wednesdayai 0.5.1-dev.21 → 0.5.1-dev.23

package/dist/{fetch-fObya4WR.js → fetch-B1ohBh6A.js}

@@ -1,12 +1,12 @@
-import { c as resolveAgentWorkspaceDir } from "./agent-scope-CeLIuOpq.js";
-import { l as resolveStateDir } from "./paths-B_gs59ga.js";
-import { mt as resolvePreferredOpenClawTmpDir } from "./subsystem-D_zHSy02.js";
-import { U as loadConfig } from "./model-selection-UX4A5pdj.js";
-import { t as redactSensitiveText } from "./redact-Da2jd8m8.js";
-import { c as detectMime, l as extensionForMime } from "./image-ops-DlAa1zGf.js";
-import { r as formatErrorChainMessage } from "./errors-83K08uTq.js";
+import { c as resolveAgentWorkspaceDir } from "./agent-scope-DCgndASv.js";
+import { l as resolveStateDir } from "./paths-BIDPYPVC.js";
+import { mt as resolvePreferredOpenClawTmpDir } from "./subsystem-BZy3aWdW.js";
+import { U as loadConfig } from "./model-selection-BHGpQSa9.js";
+import { t as redactSensitiveText } from "./redact-DpE5Tg36.js";
+import { c as detectMime, l as extensionForMime } from "./image-ops-C-5VgbLB.js";
+import { r as formatErrorChainMessage } from "./errors-COs_vQr3.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-Cj-XaaTu.js";
-import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-BucfWGi8.js";
+import { n as withStrictGuardedFetchMode, t as fetchWithSsrFGuard } from "./fetch-guard-BXzVwvnJ.js";
 import path from "node:path";
 
 //#region src/media/local-roots.ts

package/dist/{fetch-guard-BucfWGi8.js → fetch-guard-BXzVwvnJ.js}

@@ -1,7 +1,7 @@
-import { i as logWarn, r as logInfo } from "./logger-vVASmiVr.js";
-import { c as resolvePinnedHostnameWithPolicy, i as createPinnedDispatcher, n as SsrFBlockedError, o as isPrivateIpAddress, r as closeDispatcher, t as hasProxyEnvConfigured } from "./proxy-env-1eta-137.js";
+import { i as logWarn, r as logInfo } from "./logger-J4xjy-6D.js";
+import { c as resolvePinnedHostnameWithPolicy, i as createPinnedDispatcher, n as SsrFBlockedError, o as isPrivateIpAddress, r as closeDispatcher, t as hasProxyEnvConfigured } from "./proxy-env-BxR4m86L.js";
 import { t as bindAbortRelay } from "./fetch-timeout-Dyj5Y_Ss.js";
-import { t as isNpmUndiciDispatchingFetch } from "./proxy-fetch-SAeVJOzX.js";
+import { t as isNpmUndiciDispatchingFetch } from "./proxy-fetch-g109vqdt.js";
 import { EnvHttpProxyAgent, FormData, fetch } from "undici";
 
 //#region src/infra/net/form-data.ts

package/dist/{frontmatter-IfoWyoLV.js → frontmatter-Cw_6jMAR.js}

@@ -1,7 +1,7 @@
-import { s as parseBooleanValue, t as readManifestNamespace } from "./legacy-names-Dh4RlQMQ.js";
+import { s as parseBooleanValue, t as readManifestNamespace } from "./legacy-names-CghFcfry.js";
 import path from "node:path";
-import syncFs from "node:fs";
-import json5 from "json5";
+import fs from "node:fs";
+import JSON5 from "json5";
 import YAML from "yaml";
 
 //#region src/shared/config-eval.ts
@@ -92,7 +92,7 @@ function hasBinary(bin) {
 	for (const part of parts) for (const ext of extensions) {
 		const candidate = path.join(part, bin + ext);
 		try {
-			syncFs.accessSync(candidate, syncFs.constants.X_OK);
+			fs.accessSync(candidate, fs.constants.X_OK);
 			hasBinaryCache.set(bin, true);
 			return true;
 		} catch {}
@@ -258,7 +258,7 @@ function resolveOpenClawManifestBlock(params) {
 	const raw = getFrontmatterString(params.frontmatter, params.key ?? "metadata");
 	if (!raw) return;
 	try {
-		const parsed = json5.parse(raw);
+		const parsed = JSON5.parse(raw);
 		if (!parsed || typeof parsed !== "object") return;
 		return readManifestNamespace(parsed);
 	} catch {

package/dist/{fs-safe-joAzTKB9.js → fs-safe-BK5ALzKD.js}

@@ -1,11 +1,11 @@
-import { u as expandHomePrefix } from "./paths-B_gs59ga.js";
-import { B as hasNodeErrorCode, H as isPathInside, I as sameFileIdentity, U as isSymlinkOpenError, V as isNotFoundPathError } from "./subsystem-D_zHSy02.js";
-import { i as logWarn } from "./logger-vVASmiVr.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-BzCkdlOk.js";
+import { u as expandHomePrefix } from "./paths-BIDPYPVC.js";
+import { B as hasNodeErrorCode, H as isPathInside, I as sameFileIdentity, U as isSymlinkOpenError, V as isNotFoundPathError } from "./subsystem-BZy3aWdW.js";
+import { i as logWarn } from "./logger-J4xjy-6D.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-E9ntDORB.js";
 import path from "node:path";
 import { constants } from "node:fs";
 import os from "node:os";
-import fs from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import { randomUUID } from "node:crypto";
 import { pipeline } from "node:stream/promises";
 
@@ -25,19 +25,19 @@ const ensureTrailingSep = (value) => value.endsWith(path.sep) ? value : value +
 async function expandRelativePathWithHome(relativePath) {
 	let home = process.env.HOME || process.env.USERPROFILE || os.homedir();
 	try {
-		home = await fs.realpath(home);
+		home = await fs$1.realpath(home);
 	} catch {}
 	return expandHomePrefix(relativePath, { home });
 }
 async function openVerifiedLocalFile(filePath, options) {
 	try {
-		if ((await fs.lstat(filePath)).isDirectory()) throw new SafeOpenError("not-file", "not a file");
+		if ((await fs$1.lstat(filePath)).isDirectory()) throw new SafeOpenError("not-file", "not a file");
 	} catch (err) {
 		if (err instanceof SafeOpenError) throw err;
 	}
 	let handle;
 	try {
-		handle = await fs.open(filePath, OPEN_READ_FLAGS);
+		handle = await fs$1.open(filePath, OPEN_READ_FLAGS);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "file not found");
 		if (isSymlinkOpenError(err)) throw new SafeOpenError("symlink", "symlink open blocked", { cause: err });
@@ -45,13 +45,13 @@ async function openVerifiedLocalFile(filePath, options) {
 		throw err;
 	}
 	try {
-		const [stat, lstat] = await Promise.all([handle.stat(), fs.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([handle.stat(), fs$1.lstat(filePath)]);
 		if (lstat.isSymbolicLink()) throw new SafeOpenError("symlink", "symlink not allowed");
 		if (!stat.isFile()) throw new SafeOpenError("not-file", "not a file");
 		if (options?.rejectHardlinks && stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during read");
-		const realPath = await fs.realpath(filePath);
-		const realStat = await fs.stat(realPath);
+		const realPath = await fs$1.realpath(filePath);
+		const realStat = await fs$1.stat(realPath);
 		if (options?.rejectHardlinks && realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		return {
@@ -69,7 +69,7 @@ async function openVerifiedLocalFile(filePath, options) {
 async function resolvePathWithinRoot(params) {
 	let rootReal;
 	try {
-		rootReal = await fs.realpath(params.rootDir);
+		rootReal = await fs$1.realpath(params.rootDir);
 	} catch (err) {
 		if (isNotFoundPathError(err)) throw new SafeOpenError("not-found", "root dir not found");
 		throw err;
@@ -170,7 +170,7 @@ function buildAtomicWriteTempPath(targetPath) {
 	return path.join(dir, `.${base}.${process.pid}.${randomUUID()}.tmp`);
 }
 async function writeTempFileForAtomicReplace(params) {
-	const tempHandle = await fs.open(params.tempPath, OPEN_WRITE_CREATE_FLAGS, params.mode);
+	const tempHandle = await fs$1.open(params.tempPath, OPEN_WRITE_CREATE_FLAGS, params.mode);
 	try {
 		if (typeof params.data === "string") await tempHandle.writeFile(params.data, params.encoding ?? "utf8");
 		else await tempHandle.writeFile(params.data);
@@ -180,7 +180,7 @@ async function writeTempFileForAtomicReplace(params) {
 	}
 }
 async function verifyAtomicWriteResult(params) {
-	const rootWithSep = ensureTrailingSep(await fs.realpath(params.rootDir));
+	const rootWithSep = ensureTrailingSep(await fs$1.realpath(params.rootDir));
 	const opened = await openVerifiedLocalFile(params.targetPath, { rejectHardlinks: true });
 	try {
 		if (!sameFileIdentity(opened.stat, params.expectedStat)) throw new SafeOpenError("path-mismatch", "path changed during write");
@@ -191,13 +191,13 @@ async function verifyAtomicWriteResult(params) {
 }
 async function resolveOpenedFileRealPathForHandle(handle, ioPath) {
 	try {
-		return await fs.realpath(ioPath);
+		return await fs$1.realpath(ioPath);
 	} catch (err) {
 		if (!isNotFoundPathError(err)) throw err;
 	}
 	const fdCandidates = process.platform === "linux" ? [`/proc/self/fd/${handle.fd}`, `/dev/fd/${handle.fd}`] : process.platform === "win32" ? [] : [`/dev/fd/${handle.fd}`];
 	for (const fdPath of fdCandidates) try {
-		return await fs.realpath(fdPath);
+		return await fs$1.realpath(fdPath);
 	} catch {}
 	throw new SafeOpenError("path-mismatch", "unable to resolve opened file path");
 }
@@ -212,10 +212,10 @@ async function openWritableFileWithinRoot(params) {
 	} catch (err) {
 		throw new SafeOpenError("invalid-path", "path alias escape blocked", { cause: err });
 	}
-	if (params.mkdir !== false) await fs.mkdir(path.dirname(resolved), { recursive: true });
+	if (params.mkdir !== false) await fs$1.mkdir(path.dirname(resolved), { recursive: true });
 	let ioPath = resolved;
 	try {
-		const resolvedRealPath = await fs.realpath(resolved);
+		const resolvedRealPath = await fs$1.realpath(resolved);
 		if (!isPathInside(rootWithSep, resolvedRealPath)) throw new SafeOpenError("outside-workspace", "file is outside workspace root");
 		ioPath = resolvedRealPath;
 	} catch (err) {
@@ -227,10 +227,10 @@ async function openWritableFileWithinRoot(params) {
 	let createdForWrite = false;
 	try {
 		try {
-			handle = await fs.open(ioPath, OPEN_WRITE_EXISTING_FLAGS, fileMode);
+			handle = await fs$1.open(ioPath, OPEN_WRITE_EXISTING_FLAGS, fileMode);
 		} catch (err) {
 			if (!isNotFoundPathError(err)) throw err;
-			handle = await fs.open(ioPath, OPEN_WRITE_CREATE_FLAGS, fileMode);
+			handle = await fs$1.open(ioPath, OPEN_WRITE_CREATE_FLAGS, fileMode);
 			createdForWrite = true;
 		}
 	} catch (err) {
@@ -244,7 +244,7 @@ async function openWritableFileWithinRoot(params) {
 		if (!stat.isFile()) throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 		if (stat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		try {
-			const lstat = await fs.lstat(ioPath);
+			const lstat = await fs$1.lstat(ioPath);
 			if (lstat.isSymbolicLink() || !lstat.isFile()) throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 			if (!sameFileIdentity(stat, lstat)) throw new SafeOpenError("path-mismatch", "path changed during write");
 		} catch (err) {
@@ -252,7 +252,7 @@ async function openWritableFileWithinRoot(params) {
 		}
 		const realPath = await resolveOpenedFileRealPathForHandle(handle, ioPath);
 		openedRealPath = realPath;
-		const realStat = await fs.stat(realPath);
+		const realStat = await fs$1.stat(realPath);
 		if (!sameFileIdentity(stat, realStat)) throw new SafeOpenError("path-mismatch", "path mismatch");
 		if (realStat.nlink > 1) throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		if (!isPathInside(rootWithSep, realPath)) throw new SafeOpenError("outside-workspace", "file is outside workspace root");
@@ -267,7 +267,7 @@ async function openWritableFileWithinRoot(params) {
 		const cleanupCreatedPath = createdForWrite && err instanceof SafeOpenError;
 		const cleanupPath = openedRealPath ?? ioPath;
 		await handle.close().catch(() => {});
-		if (cleanupCreatedPath) await fs.rm(cleanupPath, { force: true }).catch(() => {});
+		if (cleanupCreatedPath) await fs$1.rm(cleanupPath, { force: true }).catch(() => {});
 		throw err;
 	}
 }
@@ -290,7 +290,7 @@ async function writeFileWithinRoot(params) {
 			encoding: params.encoding,
 			mode: targetMode || 384
 		});
-		await fs.rename(tempPath, destinationPath);
+		await fs$1.rename(tempPath, destinationPath);
 		tempPath = null;
 		try {
 			await verifyAtomicWriteResult({
@@ -303,7 +303,7 @@ async function writeFileWithinRoot(params) {
 			throw err;
 		}
 	} finally {
-		if (tempPath) await fs.rm(tempPath, { force: true }).catch(() => {});
+		if (tempPath) await fs$1.rm(tempPath, { force: true }).catch(() => {});
 	}
 }
 async function copyFileWithinRoot(params) {
@@ -331,7 +331,7 @@ async function copyFileWithinRoot(params) {
 		});
 		await pipeline(sourceStream, targetStream);
 	} catch (err) {
-		if (target?.createdForWrite) await fs.rm(target.openedRealPath, { force: true }).catch(() => {});
+		if (target?.createdForWrite) await fs$1.rm(target.openedRealPath, { force: true }).catch(() => {});
 		throw err;
 	} finally {
 		if (!sourceClosedByStream) await source.handle.close().catch(() => {});

package/dist/{gateway-cli-BZFHtE2A.js → gateway-cli-CrFsVy3G.js}

@@ -2,7 +2,7 @@ import { g as resolveStateDir, i as isNixMode, r as STATE_DIR, t as CONFIG_PATH,
 import { $ as readLoggingConfig, A as setVerbose, C as truncateUtf16Safe, F as isRich, I as theme, K as resolveFileLogProfile, L as getChildLogger, P as colorize, R as getLogger, W as appendFileLog, c as ensureDir, dt as openBoundaryFileSync, ft as openVerifiedFileSync, g as resolveUserPath, pt as sameFileIdentity, t as CONFIG_DIR, ut as openBoundaryFile, vt as isNotFoundPathError, y as shortenHomePath, yt as isPathInside, z as getResolvedLoggerSettings } from "./utils-RlDPCeiE.js";
 import { t as isPlainObject } from "./plain-object-CLm2c5Nu.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-DDIdpLYh.js";
-import { $ as emitGatewayRestart, $n as OPENAI_TTS_VOICES, $t as runWithModelFallback, A as setHeartbeatsEnabled, An as resetDirectoryCache, Ar as resolveInputFileLimits, B as snapshotRunPendingWrites, Bt as handleSlackHttpRequest, C as runSubagentAnnounceFlow, Cn as ensureOutboundSessionEntry, Cr as DEFAULT_INPUT_IMAGE_MAX_BYTES, Ct as clearPluginRegistryCaches, D as resolveHeartbeatSummaryForAgent, Dn as resolveSessionDeliveryTarget, Dr as extractFileContentFromSource, Dt as createPluginRuntime, E as resolveHeartbeatConfig, En as resolveOutboundTarget, Er as DEFAULT_INPUT_TIMEOUT_MS, Et as takePendingActivationMigration, F as onHeartbeatEvent, G as buildDefaultToolPolicyPipelineSteps, Gn as resolveTtsAutoMode, Gt as agentCommandFromIngress, Hn as isTtsEnabled, Ht as requestBodyErrorToText, I as redactSensitiveHeartbeatEvent, J as readLatestAssistantReply, Jn as resolveTtsProviderOrder, Jt as createOutboundSendDeps, Kn as resolveTtsConfig, Kt as resolveAgentDeliveryPlan, L as isCronSystemEvent, Ln as setTaskPipelineStatus, M as runWakeGate, Mn as isAbortRequestText, Mr as checkWorkspaceLaneAdmission, N as resolveHeartbeatVisibility, Nr as resolveWorkspaceLaneConfig, O as runHeartbeatOnce, On as resolveOutboundChannelPlugin, Or as extractImageContentFromSource, Ot as requestNudge, P as getLastHeartbeatEvent, Pr as resolveAgentTimeoutMs, Q as deferGatewayRestartUntilIdle, Qn as OPENAI_TTS_MODELS, Qt as createOutboundSendDeps$1, R as resolveCronSession, Rn as DEFAULT_MAX_PARALLEL, Rt as resolveAgentOutboundIdentity, Sr as resolveSendPolicy, St as resolvePluginTools, T as runMainAgentTurn, Tn as resolveHeartbeatDeliveryTarget, Tr as DEFAULT_INPUT_MAX_REDIRECTS, Tt as loadOpenClawPlugins, U as resolveExecConfig, Un as isTtsProviderConfigured, V as waitForPendingWrites, Vn as getTtsProvider, Vt as readJsonBodyWithLimit, W as applyToolPolicyPipeline, Wn as resolveTtsApiKey, Xn as setTtsProvider, Y as resolveAnnounceTargetFromKey, Yn as setTtsEnabled, Z as consumeGatewaySigusr1RestartAuthorization, Zn as textToSpeech, Zt as createDefaultDeps, _ as loadSessionUsageTimeSeries, _t as hasLegacyDeliveryHints, ar as parseLeadingStamps, at as triggerOpenClawRestart, b as initSubagentRegistry, bn as createReplyDispatcher, br as getSessionBindingService, bt as persistBrowserProxyFiles, c as resolveChannelAccountEnabled, cr as resolveSessionLane, ct as formatRestartSentinelMessage, dn as buildSafeExternalPrompt, dr as isSystemEventContextChanged, en as getCliSessionId, er as clearSessionQueues, et as isGatewaySigusr1RestartExternallyAllowed, fn as detectSuspiciousPatterns, ft as writeRestartSentinel, g as loadSessionLogs, gn as buildHistoryContextFromEntries, gt as buildDeliveryFromLegacyPayload, h as loadSessionCostSummary, hr as requestHeartbeatNow, ht as migrateLegacyCronPayload, ir as stripHeartbeatToken, it as setPreRestartDeferralCheck, j as startHeartbeatRunner, jn as notifyInterruptedRuns, jr as WorkspaceLaneDeniedError, jt as loadProviderUsageSummary, kr as normalizeMimeList, l as BARE_SESSION_RESET_PROMPT, lr as ToolInputError, m as loadCostUsageSummary, mn as isExternalHookSession, mt as normalizeCronJobPatch, n as buildWorkspaceLaneActor, nn as runCliAgent, nr as removeQueuedFollowupRun, nt as scheduleGatewaySigusr1Restart, on as resolveSessionAuthProfileOverride, or as stripLeadingStamps, ot as consumeRestartSentinel, p as discoverAllSessions, pn as getHookType, pt as normalizeCronJobCreate, q as createOpenClawTools, qn as resolveTtsPrefsPath, qt as resolveAgentOutboundTarget, r as formatWorkspaceLaneDeniedNotice, rr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, rt as setGatewaySigusr1RestartPolicy, sn as resolveAgentAvatar, sr as stripLeadingStampsFlush, st as formatDoctorNonInteractiveHint, tn as setCliSessionId, tr as getExistingFollowupQueue, tt as markGatewaySigusr1RestartHandled, ur as enqueueSystemEvent, ut as summarizeRestartSentinel, vn as dispatchInboundMessage, vr as ACP_SESSION_IDENTITY_RENDERER_VERSION, vt as stripLegacyDeliveryFields, wn as resolveOutboundSessionRoute, wr as DEFAULT_INPUT_IMAGE_MIMES, wt as getLoadedAnalysisConcurrency, x as listDescendantRunsForRequester, xn as getTotalPendingReplies, xt as getPluginToolMeta, y as countActiveDescendantRuns, yn as setDispatchInboundAdmissionRejectionFor, yr as isAcpEnabledByPolicy, yt as applyBrowserProxyPaths, z as runEmbeddedPiAgent, zn as resolveUserTimezone } from "./reply-CqYQeNjd.js";
+import { $ as emitGatewayRestart, $n as OPENAI_TTS_VOICES, $t as runWithModelFallback, A as setHeartbeatsEnabled, An as resetDirectoryCache, Ar as resolveInputFileLimits, B as snapshotRunPendingWrites, Bt as handleSlackHttpRequest, C as runSubagentAnnounceFlow, Cn as ensureOutboundSessionEntry, Cr as DEFAULT_INPUT_IMAGE_MAX_BYTES, Ct as clearPluginRegistryCaches, D as resolveHeartbeatSummaryForAgent, Dn as resolveSessionDeliveryTarget, Dr as extractFileContentFromSource, Dt as createPluginRuntime, E as resolveHeartbeatConfig, En as resolveOutboundTarget, Er as DEFAULT_INPUT_TIMEOUT_MS, Et as takePendingActivationMigration, F as onHeartbeatEvent, G as buildDefaultToolPolicyPipelineSteps, Gn as resolveTtsAutoMode, Gt as agentCommandFromIngress, Hn as isTtsEnabled, Ht as requestBodyErrorToText, I as redactSensitiveHeartbeatEvent, J as readLatestAssistantReply, Jn as resolveTtsProviderOrder, Jt as createOutboundSendDeps, Kn as resolveTtsConfig, Kt as resolveAgentDeliveryPlan, L as isCronSystemEvent, Ln as setTaskPipelineStatus, M as runWakeGate, Mn as isAbortRequestText, Mr as checkWorkspaceLaneAdmission, N as resolveHeartbeatVisibility, Nr as resolveWorkspaceLaneConfig, O as runHeartbeatOnce, On as resolveOutboundChannelPlugin, Or as extractImageContentFromSource, Ot as requestNudge, P as getLastHeartbeatEvent, Pr as resolveAgentTimeoutMs, Q as deferGatewayRestartUntilIdle, Qn as OPENAI_TTS_MODELS, Qt as createOutboundSendDeps$1, R as resolveCronSession, Rn as DEFAULT_MAX_PARALLEL, Rt as resolveAgentOutboundIdentity, Sr as resolveSendPolicy, St as resolvePluginTools, T as runMainAgentTurn, Tn as resolveHeartbeatDeliveryTarget, Tr as DEFAULT_INPUT_MAX_REDIRECTS, Tt as loadOpenClawPlugins, U as resolveExecConfig, Un as isTtsProviderConfigured, V as waitForPendingWrites, Vn as getTtsProvider, Vt as readJsonBodyWithLimit, W as applyToolPolicyPipeline, Wn as resolveTtsApiKey, Xn as setTtsProvider, Y as resolveAnnounceTargetFromKey, Yn as setTtsEnabled, Z as consumeGatewaySigusr1RestartAuthorization, Zn as textToSpeech, Zt as createDefaultDeps, _ as loadSessionUsageTimeSeries, _t as hasLegacyDeliveryHints, ar as parseLeadingStamps, at as triggerOpenClawRestart, b as initSubagentRegistry, bn as createReplyDispatcher, br as getSessionBindingService, bt as persistBrowserProxyFiles, c as resolveChannelAccountEnabled, cr as resolveSessionLane, ct as formatRestartSentinelMessage, dn as buildSafeExternalPrompt, dr as isSystemEventContextChanged, en as getCliSessionId, er as clearSessionQueues, et as isGatewaySigusr1RestartExternallyAllowed, fn as detectSuspiciousPatterns, ft as writeRestartSentinel, g as loadSessionLogs, gn as buildHistoryContextFromEntries, gt as buildDeliveryFromLegacyPayload, h as loadSessionCostSummary, hr as requestHeartbeatNow, ht as migrateLegacyCronPayload, ir as stripHeartbeatToken, it as setPreRestartDeferralCheck, j as startHeartbeatRunner, jn as notifyInterruptedRuns, jr as WorkspaceLaneDeniedError, jt as loadProviderUsageSummary, kr as normalizeMimeList, l as BARE_SESSION_RESET_PROMPT, lr as ToolInputError, m as loadCostUsageSummary, mn as isExternalHookSession, mt as normalizeCronJobPatch, n as buildWorkspaceLaneActor, nn as runCliAgent, nr as removeQueuedFollowupRun, nt as scheduleGatewaySigusr1Restart, on as resolveSessionAuthProfileOverride, or as stripLeadingStamps, ot as consumeRestartSentinel, p as discoverAllSessions, pn as getHookType, pt as normalizeCronJobCreate, q as createOpenClawTools, qn as resolveTtsPrefsPath, qt as resolveAgentOutboundTarget, r as formatWorkspaceLaneDeniedNotice, rr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, rt as setGatewaySigusr1RestartPolicy, sn as resolveAgentAvatar, sr as stripLeadingStampsFlush, st as formatDoctorNonInteractiveHint, tn as setCliSessionId, tr as getExistingFollowupQueue, tt as markGatewaySigusr1RestartHandled, ur as enqueueSystemEvent, ut as summarizeRestartSentinel, vn as dispatchInboundMessage, vr as ACP_SESSION_IDENTITY_RENDERER_VERSION, vt as stripLegacyDeliveryFields, wn as resolveOutboundSessionRoute, wr as DEFAULT_INPUT_IMAGE_MIMES, wt as getLoadedAnalysisConcurrency, x as listDescendantRunsForRequester, xn as getTotalPendingReplies, xt as getPluginToolMeta, y as countActiveDescendantRuns, yn as setDispatchInboundAdmissionRejectionFor, yr as isAcpEnabledByPolicy, yt as applyBrowserProxyPaths, z as runEmbeddedPiAgent, zn as resolveUserTimezone } from "./reply-BSMDupOw.js";
 import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, M as matchesSkillFilter, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-BKt9T-GX.js";
 import { m as defaultRuntime, n as runtimeForLogger, o as setConsoleSubsystemFilter, s as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-Cwzs7yN0.js";
 import { B as isSubagentSessionKey, D as toDeviceSenderId, E as toAgentStoreSessionKey, L as isCronRunSessionKey, O as DEFAULT_ACCOUNT_ID, T as toAgentRequestSessionKey, V as parseAgentSessionKey, _ as resolveAgentIdFromSessionKey, a as buildAgentMainSessionKey, b as resolveDeviceIdentity, g as resolveAgentIdFromQualifiedSessionKey, k as normalizeAccountId$1, m as normalizeMainKey, p as normalizeAgentId, s as classifySessionKeyShape, t as DEFAULT_AGENT_ID, x as resolveLinkedPeerIdForChannel, y as resolveConfiguredCanonicalIdentity } from "./session-key-AbnCDH5g.js";
@@ -22,21 +22,21 @@ import "./send-Ciya0KBU.js";
 import "./send-B0cLjB1a.js";
 import { n as assertNoPathAliasEscape } from "./path-alias-guards-i_OY-fQZ.js";
 import { i as openFileWithinRoot, l as writeFileWithinRoot, s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-DGEzvx_b.js";
-import { D as normalizeMediaProviderId, E as listAutoDetectableProviders, T as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, g as registerUnhandledRejectionHandler, n as buildProviderRegistry, x as resolveModelEntries, y as resolveCapabilityConfig } from "./audio-transcription-runner-9GXPmTBK.js";
+import { D as normalizeMediaProviderId, E as listAutoDetectableProviders, T as getProviderDeclaredEnvVars, c as transcribeBufferedPcmWithMediaUnderstanding, g as registerUnhandledRejectionHandler, n as buildProviderRegistry, x as resolveModelEntries, y as resolveCapabilityConfig } from "./audio-transcription-runner-DsqwKJ49.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-DYe45tfU.js";
 import { t as SsrFBlockedError } from "./ssrf-BT-nDwMe.js";
 import "./proxy-fetch-cvrj6tRR.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-CNiEVKpL.js";
-import "./pi-embedded-helpers-StwgdB31.js";
+import "./pi-embedded-helpers-ClJpdsSV.js";
 import "./local-roots-DsI-jgiH.js";
 import { c as detectMime } from "./image-ops-C1n6sFa0.js";
-import { a as testRegexWithBoundedInput, i as compileSafeRegex } from "./redact-DVtH5RKp.js";
+import { a as testRegexWithBoundedInput, i as compileSafeRegex, n as redactSensitiveText } from "./redact-DVtH5RKp.js";
 import { i as formatErrorMessage, o as hasErrnoCode, r as formatErrorChainMessage, s as isErrno } from "./errors-DsWFNWeE.js";
 import "./models-config-CjZ8V2xB.js";
 import { n as loadModelCatalog } from "./model-catalog-DkNCpXw1.js";
 import { t as extractTextFromChatContent } from "./chat-content-gNeiRVLV.js";
-import "./pi-embedded-utils-DjVnTKKi.js";
-import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-BijP-jd2.js";
+import "./pi-embedded-utils-C-FQE63E.js";
+import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-389fAlDt.js";
 import { i as listCoreToolSections, n as PROFILE_OPTIONS, o as resolveCoreToolProfiles } from "./tool-catalog-G7vTo5xu.js";
 import { i as resolveRelayAuthTokenForPort, n as resolveGatewayRelayToken } from "./extension-relay-auth-B0B6O1Uy.js";
 import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-C87iDP6E.js";
@@ -44,7 +44,7 @@ import { t as safeEqualSecret } from "./secret-equal-BDnm9uDO.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-B-txZJue.js";
 import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-4CDyA3Kv.js";
 import { a as isDirectLoopbackProvenance, c as AUTH_RATE_LIMIT_SCOPE_BROWSER_EXTENSION, d as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, f as createAuthRateLimiter, i as captureTransportProvenance, l as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, n as authorizeHttpGatewayConnect, o as isLocalDirectRequest, p as normalizeRateLimitClientIp, r as authorizeWsControlUiGatewayConnect, s as resolveGatewayAuth, t as assertGatewayAuthConfigured, u as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH } from "./auth-DI9lJ6zs.js";
-import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-DgKj77jj.js";
+import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-CV1udh3Y.js";
 import { d as hasBinary } from "./frontmatter-CG_iFu2b.js";
 import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-tp4zKf2h.js";
 import "./store-Y2ec77yA.js";
@@ -54,7 +54,7 @@ import { a as inspectPortUsage, l as formatPortDiagnostics, r as ensurePortAvail
 import "./server-middleware-DoOMQ70B.js";
 import { n as readJsonFile, r as writeJsonAtomic, t as createAsyncLock } from "./json-files-XjEDt0Xv.js";
 import { B as PASS_METRICS_MAX_BYTES, H as isPassIdentifier, R as PASS_ITEMS_MAX_KEYS, U as onRunInvalidation, X as decodeKeysetCursor, Z as encodeKeysetCursor, on as formatMessageStamp, r as resolveSessionStorageConfig, vn as deriveSessionTotalTokens, yn as hasNonzeroUsage, z as PASS_MEASUREMENT_SCHEMA_VERSION } from "./storage-config-Bb2blXv4.js";
-import { $ as resolveAgentMainSessionKey, J as stripInlineDirectiveTagsForDisplay, Q as canonicalizeMainSessionAlias, S as runGlobalGatewayStopSafely, Y as stripInlineDirectiveTagsFromMessageForDisplay, et as resolveExplicitAgentSessionKey, n as parseSessionThreadInfo, nt as resolveMainSessionKeyFromConfig, o as hydrateAndAppendToBackend, t as extractDeliveryInfo, tt as resolveMainSessionKey, v as getGlobalHookRunner, x as resetGlobalHookRunner, y as getGlobalPluginRegistry } from "./sessions-B03PIf-m.js";
+import { $ as resolveAgentMainSessionKey, J as stripInlineDirectiveTagsForDisplay, Q as canonicalizeMainSessionAlias, S as runGlobalGatewayStopSafely, Y as stripInlineDirectiveTagsFromMessageForDisplay, et as resolveExplicitAgentSessionKey, n as parseSessionThreadInfo, nt as resolveMainSessionKeyFromConfig, o as hydrateAndAppendToBackend, t as extractDeliveryInfo, tt as resolveMainSessionKey, v as getGlobalHookRunner, x as resetGlobalHookRunner, y as getGlobalPluginRegistry } from "./sessions-D4geZIf4.js";
 import "./reset-Bf7dzoZP.js";
 import { n as isDiagnosticsEnabled, r as onDiagnosticEvent, t as emitDiagnosticEvent } from "./diagnostic-events-QbXid8kq.js";
 import { i as parseAbsoluteTimeMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-DhZrIgLm.js";
@@ -63,25 +63,25 @@ import "./task-run-types-EDIBPHtM.js";
 import { i as clientResumeRecordArtifactId, o as isVerificationStoreError, t as CLIENT_RESUME_RECORD_KIND } from "./verification-store-qIw75jzg.js";
 import { i as normalizeInputProvenance } from "./input-provenance-qgaZGYuK.js";
 import { r as resolveToolDisplay } from "./tool-display-CVHw51hW.js";
-import "./provider-image-CApPjEsW.js";
+import "./provider-image-BvBYtGGJ.js";
 import "./api-key-rotation-T3SeghpQ.js";
 import "./pi-model-discovery-BfjL_ZsW.js";
 import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-DGB4x7VE.js";
-import { A as computeBackoff, D as jsonUtf8Bytes, O as lookupContextTokens, S as stripEnvelopeFromMessages, _ as resolveSessionModelRef, c as canonicalizeSpawnedByForAgent, g as resolveGatewaySessionStoreTarget, h as pruneLegacyStoreKeys, j as sleepWithAbort, m as loadSessionEntry, o as normalizeReplyPayloadsForDelivery, p as loadCombinedSessionStoreForGateway, s as stampReplyActivity, t as deliverOutboundPayloads, u as listAgentsForGateway, v as resolveSessionStoreKey, x as stripEnvelopeFromMessage, y as capArrayByJsonBytes } from "./deliver-BGZedjpd.js";
+import { A as computeBackoff, D as jsonUtf8Bytes, O as lookupContextTokens, S as stripEnvelopeFromMessages, _ as resolveSessionModelRef, c as canonicalizeSpawnedByForAgent, g as resolveGatewaySessionStoreTarget, h as pruneLegacyStoreKeys, j as sleepWithAbort, m as loadSessionEntry, o as normalizeReplyPayloadsForDelivery, p as loadCombinedSessionStoreForGateway, s as stampReplyActivity, t as deliverOutboundPayloads, u as listAgentsForGateway, v as resolveSessionStoreKey, x as stripEnvelopeFromMessage, y as capArrayByJsonBytes } from "./deliver-CD-qJ08p.js";
 import { r as isRestartEnabled } from "./commands-DWbl2kpP.js";
 import "./commands-registry-D7yTZHJ-.js";
 import { t as redactIdentifier } from "./redact-identifier-S29WK2by.js";
-import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-CdJb6i0b.js";
+import { A as setActiveRunProbe, M as stopDiagnosticHeartbeat, j as startDiagnosticHeartbeat, k as resolveStuckSessionWarnMs, t as clearActiveRunProbe } from "./diagnostic-BzGocbak.js";
 import { u as snapshotActiveRuns } from "./diagnostic-session-state-KqTjDAKe.js";
 import { t as CommandLane } from "./lanes-BESSOwBL.js";
-import { _ as waitForActiveTasks, g as setGatewayDrainState, h as setCommandLaneConcurrency, m as resetAllLanes, n as CommandLaneClearedError, o as enqueueCommandInLane, p as markGatewayDraining, r as GatewayDrainingError, s as getActiveTaskCount, u as getTotalQueueSize } from "./command-queue-3hrr088f.js";
+import { _ as waitForActiveTasks, g as setGatewayDrainState, h as setCommandLaneConcurrency, m as resetAllLanes, n as CommandLaneClearedError, o as enqueueCommandInLane, p as markGatewayDraining, r as GatewayDrainingError, s as getActiveTaskCount, u as getTotalQueueSize } from "./command-queue-C4uOOl0Z.js";
 import "./user-run-recording-DwTzVwQo.js";
 import { a as resolveSessionRunStore, t as createSessionRunRecorder } from "./recorder-BY6ZM_aZ.js";
 import { t as getGatewayInstanceId } from "./gateway-instance-id-Sk1z_oZM.js";
 import { t as withTimeout } from "./with-timeout-6kjlWo_e.js";
-import { a as resolveAgentSessionDirs, t as getAcpSessionManager } from "./manager-CsTeZuhu.js";
-import { $ as validateGlanceWidgetsListParams, $n as rotateDeviceToken, $t as validateSkillsUpdateParams, A as validateConfigSetParams, An as validateWizardStatusParams, At as validateSessionsMaintenanceRunParams, B as validateDeviceIdentityUnlinkParams, Bn as normalizeDeviceMetadataForAuth, C as validateChatSurfacesGetParams, Cn as validateUpdateRunParams, D as validateConfigGetParams, Dn as validateWizardCancelParams, E as validateConfigApplyParams, En as validateWebLoginWaitParams, F as validateCronRunParams, Fn as errorShape, G as validateDeviceTokenRevokeParams, Gn as ensureDeviceToken, Gt as validateSessionsStorageStatusParams, H as validateDevicePairListParams, Hn as approveBootstrapDevicePairing, Ht as validateSessionsSteerParams, I as validateCronRunsParams, J as validateExecApprovalResolveParams, Jn as listDevicePairing, Jt as validateSessionsTitlePrepareParams, K as validateDeviceTokenRotateParams, Kn as getPairedDevice, Kt as validateSessionsStorageValidateParams, L as validateCronStatusParams, M as validateCronAddParams, Mn as RUNS_INVALIDATED_EVENT, N as validateCronListParams, O as validateConfigPatchParams, On as validateWizardNextParams, P as validateCronRemoveParams, Pn as ErrorCodes, Q as validateExecApprovalsSetParams, Qn as revokeDeviceToken, Qt as validateSkillsStatusParams, R as validateCronUpdateParams, Rn as buildDeviceAuthPayload, S as validateChatSendParams, Sn as validateTtsSpeakParams, T as validateChatSurfacesPinParams, Tn as validateWebLoginStartParams, U as validateDevicePairRejectParams, Un as approveDevicePairing, Ut as validateSessionsStorageBackupParams, V as validateDevicePairApproveParams, W as validateDevicePairRemoveParams, Wn as consumeDeviceBootstrapToken, Wt as validateSessionsStorageImportParams, X as validateExecApprovalsNodeGetParams, Xn as removePairedDevice, Xt as validateSkillsBinsParams, Y as validateExecApprovalsGetParams, Yn as rejectDevicePairing, Yt as validateSessionsUsageParams, Z as validateExecApprovalsNodeSetParams, Zn as requestDevicePairing, Zt as validateSkillsInstallParams, _ as validateChannelsStatusParams, _n as validateTasksRunsEventsParams, _t as validateRequestFrame, a as validateAgentIdentityParams, an as validateTalkRealtimeMarkParams, at as validateNodeEventParams, b as validateChatHistoryParams, bn as validateToolsCatalogParams, bt as validateSendParams, c as validateAgentWaitParams, cn as validateTalkRealtimeStopParams, ct as validateNodeListParams, d as validateAgentsFilesGetParams, dn as validateTalkSessionBargeInParams, dt as validateNodePairRejectParams, en as validateTalkCatalogParams, er as summarizeDeviceTokens, et as validateLogsTailParams, f as validateAgentsFilesListParams, fn as validateTalkSessionCancelTurnParams, fr as normalizeDevicePublicKeyBase64Url, ft as validateNodePairRequestParams, g as validateChannelsLogoutParams, gn as validateTasksRunEventsParams, gt as validatePushTestParams, h as validateAgentsUpdateParams, hn as validateTalkSessionMarkParams, ht as validatePollParams, i as formatValidationErrors, in as validateTalkRealtimeBargeInParams, it as validateNodeDescribeParams, j as validateConnectParams, jn as PROTOCOL_VERSION, k as validateConfigSchemaParams, kn as validateWizardStartParams, l as validateAgentsCreateParams, ln as validateTalkRealtimeToolResultParams, lt as validateNodePairApproveParams, m as validateAgentsListParams, mn as validateTalkSessionCreateParams, mt as validateNodeRenameParams, nn as validateTalkModeParams, nr as verifyDeviceBootstrapToken, nt as validateModelsAuthStatusParams, o as validateAgentNudgeParams, on as validateTalkRealtimeSessionParams, or as operatorScopeSatisfied, ot as validateNodeInvokeParams, p as validateAgentsFilesSetParams, pn as validateTalkSessionCloseParams, pr as verifyDeviceSignature, pt as validateNodePairVerifyParams, q as validateExecApprovalRequestParams, rn as validateTalkRealtimeAudioParams, rr as verifyDeviceToken, rt as validateModelsListParams, s as validateAgentParams, sn as validateTalkRealtimeStatusParams, sr as roleScopesAllow, st as validateNodeInvokeResultParams, tn as validateTalkConfigParams, tr as updatePairedDeviceMetadata, tt as validateMemoryIndexParams, u as validateAgentsDeleteParams, un as validateTalkSessionAppendAudioParams, ur as deriveDeviceIdFromPublicKey, ut as validateNodePairListParams, v as validateChatAbortParams, vn as validateTasksRunsGetParams, vt as validateSecretsResolveParams, w as validateChatSurfacesListParams, wn as validateWakeParams, x as validateChatInjectParams, xn as validateTtsReadAloudStatusParams, xt as validateSessionsAbortParams, y as validateChatActivityEvent, yn as validateTasksRunsListParams, yt as validateSecretsResolveResult, z as validateDeviceIdentityLinkParams, zn as buildDeviceAuthPayloadV3 } from "./client-CIDXfGgo.js";
-import { _ as hasNarrowSessionScope, d as APPROVALS_SCOPE, f as PAIRING_SCOPE, g as authorizeOperatorScopesForMethod, h as WRITE_SCOPE, m as SESSION_READ_SCOPE, n as callGateway, p as READ_SCOPE, u as ADMIN_SCOPE$1, v as isHealthProbeAllowedForScopes, x as loadGatewayTlsRuntime$1, y as isNodeRoleMethod } from "./call-CUY8VoHh.js";
+import { a as resolveAgentSessionDirs, t as getAcpSessionManager } from "./manager-DCXdygsq.js";
+import { $ as validateGlanceWidgetsListParams, $n as revokeDeviceToken, $t as validateSkillsStatusParams, A as validateConfigSetParams, An as validateWizardStartParams, B as validateDeviceIdentityUnlinkParams, Bn as buildDeviceAuthPayloadV3, C as validateChatSurfacesGetParams, Cn as validateTtsSpeakParams, D as validateConfigGetParams, Dn as validateWebLoginWaitParams, E as validateConfigApplyParams, En as validateWebLoginStartParams, F as validateCronRunParams, Fn as ErrorCodes, G as validateDeviceTokenRevokeParams, Gn as consumeDeviceBootstrapToken, Gt as validateSessionsStorageImportParams, H as validateDevicePairListParams, I as validateCronRunsParams, In as errorShape, J as validateExecApprovalResolveParams, K as validateDeviceTokenRotateParams, Kn as ensureDeviceToken, Kt as validateSessionsStorageStatusParams, L as validateCronStatusParams, M as validateCronAddParams, Mn as PROTOCOL_VERSION, N as validateCronListParams, Nn as RUNS_INVALIDATED_EVENT, O as validateConfigPatchParams, On as validateWizardCancelParams, P as validateCronRemoveParams, Q as validateExecApprovalsSetParams, Qn as requestDevicePairing, Qt as validateSkillsInstallParams, R as validateCronUpdateParams, S as validateChatSendParams, Sn as validateTtsReadAloudStatusParams, T as validateChatSurfacesPinParams, Tn as validateWakeParams, U as validateDevicePairRejectParams, Un as approveBootstrapDevicePairing, Ut as validateSessionsSteerParams, V as validateDevicePairApproveParams, Vn as normalizeDeviceMetadataForAuth, W as validateDevicePairRemoveParams, Wn as approveDevicePairing, Wt as validateSessionsStorageBackupParams, X as validateExecApprovalsNodeGetParams, Xn as rejectDevicePairing, Xt as validateSessionsUsageParams, Y as validateExecApprovalsGetParams, Yn as listDevicePairing, Yt as validateSessionsTitlePrepareParams, Z as validateExecApprovalsNodeSetParams, Zn as removePairedDevice, Zt as validateSkillsBinsParams, _ as validateChannelsStatusParams, _n as validateTasksRunEventsParams, _t as validateRequestFrame, a as validateAgentIdentityParams, an as validateTalkRealtimeBargeInParams, at as validateNodeEventParams, b as validateChatHistoryParams, bn as validateTasksRunsListParams, bt as validateSendParams, c as validateAgentWaitParams, cn as validateTalkRealtimeStatusParams, cr as roleScopesAllow, ct as validateNodeListParams, d as validateAgentsFilesGetParams, dn as validateTalkSessionAppendAudioParams, dr as deriveDeviceIdFromPublicKey, dt as validateNodePairRejectParams, en as validateSkillsUpdateParams, er as rotateDeviceToken, et as validateLogsTailParams, f as validateAgentsFilesListParams, fn as validateTalkSessionBargeInParams, ft as validateNodePairRequestParams, g as validateChannelsLogoutParams, gn as validateTalkSessionMarkParams, gt as validatePushTestParams, h as validateAgentsUpdateParams, hn as validateTalkSessionCreateParams, ht as validatePollParams, i as formatValidationErrors, in as validateTalkRealtimeAudioParams, ir as verifyDeviceToken, it as validateNodeDescribeParams, j as validateConnectParams, jn as validateWizardStatusParams, jt as validateSessionsMaintenanceRunParams, k as validateConfigSchemaParams, kn as validateWizardNextParams, l as validateAgentsCreateParams, ln as validateTalkRealtimeStopParams, lt as validateNodePairApproveParams, m as validateAgentsListParams, mn as validateTalkSessionCloseParams, mr as verifyDeviceSignature, mt as validateNodeRenameParams, nn as validateTalkConfigParams, nr as updatePairedDeviceMetadata, nt as validateModelsAuthStatusParams, o as validateAgentNudgeParams, on as validateTalkRealtimeMarkParams, ot as validateNodeInvokeParams, p as validateAgentsFilesSetParams, pn as validateTalkSessionCancelTurnParams, pr as normalizeDevicePublicKeyBase64Url, pt as validateNodePairVerifyParams, q as validateExecApprovalRequestParams, qn as getPairedDevice, qt as validateSessionsStorageValidateParams, rn as validateTalkModeParams, rr as verifyDeviceBootstrapToken, rt as validateModelsListParams, s as validateAgentParams, sn as validateTalkRealtimeSessionParams, sr as operatorScopeSatisfied, st as validateNodeInvokeResultParams, tn as validateTalkCatalogParams, tr as summarizeDeviceTokens, tt as validateMemoryIndexParams, u as validateAgentsDeleteParams, un as validateTalkRealtimeToolResultParams, ut as validateNodePairListParams, v as validateChatAbortParams, vn as validateTasksRunsEventsParams, vt as validateSecretsResolveParams, w as validateChatSurfacesListParams, wn as validateUpdateRunParams, x as validateChatInjectParams, xn as validateToolsCatalogParams, xt as validateSessionsAbortParams, y as validateChatActivityEvent, yn as validateTasksRunsGetParams, yt as validateSecretsResolveResult, z as validateDeviceIdentityLinkParams, zn as buildDeviceAuthPayload } from "./client-DA6hPHoC.js";
+import { _ as hasNarrowSessionScope, d as APPROVALS_SCOPE, f as PAIRING_SCOPE, g as authorizeOperatorScopesForMethod, h as WRITE_SCOPE, m as SESSION_READ_SCOPE, n as callGateway, p as READ_SCOPE, u as ADMIN_SCOPE$1, v as isHealthProbeAllowedForScopes, x as loadGatewayTlsRuntime$1, y as isNodeRoleMethod } from "./call-CsmPnXmY.js";
 import "./pairing-token-WMwBEwOn.js";
 import "./fetch-qfS6MAEz.js";
 import { a as readChannelAllowFromStoreSync } from "./pairing-store-BS-em41G.js";
@@ -91,12 +91,12 @@ import "./exec-safe-bin-runtime-policy-lZujCwcg.js";
 import { _ as matchSystemRunApprovalBinding, g as buildSystemRunApprovalBinding, h as resolveSystemRunApprovalRuntimeContext, m as resolveSystemRunApprovalRequestContext, v as missingSystemRunApprovalBinding, y as toSystemRunApprovalMismatchError } from "./nodes-screen-m0Ycb5Os.js";
 import { i as defaultOrphanLedgerFilePath, r as createOrphanLedger, t as getProcessSupervisor } from "./supervisor-DorEvxWs.js";
 import { r as resolveSystemRunCommand, t as canonicalizeLegacySystemRunParams } from "./system-run-command-Dpq-Oa0u.js";
-import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, m as WORKSPACE_LANE_DENIED_REASON, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-IiwTs8II.js";
-import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-vCw_F2ZO.js";
+import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, m as WORKSPACE_LANE_DENIED_REASON, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-B30hT0x-.js";
+import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-TPOj4wqX.js";
 import { a as resolveAgentIdentity, t as createReplyPrefixOptions } from "./reply-prefix-BNqoIR_e.js";
-import { u as buildOutboundSessionContext } from "./outbound-message-hooks-ZPwBUN_R.js";
-import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-BWtea6IA.js";
-import { T as collectTelegramDuplicatePollerDiagnostics, d as loadCronStore, f as resolveCronStorePath, p as saveCronStore } from "./send-7pf6IvCv.js";
+import { u as buildOutboundSessionContext } from "./outbound-message-hooks-CsYq3_vL.js";
+import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-BBKlU1es.js";
+import { T as collectTelegramDuplicatePollerDiagnostics, d as loadCronStore, f as resolveCronStorePath, p as saveCronStore } from "./send-xXKNMsLi.js";
 import { n as resolveModel } from "./model-Cak5R-jM.js";
 import "./session-consumer-agents-pTGi7r62.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-8m-0w7RC.js";
@@ -104,7 +104,7 @@ import "./chunk-D0_oaKUc.js";
 import "./markdown-tables-BglJoOi4.js";
 import "./ir-DrY7AsZp.js";
 import "./render-CAaBsF7l.js";
-import "./reply-directives-B9hX-LBz.js";
+import "./reply-directives-bPMJNW1Q.js";
 import { n as resolveMessageChannelSelection } from "./channel-selection-uGln4kR5.js";
 import "./strip-inbound-meta-CoJ_pWAk.js";
 import { o as normalizePollInput, t as getChannelActivity } from "./channel-activity-DDMK7keb.js";
@@ -114,28 +114,28 @@ import "./outbound-attachment-BpoybuuJ.js";
 import "./delivery-queue-CMaxw3uJ.js";
 import "./send-C_rNipx5.js";
 import "./resolve-route-qeooDN7E.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-DXLQHQAj.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-BSgFR5ag.js";
 import "./tables-BCbUwVr2.js";
 import "./proxy-mfQrQ4IR.js";
-import "./replies-BuO733xx.js";
+import "./replies-gGgLXY8D.js";
 import { S as registerSkillsChangeListener, _ as requestNodePairing, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, g as renamePairedNode, h as rejectNodePairing, l as refreshRemoteBinsForConnectedNodes, m as listNodePairing, o as getRemoteSkillEligibility, p as approveNodePairing, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion, y as verifyNodeToken } from "./skill-commands-B2FD6vwN.js";
 import { t as listAgentWorkspaceDirs } from "./workspace-dirs-B3eQ0bhM.js";
 import { n as GATEWAY_AUTH_SURFACE_PATHS, p as isKnownSecretTargetId, r as evaluateGatewayAuthSurfaceStates } from "./runtime-config-collectors-Bgo_CuaD.js";
-import "./command-secret-targets-j8KBmpix.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-CyLVkn7p.js";
+import "./command-secret-targets-r25GrCux.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-BHTSdqFW.js";
 import "./prompt-style-BefmWdTt.js";
 import "./pairing-labels-BaNOkGiF.js";
 import "./session-meta-Do4fIj92.js";
-import { A as redactArtifactLogId, C as accountSessionArtifactsAtTerminalSweep, D as markClientRemovedAcknowledged, E as listSessionArtifacts, F as verificationEnvelopeFingerprint, M as VERIFICATION_CONFIG_SCENARIO, N as buildVerificationEnvelope, O as markRemoved, P as redactVerificationProjection, S as RETAINED_ARTIFACT_KIND, T as isArtifactRegistrationError, _ as isBootIdentityError, a as setAgentTurnRuntime, b as getGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as deriveBootIdentityPair, h as armBarrier, i as getAgentTurnRuntime, j as registerBeforeCreate, k as markRetained, l as buildSoakDeploymentRecord, m as acceptSuccessorExecution, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as verificationSinkReceiptArtifactId, r as getActiveAgentTurnCount, u as evaluateSoak, v as requireProcessBootIdentityPair, w as artifactTokenFor } from "./agent-turn-runner-C3Buntbu.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-C6IsfNdf.js";
+import { A as redactArtifactLogId, C as accountSessionArtifactsAtTerminalSweep, D as markClientRemovedAcknowledged, E as listSessionArtifacts, F as verificationEnvelopeFingerprint, M as VERIFICATION_CONFIG_SCENARIO, N as buildVerificationEnvelope, O as markRemoved, P as redactVerificationProjection, S as RETAINED_ARTIFACT_KIND, T as isArtifactRegistrationError, _ as isBootIdentityError, a as setAgentTurnRuntime, b as getGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as deriveBootIdentityPair, h as armBarrier, i as getAgentTurnRuntime, j as registerBeforeCreate, k as markRetained, l as buildSoakDeploymentRecord, m as acceptSuccessorExecution, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as verificationSinkReceiptArtifactId, r as getActiveAgentTurnCount, u as evaluateSoak, v as requireProcessBootIdentityPair, w as artifactTokenFor } from "./agent-turn-runner-Btk5sBH0.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-BcjjHcwL.js";
 import { r as resolveMemorySearchConfig } from "./manager-DUYerseZ.js";
 import "./query-expansion-Cl0fSt6_.js";
-import { a as acquireGatewayLock, i as GatewayLockError, l as backupSqliteSessionDatabase, p as resolveGatewayBackupPath } from "./session-storage-owner-DLQ3vsAz.js";
+import { a as acquireGatewayLock, i as GatewayLockError, l as backupSqliteSessionDatabase, p as resolveGatewayBackupPath } from "./session-storage-owner-ClZPCWep.js";
 import { t as formatDocsLink } from "./links-0eSmUZrl.js";
 import { n as runCommandWithRuntime } from "./cli-utils-DyGKoc5l.js";
 import { t as formatHelpExamples } from "./help-format-CpfKC4qB.js";
 import { n as withProgress } from "./progress-CSrWZhGt.js";
-import "./server-lifecycle-Cd0b010a.js";
+import "./server-lifecycle-D8mfFIYf.js";
 import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-CxJuWVK4.js";
 import { t as ensureOpenClawCliOnPath } from "./path-env-BEiSBS7W.js";
 import "./runtime-guard-CjDDDqlR.js";
@@ -147,7 +147,7 @@ import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-D2c4akyc.
 import { n as inheritOptionFromParent } from "./command-options-BtDai3oC.js";
 import { t as WizardCancelledError } from "./prompts-CfOu9uZi.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-BQGm09z6.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-D-yD07v8.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-C_4HsmOy.js";
 import { t as isWithinDir } from "./path-safety-B2Yy_7lP.js";
 import "./install-safe-path-nmPbIqvY.js";
 import "./npm-pack-install-B4iNr987.js";
@@ -156,44 +156,44 @@ import "./installs-Cb_gHlRY.js";
 import { n as formatConfigIssueLines } from "./issue-format-ypZtnxqS.js";
 import { t as buildChannelAccountSnapshot } from "./status-TtGsgDjP.js";
 import "./channels-status-issues-BLR0pP0T.js";
-import { a as dropDeviceIdentity, i as resolveGatewayClientProfile, l as unlinkDeviceIdentity, o as linkDeviceIdentity, t as WEB_CLIENT_ALLOWED_ORIGINS_CONFIG_KEY } from "./client-profiles-DGW7rrdk.js";
+import { a as dropDeviceIdentity, i as resolveGatewayClientProfile, l as unlinkDeviceIdentity, o as linkDeviceIdentity, t as WEB_CLIENT_ALLOWED_ORIGINS_CONFIG_KEY } from "./client-profiles-CZqoxT_J.js";
 import "./daemon-install-helpers-DxomkTE1.js";
 import "./service-UPTNbx3w.js";
 import "./systemd-CU9Ac8xq.js";
 import "./lifecycle-core-B4yHioys.js";
 import "./systemd-hints-DGqod-V7.js";
 import { t as parsePort$1 } from "./parse-port-BnVa643B.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-P_665VBl.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-C0X7BA3B.js";
 import "./diagnostics-Bl__dpJ_.js";
 import "./table-BmLIXqwu.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-DPev5_FX.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop } from "./shared-iSFlHVxY.js";
-import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-CH1D3iBG.js";
+import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-DkY9yUsn.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-C2mGmUft.js";
-import { a as startSessionStorage, c as initGatewayRecoveryControls, d as DOCTOR_AUTHORITY_MISSING, f as doctorInspect, g as pickGatewaySelfPresence, h as verifyRecoveryAuthority, i as markStorageLifecycleStopping, l as startGatewayRestartRecoveryRuntime, m as rotateRecoveryAuthoritySecret, n as getStatusSummary, o as FatalConfiguredStorageStartError, p as mintRecoveryAuthority, r as getStorageV1Snapshot, s as awaitGatewayRecoveryReleased, u as stopGatewayRestartRecoveryForShutdown } from "./status-Ccz-BtS_.js";
-import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-CVUuZRpQ.js";
+import { a as startSessionStorage, c as initGatewayRecoveryControls, d as DOCTOR_AUTHORITY_MISSING, f as doctorInspect, g as pickGatewaySelfPresence, h as verifyRecoveryAuthority, i as markStorageLifecycleStopping, l as startGatewayRestartRecoveryRuntime, m as rotateRecoveryAuthoritySecret, n as getStatusSummary, o as FatalConfiguredStorageStartError, p as mintRecoveryAuthority, r as getStorageV1Snapshot, s as awaitGatewayRecoveryReleased, u as stopGatewayRestartRecoveryForShutdown } from "./status-Cuo3rz1n.js";
+import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-DjlQU_Tv.js";
 import { r as resolveStaleClaimAdoptionMs } from "./recovery-adapter-CitKikIA.js";
-import { a as respondTaskRegistryUnavailable, c as tasksHandlers, d as withTimeout$1, i as resolveTaskOperatorRegistry, l as retryDelayMs, r as getTaskOperatorRegistry, t as DEFAULT_RETENTION_DAYS, u as waitForStopDrain } from "./task-runlog-retention-D0XabfJk.js";
+import { a as respondTaskRegistryUnavailable, c as tasksHandlers, d as withTimeout$1, i as resolveTaskOperatorRegistry, l as retryDelayMs, r as getTaskOperatorRegistry, t as DEFAULT_RETENTION_DAYS, u as waitForStopDrain } from "./task-runlog-retention-BdLkqRCi.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-pq1mH8P4.js";
 import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-DKrd0PkQ.js";
 import { t as reconcileBundledInstalls } from "./reconcile-bundled-Dvwkzu0F.js";
 import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-BnwqUmNH.js";
 import "./onboarding.secret-input-BzpFsVR9.js";
-import { t as runOnboardingWizard } from "./onboarding-B0tWDl2D.js";
+import { t as runOnboardingWizard } from "./onboarding-DjYLPv7p.js";
 import { a as CONTROL_UI_V2_SERVICE_NAME, i as webBundleMissingMessage, n as buildUserClientRuntimeConfig, o as buildControlUiV2RuntimeConfig, r as resolvePackagedWebBundleRootSync, t as USER_CLIENT_ID } from "./runtime-config-B3jAYZkr.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-PAONdNH4.js";
-import { a as readChatHistoryPage, c as REPLY_CONTEXT_CUSTOM_TYPE, d as admitUiActionHead, f as bindUiActionTurn, g as UiSurfaceRefSchema, h as assertValidParams, i as decodeHistoryCursor, l as buildReplyContextPayload, m as unsubscribeSessionChanges, o as resolveDbLeafEntryId, p as reserveUiActionAdmission, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers, u as UI_ACTION_CUSTOM_TYPE } from "./sessions-BIgPumZV.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-Cb0sjE90.js";
+import { a as readChatHistoryPage, c as REPLY_CONTEXT_CUSTOM_TYPE, d as admitUiActionHead, f as bindUiActionTurn, g as UiSurfaceRefSchema, h as assertValidParams, i as decodeHistoryCursor, l as buildReplyContextPayload, m as unsubscribeSessionChanges, o as resolveDbLeafEntryId, p as reserveUiActionAdmission, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers, u as UI_ACTION_CUSTOM_TYPE } from "./sessions-BV1UJJsg.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-D6OyWbam.js";
 import { t as tombstoneAgentSessions } from "./delete-agent-sessions-kHmDsr0l.js";
-import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-BG0trkgo.js";
+import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-C0OmboTh.js";
 import "./node-service-CZ8YogEx.js";
 import "./status.update-Cc1Xrwrz.js";
 import { i as resolveActiveLogFile, n as readLogSlice } from "./log-tail-Db3-PQvS.js";
 import { r as runSessionsMaintenance, s as POSTGRES_BACKUP_REQUIRED_MESSAGE, u as validateSessionStorageCore } from "./sessions-maintenance-core-Xr8Nu_z6.js";
 import { t as installSkill } from "./skills-install-DRdA0VQP.js";
-import { r as runGatewayUpdate } from "./update-runner-B2S-ijWA.js";
+import { r as runGatewayUpdate } from "./update-runner-BUO6D2tP.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-geUXFY_R.js";
-import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-Cak1KHXQ.js";
+import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-CMLC3NdV.js";
 import { cpuUsage, memoryUsage, resourceUsage, uptime } from "node:process";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import * as fsSync from "node:fs";
@@ -9050,6 +9050,7 @@ const BASE_METHODS = [
 	"secrets.reload",
 	"secrets.resolve",
 	"sessions.create",
+	"sessions.direct",
 	"sessions.subscribe",
 	"sessions.list",
 	"sessions.describe",
@@ -16583,7 +16584,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-Ba1YD79n.js");
+			const { handleNodeEvent } = await import("./server-node-events-C_xoK9Xb.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -17935,6 +17936,7 @@ const STORAGE_METHOD_POLICY_NONE = [
 	"chat.surfaces.get",
 	"chat.surfaces.pin",
 	"sessions.abort",
+	"sessions.direct",
 	"wake",
 	"cron.list",
 	"cron.status",
@@ -24479,10 +24481,11 @@ const ttsHandlers = {
 			});
 			if (!result.success || !result.audioPath) {
 				const rawError = result.error ?? "TTS conversion failed";
-				log$12.warn(`tts.speak: synthesis failed: ${rawError}`);
+				log$12.warn(`tts.speak: synthesis failed: ${redactSensitiveText(rawError)}`);
 				respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, stripAbsolutePaths(rawError)));
 				return;
 			}
+			if (result.fallbackErrors?.length) log$12.warn(`tts.speak: served by ${result.provider} after ${result.fallbackErrors.length} failed provider(s) in ${result.latencyMs}ms: ${redactSensitiveText(stripAbsolutePaths(result.fallbackErrors.join("; ")))}`);
 			const mimeType = SPEECH_MIME_BY_EXTENSION[path.extname(result.audioPath).toLowerCase()];
 			if (!mimeType) {
 				respond(false, void 0, errorShape(ErrorCodes.UNAVAILABLE, `unsupported audio format "${path.extname(result.audioPath).toLowerCase()}"`, { details: { reason: "unsupported_audio_format" } }));
@@ -26690,7 +26693,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.OPENCLAW_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.OPENCLAW_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./server-CRI0-vWV.js");
+	const mod = override ? await import(override) : await import("./server-CggrpKmd.js");
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -37103,7 +37106,7 @@ async function bootGatewayServer(port, opts, bootStorageTeardown) {
 		const sweepLog = log$1.child("session-consumer-claim-sweep");
 		const { createDiagnosticRingBuffer } = await import("./session-consumer-diagnostics-BoCkvEW5.js");
 		const diagnostics = createDiagnosticRingBuffer();
-		const { setDiagnostics } = await import("./sessions-BIgPumZV.js").then((n) => n.n);
+		const { setDiagnostics } = await import("./sessions-BV1UJJsg.js").then((n) => n.n);
 		if (sessionConsumerClaimSweepCancelled) return;
 		setDiagnostics(diagnostics);
 		const lastKnownEnabledState = /* @__PURE__ */ new Map();
@@ -37142,7 +37145,7 @@ async function bootGatewayServer(port, opts, bootStorageTeardown) {
 					lastKnownEnabledState,
 					cfg: loadConfig()
 				});
-				const { setLastSweepTimestamp } = await import("./sessions-BIgPumZV.js").then((n) => n.n);
+				const { setLastSweepTimestamp } = await import("./sessions-BV1UJJsg.js").then((n) => n.n);
 				setLastSweepTimestamp(Date.now());
 			} catch (err) {
 				sweepLog.warn(`session consumer-claim sweep failed: ${String(err)}`);
@@ -37164,7 +37167,7 @@ async function bootGatewayServer(port, opts, bootStorageTeardown) {
 			prepare: () => {
 				taskPipelineBoot = (async () => {
 					const { getConfiguredSessionStorageRuntime } = await import("./model-selection-DcDzsVrL.js").then((n) => n.hi);
-					const { startTaskPipeline } = await import("./task-pipeline-boot-D5tuNVHj.js");
+					const { startTaskPipeline } = await import("./task-pipeline-boot-Kxi1hpUn.js");
 					const pipeline = startTaskPipeline({
 						getConfigured: getConfiguredSessionStorageRuntime,
 						cfg: cfgAtStart,
@@ -37967,7 +37970,7 @@ async function stopInteractiveWorkBeforeClose(params) {
 	let acpCancelTimedOut = false;
 	let cancelledRunIds = [];
 	try {
-		const { getAcpSessionManager } = await import("./manager-CsTeZuhu.js").then((n) => n.n);
+		const { getAcpSessionManager } = await import("./manager-DCXdygsq.js").then((n) => n.n);
 		const result = await getAcpSessionManager().cancelActiveTurnsForShutdown({
 			reason: params.reason,
 			timeoutMs: Math.max(1, params.budgetMs - PENDING_REPLY_RESERVE_MS)
@@ -38146,7 +38149,7 @@ async function runGatewayLoop(params) {
 					if (isRestart) {
 						markGatewayDraining();
 						const activeTasks = getActiveTaskCount();
-						const acpManager = (await import("./manager-CsTeZuhu.js").then((n) => n.n)).getAcpSessionManager();
+						const acpManager = (await import("./manager-DCXdygsq.js").then((n) => n.n)).getAcpSessionManager();
 						const activeTurns = acpManager.getActiveTurnCount();
 						if (activeTasks > 0 || activeTurns > 0) {
 							gatewayLog$1.info(`draining ${activeTasks} active task(s), ${activeTurns} active acp turn(s) before restart (timeout ${DRAIN_TIMEOUT_MS}ms)`);