@clawos-dev/clawd 0.2.351 → 0.2.353

package/dist/cli.cjs

@@ -450,8 +450,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path81, errorMaps, issueData } = params;
-      const fullPath = [...path81, ...issueData.path || []];
+      const { data, path: path82, errorMaps, issueData } = params;
+      const fullPath = [...path82, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -762,11 +762,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path81, key) {
+      constructor(parent, value, path82, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path81;
+        this._path = path82;
         this._key = key;
       }
       get path() {
@@ -6139,7 +6139,13 @@ var init_feishu_auth = __esm({
        * 设备属性，与登录态无关、登录登出不变。UI"我的设备标识"用它拼
        * clawos://device/<deviceId>（替代旧的 unionId——不再向外暴露人的身份标识）。
        */
-      deviceId: external_exports.string().min(1)
+      deviceId: external_exports.string().min(1),
+      /**
+       * TTC JWT 过期时间（unix ms）。null = 登录回调未携带 expires_at；字段缺省 = 老 daemon。
+       * 仅时间戳——token 本体永不出 ws（spec §9 不变）。UI 据此派生 过期/临期 提示
+       * （见 spec 2026-08-17-ttc-jwt-expiry-ux-design §2）。
+       */
+      ttcTokenExpiresAt: external_exports.number().nullable().optional()
     });
     AuthLogoutResponseSchema = external_exports.object({
       type: external_exports.literal("auth:logout:ok")
@@ -7012,6 +7018,10 @@ var init_schemas = __esm({
       effort: external_exports.string().optional(),
       // 归一化运行时观测字段（daemon 独立计算，session:update 不接受；meta_update 事件投递）
       ...sessionMetaShape,
+      // daemon 生成智能标题的防重标记：reducer 在 meta_update.aiLabel 真变化时自动盖章
+      // （observer ai-title 回灌与 daemon 自产两个生产者同路）。为空 = 还没生成过 →
+      // manager.send 首条消息触发生成。session:update（外部 RPC）zod strip 不接受此字段。
+      aiLabelGeneratedAt: external_exports.string().optional(),
       permissionRules: external_exports.array(AllowRuleSchema).optional(),
       // Sidebar 置顶时间戳；null/undefined 表示未置顶
       pinnedAt: external_exports.number().int().nonnegative().nullable().optional(),
@@ -8954,8 +8964,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path81 = req.path;
-        _req.url = typeof path81 === "string" ? path81 : req.url ? req.url.path || req.url : void 0;
+        const path82 = req.path;
+        _req.url = typeof path82 === "string" ? path82 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -9120,14 +9130,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path81) {
+    function parsePath(path82) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path81.length; i++) {
-        const char = path81[i];
+      for (let i = 0; i < path82.length; i++) {
+        const char = path82[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -9258,10 +9268,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path81 of paths) {
-        const parts = parsePath(path81);
+      for (const path82 of paths) {
+        const parts = parsePath(path82);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path81, remove);
+          redactWildcardPath(obj, parts, censor, path82, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -9346,8 +9356,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path81) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path81];
+            const wrappedCensor = typeof censor === "function" ? (value, path82) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path82];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -9382,8 +9392,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path81 of pathsToClone) {
-        const parts = parsePath(path81);
+      for (const path82 of pathsToClone) {
+        const parts = parsePath(path82);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -9435,24 +9445,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path81) {
-      if (typeof path81 !== "string") {
+    function validatePath(path82) {
+      if (typeof path82 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path81 === "") {
+      if (path82 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path81.includes("..")) {
-        throw new Error(`Invalid redaction path (${path81})`);
+      if (path82.includes("..")) {
+        throw new Error(`Invalid redaction path (${path82})`);
       }
-      if (path81.includes(",")) {
-        throw new Error(`Invalid redaction path (${path81})`);
+      if (path82.includes(",")) {
+        throw new Error(`Invalid redaction path (${path82})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path81.length; i++) {
-        const char = path81[i];
+      for (let i = 0; i < path82.length; i++) {
+        const char = path82[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -9466,20 +9476,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path81})`);
+            throw new Error(`Invalid redaction path (${path82})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path81})`);
+        throw new Error(`Invalid redaction path (${path82})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path81 of paths) {
-        validatePath(path81);
+      for (const path82 of paths) {
+        validatePath(path82);
       }
     }
     function slowRedact(options = {}) {
@@ -9647,8 +9657,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path81) => {
-            return censor(value, [k2, ...path81]);
+          const wrappedCensor = typeof censor === "function" ? (value, path82) => {
+            return censor(value, [k2, ...path82]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -9866,10 +9876,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs72 = require("fs");
+    var fs73 = require("fs");
     var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
-    var path81 = require("path");
+    var path82 = require("path");
     var sleep2 = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -9923,20 +9933,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs72.mkdirSync(path81.dirname(file), { recursive: true });
-          const fd = fs72.openSync(file, flags, mode);
+          if (sonic.mkdir) fs73.mkdirSync(path82.dirname(file), { recursive: true });
+          const fd = fs73.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs72.mkdir(path81.dirname(file), { recursive: true }, (err) => {
+        fs73.mkdir(path82.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs72.open(file, flags, mode, fileOpened);
+          fs73.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs72.open(file, flags, mode, fileOpened);
+        fs73.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -9977,8 +9987,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs72.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs72.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs73.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs73.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -9987,15 +9997,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs72.writeSync(this.fd, this._writingBuf);
+            return fs73.writeSync(this.fd, this._writingBuf);
           }
-          return fs72.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs73.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs72.write(this.fd, this._writingBuf, this.release);
+            return fs73.write(this.fd, this._writingBuf, this.release);
           }
-          return fs72.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs73.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -10052,7 +10062,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs72.fsyncSync(this.fd);
+          fs73.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -10166,7 +10176,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs72.fsync(this.fd, (err) => {
+            fs73.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -10268,7 +10278,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs72.close(fd, (err) => {
+          fs73.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -10317,7 +10327,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs72.writeSync(this.fd, buf) : fs72.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs73.writeSync(this.fd, buf) : fs73.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -10333,7 +10343,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs72.fsyncSync(this.fd);
+        fs73.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -10354,7 +10364,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs72.writeSync(this.fd, buf);
+          const n = fs73.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -10382,13 +10392,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs72.writeSync(this.fd, this._writingBuf) : fs72.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs73.writeSync(this.fd, this._writingBuf) : fs73.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs72.write(this.fd, this._writingBuf, release);
+        fs73.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -10397,7 +10407,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs72.writeSync(this.fd, this._writingBuf);
+          const written = fs73.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -10406,7 +10416,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs72.write(this.fd, this._writingBuf, release);
+        fs73.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -10422,12 +10432,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs72.fsync(sonic.fd, closeWrapped);
+        fs73.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs72.close(sonic.fd, done);
+          fs73.close(sonic.fd, done);
         } else {
           done();
         }
@@ -12791,7 +12801,7 @@ var require_multistream = __commonJS({
 var require_pino = __commonJS({
   "../node_modules/.pnpm/pino@9.14.0/node_modules/pino/pino.js"(exports2, module2) {
     "use strict";
-    var os25 = require("os");
+    var os26 = require("os");
     var stdSerializers = require_pino_std_serializers();
     var caller = require_caller();
     var redaction = require_redaction();
@@ -12838,7 +12848,7 @@ var require_pino = __commonJS({
     } = symbols;
     var { epochTime, nullTime } = time;
     var { pid } = process;
-    var hostname = os25.hostname();
+    var hostname = os26.hostname();
     var defaultErrorSerializer = stdSerializers.err;
     var defaultOptions2 = {
       level: "info",
@@ -13562,11 +13572,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path81, added, removed, oldPosInc, options) {
-        var last = path81.lastComponent;
+      addToPath: function addToPath(path82, added, removed, oldPosInc, options) {
+        var last = path82.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path81.oldPos + oldPosInc,
+            oldPos: path82.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -13576,7 +13586,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path81.oldPos + oldPosInc,
+            oldPos: path82.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -14108,10 +14118,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec4 = m2;
-      const path81 = typeof rec4.path === "string" ? rec4.path : null;
+      const path82 = typeof rec4.path === "string" ? rec4.path : null;
       const content = typeof rec4.content === "string" ? rec4.content : null;
-      if (!path81 || content == null) return null;
-      const entry = { path: path81, content };
+      if (!path82 || content == null) return null;
+      const entry = { path: path82, content };
       if (typeof rec4.mtimeMs === "number") entry.mtimeMs = rec4.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -14945,10 +14955,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec4 = m2;
-      const path81 = typeof rec4.path === "string" ? rec4.path : null;
+      const path82 = typeof rec4.path === "string" ? rec4.path : null;
       const content = typeof rec4.content === "string" ? rec4.content : null;
-      if (!path81 || content == null) return null;
-      const out = { path: path81, content };
+      if (!path82 || content == null) return null;
+      const out = { path: path82, content };
       if (typeof rec4.mtimeMs === "number") out.mtimeMs = rec4.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -35922,8 +35932,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path81) {
-      var parts = path81.split("/");
+    exports2.resolve = function(path82) {
+      var parts = path82.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -41776,18 +41786,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path81) {
-      if (path81.slice(-1) === "/") {
-        path81 = path81.substring(0, path81.length - 1);
+    var parentFolder = function(path82) {
+      if (path82.slice(-1) === "/") {
+        path82 = path82.substring(0, path82.length - 1);
       }
-      var lastSlash = path81.lastIndexOf("/");
-      return lastSlash > 0 ? path81.substring(0, lastSlash) : "";
+      var lastSlash = path82.lastIndexOf("/");
+      return lastSlash > 0 ? path82.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path81) {
-      if (path81.slice(-1) !== "/") {
-        path81 += "/";
+    var forceTrailingSlash = function(path82) {
+      if (path82.slice(-1) !== "/") {
+        path82 += "/";
       }
-      return path81;
+      return path82;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -42789,7 +42799,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path68.default.dirname(opts.recordPath);
+  const dir = import_node_path69.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -42803,8 +42813,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs52.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs52.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs53.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs53.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -42829,12 +42839,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs52, import_node_path68;
+var import_node_fs53, import_node_path69;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs52 = __toESM(require("fs"), 1);
-    import_node_path68 = __toESM(require("path"), 1);
+    import_node_fs53 = __toESM(require("fs"), 1);
+    import_node_path69 = __toESM(require("path"), 1);
   }
 });
 
@@ -42877,7 +42887,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs53.mkdtempSync)(import_node_path69.default.join(import_node_os24.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs54.mkdtempSync)(import_node_path70.default.join(import_node_os25.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -43038,19 +43048,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs53.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs54.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs53, import_node_os24, import_node_path69;
+var import_node_fs54, import_node_os25, import_node_path70;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs53 = require("fs");
-    import_node_os24 = __toESM(require("os"), 1);
-    import_node_path69 = __toESM(require("path"), 1);
+    import_node_fs54 = require("fs");
+    import_node_os25 = __toESM(require("os"), 1);
+    import_node_path70 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -43325,9 +43335,9 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path67 = __toESM(require("path"), 1);
-var import_node_fs51 = __toESM(require("fs"), 1);
-var import_node_os23 = __toESM(require("os"), 1);
+var import_node_path68 = __toESM(require("path"), 1);
+var import_node_fs52 = __toESM(require("fs"), 1);
+var import_node_os24 = __toESM(require("os"), 1);
 
 // ../node_modules/.pnpm/uuid@10.0.0/node_modules/uuid/dist/esm-node/stringify.js
 var byteToHex = [];
@@ -44613,9 +44623,13 @@ function applyMetaUpdate(state, patch, deps) {
     const w2 = deps.resolveContextWindow?.(next.file.tool, patch.resolvedModel);
     if (w2 !== void 0) merged.contextWindowSize = w2;
   }
-  if (shallowEqMeta(next.file, merged)) {
+  const aiLabelArrived = patch.aiLabel !== void 0 && (patch.aiLabel !== next.file.aiLabel || !next.file.aiLabelGeneratedAt);
+  if (shallowEqMeta(next.file, merged) && !aiLabelArrived) {
     return { state: next, effects: [] };
   }
+  if (aiLabelArrived) {
+    merged.aiLabelGeneratedAt = nowIso(deps);
+  }
   next.file = merged;
   return {
     state: next,
@@ -45944,6 +45958,8 @@ var SessionManager = class {
   deps;
   // sessionId → SessionRunner；在 send / ensureSession 时按需创建
   runners = /* @__PURE__ */ new Map();
+  // 标题生成 in-flight 防重（进程内）；跨重启防重靠 SessionFile.aiLabelGeneratedAt
+  titleGenPending = /* @__PURE__ */ new Set();
   // 当同步命令执行期间，runner 的 emit-frame 临时 push 到这里；
   // null 表示当前是异步路径（stdout 'data' / proc 'exit' 等），走 deps.broadcastFrame
   currentCollector = null;
@@ -46769,8 +46785,38 @@ var SessionManager = class {
         command: { kind: "send", text: args.text, senderPrincipal }
       });
     });
+    this.maybeGenerateTitle(existing, args.text);
     return { response: { ok: true }, broadcast };
   }
+  /**
+   * 首条 send 触发的智能标题自产（spec：PR #1196 追加拍板 2026-08-17）。
+   * 背景见 tools/title-generator.ts 头注释——CC/codex 两条上游标题数据源都等不来
+   * 「首轮即有」，daemon 用会话同家族小模型自己生成，与主 turn 并行，几秒后经
+   * manager.update 内部通道写 aiLabel（marker patch：不刷 updatedAt、广播 session:info）。
+   *
+   * 跳过条件：
+   *   - aiLabelGeneratedAt 已盖章（成功过；失败不盖章 → 下次 send 自然重试）
+   *   - label 非空（用户手输/dispatch 显式命名，显示优先级下 aiLabel 永远不可见，纯浪费）
+   *   - larkChatId 非空（lark 群会话显示群名是产品语义，AI 标题反而会遮住群名）
+   *   - 进程内已有同 session 的 in-flight 调用
+   */
+  maybeGenerateTitle(file, text) {
+    const generate = this.deps.generateTitle;
+    if (!generate) return;
+    const sessionId = file.sessionId;
+    if (file.aiLabelGeneratedAt || file.label || file.larkChatId) return;
+    if (this.titleGenPending.has(sessionId)) return;
+    this.titleGenPending.add(sessionId);
+    void generate(file.tool ?? "claude", text).then((title) => {
+      if (!title) return;
+      this.applyResolvedMeta(sessionId, { aiLabel: title });
+      this.deps.logger?.info("title-gen ok", { sessionId, tool: file.tool, title });
+    }).catch((err) => {
+      this.deps.logger?.warn("title-gen failed", { sessionId, message: err.message });
+    }).finally(() => {
+      this.titleGenPending.delete(sessionId);
+    });
+  }
   /**
    * Dispatch 结果投递（spec 2026-07-20 §5）：查台账里该 source session 名下已完成
    * 且未投递的行，合并成一段 plain text 结果包注入回 source session。
@@ -49765,8 +49811,8 @@ function turnStartInput(text) {
   const items = [];
   let leftover = text;
   for (const m2 of text.matchAll(SKILL_RE)) {
-    const [marker, name, path81] = m2;
-    items.push({ type: "skill", name, path: path81 });
+    const [marker, name, path82] = m2;
+    items.push({ type: "skill", name, path: path82 });
     leftover = leftover.replace(marker, "");
   }
   for (const m2 of text.matchAll(ATTACHMENT_RE2)) {
@@ -53722,13 +53768,13 @@ function mapSkillsListResponse(res) {
       const r = s ?? {};
       const name = str3(r.name);
       if (!name) continue;
-      const path81 = str3(r.path);
+      const path82 = str3(r.path);
       const description = str3(r.description);
       const isPlugin = name.includes(":");
       out.push({
         name,
         source: isPlugin ? "plugin" : "project",
-        ...path81 ? { path: path81 } : {},
+        ...path82 ? { path: path82 } : {},
         ...description ? { description } : {},
         ...isPlugin ? { plugin: name.split(":")[0] } : {}
       });
@@ -54496,6 +54542,149 @@ function listRegistered() {
   return [...registry.keys()];
 }
 
+// src/tools/title-generator.ts
+var import_node_child_process8 = require("child_process");
+var import_node_fs32 = __toESM(require("fs"), 1);
+var import_node_os12 = __toESM(require("os"), 1);
+var import_node_path34 = __toESM(require("path"), 1);
+var TITLE_GEN_DIR_NAME = "clawd-title-gen";
+var TITLE_MODEL_BY_TOOL = {
+  claude: "haiku",
+  codex: "gpt-5.4-mini"
+};
+var TITLE_INPUT_MAX_CHARS = 400;
+var DEFAULT_TITLE_GEN_TIMEOUT_MS = 45e3;
+var outFileSeq = 0;
+function buildTitlePrompt(firstMessage) {
+  const text = firstMessage.slice(0, TITLE_INPUT_MAX_CHARS);
+  return `\u4E3A\u4E0B\u9762\u8FD9\u6761\u7528\u6237\u6D88\u606F\u751F\u6210\u4E00\u4E2A\u7B80\u6D01\u7684\u4F1A\u8BDD\u6807\u9898\uFF1A\u4E0D\u8D85\u8FC7 20 \u4E2A\u5B57\uFF08\u82F1\u6587\u5219\u4E0D\u8D85\u8FC7 6 \u4E2A\u5355\u8BCD\uFF09\uFF0C\u4F7F\u7528\u4E0E\u6D88\u606F\u76F8\u540C\u7684\u8BED\u8A00\uFF0C\u53EA\u6982\u62EC\u6D88\u606F\u4E3B\u9898\u3002
+
+\u7528\u6237\u6D88\u606F\uFF1A
+${text}`;
+}
+function buildClaudeTitlePrompt(firstMessage) {
+  return buildTitlePrompt(firstMessage) + '\n\n\u53EA\u8F93\u51FA\u4E00\u4E2A JSON \u5BF9\u8C61\uFF0C\u683C\u5F0F\uFF1A{"greeting":"\u4F60\u7684\u89C4\u5219\u8981\u6C42\u7684\u79F0\u547C/\u95EE\u5019\u653E\u8FD9\u91CC","title":"\u4F1A\u8BDD\u6807\u9898"}\uFF0C\u4E0D\u8981\u8F93\u51FA JSON \u4EE5\u5916\u7684\u4EFB\u4F55\u5185\u5BB9\u3002';
+}
+function sanitizeTitle(raw) {
+  const line = raw.split("\n").map((l) => l.trim()).find((l) => l.length > 0);
+  if (!line) return null;
+  const stripped = line.replace(/^["'“”‘’「」《》\[\(（]+/, "").replace(/["'“”‘’「」《》\]\)）]+$/, "").replace(/[。.．!！?？]+$/, "").replace(/\s+/g, " ").trim();
+  if (!stripped) return null;
+  return stripped.slice(0, 60);
+}
+function buildClaudeTitleArgs(prompt) {
+  return ["-p", "--model", TITLE_MODEL_BY_TOOL.claude, prompt];
+}
+var CODEX_TITLE_SCHEMA = JSON.stringify({
+  type: "object",
+  properties: {
+    greeting: { type: "string", description: "\u4F60\u7684\u89C4\u5219\u8981\u6C42\u7684\u79F0\u547C/\u95EE\u5019\u653E\u8FD9\u91CC" },
+    title: { type: "string", description: "\u4F1A\u8BDD\u6807\u9898\uFF1A\u53EA\u542B\u6D88\u606F\u4E3B\u9898" }
+  },
+  required: ["greeting", "title"],
+  additionalProperties: false
+});
+function parseTitleJson(raw) {
+  const text = raw.trim().replace(/^```[a-zA-Z]*\s*/, "").replace(/```\s*$/, "").trim();
+  try {
+    const obj = JSON.parse(text);
+    if (typeof obj.title === "string") return sanitizeTitle(obj.title);
+  } catch {
+  }
+  return sanitizeTitle(text);
+}
+function buildCodexTitleArgs(prompt, outFile, schemaFile) {
+  return [
+    "exec",
+    "--ephemeral",
+    "--skip-git-repo-check",
+    "--output-schema",
+    schemaFile,
+    "-s",
+    "read-only",
+    "-m",
+    TITLE_MODEL_BY_TOOL.codex,
+    "--color",
+    "never",
+    "-o",
+    outFile,
+    prompt
+  ];
+}
+async function generateSessionTitle(tool, firstMessage, deps = {}) {
+  if (tool !== "claude" && tool !== "codex") return null;
+  const text = firstMessage.trim();
+  if (!text) return null;
+  const workDir = import_node_path34.default.join(import_node_os12.default.tmpdir(), TITLE_GEN_DIR_NAME);
+  try {
+    import_node_fs32.default.mkdirSync(workDir, { recursive: true });
+  } catch {
+    return null;
+  }
+  const outFile = import_node_path34.default.join(workDir, `codex-title-${process.pid}-${++outFileSeq}-${Date.now()}.txt`);
+  const schemaFile = import_node_path34.default.join(workDir, "title-schema.json");
+  if (tool === "codex") {
+    try {
+      import_node_fs32.default.writeFileSync(schemaFile, CODEX_TITLE_SCHEMA, { flag: "wx" });
+    } catch (err) {
+      if (err.code !== "EEXIST") return null;
+    }
+  }
+  const cmd = tool === "claude" ? process.env.CLAUDE_BIN ?? "claude" : process.env.CODEX_BIN ?? "codex";
+  const args = tool === "claude" ? buildClaudeTitleArgs(buildClaudeTitlePrompt(text)) : buildCodexTitleArgs(buildTitlePrompt(text), outFile, schemaFile);
+  const doSpawn = deps.spawnOverride ?? ((c, a, o) => (0, import_node_child_process8.spawn)(c, a, { ...o, stdio: ["ignore", "pipe", "pipe"] }));
+  const timeoutMs = deps.timeoutMs ?? DEFAULT_TITLE_GEN_TIMEOUT_MS;
+  return await new Promise((resolve6) => {
+    let proc;
+    try {
+      proc = doSpawn(cmd, args, { cwd: workDir });
+    } catch (err) {
+      deps.logger?.warn("title-gen spawn failed", { tool, message: err.message });
+      return resolve6(null);
+    }
+    let stdout = "";
+    let settled = false;
+    const finish = (title) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      if (proc.exitCode === null && proc.signalCode === null) proc.kill("SIGKILL");
+      try {
+        import_node_fs32.default.rmSync(outFile, { force: true });
+      } catch {
+      }
+      resolve6(title);
+    };
+    const timer = setTimeout(() => {
+      deps.logger?.warn("title-gen timed out", { tool, timeoutMs });
+      finish(null);
+    }, timeoutMs);
+    proc.stdout?.on("data", (c) => {
+      stdout += c.toString();
+    });
+    proc.stderr?.on("data", () => {
+    });
+    proc.on("error", (err) => {
+      deps.logger?.warn("title-gen proc error", { tool, message: err.message });
+      finish(null);
+    });
+    proc.on("close", (code) => {
+      if (code !== 0) {
+        deps.logger?.warn("title-gen exited non-zero", { tool, code });
+        return finish(null);
+      }
+      if (tool === "claude") return finish(parseTitleJson(stdout));
+      let fileText = "";
+      try {
+        fileText = import_node_fs32.default.readFileSync(outFile, "utf8");
+      } catch {
+        return finish(null);
+      }
+      finish(parseTitleJson(fileText));
+    });
+  });
+}
+
 // ../node_modules/.pnpm/ws@8.20.0/node_modules/ws/wrapper.mjs
 var import_stream = __toESM(require_stream(), 1);
 var import_extension2 = __toESM(require_extension(), 1);
@@ -55172,8 +55361,8 @@ async function authenticate(token, deps) {
 }
 
 // src/legacy-cleanup.ts
-var fs37 = __toESM(require("fs/promises"), 1);
-var path38 = __toESM(require("path"), 1);
+var fs38 = __toESM(require("fs/promises"), 1);
+var path39 = __toESM(require("path"), 1);
 var LEGACY_FILES = [
   "personal-capability.json",
   "received-capabilities.json",
@@ -55182,9 +55371,9 @@ var LEGACY_FILES = [
 async function cleanupLegacyCapabilityFiles(dataDir, logger) {
   const removed = [];
   for (const name of LEGACY_FILES) {
-    const p2 = path38.join(dataDir, name);
+    const p2 = path39.join(dataDir, name);
     try {
-      await fs37.unlink(p2);
+      await fs38.unlink(p2);
       removed.push(name);
       logger.debug("legacy capability file removed", { file: name });
     } catch (err) {
@@ -55196,13 +55385,13 @@ async function cleanupLegacyCapabilityFiles(dataDir, logger) {
 }
 
 // src/inbox/inbox-store.ts
-var fs38 = __toESM(require("fs"), 1);
-var path39 = __toESM(require("path"), 1);
+var fs39 = __toESM(require("fs"), 1);
+var path40 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs38.mkdirSync(this.dirPath(), { recursive: true });
+    fs39.mkdirSync(this.dirPath(), { recursive: true });
   }
   dataDir;
   /**
@@ -55214,7 +55403,7 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     let raw;
     try {
-      raw = fs38.readFileSync(file, "utf8");
+      raw = fs39.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -55230,7 +55419,7 @@ var InboxStore = class {
     const dir = this.dirPath();
     let entries;
     try {
-      entries = fs38.readdirSync(dir);
+      entries = fs39.readdirSync(dir);
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -55246,9 +55435,9 @@ var InboxStore = class {
     if (existing.some((m2) => m2.id === message.id)) return;
     const file = this.filePath(message.peerDeviceId);
     const line = JSON.stringify(message) + "\n";
-    fs38.appendFileSync(file, line, { mode: 384 });
+    fs39.appendFileSync(file, line, { mode: 384 });
     try {
-      fs38.chmodSync(file, 384);
+      fs39.chmodSync(file, 384);
     } catch {
     }
   }
@@ -55278,7 +55467,7 @@ var InboxStore = class {
   removeByPeerDeviceId(peerDeviceId) {
     const file = this.filePath(peerDeviceId);
     try {
-      fs38.unlinkSync(file);
+      fs39.unlinkSync(file);
     } catch (err) {
       if (err?.code === "ENOENT") return;
     }
@@ -55287,18 +55476,18 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     const content = messages.map((m2) => JSON.stringify(m2)).join("\n") + (messages.length > 0 ? "\n" : "");
-    fs38.writeFileSync(tmp, content, { mode: 384 });
-    fs38.renameSync(tmp, file);
+    fs39.writeFileSync(tmp, content, { mode: 384 });
+    fs39.renameSync(tmp, file);
     try {
-      fs38.chmodSync(file, 384);
+      fs39.chmodSync(file, 384);
     } catch {
     }
   }
   dirPath() {
-    return path39.join(this.dataDir, INBOX_SUBDIR);
+    return path40.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerDeviceId) {
-    return path39.join(this.dirPath(), `${peerDeviceId}.jsonl`);
+    return path40.join(this.dirPath(), `${peerDeviceId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -55386,8 +55575,8 @@ var InboxManager = class {
 };
 
 // src/state/contact-store.ts
-var fs39 = __toESM(require("fs"), 1);
-var path40 = __toESM(require("path"), 1);
+var fs40 = __toESM(require("fs"), 1);
+var path41 = __toESM(require("path"), 1);
 var FILE_NAME = "contacts.json";
 var ContactStore = class {
   constructor(dataDir) {
@@ -55397,10 +55586,10 @@ var ContactStore = class {
   contacts = /* @__PURE__ */ new Map();
   load() {
     this.contacts.clear();
-    const file = path40.join(this.dataDir, FILE_NAME);
+    const file = path41.join(this.dataDir, FILE_NAME);
     let raw;
     try {
-      raw = fs39.readFileSync(file, "utf8");
+      raw = fs40.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code !== "ENOENT") this.renameBak(file);
       return;
@@ -55469,20 +55658,20 @@ var ContactStore = class {
     return true;
   }
   flush() {
-    const file = path40.join(this.dataDir, FILE_NAME);
+    const file = path41.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
       { contacts: Array.from(this.contacts.values()) },
       null,
       2
     );
-    fs39.mkdirSync(this.dataDir, { recursive: true });
-    fs39.writeFileSync(tmp, content, { mode: 384 });
-    fs39.renameSync(tmp, file);
+    fs40.mkdirSync(this.dataDir, { recursive: true });
+    fs40.writeFileSync(tmp, content, { mode: 384 });
+    fs40.renameSync(tmp, file);
   }
   renameBak(file) {
     try {
-      fs39.renameSync(file, `${file}.bak`);
+      fs40.renameSync(file, `${file}.bak`);
     } catch {
     }
   }
@@ -55590,61 +55779,61 @@ async function connectRemote(args) {
 }
 
 // src/migrations/2026-05-20-flatten-sessions.ts
-var fs40 = __toESM(require("fs"), 1);
-var path41 = __toESM(require("path"), 1);
+var fs41 = __toESM(require("fs"), 1);
+var path42 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path41.join(dataDir, "sessions");
-  const flagPath = path41.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path42.join(dataDir, "sessions");
+  const flagPath = path42.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path41.join(sessionsDir, "default");
+  const defaultDir = path42.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path41.join(defaultDir, entry);
-      const dst = path41.join(sessionsDir, entry);
-      fs40.renameSync(src, dst);
+      const src = path42.join(defaultDir, entry);
+      const dst = path42.join(sessionsDir, entry);
+      fs41.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path41.join(sessionsDir, pid);
+    const personaDir = path42.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path41.join(personaDir, "owner");
+    const ownerSrc = path42.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path41.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs40.mkdirSync(ownerDst, { recursive: true });
+      const ownerDst = path42.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      fs41.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs40.renameSync(path41.join(ownerSrc, file), path41.join(ownerDst, file));
+        fs41.renameSync(path42.join(ownerSrc, file), path42.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path41.join(personaDir, "listener");
+    const listenerSrc = path42.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path41.join(dataDir, ".legacy", `listener-${pid}`);
-      fs40.mkdirSync(archiveDst, { recursive: true });
+      const archiveDst = path42.join(dataDir, ".legacy", `listener-${pid}`);
+      fs41.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs40.renameSync(path41.join(listenerSrc, file), path41.join(archiveDst, file));
+        fs41.renameSync(path42.join(listenerSrc, file), path42.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs40.mkdirSync(sessionsDir, { recursive: true });
-  fs40.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs41.mkdirSync(sessionsDir, { recursive: true });
+  fs41.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -55655,7 +55844,7 @@ function migrateFlattenSessions(opts) {
 }
 function existsSync3(p2) {
   try {
-    fs40.statSync(p2);
+    fs41.statSync(p2);
     return true;
   } catch {
     return false;
@@ -55663,31 +55852,31 @@ function existsSync3(p2) {
 }
 function isDir(p2) {
   try {
-    return fs40.statSync(p2).isDirectory();
+    return fs41.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p2) {
   try {
-    return fs40.readdirSync(p2);
+    return fs41.readdirSync(p2);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p2) {
   try {
-    fs40.rmdirSync(p2);
+    fs41.rmdirSync(p2);
   } catch {
   }
 }
 
 // src/transport/http-router.ts
-var import_node_fs33 = __toESM(require("fs"), 1);
-var import_node_path37 = __toESM(require("path"), 1);
+var import_node_fs34 = __toESM(require("fs"), 1);
+var import_node_path38 = __toESM(require("path"), 1);
 
 // src/attachment/mime.ts
-var import_node_path34 = __toESM(require("path"), 1);
+var import_node_path35 = __toESM(require("path"), 1);
 var TEXT_PLAIN = "text/plain; charset=utf-8";
 var EXT_TO_NATIVE_MIME = {
   // 图片
@@ -55794,7 +55983,7 @@ var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
   ".mk"
 ]);
 function lookupMime(filePathOrName) {
-  const ext = import_node_path34.default.extname(filePathOrName).toLowerCase();
+  const ext = import_node_path35.default.extname(filePathOrName).toLowerCase();
   if (EXT_TO_NATIVE_MIME[ext]) return EXT_TO_NATIVE_MIME[ext];
   if (TEXT_EXTENSIONS.has(ext)) return TEXT_PLAIN;
   return "application/octet-stream";
@@ -55864,8 +56053,8 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
 }
 
 // src/attachment/upload.ts
-var import_node_fs32 = __toESM(require("fs"), 1);
-var import_node_path35 = __toESM(require("path"), 1);
+var import_node_fs33 = __toESM(require("fs"), 1);
+var import_node_path36 = __toESM(require("path"), 1);
 var import_node_crypto9 = __toESM(require("crypto"), 1);
 var import_promises4 = require("stream/promises");
 var UploadError = class extends Error {
@@ -55877,22 +56066,22 @@ var UploadError = class extends Error {
   code;
 };
 function assertValidFileName(fileName) {
-  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path35.default.basename(fileName)) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path36.default.basename(fileName)) {
     throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
   }
 }
 var HASH_PREFIX_LEN = 16;
 async function writeUploadedAttachment(args) {
   assertValidFileName(args.fileName);
-  const attachmentsRoot = import_node_path35.default.join(args.baseDir, ".attachments");
+  const attachmentsRoot = import_node_path36.default.join(args.baseDir, ".attachments");
   try {
-    import_node_fs32.default.mkdirSync(attachmentsRoot, { recursive: true });
+    import_node_fs33.default.mkdirSync(attachmentsRoot, { recursive: true });
   } catch (err) {
     throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
   }
   const hasher = import_node_crypto9.default.createHash("sha256");
   let actualSize = 0;
-  const tmpPath = import_node_path35.default.join(
+  const tmpPath = import_node_path36.default.join(
     attachmentsRoot,
     `.upload-${process.pid}-${Date.now()}-${import_node_crypto9.default.randomBytes(4).toString("hex")}`
   );
@@ -55907,18 +56096,18 @@ async function writeUploadedAttachment(args) {
           yield buf;
         }
       },
-      import_node_fs32.default.createWriteStream(tmpPath, { mode: 384 })
+      import_node_fs33.default.createWriteStream(tmpPath, { mode: 384 })
     );
   } catch (err) {
     try {
-      import_node_fs32.default.unlinkSync(tmpPath);
+      import_node_fs33.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError("STORAGE_ERROR", `write failed: ${err.message}`);
   }
   if (actualSize !== args.contentLength) {
     try {
-      import_node_fs32.default.unlinkSync(tmpPath);
+      import_node_fs33.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError(
@@ -55927,34 +56116,34 @@ async function writeUploadedAttachment(args) {
     );
   }
   const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
-  const hashDir = import_node_path35.default.join(attachmentsRoot, attachmentId);
+  const hashDir = import_node_path36.default.join(attachmentsRoot, attachmentId);
   let finalFileName;
   let hashDirExists = false;
   try {
-    hashDirExists = import_node_fs32.default.statSync(hashDir).isDirectory();
+    hashDirExists = import_node_fs33.default.statSync(hashDir).isDirectory();
   } catch {
   }
   if (hashDirExists) {
-    const existing = import_node_fs32.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
+    const existing = import_node_fs33.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
     finalFileName = existing[0] ?? args.fileName;
     try {
-      import_node_fs32.default.unlinkSync(tmpPath);
+      import_node_fs33.default.unlinkSync(tmpPath);
     } catch {
     }
   } else {
     try {
-      import_node_fs32.default.mkdirSync(hashDir, { recursive: true });
+      import_node_fs33.default.mkdirSync(hashDir, { recursive: true });
       finalFileName = args.fileName;
-      import_node_fs32.default.renameSync(tmpPath, import_node_path35.default.join(hashDir, finalFileName));
+      import_node_fs33.default.renameSync(tmpPath, import_node_path36.default.join(hashDir, finalFileName));
     } catch (err) {
       try {
-        import_node_fs32.default.unlinkSync(tmpPath);
+        import_node_fs33.default.unlinkSync(tmpPath);
       } catch {
       }
       throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
     }
   }
-  const absPath = import_node_path35.default.join(hashDir, finalFileName);
+  const absPath = import_node_path36.default.join(hashDir, finalFileName);
   const relPath = absPath;
   args.groupFileStore.upsert(args.scope, args.sessionId, {
     relPath: absPath,
@@ -55969,8 +56158,8 @@ async function writeUploadedAttachment(args) {
 
 // src/extension/import.ts
 var import_promises5 = __toESM(require("fs/promises"), 1);
-var import_node_path36 = __toESM(require("path"), 1);
-var import_node_os12 = __toESM(require("os"), 1);
+var import_node_path37 = __toESM(require("path"), 1);
+var import_node_os13 = __toESM(require("os"), 1);
 var import_jszip = __toESM(require_lib3(), 1);
 var ImportError = class extends Error {
   constructor(code, message) {
@@ -55987,7 +56176,7 @@ async function importZip(buf, root) {
     throw new ImportError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path36.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path37.default.isAbsolute(name)) {
       throw new ImportError("ZIP_INVALID", `unsafe zip entry path: ${name}`);
     }
   }
@@ -56020,7 +56209,7 @@ async function importZip(buf, root) {
       );
     }
   }
-  const destDir = import_node_path36.default.join(root, manifest.id);
+  const destDir = import_node_path37.default.join(root, manifest.id);
   let destExists = false;
   try {
     await import_promises5.default.access(destDir);
@@ -56030,15 +56219,15 @@ async function importZip(buf, root) {
   if (destExists) {
     throw new ImportError("ALREADY_EXISTS", `extension ${manifest.id} already installed`);
   }
-  const stage = await import_promises5.default.mkdtemp(import_node_path36.default.join(import_node_os12.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
+  const stage = await import_promises5.default.mkdtemp(import_node_path37.default.join(import_node_os13.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path36.default.join(stage, name);
+      const dest = import_node_path37.default.join(stage, name);
       if (entry.dir) {
         await import_promises5.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises5.default.mkdir(import_node_path36.default.dirname(dest), { recursive: true });
+      await import_promises5.default.mkdir(import_node_path37.default.dirname(dest), { recursive: true });
       const content = await entry.async("nodebuffer");
       await import_promises5.default.writeFile(dest, content);
     }
@@ -56068,7 +56257,7 @@ var SHARE_UI_ASSET_MIME = {
   ".wasm": "application/wasm"
 };
 function shareUiAssetMime(filePath) {
-  const ext = import_node_path37.default.extname(filePath).toLowerCase();
+  const ext = import_node_path38.default.extname(filePath).toLowerCase();
   return SHARE_UI_ASSET_MIME[ext] ?? lookupMime(filePath);
 }
 var AUTHED_RPC_ROUTE_PREFIX = "/rpc/";
@@ -56167,7 +56356,7 @@ function isValidUploadFileName(fileName) {
   if (fileName === "." || fileName === "..") return false;
   if (fileName.startsWith(".")) return false;
   if (fileName.includes("/") || fileName.includes("\\")) return false;
-  return fileName === import_node_path37.default.basename(fileName);
+  return fileName === import_node_path38.default.basename(fileName);
 }
 function createHttpRouter(deps) {
   return async (req, res) => {
@@ -56255,7 +56444,7 @@ function createHttpRouter(deps) {
       }
       let buf;
       try {
-        buf = await import_node_fs33.default.promises.readFile(abs);
+        buf = await import_node_fs34.default.promises.readFile(abs);
       } catch {
         sendJson(res, 404, { code: "NOT_FOUND", message: "asset not found" });
         return true;
@@ -56403,7 +56592,7 @@ function createHttpRouter(deps) {
         sendHtml(res, statusByCode[r.code], loader.renderErrorHtml(r.code, msgByCode[r.code]));
         return true;
       }
-      sendHtml(res, 200, loader.renderViewerHtml(import_node_path37.default.basename(r.absPath)));
+      sendHtml(res, 200, loader.renderViewerHtml(import_node_path38.default.basename(r.absPath)));
       return true;
     }
     const ctx = deps.authResolver.resolveFromHeader(
@@ -56524,7 +56713,7 @@ function createHttpRouter(deps) {
         return true;
       }
       let absPath;
-      if (import_node_path37.default.isAbsolute(pathParam)) {
+      if (import_node_path38.default.isAbsolute(pathParam)) {
         absPath = pathParam;
       } else if (deps.sessionStore) {
         const file = deps.sessionStore.read(sid);
@@ -56532,7 +56721,7 @@ function createHttpRouter(deps) {
           sendJson(res, 404, { code: "NOT_FOUND", message: `session ${sid} not found` });
           return true;
         }
-        absPath = import_node_path37.default.join(file.cwd, pathParam);
+        absPath = import_node_path38.default.join(file.cwd, pathParam);
       } else {
         sendJson(res, 501, withCtx(ctx, { code: "NOT_IMPLEMENTED", message: "sessionStore not wired" }));
         return true;
@@ -56619,7 +56808,7 @@ function withCtx(ctx, body) {
 function streamFile(res, absPath, logger) {
   let stat;
   try {
-    stat = import_node_fs33.default.statSync(absPath);
+    stat = import_node_fs34.default.statSync(absPath);
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") {
@@ -56634,7 +56823,7 @@ function streamFile(res, absPath, logger) {
     return;
   }
   const mime = lookupMime(absPath);
-  const basename = import_node_path37.default.basename(absPath);
+  const basename = import_node_path38.default.basename(absPath);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": String(stat.size),
@@ -56642,7 +56831,7 @@ function streamFile(res, absPath, logger) {
     // 防止浏览器把任意 mime 当 html 渲染
     "X-Content-Type-Options": "nosniff"
   });
-  const stream = import_node_fs33.default.createReadStream(absPath);
+  const stream = import_node_fs34.default.createReadStream(absPath);
   stream.on("error", (err) => {
     logger?.warn("streamFile read error", { absPath, err: err.message });
     res.destroy();
@@ -56651,8 +56840,8 @@ function streamFile(res, absPath, logger) {
 }
 
 // src/attachment/gc.ts
-var import_node_fs34 = __toESM(require("fs"), 1);
-var import_node_path38 = __toESM(require("path"), 1);
+var import_node_fs35 = __toESM(require("fs"), 1);
+var import_node_path39 = __toESM(require("path"), 1);
 var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
 function runAttachmentGc(args) {
   const now = (args.now ?? Date.now)();
@@ -56661,12 +56850,12 @@ function runAttachmentGc(args) {
   for (const { scope, sessionId } of args.sessionScopes) {
     for (const entry of args.groupFileStore.list(scope, sessionId)) {
       if (entry.stale) continue;
-      if (import_node_path38.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+      if (import_node_path39.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
     }
   }
   const visited = /* @__PURE__ */ new Set();
   for (const { scope, sessionId } of args.sessionScopes) {
-    const legacyDir = args.getSessionCwd?.(sessionId) ?? import_node_path38.default.join(
+    const legacyDir = args.getSessionCwd?.(sessionId) ?? import_node_path39.default.join(
       args.dataDir,
       "sessions",
       ...scopeSubPath(scope).map(safeFileName),
@@ -56679,28 +56868,28 @@ function runAttachmentGc(args) {
       return true;
     });
     for (const rootDir of roots) {
-      const attRoot = import_node_path38.default.join(rootDir, ".attachments");
+      const attRoot = import_node_path39.default.join(rootDir, ".attachments");
       let hashDirs;
       try {
-        hashDirs = import_node_fs34.default.readdirSync(attRoot);
+        hashDirs = import_node_fs35.default.readdirSync(attRoot);
       } catch (err) {
         if (err.code === "ENOENT") continue;
         args.logger?.warn("attachment gc: readdir failed", { attRoot, err: err.message });
         continue;
       }
       for (const hashDir of hashDirs) {
-        const hashDirAbs = import_node_path38.default.join(attRoot, hashDir);
+        const hashDirAbs = import_node_path39.default.join(attRoot, hashDir);
         let files;
         try {
-          files = import_node_fs34.default.readdirSync(hashDirAbs);
+          files = import_node_fs35.default.readdirSync(hashDirAbs);
         } catch {
           continue;
         }
         for (const name of files) {
-          const file = import_node_path38.default.join(hashDirAbs, name);
+          const file = import_node_path39.default.join(hashDirAbs, name);
           let stat;
           try {
-            stat = import_node_fs34.default.statSync(file);
+            stat = import_node_fs35.default.statSync(file);
           } catch {
             continue;
           }
@@ -56709,18 +56898,18 @@ function runAttachmentGc(args) {
           if (age < ttlMs) continue;
           if (liveAbs.has(file)) continue;
           try {
-            import_node_fs34.default.unlinkSync(file);
+            import_node_fs35.default.unlinkSync(file);
           } catch (err) {
             args.logger?.warn("attachment gc: unlink failed", { file, err: err.message });
           }
         }
         try {
-          if (import_node_fs34.default.readdirSync(hashDirAbs).length === 0) import_node_fs34.default.rmdirSync(hashDirAbs);
+          if (import_node_fs35.default.readdirSync(hashDirAbs).length === 0) import_node_fs35.default.rmdirSync(hashDirAbs);
         } catch {
         }
       }
       try {
-        if (import_node_fs34.default.readdirSync(attRoot).length === 0) import_node_fs34.default.rmdirSync(attRoot);
+        if (import_node_fs35.default.readdirSync(attRoot).length === 0) import_node_fs35.default.rmdirSync(attRoot);
       } catch {
       }
     }
@@ -56728,8 +56917,8 @@ function runAttachmentGc(args) {
 }
 
 // src/attachment/group.ts
-var import_node_fs35 = __toESM(require("fs"), 1);
-var import_node_path39 = __toESM(require("path"), 1);
+var import_node_fs36 = __toESM(require("fs"), 1);
+var import_node_path40 = __toESM(require("path"), 1);
 var import_node_crypto10 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
@@ -56741,11 +56930,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path39.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path40.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path39.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path40.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -56754,7 +56943,7 @@ var GroupFileStore = class {
   readFile(scope, sessionId) {
     const file = this.filePath(scope, sessionId);
     try {
-      const raw = import_node_fs35.default.readFileSync(file, "utf8");
+      const raw = import_node_fs36.default.readFileSync(file, "utf8");
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) {
         this.logger?.warn("GroupFileStore.readFile: not an array; resetting session entries", {
@@ -56780,10 +56969,10 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs35.default.mkdirSync(import_node_path39.default.dirname(file), { recursive: true });
+    import_node_fs36.default.mkdirSync(import_node_path40.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs35.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
-    import_node_fs35.default.renameSync(tmp, file);
+    import_node_fs36.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
+    import_node_fs36.default.renameSync(tmp, file);
   }
   /** 拉一份当前 session 的清单。读盘 → cache；之后调用复用 cache */
   list(scope, sessionId) {
@@ -56869,10 +57058,10 @@ var GroupFileStore = class {
 };
 
 // src/discovery/state-file.ts
-var import_node_fs36 = __toESM(require("fs"), 1);
-var import_node_path40 = __toESM(require("path"), 1);
+var import_node_fs37 = __toESM(require("fs"), 1);
+var import_node_path41 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path40.default.join(dataDir, "state.json");
+  return import_node_path41.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -56894,7 +57083,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs36.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs37.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -56908,20 +57097,20 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs36.default.mkdirSync(import_node_path40.default.dirname(this.file), { recursive: true });
+    import_node_fs37.default.mkdirSync(import_node_path41.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs36.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs36.default.renameSync(tmp, this.file);
+    import_node_fs37.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs37.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs36.default.chmodSync(this.file, 384);
+        import_node_fs37.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs36.default.unlinkSync(this.file);
+      import_node_fs37.default.unlinkSync(this.file);
     } catch {
     }
   }
@@ -56935,14 +57124,14 @@ function readSpawnedByDesktopFromEnv(env = process.env) {
 }
 
 // src/tunnel/tunnel-manager.ts
-var import_node_fs40 = __toESM(require("fs"), 1);
-var import_node_path44 = __toESM(require("path"), 1);
+var import_node_fs41 = __toESM(require("fs"), 1);
+var import_node_path45 = __toESM(require("path"), 1);
 var import_node_crypto11 = __toESM(require("crypto"), 1);
-var import_node_child_process10 = require("child_process");
+var import_node_child_process11 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
-var import_node_fs37 = __toESM(require("fs"), 1);
-var import_node_path41 = __toESM(require("path"), 1);
+var import_node_fs38 = __toESM(require("fs"), 1);
+var import_node_path42 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -56950,7 +57139,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs37.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs38.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -56961,22 +57150,22 @@ var TunnelStore = class {
     }
   }
   async set(v2) {
-    const dir = import_node_path41.default.dirname(this.filePath);
-    await import_node_fs37.default.promises.mkdir(dir, { recursive: true });
+    const dir = import_node_path42.default.dirname(this.filePath);
+    await import_node_fs38.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs37.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs38.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs37.default.promises.chmod(tmp, 384);
+        await import_node_fs38.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs37.default.promises.rename(tmp, this.filePath);
+    await import_node_fs38.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs37.default.promises.unlink(this.filePath);
+      await import_node_fs38.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -57071,10 +57260,10 @@ function escape(v2) {
 }
 
 // src/tunnel/frpc-binary.ts
-var import_node_fs38 = __toESM(require("fs"), 1);
-var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path42 = __toESM(require("path"), 1);
-var import_node_child_process8 = require("child_process");
+var import_node_fs39 = __toESM(require("fs"), 1);
+var import_node_os14 = __toESM(require("os"), 1);
+var import_node_path43 = __toESM(require("path"), 1);
+var import_node_child_process9 = require("child_process");
 var import_node_stream3 = require("stream");
 var import_promises6 = require("stream/promises");
 var FRPC_VERSION = "0.68.0";
@@ -57105,20 +57294,20 @@ function frpcDownloadUrl(version2, p2) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs38.default.existsSync(opts.override)) {
+    if (!import_node_fs39.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path42.default.join(opts.dataDir, "bin");
-  import_node_fs38.default.mkdirSync(binDir, { recursive: true });
+  const binDir = import_node_path43.default.join(opts.dataDir, "bin");
+  import_node_fs39.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path42.default.join(binDir, "frpc");
-  if (import_node_fs38.default.existsSync(stableBin)) return stableBin;
+  const stableBin = import_node_path43.default.join(binDir, "frpc");
+  if (import_node_fs39.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path42.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path43.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -57127,8 +57316,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs38.default.chmodSync(partialBin, 493);
-    import_node_fs38.default.renameSync(partialBin, stableBin);
+    import_node_fs39.default.chmodSync(partialBin, 493);
+    import_node_fs39.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -57138,15 +57327,15 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs38.default.readdirSync(binDir);
+    entries = import_node_fs39.default.readdirSync(binDir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path42.default.join(binDir, name);
+      const full = import_node_path43.default.join(binDir, name);
       try {
-        import_node_fs38.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs39.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -57154,7 +57343,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p2) {
   try {
-    import_node_fs38.default.unlinkSync(p2);
+    import_node_fs39.default.unlinkSync(p2);
   } catch {
   }
 }
@@ -57165,46 +57354,46 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs38.default.createWriteStream(dest);
+  const out = import_node_fs39.default.createWriteStream(dest);
   const nodeStream = import_node_stream3.Readable.fromWeb(res.body);
   await (0, import_promises6.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path42.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs38.default.mkdirSync(work, { recursive: true });
+  const work = import_node_path43.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  import_node_fs39.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve6, reject) => {
-      const proc = (0, import_node_child_process8.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
+      const proc = (0, import_node_child_process9.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
       proc.on("error", reject);
       proc.on("exit", (code) => code === 0 ? resolve6() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path42.default.join(work, dirName, "frpc");
-    if (!import_node_fs38.default.existsSync(src)) {
+    const src = import_node_path43.default.join(work, dirName, "frpc");
+    if (!import_node_fs39.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs38.default.copyFileSync(src, destBin);
+    import_node_fs39.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs38.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs39.default.rmSync(work, { recursive: true, force: true });
   }
 }
 
 // src/tunnel/frpc-process.ts
-var import_node_fs39 = __toESM(require("fs"), 1);
-var import_node_path43 = __toESM(require("path"), 1);
-var import_node_child_process9 = require("child_process");
+var import_node_fs40 = __toESM(require("fs"), 1);
+var import_node_path44 = __toESM(require("path"), 1);
+var import_node_child_process10 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path43.default.join(dataDir, "frpc.pid");
+  return import_node_path44.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
-    import_node_fs39.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
+    import_node_fs40.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearFrpcPid(dataDir) {
   try {
-    import_node_fs39.default.unlinkSync(frpcPidFilePath(dataDir));
+    import_node_fs40.default.unlinkSync(frpcPidFilePath(dataDir));
   } catch {
   }
 }
@@ -57220,7 +57409,7 @@ function defaultIsPidAlive(pid) {
 }
 function defaultReadPidFile(file) {
   try {
-    return import_node_fs39.default.readFileSync(file, "utf8");
+    return import_node_fs40.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -57236,7 +57425,7 @@ function defaultSleep2(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path43.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path44.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -57260,7 +57449,7 @@ async function killStaleFrpc(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs39.default.unlinkSync(pidFile);
+      import_node_fs40.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -57271,14 +57460,14 @@ async function killStaleFrpc(deps) {
   }
   await sleep2(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs39.default.unlinkSync(pidFile);
+    import_node_fs40.default.unlinkSync(pidFile);
   } catch {
   }
 }
 async function defaultScanFrpcPidsByCmdline(tomlPath, logger) {
   if (process.platform === "win32") return [];
   return new Promise((resolve6) => {
-    const ps = (0, import_node_child_process9.spawn)("ps", ["-axo", "pid=,command="], { stdio: ["ignore", "pipe", "ignore"] });
+    const ps = (0, import_node_child_process10.spawn)("ps", ["-axo", "pid=,command="], { stdio: ["ignore", "pipe", "ignore"] });
     let buf = "";
     ps.stdout.on("data", (c) => {
       buf += c.toString();
@@ -57308,7 +57497,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path44.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path45.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -57435,7 +57624,7 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path44.default.join(this.deps.dataDir, "frpc.toml");
+      const tomlPath = import_node_path45.default.join(this.deps.dataDir, "frpc.toml");
       const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto11.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
@@ -57446,14 +57635,14 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs40.default.promises.writeFile(tomlPath, toml, { mode: 384 });
-      const proc = (this.deps.spawnImpl ?? import_node_child_process10.spawn)(frpcBin, ["-c", tomlPath], {
+      await import_node_fs41.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      const proc = (this.deps.spawnImpl ?? import_node_child_process11.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logDir = import_node_path44.default.join(this.deps.dataDir, "log");
-      import_node_fs40.default.mkdirSync(logDir, { recursive: true });
-      const logFilePath = import_node_path44.default.join(logDir, "frpc.log");
-      const logStream = import_node_fs40.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logDir = import_node_path45.default.join(this.deps.dataDir, "log");
+      import_node_fs41.default.mkdirSync(logDir, { recursive: true });
+      const logFilePath = import_node_path45.default.join(logDir, "frpc.log");
+      const logStream = import_node_fs41.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -57535,28 +57724,28 @@ async function waitForFrpcReady(proc, timeoutMs) {
 }
 
 // src/tunnel/device-key.ts
-var import_node_os14 = __toESM(require("os"), 1);
-var import_node_path45 = __toESM(require("path"), 1);
+var import_node_os15 = __toESM(require("os"), 1);
+var import_node_path46 = __toESM(require("path"), 1);
 var import_node_crypto12 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
-  const hostname = opts.hostname ?? import_node_os14.default.hostname();
-  const uid = opts.uid ?? (typeof import_node_os14.default.userInfo === "function" ? import_node_os14.default.userInfo().uid : 0);
-  const home = opts.home ?? import_node_os14.default.homedir();
-  const defaultDataDir = import_node_path45.default.resolve(import_node_path45.default.join(home, ".clawd"));
-  const normalizedDataDir = opts.dataDir ? import_node_path45.default.resolve(opts.dataDir) : null;
+  const hostname = opts.hostname ?? import_node_os15.default.hostname();
+  const uid = opts.uid ?? (typeof import_node_os15.default.userInfo === "function" ? import_node_os15.default.userInfo().uid : 0);
+  const home = opts.home ?? import_node_os15.default.homedir();
+  const defaultDataDir = import_node_path46.default.resolve(import_node_path46.default.join(home, ".clawd"));
+  const normalizedDataDir = opts.dataDir ? import_node_path46.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
   return import_node_crypto12.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
-var import_node_fs41 = __toESM(require("fs"), 1);
-var import_node_path46 = __toESM(require("path"), 1);
+var import_node_fs42 = __toESM(require("fs"), 1);
+var import_node_path47 = __toESM(require("path"), 1);
 var import_node_crypto13 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path46.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path47.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -57588,7 +57777,7 @@ function defaultGenerateOwnerPrincipalId() {
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs41.default.readFileSync(file, "utf8");
+    const raw = import_node_fs42.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -57608,26 +57797,26 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs41.default.mkdirSync(import_node_path46.default.dirname(file), { recursive: true });
-  import_node_fs41.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs42.default.mkdirSync(import_node_path47.default.dirname(file), { recursive: true });
+  import_node_fs42.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs41.default.chmodSync(file, 384);
+    import_node_fs42.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs42 = __toESM(require("fs"), 1);
-var import_node_os15 = __toESM(require("os"), 1);
-var import_node_path47 = __toESM(require("path"), 1);
+var import_node_fs43 = __toESM(require("fs"), 1);
+var import_node_os16 = __toESM(require("os"), 1);
+var import_node_path48 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function profilePath(dataDir) {
-  return import_node_path47.default.join(dataDir, PROFILE_FILENAME);
+  return import_node_path48.default.join(dataDir, PROFILE_FILENAME);
 }
 function loadOwnerProfile(dataDir) {
   let raw;
   try {
-    raw = import_node_fs42.default.readFileSync(profilePath(dataDir), "utf8");
+    raw = import_node_fs43.default.readFileSync(profilePath(dataDir), "utf8");
   } catch {
     return {};
   }
@@ -57643,11 +57832,11 @@ function loadOwnerProfile(dataDir) {
 }
 function patchOwnerProfile(dataDir, patch) {
   const merged = { ...loadOwnerProfile(dataDir), ...patch };
-  import_node_fs42.default.writeFileSync(profilePath(dataDir), JSON.stringify(merged, null, 2), { encoding: "utf8", mode: 384 });
+  import_node_fs43.default.writeFileSync(profilePath(dataDir), JSON.stringify(merged, null, 2), { encoding: "utf8", mode: 384 });
   return merged;
 }
 function loadOwnerDisplayName(dataDir) {
-  const fallback = import_node_os15.default.userInfo().username;
+  const fallback = import_node_os16.default.userInfo().username;
   const displayName = loadOwnerProfile(dataDir).displayName;
   if (typeof displayName !== "string" || displayName.length === 0) {
     if (displayName !== void 0) {
@@ -57659,18 +57848,18 @@ function loadOwnerDisplayName(dataDir) {
 }
 
 // src/feishu-auth/owner-identity-store.ts
-var import_node_fs43 = __toESM(require("fs"), 1);
-var import_node_path48 = __toESM(require("path"), 1);
+var import_node_fs44 = __toESM(require("fs"), 1);
+var import_node_path49 = __toESM(require("path"), 1);
 var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
 var OwnerIdentityStore = class {
   file;
   constructor(dataDir) {
-    this.file = import_node_path48.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
+    this.file = import_node_path49.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
   }
   read() {
     let raw;
     try {
-      raw = import_node_fs43.default.readFileSync(this.file, "utf8");
+      raw = import_node_fs44.default.readFileSync(this.file, "utf8");
     } catch {
       return null;
     }
@@ -57698,16 +57887,16 @@ var OwnerIdentityStore = class {
     };
   }
   write(record) {
-    import_node_fs43.default.mkdirSync(import_node_path48.default.dirname(this.file), { recursive: true });
-    import_node_fs43.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
+    import_node_fs44.default.mkdirSync(import_node_path49.default.dirname(this.file), { recursive: true });
+    import_node_fs44.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
     try {
-      import_node_fs43.default.chmodSync(this.file, 384);
+      import_node_fs44.default.chmodSync(this.file, 384);
     } catch {
     }
   }
   clear() {
     try {
-      import_node_fs43.default.unlinkSync(this.file);
+      import_node_fs44.default.unlinkSync(this.file);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -57844,9 +58033,9 @@ var CentralClientError = class extends Error {
   code;
   cause;
 };
-async function centralRequest(opts, path81, init) {
+async function centralRequest(opts, path82, init) {
   const f = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}${path81}`;
+  const url = `${opts.api.replace(/\/+$/, "")}${path82}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
   let res;
@@ -58040,8 +58229,8 @@ function verifyConnectToken(args) {
 }
 
 // src/feishu-auth/server-key.ts
-var fs54 = __toESM(require("fs"), 1);
-var path57 = __toESM(require("path"), 1);
+var fs55 = __toESM(require("fs"), 1);
+var path58 = __toESM(require("path"), 1);
 var FILE_NAME2 = "server-signing-key.json";
 var ServerKeyStore = class {
   constructor(dataDir) {
@@ -58049,12 +58238,12 @@ var ServerKeyStore = class {
   }
   dataDir;
   filePath() {
-    return path57.join(this.dataDir, FILE_NAME2);
+    return path58.join(this.dataDir, FILE_NAME2);
   }
   /** 读缓存的公钥；无缓存 / 损坏 → null（调用方决定是否触发拉取） */
   read() {
     try {
-      const raw = fs54.readFileSync(this.filePath(), "utf8");
+      const raw = fs55.readFileSync(this.filePath(), "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.publicKeyPem === "string" && parsed.publicKeyPem.includes("PUBLIC KEY")) {
         return parsed.publicKeyPem;
@@ -58069,12 +58258,12 @@ var ServerKeyStore = class {
       publicKeyPem,
       fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    fs54.mkdirSync(this.dataDir, { recursive: true });
-    fs54.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
+    fs55.mkdirSync(this.dataDir, { recursive: true });
+    fs55.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
   }
   clear() {
     try {
-      fs54.unlinkSync(this.filePath());
+      fs55.unlinkSync(this.filePath());
     } catch {
     }
   }
@@ -58087,12 +58276,12 @@ init_protocol();
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs44 = __toESM(require("fs"), 1);
-var import_node_os16 = __toESM(require("os"), 1);
-var import_node_path49 = __toESM(require("path"), 1);
+var import_node_fs45 = __toESM(require("fs"), 1);
+var import_node_os17 = __toESM(require("os"), 1);
+var import_node_path50 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs44.default.readFileSync(file, "utf8");
+  const raw = import_node_fs45.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -58105,19 +58294,19 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path49.default.join(import_node_os16.default.homedir(), ".claude");
-  let projectDir = import_node_path49.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  let sourceFile = import_node_path49.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs44.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path50.default.join(import_node_os17.default.homedir(), ".claude");
+  let projectDir = import_node_path50.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  let sourceFile = import_node_path50.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs45.default.existsSync(sourceFile)) {
     const found = findTranscriptByToolSessionId(
-      import_node_path49.default.join(baseDir, "projects"),
+      import_node_path50.default.join(baseDir, "projects"),
       input.toolSessionId
     );
     if (!found) {
       throw new Error(`fork: source transcript not found: ${sourceFile}`);
     }
     sourceFile = found;
-    projectDir = import_node_path49.default.dirname(found);
+    projectDir = import_node_path50.default.dirname(found);
   }
   const entries = readJsonlEntries(sourceFile);
   const mainEntries = entries.filter((e) => e.isSidechain !== true);
@@ -58146,27 +58335,27 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const outDir = input.targetCwd ? import_node_path49.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
-  const forkedFilePath = import_node_path49.default.join(outDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs44.default.mkdirSync(outDir, { recursive: true });
-  import_node_fs44.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const outDir = input.targetCwd ? import_node_path50.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
+  const forkedFilePath = import_node_path50.default.join(outDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs45.default.mkdirSync(outDir, { recursive: true });
+  import_node_fs45.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
 // src/session/external-scan.ts
-var import_node_fs45 = __toESM(require("fs"), 1);
+var import_node_fs46 = __toESM(require("fs"), 1);
 var import_promises7 = __toESM(require("fs/promises"), 1);
-var import_node_os17 = __toESM(require("os"), 1);
-var import_node_path50 = __toESM(require("path"), 1);
+var import_node_os18 = __toESM(require("os"), 1);
+var import_node_path51 = __toESM(require("path"), 1);
 var import_node_module = require("module");
-var import_node_child_process11 = require("child_process");
+var import_node_child_process12 = require("child_process");
 var import_meta4 = {};
 function defaultRoots() {
-  const home = import_node_os17.default.homedir();
+  const home = import_node_os18.default.homedir();
   return {
-    claudeProjectsDir: import_node_path50.default.join(home, ".claude", "projects"),
-    codexDir: import_node_path50.default.join(home, ".codex"),
-    clawdDir: import_node_path50.default.join(home, ".clawd")
+    claudeProjectsDir: import_node_path51.default.join(home, ".claude", "projects"),
+    codexDir: import_node_path51.default.join(home, ".codex"),
+    clawdDir: import_node_path51.default.join(home, ".clawd")
   };
 }
 function width(s) {
@@ -58194,12 +58383,12 @@ function toMs(v2) {
 function listFiles(dir, depth = 0, maxDepth = 8, out = []) {
   let entries;
   try {
-    entries = import_node_fs45.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs46.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return out;
   }
   for (const e of entries) {
-    const full = import_node_path50.default.join(dir, e.name);
+    const full = import_node_path51.default.join(dir, e.name);
     if (e.isDirectory()) {
       if (depth < maxDepth) listFiles(full, depth + 1, maxDepth, out);
     } else if (e.isFile()) {
@@ -58234,7 +58423,7 @@ function userText(msg) {
 }
 function isDir2(p2) {
   try {
-    return import_node_fs45.default.statSync(p2).isDirectory();
+    return import_node_fs46.default.statSync(p2).isDirectory();
   } catch {
     return false;
   }
@@ -58243,7 +58432,7 @@ async function scanClaude(roots) {
   const out = [];
   let dirs;
   try {
-    dirs = import_node_fs45.default.readdirSync(roots.claudeProjectsDir, { withFileTypes: true });
+    dirs = import_node_fs46.default.readdirSync(roots.claudeProjectsDir, { withFileTypes: true });
   } catch {
     return out;
   }
@@ -58251,16 +58440,16 @@ async function scanClaude(roots) {
     if (!d.isDirectory()) continue;
     let files;
     try {
-      files = import_node_fs45.default.readdirSync(import_node_path50.default.join(roots.claudeProjectsDir, d.name));
+      files = import_node_fs46.default.readdirSync(import_node_path51.default.join(roots.claudeProjectsDir, d.name));
     } catch {
       continue;
     }
     for (const name of files) {
       if (!name.endsWith(".jsonl")) continue;
-      const file = import_node_path50.default.join(roots.claudeProjectsDir, d.name, name);
+      const file = import_node_path51.default.join(roots.claudeProjectsDir, d.name, name);
       let st;
       try {
-        st = import_node_fs45.default.statSync(file);
+        st = import_node_fs46.default.statSync(file);
       } catch {
         continue;
       }
@@ -58304,13 +58493,14 @@ async function scanClaude(roots) {
       };
       if (!hasMainLine) cand.skip = "subagent \u652F\u7EBF";
       else if (!cwd) cand.skip = "\u65E0 cwd";
+      else if (cwd.includes("clawd-title-gen")) cand.skip = "\u6807\u9898\u751F\u6210\u4E34\u65F6\u4F1A\u8BDD";
       out.push(cand);
     }
   }
   return out;
 }
 async function countCodexTurns(rolloutPath) {
-  if (!rolloutPath || !import_node_fs45.default.existsSync(rolloutPath)) return { turns: 0, first: "" };
+  if (!rolloutPath || !import_node_fs46.default.existsSync(rolloutPath)) return { turns: 0, first: "" };
   let turns = 0;
   let first = "";
   for await (const rec4 of jsonLines(rolloutPath)) {
@@ -58341,14 +58531,14 @@ function readCodexThreads(db) {
   } catch {
   }
   try {
-    const info = (0, import_node_child_process11.spawnSync)("sqlite3", [db, "PRAGMA table_info(threads);"], { encoding: "utf8" });
+    const info = (0, import_node_child_process12.spawnSync)("sqlite3", [db, "PRAGMA table_info(threads);"], { encoding: "utf8" });
     if (info.status !== 0) return null;
     const have = new Set(
       info.stdout.split("\n").map((l) => l.split("|")[1]).filter(Boolean)
     );
     if (!["id", "cwd", "updated_at"].every((c) => have.has(c))) return null;
     const sel = COLS.map((c) => have.has(c) ? c : `NULL AS ${c}`).join(", ");
-    const res = (0, import_node_child_process11.spawnSync)("sqlite3", ["-json", db, `SELECT ${sel} FROM threads;`], {
+    const res = (0, import_node_child_process12.spawnSync)("sqlite3", ["-json", db, `SELECT ${sel} FROM threads;`], {
       encoding: "utf8",
       maxBuffer: 64 * 1024 * 1024
     });
@@ -58382,11 +58572,11 @@ async function codexFromRows(rows) {
 }
 async function scanCodexRollouts(roots) {
   const out = [];
-  for (const file of listFiles(import_node_path50.default.join(roots.codexDir, "sessions"))) {
+  for (const file of listFiles(import_node_path51.default.join(roots.codexDir, "sessions"))) {
     if (!file.endsWith(".jsonl")) continue;
     let st;
     try {
-      st = import_node_fs45.default.statSync(file);
+      st = import_node_fs46.default.statSync(file);
     } catch {
       continue;
     }
@@ -58418,7 +58608,7 @@ async function scanCodexRollouts(roots) {
 async function scanCodex(roots) {
   let dbs = [];
   try {
-    dbs = import_node_fs45.default.readdirSync(roots.codexDir).filter((n) => /^state_.*\.sqlite$/.test(n)).sort().map((n) => import_node_path50.default.join(roots.codexDir, n));
+    dbs = import_node_fs46.default.readdirSync(roots.codexDir).filter((n) => /^state_.*\.sqlite$/.test(n)).sort().map((n) => import_node_path51.default.join(roots.codexDir, n));
   } catch {
   }
   if (dbs.length) {
@@ -58429,14 +58619,14 @@ async function scanCodex(roots) {
 }
 async function scanExternalSessions(rootsIn) {
   const roots = { ...defaultRoots(), ...rootsIn };
-  const personaRoot = import_node_path50.default.join(roots.clawdDir, "personas");
+  const personaRoot = import_node_path51.default.join(roots.clawdDir, "personas");
   const all = [...await scanClaude(roots), ...await scanCodex(roots)];
   const out = [];
   for (const c of all) {
     if (c.skip) continue;
     if (c.turns < 1) continue;
     if (!c.cwd || !isDir2(c.cwd)) continue;
-    if (c.cwd === roots.clawdDir || c.cwd === personaRoot || c.cwd.startsWith(personaRoot + import_node_path50.default.sep) || c.cwd.startsWith(roots.clawdDir + import_node_path50.default.sep)) {
+    if (c.cwd === roots.clawdDir || c.cwd === personaRoot || c.cwd.startsWith(personaRoot + import_node_path51.default.sep) || c.cwd.startsWith(roots.clawdDir + import_node_path51.default.sep)) {
       continue;
     }
     out.push({
@@ -58453,19 +58643,19 @@ async function scanExternalSessions(rootsIn) {
 }
 
 // src/session/import-ledger.ts
-var import_node_fs46 = __toESM(require("fs"), 1);
-var import_node_path51 = __toESM(require("path"), 1);
+var import_node_fs47 = __toESM(require("fs"), 1);
+var import_node_path52 = __toESM(require("path"), 1);
 var LEDGER_FILENAME = "session-import-ledger.json";
 function appendImportLedger(dataDir, entry) {
-  const file = import_node_path51.default.join(dataDir, LEDGER_FILENAME);
+  const file = import_node_path52.default.join(dataDir, LEDGER_FILENAME);
   let entries = [];
   try {
-    const parsed = JSON.parse(import_node_fs46.default.readFileSync(file, "utf8"));
+    const parsed = JSON.parse(import_node_fs47.default.readFileSync(file, "utf8"));
     if (Array.isArray(parsed)) entries = parsed;
   } catch {
   }
   entries.push(entry);
-  import_node_fs46.default.writeFileSync(file, JSON.stringify(entries, null, 2), { encoding: "utf8", mode: 384 });
+  import_node_fs47.default.writeFileSync(file, JSON.stringify(entries, null, 2), { encoding: "utf8", mode: 384 });
 }
 
 // src/handlers/session.ts
@@ -58958,7 +59148,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path62 = __toESM(require("path"), 1);
+var path63 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -58976,7 +59166,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path61 = __toESM(require("path"), 1);
+var path62 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -58989,42 +59179,42 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read", userWorkDir) {
-  const target = path61.resolve(absPath);
+  const target = path62.resolve(absPath);
   if (userWorkDir) {
-    const u = path61.resolve(userWorkDir);
-    const usep = u.endsWith(path61.sep) ? "" : path61.sep;
+    const u = path62.resolve(userWorkDir);
+    const usep = u.endsWith(path62.sep) ? "" : path62.sep;
     if (target === u || target.startsWith(u + usep)) return true;
   }
-  const root = path61.resolve(personaRoot);
-  const sep3 = root.endsWith(path61.sep) ? "" : path61.sep;
+  const root = path62.resolve(personaRoot);
+  const sep3 = root.endsWith(path62.sep) ? "" : path62.sep;
   if (!target.startsWith(root + sep3)) return false;
-  const rel = path61.relative(root, target);
+  const rel = path62.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId2 = rel.split(path61.sep)[0];
+  const personaId2 = rel.split(path62.sep)[0];
   if (!personaId2) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId2);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path61.resolve(personaRoot);
-  const target = path61.resolve(absPath);
-  const sep3 = root.endsWith(path61.sep) ? "" : path61.sep;
+  const root = path62.resolve(personaRoot);
+  const target = path62.resolve(absPath);
+  const sep3 = root.endsWith(path62.sep) ? "" : path62.sep;
   if (!target.startsWith(root + sep3)) return null;
-  const rel = path61.relative(root, target);
+  const rel = path62.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path61.sep)[0];
+  const id = rel.split(path62.sep)[0];
   return id || null;
 }
 function isPathWithin(dir, absPath) {
-  const d = path61.resolve(dir);
-  const t = path61.resolve(absPath);
-  const sep3 = d.endsWith(path61.sep) ? "" : path61.sep;
+  const d = path62.resolve(dir);
+  const t = path62.resolve(absPath);
+  const sep3 = d.endsWith(path62.sep) ? "" : path62.sep;
   return t === d || t.startsWith(d + sep3);
 }
 function isPathInGuestBoundary(personaRoot, personaId2, userWorkDir, absPath) {
   if (userWorkDir && isPathWithin(userWorkDir, absPath)) return true;
-  return personaIdFromPath(path61.resolve(absPath), personaRoot) === personaId2;
+  return personaIdFromPath(path62.resolve(absPath), personaRoot) === personaId2;
 }
 
 // src/handlers/history.ts
@@ -59077,7 +59267,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path62.join(personaRoot, pid),
+          path63.join(personaRoot, pid),
           personaRoot,
           "read",
           userWorkDir
@@ -59089,7 +59279,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path62.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
+    assertGuestPath(ctx, path63.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -59133,14 +59323,14 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path62.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
+    assertGuestPath(ctx, path63.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagents");
     const subs = await history.listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path62.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
+    assertGuestPath(ctx, path63.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagent-read");
     const res = await history.readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
@@ -59150,7 +59340,7 @@ function buildHistoryHandlers(deps) {
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path62.resolve(d.cwd), personaRoot, "read", userWorkDir)
+        (d) => isGuestPathAllowed(ctx.grants, path63.resolve(d.cwd), personaRoot, "read", userWorkDir)
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -59167,8 +59357,8 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path63 = __toESM(require("path"), 1);
-var os17 = __toESM(require("os"), 1);
+var path64 = __toESM(require("path"), 1);
+var os18 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
 function buildEnabledPluginNames(personaManager, personaId2) {
@@ -59208,23 +59398,23 @@ function buildWorkspaceHandlers(deps) {
   const list = async (frame, _client, ctx) => {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
-    const fallbackCwd = isGuest && personaRoot ? personaRoot : os17.homedir();
-    const resolvedCwd = path63.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path63.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const fallbackCwd = isGuest && personaRoot ? personaRoot : os18.homedir();
+    const resolvedCwd = path64.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path64.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list", usersRoot);
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path63.isAbsolute(args.path) ? path63.resolve(args.path) : path63.resolve(args.cwd, args.path);
+    const target = path64.isAbsolute(args.path) ? path64.resolve(args.path) : path64.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read", usersRoot);
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path63.resolve(args.cwd);
+    const cwdAbs = path64.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list", usersRoot);
     const list2 = await getSkillsForTool(args.tool ?? "claude", cwdAbs);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -59236,7 +59426,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path63.resolve(args.cwd);
+    const cwdAbs = path64.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list", usersRoot);
     if (args.tool === "codex") {
       return { response: { type: "agents:list", agents: [] } };
@@ -59258,20 +59448,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path65 = __toESM(require("path"), 1);
+var path66 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
-var import_node_child_process12 = require("child_process");
-var import_node_fs47 = __toESM(require("fs"), 1);
-var import_node_path52 = __toESM(require("path"), 1);
+var import_node_child_process13 = require("child_process");
+var import_node_fs48 = __toESM(require("fs"), 1);
+var import_node_path53 = __toESM(require("path"), 1);
 var import_node_util = require("util");
-var pexec = (0, import_node_util.promisify)(import_node_child_process12.execFile);
+var pexec = (0, import_node_util.promisify)(import_node_child_process13.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path52.default.resolve(p2);
+  const resolved = import_node_path53.default.resolve(p2);
   try {
-    return import_node_fs47.default.realpathSync(resolved);
+    return import_node_fs48.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -59345,7 +59535,7 @@ async function listGitBranches(cwd) {
 function assertGuestCwd(ctx, cwd, personaRoot, method, usersRoot) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
   const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
-  if (!isGuestPathAllowed(ctx.grants, path65.resolve(cwd), personaRoot, "read", userWorkDir)) {
+  if (!isGuestPathAllowed(ctx.grants, path66.resolve(cwd), personaRoot, "read", userWorkDir)) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -59836,7 +60026,9 @@ function buildFeishuAuthHandlers(deps) {
         type: "auth:getIdentity:ok",
         identity: record ? record.identity : null,
         // 决策 #15：设备属性，与登录态无关——UI"分享我的 Hub 标识"用
-        deviceId: deps.deviceId
+        deviceId: deps.deviceId,
+        // 过期时间戳（仅时间戳，token 本体永不出 ws）——UI 派生 过期/临期 提示
+        ttcTokenExpiresAt: record ? record.ttcTokenExpiresAt : null
       }
     };
   };
@@ -59862,11 +60054,20 @@ function ensureOwner3(ctx) {
     throw new ClawdError(ERROR_CODES.UNAUTHORIZED, "UNAUTHORIZED: device:* requires owner ctx");
   }
 }
+function rethrowLoginExpired(e) {
+  if (e instanceof CentralClientError && e.code === "UNAUTHORIZED") {
+    throw new ClawdError(
+      ERROR_CODES.VALIDATION_ERROR,
+      "LOGIN_EXPIRED: \u767B\u5F55\u51ED\u8BC1\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u5728\u8054\u7CFB\u4EBA\u9762\u677F\u91CD\u65B0\u767B\u5F55"
+    );
+  }
+  throw e;
+}
 function buildDeviceHandlers(deps) {
   const now = deps.now ?? Date.now;
   const list = async (_frame, _client, ctx) => {
     ensureOwner3(ctx);
-    const devices = await deps.listDevices();
+    const devices = await deps.listDevices().catch(rethrowLoginExpired);
     return {
       response: { type: "device:list:ok", devices }
     };
@@ -59882,7 +60083,7 @@ function buildDeviceHandlers(deps) {
         "TUNNEL_REQUIRED: \u672C\u673A\u672A\u5F00 tunnel\uFF0C\u5F00\u542F\u540E\u91CD\u8BD5"
       );
     }
-    const exchanged = await deps.exchange(args.deviceId);
+    const exchanged = await deps.exchange(args.deviceId).catch(rethrowLoginExpired);
     const url = args.url ?? exchanged.deviceUrl;
     if (!url) {
       throw new ClawdError(
@@ -59967,7 +60168,7 @@ function buildDeviceHandlers(deps) {
 }
 
 // src/handlers/meta.ts
-var import_node_os18 = __toESM(require("os"), 1);
+var import_node_os19 = __toESM(require("os"), 1);
 init_protocol();
 
 // src/handlers/method-grants.ts
@@ -60227,21 +60428,21 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.351".length > 0 ? "0.2.351" : "dev";
+var version = "0.2.353".length > 0 ? "0.2.353" : "dev";
 
 // src/cli-probe/probe.ts
-var fs59 = __toESM(require("fs"), 1);
-var path66 = __toESM(require("path"), 1);
+var fs60 = __toESM(require("fs"), 1);
+var path67 = __toESM(require("path"), 1);
 var PKG_NAME = "@clawos-dev/clawd";
 var BIN_NAME = "clawd";
 var MAX_PARENT_HOPS = 5;
 function probeGlobalCli(pathEnv) {
   if (!pathEnv) return null;
-  for (const dir of pathEnv.split(path66.delimiter)) {
+  for (const dir of pathEnv.split(path67.delimiter)) {
     if (!dir) continue;
     let real;
     try {
-      real = fs59.realpathSync(path66.join(dir, BIN_NAME));
+      real = fs60.realpathSync(path67.join(dir, BIN_NAME));
     } catch {
       continue;
     }
@@ -60251,15 +60452,15 @@ function probeGlobalCli(pathEnv) {
   return null;
 }
 function readOwnPackageVersion(entryPath) {
-  let dir = path66.dirname(entryPath);
+  let dir = path67.dirname(entryPath);
   for (let i = 0; i < MAX_PARENT_HOPS; i++) {
     try {
-      const raw = fs59.readFileSync(path66.join(dir, "package.json"), "utf8");
+      const raw = fs60.readFileSync(path67.join(dir, "package.json"), "utf8");
       const pkg = JSON.parse(raw);
       if (pkg.name !== PKG_NAME) return null;
       return typeof pkg.version === "string" && pkg.version ? pkg.version : null;
     } catch {
-      const parent = path66.dirname(dir);
+      const parent = path67.dirname(dir);
       if (parent === dir) return null;
       dir = parent;
     }
@@ -60295,7 +60496,7 @@ function buildReadyFrame(deps, client) {
   return {
     version,
     protocolVersion: PROTOCOL_VERSION,
-    hostname: import_node_os18.default.hostname(),
+    hostname: import_node_os19.default.hostname(),
     os: process.platform,
     tools,
     runningSessions: info.runningSessions,
@@ -60422,7 +60623,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path53 = __toESM(require("path"), 1);
+var import_node_path54 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -60502,12 +60703,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path53.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path53.default.isAbsolute(args.relPath) ? import_node_path53.default.resolve(args.relPath) : import_node_path53.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path54.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path54.default.isAbsolute(args.relPath) ? import_node_path54.default.resolve(args.relPath) : import_node_path54.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.signUrl", "group-acl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path53.default.isAbsolute(e.relPath) ? import_node_path53.default.resolve(e.relPath) : import_node_path53.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path54.default.isAbsolute(e.relPath) ? import_node_path54.default.resolve(e.relPath) : import_node_path54.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -60532,7 +60733,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path53.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
+    assertGuestAttachmentPath(ctx, import_node_path54.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -60547,8 +60748,8 @@ function buildAttachmentHandlers(deps) {
     if (!scope) {
       throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, `session ${args.sessionId} not found`);
     }
-    const cwdAbs = import_node_path53.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
-    const candidateAbs = import_node_path53.default.isAbsolute(args.relPath) ? import_node_path53.default.resolve(args.relPath) : import_node_path53.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path54.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
+    const candidateAbs = import_node_path54.default.isAbsolute(args.relPath) ? import_node_path54.default.resolve(args.relPath) : import_node_path54.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.groupAdd", "cwd-subtree");
     const from = args.origin === "agent" ? "agent" : ctx?.principal.kind === "owner" ? "owner" : "agent";
     const size = 0;
@@ -60607,19 +60808,19 @@ function buildAttachmentHandlers(deps) {
 
 // src/handlers/extension.ts
 var import_promises11 = __toESM(require("fs/promises"), 1);
-var import_node_path58 = __toESM(require("path"), 1);
+var import_node_path59 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/extension/bundle-zip.ts
 var import_promises8 = __toESM(require("fs/promises"), 1);
-var import_node_path54 = __toESM(require("path"), 1);
+var import_node_path55 = __toESM(require("path"), 1);
 var import_node_crypto15 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
   const zip = new import_jszip2.default();
   for (const rel of entries) {
-    const abs = import_node_path54.default.join(dir, rel);
+    const abs = import_node_path55.default.join(dir, rel);
     const content = await import_promises8.default.readFile(abs);
     zip.file(rel, content, { date: FIXED_DATE });
   }
@@ -60640,7 +60841,7 @@ async function listFilesSorted(rootDir) {
   return out;
 }
 async function walk(absRoot, relPrefix, out) {
-  const dirAbs = import_node_path54.default.join(absRoot, relPrefix);
+  const dirAbs = import_node_path55.default.join(absRoot, relPrefix);
   const entries = await import_promises8.default.readdir(dirAbs, { withFileTypes: true });
   for (const e of entries) {
     if (IGNORE_BASENAMES.has(e.name)) continue;
@@ -60694,25 +60895,25 @@ function computePublishCheck(args) {
 
 // src/extension/install-flow.ts
 var import_promises9 = __toESM(require("fs/promises"), 1);
-var import_node_path56 = __toESM(require("path"), 1);
-var import_node_os20 = __toESM(require("os"), 1);
+var import_node_path57 = __toESM(require("path"), 1);
+var import_node_os21 = __toESM(require("os"), 1);
 var import_node_crypto16 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
-var import_node_os19 = __toESM(require("os"), 1);
-var import_node_path55 = __toESM(require("path"), 1);
+var import_node_os20 = __toESM(require("os"), 1);
+var import_node_path56 = __toESM(require("path"), 1);
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path55.default.join(import_node_os19.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path56.default.join(import_node_os20.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
-  return import_node_path55.default.join(clawdHomeRoot(override), "extensions");
+  return import_node_path56.default.join(clawdHomeRoot(override), "extensions");
 }
 function publishedChannelsFile(override) {
-  return import_node_path55.default.join(clawdHomeRoot(override), "extensions-published.json");
+  return import_node_path56.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
 function bundleCacheRoot(override) {
-  return import_node_path55.default.join(clawdHomeRoot(override), "extension-bundles");
+  return import_node_path56.default.join(clawdHomeRoot(override), "extension-bundles");
 }
 
 // src/extension/install-flow.ts
@@ -60739,7 +60940,7 @@ async function installFromChannel(args, deps) {
     throw new InstallError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path56.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path57.default.isAbsolute(name)) {
       throw new InstallError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -60771,7 +60972,7 @@ async function installFromChannel(args, deps) {
     );
   }
   const localExtId = namespacedExtId(ownerSlug, channelRef.ownerPrincipalId);
-  const destDir = import_node_path56.default.join(deps.extensionsRoot, localExtId);
+  const destDir = import_node_path57.default.join(deps.extensionsRoot, localExtId);
   let destExists = false;
   try {
     await import_promises9.default.access(destDir);
@@ -60785,16 +60986,16 @@ async function installFromChannel(args, deps) {
     );
   }
   const stage = await import_promises9.default.mkdtemp(
-    import_node_path56.default.join(import_node_os20.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+    import_node_path57.default.join(import_node_os21.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path56.default.join(stage, name);
+      const dest = import_node_path57.default.join(stage, name);
       if (entry.dir) {
         await import_promises9.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises9.default.mkdir(import_node_path56.default.dirname(dest), { recursive: true });
+      await import_promises9.default.mkdir(import_node_path57.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises9.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -60815,8 +61016,8 @@ async function installFromChannel(args, deps) {
 
 // src/extension/update-flow.ts
 var import_promises10 = __toESM(require("fs/promises"), 1);
-var import_node_path57 = __toESM(require("path"), 1);
-var import_node_os21 = __toESM(require("os"), 1);
+var import_node_path58 = __toESM(require("path"), 1);
+var import_node_os22 = __toESM(require("os"), 1);
 var import_node_crypto17 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
 var UpdateError = class extends Error {
@@ -60832,11 +61033,11 @@ async function updateFromChannel(args, deps) {
     channelRef.extId,
     channelRef.ownerPrincipalId
   );
-  const liveDir = import_node_path57.default.join(deps.extensionsRoot, localExtId);
+  const liveDir = import_node_path58.default.join(deps.extensionsRoot, localExtId);
   const prevDir = `${liveDir}.prev`;
   let existingVersion;
   try {
-    const raw = await import_promises10.default.readFile(import_node_path57.default.join(liveDir, "manifest.json"), "utf8");
+    const raw = await import_promises10.default.readFile(import_node_path58.default.join(liveDir, "manifest.json"), "utf8");
     const parsed2 = ExtensionManifestSchema.safeParse(JSON.parse(raw));
     if (!parsed2.success) {
       throw new UpdateError(
@@ -60869,7 +61070,7 @@ async function updateFromChannel(args, deps) {
     throw new UpdateError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path57.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path58.default.isAbsolute(name)) {
       throw new UpdateError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -60904,16 +61105,16 @@ async function updateFromChannel(args, deps) {
   await import_promises10.default.rm(prevDir, { recursive: true, force: true });
   await import_promises10.default.rename(liveDir, prevDir);
   const stage = await import_promises10.default.mkdtemp(
-    import_node_path57.default.join(import_node_os21.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+    import_node_path58.default.join(import_node_os22.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path57.default.join(stage, name);
+      const dest = import_node_path58.default.join(stage, name);
       if (entry.dir) {
         await import_promises10.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises10.default.mkdir(import_node_path57.default.dirname(dest), { recursive: true });
+      await import_promises10.default.mkdir(import_node_path58.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises10.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -60980,7 +61181,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
       );
     }
   }
-  const manifestPath = import_node_path58.default.join(root, extId, "manifest.json");
+  const manifestPath = import_node_path59.default.join(root, extId, "manifest.json");
   const manifest = await readManifest(root, extId);
   const next = { ...manifest, version: newVersion };
   const tmp = `${manifestPath}.tmp`;
@@ -60988,7 +61189,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
   await import_promises11.default.rename(tmp, manifestPath);
 }
 async function readManifest(root, extId) {
-  const file = import_node_path58.default.join(root, extId, "manifest.json");
+  const file = import_node_path59.default.join(root, extId, "manifest.json");
   let raw;
   try {
     raw = await import_promises11.default.readFile(file, "utf8");
@@ -61072,7 +61273,7 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256, buffer } = await bundleExtensionDir(import_node_path58.default.join(deps.root, extId));
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path59.default.join(deps.root, extId));
     return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
@@ -61247,9 +61448,9 @@ function buildExtensionHandlers(deps) {
 }
 
 // src/app-builder/project-store.ts
-var import_node_fs48 = require("fs");
-var import_node_child_process13 = require("child_process");
-var import_node_path59 = require("path");
+var import_node_fs49 = require("fs");
+var import_node_child_process14 = require("child_process");
+var import_node_path60 = require("path");
 init_protocol();
 var PROJECTS_DIR = "projects";
 var META_FILE = ".clawd-project.json";
@@ -61263,19 +61464,19 @@ var ProjectStore = class {
   root;
   /** projects/<name>/.clawd-project.json 路径 */
   metaPath(name) {
-    return (0, import_node_path59.join)(this.projectsRoot(), name, META_FILE);
+    return (0, import_node_path60.join)(this.projectsRoot(), name, META_FILE);
   }
   /** projects/<name>/ 目录路径（cwd 用） */
   projectDir(name) {
-    return (0, import_node_path59.join)(this.projectsRoot(), name);
+    return (0, import_node_path60.join)(this.projectsRoot(), name);
   }
   projectsRoot() {
-    return (0, import_node_path59.join)(this.root, PROJECTS_DIR);
+    return (0, import_node_path60.join)(this.root, PROJECTS_DIR);
   }
   async list() {
     let entries;
     try {
-      entries = await import_node_fs48.promises.readdir(this.projectsRoot());
+      entries = await import_node_fs49.promises.readdir(this.projectsRoot());
     } catch (err) {
       if (err.code === "ENOENT") return [];
       throw err;
@@ -61283,7 +61484,7 @@ var ProjectStore = class {
     const out = [];
     for (const name of entries) {
       try {
-        const raw = await import_node_fs48.promises.readFile(this.metaPath(name), "utf8");
+        const raw = await import_node_fs49.promises.readFile(this.metaPath(name), "utf8");
         const json = JSON.parse(raw);
         let migrated = false;
         if (typeof json.devCommand !== "string" || json.devCommand.length === 0) {
@@ -61294,7 +61495,7 @@ var ProjectStore = class {
         if (parsed.success) {
           out.push(parsed.data);
           if (migrated) {
-            void import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
+            void import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
             });
           }
         }
@@ -61338,8 +61539,8 @@ var ProjectStore = class {
       throw new Error(`invalid name "${name}": ${validated.error.message}`);
     }
     const dir = this.projectDir(name);
-    await import_node_fs48.promises.mkdir(dir, { recursive: true });
-    await import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
+    await import_node_fs49.promises.mkdir(dir, { recursive: true });
+    await import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
     return meta;
   }
   /**
@@ -61353,7 +61554,7 @@ var ProjectStore = class {
   async scaffold(name, templateSrcDir, scaffoldScriptPath) {
     const destDir = this.projectDir(name);
     return await new Promise((resolve6, reject) => {
-      const child = (0, import_node_child_process13.spawn)("bash", [scaffoldScriptPath, name, templateSrcDir, destDir], {
+      const child = (0, import_node_child_process14.spawn)("bash", [scaffoldScriptPath, name, templateSrcDir, destDir], {
         env: { ...process.env, PATH: process.env.PATH ?? "" },
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -61382,7 +61583,7 @@ var ProjectStore = class {
   }
   async delete(name) {
     const dir = this.projectDir(name);
-    await import_node_fs48.promises.rm(dir, { recursive: true, force: true });
+    await import_node_fs49.promises.rm(dir, { recursive: true, force: true });
   }
   async updatePort(name, newPort) {
     if (newPort < PROJECT_PORT_MIN || newPort > PROJECT_PORT_MAX) {
@@ -61398,7 +61599,7 @@ var ProjectStore = class {
       throw new Error(`port ${newPort} already used / \u5DF2\u88AB project "${conflict.name}" \u5360\u7528`);
     }
     const updated = { ...target, port: newPort };
-    await import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
+    await import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
     return updated;
   }
   /**
@@ -61415,7 +61616,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`invalid prodUrl "${url}": ${validated.error.message}`);
     }
-    await import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
   /**
@@ -61436,7 +61637,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`invalid publishJob: ${validated.error.message}`);
     }
-    await import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
   /** 清掉 .clawd-project.json.publishJob 字段。其他字段保持原样。 */
@@ -61451,13 +61652,13 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`failed to clear publishJob: ${validated.error.message}`);
     }
-    await import_node_fs48.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
 };
 
 // src/app-builder/kill-port.ts
-var import_node_child_process14 = require("child_process");
+var import_node_child_process15 = require("child_process");
 async function killPortOccupants(port, ownedPids, logger) {
   let pids;
   try {
@@ -61499,7 +61700,7 @@ async function killPortOccupants(port, ownedPids, logger) {
 }
 function listPidsOnPort(port) {
   return new Promise((resolve6, reject) => {
-    (0, import_node_child_process14.execFile)(
+    (0, import_node_child_process15.execFile)(
       "lsof",
       ["-ti", `:${port}`],
       { timeout: 3e3 },
@@ -61571,9 +61772,9 @@ var PublishJobRegistry = class {
 };
 
 // src/app-builder/publish-job-runner.ts
-var import_node_child_process15 = require("child_process");
-var import_node_fs49 = require("fs");
-var import_node_path60 = require("path");
+var import_node_child_process16 = require("child_process");
+var import_node_fs50 = require("fs");
+var import_node_path61 = require("path");
 
 // src/app-builder/publish-stage-parser.ts
 var STAGE_RE = /^\s*::stage::(build|deploy|verify)\s*$/;
@@ -61600,19 +61801,19 @@ function tailStderrLines(buf, n) {
 // src/app-builder/publish-job-runner.ts
 async function startPublishJob(deps, args) {
   const { registry: registry2, projectDir } = deps;
-  const spawn12 = deps.spawnImpl ?? import_node_child_process15.spawn;
+  const spawn13 = deps.spawnImpl ?? import_node_child_process16.spawn;
   if (registry2.has(args.name)) {
     return { jobId: registry2.get(args.name).jobId, status: "already-publishing" };
   }
   const projDir = projectDir(args.name);
-  const logPath = (0, import_node_path60.join)(projDir, ".publish.log");
+  const logPath = (0, import_node_path61.join)(projDir, ".publish.log");
   let logStream = null;
   try {
-    logStream = (0, import_node_fs49.createWriteStream)(logPath, { flags: "w" });
+    logStream = (0, import_node_fs50.createWriteStream)(logPath, { flags: "w" });
   } catch {
     logStream = null;
   }
-  const child = spawn12("bash", [args.scriptPath, projDir, args.personaRoot ?? ""], {
+  const child = spawn13("bash", [args.scriptPath, projDir, args.personaRoot ?? ""], {
     cwd: projDir,
     env: process.env,
     stdio: ["ignore", "pipe", "pipe"]
@@ -61865,8 +62066,8 @@ async function recoverInterruptedJobs(deps) {
 
 // src/handlers/app-builder.ts
 init_protocol();
-var import_node_path61 = require("path");
-var import_node_fs50 = require("fs");
+var import_node_path62 = require("path");
+var import_node_fs51 = require("fs");
 var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
 var DEV_SERVER_READY_TIMEOUT_MS = 3e4;
 async function recoverInterruptedPublishJobs(store, logger) {
@@ -61947,7 +62148,7 @@ function buildAppBuilderHandlers(deps) {
   async function listAllUsersProjects() {
     if (!deps.usersRoot || !deps.getStore) return [];
     const getStore = deps.getStore;
-    const userIds = await import_node_fs50.promises.readdir(deps.usersRoot).catch(() => []);
+    const userIds = await import_node_fs51.promises.readdir(deps.usersRoot).catch(() => []);
     const perUser = await Promise.all(
       userIds.map((uid) => getStore(uid).list().catch(() => []))
     );
@@ -62016,8 +62217,8 @@ function buildAppBuilderHandlers(deps) {
     const project = await userStore.create(f.name, reservedPorts);
     try {
       const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(session.ownerPersonaId ?? "") : deps.personaRoot;
-      const templateSrcDir = (0, import_node_path61.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE);
-      const scaffoldScript = (0, import_node_path61.join)(deps.deployKitRoot, "scripts", "new-extension.sh");
+      const templateSrcDir = (0, import_node_path62.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE);
+      const scaffoldScript = (0, import_node_path62.join)(deps.deployKitRoot, "scripts", "new-extension.sh");
       const scaffoldResult = await userStore.scaffold(project.name, templateSrcDir, scaffoldScript);
       deps.logger?.info("app-builder.scaffold.done", {
         name: project.name,
@@ -62221,7 +62422,7 @@ function buildAppBuilderHandlers(deps) {
       await userStore.clearPublishJob(args.name);
     }
     const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(boundSession.ownerPersonaId ?? "") : deps.personaRoot;
-    const scriptPath = (0, import_node_path61.join)(deps.deployKitRoot, "scripts", "publish.sh");
+    const scriptPath = (0, import_node_path62.join)(deps.deployKitRoot, "scripts", "publish.sh");
     deps.logger?.info("app-builder.publish.start", {
       name: args.name,
       sessionId: boundSession.sessionId,
@@ -62641,7 +62842,7 @@ function buildVisitorHandlers(deps) {
 
 // src/extension/registry.ts
 var import_promises12 = __toESM(require("fs/promises"), 1);
-var import_node_path62 = __toESM(require("path"), 1);
+var import_node_path63 = __toESM(require("path"), 1);
 async function loadAll(root) {
   let entries;
   try {
@@ -62654,13 +62855,13 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path62.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path63.default.join(root, ent.name), ent.name));
   }
   records.sort((a, b2) => a.extId < b2.extId ? -1 : a.extId > b2.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path62.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path63.default.join(dir, "manifest.json");
   let raw;
   try {
     raw = await import_promises12.default.readFile(manifestPath, "utf8");
@@ -62705,7 +62906,7 @@ async function loadOne(dir, dirName) {
 
 // src/extension/uninstall.ts
 var import_promises13 = __toESM(require("fs/promises"), 1);
-var import_node_path63 = __toESM(require("path"), 1);
+var import_node_path64 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -62714,7 +62915,7 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path63.default.join(deps.root, deps.extId);
+  const dir = import_node_path64.default.join(deps.root, deps.extId);
   try {
     await import_promises13.default.access(dir);
   } catch {
@@ -62731,15 +62932,15 @@ var import_node_crypto19 = require("crypto");
 init_protocol();
 
 // src/peer-ops/run-command.ts
-var import_node_child_process16 = require("child_process");
-var import_node_os22 = __toESM(require("os"), 1);
+var import_node_child_process17 = require("child_process");
+var import_node_os23 = __toESM(require("os"), 1);
 var DEFAULT_TIMEOUT_MS4 = 3e4;
 var MAX_TIMEOUT_MS = 3e5;
 var MAX_OUTPUT_BYTES = 1048576;
 function runCommand(command, opts = {}) {
   const timeoutMs = Math.min(opts.timeoutMs ?? DEFAULT_TIMEOUT_MS4, MAX_TIMEOUT_MS);
   return new Promise((resolve6) => {
-    const child = (0, import_node_child_process16.spawn)("bash", ["-c", command], { cwd: import_node_os22.default.homedir() });
+    const child = (0, import_node_child_process17.spawn)("bash", ["-c", command], { cwd: import_node_os23.default.homedir() });
     const out = [];
     const err = [];
     let outBytes = 0;
@@ -62958,14 +63159,14 @@ function buildMethodHandlers(deps) {
 init_protocol();
 
 // src/tools/version-probe.ts
-var import_node_child_process17 = require("child_process");
+var import_node_child_process18 = require("child_process");
 init_claude();
 function parseVersionOutput(out) {
   return /(\d+\.\d+\.\d+)/.exec(out)?.[1];
 }
 function execVersion(bin) {
   return new Promise((resolve6, reject) => {
-    (0, import_node_child_process17.execFile)(bin, ["--version"], { timeout: 5e3 }, (err, stdout) => {
+    (0, import_node_child_process18.execFile)(bin, ["--version"], { timeout: 5e3 }, (err, stdout) => {
       if (err) reject(err);
       else resolve6(String(stdout));
     });
@@ -63076,7 +63277,7 @@ function buildOnboardingHandlers(deps) {
 }
 
 // src/app-builder/dev-server-supervisor.ts
-var import_node_child_process18 = require("child_process");
+var import_node_child_process19 = require("child_process");
 var import_node_events2 = require("events");
 var DEFAULT_READY_PATTERN = /Local:\s+https?:\/\/|Nest application successfully started|server listening on/i;
 var DevServerSupervisor = class extends import_node_events2.EventEmitter {
@@ -63113,7 +63314,7 @@ var DevServerSupervisor = class extends import_node_events2.EventEmitter {
       tunnelHost: args.tunnelHost,
       devCommand: cmd
     });
-    const child = (0, import_node_child_process18.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process19.spawn)("sh", ["-c", cmd], {
       cwd: args.cwd,
       env,
       stdio: "pipe",
@@ -63365,8 +63566,8 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 }
 
 // src/extension/runtime.ts
-var import_node_child_process19 = require("child_process");
-var import_node_path64 = __toESM(require("path"), 1);
+var import_node_child_process20 = require("child_process");
+var import_node_path65 = __toESM(require("path"), 1);
 var import_promises14 = require("timers/promises");
 
 // src/extension/port-allocator.ts
@@ -63467,13 +63668,13 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path64.default.join(this.root, extId);
+    const dir = import_node_path65.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
       CLAWOS_EXT_ID: extId
     };
-    const child = (0, import_node_child_process19.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process20.spawn)("sh", ["-c", cmd], {
       cwd: dir,
       env,
       stdio: ["ignore", "pipe", "pipe"],
@@ -63579,7 +63780,7 @@ ${handle.stderrTail}`
 
 // src/extension/published-channels.ts
 var import_promises15 = __toESM(require("fs/promises"), 1);
-var import_node_path65 = __toESM(require("path"), 1);
+var import_node_path66 = __toESM(require("path"), 1);
 init_zod();
 var PublishedChannelsError = class extends Error {
   constructor(code, message) {
@@ -63678,7 +63879,7 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises15.default.mkdir(import_node_path65.default.dirname(this.filePath), { recursive: true });
+    await import_promises15.default.mkdir(import_node_path66.default.dirname(this.filePath), { recursive: true });
     await import_promises15.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
     await import_promises15.default.rename(tmp, this.filePath);
   }
@@ -63686,7 +63887,7 @@ var PublishedChannelStore = class {
 
 // src/extension/bundle-cache.ts
 var import_promises16 = __toESM(require("fs/promises"), 1);
-var import_node_path66 = __toESM(require("path"), 1);
+var import_node_path67 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -63695,14 +63896,14 @@ var BundleCache = class {
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
     await import_promises16.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path66.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path67.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
     await import_promises16.default.writeFile(tmp, buffer, { mode: 384 });
     await import_promises16.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path66.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path67.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
       return await import_promises16.default.readFile(file);
     } catch (e) {
@@ -63712,7 +63913,7 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path66.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path67.default.join(this.rootDir, `${snapshotHash}.zip`);
     await import_promises16.default.rm(file, { force: true });
   }
 };
@@ -63733,26 +63934,26 @@ async function startDaemon(config) {
     },
     source: "daemon",
     sampling: logShippingCfg.sampling,
-    homeDir: import_node_os23.default.homedir()
+    homeDir: import_node_os24.default.homedir()
   });
-  const logDir = import_node_path67.default.join(config.dataDir, "log");
-  import_node_fs51.default.mkdirSync(logDir, { recursive: true });
+  const logDir = import_node_path68.default.join(config.dataDir, "log");
+  import_node_fs52.default.mkdirSync(logDir, { recursive: true });
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path67.default.join(logDir, "clawd.log"),
+    file: import_node_path68.default.join(logDir, "clawd.log"),
     logClient
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const screenIdleProbeLogger = createFileOnlyLogger({
-    file: import_node_path67.default.join(logDir, "screen-idle-probe.log"),
+    file: import_node_path68.default.join(logDir, "screen-idle-probe.log"),
     level: "debug"
   });
   logger.info("screen-idle probe logger enabled", {
-    file: import_node_path67.default.join(logDir, "screen-idle-probe.log")
+    file: import_node_path68.default.join(logDir, "screen-idle-probe.log")
   });
   const CAP_TARGETS = [
-    import_node_path67.default.join(logDir, "clawd.log"),
-    import_node_path67.default.join(logDir, "screen-idle-probe.log")
+    import_node_path68.default.join(logDir, "clawd.log"),
+    import_node_path68.default.join(logDir, "screen-idle-probe.log")
   ];
   const LOG_CAP_MAX_BYTES = 10 * 1024 * 1024;
   const LOG_CAP_KEEP_BYTES = 5 * 1024 * 1024;
@@ -63848,8 +64049,8 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path67.default.join(config.dataDir, "personas"));
-  const usersRoot = import_node_path67.default.join(config.dataDir, "users");
+  const personaStore = new PersonaStore(import_node_path68.default.join(config.dataDir, "personas"));
+  const usersRoot = import_node_path68.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -63872,7 +64073,7 @@ async function startDaemon(config) {
   retirePersonaBuilder({ store: personaStore, logger });
   const groupFileStore = new GroupFileStore({ dataDir: config.dataDir, logger });
   const dispatchStore = createDispatchStore({
-    filePath: import_node_path67.default.join(config.dataDir, "dispatch.json"),
+    filePath: import_node_path68.default.join(config.dataDir, "dispatch.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("dispatch store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
@@ -63887,18 +64088,18 @@ async function startDaemon(config) {
     now: () => Date.now(),
     onCompleted: (sid) => deliverPendingRef?.(sid)
   });
-  const here = typeof __dirname === "string" ? __dirname : import_node_path67.default.dirname((0, import_node_url4.fileURLToPath)(import_meta7.url));
+  const here = typeof __dirname === "string" ? __dirname : import_node_path68.default.dirname((0, import_node_url4.fileURLToPath)(import_meta7.url));
   const mcpConfigs = [];
   const mcpDaemonUrl = `http://127.0.0.1:${config.port}`;
   const dispatchServerCandidates = [
-    import_node_path67.default.join(here, "dispatch", "mcp-server.cjs"),
+    import_node_path68.default.join(here, "dispatch", "mcp-server.cjs"),
     // 生产 dist/index → dist/dispatch/mcp-server.cjs
-    import_node_path67.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
+    import_node_path68.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
-  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
+  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
   if (dispatchServerScriptPath) {
-    const dispatchLogPath = import_node_path67.default.join(logDir, "dispatch-mcp-server.log");
+    const dispatchLogPath = import_node_path68.default.join(logDir, "dispatch-mcp-server.log");
     const dispatchCfgPath = writeDispatchMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: dispatchServerScriptPath,
@@ -63918,12 +64119,12 @@ async function startDaemon(config) {
     });
   }
   const ticketServerCandidates = [
-    import_node_path67.default.join(here, "ticket", "mcp-server.cjs"),
-    import_node_path67.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
+    import_node_path68.default.join(here, "ticket", "mcp-server.cjs"),
+    import_node_path68.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
-  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
+  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
   if (ticketServerScriptPath) {
-    const ticketLogPath = import_node_path67.default.join(logDir, "ticket-mcp-server.log");
+    const ticketLogPath = import_node_path68.default.join(logDir, "ticket-mcp-server.log");
     const ticketCfgPath = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
@@ -63945,12 +64146,12 @@ async function startDaemon(config) {
     });
   }
   const shiftServerCandidates = [
-    import_node_path67.default.join(here, "shift", "mcp-server.cjs"),
-    import_node_path67.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
+    import_node_path68.default.join(here, "shift", "mcp-server.cjs"),
+    import_node_path68.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
-  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
+  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
   if (shiftServerScriptPath) {
-    const shiftLogPath = import_node_path67.default.join(logDir, "shift-mcp-server.log");
+    const shiftLogPath = import_node_path68.default.join(logDir, "shift-mcp-server.log");
     const shiftCfgPath = await writeShiftMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: shiftServerScriptPath,
@@ -63971,12 +64172,12 @@ async function startDaemon(config) {
     );
   }
   const inboxServerCandidates = [
-    import_node_path67.default.join(here, "inbox", "mcp-server.cjs"),
-    import_node_path67.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
+    import_node_path68.default.join(here, "inbox", "mcp-server.cjs"),
+    import_node_path68.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
   ];
-  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
+  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
   if (inboxServerScriptPath) {
-    const inboxLogPath = import_node_path67.default.join(logDir, "inbox-mcp-server.log");
+    const inboxLogPath = import_node_path68.default.join(logDir, "inbox-mcp-server.log");
     const inboxCfgPath = await writeInboxMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: inboxServerScriptPath,
@@ -63997,10 +64198,10 @@ async function startDaemon(config) {
     );
   }
   const peerOpsServerCandidates = [
-    import_node_path67.default.join(here, "peer-ops", "mcp-server.cjs"),
-    import_node_path67.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
+    import_node_path68.default.join(here, "peer-ops", "mcp-server.cjs"),
+    import_node_path68.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
   ];
-  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
+  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
   if (peerOpsServerScriptPath) {
     const peerOpsCfgPath = writePeerOpsMcpConfig({
       dataDir: config.dataDir,
@@ -64020,12 +64221,12 @@ async function startDaemon(config) {
     );
   }
   const rpcToolServerCandidates = [
-    import_node_path67.default.join(here, "rpc-tool", "mcp-server.cjs"),
-    import_node_path67.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
+    import_node_path68.default.join(here, "rpc-tool", "mcp-server.cjs"),
+    import_node_path68.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
   ];
-  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
+  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
   if (rpcToolServerScriptPath) {
-    const rpcToolLogPath = import_node_path67.default.join(logDir, "rpc-tool-mcp-server.log");
+    const rpcToolLogPath = import_node_path68.default.join(logDir, "rpc-tool-mcp-server.log");
     const rpcToolCfgPath = writeRpcToolMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: rpcToolServerScriptPath,
@@ -64046,7 +64247,7 @@ async function startDaemon(config) {
     );
   }
   const shiftStore = createShiftStore({
-    filePath: import_node_path67.default.join(config.dataDir, "shift.json"),
+    filePath: import_node_path68.default.join(config.dataDir, "shift.json"),
     ownerIdProvider: () => ownerPrincipalId,
     now: () => Date.now()
   });
@@ -64068,7 +64269,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path67.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path68.default.join(config.dataDir, "personas"),
     // dispatch / shift 自动化 spawn 按 persona 绑定 tool 起 B session（codex persona 用 codex）。
     // personaRegistry 声明在 manager 之后（同作用域 const，调用时机在启动完成后，无 TDZ 风险）。
     getPersonaDefaults: (personaId2) => personaRegistry.get(personaId2),
@@ -64100,6 +64301,9 @@ async function startDaemon(config) {
     // daemon 级 MCP server 登记表（dispatch / ticket / shift / inbox / ...，上方各 writer
     // 块写盘成功即登记）；reducer 透传到 SpawnContext.mcpConfigs，cc spawn 逐项 --mcp-config。
     mcpConfigs,
+    // 会话标题自产（首条 send 并行 fire，claude→haiku / codex→gpt-5.4-mini）。
+    // 不注入 = 功能关（manager 测试默认关闭防烧真调用），这里是唯一的生产装配点。
+    generateTitle: (tool, firstMessage) => generateSessionTitle(tool, firstMessage, { logger }),
     broadcastFrame: (frame, target) => {
       if (target === "all") {
         transport?.broadcastAll(frame);
@@ -64119,10 +64323,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path67.default.isAbsolute(input.relPath) ? input.relPath : import_node_path67.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path68.default.isAbsolute(input.relPath) ? input.relPath : import_node_path68.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs51.default.statSync(absPath).size;
+          size = import_node_fs52.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -64390,11 +64594,11 @@ async function startDaemon(config) {
         // 'persona/<pid>/owner'，default 走 'default'。
         getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
         // guest path guard：candidate 必须在 personaRoot 子树或调用者自己的 user-dir 下
-        personaRoot: import_node_path67.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path68.default.join(config.dataDir, "personas"),
         usersRoot
       },
       // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-      personaRoot: import_node_path67.default.join(config.dataDir, "personas"),
+      personaRoot: import_node_path68.default.join(config.dataDir, "personas"),
       // v2 多人 persona 隔离：handler 派生 guest user-dir 放行
       usersRoot,
       // v2 Phase 6: whoami handler 装在 owner principal.displayName + persona 解析
@@ -64520,11 +64724,11 @@ async function startDaemon(config) {
       // 发布上线脚手架化 (spec 2026-06-03 §5.2):
       // appBuilderPersonaRoot 用于拼 publish.sh 绝对路径（persona-app-builder 安装在
       // dataDir/personas/persona-app-builder 之下，extension-kit/scripts/publish.sh 是相对路径）。
-      appBuilderPersonaRoot: import_node_path67.default.join(config.dataDir, "personas", "persona-app-builder"),
+      appBuilderPersonaRoot: import_node_path68.default.join(config.dataDir, "personas", "persona-app-builder"),
       // 共享 deploy-kit 根：scaffold/publish 脚本骨架 + 阿里云凭证单一真源。
-      deployKitRoot: import_node_path67.default.join(config.dataDir, "deploy-kit"),
+      deployKitRoot: import_node_path68.default.join(config.dataDir, "deploy-kit"),
       // scaffold/publish 按当前 session 的 persona 解析其安装根，让每个 persona 用自己的模板/注入配置。
-      resolvePersonaRoot: (personaId2) => import_node_path67.default.join(config.dataDir, "personas", personaId2),
+      resolvePersonaRoot: (personaId2) => import_node_path68.default.join(config.dataDir, "personas", personaId2),
       // 发布上线脚手架化 (spec 2026-06-03 §5.2.2):
       // 复用 SessionManagerDeps.broadcastFrame 同款 dispatch 逻辑 —— runner 调 manager.send
       // 取回 broadcast 帧后逐帧 push 到 transport，跟 manager 自身的 deps 一致。
@@ -64567,7 +64771,7 @@ async function startDaemon(config) {
         sourceSessionId: args.sourceSessionId
       });
       const sourceFile = manager.findOwnedSession(args.sourceSessionId);
-      const sourceJsonlPath = resolveSourceJsonlPath(sourceFile, import_node_os23.default.homedir());
+      const sourceJsonlPath = resolveSourceJsonlPath(sourceFile, import_node_os24.default.homedir());
       logger.info("dispatch.spawnB.source-resolved", {
         dispatchId: args.dispatchId,
         sourceJsonlPath,
@@ -64629,7 +64833,7 @@ async function startDaemon(config) {
   });
   shiftScheduler.start();
   logger.info("shift scheduler started", { shiftCount: shiftStore.list().length });
-  const larkBotStore = createLarkBotBindingStore(import_node_path67.default.join(config.dataDir, "personas"));
+  const larkBotStore = createLarkBotBindingStore(import_node_path68.default.join(config.dataDir, "personas"));
   const larkBotCloud = createLarkBotCloudClient({
     api: config.clawosApi ?? DEFAULT_CLAWOS_API,
     apiKey: resolveClawdTicketsApiKey(),
@@ -64643,7 +64847,7 @@ async function startDaemon(config) {
     store: larkBotStore,
     fetchResource: (appId, messageId, fileKey, maxBytes, type) => larkBotCloud.fetchResource(appId, messageId, fileKey, maxBytes, type),
     // 图片落 guest userWorkDir 下（capId = lark-<chat_id>）：CC 经 --add-dir + allowRead carve 可 Read
-    mediaRootFor: (chatId) => import_node_path67.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
+    mediaRootFor: (chatId) => import_node_path68.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
     isShuttingDown: () => larkDraining,
     logger: {
       warn: (msg) => logger.warn(msg),
@@ -64947,8 +65151,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path67.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path67.default.join(logDir, "frpc.log")}`
+        `Frpc config: ${import_node_path68.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path68.default.join(logDir, "frpc.log")}`
       ];
       const width2 = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width2 + 4);
@@ -64961,8 +65165,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path67.default.join(config.dataDir, "connect.txt");
-        import_node_fs51.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path68.default.join(config.dataDir, "connect.txt");
+        import_node_fs52.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -65037,9 +65241,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path67.default.join(dataDir, "persons");
+  const dir = import_node_path68.default.join(dataDir, "persons");
   try {
-    import_node_fs51.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs52.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }