@clawos-dev/clawd 0.2.320 → 0.2.322

package/dist/cli.cjs

@@ -450,8 +450,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path79, errorMaps, issueData } = params;
-      const fullPath = [...path79, ...issueData.path || []];
+      const { data, path: path81, errorMaps, issueData } = params;
+      const fullPath = [...path81, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -762,11 +762,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path79, key) {
+      constructor(parent, value, path81, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path79;
+        this._path = path81;
         this._key = key;
       }
       get path() {
@@ -6072,7 +6072,9 @@ var init_feishu_auth = __esm({
       "peerSession:remove",
       // 设备目录 + 连接（决策 #15：daemon 代理中心 server，需要 owner 的 ttcJwt）
       "device:list",
-      "device:connect"
+      "device:connect",
+      // iOS TestFlight 意向登记（需要 owner unionId 上报中心 server）
+      "onboarding:iosInterest"
     ];
     DeviceEntrySchema = external_exports.object({
       /**
@@ -6659,6 +6661,49 @@ var init_lark_bot_schemas = __esm({
   }
 });
 
+// ../protocol/src/onboarding-schemas.ts
+var OnboardingCompleteArgs, OnboardingCompleteResultSchema, ToolsProbeArgs, ToolsProbeResultSchema, SessionExternalScanArgs, ExternalSessionCandidateSchema, SessionExternalScanResultSchema, OnboardingIosInterestArgs, OnboardingIosInterestResultSchema;
+var init_onboarding_schemas = __esm({
+  "../protocol/src/onboarding-schemas.ts"() {
+    "use strict";
+    init_zod();
+    OnboardingCompleteArgs = external_exports.object({});
+    OnboardingCompleteResultSchema = external_exports.object({
+      /** 毫秒时间戳；重复调用幂等返回首次值（对齐 personaScanDoneAt 先例） */
+      onboardingCompletedAt: external_exports.number()
+    });
+    ToolsProbeArgs = external_exports.object({});
+    ToolsProbeResultSchema = external_exports.object({
+      tools: external_exports.array(
+        external_exports.object({
+          id: external_exports.enum(["claude", "codex"]),
+          available: external_exports.boolean(),
+          version: external_exports.string().optional(),
+          path: external_exports.string().optional()
+        })
+      )
+    });
+    SessionExternalScanArgs = external_exports.object({});
+    ExternalSessionCandidateSchema = external_exports.object({
+      tool: external_exports.enum(["claude", "codex"]),
+      cwd: external_exports.string(),
+      toolSessionId: external_exports.string(),
+      label: external_exports.string().optional(),
+      /** ISO datetime（直接回填给 session:importExternal） */
+      createdAt: external_exports.string(),
+      updatedAt: external_exports.string(),
+      turns: external_exports.number()
+    });
+    SessionExternalScanResultSchema = external_exports.object({
+      candidates: external_exports.array(ExternalSessionCandidateSchema)
+    });
+    OnboardingIosInterestArgs = external_exports.object({});
+    OnboardingIosInterestResultSchema = external_exports.object({
+      registered: external_exports.boolean()
+    });
+  }
+});
+
 // ../protocol/src/persona-schemas.ts
 var PersonaFileSchema, PersonaSkillSummarySchema, PersonaPluginSummarySchema, PersonaSandboxSettingsSchema, PersonaInfoResponseSchema, PersonaCreateArgsSchema, PersonaIdArgsSchema, PersonaUpdateArgsSchema, CodexSandboxSettingsSchema;
 var init_persona_schemas = __esm({
@@ -7906,6 +7951,7 @@ var init_methods = __esm({
     init_shift_internal();
     init_github();
     init_lark_bot_schemas();
+    init_onboarding_schemas();
     init_persona_schemas();
     init_schemas();
     NO_ARGS = external_exports.object({});
@@ -7920,6 +7966,10 @@ var init_methods = __esm({
           anyOf: [{ required: ["cwd"] }, { required: ["ownerPersonaId"] }]
         }
       },
+      "session:externalScan": {
+        summary: "\u626B\u63CF\u672C\u673A Claude Code / Codex \u5386\u53F2\u4F1A\u8BDD\uFF0C\u8FD4\u56DE\u53EF\u5BFC\u5165\u5019\u9009\u6E05\u5355\uFF08cwd/toolSessionId/\u65F6\u95F4\u6233/\u8F6E\u6570\uFF09\uFF1B\u6458\u8981\u7EDF\u8BA1\u4E0E\u65F6\u95F4\u7A97\u8FC7\u6EE4\u7531 UI \u6D3E\u751F\uFF0Cskip \u89C4\u5219\u4E0E clawd-session-import skill \u4E00\u81F4\uFF1Bowner-only",
+        args: SessionExternalScanArgs
+      },
       "session:importExternal": {
         summary: "\u628A Claude Code / Codex \u65E2\u6709\u5386\u53F2\u4F1A\u8BDD\u5BFC\u5165\u4E3A clawd \u5F15\u7528\uFF1A\u53EA\u5199 SessionFile\uFF0C\u4E0D\u62C9\u8D77 runner\uFF0C\u4E0D\u6539\u539F\u59CB transcript\uFF1B\u6309 toolSessionId \u8DE8 owned scope \u53BB\u91CD\uFF0C\u65B0\u5BFC\u5165\u4F1A\u5E7F\u64AD session:info",
         args: SessionImportExternalArgs
@@ -8140,6 +8190,18 @@ var init_methods = __esm({
         summary: "\u67E5 persona \u7684\u98DE\u4E66 bot \u72B6\u6001\uFF08unbound/bound/broken + \u670D\u52A1\u4E2D\u7FA4\u6E05\u5355\uFF09\uFF1Bowner-only",
         args: LarkBotStatusArgs
       },
+      "onboarding:complete": {
+        summary: "\u6807\u8BB0\u9996\u542F onboarding \u5B8C\u6210\uFF1A\u5F80 <dataDir>/profile.json \u5199 onboardingCompletedAt\uFF08\u6BEB\u79D2\u65F6\u95F4\u6233\uFF0C\u4FDD\u7559\u5176\u5B83\u5B57\u6BB5\uFF0C\u91CD\u590D\u8C03\u7528\u5E42\u7B49\uFF09\uFF1Binfo ready \u5E27\u643A\u5E26\u8BE5\u5B57\u6BB5\u4F9B UI \u5224\u5B9A\u662F\u5426\u8FDB wizard",
+        args: OnboardingCompleteArgs
+      },
+      "tools:probe": {
+        summary: "\u63A2\u6D4B\u672C\u673A claude / codex CLI \u771F\u5B9E\u53EF\u7528\u6027\u4E0E\u7248\u672C\uFF08which + <bin> --version\uFF0C\u8FDB\u7A0B\u7EA7\u7F13\u5B58\uFF09\uFF1Binfo \u5E27 tools[].available \u662F\u6CE8\u518C\u5360\u4F4D\u4E0D\u53CD\u6620\u5B89\u88C5\u72B6\u6001\uFF0Cwizard \u73AF\u5883\u68C0\u67E5\u7528\u672C\u65B9\u6CD5",
+        args: ToolsProbeArgs
+      },
+      "onboarding:iosInterest": {
+        summary: "\u767B\u8BB0 owner \u60F3\u8981 iOS TestFlight\uFF1Adaemon \u8F6C\u53D1\u4E2D\u5FC3 API\uFF08\u643A\u5E26 unionId/\u98DE\u4E66\u540D\uFF09\uFF0Cserver \u843D\u8868\u53BB\u91CD\u5E76\u7528\u5B98\u65B9 bot \u901A\u77E5 David \u8D70\u98DE\u4E66\u8054\u7CFB\uFF1B\u9700\u98DE\u4E66\u5DF2\u767B\u5F55\uFF08FEISHU_GATED\uFF09",
+        args: OnboardingIosInterestArgs
+      },
       "skills:list": {
         summary: "\u626B\u63CF\u5E76\u5217\u51FA\u8BE5\u76EE\u5F55\u53EF\u7528\u7684 skill",
         args: SkillsListArgs
@@ -8592,6 +8654,7 @@ var init_runtime = __esm({
     init_shift_internal();
     init_lark_bot_schemas();
     init_lark_bot_format();
+    init_onboarding_schemas();
   }
 });
 
@@ -8866,8 +8929,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path79 = req.path;
-        _req.url = typeof path79 === "string" ? path79 : req.url ? req.url.path || req.url : void 0;
+        const path81 = req.path;
+        _req.url = typeof path81 === "string" ? path81 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -9032,14 +9095,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path79) {
+    function parsePath(path81) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path79.length; i++) {
-        const char = path79[i];
+      for (let i = 0; i < path81.length; i++) {
+        const char = path81[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -9170,10 +9233,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path79 of paths) {
-        const parts = parsePath(path79);
+      for (const path81 of paths) {
+        const parts = parsePath(path81);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path79, remove);
+          redactWildcardPath(obj, parts, censor, path81, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -9258,8 +9321,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path79) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path79];
+            const wrappedCensor = typeof censor === "function" ? (value, path81) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path81];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -9294,8 +9357,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path79 of pathsToClone) {
-        const parts = parsePath(path79);
+      for (const path81 of pathsToClone) {
+        const parts = parsePath(path81);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -9347,24 +9410,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path79) {
-      if (typeof path79 !== "string") {
+    function validatePath(path81) {
+      if (typeof path81 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path79 === "") {
+      if (path81 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path79.includes("..")) {
-        throw new Error(`Invalid redaction path (${path79})`);
+      if (path81.includes("..")) {
+        throw new Error(`Invalid redaction path (${path81})`);
       }
-      if (path79.includes(",")) {
-        throw new Error(`Invalid redaction path (${path79})`);
+      if (path81.includes(",")) {
+        throw new Error(`Invalid redaction path (${path81})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path79.length; i++) {
-        const char = path79[i];
+      for (let i = 0; i < path81.length; i++) {
+        const char = path81[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -9378,20 +9441,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path79})`);
+            throw new Error(`Invalid redaction path (${path81})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path79})`);
+        throw new Error(`Invalid redaction path (${path81})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path79 of paths) {
-        validatePath(path79);
+      for (const path81 of paths) {
+        validatePath(path81);
       }
     }
     function slowRedact(options = {}) {
@@ -9559,8 +9622,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path79) => {
-            return censor(value, [k2, ...path79]);
+          const wrappedCensor = typeof censor === "function" ? (value, path81) => {
+            return censor(value, [k2, ...path81]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -9778,10 +9841,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs69 = require("fs");
+    var fs71 = require("fs");
     var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
-    var path79 = require("path");
+    var path81 = require("path");
     var sleep2 = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -9835,20 +9898,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs69.mkdirSync(path79.dirname(file), { recursive: true });
-          const fd = fs69.openSync(file, flags, mode);
+          if (sonic.mkdir) fs71.mkdirSync(path81.dirname(file), { recursive: true });
+          const fd = fs71.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs69.mkdir(path79.dirname(file), { recursive: true }, (err) => {
+        fs71.mkdir(path81.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs69.open(file, flags, mode, fileOpened);
+          fs71.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs69.open(file, flags, mode, fileOpened);
+        fs71.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -9889,8 +9952,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs69.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs69.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs71.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs71.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -9899,15 +9962,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs69.writeSync(this.fd, this._writingBuf);
+            return fs71.writeSync(this.fd, this._writingBuf);
           }
-          return fs69.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs71.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs69.write(this.fd, this._writingBuf, this.release);
+            return fs71.write(this.fd, this._writingBuf, this.release);
           }
-          return fs69.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs71.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -9964,7 +10027,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs69.fsyncSync(this.fd);
+          fs71.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -10078,7 +10141,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs69.fsync(this.fd, (err) => {
+            fs71.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -10180,7 +10243,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs69.close(fd, (err) => {
+          fs71.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -10229,7 +10292,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs69.writeSync(this.fd, buf) : fs69.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs71.writeSync(this.fd, buf) : fs71.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -10245,7 +10308,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs69.fsyncSync(this.fd);
+        fs71.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -10266,7 +10329,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs69.writeSync(this.fd, buf);
+          const n = fs71.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -10294,13 +10357,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs69.writeSync(this.fd, this._writingBuf) : fs69.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs71.writeSync(this.fd, this._writingBuf) : fs71.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs69.write(this.fd, this._writingBuf, release);
+        fs71.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -10309,7 +10372,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs69.writeSync(this.fd, this._writingBuf);
+          const written = fs71.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -10318,7 +10381,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs69.write(this.fd, this._writingBuf, release);
+        fs71.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -10334,12 +10397,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs69.fsync(sonic.fd, closeWrapped);
+        fs71.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs69.close(sonic.fd, done);
+          fs71.close(sonic.fd, done);
         } else {
           done();
         }
@@ -11016,7 +11079,7 @@ var require_thread_stream = __commonJS({
 var require_transport = __commonJS({
   "../node_modules/.pnpm/pino@9.14.0/node_modules/pino/lib/transport.js"(exports2, module2) {
     "use strict";
-    var { createRequire } = require("module");
+    var { createRequire: createRequire2 } = require("module");
     var getCallers = require_caller();
     var { join: join16, isAbsolute: isAbsolute2, sep: sep3 } = require("path");
     var sleep2 = require_atomic_sleep();
@@ -11127,7 +11190,7 @@ var require_transport = __commonJS({
         for (const filePath of callers) {
           try {
             const context = filePath === "node:repl" ? process.cwd() + sep3 : filePath;
-            fixTarget2 = createRequire(context).resolve(origin);
+            fixTarget2 = createRequire2(context).resolve(origin);
             break;
           } catch (err) {
             continue;
@@ -11549,12 +11612,12 @@ var require_levels = __commonJS({
     function genLsCache(instance) {
       const formatter = instance[formattersSym].level;
       const { labels } = instance.levels;
-      const cache = {};
+      const cache2 = {};
       for (const label in labels) {
         const level = formatter(labels[label], Number(label));
-        cache[label] = JSON.stringify(level).slice(0, -1);
+        cache2[label] = JSON.stringify(level).slice(0, -1);
       }
-      instance[lsCacheSym] = cache;
+      instance[lsCacheSym] = cache2;
       return instance;
     }
     function isStandardLevel(level, useOnlyCustomLevels) {
@@ -12703,7 +12766,7 @@ var require_multistream = __commonJS({
 var require_pino = __commonJS({
   "../node_modules/.pnpm/pino@9.14.0/node_modules/pino/pino.js"(exports2, module2) {
     "use strict";
-    var os24 = require("os");
+    var os25 = require("os");
     var stdSerializers = require_pino_std_serializers();
     var caller = require_caller();
     var redaction = require_redaction();
@@ -12750,7 +12813,7 @@ var require_pino = __commonJS({
     } = symbols;
     var { epochTime, nullTime } = time;
     var { pid } = process;
-    var hostname = os24.hostname();
+    var hostname = os25.hostname();
     var defaultErrorSerializer = stdSerializers.err;
     var defaultOptions2 = {
       level: "info",
@@ -13474,11 +13537,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path79, added, removed, oldPosInc, options) {
-        var last = path79.lastComponent;
+      addToPath: function addToPath(path81, added, removed, oldPosInc, options) {
+        var last = path81.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path79.oldPos + oldPosInc,
+            oldPos: path81.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -13488,7 +13551,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path79.oldPos + oldPosInc,
+            oldPos: path81.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -13997,10 +14060,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec3 = m2;
-      const path79 = typeof rec3.path === "string" ? rec3.path : null;
+      const path81 = typeof rec3.path === "string" ? rec3.path : null;
       const content = typeof rec3.content === "string" ? rec3.content : null;
-      if (!path79 || content == null) return null;
-      const entry = { path: path79, content };
+      if (!path81 || content == null) return null;
+      const entry = { path: path81, content };
       if (typeof rec3.mtimeMs === "number") entry.mtimeMs = rec3.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -14817,10 +14880,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec3 = m2;
-      const path79 = typeof rec3.path === "string" ? rec3.path : null;
+      const path81 = typeof rec3.path === "string" ? rec3.path : null;
       const content = typeof rec3.content === "string" ? rec3.content : null;
-      if (!path79 || content == null) return null;
-      const out = { path: path79, content };
+      if (!path81 || content == null) return null;
+      const out = { path: path81, content };
       if (typeof rec3.mtimeMs === "number") out.mtimeMs = rec3.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -35789,8 +35852,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path79) {
-      var parts = path79.split("/");
+    exports2.resolve = function(path81) {
+      var parts = path81.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -41217,10 +41280,10 @@ var require_ZipFileWorker = __commonJS({
       }
       return hex;
     };
-    var generateUnixExternalFileAttr = function(unixPermissions, isDir2) {
+    var generateUnixExternalFileAttr = function(unixPermissions, isDir3) {
       var result = unixPermissions;
       if (!unixPermissions) {
-        result = isDir2 ? 16893 : 33204;
+        result = isDir3 ? 16893 : 33204;
       }
       return (result & 65535) << 16;
     };
@@ -41643,18 +41706,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path79) {
-      if (path79.slice(-1) === "/") {
-        path79 = path79.substring(0, path79.length - 1);
+    var parentFolder = function(path81) {
+      if (path81.slice(-1) === "/") {
+        path81 = path81.substring(0, path81.length - 1);
       }
-      var lastSlash = path79.lastIndexOf("/");
-      return lastSlash > 0 ? path79.substring(0, lastSlash) : "";
+      var lastSlash = path81.lastIndexOf("/");
+      return lastSlash > 0 ? path81.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path79) {
-      if (path79.slice(-1) !== "/") {
-        path79 += "/";
+    var forceTrailingSlash = function(path81) {
+      if (path81.slice(-1) !== "/") {
+        path81 += "/";
       }
-      return path79;
+      return path81;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -42656,7 +42719,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path66.default.dirname(opts.recordPath);
+  const dir = import_node_path68.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -42670,8 +42733,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs50.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs50.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs52.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs52.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -42696,12 +42759,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs50, import_node_path66;
+var import_node_fs52, import_node_path68;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs50 = __toESM(require("fs"), 1);
-    import_node_path66 = __toESM(require("path"), 1);
+    import_node_fs52 = __toESM(require("fs"), 1);
+    import_node_path68 = __toESM(require("path"), 1);
   }
 });
 
@@ -42744,7 +42807,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs51.mkdtempSync)(import_node_path67.default.join(import_node_os23.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs53.mkdtempSync)(import_node_path69.default.join(import_node_os24.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -42905,19 +42968,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs51.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs53.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs51, import_node_os23, import_node_path67;
+var import_node_fs53, import_node_os24, import_node_path69;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs51 = require("fs");
-    import_node_os23 = __toESM(require("os"), 1);
-    import_node_path67 = __toESM(require("path"), 1);
+    import_node_fs53 = require("fs");
+    import_node_os24 = __toESM(require("os"), 1);
+    import_node_path69 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -43192,9 +43255,9 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path65 = __toESM(require("path"), 1);
-var import_node_fs49 = __toESM(require("fs"), 1);
-var import_node_os22 = __toESM(require("os"), 1);
+var import_node_path67 = __toESM(require("path"), 1);
+var import_node_fs51 = __toESM(require("fs"), 1);
+var import_node_os23 = __toESM(require("os"), 1);
 
 // ../node_modules/.pnpm/uuid@10.0.0/node_modules/uuid/dist/esm-node/stringify.js
 var byteToHex = [];
@@ -49444,8 +49507,8 @@ function turnStartInput(text) {
   const items = [];
   let leftover = text;
   for (const m2 of text.matchAll(SKILL_RE)) {
-    const [marker, name, path79] = m2;
-    items.push({ type: "skill", name, path: path79 });
+    const [marker, name, path81] = m2;
+    items.push({ type: "skill", name, path: path81 });
     leftover = leftover.replace(marker, "");
   }
   for (const m2 of text.matchAll(ATTACHMENT_RE2)) {
@@ -53394,13 +53457,13 @@ function mapSkillsListResponse(res) {
       const r = s ?? {};
       const name = str3(r.name);
       if (!name) continue;
-      const path79 = str3(r.path);
+      const path81 = str3(r.path);
       const description = str3(r.description);
       const isPlugin = name.includes(":");
       out.push({
         name,
         source: isPlugin ? "plugin" : "project",
-        ...path79 ? { path: path79 } : {},
+        ...path81 ? { path: path81 } : {},
         ...description ? { description } : {},
         ...isPlugin ? { plugin: name.split(":")[0] } : {}
       });
@@ -57215,24 +57278,34 @@ var import_node_fs42 = __toESM(require("fs"), 1);
 var import_node_os15 = __toESM(require("os"), 1);
 var import_node_path47 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
-function loadOwnerDisplayName(dataDir) {
-  const fallback = import_node_os15.default.userInfo().username;
-  const profilePath = import_node_path47.default.join(dataDir, PROFILE_FILENAME);
+function profilePath(dataDir) {
+  return import_node_path47.default.join(dataDir, PROFILE_FILENAME);
+}
+function loadOwnerProfile(dataDir) {
   let raw;
   try {
-    raw = import_node_fs42.default.readFileSync(profilePath, "utf8");
+    raw = import_node_fs42.default.readFileSync(profilePath(dataDir), "utf8");
   } catch {
-    return fallback;
+    return {};
   }
-  let parsed;
   try {
-    parsed = JSON.parse(raw);
+    const parsed = JSON.parse(raw);
+    if (parsed != null && typeof parsed === "object" && !Array.isArray(parsed)) {
+      return parsed;
+    }
   } catch (err) {
-    console.warn(`[owner-profile] ${PROFILE_FILENAME} parse failed, falling back to OS username:`, err);
-    return fallback;
+    console.warn(`[owner-profile] ${PROFILE_FILENAME} parse failed, treating as empty:`, err);
   }
-  if (!parsed || typeof parsed !== "object") return fallback;
-  const displayName = parsed.displayName;
+  return {};
+}
+function patchOwnerProfile(dataDir, patch) {
+  const merged = { ...loadOwnerProfile(dataDir), ...patch };
+  import_node_fs42.default.writeFileSync(profilePath(dataDir), JSON.stringify(merged, null, 2), { encoding: "utf8", mode: 384 });
+  return merged;
+}
+function loadOwnerDisplayName(dataDir) {
+  const fallback = import_node_os15.default.userInfo().username;
+  const displayName = loadOwnerProfile(dataDir).displayName;
   if (typeof displayName !== "string" || displayName.length === 0) {
     if (displayName !== void 0) {
       console.warn(`[owner-profile] displayName must be non-empty string, falling back to OS username`);
@@ -57428,9 +57501,9 @@ var CentralClientError = class extends Error {
   code;
   cause;
 };
-async function centralRequest(opts, path79, init) {
+async function centralRequest(opts, path81, init) {
   const f = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}${path79}`;
+  const url = `${opts.api.replace(/\/+$/, "")}${path81}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
   let res;
@@ -57737,6 +57810,321 @@ function forkSession(input) {
   return { forkedToolSessionId, forkedFilePath };
 }
 
+// src/session/external-scan.ts
+var import_node_fs45 = __toESM(require("fs"), 1);
+var import_promises6 = __toESM(require("fs/promises"), 1);
+var import_node_os17 = __toESM(require("os"), 1);
+var import_node_path50 = __toESM(require("path"), 1);
+var import_node_module = require("module");
+var import_node_child_process11 = require("child_process");
+var import_meta4 = {};
+function defaultRoots() {
+  const home = import_node_os17.default.homedir();
+  return {
+    claudeProjectsDir: import_node_path50.default.join(home, ".claude", "projects"),
+    codexDir: import_node_path50.default.join(home, ".codex"),
+    clawdDir: import_node_path50.default.join(home, ".clawd")
+  };
+}
+function width(s) {
+  let w2 = 0;
+  for (const ch of s) w2 += /[ᄀ-ᅟ⺀-꓏가-힣豈-﫿︰-﹏＀-｠￠-￦]/.test(ch) ? 2 : 1;
+  return w2;
+}
+function clipW(text, n) {
+  const s = String(text ?? "").split(/\s+/).filter(Boolean).join(" ");
+  if (width(s) <= n) return s;
+  let out = "";
+  let w2 = 0;
+  for (const ch of s) {
+    const cw = width(ch);
+    if (w2 + cw > n - 1) break;
+    out += ch;
+    w2 += cw;
+  }
+  return out + "\u2026";
+}
+function toMs(v2) {
+  const n = Number(v2 || 0);
+  return n > 1e11 ? Math.round(n) : Math.round(n * 1e3);
+}
+function listFiles(dir, depth = 0, maxDepth = 8, out = []) {
+  let entries;
+  try {
+    entries = import_node_fs45.default.readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return out;
+  }
+  for (const e of entries) {
+    const full = import_node_path50.default.join(dir, e.name);
+    if (e.isDirectory()) {
+      if (depth < maxDepth) listFiles(full, depth + 1, maxDepth, out);
+    } else if (e.isFile()) {
+      out.push(full);
+    }
+  }
+  return out;
+}
+async function* jsonLines(file) {
+  let raw;
+  try {
+    raw = await import_promises6.default.readFile(file, "utf8");
+  } catch {
+    return;
+  }
+  for (const line of raw.split("\n")) {
+    const t = line.trim();
+    if (!t) continue;
+    try {
+      yield JSON.parse(t);
+    } catch {
+    }
+  }
+}
+function userText(msg) {
+  const content = msg && typeof msg === "object" ? msg.content : null;
+  if (typeof content === "string") return content;
+  if (Array.isArray(content)) {
+    return content.map((b2) => b2 && b2.type === "text" ? String(b2.text ?? "") : "").join("");
+  }
+  return "";
+}
+function isDir2(p2) {
+  try {
+    return import_node_fs45.default.statSync(p2).isDirectory();
+  } catch {
+    return false;
+  }
+}
+async function scanClaude(roots) {
+  const out = [];
+  let dirs;
+  try {
+    dirs = import_node_fs45.default.readdirSync(roots.claudeProjectsDir, { withFileTypes: true });
+  } catch {
+    return out;
+  }
+  for (const d of dirs) {
+    if (!d.isDirectory()) continue;
+    let files;
+    try {
+      files = import_node_fs45.default.readdirSync(import_node_path50.default.join(roots.claudeProjectsDir, d.name));
+    } catch {
+      continue;
+    }
+    for (const name of files) {
+      if (!name.endsWith(".jsonl")) continue;
+      const file = import_node_path50.default.join(roots.claudeProjectsDir, d.name, name);
+      let st;
+      try {
+        st = import_node_fs45.default.statSync(file);
+      } catch {
+        continue;
+      }
+      let cwd = "";
+      let title = "";
+      let firstUser = "";
+      let turns = 0;
+      let firstTs = 0;
+      let lastTs = 0;
+      let hasMainLine = false;
+      for await (const rec3 of jsonLines(file)) {
+        if (!cwd && typeof rec3.cwd === "string") cwd = rec3.cwd;
+        if (typeof rec3.timestamp === "string") {
+          const t = Date.parse(rec3.timestamp);
+          if (Number.isFinite(t)) {
+            firstTs ||= t;
+            lastTs = t;
+          }
+        }
+        if (rec3.type === "ai-title" && rec3.aiTitle) {
+          title = String(rec3.aiTitle);
+          continue;
+        }
+        if (rec3.type !== "user" && rec3.type !== "assistant") continue;
+        if (!rec3.isSidechain) hasMainLine = true;
+        if (rec3.type !== "user" || rec3.isSidechain || rec3.isMeta) continue;
+        const text = userText(rec3.message || {});
+        if (!text.trim() || text.trimStart().startsWith("<")) continue;
+        turns += 1;
+        firstUser ||= text;
+      }
+      const cand = {
+        tool: "claude",
+        toolSessionId: name.slice(0, -".jsonl".length),
+        cwd,
+        label: clipW(title || firstUser, 56),
+        turns,
+        createdMs: firstTs || st.mtimeMs,
+        updatedMs: lastTs || st.mtimeMs,
+        skip: ""
+      };
+      if (!hasMainLine) cand.skip = "subagent \u652F\u7EBF";
+      else if (!cwd) cand.skip = "\u65E0 cwd";
+      out.push(cand);
+    }
+  }
+  return out;
+}
+async function countCodexTurns(rolloutPath) {
+  if (!rolloutPath || !import_node_fs45.default.existsSync(rolloutPath)) return { turns: 0, first: "" };
+  let turns = 0;
+  let first = "";
+  for await (const rec3 of jsonLines(rolloutPath)) {
+    const p2 = rec3.payload || {};
+    if (p2.type !== "message" || p2.role !== "user") continue;
+    const text = (p2.content || []).map((b2) => String(b2 && b2.text || "")).join("");
+    if (!text.trim() || text.trimStart().startsWith("<")) continue;
+    turns += 1;
+    first ||= text;
+  }
+  return { turns, first };
+}
+function readCodexThreads(db) {
+  const COLS = ["id", "cwd", "created_at", "updated_at", "name", "title", "preview", "first_user_message", "archived", "rollout_path"];
+  try {
+    const { DatabaseSync } = (0, import_node_module.createRequire)(import_meta4.url)("node:sqlite");
+    const conn = new DatabaseSync(db, { readOnly: true });
+    try {
+      const have = new Set(
+        conn.prepare("PRAGMA table_info(threads)").all().map((r) => r.name)
+      );
+      if (!["id", "cwd", "updated_at"].every((c) => have.has(c))) return null;
+      const sel = COLS.map((c) => have.has(c) ? c : `NULL AS ${c}`).join(", ");
+      return conn.prepare(`SELECT ${sel} FROM threads`).all();
+    } finally {
+      conn.close();
+    }
+  } catch {
+  }
+  try {
+    const info = (0, import_node_child_process11.spawnSync)("sqlite3", [db, "PRAGMA table_info(threads);"], { encoding: "utf8" });
+    if (info.status !== 0) return null;
+    const have = new Set(
+      info.stdout.split("\n").map((l) => l.split("|")[1]).filter(Boolean)
+    );
+    if (!["id", "cwd", "updated_at"].every((c) => have.has(c))) return null;
+    const sel = COLS.map((c) => have.has(c) ? c : `NULL AS ${c}`).join(", ");
+    const res = (0, import_node_child_process11.spawnSync)("sqlite3", ["-json", db, `SELECT ${sel} FROM threads;`], {
+      encoding: "utf8",
+      maxBuffer: 64 * 1024 * 1024
+    });
+    if (res.status !== 0 || !res.stdout.trim()) return null;
+    return JSON.parse(res.stdout);
+  } catch {
+    return null;
+  }
+}
+async function codexFromRows(rows) {
+  const out = [];
+  for (const r of rows) {
+    const updatedMs = toMs(r.updated_at);
+    const { turns, first } = await countCodexTurns(String(r.rollout_path || ""));
+    const label = clipW(r.name || r.title || r.preview || r.first_user_message || first, 56);
+    const cand = {
+      tool: "codex",
+      toolSessionId: String(r.id),
+      cwd: String(r.cwd || ""),
+      label,
+      turns,
+      createdMs: toMs(r.created_at) || updatedMs,
+      updatedMs,
+      skip: ""
+    };
+    if (r.archived) cand.skip = "\u5DF2\u5F52\u6863";
+    else if (!label) cand.skip = "\u7A7A\u4F1A\u8BDD";
+    out.push(cand);
+  }
+  return out;
+}
+async function scanCodexRollouts(roots) {
+  const out = [];
+  for (const file of listFiles(import_node_path50.default.join(roots.codexDir, "sessions"))) {
+    if (!file.endsWith(".jsonl")) continue;
+    let st;
+    try {
+      st = import_node_fs45.default.statSync(file);
+    } catch {
+      continue;
+    }
+    let meta = null;
+    for await (const rec3 of jsonLines(file)) {
+      if (rec3.type === "session_meta") {
+        meta = rec3.payload || {};
+        break;
+      }
+    }
+    const tid = meta && (meta.session_id || meta.id);
+    if (!tid) continue;
+    const { turns, first } = await countCodexTurns(file);
+    const cand = {
+      tool: "codex",
+      toolSessionId: String(tid),
+      cwd: String(meta?.cwd || ""),
+      label: clipW(first, 56),
+      turns,
+      createdMs: st.mtimeMs,
+      updatedMs: st.mtimeMs,
+      skip: ""
+    };
+    if (!cand.cwd) cand.skip = "\u65E0 cwd";
+    out.push(cand);
+  }
+  return out;
+}
+async function scanCodex(roots) {
+  let dbs = [];
+  try {
+    dbs = import_node_fs45.default.readdirSync(roots.codexDir).filter((n) => /^state_.*\.sqlite$/.test(n)).sort().map((n) => import_node_path50.default.join(roots.codexDir, n));
+  } catch {
+  }
+  if (dbs.length) {
+    const rows = readCodexThreads(dbs[dbs.length - 1]);
+    if (rows) return codexFromRows(rows);
+  }
+  return scanCodexRollouts(roots);
+}
+async function scanExternalSessions(rootsIn) {
+  const roots = { ...defaultRoots(), ...rootsIn };
+  const personaRoot = import_node_path50.default.join(roots.clawdDir, "personas");
+  const all = [...await scanClaude(roots), ...await scanCodex(roots)];
+  const out = [];
+  for (const c of all) {
+    if (c.skip) continue;
+    if (c.turns < 1) continue;
+    if (!c.cwd || !isDir2(c.cwd)) continue;
+    if (c.cwd === roots.clawdDir || c.cwd === personaRoot || c.cwd.startsWith(personaRoot + import_node_path50.default.sep) || c.cwd.startsWith(roots.clawdDir + import_node_path50.default.sep)) {
+      continue;
+    }
+    out.push({
+      tool: c.tool,
+      cwd: c.cwd,
+      toolSessionId: c.toolSessionId,
+      ...c.label ? { label: c.label } : {},
+      createdAt: new Date(c.createdMs).toISOString(),
+      updatedAt: new Date(c.updatedMs).toISOString(),
+      turns: c.turns
+    });
+  }
+  return out;
+}
+
+// src/session/import-ledger.ts
+var import_node_fs46 = __toESM(require("fs"), 1);
+var import_node_path51 = __toESM(require("path"), 1);
+var LEDGER_FILENAME = "session-import-ledger.json";
+function appendImportLedger(dataDir, entry) {
+  const file = import_node_path51.default.join(dataDir, LEDGER_FILENAME);
+  let entries = [];
+  try {
+    const parsed = JSON.parse(import_node_fs46.default.readFileSync(file, "utf8"));
+    if (Array.isArray(parsed)) entries = parsed;
+  } catch {
+  }
+  entries.push(entry);
+  import_node_fs46.default.writeFileSync(file, JSON.stringify(entries, null, 2), { encoding: "utf8", mode: 384 });
+}
+
 // src/handlers/session.ts
 init_protocol();
 function buildSessionHandlers(deps) {
@@ -57809,8 +58197,30 @@ function buildSessionHandlers(deps) {
       creatorDisplayName,
       creatorFeishuUnionId
     );
+    if (deps.dataDir && !("alreadyLinked" in response)) {
+      appendImportLedger(deps.dataDir, {
+        sessionId: String(response.sessionId),
+        tool: args.tool,
+        ...args.label ? { label: args.label } : {},
+        toolSessionId: args.toolSessionId,
+        ...args.ownerPersonaId ? { ownerPersonaId: args.ownerPersonaId } : {}
+      });
+    }
     return { response: { type: "session:info", ...response }, broadcast };
   };
+  const externalScan = async (frame, _client, ctx) => {
+    if (ctx && ctx.principal.kind !== "owner") {
+      throw new ClawdError(
+        ERROR_CODES.UNAUTHORIZED,
+        `principal ${ctx.principal.kind}:${ctx.principal.id} cannot session:externalScan`
+      );
+    }
+    parseArgs2(SessionExternalScanArgs, frame, "session:externalScan args");
+    const owned = manager.list().response.sessions;
+    const linked = new Set(owned.map((f) => f.toolSessionId).filter(Boolean));
+    const candidates = (await scanExternalSessions()).filter((c) => !linked.has(c.toolSessionId));
+    return { response: { candidates } };
+  };
   const list = async (frame, _client, ctx) => {
     const args = SessionListArgs.parse(frame ?? {});
     const narrow = (sessions) => {
@@ -58151,6 +58561,7 @@ function buildSessionHandlers(deps) {
   };
   return {
     "session:create": create,
+    "session:externalScan": externalScan,
     "session:importExternal": importExternal,
     "session:list": list,
     "session:get": get,
@@ -58199,7 +58610,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path60 = __toESM(require("path"), 1);
+var path62 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -58217,7 +58628,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path59 = __toESM(require("path"), 1);
+var path61 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -58230,42 +58641,42 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read", userWorkDir) {
-  const target = path59.resolve(absPath);
+  const target = path61.resolve(absPath);
   if (userWorkDir) {
-    const u = path59.resolve(userWorkDir);
-    const usep = u.endsWith(path59.sep) ? "" : path59.sep;
+    const u = path61.resolve(userWorkDir);
+    const usep = u.endsWith(path61.sep) ? "" : path61.sep;
     if (target === u || target.startsWith(u + usep)) return true;
   }
-  const root = path59.resolve(personaRoot);
-  const sep3 = root.endsWith(path59.sep) ? "" : path59.sep;
+  const root = path61.resolve(personaRoot);
+  const sep3 = root.endsWith(path61.sep) ? "" : path61.sep;
   if (!target.startsWith(root + sep3)) return false;
-  const rel = path59.relative(root, target);
+  const rel = path61.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId2 = rel.split(path59.sep)[0];
+  const personaId2 = rel.split(path61.sep)[0];
   if (!personaId2) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId2);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path59.resolve(personaRoot);
-  const target = path59.resolve(absPath);
-  const sep3 = root.endsWith(path59.sep) ? "" : path59.sep;
+  const root = path61.resolve(personaRoot);
+  const target = path61.resolve(absPath);
+  const sep3 = root.endsWith(path61.sep) ? "" : path61.sep;
   if (!target.startsWith(root + sep3)) return null;
-  const rel = path59.relative(root, target);
+  const rel = path61.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path59.sep)[0];
+  const id = rel.split(path61.sep)[0];
   return id || null;
 }
 function isPathWithin(dir, absPath) {
-  const d = path59.resolve(dir);
-  const t = path59.resolve(absPath);
-  const sep3 = d.endsWith(path59.sep) ? "" : path59.sep;
+  const d = path61.resolve(dir);
+  const t = path61.resolve(absPath);
+  const sep3 = d.endsWith(path61.sep) ? "" : path61.sep;
   return t === d || t.startsWith(d + sep3);
 }
 function isPathInGuestBoundary(personaRoot, personaId2, userWorkDir, absPath) {
   if (userWorkDir && isPathWithin(userWorkDir, absPath)) return true;
-  return personaIdFromPath(path59.resolve(absPath), personaRoot) === personaId2;
+  return personaIdFromPath(path61.resolve(absPath), personaRoot) === personaId2;
 }
 
 // src/handlers/history.ts
@@ -58317,7 +58728,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path60.join(personaRoot, pid),
+          path62.join(personaRoot, pid),
           personaRoot,
           "read",
           userWorkDir
@@ -58329,7 +58740,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path60.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
+    assertGuestPath(ctx, path62.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -58373,14 +58784,14 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path60.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
+    assertGuestPath(ctx, path62.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagents");
     const subs = await history.listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path60.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
+    assertGuestPath(ctx, path62.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagent-read");
     const res = await history.readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
@@ -58390,7 +58801,7 @@ function buildHistoryHandlers(deps) {
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path60.resolve(d.cwd), personaRoot, "read", userWorkDir)
+        (d) => isGuestPathAllowed(ctx.grants, path62.resolve(d.cwd), personaRoot, "read", userWorkDir)
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -58407,8 +58818,8 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path61 = __toESM(require("path"), 1);
-var os16 = __toESM(require("os"), 1);
+var path63 = __toESM(require("path"), 1);
+var os17 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
 function buildEnabledPluginNames(personaManager, personaId2) {
@@ -58448,23 +58859,23 @@ function buildWorkspaceHandlers(deps) {
   const list = async (frame, _client, ctx) => {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
-    const fallbackCwd = isGuest && personaRoot ? personaRoot : os16.homedir();
-    const resolvedCwd = path61.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path61.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const fallbackCwd = isGuest && personaRoot ? personaRoot : os17.homedir();
+    const resolvedCwd = path63.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path63.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list", usersRoot);
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path61.isAbsolute(args.path) ? path61.resolve(args.path) : path61.resolve(args.cwd, args.path);
+    const target = path63.isAbsolute(args.path) ? path63.resolve(args.path) : path63.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read", usersRoot);
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path61.resolve(args.cwd);
+    const cwdAbs = path63.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list", usersRoot);
     const list2 = await getSkillsForTool(args.tool ?? "claude", cwdAbs);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -58476,7 +58887,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path61.resolve(args.cwd);
+    const cwdAbs = path63.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list", usersRoot);
     if (args.tool === "codex") {
       return { response: { type: "agents:list", agents: [] } };
@@ -58498,20 +58909,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path63 = __toESM(require("path"), 1);
+var path65 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
-var import_node_child_process11 = require("child_process");
-var import_node_fs45 = __toESM(require("fs"), 1);
-var import_node_path50 = __toESM(require("path"), 1);
+var import_node_child_process12 = require("child_process");
+var import_node_fs47 = __toESM(require("fs"), 1);
+var import_node_path52 = __toESM(require("path"), 1);
 var import_node_util = require("util");
-var pexec = (0, import_node_util.promisify)(import_node_child_process11.execFile);
+var pexec = (0, import_node_util.promisify)(import_node_child_process12.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path50.default.resolve(p2);
+  const resolved = import_node_path52.default.resolve(p2);
   try {
-    return import_node_fs45.default.realpathSync(resolved);
+    return import_node_fs47.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -58585,7 +58996,7 @@ async function listGitBranches(cwd) {
 function assertGuestCwd(ctx, cwd, personaRoot, method, usersRoot) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
   const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
-  if (!isGuestPathAllowed(ctx.grants, path63.resolve(cwd), personaRoot, "read", userWorkDir)) {
+  if (!isGuestPathAllowed(ctx.grants, path65.resolve(cwd), personaRoot, "read", userWorkDir)) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -59207,7 +59618,7 @@ function buildDeviceHandlers(deps) {
 }
 
 // src/handlers/meta.ts
-var import_node_os17 = __toESM(require("os"), 1);
+var import_node_os18 = __toESM(require("os"), 1);
 init_protocol();
 
 // src/handlers/method-grants.ts
@@ -59331,6 +59742,11 @@ var METHOD_GRANT_MAP = {
   "larkBot:bindManual": ADMIN_ANY,
   "larkBot:unbind": ADMIN_ANY,
   "larkBot:status": ADMIN_ANY,
+  // ---- onboarding:* / tools:probe / session:externalScan（首启 wizard，owner-only）----
+  "onboarding:complete": ADMIN_ANY,
+  "onboarding:iosInterest": ADMIN_ANY,
+  "tools:probe": ADMIN_ANY,
+  "session:externalScan": ADMIN_ANY,
   "inbox:sendDm": ADMIN_ANY,
   "personaDispatch:complete": ADMIN_ANY,
   "personaDispatch:list": ADMIN_ANY,
@@ -59462,21 +59878,21 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.320".length > 0 ? "0.2.320" : "dev";
+var version = "0.2.322".length > 0 ? "0.2.322" : "dev";
 
 // src/cli-probe/probe.ts
-var fs56 = __toESM(require("fs"), 1);
-var path64 = __toESM(require("path"), 1);
+var fs58 = __toESM(require("fs"), 1);
+var path66 = __toESM(require("path"), 1);
 var PKG_NAME = "@clawos-dev/clawd";
 var BIN_NAME = "clawd";
 var MAX_PARENT_HOPS = 5;
 function probeGlobalCli(pathEnv) {
   if (!pathEnv) return null;
-  for (const dir of pathEnv.split(path64.delimiter)) {
+  for (const dir of pathEnv.split(path66.delimiter)) {
     if (!dir) continue;
     let real;
     try {
-      real = fs56.realpathSync(path64.join(dir, BIN_NAME));
+      real = fs58.realpathSync(path66.join(dir, BIN_NAME));
     } catch {
       continue;
     }
@@ -59486,15 +59902,15 @@ function probeGlobalCli(pathEnv) {
   return null;
 }
 function readOwnPackageVersion(entryPath) {
-  let dir = path64.dirname(entryPath);
+  let dir = path66.dirname(entryPath);
   for (let i = 0; i < MAX_PARENT_HOPS; i++) {
     try {
-      const raw = fs56.readFileSync(path64.join(dir, "package.json"), "utf8");
+      const raw = fs58.readFileSync(path66.join(dir, "package.json"), "utf8");
       const pkg = JSON.parse(raw);
       if (pkg.name !== PKG_NAME) return null;
       return typeof pkg.version === "string" && pkg.version ? pkg.version : null;
     } catch {
-      const parent = path64.dirname(dir);
+      const parent = path66.dirname(dir);
       if (parent === dir) return null;
       dir = parent;
     }
@@ -59526,10 +59942,11 @@ function buildReadyFrame(deps, client) {
   const daemonSource = process.env.CLAWD_DAEMON_SOURCE === "ota" ? "ota" : "packaged";
   const globalCliVersion = probeGlobalCli(process.env.PATH);
   const logShipping = deps.getLogShipping ? deps.getLogShipping() : null;
+  const onboardingCompletedAt = deps.dataDir && client?.principalKind !== "guest" ? loadOwnerProfile(deps.dataDir).onboardingCompletedAt ?? null : void 0;
   return {
     version,
     protocolVersion: PROTOCOL_VERSION,
-    hostname: import_node_os17.default.hostname(),
+    hostname: import_node_os18.default.hostname(),
     os: process.platform,
     tools,
     runningSessions: info.runningSessions,
@@ -59538,7 +59955,8 @@ function buildReadyFrame(deps, client) {
     daemonSource,
     globalCliVersion,
     ...fileSharing,
-    ...logShipping ? { logShipping } : {}
+    ...logShipping ? { logShipping } : {},
+    ...onboardingCompletedAt !== void 0 ? { onboardingCompletedAt } : {}
   };
 }
 function buildMetaHandlers(deps) {
@@ -59652,7 +60070,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path51 = __toESM(require("path"), 1);
+var import_node_path53 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -59732,12 +60150,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path51.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path51.default.isAbsolute(args.relPath) ? import_node_path51.default.resolve(args.relPath) : import_node_path51.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path53.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path53.default.isAbsolute(args.relPath) ? import_node_path53.default.resolve(args.relPath) : import_node_path53.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.signUrl", "group-acl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path51.default.isAbsolute(e.relPath) ? import_node_path51.default.resolve(e.relPath) : import_node_path51.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path53.default.isAbsolute(e.relPath) ? import_node_path53.default.resolve(e.relPath) : import_node_path53.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -59762,7 +60180,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path51.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
+    assertGuestAttachmentPath(ctx, import_node_path53.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -59777,8 +60195,8 @@ function buildAttachmentHandlers(deps) {
     if (!scope) {
       throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, `session ${args.sessionId} not found`);
     }
-    const cwdAbs = import_node_path51.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
-    const candidateAbs = import_node_path51.default.isAbsolute(args.relPath) ? import_node_path51.default.resolve(args.relPath) : import_node_path51.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path53.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
+    const candidateAbs = import_node_path53.default.isAbsolute(args.relPath) ? import_node_path53.default.resolve(args.relPath) : import_node_path53.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.groupAdd", "cwd-subtree");
     const from = args.origin === "agent" ? "agent" : ctx?.principal.kind === "owner" ? "owner" : "agent";
     const size = 0;
@@ -59836,21 +60254,21 @@ function buildAttachmentHandlers(deps) {
 }
 
 // src/handlers/extension.ts
-var import_promises9 = __toESM(require("fs/promises"), 1);
-var import_node_path56 = __toESM(require("path"), 1);
+var import_promises10 = __toESM(require("fs/promises"), 1);
+var import_node_path58 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/extension/bundle-zip.ts
-var import_promises6 = __toESM(require("fs/promises"), 1);
-var import_node_path52 = __toESM(require("path"), 1);
+var import_promises7 = __toESM(require("fs/promises"), 1);
+var import_node_path54 = __toESM(require("path"), 1);
 var import_node_crypto14 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
   const zip = new import_jszip2.default();
   for (const rel of entries) {
-    const abs = import_node_path52.default.join(dir, rel);
-    const content = await import_promises6.default.readFile(abs);
+    const abs = import_node_path54.default.join(dir, rel);
+    const content = await import_promises7.default.readFile(abs);
     zip.file(rel, content, { date: FIXED_DATE });
   }
   const buffer = await zip.generateAsync({
@@ -59870,8 +60288,8 @@ async function listFilesSorted(rootDir) {
   return out;
 }
 async function walk(absRoot, relPrefix, out) {
-  const dirAbs = import_node_path52.default.join(absRoot, relPrefix);
-  const entries = await import_promises6.default.readdir(dirAbs, { withFileTypes: true });
+  const dirAbs = import_node_path54.default.join(absRoot, relPrefix);
+  const entries = await import_promises7.default.readdir(dirAbs, { withFileTypes: true });
   for (const e of entries) {
     if (IGNORE_BASENAMES.has(e.name)) continue;
     const rel = relPrefix ? `${relPrefix}/${e.name}` : e.name;
@@ -59923,26 +60341,26 @@ function computePublishCheck(args) {
 }
 
 // src/extension/install-flow.ts
-var import_promises7 = __toESM(require("fs/promises"), 1);
-var import_node_path54 = __toESM(require("path"), 1);
-var import_node_os19 = __toESM(require("os"), 1);
+var import_promises8 = __toESM(require("fs/promises"), 1);
+var import_node_path56 = __toESM(require("path"), 1);
+var import_node_os20 = __toESM(require("os"), 1);
 var import_node_crypto15 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
-var import_node_os18 = __toESM(require("os"), 1);
-var import_node_path53 = __toESM(require("path"), 1);
+var import_node_os19 = __toESM(require("os"), 1);
+var import_node_path55 = __toESM(require("path"), 1);
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path53.default.join(import_node_os18.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path55.default.join(import_node_os19.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
-  return import_node_path53.default.join(clawdHomeRoot(override), "extensions");
+  return import_node_path55.default.join(clawdHomeRoot(override), "extensions");
 }
 function publishedChannelsFile(override) {
-  return import_node_path53.default.join(clawdHomeRoot(override), "extensions-published.json");
+  return import_node_path55.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
 function bundleCacheRoot(override) {
-  return import_node_path53.default.join(clawdHomeRoot(override), "extension-bundles");
+  return import_node_path55.default.join(clawdHomeRoot(override), "extension-bundles");
 }
 
 // src/extension/install-flow.ts
@@ -59969,7 +60387,7 @@ async function installFromChannel(args, deps) {
     throw new InstallError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path54.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path56.default.isAbsolute(name)) {
       throw new InstallError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -60001,10 +60419,10 @@ async function installFromChannel(args, deps) {
     );
   }
   const localExtId = namespacedExtId(ownerSlug, channelRef.ownerPrincipalId);
-  const destDir = import_node_path54.default.join(deps.extensionsRoot, localExtId);
+  const destDir = import_node_path56.default.join(deps.extensionsRoot, localExtId);
   let destExists = false;
   try {
-    await import_promises7.default.access(destDir);
+    await import_promises8.default.access(destDir);
     destExists = true;
   } catch {
   }
@@ -60014,28 +60432,28 @@ async function installFromChannel(args, deps) {
       `extension ${localExtId} already installed locally (from owner ${channelRef.ownerPrincipalId})`
     );
   }
-  const stage = await import_promises7.default.mkdtemp(
-    import_node_path54.default.join(import_node_os19.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+  const stage = await import_promises8.default.mkdtemp(
+    import_node_path56.default.join(import_node_os20.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path54.default.join(stage, name);
+      const dest = import_node_path56.default.join(stage, name);
       if (entry.dir) {
-        await import_promises7.default.mkdir(dest, { recursive: true });
+        await import_promises8.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises7.default.mkdir(import_node_path54.default.dirname(dest), { recursive: true });
+      await import_promises8.default.mkdir(import_node_path56.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
-        await import_promises7.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
+        await import_promises8.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
       } else {
-        await import_promises7.default.writeFile(dest, await entry.async("nodebuffer"));
+        await import_promises8.default.writeFile(dest, await entry.async("nodebuffer"));
       }
     }
-    await import_promises7.default.mkdir(deps.extensionsRoot, { recursive: true });
-    await import_promises7.default.rename(stage, destDir);
+    await import_promises8.default.mkdir(deps.extensionsRoot, { recursive: true });
+    await import_promises8.default.rename(stage, destDir);
   } catch (e) {
-    await import_promises7.default.rm(stage, { recursive: true, force: true }).catch(() => {
+    await import_promises8.default.rm(stage, { recursive: true, force: true }).catch(() => {
     });
     throw e;
   }
@@ -60044,9 +60462,9 @@ async function installFromChannel(args, deps) {
 }
 
 // src/extension/update-flow.ts
-var import_promises8 = __toESM(require("fs/promises"), 1);
-var import_node_path55 = __toESM(require("path"), 1);
-var import_node_os20 = __toESM(require("os"), 1);
+var import_promises9 = __toESM(require("fs/promises"), 1);
+var import_node_path57 = __toESM(require("path"), 1);
+var import_node_os21 = __toESM(require("os"), 1);
 var import_node_crypto16 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
 var UpdateError = class extends Error {
@@ -60062,11 +60480,11 @@ async function updateFromChannel(args, deps) {
     channelRef.extId,
     channelRef.ownerPrincipalId
   );
-  const liveDir = import_node_path55.default.join(deps.extensionsRoot, localExtId);
+  const liveDir = import_node_path57.default.join(deps.extensionsRoot, localExtId);
   const prevDir = `${liveDir}.prev`;
   let existingVersion;
   try {
-    const raw = await import_promises8.default.readFile(import_node_path55.default.join(liveDir, "manifest.json"), "utf8");
+    const raw = await import_promises9.default.readFile(import_node_path57.default.join(liveDir, "manifest.json"), "utf8");
     const parsed2 = ExtensionManifestSchema.safeParse(JSON.parse(raw));
     if (!parsed2.success) {
       throw new UpdateError(
@@ -60099,7 +60517,7 @@ async function updateFromChannel(args, deps) {
     throw new UpdateError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path55.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path57.default.isAbsolute(name)) {
       throw new UpdateError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -60131,31 +60549,31 @@ async function updateFromChannel(args, deps) {
     );
   }
   await deps.runtime.close(localExtId);
-  await import_promises8.default.rm(prevDir, { recursive: true, force: true });
-  await import_promises8.default.rename(liveDir, prevDir);
-  const stage = await import_promises8.default.mkdtemp(
-    import_node_path55.default.join(import_node_os20.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+  await import_promises9.default.rm(prevDir, { recursive: true, force: true });
+  await import_promises9.default.rename(liveDir, prevDir);
+  const stage = await import_promises9.default.mkdtemp(
+    import_node_path57.default.join(import_node_os21.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path55.default.join(stage, name);
+      const dest = import_node_path57.default.join(stage, name);
       if (entry.dir) {
-        await import_promises8.default.mkdir(dest, { recursive: true });
+        await import_promises9.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises8.default.mkdir(import_node_path55.default.dirname(dest), { recursive: true });
+      await import_promises9.default.mkdir(import_node_path57.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
-        await import_promises8.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
+        await import_promises9.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
       } else {
-        await import_promises8.default.writeFile(dest, await entry.async("nodebuffer"));
+        await import_promises9.default.writeFile(dest, await entry.async("nodebuffer"));
       }
     }
-    await import_promises8.default.rename(stage, liveDir);
+    await import_promises9.default.rename(stage, liveDir);
   } catch (e) {
-    await import_promises8.default.rm(stage, { recursive: true, force: true }).catch(() => {
+    await import_promises9.default.rm(stage, { recursive: true, force: true }).catch(() => {
     });
-    await import_promises8.default.rename(prevDir, liveDir).catch(() => {
+    await import_promises9.default.rename(prevDir, liveDir).catch(() => {
     });
     await deps.runtime.open(localExtId).catch(() => {
     });
@@ -60177,7 +60595,7 @@ async function updateFromChannel(args, deps) {
       reason: e.message
     };
   }
-  await import_promises8.default.rm(prevDir, { recursive: true, force: true });
+  await import_promises9.default.rm(prevDir, { recursive: true, force: true });
   return {
     kind: "updated",
     extId: localExtId,
@@ -60185,9 +60603,9 @@ async function updateFromChannel(args, deps) {
   };
 }
 async function rollback(deps, localExtId, liveDir, prevDir) {
-  await import_promises8.default.rm(liveDir, { recursive: true, force: true }).catch(() => {
+  await import_promises9.default.rm(liveDir, { recursive: true, force: true }).catch(() => {
   });
-  await import_promises8.default.rename(prevDir, liveDir).catch(() => {
+  await import_promises9.default.rename(prevDir, liveDir).catch(() => {
   });
   await deps.runtime.open(localExtId).catch(() => {
   });
@@ -60210,18 +60628,18 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
       );
     }
   }
-  const manifestPath = import_node_path56.default.join(root, extId, "manifest.json");
+  const manifestPath = import_node_path58.default.join(root, extId, "manifest.json");
   const manifest = await readManifest(root, extId);
   const next = { ...manifest, version: newVersion };
   const tmp = `${manifestPath}.tmp`;
-  await import_promises9.default.writeFile(tmp, JSON.stringify(next, null, 2));
-  await import_promises9.default.rename(tmp, manifestPath);
+  await import_promises10.default.writeFile(tmp, JSON.stringify(next, null, 2));
+  await import_promises10.default.rename(tmp, manifestPath);
 }
 async function readManifest(root, extId) {
-  const file = import_node_path56.default.join(root, extId, "manifest.json");
+  const file = import_node_path58.default.join(root, extId, "manifest.json");
   let raw;
   try {
-    raw = await import_promises9.default.readFile(file, "utf8");
+    raw = await import_promises10.default.readFile(file, "utf8");
   } catch (e) {
     if (e.code === "ENOENT") {
       throw new ClawdError(ERROR_CODES.INVALID_PARAM, `extension ${extId} not installed`);
@@ -60302,7 +60720,7 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256, buffer } = await bundleExtensionDir(import_node_path56.default.join(deps.root, extId));
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path58.default.join(deps.root, extId));
     return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
@@ -60477,9 +60895,9 @@ function buildExtensionHandlers(deps) {
 }
 
 // src/app-builder/project-store.ts
-var import_node_fs46 = require("fs");
-var import_node_child_process12 = require("child_process");
-var import_node_path57 = require("path");
+var import_node_fs48 = require("fs");
+var import_node_child_process13 = require("child_process");
+var import_node_path59 = require("path");
 init_protocol();
 var PROJECTS_DIR = "projects";
 var META_FILE = ".clawd-project.json";
@@ -60493,19 +60911,19 @@ var ProjectStore = class {
   root;
   /** projects/<name>/.clawd-project.json 路径 */
   metaPath(name) {
-    return (0, import_node_path57.join)(this.projectsRoot(), name, META_FILE);
+    return (0, import_node_path59.join)(this.projectsRoot(), name, META_FILE);
   }
   /** projects/<name>/ 目录路径（cwd 用） */
   projectDir(name) {
-    return (0, import_node_path57.join)(this.projectsRoot(), name);
+    return (0, import_node_path59.join)(this.projectsRoot(), name);
   }
   projectsRoot() {
-    return (0, import_node_path57.join)(this.root, PROJECTS_DIR);
+    return (0, import_node_path59.join)(this.root, PROJECTS_DIR);
   }
   async list() {
     let entries;
     try {
-      entries = await import_node_fs46.promises.readdir(this.projectsRoot());
+      entries = await import_node_fs48.promises.readdir(this.projectsRoot());
     } catch (err) {
       if (err.code === "ENOENT") return [];
       throw err;
@@ -60513,7 +60931,7 @@ var ProjectStore = class {
     const out = [];
     for (const name of entries) {
       try {
-        const raw = await import_node_fs46.promises.readFile(this.metaPath(name), "utf8");
+        const raw = await import_node_fs48.promises.readFile(this.metaPath(name), "utf8");
         const json = JSON.parse(raw);
         let migrated = false;
         if (typeof json.devCommand !== "string" || json.devCommand.length === 0) {
@@ -60524,7 +60942,7 @@ var ProjectStore = class {
         if (parsed.success) {
           out.push(parsed.data);
           if (migrated) {
-            void import_node_fs46.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
+            void import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
             });
           }
         }
@@ -60568,8 +60986,8 @@ var ProjectStore = class {
       throw new Error(`invalid name "${name}": ${validated.error.message}`);
     }
     const dir = this.projectDir(name);
-    await import_node_fs46.promises.mkdir(dir, { recursive: true });
-    await import_node_fs46.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
+    await import_node_fs48.promises.mkdir(dir, { recursive: true });
+    await import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
     return meta;
   }
   /**
@@ -60583,7 +61001,7 @@ var ProjectStore = class {
   async scaffold(name, templateSrcDir, scaffoldScriptPath) {
     const destDir = this.projectDir(name);
     return await new Promise((resolve6, reject) => {
-      const child = (0, import_node_child_process12.spawn)("bash", [scaffoldScriptPath, name, templateSrcDir, destDir], {
+      const child = (0, import_node_child_process13.spawn)("bash", [scaffoldScriptPath, name, templateSrcDir, destDir], {
         env: { ...process.env, PATH: process.env.PATH ?? "" },
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -60612,7 +61030,7 @@ var ProjectStore = class {
   }
   async delete(name) {
     const dir = this.projectDir(name);
-    await import_node_fs46.promises.rm(dir, { recursive: true, force: true });
+    await import_node_fs48.promises.rm(dir, { recursive: true, force: true });
   }
   async updatePort(name, newPort) {
     if (newPort < PROJECT_PORT_MIN || newPort > PROJECT_PORT_MAX) {
@@ -60628,7 +61046,7 @@ var ProjectStore = class {
       throw new Error(`port ${newPort} already used / \u5DF2\u88AB project "${conflict.name}" \u5360\u7528`);
     }
     const updated = { ...target, port: newPort };
-    await import_node_fs46.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
+    await import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
     return updated;
   }
   /**
@@ -60645,7 +61063,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`invalid prodUrl "${url}": ${validated.error.message}`);
     }
-    await import_node_fs46.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
   /**
@@ -60666,7 +61084,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`invalid publishJob: ${validated.error.message}`);
     }
-    await import_node_fs46.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
   /** 清掉 .clawd-project.json.publishJob 字段。其他字段保持原样。 */
@@ -60681,13 +61099,13 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`failed to clear publishJob: ${validated.error.message}`);
     }
-    await import_node_fs46.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
 };
 
 // src/app-builder/kill-port.ts
-var import_node_child_process13 = require("child_process");
+var import_node_child_process14 = require("child_process");
 async function killPortOccupants(port, ownedPids, logger) {
   let pids;
   try {
@@ -60729,7 +61147,7 @@ async function killPortOccupants(port, ownedPids, logger) {
 }
 function listPidsOnPort(port) {
   return new Promise((resolve6, reject) => {
-    (0, import_node_child_process13.execFile)(
+    (0, import_node_child_process14.execFile)(
       "lsof",
       ["-ti", `:${port}`],
       { timeout: 3e3 },
@@ -60801,9 +61219,9 @@ var PublishJobRegistry = class {
 };
 
 // src/app-builder/publish-job-runner.ts
-var import_node_child_process14 = require("child_process");
-var import_node_fs47 = require("fs");
-var import_node_path58 = require("path");
+var import_node_child_process15 = require("child_process");
+var import_node_fs49 = require("fs");
+var import_node_path60 = require("path");
 
 // src/app-builder/publish-stage-parser.ts
 var STAGE_RE = /^\s*::stage::(build|deploy|verify)\s*$/;
@@ -60830,15 +61248,15 @@ function tailStderrLines(buf, n) {
 // src/app-builder/publish-job-runner.ts
 async function startPublishJob(deps, args) {
   const { registry: registry2, projectDir } = deps;
-  const spawn12 = deps.spawnImpl ?? import_node_child_process14.spawn;
+  const spawn12 = deps.spawnImpl ?? import_node_child_process15.spawn;
   if (registry2.has(args.name)) {
     return { jobId: registry2.get(args.name).jobId, status: "already-publishing" };
   }
   const projDir = projectDir(args.name);
-  const logPath = (0, import_node_path58.join)(projDir, ".publish.log");
+  const logPath = (0, import_node_path60.join)(projDir, ".publish.log");
   let logStream = null;
   try {
-    logStream = (0, import_node_fs47.createWriteStream)(logPath, { flags: "w" });
+    logStream = (0, import_node_fs49.createWriteStream)(logPath, { flags: "w" });
   } catch {
     logStream = null;
   }
@@ -61095,8 +61513,8 @@ async function recoverInterruptedJobs(deps) {
 
 // src/handlers/app-builder.ts
 init_protocol();
-var import_node_path59 = require("path");
-var import_node_fs48 = require("fs");
+var import_node_path61 = require("path");
+var import_node_fs50 = require("fs");
 var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
 var DEV_SERVER_READY_TIMEOUT_MS = 3e4;
 async function recoverInterruptedPublishJobs(store, logger) {
@@ -61177,7 +61595,7 @@ function buildAppBuilderHandlers(deps) {
   async function listAllUsersProjects() {
     if (!deps.usersRoot || !deps.getStore) return [];
     const getStore = deps.getStore;
-    const userIds = await import_node_fs48.promises.readdir(deps.usersRoot).catch(() => []);
+    const userIds = await import_node_fs50.promises.readdir(deps.usersRoot).catch(() => []);
     const perUser = await Promise.all(
       userIds.map((uid) => getStore(uid).list().catch(() => []))
     );
@@ -61246,8 +61664,8 @@ function buildAppBuilderHandlers(deps) {
     const project = await userStore.create(f.name, reservedPorts);
     try {
       const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(session.ownerPersonaId ?? "") : deps.personaRoot;
-      const templateSrcDir = (0, import_node_path59.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE);
-      const scaffoldScript = (0, import_node_path59.join)(deps.deployKitRoot, "scripts", "new-extension.sh");
+      const templateSrcDir = (0, import_node_path61.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE);
+      const scaffoldScript = (0, import_node_path61.join)(deps.deployKitRoot, "scripts", "new-extension.sh");
       const scaffoldResult = await userStore.scaffold(project.name, templateSrcDir, scaffoldScript);
       deps.logger?.info("app-builder.scaffold.done", {
         name: project.name,
@@ -61451,7 +61869,7 @@ function buildAppBuilderHandlers(deps) {
       await userStore.clearPublishJob(args.name);
     }
     const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(boundSession.ownerPersonaId ?? "") : deps.personaRoot;
-    const scriptPath = (0, import_node_path59.join)(deps.deployKitRoot, "scripts", "publish.sh");
+    const scriptPath = (0, import_node_path61.join)(deps.deployKitRoot, "scripts", "publish.sh");
     deps.logger?.info("app-builder.publish.start", {
       name: args.name,
       sessionId: boundSession.sessionId,
@@ -61870,12 +62288,12 @@ function buildVisitorHandlers(deps) {
 }
 
 // src/extension/registry.ts
-var import_promises10 = __toESM(require("fs/promises"), 1);
-var import_node_path60 = __toESM(require("path"), 1);
+var import_promises11 = __toESM(require("fs/promises"), 1);
+var import_node_path62 = __toESM(require("path"), 1);
 async function loadAll(root) {
   let entries;
   try {
-    entries = await import_promises10.default.readdir(root, { withFileTypes: true });
+    entries = await import_promises11.default.readdir(root, { withFileTypes: true });
   } catch (e) {
     if (e.code === "ENOENT") return [];
     throw e;
@@ -61884,16 +62302,16 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path60.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path62.default.join(root, ent.name), ent.name));
   }
   records.sort((a, b2) => a.extId < b2.extId ? -1 : a.extId > b2.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path60.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path62.default.join(dir, "manifest.json");
   let raw;
   try {
-    raw = await import_promises10.default.readFile(manifestPath, "utf8");
+    raw = await import_promises11.default.readFile(manifestPath, "utf8");
   } catch {
     return {
       extId: dirName,
@@ -61934,8 +62352,8 @@ async function loadOne(dir, dirName) {
 }
 
 // src/extension/uninstall.ts
-var import_promises11 = __toESM(require("fs/promises"), 1);
-var import_node_path61 = __toESM(require("path"), 1);
+var import_promises12 = __toESM(require("fs/promises"), 1);
+var import_node_path63 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -61944,14 +62362,14 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path61.default.join(deps.root, deps.extId);
+  const dir = import_node_path63.default.join(deps.root, deps.extId);
   try {
-    await import_promises11.default.access(dir);
+    await import_promises12.default.access(dir);
   } catch {
     throw new UninstallError("NOT_FOUND", `extension ${deps.extId} not installed`);
   }
   await deps.runtime.close(deps.extId);
-  await import_promises11.default.rm(dir, { recursive: true, force: true });
+  await import_promises12.default.rm(dir, { recursive: true, force: true });
 }
 
 // src/handlers/index.ts
@@ -61961,15 +62379,15 @@ var import_node_crypto18 = require("crypto");
 init_protocol();
 
 // src/peer-ops/run-command.ts
-var import_node_child_process15 = require("child_process");
-var import_node_os21 = __toESM(require("os"), 1);
+var import_node_child_process16 = require("child_process");
+var import_node_os22 = __toESM(require("os"), 1);
 var DEFAULT_TIMEOUT_MS4 = 3e4;
 var MAX_TIMEOUT_MS = 3e5;
 var MAX_OUTPUT_BYTES = 1048576;
 function runCommand(command, opts = {}) {
   const timeoutMs = Math.min(opts.timeoutMs ?? DEFAULT_TIMEOUT_MS4, MAX_TIMEOUT_MS);
   return new Promise((resolve6) => {
-    const child = (0, import_node_child_process15.spawn)("bash", ["-c", command], { cwd: import_node_os21.default.homedir() });
+    const child = (0, import_node_child_process16.spawn)("bash", ["-c", command], { cwd: import_node_os22.default.homedir() });
     const out = [];
     const err = [];
     let outBytes = 0;
@@ -62184,8 +62602,129 @@ function buildMethodHandlers(deps) {
   return handlers;
 }
 
+// src/handlers/onboarding.ts
+init_protocol();
+
+// src/tools/version-probe.ts
+var import_node_child_process17 = require("child_process");
+init_claude();
+function parseVersionOutput(out) {
+  return /(\d+\.\d+\.\d+)/.exec(out)?.[1];
+}
+function execVersion(bin) {
+  return new Promise((resolve6, reject) => {
+    (0, import_node_child_process17.execFile)(bin, ["--version"], { timeout: 5e3 }, (err, stdout) => {
+      if (err) reject(err);
+      else resolve6(String(stdout));
+    });
+  });
+}
+var cache = null;
+async function probeToolVersions(opts = {}) {
+  if (cache) return cache;
+  const probes = opts.probes ?? { claude: () => probeClaude(), codex: () => probeCodex() };
+  const runVersion = opts.runVersion ?? execVersion;
+  const out = [];
+  for (const id of ["claude", "codex"]) {
+    const p2 = await probes[id]();
+    if (!p2.available) {
+      out.push({ id, available: false });
+      continue;
+    }
+    let version2;
+    try {
+      version2 = parseVersionOutput(await runVersion(p2.path ?? id));
+    } catch {
+      version2 = void 0;
+    }
+    out.push({ id, available: true, ...version2 ? { version: version2 } : {}, ...p2.path ? { path: p2.path } : {} });
+  }
+  if (out.some((t) => t.available)) cache = out;
+  return out;
+}
+
+// src/feishu-auth/ios-interest-client.ts
+var IosInterestClientError = class extends Error {
+  constructor(code, message, cause) {
+    super(message);
+    this.code = code;
+    this.cause = cause;
+    this.name = "IosInterestClientError";
+  }
+  code;
+  cause;
+};
+var DEFAULT_TIMEOUT_MS5 = 8e3;
+async function submitIosInterest(opts) {
+  const doFetch = opts.fetchImpl ?? fetch;
+  const ac = new AbortController();
+  const timer = setTimeout(() => ac.abort(), opts.timeoutMs ?? DEFAULT_TIMEOUT_MS5);
+  let res;
+  try {
+    res = await doFetch(`${opts.apiUrl}/api/ios-interest`, {
+      method: "POST",
+      signal: ac.signal,
+      headers: {
+        authorization: `Bearer ${opts.apiKey}`,
+        "x-did": encodeURIComponent(opts.deviceId),
+        "x-name": encodeURIComponent(opts.displayName),
+        "x-scene": "daemon",
+        "content-type": "application/json"
+      },
+      body: JSON.stringify({ unionId: opts.unionId, displayName: opts.displayName })
+    });
+  } catch (err) {
+    clearTimeout(timer);
+    throw new IosInterestClientError("NETWORK", `network error: ${err.message}`, err);
+  } finally {
+    clearTimeout(timer);
+  }
+  if (!res.ok) {
+    let detail = "";
+    try {
+      detail = JSON.stringify(await res.json());
+    } catch {
+    }
+    throw new IosInterestClientError("API_ERROR", `HTTP ${res.status}: ${detail}`);
+  }
+}
+
+// src/handlers/onboarding.ts
+function buildOnboardingHandlers(deps) {
+  const complete = async (frame) => {
+    parseArgs2(OnboardingCompleteArgs, frame, "onboarding:complete args");
+    const existing = loadOwnerProfile(deps.dataDir).onboardingCompletedAt;
+    const ts = typeof existing === "number" ? existing : Date.now();
+    if (typeof existing !== "number") {
+      patchOwnerProfile(deps.dataDir, { onboardingCompletedAt: ts });
+    }
+    return { response: { onboardingCompletedAt: ts } };
+  };
+  const toolsProbe = async (frame) => {
+    parseArgs2(ToolsProbeArgs, frame, "tools:probe args");
+    return { response: { tools: await probeToolVersions() } };
+  };
+  const iosInterest = async (frame) => {
+    parseArgs2(OnboardingIosInterestArgs, frame, "onboarding:iosInterest args");
+    const identity = deps.getOwnerIdentity();
+    if (!identity) {
+      throw new ClawdError(ERROR_CODES.FEISHU_LOGIN_REQUIRED, "onboarding:iosInterest \u9700\u8981\u98DE\u4E66\u767B\u5F55");
+    }
+    await submitIosInterest({
+      apiUrl: deps.apiUrl,
+      apiKey: deps.apiKey,
+      deviceId: deps.deviceId,
+      unionId: identity.unionId,
+      displayName: identity.displayName,
+      ...deps.fetchImpl ? { fetchImpl: deps.fetchImpl } : {}
+    });
+    return { response: { registered: true } };
+  };
+  return { "onboarding:complete": complete, "tools:probe": toolsProbe, "onboarding:iosInterest": iosInterest };
+}
+
 // src/app-builder/dev-server-supervisor.ts
-var import_node_child_process16 = require("child_process");
+var import_node_child_process18 = require("child_process");
 var import_node_events2 = require("events");
 var DEFAULT_READY_PATTERN = /Local:\s+https?:\/\/|Nest application successfully started|server listening on/i;
 var DevServerSupervisor = class extends import_node_events2.EventEmitter {
@@ -62222,7 +62761,7 @@ var DevServerSupervisor = class extends import_node_events2.EventEmitter {
       tunnelHost: args.tunnelHost,
       devCommand: cmd
     });
-    const child = (0, import_node_child_process16.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process18.spawn)("sh", ["-c", cmd], {
       cwd: args.cwd,
       env,
       stdio: "pipe",
@@ -62474,9 +63013,9 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 }
 
 // src/extension/runtime.ts
-var import_node_child_process17 = require("child_process");
-var import_node_path62 = __toESM(require("path"), 1);
-var import_promises12 = require("timers/promises");
+var import_node_child_process19 = require("child_process");
+var import_node_path64 = __toESM(require("path"), 1);
+var import_promises13 = require("timers/promises");
 
 // src/extension/port-allocator.ts
 var import_node_net2 = __toESM(require("net"), 1);
@@ -62576,13 +63115,13 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path62.default.join(this.root, extId);
+    const dir = import_node_path64.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
       CLAWOS_EXT_ID: extId
     };
-    const child = (0, import_node_child_process17.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process19.spawn)("sh", ["-c", cmd], {
       cwd: dir,
       env,
       stdio: ["ignore", "pipe", "pipe"],
@@ -62652,7 +63191,7 @@ ${handle.stderrTail}`
         if (res.ok) return;
       } catch {
       }
-      await (0, import_promises12.setTimeout)(this.healthzIntervalMs);
+      await (0, import_promises13.setTimeout)(this.healthzIntervalMs);
     }
     throw new RuntimeError(
       "HEALTHZ_FAILED",
@@ -62677,7 +63216,7 @@ ${handle.stderrTail}`
     };
     killGroup("SIGTERM");
     const exited = new Promise((resolve6) => child.once("exit", () => resolve6()));
-    const timed = (0, import_promises12.setTimeout)(5e3).then(() => "timeout");
+    const timed = (0, import_promises13.setTimeout)(5e3).then(() => "timeout");
     const winner = await Promise.race([exited.then(() => "exited"), timed]);
     if (winner === "timeout" && child.exitCode === null) {
       killGroup("SIGKILL");
@@ -62687,8 +63226,8 @@ ${handle.stderrTail}`
 };
 
 // src/extension/published-channels.ts
-var import_promises13 = __toESM(require("fs/promises"), 1);
-var import_node_path63 = __toESM(require("path"), 1);
+var import_promises14 = __toESM(require("fs/promises"), 1);
+var import_node_path65 = __toESM(require("path"), 1);
 init_zod();
 var PublishedChannelsError = class extends Error {
   constructor(code, message) {
@@ -62718,7 +63257,7 @@ var PublishedChannelStore = class {
     this.channels.clear();
     let raw;
     try {
-      raw = await import_promises13.default.readFile(this.filePath, "utf8");
+      raw = await import_promises14.default.readFile(this.filePath, "utf8");
     } catch (e) {
       if (e.code === "ENOENT") {
         this.loaded = true;
@@ -62787,15 +63326,15 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises13.default.mkdir(import_node_path63.default.dirname(this.filePath), { recursive: true });
-    await import_promises13.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
-    await import_promises13.default.rename(tmp, this.filePath);
+    await import_promises14.default.mkdir(import_node_path65.default.dirname(this.filePath), { recursive: true });
+    await import_promises14.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
+    await import_promises14.default.rename(tmp, this.filePath);
   }
 };
 
 // src/extension/bundle-cache.ts
-var import_promises14 = __toESM(require("fs/promises"), 1);
-var import_node_path64 = __toESM(require("path"), 1);
+var import_promises15 = __toESM(require("fs/promises"), 1);
+var import_node_path66 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -62803,17 +63342,17 @@ var BundleCache = class {
   rootDir;
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
-    await import_promises14.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path64.default.join(this.rootDir, `${snapshotHash}.zip`);
+    await import_promises15.default.mkdir(this.rootDir, { recursive: true });
+    const file = import_node_path66.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
-    await import_promises14.default.writeFile(tmp, buffer, { mode: 384 });
-    await import_promises14.default.rename(tmp, file);
+    await import_promises15.default.writeFile(tmp, buffer, { mode: 384 });
+    await import_promises15.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path64.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path66.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
-      return await import_promises14.default.readFile(file);
+      return await import_promises15.default.readFile(file);
     } catch (e) {
       if (e.code === "ENOENT") return null;
       throw e;
@@ -62821,13 +63360,13 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path64.default.join(this.rootDir, `${snapshotHash}.zip`);
-    await import_promises14.default.rm(file, { force: true });
+    const file = import_node_path66.default.join(this.rootDir, `${snapshotHash}.zip`);
+    await import_promises15.default.rm(file, { force: true });
   }
 };
 
 // src/index.ts
-var import_meta6 = {};
+var import_meta7 = {};
 async function startDaemon(config) {
   const authFile = loadOrCreateAuthFile({ dataDir: config.dataDir });
   const logShippingCfg = config.logShipping ?? { endpoint: null, sampling: {}, mode: "off" };
@@ -62842,26 +63381,26 @@ async function startDaemon(config) {
     },
     source: "daemon",
     sampling: logShippingCfg.sampling,
-    homeDir: import_node_os22.default.homedir()
+    homeDir: import_node_os23.default.homedir()
   });
-  const logDir = import_node_path65.default.join(config.dataDir, "log");
-  import_node_fs49.default.mkdirSync(logDir, { recursive: true });
+  const logDir = import_node_path67.default.join(config.dataDir, "log");
+  import_node_fs51.default.mkdirSync(logDir, { recursive: true });
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path65.default.join(logDir, "clawd.log"),
+    file: import_node_path67.default.join(logDir, "clawd.log"),
     logClient
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const screenIdleProbeLogger = createFileOnlyLogger({
-    file: import_node_path65.default.join(logDir, "screen-idle-probe.log"),
+    file: import_node_path67.default.join(logDir, "screen-idle-probe.log"),
     level: "debug"
   });
   logger.info("screen-idle probe logger enabled", {
-    file: import_node_path65.default.join(logDir, "screen-idle-probe.log")
+    file: import_node_path67.default.join(logDir, "screen-idle-probe.log")
   });
   const CAP_TARGETS = [
-    import_node_path65.default.join(logDir, "clawd.log"),
-    import_node_path65.default.join(logDir, "screen-idle-probe.log")
+    import_node_path67.default.join(logDir, "clawd.log"),
+    import_node_path67.default.join(logDir, "screen-idle-probe.log")
   ];
   const LOG_CAP_MAX_BYTES = 10 * 1024 * 1024;
   const LOG_CAP_KEEP_BYTES = 5 * 1024 * 1024;
@@ -62957,8 +63496,8 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path65.default.join(config.dataDir, "personas"));
-  const usersRoot = import_node_path65.default.join(config.dataDir, "users");
+  const personaStore = new PersonaStore(import_node_path67.default.join(config.dataDir, "personas"));
+  const usersRoot = import_node_path67.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -62980,7 +63519,7 @@ async function startDaemon(config) {
   retirePersonaBuilder({ store: personaStore, logger });
   const groupFileStore = new GroupFileStore({ dataDir: config.dataDir, logger });
   const dispatchStore = createDispatchStore({
-    filePath: import_node_path65.default.join(config.dataDir, "dispatch.json"),
+    filePath: import_node_path67.default.join(config.dataDir, "dispatch.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("dispatch store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
@@ -62995,18 +63534,18 @@ async function startDaemon(config) {
     now: () => Date.now(),
     onCompleted: (sid) => deliverPendingRef?.(sid)
   });
-  const here = typeof __dirname === "string" ? __dirname : import_node_path65.default.dirname((0, import_node_url4.fileURLToPath)(import_meta6.url));
+  const here = typeof __dirname === "string" ? __dirname : import_node_path67.default.dirname((0, import_node_url4.fileURLToPath)(import_meta7.url));
   const mcpConfigs = [];
   const mcpDaemonUrl = `http://127.0.0.1:${config.port}`;
   const dispatchServerCandidates = [
-    import_node_path65.default.join(here, "dispatch", "mcp-server.cjs"),
+    import_node_path67.default.join(here, "dispatch", "mcp-server.cjs"),
     // 生产 dist/index → dist/dispatch/mcp-server.cjs
-    import_node_path65.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
+    import_node_path67.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
-  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs49.default.existsSync(p2));
+  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
   if (dispatchServerScriptPath) {
-    const dispatchLogPath = import_node_path65.default.join(logDir, "dispatch-mcp-server.log");
+    const dispatchLogPath = import_node_path67.default.join(logDir, "dispatch-mcp-server.log");
     const dispatchCfgPath = writeDispatchMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: dispatchServerScriptPath,
@@ -63026,12 +63565,12 @@ async function startDaemon(config) {
     });
   }
   const ticketServerCandidates = [
-    import_node_path65.default.join(here, "ticket", "mcp-server.cjs"),
-    import_node_path65.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
+    import_node_path67.default.join(here, "ticket", "mcp-server.cjs"),
+    import_node_path67.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
-  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs49.default.existsSync(p2));
+  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
   if (ticketServerScriptPath) {
-    const ticketLogPath = import_node_path65.default.join(logDir, "ticket-mcp-server.log");
+    const ticketLogPath = import_node_path67.default.join(logDir, "ticket-mcp-server.log");
     const ticketCfgPath = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
@@ -63053,12 +63592,12 @@ async function startDaemon(config) {
     });
   }
   const shiftServerCandidates = [
-    import_node_path65.default.join(here, "shift", "mcp-server.cjs"),
-    import_node_path65.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
+    import_node_path67.default.join(here, "shift", "mcp-server.cjs"),
+    import_node_path67.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
-  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs49.default.existsSync(p2));
+  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
   if (shiftServerScriptPath) {
-    const shiftLogPath = import_node_path65.default.join(logDir, "shift-mcp-server.log");
+    const shiftLogPath = import_node_path67.default.join(logDir, "shift-mcp-server.log");
     const shiftCfgPath = await writeShiftMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: shiftServerScriptPath,
@@ -63079,12 +63618,12 @@ async function startDaemon(config) {
     );
   }
   const inboxServerCandidates = [
-    import_node_path65.default.join(here, "inbox", "mcp-server.cjs"),
-    import_node_path65.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
+    import_node_path67.default.join(here, "inbox", "mcp-server.cjs"),
+    import_node_path67.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
   ];
-  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs49.default.existsSync(p2));
+  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
   if (inboxServerScriptPath) {
-    const inboxLogPath = import_node_path65.default.join(logDir, "inbox-mcp-server.log");
+    const inboxLogPath = import_node_path67.default.join(logDir, "inbox-mcp-server.log");
     const inboxCfgPath = await writeInboxMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: inboxServerScriptPath,
@@ -63105,10 +63644,10 @@ async function startDaemon(config) {
     );
   }
   const peerOpsServerCandidates = [
-    import_node_path65.default.join(here, "peer-ops", "mcp-server.cjs"),
-    import_node_path65.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
+    import_node_path67.default.join(here, "peer-ops", "mcp-server.cjs"),
+    import_node_path67.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
   ];
-  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs49.default.existsSync(p2));
+  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
   if (peerOpsServerScriptPath) {
     const peerOpsCfgPath = writePeerOpsMcpConfig({
       dataDir: config.dataDir,
@@ -63128,12 +63667,12 @@ async function startDaemon(config) {
     );
   }
   const rpcToolServerCandidates = [
-    import_node_path65.default.join(here, "rpc-tool", "mcp-server.cjs"),
-    import_node_path65.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
+    import_node_path67.default.join(here, "rpc-tool", "mcp-server.cjs"),
+    import_node_path67.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
   ];
-  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p2) => import_node_fs49.default.existsSync(p2));
+  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
   if (rpcToolServerScriptPath) {
-    const rpcToolLogPath = import_node_path65.default.join(logDir, "rpc-tool-mcp-server.log");
+    const rpcToolLogPath = import_node_path67.default.join(logDir, "rpc-tool-mcp-server.log");
     const rpcToolCfgPath = writeRpcToolMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: rpcToolServerScriptPath,
@@ -63154,7 +63693,7 @@ async function startDaemon(config) {
     );
   }
   const shiftStore = createShiftStore({
-    filePath: import_node_path65.default.join(config.dataDir, "shift.json"),
+    filePath: import_node_path67.default.join(config.dataDir, "shift.json"),
     ownerIdProvider: () => ownerPrincipalId,
     now: () => Date.now()
   });
@@ -63176,7 +63715,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path65.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path67.default.join(config.dataDir, "personas"),
     // dispatch / shift 自动化 spawn 按 persona 绑定 tool 起 B session（codex persona 用 codex）。
     // personaRegistry 声明在 manager 之后（同作用域 const，调用时机在启动完成后，无 TDZ 风险）。
     getPersonaTool: (personaId2) => personaRegistry.get(personaId2)?.tool,
@@ -63227,10 +63766,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path65.default.isAbsolute(input.relPath) ? input.relPath : import_node_path65.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path67.default.isAbsolute(input.relPath) ? input.relPath : import_node_path67.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs49.default.statSync(absPath).size;
+          size = import_node_fs51.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -63436,6 +63975,8 @@ async function startDaemon(config) {
       // dispatch / shift-internal 两组，只看 buildMethodHandlers 内部表会误报死方法）
       feishuActive: () => feishuActive,
       getAllHandlers: () => handlers,
+      // onboarding 判定（info 帧字段）+ importExternal 台账落点
+      dataDir: config.dataDir,
       manager,
       workspace,
       skills,
@@ -63477,11 +64018,11 @@ async function startDaemon(config) {
         // 'persona/<pid>/owner'，default 走 'default'。
         getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
         // guest path guard：candidate 必须在 personaRoot 子树或调用者自己的 user-dir 下
-        personaRoot: import_node_path65.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path67.default.join(config.dataDir, "personas"),
         usersRoot
       },
       // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-      personaRoot: import_node_path65.default.join(config.dataDir, "personas"),
+      personaRoot: import_node_path67.default.join(config.dataDir, "personas"),
       // v2 多人 persona 隔离：handler 派生 guest user-dir 放行
       usersRoot,
       // v2 Phase 6: whoami handler 装在 owner principal.displayName + persona 解析
@@ -63607,11 +64148,11 @@ async function startDaemon(config) {
       // 发布上线脚手架化 (spec 2026-06-03 §5.2):
       // appBuilderPersonaRoot 用于拼 publish.sh 绝对路径（persona-app-builder 安装在
       // dataDir/personas/persona-app-builder 之下，extension-kit/scripts/publish.sh 是相对路径）。
-      appBuilderPersonaRoot: import_node_path65.default.join(config.dataDir, "personas", "persona-app-builder"),
+      appBuilderPersonaRoot: import_node_path67.default.join(config.dataDir, "personas", "persona-app-builder"),
       // 共享 deploy-kit 根：scaffold/publish 脚本骨架 + 阿里云凭证单一真源。
-      deployKitRoot: import_node_path65.default.join(config.dataDir, "deploy-kit"),
+      deployKitRoot: import_node_path67.default.join(config.dataDir, "deploy-kit"),
       // scaffold/publish 按当前 session 的 persona 解析其安装根，让每个 persona 用自己的模板/注入配置。
-      resolvePersonaRoot: (personaId2) => import_node_path65.default.join(config.dataDir, "personas", personaId2),
+      resolvePersonaRoot: (personaId2) => import_node_path67.default.join(config.dataDir, "personas", personaId2),
       // 发布上线脚手架化 (spec 2026-06-03 §5.2.2):
       // 复用 SessionManagerDeps.broadcastFrame 同款 dispatch 逻辑 —— runner 调 manager.send
       // 取回 broadcast 帧后逐帧 push 到 transport，跟 manager 自身的 deps 一致。
@@ -63654,7 +64195,7 @@ async function startDaemon(config) {
         sourceSessionId: args.sourceSessionId
       });
       const sourceFile = manager.findOwnedSession(args.sourceSessionId);
-      const sourceJsonlPath = resolveSourceJsonlPath(sourceFile, import_node_os22.default.homedir());
+      const sourceJsonlPath = resolveSourceJsonlPath(sourceFile, import_node_os23.default.homedir());
       logger.info("dispatch.spawnB.source-resolved", {
         dispatchId: args.dispatchId,
         sourceJsonlPath,
@@ -63716,7 +64257,7 @@ async function startDaemon(config) {
   });
   shiftScheduler.start();
   logger.info("shift scheduler started", { shiftCount: shiftStore.list().length });
-  const larkBotStore = createLarkBotBindingStore(import_node_path65.default.join(config.dataDir, "personas"));
+  const larkBotStore = createLarkBotBindingStore(import_node_path67.default.join(config.dataDir, "personas"));
   const larkBotCloud = createLarkBotCloudClient({
     api: config.clawosApi ?? DEFAULT_CLAWOS_API,
     apiKey: resolveClawdTicketsApiKey(),
@@ -63730,7 +64271,7 @@ async function startDaemon(config) {
     store: larkBotStore,
     fetchResource: (appId, messageId, fileKey, maxBytes, type) => larkBotCloud.fetchResource(appId, messageId, fileKey, maxBytes, type),
     // 图片落 guest userWorkDir 下（capId = lark-<chat_id>）：CC 经 --add-dir + allowRead carve 可 Read
-    mediaRootFor: (chatId) => import_node_path65.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
+    mediaRootFor: (chatId) => import_node_path67.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
     isShuttingDown: () => larkDraining,
     logger: {
       warn: (msg) => logger.warn(msg),
@@ -63756,6 +64297,24 @@ async function startDaemon(config) {
     logger: { warn: (msg) => logger.warn(msg) }
   };
   Object.assign(handlers, buildLarkBotHandlers(larkBotDeps));
+  Object.assign(
+    handlers,
+    buildOnboardingHandlers({
+      dataDir: config.dataDir,
+      // 现读（登录/登出热切换）；unionId 缺失时回落 ownerId（老登录记录无 unionId）
+      getOwnerIdentity: () => {
+        const rec3 = ownerIdentityStore.read();
+        if (!rec3) return null;
+        return {
+          unionId: rec3.identity.unionId ?? rec3.identity.ownerId,
+          displayName: rec3.identity.displayName
+        };
+      },
+      apiUrl: config.clawosApi ?? DEFAULT_CLAWOS_API,
+      apiKey: resolveClawdTicketsApiKey(),
+      deviceId: authFile.deviceId
+    })
+  );
   const authResolver = new AuthContextResolver({
     ownerToken: resolvedAuthToken
   });
@@ -63874,6 +64433,8 @@ async function startDaemon(config) {
       {
         manager,
         getAdapter,
+        // onboarding 判定：ready 帧携带 profile.json 的 onboardingCompletedAt
+        dataDir: config.dataDir,
         getTunnelUrl: () => currentTunnelUrl,
         getLogShipping: () => config.logShipping ? {
           endpoint: config.logShipping.endpoint,
@@ -64014,11 +64575,11 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path65.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path65.default.join(logDir, "frpc.log")}`
+        `Frpc config: ${import_node_path67.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path67.default.join(logDir, "frpc.log")}`
       ];
-      const width = Math.max(...lines.map((l) => l.length));
-      const bar = "\u2550".repeat(width + 4);
+      const width2 = Math.max(...lines.map((l) => l.length));
+      const bar = "\u2550".repeat(width2 + 4);
       process.stdout.write(`
 ${bar}
 `);
@@ -64028,8 +64589,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path65.default.join(config.dataDir, "connect.txt");
-        import_node_fs49.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path67.default.join(config.dataDir, "connect.txt");
+        import_node_fs51.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -64104,9 +64665,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path65.default.join(dataDir, "persons");
+  const dir = import_node_path67.default.join(dataDir, "persons");
   try {
-    import_node_fs49.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs51.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }