@clawos-dev/clawd 0.2.103 → 0.2.105-beta.199.6386646

package/dist/cli.cjs

@@ -672,8 +672,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path58, errorMaps, issueData } = params;
-      const fullPath = [...path58, ...issueData.path || []];
+      const { data, path: path59, errorMaps, issueData } = params;
+      const fullPath = [...path59, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -984,11 +984,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path58, key) {
+      constructor(parent, value, path59, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path58;
+        this._path = path59;
         this._key = key;
       }
       get path() {
@@ -5367,20 +5367,6 @@ var init_received_capability = __esm({
 });
 
 // ../protocol/src/extension.ts
-function isAllowedHostedUrl(raw) {
-  let u;
-  try {
-    u = new URL(raw);
-  } catch {
-    return false;
-  }
-  if (u.protocol === "https:") return true;
-  if (u.protocol === "http:" && LOCALHOST_HOSTS.has(u.hostname)) return true;
-  return false;
-}
-function manifestMode(m2) {
-  return m2.entry?.url ? "hosted" : "local";
-}
 function ownerNamespace(ownerPrincipalId) {
   let h = 2166136261;
   for (let i = 0; i < ownerPrincipalId.length; i++) {
@@ -5422,7 +5408,7 @@ function parseOrThrow(v2) {
   const [a, b2, c] = v2.split(".").map((p2) => parseInt(p2, 10));
   return [a, b2, c];
 }
-var EXT_ID_REGEX, ExtensionStateSchema, LOCALHOST_HOSTS, ExtensionManifestSchema, ExtensionTargetSchema, ExtensionRecordSchema, PublishedSnapshotSchema, ChannelRefSchema, SourceRefSchema, PublishedExtensionRecordSchema, PublishCheckSchema, PublishStatusResultSchema;
+var EXT_ID_REGEX, ExtensionStateSchema, ExtensionManifestSchema, ExtensionRecordSchema, PublishedSnapshotSchema, ChannelRefSchema, SourceRefSchema, PublishedExtensionRecordSchema, PublishCheckSchema, PublishStatusResultSchema;
 var init_extension = __esm({
   "../protocol/src/extension.ts"() {
     "use strict";
@@ -5435,38 +5421,18 @@ var init_extension = __esm({
       "crashed",
       "invalid"
     ]);
-    LOCALHOST_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1"]);
     ExtensionManifestSchema = external_exports.object({
       id: external_exports.string().regex(EXT_ID_REGEX),
       name: external_exports.string().min(1),
       version: external_exports.string().min(1),
       apiVersion: external_exports.literal("1"),
-      runtime: external_exports.object({ startCommand: external_exports.string().min(1) }).passthrough().optional(),
       entry: external_exports.object({
-        url: external_exports.string().url().refine(isAllowedHostedUrl, {
-          message: "INVALID_URL_SCHEME: only https or http://localhost is allowed"
-        })
-      }).strict().optional()
-    }).passthrough().superRefine((m2, ctx) => {
-      const hasRuntime = !!m2.runtime;
-      const hasUrl = !!m2.entry?.url;
-      if (hasRuntime && hasUrl) {
-        ctx.addIssue({
-          code: external_exports.ZodIssueCode.custom,
-          message: "INVALID_MANIFEST: entry.url and runtime cannot coexist"
-        });
-      }
-      if (!hasRuntime && !hasUrl) {
-        ctx.addIssue({
-          code: external_exports.ZodIssueCode.custom,
-          message: "INVALID_MANIFEST: must have either entry.url or runtime"
-        });
-      }
-    });
-    ExtensionTargetSchema = external_exports.discriminatedUnion("kind", [
-      external_exports.object({ kind: external_exports.literal("local"), port: external_exports.number().int().min(1).max(65535) }),
-      external_exports.object({ kind: external_exports.literal("hosted"), url: external_exports.string().url() })
-    ]);
+        ui: external_exports.string().min(1).optional()
+      }).strict().optional(),
+      runtime: external_exports.object({
+        startCommand: external_exports.string().min(1)
+      }).passthrough()
+    }).passthrough();
     ExtensionRecordSchema = external_exports.discriminatedUnion("state", [
       external_exports.object({
         extId: external_exports.string(),
@@ -5482,7 +5448,7 @@ var init_extension = __esm({
         extId: external_exports.string(),
         manifest: ExtensionManifestSchema,
         state: external_exports.literal("running"),
-        target: ExtensionTargetSchema
+        port: external_exports.number().int().min(1).max(65535)
       }),
       external_exports.object({
         extId: external_exports.string(),
@@ -5856,8 +5822,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path58 = req.path;
-        _req.url = typeof path58 === "string" ? path58 : req.url ? req.url.path || req.url : void 0;
+        const path59 = req.path;
+        _req.url = typeof path59 === "string" ? path59 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -6022,14 +5988,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path58) {
+    function parsePath(path59) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path58.length; i++) {
-        const char = path58[i];
+      for (let i = 0; i < path59.length; i++) {
+        const char = path59[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -6160,10 +6126,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path58 of paths) {
-        const parts = parsePath(path58);
+      for (const path59 of paths) {
+        const parts = parsePath(path59);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path58, remove);
+          redactWildcardPath(obj, parts, censor, path59, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -6248,8 +6214,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path58) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path58];
+            const wrappedCensor = typeof censor === "function" ? (value, path59) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path59];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -6284,8 +6250,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path58 of pathsToClone) {
-        const parts = parsePath(path58);
+      for (const path59 of pathsToClone) {
+        const parts = parsePath(path59);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -6337,24 +6303,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path58) {
-      if (typeof path58 !== "string") {
+    function validatePath(path59) {
+      if (typeof path59 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path58 === "") {
+      if (path59 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path58.includes("..")) {
-        throw new Error(`Invalid redaction path (${path58})`);
+      if (path59.includes("..")) {
+        throw new Error(`Invalid redaction path (${path59})`);
       }
-      if (path58.includes(",")) {
-        throw new Error(`Invalid redaction path (${path58})`);
+      if (path59.includes(",")) {
+        throw new Error(`Invalid redaction path (${path59})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path58.length; i++) {
-        const char = path58[i];
+      for (let i = 0; i < path59.length; i++) {
+        const char = path59[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -6368,20 +6334,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path58})`);
+            throw new Error(`Invalid redaction path (${path59})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path58})`);
+        throw new Error(`Invalid redaction path (${path59})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path58 of paths) {
-        validatePath(path58);
+      for (const path59 of paths) {
+        validatePath(path59);
       }
     }
     function slowRedact(options = {}) {
@@ -6549,8 +6515,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path58) => {
-            return censor(value, [k2, ...path58]);
+          const wrappedCensor = typeof censor === "function" ? (value, path59) => {
+            return censor(value, [k2, ...path59]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -6768,10 +6734,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs46 = require("fs");
+    var fs47 = require("fs");
     var EventEmitter2 = require("events");
     var inherits = require("util").inherits;
-    var path58 = require("path");
+    var path59 = require("path");
     var sleep = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -6825,20 +6791,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs46.mkdirSync(path58.dirname(file), { recursive: true });
-          const fd = fs46.openSync(file, flags, mode);
+          if (sonic.mkdir) fs47.mkdirSync(path59.dirname(file), { recursive: true });
+          const fd = fs47.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs46.mkdir(path58.dirname(file), { recursive: true }, (err) => {
+        fs47.mkdir(path59.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs46.open(file, flags, mode, fileOpened);
+          fs47.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs46.open(file, flags, mode, fileOpened);
+        fs47.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -6879,8 +6845,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs46.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs46.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs47.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs47.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -6889,15 +6855,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs46.writeSync(this.fd, this._writingBuf);
+            return fs47.writeSync(this.fd, this._writingBuf);
           }
-          return fs46.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs47.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs46.write(this.fd, this._writingBuf, this.release);
+            return fs47.write(this.fd, this._writingBuf, this.release);
           }
-          return fs46.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs47.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -6954,7 +6920,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs46.fsyncSync(this.fd);
+          fs47.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -7068,7 +7034,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs46.fsync(this.fd, (err) => {
+            fs47.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -7170,7 +7136,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs46.close(fd, (err) => {
+          fs47.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -7219,7 +7185,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs46.writeSync(this.fd, buf) : fs46.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs47.writeSync(this.fd, buf) : fs47.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -7235,7 +7201,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs46.fsyncSync(this.fd);
+        fs47.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -7256,7 +7222,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs46.writeSync(this.fd, buf);
+          const n = fs47.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -7284,13 +7250,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs46.writeSync(this.fd, this._writingBuf) : fs46.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs47.writeSync(this.fd, this._writingBuf) : fs47.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs46.write(this.fd, this._writingBuf, release);
+        fs47.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -7299,7 +7265,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs46.writeSync(this.fd, this._writingBuf);
+          const written = fs47.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -7308,7 +7274,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs46.write(this.fd, this._writingBuf, release);
+        fs47.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -7324,12 +7290,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs46.fsync(sonic.fd, closeWrapped);
+        fs47.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs46.close(sonic.fd, done);
+          fs47.close(sonic.fd, done);
         } else {
           done();
         }
@@ -10464,11 +10430,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path58, added, removed, oldPosInc, options) {
-        var last = path58.lastComponent;
+      addToPath: function addToPath(path59, added, removed, oldPosInc, options) {
+        var last = path59.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path58.oldPos + oldPosInc,
+            oldPos: path59.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -10478,7 +10444,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path58.oldPos + oldPosInc,
+            oldPos: path59.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -10924,10 +10890,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path58 = typeof rec.path === "string" ? rec.path : null;
+      const path59 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path58 || content == null) return null;
-      const entry = { path: path58, content };
+      if (!path59 || content == null) return null;
+      const entry = { path: path59, content };
       if (typeof rec.mtimeMs === "number") entry.mtimeMs = rec.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -11758,10 +11724,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path58 = typeof rec.path === "string" ? rec.path : null;
+      const path59 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path58 || content == null) return null;
-      const out = { path: path58, content };
+      if (!path59 || content == null) return null;
+      const out = { path: path59, content };
       if (typeof rec.mtimeMs === "number") out.mtimeMs = rec.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -23550,8 +23516,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path58) {
-      var parts = path58.split("/");
+    exports2.resolve = function(path59) {
+      var parts = path59.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -29404,18 +29370,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path58) {
-      if (path58.slice(-1) === "/") {
-        path58 = path58.substring(0, path58.length - 1);
+    var parentFolder = function(path59) {
+      if (path59.slice(-1) === "/") {
+        path59 = path59.substring(0, path59.length - 1);
       }
-      var lastSlash = path58.lastIndexOf("/");
-      return lastSlash > 0 ? path58.substring(0, lastSlash) : "";
+      var lastSlash = path59.lastIndexOf("/");
+      return lastSlash > 0 ? path59.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path58) {
-      if (path58.slice(-1) !== "/") {
-        path58 += "/";
+    var forceTrailingSlash = function(path59) {
+      if (path59.slice(-1) !== "/") {
+        path59 += "/";
       }
-      return path58;
+      return path59;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -30417,7 +30383,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path44.default.dirname(opts.recordPath);
+  const dir = import_node_path45.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -30457,12 +30423,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs30, import_node_path44;
+var import_node_fs30, import_node_path45;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
     import_node_fs30 = __toESM(require("fs"), 1);
-    import_node_path44 = __toESM(require("path"), 1);
+    import_node_path45 = __toESM(require("path"), 1);
   }
 });
 
@@ -30505,7 +30471,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs31.mkdtempSync)(import_node_path45.default.join(import_node_os19.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs31.mkdtempSync)(import_node_path46.default.join(import_node_os19.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -30672,13 +30638,13 @@ async function runController(opts) {
   }
   return exitCode ?? 0;
 }
-var import_node_fs31, import_node_os19, import_node_path45;
+var import_node_fs31, import_node_os19, import_node_path46;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
     import_node_fs31 = require("fs");
     import_node_os19 = __toESM(require("os"), 1);
-    import_node_path45 = __toESM(require("path"), 1);
+    import_node_path46 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -30910,7 +30876,7 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path43 = __toESM(require("path"), 1);
+var import_node_path44 = __toESM(require("path"), 1);
 var import_node_fs29 = __toESM(require("fs"), 1);
 
 // src/logger.ts
@@ -32580,12 +32546,11 @@ var SessionManager = class {
   // 新 client 通过 session:subscribe 接入时由 onSubscribe hook 取 getPtyReplay(sessionId)
   // 把屏幕快照定向 emit，解决"刷新页面 / 第二个 tab 接入时 xterm 白屏"
   ptyReplaysByToolSid = /* @__PURE__ */ new Map();
-  // TUI 模式：toolSessionId → @xterm/headless TerminalSurface（单一虚拟终端，popup / ready
-  // observer 都从这一份 buffer 派生状态）。ClaudeTuiAdapter spawn 时通过 onSurfaceRegister
-  // callback 写入；exit 时 onSurfaceUnregister 清理。
-  // manager.resizePty 用此映射把 UI 的 session:pty:resize 同步到 surface 内部 buffer，
+  // TUI 模式：toolSessionId → @xterm/headless PopupDetector。
+  // ClaudeTuiAdapter spawn 时通过 onDetectorRegister callback 写入；exit 时 onDetectorUnregister 清理。
+  // manager.resizePty 用此映射把 UI 的 session:pty:resize 同步到 detector 内部 buffer，
   // 保证 snapshot serialize 时 cursor positioning 与 UI xterm 实际尺寸一致。
-  surfacesByToolSid = /* @__PURE__ */ new Map();
+  detectorsByToolSid = /* @__PURE__ */ new Map();
   // 仅 mode='tui' 需要：index.ts 装配阶段在 observer 构造后注入。
   // observer.onEvent 要回灌 manager.feedObserverEvents，所以 observer 必须晚于 manager
   // 构造；反过来 manager 又要在 mode='tui' 下 spawn session 时 attach observer。setter 解循环
@@ -33859,18 +33824,18 @@ var SessionManager = class {
     if (!tsid) return void 0;
     return this.ptyTransports.get(tsid);
   }
-  /** ClaudeTuiAdapter spawn 时注册 surface ref；同一 tsid 重 spawn 会覆盖 */
-  registerSurface(toolSessionId, surface) {
-    this.surfacesByToolSid.set(toolSessionId, surface);
+  /** ClaudeTuiAdapter spawn 时注册 detector ref；同一 tsid 重 spawn 会覆盖 */
+  registerDetector(toolSessionId, detector) {
+    this.detectorsByToolSid.set(toolSessionId, detector);
   }
   /** spawn 进程 exit 时清理 */
-  unregisterSurface(toolSessionId) {
-    this.surfacesByToolSid.delete(toolSessionId);
+  unregisterDetector(toolSessionId) {
+    this.detectorsByToolSid.delete(toolSessionId);
   }
   /**
-   * 同时 resize pty 子进程和 surface buffer：UI session:pty:resize 入口走这个。
-   * 顺序：pty.resize 在前，surface.resize 在后 —— pty 是真正的 CC 子进程视图，必须先成功；
-   * surface 只是 daemon 端镜像，任一步失败都返 false。
+   * 同时 resize pty 子进程和 detector buffer：UI session:pty:resize 入口走这个。
+   * 顺序：pty.resize 在前，detector.resize 在后 —— pty 是真正的 CC 子进程视图，必须先成功；
+   * detector 只是 daemon 端镜像，任一步失败都返 false。
    * 找不到 runner / toolSessionId / pty 任一缺失 → 返 false，handler 静默给 UI 报 ok=false 不抛错。
    */
   resizePty(sessionId, cols, rows) {
@@ -33885,8 +33850,8 @@ var SessionManager = class {
     } catch {
       return false;
     }
-    const surface = this.surfacesByToolSid.get(tsid);
-    if (surface) surface.resize(cols, rows);
+    const detector = this.detectorsByToolSid.get(tsid);
+    if (detector) detector.resize(cols, rows);
     return true;
   }
   /**
@@ -35184,30 +35149,59 @@ var POPUP_FOOTER_PATTERNS = [
   { kind: "permission", regex: /Tab to amend|Do you want to proceed/i },
   { kind: "question", regex: /Enter to select|↑\/↓ to navigate/i }
 ];
-function createTerminalSurface(opts) {
+function createPopupDetector(opts) {
   const term = new Terminal({
-    cols: opts?.cols ?? 120,
-    rows: opts?.rows ?? 40,
-    scrollback: opts?.scrollback ?? 1e3,
+    cols: opts.cols ?? 120,
+    rows: opts.rows ?? 40,
+    scrollback: 1e3,
     allowProposedApi: true
   });
   const serializeAddon = new D();
   term.loadAddon(serializeAddon);
+  let visible = null;
+  let pendingClear = null;
   let parseSeq = 0;
   let pendingParse = 0;
   let drainWaiters = [];
   let disposed = false;
-  const observers = [];
-  const collectLines = () => {
+  const scanFooter = () => {
     const buf = term.buffer.active;
-    const lines = new Array(buf.length);
     for (let i = 0; i < buf.length; i++) {
       const line = buf.getLine(i);
-      lines[i] = line ? line.translateToString(true) : "";
+      if (!line) continue;
+      const text = line.translateToString(true);
+      if (!text) continue;
+      for (const p2 of POPUP_FOOTER_PATTERNS) {
+        if (p2.regex.test(text)) return p2.kind;
+      }
+    }
+    return null;
+  };
+  const tick = () => {
+    const matched = scanFooter();
+    if (matched && visible === null) {
+      visible = matched;
+      opts.onTransition(matched, true);
+    } else if (matched && visible !== null) {
+      if (pendingClear) {
+        clearTimeout(pendingClear);
+        pendingClear = null;
+      }
+    } else if (!matched && visible !== null && !pendingClear) {
+      const toClear = visible;
+      pendingClear = setTimeout(() => {
+        pendingClear = null;
+        if (visible === toClear) {
+          visible = null;
+          opts.onTransition(toClear, false);
+        }
+      }, opts.clearQuietMs);
     }
-    return lines;
   };
   return {
+    get visibleKind() {
+      return visible;
+    },
     get parseSeq() {
       return parseSeq;
     },
@@ -35221,10 +35215,7 @@ function createTerminalSurface(opts) {
           }
           if (typeof seq === "number" && seq > parseSeq) parseSeq = seq;
           pendingParse--;
-          if (observers.length > 0) {
-            const lines = collectLines();
-            for (const cb of [...observers]) cb(lines);
-          }
+          tick();
           if (pendingParse === 0 && drainWaiters.length > 0) {
             const waiters = drainWaiters;
             drainWaiters = [];
@@ -35246,93 +35237,42 @@ function createTerminalSurface(opts) {
       } catch {
       }
     },
-    serialize() {
-      return serializeAddon.serialize({ scrollback: 1e3 });
-    },
     dispose() {
       disposed = true;
-      pendingParse = 0;
+      if (pendingClear) {
+        clearTimeout(pendingClear);
+        pendingClear = null;
+      }
       const waiters = drainWaiters;
       drainWaiters = [];
       for (const w2 of waiters) w2();
-      observers.length = 0;
       serializeAddon.dispose();
       term.dispose();
     },
-    onTick(cb) {
-      observers.push(cb);
-      return () => {
-        const i = observers.indexOf(cb);
-        if (i >= 0) observers.splice(i, 1);
-      };
+    serialize() {
+      return serializeAddon.serialize({ scrollback: 1e3 });
     }
   };
 }
-function observePopup(surface, opts) {
-  let visible = null;
-  let pendingClear = null;
-  const scanFooter = (lines) => {
-    for (const text of lines) {
-      if (!text) continue;
-      for (const p2 of POPUP_FOOTER_PATTERNS) {
-        if (p2.regex.test(text)) return p2.kind;
-      }
-    }
-    return null;
-  };
-  const unsubscribe = surface.onTick((lines) => {
-    const matched = scanFooter(lines);
-    const inputFrameVisible = opts.getInputFrameVisible();
-    if (visible === null) {
-      if (matched && !inputFrameVisible) {
-        visible = matched;
-        opts.onTransition(matched, true);
-      }
-      return;
-    }
-    if (!inputFrameVisible) {
-      if (pendingClear) {
-        clearTimeout(pendingClear);
-        pendingClear = null;
-      }
-      return;
-    }
-    if (!pendingClear) {
-      const toClear = visible;
-      pendingClear = setTimeout(() => {
-        pendingClear = null;
-        if (visible === toClear) {
-          visible = null;
-          opts.onTransition(toClear, false);
-        }
-      }, opts.clearQuietMs);
-    }
+function createReadyDetector(opts) {
+  const term = new Terminal({
+    cols: opts.cols ?? 120,
+    rows: opts.rows ?? 40,
+    scrollback: 200,
+    allowProposedApi: true
   });
-  return {
-    get visibleKind() {
-      return visible;
-    },
-    dispose() {
-      unsubscribe();
-      if (pendingClear) {
-        clearTimeout(pendingClear);
-        pendingClear = null;
-      }
-    }
-  };
-}
-function observeReady(surface, opts) {
-  let prevReady = false;
   let quietTimer = null;
-  let unsubscribed = false;
-  let latestLines = [];
-  const scanReadyFrame = (lines) => {
+  let disposed = false;
+  const scanReadyFrame = () => {
+    const buf = term.buffer.active;
     let prevHasDivider = false;
-    for (const text of lines) {
-      if (!text) {
+    for (let i = 0; i < buf.length; i++) {
+      const line = buf.getLine(i);
+      if (!line) {
         prevHasDivider = false;
         continue;
       }
+      const text = line.translateToString(true);
       const hasPrompt = /^❯/.test(text);
       const hasDivider = /─{20,}/.test(text);
       if (hasPrompt && prevHasDivider) return true;
@@ -35355,18 +35295,18 @@ function observeReady(surface, opts) {
   };
   const quietFire = () => {
     quietTimer = null;
-    if (unsubscribed) return;
-    if (!scanReadyFrame(latestLines)) {
+    if (disposed) return;
+    if (!scanReadyFrame()) {
       dbg({ event: "quiet-fire-but-not-ready-anymore" });
       return;
     }
     dbg({ event: "quiet-fire \u2192 onReady" });
     opts.onReady();
   };
-  const unsubscribe = surface.onTick((lines) => {
-    if (unsubscribed) return;
-    latestLines = lines;
-    const ready = scanReadyFrame(lines);
+  let prevReady = false;
+  const tick = () => {
+    if (disposed) return;
+    const ready = scanReadyFrame();
     if (!ready) {
       clearQuiet();
       if (prevReady) {
@@ -35381,15 +35321,19 @@ function observeReady(surface, opts) {
     }
     clearQuiet();
     quietTimer = setTimeout(quietFire, opts.quietMs);
-  });
+  };
   return {
-    get inputFrameVisible() {
-      return prevReady;
+    writeBytes(data) {
+      if (disposed) return;
+      term.write(data, () => {
+        if (disposed) return;
+        tick();
+      });
     },
     dispose() {
-      unsubscribed = true;
-      unsubscribe();
+      disposed = true;
       clearQuiet();
+      term.dispose();
     }
   };
 }
@@ -35471,18 +35415,7 @@ var ClaudeTuiAdapter = class extends ClaudeAdapter {
       tag: ctx.toolSessionId ?? "no-tsid"
     });
     const bootGate = createBootGate(pty, this.tuiLogger);
-    const surface = createTerminalSurface();
-    const readyObserver = observeReady(surface, {
-      quietMs: 500,
-      onReady: () => {
-        if (!ctx.toolSessionId || !this.tuiOpts.onReady) return;
-        this.tuiLogger?.debug("ready-detected", { toolSessionId: ctx.toolSessionId });
-        this.tuiOpts.onReady(ctx.toolSessionId);
-      },
-      // [RG-DBG] 排查 ReadyGate 偶现卡输入用；定位完跟所有 [RG] 日志一起删
-      logger: this.tuiLogger
-    });
-    const popupObserver = observePopup(surface, {
+    const detector = createPopupDetector({
       clearQuietMs: 200,
       onTransition: (kind, visible) => {
         if (!ctx.toolSessionId || !this.tuiOpts.onPopupTransition) return;
@@ -35492,21 +35425,29 @@ var ClaudeTuiAdapter = class extends ClaudeAdapter {
           visible
         });
         this.tuiOpts.onPopupTransition(ctx.toolSessionId, kind, visible);
+      }
+    });
+    const readyDetector = createReadyDetector({
+      quietMs: 500,
+      onReady: () => {
+        if (!ctx.toolSessionId || !this.tuiOpts.onReady) return;
+        this.tuiLogger?.debug("ready-detected", { toolSessionId: ctx.toolSessionId });
+        this.tuiOpts.onReady(ctx.toolSessionId);
       },
-      // popup_close 信号源：ready observer 扫到 ❯ + ─{20,} 输入框结构 → 输入框可见 → popup 已关
-      getInputFrameVisible: () => readyObserver.inputFrameVisible
+      // [RG-DBG] 排查 ReadyGate 偶现卡输入用；定位完跟所有 [RG] 日志一起删
+      logger: this.tuiLogger
     });
-    if (ctx.toolSessionId && this.tuiOpts.onSurfaceRegister) {
-      this.tuiOpts.onSurfaceRegister(ctx.toolSessionId, surface);
+    if (ctx.toolSessionId && this.tuiOpts.onDetectorRegister) {
+      this.tuiOpts.onDetectorRegister(ctx.toolSessionId, detector);
     }
     let chunkSeq = 0;
     if (ctx.toolSessionId && this.tuiOpts.onPtyReplayRegister) {
       this.tuiOpts.onPtyReplayRegister(ctx.toolSessionId, async () => {
-        await surface.drain();
+        await detector.drain();
         return {
-          data: surface.serialize(),
-          popupKind: popupObserver.visibleKind,
-          atSeq: surface.parseSeq
+          data: detector.serialize(),
+          popupKind: detector.visibleKind,
+          atSeq: detector.parseSeq
         };
       });
     }
@@ -35523,7 +35464,8 @@ var ClaudeTuiAdapter = class extends ClaudeAdapter {
         this.tuiOpts.onPtyData(ctx.toolSessionId, merged.toString("base64"), seq);
       }
       bootGate.feedBytes(merged);
-      void surface.writeBytes(merged.toString("utf8"), seq);
+      void detector.writeBytes(merged.toString("utf8"), seq);
+      readyDetector.writeBytes(merged.toString("utf8"));
       if (ctx.toolSessionId) {
         probePtyDataThrottled(ctx.toolSessionId, merged.length, merged);
       }
@@ -35541,15 +35483,14 @@ var ClaudeTuiAdapter = class extends ClaudeAdapter {
         flushCoalesced();
       }
       bootGate.dispose();
-      readyObserver.dispose();
-      popupObserver.dispose();
-      if (ctx.toolSessionId && this.tuiOpts.onSurfaceUnregister) {
-        this.tuiOpts.onSurfaceUnregister(ctx.toolSessionId);
+      readyDetector.dispose();
+      if (ctx.toolSessionId && this.tuiOpts.onDetectorUnregister) {
+        this.tuiOpts.onDetectorUnregister(ctx.toolSessionId);
       }
       if (ctx.toolSessionId && this.tuiOpts.onPtyUnregister) {
         this.tuiOpts.onPtyUnregister(ctx.toolSessionId);
       }
-      surface.dispose();
+      detector.dispose();
     });
     return ptyChild;
   }
@@ -37825,6 +37766,12 @@ async function importZip(buf, root) {
   } catch (e) {
     throw new ImportError("INVALID_MANIFEST", `manifest.json: ${e.message}`);
   }
+  if (manifestJson && typeof manifestJson === "object" && "entry" in manifestJson && manifestJson.entry?.url !== void 0) {
+    throw new ImportError(
+      "REMOTE_NOT_SUPPORTED",
+      "entry.url (remote mode) is not supported in v1"
+    );
+  }
   const result = ExtensionManifestSchema.safeParse(manifestJson);
   if (!result.success) {
     throw new ImportError(
@@ -37833,16 +37780,6 @@ async function importZip(buf, root) {
     );
   }
   const manifest = result.data;
-  if (manifestMode(manifest) === "hosted") {
-    const filenames = Object.keys(zip.files).filter((n) => !zip.files[n].dir);
-    const extras = filenames.filter((n) => n !== "manifest.json");
-    if (extras.length > 0) {
-      throw new ImportError(
-        "HOSTED_ZIP_EXTRA_FILES",
-        `hosted extension may only contain manifest.json (extra: ${extras.join(", ")})`
-      );
-    }
-  }
   const destDir = import_node_path19.default.join(root, manifest.id);
   let destExists = false;
   try {
@@ -40659,6 +40596,9 @@ function extensionsRoot(override) {
 function publishedChannelsFile(override) {
   return import_node_path35.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
+function bundleCacheRoot(override) {
+  return import_node_path35.default.join(clawdHomeRoot(override), "extension-bundles");
+}
 
 // src/extension/install-flow.ts
 var InstallError = class extends Error {
@@ -41001,17 +40941,10 @@ function pickExtId(frame) {
 }
 function composeState(rec, running, crashed, getPort) {
   if (rec.state === "invalid") return rec;
-  if (manifestMode(rec.manifest) === "hosted") {
-    return {
-      ...rec,
-      state: "running",
-      target: { kind: "hosted", url: rec.manifest.entry.url }
-    };
-  }
   if (running.has(rec.extId)) {
     const port = getPort(rec.extId);
     if (port == null) return rec;
-    return { ...rec, state: "running", target: { kind: "local", port } };
+    return { ...rec, state: "running", port };
   }
   if (crashed.has(rec.extId)) return { ...rec, state: "crashed" };
   return rec;
@@ -41033,8 +40966,8 @@ function buildExtensionHandlers(deps) {
   const open = async (frame, _client, ctx) => {
     assertOwner(ctx);
     const extId = pickExtId(frame);
-    const target = await deps.runtime.open(extId);
-    return { response: target };
+    const { port } = await deps.runtime.open(extId);
+    return { response: { port } };
   };
   const close = async (frame, _client, ctx) => {
     assertOwner(ctx);
@@ -41050,8 +40983,8 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256 } = await bundleExtensionDir(import_node_path38.default.join(deps.root, extId));
-    return { manifest, contentHash: sha256 };
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path38.default.join(deps.root, extId));
+    return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
     assertOwner(ctx);
@@ -41060,7 +40993,7 @@ function buildExtensionHandlers(deps) {
     if (newVersion !== null) {
       await rewriteManifestVersion(deps.root, extId, newVersion, deps.publishedChannelStore.get(extId)?.version);
     }
-    const { manifest, contentHash } = await buildSnapshotMeta(extId);
+    const { manifest, contentHash, buffer } = await buildSnapshotMeta(extId);
     const head = deps.publishedChannelStore.get(extId);
     const check = computePublishCheck({
       localHash: contentHash,
@@ -41085,6 +41018,10 @@ function buildExtensionHandlers(deps) {
         `VERSION_REGRESSION: manifest.version (${check.localVersion}) is lower than published version (${check.publishedVersion})`
       );
     }
+    await deps.bundleCache.write(contentHash, buffer);
+    if (head && head.snapshotHash !== contentHash) {
+      await deps.bundleCache.delete(head.snapshotHash);
+    }
     const snapshot = {
       snapshotHash: contentHash,
       version: manifest.version,
@@ -41098,7 +41035,11 @@ function buildExtensionHandlers(deps) {
   const unpublish = async (frame, _client, ctx) => {
     assertOwner(ctx);
     const extId = pickExtId(frame);
+    const head = deps.publishedChannelStore.get(extId);
     await deps.publishedChannelStore.delete(extId);
+    if (head) {
+      await deps.bundleCache.delete(head.snapshotHash);
+    }
     return { response: {} };
   };
   const publishStatus = async (frame, _client, ctx) => {
@@ -41152,16 +41093,16 @@ function buildExtensionHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest") {
       throw new ClawdError(ERROR_CODES.FORBIDDEN, "guest only");
     }
-    const extId = pickExtId(frame);
+    pickExtId(frame);
     const expectedHash = pickStringField(frame, "snapshotHash");
-    const { buffer, sha256 } = await bundleExtensionDir(import_node_path38.default.join(deps.root, extId));
-    if (sha256 !== expectedHash) {
+    const cached = await deps.bundleCache.read(expectedHash);
+    if (cached === null) {
       throw new ClawdError(
         ERROR_CODES.VALIDATION_ERROR,
-        `HASH_MISMATCH: bundle hash ${sha256.slice(0, 8)}\u2026 \u2260 requested ${expectedHash.slice(0, 8)}\u2026`
+        `SNAPSHOT_NOT_AVAILABLE: bundle for ${expectedHash.slice(0, 8)}\u2026 no longer cached (owner likely republished); guest should reconcile and retry`
       );
     }
-    return { response: { zipBase64: buffer.toString("base64") } };
+    return { response: { zipBase64: cached.toString("base64") } };
   };
   const installFromChannelHandler = async (frame, _client, ctx) => {
     assertOwner(ctx);
@@ -41349,7 +41290,8 @@ function buildMethodHandlers(deps) {
       runtime: deps.extensionRuntime,
       uninstall,
       root: extensionsRoot(),
-      publishedChannelStore: deps.publishedChannelStore
+      publishedChannelStore: deps.publishedChannelStore,
+      bundleCache: deps.bundleCache
     })
   };
 }
@@ -41584,20 +41526,16 @@ var Runtime = class {
   }
   async open(extId) {
     const existing = this.handles.get(extId);
-    if (existing) return { kind: "local", port: existing.port };
+    if (existing) return { port: existing.port };
     const records = await loadAll(this.root);
     const rec = records.find((r) => r.extId === extId);
     if (!rec) throw new RuntimeError("NOT_FOUND", `extension ${extId} not installed`);
     if (rec.state === "invalid")
       throw new RuntimeError("INVALID_MANIFEST", rec.invalidReason);
-    if (manifestMode(rec.manifest) === "hosted") {
-      return { kind: "hosted", url: rec.manifest.entry.url };
-    }
     const port = await this.allocator.allocate().catch(() => {
       throw new RuntimeError("PORT_EXHAUSTED", "no free port in configured range");
     });
-    const startCommand = rec.manifest.runtime.startCommand;
-    const cmd = startCommand.replace(
+    const cmd = rec.manifest.runtime.startCommand.replace(
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
@@ -41635,7 +41573,7 @@ var Runtime = class {
     try {
       await this.waitForHealthz(port, () => earlyExit, handle);
       this.crashed.delete(extId);
-      return { kind: "local", port };
+      return { port };
     } catch (e) {
       if (this.handles.get(extId) === handle) {
         this.handles.delete(extId);
@@ -41818,11 +41756,44 @@ var PublishedChannelStore = class {
   }
 };
 
+// src/extension/bundle-cache.ts
+var import_promises12 = __toESM(require("fs/promises"), 1);
+var import_node_path43 = __toESM(require("path"), 1);
+var BundleCache = class {
+  constructor(rootDir) {
+    this.rootDir = rootDir;
+  }
+  rootDir;
+  /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
+  async write(snapshotHash, buffer) {
+    await import_promises12.default.mkdir(this.rootDir, { recursive: true });
+    const file = import_node_path43.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const tmp = `${file}.tmp`;
+    await import_promises12.default.writeFile(tmp, buffer, { mode: 384 });
+    await import_promises12.default.rename(tmp, file);
+  }
+  /** Returns the bundle bytes, or null when the file doesn't exist. */
+  async read(snapshotHash) {
+    const file = import_node_path43.default.join(this.rootDir, `${snapshotHash}.zip`);
+    try {
+      return await import_promises12.default.readFile(file);
+    } catch (e) {
+      if (e.code === "ENOENT") return null;
+      throw e;
+    }
+  }
+  /** Idempotent — missing file is not an error. */
+  async delete(snapshotHash) {
+    const file = import_node_path43.default.join(this.rootDir, `${snapshotHash}.zip`);
+    await import_promises12.default.rm(file, { force: true });
+  }
+};
+
 // src/index.ts
 async function startDaemon(config) {
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path43.default.join(config.dataDir, "clawd.log")
+    file: import_node_path44.default.join(config.dataDir, "clawd.log")
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const stateMgr = new StateFileManager({ dataDir: config.dataDir });
@@ -41909,7 +41880,7 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path43.default.join(config.dataDir, "personas"));
+  const personaStore = new PersonaStore(import_node_path44.default.join(config.dataDir, "personas"));
   const defaultsRoot = findDefaultsRoot();
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -41926,7 +41897,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path43.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path44.default.join(config.dataDir, "personas"),
     personaStore,
     ownerDisplayName,
     ownerPrincipalId,
@@ -41950,7 +41921,7 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path43.default.isAbsolute(input.relPath) ? input.relPath : import_node_path43.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path44.default.isAbsolute(input.relPath) ? input.relPath : import_node_path44.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
           size = import_node_fs29.default.statSync(absPath).size;
@@ -42017,8 +41988,8 @@ async function startDaemon(config) {
     onPtyData: (tsid, b64, seq) => manager.emitPtyChunk(tsid, b64, seq),
     onPopupTransition: (tsid, kind, visible) => manager.emitPopupTransition(tsid, kind, visible),
     onPtyReplayRegister: (tsid, replay) => manager.registerPtyReplay(tsid, replay),
-    onSurfaceRegister: (tsid, surface) => manager.registerSurface(tsid, surface),
-    onSurfaceUnregister: (tsid) => manager.unregisterSurface(tsid),
+    onDetectorRegister: (tsid, detector) => manager.registerDetector(tsid, detector),
+    onDetectorUnregister: (tsid) => manager.unregisterDetector(tsid),
     // ReadyGate v2：ReadyDetector emit ready 时投递 reducer 'ready-detected' input
     onReady: (tsid) => manager.dispatchReadyDetected(tsid)
   }) : new ClaudeAdapter({ logger, historyReader: new ClaudeHistoryReader() });
@@ -42039,6 +42010,7 @@ async function startDaemon(config) {
   const extensionRuntime = new Runtime({ root: extensionsRoot() });
   const publishedChannelStore = new PublishedChannelStore(publishedChannelsFile());
   await publishedChannelStore.load();
+  const bundleCache = new BundleCache(bundleCacheRoot());
   const handlers = buildMethodHandlers({
     manager,
     workspace,
@@ -42078,10 +42050,10 @@ async function startDaemon(config) {
       // 'persona/<pid>/owner'，default 走 'default'。
       getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
       // guest path guard：candidate 必须在 personaRoot 子树下
-      personaRoot: import_node_path43.default.join(config.dataDir, "personas")
+      personaRoot: import_node_path44.default.join(config.dataDir, "personas")
     },
     // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-    personaRoot: import_node_path43.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path44.default.join(config.dataDir, "personas"),
     // capability:list / delete handler 依赖
     capabilityManager,
     // personal-cap:get 返回的 shareBaseUrl 用此 base URL：
@@ -42110,7 +42082,8 @@ async function startDaemon(config) {
     // level so stopAll() runs in the shutdown hook below.
     extensionRuntime,
     // extension sharing v1 — owner-side published-channels store.
-    publishedChannelStore
+    publishedChannelStore,
+    bundleCache
   });
   const authResolver = new AuthContextResolver({
     ownerToken: resolvedAuthToken
@@ -42295,8 +42268,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path43.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path43.default.join(config.dataDir, "frpc.log")}`
+        `Frpc config: ${import_node_path44.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path44.default.join(config.dataDir, "frpc.log")}`
       ];
       const width = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width + 4);
@@ -42309,7 +42282,7 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path43.default.join(config.dataDir, "connect.txt");
+        const connectPath = import_node_path44.default.join(config.dataDir, "connect.txt");
         import_node_fs29.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
@@ -42376,7 +42349,7 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path43.default.join(dataDir, "persons");
+  const dir = import_node_path44.default.join(dataDir, "persons");
   try {
     import_node_fs29.default.rmSync(dir, { recursive: true, force: true });
   } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawos-dev/clawd",
-  "version": "0.2.103",
+  "version": "0.2.105-beta.199.6386646",
   "description": "Standalone clawd daemon — Claude Code (and future Codex) session server over WebSocket",
   "type": "module",
   "license": "MIT",