winclaw 2026.3.32 → 2026.4.1

package/dist/{banner-DPOw4Y5Z.js → banner-CrUQs7By.js}

@@ -269,7 +269,7 @@ function pickTagline(options = {}) {
 //#endregion
 //#region src/cli/banner.ts
 let bannerEmitted = false;
-const graphemeSegmenter = typeof Intl !== "undefined" && "Segmenter" in Intl ? new Intl.Segmenter(void 0, { granularity: "grapheme" }) : null;
+typeof Intl !== "undefined" && "Segmenter" in Intl && new Intl.Segmenter(void 0, { granularity: "grapheme" });
 const hasJsonFlag = (argv) => argv.some((arg) => arg === "--json" || arg.startsWith("--json="));
 const hasVersionFlag = (argv) => argv.some((arg) => arg === "--version" || arg === "-V") || hasRootVersionAlias(argv);
 function parseTaglineMode(value) {

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "2026.3.32",
+  "version": "2026.4.1",
   "commit": "abcdfbe9f6f3a1f71a9ea523f0c4a0dad07608fe",
-  "builtAt": "2026-03-24T14:34:40.450Z"
+  "builtAt": "2026-03-24T15:14:55.303Z"
 }

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-9afd2515b6ed4acd28a826fd4532d298f8a19f7a913e71a37942ce9c56ac47d6
+cb8fecfd5a4a343ce61c082c35d67f5ad915d6e32fc2f8b22fa1793571a5c6e2

package/dist/{command-registry-0y2xBLj0.js → command-registry-DoH9LuuA.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { Ct as hasHelpOrVersion, bt as getPrimaryCommand } from "./entry.js";
-import { i as registerSubCliCommands, o as removeCommandByName, s as reparseProgramFromActionArgs } from "./register.subclis-dddx3aux.js";
+import { i as registerSubCliCommands, o as removeCommandByName, s as reparseProgramFromActionArgs } from "./register.subclis-DJ2ZLtcN.js";
 
 //#region src/cli/program/command-registry.ts
 var command_registry_exports = /* @__PURE__ */ __exportAll({
@@ -22,7 +22,7 @@ const coreEntries = [
 			hasSubcommands: false
 		}],
 		register: async ({ program }) => {
-			(await import("./register.setup-CvVcRAAU.js")).registerSetupCommand(program);
+			(await import("./register.setup-DLhJIOnz.js")).registerSetupCommand(program);
 		}
 	},
 	{
@@ -32,7 +32,7 @@ const coreEntries = [
 			hasSubcommands: false
 		}],
 		register: async ({ program }) => {
-			(await import("./register.onboard-UCJc4fR5.js")).registerOnboardCommand(program);
+			(await import("./register.onboard-Bw9bpiHH.js")).registerOnboardCommand(program);
 		}
 	},
 	{
@@ -79,7 +79,7 @@ const coreEntries = [
 			}
 		],
 		register: async ({ program }) => {
-			(await import("./register.maintenance-CDEHwOBe.js")).registerMaintenanceCommands(program);
+			(await import("./register.maintenance-BMIPQ5QO.js")).registerMaintenanceCommands(program);
 		}
 	},
 	{

package/dist/{completion-cli-DOjD8RjQ.js → completion-cli-CyCV3ZHh.js}

@@ -2,8 +2,8 @@ import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { P as theme, ot as resolveStateDir, u as routeLogsToStderr } from "./entry.js";
 import { m as pathExists } from "./utils-hiIKrqOK.js";
 import { t as formatDocsLink } from "./links-Bcv6_maG.js";
-import { n as getSubCliEntries, r as registerSubCliByName } from "./register.subclis-dddx3aux.js";
-import { i as registerCoreCliByName, n as getCoreCliCommandNames } from "./command-registry-0y2xBLj0.js";
+import { n as getSubCliEntries, r as registerSubCliByName } from "./register.subclis-DJ2ZLtcN.js";
+import { i as registerCoreCliByName, n as getCoreCliCommandNames } from "./command-registry-DoH9LuuA.js";
 import { t as getProgramContext } from "./program-context-gd4x_qEm.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{completion-cli-D_r7Agv7.js → completion-cli-D5AGXrau.js}

@@ -4,7 +4,7 @@ import { p as theme } from "./globals-OYV0_7Zs.js";
 import { h as pathExists } from "./utils-D78H0maG.js";
 import { i as routeLogsToStderr } from "./subsystem-CYocb_fP.js";
 import { t as formatDocsLink } from "./links-Tx7CNWHl.js";
-import { a as registerCoreCliByName, c as getSubCliEntries, l as registerSubCliByName, r as getCoreCliCommandNames, t as getProgramContext } from "./program-context-62Ht6ZW6.js";
+import { a as registerCoreCliByName, c as getSubCliEntries, l as registerSubCliByName, r as getCoreCliCommandNames, t as getProgramContext } from "./program-context-M__UNjvB.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs/promises";

package/dist/{doctor-completion-vm65W1rC.js → doctor-completion-B7rNU63W.js}

@@ -1,7 +1,7 @@
 import { r as resolveCliName } from "./command-format-C2YuTuPp.js";
 import { t as resolveWinClawPackageRoot } from "./winclaw-root-D0OUuGl7.js";
 import { t as note } from "./note-Emtc1zzf.js";
-import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-DOjD8RjQ.js";
+import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-CyCV3ZHh.js";
 import { spawnSync } from "node:child_process";
 import path from "node:path";
 

package/dist/{doctor-completion-UANUtpOr.js → doctor-completion-Drs7WusO.js}

@@ -1,7 +1,7 @@
 import { t as resolveWinClawPackageRoot } from "./winclaw-root-ExuHY0xi.js";
 import { r as resolveCliName } from "./command-format-BU9fEGrc.js";
 import { t as note } from "./note-DPVyaATq.js";
-import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-D_r7Agv7.js";
+import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-D5AGXrau.js";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
 

package/dist/entry.js

@@ -1831,7 +1831,7 @@ if (!isMainModule({
 	}
 	function tryHandleRootHelpFastPath(argv) {
 		if (!isRootHelpInvocation(argv)) return false;
-		import("./program-akmc3IUx.js").then(({ buildProgram }) => {
+		import("./program-DmK4Ex-d.js").then(({ buildProgram }) => {
 			buildProgram().outputHelp();
 		}).catch((error) => {
 			console.error("[winclaw] Failed to display help:", error instanceof Error ? error.stack ?? error.message : error);
@@ -1850,7 +1850,7 @@ if (!isMainModule({
 			applyCliProfileEnv({ profile: parsed.profile });
 			process$1.argv = parsed.argv;
 		}
-		if (!tryHandleRootVersionFastPath(process$1.argv) && !tryHandleRootHelpFastPath(process$1.argv)) import("./run-main-BVZb3asP.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
+		if (!tryHandleRootVersionFastPath(process$1.argv) && !tryHandleRootHelpFastPath(process$1.argv)) import("./run-main-CtPy_map.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
 			console.error("[winclaw] Failed to start CLI:", error instanceof Error ? error.stack ?? error.message : error);
 			process$1.exitCode = 1;
 		});

package/dist/{gateway-cli-BGUFZVFD.js → gateway-cli-CPQ759ko.js}

@@ -150,7 +150,7 @@ import { c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as checkUp
 import { t as runGatewayUpdate } from "./update-runner-DgLjHR6L.js";
 import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-BF8Olfsc.js";
 import "./onboarding.secret-input-BqpyOfgu.js";
-import { t as runOnboardingWizard } from "./onboarding-BmR6zht0.js";
+import { t as runOnboardingWizard } from "./onboarding-cdo8bLhe.js";
 import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-Ccnjw92j.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-DgQq2EEP.js";
 import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-hSqGZL6Y.js";
@@ -27675,15 +27675,39 @@ async function runGatewayCommand$1(opts) {
 	const snapshot = await readConfigFileSnapshot().catch(() => null);
 	const configExists = snapshot?.exists ?? fs.existsSync(CONFIG_PATH);
 	const configAuditPath = path.join(resolveStateDir(process.env), "logs", "config-audit.jsonl");
-	const mode = cfg.gateway?.mode;
+	let mode = cfg.gateway?.mode;
 	if (!opts.allowUnconfigured && mode !== "local") {
-		if (!configExists) defaultRuntime.error(`Missing config. Run \`${formatCliCommand("winclaw setup")}\` or set gateway.mode=local (or pass --allow-unconfigured).`);
-		else {
-			defaultRuntime.error(`Gateway start blocked: set gateway.mode=local (current: ${mode ?? "unset"}) or pass --allow-unconfigured.`);
-			defaultRuntime.error(`Config write audit: ${configAuditPath}`);
+		if (!configExists) try {
+			const healthRes = await fetch("http://127.0.0.1:3100/health", { signal: AbortSignal.timeout(2e3) }).catch(() => null);
+			if ((healthRes ? await healthRes.json().catch(() => null) : null)?.service === "grc-server") {
+				defaultRuntime.log("Local GRC detected at http://127.0.0.1:3100 — creating auto-config...");
+				const stateDir = resolveStateDir(process.env);
+				fs.mkdirSync(stateDir, { recursive: true });
+				const autoConfig = {
+					gateway: {
+						mode: "local",
+						port: 18789,
+						bind: "loopback",
+						auth: { mode: "token" },
+						controlUi: { dangerouslyDisableDeviceAuth: true }
+					},
+					grc: { url: "http://127.0.0.1:3100" }
+				};
+				fs.writeFileSync(path.join(stateDir, "winclaw.json"), JSON.stringify(autoConfig, null, 2));
+				defaultRuntime.log(`Config auto-created at ${path.join(stateDir, "winclaw.json")}`);
+				Object.assign(cfg, autoConfig);
+				mode = "local";
+			}
+		} catch {}
+		if (mode !== "local") {
+			if (!configExists) defaultRuntime.error(`Missing config. Run \`${formatCliCommand("winclaw setup")}\` or set gateway.mode=local (or pass --allow-unconfigured).`);
+			else {
+				defaultRuntime.error(`Gateway start blocked: set gateway.mode=local (current: ${mode ?? "unset"}) or pass --allow-unconfigured.`);
+				defaultRuntime.error(`Config write audit: ${configAuditPath}`);
+			}
+			defaultRuntime.exit(1);
+			return;
 		}
-		defaultRuntime.exit(1);
-		return;
 	}
 	const miskeys = extractGatewayMiskeys(snapshot?.parsed);
 	const authOverride = authMode || passwordRaw || tokenRaw || authModeRaw ? {

package/dist/{gateway-cli-fCcYxOiD.js → gateway-cli-JvKJCIvQ.js}

@@ -153,7 +153,7 @@ import { c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as checkUp
 import { t as runGatewayUpdate } from "./update-runner-BPC9hov9.js";
 import { a as resolveCommandSecretsFromActiveRuntimeSnapshot, i as prepareSecretsRuntimeSnapshot, n as clearSecretsRuntimeSnapshot, r as getActiveSecretsRuntimeSnapshot, t as activateSecretsRuntimeSnapshot } from "./runtime-C8G-Ij45.js";
 import "./onboarding.secret-input-CpvAADXr.js";
-import { t as runOnboardingWizard } from "./onboarding-CPrdZaF8.js";
+import { t as runOnboardingWizard } from "./onboarding-BA6Xzjvi.js";
 import { a as sendApnsAlert, c as parseMessageWithAttachments, d as shouldLogWs, f as summarizeAgentEventForWsLog, i as resolveApnsAuthConfigFromEnv, l as formatForLog, n as normalizeApnsEnvironment, o as sendApnsBackgroundWake, p as setGatewayWsLogStyle, s as normalizeRpcAttachmentsToChatAttachments, t as loadApnsRegistration, u as logWs } from "./push-apns-asJ7Q3eB.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-CGtohkh2.js";
 import { n as isNodeCommandAllowed, r as resolveNodeCommandAllowlist } from "./node-command-policy-CtleaLrB.js";
@@ -27677,15 +27677,39 @@ async function runGatewayCommand$1(opts) {
 	const snapshot = await readConfigFileSnapshot().catch(() => null);
 	const configExists = snapshot?.exists ?? fs.existsSync(CONFIG_PATH);
 	const configAuditPath = path.join(resolveStateDir(process.env), "logs", "config-audit.jsonl");
-	const mode = cfg.gateway?.mode;
+	let mode = cfg.gateway?.mode;
 	if (!opts.allowUnconfigured && mode !== "local") {
-		if (!configExists) defaultRuntime.error(`Missing config. Run \`${formatCliCommand("winclaw setup")}\` or set gateway.mode=local (or pass --allow-unconfigured).`);
-		else {
-			defaultRuntime.error(`Gateway start blocked: set gateway.mode=local (current: ${mode ?? "unset"}) or pass --allow-unconfigured.`);
-			defaultRuntime.error(`Config write audit: ${configAuditPath}`);
+		if (!configExists) try {
+			const healthRes = await fetch("http://127.0.0.1:3100/health", { signal: AbortSignal.timeout(2e3) }).catch(() => null);
+			if ((healthRes ? await healthRes.json().catch(() => null) : null)?.service === "grc-server") {
+				defaultRuntime.log("Local GRC detected at http://127.0.0.1:3100 — creating auto-config...");
+				const stateDir = resolveStateDir(process.env);
+				fs.mkdirSync(stateDir, { recursive: true });
+				const autoConfig = {
+					gateway: {
+						mode: "local",
+						port: 18789,
+						bind: "loopback",
+						auth: { mode: "token" },
+						controlUi: { dangerouslyDisableDeviceAuth: true }
+					},
+					grc: { url: "http://127.0.0.1:3100" }
+				};
+				fs.writeFileSync(path.join(stateDir, "winclaw.json"), JSON.stringify(autoConfig, null, 2));
+				defaultRuntime.log(`Config auto-created at ${path.join(stateDir, "winclaw.json")}`);
+				Object.assign(cfg, autoConfig);
+				mode = "local";
+			}
+		} catch {}
+		if (mode !== "local") {
+			if (!configExists) defaultRuntime.error(`Missing config. Run \`${formatCliCommand("winclaw setup")}\` or set gateway.mode=local (or pass --allow-unconfigured).`);
+			else {
+				defaultRuntime.error(`Gateway start blocked: set gateway.mode=local (current: ${mode ?? "unset"}) or pass --allow-unconfigured.`);
+				defaultRuntime.error(`Config write audit: ${configAuditPath}`);
+			}
+			defaultRuntime.exit(1);
+			return;
 		}
-		defaultRuntime.exit(1);
-		return;
 	}
 	const miskeys = extractGatewayMiskeys(snapshot?.parsed);
 	const authOverride = authMode || passwordRaw || tokenRaw || authModeRaw ? {

package/dist/index.js

@@ -119,7 +119,7 @@ import { t as isMainModule } from "./is-main-TPRg8r91.js";
 import { t as ensureWinClawCliOnPath } from "./path-env-Buh15leX.js";
 import { t as assertSupportedRuntime } from "./runtime-guard-FM7xygCS.js";
 import "./ports-75LDB15g.js";
-import { i as getCoreCliCommandsWithSubcommands, n as setProgramContext, o as registerProgramCommands, s as getSubCliCommandsWithSubcommands } from "./program-context-62Ht6ZW6.js";
+import { i as getCoreCliCommandsWithSubcommands, n as setProgramContext, o as registerProgramCommands, s as getSubCliCommandsWithSubcommands } from "./program-context-M__UNjvB.js";
 import "./plugin-registry-BeoYaQ7j.js";
 import { n as resolveCliChannelOptions } from "./channel-options-ka5SNkDk.js";
 import process$1 from "node:process";
@@ -415,7 +415,7 @@ function pickTagline(options = {}) {
 //#endregion
 //#region src/cli/banner.ts
 let bannerEmitted = false;
-const graphemeSegmenter = typeof Intl !== "undefined" && "Segmenter" in Intl ? new Intl.Segmenter(void 0, { granularity: "grapheme" }) : null;
+typeof Intl !== "undefined" && "Segmenter" in Intl && new Intl.Segmenter(void 0, { granularity: "grapheme" });
 const hasJsonFlag = (argv) => argv.some((arg) => arg === "--json" || arg.startsWith("--json="));
 const hasVersionFlag = (argv) => argv.some((arg) => arg === "--version" || arg === "-V") || hasRootVersionAlias(argv);
 function parseTaglineMode(value) {

package/dist/{onboard-B2Y_r1_l.js → onboard-DEir-GQ1.js}

@@ -8,7 +8,7 @@ import { t as assertSupportedRuntime } from "./runtime-guard-FM7xygCS.js";
 import { t as WizardCancelledError } from "./prompts-m1IJwIAx.js";
 import { t as createClackPrompter } from "./clack-prompter-zvdI4LpS.js";
 import { t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-mYDSc4SR.js";
-import { t as runOnboardingWizard } from "./onboarding-CPrdZaF8.js";
+import { t as runOnboardingWizard } from "./onboarding-BA6Xzjvi.js";
 import { n as logConfigUpdated } from "./logging-BD5zmT-4.js";
 import { i as normalizeLegacyOnboardAuthChoice, r as isDeprecatedAuthChoice, t as ONBOARD_PROVIDER_AUTH_FLAGS } from "./onboard-provider-auth-flags-CIRgbott.js";
 import { t as applyOnboardingLocalWorkspaceConfig } from "./onboard-config-CiaxSolC.js";

package/dist/{onboard-D8Adq_r9.js → onboard-NcAbd8BT.js}

@@ -7,7 +7,7 @@ import { t as WizardCancelledError } from "./prompts-DomsZukd.js";
 import { t as createClackPrompter } from "./clack-prompter-C88sE8nV.js";
 import { t as assertSupportedRuntime } from "./runtime-guard-H-DjZ1G4.js";
 import { t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-99xh1fGv.js";
-import { t as runOnboardingWizard } from "./onboarding-BmR6zht0.js";
+import { t as runOnboardingWizard } from "./onboarding-cdo8bLhe.js";
 import { n as logConfigUpdated } from "./logging-D6YjGDjQ.js";
 import { i as normalizeLegacyOnboardAuthChoice, r as isDeprecatedAuthChoice, t as ONBOARD_PROVIDER_AUTH_FLAGS } from "./onboard-provider-auth-flags--oF1OLyy.js";
 import { t as applyOnboardingLocalWorkspaceConfig } from "./onboard-config-g-XBXKJM.js";

package/dist/{onboarding-CPrdZaF8.js → onboarding-BA6Xzjvi.js}

@@ -327,7 +327,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		mode
 	});
 	await writeConfigFile(nextConfig);
-	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-CBSdaN18.js");
+	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-0mWawAfn.js");
 	const { launchedTui } = await finalizeOnboardingWizard({
 		flow,
 		opts,

package/dist/{onboarding-BmR6zht0.js → onboarding-cdo8bLhe.js}

@@ -326,7 +326,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		mode
 	});
 	await writeConfigFile(nextConfig);
-	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-Voe0WOEw.js");
+	const { finalizeOnboardingWizard } = await import("./onboarding.finalize-Bicw2cW7.js");
 	const { launchedTui } = await finalizeOnboardingWizard({
 		flow,
 		opts,

package/dist/{onboarding.finalize-CBSdaN18.js → onboarding.finalize-0mWawAfn.js}

@@ -111,9 +111,9 @@ import "./progress-skGe4xuJ.js";
 import "./server-lifecycle-Do-Sf9Cq.js";
 import "./stagger-BU0UZwZh.js";
 import "./runtime-guard-FM7xygCS.js";
-import "./program-context-62Ht6ZW6.js";
+import "./program-context-M__UNjvB.js";
 import "./note-DPVyaATq.js";
-import { r as installCompletion } from "./completion-cli-D_r7Agv7.js";
+import { r as installCompletion } from "./completion-cli-D5AGXrau.js";
 import { n as gatewayInstallErrorHint, t as buildGatewayInstallPlan } from "./daemon-install-helpers-DSwJ2uJ4.js";
 import { n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-mYDSc4SR.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-BS462KFE.js";
@@ -122,7 +122,7 @@ import { r as healthCommand } from "./health-K7GwLq6S.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-DhUI98bh.js";
 import { t as resolveOnboardingSecretInputString } from "./onboarding.secret-input-CpvAADXr.js";
 import { t as formatHealthCheckFailure } from "./health-format-Ba6tveTS.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-UANUtpOr.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-Drs7WusO.js";
 import { t as runTui } from "./tui-C3Mn21ul.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{onboarding.finalize-Voe0WOEw.js → onboarding.finalize-Bicw2cW7.js}

@@ -109,9 +109,9 @@ import "./cli-utils-BlpNlYVq.js";
 import "./help-format-DqamOwoM.js";
 import "./progress-Dtl-ttAH.js";
 import "./note-Emtc1zzf.js";
-import { r as installCompletion } from "./completion-cli-DOjD8RjQ.js";
-import "./register.subclis-dddx3aux.js";
-import "./command-registry-0y2xBLj0.js";
+import { r as installCompletion } from "./completion-cli-CyCV3ZHh.js";
+import "./register.subclis-DJ2ZLtcN.js";
+import "./command-registry-DoH9LuuA.js";
 import "./program-context-gd4x_qEm.js";
 import { n as gatewayInstallErrorHint, t as buildGatewayInstallPlan } from "./daemon-install-helpers-D1YQ03lO.js";
 import "./runtime-guard-H-DjZ1G4.js";
@@ -122,7 +122,7 @@ import { r as healthCommand } from "./health-DiqQQYRN.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-B0DdamQU.js";
 import { t as resolveOnboardingSecretInputString } from "./onboarding.secret-input-BqpyOfgu.js";
 import { t as formatHealthCheckFailure } from "./health-format-DfUHWWsW.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-vm65W1rC.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-B7rNU63W.js";
 import { t as runTui } from "./tui-D8p-fGCf.js";
 import os from "node:os";
 import path from "node:path";

package/dist/plugin-sdk/accounts-DjWKwOkO.js

@@ -0,0 +1,288 @@
+import { at as DEFAULT_ACCOUNT_ID, ot as normalizeAccountId, st as normalizeOptionalAccountId } from "./run-with-concurrency-vOAJTIUl.js";
+import { o as resolveOAuthDir } from "./paths-C2qA2GWL.js";
+import { Pr as formatCliCommand } from "./config-BcnAlzj7.js";
+import { B as success, E as resolveUserPath, G as getChildLogger, I as info, c as defaultRuntime, x as jidToE164 } from "./logger-R8IfjvlT.js";
+import fs from "node:fs";
+import path from "node:path";
+import fs$1 from "node:fs/promises";
+
+//#region src/channels/plugins/account-helpers.ts
+function createAccountListHelpers(channelKey) {
+	function resolveConfiguredDefaultAccountId(cfg) {
+		const channel = cfg.channels?.[channelKey];
+		const preferred = normalizeOptionalAccountId(typeof channel?.defaultAccount === "string" ? channel.defaultAccount : void 0);
+		if (!preferred) return;
+		if (listAccountIds(cfg).some((id) => normalizeAccountId(id) === preferred)) return preferred;
+	}
+	function listConfiguredAccountIds(cfg) {
+		const accounts = (cfg.channels?.[channelKey])?.accounts;
+		if (!accounts || typeof accounts !== "object") return [];
+		return Object.keys(accounts).filter(Boolean);
+	}
+	function listAccountIds(cfg) {
+		const ids = listConfiguredAccountIds(cfg);
+		if (ids.length === 0) return [DEFAULT_ACCOUNT_ID];
+		return ids.toSorted((a, b) => a.localeCompare(b));
+	}
+	function resolveDefaultAccountId(cfg) {
+		const preferred = resolveConfiguredDefaultAccountId(cfg);
+		if (preferred) return preferred;
+		const ids = listAccountIds(cfg);
+		if (ids.includes(DEFAULT_ACCOUNT_ID)) return DEFAULT_ACCOUNT_ID;
+		return ids[0] ?? DEFAULT_ACCOUNT_ID;
+	}
+	return {
+		listConfiguredAccountIds,
+		listAccountIds,
+		resolveDefaultAccountId
+	};
+}
+
+//#endregion
+//#region src/routing/account-lookup.ts
+function resolveAccountEntry(accounts, accountId) {
+	if (!accounts || typeof accounts !== "object") return;
+	if (Object.hasOwn(accounts, accountId)) return accounts[accountId];
+	const normalized = accountId.toLowerCase();
+	const matchKey = Object.keys(accounts).find((key) => key.toLowerCase() === normalized);
+	return matchKey ? accounts[matchKey] : void 0;
+}
+
+//#endregion
+//#region src/web/auth-store.ts
+function resolveDefaultWebAuthDir() {
+	return path.join(resolveOAuthDir(), "whatsapp", DEFAULT_ACCOUNT_ID);
+}
+const WA_WEB_AUTH_DIR = resolveDefaultWebAuthDir();
+function resolveWebCredsPath(authDir) {
+	return path.join(authDir, "creds.json");
+}
+function resolveWebCredsBackupPath(authDir) {
+	return path.join(authDir, "creds.json.bak");
+}
+function hasWebCredsSync(authDir) {
+	try {
+		const stats = fs.statSync(resolveWebCredsPath(authDir));
+		return stats.isFile() && stats.size > 1;
+	} catch {
+		return false;
+	}
+}
+function readCredsJsonRaw(filePath) {
+	try {
+		if (!fs.existsSync(filePath)) return null;
+		const stats = fs.statSync(filePath);
+		if (!stats.isFile() || stats.size <= 1) return null;
+		return fs.readFileSync(filePath, "utf-8");
+	} catch {
+		return null;
+	}
+}
+function maybeRestoreCredsFromBackup(authDir) {
+	const logger = getChildLogger({ module: "web-session" });
+	try {
+		const credsPath = resolveWebCredsPath(authDir);
+		const backupPath = resolveWebCredsBackupPath(authDir);
+		const raw = readCredsJsonRaw(credsPath);
+		if (raw) {
+			JSON.parse(raw);
+			return;
+		}
+		const backupRaw = readCredsJsonRaw(backupPath);
+		if (!backupRaw) return;
+		JSON.parse(backupRaw);
+		fs.copyFileSync(backupPath, credsPath);
+		try {
+			fs.chmodSync(credsPath, 384);
+		} catch {}
+		logger.warn({ credsPath }, "restored corrupted WhatsApp creds.json from backup");
+	} catch {}
+}
+async function webAuthExists(authDir = resolveDefaultWebAuthDir()) {
+	const resolvedAuthDir = resolveUserPath(authDir);
+	maybeRestoreCredsFromBackup(resolvedAuthDir);
+	const credsPath = resolveWebCredsPath(resolvedAuthDir);
+	try {
+		await fs$1.access(resolvedAuthDir);
+	} catch {
+		return false;
+	}
+	try {
+		const stats = await fs$1.stat(credsPath);
+		if (!stats.isFile() || stats.size <= 1) return false;
+		const raw = await fs$1.readFile(credsPath, "utf-8");
+		JSON.parse(raw);
+		return true;
+	} catch {
+		return false;
+	}
+}
+async function clearLegacyBaileysAuthState(authDir) {
+	const entries = await fs$1.readdir(authDir, { withFileTypes: true });
+	const shouldDelete = (name) => {
+		if (name === "oauth.json") return false;
+		if (name === "creds.json" || name === "creds.json.bak") return true;
+		if (!name.endsWith(".json")) return false;
+		return /^(app-state-sync|session|sender-key|pre-key)-/.test(name);
+	};
+	await Promise.all(entries.map(async (entry) => {
+		if (!entry.isFile()) return;
+		if (!shouldDelete(entry.name)) return;
+		await fs$1.rm(path.join(authDir, entry.name), { force: true });
+	}));
+}
+async function logoutWeb(params) {
+	const runtime = params.runtime ?? defaultRuntime;
+	const resolvedAuthDir = resolveUserPath(params.authDir ?? resolveDefaultWebAuthDir());
+	if (!await webAuthExists(resolvedAuthDir)) {
+		runtime.log(info("No WhatsApp Web session found; nothing to delete."));
+		return false;
+	}
+	if (params.isLegacyAuthDir) await clearLegacyBaileysAuthState(resolvedAuthDir);
+	else await fs$1.rm(resolvedAuthDir, {
+		recursive: true,
+		force: true
+	});
+	runtime.log(success("Cleared WhatsApp Web credentials."));
+	return true;
+}
+function readWebSelfId(authDir = resolveDefaultWebAuthDir()) {
+	try {
+		const credsPath = resolveWebCredsPath(resolveUserPath(authDir));
+		if (!fs.existsSync(credsPath)) return {
+			e164: null,
+			jid: null
+		};
+		const raw = fs.readFileSync(credsPath, "utf-8");
+		const jid = JSON.parse(raw)?.me?.id ?? null;
+		return {
+			e164: jid ? jidToE164(jid, { authDir }) : null,
+			jid
+		};
+	} catch {
+		return {
+			e164: null,
+			jid: null
+		};
+	}
+}
+/**
+* Return the age (in milliseconds) of the cached WhatsApp web auth state, or null when missing.
+* Helpful for heartbeats/observability to spot stale credentials.
+*/
+function getWebAuthAgeMs(authDir = resolveDefaultWebAuthDir()) {
+	try {
+		const stats = fs.statSync(resolveWebCredsPath(resolveUserPath(authDir)));
+		return Date.now() - stats.mtimeMs;
+	} catch {
+		return null;
+	}
+}
+function logWebSelfId(authDir = resolveDefaultWebAuthDir(), runtime = defaultRuntime, includeChannelPrefix = false) {
+	const { e164, jid } = readWebSelfId(authDir);
+	const details = e164 || jid ? `${e164 ?? "unknown"}${jid ? ` (jid ${jid})` : ""}` : "unknown";
+	const prefix = includeChannelPrefix ? "Web Channel: " : "";
+	runtime.log(info(`${prefix}${details}`));
+}
+async function pickWebChannel(pref, authDir = resolveDefaultWebAuthDir()) {
+	const choice = pref === "auto" ? "web" : pref;
+	if (!await webAuthExists(authDir)) throw new Error(`No WhatsApp Web session found. Run \`${formatCliCommand("winclaw channels login --channel whatsapp --verbose")}\` to link.`);
+	return choice;
+}
+
+//#endregion
+//#region src/web/accounts.ts
+const { listConfiguredAccountIds, listAccountIds, resolveDefaultAccountId } = createAccountListHelpers("whatsapp");
+const listWhatsAppAccountIds = listAccountIds;
+const resolveDefaultWhatsAppAccountId = resolveDefaultAccountId;
+function listWhatsAppAuthDirs(cfg) {
+	const oauthDir = resolveOAuthDir();
+	const whatsappDir = path.join(oauthDir, "whatsapp");
+	const authDirs = new Set([oauthDir, path.join(whatsappDir, DEFAULT_ACCOUNT_ID)]);
+	const accountIds = listConfiguredAccountIds(cfg);
+	for (const accountId of accountIds) authDirs.add(resolveWhatsAppAuthDir({
+		cfg,
+		accountId
+	}).authDir);
+	try {
+		const entries = fs.readdirSync(whatsappDir, { withFileTypes: true });
+		for (const entry of entries) {
+			if (!entry.isDirectory()) continue;
+			authDirs.add(path.join(whatsappDir, entry.name));
+		}
+	} catch {}
+	return Array.from(authDirs);
+}
+function hasAnyWhatsAppAuth(cfg) {
+	return listWhatsAppAuthDirs(cfg).some((authDir) => hasWebCredsSync(authDir));
+}
+function resolveAccountConfig(cfg, accountId) {
+	return resolveAccountEntry(cfg.channels?.whatsapp?.accounts, accountId);
+}
+function resolveDefaultAuthDir(accountId) {
+	return path.join(resolveOAuthDir(), "whatsapp", normalizeAccountId(accountId));
+}
+function resolveLegacyAuthDir() {
+	return resolveOAuthDir();
+}
+function legacyAuthExists(authDir) {
+	try {
+		return fs.existsSync(path.join(authDir, "creds.json"));
+	} catch {
+		return false;
+	}
+}
+function resolveWhatsAppAuthDir(params) {
+	const accountId = params.accountId.trim() || DEFAULT_ACCOUNT_ID;
+	const configured = resolveAccountConfig(params.cfg, accountId)?.authDir?.trim();
+	if (configured) return {
+		authDir: resolveUserPath(configured),
+		isLegacy: false
+	};
+	const defaultDir = resolveDefaultAuthDir(accountId);
+	if (accountId === DEFAULT_ACCOUNT_ID) {
+		const legacyDir = resolveLegacyAuthDir();
+		if (legacyAuthExists(legacyDir) && !legacyAuthExists(defaultDir)) return {
+			authDir: legacyDir,
+			isLegacy: true
+		};
+	}
+	return {
+		authDir: defaultDir,
+		isLegacy: false
+	};
+}
+function resolveWhatsAppAccount(params) {
+	const rootCfg = params.cfg.channels?.whatsapp;
+	const accountId = params.accountId?.trim() || resolveDefaultWhatsAppAccountId(params.cfg);
+	const accountCfg = resolveAccountConfig(params.cfg, accountId);
+	const enabled = accountCfg?.enabled !== false;
+	const { authDir, isLegacy } = resolveWhatsAppAuthDir({
+		cfg: params.cfg,
+		accountId
+	});
+	return {
+		accountId,
+		name: accountCfg?.name?.trim() || void 0,
+		enabled,
+		sendReadReceipts: accountCfg?.sendReadReceipts ?? rootCfg?.sendReadReceipts ?? true,
+		messagePrefix: accountCfg?.messagePrefix ?? rootCfg?.messagePrefix ?? params.cfg.messages?.messagePrefix,
+		authDir,
+		isLegacyAuthDir: isLegacy,
+		selfChatMode: accountCfg?.selfChatMode ?? rootCfg?.selfChatMode,
+		dmPolicy: accountCfg?.dmPolicy ?? rootCfg?.dmPolicy,
+		allowFrom: accountCfg?.allowFrom ?? rootCfg?.allowFrom,
+		groupAllowFrom: accountCfg?.groupAllowFrom ?? rootCfg?.groupAllowFrom,
+		groupPolicy: accountCfg?.groupPolicy ?? rootCfg?.groupPolicy,
+		textChunkLimit: accountCfg?.textChunkLimit ?? rootCfg?.textChunkLimit,
+		chunkMode: accountCfg?.chunkMode ?? rootCfg?.chunkMode,
+		mediaMaxMb: accountCfg?.mediaMaxMb ?? rootCfg?.mediaMaxMb,
+		blockStreaming: accountCfg?.blockStreaming ?? rootCfg?.blockStreaming,
+		ackReaction: accountCfg?.ackReaction ?? rootCfg?.ackReaction,
+		groups: accountCfg?.groups ?? rootCfg?.groups,
+		debounceMs: accountCfg?.debounceMs ?? rootCfg?.debounceMs
+	};
+}
+
+//#endregion
+export { webAuthExists as _, resolveWhatsAppAuthDir as a, logWebSelfId as c, pickWebChannel as d, readCredsJsonRaw as f, resolveWebCredsPath as g, resolveWebCredsBackupPath as h, resolveWhatsAppAccount as i, logoutWeb as l, resolveDefaultWebAuthDir as m, listWhatsAppAccountIds as n, WA_WEB_AUTH_DIR as o, readWebSelfId as p, resolveDefaultWhatsAppAccountId as r, getWebAuthAgeMs as s, hasAnyWhatsAppAuth as t, maybeRestoreCredsFromBackup as u, resolveAccountEntry as v, createAccountListHelpers as y };