redactVerificationProjection, O as markRetained, P as verificationEnvelopeFingerprint, S as accountSessionArtifactsAtTerminalSweep, T as listSessionArtifacts, _ as requireProcessBootIdentityPair, a as setAgentTurnRuntime, b as installGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as isBootIdentityError, h as deriveBootIdentityPair, i as getAgentTurnRuntime, j as VERIFICATION_CONFIG_SCENARIO, k as redactArtifactLogId, l as buildSoakDeploymentRecord, m as armBarrier, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as acceptSuccessorExecution, r as getActiveAgentTurnCount, u as evaluateSoak, v as clearGatewayRestartRecoveryRuntimeIf, w as isArtifactRegistrationError, x as RETAINED_ARTIFACT_KIND, y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-DFZxbjaC.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-DZyEfnsr.js";
+import { r as resolveMemorySearchConfig } from "./manager-DehDxi2A.js";
+import "./query-expansion-BD3CL_NZ.js";
+import { t as formatDocsLink } from "./links-BhLGjTwm.js";
 import { n as runCommandWithRuntime } from "./cli-utils-DWSfnwCw.js";
-import { t as formatHelpExamples } from "./help-format-BC4GRIFN.js";
-import { n as withProgress } from "./progress-DVj1IfDI.js";
-import "./server-lifecycle-E2HPe1NZ.js";
+import { t as formatHelpExamples } from "./help-format-DqpZruAs.js";
+import { n as withProgress } from "./progress-DRMfDm7h.js";
+import "./server-lifecycle-DcVZS1ln.js";
 import { i as parseAbsoluteTimeMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-BIZMWR_z.js";
-import { a as normalizeHttpWebhookUrl, l as normalizeOptionalText, o as inferLegacyName } from "./heartbeat-tick-RHab8Aje.js";
-import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-BtpCwP1X.js";
+import { a as normalizeHttpWebhookUrl, l as normalizeOptionalText, o as inferLegacyName } from "./heartbeat-tick-CsyeD75h.js";
+import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-Cm6wsMRx.js";
 import { i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, t as discoverAllSessions } from "./session-cost-usage-pjXSgi_U.js";
-import { t as ensureOpenClawCliOnPath } from "./path-env-CQ3HfD18.js";
-import "./runtime-guard-kynCEcXy.js";
-import { t as forceFreePortAndWait } from "./ports-D_uxJ7Lw.js";
-import "./recovery-prompt-B1_BcmiM.js";
-import { c as OwnerLockHeldError, d as createOwnerIdentity, f as RecoveryJournalError, i as REASON_PRIOR_OWNER_UNPROVEN, l as PriorOwnerLiveError, n as REASON_JOURNAL_UNWRITABLE, o as createRestartRecoveryController, p as openRecoveryJournal, r as REASON_OWNER_LOCK_HELD, s as OwnerFenceLostError, t as REASON_JOURNAL_CORRUPT, u as acquireOwnerFence } from "./controller-Z7o2nxni.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-K-JYoR_J.js";
+import { t as ensureOpenClawCliOnPath } from "./path-env-IcDKkMPr.js";
+import "./runtime-guard-DYUXYZIl.js";
+import { t as forceFreePortAndWait } from "./ports-BTxrPqTm.js";
+import "./recovery-prompt-SkkJ8aCp.js";
+import { c as OwnerLockHeldError, d as createOwnerIdentity, f as RecoveryJournalError, i as REASON_PRIOR_OWNER_UNPROVEN, l as PriorOwnerLiveError, n as REASON_JOURNAL_UNWRITABLE, o as createRestartRecoveryController, p as openRecoveryJournal, r as REASON_OWNER_LOCK_HELD, s as OwnerFenceLostError, t as REASON_JOURNAL_CORRUPT, u as acquireOwnerFence } from "./controller-0fS4uYcF.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-Dufi5_o3.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-gv_rp-w_.js";
 import { n as inheritOptionFromParent } from "./command-options-6wdtBBWB.js";
 import { t as WizardCancelledError } from "./prompts-m1IJwIAx.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-CU6_xh9V.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-BnEJCj-p.js";
-import { t as isWithinDir } from "./path-safety-DSl6BwW9.js";
-import "./install-safe-path-67wN9WdC.js";
-import "./npm-pack-install-Cbcm8AtO.js";
-import "./skill-scanner-D7Edx-Uz.js";
-import "./installs-BlKgbSFc.js";
-import { n as formatConfigIssueLines } from "./issue-format-B1dmuNNd.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-C-pTu-0T.js";
+import { t as isWithinDir } from "./path-safety-DAKUyD-v.js";
+import "./install-safe-path-DjFYmzeb.js";
+import "./npm-pack-install-CFiN84Qw.js";
+import "./skill-scanner-BA3h34y0.js";
+import "./installs-CnAcm0ba.js";
+import { n as formatConfigIssueLines } from "./issue-format-D0G927lb.js";
 import { t as buildChannelAccountSnapshot } from "./status-B8TZsG0t.js";
-import "./channels-status-issues-CyJj51t4.js";
-import { i as resolveGatewayClientProfile, t as WEB_CLIENT_ALLOWED_ORIGINS_CONFIG_KEY } from "./client-profiles-BAQWDfq6.js";
-import "./daemon-install-helpers-CG4IZ_7L.js";
-import "./service-CH9BWwSD.js";
-import "./systemd-LaMffSwB.js";
-import "./lifecycle-core-DfYD23X_.js";
-import "./systemd-hints-Cq7MC9oh.js";
+import "./channels-status-issues-C6LrjLpF.js";
+import { i as resolveGatewayClientProfile, t as WEB_CLIENT_ALLOWED_ORIGINS_CONFIG_KEY } from "./client-profiles-BNQu4_Z_.js";
+import "./daemon-install-helpers-C8mJ0UpL.js";
+import "./service-Hy5BSgmp.js";
+import "./systemd-DsBMxUv1.js";
+import "./lifecycle-core-B3-ezmTx.js";
+import "./systemd-hints-WHzM5Tf8.js";
 import { t as parsePort$1 } from "./parse-port-p0PJP2nG.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-UPL01HBu.js";
-import "./diagnostics-BTeays6z.js";
-import "./table-BntrQEtu.js";
-import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-DZj5625G.js";
-import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-CRF96lZH.js";
-import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-DIH0DO00.js";
-import { t as discoverGatewayBeacons } from "./bonjour-discovery-BBOJN88F.js";
-import { a as noteStorageReplayResult, i as getStorageV1Snapshot, n as getStatusSummary, o as noteStorageRestartRequired, r as createStorageSupervisor, s as pickGatewaySelfPresence } from "./status-CYumLEox.js";
-import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-CDGk5xDG.js";
-import { a as readPostQuiesceTranscriptDelta, i as readBulkTranscriptLines, o as replaySource, r as mergeBulkTranscriptSnapshotAndDelta, t as ReplayRowConflictError } from "./replay-DzQXXHrC.js";
-import "./session-key-resolution-BlwVEVt_.js";
-import { c as waitForStopDrain, l as withTimeout, o as tasksHandlers, r as getTaskOperatorRegistry, s as retryDelayMs, t as DEFAULT_RETENTION_DAYS } from "./task-runlog-retention-BlMTtOsA.js";
-import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-D-_OfiOV.js";
-import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-Dc7AMtZ7.js";
-import { t as reconcileBundledInstalls } from "./reconcile-bundled-CoL_d96f.js";
-import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-Dp2vE941.js";
-import "./onboarding.secret-input-BOKPA83p.js";
-import { t as runOnboardingWizard } from "./onboarding-Bd05RKZ7.js";
-import { a as computeJobNextRunAtMs, c as findJobOrThrow, d as recomputeNextRuns, f as recomputeNextRunsForMaintenance, h as produceCronAgentTurn, i as applyJobPatch, l as isJobDue, m as resolveJobPayloadTextForMain, o as createJob, p as recordScheduleComputeError, r as resolveStaleClaimAdoptionMs, s as cronShapeSupportsIdentity, t as CRON_HEARTBEAT_ADAPTER_ID, u as nextWakeAtMs } from "./recovery-adapter-Bokfvz7s.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns--BFmn4qT.js";
-import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-DWxTEPL5.js";
-import { a as readChatHistoryPage, c as unsubscribeSessionChanges, i as decodeHistoryCursor, l as assertValidParams, o as resolveDbLeafEntryId, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers } from "./sessions-C6bPQgaD.js";
-import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-CggBPF1a.js";
-import "./node-service-yxlqFzdT.js";
-import "./status.update-CDd1OP3p.js";
-import { i as resolveActiveLogFile, n as readLogSlice } from "./log-tail-COb9xmHL.js";
-import { t as installSkill } from "./skills-install-BUqzygk8.js";
-import { r as runGatewayUpdate } from "./update-runner-CrNSgmGV.js";
-import { n as resolveWebClientPackagedRootSync, t as WEB_CLIENT_BUNDLE_MISSING_MESSAGE } from "./web-client-assets-O1Zun47I.js";
-import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-CgJWyvaY.js";
-import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-B0t7kxcZ.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-C5cAb15Z.js";
+import "./diagnostics-FIcvxigK.js";
+import "./table-DoIju7rh.js";
+import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-DgeeMUtJ.js";
+import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-Bc-7t0_-.js";
+import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-C_g-UVNn.js";
+import { t as discoverGatewayBeacons } from "./bonjour-discovery-C517Q6gA.js";
+import { a as noteStorageReplayResult, i as getStorageV1Snapshot, n as getStatusSummary, o as noteStorageRestartRequired, r as createStorageSupervisor, s as pickGatewaySelfPresence } from "./status-BYesh62t.js";
+import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-DFWpyp9O.js";
+import { a as readPostQuiesceTranscriptDelta, i as readBulkTranscriptLines, o as replaySource, r as mergeBulkTranscriptSnapshotAndDelta, t as ReplayRowConflictError } from "./replay-BHfUVVHN.js";
+import "./session-key-resolution-DDJD1XYy.js";
+import { c as waitForStopDrain, l as withTimeout, o as tasksHandlers, r as getTaskOperatorRegistry, s as retryDelayMs, t as DEFAULT_RETENTION_DAYS } from "./task-runlog-retention-BZrnJGL1.js";
+import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-DonecnKL.js";
+import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-C9otZxLF.js";
+import { t as reconcileBundledInstalls } from "./reconcile-bundled-BMWDZl32.js";
+import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-Ch9itsH4.js";
+import "./onboarding.secret-input-BCxy1JxD.js";
+import { t as runOnboardingWizard } from "./onboarding-D9VO9_5U.js";
+import { a as computeJobNextRunAtMs, c as findJobOrThrow, d as recomputeNextRuns, f as recomputeNextRunsForMaintenance, h as produceCronAgentTurn, i as applyJobPatch, l as isJobDue, m as resolveJobPayloadTextForMain, o as createJob, p as recordScheduleComputeError, r as resolveStaleClaimAdoptionMs, s as cronShapeSupportsIdentity, t as CRON_HEARTBEAT_ADAPTER_ID, u as nextWakeAtMs } from "./recovery-adapter-BF5ESanQ.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-Mp5OOpUH.js";
+import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-CRvbl5q3.js";
+import { a as readChatHistoryPage, c as unsubscribeSessionChanges, i as decodeHistoryCursor, l as assertValidParams, o as resolveDbLeafEntryId, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers } from "./sessions-BQYQBpX0.js";
+import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-B9A0wAU6.js";
+import "./node-service-BnwLXY5x.js";
+import "./status.update-BOB92yBQ.js";
+import { i as resolveActiveLogFile, n as readLogSlice } from "./log-tail-BAg8b5Wq.js";
+import { t as installSkill } from "./skills-install-DqCRPwE1.js";
+import { r as runGatewayUpdate } from "./update-runner-BYv_ec3N.js";
+import { n as resolveWebClientPackagedRootSync, t as WEB_CLIENT_BUNDLE_MISSING_MESSAGE } from "./web-client-assets-CJyKwFRS.js";
+import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-CcKQx_l1.js";
+import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-BRKxpjt9.js";
 import { createRequire } from "node:module";
 import { cpuUsage, memoryUsage, resourceUsage, uptime } from "node:process";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -190,7 +190,7 @@ import * as fsSync from "node:fs";
 import fs, { mkdirSync } from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import { isDeepStrictEqual, promisify } from "node:util";
 import zlib from "node:zlib";
 import chalk from "chalk";
@@ -1399,7 +1399,7 @@ function resolveCheckIntervalMs(cfg) {
 }
 async function readState(statePath) {
 	try {
-		const raw = await fsPromises.readFile(statePath, "utf-8");
+		const raw = await fs$1.readFile(statePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		return parsed && typeof parsed === "object" ? parsed : {};
 	} catch {
@@ -1480,7 +1480,7 @@ async function runAutoUpdateCommand(params) {
 			path.join(params.root, "dist", "index.mjs")
 		];
 		for (const candidate of candidates) try {
-			await fsPromises.access(candidate);
+			await fs$1.access(candidate);
 			argv.push(execPath, candidate, ...baseArgs);
 			break;
 		} catch {}
@@ -3064,13 +3064,13 @@ async function resolveGatewayRecoveryAdapters(cfg, opts) {
 async function assembleFirstPartyAdapters(cfg, wiring) {
 	const adapters = [];
 	const stateDir = resolveStateDir();
-	const { getConfiguredSessionStorageRuntime } = await import("./model-selection-C8GCtGby.js").then((n) => n.hi);
+	const { getConfiguredSessionStorageRuntime } = await import("./model-selection-k68XU4oS.js").then((n) => n.hi);
 	const runtime = getConfiguredSessionStorageRuntime()?.runtime;
 	const gatewayInstanceId = getGatewayInstanceId();
-	const { tryGetAgentTurnRuntime } = await import("./agent-turn-runner-BGmkN_A8.js").then((n) => n.t);
+	const { tryGetAgentTurnRuntime } = await import("./agent-turn-runner-DFZxbjaC.js").then((n) => n.t);
 	const backbone = tryGetAgentTurnRuntime()?.backbone;
 	const { createOutboundDeliveryRecoveryAdapter } = await import("./delivery-recovery-adapter-CXwijCdD.js");
-	const { deliverOutboundPayloads } = await import("./deliver-BpzzrBKl.js").then((n) => n.n);
+	const { deliverOutboundPayloads } = await import("./deliver-Bhlx9VG9.js").then((n) => n.n);
 	adapters.push(createOutboundDeliveryRecoveryAdapter({
 		cfg,
 		deliver: deliverOutboundPayloads,
@@ -3084,7 +3084,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		sessionRuns = void 0;
 	}
 	if (sessionRuns && wiring?.agentTurnStager) {
-		const { createSessionRunRecoveryAdapter } = await import("./recovery-adapter-CMFB03AL.js");
+		const { createSessionRunRecoveryAdapter } = await import("./recovery-adapter-NtvPZ47M.js");
 		adapters.push(createSessionRunRecoveryAdapter({
 			store: sessionRuns,
 			cfg,
@@ -3093,14 +3093,14 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 			stager: wiring.agentTurnStager
 		}));
 	}
-	const { createStorageSupervisorRecoveryAdapter } = await import("./supervisor-recovery-adapter-BxLO7wjD.js");
+	const { createStorageSupervisorRecoveryAdapter } = await import("./supervisor-recovery-adapter-CTaDRl_d.js");
 	adapters.push(createStorageSupervisorRecoveryAdapter({
 		stateDir,
 		supervisor: wiring?.supervisor,
 		lease: wiring?.lease ? () => wiring.lease?.() ?? { isArmed: () => false } : void 0
 	}));
 	if (backbone && wiring?.agentTurnStager) {
-		const { createAgentTurnRecoveryAdapter } = await import("./agent-turn-recovery-adapter-BRVxIXJY.js");
+		const { createAgentTurnRecoveryAdapter } = await import("./agent-turn-recovery-adapter-DF3vdyE5.js");
 		adapters.push(createAgentTurnRecoveryAdapter({
 			backbone,
 			stager: wiring.agentTurnStager
@@ -3114,7 +3114,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		}));
 	}
 	if (runtime?.cronJobs && runtime.taskRuns && sessionRuns) {
-		const { createCronHeartbeatRecoveryAdapter } = await import("./recovery-adapter-Bokfvz7s.js").then((n) => n.n);
+		const { createCronHeartbeatRecoveryAdapter } = await import("./recovery-adapter-BF5ESanQ.js").then((n) => n.n);
 		adapters.push(createCronHeartbeatRecoveryAdapter({
 			cronJobs: runtime.cronJobs,
 			taskRuns: runtime.taskRuns,
@@ -3122,7 +3122,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		}));
 	}
 	if (sessionRuns) {
-		const { createEmbeddedPiRecoveryAdapter } = await import("./pi-embedded-recovery-adapter-CB8bcT6A.js");
+		const { createEmbeddedPiRecoveryAdapter } = await import("./pi-embedded-recovery-adapter-ZV9u5snz.js");
 		adapters.push(createEmbeddedPiRecoveryAdapter({
 			sessionRuns,
 			cfg,
@@ -3130,11 +3130,11 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 			stager: wiring?.agentTurnStager,
 			isRunActive: isEmbeddedPiRunActive
 		}));
-		const { createAcpRuntimeRecoveryAdapter } = await import("./recovery-adapter-B6QLivR9.js");
+		const { createAcpRuntimeRecoveryAdapter } = await import("./recovery-adapter-BMqm3Nm4.js");
 		adapters.push(createAcpRuntimeRecoveryAdapter({ sessionRuns }));
 	}
 	if (backbone) {
-		const { createPluginOwnedWorkRecoveryAdapter } = await import("./plugin-owned-work-recovery-adapter-CnQZf19o.js");
+		const { createPluginOwnedWorkRecoveryAdapter } = await import("./plugin-owned-work-recovery-adapter-DHYQi-Bq.js");
 		adapters.push(createPluginOwnedWorkRecoveryAdapter({ backbone }));
 	}
 	return adapters;
@@ -5658,9 +5658,9 @@ async function drainPendingWrite(filePath) {
 	if (pending) await pending.catch(() => void 0);
 }
 async function pruneIfNeeded(filePath, opts) {
-	const stat = await fsPromises.stat(filePath).catch(() => null);
+	const stat = await fs$1.stat(filePath).catch(() => null);
 	if (!stat || stat.size <= opts.maxBytes) return;
-	const raw = await fsPromises.readFile(filePath, "utf-8").catch((err) => {
+	const raw = await fs$1.readFile(filePath, "utf-8").catch((err) => {
 		log$24.warn("cron run-log: prune skipped (read failed)", {
 			filePath,
 			err: String(err)
@@ -5672,14 +5672,14 @@ async function pruneIfNeeded(filePath, opts) {
 	const kept = lines.slice(Math.max(0, lines.length - opts.keepLines));
 	const { randomBytes } = await import("node:crypto");
 	const tmp = `${filePath}.${process.pid}.${randomBytes(8).toString("hex")}.tmp`;
-	await fsPromises.writeFile(tmp, `${kept.join("\n")}\n`, "utf-8");
-	await fsPromises.rename(tmp, filePath);
+	await fs$1.writeFile(tmp, `${kept.join("\n")}\n`, "utf-8");
+	await fs$1.rename(tmp, filePath);
 }
 async function listCronRunLogReadPaths(filePath) {
 	const resolved = path.resolve(filePath);
 	const dir = path.dirname(resolved);
 	const base = path.basename(resolved);
-	return [...(await fsPromises.readdir(dir).catch(() => [])).map((name) => {
+	return [...(await fs$1.readdir(dir).catch(() => [])).map((name) => {
 		const match = new RegExp(`^${base.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\.(\\d+)(\\.gz)?$`).exec(name);
 		return match ? {
 			path: path.join(dir, name),
@@ -5688,8 +5688,8 @@ async function listCronRunLogReadPaths(filePath) {
 	}).filter((entry) => entry !== null).toSorted((a, b) => b.slot - a.slot).map((entry) => entry.path), resolved];
 }
 async function readCronRunLogFile(filePath) {
-	if (filePath.endsWith(".gz")) return zlib.gunzipSync(await fsPromises.readFile(filePath)).toString("utf-8");
-	return fsPromises.readFile(filePath, "utf-8");
+	if (filePath.endsWith(".gz")) return zlib.gunzipSync(await fs$1.readFile(filePath)).toString("utf-8");
+	return fs$1.readFile(filePath, "utf-8");
 }
 async function readCronRunLogRaw(filePath) {
 	const chunks = [];
@@ -5840,7 +5840,7 @@ async function readCronRunLogEntriesPageAll(opts) {
 	const query = opts.query?.trim().toLowerCase() ?? "";
 	const sortDir = opts.sortDir === "asc" ? "asc" : "desc";
 	const runsDir = path.resolve(path.dirname(path.resolve(opts.storePath)), "runs");
-	const files = await fsPromises.readdir(runsDir, { withFileTypes: true }).catch(() => []);
+	const files = await fs$1.readdir(runsDir, { withFileTypes: true }).catch(() => []);
 	const logFiles = [...new Set(files.filter((entry) => entry.isFile()).map((entry) => {
 		const match = /^(.+\.jsonl)(?:\.\d+(?:\.gz)?)?$/.exec(entry.name);
 		return match ? path.join(runsDir, match[1] ?? "") : null;
@@ -10303,7 +10303,7 @@ function resolveWorkspaceFilePathResultOrThrow(params) {
 }
 async function resolveWorkspaceRealPath(workspaceDir) {
 	try {
-		return await fsPromises.realpath(workspaceDir);
+		return await fs$1.realpath(workspaceDir);
 	} catch {
 		return path.resolve(workspaceDir);
 	}
@@ -10332,7 +10332,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 	};
 	let candidateLstat;
 	try {
-		candidateLstat = await fsPromises.lstat(candidatePath);
+		candidateLstat = await fs$1.lstat(candidatePath);
 	} catch (err) {
 		return resolveWorkspaceFilePathResultOrThrow({
 			error: err,
@@ -10343,7 +10343,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 	if (candidateLstat.isSymbolicLink()) {
 		let targetReal;
 		try {
-			targetReal = await fsPromises.realpath(candidatePath);
+			targetReal = await fs$1.realpath(candidatePath);
 		} catch (err) {
 			return resolveWorkspaceFilePathResultOrThrow({
 				error: err,
@@ -10358,7 +10358,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 		};
 		let targetStat;
 		try {
-			targetStat = await fsPromises.stat(targetReal);
+			targetStat = await fs$1.stat(targetReal);
 		} catch (err) {
 			return resolveWorkspaceFilePathResultOrThrow({
 				error: err,
@@ -10396,13 +10396,13 @@ async function resolveAgentWorkspaceFilePath(params) {
 	return {
 		kind: "ready",
 		requestPath,
-		ioPath: await fsPromises.realpath(candidatePath).catch(() => candidatePath),
+		ioPath: await fs$1.realpath(candidatePath).catch(() => candidatePath),
 		workspaceReal
 	};
 }
 async function statFileSafely(filePath) {
 	try {
-		const [stat, lstat] = await Promise.all([fsPromises.stat(filePath), fsPromises.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([fs$1.stat(filePath), fs$1.lstat(filePath)]);
 		if (lstat.isSymbolicLink() || !stat.isFile()) return null;
 		if (stat.nlink > 1) return null;
 		if (!sameFileIdentity(stat, lstat)) return null;
@@ -10496,7 +10496,7 @@ function respondAgentNotFound(respond, agentId) {
 async function moveToTrashBestEffort(pathname) {
 	if (!pathname) return;
 	try {
-		await fsPromises.access(pathname);
+		await fs$1.access(pathname);
 	} catch {
 		return;
 	}
@@ -10572,7 +10572,7 @@ const agentsHandlers = {
 			dir: workspaceDir,
 			ensureBootstrapFiles: !Boolean(nextConfig.agents?.defaults?.skipBootstrap)
 		});
-		await fsPromises.mkdir(resolveSessionTranscriptsDirForAgent(agentId), { recursive: true });
+		await fs$1.mkdir(resolveSessionTranscriptsDirForAgent(agentId), { recursive: true });
 		await writeConfigFile(nextConfig);
 		const safeName = sanitizeIdentityLine(rawName);
 		const emoji = resolveOptionalStringParam(params.emoji);
@@ -10585,7 +10585,7 @@ const agentsHandlers = {
 			...avatar ? [`- Avatar: ${sanitizeIdentityLine(avatar)}`] : [],
 			""
 		];
-		await fsPromises.appendFile(identityPath, lines.join("\n"), "utf-8");
+		await fs$1.appendFile(identityPath, lines.join("\n"), "utf-8");
 		respond(true, {
 			ok: true,
 			agentId,
@@ -10620,9 +10620,9 @@ const agentsHandlers = {
 		});
 		if (avatar) {
 			const workspace = workspaceDir ?? resolveAgentWorkspaceDir(nextConfig, agentId);
-			await fsPromises.mkdir(workspace, { recursive: true });
+			await fs$1.mkdir(workspace, { recursive: true });
 			const identityPath = path.join(workspace, DEFAULT_IDENTITY_FILENAME);
-			await fsPromises.appendFile(identityPath, `\n- Avatar: ${sanitizeIdentityLine(avatar)}\n`, "utf-8");
+			await fs$1.appendFile(identityPath, `\n- Avatar: ${sanitizeIdentityLine(avatar)}\n`, "utf-8");
 		}
 		respond(true, {
 			ok: true,
@@ -10746,7 +10746,7 @@ const agentsHandlers = {
 		const resolved = resolveAgentWorkspaceFileOrRespondError(params, respond);
 		if (!resolved) return;
 		const { agentId, workspaceDir, name } = resolved;
-		await fsPromises.mkdir(workspaceDir, { recursive: true });
+		await fs$1.mkdir(workspaceDir, { recursive: true });
 		const filePath = path.join(workspaceDir, name);
 		const resolvedPath = await resolveWorkspaceFilePathOrRespond({
 			respond,
@@ -16257,7 +16257,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-uGHyBXqP.js");
+			const { handleNodeEvent } = await import("./server-node-events-BaFY8QcO.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -18054,8 +18054,8 @@ function logConsultFailure(reason) {
 }
 const defaultDeps = {
 	runEmbeddedPiAgent,
-	mkdtemp: fsPromises.mkdtemp,
-	rm: fsPromises.rm,
+	mkdtemp: fs$1.mkdtemp,
+	rm: fs$1.rm,
 	resolveAgentDir,
 	resolveAgentWorkspaceDir,
 	resolveDefaultAgentId,
@@ -24816,7 +24816,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.OPENCLAW_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.OPENCLAW_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./server-BiyBJMEv.js");
+	const mod = override ? await import(override) : await import("./server-l9oy68N_.js");
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -25047,7 +25047,7 @@ async function resolveFileWithinRoot(rootReal, urlPath) {
 	if (normalized.endsWith("/")) return await tryOpen(path.posix.join(rel, "index.html"));
 	const candidate = path.join(rootReal, rel);
 	try {
-		const st = await fsPromises.lstat(candidate);
+		const st = await fs$1.lstat(candidate);
 		if (st.isSymbolicLink()) return null;
 		if (st.isDirectory()) return await tryOpen(path.posix.join(rel, "index.html"));
 	} catch {}
@@ -25084,8 +25084,8 @@ async function resolveA2uiRoot() {
 	for (const dir of candidates) try {
 		const indexPath = path.join(dir, "index.html");
 		const bundlePath = path.join(dir, "a2ui.bundle.js");
-		await fsPromises.stat(indexPath);
-		await fsPromises.stat(bundlePath);
+		await fs$1.stat(indexPath);
+		await fs$1.stat(bundlePath);
 		return dir;
 	} catch {}
 	return null;
@@ -25094,7 +25094,7 @@ async function resolveA2uiRootReal() {
 	if (cachedA2uiRootReal !== void 0 && (cachedA2uiRootReal !== null || Date.now() - cachedA2uiResolvedAtMs < A2UI_ROOT_RETRY_NULL_AFTER_MS)) return cachedA2uiRootReal;
 	if (!resolvingA2uiRoot) resolvingA2uiRoot = (async () => {
 		const root = await resolveA2uiRoot();
-		cachedA2uiRootReal = root ? await fsPromises.realpath(root) : null;
+		cachedA2uiRootReal = root ? await fs$1.realpath(root) : null;
 		cachedA2uiResolvedAtMs = Date.now();
 		resolvingA2uiRoot = null;
 		return cachedA2uiRootReal;
@@ -25315,13 +25315,13 @@ function normalizeBasePath(rawPath) {
 }
 async function prepareCanvasRoot(rootDir) {
 	await ensureDir(rootDir);
-	const rootReal = await fsPromises.realpath(rootDir);
+	const rootReal = await fs$1.realpath(rootDir);
 	try {
 		const indexPath = path.join(rootReal, "index.html");
-		await fsPromises.stat(indexPath);
+		await fs$1.stat(indexPath);
 	} catch {
 		try {
-			await fsPromises.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
+			await fs$1.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
 		} catch {}
 	}
 	return rootReal;
@@ -28616,7 +28616,7 @@ async function resolveGatewayOwnerStatus(pid, payload, platform, port) {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fsPromises.readFile(lockPath, "utf8");
+		const raw = await fs$1.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number") return null;
 		if (typeof parsed.createdAt !== "string") return null;
@@ -28651,11 +28651,11 @@ async function acquireGatewayLock(opts = {}) {
 	const platform = opts.platform ?? process.platform;
 	const port = opts.port;
 	const { lockPath, configPath } = resolveGatewayLockPath(env);
-	await fsPromises.mkdir(path.dirname(lockPath), { recursive: true });
+	await fs$1.mkdir(path.dirname(lockPath), { recursive: true });
 	const startedAt = Date.now();
 	let lastPayload = null;
 	while (Date.now() - startedAt < timeoutMs) try {
-		const handle = await fsPromises.open(lockPath, "wx");
+		const handle = await fs$1.open(lockPath, "wx");
 		const startTime = platform === "linux" ? readLinuxStartTime(process.pid) : null;
 		const payload = {
 			pid: process.pid,
@@ -28669,7 +28669,7 @@ async function acquireGatewayLock(opts = {}) {
 			configPath,
 			release: async () => {
 				await handle.close().catch(() => void 0);
-				await fsPromises.rm(lockPath, { force: true });
+				await fs$1.rm(lockPath, { force: true });
 			}
 		};
 	} catch (err) {
@@ -28678,7 +28678,7 @@ async function acquireGatewayLock(opts = {}) {
 		const ownerPid = lastPayload?.pid;
 		const ownerStatus = ownerPid ? await resolveGatewayOwnerStatus(ownerPid, lastPayload, platform, port) : "unknown";
 		if (ownerStatus === "dead" && ownerPid) {
-			await fsPromises.rm(lockPath, { force: true });
+			await fs$1.rm(lockPath, { force: true });
 			continue;
 		}
 		if (ownerStatus !== "alive") {
@@ -28688,13 +28688,13 @@ async function acquireGatewayLock(opts = {}) {
 				stale = Number.isFinite(createdAt) ? Date.now() - createdAt > staleMs : false;
 			}
 			if (!stale) try {
-				const st = await fsPromises.stat(lockPath);
+				const st = await fs$1.stat(lockPath);
 				stale = Date.now() - st.mtimeMs > staleMs;
 			} catch {
 				stale = false;
 			}
 			if (stale) {
-				await fsPromises.rm(lockPath, { force: true });
+				await fs$1.rm(lockPath, { force: true });
 				continue;
 			}
 		}
@@ -34858,7 +34858,7 @@ async function bootGatewayServer(port, opts) {
 		const lease = createPreservationLeaseService();
 		setActivePreservationLease(lease);
 		let supervisorClosed = false;
-		const transcriptFingerprint = async (filePath) => createHash("sha256").update(await fsPromises.readFile(filePath)).digest("hex");
+		const transcriptFingerprint = async (filePath) => createHash("sha256").update(await fs$1.readFile(filePath)).digest("hex");
 		const requireCandidateRuntime = () => {
 			const candidate = candidateOwner?.candidate.runtime;
 			if (!candidate || candidateOwner?.state === "closed") throw new Error("recovery candidate runtime is not ready");
@@ -35143,7 +35143,7 @@ async function bootGatewayServer(port, opts) {
 			await supervisor.start();
 			storageStartup.release();
 			try {
-				const { installIncidentAsset } = await import("./incident-install-BdXMiCuu.js");
+				const { installIncidentAsset } = await import("./incident-install-cGBLZhud.js");
 				await installIncidentAsset({
 					stateDir: resolveStateDir(),
 					loadIndexRecord: async () => {
@@ -35158,7 +35158,7 @@ async function bootGatewayServer(port, opts) {
 			if (supervisor.getState() === "healthy") {
 				const runtime = getConfiguredSessionStorageRuntime()?.runtime;
 				if (runtime?.conversation) try {
-					const { runLiveRepair } = await import("./live-repair-BGbr6jGR.js");
+					const { runLiveRepair } = await import("./live-repair-RXzcIxWc.js");
 					await runLiveRepair({
 						stateDir: resolveStateDir(),
 						conversationStore: runtime.conversation,
@@ -35533,14 +35533,14 @@ async function bootGatewayServer(port, opts) {
 	let sessionConsumerClaimSweepCancelled = false;
 	let sessionConsumerClaimSweepBoot = null;
 	if (!minimalTestGateway) sessionConsumerClaimSweepBoot = (async () => {
-		const { getConfiguredSessionStorageRuntime } = await import("./model-selection-C8GCtGby.js").then((n) => n.hi);
-		const { loadPluginManifestRegistry } = await import("./model-selection-C8GCtGby.js").then((n) => n.Ln);
-		const { getActivePluginRegistry } = await import("./model-selection-C8GCtGby.js").then((n) => n.br);
-		const { deriveGatewaySweepConsumers, runSessionConsumerSweepTick, startSessionConsumerSweepSchedule } = await import("./session-consumer-claim-sweep-aKULSjxA.js");
+		const { getConfiguredSessionStorageRuntime } = await import("./model-selection-k68XU4oS.js").then((n) => n.hi);
+		const { loadPluginManifestRegistry } = await import("./model-selection-k68XU4oS.js").then((n) => n.Ln);
+		const { getActivePluginRegistry } = await import("./model-selection-k68XU4oS.js").then((n) => n.br);
+		const { deriveGatewaySweepConsumers, runSessionConsumerSweepTick, startSessionConsumerSweepSchedule } = await import("./session-consumer-claim-sweep-Bc4Qq0rB.js");
 		const sweepLog = log.child("session-consumer-claim-sweep");
 		const { createDiagnosticRingBuffer } = await import("./session-consumer-diagnostics-UbdxGCz8.js");
 		const diagnostics = createDiagnosticRingBuffer();
-		const { setDiagnostics } = await import("./sessions-C6bPQgaD.js").then((n) => n.n);
+		const { setDiagnostics } = await import("./sessions-BQYQBpX0.js").then((n) => n.n);
 		if (sessionConsumerClaimSweepCancelled) return;
 		setDiagnostics(diagnostics);
 		const lastKnownEnabledState = /* @__PURE__ */ new Map();
@@ -35579,7 +35579,7 @@ async function bootGatewayServer(port, opts) {
 					lastKnownEnabledState,
 					cfg: loadConfig()
 				});
-				const { setLastSweepTimestamp } = await import("./sessions-C6bPQgaD.js").then((n) => n.n);
+				const { setLastSweepTimestamp } = await import("./sessions-BQYQBpX0.js").then((n) => n.n);
 				setLastSweepTimestamp(Date.now());
 			} catch (err) {
 				sweepLog.warn(`session consumer-claim sweep failed: ${String(err)}`);
@@ -35600,8 +35600,8 @@ async function bootGatewayServer(port, opts) {
 			id: "task-dispatch",
 			prepare: () => {
 				taskPipelineBoot = (async () => {
-					const { getConfiguredSessionStorageRuntime } = await import("./model-selection-C8GCtGby.js").then((n) => n.hi);
-					const { startTaskPipeline } = await import("./task-pipeline-boot-nWDIjt5K.js");
+					const { getConfiguredSessionStorageRuntime } = await import("./model-selection-k68XU4oS.js").then((n) => n.hi);
+					const { startTaskPipeline } = await import("./task-pipeline-boot-CaVeITev.js");
 					const pipeline = startTaskPipeline({
 						getConfigured: getConfiguredSessionStorageRuntime,
 						cfg: cfgAtStart,