@clawos-dev/clawd 0.2.143-beta.305.c9c21d1 → 0.2.143-beta.306.9c50054

package/dist/cli.cjs

@@ -11406,12 +11406,12 @@ function readCurrentContent(filePath) {
     return null;
   }
 }
-var import_node_fs8, import_node_os4, import_node_path8, TASK_NOTIFICATION_RE, TASK_ID_RE, TOOL_USE_ID_RE, SLASH_COMMAND_RE, LOCAL_COMMAND_RE, SYSTEM_REMINDER_RE, OPENSPEC_BLOCK_RE, SKILL_HINT_RE, ATTACHMENT_SILENT_SUBTYPES, ClaudeHistoryReader;
+var import_node_fs8, import_node_os5, import_node_path8, TASK_NOTIFICATION_RE, TASK_ID_RE, TOOL_USE_ID_RE, SLASH_COMMAND_RE, LOCAL_COMMAND_RE, SYSTEM_REMINDER_RE, OPENSPEC_BLOCK_RE, SKILL_HINT_RE, ATTACHMENT_SILENT_SUBTYPES, ClaudeHistoryReader;
 var init_claude_history = __esm({
   "src/tools/claude-history.ts"() {
     "use strict";
     import_node_fs8 = __toESM(require("fs"), 1);
-    import_node_os4 = __toESM(require("os"), 1);
+    import_node_os5 = __toESM(require("os"), 1);
     import_node_path8 = __toESM(require("path"), 1);
     init_lib();
     init_tool_result_extra();
@@ -11436,7 +11436,7 @@ var init_claude_history = __esm({
       // 每次 user 提交前 trackEdit 拷一份，作为 rewind 回退目标
       fileHistoryRoot;
       constructor(opts = {}) {
-        const base = opts.baseDir ?? import_node_path8.default.join(import_node_os4.default.homedir(), ".claude");
+        const base = opts.baseDir ?? import_node_path8.default.join(import_node_os5.default.homedir(), ".claude");
         this.projectsRoot = import_node_path8.default.join(base, "projects");
         this.fileHistoryRoot = import_node_path8.default.join(base, "file-history");
       }
@@ -30901,7 +30901,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs36.mkdtempSync)(import_node_path48.default.join(import_node_os20.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs36.mkdtempSync)(import_node_path48.default.join(import_node_os21.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -31068,12 +31068,12 @@ async function runController(opts) {
   }
   return exitCode ?? 0;
 }
-var import_node_fs36, import_node_os20, import_node_path48;
+var import_node_fs36, import_node_os21, import_node_path48;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
     import_node_fs36 = require("fs");
-    import_node_os20 = __toESM(require("os"), 1);
+    import_node_os21 = __toESM(require("os"), 1);
     import_node_path48 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
@@ -31338,7 +31338,7 @@ Env (advanced):
 // src/index.ts
 var import_node_path46 = __toESM(require("path"), 1);
 var import_node_fs34 = __toESM(require("fs"), 1);
-var import_node_os19 = __toESM(require("os"), 1);
+var import_node_os20 = __toESM(require("os"), 1);
 
 // ../node_modules/.pnpm/uuid@10.0.0/node_modules/uuid/dist/esm-node/stringify.js
 var byteToHex = [];
@@ -31946,12 +31946,17 @@ var SessionStoreFactory = class {
 // src/session/manager.ts
 var import_node_fs6 = __toESM(require("fs"), 1);
 var import_node_path6 = __toESM(require("path"), 1);
-var import_node_os2 = __toESM(require("os"), 1);
+var import_node_os3 = __toESM(require("os"), 1);
 init_protocol();
 
 // src/tools/guest-settings.ts
+var import_node_os2 = require("os");
 var FORCED_DENY_READ = ["~/"];
-var FORCED_TOOL_DENY = ["Edit(./**)"];
+function personaEditDeny(personaDir) {
+  const home = (0, import_node_os2.homedir)();
+  const rel = personaDir.startsWith(`${home}/`) ? `~${personaDir.slice(home.length)}` : personaDir;
+  return `Edit(${rel}/**)`;
+}
 function unionArr(a, b2) {
   const out = [...a ?? []];
   for (const x of b2) if (!out.includes(x)) out.push(x);
@@ -31965,9 +31970,9 @@ function isGuestSettingsLike(v2) {
 function buildGuestSettingsV1() {
   return {
     permissions: {
-      defaultMode: "dontAsk",
-      deny: [...FORCED_TOOL_DENY]
-      // 保留 persona 限制：挡 CC 工具改/读 persona（cwd=persona）
+      defaultMode: "dontAsk"
+      // persona-dir 的 Edit deny 由 composeGuestSandbox 按 spawnCwd 注入 '~/<persona>/**' 绝对规则
+      // （base 不放相对 './'——会随 getCwd 漂移误拦项目，见 personaEditDeny）。
     },
     sandbox: {
       enabled: true,
@@ -32015,7 +32020,6 @@ function composeGuestSandbox(base, userWorkDir, spawnCwd) {
   s.sandbox.allowUnsandboxedCommands = false;
   fsv.denyRead = unionArr(fsv.denyRead, FORCED_DENY_READ);
   fsv.denyWrite = unionArr((fsv.denyWrite ?? []).filter((p2) => p2 !== "~/"), [spawnCwd]);
-  s.permissions.deny = unionArr(s.permissions.deny, FORCED_TOOL_DENY);
   fsv.allowRead = unionArr(fsv.allowRead, [userWorkDir]);
   fsv.allowWrite = unionArr(fsv.allowWrite, [userWorkDir]);
   return s;
@@ -33694,7 +33698,7 @@ var SessionManager = class {
       const base = this.deps.personaStore?.readSandboxSettings(scope.personaId) ?? null;
       const settings = composeGuestSandbox(base, subSessionMeta.userWorkDir, file.cwd);
       subSessionMeta.extraSettings = JSON.stringify(settings);
-      const home = import_node_os2.default.homedir();
+      const home = import_node_os3.default.homedir();
       const expand = (p2) => p2 === "~" ? home : p2.startsWith("~/") ? import_node_path6.default.join(home, p2.slice(2)) : p2;
       const codexCfg = this.deps.personaStore?.readCodexSandboxSettings(scope.personaId) ?? null;
       subSessionMeta.codexSandbox = {
@@ -34968,10 +34972,10 @@ var PersonaStore = class {
     return path9.join(this.personaDir(personaId), "AGENTS.md");
   }
   /**
-   * persona 级 sandbox 模板落盘路径 —— 故意放 `.clawd/` 而非 `.claude/`，让 CC 的 project
+   * persona 级 sandbox base 落盘路径 —— 故意放 `.clawd/` 而非 `.claude/`，让 CC 的 project
    * source 自动发现扫不到（owner `--setting-sources user,project,local` 不会顺手带进来）。
-   * 这份是 **UI 展示用模板**（readSandboxSettings）；guest 真正加载的沙箱文件由 manager 在
-   * spawn 前 per-guest 动态拼到各自 session 目录（含本 guest userWorkDir carve），不是这份。
+   * 这份是 guest 沙箱的 **base 真源**（manager compose 读它当 base）；guest 实际加载的是 manager
+   * spawn 前 per-guest 动态拼到各自 session 目录的那份（base + 强制底座 + 本 guest userWorkDir carve）。
    */
   sandboxSettingsPath(personaId) {
     return path9.join(this.personaDir(personaId), ".clawd", "sandbox-settings.json");
@@ -34981,10 +34985,7 @@ var PersonaStore = class {
     fs7.mkdirSync(path9.join(dir, ".clawd"), { recursive: true });
     this.atomicWrite(this.claudeMdPath(persona.personaId), personality);
     this.atomicWrite(this.agentsMdPath(persona.personaId), personality);
-    this.atomicWrite(
-      this.sandboxSettingsPath(persona.personaId),
-      JSON.stringify(buildGuestSettingsV1(), null, 2)
-    );
+    this.writeSandboxSettings(persona.personaId, buildGuestSettingsV1());
     this.atomicWrite(this.metaPath(persona.personaId), JSON.stringify(persona, null, 2));
   }
   writePersonality(personaId, personality) {
@@ -35007,15 +35008,24 @@ var PersonaStore = class {
   }
   /**
    * 覆盖式写 persona 级 sandbox 配置（seed 给有 profile 的 persona 写 base⊕profile；owner 之后可手编）。
-   * 这份是 guest 沙箱的 **base 真源**：manager spawn 时 composeGuestSandbox 读它 + 叠强制底座
-   * （enabled/denyRead/persona-deny owner 削弱不了）+ 注入本 guest userWorkDir → 写 per-guest 文件给 CC。
+   * 这份是 guest 沙箱的 **base 真源**：manager spawn 时 composeGuestSandbox 读它 + 叠 sandbox 强制底座
+   * （enabled/denyRead/denyWrite/userWorkDir owner 削弱不了）→ 写 per-guest 文件给 CC。
+   * 写入时强制注入本 persona 的 Edit-deny（'~/<persona>/**' 按实际 persona dir 算）+ 剥掉历史相对 'Edit(./**)'，
+   * 让落盘 base 就是 source of truth（compose 不再运行时替换 permission deny）。
    */
   writeSandboxSettings(personaId, settings) {
     this.atomicWrite(
       this.sandboxSettingsPath(personaId),
-      JSON.stringify(settings, null, 2)
+      JSON.stringify(this.injectPersonaEditDeny(personaId, settings), null, 2)
     );
   }
+  /** 把 persona Edit-deny（绝对 '~/<persona>/**'）并进 settings.permissions.deny，剥掉历史相对 'Edit(./**)'。 */
+  injectPersonaEditDeny(personaId, settings) {
+    const s = settings;
+    const rule = personaEditDeny(this.personaDir(personaId));
+    const prev = (s.permissions?.deny ?? []).filter((r) => r !== "Edit(./**)" && r !== rule);
+    return { ...s, permissions: { ...s.permissions ?? {}, deny: [...prev, rule] } };
+  }
   codexSandboxSettingsPath(personaId) {
     return path9.join(this.personaDir(personaId), ".clawd", "codex-sandbox.json");
   }
@@ -35174,7 +35184,7 @@ var import_node_crypto3 = __toESM(require("crypto"), 1);
 
 // src/skills/scanner.ts
 var import_node_fs7 = __toESM(require("fs"), 1);
-var import_node_os3 = __toESM(require("os"), 1);
+var import_node_os4 = __toESM(require("os"), 1);
 var import_node_path7 = __toESM(require("path"), 1);
 
 // src/skills/frontmatter.ts
@@ -35408,7 +35418,7 @@ var SkillsScanner = class {
   home;
   extraPluginRoots;
   constructor(opts = {}) {
-    this.home = opts.home ?? import_node_os3.default.homedir();
+    this.home = opts.home ?? import_node_os4.default.homedir();
     this.extraPluginRoots = opts.extraPluginRoots ?? [];
   }
   /**
@@ -35595,8 +35605,7 @@ var DEFAULT_PERSONAS = [
       // defaultMode bypassPermissions：开发流频繁用工具，免逐次审批；deny 规则仍生效、OS 沙箱照管（已验证）。
       permissions: {
         defaultMode: "bypassPermissions",
-        allow: ["Read", "Edit", "Write", "Glob", "Grep", "WebFetch", "WebSearch"],
-        deny: ["Read(./.secrets/**)"]
+        allow: ["Read", "Edit", "Write", "Glob", "Grep", "WebFetch", "WebSearch"]
       },
       sandbox: {
         filesystem: {
@@ -35631,12 +35640,12 @@ var DEFAULT_PERSONAS = [
     iconKey: "assist",
     public: false,
     // 同 app-builder 的开发型 profile（逐字段照抄）：web 工具 + node/pnpm 工具链精确路径
-    // + 出站 TLD 通配白名单 + .secrets deny。复用同一条流水线 → 同一套沙箱授权。
+    // + 出站 TLD 通配白名单。复用同一条流水线 → 同一套沙箱授权。
+    // 注：不带 .secrets deny —— dataclaw-builder 的 apikey 走生成 app 的 server/.env，persona .secrets 已清空。
     sandboxProfile: {
       permissions: {
         defaultMode: "bypassPermissions",
-        allow: ["Read", "Edit", "Write", "Glob", "Grep", "WebFetch", "WebSearch"],
-        deny: ["Read(./.secrets/**)"]
+        allow: ["Read", "Edit", "Write", "Glob", "Grep", "WebFetch", "WebSearch"]
       },
       sandbox: {
         filesystem: {
@@ -35783,6 +35792,15 @@ function refreshDaemonManagedDirs(args) {
     }
   }
 }
+function refreshSandboxSettings(args) {
+  const entries = args.entries ?? DEFAULT_PERSONAS;
+  for (const entry of entries) {
+    if (!args.store.has(entry.personaId)) continue;
+    const settings = entry.sandboxProfile ? applyProfile(buildGuestSettingsV1(), entry.sandboxProfile) : buildGuestSettingsV1();
+    args.store.writeSandboxSettings(entry.personaId, settings);
+    args.logger.info("persona.sandbox.refreshed", { personaId: entry.personaId });
+  }
+}
 function migrateAgentsMirror(args) {
   let mirrored = 0;
   for (const personaId of args.store.list()) {
@@ -36354,7 +36372,7 @@ var CodexAdapter = class {
 
 // src/tools/claude-tui.ts
 var import_node_fs11 = __toESM(require("fs"), 1);
-var import_node_os5 = __toESM(require("os"), 1);
+var import_node_os6 = __toESM(require("os"), 1);
 var import_node_path9 = __toESM(require("path"), 1);
 var import_headless = __toESM(require_xterm_headless(), 1);
 
@@ -37356,7 +37374,7 @@ function buildTuiSpawnArgs(ctx, isResume = false) {
 }
 function jsonlExistsForCtx(ctx) {
   if (!ctx.toolSessionId) return false;
-  const home = import_node_os5.default.homedir();
+  const home = import_node_os6.default.homedir();
   const file = import_node_path9.default.join(home, ".claude", "projects", cwdToHashDir(ctx.cwd), `${ctx.toolSessionId}.jsonl`);
   try {
     return import_node_fs11.default.statSync(file).isFile();
@@ -37749,7 +37767,7 @@ async function listCodexSkills(cwd, deps = {}) {
 
 // src/workspace/browser.ts
 var import_node_fs13 = __toESM(require("fs"), 1);
-var import_node_os6 = __toESM(require("os"), 1);
+var import_node_os7 = __toESM(require("os"), 1);
 var import_node_path11 = __toESM(require("path"), 1);
 init_protocol();
 var MAX_FILE_BYTES = 2 * 1024 * 1024;
@@ -37775,7 +37793,7 @@ function ensureCwd(cwd) {
 }
 var WorkspaceBrowser = class {
   list(args) {
-    const cwd = args.cwd && args.cwd.length > 0 ? args.cwd : import_node_os6.default.homedir();
+    const cwd = args.cwd && args.cwd.length > 0 ? args.cwd : import_node_os7.default.homedir();
     ensureCwd(cwd);
     const full = resolveInsideCwd(cwd, args.path);
     const dirents = import_node_fs13.default.readdirSync(full, { withFileTypes: true });
@@ -37834,7 +37852,7 @@ var WorkspaceBrowser = class {
 
 // src/skills/agents-scanner.ts
 var import_node_fs14 = __toESM(require("fs"), 1);
-var import_node_os7 = __toESM(require("os"), 1);
+var import_node_os8 = __toESM(require("os"), 1);
 var import_node_path12 = __toESM(require("path"), 1);
 var DEFAULT_POLICY_DIR_DARWIN = "/Library/Application Support/ClaudeCode/.claude/agents";
 function isDirLikeSync2(p2) {
@@ -37977,7 +37995,7 @@ var AgentsScanner = class {
   extraPluginRoots;
   policyDir;
   constructor(opts = {}) {
-    this.home = opts.home ?? process.env.CLAUDE_CONFIG_DIR ?? import_node_os7.default.homedir();
+    this.home = opts.home ?? process.env.CLAUDE_CONFIG_DIR ?? import_node_os8.default.homedir();
     this.extraPluginRoots = opts.extraPluginRoots ?? [];
     if (opts.policyDir !== void 0) {
       this.policyDir = opts.policyDir;
@@ -38025,20 +38043,20 @@ var AgentsScanner = class {
 
 // src/observer/session-observer.ts
 var import_node_fs16 = __toESM(require("fs"), 1);
-var import_node_os9 = __toESM(require("os"), 1);
+var import_node_os10 = __toESM(require("os"), 1);
 var import_node_path14 = __toESM(require("path"), 1);
 init_claude_history();
 
 // src/observer/subagent-meta-observer.ts
 var import_node_fs15 = __toESM(require("fs"), 1);
-var import_node_os8 = __toESM(require("os"), 1);
+var import_node_os9 = __toESM(require("os"), 1);
 var import_node_path13 = __toESM(require("path"), 1);
 init_claude_history();
 var META_RE = /^agent-([A-Za-z0-9_-]+)\.meta\.json$/;
 var SubagentMetaObserver = class {
   constructor(opts) {
     this.opts = opts;
-    this.home = opts.home ?? import_node_os8.default.homedir();
+    this.home = opts.home ?? import_node_os9.default.homedir();
   }
   opts;
   home;
@@ -38149,7 +38167,7 @@ var SubagentMetaObserver = class {
 var SessionObserver = class {
   constructor(opts) {
     this.opts = opts;
-    this.home = opts.home ?? import_node_os9.default.homedir();
+    this.home = opts.home ?? import_node_os10.default.homedir();
     this.metaObserver = opts.enableSubagentMetaObserver ? new SubagentMetaObserver({ home: this.home, onEvent: opts.onEvent }) : null;
   }
   opts;
@@ -39956,7 +39974,7 @@ async function writeUploadedAttachment(args) {
 // src/extension/import.ts
 var import_promises2 = __toESM(require("fs/promises"), 1);
 var import_node_path17 = __toESM(require("path"), 1);
-var import_node_os10 = __toESM(require("os"), 1);
+var import_node_os11 = __toESM(require("os"), 1);
 var import_jszip = __toESM(require_lib3(), 1);
 var ImportError = class extends Error {
   constructor(code, message) {
@@ -40016,7 +40034,7 @@ async function importZip(buf, root) {
   if (destExists) {
     throw new ImportError("ALREADY_EXISTS", `extension ${manifest.id} already installed`);
   }
-  const stage = await import_promises2.default.mkdtemp(import_node_path17.default.join(import_node_os10.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
+  const stage = await import_promises2.default.mkdtemp(import_node_path17.default.join(import_node_os11.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
       const dest = import_node_path17.default.join(stage, name);
@@ -40913,7 +40931,7 @@ function escape(v2) {
 
 // src/tunnel/frpc-binary.ts
 var import_node_fs23 = __toESM(require("fs"), 1);
-var import_node_os11 = __toESM(require("os"), 1);
+var import_node_os12 = __toESM(require("os"), 1);
 var import_node_path23 = __toESM(require("path"), 1);
 var import_node_child_process7 = require("child_process");
 var import_node_stream3 = require("stream");
@@ -41374,14 +41392,14 @@ async function waitForFrpcReady(proc, timeoutMs) {
 }
 
 // src/tunnel/device-key.ts
-var import_node_os12 = __toESM(require("os"), 1);
+var import_node_os13 = __toESM(require("os"), 1);
 var import_node_path26 = __toESM(require("path"), 1);
 var import_node_crypto8 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
-  const hostname = opts.hostname ?? import_node_os12.default.hostname();
-  const uid = opts.uid ?? (typeof import_node_os12.default.userInfo === "function" ? import_node_os12.default.userInfo().uid : 0);
-  const home = opts.home ?? import_node_os12.default.homedir();
+  const hostname = opts.hostname ?? import_node_os13.default.hostname();
+  const uid = opts.uid ?? (typeof import_node_os13.default.userInfo === "function" ? import_node_os13.default.userInfo().uid : 0);
+  const home = opts.home ?? import_node_os13.default.homedir();
   const defaultDataDir = import_node_path26.default.resolve(import_node_path26.default.join(home, ".clawd"));
   const normalizedDataDir = opts.dataDir ? import_node_path26.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
@@ -41458,11 +41476,11 @@ function writeAuthFile(file, content) {
 
 // src/owner-profile.ts
 var import_node_fs27 = __toESM(require("fs"), 1);
-var import_node_os13 = __toESM(require("os"), 1);
+var import_node_os14 = __toESM(require("os"), 1);
 var import_node_path28 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function loadOwnerDisplayName(dataDir) {
-  const fallback = import_node_os13.default.userInfo().username;
+  const fallback = import_node_os14.default.userInfo().username;
   const profilePath = import_node_path28.default.join(dataDir, PROFILE_FILENAME);
   let raw;
   try {
@@ -41850,7 +41868,7 @@ init_protocol();
 
 // src/session/fork.ts
 var import_node_fs29 = __toESM(require("fs"), 1);
-var import_node_os14 = __toESM(require("os"), 1);
+var import_node_os15 = __toESM(require("os"), 1);
 var import_node_path30 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
@@ -41867,7 +41885,7 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path30.default.join(import_node_os14.default.homedir(), ".claude");
+  const baseDir = input.baseDir ?? import_node_path30.default.join(import_node_os15.default.homedir(), ".claude");
   const projectDir = import_node_path30.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
   const sourceFile = import_node_path30.default.join(projectDir, `${input.toolSessionId}.jsonl`);
   if (!import_node_fs29.default.existsSync(sourceFile)) {
@@ -43002,7 +43020,7 @@ function buildDeviceHandlers(deps) {
 }
 
 // src/handlers/meta.ts
-var import_node_os15 = __toESM(require("os"), 1);
+var import_node_os16 = __toESM(require("os"), 1);
 init_protocol();
 
 // src/version.ts
@@ -43034,7 +43052,7 @@ function buildReadyFrame(deps, client) {
   return {
     version,
     protocolVersion: PROTOCOL_VERSION,
-    hostname: import_node_os15.default.hostname(),
+    hostname: import_node_os16.default.hostname(),
     os: process.platform,
     tools,
     runningSessions: info.runningSessions,
@@ -43374,15 +43392,15 @@ function computePublishCheck(args) {
 // src/extension/install-flow.ts
 var import_promises5 = __toESM(require("fs/promises"), 1);
 var import_node_path35 = __toESM(require("path"), 1);
-var import_node_os17 = __toESM(require("os"), 1);
+var import_node_os18 = __toESM(require("os"), 1);
 var import_node_crypto12 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
-var import_node_os16 = __toESM(require("os"), 1);
+var import_node_os17 = __toESM(require("os"), 1);
 var import_node_path34 = __toESM(require("path"), 1);
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path34.default.join(import_node_os16.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path34.default.join(import_node_os17.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
   return import_node_path34.default.join(clawdHomeRoot(override), "extensions");
@@ -43464,7 +43482,7 @@ async function installFromChannel(args, deps) {
     );
   }
   const stage = await import_promises5.default.mkdtemp(
-    import_node_path35.default.join(import_node_os17.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+    import_node_path35.default.join(import_node_os18.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
@@ -43495,7 +43513,7 @@ async function installFromChannel(args, deps) {
 // src/extension/update-flow.ts
 var import_promises6 = __toESM(require("fs/promises"), 1);
 var import_node_path36 = __toESM(require("path"), 1);
-var import_node_os18 = __toESM(require("os"), 1);
+var import_node_os19 = __toESM(require("os"), 1);
 var import_node_crypto13 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
 var UpdateError = class extends Error {
@@ -43583,7 +43601,7 @@ async function updateFromChannel(args, deps) {
   await import_promises6.default.rm(prevDir, { recursive: true, force: true });
   await import_promises6.default.rename(liveDir, prevDir);
   const stage = await import_promises6.default.mkdtemp(
-    import_node_path36.default.join(import_node_os18.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+    import_node_path36.default.join(import_node_os19.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
@@ -46010,7 +46028,7 @@ async function startDaemon(config) {
     },
     source: "daemon",
     sampling: logShippingCfg.sampling,
-    homeDir: import_node_os19.default.homedir()
+    homeDir: import_node_os20.default.homedir()
   });
   const logger = createLogger({
     level: config.logLevel,
@@ -46166,6 +46184,7 @@ async function startDaemon(config) {
   } else {
     logger.warn("deploy-kit.bundle-missing", {});
   }
+  refreshSandboxSettings({ store: personaStore, logger });
   migrateAgentsMirror({ store: personaStore, logger });
   migrateCodexSandbox({ store: personaStore, logger });
   const groupFileStore = new GroupFileStore({ dataDir: config.dataDir, logger });
@@ -46562,7 +46581,7 @@ async function startDaemon(config) {
         throw new Error(`personaDispatch:run source session not found: ${args.sourceSessionId}`);
       }
       const sourceJsonlPath = sourceFile.toolSessionId ? import_node_path46.default.join(
-        import_node_os19.default.homedir(),
+        import_node_os20.default.homedir(),
         ".claude",
         "projects",
         cwdToHashDir(sourceFile.cwd),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawos-dev/clawd",
-  "version": "0.2.143-beta.305.c9c21d1",
+  "version": "0.2.143-beta.306.9c50054",
   "description": "Standalone clawd daemon — Claude Code (and future Codex) session server over WebSocket",
   "type": "module",
   "license": "MIT",