wednesdayai 0.5.1-dev.37 → 0.5.1-dev.38

package/dist/{gateway-cli-Y92yCSUC.js → gateway-cli-C4Xm8OKF.js}

@@ -1,196 +1,196 @@
-import { A as readLoggingConfig, C as resolveFileLogProfile, H as openBoundaryFileSync, Ot as truncateUtf16Safe, St as resolveUserPath, Tt as shortenHomePath, U as openVerifiedFileSync, V as openBoundaryFile, W as sameFileIdentity, X as isPathInside, Y as isNotFoundPathError, ct as CONFIG_DIR, d as colorize, f as isRich, g as getResolvedLoggerSettings, h as getLogger, m as getChildLogger, mt as ensureDir, p as theme, s as setVerbose, x as appendFileLog } from "./globals-BRyHSrWD.js";
+import { A as readLoggingConfig, C as resolveFileLogProfile, H as openBoundaryFileSync, Ot as truncateUtf16Safe, St as resolveUserPath, Tt as shortenHomePath, U as openVerifiedFileSync, V as openBoundaryFile, W as sameFileIdentity, X as isPathInside, Y as isNotFoundPathError, ct as CONFIG_DIR, d as colorize, f as isRich, g as getResolvedLoggerSettings, h as getLogger, m as getChildLogger, mt as ensureDir, p as theme, s as setVerbose, x as appendFileLog } from "./globals-3lUHnZas.js";
 import { g as resolveStateDir, i as isNixMode, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-BMo6kTge.js";
 import { t as isPlainObject } from "./plain-object-Doc_YkH1.js";
-import { m as defaultRuntime, n as runtimeForLogger, o as setConsoleSubsystemFilter, s as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-BNf8H-Zm.js";
+import { m as defaultRuntime, n as runtimeForLogger, o as setConsoleSubsystemFilter, s as setConsoleTimestampPrefix, t as createSubsystemLogger } from "./subsystem-xTuYkxuQ.js";
 import "./boolean-C71HJEcH.js";
 import { i as logAcceptedEnvOption, r as isTruthyEnvValue } from "./entry.js";
-import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, m as WORKSPACE_LANE_DENIED_REASON, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-TStC2eAo.js";
-import { $ as isAvatarImageDataUrl, $a as isGatewayControlUiV2Enabled, Aa as resolveExecutablePath, Ai as GATEWAY_CLIENT_IDS, An as StorageReadAccessError, Ao as isCliProvider, Ar as listChannelPlugins, Bn as loadSessionStore, Bo as resolveDefaultModelForAgent, Cn as getRegisteredStreamingSpeechProviders, Co as resolveSubagentMaxConcurrent, Cs as getApiKeyForModel, D as coerceIdentityValue, Dn as createInternalHookEvent, Ei as normalizeMessageChannel, En as clearInternalHooks, Es as resolveApiKeyForProvider, Fi as normalizeGatewayClientMode, Fo as normalizeProviderIdForAuth, Ja as applyLegacyMigrations, Jn as updateSessionStore, Ko as resolveThinkingDefault, Kt as getActivePluginRegistryVersion, Lo as resolveAllowedModelRef, Mi as GATEWAY_CLIENT_NAMES, N as parseByteSize, Ni as hasGatewayClientCap, Nn as SessionStorageUnavailableError, No as normalizeModelSelection, Nt as CHANNEL_IDS, O as EXEC_POLICY_PRESET_IDS, On as registerInternalHook, Oo as getModelRefStatus, Pn as requireSessionStorageRuntime, Q as isAvatarHttpUrl, Qa as DEFAULT_GATEWAY_WEB_CLIENT_BASE_PATH, Qn as mergeSessionEntry, Qr as resolveWhatsAppAccount, Rc as resolveAuthProfileDisplayLabel, Ri as cleanStaleLockFiles, Rn as getConfiguredSessionStorageRuntime, Sn as getRegisteredRealtimeVoiceProviders, So as resolveNestedAgentMaxConcurrent, Tn as normalizeProviderId, Tr as resolveSessionEntryGroupId, Uc as normalizeSecretInput, Vo as resolveHooksGmailModel, Ws as resolveProfileUnusableUntilForDisplay, Wt as getActivePluginRegistry, X as AVATAR_MAX_BYTES, Xa as DEFAULT_GATEWAY_CONTROL_UI_BASE_PATH, Xr as normalizeWhatsAppTarget, Ya as ensureControlUiAllowedOriginsForNonLoopbackBind, Za as DEFAULT_GATEWAY_CONTROL_UI_V2_BASE_PATH, Zt as setGatewayPluginRegistry, _i as normalizeSessionDeliveryFields, _o as resolveTalkCatalogApiKeyStatus, _r as resolveSessionTranscriptsDirForAgent, a as createConfigIO, ar as parseDurationMs, at as buildChannelAccountBindings, bi as isGatewayCliClient, bn as getRealtimeVoiceProvider, c as loadConfig, d as readConfigFileSnapshotForWrite, el as DEFAULT_CONTEXT_TOKENS, en as createEmptyPluginRegistry, eo as orderGatewaySpaMountsForStages, er as setSessionRuntimeModel, f as resolveConfigSnapshotHash, g as OpenClawSchema, gn as getRegisteredSpeechProviders, go as resolveActiveTalkProviderConfig, h as validateConfigObjectWithPlugins, hi as mergeDeliveryContext, ho as normalizeTalkSection, hr as resolveSessionTranscriptPath, ia as composeRestartDeferralWithAdmission, io as resolveGatewayWebClientBasePath, ji as GATEWAY_CLIENT_MODES, jr as normalizeChannelId, kc as loadAuthProfileStoreForRuntime, ki as GATEWAY_CLIENT_CAPS, kn as triggerInternalHook, kr as getChannelPlugin, l as parseConfigJson5, ln as emitStartupPluginHealthReport, m as writeConfigFile, mo as buildTalkConfigResponse, mr as resolveSessionFilePathOptions, n as migrateLegacyConfig, nl as DEFAULT_PROVIDER, nn as getRegisteredPluginApis, no as resolveGatewayControlUiBasePath, o as getRuntimeConfigSnapshot, on as setSessionWorkAvailableNotifier, po as DEFAULT_TALK_CONVERSATION_MODEL_ID, pr as resolveSessionFilePath, qa as applyMergePatch, r as advanceRuntimeConfigSnapshot, ra as RecoveryAdmissionError, ro as resolveGatewayControlUiV2BasePath, rt as looksLikeAvatarPath, s as getRuntimeConfigSourceSnapshot, ta as setPluginTaskAdmissionRejectionFor, tl as DEFAULT_MODEL, to as resolveGatewayConsoleBasePath, u as readConfigFileSnapshot, vi as INTERNAL_MESSAGE_CHANNEL, vo as resolveTalkConversationConfig, vr as resolveStorePath, vt as isTestDefaultMemorySlotDisabled, wi as isWebchatClient, wn as listRealtimeVoiceProviders, wo as buildAllowedModelSet, wr as resolveSessionEntryGroupContext, wt as defaultSlotIdForKey, xi as isGatewayMessageChannel, xn as getRegisteredRealtimeTranscriptionProviders, xo as resolveAgentMaxConcurrent, yi as isDeliverableMessageChannel, yo as resolveTalkProviderConfigApiKey, zo as resolveConfiguredModelRef } from "./config-2hPOvE4Z.js";
+import { a as cancelDelayedAgentTurnWaiters, c as enqueueAgentTurn, i as agentTurnIdempotencyKey, l as isClaimableAgentTurnWorkId, m as WORKSPACE_LANE_DENIED_REASON, r as AGENT_TURN_TOPIC, s as createRecoveryAgentTurnStager } from "./agent-turn-enqueue-DZ607FR0.js";
+import { $ as isAvatarImageDataUrl, $a as isGatewayControlUiV2Enabled, Aa as resolveExecutablePath, Ai as GATEWAY_CLIENT_IDS, An as StorageReadAccessError, Ao as isCliProvider, Ar as listChannelPlugins, Bn as loadSessionStore, Bo as resolveDefaultModelForAgent, Cn as getRegisteredStreamingSpeechProviders, Co as resolveSubagentMaxConcurrent, Cs as getApiKeyForModel, D as coerceIdentityValue, Dn as createInternalHookEvent, Ei as normalizeMessageChannel, En as clearInternalHooks, Es as resolveApiKeyForProvider, Fi as normalizeGatewayClientMode, Fo as normalizeProviderIdForAuth, Ja as applyLegacyMigrations, Jn as updateSessionStore, Ko as resolveThinkingDefault, Kt as getActivePluginRegistryVersion, Lo as resolveAllowedModelRef, Mi as GATEWAY_CLIENT_NAMES, N as parseByteSize, Ni as hasGatewayClientCap, Nn as SessionStorageUnavailableError, No as normalizeModelSelection, Nt as CHANNEL_IDS, O as EXEC_POLICY_PRESET_IDS, On as registerInternalHook, Oo as getModelRefStatus, Pn as requireSessionStorageRuntime, Q as isAvatarHttpUrl, Qa as DEFAULT_GATEWAY_WEB_CLIENT_BASE_PATH, Qn as mergeSessionEntry, Qr as resolveWhatsAppAccount, Rc as resolveAuthProfileDisplayLabel, Ri as cleanStaleLockFiles, Rn as getConfiguredSessionStorageRuntime, Sn as getRegisteredRealtimeVoiceProviders, So as resolveNestedAgentMaxConcurrent, Tn as normalizeProviderId, Tr as resolveSessionEntryGroupId, Uc as normalizeSecretInput, Vo as resolveHooksGmailModel, Ws as resolveProfileUnusableUntilForDisplay, Wt as getActivePluginRegistry, X as AVATAR_MAX_BYTES, Xa as DEFAULT_GATEWAY_CONTROL_UI_BASE_PATH, Xr as normalizeWhatsAppTarget, Ya as ensureControlUiAllowedOriginsForNonLoopbackBind, Za as DEFAULT_GATEWAY_CONTROL_UI_V2_BASE_PATH, Zt as setGatewayPluginRegistry, _i as normalizeSessionDeliveryFields, _o as resolveTalkCatalogApiKeyStatus, _r as resolveSessionTranscriptsDirForAgent, a as createConfigIO, ar as parseDurationMs, at as buildChannelAccountBindings, bi as isGatewayCliClient, bn as getRealtimeVoiceProvider, c as loadConfig, d as readConfigFileSnapshotForWrite, el as DEFAULT_CONTEXT_TOKENS, en as createEmptyPluginRegistry, eo as orderGatewaySpaMountsForStages, er as setSessionRuntimeModel, f as resolveConfigSnapshotHash, g as OpenClawSchema, gn as getRegisteredSpeechProviders, go as resolveActiveTalkProviderConfig, h as validateConfigObjectWithPlugins, hi as mergeDeliveryContext, ho as normalizeTalkSection, hr as resolveSessionTranscriptPath, ia as composeRestartDeferralWithAdmission, io as resolveGatewayWebClientBasePath, ji as GATEWAY_CLIENT_MODES, jr as normalizeChannelId, kc as loadAuthProfileStoreForRuntime, ki as GATEWAY_CLIENT_CAPS, kn as triggerInternalHook, kr as getChannelPlugin, l as parseConfigJson5, ln as emitStartupPluginHealthReport, m as writeConfigFile, mo as buildTalkConfigResponse, mr as resolveSessionFilePathOptions, n as migrateLegacyConfig, nl as DEFAULT_PROVIDER, nn as getRegisteredPluginApis, no as resolveGatewayControlUiBasePath, o as getRuntimeConfigSnapshot, on as setSessionWorkAvailableNotifier, po as DEFAULT_TALK_CONVERSATION_MODEL_ID, pr as resolveSessionFilePath, qa as applyMergePatch, r as advanceRuntimeConfigSnapshot, ra as RecoveryAdmissionError, ro as resolveGatewayControlUiV2BasePath, rt as looksLikeAvatarPath, s as getRuntimeConfigSourceSnapshot, ta as setPluginTaskAdmissionRejectionFor, tl as DEFAULT_MODEL, to as resolveGatewayConsoleBasePath, u as readConfigFileSnapshot, vi as INTERNAL_MESSAGE_CHANNEL, vo as resolveTalkConversationConfig, vr as resolveStorePath, vt as isTestDefaultMemorySlotDisabled, wi as isWebchatClient, wn as listRealtimeVoiceProviders, wo as buildAllowedModelSet, wr as resolveSessionEntryGroupContext, wt as defaultSlotIdForKey, xi as isGatewayMessageChannel, xn as getRegisteredRealtimeTranscriptionProviders, xo as resolveAgentMaxConcurrent, yi as isDeliverableMessageChannel, yo as resolveTalkProviderConfigApiKey, zo as resolveConfiguredModelRef } from "./config-D--rwfpd.js";
 import { r as resolveRuntimeServiceVersion, t as VERSION } from "./version-D_9__Xw6.js";
-import { B as isSubagentSessionKey, D as toDeviceSenderId, E as toAgentStoreSessionKey, I as isCronRunSessionKey, O as DEFAULT_ACCOUNT_ID, T as toAgentRequestSessionKey, U as rewriteAgentSessionKeyPrefix, V as parseAgentSessionKey, _ as resolveAgentIdFromSessionKey, a as buildAgentMainSessionKey, b as resolveDeviceIdentity, g as resolveAgentIdFromQualifiedSessionKey, k as normalizeAccountId$1, m as normalizeMainKey, p as normalizeAgentId, s as classifySessionKeyShape, t as DEFAULT_AGENT_ID, x as resolveLinkedPeerIdForChannel, y as resolveConfiguredCanonicalIdentity } from "./session-key-BRw3GFxY.js";
-import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, M as matchesSkillFilter, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-BXqrHhZ0.js";
-import { n as runExec, o as logWarn, r as logDebug, t as runCommandWithTimeout } from "./exec-EGo-G7vR.js";
-import { n as resolveOpenClawPackageRoot } from "./openclaw-root-B6Tk0FH8.js";
+import { B as isSubagentSessionKey, D as toDeviceSenderId, E as toAgentStoreSessionKey, I as isCronRunSessionKey, O as DEFAULT_ACCOUNT_ID, T as toAgentRequestSessionKey, U as rewriteAgentSessionKeyPrefix, V as parseAgentSessionKey, _ as resolveAgentIdFromSessionKey, a as buildAgentMainSessionKey, b as resolveDeviceIdentity, g as resolveAgentIdFromQualifiedSessionKey, k as normalizeAccountId$1, m as normalizeMainKey, p as normalizeAgentId, s as classifySessionKeyShape, t as DEFAULT_AGENT_ID, x as resolveLinkedPeerIdForChannel, y as resolveConfiguredCanonicalIdentity } from "./session-key-Cr27HfX5.js";
+import { A as resolveDefaultAgentWorkspaceDir, C as DEFAULT_SOUL_FILENAME, E as ensureAgentWorkspace, M as matchesSkillFilter, O as isWorkspaceOnboardingCompleted, S as DEFAULT_MEMORY_FILENAME, T as DEFAULT_USER_FILENAME, a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, c as resolveAgentModelFallbacksOverride, d as resolveDefaultAgentId, g as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as resolveWorkspaceTemplateDir, l as resolveAgentSkillsFilter, m as resolveSessionAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir, v as DEFAULT_BOOTSTRAP_FILENAME, w as DEFAULT_TOOLS_FILENAME, x as DEFAULT_MEMORY_ALT_FILENAME, y as DEFAULT_HEARTBEAT_FILENAME } from "./agent-scope-BZ0wFh-U.js";
+import { n as runExec, o as logWarn, r as logDebug, t as runCommandWithTimeout } from "./exec-DWOKM6EC.js";
+import { n as resolveOpenClawPackageRoot } from "./openclaw-root-CvJ5CJns.js";
 import { r as resolveCopilotApiToken } from "./github-copilot-token-CvN6iidT.js";
-import "./pid-alive-TVJ4mVal.js";
+import "./pid-alive-DIe5jzmE.js";
 import { t as formatCliCommand } from "./command-format-DWAk9aIH.js";
 import { h as resolveWithinRoot, l as isWebHostReadMethod, s as handleStaticAppHttpRequest, t as CONTENT_TYPES } from "./static-app-DG39qMau.js";
 import { c as optionalStringEnum, l as stringEnum } from "./retry-policy-BIRWkDiU.js";
-import "./send-DizMtGn_.js";
-import { it as normalizePollInput, x as getChannelActivity } from "./send-S06NYAWt.js";
+import "./send-36dNynVs.js";
+import { it as normalizePollInput, x as getChannelActivity } from "./send-D1V_gt-x.js";
 import { t as redactIdentifier } from "./redact-identifier-C6kZ-VCd.js";
 import { t as CommandLane } from "./lanes-CF2oNM6v.js";
 import { n as isDiagnosticsEnabled, r as onDiagnosticEvent, t as emitDiagnosticEvent } from "./diagnostic-events-fDjlg2nm.js";
-import { A as redactArtifactLogId, C as accountSessionArtifactsAtTerminalSweep, D as markClientRemovedAcknowledged, E as listSessionArtifacts, F as verificationEnvelopeFingerprint, M as VERIFICATION_CONFIG_SCENARIO, N as buildVerificationEnvelope, O as markRemoved, P as redactVerificationProjection, S as RETAINED_ARTIFACT_KIND, T as isArtifactRegistrationError, _ as isBootIdentityError, a as setAgentTurnRuntime, b as getGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as deriveBootIdentityPair, h as armBarrier, i as getAgentTurnRuntime, j as registerBeforeCreate, k as markRetained, l as buildSoakDeploymentRecord, m as acceptSuccessorExecution, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as verificationSinkReceiptArtifactId, r as getActiveAgentTurnCount, u as evaluateSoak, v as requireProcessBootIdentityPair, w as artifactTokenFor } from "./agent-turn-runner-Dqbqrgbg.js";
-import { a as resolveSessionRunStore, t as createSessionRunRecorder } from "./recorder-CLU0QuFV.js";
+import { A as redactArtifactLogId, C as accountSessionArtifactsAtTerminalSweep, D as markClientRemovedAcknowledged, E as listSessionArtifacts, F as verificationEnvelopeFingerprint, M as VERIFICATION_CONFIG_SCENARIO, N as buildVerificationEnvelope, O as markRemoved, P as redactVerificationProjection, S as RETAINED_ARTIFACT_KIND, T as isArtifactRegistrationError, _ as isBootIdentityError, a as setAgentTurnRuntime, b as getGatewayRestartRecoveryRuntime, d as isSoakError, f as readTrustedBuildInfo, g as deriveBootIdentityPair, h as armBarrier, i as getAgentTurnRuntime, j as registerBeforeCreate, k as markRetained, l as buildSoakDeploymentRecord, m as acceptSuccessorExecution, n as createAgentTurnRuntimeFromStorage, o as tryGetAgentTurnRuntime, p as verificationSinkReceiptArtifactId, r as getActiveAgentTurnCount, u as evaluateSoak, v as requireProcessBootIdentityPair, w as artifactTokenFor } from "./agent-turn-runner-qSzYP-xO.js";
+import { a as resolveSessionRunStore, t as createSessionRunRecorder } from "./recorder-C5MQyLQu.js";
 import { i as clientResumeRecordArtifactId, o as isVerificationStoreError, t as CLIENT_RESUME_RECORD_KIND } from "./verification-store-BuRIPR5S.js";
 import { t as getGatewayInstanceId } from "./gateway-instance-id-C5fGFkGu.js";
-import { $n as initSubagentRegistry, A as takePendingActivationMigration, An as enqueueSystemEvent, Ar as resolveTtsProviderOrder, Bn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Br as resolveWorkspaceLaneConfig, Bt as normalizeCronJobCreate, C as buildDefaultToolPolicyPipelineSteps, Cr as getTtsProvider, Ct as resolveOutboundSessionRoute, D as clearPluginRegistryCaches, Dr as resolveTtsAutoMode, Dt as resolveOutboundChannelPlugin, E as resolvePluginTools, Er as resolveTtsApiKey, Et as resolveSessionDeliveryTarget, F as resolveAgentOutboundIdentity, Fn as requestHeartbeatNow, Fr as OPENAI_TTS_VOICES, Ft as formatRestartSentinelMessage, G as createOutboundSendDeps, Gn as extractImageContentFromSource, Gt as stripLegacyDeliveryFields, H as agentCommandFromIngress, Hn as DEFAULT_INPUT_MAX_REDIRECTS, Ht as migrateLegacyCronPayload, Ir as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, J as resolveAgentAvatar, Jt as getHookType, K as createDefaultDeps, Kn as normalizeMimeList, Kt as buildSafeExternalPrompt, L as handleSlackHttpRequest, Lr as stripHeartbeatToken, Lt as summarizeRestartSentinel, M as requestNudge, Mr as setTtsProvider, N as waitForPendingNudges, Nr as textToSpeech, Nt as consumeRestartSentinel, O as getLoadedAnalysisConcurrency, Or as resolveTtsConfig, P as waitForPendingNudgesWithin, Pr as OPENAI_TTS_MODELS, Pt as formatDoctorNonInteractiveHint, Q as buildHistoryContextFromEntries, Qn as countActiveDescendantRuns, Qt as resolveSessionAuthProfileOverride, R as readJsonBodyWithLimit, Rn as ACP_SESSION_IDENTITY_RENDERER_VERSION, Rr as WorkspaceLaneDeniedError, S as applyToolPolicyPipeline, Sr as TTS_PROVIDERS, St as ensureOutboundSessionEntry, T as getPluginToolMeta, Tr as isTtsProviderConfigured, Tt as resolveOutboundTarget, U as resolveAgentDeliveryPlan, Un as DEFAULT_INPUT_TIMEOUT_MS, Ut as buildDeliveryFromLegacyPayload, Vn as DEFAULT_INPUT_IMAGE_MIMES, Vt as normalizeCronJobPatch, W as resolveAgentOutboundTarget, Wn as extractFileContentFromSource, Wt as hasLegacyDeliveryHints, Xn as isAbortRequestText, Xt as applyBrowserProxyPaths, Yn as resolveSendPolicy, Yt as isExternalHookSession, Zt as persistBrowserProxyFiles, _ as runEmbeddedPiAgent, _n as setPreRestartDeferralCheck, _r as resolveSessionLane, _t as setCliSessionId, a as runHeartbeatOnce, an as discoverAllSessions, ar as isSessionRouteAccountLive, at as buildWorkspaceLaneActor, br as DEFAULT_MAX_PARALLEL, c as startHeartbeatRunner, cn as loadSessionLogs, cr as clearSessionQueues, d as resolveHeartbeatVisibility, dn as deferGatewayRestartUntilIdle, dr as parseLeadingStamps, dt as resolveChannelAccountEnabled, er as listDescendantRunsForRequester, et as dispatchInboundMessage, f as getLastHeartbeatEvent, fn as emitGatewayRestart, fr as stripLeadingStamps, ft as BARE_SESSION_RESET_PROMPT, g as resolveCronSession, gn as setGatewaySigusr1RestartPolicy, gt as getCliSessionId, h as isCronSystemEvent, hn as scheduleGatewaySigusr1Restart, ht as saveCronStore, i as resolveHeartbeatSummaryForAgent, ir as resolveAgentTimeoutMs, it as notifyInterruptedRuns, j as createPluginRuntime, jn as isSystemEventContextChanged, jr as setTtsEnabled, jt as runWithModelFallback, k as loadOpenClawPlugins, kr as resolveTtsPrefsPath, kt as resetDirectoryCache, l as runWakeGate, ln as loadSessionUsageTimeSeries, lr as getExistingFollowupQueue, m as redactSensitiveHeartbeatEvent, mn as markGatewaySigusr1RestartHandled, mr as ToolInputError, mt as resolveCronStorePath, n as runMainAgentTurn, nr as runSubagentAnnounceFlow, nt as createReplyDispatcher, on as loadCostUsageSummary, or as liveDeliveryContextFromSession, ot as formatWorkspaceLaneDeniedNotice, p as onHeartbeatEvent, pn as isGatewaySigusr1RestartExternallyAllowed, pr as stripLeadingStampsFlush, pt as loadCronStore, q as createOutboundSendDeps$1, qn as resolveInputFileLimits, qt as detectSuspiciousPatterns, r as resolveHeartbeatConfig, rr as readLatestAssistantReply, rt as getTotalPendingReplies, s as setHeartbeatsEnabled, sn as loadSessionCostSummary, sr as getSessionBindingService, tt as setDispatchInboundAdmissionRejectionFor, u as onSessionChatMessage, un as consumeGatewaySigusr1RestartAuthorization, ur as removeQueuedFollowupRun, v as snapshotRunPendingWrites, vn as triggerOpenClawRestart, vt as runCliAgent, wr as isTtsEnabled, wt as resolveHeartbeatDeliveryTarget, x as resolveExecConfig, xn as loadProviderUsageSummary, xr as resolveUserTimezone, xt as buildOutboundRouteActor, y as waitForPendingWrites, yr as setTaskPipelineStatus, yt as createOpenClawTools, z as requestBodyErrorToText, zn as isAcpEnabledByPolicy, zr as checkWorkspaceLaneAdmission, zt as writeRestartSentinel } from "./agent-turn-execute-B8YL98Ei.js";
-import "./pi-embedded-helpers--xcGBKr8.js";
-import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-DSs8pONL.js";
+import { $n as initSubagentRegistry, A as takePendingActivationMigration, An as enqueueSystemEvent, Ar as resolveTtsProviderOrder, Bn as DEFAULT_INPUT_IMAGE_MAX_BYTES, Br as resolveWorkspaceLaneConfig, Bt as normalizeCronJobCreate, C as buildDefaultToolPolicyPipelineSteps, Cr as getTtsProvider, Ct as resolveOutboundSessionRoute, D as clearPluginRegistryCaches, Dr as resolveTtsAutoMode, Dt as resolveOutboundChannelPlugin, E as resolvePluginTools, Er as resolveTtsApiKey, Et as resolveSessionDeliveryTarget, F as resolveAgentOutboundIdentity, Fn as requestHeartbeatNow, Fr as OPENAI_TTS_VOICES, Ft as formatRestartSentinelMessage, G as createOutboundSendDeps, Gn as extractImageContentFromSource, Gt as stripLegacyDeliveryFields, H as agentCommandFromIngress, Hn as DEFAULT_INPUT_MAX_REDIRECTS, Ht as migrateLegacyCronPayload, Ir as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, J as resolveAgentAvatar, Jt as getHookType, K as createDefaultDeps, Kn as normalizeMimeList, Kt as buildSafeExternalPrompt, L as handleSlackHttpRequest, Lr as stripHeartbeatToken, Lt as summarizeRestartSentinel, M as requestNudge, Mr as setTtsProvider, N as waitForPendingNudges, Nr as textToSpeech, Nt as consumeRestartSentinel, O as getLoadedAnalysisConcurrency, Or as resolveTtsConfig, P as waitForPendingNudgesWithin, Pr as OPENAI_TTS_MODELS, Pt as formatDoctorNonInteractiveHint, Q as buildHistoryContextFromEntries, Qn as countActiveDescendantRuns, Qt as resolveSessionAuthProfileOverride, R as readJsonBodyWithLimit, Rn as ACP_SESSION_IDENTITY_RENDERER_VERSION, Rr as WorkspaceLaneDeniedError, S as applyToolPolicyPipeline, Sr as TTS_PROVIDERS, St as ensureOutboundSessionEntry, T as getPluginToolMeta, Tr as isTtsProviderConfigured, Tt as resolveOutboundTarget, U as resolveAgentDeliveryPlan, Un as DEFAULT_INPUT_TIMEOUT_MS, Ut as buildDeliveryFromLegacyPayload, Vn as DEFAULT_INPUT_IMAGE_MIMES, Vt as normalizeCronJobPatch, W as resolveAgentOutboundTarget, Wn as extractFileContentFromSource, Wt as hasLegacyDeliveryHints, Xn as isAbortRequestText, Xt as applyBrowserProxyPaths, Yn as resolveSendPolicy, Yt as isExternalHookSession, Zt as persistBrowserProxyFiles, _ as runEmbeddedPiAgent, _n as setPreRestartDeferralCheck, _r as resolveSessionLane, _t as setCliSessionId, a as runHeartbeatOnce, an as discoverAllSessions, ar as isSessionRouteAccountLive, at as buildWorkspaceLaneActor, br as DEFAULT_MAX_PARALLEL, c as startHeartbeatRunner, cn as loadSessionLogs, cr as clearSessionQueues, d as resolveHeartbeatVisibility, dn as deferGatewayRestartUntilIdle, dr as parseLeadingStamps, dt as resolveChannelAccountEnabled, er as listDescendantRunsForRequester, et as dispatchInboundMessage, f as getLastHeartbeatEvent, fn as emitGatewayRestart, fr as stripLeadingStamps, ft as BARE_SESSION_RESET_PROMPT, g as resolveCronSession, gn as setGatewaySigusr1RestartPolicy, gt as getCliSessionId, h as isCronSystemEvent, hn as scheduleGatewaySigusr1Restart, ht as saveCronStore, i as resolveHeartbeatSummaryForAgent, ir as resolveAgentTimeoutMs, it as notifyInterruptedRuns, j as createPluginRuntime, jn as isSystemEventContextChanged, jr as setTtsEnabled, jt as runWithModelFallback, k as loadOpenClawPlugins, kr as resolveTtsPrefsPath, kt as resetDirectoryCache, l as runWakeGate, ln as loadSessionUsageTimeSeries, lr as getExistingFollowupQueue, m as redactSensitiveHeartbeatEvent, mn as markGatewaySigusr1RestartHandled, mr as ToolInputError, mt as resolveCronStorePath, n as runMainAgentTurn, nr as runSubagentAnnounceFlow, nt as createReplyDispatcher, on as loadCostUsageSummary, or as liveDeliveryContextFromSession, ot as formatWorkspaceLaneDeniedNotice, p as onHeartbeatEvent, pn as isGatewaySigusr1RestartExternallyAllowed, pr as stripLeadingStampsFlush, pt as loadCronStore, q as createOutboundSendDeps$1, qn as resolveInputFileLimits, qt as detectSuspiciousPatterns, r as resolveHeartbeatConfig, rr as readLatestAssistantReply, rt as getTotalPendingReplies, s as setHeartbeatsEnabled, sn as loadSessionCostSummary, sr as getSessionBindingService, tt as setDispatchInboundAdmissionRejectionFor, u as onSessionChatMessage, un as consumeGatewaySigusr1RestartAuthorization, ur as removeQueuedFollowupRun, v as snapshotRunPendingWrites, vn as triggerOpenClawRestart, vt as runCliAgent, wr as isTtsEnabled, wt as resolveHeartbeatDeliveryTarget, x as resolveExecConfig, xn as loadProviderUsageSummary, xr as resolveUserTimezone, xt as buildOutboundRouteActor, y as waitForPendingWrites, yr as setTaskPipelineStatus, yt as createOpenClawTools, z as requestBodyErrorToText, zn as isAcpEnabledByPolicy, zr as checkWorkspaceLaneAdmission, zt as writeRestartSentinel } from "./agent-turn-execute-CGTvDxUE.js";
+import "./pi-embedded-helpers-BbOp_MHS.js";
+import { C as resolveToolProfilePolicy, _ as collectExplicitAllowlist, y as mergeAlsoAllowPolicy } from "./sandbox-BcT2OU_g.js";
 import { a as listCoreToolSections, n as PROFILE_OPTIONS, s as resolveCoreToolProfiles } from "./tool-catalog-BKQpjFPQ.js";
-import { i as resolveRelayAuthTokenForPort, n as resolveGatewayRelayToken } from "./extension-relay-auth-D49uIEqs.js";
-import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-IMHmOQwv.js";
+import { i as resolveRelayAuthTokenForPort, n as resolveGatewayRelayToken } from "./extension-relay-auth-CEkGLele.js";
+import { i as enableTailscaleServe, n as disableTailscaleServe, o as getTailnetHostname, r as enableTailscaleFunnel, t as disableTailscaleFunnel } from "./tailscale-BiCf3X3Y.js";
 import { t as safeEqualSecret } from "./secret-equal-D6AoXne1.js";
-import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-CBZAvwAf.js";
-import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-BafnkIRl.js";
-import { a as isDirectLoopbackProvenance, c as AUTH_RATE_LIMIT_SCOPE_BROWSER_EXTENSION, d as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, f as createAuthRateLimiter, i as captureTransportProvenance, l as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, n as authorizeHttpGatewayConnect, o as isLocalDirectRequest, p as normalizeRateLimitClientIp, r as authorizeWsControlUiGatewayConnect, s as resolveGatewayAuth, t as assertGatewayAuthConfigured, u as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH } from "./auth-C4aicgu0.js";
-import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-D_ZTBjWX.js";
+import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-B5JdDATD.js";
+import { c as normalizeHostHeader, d as resolveGatewayBindHost, f as resolveGatewayListenHosts, i as isLoopbackHost, l as pickPrimaryLanIPv4, n as isLocalishHost, o as isTrustedProxyAddress, r as isLoopbackAddress, s as isValidIPv4, t as rawDataToString, u as resolveClientIp } from "./ws-Dnz-ugxp.js";
+import { a as isDirectLoopbackProvenance, c as AUTH_RATE_LIMIT_SCOPE_BROWSER_EXTENSION, d as AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET, f as createAuthRateLimiter, i as captureTransportProvenance, l as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, n as authorizeHttpGatewayConnect, o as isLocalDirectRequest, p as normalizeRateLimitClientIp, r as authorizeWsControlUiGatewayConnect, s as resolveGatewayAuth, t as assertGatewayAuthConfigured, u as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH } from "./auth--kj7eWiw.js";
+import { o as ensureGatewayStartupAuth, s as mergeGatewayTailscaleConfig } from "./server-context-DXaMid9A.js";
 import { d as hasBinary } from "./frontmatter-wrSOvVEg.js";
-import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-CWQC3bQU.js";
-import { n as assertNoPathAliasEscape } from "./path-alias-guards-L34PKmdW.js";
+import { i as loadWorkspaceSkillEntries, r as buildWorkspaceSkillSnapshot } from "./skills-rshN3U9G.js";
+import { n as assertNoPathAliasEscape } from "./path-alias-guards-DhwCAYKX.js";
 import { a as testRegexWithBoundedInput, i as compileSafeRegex, n as redactSensitiveText } from "./redact-OtHqr7lm.js";
 import { i as formatErrorMessage, o as hasErrnoCode, r as formatErrorChainMessage, s as isErrno } from "./errors-zRgI_PDI.js";
-import { i as openFileWithinRoot, l as writeFileWithinRoot, s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-db4fkk2l.js";
-import { n as SsrFBlockedError } from "./proxy-env-BcMrDxNo.js";
-import { c as detectMime } from "./image-ops-BFv9Aw5H.js";
-import "./store-ccSeveJ0.js";
-import { S as ensureChromeExtensionRelayServer } from "./chrome-CBtFbbNQ.js";
-import { i as resolveProfile, r as resolveBrowserConfig, t as movePathToTrash } from "./trash-DhfDhVld.js";
-import { n as inspectPortUsage, o as formatPortDiagnostics, t as ensurePortAvailable } from "./ports-CbjXbpjb.js";
+import { i as openFileWithinRoot, l as writeFileWithinRoot, s as readLocalFileSafely, t as SafeOpenError } from "./fs-safe-sWugzmbo.js";
+import { n as SsrFBlockedError } from "./proxy-env-t-re7bCo.js";
+import { c as detectMime } from "./image-ops-C0np5f9V.js";
+import "./store-BKtDaCRf.js";
+import { S as ensureChromeExtensionRelayServer } from "./chrome-CMvVElGc.js";
+import { i as resolveProfile, r as resolveBrowserConfig, t as movePathToTrash } from "./trash-D8OVe313.js";
+import { n as inspectPortUsage, o as formatPortDiagnostics, t as ensurePortAvailable } from "./ports-R8I-Rd2p.js";
 import { t as resolveNetworkSsrFPolicy } from "./ssrf-config-qRiQMP-8.js";
-import "./server-middleware-BxKu1j_s.js";
-import { n as readJsonFile, r as writeJsonAtomic, t as createAsyncLock } from "./json-files-G3m05NRY.js";
-import { B as PASS_METRICS_MAX_BYTES, H as isPassIdentifier, R as PASS_ITEMS_MAX_KEYS, U as onRunInvalidation, W as isReconcileTombstone, X as decodeKeysetCursor, Z as encodeKeysetCursor, jt as formatMessageStamp, r as resolveSessionStorageConfig, vn as deriveSessionTotalTokens, yn as hasNonzeroUsage, z as PASS_MEASUREMENT_SCHEMA_VERSION } from "./storage-config-CS0-6wW6.js";
-import { $ as resolveExplicitAgentSessionKey, J as stripInlineDirectiveTagsForDisplay, Q as resolveAgentMainSessionKey, S as runGlobalGatewayStopSafely, Y as stripInlineDirectiveTagsFromMessageForDisplay, Z as canonicalizeMainSessionAlias, et as resolveMainSessionKey, n as parseSessionThreadInfo, o as hydrateAndAppendToBackend, t as extractDeliveryInfo, tt as resolveMainSessionKeyFromConfig, v as getGlobalHookRunner, x as resetGlobalHookRunner, y as getGlobalPluginRegistry } from "./sessions-DPV-OS7q.js";
-import "./reset-CDG1YZWx.js";
+import "./server-middleware-CaVc3KiU.js";
+import { n as readJsonFile, r as writeJsonAtomic, t as createAsyncLock } from "./json-files-DNNBEygD.js";
+import { B as PASS_METRICS_MAX_BYTES, H as isPassIdentifier, R as PASS_ITEMS_MAX_KEYS, U as onRunInvalidation, W as isReconcileTombstone, X as decodeKeysetCursor, Z as encodeKeysetCursor, jt as formatMessageStamp, r as resolveSessionStorageConfig, vn as deriveSessionTotalTokens, yn as hasNonzeroUsage, z as PASS_MEASUREMENT_SCHEMA_VERSION } from "./storage-config-BJj76p6F.js";
+import { $ as resolveExplicitAgentSessionKey, J as stripInlineDirectiveTagsForDisplay, Q as resolveAgentMainSessionKey, S as runGlobalGatewayStopSafely, Y as stripInlineDirectiveTagsFromMessageForDisplay, Z as canonicalizeMainSessionAlias, et as resolveMainSessionKey, n as parseSessionThreadInfo, o as hydrateAndAppendToBackend, t as extractDeliveryInfo, tt as resolveMainSessionKeyFromConfig, v as getGlobalHookRunner, x as resetGlobalHookRunner, y as getGlobalPluginRegistry } from "./sessions-D5-WnU1c.js";
+import "./reset-DxYrusrF.js";
 import { i as parseAbsoluteTimeMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-D2m6f_VQ.js";
-import { a as findJobOrThrow, c as recomputeNextRuns, d as resolveJobPayloadTextForMain, g as normalizeHttpWebhookUrl, h as produceCronAgentTurn, i as cronShapeSupportsIdentity, l as recomputeNextRunsForMaintenance, m as normalizeOptionalText, n as computeJobNextRunAtMs, o as isJobDue, p as inferLegacyName, r as createJob, s as nextWakeAtMs, t as applyJobPatch, u as recordScheduleComputeError } from "./jobs-Pj6_tyn5.js";
+import { a as findJobOrThrow, c as recomputeNextRuns, d as resolveJobPayloadTextForMain, g as normalizeHttpWebhookUrl, h as produceCronAgentTurn, i as cronShapeSupportsIdentity, l as recomputeNextRunsForMaintenance, m as normalizeOptionalText, n as computeJobNextRunAtMs, o as isJobDue, p as inferLegacyName, r as createJob, s as nextWakeAtMs, t as applyJobPatch, u as recordScheduleComputeError } from "./jobs-D8gtzx-n.js";
 import "./task-run-types-CXp-wZyE.js";
 import { i as normalizeInputProvenance } from "./input-provenance-DenbV-y7.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-C-JqJMk6.js";
-import { a as resolveAgentIdentity, t as createReplyPrefixOptions } from "./reply-prefix-KAeJzNvt.js";
-import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-B0SYKifB.js";
-import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-BbJQtRIl.js";
-import { C as stopDiagnosticHeartbeat, S as startDiagnosticHeartbeat, b as resolveStuckSessionWarnMs, t as clearActiveRunProbe, x as setActiveRunProbe } from "./diagnostic-C2zSaTPq.js";
+import { a as resolveAgentIdentity, t as createReplyPrefixOptions } from "./reply-prefix-B0ufPLD2.js";
+import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-D5eYPE3_.js";
+import { a as getMachineDisplayName, i as startBrowserControlServiceFromConfig, n as createBrowserRouteDispatcher, r as createBrowserControlContext } from "./with-timeout-DG_Ef3S1.js";
+import { C as stopDiagnosticHeartbeat, S as startDiagnosticHeartbeat, b as resolveStuckSessionWarnMs, t as clearActiveRunProbe, x as setActiveRunProbe } from "./diagnostic-jFNdnXCb.js";
 import { u as snapshotActiveRuns } from "./diagnostic-session-state-BJMCOJZO.js";
-import { _ as waitForActiveTasks, g as setGatewayDrainState, h as setCommandLaneConcurrency, m as resetAllLanes, n as CommandLaneClearedError, o as enqueueCommandInLane, p as markGatewayDraining, r as GatewayDrainingError, s as getActiveTaskCount, u as getTotalQueueSize } from "./command-queue-DqvFUE_T.js";
-import { n as resolveModel } from "./model-UbsJmYeh.js";
-import "./pi-model-discovery-Rjo2hv2p.js";
-import "./models-config-CC5yFmpv.js";
-import { i as resolveSafeBins } from "./exec-approvals-allowlist-B3_jgDyG.js";
-import "./exec-safe-bin-runtime-policy-h4hE5cjd.js";
-import "./session-consumer-agents-CBqraSzI.js";
-import { n as loadModelCatalog } from "./model-catalog-D1B81cpq.js";
+import { _ as waitForActiveTasks, g as setGatewayDrainState, h as setCommandLaneConcurrency, m as resetAllLanes, n as CommandLaneClearedError, o as enqueueCommandInLane, p as markGatewayDraining, r as GatewayDrainingError, s as getActiveTaskCount, u as getTotalQueueSize } from "./command-queue-D7PleaNJ.js";
+import { n as resolveModel } from "./model-A1TZLzNB.js";
+import "./pi-model-discovery-BWXqga5N.js";
+import "./models-config-CBX2i56k.js";
+import { i as resolveSafeBins } from "./exec-approvals-allowlist-CfzuCK0Q.js";
+import "./exec-safe-bin-runtime-policy-CY75nr5s.js";
+import "./session-consumer-agents-Zo97FAeD.js";
+import { n as loadModelCatalog } from "./model-catalog-BcJh6M8w.js";
 import { t as extractTextFromChatContent } from "./chat-content-BuwZNf43.js";
-import "./pi-embedded-utils-Bqo7G8Hn.js";
-import { r as resolveToolDisplay } from "./tool-display-CjfVgl4p.js";
-import { D as registerUnhandledRejectionHandler, _ as getProviderDeclaredEnvVars, f as resolveModelEntries, n as buildProviderRegistry, s as transcribeBufferedPcmWithMediaUnderstanding, u as resolveCapabilityConfig, v as listAutoDetectableProviders, y as normalizeMediaProviderId } from "./audio-transcription-runner-Bs4pG29e.js";
-import "./fetch-BZPOzq9L.js";
-import { t as fetchWithSsrFGuard } from "./fetch-guard-laNnWRKl.js";
-import "./api-key-rotation-muerimbF.js";
+import "./pi-embedded-utils-Df8_gFa-.js";
+import { r as resolveToolDisplay } from "./tool-display-BuSkjyOX.js";
+import { D as registerUnhandledRejectionHandler, _ as getProviderDeclaredEnvVars, f as resolveModelEntries, n as buildProviderRegistry, s as transcribeBufferedPcmWithMediaUnderstanding, u as resolveCapabilityConfig, v as listAutoDetectableProviders, y as normalizeMediaProviderId } from "./audio-transcription-runner-BXSN8eBn.js";
+import "./fetch-CLk1nKmU.js";
+import { t as fetchWithSsrFGuard } from "./fetch-guard-TJQinE0a.js";
+import "./api-key-rotation-D4lnO3Ok.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-B0HeWy68.js";
-import "./chunk-TNziyyRO.js";
-import "./markdown-tables-i_PaXF56.js";
-import "./ir-BbGjFYnq.js";
+import "./chunk-DAmLsltN.js";
+import "./markdown-tables-BwQlrMEW.js";
+import "./ir-BoNkouUO.js";
 import "./render-CXDO_kgw.js";
-import { r as isRestartEnabled } from "./commands-DYSm3eNj.js";
-import "./commands-registry-BbHkcgn_.js";
-import "./user-run-recording-Cw29-tG1.js";
+import { r as isRestartEnabled } from "./commands-BSuDoyqC.js";
+import "./commands-registry-CWGturUV.js";
+import "./user-run-recording-DrY68KAf.js";
 import { t as withTimeout } from "./with-timeout-BLukccJL.js";
-import { a as resolveAgentSessionDirs, t as getAcpSessionManager } from "./manager-C5AVBxrT.js";
-import { $ as validateGlanceWidgetsListParams, $n as revokeDeviceToken, $t as validateSkillsStatusParams, A as validateConfigSetParams, An as validateWizardStartParams, B as validateDeviceIdentityUnlinkParams, Bn as buildDeviceAuthPayloadV3, C as validateChatSurfacesGetParams, Cn as validateTtsSpeakParams, D as validateConfigGetParams, Dn as validateWebLoginWaitParams, E as validateConfigApplyParams, En as validateWebLoginStartParams, F as validateCronRunParams, Fn as ErrorCodes, G as validateDeviceTokenRevokeParams, Gn as consumeDeviceBootstrapToken, Gt as validateSessionsStorageImportParams, H as validateDevicePairListParams, I as validateCronRunsParams, In as errorShape, J as validateExecApprovalResolveParams, K as validateDeviceTokenRotateParams, Kn as ensureDeviceToken, Kt as validateSessionsStorageStatusParams, L as validateCronStatusParams, M as validateCronAddParams, Mn as PROTOCOL_VERSION, N as validateCronListParams, Nn as RUNS_INVALIDATED_EVENT, O as validateConfigPatchParams, On as validateWizardCancelParams, P as validateCronRemoveParams, Q as validateExecApprovalsSetParams, Qn as requestDevicePairing, Qt as validateSkillsInstallParams, R as validateCronUpdateParams, S as validateChatSendParams, Sn as validateTtsReadAloudStatusParams, T as validateChatSurfacesPinParams, Tn as validateWakeParams, U as validateDevicePairRejectParams, Un as approveBootstrapDevicePairing, Ut as validateSessionsSteerParams, V as validateDevicePairApproveParams, Vn as normalizeDeviceMetadataForAuth, W as validateDevicePairRemoveParams, Wn as approveDevicePairing, Wt as validateSessionsStorageBackupParams, X as validateExecApprovalsNodeGetParams, Xn as rejectDevicePairing, Xt as validateSessionsUsageParams, Y as validateExecApprovalsGetParams, Yn as listDevicePairing, Yt as validateSessionsTitlePrepareParams, Z as validateExecApprovalsNodeSetParams, Zn as removePairedDevice, Zt as validateSkillsBinsParams, _ as validateChannelsStatusParams, _n as validateTasksRunEventsParams, _t as validateRequestFrame, a as validateAgentIdentityParams, an as validateTalkRealtimeBargeInParams, at as validateNodeEventParams, b as validateChatHistoryParams, bn as validateTasksRunsListParams, bt as validateSendParams, c as validateAgentWaitParams, cn as validateTalkRealtimeStatusParams, cr as roleScopesAllow, ct as validateNodeListParams, d as validateAgentsFilesGetParams, dn as validateTalkSessionAppendAudioParams, dr as deriveDeviceIdFromPublicKey, dt as validateNodePairRejectParams, en as validateSkillsUpdateParams, er as rotateDeviceToken, et as validateLogsTailParams, f as validateAgentsFilesListParams, fn as validateTalkSessionBargeInParams, ft as validateNodePairRequestParams, g as validateChannelsLogoutParams, gn as validateTalkSessionMarkParams, gt as validatePushTestParams, h as validateAgentsUpdateParams, hn as validateTalkSessionCreateParams, ht as validatePollParams, i as formatValidationErrors, in as validateTalkRealtimeAudioParams, ir as verifyDeviceToken, it as validateNodeDescribeParams, j as validateConnectParams, jn as validateWizardStatusParams, jt as validateSessionsMaintenanceRunParams, k as validateConfigSchemaParams, kn as validateWizardNextParams, l as validateAgentsCreateParams, ln as validateTalkRealtimeStopParams, lt as validateNodePairApproveParams, m as validateAgentsListParams, mn as validateTalkSessionCloseParams, mr as verifyDeviceSignature, mt as validateNodeRenameParams, nn as validateTalkConfigParams, nr as updatePairedDeviceMetadata, nt as validateModelsAuthStatusParams, o as validateAgentNudgeParams, on as validateTalkRealtimeMarkParams, ot as validateNodeInvokeParams, p as validateAgentsFilesSetParams, pn as validateTalkSessionCancelTurnParams, pr as normalizeDevicePublicKeyBase64Url, pt as validateNodePairVerifyParams, q as validateExecApprovalRequestParams, qn as getPairedDevice, qt as validateSessionsStorageValidateParams, rn as validateTalkModeParams, rr as verifyDeviceBootstrapToken, rt as validateModelsListParams, s as validateAgentParams, sn as validateTalkRealtimeSessionParams, sr as operatorScopeSatisfied, st as validateNodeInvokeResultParams, tn as validateTalkCatalogParams, tr as summarizeDeviceTokens, tt as validateMemoryIndexParams, u as validateAgentsDeleteParams, un as validateTalkRealtimeToolResultParams, ut as validateNodePairListParams, v as validateChatAbortParams, vn as validateTasksRunsEventsParams, vt as validateSecretsResolveParams, w as validateChatSurfacesListParams, wn as validateUpdateRunParams, x as validateChatInjectParams, xn as validateToolsCatalogParams, xt as validateSessionsAbortParams, y as validateChatActivityEvent, yn as validateTasksRunsGetParams, yt as validateSecretsResolveResult, z as validateDeviceIdentityLinkParams, zn as buildDeviceAuthPayload } from "./client-x4GnolXm.js";
-import { _ as hasNarrowSessionScope, d as APPROVALS_SCOPE, f as PAIRING_SCOPE, g as authorizeOperatorScopesForMethod, h as WRITE_SCOPE, m as SESSION_READ_SCOPE, n as callGateway, p as READ_SCOPE, u as ADMIN_SCOPE$1, v as isHealthProbeAllowedForScopes, x as loadGatewayTlsRuntime$1, y as isNodeRoleMethod } from "./call-C4ArH9Si.js";
+import { a as resolveAgentSessionDirs, t as getAcpSessionManager } from "./manager-vjvTALqw.js";
+import { $ as validateGlanceWidgetsListParams, $n as revokeDeviceToken, $t as validateSkillsStatusParams, A as validateConfigSetParams, An as validateWizardStartParams, B as validateDeviceIdentityUnlinkParams, Bn as buildDeviceAuthPayloadV3, C as validateChatSurfacesGetParams, Cn as validateTtsSpeakParams, D as validateConfigGetParams, Dn as validateWebLoginWaitParams, E as validateConfigApplyParams, En as validateWebLoginStartParams, F as validateCronRunParams, Fn as ErrorCodes, G as validateDeviceTokenRevokeParams, Gn as consumeDeviceBootstrapToken, Gt as validateSessionsStorageImportParams, H as validateDevicePairListParams, I as validateCronRunsParams, In as errorShape, J as validateExecApprovalResolveParams, K as validateDeviceTokenRotateParams, Kn as ensureDeviceToken, Kt as validateSessionsStorageStatusParams, L as validateCronStatusParams, M as validateCronAddParams, Mn as PROTOCOL_VERSION, N as validateCronListParams, Nn as RUNS_INVALIDATED_EVENT, O as validateConfigPatchParams, On as validateWizardCancelParams, P as validateCronRemoveParams, Q as validateExecApprovalsSetParams, Qn as requestDevicePairing, Qt as validateSkillsInstallParams, R as validateCronUpdateParams, S as validateChatSendParams, Sn as validateTtsReadAloudStatusParams, T as validateChatSurfacesPinParams, Tn as validateWakeParams, U as validateDevicePairRejectParams, Un as approveBootstrapDevicePairing, Ut as validateSessionsSteerParams, V as validateDevicePairApproveParams, Vn as normalizeDeviceMetadataForAuth, W as validateDevicePairRemoveParams, Wn as approveDevicePairing, Wt as validateSessionsStorageBackupParams, X as validateExecApprovalsNodeGetParams, Xn as rejectDevicePairing, Xt as validateSessionsUsageParams, Y as validateExecApprovalsGetParams, Yn as listDevicePairing, Yt as validateSessionsTitlePrepareParams, Z as validateExecApprovalsNodeSetParams, Zn as removePairedDevice, Zt as validateSkillsBinsParams, _ as validateChannelsStatusParams, _n as validateTasksRunEventsParams, _t as validateRequestFrame, a as validateAgentIdentityParams, an as validateTalkRealtimeBargeInParams, at as validateNodeEventParams, b as validateChatHistoryParams, bn as validateTasksRunsListParams, bt as validateSendParams, c as validateAgentWaitParams, cn as validateTalkRealtimeStatusParams, cr as roleScopesAllow, ct as validateNodeListParams, d as validateAgentsFilesGetParams, dn as validateTalkSessionAppendAudioParams, dr as deriveDeviceIdFromPublicKey, dt as validateNodePairRejectParams, en as validateSkillsUpdateParams, er as rotateDeviceToken, et as validateLogsTailParams, f as validateAgentsFilesListParams, fn as validateTalkSessionBargeInParams, ft as validateNodePairRequestParams, g as validateChannelsLogoutParams, gn as validateTalkSessionMarkParams, gt as validatePushTestParams, h as validateAgentsUpdateParams, hn as validateTalkSessionCreateParams, ht as validatePollParams, i as formatValidationErrors, in as validateTalkRealtimeAudioParams, ir as verifyDeviceToken, it as validateNodeDescribeParams, j as validateConnectParams, jn as validateWizardStatusParams, jt as validateSessionsMaintenanceRunParams, k as validateConfigSchemaParams, kn as validateWizardNextParams, l as validateAgentsCreateParams, ln as validateTalkRealtimeStopParams, lt as validateNodePairApproveParams, m as validateAgentsListParams, mn as validateTalkSessionCloseParams, mr as verifyDeviceSignature, mt as validateNodeRenameParams, nn as validateTalkConfigParams, nr as updatePairedDeviceMetadata, nt as validateModelsAuthStatusParams, o as validateAgentNudgeParams, on as validateTalkRealtimeMarkParams, ot as validateNodeInvokeParams, p as validateAgentsFilesSetParams, pn as validateTalkSessionCancelTurnParams, pr as normalizeDevicePublicKeyBase64Url, pt as validateNodePairVerifyParams, q as validateExecApprovalRequestParams, qn as getPairedDevice, qt as validateSessionsStorageValidateParams, rn as validateTalkModeParams, rr as verifyDeviceBootstrapToken, rt as validateModelsListParams, s as validateAgentParams, sn as validateTalkRealtimeSessionParams, sr as operatorScopeSatisfied, st as validateNodeInvokeResultParams, tn as validateTalkCatalogParams, tr as summarizeDeviceTokens, tt as validateMemoryIndexParams, u as validateAgentsDeleteParams, un as validateTalkRealtimeToolResultParams, ut as validateNodePairListParams, v as validateChatAbortParams, vn as validateTasksRunsEventsParams, vt as validateSecretsResolveParams, w as validateChatSurfacesListParams, wn as validateUpdateRunParams, x as validateChatInjectParams, xn as validateToolsCatalogParams, xt as validateSessionsAbortParams, y as validateChatActivityEvent, yn as validateTasksRunsGetParams, yt as validateSecretsResolveResult, z as validateDeviceIdentityLinkParams, zn as buildDeviceAuthPayload } from "./client-DsaKKPz1.js";
+import { _ as hasNarrowSessionScope, d as APPROVALS_SCOPE, f as PAIRING_SCOPE, g as authorizeOperatorScopesForMethod, h as WRITE_SCOPE, m as SESSION_READ_SCOPE, n as callGateway, p as READ_SCOPE, u as ADMIN_SCOPE$1, v as isHealthProbeAllowedForScopes, x as loadGatewayTlsRuntime$1, y as isNodeRoleMethod } from "./call-BY-wbSIJ.js";
 import "./pairing-token-D1vOP4TH.js";
-import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-0PYx5aDJ.js";
-import { u as buildOutboundSessionContext } from "./outbound-message-hooks-_I696mNI.js";
-import { o as normalizeReplyPayloadsForDelivery, s as stampReplyActivity, t as deliverOutboundPayloads } from "./deliver-gllA2ft3.js";
-import { C as computeBackoff, c as pruneLegacyStoreKeys, d as resolveSessionStoreKey, f as capArrayByJsonBytes, g as jsonUtf8Bytes, h as stripEnvelopeFromMessages, l as resolveGatewaySessionStoreTarget, m as stripEnvelopeFromMessage, o as loadCombinedSessionStoreForGateway, r as listAgentsForGateway, s as loadSessionEntry, t as canonicalizeSpawnedByForAgent, u as resolveSessionModelRef, w as sleepWithAbort, x as lookupContextTokens } from "./session-utils-Btoq903T.js";
+import { D as onAgentEvent, E as getAgentRunContext, O as registerAgentRunContext, T as emitAgentEvent, a as getActiveEmbeddedRunCount, c as isEmbeddedPiRunInFlight, d as isInFlightVoiceAttempt, f as peekActiveEmbeddedRun, g as waitForEmbeddedPiRunEnd, l as isEmbeddedPiRunSteerable, o as getActiveEmbeddedRunOwner, r as clearActiveEmbeddedRun, s as isEmbeddedPiRunActive, t as abortEmbeddedPiRun, w as clearAgentRunContext } from "./runs-DzlzC2_b.js";
+import { u as buildOutboundSessionContext } from "./outbound-message-hooks-BvKzCtP_.js";
+import { o as normalizeReplyPayloadsForDelivery, s as stampReplyActivity, t as deliverOutboundPayloads } from "./deliver-CjuGs2ZT.js";
+import { C as computeBackoff, c as pruneLegacyStoreKeys, d as resolveSessionStoreKey, f as capArrayByJsonBytes, g as jsonUtf8Bytes, h as stripEnvelopeFromMessages, l as resolveGatewaySessionStoreTarget, m as stripEnvelopeFromMessage, o as loadCombinedSessionStoreForGateway, r as listAgentsForGateway, s as loadSessionEntry, t as canonicalizeSpawnedByForAgent, u as resolveSessionModelRef, w as sleepWithAbort, x as lookupContextTokens } from "./session-utils-BsJs6MoS.js";
 import "./fetch-Dj9nWJut.js";
-import { a as readChannelAllowFromStoreSync } from "./pairing-store-ZXK7b5SG.js";
-import { a as maxAsk, c as normalizeExecApprovals, g as saveExecApprovalsV2, h as saveExecApprovals, i as loadExecApprovalsV2, l as readExecApprovalsSnapshot, m as resolveExecApprovalsReadOnly, o as mergeExecApprovalsSocketDefaults, r as ensureExecApprovals, s as minSecurity, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-CImDpHtY.js";
-import { _ as matchSystemRunApprovalBinding, g as buildSystemRunApprovalBinding, h as resolveSystemRunApprovalRuntimeContext, m as resolveSystemRunApprovalRequestContext, v as missingSystemRunApprovalBinding, y as toSystemRunApprovalMismatchError } from "./nodes-screen-DO6BNCQ6.js";
-import { i as defaultOrphanLedgerFilePath, r as createOrphanLedger, t as getProcessSupervisor } from "./supervisor-RBm1KDN1.js";
-import { r as resolveSystemRunCommand, t as canonicalizeLegacySystemRunParams } from "./system-run-command-CtzUrDfp.js";
-import { S as registerSkillsChangeListener, _ as requestNodePairing, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, g as renamePairedNode, h as rejectNodePairing, l as refreshRemoteBinsForConnectedNodes, m as listNodePairing, o as getRemoteSkillEligibility, p as approveNodePairing, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion, y as verifyNodeToken } from "./skill-commands-BktltILY.js";
-import { t as listAgentWorkspaceDirs } from "./workspace-dirs-DBNKIvKX.js";
-import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-46g6fP3z.js";
-import "./tables-BhzelQWA.js";
+import { a as readChannelAllowFromStoreSync } from "./pairing-store-BbBjVYYR.js";
+import { a as maxAsk, c as normalizeExecApprovals, g as saveExecApprovalsV2, h as saveExecApprovals, i as loadExecApprovalsV2, l as readExecApprovalsSnapshot, m as resolveExecApprovalsReadOnly, o as mergeExecApprovalsSocketDefaults, r as ensureExecApprovals, s as minSecurity, t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-CavJfWPl.js";
+import { _ as matchSystemRunApprovalBinding, g as buildSystemRunApprovalBinding, h as resolveSystemRunApprovalRuntimeContext, m as resolveSystemRunApprovalRequestContext, v as missingSystemRunApprovalBinding, y as toSystemRunApprovalMismatchError } from "./nodes-screen-Brwiveoh.js";
+import { i as defaultOrphanLedgerFilePath, r as createOrphanLedger, t as getProcessSupervisor } from "./supervisor-CbcownOj.js";
+import { r as resolveSystemRunCommand, t as canonicalizeLegacySystemRunParams } from "./system-run-command-DmwSJZGF.js";
+import { S as registerSkillsChangeListener, _ as requestNodePairing, c as recordRemoteNodeInfo, d as removeRemoteNodeInfo, f as setSkillsRemoteRegistry, g as renamePairedNode, h as rejectNodePairing, l as refreshRemoteBinsForConnectedNodes, m as listNodePairing, o as getRemoteSkillEligibility, p as approveNodePairing, s as primeRemoteSkillsCache, u as refreshRemoteNodeBins, v as updatePairedNodeMetadata, x as getSkillsSnapshotVersion, y as verifyNodeToken } from "./skill-commands-DKmd3uhq.js";
+import { t as listAgentWorkspaceDirs } from "./workspace-dirs-B1dGJTd4.js";
+import { a as buildBaseHints, i as applySensitiveHints, n as redactConfigSnapshot, o as mapSensitivePaths, r as restoreRedactedValues, s as applyDerivedTags, t as redactConfigObject } from "./redact-snapshot-Dr2xSc0p.js";
+import "./tables-B62PgWcr.js";
 import "./strip-inbound-meta-pZFrUZkq.js";
-import "./server-lifecycle-CAXoy64R.js";
-import { h as resolveSubagentToolPolicy, m as resolveGroupToolPolicy, p as resolveEffectiveToolPolicy } from "./dm-policy-shared-DyPD8y1v.js";
-import "./reply-directives-B_4oA3B0.js";
-import { n as resolveMessageChannelSelection } from "./channel-selection-JkSKVHJp.js";
-import { i as buildChannelUiCatalog, t as applyPluginAutoEnable } from "./plugin-auto-enable-CbW6trDK.js";
-import "./send-0JKFG0wR.js";
-import "./outbound-attachment-BbJWA7EA.js";
+import "./server-lifecycle-BHXiQH6m.js";
+import { h as resolveSubagentToolPolicy, m as resolveGroupToolPolicy, p as resolveEffectiveToolPolicy } from "./dm-policy-shared-BHHuPFZr.js";
+import "./reply-directives-De0PRN70.js";
+import { n as resolveMessageChannelSelection } from "./channel-selection-BxBw-nya.js";
+import { i as buildChannelUiCatalog, t as applyPluginAutoEnable } from "./plugin-auto-enable-BtVVoq7k.js";
+import "./send-CFvOM8pI.js";
+import "./outbound-attachment-DK190u8V.js";
 import "./delivery-queue-Fnuscurf.js";
-import "./send-BPuhxPvx.js";
-import "./resolve-route-IeN1DK4w.js";
-import "./session-meta-WRN3ZcJ5.js";
-import "./replies-DxPPKLeJ.js";
-import { n as GATEWAY_AUTH_SURFACE_PATHS, p as isKnownSecretTargetId, r as evaluateGatewayAuthSurfaceStates } from "./runtime-config-collectors-Chqse-1v.js";
-import "./command-secret-targets-CX4FWTx8.js";
-import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-ByS2aPrW.js";
-import "./wsl-CG9o9v6x.js";
-import "./prompt-style-DUK2H9pQ.js";
-import "./pairing-labels-BDuNTDsa.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-vUKqKvFg.js";
-import { r as resolveMemorySearchConfig } from "./manager-Be7W1lBp.js";
-import "./query-expansion-BzoTldVy.js";
-import { a as acquireGatewayLock, i as GatewayLockError, l as backupSqliteSessionDatabase, p as resolveGatewayBackupPath } from "./session-storage-owner-BLPjnobT.js";
-import { t as formatDocsLink } from "./links-BRY-h8H0.js";
+import "./send-CVaGAWEm.js";
+import "./resolve-route-CZXzecu6.js";
+import "./session-meta-wyuckoIK.js";
+import "./replies-t1yaLy4q.js";
+import { n as GATEWAY_AUTH_SURFACE_PATHS, p as isKnownSecretTargetId, r as evaluateGatewayAuthSurfaceStates } from "./runtime-config-collectors-rhm6uhD8.js";
+import "./command-secret-targets-MpNVd6gM.js";
+import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-Bz91Pf6D.js";
+import "./wsl-Bm8bcioC.js";
+import "./prompt-style-CevZQqqE.js";
+import "./pairing-labels-BSl8PmyI.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-DajAbkdp.js";
+import { r as resolveMemorySearchConfig } from "./manager-B5VtBnfA.js";
+import "./query-expansion-DtX8mWw8.js";
+import { a as acquireGatewayLock, i as GatewayLockError, l as backupSqliteSessionDatabase, p as resolveGatewayBackupPath } from "./session-storage-owner-D0BMYGR6.js";
+import { t as formatDocsLink } from "./links-CPIBVJ0k.js";
 import { n as runCommandWithRuntime } from "./cli-utils-fSG_7xFh.js";
-import { t as formatHelpExamples } from "./help-format-CUXi0c_1.js";
-import { n as withProgress } from "./progress-80iGSJGv.js";
-import { n as REASON_JOURNAL_UNWRITABLE, t as REASON_JOURNAL_CORRUPT } from "./controller-Cph9HEXR.js";
-import "./recovery-prompt-Bmmt8OXc.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status--U7Dyunf.js";
+import { t as formatHelpExamples } from "./help-format-BQ0UHPHt.js";
+import { n as withProgress } from "./progress-DGJz2cvq.js";
+import { n as REASON_JOURNAL_UNWRITABLE, t as REASON_JOURNAL_CORRUPT } from "./controller-C5VfLHxD.js";
+import "./recovery-prompt-BEH6XjKs.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-C40ecVhY.js";
 import { t as ensureOpenClawCliOnPath } from "./path-env-BrtYmyqz.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-BcIYuer2.js";
 import { n as inheritOptionFromParent } from "./command-options-CA30lfLK.js";
 import { t as WizardCancelledError } from "./prompts-Bl5EP6pj.js";
-import { t as resolveChannelDefaultAccountId } from "./helpers-CmoGqLct.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-C9y5L4K8.js";
-import { t as isWithinDir } from "./path-safety-DHLkivTI.js";
-import "./install-safe-path-BZ4b1O0D.js";
-import "./npm-pack-install-B__b0nDK.js";
-import "./skill-scanner-ubz0B8p_.js";
-import "./installs-D16nEuyM.js";
-import { n as formatConfigIssueLines } from "./issue-format-OFCh_2sH.js";
+import { t as resolveChannelDefaultAccountId } from "./helpers-DpVn76ht.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-BjA0noNV.js";
+import { t as isWithinDir } from "./path-safety-Dibh-nnA.js";
+import "./install-safe-path-2eEPQsHT.js";
+import "./npm-pack-install-BwupN_XV.js";
+import "./skill-scanner-YQwX3yC-.js";
+import "./installs-DSwIaqJH.js";
+import { n as formatConfigIssueLines } from "./issue-format-DhAa1_iS.js";
 import { t as buildChannelAccountSnapshot } from "./status-BmtCS3T1.js";
-import "./channels-status-issues-KrOAESoD.js";
-import { a as dropDeviceIdentity, i as resolveGatewayClientProfile, l as unlinkDeviceIdentity, o as linkDeviceIdentity, t as WEB_CLIENT_ALLOWED_ORIGINS_CONFIG_KEY } from "./client-profiles-DeaEz84_.js";
-import "./daemon-install-helpers-YbryCWUm.js";
-import "./runtime-guard-BGWl62dI.js";
-import "./service-DMkBvr4B.js";
-import "./systemd-CyRDQg6V.js";
-import "./lifecycle-core-BI6xkw0D.js";
-import "./systemd-hints-CPEnXHmj.js";
+import "./channels-status-issues-DYdDrl6F.js";
+import { a as dropDeviceIdentity, i as resolveGatewayClientProfile, l as unlinkDeviceIdentity, o as linkDeviceIdentity, t as WEB_CLIENT_ALLOWED_ORIGINS_CONFIG_KEY } from "./client-profiles-HTQt5I_7.js";
+import "./daemon-install-helpers-DN9p53IN.js";
+import "./runtime-guard-7e_ZRPFH.js";
+import "./service-DoOh34VG.js";
+import "./systemd-DCrSOh9E.js";
+import "./lifecycle-core-BP96hEWA.js";
+import "./systemd-hints-Dc0OitcD.js";
 import { t as parsePort$1 } from "./parse-port-DnJYkByg.js";
-import { n as addGatewayServiceCommands } from "./daemon-cli-DlS7PDJU.js";
-import "./diagnostics-CSh5FcKM.js";
-import "./table-BRTxbR4E.js";
-import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-BhBfoR1S.js";
-import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop } from "./shared-COhRUP1S.js";
-import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-CEciibi6.js";
-import { t as discoverGatewayBeacons } from "./bonjour-discovery-24oEkWjB.js";
-import { _ as pickGatewaySelfPresence, a as markStorageLifecycleStopping, c as awaitGatewayRecoveryReleased, d as stopGatewayRestartRecoveryForShutdown, f as DOCTOR_AUTHORITY_MISSING, g as verifyRecoveryAuthority, h as rotateRecoveryAuthoritySecret, i as getStorageV1Snapshot, l as initGatewayRecoveryControls, m as mintRecoveryAuthority, o as startSessionStorage, p as doctorInspect, r as getStatusSummary, s as FatalConfiguredStorageStartError, u as startGatewayRestartRecoveryRuntime } from "./status-CCetLhy5.js";
-import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-CKyXEs4C.js";
-import { r as resolveStaleClaimAdoptionMs } from "./recovery-adapter-CjmLDOyV.js";
-import { a as respondTaskRegistryUnavailable, c as tasksHandlers, d as withTimeout$1, i as resolveTaskOperatorRegistry, l as retryDelayMs, r as getTaskOperatorRegistry, t as DEFAULT_RETENTION_DAYS, u as waitForStopDrain } from "./task-runlog-retention-v6UWCQjX.js";
-import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-DvutqvBd.js";
-import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-CndjAqFL.js";
-import { t as reconcileBundledInstalls } from "./reconcile-bundled-DM4QcNVH.js";
-import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-B1z-tYeF.js";
-import "./onboarding.secret-input--lcWBs-r.js";
-import { t as runOnboardingWizard } from "./onboarding-Z7sHNPIN.js";
-import { a as CONTROL_UI_V2_SERVICE_NAME, i as webBundleMissingMessage, n as buildUserClientRuntimeConfig, o as buildControlUiV2RuntimeConfig, r as resolvePackagedWebBundleRootSync, t as USER_CLIENT_ID } from "./runtime-config-Dm2RpLJ7.js";
-import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-DspwiDEu.js";
-import { a as readChatHistoryPage, c as REPLY_CONTEXT_CUSTOM_TYPE, d as admitUiActionHead, f as bindUiActionTurn, g as UiSurfaceRefSchema, h as assertValidParams, i as decodeHistoryCursor, l as buildReplyContextPayload, m as unsubscribeSessionChanges, o as resolveDbLeafEntryId, p as reserveUiActionAdmission, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers, u as UI_ACTION_CUSTOM_TYPE } from "./sessions-Bi3UGKUO.js";
-import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-CahF-fra.js";
-import { t as tombstoneAgentSessions } from "./delete-agent-sessions-C60hkBQ-.js";
-import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-C-htkgT_.js";
-import "./node-service-Ch4eBsUZ.js";
-import "./status.update-CHNp32m-.js";
-import { i as resolveActiveLogFile, n as readLogSlice } from "./log-tail-DeaaUA7g.js";
-import { i as POSTGRES_BACKUP_REQUIRED_MESSAGE, r as runSessionsMaintenance, s as validateSessionStorageCore } from "./sessions-maintenance-core-C2cCpUiU.js";
-import "./session-store-targets-i0Ss9Rbv.js";
-import { t as installSkill } from "./skills-install-Cu_sfOVw.js";
-import { r as runGatewayUpdate } from "./update-runner-BMqGHvjP.js";
-import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-C4JU6kgP.js";
-import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-WFKXbJHh.js";
-import { n as forceFreePortAndWait } from "./ports-CbxaZ4JR.js";
+import { n as addGatewayServiceCommands } from "./daemon-cli-BVlct7Qh.js";
+import "./diagnostics-CbXyRsTN.js";
+import "./table-Buk61GwP.js";
+import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-CvnQrk1m.js";
+import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop } from "./shared-DCN12ugV.js";
+import { a as probeGateway, n as collectEnabledInsecureOrDangerousFlags } from "./audit-CKbyr9j7.js";
+import { t as discoverGatewayBeacons } from "./bonjour-discovery-BthO3c3w.js";
+import { _ as pickGatewaySelfPresence, a as markStorageLifecycleStopping, c as awaitGatewayRecoveryReleased, d as stopGatewayRestartRecoveryForShutdown, f as DOCTOR_AUTHORITY_MISSING, g as verifyRecoveryAuthority, h as rotateRecoveryAuthoritySecret, i as getStorageV1Snapshot, l as initGatewayRecoveryControls, m as mintRecoveryAuthority, o as startSessionStorage, p as doctorInspect, r as getStatusSummary, s as FatalConfiguredStorageStartError, u as startGatewayRestartRecoveryRuntime } from "./status-D-NG9OFK.js";
+import { c as redactOwner, d as redactSensitiveHealthSummary, f as styleHealthChannelLine, n as getHealthSnapshot, t as formatHealthChannelLines } from "./health-CkjZqvKv.js";
+import { r as resolveStaleClaimAdoptionMs } from "./recovery-adapter-BRrpxylo.js";
+import { a as respondTaskRegistryUnavailable, c as tasksHandlers, d as withTimeout$1, i as resolveTaskOperatorRegistry, l as retryDelayMs, r as getTaskOperatorRegistry, t as DEFAULT_RETENTION_DAYS, u as waitForStopDrain } from "./task-runlog-retention-Cq2OgFdi.js";
+import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-D7LC9ugV.js";
+import { h as normalizeUpdateChannel, l as DEFAULT_PACKAGE_CHANNEL, n as checkUpdateStatus, o as resolveNpmChannelTag, r as compareSemverStrings } from "./channel-account-context-DIx7V4k-.js";
+import { t as reconcileBundledInstalls } from "./reconcile-bundled-V0NDG76P.js";
+import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-DxtfUxa-.js";
+import "./onboarding.secret-input-Bly8kI9z.js";
+import { t as runOnboardingWizard } from "./onboarding-CHVuwQW-.js";
+import { a as CONTROL_UI_V2_SERVICE_NAME, i as webBundleMissingMessage, n as buildUserClientRuntimeConfig, o as buildControlUiV2RuntimeConfig, r as resolvePackagedWebBundleRootSync, t as USER_CLIENT_ID } from "./runtime-config-DZ4anlFD.js";
+import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-CcZhsDRS.js";
+import { a as readChatHistoryPage, c as REPLY_CONTEXT_CUSTOM_TYPE, d as admitUiActionHead, f as bindUiActionTurn, g as UiSurfaceRefSchema, h as assertValidParams, i as decodeHistoryCursor, l as buildReplyContextPayload, m as unsubscribeSessionChanges, o as resolveDbLeafEntryId, p as reserveUiActionAdmission, r as InvalidHistoryCursorError, s as resolveDbMessageEntryById, t as sessionsHandlers, u as UI_ACTION_CUSTOM_TYPE } from "./sessions-DQ3diYco.js";
+import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-CBsUX2F0.js";
+import { t as tombstoneAgentSessions } from "./delete-agent-sessions-B4HnloYv.js";
+import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-S97zDTm2.js";
+import "./node-service-Drxz78wf.js";
+import "./status.update-BjR63JWs.js";
+import { i as resolveActiveLogFile, n as readLogSlice } from "./log-tail-DoAwmIXn.js";
+import { i as POSTGRES_BACKUP_REQUIRED_MESSAGE, r as runSessionsMaintenance, s as validateSessionStorageCore } from "./sessions-maintenance-core-CmawGRLz.js";
+import "./session-store-targets-hup1YSx3.js";
+import { t as installSkill } from "./skills-install-B5X0Cyhn.js";
+import { r as runGatewayUpdate } from "./update-runner-CtQqJO0C.js";
+import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-C8NxbJFT.js";
+import { c as heartbeatProbeRunArtifactId, d as runIsolatedHeartbeatProbe, i as HEARTBEAT_PROBE_REASON, l as isHeartbeatProbeError, o as assertHeartbeatProbeDeliveryIsSafe, p as readValidationActivation, r as HEARTBEAT_PROBE_ALLOWED_TARGET, s as assertHeartbeatProbeParamsAreClosed, t as VALIDATION_ABORT_COMMAND, u as probeSessionKey$1 } from "./operator-commands-1PttwYpR.js";
+import { n as forceFreePortAndWait } from "./ports-DkQ0JgDq.js";
 import { spawn, spawnSync } from "node:child_process";
 import { cpuUsage, memoryUsage, resourceUsage, uptime } from "node:process";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -199,7 +199,7 @@ import path from "node:path";
 import * as fsSync from "node:fs";
 import fs from "node:fs";
 import chalk from "chalk";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import { isDeepStrictEqual, promisify } from "node:util";
 import zlib from "node:zlib";
 import crypto, { createHash, createHmac, hkdfSync, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -1407,7 +1407,7 @@ function resolveCheckIntervalMs(cfg) {
 }
 async function readState(statePath) {
 	try {
-		const raw = await fs$1.readFile(statePath, "utf-8");
+		const raw = await fsPromises.readFile(statePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		return parsed && typeof parsed === "object" ? parsed : {};
 	} catch {
@@ -1488,7 +1488,7 @@ async function runAutoUpdateCommand(params) {
 			path.join(params.root, "dist", "index.mjs")
 		];
 		for (const candidate of candidates) try {
-			await fs$1.access(candidate);
+			await fsPromises.access(candidate);
 			argv.push(execPath, candidate, ...baseArgs);
 			break;
 		} catch {}
@@ -5516,9 +5516,9 @@ async function drainPendingWrite(filePath) {
 	if (pending) await pending.catch(() => void 0);
 }
 async function pruneIfNeeded(filePath, opts) {
-	const stat = await fs$1.stat(filePath).catch(() => null);
+	const stat = await fsPromises.stat(filePath).catch(() => null);
 	if (!stat || stat.size <= opts.maxBytes) return;
-	const raw = await fs$1.readFile(filePath, "utf-8").catch((err) => {
+	const raw = await fsPromises.readFile(filePath, "utf-8").catch((err) => {
 		log$29.warn("cron run-log: prune skipped (read failed)", {
 			filePath,
 			err: String(err)
@@ -5530,14 +5530,14 @@ async function pruneIfNeeded(filePath, opts) {
 	const kept = lines.slice(Math.max(0, lines.length - opts.keepLines));
 	const { randomBytes } = await import("node:crypto");
 	const tmp = `${filePath}.${process.pid}.${randomBytes(8).toString("hex")}.tmp`;
-	await fs$1.writeFile(tmp, `${kept.join("\n")}\n`, "utf-8");
-	await fs$1.rename(tmp, filePath);
+	await fsPromises.writeFile(tmp, `${kept.join("\n")}\n`, "utf-8");
+	await fsPromises.rename(tmp, filePath);
 }
 async function listCronRunLogReadPaths(filePath) {
 	const resolved = path.resolve(filePath);
 	const dir = path.dirname(resolved);
 	const base = path.basename(resolved);
-	return [...(await fs$1.readdir(dir).catch(() => [])).map((name) => {
+	return [...(await fsPromises.readdir(dir).catch(() => [])).map((name) => {
 		const match = new RegExp(`^${base.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\.(\\d+)(\\.gz)?$`).exec(name);
 		return match ? {
 			path: path.join(dir, name),
@@ -5546,8 +5546,8 @@ async function listCronRunLogReadPaths(filePath) {
 	}).filter((entry) => entry !== null).toSorted((a, b) => b.slot - a.slot).map((entry) => entry.path), resolved];
 }
 async function readCronRunLogFile(filePath) {
-	if (filePath.endsWith(".gz")) return zlib.gunzipSync(await fs$1.readFile(filePath)).toString("utf-8");
-	return fs$1.readFile(filePath, "utf-8");
+	if (filePath.endsWith(".gz")) return zlib.gunzipSync(await fsPromises.readFile(filePath)).toString("utf-8");
+	return fsPromises.readFile(filePath, "utf-8");
 }
 async function readCronRunLogRaw(filePath) {
 	const chunks = [];
@@ -5698,7 +5698,7 @@ async function readCronRunLogEntriesPageAll(opts) {
 	const query = opts.query?.trim().toLowerCase() ?? "";
 	const sortDir = opts.sortDir === "asc" ? "asc" : "desc";
 	const runsDir = path.resolve(path.dirname(path.resolve(opts.storePath)), "runs");
-	const files = await fs$1.readdir(runsDir, { withFileTypes: true }).catch(() => []);
+	const files = await fsPromises.readdir(runsDir, { withFileTypes: true }).catch(() => []);
 	const logFiles = [...new Set(files.filter((entry) => entry.isFile()).map((entry) => {
 		const match = /^(.+\.jsonl)(?:\.\d+(?:\.gz)?)?$/.exec(entry.name);
 		return match ? path.join(runsDir, match[1] ?? "") : null;
@@ -10363,7 +10363,7 @@ function resolveWorkspaceFilePathResultOrThrow(params) {
 }
 async function resolveWorkspaceRealPath(workspaceDir) {
 	try {
-		return await fs$1.realpath(workspaceDir);
+		return await fsPromises.realpath(workspaceDir);
 	} catch {
 		return path.resolve(workspaceDir);
 	}
@@ -10392,7 +10392,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 	};
 	let candidateLstat;
 	try {
-		candidateLstat = await fs$1.lstat(candidatePath);
+		candidateLstat = await fsPromises.lstat(candidatePath);
 	} catch (err) {
 		return resolveWorkspaceFilePathResultOrThrow({
 			error: err,
@@ -10403,7 +10403,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 	if (candidateLstat.isSymbolicLink()) {
 		let targetReal;
 		try {
-			targetReal = await fs$1.realpath(candidatePath);
+			targetReal = await fsPromises.realpath(candidatePath);
 		} catch (err) {
 			return resolveWorkspaceFilePathResultOrThrow({
 				error: err,
@@ -10418,7 +10418,7 @@ async function resolveAgentWorkspaceFilePath(params) {
 		};
 		let targetStat;
 		try {
-			targetStat = await fs$1.stat(targetReal);
+			targetStat = await fsPromises.stat(targetReal);
 		} catch (err) {
 			return resolveWorkspaceFilePathResultOrThrow({
 				error: err,
@@ -10456,13 +10456,13 @@ async function resolveAgentWorkspaceFilePath(params) {
 	return {
 		kind: "ready",
 		requestPath,
-		ioPath: await fs$1.realpath(candidatePath).catch(() => candidatePath),
+		ioPath: await fsPromises.realpath(candidatePath).catch(() => candidatePath),
 		workspaceReal
 	};
 }
 async function statFileSafely(filePath) {
 	try {
-		const [stat, lstat] = await Promise.all([fs$1.stat(filePath), fs$1.lstat(filePath)]);
+		const [stat, lstat] = await Promise.all([fsPromises.stat(filePath), fsPromises.lstat(filePath)]);
 		if (lstat.isSymbolicLink() || !stat.isFile()) return null;
 		if (stat.nlink > 1) return null;
 		if (!sameFileIdentity(stat, lstat)) return null;
@@ -10556,7 +10556,7 @@ function respondAgentNotFound(respond, agentId) {
 async function moveToTrashBestEffort(pathname) {
 	if (!pathname) return;
 	try {
-		await fs$1.access(pathname);
+		await fsPromises.access(pathname);
 	} catch {
 		return;
 	}
@@ -10632,7 +10632,7 @@ const agentsHandlers = {
 			dir: workspaceDir,
 			ensureBootstrapFiles: !Boolean(nextConfig.agents?.defaults?.skipBootstrap)
 		});
-		await fs$1.mkdir(resolveSessionTranscriptsDirForAgent(agentId), { recursive: true });
+		await fsPromises.mkdir(resolveSessionTranscriptsDirForAgent(agentId), { recursive: true });
 		await writeConfigFile(nextConfig);
 		const safeName = sanitizeIdentityLine(rawName);
 		const emoji = resolveOptionalStringParam(params.emoji);
@@ -10645,7 +10645,7 @@ const agentsHandlers = {
 			...avatar ? [`- Avatar: ${sanitizeIdentityLine(avatar)}`] : [],
 			""
 		];
-		await fs$1.appendFile(identityPath, lines.join("\n"), "utf-8");
+		await fsPromises.appendFile(identityPath, lines.join("\n"), "utf-8");
 		respond(true, {
 			ok: true,
 			agentId,
@@ -10680,9 +10680,9 @@ const agentsHandlers = {
 		});
 		if (avatar) {
 			const workspace = workspaceDir ?? resolveAgentWorkspaceDir(nextConfig, agentId);
-			await fs$1.mkdir(workspace, { recursive: true });
+			await fsPromises.mkdir(workspace, { recursive: true });
 			const identityPath = path.join(workspace, DEFAULT_IDENTITY_FILENAME);
-			await fs$1.appendFile(identityPath, `\n- Avatar: ${sanitizeIdentityLine(avatar)}\n`, "utf-8");
+			await fsPromises.appendFile(identityPath, `\n- Avatar: ${sanitizeIdentityLine(avatar)}\n`, "utf-8");
 		}
 		respond(true, {
 			ok: true,
@@ -10802,7 +10802,7 @@ const agentsHandlers = {
 		const resolved = resolveAgentWorkspaceFileOrRespondError(params, respond);
 		if (!resolved) return;
 		const { agentId, workspaceDir, name } = resolved;
-		await fs$1.mkdir(workspaceDir, { recursive: true });
+		await fsPromises.mkdir(workspaceDir, { recursive: true });
 		const filePath = path.join(workspaceDir, name);
 		const resolvedPath = await resolveWorkspaceFilePathOrRespond({
 			respond,
@@ -16678,7 +16678,7 @@ const nodeHandlers = {
 		const p = params;
 		const payloadJSON = typeof p.payloadJSON === "string" ? p.payloadJSON : p.payload !== void 0 ? JSON.stringify(p.payload) : null;
 		await respondUnavailableOnThrow(respond, async () => {
-			const { handleNodeEvent } = await import("./server-node-events-3XEsy92y.js");
+			const { handleNodeEvent } = await import("./server-node-events-D_Ue3RLX.js");
 			const nodeId = client?.connect?.device?.id ?? client?.connect?.client?.id ?? "node";
 			await handleNodeEvent({
 				deps: context.deps,
@@ -26977,7 +26977,7 @@ function normalizeAgentPayload(payload) {
 async function startBrowserControlServerIfEnabled() {
 	if (isTruthyEnvValue(process.env.OPENCLAW_SKIP_BROWSER_CONTROL_SERVER)) return null;
 	const override = process.env.OPENCLAW_BROWSER_CONTROL_MODULE?.trim();
-	const mod = override ? await import(override) : await import("./server-B_-KxUi3.js");
+	const mod = override ? await import(override) : await import("./server-DvHjKPLj.js");
 	const start = typeof mod.startBrowserControlServiceFromConfig === "function" ? mod.startBrowserControlServiceFromConfig : mod.startBrowserControlServerFromConfig;
 	const stop = typeof mod.stopBrowserControlService === "function" ? mod.stopBrowserControlService : mod.stopBrowserControlServer;
 	if (!start) return null;
@@ -27208,7 +27208,7 @@ async function resolveFileWithinRoot(rootReal, urlPath) {
 	if (normalized.endsWith("/")) return await tryOpen(path.posix.join(rel, "index.html"));
 	const candidate = path.join(rootReal, rel);
 	try {
-		const st = await fs$1.lstat(candidate);
+		const st = await fsPromises.lstat(candidate);
 		if (st.isSymbolicLink()) return null;
 		if (st.isDirectory()) return await tryOpen(path.posix.join(rel, "index.html"));
 	} catch {}
@@ -27245,8 +27245,8 @@ async function resolveA2uiRoot() {
 	for (const dir of candidates) try {
 		const indexPath = path.join(dir, "index.html");
 		const bundlePath = path.join(dir, "a2ui.bundle.js");
-		await fs$1.stat(indexPath);
-		await fs$1.stat(bundlePath);
+		await fsPromises.stat(indexPath);
+		await fsPromises.stat(bundlePath);
 		return dir;
 	} catch {}
 	return null;
@@ -27255,7 +27255,7 @@ async function resolveA2uiRootReal() {
 	if (cachedA2uiRootReal !== void 0 && (cachedA2uiRootReal !== null || Date.now() - cachedA2uiResolvedAtMs < A2UI_ROOT_RETRY_NULL_AFTER_MS)) return cachedA2uiRootReal;
 	if (!resolvingA2uiRoot) resolvingA2uiRoot = (async () => {
 		const root = await resolveA2uiRoot();
-		cachedA2uiRootReal = root ? await fs$1.realpath(root) : null;
+		cachedA2uiRootReal = root ? await fsPromises.realpath(root) : null;
 		cachedA2uiResolvedAtMs = Date.now();
 		resolvingA2uiRoot = null;
 		return cachedA2uiRootReal;
@@ -27476,13 +27476,13 @@ function normalizeBasePath(rawPath) {
 }
 async function prepareCanvasRoot(rootDir) {
 	await ensureDir(rootDir);
-	const rootReal = await fs$1.realpath(rootDir);
+	const rootReal = await fsPromises.realpath(rootDir);
 	try {
 		const indexPath = path.join(rootReal, "index.html");
-		await fs$1.stat(indexPath);
+		await fsPromises.stat(indexPath);
 	} catch {
 		try {
-			await fs$1.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
+			await fsPromises.writeFile(path.join(rootReal, "index.html"), defaultIndexHTML(), "utf8");
 		} catch {}
 	}
 	return rootReal;
@@ -37409,14 +37409,14 @@ async function bootGatewayServer(port, opts, bootStorageTeardown) {
 	let sessionConsumerClaimSweepCancelled = false;
 	let sessionConsumerClaimSweepBoot = null;
 	if (!minimalTestGateway) sessionConsumerClaimSweepBoot = (async () => {
-		const { getConfiguredSessionStorageRuntime } = await import("./config-2hPOvE4Z.js").then((n) => n.Kn);
-		const { loadPluginManifestRegistry } = await import("./config-2hPOvE4Z.js").then((n) => n.ft);
-		const { getActivePluginRegistry } = await import("./config-2hPOvE4Z.js").then((n) => n.Yt);
-		const { deriveGatewaySweepConsumers, runSessionConsumerSweepTick, startSessionConsumerSweepSchedule } = await import("./session-consumer-claim-sweep-AZ5o8Cu-.js");
+		const { getConfiguredSessionStorageRuntime } = await import("./config-D--rwfpd.js").then((n) => n.Kn);
+		const { loadPluginManifestRegistry } = await import("./config-D--rwfpd.js").then((n) => n.ft);
+		const { getActivePluginRegistry } = await import("./config-D--rwfpd.js").then((n) => n.Yt);
+		const { deriveGatewaySweepConsumers, runSessionConsumerSweepTick, startSessionConsumerSweepSchedule } = await import("./session-consumer-claim-sweep-xufX6DVl.js");
 		const sweepLog = log$1.child("session-consumer-claim-sweep");
 		const { createDiagnosticRingBuffer } = await import("./session-consumer-diagnostics-CzEP078J.js");
 		const diagnostics = createDiagnosticRingBuffer();
-		const { setDiagnostics } = await import("./sessions-Bi3UGKUO.js").then((n) => n.n);
+		const { setDiagnostics } = await import("./sessions-DQ3diYco.js").then((n) => n.n);
 		if (sessionConsumerClaimSweepCancelled) return;
 		setDiagnostics(diagnostics);
 		const lastKnownEnabledState = /* @__PURE__ */ new Map();
@@ -37455,7 +37455,7 @@ async function bootGatewayServer(port, opts, bootStorageTeardown) {
 					lastKnownEnabledState,
 					cfg: loadConfig()
 				});
-				const { setLastSweepTimestamp } = await import("./sessions-Bi3UGKUO.js").then((n) => n.n);
+				const { setLastSweepTimestamp } = await import("./sessions-DQ3diYco.js").then((n) => n.n);
 				setLastSweepTimestamp(Date.now());
 			} catch (err) {
 				sweepLog.warn(`session consumer-claim sweep failed: ${String(err)}`);
@@ -37476,8 +37476,8 @@ async function bootGatewayServer(port, opts, bootStorageTeardown) {
 			id: "task-dispatch",
 			prepare: () => {
 				taskPipelineBoot = (async () => {
-					const { getConfiguredSessionStorageRuntime } = await import("./config-2hPOvE4Z.js").then((n) => n.Kn);
-					const { startTaskPipeline } = await import("./task-pipeline-boot-BqE_GrmQ.js");
+					const { getConfiguredSessionStorageRuntime } = await import("./config-D--rwfpd.js").then((n) => n.Kn);
+					const { startTaskPipeline } = await import("./task-pipeline-boot-DgTg-CLO.js");
 					const pipeline = startTaskPipeline({
 						getConfigured: getConfiguredSessionStorageRuntime,
 						cfg: cfgAtStart,
@@ -38282,7 +38282,7 @@ async function stopInteractiveWorkBeforeClose(params) {
 		});
 	}
 	const supervisorStep = (async () => {
-		const { getProcessSupervisor } = await import("./supervisor-RBm1KDN1.js").then((n) => n.n);
+		const { getProcessSupervisor } = await import("./supervisor-CbcownOj.js").then((n) => n.n);
 		return await cancelSupervisorChildrenAndFlush(getProcessSupervisor(), Math.min(CHILD_EXIT_BUDGET_MS, Math.max(1, remainingMs())));
 	})().catch((error) => {
 		log.warn("supervisor cancelAll or ledger flush failed; child processes may leak", {
@@ -38296,7 +38296,7 @@ async function stopInteractiveWorkBeforeClose(params) {
 	let acpCancelTimedOut = false;
 	let cancelledRunIds = [];
 	try {
-		const { getAcpSessionManager } = await import("./manager-C5AVBxrT.js").then((n) => n.n);
+		const { getAcpSessionManager } = await import("./manager-vjvTALqw.js").then((n) => n.n);
 		const result = await getAcpSessionManager().cancelActiveTurnsForShutdown({
 			reason: params.reason,
 			timeoutMs: Math.max(1, params.budgetMs - PENDING_REPLY_RESERVE_MS)
@@ -38367,7 +38367,7 @@ async function stopInteractiveWorkBeforeClose(params) {
 */
 async function sweepSupervisorChildrenBeforeExit(params) {
 	try {
-		const { getProcessSupervisor } = await import("./supervisor-RBm1KDN1.js").then((n) => n.n);
+		const { getProcessSupervisor } = await import("./supervisor-CbcownOj.js").then((n) => n.n);
 		const stats = await cancelSupervisorChildrenAndFlush(getProcessSupervisor(), params.budgetMs);
 		if (stats.cancelled > 0) log.info(`final supervisor sweep cancelled ${stats.cancelled} child process(es)`, { exitWaitTimedOut: stats.exitWaitTimedOut });
 	} catch (error) {
@@ -38475,7 +38475,7 @@ async function runGatewayLoop(params) {
 					if (isRestart) {
 						markGatewayDraining();
 						const activeTasks = getActiveTaskCount();
-						const acpManager = (await import("./manager-C5AVBxrT.js").then((n) => n.n)).getAcpSessionManager();
+						const acpManager = (await import("./manager-vjvTALqw.js").then((n) => n.n)).getAcpSessionManager();
 						const activeTurns = acpManager.getActiveTurnCount();
 						if (activeTasks > 0 || activeTurns > 0) {
 							gatewayLog$1.info(`draining ${activeTasks} active task(s), ${activeTurns} active acp turn(s) before restart (timeout ${DRAIN_TIMEOUT_MS}ms)`);