@clawos-dev/clawd 0.2.207 → 0.2.209-beta.415.57f6599

package/dist/cli.cjs

@@ -742,8 +742,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path78, errorMaps, issueData } = params;
-      const fullPath = [...path78, ...issueData.path || []];
+      const { data, path: path77, errorMaps, issueData } = params;
+      const fullPath = [...path77, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -1054,11 +1054,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path78, key) {
+      constructor(parent, value, path77, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path78;
+        this._path = path77;
         this._key = key;
       }
       get path() {
@@ -6449,8 +6449,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path78 = req.path;
-        _req.url = typeof path78 === "string" ? path78 : req.url ? req.url.path || req.url : void 0;
+        const path77 = req.path;
+        _req.url = typeof path77 === "string" ? path77 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -6615,14 +6615,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path78) {
+    function parsePath(path77) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path78.length; i++) {
-        const char = path78[i];
+      for (let i = 0; i < path77.length; i++) {
+        const char = path77[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -6753,10 +6753,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path78 of paths) {
-        const parts = parsePath(path78);
+      for (const path77 of paths) {
+        const parts = parsePath(path77);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path78, remove);
+          redactWildcardPath(obj, parts, censor, path77, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -6841,8 +6841,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path78) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path78];
+            const wrappedCensor = typeof censor === "function" ? (value, path77) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path77];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -6877,8 +6877,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path78 of pathsToClone) {
-        const parts = parsePath(path78);
+      for (const path77 of pathsToClone) {
+        const parts = parsePath(path77);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -6930,24 +6930,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path78) {
-      if (typeof path78 !== "string") {
+    function validatePath(path77) {
+      if (typeof path77 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path78 === "") {
+      if (path77 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path78.includes("..")) {
-        throw new Error(`Invalid redaction path (${path78})`);
+      if (path77.includes("..")) {
+        throw new Error(`Invalid redaction path (${path77})`);
       }
-      if (path78.includes(",")) {
-        throw new Error(`Invalid redaction path (${path78})`);
+      if (path77.includes(",")) {
+        throw new Error(`Invalid redaction path (${path77})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path78.length; i++) {
-        const char = path78[i];
+      for (let i = 0; i < path77.length; i++) {
+        const char = path77[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -6961,20 +6961,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path78})`);
+            throw new Error(`Invalid redaction path (${path77})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path78})`);
+        throw new Error(`Invalid redaction path (${path77})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path78 of paths) {
-        validatePath(path78);
+      for (const path77 of paths) {
+        validatePath(path77);
       }
     }
     function slowRedact(options = {}) {
@@ -7142,8 +7142,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path78) => {
-            return censor(value, [k2, ...path78]);
+          const wrappedCensor = typeof censor === "function" ? (value, path77) => {
+            return censor(value, [k2, ...path77]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -7361,10 +7361,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs71 = require("fs");
+    var fs70 = require("fs");
     var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
-    var path78 = require("path");
+    var path77 = require("path");
     var sleep2 = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -7418,20 +7418,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs71.mkdirSync(path78.dirname(file), { recursive: true });
-          const fd = fs71.openSync(file, flags, mode);
+          if (sonic.mkdir) fs70.mkdirSync(path77.dirname(file), { recursive: true });
+          const fd = fs70.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs71.mkdir(path78.dirname(file), { recursive: true }, (err) => {
+        fs70.mkdir(path77.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs71.open(file, flags, mode, fileOpened);
+          fs70.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs71.open(file, flags, mode, fileOpened);
+        fs70.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -7472,8 +7472,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs71.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs71.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs70.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs70.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -7482,15 +7482,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs71.writeSync(this.fd, this._writingBuf);
+            return fs70.writeSync(this.fd, this._writingBuf);
           }
-          return fs71.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs70.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs71.write(this.fd, this._writingBuf, this.release);
+            return fs70.write(this.fd, this._writingBuf, this.release);
           }
-          return fs71.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs70.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -7547,7 +7547,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs71.fsyncSync(this.fd);
+          fs70.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -7661,7 +7661,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs71.fsync(this.fd, (err) => {
+            fs70.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -7763,7 +7763,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs71.close(fd, (err) => {
+          fs70.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -7812,7 +7812,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs71.writeSync(this.fd, buf) : fs71.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs70.writeSync(this.fd, buf) : fs70.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -7828,7 +7828,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs71.fsyncSync(this.fd);
+        fs70.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -7849,7 +7849,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs71.writeSync(this.fd, buf);
+          const n = fs70.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -7877,13 +7877,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs71.writeSync(this.fd, this._writingBuf) : fs71.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs70.writeSync(this.fd, this._writingBuf) : fs70.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs71.write(this.fd, this._writingBuf, release);
+        fs70.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -7892,7 +7892,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs71.writeSync(this.fd, this._writingBuf);
+          const written = fs70.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -7901,7 +7901,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs71.write(this.fd, this._writingBuf, release);
+        fs70.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -7917,12 +7917,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs71.fsync(sonic.fd, closeWrapped);
+        fs70.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs71.close(sonic.fd, done);
+          fs70.close(sonic.fd, done);
         } else {
           done();
         }
@@ -11057,11 +11057,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path78, added, removed, oldPosInc, options) {
-        var last = path78.lastComponent;
+      addToPath: function addToPath(path77, added, removed, oldPosInc, options) {
+        var last = path77.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path78.oldPos + oldPosInc,
+            oldPos: path77.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -11071,7 +11071,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path78.oldPos + oldPosInc,
+            oldPos: path77.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -11312,10 +11312,10 @@ function cwdToHashDir(cwd) {
   return cwd.replace(/[^a-zA-Z0-9]/g, "-");
 }
 function newestSubagentMtimeMs(projectsRoot, cwd, toolSessionId) {
-  const dir = import_node_path5.default.join(projectsRoot, cwdToHashDir(cwd), toolSessionId, "subagents");
+  const dir = import_node_path4.default.join(projectsRoot, cwdToHashDir(cwd), toolSessionId, "subagents");
   let entries;
   try {
-    entries = import_node_fs5.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs4.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return null;
   }
@@ -11324,7 +11324,7 @@ function newestSubagentMtimeMs(projectsRoot, cwd, toolSessionId) {
     if (!e.isFile()) continue;
     if (!e.name.startsWith("agent-") || !e.name.endsWith(".jsonl")) continue;
     try {
-      const m2 = import_node_fs5.default.statSync(import_node_path5.default.join(dir, e.name)).mtimeMs;
+      const m2 = import_node_fs4.default.statSync(import_node_path4.default.join(dir, e.name)).mtimeMs;
       if (newest === null || m2 > newest) newest = m2;
     } catch {
     }
@@ -11337,7 +11337,7 @@ function hashDirToCwd(hash) {
 }
 function safeStatMtime(p2) {
   try {
-    return import_node_fs5.default.statSync(p2).mtimeMs;
+    return import_node_fs4.default.statSync(p2).mtimeMs;
   } catch {
     return 0;
   }
@@ -11345,7 +11345,7 @@ function safeStatMtime(p2) {
 function readJsonlLines(file) {
   let raw;
   try {
-    raw = import_node_fs5.default.readFileSync(file, "utf8");
+    raw = import_node_fs4.default.readFileSync(file, "utf8");
   } catch (err) {
     if (err.code === "ENOENT") return [];
     throw err;
@@ -11537,10 +11537,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec3 = m2;
-      const path78 = typeof rec3.path === "string" ? rec3.path : null;
+      const path77 = typeof rec3.path === "string" ? rec3.path : null;
       const content = typeof rec3.content === "string" ? rec3.content : null;
-      if (!path78 || content == null) return null;
-      const entry = { path: path78, content };
+      if (!path77 || content == null) return null;
+      const entry = { path: path77, content };
       if (typeof rec3.mtimeMs === "number") entry.mtimeMs = rec3.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -11576,8 +11576,8 @@ function attachmentDeferredToolsText(a) {
 function readBackupContent(fileHistoryRoot, toolSessionId, backupFileName) {
   if (backupFileName === null) return null;
   try {
-    return import_node_fs5.default.readFileSync(
-      import_node_path5.default.join(fileHistoryRoot, toolSessionId, backupFileName),
+    return import_node_fs4.default.readFileSync(
+      import_node_path4.default.join(fileHistoryRoot, toolSessionId, backupFileName),
       "utf8"
     );
   } catch {
@@ -11586,19 +11586,19 @@ function readBackupContent(fileHistoryRoot, toolSessionId, backupFileName) {
 }
 function readCurrentContent(filePath) {
   try {
-    return import_node_fs5.default.readFileSync(filePath, "utf8");
+    return import_node_fs4.default.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code === "ENOENT") return null;
     return null;
   }
 }
-var import_node_fs5, import_node_os3, import_node_path5, TASK_NOTIFICATION_RE, TASK_ID_RE, TOOL_USE_ID_RE, SLASH_COMMAND_RE, LOCAL_COMMAND_RE, SYSTEM_REMINDER_RE, OPENSPEC_BLOCK_RE, SKILL_HINT_RE, ATTACHMENT_SILENT_SUBTYPES, ClaudeHistoryReader;
+var import_node_fs4, import_node_os3, import_node_path4, TASK_NOTIFICATION_RE, TASK_ID_RE, TOOL_USE_ID_RE, SLASH_COMMAND_RE, LOCAL_COMMAND_RE, SYSTEM_REMINDER_RE, OPENSPEC_BLOCK_RE, SKILL_HINT_RE, ATTACHMENT_SILENT_SUBTYPES, ClaudeHistoryReader;
 var init_claude_history = __esm({
   "src/tools/claude-history.ts"() {
     "use strict";
-    import_node_fs5 = __toESM(require("fs"), 1);
+    import_node_fs4 = __toESM(require("fs"), 1);
     import_node_os3 = __toESM(require("os"), 1);
-    import_node_path5 = __toESM(require("path"), 1);
+    import_node_path4 = __toESM(require("path"), 1);
     init_lib();
     init_tool_result_extra();
     TASK_NOTIFICATION_RE = /<task-notification\b[\s\S]*?<\/task-notification>/i;
@@ -11622,14 +11622,14 @@ var init_claude_history = __esm({
       // 每次 user 提交前 trackEdit 拷一份，作为 rewind 回退目标
       fileHistoryRoot;
       constructor(opts = {}) {
-        const base = opts.baseDir ?? import_node_path5.default.join(import_node_os3.default.homedir(), ".claude");
-        this.projectsRoot = import_node_path5.default.join(base, "projects");
-        this.fileHistoryRoot = import_node_path5.default.join(base, "file-history");
+        const base = opts.baseDir ?? import_node_path4.default.join(import_node_os3.default.homedir(), ".claude");
+        this.projectsRoot = import_node_path4.default.join(base, "projects");
+        this.fileHistoryRoot = import_node_path4.default.join(base, "file-history");
       }
       async listProjects() {
         let entries;
         try {
-          entries = import_node_fs5.default.readdirSync(this.projectsRoot, { withFileTypes: true });
+          entries = import_node_fs4.default.readdirSync(this.projectsRoot, { withFileTypes: true });
         } catch (err) {
           if (err.code === "ENOENT") return [];
           throw err;
@@ -11637,9 +11637,9 @@ var init_claude_history = __esm({
         const out = [];
         for (const ent of entries) {
           if (!ent.isDirectory()) continue;
-          const dir = import_node_path5.default.join(this.projectsRoot, ent.name);
-          const files = import_node_fs5.default.readdirSync(dir).filter((f) => f.endsWith(".jsonl"));
-          const updatedAtMs = files.reduce((m2, f) => Math.max(m2, safeStatMtime(import_node_path5.default.join(dir, f))), 0);
+          const dir = import_node_path4.default.join(this.projectsRoot, ent.name);
+          const files = import_node_fs4.default.readdirSync(dir).filter((f) => f.endsWith(".jsonl"));
+          const updatedAtMs = files.reduce((m2, f) => Math.max(m2, safeStatMtime(import_node_path4.default.join(dir, f))), 0);
           out.push({
             projectPath: hashDirToCwd(ent.name),
             hashDir: ent.name,
@@ -11651,17 +11651,17 @@ var init_claude_history = __esm({
         return out;
       }
       async listSessions(args) {
-        const dir = import_node_path5.default.join(this.projectsRoot, cwdToHashDir(args.projectPath));
+        const dir = import_node_path4.default.join(this.projectsRoot, cwdToHashDir(args.projectPath));
         let files;
         try {
-          files = import_node_fs5.default.readdirSync(dir).filter((f) => f.endsWith(".jsonl"));
+          files = import_node_fs4.default.readdirSync(dir).filter((f) => f.endsWith(".jsonl"));
         } catch (err) {
           if (err.code === "ENOENT") return [];
           throw err;
         }
         const out = [];
         for (const f of files) {
-          const full = import_node_path5.default.join(dir, f);
+          const full = import_node_path4.default.join(dir, f);
           const toolSessionId = f.slice(0, -".jsonl".length);
           const lines = readJsonlLines(full);
           let summary = "";
@@ -11716,7 +11716,7 @@ var init_claude_history = __esm({
         return out;
       }
       async read(args) {
-        const file = import_node_path5.default.join(
+        const file = import_node_path4.default.join(
           this.projectsRoot,
           cwdToHashDir(args.cwd),
           `${args.toolSessionId}.jsonl`
@@ -11753,7 +11753,7 @@ var init_claude_history = __esm({
       // 独立目录路径：<projectsRoot>/<cwdHash>/<toolSessionId>/subagents/*.jsonl
       // 返回 null 表示目录不存在（调用方回退旧实现）；返回空数组表示目录存在但无 jsonl
       listSubagentsFromDirectory(cwd, toolSessionId) {
-        const dir = import_node_path5.default.join(
+        const dir = import_node_path4.default.join(
           this.projectsRoot,
           cwdToHashDir(cwd),
           toolSessionId,
@@ -11761,7 +11761,7 @@ var init_claude_history = __esm({
         );
         let entries;
         try {
-          entries = import_node_fs5.default.readdirSync(dir, { withFileTypes: true });
+          entries = import_node_fs4.default.readdirSync(dir, { withFileTypes: true });
         } catch (err) {
           if (err.code === "ENOENT") return null;
           return null;
@@ -11771,7 +11771,7 @@ var init_claude_history = __esm({
           if (!e.isFile()) continue;
           if (!e.name.startsWith("agent-") || !e.name.endsWith(".jsonl")) continue;
           const subagentId = e.name.slice("agent-".length, -".jsonl".length);
-          const filePath = import_node_path5.default.join(dir, e.name);
+          const filePath = import_node_path4.default.join(dir, e.name);
           const lines = readJsonlLines(filePath);
           let firstText = "";
           let messageCount = 0;
@@ -11788,7 +11788,7 @@ var init_claude_history = __esm({
         return out;
       }
       listSubagentsFromMainJsonl(cwd, toolSessionId) {
-        const file = import_node_path5.default.join(
+        const file = import_node_path4.default.join(
           this.projectsRoot,
           cwdToHashDir(cwd),
           `${toolSessionId}.jsonl`
@@ -11823,7 +11823,7 @@ var init_claude_history = __esm({
       }
       // 独立文件路径：agent-<subagentId>.jsonl；文件不存在返回 null 让调用方回退旧实现
       readSubagentFromFile(cwd, toolSessionId, subagentId) {
-        const file = import_node_path5.default.join(
+        const file = import_node_path4.default.join(
           this.projectsRoot,
           cwdToHashDir(cwd),
           toolSessionId,
@@ -11832,7 +11832,7 @@ var init_claude_history = __esm({
         );
         let exists = false;
         try {
-          exists = import_node_fs5.default.statSync(file).isFile();
+          exists = import_node_fs4.default.statSync(file).isFile();
         } catch {
           return null;
         }
@@ -11851,7 +11851,7 @@ var init_claude_history = __esm({
        * "那一刻每个 tracked 文件对应的 backup 文件名"
        */
       readFileHistorySnapshots(args) {
-        const file = import_node_path5.default.join(
+        const file = import_node_path4.default.join(
           this.projectsRoot,
           cwdToHashDir(args.cwd),
           `${args.toolSessionId}.jsonl`
@@ -11896,7 +11896,7 @@ var init_claude_history = __esm({
         for (const [anchorId, target] of snapshots) {
           let hasAny = false;
           for (const [rawPath, backup] of Object.entries(target)) {
-            const absPath = import_node_path5.default.isAbsolute(rawPath) ? rawPath : import_node_path5.default.join(args.cwd, rawPath);
+            const absPath = import_node_path4.default.isAbsolute(rawPath) ? rawPath : import_node_path4.default.join(args.cwd, rawPath);
             const backupContent = readBackupContent(
               this.fileHistoryRoot,
               args.toolSessionId,
@@ -11936,7 +11936,7 @@ var init_claude_history = __esm({
         let totalInsertions = 0;
         let totalDeletions = 0;
         for (const [rawPath, backup] of Object.entries(target)) {
-          const absPath = import_node_path5.default.isAbsolute(rawPath) ? rawPath : import_node_path5.default.join(args.cwd, rawPath);
+          const absPath = import_node_path4.default.isAbsolute(rawPath) ? rawPath : import_node_path4.default.join(args.cwd, rawPath);
           const backupContent = readBackupContent(
             this.fileHistoryRoot,
             args.toolSessionId,
@@ -11983,7 +11983,7 @@ var init_claude_history = __esm({
         };
       }
       readSubagentFromMainJsonl(cwd, toolSessionId, subagentId) {
-        const file = import_node_path5.default.join(
+        const file = import_node_path4.default.join(
           this.projectsRoot,
           cwdToHashDir(cwd),
           `${toolSessionId}.jsonl`
@@ -12016,13 +12016,13 @@ var init_src = __esm({
 function probeViaWhich() {
   try {
     const out = (0, import_node_child_process2.execFileSync)("which", ["claude"], { encoding: "utf8" }).trim();
-    if (out && import_node_fs15.default.existsSync(out)) return out;
+    if (out && import_node_fs14.default.existsSync(out)) return out;
   } catch {
   }
   return null;
 }
 async function probeClaude(env = process.env) {
-  if (env.CLAUDE_BIN && import_node_fs15.default.existsSync(env.CLAUDE_BIN)) {
+  if (env.CLAUDE_BIN && import_node_fs14.default.existsSync(env.CLAUDE_BIN)) {
     return { available: true, path: env.CLAUDE_BIN };
   }
   const w2 = probeViaWhich();
@@ -12360,10 +12360,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec3 = m2;
-      const path78 = typeof rec3.path === "string" ? rec3.path : null;
+      const path77 = typeof rec3.path === "string" ? rec3.path : null;
       const content = typeof rec3.content === "string" ? rec3.content : null;
-      if (!path78 || content == null) return null;
-      const out = { path: path78, content };
+      if (!path77 || content == null) return null;
+      const out = { path: path77, content };
       if (typeof rec3.mtimeMs === "number") out.mtimeMs = rec3.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -12467,13 +12467,13 @@ function encodeClaudeStdin(text) {
   };
   return JSON.stringify(frame) + "\n";
 }
-var import_node_child_process, import_node_child_process2, import_node_fs15, ATTACHMENT_SILENT_SUBTYPES2, unknownTypeHandler, ATTACHMENT_RE, IMAGE_EXT_MIME, CLAUDE_MODELS, CLAUDE_PERMISSION_MODES, CLAUDE_CAPABILITIES, ClaudeAdapter;
+var import_node_child_process, import_node_child_process2, import_node_fs14, ATTACHMENT_SILENT_SUBTYPES2, unknownTypeHandler, ATTACHMENT_RE, IMAGE_EXT_MIME, CLAUDE_MODELS, CLAUDE_PERMISSION_MODES, CLAUDE_CAPABILITIES, ClaudeAdapter;
 var init_claude = __esm({
   "src/tools/claude.ts"() {
     "use strict";
     import_node_child_process = require("child_process");
     import_node_child_process2 = require("child_process");
-    import_node_fs15 = __toESM(require("fs"), 1);
+    import_node_fs14 = __toESM(require("fs"), 1);
     init_protocol();
     init_claude_history();
     init_tool_result_extra();
@@ -33460,8 +33460,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path78) {
-      var parts = path78.split("/");
+    exports2.resolve = function(path77) {
+      var parts = path77.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -39314,18 +39314,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path78) {
-      if (path78.slice(-1) === "/") {
-        path78 = path78.substring(0, path78.length - 1);
+    var parentFolder = function(path77) {
+      if (path77.slice(-1) === "/") {
+        path77 = path77.substring(0, path77.length - 1);
       }
-      var lastSlash = path78.lastIndexOf("/");
-      return lastSlash > 0 ? path78.substring(0, lastSlash) : "";
+      var lastSlash = path77.lastIndexOf("/");
+      return lastSlash > 0 ? path77.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path78) {
-      if (path78.slice(-1) !== "/") {
-        path78 += "/";
+    var forceTrailingSlash = function(path77) {
+      if (path77.slice(-1) !== "/") {
+        path77 += "/";
       }
-      return path78;
+      return path77;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -40326,7 +40326,7 @@ var require_lib3 = __commonJS({
 
 // src/sshd/contact-ssh-log.ts
 function createContactSshLog(dataDir) {
-  const file = import_node_path41.default.join(dataDir, "contact-ssh.log");
+  const file = import_node_path40.default.join(dataDir, "contact-ssh.log");
   function append(level, tag, message, meta) {
     const time = (/* @__PURE__ */ new Date()).toISOString();
     let line = `[${time}] [${level}] [${tag}] ${message}`;
@@ -40339,8 +40339,8 @@ function createContactSshLog(dataDir) {
     }
     line += "\n";
     try {
-      import_node_fs40.default.mkdirSync(import_node_path41.default.dirname(file), { recursive: true });
-      import_node_fs40.default.appendFileSync(file, line, { mode: 384 });
+      import_node_fs39.default.mkdirSync(import_node_path40.default.dirname(file), { recursive: true });
+      import_node_fs39.default.appendFileSync(file, line, { mode: 384 });
     } catch {
     }
   }
@@ -40350,12 +40350,12 @@ function createContactSshLog(dataDir) {
     error: (tag, message, meta) => append("ERROR", tag, message, meta)
   };
 }
-var import_node_fs40, import_node_path41, nullContactSshLog;
+var import_node_fs39, import_node_path40, nullContactSshLog;
 var init_contact_ssh_log = __esm({
   "src/sshd/contact-ssh-log.ts"() {
     "use strict";
-    import_node_fs40 = __toESM(require("fs"), 1);
-    import_node_path41 = __toESM(require("path"), 1);
+    import_node_fs39 = __toESM(require("fs"), 1);
+    import_node_path40 = __toESM(require("path"), 1);
     nullContactSshLog = {
       info: () => {
       },
@@ -40370,7 +40370,7 @@ var init_contact_ssh_log = __esm({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path65.default.dirname(opts.recordPath);
+  const dir = import_node_path64.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -40384,8 +40384,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs52.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs52.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs51.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs51.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -40410,12 +40410,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs52, import_node_path65;
+var import_node_fs51, import_node_path64;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs52 = __toESM(require("fs"), 1);
-    import_node_path65 = __toESM(require("path"), 1);
+    import_node_fs51 = __toESM(require("fs"), 1);
+    import_node_path64 = __toESM(require("path"), 1);
   }
 });
 
@@ -40458,7 +40458,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs53.mkdtempSync)(import_node_path66.default.join(import_node_os22.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs52.mkdtempSync)(import_node_path65.default.join(import_node_os22.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -40619,19 +40619,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs53.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs52.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs53, import_node_os22, import_node_path66;
+var import_node_fs52, import_node_os22, import_node_path65;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs53 = require("fs");
+    import_node_fs52 = require("fs");
     import_node_os22 = __toESM(require("os"), 1);
-    import_node_path66 = __toESM(require("path"), 1);
+    import_node_path65 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -40742,13 +40742,13 @@ async function sshRelay(argv) {
     process.stderr.write("clawd ssh-relay: missing <peer-device-id>\n" + SSH_RELAY_HELP);
     return 2;
   }
-  const dataDir = args.dataDir ?? import_node_path67.default.join(import_node_os23.default.homedir(), ".clawd");
+  const dataDir = args.dataDir ?? import_node_path66.default.join(import_node_os23.default.homedir(), ".clawd");
   const sshLog = createContactSshLog(dataDir);
   const contact = findContact(dataDir, args.peerDeviceId);
   if (!contact) {
     sshLog.error("relay.contact-not-found", "ssh-relay \u627E\u4E0D\u5230 peer contact", {
       peerDeviceId: args.peerDeviceId,
-      contactsPath: import_node_path67.default.join(dataDir, "contacts.json")
+      contactsPath: import_node_path66.default.join(dataDir, "contacts.json")
     });
     process.stderr.write(`clawd ssh-relay: contact ${args.peerDeviceId} not found in ${dataDir}/contacts.json
 `);
@@ -40869,10 +40869,10 @@ function parseSshRelayArgs(argv) {
   return out;
 }
 function findContact(dataDir, deviceId) {
-  const file = import_node_path67.default.join(dataDir, "contacts.json");
+  const file = import_node_path66.default.join(dataDir, "contacts.json");
   let raw;
   try {
-    raw = import_node_fs54.default.readFileSync(file, "utf8");
+    raw = import_node_fs53.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -40890,13 +40890,13 @@ function findContact(dataDir, deviceId) {
   }
   return null;
 }
-var import_node_fs54, import_node_os23, import_node_path67, SSH_RELAY_HELP;
+var import_node_fs53, import_node_os23, import_node_path66, SSH_RELAY_HELP;
 var init_sshd_cli_relay = __esm({
   "src/sshd/sshd-cli-relay.ts"() {
     "use strict";
-    import_node_fs54 = __toESM(require("fs"), 1);
+    import_node_fs53 = __toESM(require("fs"), 1);
     import_node_os23 = __toESM(require("os"), 1);
-    import_node_path67 = __toESM(require("path"), 1);
+    import_node_path66 = __toESM(require("path"), 1);
     init_wrapper();
     init_src();
     init_peer_forward();
@@ -41100,8 +41100,8 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path64 = __toESM(require("path"), 1);
-var import_node_fs51 = __toESM(require("fs"), 1);
+var import_node_path63 = __toESM(require("path"), 1);
+var import_node_fs50 = __toESM(require("fs"), 1);
 var import_node_os21 = __toESM(require("os"), 1);
 
 // ../node_modules/.pnpm/uuid@10.0.0/node_modules/uuid/dist/esm-node/stringify.js
@@ -41731,8 +41731,8 @@ var SessionStoreFactory = class {
 };
 
 // src/session/manager.ts
-var import_node_fs8 = __toESM(require("fs"), 1);
-var import_node_path9 = __toESM(require("path"), 1);
+var import_node_fs7 = __toESM(require("fs"), 1);
+var import_node_path8 = __toESM(require("path"), 1);
 var import_node_os5 = __toESM(require("os"), 1);
 init_protocol();
 
@@ -41820,63 +41820,11 @@ function composeGuestSandbox(base, userWorkDir, spawnCwd) {
     "~/.clawd/config.json",
     "~/.clawd/auth.json"
   ]);
+  const netv = s.sandbox.network ?? (s.sandbox.network = {});
+  netv.allowedDomains = unionArr(netv.allowedDomains, ["*.tunnel.clawos.chat"]);
   return s;
 }
 
-// src/tools/owner-credentials.ts
-var import_node_fs4 = __toESM(require("fs"), 1);
-var import_node_path4 = __toESM(require("path"), 1);
-function readOwnerCredentials(homeDir, logger) {
-  const settingsPath = import_node_path4.default.join(homeDir, ".claude", "settings.json");
-  let raw;
-  try {
-    raw = import_node_fs4.default.readFileSync(settingsPath, "utf8");
-  } catch (err) {
-    const code = err.code;
-    if (code === "ENOENT") return null;
-    logger?.warn("owner ~/.claude/settings.json read failed", { code });
-    return null;
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    logger?.warn("owner ~/.claude/settings.json malformed JSON");
-    return null;
-  }
-  if (!parsed || typeof parsed !== "object") return null;
-  const obj = parsed;
-  const bundle = {};
-  const envRaw = obj.env;
-  if (envRaw && typeof envRaw === "object" && !Array.isArray(envRaw)) {
-    const filtered = {};
-    for (const [k2, v2] of Object.entries(envRaw)) {
-      if (k2.startsWith("ANTHROPIC_") && typeof v2 === "string") filtered[k2] = v2;
-    }
-    if (Object.keys(filtered).length > 0) bundle.env = filtered;
-  }
-  const helperRaw = obj.apiKeyHelper;
-  if (typeof helperRaw === "string" && helperRaw.length > 0) {
-    if (!import_node_path4.default.isAbsolute(helperRaw)) {
-      logger?.warn(
-        "owner apiKeyHelper is not absolute; cc will resolve against guest cwd (persona dir), likely EXEC not found",
-        { basename: import_node_path4.default.basename(helperRaw) }
-      );
-    }
-    bundle.apiKeyHelper = helperRaw;
-  }
-  if (!bundle.env && !bundle.apiKeyHelper) return null;
-  return bundle;
-}
-function mergeOwnerCredentials(guestSandbox, bundle) {
-  if (!bundle) return guestSandbox;
-  return {
-    ...guestSandbox,
-    ...bundle.env ? { env: bundle.env } : {},
-    ...bundle.apiKeyHelper ? { apiKeyHelper: bundle.apiKeyHelper } : {}
-  };
-}
-
 // src/shift/wrap.ts
 function wrapShiftFirePrompt(args) {
   return [
@@ -41895,7 +41843,7 @@ function escapeAttr(v2) {
 
 // src/session/runner.ts
 var import_node_os4 = __toESM(require("os"), 1);
-var import_node_path7 = __toESM(require("path"), 1);
+var import_node_path6 = __toESM(require("path"), 1);
 
 // src/session/reducer.ts
 init_runtime();
@@ -42823,8 +42771,8 @@ init_permission_stdio();
 init_claude_history();
 
 // src/ipc-recorder.ts
-var import_node_fs6 = __toESM(require("fs"), 1);
-var import_node_path6 = __toESM(require("path"), 1);
+var import_node_fs5 = __toESM(require("fs"), 1);
+var import_node_path5 = __toESM(require("path"), 1);
 function tsForFilename(ms) {
   return new Date(ms).toISOString().replace(/[:.]/g, "-");
 }
@@ -42835,8 +42783,8 @@ function startRecorder(opts) {
     return null;
   }
   const now = opts.now ?? Date.now;
-  const dir = import_node_path6.default.join(opts.dataDir, "ipc-recordings", opts.sessionId);
-  const filePath = import_node_path6.default.join(dir, `${tsForFilename(now())}.jsonl`);
+  const dir = import_node_path5.default.join(opts.dataDir, "ipc-recordings", opts.sessionId);
+  const filePath = import_node_path5.default.join(dir, `${tsForFilename(now())}.jsonl`);
   let stream = null;
   let closedResolve;
   const closed = new Promise((resolve6) => {
@@ -42845,8 +42793,8 @@ function startRecorder(opts) {
   let exited = false;
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs6.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs6.default.createWriteStream(filePath, { flags: "a" });
+    import_node_fs5.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs5.default.createWriteStream(filePath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -43226,7 +43174,7 @@ var SessionRunner = class {
   isSubagentActive() {
     const toolSessionId = this.state.file.toolSessionId;
     if (!toolSessionId) return false;
-    const projectsRoot = import_node_path7.default.join(this.hooks.home ?? import_node_os4.default.homedir(), ".claude", "projects");
+    const projectsRoot = import_node_path6.default.join(this.hooks.home ?? import_node_os4.default.homedir(), ".claude", "projects");
     const mtime = newestSubagentMtimeMs(projectsRoot, this.state.file.cwd, toolSessionId);
     if (mtime === null) return false;
     const now = (this.hooks.now ?? Date.now)();
@@ -43314,15 +43262,15 @@ function extractEditPath(input) {
 }
 
 // src/debug/pty-probe.ts
-var import_node_fs7 = __toESM(require("fs"), 1);
-var import_node_path8 = __toESM(require("path"), 1);
+var import_node_fs6 = __toESM(require("fs"), 1);
+var import_node_path7 = __toESM(require("path"), 1);
 var PROBE_DIR = "/tmp/clawd-probe";
-var EVENTS_FILE = import_node_path8.default.join(PROBE_DIR, "events.jsonl");
+var EVENTS_FILE = import_node_path7.default.join(PROBE_DIR, "events.jsonl");
 var inited = false;
 function ensureDir() {
   if (inited) return true;
   try {
-    import_node_fs7.default.mkdirSync(PROBE_DIR, { recursive: true });
+    import_node_fs6.default.mkdirSync(PROBE_DIR, { recursive: true });
     inited = true;
     return true;
   } catch {
@@ -43333,15 +43281,15 @@ function probeEvent(event, data = {}) {
   try {
     if (!ensureDir()) return;
     const line = JSON.stringify({ ts: Date.now(), event, ...data }) + "\n";
-    import_node_fs7.default.appendFileSync(EVENTS_FILE, line);
+    import_node_fs6.default.appendFileSync(EVENTS_FILE, line);
   } catch {
   }
 }
 function probeDumpReplay(sessionId, payload) {
   try {
     if (!ensureDir()) return "";
-    const file = import_node_path8.default.join(PROBE_DIR, `replay-${sessionId}-${Date.now()}.ans`);
-    import_node_fs7.default.writeFileSync(file, payload, "utf8");
+    const file = import_node_path7.default.join(PROBE_DIR, `replay-${sessionId}-${Date.now()}.ans`);
+    import_node_fs6.default.writeFileSync(file, payload, "utf8");
     return file;
   } catch {
     return "";
@@ -43450,7 +43398,7 @@ function derivePersonaSpawnCwd(file, personaRoot) {
       `derivePersonaSpawnCwd: personaRoot missing for owner session ${file.sessionId} (ownerPersonaId=${personaId})`
     );
   }
-  return import_node_path9.default.join(personaRoot, safeFileName(personaId));
+  return import_node_path8.default.join(personaRoot, safeFileName(personaId));
 }
 function makeInitialState(file, subSessionMeta) {
   return {
@@ -43584,10 +43532,10 @@ var SessionManager = class {
   // <dataDir>/sessions/ 列子目录 (排除 'default').
   listPersonaIdsOnDisk() {
     if (!this.deps.dataDir) return [];
-    const root = this.deps.storeFactory ? import_node_path9.default.join(this.deps.dataDir, "personas") : import_node_path9.default.join(this.deps.dataDir, "sessions");
+    const root = this.deps.storeFactory ? import_node_path8.default.join(this.deps.dataDir, "personas") : import_node_path8.default.join(this.deps.dataDir, "sessions");
     let entries;
     try {
-      entries = import_node_fs8.default.readdirSync(root, { withFileTypes: true });
+      entries = import_node_fs7.default.readdirSync(root, { withFileTypes: true });
     } catch (err) {
       const code = err?.code;
       if (code === "ENOENT") return [];
@@ -43600,7 +43548,7 @@ var SessionManager = class {
   // 只在 storeFactory 注入 (新布局) 下生效, 老布局无 guest 目录.
   listGuestCapIdsForPersona(personaId) {
     if (!this.deps.dataDir || !this.deps.storeFactory) return [];
-    const root = import_node_path9.default.join(
+    const root = import_node_path8.default.join(
       this.deps.dataDir,
       "personas",
       personaId,
@@ -43610,7 +43558,7 @@ var SessionManager = class {
     );
     let entries;
     try {
-      entries = import_node_fs8.default.readdirSync(root, { withFileTypes: true });
+      entries = import_node_fs7.default.readdirSync(root, { withFileTypes: true });
     } catch (err) {
       const code = err?.code;
       if (code === "ENOENT") return [];
@@ -43729,7 +43677,7 @@ var SessionManager = class {
       callerDisplayName
     );
     if (subSessionMeta?.userWorkDir) {
-      import_node_fs8.default.mkdirSync(subSessionMeta.userWorkDir, { recursive: true });
+      import_node_fs7.default.mkdirSync(subSessionMeta.userWorkDir, { recursive: true });
     }
     if (scope.kind === "persona" && scope.mode === "guest") {
       if (!this.deps.personaRoot || !subSessionMeta?.userWorkDir) {
@@ -43738,19 +43686,10 @@ var SessionManager = class {
         );
       }
       const base = this.deps.personaStore?.readSandboxSettings(scope.personaId) ?? null;
-      const sandboxSettings = composeGuestSandbox(base, subSessionMeta.userWorkDir, file.cwd);
-      const ownerCreds = readOwnerCredentials(import_node_os5.default.homedir(), this.deps.logger);
-      const merged = mergeOwnerCredentials(sandboxSettings, ownerCreds);
-      if (ownerCreds) {
-        this.deps.logger?.info("owner credentials injected into guest spawn", {
-          sessionId: file.sessionId,
-          envKeys: ownerCreds.env ? Object.keys(ownerCreds.env) : [],
-          apiKeyHelper: ownerCreds.apiKeyHelper ? "present" : "absent"
-        });
-      }
-      subSessionMeta.extraSettings = JSON.stringify(merged);
+      const settings = composeGuestSandbox(base, subSessionMeta.userWorkDir, file.cwd);
+      subSessionMeta.extraSettings = JSON.stringify(settings);
       const home = import_node_os5.default.homedir();
-      const expand = (p2) => p2 === "~" ? home : p2.startsWith("~/") ? import_node_path9.default.join(home, p2.slice(2)) : p2;
+      const expand = (p2) => p2 === "~" ? home : p2.startsWith("~/") ? import_node_path8.default.join(home, p2.slice(2)) : p2;
       const codexCfg = this.deps.personaStore?.readCodexSandboxSettings(scope.personaId) ?? null;
       subSessionMeta.codexSandbox = {
         writableRoots: [subSessionMeta.userWorkDir, ...(codexCfg?.writableRoots ?? []).map(expand)],
@@ -43911,7 +43850,7 @@ var SessionManager = class {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, "cwd required when ownerPersonaId is absent");
     }
     try {
-      const stat = import_node_fs8.default.statSync(cwd);
+      const stat = import_node_fs7.default.statSync(cwd);
       if (!stat.isDirectory()) throw new Error("not dir");
     } catch {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `cwd not a directory: ${cwd}`);
@@ -44445,7 +44384,7 @@ var SessionManager = class {
    */
   createForScope(args) {
     try {
-      const stat = import_node_fs8.default.statSync(args.cwd);
+      const stat = import_node_fs7.default.statSync(args.cwd);
       if (!stat.isDirectory()) throw new Error("not dir");
     } catch {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `cwd not a directory: ${args.cwd}`);
@@ -44661,7 +44600,7 @@ var SessionManager = class {
       personaId: args.targetPersona,
       mode: "owner"
     };
-    const cwd = import_node_path9.default.join(this.deps.personaRoot, safeFileName(args.targetPersona));
+    const cwd = import_node_path8.default.join(this.deps.personaRoot, safeFileName(args.targetPersona));
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const file = {
       sessionId,
@@ -44726,7 +44665,7 @@ var SessionManager = class {
       personaId: args.targetPersona,
       mode: "owner"
     };
-    const cwd = import_node_path9.default.join(this.deps.personaRoot, safeFileName(args.targetPersona));
+    const cwd = import_node_path8.default.join(this.deps.personaRoot, safeFileName(args.targetPersona));
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const file = {
       sessionId,
@@ -45214,28 +45153,28 @@ var SessionManager = class {
 };
 
 // src/persona/store.ts
-var fs9 = __toESM(require("fs"), 1);
-var path12 = __toESM(require("path"), 1);
+var fs8 = __toESM(require("fs"), 1);
+var path11 = __toESM(require("path"), 1);
 init_protocol();
 var PersonaStore = class {
   constructor(root) {
     this.root = root;
-    fs9.mkdirSync(root, { recursive: true });
+    fs8.mkdirSync(root, { recursive: true });
   }
   root;
   personaDir(personaId) {
-    return path12.join(this.root, safeFileName(personaId));
+    return path11.join(this.root, safeFileName(personaId));
   }
   metaPath(personaId) {
-    return path12.join(this.personaDir(personaId), ".clawd", "persona.json");
+    return path11.join(this.personaDir(personaId), ".clawd", "persona.json");
   }
   claudeMdPath(personaId) {
-    return path12.join(this.personaDir(personaId), "CLAUDE.md");
+    return path11.join(this.personaDir(personaId), "CLAUDE.md");
   }
   // codex 原生读 cwd 的 AGENTS.md。人格双写镜像：claude 读 CLAUDE.md、codex 读 AGENTS.md，
   // 两份内容恒一致，persona 切 tool 零迁移。
   agentsMdPath(personaId) {
-    return path12.join(this.personaDir(personaId), "AGENTS.md");
+    return path11.join(this.personaDir(personaId), "AGENTS.md");
   }
   /**
    * persona 级 sandbox base 落盘路径 —— 故意放 `.clawd/` 而非 `.claude/`，让 CC 的 project
@@ -45244,11 +45183,11 @@ var PersonaStore = class {
    * spawn 前 per-guest 动态拼到各自 session 目录的那份（base + 强制底座 + 本 guest userWorkDir carve）。
    */
   sandboxSettingsPath(personaId) {
-    return path12.join(this.personaDir(personaId), ".clawd", "sandbox-settings.json");
+    return path11.join(this.personaDir(personaId), ".clawd", "sandbox-settings.json");
   }
   write(persona, personality) {
     const dir = this.personaDir(persona.personaId);
-    fs9.mkdirSync(path12.join(dir, ".clawd"), { recursive: true });
+    fs8.mkdirSync(path11.join(dir, ".clawd"), { recursive: true });
     this.atomicWrite(this.claudeMdPath(persona.personaId), personality);
     this.atomicWrite(this.agentsMdPath(persona.personaId), personality);
     this.writeSandboxSettings(persona.personaId, buildGuestSettingsV1());
@@ -45267,9 +45206,9 @@ var PersonaStore = class {
   ensureAgentsMirror(personaId) {
     const claudeMd = this.claudeMdPath(personaId);
     const agentsMd = this.agentsMdPath(personaId);
-    if (!fs9.existsSync(claudeMd)) return false;
-    if (fs9.existsSync(agentsMd)) return false;
-    this.atomicWrite(agentsMd, fs9.readFileSync(claudeMd, "utf8"));
+    if (!fs8.existsSync(claudeMd)) return false;
+    if (fs8.existsSync(agentsMd)) return false;
+    this.atomicWrite(agentsMd, fs8.readFileSync(claudeMd, "utf8"));
     return true;
   }
   /**
@@ -45293,22 +45232,22 @@ var PersonaStore = class {
     return { ...s, permissions: { ...s.permissions ?? {}, deny: [...prev, rule] } };
   }
   codexSandboxSettingsPath(personaId) {
-    return path12.join(this.personaDir(personaId), ".clawd", "codex-sandbox.json");
+    return path11.join(this.personaDir(personaId), ".clawd", "codex-sandbox.json");
   }
   /** 读 codex-sandbox.json；不存在/损坏 → null。 */
   readCodexSandboxSettings(personaId) {
     const p2 = this.codexSandboxSettingsPath(personaId);
-    if (!fs9.existsSync(p2)) return null;
+    if (!fs8.existsSync(p2)) return null;
     try {
-      return CodexSandboxSettingsSchema.parse(JSON.parse(fs9.readFileSync(p2, "utf8")));
+      return CodexSandboxSettingsSchema.parse(JSON.parse(fs8.readFileSync(p2, "utf8")));
     } catch {
       return null;
     }
   }
   /** 覆盖写 codex-sandbox.json（seed/migrate 用）。 */
   writeCodexSandboxSettings(personaId, settings) {
-    const dir = path12.join(this.personaDir(personaId), ".clawd");
-    fs9.mkdirSync(dir, { recursive: true });
+    const dir = path11.join(this.personaDir(personaId), ".clawd");
+    fs8.mkdirSync(dir, { recursive: true });
     this.atomicWrite(this.codexSandboxSettingsPath(personaId), JSON.stringify(settings, null, 2));
   }
   writeMeta(persona) {
@@ -45316,8 +45255,8 @@ var PersonaStore = class {
   }
   read(personaId) {
     const p2 = this.metaPath(personaId);
-    if (!fs9.existsSync(p2)) return null;
-    const raw = JSON.parse(fs9.readFileSync(p2, "utf8"));
+    if (!fs8.existsSync(p2)) return null;
+    const raw = JSON.parse(fs8.readFileSync(p2, "utf8"));
     if (raw && typeof raw === "object" && "tokenMap" in raw) {
       delete raw.tokenMap;
       this.atomicWrite(p2, JSON.stringify(raw, null, 2));
@@ -45325,13 +45264,13 @@ var PersonaStore = class {
     return PersonaFileSchema.parse(raw);
   }
   has(personaId) {
-    return fs9.existsSync(this.metaPath(personaId));
+    return fs8.existsSync(this.metaPath(personaId));
   }
   readPersonality(personaId) {
     const claudeMd = this.claudeMdPath(personaId);
-    if (fs9.existsSync(claudeMd)) return fs9.readFileSync(claudeMd, "utf8");
+    if (fs8.existsSync(claudeMd)) return fs8.readFileSync(claudeMd, "utf8");
     const agentsMd = this.agentsMdPath(personaId);
-    if (fs9.existsSync(agentsMd)) return fs9.readFileSync(agentsMd, "utf8");
+    if (fs8.existsSync(agentsMd)) return fs8.readFileSync(agentsMd, "utf8");
     return null;
   }
   /**
@@ -45340,23 +45279,23 @@ var PersonaStore = class {
    */
   readSandboxSettings(personaId) {
     const p2 = this.sandboxSettingsPath(personaId);
-    if (!fs9.existsSync(p2)) return null;
+    if (!fs8.existsSync(p2)) return null;
     try {
-      return JSON.parse(fs9.readFileSync(p2, "utf8"));
+      return JSON.parse(fs8.readFileSync(p2, "utf8"));
     } catch {
       return null;
     }
   }
   /** Persona 私有 skills 目录路径：<personaDir>/.claude/skills */
   skillsDir(personaId) {
-    return path12.join(this.personaDir(personaId), ".claude", "skills");
+    return path11.join(this.personaDir(personaId), ".claude", "skills");
   }
   /**
    * Claude Code 项目级 settings 路径：`<personaDir>/.claude/settings.json`。
    * 这里只读 `enabledPlugins` 字段，由 owner 通过 CC `/plugin` 之类命令维护，daemon 不写。
    */
   claudeSettingsPath(personaId) {
-    return path12.join(this.personaDir(personaId), ".claude", "settings.json");
+    return path11.join(this.personaDir(personaId), ".claude", "settings.json");
   }
   /**
    * 读取 persona 的 `.claude/settings.json` 中 `enabledPlugins` map，把 value === true
@@ -45371,10 +45310,10 @@ var PersonaStore = class {
    */
   readEnabledPlugins(personaId) {
     const p2 = this.claudeSettingsPath(personaId);
-    if (!fs9.existsSync(p2)) return [];
+    if (!fs8.existsSync(p2)) return [];
     let raw;
     try {
-      raw = JSON.parse(fs9.readFileSync(p2, "utf8"));
+      raw = JSON.parse(fs8.readFileSync(p2, "utf8"));
     } catch {
       return [];
     }
@@ -45388,22 +45327,22 @@ var PersonaStore = class {
     return out;
   }
   list() {
-    if (!fs9.existsSync(this.root)) return [];
-    return fs9.readdirSync(this.root).filter((name) => {
-      return fs9.existsSync(path12.join(this.root, name, ".clawd", "persona.json"));
+    if (!fs8.existsSync(this.root)) return [];
+    return fs8.readdirSync(this.root).filter((name) => {
+      return fs8.existsSync(path11.join(this.root, name, ".clawd", "persona.json"));
     });
   }
   remove(personaId) {
     const dir = this.personaDir(personaId);
-    if (fs9.existsSync(dir)) fs9.rmSync(dir, { recursive: true, force: true });
+    if (fs8.existsSync(dir)) fs8.rmSync(dir, { recursive: true, force: true });
   }
   personaDirPath(personaId) {
     return this.personaDir(personaId);
   }
   atomicWrite(file, content) {
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
-    fs9.writeFileSync(tmp, content, { mode: 384 });
-    fs9.renameSync(tmp, file);
+    fs8.writeFileSync(tmp, content, { mode: 384 });
+    fs8.renameSync(tmp, file);
   }
 };
 
@@ -45449,9 +45388,9 @@ var PersonaRegistry = class {
 var import_node_crypto3 = __toESM(require("crypto"), 1);
 
 // src/skills/scanner.ts
-var import_node_fs9 = __toESM(require("fs"), 1);
+var import_node_fs8 = __toESM(require("fs"), 1);
 var import_node_os6 = __toESM(require("os"), 1);
-var import_node_path10 = __toESM(require("path"), 1);
+var import_node_path9 = __toESM(require("path"), 1);
 
 // src/skills/frontmatter.ts
 var STRIP_QUOTES = /^["']|["']$/g;
@@ -45560,7 +45499,7 @@ function parseDescription(content) {
 }
 function isDirLikeSync(p2) {
   try {
-    return import_node_fs9.default.statSync(p2).isDirectory();
+    return import_node_fs8.default.statSync(p2).isDirectory();
   } catch {
     return false;
   }
@@ -45568,19 +45507,19 @@ function isDirLikeSync(p2) {
 function scanSkillDir(dir, source, seen, out, pluginName) {
   let entries;
   try {
-    entries = import_node_fs9.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs8.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
-    const entryPath = import_node_path10.default.join(dir, ent.name);
+    const entryPath = import_node_path9.default.join(dir, ent.name);
     if (!ent.isDirectory() && !(ent.isSymbolicLink() && isDirLikeSync(entryPath))) continue;
     let content;
     try {
-      content = import_node_fs9.default.readFileSync(import_node_path10.default.join(entryPath, "SKILL.md"), "utf8");
+      content = import_node_fs8.default.readFileSync(import_node_path9.default.join(entryPath, "SKILL.md"), "utf8");
     } catch {
       try {
-        content = import_node_fs9.default.readFileSync(import_node_path10.default.join(entryPath, "skill.md"), "utf8");
+        content = import_node_fs8.default.readFileSync(import_node_path9.default.join(entryPath, "skill.md"), "utf8");
       } catch {
         continue;
       }
@@ -45604,26 +45543,26 @@ function listSkillsForDir(dir, source) {
 function scanCommandDir(dir, source, seen, out, pluginName) {
   let entries;
   try {
-    entries = import_node_fs9.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs8.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
-    const entryPath = import_node_path10.default.join(dir, ent.name);
+    const entryPath = import_node_path9.default.join(dir, ent.name);
     if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync(entryPath)) {
       const ns = ent.name;
       let subEntries;
       try {
-        subEntries = import_node_fs9.default.readdirSync(entryPath, { withFileTypes: true });
+        subEntries = import_node_fs8.default.readdirSync(entryPath, { withFileTypes: true });
       } catch {
         continue;
       }
       for (const se of subEntries) {
         if (!se.name.endsWith(".md")) continue;
-        const sePath = import_node_path10.default.join(entryPath, se.name);
+        const sePath = import_node_path9.default.join(entryPath, se.name);
         let content;
         try {
-          content = import_node_fs9.default.readFileSync(sePath, "utf8");
+          content = import_node_fs8.default.readFileSync(sePath, "utf8");
         } catch {
           continue;
         }
@@ -45640,7 +45579,7 @@ function scanCommandDir(dir, source, seen, out, pluginName) {
     } else if (ent.name.endsWith(".md")) {
       let content;
       try {
-        content = import_node_fs9.default.readFileSync(entryPath, "utf8");
+        content = import_node_fs8.default.readFileSync(entryPath, "utf8");
       } catch {
         continue;
       }
@@ -45656,10 +45595,10 @@ function scanCommandDir(dir, source, seen, out, pluginName) {
   }
 }
 function readInstalledPlugins(home) {
-  const file = import_node_path10.default.join(home, ".claude", "plugins", "installed_plugins.json");
+  const file = import_node_path9.default.join(home, ".claude", "plugins", "installed_plugins.json");
   let raw;
   try {
-    raw = import_node_fs9.default.readFileSync(file, "utf8");
+    raw = import_node_fs8.default.readFileSync(file, "utf8");
   } catch {
     return [];
   }
@@ -45707,14 +45646,14 @@ var SkillsScanner = class {
       });
     }
     const fsBlock = [];
-    scanSkillDir(import_node_path10.default.join(this.home, ".claude", "skills"), "global", seen, fsBlock);
-    scanCommandDir(import_node_path10.default.join(this.home, ".claude", "commands"), "global", seen, fsBlock);
-    scanSkillDir(import_node_path10.default.join(args.cwd, ".claude", "skills"), "project", seen, fsBlock);
-    scanCommandDir(import_node_path10.default.join(args.cwd, ".claude", "commands"), "project", seen, fsBlock);
+    scanSkillDir(import_node_path9.default.join(this.home, ".claude", "skills"), "global", seen, fsBlock);
+    scanCommandDir(import_node_path9.default.join(this.home, ".claude", "commands"), "global", seen, fsBlock);
+    scanSkillDir(import_node_path9.default.join(args.cwd, ".claude", "skills"), "project", seen, fsBlock);
+    scanCommandDir(import_node_path9.default.join(args.cwd, ".claude", "commands"), "project", seen, fsBlock);
     const plugins = [...readInstalledPlugins(this.home), ...this.extraPluginRoots];
     for (const { name, root } of plugins) {
-      scanSkillDir(import_node_path10.default.join(root, "skills"), "plugin", seen, fsBlock, name);
-      scanCommandDir(import_node_path10.default.join(root, "commands"), "plugin", seen, fsBlock, name);
+      scanSkillDir(import_node_path9.default.join(root, "skills"), "plugin", seen, fsBlock, name);
+      scanCommandDir(import_node_path9.default.join(root, "commands"), "plugin", seen, fsBlock, name);
     }
     fsBlock.sort((a, b2) => a.name < b2.name ? -1 : a.name > b2.name ? 1 : 0);
     return [...builtinBlock, ...fsBlock];
@@ -45820,8 +45759,8 @@ var PersonaManager = class {
 };
 
 // src/persona/seed.ts
-var fs11 = __toESM(require("fs"), 1);
-var path14 = __toESM(require("path"), 1);
+var fs10 = __toESM(require("fs"), 1);
+var path13 = __toESM(require("path"), 1);
 var import_node_url = require("url");
 var import_meta = {};
 var DEFAULT_BYPASS_PROFILE = {
@@ -45991,24 +45930,24 @@ function bundleSiblingFromArgv(argv1, sibling) {
   if (!argv1) return null;
   let real = argv1;
   try {
-    real = fs11.realpathSync(argv1);
+    real = fs10.realpathSync(argv1);
   } catch {
   }
-  return path14.resolve(path14.dirname(real), sibling);
+  return path13.resolve(path13.dirname(real), sibling);
 }
 function findDefaultsRoot(logger) {
   const candidates = [];
   try {
-    const here = path14.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
-    candidates.push(path14.resolve(here, "defaults"));
-    candidates.push(path14.resolve(here, "persona-defaults"));
+    const here = path13.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
+    candidates.push(path13.resolve(here, "defaults"));
+    candidates.push(path13.resolve(here, "persona-defaults"));
   } catch {
   }
   const fromArgv = bundleSiblingFromArgv(process.argv[1], "persona-defaults");
   if (fromArgv) candidates.push(fromArgv);
   for (const c of candidates) {
     try {
-      if (fs11.statSync(c).isDirectory()) {
+      if (fs10.statSync(c).isDirectory()) {
         logger?.info("persona.defaults-root.resolved", { root: c });
         return c;
       }
@@ -46025,8 +45964,8 @@ function seedDefaultPersonas(args) {
       args.logger.info("persona.seed.skip", { personaId: entry.personaId, reason: "exists" });
       continue;
     }
-    const bundleDir = path14.join(args.defaultsRoot, entry.personaId);
-    if (!fs11.existsSync(bundleDir)) {
+    const bundleDir = path13.join(args.defaultsRoot, entry.personaId);
+    if (!fs10.existsSync(bundleDir)) {
       args.logger.warn("persona.seed.skip", {
         personaId: entry.personaId,
         reason: "bundle-missing",
@@ -46034,8 +45973,8 @@ function seedDefaultPersonas(args) {
       });
       continue;
     }
-    const claudeMdPath = path14.join(bundleDir, "CLAUDE.md");
-    if (!fs11.existsSync(claudeMdPath)) {
+    const claudeMdPath = path13.join(bundleDir, "CLAUDE.md");
+    if (!fs10.existsSync(claudeMdPath)) {
       args.logger.warn("persona.seed.skip", {
         personaId: entry.personaId,
         reason: "no-CLAUDE.md",
@@ -46043,7 +45982,7 @@ function seedDefaultPersonas(args) {
       });
       continue;
     }
-    const personality = fs11.readFileSync(claudeMdPath, "utf8");
+    const personality = fs10.readFileSync(claudeMdPath, "utf8");
     const now = Date.now();
     const persona = {
       personaId: entry.personaId,
@@ -46069,17 +46008,17 @@ function seedDefaultPersonas(args) {
   }
 }
 function skipNodeModulesUnder(srcRoot) {
-  return (src) => !path14.relative(srcRoot, src).split(path14.sep).includes("node_modules");
+  return (src) => !path13.relative(srcRoot, src).split(path13.sep).includes("node_modules");
 }
 function copyBundleExtras(srcDir, dstDir) {
-  for (const entry of fs11.readdirSync(srcDir, { withFileTypes: true })) {
+  for (const entry of fs10.readdirSync(srcDir, { withFileTypes: true })) {
     if (entry.name === "CLAUDE.md" || entry.name === ".clawd") continue;
-    const srcPath = path14.join(srcDir, entry.name);
-    const dstPath = path14.join(dstDir, entry.name);
+    const srcPath = path13.join(srcDir, entry.name);
+    const dstPath = path13.join(dstDir, entry.name);
     if (entry.isDirectory()) {
-      fs11.cpSync(srcPath, dstPath, { recursive: true, dereference: true, filter: skipNodeModulesUnder(srcPath) });
+      fs10.cpSync(srcPath, dstPath, { recursive: true, dereference: true, filter: skipNodeModulesUnder(srcPath) });
     } else if (entry.isFile()) {
-      fs11.copyFileSync(srcPath, dstPath);
+      fs10.copyFileSync(srcPath, dstPath);
     }
   }
 }
@@ -46087,16 +46026,16 @@ var DAEMON_MANAGED_PATHS = ["extension-kit", "CLAUDE.md", ".mcp.json"];
 function refreshDaemonManagedDirs(args) {
   const entries = args.entries ?? DEFAULT_PERSONAS;
   for (const entry of entries) {
-    const bundleDir = path14.join(args.defaultsRoot, entry.personaId);
-    if (!fs11.existsSync(bundleDir)) continue;
+    const bundleDir = path13.join(args.defaultsRoot, entry.personaId);
+    if (!fs10.existsSync(bundleDir)) continue;
     const personaDir = args.store.personaDirPath(entry.personaId);
-    if (!fs11.existsSync(personaDir)) continue;
+    if (!fs10.existsSync(personaDir)) continue;
     for (const relPath of DAEMON_MANAGED_PATHS) {
-      const srcPath = path14.join(bundleDir, relPath);
-      if (!fs11.existsSync(srcPath)) continue;
-      const dstPath = path14.join(personaDir, relPath);
+      const srcPath = path13.join(bundleDir, relPath);
+      if (!fs10.existsSync(srcPath)) continue;
+      const dstPath = path13.join(personaDir, relPath);
       try {
-        fs11.cpSync(srcPath, dstPath, { recursive: true, force: true, dereference: true, filter: skipNodeModulesUnder(srcPath) });
+        fs10.cpSync(srcPath, dstPath, { recursive: true, force: true, dereference: true, filter: skipNodeModulesUnder(srcPath) });
         args.logger.info("persona.refresh.synced", {
           personaId: entry.personaId,
           path: relPath
@@ -46156,15 +46095,15 @@ function migrateCodexSandbox(args) {
 function findDeployKitRoot(logger) {
   const candidates = [];
   try {
-    const here = path14.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
-    candidates.push(path14.resolve(here, "..", "deploy-kit"));
+    const here = path13.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
+    candidates.push(path13.resolve(here, "..", "deploy-kit"));
   } catch {
   }
   const fromArgv = bundleSiblingFromArgv(process.argv[1], "deploy-kit");
   if (fromArgv) candidates.push(fromArgv);
   for (const c of candidates) {
     try {
-      if (fs11.statSync(c).isDirectory()) {
+      if (fs10.statSync(c).isDirectory()) {
         logger?.info("persona.deploy-kit-root.resolved", { root: c });
         return c;
       }
@@ -46175,8 +46114,8 @@ function findDeployKitRoot(logger) {
   return null;
 }
 function seedDeployKit(args) {
-  const dst = path14.join(args.dataDir, "deploy-kit");
-  fs11.cpSync(args.deployKitBundleRoot, dst, {
+  const dst = path13.join(args.dataDir, "deploy-kit");
+  fs10.cpSync(args.deployKitBundleRoot, dst, {
     recursive: true,
     dereference: true,
     force: false,
@@ -46185,35 +46124,35 @@ function seedDeployKit(args) {
   args.logger.info("deploy-kit.seed.done", { dst });
 }
 function refreshDeployKit(args) {
-  const dst = path14.join(args.dataDir, "deploy-kit");
-  if (!fs11.existsSync(dst)) {
+  const dst = path13.join(args.dataDir, "deploy-kit");
+  if (!fs10.existsSync(dst)) {
     seedDeployKit(args);
     return;
   }
   for (const sub of ["scripts", "contract"]) {
-    const s = path14.join(args.deployKitBundleRoot, sub);
-    if (fs11.existsSync(s)) {
-      fs11.cpSync(s, path14.join(dst, sub), { recursive: true, force: true, dereference: true });
+    const s = path13.join(args.deployKitBundleRoot, sub);
+    if (fs10.existsSync(s)) {
+      fs10.cpSync(s, path13.join(dst, sub), { recursive: true, force: true, dereference: true });
     }
   }
-  const secretsSrc = path14.join(args.deployKitBundleRoot, ".secrets");
-  if (fs11.existsSync(secretsSrc)) {
-    fs11.mkdirSync(path14.join(dst, ".secrets"), { recursive: true });
-    for (const f of fs11.readdirSync(secretsSrc)) {
+  const secretsSrc = path13.join(args.deployKitBundleRoot, ".secrets");
+  if (fs10.existsSync(secretsSrc)) {
+    fs10.mkdirSync(path13.join(dst, ".secrets"), { recursive: true });
+    for (const f of fs10.readdirSync(secretsSrc)) {
       if (!f.endsWith(".example")) continue;
-      fs11.copyFileSync(path14.join(secretsSrc, f), path14.join(dst, ".secrets", f));
+      fs10.copyFileSync(path13.join(secretsSrc, f), path13.join(dst, ".secrets", f));
     }
   }
   args.logger.info("deploy-kit.refresh.done", { dst });
 }
 
 // src/share-md-viewer/load.ts
-var import_node_fs11 = __toESM(require("fs"), 1);
-var import_node_path11 = __toESM(require("path"), 1);
+var import_node_fs10 = __toESM(require("fs"), 1);
+var import_node_path10 = __toESM(require("path"), 1);
 var import_node_url2 = require("url");
 
 // src/share-md-viewer/asset-loader.ts
-var import_node_fs10 = __toESM(require("fs"), 1);
+var import_node_fs9 = __toESM(require("fs"), 1);
 function htmlEscape(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
 }
@@ -46221,12 +46160,12 @@ function createViewerAssetLoader(opts) {
   let viewerTemplate;
   let errorTemplate;
   try {
-    viewerTemplate = import_node_fs10.default.readFileSync(opts.viewerHtmlPath, "utf8");
+    viewerTemplate = import_node_fs9.default.readFileSync(opts.viewerHtmlPath, "utf8");
   } catch (err) {
     throw new Error(`viewer asset not found at ${opts.viewerHtmlPath}: ${err.message}`);
   }
   try {
-    errorTemplate = import_node_fs10.default.readFileSync(opts.errorHtmlPath, "utf8");
+    errorTemplate = import_node_fs9.default.readFileSync(opts.errorHtmlPath, "utf8");
   } catch (err) {
     throw new Error(`viewer error asset not found at ${opts.errorHtmlPath}: ${err.message}`);
   }
@@ -46245,25 +46184,25 @@ var import_meta2 = {};
 function tryLoadViewerAssets(logger) {
   const candidates = [];
   try {
-    const here = import_node_path11.default.dirname((0, import_node_url2.fileURLToPath)(import_meta2.url));
+    const here = import_node_path10.default.dirname((0, import_node_url2.fileURLToPath)(import_meta2.url));
     candidates.push(here);
-    candidates.push(import_node_path11.default.resolve(here, ".."));
-    candidates.push(import_node_path11.default.resolve(here, "..", "..", "dist"));
+    candidates.push(import_node_path10.default.resolve(here, ".."));
+    candidates.push(import_node_path10.default.resolve(here, "..", "..", "dist"));
   } catch {
   }
   if (process.argv[1]) {
     let real = process.argv[1];
     try {
-      real = import_node_fs11.default.realpathSync(process.argv[1]);
+      real = import_node_fs10.default.realpathSync(process.argv[1]);
     } catch {
     }
-    candidates.push(import_node_path11.default.dirname(real));
+    candidates.push(import_node_path10.default.dirname(real));
   }
   for (const root of candidates) {
-    const viewerHtmlPath = import_node_path11.default.join(root, "share-md-viewer.html");
-    const errorHtmlPath = import_node_path11.default.join(root, "share-md-viewer-error.html");
+    const viewerHtmlPath = import_node_path10.default.join(root, "share-md-viewer.html");
+    const errorHtmlPath = import_node_path10.default.join(root, "share-md-viewer-error.html");
     try {
-      if (import_node_fs11.default.statSync(viewerHtmlPath).isFile() && import_node_fs11.default.statSync(errorHtmlPath).isFile()) {
+      if (import_node_fs10.default.statSync(viewerHtmlPath).isFile() && import_node_fs10.default.statSync(errorHtmlPath).isFile()) {
         logger?.info("share-md-viewer.assets-root.resolved", { root });
         return createViewerAssetLoader({ viewerHtmlPath, errorHtmlPath });
       }
@@ -46278,30 +46217,30 @@ function tryLoadViewerAssets(logger) {
 }
 
 // src/share-ui/load.ts
-var import_node_fs13 = __toESM(require("fs"), 1);
-var import_node_path13 = __toESM(require("path"), 1);
+var import_node_fs12 = __toESM(require("fs"), 1);
+var import_node_path12 = __toESM(require("path"), 1);
 var import_node_url3 = require("url");
 
 // src/share-ui/asset-loader.ts
-var import_node_fs12 = __toESM(require("fs"), 1);
-var import_node_path12 = __toESM(require("path"), 1);
+var import_node_fs11 = __toESM(require("fs"), 1);
+var import_node_path11 = __toESM(require("path"), 1);
 function createShareUiAssetLoader(opts) {
   let indexHtml;
   try {
-    indexHtml = import_node_fs12.default.readFileSync(opts.indexHtmlPath, "utf8");
+    indexHtml = import_node_fs11.default.readFileSync(opts.indexHtmlPath, "utf8");
   } catch (err) {
     throw new Error(`share-ui index.html not found at ${opts.indexHtmlPath}: ${err.message}`);
   }
-  const assetsDir = import_node_path12.default.resolve(opts.assetsDir);
+  const assetsDir = import_node_path11.default.resolve(opts.assetsDir);
   return {
     renderIndexHtml() {
       return indexHtml;
     },
     resolveAssetPath(rel) {
-      const resolved = import_node_path12.default.resolve(assetsDir, rel);
-      if (resolved !== assetsDir && !resolved.startsWith(assetsDir + import_node_path12.default.sep)) return null;
+      const resolved = import_node_path11.default.resolve(assetsDir, rel);
+      if (resolved !== assetsDir && !resolved.startsWith(assetsDir + import_node_path11.default.sep)) return null;
       try {
-        if (import_node_fs12.default.statSync(resolved).isFile()) return resolved;
+        if (import_node_fs11.default.statSync(resolved).isFile()) return resolved;
       } catch {
       }
       return null;
@@ -46315,28 +46254,28 @@ function bundleDirFromArgv(argv1) {
   if (!argv1) return null;
   let real = argv1;
   try {
-    real = import_node_fs13.default.realpathSync(argv1);
+    real = import_node_fs12.default.realpathSync(argv1);
   } catch {
   }
-  return import_node_path13.default.dirname(real);
+  return import_node_path12.default.dirname(real);
 }
 function tryLoadShareUi(logger) {
   const candidates = [];
   try {
-    const here = import_node_path13.default.dirname((0, import_node_url3.fileURLToPath)(import_meta3.url));
+    const here = import_node_path12.default.dirname((0, import_node_url3.fileURLToPath)(import_meta3.url));
     candidates.push(here);
-    candidates.push(import_node_path13.default.resolve(here, ".."));
-    candidates.push(import_node_path13.default.resolve(here, "..", "..", "dist"));
+    candidates.push(import_node_path12.default.resolve(here, ".."));
+    candidates.push(import_node_path12.default.resolve(here, "..", "..", "dist"));
   } catch {
   }
   const argvDir = bundleDirFromArgv(process.argv[1]);
   if (argvDir) candidates.push(argvDir);
   for (const root of candidates) {
-    const shareUiDir = import_node_path13.default.join(root, "share-ui");
-    const indexHtmlPath = import_node_path13.default.join(shareUiDir, "guest.html");
-    const assetsDir = import_node_path13.default.join(shareUiDir, "assets");
+    const shareUiDir = import_node_path12.default.join(root, "share-ui");
+    const indexHtmlPath = import_node_path12.default.join(shareUiDir, "guest.html");
+    const assetsDir = import_node_path12.default.join(shareUiDir, "assets");
     try {
-      if (import_node_fs13.default.statSync(indexHtmlPath).isFile() && import_node_fs13.default.statSync(assetsDir).isDirectory()) {
+      if (import_node_fs12.default.statSync(indexHtmlPath).isFile() && import_node_fs12.default.statSync(assetsDir).isDirectory()) {
         logger?.info("share-ui.assets-root.resolved", { root: shareUiDir });
         return createShareUiAssetLoader({ indexHtmlPath, assetsDir });
       }
@@ -46414,20 +46353,20 @@ function buildVisitorLogin(deps) {
 }
 
 // src/visitor/visitor-store.ts
-var import_node_fs14 = __toESM(require("fs"), 1);
-var import_node_path14 = __toESM(require("path"), 1);
+var import_node_fs13 = __toESM(require("fs"), 1);
+var import_node_path13 = __toESM(require("path"), 1);
 function createVisitorStore(opts) {
-  const file = import_node_path14.default.join(opts.dir, "visitors.json");
+  const file = import_node_path13.default.join(opts.dir, "visitors.json");
   const read = () => {
     try {
-      return JSON.parse(import_node_fs14.default.readFileSync(file, "utf8"));
+      return JSON.parse(import_node_fs13.default.readFileSync(file, "utf8"));
     } catch {
       return [];
     }
   };
   const write = (rows) => {
-    import_node_fs14.default.mkdirSync(opts.dir, { recursive: true });
-    import_node_fs14.default.writeFileSync(file, JSON.stringify(rows, null, 2));
+    import_node_fs13.default.mkdirSync(opts.dir, { recursive: true });
+    import_node_fs13.default.writeFileSync(file, JSON.stringify(rows, null, 2));
   };
   return {
     upsert(r) {
@@ -46461,7 +46400,7 @@ init_claude();
 
 // src/tools/codex.ts
 var import_node_child_process4 = require("child_process");
-var import_node_fs16 = __toESM(require("fs"), 1);
+var import_node_fs15 = __toESM(require("fs"), 1);
 
 // src/tools/codex-session.ts
 var import_node_child_process3 = require("child_process");
@@ -46709,8 +46648,8 @@ function turnStartInput(text) {
   const items = [];
   let leftover = text;
   for (const m2 of text.matchAll(SKILL_RE)) {
-    const [marker, name, path78] = m2;
-    items.push({ type: "skill", name, path: path78 });
+    const [marker, name, path77] = m2;
+    items.push({ type: "skill", name, path: path77 });
     leftover = leftover.replace(marker, "");
   }
   for (const m2 of text.matchAll(ATTACHMENT_RE2)) {
@@ -46894,10 +46833,10 @@ function sanitizeCodexModel(model) {
   return CODEX_MODELS.some((m2) => m2.id === model) ? model : void 0;
 }
 async function probeCodex(env = process.env) {
-  if (env.CODEX_BIN && import_node_fs16.default.existsSync(env.CODEX_BIN)) return { available: true, path: env.CODEX_BIN };
+  if (env.CODEX_BIN && import_node_fs15.default.existsSync(env.CODEX_BIN)) return { available: true, path: env.CODEX_BIN };
   try {
     const out = (0, import_node_child_process4.execFileSync)("which", ["codex"], { encoding: "utf8" }).trim();
-    if (out && import_node_fs16.default.existsSync(out)) return { available: true, path: out };
+    if (out && import_node_fs15.default.existsSync(out)) return { available: true, path: out };
   } catch {
   }
   return { available: false };
@@ -46943,9 +46882,9 @@ var CodexAdapter = class {
 
 // src/tools/claude-tui.ts
 var import_node_crypto5 = require("crypto");
-var import_node_fs17 = __toESM(require("fs"), 1);
+var import_node_fs16 = __toESM(require("fs"), 1);
 var import_node_os7 = __toESM(require("os"), 1);
-var import_node_path15 = __toESM(require("path"), 1);
+var import_node_path14 = __toESM(require("path"), 1);
 var import_headless = __toESM(require_xterm_headless(), 1);
 
 // ../node_modules/.pnpm/@xterm+addon-serialize@0.14.0/node_modules/@xterm/addon-serialize/lib/addon-serialize.mjs
@@ -48187,9 +48126,9 @@ function buildTuiSpawnArgs(ctx, isResume = false) {
 function jsonlExistsForCtx(ctx) {
   if (!ctx.toolSessionId) return false;
   const home = import_node_os7.default.homedir();
-  const file = import_node_path15.default.join(home, ".claude", "projects", cwdToHashDir(ctx.cwd), `${ctx.toolSessionId}.jsonl`);
+  const file = import_node_path14.default.join(home, ".claude", "projects", cwdToHashDir(ctx.cwd), `${ctx.toolSessionId}.jsonl`);
   try {
-    return import_node_fs17.default.statSync(file).isFile();
+    return import_node_fs16.default.statSync(file).isFile();
   } catch {
     return false;
   }
@@ -48258,10 +48197,10 @@ var PersonaDispatchManager = class {
 };
 
 // src/dispatch/mcp-config.ts
-var import_node_fs18 = __toESM(require("fs"), 1);
-var import_node_path16 = __toESM(require("path"), 1);
+var import_node_fs17 = __toESM(require("fs"), 1);
+var import_node_path15 = __toESM(require("path"), 1);
 function dispatchMcpConfigPath(dataDir) {
-  return import_node_path16.default.join(dataDir, "dispatch.mcp.json");
+  return import_node_path15.default.join(dataDir, "dispatch.mcp.json");
 }
 function writeDispatchMcpConfig(args) {
   const cfgPath = dispatchMcpConfigPath(args.dataDir);
@@ -48276,16 +48215,16 @@ function writeDispatchMcpConfig(args) {
       }
     }
   };
-  import_node_fs18.default.mkdirSync(args.dataDir, { recursive: true });
-  import_node_fs18.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  import_node_fs17.default.mkdirSync(args.dataDir, { recursive: true });
+  import_node_fs17.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/ticket/mcp-config.ts
-var import_node_fs19 = __toESM(require("fs"), 1);
-var import_node_path17 = __toESM(require("path"), 1);
+var import_node_fs18 = __toESM(require("fs"), 1);
+var import_node_path16 = __toESM(require("path"), 1);
 function ticketMcpConfigPath(dataDir) {
-  return import_node_path17.default.join(dataDir, "ticket.mcp.json");
+  return import_node_path16.default.join(dataDir, "ticket.mcp.json");
 }
 function writeTicketMcpConfig(args) {
   const cfgPath = ticketMcpConfigPath(args.dataDir);
@@ -48306,16 +48245,16 @@ function writeTicketMcpConfig(args) {
       }
     }
   };
-  import_node_fs19.default.mkdirSync(args.dataDir, { recursive: true });
-  import_node_fs19.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  import_node_fs18.default.mkdirSync(args.dataDir, { recursive: true });
+  import_node_fs18.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/shift/mcp-config.ts
-var import_node_fs20 = __toESM(require("fs"), 1);
-var import_node_path18 = __toESM(require("path"), 1);
+var import_node_fs19 = __toESM(require("fs"), 1);
+var import_node_path17 = __toESM(require("path"), 1);
 function shiftMcpConfigPath(dataDir) {
-  return import_node_path18.default.join(dataDir, "shift.mcp.json");
+  return import_node_path17.default.join(dataDir, "shift.mcp.json");
 }
 async function writeShiftMcpConfig(args) {
   const cfgPath = shiftMcpConfigPath(args.dataDir);
@@ -48330,16 +48269,16 @@ async function writeShiftMcpConfig(args) {
       }
     }
   };
-  await import_node_fs20.default.promises.mkdir(args.dataDir, { recursive: true });
-  await import_node_fs20.default.promises.writeFile(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  await import_node_fs19.default.promises.mkdir(args.dataDir, { recursive: true });
+  await import_node_fs19.default.promises.writeFile(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/inbox/mcp-config.ts
-var import_node_fs21 = __toESM(require("fs"), 1);
-var import_node_path19 = __toESM(require("path"), 1);
+var import_node_fs20 = __toESM(require("fs"), 1);
+var import_node_path18 = __toESM(require("path"), 1);
 function inboxMcpConfigPath(dataDir) {
-  return import_node_path19.default.join(dataDir, "inbox.mcp.json");
+  return import_node_path18.default.join(dataDir, "inbox.mcp.json");
 }
 async function writeInboxMcpConfig(args) {
   const cfgPath = inboxMcpConfigPath(args.dataDir);
@@ -48354,14 +48293,14 @@ async function writeInboxMcpConfig(args) {
       }
     }
   };
-  await import_node_fs21.default.promises.mkdir(args.dataDir, { recursive: true });
-  await import_node_fs21.default.promises.writeFile(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  await import_node_fs20.default.promises.mkdir(args.dataDir, { recursive: true });
+  await import_node_fs20.default.promises.writeFile(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/shift/store.ts
 var import_promises = __toESM(require("fs/promises"), 1);
-var import_node_path20 = __toESM(require("path"), 1);
+var import_node_path19 = __toESM(require("path"), 1);
 var import_node_crypto6 = require("crypto");
 
 // src/shift/constants.ts
@@ -48430,7 +48369,7 @@ function createShiftStore(deps) {
       flushTimer = null;
     }
     const content = { version: 1, shifts };
-    await import_promises.default.mkdir(import_node_path20.default.dirname(deps.filePath), { recursive: true });
+    await import_promises.default.mkdir(import_node_path19.default.dirname(deps.filePath), { recursive: true });
     const tmp = `${deps.filePath}.tmp-${deps.now()}-${Math.floor(Math.random() * 1e6)}`;
     await import_promises.default.writeFile(tmp, JSON.stringify(content, null, 2), "utf8");
     await import_promises.default.rename(tmp, deps.filePath);
@@ -49164,13 +49103,13 @@ function mapSkillsListResponse(res) {
       const r = s ?? {};
       const name = str3(r.name);
       if (!name) continue;
-      const path78 = str3(r.path);
+      const path77 = str3(r.path);
       const description = str3(r.description);
       const isPlugin = name.includes(":");
       out.push({
         name,
         source: isPlugin ? "plugin" : "project",
-        ...path78 ? { path: path78 } : {},
+        ...path77 ? { path: path77 } : {},
         ...description ? { description } : {},
         ...isPlugin ? { plugin: name.split(":")[0] } : {}
       });
@@ -49209,23 +49148,23 @@ async function listCodexSkills(cwd, deps = {}) {
 }
 
 // src/workspace/browser.ts
-var import_node_fs22 = __toESM(require("fs"), 1);
+var import_node_fs21 = __toESM(require("fs"), 1);
 var import_node_os8 = __toESM(require("os"), 1);
-var import_node_path21 = __toESM(require("path"), 1);
+var import_node_path20 = __toESM(require("path"), 1);
 init_protocol();
 var MAX_FILE_BYTES = 2 * 1024 * 1024;
 function resolveInsideCwd(cwd, subpath) {
-  const absCwd = import_node_path21.default.resolve(cwd);
-  const joined = import_node_path21.default.resolve(absCwd, subpath ?? ".");
-  const rel = import_node_path21.default.relative(absCwd, joined);
-  if (rel.startsWith("..") || import_node_path21.default.isAbsolute(rel)) {
+  const absCwd = import_node_path20.default.resolve(cwd);
+  const joined = import_node_path20.default.resolve(absCwd, subpath ?? ".");
+  const rel = import_node_path20.default.relative(absCwd, joined);
+  if (rel.startsWith("..") || import_node_path20.default.isAbsolute(rel)) {
     throw new ClawdError(ERROR_CODES.INVALID_PATH, `path escapes cwd: ${subpath}`);
   }
   return joined;
 }
 function ensureCwd(cwd) {
   try {
-    const stat = import_node_fs22.default.statSync(cwd);
+    const stat = import_node_fs21.default.statSync(cwd);
     if (!stat.isDirectory()) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${cwd}`);
     }
@@ -49239,7 +49178,7 @@ var WorkspaceBrowser = class {
     const cwd = args.cwd && args.cwd.length > 0 ? args.cwd : import_node_os8.default.homedir();
     ensureCwd(cwd);
     const full = resolveInsideCwd(cwd, args.path);
-    const dirents = import_node_fs22.default.readdirSync(full, { withFileTypes: true });
+    const dirents = import_node_fs21.default.readdirSync(full, { withFileTypes: true });
     const entries = [];
     for (const d of dirents) {
       if (!args.showHidden && d.name.startsWith(".")) continue;
@@ -49249,7 +49188,7 @@ var WorkspaceBrowser = class {
         mtime: ""
       };
       try {
-        const st = import_node_fs22.default.statSync(import_node_path21.default.join(full, d.name));
+        const st = import_node_fs21.default.statSync(import_node_path20.default.join(full, d.name));
         entry.mtime = new Date(st.mtimeMs).toISOString();
         if (d.isFile()) entry.size = st.size;
       } catch {
@@ -49265,14 +49204,14 @@ var WorkspaceBrowser = class {
   read(args) {
     ensureCwd(args.cwd);
     const full = resolveInsideCwd(args.cwd, args.path);
-    const st = import_node_fs22.default.statSync(full);
+    const st = import_node_fs21.default.statSync(full);
     if (!st.isFile()) {
       throw new ClawdError(ERROR_CODES.INVALID_PATH, `not a file: ${args.path}`);
     }
     if (st.size > MAX_FILE_BYTES) {
       throw new ClawdError(ERROR_CODES.FILE_TOO_LARGE, `file > ${MAX_FILE_BYTES} bytes`);
     }
-    const buf = import_node_fs22.default.readFileSync(full);
+    const buf = import_node_fs21.default.readFileSync(full);
     const isBinary = buf.includes(0);
     if (isBinary) {
       return {
@@ -49294,20 +49233,20 @@ var WorkspaceBrowser = class {
 };
 
 // src/skills/agents-scanner.ts
-var import_node_fs23 = __toESM(require("fs"), 1);
+var import_node_fs22 = __toESM(require("fs"), 1);
 var import_node_os9 = __toESM(require("os"), 1);
-var import_node_path22 = __toESM(require("path"), 1);
+var import_node_path21 = __toESM(require("path"), 1);
 var DEFAULT_POLICY_DIR_DARWIN = "/Library/Application Support/ClaudeCode/.claude/agents";
 function isDirLikeSync2(p2) {
   try {
-    return import_node_fs23.default.statSync(p2).isDirectory();
+    return import_node_fs22.default.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function fileExistsSync(p2) {
   try {
-    return import_node_fs23.default.statSync(p2).isFile();
+    return import_node_fs22.default.statSync(p2).isFile();
   } catch {
     return false;
   }
@@ -49315,7 +49254,7 @@ function fileExistsSync(p2) {
 function parseAgentFile(filePath) {
   let content;
   try {
-    content = import_node_fs23.default.readFileSync(filePath, "utf8");
+    content = import_node_fs22.default.readFileSync(filePath, "utf8");
   } catch {
     return {};
   }
@@ -49328,16 +49267,16 @@ function parseAgentFile(filePath) {
 function scanAgentsDir(dir, source, seen, out) {
   let entries;
   try {
-    entries = import_node_fs23.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs22.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
     if (!ent.name.endsWith(".md")) continue;
-    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path22.default.join(dir, ent.name)))) {
+    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path21.default.join(dir, ent.name)))) {
       continue;
     }
-    const filePath = import_node_path22.default.join(dir, ent.name);
+    const filePath = import_node_path21.default.join(dir, ent.name);
     const baseName = ent.name.replace(/\.md$/, "");
     if (seen.has(baseName)) continue;
     seen.add(baseName);
@@ -49355,12 +49294,12 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   function walk2(dir, namespaces) {
     let entries;
     try {
-      entries = import_node_fs23.default.readdirSync(dir, { withFileTypes: true });
+      entries = import_node_fs22.default.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const ent of entries) {
-      const childPath = import_node_path22.default.join(dir, ent.name);
+      const childPath = import_node_path21.default.join(dir, ent.name);
       if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync2(childPath)) {
         walk2(childPath, [...namespaces, ent.name]);
         continue;
@@ -49385,13 +49324,13 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   walk2(root, []);
 }
 function readInstalledPlugins2(home) {
-  const pluginsDir = import_node_path22.default.join(home, ".claude", "plugins");
-  const v2 = import_node_path22.default.join(pluginsDir, "installed_plugins_v2.json");
-  const v1 = import_node_path22.default.join(pluginsDir, "installed_plugins.json");
+  const pluginsDir = import_node_path21.default.join(home, ".claude", "plugins");
+  const v2 = import_node_path21.default.join(pluginsDir, "installed_plugins_v2.json");
+  const v1 = import_node_path21.default.join(pluginsDir, "installed_plugins.json");
   let raw = null;
   for (const candidate of [v2, v1]) {
     try {
-      raw = import_node_fs23.default.readFileSync(candidate, "utf8");
+      raw = import_node_fs22.default.readFileSync(candidate, "utf8");
       break;
     } catch {
     }
@@ -49416,19 +49355,19 @@ function readInstalledPlugins2(home) {
   return out;
 }
 function walkUpProjectAgentsDirs(startCwd, home, seen, out) {
-  let cur = import_node_path22.default.resolve(startCwd);
-  const fsRoot = import_node_path22.default.parse(cur).root;
+  let cur = import_node_path21.default.resolve(startCwd);
+  const fsRoot = import_node_path21.default.parse(cur).root;
   while (true) {
-    scanAgentsDir(import_node_path22.default.join(cur, ".claude", "agents"), "project", seen, out);
+    scanAgentsDir(import_node_path21.default.join(cur, ".claude", "agents"), "project", seen, out);
     let hasGit = false;
     try {
-      hasGit = import_node_fs23.default.existsSync(import_node_path22.default.join(cur, ".git"));
+      hasGit = import_node_fs22.default.existsSync(import_node_path21.default.join(cur, ".git"));
     } catch {
     }
     if (hasGit) return;
     if (cur === home) return;
     if (cur === fsRoot) return;
-    const parent = import_node_path22.default.dirname(cur);
+    const parent = import_node_path21.default.dirname(cur);
     if (parent === cur) return;
     cur = parent;
   }
@@ -49463,7 +49402,7 @@ var AgentsScanner = class {
     }
     const fsBlock = [];
     scanAgentsDir(
-      import_node_path22.default.join(this.home, ".claude", "agents"),
+      import_node_path21.default.join(this.home, ".claude", "agents"),
       "global",
       seen,
       fsBlock
@@ -49477,7 +49416,7 @@ var AgentsScanner = class {
       ...this.extraPluginRoots
     ];
     for (const { name, root } of plugins) {
-      const agentsRoot = import_node_path22.default.join(root, "agents");
+      const agentsRoot = import_node_path21.default.join(root, "agents");
       scanPluginAgentsTree(agentsRoot, name, seen, fsBlock);
     }
     return [...builtinBlock, ...fsBlock];
@@ -49485,15 +49424,15 @@ var AgentsScanner = class {
 };
 
 // src/observer/session-observer.ts
-var import_node_fs25 = __toESM(require("fs"), 1);
+var import_node_fs24 = __toESM(require("fs"), 1);
 var import_node_os11 = __toESM(require("os"), 1);
-var import_node_path24 = __toESM(require("path"), 1);
+var import_node_path23 = __toESM(require("path"), 1);
 init_claude_history();
 
 // src/observer/subagent-meta-observer.ts
-var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_fs23 = __toESM(require("fs"), 1);
 var import_node_os10 = __toESM(require("os"), 1);
-var import_node_path23 = __toESM(require("path"), 1);
+var import_node_path22 = __toESM(require("path"), 1);
 init_claude_history();
 var META_RE = /^agent-([A-Za-z0-9_-]+)\.meta\.json$/;
 var SubagentMetaObserver = class {
@@ -49506,7 +49445,7 @@ var SubagentMetaObserver = class {
   watches = /* @__PURE__ */ new Map();
   // public for spec only：测试直接拼路径写假 meta.json；生产 start() 内部自己解析
   resolveSubagentDir(cwd, toolSessionId) {
-    return import_node_path23.default.join(
+    return import_node_path22.default.join(
       this.home,
       ".claude",
       "projects",
@@ -49536,7 +49475,7 @@ var SubagentMetaObserver = class {
   attachWatcher(w2) {
     if (w2.watcher) return;
     try {
-      w2.watcher = import_node_fs24.default.watch(w2.dirPath, { persistent: false }, (_evt, name) => {
+      w2.watcher = import_node_fs23.default.watch(w2.dirPath, { persistent: false }, (_evt, name) => {
         if (!name) return;
         const m2 = META_RE.exec(String(name));
         if (!m2) return;
@@ -49548,7 +49487,7 @@ var SubagentMetaObserver = class {
   scan(w2) {
     let entries;
     try {
-      entries = import_node_fs24.default.readdirSync(w2.dirPath);
+      entries = import_node_fs23.default.readdirSync(w2.dirPath);
     } catch {
       return;
     }
@@ -49562,10 +49501,10 @@ var SubagentMetaObserver = class {
     if (!m2) return;
     const agentId = m2[1];
     if (w2.emitted.has(agentId)) return;
-    const file = import_node_path23.default.join(w2.dirPath, name);
+    const file = import_node_path22.default.join(w2.dirPath, name);
     let raw;
     try {
-      raw = import_node_fs24.default.readFileSync(file, "utf8");
+      raw = import_node_fs23.default.readFileSync(file, "utf8");
     } catch {
       return;
     }
@@ -49622,14 +49561,14 @@ var SessionObserver = class {
   metaObserver;
   resolveJsonlPath(cwd, toolSessionId, override) {
     if (override) return override;
-    return import_node_path24.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
+    return import_node_path23.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
   }
   start(args) {
     this.stop(args.sessionId);
     const filePath = this.resolveJsonlPath(args.cwd, args.toolSessionId, args.jsonlPath);
     let size = 0;
     try {
-      size = import_node_fs25.default.statSync(filePath).size;
+      size = import_node_fs24.default.statSync(filePath).size;
     } catch {
     }
     const w2 = {
@@ -49643,10 +49582,10 @@ var SessionObserver = class {
       prevIsRejectSentinel: false
     };
     try {
-      import_node_fs25.default.mkdirSync(import_node_path24.default.dirname(filePath), { recursive: true });
+      import_node_fs24.default.mkdirSync(import_node_path23.default.dirname(filePath), { recursive: true });
     } catch {
     }
-    w2.watcher = import_node_fs25.default.watch(import_node_path24.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
+    w2.watcher = import_node_fs24.default.watch(import_node_path23.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
       if (!changedName || !filePath.endsWith(changedName)) return;
       this.poll(w2);
     });
@@ -49669,7 +49608,7 @@ var SessionObserver = class {
   // 异常静默吞，不阻塞 watcher 启动
   hydrateMetaTail(w2, maxLines = 200) {
     try {
-      const raw = import_node_fs25.default.readFileSync(w2.filePath, "utf8");
+      const raw = import_node_fs24.default.readFileSync(w2.filePath, "utf8");
       if (!raw) return;
       const allLines = raw.split("\n").filter((l) => l.trim().length > 0);
       if (allLines.length === 0) return;
@@ -49693,7 +49632,7 @@ var SessionObserver = class {
   poll(w2) {
     let size = 0;
     try {
-      size = import_node_fs25.default.statSync(w2.filePath).size;
+      size = import_node_fs24.default.statSync(w2.filePath).size;
     } catch {
       return;
     }
@@ -49702,11 +49641,11 @@ var SessionObserver = class {
       w2.buf = "";
     }
     if (size === w2.lastSize) return;
-    const fd = import_node_fs25.default.openSync(w2.filePath, "r");
+    const fd = import_node_fs24.default.openSync(w2.filePath, "r");
     try {
       const len = size - w2.lastSize;
       const buf = Buffer.alloc(len);
-      import_node_fs25.default.readSync(fd, buf, 0, len, w2.lastSize);
+      import_node_fs24.default.readSync(fd, buf, 0, len, w2.lastSize);
       w2.lastSize = size;
       w2.buf += buf.toString("utf8");
       let newlineIndex;
@@ -49729,7 +49668,7 @@ var SessionObserver = class {
         }
       }
     } finally {
-      import_node_fs25.default.closeSync(fd);
+      import_node_fs24.default.closeSync(fd);
     }
   }
   // 解析 JSONL 单行：仅当是主链 user 文本行（非 sidechain / 非 sub-agent / message.role='user'
@@ -50532,15 +50471,15 @@ async function authenticate(token, deps) {
 }
 
 // src/permission/capability-store.ts
-var fs29 = __toESM(require("fs"), 1);
-var path29 = __toESM(require("path"), 1);
+var fs28 = __toESM(require("fs"), 1);
+var path28 = __toESM(require("path"), 1);
 init_src();
 var CAPABILITIES_FILE_NAME = "capabilities.json";
 var FILE_VERSION = 1;
 var CapabilityStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs29.mkdirSync(dataDir, { recursive: true });
+    fs28.mkdirSync(dataDir, { recursive: true });
     this.cache = this.readFromDisk();
   }
   dataDir;
@@ -50564,13 +50503,13 @@ var CapabilityStore = class {
     this.flush();
   }
   filePath() {
-    return path29.join(this.dataDir, CAPABILITIES_FILE_NAME);
+    return path28.join(this.dataDir, CAPABILITIES_FILE_NAME);
   }
   readFromDisk() {
     const file = this.filePath();
     let raw;
     try {
-      raw = fs29.readFileSync(file, "utf8");
+      raw = fs28.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -50598,10 +50537,10 @@ var CapabilityStore = class {
   }
   atomicWrite(file, content) {
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
-    fs29.writeFileSync(tmp, content, { mode: 384 });
-    fs29.renameSync(tmp, file);
+    fs28.writeFileSync(tmp, content, { mode: 384 });
+    fs28.renameSync(tmp, file);
     try {
-      fs29.chmodSync(file, 384);
+      fs28.chmodSync(file, 384);
     } catch {
     }
   }
@@ -50694,14 +50633,14 @@ var CapabilityManager = class {
 };
 
 // src/permission/cleanup.ts
-var fs30 = __toESM(require("fs"), 1);
+var fs29 = __toESM(require("fs"), 1);
 function cleanupGuestSessionsForCapability(cap, factory) {
   const removed = [];
   for (const g2 of cap.grants) {
     if (g2.resource.type !== "persona") continue;
     const dir = factory.vmGuestRoot(g2.resource.id, cap.id);
     try {
-      fs30.rmSync(dir, { recursive: true, force: true });
+      fs29.rmSync(dir, { recursive: true, force: true });
       removed.push(dir);
     } catch {
     }
@@ -50710,14 +50649,14 @@ function cleanupGuestSessionsForCapability(cap, factory) {
 }
 
 // src/inbox/inbox-store.ts
-var fs31 = __toESM(require("fs"), 1);
-var path30 = __toESM(require("path"), 1);
+var fs30 = __toESM(require("fs"), 1);
+var path29 = __toESM(require("path"), 1);
 init_src();
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs31.mkdirSync(this.dirPath(), { recursive: true });
+    fs30.mkdirSync(this.dirPath(), { recursive: true });
   }
   dataDir;
   /**
@@ -50729,7 +50668,7 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     let raw;
     try {
-      raw = fs31.readFileSync(file, "utf8");
+      raw = fs30.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -50745,7 +50684,7 @@ var InboxStore = class {
     const dir = this.dirPath();
     let entries;
     try {
-      entries = fs31.readdirSync(dir);
+      entries = fs30.readdirSync(dir);
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -50761,9 +50700,9 @@ var InboxStore = class {
     if (existing.some((m2) => m2.id === message.id)) return;
     const file = this.filePath(message.peerDeviceId);
     const line = JSON.stringify(message) + "\n";
-    fs31.appendFileSync(file, line, { mode: 384 });
+    fs30.appendFileSync(file, line, { mode: 384 });
     try {
-      fs31.chmodSync(file, 384);
+      fs30.chmodSync(file, 384);
     } catch {
     }
   }
@@ -50793,7 +50732,7 @@ var InboxStore = class {
   removeByPeerDeviceId(peerDeviceId) {
     const file = this.filePath(peerDeviceId);
     try {
-      fs31.unlinkSync(file);
+      fs30.unlinkSync(file);
     } catch (err) {
       if (err?.code === "ENOENT") return;
     }
@@ -50802,18 +50741,18 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     const content = messages.map((m2) => JSON.stringify(m2)).join("\n") + (messages.length > 0 ? "\n" : "");
-    fs31.writeFileSync(tmp, content, { mode: 384 });
-    fs31.renameSync(tmp, file);
+    fs30.writeFileSync(tmp, content, { mode: 384 });
+    fs30.renameSync(tmp, file);
     try {
-      fs31.chmodSync(file, 384);
+      fs30.chmodSync(file, 384);
     } catch {
     }
   }
   dirPath() {
-    return path30.join(this.dataDir, INBOX_SUBDIR);
+    return path29.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerDeviceId) {
-    return path30.join(this.dirPath(), `${peerDeviceId}.jsonl`);
+    return path29.join(this.dirPath(), `${peerDeviceId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -50901,8 +50840,8 @@ var InboxManager = class {
 };
 
 // src/state/contact-store.ts
-var fs32 = __toESM(require("fs"), 1);
-var path31 = __toESM(require("path"), 1);
+var fs31 = __toESM(require("fs"), 1);
+var path30 = __toESM(require("path"), 1);
 init_src();
 var FILE_NAME = "contacts.json";
 var ContactStore = class {
@@ -50913,10 +50852,10 @@ var ContactStore = class {
   contacts = /* @__PURE__ */ new Map();
   load() {
     this.contacts.clear();
-    const file = path31.join(this.dataDir, FILE_NAME);
+    const file = path30.join(this.dataDir, FILE_NAME);
     let raw;
     try {
-      raw = fs32.readFileSync(file, "utf8");
+      raw = fs31.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code !== "ENOENT") this.renameBak(file);
       return;
@@ -50988,20 +50927,20 @@ var ContactStore = class {
     return true;
   }
   flush() {
-    const file = path31.join(this.dataDir, FILE_NAME);
+    const file = path30.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
       { contacts: Array.from(this.contacts.values()) },
       null,
       2
     );
-    fs32.mkdirSync(this.dataDir, { recursive: true });
-    fs32.writeFileSync(tmp, content, { mode: 384 });
-    fs32.renameSync(tmp, file);
+    fs31.mkdirSync(this.dataDir, { recursive: true });
+    fs31.writeFileSync(tmp, content, { mode: 384 });
+    fs31.renameSync(tmp, file);
   }
   renameBak(file) {
     try {
-      fs32.renameSync(file, `${file}.bak`);
+      fs31.renameSync(file, `${file}.bak`);
     } catch {
     }
   }
@@ -51158,61 +51097,61 @@ async function autoReverseContact(args) {
 init_src();
 
 // src/migrations/2026-05-20-flatten-sessions.ts
-var fs33 = __toESM(require("fs"), 1);
-var path32 = __toESM(require("path"), 1);
+var fs32 = __toESM(require("fs"), 1);
+var path31 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path32.join(dataDir, "sessions");
-  const flagPath = path32.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path31.join(dataDir, "sessions");
+  const flagPath = path31.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path32.join(sessionsDir, "default");
+  const defaultDir = path31.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path32.join(defaultDir, entry);
-      const dst = path32.join(sessionsDir, entry);
-      fs33.renameSync(src, dst);
+      const src = path31.join(defaultDir, entry);
+      const dst = path31.join(sessionsDir, entry);
+      fs32.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path32.join(sessionsDir, pid);
+    const personaDir = path31.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path32.join(personaDir, "owner");
+    const ownerSrc = path31.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path32.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs33.mkdirSync(ownerDst, { recursive: true });
+      const ownerDst = path31.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      fs32.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs33.renameSync(path32.join(ownerSrc, file), path32.join(ownerDst, file));
+        fs32.renameSync(path31.join(ownerSrc, file), path31.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path32.join(personaDir, "listener");
+    const listenerSrc = path31.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path32.join(dataDir, ".legacy", `listener-${pid}`);
-      fs33.mkdirSync(archiveDst, { recursive: true });
+      const archiveDst = path31.join(dataDir, ".legacy", `listener-${pid}`);
+      fs32.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs33.renameSync(path32.join(listenerSrc, file), path32.join(archiveDst, file));
+        fs32.renameSync(path31.join(listenerSrc, file), path31.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs33.mkdirSync(sessionsDir, { recursive: true });
-  fs33.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs32.mkdirSync(sessionsDir, { recursive: true });
+  fs32.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -51223,7 +51162,7 @@ function migrateFlattenSessions(opts) {
 }
 function existsSync3(p2) {
   try {
-    fs33.statSync(p2);
+    fs32.statSync(p2);
     return true;
   } catch {
     return false;
@@ -51231,31 +51170,31 @@ function existsSync3(p2) {
 }
 function isDir(p2) {
   try {
-    return fs33.statSync(p2).isDirectory();
+    return fs32.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p2) {
   try {
-    return fs33.readdirSync(p2);
+    return fs32.readdirSync(p2);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p2) {
   try {
-    fs33.rmdirSync(p2);
+    fs32.rmdirSync(p2);
   } catch {
   }
 }
 
 // src/transport/http-router.ts
-var import_node_fs27 = __toESM(require("fs"), 1);
-var import_node_path28 = __toESM(require("path"), 1);
+var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_path27 = __toESM(require("path"), 1);
 
 // src/attachment/mime.ts
-var import_node_path25 = __toESM(require("path"), 1);
+var import_node_path24 = __toESM(require("path"), 1);
 var TEXT_PLAIN = "text/plain; charset=utf-8";
 var EXT_TO_NATIVE_MIME = {
   // 图片
@@ -51362,7 +51301,7 @@ var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
   ".mk"
 ]);
 function lookupMime(filePathOrName) {
-  const ext = import_node_path25.default.extname(filePathOrName).toLowerCase();
+  const ext = import_node_path24.default.extname(filePathOrName).toLowerCase();
   if (EXT_TO_NATIVE_MIME[ext]) return EXT_TO_NATIVE_MIME[ext];
   if (TEXT_EXTENSIONS.has(ext)) return TEXT_PLAIN;
   return "application/octet-stream";
@@ -51431,8 +51370,8 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
 }
 
 // src/attachment/upload.ts
-var import_node_fs26 = __toESM(require("fs"), 1);
-var import_node_path26 = __toESM(require("path"), 1);
+var import_node_fs25 = __toESM(require("fs"), 1);
+var import_node_path25 = __toESM(require("path"), 1);
 var import_node_crypto8 = __toESM(require("crypto"), 1);
 var import_promises2 = require("stream/promises");
 var UploadError = class extends Error {
@@ -51444,22 +51383,22 @@ var UploadError = class extends Error {
   code;
 };
 function assertValidFileName(fileName) {
-  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path26.default.basename(fileName)) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path25.default.basename(fileName)) {
     throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
   }
 }
 var HASH_PREFIX_LEN = 16;
 async function writeUploadedAttachment(args) {
   assertValidFileName(args.fileName);
-  const attachmentsRoot = import_node_path26.default.join(args.sessionDir, ".attachments");
+  const attachmentsRoot = import_node_path25.default.join(args.sessionDir, ".attachments");
   try {
-    import_node_fs26.default.mkdirSync(attachmentsRoot, { recursive: true });
+    import_node_fs25.default.mkdirSync(attachmentsRoot, { recursive: true });
   } catch (err) {
     throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
   }
   const hasher = import_node_crypto8.default.createHash("sha256");
   let actualSize = 0;
-  const tmpPath = import_node_path26.default.join(
+  const tmpPath = import_node_path25.default.join(
     attachmentsRoot,
     `.upload-${process.pid}-${Date.now()}-${import_node_crypto8.default.randomBytes(4).toString("hex")}`
   );
@@ -51474,18 +51413,18 @@ async function writeUploadedAttachment(args) {
           yield buf;
         }
       },
-      import_node_fs26.default.createWriteStream(tmpPath, { mode: 384 })
+      import_node_fs25.default.createWriteStream(tmpPath, { mode: 384 })
     );
   } catch (err) {
     try {
-      import_node_fs26.default.unlinkSync(tmpPath);
+      import_node_fs25.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError("STORAGE_ERROR", `write failed: ${err.message}`);
   }
   if (actualSize !== args.contentLength) {
     try {
-      import_node_fs26.default.unlinkSync(tmpPath);
+      import_node_fs25.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError(
@@ -51494,35 +51433,35 @@ async function writeUploadedAttachment(args) {
     );
   }
   const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
-  const hashDir = import_node_path26.default.join(attachmentsRoot, attachmentId);
+  const hashDir = import_node_path25.default.join(attachmentsRoot, attachmentId);
   let finalFileName;
   let hashDirExists = false;
   try {
-    hashDirExists = import_node_fs26.default.statSync(hashDir).isDirectory();
+    hashDirExists = import_node_fs25.default.statSync(hashDir).isDirectory();
   } catch {
   }
   if (hashDirExists) {
-    const existing = import_node_fs26.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
+    const existing = import_node_fs25.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
     finalFileName = existing[0] ?? args.fileName;
     try {
-      import_node_fs26.default.unlinkSync(tmpPath);
+      import_node_fs25.default.unlinkSync(tmpPath);
     } catch {
     }
   } else {
     try {
-      import_node_fs26.default.mkdirSync(hashDir, { recursive: true });
+      import_node_fs25.default.mkdirSync(hashDir, { recursive: true });
       finalFileName = args.fileName;
-      import_node_fs26.default.renameSync(tmpPath, import_node_path26.default.join(hashDir, finalFileName));
+      import_node_fs25.default.renameSync(tmpPath, import_node_path25.default.join(hashDir, finalFileName));
     } catch (err) {
       try {
-        import_node_fs26.default.unlinkSync(tmpPath);
+        import_node_fs25.default.unlinkSync(tmpPath);
       } catch {
       }
       throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
     }
   }
-  const absPath = import_node_path26.default.join(hashDir, finalFileName);
-  const relPath = import_node_path26.default.relative(args.sessionDir, absPath);
+  const absPath = import_node_path25.default.join(hashDir, finalFileName);
+  const relPath = import_node_path25.default.relative(args.sessionDir, absPath);
   args.groupFileStore.upsert(args.scope, args.sessionId, {
     relPath: absPath,
     // 存绝对路径，与现有 agent 入清单的形态一致（attachment.ts:144 双形态兼容）
@@ -51536,7 +51475,7 @@ async function writeUploadedAttachment(args) {
 
 // src/extension/import.ts
 var import_promises3 = __toESM(require("fs/promises"), 1);
-var import_node_path27 = __toESM(require("path"), 1);
+var import_node_path26 = __toESM(require("path"), 1);
 var import_node_os12 = __toESM(require("os"), 1);
 var import_jszip = __toESM(require_lib3(), 1);
 init_src();
@@ -51555,7 +51494,7 @@ async function importZip(buf, root) {
     throw new ImportError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path27.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path26.default.isAbsolute(name)) {
       throw new ImportError("ZIP_INVALID", `unsafe zip entry path: ${name}`);
     }
   }
@@ -51588,7 +51527,7 @@ async function importZip(buf, root) {
       );
     }
   }
-  const destDir = import_node_path27.default.join(root, manifest.id);
+  const destDir = import_node_path26.default.join(root, manifest.id);
   let destExists = false;
   try {
     await import_promises3.default.access(destDir);
@@ -51598,15 +51537,15 @@ async function importZip(buf, root) {
   if (destExists) {
     throw new ImportError("ALREADY_EXISTS", `extension ${manifest.id} already installed`);
   }
-  const stage = await import_promises3.default.mkdtemp(import_node_path27.default.join(import_node_os12.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
+  const stage = await import_promises3.default.mkdtemp(import_node_path26.default.join(import_node_os12.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path27.default.join(stage, name);
+      const dest = import_node_path26.default.join(stage, name);
       if (entry.dir) {
         await import_promises3.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises3.default.mkdir(import_node_path27.default.dirname(dest), { recursive: true });
+      await import_promises3.default.mkdir(import_node_path26.default.dirname(dest), { recursive: true });
       const content = await entry.async("nodebuffer");
       await import_promises3.default.writeFile(dest, content);
     }
@@ -51637,7 +51576,7 @@ var SHARE_UI_ASSET_MIME = {
   ".wasm": "application/wasm"
 };
 function shareUiAssetMime(filePath) {
-  const ext = import_node_path28.default.extname(filePath).toLowerCase();
+  const ext = import_node_path27.default.extname(filePath).toLowerCase();
   return SHARE_UI_ASSET_MIME[ext] ?? lookupMime(filePath);
 }
 var DISPATCH_HEARTBEAT_MS = 25e3;
@@ -51724,7 +51663,7 @@ function isValidUploadFileName(fileName) {
   if (fileName === "." || fileName === "..") return false;
   if (fileName.startsWith(".")) return false;
   if (fileName.includes("/") || fileName.includes("\\")) return false;
-  return fileName === import_node_path28.default.basename(fileName);
+  return fileName === import_node_path27.default.basename(fileName);
 }
 function createHttpRouter(deps) {
   return async (req, res) => {
@@ -51796,7 +51735,7 @@ function createHttpRouter(deps) {
       }
       let buf;
       try {
-        buf = await import_node_fs27.default.promises.readFile(abs);
+        buf = await import_node_fs26.default.promises.readFile(abs);
       } catch {
         sendJson(res, 404, { code: "NOT_FOUND", message: "asset not found" });
         return true;
@@ -52020,7 +51959,7 @@ function createHttpRouter(deps) {
         sendHtml(res, statusByCode[r.code], loader.renderErrorHtml(r.code, msgByCode[r.code]));
         return true;
       }
-      sendHtml(res, 200, loader.renderViewerHtml(import_node_path28.default.basename(r.absPath)));
+      sendHtml(res, 200, loader.renderViewerHtml(import_node_path27.default.basename(r.absPath)));
       return true;
     }
     const ctx = deps.authResolver.resolveFromHeader(
@@ -52141,7 +52080,7 @@ function createHttpRouter(deps) {
         return true;
       }
       let absPath;
-      if (import_node_path28.default.isAbsolute(pathParam)) {
+      if (import_node_path27.default.isAbsolute(pathParam)) {
         absPath = pathParam;
       } else if (deps.sessionStore) {
         const file = deps.sessionStore.read(sid);
@@ -52149,7 +52088,7 @@ function createHttpRouter(deps) {
           sendJson(res, 404, { code: "NOT_FOUND", message: `session ${sid} not found` });
           return true;
         }
-        absPath = import_node_path28.default.join(file.cwd, pathParam);
+        absPath = import_node_path27.default.join(file.cwd, pathParam);
       } else {
         sendJson(res, 501, withCtx(ctx, { code: "NOT_IMPLEMENTED", message: "sessionStore not wired" }));
         return true;
@@ -52236,7 +52175,7 @@ function withCtx(ctx, body) {
 function streamFile(res, absPath, logger) {
   let stat;
   try {
-    stat = import_node_fs27.default.statSync(absPath);
+    stat = import_node_fs26.default.statSync(absPath);
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") {
@@ -52251,7 +52190,7 @@ function streamFile(res, absPath, logger) {
     return;
   }
   const mime = lookupMime(absPath);
-  const basename = import_node_path28.default.basename(absPath);
+  const basename = import_node_path27.default.basename(absPath);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": String(stat.size),
@@ -52259,7 +52198,7 @@ function streamFile(res, absPath, logger) {
     // 防止浏览器把任意 mime 当 html 渲染
     "X-Content-Type-Options": "nosniff"
   });
-  const stream = import_node_fs27.default.createReadStream(absPath);
+  const stream = import_node_fs26.default.createReadStream(absPath);
   stream.on("error", (err) => {
     logger?.warn("streamFile read error", { absPath, err: err.message });
     res.destroy();
@@ -52268,8 +52207,8 @@ function streamFile(res, absPath, logger) {
 }
 
 // src/attachment/gc.ts
-var import_node_fs28 = __toESM(require("fs"), 1);
-var import_node_path29 = __toESM(require("path"), 1);
+var import_node_fs27 = __toESM(require("fs"), 1);
+var import_node_path28 = __toESM(require("path"), 1);
 var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
 function runAttachmentGc(args) {
   const now = (args.now ?? Date.now)();
@@ -52278,38 +52217,38 @@ function runAttachmentGc(args) {
   for (const { scope, sessionId } of args.sessionScopes) {
     for (const entry of args.groupFileStore.list(scope, sessionId)) {
       if (entry.stale) continue;
-      if (import_node_path29.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+      if (import_node_path28.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
     }
   }
   for (const { scope, sessionId } of args.sessionScopes) {
-    const sessionDir = args.getSessionCwd?.(sessionId) ?? import_node_path29.default.join(
+    const sessionDir = args.getSessionCwd?.(sessionId) ?? import_node_path28.default.join(
       args.dataDir,
       "sessions",
       ...scopeSubPath(scope).map(safeFileName),
       safeFileName(sessionId)
     );
-    const attRoot = import_node_path29.default.join(sessionDir, ".attachments");
+    const attRoot = import_node_path28.default.join(sessionDir, ".attachments");
     let hashDirs;
     try {
-      hashDirs = import_node_fs28.default.readdirSync(attRoot);
+      hashDirs = import_node_fs27.default.readdirSync(attRoot);
     } catch (err) {
       if (err.code === "ENOENT") continue;
       args.logger?.warn("attachment gc: readdir failed", { attRoot, err: err.message });
       continue;
     }
     for (const hashDir of hashDirs) {
-      const hashDirAbs = import_node_path29.default.join(attRoot, hashDir);
+      const hashDirAbs = import_node_path28.default.join(attRoot, hashDir);
       let files;
       try {
-        files = import_node_fs28.default.readdirSync(hashDirAbs);
+        files = import_node_fs27.default.readdirSync(hashDirAbs);
       } catch {
         continue;
       }
       for (const name of files) {
-        const file = import_node_path29.default.join(hashDirAbs, name);
+        const file = import_node_path28.default.join(hashDirAbs, name);
         let stat;
         try {
-          stat = import_node_fs28.default.statSync(file);
+          stat = import_node_fs27.default.statSync(file);
         } catch {
           continue;
         }
@@ -52318,26 +52257,26 @@ function runAttachmentGc(args) {
         if (age < ttlMs) continue;
         if (liveAbs.has(file)) continue;
         try {
-          import_node_fs28.default.unlinkSync(file);
+          import_node_fs27.default.unlinkSync(file);
         } catch (err) {
           args.logger?.warn("attachment gc: unlink failed", { file, err: err.message });
         }
       }
       try {
-        if (import_node_fs28.default.readdirSync(hashDirAbs).length === 0) import_node_fs28.default.rmdirSync(hashDirAbs);
+        if (import_node_fs27.default.readdirSync(hashDirAbs).length === 0) import_node_fs27.default.rmdirSync(hashDirAbs);
       } catch {
       }
     }
     try {
-      if (import_node_fs28.default.readdirSync(attRoot).length === 0) import_node_fs28.default.rmdirSync(attRoot);
+      if (import_node_fs27.default.readdirSync(attRoot).length === 0) import_node_fs27.default.rmdirSync(attRoot);
     } catch {
     }
   }
 }
 
 // src/attachment/group.ts
-var import_node_fs29 = __toESM(require("fs"), 1);
-var import_node_path30 = __toESM(require("path"), 1);
+var import_node_fs28 = __toESM(require("fs"), 1);
+var import_node_path29 = __toESM(require("path"), 1);
 var import_node_crypto9 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
@@ -52349,11 +52288,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path30.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path29.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path30.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path29.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -52362,7 +52301,7 @@ var GroupFileStore = class {
   readFile(scope, sessionId) {
     const file = this.filePath(scope, sessionId);
     try {
-      const raw = import_node_fs29.default.readFileSync(file, "utf8");
+      const raw = import_node_fs28.default.readFileSync(file, "utf8");
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) {
         this.logger?.warn("GroupFileStore.readFile: not an array; resetting session entries", {
@@ -52388,10 +52327,10 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs29.default.mkdirSync(import_node_path30.default.dirname(file), { recursive: true });
+    import_node_fs28.default.mkdirSync(import_node_path29.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs29.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
-    import_node_fs29.default.renameSync(tmp, file);
+    import_node_fs28.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
+    import_node_fs28.default.renameSync(tmp, file);
   }
   /** 拉一份当前 session 的清单。读盘 → cache；之后调用复用 cache */
   list(scope, sessionId) {
@@ -52477,10 +52416,10 @@ var GroupFileStore = class {
 };
 
 // src/discovery/state-file.ts
-var import_node_fs30 = __toESM(require("fs"), 1);
-var import_node_path31 = __toESM(require("path"), 1);
+var import_node_fs29 = __toESM(require("fs"), 1);
+var import_node_path30 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path31.default.join(dataDir, "state.json");
+  return import_node_path30.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -52502,7 +52441,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs30.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs29.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -52516,20 +52455,20 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs30.default.mkdirSync(import_node_path31.default.dirname(this.file), { recursive: true });
+    import_node_fs29.default.mkdirSync(import_node_path30.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs30.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs30.default.renameSync(tmp, this.file);
+    import_node_fs29.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs29.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs30.default.chmodSync(this.file, 384);
+        import_node_fs29.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs30.default.unlinkSync(this.file);
+      import_node_fs29.default.unlinkSync(this.file);
     } catch {
     }
   }
@@ -52544,14 +52483,14 @@ function readDaemonSourceFromEnv(env = process.env) {
 }
 
 // src/tunnel/tunnel-manager.ts
-var import_node_fs34 = __toESM(require("fs"), 1);
-var import_node_path35 = __toESM(require("path"), 1);
+var import_node_fs33 = __toESM(require("fs"), 1);
+var import_node_path34 = __toESM(require("path"), 1);
 var import_node_crypto10 = __toESM(require("crypto"), 1);
 var import_node_child_process9 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
-var import_node_fs31 = __toESM(require("fs"), 1);
-var import_node_path32 = __toESM(require("path"), 1);
+var import_node_fs30 = __toESM(require("fs"), 1);
+var import_node_path31 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -52559,7 +52498,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs31.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs30.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -52570,22 +52509,22 @@ var TunnelStore = class {
     }
   }
   async set(v2) {
-    const dir = import_node_path32.default.dirname(this.filePath);
-    await import_node_fs31.default.promises.mkdir(dir, { recursive: true });
+    const dir = import_node_path31.default.dirname(this.filePath);
+    await import_node_fs30.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs31.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs30.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs31.default.promises.chmod(tmp, 384);
+        await import_node_fs30.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs31.default.promises.rename(tmp, this.filePath);
+    await import_node_fs30.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs31.default.promises.unlink(this.filePath);
+      await import_node_fs30.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -52680,9 +52619,9 @@ function escape(v2) {
 }
 
 // src/tunnel/frpc-binary.ts
-var import_node_fs32 = __toESM(require("fs"), 1);
+var import_node_fs31 = __toESM(require("fs"), 1);
 var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path33 = __toESM(require("path"), 1);
+var import_node_path32 = __toESM(require("path"), 1);
 var import_node_child_process7 = require("child_process");
 var import_node_stream3 = require("stream");
 var import_promises4 = require("stream/promises");
@@ -52714,20 +52653,20 @@ function frpcDownloadUrl(version2, p2) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs32.default.existsSync(opts.override)) {
+    if (!import_node_fs31.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path33.default.join(opts.dataDir, "bin");
-  import_node_fs32.default.mkdirSync(binDir, { recursive: true });
+  const binDir = import_node_path32.default.join(opts.dataDir, "bin");
+  import_node_fs31.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path33.default.join(binDir, "frpc");
-  if (import_node_fs32.default.existsSync(stableBin)) return stableBin;
+  const stableBin = import_node_path32.default.join(binDir, "frpc");
+  if (import_node_fs31.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path33.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path32.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -52736,8 +52675,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs32.default.chmodSync(partialBin, 493);
-    import_node_fs32.default.renameSync(partialBin, stableBin);
+    import_node_fs31.default.chmodSync(partialBin, 493);
+    import_node_fs31.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -52747,15 +52686,15 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs32.default.readdirSync(binDir);
+    entries = import_node_fs31.default.readdirSync(binDir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path33.default.join(binDir, name);
+      const full = import_node_path32.default.join(binDir, name);
       try {
-        import_node_fs32.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs31.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -52763,7 +52702,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p2) {
   try {
-    import_node_fs32.default.unlinkSync(p2);
+    import_node_fs31.default.unlinkSync(p2);
   } catch {
   }
 }
@@ -52774,13 +52713,13 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs32.default.createWriteStream(dest);
+  const out = import_node_fs31.default.createWriteStream(dest);
   const nodeStream = import_node_stream3.Readable.fromWeb(res.body);
   await (0, import_promises4.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path33.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs32.default.mkdirSync(work, { recursive: true });
+  const work = import_node_path32.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  import_node_fs31.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve6, reject) => {
       const proc = (0, import_node_child_process7.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
@@ -52788,32 +52727,32 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
       proc.on("exit", (code) => code === 0 ? resolve6() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path33.default.join(work, dirName, "frpc");
-    if (!import_node_fs32.default.existsSync(src)) {
+    const src = import_node_path32.default.join(work, dirName, "frpc");
+    if (!import_node_fs31.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs32.default.copyFileSync(src, destBin);
+    import_node_fs31.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs32.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs31.default.rmSync(work, { recursive: true, force: true });
   }
 }
 
 // src/tunnel/frpc-process.ts
-var import_node_fs33 = __toESM(require("fs"), 1);
-var import_node_path34 = __toESM(require("path"), 1);
+var import_node_fs32 = __toESM(require("fs"), 1);
+var import_node_path33 = __toESM(require("path"), 1);
 var import_node_child_process8 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path34.default.join(dataDir, "frpc.pid");
+  return import_node_path33.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
-    import_node_fs33.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
+    import_node_fs32.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearFrpcPid(dataDir) {
   try {
-    import_node_fs33.default.unlinkSync(frpcPidFilePath(dataDir));
+    import_node_fs32.default.unlinkSync(frpcPidFilePath(dataDir));
   } catch {
   }
 }
@@ -52829,7 +52768,7 @@ function defaultIsPidAlive(pid) {
 }
 function defaultReadPidFile(file) {
   try {
-    return import_node_fs33.default.readFileSync(file, "utf8");
+    return import_node_fs32.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -52845,7 +52784,7 @@ function defaultSleep(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path34.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path33.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -52869,7 +52808,7 @@ async function killStaleFrpc(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs33.default.unlinkSync(pidFile);
+      import_node_fs32.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -52880,7 +52819,7 @@ async function killStaleFrpc(deps) {
   }
   await sleep2(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs33.default.unlinkSync(pidFile);
+    import_node_fs32.default.unlinkSync(pidFile);
   } catch {
   }
 }
@@ -52917,7 +52856,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path35.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path34.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -53044,7 +52983,7 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path35.default.join(this.deps.dataDir, "frpc.toml");
+      const tomlPath = import_node_path34.default.join(this.deps.dataDir, "frpc.toml");
       const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto10.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
@@ -53055,12 +52994,12 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs34.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      await import_node_fs33.default.promises.writeFile(tomlPath, toml, { mode: 384 });
       const proc = (this.deps.spawnImpl ?? import_node_child_process9.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logFilePath = import_node_path35.default.join(this.deps.dataDir, "frpc.log");
-      const logStream = import_node_fs34.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logFilePath = import_node_path34.default.join(this.deps.dataDir, "frpc.log");
+      const logStream = import_node_fs33.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -53142,8 +53081,8 @@ async function waitForFrpcReady(proc, timeoutMs) {
 }
 
 // src/sshd/sshd-manager.ts
-var import_node_fs38 = __toESM(require("fs"), 1);
-var import_node_path39 = __toESM(require("path"), 1);
+var import_node_fs37 = __toESM(require("fs"), 1);
+var import_node_path38 = __toESM(require("path"), 1);
 var import_node_child_process11 = require("child_process");
 
 // src/sshd/sshd-config.ts
@@ -53168,23 +53107,23 @@ function buildSshdConfig(input) {
 }
 
 // src/sshd/sshd-process.ts
-var import_node_fs35 = __toESM(require("fs"), 1);
-var import_node_path36 = __toESM(require("path"), 1);
+var import_node_fs34 = __toESM(require("fs"), 1);
+var import_node_path35 = __toESM(require("path"), 1);
 var import_node_child_process10 = require("child_process");
 function sshdPidFilePath(dataDir) {
-  return import_node_path36.default.join(dataDir, "sshd", "sshd.pid");
+  return import_node_path35.default.join(dataDir, "sshd", "sshd.pid");
 }
 function writeSshdPid(dataDir, pid) {
   try {
     const p2 = sshdPidFilePath(dataDir);
-    import_node_fs35.default.mkdirSync(import_node_path36.default.dirname(p2), { recursive: true, mode: 448 });
-    import_node_fs35.default.writeFileSync(p2, String(pid), { mode: 384 });
+    import_node_fs34.default.mkdirSync(import_node_path35.default.dirname(p2), { recursive: true, mode: 448 });
+    import_node_fs34.default.writeFileSync(p2, String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearSshdPid(dataDir) {
   try {
-    import_node_fs35.default.unlinkSync(sshdPidFilePath(dataDir));
+    import_node_fs34.default.unlinkSync(sshdPidFilePath(dataDir));
   } catch {
   }
 }
@@ -53200,7 +53139,7 @@ function defaultIsPidAlive2(pid) {
 }
 function defaultReadPidFile2(file) {
   try {
-    return import_node_fs35.default.readFileSync(file, "utf8");
+    return import_node_fs34.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -53216,7 +53155,7 @@ function defaultSleep2(ms) {
 }
 async function killStaleSshd(deps) {
   const pidFile = sshdPidFilePath(deps.dataDir);
-  const configPath = import_node_path36.default.join(deps.dataDir, "sshd", "sshd_config");
+  const configPath = import_node_path35.default.join(deps.dataDir, "sshd", "sshd_config");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile2;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive2;
   const killPid = deps.killPidImpl ?? defaultKillPid2;
@@ -53240,7 +53179,7 @@ async function killStaleSshd(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs35.default.unlinkSync(pidFile);
+      import_node_fs34.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -53251,7 +53190,7 @@ async function killStaleSshd(deps) {
   }
   await sleep2(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs35.default.unlinkSync(pidFile);
+    import_node_fs34.default.unlinkSync(pidFile);
   } catch {
   }
 }
@@ -53284,8 +53223,8 @@ async function defaultScanSshdPidsByCmdline(configPath, logger) {
 }
 
 // src/sshd/jail-script.ts
-var import_node_fs36 = __toESM(require("fs"), 1);
-var import_node_path37 = __toESM(require("path"), 1);
+var import_node_fs35 = __toESM(require("fs"), 1);
+var import_node_path36 = __toESM(require("path"), 1);
 var CLAWD_SSH_JAIL_SCRIPT = String.raw`#!/usr/bin/env bash
 # clawd-ssh-jail — SSH reverse access sandbox wrapper (managed by clawd; do not edit)
 #
@@ -53419,16 +53358,16 @@ case "$(uname -s)" in
 esac
 `;
 function ensureJailScript(dataDir) {
-  const binDir = import_node_path37.default.join(dataDir, "bin");
-  import_node_fs36.default.mkdirSync(binDir, { recursive: true, mode: 493 });
-  const target = import_node_path37.default.join(binDir, "clawd-ssh-jail");
-  import_node_fs36.default.writeFileSync(target, CLAWD_SSH_JAIL_SCRIPT, { mode: 493 });
+  const binDir = import_node_path36.default.join(dataDir, "bin");
+  import_node_fs35.default.mkdirSync(binDir, { recursive: true, mode: 493 });
+  const target = import_node_path36.default.join(binDir, "clawd-ssh-jail");
+  import_node_fs35.default.writeFileSync(target, CLAWD_SSH_JAIL_SCRIPT, { mode: 493 });
   return target;
 }
 
 // src/sshd/clawd-shim.ts
-var import_node_fs37 = __toESM(require("fs"), 1);
-var import_node_path38 = __toESM(require("path"), 1);
+var import_node_fs36 = __toESM(require("fs"), 1);
+var import_node_path37 = __toESM(require("path"), 1);
 function shellQuote(s) {
   return `'${s.replace(/'/g, "'\\''")}'`;
 }
@@ -53443,10 +53382,10 @@ exec ${shellQuote(execPath)} ${shellQuote(cliPath)} "$@"
 `;
 }
 function ensureClawdShim(dataDir, execPath, cliPath) {
-  const binDir = import_node_path38.default.join(dataDir, "bin");
-  import_node_fs37.default.mkdirSync(binDir, { recursive: true, mode: 493 });
-  const target = import_node_path38.default.join(binDir, "clawd");
-  import_node_fs37.default.writeFileSync(target, buildClawdShim(execPath, cliPath), { mode: 493 });
+  const binDir = import_node_path37.default.join(dataDir, "bin");
+  import_node_fs36.default.mkdirSync(binDir, { recursive: true, mode: 493 });
+  const target = import_node_path37.default.join(binDir, "clawd");
+  import_node_fs36.default.writeFileSync(target, buildClawdShim(execPath, cliPath), { mode: 493 });
   return target;
 }
 
@@ -53454,7 +53393,7 @@ function ensureClawdShim(dataDir, execPath, cliPath) {
 var SshdManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.sshdDir = import_node_path39.default.join(deps.dataDir, "sshd");
+    this.sshdDir = import_node_path38.default.join(deps.dataDir, "sshd");
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
   deps;
@@ -53473,32 +53412,32 @@ var SshdManager = class {
       ownPid: process.pid,
       logger
     });
-    import_node_fs38.default.mkdirSync(this.sshdDir, { recursive: true, mode: 448 });
-    import_node_fs38.default.mkdirSync(import_node_path39.default.join(this.sshdDir, "authorized_keys.d"), { recursive: true, mode: 448 });
+    import_node_fs37.default.mkdirSync(this.sshdDir, { recursive: true, mode: 448 });
+    import_node_fs37.default.mkdirSync(import_node_path38.default.join(this.sshdDir, "authorized_keys.d"), { recursive: true, mode: 448 });
     ensureJailScript(this.deps.dataDir);
     ensureClawdShim(this.deps.dataDir, process.execPath, process.argv[1] ?? "");
-    const hostKeyPath = import_node_path39.default.join(this.sshdDir, "host_key");
-    if (!import_node_fs38.default.existsSync(hostKeyPath)) {
+    const hostKeyPath = import_node_path38.default.join(this.sshdDir, "host_key");
+    if (!import_node_fs37.default.existsSync(hostKeyPath)) {
       await this.generateHostKey(hostKeyPath);
     }
-    const akFile = import_node_path39.default.join(this.sshdDir, "authorized_keys.d", "clawd-contacts");
-    if (!import_node_fs38.default.existsSync(akFile)) {
-      import_node_fs38.default.writeFileSync(akFile, "", { mode: 384 });
+    const akFile = import_node_path38.default.join(this.sshdDir, "authorized_keys.d", "clawd-contacts");
+    if (!import_node_fs37.default.existsSync(akFile)) {
+      import_node_fs37.default.writeFileSync(akFile, "", { mode: 384 });
     }
-    const configPath = import_node_path39.default.join(this.sshdDir, "sshd_config");
+    const configPath = import_node_path38.default.join(this.sshdDir, "sshd_config");
     const config = buildSshdConfig({
       listenAddress: "127.0.0.1",
       port: this.deps.port,
       hostKeyPath,
       authorizedKeysFile: akFile,
-      pidFilePath: import_node_path39.default.join(this.sshdDir, "sshd.pid")
+      pidFilePath: import_node_path38.default.join(this.sshdDir, "sshd.pid")
     });
-    import_node_fs38.default.writeFileSync(configPath, config, { mode: 384 });
+    import_node_fs37.default.writeFileSync(configPath, config, { mode: 384 });
     const sshdBin = this.deps.sshdBin ?? "/usr/sbin/sshd";
     const proc = (this.deps.spawnImpl ?? import_node_child_process11.spawn)(sshdBin, ["-D", "-e", "-f", configPath], {
       stdio: ["ignore", "pipe", "pipe"]
     });
-    const logStream = import_node_fs38.default.createWriteStream(import_node_path39.default.join(this.sshdDir, "sshd.log"), {
+    const logStream = import_node_fs37.default.createWriteStream(import_node_path38.default.join(this.sshdDir, "sshd.log"), {
       flags: "a",
       mode: 384
     });
@@ -53591,7 +53530,7 @@ ${tail}` : ready.error;
       p2.on("error", reject);
     });
     try {
-      import_node_fs38.default.chmodSync(hostKeyPath, 384);
+      import_node_fs37.default.chmodSync(hostKeyPath, 384);
     } catch {
     }
   }
@@ -53634,17 +53573,17 @@ async function waitForSshdReady(proc, timeoutMs) {
 }
 
 // src/sshd/authorized-keys.ts
-var import_node_fs39 = __toESM(require("fs"), 1);
-var import_node_path40 = __toESM(require("path"), 1);
+var import_node_fs38 = __toESM(require("fs"), 1);
+var import_node_path39 = __toESM(require("path"), 1);
 var JAIL_BIN_PATH_ENV = "CLAWD_JAIL_BIN_PATH";
 var AUTHORIZED_KEYS_FILE = "clawd-contacts";
 function jailBinPath() {
-  return process.env[JAIL_BIN_PATH_ENV] ?? import_node_path40.default.join(process.env.HOME ?? "", ".clawd", "bin", "clawd-ssh-jail");
+  return process.env[JAIL_BIN_PATH_ENV] ?? import_node_path39.default.join(process.env.HOME ?? "", ".clawd", "bin", "clawd-ssh-jail");
 }
 function rebuildAuthorizedKeys(store, sshdDir) {
-  const akDir = import_node_path40.default.join(sshdDir, "authorized_keys.d");
-  const target = import_node_path40.default.join(akDir, AUTHORIZED_KEYS_FILE);
-  import_node_fs39.default.mkdirSync(akDir, { recursive: true, mode: 448 });
+  const akDir = import_node_path39.default.join(sshdDir, "authorized_keys.d");
+  const target = import_node_path39.default.join(akDir, AUTHORIZED_KEYS_FILE);
+  import_node_fs38.default.mkdirSync(akDir, { recursive: true, mode: 448 });
   const lines = ["# managed by clawd; do not edit", ""];
   for (const c of store.list()) {
     if (!c.sshAllowed) continue;
@@ -53658,28 +53597,28 @@ function rebuildAuthorizedKeys(store, sshdDir) {
   }
   const body = lines.join("\n") + "\n";
   const tmp = `${target}.tmp-${process.pid}-${Date.now()}`;
-  import_node_fs39.default.writeFileSync(tmp, body, { mode: 384 });
-  import_node_fs39.default.renameSync(tmp, target);
+  import_node_fs38.default.writeFileSync(tmp, body, { mode: 384 });
+  import_node_fs38.default.renameSync(tmp, target);
 }
 function readIssuedPubkey(sshdDir, deviceId) {
   const safeId = deviceId.replace(/[\/\\]/g, "_");
-  const p2 = import_node_path40.default.join(sshdDir, "keys", `${safeId}.ed25519.pub`);
+  const p2 = import_node_path39.default.join(sshdDir, "keys", `${safeId}.ed25519.pub`);
   try {
-    return import_node_fs39.default.readFileSync(p2, "utf8");
+    return import_node_fs38.default.readFileSync(p2, "utf8");
   } catch {
     return null;
   }
 }
 
 // src/sshd/contact-key-puller.ts
-var import_node_fs41 = __toESM(require("fs"), 1);
-var import_node_path42 = __toESM(require("path"), 1);
+var import_node_fs40 = __toESM(require("fs"), 1);
+var import_node_path41 = __toESM(require("path"), 1);
 init_peer_forward();
 init_contact_ssh_log();
 var CONTACT_KEYS_DIR = "contact-ssh-keys";
 function safeContactKeyPath(dataDir, deviceId) {
   const safeId = deviceId.replace(/[\/\\]/g, "_");
-  return import_node_path42.default.join(dataDir, CONTACT_KEYS_DIR, `${safeId}.ed25519`);
+  return import_node_path41.default.join(dataDir, CONTACT_KEYS_DIR, `${safeId}.ed25519`);
 }
 async function pullContactSshKeyOnce(deps) {
   const forward = deps.forwardImpl ?? ((c) => forwardContactSshKeyIssueToPeer({
@@ -53745,12 +53684,12 @@ async function pullContactSshKeyOnce(deps) {
 }
 function writeKeyFile(dataDir, deviceId, pem) {
   const p2 = safeContactKeyPath(dataDir, deviceId);
-  import_node_fs41.default.mkdirSync(import_node_path42.default.dirname(p2), { recursive: true, mode: 448 });
-  import_node_fs41.default.writeFileSync(p2, pem, { mode: 384 });
+  import_node_fs40.default.mkdirSync(import_node_path41.default.dirname(p2), { recursive: true, mode: 448 });
+  import_node_fs40.default.writeFileSync(p2, pem, { mode: 384 });
 }
 function removeKeyFile(dataDir, deviceId) {
   try {
-    import_node_fs41.default.unlinkSync(safeContactKeyPath(dataDir, deviceId));
+    import_node_fs40.default.unlinkSync(safeContactKeyPath(dataDir, deviceId));
     return true;
   } catch {
     return false;
@@ -53900,27 +53839,27 @@ init_contact_ssh_log();
 
 // src/tunnel/device-key.ts
 var import_node_os14 = __toESM(require("os"), 1);
-var import_node_path43 = __toESM(require("path"), 1);
+var import_node_path42 = __toESM(require("path"), 1);
 var import_node_crypto11 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os14.default.hostname();
   const uid = opts.uid ?? (typeof import_node_os14.default.userInfo === "function" ? import_node_os14.default.userInfo().uid : 0);
   const home = opts.home ?? import_node_os14.default.homedir();
-  const defaultDataDir = import_node_path43.default.resolve(import_node_path43.default.join(home, ".clawd"));
-  const normalizedDataDir = opts.dataDir ? import_node_path43.default.resolve(opts.dataDir) : null;
+  const defaultDataDir = import_node_path42.default.resolve(import_node_path42.default.join(home, ".clawd"));
+  const normalizedDataDir = opts.dataDir ? import_node_path42.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
   return import_node_crypto11.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
-var import_node_fs42 = __toESM(require("fs"), 1);
-var import_node_path44 = __toESM(require("path"), 1);
+var import_node_fs41 = __toESM(require("fs"), 1);
+var import_node_path43 = __toESM(require("path"), 1);
 var import_node_crypto12 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path44.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path43.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -53956,7 +53895,7 @@ function defaultGenerateOwnerPrincipalId() {
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs42.default.readFileSync(file, "utf8");
+    const raw = import_node_fs41.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -53976,25 +53915,25 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs42.default.mkdirSync(import_node_path44.default.dirname(file), { recursive: true });
-  import_node_fs42.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs41.default.mkdirSync(import_node_path43.default.dirname(file), { recursive: true });
+  import_node_fs41.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs42.default.chmodSync(file, 384);
+    import_node_fs41.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs43 = __toESM(require("fs"), 1);
+var import_node_fs42 = __toESM(require("fs"), 1);
 var import_node_os15 = __toESM(require("os"), 1);
-var import_node_path45 = __toESM(require("path"), 1);
+var import_node_path44 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function loadOwnerDisplayName(dataDir) {
   const fallback = import_node_os15.default.userInfo().username;
-  const profilePath = import_node_path45.default.join(dataDir, PROFILE_FILENAME);
+  const profilePath = import_node_path44.default.join(dataDir, PROFILE_FILENAME);
   let raw;
   try {
-    raw = import_node_fs43.default.readFileSync(profilePath, "utf8");
+    raw = import_node_fs42.default.readFileSync(profilePath, "utf8");
   } catch {
     return fallback;
   }
@@ -54017,18 +53956,18 @@ function loadOwnerDisplayName(dataDir) {
 }
 
 // src/feishu-auth/owner-identity-store.ts
-var import_node_fs44 = __toESM(require("fs"), 1);
-var import_node_path46 = __toESM(require("path"), 1);
+var import_node_fs43 = __toESM(require("fs"), 1);
+var import_node_path45 = __toESM(require("path"), 1);
 var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
 var OwnerIdentityStore = class {
   file;
   constructor(dataDir) {
-    this.file = import_node_path46.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
+    this.file = import_node_path45.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
   }
   read() {
     let raw;
     try {
-      raw = import_node_fs44.default.readFileSync(this.file, "utf8");
+      raw = import_node_fs43.default.readFileSync(this.file, "utf8");
     } catch {
       return null;
     }
@@ -54056,16 +53995,16 @@ var OwnerIdentityStore = class {
     };
   }
   write(record) {
-    import_node_fs44.default.mkdirSync(import_node_path46.default.dirname(this.file), { recursive: true });
-    import_node_fs44.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
+    import_node_fs43.default.mkdirSync(import_node_path45.default.dirname(this.file), { recursive: true });
+    import_node_fs43.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
     try {
-      import_node_fs44.default.chmodSync(this.file, 384);
+      import_node_fs43.default.chmodSync(this.file, 384);
     } catch {
     }
   }
   clear() {
     try {
-      import_node_fs44.default.unlinkSync(this.file);
+      import_node_fs43.default.unlinkSync(this.file);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -54186,9 +54125,9 @@ var CentralClientError = class extends Error {
   code;
   cause;
 };
-async function centralRequest(opts, path78, init) {
+async function centralRequest(opts, path77, init) {
   const f = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}${path78}`;
+  const url = `${opts.api.replace(/\/+$/, "")}${path77}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
   let res;
@@ -54330,8 +54269,8 @@ function verifyConnectToken(args) {
 }
 
 // src/feishu-auth/server-key.ts
-var fs54 = __toESM(require("fs"), 1);
-var path55 = __toESM(require("path"), 1);
+var fs53 = __toESM(require("fs"), 1);
+var path54 = __toESM(require("path"), 1);
 var FILE_NAME2 = "server-signing-key.json";
 var ServerKeyStore = class {
   constructor(dataDir) {
@@ -54339,12 +54278,12 @@ var ServerKeyStore = class {
   }
   dataDir;
   filePath() {
-    return path55.join(this.dataDir, FILE_NAME2);
+    return path54.join(this.dataDir, FILE_NAME2);
   }
   /** 读缓存的公钥；无缓存 / 损坏 → null（调用方决定是否触发拉取） */
   read() {
     try {
-      const raw = fs54.readFileSync(this.filePath(), "utf8");
+      const raw = fs53.readFileSync(this.filePath(), "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.publicKeyPem === "string" && parsed.publicKeyPem.includes("PUBLIC KEY")) {
         return parsed.publicKeyPem;
@@ -54359,12 +54298,12 @@ var ServerKeyStore = class {
       publicKeyPem,
       fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    fs54.mkdirSync(this.dataDir, { recursive: true });
-    fs54.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
+    fs53.mkdirSync(this.dataDir, { recursive: true });
+    fs53.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
   }
   clear() {
     try {
-      fs54.unlinkSync(this.filePath());
+      fs53.unlinkSync(this.filePath());
     } catch {
     }
   }
@@ -54377,12 +54316,12 @@ init_protocol();
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs45 = __toESM(require("fs"), 1);
+var import_node_fs44 = __toESM(require("fs"), 1);
 var import_node_os16 = __toESM(require("os"), 1);
-var import_node_path47 = __toESM(require("path"), 1);
+var import_node_path46 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs45.default.readFileSync(file, "utf8");
+  const raw = import_node_fs44.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -54395,10 +54334,10 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path47.default.join(import_node_os16.default.homedir(), ".claude");
-  const projectDir = import_node_path47.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  const sourceFile = import_node_path47.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs45.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path46.default.join(import_node_os16.default.homedir(), ".claude");
+  const projectDir = import_node_path46.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  const sourceFile = import_node_path46.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs44.default.existsSync(sourceFile)) {
     throw new Error(`fork: source transcript not found: ${sourceFile}`);
   }
   const entries = readJsonlEntries(sourceFile);
@@ -54428,9 +54367,9 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const forkedFilePath = import_node_path47.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs45.default.mkdirSync(projectDir, { recursive: true });
-  import_node_fs45.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const forkedFilePath = import_node_path46.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs44.default.mkdirSync(projectDir, { recursive: true });
+  import_node_fs44.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
@@ -54782,7 +54721,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path58 = __toESM(require("path"), 1);
+var path57 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -54800,7 +54739,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path57 = __toESM(require("path"), 1);
+var path56 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -54813,42 +54752,42 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read", userWorkDir) {
-  const target = path57.resolve(absPath);
+  const target = path56.resolve(absPath);
   if (userWorkDir) {
-    const u = path57.resolve(userWorkDir);
-    const usep = u.endsWith(path57.sep) ? "" : path57.sep;
+    const u = path56.resolve(userWorkDir);
+    const usep = u.endsWith(path56.sep) ? "" : path56.sep;
     if (target === u || target.startsWith(u + usep)) return true;
   }
-  const root = path57.resolve(personaRoot);
-  const sep3 = root.endsWith(path57.sep) ? "" : path57.sep;
+  const root = path56.resolve(personaRoot);
+  const sep3 = root.endsWith(path56.sep) ? "" : path56.sep;
   if (!target.startsWith(root + sep3)) return false;
-  const rel = path57.relative(root, target);
+  const rel = path56.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId = rel.split(path57.sep)[0];
+  const personaId = rel.split(path56.sep)[0];
   if (!personaId) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path57.resolve(personaRoot);
-  const target = path57.resolve(absPath);
-  const sep3 = root.endsWith(path57.sep) ? "" : path57.sep;
+  const root = path56.resolve(personaRoot);
+  const target = path56.resolve(absPath);
+  const sep3 = root.endsWith(path56.sep) ? "" : path56.sep;
   if (!target.startsWith(root + sep3)) return null;
-  const rel = path57.relative(root, target);
+  const rel = path56.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path57.sep)[0];
+  const id = rel.split(path56.sep)[0];
   return id || null;
 }
 function isPathWithin(dir, absPath) {
-  const d = path57.resolve(dir);
-  const t = path57.resolve(absPath);
-  const sep3 = d.endsWith(path57.sep) ? "" : path57.sep;
+  const d = path56.resolve(dir);
+  const t = path56.resolve(absPath);
+  const sep3 = d.endsWith(path56.sep) ? "" : path56.sep;
   return t === d || t.startsWith(d + sep3);
 }
 function isPathInGuestBoundary(personaRoot, personaId, userWorkDir, absPath) {
   if (userWorkDir && isPathWithin(userWorkDir, absPath)) return true;
-  return personaIdFromPath(path57.resolve(absPath), personaRoot) === personaId;
+  return personaIdFromPath(path56.resolve(absPath), personaRoot) === personaId;
 }
 
 // src/handlers/history.ts
@@ -54874,7 +54813,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path58.join(personaRoot, pid),
+          path57.join(personaRoot, pid),
           personaRoot,
           "read",
           userWorkDir
@@ -54886,7 +54825,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path58.resolve(args.projectPath), personaRoot, "history:list");
+    assertGuestPath(ctx, path57.resolve(args.projectPath), personaRoot, "history:list");
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -54918,13 +54857,13 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path58.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
+    assertGuestPath(ctx, path57.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
     const subs = await history.listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path58.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
+    assertGuestPath(ctx, path57.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
     const res = await history.readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
   };
@@ -54933,7 +54872,7 @@ function buildHistoryHandlers(deps) {
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path58.resolve(d.cwd), personaRoot, "read", userWorkDir)
+        (d) => isGuestPathAllowed(ctx.grants, path57.resolve(d.cwd), personaRoot, "read", userWorkDir)
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -54950,7 +54889,7 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path59 = __toESM(require("path"), 1);
+var path58 = __toESM(require("path"), 1);
 var os16 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
@@ -54992,22 +54931,22 @@ function buildWorkspaceHandlers(deps) {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
     const fallbackCwd = isGuest && personaRoot ? personaRoot : os16.homedir();
-    const resolvedCwd = path59.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path59.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const resolvedCwd = path58.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path58.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list", usersRoot);
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path59.isAbsolute(args.path) ? path59.resolve(args.path) : path59.resolve(args.cwd, args.path);
+    const target = path58.isAbsolute(args.path) ? path58.resolve(args.path) : path58.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read", usersRoot);
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path59.resolve(args.cwd);
+    const cwdAbs = path58.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list", usersRoot);
     const list2 = await getSkillsForTool(args.tool ?? "claude", cwdAbs);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -55019,7 +54958,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path59.resolve(args.cwd);
+    const cwdAbs = path58.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list", usersRoot);
     if (args.tool === "codex") {
       return { response: { type: "agents:list", agents: [] } };
@@ -55041,20 +54980,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path61 = __toESM(require("path"), 1);
+var path60 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process12 = require("child_process");
-var import_node_fs46 = __toESM(require("fs"), 1);
-var import_node_path48 = __toESM(require("path"), 1);
+var import_node_fs45 = __toESM(require("fs"), 1);
+var import_node_path47 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process12.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path48.default.resolve(p2);
+  const resolved = import_node_path47.default.resolve(p2);
   try {
-    return import_node_fs46.default.realpathSync(resolved);
+    return import_node_fs45.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -55128,7 +55067,7 @@ async function listGitBranches(cwd) {
 function assertGuestCwd(ctx, cwd, personaRoot, method, usersRoot) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
   const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
-  if (!isGuestPathAllowed(ctx.grants, path61.resolve(cwd), personaRoot, "read", userWorkDir)) {
+  if (!isGuestPathAllowed(ctx.grants, path60.resolve(cwd), personaRoot, "read", userWorkDir)) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -55469,22 +55408,22 @@ init_src();
 init_protocol();
 
 // src/sshd/key-issue.ts
-var import_node_fs47 = __toESM(require("fs"), 1);
-var import_node_path49 = __toESM(require("path"), 1);
+var import_node_fs46 = __toESM(require("fs"), 1);
+var import_node_path48 = __toESM(require("path"), 1);
 var import_node_child_process13 = require("child_process");
 function safeDeviceId(deviceId) {
   return deviceId.replace(/[\/\\]/g, "_");
 }
 async function issueContactSshKey(deviceId, sshdDir, opts = {}) {
   const safeId = safeDeviceId(deviceId);
-  const keysDir = import_node_path49.default.join(sshdDir, "keys");
-  import_node_fs47.default.mkdirSync(keysDir, { recursive: true, mode: 448 });
-  const privPath = import_node_path49.default.join(keysDir, `${safeId}.ed25519`);
+  const keysDir = import_node_path48.default.join(sshdDir, "keys");
+  import_node_fs46.default.mkdirSync(keysDir, { recursive: true, mode: 448 });
+  const privPath = import_node_path48.default.join(keysDir, `${safeId}.ed25519`);
   const pubPath = `${privPath}.pub`;
-  if (import_node_fs47.default.existsSync(privPath) && import_node_fs47.default.existsSync(pubPath)) {
+  if (import_node_fs46.default.existsSync(privPath) && import_node_fs46.default.existsSync(pubPath)) {
     return {
-      privateKeyPem: import_node_fs47.default.readFileSync(privPath, "utf8"),
-      publicKeyLine: import_node_fs47.default.readFileSync(pubPath, "utf8").trim()
+      privateKeyPem: import_node_fs46.default.readFileSync(privPath, "utf8"),
+      publicKeyLine: import_node_fs46.default.readFileSync(pubPath, "utf8").trim()
     };
   }
   const bin = opts.keygenBin ?? "/usr/bin/ssh-keygen";
@@ -55498,16 +55437,16 @@ async function issueContactSshKey(deviceId, sshdDir, opts = {}) {
     p2.on("error", reject);
   });
   try {
-    import_node_fs47.default.chmodSync(privPath, 384);
+    import_node_fs46.default.chmodSync(privPath, 384);
   } catch {
   }
   try {
-    import_node_fs47.default.chmodSync(pubPath, 420);
+    import_node_fs46.default.chmodSync(pubPath, 420);
   } catch {
   }
   return {
-    privateKeyPem: import_node_fs47.default.readFileSync(privPath, "utf8"),
-    publicKeyLine: import_node_fs47.default.readFileSync(pubPath, "utf8").trim()
+    privateKeyPem: import_node_fs46.default.readFileSync(privPath, "utf8"),
+    publicKeyLine: import_node_fs46.default.readFileSync(pubPath, "utf8").trim()
   };
 }
 
@@ -55927,7 +55866,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path50 = __toESM(require("path"), 1);
+var import_node_path49 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -56007,12 +55946,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path50.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path50.default.isAbsolute(args.relPath) ? import_node_path50.default.resolve(args.relPath) : import_node_path50.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path49.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path49.default.isAbsolute(args.relPath) ? import_node_path49.default.resolve(args.relPath) : import_node_path49.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.signUrl", "group-acl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path50.default.isAbsolute(e.relPath) ? import_node_path50.default.resolve(e.relPath) : import_node_path50.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path49.default.isAbsolute(e.relPath) ? import_node_path49.default.resolve(e.relPath) : import_node_path49.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -56037,7 +55976,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path50.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
+    assertGuestAttachmentPath(ctx, import_node_path49.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -56052,8 +55991,8 @@ function buildAttachmentHandlers(deps) {
     if (!scope) {
       throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, `session ${args.sessionId} not found`);
     }
-    const cwdAbs = import_node_path50.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
-    const candidateAbs = import_node_path50.default.isAbsolute(args.relPath) ? import_node_path50.default.resolve(args.relPath) : import_node_path50.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path49.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
+    const candidateAbs = import_node_path49.default.isAbsolute(args.relPath) ? import_node_path49.default.resolve(args.relPath) : import_node_path49.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.groupAdd", "cwd-subtree");
     const from = ctx?.principal.kind === "owner" ? "owner" : "agent";
     const size = 0;
@@ -56112,20 +56051,20 @@ function buildAttachmentHandlers(deps) {
 
 // src/handlers/extension.ts
 var import_promises8 = __toESM(require("fs/promises"), 1);
-var import_node_path55 = __toESM(require("path"), 1);
+var import_node_path54 = __toESM(require("path"), 1);
 init_protocol();
 init_src();
 
 // src/extension/bundle-zip.ts
 var import_promises5 = __toESM(require("fs/promises"), 1);
-var import_node_path51 = __toESM(require("path"), 1);
+var import_node_path50 = __toESM(require("path"), 1);
 var import_node_crypto14 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
   const zip = new import_jszip2.default();
   for (const rel of entries) {
-    const abs = import_node_path51.default.join(dir, rel);
+    const abs = import_node_path50.default.join(dir, rel);
     const content = await import_promises5.default.readFile(abs);
     zip.file(rel, content, { date: FIXED_DATE });
   }
@@ -56146,7 +56085,7 @@ async function listFilesSorted(rootDir) {
   return out;
 }
 async function walk(absRoot, relPrefix, out) {
-  const dirAbs = import_node_path51.default.join(absRoot, relPrefix);
+  const dirAbs = import_node_path50.default.join(absRoot, relPrefix);
   const entries = await import_promises5.default.readdir(dirAbs, { withFileTypes: true });
   for (const e of entries) {
     if (IGNORE_BASENAMES.has(e.name)) continue;
@@ -56202,7 +56141,7 @@ function computePublishCheck(args) {
 
 // src/extension/install-flow.ts
 var import_promises6 = __toESM(require("fs/promises"), 1);
-var import_node_path53 = __toESM(require("path"), 1);
+var import_node_path52 = __toESM(require("path"), 1);
 var import_node_os19 = __toESM(require("os"), 1);
 var import_node_crypto15 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
@@ -56210,19 +56149,19 @@ init_src();
 
 // src/extension/paths.ts
 var import_node_os18 = __toESM(require("os"), 1);
-var import_node_path52 = __toESM(require("path"), 1);
+var import_node_path51 = __toESM(require("path"), 1);
 init_src();
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path52.default.join(import_node_os18.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path51.default.join(import_node_os18.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
-  return import_node_path52.default.join(clawdHomeRoot(override), "extensions");
+  return import_node_path51.default.join(clawdHomeRoot(override), "extensions");
 }
 function publishedChannelsFile(override) {
-  return import_node_path52.default.join(clawdHomeRoot(override), "extensions-published.json");
+  return import_node_path51.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
 function bundleCacheRoot(override) {
-  return import_node_path52.default.join(clawdHomeRoot(override), "extension-bundles");
+  return import_node_path51.default.join(clawdHomeRoot(override), "extension-bundles");
 }
 
 // src/extension/install-flow.ts
@@ -56249,7 +56188,7 @@ async function installFromChannel(args, deps) {
     throw new InstallError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path53.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path52.default.isAbsolute(name)) {
       throw new InstallError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -56281,7 +56220,7 @@ async function installFromChannel(args, deps) {
     );
   }
   const localExtId = namespacedExtId(ownerSlug, channelRef.ownerPrincipalId);
-  const destDir = import_node_path53.default.join(deps.extensionsRoot, localExtId);
+  const destDir = import_node_path52.default.join(deps.extensionsRoot, localExtId);
   let destExists = false;
   try {
     await import_promises6.default.access(destDir);
@@ -56295,16 +56234,16 @@ async function installFromChannel(args, deps) {
     );
   }
   const stage = await import_promises6.default.mkdtemp(
-    import_node_path53.default.join(import_node_os19.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+    import_node_path52.default.join(import_node_os19.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path53.default.join(stage, name);
+      const dest = import_node_path52.default.join(stage, name);
       if (entry.dir) {
         await import_promises6.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises6.default.mkdir(import_node_path53.default.dirname(dest), { recursive: true });
+      await import_promises6.default.mkdir(import_node_path52.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises6.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -56325,7 +56264,7 @@ async function installFromChannel(args, deps) {
 
 // src/extension/update-flow.ts
 var import_promises7 = __toESM(require("fs/promises"), 1);
-var import_node_path54 = __toESM(require("path"), 1);
+var import_node_path53 = __toESM(require("path"), 1);
 var import_node_os20 = __toESM(require("os"), 1);
 var import_node_crypto16 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
@@ -56343,11 +56282,11 @@ async function updateFromChannel(args, deps) {
     channelRef.extId,
     channelRef.ownerPrincipalId
   );
-  const liveDir = import_node_path54.default.join(deps.extensionsRoot, localExtId);
+  const liveDir = import_node_path53.default.join(deps.extensionsRoot, localExtId);
   const prevDir = `${liveDir}.prev`;
   let existingVersion;
   try {
-    const raw = await import_promises7.default.readFile(import_node_path54.default.join(liveDir, "manifest.json"), "utf8");
+    const raw = await import_promises7.default.readFile(import_node_path53.default.join(liveDir, "manifest.json"), "utf8");
     const parsed2 = ExtensionManifestSchema.safeParse(JSON.parse(raw));
     if (!parsed2.success) {
       throw new UpdateError(
@@ -56380,7 +56319,7 @@ async function updateFromChannel(args, deps) {
     throw new UpdateError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path54.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path53.default.isAbsolute(name)) {
       throw new UpdateError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -56415,16 +56354,16 @@ async function updateFromChannel(args, deps) {
   await import_promises7.default.rm(prevDir, { recursive: true, force: true });
   await import_promises7.default.rename(liveDir, prevDir);
   const stage = await import_promises7.default.mkdtemp(
-    import_node_path54.default.join(import_node_os20.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+    import_node_path53.default.join(import_node_os20.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path54.default.join(stage, name);
+      const dest = import_node_path53.default.join(stage, name);
       if (entry.dir) {
         await import_promises7.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises7.default.mkdir(import_node_path54.default.dirname(dest), { recursive: true });
+      await import_promises7.default.mkdir(import_node_path53.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises7.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -56518,7 +56457,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
       );
     }
   }
-  const manifestPath = import_node_path55.default.join(root, extId, "manifest.json");
+  const manifestPath = import_node_path54.default.join(root, extId, "manifest.json");
   const manifest = await readManifest(root, extId);
   const next = { ...manifest, version: newVersion };
   const tmp = `${manifestPath}.tmp`;
@@ -56526,7 +56465,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
   await import_promises8.default.rename(tmp, manifestPath);
 }
 async function readManifest(root, extId) {
-  const file = import_node_path55.default.join(root, extId, "manifest.json");
+  const file = import_node_path54.default.join(root, extId, "manifest.json");
   let raw;
   try {
     raw = await import_promises8.default.readFile(file, "utf8");
@@ -56617,7 +56556,7 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256, buffer } = await bundleExtensionDir(import_node_path55.default.join(deps.root, extId));
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path54.default.join(deps.root, extId));
     return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
@@ -56798,9 +56737,9 @@ function buildExtensionHandlers(deps) {
 }
 
 // src/app-builder/project-store.ts
-var import_node_fs48 = require("fs");
+var import_node_fs47 = require("fs");
 var import_node_child_process14 = require("child_process");
-var import_node_path56 = require("path");
+var import_node_path55 = require("path");
 init_protocol();
 var PROJECTS_DIR = "projects";
 var META_FILE = ".clawd-project.json";
@@ -56814,19 +56753,19 @@ var ProjectStore = class {
   root;
   /** projects/<name>/.clawd-project.json 路径 */
   metaPath(name) {
-    return (0, import_node_path56.join)(this.projectsRoot(), name, META_FILE);
+    return (0, import_node_path55.join)(this.projectsRoot(), name, META_FILE);
   }
   /** projects/<name>/ 目录路径（cwd 用） */
   projectDir(name) {
-    return (0, import_node_path56.join)(this.projectsRoot(), name);
+    return (0, import_node_path55.join)(this.projectsRoot(), name);
   }
   projectsRoot() {
-    return (0, import_node_path56.join)(this.root, PROJECTS_DIR);
+    return (0, import_node_path55.join)(this.root, PROJECTS_DIR);
   }
   async list() {
     let entries;
     try {
-      entries = await import_node_fs48.promises.readdir(this.projectsRoot());
+      entries = await import_node_fs47.promises.readdir(this.projectsRoot());
     } catch (err) {
       if (err.code === "ENOENT") return [];
       throw err;
@@ -56834,7 +56773,7 @@ var ProjectStore = class {
     const out = [];
     for (const name of entries) {
       try {
-        const raw = await import_node_fs48.promises.readFile(this.metaPath(name), "utf8");
+        const raw = await import_node_fs47.promises.readFile(this.metaPath(name), "utf8");
         const json = JSON.parse(raw);
         let migrated = false;
         if (typeof json.devCommand !== "string" || json.devCommand.length === 0) {
@@ -56845,7 +56784,7 @@ var ProjectStore = class {
         if (parsed.success) {
           out.push(parsed.data);
           if (migrated) {
-            void import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
+            void import_node_fs47.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
             });
           }
         }
@@ -56889,8 +56828,8 @@ var ProjectStore = class {
       throw new Error(`invalid name "${name}": ${validated.error.message}`);
     }
     const dir = this.projectDir(name);
-    await import_node_fs48.promises.mkdir(dir, { recursive: true });
-    await import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
+    await import_node_fs47.promises.mkdir(dir, { recursive: true });
+    await import_node_fs47.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
     return meta;
   }
   /**
@@ -56933,7 +56872,7 @@ var ProjectStore = class {
   }
   async delete(name) {
     const dir = this.projectDir(name);
-    await import_node_fs48.promises.rm(dir, { recursive: true, force: true });
+    await import_node_fs47.promises.rm(dir, { recursive: true, force: true });
   }
   async updatePort(name, newPort) {
     if (newPort < PROJECT_PORT_MIN || newPort > PROJECT_PORT_MAX) {
@@ -56949,7 +56888,7 @@ var ProjectStore = class {
       throw new Error(`port ${newPort} already used / \u5DF2\u88AB project "${conflict.name}" \u5360\u7528`);
     }
     const updated = { ...target, port: newPort };
-    await import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
+    await import_node_fs47.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
     return updated;
   }
   /**
@@ -56966,7 +56905,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`invalid prodUrl "${url}": ${validated.error.message}`);
     }
-    await import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs47.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
   /**
@@ -56987,7 +56926,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`invalid publishJob: ${validated.error.message}`);
     }
-    await import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs47.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
   /** 清掉 .clawd-project.json.publishJob 字段。其他字段保持原样。 */
@@ -57002,7 +56941,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`failed to clear publishJob: ${validated.error.message}`);
     }
-    await import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs47.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
 };
@@ -57123,8 +57062,8 @@ var PublishJobRegistry = class {
 
 // src/app-builder/publish-job-runner.ts
 var import_node_child_process16 = require("child_process");
-var import_node_fs49 = require("fs");
-var import_node_path57 = require("path");
+var import_node_fs48 = require("fs");
+var import_node_path56 = require("path");
 
 // src/app-builder/publish-stage-parser.ts
 var STAGE_RE = /^\s*::stage::(build|deploy|verify)\s*$/;
@@ -57156,10 +57095,10 @@ async function startPublishJob(deps, args) {
     return { jobId: registry2.get(args.name).jobId, status: "already-publishing" };
   }
   const projDir = projectDir(args.name);
-  const logPath = (0, import_node_path57.join)(projDir, ".publish.log");
+  const logPath = (0, import_node_path56.join)(projDir, ".publish.log");
   let logStream = null;
   try {
-    logStream = (0, import_node_fs49.createWriteStream)(logPath, { flags: "w" });
+    logStream = (0, import_node_fs48.createWriteStream)(logPath, { flags: "w" });
   } catch {
     logStream = null;
   }
@@ -57416,8 +57355,8 @@ async function recoverInterruptedJobs(deps) {
 
 // src/handlers/app-builder.ts
 init_protocol();
-var import_node_path58 = require("path");
-var import_node_fs50 = require("fs");
+var import_node_path57 = require("path");
+var import_node_fs49 = require("fs");
 var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
 var DEV_SERVER_READY_TIMEOUT_MS = 3e4;
 async function recoverInterruptedPublishJobs(store, logger) {
@@ -57498,7 +57437,7 @@ function buildAppBuilderHandlers(deps) {
   async function listAllUsersProjects() {
     if (!deps.usersRoot || !deps.getStore) return [];
     const getStore = deps.getStore;
-    const userIds = await import_node_fs50.promises.readdir(deps.usersRoot).catch(() => []);
+    const userIds = await import_node_fs49.promises.readdir(deps.usersRoot).catch(() => []);
     const perUser = await Promise.all(
       userIds.map((uid) => getStore(uid).list().catch(() => []))
     );
@@ -57574,8 +57513,8 @@ function buildAppBuilderHandlers(deps) {
     const project = await userStore.create(f.name, reservedPorts);
     try {
       const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(session.ownerPersonaId ?? "") : deps.personaRoot;
-      const templateSrcDir = (0, import_node_path58.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE);
-      const scaffoldScript = (0, import_node_path58.join)(deps.deployKitRoot, "scripts", "new-extension.sh");
+      const templateSrcDir = (0, import_node_path57.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE);
+      const scaffoldScript = (0, import_node_path57.join)(deps.deployKitRoot, "scripts", "new-extension.sh");
       const scaffoldResult = await userStore.scaffold(project.name, templateSrcDir, scaffoldScript);
       deps.logger?.info("app-builder.scaffold.done", {
         name: project.name,
@@ -57796,7 +57735,7 @@ function buildAppBuilderHandlers(deps) {
       await userStore.clearPublishJob(args.name);
     }
     const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(boundSession.ownerPersonaId ?? "") : deps.personaRoot;
-    const scriptPath = (0, import_node_path58.join)(deps.deployKitRoot, "scripts", "publish.sh");
+    const scriptPath = (0, import_node_path57.join)(deps.deployKitRoot, "scripts", "publish.sh");
     deps.logger?.info("app-builder.publish.start", {
       name: args.name,
       sessionId: boundSession.sessionId,
@@ -57965,7 +57904,7 @@ function buildVisitorHandlers(deps) {
 
 // src/extension/registry.ts
 var import_promises9 = __toESM(require("fs/promises"), 1);
-var import_node_path59 = __toESM(require("path"), 1);
+var import_node_path58 = __toESM(require("path"), 1);
 init_src();
 async function loadAll(root) {
   let entries;
@@ -57979,13 +57918,13 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path59.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path58.default.join(root, ent.name), ent.name));
   }
   records.sort((a, b2) => a.extId < b2.extId ? -1 : a.extId > b2.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path59.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path58.default.join(dir, "manifest.json");
   let raw;
   try {
     raw = await import_promises9.default.readFile(manifestPath, "utf8");
@@ -58030,7 +57969,7 @@ async function loadOne(dir, dirName) {
 
 // src/extension/uninstall.ts
 var import_promises10 = __toESM(require("fs/promises"), 1);
-var import_node_path60 = __toESM(require("path"), 1);
+var import_node_path59 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -58039,7 +57978,7 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path60.default.join(deps.root, deps.extId);
+  const dir = import_node_path59.default.join(deps.root, deps.extId);
   try {
     await import_promises10.default.access(dir);
   } catch {
@@ -58623,7 +58562,7 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 
 // src/extension/runtime.ts
 var import_node_child_process18 = require("child_process");
-var import_node_path61 = __toESM(require("path"), 1);
+var import_node_path60 = __toESM(require("path"), 1);
 var import_promises11 = require("timers/promises");
 init_src();
 
@@ -58725,7 +58664,7 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path61.default.join(this.root, extId);
+    const dir = import_node_path60.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
@@ -58837,7 +58776,7 @@ ${handle.stderrTail}`
 
 // src/extension/published-channels.ts
 var import_promises12 = __toESM(require("fs/promises"), 1);
-var import_node_path62 = __toESM(require("path"), 1);
+var import_node_path61 = __toESM(require("path"), 1);
 init_src();
 init_zod();
 var PublishedChannelsError = class extends Error {
@@ -58937,7 +58876,7 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises12.default.mkdir(import_node_path62.default.dirname(this.filePath), { recursive: true });
+    await import_promises12.default.mkdir(import_node_path61.default.dirname(this.filePath), { recursive: true });
     await import_promises12.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
     await import_promises12.default.rename(tmp, this.filePath);
   }
@@ -58945,7 +58884,7 @@ var PublishedChannelStore = class {
 
 // src/extension/bundle-cache.ts
 var import_promises13 = __toESM(require("fs/promises"), 1);
-var import_node_path63 = __toESM(require("path"), 1);
+var import_node_path62 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -58954,14 +58893,14 @@ var BundleCache = class {
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
     await import_promises13.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path63.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path62.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
     await import_promises13.default.writeFile(tmp, buffer, { mode: 384 });
     await import_promises13.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path63.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path62.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
       return await import_promises13.default.readFile(file);
     } catch (e) {
@@ -58971,7 +58910,7 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path63.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path62.default.join(this.rootDir, `${snapshotHash}.zip`);
     await import_promises13.default.rm(file, { force: true });
   }
 };
@@ -58996,16 +58935,16 @@ async function startDaemon(config) {
   });
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path64.default.join(config.dataDir, "clawd.log"),
+    file: import_node_path63.default.join(config.dataDir, "clawd.log"),
     logClient
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const screenIdleProbeLogger = createFileOnlyLogger({
-    file: import_node_path64.default.join(config.dataDir, "screen-idle-probe.log"),
+    file: import_node_path63.default.join(config.dataDir, "screen-idle-probe.log"),
     level: "debug"
   });
   logger.info("screen-idle probe logger enabled", {
-    file: import_node_path64.default.join(config.dataDir, "screen-idle-probe.log")
+    file: import_node_path63.default.join(config.dataDir, "screen-idle-probe.log")
   });
   const stateMgr = new StateFileManager({ dataDir: config.dataDir });
   const pre = stateMgr.preflight();
@@ -59143,8 +59082,8 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path64.default.join(config.dataDir, "personas"));
-  const usersRoot = import_node_path64.default.join(config.dataDir, "users");
+  const personaStore = new PersonaStore(import_node_path63.default.join(config.dataDir, "personas"));
+  const usersRoot = import_node_path63.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -59164,17 +59103,17 @@ async function startDaemon(config) {
   migrateCodexSandbox({ store: personaStore, logger });
   const groupFileStore = new GroupFileStore({ dataDir: config.dataDir, logger });
   const personaDispatchManager = new PersonaDispatchManager({ genId: () => v4_default() });
-  const here = typeof __dirname === "string" ? __dirname : import_node_path64.default.dirname((0, import_node_url4.fileURLToPath)(import_meta6.url));
+  const here = typeof __dirname === "string" ? __dirname : import_node_path63.default.dirname((0, import_node_url4.fileURLToPath)(import_meta6.url));
   const dispatchServerCandidates = [
-    import_node_path64.default.join(here, "dispatch", "mcp-server.cjs"),
+    import_node_path63.default.join(here, "dispatch", "mcp-server.cjs"),
     // 生产 dist/index → dist/dispatch/mcp-server.cjs
-    import_node_path64.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
+    import_node_path63.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
-  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
+  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs50.default.existsSync(p2));
   let dispatchMcpConfigPath2;
   if (dispatchServerScriptPath) {
-    const dispatchLogPath = import_node_path64.default.join(config.dataDir, "dispatch-mcp-server.log");
+    const dispatchLogPath = import_node_path63.default.join(config.dataDir, "dispatch-mcp-server.log");
     dispatchMcpConfigPath2 = writeDispatchMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: dispatchServerScriptPath,
@@ -59191,15 +59130,15 @@ async function startDaemon(config) {
     });
   }
   const ticketServerCandidates = [
-    import_node_path64.default.join(here, "ticket", "mcp-server.cjs"),
-    import_node_path64.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
+    import_node_path63.default.join(here, "ticket", "mcp-server.cjs"),
+    import_node_path63.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
-  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
+  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs50.default.existsSync(p2));
   const ticketOwnerUnionId = feishuIdentity?.identity.unionId ?? "";
   const ticketOwnerName = feishuIdentity?.identity.displayName ?? "";
   let ticketMcpConfigPath2;
   if (ticketServerScriptPath && ticketOwnerUnionId) {
-    const ticketLogPath = import_node_path64.default.join(config.dataDir, "ticket-mcp-server.log");
+    const ticketLogPath = import_node_path63.default.join(config.dataDir, "ticket-mcp-server.log");
     ticketMcpConfigPath2 = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
@@ -59220,13 +59159,13 @@ async function startDaemon(config) {
     });
   }
   const shiftServerCandidates = [
-    import_node_path64.default.join(here, "shift", "mcp-server.cjs"),
-    import_node_path64.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
+    import_node_path63.default.join(here, "shift", "mcp-server.cjs"),
+    import_node_path63.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
-  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
+  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs50.default.existsSync(p2));
   let shiftMcpConfigPath2;
   if (shiftServerScriptPath) {
-    const shiftLogPath = import_node_path64.default.join(config.dataDir, "shift-mcp-server.log");
+    const shiftLogPath = import_node_path63.default.join(config.dataDir, "shift-mcp-server.log");
     shiftMcpConfigPath2 = await writeShiftMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: shiftServerScriptPath,
@@ -59244,13 +59183,13 @@ async function startDaemon(config) {
     );
   }
   const inboxServerCandidates = [
-    import_node_path64.default.join(here, "inbox", "mcp-server.cjs"),
-    import_node_path64.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
+    import_node_path63.default.join(here, "inbox", "mcp-server.cjs"),
+    import_node_path63.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
   ];
-  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
+  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs50.default.existsSync(p2));
   let inboxMcpConfigPath2;
   if (inboxServerScriptPath) {
-    const inboxLogPath = import_node_path64.default.join(config.dataDir, "inbox-mcp-server.log");
+    const inboxLogPath = import_node_path63.default.join(config.dataDir, "inbox-mcp-server.log");
     inboxMcpConfigPath2 = await writeInboxMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: inboxServerScriptPath,
@@ -59268,7 +59207,7 @@ async function startDaemon(config) {
     );
   }
   const shiftStore = createShiftStore({
-    filePath: import_node_path64.default.join(config.dataDir, "shift.json"),
+    filePath: import_node_path63.default.join(config.dataDir, "shift.json"),
     ownerIdProvider: () => ownerPrincipalId,
     now: () => Date.now()
   });
@@ -59290,7 +59229,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path64.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path63.default.join(config.dataDir, "personas"),
     usersRoot,
     personaStore,
     ownerDisplayName,
@@ -59333,10 +59272,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path64.default.isAbsolute(input.relPath) ? input.relPath : import_node_path64.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path63.default.isAbsolute(input.relPath) ? input.relPath : import_node_path63.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs51.default.statSync(absPath).size;
+          size = import_node_fs50.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -59535,11 +59474,11 @@ async function startDaemon(config) {
       // 'persona/<pid>/owner'，default 走 'default'。
       getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
       // guest path guard：candidate 必须在 personaRoot 子树或调用者自己的 user-dir 下
-      personaRoot: import_node_path64.default.join(config.dataDir, "personas"),
+      personaRoot: import_node_path63.default.join(config.dataDir, "personas"),
       usersRoot
     },
     // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-    personaRoot: import_node_path64.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path63.default.join(config.dataDir, "personas"),
     // v2 多人 persona 隔离：handler 派生 guest user-dir 放行
     usersRoot,
     // capability:list / delete handler 依赖
@@ -59561,7 +59500,7 @@ async function startDaemon(config) {
     contactStore,
     // <dataDir>/sshd 绝对路径 —— contact-ssh handlers 用它拼 authorized_keys / keys/ 子路径
     // Task 10 会加 SshdManager 起 sshd；handlers wire 提前挂 sshdDir 让 typecheck 过
-    sshdDir: import_node_path64.default.join(config.dataDir, "sshd"),
+    sshdDir: import_node_path63.default.join(config.dataDir, "sshd"),
     contactSshLog: sshLog,
     // inbox:sendDm 用：sessionId → session 出身（复用 attachment 同款 findOwnedSessionScope）
     getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
@@ -59652,11 +59591,11 @@ async function startDaemon(config) {
     // 发布上线脚手架化 (spec 2026-06-03 §5.2):
     // appBuilderPersonaRoot 用于拼 publish.sh 绝对路径（persona-app-builder 安装在
     // dataDir/personas/persona-app-builder 之下，extension-kit/scripts/publish.sh 是相对路径）。
-    appBuilderPersonaRoot: import_node_path64.default.join(config.dataDir, "personas", "persona-app-builder"),
+    appBuilderPersonaRoot: import_node_path63.default.join(config.dataDir, "personas", "persona-app-builder"),
     // 共享 deploy-kit 根：scaffold/publish 脚本骨架 + 阿里云凭证单一真源。
-    deployKitRoot: import_node_path64.default.join(config.dataDir, "deploy-kit"),
+    deployKitRoot: import_node_path63.default.join(config.dataDir, "deploy-kit"),
     // scaffold/publish 按当前 session 的 persona 解析其安装根，让每个 persona 用自己的模板/注入配置。
-    resolvePersonaRoot: (personaId) => import_node_path64.default.join(config.dataDir, "personas", personaId),
+    resolvePersonaRoot: (personaId) => import_node_path63.default.join(config.dataDir, "personas", personaId),
     // 发布上线脚手架化 (spec 2026-06-03 §5.2.2):
     // 复用 SessionManagerDeps.broadcastFrame 同款 dispatch 逻辑 —— runner 调 manager.send
     // 取回 broadcast 帧后逐帧 push 到 transport，跟 manager 自身的 deps 一致。
@@ -59699,7 +59638,7 @@ async function startDaemon(config) {
       }
       let sourceJsonlPath = "(no transcript yet \u2014 operate from the task description alone)";
       if (sourceFile && sourceFile.toolSessionId) {
-        sourceJsonlPath = import_node_path64.default.join(
+        sourceJsonlPath = import_node_path63.default.join(
           import_node_os21.default.homedir(),
           ".claude",
           "projects",
@@ -60029,8 +59968,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path64.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path64.default.join(config.dataDir, "frpc.log")}`
+        `Frpc config: ${import_node_path63.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path63.default.join(config.dataDir, "frpc.log")}`
       ];
       const width = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width + 4);
@@ -60043,8 +59982,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path64.default.join(config.dataDir, "connect.txt");
-        import_node_fs51.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path63.default.join(config.dataDir, "connect.txt");
+        import_node_fs50.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -60078,7 +60017,7 @@ ${bar}
   });
   try {
     await sshdMgr.start();
-    rebuildAuthorizedKeys(contactStore, import_node_path64.default.join(config.dataDir, "sshd"));
+    rebuildAuthorizedKeys(contactStore, import_node_path63.default.join(config.dataDir, "sshd"));
     logger.info("sshd: contact-ssh sandbox ready", { port: config.sshdPort });
   } catch (err) {
     logger.warn("sshd start failed; contact SSH grant will not work until fixed", {
@@ -60146,9 +60085,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path64.default.join(dataDir, "persons");
+  const dir = import_node_path63.default.join(dataDir, "persons");
   try {
-    import_node_fs51.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs50.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }