@clawos-dev/clawd 0.2.202 → 0.2.203-beta.406.d63010a

package/dist/cli.cjs

@@ -742,8 +742,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path76, errorMaps, issueData } = params;
-      const fullPath = [...path76, ...issueData.path || []];
+      const { data, path: path77, errorMaps, issueData } = params;
+      const fullPath = [...path77, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -1054,11 +1054,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path76, key) {
+      constructor(parent, value, path77, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path76;
+        this._path = path77;
         this._key = key;
       }
       get path() {
@@ -6449,8 +6449,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path76 = req.path;
-        _req.url = typeof path76 === "string" ? path76 : req.url ? req.url.path || req.url : void 0;
+        const path77 = req.path;
+        _req.url = typeof path77 === "string" ? path77 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -6615,14 +6615,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path76) {
+    function parsePath(path77) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path76.length; i++) {
-        const char = path76[i];
+      for (let i = 0; i < path77.length; i++) {
+        const char = path77[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -6753,10 +6753,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path76 of paths) {
-        const parts = parsePath(path76);
+      for (const path77 of paths) {
+        const parts = parsePath(path77);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path76, remove);
+          redactWildcardPath(obj, parts, censor, path77, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -6841,8 +6841,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path76) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path76];
+            const wrappedCensor = typeof censor === "function" ? (value, path77) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path77];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -6877,8 +6877,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path76 of pathsToClone) {
-        const parts = parsePath(path76);
+      for (const path77 of pathsToClone) {
+        const parts = parsePath(path77);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -6930,24 +6930,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path76) {
-      if (typeof path76 !== "string") {
+    function validatePath(path77) {
+      if (typeof path77 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path76 === "") {
+      if (path77 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path76.includes("..")) {
-        throw new Error(`Invalid redaction path (${path76})`);
+      if (path77.includes("..")) {
+        throw new Error(`Invalid redaction path (${path77})`);
       }
-      if (path76.includes(",")) {
-        throw new Error(`Invalid redaction path (${path76})`);
+      if (path77.includes(",")) {
+        throw new Error(`Invalid redaction path (${path77})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path76.length; i++) {
-        const char = path76[i];
+      for (let i = 0; i < path77.length; i++) {
+        const char = path77[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -6961,20 +6961,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path76})`);
+            throw new Error(`Invalid redaction path (${path77})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path76})`);
+        throw new Error(`Invalid redaction path (${path77})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path76 of paths) {
-        validatePath(path76);
+      for (const path77 of paths) {
+        validatePath(path77);
       }
     }
     function slowRedact(options = {}) {
@@ -7142,8 +7142,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path76) => {
-            return censor(value, [k2, ...path76]);
+          const wrappedCensor = typeof censor === "function" ? (value, path77) => {
+            return censor(value, [k2, ...path77]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -7361,10 +7361,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs69 = require("fs");
+    var fs70 = require("fs");
     var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
-    var path76 = require("path");
+    var path77 = require("path");
     var sleep2 = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -7418,20 +7418,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs69.mkdirSync(path76.dirname(file), { recursive: true });
-          const fd = fs69.openSync(file, flags, mode);
+          if (sonic.mkdir) fs70.mkdirSync(path77.dirname(file), { recursive: true });
+          const fd = fs70.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs69.mkdir(path76.dirname(file), { recursive: true }, (err) => {
+        fs70.mkdir(path77.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs69.open(file, flags, mode, fileOpened);
+          fs70.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs69.open(file, flags, mode, fileOpened);
+        fs70.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -7472,8 +7472,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs69.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs69.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs70.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs70.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -7482,15 +7482,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs69.writeSync(this.fd, this._writingBuf);
+            return fs70.writeSync(this.fd, this._writingBuf);
           }
-          return fs69.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs70.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs69.write(this.fd, this._writingBuf, this.release);
+            return fs70.write(this.fd, this._writingBuf, this.release);
           }
-          return fs69.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs70.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -7547,7 +7547,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs69.fsyncSync(this.fd);
+          fs70.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -7661,7 +7661,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs69.fsync(this.fd, (err) => {
+            fs70.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -7763,7 +7763,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs69.close(fd, (err) => {
+          fs70.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -7812,7 +7812,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs69.writeSync(this.fd, buf) : fs69.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs70.writeSync(this.fd, buf) : fs70.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -7828,7 +7828,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs69.fsyncSync(this.fd);
+        fs70.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -7849,7 +7849,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs69.writeSync(this.fd, buf);
+          const n = fs70.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -7877,13 +7877,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs69.writeSync(this.fd, this._writingBuf) : fs69.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs70.writeSync(this.fd, this._writingBuf) : fs70.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs69.write(this.fd, this._writingBuf, release);
+        fs70.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -7892,7 +7892,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs69.writeSync(this.fd, this._writingBuf);
+          const written = fs70.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -7901,7 +7901,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs69.write(this.fd, this._writingBuf, release);
+        fs70.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -7917,12 +7917,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs69.fsync(sonic.fd, closeWrapped);
+        fs70.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs69.close(sonic.fd, done);
+          fs70.close(sonic.fd, done);
         } else {
           done();
         }
@@ -11057,11 +11057,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path76, added, removed, oldPosInc, options) {
-        var last = path76.lastComponent;
+      addToPath: function addToPath(path77, added, removed, oldPosInc, options) {
+        var last = path77.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path76.oldPos + oldPosInc,
+            oldPos: path77.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -11071,7 +11071,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path76.oldPos + oldPosInc,
+            oldPos: path77.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -11537,10 +11537,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec3 = m2;
-      const path76 = typeof rec3.path === "string" ? rec3.path : null;
+      const path77 = typeof rec3.path === "string" ? rec3.path : null;
       const content = typeof rec3.content === "string" ? rec3.content : null;
-      if (!path76 || content == null) return null;
-      const entry = { path: path76, content };
+      if (!path77 || content == null) return null;
+      const entry = { path: path77, content };
       if (typeof rec3.mtimeMs === "number") entry.mtimeMs = rec3.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -12360,10 +12360,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec3 = m2;
-      const path76 = typeof rec3.path === "string" ? rec3.path : null;
+      const path77 = typeof rec3.path === "string" ? rec3.path : null;
       const content = typeof rec3.content === "string" ? rec3.content : null;
-      if (!path76 || content == null) return null;
-      const out = { path: path76, content };
+      if (!path77 || content == null) return null;
+      const out = { path: path77, content };
       if (typeof rec3.mtimeMs === "number") out.mtimeMs = rec3.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -33460,8 +33460,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path76) {
-      var parts = path76.split("/");
+    exports2.resolve = function(path77) {
+      var parts = path77.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -39314,18 +39314,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path76) {
-      if (path76.slice(-1) === "/") {
-        path76 = path76.substring(0, path76.length - 1);
+    var parentFolder = function(path77) {
+      if (path77.slice(-1) === "/") {
+        path77 = path77.substring(0, path77.length - 1);
       }
-      var lastSlash = path76.lastIndexOf("/");
-      return lastSlash > 0 ? path76.substring(0, lastSlash) : "";
+      var lastSlash = path77.lastIndexOf("/");
+      return lastSlash > 0 ? path77.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path76) {
-      if (path76.slice(-1) !== "/") {
-        path76 += "/";
+    var forceTrailingSlash = function(path77) {
+      if (path77.slice(-1) !== "/") {
+        path77 += "/";
       }
-      return path76;
+      return path77;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -40327,7 +40327,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path63.default.dirname(opts.recordPath);
+  const dir = import_node_path64.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -40341,8 +40341,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs50.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs50.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs51.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs51.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -40367,12 +40367,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs50, import_node_path63;
+var import_node_fs51, import_node_path64;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs50 = __toESM(require("fs"), 1);
-    import_node_path63 = __toESM(require("path"), 1);
+    import_node_fs51 = __toESM(require("fs"), 1);
+    import_node_path64 = __toESM(require("path"), 1);
   }
 });
 
@@ -40415,7 +40415,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs51.mkdtempSync)(import_node_path64.default.join(import_node_os22.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs52.mkdtempSync)(import_node_path65.default.join(import_node_os22.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -40576,19 +40576,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs51.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs52.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs51, import_node_os22, import_node_path64;
+var import_node_fs52, import_node_os22, import_node_path65;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs51 = require("fs");
+    import_node_fs52 = require("fs");
     import_node_os22 = __toESM(require("os"), 1);
-    import_node_path64 = __toESM(require("path"), 1);
+    import_node_path65 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -40699,7 +40699,7 @@ async function sshRelay(argv) {
     process.stderr.write("clawd ssh-relay: missing <peer-device-id>\n" + SSH_RELAY_HELP);
     return 2;
   }
-  const dataDir = args.dataDir ?? import_node_path65.default.join(import_node_os23.default.homedir(), ".clawd");
+  const dataDir = args.dataDir ?? import_node_path66.default.join(import_node_os23.default.homedir(), ".clawd");
   const contact = findContact(dataDir, args.peerDeviceId);
   if (!contact) {
     process.stderr.write(`clawd ssh-relay: contact ${args.peerDeviceId} not found in ${dataDir}/contacts.json
@@ -40793,10 +40793,10 @@ function parseSshRelayArgs(argv) {
   return out;
 }
 function findContact(dataDir, deviceId) {
-  const file = import_node_path65.default.join(dataDir, "contacts.json");
+  const file = import_node_path66.default.join(dataDir, "contacts.json");
   let raw;
   try {
-    raw = import_node_fs52.default.readFileSync(file, "utf8");
+    raw = import_node_fs53.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -40814,13 +40814,13 @@ function findContact(dataDir, deviceId) {
   }
   return null;
 }
-var import_node_fs52, import_node_os23, import_node_path65, SSH_RELAY_HELP;
+var import_node_fs53, import_node_os23, import_node_path66, SSH_RELAY_HELP;
 var init_sshd_cli_relay = __esm({
   "src/sshd/sshd-cli-relay.ts"() {
     "use strict";
-    import_node_fs52 = __toESM(require("fs"), 1);
+    import_node_fs53 = __toESM(require("fs"), 1);
     import_node_os23 = __toESM(require("os"), 1);
-    import_node_path65 = __toESM(require("path"), 1);
+    import_node_path66 = __toESM(require("path"), 1);
     init_wrapper();
     init_src();
     init_peer_forward();
@@ -41023,8 +41023,8 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path62 = __toESM(require("path"), 1);
-var import_node_fs49 = __toESM(require("fs"), 1);
+var import_node_path63 = __toESM(require("path"), 1);
+var import_node_fs50 = __toESM(require("fs"), 1);
 var import_node_os21 = __toESM(require("os"), 1);
 
 // ../node_modules/.pnpm/uuid@10.0.0/node_modules/uuid/dist/esm-node/stringify.js
@@ -41735,7 +41735,7 @@ function composeGuestSandbox(base, userWorkDir, spawnCwd) {
   fsv.denyWrite = unionArr((fsv.denyWrite ?? []).filter((p2) => p2 !== "~/"), [spawnCwd]);
   fsv.allowRead = unionArr(fsv.allowRead, [userWorkDir]);
   fsv.allowWrite = unionArr(fsv.allowWrite, [userWorkDir]);
-  fsv.allowRead = unionArr(fsv.allowRead, ["~/.clawd/contact-ssh-keys"]);
+  fsv.allowRead = unionArr(fsv.allowRead, ["~/.clawd/contact-ssh-keys", "~/.clawd/bin"]);
   return s;
 }
 
@@ -41885,12 +41885,14 @@ var CONTACT_SSH_SYSTEM_PROMPT_HINT = `## \u8DE8\u8BBE\u5907\u6587\u4EF6\u8BBF\u9
    \uFF08\u6BCF\u4E2A \`<deviceId>.ed25519\` \u5C31\u662F\u4E00\u628A privkey\uFF0C\u53BB\u6389\u540E\u7F00\u5C31\u662F deviceId\uFF09
 2. \u7528 SSH \u62E8\u53F7\uFF08\u628A \`<A>\` \u6362\u6210\u5B9E\u9645 deviceId\uFF09\uFF1A
    \`\`\`bash
-   ssh -o ProxyCommand='clawd ssh-relay <A>' \\
+   ssh -o ProxyCommand='~/.clawd/bin/clawd ssh-relay <A>' \\
        -i ~/.clawd/contact-ssh-keys/<A>.ed25519 \\
        -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null \\
        $USER@127.0.0.1 <command>
    # \u4F8B\u5982\uFF1A... $USER@127.0.0.1 cat /Users/xxx/some/file.md
    #      ... $USER@127.0.0.1 ls -la /Users/xxx/proj
+   # \u8BF4\u660E\uFF1A\`~/.clawd/bin/clawd\` \u662F daemon \u542F\u52A8\u65F6 seed \u7684 shim\uFF0C\u786C\u7F16\u7801\u5F53\u524D daemon \u7684
+   # execPath+cliPath\uFF0C\u4FDD\u8BC1 relay \u8DDF daemon \u7248\u672C\u540C\u6B65\u3002\u4E0D\u8981\u7528\u88F8 \`clawd\`\uFF08\u8D70 $PATH \u4F1A\u6F02\uFF09\u3002
    \`\`\`
 
 **A \u6388\u6743\u54EA\u4E9B\u76EE\u5F55\u4E0D\u7528\u4F60\u63D0\u524D\u8BB0**\uFF1AA \u4FA7\u7684 sshd \u62E8\u53F7\u4F1A\u5F3A\u5236\u8D70 sandbox jail\uFF0C\u8FDB\u6C99\u7BB1\u524D\u4F1A\u628A\u6388\u6743\u76EE\u5F55\u5217\u8868\u5199\u5230 stderr\uFF08\u683C\u5F0F \`[clawd-ssh-jail] Access allowed to these directories: ...\`\uFF09\u3002\u4F60\u5373\u4F7F\u731C\u9519\u8DEF\u5F84\u4E5F\u4F1A\u88AB sandbox deny\uFF0C\u4F46 stderr \u91CC\u5C31\u81EA\u5E26\u7B54\u6848\uFF0C\u8BD5\u9519\u4E00\u6B21\u5C31\u5B66\u5230 A \u6388\u6743\u4E86\u54EA\u4E9B\u76EE\u5F55\uFF0C\u4E0B\u6B21\u76F4\u63A5\u7528\u5BF9\u7684\u8DEF\u5F84\u3002
@@ -46560,8 +46562,8 @@ function turnStartInput(text) {
   const items = [];
   let leftover = text;
   for (const m2 of text.matchAll(SKILL_RE)) {
-    const [marker, name, path76] = m2;
-    items.push({ type: "skill", name, path: path76 });
+    const [marker, name, path77] = m2;
+    items.push({ type: "skill", name, path: path77 });
     leftover = leftover.replace(marker, "");
   }
   for (const m2 of text.matchAll(ATTACHMENT_RE2)) {
@@ -49015,13 +49017,13 @@ function mapSkillsListResponse(res) {
       const r = s ?? {};
       const name = str3(r.name);
       if (!name) continue;
-      const path76 = str3(r.path);
+      const path77 = str3(r.path);
       const description = str3(r.description);
       const isPlugin = name.includes(":");
       out.push({
         name,
         source: isPlugin ? "plugin" : "project",
-        ...path76 ? { path: path76 } : {},
+        ...path77 ? { path: path77 } : {},
         ...description ? { description } : {},
         ...isPlugin ? { plugin: name.split(":")[0] } : {}
       });
@@ -52993,8 +52995,8 @@ async function waitForFrpcReady(proc, timeoutMs) {
 }
 
 // src/sshd/sshd-manager.ts
-var import_node_fs36 = __toESM(require("fs"), 1);
-var import_node_path37 = __toESM(require("path"), 1);
+var import_node_fs37 = __toESM(require("fs"), 1);
+var import_node_path38 = __toESM(require("path"), 1);
 var import_node_child_process11 = require("child_process");
 
 // src/sshd/sshd-config.ts
@@ -53277,11 +53279,35 @@ function ensureJailScript(dataDir) {
   return target;
 }
 
+// src/sshd/clawd-shim.ts
+var import_node_fs36 = __toESM(require("fs"), 1);
+var import_node_path37 = __toESM(require("path"), 1);
+function shellQuote(s) {
+  return `'${s.replace(/'/g, "'\\''")}'`;
+}
+function buildClawdShim(execPath, cliPath) {
+  return `#!/usr/bin/env bash
+# clawd shim (managed by clawd; do not edit)
+#
+# \u786C\u7F16\u7801\u672C daemon \u542F\u52A8\u65F6\u7528\u7684 execPath + cliPath\uFF1Bdaemon \u91CD\u542F\u4F1A\u8986\u5199\u672C\u6587\u4EF6\uFF08\u5E42\u7B49 seed\uFF09\u3002
+# guest CC \u7528 SSH ProxyCommand \u8D70 ~/.clawd/bin/clawd ssh-relay \u65F6\u4F1A\u547D\u4E2D\u672C shim\uFF0C\u4FDD\u8BC1
+# relay \u4E8C\u8FDB\u5236\u8DDF\u5F53\u524D\u8DD1\u7740\u7684 daemon \u540C\u6E90\u540C\u7248\u672C\u3002
+exec ${shellQuote(execPath)} ${shellQuote(cliPath)} "$@"
+`;
+}
+function ensureClawdShim(dataDir, execPath, cliPath) {
+  const binDir = import_node_path37.default.join(dataDir, "bin");
+  import_node_fs36.default.mkdirSync(binDir, { recursive: true, mode: 493 });
+  const target = import_node_path37.default.join(binDir, "clawd");
+  import_node_fs36.default.writeFileSync(target, buildClawdShim(execPath, cliPath), { mode: 493 });
+  return target;
+}
+
 // src/sshd/sshd-manager.ts
 var SshdManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.sshdDir = import_node_path37.default.join(deps.dataDir, "sshd");
+    this.sshdDir = import_node_path38.default.join(deps.dataDir, "sshd");
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
   deps;
@@ -53300,31 +53326,32 @@ var SshdManager = class {
       ownPid: process.pid,
       logger
     });
-    import_node_fs36.default.mkdirSync(this.sshdDir, { recursive: true, mode: 448 });
-    import_node_fs36.default.mkdirSync(import_node_path37.default.join(this.sshdDir, "authorized_keys.d"), { recursive: true, mode: 448 });
+    import_node_fs37.default.mkdirSync(this.sshdDir, { recursive: true, mode: 448 });
+    import_node_fs37.default.mkdirSync(import_node_path38.default.join(this.sshdDir, "authorized_keys.d"), { recursive: true, mode: 448 });
     ensureJailScript(this.deps.dataDir);
-    const hostKeyPath = import_node_path37.default.join(this.sshdDir, "host_key");
-    if (!import_node_fs36.default.existsSync(hostKeyPath)) {
+    ensureClawdShim(this.deps.dataDir, process.execPath, process.argv[1] ?? "");
+    const hostKeyPath = import_node_path38.default.join(this.sshdDir, "host_key");
+    if (!import_node_fs37.default.existsSync(hostKeyPath)) {
       await this.generateHostKey(hostKeyPath);
     }
-    const akFile = import_node_path37.default.join(this.sshdDir, "authorized_keys.d", "clawd-contacts");
-    if (!import_node_fs36.default.existsSync(akFile)) {
-      import_node_fs36.default.writeFileSync(akFile, "", { mode: 384 });
+    const akFile = import_node_path38.default.join(this.sshdDir, "authorized_keys.d", "clawd-contacts");
+    if (!import_node_fs37.default.existsSync(akFile)) {
+      import_node_fs37.default.writeFileSync(akFile, "", { mode: 384 });
     }
-    const configPath = import_node_path37.default.join(this.sshdDir, "sshd_config");
+    const configPath = import_node_path38.default.join(this.sshdDir, "sshd_config");
     const config = buildSshdConfig({
       listenAddress: "127.0.0.1",
       port: this.deps.port,
       hostKeyPath,
       authorizedKeysFile: akFile,
-      pidFilePath: import_node_path37.default.join(this.sshdDir, "sshd.pid")
+      pidFilePath: import_node_path38.default.join(this.sshdDir, "sshd.pid")
     });
-    import_node_fs36.default.writeFileSync(configPath, config, { mode: 384 });
+    import_node_fs37.default.writeFileSync(configPath, config, { mode: 384 });
     const sshdBin = this.deps.sshdBin ?? "/usr/sbin/sshd";
     const proc = (this.deps.spawnImpl ?? import_node_child_process11.spawn)(sshdBin, ["-D", "-e", "-f", configPath], {
       stdio: ["ignore", "pipe", "pipe"]
     });
-    const logStream = import_node_fs36.default.createWriteStream(import_node_path37.default.join(this.sshdDir, "sshd.log"), {
+    const logStream = import_node_fs37.default.createWriteStream(import_node_path38.default.join(this.sshdDir, "sshd.log"), {
       flags: "a",
       mode: 384
     });
@@ -53417,7 +53444,7 @@ ${tail}` : ready.error;
       p2.on("error", reject);
     });
     try {
-      import_node_fs36.default.chmodSync(hostKeyPath, 384);
+      import_node_fs37.default.chmodSync(hostKeyPath, 384);
     } catch {
     }
   }
@@ -53460,17 +53487,17 @@ async function waitForSshdReady(proc, timeoutMs) {
 }
 
 // src/sshd/authorized-keys.ts
-var import_node_fs37 = __toESM(require("fs"), 1);
-var import_node_path38 = __toESM(require("path"), 1);
+var import_node_fs38 = __toESM(require("fs"), 1);
+var import_node_path39 = __toESM(require("path"), 1);
 var JAIL_BIN_PATH_ENV = "CLAWD_JAIL_BIN_PATH";
 var AUTHORIZED_KEYS_FILE = "clawd-contacts";
 function jailBinPath() {
-  return process.env[JAIL_BIN_PATH_ENV] ?? import_node_path38.default.join(process.env.HOME ?? "", ".clawd", "bin", "clawd-ssh-jail");
+  return process.env[JAIL_BIN_PATH_ENV] ?? import_node_path39.default.join(process.env.HOME ?? "", ".clawd", "bin", "clawd-ssh-jail");
 }
 function rebuildAuthorizedKeys(store, sshdDir) {
-  const akDir = import_node_path38.default.join(sshdDir, "authorized_keys.d");
-  const target = import_node_path38.default.join(akDir, AUTHORIZED_KEYS_FILE);
-  import_node_fs37.default.mkdirSync(akDir, { recursive: true, mode: 448 });
+  const akDir = import_node_path39.default.join(sshdDir, "authorized_keys.d");
+  const target = import_node_path39.default.join(akDir, AUTHORIZED_KEYS_FILE);
+  import_node_fs38.default.mkdirSync(akDir, { recursive: true, mode: 448 });
   const lines = ["# managed by clawd; do not edit", ""];
   for (const c of store.list()) {
     if (!c.sshAllowed) continue;
@@ -53484,29 +53511,29 @@ function rebuildAuthorizedKeys(store, sshdDir) {
   }
   const body = lines.join("\n") + "\n";
   const tmp = `${target}.tmp-${process.pid}-${Date.now()}`;
-  import_node_fs37.default.writeFileSync(tmp, body, { mode: 384 });
-  import_node_fs37.default.renameSync(tmp, target);
+  import_node_fs38.default.writeFileSync(tmp, body, { mode: 384 });
+  import_node_fs38.default.renameSync(tmp, target);
 }
 function readIssuedPubkey(sshdDir, deviceId) {
   const safeId = deviceId.replace(/[\/\\]/g, "_");
-  const p2 = import_node_path38.default.join(sshdDir, "keys", `${safeId}.ed25519.pub`);
+  const p2 = import_node_path39.default.join(sshdDir, "keys", `${safeId}.ed25519.pub`);
   try {
-    return import_node_fs37.default.readFileSync(p2, "utf8");
+    return import_node_fs38.default.readFileSync(p2, "utf8");
   } catch {
     return null;
   }
 }
 
 // src/sshd/contact-key-puller.ts
-var import_node_fs39 = __toESM(require("fs"), 1);
-var import_node_path40 = __toESM(require("path"), 1);
+var import_node_fs40 = __toESM(require("fs"), 1);
+var import_node_path41 = __toESM(require("path"), 1);
 init_peer_forward();
 
 // src/sshd/contact-ssh-log.ts
-var import_node_fs38 = __toESM(require("fs"), 1);
-var import_node_path39 = __toESM(require("path"), 1);
+var import_node_fs39 = __toESM(require("fs"), 1);
+var import_node_path40 = __toESM(require("path"), 1);
 function createContactSshLog(dataDir) {
-  const file = import_node_path39.default.join(dataDir, "contact-ssh.log");
+  const file = import_node_path40.default.join(dataDir, "contact-ssh.log");
   function append(level, tag, message, meta) {
     const time = (/* @__PURE__ */ new Date()).toISOString();
     let line = `[${time}] [${level}] [${tag}] ${message}`;
@@ -53519,8 +53546,8 @@ function createContactSshLog(dataDir) {
     }
     line += "\n";
     try {
-      import_node_fs38.default.mkdirSync(import_node_path39.default.dirname(file), { recursive: true });
-      import_node_fs38.default.appendFileSync(file, line, { mode: 384 });
+      import_node_fs39.default.mkdirSync(import_node_path40.default.dirname(file), { recursive: true });
+      import_node_fs39.default.appendFileSync(file, line, { mode: 384 });
     } catch {
     }
   }
@@ -53543,7 +53570,7 @@ var nullContactSshLog = {
 var CONTACT_KEYS_DIR = "contact-ssh-keys";
 function safeContactKeyPath(dataDir, deviceId) {
   const safeId = deviceId.replace(/[\/\\]/g, "_");
-  return import_node_path40.default.join(dataDir, CONTACT_KEYS_DIR, `${safeId}.ed25519`);
+  return import_node_path41.default.join(dataDir, CONTACT_KEYS_DIR, `${safeId}.ed25519`);
 }
 async function pullContactSshKeyOnce(deps) {
   const forward = deps.forwardImpl ?? ((c) => forwardContactSshKeyIssueToPeer({
@@ -53609,12 +53636,12 @@ async function pullContactSshKeyOnce(deps) {
 }
 function writeKeyFile(dataDir, deviceId, pem) {
   const p2 = safeContactKeyPath(dataDir, deviceId);
-  import_node_fs39.default.mkdirSync(import_node_path40.default.dirname(p2), { recursive: true, mode: 448 });
-  import_node_fs39.default.writeFileSync(p2, pem, { mode: 384 });
+  import_node_fs40.default.mkdirSync(import_node_path41.default.dirname(p2), { recursive: true, mode: 448 });
+  import_node_fs40.default.writeFileSync(p2, pem, { mode: 384 });
 }
 function removeKeyFile(dataDir, deviceId) {
   try {
-    import_node_fs39.default.unlinkSync(safeContactKeyPath(dataDir, deviceId));
+    import_node_fs40.default.unlinkSync(safeContactKeyPath(dataDir, deviceId));
     return true;
   } catch {
     return false;
@@ -53760,27 +53787,27 @@ function pumpWsToSshd(ws, deps, clientAddr) {
 
 // src/tunnel/device-key.ts
 var import_node_os14 = __toESM(require("os"), 1);
-var import_node_path41 = __toESM(require("path"), 1);
+var import_node_path42 = __toESM(require("path"), 1);
 var import_node_crypto11 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os14.default.hostname();
   const uid = opts.uid ?? (typeof import_node_os14.default.userInfo === "function" ? import_node_os14.default.userInfo().uid : 0);
   const home = opts.home ?? import_node_os14.default.homedir();
-  const defaultDataDir = import_node_path41.default.resolve(import_node_path41.default.join(home, ".clawd"));
-  const normalizedDataDir = opts.dataDir ? import_node_path41.default.resolve(opts.dataDir) : null;
+  const defaultDataDir = import_node_path42.default.resolve(import_node_path42.default.join(home, ".clawd"));
+  const normalizedDataDir = opts.dataDir ? import_node_path42.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
   return import_node_crypto11.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
-var import_node_fs40 = __toESM(require("fs"), 1);
-var import_node_path42 = __toESM(require("path"), 1);
+var import_node_fs41 = __toESM(require("fs"), 1);
+var import_node_path43 = __toESM(require("path"), 1);
 var import_node_crypto12 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path42.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path43.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -53816,7 +53843,7 @@ function defaultGenerateOwnerPrincipalId() {
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs40.default.readFileSync(file, "utf8");
+    const raw = import_node_fs41.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -53836,25 +53863,25 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs40.default.mkdirSync(import_node_path42.default.dirname(file), { recursive: true });
-  import_node_fs40.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs41.default.mkdirSync(import_node_path43.default.dirname(file), { recursive: true });
+  import_node_fs41.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs40.default.chmodSync(file, 384);
+    import_node_fs41.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs41 = __toESM(require("fs"), 1);
+var import_node_fs42 = __toESM(require("fs"), 1);
 var import_node_os15 = __toESM(require("os"), 1);
-var import_node_path43 = __toESM(require("path"), 1);
+var import_node_path44 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function loadOwnerDisplayName(dataDir) {
   const fallback = import_node_os15.default.userInfo().username;
-  const profilePath = import_node_path43.default.join(dataDir, PROFILE_FILENAME);
+  const profilePath = import_node_path44.default.join(dataDir, PROFILE_FILENAME);
   let raw;
   try {
-    raw = import_node_fs41.default.readFileSync(profilePath, "utf8");
+    raw = import_node_fs42.default.readFileSync(profilePath, "utf8");
   } catch {
     return fallback;
   }
@@ -53877,18 +53904,18 @@ function loadOwnerDisplayName(dataDir) {
 }
 
 // src/feishu-auth/owner-identity-store.ts
-var import_node_fs42 = __toESM(require("fs"), 1);
-var import_node_path44 = __toESM(require("path"), 1);
+var import_node_fs43 = __toESM(require("fs"), 1);
+var import_node_path45 = __toESM(require("path"), 1);
 var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
 var OwnerIdentityStore = class {
   file;
   constructor(dataDir) {
-    this.file = import_node_path44.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
+    this.file = import_node_path45.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
   }
   read() {
     let raw;
     try {
-      raw = import_node_fs42.default.readFileSync(this.file, "utf8");
+      raw = import_node_fs43.default.readFileSync(this.file, "utf8");
     } catch {
       return null;
     }
@@ -53916,16 +53943,16 @@ var OwnerIdentityStore = class {
     };
   }
   write(record) {
-    import_node_fs42.default.mkdirSync(import_node_path44.default.dirname(this.file), { recursive: true });
-    import_node_fs42.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
+    import_node_fs43.default.mkdirSync(import_node_path45.default.dirname(this.file), { recursive: true });
+    import_node_fs43.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
     try {
-      import_node_fs42.default.chmodSync(this.file, 384);
+      import_node_fs43.default.chmodSync(this.file, 384);
     } catch {
     }
   }
   clear() {
     try {
-      import_node_fs42.default.unlinkSync(this.file);
+      import_node_fs43.default.unlinkSync(this.file);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -54046,9 +54073,9 @@ var CentralClientError = class extends Error {
   code;
   cause;
 };
-async function centralRequest(opts, path76, init) {
+async function centralRequest(opts, path77, init) {
   const f = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}${path76}`;
+  const url = `${opts.api.replace(/\/+$/, "")}${path77}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
   let res;
@@ -54190,8 +54217,8 @@ function verifyConnectToken(args) {
 }
 
 // src/feishu-auth/server-key.ts
-var fs52 = __toESM(require("fs"), 1);
-var path53 = __toESM(require("path"), 1);
+var fs53 = __toESM(require("fs"), 1);
+var path54 = __toESM(require("path"), 1);
 var FILE_NAME2 = "server-signing-key.json";
 var ServerKeyStore = class {
   constructor(dataDir) {
@@ -54199,12 +54226,12 @@ var ServerKeyStore = class {
   }
   dataDir;
   filePath() {
-    return path53.join(this.dataDir, FILE_NAME2);
+    return path54.join(this.dataDir, FILE_NAME2);
   }
   /** 读缓存的公钥；无缓存 / 损坏 → null（调用方决定是否触发拉取） */
   read() {
     try {
-      const raw = fs52.readFileSync(this.filePath(), "utf8");
+      const raw = fs53.readFileSync(this.filePath(), "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.publicKeyPem === "string" && parsed.publicKeyPem.includes("PUBLIC KEY")) {
         return parsed.publicKeyPem;
@@ -54219,12 +54246,12 @@ var ServerKeyStore = class {
       publicKeyPem,
       fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    fs52.mkdirSync(this.dataDir, { recursive: true });
-    fs52.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
+    fs53.mkdirSync(this.dataDir, { recursive: true });
+    fs53.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
   }
   clear() {
     try {
-      fs52.unlinkSync(this.filePath());
+      fs53.unlinkSync(this.filePath());
     } catch {
     }
   }
@@ -54237,12 +54264,12 @@ init_protocol();
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs43 = __toESM(require("fs"), 1);
+var import_node_fs44 = __toESM(require("fs"), 1);
 var import_node_os16 = __toESM(require("os"), 1);
-var import_node_path45 = __toESM(require("path"), 1);
+var import_node_path46 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs43.default.readFileSync(file, "utf8");
+  const raw = import_node_fs44.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -54255,10 +54282,10 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path45.default.join(import_node_os16.default.homedir(), ".claude");
-  const projectDir = import_node_path45.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  const sourceFile = import_node_path45.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs43.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path46.default.join(import_node_os16.default.homedir(), ".claude");
+  const projectDir = import_node_path46.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  const sourceFile = import_node_path46.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs44.default.existsSync(sourceFile)) {
     throw new Error(`fork: source transcript not found: ${sourceFile}`);
   }
   const entries = readJsonlEntries(sourceFile);
@@ -54288,9 +54315,9 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const forkedFilePath = import_node_path45.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs43.default.mkdirSync(projectDir, { recursive: true });
-  import_node_fs43.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const forkedFilePath = import_node_path46.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs44.default.mkdirSync(projectDir, { recursive: true });
+  import_node_fs44.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
@@ -54642,7 +54669,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path56 = __toESM(require("path"), 1);
+var path57 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -54660,7 +54687,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path55 = __toESM(require("path"), 1);
+var path56 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -54673,42 +54700,42 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read", userWorkDir) {
-  const target = path55.resolve(absPath);
+  const target = path56.resolve(absPath);
   if (userWorkDir) {
-    const u = path55.resolve(userWorkDir);
-    const usep = u.endsWith(path55.sep) ? "" : path55.sep;
+    const u = path56.resolve(userWorkDir);
+    const usep = u.endsWith(path56.sep) ? "" : path56.sep;
     if (target === u || target.startsWith(u + usep)) return true;
   }
-  const root = path55.resolve(personaRoot);
-  const sep3 = root.endsWith(path55.sep) ? "" : path55.sep;
+  const root = path56.resolve(personaRoot);
+  const sep3 = root.endsWith(path56.sep) ? "" : path56.sep;
   if (!target.startsWith(root + sep3)) return false;
-  const rel = path55.relative(root, target);
+  const rel = path56.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId = rel.split(path55.sep)[0];
+  const personaId = rel.split(path56.sep)[0];
   if (!personaId) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path55.resolve(personaRoot);
-  const target = path55.resolve(absPath);
-  const sep3 = root.endsWith(path55.sep) ? "" : path55.sep;
+  const root = path56.resolve(personaRoot);
+  const target = path56.resolve(absPath);
+  const sep3 = root.endsWith(path56.sep) ? "" : path56.sep;
   if (!target.startsWith(root + sep3)) return null;
-  const rel = path55.relative(root, target);
+  const rel = path56.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path55.sep)[0];
+  const id = rel.split(path56.sep)[0];
   return id || null;
 }
 function isPathWithin(dir, absPath) {
-  const d = path55.resolve(dir);
-  const t = path55.resolve(absPath);
-  const sep3 = d.endsWith(path55.sep) ? "" : path55.sep;
+  const d = path56.resolve(dir);
+  const t = path56.resolve(absPath);
+  const sep3 = d.endsWith(path56.sep) ? "" : path56.sep;
   return t === d || t.startsWith(d + sep3);
 }
 function isPathInGuestBoundary(personaRoot, personaId, userWorkDir, absPath) {
   if (userWorkDir && isPathWithin(userWorkDir, absPath)) return true;
-  return personaIdFromPath(path55.resolve(absPath), personaRoot) === personaId;
+  return personaIdFromPath(path56.resolve(absPath), personaRoot) === personaId;
 }
 
 // src/handlers/history.ts
@@ -54734,7 +54761,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path56.join(personaRoot, pid),
+          path57.join(personaRoot, pid),
           personaRoot,
           "read",
           userWorkDir
@@ -54746,7 +54773,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path56.resolve(args.projectPath), personaRoot, "history:list");
+    assertGuestPath(ctx, path57.resolve(args.projectPath), personaRoot, "history:list");
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -54778,13 +54805,13 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path56.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
+    assertGuestPath(ctx, path57.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
     const subs = await history.listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path56.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
+    assertGuestPath(ctx, path57.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
     const res = await history.readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
   };
@@ -54793,7 +54820,7 @@ function buildHistoryHandlers(deps) {
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path56.resolve(d.cwd), personaRoot, "read", userWorkDir)
+        (d) => isGuestPathAllowed(ctx.grants, path57.resolve(d.cwd), personaRoot, "read", userWorkDir)
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -54810,7 +54837,7 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path57 = __toESM(require("path"), 1);
+var path58 = __toESM(require("path"), 1);
 var os16 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
@@ -54852,22 +54879,22 @@ function buildWorkspaceHandlers(deps) {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
     const fallbackCwd = isGuest && personaRoot ? personaRoot : os16.homedir();
-    const resolvedCwd = path57.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path57.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const resolvedCwd = path58.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path58.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list", usersRoot);
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path57.isAbsolute(args.path) ? path57.resolve(args.path) : path57.resolve(args.cwd, args.path);
+    const target = path58.isAbsolute(args.path) ? path58.resolve(args.path) : path58.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read", usersRoot);
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path57.resolve(args.cwd);
+    const cwdAbs = path58.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list", usersRoot);
     const list2 = await getSkillsForTool(args.tool ?? "claude", cwdAbs);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -54879,7 +54906,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path57.resolve(args.cwd);
+    const cwdAbs = path58.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list", usersRoot);
     if (args.tool === "codex") {
       return { response: { type: "agents:list", agents: [] } };
@@ -54901,20 +54928,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path59 = __toESM(require("path"), 1);
+var path60 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process12 = require("child_process");
-var import_node_fs44 = __toESM(require("fs"), 1);
-var import_node_path46 = __toESM(require("path"), 1);
+var import_node_fs45 = __toESM(require("fs"), 1);
+var import_node_path47 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process12.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path46.default.resolve(p2);
+  const resolved = import_node_path47.default.resolve(p2);
   try {
-    return import_node_fs44.default.realpathSync(resolved);
+    return import_node_fs45.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -54988,7 +55015,7 @@ async function listGitBranches(cwd) {
 function assertGuestCwd(ctx, cwd, personaRoot, method, usersRoot) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
   const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
-  if (!isGuestPathAllowed(ctx.grants, path59.resolve(cwd), personaRoot, "read", userWorkDir)) {
+  if (!isGuestPathAllowed(ctx.grants, path60.resolve(cwd), personaRoot, "read", userWorkDir)) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -55329,22 +55356,22 @@ init_src();
 init_protocol();
 
 // src/sshd/key-issue.ts
-var import_node_fs45 = __toESM(require("fs"), 1);
-var import_node_path47 = __toESM(require("path"), 1);
+var import_node_fs46 = __toESM(require("fs"), 1);
+var import_node_path48 = __toESM(require("path"), 1);
 var import_node_child_process13 = require("child_process");
 function safeDeviceId(deviceId) {
   return deviceId.replace(/[\/\\]/g, "_");
 }
 async function issueContactSshKey(deviceId, sshdDir, opts = {}) {
   const safeId = safeDeviceId(deviceId);
-  const keysDir = import_node_path47.default.join(sshdDir, "keys");
-  import_node_fs45.default.mkdirSync(keysDir, { recursive: true, mode: 448 });
-  const privPath = import_node_path47.default.join(keysDir, `${safeId}.ed25519`);
+  const keysDir = import_node_path48.default.join(sshdDir, "keys");
+  import_node_fs46.default.mkdirSync(keysDir, { recursive: true, mode: 448 });
+  const privPath = import_node_path48.default.join(keysDir, `${safeId}.ed25519`);
   const pubPath = `${privPath}.pub`;
-  if (import_node_fs45.default.existsSync(privPath) && import_node_fs45.default.existsSync(pubPath)) {
+  if (import_node_fs46.default.existsSync(privPath) && import_node_fs46.default.existsSync(pubPath)) {
     return {
-      privateKeyPem: import_node_fs45.default.readFileSync(privPath, "utf8"),
-      publicKeyLine: import_node_fs45.default.readFileSync(pubPath, "utf8").trim()
+      privateKeyPem: import_node_fs46.default.readFileSync(privPath, "utf8"),
+      publicKeyLine: import_node_fs46.default.readFileSync(pubPath, "utf8").trim()
     };
   }
   const bin = opts.keygenBin ?? "/usr/bin/ssh-keygen";
@@ -55358,16 +55385,16 @@ async function issueContactSshKey(deviceId, sshdDir, opts = {}) {
     p2.on("error", reject);
   });
   try {
-    import_node_fs45.default.chmodSync(privPath, 384);
+    import_node_fs46.default.chmodSync(privPath, 384);
   } catch {
   }
   try {
-    import_node_fs45.default.chmodSync(pubPath, 420);
+    import_node_fs46.default.chmodSync(pubPath, 420);
   } catch {
   }
   return {
-    privateKeyPem: import_node_fs45.default.readFileSync(privPath, "utf8"),
-    publicKeyLine: import_node_fs45.default.readFileSync(pubPath, "utf8").trim()
+    privateKeyPem: import_node_fs46.default.readFileSync(privPath, "utf8"),
+    publicKeyLine: import_node_fs46.default.readFileSync(pubPath, "utf8").trim()
   };
 }
 
@@ -55786,7 +55813,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path48 = __toESM(require("path"), 1);
+var import_node_path49 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -55866,12 +55893,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path48.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path48.default.isAbsolute(args.relPath) ? import_node_path48.default.resolve(args.relPath) : import_node_path48.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path49.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path49.default.isAbsolute(args.relPath) ? import_node_path49.default.resolve(args.relPath) : import_node_path49.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.signUrl", "group-acl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path48.default.isAbsolute(e.relPath) ? import_node_path48.default.resolve(e.relPath) : import_node_path48.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path49.default.isAbsolute(e.relPath) ? import_node_path49.default.resolve(e.relPath) : import_node_path49.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -55896,7 +55923,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path48.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
+    assertGuestAttachmentPath(ctx, import_node_path49.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -55911,8 +55938,8 @@ function buildAttachmentHandlers(deps) {
     if (!scope) {
       throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, `session ${args.sessionId} not found`);
     }
-    const cwdAbs = import_node_path48.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
-    const candidateAbs = import_node_path48.default.isAbsolute(args.relPath) ? import_node_path48.default.resolve(args.relPath) : import_node_path48.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path49.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
+    const candidateAbs = import_node_path49.default.isAbsolute(args.relPath) ? import_node_path49.default.resolve(args.relPath) : import_node_path49.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.groupAdd", "cwd-subtree");
     const from = ctx?.principal.kind === "owner" ? "owner" : "agent";
     const size = 0;
@@ -55971,20 +55998,20 @@ function buildAttachmentHandlers(deps) {
 
 // src/handlers/extension.ts
 var import_promises8 = __toESM(require("fs/promises"), 1);
-var import_node_path53 = __toESM(require("path"), 1);
+var import_node_path54 = __toESM(require("path"), 1);
 init_protocol();
 init_src();
 
 // src/extension/bundle-zip.ts
 var import_promises5 = __toESM(require("fs/promises"), 1);
-var import_node_path49 = __toESM(require("path"), 1);
+var import_node_path50 = __toESM(require("path"), 1);
 var import_node_crypto14 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
   const zip = new import_jszip2.default();
   for (const rel of entries) {
-    const abs = import_node_path49.default.join(dir, rel);
+    const abs = import_node_path50.default.join(dir, rel);
     const content = await import_promises5.default.readFile(abs);
     zip.file(rel, content, { date: FIXED_DATE });
   }
@@ -56005,7 +56032,7 @@ async function listFilesSorted(rootDir) {
   return out;
 }
 async function walk(absRoot, relPrefix, out) {
-  const dirAbs = import_node_path49.default.join(absRoot, relPrefix);
+  const dirAbs = import_node_path50.default.join(absRoot, relPrefix);
   const entries = await import_promises5.default.readdir(dirAbs, { withFileTypes: true });
   for (const e of entries) {
     if (IGNORE_BASENAMES.has(e.name)) continue;
@@ -56061,7 +56088,7 @@ function computePublishCheck(args) {
 
 // src/extension/install-flow.ts
 var import_promises6 = __toESM(require("fs/promises"), 1);
-var import_node_path51 = __toESM(require("path"), 1);
+var import_node_path52 = __toESM(require("path"), 1);
 var import_node_os19 = __toESM(require("os"), 1);
 var import_node_crypto15 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
@@ -56069,19 +56096,19 @@ init_src();
 
 // src/extension/paths.ts
 var import_node_os18 = __toESM(require("os"), 1);
-var import_node_path50 = __toESM(require("path"), 1);
+var import_node_path51 = __toESM(require("path"), 1);
 init_src();
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path50.default.join(import_node_os18.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path51.default.join(import_node_os18.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
-  return import_node_path50.default.join(clawdHomeRoot(override), "extensions");
+  return import_node_path51.default.join(clawdHomeRoot(override), "extensions");
 }
 function publishedChannelsFile(override) {
-  return import_node_path50.default.join(clawdHomeRoot(override), "extensions-published.json");
+  return import_node_path51.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
 function bundleCacheRoot(override) {
-  return import_node_path50.default.join(clawdHomeRoot(override), "extension-bundles");
+  return import_node_path51.default.join(clawdHomeRoot(override), "extension-bundles");
 }
 
 // src/extension/install-flow.ts
@@ -56108,7 +56135,7 @@ async function installFromChannel(args, deps) {
     throw new InstallError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path51.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path52.default.isAbsolute(name)) {
       throw new InstallError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -56140,7 +56167,7 @@ async function installFromChannel(args, deps) {
     );
   }
   const localExtId = namespacedExtId(ownerSlug, channelRef.ownerPrincipalId);
-  const destDir = import_node_path51.default.join(deps.extensionsRoot, localExtId);
+  const destDir = import_node_path52.default.join(deps.extensionsRoot, localExtId);
   let destExists = false;
   try {
     await import_promises6.default.access(destDir);
@@ -56154,16 +56181,16 @@ async function installFromChannel(args, deps) {
     );
   }
   const stage = await import_promises6.default.mkdtemp(
-    import_node_path51.default.join(import_node_os19.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+    import_node_path52.default.join(import_node_os19.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path51.default.join(stage, name);
+      const dest = import_node_path52.default.join(stage, name);
       if (entry.dir) {
         await import_promises6.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises6.default.mkdir(import_node_path51.default.dirname(dest), { recursive: true });
+      await import_promises6.default.mkdir(import_node_path52.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises6.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -56184,7 +56211,7 @@ async function installFromChannel(args, deps) {
 
 // src/extension/update-flow.ts
 var import_promises7 = __toESM(require("fs/promises"), 1);
-var import_node_path52 = __toESM(require("path"), 1);
+var import_node_path53 = __toESM(require("path"), 1);
 var import_node_os20 = __toESM(require("os"), 1);
 var import_node_crypto16 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
@@ -56202,11 +56229,11 @@ async function updateFromChannel(args, deps) {
     channelRef.extId,
     channelRef.ownerPrincipalId
   );
-  const liveDir = import_node_path52.default.join(deps.extensionsRoot, localExtId);
+  const liveDir = import_node_path53.default.join(deps.extensionsRoot, localExtId);
   const prevDir = `${liveDir}.prev`;
   let existingVersion;
   try {
-    const raw = await import_promises7.default.readFile(import_node_path52.default.join(liveDir, "manifest.json"), "utf8");
+    const raw = await import_promises7.default.readFile(import_node_path53.default.join(liveDir, "manifest.json"), "utf8");
     const parsed2 = ExtensionManifestSchema.safeParse(JSON.parse(raw));
     if (!parsed2.success) {
       throw new UpdateError(
@@ -56239,7 +56266,7 @@ async function updateFromChannel(args, deps) {
     throw new UpdateError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path52.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path53.default.isAbsolute(name)) {
       throw new UpdateError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -56274,16 +56301,16 @@ async function updateFromChannel(args, deps) {
   await import_promises7.default.rm(prevDir, { recursive: true, force: true });
   await import_promises7.default.rename(liveDir, prevDir);
   const stage = await import_promises7.default.mkdtemp(
-    import_node_path52.default.join(import_node_os20.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+    import_node_path53.default.join(import_node_os20.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path52.default.join(stage, name);
+      const dest = import_node_path53.default.join(stage, name);
       if (entry.dir) {
         await import_promises7.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises7.default.mkdir(import_node_path52.default.dirname(dest), { recursive: true });
+      await import_promises7.default.mkdir(import_node_path53.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises7.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -56377,7 +56404,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
       );
     }
   }
-  const manifestPath = import_node_path53.default.join(root, extId, "manifest.json");
+  const manifestPath = import_node_path54.default.join(root, extId, "manifest.json");
   const manifest = await readManifest(root, extId);
   const next = { ...manifest, version: newVersion };
   const tmp = `${manifestPath}.tmp`;
@@ -56385,7 +56412,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
   await import_promises8.default.rename(tmp, manifestPath);
 }
 async function readManifest(root, extId) {
-  const file = import_node_path53.default.join(root, extId, "manifest.json");
+  const file = import_node_path54.default.join(root, extId, "manifest.json");
   let raw;
   try {
     raw = await import_promises8.default.readFile(file, "utf8");
@@ -56476,7 +56503,7 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256, buffer } = await bundleExtensionDir(import_node_path53.default.join(deps.root, extId));
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path54.default.join(deps.root, extId));
     return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
@@ -56657,9 +56684,9 @@ function buildExtensionHandlers(deps) {
 }
 
 // src/app-builder/project-store.ts
-var import_node_fs46 = require("fs");
+var import_node_fs47 = require("fs");
 var import_node_child_process14 = require("child_process");
-var import_node_path54 = require("path");
+var import_node_path55 = require("path");
 init_protocol();
 var PROJECTS_DIR = "projects";
 var META_FILE = ".clawd-project.json";
@@ -56673,19 +56700,19 @@ var ProjectStore = class {
   root;
   /** projects/<name>/.clawd-project.json 路径 */
   metaPath(name) {
-    return (0, import_node_path54.join)(this.projectsRoot(), name, META_FILE);
+    return (0, import_node_path55.join)(this.projectsRoot(), name, META_FILE);
   }
   /** projects/<name>/ 目录路径（cwd 用） */
   projectDir(name) {
-    return (0, import_node_path54.join)(this.projectsRoot(), name);
+    return (0, import_node_path55.join)(this.projectsRoot(), name);
   }
   projectsRoot() {
-    return (0, import_node_path54.join)(this.root, PROJECTS_DIR);
+    return (0, import_node_path55.join)(this.root, PROJECTS_DIR);
   }
   async list() {
     let entries;
     try {
-      entries = await import_node_fs46.promises.readdir(this.projectsRoot());
+      entries = await import_node_fs47.promises.readdir(this.projectsRoot());
     } catch (err) {
       if (err.code === "ENOENT") return [];
       throw err;
@@ -56693,7 +56720,7 @@ var ProjectStore = class {
     const out = [];
     for (const name of entries) {
       try {
-        const raw = await import_node_fs46.promises.readFile(this.metaPath(name), "utf8");
+        const raw = await import_node_fs47.promises.readFile(this.metaPath(name), "utf8");
         const json = JSON.parse(raw);
         let migrated = false;
         if (typeof json.devCommand !== "string" || json.devCommand.length === 0) {
@@ -56704,7 +56731,7 @@ var ProjectStore = class {
         if (parsed.success) {
           out.push(parsed.data);
           if (migrated) {
-            void import_node_fs46.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
+            void import_node_fs47.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
             });
           }
         }
@@ -56748,8 +56775,8 @@ var ProjectStore = class {
       throw new Error(`invalid name "${name}": ${validated.error.message}`);
     }
     const dir = this.projectDir(name);
-    await import_node_fs46.promises.mkdir(dir, { recursive: true });
-    await import_node_fs46.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
+    await import_node_fs47.promises.mkdir(dir, { recursive: true });
+    await import_node_fs47.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
     return meta;
   }
   /**
@@ -56792,7 +56819,7 @@ var ProjectStore = class {
   }
   async delete(name) {
     const dir = this.projectDir(name);
-    await import_node_fs46.promises.rm(dir, { recursive: true, force: true });
+    await import_node_fs47.promises.rm(dir, { recursive: true, force: true });
   }
   async updatePort(name, newPort) {
     if (newPort < PROJECT_PORT_MIN || newPort > PROJECT_PORT_MAX) {
@@ -56808,7 +56835,7 @@ var ProjectStore = class {
       throw new Error(`port ${newPort} already used / \u5DF2\u88AB project "${conflict.name}" \u5360\u7528`);
     }
     const updated = { ...target, port: newPort };
-    await import_node_fs46.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
+    await import_node_fs47.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
     return updated;
   }
   /**
@@ -56825,7 +56852,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`invalid prodUrl "${url}": ${validated.error.message}`);
     }
-    await import_node_fs46.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs47.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
   /**
@@ -56846,7 +56873,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`invalid publishJob: ${validated.error.message}`);
     }
-    await import_node_fs46.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs47.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
   /** 清掉 .clawd-project.json.publishJob 字段。其他字段保持原样。 */
@@ -56861,7 +56888,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`failed to clear publishJob: ${validated.error.message}`);
     }
-    await import_node_fs46.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs47.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
 };
@@ -56982,8 +57009,8 @@ var PublishJobRegistry = class {
 
 // src/app-builder/publish-job-runner.ts
 var import_node_child_process16 = require("child_process");
-var import_node_fs47 = require("fs");
-var import_node_path55 = require("path");
+var import_node_fs48 = require("fs");
+var import_node_path56 = require("path");
 
 // src/app-builder/publish-stage-parser.ts
 var STAGE_RE = /^\s*::stage::(build|deploy|verify)\s*$/;
@@ -57015,10 +57042,10 @@ async function startPublishJob(deps, args) {
     return { jobId: registry2.get(args.name).jobId, status: "already-publishing" };
   }
   const projDir = projectDir(args.name);
-  const logPath = (0, import_node_path55.join)(projDir, ".publish.log");
+  const logPath = (0, import_node_path56.join)(projDir, ".publish.log");
   let logStream = null;
   try {
-    logStream = (0, import_node_fs47.createWriteStream)(logPath, { flags: "w" });
+    logStream = (0, import_node_fs48.createWriteStream)(logPath, { flags: "w" });
   } catch {
     logStream = null;
   }
@@ -57275,8 +57302,8 @@ async function recoverInterruptedJobs(deps) {
 
 // src/handlers/app-builder.ts
 init_protocol();
-var import_node_path56 = require("path");
-var import_node_fs48 = require("fs");
+var import_node_path57 = require("path");
+var import_node_fs49 = require("fs");
 var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
 var DEV_SERVER_READY_TIMEOUT_MS = 3e4;
 async function recoverInterruptedPublishJobs(store, logger) {
@@ -57357,7 +57384,7 @@ function buildAppBuilderHandlers(deps) {
   async function listAllUsersProjects() {
     if (!deps.usersRoot || !deps.getStore) return [];
     const getStore = deps.getStore;
-    const userIds = await import_node_fs48.promises.readdir(deps.usersRoot).catch(() => []);
+    const userIds = await import_node_fs49.promises.readdir(deps.usersRoot).catch(() => []);
     const perUser = await Promise.all(
       userIds.map((uid) => getStore(uid).list().catch(() => []))
     );
@@ -57433,8 +57460,8 @@ function buildAppBuilderHandlers(deps) {
     const project = await userStore.create(f.name, reservedPorts);
     try {
       const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(session.ownerPersonaId ?? "") : deps.personaRoot;
-      const templateSrcDir = (0, import_node_path56.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE);
-      const scaffoldScript = (0, import_node_path56.join)(deps.deployKitRoot, "scripts", "new-extension.sh");
+      const templateSrcDir = (0, import_node_path57.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE);
+      const scaffoldScript = (0, import_node_path57.join)(deps.deployKitRoot, "scripts", "new-extension.sh");
       const scaffoldResult = await userStore.scaffold(project.name, templateSrcDir, scaffoldScript);
       deps.logger?.info("app-builder.scaffold.done", {
         name: project.name,
@@ -57655,7 +57682,7 @@ function buildAppBuilderHandlers(deps) {
       await userStore.clearPublishJob(args.name);
     }
     const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(boundSession.ownerPersonaId ?? "") : deps.personaRoot;
-    const scriptPath = (0, import_node_path56.join)(deps.deployKitRoot, "scripts", "publish.sh");
+    const scriptPath = (0, import_node_path57.join)(deps.deployKitRoot, "scripts", "publish.sh");
     deps.logger?.info("app-builder.publish.start", {
       name: args.name,
       sessionId: boundSession.sessionId,
@@ -57824,7 +57851,7 @@ function buildVisitorHandlers(deps) {
 
 // src/extension/registry.ts
 var import_promises9 = __toESM(require("fs/promises"), 1);
-var import_node_path57 = __toESM(require("path"), 1);
+var import_node_path58 = __toESM(require("path"), 1);
 init_src();
 async function loadAll(root) {
   let entries;
@@ -57838,13 +57865,13 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path57.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path58.default.join(root, ent.name), ent.name));
   }
   records.sort((a, b2) => a.extId < b2.extId ? -1 : a.extId > b2.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path57.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path58.default.join(dir, "manifest.json");
   let raw;
   try {
     raw = await import_promises9.default.readFile(manifestPath, "utf8");
@@ -57889,7 +57916,7 @@ async function loadOne(dir, dirName) {
 
 // src/extension/uninstall.ts
 var import_promises10 = __toESM(require("fs/promises"), 1);
-var import_node_path58 = __toESM(require("path"), 1);
+var import_node_path59 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -57898,7 +57925,7 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path58.default.join(deps.root, deps.extId);
+  const dir = import_node_path59.default.join(deps.root, deps.extId);
   try {
     await import_promises10.default.access(dir);
   } catch {
@@ -58482,7 +58509,7 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 
 // src/extension/runtime.ts
 var import_node_child_process18 = require("child_process");
-var import_node_path59 = __toESM(require("path"), 1);
+var import_node_path60 = __toESM(require("path"), 1);
 var import_promises11 = require("timers/promises");
 init_src();
 
@@ -58584,7 +58611,7 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path59.default.join(this.root, extId);
+    const dir = import_node_path60.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
@@ -58696,7 +58723,7 @@ ${handle.stderrTail}`
 
 // src/extension/published-channels.ts
 var import_promises12 = __toESM(require("fs/promises"), 1);
-var import_node_path60 = __toESM(require("path"), 1);
+var import_node_path61 = __toESM(require("path"), 1);
 init_src();
 init_zod();
 var PublishedChannelsError = class extends Error {
@@ -58796,7 +58823,7 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises12.default.mkdir(import_node_path60.default.dirname(this.filePath), { recursive: true });
+    await import_promises12.default.mkdir(import_node_path61.default.dirname(this.filePath), { recursive: true });
     await import_promises12.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
     await import_promises12.default.rename(tmp, this.filePath);
   }
@@ -58804,7 +58831,7 @@ var PublishedChannelStore = class {
 
 // src/extension/bundle-cache.ts
 var import_promises13 = __toESM(require("fs/promises"), 1);
-var import_node_path61 = __toESM(require("path"), 1);
+var import_node_path62 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -58813,14 +58840,14 @@ var BundleCache = class {
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
     await import_promises13.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path61.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path62.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
     await import_promises13.default.writeFile(tmp, buffer, { mode: 384 });
     await import_promises13.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path61.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path62.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
       return await import_promises13.default.readFile(file);
     } catch (e) {
@@ -58830,7 +58857,7 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path61.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path62.default.join(this.rootDir, `${snapshotHash}.zip`);
     await import_promises13.default.rm(file, { force: true });
   }
 };
@@ -58855,16 +58882,16 @@ async function startDaemon(config) {
   });
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path62.default.join(config.dataDir, "clawd.log"),
+    file: import_node_path63.default.join(config.dataDir, "clawd.log"),
     logClient
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const screenIdleProbeLogger = createFileOnlyLogger({
-    file: import_node_path62.default.join(config.dataDir, "screen-idle-probe.log"),
+    file: import_node_path63.default.join(config.dataDir, "screen-idle-probe.log"),
     level: "debug"
   });
   logger.info("screen-idle probe logger enabled", {
-    file: import_node_path62.default.join(config.dataDir, "screen-idle-probe.log")
+    file: import_node_path63.default.join(config.dataDir, "screen-idle-probe.log")
   });
   const stateMgr = new StateFileManager({ dataDir: config.dataDir });
   const pre = stateMgr.preflight();
@@ -59002,8 +59029,8 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path62.default.join(config.dataDir, "personas"));
-  const usersRoot = import_node_path62.default.join(config.dataDir, "users");
+  const personaStore = new PersonaStore(import_node_path63.default.join(config.dataDir, "personas"));
+  const usersRoot = import_node_path63.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -59023,17 +59050,17 @@ async function startDaemon(config) {
   migrateCodexSandbox({ store: personaStore, logger });
   const groupFileStore = new GroupFileStore({ dataDir: config.dataDir, logger });
   const personaDispatchManager = new PersonaDispatchManager({ genId: () => v4_default() });
-  const here = typeof __dirname === "string" ? __dirname : import_node_path62.default.dirname((0, import_node_url4.fileURLToPath)(import_meta6.url));
+  const here = typeof __dirname === "string" ? __dirname : import_node_path63.default.dirname((0, import_node_url4.fileURLToPath)(import_meta6.url));
   const dispatchServerCandidates = [
-    import_node_path62.default.join(here, "dispatch", "mcp-server.cjs"),
+    import_node_path63.default.join(here, "dispatch", "mcp-server.cjs"),
     // 生产 dist/index → dist/dispatch/mcp-server.cjs
-    import_node_path62.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
+    import_node_path63.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
-  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs49.default.existsSync(p2));
+  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs50.default.existsSync(p2));
   let dispatchMcpConfigPath2;
   if (dispatchServerScriptPath) {
-    const dispatchLogPath = import_node_path62.default.join(config.dataDir, "dispatch-mcp-server.log");
+    const dispatchLogPath = import_node_path63.default.join(config.dataDir, "dispatch-mcp-server.log");
     dispatchMcpConfigPath2 = writeDispatchMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: dispatchServerScriptPath,
@@ -59050,15 +59077,15 @@ async function startDaemon(config) {
     });
   }
   const ticketServerCandidates = [
-    import_node_path62.default.join(here, "ticket", "mcp-server.cjs"),
-    import_node_path62.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
+    import_node_path63.default.join(here, "ticket", "mcp-server.cjs"),
+    import_node_path63.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
-  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs49.default.existsSync(p2));
+  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs50.default.existsSync(p2));
   const ticketOwnerUnionId = feishuIdentity?.identity.unionId ?? "";
   const ticketOwnerName = feishuIdentity?.identity.displayName ?? "";
   let ticketMcpConfigPath2;
   if (ticketServerScriptPath && ticketOwnerUnionId) {
-    const ticketLogPath = import_node_path62.default.join(config.dataDir, "ticket-mcp-server.log");
+    const ticketLogPath = import_node_path63.default.join(config.dataDir, "ticket-mcp-server.log");
     ticketMcpConfigPath2 = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
@@ -59079,13 +59106,13 @@ async function startDaemon(config) {
     });
   }
   const shiftServerCandidates = [
-    import_node_path62.default.join(here, "shift", "mcp-server.cjs"),
-    import_node_path62.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
+    import_node_path63.default.join(here, "shift", "mcp-server.cjs"),
+    import_node_path63.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
-  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs49.default.existsSync(p2));
+  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs50.default.existsSync(p2));
   let shiftMcpConfigPath2;
   if (shiftServerScriptPath) {
-    const shiftLogPath = import_node_path62.default.join(config.dataDir, "shift-mcp-server.log");
+    const shiftLogPath = import_node_path63.default.join(config.dataDir, "shift-mcp-server.log");
     shiftMcpConfigPath2 = await writeShiftMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: shiftServerScriptPath,
@@ -59103,13 +59130,13 @@ async function startDaemon(config) {
     );
   }
   const inboxServerCandidates = [
-    import_node_path62.default.join(here, "inbox", "mcp-server.cjs"),
-    import_node_path62.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
+    import_node_path63.default.join(here, "inbox", "mcp-server.cjs"),
+    import_node_path63.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
   ];
-  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs49.default.existsSync(p2));
+  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs50.default.existsSync(p2));
   let inboxMcpConfigPath2;
   if (inboxServerScriptPath) {
-    const inboxLogPath = import_node_path62.default.join(config.dataDir, "inbox-mcp-server.log");
+    const inboxLogPath = import_node_path63.default.join(config.dataDir, "inbox-mcp-server.log");
     inboxMcpConfigPath2 = await writeInboxMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: inboxServerScriptPath,
@@ -59127,7 +59154,7 @@ async function startDaemon(config) {
     );
   }
   const shiftStore = createShiftStore({
-    filePath: import_node_path62.default.join(config.dataDir, "shift.json"),
+    filePath: import_node_path63.default.join(config.dataDir, "shift.json"),
     ownerIdProvider: () => ownerPrincipalId,
     now: () => Date.now()
   });
@@ -59149,7 +59176,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path62.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path63.default.join(config.dataDir, "personas"),
     usersRoot,
     personaStore,
     ownerDisplayName,
@@ -59192,10 +59219,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path62.default.isAbsolute(input.relPath) ? input.relPath : import_node_path62.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path63.default.isAbsolute(input.relPath) ? input.relPath : import_node_path63.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs49.default.statSync(absPath).size;
+          size = import_node_fs50.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -59394,11 +59421,11 @@ async function startDaemon(config) {
       // 'persona/<pid>/owner'，default 走 'default'。
       getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
       // guest path guard：candidate 必须在 personaRoot 子树或调用者自己的 user-dir 下
-      personaRoot: import_node_path62.default.join(config.dataDir, "personas"),
+      personaRoot: import_node_path63.default.join(config.dataDir, "personas"),
       usersRoot
     },
     // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-    personaRoot: import_node_path62.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path63.default.join(config.dataDir, "personas"),
     // v2 多人 persona 隔离：handler 派生 guest user-dir 放行
     usersRoot,
     // capability:list / delete handler 依赖
@@ -59420,7 +59447,7 @@ async function startDaemon(config) {
     contactStore,
     // <dataDir>/sshd 绝对路径 —— contact-ssh handlers 用它拼 authorized_keys / keys/ 子路径
     // Task 10 会加 SshdManager 起 sshd；handlers wire 提前挂 sshdDir 让 typecheck 过
-    sshdDir: import_node_path62.default.join(config.dataDir, "sshd"),
+    sshdDir: import_node_path63.default.join(config.dataDir, "sshd"),
     contactSshLog: sshLog,
     // inbox:sendDm 用：sessionId → session 出身（复用 attachment 同款 findOwnedSessionScope）
     getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
@@ -59511,11 +59538,11 @@ async function startDaemon(config) {
     // 发布上线脚手架化 (spec 2026-06-03 §5.2):
     // appBuilderPersonaRoot 用于拼 publish.sh 绝对路径（persona-app-builder 安装在
     // dataDir/personas/persona-app-builder 之下，extension-kit/scripts/publish.sh 是相对路径）。
-    appBuilderPersonaRoot: import_node_path62.default.join(config.dataDir, "personas", "persona-app-builder"),
+    appBuilderPersonaRoot: import_node_path63.default.join(config.dataDir, "personas", "persona-app-builder"),
     // 共享 deploy-kit 根：scaffold/publish 脚本骨架 + 阿里云凭证单一真源。
-    deployKitRoot: import_node_path62.default.join(config.dataDir, "deploy-kit"),
+    deployKitRoot: import_node_path63.default.join(config.dataDir, "deploy-kit"),
     // scaffold/publish 按当前 session 的 persona 解析其安装根，让每个 persona 用自己的模板/注入配置。
-    resolvePersonaRoot: (personaId) => import_node_path62.default.join(config.dataDir, "personas", personaId),
+    resolvePersonaRoot: (personaId) => import_node_path63.default.join(config.dataDir, "personas", personaId),
     // 发布上线脚手架化 (spec 2026-06-03 §5.2.2):
     // 复用 SessionManagerDeps.broadcastFrame 同款 dispatch 逻辑 —— runner 调 manager.send
     // 取回 broadcast 帧后逐帧 push 到 transport，跟 manager 自身的 deps 一致。
@@ -59558,7 +59585,7 @@ async function startDaemon(config) {
       }
       let sourceJsonlPath = "(no transcript yet \u2014 operate from the task description alone)";
       if (sourceFile && sourceFile.toolSessionId) {
-        sourceJsonlPath = import_node_path62.default.join(
+        sourceJsonlPath = import_node_path63.default.join(
           import_node_os21.default.homedir(),
           ".claude",
           "projects",
@@ -59888,8 +59915,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path62.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path62.default.join(config.dataDir, "frpc.log")}`
+        `Frpc config: ${import_node_path63.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path63.default.join(config.dataDir, "frpc.log")}`
       ];
       const width = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width + 4);
@@ -59902,8 +59929,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path62.default.join(config.dataDir, "connect.txt");
-        import_node_fs49.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path63.default.join(config.dataDir, "connect.txt");
+        import_node_fs50.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -59937,7 +59964,7 @@ ${bar}
   });
   try {
     await sshdMgr.start();
-    rebuildAuthorizedKeys(contactStore, import_node_path62.default.join(config.dataDir, "sshd"));
+    rebuildAuthorizedKeys(contactStore, import_node_path63.default.join(config.dataDir, "sshd"));
     logger.info("sshd: contact-ssh sandbox ready", { port: config.sshdPort });
   } catch (err) {
     logger.warn("sshd start failed; contact SSH grant will not work until fixed", {
@@ -60005,9 +60032,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path62.default.join(dataDir, "persons");
+  const dir = import_node_path63.default.join(dataDir, "persons");
   try {
-    import_node_fs49.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs50.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }