@clawos-dev/clawd 0.2.28 → 0.2.29

package/dist/cli.cjs

@@ -296,8 +296,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path23 = req.path;
-        _req.url = typeof path23 === "string" ? path23 : req.url ? req.url.path || req.url : void 0;
+        const path21 = req.path;
+        _req.url = typeof path21 === "string" ? path21 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -462,14 +462,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path23) {
+    function parsePath(path21) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path23.length; i++) {
-        const char = path23[i];
+      for (let i = 0; i < path21.length; i++) {
+        const char = path21[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -600,10 +600,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path23 of paths) {
-        const parts = parsePath(path23);
+      for (const path21 of paths) {
+        const parts = parsePath(path21);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path23, remove);
+          redactWildcardPath(obj, parts, censor, path21, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -688,8 +688,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path23) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path23];
+            const wrappedCensor = typeof censor === "function" ? (value, path21) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path21];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -724,8 +724,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path23 of pathsToClone) {
-        const parts = parsePath(path23);
+      for (const path21 of pathsToClone) {
+        const parts = parsePath(path21);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -777,24 +777,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path23) {
-      if (typeof path23 !== "string") {
+    function validatePath(path21) {
+      if (typeof path21 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path23 === "") {
+      if (path21 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path23.includes("..")) {
-        throw new Error(`Invalid redaction path (${path23})`);
+      if (path21.includes("..")) {
+        throw new Error(`Invalid redaction path (${path21})`);
       }
-      if (path23.includes(",")) {
-        throw new Error(`Invalid redaction path (${path23})`);
+      if (path21.includes(",")) {
+        throw new Error(`Invalid redaction path (${path21})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path23.length; i++) {
-        const char = path23[i];
+      for (let i = 0; i < path21.length; i++) {
+        const char = path21[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -808,20 +808,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path23})`);
+            throw new Error(`Invalid redaction path (${path21})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path23})`);
+        throw new Error(`Invalid redaction path (${path21})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path23 of paths) {
-        validatePath(path23);
+      for (const path21 of paths) {
+        validatePath(path21);
       }
     }
     function slowRedact(options = {}) {
@@ -989,8 +989,8 @@ var require_redaction = __commonJS({
         if (shape[k] === null) {
           o[k] = (value) => topCensor(value, [k]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path23) => {
-            return censor(value, [k, ...path23]);
+          const wrappedCensor = typeof censor === "function" ? (value, path21) => {
+            return censor(value, [k, ...path21]);
           } : censor;
           o[k] = Redact({
             paths: shape[k],
@@ -1208,10 +1208,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs22 = require("fs");
+    var fs21 = require("fs");
     var EventEmitter = require("events");
     var inherits = require("util").inherits;
-    var path23 = require("path");
+    var path21 = require("path");
     var sleep = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -1265,20 +1265,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs22.mkdirSync(path23.dirname(file), { recursive: true });
-          const fd = fs22.openSync(file, flags, mode);
+          if (sonic.mkdir) fs21.mkdirSync(path21.dirname(file), { recursive: true });
+          const fd = fs21.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs22.mkdir(path23.dirname(file), { recursive: true }, (err) => {
+        fs21.mkdir(path21.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs22.open(file, flags, mode, fileOpened);
+          fs21.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs22.open(file, flags, mode, fileOpened);
+        fs21.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -1319,8 +1319,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs22.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs22.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs21.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs21.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -1329,15 +1329,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs22.writeSync(this.fd, this._writingBuf);
+            return fs21.writeSync(this.fd, this._writingBuf);
           }
-          return fs22.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs21.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs22.write(this.fd, this._writingBuf, this.release);
+            return fs21.write(this.fd, this._writingBuf, this.release);
           }
-          return fs22.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs21.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -1394,7 +1394,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs22.fsyncSync(this.fd);
+          fs21.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -1508,7 +1508,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs22.fsync(this.fd, (err) => {
+            fs21.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -1610,7 +1610,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs22.close(fd, (err) => {
+          fs21.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -1659,7 +1659,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs22.writeSync(this.fd, buf) : fs22.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs21.writeSync(this.fd, buf) : fs21.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -1675,7 +1675,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs22.fsyncSync(this.fd);
+        fs21.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -1696,7 +1696,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs22.writeSync(this.fd, buf);
+          const n = fs21.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -1724,13 +1724,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs22.writeSync(this.fd, this._writingBuf) : fs22.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs21.writeSync(this.fd, this._writingBuf) : fs21.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs22.write(this.fd, this._writingBuf, release);
+        fs21.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -1739,7 +1739,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs22.writeSync(this.fd, this._writingBuf);
+          const written = fs21.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -1748,7 +1748,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs22.write(this.fd, this._writingBuf, release);
+        fs21.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -1764,12 +1764,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs22.fsync(sonic.fd, closeWrapped);
+        fs21.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs22.close(sonic.fd, done);
+          fs21.close(sonic.fd, done);
         } else {
           done();
         }
@@ -2026,7 +2026,7 @@ var require_thread_stream = __commonJS({
     var { version: version2 } = require_package();
     var { EventEmitter } = require("events");
     var { Worker } = require("worker_threads");
-    var { join: join2 } = require("path");
+    var { join: join3 } = require("path");
     var { pathToFileURL } = require("url");
     var { wait } = require_wait();
     var {
@@ -2062,7 +2062,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join2(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join3(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         trackUnmanagedFds: false,
@@ -2448,7 +2448,7 @@ var require_transport = __commonJS({
     "use strict";
     var { createRequire } = require("module");
     var getCallers = require_caller();
-    var { join: join2, isAbsolute, sep } = require("path");
+    var { join: join3, isAbsolute, sep } = require("path");
     var sleep = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
     var ThreadStream = require_thread_stream();
@@ -2511,7 +2511,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join2(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join3(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -2529,7 +2529,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline2) {
-        target = bundlerOverrides["pino-worker"] || join2(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join3(__dirname, "worker.js");
         options.pipelines = [pipeline2.map((dest) => {
           return {
             ...dest,
@@ -2551,7 +2551,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join2(__dirname, "..", "file.js");
+          return join3(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -3541,7 +3541,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join2 = ",";
+            let join3 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -3555,7 +3555,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join2 = `,
+                join3 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -3563,13 +3563,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join2;
+                res += join3;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join2}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join3}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -3590,7 +3590,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join2 = `,
+              join3 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -3604,13 +3604,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join2;
+                separator = join3;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join2;
+              separator = join3;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -3651,7 +3651,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join2 = ",";
+            let join3 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -3664,7 +3664,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join2 = `,
+                join3 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -3672,13 +3672,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join2;
+                res += join3;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join2}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join3}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -3691,7 +3691,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join2 = `,
+              join3 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -3700,7 +3700,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join2;
+                separator = join3;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -3758,20 +3758,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join3 = `,
+              const join4 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join3;
+                res2 += join4;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join3}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join4}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -3787,16 +3787,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join2 = `,
+            const join3 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join2, maximumBreadth);
+              res += stringifyTypedArray(value, join3, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join2;
+              separator = join3;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -3807,13 +3807,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join2;
+                separator = join3;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join2;
+              separator = join3;
             }
             if (separator !== "") {
               res = `
@@ -4883,8 +4883,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path23, errorMaps, issueData } = params;
-      const fullPath = [...path23, ...issueData.path || []];
+      const { data, path: path21, errorMaps, issueData } = params;
+      const fullPath = [...path21, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -5195,11 +5195,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path23, key) {
+      constructor(parent, value, path21, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path23;
+        this._path = path21;
         this._key = key;
       }
       get path() {
@@ -8583,32 +8583,25 @@ var init_zod = __esm({
 });
 
 // ../protocol/src/persona-schemas.ts
-var ALLOWED_PERSONA_TOOLS, PersonaTokenEntrySchema, PersonaFileSchema, PersonaHelloFrameSchema, PersonaSendFrameSchema, PersonaResetFrameSchema, PersonaPingFrameSchema, PersonaReadyFrameSchema, PersonaHistoryEventFrameSchema, PersonaHistoryDoneFrameSchema, PersonaEventFrameSchema, PersonaErrorFrameSchema, PersonaPongFrameSchema, PersonaClientFrameSchema, PersonaServerFrameSchema, PersonaCreateArgs, PersonaIdArgs, PersonaUpdateArgs, PersonaIssueTokenArgs, PersonaRevokeTokenArgs, PersonaAppendOwnerMessageArgs;
+var PersonaTokenEntrySchema, PersonaFileSchema, PersonaHelloFrameSchema, PersonaSendFrameSchema, PersonaResetFrameSchema, PersonaPingFrameSchema, PersonaReadyFrameSchema, PersonaHistoryEventFrameSchema, PersonaHistoryDoneFrameSchema, PersonaEventFrameSchema, PersonaErrorFrameSchema, PersonaPongFrameSchema, PersonaClientFrameSchema, PersonaServerFrameSchema, PersonaCreateArgsSchema, PersonaIdArgsSchema, PersonaUpdateArgsSchema, PersonaIssueTokenArgsSchema, PersonaRevokeTokenArgsSchema, PersonaAppendOwnerMessageArgsSchema;
 var init_persona_schemas = __esm({
   "../protocol/src/persona-schemas.ts"() {
     "use strict";
     init_zod();
-    ALLOWED_PERSONA_TOOLS = ["Read", "Grep", "Glob"];
     PersonaTokenEntrySchema = external_exports.object({
-      label: external_exports.string().min(1),
-      issuedAt: external_exports.string(),
-      revoked: external_exports.boolean().optional()
+      label: external_exports.string(),
+      issuedAt: external_exports.number(),
+      revoked: external_exports.boolean()
     });
     PersonaFileSchema = external_exports.object({
-      personaId: external_exports.string().min(1),
-      label: external_exports.string().min(1),
-      // cwd 必须是绝对路径；老板侧创建时 daemon 校验
-      cwd: external_exports.string().refine((p) => p.startsWith("/"), { message: "cwd must be absolute" }),
+      personaId: external_exports.string(),
+      label: external_exports.string(),
       model: external_exports.string().optional(),
-      systemPromptAppend: external_exports.string().optional(),
-      // L1 锁死：permissionMode 只能是 'plan'，toolAllowlist 只能是 ALLOWED_PERSONA_TOOLS 子集
-      permissionMode: external_exports.literal("plan"),
-      toolAllowlist: external_exports.array(external_exports.enum(ALLOWED_PERSONA_TOOLS)),
       public: external_exports.boolean(),
       tokenMap: external_exports.record(external_exports.string(), PersonaTokenEntrySchema),
-      createdAt: external_exports.string(),
-      updatedAt: external_exports.string()
-    });
+      createdAt: external_exports.number(),
+      updatedAt: external_exports.number()
+    }).strict();
     PersonaHelloFrameSchema = external_exports.object({
       kind: external_exports.literal("persona-hello"),
       token: external_exports.string().min(1)
@@ -8669,34 +8662,33 @@ var init_persona_schemas = __esm({
       PersonaErrorFrameSchema,
       PersonaPongFrameSchema
     ]);
-    PersonaCreateArgs = external_exports.object({
+    PersonaCreateArgsSchema = external_exports.object({
       label: external_exports.string().min(1),
-      cwd: external_exports.string().min(1),
+      personality: external_exports.string(),
       model: external_exports.string().optional(),
-      systemPromptAppend: external_exports.string().optional()
-    });
-    PersonaIdArgs = external_exports.object({
+      public: external_exports.boolean().optional()
+    }).strict();
+    PersonaIdArgsSchema = external_exports.object({
       personaId: external_exports.string().min(1)
     });
-    PersonaUpdateArgs = external_exports.object({
+    PersonaUpdateArgsSchema = external_exports.object({
       personaId: external_exports.string().min(1),
       patch: external_exports.object({
         label: external_exports.string().min(1).optional(),
-        cwd: external_exports.string().min(1).optional(),
         model: external_exports.string().optional(),
-        systemPromptAppend: external_exports.string().optional(),
+        personality: external_exports.string().optional(),
         public: external_exports.boolean().optional()
       }).strict()
-    });
-    PersonaIssueTokenArgs = external_exports.object({
+    }).strict();
+    PersonaIssueTokenArgsSchema = external_exports.object({
       personaId: external_exports.string().min(1),
       label: external_exports.string().min(1)
     });
-    PersonaRevokeTokenArgs = external_exports.object({
+    PersonaRevokeTokenArgsSchema = external_exports.object({
       personaId: external_exports.string().min(1),
       token: external_exports.string().min(1)
     });
-    PersonaAppendOwnerMessageArgs = external_exports.object({
+    PersonaAppendOwnerMessageArgsSchema = external_exports.object({
       personaId: external_exports.string().min(1),
       subSessionId: external_exports.string().min(1),
       text: external_exports.string().min(1)
@@ -9828,11 +9820,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path23, added, removed, oldPosInc, options) {
-        var last = path23.lastComponent;
+      addToPath: function addToPath(path21, added, removed, oldPosInc, options) {
+        var last = path21.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path23.oldPos + oldPosInc,
+            oldPos: path21.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -9842,7 +9834,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path23.oldPos + oldPosInc,
+            oldPos: path21.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -9900,7 +9892,7 @@ var init_lib = __esm({
       tokenize: function tokenize(value) {
         return Array.from(value);
       },
-      join: function join(chars) {
+      join: function join2(chars) {
         return chars.join("");
       },
       postProcess: function postProcess(changeObjects) {
@@ -10088,7 +10080,7 @@ function hashDirToCwd(hash) {
 }
 function safeStatMtime(p) {
   try {
-    return import_node_fs8.default.statSync(p).mtimeMs;
+    return import_node_fs6.default.statSync(p).mtimeMs;
   } catch {
     return 0;
   }
@@ -10096,7 +10088,7 @@ function safeStatMtime(p) {
 function readJsonlLines(file) {
   let raw;
   try {
-    raw = import_node_fs8.default.readFileSync(file, "utf8");
+    raw = import_node_fs6.default.readFileSync(file, "utf8");
   } catch (err) {
     if (err.code === "ENOENT") return [];
     throw err;
@@ -10273,10 +10265,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m) => {
       if (!m || typeof m !== "object") return null;
       const rec = m;
-      const path23 = typeof rec.path === "string" ? rec.path : null;
+      const path21 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path23 || content == null) return null;
-      const entry = { path: path23, content };
+      if (!path21 || content == null) return null;
+      const entry = { path: path21, content };
       if (typeof rec.mtimeMs === "number") entry.mtimeMs = rec.mtimeMs;
       return entry;
     }).filter((m) => m !== null);
@@ -10312,8 +10304,8 @@ function attachmentDeferredToolsText(a) {
 function readBackupContent(fileHistoryRoot, toolSessionId, backupFileName) {
   if (backupFileName === null) return null;
   try {
-    return import_node_fs8.default.readFileSync(
-      import_node_path8.default.join(fileHistoryRoot, toolSessionId, backupFileName),
+    return import_node_fs6.default.readFileSync(
+      import_node_path5.default.join(fileHistoryRoot, toolSessionId, backupFileName),
       "utf8"
     );
   } catch {
@@ -10322,19 +10314,19 @@ function readBackupContent(fileHistoryRoot, toolSessionId, backupFileName) {
 }
 function readCurrentContent(filePath) {
   try {
-    return import_node_fs8.default.readFileSync(filePath, "utf8");
+    return import_node_fs6.default.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code === "ENOENT") return null;
     return null;
   }
 }
-var import_node_fs8, import_node_os2, import_node_path8, TASK_NOTIFICATION_RE, TASK_ID_RE, TOOL_USE_ID_RE, SLASH_COMMAND_RE, LOCAL_COMMAND_RE, SYSTEM_REMINDER_RE, OPENSPEC_BLOCK_RE, SKILL_HINT_RE, ATTACHMENT_SILENT_SUBTYPES, ClaudeHistoryReader;
+var import_node_fs6, import_node_os2, import_node_path5, TASK_NOTIFICATION_RE, TASK_ID_RE, TOOL_USE_ID_RE, SLASH_COMMAND_RE, LOCAL_COMMAND_RE, SYSTEM_REMINDER_RE, OPENSPEC_BLOCK_RE, SKILL_HINT_RE, ATTACHMENT_SILENT_SUBTYPES, ClaudeHistoryReader;
 var init_claude_history = __esm({
   "src/tools/claude-history.ts"() {
     "use strict";
-    import_node_fs8 = __toESM(require("fs"), 1);
+    import_node_fs6 = __toESM(require("fs"), 1);
     import_node_os2 = __toESM(require("os"), 1);
-    import_node_path8 = __toESM(require("path"), 1);
+    import_node_path5 = __toESM(require("path"), 1);
     init_lib();
     init_tool_result_extra();
     TASK_NOTIFICATION_RE = /<task-notification\b[\s\S]*?<\/task-notification>/i;
@@ -10358,14 +10350,14 @@ var init_claude_history = __esm({
       // 每次 user 提交前 trackEdit 拷一份，作为 rewind 回退目标
       fileHistoryRoot;
       constructor(opts = {}) {
-        const base = opts.baseDir ?? import_node_path8.default.join(import_node_os2.default.homedir(), ".claude");
-        this.projectsRoot = import_node_path8.default.join(base, "projects");
-        this.fileHistoryRoot = import_node_path8.default.join(base, "file-history");
+        const base = opts.baseDir ?? import_node_path5.default.join(import_node_os2.default.homedir(), ".claude");
+        this.projectsRoot = import_node_path5.default.join(base, "projects");
+        this.fileHistoryRoot = import_node_path5.default.join(base, "file-history");
       }
       async listProjects() {
         let entries;
         try {
-          entries = import_node_fs8.default.readdirSync(this.projectsRoot, { withFileTypes: true });
+          entries = import_node_fs6.default.readdirSync(this.projectsRoot, { withFileTypes: true });
         } catch (err) {
           if (err.code === "ENOENT") return [];
           throw err;
@@ -10373,9 +10365,9 @@ var init_claude_history = __esm({
         const out = [];
         for (const ent of entries) {
           if (!ent.isDirectory()) continue;
-          const dir = import_node_path8.default.join(this.projectsRoot, ent.name);
-          const files = import_node_fs8.default.readdirSync(dir).filter((f) => f.endsWith(".jsonl"));
-          const updatedAtMs = files.reduce((m, f) => Math.max(m, safeStatMtime(import_node_path8.default.join(dir, f))), 0);
+          const dir = import_node_path5.default.join(this.projectsRoot, ent.name);
+          const files = import_node_fs6.default.readdirSync(dir).filter((f) => f.endsWith(".jsonl"));
+          const updatedAtMs = files.reduce((m, f) => Math.max(m, safeStatMtime(import_node_path5.default.join(dir, f))), 0);
           out.push({
             projectPath: hashDirToCwd(ent.name),
             hashDir: ent.name,
@@ -10387,17 +10379,17 @@ var init_claude_history = __esm({
         return out;
       }
       async listSessions(args) {
-        const dir = import_node_path8.default.join(this.projectsRoot, cwdToHashDir(args.projectPath));
+        const dir = import_node_path5.default.join(this.projectsRoot, cwdToHashDir(args.projectPath));
         let files;
         try {
-          files = import_node_fs8.default.readdirSync(dir).filter((f) => f.endsWith(".jsonl"));
+          files = import_node_fs6.default.readdirSync(dir).filter((f) => f.endsWith(".jsonl"));
         } catch (err) {
           if (err.code === "ENOENT") return [];
           throw err;
         }
         const out = [];
         for (const f of files) {
-          const full = import_node_path8.default.join(dir, f);
+          const full = import_node_path5.default.join(dir, f);
           const toolSessionId = f.slice(0, -".jsonl".length);
           const lines = readJsonlLines(full);
           let summary = "";
@@ -10452,7 +10444,7 @@ var init_claude_history = __esm({
         return out;
       }
       async read(args) {
-        const file = import_node_path8.default.join(
+        const file = import_node_path5.default.join(
           this.projectsRoot,
           cwdToHashDir(args.cwd),
           `${args.toolSessionId}.jsonl`
@@ -10485,7 +10477,7 @@ var init_claude_history = __esm({
       // 独立目录路径：<projectsRoot>/<cwdHash>/<toolSessionId>/subagents/*.jsonl
       // 返回 null 表示目录不存在（调用方回退旧实现）；返回空数组表示目录存在但无 jsonl
       listSubagentsFromDirectory(cwd, toolSessionId) {
-        const dir = import_node_path8.default.join(
+        const dir = import_node_path5.default.join(
           this.projectsRoot,
           cwdToHashDir(cwd),
           toolSessionId,
@@ -10493,7 +10485,7 @@ var init_claude_history = __esm({
         );
         let entries;
         try {
-          entries = import_node_fs8.default.readdirSync(dir, { withFileTypes: true });
+          entries = import_node_fs6.default.readdirSync(dir, { withFileTypes: true });
         } catch (err) {
           if (err.code === "ENOENT") return null;
           return null;
@@ -10503,7 +10495,7 @@ var init_claude_history = __esm({
           if (!e.isFile()) continue;
           if (!e.name.startsWith("agent-") || !e.name.endsWith(".jsonl")) continue;
           const subagentId = e.name.slice("agent-".length, -".jsonl".length);
-          const filePath = import_node_path8.default.join(dir, e.name);
+          const filePath = import_node_path5.default.join(dir, e.name);
           const lines = readJsonlLines(filePath);
           let firstText = "";
           let messageCount = 0;
@@ -10520,7 +10512,7 @@ var init_claude_history = __esm({
         return out;
       }
       listSubagentsFromMainJsonl(cwd, toolSessionId) {
-        const file = import_node_path8.default.join(
+        const file = import_node_path5.default.join(
           this.projectsRoot,
           cwdToHashDir(cwd),
           `${toolSessionId}.jsonl`
@@ -10555,7 +10547,7 @@ var init_claude_history = __esm({
       }
       // 独立文件路径：agent-<subagentId>.jsonl；文件不存在返回 null 让调用方回退旧实现
       readSubagentFromFile(cwd, toolSessionId, subagentId) {
-        const file = import_node_path8.default.join(
+        const file = import_node_path5.default.join(
           this.projectsRoot,
           cwdToHashDir(cwd),
           toolSessionId,
@@ -10564,7 +10556,7 @@ var init_claude_history = __esm({
         );
         let exists = false;
         try {
-          exists = import_node_fs8.default.statSync(file).isFile();
+          exists = import_node_fs6.default.statSync(file).isFile();
         } catch {
           return null;
         }
@@ -10583,7 +10575,7 @@ var init_claude_history = __esm({
        * "那一刻每个 tracked 文件对应的 backup 文件名"
        */
       readFileHistorySnapshots(args) {
-        const file = import_node_path8.default.join(
+        const file = import_node_path5.default.join(
           this.projectsRoot,
           cwdToHashDir(args.cwd),
           `${args.toolSessionId}.jsonl`
@@ -10628,7 +10620,7 @@ var init_claude_history = __esm({
         for (const [anchorId, target] of snapshots) {
           let hasAny = false;
           for (const [rawPath, backup] of Object.entries(target)) {
-            const absPath = import_node_path8.default.isAbsolute(rawPath) ? rawPath : import_node_path8.default.join(args.cwd, rawPath);
+            const absPath = import_node_path5.default.isAbsolute(rawPath) ? rawPath : import_node_path5.default.join(args.cwd, rawPath);
             const backupContent = readBackupContent(
               this.fileHistoryRoot,
               args.toolSessionId,
@@ -10668,7 +10660,7 @@ var init_claude_history = __esm({
         let totalInsertions = 0;
         let totalDeletions = 0;
         for (const [rawPath, backup] of Object.entries(target)) {
-          const absPath = import_node_path8.default.isAbsolute(rawPath) ? rawPath : import_node_path8.default.join(args.cwd, rawPath);
+          const absPath = import_node_path5.default.isAbsolute(rawPath) ? rawPath : import_node_path5.default.join(args.cwd, rawPath);
           const backupContent = readBackupContent(
             this.fileHistoryRoot,
             args.toolSessionId,
@@ -10715,7 +10707,7 @@ var init_claude_history = __esm({
         };
       }
       readSubagentFromMainJsonl(cwd, toolSessionId, subagentId) {
-        const file = import_node_path8.default.join(
+        const file = import_node_path5.default.join(
           this.projectsRoot,
           cwdToHashDir(cwd),
           `${toolSessionId}.jsonl`
@@ -10739,27 +10731,27 @@ var init_claude_history = __esm({
 // src/tools/claude.ts
 function macOSDesktopCandidates(home) {
   return [
-    import_node_path9.default.join(home, "Applications", "Claude.app", "Contents", "Resources", "app.asar.unpacked", "node_modules", "@anthropic-ai", "claude-code", "cli.js"),
+    import_node_path6.default.join(home, "Applications", "Claude.app", "Contents", "Resources", "app.asar.unpacked", "node_modules", "@anthropic-ai", "claude-code", "cli.js"),
     "/Applications/Claude.app/Contents/Resources/app.asar.unpacked/node_modules/@anthropic-ai/claude-code/cli.js"
   ];
 }
 function probeViaWhich() {
   try {
     const out = (0, import_node_child_process2.execFileSync)("which", ["claude"], { encoding: "utf8" }).trim();
-    if (out && import_node_fs9.default.existsSync(out)) return out;
+    if (out && import_node_fs7.default.existsSync(out)) return out;
   } catch {
   }
   return null;
 }
 async function probeClaude(env = process.env, home = import_node_os3.default.homedir()) {
-  if (env.CLAUDE_BIN && import_node_fs9.default.existsSync(env.CLAUDE_BIN)) {
+  if (env.CLAUDE_BIN && import_node_fs7.default.existsSync(env.CLAUDE_BIN)) {
     return { available: true, path: env.CLAUDE_BIN };
   }
   const w = probeViaWhich();
   if (w) return { available: true, path: w };
   if (process.platform === "darwin") {
     for (const candidate of macOSDesktopCandidates(home)) {
-      if (import_node_fs9.default.existsSync(candidate)) {
+      if (import_node_fs7.default.existsSync(candidate)) {
         return { available: true, path: candidate };
       }
     }
@@ -10784,11 +10776,8 @@ function buildSpawnArgs(ctx) {
     "--verbose"
   ];
   if (ctx.model) args.push("--model", ctx.model);
-  const hardcoded = ctx.hardcodedToolAllowlist && ctx.hardcodedToolAllowlist.length > 0;
-  if (hardcoded) {
-    args.push("--permission-mode", ctx.hardcodedPermissionMode ?? "plan");
-    args.push("--add-dir", ctx.cwd);
-    args.push("--disallowed-tools", HARDCODED_DISALLOWED_TOOLS.join(" "));
+  if (ctx.personaMode) {
+    args.push("--setting-sources", "project,local");
   } else if (ctx.permissionMode) {
     args.push("--permission-mode", ctx.permissionMode);
   }
@@ -11070,10 +11059,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m) => {
       if (!m || typeof m !== "object") return null;
       const rec = m;
-      const path23 = typeof rec.path === "string" ? rec.path : null;
+      const path21 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path23 || content == null) return null;
-      const out = { path: path23, content };
+      if (!path21 || content == null) return null;
+      const out = { path: path21, content };
       if (typeof rec.mtimeMs === "number") out.mtimeMs = rec.mtimeMs;
       return out;
     }).filter((m) => m !== null);
@@ -11177,19 +11166,18 @@ function encodeClaudeStdin(text) {
   };
   return JSON.stringify(frame) + "\n";
 }
-var import_node_child_process, import_node_child_process2, import_node_fs9, import_node_os3, import_node_path9, HARDCODED_DISALLOWED_TOOLS, ATTACHMENT_SILENT_SUBTYPES2, unknownTypeHandler, ATTACHMENT_RE, IMAGE_EXT_MIME, CLAUDE_MODELS, CLAUDE_PERMISSION_MODES, CLAUDE_CAPABILITIES, ClaudeAdapter;
+var import_node_child_process, import_node_child_process2, import_node_fs7, import_node_os3, import_node_path6, ATTACHMENT_SILENT_SUBTYPES2, unknownTypeHandler, ATTACHMENT_RE, IMAGE_EXT_MIME, CLAUDE_MODELS, CLAUDE_PERMISSION_MODES, CLAUDE_CAPABILITIES, ClaudeAdapter;
 var init_claude = __esm({
   "src/tools/claude.ts"() {
     "use strict";
     import_node_child_process = require("child_process");
     import_node_child_process2 = require("child_process");
-    import_node_fs9 = __toESM(require("fs"), 1);
+    import_node_fs7 = __toESM(require("fs"), 1);
     import_node_os3 = __toESM(require("os"), 1);
-    import_node_path9 = __toESM(require("path"), 1);
+    import_node_path6 = __toESM(require("path"), 1);
     init_protocol();
     init_claude_history();
     init_tool_result_extra();
-    HARDCODED_DISALLOWED_TOOLS = ["Bash", "Edit", "Write", "WebFetch", "WebSearch", "Task"];
     ATTACHMENT_SILENT_SUBTYPES2 = /* @__PURE__ */ new Set([
       "hook_additional_context",
       "hook_success",
@@ -14941,7 +14929,7 @@ var require_websocket_server = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path21.default.dirname(opts.recordPath);
+  const dir = import_node_path18.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -14955,8 +14943,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs21.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs21.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs19.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs19.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -14981,12 +14969,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs21, import_node_path21;
+var import_node_fs19, import_node_path18;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs21 = __toESM(require("fs"), 1);
-    import_node_path21 = __toESM(require("path"), 1);
+    import_node_fs19 = __toESM(require("fs"), 1);
+    import_node_path18 = __toESM(require("path"), 1);
   }
 });
 
@@ -15029,7 +15017,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs22.mkdtempSync)(import_node_path22.default.join(import_node_os12.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs20.mkdtempSync)(import_node_path19.default.join(import_node_os12.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -15190,19 +15178,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs22.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs20.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs22, import_node_os12, import_node_path22;
+var import_node_fs20, import_node_os12, import_node_path19;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs22 = require("fs");
+    import_node_fs20 = require("fs");
     import_node_os12 = __toESM(require("os"), 1);
-    import_node_path22 = __toESM(require("path"), 1);
+    import_node_path19 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -15427,8 +15415,8 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path20 = __toESM(require("path"), 1);
-var import_node_fs20 = __toESM(require("fs"), 1);
+var import_node_path17 = __toESM(require("path"), 1);
+var import_node_fs18 = __toESM(require("fs"), 1);
 
 // src/logger.ts
 var import_node_fs2 = __toESM(require("fs"), 1);
@@ -15482,7 +15470,16 @@ var SessionStore = class {
   root;
   constructor(opts) {
     const agentId = opts.agentId ?? DEFAULT_AGENT_ID;
-    this.root = import_node_path3.default.join(opts.dataDir, "sessions", agentId);
+    if (agentId !== DEFAULT_AGENT_ID) {
+      if (!opts.personaRoot) {
+        throw new Error(
+          `SessionStore: personaRoot is required for non-default agentId='${agentId}'. Bootstrap must wire personaRoot when constructing SessionStore for persona agents.`
+        );
+      }
+      this.root = import_node_path3.default.join(opts.personaRoot, safeFileName(agentId), ".clawd", "sub-sessions");
+    } else {
+      this.root = import_node_path3.default.join(opts.dataDir, "sessions", agentId);
+    }
   }
   filePath(sessionId) {
     return import_node_path3.default.join(this.root, `${safeFileName(sessionId)}.json`);
@@ -15694,9 +15691,8 @@ function buildSpawnContext(state) {
     effort: file.effort
   };
   const meta = state.subSessionMeta;
-  if (meta?.toolAllowlist && meta.toolAllowlist.length > 0) {
-    ctx.hardcodedToolAllowlist = meta.toolAllowlist;
-    ctx.hardcodedPermissionMode = meta.permissionMode ?? "plan";
+  if (meta?.personaMode) {
+    ctx.personaMode = true;
   }
   return ctx;
 }
@@ -16266,19 +16262,6 @@ function startRecorder(opts) {
   };
 }
 
-// src/tools/cwd-boundary.ts
-var import_node_path5 = __toESM(require("path"), 1);
-function isPathInsideCwd(cwd, target) {
-  if (!import_node_path5.default.isAbsolute(target)) return false;
-  const cwdNorm = import_node_path5.default.resolve(cwd);
-  const targetNorm = import_node_path5.default.resolve(target);
-  if (cwdNorm === targetNorm) return true;
-  const rel = import_node_path5.default.relative(cwdNorm, targetNorm);
-  if (rel.startsWith("..")) return false;
-  if (import_node_path5.default.isAbsolute(rel)) return false;
-  return true;
-}
-
 // src/session/runner.ts
 var DEFAULT_CONTROL_REQUEST_TIMEOUT_MS = 1e4;
 function encodeAllowWithInputControlResponse(requestId, updatedInput) {
@@ -16296,15 +16279,6 @@ function encodeAllowWithInputControlResponse(requestId, updatedInput) {
   return JSON.stringify(payload) + "\n";
 }
 var DEFAULT_WAIT_STOP_TIMEOUT_MS = 3e3;
-function extractToolPath(ev) {
-  const input = ev.input;
-  if (!input || typeof input !== "object") return void 0;
-  const inp = input;
-  if (ev.tool === "Read" && typeof inp.file_path === "string") return inp.file_path;
-  if (ev.tool === "Grep" && typeof inp.path === "string") return inp.path;
-  if (ev.tool === "Glob" && typeof inp.path === "string") return inp.path;
-  return void 0;
-}
 var SessionRunner = class {
   constructor(initial, hooks) {
     this.hooks = hooks;
@@ -16420,62 +16394,6 @@ var SessionRunner = class {
       }
     });
   }
-  // L1 锁定（task 14）拦截：仅 sub-session（state.subSessionMeta.toolAllowlist 非空）启用。
-  //   1. 解析 line 为 ParsedEvent[]，扫 'tool_call' kind
-  //   2. tool 名不在白名单 → emit session:event(kind='error') + SIGKILL，丢弃本行
-  //   3. tool input 里带 path 字段（Read.file_path / Grep.path / Glob.path）越出 cwd 子树 → 同上处理
-  // 命中返回 true，调用方不再喂 reducer；命中即 SIGKILL，CC 进程会触发 proc.on('exit')
-  // 走正常的 stop / proc-exit 流程。本拦截层与 buildSpawnArgs 的 --disallowed-tools / --add-dir
-  // 共同构成 L1 第二 / 第三层防御（schema 层 + manager 层 + claude CLI 层 + runner 拦截层）
-  tryInterceptL1Violation(line) {
-    const meta = this.state.subSessionMeta;
-    if (!meta?.toolAllowlist || meta.toolAllowlist.length === 0) return false;
-    const allowed = new Set(meta.toolAllowlist);
-    let events;
-    try {
-      events = this.hooks.adapter.parseLine(line);
-    } catch {
-      return false;
-    }
-    if (events.length === 0) return false;
-    const cwd = this.state.file.cwd;
-    for (const ev of events) {
-      if (ev.kind !== "tool_call") continue;
-      if (typeof ev.tool === "string" && ev.tool && !allowed.has(ev.tool)) {
-        this.emitL1Error(`tool ${ev.tool} blocked by L1 lockdown`, "TOOL_NOT_ALLOWED");
-        this.doKill("SIGKILL");
-        return true;
-      }
-      const argPath = extractToolPath(ev);
-      if (argPath && !isPathInsideCwd(cwd, argPath)) {
-        this.emitL1Error(
-          `path ${argPath} outside cwd ${cwd}`,
-          "PATH_OUT_OF_BOUND"
-        );
-        this.doKill("SIGKILL");
-        return true;
-      }
-    }
-    return false;
-  }
-  // L1 违规错误帧：走 session:event 通道，code 编码进 ParsedEvent.error message。
-  // 不引入新的 wire 帧 type（避免 protocol 改动），现有 error kind 已经走 broadcast 路径
-  emitL1Error(message, code) {
-    const errEvent = {
-      kind: "error",
-      message: `[${code}] ${message}`
-    };
-    const frame = {
-      type: "session:event",
-      sessionId: this.state.file.sessionId,
-      event: errEvent
-    };
-    try {
-      this.hooks.broadcastFrame(frame, "broadcast");
-    } catch {
-    }
-    this.hooks.logger?.warn("clawd-l1-violation", { code, message, sessionId: this.state.file.sessionId });
-  }
   // 尝试把一行 stdout 解析成 `type:"control_response"` 帧并 resolve 匹配的 pending。
   // 命中返回 true —— 调用方不再把该行喂给 reducer（control_response 不是会话事件）。
   tryHandleControlResponse(line) {
@@ -16598,7 +16516,6 @@ var SessionRunner = class {
       this.stdoutBuf = newBuf;
       for (const line of lines) {
         if (this.tryHandleControlResponse(line)) continue;
-        if (this.tryInterceptL1Violation(line)) continue;
         this.input({ kind: "stdout-line", line });
       }
     });
@@ -16730,15 +16647,21 @@ var SessionManager = class {
   // 仅推 reducer 产出的 'session:event' 帧里的 ParsedEvent，其他帧（status / info / cleared）
   // 由调用方按需自行处理（persona-bound 简化协议只暴露 event 流，不需要这些）
   eventSubscribers = /* @__PURE__ */ new Map();
-  // 按 agentId 拿对应的 SessionStore；persona sub-session 走这条路径写到
-  // sessions/<personaId>/<sessionId>.json。需要 deps.dataDir 同源，否则脑裂
+  // 按 agentId 拿对应的 SessionStore；persona-* agentId 使用 personaRoot 路径。
+  // 'default' 直接复用 deps.store；其它 agentId 第一次访问时按需创建并缓存。
+  // personaRoot 必须与 PersonaStore 同源，两者共享相同的 persona 目录层级
   storeFor(agentId) {
     const cached = this.storesByAgent.get(agentId);
     if (cached) return cached;
     if (!this.deps.dataDir) {
       throw new Error(`SessionManager: dataDir required to route agentId='${agentId}'`);
     }
-    const st = new SessionStore({ dataDir: this.deps.dataDir, agentId });
+    if (!this.deps.personaRoot) {
+      throw new Error(
+        `SessionManager: personaRoot is required to route agentId='${agentId}'. Bootstrap must wire personaRoot when constructing SessionManager for persona sub-sessions.`
+      );
+    }
+    const st = new SessionStore({ dataDir: this.deps.dataDir, agentId, personaRoot: this.deps.personaRoot });
     this.storesByAgent.set(agentId, st);
     return st;
   }
@@ -17243,7 +17166,7 @@ var SessionManager = class {
   //
   // PersonaManager 是 SessionManager 之上的薄编排层，sub-session 的持久化（SessionFile）
   // 仍由 SessionManager 持有。区别于普通 session：
-  //   - SessionFile 落到 sessions/<personaId>/ 而非 sessions/default/
+  //   - SessionFile 落到 <personaRoot>/<personaId>/.clawd/sub-sessions/ 而非 sessions/default/
   //   - reducer state.subSessionMeta.idleKillEnabled = true（turn_end 自动 idle-kill）
   //   - sessionId 由 PersonaManager 派生（personaId-<tokenHash>），不走自动 newSessionId
   /** 按 agentId 读取 SessionFile；不存在返回 null */
@@ -17287,15 +17210,8 @@ var SessionManager = class {
       updatedAt: iso
     };
     const written = store.write(file);
-    if (args.subSessionMeta || args.hardcodedToolAllowlist) {
-      const meta = {
-        idleKillEnabled: args.subSessionMeta?.idleKillEnabled ?? false,
-        ...args.hardcodedToolAllowlist && args.hardcodedToolAllowlist.length > 0 ? {
-          toolAllowlist: args.hardcodedToolAllowlist,
-          permissionMode: args.permissionMode
-        } : {}
-      };
-      this.subSessionMetaBySid.set(args.sessionId, meta);
+    if (args.subSessionMeta) {
+      this.subSessionMetaBySid.set(args.sessionId, args.subSessionMeta);
     }
     return written;
   }
@@ -17482,59 +17398,89 @@ var SessionManager = class {
 };
 
 // src/persona/store.ts
-var import_node_fs6 = __toESM(require("fs"), 1);
-var import_node_path6 = __toESM(require("path"), 1);
+var fs6 = __toESM(require("fs"), 1);
+var path5 = __toESM(require("path"), 1);
 init_protocol();
+var DEFAULT_SETTINGS = {
+  permissions: {
+    // silent-deny for tools accessing outside cwd — no permission prompt shown to persona
+    defaultMode: "dontAsk"
+  },
+  sandbox: {
+    enabled: true,
+    // sandboxed Bash auto-runs without prompting the user
+    autoAllowBashIfSandboxed: true,
+    // prevents CC from retrying denied commands with dangerouslyDisableSandbox: true
+    allowUnsandboxedCommands: false,
+    filesystem: {
+      // deny home dir explicitly; default sandbox allows all reads, only limits writes to cwd
+      denyRead: ["~/"],
+      allowRead: ["."],
+      denyWrite: ["~/"],
+      allowWrite: ["."]
+    }
+  }
+};
 var PersonaStore = class {
+  constructor(root) {
+    this.root = root;
+    fs6.mkdirSync(root, { recursive: true });
+  }
   root;
-  constructor(opts) {
-    this.root = import_node_path6.default.join(opts.dataDir, "personas");
+  personaDir(personaId) {
+    return path5.join(this.root, safeFileName(personaId));
   }
-  filePath(personaId) {
-    return import_node_path6.default.join(this.root, `${safeFileName(personaId)}.json`);
+  metaPath(personaId) {
+    return path5.join(this.personaDir(personaId), ".clawd", "persona.json");
   }
-  ensureDir() {
-    import_node_fs6.default.mkdirSync(this.root, { recursive: true });
+  claudeMdPath(personaId) {
+    return path5.join(this.personaDir(personaId), "CLAUDE.md");
   }
-  read(personaId) {
-    try {
-      const raw = import_node_fs6.default.readFileSync(this.filePath(personaId), "utf8");
-      return PersonaFileSchema.parse(JSON.parse(raw));
-    } catch (err) {
-      const code = err?.code;
-      if (code === "ENOENT") return null;
-      return null;
-    }
+  settingsPath(personaId) {
+    return path5.join(this.personaDir(personaId), ".claude", "settings.json");
   }
-  write(file) {
-    const validated = PersonaFileSchema.parse(file);
-    this.ensureDir();
-    const target = this.filePath(validated.personaId);
-    const tmp = `${target}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs6.default.writeFileSync(tmp, JSON.stringify(validated, null, 2), { encoding: "utf8", mode: 384 });
-    import_node_fs6.default.renameSync(tmp, target);
-    return validated;
+  write(persona, personality) {
+    const dir = this.personaDir(persona.personaId);
+    fs6.mkdirSync(path5.join(dir, ".claude"), { recursive: true });
+    fs6.mkdirSync(path5.join(dir, ".clawd"), { recursive: true });
+    this.atomicWrite(this.claudeMdPath(persona.personaId), personality);
+    this.atomicWrite(this.settingsPath(persona.personaId), JSON.stringify(DEFAULT_SETTINGS, null, 2));
+    this.atomicWrite(this.metaPath(persona.personaId), JSON.stringify(persona, null, 2));
   }
-  delete(personaId) {
-    try {
-      import_node_fs6.default.unlinkSync(this.filePath(personaId));
-    } catch (err) {
-      const code = err?.code;
-      if (code !== "ENOENT") throw err;
-    }
+  writePersonality(personaId, personality) {
+    this.atomicWrite(this.claudeMdPath(personaId), personality);
+  }
+  writeMeta(persona) {
+    this.atomicWrite(this.metaPath(persona.personaId), JSON.stringify(persona, null, 2));
+  }
+  read(personaId) {
+    const p = this.metaPath(personaId);
+    if (!fs6.existsSync(p)) return null;
+    const raw = JSON.parse(fs6.readFileSync(p, "utf8"));
+    return PersonaFileSchema.parse(raw);
+  }
+  readPersonality(personaId) {
+    const p = this.claudeMdPath(personaId);
+    if (!fs6.existsSync(p)) return null;
+    return fs6.readFileSync(p, "utf8");
   }
   list() {
-    if (!import_node_fs6.default.existsSync(this.root)) return [];
-    const files = import_node_fs6.default.readdirSync(this.root).filter((f) => f.endsWith(".json") && !f.includes(".tmp"));
-    const items = [];
-    for (const f of files) {
-      try {
-        const raw = import_node_fs6.default.readFileSync(import_node_path6.default.join(this.root, f), "utf8");
-        items.push(PersonaFileSchema.parse(JSON.parse(raw)));
-      } catch {
-      }
-    }
-    return items.sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
+    if (!fs6.existsSync(this.root)) return [];
+    return fs6.readdirSync(this.root).filter((name) => {
+      return fs6.existsSync(path5.join(this.root, name, ".clawd", "persona.json"));
+    });
+  }
+  remove(personaId) {
+    const dir = this.personaDir(personaId);
+    if (fs6.existsSync(dir)) fs6.rmSync(dir, { recursive: true, force: true });
+  }
+  personaDirPath(personaId) {
+    return this.personaDir(personaId);
+  }
+  atomicWrite(file, content) {
+    const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
+    fs6.writeFileSync(tmp, content, { mode: 384 });
+    fs6.renameSync(tmp, file);
   }
 };
 
@@ -17549,7 +17495,10 @@ var PersonaRegistry = class {
   /** 从 store 全量重建缓存（boot 时 + 测试 setup 时） */
   reload() {
     this.cache.clear();
-    for (const p of this.store.list()) this.cache.set(p.personaId, p);
+    for (const id of this.store.list()) {
+      const p = this.store.read(id);
+      if (p) this.cache.set(p.personaId, p);
+    }
   }
   get(personaId) {
     return this.cache.get(personaId);
@@ -17577,8 +17526,6 @@ var PersonaRegistry = class {
 
 // src/persona/manager.ts
 var import_node_crypto3 = __toESM(require("crypto"), 1);
-var import_node_fs7 = __toESM(require("fs"), 1);
-var import_node_path7 = __toESM(require("path"), 1);
 var PersonaManager = class {
   constructor(deps) {
     this.deps = deps;
@@ -17586,49 +17533,45 @@ var PersonaManager = class {
   deps;
   create(args) {
     const personaId = this.generatePersonaId(args.label);
-    const iso = this.deps.now().toISOString();
-    const file = {
+    const now = Date.now();
+    const persona = {
       personaId,
       label: args.label,
-      cwd: args.cwd,
       model: args.model,
-      systemPromptAppend: args.systemPromptAppend,
-      // L1 锁死：plan 模式 + 只读三件套
-      permissionMode: "plan",
-      toolAllowlist: ["Read", "Grep", "Glob"],
-      public: true,
+      public: args.public ?? false,
       tokenMap: {},
-      createdAt: iso,
-      updatedAt: iso
+      createdAt: now,
+      updatedAt: now
     };
-    const written = this.deps.store.write(file);
-    this.deps.registry.set(written);
-    return written;
+    this.deps.store.write(persona, args.personality);
+    this.deps.registry.set(persona);
+    return persona;
   }
-  update(personaId, patch) {
+  update(personaId, patch, personality) {
     const existing = this.deps.registry.get(personaId);
     if (!existing) throw new Error(`persona not found: ${personaId}`);
     const updated = {
       ...existing,
       ...patch,
-      updatedAt: this.deps.now().toISOString()
+      updatedAt: Date.now()
     };
-    const written = this.deps.store.write(updated);
-    this.deps.registry.set(written);
-    return written;
+    if (personality !== void 0) {
+      this.deps.store.write(updated, personality);
+    } else {
+      this.deps.store.writeMeta(updated);
+    }
+    this.deps.registry.set(updated);
+    return updated;
   }
-  /** 删除 persona + 级联清掉 sessions/<personaId>/ 目录 */
+  /**
+   * 删除 persona。
+   * PersonaStore.remove(personaId) 已级联删除整个 <personaRoot>/<personaId>/ 目录，
+   * 其中包含 .clawd/sub-sessions/——无需额外清理。
+   * 旧的 <dataDir>/sessions/<personaId>/ 路径已废弃，不再维护。
+   */
   delete(personaId) {
-    this.deps.store.delete(personaId);
+    this.deps.store.remove(personaId);
     this.deps.registry.remove(personaId);
-    const dir = import_node_path7.default.join(this.deps.dataDir, "sessions", personaId);
-    try {
-      import_node_fs7.default.rmSync(dir, { recursive: true, force: true });
-    } catch (err) {
-      this.deps.logger.warn(`PersonaManager.delete: cleanup ${dir} failed`, {
-        err: err.message
-      });
-    }
   }
   /** 生成 32-char base64url token（24 bytes 随机），label 必填 */
   issueToken(personaId, label) {
@@ -17637,16 +17580,17 @@ var PersonaManager = class {
     const token = import_node_crypto3.default.randomBytes(24).toString("base64url");
     const entry = {
       label,
-      issuedAt: this.deps.now().toISOString()
+      issuedAt: Date.now(),
+      revoked: false
     };
     const updated = {
       ...existing,
       tokenMap: { ...existing.tokenMap, [token]: entry },
-      updatedAt: this.deps.now().toISOString()
+      updatedAt: Date.now()
     };
-    const written = this.deps.store.write(updated);
-    this.deps.registry.set(written);
-    return { token, persona: written };
+    this.deps.store.writeMeta(updated);
+    this.deps.registry.set(updated);
+    return { token, persona: updated };
   }
   revokeToken(personaId, token) {
     const existing = this.deps.registry.get(personaId);
@@ -17659,16 +17603,17 @@ var PersonaManager = class {
         ...existing.tokenMap,
         [token]: { ...tokenEntry, revoked: true }
       },
-      updatedAt: this.deps.now().toISOString()
+      updatedAt: Date.now()
     };
-    const written = this.deps.store.write(updated);
-    this.deps.registry.set(written);
-    return written;
+    this.deps.store.writeMeta(updated);
+    this.deps.registry.set(updated);
+    return updated;
   }
   /**
    * 拿到（或按需创建）该 token 对应的 sub-session。subSessionId 由 personaId + token 哈希派生
    * 保证 idempotent：同一 token 永远复用同一个 sub-session。
-   * 创建路径：开启 idleKillEnabled，cwd / model / tool 等字段从 PersonaFile 模板复制
+   * 创建路径：开启 idleKillEnabled，cwd 取 persona 目录，不再硬编码 permission mode / tool allowlist
+   * （sandbox 约束移到 persona dir 下的 .claude/settings.json，由 OS-level Seatbelt 执行）
    */
   getOrCreateSubSession(personaId, token) {
     const persona = this.deps.registry.get(personaId);
@@ -17683,16 +17628,11 @@ var PersonaManager = class {
     const sessionFile = this.deps.sessionManager.createForAgent({
       sessionId: subSessionId,
       agentId: personaId,
-      cwd: persona.cwd,
+      cwd: this.deps.store.personaDirPath(personaId),
       tool: "claude",
       label: subLabel,
       model: persona.model,
-      permissionMode: "plan",
-      // L1 锁定（task 14）：把 PersonaFile.toolAllowlist 透传到 SessionManager，
-      // 最终在 buildSpawnArgs 拼成 --add-dir + --disallowed-tools，runner stdout 拦截层
-      // 也读 SubSessionMeta.toolAllowlist 做工具名 / cwd 越界拦截
-      hardcodedToolAllowlist: persona.toolAllowlist,
-      subSessionMeta: { idleKillEnabled: true }
+      subSessionMeta: { idleKillEnabled: true, personaMode: true }
     });
     return { sessionFile, isNew: true };
   }
@@ -17726,23 +17666,23 @@ init_claude();
 init_claude_history();
 
 // src/workspace/browser.ts
-var import_node_fs10 = __toESM(require("fs"), 1);
+var import_node_fs8 = __toESM(require("fs"), 1);
 var import_node_os4 = __toESM(require("os"), 1);
-var import_node_path10 = __toESM(require("path"), 1);
+var import_node_path7 = __toESM(require("path"), 1);
 init_protocol();
 var MAX_FILE_BYTES = 2 * 1024 * 1024;
 function resolveInsideCwd(cwd, subpath) {
-  const absCwd = import_node_path10.default.resolve(cwd);
-  const joined = import_node_path10.default.resolve(absCwd, subpath ?? ".");
-  const rel = import_node_path10.default.relative(absCwd, joined);
-  if (rel.startsWith("..") || import_node_path10.default.isAbsolute(rel)) {
+  const absCwd = import_node_path7.default.resolve(cwd);
+  const joined = import_node_path7.default.resolve(absCwd, subpath ?? ".");
+  const rel = import_node_path7.default.relative(absCwd, joined);
+  if (rel.startsWith("..") || import_node_path7.default.isAbsolute(rel)) {
     throw new ClawdError(ERROR_CODES.INVALID_PATH, `path escapes cwd: ${subpath}`);
   }
   return joined;
 }
 function ensureCwd(cwd) {
   try {
-    const stat = import_node_fs10.default.statSync(cwd);
+    const stat = import_node_fs8.default.statSync(cwd);
     if (!stat.isDirectory()) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${cwd}`);
     }
@@ -17756,7 +17696,7 @@ var WorkspaceBrowser = class {
     const cwd = args.cwd && args.cwd.length > 0 ? args.cwd : import_node_os4.default.homedir();
     ensureCwd(cwd);
     const full = resolveInsideCwd(cwd, args.path);
-    const dirents = import_node_fs10.default.readdirSync(full, { withFileTypes: true });
+    const dirents = import_node_fs8.default.readdirSync(full, { withFileTypes: true });
     const entries = [];
     for (const d of dirents) {
       if (!args.showHidden && d.name.startsWith(".")) continue;
@@ -17766,7 +17706,7 @@ var WorkspaceBrowser = class {
         mtime: ""
       };
       try {
-        const st = import_node_fs10.default.statSync(import_node_path10.default.join(full, d.name));
+        const st = import_node_fs8.default.statSync(import_node_path7.default.join(full, d.name));
         entry.mtime = new Date(st.mtimeMs).toISOString();
         if (d.isFile()) entry.size = st.size;
       } catch {
@@ -17782,14 +17722,14 @@ var WorkspaceBrowser = class {
   read(args) {
     ensureCwd(args.cwd);
     const full = resolveInsideCwd(args.cwd, args.path);
-    const st = import_node_fs10.default.statSync(full);
+    const st = import_node_fs8.default.statSync(full);
     if (!st.isFile()) {
       throw new ClawdError(ERROR_CODES.INVALID_PATH, `not a file: ${args.path}`);
     }
     if (st.size > MAX_FILE_BYTES) {
       throw new ClawdError(ERROR_CODES.FILE_TOO_LARGE, `file > ${MAX_FILE_BYTES} bytes`);
     }
-    const buf = import_node_fs10.default.readFileSync(full);
+    const buf = import_node_fs8.default.readFileSync(full);
     const isBinary = buf.includes(0);
     if (isBinary) {
       return {
@@ -17811,9 +17751,9 @@ var WorkspaceBrowser = class {
 };
 
 // src/skills/scanner.ts
-var import_node_fs11 = __toESM(require("fs"), 1);
+var import_node_fs9 = __toESM(require("fs"), 1);
 var import_node_os5 = __toESM(require("os"), 1);
-var import_node_path11 = __toESM(require("path"), 1);
+var import_node_path8 = __toESM(require("path"), 1);
 function parseFrontmatter(content) {
   if (!content.startsWith("---")) return { name: "", description: "" };
   const end = content.indexOf("---", 3);
@@ -17849,7 +17789,7 @@ function parseFrontmatter(content) {
 }
 function isDirLikeSync(p) {
   try {
-    return import_node_fs11.default.statSync(p).isDirectory();
+    return import_node_fs9.default.statSync(p).isDirectory();
   } catch {
     return false;
   }
@@ -17857,19 +17797,19 @@ function isDirLikeSync(p) {
 function scanSkillDir(dir, source, seen, out, pluginName) {
   let entries;
   try {
-    entries = import_node_fs11.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs9.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
-    const entryPath = import_node_path11.default.join(dir, ent.name);
+    const entryPath = import_node_path8.default.join(dir, ent.name);
     if (!ent.isDirectory() && !(ent.isSymbolicLink() && isDirLikeSync(entryPath))) continue;
     let content;
     try {
-      content = import_node_fs11.default.readFileSync(import_node_path11.default.join(entryPath, "SKILL.md"), "utf8");
+      content = import_node_fs9.default.readFileSync(import_node_path8.default.join(entryPath, "SKILL.md"), "utf8");
     } catch {
       try {
-        content = import_node_fs11.default.readFileSync(import_node_path11.default.join(entryPath, "skill.md"), "utf8");
+        content = import_node_fs9.default.readFileSync(import_node_path8.default.join(entryPath, "skill.md"), "utf8");
       } catch {
         continue;
       }
@@ -17887,26 +17827,26 @@ function scanSkillDir(dir, source, seen, out, pluginName) {
 function scanCommandDir(dir, source, seen, out, pluginName) {
   let entries;
   try {
-    entries = import_node_fs11.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs9.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
-    const entryPath = import_node_path11.default.join(dir, ent.name);
+    const entryPath = import_node_path8.default.join(dir, ent.name);
     if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync(entryPath)) {
       const ns = ent.name;
       let subEntries;
       try {
-        subEntries = import_node_fs11.default.readdirSync(entryPath, { withFileTypes: true });
+        subEntries = import_node_fs9.default.readdirSync(entryPath, { withFileTypes: true });
       } catch {
         continue;
       }
       for (const se of subEntries) {
         if (!se.name.endsWith(".md")) continue;
-        const sePath = import_node_path11.default.join(entryPath, se.name);
+        const sePath = import_node_path8.default.join(entryPath, se.name);
         let content;
         try {
-          content = import_node_fs11.default.readFileSync(sePath, "utf8");
+          content = import_node_fs9.default.readFileSync(sePath, "utf8");
         } catch {
           continue;
         }
@@ -17923,7 +17863,7 @@ function scanCommandDir(dir, source, seen, out, pluginName) {
     } else if (ent.name.endsWith(".md")) {
       let content;
       try {
-        content = import_node_fs11.default.readFileSync(entryPath, "utf8");
+        content = import_node_fs9.default.readFileSync(entryPath, "utf8");
       } catch {
         continue;
       }
@@ -17939,10 +17879,10 @@ function scanCommandDir(dir, source, seen, out, pluginName) {
   }
 }
 function readInstalledPlugins(home) {
-  const file = import_node_path11.default.join(home, ".claude", "plugins", "installed_plugins.json");
+  const file = import_node_path8.default.join(home, ".claude", "plugins", "installed_plugins.json");
   let raw;
   try {
-    raw = import_node_fs11.default.readFileSync(file, "utf8");
+    raw = import_node_fs9.default.readFileSync(file, "utf8");
   } catch {
     return [];
   }
@@ -17980,14 +17920,14 @@ var SkillsScanner = class {
   list(args) {
     const seen = /* @__PURE__ */ new Set();
     const out = [];
-    scanSkillDir(import_node_path11.default.join(this.home, ".claude", "skills"), "global", seen, out);
-    scanCommandDir(import_node_path11.default.join(this.home, ".claude", "commands"), "global", seen, out);
-    scanSkillDir(import_node_path11.default.join(args.cwd, ".claude", "skills"), "project", seen, out);
-    scanCommandDir(import_node_path11.default.join(args.cwd, ".claude", "commands"), "project", seen, out);
+    scanSkillDir(import_node_path8.default.join(this.home, ".claude", "skills"), "global", seen, out);
+    scanCommandDir(import_node_path8.default.join(this.home, ".claude", "commands"), "global", seen, out);
+    scanSkillDir(import_node_path8.default.join(args.cwd, ".claude", "skills"), "project", seen, out);
+    scanCommandDir(import_node_path8.default.join(args.cwd, ".claude", "commands"), "project", seen, out);
     const plugins = [...readInstalledPlugins(this.home), ...this.extraPluginRoots];
     for (const { name, root } of plugins) {
-      scanSkillDir(import_node_path11.default.join(root, "skills"), "plugin", seen, out, name);
-      scanCommandDir(import_node_path11.default.join(root, "commands"), "plugin", seen, out, name);
+      scanSkillDir(import_node_path8.default.join(root, "skills"), "plugin", seen, out, name);
+      scanCommandDir(import_node_path8.default.join(root, "commands"), "plugin", seen, out, name);
     }
     out.sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0);
     return out;
@@ -17995,9 +17935,9 @@ var SkillsScanner = class {
 };
 
 // src/observer/session-observer.ts
-var import_node_fs12 = __toESM(require("fs"), 1);
+var import_node_fs10 = __toESM(require("fs"), 1);
 var import_node_os6 = __toESM(require("os"), 1);
-var import_node_path12 = __toESM(require("path"), 1);
+var import_node_path9 = __toESM(require("path"), 1);
 init_claude_history();
 var SessionObserver = class {
   constructor(opts) {
@@ -18009,14 +17949,14 @@ var SessionObserver = class {
   watches = /* @__PURE__ */ new Map();
   resolveJsonlPath(cwd, toolSessionId, override) {
     if (override) return override;
-    return import_node_path12.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
+    return import_node_path9.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
   }
   start(args) {
     this.stop(args.sessionId);
     const filePath = this.resolveJsonlPath(args.cwd, args.toolSessionId, args.jsonlPath);
     let size = 0;
     try {
-      size = import_node_fs12.default.statSync(filePath).size;
+      size = import_node_fs10.default.statSync(filePath).size;
     } catch {
     }
     const w = {
@@ -18029,10 +17969,10 @@ var SessionObserver = class {
       adapter: args.adapter
     };
     try {
-      import_node_fs12.default.mkdirSync(import_node_path12.default.dirname(filePath), { recursive: true });
+      import_node_fs10.default.mkdirSync(import_node_path9.default.dirname(filePath), { recursive: true });
     } catch {
     }
-    w.watcher = import_node_fs12.default.watch(import_node_path12.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
+    w.watcher = import_node_fs10.default.watch(import_node_path9.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
       if (!changedName || !filePath.endsWith(changedName)) return;
       this.poll(w);
     });
@@ -18047,7 +17987,7 @@ var SessionObserver = class {
   // reducer.shallowEqMeta diff 让重复 patch 静默吞掉；异常静默吞，不阻塞 watcher 启动
   hydrateMetaTail(w, maxLines = 200) {
     try {
-      const raw = import_node_fs12.default.readFileSync(w.filePath, "utf8");
+      const raw = import_node_fs10.default.readFileSync(w.filePath, "utf8");
       if (!raw) return;
       const allLines = raw.split("\n").filter((l) => l.trim().length > 0);
       if (allLines.length === 0) return;
@@ -18068,7 +18008,7 @@ var SessionObserver = class {
   poll(w) {
     let size = 0;
     try {
-      size = import_node_fs12.default.statSync(w.filePath).size;
+      size = import_node_fs10.default.statSync(w.filePath).size;
     } catch {
       return;
     }
@@ -18077,11 +18017,11 @@ var SessionObserver = class {
       w.buf = "";
     }
     if (size === w.lastSize) return;
-    const fd = import_node_fs12.default.openSync(w.filePath, "r");
+    const fd = import_node_fs10.default.openSync(w.filePath, "r");
     try {
       const len = size - w.lastSize;
       const buf = Buffer.alloc(len);
-      import_node_fs12.default.readSync(fd, buf, 0, len, w.lastSize);
+      import_node_fs10.default.readSync(fd, buf, 0, len, w.lastSize);
       w.lastSize = size;
       w.buf += buf.toString("utf8");
       let newlineIndex;
@@ -18095,7 +18035,7 @@ var SessionObserver = class {
         this.maybeReportUserMessage(w.sessionId, line);
       }
     } finally {
-      import_node_fs12.default.closeSync(fd);
+      import_node_fs10.default.closeSync(fd);
     }
   }
   // 解析 JSONL 单行：仅当是主链 user 文本行（非 sidechain / 非 sub-agent / message.role='user'
@@ -18519,7 +18459,7 @@ var PersonaBoundHandler = class {
           kind: "persona-ready",
           subSessionId: subSessionFile.sessionId,
           personaLabel: persona.label,
-          cwd: persona.cwd,
+          cwd: this.deps.personaStore.personaDirPath(personaId),
           model: persona.model
         });
         unsubscribe = this.deps.sessionManager.subscribe(
@@ -18683,10 +18623,10 @@ function isLocalhost(addr) {
 }
 
 // src/discovery/state-file.ts
-var import_node_fs13 = __toESM(require("fs"), 1);
-var import_node_path13 = __toESM(require("path"), 1);
+var import_node_fs11 = __toESM(require("fs"), 1);
+var import_node_path10 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path13.default.join(dataDir, "state.json");
+  return import_node_path10.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -18708,7 +18648,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs13.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs11.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -18722,34 +18662,34 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs13.default.mkdirSync(import_node_path13.default.dirname(this.file), { recursive: true });
+    import_node_fs11.default.mkdirSync(import_node_path10.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs13.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs13.default.renameSync(tmp, this.file);
+    import_node_fs11.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs11.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs13.default.chmodSync(this.file, 384);
+        import_node_fs11.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs13.default.unlinkSync(this.file);
+      import_node_fs11.default.unlinkSync(this.file);
     } catch {
     }
   }
 };
 
 // src/tunnel/tunnel-manager.ts
-var import_node_fs16 = __toESM(require("fs"), 1);
-var import_node_path16 = __toESM(require("path"), 1);
+var import_node_fs14 = __toESM(require("fs"), 1);
+var import_node_path13 = __toESM(require("path"), 1);
 var import_node_crypto4 = __toESM(require("crypto"), 1);
 var import_node_child_process4 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
-var import_node_fs14 = __toESM(require("fs"), 1);
-var import_node_path14 = __toESM(require("path"), 1);
+var import_node_fs12 = __toESM(require("fs"), 1);
+var import_node_path11 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -18757,7 +18697,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs14.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs12.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -18768,22 +18708,22 @@ var TunnelStore = class {
     }
   }
   async set(v) {
-    const dir = import_node_path14.default.dirname(this.filePath);
-    await import_node_fs14.default.promises.mkdir(dir, { recursive: true });
+    const dir = import_node_path11.default.dirname(this.filePath);
+    await import_node_fs12.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs14.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs12.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs14.default.promises.chmod(tmp, 384);
+        await import_node_fs12.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs14.default.promises.rename(tmp, this.filePath);
+    await import_node_fs12.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs14.default.promises.unlink(this.filePath);
+      await import_node_fs12.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -18878,9 +18818,9 @@ function escape(v) {
 }
 
 // src/tunnel/frpc-binary.ts
-var import_node_fs15 = __toESM(require("fs"), 1);
+var import_node_fs13 = __toESM(require("fs"), 1);
 var import_node_os7 = __toESM(require("os"), 1);
-var import_node_path15 = __toESM(require("path"), 1);
+var import_node_path12 = __toESM(require("path"), 1);
 var import_node_child_process3 = require("child_process");
 var import_node_stream = require("stream");
 var import_promises = require("stream/promises");
@@ -18912,20 +18852,20 @@ function frpcDownloadUrl(version2, p) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs15.default.existsSync(opts.override)) {
+    if (!import_node_fs13.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path15.default.join(opts.dataDir, "bin");
-  import_node_fs15.default.mkdirSync(binDir, { recursive: true });
+  const binDir = import_node_path12.default.join(opts.dataDir, "bin");
+  import_node_fs13.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path15.default.join(binDir, "frpc");
-  if (import_node_fs15.default.existsSync(stableBin)) return stableBin;
+  const stableBin = import_node_path12.default.join(binDir, "frpc");
+  if (import_node_fs13.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path15.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path12.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -18934,8 +18874,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs15.default.chmodSync(partialBin, 493);
-    import_node_fs15.default.renameSync(partialBin, stableBin);
+    import_node_fs13.default.chmodSync(partialBin, 493);
+    import_node_fs13.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -18945,15 +18885,15 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs15.default.readdirSync(binDir);
+    entries = import_node_fs13.default.readdirSync(binDir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path15.default.join(binDir, name);
+      const full = import_node_path12.default.join(binDir, name);
       try {
-        import_node_fs15.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs13.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -18961,7 +18901,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p) {
   try {
-    import_node_fs15.default.unlinkSync(p);
+    import_node_fs13.default.unlinkSync(p);
   } catch {
   }
 }
@@ -18972,13 +18912,13 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs15.default.createWriteStream(dest);
+  const out = import_node_fs13.default.createWriteStream(dest);
   const nodeStream = import_node_stream.Readable.fromWeb(res.body);
   await (0, import_promises.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path15.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs15.default.mkdirSync(work, { recursive: true });
+  const work = import_node_path12.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  import_node_fs13.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve, reject) => {
       const proc = (0, import_node_child_process3.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
@@ -18986,13 +18926,13 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
       proc.on("exit", (code) => code === 0 ? resolve() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path15.default.join(work, dirName, "frpc");
-    if (!import_node_fs15.default.existsSync(src)) {
+    const src = import_node_path12.default.join(work, dirName, "frpc");
+    if (!import_node_fs13.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs15.default.copyFileSync(src, destBin);
+    import_node_fs13.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs15.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs13.default.rmSync(work, { recursive: true, force: true });
   }
 }
 
@@ -19001,7 +18941,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path16.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path13.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -19118,7 +19058,7 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path16.default.join(this.deps.dataDir, "frpc.toml");
+      const tomlPath = import_node_path13.default.join(this.deps.dataDir, "frpc.toml");
       const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto4.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
@@ -19129,12 +19069,12 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs16.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      await import_node_fs14.default.promises.writeFile(tomlPath, toml, { mode: 384 });
       const proc = (this.deps.spawnImpl ?? import_node_child_process4.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logFilePath = import_node_path16.default.join(this.deps.dataDir, "frpc.log");
-      const logStream = import_node_fs16.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logFilePath = import_node_path13.default.join(this.deps.dataDir, "frpc.log");
+      const logStream = import_node_fs14.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -19226,12 +19166,12 @@ function deriveStableDeviceKey(opts = {}) {
 }
 
 // src/auth-store.ts
-var import_node_fs17 = __toESM(require("fs"), 1);
-var import_node_path17 = __toESM(require("path"), 1);
+var import_node_fs15 = __toESM(require("fs"), 1);
+var import_node_path14 = __toESM(require("path"), 1);
 var import_node_crypto6 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path17.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path14.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthToken(opts) {
   const file = authFilePath(opts.dataDir);
@@ -19247,7 +19187,7 @@ function defaultGenerate() {
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs17.default.readFileSync(file, "utf8");
+    const raw = import_node_fs15.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token === "string" && parsed.token.length > 0) {
       return {
@@ -19263,10 +19203,10 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs17.default.mkdirSync(import_node_path17.default.dirname(file), { recursive: true });
-  import_node_fs17.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs15.default.mkdirSync(import_node_path14.default.dirname(file), { recursive: true });
+  import_node_fs15.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs17.default.chmodSync(file, 384);
+    import_node_fs15.default.chmodSync(file, 384);
   } catch {
   }
 }
@@ -19278,12 +19218,12 @@ init_protocol();
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs18 = __toESM(require("fs"), 1);
+var import_node_fs16 = __toESM(require("fs"), 1);
 var import_node_os9 = __toESM(require("os"), 1);
-var import_node_path18 = __toESM(require("path"), 1);
+var import_node_path15 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs18.default.readFileSync(file, "utf8");
+  const raw = import_node_fs16.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -19296,10 +19236,10 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path18.default.join(import_node_os9.default.homedir(), ".claude");
-  const projectDir = import_node_path18.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  const sourceFile = import_node_path18.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs18.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path15.default.join(import_node_os9.default.homedir(), ".claude");
+  const projectDir = import_node_path15.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  const sourceFile = import_node_path15.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs16.default.existsSync(sourceFile)) {
     throw new Error(`fork: source transcript not found: ${sourceFile}`);
   }
   const entries = readJsonlEntries(sourceFile);
@@ -19329,9 +19269,9 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const forkedFilePath = import_node_path18.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs18.default.mkdirSync(projectDir, { recursive: true });
-  import_node_fs18.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const forkedFilePath = import_node_path15.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs16.default.mkdirSync(projectDir, { recursive: true });
+  import_node_fs16.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
@@ -19601,9 +19541,9 @@ init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process5 = require("child_process");
-var import_node_fs19 = __toESM(require("fs"), 1);
+var import_node_fs17 = __toESM(require("fs"), 1);
 var import_node_os10 = __toESM(require("os"), 1);
-var import_node_path19 = __toESM(require("path"), 1);
+var import_node_path16 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process5.execFile);
 function formatChildProcessError(err) {
@@ -19618,9 +19558,9 @@ function formatChildProcessError(err) {
   return e.message ?? "unknown error";
 }
 function normalizePath(p) {
-  const resolved = import_node_path19.default.resolve(p);
+  const resolved = import_node_path16.default.resolve(p);
   try {
-    return import_node_fs19.default.realpathSync(resolved);
+    return import_node_fs17.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -19721,13 +19661,13 @@ function flattenToDirName(branch) {
 }
 function encodeClaudeProjectDir(absPath) {
   if (!absPath || typeof absPath !== "string") return "";
-  let canonical = import_node_path19.default.resolve(absPath);
+  let canonical = import_node_path16.default.resolve(absPath);
   try {
-    canonical = import_node_fs19.default.realpathSync(canonical);
+    canonical = import_node_fs17.default.realpathSync(canonical);
   } catch {
     try {
-      const parent = import_node_fs19.default.realpathSync(import_node_path19.default.dirname(canonical));
-      canonical = import_node_path19.default.join(parent, import_node_path19.default.basename(canonical));
+      const parent = import_node_fs17.default.realpathSync(import_node_path16.default.dirname(canonical));
+      canonical = import_node_path16.default.join(parent, import_node_path16.default.basename(canonical));
     } catch {
     }
   }
@@ -19751,11 +19691,11 @@ async function createWorktree(input) {
   if (!isGitRoot) {
     throw new Error(`\u76EE\u5F55 ${cwd} \u4E0D\u662F git repo \u6839`);
   }
-  const parent = import_node_path19.default.dirname(import_node_path19.default.resolve(cwd));
-  if (parent === "/" || parent === import_node_path19.default.resolve(cwd)) {
+  const parent = import_node_path16.default.dirname(import_node_path16.default.resolve(cwd));
+  if (parent === "/" || parent === import_node_path16.default.resolve(cwd)) {
     throw new Error("repo \u5728\u78C1\u76D8\u6839\u76EE\u5F55\uFF0C\u65E0\u6CD5\u5728\u540C\u7EA7\u521B\u5EFA worktree");
   }
-  const worktreeRoot = import_node_path19.default.join(parent, dirName);
+  const worktreeRoot = import_node_path16.default.join(parent, dirName);
   try {
     await pexec("git", ["-C", cwd, "rev-parse", "--verify", `refs/heads/${baseBranch}`], {
       timeout: 3e3
@@ -19772,7 +19712,7 @@ async function createWorktree(input) {
     const msg = err.message;
     if (msg.startsWith("\u5206\u652F ")) throw err;
   }
-  if (import_node_fs19.default.existsSync(worktreeRoot)) {
+  if (import_node_fs17.default.existsSync(worktreeRoot)) {
     throw new Error(`\u76EE\u5F55 ${worktreeRoot} \u5DF2\u5B58\u5728\uFF0C\u8BF7\u6362\u4E00\u4E2A label \u6216\u6E05\u7406\u540E\u91CD\u8BD5`);
   }
   try {
@@ -19800,8 +19740,8 @@ async function removeWorktree(input) {
     );
     const gitCommonDir = stdout.trim();
     if (!gitCommonDir) throw new Error("empty git-common-dir");
-    const absGitCommon = import_node_path19.default.isAbsolute(gitCommonDir) ? gitCommonDir : import_node_path19.default.resolve(worktreeRoot, gitCommonDir);
-    repoRoot = import_node_path19.default.dirname(absGitCommon);
+    const absGitCommon = import_node_path16.default.isAbsolute(gitCommonDir) ? gitCommonDir : import_node_path16.default.resolve(worktreeRoot, gitCommonDir);
+    repoRoot = import_node_path16.default.dirname(absGitCommon);
   } catch {
     repoRoot = null;
   }
@@ -19813,7 +19753,7 @@ async function removeWorktree(input) {
     } catch (err) {
       const stderr = err.stderr ?? "";
       const lower = stderr.toLowerCase();
-      const vanished = lower.includes("not a working tree") || lower.includes("is not a working tree") || !import_node_fs19.default.existsSync(worktreeRoot);
+      const vanished = lower.includes("not a working tree") || lower.includes("is not a working tree") || !import_node_fs17.default.existsSync(worktreeRoot);
       if (!vanished) {
         throw new Error(`\u6E05\u7406 worktree \u5931\u8D25\uFF1A${formatChildProcessError(err)}`);
       }
@@ -19832,10 +19772,10 @@ async function removeWorktree(input) {
   try {
     const encoded = encodeClaudeProjectDir(worktreeRoot);
     if (encoded) {
-      const projectsRoot = import_node_path19.default.join(import_node_os10.default.homedir(), ".claude", "projects");
-      const target = import_node_path19.default.resolve(projectsRoot, encoded);
-      if (target.startsWith(projectsRoot + import_node_path19.default.sep) && target !== projectsRoot) {
-        import_node_fs19.default.rmSync(target, { recursive: true, force: true });
+      const projectsRoot = import_node_path16.default.join(import_node_os10.default.homedir(), ".claude", "projects");
+      const target = import_node_path16.default.resolve(projectsRoot, encoded);
+      if (target.startsWith(projectsRoot + import_node_path16.default.sep) && target !== projectsRoot) {
+        import_node_fs17.default.rmSync(target, { recursive: true, force: true });
       }
     }
   } catch {
@@ -19954,7 +19894,8 @@ init_protocol();
 function buildPersonaHandlers(deps) {
   const { personaManager, personaRegistry, sessionManager } = deps;
   const create = async (frame) => {
-    const args = PersonaCreateArgs.parse(frame);
+    const { type: _type, requestId: _requestId, ...rest } = frame;
+    const args = PersonaCreateArgsSchema.parse(rest);
     const persona = personaManager.create(args);
     return { response: { type: "persona:info", ...persona } };
   };
@@ -19964,7 +19905,7 @@ function buildPersonaHandlers(deps) {
     };
   };
   const get = async (frame) => {
-    const args = PersonaIdArgs.parse(frame);
+    const args = PersonaIdArgsSchema.parse(frame);
     const persona = personaRegistry.get(args.personaId) ?? null;
     if (!persona) {
       return { response: { type: "persona:info", persona: null } };
@@ -19972,38 +19913,40 @@ function buildPersonaHandlers(deps) {
     return { response: { type: "persona:info", ...persona } };
   };
   const update = async (frame) => {
-    const args = PersonaUpdateArgs.parse(frame);
-    const persona = personaManager.update(args.personaId, args.patch);
+    const { type: _type, requestId: _requestId, ...rest } = frame;
+    const args = PersonaUpdateArgsSchema.parse(rest);
+    const { personality, ...metaPatch } = args.patch;
+    const persona = personaManager.update(args.personaId, metaPatch, personality);
     return { response: { type: "persona:info", ...persona } };
   };
   const del = async (frame) => {
-    const args = PersonaIdArgs.parse(frame);
+    const args = PersonaIdArgsSchema.parse(frame);
     personaManager.delete(args.personaId);
     return {
       response: { type: "persona:deleted", personaId: args.personaId }
     };
   };
   const issueToken = async (frame) => {
-    const args = PersonaIssueTokenArgs.parse(frame);
+    const args = PersonaIssueTokenArgsSchema.parse(frame);
     const { token, persona } = personaManager.issueToken(args.personaId, args.label);
     return {
       response: { type: "persona:tokenIssued", token, persona }
     };
   };
   const revokeToken = async (frame) => {
-    const args = PersonaRevokeTokenArgs.parse(frame);
+    const args = PersonaRevokeTokenArgsSchema.parse(frame);
     const persona = personaManager.revokeToken(args.personaId, args.token);
     return { response: { type: "persona:info", ...persona } };
   };
   const listSubSessions = async (frame) => {
-    const args = PersonaIdArgs.parse(frame);
+    const args = PersonaIdArgsSchema.parse(frame);
     const sessions = sessionManager.listForAgent(args.personaId);
     return {
       response: { type: "persona:subSessions", sessions }
     };
   };
   const appendOwnerMessage = async (frame) => {
-    const args = PersonaAppendOwnerMessageArgs.parse(frame);
+    const args = PersonaAppendOwnerMessageArgsSchema.parse(frame);
     personaManager.appendOwnerMessage(args.personaId, args.subSessionId, args.text);
     return {
       response: { type: "persona:appendOwnerMessage", ok: true }
@@ -20044,7 +19987,7 @@ function buildMethodHandlers(deps) {
 async function startDaemon(config) {
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path20.default.join(config.dataDir, "clawd.log")
+    file: import_node_path17.default.join(config.dataDir, "clawd.log")
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const stateMgr = new StateFileManager({ dataDir: config.dataDir });
@@ -20085,6 +20028,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
+    personaRoot: import_node_path17.default.join(config.dataDir, "personas"),
     broadcastFrame: (frame, target) => {
       if (target === "all") {
         transport?.broadcastAll(frame);
@@ -20124,15 +20068,12 @@ async function startDaemon(config) {
       manager.recordRealUserUuid({ sessionId, realUuid, text });
     }
   });
-  const personaStore = new PersonaStore({ dataDir: config.dataDir });
+  const personaStore = new PersonaStore(import_node_path17.default.join(config.dataDir, "personas"));
   const personaRegistry = new PersonaRegistry(personaStore);
   const personaManager = new PersonaManager({
     store: personaStore,
     registry: personaRegistry,
-    sessionManager: manager,
-    dataDir: config.dataDir,
-    now: () => /* @__PURE__ */ new Date(),
-    logger
+    sessionManager: manager
   });
   let currentTunnelUrl = null;
   const handlers = buildMethodHandlers({
@@ -20150,6 +20091,7 @@ async function startDaemon(config) {
   const personaBoundHandler = new PersonaBoundHandler({
     registry: personaRegistry,
     personaManager,
+    personaStore,
     sessionManager: manager,
     logger
   });
@@ -20258,8 +20200,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path20.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path20.default.join(config.dataDir, "frpc.log")}`
+        `Frpc config: ${import_node_path17.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path17.default.join(config.dataDir, "frpc.log")}`
       ];
       const width = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width + 4);
@@ -20272,8 +20214,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path20.default.join(config.dataDir, "connect.txt");
-        import_node_fs20.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path17.default.join(config.dataDir, "connect.txt");
+        import_node_fs18.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {