wednesdayai 0.4.12-dev.720 → 0.4.12-dev.722

package/dist/{gateway-cli-k85i40XY.js → gateway-cli-3YUOWIal.js}

@@ -1,189 +1,189 @@
-import { A as readLoggingConfig, B as openBoundaryFile, C as resolveFileLogProfile, Dt as truncateUtf16Safe, H as openVerifiedFileSync, J as isNotFoundPathError, Ot as resolvePreferredOpenClawTmpDir, U as sameFileIdentity, V as openBoundaryFileSync, Y as isPathInside, d as colorize, f as isRich, g as getResolvedLoggerSettings, h as getLogger, m as getChildLogger, p as theme, pt as ensureDir, s as setVerbose, st as CONFIG_DIR, wt as shortenHomePath, x as appendFileLog, xt as resolveUserPath } from "./globals-BvFc3LRQ.js";
+import { A as readLoggingConfig, B as openBoundaryFile, C as resolveFileLogProfile, Dt as truncateUtf16Safe, H as openVerifiedFileSync, J as isNotFoundPathError, Ot as resolvePreferredOpenClawTmpDir, U as sameFileIdentity, V as openBoundaryFileSync, Y as isPathInside, d as colorize, f as isRich, g as getResolvedLoggerSettings, h as getLogger, m as getChildLogger, p as theme, pt as ensureDir, s as setVerbose, st as CONFIG_DIR, wt as shortenHomePath, x as appendFileLog, xt as resolveUserPath } from "./globals-ZyVsnNcg.js";
 import { g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-BMo6kTge.js";
 import { t as isPlainObject } from "./plain-object-CLm2c5Nu.js";
-import { m as defaultRuntime, n as runtimeForLogger, o as setConsoleSubsystemFilter, s as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-CXwk-lx3.js";
+import { m as defaultRuntime, n as runtimeForLogger, o as setConsoleSubsystemFilter, s as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-DLKs6VzZ.js";
 import "./boolean-Bb19hm9Y.js";
 import { i as logAcceptedEnvOption, r as isTruthyEnvValue } from "./entry.js";
-import { $ as isAvatarHttpUrl, $a as normalizeWhatsAppTarget, $n as normalizeSessionDeliveryFields, Ai as PASS_ITEMS_MAX_KEYS, An as getActivePreservationLease, Ao as GATEWAY_CLIENT_IDS, Ar as jsonUtf8Bytes, Au as isPidAlive, Ca as resolveMainSessionKeyFromConfig, Cn as StorageReadAccessError, Da as listChannelPlugins, Dc as normalizeProviderIdForAuth, Di as isVerificationStoreError, Dn as closeReplacedConfiguredSessionStorageRuntime, Ea as getChannelPlugin, Ei as clientResumeRecordArtifactId, En as closeConfiguredSessionStorageRuntime, Eo as normalizeMessageChannel, Fi as onRunInvalidation, Fn as mirrorPreparedConfiguredSessionStorageRuntimeRecord, Fo as normalizeGatewayClientMode, Gi as serializeSessionIndexRecordKey, Gn as updateSessionStore, Hi as reconcileSessionIndex, Ht as getActivePluginRegistry, Il as resolveProfileUnusableUntilForDisplay, In as prepareConfiguredSessionStorageRuntimeActivation, Iu as normalizeSecretInput, Js as applyMergePatch, Ju as DEFAULT_MODEL, Li as applyReconcileSessionIndex, Mc as resolveDefaultModelForAgent, Mi as PASS_METRICS_MAX_BYTES, Mn as isPreservationArmed, Mo as GATEWAY_CLIENT_NAMES, Nc as resolveHooksGmailModel, Nn as loadSessionStore, No as hasGatewayClientCap, O as coerceIdentityValue, Oa as normalizeChannelId, On as commitPreparedConfiguredSessionStorageRuntimeActivation, P as resolveGatewayWebClientBasePath, Pi as isPassIdentifier, Pn as loadSessionStoreFromDisk, Qt as createEmptyPluginRegistry, Rc as resolveThinkingDefault, Ri as diffManifestOwnedReconcileIndexRecords, Sa as resolveMainSessionKey, Sc as isCliProvider, Si as resolveSessionStorageConfig, Sn as triggerInternalHook, Sr as stripEnvelopeFromMessages, St as defaultSlotIdForKey, Tc as normalizeModelSelection, Ti as CLIENT_RESUME_RECORD_KIND, Tn as activateConfiguredSessionStorageRuntime, Tr as stripInlineDirectiveTagsFromMessageForDisplay, Un as syncConfiguredSessionTranscriptToRuntime, Vi as projectManifestOwnedReconcileIndexRecords, Vn as setActivePreservationLease, Vo as cleanStaleLockFiles, Xs as ensureControlUiAllowedOriginsForNonLoopbackBind, Yn as deliveryContextFromSession, Ys as applyLegacyMigrations, Yt as setGatewayPluginRegistry, Yu as DEFAULT_PROVIDER, Z as AVATAR_MAX_BYTES, Zn as mergeDeliveryContext, _n as getRegisteredStreamingSpeechProviders, _r as REPLY_CONTEXT_CUSTOM_TYPE, a as createConfigIO, ac as DEFAULT_TALK_CONVERSATION_MODEL_ID, ai as extractDeliveryInfo, ar as findNewestMessageEntryIdInTranscript, as as composeRestartDeferralWithAdmission, ba as resolveAgentMainSessionKey, bc as getModelRefStatus, bn as createInternalHookEvent, bo as isGatewayCliClient, bu as loadAuthProfileStoreForRuntime, c as readConfigFileSnapshot, cc as resolveActiveTalkProviderConfig, dc as resolveTalkProviderConfigApiKey, di as createPreservationLeaseService, ei as createAsyncLock, en as getRegisteredPluginApis, et as isAvatarImageDataUrl, f as writeConfigFile, fi as withPreservationWriterPermit, ga as mergeSessionEntry, gc as buildAllowedModelSet, gn as getRegisteredRealtimeVoiceProviders, gt as isTestDefaultMemorySlotDisabled, hc as resolveSubagentMaxConcurrent, hl as getApiKeyForModel, hn as getRegisteredRealtimeTranscriptionProviders, ii as parseByteSize, in as setSessionWorkAvailableNotifier, ir as cleanupArchivedSessionTranscripts, is as RecoveryAdmissionError, it as looksLikeAvatarPath, jc as resolveConfiguredModelRef, ji as PASS_MEASUREMENT_SCHEMA_VERSION, jn as getConfiguredSessionStorageRuntime, jo as GATEWAY_CLIENT_MODES, js as resolveExecutablePath, jt as CHANNEL_IDS, ju as resolveAuthProfileDisplayLabel, k as EXEC_POLICY_PRESET_IDS, kc as resolveAllowedModelRef, kn as createJsonlSessionStorageFallbackRuntime, ko as GATEWAY_CLIENT_CAPS, kr as normalizeInputProvenance, l as readConfigFileSnapshotForWrite, lc as resolveTalkCatalogApiKeyStatus, m as OpenClawSchema, mc as resolveNestedAgentMaxConcurrent, mi as hydrateAndAppendToBackend, mn as getRealtimeVoiceProvider, n as migrateLegacyConfig, na as formatZonedTimestamp, ni as writeJsonAtomic, nr as archiveSessionTranscripts, ns as setPluginTaskAdmissionRejectionFor, o as loadConfig, oa as decodeKeysetCursor, oc as buildTalkConfigResponse, oi as parseSessionThreadInfo, or as findTranscriptMessageEntryById, os as createRootWorkAdmission, p as validateConfigObjectWithPlugins, pc as resolveAgentMaxConcurrent, pi as isJsonlSessionBackend, qu as DEFAULT_CONTEXT_TOKENS, r as advanceRuntimeConfigSnapshot, ri as parseDurationMs, rr as capArrayByJsonBytes, s as parseConfigJson5, sa as encodeKeysetCursor, sc as normalizeTalkSection, sn as emitStartupPluginHealthReport, ti as readJsonFile, tn as listRestartRecoveryAdapters, to as resolveWhatsAppAccount, u as resolveConfigSnapshotHash, uc as resolveTalkConversationConfig, va as setSessionRuntimeModel, vl as resolveApiKeyForProvider, vn as listRealtimeVoiceProviders, vo as INTERNAL_MESSAGE_CHANNEL, wi as validateCtxStorage, wo as isWebchatClient, wr as stripInlineDirectiveTagsForDisplay, xa as resolveExplicitAgentSessionKey, xi as createSessionStorageRuntimeFromConfig, xn as registerInternalHook, xo as isGatewayMessageChannel, xr as stripEnvelopeFromMessage, ya as canonicalizeMainSessionAlias, yn as clearInternalHooks, yo as isDeliverableMessageChannel, yr as buildReplyContextPayload, za as buildChannelAccountBindings, zi as fingerprintReconcileIndexRecords, zn as refreshPreparedConfiguredSessionStorageRuntimeActivation } from "./config-CRFk9Bjq.js";
+import { $ as isAvatarHttpUrl, $a as normalizeWhatsAppTarget, $n as normalizeSessionDeliveryFields, Ai as PASS_ITEMS_MAX_KEYS, An as getActivePreservationLease, Ao as GATEWAY_CLIENT_IDS, Ar as jsonUtf8Bytes, Au as isPidAlive, Ca as resolveMainSessionKeyFromConfig, Cn as StorageReadAccessError, Da as listChannelPlugins, Dc as normalizeProviderIdForAuth, Di as isVerificationStoreError, Dn as closeReplacedConfiguredSessionStorageRuntime, Ea as getChannelPlugin, Ei as clientResumeRecordArtifactId, En as closeConfiguredSessionStorageRuntime, Eo as normalizeMessageChannel, Fi as onRunInvalidation, Fn as mirrorPreparedConfiguredSessionStorageRuntimeRecord, Fo as normalizeGatewayClientMode, Gi as serializeSessionIndexRecordKey, Gn as updateSessionStore, Hi as reconcileSessionIndex, Ht as getActivePluginRegistry, Il as resolveProfileUnusableUntilForDisplay, In as prepareConfiguredSessionStorageRuntimeActivation, Iu as normalizeSecretInput, Js as applyMergePatch, Ju as DEFAULT_MODEL, Li as applyReconcileSessionIndex, Mc as resolveDefaultModelForAgent, Mi as PASS_METRICS_MAX_BYTES, Mn as isPreservationArmed, Mo as GATEWAY_CLIENT_NAMES, Nc as resolveHooksGmailModel, Nn as loadSessionStore, No as hasGatewayClientCap, O as coerceIdentityValue, Oa as normalizeChannelId, On as commitPreparedConfiguredSessionStorageRuntimeActivation, P as resolveGatewayWebClientBasePath, Pi as isPassIdentifier, Pn as loadSessionStoreFromDisk, Qt as createEmptyPluginRegistry, Rc as resolveThinkingDefault, Ri as diffManifestOwnedReconcileIndexRecords, Sa as resolveMainSessionKey, Sc as isCliProvider, Si as resolveSessionStorageConfig, Sn as triggerInternalHook, Sr as stripEnvelopeFromMessages, St as defaultSlotIdForKey, Tc as normalizeModelSelection, Ti as CLIENT_RESUME_RECORD_KIND, Tn as activateConfiguredSessionStorageRuntime, Tr as stripInlineDirectiveTagsFromMessageForDisplay, Un as syncConfiguredSessionTranscriptToRuntime, Vi as projectManifestOwnedReconcileIndexRecords, Vn as setActivePreservationLease, Vo as cleanStaleLockFiles, Xs as ensureControlUiAllowedOriginsForNonLoopbackBind, Yn as deliveryContextFromSession, Ys as applyLegacyMigrations, Yt as setGatewayPluginRegistry, Yu as DEFAULT_PROVIDER, Z as AVATAR_MAX_BYTES, Zn as mergeDeliveryContext, _n as getRegisteredStreamingSpeechProviders, _r as REPLY_CONTEXT_CUSTOM_TYPE, a as createConfigIO, ac as DEFAULT_TALK_CONVERSATION_MODEL_ID, ai as extractDeliveryInfo, ar as findNewestMessageEntryIdInTranscript, as as composeRestartDeferralWithAdmission, ba as resolveAgentMainSessionKey, bc as getModelRefStatus, bn as createInternalHookEvent, bo as isGatewayCliClient, bu as loadAuthProfileStoreForRuntime, c as readConfigFileSnapshot, cc as resolveActiveTalkProviderConfig, dc as resolveTalkProviderConfigApiKey, di as createPreservationLeaseService, ei as createAsyncLock, en as getRegisteredPluginApis, et as isAvatarImageDataUrl, f as writeConfigFile, fi as withPreservationWriterPermit, ga as mergeSessionEntry, gc as buildAllowedModelSet, gn as getRegisteredRealtimeVoiceProviders, gt as isTestDefaultMemorySlotDisabled, hc as resolveSubagentMaxConcurrent, hl as getApiKeyForModel, hn as getRegisteredRealtimeTranscriptionProviders, ii as parseByteSize, in as setSessionWorkAvailableNotifier, ir as cleanupArchivedSessionTranscripts, is as RecoveryAdmissionError, it as looksLikeAvatarPath, jc as resolveConfiguredModelRef, ji as PASS_MEASUREMENT_SCHEMA_VERSION, jn as getConfiguredSessionStorageRuntime, jo as GATEWAY_CLIENT_MODES, js as resolveExecutablePath, jt as CHANNEL_IDS, ju as resolveAuthProfileDisplayLabel, k as EXEC_POLICY_PRESET_IDS, kc as resolveAllowedModelRef, kn as createJsonlSessionStorageFallbackRuntime, ko as GATEWAY_CLIENT_CAPS, kr as normalizeInputProvenance, l as readConfigFileSnapshotForWrite, lc as resolveTalkCatalogApiKeyStatus, m as OpenClawSchema, mc as resolveNestedAgentMaxConcurrent, mi as hydrateAndAppendToBackend, mn as getRealtimeVoiceProvider, n as migrateLegacyConfig, na as formatZonedTimestamp, ni as writeJsonAtomic, nr as archiveSessionTranscripts, ns as setPluginTaskAdmissionRejectionFor, o as loadConfig, oa as decodeKeysetCursor, oc as buildTalkConfigResponse, oi as parseSessionThreadInfo, or as findTranscriptMessageEntryById, os as createRootWorkAdmission, p as validateConfigObjectWithPlugins, pc as resolveAgentMaxConcurrent, pi as isJsonlSessionBackend, qu as DEFAULT_CONTEXT_TOKENS, r as advanceRuntimeConfigSnapshot, ri as parseDurationMs, rr as capArrayByJsonBytes, s as parseConfigJson5, sa as encodeKeysetCursor, sc as normalizeTalkSection, sn as emitStartupPluginHealthReport, ti as readJsonFile, tn as listRestartRecoveryAdapters, to as resolveWhatsAppAccount, u as resolveConfigSnapshotHash, uc as resolveTalkConversationConfig, va as setSessionRuntimeModel, vl as resolveApiKeyForProvider, vn as listRealtimeVoiceProviders, vo as INTERNAL_MESSAGE_CHANNEL, wi as validateCtxStorage, wo as isWebchatClient, wr as stripInlineDirectiveTagsForDisplay, xa as resolveExplicitAgentSessionKey, xi as createSessionStorageRuntimeFromConfig, xn as registerInternalHook, xo as isGatewayMessageChannel, xr as stripEnvelopeFromMessage, ya as canonicalizeMainSessionAlias, yn as clearInternalHooks, yo as isDeliverableMessageChannel, yr as buildReplyContextPayload, za as buildChannelAccountBindings, zi as fingerprintReconcileIndexRecords, zn as refreshPreparedConfiguredSessionStorageRuntimeActivation } from "./config-BPACL-n5.js";
 import { r as resolveRuntimeServiceVersion, t as VERSION } from "./version-D_9__Xw6.js";
 import { A as isCronRunSessionKey, M as isSubagentSessionKey, N as parseAgentSessionKey, S as normalizeAccountId$1, a as classifySessionKeyShape, b as toAgentStoreSessionKey, d as normalizeAgentId, f as normalizeMainKey, g as resolveLinkedPeerIdForChannel, h as resolveConfiguredCanonicalIdentity, p as resolveAgentIdFromSessionKey, r as buildAgentMainSessionKey, t as DEFAULT_AGENT_ID, x as DEFAULT_ACCOUNT_ID, y as toAgentRequestSessionKey } from "./session-key-D4YLCjDF.js";
-import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, M as matchesSkillFilter, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-Dw728gHk.js";
-import { i as logWarn, t as logDebug } from "./logger-DygiqHXJ.js";
-import { n as runExec, t as runCommandWithTimeout } from "./exec-DirIo9VQ.js";
-import { n as resolveOpenClawPackageRoot } from "./openclaw-root-CvJ5CJns.js";
+import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, M as matchesSkillFilter, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-Dt0TVWFY.js";
+import { i as logWarn, t as logDebug } from "./logger-B1oXl7GT.js";
+import { n as runExec, t as runCommandWithTimeout } from "./exec-vJi_ETQy.js";
+import { n as resolveOpenClawPackageRoot } from "./openclaw-root-B6Tk0FH8.js";
 import { r as resolveCopilotApiToken } from "./github-copilot-token-CvN6iidT.js";
 import { t as formatCliCommand } from "./command-format-N4aQiv3X.js";
 import { c as optionalStringEnum, l as stringEnum } from "./retry-policy-BdHwnvOa.js";
 import { c as resolveSessionFilePath, l as resolveSessionFilePathOptions, m as resolveStorePath, p as resolveSessionTranscriptsDirForAgent, u as resolveSessionTranscriptPath } from "./artifacts-C9Cr_S5Y.js";
-import "./send-DVEBYs7q.js";
-import "./send-DVTzquty.js";
-import { $ as buildHistoryContextFromEntries, $n as getTtsProvider, $t as consumeGatewaySigusr1RestartAuthorization, A as loadOpenClawPlugins, An as extractImageContentFromSource, Bt as buildSafeExternalPrompt, C as buildDefaultToolPolicyPipelineSteps, Ct as resetDirectoryCache, Dn as DEFAULT_INPUT_MAX_REDIRECTS, Dt as consumeRestartSentinel, E as resolvePluginTools, En as DEFAULT_INPUT_IMAGE_MIMES, F as resolveAgentOutboundIdentity, Fn as isAbortRequestText, Ft as normalizeCronJobPatch, G as resolveAgentOutboundTarget, Gn as clearSessionQueues, Gt as persistBrowserProxyFiles, H as agentCommandFromIngress, Hn as resolveAnnounceTargetFromKey, Ht as getHookType, It as migrateLegacyCronPayload, J as createOutboundSendDeps$1, Jn as getAcpSessionManager, K as createOutboundSendDeps, Kn as getExistingFollowupQueue, Kt as resolveSessionAuthProfileOverride, L as handleSlackHttpRequest, Ln as countActiveDescendantRuns, Lt as buildDeliveryFromLegacyPayload, M as createPluginRuntime, Mn as resolveInputFileLimits, N as requestNudge, Nt as writeRestartSentinel, O as clearPluginRegistryCaches, On as DEFAULT_INPUT_TIMEOUT_MS, Ot as formatDoctorNonInteractiveHint, Pn as resolveSendPolicy, Pt as normalizeCronJobCreate, Qn as DEFAULT_MAX_PARALLEL, R as readJsonBodyWithLimit, Rn as initSubagentRegistry, Rt as hasLegacyDeliveryHints, S as applyToolPolicyPipeline, T as getPluginToolMeta, Tn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Tt as runWithModelFallback, Un as readLatestAssistantReply, Ut as isExternalHookSession, Vn as runSubagentAnnounceFlow, Vt as detectSuspiciousPatterns, W as resolveAgentDeliveryPlan, Wn as resolveAgentTimeoutMs, Wt as applyBrowserProxyPaths, Xn as ToolInputError, Y as resolveAgentAvatar, Yn as resolveAgentSessionDirs, Zn as setTaskPipelineStatus, _ as prepareSessionManagerForRun, _n as isSystemEventContextChanged, _t as resolveOutboundSessionRoute, a as runHeartbeatOnce, an as setGatewaySigusr1RestartPolicy, ar as resolveTtsPrefsPath, bt as resolveSessionDeliveryTarget, c as startHeartbeatRunner, cr as setTtsProvider, d as getLastHeartbeatEvent, dr as OPENAI_TTS_VOICES, dt as getCliSessionId, en as deferGatewayRestartUntilIdle, er as isTtsEnabled, f as onHeartbeatEvent, fr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, ft as setCliSessionId, g as runEmbeddedPiAgent, gn as enqueueSystemEvent, gt as ensureOutboundSessionEntry, h as resolveCronSession, hr as resolveUserTimezone, i as resolveHeartbeatSummaryForAgent, in as scheduleGatewaySigusr1Restart, ir as resolveTtsConfig, it as getTotalPendingReplies, j as takePendingActivationMigration, jn as normalizeMimeList, jt as summarizeRestartSentinel, k as getLoadedAnalysisConcurrency, kn as extractFileContentFromSource, kt as formatRestartSentinelMessage, l as runWakeGate, lr as textToSpeech, lt as resolveChannelAccountEnabled, m as isCronSystemEvent, mr as resolveCronStyleNow, mt as createOpenClawTools, n as runMainAgentTurn, nn as isGatewaySigusr1RestartExternallyAllowed, nr as resolveTtsApiKey, nt as setDispatchInboundAdmissionRejectionFor, on as setPreRestartDeferralCheck, or as resolveTtsProviderOrder, p as redactSensitiveHeartbeatEvent, pr as stripHeartbeatToken, pt as runCliAgent, q as createDefaultDeps, qn as removeQueuedFollowupRun, r as resolveHeartbeatConfig, rn as markGatewaySigusr1RestartHandled, rr as resolveTtsAutoMode, rt as createReplyDispatcher, s as setHeartbeatsEnabled, sn as triggerOpenClawRestart, sr as setTtsEnabled, tn as emitGatewayRestart, tr as isTtsProviderConfigured, tt as dispatchInboundMessage, u as resolveHeartbeatVisibility, un as loadProviderUsageSummary, ur as OPENAI_TTS_MODELS, ut as BARE_SESSION_RESET_PROMPT, v as snapshotRunPendingWrites, vt as resolveHeartbeatDeliveryTarget, wn as ACP_SESSION_IDENTITY_RENDERER_VERSION, x as resolveExecConfig, xn as requestHeartbeatNow, xt as resolveOutboundChannelPlugin, y as waitForPendingWrites, yt as resolveOutboundTarget, z as requestBodyErrorToText, zn as listDescendantRunsForRequester, zt as stripLegacyDeliveryFields } from "./agent-turn-execute-DLS3hVZN.js";
+import "./send-B_t3X0hK.js";
+import "./send-BBFfvgK9.js";
+import { $ as buildHistoryContextFromEntries, $n as DEFAULT_MAX_PARALLEL, $t as consumeGatewaySigusr1RestartAuthorization, A as loadOpenClawPlugins, An as extractImageContentFromSource, Bt as buildSafeExternalPrompt, C as buildDefaultToolPolicyPipelineSteps, Ct as resetDirectoryCache, Dn as DEFAULT_INPUT_MAX_REDIRECTS, Dt as consumeRestartSentinel, E as resolvePluginTools, En as DEFAULT_INPUT_IMAGE_MIMES, F as resolveAgentOutboundIdentity, Fn as isAbortRequestText, Ft as normalizeCronJobPatch, G as resolveAgentOutboundTarget, Gn as clearSessionQueues, Gt as persistBrowserProxyFiles, H as agentCommandFromIngress, Hn as resolveAnnounceTargetFromKey, Ht as getHookType, It as migrateLegacyCronPayload, J as createOutboundSendDeps$1, Jn as getAcpSessionManager, K as createOutboundSendDeps, Kn as getExistingFollowupQueue, Kt as resolveSessionAuthProfileOverride, L as handleSlackHttpRequest, Ln as countActiveDescendantRuns, Lt as buildDeliveryFromLegacyPayload, M as createPluginRuntime, Mn as resolveInputFileLimits, N as requestNudge, Nt as writeRestartSentinel, O as clearPluginRegistryCaches, On as DEFAULT_INPUT_TIMEOUT_MS, Ot as formatDoctorNonInteractiveHint, Pn as resolveSendPolicy, Pt as normalizeCronJobCreate, Qn as setTaskPipelineStatus, R as readJsonBodyWithLimit, Rn as initSubagentRegistry, Rt as hasLegacyDeliveryHints, S as applyToolPolicyPipeline, T as getPluginToolMeta, Tn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Tt as runWithModelFallback, Un as readLatestAssistantReply, Ut as isExternalHookSession, Vn as runSubagentAnnounceFlow, Vt as detectSuspiciousPatterns, W as resolveAgentDeliveryPlan, Wn as resolveAgentTimeoutMs, Wt as applyBrowserProxyPaths, Xn as ToolInputError, Y as resolveAgentAvatar, Yn as resolveAgentSessionDirs, _ as prepareSessionManagerForRun, _n as isSystemEventContextChanged, _t as resolveOutboundSessionRoute, a as runHeartbeatOnce, an as setGatewaySigusr1RestartPolicy, ar as resolveTtsConfig, bt as resolveSessionDeliveryTarget, c as startHeartbeatRunner, cr as setTtsEnabled, d as getLastHeartbeatEvent, dr as OPENAI_TTS_MODELS, dt as getCliSessionId, en as deferGatewayRestartUntilIdle, er as getTtsProvider, f as onHeartbeatEvent, fr as OPENAI_TTS_VOICES, ft as setCliSessionId, g as runEmbeddedPiAgent, gn as enqueueSystemEvent, gr as resolveUserTimezone, gt as ensureOutboundSessionEntry, h as resolveCronSession, hr as resolveCronStyleNow, i as resolveHeartbeatSummaryForAgent, in as scheduleGatewaySigusr1Restart, ir as resolveTtsAutoMode, it as getTotalPendingReplies, j as takePendingActivationMigration, jn as normalizeMimeList, jt as summarizeRestartSentinel, k as getLoadedAnalysisConcurrency, kn as extractFileContentFromSource, kt as formatRestartSentinelMessage, l as runWakeGate, lr as setTtsProvider, lt as resolveChannelAccountEnabled, m as isCronSystemEvent, mr as stripHeartbeatToken, mt as createOpenClawTools, n as runMainAgentTurn, nn as isGatewaySigusr1RestartExternallyAllowed, nr as isTtsProviderConfigured, nt as setDispatchInboundAdmissionRejectionFor, on as setPreRestartDeferralCheck, or as resolveTtsPrefsPath, p as redactSensitiveHeartbeatEvent, pr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, pt as runCliAgent, q as createDefaultDeps, qn as removeQueuedFollowupRun, r as resolveHeartbeatConfig, rn as markGatewaySigusr1RestartHandled, rr as resolveTtsApiKey, rt as createReplyDispatcher, s as setHeartbeatsEnabled, sn as triggerOpenClawRestart, sr as resolveTtsProviderOrder, tn as emitGatewayRestart, tr as isTtsEnabled, tt as dispatchInboundMessage, u as resolveHeartbeatVisibility, un as loadProviderUsageSummary, ur as textToSpeech, ut as BARE_SESSION_RESET_PROMPT, v as snapshotRunPendingWrites, vt as resolveHeartbeatDeliveryTarget, wn as ACP_SESSION_IDENTITY_RENDERER_VERSION, x as resolveExecConfig, xn as requestHeartbeatNow, xt as resolveOutboundChannelPlugin, y as waitForPendingWrites, yt as resolveOutboundTarget, z as requestBodyErrorToText, zn as listDescendantRunsForRequester, zt as stripLegacyDeliveryFields } from "./agent-turn-execute-pkDSwyuf.js";
 import { l as deriveSessionTotalTokens, u as hasNonzeroUsage } from "./chat-envelope-DfuAGxmg.js";
 import { c as isDiagnosticsEnabled, l as onDiagnosticEvent, s as emitDiagnosticEvent } from "./task-run-types-B6n0W8Rb.js";
 import { n as USER_CLIENT_ID, o as buildUserClientRuntimeConfig, s as handleUserClientHttpRequest } from "./static-server-CRGPIP-a.js";
 import { t as redactIdentifier } from "./redact-identifier-BcqQpFrh.js";
-import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-BNvNiMpq.js";
+import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-CsHMHVsf.js";
 import { t as CommandLane } from "./lanes-BN1DVTrA.js";
-import { A as registerBeforeCreate, C as artifactTokenFor, D as markRemoved, E as markClientRemovedAcknowledged, M as buildVerificationEnvelope, N as redactVerificationProjection, O as markRetained, P as verificationEnvelopeFingerprint, S as accountSessionArtifactsAtTerminalSweep, T as listSessionArtifacts, _ as requireProcessBootIdentityPair, a as setAgentTurnRuntime, b as installGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as isBootIdentityError, h as deriveBootIdentityPair, i as getAgentTurnRuntime, j as VERIFICATION_CONFIG_SCENARIO, k as redactArtifactLogId, l as buildSoakDeploymentRecord, m as armBarrier, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as acceptSuccessorExecution, r as getActiveAgentTurnCount, u as evaluateSoak, v as clearGatewayRestartRecoveryRuntimeIf, w as isArtifactRegistrationError, x as RETAINED_ARTIFACT_KIND, y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-BDS9k--2.js";
-import { a as getGatewayInstanceId, o as resolveSessionRunStore, t as createSessionRunRecorder } from "./recorder-CMNhAFwu.js";
-import "./pi-embedded-helpers-C6VayjB1.js";
-import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-DzgYdBHo.js";
+import { A as registerBeforeCreate, C as artifactTokenFor, D as markRemoved, E as markClientRemovedAcknowledged, M as buildVerificationEnvelope, N as redactVerificationProjection, O as markRetained, P as verificationEnvelopeFingerprint, S as accountSessionArtifactsAtTerminalSweep, T as listSessionArtifacts, _ as requireProcessBootIdentityPair, a as setAgentTurnRuntime, b as installGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as isBootIdentityError, h as deriveBootIdentityPair, i as getAgentTurnRuntime, j as VERIFICATION_CONFIG_SCENARIO, k as redactArtifactLogId, l as buildSoakDeploymentRecord, m as armBarrier, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as acceptSuccessorExecution, r as getActiveAgentTurnCount, u as evaluateSoak, v as clearGatewayRestartRecoveryRuntimeIf, w as isArtifactRegistrationError, x as RETAINED_ARTIFACT_KIND, y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-DoHGgNPh.js";
+import { a as getGatewayInstanceId, o as resolveSessionRunStore, t as createSessionRunRecorder } from "./recorder-Ca_njjjH.js";
+import "./pi-embedded-helpers-C9XqX-Jq.js";
+import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-BpdiWabc.js";
 import { i as listCoreToolSections, n as PROFILE_OPTIONS, o as resolveCoreToolProfiles } from "./tool-catalog-BWgva5h1.js";
-import { i as resolveRelayAuthTokenForPort, n as resolveGatewayRelayToken } from "./extension-relay-auth-BE4YupGc.js";
-import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-DVz4yfpc.js";
+import { i as resolveRelayAuthTokenForPort, n as resolveGatewayRelayToken } from "./extension-relay-auth-DD-U9VUc.js";
+import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-BrZL_MiW.js";
 import { t as safeEqualSecret } from "./secret-equal-CQn9WoXt.js";
-import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-cZK3OCUB.js";
-import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-CBDMKFAM.js";
-import { a as isDirectLoopbackProvenance, c as AUTH_RATE_LIMIT_SCOPE_BROWSER_EXTENSION, d as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, f as createAuthRateLimiter, i as captureTransportProvenance, l as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, n as authorizeHttpGatewayConnect, o as isLocalDirectRequest, p as normalizeRateLimitClientIp, r as authorizeWsControlUiGatewayConnect, s as resolveGatewayAuth, t as assertGatewayAuthConfigured, u as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH } from "./auth-BdqTyBRn.js";
-import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-RkR0AfjN.js";
+import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-BSKE3pk_.js";
+import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-DESjYW7M.js";
+import { a as isDirectLoopbackProvenance, c as AUTH_RATE_LIMIT_SCOPE_BROWSER_EXTENSION, d as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, f as createAuthRateLimiter, i as captureTransportProvenance, l as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, n as authorizeHttpGatewayConnect, o as isLocalDirectRequest, p as normalizeRateLimitClientIp, r as authorizeWsControlUiGatewayConnect, s as resolveGatewayAuth, t as assertGatewayAuthConfigured, u as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH } from "./auth-Cx-Q9zgv.js";
+import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-BEjWhzMi.js";
 import { d as hasBinary } from "./frontmatter-Dn2qUSOb.js";
-import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-ZklHNqsc.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-Dwpja4Ts.js";
+import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-D3kpiNaJ.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-CHFrrzxZ.js";
 import { a as testRegexWithBoundedInput, i as compileSafeRegex } from "./redact-BWPFahWo.js";
 import { i as formatErrorMessage, o as hasErrnoCode, s as isErrno } from "./errors-Bf0TUXNT.js";
-import { i as openFileWithinRoot, l as writeFileWithinRoot, s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-D7SLKk8k.js";
-import { n as SsrFBlockedError } from "./proxy-env-BVlcuMzr.js";
-import { c as detectMime } from "./image-ops-BH5tZFXZ.js";
-import "./store-AQt3mu5T.js";
-import { S as ensureChromeExtensionRelayServer } from "./chrome-Ch-PRzot.js";
-import { i as resolveProfile, r as resolveBrowserConfig, t as movePathToTrash } from "./trash-BDCU6Fb2.js";
-import { n as inspectPortUsage, o as formatPortDiagnostics, t as ensurePortAvailable } from "./ports-J_cZ4_9V.js";
+import { i as openFileWithinRoot, l as writeFileWithinRoot, s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-CByGgR59.js";
+import { n as SsrFBlockedError } from "./proxy-env-DzG6q8Hh.js";
+import { c as detectMime } from "./image-ops-Cq6SZYWW.js";
+import "./store-BFf8dvdk.js";
+import { S as ensureChromeExtensionRelayServer } from "./chrome-BsgpiutB.js";
+import { i as resolveProfile, r as resolveBrowserConfig, t as movePathToTrash } from "./trash-DNkuLhfz.js";
+import { n as inspectPortUsage, o as formatPortDiagnostics, t as ensurePortAvailable } from "./ports-QWAeZ9Is.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-C60x4trY.js";
-import "./server-middleware-B6bN1rYO.js";
+import "./server-middleware-CrJMxxfQ.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-NawgaQgc.js";
-import { a as resolveAgentIdentity, t as createReplyPrefixOptions } from "./reply-prefix-V-IxyeUB.js";
-import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-x3WbTUiR.js";
-import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-DIENRALL.js";
-import { f as getGlobalHookRunner, h as runGlobalGatewayStopSafely, m as resetGlobalHookRunner, u as buildOutboundSessionContext } from "./outbound-message-hooks-C0BAHo6-.js";
-import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-CyH49cpU.js";
+import { a as resolveAgentIdentity, t as createReplyPrefixOptions } from "./reply-prefix-B8M4IWrd.js";
+import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-B6PaaeVv.js";
+import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-CpZZ4mMw.js";
+import { f as getGlobalHookRunner, h as runGlobalGatewayStopSafely, m as resetGlobalHookRunner, u as buildOutboundSessionContext } from "./outbound-message-hooks-BBtH97ZV.js";
+import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-u64kcpDQ.js";
 import { u as snapshotActiveRuns } from "./diagnostic-session-state-DCr9T3zW.js";
-import { a as getActiveTaskCount, c as getTotalQueueSize, d as resetAllLanes, f as setCommandLaneConcurrency, m as waitForActiveTasks, p as setGatewayDrainState, u as markGatewayDraining } from "./command-queue-BoBsMaob.js";
-import { F as resolveCronStorePath, I as saveCronStore, P as loadCronStore, S as collectTelegramDuplicatePollerDiagnostics } from "./send-CDuS9tHa.js";
-import { n as resolveModel } from "./model-D56FsZ1w.js";
-import "./pi-model-discovery-dD_F5Zs_.js";
-import "./models-config-BDhVodK4.js";
-import { i as resolveSafeBins } from "./exec-approvals-allowlist-UZiLlQZY.js";
-import "./exec-safe-bin-runtime-policy-kCGsE7iL.js";
-import "./session-consumer-agents-WuG2FJYp.js";
-import { n as loadModelCatalog } from "./model-catalog-CLFSsgfj.js";
-import "./fetch-cHZPcwpd.js";
-import { D as registerUnhandledRejectionHandler, _ as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, f as resolveModelEntries, n as buildProviderRegistry, u as resolveCapabilityConfig, v as listAutoDetectableProviders, y as normalizeMediaProviderId } from "./audio-transcription-runner-N8I-G4DN.js";
-import { t as fetchWithSsrFGuard } from "./fetch-guard-Dp0XbWAV.js";
-import "./proxy-fetch-D1upsMhs.js";
-import "./api-key-rotation-BDa6RvrU.js";
-import "./provider-image-BVRCttNV.js";
-import { h as extractTextFromChatContent } from "./pi-embedded-utils-CBwHE9Fa.js";
-import "./tool-display-CO_Gj1t5.js";
+import { a as getActiveTaskCount, c as getTotalQueueSize, d as resetAllLanes, f as setCommandLaneConcurrency, m as waitForActiveTasks, p as setGatewayDrainState, u as markGatewayDraining } from "./command-queue-B3_VRNOr.js";
+import { F as resolveCronStorePath, I as saveCronStore, P as loadCronStore, S as collectTelegramDuplicatePollerDiagnostics } from "./send-CZsC4D3G.js";
+import { n as resolveModel } from "./model-BbeosLtF.js";
+import "./pi-model-discovery-CZ9wxcE8.js";
+import "./models-config-BMgEFu57.js";
+import { i as resolveSafeBins } from "./exec-approvals-allowlist-CNWI56tZ.js";
+import "./exec-safe-bin-runtime-policy-C3eU8CKJ.js";
+import "./session-consumer-agents-5ORspv9c.js";
+import { n as loadModelCatalog } from "./model-catalog-Bjfzg68Q.js";
+import "./fetch-ByEEe-Yd.js";
+import { D as registerUnhandledRejectionHandler, _ as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, f as resolveModelEntries, n as buildProviderRegistry, u as resolveCapabilityConfig, v as listAutoDetectableProviders, y as normalizeMediaProviderId } from "./audio-transcription-runner-Gr8vN3AS.js";
+import { t as fetchWithSsrFGuard } from "./fetch-guard-BzXFjlMV.js";
+import "./proxy-fetch-BqVhGKFd.js";
+import "./api-key-rotation-DiMQTef3.js";
+import "./provider-image-Bsivqxw8.js";
+import { h as extractTextFromChatContent } from "./pi-embedded-utils-BV_Dtzrw.js";
+import "./tool-display-DiZGbhL2.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-DFNB1c7t.js";
-import "./chunk-dZYOJUMQ.js";
-import "./markdown-tables-DBBxKcll.js";
-import "./ir-Bphccx2x.js";
+import "./chunk-DiXpyRAz.js";
+import "./markdown-tables-BcUNsqVQ.js";
+import "./ir-B3r0eIJW.js";
 import "./render-BBWKrfmg.js";
-import { r as isRestartEnabled } from "./commands-Byb21m-W.js";
-import "./commands-registry-fXBoHxbT.js";
+import { r as isRestartEnabled } from "./commands-Csxgimkc.js";
+import "./commands-registry-Dx5QvNqH.js";
 import "./registry-DXmhuMNN.js";
-import { $ as validateNodeListParams, $t as validateTalkSessionCreateParams, A as validateCronRunParams, B as validateExecApprovalRequestParams, Bn as verifyDeviceToken, Bt as validateTalkConfigParams, C as validateConfigPatchParams, Cn as normalizeDeviceMetadataForAuth, D as validateCronAddParams, Dn as consumeDeviceBootstrapToken, E as validateConnectParams, En as approveDevicePairing, F as validateDevicePairListParams, Fn as revokeDeviceToken, Ft as validateSkillsBinsParams, G as validateExecApprovalsSetParams, Gt as validateTalkRealtimeSessionParams, H as validateExecApprovalsGetParams, Ht as validateTalkRealtimeAudioParams, I as validateDevicePairRejectParams, In as rotateDeviceToken, It as validateSkillsInstallParams, J as validateModelsListParams, Jt as validateTalkRealtimeToolResultParams, K as validateLogsTailParams, Kt as validateTalkRealtimeStatusParams, L as validateDevicePairRemoveParams, Ln as summarizeDeviceTokens, Lt as validateSkillsStatusParams, M as validateCronStatusParams, Mn as rejectDevicePairing, N as validateCronUpdateParams, Nn as removePairedDevice, Nt as validateSessionsTitlePrepareParams, O as validateCronListParams, On as ensureDeviceToken, P as validateDevicePairApproveParams, Pn as requestDevicePairing, Pt as validateSessionsUsageParams, Q as validateNodeInvokeResultParams, Qt as validateTalkSessionCloseParams, R as validateDeviceTokenRevokeParams, Rn as updatePairedDeviceMetadata, Rt as validateSkillsUpdateParams, S as validateConfigGetParams, Sn as buildDeviceAuthPayloadV3, T as validateConfigSetParams, Tn as approveBootstrapDevicePairing, U as validateExecApprovalsNodeGetParams, Un as operatorScopeSatisfied, Ut as validateTalkRealtimeBargeInParams, V as validateExecApprovalResolveParams, Vt as validateTalkModeParams, W as validateExecApprovalsNodeSetParams, Wn as roleScopesAllow, Wt as validateTalkRealtimeMarkParams, X as validateNodeEventParams, Xn as verifyDeviceSignature, Xt as validateTalkSessionBargeInParams, Y as validateNodeDescribeParams, Yn as normalizeDevicePublicKeyBase64Url, Yt as validateTalkSessionAppendAudioParams, Z as validateNodeInvokeParams, Zt as validateTalkSessionCancelTurnParams, _ as validateChatAbortParams, _n as ErrorCodes, a as validateAgentNudgeParams, an as validateToolsCatalogParams, at as validateNodeRenameParams, b as validateChatSendParams, c as validateAgentsCreateParams, cn as validateWebLoginStartParams, ct as validateRequestFrame, d as validateAgentsFilesListParams, dn as validateWizardNextParams, dt as validateSendParams, en as validateTalkSessionMarkParams, et as validateNodePairApproveParams, f as validateAgentsFilesSetParams, fn as validateWizardStartParams, ft as validateSessionsAbortParams, g as validateChannelsStatusParams, h as validateChannelsLogoutParams, hn as RUNS_INVALIDATED_EVENT, i as validateAgentIdentityParams, in as validateTasksRunsListParams, it as validateNodePairVerifyParams, j as validateCronRunsParams, jn as listDevicePairing, jt as validateSessionsSteerParams, k as validateCronRemoveParams, kn as getPairedDevice, l as validateAgentsDeleteParams, ln as validateWebLoginWaitParams, lt as validateSecretsResolveParams, m as validateAgentsUpdateParams, mn as PROTOCOL_VERSION, nn as validateTasksRunsEventsParams, nt as validateNodePairRejectParams, o as validateAgentParams, on as validateUpdateRunParams, ot as validatePollParams, p as validateAgentsListParams, pn as validateWizardStatusParams, q as validateModelsAuthStatusParams, qn as deriveDeviceIdFromPublicKey, qt as validateTalkRealtimeStopParams, r as formatValidationErrors, rn as validateTasksRunsGetParams, rt as validateNodePairRequestParams, s as validateAgentWaitParams, sn as validateWakeParams, st as validatePushTestParams, tn as validateTasksRunEventsParams, tt as validateNodePairListParams, u as validateAgentsFilesGetParams, un as validateWizardCancelParams, ut as validateSecretsResolveResult, v as validateChatHistoryParams, vn as errorShape, w as validateConfigSchemaParams, x as validateConfigApplyParams, xn as buildDeviceAuthPayload, y as validateChatInjectParams, z as validateDeviceTokenRotateParams, zn as verifyDeviceBootstrapToken, zt as validateTalkCatalogParams } from "./client-BGqFY5o-.js";
-import { _ as hasNarrowSessionScope, d as APPROVALS_SCOPE, f as PAIRING_SCOPE, g as authorizeOperatorScopesForMethod, h as WRITE_SCOPE, m as SESSION_READ_SCOPE, n as callGateway, p as READ_SCOPE, u as ADMIN_SCOPE$1, v as isHealthProbeAllowedForScopes, x as loadGatewayTlsRuntime$1, y as isNodeRoleMethod } from "./call-UfwN5rR7.js";
+import { $ as validateNodeListParams, $t as validateTalkSessionCreateParams, A as validateCronRunParams, B as validateExecApprovalRequestParams, Bn as verifyDeviceToken, Bt as validateTalkConfigParams, C as validateConfigPatchParams, Cn as normalizeDeviceMetadataForAuth, D as validateCronAddParams, Dn as consumeDeviceBootstrapToken, E as validateConnectParams, En as approveDevicePairing, F as validateDevicePairListParams, Fn as revokeDeviceToken, Ft as validateSkillsBinsParams, G as validateExecApprovalsSetParams, Gt as validateTalkRealtimeSessionParams, H as validateExecApprovalsGetParams, Ht as validateTalkRealtimeAudioParams, I as validateDevicePairRejectParams, In as rotateDeviceToken, It as validateSkillsInstallParams, J as validateModelsListParams, Jt as validateTalkRealtimeToolResultParams, K as validateLogsTailParams, Kt as validateTalkRealtimeStatusParams, L as validateDevicePairRemoveParams, Ln as summarizeDeviceTokens, Lt as validateSkillsStatusParams, M as validateCronStatusParams, Mn as rejectDevicePairing, N as validateCronUpdateParams, Nn as removePairedDevice, Nt as validateSessionsTitlePrepareParams, O as validateCronListParams, On as ensureDeviceToken, P as validateDevicePairApproveParams, Pn as requestDevicePairing, Pt as validateSessionsUsageParams, Q as validateNodeInvokeResultParams, Qt as validateTalkSessionCloseParams, R as validateDeviceTokenRevokeParams, Rn as updatePairedDeviceMetadata, Rt as validateSkillsUpdateParams, S as validateConfigGetParams, Sn as buildDeviceAuthPayloadV3, T as validateConfigSetParams, Tn as approveBootstrapDevicePairing, U as validateExecApprovalsNodeGetParams, Un as operatorScopeSatisfied, Ut as validateTalkRealtimeBargeInParams, V as validateExecApprovalResolveParams, Vt as validateTalkModeParams, W as validateExecApprovalsNodeSetParams, Wn as roleScopesAllow, Wt as validateTalkRealtimeMarkParams, X as validateNodeEventParams, Xn as verifyDeviceSignature, Xt as validateTalkSessionBargeInParams, Y as validateNodeDescribeParams, Yn as normalizeDevicePublicKeyBase64Url, Yt as validateTalkSessionAppendAudioParams, Z as validateNodeInvokeParams, Zt as validateTalkSessionCancelTurnParams, _ as validateChatAbortParams, _n as ErrorCodes, a as validateAgentNudgeParams, an as validateToolsCatalogParams, at as validateNodeRenameParams, b as validateChatSendParams, c as validateAgentsCreateParams, cn as validateWebLoginStartParams, ct as validateRequestFrame, d as validateAgentsFilesListParams, dn as validateWizardNextParams, dt as validateSendParams, en as validateTalkSessionMarkParams, et as validateNodePairApproveParams, f as validateAgentsFilesSetParams, fn as validateWizardStartParams, ft as validateSessionsAbortParams, g as validateChannelsStatusParams, h as validateChannelsLogoutParams, hn as RUNS_INVALIDATED_EVENT, i as validateAgentIdentityParams, in as validateTasksRunsListParams, it as validateNodePairVerifyParams, j as validateCronRunsParams, jn as listDevicePairing, jt as validateSessionsSteerParams, k as validateCronRemoveParams, kn as getPairedDevice, l as validateAgentsDeleteParams, ln as validateWebLoginWaitParams, lt as validateSecretsResolveParams, m as validateAgentsUpdateParams, mn as PROTOCOL_VERSION, nn as validateTasksRunsEventsParams, nt as validateNodePairRejectParams, o as validateAgentParams, on as validateUpdateRunParams, ot as validatePollParams, p as validateAgentsListParams, pn as validateWizardStatusParams, q as validateModelsAuthStatusParams, qn as deriveDeviceIdFromPublicKey, qt as validateTalkRealtimeStopParams, r as formatValidationErrors, rn as validateTasksRunsGetParams, rt as validateNodePairRequestParams, s as validateAgentWaitParams, sn as validateWakeParams, st as validatePushTestParams, tn as validateTasksRunEventsParams, tt as validateNodePairListParams, u as validateAgentsFilesGetParams, un as validateWizardCancelParams, ut as validateSecretsResolveResult, v as validateChatHistoryParams, vn as errorShape, w as validateConfigSchemaParams, x as validateConfigApplyParams, xn as buildDeviceAuthPayload, y as validateChatInjectParams, z as validateDeviceTokenRotateParams, zn as verifyDeviceBootstrapToken, zt as validateTalkCatalogParams } from "./client-DN-SMVBn.js";
+import { _ as hasNarrowSessionScope, d as APPROVALS_SCOPE, f as PAIRING_SCOPE, g as authorizeOperatorScopesForMethod, h as WRITE_SCOPE, m as SESSION_READ_SCOPE, n as callGateway, p as READ_SCOPE, u as ADMIN_SCOPE$1, v as isHealthProbeAllowedForScopes, x as loadGatewayTlsRuntime$1, y as isNodeRoleMethod } from "./call-PE59cW0J.js";
 import "./pairing-token-BfRB0jVM.js";
-import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-BAm5mg_D.js";
-import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-CaBp0YZL.js";
-import "./user-run-recording-BR_U9osf.js";
+import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-BjLs5ozo.js";
+import { o as normalizeReplyPayloadsForDelivery, t as deliverOutboundPayloads } from "./deliver-BLp1Q7uO.js";
+import "./user-run-recording-DXNyfjMq.js";
 import "./fetch--Fn4tlfW.js";
-import { a as readChannelAllowFromStoreSync } from "./pairing-store-CVHmKK9w.js";
-import { a as maxAsk, c as normalizeExecApprovals, g as saveExecApprovalsV2, h as saveExecApprovals, i as loadExecApprovalsV2, l as readExecApprovalsSnapshot, m as resolveExecApprovalsReadOnly, o as mergeExecApprovalsSocketDefaults, r as ensureExecApprovals, s as minSecurity, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-BL3RknaU.js";
-import { _ as matchSystemRunApprovalBinding, g as buildSystemRunApprovalBinding, h as resolveSystemRunApprovalRuntimeContext, m as resolveSystemRunApprovalRequestContext, v as missingSystemRunApprovalBinding, y as toSystemRunApprovalMismatchError } from "./nodes-screen-DGsjKglY.js";
-import { r as resolveSystemRunCommand, t as canonicalizeLegacySystemRunParams } from "./system-run-command-Cv1h27tf.js";
-import { a as loadCombinedSessionStoreForGateway, c as resolveGatewaySessionStoreTarget, f as computeBackoff, l as resolveSessionModelRef, o as loadSessionEntry, p as sleepWithAbort, r as listAgentsForGateway, s as pruneLegacyStoreKeys, t as canonicalizeSpawnedByForAgent, u as lookupContextTokens } from "./session-utils-B2PSRqVy.js";
-import { S as registerSkillsChangeListener, _ as requestNodePairing, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, g as renamePairedNode, h as rejectNodePairing, l as refreshRemoteBinsForConnectedNodes, m as listNodePairing, o as getRemoteSkillEligibility, p as approveNodePairing, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion, y as verifyNodeToken } from "./skill-commands-DbmH_7xm.js";
-import { t as listAgentWorkspaceDirs } from "./workspace-dirs-CCmfLlPy.js";
-import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-D7BZusrG.js";
-import { i as normalizePollInput, t as getChannelActivity } from "./channel-activity-DF1lamZi.js";
-import "./tables-BBiYzs81.js";
+import { a as readChannelAllowFromStoreSync } from "./pairing-store-BZFrD-fJ.js";
+import { a as maxAsk, c as normalizeExecApprovals, g as saveExecApprovalsV2, h as saveExecApprovals, i as loadExecApprovalsV2, l as readExecApprovalsSnapshot, m as resolveExecApprovalsReadOnly, o as mergeExecApprovalsSocketDefaults, r as ensureExecApprovals, s as minSecurity, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-C3o7bTbp.js";
+import { _ as matchSystemRunApprovalBinding, g as buildSystemRunApprovalBinding, h as resolveSystemRunApprovalRuntimeContext, m as resolveSystemRunApprovalRequestContext, v as missingSystemRunApprovalBinding, y as toSystemRunApprovalMismatchError } from "./nodes-screen-DANf1hC-.js";
+import { r as resolveSystemRunCommand, t as canonicalizeLegacySystemRunParams } from "./system-run-command-Dl8UC6hO.js";
+import { a as loadCombinedSessionStoreForGateway, c as resolveGatewaySessionStoreTarget, f as computeBackoff, l as resolveSessionModelRef, o as loadSessionEntry, p as sleepWithAbort, r as listAgentsForGateway, s as pruneLegacyStoreKeys, t as canonicalizeSpawnedByForAgent, u as lookupContextTokens } from "./session-utils-CrCJ-7yK.js";
+import { S as registerSkillsChangeListener, _ as requestNodePairing, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, g as renamePairedNode, h as rejectNodePairing, l as refreshRemoteBinsForConnectedNodes, m as listNodePairing, o as getRemoteSkillEligibility, p as approveNodePairing, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion, y as verifyNodeToken } from "./skill-commands-uhWJKPrM.js";
+import { t as listAgentWorkspaceDirs } from "./workspace-dirs-mzsfTPed.js";
+import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot--nD7TrF-.js";
+import { i as normalizePollInput, t as getChannelActivity } from "./channel-activity-SqK9nKf7.js";
+import "./tables-CCEXTXTG.js";
 import { i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, t as discoverAllSessions } from "./session-cost-usage-BTDAzt-T.js";
-import "./server-lifecycle-B8yCvRvX.js";
+import "./server-lifecycle-C3hCCbXm.js";
 import { i as parseAbsoluteTimeMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-CT5G1TCV.js";
-import { a as normalizeHttpWebhookUrl, l as normalizeOptionalText, o as inferLegacyName } from "./heartbeat-tick-D26lWjWr.js";
-import { d as resolveGroupToolPolicy, f as resolveSubagentToolPolicy, u as resolveEffectiveToolPolicy } from "./dm-policy-shared-DFPi7Zr2.js";
-import "./reply-directives-B3iuHT4J.js";
-import { n as resolveMessageChannelSelection } from "./channel-selection-CNMEexgg.js";
-import { i as applyPluginAutoEnable, n as collectUnsafeTelegramPollingTimeouts, s as buildChannelUiCatalog } from "./polling-timeout-L7Tp4szs.js";
-import "./send-DSEM68Bg.js";
-import "./outbound-attachment-DXvNKE87.js";
+import { a as normalizeHttpWebhookUrl, l as normalizeOptionalText, o as inferLegacyName } from "./heartbeat-tick-By0WI8YD.js";
+import { d as resolveGroupToolPolicy, f as resolveSubagentToolPolicy, u as resolveEffectiveToolPolicy } from "./dm-policy-shared-CV1uWhMc.js";
+import "./reply-directives-Bc2RQAcJ.js";
+import { n as resolveMessageChannelSelection } from "./channel-selection-DfNPCJXK.js";
+import { i as applyPluginAutoEnable, n as collectUnsafeTelegramPollingTimeouts, s as buildChannelUiCatalog } from "./polling-timeout-DoMlNx_D.js";
+import "./send-CwCEyog7.js";
+import "./outbound-attachment-DJ3uYvUI.js";
 import "./delivery-queue-C38eMpQd.js";
-import "./send-o7L9XTU3.js";
-import "./resolve-route-D0rmcC0-.js";
-import "./proxy-m4Mv3Vy0.js";
-import "./replies-aExjMxzn.js";
-import { n as GATEWAY_AUTH_SURFACE_PATHS, p as isKnownSecretTargetId, r as evaluateGatewayAuthSurfaceStates } from "./runtime-config-collectors-Q9nEWUTc.js";
-import "./command-secret-targets-DtnfBTvl.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-BlOvn-As.js";
-import "./prompt-style-CO6JkEel.js";
-import "./pairing-labels-BMQWK5UC.js";
-import "./session-meta-YzxyVCeI.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-OhwCkNE-.js";
-import { r as resolveMemorySearchConfig } from "./manager-DbUdXsY9.js";
-import "./query-expansion-Bf7wd2Iw.js";
-import { t as formatDocsLink } from "./links-oxBAdiT5.js";
+import "./send-BVisLSq7.js";
+import "./resolve-route-KBL5oj6U.js";
+import "./proxy-Ba9wFNmC.js";
+import "./replies-BNP-F_lm.js";
+import { n as GATEWAY_AUTH_SURFACE_PATHS, p as isKnownSecretTargetId, r as evaluateGatewayAuthSurfaceStates } from "./runtime-config-collectors-BVWO6FhK.js";
+import "./command-secret-targets-CJ1czw_Q.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-DNbkQX5v.js";
+import "./prompt-style-XoPngT10.js";
+import "./pairing-labels-DYgJqxe0.js";
+import "./session-meta-Bd0mS7MT.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-DVqLwNhN.js";
+import { r as resolveMemorySearchConfig } from "./manager-PSj0t5kg.js";
+import "./query-expansion-BydaUlRH.js";
+import { t as formatDocsLink } from "./links-BZDTcdHU.js";
 import { n as runCommandWithRuntime } from "./cli-utils-aSBNHQae.js";
-import { t as formatHelpExamples } from "./help-format-BuYYzCrK.js";
-import { n as withProgress } from "./progress-DFaFyDmB.js";
-import "./recovery-prompt-TVvxel5J.js";
-import { c as OwnerLockHeldError, d as createOwnerIdentity, f as RecoveryJournalError, i as REASON_PRIOR_OWNER_UNPROVEN, l as PriorOwnerLiveError, n as REASON_JOURNAL_UNWRITABLE, o as createRestartRecoveryController, p as openRecoveryJournal, r as REASON_OWNER_LOCK_HELD, s as OwnerFenceLostError, t as REASON_JOURNAL_CORRUPT, u as acquireOwnerFence } from "./controller-DhhnKGZm.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-BEsBhRkz.js";
+import { t as formatHelpExamples } from "./help-format-DuL_Y84f.js";
+import { n as withProgress } from "./progress-Dc4ihErK.js";
+import "./recovery-prompt-CRcPgKcT.js";
+import { c as OwnerLockHeldError, d as createOwnerIdentity, f as RecoveryJournalError, i as REASON_PRIOR_OWNER_UNPROVEN, l as PriorOwnerLiveError, n as REASON_JOURNAL_UNWRITABLE, o as createRestartRecoveryController, p as openRecoveryJournal, r as REASON_OWNER_LOCK_HELD, s as OwnerFenceLostError, t as REASON_JOURNAL_CORRUPT, u as acquireOwnerFence } from "./controller-CyFBTP5K.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-DEdp3c6y.js";
 import { t as ensureOpenClawCliOnPath } from "./path-env-BaV2MrlM.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-C2gmG0PE.js";
 import { n as inheritOptionFromParent } from "./command-options-vZSwrzpA.js";
 import { t as WizardCancelledError } from "./prompts-BBkof-cQ.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-GPI9o9AS.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-D1RGbjKF.js";
-import { t as isWithinDir } from "./path-safety-tNRAPoSe.js";
-import "./install-safe-path-B8ogENI2.js";
-import "./npm-pack-install-DrAALuzR.js";
-import "./skill-scanner-CZhas7UB.js";
-import "./installs-BZc_r32M.js";
-import { n as formatConfigIssueLines } from "./issue-format-eKDAjB9C.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-96ueVlOH.js";
+import { t as isWithinDir } from "./path-safety-CCSB65fm.js";
+import "./install-safe-path-4YfMRsxN.js";
+import "./npm-pack-install-Dlm0MIZy.js";
+import "./skill-scanner-BrEkff8K.js";
+import "./installs-4lGALZOo.js";
+import { n as formatConfigIssueLines } from "./issue-format-BG8o87sf.js";
 import { t as buildChannelAccountSnapshot } from "./status-yrDGXYZM.js";
-import "./channels-status-issues-CdhIpbIH.js";
-import { i as resolveGatewayClientProfile, t as WEB_CLIENT_ALLOWED_ORIGINS_CONFIG_KEY } from "./client-profiles-CRejJ0SL.js";
-import "./daemon-install-helpers-Di-kgTCh.js";
-import "./runtime-guard-fIvyv07S.js";
-import "./service-BVB5AQS4.js";
-import "./systemd-Cjr55Dzl.js";
-import "./lifecycle-core-CIW7Nndu.js";
-import "./systemd-hints-Dd6VtLsV.js";
+import "./channels-status-issues-B4p6AXBG.js";
+import { i as resolveGatewayClientProfile, t as WEB_CLIENT_ALLOWED_ORIGINS_CONFIG_KEY } from "./client-profiles-DEoACLX5.js";
+import "./daemon-install-helpers-CKbnFsNZ.js";
+import "./runtime-guard-DchtXvGj.js";
+import "./service-Dkcqg-rd.js";
+import "./systemd-BJqlwupF.js";
+import "./lifecycle-core-CuMY0U_8.js";
+import "./systemd-hints-Cp0IfOPD.js";
 import { t as parsePort$1 } from "./parse-port-CshWaSQ9.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-BHHTg_VA.js";
-import "./diagnostics-BMCo9z-e.js";
-import "./table-CuH5YX2S.js";
-import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-B9lNb6ro.js";
-import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-DerjPYzv.js";
-import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-3p1cCyN-.js";
-import { t as discoverGatewayBeacons } from "./bonjour-discovery-Df2P-Q7o.js";
-import { a as getStorageV1Snapshot, c as pickGatewaySelfPresence, i as createStorageSupervisor, o as noteStorageReplayResult, r as getStatusSummary, s as noteStorageRestartRequired } from "./status-CbJxUaE5.js";
-import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-joZ3P32_.js";
-import { a as readPostQuiesceTranscriptDelta, i as readBulkTranscriptLines, o as replaySource, r as mergeBulkTranscriptSnapshotAndDelta, t as ReplayRowConflictError } from "./replay-C9MQSD5C.js";
-import "./session-key-resolution-D__Pd_mB.js";
-import { c as waitForStopDrain, l as withTimeout, o as tasksHandlers, r as getTaskOperatorRegistry, s as retryDelayMs, t as DEFAULT_RETENTION_DAYS } from "./task-runlog-retention-BdL6aGzZ.js";
-import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-CZc_jZ5P.js";
-import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-BeP04lVU.js";
-import { t as reconcileBundledInstalls } from "./reconcile-bundled-DyXp6UFb.js";
-import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-CK9AbML9.js";
-import "./onboarding.secret-input-DH2Ce8GL.js";
-import { t as runOnboardingWizard } from "./onboarding-DjLzxd2p.js";
-import { a as computeJobNextRunAtMs, c as findJobOrThrow, d as recomputeNextRuns, f as recomputeNextRunsForMaintenance, h as produceCronAgentTurn, i as applyJobPatch, l as isJobDue, m as resolveJobPayloadTextForMain, o as createJob, p as recordScheduleComputeError, r as resolveStaleClaimAdoptionMs, s as cronShapeSupportsIdentity, t as CRON_HEARTBEAT_ADAPTER_ID, u as nextWakeAtMs } from "./recovery-adapter-Dp82nx48.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-RSo8eOEB.js";
-import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-DxQW0vvG.js";
-import { a as readChatHistoryPage, c as unsubscribeSessionChanges, i as decodeHistoryCursor, l as assertValidParams, o as resolveDbLeafEntryId, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers } from "./sessions-Q3WrKAAg.js";
-import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-B4-mf1hM.js";
-import "./node-service-DlskRE2h.js";
-import "./status.update-Dhleef_a.js";
-import { i as resolveActiveLogFile, n as readLogSlice } from "./log-tail-Cu_iMzte.js";
-import { t as installSkill } from "./skills-install-B7k9HIIw.js";
-import { r as runGatewayUpdate } from "./update-runner-ha2YJZBG.js";
-import { n as resolveWebClientPackagedRootSync, t as WEB_CLIENT_BUNDLE_MISSING_MESSAGE } from "./web-client-assets-COSve3Rq.js";
-import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-Dt30ZPzK.js";
-import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-JUXdOhQX.js";
-import { n as forceFreePortAndWait } from "./ports-CwKtoFkm.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-D874Hxry.js";
+import "./diagnostics-C6ntZHc3.js";
+import "./table-H366JkfJ.js";
+import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-B1ALOpPn.js";
+import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-Cj18nzyW.js";
+import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-8O6sjQPv.js";
+import { t as discoverGatewayBeacons } from "./bonjour-discovery-B1GbNHC3.js";
+import { a as getStorageV1Snapshot, c as pickGatewaySelfPresence, i as createStorageSupervisor, o as noteStorageReplayResult, r as getStatusSummary, s as noteStorageRestartRequired } from "./status-BacPIpt6.js";
+import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-B5jHSu9i.js";
+import { a as readPostQuiesceTranscriptDelta, i as readBulkTranscriptLines, o as replaySource, r as mergeBulkTranscriptSnapshotAndDelta, t as ReplayRowConflictError } from "./replay-B9P8F4Td.js";
+import "./session-key-resolution-CvnTXaSw.js";
+import { a as respondTaskRegistryUnavailable, c as tasksHandlers, d as withTimeout, i as resolveTaskOperatorRegistry, l as retryDelayMs, r as getTaskOperatorRegistry, t as DEFAULT_RETENTION_DAYS, u as waitForStopDrain } from "./task-runlog-retention-DCbMK2T8.js";
+import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-BXkk_vKO.js";
+import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-DM1npKXX.js";
+import { t as reconcileBundledInstalls } from "./reconcile-bundled-CAKTvY-C.js";
+import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-ACR3KU8j.js";
+import "./onboarding.secret-input-YvW1rg1V.js";
+import { t as runOnboardingWizard } from "./onboarding-R2m4j7Dp.js";
+import { a as computeJobNextRunAtMs, c as findJobOrThrow, d as recomputeNextRuns, f as recomputeNextRunsForMaintenance, h as produceCronAgentTurn, i as applyJobPatch, l as isJobDue, m as resolveJobPayloadTextForMain, o as createJob, p as recordScheduleComputeError, r as resolveStaleClaimAdoptionMs, s as cronShapeSupportsIdentity, t as CRON_HEARTBEAT_ADAPTER_ID, u as nextWakeAtMs } from "./recovery-adapter-CPQ9-014.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-BcZzA03X.js";
+import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-BzuIKryU.js";
+import { a as readChatHistoryPage, c as unsubscribeSessionChanges, i as decodeHistoryCursor, l as assertValidParams, o as resolveDbLeafEntryId, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers } from "./sessions-DFDrcshi.js";
+import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-C1Fy9dcA.js";
+import "./node-service-Ys7JZFz-.js";
+import "./status.update-C4YRQzqD.js";
+import { i as resolveActiveLogFile, n as readLogSlice } from "./log-tail-Dg2oYTZ6.js";
+import { t as installSkill } from "./skills-install-B23U6yk5.js";
+import { r as runGatewayUpdate } from "./update-runner-C8NxlRy7.js";
+import { n as resolveWebClientPackagedRootSync, t as WEB_CLIENT_BUNDLE_MISSING_MESSAGE } from "./web-client-assets-nkeo2cLh.js";
+import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-DkkkJ4GX.js";
+import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-BmGo9Ngv.js";
+import { n as forceFreePortAndWait } from "./ports-BxjQwKMc.js";
 import { createRequire } from "node:module";
 import { spawn, spawnSync } from "node:child_process";
 import { cpuUsage, memoryUsage, resourceUsage, uptime } from "node:process";
@@ -193,7 +193,7 @@ import path from "node:path";
 import * as fsSync from "node:fs";
 import fs, { mkdirSync } from "node:fs";
 import chalk from "chalk";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import { isDeepStrictEqual, promisify } from "node:util";
 import zlib from "node:zlib";
 import crypto, { createHash, createHmac, hkdfSync, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -1083,7 +1083,7 @@ function resolveVerificationStore(params = {}) {
 
 //#endregion
 //#region src/infra/exec-approval-forwarder.ts
-const log$29 = createSubsystemLogger("gateway/exec-approvals");
+const log$30 = createSubsystemLogger("gateway/exec-approvals");
 const DEFAULT_MODE = "session";
 function normalizeMode(mode) {
 	return mode ?? DEFAULT_MODE;
@@ -1221,7 +1221,7 @@ async function deliverToTargets(params) {
 				payloads: [{ text: params.text }]
 			});
 		} catch (err) {
-			log$29.error(`exec approvals: failed to deliver to ${channel}:${target.to}: ${String(err)}`);
+			log$30.error(`exec approvals: failed to deliver to ${channel}:${target.to}: ${String(err)}`);
 		}
 	});
 	await Promise.allSettled(deliveries);
@@ -1310,7 +1310,7 @@ function createExecApprovalForwarder(deps = {}) {
 			deliver,
 			shouldSend: () => pending.get(request.id) === pendingEntry
 		}).catch((err) => {
-			log$29.error(`exec approvals: failed to deliver request ${request.id}: ${String(err)}`);
+			log$30.error(`exec approvals: failed to deliver request ${request.id}: ${String(err)}`);
 		});
 		return true;
 	};
@@ -1400,7 +1400,7 @@ function resolveCheckIntervalMs(cfg) {
 }
 async function readState(statePath) {
 	try {
-		const raw = await fsPromises.readFile(statePath, "utf-8");
+		const raw = await fs$1.readFile(statePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		return parsed && typeof parsed === "object" ? parsed : {};
 	} catch {
@@ -1481,7 +1481,7 @@ async function runAutoUpdateCommand(params) {
 			path.join(params.root, "dist", "index.mjs")
 		];
 		for (const candidate of candidates) try {
-			await fsPromises.access(candidate);
+			await fs$1.access(candidate);
 			argv.push(execPath, candidate, ...baseArgs);
 			break;
 		} catch {}
@@ -1682,7 +1682,7 @@ function scheduleGatewayUpdateCheck(params) {
 
 //#endregion
 //#region src/sessions/session-runs/restart-transitions.ts
-const log$28 = createSubsystemLogger("sessions/restart-transitions");
+const log$29 = createSubsystemLogger("sessions/restart-transitions");
 async function transition(input, recoveryEnabled) {
 	const store = input.store ?? getConfiguredSessionStorageRuntime()?.runtime?.runs;
 	if (!store) return [];
@@ -1693,14 +1693,14 @@ async function transition(input, recoveryEnabled) {
 			recoveryReason: input.reason,
 			recoveryEnabled
 		});
-		if (transitioned.length > 0) log$28.info("transitioned active runs for restart", {
+		if (transitioned.length > 0) log$29.info("transitioned active runs for restart", {
 			count: transitioned.length,
 			recoveryEnabled,
 			reason: input.reason
 		});
 		return transitioned;
 	} catch (err) {
-		log$28.warn("failed to transition active runs for restart", {
+		log$29.warn("failed to transition active runs for restart", {
 			recoveryEnabled,
 			error: String(err)
 		});
@@ -1769,7 +1769,7 @@ function resolveChannelRestartReason(snapshot, evaluation) {
 
 //#endregion
 //#region src/gateway/channel-health-monitor.ts
-const log$27 = createSubsystemLogger("gateway/health-monitor");
+const log$28 = createSubsystemLogger("gateway/health-monitor");
 const DEFAULT_CHECK_INTERVAL_MS = 5 * 6e4;
 const DEFAULT_MONITOR_STARTUP_GRACE_MS = 6e4;
 const DEFAULT_COOLDOWN_CYCLES = 2;
@@ -1829,11 +1829,11 @@ function startChannelHealthMonitor(deps) {
 					if (now - record.lastRestartAt <= cooldownMs) continue;
 					pruneOldRestarts(record, now);
 					if (record.restartsThisHour.length >= maxRestartsPerHour) {
-						log$27.warn?.(`[${channelId}:${accountId}] health-monitor: hit ${maxRestartsPerHour} restarts/hour limit, skipping`);
+						log$28.warn?.(`[${channelId}:${accountId}] health-monitor: hit ${maxRestartsPerHour} restarts/hour limit, skipping`);
 						continue;
 					}
 					const reason = resolveChannelRestartReason(status, health);
-					log$27.info?.(`[${channelId}:${accountId}] health-monitor: restarting (reason: ${reason})`);
+					log$28.info?.(`[${channelId}:${accountId}] health-monitor: restarting (reason: ${reason})`);
 					try {
 						if (status.running) await channelManager.stopChannel(channelId, accountId);
 						channelManager.resetRestartAttempts(channelId, accountId);
@@ -1842,7 +1842,7 @@ function startChannelHealthMonitor(deps) {
 						record.restartsThisHour.push({ at: now });
 						restartRecords.set(key, record);
 					} catch (err) {
-						log$27.error?.(`[${channelId}:${accountId}] health-monitor: restart failed: ${String(err)}`);
+						log$28.error?.(`[${channelId}:${accountId}] health-monitor: restart failed: ${String(err)}`);
 					}
 				}
 			}
@@ -1862,7 +1862,7 @@ function startChannelHealthMonitor(deps) {
 		abortSignal?.addEventListener("abort", stop, { once: true });
 		timer = setInterval(() => void runCheck(), checkIntervalMs);
 		if (typeof timer === "object" && "unref" in timer) timer.unref();
-		log$27.info?.(`started (interval: ${Math.round(checkIntervalMs / 1e3)}s, startup-grace: ${Math.round(timing.monitorStartupGraceMs / 1e3)}s, channel-connect-grace: ${Math.round(timing.channelConnectGraceMs / 1e3)}s)`);
+		log$28.info?.(`started (interval: ${Math.round(checkIntervalMs / 1e3)}s, startup-grace: ${Math.round(timing.monitorStartupGraceMs / 1e3)}s, channel-connect-grace: ${Math.round(timing.channelConnectGraceMs / 1e3)}s)`);
 	}
 	return { stop };
 }
@@ -3065,13 +3065,13 @@ async function resolveGatewayRecoveryAdapters(cfg, opts) {
 async function assembleFirstPartyAdapters(cfg, wiring) {
 	const adapters = [];
 	const stateDir = resolveStateDir();
-	const { getConfiguredSessionStorageRuntime } = await import("./config-CRFk9Bjq.js").then((n) => n.Hn);
+	const { getConfiguredSessionStorageRuntime } = await import("./config-BPACL-n5.js").then((n) => n.Hn);
 	const runtime = getConfiguredSessionStorageRuntime()?.runtime;
 	const gatewayInstanceId = getGatewayInstanceId();
-	const { tryGetAgentTurnRuntime } = await import("./agent-turn-runner-BDS9k--2.js").then((n) => n.t);
+	const { tryGetAgentTurnRuntime } = await import("./agent-turn-runner-DoHGgNPh.js").then((n) => n.t);
 	const backbone = tryGetAgentTurnRuntime()?.backbone;
 	const { createOutboundDeliveryRecoveryAdapter } = await import("./delivery-recovery-adapter-Bj3mCcg9.js");
-	const { deliverOutboundPayloads } = await import("./deliver-CaBp0YZL.js").then((n) => n.n);
+	const { deliverOutboundPayloads } = await import("./deliver-BLp1Q7uO.js").then((n) => n.n);
 	adapters.push(createOutboundDeliveryRecoveryAdapter({
 		cfg,
 		deliver: deliverOutboundPayloads,
@@ -3085,7 +3085,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		sessionRuns = void 0;
 	}
 	if (sessionRuns && wiring?.agentTurnStager) {
-		const { createSessionRunRecoveryAdapter } = await import("./recovery-adapter-ClfDS4Ov.js");
+		const { createSessionRunRecoveryAdapter } = await import("./recovery-adapter-okaOo6tO.js");
 		adapters.push(createSessionRunRecoveryAdapter({
 			store: sessionRuns,
 			cfg,
@@ -3094,14 +3094,14 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 			stager: wiring.agentTurnStager
 		}));
 	}
-	const { createStorageSupervisorRecoveryAdapter } = await import("./supervisor-recovery-adapter-DVA_i7Fv.js");
+	const { createStorageSupervisorRecoveryAdapter } = await import("./supervisor-recovery-adapter-BIN1RCIY.js");
 	adapters.push(createStorageSupervisorRecoveryAdapter({
 		stateDir,
 		supervisor: wiring?.supervisor,
 		lease: wiring?.lease ? () => wiring.lease?.() ?? { isArmed: () => false } : void 0
 	}));
 	if (backbone && wiring?.agentTurnStager) {
-		const { createAgentTurnRecoveryAdapter } = await import("./agent-turn-recovery-adapter-BhqXEKaC.js");
+		const { createAgentTurnRecoveryAdapter } = await import("./agent-turn-recovery-adapter-Dw5-XbMI.js");
 		adapters.push(createAgentTurnRecoveryAdapter({
 			backbone,
 			stager: wiring.agentTurnStager
@@ -3115,7 +3115,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		}));
 	}
 	if (runtime?.cronJobs && runtime.taskRuns && sessionRuns) {
-		const { createCronHeartbeatRecoveryAdapter } = await import("./recovery-adapter-Dp82nx48.js").then((n) => n.n);
+		const { createCronHeartbeatRecoveryAdapter } = await import("./recovery-adapter-CPQ9-014.js").then((n) => n.n);
 		adapters.push(createCronHeartbeatRecoveryAdapter({
 			cronJobs: runtime.cronJobs,
 			taskRuns: runtime.taskRuns,
@@ -3123,7 +3123,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		}));
 	}
 	if (sessionRuns) {
-		const { createEmbeddedPiRecoveryAdapter } = await import("./pi-embedded-recovery-adapter-CpGvtObS.js");
+		const { createEmbeddedPiRecoveryAdapter } = await import("./pi-embedded-recovery-adapter-8xq2SINa.js");
 		adapters.push(createEmbeddedPiRecoveryAdapter({
 			sessionRuns,
 			cfg,
@@ -3131,11 +3131,11 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 			stager: wiring?.agentTurnStager,
 			isRunActive: isEmbeddedPiRunActive
 		}));
-		const { createAcpRuntimeRecoveryAdapter } = await import("./recovery-adapter-eslk30An.js");
+		const { createAcpRuntimeRecoveryAdapter } = await import("./recovery-adapter-Df87xZQp.js");
 		adapters.push(createAcpRuntimeRecoveryAdapter({ sessionRuns }));
 	}
 	if (backbone) {
-		const { createPluginOwnedWorkRecoveryAdapter } = await import("./plugin-owned-work-recovery-adapter-DSTbgdf1.js");
+		const { createPluginOwnedWorkRecoveryAdapter } = await import("./plugin-owned-work-recovery-adapter-CCMhA7pp.js");
 		adapters.push(createPluginOwnedWorkRecoveryAdapter({ backbone }));
 	}
 	return adapters;
@@ -3772,7 +3772,7 @@ function createChannelManager(opts) {
 
 //#endregion
 //#region src/gateway/server-chat.ts
-const log$26 = createSubsystemLogger("gateway/chat-final");
+const log$27 = createSubsystemLogger("gateway/chat-final");
 const CHAT_TERMINAL_DURABILITY_TIMEOUT_MS = 5e3;
 function resolveHeartbeatAckMaxChars$1() {
 	try {
@@ -4014,14 +4014,14 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 		const pending = pendingTerminalBySession.get(sessionKey);
 		const durability = waitForPendingWrites(writes, CHAT_TERMINAL_DURABILITY_TIMEOUT_MS);
 		const gate = (pending ?? Promise.resolve()).then(() => durability).then((outcome) => {
-			if (outcome === "timeout") log$26.warn("chat terminal broadcast before transcript durability (timeout)", {
+			if (outcome === "timeout") log$27.warn("chat terminal broadcast before transcript durability (timeout)", {
 				runId: sourceRunId,
 				sessionKey,
 				timeoutMs: CHAT_TERMINAL_DURABILITY_TIMEOUT_MS
 			});
 			sendChatTerminal(sessionKey, payload);
 		}).catch((err) => {
-			log$26.warn("chat terminal broadcast failed while waiting for transcript durability", {
+			log$27.warn("chat terminal broadcast failed while waiting for transcript durability", {
 				runId: sourceRunId,
 				sessionKey,
 				err
@@ -4128,7 +4128,7 @@ function createAgentEventHandler({ broadcast, broadcastToConnIds, nodeSendToSess
 * Automatically starts `gog gmail watch serve` when the gateway starts,
 * if hooks.gmail is configured with an account.
 */
-const log$25 = createSubsystemLogger("gmail-watcher");
+const log$26 = createSubsystemLogger("gmail-watcher");
 const ADDRESS_IN_USE_RE = /address already in use|EADDRINUSE/i;
 function isAddressInUseError(line) {
 	return ADDRESS_IN_USE_RE.test(line);
@@ -4152,13 +4152,13 @@ async function startGmailWatch(cfg) {
 		const result = await runCommandWithTimeout(args, { timeoutMs: 12e4 });
 		if (result.code !== 0) {
 			const message = result.stderr || result.stdout || "gog watch start failed";
-			log$25.error(`watch start failed: ${message}`);
+			log$26.error(`watch start failed: ${message}`);
 			return false;
 		}
-		log$25.info(`watch started for ${cfg.account}`);
+		log$26.info(`watch started for ${cfg.account}`);
 		return true;
 	} catch (err) {
-		log$25.error(`watch start error: ${String(err)}`);
+		log$26.error(`watch start error: ${String(err)}`);
 		return false;
 	}
 }
@@ -4167,7 +4167,7 @@ async function startGmailWatch(cfg) {
 */
 function spawnGogServe(cfg) {
 	const args = buildGogWatchServeArgs(cfg);
-	log$25.info(`starting gog ${args.join(" ")}`);
+	log$26.info(`starting gog ${args.join(" ")}`);
 	let addressInUse = false;
 	const child = spawn("gog", args, {
 		stdio: [
@@ -4179,25 +4179,25 @@ function spawnGogServe(cfg) {
 	});
 	child.stdout?.on("data", (data) => {
 		const line = data.toString().trim();
-		if (line) log$25.info(`[gog] ${line}`);
+		if (line) log$26.info(`[gog] ${line}`);
 	});
 	child.stderr?.on("data", (data) => {
 		const line = data.toString().trim();
 		if (!line) return;
 		if (isAddressInUseError(line)) addressInUse = true;
-		log$25.warn(`[gog] ${line}`);
+		log$26.warn(`[gog] ${line}`);
 	});
 	child.on("error", (err) => {
-		log$25.error(`gog process error: ${String(err)}`);
+		log$26.error(`gog process error: ${String(err)}`);
 	});
 	child.on("exit", (code, signal) => {
 		if (shuttingDown) return;
 		if (addressInUse) {
-			log$25.warn("gog serve failed to bind (address already in use); stopping restarts. Another watcher is likely running. Set OPENCLAW_SKIP_GMAIL_WATCHER=1 or stop the other process.");
+			log$26.warn("gog serve failed to bind (address already in use); stopping restarts. Another watcher is likely running. Set OPENCLAW_SKIP_GMAIL_WATCHER=1 or stop the other process.");
 			watcherProcess = null;
 			return;
 		}
-		log$25.warn(`gog exited (code=${code}, signal=${signal}); restarting in 5s`);
+		log$26.warn(`gog exited (code=${code}, signal=${signal}); restarting in 5s`);
 		watcherProcess = null;
 		setTimeout(() => {
 			if (shuttingDown || !currentConfig) return;
@@ -4237,15 +4237,15 @@ async function startGmailWatcher(cfg) {
 			port: runtimeConfig.serve.port,
 			target: runtimeConfig.tailscale.target
 		});
-		log$25.info(`tailscale ${runtimeConfig.tailscale.mode} configured for port ${runtimeConfig.serve.port}`);
+		log$26.info(`tailscale ${runtimeConfig.tailscale.mode} configured for port ${runtimeConfig.serve.port}`);
 	} catch (err) {
-		log$25.error(`tailscale setup failed: ${String(err)}`);
+		log$26.error(`tailscale setup failed: ${String(err)}`);
 		return {
 			started: false,
 			reason: `tailscale setup failed: ${String(err)}`
 		};
 	}
-	if (!await startGmailWatch(runtimeConfig)) log$25.warn("gmail watch start failed, but continuing with serve");
+	if (!await startGmailWatch(runtimeConfig)) log$26.warn("gmail watch start failed, but continuing with serve");
 	shuttingDown = false;
 	watcherProcess = spawnGogServe(runtimeConfig);
 	const renewMs = runtimeConfig.renewEveryMinutes * 6e4;
@@ -4253,7 +4253,7 @@ async function startGmailWatcher(cfg) {
 		if (shuttingDown) return;
 		startGmailWatch(runtimeConfig);
 	}, renewMs);
-	log$25.info(`gmail watcher started for ${runtimeConfig.account} (renew every ${runtimeConfig.renewEveryMinutes}m)`);
+	log$26.info(`gmail watcher started for ${runtimeConfig.account} (renew every ${runtimeConfig.renewEveryMinutes}m)`);
 	return { started: true };
 }
 /**
@@ -4266,7 +4266,7 @@ async function stopGmailWatcher() {
 		renewInterval = null;
 	}
 	if (watcherProcess) {
-		log$25.info("stopping gmail watcher");
+		log$26.info("stopping gmail watcher");
 		watcherProcess.kill("SIGTERM");
 		await new Promise((resolve) => {
 			const timeout = setTimeout(() => {
@@ -4281,7 +4281,7 @@ async function stopGmailWatcher() {
 		watcherProcess = null;
 	}
 	currentConfig = null;
-	log$25.info("gmail watcher stopped");
+	log$26.info("gmail watcher stopped");
 }
 
 //#endregion
@@ -5657,7 +5657,7 @@ async function runCronIsolatedAgentTurn(params) {
 
 //#endregion
 //#region src/cron/run-log.ts
-const log$24 = createSubsystemLogger("cron/run-log");
+const log$25 = createSubsystemLogger("cron/run-log");
 function assertSafeCronRunLogJobId(jobId) {
 	const trimmed = jobId.trim();
 	if (!trimmed) throw new Error("invalid cron run log job id");
@@ -5696,10 +5696,10 @@ async function drainPendingWrite(filePath) {
 	if (pending) await pending.catch(() => void 0);
 }
 async function pruneIfNeeded(filePath, opts) {
-	const stat = await fsPromises.stat(filePath).catch(() => null);
+	const stat = await fs$1.stat(filePath).catch(() => null);
 	if (!stat || stat.size <= opts.maxBytes) return;
-	const raw = await fsPromises.readFile(filePath, "utf-8").catch((err) => {
-		log$24.warn("cron run-log: prune skipped (read failed)", {
+	const raw = await fs$1.readFile(filePath, "utf-8").catch((err) => {
+		log$25.warn("cron run-log: prune skipped (read failed)", {
 			filePath,
 			err: String(err)
 		});
@@ -5710,14 +5710,14 @@ async function pruneIfNeeded(filePath, opts) {
 	const kept = lines.slice(Math.max(0, lines.length - opts.keepLines));
 	const { randomBytes } = await import("node:crypto");
 	const tmp = `${filePath}.${process.pid}.${randomBytes(8).toString("hex")}.tmp`;
-	await fsPromises.writeFile(tmp, `${kept.join("\n")}\n`, "utf-8");
-	await fsPromises.rename(tmp, filePath);
+	await fs$1.writeFile(tmp, `${kept.join("\n")}\n`, "utf-8");
+	await fs$1.rename(tmp, filePath);
 }
 async function listCronRunLogReadPaths(filePath) {
 	const resolved = path.resolve(filePath);
 	const dir = path.dirname(resolved);
 	const base = path.basename(resolved);
-	return [...(await fsPromises.readdir(dir).catch(() => [])).map((name) => {
+	return [...(await fs$1.readdir(dir).catch(() => [])).map((name) => {
 		const match = new RegExp(`^${base.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\.(\\d+)(\\.gz)?$`).exec(name);
 		return match ? {
 			path: path.join(dir, name),
@@ -5726,8 +5726,8 @@ async function listCronRunLogReadPaths(filePath) {
 	}).filter((entry) => entry !== null).toSorted((a, b) => b.slot - a.slot).map((entry) => entry.path), resolved];
 }
 async function readCronRunLogFile(filePath) {
-	if (filePath.endsWith(".gz")) return zlib.gunzipSync(await fsPromises.readFile(filePath)).toString("utf-8");
-	return fsPromises.readFile(filePath, "utf-8");
+	if (filePath.endsWith(".gz")) return zlib.gunzipSync(await fs$1.readFile(filePath)).toString("utf-8");
+	return fs$1.readFile(filePath, "utf-8");
 }
 async function readCronRunLogRaw(filePath) {
 	const chunks = [];
@@ -5878,7 +5878,7 @@ async function readCronRunLogEntriesPageAll(opts) {
 	const query = opts.query?.trim().toLowerCase() ?? "";
 	const sortDir = opts.sortDir === "asc" ? "asc" : "desc";
 	const runsDir = path.resolve(path.dirname(path.resolve(opts.storePath)), "runs");
-	const files = await fsPromises.readdir(runsDir, { withFileTypes: true }).catch(() => []);
+	const files = await fs$1.readdir(runsDir, { withFileTypes: true }).catch(() => []);
 	const logFiles = [...new Set(files.filter((entry) => entry.isFile()).map((entry) => {
 		const match = /^(.+\.jsonl)(?:\.\d+(?:\.gz)?)?$/.exec(entry.name);
 		return match ? path.join(runsDir, match[1] ?? "") : null;
@@ -10341,7 +10341,7 @@ function resolveWorkspaceFilePathResultOrThrow(params) {
 }
 async function resolveWorkspaceRealPath(workspaceDir) {
 	try {
-		return await fsPromises.realpath(workspaceDir);
+		return await fs$1.realpath(workspaceDir);
 	} catch {
 		return path.resolve(workspaceDir);
 	}
@@ -10370,7 +10370,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 	};
 	let candidateLstat;
 	try {
-		candidateLstat = await fsPromises.lstat(candidatePath);
+		candidateLstat = await fs$1.lstat(candidatePath);
 	} catch (err) {
 		return resolveWorkspaceFilePathResultOrThrow({
 			error: err,
@@ -10381,7 +10381,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 	if (candidateLstat.isSymbolicLink()) {
 		let targetReal;
 		try {
-			targetReal = await fsPromises.realpath(candidatePath);
+			targetReal = await fs$1.realpath(candidatePath);
 		} catch (err) {
 			return resolveWorkspaceFilePathResultOrThrow({
 				error: err,
@@ -10396,7 +10396,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 		};
 		let targetStat;
 		try {
-			targetStat = await fsPromises.stat(targetReal);
+			targetStat = await fs$1.stat(targetReal);
 		} catch (err) {
 			return resolveWorkspaceFilePathResultOrThrow({
 				error: err,
@@ -10434,13 +10434,13 @@ async function resolveAgentWorkspaceFilePath(params) {
 	return {
 		kind: "ready",
 		requestPath,
-		ioPath: await fsPromises.realpath(candidatePath).catch(() => candidatePath),
+		ioPath: await fs$1.realpath(candidatePath).catch(() => candidatePath),
 		workspaceReal
 	};
 }
 async function statFileSafely(filePath) {
 	try {
-		const [stat, lstat] = await Promise.all([fsPromises.stat(filePath), fsPromises.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([fs$1.stat(filePath), fs$1.lstat(filePath)]);
 		if (lstat.isSymbolicLink() || !stat.isFile()) return null;
 		if (stat.nlink > 1) return null;
 		if (!sameFileIdentity(stat, lstat)) return null;
@@ -10534,7 +10534,7 @@ function respondAgentNotFound(respond, agentId) {
 async function moveToTrashBestEffort(pathname) {
 	if (!pathname) return;
 	try {
-		await fsPromises.access(pathname);
+		await fs$1.access(pathname);
 	} catch {
 		return;
 	}
@@ -10610,7 +10610,7 @@ const agentsHandlers = {
 			dir: workspaceDir,
 			ensureBootstrapFiles: !Boolean(nextConfig.agents?.defaults?.skipBootstrap)
 		});
-		await fsPromises.mkdir(resolveSessionTranscriptsDirForAgent(agentId), { recursive: true });
+		await fs$1.mkdir(resolveSessionTranscriptsDirForAgent(agentId), { recursive: true });
 		await writeConfigFile(nextConfig);
 		const safeName = sanitizeIdentityLine(rawName);
 		const emoji = resolveOptionalStringParam(params.emoji);
@@ -10623,7 +10623,7 @@ const agentsHandlers = {
 			...avatar ? [`- Avatar: ${sanitizeIdentityLine(avatar)}`] : [],
 			""
 		];
-		await fsPromises.appendFile(identityPath, lines.join("\n"), "utf-8");
+		await fs$1.appendFile(identityPath, lines.join("\n"), "utf-8");
 		respond(true, {
 			ok: true,
 			agentId,
@@ -10658,9 +10658,9 @@ const agentsHandlers = {
 		});
 		if (avatar) {
 			const workspace = workspaceDir ?? resolveAgentWorkspaceDir(nextConfig, agentId);
-			await fsPromises.mkdir(workspace, { recursive: true });
+			await fs$1.mkdir(workspace, { recursive: true });
 			const identityPath = path.join(workspace, DEFAULT_IDENTITY_FILENAME);
-			await fsPromises.appendFile(identityPath, `\n- Avatar: ${sanitizeIdentityLine(avatar)}\n`, "utf-8");
+			await fs$1.appendFile(identityPath, `\n- Avatar: ${sanitizeIdentityLine(avatar)}\n`, "utf-8");
 		}
 		respond(true, {
 			ok: true,
@@ -10784,7 +10784,7 @@ const agentsHandlers = {
 		const resolved = resolveAgentWorkspaceFileOrRespondError(params, respond);
 		if (!resolved) return;
 		const { agentId, workspaceDir, name } = resolved;
-		await fsPromises.mkdir(workspaceDir, { recursive: true });
+		await fs$1.mkdir(workspaceDir, { recursive: true });
 		const filePath = path.join(workspaceDir, name);
 		const resolvedPath = await resolveWorkspaceFilePathOrRespond({
 			respond,
@@ -11742,9 +11742,6 @@ const VOICE_INTERRUPTED_MARKER = " [interrupted]";
 const CHAT_HISTORY_TEXT_MAX_CHARS = 12e3;
 const CHAT_HISTORY_MAX_SINGLE_MESSAGE_BYTES = 128 * 1024;
 const CHAT_HISTORY_OVERSIZED_PLACEHOLDER = "[chat.history omitted: message too large]";
-/** Twice the default storage probe timeout: how long chat.history waits for a booting gateway's session storage before it answers UNAVAILABLE. */
-const CHAT_HISTORY_STORAGE_START_WAIT_MS = 1e4;
-const CHAT_HISTORY_STORAGE_START_RETRY_AFTER_MS = 1e3;
 let chatHistoryPlaceholderEmitCount = 0;
 function stripDisallowedChatControlChars(message) {
 	let output = "";
@@ -12546,13 +12543,6 @@ const chatHandlers = {
 			return;
 		}
 		const { sessionKey, limit, maxChars, before } = params;
-		if (!(await context.storageStartup?.whenReleased(CHAT_HISTORY_STORAGE_START_WAIT_MS) ?? true)) {
-			respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, "session storage is still starting", {
-				retryable: true,
-				retryAfterMs: CHAT_HISTORY_STORAGE_START_RETRY_AFTER_MS
-			}));
-			return;
-		}
 		const { cfg, storePath, entry } = loadSessionEntry(sessionKey);
 		const sessionId = entry?.sessionId;
 		const sessionAgentId = resolveSessionAgentId({
@@ -14743,7 +14733,7 @@ async function replayApproval(ctx) {
 
 //#endregion
 //#region src/infra/exec-audit.ts
-const log$23 = createSubsystemLogger("infra/exec-audit");
+const log$24 = createSubsystemLogger("infra/exec-audit");
 function emitAuditRecord(request, decision) {
 	const inv = request.invocation;
 	const argvSummary = inv.mode === "argv" ? `${inv.executable} ${redactArgvForAudit(inv.args).join(" ")}` : inv.mode === "shell" ? redactCommandText(inv.command) : inv.mode === "approved-script" ? inv.scriptId : `${inv.serverId}/${inv.toolName}`;
@@ -14774,7 +14764,7 @@ function emitAuditRecord(request, decision) {
 		timeoutMs: request.timeoutMs,
 		stdinPresent: request.stdin === "present-redacted"
 	};
-	if (record.outcome === "deny") log$23.warn("exec-audit deny", {
+	if (record.outcome === "deny") log$24.warn("exec-audit deny", {
 		effect: record.effect,
 		sourceRule: record.sourceRule,
 		reason: record.reason,
@@ -14783,7 +14773,7 @@ function emitAuditRecord(request, decision) {
 		normalizedArgv: record.normalizedArgv,
 		policyId: record.policyId
 	});
-	else log$23.info("exec-audit", {
+	else log$24.info("exec-audit", {
 		effect: record.effect,
 		sourceRule: record.sourceRule,
 		outcome: record.outcome,
@@ -15131,7 +15121,7 @@ function reEvaluatePoliciesForPath(reResolvedRequest, envSanitization, policies
 
 //#endregion
 //#region src/infra/load-policies-for-request.ts
-const log$22 = createSubsystemLogger("infra/load-policies-for-request");
+const log$23 = createSubsystemLogger("infra/load-policies-for-request");
 /**
 * User-scoped policy source backed by the v2 exec-approvals store
 * (`~/.openclaw/exec-approvals.json`). The store is migrated v1→v2 on load
@@ -15150,7 +15140,7 @@ function createUserPolicySource() {
 		try {
 			return (await loadExecApprovalsV2()).policies;
 		} catch (error) {
-			log$22.warn("user policy store load failed; user policies will not apply", { error });
+			log$23.warn("user policy store load failed; user policies will not apply", { error });
 			return [];
 		}
 	} };
@@ -16295,7 +16285,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-CgVi6hsa.js");
+			const { handleNodeEvent } = await import("./server-node-events-8k0OLCvW.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -17092,7 +17082,7 @@ function resolveSteerResult(params) {
 
 //#endregion
 //#region src/gateway/session-title-completion.ts
-const log$21 = createSubsystemLogger("gateway/session-title-completion");
+const log$22 = createSubsystemLogger("gateway/session-title-completion");
 const SESSION_TITLE_COMPLETION_TIMEOUT_MS = 15e3;
 const SESSION_TITLE_MAX_CHARS = 60;
 /** Upstream openclaw's dashboard-session-title prompt wording (ADR 0084 s5, mission M4). */
@@ -17143,7 +17133,7 @@ async function generateSessionTitleCompletion(req, overrides) {
 	try {
 		const resolved = deps.resolveModel(provider, model, agentDir, cfg);
 		if (!resolved.model) {
-			log$21.warn("session title model unresolved", {
+			log$22.warn("session title model unresolved", {
 				...logFields,
 				error: resolved.error
 			});
@@ -17157,7 +17147,7 @@ async function generateSessionTitleCompletion(req, overrides) {
 		let apiKey;
 		if (!auth.apiKey) {
 			if (auth.mode !== "aws-sdk") {
-				log$21.warn("session title no api key resolved", {
+				log$22.warn("session title no api key resolved", {
 					...logFields,
 					mode: auth.mode
 				});
@@ -17172,7 +17162,7 @@ async function generateSessionTitleCompletion(req, overrides) {
 		})).token;
 		else apiKey = auth.apiKey;
 		if (controller.signal.aborted) {
-			log$21.warn("session title generation timed out before dispatch", logFields);
+			log$22.warn("session title generation timed out before dispatch", logFields);
 			return null;
 		}
 		const response = await deps.completeSimple(resolved.model, {
@@ -17189,11 +17179,11 @@ async function generateSessionTitleCompletion(req, overrides) {
 			signal: controller.signal
 		});
 		if (response.stopReason === "aborted") {
-			log$21.warn("session title generation timed out", logFields);
+			log$22.warn("session title generation timed out", logFields);
 			return null;
 		}
 		if (response.stopReason === "error") {
-			log$21.warn("session title generation provider error", {
+			log$22.warn("session title generation provider error", {
 				...logFields,
 				error: response.errorMessage
 			});
@@ -17203,7 +17193,7 @@ async function generateSessionTitleCompletion(req, overrides) {
 		if (!text) return null;
 		return normalizeSessionTitle(text);
 	} catch (error) {
-		log$21.warn("session title generation failed", {
+		log$22.warn("session title generation failed", {
 			...logFields,
 			error: error instanceof Error ? error.message : String(error)
 		});
@@ -17384,6 +17374,218 @@ const skillsHandlers = {
 	}
 };
 
+//#endregion
+//#region src/gateway/storage-method-policy.ts
+const STORAGE_METHOD_POLICY_REQUIRED = [
+	"chat.history",
+	"sessions.claims.status",
+	"sessions.runHistory",
+	"sessions.runs.cancel",
+	"sessions.runs.continue",
+	"sessions.runs.events",
+	"sessions.runs.get",
+	"sessions.runs.list",
+	"tasks.resetBudget",
+	"tasks.rollback",
+	"tasks.runDryRun",
+	"tasks.runEvents",
+	"tasks.runs.get",
+	"tasks.runs.events",
+	"tasks.runs.list",
+	"tasks.status"
+];
+const STORAGE_METHOD_POLICY_BOOT_WRITE = [
+	"chat.inject",
+	"sessions.compact",
+	"sessions.create",
+	"sessions.delete",
+	"sessions.patch",
+	"sessions.reset"
+];
+const STORAGE_METHOD_POLICY_NONE = [
+	"connect",
+	"health",
+	"status",
+	"logs.tail",
+	"voicewake.get",
+	"voicewake.set",
+	"channels.status",
+	"channels.logout",
+	"chat.abort",
+	"chat.send",
+	"sessions.abort",
+	"wake",
+	"cron.list",
+	"cron.status",
+	"cron.add",
+	"cron.update",
+	"cron.remove",
+	"cron.run",
+	"cron.runs",
+	"device.pair.list",
+	"device.pair.approve",
+	"device.pair.reject",
+	"device.pair.remove",
+	"device.token.rotate",
+	"device.token.revoke",
+	"diagnostics.runtime.snapshot",
+	"diagnostics.capture.cpu",
+	"diagnostics.capture.heap",
+	"diagnostics.capture.report",
+	"diagnostics.profiling.start",
+	"diagnostics.profiling.stop",
+	"doctor.memory.status",
+	"doctor.recovery.inspect",
+	"doctor.recovery.plan",
+	"doctor.recovery.apply",
+	"exec.approvals.get",
+	"exec.approvals.set",
+	"exec.approvals.node.get",
+	"exec.approvals.node.set",
+	"web.login.start",
+	"web.login.wait",
+	"models.authStatus",
+	"models.list",
+	"config.get",
+	"config.schema",
+	"config.set",
+	"config.patch",
+	"config.apply",
+	"wizard.start",
+	"wizard.next",
+	"wizard.cancel",
+	"wizard.status",
+	"talk.config",
+	"talk.mode",
+	"talk.catalog",
+	"talk.session.create",
+	"talk.session.appendAudio",
+	"talk.session.close",
+	"talk.session.cancelTurn",
+	"talk.session.mark",
+	"talk.session.bargeIn",
+	"talk.realtime.session",
+	"talk.realtime.audio",
+	"talk.realtime.mark",
+	"talk.realtime.toolResult",
+	"talk.realtime.bargeIn",
+	"talk.realtime.stop",
+	"talk.realtime.status",
+	"talk.metrics",
+	"tools.catalog",
+	"tts.status",
+	"tts.enable",
+	"tts.disable",
+	"tts.convert",
+	"tts.setProvider",
+	"tts.providers",
+	"skills.status",
+	"skills.bins",
+	"skills.install",
+	"skills.update",
+	"sessions.subscribe",
+	"sessions.list",
+	"sessions.describe",
+	"sessions.compaction.list",
+	"sessions.runs",
+	"sessions.thresholds",
+	"sessions.interrupt",
+	"sessions.preview",
+	"sessions.resolve",
+	"sessions.title.prepare",
+	"sessions.steer",
+	"last-heartbeat",
+	"set-heartbeats",
+	"system-presence",
+	"system-event",
+	"update.run",
+	"node.pair.request",
+	"node.pair.list",
+	"node.pair.approve",
+	"node.pair.reject",
+	"node.pair.verify",
+	"node.rename",
+	"node.list",
+	"node.describe",
+	"node.canvas.capability.refresh",
+	"node.invoke",
+	"node.invoke.result",
+	"node.event",
+	"plugins/health",
+	"push.test",
+	"send",
+	"poll",
+	"usage.status",
+	"usage.cost",
+	"sessions.usage",
+	"sessions.usage.timeseries",
+	"sessions.usage.logs",
+	"agent",
+	"agent.identity.get",
+	"agent.wait",
+	"agent.nudge",
+	"agents.list",
+	"agents.create",
+	"agents.update",
+	"agents.delete",
+	"agents.files.list",
+	"agents.files.get",
+	"agents.files.set",
+	"browser.request"
+];
+const STORAGE_METHOD_POLICY = Object.freeze({
+	...Object.fromEntries(STORAGE_METHOD_POLICY_REQUIRED.map((method) => [method, "required"])),
+	...Object.fromEntries(STORAGE_METHOD_POLICY_BOOT_WRITE.map((method) => [method, "boot-write"])),
+	...Object.fromEntries(STORAGE_METHOD_POLICY_NONE.map((method) => [method, "none"]))
+});
+
+//#endregion
+//#region src/gateway/server-methods/storage-fence.ts
+const STORAGE_START_WAIT_MS = 1e4;
+const log$21 = createSubsystemLogger("gateway/storage-fence");
+const warnedGates = /* @__PURE__ */ new WeakSet();
+/**
+* Returns true when this call has been answered by the fence (held out, or answered a typed
+* error), so dispatch must not run the handler. Runs after authorization and the method-set
+* rate limits, so an unauthorized caller never learns storage readiness. Absent context gate or
+* `none`/missing classification means no storage decision applies to the method.
+*/
+async function guardStorageRpc(method, context, respond) {
+	const policy = Object.hasOwn(STORAGE_METHOD_POLICY, method) ? STORAGE_METHOD_POLICY[method] : void 0;
+	const gate = context.storageStartup;
+	if (policy === void 0 || policy === "none" || !gate) return false;
+	let state = gate.state();
+	if (state.phase === "ready") return false;
+	state = await gate.whenSettled(STORAGE_START_WAIT_MS);
+	if (state.phase === "ready") return false;
+	if (state.phase === "failed") {
+		if (policy === "boot-write") return false;
+		respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, "session storage failed to start", {
+			retryable: false,
+			details: {
+				code: "storage_start_failed",
+				reasonCodes: state.reasonCodes
+			}
+		}));
+		return true;
+	}
+	if (state.phase === "starting" && !warnedGates.has(gate)) {
+		warnedGates.add(gate);
+		log$21.warn("session storage still starting after 10000ms; storage-backed methods answer RECOVERY_NOT_READY");
+	}
+	const stopping = state.phase === "stopping";
+	respond(false, void 0, errorShape(ErrorCodes.RECOVERY_NOT_READY, stopping ? "gateway is stopping" : "session storage is still starting", {
+		retryable: true,
+		retryAfterMs: 500,
+		details: {
+			producer: "session-storage",
+			phase: state.phase,
+			reasonCodes: [stopping ? "storage_stopping" : "storage_starting"]
+		}
+	}));
+	return true;
+}
+
 //#endregion
 //#region src/gateway/server/presence-events.ts
 function broadcastPresenceSnapshot(params) {
@@ -18092,8 +18294,8 @@ function logConsultFailure(reason) {
 }
 const defaultDeps = {
 	runEmbeddedPiAgent,
-	mkdtemp: fsPromises.mkdtemp,
-	rm: fsPromises.rm,
+	mkdtemp: fs$1.mkdtemp,
+	rm: fs$1.rm,
 	resolveAgentDir,
 	resolveAgentWorkspaceDir,
 	resolveDefaultAgentId,
@@ -22237,9 +22439,9 @@ function toRedactedEvent(event) {
 	};
 }
 async function listQueuedView(params, runtime, respond) {
-	const registry = getTaskOperatorRegistry();
+	const registry = await resolveTaskOperatorRegistry();
 	if (!registry) {
-		respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, "task_registry_unavailable", { details: { code: "task_registry_unavailable" } }));
+		respondTaskRegistryUnavailable(respond);
 		return;
 	}
 	const busWork = runtime.busWork;
@@ -23915,6 +24117,7 @@ async function handleGatewayRequest(opts) {
 			return;
 		}
 	}
+	if (await guardStorageRpc(req.method, context, respond)) return;
 	await handler({
 		req,
 		params: req.params ?? {},
@@ -24859,7 +25062,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.OPENCLAW_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.OPENCLAW_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./server-CtXro2Oa.js");
+	const mod = override ? await import(override) : await import("./server-y8WhCQvu.js");
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -25090,7 +25293,7 @@ async function resolveFileWithinRoot(rootReal, urlPath) {
 	if (normalized.endsWith("/")) return await tryOpen(path.posix.join(rel, "index.html"));
 	const candidate = path.join(rootReal, rel);
 	try {
-		const st = await fsPromises.lstat(candidate);
+		const st = await fs$1.lstat(candidate);
 		if (st.isSymbolicLink()) return null;
 		if (st.isDirectory()) return await tryOpen(path.posix.join(rel, "index.html"));
 	} catch {}
@@ -25127,8 +25330,8 @@ async function resolveA2uiRoot() {
 	for (const dir of candidates) try {
 		const indexPath = path.join(dir, "index.html");
 		const bundlePath = path.join(dir, "a2ui.bundle.js");
-		await fsPromises.stat(indexPath);
-		await fsPromises.stat(bundlePath);
+		await fs$1.stat(indexPath);
+		await fs$1.stat(bundlePath);
 		return dir;
 	} catch {}
 	return null;
@@ -25137,7 +25340,7 @@ async function resolveA2uiRootReal() {
 	if (cachedA2uiRootReal !== void 0 && (cachedA2uiRootReal !== null || Date.now() - cachedA2uiResolvedAtMs < A2UI_ROOT_RETRY_NULL_AFTER_MS)) return cachedA2uiRootReal;
 	if (!resolvingA2uiRoot) resolvingA2uiRoot = (async () => {
 		const root = await resolveA2uiRoot();
-		cachedA2uiRootReal = root ? await fsPromises.realpath(root) : null;
+		cachedA2uiRootReal = root ? await fs$1.realpath(root) : null;
 		cachedA2uiResolvedAtMs = Date.now();
 		resolvingA2uiRoot = null;
 		return cachedA2uiRootReal;
@@ -25358,13 +25561,13 @@ function normalizeBasePath(rawPath) {
 }
 async function prepareCanvasRoot(rootDir) {
 	await ensureDir(rootDir);
-	const rootReal = await fsPromises.realpath(rootDir);
+	const rootReal = await fs$1.realpath(rootDir);
 	try {
 		const indexPath = path.join(rootReal, "index.html");
-		await fsPromises.stat(indexPath);
+		await fs$1.stat(indexPath);
 	} catch {
 		try {
-			await fsPromises.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
+			await fs$1.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
 		} catch {}
 	}
 	return rootReal;
@@ -28659,7 +28862,7 @@ async function resolveGatewayOwnerStatus(pid, payload, platform, port) {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fsPromises.readFile(lockPath, "utf8");
+		const raw = await fs$1.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number") return null;
 		if (typeof parsed.createdAt !== "string") return null;
@@ -28694,11 +28897,11 @@ async function acquireGatewayLock(opts = {}) {
 	const platform = opts.platform ?? process.platform;
 	const port = opts.port;
 	const { lockPath, configPath } = resolveGatewayLockPath(env);
-	await fsPromises.mkdir(path.dirname(lockPath), { recursive: true });
+	await fs$1.mkdir(path.dirname(lockPath), { recursive: true });
 	const startedAt = Date.now();
 	let lastPayload = null;
 	while (Date.now() - startedAt < timeoutMs) try {
-		const handle = await fsPromises.open(lockPath, "wx");
+		const handle = await fs$1.open(lockPath, "wx");
 		const startTime = platform === "linux" ? readLinuxStartTime(process.pid) : null;
 		const payload = {
 			pid: process.pid,
@@ -28712,7 +28915,7 @@ async function acquireGatewayLock(opts = {}) {
 			configPath,
 			release: async () => {
 				await handle.close().catch(() => void 0);
-				await fsPromises.rm(lockPath, { force: true });
+				await fs$1.rm(lockPath, { force: true });
 			}
 		};
 	} catch (err) {
@@ -28721,7 +28924,7 @@ async function acquireGatewayLock(opts = {}) {
 		const ownerPid = lastPayload?.pid;
 		const ownerStatus = ownerPid ? await resolveGatewayOwnerStatus(ownerPid, lastPayload, platform, port) : "unknown";
 		if (ownerStatus === "dead" && ownerPid) {
-			await fsPromises.rm(lockPath, { force: true });
+			await fs$1.rm(lockPath, { force: true });
 			continue;
 		}
 		if (ownerStatus !== "alive") {
@@ -28731,13 +28934,13 @@ async function acquireGatewayLock(opts = {}) {
 				stale = Number.isFinite(createdAt) ? Date.now() - createdAt > staleMs : false;
 			}
 			if (!stale) try {
-				const st = await fsPromises.stat(lockPath);
+				const st = await fs$1.stat(lockPath);
 				stale = Date.now() - st.mtimeMs > staleMs;
 			} catch {
 				stale = false;
 			}
 			if (stale) {
-				await fsPromises.rm(lockPath, { force: true });
+				await fs$1.rm(lockPath, { force: true });
 				continue;
 			}
 		}
@@ -31217,29 +31420,56 @@ function createStorageRecoveryContainment(deps) {
 //#endregion
 //#region src/gateway/storage-startup-gate.ts
 function createStorageStartupGate() {
+	let phase = { phase: "ready" };
 	let held = false;
 	const waiters = /* @__PURE__ */ new Set();
+	const wakeAll = () => {
+		for (const wake of waiters) wake();
+	};
 	return {
 		hold() {
-			held = true;
+			if (!held && phase.phase === "ready") {
+				held = true;
+				phase = { phase: "starting" };
+			}
 		},
-		release() {
-			held = false;
-			for (const wake of waiters) wake();
+		markReady() {
+			if (phase.phase === "starting") {
+				phase = { phase: "ready" };
+				wakeAll();
+			}
 		},
-		whenReleased(timeoutMs) {
-			if (!held) return Promise.resolve(true);
-			return new Promise((resolve) => {
-				const wake = () => {
-					clearTimeout(timer);
-					waiters.delete(wake);
-					resolve(true);
+		markFailed(reasonCodes) {
+			if (phase.phase === "starting") {
+				phase = {
+					phase: "failed",
+					reasonCodes: [...reasonCodes]
 				};
+				wakeAll();
+			}
+		},
+		markStopping() {
+			if (phase.phase !== "stopping") {
+				phase = { phase: "stopping" };
+				wakeAll();
+			}
+		},
+		state() {
+			return phase;
+		},
+		whenSettled(timeoutMs) {
+			if (phase.phase !== "starting" && phase.phase !== "stopping") return Promise.resolve(phase);
+			return new Promise((resolve) => {
 				const timer = setTimeout(() => {
 					waiters.delete(wake);
-					resolve(false);
+					resolve(phase);
 				}, timeoutMs);
 				timer.unref?.();
+				const wake = () => {
+					clearTimeout(timer);
+					waiters.delete(wake);
+					resolve(phase);
+				};
 				waiters.add(wake);
 			});
 		}
@@ -34901,7 +35131,7 @@ async function bootGatewayServer(port, opts) {
 		const lease = createPreservationLeaseService();
 		setActivePreservationLease(lease);
 		let supervisorClosed = false;
-		const transcriptFingerprint = async (filePath) => createHash("sha256").update(await fsPromises.readFile(filePath)).digest("hex");
+		const transcriptFingerprint = async (filePath) => createHash("sha256").update(await fs$1.readFile(filePath)).digest("hex");
 		const requireCandidateRuntime = () => {
 			const candidate = candidateOwner?.candidate.runtime;
 			if (!candidate || candidateOwner?.state === "closed") throw new Error("recovery candidate runtime is not ready");
@@ -35184,9 +35414,14 @@ async function bootGatewayServer(port, opts) {
 		};
 		fencedStorageSupervisorStart = async () => {
 			await supervisor.start();
-			storageStartup.release();
+			if (supervisor.getState() !== "healthy" && !params.resolved.fallbackToJsonlOnError) {
+				await storageSupervisorStop?.();
+				storageSupervisorStop = null;
+				throw new FatalConfiguredStorageStartError();
+			}
+			storageStartup.markReady();
 			try {
-				const { installIncidentAsset } = await import("./incident-install-BVVufsbF.js");
+				const { installIncidentAsset } = await import("./incident-install-B626HvYY.js");
 				await installIncidentAsset({
 					stateDir: resolveStateDir(),
 					loadIndexRecord: async () => {
@@ -35201,7 +35436,7 @@ async function bootGatewayServer(port, opts) {
 			if (supervisor.getState() === "healthy") {
 				const runtime = getConfiguredSessionStorageRuntime()?.runtime;
 				if (runtime?.conversation) try {
-					const { runLiveRepair } = await import("./live-repair-CK2uu1bb.js");
+					const { runLiveRepair } = await import("./live-repair-BF2elTcB.js");
 					await runLiveRepair({
 						stateDir: resolveStateDir(),
 						conversationStore: runtime.conversation,
@@ -35217,11 +35452,6 @@ async function bootGatewayServer(port, opts) {
 				noteStorageRestartRequired("session-run-startup-recovery");
 				noteStorageRestartRequired("shutdown-run-reconciliation");
 			}
-			if (supervisor.getState() !== "healthy" && !params.resolved.fallbackToJsonlOnError) {
-				await storageSupervisorStop?.();
-				storageSupervisorStop = null;
-				throw new FatalConfiguredStorageStartError();
-			}
 		};
 		if (params.bootImmediately) await fencedStorageSupervisorStart();
 		else storageStartup.hold();
@@ -35576,14 +35806,14 @@ async function bootGatewayServer(port, opts) {
 	let sessionConsumerClaimSweepCancelled = false;
 	let sessionConsumerClaimSweepBoot = null;
 	if (!minimalTestGateway) sessionConsumerClaimSweepBoot = (async () => {
-		const { getConfiguredSessionStorageRuntime } = await import("./config-CRFk9Bjq.js").then((n) => n.Hn);
-		const { loadPluginManifestRegistry } = await import("./config-CRFk9Bjq.js").then((n) => n.ut);
-		const { getActivePluginRegistry } = await import("./config-CRFk9Bjq.js").then((n) => n.qt);
-		const { deriveGatewaySweepConsumers, runSessionConsumerSweepTick, startSessionConsumerSweepSchedule } = await import("./session-consumer-claim-sweep-BcfThIOH.js");
+		const { getConfiguredSessionStorageRuntime } = await import("./config-BPACL-n5.js").then((n) => n.Hn);
+		const { loadPluginManifestRegistry } = await import("./config-BPACL-n5.js").then((n) => n.ut);
+		const { getActivePluginRegistry } = await import("./config-BPACL-n5.js").then((n) => n.qt);
+		const { deriveGatewaySweepConsumers, runSessionConsumerSweepTick, startSessionConsumerSweepSchedule } = await import("./session-consumer-claim-sweep-eBEe4crh.js");
 		const sweepLog = log.child("session-consumer-claim-sweep");
 		const { createDiagnosticRingBuffer } = await import("./session-consumer-diagnostics-BUKxP8bu.js");
 		const diagnostics = createDiagnosticRingBuffer();
-		const { setDiagnostics } = await import("./sessions-Q3WrKAAg.js").then((n) => n.n);
+		const { setDiagnostics } = await import("./sessions-DFDrcshi.js").then((n) => n.n);
 		if (sessionConsumerClaimSweepCancelled) return;
 		setDiagnostics(diagnostics);
 		const lastKnownEnabledState = /* @__PURE__ */ new Map();
@@ -35622,7 +35852,7 @@ async function bootGatewayServer(port, opts) {
 					lastKnownEnabledState,
 					cfg: loadConfig()
 				});
-				const { setLastSweepTimestamp } = await import("./sessions-Q3WrKAAg.js").then((n) => n.n);
+				const { setLastSweepTimestamp } = await import("./sessions-DFDrcshi.js").then((n) => n.n);
 				setLastSweepTimestamp(Date.now());
 			} catch (err) {
 				sweepLog.warn(`session consumer-claim sweep failed: ${String(err)}`);
@@ -35643,8 +35873,8 @@ async function bootGatewayServer(port, opts) {
 			id: "task-dispatch",
 			prepare: () => {
 				taskPipelineBoot = (async () => {
-					const { getConfiguredSessionStorageRuntime } = await import("./config-CRFk9Bjq.js").then((n) => n.Hn);
-					const { startTaskPipeline } = await import("./task-pipeline-boot-yTQaBch8.js");
+					const { getConfiguredSessionStorageRuntime } = await import("./config-BPACL-n5.js").then((n) => n.Hn);
+					const { startTaskPipeline } = await import("./task-pipeline-boot-CM-3tH09.js");
 					const pipeline = startTaskPipeline({
 						getConfigured: getConfiguredSessionStorageRuntime,
 						cfg: cfgAtStart,
@@ -35813,7 +36043,17 @@ async function bootGatewayServer(port, opts) {
 		});
 		try {
 			recoveryRuntime = await Promise.race([ownInstalled, recoveryStarted]) ?? null;
+			if (storageStartup.state().phase === "starting") {
+				let codes = [];
+				try {
+					codes = recoveryRuntime?.snapshot().reasonCodes ?? [];
+				} catch {
+					codes = [];
+				}
+				storageStartup.markFailed(codes.length > 0 ? codes : ["recovery_start_failed"]);
+			}
 		} catch (err) {
+			if (storageStartup.state().phase === "starting") storageStartup.markFailed(["recovery_start_failed"]);
 			if (skillsRefreshTimer) {
 				clearTimeout(skillsRefreshTimer);
 				skillsRefreshTimer = null;
@@ -36024,6 +36264,7 @@ async function bootGatewayServer(port, opts) {
 		startDiagnosticHeartbeat();
 	}
 	return { close: async (opts) => {
+		storageStartup.markStopping();
 		recoveryAdmission.closeAdmission();
 		await runGlobalGatewayStopSafely({
 			event: { reason: opts?.reason ?? "gateway stopping" },