@clawos-dev/clawd 0.2.240 → 0.2.242

package/dist/cli.cjs

@@ -167,8 +167,8 @@ var init_methods = __esm({
       "contact:pin",
       "contact:remove",
       // ---- contact:setRemoteAccess (远程访问授权，spec 2026-07-16) ----
-      // owner UI 授权 contact 反向操作我的设备（exec + SSH 共用开关 remoteAccessAllowed）。
-      // 详见 protocol/src/contact-ssh.ts.
+      // owner UI 授权 contact 反向操作我的设备（跨设备 exec 开关 remoteAccessAllowed）。
+      // 详见 protocol/src/contact-remote-access.ts.
       "contact:setRemoteAccess",
       // ---- visitor:* (web 访客 · persona web 分享，spec 2026-06-24-persona-web-share-design) ----
       // owner-only：列出登录访问过本机 public persona 的 web 访客（零安装、飞书登录、daemon 自签
@@ -749,8 +749,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path77, errorMaps, issueData } = params;
-      const fullPath = [...path77, ...issueData.path || []];
+      const { data, path: path70, errorMaps, issueData } = params;
+      const fullPath = [...path70, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -1061,11 +1061,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path77, key) {
+      constructor(parent, value, path70, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path77;
+        this._path = path70;
         this._key = key;
       }
       get path() {
@@ -5330,11 +5330,7 @@ var init_schemas = __esm({
        * selfUrl 保留：它只是"可达地址"（auto-reverse 反向连接用），不是身份——填错只影响
        * 反向连通性，不构成伪造风险，且 url 不在 token 里（token 只签身份不签地址）。
        */
-      selfUrl: external_exports.string().min(1).optional(),
-      /** 连接方自报本机 SSH identity pubkey；见 doc/glossary/peer-mesh.md#建联交换清单 */
-      selfSshPublicKey: external_exports.string().min(1).optional(),
-      /** 连接方自报本机 OS 登录账号名；见 doc/glossary/peer-mesh.md#建联交换清单 */
-      selfOsUser: external_exports.string().min(1).optional()
+      selfUrl: external_exports.string().min(1).optional()
     });
     AuthOkFrameSchema = external_exports.object({
       type: external_exports.literal("auth:ok"),
@@ -5657,11 +5653,7 @@ var init_capability = __esm({
           id: external_exports.string().min(1),
           displayName: external_exports.string()
         }).strict()
-      ),
-      /** 被连方 SSH identity pubkey；见 doc/glossary/peer-mesh.md#建联交换清单 */
-      sshPublicKey: external_exports.string().min(1).optional(),
-      /** 被连方 OS 登录账号名；见 doc/glossary/peer-mesh.md#建联交换清单 */
-      osUser: external_exports.string().min(1).optional()
+      )
     }).strict();
     PERSONAL_CAP_GRANTS = Object.freeze([
       Object.freeze({
@@ -5751,22 +5743,10 @@ var init_contact = __esm({
       pinnedAt: external_exports.number().int().nullable().default(null),
       /**
        * 远程访问授权（spec 2026-07-16）。owner 视角：允许该 contact 反向操作我的设备——
-       * 一个开关两种实现：跨设备 exec（peerExec:run handler 判它）+ SSH 反向访问
-       * （rebuildAuthorizedKeys 读它）。default=false，owner 显式开。
+       * 跨设备 exec 的总开关（peerExec:run handler 运行时判它）。default=false，owner 显式开。
        * 授权粒度 per-people (per-contact)：借用别人 persona 本来就带信任对方本人的前提。
        */
-      remoteAccessAllowed: external_exports.boolean().default(false),
-      /** 对端设备 SSH identity pubkey（一行 `ssh-ed25519 AAAA... comment`）；见 doc/glossary/peer-mesh.md#建联交换清单 */
-      sshPublicKey: external_exports.string().optional(),
-      /** 对端 OS 登录账号名，SSH 拨号登录名（`<osUser>@127.0.0.1`）；见 doc/glossary/peer-mesh.md#建联交换清单 */
-      osUser: external_exports.string().optional(),
-      /**
-       * @deprecated T-29 去沙箱后废弃。原为授权访问的目录白名单（clawd-ssh-jail 生成 sbpl/bwrap
-       * policy 用）；去掉 OS 沙箱后不再有目录级限制，远程访问授权即 on/off（见 remoteAccessAllowed）。
-       * 字段仅为兼容老 contacts.json 保留（default [] 保证 strict parse 不炸），不再有代码读写它，
-       * 也不再进 setRemoteAccess RPC / ContactSettingsDrawer / jail。勿新增消费方。
-       */
-      exposedDirs: external_exports.array(external_exports.string()).default([])
+      remoteAccessAllowed: external_exports.boolean().default(false)
     }).strict();
     ContactWireSchema = ContactSchema;
     ContactRemoveArgsSchema = external_exports.object({
@@ -5805,10 +5785,10 @@ var init_contact = __esm({
   }
 });
 
-// ../protocol/src/contact-ssh.ts
+// ../protocol/src/contact-remote-access.ts
 var ContactSetRemoteAccessArgsSchema, ContactSetRemoteAccessOkSchema, ContactRemoteAccessUpdatedFrameSchema;
-var init_contact_ssh = __esm({
-  "../protocol/src/contact-ssh.ts"() {
+var init_contact_remote_access = __esm({
+  "../protocol/src/contact-remote-access.ts"() {
     "use strict";
     init_zod();
     ContactSetRemoteAccessArgsSchema = external_exports.object({
@@ -6261,7 +6241,7 @@ var init_runtime = __esm({
     init_capability();
     init_inbox();
     init_contact();
-    init_contact_ssh();
+    init_contact_remote_access();
     init_peer_exec();
     init_extension();
     init_feishu_auth();
@@ -6542,8 +6522,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path77 = req.path;
-        _req.url = typeof path77 === "string" ? path77 : req.url ? req.url.path || req.url : void 0;
+        const path70 = req.path;
+        _req.url = typeof path70 === "string" ? path70 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -6708,14 +6688,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path77) {
+    function parsePath(path70) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path77.length; i++) {
-        const char = path77[i];
+      for (let i = 0; i < path70.length; i++) {
+        const char = path70[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -6846,10 +6826,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path77 of paths) {
-        const parts = parsePath(path77);
+      for (const path70 of paths) {
+        const parts = parsePath(path70);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path77, remove);
+          redactWildcardPath(obj, parts, censor, path70, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -6934,8 +6914,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path77) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path77];
+            const wrappedCensor = typeof censor === "function" ? (value, path70) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path70];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -6970,8 +6950,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path77 of pathsToClone) {
-        const parts = parsePath(path77);
+      for (const path70 of pathsToClone) {
+        const parts = parsePath(path70);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -7023,24 +7003,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path77) {
-      if (typeof path77 !== "string") {
+    function validatePath(path70) {
+      if (typeof path70 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path77 === "") {
+      if (path70 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path77.includes("..")) {
-        throw new Error(`Invalid redaction path (${path77})`);
+      if (path70.includes("..")) {
+        throw new Error(`Invalid redaction path (${path70})`);
       }
-      if (path77.includes(",")) {
-        throw new Error(`Invalid redaction path (${path77})`);
+      if (path70.includes(",")) {
+        throw new Error(`Invalid redaction path (${path70})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path77.length; i++) {
-        const char = path77[i];
+      for (let i = 0; i < path70.length; i++) {
+        const char = path70[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -7054,20 +7034,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path77})`);
+            throw new Error(`Invalid redaction path (${path70})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path77})`);
+        throw new Error(`Invalid redaction path (${path70})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path77 of paths) {
-        validatePath(path77);
+      for (const path70 of paths) {
+        validatePath(path70);
       }
     }
     function slowRedact(options = {}) {
@@ -7235,8 +7215,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path77) => {
-            return censor(value, [k2, ...path77]);
+          const wrappedCensor = typeof censor === "function" ? (value, path70) => {
+            return censor(value, [k2, ...path70]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -7454,10 +7434,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs71 = require("fs");
+    var fs64 = require("fs");
     var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
-    var path77 = require("path");
+    var path70 = require("path");
     var sleep2 = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -7511,20 +7491,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs71.mkdirSync(path77.dirname(file), { recursive: true });
-          const fd = fs71.openSync(file, flags, mode);
+          if (sonic.mkdir) fs64.mkdirSync(path70.dirname(file), { recursive: true });
+          const fd = fs64.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs71.mkdir(path77.dirname(file), { recursive: true }, (err) => {
+        fs64.mkdir(path70.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs71.open(file, flags, mode, fileOpened);
+          fs64.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs71.open(file, flags, mode, fileOpened);
+        fs64.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -7565,8 +7545,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs71.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs71.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs64.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs64.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -7575,15 +7555,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs71.writeSync(this.fd, this._writingBuf);
+            return fs64.writeSync(this.fd, this._writingBuf);
           }
-          return fs71.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs64.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs71.write(this.fd, this._writingBuf, this.release);
+            return fs64.write(this.fd, this._writingBuf, this.release);
           }
-          return fs71.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs64.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -7640,7 +7620,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs71.fsyncSync(this.fd);
+          fs64.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -7754,7 +7734,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs71.fsync(this.fd, (err) => {
+            fs64.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -7856,7 +7836,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs71.close(fd, (err) => {
+          fs64.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -7905,7 +7885,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs71.writeSync(this.fd, buf) : fs71.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs64.writeSync(this.fd, buf) : fs64.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -7921,7 +7901,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs71.fsyncSync(this.fd);
+        fs64.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -7942,7 +7922,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs71.writeSync(this.fd, buf);
+          const n = fs64.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -7970,13 +7950,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs71.writeSync(this.fd, this._writingBuf) : fs71.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs64.writeSync(this.fd, this._writingBuf) : fs64.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs71.write(this.fd, this._writingBuf, release);
+        fs64.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -7985,7 +7965,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs71.writeSync(this.fd, this._writingBuf);
+          const written = fs64.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -7994,7 +7974,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs71.write(this.fd, this._writingBuf, release);
+        fs64.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -8010,12 +7990,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs71.fsync(sonic.fd, closeWrapped);
+        fs64.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs71.close(sonic.fd, done);
+          fs64.close(sonic.fd, done);
         } else {
           done();
         }
@@ -11150,11 +11130,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path77, added, removed, oldPosInc, options) {
-        var last = path77.lastComponent;
+      addToPath: function addToPath(path70, added, removed, oldPosInc, options) {
+        var last = path70.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path77.oldPos + oldPosInc,
+            oldPos: path70.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -11164,7 +11144,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path77.oldPos + oldPosInc,
+            oldPos: path70.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -11669,10 +11649,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec3 = m2;
-      const path77 = typeof rec3.path === "string" ? rec3.path : null;
+      const path70 = typeof rec3.path === "string" ? rec3.path : null;
       const content = typeof rec3.content === "string" ? rec3.content : null;
-      if (!path77 || content == null) return null;
-      const entry = { path: path77, content };
+      if (!path70 || content == null) return null;
+      const entry = { path: path70, content };
       if (typeof rec3.mtimeMs === "number") entry.mtimeMs = rec3.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -12475,10 +12455,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec3 = m2;
-      const path77 = typeof rec3.path === "string" ? rec3.path : null;
+      const path70 = typeof rec3.path === "string" ? rec3.path : null;
       const content = typeof rec3.content === "string" ? rec3.content : null;
-      if (!path77 || content == null) return null;
-      const out = { path: path77, content };
+      if (!path70 || content == null) return null;
+      const out = { path: path70, content };
       if (typeof rec3.mtimeMs === "number") out.mtimeMs = rec3.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -27014,8 +26994,8 @@ var require_buffer_util = __commonJS({
       }
       return buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.length);
     }
-    function toBuffer2(data) {
-      toBuffer2.readOnly = true;
+    function toBuffer(data) {
+      toBuffer.readOnly = true;
       if (Buffer.isBuffer(data)) return data;
       let buf;
       if (data instanceof ArrayBuffer) {
@@ -27024,7 +27004,7 @@ var require_buffer_util = __commonJS({
         buf = new FastBuffer(data.buffer, data.byteOffset, data.byteLength);
       } else {
         buf = Buffer.from(data);
-        toBuffer2.readOnly = false;
+        toBuffer.readOnly = false;
       }
       return buf;
     }
@@ -27032,7 +27012,7 @@ var require_buffer_util = __commonJS({
       concat,
       mask: _mask,
       toArrayBuffer,
-      toBuffer: toBuffer2,
+      toBuffer,
       unmask: _unmask
     };
     if (!process.env.WS_NO_BUFFER_UTIL) {
@@ -28287,7 +28267,7 @@ var require_sender = __commonJS({
     var PerMessageDeflate2 = require_permessage_deflate();
     var { EMPTY_BUFFER, kWebSocket, NOOP } = require_constants2();
     var { isBlob, isValidStatusCode } = require_validation();
-    var { mask: applyMask, toBuffer: toBuffer2 } = require_buffer_util();
+    var { mask: applyMask, toBuffer } = require_buffer_util();
     var kByteLength = /* @__PURE__ */ Symbol("kByteLength");
     var maskBuffer = Buffer.alloc(4);
     var RANDOM_POOL_SIZE = 8 * 1024;
@@ -28475,9 +28455,9 @@ var require_sender = __commonJS({
           byteLength = data.size;
           readOnly = false;
         } else {
-          data = toBuffer2(data);
+          data = toBuffer(data);
           byteLength = data.length;
-          readOnly = toBuffer2.readOnly;
+          readOnly = toBuffer.readOnly;
         }
         if (byteLength > 125) {
           throw new RangeError("The data size must not be greater than 125 bytes");
@@ -28522,9 +28502,9 @@ var require_sender = __commonJS({
           byteLength = data.size;
           readOnly = false;
         } else {
-          data = toBuffer2(data);
+          data = toBuffer(data);
           byteLength = data.length;
-          readOnly = toBuffer2.readOnly;
+          readOnly = toBuffer.readOnly;
         }
         if (byteLength > 125) {
           throw new RangeError("The data size must not be greater than 125 bytes");
@@ -28580,9 +28560,9 @@ var require_sender = __commonJS({
           byteLength = data.size;
           readOnly = false;
         } else {
-          data = toBuffer2(data);
+          data = toBuffer(data);
           byteLength = data.length;
-          readOnly = toBuffer2.readOnly;
+          readOnly = toBuffer.readOnly;
         }
         if (this._firstFragment) {
           this._firstFragment = false;
@@ -28652,7 +28632,7 @@ var require_sender = __commonJS({
             return;
           }
           this._bufferedBytes -= options[kByteLength];
-          const data = toBuffer2(arrayBuffer);
+          const data = toBuffer(arrayBuffer);
           if (!compress) {
             this._state = DEFAULT;
             this.sendFrame(_Sender.frame(data, options), cb);
@@ -29155,7 +29135,7 @@ var require_websocket = __commonJS({
     var EventEmitter3 = require("events");
     var https = require("https");
     var http3 = require("http");
-    var net4 = require("net");
+    var net3 = require("net");
     var tls = require("tls");
     var { randomBytes, createHash: createHash3 } = require("crypto");
     var { Duplex, Readable: Readable3 } = require("stream");
@@ -29179,7 +29159,7 @@ var require_websocket = __commonJS({
       EventTarget: { addEventListener, removeEventListener }
     } = require_event_target();
     var { format, parse } = require_extension();
-    var { toBuffer: toBuffer2 } = require_buffer_util();
+    var { toBuffer } = require_buffer_util();
     var kAborted = /* @__PURE__ */ Symbol("kAborted");
     var protocolVersions = [8, 13];
     var readyStates = ["CONNECTING", "OPEN", "CLOSING", "CLOSED"];
@@ -29889,12 +29869,12 @@ var require_websocket = __commonJS({
     }
     function netConnect(options) {
       options.path = options.socketPath;
-      return net4.connect(options);
+      return net3.connect(options);
     }
     function tlsConnect(options) {
       options.path = void 0;
       if (!options.servername && options.servername !== "") {
-        options.servername = net4.isIP(options.host) ? "" : options.host;
+        options.servername = net3.isIP(options.host) ? "" : options.host;
       }
       return tls.connect(options);
     }
@@ -29917,7 +29897,7 @@ var require_websocket = __commonJS({
     }
     function sendAfterClose(websocket, data, cb) {
       if (data) {
-        const length = isBlob(data) ? data.size : toBuffer2(data).length;
+        const length = isBlob(data) ? data.size : toBuffer(data).length;
         if (websocket._socket) websocket._sender._bufferedBytes += length;
         else websocket._bufferedAmount += length;
       }
@@ -30570,23 +30550,6 @@ var require_websocket_server = __commonJS({
   }
 });
 
-// ../node_modules/.pnpm/ws@8.20.0/node_modules/ws/wrapper.mjs
-var import_stream, import_extension, import_permessage_deflate, import_receiver, import_sender, import_subprotocol, import_websocket, import_websocket_server, wrapper_default;
-var init_wrapper = __esm({
-  "../node_modules/.pnpm/ws@8.20.0/node_modules/ws/wrapper.mjs"() {
-    "use strict";
-    import_stream = __toESM(require_stream(), 1);
-    import_extension = __toESM(require_extension(), 1);
-    import_permessage_deflate = __toESM(require_permessage_deflate(), 1);
-    import_receiver = __toESM(require_receiver(), 1);
-    import_sender = __toESM(require_sender(), 1);
-    import_subprotocol = __toESM(require_subprotocol(), 1);
-    import_websocket = __toESM(require_websocket(), 1);
-    import_websocket_server = __toESM(require_websocket_server(), 1);
-    wrapper_default = import_websocket.default;
-  }
-});
-
 // ../node_modules/.pnpm/process-nextick-args@2.0.1/node_modules/process-nextick-args/index.js
 var require_process_nextick_args = __commonJS({
   "../node_modules/.pnpm/process-nextick-args@2.0.1/node_modules/process-nextick-args/index.js"(exports2, module2) {
@@ -33464,8 +33427,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path77) {
-      var parts = path77.split("/");
+    exports2.resolve = function(path70) {
+      var parts = path70.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -39318,18 +39281,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path77) {
-      if (path77.slice(-1) === "/") {
-        path77 = path77.substring(0, path77.length - 1);
+    var parentFolder = function(path70) {
+      if (path70.slice(-1) === "/") {
+        path70 = path70.substring(0, path70.length - 1);
       }
-      var lastSlash = path77.lastIndexOf("/");
-      return lastSlash > 0 ? path77.substring(0, lastSlash) : "";
+      var lastSlash = path70.lastIndexOf("/");
+      return lastSlash > 0 ? path70.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path77) {
-      if (path77.slice(-1) !== "/") {
-        path77 += "/";
+    var forceTrailingSlash = function(path70) {
+      if (path70.slice(-1) !== "/") {
+        path70 += "/";
       }
-      return path77;
+      return path70;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -40331,7 +40294,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path65.default.dirname(opts.recordPath);
+  const dir = import_node_path58.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -40345,8 +40308,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs53.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs53.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs46.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs46.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -40371,12 +40334,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs53, import_node_path65;
+var import_node_fs46, import_node_path58;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs53 = __toESM(require("fs"), 1);
-    import_node_path65 = __toESM(require("path"), 1);
+    import_node_fs46 = __toESM(require("fs"), 1);
+    import_node_path58 = __toESM(require("path"), 1);
   }
 });
 
@@ -40419,7 +40382,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs54.mkdtempSync)(import_node_path66.default.join(import_node_os23.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs47.mkdtempSync)(import_node_path59.default.join(import_node_os23.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -40580,19 +40543,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs54.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs47.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs54, import_node_os23, import_node_path66;
+var import_node_fs47, import_node_os23, import_node_path59;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs54 = require("fs");
+    import_node_fs47 = require("fs");
     import_node_os23 = __toESM(require("os"), 1);
-    import_node_path66 = __toESM(require("path"), 1);
+    import_node_path59 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -40688,124 +40651,6 @@ stdout \u4E8B\u4EF6\uFF08\u884C JSON\uFF09\uFF1A
   }
 });
 
-// src/sshd/sshd-cli-relay.ts
-var sshd_cli_relay_exports = {};
-__export(sshd_cli_relay_exports, {
-  sshRelay: () => sshRelay
-});
-async function sshRelay(argv) {
-  const args = parseSshRelayArgs(argv);
-  if (args.help) {
-    process.stdout.write(SSH_RELAY_HELP);
-    return 0;
-  }
-  if (!args.peerDeviceId) {
-    process.stderr.write("clawd ssh-relay: missing <peer-device-id>\n" + SSH_RELAY_HELP);
-    return 2;
-  }
-  const daemonUrl = process.env.CLAWD_DAEMON_URL;
-  const sessionId = process.env.CLAWD_SESSION_ID;
-  if (!daemonUrl) {
-    process.stderr.write(
-      "clawd ssh-relay: CLAWD_DAEMON_URL env not set (relay must run inside a clawd CC session)\n"
-    );
-    return 2;
-  }
-  if (!sessionId) {
-    process.stderr.write(
-      "clawd ssh-relay: CLAWD_SESSION_ID env not set (relay must run inside a clawd CC session)\n"
-    );
-    return 2;
-  }
-  const wsBase = daemonUrl.replace(/^http/, "ws").replace(/\/+$/, "");
-  const url = `${wsBase}/rpc/ssh-tunnel-local?peerDeviceId=${encodeURIComponent(args.peerDeviceId)}`;
-  return new Promise((resolve6) => {
-    const ws = new import_websocket.default(url, {
-      headers: { "X-Clawd-Session-Id": sessionId }
-    });
-    let settled = false;
-    const settle = (code) => {
-      if (settled) return;
-      settled = true;
-      try {
-        ws.close();
-      } catch {
-      }
-      resolve6(code);
-    };
-    ws.on("open", () => {
-      process.stdin.on("data", (chunk) => {
-        if (ws.readyState === ws.OPEN) ws.send(chunk, { binary: true });
-      });
-      process.stdin.on("end", () => {
-        try {
-          ws.close(1e3, "stdin end");
-        } catch {
-        }
-      });
-      process.stdin.on("error", () => settle(1));
-    });
-    ws.on("message", (data) => {
-      if (Buffer.isBuffer(data)) process.stdout.write(data);
-      else if (Array.isArray(data)) process.stdout.write(Buffer.concat(data));
-      else if (data instanceof ArrayBuffer) process.stdout.write(Buffer.from(data));
-    });
-    ws.on("close", (code) => {
-      settle(code === 1e3 ? 0 : 1);
-    });
-    ws.on("error", (err) => {
-      process.stderr.write(`clawd ssh-relay: ws error ${err.message}
-`);
-      settle(1);
-    });
-    const onSignal = () => settle(0);
-    process.once("SIGINT", onSignal);
-    process.once("SIGTERM", onSignal);
-  });
-}
-function parseSshRelayArgs(argv) {
-  const out = {};
-  for (let i = 0; i < argv.length; i++) {
-    const a = argv[i];
-    if (a === "--help" || a === "-h") {
-      out.help = true;
-      continue;
-    }
-    if (a.startsWith("--")) {
-      throw new Error(`unknown flag: ${a}`);
-    }
-    if (!out.peerDeviceId) {
-      out.peerDeviceId = a;
-    }
-  }
-  return out;
-}
-var SSH_RELAY_HELP;
-var init_sshd_cli_relay = __esm({
-  "src/sshd/sshd-cli-relay.ts"() {
-    "use strict";
-    init_wrapper();
-    SSH_RELAY_HELP = `clawd ssh-relay <peer-device-id>
-
-WebSocket relay to a peer daemon's /rpc/ssh-tunnel via the local daemon
-(reads CLAWD_DAEMON_URL + CLAWD_SESSION_ID from env). Meant to be used as
-SSH ProxyCommand from inside a clawd CC session.
-
-Options:
-  --help / -h         \u663E\u793A\u5E2E\u52A9
-
-Example:
-  ssh -o ProxyCommand='~/.clawd/bin/clawd ssh-relay <peer-device-id>' \\
-      -i ~/.clawd/ssh-identity/id_ed25519 \\
-      <peer-os-user>@127.0.0.1
-
-  \u767B\u5F55\u540D\u7528\u5BF9\u7AEF\u8D26\u53F7\uFF08Contact.osUser\uFF0C\u5EFA\u8054\u63E1\u624B\u4EA4\u6362\uFF09\u2014\u2014\u4E0D\u662F\u672C\u673A $USER\u3002
-  \u4E24\u673A\u8D26\u53F7\u540D\u4E0D\u540C\u65F6\u7528 $USER \u4F1A Permission denied (publickey)\u3002
-  \u89C1 doc/glossary/peer-mesh.md#\u5EFA\u8054\u4EA4\u6362\u6E05\u5355
-`;
-  }
-});
-
 // src/config.ts
 var import_node_fs = __toESM(require("fs"), 1);
 var import_node_os = __toESM(require("os"), 1);
@@ -40813,7 +40658,6 @@ var import_node_path = __toESM(require("path"), 1);
 init_protocol();
 var DEFAULT_PORT = 18790;
 var DEFAULT_HOST = "127.0.0.1";
-var DEFAULT_SSHD_PORT = 22422;
 var DEFAULT_CLAWOS_API = "https://api.clawos.chat";
 var DEFAULT_LOG_ENDPOINT = "https://clawd-prod.cn-hangzhou.log.aliyuncs.com/logstores/app-logs/track";
 function resolveLogShipping(raw, cliNoShipping) {
@@ -40881,14 +40725,6 @@ function parseArgs(argv) {
       case "--no-log-shipping":
         out.noLogShipping = true;
         break;
-      case "--sshd-port": {
-        const n = Number.parseInt(next() ?? "", 10);
-        if (!Number.isFinite(n) || n <= 0 || n > 65535) {
-          throw new Error(`invalid --sshd-port value: ${argv[i]}`);
-        }
-        out.sshdPort = n;
-        break;
-      }
       default:
         if (a.startsWith("--")) throw new Error(`unknown flag: ${a}`);
         break;
@@ -40938,7 +40774,6 @@ function resolveConfig(opts) {
     fileCfg.logShipping,
     args.noLogShipping ?? false
   );
-  const sshdPort = args.sshdPort ?? (typeof fileCfg.sshdPort === "number" ? fileCfg.sshdPort : DEFAULT_SSHD_PORT);
   return {
     port,
     host,
@@ -40952,8 +40787,7 @@ function resolveConfig(opts) {
     frpcBinary,
     mode,
     previewPorts,
-    logShipping,
-    sshdPort
+    logShipping
   };
 }
 var HELP_TEXT = `clawd [options]
@@ -40965,7 +40799,6 @@ var HELP_TEXT = `clawd [options]
   --clawos-api <url>      tunnel register \u63A5\u53E3\u7684 base url\uFF08\u9ED8\u8BA4 https://api.clawos.chat\uFF09
   --auth-token <s>        \u6307\u5B9A daemon auth token\uFF1B\u7F3A\u7701\u65F6 tunnel \u6A21\u5F0F\u4ECE ~/.clawd/auth.json \u590D\u7528\uFF0C\u6CA1\u6709\u5C31\u751F\u6210
   --no-log-shipping       \u7981\u7528 SLS \u65E5\u5FD7\u4E0A\u884C\uFF08\u8986\u76D6 config.json logShipping.mode=off\uFF09
-  --sshd-port <n>         Contact SSH \u53CD\u5411\u8BBF\u95EE loopback \u7AEF\u53E3\uFF0C\u9ED8\u8BA4 22422
   --help / -h             \u663E\u793A\u5E2E\u52A9
   --version / -v          \u663E\u793A\u7248\u672C
 
@@ -40974,12 +40807,6 @@ Subcommands:
                           \u72EC\u7ACB CC \u63A7\u5236\u5668\u8FDB\u7A0B\uFF1A\u5916\u90E8 AI \u901A\u8FC7 stdin/stdout \u884C JSON \u534F\u8BAE
                           \u9A71\u52A8 CC \u591A\u8F6E\u5BF9\u8BDD\u4E0E\u6743\u9650\u51B3\u7B56\uFF0CIPC \u5168\u7A0B\u5F55\u5230 --record JSONL\u3002
                           \u8BE6\u89C1 'clawd run-case --help'
-  ssh-relay <peer-device-id>
-                          WebSocket relay via local daemon (reads
-                          CLAWD_DAEMON_URL + CLAWD_SESSION_ID from env)
-                          to peer /rpc/ssh-tunnel\uFF0C\u4F5C\u4E3A SSH ProxyCommand
-                          \u4F7F\u7528\uFF08Contact SSH tunnel v2\uFF09\u3002
-                          \u8BE6\u89C1 'clawd ssh-relay --help'
 
 Env (advanced):
   CLAWD_FRPC_BIN          \u81EA\u5E26 frpc \u4E8C\u8FDB\u5236\u8DEF\u5F84\uFF08\u9ED8\u8BA4\u6309\u9700\u4E0B\u8F7D\u5230 ~/.clawd/bin/frpc\uFF09
@@ -40990,8 +40817,8 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path64 = __toESM(require("path"), 1);
-var import_node_fs52 = __toESM(require("fs"), 1);
+var import_node_path57 = __toESM(require("path"), 1);
+var import_node_fs45 = __toESM(require("fs"), 1);
 var import_node_os22 = __toESM(require("os"), 1);
 
 // ../node_modules/.pnpm/uuid@10.0.0/node_modules/uuid/dist/esm-node/stringify.js
@@ -41741,13 +41568,6 @@ function composeGuestSandbox(base, userWorkDir, spawnCwd) {
   fsv.denyWrite = unionArr((fsv.denyWrite ?? []).filter((p2) => p2 !== "~/"), [spawnCwd]);
   fsv.allowRead = unionArr(fsv.allowRead, [userWorkDir]);
   fsv.allowWrite = unionArr(fsv.allowWrite, [userWorkDir]);
-  fsv.allowRead = unionArr(fsv.allowRead, [
-    "~/.clawd/ssh-identity",
-    "~/.clawd/bin",
-    "~/Library/Application Support/@clawos/clawd-desktop/ota-bundles",
-    "~/.clawd/config.json",
-    "~/.clawd/auth.json"
-  ]);
   return s;
 }
 
@@ -42015,32 +41835,6 @@ deviceId \u76F4\u63A5\u53D6\u81EA token\uFF0C\u4E0D\u8981\u6539\u5199\u6216\u731
   - \u5931\u8D25\uFF1A\`{ isFailure: true, reason: "..." }\`
 - \u62A5\u544A\u5B8C\u540E\u4F60\u7684 session \u5C31\u7ED3\u675F\u4E86\uFF0C\u4E0D\u8981\u7EE7\u7EED\u8F93\u51FA`;
 
-// src/sshd/contact-ssh-prompt.ts
-var CONTACT_SSH_SYSTEM_PROMPT_HINT = `## \u8DE8\u8BBE\u5907\u6587\u4EF6\u8BBF\u95EE\uFF08Contact SSH\uFF09
-
-\u7528\u6237\u53EF\u80FD\u6709\u591A\u53F0 clawd \u8BBE\u5907\u4E92\u76F8\u6388\u6743\u3002\u4F60\u5728\u8FD9\u53F0\u673A\u5668\u4E0A\u8BBF\u95EE\u5DF2\u6388\u6743\u5BF9\u7AEF\uFF08\u4E0B\u79F0 A\uFF0CdeviceId \u7531\u7528\u6237/\u4EFB\u52A1\u4E0A\u4E0B\u6587\u7ED9\u51FA\uFF09\u7684\u65B9\u6CD5\uFF1A
-
-\u7528 SSH \u62E8\u53F7\uFF08\u628A \`<A>\` \u6362\u6210\u5BF9\u7AEF deviceId\uFF09\uFF1A
-\`\`\`bash
-ssh -o ProxyCommand='~/.clawd/bin/clawd ssh-relay <A>' \\
-    -i ~/.clawd/ssh-identity/id_ed25519 \\
-    -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null \\
-    $USER@127.0.0.1 <command>
-# \u4F8B\u5982\uFF1A... $USER@127.0.0.1 cat /Users/xxx/some/file.md
-#      ... $USER@127.0.0.1 ls -la /Users/xxx/proj
-# \u8BF4\u660E\uFF1A\`-i\` \u7528\u672C\u8BBE\u5907\u552F\u4E00\u7684 SSH identity key\uFF08\u6240\u6709\u5BF9\u7AEF\u590D\u7528\u4E00\u628A\uFF09\u3002
-# \`~/.clawd/bin/clawd\` \u662F daemon \u542F\u52A8\u65F6 seed \u7684 shim\uFF0C\u786C\u7F16\u7801\u5F53\u524D daemon \u7684
-# execPath+cliPath\uFF0C\u4FDD\u8BC1 relay \u8DDF daemon \u7248\u672C\u540C\u6B65\u3002\u4E0D\u8981\u7528\u88F8 \`clawd\`\uFF08\u8D70 $PATH \u4F1A\u6F02\uFF09\u3002
-\`\`\`
-
-**\u4F60\u80FD\u8BBF\u95EE\u4EC0\u4E48**\uFF1A**\u6CA1\u6709\u76EE\u5F55\u7EA7\u9650\u5236**\u2014\u2014\u4F60\u4EE5 A \u673A\u5668\u4E0A\u8BE5 SSH \u7528\u6237\u7684\u6743\u9650\u8BBF\u95EE\u6587\u4EF6\uFF08\u7B49\u540C\u4E8E A \u7ED9\u4F60\u5F00\u4E86\u4E00\u4E2A shell\uFF09\u3002\u8BF7\u53EA\u5728 A \u6388\u6743/\u9700\u8981\u7684\u8303\u56F4\u5185\u64CD\u4F5C\uFF0C\u4E0D\u8981\u8D8A\u754C\u7FFB\u770B\u65E0\u5173\u76EE\u5F55\u3002
-
-**\u6CE8\u610F**\uFF1A
-- \u6388\u6743\u662F\u5B9E\u65F6\u7684\uFF1AA \u64A4\u9500 remoteAccessAllowed \u540E\u4F60\u4E0B\u4E00\u6B21\u62E8\u53F7\u7ACB\u5373\u5931\u6548\uFF08authorized_keys \u7ACB\u5373\u5237\uFF09
-- \u62E8\u53F7\u88AB\u62D2\uFF08Permission denied\uFF09\u901A\u5E38\u662F A \u5C1A\u672A\u6388\u6743\u672C\u8BBE\u5907\uFF0C\u6216\u53CC\u65B9\u8001\u7248\u672C\u5EFA\u8054\u3001A \u7684 contact \u91CC\u6CA1\u6709\u672C\u673A pubkey\uFF08\u4EFB\u4E00\u65B9\u91CD\u65B0 device:connect \u4E00\u6B21\u5373\u8865\uFF09\uFF0C\u5982\u5B9E\u544A\u8BC9\u7528\u6237
-- \u6392\u969C\uFF1A\u672C\u673A debug \u65E5\u5FD7\u5728 \`~/.clawd/log/contact-ssh.log\`\uFF08\u7528\u6237\u53EF \`tail -f\` \u770B\u6BCF\u4E00\u6B65\uFF09\uFF0C\u4F60\u51FA\u9519\u65F6\u544A\u8BC9\u7528\u6237\u67E5\u8FD9\u4E2A\u6587\u4EF6
-`;
-
 // src/session/reducer.ts
 function cloneState(s) {
   return {
@@ -42176,9 +41970,6 @@ function buildSpawnContext(state, deps) {
   if (daemonUrl) {
     ctx.extraSystemPrompt = (ctx.extraSystemPrompt ? ctx.extraSystemPrompt + "\n\n" : "") + ATTACHMENT_SHARING_HINT;
   }
-  if (meta?.personaMode === "guest") {
-    ctx.extraSystemPrompt = (ctx.extraSystemPrompt ? ctx.extraSystemPrompt + "\n\n" : "") + CONTACT_SSH_SYSTEM_PROMPT_HINT;
-  }
   if (meta?.extraSettings) {
     ctx.extraSettings = meta.extraSettings;
   }
@@ -46352,7 +46143,7 @@ function tryLoadViewerAssets(logger) {
   }
   logger?.warn("share-md-viewer.assets-not-found", {
     candidates,
-    hint: "run `pnpm -F @clawos/ext-clawd-ui build && pnpm -F @clawos-dev/clawd build`"
+    hint: "run `pnpm -F @clawos/clawd-ui build && pnpm -F @clawos-dev/clawd build`"
   });
   return null;
 }
@@ -46425,7 +46216,7 @@ function tryLoadShareUi(logger) {
   }
   logger?.warn("share-ui.assets-not-found", {
     candidates,
-    hint: "run `pnpm -F @clawos/ext-clawd-ui build && pnpm -F @clawos-dev/clawd build`"
+    hint: "run `pnpm -F @clawos/clawd-ui build && pnpm -F @clawos-dev/clawd build`"
   });
   return null;
 }
@@ -46793,8 +46584,8 @@ function turnStartInput(text) {
   const items = [];
   let leftover = text;
   for (const m2 of text.matchAll(SKILL_RE)) {
-    const [marker, name, path77] = m2;
-    items.push({ type: "skill", name, path: path77 });
+    const [marker, name, path70] = m2;
+    items.push({ type: "skill", name, path: path70 });
     leftover = leftover.replace(marker, "");
   }
   for (const m2 of text.matchAll(ATTACHMENT_RE2)) {
@@ -49394,13 +49185,13 @@ function mapSkillsListResponse(res) {
       const r = s ?? {};
       const name = str3(r.name);
       if (!name) continue;
-      const path77 = str3(r.path);
+      const path70 = str3(r.path);
       const description = str3(r.description);
       const isPlugin = name.includes(":");
       out.push({
         name,
         source: isPlugin ? "plugin" : "project",
-        ...path77 ? { path: path77 } : {},
+        ...path70 ? { path: path70 } : {},
         ...description ? { description } : {},
         ...isPlugin ? { plugin: name.split(":")[0] } : {}
       });
@@ -50106,8 +49897,18 @@ function listRegistered() {
   return [...registry.keys()];
 }
 
+// ../node_modules/.pnpm/ws@8.20.0/node_modules/ws/wrapper.mjs
+var import_stream = __toESM(require_stream(), 1);
+var import_extension = __toESM(require_extension(), 1);
+var import_permessage_deflate = __toESM(require_permessage_deflate(), 1);
+var import_receiver = __toESM(require_receiver(), 1);
+var import_sender = __toESM(require_sender(), 1);
+var import_subprotocol = __toESM(require_subprotocol(), 1);
+var import_websocket = __toESM(require_websocket(), 1);
+var import_websocket_server = __toESM(require_websocket_server(), 1);
+var wrapper_default = import_websocket.default;
+
 // src/transport/local-ws-server.ts
-init_wrapper();
 var import_node_http2 = __toESM(require("http"), 1);
 
 // src/transport/preview-proxy.ts
@@ -50183,30 +49984,6 @@ var LocalWsServer = class {
       const httpServer = import_node_http2.default.createServer((req, res) => this.handleHttpRequest(req, res));
       const wss = new import_websocket_server.default({ noServer: true, clientTracking: true });
       httpServer.on("upgrade", (req, socket, head) => {
-        if (this.opts.sshTunnelUpgradeHandler) {
-          const [urlPath] = (req.url ?? "").split("?");
-          if (urlPath === "/rpc/ssh-tunnel") {
-            void this.opts.sshTunnelUpgradeHandler(
-              req,
-              socket,
-              head,
-              wss
-            );
-            return;
-          }
-        }
-        if (this.opts.sshTunnelLocalUpgradeHandler) {
-          const [urlPath] = (req.url ?? "").split("?");
-          if (urlPath === "/rpc/ssh-tunnel-local") {
-            void this.opts.sshTunnelLocalUpgradeHandler(
-              req,
-              socket,
-              head,
-              wss
-            );
-            return;
-          }
-        }
         if (req.url?.startsWith("/preview/")) {
           const pathname = (() => {
             try {
@@ -50601,10 +50378,7 @@ var EXPOSED_RPC_METHODS = [
   // 查当前 turn caller —— cc 长驻 + owner/guest 交替驱动同一 session 时不能靠启动时 env
   // 写死身份，必须运行时 fetch。header X-Clawd-Session-Id 作 session 定位，handler 内查
   // manager.tryGetState(sid).currentTurnSender 返 SenderInfo | null。
-  "session.currentTurnSender",
-  // 建联交换（T-32）：本机 cc 拨号前查对端 osUser 拼 `<osUser>@127.0.0.1`。窄读——handler
-  // 只返 deviceId / displayName / osUser（无 connectToken 等敏感字段），见 handlers/contact.ts dialInfo。
-  "contact.dialInfo"
+  "session.currentTurnSender"
 ];
 async function handleRpcRequest(input) {
   const { method, body, sessionId, dispatcher } = input;
@@ -50693,9 +50467,7 @@ var AuthGate = class {
       try {
         r = await this.opts.authenticate(
           parsed.data.token,
-          parsed.data.selfUrl,
-          parsed.data.selfSshPublicKey,
-          parsed.data.selfOsUser
+          parsed.data.selfUrl
         );
       } finally {
         st.pending = false;
@@ -51284,8 +51056,7 @@ var ContactStore = class {
     return true;
   }
   /**
-   * 更新单条 contact 的 SSH 授权开关（对齐 setPin pattern）。T-29 去沙箱后只改 remoteAccessAllowed；
-   * exposedDirs 已废弃，本方法不再触碰它（保留 contact 原值不动）。
+   * 更新单条 contact 的远程访问授权开关（对齐 setPin pattern）。
    * @returns 是否命中：deviceId 不存在返 false；命中即 flush.
    */
   setRemoteAccess(deviceId, opts) {
@@ -51319,7 +51090,6 @@ var ContactStore = class {
 };
 
 // src/contact/connect-remote.ts
-init_wrapper();
 var crypto6 = __toESM(require("crypto"), 1);
 var HANDSHAKE_TIMEOUT_MS = 5e3;
 var RPC_TIMEOUT_MS = 5e3;
@@ -51341,11 +51111,7 @@ async function connectRemote(args) {
       // 缺省时省略字段（不发空串），对方 schema selfUrl 是 .min(1).optional()。
       // 决策 #16：身份字段（selfPrincipalId/selfDisplayName/selfDeviceId）已删——
       // 对方从 connect token 签名背书取 deviceId/ownerId/provider，不信自报。
-      ...args.selfUrl ? { selfUrl: args.selfUrl } : {},
-      // 建联交换：自报本机 SSH pubkey + OS 账号名；缺省省略字段（不发空串）。
-      // 见 doc/glossary/peer-mesh.md#建联交换清单
-      ...args.selfSshPublicKey ? { selfSshPublicKey: args.selfSshPublicKey } : {},
-      ...args.selfOsUser ? { selfOsUser: args.selfOsUser } : {}
+      ...args.selfUrl ? { selfUrl: args.selfUrl } : {}
     })
   );
   await new Promise((resolve6, reject) => {
@@ -51420,10 +51186,7 @@ async function connectRemote(args) {
         ownerId: f.owner.ownerId,
         provider: f.owner.provider,
         displayName: f.owner.displayName,
-        grants: f.capability.grants,
-        // 建联交换：对方老版本不带 → 省略（不落 undefined 占位）。见 …#建联交换清单
-        ...f.sshPublicKey ? { sshPublicKey: f.sshPublicKey } : {},
-        ...f.osUser ? { osUser: f.osUser } : {}
+        grants: f.capability.grants
       };
     },
     close: () => {
@@ -51445,8 +51208,6 @@ async function autoReverseContact(args) {
     actions: [...g2.actions]
   }));
   const existing = args.store.get(args.deviceId) ?? void 0;
-  const sshPublicKey = args.sshPublicKey ?? existing?.sshPublicKey;
-  const osUser = args.osUser ?? existing?.osUser;
   const base = {
     deviceId: args.deviceId,
     ownerId: args.ownerId,
@@ -51457,17 +51218,10 @@ async function autoReverseContact(args) {
     grants,
     addedAt: now(),
     pinnedAt: existing?.pinnedAt ?? null,
-    remoteAccessAllowed: existing?.remoteAccessAllowed ?? false,
-    // 建联交换：缺省不落 undefined 占位（JSON 持久化干净）。见 …#建联交换清单
-    ...sshPublicKey ? { sshPublicKey } : {},
-    ...osUser ? { osUser } : {},
-    exposedDirs: []
+    remoteAccessAllowed: existing?.remoteAccessAllowed ?? false
   };
   args.store.upsert(base);
   args.broadcast({ type: "contact:added", contact: base });
-  if (base.remoteAccessAllowed && sshPublicKey && sshPublicKey !== existing?.sshPublicKey) {
-    args.rebuildAuthorizedKeys?.();
-  }
   if (!args.exchangeToken) return;
   let token;
   try {
@@ -53465,926 +53219,29 @@ async function waitForFrpcReady(proc, timeoutMs) {
   });
 }
 
-// src/sshd/sshd-manager.ts
-var import_node_fs40 = __toESM(require("fs"), 1);
-var import_node_path40 = __toESM(require("path"), 1);
-var import_node_child_process11 = require("child_process");
-
-// src/sshd/sshd-config.ts
-function buildSshdConfig(input) {
-  const lines = [
-    `ListenAddress ${input.listenAddress}`,
-    `Port ${input.port}`,
-    `HostKey ${input.hostKeyPath}`,
-    `PidFile ${input.pidFilePath}`,
-    `AuthorizedKeysFile ${input.authorizedKeysFile}`,
-    `PubkeyAuthentication yes`,
-    `PasswordAuthentication no`,
-    `ChallengeResponseAuthentication no`,
-    `KbdInteractiveAuthentication no`,
-    `PermitRootLogin no`,
-    `StrictModes no`,
-    `UsePAM no`,
-    `LogLevel INFO`,
-    `Subsystem sftp internal-sftp`
-  ];
-  return lines.join("\n") + "\n";
-}
-
-// src/sshd/sshd-process.ts
-var import_node_fs37 = __toESM(require("fs"), 1);
-var import_node_path37 = __toESM(require("path"), 1);
-var import_node_child_process10 = require("child_process");
-function sshdPidFilePath(dataDir) {
-  return import_node_path37.default.join(dataDir, "sshd", "sshd.pid");
-}
-function writeSshdPid(dataDir, pid) {
-  try {
-    const p2 = sshdPidFilePath(dataDir);
-    import_node_fs37.default.mkdirSync(import_node_path37.default.dirname(p2), { recursive: true, mode: 448 });
-    import_node_fs37.default.writeFileSync(p2, String(pid), { mode: 384 });
-  } catch {
-  }
-}
-function clearSshdPid(dataDir) {
-  try {
-    import_node_fs37.default.unlinkSync(sshdPidFilePath(dataDir));
-  } catch {
-  }
-}
-function defaultIsPidAlive2(pid) {
-  if (!Number.isFinite(pid) || pid <= 0) return false;
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch (err) {
-    const code = err.code;
-    return code === "EPERM";
-  }
-}
-function defaultReadPidFile2(file) {
-  try {
-    return import_node_fs37.default.readFileSync(file, "utf8");
-  } catch {
-    return null;
-  }
-}
-function defaultKillPid2(pid, signal) {
-  try {
-    process.kill(pid, signal);
-  } catch {
-  }
-}
-function defaultSleep2(ms) {
-  return new Promise((r) => setTimeout(r, ms));
-}
-async function killStaleSshd(deps) {
-  const pidFile = sshdPidFilePath(deps.dataDir);
-  const configPath = import_node_path37.default.join(deps.dataDir, "sshd", "sshd_config");
-  const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile2;
-  const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive2;
-  const killPid = deps.killPidImpl ?? defaultKillPid2;
-  const scanPids = deps.scanSshdPidsImpl ?? ((cp) => defaultScanSshdPidsByCmdline(cp, deps.logger));
-  const sleep2 = deps.sleepImpl ?? defaultSleep2;
-  const victims = /* @__PURE__ */ new Set();
-  const raw = readPidFile(pidFile);
-  if (raw) {
-    const pid = parseInt(raw.trim(), 10);
-    if (Number.isFinite(pid) && pid > 0 && pid !== deps.ownPid && isAlive(pid)) {
-      victims.add(pid);
-    }
-  }
-  try {
-    const scanned = await scanPids(configPath);
-    for (const pid of scanned) {
-      if (pid > 0 && pid !== deps.ownPid && isAlive(pid)) victims.add(pid);
-    }
-  } catch (e) {
-    deps.logger?.warn("sshd: stale-sshd cmdline scan failed", { err: e.message });
-  }
-  if (victims.size === 0) {
-    try {
-      import_node_fs37.default.unlinkSync(pidFile);
-    } catch {
-    }
-    return;
-  }
-  for (const pid of victims) {
-    deps.logger?.warn("sshd: killing stale sshd before respawn", { pid });
-    killPid(pid, "SIGKILL");
-  }
-  await sleep2(deps.reapWaitMs ?? 300);
-  try {
-    import_node_fs37.default.unlinkSync(pidFile);
-  } catch {
-  }
-}
-async function defaultScanSshdPidsByCmdline(configPath, logger) {
-  if (process.platform === "win32") return [];
-  return new Promise((resolve6) => {
-    const ps = (0, import_node_child_process10.spawn)("ps", ["-axo", "pid=,command="], { stdio: ["ignore", "pipe", "ignore"] });
-    let buf = "";
-    ps.stdout.on("data", (c) => {
-      buf += c.toString();
-    });
-    ps.on("exit", () => {
-      const pids = [];
-      for (const line of buf.split("\n")) {
-        const m2 = /^\s*(\d+)\s+(.*)$/.exec(line);
-        if (!m2) continue;
-        const cmd = m2[2];
-        if (!/\bsshd\b/.test(cmd)) continue;
-        if (!cmd.includes(configPath)) continue;
-        const pid = parseInt(m2[1], 10);
-        if (Number.isFinite(pid) && pid > 0) pids.push(pid);
-      }
-      resolve6(pids);
-    });
-    ps.on("error", (e) => {
-      logger?.warn("sshd: ps scan failed", { err: e.message });
-      resolve6([]);
-    });
-  });
-}
-
-// src/sshd/jail-script.ts
-var import_node_fs38 = __toESM(require("fs"), 1);
-var import_node_path38 = __toESM(require("path"), 1);
-var CLAWD_SSH_JAIL_SCRIPT = String.raw`#!/usr/bin/env bash
-# clawd-ssh-jail — SSH reverse access sandbox wrapper (managed by clawd; do not edit)
-#
-# 由 sshd authorized_keys 的 command= 强制入口调用。
-# 用法: sshd 会以 \`clawd-ssh-jail <deviceId>\` 起本脚本；$SSH_ORIGINAL_COMMAND = client
-# 真实请求（interactive shell 时为空）。
-#
-# 职责:
-#   1. 读 ~/.clawd/contacts.json 校验 contact.remoteAccessAllowed（不通过即拒）
-#   2. 直接 exec shell（去沙箱后无目录级限制）
-
-set -euo pipefail
-
-# 用户可读审计日志：追加到 ~/.clawd/log/contact-ssh.log（跟 daemon TS 侧 contact-ssh-log.ts 共写）
-# bash 侧写死 ~/.clawd/log/，因为 jail 脚本在 authorized_keys command= 里被 sshd 起，
-# 拿不到 daemon --data-dir 覆盖。dev daemon 用 --data-dir=/tmp/x 时 jail 仍写 ~/.clawd/log/，
-# 跟改动前 (~/.clawd/contact-ssh.log) 一样的分歧行为，不做统一。
-CONTACT_SSH_LOG="${"${HOME}"}/.clawd/log/contact-ssh.log"
-log_line() {
-  # 参数: level tag msg
-  local ts
-  ts=$(date -u +"%Y-%m-%dT%H:%M:%S.%3NZ" 2>/dev/null || date -u +"%Y-%m-%dT%H:%M:%SZ")
-  printf '[%s] [%s] [%s] %s\n' "$ts" "$1" "$2" "$3" >> "$CONTACT_SSH_LOG" 2>/dev/null || true
-}
-
-DEVICE_ID="${"${1:-}"}"
-if [ -z "$DEVICE_ID" ]; then
-  log_line ERROR jail.entered "clawd-ssh-jail 缺 deviceId 参数"
-  echo "clawd-ssh-jail: missing deviceId" >&2
-  exit 1
-fi
-
-log_line INFO jail.entered "clawd-ssh-jail 起来 device=${"${DEVICE_ID}"} cmd=${"${SSH_ORIGINAL_COMMAND:-<interactive-shell>}"}"
-
-CONTACTS="${"${HOME}"}/.clawd/contacts.json"
-if [ ! -f "$CONTACTS" ]; then
-  log_line ERROR jail.entered "contacts.json 不存在，无法校验 remoteAccessAllowed"
-  echo "clawd-ssh-jail: contacts.json missing" >&2
-  exit 1
-fi
-
-# 校验该 contact 的 remoteAccessAllowed（mac/linux 都自带 python3）。去沙箱后不再读目录白名单：
-#   remoteAccessAllowed=false → DENIED exit 2；deviceId 未命中 → NOT_FOUND exit 3；命中且允许 → exit 0。
-# set -e 下 python 非 0 退出即终止脚本（不进 exec），只有 exit 0 才继续 exec shell。
-python3 -c "
-import json, sys
-with open('$CONTACTS') as f:
-    data = json.load(f)
-for c in data.get('contacts', []):
-    if c.get('deviceId') == '$DEVICE_ID':
-        if not c.get('remoteAccessAllowed'):
-            print('DENIED', file=sys.stderr); sys.exit(2)
-        sys.exit(0)
-print('NOT_FOUND', file=sys.stderr); sys.exit(3)
-"
-
-log_line INFO jail.entered "remoteAccessAllowed 校验通过，放行 exec shell"
-
-CMD="${"${SSH_ORIGINAL_COMMAND:-}"}"
-if [ -z "$CMD" ]; then
-  SHELL_CMD=(bash --login)
-else
-  SHELL_CMD=(bash -c "$CMD")
-fi
-
-# 去掉 OS 沙箱层（原本 macOS Seatbelt 策略 / Linux 命名空间隔离）：SSH 进来即该用户
-# 权限内的 shell，直接 exec。沙箱只限制文件、拦不住网络/进程，隔离价值有限，且相关 API
-# 在 macOS 已 deprecated。授权即完全信任——remoteAccessAllowed 授权开关 + authorized_keys 即时
-# 踢行是唯一访问闸。要加回沙箱：从 git 历史（T-29 之前）恢复本段的 OS 分支即可。
-exec "${"${SHELL_CMD[@]}"}"
-`;
-function ensureJailScript(dataDir) {
-  const binDir = import_node_path38.default.join(dataDir, "bin");
-  import_node_fs38.default.mkdirSync(binDir, { recursive: true, mode: 493 });
-  const target = import_node_path38.default.join(binDir, "clawd-ssh-jail");
-  import_node_fs38.default.writeFileSync(target, CLAWD_SSH_JAIL_SCRIPT, { mode: 493 });
-  return target;
-}
-
-// src/sshd/clawd-shim.ts
-var import_node_fs39 = __toESM(require("fs"), 1);
-var import_node_path39 = __toESM(require("path"), 1);
-var DEFAULT_FALLBACK_APPS = ["/Applications/Clawd.app", "$HOME/Applications/Clawd.app"];
-function shellQuote(s) {
-  return `'${s.replace(/'/g, "'\\''")}'`;
-}
-function fallbackWord(app) {
-  if (app.startsWith("$HOME/")) return `"$HOME"/${shellQuote(app.slice("$HOME/".length))}`;
-  return shellQuote(app);
-}
-function buildClawdShim(execPath, cliPath, fallbackApps = DEFAULT_FALLBACK_APPS) {
-  const candidates = fallbackApps.map(fallbackWord).join(" ");
-  return `#!/usr/bin/env bash
-# clawd shim (managed by clawd; do not edit)
-#
-# primary = seed \u672C\u6587\u4EF6\u7684 daemon \u7684 execPath + cliPath\uFF1Bdaemon \u91CD\u542F\u4F1A\u8986\u5199\u672C\u6587\u4EF6\uFF08\u5E42\u7B49 seed\uFF09\u3002
-# primary \u5931\u6548\uFF08npx \u7F13\u5B58 GC / OTA bundle GC / app \u79FB\u52A8\uFF09\u65F6\u56DE\u9000 installer \u81EA\u5E26 CLI\uFF1B
-# \u5168\u706D\u7ED9\u53EF\u8BFB\u9519\u8BEF\u3002guest CC \u7528 SSH ProxyCommand \u8D70 ~/.clawd/bin/clawd ssh-relay \u65F6\u547D\u4E2D\u672C shim\u3002
-#
-# ELECTRON_RUN_AS_NODE \u663E\u5F0F\u5BFC\u51FA\uFF1Aprimary/fallback \u90FD\u53EF\u80FD\u662F Electron \u4E8C\u8FDB\u5236\uFF08plain node \u5FFD\u7565
-# \u8BE5\u53D8\u91CF\uFF0C\u65E0\u5BB3\uFF09\u2014\u2014\u4E0D\u518D\u4F9D\u8D56 desktop \u73AF\u5883\u53D8\u91CF\u6070\u597D\u6CC4\u6F0F\u5230 CC \u5B50\u8FDB\u7A0B\u3002
-export ELECTRON_RUN_AS_NODE=1
-EXEC=${shellQuote(execPath)}
-CLI=${shellQuote(cliPath)}
-if [ ! -x "$EXEC" ] || [ ! -f "$CLI" ]; then
-  for APP in ${candidates}; do
-    FCLI="$APP/Contents/Resources/daemon/dist/cli.cjs"
-    [ -f "$FCLI" ] || continue
-    for FEXE in "$APP"/Contents/MacOS/*; do
-      if [ -f "$FEXE" ] && [ -x "$FEXE" ]; then
-        EXEC="$FEXE"
-        CLI="$FCLI"
-        break 2
-      fi
-    done
-  done
-fi
-if [ ! -x "$EXEC" ] || [ ! -f "$CLI" ]; then
-  echo "clawd shim: daemon CLI not found ($CLI); \u91CD\u542F clawd daemon \u53EF\u91CD\u65B0\u751F\u6210\u672C\u6587\u4EF6" >&2
-  exit 127
-fi
-exec "$EXEC" "$CLI" "$@"
-`;
-}
-function ensureClawdShim(dataDir, execPath, cliPath) {
-  const binDir = import_node_path39.default.join(dataDir, "bin");
-  import_node_fs39.default.mkdirSync(binDir, { recursive: true, mode: 493 });
-  const target = import_node_path39.default.join(binDir, "clawd");
-  import_node_fs39.default.writeFileSync(target, buildClawdShim(execPath, cliPath), { mode: 493 });
-  return target;
-}
-
-// src/sshd/sshd-manager.ts
-var SshdManager = class {
-  constructor(deps) {
-    this.deps = deps;
-    this.sshdDir = import_node_path40.default.join(deps.dataDir, "sshd");
-    this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
-  }
-  deps;
-  proc = null;
-  sshdDir;
-  stopping = false;
-  exitHookInstalled = false;
-  startupTimeoutMs;
-  // sshd stderr 按行嗌探 pubkey 认证结果时的半行缓冲（防关键字被 chunk 边界切断）
-  sniffBuf = "";
-  get port() {
-    return this.deps.port;
-  }
-  async start() {
-    const { logger } = this.deps;
-    await (this.deps.killStaleImpl ?? killStaleSshd)({
-      dataDir: this.deps.dataDir,
-      ownPid: process.pid,
-      logger
-    });
-    import_node_fs40.default.mkdirSync(this.sshdDir, { recursive: true, mode: 448 });
-    import_node_fs40.default.mkdirSync(import_node_path40.default.join(this.sshdDir, "authorized_keys.d"), { recursive: true, mode: 448 });
-    ensureJailScript(this.deps.dataDir);
-    ensureClawdShim(this.deps.dataDir, process.execPath, process.argv[1] ?? "");
-    const hostKeyPath = import_node_path40.default.join(this.sshdDir, "host_key");
-    if (!import_node_fs40.default.existsSync(hostKeyPath)) {
-      await this.generateHostKey(hostKeyPath);
-    }
-    const akFile = import_node_path40.default.join(this.sshdDir, "authorized_keys.d", "clawd-contacts");
-    if (!import_node_fs40.default.existsSync(akFile)) {
-      import_node_fs40.default.writeFileSync(akFile, "", { mode: 384 });
-    }
-    const configPath = import_node_path40.default.join(this.sshdDir, "sshd_config");
-    const config = buildSshdConfig({
-      listenAddress: "127.0.0.1",
-      port: this.deps.port,
-      hostKeyPath,
-      authorizedKeysFile: akFile,
-      pidFilePath: import_node_path40.default.join(this.sshdDir, "sshd.pid")
-    });
-    import_node_fs40.default.writeFileSync(configPath, config, { mode: 384 });
-    const sshdBin = this.deps.sshdBin ?? "/usr/sbin/sshd";
-    const proc = (this.deps.spawnImpl ?? import_node_child_process11.spawn)(sshdBin, ["-D", "-e", "-f", configPath], {
-      stdio: ["ignore", "pipe", "pipe"]
-    });
-    const sshdLogDir = import_node_path40.default.join(this.deps.dataDir, "log");
-    import_node_fs40.default.mkdirSync(sshdLogDir, { recursive: true });
-    const logStream = import_node_fs40.default.createWriteStream(import_node_path40.default.join(sshdLogDir, "sshd.log"), {
-      flags: "a",
-      mode: 384
-    });
-    logStream.on("error", () => {
-    });
-    const tee = (c) => {
-      logStream.write(String(c));
-    };
-    proc.stdout?.on("data", tee);
-    proc.stderr?.on("data", (c) => {
-      const s = String(c);
-      logStream.write(s);
-      this.sniffSshdAuth(s);
-    });
-    proc.once("exit", () => logStream.end());
-    const ready = await waitForSshdReady(proc, this.startupTimeoutMs);
-    if (!ready.ok) {
-      try {
-        proc.kill("SIGTERM");
-      } catch {
-      }
-      const tail = ready.output.slice(-500);
-      const msg = tail ? `${ready.error}
-${tail}` : ready.error;
-      throw new Error(msg);
-    }
-    if (typeof proc.pid === "number") writeSshdPid(this.deps.dataDir, proc.pid);
-    this.proc = proc;
-    this.installProcessExitHandlersIfNeeded();
-    this.attachExitListener(proc);
-    logger?.info("sshd: up", { port: this.deps.port, pid: proc.pid ?? null });
-    return { port: this.deps.port };
-  }
-  async stop() {
-    this.stopping = true;
-    const proc = this.proc;
-    this.proc = null;
-    if (!proc) {
-      clearSshdPid(this.deps.dataDir);
-      return;
-    }
-    proc.kill("SIGTERM");
-    await new Promise((resolve6) => {
-      const t = setTimeout(() => {
-        try {
-          proc.kill("SIGKILL");
-        } catch {
-        }
-        resolve6();
-      }, 5e3);
-      proc.once("exit", () => {
-        clearTimeout(t);
-        resolve6();
-      });
-    });
-    clearSshdPid(this.deps.dataDir);
-  }
-  killSync() {
-    const proc = this.proc;
-    this.proc = null;
-    clearSshdPid(this.deps.dataDir);
-    if (!proc) return;
-    try {
-      proc.kill("SIGTERM");
-    } catch {
-    }
-  }
-  attachExitListener(proc) {
-    proc.on("exit", (code) => {
-      this.deps.logger?.warn("sshd exited", { code });
-      if (this.stopping) return;
-      this.proc = null;
-      this.deps.onSshdExit?.({ code });
-    });
-  }
-  installProcessExitHandlersIfNeeded() {
-    if (this.exitHookInstalled) return;
-    if (this.deps.installProcessExitHandlers !== true) return;
-    this.exitHookInstalled = true;
-    const sync = () => this.killSync();
-    process.once("exit", sync);
-    process.once("SIGHUP", sync);
-    process.once("uncaughtException", sync);
-  }
-  async generateHostKey(hostKeyPath) {
-    const keygenBin = this.deps.keygenBin ?? "/usr/bin/ssh-keygen";
-    await new Promise((resolve6, reject) => {
-      const p2 = (this.deps.spawnImpl ?? import_node_child_process11.spawn)(
-        keygenBin,
-        ["-t", "ed25519", "-f", hostKeyPath, "-N", "", "-q"],
-        { stdio: "ignore" }
-      );
-      p2.on("exit", (code) => code === 0 ? resolve6() : reject(new Error(`ssh-keygen exit ${code}`)));
-      p2.on("error", reject);
-    });
-    try {
-      import_node_fs40.default.chmodSync(hostKeyPath, 384);
-    } catch {
-    }
-  }
-  // 把 sshd -e 输出里的 pubkey 认证结果转写一条到 contact-ssh.log，让 A 侧审计日志一处即可
-  // 看到"隧道连上但 sshd 拒了 key"（否则只有 tunnel.connected + tunnel.disconnected，为什么
-  // 被拒要翻另一个 sshd.log 对时间线）。按 \n 切行嗅探，半行留 sniffBuf 等下个 chunk 拼回。
-  sniffSshdAuth(chunk) {
-    const sshLog = this.deps.sshLog;
-    if (!sshLog) return;
-    this.sniffBuf += chunk;
-    const parts = this.sniffBuf.split("\n");
-    this.sniffBuf = parts.pop() ?? "";
-    for (const line of parts) {
-      if (/Accepted publickey/i.test(line)) {
-        sshLog.info(
-          "ssh.auth-ok",
-          "sshd \u63A5\u53D7\u4E86 pubkey \u8BA4\u8BC1\uFF08\u5BF9\u7AEF key \u547D\u4E2D authorized_keys\uFF09",
-          sshdAuthMeta(line)
-        );
-      } else if (/Failed publickey/i.test(line) || /Connection closed by (authenticating|invalid) user/i.test(line)) {
-        sshLog.warn(
-          "ssh.auth-rejected",
-          "sshd \u62D2\u7EDD\u4E86 pubkey \u8BA4\u8BC1\uFF08\u5BF9\u7AEF key \u4E0D\u5728 authorized_keys / \u672A\u6388\u6743 / key \u672A\u62C9\u5230\uFF09",
-          sshdAuthMeta(line)
-        );
-      }
-    }
-  }
-};
-function sshdAuthMeta(line) {
-  const m2 = /port (\d+)/.exec(line);
-  return m2 ? { clientPort: Number(m2[1]) } : {};
-}
-async function waitForSshdReady(proc, timeoutMs) {
-  return new Promise((resolve6) => {
-    let settled = false;
-    let buf = "";
-    const finish = (r) => {
-      if (settled) return;
-      settled = true;
-      cleanup();
-      resolve6(r);
-    };
-    const onData = (chunk) => {
-      buf += String(chunk);
-      if (/Server listening on/i.test(buf)) finish({ ok: true });
-      if (/fatal:/i.test(buf) || /error: Bind to port/i.test(buf)) {
-        finish({ ok: false, error: "sshd startup failed", output: buf });
-      }
-    };
-    const onExit = (code) => finish({ ok: false, error: `sshd exited before ready (code=${code})`, output: buf });
-    const onErr = (err) => finish({ ok: false, error: `sshd spawn error: ${err.message}`, output: buf });
-    const cleanup = () => {
-      proc.stdout?.off("data", onData);
-      proc.stderr?.off("data", onData);
-      proc.off("exit", onExit);
-      proc.off("error", onErr);
-      clearTimeout(timer);
-    };
-    proc.stdout?.on("data", onData);
-    proc.stderr?.on("data", onData);
-    proc.on("exit", onExit);
-    proc.on("error", onErr);
-    const timer = setTimeout(
-      () => finish({ ok: false, error: `sshd startup timeout after ${timeoutMs}ms`, output: buf }),
-      timeoutMs
-    );
-  });
-}
-
-// src/sshd/authorized-keys.ts
-var import_node_fs41 = __toESM(require("fs"), 1);
-var import_node_path41 = __toESM(require("path"), 1);
-var JAIL_BIN_PATH_ENV = "CLAWD_JAIL_BIN_PATH";
-var AUTHORIZED_KEYS_FILE = "clawd-contacts";
-function jailBinPath() {
-  return process.env[JAIL_BIN_PATH_ENV] ?? import_node_path41.default.join(process.env.HOME ?? "", ".clawd", "bin", "clawd-ssh-jail");
-}
-function rebuildAuthorizedKeys(store, sshdDir) {
-  const akDir = import_node_path41.default.join(sshdDir, "authorized_keys.d");
-  const target = import_node_path41.default.join(akDir, AUTHORIZED_KEYS_FILE);
-  import_node_fs41.default.mkdirSync(akDir, { recursive: true, mode: 448 });
-  const lines = ["# managed by clawd; do not edit", ""];
-  for (const c of store.list()) {
-    if (!c.remoteAccessAllowed) continue;
-    const safe = /^[A-Za-z0-9_.-]+$/.test(c.deviceId);
-    if (!safe) continue;
-    const pubkey = c.sshPublicKey?.trim();
-    if (!pubkey || /[\r\n"]/.test(pubkey)) continue;
-    const bin = jailBinPath();
-    lines.push(`command="${bin} ${c.deviceId}",restrict ${pubkey}`);
-    lines.push(`# contact:${c.deviceId}`);
-  }
-  const body = lines.join("\n") + "\n";
-  const tmp = `${target}.tmp-${process.pid}-${Date.now()}`;
-  import_node_fs41.default.writeFileSync(tmp, body, { mode: 384 });
-  import_node_fs41.default.renameSync(tmp, target);
-}
-
-// src/sshd/ssh-identity.ts
-var import_node_fs42 = __toESM(require("fs"), 1);
-var import_node_path42 = __toESM(require("path"), 1);
-var import_node_child_process12 = require("child_process");
-var IDENTITY_DIR = "ssh-identity";
-var KEY_FILE = "id_ed25519";
-function identityPaths(dataDir) {
-  const privPath = import_node_path42.default.join(dataDir, IDENTITY_DIR, KEY_FILE);
-  return { privPath, pubPath: `${privPath}.pub` };
-}
-async function ensureSshIdentity(dataDir, opts = {}) {
-  const { privPath, pubPath } = identityPaths(dataDir);
-  import_node_fs42.default.mkdirSync(import_node_path42.default.dirname(privPath), { recursive: true, mode: 448 });
-  if (import_node_fs42.default.existsSync(privPath) && import_node_fs42.default.existsSync(pubPath)) {
-    return { privateKeyPath: privPath, publicKeyLine: import_node_fs42.default.readFileSync(pubPath, "utf8").trim() };
-  }
-  const bin = opts.keygenBin ?? "/usr/bin/ssh-keygen";
-  await new Promise((resolve6, reject) => {
-    const p2 = (opts.spawnImpl ?? import_node_child_process12.spawn)(
-      bin,
-      ["-t", "ed25519", "-f", privPath, "-N", "", "-q", "-C", "clawd-ssh-identity"],
-      { stdio: "ignore" }
-    );
-    p2.on("exit", (code) => code === 0 ? resolve6() : reject(new Error(`ssh-keygen exit ${code}`)));
-    p2.on("error", reject);
-  });
-  try {
-    import_node_fs42.default.chmodSync(privPath, 384);
-  } catch {
-  }
-  try {
-    import_node_fs42.default.chmodSync(pubPath, 420);
-  } catch {
-  }
-  return { privateKeyPath: privPath, publicKeyLine: import_node_fs42.default.readFileSync(pubPath, "utf8").trim() };
-}
-function readSshIdentityPublicKey(dataDir) {
-  try {
-    return import_node_fs42.default.readFileSync(identityPaths(dataDir).pubPath, "utf8").trim();
-  } catch {
-    return null;
-  }
-}
-
-// src/sshd/ssh-tunnel-relay.ts
-var import_node_net2 = __toESM(require("net"), 1);
-
-// src/sshd/contact-ssh-log.ts
-var import_node_fs43 = __toESM(require("fs"), 1);
-var import_node_path43 = __toESM(require("path"), 1);
-function createContactSshLog(dataDir) {
-  const file = import_node_path43.default.join(dataDir, "log", "contact-ssh.log");
-  function append(level, tag, message, meta) {
-    const time = (/* @__PURE__ */ new Date()).toISOString();
-    let line = `[${time}] [${level}] [${tag}] ${message}`;
-    if (meta && Object.keys(meta).length > 0) {
-      try {
-        line += " " + JSON.stringify(meta);
-      } catch {
-        line += " [meta-serialize-failed]";
-      }
-    }
-    line += "\n";
-    try {
-      import_node_fs43.default.mkdirSync(import_node_path43.default.dirname(file), { recursive: true });
-      import_node_fs43.default.appendFileSync(file, line, { mode: 384 });
-    } catch {
-    }
-  }
-  return {
-    info: (tag, message, meta) => append("INFO", tag, message, meta),
-    warn: (tag, message, meta) => append("WARN", tag, message, meta),
-    error: (tag, message, meta) => append("ERROR", tag, message, meta)
-  };
-}
-var nullContactSshLog = {
-  info: () => {
-  },
-  warn: () => {
-  },
-  error: () => {
-  }
-};
-
-// src/sshd/ssh-tunnel-relay.ts
-async function handleSshTunnelUpgrade(req, socket, head, deps) {
-  const sshLog = deps.sshLog ?? nullContactSshLog;
-  const clientAddr = (req.socket && "remoteAddress" in req.socket ? req.socket.remoteAddress : null) ?? "unknown";
-  const auth = req.headers.authorization ?? "";
-  const m2 = /^Bearer\s+(.+)$/i.exec(auth);
-  if (!m2) {
-    sshLog.warn("tunnel.auth-failed", "/rpc/ssh-tunnel \u8BF7\u6C42\u7F3A Bearer token", {
-      clientAddr
-    });
-    socket.write(
-      "HTTP/1.1 401 Unauthorized\r\nContent-Length: 0\r\n\r\n"
-    );
-    socket.destroy();
-    return;
-  }
-  const token = m2[1].trim();
-  let ok = false;
-  try {
-    ok = await deps.authorize(token);
-  } catch (err) {
-    deps.logger?.warn("ssh-tunnel: authorize threw", {
-      err: err instanceof Error ? err.message : String(err)
-    });
-  }
-  if (!ok) {
-    sshLog.warn("tunnel.auth-failed", "/rpc/ssh-tunnel Bearer token \u9A8C\u8BC1\u5931\u8D25", {
-      clientAddr
-    });
-    socket.write(
-      "HTTP/1.1 401 Unauthorized\r\nContent-Length: 0\r\n\r\n"
-    );
-    socket.destroy();
-    return;
-  }
-  sshLog.info("tunnel.auth-ok", "/rpc/ssh-tunnel \u8BA4\u8BC1\u901A\u8FC7\uFF0C\u5347\u7EA7 WS", {
-    clientAddr
-  });
-  deps.wss.handleUpgrade(req, socket, head, (ws) => {
-    pumpWsToSshd(ws, deps, clientAddr);
-  });
-}
-function pumpWsToSshd(ws, deps, clientAddr) {
-  const sshLog = deps.sshLog ?? nullContactSshLog;
-  const tcp = import_node_net2.default.connect(deps.sshdPort, "127.0.0.1");
-  let tcpConnected = false;
-  let bytesFromWs = 0;
-  let bytesToWs = 0;
-  const startedAt = Date.now();
-  const cleanup = (reason) => {
-    try {
-      ws.close(1e3, reason);
-    } catch {
-    }
-    try {
-      tcp.destroy();
-    } catch {
-    }
-    sshLog.info("tunnel.disconnected", "SSH tunnel \u4F1A\u8BDD\u7ED3\u675F", {
-      clientAddr,
-      reason,
-      bytesFromWs,
-      bytesToWs,
-      durationMs: Date.now() - startedAt
-    });
-  };
-  tcp.once("connect", () => {
-    tcpConnected = true;
-    deps.logger?.info("ssh-tunnel: tcp connected to sshd", { port: deps.sshdPort });
-    sshLog.info("tunnel.connected", "WS \u2194 \u672C\u673A sshd raw byte relay \u5DF2\u5C31\u7EEA", {
-      clientAddr,
-      sshdPort: deps.sshdPort
-    });
-  });
-  tcp.on("data", (chunk) => {
-    if (ws.readyState === ws.OPEN) {
-      bytesToWs += chunk.length;
-      ws.send(chunk, { binary: true });
-    }
-  });
-  tcp.on("error", (err) => {
-    deps.logger?.warn("ssh-tunnel: tcp error", { err: err.message, tcpConnected });
-    sshLog.error(
-      tcpConnected ? "tunnel.tcp-error" : "tunnel.tcp-connect-failed",
-      tcpConnected ? "WS \u2194 sshd relay \u671F\u95F4 TCP \u4FA7\u51FA\u9519" : "\u65E0\u6CD5\u8FDE\u5230\u672C\u673A sshd\uFF08sshd \u672A\u8D77\uFF1F\u7AEF\u53E3\u9519\uFF1F\uFF09",
-      { clientAddr, sshdPort: deps.sshdPort, err: err.message }
-    );
-    cleanup("tcp error");
-  });
-  tcp.on("end", () => cleanup("tcp end"));
-  tcp.on("close", () => cleanup("tcp close"));
-  ws.on("message", (data) => {
-    let buf = null;
-    if (Buffer.isBuffer(data)) buf = data;
-    else if (Array.isArray(data)) buf = Buffer.concat(data);
-    else if (data instanceof ArrayBuffer) buf = Buffer.from(data);
-    if (buf) {
-      bytesFromWs += buf.length;
-      tcp.write(buf);
-    }
-  });
-  ws.on("close", () => cleanup("ws close"));
-  ws.on("error", (err) => {
-    deps.logger?.warn("ssh-tunnel: ws error", { err: err.message });
-    cleanup("ws error");
-  });
-}
-
-// src/sshd/ssh-tunnel-local-relay.ts
-init_wrapper();
-function parsePeerDeviceId(rawUrl) {
-  if (!rawUrl) return null;
-  try {
-    const u = new URL(rawUrl, "http://127.0.0.1");
-    const v2 = u.searchParams.get("peerDeviceId");
-    return v2 && v2.length > 0 ? v2 : null;
-  } catch {
-    return null;
-  }
-}
-async function handleSshTunnelLocalUpgrade(req, socket, head, deps) {
-  const sshLog = deps.sshLog ?? nullContactSshLog;
-  const clientAddr = (req.socket && "remoteAddress" in req.socket ? req.socket.remoteAddress : null) ?? "unknown";
-  const sessionId = req.headers["x-clawd-session-id"] ?? "";
-  if (!sessionId) {
-    sshLog.warn("relay.auth-failed", "/rpc/ssh-tunnel-local \u7F3A X-Clawd-Session-Id header", {
-      clientAddr
-    });
-    respond401(socket);
-    return;
-  }
-  const peerDeviceId = parsePeerDeviceId(req.url);
-  if (!peerDeviceId) {
-    sshLog.warn("relay.auth-failed", "/rpc/ssh-tunnel-local \u7F3A peerDeviceId query", { clientAddr });
-    respond400(socket);
-    return;
-  }
-  const contact = deps.store.get(peerDeviceId);
-  if (!contact) {
-    sshLog.error("relay.contact-not-found", "ssh-tunnel-local \u627E\u4E0D\u5230 peer contact", {
-      peerDeviceId
-    });
-    respond404(socket);
-    return;
-  }
-  if (!contact.connectToken) {
-    sshLog.error(
-      "relay.token-missing",
-      "contact \u6709\u8BB0\u5F55\u4F46\u7F3A connectToken\uFF08auto-reverse \u672A\u6362\u7968\uFF09",
-      { peerDeviceId, peerDisplayName: contact.displayName }
-    );
-    respond403(socket);
-    return;
-  }
-  const baseHttp = wsUrlToHttp(contact.remoteUrl).replace(/\/+$/, "");
-  const wsBase = baseHttp.replace(/^http:/, "ws:").replace(/^https:/, "wss:");
-  const outboundUrl = `${wsBase}/rpc/ssh-tunnel`;
-  sshLog.info("relay.dial", "\u5F00\u59CB\u62E8 A \u4FA7 /rpc/ssh-tunnel", {
-    peerDeviceId,
-    peerDisplayName: contact.displayName,
-    url: outboundUrl
-  });
-  deps.wss.handleUpgrade(req, socket, head, (clientWs) => {
-    sshLog.info(
-      "relay.client-connected",
-      "relay CLI \u5DF2\u8FDE\u4E0A\u672C\u5730 daemon\uFF08client WS \u5347\u7EA7\u6210\u529F\uFF09\uFF0C\u5F00\u59CB\u62E8 peer",
-      { peerDeviceId, peerDisplayName: contact.displayName }
-    );
-    const makeOut = deps.makeOutboundWs ?? ((u, o) => new import_websocket.default(u, o));
-    const outbound = makeOut(outboundUrl, {
-      headers: { Authorization: `Bearer ${contact.connectToken}` }
-    });
-    pumpClientToOutbound(clientWs, outbound, peerDeviceId, contact.displayName, deps);
-  });
-}
-function pumpClientToOutbound(client, outbound, peerDeviceId, peerDisplayName, deps) {
-  const sshLog = deps.sshLog ?? nullContactSshLog;
-  const startedAt = Date.now();
-  let outboundOpened = false;
-  let bytesClientToOutbound = 0;
-  let bytesOutboundToClient = 0;
-  let settled = false;
-  const preOpenQueue = [];
-  let preOpenQueuedBytes = 0;
-  const cleanup = (reason, code = 1e3) => {
-    if (settled) return;
-    settled = true;
-    try {
-      client.close(code, reason);
-    } catch {
-    }
-    try {
-      outbound.close();
-    } catch {
-    }
-    const level = code === 1e3 ? "info" : "warn";
-    sshLog[level](
-      code === 1e3 ? "relay.dial-close" : "relay.dial-close-abnormal",
-      code === 1e3 ? "tunnel \u4F1A\u8BDD\u6B63\u5E38\u7ED3\u675F" : "tunnel \u4F1A\u8BDD\u975E\u6B63\u5E38\u5173\u95ED",
-      {
-        peerDeviceId,
-        peerDisplayName,
-        reason,
-        code,
-        outboundOpened,
-        bytesClientToOutbound,
-        bytesOutboundToClient,
-        durationMs: Date.now() - startedAt
-      }
-    );
-  };
-  outbound.on("open", () => {
-    outboundOpened = true;
-    const queuedFrames = preOpenQueue.length;
-    if (queuedFrames > 0) {
-      for (const buf of preOpenQueue) outbound.send(buf, { binary: true });
-      preOpenQueue.length = 0;
-      sshLog.info(
-        "relay.preopen-flush",
-        "outbound \u5C31\u7EEA\u524D\u7F13\u51B2\u7684 client \u5B57\u8282\u5DF2\u6309\u5E8F flush\uFF08\u542B SSH banner\uFF09",
-        { peerDeviceId, peerDisplayName, queuedFrames, queuedBytes: preOpenQueuedBytes }
-      );
-    }
-    sshLog.info("relay.dial-open", "outbound ws open\uFF0C\u8FDB\u5165\u53CC\u5411 pipe", {
-      peerDeviceId,
-      peerDisplayName,
-      preOpenQueuedFrames: queuedFrames
-    });
-  });
-  outbound.on("message", (data) => {
-    const buf = toBuffer(data);
-    if (!buf) return;
-    bytesOutboundToClient += buf.length;
-    if (client.readyState === client.OPEN) client.send(buf, { binary: true });
-  });
-  outbound.on("error", (err) => {
-    deps.logger?.warn("ssh-tunnel-local: outbound ws error", { err: err.message });
-    sshLog.error("relay.dial-error", "outbound ws \u8FDE\u63A5\u9519\u8BEF\uFF08peer \u4E0D\u53EF\u8FBE / TLS \u5931\u8D25\uFF09", {
-      peerDeviceId,
-      peerDisplayName,
-      message: err.message
-    });
-    cleanup("outbound error", 1011);
-  });
-  outbound.on("close", (code) => {
-    if (!settled) cleanup(`outbound close ${code}`, code === 1e3 ? 1e3 : 1011);
-  });
-  client.on("message", (data) => {
-    const buf = toBuffer(data);
-    if (!buf) return;
-    bytesClientToOutbound += buf.length;
-    if (outbound.readyState === outbound.OPEN) {
-      outbound.send(buf, { binary: true });
-    } else {
-      preOpenQueue.push(buf);
-      preOpenQueuedBytes += buf.length;
-    }
-  });
-  client.on("close", () => cleanup("client close", 1e3));
-  client.on("error", (err) => {
-    deps.logger?.warn("ssh-tunnel-local: client ws error", { err: err.message });
-    cleanup("client error", 1011);
-  });
-}
-function toBuffer(data) {
-  if (Buffer.isBuffer(data)) return data;
-  if (Array.isArray(data)) return Buffer.concat(data);
-  if (data instanceof ArrayBuffer) return Buffer.from(data);
-  return null;
-}
-function respond401(socket) {
-  socket.write("HTTP/1.1 401 Unauthorized\r\nContent-Length: 0\r\n\r\n");
-  socket.destroy();
-}
-function respond400(socket) {
-  socket.write("HTTP/1.1 400 Bad Request\r\nContent-Length: 0\r\n\r\n");
-  socket.destroy();
-}
-function respond403(socket) {
-  socket.write("HTTP/1.1 403 Forbidden\r\nContent-Length: 0\r\n\r\n");
-  socket.destroy();
-}
-function respond404(socket) {
-  socket.write("HTTP/1.1 404 Not Found\r\nContent-Length: 0\r\n\r\n");
-  socket.destroy();
-}
-
 // src/tunnel/device-key.ts
 var import_node_os14 = __toESM(require("os"), 1);
-var import_node_path44 = __toESM(require("path"), 1);
+var import_node_path37 = __toESM(require("path"), 1);
 var import_node_crypto11 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os14.default.hostname();
   const uid = opts.uid ?? (typeof import_node_os14.default.userInfo === "function" ? import_node_os14.default.userInfo().uid : 0);
   const home = opts.home ?? import_node_os14.default.homedir();
-  const defaultDataDir = import_node_path44.default.resolve(import_node_path44.default.join(home, ".clawd"));
-  const normalizedDataDir = opts.dataDir ? import_node_path44.default.resolve(opts.dataDir) : null;
+  const defaultDataDir = import_node_path37.default.resolve(import_node_path37.default.join(home, ".clawd"));
+  const normalizedDataDir = opts.dataDir ? import_node_path37.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
   return import_node_crypto11.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
-var import_node_fs44 = __toESM(require("fs"), 1);
-var import_node_path45 = __toESM(require("path"), 1);
+var import_node_fs37 = __toESM(require("fs"), 1);
+var import_node_path38 = __toESM(require("path"), 1);
 var import_node_crypto12 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path45.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path38.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -54420,7 +53277,7 @@ function defaultGenerateOwnerPrincipalId() {
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs44.default.readFileSync(file, "utf8");
+    const raw = import_node_fs37.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -54440,25 +53297,25 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs44.default.mkdirSync(import_node_path45.default.dirname(file), { recursive: true });
-  import_node_fs44.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs37.default.mkdirSync(import_node_path38.default.dirname(file), { recursive: true });
+  import_node_fs37.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs44.default.chmodSync(file, 384);
+    import_node_fs37.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs45 = __toESM(require("fs"), 1);
+var import_node_fs38 = __toESM(require("fs"), 1);
 var import_node_os15 = __toESM(require("os"), 1);
-var import_node_path46 = __toESM(require("path"), 1);
+var import_node_path39 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function loadOwnerDisplayName(dataDir) {
   const fallback = import_node_os15.default.userInfo().username;
-  const profilePath = import_node_path46.default.join(dataDir, PROFILE_FILENAME);
+  const profilePath = import_node_path39.default.join(dataDir, PROFILE_FILENAME);
   let raw;
   try {
-    raw = import_node_fs45.default.readFileSync(profilePath, "utf8");
+    raw = import_node_fs38.default.readFileSync(profilePath, "utf8");
   } catch {
     return fallback;
   }
@@ -54481,18 +53338,18 @@ function loadOwnerDisplayName(dataDir) {
 }
 
 // src/feishu-auth/owner-identity-store.ts
-var import_node_fs46 = __toESM(require("fs"), 1);
-var import_node_path47 = __toESM(require("path"), 1);
+var import_node_fs39 = __toESM(require("fs"), 1);
+var import_node_path40 = __toESM(require("path"), 1);
 var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
 var OwnerIdentityStore = class {
   file;
   constructor(dataDir) {
-    this.file = import_node_path47.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
+    this.file = import_node_path40.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
   }
   read() {
     let raw;
     try {
-      raw = import_node_fs46.default.readFileSync(this.file, "utf8");
+      raw = import_node_fs39.default.readFileSync(this.file, "utf8");
     } catch {
       return null;
     }
@@ -54520,16 +53377,16 @@ var OwnerIdentityStore = class {
     };
   }
   write(record) {
-    import_node_fs46.default.mkdirSync(import_node_path47.default.dirname(this.file), { recursive: true });
-    import_node_fs46.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
+    import_node_fs39.default.mkdirSync(import_node_path40.default.dirname(this.file), { recursive: true });
+    import_node_fs39.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
     try {
-      import_node_fs46.default.chmodSync(this.file, 384);
+      import_node_fs39.default.chmodSync(this.file, 384);
     } catch {
     }
   }
   clear() {
     try {
-      import_node_fs46.default.unlinkSync(this.file);
+      import_node_fs39.default.unlinkSync(this.file);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -54666,9 +53523,9 @@ var CentralClientError = class extends Error {
   code;
   cause;
 };
-async function centralRequest(opts, path77, init) {
+async function centralRequest(opts, path70, init) {
   const f = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}${path77}`;
+  const url = `${opts.api.replace(/\/+$/, "")}${path70}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
   let res;
@@ -54862,8 +53719,8 @@ function verifyConnectToken(args) {
 }
 
 // src/feishu-auth/server-key.ts
-var fs56 = __toESM(require("fs"), 1);
-var path56 = __toESM(require("path"), 1);
+var fs49 = __toESM(require("fs"), 1);
+var path49 = __toESM(require("path"), 1);
 var FILE_NAME2 = "server-signing-key.json";
 var ServerKeyStore = class {
   constructor(dataDir) {
@@ -54871,12 +53728,12 @@ var ServerKeyStore = class {
   }
   dataDir;
   filePath() {
-    return path56.join(this.dataDir, FILE_NAME2);
+    return path49.join(this.dataDir, FILE_NAME2);
   }
   /** 读缓存的公钥；无缓存 / 损坏 → null（调用方决定是否触发拉取） */
   read() {
     try {
-      const raw = fs56.readFileSync(this.filePath(), "utf8");
+      const raw = fs49.readFileSync(this.filePath(), "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.publicKeyPem === "string" && parsed.publicKeyPem.includes("PUBLIC KEY")) {
         return parsed.publicKeyPem;
@@ -54891,12 +53748,12 @@ var ServerKeyStore = class {
       publicKeyPem,
       fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    fs56.mkdirSync(this.dataDir, { recursive: true });
-    fs56.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
+    fs49.mkdirSync(this.dataDir, { recursive: true });
+    fs49.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
   }
   clear() {
     try {
-      fs56.unlinkSync(this.filePath());
+      fs49.unlinkSync(this.filePath());
     } catch {
     }
   }
@@ -54909,12 +53766,12 @@ init_protocol();
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs47 = __toESM(require("fs"), 1);
+var import_node_fs40 = __toESM(require("fs"), 1);
 var import_node_os16 = __toESM(require("os"), 1);
-var import_node_path48 = __toESM(require("path"), 1);
+var import_node_path41 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs47.default.readFileSync(file, "utf8");
+  const raw = import_node_fs40.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -54927,19 +53784,19 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path48.default.join(import_node_os16.default.homedir(), ".claude");
-  let projectDir = import_node_path48.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  let sourceFile = import_node_path48.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs47.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path41.default.join(import_node_os16.default.homedir(), ".claude");
+  let projectDir = import_node_path41.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  let sourceFile = import_node_path41.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs40.default.existsSync(sourceFile)) {
     const found = findTranscriptByToolSessionId(
-      import_node_path48.default.join(baseDir, "projects"),
+      import_node_path41.default.join(baseDir, "projects"),
       input.toolSessionId
     );
     if (!found) {
       throw new Error(`fork: source transcript not found: ${sourceFile}`);
     }
     sourceFile = found;
-    projectDir = import_node_path48.default.dirname(found);
+    projectDir = import_node_path41.default.dirname(found);
   }
   const entries = readJsonlEntries(sourceFile);
   const mainEntries = entries.filter((e) => e.isSidechain !== true);
@@ -54968,9 +53825,9 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const forkedFilePath = import_node_path48.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs47.default.mkdirSync(projectDir, { recursive: true });
-  import_node_fs47.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const forkedFilePath = import_node_path41.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs40.default.mkdirSync(projectDir, { recursive: true });
+  import_node_fs40.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
@@ -55341,7 +54198,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path59 = __toESM(require("path"), 1);
+var path52 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -55359,7 +54216,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path58 = __toESM(require("path"), 1);
+var path51 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -55372,42 +54229,42 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read", userWorkDir) {
-  const target = path58.resolve(absPath);
+  const target = path51.resolve(absPath);
   if (userWorkDir) {
-    const u = path58.resolve(userWorkDir);
-    const usep = u.endsWith(path58.sep) ? "" : path58.sep;
+    const u = path51.resolve(userWorkDir);
+    const usep = u.endsWith(path51.sep) ? "" : path51.sep;
     if (target === u || target.startsWith(u + usep)) return true;
   }
-  const root = path58.resolve(personaRoot);
-  const sep3 = root.endsWith(path58.sep) ? "" : path58.sep;
+  const root = path51.resolve(personaRoot);
+  const sep3 = root.endsWith(path51.sep) ? "" : path51.sep;
   if (!target.startsWith(root + sep3)) return false;
-  const rel = path58.relative(root, target);
+  const rel = path51.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId = rel.split(path58.sep)[0];
+  const personaId = rel.split(path51.sep)[0];
   if (!personaId) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path58.resolve(personaRoot);
-  const target = path58.resolve(absPath);
-  const sep3 = root.endsWith(path58.sep) ? "" : path58.sep;
+  const root = path51.resolve(personaRoot);
+  const target = path51.resolve(absPath);
+  const sep3 = root.endsWith(path51.sep) ? "" : path51.sep;
   if (!target.startsWith(root + sep3)) return null;
-  const rel = path58.relative(root, target);
+  const rel = path51.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path58.sep)[0];
+  const id = rel.split(path51.sep)[0];
   return id || null;
 }
 function isPathWithin(dir, absPath) {
-  const d = path58.resolve(dir);
-  const t = path58.resolve(absPath);
-  const sep3 = d.endsWith(path58.sep) ? "" : path58.sep;
+  const d = path51.resolve(dir);
+  const t = path51.resolve(absPath);
+  const sep3 = d.endsWith(path51.sep) ? "" : path51.sep;
   return t === d || t.startsWith(d + sep3);
 }
 function isPathInGuestBoundary(personaRoot, personaId, userWorkDir, absPath) {
   if (userWorkDir && isPathWithin(userWorkDir, absPath)) return true;
-  return personaIdFromPath(path58.resolve(absPath), personaRoot) === personaId;
+  return personaIdFromPath(path51.resolve(absPath), personaRoot) === personaId;
 }
 
 // src/handlers/history.ts
@@ -55433,7 +54290,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path59.join(personaRoot, pid),
+          path52.join(personaRoot, pid),
           personaRoot,
           "read",
           userWorkDir
@@ -55445,7 +54302,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path59.resolve(args.projectPath), personaRoot, "history:list");
+    assertGuestPath(ctx, path52.resolve(args.projectPath), personaRoot, "history:list");
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -55477,13 +54334,13 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path59.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
+    assertGuestPath(ctx, path52.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
     const subs = await history.listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path59.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
+    assertGuestPath(ctx, path52.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
     const res = await history.readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
   };
@@ -55492,7 +54349,7 @@ function buildHistoryHandlers(deps) {
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path59.resolve(d.cwd), personaRoot, "read", userWorkDir)
+        (d) => isGuestPathAllowed(ctx.grants, path52.resolve(d.cwd), personaRoot, "read", userWorkDir)
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -55509,7 +54366,7 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path60 = __toESM(require("path"), 1);
+var path53 = __toESM(require("path"), 1);
 var os16 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
@@ -55551,22 +54408,22 @@ function buildWorkspaceHandlers(deps) {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
     const fallbackCwd = isGuest && personaRoot ? personaRoot : os16.homedir();
-    const resolvedCwd = path60.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path60.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const resolvedCwd = path53.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path53.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list", usersRoot);
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path60.isAbsolute(args.path) ? path60.resolve(args.path) : path60.resolve(args.cwd, args.path);
+    const target = path53.isAbsolute(args.path) ? path53.resolve(args.path) : path53.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read", usersRoot);
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path60.resolve(args.cwd);
+    const cwdAbs = path53.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list", usersRoot);
     const list2 = await getSkillsForTool(args.tool ?? "claude", cwdAbs);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -55578,7 +54435,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path60.resolve(args.cwd);
+    const cwdAbs = path53.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list", usersRoot);
     if (args.tool === "codex") {
       return { response: { type: "agents:list", agents: [] } };
@@ -55600,20 +54457,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path62 = __toESM(require("path"), 1);
+var path55 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
-var import_node_child_process13 = require("child_process");
-var import_node_fs48 = __toESM(require("fs"), 1);
-var import_node_path49 = __toESM(require("path"), 1);
+var import_node_child_process10 = require("child_process");
+var import_node_fs41 = __toESM(require("fs"), 1);
+var import_node_path42 = __toESM(require("path"), 1);
 var import_node_util = require("util");
-var pexec = (0, import_node_util.promisify)(import_node_child_process13.execFile);
+var pexec = (0, import_node_util.promisify)(import_node_child_process10.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path49.default.resolve(p2);
+  const resolved = import_node_path42.default.resolve(p2);
   try {
-    return import_node_fs48.default.realpathSync(resolved);
+    return import_node_fs41.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -55687,7 +54544,7 @@ async function listGitBranches(cwd) {
 function assertGuestCwd(ctx, cwd, personaRoot, method, usersRoot) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
   const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
-  if (!isGuestPathAllowed(ctx.grants, path62.resolve(cwd), personaRoot, "read", userWorkDir)) {
+  if (!isGuestPathAllowed(ctx.grants, path55.resolve(cwd), personaRoot, "read", userWorkDir)) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -55972,18 +54829,6 @@ function buildContactHandlers(deps) {
       }
     };
   };
-  const dialInfo = async () => {
-    return {
-      response: {
-        type: "contact:dialInfo:ok",
-        contacts: deps.store.list().map((c) => ({
-          deviceId: c.deviceId,
-          displayName: c.displayName,
-          ...c.osUser ? { osUser: c.osUser } : {}
-        }))
-      }
-    };
-  };
   const pin = async (frame, _client, ctx) => {
     ensureOwner(ctx);
     const { type: _t, requestId: _r, ...rest } = frame;
@@ -56027,13 +54872,12 @@ function buildContactHandlers(deps) {
   };
   return {
     "contact:list": list,
-    "contact:dialInfo": dialInfo,
     "contact:pin": pin,
     "contact:remove": remove
   };
 }
 
-// src/handlers/contact-ssh.ts
+// src/handlers/contact-remote-access.ts
 init_protocol();
 function ensureOwner2(ctx) {
   if (!ctx || ctx.principal.kind !== "owner") {
@@ -56043,8 +54887,7 @@ function ensureOwner2(ctx) {
     );
   }
 }
-function buildContactSshHandlers(deps) {
-  const sshLog = deps.sshLog ?? nullContactSshLog;
+function buildContactRemoteAccessHandlers(deps) {
   const setRemoteAccess = async (frame, _client, ctx) => {
     ensureOwner2(ctx);
     const { type: _t, requestId: _r, ...rest } = frame;
@@ -56053,19 +54896,11 @@ function buildContactSshHandlers(deps) {
       remoteAccessAllowed: args.remoteAccessAllowed
     });
     if (!hit) {
-      sshLog.warn("authz.setRemoteAccess", "owner \u5C1D\u8BD5\u6539 SSH \u6388\u6743\u4F46 contact \u4E0D\u5728 store", {
-        peerDeviceId: args.deviceId
-      });
       throw new ClawdError(
         ERROR_CODES.CONTACT_NOT_FOUND,
         `CONTACT_NOT_FOUND: contact ${args.deviceId} not in store`
       );
     }
-    rebuildAuthorizedKeys(deps.store, deps.sshdDir);
-    sshLog.info("authz.setRemoteAccess", "owner \u6539\u4E86 SSH \u6388\u6743 \u2192 authorized_keys \u5DF2\u91CD\u5EFA", {
-      peerDeviceId: args.deviceId,
-      remoteAccessAllowed: args.remoteAccessAllowed
-    });
     deps.broadcast({
       type: "contact:remote-access-updated",
       deviceId: args.deviceId,
@@ -56132,16 +54967,12 @@ function buildWhoamiHandler(deps) {
         grantedPersonas.push({ id: file.personaId, displayName: file.label });
       }
     }
-    const sshPublicKey = deps.sshIdentityPublicKey();
-    const osUser = deps.selfOsUser();
     return {
       response: {
         type: "whoami:ok",
         owner,
         capability,
-        grantedPersonas,
-        ...sshPublicKey ? { sshPublicKey } : {},
-        ...osUser ? { osUser } : {}
+        grantedPersonas
       }
     };
   };
@@ -56217,10 +55048,7 @@ function buildDeviceHandlers(deps) {
         // 自动反向（spec 决策 #11）：自报本机可达地址，让对方反向加我为联系人；
         // 本机无 tunnel → null → connectRemote 省略 selfUrl 字段（不造假数据）。
         // 身份不自报：对方从 token 签名背书取我的 deviceId/ownerId/provider（决策 #16）。
-        selfUrl: deps.selfUrl() ?? void 0,
-        // 建联交换：自报本机 SSH pubkey + OS 账号名；未生成 → 省略。见 …#建联交换清单
-        selfSshPublicKey: deps.selfSshPublicKey() ?? void 0,
-        selfOsUser: deps.selfOsUser() ?? void 0
+        selfUrl: deps.selfUrl() ?? void 0
       });
     } catch (e) {
       throw new ClawdError(
@@ -56231,8 +55059,6 @@ function buildDeviceHandlers(deps) {
     try {
       const wh = await conn.whoami();
       const existing = deps.store.get(args.deviceId) ?? void 0;
-      const sshPublicKey = wh.sshPublicKey ?? existing?.sshPublicKey;
-      const osUser = wh.osUser ?? existing?.osUser;
       const contact = {
         deviceId: args.deviceId,
         ownerId: wh.ownerId,
@@ -56248,18 +55074,10 @@ function buildDeviceHandlers(deps) {
         grants: wh.grants,
         addedAt: now(),
         pinnedAt: existing?.pinnedAt ?? null,
-        remoteAccessAllowed: existing?.remoteAccessAllowed ?? false,
-        // 建联交换：对方 whoami:ok 下发的 pubkey / osUser 落库；对方老版本不带 →
-        // 保留既有值 / 不落 undefined 占位。见 doc/glossary/peer-mesh.md#建联交换清单
-        ...sshPublicKey ? { sshPublicKey } : {},
-        ...osUser ? { osUser } : {},
-        exposedDirs: []
+        remoteAccessAllowed: existing?.remoteAccessAllowed ?? false
       };
       deps.store.upsert(contact);
       deps.broadcast({ type: "contact:added", contact });
-      if (contact.remoteAccessAllowed && sshPublicKey && sshPublicKey !== existing?.sshPublicKey) {
-        deps.rebuildAuthorizedKeys?.();
-      }
       return {
         response: {
           type: "device:connect:ok",
@@ -56412,7 +55230,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path50 = __toESM(require("path"), 1);
+var import_node_path43 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -56492,12 +55310,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path50.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path50.default.isAbsolute(args.relPath) ? import_node_path50.default.resolve(args.relPath) : import_node_path50.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path43.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path43.default.isAbsolute(args.relPath) ? import_node_path43.default.resolve(args.relPath) : import_node_path43.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.signUrl", "group-acl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path50.default.isAbsolute(e.relPath) ? import_node_path50.default.resolve(e.relPath) : import_node_path50.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path43.default.isAbsolute(e.relPath) ? import_node_path43.default.resolve(e.relPath) : import_node_path43.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -56522,7 +55340,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path50.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
+    assertGuestAttachmentPath(ctx, import_node_path43.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -56537,8 +55355,8 @@ function buildAttachmentHandlers(deps) {
     if (!scope) {
       throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, `session ${args.sessionId} not found`);
     }
-    const cwdAbs = import_node_path50.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
-    const candidateAbs = import_node_path50.default.isAbsolute(args.relPath) ? import_node_path50.default.resolve(args.relPath) : import_node_path50.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path43.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
+    const candidateAbs = import_node_path43.default.isAbsolute(args.relPath) ? import_node_path43.default.resolve(args.relPath) : import_node_path43.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.groupAdd", "cwd-subtree");
     const from = ctx?.principal.kind === "owner" ? "owner" : "agent";
     const size = 0;
@@ -56597,19 +55415,19 @@ function buildAttachmentHandlers(deps) {
 
 // src/handlers/extension.ts
 var import_promises8 = __toESM(require("fs/promises"), 1);
-var import_node_path55 = __toESM(require("path"), 1);
+var import_node_path48 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/extension/bundle-zip.ts
 var import_promises5 = __toESM(require("fs/promises"), 1);
-var import_node_path51 = __toESM(require("path"), 1);
+var import_node_path44 = __toESM(require("path"), 1);
 var import_node_crypto14 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
   const zip = new import_jszip2.default();
   for (const rel of entries) {
-    const abs = import_node_path51.default.join(dir, rel);
+    const abs = import_node_path44.default.join(dir, rel);
     const content = await import_promises5.default.readFile(abs);
     zip.file(rel, content, { date: FIXED_DATE });
   }
@@ -56630,7 +55448,7 @@ async function listFilesSorted(rootDir) {
   return out;
 }
 async function walk(absRoot, relPrefix, out) {
-  const dirAbs = import_node_path51.default.join(absRoot, relPrefix);
+  const dirAbs = import_node_path44.default.join(absRoot, relPrefix);
   const entries = await import_promises5.default.readdir(dirAbs, { withFileTypes: true });
   for (const e of entries) {
     if (IGNORE_BASENAMES.has(e.name)) continue;
@@ -56684,25 +55502,25 @@ function computePublishCheck(args) {
 
 // src/extension/install-flow.ts
 var import_promises6 = __toESM(require("fs/promises"), 1);
-var import_node_path53 = __toESM(require("path"), 1);
+var import_node_path46 = __toESM(require("path"), 1);
 var import_node_os19 = __toESM(require("os"), 1);
 var import_node_crypto15 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
 var import_node_os18 = __toESM(require("os"), 1);
-var import_node_path52 = __toESM(require("path"), 1);
+var import_node_path45 = __toESM(require("path"), 1);
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path52.default.join(import_node_os18.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path45.default.join(import_node_os18.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
-  return import_node_path52.default.join(clawdHomeRoot(override), "extensions");
+  return import_node_path45.default.join(clawdHomeRoot(override), "extensions");
 }
 function publishedChannelsFile(override) {
-  return import_node_path52.default.join(clawdHomeRoot(override), "extensions-published.json");
+  return import_node_path45.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
 function bundleCacheRoot(override) {
-  return import_node_path52.default.join(clawdHomeRoot(override), "extension-bundles");
+  return import_node_path45.default.join(clawdHomeRoot(override), "extension-bundles");
 }
 
 // src/extension/install-flow.ts
@@ -56729,7 +55547,7 @@ async function installFromChannel(args, deps) {
     throw new InstallError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path53.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path46.default.isAbsolute(name)) {
       throw new InstallError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -56761,7 +55579,7 @@ async function installFromChannel(args, deps) {
     );
   }
   const localExtId = namespacedExtId(ownerSlug, channelRef.ownerPrincipalId);
-  const destDir = import_node_path53.default.join(deps.extensionsRoot, localExtId);
+  const destDir = import_node_path46.default.join(deps.extensionsRoot, localExtId);
   let destExists = false;
   try {
     await import_promises6.default.access(destDir);
@@ -56775,16 +55593,16 @@ async function installFromChannel(args, deps) {
     );
   }
   const stage = await import_promises6.default.mkdtemp(
-    import_node_path53.default.join(import_node_os19.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+    import_node_path46.default.join(import_node_os19.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path53.default.join(stage, name);
+      const dest = import_node_path46.default.join(stage, name);
       if (entry.dir) {
         await import_promises6.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises6.default.mkdir(import_node_path53.default.dirname(dest), { recursive: true });
+      await import_promises6.default.mkdir(import_node_path46.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises6.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -56805,7 +55623,7 @@ async function installFromChannel(args, deps) {
 
 // src/extension/update-flow.ts
 var import_promises7 = __toESM(require("fs/promises"), 1);
-var import_node_path54 = __toESM(require("path"), 1);
+var import_node_path47 = __toESM(require("path"), 1);
 var import_node_os20 = __toESM(require("os"), 1);
 var import_node_crypto16 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
@@ -56822,11 +55640,11 @@ async function updateFromChannel(args, deps) {
     channelRef.extId,
     channelRef.ownerPrincipalId
   );
-  const liveDir = import_node_path54.default.join(deps.extensionsRoot, localExtId);
+  const liveDir = import_node_path47.default.join(deps.extensionsRoot, localExtId);
   const prevDir = `${liveDir}.prev`;
   let existingVersion;
   try {
-    const raw = await import_promises7.default.readFile(import_node_path54.default.join(liveDir, "manifest.json"), "utf8");
+    const raw = await import_promises7.default.readFile(import_node_path47.default.join(liveDir, "manifest.json"), "utf8");
     const parsed2 = ExtensionManifestSchema.safeParse(JSON.parse(raw));
     if (!parsed2.success) {
       throw new UpdateError(
@@ -56859,7 +55677,7 @@ async function updateFromChannel(args, deps) {
     throw new UpdateError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path54.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path47.default.isAbsolute(name)) {
       throw new UpdateError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -56894,16 +55712,16 @@ async function updateFromChannel(args, deps) {
   await import_promises7.default.rm(prevDir, { recursive: true, force: true });
   await import_promises7.default.rename(liveDir, prevDir);
   const stage = await import_promises7.default.mkdtemp(
-    import_node_path54.default.join(import_node_os20.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+    import_node_path47.default.join(import_node_os20.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path54.default.join(stage, name);
+      const dest = import_node_path47.default.join(stage, name);
       if (entry.dir) {
         await import_promises7.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises7.default.mkdir(import_node_path54.default.dirname(dest), { recursive: true });
+      await import_promises7.default.mkdir(import_node_path47.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises7.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -56996,7 +55814,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
       );
     }
   }
-  const manifestPath = import_node_path55.default.join(root, extId, "manifest.json");
+  const manifestPath = import_node_path48.default.join(root, extId, "manifest.json");
   const manifest = await readManifest(root, extId);
   const next = { ...manifest, version: newVersion };
   const tmp = `${manifestPath}.tmp`;
@@ -57004,7 +55822,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
   await import_promises8.default.rename(tmp, manifestPath);
 }
 async function readManifest(root, extId) {
-  const file = import_node_path55.default.join(root, extId, "manifest.json");
+  const file = import_node_path48.default.join(root, extId, "manifest.json");
   let raw;
   try {
     raw = await import_promises8.default.readFile(file, "utf8");
@@ -57095,7 +55913,7 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256, buffer } = await bundleExtensionDir(import_node_path55.default.join(deps.root, extId));
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path48.default.join(deps.root, extId));
     return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
@@ -57276,9 +56094,9 @@ function buildExtensionHandlers(deps) {
 }
 
 // src/app-builder/project-store.ts
-var import_node_fs49 = require("fs");
-var import_node_child_process14 = require("child_process");
-var import_node_path56 = require("path");
+var import_node_fs42 = require("fs");
+var import_node_child_process11 = require("child_process");
+var import_node_path49 = require("path");
 init_protocol();
 var PROJECTS_DIR = "projects";
 var META_FILE = ".clawd-project.json";
@@ -57292,19 +56110,19 @@ var ProjectStore = class {
   root;
   /** projects/<name>/.clawd-project.json 路径 */
   metaPath(name) {
-    return (0, import_node_path56.join)(this.projectsRoot(), name, META_FILE);
+    return (0, import_node_path49.join)(this.projectsRoot(), name, META_FILE);
   }
   /** projects/<name>/ 目录路径（cwd 用） */
   projectDir(name) {
-    return (0, import_node_path56.join)(this.projectsRoot(), name);
+    return (0, import_node_path49.join)(this.projectsRoot(), name);
   }
   projectsRoot() {
-    return (0, import_node_path56.join)(this.root, PROJECTS_DIR);
+    return (0, import_node_path49.join)(this.root, PROJECTS_DIR);
   }
   async list() {
     let entries;
     try {
-      entries = await import_node_fs49.promises.readdir(this.projectsRoot());
+      entries = await import_node_fs42.promises.readdir(this.projectsRoot());
     } catch (err) {
       if (err.code === "ENOENT") return [];
       throw err;
@@ -57312,7 +56130,7 @@ var ProjectStore = class {
     const out = [];
     for (const name of entries) {
       try {
-        const raw = await import_node_fs49.promises.readFile(this.metaPath(name), "utf8");
+        const raw = await import_node_fs42.promises.readFile(this.metaPath(name), "utf8");
         const json = JSON.parse(raw);
         let migrated = false;
         if (typeof json.devCommand !== "string" || json.devCommand.length === 0) {
@@ -57323,7 +56141,7 @@ var ProjectStore = class {
         if (parsed.success) {
           out.push(parsed.data);
           if (migrated) {
-            void import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
+            void import_node_fs42.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
             });
           }
         }
@@ -57367,8 +56185,8 @@ var ProjectStore = class {
       throw new Error(`invalid name "${name}": ${validated.error.message}`);
     }
     const dir = this.projectDir(name);
-    await import_node_fs49.promises.mkdir(dir, { recursive: true });
-    await import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
+    await import_node_fs42.promises.mkdir(dir, { recursive: true });
+    await import_node_fs42.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
     return meta;
   }
   /**
@@ -57382,7 +56200,7 @@ var ProjectStore = class {
   async scaffold(name, templateSrcDir, scaffoldScriptPath) {
     const destDir = this.projectDir(name);
     return await new Promise((resolve6, reject) => {
-      const child = (0, import_node_child_process14.spawn)("bash", [scaffoldScriptPath, name, templateSrcDir, destDir], {
+      const child = (0, import_node_child_process11.spawn)("bash", [scaffoldScriptPath, name, templateSrcDir, destDir], {
         env: { ...process.env, PATH: process.env.PATH ?? "" },
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -57411,7 +56229,7 @@ var ProjectStore = class {
   }
   async delete(name) {
     const dir = this.projectDir(name);
-    await import_node_fs49.promises.rm(dir, { recursive: true, force: true });
+    await import_node_fs42.promises.rm(dir, { recursive: true, force: true });
   }
   async updatePort(name, newPort) {
     if (newPort < PROJECT_PORT_MIN || newPort > PROJECT_PORT_MAX) {
@@ -57427,7 +56245,7 @@ var ProjectStore = class {
       throw new Error(`port ${newPort} already used / \u5DF2\u88AB project "${conflict.name}" \u5360\u7528`);
     }
     const updated = { ...target, port: newPort };
-    await import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
+    await import_node_fs42.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
     return updated;
   }
   /**
@@ -57444,7 +56262,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`invalid prodUrl "${url}": ${validated.error.message}`);
     }
-    await import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs42.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
   /**
@@ -57465,7 +56283,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`invalid publishJob: ${validated.error.message}`);
     }
-    await import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs42.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
   /** 清掉 .clawd-project.json.publishJob 字段。其他字段保持原样。 */
@@ -57480,13 +56298,13 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`failed to clear publishJob: ${validated.error.message}`);
     }
-    await import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs42.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
 };
 
 // src/app-builder/kill-port.ts
-var import_node_child_process15 = require("child_process");
+var import_node_child_process12 = require("child_process");
 async function killPortOccupants(port, ownedPids, logger) {
   let pids;
   try {
@@ -57528,7 +56346,7 @@ async function killPortOccupants(port, ownedPids, logger) {
 }
 function listPidsOnPort(port) {
   return new Promise((resolve6, reject) => {
-    (0, import_node_child_process15.execFile)(
+    (0, import_node_child_process12.execFile)(
       "lsof",
       ["-ti", `:${port}`],
       { timeout: 3e3 },
@@ -57600,9 +56418,9 @@ var PublishJobRegistry = class {
 };
 
 // src/app-builder/publish-job-runner.ts
-var import_node_child_process16 = require("child_process");
-var import_node_fs50 = require("fs");
-var import_node_path57 = require("path");
+var import_node_child_process13 = require("child_process");
+var import_node_fs43 = require("fs");
+var import_node_path50 = require("path");
 
 // src/app-builder/publish-stage-parser.ts
 var STAGE_RE = /^\s*::stage::(build|deploy|verify)\s*$/;
@@ -57629,19 +56447,19 @@ function tailStderrLines(buf, n) {
 // src/app-builder/publish-job-runner.ts
 async function startPublishJob(deps, args) {
   const { registry: registry2, projectDir } = deps;
-  const spawn16 = deps.spawnImpl ?? import_node_child_process16.spawn;
+  const spawn13 = deps.spawnImpl ?? import_node_child_process13.spawn;
   if (registry2.has(args.name)) {
     return { jobId: registry2.get(args.name).jobId, status: "already-publishing" };
   }
   const projDir = projectDir(args.name);
-  const logPath = (0, import_node_path57.join)(projDir, ".publish.log");
+  const logPath = (0, import_node_path50.join)(projDir, ".publish.log");
   let logStream = null;
   try {
-    logStream = (0, import_node_fs50.createWriteStream)(logPath, { flags: "w" });
+    logStream = (0, import_node_fs43.createWriteStream)(logPath, { flags: "w" });
   } catch {
     logStream = null;
   }
-  const child = spawn16("bash", [args.scriptPath, projDir, args.personaRoot ?? ""], {
+  const child = spawn13("bash", [args.scriptPath, projDir, args.personaRoot ?? ""], {
     cwd: projDir,
     env: process.env,
     stdio: ["ignore", "pipe", "pipe"]
@@ -57894,8 +56712,8 @@ async function recoverInterruptedJobs(deps) {
 
 // src/handlers/app-builder.ts
 init_protocol();
-var import_node_path58 = require("path");
-var import_node_fs51 = require("fs");
+var import_node_path51 = require("path");
+var import_node_fs44 = require("fs");
 var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
 var DEV_SERVER_READY_TIMEOUT_MS = 3e4;
 async function recoverInterruptedPublishJobs(store, logger) {
@@ -57976,7 +56794,7 @@ function buildAppBuilderHandlers(deps) {
   async function listAllUsersProjects() {
     if (!deps.usersRoot || !deps.getStore) return [];
     const getStore = deps.getStore;
-    const userIds = await import_node_fs51.promises.readdir(deps.usersRoot).catch(() => []);
+    const userIds = await import_node_fs44.promises.readdir(deps.usersRoot).catch(() => []);
     const perUser = await Promise.all(
       userIds.map((uid) => getStore(uid).list().catch(() => []))
     );
@@ -58052,8 +56870,8 @@ function buildAppBuilderHandlers(deps) {
     const project = await userStore.create(f.name, reservedPorts);
     try {
       const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(session.ownerPersonaId ?? "") : deps.personaRoot;
-      const templateSrcDir = (0, import_node_path58.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE);
-      const scaffoldScript = (0, import_node_path58.join)(deps.deployKitRoot, "scripts", "new-extension.sh");
+      const templateSrcDir = (0, import_node_path51.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE);
+      const scaffoldScript = (0, import_node_path51.join)(deps.deployKitRoot, "scripts", "new-extension.sh");
       const scaffoldResult = await userStore.scaffold(project.name, templateSrcDir, scaffoldScript);
       deps.logger?.info("app-builder.scaffold.done", {
         name: project.name,
@@ -58274,7 +57092,7 @@ function buildAppBuilderHandlers(deps) {
       await userStore.clearPublishJob(args.name);
     }
     const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(boundSession.ownerPersonaId ?? "") : deps.personaRoot;
-    const scriptPath = (0, import_node_path58.join)(deps.deployKitRoot, "scripts", "publish.sh");
+    const scriptPath = (0, import_node_path51.join)(deps.deployKitRoot, "scripts", "publish.sh");
     deps.logger?.info("app-builder.publish.start", {
       name: args.name,
       sessionId: boundSession.sessionId,
@@ -58450,7 +57268,7 @@ function buildVisitorHandlers(deps) {
 
 // src/extension/registry.ts
 var import_promises9 = __toESM(require("fs/promises"), 1);
-var import_node_path59 = __toESM(require("path"), 1);
+var import_node_path52 = __toESM(require("path"), 1);
 async function loadAll(root) {
   let entries;
   try {
@@ -58463,13 +57281,13 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path59.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path52.default.join(root, ent.name), ent.name));
   }
   records.sort((a, b2) => a.extId < b2.extId ? -1 : a.extId > b2.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path59.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path52.default.join(dir, "manifest.json");
   let raw;
   try {
     raw = await import_promises9.default.readFile(manifestPath, "utf8");
@@ -58514,7 +57332,7 @@ async function loadOne(dir, dirName) {
 
 // src/extension/uninstall.ts
 var import_promises10 = __toESM(require("fs/promises"), 1);
-var import_node_path60 = __toESM(require("path"), 1);
+var import_node_path53 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -58523,7 +57341,7 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path60.default.join(deps.root, deps.extId);
+  const dir = import_node_path53.default.join(deps.root, deps.extId);
   try {
     await import_promises10.default.access(dir);
   } catch {
@@ -58540,7 +57358,7 @@ var import_node_crypto18 = require("crypto");
 init_protocol();
 
 // src/peer-ops/run-command.ts
-var import_node_child_process17 = require("child_process");
+var import_node_child_process14 = require("child_process");
 var import_node_os21 = __toESM(require("os"), 1);
 var DEFAULT_TIMEOUT_MS5 = 3e4;
 var MAX_TIMEOUT_MS = 3e5;
@@ -58548,7 +57366,7 @@ var MAX_OUTPUT_BYTES = 1048576;
 function runCommand(command, opts = {}) {
   const timeoutMs = Math.min(opts.timeoutMs ?? DEFAULT_TIMEOUT_MS5, MAX_TIMEOUT_MS);
   return new Promise((resolve6) => {
-    const child = (0, import_node_child_process17.spawn)("bash", ["-c", command], { cwd: import_node_os21.default.homedir() });
+    const child = (0, import_node_child_process14.spawn)("bash", ["-c", command], { cwd: import_node_os21.default.homedir() });
     const out = [];
     const err = [];
     let outBytes = 0;
@@ -58703,11 +57521,9 @@ function buildMethodHandlers(deps) {
       broadcast: deps.broadcastToOwners,
       now: () => Date.now()
     }),
-    ...buildContactSshHandlers({
+    ...buildContactRemoteAccessHandlers({
       store: deps.contactStore,
-      broadcast: deps.broadcastToOwners,
-      sshdDir: deps.sshdDir,
-      sshLog: deps.contactSshLog
+      broadcast: deps.broadcastToOwners
     }),
     // 跨设备 exec（spec 2026-07-16）：A 侧带 peerDeviceId → forwardPeerExecToPeer；
     // B 侧无 peerDeviceId → 本地 runCommand（handler 判 remoteAccessAllowed）。
@@ -58721,9 +57537,7 @@ function buildMethodHandlers(deps) {
       ownerId: deps.ownerId,
       ownerProvider: deps.ownerProvider,
       personaStore: deps.personaStore,
-      capabilityManager: deps.capabilityManager,
-      sshIdentityPublicKey: deps.sshIdentityPublicKey,
-      selfOsUser: deps.selfOsUser
+      capabilityManager: deps.capabilityManager
     }),
     ...buildFeishuAuthHandlers(deps.feishuAuth),
     ...buildDeviceHandlers(deps.feishuDevice),
@@ -58766,7 +57580,7 @@ function buildMethodHandlers(deps) {
 }
 
 // src/app-builder/dev-server-supervisor.ts
-var import_node_child_process18 = require("child_process");
+var import_node_child_process15 = require("child_process");
 var import_node_events2 = require("events");
 var DEFAULT_READY_PATTERN = /Local:\s+https?:\/\/|Nest application successfully started|server listening on/i;
 var DevServerSupervisor = class extends import_node_events2.EventEmitter {
@@ -58803,7 +57617,7 @@ var DevServerSupervisor = class extends import_node_events2.EventEmitter {
       tunnelHost: args.tunnelHost,
       devCommand: cmd
     });
-    const child = (0, import_node_child_process18.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process15.spawn)("sh", ["-c", cmd], {
       cwd: args.cwd,
       env,
       stdio: "pipe",
@@ -59055,7 +57869,7 @@ var METHOD_GRANT_MAP = {
   "contact:list": ADMIN_ANY,
   "contact:pin": ADMIN_ANY,
   "contact:remove": ADMIN_ANY,
-  // contact:setRemoteAccess (owner UI 配 SSH 授权)：ADMIN_ANY
+  // contact:setRemoteAccess (owner UI 配远程访问授权)：ADMIN_ANY
   //   (对齐 inbox:postMessage 的"能连上=有 auth，业务在 handler 校"模式)
   "contact:setRemoteAccess": ADMIN_ANY,
   // ---- visitor:* (访客名单，owner-only) ----
@@ -59245,12 +58059,12 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 }
 
 // src/extension/runtime.ts
-var import_node_child_process19 = require("child_process");
-var import_node_path61 = __toESM(require("path"), 1);
+var import_node_child_process16 = require("child_process");
+var import_node_path54 = __toESM(require("path"), 1);
 var import_promises11 = require("timers/promises");
 
 // src/extension/port-allocator.ts
-var import_node_net3 = __toESM(require("net"), 1);
+var import_node_net2 = __toESM(require("net"), 1);
 var PortExhaustedError = class extends Error {
   constructor(min, max) {
     super(`no free port in [${min},${max}]`);
@@ -59263,7 +58077,7 @@ var PortExhaustedError = class extends Error {
 };
 function probe(port) {
   return new Promise((resolve6) => {
-    const srv = import_node_net3.default.createServer();
+    const srv = import_node_net2.default.createServer();
     srv.once("error", () => resolve6(false));
     srv.once("listening", () => {
       srv.close(() => resolve6(true));
@@ -59347,13 +58161,13 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path61.default.join(this.root, extId);
+    const dir = import_node_path54.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
       CLAWOS_EXT_ID: extId
     };
-    const child = (0, import_node_child_process19.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process16.spawn)("sh", ["-c", cmd], {
       cwd: dir,
       env,
       stdio: ["ignore", "pipe", "pipe"],
@@ -59459,7 +58273,7 @@ ${handle.stderrTail}`
 
 // src/extension/published-channels.ts
 var import_promises12 = __toESM(require("fs/promises"), 1);
-var import_node_path62 = __toESM(require("path"), 1);
+var import_node_path55 = __toESM(require("path"), 1);
 init_zod();
 var PublishedChannelsError = class extends Error {
   constructor(code, message) {
@@ -59558,7 +58372,7 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises12.default.mkdir(import_node_path62.default.dirname(this.filePath), { recursive: true });
+    await import_promises12.default.mkdir(import_node_path55.default.dirname(this.filePath), { recursive: true });
     await import_promises12.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
     await import_promises12.default.rename(tmp, this.filePath);
   }
@@ -59566,7 +58380,7 @@ var PublishedChannelStore = class {
 
 // src/extension/bundle-cache.ts
 var import_promises13 = __toESM(require("fs/promises"), 1);
-var import_node_path63 = __toESM(require("path"), 1);
+var import_node_path56 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -59575,14 +58389,14 @@ var BundleCache = class {
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
     await import_promises13.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path63.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path56.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
     await import_promises13.default.writeFile(tmp, buffer, { mode: 384 });
     await import_promises13.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path63.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path56.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
       return await import_promises13.default.readFile(file);
     } catch (e) {
@@ -59592,20 +58406,13 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path63.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path56.default.join(this.rootDir, `${snapshotHash}.zip`);
     await import_promises13.default.rm(file, { force: true });
   }
 };
 
 // src/index.ts
 var import_meta6 = {};
-function currentOsUser() {
-  try {
-    return import_node_os22.default.userInfo().username;
-  } catch {
-    return "";
-  }
-}
 async function startDaemon(config) {
   const authFile = loadOrCreateAuthFile({ dataDir: config.dataDir });
   const logShippingCfg = config.logShipping ?? { endpoint: null, sampling: {}, mode: "off" };
@@ -59622,24 +58429,24 @@ async function startDaemon(config) {
     sampling: logShippingCfg.sampling,
     homeDir: import_node_os22.default.homedir()
   });
-  const logDir = import_node_path64.default.join(config.dataDir, "log");
-  import_node_fs52.default.mkdirSync(logDir, { recursive: true });
+  const logDir = import_node_path57.default.join(config.dataDir, "log");
+  import_node_fs45.default.mkdirSync(logDir, { recursive: true });
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path64.default.join(logDir, "clawd.log"),
+    file: import_node_path57.default.join(logDir, "clawd.log"),
     logClient
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const screenIdleProbeLogger = createFileOnlyLogger({
-    file: import_node_path64.default.join(logDir, "screen-idle-probe.log"),
+    file: import_node_path57.default.join(logDir, "screen-idle-probe.log"),
     level: "debug"
   });
   logger.info("screen-idle probe logger enabled", {
-    file: import_node_path64.default.join(logDir, "screen-idle-probe.log")
+    file: import_node_path57.default.join(logDir, "screen-idle-probe.log")
   });
   const CAP_TARGETS = [
-    import_node_path64.default.join(logDir, "clawd.log"),
-    import_node_path64.default.join(logDir, "screen-idle-probe.log")
+    import_node_path57.default.join(logDir, "clawd.log"),
+    import_node_path57.default.join(logDir, "screen-idle-probe.log")
   ];
   const LOG_CAP_MAX_BYTES = 10 * 1024 * 1024;
   const LOG_CAP_KEEP_BYTES = 5 * 1024 * 1024;
@@ -59735,7 +58542,7 @@ async function startDaemon(config) {
     // Task 1.7：authenticate 注入路径替代 expectedToken 单 token 比对。
     // owner 路径 constantTimeEqual 防侧信道；guest 路径走 capabilityRegistry.
     expectedToken: resolvedAuthToken,
-    authenticate: async (t, selfUrl, selfSshPublicKey, selfOsUser) => {
+    authenticate: async (t, selfUrl) => {
       const result = await authenticate(t, buildConnectAuthDeps());
       if (result.ok && result.context.principal.kind === "guest") {
         void autoReverseContact({
@@ -59746,11 +58553,6 @@ async function startDaemon(config) {
           provider: result.context.provider ?? "",
           displayName: result.context.principal.displayName ?? result.context.principal.id,
           selfUrl,
-          // 建联交换：guest auth 帧自报的 pubkey / osUser 落 contact；pubkey 变化且已授权时
-          // 立即重建 authorized_keys（重新握手 = 迁移路径）。见 …#建联交换清单
-          sshPublicKey: selfSshPublicKey,
-          osUser: selfOsUser,
-          rebuildAuthorizedKeys: () => rebuildAuthorizedKeys(contactStore, import_node_path64.default.join(config.dataDir, "sshd")),
           // 决策 #16 换票补全：用 owner 当前 jwt 换 aud=对方设备 的票（本机主动连对方用）。
           // 现读 ownerIdentityStore（热切换后用新身份）；失败 → null → 保持空票。
           exchangeToken: async (targetDeviceId) => {
@@ -59798,8 +58600,8 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path64.default.join(config.dataDir, "personas"));
-  const usersRoot = import_node_path64.default.join(config.dataDir, "users");
+  const personaStore = new PersonaStore(import_node_path57.default.join(config.dataDir, "personas"));
+  const usersRoot = import_node_path57.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -59819,17 +58621,17 @@ async function startDaemon(config) {
   migrateCodexSandbox({ store: personaStore, logger });
   const groupFileStore = new GroupFileStore({ dataDir: config.dataDir, logger });
   const personaDispatchManager = new PersonaDispatchManager({ genId: () => v4_default() });
-  const here = typeof __dirname === "string" ? __dirname : import_node_path64.default.dirname((0, import_node_url4.fileURLToPath)(import_meta6.url));
+  const here = typeof __dirname === "string" ? __dirname : import_node_path57.default.dirname((0, import_node_url4.fileURLToPath)(import_meta6.url));
   const mcpConfigs = [];
   const dispatchServerCandidates = [
-    import_node_path64.default.join(here, "dispatch", "mcp-server.cjs"),
+    import_node_path57.default.join(here, "dispatch", "mcp-server.cjs"),
     // 生产 dist/index → dist/dispatch/mcp-server.cjs
-    import_node_path64.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
+    import_node_path57.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
-  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
+  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs45.default.existsSync(p2));
   if (dispatchServerScriptPath) {
-    const dispatchLogPath = import_node_path64.default.join(logDir, "dispatch-mcp-server.log");
+    const dispatchLogPath = import_node_path57.default.join(logDir, "dispatch-mcp-server.log");
     const dispatchCfgPath = writeDispatchMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: dispatchServerScriptPath,
@@ -59847,12 +58649,12 @@ async function startDaemon(config) {
     });
   }
   const ticketServerCandidates = [
-    import_node_path64.default.join(here, "ticket", "mcp-server.cjs"),
-    import_node_path64.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
+    import_node_path57.default.join(here, "ticket", "mcp-server.cjs"),
+    import_node_path57.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
-  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
+  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs45.default.existsSync(p2));
   if (ticketServerScriptPath) {
-    const ticketLogPath = import_node_path64.default.join(logDir, "ticket-mcp-server.log");
+    const ticketLogPath = import_node_path57.default.join(logDir, "ticket-mcp-server.log");
     const ticketCfgPath = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
@@ -59872,12 +58674,12 @@ async function startDaemon(config) {
     });
   }
   const shiftServerCandidates = [
-    import_node_path64.default.join(here, "shift", "mcp-server.cjs"),
-    import_node_path64.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
+    import_node_path57.default.join(here, "shift", "mcp-server.cjs"),
+    import_node_path57.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
-  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
+  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs45.default.existsSync(p2));
   if (shiftServerScriptPath) {
-    const shiftLogPath = import_node_path64.default.join(logDir, "shift-mcp-server.log");
+    const shiftLogPath = import_node_path57.default.join(logDir, "shift-mcp-server.log");
     const shiftCfgPath = await writeShiftMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: shiftServerScriptPath,
@@ -59896,12 +58698,12 @@ async function startDaemon(config) {
     );
   }
   const inboxServerCandidates = [
-    import_node_path64.default.join(here, "inbox", "mcp-server.cjs"),
-    import_node_path64.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
+    import_node_path57.default.join(here, "inbox", "mcp-server.cjs"),
+    import_node_path57.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
   ];
-  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
+  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs45.default.existsSync(p2));
   if (inboxServerScriptPath) {
-    const inboxLogPath = import_node_path64.default.join(logDir, "inbox-mcp-server.log");
+    const inboxLogPath = import_node_path57.default.join(logDir, "inbox-mcp-server.log");
     const inboxCfgPath = await writeInboxMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: inboxServerScriptPath,
@@ -59920,10 +58722,10 @@ async function startDaemon(config) {
     );
   }
   const peerOpsServerCandidates = [
-    import_node_path64.default.join(here, "peer-ops", "mcp-server.cjs"),
-    import_node_path64.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
+    import_node_path57.default.join(here, "peer-ops", "mcp-server.cjs"),
+    import_node_path57.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
   ];
-  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
+  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs45.default.existsSync(p2));
   if (peerOpsServerScriptPath) {
     const peerOpsCfgPath = writePeerOpsMcpConfig({
       dataDir: config.dataDir,
@@ -59941,7 +58743,7 @@ async function startDaemon(config) {
     );
   }
   const shiftStore = createShiftStore({
-    filePath: import_node_path64.default.join(config.dataDir, "shift.json"),
+    filePath: import_node_path57.default.join(config.dataDir, "shift.json"),
     ownerIdProvider: () => ownerPrincipalId,
     now: () => Date.now()
   });
@@ -59963,7 +58765,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path64.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path57.default.join(config.dataDir, "personas"),
     usersRoot,
     personaStore,
     ownerDisplayName,
@@ -60001,10 +58803,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path64.default.isAbsolute(input.relPath) ? input.relPath : import_node_path64.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path57.default.isAbsolute(input.relPath) ? input.relPath : import_node_path57.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs52.default.statSync(absPath).size;
+          size = import_node_fs45.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -60190,14 +58992,6 @@ async function startDaemon(config) {
   const effectivePreviewPorts = Array.from(
     /* @__PURE__ */ new Set([...config.previewPorts ?? [], ...appBuilderPortRange])
   );
-  const sshLog = createContactSshLog(config.dataDir);
-  try {
-    await ensureSshIdentity(config.dataDir);
-  } catch (e) {
-    logger.warn("ssh-identity generate failed; contact SSH pubkey exchange disabled", {
-      err: e.message
-    });
-  }
   const makeHandlers = () => buildMethodHandlers({
     manager,
     workspace,
@@ -60241,11 +59035,11 @@ async function startDaemon(config) {
       // 'persona/<pid>/owner'，default 走 'default'。
       getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
       // guest path guard：candidate 必须在 personaRoot 子树或调用者自己的 user-dir 下
-      personaRoot: import_node_path64.default.join(config.dataDir, "personas"),
+      personaRoot: import_node_path57.default.join(config.dataDir, "personas"),
       usersRoot
     },
     // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-    personaRoot: import_node_path64.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path57.default.join(config.dataDir, "personas"),
     // v2 多人 persona 隔离：handler 派生 guest user-dir 放行
     usersRoot,
     // capability:list / delete handler 依赖
@@ -60258,11 +59052,6 @@ async function startDaemon(config) {
     ownerFeishuUnionId,
     ownerId,
     ownerProvider,
-    // ssh identity 互换（spec 2026-07-15）：whoami:ok 下发本机 identity pubkey。
-    // 惰性读盘，不依赖 ensureSshIdentity 完成时序（未生成 → null → 帧省略字段）。
-    sshIdentityPublicKey: () => readSshIdentityPublicKey(config.dataDir),
-    // 建联交换：whoami:ok 下发本机 OS 账号名（拨号登录名）。见 doc/glossary/peer-mesh.md#建联交换清单
-    selfOsUser: currentOsUser,
     personaStore,
     // capability handler 也用 (capability:issue 走 registry / capability:list)
     capabilityRegistry,
@@ -60272,10 +59061,6 @@ async function startDaemon(config) {
     inboxStore,
     // 联系人列表 store（device:connect / 自动反向落同一 store）
     contactStore,
-    // <dataDir>/sshd 绝对路径 —— contact-ssh handlers 用它拼 authorized_keys / keys/ 子路径
-    // Task 10 会加 SshdManager 起 sshd；handlers wire 提前挂 sshdDir 让 typecheck 过
-    sshdDir: import_node_path64.default.join(config.dataDir, "sshd"),
-    contactSshLog: sshLog,
     // inbox:sendDm 用：sessionId → session 出身（复用 attachment 同款 findOwnedSessionScope）
     getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
     // contact:removed broadcast；复用 capability:tokenIssued 同款通路
@@ -60342,13 +59127,7 @@ async function startDaemon(config) {
       // 自动反向（spec 决策 #11）：本机可达地址 = tunnel URL（公网），出站连接时
       // 透传让对方反向加我为联系人。无 tunnel（仅本机 ws）→ null，对方不自动反向（不造假数据）。
       // 决策 #16：身份不自报——本机 deviceId/ownerId/provider 由 exchange 签进 token 背书。
-      selfUrl: () => currentTunnelUrl,
-      // ssh identity 互换（spec 2026-07-15）：出站 auth 帧自报本机 identity pubkey；
-      // 对方 pubkey 变化且已授权时立即重建 authorized_keys（重新 connect = 迁移路径）
-      selfSshPublicKey: () => readSshIdentityPublicKey(config.dataDir),
-      // 建联交换：出站自报本机 OS 账号名。见 doc/glossary/peer-mesh.md#建联交换清单
-      selfOsUser: currentOsUser,
-      rebuildAuthorizedKeys: () => rebuildAuthorizedKeys(contactStore, import_node_path64.default.join(config.dataDir, "sshd"))
+      selfUrl: () => currentTunnelUrl
     },
     // app-builder
     appBuilderStore,
@@ -60371,11 +59150,11 @@ async function startDaemon(config) {
     // 发布上线脚手架化 (spec 2026-06-03 §5.2):
     // appBuilderPersonaRoot 用于拼 publish.sh 绝对路径（persona-app-builder 安装在
     // dataDir/personas/persona-app-builder 之下，extension-kit/scripts/publish.sh 是相对路径）。
-    appBuilderPersonaRoot: import_node_path64.default.join(config.dataDir, "personas", "persona-app-builder"),
+    appBuilderPersonaRoot: import_node_path57.default.join(config.dataDir, "personas", "persona-app-builder"),
     // 共享 deploy-kit 根：scaffold/publish 脚本骨架 + 阿里云凭证单一真源。
-    deployKitRoot: import_node_path64.default.join(config.dataDir, "deploy-kit"),
+    deployKitRoot: import_node_path57.default.join(config.dataDir, "deploy-kit"),
     // scaffold/publish 按当前 session 的 persona 解析其安装根，让每个 persona 用自己的模板/注入配置。
-    resolvePersonaRoot: (personaId) => import_node_path64.default.join(config.dataDir, "personas", personaId),
+    resolvePersonaRoot: (personaId) => import_node_path57.default.join(config.dataDir, "personas", personaId),
     // 发布上线脚手架化 (spec 2026-06-03 §5.2.2):
     // 复用 SessionManagerDeps.broadcastFrame 同款 dispatch 逻辑 —— runner 调 manager.send
     // 取回 broadcast 帧后逐帧 push 到 transport，跟 manager 自身的 deps 一致。
@@ -60418,7 +59197,7 @@ async function startDaemon(config) {
       }
       let sourceJsonlPath = "(no transcript yet \u2014 operate from the task description alone)";
       if (sourceFile && sourceFile.toolSessionId) {
-        sourceJsonlPath = import_node_path64.default.join(
+        sourceJsonlPath = import_node_path57.default.join(
           import_node_os22.default.homedir(),
           ".claude",
           "projects",
@@ -60625,48 +59404,6 @@ async function startDaemon(config) {
     httpRequestHandler: httpRouter,
     // app-builder build 模式：/preview/<port>/ HMR websocket upgrade 转发的端口白名单（同 http-router 配置）
     previewPorts: effectivePreviewPorts,
-    // Contact SSH tunnel (PR: contact-ssh-tunnel): /rpc/ssh-tunnel WS 前置拦截 →
-    // Bearer auth (owner token / connect token / capability token 三选一) → net.connect 到本机 sshd →
-    // raw byte relay. 用于 B 侧 `clawd ssh-relay` CLI 拨号（SSH ProxyCommand）
-    sshTunnelUpgradeHandler: async (req, socket, head, wss2) => {
-      await handleSshTunnelUpgrade(req, socket, head, {
-        wss: wss2,
-        sshdPort: config.sshdPort,
-        logger,
-        sshLog,
-        authorize: async (token) => {
-          if (!token) return false;
-          if (resolvedAuthToken && token === resolvedAuthToken) return true;
-          const cap = capabilityRegistry.verifyToken(token);
-          if (cap.ok) return true;
-          const vis = verifyVisitorToken(authFile.visitorTokenSecret, token, Math.floor(Date.now() / 1e3));
-          if (vis.ok) return true;
-          const publicKeyPem = serverKeyStore.read();
-          if (publicKeyPem) {
-            const r = verifyConnectToken({
-              token,
-              publicKeyPem,
-              expectedDeviceId: authFile.deviceId
-            });
-            if (r.ok) return true;
-          }
-          return false;
-        }
-      });
-      return true;
-    },
-    // Contact SSH relay v2 (spec 2026-07-06-contact-ssh-relay-via-local-daemon-tunnel):
-    // /rpc/ssh-tunnel-local WS 前置拦截。guest CC 沙箱从 localhost 连本地 daemon，daemon
-    // 代理起 outbound wss 到 peer /rpc/ssh-tunnel。findContact / connectToken 处理下沉到
-    // 本 handler；relay CLI 变纯粹的 stdio ↔ local WS pump（不再读 contacts.json / 持 token）。
-    sshTunnelLocalUpgradeHandler: async (req, socket, head, wss2) => {
-      await handleSshTunnelLocalUpgrade(req, socket, head, {
-        wss: wss2,
-        store: contactStore,
-        logger,
-        sshLog
-      });
-    },
     // 订阅成功后给该 client 重放 in-flight pendingQuestions（plan: clawd-question-server-truth）。
     // daemon 是 pendingQuestions 的唯一 source of truth；新 client 接入 / 刷新页面时
     // 把当前所有未决 question 以 session:question 帧定向回放，让 UI 不再误显示 Ended。
@@ -60778,8 +59515,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path64.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path64.default.join(logDir, "frpc.log")}`
+        `Frpc config: ${import_node_path57.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path57.default.join(logDir, "frpc.log")}`
       ];
       const width = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width + 4);
@@ -60792,8 +59529,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path64.default.join(config.dataDir, "connect.txt");
-        import_node_fs52.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path57.default.join(config.dataDir, "connect.txt");
+        import_node_fs45.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -60818,24 +59555,6 @@ ${bar}
       logger.warn("tunnel unavailable, degraded to local mode", { reason: tunnelError });
     }
   }
-  const sshdMgr = new SshdManager({
-    dataDir: config.dataDir,
-    port: config.sshdPort,
-    logger,
-    installProcessExitHandlers: true,
-    onSshdExit: (info) => logger.warn("sshd exited unexpectedly", info),
-    // sshd 的 pubkey 认证结果转写进 contact-ssh.log（补 A 侧「隧道连上但 sshd 拒了 key」盲区）
-    sshLog
-  });
-  try {
-    await sshdMgr.start();
-    rebuildAuthorizedKeys(contactStore, import_node_path64.default.join(config.dataDir, "sshd"));
-    logger.info("sshd: contact-ssh sandbox ready", { port: config.sshdPort });
-  } catch (err) {
-    logger.warn("sshd start failed; contact SSH grant will not work until fixed", {
-      err: err.message
-    });
-  }
   void reportDevice();
   void fetchServerKey();
   const tickAttachmentGc = () => {
@@ -60870,11 +59589,6 @@ ${bar}
     if (tunnelMgr) {
       await tunnelMgr.stop();
     }
-    await sshdMgr.stop().catch((err) => {
-      logger.warn("shutdown.sshd-stop-failed", {
-        error: err instanceof Error ? err.message : String(err)
-      });
-    });
     await wss.stop();
     stateMgr.delete();
     if (logClient) await logClient.dispose();
@@ -60888,9 +59602,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path64.default.join(dataDir, "persons");
+  const dir = import_node_path57.default.join(dataDir, "persons");
   try {
-    import_node_fs52.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs45.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }
@@ -60903,11 +59617,6 @@ async function main() {
     const code = await runCase2(argv.slice(1));
     process.exit(code);
   }
-  if (argv[0] === "ssh-relay") {
-    const { sshRelay: sshRelay2 } = await Promise.resolve().then(() => (init_sshd_cli_relay(), sshd_cli_relay_exports));
-    const code = await sshRelay2(argv.slice(1));
-    process.exit(code);
-  }
   const parsed = parseArgs(argv);
   if (parsed.help) {
     process.stdout.write(HELP_TEXT);