wednesdayai 0.4.12-dev.715 → 0.4.12-dev.717

package/dist/{gateway-cli-BYqWX_fq.js → gateway-cli-DtFDQj5d.js}

@@ -17,17 +17,17 @@ import { c as optionalStringEnum, l as stringEnum } from "./retry-policy-BdHwnvO
 import { c as resolveSessionFilePath, l as resolveSessionFilePathOptions, m as resolveStorePath, p as resolveSessionTranscriptsDirForAgent, u as resolveSessionTranscriptPath } from "./artifacts-C9Cr_S5Y.js";
 import "./send-B_t3X0hK.js";
 import "./send-BBFfvgK9.js";
-import { $ as dispatchInboundMessage, $n as isTtsProviderConfigured, $t as emitGatewayRestart, A as createPluginRuntime, An as resolveInputFileLimits, B as agentCommandFromIngress, Bn as resolveAnnounceTargetFromKey, Bt as getHookType, C as getPluginToolMeta, Cn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Ct as runWithModelFallback, D as getLoadedAnalysisConcurrency, Dn as extractFileContentFromSource, Dt as formatRestartSentinelMessage, E as clearPluginRegistryCaches, En as DEFAULT_INPUT_TIMEOUT_MS, Et as formatDoctorNonInteractiveHint, F as handleSlackHttpRequest, Fn as countActiveDescendantRuns, Ft as buildDeliveryFromLegacyPayload, G as createDefaultDeps, Gn as removeQueuedFollowupRun, H as resolveAgentDeliveryPlan, Hn as resolveAgentTimeoutMs, Ht as applyBrowserProxyPaths, I as readJsonBodyWithLimit, In as initSubagentRegistry, It as hasLegacyDeliveryHints, Jn as ToolInputError, K as createOutboundSendDeps$1, Kn as getAcpSessionManager, L as requestBodyErrorToText, Ln as listDescendantRunsForRequester, Lt as stripLegacyDeliveryFields, Mn as resolveSendPolicy, Mt as normalizeCronJobCreate, N as resolveAgentOutboundIdentity, Nn as isAbortRequestText, Nt as normalizeCronJobPatch, O as loadOpenClawPlugins, On as extractImageContentFromSource, Pt as migrateLegacyCronPayload, Qn as isTtsEnabled, Qt as deferGatewayRestartUntilIdle, Rt as buildSafeExternalPrompt, Sn as ACP_SESSION_IDENTITY_RENDERER_VERSION, Tn as DEFAULT_INPUT_MAX_REDIRECTS, Tt as consumeRestartSentinel, U as resolveAgentOutboundTarget, Un as clearSessionQueues, Ut as persistBrowserProxyFiles, Vn as readLatestAssistantReply, Vt as isExternalHookSession, W as createOutboundSendDeps, Wn as getExistingFollowupQueue, Wt as resolveSessionAuthProfileOverride, Xn as DEFAULT_MAX_PARALLEL, Yn as setTaskPipelineStatus, Z as buildHistoryContextFromEntries, Zn as getTtsProvider, Zt as consumeGatewaySigusr1RestartAuthorization, _ as prepareSessionManagerForRun, _t as resolveOutboundTarget, a as runHeartbeatOnce, an as triggerOpenClawRestart, ar as setTtsEnabled, b as applyToolPolicyPipeline, c as startHeartbeatRunner, cn as loadProviderUsageSummary, cr as OPENAI_TTS_MODELS, ct as BARE_SESSION_RESET_PROMPT, d as getLastHeartbeatEvent, dr as stripHeartbeatToken, dt as runCliAgent, en as isGatewaySigusr1RestartExternallyAllowed, er as resolveTtsApiKey, et as setDispatchInboundAdmissionRejectionFor, f as onHeartbeatEvent, fr as resolveCronStyleNow, ft as createOpenClawTools, g as runEmbeddedPiAgent, gt as resolveHeartbeatDeliveryTarget, h as resolveCronSession, hn as isSystemEventContextChanged, ht as resolveOutboundSessionRoute, i as resolveHeartbeatSummaryForAgent, in as setPreRestartDeferralCheck, ir as resolveTtsProviderOrder, j as requestNudge, jt as writeRestartSentinel, k as takePendingActivationMigration, kn as normalizeMimeList, kt as summarizeRestartSentinel, l as runWakeGate, lr as OPENAI_TTS_VOICES, lt as getCliSessionId, m as isCronSystemEvent, mn as enqueueSystemEvent, mt as ensureOutboundSessionEntry, n as runMainAgentTurn, nn as scheduleGatewaySigusr1Restart, nr as resolveTtsConfig, nt as getTotalPendingReplies, or as setTtsProvider, p as redactSensitiveHeartbeatEvent, pr as resolveUserTimezone, q as resolveAgentAvatar, qn as resolveAgentSessionDirs, r as resolveHeartbeatConfig, rn as setGatewaySigusr1RestartPolicy, rr as resolveTtsPrefsPath, s as setHeartbeatsEnabled, sr as textToSpeech, st as resolveChannelAccountEnabled, tn as markGatewaySigusr1RestartHandled, tr as resolveTtsAutoMode, tt as createReplyDispatcher, u as resolveHeartbeatVisibility, ur as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, ut as setCliSessionId, vt as resolveSessionDeliveryTarget, w as resolvePluginTools, wn as DEFAULT_INPUT_IMAGE_MIMES, x as buildDefaultToolPolicyPipelineSteps, xt as resetDirectoryCache, y as resolveExecConfig, yn as requestHeartbeatNow, yt as resolveOutboundChannelPlugin, zn as runSubagentAnnounceFlow, zt as detectSuspiciousPatterns } from "./agent-turn-execute-DvP2nf2J.js";
+import { $ as buildHistoryContextFromEntries, $n as getTtsProvider, $t as consumeGatewaySigusr1RestartAuthorization, A as loadOpenClawPlugins, An as extractImageContentFromSource, Bt as buildSafeExternalPrompt, C as buildDefaultToolPolicyPipelineSteps, Ct as resetDirectoryCache, Dn as DEFAULT_INPUT_MAX_REDIRECTS, Dt as consumeRestartSentinel, E as resolvePluginTools, En as DEFAULT_INPUT_IMAGE_MIMES, F as resolveAgentOutboundIdentity, Fn as isAbortRequestText, Ft as normalizeCronJobPatch, G as resolveAgentOutboundTarget, Gn as clearSessionQueues, Gt as persistBrowserProxyFiles, H as agentCommandFromIngress, Hn as resolveAnnounceTargetFromKey, Ht as getHookType, It as migrateLegacyCronPayload, J as createOutboundSendDeps$1, Jn as getAcpSessionManager, K as createOutboundSendDeps, Kn as getExistingFollowupQueue, Kt as resolveSessionAuthProfileOverride, L as handleSlackHttpRequest, Ln as countActiveDescendantRuns, Lt as buildDeliveryFromLegacyPayload, M as createPluginRuntime, Mn as resolveInputFileLimits, N as requestNudge, Nt as writeRestartSentinel, O as clearPluginRegistryCaches, On as DEFAULT_INPUT_TIMEOUT_MS, Ot as formatDoctorNonInteractiveHint, Pn as resolveSendPolicy, Pt as normalizeCronJobCreate, Qn as DEFAULT_MAX_PARALLEL, R as readJsonBodyWithLimit, Rn as initSubagentRegistry, Rt as hasLegacyDeliveryHints, S as applyToolPolicyPipeline, T as getPluginToolMeta, Tn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Tt as runWithModelFallback, Un as readLatestAssistantReply, Ut as isExternalHookSession, Vn as runSubagentAnnounceFlow, Vt as detectSuspiciousPatterns, W as resolveAgentDeliveryPlan, Wn as resolveAgentTimeoutMs, Wt as applyBrowserProxyPaths, Xn as ToolInputError, Y as resolveAgentAvatar, Yn as resolveAgentSessionDirs, Zn as setTaskPipelineStatus, _ as prepareSessionManagerForRun, _n as isSystemEventContextChanged, _t as resolveOutboundSessionRoute, a as runHeartbeatOnce, an as setGatewaySigusr1RestartPolicy, ar as resolveTtsPrefsPath, bt as resolveSessionDeliveryTarget, c as startHeartbeatRunner, cr as setTtsProvider, d as getLastHeartbeatEvent, dr as OPENAI_TTS_VOICES, dt as getCliSessionId, en as deferGatewayRestartUntilIdle, er as isTtsEnabled, f as onHeartbeatEvent, fr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, ft as setCliSessionId, g as runEmbeddedPiAgent, gn as enqueueSystemEvent, gt as ensureOutboundSessionEntry, h as resolveCronSession, hr as resolveUserTimezone, i as resolveHeartbeatSummaryForAgent, in as scheduleGatewaySigusr1Restart, ir as resolveTtsConfig, it as getTotalPendingReplies, j as takePendingActivationMigration, jn as normalizeMimeList, jt as summarizeRestartSentinel, k as getLoadedAnalysisConcurrency, kn as extractFileContentFromSource, kt as formatRestartSentinelMessage, l as runWakeGate, lr as textToSpeech, lt as resolveChannelAccountEnabled, m as isCronSystemEvent, mr as resolveCronStyleNow, mt as createOpenClawTools, n as runMainAgentTurn, nn as isGatewaySigusr1RestartExternallyAllowed, nr as resolveTtsApiKey, nt as setDispatchInboundAdmissionRejectionFor, on as setPreRestartDeferralCheck, or as resolveTtsProviderOrder, p as redactSensitiveHeartbeatEvent, pr as stripHeartbeatToken, pt as runCliAgent, q as createDefaultDeps, qn as removeQueuedFollowupRun, r as resolveHeartbeatConfig, rn as markGatewaySigusr1RestartHandled, rr as resolveTtsAutoMode, rt as createReplyDispatcher, s as setHeartbeatsEnabled, sn as triggerOpenClawRestart, sr as setTtsEnabled, tn as emitGatewayRestart, tr as isTtsProviderConfigured, tt as dispatchInboundMessage, u as resolveHeartbeatVisibility, un as loadProviderUsageSummary, ur as OPENAI_TTS_MODELS, ut as BARE_SESSION_RESET_PROMPT, v as snapshotRunPendingWrites, vt as resolveHeartbeatDeliveryTarget, wn as ACP_SESSION_IDENTITY_RENDERER_VERSION, x as resolveExecConfig, xn as requestHeartbeatNow, xt as resolveOutboundChannelPlugin, y as waitForPendingWrites, yt as resolveOutboundTarget, z as requestBodyErrorToText, zn as listDescendantRunsForRequester, zt as stripLegacyDeliveryFields } from "./agent-turn-execute-Bw9hhkAP.js";
 import { l as deriveSessionTotalTokens, u as hasNonzeroUsage } from "./chat-envelope-DfuAGxmg.js";
 import { c as isDiagnosticsEnabled, l as onDiagnosticEvent, s as emitDiagnosticEvent } from "./task-run-types-B6n0W8Rb.js";
 import { n as USER_CLIENT_ID, o as buildUserClientRuntimeConfig, s as handleUserClientHttpRequest } from "./static-server-CRGPIP-a.js";
 import { t as redactIdentifier } from "./redact-identifier-BcqQpFrh.js";
-import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-Da7B-J9y.js";
+import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-N-q0v3mc.js";
 import { t as CommandLane } from "./lanes-BN1DVTrA.js";
-import { A as registerBeforeCreate, C as artifactTokenFor, D as markRemoved, E as markClientRemovedAcknowledged, M as buildVerificationEnvelope, N as redactVerificationProjection, O as markRetained, P as verificationEnvelopeFingerprint, S as accountSessionArtifactsAtTerminalSweep, T as listSessionArtifacts, _ as requireProcessBootIdentityPair, a as setAgentTurnRuntime, b as installGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as isBootIdentityError, h as deriveBootIdentityPair, i as getAgentTurnRuntime, j as VERIFICATION_CONFIG_SCENARIO, k as redactArtifactLogId, l as buildSoakDeploymentRecord, m as armBarrier, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as acceptSuccessorExecution, r as getActiveAgentTurnCount, u as evaluateSoak, v as clearGatewayRestartRecoveryRuntimeIf, w as isArtifactRegistrationError, x as RETAINED_ARTIFACT_KIND, y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-PbFFnq5P.js";
+import { A as registerBeforeCreate, C as artifactTokenFor, D as markRemoved, E as markClientRemovedAcknowledged, M as buildVerificationEnvelope, N as redactVerificationProjection, O as markRetained, P as verificationEnvelopeFingerprint, S as accountSessionArtifactsAtTerminalSweep, T as listSessionArtifacts, _ as requireProcessBootIdentityPair, a as setAgentTurnRuntime, b as installGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as isBootIdentityError, h as deriveBootIdentityPair, i as getAgentTurnRuntime, j as VERIFICATION_CONFIG_SCENARIO, k as redactArtifactLogId, l as buildSoakDeploymentRecord, m as armBarrier, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as acceptSuccessorExecution, r as getActiveAgentTurnCount, u as evaluateSoak, v as clearGatewayRestartRecoveryRuntimeIf, w as isArtifactRegistrationError, x as RETAINED_ARTIFACT_KIND, y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-CUCOdxhH.js";
 import { a as getGatewayInstanceId, o as resolveSessionRunStore, t as createSessionRunRecorder } from "./recorder-Ca_njjjH.js";
-import "./pi-embedded-helpers-D19zTumt.js";
-import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-DfzTmaAX.js";
+import "./pi-embedded-helpers-BU47jdPO.js";
+import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-QsMPF2u6.js";
 import { i as listCoreToolSections, n as PROFILE_OPTIONS, o as resolveCoreToolProfiles } from "./tool-catalog-BWgva5h1.js";
 import { i as resolveRelayAuthTokenForPort, n as resolveGatewayRelayToken } from "./extension-relay-auth-DD-U9VUc.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-BrZL_MiW.js";
@@ -35,7 +35,7 @@ import { t as safeEqualSecret } from "./secret-equal-CQn9WoXt.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-BSKE3pk_.js";
 import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-DESjYW7M.js";
 import { a as isDirectLoopbackProvenance, c as AUTH_RATE_LIMIT_SCOPE_BROWSER_EXTENSION, d as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, f as createAuthRateLimiter, i as captureTransportProvenance, l as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, n as authorizeHttpGatewayConnect, o as isLocalDirectRequest, p as normalizeRateLimitClientIp, r as authorizeWsControlUiGatewayConnect, s as resolveGatewayAuth, t as assertGatewayAuthConfigured, u as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH } from "./auth-Cx-Q9zgv.js";
-import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-97Vej0yV.js";
+import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-CTilcbO4.js";
 import { d as hasBinary } from "./frontmatter-Dn2qUSOb.js";
 import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-D3kpiNaJ.js";
 import { n as assertNoPathAliasEscape } from "./path-alias-guards-CHFrrzxZ.js";
@@ -53,12 +53,12 @@ import "./server-middleware-CrJMxxfQ.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-NawgaQgc.js";
 import { a as resolveAgentIdentity, t as createReplyPrefixOptions } from "./reply-prefix-B8M4IWrd.js";
 import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-B6PaaeVv.js";
-import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-Cl_OttOS.js";
+import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-BvxLQUTs.js";
 import { f as getGlobalHookRunner, h as runGlobalGatewayStopSafely, m as resetGlobalHookRunner, u as buildOutboundSessionContext } from "./outbound-message-hooks-BBtH97ZV.js";
-import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-DRvqMPW7.js";
+import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-Dv8UWiI0.js";
 import { u as snapshotActiveRuns } from "./diagnostic-session-state-DCr9T3zW.js";
-import { a as getActiveTaskCount, c as getTotalQueueSize, d as setCommandLaneConcurrency, f as setGatewayDrainState, l as markGatewayDraining, p as waitForActiveTasks, u as resetAllLanes } from "./command-queue-6Jucg1io.js";
-import { F as resolveCronStorePath, I as saveCronStore, P as loadCronStore, S as collectTelegramDuplicatePollerDiagnostics } from "./send-DzSRMjOr.js";
+import { a as getActiveTaskCount, c as getTotalQueueSize, d as setCommandLaneConcurrency, f as setGatewayDrainState, l as markGatewayDraining, p as waitForActiveTasks, u as resetAllLanes } from "./command-queue-URs9pYSC.js";
+import { F as resolveCronStorePath, I as saveCronStore, P as loadCronStore, S as collectTelegramDuplicatePollerDiagnostics } from "./send-BKkvuHI9.js";
 import { n as resolveModel } from "./model-BbeosLtF.js";
 import "./pi-model-discovery-CZ9wxcE8.js";
 import "./models-config-BMgEFu57.js";
@@ -67,12 +67,12 @@ import "./exec-safe-bin-runtime-policy-C3eU8CKJ.js";
 import "./session-consumer-agents-5ORspv9c.js";
 import { n as loadModelCatalog } from "./model-catalog-Bjfzg68Q.js";
 import "./fetch-ByEEe-Yd.js";
-import { D as registerUnhandledRejectionHandler, _ as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, f as resolveModelEntries, n as buildProviderRegistry, u as resolveCapabilityConfig, v as listAutoDetectableProviders, y as normalizeMediaProviderId } from "./audio-transcription-runner-C2Q9mEhB.js";
+import { D as registerUnhandledRejectionHandler, _ as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, f as resolveModelEntries, n as buildProviderRegistry, u as resolveCapabilityConfig, v as listAutoDetectableProviders, y as normalizeMediaProviderId } from "./audio-transcription-runner-BD7UgbNj.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-BzXFjlMV.js";
 import "./proxy-fetch-BqVhGKFd.js";
 import "./api-key-rotation-DiMQTef3.js";
-import "./provider-image-XyDuLsir.js";
-import { h as extractTextFromChatContent } from "./pi-embedded-utils-oIHgFob3.js";
+import "./provider-image-UXLX6qTH.js";
+import { h as extractTextFromChatContent } from "./pi-embedded-utils-8OzPnJMh.js";
 import "./tool-display-DiZGbhL2.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-DFNB1c7t.js";
 import "./chunk-DiXpyRAz.js";
@@ -85,8 +85,8 @@ import "./registry-DXmhuMNN.js";
 import { $ as validateNodeListParams, $t as validateTalkSessionCreateParams, A as validateCronRunParams, B as validateExecApprovalRequestParams, Bn as verifyDeviceToken, Bt as validateTalkConfigParams, C as validateConfigPatchParams, Cn as normalizeDeviceMetadataForAuth, D as validateCronAddParams, Dn as consumeDeviceBootstrapToken, E as validateConnectParams, En as approveDevicePairing, F as validateDevicePairListParams, Fn as revokeDeviceToken, Ft as validateSkillsBinsParams, G as validateExecApprovalsSetParams, Gt as validateTalkRealtimeSessionParams, H as validateExecApprovalsGetParams, Ht as validateTalkRealtimeAudioParams, I as validateDevicePairRejectParams, In as rotateDeviceToken, It as validateSkillsInstallParams, J as validateModelsListParams, Jt as validateTalkRealtimeToolResultParams, K as validateLogsTailParams, Kt as validateTalkRealtimeStatusParams, L as validateDevicePairRemoveParams, Ln as summarizeDeviceTokens, Lt as validateSkillsStatusParams, M as validateCronStatusParams, Mn as rejectDevicePairing, N as validateCronUpdateParams, Nn as removePairedDevice, Nt as validateSessionsTitlePrepareParams, O as validateCronListParams, On as ensureDeviceToken, P as validateDevicePairApproveParams, Pn as requestDevicePairing, Pt as validateSessionsUsageParams, Q as validateNodeInvokeResultParams, Qt as validateTalkSessionCloseParams, R as validateDeviceTokenRevokeParams, Rn as updatePairedDeviceMetadata, Rt as validateSkillsUpdateParams, S as validateConfigGetParams, Sn as buildDeviceAuthPayloadV3, T as validateConfigSetParams, Tn as approveBootstrapDevicePairing, U as validateExecApprovalsNodeGetParams, Un as operatorScopeSatisfied, Ut as validateTalkRealtimeBargeInParams, V as validateExecApprovalResolveParams, Vt as validateTalkModeParams, W as validateExecApprovalsNodeSetParams, Wn as roleScopesAllow, Wt as validateTalkRealtimeMarkParams, X as validateNodeEventParams, Xn as verifyDeviceSignature, Xt as validateTalkSessionBargeInParams, Y as validateNodeDescribeParams, Yn as normalizeDevicePublicKeyBase64Url, Yt as validateTalkSessionAppendAudioParams, Z as validateNodeInvokeParams, Zt as validateTalkSessionCancelTurnParams, _ as validateChatAbortParams, _n as ErrorCodes, a as validateAgentNudgeParams, an as validateToolsCatalogParams, at as validateNodeRenameParams, b as validateChatSendParams, c as validateAgentsCreateParams, cn as validateWebLoginStartParams, ct as validateRequestFrame, d as validateAgentsFilesListParams, dn as validateWizardNextParams, dt as validateSendParams, en as validateTalkSessionMarkParams, et as validateNodePairApproveParams, f as validateAgentsFilesSetParams, fn as validateWizardStartParams, ft as validateSessionsAbortParams, g as validateChannelsStatusParams, h as validateChannelsLogoutParams, hn as RUNS_INVALIDATED_EVENT, i as validateAgentIdentityParams, in as validateTasksRunsListParams, it as validateNodePairVerifyParams, j as validateCronRunsParams, jn as listDevicePairing, jt as validateSessionsSteerParams, k as validateCronRemoveParams, kn as getPairedDevice, l as validateAgentsDeleteParams, ln as validateWebLoginWaitParams, lt as validateSecretsResolveParams, m as validateAgentsUpdateParams, mn as PROTOCOL_VERSION, nn as validateTasksRunsEventsParams, nt as validateNodePairRejectParams, o as validateAgentParams, on as validateUpdateRunParams, ot as validatePollParams, p as validateAgentsListParams, pn as validateWizardStatusParams, q as validateModelsAuthStatusParams, qn as deriveDeviceIdFromPublicKey, qt as validateTalkRealtimeStopParams, r as formatValidationErrors, rn as validateTasksRunsGetParams, rt as validateNodePairRequestParams, s as validateAgentWaitParams, sn as validateWakeParams, st as validatePushTestParams, tn as validateTasksRunEventsParams, tt as validateNodePairListParams, u as validateAgentsFilesGetParams, un as validateWizardCancelParams, ut as validateSecretsResolveResult, v as validateChatHistoryParams, vn as errorShape, w as validateConfigSchemaParams, x as validateConfigApplyParams, xn as buildDeviceAuthPayload, y as validateChatInjectParams, z as validateDeviceTokenRotateParams, zn as verifyDeviceBootstrapToken, zt as validateTalkCatalogParams } from "./client-BMkNNUux.js";
 import { _ as hasNarrowSessionScope, d as APPROVALS_SCOPE, f as PAIRING_SCOPE, g as authorizeOperatorScopesForMethod, h as WRITE_SCOPE, m as SESSION_READ_SCOPE, n as callGateway, p as READ_SCOPE, u as ADMIN_SCOPE$1, v as isHealthProbeAllowedForScopes, x as loadGatewayTlsRuntime$1, y as isNodeRoleMethod } from "./call-BIVg1gmJ.js";
 import "./pairing-token-BfRB0jVM.js";
-import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-CUs5xDZ_.js";
-import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-DT4v-Go0.js";
+import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-i5IuTzQX.js";
+import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-C5SDo7TP.js";
 import "./user-run-recording-DXNyfjMq.js";
 import "./fetch--Fn4tlfW.js";
 import { a as readChannelAllowFromStoreSync } from "./pairing-store-BZFrD-fJ.js";
@@ -100,10 +100,10 @@ import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapsho
 import { i as normalizePollInput, t as getChannelActivity } from "./channel-activity-SqK9nKf7.js";
 import "./tables-CCEXTXTG.js";
 import { i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, t as discoverAllSessions } from "./session-cost-usage-BTDAzt-T.js";
-import "./server-lifecycle-CHhQugi7.js";
+import "./server-lifecycle-BIOS9ErD.js";
 import { i as parseAbsoluteTimeMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-CT5G1TCV.js";
 import { a as normalizeHttpWebhookUrl, l as normalizeOptionalText, o as inferLegacyName } from "./heartbeat-tick-By0WI8YD.js";
-import { d as resolveGroupToolPolicy, f as resolveSubagentToolPolicy, u as resolveEffectiveToolPolicy } from "./dm-policy-shared-BE04dZam.js";
+import { d as resolveGroupToolPolicy, f as resolveSubagentToolPolicy, u as resolveEffectiveToolPolicy } from "./dm-policy-shared-BLJbsZzf.js";
 import "./reply-directives-Bc2RQAcJ.js";
 import { n as resolveMessageChannelSelection } from "./channel-selection-DfNPCJXK.js";
 import { i as applyPluginAutoEnable, n as collectUnsafeTelegramPollingTimeouts, s as buildChannelUiCatalog } from "./polling-timeout-DoMlNx_D.js";
@@ -135,54 +135,54 @@ import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-C2gmG0PE.
 import { n as inheritOptionFromParent } from "./command-options-vZSwrzpA.js";
 import { t as WizardCancelledError } from "./prompts-BBkof-cQ.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-GPI9o9AS.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-iUjxdoPw.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-C8RJrfbr.js";
 import { t as isWithinDir } from "./path-safety-CCSB65fm.js";
 import "./install-safe-path-4YfMRsxN.js";
-import "./npm-pack-install-bdyXL1bZ.js";
+import "./npm-pack-install-DcBobJp3.js";
 import "./skill-scanner-BrEkff8K.js";
-import "./installs-CBHXvqKf.js";
+import "./installs-CdLdL1gD.js";
 import { n as formatConfigIssueLines } from "./issue-format-BG8o87sf.js";
 import { t as buildChannelAccountSnapshot } from "./status-yrDGXYZM.js";
 import "./channels-status-issues-B4p6AXBG.js";
 import { i as resolveGatewayClientProfile, t as WEB_CLIENT_ALLOWED_ORIGINS_CONFIG_KEY } from "./client-profiles-DP8BWND2.js";
 import "./daemon-install-helpers-CKbnFsNZ.js";
 import "./runtime-guard-DchtXvGj.js";
-import "./service-RnhuB5cG.js";
-import "./systemd-B5tdOLBg.js";
-import "./lifecycle-core-BdCcww82.js";
-import "./systemd-hints-DH86kn6U.js";
+import "./service-Dkcqg-rd.js";
+import "./systemd-BJqlwupF.js";
+import "./lifecycle-core-CuMY0U_8.js";
+import "./systemd-hints-Cp0IfOPD.js";
 import { t as parsePort$1 } from "./parse-port-CshWaSQ9.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-B3Q460ai.js";
-import "./diagnostics-C4-TUVnm.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-CiPY543O.js";
+import "./diagnostics-C6ntZHc3.js";
 import "./table-H366JkfJ.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-B1ALOpPn.js";
-import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-CJd0QML9.js";
-import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-BlUclRcb.js";
+import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-Cj18nzyW.js";
+import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-BM8WZyx6.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-B1GbNHC3.js";
-import { a as getStorageV1Snapshot, c as pickGatewaySelfPresence, i as createStorageSupervisor, o as noteStorageReplayResult, r as getStatusSummary, s as noteStorageRestartRequired } from "./status-DlD1uBWJ.js";
-import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-fB9rLTPD.js";
+import { a as getStorageV1Snapshot, c as pickGatewaySelfPresence, i as createStorageSupervisor, o as noteStorageReplayResult, r as getStatusSummary, s as noteStorageRestartRequired } from "./status-DJsk1JjI.js";
+import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-Cooqit6V.js";
 import { a as readPostQuiesceTranscriptDelta, i as readBulkTranscriptLines, o as replaySource, r as mergeBulkTranscriptSnapshotAndDelta, t as ReplayRowConflictError } from "./replay-B9P8F4Td.js";
 import "./session-key-resolution-CvnTXaSw.js";
 import { c as waitForStopDrain, l as withTimeout, o as tasksHandlers, r as getTaskOperatorRegistry, s as retryDelayMs, t as DEFAULT_RETENTION_DAYS } from "./task-runlog-retention-cEBecqvb.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-BXkk_vKO.js";
 import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-DM1npKXX.js";
-import { t as reconcileBundledInstalls } from "./reconcile-bundled-jiPnEB1a.js";
+import { t as reconcileBundledInstalls } from "./reconcile-bundled-Dx64x8xr.js";
 import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-ACR3KU8j.js";
 import "./onboarding.secret-input-YvW1rg1V.js";
-import { t as runOnboardingWizard } from "./onboarding-DemzhSFH.js";
+import { t as runOnboardingWizard } from "./onboarding-BBb8ZbfX.js";
 import { a as computeJobNextRunAtMs, c as findJobOrThrow, d as recomputeNextRuns, f as recomputeNextRunsForMaintenance, h as produceCronAgentTurn, i as applyJobPatch, l as isJobDue, m as resolveJobPayloadTextForMain, o as createJob, p as recordScheduleComputeError, r as resolveStaleClaimAdoptionMs, s as cronShapeSupportsIdentity, t as CRON_HEARTBEAT_ADAPTER_ID, u as nextWakeAtMs } from "./recovery-adapter-CPQ9-014.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-BGOaVxug.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-DYlVj3Sd.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-BzuIKryU.js";
-import { a as readChatHistoryPage, c as unsubscribeSessionChanges, i as decodeHistoryCursor, l as assertValidParams, o as resolveDbLeafEntryId, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers } from "./sessions-CuDbhYmU.js";
+import { a as readChatHistoryPage, c as unsubscribeSessionChanges, i as decodeHistoryCursor, l as assertValidParams, o as resolveDbLeafEntryId, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers } from "./sessions-DCXadUdD.js";
 import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-wwMY6dIH.js";
-import "./node-service-r64yexlb.js";
+import "./node-service-Ys7JZFz-.js";
 import "./status.update-C4YRQzqD.js";
 import { i as resolveActiveLogFile, n as readLogSlice } from "./log-tail-Dg2oYTZ6.js";
 import { t as installSkill } from "./skills-install-B23U6yk5.js";
-import { r as runGatewayUpdate } from "./update-runner-JoI-EXBr.js";
+import { r as runGatewayUpdate } from "./update-runner-DwM4xj8C.js";
 import { n as resolveWebClientPackagedRootSync, t as WEB_CLIENT_BUNDLE_MISSING_MESSAGE } from "./web-client-assets-nkeo2cLh.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-DkkkJ4GX.js";
-import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-Dwtv8SyF.js";
+import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-CIz47IKl.js";
 import { n as forceFreePortAndWait } from "./ports-BxjQwKMc.js";
 import { createRequire } from "node:module";
 import { spawn, spawnSync } from "node:child_process";
@@ -1083,7 +1083,7 @@ function resolveVerificationStore(params = {}) {
 
 //#endregion
 //#region src/infra/exec-approval-forwarder.ts
-const log$28 = createSubsystemLogger("gateway/exec-approvals");
+const log$29 = createSubsystemLogger("gateway/exec-approvals");
 const DEFAULT_MODE = "session";
 function normalizeMode(mode) {
 	return mode ?? DEFAULT_MODE;
@@ -1221,7 +1221,7 @@ async function deliverToTargets(params) {
 				payloads: [{ text: params.text }]
 			});
 		} catch (err) {
-			log$28.error(`exec approvals: failed to deliver to ${channel}:${target.to}: ${String(err)}`);
+			log$29.error(`exec approvals: failed to deliver to ${channel}:${target.to}: ${String(err)}`);
 		}
 	});
 	await Promise.allSettled(deliveries);
@@ -1310,7 +1310,7 @@ function createExecApprovalForwarder(deps = {}) {
 			deliver,
 			shouldSend: () => pending.get(request.id) === pendingEntry
 		}).catch((err) => {
-			log$28.error(`exec approvals: failed to deliver request ${request.id}: ${String(err)}`);
+			log$29.error(`exec approvals: failed to deliver request ${request.id}: ${String(err)}`);
 		});
 		return true;
 	};
@@ -1682,7 +1682,7 @@ function scheduleGatewayUpdateCheck(params) {
 
 //#endregion
 //#region src/sessions/session-runs/restart-transitions.ts
-const log$27 = createSubsystemLogger("sessions/restart-transitions");
+const log$28 = createSubsystemLogger("sessions/restart-transitions");
 async function transition(input, recoveryEnabled) {
 	const store = input.store ?? getConfiguredSessionStorageRuntime()?.runtime?.runs;
 	if (!store) return [];
@@ -1693,14 +1693,14 @@ async function transition(input, recoveryEnabled) {
 			recoveryReason: input.reason,
 			recoveryEnabled
 		});
-		if (transitioned.length > 0) log$27.info("transitioned active runs for restart", {
+		if (transitioned.length > 0) log$28.info("transitioned active runs for restart", {
 			count: transitioned.length,
 			recoveryEnabled,
 			reason: input.reason
 		});
 		return transitioned;
 	} catch (err) {
-		log$27.warn("failed to transition active runs for restart", {
+		log$28.warn("failed to transition active runs for restart", {
 			recoveryEnabled,
 			error: String(err)
 		});
@@ -1769,7 +1769,7 @@ function resolveChannelRestartReason(snapshot, evaluation) {
 
 //#endregion
 //#region src/gateway/channel-health-monitor.ts
-const log$26 = createSubsystemLogger("gateway/health-monitor");
+const log$27 = createSubsystemLogger("gateway/health-monitor");
 const DEFAULT_CHECK_INTERVAL_MS = 5 * 6e4;
 const DEFAULT_MONITOR_STARTUP_GRACE_MS = 6e4;
 const DEFAULT_COOLDOWN_CYCLES = 2;
@@ -1829,11 +1829,11 @@ function startChannelHealthMonitor(deps) {
 					if (now - record.lastRestartAt <= cooldownMs) continue;
 					pruneOldRestarts(record, now);
 					if (record.restartsThisHour.length >= maxRestartsPerHour) {
-						log$26.warn?.(`[${channelId}:${accountId}] health-monitor: hit ${maxRestartsPerHour} restarts/hour limit, skipping`);
+						log$27.warn?.(`[${channelId}:${accountId}] health-monitor: hit ${maxRestartsPerHour} restarts/hour limit, skipping`);
 						continue;
 					}
 					const reason = resolveChannelRestartReason(status, health);
-					log$26.info?.(`[${channelId}:${accountId}] health-monitor: restarting (reason: ${reason})`);
+					log$27.info?.(`[${channelId}:${accountId}] health-monitor: restarting (reason: ${reason})`);
 					try {
 						if (status.running) await channelManager.stopChannel(channelId, accountId);
 						channelManager.resetRestartAttempts(channelId, accountId);
@@ -1842,7 +1842,7 @@ function startChannelHealthMonitor(deps) {
 						record.restartsThisHour.push({ at: now });
 						restartRecords.set(key, record);
 					} catch (err) {
-						log$26.error?.(`[${channelId}:${accountId}] health-monitor: restart failed: ${String(err)}`);
+						log$27.error?.(`[${channelId}:${accountId}] health-monitor: restart failed: ${String(err)}`);
 					}
 				}
 			}
@@ -1862,7 +1862,7 @@ function startChannelHealthMonitor(deps) {
 		abortSignal?.addEventListener("abort", stop, { once: true });
 		timer = setInterval(() => void runCheck(), checkIntervalMs);
 		if (typeof timer === "object" && "unref" in timer) timer.unref();
-		log$26.info?.(`started (interval: ${Math.round(checkIntervalMs / 1e3)}s, startup-grace: ${Math.round(timing.monitorStartupGraceMs / 1e3)}s, channel-connect-grace: ${Math.round(timing.channelConnectGraceMs / 1e3)}s)`);
+		log$27.info?.(`started (interval: ${Math.round(checkIntervalMs / 1e3)}s, startup-grace: ${Math.round(timing.monitorStartupGraceMs / 1e3)}s, channel-connect-grace: ${Math.round(timing.channelConnectGraceMs / 1e3)}s)`);
 	}
 	return { stop };
 }
@@ -3068,10 +3068,10 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 	const { getConfiguredSessionStorageRuntime } = await import("./config-BPACL-n5.js").then((n) => n.Hn);
 	const runtime = getConfiguredSessionStorageRuntime()?.runtime;
 	const gatewayInstanceId = getGatewayInstanceId();
-	const { tryGetAgentTurnRuntime } = await import("./agent-turn-runner-PbFFnq5P.js").then((n) => n.t);
+	const { tryGetAgentTurnRuntime } = await import("./agent-turn-runner-CUCOdxhH.js").then((n) => n.t);
 	const backbone = tryGetAgentTurnRuntime()?.backbone;
 	const { createOutboundDeliveryRecoveryAdapter } = await import("./delivery-recovery-adapter-Bj3mCcg9.js");
-	const { deliverOutboundPayloads } = await import("./deliver-DT4v-Go0.js").then((n) => n.n);
+	const { deliverOutboundPayloads } = await import("./deliver-C5SDo7TP.js").then((n) => n.n);
 	adapters.push(createOutboundDeliveryRecoveryAdapter({
 		cfg,
 		deliver: deliverOutboundPayloads,
@@ -3085,7 +3085,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		sessionRuns = void 0;
 	}
 	if (sessionRuns && wiring?.agentTurnStager) {
-		const { createSessionRunRecoveryAdapter } = await import("./recovery-adapter-B_wvSNpI.js");
+		const { createSessionRunRecoveryAdapter } = await import("./recovery-adapter-CTqGLqLj.js");
 		adapters.push(createSessionRunRecoveryAdapter({
 			store: sessionRuns,
 			cfg,
@@ -3101,7 +3101,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		lease: wiring?.lease ? () => wiring.lease?.() ?? { isArmed: () => false } : void 0
 	}));
 	if (backbone && wiring?.agentTurnStager) {
-		const { createAgentTurnRecoveryAdapter } = await import("./agent-turn-recovery-adapter-SdyNUgzD.js");
+		const { createAgentTurnRecoveryAdapter } = await import("./agent-turn-recovery-adapter-BkIal4FW.js");
 		adapters.push(createAgentTurnRecoveryAdapter({
 			backbone,
 			stager: wiring.agentTurnStager
@@ -3123,7 +3123,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		}));
 	}
 	if (sessionRuns) {
-		const { createEmbeddedPiRecoveryAdapter } = await import("./pi-embedded-recovery-adapter-DB4blfKA.js");
+		const { createEmbeddedPiRecoveryAdapter } = await import("./pi-embedded-recovery-adapter-DL78oCTf.js");
 		adapters.push(createEmbeddedPiRecoveryAdapter({
 			sessionRuns,
 			cfg,
@@ -3131,7 +3131,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 			stager: wiring?.agentTurnStager,
 			isRunActive: isEmbeddedPiRunActive
 		}));
-		const { createAcpRuntimeRecoveryAdapter } = await import("./recovery-adapter-DvFGPqmC.js");
+		const { createAcpRuntimeRecoveryAdapter } = await import("./recovery-adapter-BvRiQZIb.js");
 		adapters.push(createAcpRuntimeRecoveryAdapter({ sessionRuns }));
 	}
 	if (backbone) {
@@ -3772,6 +3772,8 @@ function createChannelManager(opts) {
 
 //#endregion
 //#region src/gateway/server-chat.ts
+const log$26 = createSubsystemLogger("gateway/chat-final");
+const CHAT_TERMINAL_DURABILITY_TIMEOUT_MS = 5e3;
 function resolveHeartbeatAckMaxChars$1() {
 	try {
 		const cfg = loadConfig();
@@ -3928,6 +3930,15 @@ function createToolEventRecipientRegistry() {
 	};
 }
 function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSession, agentRunSeq, chatRunState, resolveSessionKeyForRun, clearAgentRunContext, toolEventRecipients }) {
+	const pendingTerminalBySession = /* @__PURE__ */ new Map();
+	const sendInSessionOrder = (sessionKey, send) => {
+		const pending = pendingTerminalBySession.get(sessionKey);
+		if (!pending) {
+			send();
+			return;
+		}
+		pending.then(send).catch(() => void 0);
+	};
 	const emitChatDelta = (sessionKey, clientRunId, sourceRunId, seq, text) => {
 		const cleaned = stripInlineDirectiveTagsForDisplay(text).text;
 		if (!cleaned) return;
@@ -3952,10 +3963,12 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 				timestamp: now
 			}
 		};
-		broadcast("chat", payload, { dropIfSlow: true });
-		nodeSendToSession(sessionKey, "chat", payload);
+		sendInSessionOrder(sessionKey, () => {
+			broadcast("chat", payload, { dropIfSlow: true });
+			nodeSendToSession(sessionKey, "chat", payload);
+		});
 	};
-	const emitChatFinal = (sessionKey, clientRunId, sourceRunId, seq, jobState, error) => {
+	const buildChatTerminalPayload = (sessionKey, clientRunId, sourceRunId, seq, jobState, error) => {
 		const normalizedHeartbeatText = normalizeHeartbeatChatFinalText({
 			runId: clientRunId,
 			sourceRunId,
@@ -3965,35 +3978,59 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 		const shouldSuppressSilent = normalizedHeartbeatText.suppress || isSilentReplyText(text, SILENT_REPLY_TOKEN);
 		chatRunState.buffers.delete(clientRunId);
 		chatRunState.deltaSentAt.delete(clientRunId);
-		if (jobState === "done") {
-			const payload = {
-				runId: clientRunId,
-				sessionKey,
-				seq,
-				state: "final",
-				message: text && !shouldSuppressSilent ? {
-					role: "assistant",
-					content: [{
-						type: "text",
-						text
-					}],
-					timestamp: Date.now()
-				} : void 0
-			};
-			broadcast("chat", payload);
-			nodeSendToSession(sessionKey, "chat", payload);
-			return;
-		}
-		const payload = {
+		if (jobState === "done") return {
+			runId: clientRunId,
+			sessionKey,
+			seq,
+			state: "final",
+			message: text && !shouldSuppressSilent ? {
+				role: "assistant",
+				content: [{
+					type: "text",
+					text
+				}],
+				timestamp: Date.now()
+			} : void 0
+		};
+		return {
 			runId: clientRunId,
 			sessionKey,
 			seq,
 			state: "error",
 			errorMessage: error ? formatForLog(error) : void 0
 		};
+	};
+	const sendChatTerminal = (sessionKey, payload) => {
 		broadcast("chat", payload);
 		nodeSendToSession(sessionKey, "chat", payload);
 	};
+	const emitChatTerminal = (sessionKey, clientRunId, sourceRunId, seq, jobState, error) => {
+		const payload = buildChatTerminalPayload(sessionKey, clientRunId, sourceRunId, seq, jobState, error);
+		const writes = snapshotRunPendingWrites(sourceRunId);
+		if (!writes) {
+			sendInSessionOrder(sessionKey, () => sendChatTerminal(sessionKey, payload));
+			return;
+		}
+		const pending = pendingTerminalBySession.get(sessionKey);
+		const durability = waitForPendingWrites(writes, CHAT_TERMINAL_DURABILITY_TIMEOUT_MS);
+		const gate = (pending ?? Promise.resolve()).then(() => durability).then((outcome) => {
+			if (outcome === "timeout") log$26.warn("chat terminal broadcast before transcript durability (timeout)", {
+				runId: sourceRunId,
+				sessionKey,
+				timeoutMs: CHAT_TERMINAL_DURABILITY_TIMEOUT_MS
+			});
+			sendChatTerminal(sessionKey, payload);
+		}).catch((err) => {
+			log$26.warn("chat terminal broadcast failed while waiting for transcript durability", {
+				runId: sourceRunId,
+				sessionKey,
+				err
+			});
+		}).finally(() => {
+			if (pendingTerminalBySession.get(sessionKey) === gate) pendingTerminalBySession.delete(sessionKey);
+		});
+		pendingTerminalBySession.set(sessionKey, gate);
+	};
 	const resolveToolVerboseLevel = (runId, sessionKey) => {
 		const runVerbose = normalizeVerboseLevel(getAgentRunContext(runId)?.verboseLevel);
 		if (runVerbose) return runVerbose;
@@ -4064,8 +4101,8 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 					clearAgentRunContext(evt.runId);
 					return;
 				}
-				emitChatFinal(finished.sessionKey, finished.clientRunId, evt.runId, evt.seq, lifecyclePhase === "error" ? "error" : "done", evt.data?.error);
-			} else emitChatFinal(sessionKey, eventRunId, evt.runId, evt.seq, lifecyclePhase === "error" ? "error" : "done", evt.data?.error);
+				emitChatTerminal(finished.sessionKey, finished.clientRunId, evt.runId, evt.seq, lifecyclePhase === "error" ? "error" : "done", evt.data?.error);
+			} else emitChatTerminal(sessionKey, eventRunId, evt.runId, evt.seq, lifecyclePhase === "error" ? "error" : "done", evt.data?.error);
 			else if (isAborted && (lifecyclePhase === "end" || lifecyclePhase === "error")) {
 				chatRunState.abortedRuns.delete(clientRunId);
 				chatRunState.abortedRuns.delete(evt.runId);
@@ -16258,7 +16295,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-BG6KvV6u.js");
+			const { handleNodeEvent } = await import("./server-node-events-B3c2ctcO.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -24817,7 +24854,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.OPENCLAW_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.OPENCLAW_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./server-CywvGQHz.js");
+	const mod = override ? await import(override) : await import("./server-DRVR_pkr.js");
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -35541,7 +35578,7 @@ async function bootGatewayServer(port, opts) {
 		const sweepLog = log.child("session-consumer-claim-sweep");
 		const { createDiagnosticRingBuffer } = await import("./session-consumer-diagnostics-BUKxP8bu.js");
 		const diagnostics = createDiagnosticRingBuffer();
-		const { setDiagnostics } = await import("./sessions-CuDbhYmU.js").then((n) => n.n);
+		const { setDiagnostics } = await import("./sessions-DCXadUdD.js").then((n) => n.n);
 		if (sessionConsumerClaimSweepCancelled) return;
 		setDiagnostics(diagnostics);
 		const lastKnownEnabledState = /* @__PURE__ */ new Map();
@@ -35580,7 +35617,7 @@ async function bootGatewayServer(port, opts) {
 					lastKnownEnabledState,
 					cfg: loadConfig()
 				});
-				const { setLastSweepTimestamp } = await import("./sessions-CuDbhYmU.js").then((n) => n.n);
+				const { setLastSweepTimestamp } = await import("./sessions-DCXadUdD.js").then((n) => n.n);
 				setLastSweepTimestamp(Date.now());
 			} catch (err) {
 				sweepLog.warn(`session consumer-claim sweep failed: ${String(err)}`);
@@ -35602,7 +35639,7 @@ async function bootGatewayServer(port, opts) {
 			prepare: () => {
 				taskPipelineBoot = (async () => {
 					const { getConfiguredSessionStorageRuntime } = await import("./config-BPACL-n5.js").then((n) => n.Hn);
-					const { startTaskPipeline } = await import("./task-pipeline-boot-D9T_Earg.js");
+					const { startTaskPipeline } = await import("./task-pipeline-boot-CcSZVGUe.js");
 					const pipeline = startTaskPipeline({
 						getConfigured: getConfiguredSessionStorageRuntime,
 						cfg: cfgAtStart,

package/dist/{health-fB9rLTPD.js → health-Cooqit6V.js}

@@ -6,8 +6,8 @@ import { Da as listChannelPlugins, Ea as getChannelPlugin, Nn as loadSessionStor
 import { d as normalizeAgentId } from "./session-key-D4YLCjDF.js";
 import { d as resolveDefaultAgentId } from "./agent-scope-Dt0TVWFY.js";
 import { m as resolveStorePath } from "./artifacts-C9Cr_S5Y.js";
-import { i as resolveHeartbeatSummaryForAgent } from "./agent-turn-execute-DvP2nf2J.js";
-import { y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-PbFFnq5P.js";
+import { i as resolveHeartbeatSummaryForAgent } from "./agent-turn-execute-Bw9hhkAP.js";
+import { y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-CUCOdxhH.js";
 import { i as formatErrorMessage } from "./errors-Bf0TUXNT.js";
 import { r as callGatewayCli, t as buildGatewayConnectionDetails } from "./call-BIVg1gmJ.js";
 import { t as formatDurationCompact } from "./format-duration-CsAbUoUJ.js";

package/dist/{health-DFWpyp9O.js → health-DFat5vO5.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { F as isRich, I as theme, T as info } from "./utils-CMEUUHmM.js";
-import { y as resolveHeartbeatSummaryForAgent } from "./reply-BIZ2zaUq.js";
+import { y as resolveHeartbeatSummaryForAgent } from "./reply-BzUdF5qW.js";
 import { d as resolveDefaultAgentId } from "./agent-scope-CWTkr4pS.js";
 import { t as createSubsystemLogger } from "./subsystem-DDZBycwS.js";
 import { d as normalizeAgentId } from "./session-key-B1wN38jV.js";
@@ -10,7 +10,7 @@ import { m as resolveStorePath } from "./artifacts-qv_OgPMd.js";
 import { i as formatErrorMessage } from "./errors-z_JCBnTo.js";
 import { r as callGatewayCli, t as buildGatewayConnectionDetails } from "./call-Cl6Q0T5z.js";
 import { t as formatDurationCompact } from "./format-duration-XLSvPvzN.js";
-import { y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-DFZxbjaC.js";
+import { y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-Vd3aTCni.js";
 import { n as withProgress } from "./progress-DRMfDm7h.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-CU6_xh9V.js";