@clawos-dev/clawd 0.2.375 → 0.2.377

package/dist/cli.cjs

@@ -450,8 +450,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path86, errorMaps, issueData } = params;
-      const fullPath = [...path86, ...issueData.path || []];
+      const { data, path: path87, errorMaps, issueData } = params;
+      const fullPath = [...path87, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -762,11 +762,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path86, key) {
+      constructor(parent, value, path87, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path86;
+        this._path = path87;
         this._key = key;
       }
       get path() {
@@ -6913,7 +6913,7 @@ var init_principal = __esm({
 });
 
 // ../protocol/src/schemas.ts
-var SessionStatusSchema, UsageSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, SelectOptionSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, ToolFeaturesSchema, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, TURN_END_REASONS, ParsedEventSchema, SessionCreateArgs, ProjectEntry, ProjectCreateArgs, SessionImportExternalArgs, SessionListArgs, SessionIdArgs, SessionUpdateArgs, SessionSendArgs, SessionInterruptArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsArgs, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionCurrentTurnSenderArgs, SessionSubscribeArgs, SessionPinArgs, SessionArchiveArgs, PeerSessionUpsertArgs, PeerSessionUpsertResponseSchema, PeerSessionRemoveArgs, PeerSessionRemoveResponseSchema, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, HistoryRecentDirsArgs, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, ClientInfoSchema, AuthRequestFrameSchema, AuthOkFrameSchema, DeviceConnectionEntrySchema, DeviceConnectionsResponseSchema, TunnelReadyEventSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema, PROJECT_PORT_MIN, PROJECT_PORT_MAX, projectNameRegex, DEFAULT_DEV_COMMAND, ProjectMetadataSchema, PROJECT_STAGE_VALUES, ProjectStageSchema, ProjectWithStatusSchema, ListProjectsArgsSchema, ListProjectsResultSchema, GetProjectArgsSchema, GetProjectResultSchema, CreateProjectArgsSchema, CreateProjectResultSchema, DeleteProjectArgsSchema, DeleteProjectResultSchema, UpdateProjectPortArgsSchema, UpdateProjectPortResultSchema, SetProdUrlArgsSchema, SetProdUrlResultSchema, StartDevServerArgsSchema, StartDevServerResultSchema, ASSISTANT_REPORTABLE_STAGES, ReportStageArgsSchema, ReportStageResultSchema, StopDevServerArgsSchema, StopDevServerResultSchema, AppBuilderProjectUpdatedEventSchema, PublishArgsSchema, PublishResultSchema, DismissPublishJobArgsSchema, DismissPublishJobResultSchema, AppBuilderPublishProgressEventSchema, AppBuilderPublishFailedEventSchema;
+var SessionStatusSchema, UsageSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, SelectOptionSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, ToolFeaturesSchema, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, TURN_END_REASONS, ParsedEventSchema, SessionCreateArgs, ProjectEntry, ProjectPatchArgs, ProjectRevealArgs, ProjectCreateArgs, SessionImportExternalArgs, SessionListArgs, SessionIdArgs, SessionUpdateArgs, SessionSendArgs, SessionInterruptArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsArgs, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionCurrentTurnSenderArgs, SessionSubscribeArgs, SessionPinArgs, SessionArchiveArgs, PeerSessionUpsertArgs, PeerSessionUpsertResponseSchema, PeerSessionRemoveArgs, PeerSessionRemoveResponseSchema, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, HistoryRecentDirsArgs, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, ClientInfoSchema, AuthRequestFrameSchema, AuthOkFrameSchema, DeviceConnectionEntrySchema, DeviceConnectionsResponseSchema, TunnelReadyEventSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema, PROJECT_PORT_MIN, PROJECT_PORT_MAX, projectNameRegex, DEFAULT_DEV_COMMAND, ProjectMetadataSchema, PROJECT_STAGE_VALUES, ProjectStageSchema, ProjectWithStatusSchema, ListProjectsArgsSchema, ListProjectsResultSchema, GetProjectArgsSchema, GetProjectResultSchema, CreateProjectArgsSchema, CreateProjectResultSchema, DeleteProjectArgsSchema, DeleteProjectResultSchema, UpdateProjectPortArgsSchema, UpdateProjectPortResultSchema, SetProdUrlArgsSchema, SetProdUrlResultSchema, StartDevServerArgsSchema, StartDevServerResultSchema, ASSISTANT_REPORTABLE_STAGES, ReportStageArgsSchema, ReportStageResultSchema, StopDevServerArgsSchema, StopDevServerResultSchema, AppBuilderProjectUpdatedEventSchema, PublishArgsSchema, PublishResultSchema, DismissPublishJobArgsSchema, DismissPublishJobResultSchema, AppBuilderPublishProgressEventSchema, AppBuilderPublishFailedEventSchema;
 var init_schemas = __esm({
   "../protocol/src/schemas.ts"() {
     "use strict";
@@ -7416,7 +7416,17 @@ var init_schemas = __esm({
       path: external_exports.string().min(1),
       /** 展示名，缺省 basename */
       name: external_exports.string().min(1),
-      createdAt: external_exports.string().datetime()
+      createdAt: external_exports.string().datetime(),
+      /** 置顶时间（ms epoch，与 SessionFile.pinnedAt 同语义）。clawd-local，不同步 Codex */
+      pinnedAt: external_exports.number().optional()
+    });
+    ProjectPatchArgs = external_exports.object({
+      path: external_exports.string().min(1),
+      /** number = 置顶（ms epoch）；null = 取消置顶 */
+      pinnedAt: external_exports.number().nullable()
+    });
+    ProjectRevealArgs = external_exports.object({
+      path: external_exports.string().min(1)
     });
     ProjectCreateArgs = external_exports.object({
       // 在现成目录上登记 project；不传则按 name 在 Codex 的 project 根下新建目录 + git init
@@ -8177,8 +8187,19 @@ var init_methods = __esm({
         args: NO_ARGS
       },
       "project:create": {
-        summary: "\u65B0\u5EFA project\uFF1A\u6821\u9A8C\u76EE\u5F55\u5B58\u5728 + \u975E ~/.clawd \u5B50\u6811\uFF0Cupsert \u8FDB ~/.clawd/projects.json\uFF08owner-only\uFF09",
-        args: ProjectCreateArgs
+        summary: "\u65B0\u5EFA project\uFF1A\u6821\u9A8C\u76EE\u5F55\u5B58\u5728 + \u975E ~/.clawd \u5B50\u6811\uFF0Cupsert \u8FDB ~/.clawd/projects.json\uFF08owner-only\uFF09\u3002**path \u4E0E name \u81F3\u5C11\u4F20\u4E00\u4E2A**",
+        args: ProjectCreateArgs,
+        argsConstraints: {
+          anyOf: [{ required: ["path"] }, { required: ["name"] }]
+        }
+      },
+      "project:patch": {
+        summary: "\u7F6E\u9876 / \u53D6\u6D88\u7F6E\u9876 project\uFF08owner-only\uFF0CpinnedAt=null \u53D6\u6D88\uFF09\u3002clawd-local\uFF0C\u4E0D\u5199 Codex \u7684 pinned-project-ids",
+        args: ProjectPatchArgs
+      },
+      "project:reveal": {
+        summary: "\u5728 Finder \u4E2D\u663E\u793A\u9879\u76EE\u76EE\u5F55\uFF08owner-only\uFF0Cdarwin\uFF09",
+        args: ProjectRevealArgs
       },
       "workspace:list": {
         summary: "\u5217\u76EE\u5F55\u5185\u5BB9\uFF08\u6587\u4EF6\u6D4F\u89C8\uFF09\uFF1Bguest \u88AB\u9650\u5236\u5728\u88AB\u6388\u6743 persona \u5B50\u6811\u5185",
@@ -9003,8 +9024,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path86 = req.path;
-        _req.url = typeof path86 === "string" ? path86 : req.url ? req.url.path || req.url : void 0;
+        const path87 = req.path;
+        _req.url = typeof path87 === "string" ? path87 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -9169,14 +9190,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path86) {
+    function parsePath(path87) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path86.length; i++) {
-        const char = path86[i];
+      for (let i = 0; i < path87.length; i++) {
+        const char = path87[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -9307,10 +9328,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path86 of paths) {
-        const parts = parsePath(path86);
+      for (const path87 of paths) {
+        const parts = parsePath(path87);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path86, remove);
+          redactWildcardPath(obj, parts, censor, path87, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -9395,8 +9416,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path86) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path86];
+            const wrappedCensor = typeof censor === "function" ? (value, path87) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path87];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -9431,8 +9452,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path86 of pathsToClone) {
-        const parts = parsePath(path86);
+      for (const path87 of pathsToClone) {
+        const parts = parsePath(path87);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -9484,24 +9505,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path86) {
-      if (typeof path86 !== "string") {
+    function validatePath(path87) {
+      if (typeof path87 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path86 === "") {
+      if (path87 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path86.includes("..")) {
-        throw new Error(`Invalid redaction path (${path86})`);
+      if (path87.includes("..")) {
+        throw new Error(`Invalid redaction path (${path87})`);
       }
-      if (path86.includes(",")) {
-        throw new Error(`Invalid redaction path (${path86})`);
+      if (path87.includes(",")) {
+        throw new Error(`Invalid redaction path (${path87})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path86.length; i++) {
-        const char = path86[i];
+      for (let i = 0; i < path87.length; i++) {
+        const char = path87[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -9515,20 +9536,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path86})`);
+            throw new Error(`Invalid redaction path (${path87})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path86})`);
+        throw new Error(`Invalid redaction path (${path87})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path86 of paths) {
-        validatePath(path86);
+      for (const path87 of paths) {
+        validatePath(path87);
       }
     }
     function slowRedact(options = {}) {
@@ -9696,8 +9717,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path86) => {
-            return censor(value, [k2, ...path86]);
+          const wrappedCensor = typeof censor === "function" ? (value, path87) => {
+            return censor(value, [k2, ...path87]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -9918,7 +9939,7 @@ var require_sonic_boom = __commonJS({
     var fs77 = require("fs");
     var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
-    var path86 = require("path");
+    var path87 = require("path");
     var sleep2 = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -9972,7 +9993,7 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs77.mkdirSync(path86.dirname(file), { recursive: true });
+          if (sonic.mkdir) fs77.mkdirSync(path87.dirname(file), { recursive: true });
           const fd = fs77.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
@@ -9980,7 +10001,7 @@ var require_sonic_boom = __commonJS({
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs77.mkdir(path86.dirname(file), { recursive: true }, (err) => {
+        fs77.mkdir(path87.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
           fs77.open(file, flags, mode, fileOpened);
         });
@@ -12840,7 +12861,7 @@ var require_multistream = __commonJS({
 var require_pino = __commonJS({
   "../node_modules/.pnpm/pino@9.14.0/node_modules/pino/pino.js"(exports2, module2) {
     "use strict";
-    var os28 = require("os");
+    var os29 = require("os");
     var stdSerializers = require_pino_std_serializers();
     var caller = require_caller();
     var redaction = require_redaction();
@@ -12887,7 +12908,7 @@ var require_pino = __commonJS({
     } = symbols;
     var { epochTime, nullTime } = time;
     var { pid } = process;
-    var hostname = os28.hostname();
+    var hostname = os29.hostname();
     var defaultErrorSerializer = stdSerializers.err;
     var defaultOptions2 = {
       level: "info",
@@ -13611,11 +13632,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path86, added, removed, oldPosInc, options) {
-        var last = path86.lastComponent;
+      addToPath: function addToPath(path87, added, removed, oldPosInc, options) {
+        var last = path87.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path86.oldPos + oldPosInc,
+            oldPos: path87.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -13625,7 +13646,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path86.oldPos + oldPosInc,
+            oldPos: path87.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -14157,10 +14178,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec4 = m2;
-      const path86 = typeof rec4.path === "string" ? rec4.path : null;
+      const path87 = typeof rec4.path === "string" ? rec4.path : null;
       const content = typeof rec4.content === "string" ? rec4.content : null;
-      if (!path86 || content == null) return null;
-      const entry = { path: path86, content };
+      if (!path87 || content == null) return null;
+      const entry = { path: path87, content };
       if (typeof rec4.mtimeMs === "number") entry.mtimeMs = rec4.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -15011,10 +15032,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec4 = m2;
-      const path86 = typeof rec4.path === "string" ? rec4.path : null;
+      const path87 = typeof rec4.path === "string" ? rec4.path : null;
       const content = typeof rec4.content === "string" ? rec4.content : null;
-      if (!path86 || content == null) return null;
-      const out = { path: path86, content };
+      if (!path87 || content == null) return null;
+      const out = { path: path87, content };
       if (typeof rec4.mtimeMs === "number") out.mtimeMs = rec4.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -35375,8 +35396,8 @@ var require_lib2 = __commonJS({
         return this;
       }
       var p2 = this.constructor;
-      return this.then(resolve9, reject2);
-      function resolve9(value) {
+      return this.then(resolve10, reject2);
+      function resolve10(value) {
         function yes() {
           return value;
         }
@@ -35529,8 +35550,8 @@ var require_lib2 = __commonJS({
       }
       return out;
     }
-    Promise2.resolve = resolve8;
-    function resolve8(value) {
+    Promise2.resolve = resolve9;
+    function resolve9(value) {
       if (value instanceof this) {
         return value;
       }
@@ -35988,8 +36009,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path86) {
-      var parts = path86.split("/");
+    exports2.resolve = function(path87) {
+      var parts = path87.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -36062,10 +36083,10 @@ var require_utils = __commonJS({
       var promise = external.Promise.resolve(inputData).then(function(data) {
         var isBlob = support.blob && (data instanceof Blob || ["[object File]", "[object Blob]"].indexOf(Object.prototype.toString.call(data)) !== -1);
         if (isBlob && typeof FileReader !== "undefined") {
-          return new external.Promise(function(resolve8, reject) {
+          return new external.Promise(function(resolve9, reject) {
             var reader = new FileReader();
             reader.onload = function(e) {
-              resolve8(e.target.result);
+              resolve9(e.target.result);
             };
             reader.onerror = function(e) {
               reject(e.target.error);
@@ -36620,7 +36641,7 @@ var require_StreamHelper = __commonJS({
       }
     }
     function accumulate(helper, updateCallback) {
-      return new external.Promise(function(resolve8, reject) {
+      return new external.Promise(function(resolve9, reject) {
         var dataArray = [];
         var chunkType = helper._internalType, resultType = helper._outputType, mimeType = helper._mimeType;
         helper.on("data", function(data, meta) {
@@ -36634,7 +36655,7 @@ var require_StreamHelper = __commonJS({
         }).on("end", function() {
           try {
             var result = transformZipOutput(resultType, concat(chunkType, dataArray), mimeType);
-            resolve8(result);
+            resolve9(result);
           } catch (e) {
             reject(e);
           }
@@ -41842,18 +41863,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path86) {
-      if (path86.slice(-1) === "/") {
-        path86 = path86.substring(0, path86.length - 1);
+    var parentFolder = function(path87) {
+      if (path87.slice(-1) === "/") {
+        path87 = path87.substring(0, path87.length - 1);
       }
-      var lastSlash = path86.lastIndexOf("/");
-      return lastSlash > 0 ? path86.substring(0, lastSlash) : "";
+      var lastSlash = path87.lastIndexOf("/");
+      return lastSlash > 0 ? path87.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path86) {
-      if (path86.slice(-1) !== "/") {
-        path86 += "/";
+    var forceTrailingSlash = function(path87) {
+      if (path87.slice(-1) !== "/") {
+        path87 += "/";
       }
-      return path86;
+      return path87;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -42747,7 +42768,7 @@ var require_load = __commonJS({
     var Crc32Probe = require_Crc32Probe();
     var nodejsUtils = require_nodejsUtils();
     function checkEntryCRC32(zipEntry) {
-      return new external.Promise(function(resolve8, reject) {
+      return new external.Promise(function(resolve9, reject) {
         var worker = zipEntry.decompressed.getContentWorker().pipe(new Crc32Probe());
         worker.on("error", function(e) {
           reject(e);
@@ -42755,7 +42776,7 @@ var require_load = __commonJS({
           if (worker.streamInfo.crc32 !== zipEntry.decompressed.crc32) {
             reject(new Error("Corrupted zip : CRC32 mismatch"));
           } else {
-            resolve8();
+            resolve9();
           }
         }).resume();
       });
@@ -42860,11 +42881,11 @@ function startRunCaseRecorder(opts) {
   let closing = false;
   let closedSettled = false;
   let closedResolve;
-  const closed = new Promise((resolve8) => {
+  const closed = new Promise((resolve9) => {
     closedResolve = () => {
       if (closedSettled) return;
       closedSettled = true;
-      resolve8();
+      resolve9();
     };
   });
   const ensureStream = () => {
@@ -42956,8 +42977,8 @@ async function runController(opts) {
   let exitCode = null;
   let procExited = false;
   let resolveProcExit;
-  const procExitPromise = new Promise((resolve8) => {
-    resolveProcExit = resolve8;
+  const procExitPromise = new Promise((resolve9) => {
+    resolveProcExit = resolve9;
   });
   const writeEvent = (event) => {
     try {
@@ -44402,6 +44423,12 @@ function buildConnectionPrompt(args) {
     }
     parts.push(line);
   }
+  if (args.mode === "guest" && args.guestDeviceId) {
+    parts.push("");
+    parts.push(
+      `\u5BF9\u65B9\u8BF4\u7684\u300C\u6211\u7684\u684C\u9762 / \u6211\u672C\u5730\u7684\u2026\u300D\u662F\u4ED6\u90A3\u53F0\u8BBE\u5907\u3001\u4E0D\u662F\u672C\u673A\uFF1B\u8981\u5728\u90A3\u8FB9\u770B\u6587\u4EF6\u6216\u8DD1\u547D\u4EE4\uFF0C\u7528 peer-ops \u7684 exec\uFF0CpeerDeviceId \u586B ${args.guestDeviceId}\u3002`
+    );
+  }
   parts.push("");
   if (args.mode === "owner") {
     parts.push("\u81EA\u6211\u4ECB\u7ECD\u65F6\u4F7F\u7528\u7B2C\u4E00/\u7B2C\u4E8C\u4EBA\u79F0\uFF0C\u4F8B\u5982\u300C\u6211\u662F\u60A8\u7684 xxx \u52A9\u624B\u300D\u3002");
@@ -45389,8 +45416,8 @@ function startRecorder(opts) {
   const filePath = import_node_path6.default.join(dir, `${tsForFilename(now())}.jsonl`);
   let stream = null;
   let closedResolve;
-  const closed = new Promise((resolve8) => {
-    closedResolve = resolve8;
+  const closed = new Promise((resolve9) => {
+    closedResolve = resolve9;
   });
   let exited = false;
   const ensureStream = () => {
@@ -45523,13 +45550,13 @@ var SessionRunner = class {
   // 已经停止则立即 resolve；超时（默认 3000ms）抛错由上层透传成 RPC error
   async waitUntilStopped(timeoutMs = DEFAULT_WAIT_STOP_TIMEOUT_MS) {
     if (!this.state.procAlive) return;
-    return new Promise((resolve8, reject) => {
+    return new Promise((resolve9, reject) => {
       let settled = false;
       const onStop = () => {
         if (settled) return;
         settled = true;
         clearTimeout(timer);
-        resolve8();
+        resolve9();
       };
       const timer = setTimeout(() => {
         if (settled) return;
@@ -45629,7 +45656,7 @@ var SessionRunner = class {
     };
     const payload = JSON.stringify(frame) + "\n";
     const timeoutMs = opts.timeoutMs ?? DEFAULT_CONTROL_REQUEST_TIMEOUT_MS;
-    return new Promise((resolve8, reject) => {
+    return new Promise((resolve9, reject) => {
       const timer = setTimeout(() => {
         const pending = this.pendingControlRequests.get(requestId);
         if (!pending) return;
@@ -45637,7 +45664,7 @@ var SessionRunner = class {
         reject(new Error(`control_request timeout: ${subtype}`));
       }, timeoutMs);
       timer.unref?.();
-      this.pendingControlRequests.set(requestId, { resolve: resolve8, reject, timer });
+      this.pendingControlRequests.set(requestId, { resolve: resolve9, reject, timer });
       try {
         proc.stdin?.write(payload);
         this.recorder?.tapStdinWrite(payload);
@@ -48182,12 +48209,19 @@ var SessionManager = class {
 
 // src/projects/store.ts
 var fs11 = __toESM(require("fs"), 1);
-var os5 = __toESM(require("os"), 1);
-var path12 = __toESM(require("path"), 1);
+var os6 = __toESM(require("os"), 1);
+var path13 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/projects/codex-registry.ts
 var fs10 = __toESM(require("fs"), 1);
+var os5 = __toESM(require("os"), 1);
+var path12 = __toESM(require("path"), 1);
+function normalizeProjectPath(p2) {
+  const home = os5.homedir();
+  const expanded = p2 === "~" ? home : p2.startsWith("~/") ? path12.join(home, p2.slice(2)) : p2;
+  return path12.resolve(expanded);
+}
 function readCodexProjects(opts) {
   let raw;
   try {
@@ -48225,6 +48259,8 @@ var ProjectsStore = class {
   }
   opts;
   entries = [];
+  /** 见 ProjectAnnotation；与 entries 一起持久化在 projects.json */
+  annotations = {};
   load() {
     let raw;
     try {
@@ -48235,26 +48271,29 @@ var ProjectsStore = class {
     try {
       const parsed = JSON.parse(raw);
       this.entries = (parsed.projects ?? []).map((p2) => ProjectEntry.parse(p2)).filter((e) => this.isProjectablePath(e.path));
+      this.annotations = typeof parsed.annotations === "object" && parsed.annotations !== null ? parsed.annotations : {};
     } catch (err) {
       this.opts.logger?.warn("projects.json corrupt, rebuilding", { err: String(err) });
       this.entries = [];
+      this.annotations = {};
     }
   }
   save() {
-    fs11.mkdirSync(path12.dirname(this.opts.file), { recursive: true });
-    fs11.writeFileSync(this.opts.file, JSON.stringify({ projects: this.entries }, null, 2));
+    fs11.mkdirSync(path13.dirname(this.opts.file), { recursive: true });
+    fs11.writeFileSync(
+      this.opts.file,
+      JSON.stringify({ projects: this.entries, annotations: this.annotations }, null, 2)
+    );
   }
   normalize(p2) {
-    const home = os5.homedir();
-    const expanded = p2 === "~" ? home : p2.startsWith("~/") ? path12.join(home, p2.slice(2)) : p2;
-    return path12.resolve(expanded);
+    return normalizeProjectPath(p2);
   }
   isProjectablePath(p2) {
     const abs = this.normalize(p2);
-    const rel = path12.relative(path12.resolve(this.opts.clawdDir), abs);
-    const insideClawd = !(rel.startsWith("..") || path12.isAbsolute(rel));
+    const rel = path13.relative(path13.resolve(this.opts.clawdDir), abs);
+    const insideClawd = !(rel.startsWith("..") || path13.isAbsolute(rel));
     if (insideClawd) return false;
-    if (abs === path12.resolve(os5.homedir()) || abs === path12.parse(abs).root) return false;
+    if (abs === path13.resolve(os6.homedir()) || abs === path13.parse(abs).root) return false;
     return true;
   }
   list() {
@@ -48290,7 +48329,27 @@ var ProjectsStore = class {
         });
       }
     }
-    return [...byPath.values()];
+    return [...byPath.entries()].map(([abs, e]) => {
+      const ann = this.annotations[abs];
+      if (!ann || ann.pinnedAt === void 0) return e;
+      return { ...e, pinnedAt: ann.pinnedAt };
+    });
+  }
+  codexHasPath(abs) {
+    if (!this.opts.codexStateFile) return false;
+    return readCodexProjects({ stateFile: this.opts.codexStateFile, logger: this.opts.logger }).some(
+      (c) => this.normalize(c.path) === abs
+    );
+  }
+  /** 置顶 / 取消置顶（null）。clawd-local，不写 Codex。false = 路径不在项目列表里 */
+  patch(rawPath, fields) {
+    const abs = this.normalize(rawPath);
+    const row = this.entries.find((e) => e.path === abs);
+    if (!row && !this.codexHasPath(abs)) return false;
+    if (fields.pinnedAt === null) delete this.annotations[abs];
+    else this.annotations[abs] = { pinnedAt: fields.pinnedAt };
+    this.save();
+    return true;
   }
   upsert(rawPath, name) {
     const entry = this.add(rawPath, name);
@@ -48305,7 +48364,7 @@ var ProjectsStore = class {
     if (existing) return existing;
     const entry = {
       path: abs,
-      name: name ?? path12.basename(abs),
+      name: name ?? path13.basename(abs),
       createdAt: (this.opts.now ?? (() => (/* @__PURE__ */ new Date()).toISOString()))()
     };
     this.entries.push(entry);
@@ -48314,12 +48373,12 @@ var ProjectsStore = class {
 };
 
 // src/tools/codex-home.ts
-var path13 = __toESM(require("path"), 1);
-var norm = (p2) => path13.resolve(p2);
+var path14 = __toESM(require("path"), 1);
+var norm = (p2) => path14.resolve(p2);
 function resolveCodexHome(input) {
   const cwd = norm(input.cwd);
-  const rel = path13.relative(norm(input.personaRoot), cwd);
-  const isPersonaRoot = rel !== "" && !rel.startsWith("..") && !path13.isAbsolute(rel) && !rel.includes(path13.sep);
+  const rel = path14.relative(norm(input.personaRoot), cwd);
+  const isPersonaRoot = rel !== "" && !rel.startsWith("..") && !path14.isAbsolute(rel) && !rel.includes(path14.sep);
   if (isPersonaRoot) return input.sharedHome;
   if (input.projectPaths.some((p2) => norm(p2) === cwd)) return input.sharedHome;
   return input.isolatedHome;
@@ -48327,7 +48386,7 @@ function resolveCodexHome(input) {
 
 // src/persona/store.ts
 var fs12 = __toESM(require("fs"), 1);
-var path14 = __toESM(require("path"), 1);
+var path15 = __toESM(require("path"), 1);
 init_protocol();
 var PersonaStore = class {
   constructor(root) {
@@ -48336,18 +48395,18 @@ var PersonaStore = class {
   }
   root;
   personaDir(personaId2) {
-    return path14.join(this.root, safeFileName(personaId2));
+    return path15.join(this.root, safeFileName(personaId2));
   }
   metaPath(personaId2) {
-    return path14.join(this.personaDir(personaId2), ".clawd", "persona.json");
+    return path15.join(this.personaDir(personaId2), ".clawd", "persona.json");
   }
   claudeMdPath(personaId2) {
-    return path14.join(this.personaDir(personaId2), "CLAUDE.md");
+    return path15.join(this.personaDir(personaId2), "CLAUDE.md");
   }
   // codex 原生读 cwd 的 AGENTS.md。人格双写镜像：claude 读 CLAUDE.md、codex 读 AGENTS.md，
   // 两份内容恒一致，persona 切 tool 零迁移。
   agentsMdPath(personaId2) {
-    return path14.join(this.personaDir(personaId2), "AGENTS.md");
+    return path15.join(this.personaDir(personaId2), "AGENTS.md");
   }
   /**
    * persona 级 sandbox base 落盘路径 —— 故意放 `.clawd/` 而非 `.claude/`，让 CC 的 project
@@ -48356,11 +48415,11 @@ var PersonaStore = class {
    * spawn 前 per-guest 动态拼到各自 session 目录的那份（base + 强制底座 + 本 guest userWorkDir carve）。
    */
   sandboxSettingsPath(personaId2) {
-    return path14.join(this.personaDir(personaId2), ".clawd", "sandbox-settings.json");
+    return path15.join(this.personaDir(personaId2), ".clawd", "sandbox-settings.json");
   }
   write(persona, personality) {
     const dir = this.personaDir(persona.personaId);
-    fs12.mkdirSync(path14.join(dir, ".clawd"), { recursive: true });
+    fs12.mkdirSync(path15.join(dir, ".clawd"), { recursive: true });
     this.atomicWrite(this.claudeMdPath(persona.personaId), personality);
     this.atomicWrite(this.agentsMdPath(persona.personaId), personality);
     this.writeSandboxSettings(persona.personaId, buildGuestSettingsV1());
@@ -48431,7 +48490,7 @@ var PersonaStore = class {
     };
   }
   codexSandboxSettingsPath(personaId2) {
-    return path14.join(this.personaDir(personaId2), ".clawd", "codex-sandbox.json");
+    return path15.join(this.personaDir(personaId2), ".clawd", "codex-sandbox.json");
   }
   /** 读 codex-sandbox.json；不存在/损坏 → null。 */
   readCodexSandboxSettings(personaId2) {
@@ -48445,7 +48504,7 @@ var PersonaStore = class {
   }
   /** 覆盖写 codex-sandbox.json（seed/migrate 用）。 */
   writeCodexSandboxSettings(personaId2, settings) {
-    const dir = path14.join(this.personaDir(personaId2), ".clawd");
+    const dir = path15.join(this.personaDir(personaId2), ".clawd");
     fs12.mkdirSync(dir, { recursive: true });
     this.atomicWrite(this.codexSandboxSettingsPath(personaId2), JSON.stringify(settings, null, 2));
   }
@@ -48487,14 +48546,14 @@ var PersonaStore = class {
   }
   /** Persona 私有 skills 目录路径：<personaDir>/.claude/skills */
   skillsDir(personaId2) {
-    return path14.join(this.personaDir(personaId2), ".claude", "skills");
+    return path15.join(this.personaDir(personaId2), ".claude", "skills");
   }
   /**
    * Claude Code 项目级 settings 路径：`<personaDir>/.claude/settings.json`。
    * 这里只读 `enabledPlugins` 字段，由 owner 通过 CC `/plugin` 之类命令维护，daemon 不写。
    */
   claudeSettingsPath(personaId2) {
-    return path14.join(this.personaDir(personaId2), ".claude", "settings.json");
+    return path15.join(this.personaDir(personaId2), ".claude", "settings.json");
   }
   /**
    * 读取 persona 的 `.claude/settings.json` 中 `enabledPlugins` map，把 value === true
@@ -48528,7 +48587,7 @@ var PersonaStore = class {
   list() {
     if (!fs12.existsSync(this.root)) return [];
     return fs12.readdirSync(this.root).filter((name) => {
-      return fs12.existsSync(path14.join(this.root, name, ".clawd", "persona.json"));
+      return fs12.existsSync(path15.join(this.root, name, ".clawd", "persona.json"));
     });
   }
   remove(personaId2) {
@@ -48954,7 +49013,7 @@ var PersonaManager = class {
 
 // src/persona/seed.ts
 var fs14 = __toESM(require("fs"), 1);
-var path16 = __toESM(require("path"), 1);
+var path17 = __toESM(require("path"), 1);
 var import_node_url = require("url");
 var import_meta = {};
 var DEFAULT_BYPASS_PROFILE = {
@@ -49133,14 +49192,14 @@ function bundleSiblingFromArgv(argv1, sibling) {
     real = fs14.realpathSync(argv1);
   } catch {
   }
-  return path16.resolve(path16.dirname(real), sibling);
+  return path17.resolve(path17.dirname(real), sibling);
 }
 function findDefaultsRoot(logger) {
   const candidates = [];
   try {
-    const here = path16.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
-    candidates.push(path16.resolve(here, "defaults"));
-    candidates.push(path16.resolve(here, "persona-defaults"));
+    const here = path17.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
+    candidates.push(path17.resolve(here, "defaults"));
+    candidates.push(path17.resolve(here, "persona-defaults"));
   } catch {
   }
   const fromArgv = bundleSiblingFromArgv(process.argv[1], "persona-defaults");
@@ -49164,7 +49223,7 @@ function seedDefaultPersonas(args) {
       args.logger.info("persona.seed.skip", { personaId: entry.personaId, reason: "exists" });
       continue;
     }
-    const bundleDir = path16.join(args.defaultsRoot, entry.personaId);
+    const bundleDir = path17.join(args.defaultsRoot, entry.personaId);
     if (!fs14.existsSync(bundleDir)) {
       args.logger.warn("persona.seed.skip", {
         personaId: entry.personaId,
@@ -49173,7 +49232,7 @@ function seedDefaultPersonas(args) {
       });
       continue;
     }
-    const claudeMdPath = path16.join(bundleDir, "CLAUDE.md");
+    const claudeMdPath = path17.join(bundleDir, "CLAUDE.md");
     if (!fs14.existsSync(claudeMdPath)) {
       args.logger.warn("persona.seed.skip", {
         personaId: entry.personaId,
@@ -49209,13 +49268,13 @@ function seedDefaultPersonas(args) {
   }
 }
 function skipNodeModulesUnder(srcRoot) {
-  return (src) => !path16.relative(srcRoot, src).split(path16.sep).includes("node_modules");
+  return (src) => !path17.relative(srcRoot, src).split(path17.sep).includes("node_modules");
 }
 function copyBundleExtras(srcDir, dstDir) {
   for (const entry of fs14.readdirSync(srcDir, { withFileTypes: true })) {
     if (entry.name === "CLAUDE.md" || entry.name === ".clawd") continue;
-    const srcPath = path16.join(srcDir, entry.name);
-    const dstPath = path16.join(dstDir, entry.name);
+    const srcPath = path17.join(srcDir, entry.name);
+    const dstPath = path17.join(dstDir, entry.name);
     if (entry.isDirectory()) {
       fs14.cpSync(srcPath, dstPath, { recursive: true, dereference: true, filter: skipNodeModulesUnder(srcPath) });
     } else if (entry.isFile()) {
@@ -49226,7 +49285,7 @@ function copyBundleExtras(srcDir, dstDir) {
 var DAEMON_MANAGED_PATHS = ["extension-kit", "CLAUDE.md", ".mcp.json", ".claude/skills"];
 function replaceManagedPath(src, dst) {
   if (!fs14.statSync(src).isDirectory()) {
-    fs14.mkdirSync(path16.dirname(dst), { recursive: true });
+    fs14.mkdirSync(path17.dirname(dst), { recursive: true });
     fs14.rmSync(dst, { recursive: true, force: true });
     fs14.cpSync(src, dst, { dereference: true });
     return;
@@ -49234,26 +49293,26 @@ function replaceManagedPath(src, dst) {
   fs14.mkdirSync(dst, { recursive: true });
   for (const e of fs14.readdirSync(src, { withFileTypes: true })) {
     if (e.name === "node_modules") continue;
-    const child = path16.join(dst, e.name);
+    const child = path17.join(dst, e.name);
     fs14.rmSync(child, { recursive: true, force: true });
-    fs14.cpSync(path16.join(src, e.name), child, { recursive: true, dereference: true });
+    fs14.cpSync(path17.join(src, e.name), child, { recursive: true, dereference: true });
   }
 }
 function refreshDaemonManagedDirs(args) {
   const entries = args.entries ?? DEFAULT_PERSONAS;
   for (const entry of entries) {
-    const bundleDir = path16.join(args.defaultsRoot, entry.personaId);
+    const bundleDir = path17.join(args.defaultsRoot, entry.personaId);
     if (!fs14.existsSync(bundleDir)) continue;
     const personaDir = args.store.personaDirPath(entry.personaId);
     if (!fs14.existsSync(personaDir)) continue;
     for (const relPath of DAEMON_MANAGED_PATHS) {
-      const srcPath = path16.join(bundleDir, relPath);
+      const srcPath = path17.join(bundleDir, relPath);
       if (!fs14.existsSync(srcPath)) continue;
-      const dstPath = path16.join(personaDir, relPath);
+      const dstPath = path17.join(personaDir, relPath);
       try {
         replaceManagedPath(srcPath, dstPath);
         if (relPath === "CLAUDE.md") {
-          replaceManagedPath(srcPath, path16.join(personaDir, "AGENTS.md"));
+          replaceManagedPath(srcPath, path17.join(personaDir, "AGENTS.md"));
         }
         args.logger.info("persona.refresh.synced", {
           personaId: entry.personaId,
@@ -49402,7 +49461,7 @@ function containsAnyFile(dir) {
   }
   for (const e of entries) {
     if (e.isDirectory()) {
-      if (containsAnyFile(path16.join(dir, e.name))) return true;
+      if (containsAnyFile(path17.join(dir, e.name))) return true;
     } else {
       return true;
     }
@@ -49413,7 +49472,7 @@ function retirePersonaBuilder(args) {
   const dir = args.store.personaDirPath(PERSONA_BUILDER_ID);
   if (!fs14.existsSync(dir)) return;
   try {
-    const used = containsAnyFile(path16.join(dir, ".clawd", "sessions")) || containsAnyFile(path16.join(dir, ".claude", "skills")) || containsAnyFile(path16.join(dir, "projects"));
+    const used = containsAnyFile(path17.join(dir, ".clawd", "sessions")) || containsAnyFile(path17.join(dir, ".claude", "skills")) || containsAnyFile(path17.join(dir, "projects"));
     if (!used) {
       args.store.remove(PERSONA_BUILDER_ID);
       args.logger.info("persona.retire-builder.removed", { personaId: PERSONA_BUILDER_ID });
@@ -49421,7 +49480,7 @@ function retirePersonaBuilder(args) {
     }
     let wrote = false;
     for (const name of ["CLAUDE.md", "AGENTS.md"]) {
-      const p2 = path16.join(dir, name);
+      const p2 = path17.join(dir, name);
       const cur = fs14.existsSync(p2) ? fs14.readFileSync(p2, "utf8") : null;
       if (cur?.startsWith(PERSONA_BUILDER_TOMBSTONE_MARKER)) continue;
       fs14.writeFileSync(p2, PERSONA_BUILDER_TOMBSTONE);
@@ -49438,8 +49497,8 @@ function retirePersonaBuilder(args) {
 function findDeployKitRoot(logger) {
   const candidates = [];
   try {
-    const here = path16.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
-    candidates.push(path16.resolve(here, "..", "deploy-kit"));
+    const here = path17.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
+    candidates.push(path17.resolve(here, "..", "deploy-kit"));
   } catch {
   }
   const fromArgv = bundleSiblingFromArgv(process.argv[1], "deploy-kit");
@@ -49457,7 +49516,7 @@ function findDeployKitRoot(logger) {
   return null;
 }
 function seedDeployKit(args) {
-  const dst = path16.join(args.dataDir, "deploy-kit");
+  const dst = path17.join(args.dataDir, "deploy-kit");
   fs14.cpSync(args.deployKitBundleRoot, dst, {
     recursive: true,
     dereference: true,
@@ -49467,23 +49526,23 @@ function seedDeployKit(args) {
   args.logger.info("deploy-kit.seed.done", { dst });
 }
 function refreshDeployKit(args) {
-  const dst = path16.join(args.dataDir, "deploy-kit");
+  const dst = path17.join(args.dataDir, "deploy-kit");
   if (!fs14.existsSync(dst)) {
     seedDeployKit(args);
     return;
   }
   for (const sub of ["scripts", "contract"]) {
-    const s = path16.join(args.deployKitBundleRoot, sub);
+    const s = path17.join(args.deployKitBundleRoot, sub);
     if (fs14.existsSync(s)) {
-      fs14.cpSync(s, path16.join(dst, sub), { recursive: true, force: true, dereference: true });
+      fs14.cpSync(s, path17.join(dst, sub), { recursive: true, force: true, dereference: true });
     }
   }
-  const secretsSrc = path16.join(args.deployKitBundleRoot, ".secrets");
+  const secretsSrc = path17.join(args.deployKitBundleRoot, ".secrets");
   if (fs14.existsSync(secretsSrc)) {
-    fs14.mkdirSync(path16.join(dst, ".secrets"), { recursive: true });
+    fs14.mkdirSync(path17.join(dst, ".secrets"), { recursive: true });
     for (const f of fs14.readdirSync(secretsSrc)) {
       if (f.endsWith(".local")) continue;
-      fs14.copyFileSync(path16.join(secretsSrc, f), path16.join(dst, ".secrets", f));
+      fs14.copyFileSync(path17.join(secretsSrc, f), path17.join(dst, ".secrets", f));
     }
   }
   args.logger.info("deploy-kit.refresh.done", { dst });
@@ -49774,8 +49833,8 @@ var CodexAppServerClient = class {
   pending = /* @__PURE__ */ new Map();
   request(method, params) {
     const id = this.nextId++;
-    return new Promise((resolve8, reject) => {
-      this.pending.set(id, { resolve: resolve8, reject });
+    return new Promise((resolve9, reject) => {
+      this.pending.set(id, { resolve: resolve9, reject });
       this.write({ jsonrpc: "2.0", method, id, params });
     });
   }
@@ -50208,8 +50267,8 @@ function turnStartInput(text) {
   const items = [];
   let leftover = text;
   for (const m2 of text.matchAll(SKILL_RE)) {
-    const [marker, name, path86] = m2;
-    items.push({ type: "skill", name, path: path86 });
+    const [marker, name, path87] = m2;
+    items.push({ type: "skill", name, path: path87 });
     leftover = leftover.replace(marker, "");
   }
   for (const m2 of text.matchAll(ATTACHMENT_RE2)) {
@@ -51294,10 +51353,10 @@ function createTerminalSurface(opts) {
     },
     writeBytes(data, seq) {
       pendingParse++;
-      return new Promise((resolve8) => {
+      return new Promise((resolve9) => {
         term.write(data, () => {
           if (disposed) {
-            resolve8();
+            resolve9();
             return;
           }
           if (typeof seq === "number" && seq > parseSeq) parseSeq = seq;
@@ -51311,14 +51370,14 @@ function createTerminalSurface(opts) {
             drainWaiters = [];
             for (const w2 of waiters) w2();
           }
-          resolve8();
+          resolve9();
         });
       });
     },
     drain() {
       if (pendingParse === 0) return Promise.resolve();
-      return new Promise((resolve8) => {
-        drainWaiters.push(resolve8);
+      return new Promise((resolve9) => {
+        drainWaiters.push(resolve9);
       });
     },
     resize(cols, rows) {
@@ -51359,7 +51418,7 @@ function inputBoxContent(lines) {
 function waitInputEcho(surface, opts = {}) {
   const stableMs = opts.stableMs ?? 150;
   const maxMs = opts.maxMs ?? 5e3;
-  return new Promise((resolve8) => {
+  return new Promise((resolve9) => {
     let settled = false;
     let stableTimer = null;
     const finish = () => {
@@ -51368,7 +51427,7 @@ function waitInputEcho(surface, opts = {}) {
       unsub();
       if (stableTimer) clearTimeout(stableTimer);
       clearTimeout(maxTimer);
-      resolve8();
+      resolve9();
     };
     const unsub = surface.onTick((lines) => {
       if (!stableTimer && inputBoxContent(lines).length > 0) {
@@ -52488,13 +52547,13 @@ function createGhRunner(defaults) {
   const baseTimeoutMs = defaults?.timeoutMs ?? DEFAULT_TIMEOUT_MS2;
   return {
     run(args, opts) {
-      return new Promise((resolve8, reject) => {
+      return new Promise((resolve9, reject) => {
         (0, import_node_child_process7.execFile)(
           "gh",
           args,
           { timeout: opts?.timeoutMs ?? baseTimeoutMs, maxBuffer: MAX_BUFFER },
           (err, stdout, stderr) => {
-            if (!err) return resolve8(stdout);
+            if (!err) return resolve9(stdout);
             if (err.code === "ENOENT") {
               return reject(new GhError("gh-missing", "GitHub CLI (gh) \u672A\u5B89\u88C5"));
             }
@@ -54366,13 +54425,13 @@ function mapSkillsListResponse(res) {
       const r = s ?? {};
       const name = str3(r.name);
       if (!name) continue;
-      const path86 = str3(r.path);
+      const path87 = str3(r.path);
       const description = str3(r.description);
       const isPlugin = name.includes(":");
       out.push({
         name,
         source: isPlugin ? "plugin" : "project",
-        ...path86 ? { path: path86 } : {},
+        ...path87 ? { path: path87 } : {},
         ...description ? { description } : {},
         ...isPlugin ? { plugin: name.split(":")[0] } : {}
       });
@@ -55239,14 +55298,14 @@ async function generateSessionTitle(tool, firstMessage, deps = {}) {
   const args = tool === "claude" ? buildClaudeTitleArgs(buildClaudeTitlePrompt(text)) : buildCodexTitleArgs(buildTitlePrompt(text), outFile, schemaFile);
   const doSpawn = deps.spawnOverride ?? ((c, a, o) => (0, import_node_child_process8.spawn)(c, a, { ...o, stdio: ["ignore", "pipe", "pipe"] }));
   const timeoutMs = deps.timeoutMs ?? DEFAULT_TITLE_GEN_TIMEOUT_MS;
-  return await new Promise((resolve8) => {
+  return await new Promise((resolve9) => {
     let proc;
     try {
       proc = doSpawn(cmd, args, { cwd: workDir });
     } catch (err) {
       deps.logger?.warn("title-gen spawn failed", { tool, message: err.message });
       cleanupWorkDir();
-      return resolve8(null);
+      return resolve9(null);
     }
     let stdout = "";
     let settled = false;
@@ -55256,7 +55315,7 @@ async function generateSessionTitle(tool, firstMessage, deps = {}) {
       clearTimeout(timer);
       if (proc.exitCode === null && proc.signalCode === null) proc.kill("SIGKILL");
       cleanupWorkDir();
-      resolve8(title);
+      resolve9(title);
     };
     const timer = setTimeout(() => {
       deps.logger?.warn("title-gen timed out", { tool, timeoutMs });
@@ -55314,13 +55373,13 @@ function isPreviewPortAllowed(port, cfg) {
   return cfg.allowedPorts.includes(port);
 }
 function proxyPreviewHttp(req, res, port) {
-  return new Promise((resolve8) => {
+  return new Promise((resolve9) => {
     const upstream = import_node_http.default.request(
       { host: "localhost", port, method: req.method, path: req.url, headers: req.headers },
       (upRes) => {
         res.writeHead(upRes.statusCode || 502, upRes.headers);
         upRes.pipe(res);
-        upRes.on("end", () => resolve8());
+        upRes.on("end", () => resolve9());
       }
     );
     upstream.on("error", (e) => {
@@ -55328,7 +55387,7 @@ function proxyPreviewHttp(req, res, port) {
         res.writeHead(502, { "content-type": "text/plain; charset=utf-8" });
       }
       res.end(`preview upstream error: ${e.message}`);
-      resolve8();
+      resolve9();
     });
     req.pipe(upstream);
   });
@@ -55371,7 +55430,7 @@ var LocalWsServer = class {
   pingIntervalMs;
   async start() {
     const host = this.opts.host ?? "127.0.0.1";
-    await new Promise((resolve8, reject) => {
+    await new Promise((resolve9, reject) => {
       const httpServer = import_node_http2.default.createServer((req, res) => this.handleHttpRequest(req, res));
       const wss = new import_websocket_server.default({ noServer: true, clientTracking: true });
       httpServer.on("upgrade", (req, socket, head) => {
@@ -55397,7 +55456,7 @@ var LocalWsServer = class {
       });
       httpServer.on("listening", () => {
         this.logger?.info("ws listening", { host, port: this.opts.port });
-        resolve8();
+        resolve9();
       });
       httpServer.on("error", (err) => {
         this.logger?.error("ws server error", { err: err.message });
@@ -55418,11 +55477,11 @@ var LocalWsServer = class {
       if (c.pingTimer) clearInterval(c.pingTimer);
     }
     this.clients.clear();
-    await new Promise((resolve8) => {
-      this.wss?.close(() => resolve8());
+    await new Promise((resolve9) => {
+      this.wss?.close(() => resolve9());
     });
-    await new Promise((resolve8) => {
-      this.httpServer?.close(() => resolve8());
+    await new Promise((resolve9) => {
+      this.httpServer?.close(() => resolve9());
     });
     this.wss = null;
     this.httpServer = null;
@@ -55965,7 +56024,7 @@ async function authenticate(token, deps) {
 
 // src/legacy-cleanup.ts
 var fs40 = __toESM(require("fs/promises"), 1);
-var path41 = __toESM(require("path"), 1);
+var path42 = __toESM(require("path"), 1);
 var LEGACY_FILES = [
   "personal-capability.json",
   "received-capabilities.json",
@@ -55974,7 +56033,7 @@ var LEGACY_FILES = [
 async function cleanupLegacyCapabilityFiles(dataDir, logger) {
   const removed = [];
   for (const name of LEGACY_FILES) {
-    const p2 = path41.join(dataDir, name);
+    const p2 = path42.join(dataDir, name);
     try {
       await fs40.unlink(p2);
       removed.push(name);
@@ -55989,7 +56048,7 @@ async function cleanupLegacyCapabilityFiles(dataDir, logger) {
 
 // src/inbox/inbox-store.ts
 var fs41 = __toESM(require("fs"), 1);
-var path42 = __toESM(require("path"), 1);
+var path43 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
@@ -56087,10 +56146,10 @@ var InboxStore = class {
     }
   }
   dirPath() {
-    return path42.join(this.dataDir, INBOX_SUBDIR);
+    return path43.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerDeviceId) {
-    return path42.join(this.dirPath(), `${peerDeviceId}.jsonl`);
+    return path43.join(this.dirPath(), `${peerDeviceId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -56179,7 +56238,7 @@ var InboxManager = class {
 
 // src/state/contact-store.ts
 var fs42 = __toESM(require("fs"), 1);
-var path43 = __toESM(require("path"), 1);
+var path44 = __toESM(require("path"), 1);
 var FILE_NAME = "contacts.json";
 var ContactStore = class {
   constructor(dataDir) {
@@ -56189,7 +56248,7 @@ var ContactStore = class {
   contacts = /* @__PURE__ */ new Map();
   load() {
     this.contacts.clear();
-    const file = path43.join(this.dataDir, FILE_NAME);
+    const file = path44.join(this.dataDir, FILE_NAME);
     let raw;
     try {
       raw = fs42.readFileSync(file, "utf8");
@@ -56261,7 +56320,7 @@ var ContactStore = class {
     return true;
   }
   flush() {
-    const file = path43.join(this.dataDir, FILE_NAME);
+    const file = path44.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
       { contacts: Array.from(this.contacts.values()) },
@@ -56287,16 +56346,16 @@ var HANDSHAKE_TIMEOUT_MS = 5e3;
 var RPC_TIMEOUT_MS = 5e3;
 async function connectRemote(args) {
   const ws = new wrapper_default(args.url);
-  await new Promise((resolve8, reject) => {
+  await new Promise((resolve9, reject) => {
     const onError = (e) => reject(e);
     ws.once("open", () => {
       ws.off("error", onError);
-      resolve8();
+      resolve9();
     });
     ws.once("error", onError);
   });
   ws.send(JSON.stringify({ type: "auth", token: args.token }));
-  await new Promise((resolve8, reject) => {
+  await new Promise((resolve9, reject) => {
     const onMessage = (raw) => {
       let f;
       try {
@@ -56306,7 +56365,7 @@ async function connectRemote(args) {
       }
       if (f.type === "auth:ok") {
         finish();
-        resolve8();
+        resolve9();
         return;
       }
       if (f.type === "auth:error" || f.code === 4401) {
@@ -56337,7 +56396,7 @@ async function connectRemote(args) {
   });
   function call(method, payload) {
     const requestId = crypto5.randomUUID();
-    return new Promise((resolve8, reject) => {
+    return new Promise((resolve9, reject) => {
       const onMessage = (raw) => {
         let f;
         try {
@@ -56350,7 +56409,7 @@ async function connectRemote(args) {
         if (f.error || f.type === "error" || f.type?.endsWith(":error")) {
           reject(new Error(f.message ?? f.error ?? "rpc error"));
         } else {
-          resolve8(f);
+          resolve9(f);
         }
       };
       ws.on("message", onMessage);
@@ -56383,52 +56442,52 @@ async function connectRemote(args) {
 
 // src/migrations/2026-05-20-flatten-sessions.ts
 var fs43 = __toESM(require("fs"), 1);
-var path44 = __toESM(require("path"), 1);
+var path45 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path44.join(dataDir, "sessions");
-  const flagPath = path44.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path45.join(dataDir, "sessions");
+  const flagPath = path45.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path44.join(sessionsDir, "default");
+  const defaultDir = path45.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path44.join(defaultDir, entry);
-      const dst = path44.join(sessionsDir, entry);
+      const src = path45.join(defaultDir, entry);
+      const dst = path45.join(sessionsDir, entry);
       fs43.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path44.join(sessionsDir, pid);
+    const personaDir = path45.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path44.join(personaDir, "owner");
+    const ownerSrc = path45.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path44.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      const ownerDst = path45.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
       fs43.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs43.renameSync(path44.join(ownerSrc, file), path44.join(ownerDst, file));
+        fs43.renameSync(path45.join(ownerSrc, file), path45.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path44.join(personaDir, "listener");
+    const listenerSrc = path45.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path44.join(dataDir, ".legacy", `listener-${pid}`);
+      const archiveDst = path45.join(dataDir, ".legacy", `listener-${pid}`);
       fs43.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs43.renameSync(path44.join(listenerSrc, file), path44.join(archiveDst, file));
+        fs43.renameSync(path45.join(listenerSrc, file), path45.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
@@ -56476,13 +56535,13 @@ function rmdirIfEmpty(p2) {
 
 // src/migrations/2026-08-18-drop-seeded-projects.ts
 var fs44 = __toESM(require("fs"), 1);
-var path45 = __toESM(require("path"), 1);
+var path46 = __toESM(require("path"), 1);
 var DROP_SEEDED_PROJECTS_FLAG = ".projects-seed-dropped.v1.done";
 function dropSeededProjects(opts) {
   fs44.mkdirSync(opts.dataDir, { recursive: true });
-  const flag = path45.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
+  const flag = path46.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
   if (fs44.existsSync(flag)) return { skipped: true, dropped: 0, backup: null };
-  const file = path45.join(opts.dataDir, "projects.json");
+  const file = path46.join(opts.dataDir, "projects.json");
   let raw = null;
   let dropped = 0;
   try {
@@ -56492,9 +56551,9 @@ function dropSeededProjects(opts) {
   }
   let backup = null;
   if (raw != null && dropped > 0) {
-    const dir = path45.join(opts.dataDir, "backups");
+    const dir = path46.join(opts.dataDir, "backups");
     fs44.mkdirSync(dir, { recursive: true });
-    backup = path45.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
+    backup = path46.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
     fs44.writeFileSync(backup, raw);
   }
   if (raw != null || dropped > 0) {
@@ -56917,7 +56976,7 @@ function authedRpcErrorStatus(code) {
 }
 var LARK_BOT_EVENT_MAX_BYTES = 64 * 1024;
 async function readRawBody(req, max) {
-  return await new Promise((resolve8, reject) => {
+  return await new Promise((resolve9, reject) => {
     let size = 0;
     const chunks = [];
     req.on("data", (c) => {
@@ -56929,12 +56988,12 @@ async function readRawBody(req, max) {
       }
       chunks.push(c);
     });
-    req.on("end", () => resolve8(Buffer.concat(chunks).toString("utf8")));
+    req.on("end", () => resolve9(Buffer.concat(chunks).toString("utf8")));
     req.on("error", reject);
   });
 }
 async function readJsonBody(req, max) {
-  return await new Promise((resolve8, reject) => {
+  return await new Promise((resolve9, reject) => {
     let size = 0;
     const chunks = [];
     req.on("data", (c) => {
@@ -56948,9 +57007,9 @@ async function readJsonBody(req, max) {
     });
     req.on("end", () => {
       const raw = Buffer.concat(chunks).toString("utf8");
-      if (!raw) return resolve8({});
+      if (!raw) return resolve9({});
       try {
-        resolve8(JSON.parse(raw));
+        resolve9(JSON.parse(raw));
       } catch {
         reject(new Error("invalid JSON body"));
       }
@@ -57995,10 +58054,10 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
   const work = import_node_path43.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
   import_node_fs39.default.mkdirSync(work, { recursive: true });
   try {
-    await new Promise((resolve8, reject) => {
+    await new Promise((resolve9, reject) => {
       const proc = (0, import_node_child_process9.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
       proc.on("error", reject);
-      proc.on("exit", (code) => code === 0 ? resolve8() : reject(new Error(`tar exited ${code}`)));
+      proc.on("exit", (code) => code === 0 ? resolve9() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
     const src = import_node_path43.default.join(work, dirName, "frpc");
@@ -58099,7 +58158,7 @@ async function killStaleFrpc(deps) {
 }
 async function defaultScanFrpcPidsByCmdline(tomlPath, logger) {
   if (process.platform === "win32") return [];
-  return new Promise((resolve8) => {
+  return new Promise((resolve9) => {
     const ps = (0, import_node_child_process10.spawn)("ps", ["-axo", "pid=,command="], { stdio: ["ignore", "pipe", "ignore"] });
     let buf = "";
     ps.stdout.on("data", (c) => {
@@ -58116,11 +58175,11 @@ async function defaultScanFrpcPidsByCmdline(tomlPath, logger) {
         const pid = parseInt(m2[1], 10);
         if (Number.isFinite(pid) && pid > 0) pids.push(pid);
       }
-      resolve8(pids);
+      resolve9(pids);
     });
     ps.on("error", (e) => {
       logger?.warn("tunnel: ps scan failed", { err: e.message });
-      resolve8([]);
+      resolve9([]);
     });
   });
 }
@@ -58198,17 +58257,17 @@ var TunnelManager = class {
       return;
     }
     proc.kill("SIGTERM");
-    await new Promise((resolve8) => {
+    await new Promise((resolve9) => {
       const t = setTimeout(() => {
         try {
           proc.kill("SIGKILL");
         } catch {
         }
-        resolve8();
+        resolve9();
       }, 5e3);
       proc.once("exit", () => {
         clearTimeout(t);
-        resolve8();
+        resolve9();
       });
     });
     clearFrpcPid(this.deps.dataDir);
@@ -58314,14 +58373,14 @@ function formatFrpcTail(raw, maxLines = 12) {
   return ["\u2500\u2500\u2500 frpc output (last lines) \u2500\u2500\u2500", tail, "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"].join("\n");
 }
 async function waitForFrpcReady(proc, timeoutMs) {
-  return new Promise((resolve8) => {
+  return new Promise((resolve9) => {
     let settled = false;
     let buf = "";
     const finish = (r) => {
       if (settled) return;
       settled = true;
       cleanup();
-      resolve8(r);
+      resolve9(r);
     };
     const onData = (chunk) => {
       buf += String(chunk);
@@ -58666,9 +58725,9 @@ var CentralClientError = class extends Error {
   code;
   cause;
 };
-async function centralRequest(opts, path86, init) {
+async function centralRequest(opts, path87, init) {
   const f = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}${path86}`;
+  const url = `${opts.api.replace(/\/+$/, "")}${path87}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
   let res;
@@ -58863,7 +58922,7 @@ function verifyConnectToken(args) {
 
 // src/feishu-auth/server-key.ts
 var fs58 = __toESM(require("fs"), 1);
-var path61 = __toESM(require("path"), 1);
+var path62 = __toESM(require("path"), 1);
 var FILE_NAME2 = "server-signing-key.json";
 var ServerKeyStore = class {
   constructor(dataDir) {
@@ -58871,7 +58930,7 @@ var ServerKeyStore = class {
   }
   dataDir;
   filePath() {
-    return path61.join(this.dataDir, FILE_NAME2);
+    return path62.join(this.dataDir, FILE_NAME2);
   }
   /** 读缓存的公钥；无缓存 / 损坏 → null（调用方决定是否触发拉取） */
   read() {
@@ -59745,7 +59804,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path66 = __toESM(require("path"), 1);
+var path67 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -59763,7 +59822,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path65 = __toESM(require("path"), 1);
+var path66 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -59776,42 +59835,42 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read", userWorkDir) {
-  const target = path65.resolve(absPath);
+  const target = path66.resolve(absPath);
   if (userWorkDir) {
-    const u = path65.resolve(userWorkDir);
-    const usep = u.endsWith(path65.sep) ? "" : path65.sep;
+    const u = path66.resolve(userWorkDir);
+    const usep = u.endsWith(path66.sep) ? "" : path66.sep;
     if (target === u || target.startsWith(u + usep)) return true;
   }
-  const root = path65.resolve(personaRoot);
-  const sep4 = root.endsWith(path65.sep) ? "" : path65.sep;
+  const root = path66.resolve(personaRoot);
+  const sep4 = root.endsWith(path66.sep) ? "" : path66.sep;
   if (!target.startsWith(root + sep4)) return false;
-  const rel = path65.relative(root, target);
+  const rel = path66.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId2 = rel.split(path65.sep)[0];
+  const personaId2 = rel.split(path66.sep)[0];
   if (!personaId2) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId2);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path65.resolve(personaRoot);
-  const target = path65.resolve(absPath);
-  const sep4 = root.endsWith(path65.sep) ? "" : path65.sep;
+  const root = path66.resolve(personaRoot);
+  const target = path66.resolve(absPath);
+  const sep4 = root.endsWith(path66.sep) ? "" : path66.sep;
   if (!target.startsWith(root + sep4)) return null;
-  const rel = path65.relative(root, target);
+  const rel = path66.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path65.sep)[0];
+  const id = rel.split(path66.sep)[0];
   return id || null;
 }
 function isPathWithin(dir, absPath) {
-  const d = path65.resolve(dir);
-  const t = path65.resolve(absPath);
-  const sep4 = d.endsWith(path65.sep) ? "" : path65.sep;
+  const d = path66.resolve(dir);
+  const t = path66.resolve(absPath);
+  const sep4 = d.endsWith(path66.sep) ? "" : path66.sep;
   return t === d || t.startsWith(d + sep4);
 }
 function isPathInGuestBoundary(personaRoot, personaId2, userWorkDir, absPath) {
   if (userWorkDir && isPathWithin(userWorkDir, absPath)) return true;
-  return personaIdFromPath(path65.resolve(absPath), personaRoot) === personaId2;
+  return personaIdFromPath(path66.resolve(absPath), personaRoot) === personaId2;
 }
 
 // src/handlers/history.ts
@@ -59864,7 +59923,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path66.join(personaRoot, pid),
+          path67.join(personaRoot, pid),
           personaRoot,
           "read",
           userWorkDir
@@ -59876,7 +59935,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path66.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
+    assertGuestPath(ctx, path67.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -59924,14 +59983,14 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path66.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
+    assertGuestPath(ctx, path67.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagents");
     const subs = await historyReaderForToolSession(args.toolSessionId).listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path66.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
+    assertGuestPath(ctx, path67.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagent-read");
     const res = await historyReaderForToolSession(args.toolSessionId).readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
@@ -59941,7 +60000,7 @@ function buildHistoryHandlers(deps) {
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path66.resolve(d.cwd), personaRoot, "read", userWorkDir)
+        (d) => isGuestPathAllowed(ctx.grants, path67.resolve(d.cwd), personaRoot, "read", userWorkDir)
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -59959,16 +60018,16 @@ function buildHistoryHandlers(deps) {
 
 // src/handlers/projects.ts
 var fs62 = __toESM(require("fs"), 1);
-var os19 = __toESM(require("os"), 1);
-var path67 = __toESM(require("path"), 1);
+var os20 = __toESM(require("os"), 1);
+var path68 = __toESM(require("path"), 1);
 var import_node_child_process13 = require("child_process");
 init_protocol();
-var DEFAULT_PROJECTS_ROOT = path67.join(os19.homedir(), "Documents", "ChatGPT");
+var DEFAULT_PROJECTS_ROOT = path68.join(os20.homedir(), "Documents", "ChatGPT");
 function allocateDir(root, name) {
-  let candidate = path67.join(root, name);
+  let candidate = path68.join(root, name);
   let n = 2;
   while (fs62.existsSync(candidate)) {
-    candidate = path67.join(root, `${name} ${n}`);
+    candidate = path68.join(root, `${name} ${n}`);
     n += 1;
   }
   return candidate;
@@ -59983,6 +60042,29 @@ function buildProjectHandlers(deps) {
   const list = async () => ({
     response: { type: "project:list", projects: store().listMerged() }
   });
+  const patch = async (frame) => {
+    const args = ProjectPatchArgs.parse(frame);
+    if (!store().patch(args.path, { pinnedAt: args.pinnedAt })) {
+      throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a listed project: ${args.path}`);
+    }
+    return { response: { type: "project:patch" } };
+  };
+  const reveal = async (frame) => {
+    const args = ProjectRevealArgs.parse(frame);
+    if (process.platform !== "darwin") {
+      throw new ClawdError(ERROR_CODES.INVALID_CWD, "project:reveal \u4EC5\u652F\u6301 macOS");
+    }
+    try {
+      if (!fs62.statSync(args.path).isDirectory()) throw new Error("not dir");
+    } catch {
+      throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${args.path}`);
+    }
+    const r = (0, import_node_child_process13.spawnSync)("open", ["-R", args.path], { stdio: "ignore" });
+    if (r.status !== 0) {
+      throw new ClawdError(ERROR_CODES.INVALID_CWD, `open -R \u5931\u8D25: exit ${r.status}`);
+    }
+    return { response: { type: "project:reveal" } };
+  };
   const create = async (frame) => {
     const args = ProjectCreateArgs.parse(frame);
     const root = deps.projectsRoot ?? DEFAULT_PROJECTS_ROOT;
@@ -60021,12 +60103,17 @@ function buildProjectHandlers(deps) {
     }
     return { response: { type: "project:create", project: entry } };
   };
-  return { "project:list": list, "project:create": create };
+  return {
+    "project:list": list,
+    "project:create": create,
+    "project:patch": patch,
+    "project:reveal": reveal
+  };
 }
 
 // src/handlers/workspace.ts
-var path68 = __toESM(require("path"), 1);
-var os20 = __toESM(require("os"), 1);
+var path69 = __toESM(require("path"), 1);
+var os21 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
 function buildEnabledPluginNames(personaManager, personaId2) {
@@ -60066,23 +60153,23 @@ function buildWorkspaceHandlers(deps) {
   const list = async (frame, _client, ctx) => {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
-    const fallbackCwd = isGuest && personaRoot ? personaRoot : os20.homedir();
-    const resolvedCwd = path68.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path68.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const fallbackCwd = isGuest && personaRoot ? personaRoot : os21.homedir();
+    const resolvedCwd = path69.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path69.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list", usersRoot);
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path68.isAbsolute(args.path) ? path68.resolve(args.path) : path68.resolve(args.cwd, args.path);
+    const target = path69.isAbsolute(args.path) ? path69.resolve(args.path) : path69.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read", usersRoot);
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path68.resolve(args.cwd);
+    const cwdAbs = path69.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list", usersRoot);
     const list2 = await getSkillsForTool(args.tool ?? "claude", cwdAbs);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -60094,7 +60181,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path68.resolve(args.cwd);
+    const cwdAbs = path69.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list", usersRoot);
     if (args.tool === "codex") {
       return { response: { type: "agents:list", agents: [] } };
@@ -60116,7 +60203,7 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path70 = __toESM(require("path"), 1);
+var path71 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
@@ -60203,7 +60290,7 @@ async function listGitBranches(cwd) {
 function assertGuestCwd(ctx, cwd, personaRoot, method, usersRoot) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
   const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
-  if (!isGuestPathAllowed(ctx.grants, path70.resolve(cwd), personaRoot, "read", userWorkDir)) {
+  if (!isGuestPathAllowed(ctx.grants, path71.resolve(cwd), personaRoot, "read", userWorkDir)) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -60944,6 +61031,8 @@ var METHOD_GRANT_MAP = {
   // project:*（sidebar 项目分区，spec 2026-08-17）：registry 是 owner 本机资源，owner-only 一刀切
   "project:list": ADMIN_ANY,
   "project:create": ADMIN_ANY,
+  "project:patch": ADMIN_ANY,
+  "project:reveal": ADMIN_ANY,
   // github:*（PR 收件箱，spec 2026-08-11）：走 owner 本机 gh 凭据，owner-only 一刀切
   "github:status": ADMIN_ANY,
   "github:prList": ADMIN_ANY,
@@ -61104,21 +61193,21 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.375".length > 0 ? "0.2.375" : "dev";
+var version = "0.2.377".length > 0 ? "0.2.377" : "dev";
 
 // src/cli-probe/probe.ts
 var fs64 = __toESM(require("fs"), 1);
-var path71 = __toESM(require("path"), 1);
+var path72 = __toESM(require("path"), 1);
 var PKG_NAME = "@clawos-dev/clawd";
 var BIN_NAME = "clawd";
 var MAX_PARENT_HOPS = 5;
 function probeGlobalCli(pathEnv) {
   if (!pathEnv) return null;
-  for (const dir of pathEnv.split(path71.delimiter)) {
+  for (const dir of pathEnv.split(path72.delimiter)) {
     if (!dir) continue;
     let real;
     try {
-      real = fs64.realpathSync(path71.join(dir, BIN_NAME));
+      real = fs64.realpathSync(path72.join(dir, BIN_NAME));
     } catch {
       continue;
     }
@@ -61128,15 +61217,15 @@ function probeGlobalCli(pathEnv) {
   return null;
 }
 function readOwnPackageVersion(entryPath) {
-  let dir = path71.dirname(entryPath);
+  let dir = path72.dirname(entryPath);
   for (let i = 0; i < MAX_PARENT_HOPS; i++) {
     try {
-      const raw = fs64.readFileSync(path71.join(dir, "package.json"), "utf8");
+      const raw = fs64.readFileSync(path72.join(dir, "package.json"), "utf8");
       const pkg = JSON.parse(raw);
       if (pkg.name !== PKG_NAME) return null;
       return typeof pkg.version === "string" && pkg.version ? pkg.version : null;
     } catch {
-      const parent = path71.dirname(dir);
+      const parent = path72.dirname(dir);
       if (parent === dir) return null;
       dir = parent;
     }
@@ -62229,7 +62318,7 @@ var ProjectStore = class {
    */
   async scaffold(name, templateSrcDir, scaffoldScriptPath) {
     const destDir = this.projectDir(name);
-    return await new Promise((resolve8, reject) => {
+    return await new Promise((resolve9, reject) => {
       const child = (0, import_node_child_process15.spawn)("bash", [scaffoldScriptPath, name, templateSrcDir, destDir], {
         env: { ...process.env, PATH: process.env.PATH ?? "" },
         stdio: ["ignore", "pipe", "pipe"]
@@ -62252,7 +62341,7 @@ var ProjectStore = class {
       });
       child.on("exit", (code, signal) => {
         clearTimeout(timer);
-        if (code === 0) resolve8({ stdout, stderr });
+        if (code === 0) resolve9({ stdout, stderr });
         else reject(new Error(`scaffold exit ${code ?? signal}: ${stderr.slice(0, 500)}`));
       });
     });
@@ -62375,7 +62464,7 @@ async function killPortOccupants(port, ownedPids, logger) {
   }
 }
 function listPidsOnPort(port) {
-  return new Promise((resolve8, reject) => {
+  return new Promise((resolve9, reject) => {
     (0, import_node_child_process16.execFile)(
       "lsof",
       ["-ti", `:${port}`],
@@ -62387,11 +62476,11 @@ function listPidsOnPort(port) {
         }
         const text = (stdout ?? "").toString().trim();
         if (!text) {
-          resolve8([]);
+          resolve9([]);
           return;
         }
         const list = text.split("\n").map((s) => Number(s.trim())).filter((n) => Number.isInteger(n) && n > 0);
-        resolve8(list);
+        resolve9(list);
       }
     );
   });
@@ -63615,7 +63704,7 @@ var MAX_TIMEOUT_MS = 3e5;
 var MAX_OUTPUT_BYTES = 1048576;
 function runCommand(command, opts = {}) {
   const timeoutMs = Math.min(opts.timeoutMs ?? DEFAULT_TIMEOUT_MS4, MAX_TIMEOUT_MS);
-  return new Promise((resolve8) => {
+  return new Promise((resolve9) => {
     const child = (0, import_node_child_process18.spawn)("bash", ["-c", command], { cwd: import_node_os23.default.homedir() });
     const out = [];
     const err = [];
@@ -63656,7 +63745,7 @@ function runCommand(command, opts = {}) {
     }, timeoutMs);
     child.on("close", (code) => {
       clearTimeout(timer);
-      resolve8({
+      resolve9({
         stdout: Buffer.concat(out).toString("utf8"),
         stderr: Buffer.concat(err).toString("utf8"),
         exitCode: timedOut ? null : code,
@@ -63667,7 +63756,7 @@ function runCommand(command, opts = {}) {
     });
     child.on("error", () => {
       clearTimeout(timer);
-      resolve8({
+      resolve9({
         stdout: Buffer.concat(out).toString("utf8"),
         stderr: Buffer.concat(err).toString("utf8"),
         exitCode: null,
@@ -63842,10 +63931,10 @@ function parseVersionOutput(out) {
   return /(\d+\.\d+\.\d+)/.exec(out)?.[1];
 }
 function execVersion(bin) {
-  return new Promise((resolve8, reject) => {
+  return new Promise((resolve9, reject) => {
     (0, import_node_child_process19.execFile)(bin, ["--version"], { timeout: 5e3 }, (err, stdout) => {
       if (err) reject(err);
-      else resolve8(String(stdout));
+      else resolve9(String(stdout));
     });
   });
 }
@@ -63999,8 +64088,8 @@ var DevServerSupervisor = class extends import_node_events2.EventEmitter {
     });
     let readyResolve;
     let readyReject;
-    const readyPromise = new Promise((resolve8, reject) => {
-      readyResolve = resolve8;
+    const readyPromise = new Promise((resolve9, reject) => {
+      readyResolve = resolve9;
       readyReject = reject;
     });
     readyPromise.catch(() => {
@@ -64079,7 +64168,7 @@ var DevServerSupervisor = class extends import_node_events2.EventEmitter {
     if (!entry.ready) {
       entry.readyReject(new Error("dev server stopped before ready"));
     }
-    return new Promise((resolve8) => {
+    return new Promise((resolve9) => {
       let settled = false;
       let killTimer;
       const cleanup = () => {
@@ -64087,7 +64176,7 @@ var DevServerSupervisor = class extends import_node_events2.EventEmitter {
         settled = true;
         if (killTimer) clearTimeout(killTimer);
         this.running.delete(sessionId);
-        resolve8();
+        resolve9();
       };
       entry.process.once("exit", cleanup);
       const pid = entry.process.pid;
@@ -64169,7 +64258,7 @@ var DevServerSupervisor = class extends import_node_events2.EventEmitter {
     if (!entry) {
       return Promise.reject(new Error(`dev server for project "${projectName}" not running`));
     }
-    return new Promise((resolve8, reject) => {
+    return new Promise((resolve9, reject) => {
       let settled = false;
       let timer;
       const finish = (err) => {
@@ -64177,7 +64266,7 @@ var DevServerSupervisor = class extends import_node_events2.EventEmitter {
         settled = true;
         if (timer) clearTimeout(timer);
         if (opts.signal) opts.signal.removeEventListener("abort", onAbort);
-        err ? reject(err) : resolve8();
+        err ? reject(err) : resolve9();
       };
       const onAbort = () => finish(new Error("awaitReady aborted via signal"));
       entry.readyPromise.then(() => finish(), (err) => finish(err));
@@ -64260,16 +64349,16 @@ var PortExhaustedError = class extends Error {
   code = "PORT_EXHAUSTED";
 };
 function probe(port) {
-  return new Promise((resolve8) => {
+  return new Promise((resolve9) => {
     const srv = import_node_net2.default.createServer();
-    srv.once("error", () => resolve8(false));
+    srv.once("error", () => resolve9(false));
     srv.once("listening", () => {
-      srv.close(() => resolve8(true));
+      srv.close(() => resolve9(true));
     });
     try {
       srv.listen({ port, host: "127.0.0.1", exclusive: true });
     } catch {
-      resolve8(false);
+      resolve9(false);
     }
   });
 }
@@ -64364,7 +64453,7 @@ var Runtime = class {
     child.stdout.on("data", () => {
     });
     let earlyExit = null;
-    const exitPromise = new Promise((resolve8) => {
+    const exitPromise = new Promise((resolve9) => {
       child.once("exit", (code, signal) => {
         earlyExit = { code, signal };
         const wasUnexpected = this.handles.get(extId) === handle;
@@ -64372,7 +64461,7 @@ var Runtime = class {
           this.handles.delete(extId);
           this.crashed.add(extId);
         }
-        resolve8();
+        resolve9();
       });
     });
     this.handles.set(extId, handle);
@@ -64445,7 +64534,7 @@ ${handle.stderrTail}`
       }
     };
     killGroup("SIGTERM");
-    const exited = new Promise((resolve8) => child.once("exit", () => resolve8()));
+    const exited = new Promise((resolve9) => child.once("exit", () => resolve9()));
     const timed = (0, import_promises14.setTimeout)(5e3).then(() => "timeout");
     const winner = await Promise.race([exited.then(() => "exited"), timed]);
     if (winner === "timeout" && child.exitCode === null) {