wednesdayai 0.4.12-dev.719 → 0.4.12-dev.721

package/dist/{gateway-cli-CVnksdlt.js → gateway-cli-CDCwUJ0Z.js}

@@ -2,7 +2,7 @@ import { g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as
 import { $ as readLoggingConfig, A as setVerbose, At as resolvePreferredOpenClawTmpDir, C as truncateUtf16Safe, F as isRich, I as theme, K as resolveFileLogProfile, L as getChildLogger, P as colorize, R as getLogger, W as appendFileLog, _t as isNotFoundPathError, c as ensureDir, dt as openVerifiedFileSync, ft as sameFileIdentity, g as resolveUserPath, lt as openBoundaryFile, t as CONFIG_DIR, ut as openBoundaryFileSync, vt as isPathInside, y as shortenHomePath, z as getResolvedLoggerSettings } from "./utils-CMEUUHmM.js";
 import { t as isPlainObject } from "./plain-object-DHRdTVMa.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-DDYFn78t.js";
-import { $n as setTtsProvider, A as resolveCronSession, An as ensureOutboundSessionEntry, Ar as resolveAgentTimeoutMs, At as takePendingActivationMigration, Bn as setTaskPipelineStatus, Bt as resolveAgentOutboundIdentity, C as startHeartbeatRunner, Cn as buildHistoryContextFromEntries, Cr as DEFAULT_INPUT_IMAGE_MIMES, Ct as persistBrowserProxyFiles, D as onHeartbeatEvent, Dn as createReplyDispatcher, Dr as extractImageContentFromSource, Dt as clearPluginRegistryCaches, E as getLastHeartbeatEvent, En as setDispatchInboundAdmissionRejectionFor, Er as extractFileContentFromSource, F as waitForPendingWrites, Fn as resolveOutboundChannelPlugin, Ft as loadProviderUsageSummary, Gn as isTtsEnabled, H as readLatestAssistantReply, Hn as resolveUserTimezone, Ht as handleSlackHttpRequest, J as loadCombinedSessionStoreForGateway, Jn as resolveTtsAutoMode, K as listAgentsForGateway, Kn as isTtsProviderConfigured, L as resolveExecConfig, Ln as resetDirectoryCache, M as runEmbeddedPiAgent, Mn as resolveHeartbeatDeliveryTarget, Mt as requestNudge, N as prepareSessionManagerForRun, Nn as resolveOutboundTarget, O as redactSensitiveHeartbeatEvent, On as getTotalPendingReplies, Or as normalizeMimeList, Ot as getLoadedAnalysisConcurrency, P as snapshotRunPendingWrites, Pn as resolveSessionDeliveryTarget, Q as resolveSessionModelRef, Qn as setTtsEnabled, R as applyToolPolicyPipeline, Rn as isAbortRequestText, S as setHeartbeatsEnabled, Sr as DEFAULT_INPUT_IMAGE_MAX_BYTES, St as applyBrowserProxyPaths, T as resolveHeartbeatVisibility, Tn as dispatchInboundMessage, Tr as DEFAULT_INPUT_TIMEOUT_MS, Tt as resolvePluginTools, U as resolveAnnounceTargetFromKey, Ut as readJsonBodyWithLimit, V as createOpenClawTools, Vn as DEFAULT_MAX_PARALLEL, W as canonicalizeSpawnedByForAgent, Wn as getTtsProvider, Wt as requestBodyErrorToText, X as pruneLegacyStoreKeys, Xn as resolveTtsPrefsPath, Xt as resolveAgentOutboundTarget, Y as loadSessionEntry, Yn as resolveTtsConfig, Yt as resolveAgentDeliveryPlan, Z as resolveGatewaySessionStoreTarget, Zn as resolveTtsProviderOrder, Zt as createOutboundSendDeps, _ as runMainAgentTurn, _r as ACP_SESSION_IDENTITY_RENDERER_VERSION, _t as normalizeCronJobPatch, an as runCliAgent, ar as removeQueuedFollowupRun, at as scheduleGatewaySigusr1Restart, b as runHeartbeatOnce, bn as getHookType, bt as hasLegacyDeliveryHints, cr as ToolInputError, ct as triggerOpenClawRestart, d as countActiveDescendantRuns, dn as computeBackoff, dt as formatRestartSentinelMessage, en as createDefaultDeps, er as textToSpeech, et as consumeGatewaySigusr1RestartAuthorization, f as initSubagentRegistry, fn as sleepWithAbort, gt as normalizeCronJobCreate, h as runSubagentAnnounceFlow, ht as writeRestartSentinel, in as setCliSessionId, ir as getExistingFollowupQueue, it as markGatewaySigusr1RestartHandled, j as resolveCronStyleNow, jn as resolveOutboundSessionRoute, jt as createPluginRuntime, k as isCronSystemEvent, kr as resolveInputFileLimits, kt as loadOpenClawPlugins, ln as lookupContextTokens, lr as enqueueSystemEvent, lt as consumeRestartSentinel, mn as resolveAgentAvatar, mr as requestHeartbeatNow, nn as runWithModelFallback, nr as OPENAI_TTS_VOICES, nt as emitGatewayRestart, o as resolveChannelAccountEnabled, or as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, ot as setGatewaySigusr1RestartPolicy, p as listDescendantRunsForRequester, pn as resolveSessionAuthProfileOverride, pt as summarizeRestartSentinel, qn as resolveTtsApiKey, qt as agentCommandFromIngress, rn as getCliSessionId, rr as clearSessionQueues, rt as isGatewaySigusr1RestartExternallyAllowed, s as BARE_SESSION_RESET_PROMPT, sr as stripHeartbeatToken, st as setPreRestartDeferralCheck, tn as createOutboundSendDeps$1, tr as OPENAI_TTS_MODELS, tt as deferGatewayRestartUntilIdle, ur as isSystemEventContextChanged, ut as formatDoctorNonInteractiveHint, v as resolveHeartbeatConfig, vn as buildSafeExternalPrompt, vr as getAcpSessionManager, vt as migrateLegacyCronPayload, w as runWakeGate, wr as DEFAULT_INPUT_MAX_REDIRECTS, wt as getPluginToolMeta, xn as isExternalHookSession, xr as resolveSendPolicy, xt as stripLegacyDeliveryFields, y as resolveHeartbeatSummaryForAgent, yn as detectSuspiciousPatterns, yr as resolveAgentSessionDirs, yt as buildDeliveryFromLegacyPayload, z as buildDefaultToolPolicyPipelineSteps } from "./reply-B4TgvJrJ.js";
+import { $n as setTtsEnabled, A as resolveCronSession, An as ensureOutboundSessionEntry, Ar as resolveInputFileLimits, At as takePendingActivationMigration, Bt as resolveAgentOutboundIdentity, C as startHeartbeatRunner, Cn as buildHistoryContextFromEntries, Cr as DEFAULT_INPUT_IMAGE_MAX_BYTES, Ct as persistBrowserProxyFiles, D as onHeartbeatEvent, Dn as createReplyDispatcher, Dr as extractFileContentFromSource, Dt as clearPluginRegistryCaches, E as getLastHeartbeatEvent, En as setDispatchInboundAdmissionRejectionFor, Er as DEFAULT_INPUT_TIMEOUT_MS, F as waitForPendingWrites, Fn as resolveOutboundChannelPlugin, Ft as loadProviderUsageSummary, Gn as getTtsProvider, H as readLatestAssistantReply, Hn as DEFAULT_MAX_PARALLEL, Ht as handleSlackHttpRequest, J as loadCombinedSessionStoreForGateway, Jn as resolveTtsApiKey, K as listAgentsForGateway, Kn as isTtsEnabled, L as resolveExecConfig, Ln as resetDirectoryCache, M as runEmbeddedPiAgent, Mn as resolveHeartbeatDeliveryTarget, Mt as requestNudge, N as prepareSessionManagerForRun, Nn as resolveOutboundTarget, O as redactSensitiveHeartbeatEvent, On as getTotalPendingReplies, Or as extractImageContentFromSource, Ot as getLoadedAnalysisConcurrency, P as snapshotRunPendingWrites, Pn as resolveSessionDeliveryTarget, Q as resolveSessionModelRef, Qn as resolveTtsProviderOrder, R as applyToolPolicyPipeline, Rn as isAbortRequestText, S as setHeartbeatsEnabled, Sr as resolveSendPolicy, St as applyBrowserProxyPaths, T as resolveHeartbeatVisibility, Tn as dispatchInboundMessage, Tr as DEFAULT_INPUT_MAX_REDIRECTS, Tt as resolvePluginTools, U as resolveAnnounceTargetFromKey, Un as resolveUserTimezone, Ut as readJsonBodyWithLimit, V as createOpenClawTools, Vn as setTaskPipelineStatus, W as canonicalizeSpawnedByForAgent, Wt as requestBodyErrorToText, X as pruneLegacyStoreKeys, Xn as resolveTtsConfig, Xt as resolveAgentOutboundTarget, Y as loadSessionEntry, Yn as resolveTtsAutoMode, Yt as resolveAgentDeliveryPlan, Z as resolveGatewaySessionStoreTarget, Zn as resolveTtsPrefsPath, Zt as createOutboundSendDeps, _ as runMainAgentTurn, _t as normalizeCronJobPatch, an as runCliAgent, ar as getExistingFollowupQueue, at as scheduleGatewaySigusr1Restart, b as runHeartbeatOnce, bn as getHookType, br as resolveAgentSessionDirs, bt as hasLegacyDeliveryHints, cr as stripHeartbeatToken, ct as triggerOpenClawRestart, d as countActiveDescendantRuns, dn as computeBackoff, dr as isSystemEventContextChanged, dt as formatRestartSentinelMessage, en as createDefaultDeps, er as setTtsProvider, et as consumeGatewaySigusr1RestartAuthorization, f as initSubagentRegistry, fn as sleepWithAbort, gt as normalizeCronJobCreate, h as runSubagentAnnounceFlow, hr as requestHeartbeatNow, ht as writeRestartSentinel, in as setCliSessionId, ir as clearSessionQueues, it as markGatewaySigusr1RestartHandled, j as resolveCronStyleNow, jn as resolveOutboundSessionRoute, jr as resolveAgentTimeoutMs, jt as createPluginRuntime, k as isCronSystemEvent, kr as normalizeMimeList, kt as loadOpenClawPlugins, ln as lookupContextTokens, lr as ToolInputError, lt as consumeRestartSentinel, mn as resolveAgentAvatar, nn as runWithModelFallback, nr as OPENAI_TTS_MODELS, nt as emitGatewayRestart, o as resolveChannelAccountEnabled, or as removeQueuedFollowupRun, ot as setGatewaySigusr1RestartPolicy, p as listDescendantRunsForRequester, pn as resolveSessionAuthProfileOverride, pt as summarizeRestartSentinel, qn as isTtsProviderConfigured, qt as agentCommandFromIngress, rn as getCliSessionId, rr as OPENAI_TTS_VOICES, rt as isGatewaySigusr1RestartExternallyAllowed, s as BARE_SESSION_RESET_PROMPT, sr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, st as setPreRestartDeferralCheck, tn as createOutboundSendDeps$1, tr as textToSpeech, tt as deferGatewayRestartUntilIdle, ur as enqueueSystemEvent, ut as formatDoctorNonInteractiveHint, v as resolveHeartbeatConfig, vn as buildSafeExternalPrompt, vr as ACP_SESSION_IDENTITY_RENDERER_VERSION, vt as migrateLegacyCronPayload, w as runWakeGate, wr as DEFAULT_INPUT_IMAGE_MIMES, wt as getPluginToolMeta, xn as isExternalHookSession, xt as stripLegacyDeliveryFields, y as resolveHeartbeatSummaryForAgent, yn as detectSuspiciousPatterns, yr as getAcpSessionManager, yt as buildDeliveryFromLegacyPayload, z as buildDefaultToolPolicyPipelineSteps } from "./reply-B_SiN91-.js";
 import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, M as matchesSkillFilter, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-CWTkr4pS.js";
 import { m as defaultRuntime, n as runtimeForLogger, o as setConsoleSubsystemFilter, s as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-DDZBycwS.js";
 import { A as isCronRunSessionKey, M as isSubagentSessionKey, N as parseAgentSessionKey, S as normalizeAccountId$1, a as classifySessionKeyShape, b as toAgentStoreSessionKey, d as normalizeAgentId, f as normalizeMainKey, g as resolveLinkedPeerIdForChannel, h as resolveConfiguredCanonicalIdentity, p as resolveAgentIdFromSessionKey, r as buildAgentMainSessionKey, t as DEFAULT_AGENT_ID, x as DEFAULT_ACCOUNT_ID, y as toAgentRequestSessionKey } from "./session-key-B1wN38jV.js";
@@ -24,12 +24,12 @@ import { c as isDiagnosticsEnabled, l as onDiagnosticEvent, s as emitDiagnosticE
 import { n as USER_CLIENT_ID, o as buildUserClientRuntimeConfig, s as handleUserClientHttpRequest } from "./static-server-C-iTMRyz.js";
 import { n as assertNoPathAliasEscape } from "./path-alias-guards-BSmwo1rT.js";
 import { i as openFileWithinRoot, l as writeFileWithinRoot, s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-DD7KXuvI.js";
-import { D as normalizeMediaProviderId, E as listAutoDetectableProviders, T as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, g as registerUnhandledRejectionHandler, n as buildProviderRegistry, x as resolveModelEntries, y as resolveCapabilityConfig } from "./audio-transcription-runner-BvZFFknx.js";
+import { D as normalizeMediaProviderId, E as listAutoDetectableProviders, T as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, g as registerUnhandledRejectionHandler, n as buildProviderRegistry, x as resolveModelEntries, y as resolveCapabilityConfig } from "./audio-transcription-runner-CsQR8LpS.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-CjyGDRXN.js";
 import { t as SsrFBlockedError } from "./ssrf-B85AIIOO.js";
 import "./proxy-fetch-Czv8kxaL.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-BXebcnwh.js";
-import "./pi-embedded-helpers-CPorV-Mk.js";
+import "./pi-embedded-helpers-DIUrv2Ua.js";
 import "./local-roots-_qt4-Ma5.js";
 import { c as detectMime } from "./image-ops-DcqCZEUY.js";
 import { a as testRegexWithBoundedInput, i as compileSafeRegex } from "./redact-CQtYLB4a.js";
@@ -37,10 +37,10 @@ import { i as formatErrorMessage, o as hasErrnoCode, s as isErrno } from "./erro
 import "./models-config-Burwt3mB.js";
 import { n as loadModelCatalog } from "./model-catalog-C7itJJDM.js";
 import "./api-key-rotation-BEt1ZchD.js";
-import "./provider-image-CIpRvhkS.js";
+import "./provider-image-BICZzOki.js";
 import "./pi-model-discovery-CfUi22Es.js";
-import { h as extractTextFromChatContent } from "./pi-embedded-utils-lp-U3XQ9.js";
-import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-DbfWdQha.js";
+import { h as extractTextFromChatContent } from "./pi-embedded-utils-BetZbS6i.js";
+import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-7YCCMJoM.js";
 import { i as listCoreToolSections, n as PROFILE_OPTIONS, o as resolveCoreToolProfiles } from "./tool-catalog-B6wH7-iE.js";
 import { i as resolveRelayAuthTokenForPort, n as resolveGatewayRelayToken } from "./extension-relay-auth-C-1c9CZk.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-DbsrfsUT.js";
@@ -48,7 +48,7 @@ import { t as safeEqualSecret } from "./secret-equal-DyYamV7h.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-G5phL2pY.js";
 import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-BuVK_u9S.js";
 import { a as isDirectLoopbackProvenance, c as AUTH_RATE_LIMIT_SCOPE_BROWSER_EXTENSION, d as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, f as createAuthRateLimiter, i as captureTransportProvenance, l as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, n as authorizeHttpGatewayConnect, o as isLocalDirectRequest, p as normalizeRateLimitClientIp, r as authorizeWsControlUiGatewayConnect, s as resolveGatewayAuth, t as assertGatewayAuthConfigured, u as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH } from "./auth-DeLQvx-N.js";
-import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-FPrSnBNG.js";
+import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-CQQ6Q5Kp.js";
 import { d as hasBinary } from "./frontmatter-B8Zb_8go.js";
 import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-Buc1RWDY.js";
 import "./store-DoqX9VsZ.js";
@@ -63,9 +63,9 @@ import { r as isRestartEnabled } from "./commands-tFdLuF5k.js";
 import "./commands-registry-BMswme6t.js";
 import { t as redactIdentifier } from "./redact-identifier-CSPL9LuH.js";
 import "./registry-D9ygkK-J.js";
-import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-DzWOPhgy.js";
-import { $ as validateNodeListParams, $t as validateTalkSessionCreateParams, A as validateCronRunParams, B as validateExecApprovalRequestParams, Bn as verifyDeviceToken, Bt as validateTalkConfigParams, C as validateConfigPatchParams, Cn as normalizeDeviceMetadataForAuth, D as validateCronAddParams, Dn as consumeDeviceBootstrapToken, E as validateConnectParams, En as approveDevicePairing, F as validateDevicePairListParams, Fn as revokeDeviceToken, Ft as validateSkillsBinsParams, G as validateExecApprovalsSetParams, Gt as validateTalkRealtimeSessionParams, H as validateExecApprovalsGetParams, Ht as validateTalkRealtimeAudioParams, I as validateDevicePairRejectParams, In as rotateDeviceToken, It as validateSkillsInstallParams, J as validateModelsListParams, Jt as validateTalkRealtimeToolResultParams, K as validateLogsTailParams, Kt as validateTalkRealtimeStatusParams, L as validateDevicePairRemoveParams, Ln as summarizeDeviceTokens, Lt as validateSkillsStatusParams, M as validateCronStatusParams, Mn as rejectDevicePairing, N as validateCronUpdateParams, Nn as removePairedDevice, Nt as validateSessionsTitlePrepareParams, O as validateCronListParams, On as ensureDeviceToken, P as validateDevicePairApproveParams, Pn as requestDevicePairing, Pt as validateSessionsUsageParams, Q as validateNodeInvokeResultParams, Qt as validateTalkSessionCloseParams, R as validateDeviceTokenRevokeParams, Rn as updatePairedDeviceMetadata, Rt as validateSkillsUpdateParams, S as validateConfigGetParams, Sn as buildDeviceAuthPayloadV3, T as validateConfigSetParams, Tn as approveBootstrapDevicePairing, U as validateExecApprovalsNodeGetParams, Un as operatorScopeSatisfied, Ut as validateTalkRealtimeBargeInParams, V as validateExecApprovalResolveParams, Vt as validateTalkModeParams, W as validateExecApprovalsNodeSetParams, Wn as roleScopesAllow, Wt as validateTalkRealtimeMarkParams, X as validateNodeEventParams, Xn as verifyDeviceSignature, Xt as validateTalkSessionBargeInParams, Y as validateNodeDescribeParams, Yn as normalizeDevicePublicKeyBase64Url, Yt as validateTalkSessionAppendAudioParams, Z as validateNodeInvokeParams, Zt as validateTalkSessionCancelTurnParams, _ as validateChatAbortParams, _n as ErrorCodes, a as validateAgentNudgeParams, an as validateToolsCatalogParams, at as validateNodeRenameParams, b as validateChatSendParams, c as validateAgentsCreateParams, cn as validateWebLoginStartParams, ct as validateRequestFrame, d as validateAgentsFilesListParams, dn as validateWizardNextParams, dt as validateSendParams, en as validateTalkSessionMarkParams, et as validateNodePairApproveParams, f as validateAgentsFilesSetParams, fn as validateWizardStartParams, ft as validateSessionsAbortParams, g as validateChannelsStatusParams, h as validateChannelsLogoutParams, hn as RUNS_INVALIDATED_EVENT, i as validateAgentIdentityParams, in as validateTasksRunsListParams, it as validateNodePairVerifyParams, j as validateCronRunsParams, jn as listDevicePairing, jt as validateSessionsSteerParams, k as validateCronRemoveParams, kn as getPairedDevice, l as validateAgentsDeleteParams, ln as validateWebLoginWaitParams, lt as validateSecretsResolveParams, m as validateAgentsUpdateParams, mn as PROTOCOL_VERSION, nn as validateTasksRunsEventsParams, nt as validateNodePairRejectParams, o as validateAgentParams, on as validateUpdateRunParams, ot as validatePollParams, p as validateAgentsListParams, pn as validateWizardStatusParams, q as validateModelsAuthStatusParams, qn as deriveDeviceIdFromPublicKey, qt as validateTalkRealtimeStopParams, r as formatValidationErrors, rn as validateTasksRunsGetParams, rt as validateNodePairRequestParams, s as validateAgentWaitParams, sn as validateWakeParams, st as validatePushTestParams, tn as validateTasksRunEventsParams, tt as validateNodePairListParams, u as validateAgentsFilesGetParams, un as validateWizardCancelParams, ut as validateSecretsResolveResult, v as validateChatHistoryParams, vn as errorShape, w as validateConfigSchemaParams, x as validateConfigApplyParams, xn as buildDeviceAuthPayload, y as validateChatInjectParams, z as validateDeviceTokenRotateParams, zn as verifyDeviceBootstrapToken, zt as validateTalkCatalogParams } from "./client-BbpMX08n.js";
-import { _ as hasNarrowSessionScope, d as APPROVALS_SCOPE, f as PAIRING_SCOPE, g as authorizeOperatorScopesForMethod, h as WRITE_SCOPE, m as SESSION_READ_SCOPE, n as callGateway, p as READ_SCOPE, u as ADMIN_SCOPE$1, v as isHealthProbeAllowedForScopes, x as loadGatewayTlsRuntime$1, y as isNodeRoleMethod } from "./call-Cl6Q0T5z.js";
+import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-QcHb-Wlq.js";
+import { $ as validateNodeListParams, $t as validateTalkSessionCreateParams, A as validateCronRunParams, B as validateExecApprovalRequestParams, Bn as verifyDeviceToken, Bt as validateTalkConfigParams, C as validateConfigPatchParams, Cn as normalizeDeviceMetadataForAuth, D as validateCronAddParams, Dn as consumeDeviceBootstrapToken, E as validateConnectParams, En as approveDevicePairing, F as validateDevicePairListParams, Fn as revokeDeviceToken, Ft as validateSkillsBinsParams, G as validateExecApprovalsSetParams, Gt as validateTalkRealtimeSessionParams, H as validateExecApprovalsGetParams, Ht as validateTalkRealtimeAudioParams, I as validateDevicePairRejectParams, In as rotateDeviceToken, It as validateSkillsInstallParams, J as validateModelsListParams, Jt as validateTalkRealtimeToolResultParams, K as validateLogsTailParams, Kt as validateTalkRealtimeStatusParams, L as validateDevicePairRemoveParams, Ln as summarizeDeviceTokens, Lt as validateSkillsStatusParams, M as validateCronStatusParams, Mn as rejectDevicePairing, N as validateCronUpdateParams, Nn as removePairedDevice, Nt as validateSessionsTitlePrepareParams, O as validateCronListParams, On as ensureDeviceToken, P as validateDevicePairApproveParams, Pn as requestDevicePairing, Pt as validateSessionsUsageParams, Q as validateNodeInvokeResultParams, Qt as validateTalkSessionCloseParams, R as validateDeviceTokenRevokeParams, Rn as updatePairedDeviceMetadata, Rt as validateSkillsUpdateParams, S as validateConfigGetParams, Sn as buildDeviceAuthPayloadV3, T as validateConfigSetParams, Tn as approveBootstrapDevicePairing, U as validateExecApprovalsNodeGetParams, Un as operatorScopeSatisfied, Ut as validateTalkRealtimeBargeInParams, V as validateExecApprovalResolveParams, Vt as validateTalkModeParams, W as validateExecApprovalsNodeSetParams, Wn as roleScopesAllow, Wt as validateTalkRealtimeMarkParams, X as validateNodeEventParams, Xn as verifyDeviceSignature, Xt as validateTalkSessionBargeInParams, Y as validateNodeDescribeParams, Yn as normalizeDevicePublicKeyBase64Url, Yt as validateTalkSessionAppendAudioParams, Z as validateNodeInvokeParams, Zt as validateTalkSessionCancelTurnParams, _ as validateChatAbortParams, _n as ErrorCodes, a as validateAgentNudgeParams, an as validateToolsCatalogParams, at as validateNodeRenameParams, b as validateChatSendParams, c as validateAgentsCreateParams, cn as validateWebLoginStartParams, ct as validateRequestFrame, d as validateAgentsFilesListParams, dn as validateWizardNextParams, dt as validateSendParams, en as validateTalkSessionMarkParams, et as validateNodePairApproveParams, f as validateAgentsFilesSetParams, fn as validateWizardStartParams, ft as validateSessionsAbortParams, g as validateChannelsStatusParams, h as validateChannelsLogoutParams, hn as RUNS_INVALIDATED_EVENT, i as validateAgentIdentityParams, in as validateTasksRunsListParams, it as validateNodePairVerifyParams, j as validateCronRunsParams, jn as listDevicePairing, jt as validateSessionsSteerParams, k as validateCronRemoveParams, kn as getPairedDevice, l as validateAgentsDeleteParams, ln as validateWebLoginWaitParams, lt as validateSecretsResolveParams, m as validateAgentsUpdateParams, mn as PROTOCOL_VERSION, nn as validateTasksRunsEventsParams, nt as validateNodePairRejectParams, o as validateAgentParams, on as validateUpdateRunParams, ot as validatePollParams, p as validateAgentsListParams, pn as validateWizardStatusParams, q as validateModelsAuthStatusParams, qn as deriveDeviceIdFromPublicKey, qt as validateTalkRealtimeStopParams, r as formatValidationErrors, rn as validateTasksRunsGetParams, rt as validateNodePairRequestParams, s as validateAgentWaitParams, sn as validateWakeParams, st as validatePushTestParams, tn as validateTasksRunEventsParams, tt as validateNodePairListParams, u as validateAgentsFilesGetParams, un as validateWizardCancelParams, ut as validateSecretsResolveResult, v as validateChatHistoryParams, vn as errorShape, w as validateConfigSchemaParams, x as validateConfigApplyParams, xn as buildDeviceAuthPayload, y as validateChatInjectParams, z as validateDeviceTokenRotateParams, zn as verifyDeviceBootstrapToken, zt as validateTalkCatalogParams } from "./client-D7IpaFCL.js";
+import { _ as hasNarrowSessionScope, d as APPROVALS_SCOPE, f as PAIRING_SCOPE, g as authorizeOperatorScopesForMethod, h as WRITE_SCOPE, m as SESSION_READ_SCOPE, n as callGateway, p as READ_SCOPE, u as ADMIN_SCOPE$1, v as isHealthProbeAllowedForScopes, x as loadGatewayTlsRuntime$1, y as isNodeRoleMethod } from "./call-DFhcVchO.js";
 import "./pairing-token-A_0lRJCJ.js";
 import "./fetch-CY39qjQT.js";
 import { a as readChannelAllowFromStoreSync } from "./pairing-store-CQ7fjFFo.js";
@@ -75,14 +75,14 @@ import "./exec-safe-bin-runtime-policy-KSPaR73B.js";
 import { _ as matchSystemRunApprovalBinding, g as buildSystemRunApprovalBinding, h as resolveSystemRunApprovalRuntimeContext, m as resolveSystemRunApprovalRequestContext, v as missingSystemRunApprovalBinding, y as toSystemRunApprovalMismatchError } from "./nodes-screen-BRZLdw3g.js";
 import { r as resolveSystemRunCommand, t as canonicalizeLegacySystemRunParams } from "./system-run-command-AF8TLlEl.js";
 import { u as snapshotActiveRuns } from "./diagnostic-session-state-C6JXU3l4.js";
-import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-Cid_Tw67.js";
+import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-85mWzvQi.js";
 import { t as CommandLane } from "./lanes-DA0g5tPR.js";
-import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-B0TxOQnF.js";
-import { a as getActiveTaskCount, c as getTotalQueueSize, d as setCommandLaneConcurrency, f as setGatewayDrainState, l as markGatewayDraining, p as waitForActiveTasks, u as resetAllLanes } from "./command-queue-DtybAhHH.js";
+import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-BW5fW5nB.js";
+import { a as getActiveTaskCount, c as getTotalQueueSize, d as resetAllLanes, f as setCommandLaneConcurrency, m as waitForActiveTasks, p as setGatewayDrainState, u as markGatewayDraining } from "./command-queue-Bn2PHabT.js";
 import { a as resolveAgentIdentity, t as createReplyPrefixOptions } from "./reply-prefix-D0xrt6Z-.js";
-import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-D37woOwV.js";
-import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-DD5bV7yq.js";
-import { T as collectTelegramDuplicatePollerDiagnostics, d as loadCronStore, f as resolveCronStorePath, p as saveCronStore } from "./send-DAYMV49d.js";
+import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-rLn-23ud.js";
+import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-BfG7k9-4.js";
+import { T as collectTelegramDuplicatePollerDiagnostics, d as loadCronStore, f as resolveCronStorePath, p as saveCronStore } from "./send-s0RNLFLX.js";
 import { n as resolveModel } from "./model-BI6n6kVo.js";
 import "./session-consumer-agents-DWh7Mygv.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-F-4FwfCE.js";
@@ -99,7 +99,7 @@ import "./outbound-attachment-Bg7WvYcG.js";
 import "./delivery-queue-DhBE3s1K.js";
 import "./send-26KAC8EW.js";
 import "./resolve-route-DnhX9nWr.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-r9H_A-NQ.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-B7YiM0PW.js";
 import "./tables-CzW-cMQN.js";
 import "./proxy-Df2WAHRA.js";
 import "./replies-DoejQAqN.js";
@@ -107,21 +107,21 @@ import { S as registerSkillsChangeListener, _ as requestNodePairing, c as record
 import { t as listAgentWorkspaceDirs } from "./workspace-dirs-_vJAsBIN.js";
 import "./user-run-recording-CTVI96gC.js";
 import { n as GATEWAY_AUTH_SURFACE_PATHS, p as isKnownSecretTargetId, r as evaluateGatewayAuthSurfaceStates } from "./runtime-config-collectors-B4N79pBu.js";
-import "./command-secret-targets-DtDJB3vv.js";
+import "./command-secret-targets-BAFcvtYe.js";
 import { a as getGatewayInstanceId, o as resolveSessionRunStore, t as createSessionRunRecorder } from "./recorder-BntUAL0_.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-ziqfw3UR.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-DLBTH9b_.js";
 import "./prompt-style-D0wRuIYC.js";
 import "./pairing-labels-CGUWaZ3f.js";
 import "./session-meta-DzjDKcgW.js";
-import { A as registerBeforeCreate, C as artifactTokenFor, D as markRemoved, E as markClientRemovedAcknowledged, M as buildVerificationEnvelope, N as redactVerificationProjection, O as markRetained, P as verificationEnvelopeFingerprint, S as accountSessionArtifactsAtTerminalSweep, T as listSessionArtifacts, _ as requireProcessBootIdentityPair, a as setAgentTurnRuntime, b as installGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as isBootIdentityError, h as deriveBootIdentityPair, i as getAgentTurnRuntime, j as VERIFICATION_CONFIG_SCENARIO, k as redactArtifactLogId, l as buildSoakDeploymentRecord, m as armBarrier, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as acceptSuccessorExecution, r as getActiveAgentTurnCount, u as evaluateSoak, v as clearGatewayRestartRecoveryRuntimeIf, w as isArtifactRegistrationError, x as RETAINED_ARTIFACT_KIND, y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-BEvwtTis.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-DZyEfnsr.js";
+import { A as registerBeforeCreate, C as artifactTokenFor, D as markRemoved, E as markClientRemovedAcknowledged, M as buildVerificationEnvelope, N as redactVerificationProjection, O as markRetained, P as verificationEnvelopeFingerprint, S as accountSessionArtifactsAtTerminalSweep, T as listSessionArtifacts, _ as requireProcessBootIdentityPair, a as setAgentTurnRuntime, b as installGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as isBootIdentityError, h as deriveBootIdentityPair, i as getAgentTurnRuntime, j as VERIFICATION_CONFIG_SCENARIO, k as redactArtifactLogId, l as buildSoakDeploymentRecord, m as armBarrier, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as acceptSuccessorExecution, r as getActiveAgentTurnCount, u as evaluateSoak, v as clearGatewayRestartRecoveryRuntimeIf, w as isArtifactRegistrationError, x as RETAINED_ARTIFACT_KIND, y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-CUoz_Fkl.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-CqS6VXEu.js";
 import { r as resolveMemorySearchConfig } from "./manager-DehDxi2A.js";
 import "./query-expansion-BD3CL_NZ.js";
 import { t as formatDocsLink } from "./links-BhLGjTwm.js";
 import { n as runCommandWithRuntime } from "./cli-utils-DWSfnwCw.js";
 import { t as formatHelpExamples } from "./help-format-DqpZruAs.js";
 import { n as withProgress } from "./progress-DRMfDm7h.js";
-import "./server-lifecycle-7QoL5fyb.js";
+import "./server-lifecycle-B9IQKSom.js";
 import { i as parseAbsoluteTimeMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-BIZMWR_z.js";
 import { a as normalizeHttpWebhookUrl, l as normalizeOptionalText, o as inferLegacyName } from "./heartbeat-tick-CsyeD75h.js";
 import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-Cm6wsMRx.js";
@@ -136,53 +136,53 @@ import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-gv_rp-w_.
 import { n as inheritOptionFromParent } from "./command-options-6wdtBBWB.js";
 import { t as WizardCancelledError } from "./prompts-m1IJwIAx.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-CU6_xh9V.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-BcD-ZJ0N.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-DWMgN4qH.js";
 import { t as isWithinDir } from "./path-safety-DAKUyD-v.js";
 import "./install-safe-path-DjFYmzeb.js";
-import "./npm-pack-install-opyKYSmS.js";
+import "./npm-pack-install-BgBpeTJk.js";
 import "./skill-scanner-BA3h34y0.js";
-import "./installs-78zhoWuO.js";
+import "./installs-puN7yKHH.js";
 import { n as formatConfigIssueLines } from "./issue-format-D0G927lb.js";
 import { t as buildChannelAccountSnapshot } from "./status-B8TZsG0t.js";
 import "./channels-status-issues-C6LrjLpF.js";
-import { i as resolveGatewayClientProfile, t as WEB_CLIENT_ALLOWED_ORIGINS_CONFIG_KEY } from "./client-profiles-BNQu4_Z_.js";
+import { i as resolveGatewayClientProfile, t as WEB_CLIENT_ALLOWED_ORIGINS_CONFIG_KEY } from "./client-profiles-soWN7eGC.js";
 import "./daemon-install-helpers-C8mJ0UpL.js";
 import "./service-C_LTJsJU.js";
 import "./systemd-D6tSdsgx.js";
 import "./lifecycle-core-M-5Z8Xml.js";
 import "./systemd-hints-DzBfweRH.js";
 import { t as parsePort$1 } from "./parse-port-p0PJP2nG.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-YmPcKhvo.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-BTld-maF.js";
 import "./diagnostics-Ds3p_NPY.js";
 import "./table-DoIju7rh.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-DgeeMUtJ.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-6Uo_6p6X.js";
-import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-C0WHA5BX.js";
+import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-CzREkjwC.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-C517Q6gA.js";
-import { a as noteStorageReplayResult, i as getStorageV1Snapshot, n as getStatusSummary, o as noteStorageRestartRequired, r as createStorageSupervisor, s as pickGatewaySelfPresence } from "./status-C5pbfqhh.js";
-import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-Q4hCJ8O2.js";
+import { a as noteStorageReplayResult, i as getStorageV1Snapshot, n as getStatusSummary, o as noteStorageRestartRequired, r as createStorageSupervisor, s as pickGatewaySelfPresence } from "./status-BsGjriqM.js";
+import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-BEgp6PEF.js";
 import { a as readPostQuiesceTranscriptDelta, i as readBulkTranscriptLines, o as replaySource, r as mergeBulkTranscriptSnapshotAndDelta, t as ReplayRowConflictError } from "./replay-BHfUVVHN.js";
 import "./session-key-resolution-DDJD1XYy.js";
-import { c as waitForStopDrain, l as withTimeout, o as tasksHandlers, r as getTaskOperatorRegistry, s as retryDelayMs, t as DEFAULT_RETENTION_DAYS } from "./task-runlog-retention-BZrnJGL1.js";
+import { a as respondTaskRegistryUnavailable, c as tasksHandlers, d as withTimeout, i as resolveTaskOperatorRegistry, l as retryDelayMs, r as getTaskOperatorRegistry, t as DEFAULT_RETENTION_DAYS, u as waitForStopDrain } from "./task-runlog-retention-GZu-QuBY.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-DonecnKL.js";
 import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-C9otZxLF.js";
-import { t as reconcileBundledInstalls } from "./reconcile-bundled-TswjG3xv.js";
+import { t as reconcileBundledInstalls } from "./reconcile-bundled-DJKaKSgk.js";
 import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-Ch9itsH4.js";
 import "./onboarding.secret-input-BCxy1JxD.js";
-import { t as runOnboardingWizard } from "./onboarding-CujUbWy2.js";
+import { t as runOnboardingWizard } from "./onboarding-BKoaWOxQ.js";
 import { a as computeJobNextRunAtMs, c as findJobOrThrow, d as recomputeNextRuns, f as recomputeNextRunsForMaintenance, h as produceCronAgentTurn, i as applyJobPatch, l as isJobDue, m as resolveJobPayloadTextForMain, o as createJob, p as recordScheduleComputeError, r as resolveStaleClaimAdoptionMs, s as cronShapeSupportsIdentity, t as CRON_HEARTBEAT_ADAPTER_ID, u as nextWakeAtMs } from "./recovery-adapter-BF5ESanQ.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-BmrddV2R.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-qUm5cL9P.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-CRvbl5q3.js";
-import { a as readChatHistoryPage, c as unsubscribeSessionChanges, i as decodeHistoryCursor, l as assertValidParams, o as resolveDbLeafEntryId, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers } from "./sessions-Dcu0bdQ7.js";
-import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-B9A0wAU6.js";
+import { a as readChatHistoryPage, c as unsubscribeSessionChanges, i as decodeHistoryCursor, l as assertValidParams, o as resolveDbLeafEntryId, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers } from "./sessions-BlXxa7bM.js";
+import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-6yjbNtx-.js";
 import "./node-service-BnyKZNqa.js";
 import "./status.update-BOB92yBQ.js";
 import { i as resolveActiveLogFile, n as readLogSlice } from "./log-tail-BAg8b5Wq.js";
 import { t as installSkill } from "./skills-install-DqCRPwE1.js";
-import { r as runGatewayUpdate } from "./update-runner-DohE1D7D.js";
+import { r as runGatewayUpdate } from "./update-runner-CBbs-iN_.js";
 import { n as resolveWebClientPackagedRootSync, t as WEB_CLIENT_BUNDLE_MISSING_MESSAGE } from "./web-client-assets-CJyKwFRS.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-CcKQx_l1.js";
-import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-Bfd55UfE.js";
+import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-EsKoI4yV.js";
 import { createRequire } from "node:module";
 import { cpuUsage, memoryUsage, resourceUsage, uptime } from "node:process";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -1082,7 +1082,7 @@ function resolveVerificationStore(params = {}) {
 
 //#endregion
 //#region src/infra/exec-approval-forwarder.ts
-const log$29 = createSubsystemLogger("gateway/exec-approvals");
+const log$30 = createSubsystemLogger("gateway/exec-approvals");
 const DEFAULT_MODE = "session";
 function normalizeMode(mode) {
 	return mode ?? DEFAULT_MODE;
@@ -1220,7 +1220,7 @@ async function deliverToTargets(params) {
 				payloads: [{ text: params.text }]
 			});
 		} catch (err) {
-			log$29.error(`exec approvals: failed to deliver to ${channel}:${target.to}: ${String(err)}`);
+			log$30.error(`exec approvals: failed to deliver to ${channel}:${target.to}: ${String(err)}`);
 		}
 	});
 	await Promise.allSettled(deliveries);
@@ -1309,7 +1309,7 @@ function createExecApprovalForwarder(deps = {}) {
 			deliver,
 			shouldSend: () => pending.get(request.id) === pendingEntry
 		}).catch((err) => {
-			log$29.error(`exec approvals: failed to deliver request ${request.id}: ${String(err)}`);
+			log$30.error(`exec approvals: failed to deliver request ${request.id}: ${String(err)}`);
 		});
 		return true;
 	};
@@ -1681,7 +1681,7 @@ function scheduleGatewayUpdateCheck(params) {
 
 //#endregion
 //#region src/sessions/session-runs/restart-transitions.ts
-const log$28 = createSubsystemLogger("sessions/restart-transitions");
+const log$29 = createSubsystemLogger("sessions/restart-transitions");
 async function transition(input, recoveryEnabled) {
 	const store = input.store ?? getConfiguredSessionStorageRuntime()?.runtime?.runs;
 	if (!store) return [];
@@ -1692,14 +1692,14 @@ async function transition(input, recoveryEnabled) {
 			recoveryReason: input.reason,
 			recoveryEnabled
 		});
-		if (transitioned.length > 0) log$28.info("transitioned active runs for restart", {
+		if (transitioned.length > 0) log$29.info("transitioned active runs for restart", {
 			count: transitioned.length,
 			recoveryEnabled,
 			reason: input.reason
 		});
 		return transitioned;
 	} catch (err) {
-		log$28.warn("failed to transition active runs for restart", {
+		log$29.warn("failed to transition active runs for restart", {
 			recoveryEnabled,
 			error: String(err)
 		});
@@ -1768,7 +1768,7 @@ function resolveChannelRestartReason(snapshot, evaluation) {
 
 //#endregion
 //#region src/gateway/channel-health-monitor.ts
-const log$27 = createSubsystemLogger("gateway/health-monitor");
+const log$28 = createSubsystemLogger("gateway/health-monitor");
 const DEFAULT_CHECK_INTERVAL_MS = 5 * 6e4;
 const DEFAULT_MONITOR_STARTUP_GRACE_MS = 6e4;
 const DEFAULT_COOLDOWN_CYCLES = 2;
@@ -1828,11 +1828,11 @@ function startChannelHealthMonitor(deps) {
 					if (now - record.lastRestartAt <= cooldownMs) continue;
 					pruneOldRestarts(record, now);
 					if (record.restartsThisHour.length >= maxRestartsPerHour) {
-						log$27.warn?.(`[${channelId}:${accountId}] health-monitor: hit ${maxRestartsPerHour} restarts/hour limit, skipping`);
+						log$28.warn?.(`[${channelId}:${accountId}] health-monitor: hit ${maxRestartsPerHour} restarts/hour limit, skipping`);
 						continue;
 					}
 					const reason = resolveChannelRestartReason(status, health);
-					log$27.info?.(`[${channelId}:${accountId}] health-monitor: restarting (reason: ${reason})`);
+					log$28.info?.(`[${channelId}:${accountId}] health-monitor: restarting (reason: ${reason})`);
 					try {
 						if (status.running) await channelManager.stopChannel(channelId, accountId);
 						channelManager.resetRestartAttempts(channelId, accountId);
@@ -1841,7 +1841,7 @@ function startChannelHealthMonitor(deps) {
 						record.restartsThisHour.push({ at: now });
 						restartRecords.set(key, record);
 					} catch (err) {
-						log$27.error?.(`[${channelId}:${accountId}] health-monitor: restart failed: ${String(err)}`);
+						log$28.error?.(`[${channelId}:${accountId}] health-monitor: restart failed: ${String(err)}`);
 					}
 				}
 			}
@@ -1861,7 +1861,7 @@ function startChannelHealthMonitor(deps) {
 		abortSignal?.addEventListener("abort", stop, { once: true });
 		timer = setInterval(() => void runCheck(), checkIntervalMs);
 		if (typeof timer === "object" && "unref" in timer) timer.unref();
-		log$27.info?.(`started (interval: ${Math.round(checkIntervalMs / 1e3)}s, startup-grace: ${Math.round(timing.monitorStartupGraceMs / 1e3)}s, channel-connect-grace: ${Math.round(timing.channelConnectGraceMs / 1e3)}s)`);
+		log$28.info?.(`started (interval: ${Math.round(checkIntervalMs / 1e3)}s, startup-grace: ${Math.round(timing.monitorStartupGraceMs / 1e3)}s, channel-connect-grace: ${Math.round(timing.channelConnectGraceMs / 1e3)}s)`);
 	}
 	return { stop };
 }
@@ -3067,10 +3067,10 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 	const { getConfiguredSessionStorageRuntime } = await import("./model-selection-k68XU4oS.js").then((n) => n.hi);
 	const runtime = getConfiguredSessionStorageRuntime()?.runtime;
 	const gatewayInstanceId = getGatewayInstanceId();
-	const { tryGetAgentTurnRuntime } = await import("./agent-turn-runner-BEvwtTis.js").then((n) => n.t);
+	const { tryGetAgentTurnRuntime } = await import("./agent-turn-runner-CUoz_Fkl.js").then((n) => n.t);
 	const backbone = tryGetAgentTurnRuntime()?.backbone;
 	const { createOutboundDeliveryRecoveryAdapter } = await import("./delivery-recovery-adapter-CXwijCdD.js");
-	const { deliverOutboundPayloads } = await import("./deliver-D37woOwV.js").then((n) => n.n);
+	const { deliverOutboundPayloads } = await import("./deliver-rLn-23ud.js").then((n) => n.n);
 	adapters.push(createOutboundDeliveryRecoveryAdapter({
 		cfg,
 		deliver: deliverOutboundPayloads,
@@ -3084,7 +3084,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		sessionRuns = void 0;
 	}
 	if (sessionRuns && wiring?.agentTurnStager) {
-		const { createSessionRunRecoveryAdapter } = await import("./recovery-adapter-DW0R_vFE.js");
+		const { createSessionRunRecoveryAdapter } = await import("./recovery-adapter-DF25-zSH.js");
 		adapters.push(createSessionRunRecoveryAdapter({
 			store: sessionRuns,
 			cfg,
@@ -3100,7 +3100,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		lease: wiring?.lease ? () => wiring.lease?.() ?? { isArmed: () => false } : void 0
 	}));
 	if (backbone && wiring?.agentTurnStager) {
-		const { createAgentTurnRecoveryAdapter } = await import("./agent-turn-recovery-adapter-DnvjgbK0.js");
+		const { createAgentTurnRecoveryAdapter } = await import("./agent-turn-recovery-adapter-CL4IrGUo.js");
 		adapters.push(createAgentTurnRecoveryAdapter({
 			backbone,
 			stager: wiring.agentTurnStager
@@ -3122,7 +3122,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		}));
 	}
 	if (sessionRuns) {
-		const { createEmbeddedPiRecoveryAdapter } = await import("./pi-embedded-recovery-adapter-B8Goyik3.js");
+		const { createEmbeddedPiRecoveryAdapter } = await import("./pi-embedded-recovery-adapter-BHTdeEKa.js");
 		adapters.push(createEmbeddedPiRecoveryAdapter({
 			sessionRuns,
 			cfg,
@@ -3130,7 +3130,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 			stager: wiring?.agentTurnStager,
 			isRunActive: isEmbeddedPiRunActive
 		}));
-		const { createAcpRuntimeRecoveryAdapter } = await import("./recovery-adapter-DyPV7syS.js");
+		const { createAcpRuntimeRecoveryAdapter } = await import("./recovery-adapter-BT12fVyO.js");
 		adapters.push(createAcpRuntimeRecoveryAdapter({ sessionRuns }));
 	}
 	if (backbone) {
@@ -3771,7 +3771,7 @@ function createChannelManager(opts) {
 
 //#endregion
 //#region src/gateway/server-chat.ts
-const log$26 = createSubsystemLogger("gateway/chat-final");
+const log$27 = createSubsystemLogger("gateway/chat-final");
 const CHAT_TERMINAL_DURABILITY_TIMEOUT_MS = 5e3;
 function resolveHeartbeatAckMaxChars$1() {
 	try {
@@ -4013,14 +4013,14 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 		const pending = pendingTerminalBySession.get(sessionKey);
 		const durability = waitForPendingWrites(writes, CHAT_TERMINAL_DURABILITY_TIMEOUT_MS);
 		const gate = (pending ?? Promise.resolve()).then(() => durability).then((outcome) => {
-			if (outcome === "timeout") log$26.warn("chat terminal broadcast before transcript durability (timeout)", {
+			if (outcome === "timeout") log$27.warn("chat terminal broadcast before transcript durability (timeout)", {
 				runId: sourceRunId,
 				sessionKey,
 				timeoutMs: CHAT_TERMINAL_DURABILITY_TIMEOUT_MS
 			});
 			sendChatTerminal(sessionKey, payload);
 		}).catch((err) => {
-			log$26.warn("chat terminal broadcast failed while waiting for transcript durability", {
+			log$27.warn("chat terminal broadcast failed while waiting for transcript durability", {
 				runId: sourceRunId,
 				sessionKey,
 				err
@@ -4127,7 +4127,7 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 * Automatically starts `gog gmail watch serve` when the gateway starts,
 * if hooks.gmail is configured with an account.
 */
-const log$25 = createSubsystemLogger("gmail-watcher");
+const log$26 = createSubsystemLogger("gmail-watcher");
 const ADDRESS_IN_USE_RE = /address already in use|EADDRINUSE/i;
 function isAddressInUseError(line) {
 	return ADDRESS_IN_USE_RE.test(line);
@@ -4151,13 +4151,13 @@ async function startGmailWatch(cfg) {
 		const result = await runCommandWithTimeout(args, { timeoutMs: 12e4 });
 		if (result.code !== 0) {
 			const message = result.stderr || result.stdout || "gog watch start failed";
-			log$25.error(`watch start failed: ${message}`);
+			log$26.error(`watch start failed: ${message}`);
 			return false;
 		}
-		log$25.info(`watch started for ${cfg.account}`);
+		log$26.info(`watch started for ${cfg.account}`);
 		return true;
 	} catch (err) {
-		log$25.error(`watch start error: ${String(err)}`);
+		log$26.error(`watch start error: ${String(err)}`);
 		return false;
 	}
 }
@@ -4166,7 +4166,7 @@ async function startGmailWatch(cfg) {
 */
 function spawnGogServe(cfg) {
 	const args = buildGogWatchServeArgs(cfg);
-	log$25.info(`starting gog ${args.join(" ")}`);
+	log$26.info(`starting gog ${args.join(" ")}`);
 	let addressInUse = false;
 	const child = spawn("gog", args, {
 		stdio: [
@@ -4178,25 +4178,25 @@ function spawnGogServe(cfg) {
 	});
 	child.stdout?.on("data", (data) => {
 		const line = data.toString().trim();
-		if (line) log$25.info(`[gog] ${line}`);
+		if (line) log$26.info(`[gog] ${line}`);
 	});
 	child.stderr?.on("data", (data) => {
 		const line = data.toString().trim();
 		if (!line) return;
 		if (isAddressInUseError(line)) addressInUse = true;
-		log$25.warn(`[gog] ${line}`);
+		log$26.warn(`[gog] ${line}`);
 	});
 	child.on("error", (err) => {
-		log$25.error(`gog process error: ${String(err)}`);
+		log$26.error(`gog process error: ${String(err)}`);
 	});
 	child.on("exit", (code, signal) => {
 		if (shuttingDown) return;
 		if (addressInUse) {
-			log$25.warn("gog serve failed to bind (address already in use); stopping restarts. Another watcher is likely running. Set OPENCLAW_SKIP_GMAIL_WATCHER=1 or stop the other process.");
+			log$26.warn("gog serve failed to bind (address already in use); stopping restarts. Another watcher is likely running. Set OPENCLAW_SKIP_GMAIL_WATCHER=1 or stop the other process.");
 			watcherProcess = null;
 			return;
 		}
-		log$25.warn(`gog exited (code=${code}, signal=${signal}); restarting in 5s`);
+		log$26.warn(`gog exited (code=${code}, signal=${signal}); restarting in 5s`);
 		watcherProcess = null;
 		setTimeout(() => {
 			if (shuttingDown || !currentConfig) return;
@@ -4236,15 +4236,15 @@ async function startGmailWatcher(cfg) {
 			port: runtimeConfig.serve.port,
 			target: runtimeConfig.tailscale.target
 		});
-		log$25.info(`tailscale ${runtimeConfig.tailscale.mode} configured for port ${runtimeConfig.serve.port}`);
+		log$26.info(`tailscale ${runtimeConfig.tailscale.mode} configured for port ${runtimeConfig.serve.port}`);
 	} catch (err) {
-		log$25.error(`tailscale setup failed: ${String(err)}`);
+		log$26.error(`tailscale setup failed: ${String(err)}`);
 		return {
 			started: false,
 			reason: `tailscale setup failed: ${String(err)}`
 		};
 	}
-	if (!await startGmailWatch(runtimeConfig)) log$25.warn("gmail watch start failed, but continuing with serve");
+	if (!await startGmailWatch(runtimeConfig)) log$26.warn("gmail watch start failed, but continuing with serve");
 	shuttingDown = false;
 	watcherProcess = spawnGogServe(runtimeConfig);
 	const renewMs = runtimeConfig.renewEveryMinutes * 6e4;
@@ -4252,7 +4252,7 @@ async function startGmailWatcher(cfg) {
 		if (shuttingDown) return;
 		startGmailWatch(runtimeConfig);
 	}, renewMs);
-	log$25.info(`gmail watcher started for ${runtimeConfig.account} (renew every ${runtimeConfig.renewEveryMinutes}m)`);
+	log$26.info(`gmail watcher started for ${runtimeConfig.account} (renew every ${runtimeConfig.renewEveryMinutes}m)`);
 	return { started: true };
 }
 /**
@@ -4265,7 +4265,7 @@ async function stopGmailWatcher() {
 		renewInterval = null;
 	}
 	if (watcherProcess) {
-		log$25.info("stopping gmail watcher");
+		log$26.info("stopping gmail watcher");
 		watcherProcess.kill("SIGTERM");
 		await new Promise((resolve) => {
 			const timeout = setTimeout(() => {
@@ -4280,7 +4280,7 @@ async function stopGmailWatcher() {
 		watcherProcess = null;
 	}
 	currentConfig = null;
-	log$25.info("gmail watcher stopped");
+	log$26.info("gmail watcher stopped");
 }
 
 //#endregion
@@ -5656,7 +5656,7 @@ async function runCronIsolatedAgentTurn(params) {
 
 //#endregion
 //#region src/cron/run-log.ts
-const log$24 = createSubsystemLogger("cron/run-log");
+const log$25 = createSubsystemLogger("cron/run-log");
 function assertSafeCronRunLogJobId(jobId) {
 	const trimmed = jobId.trim();
 	if (!trimmed) throw new Error("invalid cron run log job id");
@@ -5698,7 +5698,7 @@ async function pruneIfNeeded(filePath, opts) {
 	const stat = await fs$1.stat(filePath).catch(() => null);
 	if (!stat || stat.size <= opts.maxBytes) return;
 	const raw = await fs$1.readFile(filePath, "utf-8").catch((err) => {
-		log$24.warn("cron run-log: prune skipped (read failed)", {
+		log$25.warn("cron run-log: prune skipped (read failed)", {
 			filePath,
 			err: String(err)
 		});
@@ -11741,9 +11741,6 @@ const VOICE_INTERRUPTED_MARKER = " [interrupted]";
 const CHAT_HISTORY_TEXT_MAX_CHARS = 12e3;
 const CHAT_HISTORY_MAX_SINGLE_MESSAGE_BYTES = 128 * 1024;
 const CHAT_HISTORY_OVERSIZED_PLACEHOLDER = "[chat.history omitted: message too large]";
-/** Twice the default storage probe timeout: how long chat.history waits for a booting gateway's session storage before it answers UNAVAILABLE. */
-const CHAT_HISTORY_STORAGE_START_WAIT_MS = 1e4;
-const CHAT_HISTORY_STORAGE_START_RETRY_AFTER_MS = 1e3;
 let chatHistoryPlaceholderEmitCount = 0;
 function stripDisallowedChatControlChars(message) {
 	let output = "";
@@ -12545,13 +12542,6 @@ const chatHandlers = {
 			return;
 		}
 		const { sessionKey, limit, maxChars, before } = params;
-		if (!(await context.storageStartup?.whenReleased(CHAT_HISTORY_STORAGE_START_WAIT_MS) ?? true)) {
-			respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, "session storage is still starting", {
-				retryable: true,
-				retryAfterMs: CHAT_HISTORY_STORAGE_START_RETRY_AFTER_MS
-			}));
-			return;
-		}
 		const { cfg, storePath, entry } = loadSessionEntry(sessionKey);
 		const sessionId = entry?.sessionId;
 		const sessionAgentId = resolveSessionAgentId({
@@ -14742,7 +14732,7 @@ async function replayApproval(ctx) {
 
 //#endregion
 //#region src/infra/exec-audit.ts
-const log$23 = createSubsystemLogger("infra/exec-audit");
+const log$24 = createSubsystemLogger("infra/exec-audit");
 function emitAuditRecord(request, decision) {
 	const inv = request.invocation;
 	const argvSummary = inv.mode === "argv" ? `${inv.executable} ${redactArgvForAudit(inv.args).join(" ")}` : inv.mode === "shell" ? redactCommandText(inv.command) : inv.mode === "approved-script" ? inv.scriptId : `${inv.serverId}/${inv.toolName}`;
@@ -14773,7 +14763,7 @@ function emitAuditRecord(request, decision) {
 		timeoutMs: request.timeoutMs,
 		stdinPresent: request.stdin === "present-redacted"
 	};
-	if (record.outcome === "deny") log$23.warn("exec-audit deny", {
+	if (record.outcome === "deny") log$24.warn("exec-audit deny", {
 		effect: record.effect,
 		sourceRule: record.sourceRule,
 		reason: record.reason,
@@ -14782,7 +14772,7 @@ function emitAuditRecord(request, decision) {
 		normalizedArgv: record.normalizedArgv,
 		policyId: record.policyId
 	});
-	else log$23.info("exec-audit", {
+	else log$24.info("exec-audit", {
 		effect: record.effect,
 		sourceRule: record.sourceRule,
 		outcome: record.outcome,
@@ -15130,7 +15120,7 @@ function reEvaluatePoliciesForPath(reResolvedRequest, envSanitization, policies
 
 //#endregion
 //#region src/infra/load-policies-for-request.ts
-const log$22 = createSubsystemLogger("infra/load-policies-for-request");
+const log$23 = createSubsystemLogger("infra/load-policies-for-request");
 /**
 * User-scoped policy source backed by the v2 exec-approvals store
 * (`~/.openclaw/exec-approvals.json`). The store is migrated v1→v2 on load
@@ -15149,7 +15139,7 @@ function createUserPolicySource() {
 		try {
 			return (await loadExecApprovalsV2()).policies;
 		} catch (error) {
-			log$22.warn("user policy store load failed; user policies will not apply", { error });
+			log$23.warn("user policy store load failed; user policies will not apply", { error });
 			return [];
 		}
 	} };
@@ -16294,7 +16284,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-MOX6FUiJ.js");
+			const { handleNodeEvent } = await import("./server-node-events-BYTgaAay.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -17091,7 +17081,7 @@ function resolveSteerResult(params) {
 
 //#endregion
 //#region src/gateway/session-title-completion.ts
-const log$21 = createSubsystemLogger("gateway/session-title-completion");
+const log$22 = createSubsystemLogger("gateway/session-title-completion");
 const SESSION_TITLE_COMPLETION_TIMEOUT_MS = 15e3;
 const SESSION_TITLE_MAX_CHARS = 60;
 /** Upstream openclaw's dashboard-session-title prompt wording (ADR 0084 s5, mission M4). */
@@ -17142,7 +17132,7 @@ async function generateSessionTitleCompletion(req, overrides) {
 	try {
 		const resolved = deps.resolveModel(provider, model, agentDir, cfg);
 		if (!resolved.model) {
-			log$21.warn("session title model unresolved", {
+			log$22.warn("session title model unresolved", {
 				...logFields,
 				error: resolved.error
 			});
@@ -17156,7 +17146,7 @@ async function generateSessionTitleCompletion(req, overrides) {
 		let apiKey;
 		if (!auth.apiKey) {
 			if (auth.mode !== "aws-sdk") {
-				log$21.warn("session title no api key resolved", {
+				log$22.warn("session title no api key resolved", {
 					...logFields,
 					mode: auth.mode
 				});
@@ -17171,7 +17161,7 @@ async function generateSessionTitleCompletion(req, overrides) {
 		})).token;
 		else apiKey = auth.apiKey;
 		if (controller.signal.aborted) {
-			log$21.warn("session title generation timed out before dispatch", logFields);
+			log$22.warn("session title generation timed out before dispatch", logFields);
 			return null;
 		}
 		const response = await deps.completeSimple(resolved.model, {
@@ -17188,11 +17178,11 @@ async function generateSessionTitleCompletion(req, overrides) {
 			signal: controller.signal
 		});
 		if (response.stopReason === "aborted") {
-			log$21.warn("session title generation timed out", logFields);
+			log$22.warn("session title generation timed out", logFields);
 			return null;
 		}
 		if (response.stopReason === "error") {
-			log$21.warn("session title generation provider error", {
+			log$22.warn("session title generation provider error", {
 				...logFields,
 				error: response.errorMessage
 			});
@@ -17202,7 +17192,7 @@ async function generateSessionTitleCompletion(req, overrides) {
 		if (!text) return null;
 		return normalizeSessionTitle(text);
 	} catch (error) {
-		log$21.warn("session title generation failed", {
+		log$22.warn("session title generation failed", {
 			...logFields,
 			error: error instanceof Error ? error.message : String(error)
 		});
@@ -17383,6 +17373,218 @@ const skillsHandlers = {
 	}
 };
 
+//#endregion
+//#region src/gateway/storage-method-policy.ts
+const STORAGE_METHOD_POLICY_REQUIRED = [
+	"chat.history",
+	"sessions.claims.status",
+	"sessions.runHistory",
+	"sessions.runs.cancel",
+	"sessions.runs.continue",
+	"sessions.runs.events",
+	"sessions.runs.get",
+	"sessions.runs.list",
+	"tasks.resetBudget",
+	"tasks.rollback",
+	"tasks.runDryRun",
+	"tasks.runEvents",
+	"tasks.runs.get",
+	"tasks.runs.events",
+	"tasks.runs.list",
+	"tasks.status"
+];
+const STORAGE_METHOD_POLICY_BOOT_WRITE = [
+	"chat.inject",
+	"sessions.compact",
+	"sessions.create",
+	"sessions.delete",
+	"sessions.patch",
+	"sessions.reset"
+];
+const STORAGE_METHOD_POLICY_NONE = [
+	"connect",
+	"health",
+	"status",
+	"logs.tail",
+	"voicewake.get",
+	"voicewake.set",
+	"channels.status",
+	"channels.logout",
+	"chat.abort",
+	"chat.send",
+	"sessions.abort",
+	"wake",
+	"cron.list",
+	"cron.status",
+	"cron.add",
+	"cron.update",
+	"cron.remove",
+	"cron.run",
+	"cron.runs",
+	"device.pair.list",
+	"device.pair.approve",
+	"device.pair.reject",
+	"device.pair.remove",
+	"device.token.rotate",
+	"device.token.revoke",
+	"diagnostics.runtime.snapshot",
+	"diagnostics.capture.cpu",
+	"diagnostics.capture.heap",
+	"diagnostics.capture.report",
+	"diagnostics.profiling.start",
+	"diagnostics.profiling.stop",
+	"doctor.memory.status",
+	"doctor.recovery.inspect",
+	"doctor.recovery.plan",
+	"doctor.recovery.apply",
+	"exec.approvals.get",
+	"exec.approvals.set",
+	"exec.approvals.node.get",
+	"exec.approvals.node.set",
+	"web.login.start",
+	"web.login.wait",
+	"models.authStatus",
+	"models.list",
+	"config.get",
+	"config.schema",
+	"config.set",
+	"config.patch",
+	"config.apply",
+	"wizard.start",
+	"wizard.next",
+	"wizard.cancel",
+	"wizard.status",
+	"talk.config",
+	"talk.mode",
+	"talk.catalog",
+	"talk.session.create",
+	"talk.session.appendAudio",
+	"talk.session.close",
+	"talk.session.cancelTurn",
+	"talk.session.mark",
+	"talk.session.bargeIn",
+	"talk.realtime.session",
+	"talk.realtime.audio",
+	"talk.realtime.mark",
+	"talk.realtime.toolResult",
+	"talk.realtime.bargeIn",
+	"talk.realtime.stop",
+	"talk.realtime.status",
+	"talk.metrics",
+	"tools.catalog",
+	"tts.status",
+	"tts.enable",
+	"tts.disable",
+	"tts.convert",
+	"tts.setProvider",
+	"tts.providers",
+	"skills.status",
+	"skills.bins",
+	"skills.install",
+	"skills.update",
+	"sessions.subscribe",
+	"sessions.list",
+	"sessions.describe",
+	"sessions.compaction.list",
+	"sessions.runs",
+	"sessions.thresholds",
+	"sessions.interrupt",
+	"sessions.preview",
+	"sessions.resolve",
+	"sessions.title.prepare",
+	"sessions.steer",
+	"last-heartbeat",
+	"set-heartbeats",
+	"system-presence",
+	"system-event",
+	"update.run",
+	"node.pair.request",
+	"node.pair.list",
+	"node.pair.approve",
+	"node.pair.reject",
+	"node.pair.verify",
+	"node.rename",
+	"node.list",
+	"node.describe",
+	"node.canvas.capability.refresh",
+	"node.invoke",
+	"node.invoke.result",
+	"node.event",
+	"plugins/health",
+	"push.test",
+	"send",
+	"poll",
+	"usage.status",
+	"usage.cost",
+	"sessions.usage",
+	"sessions.usage.timeseries",
+	"sessions.usage.logs",
+	"agent",
+	"agent.identity.get",
+	"agent.wait",
+	"agent.nudge",
+	"agents.list",
+	"agents.create",
+	"agents.update",
+	"agents.delete",
+	"agents.files.list",
+	"agents.files.get",
+	"agents.files.set",
+	"browser.request"
+];
+const STORAGE_METHOD_POLICY = Object.freeze({
+	...Object.fromEntries(STORAGE_METHOD_POLICY_REQUIRED.map((method) => [method, "required"])),
+	...Object.fromEntries(STORAGE_METHOD_POLICY_BOOT_WRITE.map((method) => [method, "boot-write"])),
+	...Object.fromEntries(STORAGE_METHOD_POLICY_NONE.map((method) => [method, "none"]))
+});
+
+//#endregion
+//#region src/gateway/server-methods/storage-fence.ts
+const STORAGE_START_WAIT_MS = 1e4;
+const log$21 = createSubsystemLogger("gateway/storage-fence");
+const warnedGates = /* @__PURE__ */ new WeakSet();
+/**
+* Returns true when this call has been answered by the fence (held out, or answered a typed
+* error), so dispatch must not run the handler. Runs after authorization and the method-set
+* rate limits, so an unauthorized caller never learns storage readiness. Absent context gate or
+* `none`/missing classification means no storage decision applies to the method.
+*/
+async function guardStorageRpc(method, context, respond) {
+	const policy = Object.hasOwn(STORAGE_METHOD_POLICY, method) ? STORAGE_METHOD_POLICY[method] : void 0;
+	const gate = context.storageStartup;
+	if (policy === void 0 || policy === "none" || !gate) return false;
+	let state = gate.state();
+	if (state.phase === "ready") return false;
+	state = await gate.whenSettled(STORAGE_START_WAIT_MS);
+	if (state.phase === "ready") return false;
+	if (state.phase === "failed") {
+		if (policy === "boot-write") return false;
+		respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, "session storage failed to start", {
+			retryable: false,
+			details: {
+				code: "storage_start_failed",
+				reasonCodes: state.reasonCodes
+			}
+		}));
+		return true;
+	}
+	if (state.phase === "starting" && !warnedGates.has(gate)) {
+		warnedGates.add(gate);
+		log$21.warn("session storage still starting after 10000ms; storage-backed methods answer RECOVERY_NOT_READY");
+	}
+	const stopping = state.phase === "stopping";
+	respond(false, void 0, errorShape(ErrorCodes.RECOVERY_NOT_READY, stopping ? "gateway is stopping" : "session storage is still starting", {
+		retryable: true,
+		retryAfterMs: 500,
+		details: {
+			producer: "session-storage",
+			phase: state.phase,
+			reasonCodes: [stopping ? "storage_stopping" : "storage_starting"]
+		}
+	}));
+	return true;
+}
+
 //#endregion
 //#region src/gateway/server/presence-events.ts
 function broadcastPresenceSnapshot(params) {
@@ -19308,10 +19510,6 @@ function createSttTtsTurnController(params) {
 	const sm = new SttTtsLoopStateMachine();
 	let sessionClosed = false;
 	let currentTurn;
-	/** The utterance text whose eager end-of-turn produced (or last resumed) the current turn.
-	* Lives only as long as that turn does: retireTurn() clears it, so a later identical
-	* utterance is a genuine new turn, never a swallowed stale confirmation. */
-	let eagerUtterance;
 	/** VAL-LOOP-001: every state transition is logged (never the wire — these never carry
 	* transcript/audio content, only the state names and a short reason tag). */
 	function transitionState(to, reason) {
@@ -19426,10 +19624,7 @@ function createSttTtsTurnController(params) {
 		turn.unsubscribeAgentEvents();
 		sm.resetTurn();
 		transitionState("listening", "turn-settled");
-		if (currentTurn === turn) {
-			currentTurn = void 0;
-			eagerUtterance = void 0;
-		}
+		if (currentTurn === turn) currentTurn = void 0;
 	}
 	function emitTurnCancelled(turn, reason) {
 		if (turn.fillerPlayed || turn.fillerTimer) broadcast(sequencer.next({
@@ -19577,6 +19772,15 @@ function createSttTtsTurnController(params) {
 			text
 		});
 	}
+	function resumeCandidate(turn, text) {
+		if (turn.cancelled || turn.finished) return false;
+		if (text === turn.userText) return false;
+		if (turn.sawTtsAudio) {
+			turnBargeIn.evaluateCandidateText(turn, text);
+			return false;
+		}
+		return wordCount(text) >= 1;
+	}
 	function handleEndOfTurn(result) {
 		if (sessionClosed) return;
 		const text = result.text.trim();
@@ -19584,29 +19788,25 @@ function createSttTtsTurnController(params) {
 			if (text) startNewTurn(text);
 			return;
 		}
-		handlePossibleResume(text);
+		if (resumeCandidate(currentTurn, text)) {
+			teardownTurnForCancel(currentTurn, "turn-resumed");
+			startNewTurn(text);
+		}
 	}
-	/** VAL-LOOP-006: a partial/second-EOT with >=1 word, arriving after end-of-turn but before the
-	* first real assistant audio, cancels the in-flight run (turn-resumed) and starts a fresh turn
-	* from the new text. Once real audio has started, further speech is a barge-in concern — out
-	* of scope here (the dedicated turn-taking task owns it) — so this never fires past that point. */
+	/** VAL-LOOP-006 (ADR 0087 section 4.5): a worded partial/transcript arriving after
+	* end-of-turn but before the first real assistant audio only cancels the in-flight run
+	* (turn-resumed); it never starts a turn itself - the continuation's own end-of-turn starts
+	* it. Once real audio has started, further speech is a barge-in concern - out of scope here
+	* (the dedicated turn-taking task owns it) - so this never fires past that point. */
 	function handlePossibleResume(text) {
 		if (sessionClosed) return;
 		const turn = currentTurn;
-		if (!turn || turn.cancelled || turn.finished) return;
-		if (eagerUtterance !== void 0 && text === eagerUtterance) return;
-		if (turn.sawTtsAudio) {
-			turnBargeIn.evaluateCandidateText(turn, text);
-			return;
-		}
-		if (wordCount(text) < 1) return;
-		teardownTurnForCancel(turn, "turn-resumed");
-		startNewTurn(text);
+		if (!turn) return;
+		if (resumeCandidate(turn, text.trim())) teardownTurnForCancel(turn, "turn-resumed");
 	}
-	/** ADR 0087 section 5: a provider-native resume signal carries no text, so unlike
-	* handlePossibleResume this only cancels - the continuation's own onPartial/onTranscript/
-	* onEndOfTurn (routed through handlePossibleResume/handleEndOfTurn as usual) is what actually
-	* starts the next turn, once it arrives with real text. */
+	/** ADR 0087 section 5: a provider-native resume signal carries no text. Like
+	* handlePossibleResume, this only cancels; the continuation's own end-of-turn (routed through
+	* handleEndOfTurn) starts the next turn once it arrives with real text. */
 	function handleProviderTurnResumed() {
 		if (sessionClosed) return;
 		const turn = currentTurn;
@@ -19618,15 +19818,6 @@ function createSttTtsTurnController(params) {
 		if (sessionClosed) return;
 		bargeInSurface.handleBargeIn(speechDetectedAt, playbackPausedAt);
 	}
-	/** A fused-detection provider's early, not-yet-committed end-of-turn: handled exactly like a
-	* committed one, then the utterance is remembered so its committed confirmation (the matching
-	* onTranscript/onEndOfTurn pair) does not re-enter the resume path. Set AFTER handling so this
-	* very event starts/resumes the turn instead of consuming itself. */
-	function handleEagerEndOfTurn(result) {
-		if (sessionClosed) return;
-		handleEndOfTurn(result);
-		eagerUtterance = result.text.trim() || void 0;
-	}
 	/** Monotonic: a stale/out-of-order mark ack can only hold or advance `heardChars`, never move
 	* it backward. */
 	function acknowledgeMark(markName, timestamp) {
@@ -19636,7 +19827,6 @@ function createSttTtsTurnController(params) {
 	}
 	return {
 		handleEndOfTurn,
-		handleEagerEndOfTurn,
 		handlePossibleResume,
 		handleProviderTurnResumed,
 		cancelActiveTurn,
@@ -19762,7 +19952,7 @@ function createSttTtsLoopSession(params) {
 			},
 			onEagerEndOfTurn: (result) => {
 				clearSpeechCapTimer();
-				turnController.handleEagerEndOfTurn(result);
+				turnController.handleEndOfTurn(result);
 			},
 			onTurnResumed: () => {
 				clearSpeechCapTimer();
@@ -20890,6 +21080,9 @@ async function buildTalkCatalogStreamingTranscriptionSection(params) {
 		rows
 	};
 }
+function resolveSpeechVoiceId(provider, config) {
+	return config?.voiceId?.trim() || provider.defaultVoiceId?.trim() || void 0;
+}
 async function buildTalkCatalogSpeechSection(params) {
 	const providers = getRegisteredStreamingSpeechProviders();
 	const configuredId = params.configuredTtsProviderId?.trim();
@@ -20901,11 +21094,12 @@ async function buildTalkCatalogSpeechSection(params) {
 			cfg: params.cfg,
 			apiKey: providerConfig?.apiKey
 		});
+		const voiceMissing = status.configured && !resolveSpeechVoiceId(provider, providerConfig);
 		rows.push({
 			id: provider.id,
 			label: provider.label,
-			configured: status.configured,
-			...status.diagnostic ? { diagnostic: status.diagnostic } : {},
+			configured: status.configured && !voiceMissing,
+			...status.diagnostic ? { diagnostic: status.diagnostic } : voiceMissing ? { diagnostic: "missing-voice-id" } : {},
 			modes: ["streaming"],
 			transports: ["gateway-relay"]
 		});
@@ -21074,9 +21268,10 @@ const talkHandlers = {
 		if (p.mode === "stt-tts") {
 			const sttCandidateId = conversationConfig.sttProvider.trim().toLowerCase();
 			const sttProvider = getRegisteredRealtimeTranscriptionProviders().find((candidate) => candidate.id.trim().toLowerCase() === sttCandidateId);
-			const { provider: ttsProviderId, config: ttsConfig } = resolveActiveTalkProviderConfig(snapshot.config.talk);
+			const { provider: ttsProviderId, config: ttsEntry } = resolveActiveTalkProviderConfig(snapshot.config.talk);
+			const ttsConfig = ttsEntry ?? {};
 			const ttsProvider = ttsProviderId ? getRegisteredStreamingSpeechProviders().find((candidate) => candidate.id.trim().toLowerCase() === ttsProviderId.trim().toLowerCase()) : void 0;
-			if (!sttProvider || !ttsProvider || !ttsConfig?.voiceId) {
+			if (!sttProvider || !ttsProvider) {
 				respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, "stt-tts requires a configured STT and TTS provider"));
 				return;
 			}
@@ -21088,14 +21283,26 @@ const talkHandlers = {
 				cfg: snapshot.config,
 				providerConfig: ttsConfig
 			});
-			if (!sttProvider.isConfigured({
+			const unconfigured = !sttProvider.isConfigured({
 				cfg: snapshot.config,
 				providerConfig: resolvedSttProviderConfig
-			}) || !ttsProvider.isConfigured({
+			}) ? {
+				seam: "transcription",
+				id: sttProvider.id
+			} : !ttsProvider.isConfigured({
 				cfg: snapshot.config,
 				providerConfig: resolvedTtsProviderConfig
-			})) {
-				respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, "stt-tts requires a configured STT and TTS provider"));
+			}) ? {
+				seam: "speech",
+				id: ttsProviderId
+			} : void 0;
+			if (unconfigured) {
+				respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, `stt-tts requires a configured STT and TTS provider: ${unconfigured.seam} provider "${unconfigured.id}" is not configured; check talk.providers.${unconfigured.id}.apiKey`));
+				return;
+			}
+			const voiceId = resolveSpeechVoiceId(ttsProvider, ttsConfig);
+			if (!voiceId) {
+				respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, `stt-tts requires talk.providers.${ttsProviderId}.voiceId: speech provider "${ttsProvider.id}" has no default voice`));
 				return;
 			}
 			const rawSessionKey = p.sessionKey;
@@ -21118,7 +21325,7 @@ const talkHandlers = {
 						},
 						ttsProvider,
 						ttsProviderConfig: resolvedTtsProviderConfig,
-						voiceId: ttsConfig.voiceId,
+						voiceId,
 						modelId: ttsConfig.modelId ?? DEFAULT_TALK_CONVERSATION_MODEL_ID,
 						outputFormat: ttsConfig.outputFormat ?? "pcm_24000",
 						locale: conversationConfig.locale,
@@ -22231,9 +22438,9 @@ function toRedactedEvent(event) {
 	};
 }
 async function listQueuedView(params, runtime, respond) {
-	const registry = getTaskOperatorRegistry();
+	const registry = await resolveTaskOperatorRegistry();
 	if (!registry) {
-		respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, "task_registry_unavailable", { details: { code: "task_registry_unavailable" } }));
+		respondTaskRegistryUnavailable(respond);
 		return;
 	}
 	const busWork = runtime.busWork;
@@ -23909,6 +24116,7 @@ async function handleGatewayRequest(opts) {
 			return;
 		}
 	}
+	if (await guardStorageRpc(req.method, context, respond)) return;
 	await handler({
 		req,
 		params: req.params ?? {},
@@ -24853,7 +25061,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.OPENCLAW_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.OPENCLAW_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./server-BAGUd2MH.js");
+	const mod = override ? await import(override) : await import("./server-DWJmtex3.js");
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -31211,29 +31419,56 @@ function createStorageRecoveryContainment(deps) {
 //#endregion
 //#region src/gateway/storage-startup-gate.ts
 function createStorageStartupGate() {
+	let phase = { phase: "ready" };
 	let held = false;
 	const waiters = /* @__PURE__ */ new Set();
+	const wakeAll = () => {
+		for (const wake of waiters) wake();
+	};
 	return {
 		hold() {
-			held = true;
+			if (!held && phase.phase === "ready") {
+				held = true;
+				phase = { phase: "starting" };
+			}
 		},
-		release() {
-			held = false;
-			for (const wake of waiters) wake();
+		markReady() {
+			if (phase.phase === "starting") {
+				phase = { phase: "ready" };
+				wakeAll();
+			}
 		},
-		whenReleased(timeoutMs) {
-			if (!held) return Promise.resolve(true);
-			return new Promise((resolve) => {
-				const wake = () => {
-					clearTimeout(timer);
-					waiters.delete(wake);
-					resolve(true);
+		markFailed(reasonCodes) {
+			if (phase.phase === "starting") {
+				phase = {
+					phase: "failed",
+					reasonCodes: [...reasonCodes]
 				};
+				wakeAll();
+			}
+		},
+		markStopping() {
+			if (phase.phase !== "stopping") {
+				phase = { phase: "stopping" };
+				wakeAll();
+			}
+		},
+		state() {
+			return phase;
+		},
+		whenSettled(timeoutMs) {
+			if (phase.phase !== "starting" && phase.phase !== "stopping") return Promise.resolve(phase);
+			return new Promise((resolve) => {
 				const timer = setTimeout(() => {
 					waiters.delete(wake);
-					resolve(false);
+					resolve(phase);
 				}, timeoutMs);
 				timer.unref?.();
+				const wake = () => {
+					clearTimeout(timer);
+					waiters.delete(wake);
+					resolve(phase);
+				};
 				waiters.add(wake);
 			});
 		}
@@ -35178,7 +35413,12 @@ async function bootGatewayServer(port, opts) {
 		};
 		fencedStorageSupervisorStart = async () => {
 			await supervisor.start();
-			storageStartup.release();
+			if (supervisor.getState() !== "healthy" && !params.resolved.fallbackToJsonlOnError) {
+				await storageSupervisorStop?.();
+				storageSupervisorStop = null;
+				throw new FatalConfiguredStorageStartError();
+			}
+			storageStartup.markReady();
 			try {
 				const { installIncidentAsset } = await import("./incident-install-cGBLZhud.js");
 				await installIncidentAsset({
@@ -35211,11 +35451,6 @@ async function bootGatewayServer(port, opts) {
 				noteStorageRestartRequired("session-run-startup-recovery");
 				noteStorageRestartRequired("shutdown-run-reconciliation");
 			}
-			if (supervisor.getState() !== "healthy" && !params.resolved.fallbackToJsonlOnError) {
-				await storageSupervisorStop?.();
-				storageSupervisorStop = null;
-				throw new FatalConfiguredStorageStartError();
-			}
 		};
 		if (params.bootImmediately) await fencedStorageSupervisorStart();
 		else storageStartup.hold();
@@ -35577,7 +35812,7 @@ async function bootGatewayServer(port, opts) {
 		const sweepLog = log.child("session-consumer-claim-sweep");
 		const { createDiagnosticRingBuffer } = await import("./session-consumer-diagnostics-UbdxGCz8.js");
 		const diagnostics = createDiagnosticRingBuffer();
-		const { setDiagnostics } = await import("./sessions-Dcu0bdQ7.js").then((n) => n.n);
+		const { setDiagnostics } = await import("./sessions-BlXxa7bM.js").then((n) => n.n);
 		if (sessionConsumerClaimSweepCancelled) return;
 		setDiagnostics(diagnostics);
 		const lastKnownEnabledState = /* @__PURE__ */ new Map();
@@ -35616,7 +35851,7 @@ async function bootGatewayServer(port, opts) {
 					lastKnownEnabledState,
 					cfg: loadConfig()
 				});
-				const { setLastSweepTimestamp } = await import("./sessions-Dcu0bdQ7.js").then((n) => n.n);
+				const { setLastSweepTimestamp } = await import("./sessions-BlXxa7bM.js").then((n) => n.n);
 				setLastSweepTimestamp(Date.now());
 			} catch (err) {
 				sweepLog.warn(`session consumer-claim sweep failed: ${String(err)}`);
@@ -35638,7 +35873,7 @@ async function bootGatewayServer(port, opts) {
 			prepare: () => {
 				taskPipelineBoot = (async () => {
 					const { getConfiguredSessionStorageRuntime } = await import("./model-selection-k68XU4oS.js").then((n) => n.hi);
-					const { startTaskPipeline } = await import("./task-pipeline-boot-DKqT4VdZ.js");
+					const { startTaskPipeline } = await import("./task-pipeline-boot-Dihxq0Tg.js");
 					const pipeline = startTaskPipeline({
 						getConfigured: getConfiguredSessionStorageRuntime,
 						cfg: cfgAtStart,
@@ -35807,7 +36042,17 @@ async function bootGatewayServer(port, opts) {
 		});
 		try {
 			recoveryRuntime = await Promise.race([ownInstalled, recoveryStarted]) ?? null;
+			if (storageStartup.state().phase === "starting") {
+				let codes = [];
+				try {
+					codes = recoveryRuntime?.snapshot().reasonCodes ?? [];
+				} catch {
+					codes = [];
+				}
+				storageStartup.markFailed(codes.length > 0 ? codes : ["recovery_start_failed"]);
+			}
 		} catch (err) {
+			if (storageStartup.state().phase === "starting") storageStartup.markFailed(["recovery_start_failed"]);
 			if (skillsRefreshTimer) {
 				clearTimeout(skillsRefreshTimer);
 				skillsRefreshTimer = null;
@@ -36018,6 +36263,7 @@ async function bootGatewayServer(port, opts) {
 		startDiagnosticHeartbeat();
 	}
 	return { close: async (opts) => {
+		storageStartup.markStopping();
 		recoveryAdmission.closeAdmission();
 		await runGlobalGatewayStopSafely({
 			event: { reason: opts?.reason ?? "gateway stopping" },