wednesdayai 0.4.12-dev.733 → 0.4.12-dev.734

package/dist/{gateway-cli-D_-cQdWs.js → gateway-cli-D37cHpSz.js}

@@ -1,192 +1,192 @@
 import { g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-BBP4yd-2.js";
-import { $ as readLoggingConfig, A as setVerbose, C as truncateUtf16Safe, F as isRich, I as theme, K as resolveFileLogProfile, L as getChildLogger, P as colorize, R as getLogger, W as appendFileLog, c as ensureDir, dt as openBoundaryFileSync, ft as openVerifiedFileSync, g as resolveUserPath, jt as resolvePreferredOpenClawTmpDir, pt as sameFileIdentity, t as CONFIG_DIR, ut as openBoundaryFile, vt as isNotFoundPathError, y as shortenHomePath, yt as isPathInside, z as getResolvedLoggerSettings } from "./utils-CfKD3xTt.js";
+import { $ as readLoggingConfig, A as setVerbose, C as truncateUtf16Safe, F as isRich, I as theme, K as resolveFileLogProfile, L as getChildLogger, P as colorize, R as getLogger, W as appendFileLog, c as ensureDir, dt as openBoundaryFileSync, ft as openVerifiedFileSync, g as resolveUserPath, jt as resolvePreferredOpenClawTmpDir, pt as sameFileIdentity, t as CONFIG_DIR, ut as openBoundaryFile, vt as isNotFoundPathError, y as shortenHomePath, yt as isPathInside, z as getResolvedLoggerSettings } from "./utils-RlDPCeiE.js";
 import { t as isPlainObject } from "./plain-object-CLm2c5Nu.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-DDIdpLYh.js";
-import { $ as setPreRestartDeferralCheck, $n as ToolInputError, A as redactSensitiveHeartbeatEvent, B as buildDefaultToolPolicyPipelineSteps, Bn as resolveTtsConfig, Bt as resolveAgentDeliveryPlan, Cr as resolveWorkspaceLaneConfig, Ct as requestNudge, D as resolveHeartbeatVisibility, E as runWakeGate, En as isAbortRequestText, Et as loadProviderUsageSummary, F as prepareSessionManagerForRun, Fn as getTtsProvider, Ft as requestBodyErrorToText, Gn as textToSpeech, Gt as createDefaultDeps, H as createOpenClawTools, Hn as resolveTtsProviderOrder, Ht as createOutboundSendDeps, I as snapshotRunPendingWrites, In as isTtsEnabled, J as emitGatewayRestart, Jn as clearSessionQueues, Jt as getCliSessionId, K as consumeGatewaySigusr1RestartAuthorization, Kn as OPENAI_TTS_MODELS, Kt as createOutboundSendDeps$1, L as waitForPendingWrites, Ln as isTtsProviderConfigured, M as resolveCronSession, Mn as DEFAULT_MAX_PARALLEL, N as resolveCronStyleNow, Nn as resolveUserTimezone, Nt as handleSlackHttpRequest, O as getLastHeartbeatEvent, P as runEmbeddedPiAgent, Pt as readJsonBodyWithLimit, Q as setGatewaySigusr1RestartPolicy, Qn as stripHeartbeatToken, R as resolveExecConfig, Rn as resolveTtsApiKey, Rt as agentCommandFromIngress, S as runHeartbeatOnce, Sn as resolveOutboundChannelPlugin, Sr as checkWorkspaceLaneAdmission, St as createPluginRuntime, T as startHeartbeatRunner, Tn as notifyInterruptedRuns, U as readLatestAssistantReply, Un as setTtsEnabled, Vn as resolveTtsPrefsPath, Vt as resolveAgentOutboundTarget, W as resolveAnnounceTargetFromKey, Wn as setTtsProvider, X as markGatewaySigusr1RestartHandled, Xn as removeQueuedFollowupRun, Xt as runCliAgent, Y as isGatewaySigusr1RestartExternallyAllowed, Yn as getExistingFollowupQueue, Yt as setCliSessionId, Z as scheduleGatewaySigusr1Restart, Zn as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, _ as runSubagentAnnounceFlow, _n as ensureOutboundSessionEntry, _r as extractFileContentFromSource, _t as resolvePluginTools, an as buildSafeExternalPrompt, ar as requestHeartbeatNow, at as summarizeRestartSentinel, b as resolveHeartbeatConfig, bn as resolveOutboundTarget, br as resolveInputFileLimits, bt as loadOpenClawPlugins, c as resolveChannelAccountEnabled, cn as isExternalHookSession, cr as ACP_SESSION_IDENTITY_RENDERER_VERSION, ct as normalizeCronJobCreate, dt as buildDeliveryFromLegacyPayload, en as resolveSessionAuthProfileOverride, er as enqueueSystemEvent, et as triggerOpenClawRestart, fn as dispatchInboundMessage, fr as resolveSendPolicy, ft as hasLegacyDeliveryHints, gr as DEFAULT_INPUT_TIMEOUT_MS, gt as getPluginToolMeta, h as listDescendantRunsForRequester, hn as getTotalPendingReplies, hr as DEFAULT_INPUT_MAX_REDIRECTS, ht as persistBrowserProxyFiles, j as isCronSystemEvent, jn as setTaskPipelineStatus, jt as resolveAgentOutboundIdentity, k as onHeartbeatEvent, l as BARE_SESSION_RESET_PROMPT, lr as isAcpEnabledByPolicy, lt as normalizeCronJobPatch, m as initSubagentRegistry, mn as createReplyDispatcher, mr as DEFAULT_INPUT_IMAGE_MIMES, mt as applyBrowserProxyPaths, n as buildWorkspaceLaneActor, nt as formatDoctorNonInteractiveHint, on as detectSuspiciousPatterns, p as countActiveDescendantRuns, pn as setDispatchInboundAdmissionRejectionFor, pr as DEFAULT_INPUT_IMAGE_MAX_BYTES, pt as stripLegacyDeliveryFields, q as deferGatewayRestartUntilIdle, qn as OPENAI_TTS_VOICES, qt as runWithModelFallback, r as formatWorkspaceLaneDeniedNotice, rt as formatRestartSentinelMessage, sn as getHookType, st as writeRestartSentinel, tn as resolveAgentAvatar, tr as isSystemEventContextChanged, tt as consumeRestartSentinel, un as buildHistoryContextFromEntries, ur as getSessionBindingService, ut as migrateLegacyCronPayload, vn as resolveOutboundSessionRoute, vr as extractImageContentFromSource, vt as clearPluginRegistryCaches, w as setHeartbeatsEnabled, wn as resetDirectoryCache, wr as resolveAgentTimeoutMs, x as resolveHeartbeatSummaryForAgent, xn as resolveSessionDeliveryTarget, xr as WorkspaceLaneDeniedError, xt as takePendingActivationMigration, y as runMainAgentTurn, yn as resolveHeartbeatDeliveryTarget, yr as normalizeMimeList, yt as getLoadedAnalysisConcurrency, z as applyToolPolicyPipeline, zn as resolveTtsAutoMode } from "./reply-B_ZnZCbr.js";
-import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, M as matchesSkillFilter, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-Isfe_TTc.js";
-import { m as defaultRuntime, n as runtimeForLogger, o as setConsoleSubsystemFilter, s as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-DU1uzmTH.js";
-import { C as toDeviceSenderId, F as isSubagentSessionKey, I as parseAgentSessionKey, N as isCronRunSessionKey, S as toAgentStoreSessionKey, T as normalizeAccountId$1, _ as resolveConfiguredCanonicalIdentity, a as buildAgentMainSessionKey, h as resolveAgentIdFromSessionKey, m as normalizeMainKey, p as normalizeAgentId, s as classifySessionKeyShape, t as DEFAULT_AGENT_ID, v as resolveLinkedPeerIdForChannel, w as DEFAULT_ACCOUNT_ID, x as toAgentRequestSessionKey } from "./session-key-DeVMAKRZ.js";
-import { i as logWarn, t as logDebug } from "./logger-Bd6qOjzT.js";
-import { n as runExec, t as runCommandWithTimeout } from "./exec-BNayx9Nm.js";
-import { n as resolveOpenClawPackageRoot } from "./openclaw-root-B2l0kAM1.js";
-import { $r as activateConfiguredSessionStorageRuntime, $u as normalizeSecretInput, Ai as archiveSessionTranscripts, At as advanceRuntimeConfigSnapshot, Bo as deriveSessionTotalTokens, Bt as validateConfigObjectWithPlugins, C as resolveThinkingDefault, Ci as deliveryContextFromSession, Dc as cleanStaleLockFiles, Di as normalizeSessionDeliveryFields, Dn as isAvatarImageDataUrl, Dr as getRegisteredPluginApis, En as isAvatarHttpUrl, Fa as parseByteSize, Fl as applyLegacyMigrations, Ft as readConfigFileSnapshot, Ga as hydrateAndAppendToBackend, Gc as composeRestartDeferralWithAdmission, Gi as REPLY_CONTEXT_CUSTOM_TYPE, Gl as DEFAULT_TALK_CONVERSATION_MODEL_ID, Go as decodeKeysetCursor, Gr as listRealtimeVoiceProviders, Ha as createPreservationLeaseService, Hc as setPluginTaskAdmissionRejectionFor, Hr as getRegisteredRealtimeTranscriptionProviders, Ia as extractDeliveryInfo, Il as ensureControlUiAllowedOriginsForNonLoopbackBind, Io as formatZonedTimestamp, It as readConfigFileSnapshotForWrite, Jl as resolveActiveTalkProviderConfig, Jr as registerInternalHook, Ju as resolveAuthProfileDisplayLabel, Kc as createRootWorkAdmission, Kl as buildTalkConfigResponse, Ko as encodeKeysetCursor, Kr as clearInternalHooks, La as parseSessionThreadInfo, Lt as resolveConfigSnapshotHash, Ma as readJsonFile, Mi as cleanupArchivedSessionTranscripts, Mt as createConfigIO, Na as writeJsonAtomic, Ni as findNewestMessageEntryIdInTranscript, Nt as loadConfig, Or as listRestartRecoveryAdapters, Pa as parseDurationMs, Pi as findTranscriptMessageEntryById, Pl as applyMergePatch, Pr as emitStartupPluginHealthReport, Pt as parseConfigJson5, Qa as stripInlineDirectiveTagsFromMessageForDisplay, So as reconcileSessionIndex, Sr as setGatewayPluginRegistry, Su as resolveSubagentMaxConcurrent, Ti as mergeDeliveryContext, To as serializeSessionIndexRecordKey, Tr as createEmptyPluginRegistry, Ts as buildChannelAccountBindings, Ua as withPreservationWriterPermit, Un as isTestDefaultMemorySlotDisabled, Ur as getRegisteredRealtimeVoiceProviders, Vo as hasNonzeroUsage, Vr as getRealtimeVoiceProvider, Vs as resolveWhatsAppAccount, Vt as OpenClawSchema, Wa as isJsonlSessionBackend, Wc as RecoveryAdmissionError, Wr as getRegisteredStreamingSpeechProviders, Xi as stripEnvelopeFromMessages, Xl as resolveTalkConversationConfig, Xr as StorageReadAccessError, Yi as stripEnvelopeFromMessage, Yl as resolveTalkCatalogApiKeyStatus, Yn as defaultSlotIdForKey, Yr as triggerInternalHook, Za as stripInlineDirectiveTagsForDisplay, Zl as resolveTalkProviderConfigApiKey, _ as resolveDefaultModelForAgent, _c as GATEWAY_CLIENT_MODES, _i as syncConfiguredSessionTranscriptToRuntime, _l as resolveExecutablePath, _o as applyReconcileSessionIndex, a as getModelRefStatus, ac as isDeliverableMessageChannel, ai as getConfiguredSessionStorageRuntime, ao as CLIENT_RESUME_RECORD_KIND, as as canonicalizeMainSessionAlias, bu as resolveAgentMaxConcurrent, ci as loadSessionStoreFromDisk, cs as resolveMainSessionKey, dd as DEFAULT_MODEL, do as PASS_MEASUREMENT_SCHEMA_VERSION, ei as closeConfiguredSessionStorageRuntime, et as getApiKeyForModel, f as normalizeProviderIdForAuth, fc as normalizeMessageChannel, fd as DEFAULT_PROVIDER, fo as PASS_METRICS_MAX_BYTES, fs as getChannelPlugin, g as resolveConfiguredModelRef, gc as GATEWAY_CLIENT_IDS, hc as GATEWAY_CLIENT_CAPS, hi as setActivePreservationLease, ho as onRunInvalidation, hr as getActivePluginRegistry, ic as INTERNAL_MESSAGE_CHANNEL, ii as getActivePreservationLease, io as validateCtxStorage, ir as CHANNEL_IDS, is as setSessionRuntimeModel, ja as createAsyncLock, ji as capArrayByJsonBytes, jn as looksLikeAvatarPath, jr as setSessionWorkAvailableNotifier, kt as migrateLegacyConfig, li as mirrorPreparedConfiguredSessionStorageRuntimeRecord, ls as resolveMainSessionKeyFromConfig, m as resolveAllowedModelRef, mo as isPassIdentifier, ms as normalizeChannelId, ni as commitPreparedConfiguredSessionStorageRuntimeActivation, nn as EXEC_POLICY_PRESET_IDS, no as resolveSessionStorageConfig, ns as mergeSessionEntry, oa as normalizeInputProvenance, oc as isGatewayCliClient, oi as isPreservationArmed, oo as clientResumeRecordArtifactId, os as resolveAgentMainSessionKey, pi as refreshPreparedConfiguredSessionStorageRuntimeActivation, ps as listChannelPlugins, qi as buildReplyContextPayload, ql as normalizeTalkSection, qr as createInternalHookEvent, ri as createJsonlSessionStorageFallbackRuntime, rt as resolveApiKeyForProvider, s as isCliProvider, sa as jsonUtf8Bytes, sc as isGatewayMessageChannel, si as loadSessionStore, sn as resolveGatewayWebClientBasePath, so as isVerificationStoreError, ss as resolveExplicitAgentSessionKey, t as buildAllowedModelSet, ti as closeReplacedConfiguredSessionStorageRuntime, tn as coerceIdentityValue, to as createSessionStorageRuntimeFromConfig, u as normalizeModelSelection, uc as isWebchatClient, ud as DEFAULT_CONTEXT_TOKENS, ui as prepareConfiguredSessionStorageRuntimeActivation, uo as PASS_ITEMS_MAX_KEYS, v as resolveHooksGmailModel, vc as GATEWAY_CLIENT_NAMES, vo as diffManifestOwnedReconcileIndexRecords, wn as AVATAR_MAX_BYTES, xc as normalizeGatewayClientMode, xo as projectManifestOwnedReconcileIndexRecords, xt as resolveProfileUnusableUntilForDisplay, xu as resolveNestedAgentMaxConcurrent, yc as hasGatewayClientCap, yi as updateSessionStore, yo as fingerprintReconcileIndexRecords, zs as normalizeWhatsAppTarget, zt as writeConfigFile, zu as loadAuthProfileStoreForRuntime } from "./model-selection-D74qlS0C.js";
+import { $ as setPreRestartDeferralCheck, $n as ToolInputError, A as redactSensitiveHeartbeatEvent, B as buildDefaultToolPolicyPipelineSteps, Bn as resolveTtsConfig, Bt as resolveAgentDeliveryPlan, Cr as resolveWorkspaceLaneConfig, Ct as requestNudge, D as resolveHeartbeatVisibility, E as runWakeGate, En as isAbortRequestText, Et as loadProviderUsageSummary, F as prepareSessionManagerForRun, Fn as getTtsProvider, Ft as requestBodyErrorToText, Gn as textToSpeech, Gt as createDefaultDeps, H as createOpenClawTools, Hn as resolveTtsProviderOrder, Ht as createOutboundSendDeps, I as snapshotRunPendingWrites, In as isTtsEnabled, J as emitGatewayRestart, Jn as clearSessionQueues, Jt as getCliSessionId, K as consumeGatewaySigusr1RestartAuthorization, Kn as OPENAI_TTS_MODELS, Kt as createOutboundSendDeps$1, L as waitForPendingWrites, Ln as isTtsProviderConfigured, M as resolveCronSession, Mn as DEFAULT_MAX_PARALLEL, N as resolveCronStyleNow, Nn as resolveUserTimezone, Nt as handleSlackHttpRequest, O as getLastHeartbeatEvent, P as runEmbeddedPiAgent, Pt as readJsonBodyWithLimit, Q as setGatewaySigusr1RestartPolicy, Qn as stripHeartbeatToken, R as resolveExecConfig, Rn as resolveTtsApiKey, Rt as agentCommandFromIngress, S as runHeartbeatOnce, Sn as resolveOutboundChannelPlugin, Sr as checkWorkspaceLaneAdmission, St as createPluginRuntime, T as startHeartbeatRunner, Tn as notifyInterruptedRuns, U as readLatestAssistantReply, Un as setTtsEnabled, Vn as resolveTtsPrefsPath, Vt as resolveAgentOutboundTarget, W as resolveAnnounceTargetFromKey, Wn as setTtsProvider, X as markGatewaySigusr1RestartHandled, Xn as removeQueuedFollowupRun, Xt as runCliAgent, Y as isGatewaySigusr1RestartExternallyAllowed, Yn as getExistingFollowupQueue, Yt as setCliSessionId, Z as scheduleGatewaySigusr1Restart, Zn as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, _ as runSubagentAnnounceFlow, _n as ensureOutboundSessionEntry, _r as extractFileContentFromSource, _t as resolvePluginTools, an as buildSafeExternalPrompt, ar as requestHeartbeatNow, at as summarizeRestartSentinel, b as resolveHeartbeatConfig, bn as resolveOutboundTarget, br as resolveInputFileLimits, bt as loadOpenClawPlugins, c as resolveChannelAccountEnabled, cn as isExternalHookSession, cr as ACP_SESSION_IDENTITY_RENDERER_VERSION, ct as normalizeCronJobCreate, dt as buildDeliveryFromLegacyPayload, en as resolveSessionAuthProfileOverride, er as enqueueSystemEvent, et as triggerOpenClawRestart, fn as dispatchInboundMessage, fr as resolveSendPolicy, ft as hasLegacyDeliveryHints, gr as DEFAULT_INPUT_TIMEOUT_MS, gt as getPluginToolMeta, h as listDescendantRunsForRequester, hn as getTotalPendingReplies, hr as DEFAULT_INPUT_MAX_REDIRECTS, ht as persistBrowserProxyFiles, j as isCronSystemEvent, jn as setTaskPipelineStatus, jt as resolveAgentOutboundIdentity, k as onHeartbeatEvent, l as BARE_SESSION_RESET_PROMPT, lr as isAcpEnabledByPolicy, lt as normalizeCronJobPatch, m as initSubagentRegistry, mn as createReplyDispatcher, mr as DEFAULT_INPUT_IMAGE_MIMES, mt as applyBrowserProxyPaths, n as buildWorkspaceLaneActor, nt as formatDoctorNonInteractiveHint, on as detectSuspiciousPatterns, p as countActiveDescendantRuns, pn as setDispatchInboundAdmissionRejectionFor, pr as DEFAULT_INPUT_IMAGE_MAX_BYTES, pt as stripLegacyDeliveryFields, q as deferGatewayRestartUntilIdle, qn as OPENAI_TTS_VOICES, qt as runWithModelFallback, r as formatWorkspaceLaneDeniedNotice, rt as formatRestartSentinelMessage, sn as getHookType, st as writeRestartSentinel, tn as resolveAgentAvatar, tr as isSystemEventContextChanged, tt as consumeRestartSentinel, un as buildHistoryContextFromEntries, ur as getSessionBindingService, ut as migrateLegacyCronPayload, vn as resolveOutboundSessionRoute, vr as extractImageContentFromSource, vt as clearPluginRegistryCaches, w as setHeartbeatsEnabled, wn as resetDirectoryCache, wr as resolveAgentTimeoutMs, x as resolveHeartbeatSummaryForAgent, xn as resolveSessionDeliveryTarget, xr as WorkspaceLaneDeniedError, xt as takePendingActivationMigration, y as runMainAgentTurn, yn as resolveHeartbeatDeliveryTarget, yr as normalizeMimeList, yt as getLoadedAnalysisConcurrency, z as applyToolPolicyPipeline, zn as resolveTtsAutoMode } from "./reply-BBWUbEms.js";
+import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, M as matchesSkillFilter, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-C7A_L0Z6.js";
+import { m as defaultRuntime, n as runtimeForLogger, o as setConsoleSubsystemFilter, s as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-Cwzs7yN0.js";
+import { C as toDeviceSenderId, F as isSubagentSessionKey, I as parseAgentSessionKey, N as isCronRunSessionKey, S as toAgentStoreSessionKey, T as normalizeAccountId$1, _ as resolveConfiguredCanonicalIdentity, a as buildAgentMainSessionKey, h as resolveAgentIdFromSessionKey, m as normalizeMainKey, p as normalizeAgentId, s as classifySessionKeyShape, t as DEFAULT_AGENT_ID, v as resolveLinkedPeerIdForChannel, w as DEFAULT_ACCOUNT_ID, x as toAgentRequestSessionKey } from "./session-key-BxmJDkEI.js";
+import { i as logWarn, t as logDebug } from "./logger-BSEmTtz1.js";
+import { n as runExec, t as runCommandWithTimeout } from "./exec-g-Nx0X6p.js";
+import { n as resolveOpenClawPackageRoot } from "./openclaw-root-BGUYWYDG.js";
+import { $r as activateConfiguredSessionStorageRuntime, $u as normalizeSecretInput, Ai as archiveSessionTranscripts, At as advanceRuntimeConfigSnapshot, Bo as deriveSessionTotalTokens, Bt as validateConfigObjectWithPlugins, C as resolveThinkingDefault, Ci as deliveryContextFromSession, Dc as cleanStaleLockFiles, Di as normalizeSessionDeliveryFields, Dn as isAvatarImageDataUrl, Dr as getRegisteredPluginApis, En as isAvatarHttpUrl, Fa as parseByteSize, Fl as applyLegacyMigrations, Ft as readConfigFileSnapshot, Ga as hydrateAndAppendToBackend, Gc as composeRestartDeferralWithAdmission, Gi as REPLY_CONTEXT_CUSTOM_TYPE, Gl as DEFAULT_TALK_CONVERSATION_MODEL_ID, Go as decodeKeysetCursor, Gr as listRealtimeVoiceProviders, Ha as createPreservationLeaseService, Hc as setPluginTaskAdmissionRejectionFor, Hr as getRegisteredRealtimeTranscriptionProviders, Ia as extractDeliveryInfo, Il as ensureControlUiAllowedOriginsForNonLoopbackBind, Io as formatZonedTimestamp, It as readConfigFileSnapshotForWrite, Jl as resolveActiveTalkProviderConfig, Jr as registerInternalHook, Ju as resolveAuthProfileDisplayLabel, Kc as createRootWorkAdmission, Kl as buildTalkConfigResponse, Ko as encodeKeysetCursor, Kr as clearInternalHooks, La as parseSessionThreadInfo, Lt as resolveConfigSnapshotHash, Ma as readJsonFile, Mi as cleanupArchivedSessionTranscripts, Mt as createConfigIO, Na as writeJsonAtomic, Ni as findNewestMessageEntryIdInTranscript, Nt as loadConfig, Or as listRestartRecoveryAdapters, Pa as parseDurationMs, Pi as findTranscriptMessageEntryById, Pl as applyMergePatch, Pr as emitStartupPluginHealthReport, Pt as parseConfigJson5, Qa as stripInlineDirectiveTagsFromMessageForDisplay, So as reconcileSessionIndex, Sr as setGatewayPluginRegistry, Su as resolveSubagentMaxConcurrent, Ti as mergeDeliveryContext, To as serializeSessionIndexRecordKey, Tr as createEmptyPluginRegistry, Ts as buildChannelAccountBindings, Ua as withPreservationWriterPermit, Un as isTestDefaultMemorySlotDisabled, Ur as getRegisteredRealtimeVoiceProviders, Vo as hasNonzeroUsage, Vr as getRealtimeVoiceProvider, Vs as resolveWhatsAppAccount, Vt as OpenClawSchema, Wa as isJsonlSessionBackend, Wc as RecoveryAdmissionError, Wr as getRegisteredStreamingSpeechProviders, Xi as stripEnvelopeFromMessages, Xl as resolveTalkConversationConfig, Xr as StorageReadAccessError, Yi as stripEnvelopeFromMessage, Yl as resolveTalkCatalogApiKeyStatus, Yn as defaultSlotIdForKey, Yr as triggerInternalHook, Za as stripInlineDirectiveTagsForDisplay, Zl as resolveTalkProviderConfigApiKey, _ as resolveDefaultModelForAgent, _c as GATEWAY_CLIENT_MODES, _i as syncConfiguredSessionTranscriptToRuntime, _l as resolveExecutablePath, _o as applyReconcileSessionIndex, a as getModelRefStatus, ac as isDeliverableMessageChannel, ai as getConfiguredSessionStorageRuntime, ao as CLIENT_RESUME_RECORD_KIND, as as canonicalizeMainSessionAlias, bu as resolveAgentMaxConcurrent, ci as loadSessionStoreFromDisk, cs as resolveMainSessionKey, dd as DEFAULT_MODEL, do as PASS_MEASUREMENT_SCHEMA_VERSION, ei as closeConfiguredSessionStorageRuntime, et as getApiKeyForModel, f as normalizeProviderIdForAuth, fc as normalizeMessageChannel, fd as DEFAULT_PROVIDER, fo as PASS_METRICS_MAX_BYTES, fs as getChannelPlugin, g as resolveConfiguredModelRef, gc as GATEWAY_CLIENT_IDS, hc as GATEWAY_CLIENT_CAPS, hi as setActivePreservationLease, ho as onRunInvalidation, hr as getActivePluginRegistry, ic as INTERNAL_MESSAGE_CHANNEL, ii as getActivePreservationLease, io as validateCtxStorage, ir as CHANNEL_IDS, is as setSessionRuntimeModel, ja as createAsyncLock, ji as capArrayByJsonBytes, jn as looksLikeAvatarPath, jr as setSessionWorkAvailableNotifier, kt as migrateLegacyConfig, li as mirrorPreparedConfiguredSessionStorageRuntimeRecord, ls as resolveMainSessionKeyFromConfig, m as resolveAllowedModelRef, mo as isPassIdentifier, ms as normalizeChannelId, ni as commitPreparedConfiguredSessionStorageRuntimeActivation, nn as EXEC_POLICY_PRESET_IDS, no as resolveSessionStorageConfig, ns as mergeSessionEntry, oa as normalizeInputProvenance, oc as isGatewayCliClient, oi as isPreservationArmed, oo as clientResumeRecordArtifactId, os as resolveAgentMainSessionKey, pi as refreshPreparedConfiguredSessionStorageRuntimeActivation, ps as listChannelPlugins, qi as buildReplyContextPayload, ql as normalizeTalkSection, qr as createInternalHookEvent, ri as createJsonlSessionStorageFallbackRuntime, rt as resolveApiKeyForProvider, s as isCliProvider, sa as jsonUtf8Bytes, sc as isGatewayMessageChannel, si as loadSessionStore, sn as resolveGatewayWebClientBasePath, so as isVerificationStoreError, ss as resolveExplicitAgentSessionKey, t as buildAllowedModelSet, ti as closeReplacedConfiguredSessionStorageRuntime, tn as coerceIdentityValue, to as createSessionStorageRuntimeFromConfig, u as normalizeModelSelection, uc as isWebchatClient, ud as DEFAULT_CONTEXT_TOKENS, ui as prepareConfiguredSessionStorageRuntimeActivation, uo as PASS_ITEMS_MAX_KEYS, v as resolveHooksGmailModel, vc as GATEWAY_CLIENT_NAMES, vo as diffManifestOwnedReconcileIndexRecords, wn as AVATAR_MAX_BYTES, xc as normalizeGatewayClientMode, xo as projectManifestOwnedReconcileIndexRecords, xt as resolveProfileUnusableUntilForDisplay, xu as resolveNestedAgentMaxConcurrent, yc as hasGatewayClientCap, yi as updateSessionStore, yo as fingerprintReconcileIndexRecords, zs as normalizeWhatsAppTarget, zt as writeConfigFile, zu as loadAuthProfileStoreForRuntime } from "./model-selection-Xe4QEYsC.js";
 import { r as resolveCopilotApiToken } from "./github-copilot-token-D9l3eOWF.js";
-import { n as isPidAlive } from "./pid-alive-CQpmBPPl.js";
+import { n as isPidAlive } from "./pid-alive-C3qbS2SA.js";
 import "./boolean-C6Pbt2Ue.js";
-import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-DwhxSLZz.js";
+import { n as logAcceptedEnvOption, t as isTruthyEnvValue } from "./env-uQrKrEGz.js";
 import { r as resolveRuntimeServiceVersion, t as VERSION } from "./version-C459_ZQ5.js";
-import { c as resolveSessionFilePath, l as resolveSessionFilePathOptions, m as resolveStorePath, p as resolveSessionTranscriptsDirForAgent, u as resolveSessionTranscriptPath } from "./artifacts-D7xTEspu.js";
+import { c as resolveSessionFilePath, l as resolveSessionFilePathOptions, m as resolveStorePath, p as resolveSessionTranscriptsDirForAgent, u as resolveSessionTranscriptPath } from "./artifacts-CSUzSsVF.js";
 import { c as optionalStringEnum, l as stringEnum } from "./retry-policy-FBwX2QEP.js";
 import { t as formatCliCommand } from "./command-format-CGUNQYjt.js";
-import "./send-CUUoNRjN.js";
-import "./send-9_nNhllu.js";
+import "./send-isYw7gNy.js";
+import "./send-CgOqje6b.js";
 import { c as isDiagnosticsEnabled, l as onDiagnosticEvent, s as emitDiagnosticEvent } from "./task-run-types-B6n0W8Rb.js";
 import { a as testRegexWithBoundedInput, i as compileSafeRegex } from "./redact-B7cMn_vp.js";
 import { i as formatErrorMessage, o as hasErrnoCode, s as isErrno } from "./errors-CtrilAlY.js";
 import { n as USER_CLIENT_ID, o as buildUserClientRuntimeConfig, s as handleUserClientHttpRequest } from "./static-server-DQBHPXOZ.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-BWeHJfpx.js";
-import { i as openFileWithinRoot, l as writeFileWithinRoot, s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-B3ZR2kik.js";
-import { D as normalizeMediaProviderId, E as listAutoDetectableProviders, T as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, g as registerUnhandledRejectionHandler, n as buildProviderRegistry, x as resolveModelEntries, y as resolveCapabilityConfig } from "./audio-transcription-runner-BTMTo0Oh.js";
-import { t as fetchWithSsrFGuard } from "./fetch-guard-EajwxXjX.js";
-import { t as SsrFBlockedError } from "./ssrf-DjjqWxdp.js";
-import "./proxy-fetch-CeK1ZBeq.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-CgeH2aSH.js";
+import { i as openFileWithinRoot, l as writeFileWithinRoot, s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-LwswEc9h.js";
+import { D as normalizeMediaProviderId, E as listAutoDetectableProviders, T as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, g as registerUnhandledRejectionHandler, n as buildProviderRegistry, x as resolveModelEntries, y as resolveCapabilityConfig } from "./audio-transcription-runner-BddwFNQF.js";
+import { t as fetchWithSsrFGuard } from "./fetch-guard-CfI8OeSj.js";
+import { t as SsrFBlockedError } from "./ssrf-CUBo6TIZ.js";
+import "./proxy-fetch-DxABZ-6S.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-DhnW7HyB.js";
-import "./pi-embedded-helpers-58qqCaMi.js";
-import "./local-roots-C0gTK4Bz.js";
-import { c as detectMime } from "./image-ops-CHN4z44F.js";
-import "./models-config-Dj7fr0nB.js";
-import { n as loadModelCatalog } from "./model-catalog-CJO7nU3v.js";
+import "./pi-embedded-helpers-CjMOJlwL.js";
+import "./local-roots-7K5PLW70.js";
+import { c as detectMime } from "./image-ops-C0lTPxIN.js";
+import "./models-config-CZHJduVo.js";
+import { n as loadModelCatalog } from "./model-catalog-DjGr6SKN.js";
 import { t as extractTextFromChatContent } from "./chat-content-_IbUtUxr.js";
-import "./pi-embedded-utils-BHzcjLyI.js";
-import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-CaDaMuIS.js";
+import "./pi-embedded-utils-BI0V7Kv6.js";
+import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-72tGhoFB.js";
 import { i as listCoreToolSections, n as PROFILE_OPTIONS, o as resolveCoreToolProfiles } from "./tool-catalog-CnoKmmOb.js";
-import { i as resolveRelayAuthTokenForPort, n as resolveGatewayRelayToken } from "./extension-relay-auth-Dcu8wthB.js";
-import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale--cedl8k7.js";
+import { i as resolveRelayAuthTokenForPort, n as resolveGatewayRelayToken } from "./extension-relay-auth-NxDK9Fke.js";
+import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-DfhEC7E3.js";
 import { t as safeEqualSecret } from "./secret-equal-Gla36CGi.js";
-import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-DZu3euUT.js";
-import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-BkTpOVYX.js";
-import { a as isDirectLoopbackProvenance, c as AUTH_RATE_LIMIT_SCOPE_BROWSER_EXTENSION, d as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, f as createAuthRateLimiter, i as captureTransportProvenance, l as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, n as authorizeHttpGatewayConnect, o as isLocalDirectRequest, p as normalizeRateLimitClientIp, r as authorizeWsControlUiGatewayConnect, s as resolveGatewayAuth, t as assertGatewayAuthConfigured, u as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH } from "./auth-RqerQcVN.js";
-import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-hLmBApV6.js";
+import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-CQ7A44gN.js";
+import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-1r6e9Dys.js";
+import { a as isDirectLoopbackProvenance, c as AUTH_RATE_LIMIT_SCOPE_BROWSER_EXTENSION, d as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, f as createAuthRateLimiter, i as captureTransportProvenance, l as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, n as authorizeHttpGatewayConnect, o as isLocalDirectRequest, p as normalizeRateLimitClientIp, r as authorizeWsControlUiGatewayConnect, s as resolveGatewayAuth, t as assertGatewayAuthConfigured, u as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH } from "./auth-Bpsbop7P.js";
+import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-DPXHpsDT.js";
 import { d as hasBinary } from "./frontmatter-DMHQ51Yr.js";
-import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-CD8SFzX0.js";
-import "./store-CGnsRznR.js";
-import { S as ensureChromeExtensionRelayServer } from "./chrome-K_3gICG0.js";
-import { i as resolveProfile, r as resolveBrowserConfig, t as movePathToTrash } from "./trash-DWehd5bk.js";
-import { a as inspectPortUsage, l as formatPortDiagnostics, r as ensurePortAvailable } from "./ports-Cp281kk8.js";
-import "./server-middleware-DGHNQp4r.js";
-import "./tool-display-D2nTy2g3.js";
-import "./provider-image-BbsxRTqB.js";
-import "./api-key-rotation-BhNw79Bu.js";
-import "./pi-model-discovery-D-MvwJ9N.js";
-import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-BkGFSf77.js";
-import { f as getGlobalHookRunner, h as runGlobalGatewayStopSafely, m as resetGlobalHookRunner, u as buildOutboundSessionContext } from "./outbound-message-hooks-B3d6x2bV.js";
-import { r as isRestartEnabled } from "./commands-CTxKrS5w.js";
-import "./commands-registry-DISO8Rbf.js";
+import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-DueobKPc.js";
+import "./store-DS83zC6I.js";
+import { S as ensureChromeExtensionRelayServer } from "./chrome-BmOe128y.js";
+import { i as resolveProfile, r as resolveBrowserConfig, t as movePathToTrash } from "./trash-B2rgeHwV.js";
+import { a as inspectPortUsage, l as formatPortDiagnostics, r as ensurePortAvailable } from "./ports-DJ_M8scl.js";
+import "./server-middleware-CJid88Uz.js";
+import "./tool-display-B_gL6TP4.js";
+import "./provider-image-DpILAK4L.js";
+import "./api-key-rotation-Vhef3tyV.js";
+import "./pi-model-discovery-BnKlqzf2.js";
+import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-D0Wagzn5.js";
+import { f as getGlobalHookRunner, h as runGlobalGatewayStopSafely, m as resetGlobalHookRunner, u as buildOutboundSessionContext } from "./outbound-message-hooks-C4OaIRmC.js";
+import { r as isRestartEnabled } from "./commands-DpelJzCu.js";
+import "./commands-registry-DQp53oMc.js";
 import { t as redactIdentifier } from "./redact-identifier-CSPL9LuH.js";
-import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-CkzxbMOl.js";
+import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-Chf-opgf.js";
 import { u as snapshotActiveRuns } from "./diagnostic-session-state-7e_RsTs4.js";
 import { t as CommandLane } from "./lanes-S5fMj0tZ.js";
-import { a as getActiveTaskCount, c as getTotalQueueSize, d as markGatewayDraining, f as resetAllLanes, h as waitForActiveTasks, m as setGatewayDrainState, p as setCommandLaneConcurrency } from "./command-queue-Cz-yW8Fn.js";
-import "./user-run-recording-CB_RnvEh.js";
-import { a as resolveSessionRunStore, t as createSessionRunRecorder } from "./recorder-BiGPFc4h.js";
+import { a as getActiveTaskCount, c as getTotalQueueSize, d as markGatewayDraining, f as resetAllLanes, h as waitForActiveTasks, m as setGatewayDrainState, p as setCommandLaneConcurrency } from "./command-queue-BeqPo1FP.js";
+import "./user-run-recording-CboLnb8e.js";
+import { a as resolveSessionRunStore, t as createSessionRunRecorder } from "./recorder-BdRGbnWA.js";
 import { t as getGatewayInstanceId } from "./gateway-instance-id-BbiOFq3_.js";
 import { t as withTimeout } from "./with-timeout-_mEWvGRU.js";
-import { a as resolveAgentSessionDirs, t as getAcpSessionManager } from "./manager-fEgy3Cc5.js";
-import { $ as validateNodeInvokeResultParams, $t as validateTalkSessionCloseParams, A as validateCronRemoveParams, An as getPairedDevice, B as validateDeviceTokenRotateParams, Bn as verifyDeviceBootstrapToken, Bt as validateTalkCatalogParams, C as validateConfigGetParams, Cn as buildDeviceAuthPayloadV3, D as validateConnectParams, Dn as approveDevicePairing, E as validateConfigSetParams, En as approveBootstrapDevicePairing, F as validateDevicePairApproveParams, Fn as requestDevicePairing, Ft as validateSessionsUsageParams, G as validateExecApprovalsNodeSetParams, Gn as roleScopesAllow, Gt as validateTalkRealtimeMarkParams, H as validateExecApprovalResolveParams, Ht as validateTalkModeParams, I as validateDevicePairListParams, In as revokeDeviceToken, It as validateSkillsBinsParams, J as validateModelsAuthStatusParams, Jn as deriveDeviceIdFromPublicKey, Jt as validateTalkRealtimeStopParams, K as validateExecApprovalsSetParams, Kt as validateTalkRealtimeSessionParams, L as validateDevicePairRejectParams, Ln as rotateDeviceToken, Lt as validateSkillsInstallParams, M as validateCronRunsParams, Mn as listDevicePairing, Mt as validateSessionsSteerParams, N as validateCronStatusParams, Nn as rejectDevicePairing, O as validateCronAddParams, On as consumeDeviceBootstrapToken, P as validateCronUpdateParams, Pn as removePairedDevice, Pt as validateSessionsTitlePrepareParams, Q as validateNodeInvokeParams, Qt as validateTalkSessionCancelTurnParams, R as validateDevicePairRemoveParams, Rn as summarizeDeviceTokens, Rt as validateSkillsStatusParams, S as validateConfigApplyParams, Sn as buildDeviceAuthPayload, T as validateConfigSchemaParams, U as validateExecApprovalsGetParams, Ut as validateTalkRealtimeAudioParams, V as validateExecApprovalRequestParams, Vn as verifyDeviceToken, Vt as validateTalkConfigParams, W as validateExecApprovalsNodeGetParams, Wn as operatorScopeSatisfied, Wt as validateTalkRealtimeBargeInParams, X as validateNodeDescribeParams, Xn as normalizeDevicePublicKeyBase64Url, Xt as validateTalkSessionAppendAudioParams, Y as validateModelsListParams, Yt as validateTalkRealtimeToolResultParams, Z as validateNodeEventParams, Zn as verifyDeviceSignature, Zt as validateTalkSessionBargeInParams, _ as validateChannelsStatusParams, a as validateAgentIdentityParams, an as validateTasksRunsListParams, at as validateNodePairVerifyParams, b as validateChatInjectParams, c as validateAgentWaitParams, cn as validateWakeParams, ct as validatePushTestParams, d as validateAgentsFilesGetParams, dn as validateWizardCancelParams, dt as validateSecretsResolveResult, en as validateTalkSessionCreateParams, et as validateNodeListParams, f as validateAgentsFilesListParams, fn as validateWizardNextParams, ft as validateSendParams, g as validateChannelsLogoutParams, gn as RUNS_INVALIDATED_EVENT, h as validateAgentsUpdateParams, hn as PROTOCOL_VERSION, i as formatValidationErrors, in as validateTasksRunsGetParams, it as validateNodePairRequestParams, j as validateCronRunParams, k as validateCronListParams, kn as ensureDeviceToken, l as validateAgentsCreateParams, ln as validateWebLoginStartParams, lt as validateRequestFrame, m as validateAgentsListParams, mn as validateWizardStatusParams, nn as validateTasksRunEventsParams, nt as validateNodePairListParams, o as validateAgentNudgeParams, on as validateToolsCatalogParams, ot as validateNodeRenameParams, p as validateAgentsFilesSetParams, pn as validateWizardStartParams, pt as validateSessionsAbortParams, q as validateLogsTailParams, qt as validateTalkRealtimeStatusParams, rn as validateTasksRunsEventsParams, rt as validateNodePairRejectParams, s as validateAgentParams, sn as validateUpdateRunParams, st as validatePollParams, tn as validateTalkSessionMarkParams, tt as validateNodePairApproveParams, u as validateAgentsDeleteParams, un as validateWebLoginWaitParams, ut as validateSecretsResolveParams, v as validateChatAbortParams, vn as ErrorCodes, w as validateConfigPatchParams, wn as normalizeDeviceMetadataForAuth, x as validateChatSendParams, y as validateChatHistoryParams, yn as errorShape, z as validateDeviceTokenRevokeParams, zn as updatePairedDeviceMetadata, zt as validateSkillsUpdateParams } from "./client-VFkIaJUE.js";
-import { _ as hasNarrowSessionScope, d as APPROVALS_SCOPE, f as PAIRING_SCOPE, g as authorizeOperatorScopesForMethod, h as WRITE_SCOPE, m as SESSION_READ_SCOPE, n as callGateway, p as READ_SCOPE, u as ADMIN_SCOPE$1, v as isHealthProbeAllowedForScopes, x as loadGatewayTlsRuntime$1, y as isNodeRoleMethod } from "./call-CCfms07q.js";
+import { a as resolveAgentSessionDirs, t as getAcpSessionManager } from "./manager-CuWMoixZ.js";
+import { $ as validateNodeInvokeResultParams, $t as validateTalkSessionCloseParams, A as validateCronRemoveParams, An as getPairedDevice, B as validateDeviceTokenRotateParams, Bn as verifyDeviceBootstrapToken, Bt as validateTalkCatalogParams, C as validateConfigGetParams, Cn as buildDeviceAuthPayloadV3, D as validateConnectParams, Dn as approveDevicePairing, E as validateConfigSetParams, En as approveBootstrapDevicePairing, F as validateDevicePairApproveParams, Fn as requestDevicePairing, Ft as validateSessionsUsageParams, G as validateExecApprovalsNodeSetParams, Gn as roleScopesAllow, Gt as validateTalkRealtimeMarkParams, H as validateExecApprovalResolveParams, Ht as validateTalkModeParams, I as validateDevicePairListParams, In as revokeDeviceToken, It as validateSkillsBinsParams, J as validateModelsAuthStatusParams, Jn as deriveDeviceIdFromPublicKey, Jt as validateTalkRealtimeStopParams, K as validateExecApprovalsSetParams, Kt as validateTalkRealtimeSessionParams, L as validateDevicePairRejectParams, Ln as rotateDeviceToken, Lt as validateSkillsInstallParams, M as validateCronRunsParams, Mn as listDevicePairing, Mt as validateSessionsSteerParams, N as validateCronStatusParams, Nn as rejectDevicePairing, O as validateCronAddParams, On as consumeDeviceBootstrapToken, P as validateCronUpdateParams, Pn as removePairedDevice, Pt as validateSessionsTitlePrepareParams, Q as validateNodeInvokeParams, Qt as validateTalkSessionCancelTurnParams, R as validateDevicePairRemoveParams, Rn as summarizeDeviceTokens, Rt as validateSkillsStatusParams, S as validateConfigApplyParams, Sn as buildDeviceAuthPayload, T as validateConfigSchemaParams, U as validateExecApprovalsGetParams, Ut as validateTalkRealtimeAudioParams, V as validateExecApprovalRequestParams, Vn as verifyDeviceToken, Vt as validateTalkConfigParams, W as validateExecApprovalsNodeGetParams, Wn as operatorScopeSatisfied, Wt as validateTalkRealtimeBargeInParams, X as validateNodeDescribeParams, Xn as normalizeDevicePublicKeyBase64Url, Xt as validateTalkSessionAppendAudioParams, Y as validateModelsListParams, Yt as validateTalkRealtimeToolResultParams, Z as validateNodeEventParams, Zn as verifyDeviceSignature, Zt as validateTalkSessionBargeInParams, _ as validateChannelsStatusParams, a as validateAgentIdentityParams, an as validateTasksRunsListParams, at as validateNodePairVerifyParams, b as validateChatInjectParams, c as validateAgentWaitParams, cn as validateWakeParams, ct as validatePushTestParams, d as validateAgentsFilesGetParams, dn as validateWizardCancelParams, dt as validateSecretsResolveResult, en as validateTalkSessionCreateParams, et as validateNodeListParams, f as validateAgentsFilesListParams, fn as validateWizardNextParams, ft as validateSendParams, g as validateChannelsLogoutParams, gn as RUNS_INVALIDATED_EVENT, h as validateAgentsUpdateParams, hn as PROTOCOL_VERSION, i as formatValidationErrors, in as validateTasksRunsGetParams, it as validateNodePairRequestParams, j as validateCronRunParams, k as validateCronListParams, kn as ensureDeviceToken, l as validateAgentsCreateParams, ln as validateWebLoginStartParams, lt as validateRequestFrame, m as validateAgentsListParams, mn as validateWizardStatusParams, nn as validateTasksRunEventsParams, nt as validateNodePairListParams, o as validateAgentNudgeParams, on as validateToolsCatalogParams, ot as validateNodeRenameParams, p as validateAgentsFilesSetParams, pn as validateWizardStartParams, pt as validateSessionsAbortParams, q as validateLogsTailParams, qt as validateTalkRealtimeStatusParams, rn as validateTasksRunsEventsParams, rt as validateNodePairRejectParams, s as validateAgentParams, sn as validateUpdateRunParams, st as validatePollParams, tn as validateTalkSessionMarkParams, tt as validateNodePairApproveParams, u as validateAgentsDeleteParams, un as validateWebLoginWaitParams, ut as validateSecretsResolveParams, v as validateChatAbortParams, vn as ErrorCodes, w as validateConfigPatchParams, wn as normalizeDeviceMetadataForAuth, x as validateChatSendParams, y as validateChatHistoryParams, yn as errorShape, z as validateDeviceTokenRevokeParams, zn as updatePairedDeviceMetadata, zt as validateSkillsUpdateParams } from "./client-CfK_daL3.js";
+import { _ as hasNarrowSessionScope, d as APPROVALS_SCOPE, f as PAIRING_SCOPE, g as authorizeOperatorScopesForMethod, h as WRITE_SCOPE, m as SESSION_READ_SCOPE, n as callGateway, p as READ_SCOPE, u as ADMIN_SCOPE$1, v as isHealthProbeAllowedForScopes, x as loadGatewayTlsRuntime$1, y as isNodeRoleMethod } from "./call-DcUNQRRs.js";
 import "./pairing-token-BgE_TsqE.js";
 import "./fetch-D0NtPQAy.js";
-import { a as readChannelAllowFromStoreSync } from "./pairing-store-ClC923Wz.js";
-import { a as maxAsk, c as normalizeExecApprovals, g as saveExecApprovalsV2, h as saveExecApprovals, i as loadExecApprovalsV2, l as readExecApprovalsSnapshot, m as resolveExecApprovalsReadOnly, o as mergeExecApprovalsSocketDefaults, r as ensureExecApprovals, s as minSecurity, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-BS3OjF4g.js";
-import { i as resolveSafeBins } from "./exec-approvals-allowlist-CVeFyVcd.js";
-import "./exec-safe-bin-runtime-policy-OSqMfz70.js";
-import { _ as matchSystemRunApprovalBinding, g as buildSystemRunApprovalBinding, h as resolveSystemRunApprovalRuntimeContext, m as resolveSystemRunApprovalRequestContext, v as missingSystemRunApprovalBinding, y as toSystemRunApprovalMismatchError } from "./nodes-screen-CBDClxW8.js";
-import { i as defaultOrphanLedgerFilePath, r as createOrphanLedger, t as getProcessSupervisor } from "./supervisor-8TdOYzAn.js";
-import { r as resolveSystemRunCommand, t as canonicalizeLegacySystemRunParams } from "./system-run-command-B9eoNN_E.js";
-import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, m as WORKSPACE_LANE_DENIED_REASON, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-Dm0JENbl.js";
-import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-BAWrhAPG.js";
-import { a as resolveAgentIdentity, t as createReplyPrefixOptions } from "./reply-prefix-C9ItOkY0.js";
-import { _ as lookupContextTokens, b as sleepWithAbort, c as canonicalizeSpawnedByForAgent, f as loadCombinedSessionStoreForGateway, g as resolveSessionModelRef, h as resolveGatewaySessionStoreTarget, m as pruneLegacyStoreKeys, o as normalizeReplyPayloadsForDelivery, p as loadSessionEntry, s as stampReplyActivity, t as deliverOutboundPayloads, u as listAgentsForGateway, y as computeBackoff } from "./deliver-BeUjHsuQ.js";
-import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-D2Gp5kcM.js";
-import { T as collectTelegramDuplicatePollerDiagnostics, d as loadCronStore, f as resolveCronStorePath, p as saveCronStore } from "./send-n4HUnjJL.js";
-import { n as resolveModel } from "./model-STLFfNgZ.js";
-import "./session-consumer-agents-Tp24W-mn.js";
+import { a as readChannelAllowFromStoreSync } from "./pairing-store-Deylvw9t.js";
+import { a as maxAsk, c as normalizeExecApprovals, g as saveExecApprovalsV2, h as saveExecApprovals, i as loadExecApprovalsV2, l as readExecApprovalsSnapshot, m as resolveExecApprovalsReadOnly, o as mergeExecApprovalsSocketDefaults, r as ensureExecApprovals, s as minSecurity, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-sC6Vto0t.js";
+import { i as resolveSafeBins } from "./exec-approvals-allowlist-BxG5LK_B.js";
+import "./exec-safe-bin-runtime-policy-Bd1hExM6.js";
+import { _ as matchSystemRunApprovalBinding, g as buildSystemRunApprovalBinding, h as resolveSystemRunApprovalRuntimeContext, m as resolveSystemRunApprovalRequestContext, v as missingSystemRunApprovalBinding, y as toSystemRunApprovalMismatchError } from "./nodes-screen-CBvwtWTJ.js";
+import { i as defaultOrphanLedgerFilePath, r as createOrphanLedger, t as getProcessSupervisor } from "./supervisor-BkHwVnJ0.js";
+import { r as resolveSystemRunCommand, t as canonicalizeLegacySystemRunParams } from "./system-run-command-BCygkYAm.js";
+import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, m as WORKSPACE_LANE_DENIED_REASON, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-oYjYy4W3.js";
+import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-D22rrc2J.js";
+import { a as resolveAgentIdentity, t as createReplyPrefixOptions } from "./reply-prefix-DIYk1Bw7.js";
+import { _ as lookupContextTokens, b as sleepWithAbort, c as canonicalizeSpawnedByForAgent, f as loadCombinedSessionStoreForGateway, g as resolveSessionModelRef, h as resolveGatewaySessionStoreTarget, m as pruneLegacyStoreKeys, o as normalizeReplyPayloadsForDelivery, p as loadSessionEntry, s as stampReplyActivity, t as deliverOutboundPayloads, u as listAgentsForGateway, y as computeBackoff } from "./deliver-QPSbsYeP.js";
+import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-Cpd_eIHB.js";
+import { T as collectTelegramDuplicatePollerDiagnostics, d as loadCronStore, f as resolveCronStorePath, p as saveCronStore } from "./send-DQKTiyZo.js";
+import { n as resolveModel } from "./model-DXt9qubu.js";
+import "./session-consumer-agents-BNkbq0X0.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-eNPY7j3q.js";
-import "./chunk-v83cSD3K.js";
-import "./markdown-tables-CxNf_QKN.js";
-import "./ir-BZC8jqmM.js";
+import "./chunk-Cft1Qryu.js";
+import "./markdown-tables-BIUAAmJj.js";
+import "./ir-BcCmcdpx.js";
 import "./render-CWxfEc9P.js";
-import "./reply-directives-DAFMLUk3.js";
-import { n as resolveMessageChannelSelection } from "./channel-selection-BRkNQi3I.js";
-import { o as normalizePollInput, t as getChannelActivity } from "./channel-activity-CYX6jkoL.js";
-import { i as applyPluginAutoEnable, n as collectUnsafeTelegramPollingTimeouts, s as buildChannelUiCatalog } from "./polling-timeout-BfQqGdT2.js";
-import "./send-DbTOnKy8.js";
-import "./outbound-attachment-DXOLYhTE.js";
+import "./reply-directives-MYQDM4s1.js";
+import { n as resolveMessageChannelSelection } from "./channel-selection-BhS12YOf.js";
+import { o as normalizePollInput, t as getChannelActivity } from "./channel-activity-umvXZN1Q.js";
+import { i as applyPluginAutoEnable, n as collectUnsafeTelegramPollingTimeouts, s as buildChannelUiCatalog } from "./polling-timeout-HyiW4Q3a.js";
+import "./send-EUMoqR5x.js";
+import "./outbound-attachment-DV8nfM5h.js";
 import "./delivery-queue-BXm5aLNn.js";
-import "./send-Dlz0xalZ.js";
-import "./resolve-route-DItBlJTa.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-CQBCu2m0.js";
-import "./tables-D07R1ft9.js";
-import "./proxy-FZnR0j7S.js";
-import "./replies-sGMpONzr.js";
-import { S as registerSkillsChangeListener, _ as requestNodePairing, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, g as renamePairedNode, h as rejectNodePairing, l as refreshRemoteBinsForConnectedNodes, m as listNodePairing, o as getRemoteSkillEligibility, p as approveNodePairing, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion, y as verifyNodeToken } from "./skill-commands-CcC4TPnA.js";
-import { t as listAgentWorkspaceDirs } from "./workspace-dirs-DWQAyUTc.js";
-import { n as GATEWAY_AUTH_SURFACE_PATHS, p as isKnownSecretTargetId, r as evaluateGatewayAuthSurfaceStates } from "./runtime-config-collectors-D8giqZX1.js";
-import "./command-secret-targets-DCV5FIY6.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-CHJgaSLe.js";
-import "./prompt-style-o9ooijd1.js";
-import "./pairing-labels-CzfCTcWR.js";
-import "./session-meta-B70hyZ6H.js";
-import { A as registerBeforeCreate, C as artifactTokenFor, D as markRemoved, E as markClientRemovedAcknowledged, M as buildVerificationEnvelope, N as redactVerificationProjection, O as markRetained, P as verificationEnvelopeFingerprint, S as accountSessionArtifactsAtTerminalSweep, T as listSessionArtifacts, _ as requireProcessBootIdentityPair, a as setAgentTurnRuntime, b as installGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as isBootIdentityError, h as deriveBootIdentityPair, i as getAgentTurnRuntime, j as VERIFICATION_CONFIG_SCENARIO, k as redactArtifactLogId, l as buildSoakDeploymentRecord, m as armBarrier, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as acceptSuccessorExecution, r as getActiveAgentTurnCount, u as evaluateSoak, v as clearGatewayRestartRecoveryRuntimeIf, w as isArtifactRegistrationError, x as RETAINED_ARTIFACT_KIND, y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-D9oWYU1F.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-DactP3dr.js";
-import { r as resolveMemorySearchConfig } from "./manager-DOXQa7gV.js";
-import "./query-expansion-BcXh1Hyc.js";
-import { t as formatDocsLink } from "./links-DtYJaVFO.js";
+import "./send-DQsInb-M.js";
+import "./resolve-route-D59i7uq2.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-CNWwkqR2.js";
+import "./tables-Dzfx8UwI.js";
+import "./proxy-CXiTHFXk.js";
+import "./replies-CX9Xycso.js";
+import { S as registerSkillsChangeListener, _ as requestNodePairing, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, g as renamePairedNode, h as rejectNodePairing, l as refreshRemoteBinsForConnectedNodes, m as listNodePairing, o as getRemoteSkillEligibility, p as approveNodePairing, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion, y as verifyNodeToken } from "./skill-commands-D3U8ty_X.js";
+import { t as listAgentWorkspaceDirs } from "./workspace-dirs-De3z5PEp.js";
+import { n as GATEWAY_AUTH_SURFACE_PATHS, p as isKnownSecretTargetId, r as evaluateGatewayAuthSurfaceStates } from "./runtime-config-collectors-DsDVTJ9L.js";
+import "./command-secret-targets-Gl-QK3RO.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-BHshJeiH.js";
+import "./prompt-style-B2xUetmj.js";
+import "./pairing-labels-DwJGNsPY.js";
+import "./session-meta-B2VOXhYi.js";
+import { A as registerBeforeCreate, C as artifactTokenFor, D as markRemoved, E as markClientRemovedAcknowledged, M as buildVerificationEnvelope, N as redactVerificationProjection, O as markRetained, P as verificationEnvelopeFingerprint, S as accountSessionArtifactsAtTerminalSweep, T as listSessionArtifacts, _ as requireProcessBootIdentityPair, a as setAgentTurnRuntime, b as installGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as isBootIdentityError, h as deriveBootIdentityPair, i as getAgentTurnRuntime, j as VERIFICATION_CONFIG_SCENARIO, k as redactArtifactLogId, l as buildSoakDeploymentRecord, m as armBarrier, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as acceptSuccessorExecution, r as getActiveAgentTurnCount, u as evaluateSoak, v as clearGatewayRestartRecoveryRuntimeIf, w as isArtifactRegistrationError, x as RETAINED_ARTIFACT_KIND, y as getGatewayRestartRecoveryRuntime } from "./agent-turn-runner-DJaul1fs.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-Dw2sfKV7.js";
+import { r as resolveMemorySearchConfig } from "./manager-CVY-YEjj.js";
+import "./query-expansion-96au1v0j.js";
+import { t as formatDocsLink } from "./links-DA_gi3gE.js";
 import { n as runCommandWithRuntime } from "./cli-utils-CH2y4E2f.js";
-import { t as formatHelpExamples } from "./help-format-CLct84oR.js";
-import { n as withProgress } from "./progress-D7S5GoOi.js";
-import "./server-lifecycle-CuLYk0SE.js";
+import { t as formatHelpExamples } from "./help-format-RRPzsWkf.js";
+import { n as withProgress } from "./progress-Cbn-oYkW.js";
+import "./server-lifecycle-BiT2RK1-.js";
 import { i as parseAbsoluteTimeMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-Bl55A6V9.js";
-import { a as normalizeHttpWebhookUrl, l as normalizeOptionalText, o as inferLegacyName } from "./heartbeat-tick-CrLpacK5.js";
-import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-Blr7A6nM.js";
-import { i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, t as discoverAllSessions } from "./session-cost-usage-C8x0Ma2X.js";
-import { t as ensureOpenClawCliOnPath } from "./path-env-BBelmr45.js";
-import "./runtime-guard-Ce3hA73q.js";
-import { t as forceFreePortAndWait } from "./ports-CcN3W_2z.js";
-import { c as OwnerLockHeldError, d as createOwnerIdentity, f as RecoveryJournalError, i as REASON_PRIOR_OWNER_UNPROVEN, l as PriorOwnerLiveError, n as REASON_JOURNAL_UNWRITABLE, o as createRestartRecoveryController, p as openRecoveryJournal, r as REASON_OWNER_LOCK_HELD, s as OwnerFenceLostError, t as REASON_JOURNAL_CORRUPT, u as acquireOwnerFence } from "./controller-Cf_Sh5y1.js";
-import "./recovery-prompt-ksHwpSU2.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-BE_oa3Dd.js";
+import { a as normalizeHttpWebhookUrl, l as normalizeOptionalText, o as inferLegacyName } from "./heartbeat-tick-gDighXQe.js";
+import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-Dea1X-KK.js";
+import { i as loadSessionUsageTimeSeries, n as loadCostUsageSummary, r as loadSessionCostSummary, t as discoverAllSessions } from "./session-cost-usage-BuaT9Epp.js";
+import { t as ensureOpenClawCliOnPath } from "./path-env-BpMauqkY.js";
+import "./runtime-guard-aqfwJvKU.js";
+import { t as forceFreePortAndWait } from "./ports-CmfLs9tb.js";
+import { c as OwnerLockHeldError, d as createOwnerIdentity, f as RecoveryJournalError, i as REASON_PRIOR_OWNER_UNPROVEN, l as PriorOwnerLiveError, n as REASON_JOURNAL_UNWRITABLE, o as createRestartRecoveryController, p as openRecoveryJournal, r as REASON_OWNER_LOCK_HELD, s as OwnerFenceLostError, t as REASON_JOURNAL_CORRUPT, u as acquireOwnerFence } from "./controller-CwG8Zp_n.js";
+import "./recovery-prompt-9MKTTZMu.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-Du76K8bv.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-D4EbjPPm.js";
 import { n as inheritOptionFromParent } from "./command-options-J0TsKUhM.js";
 import { t as WizardCancelledError } from "./prompts-1Bda-OqX.js";
-import { t as resolveChannelDefaultAccountId } from "./helpers-DPLyPWvP.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-DDNucPjd.js";
-import { t as isWithinDir } from "./path-safety-DMAi6_-A.js";
-import "./install-safe-path-C_UxxVRx.js";
-import "./npm-pack-install-DJFWFkSH.js";
-import "./skill-scanner-CtZuUDBn.js";
-import "./installs-DfXrCFr4.js";
-import { n as formatConfigIssueLines } from "./issue-format-CKVc879T.js";
+import { t as resolveChannelDefaultAccountId } from "./helpers-DGWfGS2H.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-YgM6ypSW.js";
+import { t as isWithinDir } from "./path-safety-BTAa9g_F.js";
+import "./install-safe-path-Cv53fge9.js";
+import "./npm-pack-install-BbOwlaHm.js";
+import "./skill-scanner-XMBq6JrQ.js";
+import "./installs-BZ7QGLTH.js";
+import { n as formatConfigIssueLines } from "./issue-format-CMvPuN7V.js";
 import { t as buildChannelAccountSnapshot } from "./status-BUQOsQeV.js";
-import "./channels-status-issues-1yAXMoby.js";
-import { i as resolveGatewayClientProfile, t as WEB_CLIENT_ALLOWED_ORIGINS_CONFIG_KEY } from "./client-profiles-CofHU2-i.js";
-import "./daemon-install-helpers-BXatJyxv.js";
-import "./service-CjlQTRXS.js";
-import "./systemd-BuE-CYAD.js";
-import "./lifecycle-core-nH5DqDS2.js";
-import "./systemd-hints-_4BTlat8.js";
+import "./channels-status-issues-C3WZ-FHq.js";
+import { i as resolveGatewayClientProfile, t as WEB_CLIENT_ALLOWED_ORIGINS_CONFIG_KEY } from "./client-profiles-DXMSQ3LL.js";
+import "./daemon-install-helpers-6Xe4iL6g.js";
+import "./service-BYi3UODF.js";
+import "./systemd-BD_TMCHG.js";
+import "./lifecycle-core-hNAWQhZw.js";
+import "./systemd-hints-hI4IEn0G.js";
 import { t as parsePort$1 } from "./parse-port-CzTewNTY.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-BS4lzrlG.js";
-import "./diagnostics-BL7MaHFG.js";
-import "./table-BZCTLfip.js";
-import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-FDkEBJ9c.js";
-import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-CdvXdH5h.js";
-import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-Ch0W6MYl.js";
-import { t as discoverGatewayBeacons } from "./bonjour-discovery-g2GjlMwG.js";
-import { a as noteStorageReplayResult, i as getStorageV1Snapshot, n as getStatusSummary, o as noteStorageRestartRequired, r as createStorageSupervisor, s as pickGatewaySelfPresence } from "./status--Lvi3tz9.js";
-import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-jv7pcI79.js";
-import { a as readPostQuiesceTranscriptDelta, i as readBulkTranscriptLines, o as replaySource, r as mergeBulkTranscriptSnapshotAndDelta, t as ReplayRowConflictError } from "./replay-DEbuRxsV.js";
-import "./session-key-resolution-bGrvOHtd.js";
-import { a as respondTaskRegistryUnavailable, c as tasksHandlers, d as withTimeout$1, i as resolveTaskOperatorRegistry, l as retryDelayMs, r as getTaskOperatorRegistry, t as DEFAULT_RETENTION_DAYS, u as waitForStopDrain } from "./task-runlog-retention-BE0zP95z.js";
-import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-CX17hVrY.js";
-import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-DNIQLMZJ.js";
-import { t as reconcileBundledInstalls } from "./reconcile-bundled-B64Cy2I8.js";
-import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-C2XMT9jZ.js";
-import "./onboarding.secret-input-CfTAY72X.js";
-import { t as runOnboardingWizard } from "./onboarding-NS4yZFU0.js";
-import { a as computeJobNextRunAtMs, c as findJobOrThrow, d as recomputeNextRuns, f as recomputeNextRunsForMaintenance, h as produceCronAgentTurn, i as applyJobPatch, l as isJobDue, m as resolveJobPayloadTextForMain, o as createJob, p as recordScheduleComputeError, r as resolveStaleClaimAdoptionMs, s as cronShapeSupportsIdentity, t as CRON_HEARTBEAT_ADAPTER_ID, u as nextWakeAtMs } from "./recovery-adapter-DdG68ESY.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-BAZ2gS1A.js";
-import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-hfaqpEZm.js";
-import { a as readChatHistoryPage, c as unsubscribeSessionChanges, i as decodeHistoryCursor, l as assertValidParams, o as resolveDbLeafEntryId, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers } from "./sessions-oXRiWY1z.js";
-import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-2ZSrWLtG.js";
-import "./node-service-CsTzpewy.js";
-import "./status.update-CWMFCByv.js";
-import { i as resolveActiveLogFile, n as readLogSlice } from "./log-tail--H82JYgg.js";
-import { t as installSkill } from "./skills-install-O8JPmNxm.js";
-import { r as runGatewayUpdate } from "./update-runner-CP_x4nIG.js";
-import { n as resolveWebClientPackagedRootSync, t as WEB_CLIENT_BUNDLE_MISSING_MESSAGE } from "./web-client-assets-CISlpYd9.js";
-import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-pXJaZvDa.js";
-import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-8955-2ij.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-ChjPuLhH.js";
+import "./diagnostics-feLr7_11.js";
+import "./table-WoBQBfIP.js";
+import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-BfsfK5rQ.js";
+import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-BxpBpS9X.js";
+import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-BdvUbSJW.js";
+import { t as discoverGatewayBeacons } from "./bonjour-discovery-DcI9gUqF.js";
+import { a as noteStorageReplayResult, i as getStorageV1Snapshot, n as getStatusSummary, o as noteStorageRestartRequired, r as createStorageSupervisor, s as pickGatewaySelfPresence } from "./status-C3eqPaNb.js";
+import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-BovdETb-.js";
+import { a as readPostQuiesceTranscriptDelta, i as readBulkTranscriptLines, o as replaySource, r as mergeBulkTranscriptSnapshotAndDelta, t as ReplayRowConflictError } from "./replay-BNSm4qb0.js";
+import "./session-key-resolution-4d3BG0mA.js";
+import { a as respondTaskRegistryUnavailable, c as tasksHandlers, d as withTimeout$1, i as resolveTaskOperatorRegistry, l as retryDelayMs, r as getTaskOperatorRegistry, t as DEFAULT_RETENTION_DAYS, u as waitForStopDrain } from "./task-runlog-retention-AeS4_zJ9.js";
+import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-3-KmlKzl.js";
+import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-BLrrF35q.js";
+import { t as reconcileBundledInstalls } from "./reconcile-bundled-BN_64UUh.js";
+import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-9MDCiTo5.js";
+import "./onboarding.secret-input-DwOMM1C_.js";
+import { t as runOnboardingWizard } from "./onboarding-Cu0Vnxce.js";
+import { a as computeJobNextRunAtMs, c as findJobOrThrow, d as recomputeNextRuns, f as recomputeNextRunsForMaintenance, h as produceCronAgentTurn, i as applyJobPatch, l as isJobDue, m as resolveJobPayloadTextForMain, o as createJob, p as recordScheduleComputeError, r as resolveStaleClaimAdoptionMs, s as cronShapeSupportsIdentity, t as CRON_HEARTBEAT_ADAPTER_ID, u as nextWakeAtMs } from "./recovery-adapter-T9ng5nO9.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-C_8RshML.js";
+import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-XnNYe7e4.js";
+import { a as readChatHistoryPage, c as unsubscribeSessionChanges, i as decodeHistoryCursor, l as assertValidParams, o as resolveDbLeafEntryId, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers } from "./sessions-D_Z9ewVp.js";
+import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-xF0dwumy.js";
+import "./node-service-D4squ4p0.js";
+import "./status.update-BlFaGKuA.js";
+import { i as resolveActiveLogFile, n as readLogSlice } from "./log-tail-FFb_BPrV.js";
+import { t as installSkill } from "./skills-install-CQfmtCLR.js";
+import { r as runGatewayUpdate } from "./update-runner-CRgsunyU.js";
+import { n as resolveWebClientPackagedRootSync, t as WEB_CLIENT_BUNDLE_MISSING_MESSAGE } from "./web-client-assets-BC6Q9ril.js";
+import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-Btbae6MM.js";
+import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-C1JSSS9_.js";
 import { createRequire } from "node:module";
 import { cpuUsage, memoryUsage, resourceUsage, uptime } from "node:process";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -194,7 +194,7 @@ import * as fsSync from "node:fs";
 import fs, { mkdirSync } from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fsPromises from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import { isDeepStrictEqual, promisify } from "node:util";
 import zlib from "node:zlib";
 import chalk from "chalk";
@@ -1403,7 +1403,7 @@ function resolveCheckIntervalMs(cfg) {
 }
 async function readState(statePath) {
 	try {
-		const raw = await fsPromises.readFile(statePath, "utf-8");
+		const raw = await fs$1.readFile(statePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		return parsed && typeof parsed === "object" ? parsed : {};
 	} catch {
@@ -1484,7 +1484,7 @@ async function runAutoUpdateCommand(params) {
 			path.join(params.root, "dist", "index.mjs")
 		];
 		for (const candidate of candidates) try {
-			await fsPromises.access(candidate);
+			await fs$1.access(candidate);
 			argv.push(execPath, candidate, ...baseArgs);
 			break;
 		} catch {}
@@ -3068,13 +3068,13 @@ async function resolveGatewayRecoveryAdapters(cfg, opts) {
 async function assembleFirstPartyAdapters(cfg, wiring) {
 	const adapters = [];
 	const stateDir = resolveStateDir();
-	const { getConfiguredSessionStorageRuntime } = await import("./model-selection-D74qlS0C.js").then((n) => n.gi);
+	const { getConfiguredSessionStorageRuntime } = await import("./model-selection-Xe4QEYsC.js").then((n) => n.gi);
 	const runtime = getConfiguredSessionStorageRuntime()?.runtime;
 	const gatewayInstanceId = getGatewayInstanceId();
-	const { tryGetAgentTurnRuntime } = await import("./agent-turn-runner-D9oWYU1F.js").then((n) => n.t);
+	const { tryGetAgentTurnRuntime } = await import("./agent-turn-runner-DJaul1fs.js").then((n) => n.t);
 	const backbone = tryGetAgentTurnRuntime()?.backbone;
 	const { createOutboundDeliveryRecoveryAdapter } = await import("./delivery-recovery-adapter-D33zYA4P.js");
-	const { deliverOutboundPayloads } = await import("./deliver-BeUjHsuQ.js").then((n) => n.n);
+	const { deliverOutboundPayloads } = await import("./deliver-QPSbsYeP.js").then((n) => n.n);
 	adapters.push(createOutboundDeliveryRecoveryAdapter({
 		cfg,
 		deliver: deliverOutboundPayloads,
@@ -3088,7 +3088,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		sessionRuns = void 0;
 	}
 	if (sessionRuns && wiring?.agentTurnStager) {
-		const { createSessionRunRecoveryAdapter } = await import("./recovery-adapter-CLaKhchi.js").then((n) => n.i);
+		const { createSessionRunRecoveryAdapter } = await import("./recovery-adapter-G2cG0rVa.js").then((n) => n.i);
 		adapters.push(createSessionRunRecoveryAdapter({
 			store: sessionRuns,
 			cfg,
@@ -3097,14 +3097,14 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 			stager: wiring.agentTurnStager
 		}));
 	}
-	const { createStorageSupervisorRecoveryAdapter } = await import("./supervisor-recovery-adapter-DvR4we0D.js");
+	const { createStorageSupervisorRecoveryAdapter } = await import("./supervisor-recovery-adapter-Cmw-7toT.js");
 	adapters.push(createStorageSupervisorRecoveryAdapter({
 		stateDir,
 		supervisor: wiring?.supervisor,
 		lease: wiring?.lease ? () => wiring.lease?.() ?? { isArmed: () => false } : void 0
 	}));
 	if (backbone && wiring?.agentTurnStager) {
-		const { createAgentTurnRecoveryAdapter } = await import("./agent-turn-recovery-adapter-OfuCod26.js");
+		const { createAgentTurnRecoveryAdapter } = await import("./agent-turn-recovery-adapter-Ba_u8tsH.js");
 		adapters.push(createAgentTurnRecoveryAdapter({
 			backbone,
 			stager: wiring.agentTurnStager
@@ -3118,7 +3118,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		}));
 	}
 	if (runtime?.cronJobs && runtime.taskRuns && sessionRuns) {
-		const { createCronHeartbeatRecoveryAdapter } = await import("./recovery-adapter-DdG68ESY.js").then((n) => n.n);
+		const { createCronHeartbeatRecoveryAdapter } = await import("./recovery-adapter-T9ng5nO9.js").then((n) => n.n);
 		adapters.push(createCronHeartbeatRecoveryAdapter({
 			cronJobs: runtime.cronJobs,
 			taskRuns: runtime.taskRuns,
@@ -3126,7 +3126,7 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 		}));
 	}
 	if (sessionRuns) {
-		const { createEmbeddedPiRecoveryAdapter } = await import("./pi-embedded-recovery-adapter-JHx8Xn5G.js");
+		const { createEmbeddedPiRecoveryAdapter } = await import("./pi-embedded-recovery-adapter-Ded_keBv.js");
 		adapters.push(createEmbeddedPiRecoveryAdapter({
 			sessionRuns,
 			cfg,
@@ -3134,14 +3134,14 @@ async function assembleFirstPartyAdapters(cfg, wiring) {
 			stager: wiring?.agentTurnStager,
 			isRunActive: isEmbeddedPiRunActive
 		}));
-		const { createAcpRuntimeRecoveryAdapter } = await import("./recovery-adapter-DXIa6Q_V.js");
+		const { createAcpRuntimeRecoveryAdapter } = await import("./recovery-adapter-B2XqKqkY.js");
 		adapters.push(createAcpRuntimeRecoveryAdapter({
 			sessionRuns,
 			gatewayInstanceId
 		}));
 	}
 	if (backbone) {
-		const { createPluginOwnedWorkRecoveryAdapter } = await import("./plugin-owned-work-recovery-adapter-Bn-F7Hfx.js");
+		const { createPluginOwnedWorkRecoveryAdapter } = await import("./plugin-owned-work-recovery-adapter-tgBosC-H.js");
 		adapters.push(createPluginOwnedWorkRecoveryAdapter({ backbone }));
 	}
 	return adapters;
@@ -5801,9 +5801,9 @@ async function drainPendingWrite(filePath) {
 	if (pending) await pending.catch(() => void 0);
 }
 async function pruneIfNeeded(filePath, opts) {
-	const stat = await fsPromises.stat(filePath).catch(() => null);
+	const stat = await fs$1.stat(filePath).catch(() => null);
 	if (!stat || stat.size <= opts.maxBytes) return;
-	const raw = await fsPromises.readFile(filePath, "utf-8").catch((err) => {
+	const raw = await fs$1.readFile(filePath, "utf-8").catch((err) => {
 		log$26.warn("cron run-log: prune skipped (read failed)", {
 			filePath,
 			err: String(err)
@@ -5815,14 +5815,14 @@ async function pruneIfNeeded(filePath, opts) {
 	const kept = lines.slice(Math.max(0, lines.length - opts.keepLines));
 	const { randomBytes } = await import("node:crypto");
 	const tmp = `${filePath}.${process.pid}.${randomBytes(8).toString("hex")}.tmp`;
-	await fsPromises.writeFile(tmp, `${kept.join("\n")}\n`, "utf-8");
-	await fsPromises.rename(tmp, filePath);
+	await fs$1.writeFile(tmp, `${kept.join("\n")}\n`, "utf-8");
+	await fs$1.rename(tmp, filePath);
 }
 async function listCronRunLogReadPaths(filePath) {
 	const resolved = path.resolve(filePath);
 	const dir = path.dirname(resolved);
 	const base = path.basename(resolved);
-	return [...(await fsPromises.readdir(dir).catch(() => [])).map((name) => {
+	return [...(await fs$1.readdir(dir).catch(() => [])).map((name) => {
 		const match = new RegExp(`^${base.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\.(\\d+)(\\.gz)?$`).exec(name);
 		return match ? {
 			path: path.join(dir, name),
@@ -5831,8 +5831,8 @@ async function listCronRunLogReadPaths(filePath) {
 	}).filter((entry) => entry !== null).toSorted((a, b) => b.slot - a.slot).map((entry) => entry.path), resolved];
 }
 async function readCronRunLogFile(filePath) {
-	if (filePath.endsWith(".gz")) return zlib.gunzipSync(await fsPromises.readFile(filePath)).toString("utf-8");
-	return fsPromises.readFile(filePath, "utf-8");
+	if (filePath.endsWith(".gz")) return zlib.gunzipSync(await fs$1.readFile(filePath)).toString("utf-8");
+	return fs$1.readFile(filePath, "utf-8");
 }
 async function readCronRunLogRaw(filePath) {
 	const chunks = [];
@@ -5983,7 +5983,7 @@ async function readCronRunLogEntriesPageAll(opts) {
 	const query = opts.query?.trim().toLowerCase() ?? "";
 	const sortDir = opts.sortDir === "asc" ? "asc" : "desc";
 	const runsDir = path.resolve(path.dirname(path.resolve(opts.storePath)), "runs");
-	const files = await fsPromises.readdir(runsDir, { withFileTypes: true }).catch(() => []);
+	const files = await fs$1.readdir(runsDir, { withFileTypes: true }).catch(() => []);
 	const logFiles = [...new Set(files.filter((entry) => entry.isFile()).map((entry) => {
 		const match = /^(.+\.jsonl)(?:\.\d+(?:\.gz)?)?$/.exec(entry.name);
 		return match ? path.join(runsDir, match[1] ?? "") : null;
@@ -10503,7 +10503,7 @@ function resolveWorkspaceFilePathResultOrThrow(params) {
 }
 async function resolveWorkspaceRealPath(workspaceDir) {
 	try {
-		return await fsPromises.realpath(workspaceDir);
+		return await fs$1.realpath(workspaceDir);
 	} catch {
 		return path.resolve(workspaceDir);
 	}
@@ -10532,7 +10532,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 	};
 	let candidateLstat;
 	try {
-		candidateLstat = await fsPromises.lstat(candidatePath);
+		candidateLstat = await fs$1.lstat(candidatePath);
 	} catch (err) {
 		return resolveWorkspaceFilePathResultOrThrow({
 			error: err,
@@ -10543,7 +10543,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 	if (candidateLstat.isSymbolicLink()) {
 		let targetReal;
 		try {
-			targetReal = await fsPromises.realpath(candidatePath);
+			targetReal = await fs$1.realpath(candidatePath);
 		} catch (err) {
 			return resolveWorkspaceFilePathResultOrThrow({
 				error: err,
@@ -10558,7 +10558,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 		};
 		let targetStat;
 		try {
-			targetStat = await fsPromises.stat(targetReal);
+			targetStat = await fs$1.stat(targetReal);
 		} catch (err) {
 			return resolveWorkspaceFilePathResultOrThrow({
 				error: err,
@@ -10596,13 +10596,13 @@ async function resolveAgentWorkspaceFilePath(params) {
 	return {
 		kind: "ready",
 		requestPath,
-		ioPath: await fsPromises.realpath(candidatePath).catch(() => candidatePath),
+		ioPath: await fs$1.realpath(candidatePath).catch(() => candidatePath),
 		workspaceReal
 	};
 }
 async function statFileSafely(filePath) {
 	try {
-		const [stat, lstat] = await Promise.all([fsPromises.stat(filePath), fsPromises.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([fs$1.stat(filePath), fs$1.lstat(filePath)]);
 		if (lstat.isSymbolicLink() || !stat.isFile()) return null;
 		if (stat.nlink > 1) return null;
 		if (!sameFileIdentity(stat, lstat)) return null;
@@ -10696,7 +10696,7 @@ function respondAgentNotFound(respond, agentId) {
 async function moveToTrashBestEffort(pathname) {
 	if (!pathname) return;
 	try {
-		await fsPromises.access(pathname);
+		await fs$1.access(pathname);
 	} catch {
 		return;
 	}
@@ -10772,7 +10772,7 @@ const agentsHandlers = {
 			dir: workspaceDir,
 			ensureBootstrapFiles: !Boolean(nextConfig.agents?.defaults?.skipBootstrap)
 		});
-		await fsPromises.mkdir(resolveSessionTranscriptsDirForAgent(agentId), { recursive: true });
+		await fs$1.mkdir(resolveSessionTranscriptsDirForAgent(agentId), { recursive: true });
 		await writeConfigFile(nextConfig);
 		const safeName = sanitizeIdentityLine(rawName);
 		const emoji = resolveOptionalStringParam(params.emoji);
@@ -10785,7 +10785,7 @@ const agentsHandlers = {
 			...avatar ? [`- Avatar: ${sanitizeIdentityLine(avatar)}`] : [],
 			""
 		];
-		await fsPromises.appendFile(identityPath, lines.join("\n"), "utf-8");
+		await fs$1.appendFile(identityPath, lines.join("\n"), "utf-8");
 		respond(true, {
 			ok: true,
 			agentId,
@@ -10820,9 +10820,9 @@ const agentsHandlers = {
 		});
 		if (avatar) {
 			const workspace = workspaceDir ?? resolveAgentWorkspaceDir(nextConfig, agentId);
-			await fsPromises.mkdir(workspace, { recursive: true });
+			await fs$1.mkdir(workspace, { recursive: true });
 			const identityPath = path.join(workspace, DEFAULT_IDENTITY_FILENAME);
-			await fsPromises.appendFile(identityPath, `\n- Avatar: ${sanitizeIdentityLine(avatar)}\n`, "utf-8");
+			await fs$1.appendFile(identityPath, `\n- Avatar: ${sanitizeIdentityLine(avatar)}\n`, "utf-8");
 		}
 		respond(true, {
 			ok: true,
@@ -10946,7 +10946,7 @@ const agentsHandlers = {
 		const resolved = resolveAgentWorkspaceFileOrRespondError(params, respond);
 		if (!resolved) return;
 		const { agentId, workspaceDir, name } = resolved;
-		await fsPromises.mkdir(workspaceDir, { recursive: true });
+		await fs$1.mkdir(workspaceDir, { recursive: true });
 		const filePath = path.join(workspaceDir, name);
 		const resolvedPath = await resolveWorkspaceFilePathOrRespond({
 			respond,
@@ -16512,7 +16512,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-32NLKlcp.js");
+			const { handleNodeEvent } = await import("./server-node-events-DmNKXZqH.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -18604,8 +18604,8 @@ function logConsultFailure(reason) {
 }
 const defaultDeps = {
 	runEmbeddedPiAgent,
-	mkdtemp: fsPromises.mkdtemp,
-	rm: fsPromises.rm,
+	mkdtemp: fs$1.mkdtemp,
+	rm: fs$1.rm,
 	resolveAgentDir,
 	resolveAgentWorkspaceDir,
 	resolveDefaultAgentId,
@@ -23950,7 +23950,7 @@ const usageHandlers = {
 		const resolved = resolveSessionUsageFileOrRespond(key, respond);
 		if (!resolved) return;
 		const { config, entry, agentId, sessionId, sessionFile } = resolved;
-		const { loadSessionLogs } = await import("./session-cost-usage-C8x0Ma2X.js").then((n) => n.a);
+		const { loadSessionLogs } = await import("./session-cost-usage-BuaT9Epp.js").then((n) => n.a);
 		respond(true, { logs: await loadSessionLogs({
 			sessionId,
 			sessionEntry: entry,
@@ -25393,7 +25393,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.OPENCLAW_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.OPENCLAW_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./server-DNrc5ufA.js");
+	const mod = override ? await import(override) : await import("./server-COf8596I.js");
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -25624,7 +25624,7 @@ async function resolveFileWithinRoot(rootReal, urlPath) {
 	if (normalized.endsWith("/")) return await tryOpen(path.posix.join(rel, "index.html"));
 	const candidate = path.join(rootReal, rel);
 	try {
-		const st = await fsPromises.lstat(candidate);
+		const st = await fs$1.lstat(candidate);
 		if (st.isSymbolicLink()) return null;
 		if (st.isDirectory()) return await tryOpen(path.posix.join(rel, "index.html"));
 	} catch {}
@@ -25661,8 +25661,8 @@ async function resolveA2uiRoot() {
 	for (const dir of candidates) try {
 		const indexPath = path.join(dir, "index.html");
 		const bundlePath = path.join(dir, "a2ui.bundle.js");
-		await fsPromises.stat(indexPath);
-		await fsPromises.stat(bundlePath);
+		await fs$1.stat(indexPath);
+		await fs$1.stat(bundlePath);
 		return dir;
 	} catch {}
 	return null;
@@ -25671,7 +25671,7 @@ async function resolveA2uiRootReal() {
 	if (cachedA2uiRootReal !== void 0 && (cachedA2uiRootReal !== null || Date.now() - cachedA2uiResolvedAtMs < A2UI_ROOT_RETRY_NULL_AFTER_MS)) return cachedA2uiRootReal;
 	if (!resolvingA2uiRoot) resolvingA2uiRoot = (async () => {
 		const root = await resolveA2uiRoot();
-		cachedA2uiRootReal = root ? await fsPromises.realpath(root) : null;
+		cachedA2uiRootReal = root ? await fs$1.realpath(root) : null;
 		cachedA2uiResolvedAtMs = Date.now();
 		resolvingA2uiRoot = null;
 		return cachedA2uiRootReal;
@@ -25892,13 +25892,13 @@ function normalizeBasePath(rawPath) {
 }
 async function prepareCanvasRoot(rootDir) {
 	await ensureDir(rootDir);
-	const rootReal = await fsPromises.realpath(rootDir);
+	const rootReal = await fs$1.realpath(rootDir);
 	try {
 		const indexPath = path.join(rootReal, "index.html");
-		await fsPromises.stat(indexPath);
+		await fs$1.stat(indexPath);
 	} catch {
 		try {
-			await fsPromises.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
+			await fs$1.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
 		} catch {}
 	}
 	return rootReal;
@@ -29214,7 +29214,7 @@ async function resolveGatewayOwnerStatus(pid, payload, platform, port) {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fsPromises.readFile(lockPath, "utf8");
+		const raw = await fs$1.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (typeof parsed.pid !== "number") return null;
 		if (typeof parsed.createdAt !== "string") return null;
@@ -29249,11 +29249,11 @@ async function acquireGatewayLock(opts = {}) {
 	const platform = opts.platform ?? process.platform;
 	const port = opts.port;
 	const { lockPath, configPath } = resolveGatewayLockPath(env);
-	await fsPromises.mkdir(path.dirname(lockPath), { recursive: true });
+	await fs$1.mkdir(path.dirname(lockPath), { recursive: true });
 	const startedAt = Date.now();
 	let lastPayload = null;
 	while (Date.now() - startedAt < timeoutMs) try {
-		const handle = await fsPromises.open(lockPath, "wx");
+		const handle = await fs$1.open(lockPath, "wx");
 		const startTime = platform === "linux" ? readLinuxStartTime(process.pid) : null;
 		const payload = {
 			pid: process.pid,
@@ -29267,7 +29267,7 @@ async function acquireGatewayLock(opts = {}) {
 			configPath,
 			release: async () => {
 				await handle.close().catch(() => void 0);
-				await fsPromises.rm(lockPath, { force: true });
+				await fs$1.rm(lockPath, { force: true });
 			}
 		};
 	} catch (err) {
@@ -29276,7 +29276,7 @@ async function acquireGatewayLock(opts = {}) {
 		const ownerPid = lastPayload?.pid;
 		const ownerStatus = ownerPid ? await resolveGatewayOwnerStatus(ownerPid, lastPayload, platform, port) : "unknown";
 		if (ownerStatus === "dead" && ownerPid) {
-			await fsPromises.rm(lockPath, { force: true });
+			await fs$1.rm(lockPath, { force: true });
 			continue;
 		}
 		if (ownerStatus !== "alive") {
@@ -29286,13 +29286,13 @@ async function acquireGatewayLock(opts = {}) {
 				stale = Number.isFinite(createdAt) ? Date.now() - createdAt > staleMs : false;
 			}
 			if (!stale) try {
-				const st = await fsPromises.stat(lockPath);
+				const st = await fs$1.stat(lockPath);
 				stale = Date.now() - st.mtimeMs > staleMs;
 			} catch {
 				stale = false;
 			}
 			if (stale) {
-				await fsPromises.rm(lockPath, { force: true });
+				await fs$1.rm(lockPath, { force: true });
 				continue;
 			}
 		}
@@ -35594,7 +35594,7 @@ async function bootGatewayServer(port, opts) {
 		setActivePreservationLease(lease);
 		let supervisorClosed = false;
 		let lastProbeError;
-		const transcriptFingerprint = async (filePath) => createHash("sha256").update(await fsPromises.readFile(filePath)).digest("hex");
+		const transcriptFingerprint = async (filePath) => createHash("sha256").update(await fs$1.readFile(filePath)).digest("hex");
 		const requireCandidateRuntime = () => {
 			const candidate = candidateOwner?.candidate.runtime;
 			if (!candidate || candidateOwner?.state === "closed") throw new Error("recovery candidate runtime is not ready");
@@ -35891,7 +35891,7 @@ async function bootGatewayServer(port, opts) {
 			}
 			storageStartup.markReady();
 			try {
-				const { installIncidentAsset } = await import("./incident-install-Cfpzkmd6.js");
+				const { installIncidentAsset } = await import("./incident-install-BU8QyJJi.js");
 				await installIncidentAsset({
 					stateDir: resolveStateDir(),
 					loadIndexRecord: async () => {
@@ -35906,7 +35906,7 @@ async function bootGatewayServer(port, opts) {
 			if (supervisor.getState() === "healthy") {
 				const runtime = getConfiguredSessionStorageRuntime()?.runtime;
 				if (runtime?.conversation) try {
-					const { runLiveRepair } = await import("./live-repair-CajZtMx4.js");
+					const { runLiveRepair } = await import("./live-repair-BvevhX8_.js");
 					await runLiveRepair({
 						stateDir: resolveStateDir(),
 						conversationStore: runtime.conversation,
@@ -36276,14 +36276,14 @@ async function bootGatewayServer(port, opts) {
 	let sessionConsumerClaimSweepCancelled = false;
 	let sessionConsumerClaimSweepBoot = null;
 	if (!minimalTestGateway) sessionConsumerClaimSweepBoot = (async () => {
-		const { getConfiguredSessionStorageRuntime } = await import("./model-selection-D74qlS0C.js").then((n) => n.gi);
-		const { loadPluginManifestRegistry } = await import("./model-selection-D74qlS0C.js").then((n) => n.Ln);
-		const { getActivePluginRegistry } = await import("./model-selection-D74qlS0C.js").then((n) => n.br);
-		const { deriveGatewaySweepConsumers, runSessionConsumerSweepTick, startSessionConsumerSweepSchedule } = await import("./session-consumer-claim-sweep-DTdZIrGU.js");
+		const { getConfiguredSessionStorageRuntime } = await import("./model-selection-Xe4QEYsC.js").then((n) => n.gi);
+		const { loadPluginManifestRegistry } = await import("./model-selection-Xe4QEYsC.js").then((n) => n.Ln);
+		const { getActivePluginRegistry } = await import("./model-selection-Xe4QEYsC.js").then((n) => n.br);
+		const { deriveGatewaySweepConsumers, runSessionConsumerSweepTick, startSessionConsumerSweepSchedule } = await import("./session-consumer-claim-sweep-qTcERA_U.js");
 		const sweepLog = log$1.child("session-consumer-claim-sweep");
 		const { createDiagnosticRingBuffer } = await import("./session-consumer-diagnostics-BlAY-GoI.js");
 		const diagnostics = createDiagnosticRingBuffer();
-		const { setDiagnostics } = await import("./sessions-oXRiWY1z.js").then((n) => n.n);
+		const { setDiagnostics } = await import("./sessions-D_Z9ewVp.js").then((n) => n.n);
 		if (sessionConsumerClaimSweepCancelled) return;
 		setDiagnostics(diagnostics);
 		const lastKnownEnabledState = /* @__PURE__ */ new Map();
@@ -36322,7 +36322,7 @@ async function bootGatewayServer(port, opts) {
 					lastKnownEnabledState,
 					cfg: loadConfig()
 				});
-				const { setLastSweepTimestamp } = await import("./sessions-oXRiWY1z.js").then((n) => n.n);
+				const { setLastSweepTimestamp } = await import("./sessions-D_Z9ewVp.js").then((n) => n.n);
 				setLastSweepTimestamp(Date.now());
 			} catch (err) {
 				sweepLog.warn(`session consumer-claim sweep failed: ${String(err)}`);
@@ -36343,8 +36343,8 @@ async function bootGatewayServer(port, opts) {
 			id: "task-dispatch",
 			prepare: () => {
 				taskPipelineBoot = (async () => {
-					const { getConfiguredSessionStorageRuntime } = await import("./model-selection-D74qlS0C.js").then((n) => n.gi);
-					const { startTaskPipeline } = await import("./task-pipeline-boot-vMI_gNlk.js");
+					const { getConfiguredSessionStorageRuntime } = await import("./model-selection-Xe4QEYsC.js").then((n) => n.gi);
+					const { startTaskPipeline } = await import("./task-pipeline-boot-h8Guy4BE.js");
 					const pipeline = startTaskPipeline({
 						getConfigured: getConfiguredSessionStorageRuntime,
 						cfg: cfgAtStart,
@@ -37153,7 +37153,7 @@ async function stopInteractiveWorkBeforeClose(params) {
 		});
 	}
 	const supervisorStep = (async () => {
-		const { getProcessSupervisor } = await import("./supervisor-8TdOYzAn.js").then((n) => n.n);
+		const { getProcessSupervisor } = await import("./supervisor-BkHwVnJ0.js").then((n) => n.n);
 		return await cancelSupervisorChildrenAndFlush(getProcessSupervisor(), Math.min(CHILD_EXIT_BUDGET_MS, Math.max(1, remainingMs())));
 	})().catch((error) => {
 		log.warn("supervisor cancelAll or ledger flush failed; child processes may leak", {
@@ -37167,7 +37167,7 @@ async function stopInteractiveWorkBeforeClose(params) {
 	let acpCancelTimedOut = false;
 	let cancelledRunIds = [];
 	try {
-		const { getAcpSessionManager } = await import("./manager-fEgy3Cc5.js").then((n) => n.n);
+		const { getAcpSessionManager } = await import("./manager-CuWMoixZ.js").then((n) => n.n);
 		const result = await getAcpSessionManager().cancelActiveTurnsForShutdown({
 			reason: params.reason,
 			timeoutMs: Math.max(1, params.budgetMs - PENDING_REPLY_RESERVE_MS)
@@ -37238,7 +37238,7 @@ async function stopInteractiveWorkBeforeClose(params) {
 */
 async function sweepSupervisorChildrenBeforeExit(params) {
 	try {
-		const { getProcessSupervisor } = await import("./supervisor-8TdOYzAn.js").then((n) => n.n);
+		const { getProcessSupervisor } = await import("./supervisor-BkHwVnJ0.js").then((n) => n.n);
 		const stats = await cancelSupervisorChildrenAndFlush(getProcessSupervisor(), params.budgetMs);
 		if (stats.cancelled > 0) log.info(`final supervisor sweep cancelled ${stats.cancelled} child process(es)`, { exitWaitTimedOut: stats.exitWaitTimedOut });
 	} catch (error) {
@@ -37346,7 +37346,7 @@ async function runGatewayLoop(params) {
 					if (isRestart) {
 						markGatewayDraining();
 						const activeTasks = getActiveTaskCount();
-						const acpManager = (await import("./manager-fEgy3Cc5.js").then((n) => n.n)).getAcpSessionManager();
+						const acpManager = (await import("./manager-CuWMoixZ.js").then((n) => n.n)).getAcpSessionManager();
 						const activeTurns = acpManager.getActiveTurnCount();
 						if (activeTasks > 0 || activeTurns > 0) {
 							gatewayLog$1.info(`draining ${activeTasks} active task(s), ${activeTurns} active acp turn(s) before restart (timeout ${DRAIN_TIMEOUT_MS}ms)`);