@clawos-dev/clawd 0.2.275 → 0.2.276

package/dist/cli.cjs

@@ -6651,6 +6651,11 @@ var init_persona_schemas = __esm({
       sandboxSettings: PersonaSandboxSettingsSchema.nullable().optional()
     });
     PersonaCreateArgsSchema = external_exports.object({
+      // persona 身份。daemon 拼成 personaId = `persona-<slug>`——前缀由 daemon 拥有，调用方只给后半段，
+      // 「所有 persona id 带该前缀」的约定由构造保证。与 label（显示名，可中文、可随时改）是两个概念：
+      // 曾经只有 label、id 从 label 推，导致中文 label 被剥空后一律降级成 persona-persona。
+      // 正则即安全边界——该值直接落进 ~/.clawd/personas/<id>/，此处排除 . / 空格后路径穿越无从构造。
+      slug: external_exports.string().regex(/^[a-z0-9]+(-[a-z0-9]+)*$/).max(32),
       label: external_exports.string().min(1),
       personality: external_exports.string(),
       model: external_exports.string().optional(),
@@ -7981,7 +7986,7 @@ var init_methods = __esm({
         args: CapabilitiesGetArgs
       },
       "persona:create": {
-        summary: "\u65B0\u5EFA persona\uFF08\u5199 PersonaFile + CLAUDE.md \u9AA8\u67B6\uFF09\u3002owner-only",
+        summary: "\u65B0\u5EFA persona\uFF08\u5199 PersonaFile + CLAUDE.md \u9AA8\u67B6\uFF09\u3002owner-only\u3002slug \u53EA\u6536\u5C0F\u5199\u5B57\u6BCD\u6570\u5B57\u4E0E\u5355\u8FDE\u5B57\u7B26\uFF08^[a-z0-9]+(-[a-z0-9]+)*$\uFF0C\u226432\uFF09\uFF0Cdaemon \u62FC\u6210 personaId=persona-<slug>\uFF1B\u8BE5 id \u5DF2\u5B58\u5728\u5219\u62A5\u9519\uFF0C\u4E0D\u81EA\u52A8\u6539\u540D\u3002label \u662F\u663E\u793A\u540D\uFF0C\u4E0D\u53C2\u4E0E id \u63A8\u5BFC\uFF0C\u53EF\u7528\u4E2D\u6587",
         args: PersonaCreateArgsSchema
       },
       "persona:list": {
@@ -47622,9 +47627,6 @@ var PersonaRegistry = class {
   }
 };
 
-// src/persona/manager.ts
-var import_node_crypto3 = __toESM(require("crypto"), 1);
-
 // src/skills/scanner.ts
 var import_node_fs10 = __toESM(require("fs"), 1);
 var import_node_os6 = __toESM(require("os"), 1);
@@ -47904,8 +47906,19 @@ var PersonaManager = class {
     this.deps = deps;
   }
   deps;
+  /**
+   * slug 是 persona 的身份，label 只是显示名——两者刻意分开：id 落进文件路径 /
+   * 分享链接且创建后不可改，label 可中文、可随时改。此前 id 从 label 推导，
+   * 非 ascii 被剥空后一律 fallback 成 `persona-persona`。
+   *
+   * 撞名直接抛错而非改名：id 由调用方显式指定，静默换成带后缀的 id 等于把
+   * 用户的选择偷偷改掉。字符集校验在 PersonaCreateArgsSchema（路径穿越边界）。
+   */
   create(args) {
-    const personaId2 = this.generatePersonaId(args.label);
+    const personaId2 = `persona-${args.slug}`;
+    if (this.deps.store.has(personaId2)) {
+      throw new Error(`personaId already exists: ${personaId2}`);
+    }
     const now = Date.now();
     const persona = {
       personaId: personaId2,
@@ -47971,21 +47984,6 @@ var PersonaManager = class {
     this.deps.store.remove(personaId2);
     this.deps.registry.remove(personaId2);
   }
-  /**
-   * label 转 4-16 char slug。优先用 `persona-<slug>`；若 slug 已被占用，追加 4 char
-   * base64url 随机后缀直到不撞为止（最多 5 次，理论冲突 ≈ 2^-24，留个 panic 上限）。
-   */
-  generatePersonaId(label) {
-    const slug = label.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 16) || "persona";
-    const base = `persona-${slug}`;
-    if (!this.deps.store.has(base)) return base;
-    for (let i = 0; i < 5; i++) {
-      const rand = import_node_crypto3.default.randomBytes(3).toString("base64url").slice(0, 4);
-      const candidate = `${base}-${rand}`;
-      if (!this.deps.store.has(candidate)) return candidate;
-    }
-    throw new Error(`failed to generate unique personaId for label=${label}`);
-  }
 };
 
 // src/persona/seed.ts
@@ -48545,7 +48543,7 @@ function tryLoadShareUi(logger) {
 }
 
 // src/visitor/visitor-token.ts
-var import_node_crypto4 = __toESM(require("crypto"), 1);
+var import_node_crypto3 = __toESM(require("crypto"), 1);
 
 // ../protocol/src/index.ts
 init_runtime();
@@ -48553,7 +48551,7 @@ init_runtime();
 // src/visitor/visitor-token.ts
 var DOMAIN_PREFIX = "clawd-visitor-v1|";
 function hmac(secret, body) {
-  return import_node_crypto4.default.createHmac("sha256", secret).update(`${DOMAIN_PREFIX}${body}`).digest("base64url");
+  return import_node_crypto3.default.createHmac("sha256", secret).update(`${DOMAIN_PREFIX}${body}`).digest("base64url");
 }
 function signVisitorToken(secret, payload) {
   const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
@@ -48566,7 +48564,7 @@ function verifyVisitorToken(secret, token, now) {
   const sig = token.slice(dot + 1);
   const expected = hmac(secret, body);
   if (sig.length !== expected.length) return { ok: false, reason: "BAD_SIGNATURE" };
-  if (!import_node_crypto4.default.timingSafeEqual(Buffer.from(sig), Buffer.from(expected))) {
+  if (!import_node_crypto3.default.timingSafeEqual(Buffer.from(sig), Buffer.from(expected))) {
     return { ok: false, reason: "BAD_SIGNATURE" };
   }
   let payload;
@@ -49268,7 +49266,7 @@ var CodexAdapter = class {
 };
 
 // src/tools/claude-tui.ts
-var import_node_crypto5 = require("crypto");
+var import_node_crypto4 = require("crypto");
 var import_node_fs19 = __toESM(require("fs"), 1);
 var import_node_os7 = __toESM(require("os"), 1);
 var import_node_path17 = __toESM(require("path"), 1);
@@ -50156,7 +50154,7 @@ function observeScreenIdle(surface, opts) {
   };
 }
 function shortHash(s) {
-  return (0, import_node_crypto5.createHash)("sha1").update(s).digest("hex").slice(0, 8);
+  return (0, import_node_crypto4.createHash)("sha1").update(s).digest("hex").slice(0, 8);
 }
 function firstLineDiff(prev, next) {
   const p2 = prev.split("\n");
@@ -50870,7 +50868,7 @@ function resolveSourceJsonlPath(sourceFile, home) {
 // src/shift/store.ts
 var import_promises2 = __toESM(require("fs/promises"), 1);
 var import_node_path26 = __toESM(require("path"), 1);
-var import_node_crypto6 = require("crypto");
+var import_node_crypto5 = require("crypto");
 
 // src/shift/schedule.ts
 var import_cron_parser = __toESM(require_dist(), 1);
@@ -50974,7 +50972,7 @@ function createShiftStore(deps) {
     const shift = {
       ...input,
       schedule,
-      id: (0, import_node_crypto6.randomUUID)(),
+      id: (0, import_node_crypto5.randomUUID)(),
       createdAtMs: now,
       updatedAtMs: now,
       state: { nextRunAtMs },
@@ -53678,7 +53676,7 @@ var ContactStore = class {
 };
 
 // src/contact/connect-remote.ts
-var crypto5 = __toESM(require("crypto"), 1);
+var crypto4 = __toESM(require("crypto"), 1);
 init_protocol();
 var HANDSHAKE_TIMEOUT_MS = 5e3;
 var RPC_TIMEOUT_MS = 5e3;
@@ -53733,7 +53731,7 @@ async function connectRemote(args) {
     ws.once("close", onClose);
   });
   function call(method, payload) {
-    const requestId = crypto5.randomUUID();
+    const requestId = crypto4.randomUUID();
     return new Promise((resolve6, reject) => {
       const onMessage = (raw) => {
         let f;
@@ -53990,7 +53988,7 @@ function lookupMime(filePathOrName) {
 }
 
 // src/attachment/sign-url.ts
-var import_node_crypto7 = __toESM(require("crypto"), 1);
+var import_node_crypto6 = __toESM(require("crypto"), 1);
 var HMAC_ALGO = "sha256";
 function base64urlEncode(buf) {
   const b2 = typeof buf === "string" ? Buffer.from(buf, "utf8") : buf;
@@ -54008,7 +54006,7 @@ function decodeAbsPathFromUrl(encoded) {
 var DOMAIN_PREFIX2 = "clawd-attach-v1|";
 function computeSig(secret, absPath, e) {
   const msg = e === null ? `${DOMAIN_PREFIX2}${absPath}` : `${DOMAIN_PREFIX2}${absPath}|${e}`;
-  return import_node_crypto7.default.createHmac(HMAC_ALGO, secret).update(msg).digest();
+  return import_node_crypto6.default.createHmac(HMAC_ALGO, secret).update(msg).digest();
 }
 function signUrlParts(secret, absPath, ttlSeconds, now = Date.now) {
   const e = ttlSeconds === null ? null : Math.floor(now() / 1e3) + ttlSeconds;
@@ -54043,7 +54041,7 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
   if (provided.length !== expected.length) {
     return { ok: false, code: "BAD_SIG" };
   }
-  if (!import_node_crypto7.default.timingSafeEqual(provided, expected)) {
+  if (!import_node_crypto6.default.timingSafeEqual(provided, expected)) {
     return { ok: false, code: "BAD_SIG" };
   }
   if (e !== null && now() / 1e3 > e) {
@@ -54055,7 +54053,7 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
 // src/attachment/upload.ts
 var import_node_fs30 = __toESM(require("fs"), 1);
 var import_node_path33 = __toESM(require("path"), 1);
-var import_node_crypto8 = __toESM(require("crypto"), 1);
+var import_node_crypto7 = __toESM(require("crypto"), 1);
 var import_promises3 = require("stream/promises");
 var UploadError = class extends Error {
   constructor(code, message) {
@@ -54079,11 +54077,11 @@ async function writeUploadedAttachment(args) {
   } catch (err) {
     throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
   }
-  const hasher = import_node_crypto8.default.createHash("sha256");
+  const hasher = import_node_crypto7.default.createHash("sha256");
   let actualSize = 0;
   const tmpPath = import_node_path33.default.join(
     attachmentsRoot,
-    `.upload-${process.pid}-${Date.now()}-${import_node_crypto8.default.randomBytes(4).toString("hex")}`
+    `.upload-${process.pid}-${Date.now()}-${import_node_crypto7.default.randomBytes(4).toString("hex")}`
   );
   try {
     await (0, import_promises3.pipeline)(
@@ -54873,7 +54871,7 @@ function runAttachmentGc(args) {
 // src/attachment/group.ts
 var import_node_fs33 = __toESM(require("fs"), 1);
 var import_node_path37 = __toESM(require("path"), 1);
-var import_node_crypto9 = __toESM(require("crypto"), 1);
+var import_node_crypto8 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
   dataDir;
@@ -54962,7 +54960,7 @@ var GroupFileStore = class {
       entries[idx] = next;
     } else {
       next = {
-        id: `gf-${import_node_crypto9.default.randomBytes(6).toString("base64url")}`,
+        id: `gf-${import_node_crypto8.default.randomBytes(6).toString("base64url")}`,
         relPath: input.relPath,
         from: input.from,
         label: input.label,
@@ -55080,7 +55078,7 @@ function readSpawnedByDesktopFromEnv(env = process.env) {
 // src/tunnel/tunnel-manager.ts
 var import_node_fs38 = __toESM(require("fs"), 1);
 var import_node_path42 = __toESM(require("path"), 1);
-var import_node_crypto10 = __toESM(require("crypto"), 1);
+var import_node_crypto9 = __toESM(require("crypto"), 1);
 var import_node_child_process10 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
@@ -55579,7 +55577,7 @@ var TunnelManager = class {
         override: this.deps.frpcBinaryOverride ?? void 0
       });
       const tomlPath = import_node_path42.default.join(this.deps.dataDir, "frpc.toml");
-      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto10.default.randomBytes(3).toString("hex")}`;
+      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto9.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
         serverPort: t.frpsPort,
@@ -55680,7 +55678,7 @@ async function waitForFrpcReady(proc, timeoutMs) {
 // src/tunnel/device-key.ts
 var import_node_os14 = __toESM(require("os"), 1);
 var import_node_path43 = __toESM(require("path"), 1);
-var import_node_crypto11 = __toESM(require("crypto"), 1);
+var import_node_crypto10 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os14.default.hostname();
@@ -55690,13 +55688,13 @@ function deriveStableDeviceKey(opts = {}) {
   const normalizedDataDir = opts.dataDir ? import_node_path43.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
-  return import_node_crypto11.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
+  return import_node_crypto10.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
 var import_node_fs39 = __toESM(require("fs"), 1);
 var import_node_path44 = __toESM(require("path"), 1);
-var import_node_crypto12 = __toESM(require("crypto"), 1);
+var import_node_crypto11 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
   return import_node_path44.default.join(dataDir, AUTH_FILE_NAME);
@@ -55724,10 +55722,10 @@ function loadOrCreateAuthFile(opts) {
   return next;
 }
 function defaultGenerateToken() {
-  return import_node_crypto12.default.randomBytes(32).toString("base64url");
+  return import_node_crypto11.default.randomBytes(32).toString("base64url");
 }
 function defaultGenerateOwnerPrincipalId() {
-  return `owner-${import_node_crypto12.default.randomUUID()}`;
+  return `owner-${import_node_crypto11.default.randomUUID()}`;
 }
 function readAuthFile(file) {
   try {
@@ -55849,7 +55847,7 @@ var OwnerIdentityStore = class {
 };
 
 // src/feishu-auth/login-flow.ts
-var import_node_crypto13 = __toESM(require("crypto"), 1);
+var import_node_crypto12 = __toESM(require("crypto"), 1);
 var STATE_TTL_MS = 5 * 60 * 1e3;
 var LoginFlow = class {
   constructor(deps) {
@@ -55858,7 +55856,7 @@ var LoginFlow = class {
   deps;
   pendingStates = /* @__PURE__ */ new Map();
   start() {
-    const state = import_node_crypto13.default.randomBytes(16).toString("base64url");
+    const state = import_node_crypto12.default.randomBytes(16).toString("base64url");
     const now = (this.deps.now ?? Date.now)();
     this.pendingStates.set(state, now);
     this.gcExpired(now);
@@ -56124,7 +56122,7 @@ async function upsertDeviceBinding(opts) {
 }
 
 // src/feishu-auth/verify-token.ts
-var crypto13 = __toESM(require("crypto"), 1);
+var crypto12 = __toESM(require("crypto"), 1);
 var CONNECT_TOKEN_PREFIX = "clawdtk1";
 function verifyConnectToken(args) {
   const now = args.nowSeconds ?? Math.floor(Date.now() / 1e3);
@@ -56136,7 +56134,7 @@ function verifyConnectToken(args) {
   const data = `${prefix}.${payloadB64}`;
   let signatureValid = false;
   try {
-    signatureValid = crypto13.verify(
+    signatureValid = crypto12.verify(
       null,
       Buffer.from(data, "utf8"),
       args.publicKeyPem,
@@ -57931,7 +57929,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.275".length > 0 ? "0.2.275" : "dev";
+var version = "0.2.276".length > 0 ? "0.2.276" : "dev";
 
 // src/cli-probe/probe.ts
 var fs54 = __toESM(require("fs"), 1);
@@ -58312,7 +58310,7 @@ init_protocol();
 // src/extension/bundle-zip.ts
 var import_promises6 = __toESM(require("fs/promises"), 1);
 var import_node_path50 = __toESM(require("path"), 1);
-var import_node_crypto14 = __toESM(require("crypto"), 1);
+var import_node_crypto13 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
@@ -58327,7 +58325,7 @@ async function bundleExtensionDir(dir) {
     compression: "DEFLATE",
     compressionOptions: { level: 6 }
   });
-  const sha256 = import_node_crypto14.default.createHash("sha256").update(buffer).digest("hex");
+  const sha256 = import_node_crypto13.default.createHash("sha256").update(buffer).digest("hex");
   return { buffer, sha256 };
 }
 var FIXED_DATE = /* @__PURE__ */ new Date("2020-01-01T00:00:00.000Z");
@@ -58395,7 +58393,7 @@ function computePublishCheck(args) {
 var import_promises7 = __toESM(require("fs/promises"), 1);
 var import_node_path52 = __toESM(require("path"), 1);
 var import_node_os19 = __toESM(require("os"), 1);
-var import_node_crypto15 = __toESM(require("crypto"), 1);
+var import_node_crypto14 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
@@ -58424,7 +58422,7 @@ var InstallError = class extends Error {
 };
 async function installFromChannel(args, deps) {
   const { channelRef, snapshotHash, bundleZip } = args;
-  const computed = import_node_crypto15.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto14.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new InstallError(
       "HASH_MISMATCH",
@@ -58516,7 +58514,7 @@ async function installFromChannel(args, deps) {
 var import_promises8 = __toESM(require("fs/promises"), 1);
 var import_node_path53 = __toESM(require("path"), 1);
 var import_node_os20 = __toESM(require("os"), 1);
-var import_node_crypto16 = __toESM(require("crypto"), 1);
+var import_node_crypto15 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
 var UpdateError = class extends Error {
   constructor(code, message) {
@@ -58554,7 +58552,7 @@ async function updateFromChannel(args, deps) {
     if (e instanceof UpdateError) throw e;
     throw e;
   }
-  const computed = import_node_crypto16.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto15.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new UpdateError(
       "HASH_MISMATCH",
@@ -59220,7 +59218,7 @@ function listPidsOnPort(port) {
 }
 
 // src/app-builder/publish-registry.ts
-var import_node_crypto17 = require("crypto");
+var import_node_crypto16 = require("crypto");
 var PublishJobRegistry = class {
   jobs = /* @__PURE__ */ new Map();
   has(name) {
@@ -59237,7 +59235,7 @@ var PublishJobRegistry = class {
     if (this.jobs.has(args.name)) {
       throw new Error(`already publishing: ${args.name}`);
     }
-    const jobId = args.jobId ?? `job-${(0, import_node_crypto17.randomUUID)()}`;
+    const jobId = args.jobId ?? `job-${(0, import_node_crypto16.randomUUID)()}`;
     this.jobs.set(args.name, {
       jobId,
       name: args.name,
@@ -60180,7 +60178,7 @@ async function uninstall(deps) {
 }
 
 // src/handlers/index.ts
-var import_node_crypto18 = require("crypto");
+var import_node_crypto17 = require("crypto");
 
 // src/handlers/peer-exec.ts
 init_protocol();
@@ -60335,7 +60333,7 @@ function buildMethodHandlers(deps) {
           const c = deps.contactStore.get(deviceId);
           return c ? { deviceId: c.deviceId, remoteUrl: c.remoteUrl, connectToken: c.connectToken } : null;
         },
-        genId: () => (0, import_node_crypto18.randomUUID)(),
+        genId: () => (0, import_node_crypto17.randomUUID)(),
         now: () => Date.now(),
         forwardInboxPostToPeer,
         logger: deps.logger

package/dist/dispatch/mcp-server.cjs

@@ -21852,6 +21852,11 @@ var PersonaInfoResponseSchema = PersonaFileSchema.extend({
   sandboxSettings: PersonaSandboxSettingsSchema.nullable().optional()
 });
 var PersonaCreateArgsSchema = external_exports.object({
+  // persona 身份。daemon 拼成 personaId = `persona-<slug>`——前缀由 daemon 拥有，调用方只给后半段，
+  // 「所有 persona id 带该前缀」的约定由构造保证。与 label（显示名，可中文、可随时改）是两个概念：
+  // 曾经只有 label、id 从 label 推，导致中文 label 被剥空后一律降级成 persona-persona。
+  // 正则即安全边界——该值直接落进 ~/.clawd/personas/<id>/，此处排除 . / 空格后路径穿越无从构造。
+  slug: external_exports.string().regex(/^[a-z0-9]+(-[a-z0-9]+)*$/).max(32),
   label: external_exports.string().min(1),
   personality: external_exports.string(),
   model: external_exports.string().optional(),
@@ -23095,7 +23100,7 @@ var METHOD_DOCS = {
     args: CapabilitiesGetArgs
   },
   "persona:create": {
-    summary: "\u65B0\u5EFA persona\uFF08\u5199 PersonaFile + CLAUDE.md \u9AA8\u67B6\uFF09\u3002owner-only",
+    summary: "\u65B0\u5EFA persona\uFF08\u5199 PersonaFile + CLAUDE.md \u9AA8\u67B6\uFF09\u3002owner-only\u3002slug \u53EA\u6536\u5C0F\u5199\u5B57\u6BCD\u6570\u5B57\u4E0E\u5355\u8FDE\u5B57\u7B26\uFF08^[a-z0-9]+(-[a-z0-9]+)*$\uFF0C\u226432\uFF09\uFF0Cdaemon \u62FC\u6210 personaId=persona-<slug>\uFF1B\u8BE5 id \u5DF2\u5B58\u5728\u5219\u62A5\u9519\uFF0C\u4E0D\u81EA\u52A8\u6539\u540D\u3002label \u662F\u663E\u793A\u540D\uFF0C\u4E0D\u53C2\u4E0E id \u63A8\u5BFC\uFF0C\u53EF\u7528\u4E2D\u6587",
     args: PersonaCreateArgsSchema
   },
   "persona:list": {