wednesdayai 0.4.12-dev.715 → 0.4.12-dev.716

package/dist/{gateway-cli-BTuK5wC4.js → gateway-cli-DI7_gxH-.js}

@@ -2,7 +2,7 @@ import { g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as
 import { $ as readLoggingConfig, A as setVerbose, At as resolvePreferredOpenClawTmpDir, C as truncateUtf16Safe, F as isRich, I as theme, K as resolveFileLogProfile, L as getChildLogger, P as colorize, R as getLogger, W as appendFileLog, _t as isNotFoundPathError, c as ensureDir, dt as openVerifiedFileSync, ft as sameFileIdentity, g as resolveUserPath, lt as openBoundaryFile, t as CONFIG_DIR, ut as openBoundaryFileSync, vt as isPathInside, y as shortenHomePath, z as getResolvedLoggerSettings } from "./utils-CMEUUHmM.js";
 import { t as isPlainObject } from "./plain-object-DHRdTVMa.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-DDYFn78t.js";
-import { $ as deferGatewayRestartUntilIdle, $n as OPENAI_TTS_MODELS, $t as createOutboundSendDeps$1, A as resolveCronSession, An as resolveHeartbeatDeliveryTarget, At as requestNudge, B as readLatestAssistantReply, Bn as resolveUserTimezone, Bt as handleSlackHttpRequest, C as startHeartbeatRunner, Cn as dispatchInboundMessage, Cr as DEFAULT_INPUT_TIMEOUT_MS, Ct as resolvePluginTools, D as onHeartbeatEvent, Dr as resolveInputFileLimits, Dt as loadOpenClawPlugins, E as getLastHeartbeatEvent, En as getTotalPendingReplies, Er as normalizeMimeList, Et as getLoadedAnalysisConcurrency, F as resolveExecConfig, Fn as resetDirectoryCache, Gn as resolveTtsApiKey, Gt as agentCommandFromIngress, H as canonicalizeSpawnedByForAgent, Hn as getTtsProvider, Ht as requestBodyErrorToText, I as applyToolPolicyPipeline, In as isAbortRequestText, J as pruneLegacyStoreKeys, Jn as resolveTtsPrefsPath, Jt as resolveAgentOutboundTarget, K as loadCombinedSessionStoreForGateway, Kn as resolveTtsAutoMode, L as buildDefaultToolPolicyPipelineSteps, M as runEmbeddedPiAgent, Mn as resolveSessionDeliveryTarget, N as prepareSessionManagerForRun, Nn as resolveOutboundChannelPlugin, Nt as loadProviderUsageSummary, O as redactSensitiveHeartbeatEvent, On as ensureOutboundSessionEntry, Or as resolveAgentTimeoutMs, Ot as takePendingActivationMigration, Q as consumeGatewaySigusr1RestartAuthorization, Qn as textToSpeech, Qt as createDefaultDeps, Rn as setTaskPipelineStatus, Rt as resolveAgentOutboundIdentity, S as setHeartbeatsEnabled, Sr as DEFAULT_INPUT_MAX_REDIRECTS, St as getPluginToolMeta, T as resolveHeartbeatVisibility, Tn as createReplyDispatcher, Tr as extractImageContentFromSource, Tt as clearPluginRegistryCaches, Un as isTtsEnabled, V as resolveAnnounceTargetFromKey, Vt as readJsonBodyWithLimit, W as listAgentsForGateway, Wn as isTtsProviderConfigured, X as resolveSessionModelRef, Xn as setTtsEnabled, Y as resolveGatewaySessionStoreTarget, Yn as resolveTtsProviderOrder, Yt as createOutboundSendDeps, Zn as setTtsProvider, _ as runMainAgentTurn, _n as detectSuspiciousPatterns, _r as resolveAgentSessionDirs, _t as buildDeliveryFromLegacyPayload, ar as stripHeartbeatToken, at as setPreRestartDeferralCheck, b as runHeartbeatOnce, br as DEFAULT_INPUT_IMAGE_MAX_BYTES, bt as applyBrowserProxyPaths, cr as isSystemEventContextChanged, ct as formatDoctorNonInteractiveHint, d as countActiveDescendantRuns, dn as resolveSessionAuthProfileOverride, dt as summarizeRestartSentinel, en as runWithModelFallback, er as OPENAI_TTS_VOICES, et as emitGatewayRestart, f as initSubagentRegistry, fn as resolveAgentAvatar, fr as requestHeartbeatNow, gn as buildSafeExternalPrompt, gr as getAcpSessionManager, gt as migrateLegacyCronPayload, h as runSubagentAnnounceFlow, hr as ACP_SESSION_IDENTITY_RENDERER_VERSION, ht as normalizeCronJobPatch, ir as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, it as setGatewaySigusr1RestartPolicy, j as resolveCronStyleNow, jn as resolveOutboundTarget, k as isCronSystemEvent, kn as resolveOutboundSessionRoute, kt as createPluginRuntime, ln as computeBackoff, lt as formatRestartSentinelMessage, mt as normalizeCronJobCreate, nn as setCliSessionId, nr as getExistingFollowupQueue, nt as markGatewaySigusr1RestartHandled, o as resolveChannelAccountEnabled, or as ToolInputError, ot as triggerOpenClawRestart, p as listDescendantRunsForRequester, pt as writeRestartSentinel, q as loadSessionEntry, qn as resolveTtsConfig, qt as resolveAgentDeliveryPlan, rn as runCliAgent, rr as removeQueuedFollowupRun, rt as scheduleGatewaySigusr1Restart, s as BARE_SESSION_RESET_PROMPT, sn as lookupContextTokens, sr as enqueueSystemEvent, st as consumeRestartSentinel, tn as getCliSessionId, tr as clearSessionQueues, tt as isGatewaySigusr1RestartExternallyAllowed, un as sleepWithAbort, v as resolveHeartbeatConfig, vn as getHookType, vt as hasLegacyDeliveryHints, w as runWakeGate, wn as setDispatchInboundAdmissionRejectionFor, wr as extractFileContentFromSource, xn as buildHistoryContextFromEntries, xr as DEFAULT_INPUT_IMAGE_MIMES, xt as persistBrowserProxyFiles, y as resolveHeartbeatSummaryForAgent, yn as isExternalHookSession, yr as resolveSendPolicy, yt as stripLegacyDeliveryFields, z as createOpenClawTools, zn as DEFAULT_MAX_PARALLEL } from "./reply-BIZ2zaUq.js";
+import { $n as setTtsProvider, A as resolveCronSession, An as ensureOutboundSessionEntry, Ar as resolveAgentTimeoutMs, At as takePendingActivationMigration, Bn as setTaskPipelineStatus, Bt as resolveAgentOutboundIdentity, C as startHeartbeatRunner, Cn as buildHistoryContextFromEntries, Cr as DEFAULT_INPUT_IMAGE_MIMES, Ct as persistBrowserProxyFiles, D as onHeartbeatEvent, Dn as createReplyDispatcher, Dr as extractImageContentFromSource, Dt as clearPluginRegistryCaches, E as getLastHeartbeatEvent, En as setDispatchInboundAdmissionRejectionFor, Er as extractFileContentFromSource, F as waitForPendingWrites, Fn as resolveOutboundChannelPlugin, Ft as loadProviderUsageSummary, Gn as isTtsEnabled, H as readLatestAssistantReply, Hn as resolveUserTimezone, Ht as handleSlackHttpRequest, J as loadCombinedSessionStoreForGateway, Jn as resolveTtsAutoMode, K as listAgentsForGateway, Kn as isTtsProviderConfigured, L as resolveExecConfig, Ln as resetDirectoryCache, M as runEmbeddedPiAgent, Mn as resolveHeartbeatDeliveryTarget, Mt as requestNudge, N as prepareSessionManagerForRun, Nn as resolveOutboundTarget, O as redactSensitiveHeartbeatEvent, On as getTotalPendingReplies, Or as normalizeMimeList, Ot as getLoadedAnalysisConcurrency, P as snapshotRunPendingWrites, Pn as resolveSessionDeliveryTarget, Q as resolveSessionModelRef, Qn as setTtsEnabled, R as applyToolPolicyPipeline, Rn as isAbortRequestText, S as setHeartbeatsEnabled, Sr as DEFAULT_INPUT_IMAGE_MAX_BYTES, St as applyBrowserProxyPaths, T as resolveHeartbeatVisibility, Tn as dispatchInboundMessage, Tr as DEFAULT_INPUT_TIMEOUT_MS, Tt as resolvePluginTools, U as resolveAnnounceTargetFromKey, Ut as readJsonBodyWithLimit, V as createOpenClawTools, Vn as DEFAULT_MAX_PARALLEL, W as canonicalizeSpawnedByForAgent, Wn as getTtsProvider, Wt as requestBodyErrorToText, X as pruneLegacyStoreKeys, Xn as resolveTtsPrefsPath, Xt as resolveAgentOutboundTarget, Y as loadSessionEntry, Yn as resolveTtsConfig, Yt as resolveAgentDeliveryPlan, Z as resolveGatewaySessionStoreTarget, Zn as resolveTtsProviderOrder, Zt as createOutboundSendDeps, _ as runMainAgentTurn, _r as ACP_SESSION_IDENTITY_RENDERER_VERSION, _t as normalizeCronJobPatch, an as runCliAgent, ar as removeQueuedFollowupRun, at as scheduleGatewaySigusr1Restart, b as runHeartbeatOnce, bn as getHookType, bt as hasLegacyDeliveryHints, cr as ToolInputError, ct as triggerOpenClawRestart, d as countActiveDescendantRuns, dn as computeBackoff, dt as formatRestartSentinelMessage, en as createDefaultDeps, er as textToSpeech, et as consumeGatewaySigusr1RestartAuthorization, f as initSubagentRegistry, fn as sleepWithAbort, gt as normalizeCronJobCreate, h as runSubagentAnnounceFlow, ht as writeRestartSentinel, in as setCliSessionId, ir as getExistingFollowupQueue, it as markGatewaySigusr1RestartHandled, j as resolveCronStyleNow, jn as resolveOutboundSessionRoute, jt as createPluginRuntime, k as isCronSystemEvent, kr as resolveInputFileLimits, kt as loadOpenClawPlugins, ln as lookupContextTokens, lr as enqueueSystemEvent, lt as consumeRestartSentinel, mn as resolveAgentAvatar, mr as requestHeartbeatNow, nn as runWithModelFallback, nr as OPENAI_TTS_VOICES, nt as emitGatewayRestart, o as resolveChannelAccountEnabled, or as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, ot as setGatewaySigusr1RestartPolicy, p as listDescendantRunsForRequester, pn as resolveSessionAuthProfileOverride, pt as summarizeRestartSentinel, qn as resolveTtsApiKey, qt as agentCommandFromIngress, rn as getCliSessionId, rr as clearSessionQueues, rt as isGatewaySigusr1RestartExternallyAllowed, s as BARE_SESSION_RESET_PROMPT, sr as stripHeartbeatToken, st as setPreRestartDeferralCheck, tn as createOutboundSendDeps$1, tr as OPENAI_TTS_MODELS, tt as deferGatewayRestartUntilIdle, ur as isSystemEventContextChanged, ut as formatDoctorNonInteractiveHint, v as resolveHeartbeatConfig, vn as buildSafeExternalPrompt, vr as getAcpSessionManager, vt as migrateLegacyCronPayload, w as runWakeGate, wr as DEFAULT_INPUT_MAX_REDIRECTS, wt as getPluginToolMeta, xn as isExternalHookSession, xr as resolveSendPolicy, xt as stripLegacyDeliveryFields, y as resolveHeartbeatSummaryForAgent, yn as detectSuspiciousPatterns, yr as resolveAgentSessionDirs, yt as buildDeliveryFromLegacyPayload, z as buildDefaultToolPolicyPipelineSteps } from "./reply-BzUdF5qW.js";
 import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, M as matchesSkillFilter, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-CWTkr4pS.js";
 import { m as defaultRuntime, n as runtimeForLogger, o as setConsoleSubsystemFilter, s as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-DDZBycwS.js";
 import { A as isCronRunSessionKey, M as isSubagentSessionKey, N as parseAgentSessionKey, S as normalizeAccountId$1, a as classifySessionKeyShape, b as toAgentStoreSessionKey, d as normalizeAgentId, f as normalizeMainKey, g as resolveLinkedPeerIdForChannel, h as resolveConfiguredCanonicalIdentity, p as resolveAgentIdFromSessionKey, r as buildAgentMainSessionKey, t as DEFAULT_AGENT_ID, x as DEFAULT_ACCOUNT_ID, y as toAgentRequestSessionKey } from "./session-key-B1wN38jV.js";
@@ -24,12 +24,12 @@ import { c as isDiagnosticsEnabled, l as onDiagnosticEvent, s as emitDiagnosticE
 import { n as USER_CLIENT_ID, o as buildUserClientRuntimeConfig, s as handleUserClientHttpRequest } from "./static-server-C-iTMRyz.js";
 import { n as assertNoPathAliasEscape } from "./path-alias-guards-BSmwo1rT.js";
 import { i as openFileWithinRoot, l as writeFileWithinRoot, s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-DD7KXuvI.js";
-import { D as normalizeMediaProviderId, E as listAutoDetectableProviders, T as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, g as registerUnhandledRejectionHandler, n as buildProviderRegistry, x as resolveModelEntries, y as resolveCapabilityConfig } from "./audio-transcription-runner-D-d42kdt.js";
+import { D as normalizeMediaProviderId, E as listAutoDetectableProviders, T as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, g as registerUnhandledRejectionHandler, n as buildProviderRegistry, x as resolveModelEntries, y as resolveCapabilityConfig } from "./audio-transcription-runner-CGTNNwbm.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-CjyGDRXN.js";
 import { t as SsrFBlockedError } from "./ssrf-B85AIIOO.js";
 import "./proxy-fetch-Czv8kxaL.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-BXebcnwh.js";
-import "./pi-embedded-helpers-DEHXX7Dr.js";
+import "./pi-embedded-helpers-i0-tPaxH.js";
 import "./local-roots-_qt4-Ma5.js";
 import { c as detectMime } from "./image-ops-DcqCZEUY.js";
 import { a as testRegexWithBoundedInput, i as compileSafeRegex } from "./redact-CQtYLB4a.js";
@@ -37,10 +37,10 @@ import { i as formatErrorMessage, o as hasErrnoCode, s as isErrno } from "./erro
 import "./models-config-Burwt3mB.js";
 import { n as loadModelCatalog } from "./model-catalog-C7itJJDM.js";
 import "./api-key-rotation-BEt1ZchD.js";
-import "./provider-image-RxbXQIow.js";
+import "./provider-image-CZlpEJVI.js";
 import "./pi-model-discovery-CfUi22Es.js";
-import { h as extractTextFromChatContent } from "./pi-embedded-utils-BhOMYPQU.js";
-import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-Ft7cM-PQ.js";
+import { h as extractTextFromChatContent } from "./pi-embedded-utils-BtOzugyp.js";
+import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-bbN1dfIo.js";
 import { i as listCoreToolSections, n as PROFILE_OPTIONS, o as resolveCoreToolProfiles } from "./tool-catalog-B6wH7-iE.js";
 import { i as resolveRelayAuthTokenForPort, n as resolveGatewayRelayToken } from "./extension-relay-auth-C-1c9CZk.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-DbsrfsUT.js";
@@ -48,7 +48,7 @@ import { t as safeEqualSecret } from "./secret-equal-DyYamV7h.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-G5phL2pY.js";
 import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-BuVK_u9S.js";
 import { a as isDirectLoopbackProvenance, c as AUTH_RATE_LIMIT_SCOPE_BROWSER_EXTENSION, d as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, f as createAuthRateLimiter, i as captureTransportProvenance, l as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, n as authorizeHttpGatewayConnect, o as isLocalDirectRequest, p as normalizeRateLimitClientIp, r as authorizeWsControlUiGatewayConnect, s as resolveGatewayAuth, t as assertGatewayAuthConfigured, u as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH } from "./auth-DeLQvx-N.js";
-import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-Dezs5R_M.js";
+import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-Bbi-nqKD.js";
 import { d as hasBinary } from "./frontmatter-B8Zb_8go.js";
 import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-Buc1RWDY.js";
 import "./store-DoqX9VsZ.js";
@@ -63,7 +63,7 @@ import { r as isRestartEnabled } from "./commands-tFdLuF5k.js";
 import "./commands-registry-BMswme6t.js";
 import { t as redactIdentifier } from "./redact-identifier-CSPL9LuH.js";
 import "./registry-D9ygkK-J.js";
-import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-Dwz_R_DW.js";
+import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-Cqo34Swm.js";
 import { $ as validateNodeListParams, $t as validateTalkSessionCreateParams, A as validateCronRunParams, B as validateExecApprovalRequestParams, Bn as verifyDeviceToken, Bt as validateTalkConfigParams, C as validateConfigPatchParams, Cn as normalizeDeviceMetadataForAuth, D as validateCronAddParams, Dn as consumeDeviceBootstrapToken, E as validateConnectParams, En as approveDevicePairing, F as validateDevicePairListParams, Fn as revokeDeviceToken, Ft as validateSkillsBinsParams, G as validateExecApprovalsSetParams, Gt as validateTalkRealtimeSessionParams, H as validateExecApprovalsGetParams, Ht as validateTalkRealtimeAudioParams, I as validateDevicePairRejectParams, In as rotateDeviceToken, It as validateSkillsInstallParams, J as validateModelsListParams, Jt as validateTalkRealtimeToolResultParams, K as validateLogsTailParams, Kt as validateTalkRealtimeStatusParams, L as validateDevicePairRemoveParams, Ln as summarizeDeviceTokens, Lt as validateSkillsStatusParams, M as validateCronStatusParams, Mn as rejectDevicePairing, N as validateCronUpdateParams, Nn as removePairedDevice, Nt as validateSessionsTitlePrepareParams, O as validateCronListParams, On as ensureDeviceToken, P as validateDevicePairApproveParams, Pn as requestDevicePairing, Pt as validateSessionsUsageParams, Q as validateNodeInvokeResultParams, Qt as validateTalkSessionCloseParams, R as validateDeviceTokenRevokeParams, Rn as updatePairedDeviceMetadata, Rt as validateSkillsUpdateParams, S as validateConfigGetParams, Sn as buildDeviceAuthPayloadV3, T as validateConfigSetParams, Tn as approveBootstrapDevicePairing, U as validateExecApprovalsNodeGetParams, Un as operatorScopeSatisfied, Ut as validateTalkRealtimeBargeInParams, V as validateExecApprovalResolveParams, Vt as validateTalkModeParams, W as validateExecApprovalsNodeSetParams, Wn as roleScopesAllow, Wt as validateTalkRealtimeMarkParams, X as validateNodeEventParams, Xn as verifyDeviceSignature, Xt as validateTalkSessionBargeInParams, Y as validateNodeDescribeParams, Yn as normalizeDevicePublicKeyBase64Url, Yt as validateTalkSessionAppendAudioParams, Z as validateNodeInvokeParams, Zt as validateTalkSessionCancelTurnParams, _ as validateChatAbortParams, _n as ErrorCodes, a as validateAgentNudgeParams, an as validateToolsCatalogParams, at as validateNodeRenameParams, b as validateChatSendParams, c as validateAgentsCreateParams, cn as validateWebLoginStartParams, ct as validateRequestFrame, d as validateAgentsFilesListParams, dn as validateWizardNextParams, dt as validateSendParams, en as validateTalkSessionMarkParams, et as validateNodePairApproveParams, f as validateAgentsFilesSetParams, fn as validateWizardStartParams, ft as validateSessionsAbortParams, g as validateChannelsStatusParams, h as validateChannelsLogoutParams, hn as RUNS_INVALIDATED_EVENT, i as validateAgentIdentityParams, in as validateTasksRunsListParams, it as validateNodePairVerifyParams, j as validateCronRunsParams, jn as listDevicePairing, jt as validateSessionsSteerParams, k as validateCronRemoveParams, kn as getPairedDevice, l as validateAgentsDeleteParams, ln as validateWebLoginWaitParams, lt as validateSecretsResolveParams, m as validateAgentsUpdateParams, mn as PROTOCOL_VERSION, nn as validateTasksRunsEventsParams, nt as validateNodePairRejectParams, o as validateAgentParams, on as validateUpdateRunParams, ot as validatePollParams, p as validateAgentsListParams, pn as validateWizardStatusParams, q as validateModelsAuthStatusParams, qn as deriveDeviceIdFromPublicKey, qt as validateTalkRealtimeStopParams, r as formatValidationErrors, rn as validateTasksRunsGetParams, rt as validateNodePairRequestParams, s as validateAgentWaitParams, sn as validateWakeParams, st as validatePushTestParams, tn as validateTasksRunEventsParams, tt as validateNodePairListParams, u as validateAgentsFilesGetParams, un as validateWizardCancelParams, ut as validateSecretsResolveResult, v as validateChatHistoryParams, vn as errorShape, w as validateConfigSchemaParams, x as validateConfigApplyParams, xn as buildDeviceAuthPayload, y as validateChatInjectParams, z as validateDeviceTokenRotateParams, zn as verifyDeviceBootstrapToken, zt as validateTalkCatalogParams } from "./client-BbpMX08n.js";
 import { _ as hasNarrowSessionScope, d as APPROVALS_SCOPE, f as PAIRING_SCOPE, g as authorizeOperatorScopesForMethod, h as WRITE_SCOPE, m as SESSION_READ_SCOPE, n as callGateway, p as READ_SCOPE, u as ADMIN_SCOPE$1, v as isHealthProbeAllowedForScopes, x as loadGatewayTlsRuntime$1, y as isNodeRoleMethod } from "./call-Cl6Q0T5z.js";
 import "./pairing-token-A_0lRJCJ.js";
@@ -75,14 +75,14 @@ import "./exec-safe-bin-runtime-policy-KSPaR73B.js";
 import { _ as matchSystemRunApprovalBinding, g as buildSystemRunApprovalBinding, h as resolveSystemRunApprovalRuntimeContext, m as resolveSystemRunApprovalRequestContext, v as missingSystemRunApprovalBinding, y as toSystemRunApprovalMismatchError } from "./nodes-screen-BRZLdw3g.js";
 import { r as resolveSystemRunCommand, t as canonicalizeLegacySystemRunParams } from "./system-run-command-AF8TLlEl.js";
 import { u as snapshotActiveRuns } from "./diagnostic-session-state-C6JXU3l4.js";
-import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-BTSirPP0.js";
+import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-D7DvV7NT.js";
 import { t as CommandLane } from "./lanes-DA0g5tPR.js";
-import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-Yajg-SST.js";
-import { a as getActiveTaskCount, c as getTotalQueueSize, d as setCommandLaneConcurrency, f as setGatewayDrainState, l as markGatewayDraining, p as waitForActiveTasks, u as resetAllLanes } from "./command-queue-B1RxJ6bM.js";
+import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-DVNBpgv0.js";
+import { a as getActiveTaskCount, c as getTotalQueueSize, d as setCommandLaneConcurrency, f as setGatewayDrainState, l as markGatewayDraining, p as waitForActiveTasks, u as resetAllLanes } from "./command-queue-DmXWCoY0.js";
 import { a as resolveAgentIdentity, t as createReplyPrefixOptions } from "./reply-prefix-D0xrt6Z-.js";
-import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-Bhlx9VG9.js";
-import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-NhJMC1fC.js";
-import { T as collectTelegramDuplicatePollerDiagnostics, d as loadCronStore, f as resolveCronStorePath, p as saveCronStore } from "./send-Cy2xiH02.js";
+import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-8xg5ISEI.js";
+import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-CII3PkDO.js";
+import { T as collectTelegramDuplicatePollerDiagnostics, d as loadCronStore, f as resolveCronStorePath, p as saveCronStore } from "./send-CvkM5xAx.js";
 import { n as resolveModel } from "./model-BI6n6kVo.js";
 import "./session-consumer-agents-DWh7Mygv.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-F-4FwfCE.js";
@@ -99,7 +99,7 @@ import "./outbound-attachment-Bg7WvYcG.js";
 import "./delivery-queue-DhBE3s1K.js";
 import "./send-26KAC8EW.js";
 import "./resolve-route-DnhX9nWr.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-4GqIom7_.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-DPm2eos4.js";
 import "./tables-CzW-cMQN.js";
 import "./proxy-Df2WAHRA.js";
 import "./replies-DoejQAqN.js";
@@ -113,7 +113,7 @@ import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as han
 import "./prompt-style-D0wRuIYC.js";
 import "./pairing-labels-CGUWaZ3f.js";
 import "./session-meta-DzjDKcgW.js";
-import { A as registerBeforeCreate, C as artifactTokenFor, D as markRemoved, E as markClientRemovedAcknowledged, M as buildVerificationEnvelope, N as redactVerificationProjection, O as markRetained, P as verificationEnvelopeFingerprint, S as accountSessionArtifactsAtTerminalSweep, T as listSessionArtifacts, _ as requireProcessBootIdentityPair, a as setAgentTurnRuntime, b as installGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as isBootIdentityError, h as deriveBootIdentityPair, i as getAgentTurnRuntime, j as VERIFICATION_CONFIG_SCENARIO, k as redactArtifactLogId, l as buildSoakDeploymentRecord, m as armBarrier, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as acceptSuccessorExecution, r as getActiveAgentTurnCount, u as evaluateSoak, v as clearGatewayRestartRecoveryRuntimeIf, w as isArtifactRegistrationError, x as RETAINED_ARTIFACT_KIND, y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-DFZxbjaC.js";
+import { A as registerBeforeCreate, C as artifactTokenFor, D as markRemoved, E as markClientRemovedAcknowledged, M as buildVerificationEnvelope, N as redactVerificationProjection, O as markRetained, P as verificationEnvelopeFingerprint, S as accountSessionArtifactsAtTerminalSweep, T as listSessionArtifacts, _ as requireProcessBootIdentityPair, a as setAgentTurnRuntime, b as installGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as isBootIdentityError, h as deriveBootIdentityPair, i as getAgentTurnRuntime, j as VERIFICATION_CONFIG_SCENARIO, k as redactArtifactLogId, l as buildSoakDeploymentRecord, m as armBarrier, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as acceptSuccessorExecution, r as getActiveAgentTurnCount, u as evaluateSoak, v as clearGatewayRestartRecoveryRuntimeIf, w as isArtifactRegistrationError, x as RETAINED_ARTIFACT_KIND, y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-Vd3aTCni.js";
 import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-DZyEfnsr.js";
 import { r as resolveMemorySearchConfig } from "./manager-DehDxi2A.js";
 import "./query-expansion-BD3CL_NZ.js";
@@ -121,7 +121,7 @@ import { t as formatDocsLink } from "./links-BhLGjTwm.js";
 import { n as runCommandWithRuntime } from "./cli-utils-DWSfnwCw.js";
 import { t as formatHelpExamples } from "./help-format-DqpZruAs.js";
 import { n as withProgress } from "./progress-DRMfDm7h.js";
-import "./server-lifecycle-DcVZS1ln.js";
+import "./server-lifecycle-DrAGY_SC.js";
 import { i as parseAbsoluteTimeMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-BIZMWR_z.js";
 import { a as normalizeHttpWebhookUrl, l as normalizeOptionalText, o as inferLegacyName } from "./heartbeat-tick-CsyeD75h.js";
 import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-Cm6wsMRx.js";
@@ -136,12 +136,12 @@ import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-gv_rp-w_.
 import { n as inheritOptionFromParent } from "./command-options-6wdtBBWB.js";
 import { t as WizardCancelledError } from "./prompts-m1IJwIAx.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-CU6_xh9V.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-C-pTu-0T.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-Ctnm8o8d.js";
 import { t as isWithinDir } from "./path-safety-DAKUyD-v.js";
 import "./install-safe-path-DjFYmzeb.js";
-import "./npm-pack-install-CFiN84Qw.js";
+import "./npm-pack-install-B7wQANiM.js";
 import "./skill-scanner-BA3h34y0.js";
-import "./installs-CnAcm0ba.js";
+import "./installs-CpnJwZZ_.js";
 import { n as formatConfigIssueLines } from "./issue-format-D0G927lb.js";
 import { t as buildChannelAccountSnapshot } from "./status-B8TZsG0t.js";
 import "./channels-status-issues-C6LrjLpF.js";
@@ -157,32 +157,32 @@ import "./diagnostics-FIcvxigK.js";
 import "./table-DoIju7rh.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-DgeeMUtJ.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-Bc-7t0_-.js";
-import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-C_g-UVNn.js";
+import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-CcNEpaG6.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-C517Q6gA.js";
-import { a as noteStorageReplayResult, i as getStorageV1Snapshot, n as getStatusSummary, o as noteStorageRestartRequired, r as createStorageSupervisor, s as pickGatewaySelfPresence } from "./status-BYesh62t.js";
-import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-DFWpyp9O.js";
+import { a as noteStorageReplayResult, i as getStorageV1Snapshot, n as getStatusSummary, o as noteStorageRestartRequired, r as createStorageSupervisor, s as pickGatewaySelfPresence } from "./status-Dh0qVJb_.js";
+import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-DFat5vO5.js";
 import { a as readPostQuiesceTranscriptDelta, i as readBulkTranscriptLines, o as replaySource, r as mergeBulkTranscriptSnapshotAndDelta, t as ReplayRowConflictError } from "./replay-BHfUVVHN.js";
 import "./session-key-resolution-DDJD1XYy.js";
 import { c as waitForStopDrain, l as withTimeout, o as tasksHandlers, r as getTaskOperatorRegistry, s as retryDelayMs, t as DEFAULT_RETENTION_DAYS } from "./task-runlog-retention-BZrnJGL1.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-DonecnKL.js";
 import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-C9otZxLF.js";
-import { t as reconcileBundledInstalls } from "./reconcile-bundled-BMWDZl32.js";
+import { t as reconcileBundledInstalls } from "./reconcile-bundled-oQwTCU_A.js";
 import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-Ch9itsH4.js";
 import "./onboarding.secret-input-BCxy1JxD.js";
-import { t as runOnboardingWizard } from "./onboarding-D9VO9_5U.js";
+import { t as runOnboardingWizard } from "./onboarding-BfpXrIw7.js";
 import { a as computeJobNextRunAtMs, c as findJobOrThrow, d as recomputeNextRuns, f as recomputeNextRunsForMaintenance, h as produceCronAgentTurn, i as applyJobPatch, l as isJobDue, m as resolveJobPayloadTextForMain, o as createJob, p as recordScheduleComputeError, r as resolveStaleClaimAdoptionMs, s as cronShapeSupportsIdentity, t as CRON_HEARTBEAT_ADAPTER_ID, u as nextWakeAtMs } from "./recovery-adapter-BF5ESanQ.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-Mp5OOpUH.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-uBiZYT2e.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-CRvbl5q3.js";
-import { a as readChatHistoryPage, c as unsubscribeSessionChanges, i as decodeHistoryCursor, l as assertValidParams, o as resolveDbLeafEntryId, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers } from "./sessions-BQYQBpX0.js";
+import { a as readChatHistoryPage, c as unsubscribeSessionChanges, i as decodeHistoryCursor, l as assertValidParams, o as resolveDbLeafEntryId, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers } from "./sessions-Cy_VVMEN.js";
 import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-B9A0wAU6.js";
 import "./node-service-BnwLXY5x.js";
 import "./status.update-BOB92yBQ.js";
 import { i as resolveActiveLogFile, n as readLogSlice } from "./log-tail-BAg8b5Wq.js";
 import { t as installSkill } from "./skills-install-DqCRPwE1.js";
-import { r as runGatewayUpdate } from "./update-runner-BYv_ec3N.js";
+import { r as runGatewayUpdate } from "./update-runner-DqE_9Axt.js";
 import { n as resolveWebClientPackagedRootSync, t as WEB_CLIENT_BUNDLE_MISSING_MESSAGE } from "./web-client-assets-CJyKwFRS.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-CcKQx_l1.js";
-import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-BRKxpjt9.js";
+import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-CtYCnspr.js";
 import { createRequire } from "node:module";
 import { cpuUsage, memoryUsage, resourceUsage, uptime } from "node:process";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -1082,7 +1082,7 @@ function resolveVerificationStore(params = {}) {
 
 //#endregion
 //#region src/infra/exec-approval-forwarder.ts
-const log$28 = createSubsystemLogger("gateway/exec-approvals");
+const log$29 = createSubsystemLogger("gateway/exec-approvals");
 const DEFAULT_MODE = "session";
 function normalizeMode(mode) {
 	return mode ?? DEFAULT_MODE;
@@ -1220,7 +1220,7 @@ async function deliverToTargets(params) {
 				payloads: [{ text: params.text }]
 			});
 		} catch (err) {
-			log$28.error(`exec approvals: failed to deliver to ${channel}:${target.to}: ${String(err)}`);
+			log$29.error(`exec approvals: failed to deliver to ${channel}:${target.to}: ${String(err)}`);
 		}
 	});
 	await Promise.allSettled(deliveries);
@@ -1309,7 +1309,7 @@ function createExecApprovalForwarder(deps = {}) {
 			deliver,
 			shouldSend: () => pending.get(request.id) === pendingEntry
 		}).catch((err) => {
-			log$28.error(`exec approvals: failed to deliver request ${request.id}: ${String(err)}`);
+			log$29.error(`exec approvals: failed to deliver request ${request.id}: ${String(err)}`);
 		});
 		return true;
 	};
@@ -1681,7 +1681,7 @@ function scheduleGatewayUpdateCheck(params) {
 
 //#endregion
 //#region src/sessions/session-runs/restart-transitions.ts
-const log$27 = createSubsystemLogger("sessions/restart-transitions");
+const log$28 = createSubsystemLogger("sessions/restart-transitions");
 async function transition(input, recoveryEnabled) {
 	const store = input.store ?? getConfiguredSessionStorageRuntime()?.runtime?.runs;
 	if (!store) return [];
@@ -1692,14 +1692,14 @@ async function transition(input, recoveryEnabled) {
 			recoveryReason: input.reason,
 			recoveryEnabled
 		});
-		if (transitioned.length > 0) log$27.info("transitioned active runs for restart", {
+		if (transitioned.length > 0) log$28.info("transitioned active runs for restart", {
 			count: transitioned.length,
 			recoveryEnabled,
 			reason: input.reason
 		});
 		return transitioned;
 	} catch (err) {
-		log$27.warn("failed to transition active runs for restart", {
+		log$28.warn("failed to transition active runs for restart", {
 			recoveryEnabled,
 			error: String(err)
 		});
@@ -1768,7 +1768,7 @@ function resolveChannelRestartReason(snapshot, evaluation) {
 
 //#endregion
 //#region src/gateway/channel-health-monitor.ts
-const log$26 = createSubsystemLogger("gateway/health-monitor");
+const log$27 = createSubsystemLogger("gateway/health-monitor");
 const DEFAULT_CHECK_INTERVAL_MS = 5 * 6e4;
 const DEFAULT_MONITOR_STARTUP_GRACE_MS = 6e4;
 const DEFAULT_COOLDOWN_CYCLES = 2;
@@ -1828,11 +1828,11 @@ function startChannelHealthMonitor(deps) {
 					if (now - record.lastRestartAt <= cooldownMs) continue;
 					pruneOldRestarts(record, now);
 					if (record.restartsThisHour.length >= maxRestartsPerHour) {
-						log$26.warn?.(`[${channelId}:${accountId}] health-monitor: hit ${maxRestartsPerHour} restarts/hour limit, skipping`);
+						log$27.warn?.(`[${channelId}:${accountId}] health-monitor: hit ${maxRestartsPerHour} restarts/hour limit, skipping`);
 						continue;
 					}
 					const reason = resolveChannelRestartReason(status, health);
-					log$26.info?.(`[${channelId}:${accountId}] health-monitor: restarting (reason: ${reason})`);
+					log$27.info?.(`[${channelId}:${accountId}] health-monitor: restarting (reason: ${reason})`);
 					try {
 						if (status.running) await channelManager.stopChannel(channelId, accountId);
 						channelManager.resetRestartAttempts(channelId, accountId);
@@ -1841,7 +1841,7 @@ function startChannelHealthMonitor(deps) {
 						record.restartsThisHour.push({ at: now });
 						restartRecords.set(key, record);
 					} catch (err) {
-						log$26.error?.(`[${channelId}:${accountId}] health-monitor: restart failed: ${String(err)}`);
+						log$27.error?.(`[${channelId}:${accountId}] health-monitor: restart failed: ${String(err)}`);
 					}
 				}
 			}
@@ -1861,7 +1861,7 @@ function startChannelHealthMonitor(deps) {
 		abortSignal?.addEventListener("abort", stop, { once: true });
 		timer = setInterval(() => void runCheck(), checkIntervalMs);
 		if (typeof timer === "object" && "unref" in timer) timer.unref();
-		log$26.info?.(`started (interval: ${Math.round(checkIntervalMs / 1e3)}s, startup-grace: ${Math.round(timing.monitorStartupGraceMs / 1e3)}s, channel-connect-grace: ${Math.round(timing.channelConnectGraceMs / 1e3)}s)`);
+		log$27.info?.(`started (interval: ${Math.round(checkIntervalMs / 1e3)}s, startup-grace: ${Math.round(timing.monitorStartupGraceMs / 1e3)}s, channel-connect-grace: ${Math.round(timing.channelConnectGraceMs / 1e3)}s)`);
 	}
 	return { stop };
 }
@@ -3067,10 +3067,10 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 	const { getConfiguredSessionStorageRuntime } = await import("./model-selection-k68XU4oS.js").then((n) => n.hi);
 	const runtime = getConfiguredSessionStorageRuntime()?.runtime;
 	const gatewayInstanceId = getGatewayInstanceId();
-	const { tryGetAgentTurnRuntime } = await import("./agent-turn-runner-DFZxbjaC.js").then((n) => n.t);
+	const { tryGetAgentTurnRuntime } = await import("./agent-turn-runner-Vd3aTCni.js").then((n) => n.t);
 	const backbone = tryGetAgentTurnRuntime()?.backbone;
 	const { createOutboundDeliveryRecoveryAdapter } = await import("./delivery-recovery-adapter-CXwijCdD.js");
-	const { deliverOutboundPayloads } = await import("./deliver-Bhlx9VG9.js").then((n) => n.n);
+	const { deliverOutboundPayloads } = await import("./deliver-8xg5ISEI.js").then((n) => n.n);
 	adapters.push(createOutboundDeliveryRecoveryAdapter({
 		cfg,
 		deliver: deliverOutboundPayloads,
@@ -3084,7 +3084,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		sessionRuns = void 0;
 	}
 	if (sessionRuns && wiring?.agentTurnStager) {
-		const { createSessionRunRecoveryAdapter } = await import("./recovery-adapter-NtvPZ47M.js");
+		const { createSessionRunRecoveryAdapter } = await import("./recovery-adapter-BcPtMfaC.js");
 		adapters.push(createSessionRunRecoveryAdapter({
 			store: sessionRuns,
 			cfg,
@@ -3100,7 +3100,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		lease: wiring?.lease ? () => wiring.lease?.() ?? { isArmed: () => false } : void 0
 	}));
 	if (backbone && wiring?.agentTurnStager) {
-		const { createAgentTurnRecoveryAdapter } = await import("./agent-turn-recovery-adapter-DF3vdyE5.js");
+		const { createAgentTurnRecoveryAdapter } = await import("./agent-turn-recovery-adapter-CLY2Dn04.js");
 		adapters.push(createAgentTurnRecoveryAdapter({
 			backbone,
 			stager: wiring.agentTurnStager
@@ -3122,7 +3122,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		}));
 	}
 	if (sessionRuns) {
-		const { createEmbeddedPiRecoveryAdapter } = await import("./pi-embedded-recovery-adapter-ZV9u5snz.js");
+		const { createEmbeddedPiRecoveryAdapter } = await import("./pi-embedded-recovery-adapter-CNdSU-s7.js");
 		adapters.push(createEmbeddedPiRecoveryAdapter({
 			sessionRuns,
 			cfg,
@@ -3130,7 +3130,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 			stager: wiring?.agentTurnStager,
 			isRunActive: isEmbeddedPiRunActive
 		}));
-		const { createAcpRuntimeRecoveryAdapter } = await import("./recovery-adapter-BMqm3Nm4.js");
+		const { createAcpRuntimeRecoveryAdapter } = await import("./recovery-adapter-BT7EyQzh.js");
 		adapters.push(createAcpRuntimeRecoveryAdapter({ sessionRuns }));
 	}
 	if (backbone) {
@@ -3771,6 +3771,8 @@ function createChannelManager(opts) {
 
 //#endregion
 //#region src/gateway/server-chat.ts
+const log$26 = createSubsystemLogger("gateway/chat-final");
+const CHAT_TERMINAL_DURABILITY_TIMEOUT_MS = 5e3;
 function resolveHeartbeatAckMaxChars$1() {
 	try {
 		const cfg = loadConfig();
@@ -3927,6 +3929,15 @@ function createToolEventRecipientRegistry() {
 	};
 }
 function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSession, agentRunSeq, chatRunState, resolveSessionKeyForRun, clearAgentRunContext, toolEventRecipients }) {
+	const pendingTerminalBySession = /* @__PURE__ */ new Map();
+	const sendInSessionOrder = (sessionKey, send) => {
+		const pending = pendingTerminalBySession.get(sessionKey);
+		if (!pending) {
+			send();
+			return;
+		}
+		pending.then(send).catch(() => void 0);
+	};
 	const emitChatDelta = (sessionKey, clientRunId, sourceRunId, seq, text) => {
 		const cleaned = stripInlineDirectiveTagsForDisplay(text).text;
 		if (!cleaned) return;
@@ -3951,10 +3962,12 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 				timestamp: now
 			}
 		};
-		broadcast("chat", payload, { dropIfSlow: true });
-		nodeSendToSession(sessionKey, "chat", payload);
+		sendInSessionOrder(sessionKey, () => {
+			broadcast("chat", payload, { dropIfSlow: true });
+			nodeSendToSession(sessionKey, "chat", payload);
+		});
 	};
-	const emitChatFinal = (sessionKey, clientRunId, sourceRunId, seq, jobState, error) => {
+	const buildChatTerminalPayload = (sessionKey, clientRunId, sourceRunId, seq, jobState, error) => {
 		const normalizedHeartbeatText = normalizeHeartbeatChatFinalText({
 			runId: clientRunId,
 			sourceRunId,
@@ -3964,35 +3977,59 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 		const shouldSuppressSilent = normalizedHeartbeatText.suppress || isSilentReplyText(text, SILENT_REPLY_TOKEN);
 		chatRunState.buffers.delete(clientRunId);
 		chatRunState.deltaSentAt.delete(clientRunId);
-		if (jobState === "done") {
-			const payload = {
-				runId: clientRunId,
-				sessionKey,
-				seq,
-				state: "final",
-				message: text && !shouldSuppressSilent ? {
-					role: "assistant",
-					content: [{
-						type: "text",
-						text
-					}],
-					timestamp: Date.now()
-				} : void 0
-			};
-			broadcast("chat", payload);
-			nodeSendToSession(sessionKey, "chat", payload);
-			return;
-		}
-		const payload = {
+		if (jobState === "done") return {
+			runId: clientRunId,
+			sessionKey,
+			seq,
+			state: "final",
+			message: text && !shouldSuppressSilent ? {
+				role: "assistant",
+				content: [{
+					type: "text",
+					text
+				}],
+				timestamp: Date.now()
+			} : void 0
+		};
+		return {
 			runId: clientRunId,
 			sessionKey,
 			seq,
 			state: "error",
 			errorMessage: error ? formatForLog(error) : void 0
 		};
+	};
+	const sendChatTerminal = (sessionKey, payload) => {
 		broadcast("chat", payload);
 		nodeSendToSession(sessionKey, "chat", payload);
 	};
+	const emitChatTerminal = (sessionKey, clientRunId, sourceRunId, seq, jobState, error) => {
+		const payload = buildChatTerminalPayload(sessionKey, clientRunId, sourceRunId, seq, jobState, error);
+		const writes = snapshotRunPendingWrites(sourceRunId);
+		if (!writes) {
+			sendInSessionOrder(sessionKey, () => sendChatTerminal(sessionKey, payload));
+			return;
+		}
+		const pending = pendingTerminalBySession.get(sessionKey);
+		const durability = waitForPendingWrites(writes, CHAT_TERMINAL_DURABILITY_TIMEOUT_MS);
+		const gate = (pending ?? Promise.resolve()).then(() => durability).then((outcome) => {
+			if (outcome === "timeout") log$26.warn("chat terminal broadcast before transcript durability (timeout)", {
+				runId: sourceRunId,
+				sessionKey,
+				timeoutMs: CHAT_TERMINAL_DURABILITY_TIMEOUT_MS
+			});
+			sendChatTerminal(sessionKey, payload);
+		}).catch((err) => {
+			log$26.warn("chat terminal broadcast failed while waiting for transcript durability", {
+				runId: sourceRunId,
+				sessionKey,
+				err
+			});
+		}).finally(() => {
+			if (pendingTerminalBySession.get(sessionKey) === gate) pendingTerminalBySession.delete(sessionKey);
+		});
+		pendingTerminalBySession.set(sessionKey, gate);
+	};
 	const resolveToolVerboseLevel = (runId, sessionKey) => {
 		const runVerbose = normalizeVerboseLevel(getAgentRunContext(runId)?.verboseLevel);
 		if (runVerbose) return runVerbose;
@@ -4063,8 +4100,8 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 					clearAgentRunContext(evt.runId);
 					return;
 				}
-				emitChatFinal(finished.sessionKey, finished.clientRunId, evt.runId, evt.seq, lifecyclePhase === "error" ? "error" : "done", evt.data?.error);
-			} else emitChatFinal(sessionKey, eventRunId, evt.runId, evt.seq, lifecyclePhase === "error" ? "error" : "done", evt.data?.error);
+				emitChatTerminal(finished.sessionKey, finished.clientRunId, evt.runId, evt.seq, lifecyclePhase === "error" ? "error" : "done", evt.data?.error);
+			} else emitChatTerminal(sessionKey, eventRunId, evt.runId, evt.seq, lifecyclePhase === "error" ? "error" : "done", evt.data?.error);
 			else if (isAborted && (lifecyclePhase === "end" || lifecyclePhase === "error")) {
 				chatRunState.abortedRuns.delete(clientRunId);
 				chatRunState.abortedRuns.delete(evt.runId);
@@ -16257,7 +16294,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-BaFY8QcO.js");
+			const { handleNodeEvent } = await import("./server-node-events-lwnuZDvV.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -24816,7 +24853,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.OPENCLAW_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.OPENCLAW_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./server-l9oy68N_.js");
+	const mod = override ? await import(override) : await import("./server-BMSgu_SV.js");
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -35540,7 +35577,7 @@ async function bootGatewayServer(port, opts) {
 		const sweepLog = log.child("session-consumer-claim-sweep");
 		const { createDiagnosticRingBuffer } = await import("./session-consumer-diagnostics-UbdxGCz8.js");
 		const diagnostics = createDiagnosticRingBuffer();
-		const { setDiagnostics } = await import("./sessions-BQYQBpX0.js").then((n) => n.n);
+		const { setDiagnostics } = await import("./sessions-Cy_VVMEN.js").then((n) => n.n);
 		if (sessionConsumerClaimSweepCancelled) return;
 		setDiagnostics(diagnostics);
 		const lastKnownEnabledState = /* @__PURE__ */ new Map();
@@ -35579,7 +35616,7 @@ async function bootGatewayServer(port, opts) {
 					lastKnownEnabledState,
 					cfg: loadConfig()
 				});
-				const { setLastSweepTimestamp } = await import("./sessions-BQYQBpX0.js").then((n) => n.n);
+				const { setLastSweepTimestamp } = await import("./sessions-Cy_VVMEN.js").then((n) => n.n);
 				setLastSweepTimestamp(Date.now());
 			} catch (err) {
 				sweepLog.warn(`session consumer-claim sweep failed: ${String(err)}`);
@@ -35601,7 +35638,7 @@ async function bootGatewayServer(port, opts) {
 			prepare: () => {
 				taskPipelineBoot = (async () => {
 					const { getConfiguredSessionStorageRuntime } = await import("./model-selection-k68XU4oS.js").then((n) => n.hi);
-					const { startTaskPipeline } = await import("./task-pipeline-boot-CaVeITev.js");
+					const { startTaskPipeline } = await import("./task-pipeline-boot-UcskPjY2.js");
 					const pipeline = startTaskPipeline({
 						getConfigured: getConfiguredSessionStorageRuntime,
 						cfg: cfgAtStart,

package/dist/{health-fB9rLTPD.js → health-Cooqit6V.js}

@@ -6,8 +6,8 @@ import { Da as listChannelPlugins, Ea as getChannelPlugin, Nn as loadSessionStor
 import { d as normalizeAgentId } from "./session-key-D4YLCjDF.js";
 import { d as resolveDefaultAgentId } from "./agent-scope-Dt0TVWFY.js";
 import { m as resolveStorePath } from "./artifacts-C9Cr_S5Y.js";
-import { i as resolveHeartbeatSummaryForAgent } from "./agent-turn-execute-DvP2nf2J.js";
-import { y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-PbFFnq5P.js";
+import { i as resolveHeartbeatSummaryForAgent } from "./agent-turn-execute-Bw9hhkAP.js";
+import { y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-CUCOdxhH.js";
 import { i as formatErrorMessage } from "./errors-Bf0TUXNT.js";
 import { r as callGatewayCli, t as buildGatewayConnectionDetails } from "./call-BIVg1gmJ.js";
 import { t as formatDurationCompact } from "./format-duration-CsAbUoUJ.js";

package/dist/{health-DFWpyp9O.js → health-DFat5vO5.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { F as isRich, I as theme, T as info } from "./utils-CMEUUHmM.js";
-import { y as resolveHeartbeatSummaryForAgent } from "./reply-BIZ2zaUq.js";
+import { y as resolveHeartbeatSummaryForAgent } from "./reply-BzUdF5qW.js";
 import { d as resolveDefaultAgentId } from "./agent-scope-CWTkr4pS.js";
 import { t as createSubsystemLogger } from "./subsystem-DDZBycwS.js";
 import { d as normalizeAgentId } from "./session-key-B1wN38jV.js";
@@ -10,7 +10,7 @@ import { m as resolveStorePath } from "./artifacts-qv_OgPMd.js";
 import { i as formatErrorMessage } from "./errors-z_JCBnTo.js";
 import { r as callGatewayCli, t as buildGatewayConnectionDetails } from "./call-Cl6Q0T5z.js";
 import { t as formatDurationCompact } from "./format-duration-XLSvPvzN.js";
-import { y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-DFZxbjaC.js";
+import { y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-Vd3aTCni.js";
 import { n as withProgress } from "./progress-DRMfDm7h.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-CU6_xh9V.js";