wednesdayai 0.4.12-dev.716 → 0.4.12-dev.719

package/dist/{gateway-cli-DI7_gxH-.js → gateway-cli-CVnksdlt.js}

@@ -2,7 +2,7 @@ import { g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as
 import { $ as readLoggingConfig, A as setVerbose, At as resolvePreferredOpenClawTmpDir, C as truncateUtf16Safe, F as isRich, I as theme, K as resolveFileLogProfile, L as getChildLogger, P as colorize, R as getLogger, W as appendFileLog, _t as isNotFoundPathError, c as ensureDir, dt as openVerifiedFileSync, ft as sameFileIdentity, g as resolveUserPath, lt as openBoundaryFile, t as CONFIG_DIR, ut as openBoundaryFileSync, vt as isPathInside, y as shortenHomePath, z as getResolvedLoggerSettings } from "./utils-CMEUUHmM.js";
 import { t as isPlainObject } from "./plain-object-DHRdTVMa.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-DDYFn78t.js";
-import { $n as setTtsProvider, A as resolveCronSession, An as ensureOutboundSessionEntry, Ar as resolveAgentTimeoutMs, At as takePendingActivationMigration, Bn as setTaskPipelineStatus, Bt as resolveAgentOutboundIdentity, C as startHeartbeatRunner, Cn as buildHistoryContextFromEntries, Cr as DEFAULT_INPUT_IMAGE_MIMES, Ct as persistBrowserProxyFiles, D as onHeartbeatEvent, Dn as createReplyDispatcher, Dr as extractImageContentFromSource, Dt as clearPluginRegistryCaches, E as getLastHeartbeatEvent, En as setDispatchInboundAdmissionRejectionFor, Er as extractFileContentFromSource, F as waitForPendingWrites, Fn as resolveOutboundChannelPlugin, Ft as loadProviderUsageSummary, Gn as isTtsEnabled, H as readLatestAssistantReply, Hn as resolveUserTimezone, Ht as handleSlackHttpRequest, J as loadCombinedSessionStoreForGateway, Jn as resolveTtsAutoMode, K as listAgentsForGateway, Kn as isTtsProviderConfigured, L as resolveExecConfig, Ln as resetDirectoryCache, M as runEmbeddedPiAgent, Mn as resolveHeartbeatDeliveryTarget, Mt as requestNudge, N as prepareSessionManagerForRun, Nn as resolveOutboundTarget, O as redactSensitiveHeartbeatEvent, On as getTotalPendingReplies, Or as normalizeMimeList, Ot as getLoadedAnalysisConcurrency, P as snapshotRunPendingWrites, Pn as resolveSessionDeliveryTarget, Q as resolveSessionModelRef, Qn as setTtsEnabled, R as applyToolPolicyPipeline, Rn as isAbortRequestText, S as setHeartbeatsEnabled, Sr as DEFAULT_INPUT_IMAGE_MAX_BYTES, St as applyBrowserProxyPaths, T as resolveHeartbeatVisibility, Tn as dispatchInboundMessage, Tr as DEFAULT_INPUT_TIMEOUT_MS, Tt as resolvePluginTools, U as resolveAnnounceTargetFromKey, Ut as readJsonBodyWithLimit, V as createOpenClawTools, Vn as DEFAULT_MAX_PARALLEL, W as canonicalizeSpawnedByForAgent, Wn as getTtsProvider, Wt as requestBodyErrorToText, X as pruneLegacyStoreKeys, Xn as resolveTtsPrefsPath, Xt as resolveAgentOutboundTarget, Y as loadSessionEntry, Yn as resolveTtsConfig, Yt as resolveAgentDeliveryPlan, Z as resolveGatewaySessionStoreTarget, Zn as resolveTtsProviderOrder, Zt as createOutboundSendDeps, _ as runMainAgentTurn, _r as ACP_SESSION_IDENTITY_RENDERER_VERSION, _t as normalizeCronJobPatch, an as runCliAgent, ar as removeQueuedFollowupRun, at as scheduleGatewaySigusr1Restart, b as runHeartbeatOnce, bn as getHookType, bt as hasLegacyDeliveryHints, cr as ToolInputError, ct as triggerOpenClawRestart, d as countActiveDescendantRuns, dn as computeBackoff, dt as formatRestartSentinelMessage, en as createDefaultDeps, er as textToSpeech, et as consumeGatewaySigusr1RestartAuthorization, f as initSubagentRegistry, fn as sleepWithAbort, gt as normalizeCronJobCreate, h as runSubagentAnnounceFlow, ht as writeRestartSentinel, in as setCliSessionId, ir as getExistingFollowupQueue, it as markGatewaySigusr1RestartHandled, j as resolveCronStyleNow, jn as resolveOutboundSessionRoute, jt as createPluginRuntime, k as isCronSystemEvent, kr as resolveInputFileLimits, kt as loadOpenClawPlugins, ln as lookupContextTokens, lr as enqueueSystemEvent, lt as consumeRestartSentinel, mn as resolveAgentAvatar, mr as requestHeartbeatNow, nn as runWithModelFallback, nr as OPENAI_TTS_VOICES, nt as emitGatewayRestart, o as resolveChannelAccountEnabled, or as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, ot as setGatewaySigusr1RestartPolicy, p as listDescendantRunsForRequester, pn as resolveSessionAuthProfileOverride, pt as summarizeRestartSentinel, qn as resolveTtsApiKey, qt as agentCommandFromIngress, rn as getCliSessionId, rr as clearSessionQueues, rt as isGatewaySigusr1RestartExternallyAllowed, s as BARE_SESSION_RESET_PROMPT, sr as stripHeartbeatToken, st as setPreRestartDeferralCheck, tn as createOutboundSendDeps$1, tr as OPENAI_TTS_MODELS, tt as deferGatewayRestartUntilIdle, ur as isSystemEventContextChanged, ut as formatDoctorNonInteractiveHint, v as resolveHeartbeatConfig, vn as buildSafeExternalPrompt, vr as getAcpSessionManager, vt as migrateLegacyCronPayload, w as runWakeGate, wr as DEFAULT_INPUT_MAX_REDIRECTS, wt as getPluginToolMeta, xn as isExternalHookSession, xr as resolveSendPolicy, xt as stripLegacyDeliveryFields, y as resolveHeartbeatSummaryForAgent, yn as detectSuspiciousPatterns, yr as resolveAgentSessionDirs, yt as buildDeliveryFromLegacyPayload, z as buildDefaultToolPolicyPipelineSteps } from "./reply-BzUdF5qW.js";
+import { $n as setTtsProvider, A as resolveCronSession, An as ensureOutboundSessionEntry, Ar as resolveAgentTimeoutMs, At as takePendingActivationMigration, Bn as setTaskPipelineStatus, Bt as resolveAgentOutboundIdentity, C as startHeartbeatRunner, Cn as buildHistoryContextFromEntries, Cr as DEFAULT_INPUT_IMAGE_MIMES, Ct as persistBrowserProxyFiles, D as onHeartbeatEvent, Dn as createReplyDispatcher, Dr as extractImageContentFromSource, Dt as clearPluginRegistryCaches, E as getLastHeartbeatEvent, En as setDispatchInboundAdmissionRejectionFor, Er as extractFileContentFromSource, F as waitForPendingWrites, Fn as resolveOutboundChannelPlugin, Ft as loadProviderUsageSummary, Gn as isTtsEnabled, H as readLatestAssistantReply, Hn as resolveUserTimezone, Ht as handleSlackHttpRequest, J as loadCombinedSessionStoreForGateway, Jn as resolveTtsAutoMode, K as listAgentsForGateway, Kn as isTtsProviderConfigured, L as resolveExecConfig, Ln as resetDirectoryCache, M as runEmbeddedPiAgent, Mn as resolveHeartbeatDeliveryTarget, Mt as requestNudge, N as prepareSessionManagerForRun, Nn as resolveOutboundTarget, O as redactSensitiveHeartbeatEvent, On as getTotalPendingReplies, Or as normalizeMimeList, Ot as getLoadedAnalysisConcurrency, P as snapshotRunPendingWrites, Pn as resolveSessionDeliveryTarget, Q as resolveSessionModelRef, Qn as setTtsEnabled, R as applyToolPolicyPipeline, Rn as isAbortRequestText, S as setHeartbeatsEnabled, Sr as DEFAULT_INPUT_IMAGE_MAX_BYTES, St as applyBrowserProxyPaths, T as resolveHeartbeatVisibility, Tn as dispatchInboundMessage, Tr as DEFAULT_INPUT_TIMEOUT_MS, Tt as resolvePluginTools, U as resolveAnnounceTargetFromKey, Ut as readJsonBodyWithLimit, V as createOpenClawTools, Vn as DEFAULT_MAX_PARALLEL, W as canonicalizeSpawnedByForAgent, Wn as getTtsProvider, Wt as requestBodyErrorToText, X as pruneLegacyStoreKeys, Xn as resolveTtsPrefsPath, Xt as resolveAgentOutboundTarget, Y as loadSessionEntry, Yn as resolveTtsConfig, Yt as resolveAgentDeliveryPlan, Z as resolveGatewaySessionStoreTarget, Zn as resolveTtsProviderOrder, Zt as createOutboundSendDeps, _ as runMainAgentTurn, _r as ACP_SESSION_IDENTITY_RENDERER_VERSION, _t as normalizeCronJobPatch, an as runCliAgent, ar as removeQueuedFollowupRun, at as scheduleGatewaySigusr1Restart, b as runHeartbeatOnce, bn as getHookType, bt as hasLegacyDeliveryHints, cr as ToolInputError, ct as triggerOpenClawRestart, d as countActiveDescendantRuns, dn as computeBackoff, dt as formatRestartSentinelMessage, en as createDefaultDeps, er as textToSpeech, et as consumeGatewaySigusr1RestartAuthorization, f as initSubagentRegistry, fn as sleepWithAbort, gt as normalizeCronJobCreate, h as runSubagentAnnounceFlow, ht as writeRestartSentinel, in as setCliSessionId, ir as getExistingFollowupQueue, it as markGatewaySigusr1RestartHandled, j as resolveCronStyleNow, jn as resolveOutboundSessionRoute, jt as createPluginRuntime, k as isCronSystemEvent, kr as resolveInputFileLimits, kt as loadOpenClawPlugins, ln as lookupContextTokens, lr as enqueueSystemEvent, lt as consumeRestartSentinel, mn as resolveAgentAvatar, mr as requestHeartbeatNow, nn as runWithModelFallback, nr as OPENAI_TTS_VOICES, nt as emitGatewayRestart, o as resolveChannelAccountEnabled, or as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, ot as setGatewaySigusr1RestartPolicy, p as listDescendantRunsForRequester, pn as resolveSessionAuthProfileOverride, pt as summarizeRestartSentinel, qn as resolveTtsApiKey, qt as agentCommandFromIngress, rn as getCliSessionId, rr as clearSessionQueues, rt as isGatewaySigusr1RestartExternallyAllowed, s as BARE_SESSION_RESET_PROMPT, sr as stripHeartbeatToken, st as setPreRestartDeferralCheck, tn as createOutboundSendDeps$1, tr as OPENAI_TTS_MODELS, tt as deferGatewayRestartUntilIdle, ur as isSystemEventContextChanged, ut as formatDoctorNonInteractiveHint, v as resolveHeartbeatConfig, vn as buildSafeExternalPrompt, vr as getAcpSessionManager, vt as migrateLegacyCronPayload, w as runWakeGate, wr as DEFAULT_INPUT_MAX_REDIRECTS, wt as getPluginToolMeta, xn as isExternalHookSession, xr as resolveSendPolicy, xt as stripLegacyDeliveryFields, y as resolveHeartbeatSummaryForAgent, yn as detectSuspiciousPatterns, yr as resolveAgentSessionDirs, yt as buildDeliveryFromLegacyPayload, z as buildDefaultToolPolicyPipelineSteps } from "./reply-B4TgvJrJ.js";
 import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, M as matchesSkillFilter, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-CWTkr4pS.js";
 import { m as defaultRuntime, n as runtimeForLogger, o as setConsoleSubsystemFilter, s as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-DDZBycwS.js";
 import { A as isCronRunSessionKey, M as isSubagentSessionKey, N as parseAgentSessionKey, S as normalizeAccountId$1, a as classifySessionKeyShape, b as toAgentStoreSessionKey, d as normalizeAgentId, f as normalizeMainKey, g as resolveLinkedPeerIdForChannel, h as resolveConfiguredCanonicalIdentity, p as resolveAgentIdFromSessionKey, r as buildAgentMainSessionKey, t as DEFAULT_AGENT_ID, x as DEFAULT_ACCOUNT_ID, y as toAgentRequestSessionKey } from "./session-key-B1wN38jV.js";
@@ -24,12 +24,12 @@ import { c as isDiagnosticsEnabled, l as onDiagnosticEvent, s as emitDiagnosticE
 import { n as USER_CLIENT_ID, o as buildUserClientRuntimeConfig, s as handleUserClientHttpRequest } from "./static-server-C-iTMRyz.js";
 import { n as assertNoPathAliasEscape } from "./path-alias-guards-BSmwo1rT.js";
 import { i as openFileWithinRoot, l as writeFileWithinRoot, s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-DD7KXuvI.js";
-import { D as normalizeMediaProviderId, E as listAutoDetectableProviders, T as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, g as registerUnhandledRejectionHandler, n as buildProviderRegistry, x as resolveModelEntries, y as resolveCapabilityConfig } from "./audio-transcription-runner-CGTNNwbm.js";
+import { D as normalizeMediaProviderId, E as listAutoDetectableProviders, T as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, g as registerUnhandledRejectionHandler, n as buildProviderRegistry, x as resolveModelEntries, y as resolveCapabilityConfig } from "./audio-transcription-runner-BvZFFknx.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-CjyGDRXN.js";
 import { t as SsrFBlockedError } from "./ssrf-B85AIIOO.js";
 import "./proxy-fetch-Czv8kxaL.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-BXebcnwh.js";
-import "./pi-embedded-helpers-i0-tPaxH.js";
+import "./pi-embedded-helpers-CPorV-Mk.js";
 import "./local-roots-_qt4-Ma5.js";
 import { c as detectMime } from "./image-ops-DcqCZEUY.js";
 import { a as testRegexWithBoundedInput, i as compileSafeRegex } from "./redact-CQtYLB4a.js";
@@ -37,10 +37,10 @@ import { i as formatErrorMessage, o as hasErrnoCode, s as isErrno } from "./erro
 import "./models-config-Burwt3mB.js";
 import { n as loadModelCatalog } from "./model-catalog-C7itJJDM.js";
 import "./api-key-rotation-BEt1ZchD.js";
-import "./provider-image-CZlpEJVI.js";
+import "./provider-image-CIpRvhkS.js";
 import "./pi-model-discovery-CfUi22Es.js";
-import { h as extractTextFromChatContent } from "./pi-embedded-utils-BtOzugyp.js";
-import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-bbN1dfIo.js";
+import { h as extractTextFromChatContent } from "./pi-embedded-utils-lp-U3XQ9.js";
+import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-DbfWdQha.js";
 import { i as listCoreToolSections, n as PROFILE_OPTIONS, o as resolveCoreToolProfiles } from "./tool-catalog-B6wH7-iE.js";
 import { i as resolveRelayAuthTokenForPort, n as resolveGatewayRelayToken } from "./extension-relay-auth-C-1c9CZk.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-DbsrfsUT.js";
@@ -48,7 +48,7 @@ import { t as safeEqualSecret } from "./secret-equal-DyYamV7h.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-G5phL2pY.js";
 import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-BuVK_u9S.js";
 import { a as isDirectLoopbackProvenance, c as AUTH_RATE_LIMIT_SCOPE_BROWSER_EXTENSION, d as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, f as createAuthRateLimiter, i as captureTransportProvenance, l as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, n as authorizeHttpGatewayConnect, o as isLocalDirectRequest, p as normalizeRateLimitClientIp, r as authorizeWsControlUiGatewayConnect, s as resolveGatewayAuth, t as assertGatewayAuthConfigured, u as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH } from "./auth-DeLQvx-N.js";
-import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-Bbi-nqKD.js";
+import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-FPrSnBNG.js";
 import { d as hasBinary } from "./frontmatter-B8Zb_8go.js";
 import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-Buc1RWDY.js";
 import "./store-DoqX9VsZ.js";
@@ -63,7 +63,7 @@ import { r as isRestartEnabled } from "./commands-tFdLuF5k.js";
 import "./commands-registry-BMswme6t.js";
 import { t as redactIdentifier } from "./redact-identifier-CSPL9LuH.js";
 import "./registry-D9ygkK-J.js";
-import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-Cqo34Swm.js";
+import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-DzWOPhgy.js";
 import { $ as validateNodeListParams, $t as validateTalkSessionCreateParams, A as validateCronRunParams, B as validateExecApprovalRequestParams, Bn as verifyDeviceToken, Bt as validateTalkConfigParams, C as validateConfigPatchParams, Cn as normalizeDeviceMetadataForAuth, D as validateCronAddParams, Dn as consumeDeviceBootstrapToken, E as validateConnectParams, En as approveDevicePairing, F as validateDevicePairListParams, Fn as revokeDeviceToken, Ft as validateSkillsBinsParams, G as validateExecApprovalsSetParams, Gt as validateTalkRealtimeSessionParams, H as validateExecApprovalsGetParams, Ht as validateTalkRealtimeAudioParams, I as validateDevicePairRejectParams, In as rotateDeviceToken, It as validateSkillsInstallParams, J as validateModelsListParams, Jt as validateTalkRealtimeToolResultParams, K as validateLogsTailParams, Kt as validateTalkRealtimeStatusParams, L as validateDevicePairRemoveParams, Ln as summarizeDeviceTokens, Lt as validateSkillsStatusParams, M as validateCronStatusParams, Mn as rejectDevicePairing, N as validateCronUpdateParams, Nn as removePairedDevice, Nt as validateSessionsTitlePrepareParams, O as validateCronListParams, On as ensureDeviceToken, P as validateDevicePairApproveParams, Pn as requestDevicePairing, Pt as validateSessionsUsageParams, Q as validateNodeInvokeResultParams, Qt as validateTalkSessionCloseParams, R as validateDeviceTokenRevokeParams, Rn as updatePairedDeviceMetadata, Rt as validateSkillsUpdateParams, S as validateConfigGetParams, Sn as buildDeviceAuthPayloadV3, T as validateConfigSetParams, Tn as approveBootstrapDevicePairing, U as validateExecApprovalsNodeGetParams, Un as operatorScopeSatisfied, Ut as validateTalkRealtimeBargeInParams, V as validateExecApprovalResolveParams, Vt as validateTalkModeParams, W as validateExecApprovalsNodeSetParams, Wn as roleScopesAllow, Wt as validateTalkRealtimeMarkParams, X as validateNodeEventParams, Xn as verifyDeviceSignature, Xt as validateTalkSessionBargeInParams, Y as validateNodeDescribeParams, Yn as normalizeDevicePublicKeyBase64Url, Yt as validateTalkSessionAppendAudioParams, Z as validateNodeInvokeParams, Zt as validateTalkSessionCancelTurnParams, _ as validateChatAbortParams, _n as ErrorCodes, a as validateAgentNudgeParams, an as validateToolsCatalogParams, at as validateNodeRenameParams, b as validateChatSendParams, c as validateAgentsCreateParams, cn as validateWebLoginStartParams, ct as validateRequestFrame, d as validateAgentsFilesListParams, dn as validateWizardNextParams, dt as validateSendParams, en as validateTalkSessionMarkParams, et as validateNodePairApproveParams, f as validateAgentsFilesSetParams, fn as validateWizardStartParams, ft as validateSessionsAbortParams, g as validateChannelsStatusParams, h as validateChannelsLogoutParams, hn as RUNS_INVALIDATED_EVENT, i as validateAgentIdentityParams, in as validateTasksRunsListParams, it as validateNodePairVerifyParams, j as validateCronRunsParams, jn as listDevicePairing, jt as validateSessionsSteerParams, k as validateCronRemoveParams, kn as getPairedDevice, l as validateAgentsDeleteParams, ln as validateWebLoginWaitParams, lt as validateSecretsResolveParams, m as validateAgentsUpdateParams, mn as PROTOCOL_VERSION, nn as validateTasksRunsEventsParams, nt as validateNodePairRejectParams, o as validateAgentParams, on as validateUpdateRunParams, ot as validatePollParams, p as validateAgentsListParams, pn as validateWizardStatusParams, q as validateModelsAuthStatusParams, qn as deriveDeviceIdFromPublicKey, qt as validateTalkRealtimeStopParams, r as formatValidationErrors, rn as validateTasksRunsGetParams, rt as validateNodePairRequestParams, s as validateAgentWaitParams, sn as validateWakeParams, st as validatePushTestParams, tn as validateTasksRunEventsParams, tt as validateNodePairListParams, u as validateAgentsFilesGetParams, un as validateWizardCancelParams, ut as validateSecretsResolveResult, v as validateChatHistoryParams, vn as errorShape, w as validateConfigSchemaParams, x as validateConfigApplyParams, xn as buildDeviceAuthPayload, y as validateChatInjectParams, z as validateDeviceTokenRotateParams, zn as verifyDeviceBootstrapToken, zt as validateTalkCatalogParams } from "./client-BbpMX08n.js";
 import { _ as hasNarrowSessionScope, d as APPROVALS_SCOPE, f as PAIRING_SCOPE, g as authorizeOperatorScopesForMethod, h as WRITE_SCOPE, m as SESSION_READ_SCOPE, n as callGateway, p as READ_SCOPE, u as ADMIN_SCOPE$1, v as isHealthProbeAllowedForScopes, x as loadGatewayTlsRuntime$1, y as isNodeRoleMethod } from "./call-Cl6Q0T5z.js";
 import "./pairing-token-A_0lRJCJ.js";
@@ -75,14 +75,14 @@ import "./exec-safe-bin-runtime-policy-KSPaR73B.js";
 import { _ as matchSystemRunApprovalBinding, g as buildSystemRunApprovalBinding, h as resolveSystemRunApprovalRuntimeContext, m as resolveSystemRunApprovalRequestContext, v as missingSystemRunApprovalBinding, y as toSystemRunApprovalMismatchError } from "./nodes-screen-BRZLdw3g.js";
 import { r as resolveSystemRunCommand, t as canonicalizeLegacySystemRunParams } from "./system-run-command-AF8TLlEl.js";
 import { u as snapshotActiveRuns } from "./diagnostic-session-state-C6JXU3l4.js";
-import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-D7DvV7NT.js";
+import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-Cid_Tw67.js";
 import { t as CommandLane } from "./lanes-DA0g5tPR.js";
-import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-DVNBpgv0.js";
-import { a as getActiveTaskCount, c as getTotalQueueSize, d as setCommandLaneConcurrency, f as setGatewayDrainState, l as markGatewayDraining, p as waitForActiveTasks, u as resetAllLanes } from "./command-queue-DmXWCoY0.js";
+import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-B0TxOQnF.js";
+import { a as getActiveTaskCount, c as getTotalQueueSize, d as setCommandLaneConcurrency, f as setGatewayDrainState, l as markGatewayDraining, p as waitForActiveTasks, u as resetAllLanes } from "./command-queue-DtybAhHH.js";
 import { a as resolveAgentIdentity, t as createReplyPrefixOptions } from "./reply-prefix-D0xrt6Z-.js";
-import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-8xg5ISEI.js";
-import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-CII3PkDO.js";
-import { T as collectTelegramDuplicatePollerDiagnostics, d as loadCronStore, f as resolveCronStorePath, p as saveCronStore } from "./send-CvkM5xAx.js";
+import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-D37woOwV.js";
+import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-DD5bV7yq.js";
+import { T as collectTelegramDuplicatePollerDiagnostics, d as loadCronStore, f as resolveCronStorePath, p as saveCronStore } from "./send-DAYMV49d.js";
 import { n as resolveModel } from "./model-BI6n6kVo.js";
 import "./session-consumer-agents-DWh7Mygv.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-F-4FwfCE.js";
@@ -99,7 +99,7 @@ import "./outbound-attachment-Bg7WvYcG.js";
 import "./delivery-queue-DhBE3s1K.js";
 import "./send-26KAC8EW.js";
 import "./resolve-route-DnhX9nWr.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-DPm2eos4.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-r9H_A-NQ.js";
 import "./tables-CzW-cMQN.js";
 import "./proxy-Df2WAHRA.js";
 import "./replies-DoejQAqN.js";
@@ -113,7 +113,7 @@ import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as han
 import "./prompt-style-D0wRuIYC.js";
 import "./pairing-labels-CGUWaZ3f.js";
 import "./session-meta-DzjDKcgW.js";
-import { A as registerBeforeCreate, C as artifactTokenFor, D as markRemoved, E as markClientRemovedAcknowledged, M as buildVerificationEnvelope, N as redactVerificationProjection, O as markRetained, P as verificationEnvelopeFingerprint, S as accountSessionArtifactsAtTerminalSweep, T as listSessionArtifacts, _ as requireProcessBootIdentityPair, a as setAgentTurnRuntime, b as installGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as isBootIdentityError, h as deriveBootIdentityPair, i as getAgentTurnRuntime, j as VERIFICATION_CONFIG_SCENARIO, k as redactArtifactLogId, l as buildSoakDeploymentRecord, m as armBarrier, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as acceptSuccessorExecution, r as getActiveAgentTurnCount, u as evaluateSoak, v as clearGatewayRestartRecoveryRuntimeIf, w as isArtifactRegistrationError, x as RETAINED_ARTIFACT_KIND, y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-Vd3aTCni.js";
+import { A as registerBeforeCreate, C as artifactTokenFor, D as markRemoved, E as markClientRemovedAcknowledged, M as buildVerificationEnvelope, N as redactVerificationProjection, O as markRetained, P as verificationEnvelopeFingerprint, S as accountSessionArtifactsAtTerminalSweep, T as listSessionArtifacts, _ as requireProcessBootIdentityPair, a as setAgentTurnRuntime, b as installGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as isBootIdentityError, h as deriveBootIdentityPair, i as getAgentTurnRuntime, j as VERIFICATION_CONFIG_SCENARIO, k as redactArtifactLogId, l as buildSoakDeploymentRecord, m as armBarrier, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as acceptSuccessorExecution, r as getActiveAgentTurnCount, u as evaluateSoak, v as clearGatewayRestartRecoveryRuntimeIf, w as isArtifactRegistrationError, x as RETAINED_ARTIFACT_KIND, y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-BEvwtTis.js";
 import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-DZyEfnsr.js";
 import { r as resolveMemorySearchConfig } from "./manager-DehDxi2A.js";
 import "./query-expansion-BD3CL_NZ.js";
@@ -121,7 +121,7 @@ import { t as formatDocsLink } from "./links-BhLGjTwm.js";
 import { n as runCommandWithRuntime } from "./cli-utils-DWSfnwCw.js";
 import { t as formatHelpExamples } from "./help-format-DqpZruAs.js";
 import { n as withProgress } from "./progress-DRMfDm7h.js";
-import "./server-lifecycle-DrAGY_SC.js";
+import "./server-lifecycle-7QoL5fyb.js";
 import { i as parseAbsoluteTimeMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-BIZMWR_z.js";
 import { a as normalizeHttpWebhookUrl, l as normalizeOptionalText, o as inferLegacyName } from "./heartbeat-tick-CsyeD75h.js";
 import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-Cm6wsMRx.js";
@@ -136,53 +136,53 @@ import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-gv_rp-w_.
 import { n as inheritOptionFromParent } from "./command-options-6wdtBBWB.js";
 import { t as WizardCancelledError } from "./prompts-m1IJwIAx.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-CU6_xh9V.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-Ctnm8o8d.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-BcD-ZJ0N.js";
 import { t as isWithinDir } from "./path-safety-DAKUyD-v.js";
 import "./install-safe-path-DjFYmzeb.js";
-import "./npm-pack-install-B7wQANiM.js";
+import "./npm-pack-install-opyKYSmS.js";
 import "./skill-scanner-BA3h34y0.js";
-import "./installs-CpnJwZZ_.js";
+import "./installs-78zhoWuO.js";
 import { n as formatConfigIssueLines } from "./issue-format-D0G927lb.js";
 import { t as buildChannelAccountSnapshot } from "./status-B8TZsG0t.js";
 import "./channels-status-issues-C6LrjLpF.js";
 import { i as resolveGatewayClientProfile, t as WEB_CLIENT_ALLOWED_ORIGINS_CONFIG_KEY } from "./client-profiles-BNQu4_Z_.js";
 import "./daemon-install-helpers-C8mJ0UpL.js";
-import "./service-Hy5BSgmp.js";
-import "./systemd-DsBMxUv1.js";
-import "./lifecycle-core-B3-ezmTx.js";
-import "./systemd-hints-WHzM5Tf8.js";
+import "./service-C_LTJsJU.js";
+import "./systemd-D6tSdsgx.js";
+import "./lifecycle-core-M-5Z8Xml.js";
+import "./systemd-hints-DzBfweRH.js";
 import { t as parsePort$1 } from "./parse-port-p0PJP2nG.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-C5cAb15Z.js";
-import "./diagnostics-FIcvxigK.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-YmPcKhvo.js";
+import "./diagnostics-Ds3p_NPY.js";
 import "./table-DoIju7rh.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-DgeeMUtJ.js";
-import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-Bc-7t0_-.js";
-import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-CcNEpaG6.js";
+import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-6Uo_6p6X.js";
+import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-C0WHA5BX.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-C517Q6gA.js";
-import { a as noteStorageReplayResult, i as getStorageV1Snapshot, n as getStatusSummary, o as noteStorageRestartRequired, r as createStorageSupervisor, s as pickGatewaySelfPresence } from "./status-Dh0qVJb_.js";
-import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-DFat5vO5.js";
+import { a as noteStorageReplayResult, i as getStorageV1Snapshot, n as getStatusSummary, o as noteStorageRestartRequired, r as createStorageSupervisor, s as pickGatewaySelfPresence } from "./status-C5pbfqhh.js";
+import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-Q4hCJ8O2.js";
 import { a as readPostQuiesceTranscriptDelta, i as readBulkTranscriptLines, o as replaySource, r as mergeBulkTranscriptSnapshotAndDelta, t as ReplayRowConflictError } from "./replay-BHfUVVHN.js";
 import "./session-key-resolution-DDJD1XYy.js";
 import { c as waitForStopDrain, l as withTimeout, o as tasksHandlers, r as getTaskOperatorRegistry, s as retryDelayMs, t as DEFAULT_RETENTION_DAYS } from "./task-runlog-retention-BZrnJGL1.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-DonecnKL.js";
 import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-C9otZxLF.js";
-import { t as reconcileBundledInstalls } from "./reconcile-bundled-oQwTCU_A.js";
+import { t as reconcileBundledInstalls } from "./reconcile-bundled-TswjG3xv.js";
 import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-Ch9itsH4.js";
 import "./onboarding.secret-input-BCxy1JxD.js";
-import { t as runOnboardingWizard } from "./onboarding-BfpXrIw7.js";
+import { t as runOnboardingWizard } from "./onboarding-CujUbWy2.js";
 import { a as computeJobNextRunAtMs, c as findJobOrThrow, d as recomputeNextRuns, f as recomputeNextRunsForMaintenance, h as produceCronAgentTurn, i as applyJobPatch, l as isJobDue, m as resolveJobPayloadTextForMain, o as createJob, p as recordScheduleComputeError, r as resolveStaleClaimAdoptionMs, s as cronShapeSupportsIdentity, t as CRON_HEARTBEAT_ADAPTER_ID, u as nextWakeAtMs } from "./recovery-adapter-BF5ESanQ.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-uBiZYT2e.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-BmrddV2R.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-CRvbl5q3.js";
-import { a as readChatHistoryPage, c as unsubscribeSessionChanges, i as decodeHistoryCursor, l as assertValidParams, o as resolveDbLeafEntryId, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers } from "./sessions-Cy_VVMEN.js";
+import { a as readChatHistoryPage, c as unsubscribeSessionChanges, i as decodeHistoryCursor, l as assertValidParams, o as resolveDbLeafEntryId, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers } from "./sessions-Dcu0bdQ7.js";
 import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-B9A0wAU6.js";
-import "./node-service-BnwLXY5x.js";
+import "./node-service-BnyKZNqa.js";
 import "./status.update-BOB92yBQ.js";
 import { i as resolveActiveLogFile, n as readLogSlice } from "./log-tail-BAg8b5Wq.js";
 import { t as installSkill } from "./skills-install-DqCRPwE1.js";
-import { r as runGatewayUpdate } from "./update-runner-DqE_9Axt.js";
+import { r as runGatewayUpdate } from "./update-runner-DohE1D7D.js";
 import { n as resolveWebClientPackagedRootSync, t as WEB_CLIENT_BUNDLE_MISSING_MESSAGE } from "./web-client-assets-CJyKwFRS.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-CcKQx_l1.js";
-import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-CtYCnspr.js";
+import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-Bfd55UfE.js";
 import { createRequire } from "node:module";
 import { cpuUsage, memoryUsage, resourceUsage, uptime } from "node:process";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -3067,10 +3067,10 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 	const { getConfiguredSessionStorageRuntime } = await import("./model-selection-k68XU4oS.js").then((n) => n.hi);
 	const runtime = getConfiguredSessionStorageRuntime()?.runtime;
 	const gatewayInstanceId = getGatewayInstanceId();
-	const { tryGetAgentTurnRuntime } = await import("./agent-turn-runner-Vd3aTCni.js").then((n) => n.t);
+	const { tryGetAgentTurnRuntime } = await import("./agent-turn-runner-BEvwtTis.js").then((n) => n.t);
 	const backbone = tryGetAgentTurnRuntime()?.backbone;
 	const { createOutboundDeliveryRecoveryAdapter } = await import("./delivery-recovery-adapter-CXwijCdD.js");
-	const { deliverOutboundPayloads } = await import("./deliver-8xg5ISEI.js").then((n) => n.n);
+	const { deliverOutboundPayloads } = await import("./deliver-D37woOwV.js").then((n) => n.n);
 	adapters.push(createOutboundDeliveryRecoveryAdapter({
 		cfg,
 		deliver: deliverOutboundPayloads,
@@ -3084,7 +3084,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		sessionRuns = void 0;
 	}
 	if (sessionRuns && wiring?.agentTurnStager) {
-		const { createSessionRunRecoveryAdapter } = await import("./recovery-adapter-BcPtMfaC.js");
+		const { createSessionRunRecoveryAdapter } = await import("./recovery-adapter-DW0R_vFE.js");
 		adapters.push(createSessionRunRecoveryAdapter({
 			store: sessionRuns,
 			cfg,
@@ -3100,7 +3100,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		lease: wiring?.lease ? () => wiring.lease?.() ?? { isArmed: () => false } : void 0
 	}));
 	if (backbone && wiring?.agentTurnStager) {
-		const { createAgentTurnRecoveryAdapter } = await import("./agent-turn-recovery-adapter-CLY2Dn04.js");
+		const { createAgentTurnRecoveryAdapter } = await import("./agent-turn-recovery-adapter-DnvjgbK0.js");
 		adapters.push(createAgentTurnRecoveryAdapter({
 			backbone,
 			stager: wiring.agentTurnStager
@@ -3122,7 +3122,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		}));
 	}
 	if (sessionRuns) {
-		const { createEmbeddedPiRecoveryAdapter } = await import("./pi-embedded-recovery-adapter-CNdSU-s7.js");
+		const { createEmbeddedPiRecoveryAdapter } = await import("./pi-embedded-recovery-adapter-B8Goyik3.js");
 		adapters.push(createEmbeddedPiRecoveryAdapter({
 			sessionRuns,
 			cfg,
@@ -3130,7 +3130,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 			stager: wiring?.agentTurnStager,
 			isRunActive: isEmbeddedPiRunActive
 		}));
-		const { createAcpRuntimeRecoveryAdapter } = await import("./recovery-adapter-BT7EyQzh.js");
+		const { createAcpRuntimeRecoveryAdapter } = await import("./recovery-adapter-DyPV7syS.js");
 		adapters.push(createAcpRuntimeRecoveryAdapter({ sessionRuns }));
 	}
 	if (backbone) {
@@ -16294,7 +16294,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-lwnuZDvV.js");
+			const { handleNodeEvent } = await import("./server-node-events-MOX6FUiJ.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -24853,7 +24853,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.OPENCLAW_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.OPENCLAW_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./server-BMSgu_SV.js");
+	const mod = override ? await import(override) : await import("./server-BAGUd2MH.js");
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -35577,7 +35577,7 @@ async function bootGatewayServer(port, opts) {
 		const sweepLog = log.child("session-consumer-claim-sweep");
 		const { createDiagnosticRingBuffer } = await import("./session-consumer-diagnostics-UbdxGCz8.js");
 		const diagnostics = createDiagnosticRingBuffer();
-		const { setDiagnostics } = await import("./sessions-Cy_VVMEN.js").then((n) => n.n);
+		const { setDiagnostics } = await import("./sessions-Dcu0bdQ7.js").then((n) => n.n);
 		if (sessionConsumerClaimSweepCancelled) return;
 		setDiagnostics(diagnostics);
 		const lastKnownEnabledState = /* @__PURE__ */ new Map();
@@ -35616,7 +35616,7 @@ async function bootGatewayServer(port, opts) {
 					lastKnownEnabledState,
 					cfg: loadConfig()
 				});
-				const { setLastSweepTimestamp } = await import("./sessions-Cy_VVMEN.js").then((n) => n.n);
+				const { setLastSweepTimestamp } = await import("./sessions-Dcu0bdQ7.js").then((n) => n.n);
 				setLastSweepTimestamp(Date.now());
 			} catch (err) {
 				sweepLog.warn(`session consumer-claim sweep failed: ${String(err)}`);
@@ -35638,7 +35638,7 @@ async function bootGatewayServer(port, opts) {
 			prepare: () => {
 				taskPipelineBoot = (async () => {
 					const { getConfiguredSessionStorageRuntime } = await import("./model-selection-k68XU4oS.js").then((n) => n.hi);
-					const { startTaskPipeline } = await import("./task-pipeline-boot-UcskPjY2.js");
+					const { startTaskPipeline } = await import("./task-pipeline-boot-DKqT4VdZ.js");
 					const pipeline = startTaskPipeline({
 						getConfigured: getConfiguredSessionStorageRuntime,
 						cfg: cfgAtStart,

package/dist/{github-copilot-token-WSjo05vB.js → github-copilot-token-zGOMIGSh.js}

@@ -1,13 +1,13 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { c as resolveStateDir } from "./paths-Cvc9EM8Y.js";
+import { c as resolveStateDir } from "./paths-C6TxBCvO.js";
 import path from "node:path";
-import fs from "node:fs";
+import syncFs from "node:fs";
 
 //#region src/infra/json-file.ts
 function loadJsonFile(pathname) {
 	try {
-		if (!fs.existsSync(pathname)) return;
-		const raw = fs.readFileSync(pathname, "utf8");
+		if (!syncFs.existsSync(pathname)) return;
+		const raw = syncFs.readFileSync(pathname, "utf8");
 		return JSON.parse(raw);
 	} catch {
 		return;
@@ -15,12 +15,12 @@ function loadJsonFile(pathname) {
 }
 function saveJsonFile(pathname, data) {
 	const dir = path.dirname(pathname);
-	if (!fs.existsSync(dir)) fs.mkdirSync(dir, {
+	if (!syncFs.existsSync(dir)) syncFs.mkdirSync(dir, {
 		recursive: true,
 		mode: 448
 	});
-	fs.writeFileSync(pathname, `${JSON.stringify(data, null, 2)}\n`, "utf8");
-	fs.chmodSync(pathname, 384);
+	syncFs.writeFileSync(pathname, `${JSON.stringify(data, null, 2)}\n`, "utf8");
+	syncFs.chmodSync(pathname, 384);
 }
 
 //#endregion

package/dist/{health-Cooqit6V.js → health-Cxv6ou16.js}

@@ -6,8 +6,8 @@ import { Da as listChannelPlugins, Ea as getChannelPlugin, Nn as loadSessionStor
 import { d as normalizeAgentId } from "./session-key-D4YLCjDF.js";
 import { d as resolveDefaultAgentId } from "./agent-scope-Dt0TVWFY.js";
 import { m as resolveStorePath } from "./artifacts-C9Cr_S5Y.js";
-import { i as resolveHeartbeatSummaryForAgent } from "./agent-turn-execute-Bw9hhkAP.js";
-import { y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-CUCOdxhH.js";
+import { i as resolveHeartbeatSummaryForAgent } from "./agent-turn-execute-CzOC4mHw.js";
+import { y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-C1u8sVfA.js";
 import { i as formatErrorMessage } from "./errors-Bf0TUXNT.js";
 import { r as callGatewayCli, t as buildGatewayConnectionDetails } from "./call-BIVg1gmJ.js";
 import { t as formatDurationCompact } from "./format-duration-CsAbUoUJ.js";

package/dist/{health-DFat5vO5.js → health-Q4hCJ8O2.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { F as isRich, I as theme, T as info } from "./utils-CMEUUHmM.js";
-import { y as resolveHeartbeatSummaryForAgent } from "./reply-BzUdF5qW.js";
+import { y as resolveHeartbeatSummaryForAgent } from "./reply-B4TgvJrJ.js";
 import { d as resolveDefaultAgentId } from "./agent-scope-CWTkr4pS.js";
 import { t as createSubsystemLogger } from "./subsystem-DDZBycwS.js";
 import { d as normalizeAgentId } from "./session-key-B1wN38jV.js";
@@ -10,7 +10,7 @@ import { m as resolveStorePath } from "./artifacts-qv_OgPMd.js";
 import { i as formatErrorMessage } from "./errors-z_JCBnTo.js";
 import { r as callGatewayCli, t as buildGatewayConnectionDetails } from "./call-Cl6Q0T5z.js";
 import { t as formatDurationCompact } from "./format-duration-XLSvPvzN.js";
-import { y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-Vd3aTCni.js";
+import { y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-BEvwtTis.js";
 import { n as withProgress } from "./progress-DRMfDm7h.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-CU6_xh9V.js";
 

package/dist/{hooks-cli-CB-96Su8.js → hooks-cli-ChZY2urb.js}

@@ -1,7 +1,7 @@
 import "./paths-BBP4yd-2.js";
 import { I as theme, ct as isPathInsideWithRealpath, g as resolveUserPath, st as isPathInside, t as CONFIG_DIR, y as shortenHomePath } from "./utils-CMEUUHmM.js";
 import "./thinking-DDYFn78t.js";
-import "./reply-BzUdF5qW.js";
+import "./reply-B4TgvJrJ.js";
 import { d as resolveDefaultAgentId, u as resolveAgentWorkspaceDir } from "./agent-scope-CWTkr4pS.js";
 import { m as defaultRuntime } from "./subsystem-DDZBycwS.js";
 import "./logger-0VqfDbvM.js";
@@ -22,11 +22,11 @@ import { t as readManifestNamespace } from "./legacy-names-Cj47SC7a.js";
 import "./static-server-C-iTMRyz.js";
 import "./path-alias-guards-BSmwo1rT.js";
 import "./fs-safe-DD7KXuvI.js";
-import "./audio-transcription-runner-CGTNNwbm.js";
+import "./audio-transcription-runner-BvZFFknx.js";
 import "./fetch-guard-CjyGDRXN.js";
 import "./ssrf-B85AIIOO.js";
 import "./proxy-fetch-Czv8kxaL.js";
-import "./pi-embedded-helpers-i0-tPaxH.js";
+import "./pi-embedded-helpers-CPorV-Mk.js";
 import "./local-roots-_qt4-Ma5.js";
 import "./image-ops-DcqCZEUY.js";
 import "./redact-CQtYLB4a.js";
@@ -34,17 +34,17 @@ import "./errors-z_JCBnTo.js";
 import "./models-config-Burwt3mB.js";
 import "./model-catalog-C7itJJDM.js";
 import "./api-key-rotation-BEt1ZchD.js";
-import "./provider-image-CZlpEJVI.js";
+import "./provider-image-CIpRvhkS.js";
 import "./pi-model-discovery-CfUi22Es.js";
-import "./pi-embedded-utils-BtOzugyp.js";
-import "./sandbox-bbN1dfIo.js";
+import "./pi-embedded-utils-lp-U3XQ9.js";
+import "./sandbox-DbfWdQha.js";
 import "./tool-catalog-B6wH7-iE.js";
 import "./extension-relay-auth-C-1c9CZk.js";
 import { u as promptYesNo } from "./tailscale-DbsrfsUT.js";
 import "./tailnet-G5phL2pY.js";
 import "./ws-BuVK_u9S.js";
 import "./auth-DeLQvx-N.js";
-import "./server-context-Bbi-nqKD.js";
+import "./server-context-FPrSnBNG.js";
 import "./frontmatter-B8Zb_8go.js";
 import { S as validateRegistryNpmSpec } from "./skills-Buc1RWDY.js";
 import "./store-DoqX9VsZ.js";
@@ -58,7 +58,7 @@ import "./outbound-message-hooks-t1DDjQX_.js";
 import "./commands-tFdLuF5k.js";
 import "./commands-registry-BMswme6t.js";
 import "./registry-D9ygkK-J.js";
-import "./agent-turn-enqueue-Cqo34Swm.js";
+import "./agent-turn-enqueue-DzWOPhgy.js";
 import "./client-BbpMX08n.js";
 import "./call-Cl6Q0T5z.js";
 import "./pairing-token-A_0lRJCJ.js";
@@ -70,13 +70,13 @@ import "./exec-safe-bin-runtime-policy-KSPaR73B.js";
 import "./nodes-screen-BRZLdw3g.js";
 import "./system-run-command-AF8TLlEl.js";
 import "./diagnostic-session-state-C6JXU3l4.js";
-import "./diagnostic-D7DvV7NT.js";
-import "./runs-DVNBpgv0.js";
-import "./command-queue-DmXWCoY0.js";
+import "./diagnostic-Cid_Tw67.js";
+import "./runs-B0TxOQnF.js";
+import "./command-queue-DtybAhHH.js";
 import "./reply-prefix-D0xrt6Z-.js";
-import "./deliver-8xg5ISEI.js";
-import "./with-timeout-CII3PkDO.js";
-import "./send-CvkM5xAx.js";
+import "./deliver-D37woOwV.js";
+import "./with-timeout-DD5bV7yq.js";
+import "./send-DAYMV49d.js";
 import "./model-BI6n6kVo.js";
 import "./session-consumer-agents-DWh7Mygv.js";
 import "./chunk-BDQQgsxn.js";
@@ -92,7 +92,7 @@ import "./outbound-attachment-Bg7WvYcG.js";
 import "./delivery-queue-DhBE3s1K.js";
 import "./send-26KAC8EW.js";
 import "./resolve-route-DnhX9nWr.js";
-import "./pi-tools.policy-DPm2eos4.js";
+import "./pi-tools.policy-r9H_A-NQ.js";
 import "./tables-CzW-cMQN.js";
 import "./proxy-Df2WAHRA.js";
 import "./replies-DoejQAqN.js";
@@ -106,7 +106,7 @@ import "./onboard-helpers-ziqfw3UR.js";
 import "./prompt-style-D0wRuIYC.js";
 import "./pairing-labels-CGUWaZ3f.js";
 import "./session-meta-DzjDKcgW.js";
-import "./agent-turn-runner-Vd3aTCni.js";
+import "./agent-turn-runner-BEvwtTis.js";
 import "./memory-cli-DZyEfnsr.js";
 import "./manager-DehDxi2A.js";
 import "./query-expansion-BD3CL_NZ.js";
@@ -114,17 +114,17 @@ import { t as formatDocsLink } from "./links-BhLGjTwm.js";
 import "./cli-utils-DWSfnwCw.js";
 import "./help-format-DqpZruAs.js";
 import "./progress-DRMfDm7h.js";
-import "./server-lifecycle-DrAGY_SC.js";
+import "./server-lifecycle-7QoL5fyb.js";
 import "./stagger-BIZMWR_z.js";
 import "./heartbeat-tick-CsyeD75h.js";
 import "./redact-snapshot-Cm6wsMRx.js";
 import "./session-cost-usage-pjXSgi_U.js";
 import { a as unscopedPackageName, c as fileExists, l as readJsonFile, n as resolveSafeInstallDir, u as resolveArchiveKind } from "./install-safe-path-DjFYmzeb.js";
-import { a as installPackageDir, c as resolveTimedInstallModeOptions, f as resolveArchiveSourcePath, i as resolveCanonicalInstallTarget, l as resolveExistingInstallPath, n as installFromNpmSpecArchiveWithInstaller, o as installPackageDirWithManifestDeps, r as ensureInstallTargetAvailable, s as resolveInstallModeOptions, t as finalizeNpmSpecArchiveInstall, u as withExtractedArchiveRoot } from "./npm-pack-install-B7wQANiM.js";
+import { a as installPackageDir, c as resolveTimedInstallModeOptions, f as resolveArchiveSourcePath, i as resolveCanonicalInstallTarget, l as resolveExistingInstallPath, n as installFromNpmSpecArchiveWithInstaller, o as installPackageDirWithManifestDeps, r as ensureInstallTargetAvailable, s as resolveInstallModeOptions, t as finalizeNpmSpecArchiveInstall, u as withExtractedArchiveRoot } from "./npm-pack-install-opyKYSmS.js";
 import { t as renderTable } from "./table-DoIju7rh.js";
 import { a as parseFrontmatter, t as loadWorkspaceHookEntries } from "./workspace-CcKQx_l1.js";
 import { t as buildWorkspaceHookStatus } from "./hooks-status-D20U_9R-.js";
-import { i as buildPluginStatusReport, n as resolvePinnedNpmInstallRecordForCli, r as looksLikeLocalInstallSpec, t as buildNpmInstallRecordFields } from "./npm-resolution-SdoNL0ud.js";
+import { i as buildPluginStatusReport, n as resolvePinnedNpmInstallRecordForCli, r as looksLikeLocalInstallSpec, t as buildNpmInstallRecordFields } from "./npm-resolution-6WKQ6nBu.js";
 import fs from "node:fs";
 import path from "node:path";
 import fs$1 from "node:fs/promises";

package/dist/{hooks-cli-yNAgxRQS.js → hooks-cli-DOHX--ha.js}

@@ -13,23 +13,23 @@ import "./retry-policy-BdHwnvOa.js";
 import "./artifacts-C9Cr_S5Y.js";
 import "./send-B_t3X0hK.js";
 import "./send-BBFfvgK9.js";
-import "./agent-turn-execute-Bw9hhkAP.js";
+import "./agent-turn-execute-CzOC4mHw.js";
 import "./chat-envelope-DfuAGxmg.js";
 import "./task-run-types-B6n0W8Rb.js";
 import { t as readManifestNamespace } from "./legacy-names-B-dBDyT6.js";
 import "./static-server-CRGPIP-a.js";
-import "./agent-turn-enqueue-N-q0v3mc.js";
-import "./agent-turn-runner-CUCOdxhH.js";
+import "./agent-turn-enqueue-DEStltEg.js";
+import "./agent-turn-runner-C1u8sVfA.js";
 import "./recorder-Ca_njjjH.js";
-import "./pi-embedded-helpers-BU47jdPO.js";
-import "./sandbox-QsMPF2u6.js";
+import "./pi-embedded-helpers-BAjtRn7m.js";
+import "./sandbox-CQwpubTx.js";
 import "./tool-catalog-BWgva5h1.js";
 import "./extension-relay-auth-DD-U9VUc.js";
 import { l as promptYesNo } from "./tailscale-BrZL_MiW.js";
 import "./tailnet-BSKE3pk_.js";
 import "./ws-DESjYW7M.js";
 import "./auth-Cx-Q9zgv.js";
-import "./server-context-CTilcbO4.js";
+import "./server-context-BUX61Gwl.js";
 import "./frontmatter-Dn2qUSOb.js";
 import { S as validateRegistryNpmSpec } from "./skills-D3kpiNaJ.js";
 import "./path-alias-guards-CHFrrzxZ.js";
@@ -46,12 +46,12 @@ import "./server-middleware-CrJMxxfQ.js";
 import "./thinking-NawgaQgc.js";
 import "./reply-prefix-B8M4IWrd.js";
 import "./tokens-B6PaaeVv.js";
-import "./with-timeout-BvxLQUTs.js";
+import "./with-timeout-1SSQaGSz.js";
 import "./outbound-message-hooks-BBtH97ZV.js";
-import "./diagnostic-Dv8UWiI0.js";
+import "./diagnostic-lG00b_zg.js";
 import "./diagnostic-session-state-DCr9T3zW.js";
-import "./command-queue-URs9pYSC.js";
-import "./send-BKkvuHI9.js";
+import "./command-queue-zXu22yak.js";
+import "./send-l57G-s8y.js";
 import "./model-BbeosLtF.js";
 import "./pi-model-discovery-CZ9wxcE8.js";
 import "./models-config-BMgEFu57.js";
@@ -60,12 +60,12 @@ import "./exec-safe-bin-runtime-policy-C3eU8CKJ.js";
 import "./session-consumer-agents-5ORspv9c.js";
 import "./model-catalog-Bjfzg68Q.js";
 import "./fetch-ByEEe-Yd.js";
-import "./audio-transcription-runner-BD7UgbNj.js";
+import "./audio-transcription-runner-CJ8YdMv-.js";
 import "./fetch-guard-BzXFjlMV.js";
 import "./proxy-fetch-BqVhGKFd.js";
 import "./api-key-rotation-DiMQTef3.js";
-import "./provider-image-UXLX6qTH.js";
-import "./pi-embedded-utils-8OzPnJMh.js";
+import "./provider-image-D9B_J5Ys.js";
+import "./pi-embedded-utils-CT_f_S3Y.js";
 import "./tool-display-DiZGbhL2.js";
 import "./chunk-DiXpyRAz.js";
 import "./markdown-tables-BcUNsqVQ.js";
@@ -77,8 +77,8 @@ import "./registry-DXmhuMNN.js";
 import "./client-BMkNNUux.js";
 import "./call-BIVg1gmJ.js";
 import "./pairing-token-BfRB0jVM.js";
-import "./runs-i5IuTzQX.js";
-import "./deliver-C5SDo7TP.js";
+import "./runs-BMp7jOLL.js";
+import "./deliver-Aw7d03gL.js";
 import "./user-run-recording-DXNyfjMq.js";
 import "./fetch--Fn4tlfW.js";
 import "./pairing-store-BZFrD-fJ.js";
@@ -92,10 +92,10 @@ import "./redact-snapshot--nD7TrF-.js";
 import "./channel-activity-SqK9nKf7.js";
 import "./tables-CCEXTXTG.js";
 import "./session-cost-usage-BTDAzt-T.js";
-import "./server-lifecycle-BIOS9ErD.js";
+import "./server-lifecycle-DXRap2AR.js";
 import "./stagger-CT5G1TCV.js";
 import "./heartbeat-tick-By0WI8YD.js";
-import "./dm-policy-shared-BLJbsZzf.js";
+import "./dm-policy-shared-BJNH9gNN.js";
 import "./reply-directives-Bc2RQAcJ.js";
 import "./channel-selection-DfNPCJXK.js";
 import "./polling-timeout-DoMlNx_D.js";
@@ -120,11 +120,11 @@ import "./cli-utils-aSBNHQae.js";
 import "./help-format-DuL_Y84f.js";
 import "./progress-Dc4ihErK.js";
 import { a as unscopedPackageName, c as fileExists, l as readJsonFile, n as resolveSafeInstallDir, u as resolveArchiveKind } from "./install-safe-path-4YfMRsxN.js";
-import { a as installPackageDir, c as resolveTimedInstallModeOptions, f as resolveArchiveSourcePath, i as resolveCanonicalInstallTarget, l as resolveExistingInstallPath, n as installFromNpmSpecArchiveWithInstaller, o as installPackageDirWithManifestDeps, r as ensureInstallTargetAvailable, s as resolveInstallModeOptions, t as finalizeNpmSpecArchiveInstall, u as withExtractedArchiveRoot } from "./npm-pack-install-DcBobJp3.js";
+import { a as installPackageDir, c as resolveTimedInstallModeOptions, f as resolveArchiveSourcePath, i as resolveCanonicalInstallTarget, l as resolveExistingInstallPath, n as installFromNpmSpecArchiveWithInstaller, o as installPackageDirWithManifestDeps, r as ensureInstallTargetAvailable, s as resolveInstallModeOptions, t as finalizeNpmSpecArchiveInstall, u as withExtractedArchiveRoot } from "./npm-pack-install-B-cOWuiF.js";
 import { t as renderTable } from "./table-H366JkfJ.js";
 import { a as parseFrontmatter, t as loadWorkspaceHookEntries } from "./workspace-DkkkJ4GX.js";
 import { t as buildWorkspaceHookStatus } from "./hooks-status-C6mtKL68.js";
-import { i as buildPluginStatusReport, n as resolvePinnedNpmInstallRecordForCli, r as looksLikeLocalInstallSpec, t as buildNpmInstallRecordFields } from "./npm-resolution-B0rqOBgy.js";
+import { i as buildPluginStatusReport, n as resolvePinnedNpmInstallRecordForCli, r as looksLikeLocalInstallSpec, t as buildNpmInstallRecordFields } from "./npm-resolution-51BBOWpQ.js";
 import path from "node:path";
 import fs from "node:fs";
 import fs$1 from "node:fs/promises";

package/dist/{image-ops-O8pHxo7i.js → image-ops-D_fm2PuR.js}

@@ -1,4 +1,4 @@
-import { _ as runExec } from "./workspace-Dbn4gFdH.js";
+import { _ as runExec } from "./workspace-B707AGIc.js";
 import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";