wednesdayai 0.4.12-dev.719 → 0.4.12-dev.721

package/dist/{gateway-cli-BJ9wa3Hc.js → gateway-cli-3YUOWIal.js}

@@ -17,17 +17,17 @@ import { c as optionalStringEnum, l as stringEnum } from "./retry-policy-BdHwnvO
 import { c as resolveSessionFilePath, l as resolveSessionFilePathOptions, m as resolveStorePath, p as resolveSessionTranscriptsDirForAgent, u as resolveSessionTranscriptPath } from "./artifacts-C9Cr_S5Y.js";
 import "./send-B_t3X0hK.js";
 import "./send-BBFfvgK9.js";
-import { $ as buildHistoryContextFromEntries, $n as getTtsProvider, $t as consumeGatewaySigusr1RestartAuthorization, A as loadOpenClawPlugins, An as extractImageContentFromSource, Bt as buildSafeExternalPrompt, C as buildDefaultToolPolicyPipelineSteps, Ct as resetDirectoryCache, Dn as DEFAULT_INPUT_MAX_REDIRECTS, Dt as consumeRestartSentinel, E as resolvePluginTools, En as DEFAULT_INPUT_IMAGE_MIMES, F as resolveAgentOutboundIdentity, Fn as isAbortRequestText, Ft as normalizeCronJobPatch, G as resolveAgentOutboundTarget, Gn as clearSessionQueues, Gt as persistBrowserProxyFiles, H as agentCommandFromIngress, Hn as resolveAnnounceTargetFromKey, Ht as getHookType, It as migrateLegacyCronPayload, J as createOutboundSendDeps$1, Jn as getAcpSessionManager, K as createOutboundSendDeps, Kn as getExistingFollowupQueue, Kt as resolveSessionAuthProfileOverride, L as handleSlackHttpRequest, Ln as countActiveDescendantRuns, Lt as buildDeliveryFromLegacyPayload, M as createPluginRuntime, Mn as resolveInputFileLimits, N as requestNudge, Nt as writeRestartSentinel, O as clearPluginRegistryCaches, On as DEFAULT_INPUT_TIMEOUT_MS, Ot as formatDoctorNonInteractiveHint, Pn as resolveSendPolicy, Pt as normalizeCronJobCreate, Qn as DEFAULT_MAX_PARALLEL, R as readJsonBodyWithLimit, Rn as initSubagentRegistry, Rt as hasLegacyDeliveryHints, S as applyToolPolicyPipeline, T as getPluginToolMeta, Tn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Tt as runWithModelFallback, Un as readLatestAssistantReply, Ut as isExternalHookSession, Vn as runSubagentAnnounceFlow, Vt as detectSuspiciousPatterns, W as resolveAgentDeliveryPlan, Wn as resolveAgentTimeoutMs, Wt as applyBrowserProxyPaths, Xn as ToolInputError, Y as resolveAgentAvatar, Yn as resolveAgentSessionDirs, Zn as setTaskPipelineStatus, _ as prepareSessionManagerForRun, _n as isSystemEventContextChanged, _t as resolveOutboundSessionRoute, a as runHeartbeatOnce, an as setGatewaySigusr1RestartPolicy, ar as resolveTtsPrefsPath, bt as resolveSessionDeliveryTarget, c as startHeartbeatRunner, cr as setTtsProvider, d as getLastHeartbeatEvent, dr as OPENAI_TTS_VOICES, dt as getCliSessionId, en as deferGatewayRestartUntilIdle, er as isTtsEnabled, f as onHeartbeatEvent, fr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, ft as setCliSessionId, g as runEmbeddedPiAgent, gn as enqueueSystemEvent, gt as ensureOutboundSessionEntry, h as resolveCronSession, hr as resolveUserTimezone, i as resolveHeartbeatSummaryForAgent, in as scheduleGatewaySigusr1Restart, ir as resolveTtsConfig, it as getTotalPendingReplies, j as takePendingActivationMigration, jn as normalizeMimeList, jt as summarizeRestartSentinel, k as getLoadedAnalysisConcurrency, kn as extractFileContentFromSource, kt as formatRestartSentinelMessage, l as runWakeGate, lr as textToSpeech, lt as resolveChannelAccountEnabled, m as isCronSystemEvent, mr as resolveCronStyleNow, mt as createOpenClawTools, n as runMainAgentTurn, nn as isGatewaySigusr1RestartExternallyAllowed, nr as resolveTtsApiKey, nt as setDispatchInboundAdmissionRejectionFor, on as setPreRestartDeferralCheck, or as resolveTtsProviderOrder, p as redactSensitiveHeartbeatEvent, pr as stripHeartbeatToken, pt as runCliAgent, q as createDefaultDeps, qn as removeQueuedFollowupRun, r as resolveHeartbeatConfig, rn as markGatewaySigusr1RestartHandled, rr as resolveTtsAutoMode, rt as createReplyDispatcher, s as setHeartbeatsEnabled, sn as triggerOpenClawRestart, sr as setTtsEnabled, tn as emitGatewayRestart, tr as isTtsProviderConfigured, tt as dispatchInboundMessage, u as resolveHeartbeatVisibility, un as loadProviderUsageSummary, ur as OPENAI_TTS_MODELS, ut as BARE_SESSION_RESET_PROMPT, v as snapshotRunPendingWrites, vt as resolveHeartbeatDeliveryTarget, wn as ACP_SESSION_IDENTITY_RENDERER_VERSION, x as resolveExecConfig, xn as requestHeartbeatNow, xt as resolveOutboundChannelPlugin, y as waitForPendingWrites, yt as resolveOutboundTarget, z as requestBodyErrorToText, zn as listDescendantRunsForRequester, zt as stripLegacyDeliveryFields } from "./agent-turn-execute-CzOC4mHw.js";
+import { $ as buildHistoryContextFromEntries, $n as DEFAULT_MAX_PARALLEL, $t as consumeGatewaySigusr1RestartAuthorization, A as loadOpenClawPlugins, An as extractImageContentFromSource, Bt as buildSafeExternalPrompt, C as buildDefaultToolPolicyPipelineSteps, Ct as resetDirectoryCache, Dn as DEFAULT_INPUT_MAX_REDIRECTS, Dt as consumeRestartSentinel, E as resolvePluginTools, En as DEFAULT_INPUT_IMAGE_MIMES, F as resolveAgentOutboundIdentity, Fn as isAbortRequestText, Ft as normalizeCronJobPatch, G as resolveAgentOutboundTarget, Gn as clearSessionQueues, Gt as persistBrowserProxyFiles, H as agentCommandFromIngress, Hn as resolveAnnounceTargetFromKey, Ht as getHookType, It as migrateLegacyCronPayload, J as createOutboundSendDeps$1, Jn as getAcpSessionManager, K as createOutboundSendDeps, Kn as getExistingFollowupQueue, Kt as resolveSessionAuthProfileOverride, L as handleSlackHttpRequest, Ln as countActiveDescendantRuns, Lt as buildDeliveryFromLegacyPayload, M as createPluginRuntime, Mn as resolveInputFileLimits, N as requestNudge, Nt as writeRestartSentinel, O as clearPluginRegistryCaches, On as DEFAULT_INPUT_TIMEOUT_MS, Ot as formatDoctorNonInteractiveHint, Pn as resolveSendPolicy, Pt as normalizeCronJobCreate, Qn as setTaskPipelineStatus, R as readJsonBodyWithLimit, Rn as initSubagentRegistry, Rt as hasLegacyDeliveryHints, S as applyToolPolicyPipeline, T as getPluginToolMeta, Tn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Tt as runWithModelFallback, Un as readLatestAssistantReply, Ut as isExternalHookSession, Vn as runSubagentAnnounceFlow, Vt as detectSuspiciousPatterns, W as resolveAgentDeliveryPlan, Wn as resolveAgentTimeoutMs, Wt as applyBrowserProxyPaths, Xn as ToolInputError, Y as resolveAgentAvatar, Yn as resolveAgentSessionDirs, _ as prepareSessionManagerForRun, _n as isSystemEventContextChanged, _t as resolveOutboundSessionRoute, a as runHeartbeatOnce, an as setGatewaySigusr1RestartPolicy, ar as resolveTtsConfig, bt as resolveSessionDeliveryTarget, c as startHeartbeatRunner, cr as setTtsEnabled, d as getLastHeartbeatEvent, dr as OPENAI_TTS_MODELS, dt as getCliSessionId, en as deferGatewayRestartUntilIdle, er as getTtsProvider, f as onHeartbeatEvent, fr as OPENAI_TTS_VOICES, ft as setCliSessionId, g as runEmbeddedPiAgent, gn as enqueueSystemEvent, gr as resolveUserTimezone, gt as ensureOutboundSessionEntry, h as resolveCronSession, hr as resolveCronStyleNow, i as resolveHeartbeatSummaryForAgent, in as scheduleGatewaySigusr1Restart, ir as resolveTtsAutoMode, it as getTotalPendingReplies, j as takePendingActivationMigration, jn as normalizeMimeList, jt as summarizeRestartSentinel, k as getLoadedAnalysisConcurrency, kn as extractFileContentFromSource, kt as formatRestartSentinelMessage, l as runWakeGate, lr as setTtsProvider, lt as resolveChannelAccountEnabled, m as isCronSystemEvent, mr as stripHeartbeatToken, mt as createOpenClawTools, n as runMainAgentTurn, nn as isGatewaySigusr1RestartExternallyAllowed, nr as isTtsProviderConfigured, nt as setDispatchInboundAdmissionRejectionFor, on as setPreRestartDeferralCheck, or as resolveTtsPrefsPath, p as redactSensitiveHeartbeatEvent, pr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, pt as runCliAgent, q as createDefaultDeps, qn as removeQueuedFollowupRun, r as resolveHeartbeatConfig, rn as markGatewaySigusr1RestartHandled, rr as resolveTtsApiKey, rt as createReplyDispatcher, s as setHeartbeatsEnabled, sn as triggerOpenClawRestart, sr as resolveTtsProviderOrder, tn as emitGatewayRestart, tr as isTtsEnabled, tt as dispatchInboundMessage, u as resolveHeartbeatVisibility, un as loadProviderUsageSummary, ur as textToSpeech, ut as BARE_SESSION_RESET_PROMPT, v as snapshotRunPendingWrites, vt as resolveHeartbeatDeliveryTarget, wn as ACP_SESSION_IDENTITY_RENDERER_VERSION, x as resolveExecConfig, xn as requestHeartbeatNow, xt as resolveOutboundChannelPlugin, y as waitForPendingWrites, yt as resolveOutboundTarget, z as requestBodyErrorToText, zn as listDescendantRunsForRequester, zt as stripLegacyDeliveryFields } from "./agent-turn-execute-pkDSwyuf.js";
 import { l as deriveSessionTotalTokens, u as hasNonzeroUsage } from "./chat-envelope-DfuAGxmg.js";
 import { c as isDiagnosticsEnabled, l as onDiagnosticEvent, s as emitDiagnosticEvent } from "./task-run-types-B6n0W8Rb.js";
 import { n as USER_CLIENT_ID, o as buildUserClientRuntimeConfig, s as handleUserClientHttpRequest } from "./static-server-CRGPIP-a.js";
 import { t as redactIdentifier } from "./redact-identifier-BcqQpFrh.js";
-import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-DEStltEg.js";
+import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-CsHMHVsf.js";
 import { t as CommandLane } from "./lanes-BN1DVTrA.js";
-import { A as registerBeforeCreate, C as artifactTokenFor, D as markRemoved, E as markClientRemovedAcknowledged, M as buildVerificationEnvelope, N as redactVerificationProjection, O as markRetained, P as verificationEnvelopeFingerprint, S as accountSessionArtifactsAtTerminalSweep, T as listSessionArtifacts, _ as requireProcessBootIdentityPair, a as setAgentTurnRuntime, b as installGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as isBootIdentityError, h as deriveBootIdentityPair, i as getAgentTurnRuntime, j as VERIFICATION_CONFIG_SCENARIO, k as redactArtifactLogId, l as buildSoakDeploymentRecord, m as armBarrier, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as acceptSuccessorExecution, r as getActiveAgentTurnCount, u as evaluateSoak, v as clearGatewayRestartRecoveryRuntimeIf, w as isArtifactRegistrationError, x as RETAINED_ARTIFACT_KIND, y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-C1u8sVfA.js";
+import { A as registerBeforeCreate, C as artifactTokenFor, D as markRemoved, E as markClientRemovedAcknowledged, M as buildVerificationEnvelope, N as redactVerificationProjection, O as markRetained, P as verificationEnvelopeFingerprint, S as accountSessionArtifactsAtTerminalSweep, T as listSessionArtifacts, _ as requireProcessBootIdentityPair, a as setAgentTurnRuntime, b as installGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as isBootIdentityError, h as deriveBootIdentityPair, i as getAgentTurnRuntime, j as VERIFICATION_CONFIG_SCENARIO, k as redactArtifactLogId, l as buildSoakDeploymentRecord, m as armBarrier, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as acceptSuccessorExecution, r as getActiveAgentTurnCount, u as evaluateSoak, v as clearGatewayRestartRecoveryRuntimeIf, w as isArtifactRegistrationError, x as RETAINED_ARTIFACT_KIND, y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-DoHGgNPh.js";
 import { a as getGatewayInstanceId, o as resolveSessionRunStore, t as createSessionRunRecorder } from "./recorder-Ca_njjjH.js";
-import "./pi-embedded-helpers-BAjtRn7m.js";
-import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-CQwpubTx.js";
+import "./pi-embedded-helpers-C9XqX-Jq.js";
+import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-BpdiWabc.js";
 import { i as listCoreToolSections, n as PROFILE_OPTIONS, o as resolveCoreToolProfiles } from "./tool-catalog-BWgva5h1.js";
 import { i as resolveRelayAuthTokenForPort, n as resolveGatewayRelayToken } from "./extension-relay-auth-DD-U9VUc.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-BrZL_MiW.js";
@@ -35,7 +35,7 @@ import { t as safeEqualSecret } from "./secret-equal-CQn9WoXt.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-BSKE3pk_.js";
 import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-DESjYW7M.js";
 import { a as isDirectLoopbackProvenance, c as AUTH_RATE_LIMIT_SCOPE_BROWSER_EXTENSION, d as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, f as createAuthRateLimiter, i as captureTransportProvenance, l as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, n as authorizeHttpGatewayConnect, o as isLocalDirectRequest, p as normalizeRateLimitClientIp, r as authorizeWsControlUiGatewayConnect, s as resolveGatewayAuth, t as assertGatewayAuthConfigured, u as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH } from "./auth-Cx-Q9zgv.js";
-import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-BUX61Gwl.js";
+import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-BEjWhzMi.js";
 import { d as hasBinary } from "./frontmatter-Dn2qUSOb.js";
 import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-D3kpiNaJ.js";
 import { n as assertNoPathAliasEscape } from "./path-alias-guards-CHFrrzxZ.js";
@@ -53,12 +53,12 @@ import "./server-middleware-CrJMxxfQ.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-NawgaQgc.js";
 import { a as resolveAgentIdentity, t as createReplyPrefixOptions } from "./reply-prefix-B8M4IWrd.js";
 import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-B6PaaeVv.js";
-import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-1SSQaGSz.js";
+import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-CpZZ4mMw.js";
 import { f as getGlobalHookRunner, h as runGlobalGatewayStopSafely, m as resetGlobalHookRunner, u as buildOutboundSessionContext } from "./outbound-message-hooks-BBtH97ZV.js";
-import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-lG00b_zg.js";
+import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-u64kcpDQ.js";
 import { u as snapshotActiveRuns } from "./diagnostic-session-state-DCr9T3zW.js";
-import { a as getActiveTaskCount, c as getTotalQueueSize, d as setCommandLaneConcurrency, f as setGatewayDrainState, l as markGatewayDraining, p as waitForActiveTasks, u as resetAllLanes } from "./command-queue-zXu22yak.js";
-import { F as resolveCronStorePath, I as saveCronStore, P as loadCronStore, S as collectTelegramDuplicatePollerDiagnostics } from "./send-l57G-s8y.js";
+import { a as getActiveTaskCount, c as getTotalQueueSize, d as resetAllLanes, f as setCommandLaneConcurrency, m as waitForActiveTasks, p as setGatewayDrainState, u as markGatewayDraining } from "./command-queue-B3_VRNOr.js";
+import { F as resolveCronStorePath, I as saveCronStore, P as loadCronStore, S as collectTelegramDuplicatePollerDiagnostics } from "./send-CZsC4D3G.js";
 import { n as resolveModel } from "./model-BbeosLtF.js";
 import "./pi-model-discovery-CZ9wxcE8.js";
 import "./models-config-BMgEFu57.js";
@@ -67,12 +67,12 @@ import "./exec-safe-bin-runtime-policy-C3eU8CKJ.js";
 import "./session-consumer-agents-5ORspv9c.js";
 import { n as loadModelCatalog } from "./model-catalog-Bjfzg68Q.js";
 import "./fetch-ByEEe-Yd.js";
-import { D as registerUnhandledRejectionHandler, _ as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, f as resolveModelEntries, n as buildProviderRegistry, u as resolveCapabilityConfig, v as listAutoDetectableProviders, y as normalizeMediaProviderId } from "./audio-transcription-runner-CJ8YdMv-.js";
+import { D as registerUnhandledRejectionHandler, _ as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, f as resolveModelEntries, n as buildProviderRegistry, u as resolveCapabilityConfig, v as listAutoDetectableProviders, y as normalizeMediaProviderId } from "./audio-transcription-runner-Gr8vN3AS.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-BzXFjlMV.js";
 import "./proxy-fetch-BqVhGKFd.js";
 import "./api-key-rotation-DiMQTef3.js";
-import "./provider-image-D9B_J5Ys.js";
-import { h as extractTextFromChatContent } from "./pi-embedded-utils-CT_f_S3Y.js";
+import "./provider-image-Bsivqxw8.js";
+import { h as extractTextFromChatContent } from "./pi-embedded-utils-BV_Dtzrw.js";
 import "./tool-display-DiZGbhL2.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-DFNB1c7t.js";
 import "./chunk-DiXpyRAz.js";
@@ -82,11 +82,11 @@ import "./render-BBWKrfmg.js";
 import { r as isRestartEnabled } from "./commands-Csxgimkc.js";
 import "./commands-registry-Dx5QvNqH.js";
 import "./registry-DXmhuMNN.js";
-import { $ as validateNodeListParams, $t as validateTalkSessionCreateParams, A as validateCronRunParams, B as validateExecApprovalRequestParams, Bn as verifyDeviceToken, Bt as validateTalkConfigParams, C as validateConfigPatchParams, Cn as normalizeDeviceMetadataForAuth, D as validateCronAddParams, Dn as consumeDeviceBootstrapToken, E as validateConnectParams, En as approveDevicePairing, F as validateDevicePairListParams, Fn as revokeDeviceToken, Ft as validateSkillsBinsParams, G as validateExecApprovalsSetParams, Gt as validateTalkRealtimeSessionParams, H as validateExecApprovalsGetParams, Ht as validateTalkRealtimeAudioParams, I as validateDevicePairRejectParams, In as rotateDeviceToken, It as validateSkillsInstallParams, J as validateModelsListParams, Jt as validateTalkRealtimeToolResultParams, K as validateLogsTailParams, Kt as validateTalkRealtimeStatusParams, L as validateDevicePairRemoveParams, Ln as summarizeDeviceTokens, Lt as validateSkillsStatusParams, M as validateCronStatusParams, Mn as rejectDevicePairing, N as validateCronUpdateParams, Nn as removePairedDevice, Nt as validateSessionsTitlePrepareParams, O as validateCronListParams, On as ensureDeviceToken, P as validateDevicePairApproveParams, Pn as requestDevicePairing, Pt as validateSessionsUsageParams, Q as validateNodeInvokeResultParams, Qt as validateTalkSessionCloseParams, R as validateDeviceTokenRevokeParams, Rn as updatePairedDeviceMetadata, Rt as validateSkillsUpdateParams, S as validateConfigGetParams, Sn as buildDeviceAuthPayloadV3, T as validateConfigSetParams, Tn as approveBootstrapDevicePairing, U as validateExecApprovalsNodeGetParams, Un as operatorScopeSatisfied, Ut as validateTalkRealtimeBargeInParams, V as validateExecApprovalResolveParams, Vt as validateTalkModeParams, W as validateExecApprovalsNodeSetParams, Wn as roleScopesAllow, Wt as validateTalkRealtimeMarkParams, X as validateNodeEventParams, Xn as verifyDeviceSignature, Xt as validateTalkSessionBargeInParams, Y as validateNodeDescribeParams, Yn as normalizeDevicePublicKeyBase64Url, Yt as validateTalkSessionAppendAudioParams, Z as validateNodeInvokeParams, Zt as validateTalkSessionCancelTurnParams, _ as validateChatAbortParams, _n as ErrorCodes, a as validateAgentNudgeParams, an as validateToolsCatalogParams, at as validateNodeRenameParams, b as validateChatSendParams, c as validateAgentsCreateParams, cn as validateWebLoginStartParams, ct as validateRequestFrame, d as validateAgentsFilesListParams, dn as validateWizardNextParams, dt as validateSendParams, en as validateTalkSessionMarkParams, et as validateNodePairApproveParams, f as validateAgentsFilesSetParams, fn as validateWizardStartParams, ft as validateSessionsAbortParams, g as validateChannelsStatusParams, h as validateChannelsLogoutParams, hn as RUNS_INVALIDATED_EVENT, i as validateAgentIdentityParams, in as validateTasksRunsListParams, it as validateNodePairVerifyParams, j as validateCronRunsParams, jn as listDevicePairing, jt as validateSessionsSteerParams, k as validateCronRemoveParams, kn as getPairedDevice, l as validateAgentsDeleteParams, ln as validateWebLoginWaitParams, lt as validateSecretsResolveParams, m as validateAgentsUpdateParams, mn as PROTOCOL_VERSION, nn as validateTasksRunsEventsParams, nt as validateNodePairRejectParams, o as validateAgentParams, on as validateUpdateRunParams, ot as validatePollParams, p as validateAgentsListParams, pn as validateWizardStatusParams, q as validateModelsAuthStatusParams, qn as deriveDeviceIdFromPublicKey, qt as validateTalkRealtimeStopParams, r as formatValidationErrors, rn as validateTasksRunsGetParams, rt as validateNodePairRequestParams, s as validateAgentWaitParams, sn as validateWakeParams, st as validatePushTestParams, tn as validateTasksRunEventsParams, tt as validateNodePairListParams, u as validateAgentsFilesGetParams, un as validateWizardCancelParams, ut as validateSecretsResolveResult, v as validateChatHistoryParams, vn as errorShape, w as validateConfigSchemaParams, x as validateConfigApplyParams, xn as buildDeviceAuthPayload, y as validateChatInjectParams, z as validateDeviceTokenRotateParams, zn as verifyDeviceBootstrapToken, zt as validateTalkCatalogParams } from "./client-BMkNNUux.js";
-import { _ as hasNarrowSessionScope, d as APPROVALS_SCOPE, f as PAIRING_SCOPE, g as authorizeOperatorScopesForMethod, h as WRITE_SCOPE, m as SESSION_READ_SCOPE, n as callGateway, p as READ_SCOPE, u as ADMIN_SCOPE$1, v as isHealthProbeAllowedForScopes, x as loadGatewayTlsRuntime$1, y as isNodeRoleMethod } from "./call-BIVg1gmJ.js";
+import { $ as validateNodeListParams, $t as validateTalkSessionCreateParams, A as validateCronRunParams, B as validateExecApprovalRequestParams, Bn as verifyDeviceToken, Bt as validateTalkConfigParams, C as validateConfigPatchParams, Cn as normalizeDeviceMetadataForAuth, D as validateCronAddParams, Dn as consumeDeviceBootstrapToken, E as validateConnectParams, En as approveDevicePairing, F as validateDevicePairListParams, Fn as revokeDeviceToken, Ft as validateSkillsBinsParams, G as validateExecApprovalsSetParams, Gt as validateTalkRealtimeSessionParams, H as validateExecApprovalsGetParams, Ht as validateTalkRealtimeAudioParams, I as validateDevicePairRejectParams, In as rotateDeviceToken, It as validateSkillsInstallParams, J as validateModelsListParams, Jt as validateTalkRealtimeToolResultParams, K as validateLogsTailParams, Kt as validateTalkRealtimeStatusParams, L as validateDevicePairRemoveParams, Ln as summarizeDeviceTokens, Lt as validateSkillsStatusParams, M as validateCronStatusParams, Mn as rejectDevicePairing, N as validateCronUpdateParams, Nn as removePairedDevice, Nt as validateSessionsTitlePrepareParams, O as validateCronListParams, On as ensureDeviceToken, P as validateDevicePairApproveParams, Pn as requestDevicePairing, Pt as validateSessionsUsageParams, Q as validateNodeInvokeResultParams, Qt as validateTalkSessionCloseParams, R as validateDeviceTokenRevokeParams, Rn as updatePairedDeviceMetadata, Rt as validateSkillsUpdateParams, S as validateConfigGetParams, Sn as buildDeviceAuthPayloadV3, T as validateConfigSetParams, Tn as approveBootstrapDevicePairing, U as validateExecApprovalsNodeGetParams, Un as operatorScopeSatisfied, Ut as validateTalkRealtimeBargeInParams, V as validateExecApprovalResolveParams, Vt as validateTalkModeParams, W as validateExecApprovalsNodeSetParams, Wn as roleScopesAllow, Wt as validateTalkRealtimeMarkParams, X as validateNodeEventParams, Xn as verifyDeviceSignature, Xt as validateTalkSessionBargeInParams, Y as validateNodeDescribeParams, Yn as normalizeDevicePublicKeyBase64Url, Yt as validateTalkSessionAppendAudioParams, Z as validateNodeInvokeParams, Zt as validateTalkSessionCancelTurnParams, _ as validateChatAbortParams, _n as ErrorCodes, a as validateAgentNudgeParams, an as validateToolsCatalogParams, at as validateNodeRenameParams, b as validateChatSendParams, c as validateAgentsCreateParams, cn as validateWebLoginStartParams, ct as validateRequestFrame, d as validateAgentsFilesListParams, dn as validateWizardNextParams, dt as validateSendParams, en as validateTalkSessionMarkParams, et as validateNodePairApproveParams, f as validateAgentsFilesSetParams, fn as validateWizardStartParams, ft as validateSessionsAbortParams, g as validateChannelsStatusParams, h as validateChannelsLogoutParams, hn as RUNS_INVALIDATED_EVENT, i as validateAgentIdentityParams, in as validateTasksRunsListParams, it as validateNodePairVerifyParams, j as validateCronRunsParams, jn as listDevicePairing, jt as validateSessionsSteerParams, k as validateCronRemoveParams, kn as getPairedDevice, l as validateAgentsDeleteParams, ln as validateWebLoginWaitParams, lt as validateSecretsResolveParams, m as validateAgentsUpdateParams, mn as PROTOCOL_VERSION, nn as validateTasksRunsEventsParams, nt as validateNodePairRejectParams, o as validateAgentParams, on as validateUpdateRunParams, ot as validatePollParams, p as validateAgentsListParams, pn as validateWizardStatusParams, q as validateModelsAuthStatusParams, qn as deriveDeviceIdFromPublicKey, qt as validateTalkRealtimeStopParams, r as formatValidationErrors, rn as validateTasksRunsGetParams, rt as validateNodePairRequestParams, s as validateAgentWaitParams, sn as validateWakeParams, st as validatePushTestParams, tn as validateTasksRunEventsParams, tt as validateNodePairListParams, u as validateAgentsFilesGetParams, un as validateWizardCancelParams, ut as validateSecretsResolveResult, v as validateChatHistoryParams, vn as errorShape, w as validateConfigSchemaParams, x as validateConfigApplyParams, xn as buildDeviceAuthPayload, y as validateChatInjectParams, z as validateDeviceTokenRotateParams, zn as verifyDeviceBootstrapToken, zt as validateTalkCatalogParams } from "./client-DN-SMVBn.js";
+import { _ as hasNarrowSessionScope, d as APPROVALS_SCOPE, f as PAIRING_SCOPE, g as authorizeOperatorScopesForMethod, h as WRITE_SCOPE, m as SESSION_READ_SCOPE, n as callGateway, p as READ_SCOPE, u as ADMIN_SCOPE$1, v as isHealthProbeAllowedForScopes, x as loadGatewayTlsRuntime$1, y as isNodeRoleMethod } from "./call-PE59cW0J.js";
 import "./pairing-token-BfRB0jVM.js";
-import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-BMp7jOLL.js";
-import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-Aw7d03gL.js";
+import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-BjLs5ozo.js";
+import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-BLp1Q7uO.js";
 import "./user-run-recording-DXNyfjMq.js";
 import "./fetch--Fn4tlfW.js";
 import { a as readChannelAllowFromStoreSync } from "./pairing-store-BZFrD-fJ.js";
@@ -100,10 +100,10 @@ import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapsho
 import { i as normalizePollInput, t as getChannelActivity } from "./channel-activity-SqK9nKf7.js";
 import "./tables-CCEXTXTG.js";
 import { i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, t as discoverAllSessions } from "./session-cost-usage-BTDAzt-T.js";
-import "./server-lifecycle-DXRap2AR.js";
+import "./server-lifecycle-C3hCCbXm.js";
 import { i as parseAbsoluteTimeMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-CT5G1TCV.js";
 import { a as normalizeHttpWebhookUrl, l as normalizeOptionalText, o as inferLegacyName } from "./heartbeat-tick-By0WI8YD.js";
-import { d as resolveGroupToolPolicy, f as resolveSubagentToolPolicy, u as resolveEffectiveToolPolicy } from "./dm-policy-shared-BJNH9gNN.js";
+import { d as resolveGroupToolPolicy, f as resolveSubagentToolPolicy, u as resolveEffectiveToolPolicy } from "./dm-policy-shared-CV1uWhMc.js";
 import "./reply-directives-Bc2RQAcJ.js";
 import { n as resolveMessageChannelSelection } from "./channel-selection-DfNPCJXK.js";
 import { i as applyPluginAutoEnable, n as collectUnsafeTelegramPollingTimeouts, s as buildChannelUiCatalog } from "./polling-timeout-DoMlNx_D.js";
@@ -115,12 +115,12 @@ import "./resolve-route-KBL5oj6U.js";
 import "./proxy-Ba9wFNmC.js";
 import "./replies-BNP-F_lm.js";
 import { n as GATEWAY_AUTH_SURFACE_PATHS, p as isKnownSecretTargetId, r as evaluateGatewayAuthSurfaceStates } from "./runtime-config-collectors-BVWO6FhK.js";
-import "./command-secret-targets-B54n8F_3.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-BgbRKH4z.js";
+import "./command-secret-targets-CJ1czw_Q.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-DNbkQX5v.js";
 import "./prompt-style-XoPngT10.js";
 import "./pairing-labels-DYgJqxe0.js";
 import "./session-meta-Bd0mS7MT.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-D_89Y9nb.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-DVqLwNhN.js";
 import { r as resolveMemorySearchConfig } from "./manager-PSj0t5kg.js";
 import "./query-expansion-BydaUlRH.js";
 import { t as formatDocsLink } from "./links-BZDTcdHU.js";
@@ -135,16 +135,16 @@ import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-C2gmG0PE.
 import { n as inheritOptionFromParent } from "./command-options-vZSwrzpA.js";
 import { t as WizardCancelledError } from "./prompts-BBkof-cQ.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-GPI9o9AS.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-DAh5Ah1J.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-96ueVlOH.js";
 import { t as isWithinDir } from "./path-safety-CCSB65fm.js";
 import "./install-safe-path-4YfMRsxN.js";
-import "./npm-pack-install-B-cOWuiF.js";
+import "./npm-pack-install-Dlm0MIZy.js";
 import "./skill-scanner-BrEkff8K.js";
-import "./installs-Du8n8Do9.js";
+import "./installs-4lGALZOo.js";
 import { n as formatConfigIssueLines } from "./issue-format-BG8o87sf.js";
 import { t as buildChannelAccountSnapshot } from "./status-yrDGXYZM.js";
 import "./channels-status-issues-B4p6AXBG.js";
-import { i as resolveGatewayClientProfile, t as WEB_CLIENT_ALLOWED_ORIGINS_CONFIG_KEY } from "./client-profiles-DP8BWND2.js";
+import { i as resolveGatewayClientProfile, t as WEB_CLIENT_ALLOWED_ORIGINS_CONFIG_KEY } from "./client-profiles-DEoACLX5.js";
 import "./daemon-install-helpers-CKbnFsNZ.js";
 import "./runtime-guard-DchtXvGj.js";
 import "./service-Dkcqg-rd.js";
@@ -152,37 +152,37 @@ import "./systemd-BJqlwupF.js";
 import "./lifecycle-core-CuMY0U_8.js";
 import "./systemd-hints-Cp0IfOPD.js";
 import { t as parsePort$1 } from "./parse-port-CshWaSQ9.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-CiPY543O.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-D874Hxry.js";
 import "./diagnostics-C6ntZHc3.js";
 import "./table-H366JkfJ.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-B1ALOpPn.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-Cj18nzyW.js";
-import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-UMAK8rQC.js";
+import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-8O6sjQPv.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-B1GbNHC3.js";
-import { a as getStorageV1Snapshot, c as pickGatewaySelfPresence, i as createStorageSupervisor, o as noteStorageReplayResult, r as getStatusSummary, s as noteStorageRestartRequired } from "./status-B3eNMcE3.js";
-import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-Cxv6ou16.js";
+import { a as getStorageV1Snapshot, c as pickGatewaySelfPresence, i as createStorageSupervisor, o as noteStorageReplayResult, r as getStatusSummary, s as noteStorageRestartRequired } from "./status-BacPIpt6.js";
+import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-B5jHSu9i.js";
 import { a as readPostQuiesceTranscriptDelta, i as readBulkTranscriptLines, o as replaySource, r as mergeBulkTranscriptSnapshotAndDelta, t as ReplayRowConflictError } from "./replay-B9P8F4Td.js";
 import "./session-key-resolution-CvnTXaSw.js";
-import { c as waitForStopDrain, l as withTimeout, o as tasksHandlers, r as getTaskOperatorRegistry, s as retryDelayMs, t as DEFAULT_RETENTION_DAYS } from "./task-runlog-retention-cEBecqvb.js";
+import { a as respondTaskRegistryUnavailable, c as tasksHandlers, d as withTimeout, i as resolveTaskOperatorRegistry, l as retryDelayMs, r as getTaskOperatorRegistry, t as DEFAULT_RETENTION_DAYS, u as waitForStopDrain } from "./task-runlog-retention-DCbMK2T8.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-BXkk_vKO.js";
 import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-DM1npKXX.js";
-import { t as reconcileBundledInstalls } from "./reconcile-bundled-Bl6XpmI5.js";
+import { t as reconcileBundledInstalls } from "./reconcile-bundled-CAKTvY-C.js";
 import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-ACR3KU8j.js";
 import "./onboarding.secret-input-YvW1rg1V.js";
-import { t as runOnboardingWizard } from "./onboarding-DidWWI3X.js";
+import { t as runOnboardingWizard } from "./onboarding-R2m4j7Dp.js";
 import { a as computeJobNextRunAtMs, c as findJobOrThrow, d as recomputeNextRuns, f as recomputeNextRunsForMaintenance, h as produceCronAgentTurn, i as applyJobPatch, l as isJobDue, m as resolveJobPayloadTextForMain, o as createJob, p as recordScheduleComputeError, r as resolveStaleClaimAdoptionMs, s as cronShapeSupportsIdentity, t as CRON_HEARTBEAT_ADAPTER_ID, u as nextWakeAtMs } from "./recovery-adapter-CPQ9-014.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-Bhf8qK68.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-BcZzA03X.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-BzuIKryU.js";
-import { a as readChatHistoryPage, c as unsubscribeSessionChanges, i as decodeHistoryCursor, l as assertValidParams, o as resolveDbLeafEntryId, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers } from "./sessions-CgVN798h.js";
-import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-wwMY6dIH.js";
+import { a as readChatHistoryPage, c as unsubscribeSessionChanges, i as decodeHistoryCursor, l as assertValidParams, o as resolveDbLeafEntryId, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers } from "./sessions-DFDrcshi.js";
+import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-C1Fy9dcA.js";
 import "./node-service-Ys7JZFz-.js";
 import "./status.update-C4YRQzqD.js";
 import { i as resolveActiveLogFile, n as readLogSlice } from "./log-tail-Dg2oYTZ6.js";
 import { t as installSkill } from "./skills-install-B23U6yk5.js";
-import { r as runGatewayUpdate } from "./update-runner-18yD5NLo.js";
+import { r as runGatewayUpdate } from "./update-runner-C8NxlRy7.js";
 import { n as resolveWebClientPackagedRootSync, t as WEB_CLIENT_BUNDLE_MISSING_MESSAGE } from "./web-client-assets-nkeo2cLh.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-DkkkJ4GX.js";
-import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-Ct0WXISe.js";
+import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-BmGo9Ngv.js";
 import { n as forceFreePortAndWait } from "./ports-BxjQwKMc.js";
 import { createRequire } from "node:module";
 import { spawn, spawnSync } from "node:child_process";
@@ -1083,7 +1083,7 @@ function resolveVerificationStore(params = {}) {
 
 //#endregion
 //#region src/infra/exec-approval-forwarder.ts
-const log$29 = createSubsystemLogger("gateway/exec-approvals");
+const log$30 = createSubsystemLogger("gateway/exec-approvals");
 const DEFAULT_MODE = "session";
 function normalizeMode(mode) {
 	return mode ?? DEFAULT_MODE;
@@ -1221,7 +1221,7 @@ async function deliverToTargets(params) {
 				payloads: [{ text: params.text }]
 			});
 		} catch (err) {
-			log$29.error(`exec approvals: failed to deliver to ${channel}:${target.to}: ${String(err)}`);
+			log$30.error(`exec approvals: failed to deliver to ${channel}:${target.to}: ${String(err)}`);
 		}
 	});
 	await Promise.allSettled(deliveries);
@@ -1310,7 +1310,7 @@ function createExecApprovalForwarder(deps = {}) {
 			deliver,
 			shouldSend: () => pending.get(request.id) === pendingEntry
 		}).catch((err) => {
-			log$29.error(`exec approvals: failed to deliver request ${request.id}: ${String(err)}`);
+			log$30.error(`exec approvals: failed to deliver request ${request.id}: ${String(err)}`);
 		});
 		return true;
 	};
@@ -1682,7 +1682,7 @@ function scheduleGatewayUpdateCheck(params) {
 
 //#endregion
 //#region src/sessions/session-runs/restart-transitions.ts
-const log$28 = createSubsystemLogger("sessions/restart-transitions");
+const log$29 = createSubsystemLogger("sessions/restart-transitions");
 async function transition(input, recoveryEnabled) {
 	const store = input.store ?? getConfiguredSessionStorageRuntime()?.runtime?.runs;
 	if (!store) return [];
@@ -1693,14 +1693,14 @@ async function transition(input, recoveryEnabled) {
 			recoveryReason: input.reason,
 			recoveryEnabled
 		});
-		if (transitioned.length > 0) log$28.info("transitioned active runs for restart", {
+		if (transitioned.length > 0) log$29.info("transitioned active runs for restart", {
 			count: transitioned.length,
 			recoveryEnabled,
 			reason: input.reason
 		});
 		return transitioned;
 	} catch (err) {
-		log$28.warn("failed to transition active runs for restart", {
+		log$29.warn("failed to transition active runs for restart", {
 			recoveryEnabled,
 			error: String(err)
 		});
@@ -1769,7 +1769,7 @@ function resolveChannelRestartReason(snapshot, evaluation) {
 
 //#endregion
 //#region src/gateway/channel-health-monitor.ts
-const log$27 = createSubsystemLogger("gateway/health-monitor");
+const log$28 = createSubsystemLogger("gateway/health-monitor");
 const DEFAULT_CHECK_INTERVAL_MS = 5 * 6e4;
 const DEFAULT_MONITOR_STARTUP_GRACE_MS = 6e4;
 const DEFAULT_COOLDOWN_CYCLES = 2;
@@ -1829,11 +1829,11 @@ function startChannelHealthMonitor(deps) {
 					if (now - record.lastRestartAt <= cooldownMs) continue;
 					pruneOldRestarts(record, now);
 					if (record.restartsThisHour.length >= maxRestartsPerHour) {
-						log$27.warn?.(`[${channelId}:${accountId}] health-monitor: hit ${maxRestartsPerHour} restarts/hour limit, skipping`);
+						log$28.warn?.(`[${channelId}:${accountId}] health-monitor: hit ${maxRestartsPerHour} restarts/hour limit, skipping`);
 						continue;
 					}
 					const reason = resolveChannelRestartReason(status, health);
-					log$27.info?.(`[${channelId}:${accountId}] health-monitor: restarting (reason: ${reason})`);
+					log$28.info?.(`[${channelId}:${accountId}] health-monitor: restarting (reason: ${reason})`);
 					try {
 						if (status.running) await channelManager.stopChannel(channelId, accountId);
 						channelManager.resetRestartAttempts(channelId, accountId);
@@ -1842,7 +1842,7 @@ function startChannelHealthMonitor(deps) {
 						record.restartsThisHour.push({ at: now });
 						restartRecords.set(key, record);
 					} catch (err) {
-						log$27.error?.(`[${channelId}:${accountId}] health-monitor: restart failed: ${String(err)}`);
+						log$28.error?.(`[${channelId}:${accountId}] health-monitor: restart failed: ${String(err)}`);
 					}
 				}
 			}
@@ -1862,7 +1862,7 @@ function startChannelHealthMonitor(deps) {
 		abortSignal?.addEventListener("abort", stop, { once: true });
 		timer = setInterval(() => void runCheck(), checkIntervalMs);
 		if (typeof timer === "object" && "unref" in timer) timer.unref();
-		log$27.info?.(`started (interval: ${Math.round(checkIntervalMs / 1e3)}s, startup-grace: ${Math.round(timing.monitorStartupGraceMs / 1e3)}s, channel-connect-grace: ${Math.round(timing.channelConnectGraceMs / 1e3)}s)`);
+		log$28.info?.(`started (interval: ${Math.round(checkIntervalMs / 1e3)}s, startup-grace: ${Math.round(timing.monitorStartupGraceMs / 1e3)}s, channel-connect-grace: ${Math.round(timing.channelConnectGraceMs / 1e3)}s)`);
 	}
 	return { stop };
 }
@@ -3068,10 +3068,10 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 	const { getConfiguredSessionStorageRuntime } = await import("./config-BPACL-n5.js").then((n) => n.Hn);
 	const runtime = getConfiguredSessionStorageRuntime()?.runtime;
 	const gatewayInstanceId = getGatewayInstanceId();
-	const { tryGetAgentTurnRuntime } = await import("./agent-turn-runner-C1u8sVfA.js").then((n) => n.t);
+	const { tryGetAgentTurnRuntime } = await import("./agent-turn-runner-DoHGgNPh.js").then((n) => n.t);
 	const backbone = tryGetAgentTurnRuntime()?.backbone;
 	const { createOutboundDeliveryRecoveryAdapter } = await import("./delivery-recovery-adapter-Bj3mCcg9.js");
-	const { deliverOutboundPayloads } = await import("./deliver-Aw7d03gL.js").then((n) => n.n);
+	const { deliverOutboundPayloads } = await import("./deliver-BLp1Q7uO.js").then((n) => n.n);
 	adapters.push(createOutboundDeliveryRecoveryAdapter({
 		cfg,
 		deliver: deliverOutboundPayloads,
@@ -3085,7 +3085,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		sessionRuns = void 0;
 	}
 	if (sessionRuns && wiring?.agentTurnStager) {
-		const { createSessionRunRecoveryAdapter } = await import("./recovery-adapter-mi8jbyvy.js");
+		const { createSessionRunRecoveryAdapter } = await import("./recovery-adapter-okaOo6tO.js");
 		adapters.push(createSessionRunRecoveryAdapter({
 			store: sessionRuns,
 			cfg,
@@ -3101,7 +3101,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		lease: wiring?.lease ? () => wiring.lease?.() ?? { isArmed: () => false } : void 0
 	}));
 	if (backbone && wiring?.agentTurnStager) {
-		const { createAgentTurnRecoveryAdapter } = await import("./agent-turn-recovery-adapter-CdLD3DuI.js");
+		const { createAgentTurnRecoveryAdapter } = await import("./agent-turn-recovery-adapter-Dw5-XbMI.js");
 		adapters.push(createAgentTurnRecoveryAdapter({
 			backbone,
 			stager: wiring.agentTurnStager
@@ -3123,7 +3123,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		}));
 	}
 	if (sessionRuns) {
-		const { createEmbeddedPiRecoveryAdapter } = await import("./pi-embedded-recovery-adapter-Cs1EJElw.js");
+		const { createEmbeddedPiRecoveryAdapter } = await import("./pi-embedded-recovery-adapter-8xq2SINa.js");
 		adapters.push(createEmbeddedPiRecoveryAdapter({
 			sessionRuns,
 			cfg,
@@ -3131,7 +3131,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 			stager: wiring?.agentTurnStager,
 			isRunActive: isEmbeddedPiRunActive
 		}));
-		const { createAcpRuntimeRecoveryAdapter } = await import("./recovery-adapter-DOizlZvv.js");
+		const { createAcpRuntimeRecoveryAdapter } = await import("./recovery-adapter-Df87xZQp.js");
 		adapters.push(createAcpRuntimeRecoveryAdapter({ sessionRuns }));
 	}
 	if (backbone) {
@@ -3772,7 +3772,7 @@ function createChannelManager(opts) {
 
 //#endregion
 //#region src/gateway/server-chat.ts
-const log$26 = createSubsystemLogger("gateway/chat-final");
+const log$27 = createSubsystemLogger("gateway/chat-final");
 const CHAT_TERMINAL_DURABILITY_TIMEOUT_MS = 5e3;
 function resolveHeartbeatAckMaxChars$1() {
 	try {
@@ -4014,14 +4014,14 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 		const pending = pendingTerminalBySession.get(sessionKey);
 		const durability = waitForPendingWrites(writes, CHAT_TERMINAL_DURABILITY_TIMEOUT_MS);
 		const gate = (pending ?? Promise.resolve()).then(() => durability).then((outcome) => {
-			if (outcome === "timeout") log$26.warn("chat terminal broadcast before transcript durability (timeout)", {
+			if (outcome === "timeout") log$27.warn("chat terminal broadcast before transcript durability (timeout)", {
 				runId: sourceRunId,
 				sessionKey,
 				timeoutMs: CHAT_TERMINAL_DURABILITY_TIMEOUT_MS
 			});
 			sendChatTerminal(sessionKey, payload);
 		}).catch((err) => {
-			log$26.warn("chat terminal broadcast failed while waiting for transcript durability", {
+			log$27.warn("chat terminal broadcast failed while waiting for transcript durability", {
 				runId: sourceRunId,
 				sessionKey,
 				err
@@ -4128,7 +4128,7 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 * Automatically starts `gog gmail watch serve` when the gateway starts,
 * if hooks.gmail is configured with an account.
 */
-const log$25 = createSubsystemLogger("gmail-watcher");
+const log$26 = createSubsystemLogger("gmail-watcher");
 const ADDRESS_IN_USE_RE = /address already in use|EADDRINUSE/i;
 function isAddressInUseError(line) {
 	return ADDRESS_IN_USE_RE.test(line);
@@ -4152,13 +4152,13 @@ async function startGmailWatch(cfg) {
 		const result = await runCommandWithTimeout(args, { timeoutMs: 12e4 });
 		if (result.code !== 0) {
 			const message = result.stderr || result.stdout || "gog watch start failed";
-			log$25.error(`watch start failed: ${message}`);
+			log$26.error(`watch start failed: ${message}`);
 			return false;
 		}
-		log$25.info(`watch started for ${cfg.account}`);
+		log$26.info(`watch started for ${cfg.account}`);
 		return true;
 	} catch (err) {
-		log$25.error(`watch start error: ${String(err)}`);
+		log$26.error(`watch start error: ${String(err)}`);
 		return false;
 	}
 }
@@ -4167,7 +4167,7 @@ async function startGmailWatch(cfg) {
 */
 function spawnGogServe(cfg) {
 	const args = buildGogWatchServeArgs(cfg);
-	log$25.info(`starting gog ${args.join(" ")}`);
+	log$26.info(`starting gog ${args.join(" ")}`);
 	let addressInUse = false;
 	const child = spawn("gog", args, {
 		stdio: [
@@ -4179,25 +4179,25 @@ function spawnGogServe(cfg) {
 	});
 	child.stdout?.on("data", (data) => {
 		const line = data.toString().trim();
-		if (line) log$25.info(`[gog] ${line}`);
+		if (line) log$26.info(`[gog] ${line}`);
 	});
 	child.stderr?.on("data", (data) => {
 		const line = data.toString().trim();
 		if (!line) return;
 		if (isAddressInUseError(line)) addressInUse = true;
-		log$25.warn(`[gog] ${line}`);
+		log$26.warn(`[gog] ${line}`);
 	});
 	child.on("error", (err) => {
-		log$25.error(`gog process error: ${String(err)}`);
+		log$26.error(`gog process error: ${String(err)}`);
 	});
 	child.on("exit", (code, signal) => {
 		if (shuttingDown) return;
 		if (addressInUse) {
-			log$25.warn("gog serve failed to bind (address already in use); stopping restarts. Another watcher is likely running. Set OPENCLAW_SKIP_GMAIL_WATCHER=1 or stop the other process.");
+			log$26.warn("gog serve failed to bind (address already in use); stopping restarts. Another watcher is likely running. Set OPENCLAW_SKIP_GMAIL_WATCHER=1 or stop the other process.");
 			watcherProcess = null;
 			return;
 		}
-		log$25.warn(`gog exited (code=${code}, signal=${signal}); restarting in 5s`);
+		log$26.warn(`gog exited (code=${code}, signal=${signal}); restarting in 5s`);
 		watcherProcess = null;
 		setTimeout(() => {
 			if (shuttingDown || !currentConfig) return;
@@ -4237,15 +4237,15 @@ async function startGmailWatcher(cfg) {
 			port: runtimeConfig.serve.port,
 			target: runtimeConfig.tailscale.target
 		});
-		log$25.info(`tailscale ${runtimeConfig.tailscale.mode} configured for port ${runtimeConfig.serve.port}`);
+		log$26.info(`tailscale ${runtimeConfig.tailscale.mode} configured for port ${runtimeConfig.serve.port}`);
 	} catch (err) {
-		log$25.error(`tailscale setup failed: ${String(err)}`);
+		log$26.error(`tailscale setup failed: ${String(err)}`);
 		return {
 			started: false,
 			reason: `tailscale setup failed: ${String(err)}`
 		};
 	}
-	if (!await startGmailWatch(runtimeConfig)) log$25.warn("gmail watch start failed, but continuing with serve");
+	if (!await startGmailWatch(runtimeConfig)) log$26.warn("gmail watch start failed, but continuing with serve");
 	shuttingDown = false;
 	watcherProcess = spawnGogServe(runtimeConfig);
 	const renewMs = runtimeConfig.renewEveryMinutes * 6e4;
@@ -4253,7 +4253,7 @@ async function startGmailWatcher(cfg) {
 		if (shuttingDown) return;
 		startGmailWatch(runtimeConfig);
 	}, renewMs);
-	log$25.info(`gmail watcher started for ${runtimeConfig.account} (renew every ${runtimeConfig.renewEveryMinutes}m)`);
+	log$26.info(`gmail watcher started for ${runtimeConfig.account} (renew every ${runtimeConfig.renewEveryMinutes}m)`);
 	return { started: true };
 }
 /**
@@ -4266,7 +4266,7 @@ async function stopGmailWatcher() {
 		renewInterval = null;
 	}
 	if (watcherProcess) {
-		log$25.info("stopping gmail watcher");
+		log$26.info("stopping gmail watcher");
 		watcherProcess.kill("SIGTERM");
 		await new Promise((resolve) => {
 			const timeout = setTimeout(() => {
@@ -4281,7 +4281,7 @@ async function stopGmailWatcher() {
 		watcherProcess = null;
 	}
 	currentConfig = null;
-	log$25.info("gmail watcher stopped");
+	log$26.info("gmail watcher stopped");
 }
 
 //#endregion
@@ -5657,7 +5657,7 @@ async function runCronIsolatedAgentTurn(params) {
 
 //#endregion
 //#region src/cron/run-log.ts
-const log$24 = createSubsystemLogger("cron/run-log");
+const log$25 = createSubsystemLogger("cron/run-log");
 function assertSafeCronRunLogJobId(jobId) {
 	const trimmed = jobId.trim();
 	if (!trimmed) throw new Error("invalid cron run log job id");
@@ -5699,7 +5699,7 @@ async function pruneIfNeeded(filePath, opts) {
 	const stat = await fs$1.stat(filePath).catch(() => null);
 	if (!stat || stat.size <= opts.maxBytes) return;
 	const raw = await fs$1.readFile(filePath, "utf-8").catch((err) => {
-		log$24.warn("cron run-log: prune skipped (read failed)", {
+		log$25.warn("cron run-log: prune skipped (read failed)", {
 			filePath,
 			err: String(err)
 		});
@@ -11742,9 +11742,6 @@ const VOICE_INTERRUPTED_MARKER = " [interrupted]";
 const CHAT_HISTORY_TEXT_MAX_CHARS = 12e3;
 const CHAT_HISTORY_MAX_SINGLE_MESSAGE_BYTES = 128 * 1024;
 const CHAT_HISTORY_OVERSIZED_PLACEHOLDER = "[chat.history omitted: message too large]";
-/** Twice the default storage probe timeout: how long chat.history waits for a booting gateway's session storage before it answers UNAVAILABLE. */
-const CHAT_HISTORY_STORAGE_START_WAIT_MS = 1e4;
-const CHAT_HISTORY_STORAGE_START_RETRY_AFTER_MS = 1e3;
 let chatHistoryPlaceholderEmitCount = 0;
 function stripDisallowedChatControlChars(message) {
 	let output = "";
@@ -12546,13 +12543,6 @@ const chatHandlers = {
 			return;
 		}
 		const { sessionKey, limit, maxChars, before } = params;
-		if (!(await context.storageStartup?.whenReleased(CHAT_HISTORY_STORAGE_START_WAIT_MS) ?? true)) {
-			respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, "session storage is still starting", {
-				retryable: true,
-				retryAfterMs: CHAT_HISTORY_STORAGE_START_RETRY_AFTER_MS
-			}));
-			return;
-		}
 		const { cfg, storePath, entry } = loadSessionEntry(sessionKey);
 		const sessionId = entry?.sessionId;
 		const sessionAgentId = resolveSessionAgentId({
@@ -14743,7 +14733,7 @@ async function replayApproval(ctx) {
 
 //#endregion
 //#region src/infra/exec-audit.ts
-const log$23 = createSubsystemLogger("infra/exec-audit");
+const log$24 = createSubsystemLogger("infra/exec-audit");
 function emitAuditRecord(request, decision) {
 	const inv = request.invocation;
 	const argvSummary = inv.mode === "argv" ? `${inv.executable} ${redactArgvForAudit(inv.args).join(" ")}` : inv.mode === "shell" ? redactCommandText(inv.command) : inv.mode === "approved-script" ? inv.scriptId : `${inv.serverId}/${inv.toolName}`;
@@ -14774,7 +14764,7 @@ function emitAuditRecord(request, decision) {
 		timeoutMs: request.timeoutMs,
 		stdinPresent: request.stdin === "present-redacted"
 	};
-	if (record.outcome === "deny") log$23.warn("exec-audit deny", {
+	if (record.outcome === "deny") log$24.warn("exec-audit deny", {
 		effect: record.effect,
 		sourceRule: record.sourceRule,
 		reason: record.reason,
@@ -14783,7 +14773,7 @@ function emitAuditRecord(request, decision) {
 		normalizedArgv: record.normalizedArgv,
 		policyId: record.policyId
 	});
-	else log$23.info("exec-audit", {
+	else log$24.info("exec-audit", {
 		effect: record.effect,
 		sourceRule: record.sourceRule,
 		outcome: record.outcome,
@@ -15131,7 +15121,7 @@ function reEvaluatePoliciesForPath(reResolvedRequest, envSanitization, policies
 
 //#endregion
 //#region src/infra/load-policies-for-request.ts
-const log$22 = createSubsystemLogger("infra/load-policies-for-request");
+const log$23 = createSubsystemLogger("infra/load-policies-for-request");
 /**
 * User-scoped policy source backed by the v2 exec-approvals store
 * (`~/.openclaw/exec-approvals.json`). The store is migrated v1→v2 on load
@@ -15150,7 +15140,7 @@ function createUserPolicySource() {
 		try {
 			return (await loadExecApprovalsV2()).policies;
 		} catch (error) {
-			log$22.warn("user policy store load failed; user policies will not apply", { error });
+			log$23.warn("user policy store load failed; user policies will not apply", { error });
 			return [];
 		}
 	} };
@@ -16295,7 +16285,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-DSTI4JnV.js");
+			const { handleNodeEvent } = await import("./server-node-events-8k0OLCvW.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -17092,7 +17082,7 @@ function resolveSteerResult(params) {
 
 //#endregion
 //#region src/gateway/session-title-completion.ts
-const log$21 = createSubsystemLogger("gateway/session-title-completion");
+const log$22 = createSubsystemLogger("gateway/session-title-completion");
 const SESSION_TITLE_COMPLETION_TIMEOUT_MS = 15e3;
 const SESSION_TITLE_MAX_CHARS = 60;
 /** Upstream openclaw's dashboard-session-title prompt wording (ADR 0084 s5, mission M4). */
@@ -17143,7 +17133,7 @@ async function generateSessionTitleCompletion(req, overrides) {
 	try {
 		const resolved = deps.resolveModel(provider, model, agentDir, cfg);
 		if (!resolved.model) {
-			log$21.warn("session title model unresolved", {
+			log$22.warn("session title model unresolved", {
 				...logFields,
 				error: resolved.error
 			});
@@ -17157,7 +17147,7 @@ async function generateSessionTitleCompletion(req, overrides) {
 		let apiKey;
 		if (!auth.apiKey) {
 			if (auth.mode !== "aws-sdk") {
-				log$21.warn("session title no api key resolved", {
+				log$22.warn("session title no api key resolved", {
 					...logFields,
 					mode: auth.mode
 				});
@@ -17172,7 +17162,7 @@ async function generateSessionTitleCompletion(req, overrides) {
 		})).token;
 		else apiKey = auth.apiKey;
 		if (controller.signal.aborted) {
-			log$21.warn("session title generation timed out before dispatch", logFields);
+			log$22.warn("session title generation timed out before dispatch", logFields);
 			return null;
 		}
 		const response = await deps.completeSimple(resolved.model, {
@@ -17189,11 +17179,11 @@ async function generateSessionTitleCompletion(req, overrides) {
 			signal: controller.signal
 		});
 		if (response.stopReason === "aborted") {
-			log$21.warn("session title generation timed out", logFields);
+			log$22.warn("session title generation timed out", logFields);
 			return null;
 		}
 		if (response.stopReason === "error") {
-			log$21.warn("session title generation provider error", {
+			log$22.warn("session title generation provider error", {
 				...logFields,
 				error: response.errorMessage
 			});
@@ -17203,7 +17193,7 @@ async function generateSessionTitleCompletion(req, overrides) {
 		if (!text) return null;
 		return normalizeSessionTitle(text);
 	} catch (error) {
-		log$21.warn("session title generation failed", {
+		log$22.warn("session title generation failed", {
 			...logFields,
 			error: error instanceof Error ? error.message : String(error)
 		});
@@ -17384,6 +17374,218 @@ const skillsHandlers = {
 	}
 };
 
+//#endregion
+//#region src/gateway/storage-method-policy.ts
+const STORAGE_METHOD_POLICY_REQUIRED = [
+	"chat.history",
+	"sessions.claims.status",
+	"sessions.runHistory",
+	"sessions.runs.cancel",
+	"sessions.runs.continue",
+	"sessions.runs.events",
+	"sessions.runs.get",
+	"sessions.runs.list",
+	"tasks.resetBudget",
+	"tasks.rollback",
+	"tasks.runDryRun",
+	"tasks.runEvents",
+	"tasks.runs.get",
+	"tasks.runs.events",
+	"tasks.runs.list",
+	"tasks.status"
+];
+const STORAGE_METHOD_POLICY_BOOT_WRITE = [
+	"chat.inject",
+	"sessions.compact",
+	"sessions.create",
+	"sessions.delete",
+	"sessions.patch",
+	"sessions.reset"
+];
+const STORAGE_METHOD_POLICY_NONE = [
+	"connect",
+	"health",
+	"status",
+	"logs.tail",
+	"voicewake.get",
+	"voicewake.set",
+	"channels.status",
+	"channels.logout",
+	"chat.abort",
+	"chat.send",
+	"sessions.abort",
+	"wake",
+	"cron.list",
+	"cron.status",
+	"cron.add",
+	"cron.update",
+	"cron.remove",
+	"cron.run",
+	"cron.runs",
+	"device.pair.list",
+	"device.pair.approve",
+	"device.pair.reject",
+	"device.pair.remove",
+	"device.token.rotate",
+	"device.token.revoke",
+	"diagnostics.runtime.snapshot",
+	"diagnostics.capture.cpu",
+	"diagnostics.capture.heap",
+	"diagnostics.capture.report",
+	"diagnostics.profiling.start",
+	"diagnostics.profiling.stop",
+	"doctor.memory.status",
+	"doctor.recovery.inspect",
+	"doctor.recovery.plan",
+	"doctor.recovery.apply",
+	"exec.approvals.get",
+	"exec.approvals.set",
+	"exec.approvals.node.get",
+	"exec.approvals.node.set",
+	"web.login.start",
+	"web.login.wait",
+	"models.authStatus",
+	"models.list",
+	"config.get",
+	"config.schema",
+	"config.set",
+	"config.patch",
+	"config.apply",
+	"wizard.start",
+	"wizard.next",
+	"wizard.cancel",
+	"wizard.status",
+	"talk.config",
+	"talk.mode",
+	"talk.catalog",
+	"talk.session.create",
+	"talk.session.appendAudio",
+	"talk.session.close",
+	"talk.session.cancelTurn",
+	"talk.session.mark",
+	"talk.session.bargeIn",
+	"talk.realtime.session",
+	"talk.realtime.audio",
+	"talk.realtime.mark",
+	"talk.realtime.toolResult",
+	"talk.realtime.bargeIn",
+	"talk.realtime.stop",
+	"talk.realtime.status",
+	"talk.metrics",
+	"tools.catalog",
+	"tts.status",
+	"tts.enable",
+	"tts.disable",
+	"tts.convert",
+	"tts.setProvider",
+	"tts.providers",
+	"skills.status",
+	"skills.bins",
+	"skills.install",
+	"skills.update",
+	"sessions.subscribe",
+	"sessions.list",
+	"sessions.describe",
+	"sessions.compaction.list",
+	"sessions.runs",
+	"sessions.thresholds",
+	"sessions.interrupt",
+	"sessions.preview",
+	"sessions.resolve",
+	"sessions.title.prepare",
+	"sessions.steer",
+	"last-heartbeat",
+	"set-heartbeats",
+	"system-presence",
+	"system-event",
+	"update.run",
+	"node.pair.request",
+	"node.pair.list",
+	"node.pair.approve",
+	"node.pair.reject",
+	"node.pair.verify",
+	"node.rename",
+	"node.list",
+	"node.describe",
+	"node.canvas.capability.refresh",
+	"node.invoke",
+	"node.invoke.result",
+	"node.event",
+	"plugins/health",
+	"push.test",
+	"send",
+	"poll",
+	"usage.status",
+	"usage.cost",
+	"sessions.usage",
+	"sessions.usage.timeseries",
+	"sessions.usage.logs",
+	"agent",
+	"agent.identity.get",
+	"agent.wait",
+	"agent.nudge",
+	"agents.list",
+	"agents.create",
+	"agents.update",
+	"agents.delete",
+	"agents.files.list",
+	"agents.files.get",
+	"agents.files.set",
+	"browser.request"
+];
+const STORAGE_METHOD_POLICY = Object.freeze({
+	...Object.fromEntries(STORAGE_METHOD_POLICY_REQUIRED.map((method) => [method, "required"])),
+	...Object.fromEntries(STORAGE_METHOD_POLICY_BOOT_WRITE.map((method) => [method, "boot-write"])),
+	...Object.fromEntries(STORAGE_METHOD_POLICY_NONE.map((method) => [method, "none"]))
+});
+
+//#endregion
+//#region src/gateway/server-methods/storage-fence.ts
+const STORAGE_START_WAIT_MS = 1e4;
+const log$21 = createSubsystemLogger("gateway/storage-fence");
+const warnedGates = /* @__PURE__ */ new WeakSet();
+/**
+* Returns true when this call has been answered by the fence (held out, or answered a typed
+* error), so dispatch must not run the handler. Runs after authorization and the method-set
+* rate limits, so an unauthorized caller never learns storage readiness. Absent context gate or
+* `none`/missing classification means no storage decision applies to the method.
+*/
+async function guardStorageRpc(method, context, respond) {
+	const policy = Object.hasOwn(STORAGE_METHOD_POLICY, method) ? STORAGE_METHOD_POLICY[method] : void 0;
+	const gate = context.storageStartup;
+	if (policy === void 0 || policy === "none" || !gate) return false;
+	let state = gate.state();
+	if (state.phase === "ready") return false;
+	state = await gate.whenSettled(STORAGE_START_WAIT_MS);
+	if (state.phase === "ready") return false;
+	if (state.phase === "failed") {
+		if (policy === "boot-write") return false;
+		respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, "session storage failed to start", {
+			retryable: false,
+			details: {
+				code: "storage_start_failed",
+				reasonCodes: state.reasonCodes
+			}
+		}));
+		return true;
+	}
+	if (state.phase === "starting" && !warnedGates.has(gate)) {
+		warnedGates.add(gate);
+		log$21.warn("session storage still starting after 10000ms; storage-backed methods answer RECOVERY_NOT_READY");
+	}
+	const stopping = state.phase === "stopping";
+	respond(false, void 0, errorShape(ErrorCodes.RECOVERY_NOT_READY, stopping ? "gateway is stopping" : "session storage is still starting", {
+		retryable: true,
+		retryAfterMs: 500,
+		details: {
+			producer: "session-storage",
+			phase: state.phase,
+			reasonCodes: [stopping ? "storage_stopping" : "storage_starting"]
+		}
+	}));
+	return true;
+}
+
 //#endregion
 //#region src/gateway/server/presence-events.ts
 function broadcastPresenceSnapshot(params) {
@@ -19309,10 +19511,6 @@ function createSttTtsTurnController(params) {
 	const sm = new SttTtsLoopStateMachine();
 	let sessionClosed = false;
 	let currentTurn;
-	/** The utterance text whose eager end-of-turn produced (or last resumed) the current turn.
-	* Lives only as long as that turn does: retireTurn() clears it, so a later identical
-	* utterance is a genuine new turn, never a swallowed stale confirmation. */
-	let eagerUtterance;
 	/** VAL-LOOP-001: every state transition is logged (never the wire — these never carry
 	* transcript/audio content, only the state names and a short reason tag). */
 	function transitionState(to, reason) {
@@ -19427,10 +19625,7 @@ function createSttTtsTurnController(params) {
 		turn.unsubscribeAgentEvents();
 		sm.resetTurn();
 		transitionState("listening", "turn-settled");
-		if (currentTurn === turn) {
-			currentTurn = void 0;
-			eagerUtterance = void 0;
-		}
+		if (currentTurn === turn) currentTurn = void 0;
 	}
 	function emitTurnCancelled(turn, reason) {
 		if (turn.fillerPlayed || turn.fillerTimer) broadcast(sequencer.next({
@@ -19578,6 +19773,15 @@ function createSttTtsTurnController(params) {
 			text
 		});
 	}
+	function resumeCandidate(turn, text) {
+		if (turn.cancelled || turn.finished) return false;
+		if (text === turn.userText) return false;
+		if (turn.sawTtsAudio) {
+			turnBargeIn.evaluateCandidateText(turn, text);
+			return false;
+		}
+		return wordCount(text) >= 1;
+	}
 	function handleEndOfTurn(result) {
 		if (sessionClosed) return;
 		const text = result.text.trim();
@@ -19585,29 +19789,25 @@ function createSttTtsTurnController(params) {
 			if (text) startNewTurn(text);
 			return;
 		}
-		handlePossibleResume(text);
+		if (resumeCandidate(currentTurn, text)) {
+			teardownTurnForCancel(currentTurn, "turn-resumed");
+			startNewTurn(text);
+		}
 	}
-	/** VAL-LOOP-006: a partial/second-EOT with >=1 word, arriving after end-of-turn but before the
-	* first real assistant audio, cancels the in-flight run (turn-resumed) and starts a fresh turn
-	* from the new text. Once real audio has started, further speech is a barge-in concern — out
-	* of scope here (the dedicated turn-taking task owns it) — so this never fires past that point. */
+	/** VAL-LOOP-006 (ADR 0087 section 4.5): a worded partial/transcript arriving after
+	* end-of-turn but before the first real assistant audio only cancels the in-flight run
+	* (turn-resumed); it never starts a turn itself - the continuation's own end-of-turn starts
+	* it. Once real audio has started, further speech is a barge-in concern - out of scope here
+	* (the dedicated turn-taking task owns it) - so this never fires past that point. */
 	function handlePossibleResume(text) {
 		if (sessionClosed) return;
 		const turn = currentTurn;
-		if (!turn || turn.cancelled || turn.finished) return;
-		if (eagerUtterance !== void 0 && text === eagerUtterance) return;
-		if (turn.sawTtsAudio) {
-			turnBargeIn.evaluateCandidateText(turn, text);
-			return;
-		}
-		if (wordCount(text) < 1) return;
-		teardownTurnForCancel(turn, "turn-resumed");
-		startNewTurn(text);
+		if (!turn) return;
+		if (resumeCandidate(turn, text.trim())) teardownTurnForCancel(turn, "turn-resumed");
 	}
-	/** ADR 0087 section 5: a provider-native resume signal carries no text, so unlike
-	* handlePossibleResume this only cancels - the continuation's own onPartial/onTranscript/
-	* onEndOfTurn (routed through handlePossibleResume/handleEndOfTurn as usual) is what actually
-	* starts the next turn, once it arrives with real text. */
+	/** ADR 0087 section 5: a provider-native resume signal carries no text. Like
+	* handlePossibleResume, this only cancels; the continuation's own end-of-turn (routed through
+	* handleEndOfTurn) starts the next turn once it arrives with real text. */
 	function handleProviderTurnResumed() {
 		if (sessionClosed) return;
 		const turn = currentTurn;
@@ -19619,15 +19819,6 @@ function createSttTtsTurnController(params) {
 		if (sessionClosed) return;
 		bargeInSurface.handleBargeIn(speechDetectedAt, playbackPausedAt);
 	}
-	/** A fused-detection provider's early, not-yet-committed end-of-turn: handled exactly like a
-	* committed one, then the utterance is remembered so its committed confirmation (the matching
-	* onTranscript/onEndOfTurn pair) does not re-enter the resume path. Set AFTER handling so this
-	* very event starts/resumes the turn instead of consuming itself. */
-	function handleEagerEndOfTurn(result) {
-		if (sessionClosed) return;
-		handleEndOfTurn(result);
-		eagerUtterance = result.text.trim() || void 0;
-	}
 	/** Monotonic: a stale/out-of-order mark ack can only hold or advance `heardChars`, never move
 	* it backward. */
 	function acknowledgeMark(markName, timestamp) {
@@ -19637,7 +19828,6 @@ function createSttTtsTurnController(params) {
 	}
 	return {
 		handleEndOfTurn,
-		handleEagerEndOfTurn,
 		handlePossibleResume,
 		handleProviderTurnResumed,
 		cancelActiveTurn,
@@ -19763,7 +19953,7 @@ function createSttTtsLoopSession(params) {
 			},
 			onEagerEndOfTurn: (result) => {
 				clearSpeechCapTimer();
-				turnController.handleEagerEndOfTurn(result);
+				turnController.handleEndOfTurn(result);
 			},
 			onTurnResumed: () => {
 				clearSpeechCapTimer();
@@ -20891,6 +21081,9 @@ async function buildTalkCatalogStreamingTranscriptionSection(params) {
 		rows
 	};
 }
+function resolveSpeechVoiceId(provider, config) {
+	return config?.voiceId?.trim() || provider.defaultVoiceId?.trim() || void 0;
+}
 async function buildTalkCatalogSpeechSection(params) {
 	const providers = getRegisteredStreamingSpeechProviders();
 	const configuredId = params.configuredTtsProviderId?.trim();
@@ -20902,11 +21095,12 @@ async function buildTalkCatalogSpeechSection(params) {
 			cfg: params.cfg,
 			apiKey: providerConfig?.apiKey
 		});
+		const voiceMissing = status.configured && !resolveSpeechVoiceId(provider, providerConfig);
 		rows.push({
 			id: provider.id,
 			label: provider.label,
-			configured: status.configured,
-			...status.diagnostic ? { diagnostic: status.diagnostic } : {},
+			configured: status.configured && !voiceMissing,
+			...status.diagnostic ? { diagnostic: status.diagnostic } : voiceMissing ? { diagnostic: "missing-voice-id" } : {},
 			modes: ["streaming"],
 			transports: ["gateway-relay"]
 		});
@@ -21075,9 +21269,10 @@ const talkHandlers = {
 		if (p.mode === "stt-tts") {
 			const sttCandidateId = conversationConfig.sttProvider.trim().toLowerCase();
 			const sttProvider = getRegisteredRealtimeTranscriptionProviders().find((candidate) => candidate.id.trim().toLowerCase() === sttCandidateId);
-			const { provider: ttsProviderId, config: ttsConfig } = resolveActiveTalkProviderConfig(snapshot.config.talk);
+			const { provider: ttsProviderId, config: ttsEntry } = resolveActiveTalkProviderConfig(snapshot.config.talk);
+			const ttsConfig = ttsEntry ?? {};
 			const ttsProvider = ttsProviderId ? getRegisteredStreamingSpeechProviders().find((candidate) => candidate.id.trim().toLowerCase() === ttsProviderId.trim().toLowerCase()) : void 0;
-			if (!sttProvider || !ttsProvider || !ttsConfig?.voiceId) {
+			if (!sttProvider || !ttsProvider) {
 				respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, "stt-tts requires a configured STT and TTS provider"));
 				return;
 			}
@@ -21089,14 +21284,26 @@ const talkHandlers = {
 				cfg: snapshot.config,
 				providerConfig: ttsConfig
 			});
-			if (!sttProvider.isConfigured({
+			const unconfigured = !sttProvider.isConfigured({
 				cfg: snapshot.config,
 				providerConfig: resolvedSttProviderConfig
-			}) || !ttsProvider.isConfigured({
+			}) ? {
+				seam: "transcription",
+				id: sttProvider.id
+			} : !ttsProvider.isConfigured({
 				cfg: snapshot.config,
 				providerConfig: resolvedTtsProviderConfig
-			})) {
-				respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, "stt-tts requires a configured STT and TTS provider"));
+			}) ? {
+				seam: "speech",
+				id: ttsProviderId
+			} : void 0;
+			if (unconfigured) {
+				respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, `stt-tts requires a configured STT and TTS provider: ${unconfigured.seam} provider "${unconfigured.id}" is not configured; check talk.providers.${unconfigured.id}.apiKey`));
+				return;
+			}
+			const voiceId = resolveSpeechVoiceId(ttsProvider, ttsConfig);
+			if (!voiceId) {
+				respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, `stt-tts requires talk.providers.${ttsProviderId}.voiceId: speech provider "${ttsProvider.id}" has no default voice`));
 				return;
 			}
 			const rawSessionKey = p.sessionKey;
@@ -21119,7 +21326,7 @@ const talkHandlers = {
 						},
 						ttsProvider,
 						ttsProviderConfig: resolvedTtsProviderConfig,
-						voiceId: ttsConfig.voiceId,
+						voiceId,
 						modelId: ttsConfig.modelId ?? DEFAULT_TALK_CONVERSATION_MODEL_ID,
 						outputFormat: ttsConfig.outputFormat ?? "pcm_24000",
 						locale: conversationConfig.locale,
@@ -22232,9 +22439,9 @@ function toRedactedEvent(event) {
 	};
 }
 async function listQueuedView(params, runtime, respond) {
-	const registry = getTaskOperatorRegistry();
+	const registry = await resolveTaskOperatorRegistry();
 	if (!registry) {
-		respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, "task_registry_unavailable", { details: { code: "task_registry_unavailable" } }));
+		respondTaskRegistryUnavailable(respond);
 		return;
 	}
 	const busWork = runtime.busWork;
@@ -23910,6 +24117,7 @@ async function handleGatewayRequest(opts) {
 			return;
 		}
 	}
+	if (await guardStorageRpc(req.method, context, respond)) return;
 	await handler({
 		req,
 		params: req.params ?? {},
@@ -24854,7 +25062,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.OPENCLAW_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.OPENCLAW_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./server-IDopagLT.js");
+	const mod = override ? await import(override) : await import("./server-y8WhCQvu.js");
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -31212,29 +31420,56 @@ function createStorageRecoveryContainment(deps) {
 //#endregion
 //#region src/gateway/storage-startup-gate.ts
 function createStorageStartupGate() {
+	let phase = { phase: "ready" };
 	let held = false;
 	const waiters = /* @__PURE__ */ new Set();
+	const wakeAll = () => {
+		for (const wake of waiters) wake();
+	};
 	return {
 		hold() {
-			held = true;
+			if (!held && phase.phase === "ready") {
+				held = true;
+				phase = { phase: "starting" };
+			}
 		},
-		release() {
-			held = false;
-			for (const wake of waiters) wake();
+		markReady() {
+			if (phase.phase === "starting") {
+				phase = { phase: "ready" };
+				wakeAll();
+			}
 		},
-		whenReleased(timeoutMs) {
-			if (!held) return Promise.resolve(true);
-			return new Promise((resolve) => {
-				const wake = () => {
-					clearTimeout(timer);
-					waiters.delete(wake);
-					resolve(true);
+		markFailed(reasonCodes) {
+			if (phase.phase === "starting") {
+				phase = {
+					phase: "failed",
+					reasonCodes: [...reasonCodes]
 				};
+				wakeAll();
+			}
+		},
+		markStopping() {
+			if (phase.phase !== "stopping") {
+				phase = { phase: "stopping" };
+				wakeAll();
+			}
+		},
+		state() {
+			return phase;
+		},
+		whenSettled(timeoutMs) {
+			if (phase.phase !== "starting" && phase.phase !== "stopping") return Promise.resolve(phase);
+			return new Promise((resolve) => {
 				const timer = setTimeout(() => {
 					waiters.delete(wake);
-					resolve(false);
+					resolve(phase);
 				}, timeoutMs);
 				timer.unref?.();
+				const wake = () => {
+					clearTimeout(timer);
+					waiters.delete(wake);
+					resolve(phase);
+				};
 				waiters.add(wake);
 			});
 		}
@@ -35179,7 +35414,12 @@ async function bootGatewayServer(port, opts) {
 		};
 		fencedStorageSupervisorStart = async () => {
 			await supervisor.start();
-			storageStartup.release();
+			if (supervisor.getState() !== "healthy" && !params.resolved.fallbackToJsonlOnError) {
+				await storageSupervisorStop?.();
+				storageSupervisorStop = null;
+				throw new FatalConfiguredStorageStartError();
+			}
+			storageStartup.markReady();
 			try {
 				const { installIncidentAsset } = await import("./incident-install-B626HvYY.js");
 				await installIncidentAsset({
@@ -35212,11 +35452,6 @@ async function bootGatewayServer(port, opts) {
 				noteStorageRestartRequired("session-run-startup-recovery");
 				noteStorageRestartRequired("shutdown-run-reconciliation");
 			}
-			if (supervisor.getState() !== "healthy" && !params.resolved.fallbackToJsonlOnError) {
-				await storageSupervisorStop?.();
-				storageSupervisorStop = null;
-				throw new FatalConfiguredStorageStartError();
-			}
 		};
 		if (params.bootImmediately) await fencedStorageSupervisorStart();
 		else storageStartup.hold();
@@ -35578,7 +35813,7 @@ async function bootGatewayServer(port, opts) {
 		const sweepLog = log.child("session-consumer-claim-sweep");
 		const { createDiagnosticRingBuffer } = await import("./session-consumer-diagnostics-BUKxP8bu.js");
 		const diagnostics = createDiagnosticRingBuffer();
-		const { setDiagnostics } = await import("./sessions-CgVN798h.js").then((n) => n.n);
+		const { setDiagnostics } = await import("./sessions-DFDrcshi.js").then((n) => n.n);
 		if (sessionConsumerClaimSweepCancelled) return;
 		setDiagnostics(diagnostics);
 		const lastKnownEnabledState = /* @__PURE__ */ new Map();
@@ -35617,7 +35852,7 @@ async function bootGatewayServer(port, opts) {
 					lastKnownEnabledState,
 					cfg: loadConfig()
 				});
-				const { setLastSweepTimestamp } = await import("./sessions-CgVN798h.js").then((n) => n.n);
+				const { setLastSweepTimestamp } = await import("./sessions-DFDrcshi.js").then((n) => n.n);
 				setLastSweepTimestamp(Date.now());
 			} catch (err) {
 				sweepLog.warn(`session consumer-claim sweep failed: ${String(err)}`);
@@ -35639,7 +35874,7 @@ async function bootGatewayServer(port, opts) {
 			prepare: () => {
 				taskPipelineBoot = (async () => {
 					const { getConfiguredSessionStorageRuntime } = await import("./config-BPACL-n5.js").then((n) => n.Hn);
-					const { startTaskPipeline } = await import("./task-pipeline-boot-BLEjtMkt.js");
+					const { startTaskPipeline } = await import("./task-pipeline-boot-CM-3tH09.js");
 					const pipeline = startTaskPipeline({
 						getConfigured: getConfiguredSessionStorageRuntime,
 						cfg: cfgAtStart,
@@ -35808,7 +36043,17 @@ async function bootGatewayServer(port, opts) {
 		});
 		try {
 			recoveryRuntime = await Promise.race([ownInstalled, recoveryStarted]) ?? null;
+			if (storageStartup.state().phase === "starting") {
+				let codes = [];
+				try {
+					codes = recoveryRuntime?.snapshot().reasonCodes ?? [];
+				} catch {
+					codes = [];
+				}
+				storageStartup.markFailed(codes.length > 0 ? codes : ["recovery_start_failed"]);
+			}
 		} catch (err) {
+			if (storageStartup.state().phase === "starting") storageStartup.markFailed(["recovery_start_failed"]);
 			if (skillsRefreshTimer) {
 				clearTimeout(skillsRefreshTimer);
 				skillsRefreshTimer = null;
@@ -36019,6 +36264,7 @@ async function bootGatewayServer(port, opts) {
 		startDiagnosticHeartbeat();
 	}
 	return { close: async (opts) => {
+		storageStartup.markStopping();
 		recoveryAdmission.closeAdmission();
 		await runGlobalGatewayStopSafely({
 			event: { reason: opts?.reason ?? "gateway stopping" },