@clawos-dev/clawd 0.2.382 → 0.2.383

package/dist/cli.cjs

@@ -450,8 +450,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path87, errorMaps, issueData } = params;
-      const fullPath = [...path87, ...issueData.path || []];
+      const { data, path: path89, errorMaps, issueData } = params;
+      const fullPath = [...path89, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -762,11 +762,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path87, key) {
+      constructor(parent, value, path89, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path87;
+        this._path = path89;
         this._key = key;
       }
       get path() {
@@ -6202,7 +6202,11 @@ var init_dispatch = __esm({
       // 时 daemon 层静默丢弃（避免半途改 label 造成 sidebar 抖动）。
       // 上限 60 字符——sidebar 显示 tolerance，卡在 dispatch 入口即可。
       // 协议层不硬拒 sessionLabel + dispatchId 同传，保留 forward-compat。
-      sessionLabel: external_exports.string().min(1).max(60).optional()
+      sessionLabel: external_exports.string().min(1).max(60).optional(),
+      // 上层消费者（Master）挂载话题/线语义：topicId / lineId / 验收标准 / rejectCount 等。
+      // daemon **不解释**内容，只透传进台账行 DispatchRecord.meta（新开）或与既有 meta
+      // merge（续派，见 handlers/persona-dispatch.ts）。与台账行 meta 同款自由 JSON 契约。
+      meta: external_exports.record(external_exports.unknown()).optional()
     }).refine((v2) => v2.targetPersona !== void 0 || v2.dispatchId !== void 0, {
       message: "either targetPersona (new dispatch) or dispatchId (follow-up) is required"
     }).refine((v2) => !(v2.dispatchId !== void 0 && v2.targetDeviceId !== void 0), {
@@ -6594,6 +6598,202 @@ var init_shift_internal = __esm({
   }
 });
 
+// ../protocol/src/channel.ts
+var ChannelSchema, nonBlank, ChannelCreateArgsSchema, ChannelUpdateArgsSchema, ChannelDeleteArgsSchema, ChannelListResultSchema, ChannelResultSchema, ChannelDeleteResultSchema;
+var init_channel = __esm({
+  "../protocol/src/channel.ts"() {
+    "use strict";
+    init_zod();
+    ChannelSchema = external_exports.object({
+      id: external_exports.string().min(1),
+      name: external_exports.string().min(1),
+      /** 该频道里可被派活的 persona */
+      memberPersonaIds: external_exports.array(external_exports.string().min(1)),
+      /** 人类成员（contact deviceId）；M2 只存不用，P1 异步询问才消费 */
+      memberContactDeviceIds: external_exports.array(external_exports.string().min(1)),
+      createdAt: external_exports.string().min(1),
+      updatedAt: external_exports.string().min(1)
+    });
+    nonBlank = external_exports.string().trim().min(1);
+    ChannelCreateArgsSchema = external_exports.object({
+      name: nonBlank,
+      memberPersonaIds: external_exports.array(external_exports.string().min(1)).default([]),
+      memberContactDeviceIds: external_exports.array(external_exports.string().min(1)).default([])
+    });
+    ChannelUpdateArgsSchema = external_exports.object({
+      channelId: external_exports.string().min(1),
+      name: nonBlank.optional(),
+      memberPersonaIds: external_exports.array(external_exports.string().min(1)).optional(),
+      memberContactDeviceIds: external_exports.array(external_exports.string().min(1)).optional()
+    });
+    ChannelDeleteArgsSchema = external_exports.object({ channelId: external_exports.string().min(1) });
+    ChannelListResultSchema = external_exports.object({ channels: external_exports.array(ChannelSchema) });
+    ChannelResultSchema = external_exports.object({ channel: ChannelSchema });
+    ChannelDeleteResultSchema = external_exports.object({
+      ok: external_exports.literal(true),
+      /** 一并清掉的已结束话题数：不留悬挂记录，也不静默——删了几条明确回给调用方 */
+      removedTopics: external_exports.number().int().min(0)
+    });
+  }
+});
+
+// ../protocol/src/topic.ts
+var nonBlank2, TOPIC_STATES, TopicStateSchema, TopicActivityEntrySchema, TopicLineMetaSchema, TopicSchema, TopicLineViewSchema, TopicListArgsSchema, TopicGetArgsSchema, TopicCreateArgsSchema, TopicSetPlanArgsSchema, TopicAppendArgsSchema, TopicRejectArgsSchema, TopicAcceptArgsSchema, TopicCloseArgsSchema, TopicListItemSchema, TopicListResultSchema, TopicGetResultSchema, TopicCreateResultSchema, TopicRejectResultSchema, TopicAcceptResultSchema, TopicResultSchema;
+var init_topic = __esm({
+  "../protocol/src/topic.ts"() {
+    "use strict";
+    init_zod();
+    init_dispatch();
+    nonBlank2 = external_exports.string().trim().min(1);
+    TOPIC_STATES = ["planning", "running", "done", "archived"];
+    TopicStateSchema = external_exports.enum(TOPIC_STATES);
+    TopicActivityEntrySchema = external_exports.object({
+      at: external_exports.string().min(1),
+      actor: external_exports.string().min(1),
+      action: external_exports.string().min(1),
+      target: external_exports.string().optional(),
+      reason: external_exports.string().min(1),
+      /** 该动作确认的产出物（watcher 返回的 artifacts）；影响面视图的唯一数据源 */
+      artifacts: external_exports.array(nonBlank2).optional()
+    });
+    TopicLineMetaSchema = external_exports.object({
+      rejectCount: external_exports.number().int().min(0),
+      accepted: external_exports.boolean().default(false)
+    });
+    TopicSchema = external_exports.object({
+      id: external_exports.string().min(1),
+      channelId: external_exports.string().min(1),
+      title: external_exports.string(),
+      /** 该话题的 Master session；topic:create 时一并起，1:1 */
+      masterSessionId: external_exports.string().min(1),
+      goal: external_exports.string(),
+      boundaries: external_exports.string(),
+      acceptanceCriteria: external_exports.array(external_exports.string()),
+      activity: external_exports.array(TopicActivityEntrySchema),
+      /** lineId -> 线级元数据 */
+      lineMeta: external_exports.record(TopicLineMetaSchema),
+      state: TopicStateSchema,
+      createdAt: external_exports.string().min(1),
+      updatedAt: external_exports.string().min(1)
+    });
+    TopicLineViewSchema = external_exports.object({
+      lineId: external_exports.string().min(1),
+      dispatchId: external_exports.string().min(1),
+      workerSessionId: external_exports.string().optional(),
+      assignee: external_exports.string().min(1),
+      focus: external_exports.string(),
+      status: DispatchStatusSchema,
+      acceptance: external_exports.array(external_exports.string()),
+      rejectCount: external_exports.number().int().min(0),
+      /** 已被 Master 判定合格（`topic:accept`）。UI 的「合格」态靠它，不是猜的 */
+      accepted: external_exports.boolean()
+    });
+    TopicListArgsSchema = external_exports.object({ channelId: external_exports.string().min(1) });
+    TopicGetArgsSchema = external_exports.object({
+      topicId: external_exports.string().min(1).optional(),
+      sessionId: external_exports.string().min(1).optional()
+    }).refine((v2) => v2.topicId !== void 0 || v2.sessionId !== void 0, {
+      message: "either topicId or sessionId is required"
+    });
+    TopicCreateArgsSchema = external_exports.object({
+      channelId: external_exports.string().min(1),
+      /** 可后补：spike 动线是老板先说一句话，标题随 topic:setPlan 落 */
+      title: nonBlank2.optional()
+    });
+    TopicSetPlanArgsSchema = external_exports.object({
+      topicId: external_exports.string().min(1),
+      title: nonBlank2.optional(),
+      goal: nonBlank2,
+      boundaries: external_exports.string(),
+      // 没有验收标准就不开工（PRD §6.1）：否则 Master 无法自主判定收敛，
+      // 只能照单全收 worker 自述，退化成传话筒。
+      acceptanceCriteria: external_exports.array(nonBlank2).min(1)
+    });
+    TopicAppendArgsSchema = external_exports.object({
+      topicId: external_exports.string().min(1),
+      action: nonBlank2,
+      target: nonBlank2.optional(),
+      reason: nonBlank2,
+      /** 该动作确认的产出物；影响面视图只吃这个字段 */
+      artifacts: external_exports.array(nonBlank2).optional()
+    });
+    TopicRejectArgsSchema = external_exports.object({
+      topicId: external_exports.string().min(1),
+      lineId: nonBlank2,
+      reason: nonBlank2
+    });
+    TopicAcceptArgsSchema = external_exports.object({
+      topicId: external_exports.string().min(1),
+      lineId: nonBlank2,
+      /** 凭什么判合格（逐条标准对应到什么证据）——与打回同样必填 */
+      reason: nonBlank2,
+      /** watcher 认定的产出物，一并进影响面 */
+      artifacts: external_exports.array(nonBlank2).optional()
+    });
+    TopicCloseArgsSchema = external_exports.object({
+      topicId: external_exports.string().min(1),
+      state: external_exports.enum(["done", "archived"])
+    });
+    TopicListItemSchema = TopicSchema.extend({
+      lineCount: external_exports.number().int().min(0)
+    });
+    TopicListResultSchema = external_exports.object({ topics: external_exports.array(TopicListItemSchema) });
+    TopicGetResultSchema = external_exports.object({
+      topic: TopicSchema,
+      lines: external_exports.array(TopicLineViewSchema)
+    });
+    TopicCreateResultSchema = external_exports.object({
+      topicId: external_exports.string().min(1),
+      masterSessionId: external_exports.string().min(1)
+    });
+    TopicRejectResultSchema = external_exports.object({
+      rejectCount: external_exports.number().int().min(1),
+      /** 连续两次打回仍不合格 → 必须上报老板（PRD §10.3），不靠 Master 自己数 */
+      needsOwnerAttention: external_exports.boolean()
+    });
+    TopicAcceptResultSchema = external_exports.object({
+      acceptedLines: external_exports.number().int().min(1),
+      totalLines: external_exports.number().int().min(1),
+      /** 全部线都合格了 → 可以收敛上报。由 daemon 数，不让 Master 自己盘 */
+      allAccepted: external_exports.boolean()
+    });
+    TopicResultSchema = external_exports.object({ topic: TopicSchema });
+  }
+});
+
+// ../protocol/src/master.ts
+var LineDigestArgsSchema, LineDigestResultSchema, AUTHORITY_ACTIONS, AuthorityActionSchema, AuthorityRuleSchema, AuthorityTableSchema, AuthorityCheckArgsSchema, AuthorityCheckResultSchema;
+var init_master = __esm({
+  "../protocol/src/master.ts"() {
+    "use strict";
+    init_zod();
+    LineDigestArgsSchema = external_exports.object({
+      /** 一条线 = 一条 dispatch；daemon 内部据此解析 worker session 与 transcript */
+      dispatchId: external_exports.string().min(1)
+    });
+    LineDigestResultSchema = external_exports.object({
+      digest: external_exports.string(),
+      /** 抽取时是否因超上限被截断——watcher 据此避免"仅凭没看到就判 fail" */
+      truncated: external_exports.boolean()
+    });
+    AUTHORITY_ACTIONS = ["ask", "allow", "deny"];
+    AuthorityActionSchema = external_exports.enum(AUTHORITY_ACTIONS);
+    AuthorityRuleSchema = external_exports.object({
+      id: external_exports.string().min(1),
+      desc: external_exports.string().min(1),
+      action: AuthorityActionSchema
+    });
+    AuthorityTableSchema = external_exports.object({ rules: external_exports.array(AuthorityRuleSchema) });
+    AuthorityCheckArgsSchema = external_exports.object({ ruleId: external_exports.string().min(1) });
+    AuthorityCheckResultSchema = external_exports.object({
+      action: AuthorityActionSchema,
+      desc: external_exports.string(),
+      /** 裁决出处：'table' / 'default' / 'fallback:<原因>'。异常兜底成 ask 时靠它说明为什么 */
+      source: external_exports.string().min(1)
+    });
+  }
+});
+
 // ../protocol/src/github.ts
 var GITHUB_PR_ROLES, REPO_SEGMENT, owner, repo, number, GithubPrListArgs, GithubPrDetailArgs, GithubPrMergeArgs, GithubPrCommentArgs, GithubPrSetReadyArgs, GithubCollaboratorsArgs, GithubPrRequestReviewersArgs;
 var init_github = __esm({
@@ -8025,6 +8225,9 @@ var init_methods = __esm({
     init_inbox();
     init_peer_exec();
     init_shift_internal();
+    init_channel();
+    init_topic();
+    init_master();
     init_github();
     init_lark_bot_schemas();
     init_onboarding_schemas();
@@ -8213,6 +8416,68 @@ var init_methods = __esm({
         summary: "\u5217\u51FA owner \u7684\u5168\u90E8 shift\uFF08\u6392\u73ED\uFF09\uFF0C\u7ED9 UI \u65E5\u5386\u6E32\u67D3\u7528\uFF1Bowner-only",
         args: NO_ARGS
       },
+      // ---- channel:*（Channel × Master：话题的聚合，纯组织单位）----
+      "channel:list": {
+        summary: "\u5217\u51FA\u5168\u90E8\u9891\u9053\uFF08Channel \xD7 Master \u7684\u7EC4\u7EC7\u5355\u4F4D\uFF1A\u6210\u5458\u540D\u5355 + \u8BDD\u9898\u7684\u805A\u5408\uFF09\uFF1Bowner-only\u3002\u65E0\u53C2\u6570",
+        args: NO_ARGS
+      },
+      "channel:create": {
+        summary: "\u5EFA\u9891\u9053\uFF1Aname \u975E\u7A7A\uFF0C\u6210\u5458 persona / \u8054\u7CFB\u4EBA\u53EF\u7A7A\u3002\u8FD4\u56DE\u65B0\u5EFA\u7684 Channel",
+        args: ChannelCreateArgsSchema
+      },
+      "channel:update": {
+        summary: "\u6539\u9891\u9053\uFF1AchannelId \u5FC5\u586B\uFF0Cname / \u6210\u5458\u5217\u8868\u6309\u9700\u5C40\u90E8\u66F4\u65B0",
+        args: ChannelUpdateArgsSchema
+      },
+      "channel:delete": {
+        summary: "\u5220\u9891\u9053\uFF1B\u5176\u4E0B\u4ECD\u6709\u672A\u7ED3\u675F\u8BDD\u9898\u65F6\u62D2\u7EDD\uFF08fail-fast\uFF0C\u4E0D\u7EA7\u8054\u5220\u8BDD\u9898\uFF09",
+        args: ChannelDeleteArgsSchema
+      },
+      // ---- topic:*（话题：一个任务的容器；一个话题 = 一个 Master session）----
+      "topic:list": {
+        summary: "\u5217\u67D0\u9891\u9053\u4E0B\u5168\u90E8\u8BDD\u9898\uFF08\u542B\u72B6\u6001\uFF0C\u4F9B\u9891\u9053 flyout \u5217\u8868\uFF09",
+        args: TopicListArgsSchema
+      },
+      "topic:get": {
+        summary: "\u8BDD\u9898\u8BE6\u60C5\uFF1A\u4E09\u8981\u7D20 + \u6D41\u6C34 + lines\uFF08lines \u4ECE dispatch \u53F0\u8D26 join\uFF0C\u4E0D\u5355\u72EC\u843D\u5E93\uFF09\u3002topicId \u6216 sessionId \u4E8C\u9009\u4E00\u2014\u2014Master \u4E0D\u5E26\u53C2\u8C03\uFF08\u6865\u81EA\u52A8\u586B sessionId\uFF09\u5373\u300C\u67E5\u6211\u7ED1\u7684\u90A3\u6761\u8BDD\u9898\u300D\uFF0C\u4E5F\u662F\u5B83\u88AB\u6E05\u7A7A\u540E\u91CD\u5EFA\u73B0\u573A\u7684\u5165\u53E3",
+        args: TopicGetArgsSchema,
+        argsConstraints: {
+          anyOf: [{ required: ["topicId"] }, { required: ["sessionId"] }]
+        }
+      },
+      "topic:create": {
+        summary: "\u5EFA\u8BDD\u9898\u5E76\u4E00\u5E76\u8D77\u8BE5\u8BDD\u9898\u7684 Master session\uFF081:1\uFF09\uFF0C\u8FD4\u56DE topicId + masterSessionId\u3002title \u53EF\u540E\u8865",
+        args: TopicCreateArgsSchema
+      },
+      "topic:setPlan": {
+        summary: "\u63A5\u6D3B\u5BF9\u9F50\u540E\u9501\u5B9A\u4E09\u8981\u7D20\uFF1BacceptanceCriteria \u5FC5\u987B\u975E\u7A7A\u2014\u2014\u6CA1\u6709\u9A8C\u6536\u6807\u51C6\u5C31\u4E0D\u5F00\u5DE5",
+        args: TopicSetPlanArgsSchema
+      },
+      "topic:append": {
+        summary: '\u5F80\u8BDD\u9898\u6D41\u6C34\u8FFD\u52A0\u4E00\u6761\uFF1Breason \u5FC5\u586B\uFF08\u8001\u677F\u4E8B\u540E\u770B\u7684\u662F"\u51ED\u4EC0\u4E48\u8FD9\u4E48\u5224\u65AD"\uFF09',
+        args: TopicAppendArgsSchema
+      },
+      "topic:reject": {
+        summary: "\u6253\u56DE\u67D0\u6761\u7EBF\uFF1A\u8BA1\u6570 +1 \u5E76\u540C\u6B65\u843D\u4E00\u6761\u6D41\u6C34\uFF1Breason \u5FC5\u586B\u3002\u8FD4\u56DE rejectCount \u4E0E needsOwnerAttention\uFF08\u22652 \u5373 true\uFF09",
+        args: TopicRejectArgsSchema
+      },
+      "topic:accept": {
+        summary: "\u5224\u67D0\u6761\u7EBF\u5408\u683C\uFF1A\u7F6E accepted \u5E76\u540C\u6B65\u843D\u4E00\u6761\u6D41\u6C34\uFF1Breason \u5FC5\u586B\uFF08\u4E0E\u6253\u56DE\u5BF9\u79F0\uFF0C\u53EA\u8BB0\u6253\u56DE\u7B49\u4E8E\u53EA\u8BB0\u5206\u5B50\uFF09\u3002\u8FD4\u56DE acceptedLines / totalLines / allAccepted\uFF0C\u6536\u655B\u65F6\u673A\u7531 daemon \u6570\u4E0D\u7531 Master \u76D8",
+        args: TopicAcceptArgsSchema
+      },
+      "topic:close": {
+        summary: "\u6536\u655B\u8BDD\u9898\uFF1Astate \u7F6E done / archived",
+        args: TopicCloseArgsSchema
+      },
+      // ---- line:digest / master:*（核验与授权，Master 经 clawd-rpc 桥调）----
+      "line:digest": {
+        summary: "\u628A\u4E00\u6761\u7EBF\uFF08dispatch\uFF09\u7684 worker transcript \u62BD\u6210 \u226420KB digest\uFF1A\u6539\u52A8\u8FC7\u7684\u6587\u4EF6 / \u6267\u884C\u8FC7\u7684\u547D\u4EE4 / \u6210\u529F\u547D\u4EE4\u8F93\u51FA\u6458\u5F55 / \u62A5\u9519\u805A\u5408 / \u5C3E\u90E8 assistant \u8F93\u51FA\u3002\u6838\u9A8C subagent \u7528\u5B83\uFF0C\u907F\u514D\u76F4\u63A5\u8BFB\u53EF\u8FBE 10MB \u7684\u539F\u59CB\u6D41",
+        args: LineDigestArgsSchema
+      },
+      "master:authorityCheck": {
+        summary: "\u67E5 Master \u7684\u6388\u6743\u8BBE\u5B9A\uFF08\u5168\u5C40\u4E00\u5957\uFF09\uFF1A\u8FD4\u56DE ask / allow / deny\u3002\u8868\u7F3A\u5931\u3001\u8BFB\u574F\u3001\u7ED3\u6784\u4E0D\u5BF9\u3001action \u62FC\u9519\u3001id \u672A\u767B\u8BB0\uFF0C\u4E00\u5F8B\u88C1\u51B3 ask",
+        args: AuthorityCheckArgsSchema
+      },
       "github:status": {
         summary: "\u63A2\u6D4B\u672C\u673A gh CLI\uFF08PR \u6536\u4EF6\u7BB1\u524D\u7F6E\uFF09\uFF1A\u662F\u5426\u5B89\u88C5\u3001\u662F\u5426\u5DF2\u767B\u5F55 github.com\u3001\u767B\u5F55\u540D\u3002\u65E0\u53C2\u6570",
         args: NO_ARGS
@@ -8743,6 +9008,9 @@ var init_runtime = __esm({
     init_extension();
     init_feishu_auth();
     init_dispatch();
+    init_channel();
+    init_topic();
+    init_master();
     init_log();
     init_visitor_schemas();
     init_github();
@@ -9024,8 +9292,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path87 = req.path;
-        _req.url = typeof path87 === "string" ? path87 : req.url ? req.url.path || req.url : void 0;
+        const path89 = req.path;
+        _req.url = typeof path89 === "string" ? path89 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -9190,14 +9458,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path87) {
+    function parsePath(path89) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path87.length; i++) {
-        const char = path87[i];
+      for (let i = 0; i < path89.length; i++) {
+        const char = path89[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -9328,10 +9596,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path87 of paths) {
-        const parts = parsePath(path87);
+      for (const path89 of paths) {
+        const parts = parsePath(path89);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path87, remove);
+          redactWildcardPath(obj, parts, censor, path89, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -9416,8 +9684,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path87) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path87];
+            const wrappedCensor = typeof censor === "function" ? (value, path89) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path89];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -9452,8 +9720,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path87 of pathsToClone) {
-        const parts = parsePath(path87);
+      for (const path89 of pathsToClone) {
+        const parts = parsePath(path89);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -9505,24 +9773,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path87) {
-      if (typeof path87 !== "string") {
+    function validatePath(path89) {
+      if (typeof path89 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path87 === "") {
+      if (path89 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path87.includes("..")) {
-        throw new Error(`Invalid redaction path (${path87})`);
+      if (path89.includes("..")) {
+        throw new Error(`Invalid redaction path (${path89})`);
       }
-      if (path87.includes(",")) {
-        throw new Error(`Invalid redaction path (${path87})`);
+      if (path89.includes(",")) {
+        throw new Error(`Invalid redaction path (${path89})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path87.length; i++) {
-        const char = path87[i];
+      for (let i = 0; i < path89.length; i++) {
+        const char = path89[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -9536,20 +9804,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path87})`);
+            throw new Error(`Invalid redaction path (${path89})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path87})`);
+        throw new Error(`Invalid redaction path (${path89})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path87 of paths) {
-        validatePath(path87);
+      for (const path89 of paths) {
+        validatePath(path89);
       }
     }
     function slowRedact(options = {}) {
@@ -9717,8 +9985,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path87) => {
-            return censor(value, [k2, ...path87]);
+          const wrappedCensor = typeof censor === "function" ? (value, path89) => {
+            return censor(value, [k2, ...path89]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -9936,10 +10204,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs77 = require("fs");
+    var fs79 = require("fs");
     var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
-    var path87 = require("path");
+    var path89 = require("path");
     var sleep2 = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -9993,20 +10261,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs77.mkdirSync(path87.dirname(file), { recursive: true });
-          const fd = fs77.openSync(file, flags, mode);
+          if (sonic.mkdir) fs79.mkdirSync(path89.dirname(file), { recursive: true });
+          const fd = fs79.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs77.mkdir(path87.dirname(file), { recursive: true }, (err) => {
+        fs79.mkdir(path89.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs77.open(file, flags, mode, fileOpened);
+          fs79.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs77.open(file, flags, mode, fileOpened);
+        fs79.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -10047,8 +10315,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs77.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs77.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs79.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs79.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -10057,15 +10325,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs77.writeSync(this.fd, this._writingBuf);
+            return fs79.writeSync(this.fd, this._writingBuf);
           }
-          return fs77.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs79.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs77.write(this.fd, this._writingBuf, this.release);
+            return fs79.write(this.fd, this._writingBuf, this.release);
           }
-          return fs77.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs79.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -10122,7 +10390,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs77.fsyncSync(this.fd);
+          fs79.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -10236,7 +10504,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs77.fsync(this.fd, (err) => {
+            fs79.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -10338,7 +10606,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs77.close(fd, (err) => {
+          fs79.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -10387,7 +10655,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs77.writeSync(this.fd, buf) : fs77.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs79.writeSync(this.fd, buf) : fs79.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -10403,7 +10671,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs77.fsyncSync(this.fd);
+        fs79.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -10424,7 +10692,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs77.writeSync(this.fd, buf);
+          const n = fs79.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -10452,13 +10720,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs77.writeSync(this.fd, this._writingBuf) : fs77.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs79.writeSync(this.fd, this._writingBuf) : fs79.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs77.write(this.fd, this._writingBuf, release);
+        fs79.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -10467,7 +10735,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs77.writeSync(this.fd, this._writingBuf);
+          const written = fs79.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -10476,7 +10744,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs77.write(this.fd, this._writingBuf, release);
+        fs79.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -10492,12 +10760,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs77.fsync(sonic.fd, closeWrapped);
+        fs79.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs77.close(sonic.fd, done);
+          fs79.close(sonic.fd, done);
         } else {
           done();
         }
@@ -13632,11 +13900,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path87, added, removed, oldPosInc, options) {
-        var last = path87.lastComponent;
+      addToPath: function addToPath(path89, added, removed, oldPosInc, options) {
+        var last = path89.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path87.oldPos + oldPosInc,
+            oldPos: path89.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -13646,7 +13914,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path87.oldPos + oldPosInc,
+            oldPos: path89.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -13956,24 +14224,46 @@ function safeStatMtime(p2) {
     return 0;
   }
 }
-function readJsonlLines(file) {
-  let raw;
+function* streamJsonlLines(file) {
+  let fd;
   try {
-    raw = import_node_fs6.default.readFileSync(file, "utf8");
+    fd = import_node_fs6.default.openSync(file, "r");
   } catch (err) {
-    if (err.code === "ENOENT") return [];
+    if (err.code === "ENOENT") return;
     throw err;
   }
-  const lines = [];
-  for (const line of raw.split("\n")) {
-    const t = line.trim();
-    if (!t) continue;
-    try {
-      lines.push(JSON.parse(t));
-    } catch {
+  const decoder = new import_node_string_decoder.StringDecoder("utf8");
+  const buf = Buffer.allocUnsafe(JSONL_CHUNK_BYTES);
+  let pending = "";
+  try {
+    for (; ; ) {
+      const n = import_node_fs6.default.readSync(fd, buf, 0, JSONL_CHUNK_BYTES, null);
+      if (n === 0) break;
+      pending += decoder.write(buf.subarray(0, n));
+      let nl;
+      while ((nl = pending.indexOf("\n")) >= 0) {
+        const line = pending.slice(0, nl).trim();
+        pending = pending.slice(nl + 1);
+        if (!line) continue;
+        try {
+          yield JSON.parse(line);
+        } catch {
+        }
+      }
+    }
+    const last = (pending + decoder.end()).trim();
+    if (last) {
+      try {
+        yield JSON.parse(last);
+      } catch {
+      }
     }
+  } finally {
+    import_node_fs6.default.closeSync(fd);
   }
-  return lines;
+}
+function readJsonlLines(file) {
+  return [...streamJsonlLines(file)];
 }
 function classifyUserMessage(input) {
   const text = input.text ?? "";
@@ -14178,10 +14468,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec4 = m2;
-      const path87 = typeof rec4.path === "string" ? rec4.path : null;
+      const path89 = typeof rec4.path === "string" ? rec4.path : null;
       const content = typeof rec4.content === "string" ? rec4.content : null;
-      if (!path87 || content == null) return null;
-      const entry = { path: path87, content };
+      if (!path89 || content == null) return null;
+      const entry = { path: path89, content };
       if (typeof rec4.mtimeMs === "number") entry.mtimeMs = rec4.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -14233,7 +14523,7 @@ function readCurrentContent(filePath) {
     return null;
   }
 }
-var import_node_crypto3, import_node_fs6, import_node_os3, import_node_path5, TASK_NOTIFICATION_RE, TASK_ID_RE, TOOL_USE_ID_RE, SLASH_COMMAND_RE, LOCAL_COMMAND_RE, SYSTEM_REMINDER_RE, OPENSPEC_BLOCK_RE, SKILL_HINT_RE, ATTACHMENT_SILENT_SUBTYPES, ClaudeHistoryReader;
+var import_node_crypto3, import_node_fs6, import_node_os3, import_node_path5, import_node_string_decoder, JSONL_CHUNK_BYTES, TASK_NOTIFICATION_RE, TASK_ID_RE, TOOL_USE_ID_RE, SLASH_COMMAND_RE, LOCAL_COMMAND_RE, SYSTEM_REMINDER_RE, OPENSPEC_BLOCK_RE, SKILL_HINT_RE, ATTACHMENT_SILENT_SUBTYPES, ClaudeHistoryReader;
 var init_claude_history = __esm({
   "src/tools/claude-history.ts"() {
     "use strict";
@@ -14241,8 +14531,10 @@ var init_claude_history = __esm({
     import_node_fs6 = __toESM(require("fs"), 1);
     import_node_os3 = __toESM(require("os"), 1);
     import_node_path5 = __toESM(require("path"), 1);
+    import_node_string_decoder = require("string_decoder");
     init_lib();
     init_tool_result_extra();
+    JSONL_CHUNK_BYTES = 256 * 1024;
     TASK_NOTIFICATION_RE = /<task-notification\b[\s\S]*?<\/task-notification>/i;
     TASK_ID_RE = /<task-id>\s*([^<\s][^<]*?)\s*<\/task-id>/i;
     TOOL_USE_ID_RE = /<tool-use-id>\s*([^<\s][^<]*?)\s*<\/tool-use-id>/i;
@@ -14288,6 +14580,20 @@ var init_claude_history = __esm({
         const found = findTranscriptByToolSessionId(this.projectsRoot, toolSessionId);
         return found ? import_node_path5.default.dirname(found) : byCwd;
       }
+      /**
+       * 定位一条 session 的 transcript 文件；不存在返回 null。
+       *
+       * 对外开这一口是为了让 adapter 之外的消费者（`line:digest`）**不必自己拼路径**：
+       * 「按 cwd 直取 → 按 tsid 全局兜底」这套 relocation 逻辑曾被抄成第二份，
+       * 规则一改就静默漂移。路径编码（cwdToHashDir）与兜底顺序全仓只此一处。
+       *
+       * 返回 null 而不是不存在的路径：调用方要能区分「还没写盘」与「读到空 transcript」——
+       * 后者会让核验把一条刚 spawn 的线判成假完成。
+       */
+      resolveTranscriptFile(cwd, toolSessionId) {
+        const file = import_node_path5.default.join(this.resolveSessionDir(cwd, toolSessionId), `${toolSessionId}.jsonl`);
+        return import_node_fs6.default.existsSync(file) ? file : null;
+      }
       async listProjects() {
         let entries;
         try {
@@ -15032,10 +15338,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec4 = m2;
-      const path87 = typeof rec4.path === "string" ? rec4.path : null;
+      const path89 = typeof rec4.path === "string" ? rec4.path : null;
       const content = typeof rec4.content === "string" ? rec4.content : null;
-      if (!path87 || content == null) return null;
-      const out = { path: path87, content };
+      if (!path89 || content == null) return null;
+      const out = { path: path89, content };
       if (typeof rec4.mtimeMs === "number") out.mtimeMs = rec4.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -34101,8 +34407,8 @@ var require_string_decoder = __commonJS({
       if (typeof nenc !== "string" && (Buffer2.isEncoding === isEncoding || !isEncoding(enc))) throw new Error("Unknown encoding: " + enc);
       return nenc || enc;
     }
-    exports2.StringDecoder = StringDecoder;
-    function StringDecoder(encoding) {
+    exports2.StringDecoder = StringDecoder2;
+    function StringDecoder2(encoding) {
       this.encoding = normalizeEncoding(encoding);
       var nb;
       switch (this.encoding) {
@@ -34129,7 +34435,7 @@ var require_string_decoder = __commonJS({
       this.lastTotal = 0;
       this.lastChar = Buffer2.allocUnsafe(nb);
     }
-    StringDecoder.prototype.write = function(buf) {
+    StringDecoder2.prototype.write = function(buf) {
       if (buf.length === 0) return "";
       var r;
       var i;
@@ -34144,9 +34450,9 @@ var require_string_decoder = __commonJS({
       if (i < buf.length) return r ? r + this.text(buf, i) : this.text(buf, i);
       return r || "";
     };
-    StringDecoder.prototype.end = utf8End;
-    StringDecoder.prototype.text = utf8Text;
-    StringDecoder.prototype.fillLast = function(buf) {
+    StringDecoder2.prototype.end = utf8End;
+    StringDecoder2.prototype.text = utf8Text;
+    StringDecoder2.prototype.fillLast = function(buf) {
       if (this.lastNeed <= buf.length) {
         buf.copy(this.lastChar, this.lastTotal - this.lastNeed, 0, this.lastNeed);
         return this.lastChar.toString(this.encoding, 0, this.lastTotal);
@@ -34318,7 +34624,7 @@ var require_stream_readable = __commonJS({
     }
     var BufferList = require_BufferList();
     var destroyImpl = require_destroy();
-    var StringDecoder;
+    var StringDecoder2;
     util2.inherits(Readable3, Stream);
     var kProxyEvents = ["error", "close", "destroy", "pause", "resume"];
     function prependListener(emitter, event, fn) {
@@ -34360,8 +34666,8 @@ var require_stream_readable = __commonJS({
       this.decoder = null;
       this.encoding = null;
       if (options.encoding) {
-        if (!StringDecoder) StringDecoder = require_string_decoder().StringDecoder;
-        this.decoder = new StringDecoder(options.encoding);
+        if (!StringDecoder2) StringDecoder2 = require_string_decoder().StringDecoder;
+        this.decoder = new StringDecoder2(options.encoding);
         this.encoding = options.encoding;
       }
     }
@@ -34477,8 +34783,8 @@ var require_stream_readable = __commonJS({
       return this._readableState.flowing === false;
     };
     Readable3.prototype.setEncoding = function(enc) {
-      if (!StringDecoder) StringDecoder = require_string_decoder().StringDecoder;
-      this._readableState.decoder = new StringDecoder(enc);
+      if (!StringDecoder2) StringDecoder2 = require_string_decoder().StringDecoder;
+      this._readableState.decoder = new StringDecoder2(enc);
       this._readableState.encoding = enc;
       return this;
     };
@@ -36009,8 +36315,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path87) {
-      var parts = path87.split("/");
+    exports2.resolve = function(path89) {
+      var parts = path89.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -41863,18 +42169,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path87) {
-      if (path87.slice(-1) === "/") {
-        path87 = path87.substring(0, path87.length - 1);
+    var parentFolder = function(path89) {
+      if (path89.slice(-1) === "/") {
+        path89 = path89.substring(0, path89.length - 1);
       }
-      var lastSlash = path87.lastIndexOf("/");
-      return lastSlash > 0 ? path87.substring(0, lastSlash) : "";
+      var lastSlash = path89.lastIndexOf("/");
+      return lastSlash > 0 ? path89.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path87) {
-      if (path87.slice(-1) !== "/") {
-        path87 += "/";
+    var forceTrailingSlash = function(path89) {
+      if (path89.slice(-1) !== "/") {
+        path89 += "/";
       }
-      return path87;
+      return path89;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -42876,7 +43182,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path69.default.dirname(opts.recordPath);
+  const dir = import_node_path71.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -42916,12 +43222,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs53, import_node_path69;
+var import_node_fs53, import_node_path71;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
     import_node_fs53 = __toESM(require("fs"), 1);
-    import_node_path69 = __toESM(require("path"), 1);
+    import_node_path71 = __toESM(require("path"), 1);
   }
 });
 
@@ -42964,7 +43270,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs54.mkdtempSync)(import_node_path70.default.join(import_node_os25.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs54.mkdtempSync)(import_node_path72.default.join(import_node_os25.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -43131,13 +43437,13 @@ async function runController(opts) {
   }
   return exitCode ?? 0;
 }
-var import_node_fs54, import_node_os25, import_node_path70;
+var import_node_fs54, import_node_os25, import_node_path72;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
     import_node_fs54 = require("fs");
     import_node_os25 = __toESM(require("os"), 1);
-    import_node_path70 = __toESM(require("path"), 1);
+    import_node_path72 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -43412,7 +43718,7 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path68 = __toESM(require("path"), 1);
+var import_node_path70 = __toESM(require("path"), 1);
 var import_node_fs52 = __toESM(require("fs"), 1);
 var import_node_os24 = __toESM(require("os"), 1);
 
@@ -49191,6 +49497,21 @@ var DEFAULT_PERSONAS = [
       denyRead: [".secrets/**"],
       network: true
     }
+  },
+  {
+    // Master：spec superpowers/specs/2026-08-21-channel-master-m2-design.md
+    // 代替老板操盘一群 worker persona：拆线 / 派活 / **验收 / 打回** / 收敛 / 上报。
+    // 判断力靠 CLAUDE.md 人格 + .claude/agents/line-watcher.md（核验 subagent），
+    // 纪律靠 daemon 侧 zod（`topic:*` 的 reason / acceptanceCriteria 非空在 RPC 入口拒，
+    // 没有绕过路径）+ `master:authorityCheck` 查表。M1 那三个 bundle 内 .mjs 脚本已随
+    // M2「MCP 化」整体拆除，别再照那套找。
+    personaId: "persona-master",
+    label: "Master",
+    model: "opus",
+    effort: "high",
+    iconKey: "assist",
+    public: false,
+    sandboxProfile: DEFAULT_BYPASS_PROFILE
   }
 ];
 function bundleSiblingFromArgv(argv1, sibling) {
@@ -49290,7 +49611,7 @@ function copyBundleExtras(srcDir, dstDir) {
     }
   }
 }
-var DAEMON_MANAGED_PATHS = ["extension-kit", "CLAUDE.md", ".mcp.json", ".claude/skills"];
+var DAEMON_MANAGED_PATHS = ["extension-kit", "CLAUDE.md", ".mcp.json", ".claude/skills", ".claude/agents"];
 function replaceManagedPath(src, dst) {
   if (!fs14.statSync(src).isDirectory()) {
     fs14.mkdirSync(path17.dirname(dst), { recursive: true });
@@ -50275,8 +50596,8 @@ function turnStartInput(text) {
   const items = [];
   let leftover = text;
   for (const m2 of text.matchAll(SKILL_RE)) {
-    const [marker, name, path87] = m2;
-    items.push({ type: "skill", name, path: path87 });
+    const [marker, name, path89] = m2;
+    items.push({ type: "skill", name, path: path89 });
     leftover = leftover.replace(marker, "");
   }
   for (const m2 of text.matchAll(ATTACHMENT_RE2)) {
@@ -52045,7 +52366,8 @@ var PersonaDispatchManager = class {
       sourceSessionId: args.sourceSessionId,
       ...args.sourcePersonaId ? { sourcePersonaId: args.sourcePersonaId } : {},
       targetPersonaId: args.targetPersona,
-      taskText: args.taskText
+      taskText: args.taskText,
+      ...args.meta ? { meta: args.meta } : {}
     });
     return { dispatchId };
   }
@@ -52194,11 +52516,203 @@ function createDispatchStore(deps) {
   return { load, flushNow, add, update, list, get, markInterruptedAsFailed };
 }
 
+// src/channel/json-store.ts
+var import_promises2 = __toESM(require("fs/promises"), 1);
+var import_node_path19 = __toESM(require("path"), 1);
+function createJsonStore(deps) {
+  let items = [];
+  let flushTimer = null;
+  async function flushNow() {
+    if (flushTimer) {
+      clearTimeout(flushTimer);
+      flushTimer = null;
+    }
+    const content = { version: 1, [deps.key]: items };
+    await import_promises2.default.mkdir(import_node_path19.default.dirname(deps.filePath), { recursive: true });
+    const tmp = `${deps.filePath}.tmp-${deps.now()}-${Math.floor(Math.random() * 1e6)}`;
+    await import_promises2.default.writeFile(tmp, JSON.stringify(content, null, 2), "utf8");
+    await import_promises2.default.rename(tmp, deps.filePath);
+  }
+  return {
+    all: () => items,
+    flushNow,
+    async load() {
+      let raw;
+      try {
+        raw = await import_promises2.default.readFile(deps.filePath, "utf8");
+      } catch (e) {
+        if (e.code === "ENOENT") {
+          items = [];
+          return;
+        }
+        throw e;
+      }
+      const parsed = JSON.parse(raw);
+      if (parsed.version !== 1) {
+        throw new Error(`${deps.key}.json: unsupported version ${String(parsed.version)}`);
+      }
+      items = parsed[deps.key] ?? [];
+    },
+    scheduleFlush() {
+      if (flushTimer) return;
+      flushTimer = setTimeout(() => {
+        flushTimer = null;
+        flushNow().catch((err) => deps.onFlushError?.(err));
+      }, STORE_FLUSH_DEBOUNCE_MS);
+    }
+  };
+}
+
+// src/channel/store.ts
+function createChannelStore(deps) {
+  const file = createJsonStore({ ...deps, key: "channels" });
+  const get = (id) => file.all().find((c) => c.id === id);
+  return {
+    load: file.load,
+    flushNow: file.flushNow,
+    list: () => [...file.all()],
+    get,
+    create(input) {
+      const iso = new Date(deps.now()).toISOString();
+      const c = {
+        id: deps.genId(),
+        name: input.name,
+        memberPersonaIds: input.memberPersonaIds,
+        memberContactDeviceIds: input.memberContactDeviceIds,
+        createdAt: iso,
+        updatedAt: iso
+      };
+      file.all().push(c);
+      file.scheduleFlush();
+      return c;
+    },
+    update(id, patch) {
+      const c = get(id);
+      if (!c) return void 0;
+      if (patch.name !== void 0) c.name = patch.name;
+      if (patch.memberPersonaIds !== void 0) c.memberPersonaIds = patch.memberPersonaIds;
+      if (patch.memberContactDeviceIds !== void 0) {
+        c.memberContactDeviceIds = patch.memberContactDeviceIds;
+      }
+      c.updatedAt = new Date(deps.now()).toISOString();
+      file.scheduleFlush();
+      return c;
+    },
+    remove(id) {
+      const items = file.all();
+      const i = items.findIndex((c) => c.id === id);
+      if (i < 0) return false;
+      items.splice(i, 1);
+      file.scheduleFlush();
+      return true;
+    }
+  };
+}
+
+// src/channel/topic-store.ts
+function createTopicStore(deps) {
+  const file = createJsonStore({ ...deps, key: "topics" });
+  const get = (topicId) => file.all().find((t) => t.id === topicId);
+  const touch = (t) => {
+    t.updatedAt = new Date(deps.now()).toISOString();
+  };
+  const lineMetaOf = (t, lineId) => t.lineMeta[lineId] ??= { rejectCount: 0, accepted: false };
+  return {
+    load: file.load,
+    flushNow: file.flushNow,
+    get,
+    getByMasterSession: (masterSessionId) => file.all().find((t) => t.masterSessionId === masterSessionId),
+    listByChannel: (channelId) => file.all().filter((t) => t.channelId === channelId),
+    create(input) {
+      const iso = new Date(deps.now()).toISOString();
+      const t = {
+        id: deps.genId(),
+        channelId: input.channelId,
+        title: input.title ?? "",
+        masterSessionId: input.masterSessionId,
+        goal: "",
+        boundaries: "",
+        acceptanceCriteria: [],
+        activity: [],
+        lineMeta: {},
+        state: "planning",
+        createdAt: iso,
+        updatedAt: iso
+      };
+      file.all().push(t);
+      file.scheduleFlush();
+      return t;
+    },
+    setPlan(topicId, plan) {
+      const t = get(topicId);
+      if (!t) return void 0;
+      if (plan.title !== void 0) t.title = plan.title;
+      t.goal = plan.goal;
+      t.boundaries = plan.boundaries;
+      t.acceptanceCriteria = plan.acceptanceCriteria;
+      t.state = "running";
+      touch(t);
+      file.scheduleFlush();
+      return t;
+    },
+    appendActivity(topicId, entry) {
+      const t = get(topicId);
+      if (!t) return void 0;
+      t.activity.push({ at: new Date(deps.now()).toISOString(), ...entry });
+      touch(t);
+      file.scheduleFlush();
+      return t;
+    },
+    bumpReject(topicId, lineId) {
+      const t = get(topicId);
+      if (!t) return void 0;
+      const meta = lineMetaOf(t, lineId);
+      meta.rejectCount += 1;
+      meta.accepted = false;
+      touch(t);
+      file.scheduleFlush();
+      return meta;
+    },
+    markAccepted(topicId, lineId) {
+      const t = get(topicId);
+      if (!t) return void 0;
+      const meta = lineMetaOf(t, lineId);
+      meta.accepted = true;
+      touch(t);
+      file.scheduleFlush();
+      return meta;
+    },
+    close(topicId, state) {
+      const t = get(topicId);
+      if (!t) return void 0;
+      t.state = state;
+      touch(t);
+      file.scheduleFlush();
+      return t;
+    },
+    hasUnfinished(channelId) {
+      return file.all().some((t) => t.channelId === channelId && (t.state === "planning" || t.state === "running"));
+    },
+    removeByChannel(channelId) {
+      const items = file.all();
+      let removed = 0;
+      for (let i = items.length - 1; i >= 0; i--) {
+        if (items[i].channelId === channelId) {
+          items.splice(i, 1);
+          removed += 1;
+        }
+      }
+      if (removed) file.scheduleFlush();
+      return removed;
+    }
+  };
+}
+
 // src/dispatch/mcp-config.ts
 var import_node_fs20 = __toESM(require("fs"), 1);
-var import_node_path19 = __toESM(require("path"), 1);
+var import_node_path20 = __toESM(require("path"), 1);
 function dispatchMcpConfigPath(dataDir) {
-  return import_node_path19.default.join(dataDir, "dispatch.mcp.json");
+  return import_node_path20.default.join(dataDir, "dispatch.mcp.json");
 }
 function writeDispatchMcpConfig(args) {
   const cfgPath = dispatchMcpConfigPath(args.dataDir);
@@ -52224,9 +52738,9 @@ function writeDispatchMcpConfig(args) {
 
 // src/ticket/mcp-config.ts
 var import_node_fs21 = __toESM(require("fs"), 1);
-var import_node_path20 = __toESM(require("path"), 1);
+var import_node_path21 = __toESM(require("path"), 1);
 function ticketMcpConfigPath(dataDir) {
-  return import_node_path20.default.join(dataDir, "ticket.mcp.json");
+  return import_node_path21.default.join(dataDir, "ticket.mcp.json");
 }
 function writeTicketMcpConfig(args) {
   const cfgPath = ticketMcpConfigPath(args.dataDir);
@@ -52255,9 +52769,9 @@ function writeTicketMcpConfig(args) {
 
 // src/shift/mcp-config.ts
 var import_node_fs22 = __toESM(require("fs"), 1);
-var import_node_path21 = __toESM(require("path"), 1);
+var import_node_path22 = __toESM(require("path"), 1);
 function shiftMcpConfigPath(dataDir) {
-  return import_node_path21.default.join(dataDir, "shift.mcp.json");
+  return import_node_path22.default.join(dataDir, "shift.mcp.json");
 }
 async function writeShiftMcpConfig(args) {
   const cfgPath = shiftMcpConfigPath(args.dataDir);
@@ -52283,9 +52797,9 @@ async function writeShiftMcpConfig(args) {
 
 // src/inbox/mcp-config.ts
 var import_node_fs23 = __toESM(require("fs"), 1);
-var import_node_path22 = __toESM(require("path"), 1);
+var import_node_path23 = __toESM(require("path"), 1);
 function inboxMcpConfigPath(dataDir) {
-  return import_node_path22.default.join(dataDir, "inbox.mcp.json");
+  return import_node_path23.default.join(dataDir, "inbox.mcp.json");
 }
 async function writeInboxMcpConfig(args) {
   const cfgPath = inboxMcpConfigPath(args.dataDir);
@@ -52311,9 +52825,9 @@ async function writeInboxMcpConfig(args) {
 
 // src/peer-ops/mcp-config.ts
 var import_node_fs24 = __toESM(require("fs"), 1);
-var import_node_path23 = __toESM(require("path"), 1);
+var import_node_path24 = __toESM(require("path"), 1);
 function peerOpsMcpConfigPath(dataDir) {
-  return import_node_path23.default.join(dataDir, "peer-ops.mcp.json");
+  return import_node_path24.default.join(dataDir, "peer-ops.mcp.json");
 }
 function writePeerOpsMcpConfig(args) {
   const cfgPath = peerOpsMcpConfigPath(args.dataDir);
@@ -52337,9 +52851,9 @@ function writePeerOpsMcpConfig(args) {
 
 // src/rpc-tool/mcp-config.ts
 var import_node_fs25 = __toESM(require("fs"), 1);
-var import_node_path24 = __toESM(require("path"), 1);
+var import_node_path25 = __toESM(require("path"), 1);
 function rpcToolMcpConfigPath(dataDir) {
-  return import_node_path24.default.join(dataDir, "rpc-tool.mcp.json");
+  return import_node_path25.default.join(dataDir, "rpc-tool.mcp.json");
 }
 function writeRpcToolMcpConfig(args) {
   const cfgPath = rpcToolMcpConfigPath(args.dataDir);
@@ -52364,12 +52878,12 @@ function writeRpcToolMcpConfig(args) {
 }
 
 // src/dispatch/source-transcript.ts
-var import_node_path25 = __toESM(require("path"), 1);
+var import_node_path26 = __toESM(require("path"), 1);
 init_claude_history();
 var NO_SOURCE_TRANSCRIPT = "(no transcript yet \u2014 operate from the task description alone)";
 function resolveSourceJsonlPath(sourceFile, home) {
   if (!sourceFile?.toolSessionId) return NO_SOURCE_TRANSCRIPT;
-  return import_node_path25.default.join(
+  return import_node_path26.default.join(
     home,
     ".claude",
     "projects",
@@ -52379,8 +52893,8 @@ function resolveSourceJsonlPath(sourceFile, home) {
 }
 
 // src/shift/store.ts
-var import_promises2 = __toESM(require("fs/promises"), 1);
-var import_node_path26 = __toESM(require("path"), 1);
+var import_promises3 = __toESM(require("fs/promises"), 1);
+var import_node_path27 = __toESM(require("path"), 1);
 var import_node_crypto6 = require("crypto");
 
 // src/shift/schedule.ts
@@ -52427,7 +52941,7 @@ function createShiftStore(deps) {
   async function load() {
     let raw;
     try {
-      raw = await import_promises2.default.readFile(deps.filePath, "utf8");
+      raw = await import_promises3.default.readFile(deps.filePath, "utf8");
     } catch (e) {
       if (e.code === "ENOENT") {
         shifts = [];
@@ -52455,10 +52969,10 @@ function createShiftStore(deps) {
       flushTimer = null;
     }
     const content = { version: 1, shifts };
-    await import_promises2.default.mkdir(import_node_path26.default.dirname(deps.filePath), { recursive: true });
+    await import_promises3.default.mkdir(import_node_path27.default.dirname(deps.filePath), { recursive: true });
     const tmp = `${deps.filePath}.tmp-${deps.now()}-${Math.floor(Math.random() * 1e6)}`;
-    await import_promises2.default.writeFile(tmp, JSON.stringify(content, null, 2), "utf8");
-    await import_promises2.default.rename(tmp, deps.filePath);
+    await import_promises3.default.writeFile(tmp, JSON.stringify(content, null, 2), "utf8");
+    await import_promises3.default.rename(tmp, deps.filePath);
   }
   function scheduleFlush() {
     if (flushTimer) return;
@@ -53124,9 +53638,9 @@ async function refreshTunnelUrlOnStartup(deps) {
 
 // src/lark-bot-connector/binding-store.ts
 var import_node_fs26 = __toESM(require("fs"), 1);
-var import_node_path27 = __toESM(require("path"), 1);
+var import_node_path28 = __toESM(require("path"), 1);
 function createLarkBotBindingStore(personaRoot) {
-  const filePath = (personaId2) => import_node_path27.default.join(personaRoot, safeFileName(personaId2), ".clawd", "lark-bot.json");
+  const filePath = (personaId2) => import_node_path28.default.join(personaRoot, safeFileName(personaId2), ".clawd", "lark-bot.json");
   const read = (personaId2) => {
     const file = filePath(personaId2);
     if (!import_node_fs26.default.existsSync(file)) return null;
@@ -53140,7 +53654,7 @@ function createLarkBotBindingStore(personaRoot) {
   };
   const write = (personaId2, meta) => {
     const file = filePath(personaId2);
-    import_node_fs26.default.mkdirSync(import_node_path27.default.dirname(file), { recursive: true });
+    import_node_fs26.default.mkdirSync(import_node_path28.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     import_node_fs26.default.writeFileSync(tmp, JSON.stringify(meta, null, 2), { mode: 384 });
     import_node_fs26.default.renameSync(tmp, file);
@@ -53304,7 +53818,7 @@ function createLarkBotCloudClient(opts) {
 
 // src/lark-bot-connector/chat-router.ts
 var import_node_fs27 = __toESM(require("fs"), 1);
-var import_node_path28 = __toESM(require("path"), 1);
+var import_node_path29 = __toESM(require("path"), 1);
 init_protocol();
 var ERROR_REPLY_TEXT = "\u5904\u7406\u51FA\u9519\u4E86\uFF0C\u8BF7\u91CD\u8BD5";
 var LOCAL_TURN_RETRIES = 2;
@@ -53370,7 +53884,7 @@ function createLarkChatRouter(deps) {
         }
         const dir = deps.mediaRootFor(env.chatId);
         import_node_fs27.default.mkdirSync(dir, { recursive: true });
-        const p2 = import_node_path28.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}.${ext}`);
+        const p2 = import_node_path29.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}.${ext}`);
         import_node_fs27.default.writeFileSync(p2, r.data);
         lines.push(`[\u56FE\u7247: ${p2}]\uFF08\u7528 Read \u5DE5\u5177\u67E5\u770B\uFF09`);
       } catch (err) {
@@ -53393,7 +53907,7 @@ function createLarkChatRouter(deps) {
         }
         const dir = deps.mediaRootFor(env.chatId);
         import_node_fs27.default.mkdirSync(dir, { recursive: true });
-        const p2 = import_node_path28.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}-${safeAttachmentName(f.name)}`);
+        const p2 = import_node_path29.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}-${safeAttachmentName(f.name)}`);
         import_node_fs27.default.writeFileSync(p2, r.data);
         lines.push(`[\u6587\u4EF6: ${p2}]\uFF08\u7528 Read \u5DE5\u5177\u67E5\u770B\uFF09`);
       } catch (err) {
@@ -53755,7 +54269,8 @@ function buildPersonaDispatchHandlers(deps) {
         outcome: void 0,
         completedAt: void 0,
         deliveredAt: void 0,
-        taskText: args.prompt.slice(0, TASK_TEXT_MAX)
+        taskText: args.prompt.slice(0, TASK_TEXT_MAX),
+        ...args.meta ? { meta: { ...rec4.meta ?? {}, ...args.meta } } : {}
       });
       mgr.reopen(args.dispatchId, {
         sourceSessionId,
@@ -53802,7 +54317,8 @@ function buildPersonaDispatchHandlers(deps) {
       const { dispatchId: dispatchId2 } = mgr.start({
         sourceSessionId,
         targetPersona,
-        taskText: args.prompt
+        taskText: args.prompt,
+        ...args.meta ? { meta: args.meta } : {}
       });
       logger?.info("dispatch.run.forward", {
         dispatchId: dispatchId2,
@@ -53834,7 +54350,8 @@ function buildPersonaDispatchHandlers(deps) {
       const { dispatchId: dispatchId2 } = mgr.start({
         sourceSessionId: ctx.principal.id,
         targetPersona,
-        taskText: args.prompt
+        taskText: args.prompt,
+        ...args.meta ? { meta: args.meta } : {}
       });
       logger?.info("dispatch.run.received.guest", {
         dispatchId: dispatchId2,
@@ -53870,7 +54387,8 @@ function buildPersonaDispatchHandlers(deps) {
     const { dispatchId } = mgr.start({
       sourceSessionId,
       targetPersona,
-      taskText: args.prompt
+      taskText: args.prompt,
+      ...args.meta ? { meta: args.meta } : {}
     });
     logger?.info("dispatch.run.received", {
       dispatchId,
@@ -54420,7 +54938,7 @@ var CodexHistoryReader = class {
 };
 
 // src/tools/codex-skills.ts
-var import_node_path29 = __toESM(require("path"), 1);
+var import_node_path30 = __toESM(require("path"), 1);
 function str3(v2) {
   return typeof v2 === "string" ? v2 : void 0;
 }
@@ -54435,13 +54953,13 @@ function mapSkillsListResponse(res) {
       const r = s ?? {};
       const name = str3(r.name);
       if (!name) continue;
-      const path87 = str3(r.path);
+      const path89 = str3(r.path);
       const description = str3(r.description);
       const isPlugin = name.includes(":");
       out.push({
         name,
         source: isPlugin ? "plugin" : "project",
-        ...path87 ? { path: path87 } : {},
+        ...path89 ? { path: path89 } : {},
         ...description ? { description } : {},
         ...isPlugin ? { plugin: name.split(":")[0] } : {}
       });
@@ -54457,14 +54975,14 @@ async function listCodexSkills(cwd, deps = {}) {
     // 先写 extraRoots 再写 list（stdio 按写入顺序处理，fire-and-forget 不 await 回包；
     // codex-session.ts ready 序列同款，两处保持一致）。失败不阻塞 list。
     beforeRequest: (client) => {
-      void client.request("skills/extraRoots/set", { extraRoots: [import_node_path29.default.join(cwd, ".claude", "skills")] }).catch(() => void 0);
+      void client.request("skills/extraRoots/set", { extraRoots: [import_node_path30.default.join(cwd, ".claude", "skills")] }).catch(() => void 0);
     }
   });
   return mapSkillsListResponse(res);
 }
 
 // src/tools/codex-turn-context.ts
-var import_promises3 = __toESM(require("fs/promises"), 1);
+var import_promises4 = __toESM(require("fs/promises"), 1);
 function parseTurnContextFromRollout(raw) {
   const lines = raw.split("\n");
   for (let i = lines.length - 1; i >= 0; i--) {
@@ -54499,7 +55017,7 @@ async function readCodexTurnContext(args, deps = {}) {
   );
   const rolloutPath = str4(rec3(res?.thread)?.path);
   if (!rolloutPath) return null;
-  return parseTurnContextFromRollout(await import_promises3.default.readFile(rolloutPath, "utf8"));
+  return parseTurnContextFromRollout(await import_promises4.default.readFile(rolloutPath, "utf8"));
 }
 function createCodexResolvedMetaHydrator(deps) {
   const fetchedThreadIds = /* @__PURE__ */ new Set();
@@ -54544,14 +55062,14 @@ function str4(v2) {
 // src/workspace/browser.ts
 var import_node_fs28 = __toESM(require("fs"), 1);
 var import_node_os8 = __toESM(require("os"), 1);
-var import_node_path30 = __toESM(require("path"), 1);
+var import_node_path31 = __toESM(require("path"), 1);
 init_protocol();
 var MAX_FILE_BYTES2 = 2 * 1024 * 1024;
 function resolveInsideCwd(cwd, subpath) {
-  const absCwd = import_node_path30.default.resolve(cwd);
-  const joined = import_node_path30.default.resolve(absCwd, subpath ?? ".");
-  const rel = import_node_path30.default.relative(absCwd, joined);
-  if (rel.startsWith("..") || import_node_path30.default.isAbsolute(rel)) {
+  const absCwd = import_node_path31.default.resolve(cwd);
+  const joined = import_node_path31.default.resolve(absCwd, subpath ?? ".");
+  const rel = import_node_path31.default.relative(absCwd, joined);
+  if (rel.startsWith("..") || import_node_path31.default.isAbsolute(rel)) {
     throw new ClawdError(ERROR_CODES.INVALID_PATH, `path escapes cwd: ${subpath}`);
   }
   return joined;
@@ -54582,7 +55100,7 @@ var WorkspaceBrowser = class {
         mtime: ""
       };
       try {
-        const st = import_node_fs28.default.statSync(import_node_path30.default.join(full, d.name));
+        const st = import_node_fs28.default.statSync(import_node_path31.default.join(full, d.name));
         entry.mtime = new Date(st.mtimeMs).toISOString();
         if (d.isFile()) entry.size = st.size;
       } catch {
@@ -54629,7 +55147,7 @@ var WorkspaceBrowser = class {
 // src/skills/agents-scanner.ts
 var import_node_fs29 = __toESM(require("fs"), 1);
 var import_node_os9 = __toESM(require("os"), 1);
-var import_node_path31 = __toESM(require("path"), 1);
+var import_node_path32 = __toESM(require("path"), 1);
 var DEFAULT_POLICY_DIR_DARWIN = "/Library/Application Support/ClaudeCode/.claude/agents";
 function isDirLikeSync2(p2) {
   try {
@@ -54667,10 +55185,10 @@ function scanAgentsDir(dir, source, seen, out) {
   }
   for (const ent of entries) {
     if (!ent.name.endsWith(".md")) continue;
-    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path31.default.join(dir, ent.name)))) {
+    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path32.default.join(dir, ent.name)))) {
       continue;
     }
-    const filePath = import_node_path31.default.join(dir, ent.name);
+    const filePath = import_node_path32.default.join(dir, ent.name);
     const baseName = ent.name.replace(/\.md$/, "");
     if (seen.has(baseName)) continue;
     seen.add(baseName);
@@ -54693,7 +55211,7 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
       return;
     }
     for (const ent of entries) {
-      const childPath = import_node_path31.default.join(dir, ent.name);
+      const childPath = import_node_path32.default.join(dir, ent.name);
       if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync2(childPath)) {
         walk2(childPath, [...namespaces, ent.name]);
         continue;
@@ -54718,9 +55236,9 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   walk2(root, []);
 }
 function readInstalledPlugins2(home) {
-  const pluginsDir = import_node_path31.default.join(home, ".claude", "plugins");
-  const v2 = import_node_path31.default.join(pluginsDir, "installed_plugins_v2.json");
-  const v1 = import_node_path31.default.join(pluginsDir, "installed_plugins.json");
+  const pluginsDir = import_node_path32.default.join(home, ".claude", "plugins");
+  const v2 = import_node_path32.default.join(pluginsDir, "installed_plugins_v2.json");
+  const v1 = import_node_path32.default.join(pluginsDir, "installed_plugins.json");
   let raw = null;
   for (const candidate of [v2, v1]) {
     try {
@@ -54749,19 +55267,19 @@ function readInstalledPlugins2(home) {
   return out;
 }
 function walkUpProjectAgentsDirs(startCwd, home, seen, out) {
-  let cur = import_node_path31.default.resolve(startCwd);
-  const fsRoot = import_node_path31.default.parse(cur).root;
+  let cur = import_node_path32.default.resolve(startCwd);
+  const fsRoot = import_node_path32.default.parse(cur).root;
   while (true) {
-    scanAgentsDir(import_node_path31.default.join(cur, ".claude", "agents"), "project", seen, out);
+    scanAgentsDir(import_node_path32.default.join(cur, ".claude", "agents"), "project", seen, out);
     let hasGit = false;
     try {
-      hasGit = import_node_fs29.default.existsSync(import_node_path31.default.join(cur, ".git"));
+      hasGit = import_node_fs29.default.existsSync(import_node_path32.default.join(cur, ".git"));
     } catch {
     }
     if (hasGit) return;
     if (cur === home) return;
     if (cur === fsRoot) return;
-    const parent = import_node_path31.default.dirname(cur);
+    const parent = import_node_path32.default.dirname(cur);
     if (parent === cur) return;
     cur = parent;
   }
@@ -54796,7 +55314,7 @@ var AgentsScanner = class {
     }
     const fsBlock = [];
     scanAgentsDir(
-      import_node_path31.default.join(this.home, ".claude", "agents"),
+      import_node_path32.default.join(this.home, ".claude", "agents"),
       "global",
       seen,
       fsBlock
@@ -54810,7 +55328,7 @@ var AgentsScanner = class {
       ...this.extraPluginRoots
     ];
     for (const { name, root } of plugins) {
-      const agentsRoot = import_node_path31.default.join(root, "agents");
+      const agentsRoot = import_node_path32.default.join(root, "agents");
       scanPluginAgentsTree(agentsRoot, name, seen, fsBlock);
     }
     return [...builtinBlock, ...fsBlock];
@@ -54820,13 +55338,13 @@ var AgentsScanner = class {
 // src/observer/session-observer.ts
 var import_node_fs31 = __toESM(require("fs"), 1);
 var import_node_os11 = __toESM(require("os"), 1);
-var import_node_path33 = __toESM(require("path"), 1);
+var import_node_path34 = __toESM(require("path"), 1);
 init_claude_history();
 
 // src/observer/subagent-meta-observer.ts
 var import_node_fs30 = __toESM(require("fs"), 1);
 var import_node_os10 = __toESM(require("os"), 1);
-var import_node_path32 = __toESM(require("path"), 1);
+var import_node_path33 = __toESM(require("path"), 1);
 init_claude_history();
 var META_RE = /^agent-([A-Za-z0-9_-]+)\.meta\.json$/;
 var SubagentMetaObserver = class {
@@ -54839,7 +55357,7 @@ var SubagentMetaObserver = class {
   watches = /* @__PURE__ */ new Map();
   // public for spec only：测试直接拼路径写假 meta.json；生产 start() 内部自己解析
   resolveSubagentDir(cwd, toolSessionId) {
-    return import_node_path32.default.join(
+    return import_node_path33.default.join(
       this.home,
       ".claude",
       "projects",
@@ -54895,7 +55413,7 @@ var SubagentMetaObserver = class {
     if (!m2) return;
     const agentId = m2[1];
     if (w2.emitted.has(agentId)) return;
-    const file = import_node_path32.default.join(w2.dirPath, name);
+    const file = import_node_path33.default.join(w2.dirPath, name);
     let raw;
     try {
       raw = import_node_fs30.default.readFileSync(file, "utf8");
@@ -54955,7 +55473,7 @@ var SessionObserver = class {
   metaObserver;
   resolveJsonlPath(cwd, toolSessionId, override) {
     if (override) return override;
-    return import_node_path33.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
+    return import_node_path34.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
   }
   start(args) {
     this.stop(args.sessionId);
@@ -54981,10 +55499,10 @@ var SessionObserver = class {
       lastDeriveMs: 0
     };
     try {
-      import_node_fs31.default.mkdirSync(import_node_path33.default.dirname(filePath), { recursive: true });
+      import_node_fs31.default.mkdirSync(import_node_path34.default.dirname(filePath), { recursive: true });
     } catch {
     }
-    w2.watcher = import_node_fs31.default.watch(import_node_path33.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
+    w2.watcher = import_node_fs31.default.watch(import_node_path34.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
       if (!changedName || !w2.filePath.endsWith(changedName)) return;
       this.poll(w2);
     });
@@ -55081,7 +55599,7 @@ var SessionObserver = class {
     const now = Date.now();
     if (now - w2.lastRelocateScanMs < 1e3) return;
     w2.lastRelocateScanMs = now;
-    const projectsRoot = import_node_path33.default.join(this.home, ".claude", "projects");
+    const projectsRoot = import_node_path34.default.join(this.home, ".claude", "projects");
     const found = findTranscriptByToolSessionId(projectsRoot, w2.toolSessionId);
     if (!found || found === w2.filePath) return;
     try {
@@ -55090,7 +55608,7 @@ var SessionObserver = class {
     }
     w2.filePath = found;
     try {
-      w2.watcher = import_node_fs31.default.watch(import_node_path33.default.dirname(found), { persistent: false }, (_event, changedName) => {
+      w2.watcher = import_node_fs31.default.watch(import_node_path34.default.dirname(found), { persistent: false }, (_event, changedName) => {
         if (!changedName || !w2.filePath.endsWith(changedName)) return;
         this.poll(w2);
       });
@@ -55213,7 +55731,7 @@ function listRegistered() {
 var import_node_child_process8 = require("child_process");
 var import_node_fs32 = __toESM(require("fs"), 1);
 var import_node_os12 = __toESM(require("os"), 1);
-var import_node_path34 = __toESM(require("path"), 1);
+var import_node_path35 = __toESM(require("path"), 1);
 var TITLE_GEN_DIR_PREFIX = "clawd-title-";
 var TITLE_MODEL_BY_TOOL = {
   claude: "haiku",
@@ -55284,7 +55802,7 @@ async function generateSessionTitle(tool, firstMessage, deps = {}) {
   if (!text) return null;
   let workDir;
   try {
-    workDir = import_node_fs32.default.mkdtempSync(import_node_path34.default.join(import_node_os12.default.tmpdir(), TITLE_GEN_DIR_PREFIX));
+    workDir = import_node_fs32.default.mkdtempSync(import_node_path35.default.join(import_node_os12.default.tmpdir(), TITLE_GEN_DIR_PREFIX));
   } catch {
     return null;
   }
@@ -55294,8 +55812,8 @@ async function generateSessionTitle(tool, firstMessage, deps = {}) {
     } catch {
     }
   };
-  const outFile = import_node_path34.default.join(workDir, `codex-title-${process.pid}-${++outFileSeq}-${Date.now()}.txt`);
-  const schemaFile = import_node_path34.default.join(workDir, "title-schema.json");
+  const outFile = import_node_path35.default.join(workDir, `codex-title-${process.pid}-${++outFileSeq}-${Date.now()}.txt`);
+  const schemaFile = import_node_path35.default.join(workDir, "title-schema.json");
   if (tool === "codex") {
     try {
       import_node_fs32.default.writeFileSync(schemaFile, CODEX_TITLE_SCHEMA);
@@ -56033,8 +56551,8 @@ async function authenticate(token, deps) {
 }
 
 // src/legacy-cleanup.ts
-var fs40 = __toESM(require("fs/promises"), 1);
-var path42 = __toESM(require("path"), 1);
+var fs41 = __toESM(require("fs/promises"), 1);
+var path43 = __toESM(require("path"), 1);
 var LEGACY_FILES = [
   "personal-capability.json",
   "received-capabilities.json",
@@ -56043,9 +56561,9 @@ var LEGACY_FILES = [
 async function cleanupLegacyCapabilityFiles(dataDir, logger) {
   const removed = [];
   for (const name of LEGACY_FILES) {
-    const p2 = path42.join(dataDir, name);
+    const p2 = path43.join(dataDir, name);
     try {
-      await fs40.unlink(p2);
+      await fs41.unlink(p2);
       removed.push(name);
       logger.debug("legacy capability file removed", { file: name });
     } catch (err) {
@@ -56057,13 +56575,13 @@ async function cleanupLegacyCapabilityFiles(dataDir, logger) {
 }
 
 // src/inbox/inbox-store.ts
-var fs41 = __toESM(require("fs"), 1);
-var path43 = __toESM(require("path"), 1);
+var fs42 = __toESM(require("fs"), 1);
+var path44 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs41.mkdirSync(this.dirPath(), { recursive: true });
+    fs42.mkdirSync(this.dirPath(), { recursive: true });
   }
   dataDir;
   /**
@@ -56075,7 +56593,7 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     let raw;
     try {
-      raw = fs41.readFileSync(file, "utf8");
+      raw = fs42.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -56091,7 +56609,7 @@ var InboxStore = class {
     const dir = this.dirPath();
     let entries;
     try {
-      entries = fs41.readdirSync(dir);
+      entries = fs42.readdirSync(dir);
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -56107,9 +56625,9 @@ var InboxStore = class {
     if (existing.some((m2) => m2.id === message.id)) return;
     const file = this.filePath(message.peerDeviceId);
     const line = JSON.stringify(message) + "\n";
-    fs41.appendFileSync(file, line, { mode: 384 });
+    fs42.appendFileSync(file, line, { mode: 384 });
     try {
-      fs41.chmodSync(file, 384);
+      fs42.chmodSync(file, 384);
     } catch {
     }
   }
@@ -56139,7 +56657,7 @@ var InboxStore = class {
   removeByPeerDeviceId(peerDeviceId) {
     const file = this.filePath(peerDeviceId);
     try {
-      fs41.unlinkSync(file);
+      fs42.unlinkSync(file);
     } catch (err) {
       if (err?.code === "ENOENT") return;
     }
@@ -56148,18 +56666,18 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     const content = messages.map((m2) => JSON.stringify(m2)).join("\n") + (messages.length > 0 ? "\n" : "");
-    fs41.writeFileSync(tmp, content, { mode: 384 });
-    fs41.renameSync(tmp, file);
+    fs42.writeFileSync(tmp, content, { mode: 384 });
+    fs42.renameSync(tmp, file);
     try {
-      fs41.chmodSync(file, 384);
+      fs42.chmodSync(file, 384);
     } catch {
     }
   }
   dirPath() {
-    return path43.join(this.dataDir, INBOX_SUBDIR);
+    return path44.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerDeviceId) {
-    return path43.join(this.dirPath(), `${peerDeviceId}.jsonl`);
+    return path44.join(this.dirPath(), `${peerDeviceId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -56247,8 +56765,8 @@ var InboxManager = class {
 };
 
 // src/state/contact-store.ts
-var fs42 = __toESM(require("fs"), 1);
-var path44 = __toESM(require("path"), 1);
+var fs43 = __toESM(require("fs"), 1);
+var path45 = __toESM(require("path"), 1);
 var FILE_NAME = "contacts.json";
 var ContactStore = class {
   constructor(dataDir) {
@@ -56258,10 +56776,10 @@ var ContactStore = class {
   contacts = /* @__PURE__ */ new Map();
   load() {
     this.contacts.clear();
-    const file = path44.join(this.dataDir, FILE_NAME);
+    const file = path45.join(this.dataDir, FILE_NAME);
     let raw;
     try {
-      raw = fs42.readFileSync(file, "utf8");
+      raw = fs43.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code !== "ENOENT") this.renameBak(file);
       return;
@@ -56330,20 +56848,20 @@ var ContactStore = class {
     return true;
   }
   flush() {
-    const file = path44.join(this.dataDir, FILE_NAME);
+    const file = path45.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
       { contacts: Array.from(this.contacts.values()) },
       null,
       2
     );
-    fs42.mkdirSync(this.dataDir, { recursive: true });
-    fs42.writeFileSync(tmp, content, { mode: 384 });
-    fs42.renameSync(tmp, file);
+    fs43.mkdirSync(this.dataDir, { recursive: true });
+    fs43.writeFileSync(tmp, content, { mode: 384 });
+    fs43.renameSync(tmp, file);
   }
   renameBak(file) {
     try {
-      fs42.renameSync(file, `${file}.bak`);
+      fs43.renameSync(file, `${file}.bak`);
     } catch {
     }
   }
@@ -56451,61 +56969,61 @@ async function connectRemote(args) {
 }
 
 // src/migrations/2026-05-20-flatten-sessions.ts
-var fs43 = __toESM(require("fs"), 1);
-var path45 = __toESM(require("path"), 1);
+var fs44 = __toESM(require("fs"), 1);
+var path46 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path45.join(dataDir, "sessions");
-  const flagPath = path45.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path46.join(dataDir, "sessions");
+  const flagPath = path46.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path45.join(sessionsDir, "default");
+  const defaultDir = path46.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path45.join(defaultDir, entry);
-      const dst = path45.join(sessionsDir, entry);
-      fs43.renameSync(src, dst);
+      const src = path46.join(defaultDir, entry);
+      const dst = path46.join(sessionsDir, entry);
+      fs44.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path45.join(sessionsDir, pid);
+    const personaDir = path46.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path45.join(personaDir, "owner");
+    const ownerSrc = path46.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path45.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs43.mkdirSync(ownerDst, { recursive: true });
+      const ownerDst = path46.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      fs44.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs43.renameSync(path45.join(ownerSrc, file), path45.join(ownerDst, file));
+        fs44.renameSync(path46.join(ownerSrc, file), path46.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path45.join(personaDir, "listener");
+    const listenerSrc = path46.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path45.join(dataDir, ".legacy", `listener-${pid}`);
-      fs43.mkdirSync(archiveDst, { recursive: true });
+      const archiveDst = path46.join(dataDir, ".legacy", `listener-${pid}`);
+      fs44.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs43.renameSync(path45.join(listenerSrc, file), path45.join(archiveDst, file));
+        fs44.renameSync(path46.join(listenerSrc, file), path46.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs43.mkdirSync(sessionsDir, { recursive: true });
-  fs43.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs44.mkdirSync(sessionsDir, { recursive: true });
+  fs44.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -56516,7 +57034,7 @@ function migrateFlattenSessions(opts) {
 }
 function existsSync3(p2) {
   try {
-    fs43.statSync(p2);
+    fs44.statSync(p2);
     return true;
   } catch {
     return false;
@@ -56524,61 +57042,61 @@ function existsSync3(p2) {
 }
 function isDir(p2) {
   try {
-    return fs43.statSync(p2).isDirectory();
+    return fs44.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p2) {
   try {
-    return fs43.readdirSync(p2);
+    return fs44.readdirSync(p2);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p2) {
   try {
-    fs43.rmdirSync(p2);
+    fs44.rmdirSync(p2);
   } catch {
   }
 }
 
 // src/migrations/2026-08-18-drop-seeded-projects.ts
-var fs44 = __toESM(require("fs"), 1);
-var path46 = __toESM(require("path"), 1);
+var fs45 = __toESM(require("fs"), 1);
+var path47 = __toESM(require("path"), 1);
 var DROP_SEEDED_PROJECTS_FLAG = ".projects-seed-dropped.v1.done";
 function dropSeededProjects(opts) {
-  fs44.mkdirSync(opts.dataDir, { recursive: true });
-  const flag = path46.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
-  if (fs44.existsSync(flag)) return { skipped: true, dropped: 0, backup: null };
-  const file = path46.join(opts.dataDir, "projects.json");
+  fs45.mkdirSync(opts.dataDir, { recursive: true });
+  const flag = path47.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
+  if (fs45.existsSync(flag)) return { skipped: true, dropped: 0, backup: null };
+  const file = path47.join(opts.dataDir, "projects.json");
   let raw = null;
   let dropped = 0;
   try {
-    raw = fs44.readFileSync(file, "utf8");
+    raw = fs45.readFileSync(file, "utf8");
     dropped = JSON.parse(raw).projects?.length ?? 0;
   } catch {
   }
   let backup = null;
   if (raw != null && dropped > 0) {
-    const dir = path46.join(opts.dataDir, "backups");
-    fs44.mkdirSync(dir, { recursive: true });
-    backup = path46.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
-    fs44.writeFileSync(backup, raw);
+    const dir = path47.join(opts.dataDir, "backups");
+    fs45.mkdirSync(dir, { recursive: true });
+    backup = path47.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
+    fs45.writeFileSync(backup, raw);
   }
   if (raw != null || dropped > 0) {
-    fs44.writeFileSync(file, JSON.stringify({ projects: [] }, null, 2));
+    fs45.writeFileSync(file, JSON.stringify({ projects: [] }, null, 2));
   }
-  fs44.writeFileSync(flag, (/* @__PURE__ */ new Date()).toISOString());
+  fs45.writeFileSync(flag, (/* @__PURE__ */ new Date()).toISOString());
   return { skipped: false, dropped, backup };
 }
 
 // src/transport/http-router.ts
 var import_node_fs34 = __toESM(require("fs"), 1);
-var import_node_path38 = __toESM(require("path"), 1);
+var import_node_path39 = __toESM(require("path"), 1);
 
 // src/attachment/mime.ts
-var import_node_path35 = __toESM(require("path"), 1);
+var import_node_path36 = __toESM(require("path"), 1);
 var TEXT_PLAIN = "text/plain; charset=utf-8";
 var EXT_TO_NATIVE_MIME = {
   // 图片
@@ -56685,7 +57203,7 @@ var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
   ".mk"
 ]);
 function lookupMime(filePathOrName) {
-  const ext = import_node_path35.default.extname(filePathOrName).toLowerCase();
+  const ext = import_node_path36.default.extname(filePathOrName).toLowerCase();
   if (EXT_TO_NATIVE_MIME[ext]) return EXT_TO_NATIVE_MIME[ext];
   if (TEXT_EXTENSIONS.has(ext)) return TEXT_PLAIN;
   return "application/octet-stream";
@@ -56756,9 +57274,9 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
 
 // src/attachment/upload.ts
 var import_node_fs33 = __toESM(require("fs"), 1);
-var import_node_path36 = __toESM(require("path"), 1);
+var import_node_path37 = __toESM(require("path"), 1);
 var import_node_crypto9 = __toESM(require("crypto"), 1);
-var import_promises4 = require("stream/promises");
+var import_promises5 = require("stream/promises");
 var UploadError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -56768,14 +57286,14 @@ var UploadError = class extends Error {
   code;
 };
 function assertValidFileName(fileName) {
-  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path36.default.basename(fileName)) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path37.default.basename(fileName)) {
     throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
   }
 }
 var HASH_PREFIX_LEN = 16;
 async function writeUploadedAttachment(args) {
   assertValidFileName(args.fileName);
-  const attachmentsRoot = import_node_path36.default.join(args.baseDir, ".attachments");
+  const attachmentsRoot = import_node_path37.default.join(args.baseDir, ".attachments");
   try {
     import_node_fs33.default.mkdirSync(attachmentsRoot, { recursive: true });
   } catch (err) {
@@ -56783,12 +57301,12 @@ async function writeUploadedAttachment(args) {
   }
   const hasher = import_node_crypto9.default.createHash("sha256");
   let actualSize = 0;
-  const tmpPath = import_node_path36.default.join(
+  const tmpPath = import_node_path37.default.join(
     attachmentsRoot,
     `.upload-${process.pid}-${Date.now()}-${import_node_crypto9.default.randomBytes(4).toString("hex")}`
   );
   try {
-    await (0, import_promises4.pipeline)(
+    await (0, import_promises5.pipeline)(
       args.body,
       async function* (source) {
         for await (const chunk of source) {
@@ -56818,7 +57336,7 @@ async function writeUploadedAttachment(args) {
     );
   }
   const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
-  const hashDir = import_node_path36.default.join(attachmentsRoot, attachmentId);
+  const hashDir = import_node_path37.default.join(attachmentsRoot, attachmentId);
   let finalFileName;
   let hashDirExists = false;
   try {
@@ -56836,7 +57354,7 @@ async function writeUploadedAttachment(args) {
     try {
       import_node_fs33.default.mkdirSync(hashDir, { recursive: true });
       finalFileName = args.fileName;
-      import_node_fs33.default.renameSync(tmpPath, import_node_path36.default.join(hashDir, finalFileName));
+      import_node_fs33.default.renameSync(tmpPath, import_node_path37.default.join(hashDir, finalFileName));
     } catch (err) {
       try {
         import_node_fs33.default.unlinkSync(tmpPath);
@@ -56845,7 +57363,7 @@ async function writeUploadedAttachment(args) {
       throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
     }
   }
-  const absPath = import_node_path36.default.join(hashDir, finalFileName);
+  const absPath = import_node_path37.default.join(hashDir, finalFileName);
   const relPath = absPath;
   args.groupFileStore.upsert(args.scope, args.sessionId, {
     relPath: absPath,
@@ -56859,8 +57377,8 @@ async function writeUploadedAttachment(args) {
 }
 
 // src/extension/import.ts
-var import_promises5 = __toESM(require("fs/promises"), 1);
-var import_node_path37 = __toESM(require("path"), 1);
+var import_promises6 = __toESM(require("fs/promises"), 1);
+var import_node_path38 = __toESM(require("path"), 1);
 var import_node_os13 = __toESM(require("os"), 1);
 var import_jszip = __toESM(require_lib3(), 1);
 var ImportError = class extends Error {
@@ -56878,7 +57396,7 @@ async function importZip(buf, root) {
     throw new ImportError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path37.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path38.default.isAbsolute(name)) {
       throw new ImportError("ZIP_INVALID", `unsafe zip entry path: ${name}`);
     }
   }
@@ -56911,33 +57429,33 @@ async function importZip(buf, root) {
       );
     }
   }
-  const destDir = import_node_path37.default.join(root, manifest.id);
+  const destDir = import_node_path38.default.join(root, manifest.id);
   let destExists = false;
   try {
-    await import_promises5.default.access(destDir);
+    await import_promises6.default.access(destDir);
     destExists = true;
   } catch {
   }
   if (destExists) {
     throw new ImportError("ALREADY_EXISTS", `extension ${manifest.id} already installed`);
   }
-  const stage = await import_promises5.default.mkdtemp(import_node_path37.default.join(import_node_os13.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
+  const stage = await import_promises6.default.mkdtemp(import_node_path38.default.join(import_node_os13.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path37.default.join(stage, name);
+      const dest = import_node_path38.default.join(stage, name);
       if (entry.dir) {
-        await import_promises5.default.mkdir(dest, { recursive: true });
+        await import_promises6.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises5.default.mkdir(import_node_path37.default.dirname(dest), { recursive: true });
+      await import_promises6.default.mkdir(import_node_path38.default.dirname(dest), { recursive: true });
       const content = await entry.async("nodebuffer");
-      await import_promises5.default.writeFile(dest, content);
+      await import_promises6.default.writeFile(dest, content);
     }
-    await import_promises5.default.mkdir(root, { recursive: true });
-    await import_promises5.default.rename(stage, destDir);
+    await import_promises6.default.mkdir(root, { recursive: true });
+    await import_promises6.default.rename(stage, destDir);
     return { extId: manifest.id };
   } catch (e) {
-    await import_promises5.default.rm(stage, { recursive: true, force: true }).catch(() => {
+    await import_promises6.default.rm(stage, { recursive: true, force: true }).catch(() => {
     });
     throw e;
   }
@@ -56959,7 +57477,7 @@ var SHARE_UI_ASSET_MIME = {
   ".wasm": "application/wasm"
 };
 function shareUiAssetMime(filePath) {
-  const ext = import_node_path38.default.extname(filePath).toLowerCase();
+  const ext = import_node_path39.default.extname(filePath).toLowerCase();
   return SHARE_UI_ASSET_MIME[ext] ?? lookupMime(filePath);
 }
 var AUTHED_RPC_ROUTE_PREFIX = "/rpc/";
@@ -57058,7 +57576,7 @@ function isValidUploadFileName(fileName) {
   if (fileName === "." || fileName === "..") return false;
   if (fileName.startsWith(".")) return false;
   if (fileName.includes("/") || fileName.includes("\\")) return false;
-  return fileName === import_node_path38.default.basename(fileName);
+  return fileName === import_node_path39.default.basename(fileName);
 }
 function createHttpRouter(deps) {
   return async (req, res) => {
@@ -57294,7 +57812,7 @@ function createHttpRouter(deps) {
         sendHtml(res, statusByCode[r.code], loader.renderErrorHtml(r.code, msgByCode[r.code]));
         return true;
       }
-      sendHtml(res, 200, loader.renderViewerHtml(import_node_path38.default.basename(r.absPath)));
+      sendHtml(res, 200, loader.renderViewerHtml(import_node_path39.default.basename(r.absPath)));
       return true;
     }
     const ctx = deps.authResolver.resolveFromHeader(
@@ -57415,7 +57933,7 @@ function createHttpRouter(deps) {
         return true;
       }
       let absPath;
-      if (import_node_path38.default.isAbsolute(pathParam)) {
+      if (import_node_path39.default.isAbsolute(pathParam)) {
         absPath = pathParam;
       } else if (deps.sessionStore) {
         const file = deps.sessionStore.read(sid);
@@ -57423,7 +57941,7 @@ function createHttpRouter(deps) {
           sendJson(res, 404, { code: "NOT_FOUND", message: `session ${sid} not found` });
           return true;
         }
-        absPath = import_node_path38.default.join(file.cwd, pathParam);
+        absPath = import_node_path39.default.join(file.cwd, pathParam);
       } else {
         sendJson(res, 501, withCtx(ctx, { code: "NOT_IMPLEMENTED", message: "sessionStore not wired" }));
         return true;
@@ -57525,7 +58043,7 @@ function streamFile(res, absPath, logger) {
     return;
   }
   const mime = lookupMime(absPath);
-  const basename2 = import_node_path38.default.basename(absPath);
+  const basename2 = import_node_path39.default.basename(absPath);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": String(stat.size),
@@ -57543,7 +58061,7 @@ function streamFile(res, absPath, logger) {
 
 // src/attachment/gc.ts
 var import_node_fs35 = __toESM(require("fs"), 1);
-var import_node_path39 = __toESM(require("path"), 1);
+var import_node_path40 = __toESM(require("path"), 1);
 var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
 function runAttachmentGc(args) {
   const now = (args.now ?? Date.now)();
@@ -57552,12 +58070,12 @@ function runAttachmentGc(args) {
   for (const { scope, sessionId } of args.sessionScopes) {
     for (const entry of args.groupFileStore.list(scope, sessionId)) {
       if (entry.stale) continue;
-      if (import_node_path39.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+      if (import_node_path40.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
     }
   }
   const visited = /* @__PURE__ */ new Set();
   for (const { scope, sessionId } of args.sessionScopes) {
-    const legacyDir = args.getSessionCwd?.(sessionId) ?? import_node_path39.default.join(
+    const legacyDir = args.getSessionCwd?.(sessionId) ?? import_node_path40.default.join(
       args.dataDir,
       "sessions",
       ...scopeSubPath(scope).map(safeFileName),
@@ -57570,7 +58088,7 @@ function runAttachmentGc(args) {
       return true;
     });
     for (const rootDir of roots) {
-      const attRoot = import_node_path39.default.join(rootDir, ".attachments");
+      const attRoot = import_node_path40.default.join(rootDir, ".attachments");
       let hashDirs;
       try {
         hashDirs = import_node_fs35.default.readdirSync(attRoot);
@@ -57580,7 +58098,7 @@ function runAttachmentGc(args) {
         continue;
       }
       for (const hashDir of hashDirs) {
-        const hashDirAbs = import_node_path39.default.join(attRoot, hashDir);
+        const hashDirAbs = import_node_path40.default.join(attRoot, hashDir);
         let files;
         try {
           files = import_node_fs35.default.readdirSync(hashDirAbs);
@@ -57588,7 +58106,7 @@ function runAttachmentGc(args) {
           continue;
         }
         for (const name of files) {
-          const file = import_node_path39.default.join(hashDirAbs, name);
+          const file = import_node_path40.default.join(hashDirAbs, name);
           let stat;
           try {
             stat = import_node_fs35.default.statSync(file);
@@ -57620,7 +58138,7 @@ function runAttachmentGc(args) {
 
 // src/attachment/group.ts
 var import_node_fs36 = __toESM(require("fs"), 1);
-var import_node_path40 = __toESM(require("path"), 1);
+var import_node_path41 = __toESM(require("path"), 1);
 var import_node_crypto10 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
@@ -57632,11 +58150,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path40.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path41.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path40.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path41.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -57671,7 +58189,7 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs36.default.mkdirSync(import_node_path40.default.dirname(file), { recursive: true });
+    import_node_fs36.default.mkdirSync(import_node_path41.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     import_node_fs36.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
     import_node_fs36.default.renameSync(tmp, file);
@@ -57761,9 +58279,9 @@ var GroupFileStore = class {
 
 // src/discovery/state-file.ts
 var import_node_fs37 = __toESM(require("fs"), 1);
-var import_node_path41 = __toESM(require("path"), 1);
+var import_node_path42 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path41.default.join(dataDir, "state.json");
+  return import_node_path42.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -57799,7 +58317,7 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs37.default.mkdirSync(import_node_path41.default.dirname(this.file), { recursive: true });
+    import_node_fs37.default.mkdirSync(import_node_path42.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
     import_node_fs37.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
     import_node_fs37.default.renameSync(tmp, this.file);
@@ -57827,13 +58345,13 @@ function readSpawnedByDesktopFromEnv(env = process.env) {
 
 // src/tunnel/tunnel-manager.ts
 var import_node_fs41 = __toESM(require("fs"), 1);
-var import_node_path45 = __toESM(require("path"), 1);
+var import_node_path46 = __toESM(require("path"), 1);
 var import_node_crypto11 = __toESM(require("crypto"), 1);
 var import_node_child_process11 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
 var import_node_fs38 = __toESM(require("fs"), 1);
-var import_node_path42 = __toESM(require("path"), 1);
+var import_node_path43 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -57852,7 +58370,7 @@ var TunnelStore = class {
     }
   }
   async set(v2) {
-    const dir = import_node_path42.default.dirname(this.filePath);
+    const dir = import_node_path43.default.dirname(this.filePath);
     await import_node_fs38.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
@@ -57964,10 +58482,10 @@ function escape(v2) {
 // src/tunnel/frpc-binary.ts
 var import_node_fs39 = __toESM(require("fs"), 1);
 var import_node_os14 = __toESM(require("os"), 1);
-var import_node_path43 = __toESM(require("path"), 1);
+var import_node_path44 = __toESM(require("path"), 1);
 var import_node_child_process9 = require("child_process");
 var import_node_stream3 = require("stream");
-var import_promises6 = require("stream/promises");
+var import_promises7 = require("stream/promises");
 var FRPC_VERSION = "0.68.0";
 var UnsupportedPlatformError = class extends Error {
   constructor(platform, arch) {
@@ -58003,13 +58521,13 @@ async function ensureFrpcBinary(opts) {
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path43.default.join(opts.dataDir, "bin");
+  const binDir = import_node_path44.default.join(opts.dataDir, "bin");
   import_node_fs39.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path43.default.join(binDir, "frpc");
+  const stableBin = import_node_path44.default.join(binDir, "frpc");
   if (import_node_fs39.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path43.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path44.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -58035,7 +58553,7 @@ function cleanupStaleArtifacts(binDir) {
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path43.default.join(binDir, name);
+      const full = import_node_path44.default.join(binDir, name);
       try {
         import_node_fs39.default.rmSync(full, { recursive: true, force: true });
       } catch {
@@ -58058,10 +58576,10 @@ async function downloadToFile(url, dest, fetchImpl) {
   }
   const out = import_node_fs39.default.createWriteStream(dest);
   const nodeStream = import_node_stream3.Readable.fromWeb(res.body);
-  await (0, import_promises6.pipeline)(nodeStream, out);
+  await (0, import_promises7.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path43.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  const work = import_node_path44.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
   import_node_fs39.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve9, reject) => {
@@ -58070,7 +58588,7 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
       proc.on("exit", (code) => code === 0 ? resolve9() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path43.default.join(work, dirName, "frpc");
+    const src = import_node_path44.default.join(work, dirName, "frpc");
     if (!import_node_fs39.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
@@ -58082,10 +58600,10 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
 
 // src/tunnel/frpc-process.ts
 var import_node_fs40 = __toESM(require("fs"), 1);
-var import_node_path44 = __toESM(require("path"), 1);
+var import_node_path45 = __toESM(require("path"), 1);
 var import_node_child_process10 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path44.default.join(dataDir, "frpc.pid");
+  return import_node_path45.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
@@ -58127,7 +58645,7 @@ function defaultSleep2(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path44.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path45.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -58199,7 +58717,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path45.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path46.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -58326,7 +58844,7 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path45.default.join(this.deps.dataDir, "frpc.toml");
+      const tomlPath = import_node_path46.default.join(this.deps.dataDir, "frpc.toml");
       const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto11.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
@@ -58341,9 +58859,9 @@ var TunnelManager = class {
       const proc = (this.deps.spawnImpl ?? import_node_child_process11.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logDir = import_node_path45.default.join(this.deps.dataDir, "log");
+      const logDir = import_node_path46.default.join(this.deps.dataDir, "log");
       import_node_fs41.default.mkdirSync(logDir, { recursive: true });
-      const logFilePath = import_node_path45.default.join(logDir, "frpc.log");
+      const logFilePath = import_node_path46.default.join(logDir, "frpc.log");
       const logStream = import_node_fs41.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
@@ -58427,15 +58945,15 @@ async function waitForFrpcReady(proc, timeoutMs) {
 
 // src/tunnel/device-key.ts
 var import_node_os15 = __toESM(require("os"), 1);
-var import_node_path46 = __toESM(require("path"), 1);
+var import_node_path47 = __toESM(require("path"), 1);
 var import_node_crypto12 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os15.default.hostname();
   const uid = opts.uid ?? (typeof import_node_os15.default.userInfo === "function" ? import_node_os15.default.userInfo().uid : 0);
   const home = opts.home ?? import_node_os15.default.homedir();
-  const defaultDataDir = import_node_path46.default.resolve(import_node_path46.default.join(home, ".clawd"));
-  const normalizedDataDir = opts.dataDir ? import_node_path46.default.resolve(opts.dataDir) : null;
+  const defaultDataDir = import_node_path47.default.resolve(import_node_path47.default.join(home, ".clawd"));
+  const normalizedDataDir = opts.dataDir ? import_node_path47.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
   return import_node_crypto12.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
@@ -58443,11 +58961,11 @@ function deriveStableDeviceKey(opts = {}) {
 
 // src/auth-store.ts
 var import_node_fs42 = __toESM(require("fs"), 1);
-var import_node_path47 = __toESM(require("path"), 1);
+var import_node_path48 = __toESM(require("path"), 1);
 var import_node_crypto13 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path47.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path48.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -58499,7 +59017,7 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs42.default.mkdirSync(import_node_path47.default.dirname(file), { recursive: true });
+  import_node_fs42.default.mkdirSync(import_node_path48.default.dirname(file), { recursive: true });
   import_node_fs42.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
     import_node_fs42.default.chmodSync(file, 384);
@@ -58510,10 +59028,10 @@ function writeAuthFile(file, content) {
 // src/owner-profile.ts
 var import_node_fs43 = __toESM(require("fs"), 1);
 var import_node_os16 = __toESM(require("os"), 1);
-var import_node_path48 = __toESM(require("path"), 1);
+var import_node_path49 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function profilePath(dataDir) {
-  return import_node_path48.default.join(dataDir, PROFILE_FILENAME);
+  return import_node_path49.default.join(dataDir, PROFILE_FILENAME);
 }
 function loadOwnerProfile(dataDir) {
   let raw;
@@ -58551,12 +59069,12 @@ function loadOwnerDisplayName(dataDir) {
 
 // src/feishu-auth/owner-identity-store.ts
 var import_node_fs44 = __toESM(require("fs"), 1);
-var import_node_path49 = __toESM(require("path"), 1);
+var import_node_path50 = __toESM(require("path"), 1);
 var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
 var OwnerIdentityStore = class {
   file;
   constructor(dataDir) {
-    this.file = import_node_path49.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
+    this.file = import_node_path50.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
   }
   read() {
     let raw;
@@ -58589,7 +59107,7 @@ var OwnerIdentityStore = class {
     };
   }
   write(record3) {
-    import_node_fs44.default.mkdirSync(import_node_path49.default.dirname(this.file), { recursive: true });
+    import_node_fs44.default.mkdirSync(import_node_path50.default.dirname(this.file), { recursive: true });
     import_node_fs44.default.writeFileSync(this.file, JSON.stringify(record3, null, 2), { mode: 384 });
     try {
       import_node_fs44.default.chmodSync(this.file, 384);
@@ -58735,9 +59253,9 @@ var CentralClientError = class extends Error {
   code;
   cause;
 };
-async function centralRequest(opts, path87, init) {
+async function centralRequest(opts, path89, init) {
   const f = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}${path87}`;
+  const url = `${opts.api.replace(/\/+$/, "")}${path89}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
   let res;
@@ -58931,8 +59449,8 @@ function verifyConnectToken(args) {
 }
 
 // src/feishu-auth/server-key.ts
-var fs58 = __toESM(require("fs"), 1);
-var path62 = __toESM(require("path"), 1);
+var fs59 = __toESM(require("fs"), 1);
+var path63 = __toESM(require("path"), 1);
 var FILE_NAME2 = "server-signing-key.json";
 var ServerKeyStore = class {
   constructor(dataDir) {
@@ -58940,12 +59458,12 @@ var ServerKeyStore = class {
   }
   dataDir;
   filePath() {
-    return path62.join(this.dataDir, FILE_NAME2);
+    return path63.join(this.dataDir, FILE_NAME2);
   }
   /** 读缓存的公钥；无缓存 / 损坏 → null（调用方决定是否触发拉取） */
   read() {
     try {
-      const raw = fs58.readFileSync(this.filePath(), "utf8");
+      const raw = fs59.readFileSync(this.filePath(), "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.publicKeyPem === "string" && parsed.publicKeyPem.includes("PUBLIC KEY")) {
         return parsed.publicKeyPem;
@@ -58960,12 +59478,12 @@ var ServerKeyStore = class {
       publicKeyPem,
       fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    fs58.mkdirSync(this.dataDir, { recursive: true });
-    fs58.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
+    fs59.mkdirSync(this.dataDir, { recursive: true });
+    fs59.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
   }
   clear() {
     try {
-      fs58.unlinkSync(this.filePath());
+      fs59.unlinkSync(this.filePath());
     } catch {
     }
   }
@@ -58974,13 +59492,16 @@ var ServerKeyStore = class {
 // src/index.ts
 init_protocol();
 
+// src/handlers/index.ts
+var import_node_path66 = __toESM(require("path"), 1);
+
 // src/handlers/session.ts
 init_protocol();
 
 // src/session/fork.ts
 var import_node_fs45 = __toESM(require("fs"), 1);
 var import_node_os17 = __toESM(require("os"), 1);
-var import_node_path50 = __toESM(require("path"), 1);
+var import_node_path51 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
   const raw = import_node_fs45.default.readFileSync(file, "utf8");
@@ -58996,19 +59517,19 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path50.default.join(import_node_os17.default.homedir(), ".claude");
-  let projectDir = import_node_path50.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  let sourceFile = import_node_path50.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  const baseDir = input.baseDir ?? import_node_path51.default.join(import_node_os17.default.homedir(), ".claude");
+  let projectDir = import_node_path51.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  let sourceFile = import_node_path51.default.join(projectDir, `${input.toolSessionId}.jsonl`);
   if (!import_node_fs45.default.existsSync(sourceFile)) {
     const found = findTranscriptByToolSessionId(
-      import_node_path50.default.join(baseDir, "projects"),
+      import_node_path51.default.join(baseDir, "projects"),
       input.toolSessionId
     );
     if (!found) {
       throw new Error(`fork: source transcript not found: ${sourceFile}`);
     }
     sourceFile = found;
-    projectDir = import_node_path50.default.dirname(found);
+    projectDir = import_node_path51.default.dirname(found);
   }
   const entries = readJsonlEntries(sourceFile);
   const mainEntries = entries.filter((e) => e.isSidechain !== true);
@@ -59037,8 +59558,8 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const outDir = input.targetCwd ? import_node_path50.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
-  const forkedFilePath = import_node_path50.default.join(outDir, `${forkedToolSessionId}.jsonl`);
+  const outDir = input.targetCwd ? import_node_path51.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
+  const forkedFilePath = import_node_path51.default.join(outDir, `${forkedToolSessionId}.jsonl`);
   import_node_fs45.default.mkdirSync(outDir, { recursive: true });
   import_node_fs45.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
@@ -59046,18 +59567,18 @@ function forkSession(input) {
 
 // src/session/external-scan.ts
 var import_node_fs46 = __toESM(require("fs"), 1);
-var import_promises7 = __toESM(require("fs/promises"), 1);
+var import_promises8 = __toESM(require("fs/promises"), 1);
 var import_node_os18 = __toESM(require("os"), 1);
-var import_node_path51 = __toESM(require("path"), 1);
+var import_node_path52 = __toESM(require("path"), 1);
 var import_node_module = require("module");
 var import_node_child_process12 = require("child_process");
 var import_meta4 = {};
 function defaultRoots() {
   const home = import_node_os18.default.homedir();
   return {
-    claudeProjectsDir: import_node_path51.default.join(home, ".claude", "projects"),
-    codexDir: import_node_path51.default.join(home, ".codex"),
-    clawdDir: import_node_path51.default.join(home, ".clawd")
+    claudeProjectsDir: import_node_path52.default.join(home, ".claude", "projects"),
+    codexDir: import_node_path52.default.join(home, ".codex"),
+    clawdDir: import_node_path52.default.join(home, ".clawd")
   };
 }
 function width(s) {
@@ -59085,7 +59606,7 @@ function toMs(v2) {
 async function* jsonLines(file) {
   let raw;
   try {
-    raw = await import_promises7.default.readFile(file, "utf8");
+    raw = await import_promises8.default.readFile(file, "utf8");
   } catch {
     return;
   }
@@ -59125,13 +59646,13 @@ async function scanClaude(roots) {
     if (!d.isDirectory()) continue;
     let files;
     try {
-      files = import_node_fs46.default.readdirSync(import_node_path51.default.join(roots.claudeProjectsDir, d.name));
+      files = import_node_fs46.default.readdirSync(import_node_path52.default.join(roots.claudeProjectsDir, d.name));
     } catch {
       continue;
     }
     for (const name of files) {
       if (!name.endsWith(".jsonl")) continue;
-      const file = import_node_path51.default.join(roots.claudeProjectsDir, d.name, name);
+      const file = import_node_path52.default.join(roots.claudeProjectsDir, d.name, name);
       let st;
       try {
         st = import_node_fs46.default.statSync(file);
@@ -59261,7 +59782,7 @@ async function codexFromRows(rows) {
 async function scanCodex(roots) {
   let dbs = [];
   try {
-    dbs = import_node_fs46.default.readdirSync(roots.codexDir).filter((n) => /^state_.*\.sqlite$/.test(n)).sort().map((n) => import_node_path51.default.join(roots.codexDir, n));
+    dbs = import_node_fs46.default.readdirSync(roots.codexDir).filter((n) => /^state_.*\.sqlite$/.test(n)).sort().map((n) => import_node_path52.default.join(roots.codexDir, n));
   } catch {
   }
   if (!dbs.length) return [];
@@ -59270,14 +59791,14 @@ async function scanCodex(roots) {
 }
 async function scanExternalSessions(rootsIn) {
   const roots = { ...defaultRoots(), ...rootsIn };
-  const personaRoot = import_node_path51.default.join(roots.clawdDir, "personas");
+  const personaRoot = import_node_path52.default.join(roots.clawdDir, "personas");
   const all = [...await scanClaude(roots), ...await scanCodex(roots)];
   const out = [];
   for (const c of all) {
     if (c.skip) continue;
     if (c.turns < 1) continue;
     if (!c.cwd || !isDir2(c.cwd)) continue;
-    if (c.cwd === roots.clawdDir || c.cwd === personaRoot || c.cwd.startsWith(personaRoot + import_node_path51.default.sep) || c.cwd.startsWith(roots.clawdDir + import_node_path51.default.sep)) {
+    if (c.cwd === roots.clawdDir || c.cwd === personaRoot || c.cwd.startsWith(personaRoot + import_node_path52.default.sep) || c.cwd.startsWith(roots.clawdDir + import_node_path52.default.sep)) {
       continue;
     }
     out.push({
@@ -59295,12 +59816,12 @@ async function scanExternalSessions(rootsIn) {
 
 // src/session/import-ledger.ts
 var import_node_fs47 = __toESM(require("fs"), 1);
-var import_node_path52 = __toESM(require("path"), 1);
+var import_node_path53 = __toESM(require("path"), 1);
 var LEDGER_FILENAME = "session-import-ledger.json";
 function readImportLedger(dataDir) {
   try {
     const parsed = JSON.parse(
-      import_node_fs47.default.readFileSync(import_node_path52.default.join(dataDir, LEDGER_FILENAME), "utf8")
+      import_node_fs47.default.readFileSync(import_node_path53.default.join(dataDir, LEDGER_FILENAME), "utf8")
     );
     return Array.isArray(parsed) ? parsed : [];
   } catch {
@@ -59308,7 +59829,7 @@ function readImportLedger(dataDir) {
   }
 }
 function appendImportLedger(dataDir, entry) {
-  const file = import_node_path52.default.join(dataDir, LEDGER_FILENAME);
+  const file = import_node_path53.default.join(dataDir, LEDGER_FILENAME);
   const entries = readImportLedger(dataDir);
   entries.push(entry);
   import_node_fs47.default.writeFileSync(file, JSON.stringify(entries, null, 2), { encoding: "utf8", mode: 384 });
@@ -59814,7 +60335,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path67 = __toESM(require("path"), 1);
+var path68 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -59832,7 +60353,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path66 = __toESM(require("path"), 1);
+var path67 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -59845,42 +60366,42 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read", userWorkDir) {
-  const target = path66.resolve(absPath);
+  const target = path67.resolve(absPath);
   if (userWorkDir) {
-    const u = path66.resolve(userWorkDir);
-    const usep = u.endsWith(path66.sep) ? "" : path66.sep;
+    const u = path67.resolve(userWorkDir);
+    const usep = u.endsWith(path67.sep) ? "" : path67.sep;
     if (target === u || target.startsWith(u + usep)) return true;
   }
-  const root = path66.resolve(personaRoot);
-  const sep4 = root.endsWith(path66.sep) ? "" : path66.sep;
+  const root = path67.resolve(personaRoot);
+  const sep4 = root.endsWith(path67.sep) ? "" : path67.sep;
   if (!target.startsWith(root + sep4)) return false;
-  const rel = path66.relative(root, target);
+  const rel = path67.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId2 = rel.split(path66.sep)[0];
+  const personaId2 = rel.split(path67.sep)[0];
   if (!personaId2) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId2);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path66.resolve(personaRoot);
-  const target = path66.resolve(absPath);
-  const sep4 = root.endsWith(path66.sep) ? "" : path66.sep;
+  const root = path67.resolve(personaRoot);
+  const target = path67.resolve(absPath);
+  const sep4 = root.endsWith(path67.sep) ? "" : path67.sep;
   if (!target.startsWith(root + sep4)) return null;
-  const rel = path66.relative(root, target);
+  const rel = path67.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path66.sep)[0];
+  const id = rel.split(path67.sep)[0];
   return id || null;
 }
 function isPathWithin(dir, absPath) {
-  const d = path66.resolve(dir);
-  const t = path66.resolve(absPath);
-  const sep4 = d.endsWith(path66.sep) ? "" : path66.sep;
+  const d = path67.resolve(dir);
+  const t = path67.resolve(absPath);
+  const sep4 = d.endsWith(path67.sep) ? "" : path67.sep;
   return t === d || t.startsWith(d + sep4);
 }
 function isPathInGuestBoundary(personaRoot, personaId2, userWorkDir, absPath) {
   if (userWorkDir && isPathWithin(userWorkDir, absPath)) return true;
-  return personaIdFromPath(path66.resolve(absPath), personaRoot) === personaId2;
+  return personaIdFromPath(path67.resolve(absPath), personaRoot) === personaId2;
 }
 
 // src/handlers/history.ts
@@ -59933,7 +60454,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path67.join(personaRoot, pid),
+          path68.join(personaRoot, pid),
           personaRoot,
           "read",
           userWorkDir
@@ -59945,7 +60466,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path67.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
+    assertGuestPath(ctx, path68.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -59993,14 +60514,14 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path67.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
+    assertGuestPath(ctx, path68.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagents");
     const subs = await historyReaderForToolSession(args.toolSessionId).listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path67.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
+    assertGuestPath(ctx, path68.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagent-read");
     const res = await historyReaderForToolSession(args.toolSessionId).readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
@@ -60010,7 +60531,7 @@ function buildHistoryHandlers(deps) {
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path67.resolve(d.cwd), personaRoot, "read", userWorkDir)
+        (d) => isGuestPathAllowed(ctx.grants, path68.resolve(d.cwd), personaRoot, "read", userWorkDir)
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -60027,17 +60548,17 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/projects.ts
-var fs62 = __toESM(require("fs"), 1);
+var fs63 = __toESM(require("fs"), 1);
 var os20 = __toESM(require("os"), 1);
-var path68 = __toESM(require("path"), 1);
+var path69 = __toESM(require("path"), 1);
 var import_node_child_process13 = require("child_process");
 init_protocol();
-var DEFAULT_PROJECTS_ROOT = path68.join(os20.homedir(), "Documents", "ChatGPT");
+var DEFAULT_PROJECTS_ROOT = path69.join(os20.homedir(), "Documents", "ChatGPT");
 function allocateDir(root, name) {
-  let candidate = path68.join(root, name);
+  let candidate = path69.join(root, name);
   let n = 2;
-  while (fs62.existsSync(candidate)) {
-    candidate = path68.join(root, `${name} ${n}`);
+  while (fs63.existsSync(candidate)) {
+    candidate = path69.join(root, `${name} ${n}`);
     n += 1;
   }
   return candidate;
@@ -60065,7 +60586,7 @@ function buildProjectHandlers(deps) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, "project:reveal \u4EC5\u652F\u6301 macOS");
     }
     try {
-      if (!fs62.statSync(args.path).isDirectory()) throw new Error("not dir");
+      if (!fs63.statSync(args.path).isDirectory()) throw new Error("not dir");
     } catch {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${args.path}`);
     }
@@ -60081,7 +60602,7 @@ function buildProjectHandlers(deps) {
     let target;
     if (args.path) {
       try {
-        if (!fs62.statSync(args.path).isDirectory()) throw new Error("not dir");
+        if (!fs63.statSync(args.path).isDirectory()) throw new Error("not dir");
       } catch {
         throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${args.path}`);
       }
@@ -60089,15 +60610,15 @@ function buildProjectHandlers(deps) {
     } else {
       const name = args.name;
       try {
-        fs62.mkdirSync(root, { recursive: true });
+        fs63.mkdirSync(root, { recursive: true });
         target = allocateDir(root, name);
-        fs62.mkdirSync(target);
+        fs63.mkdirSync(target);
       } catch (err) {
         throw new ClawdError(ERROR_CODES.INVALID_CWD, `\u521B\u5EFA\u9879\u76EE\u76EE\u5F55\u5931\u8D25: ${String(err)}`);
       }
       const git = (0, import_node_child_process13.spawnSync)("git", ["init"], { cwd: target, stdio: "ignore" });
       if (git.status !== 0) {
-        fs62.rmSync(target, { recursive: true, force: true });
+        fs63.rmSync(target, { recursive: true, force: true });
         throw new ClawdError(
           ERROR_CODES.INVALID_CWD,
           `git init \u5931\u8D25\uFF08${git.error ? String(git.error) : `exit ${git.status}`}\uFF09: ${target}`
@@ -60122,7 +60643,7 @@ function buildProjectHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path69 = __toESM(require("path"), 1);
+var path70 = __toESM(require("path"), 1);
 var os21 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
@@ -60164,22 +60685,22 @@ function buildWorkspaceHandlers(deps) {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
     const fallbackCwd = isGuest && personaRoot ? personaRoot : os21.homedir();
-    const resolvedCwd = path69.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path69.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const resolvedCwd = path70.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path70.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list", usersRoot);
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path69.isAbsolute(args.path) ? path69.resolve(args.path) : path69.resolve(args.cwd, args.path);
+    const target = path70.isAbsolute(args.path) ? path70.resolve(args.path) : path70.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read", usersRoot);
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path69.resolve(args.cwd);
+    const cwdAbs = path70.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list", usersRoot);
     const list2 = await getSkillsForTool(args.tool ?? "claude", cwdAbs);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -60191,7 +60712,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path69.resolve(args.cwd);
+    const cwdAbs = path70.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list", usersRoot);
     if (args.tool === "codex") {
       return { response: { type: "agents:list", agents: [] } };
@@ -60213,18 +60734,18 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path71 = __toESM(require("path"), 1);
+var path72 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process14 = require("child_process");
 var import_node_fs48 = __toESM(require("fs"), 1);
-var import_node_path53 = __toESM(require("path"), 1);
+var import_node_path54 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process14.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path53.default.resolve(p2);
+  const resolved = import_node_path54.default.resolve(p2);
   try {
     return import_node_fs48.default.realpathSync(resolved);
   } catch {
@@ -60300,7 +60821,7 @@ async function listGitBranches(cwd) {
 function assertGuestCwd(ctx, cwd, personaRoot, method, usersRoot) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
   const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
-  if (!isGuestPathAllowed(ctx.grants, path71.resolve(cwd), personaRoot, "read", userWorkDir)) {
+  if (!isGuestPathAllowed(ctx.grants, path72.resolve(cwd), personaRoot, "read", userWorkDir)) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -61038,6 +61559,22 @@ var METHOD_GRANT_MAP = {
   // ---- shift:* (排班 mock，owner-only 读) ----
   // mock 阶段只 owner 用；接 guest 后再考虑分级
   "shift:list": ADMIN_ANY,
+  // channel:* / topic:*（Channel × Master）：owner 本机资源，owner-only 一刀切。
+  // Master 是 owner-scope persona session，经 clawd-rpc 桥调，同样落在 ADMIN_ANY。
+  "channel:list": ADMIN_ANY,
+  "channel:create": ADMIN_ANY,
+  "channel:update": ADMIN_ANY,
+  "channel:delete": ADMIN_ANY,
+  "topic:list": ADMIN_ANY,
+  "topic:get": ADMIN_ANY,
+  "topic:create": ADMIN_ANY,
+  "topic:setPlan": ADMIN_ANY,
+  "topic:append": ADMIN_ANY,
+  "topic:reject": ADMIN_ANY,
+  "topic:accept": ADMIN_ANY,
+  "topic:close": ADMIN_ANY,
+  "line:digest": ADMIN_ANY,
+  "master:authorityCheck": ADMIN_ANY,
   // project:*（sidebar 项目分区，spec 2026-08-17）：registry 是 owner 本机资源，owner-only 一刀切
   "project:list": ADMIN_ANY,
   "project:create": ADMIN_ANY,
@@ -61203,21 +61740,21 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.382".length > 0 ? "0.2.382" : "dev";
+var version = "0.2.383".length > 0 ? "0.2.383" : "dev";
 
 // src/cli-probe/probe.ts
-var fs64 = __toESM(require("fs"), 1);
-var path72 = __toESM(require("path"), 1);
+var fs65 = __toESM(require("fs"), 1);
+var path73 = __toESM(require("path"), 1);
 var PKG_NAME = "@clawos-dev/clawd";
 var BIN_NAME = "clawd";
 var MAX_PARENT_HOPS = 5;
 function probeGlobalCli(pathEnv) {
   if (!pathEnv) return null;
-  for (const dir of pathEnv.split(path72.delimiter)) {
+  for (const dir of pathEnv.split(path73.delimiter)) {
     if (!dir) continue;
     let real;
     try {
-      real = fs64.realpathSync(path72.join(dir, BIN_NAME));
+      real = fs65.realpathSync(path73.join(dir, BIN_NAME));
     } catch {
       continue;
     }
@@ -61227,15 +61764,15 @@ function probeGlobalCli(pathEnv) {
   return null;
 }
 function readOwnPackageVersion(entryPath) {
-  let dir = path72.dirname(entryPath);
+  let dir = path73.dirname(entryPath);
   for (let i = 0; i < MAX_PARENT_HOPS; i++) {
     try {
-      const raw = fs64.readFileSync(path72.join(dir, "package.json"), "utf8");
+      const raw = fs65.readFileSync(path73.join(dir, "package.json"), "utf8");
       const pkg = JSON.parse(raw);
       if (pkg.name !== PKG_NAME) return null;
       return typeof pkg.version === "string" && pkg.version ? pkg.version : null;
     } catch {
-      const parent = path72.dirname(dir);
+      const parent = path73.dirname(dir);
       if (parent === dir) return null;
       dir = parent;
     }
@@ -61398,7 +61935,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path54 = __toESM(require("path"), 1);
+var import_node_path55 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -61478,12 +62015,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path54.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path54.default.isAbsolute(args.relPath) ? import_node_path54.default.resolve(args.relPath) : import_node_path54.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path55.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path55.default.isAbsolute(args.relPath) ? import_node_path55.default.resolve(args.relPath) : import_node_path55.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.signUrl", "group-acl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path54.default.isAbsolute(e.relPath) ? import_node_path54.default.resolve(e.relPath) : import_node_path54.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path55.default.isAbsolute(e.relPath) ? import_node_path55.default.resolve(e.relPath) : import_node_path55.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -61508,7 +62045,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path54.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
+    assertGuestAttachmentPath(ctx, import_node_path55.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -61523,8 +62060,8 @@ function buildAttachmentHandlers(deps) {
     if (!scope) {
       throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, `session ${args.sessionId} not found`);
     }
-    const cwdAbs = import_node_path54.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
-    const candidateAbs = import_node_path54.default.isAbsolute(args.relPath) ? import_node_path54.default.resolve(args.relPath) : import_node_path54.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path55.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
+    const candidateAbs = import_node_path55.default.isAbsolute(args.relPath) ? import_node_path55.default.resolve(args.relPath) : import_node_path55.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.groupAdd", "cwd-subtree");
     const from = args.origin === "agent" ? "agent" : ctx?.principal.kind === "owner" ? "owner" : "agent";
     const size = 0;
@@ -61582,21 +62119,21 @@ function buildAttachmentHandlers(deps) {
 }
 
 // src/handlers/extension.ts
-var import_promises11 = __toESM(require("fs/promises"), 1);
-var import_node_path59 = __toESM(require("path"), 1);
+var import_promises12 = __toESM(require("fs/promises"), 1);
+var import_node_path60 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/extension/bundle-zip.ts
-var import_promises8 = __toESM(require("fs/promises"), 1);
-var import_node_path55 = __toESM(require("path"), 1);
+var import_promises9 = __toESM(require("fs/promises"), 1);
+var import_node_path56 = __toESM(require("path"), 1);
 var import_node_crypto15 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
   const zip = new import_jszip2.default();
   for (const rel of entries) {
-    const abs = import_node_path55.default.join(dir, rel);
-    const content = await import_promises8.default.readFile(abs);
+    const abs = import_node_path56.default.join(dir, rel);
+    const content = await import_promises9.default.readFile(abs);
     zip.file(rel, content, { date: FIXED_DATE });
   }
   const buffer = await zip.generateAsync({
@@ -61616,8 +62153,8 @@ async function listFilesSorted(rootDir) {
   return out;
 }
 async function walk(absRoot, relPrefix, out) {
-  const dirAbs = import_node_path55.default.join(absRoot, relPrefix);
-  const entries = await import_promises8.default.readdir(dirAbs, { withFileTypes: true });
+  const dirAbs = import_node_path56.default.join(absRoot, relPrefix);
+  const entries = await import_promises9.default.readdir(dirAbs, { withFileTypes: true });
   for (const e of entries) {
     if (IGNORE_BASENAMES.has(e.name)) continue;
     const rel = relPrefix ? `${relPrefix}/${e.name}` : e.name;
@@ -61669,26 +62206,26 @@ function computePublishCheck(args) {
 }
 
 // src/extension/install-flow.ts
-var import_promises9 = __toESM(require("fs/promises"), 1);
-var import_node_path57 = __toESM(require("path"), 1);
+var import_promises10 = __toESM(require("fs/promises"), 1);
+var import_node_path58 = __toESM(require("path"), 1);
 var import_node_os21 = __toESM(require("os"), 1);
 var import_node_crypto16 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
 var import_node_os20 = __toESM(require("os"), 1);
-var import_node_path56 = __toESM(require("path"), 1);
+var import_node_path57 = __toESM(require("path"), 1);
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path56.default.join(import_node_os20.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path57.default.join(import_node_os20.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
-  return import_node_path56.default.join(clawdHomeRoot(override), "extensions");
+  return import_node_path57.default.join(clawdHomeRoot(override), "extensions");
 }
 function publishedChannelsFile(override) {
-  return import_node_path56.default.join(clawdHomeRoot(override), "extensions-published.json");
+  return import_node_path57.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
 function bundleCacheRoot(override) {
-  return import_node_path56.default.join(clawdHomeRoot(override), "extension-bundles");
+  return import_node_path57.default.join(clawdHomeRoot(override), "extension-bundles");
 }
 
 // src/extension/install-flow.ts
@@ -61715,7 +62252,7 @@ async function installFromChannel(args, deps) {
     throw new InstallError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path57.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path58.default.isAbsolute(name)) {
       throw new InstallError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -61747,10 +62284,10 @@ async function installFromChannel(args, deps) {
     );
   }
   const localExtId = namespacedExtId(ownerSlug, channelRef.ownerPrincipalId);
-  const destDir = import_node_path57.default.join(deps.extensionsRoot, localExtId);
+  const destDir = import_node_path58.default.join(deps.extensionsRoot, localExtId);
   let destExists = false;
   try {
-    await import_promises9.default.access(destDir);
+    await import_promises10.default.access(destDir);
     destExists = true;
   } catch {
   }
@@ -61760,28 +62297,28 @@ async function installFromChannel(args, deps) {
       `extension ${localExtId} already installed locally (from owner ${channelRef.ownerPrincipalId})`
     );
   }
-  const stage = await import_promises9.default.mkdtemp(
-    import_node_path57.default.join(import_node_os21.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+  const stage = await import_promises10.default.mkdtemp(
+    import_node_path58.default.join(import_node_os21.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path57.default.join(stage, name);
+      const dest = import_node_path58.default.join(stage, name);
       if (entry.dir) {
-        await import_promises9.default.mkdir(dest, { recursive: true });
+        await import_promises10.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises9.default.mkdir(import_node_path57.default.dirname(dest), { recursive: true });
+      await import_promises10.default.mkdir(import_node_path58.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
-        await import_promises9.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
+        await import_promises10.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
       } else {
-        await import_promises9.default.writeFile(dest, await entry.async("nodebuffer"));
+        await import_promises10.default.writeFile(dest, await entry.async("nodebuffer"));
       }
     }
-    await import_promises9.default.mkdir(deps.extensionsRoot, { recursive: true });
-    await import_promises9.default.rename(stage, destDir);
+    await import_promises10.default.mkdir(deps.extensionsRoot, { recursive: true });
+    await import_promises10.default.rename(stage, destDir);
   } catch (e) {
-    await import_promises9.default.rm(stage, { recursive: true, force: true }).catch(() => {
+    await import_promises10.default.rm(stage, { recursive: true, force: true }).catch(() => {
     });
     throw e;
   }
@@ -61790,8 +62327,8 @@ async function installFromChannel(args, deps) {
 }
 
 // src/extension/update-flow.ts
-var import_promises10 = __toESM(require("fs/promises"), 1);
-var import_node_path58 = __toESM(require("path"), 1);
+var import_promises11 = __toESM(require("fs/promises"), 1);
+var import_node_path59 = __toESM(require("path"), 1);
 var import_node_os22 = __toESM(require("os"), 1);
 var import_node_crypto17 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
@@ -61808,11 +62345,11 @@ async function updateFromChannel(args, deps) {
     channelRef.extId,
     channelRef.ownerPrincipalId
   );
-  const liveDir = import_node_path58.default.join(deps.extensionsRoot, localExtId);
+  const liveDir = import_node_path59.default.join(deps.extensionsRoot, localExtId);
   const prevDir = `${liveDir}.prev`;
   let existingVersion;
   try {
-    const raw = await import_promises10.default.readFile(import_node_path58.default.join(liveDir, "manifest.json"), "utf8");
+    const raw = await import_promises11.default.readFile(import_node_path59.default.join(liveDir, "manifest.json"), "utf8");
     const parsed2 = ExtensionManifestSchema.safeParse(JSON.parse(raw));
     if (!parsed2.success) {
       throw new UpdateError(
@@ -61845,7 +62382,7 @@ async function updateFromChannel(args, deps) {
     throw new UpdateError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path58.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path59.default.isAbsolute(name)) {
       throw new UpdateError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -61877,31 +62414,31 @@ async function updateFromChannel(args, deps) {
     );
   }
   await deps.runtime.close(localExtId);
-  await import_promises10.default.rm(prevDir, { recursive: true, force: true });
-  await import_promises10.default.rename(liveDir, prevDir);
-  const stage = await import_promises10.default.mkdtemp(
-    import_node_path58.default.join(import_node_os22.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+  await import_promises11.default.rm(prevDir, { recursive: true, force: true });
+  await import_promises11.default.rename(liveDir, prevDir);
+  const stage = await import_promises11.default.mkdtemp(
+    import_node_path59.default.join(import_node_os22.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path58.default.join(stage, name);
+      const dest = import_node_path59.default.join(stage, name);
       if (entry.dir) {
-        await import_promises10.default.mkdir(dest, { recursive: true });
+        await import_promises11.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises10.default.mkdir(import_node_path58.default.dirname(dest), { recursive: true });
+      await import_promises11.default.mkdir(import_node_path59.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
-        await import_promises10.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
+        await import_promises11.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
       } else {
-        await import_promises10.default.writeFile(dest, await entry.async("nodebuffer"));
+        await import_promises11.default.writeFile(dest, await entry.async("nodebuffer"));
       }
     }
-    await import_promises10.default.rename(stage, liveDir);
+    await import_promises11.default.rename(stage, liveDir);
   } catch (e) {
-    await import_promises10.default.rm(stage, { recursive: true, force: true }).catch(() => {
+    await import_promises11.default.rm(stage, { recursive: true, force: true }).catch(() => {
     });
-    await import_promises10.default.rename(prevDir, liveDir).catch(() => {
+    await import_promises11.default.rename(prevDir, liveDir).catch(() => {
     });
     await deps.runtime.open(localExtId).catch(() => {
     });
@@ -61923,7 +62460,7 @@ async function updateFromChannel(args, deps) {
       reason: e.message
     };
   }
-  await import_promises10.default.rm(prevDir, { recursive: true, force: true });
+  await import_promises11.default.rm(prevDir, { recursive: true, force: true });
   return {
     kind: "updated",
     extId: localExtId,
@@ -61931,9 +62468,9 @@ async function updateFromChannel(args, deps) {
   };
 }
 async function rollback(deps, localExtId, liveDir, prevDir) {
-  await import_promises10.default.rm(liveDir, { recursive: true, force: true }).catch(() => {
+  await import_promises11.default.rm(liveDir, { recursive: true, force: true }).catch(() => {
   });
-  await import_promises10.default.rename(prevDir, liveDir).catch(() => {
+  await import_promises11.default.rename(prevDir, liveDir).catch(() => {
   });
   await deps.runtime.open(localExtId).catch(() => {
   });
@@ -61956,18 +62493,18 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
       );
     }
   }
-  const manifestPath = import_node_path59.default.join(root, extId, "manifest.json");
+  const manifestPath = import_node_path60.default.join(root, extId, "manifest.json");
   const manifest = await readManifest(root, extId);
   const next = { ...manifest, version: newVersion };
   const tmp = `${manifestPath}.tmp`;
-  await import_promises11.default.writeFile(tmp, JSON.stringify(next, null, 2));
-  await import_promises11.default.rename(tmp, manifestPath);
+  await import_promises12.default.writeFile(tmp, JSON.stringify(next, null, 2));
+  await import_promises12.default.rename(tmp, manifestPath);
 }
 async function readManifest(root, extId) {
-  const file = import_node_path59.default.join(root, extId, "manifest.json");
+  const file = import_node_path60.default.join(root, extId, "manifest.json");
   let raw;
   try {
-    raw = await import_promises11.default.readFile(file, "utf8");
+    raw = await import_promises12.default.readFile(file, "utf8");
   } catch (e) {
     if (e.code === "ENOENT") {
       throw new ClawdError(ERROR_CODES.INVALID_PARAM, `extension ${extId} not installed`);
@@ -62048,7 +62585,7 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256, buffer } = await bundleExtensionDir(import_node_path59.default.join(deps.root, extId));
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path60.default.join(deps.root, extId));
     return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
@@ -62225,7 +62762,7 @@ function buildExtensionHandlers(deps) {
 // src/app-builder/project-store.ts
 var import_node_fs49 = require("fs");
 var import_node_child_process15 = require("child_process");
-var import_node_path60 = require("path");
+var import_node_path61 = require("path");
 init_protocol();
 var PROJECTS_DIR = "projects";
 var META_FILE = ".clawd-project.json";
@@ -62239,14 +62776,14 @@ var ProjectStore = class {
   root;
   /** projects/<name>/.clawd-project.json 路径 */
   metaPath(name) {
-    return (0, import_node_path60.join)(this.projectsRoot(), name, META_FILE);
+    return (0, import_node_path61.join)(this.projectsRoot(), name, META_FILE);
   }
   /** projects/<name>/ 目录路径（cwd 用） */
   projectDir(name) {
-    return (0, import_node_path60.join)(this.projectsRoot(), name);
+    return (0, import_node_path61.join)(this.projectsRoot(), name);
   }
   projectsRoot() {
-    return (0, import_node_path60.join)(this.root, PROJECTS_DIR);
+    return (0, import_node_path61.join)(this.root, PROJECTS_DIR);
   }
   async list() {
     let entries;
@@ -62549,7 +63086,7 @@ var PublishJobRegistry = class {
 // src/app-builder/publish-job-runner.ts
 var import_node_child_process17 = require("child_process");
 var import_node_fs50 = require("fs");
-var import_node_path61 = require("path");
+var import_node_path62 = require("path");
 
 // src/app-builder/publish-stage-parser.ts
 var STAGE_RE = /^\s*::stage::(build|deploy|verify)\s*$/;
@@ -62581,7 +63118,7 @@ async function startPublishJob(deps, args) {
     return { jobId: registry2.get(args.name).jobId, status: "already-publishing" };
   }
   const projDir = projectDir(args.name);
-  const logPath = (0, import_node_path61.join)(projDir, ".publish.log");
+  const logPath = (0, import_node_path62.join)(projDir, ".publish.log");
   let logStream = null;
   try {
     logStream = (0, import_node_fs50.createWriteStream)(logPath, { flags: "w" });
@@ -62841,7 +63378,7 @@ async function recoverInterruptedJobs(deps) {
 
 // src/handlers/app-builder.ts
 init_protocol();
-var import_node_path62 = require("path");
+var import_node_path63 = require("path");
 var import_node_fs51 = require("fs");
 var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
 var DEV_SERVER_READY_TIMEOUT_MS = 3e4;
@@ -62992,8 +63529,8 @@ function buildAppBuilderHandlers(deps) {
     const project = await userStore.create(f.name, reservedPorts);
     try {
       const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(session.ownerPersonaId ?? "") : deps.personaRoot;
-      const templateSrcDir = (0, import_node_path62.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE);
-      const scaffoldScript = (0, import_node_path62.join)(deps.deployKitRoot, "scripts", "new-extension.sh");
+      const templateSrcDir = (0, import_node_path63.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE);
+      const scaffoldScript = (0, import_node_path63.join)(deps.deployKitRoot, "scripts", "new-extension.sh");
       const scaffoldResult = await userStore.scaffold(project.name, templateSrcDir, scaffoldScript);
       deps.logger?.info("app-builder.scaffold.done", {
         name: project.name,
@@ -63197,7 +63734,7 @@ function buildAppBuilderHandlers(deps) {
       await userStore.clearPublishJob(args.name);
     }
     const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(boundSession.ownerPersonaId ?? "") : deps.personaRoot;
-    const scriptPath = (0, import_node_path62.join)(deps.deployKitRoot, "scripts", "publish.sh");
+    const scriptPath = (0, import_node_path63.join)(deps.deployKitRoot, "scripts", "publish.sh");
     deps.logger?.info("app-builder.publish.start", {
       name: args.name,
       sessionId: boundSession.sessionId,
@@ -63346,6 +63883,427 @@ function buildShiftHandlers(deps) {
   };
 }
 
+// src/handlers/channel.ts
+init_protocol();
+function buildChannelHandlers(deps) {
+  return {
+    "channel:list": async () => ({
+      response: ChannelListResultSchema.parse({ channels: deps.channelStore.list() })
+    }),
+    "channel:create": async (frame) => {
+      const args = ChannelCreateArgsSchema.parse(frame);
+      const channel = deps.channelStore.create({
+        name: args.name,
+        memberPersonaIds: args.memberPersonaIds,
+        memberContactDeviceIds: args.memberContactDeviceIds
+      });
+      return { response: ChannelResultSchema.parse({ channel }) };
+    },
+    "channel:update": async (frame) => {
+      const args = ChannelUpdateArgsSchema.parse(frame);
+      const channel = deps.channelStore.update(args.channelId, {
+        ...args.name !== void 0 ? { name: args.name } : {},
+        ...args.memberPersonaIds !== void 0 ? { memberPersonaIds: args.memberPersonaIds } : {},
+        ...args.memberContactDeviceIds !== void 0 ? { memberContactDeviceIds: args.memberContactDeviceIds } : {}
+      });
+      if (!channel) {
+        throw new ClawdError(ERROR_CODES.INVALID_PARAM, `channel not found: ${args.channelId}`);
+      }
+      return { response: ChannelResultSchema.parse({ channel }) };
+    },
+    "channel:delete": async (frame) => {
+      const { channelId } = ChannelDeleteArgsSchema.parse(frame);
+      if (!deps.channelStore.get(channelId)) {
+        throw new ClawdError(ERROR_CODES.INVALID_PARAM, `channel not found: ${channelId}`);
+      }
+      if (deps.topicStore.hasUnfinished(channelId)) {
+        throw new ClawdError(
+          ERROR_CODES.INVALID_PARAM,
+          "\u8BE5\u9891\u9053\u4E0B\u4ECD\u6709\u672A\u7ED3\u675F\u8BDD\u9898\uFF0C\u5148\u6536\u655B\u6216\u5F52\u6863\u5B83\u4EEC\u518D\u5220\u9891\u9053"
+        );
+      }
+      const removedTopics = deps.topicStore.removeByChannel(channelId);
+      deps.channelStore.remove(channelId);
+      return { response: ChannelDeleteResultSchema.parse({ ok: true, removedTopics }) };
+    }
+  };
+}
+
+// src/handlers/topic.ts
+init_protocol();
+var REJECT_ESCALATE_AT = 2;
+function joinLines(records, lineMeta) {
+  const out = [];
+  for (const r of records) {
+    const meta = r.meta ?? {};
+    if (typeof meta.lineId !== "string" || !meta.lineId) continue;
+    out.push({
+      lineId: meta.lineId,
+      dispatchId: r.dispatchId,
+      ...r.workerSessionId ? { workerSessionId: r.workerSessionId } : {},
+      assignee: r.targetPersonaId,
+      focus: r.taskText,
+      status: r.status,
+      acceptance: Array.isArray(meta.acceptance) ? meta.acceptance.map(String) : [],
+      rejectCount: lineMeta[meta.lineId]?.rejectCount ?? 0,
+      accepted: lineMeta[meta.lineId]?.accepted ?? false
+    });
+  }
+  return out;
+}
+function buildTopicHandlers(deps) {
+  const mustGet = (topicId) => {
+    const t = deps.topicStore.get(topicId);
+    if (!t) throw new ClawdError(ERROR_CODES.INVALID_PARAM, `topic not found: ${topicId}`);
+    return t;
+  };
+  const linesOf = (t) => joinLines(deps.dispatchStore.list({ sourceSessionId: t.masterSessionId }), t.lineMeta);
+  return {
+    "topic:list": async (frame) => {
+      const { channelId } = TopicListArgsSchema.parse(frame);
+      const topics = deps.topicStore.listByChannel(channelId).map((t) => ({ ...t, lineCount: linesOf(t).length }));
+      return { response: TopicListResultSchema.parse({ topics }) };
+    },
+    "topic:get": async (frame) => {
+      const args = TopicGetArgsSchema.parse(frame);
+      const topic = args.topicId ? mustGet(args.topicId) : deps.topicStore.getByMasterSession(args.sessionId);
+      if (!topic) {
+        throw new ClawdError(
+          ERROR_CODES.INVALID_PARAM,
+          `topic not found for session: ${args.sessionId}`
+        );
+      }
+      return { response: TopicGetResultSchema.parse({ topic, lines: linesOf(topic) }) };
+    },
+    "topic:create": async (frame) => {
+      const args = TopicCreateArgsSchema.parse(frame);
+      if (!deps.channelStore.get(args.channelId)) {
+        throw new ClawdError(ERROR_CODES.INVALID_PARAM, `channel not found: ${args.channelId}`);
+      }
+      const { sessionId } = deps.createMasterSession({ label: args.title ?? "\u65B0\u8BDD\u9898" });
+      const topic = deps.topicStore.create({
+        channelId: args.channelId,
+        ...args.title ? { title: args.title } : {},
+        masterSessionId: sessionId
+      });
+      return {
+        response: TopicCreateResultSchema.parse({
+          topicId: topic.id,
+          masterSessionId: sessionId
+        })
+      };
+    },
+    "topic:setPlan": async (frame) => {
+      const args = TopicSetPlanArgsSchema.parse(frame);
+      mustGet(args.topicId);
+      const topic = deps.topicStore.setPlan(args.topicId, {
+        ...args.title ? { title: args.title } : {},
+        goal: args.goal,
+        boundaries: args.boundaries,
+        acceptanceCriteria: args.acceptanceCriteria
+      });
+      return { response: TopicResultSchema.parse({ topic }) };
+    },
+    "topic:append": async (frame) => {
+      const args = TopicAppendArgsSchema.parse(frame);
+      mustGet(args.topicId);
+      deps.topicStore.appendActivity(args.topicId, {
+        actor: "master",
+        action: args.action,
+        ...args.target ? { target: args.target } : {},
+        reason: args.reason,
+        ...args.artifacts ? { artifacts: args.artifacts } : {}
+      });
+      return { response: { ok: true } };
+    },
+    "topic:reject": async (frame) => {
+      const args = TopicRejectArgsSchema.parse(frame);
+      mustGet(args.topicId);
+      const { rejectCount } = deps.topicStore.bumpReject(args.topicId, args.lineId);
+      deps.topicStore.appendActivity(args.topicId, {
+        actor: "master",
+        action: `\u6253\u56DE ${args.lineId}\uFF08\u7B2C ${rejectCount} \u6B21\uFF09`,
+        target: args.lineId,
+        reason: args.reason
+      });
+      return {
+        response: TopicRejectResultSchema.parse({
+          rejectCount,
+          needsOwnerAttention: rejectCount >= REJECT_ESCALATE_AT
+        })
+      };
+    },
+    "topic:accept": async (frame) => {
+      const args = TopicAcceptArgsSchema.parse(frame);
+      const topic = mustGet(args.topicId);
+      if (!linesOf(topic).some((l) => l.lineId === args.lineId)) {
+        throw new ClawdError(
+          ERROR_CODES.INVALID_PARAM,
+          `line not found in this topic: ${args.lineId}`
+        );
+      }
+      deps.topicStore.markAccepted(args.topicId, args.lineId);
+      deps.topicStore.appendActivity(args.topicId, {
+        actor: "master",
+        action: `\u5224\u5B9A ${args.lineId} \u5408\u683C`,
+        target: args.lineId,
+        reason: args.reason,
+        ...args.artifacts ? { artifacts: args.artifacts } : {}
+      });
+      const lines = linesOf(mustGet(args.topicId));
+      const acceptedLines = lines.filter((l) => l.accepted).length;
+      return {
+        response: TopicAcceptResultSchema.parse({
+          acceptedLines,
+          totalLines: lines.length,
+          allAccepted: acceptedLines === lines.length
+        })
+      };
+    },
+    "topic:close": async (frame) => {
+      const args = TopicCloseArgsSchema.parse(frame);
+      mustGet(args.topicId);
+      const topic = deps.topicStore.close(args.topicId, args.state);
+      return { response: TopicResultSchema.parse({ topic }) };
+    }
+  };
+}
+
+// src/handlers/line.ts
+init_protocol();
+init_claude_history();
+
+// src/channel/digest.ts
+var QUOTA = { files: 0.14, commands: 0.12, outputs: 0.22, errors: 0.24, tail: 0.28 };
+var WRITE_TOOLS = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit", "NotebookEdit"]);
+var READ_TOOLS = /* @__PURE__ */ new Set(["Read", "NotebookRead"]);
+var DIGEST_DEFAULTS = { tailAssistant: 12, maxBytes: 2e4 };
+var firstLine = (s) => String(s ?? "").split("\n")[0].trim();
+var errSignature = (s) => firstLine(s).replace(/\d+/g, "N").replace(/(^|[\s'"`([])\/[^\s'"`)\]]+/g, "$1<path>").slice(0, 200);
+var blocksOf = (rec4) => {
+  const c = rec4?.message?.content;
+  return Array.isArray(c) ? c : [];
+};
+function takeWithin(lines, budget) {
+  if (!lines.length) return { out: ["- \uFF08\u65E0\uFF09"], clipped: false };
+  const out = [];
+  let used = 0;
+  for (let i = 0; i < lines.length; i++) {
+    const size = Buffer.byteLength(lines[i], "utf8") + 1;
+    if (used + size > budget && out.length) {
+      out.push(`- \u2026\u672C\u8282\u8FD8\u6709 ${lines.length - i} \u6761\u672A\u5217\u51FA\uFF08\u672C\u8282\u914D\u989D ${budget} \u5B57\u8282\u5DF2\u6EE1\uFF09`);
+      return { out, clipped: true };
+    }
+    out.push(lines[i]);
+    used += size;
+  }
+  return { out, clipped: false };
+}
+function clampBytes(text, limit) {
+  if (Buffer.byteLength(text, "utf8") <= limit) return text;
+  let lo = 0;
+  let hi = text.length;
+  while (lo < hi) {
+    const mid = Math.ceil((lo + hi) / 2);
+    if (Buffer.byteLength(text.slice(0, mid), "utf8") <= limit) lo = mid;
+    else hi = mid - 1;
+  }
+  return text.slice(0, lo);
+}
+function buildDigest(records, opts = {}) {
+  const maxBytes = opts.maxBytes ?? DIGEST_DEFAULTS.maxBytes;
+  const tailAssistant = opts.tailAssistant ?? DIGEST_DEFAULTS.tailAssistant;
+  const filesWritten = /* @__PURE__ */ new Set();
+  const filesRead = /* @__PURE__ */ new Set();
+  const commands = /* @__PURE__ */ new Map();
+  const errors = /* @__PURE__ */ new Map();
+  const outputs = [];
+  const pendingCmd = /* @__PURE__ */ new Map();
+  let lastCmd = null;
+  const tail = [];
+  let toolCalls = 0;
+  for (const rec4 of records) {
+    for (const b2 of blocksOf(rec4)) {
+      if (b2.type === "tool_use") {
+        toolCalls += 1;
+        const fp = b2.input?.file_path ?? b2.input?.notebook_path;
+        if (fp && b2.name && WRITE_TOOLS.has(b2.name)) filesWritten.add(String(fp));
+        else if (fp && b2.name && READ_TOOLS.has(b2.name)) filesRead.add(String(fp));
+        if (b2.name === "Bash" && b2.input?.command) {
+          const c = firstLine(b2.input.command);
+          commands.set(c, (commands.get(c) ?? 0) + 1);
+          if (b2.id) pendingCmd.set(b2.id, c);
+          lastCmd = c;
+        }
+      } else if (b2.type === "tool_result" && !b2.is_error) {
+        const cmd = b2.tool_use_id ? pendingCmd.get(b2.tool_use_id) : lastCmd;
+        if (cmd) {
+          const text2 = typeof b2.content === "string" ? b2.content : JSON.stringify(b2.content ?? "");
+          const flat = text2.replace(/\s+/g, " ").trim();
+          if (flat) {
+            outputs.push(`- ${cmd} \u2192 \u2026${flat.slice(-220)}`);
+            if (outputs.length > 40) outputs.shift();
+          }
+          if (b2.tool_use_id) pendingCmd.delete(b2.tool_use_id);
+        }
+      } else if (b2.type === "tool_result" && b2.is_error) {
+        const text2 = typeof b2.content === "string" ? b2.content : JSON.stringify(b2.content ?? "");
+        const sig = errSignature(text2);
+        const prev = errors.get(sig);
+        if (prev) prev.count += 1;
+        else errors.set(sig, { count: 1, sample: firstLine(text2).slice(0, 300) });
+      } else if (b2.type === "text" && rec4.type === "assistant") {
+        tail.push(b2.text ?? "");
+        if (tail.length > tailAssistant) tail.shift();
+      }
+    }
+  }
+  const budget = (k2) => Math.max(200, Math.floor(maxBytes * QUOTA[k2]));
+  let anyClipped = false;
+  const take = (lines, k2) => {
+    const r = takeWithin(lines, budget(k2));
+    if (r.clipped) anyClipped = true;
+    return r.out;
+  };
+  const errLines = [...errors.entries()].sort((x, y2) => y2[1].count - x[1].count).map(([, v2]) => `- \xD7${v2.count}  ${v2.sample}`);
+  const cmdLines = [...commands.entries()].map(([c, n]) => n > 1 ? `- \xD7${n}  ${c}` : `- ${c}`);
+  const out = [
+    "# worker transcript digest",
+    ...opts.transcriptPath ? [`transcript: ${opts.transcriptPath}`] : [],
+    `\u5DE5\u5177\u8C03\u7528\u603B\u6570: ${toolCalls}\uFF5C\u5199\u6587\u4EF6 ${filesWritten.size} \u4E2A\uFF5C\u8BFB\u6587\u4EF6 ${filesRead.size} \u4E2A\uFF5C\u4E0D\u540C\u547D\u4EE4 ${commands.size} \u6761\uFF5C\u62A5\u9519\u7B7E\u540D ${errors.size} \u79CD`,
+    "",
+    "## \u6539\u52A8\u8FC7\u7684\u6587\u4EF6\uFF08\u5F71\u54CD\u9762\uFF1B\u53EA\u7EDF\u8BA1 Write/Edit/MultiEdit/NotebookEdit\uFF09",
+    ...take([...filesWritten].map((f) => `- ${f}`), "files"),
+    "",
+    "## \u6267\u884C\u8FC7\u7684\u547D\u4EE4\uFF08\u91CD\u590D\u7684\u6298\u53E0\u8BA1\u6570\uFF09",
+    ...take(cmdLines, "commands"),
+    "",
+    "## \u62A5\u9519\uFF08\u6309\u7B7E\u540D\u805A\u5408\uFF1B\u91CD\u590D\u6B21\u6570\u9AD8 = \u649E\u5899\uFF09",
+    ...take(errLines, "errors"),
+    "",
+    "## \u6210\u529F\u547D\u4EE4\u7684\u8F93\u51FA\u6458\u5F55\uFF08\u5404\u53D6\u5C3E\u90E8\uFF1B\u5224\u300C\u6D4B\u8BD5\u771F\u8DD1\u8FC7\u6CA1\u3001\u8FC7\u4E86\u51E0\u6761\u300D\u770B\u8FD9\u91CC\uFF09",
+    ...take(outputs, "outputs"),
+    "",
+    `## \u6700\u540E ${tail.length} \u6BB5 assistant \u8F93\u51FA\uFF08\u4FDD\u7559\u539F\u6587\u6362\u884C\uFF0C\u6BCF\u6BB5\u622A\u65AD\u81F3 500 \u5B57\uFF09`,
+    // 只留首行会把 worker 的收尾报告砍成「做完了」这种没信息量的一句，
+    // 而那正是判「假完成」最需要的原文。
+    ...take(tail.map((t) => `- ${String(t ?? "").slice(0, 500)}`), "tail")
+  ];
+  let text = out.join("\n");
+  let truncated = anyClipped;
+  if (Buffer.byteLength(text, "utf8") > maxBytes) {
+    text = clampBytes(text, maxBytes);
+    text += `
+
+\u26A0\uFE0F digest \u5DF2\u622A\u65AD\uFF08\u4E0A\u9650 ${maxBytes} \u5B57\u8282\uFF09\u2014\u2014\u672A\u89C1\u5168\u90E8\u5185\u5BB9\uFF0C\u5224\u5B9A"\u6CA1\u505A"\u524D\u5148\u8981\u6C42 worker \u81EA\u8BC1\u3002`;
+    truncated = true;
+  } else if (anyClipped) {
+    text += `
+
+\u26A0\uFE0F digest \u5DF2\u622A\u65AD\uFF08\u6709\u5C0F\u8282\u8D85\u51FA\u914D\u989D\uFF0C\u89C1\u4E0A\u65B9\u300C\u672A\u5217\u51FA\u300D\u6807\u6CE8\uFF09\u2014\u2014\u672A\u89C1\u5168\u90E8\u5185\u5BB9\uFF0C\u5224\u5B9A"\u6CA1\u505A"\u524D\u5148\u8981\u6C42 worker \u81EA\u8BC1\u3002`;
+  }
+  return { digest: text, truncated };
+}
+
+// src/handlers/line.ts
+function buildLineHandlers(deps) {
+  return {
+    "line:digest": async (frame) => {
+      const args = LineDigestArgsSchema.parse(frame);
+      const rec4 = deps.dispatchStore.get(args.dispatchId);
+      if (!rec4) {
+        throw new ClawdError(ERROR_CODES.INVALID_PARAM, `dispatch not found: ${args.dispatchId}`);
+      }
+      if (!rec4.workerSessionId) {
+        throw new ClawdError(
+          ERROR_CODES.INVALID_PARAM,
+          `\u8BE5\u7EBF\u8FD8\u6CA1\u6709 worker \u4F1A\u8BDD\uFF08spawn \u672A\u5B8C\u6210\uFF09\uFF0C\u6682\u65F6\u65E0\u6CD5\u6838\u9A8C: ${args.dispatchId}`
+        );
+      }
+      const sf = deps.getSessionFile(rec4.workerSessionId);
+      if (!sf?.toolSessionId) {
+        throw new ClawdError(
+          ERROR_CODES.INVALID_PARAM,
+          `worker \u4F1A\u8BDD\u5C1A\u672A\u4EA7\u751F transcript\uFF08\u8FD8\u6CA1\u8DD1\u8D77\u6765\uFF09: ${rec4.workerSessionId}`
+        );
+      }
+      const file = deps.history.resolveTranscriptFile(sf.cwd, sf.toolSessionId);
+      if (!file) {
+        throw new ClawdError(
+          ERROR_CODES.INVALID_PARAM,
+          `transcript \u4E0D\u5B58\u5728\uFF08worker \u53EF\u80FD\u8FD8\u6CA1\u5199\u76D8\uFF09: ${sf.toolSessionId}`
+        );
+      }
+      return {
+        response: LineDigestResultSchema.parse(
+          buildDigest(streamJsonlLines(file), { transcriptPath: file })
+        )
+      };
+    }
+  };
+}
+
+// src/handlers/master.ts
+init_protocol();
+
+// src/channel/authority.ts
+var import_promises13 = __toESM(require("fs/promises"), 1);
+init_protocol();
+var DEFAULT_AUTHORITY_RULES = [
+  { id: "outbound-message", desc: "\u4EE5\u8001\u677F\u540D\u4E49\u7ED9\u5176\u4ED6\u4EBA\u53D1\u6D88\u606F\uFF08IM/\u90AE\u4EF6\uFF09", action: "ask" },
+  { id: "push-remote", desc: "\u63A8\u4EE3\u7801\u5230\u8FDC\u7AEF / \u5408 PR / \u53D1\u5E03\u4E0A\u7EBF", action: "ask" },
+  { id: "destructive", desc: "\u5220\u9664\u6570\u636E / \u52A8\u751F\u4EA7\u73AF\u5883", action: "ask" },
+  { id: "spend", desc: "\u82B1\u94B1", action: "ask" }
+];
+var askBecause = (reason) => ({
+  action: "ask",
+  desc: reason,
+  source: `fallback:${reason}`
+});
+async function resolveAuthority(args) {
+  let rules;
+  let source;
+  let raw = null;
+  try {
+    raw = await import_promises13.default.readFile(args.tablePath, "utf8");
+  } catch (e) {
+    if (e.code !== "ENOENT") {
+      return askBecause(`\u6388\u6743\u8BBE\u5B9A\u8BFB\u4E0D\u51FA\u6765\uFF08${args.tablePath}\uFF09\uFF1A${e.message}`);
+    }
+  }
+  if (raw === null) {
+    rules = DEFAULT_AUTHORITY_RULES.map((r) => ({ ...r }));
+    source = "default";
+  } else {
+    let parsed;
+    try {
+      parsed = JSON.parse(raw);
+    } catch (e) {
+      return askBecause(`\u6388\u6743\u8BBE\u5B9A\u4E0D\u662F\u5408\u6CD5 JSON\uFF08${args.tablePath}\uFF09\uFF1A${e.message}`);
+    }
+    const check = AuthorityTableSchema.safeParse(parsed);
+    if (!check.success) {
+      return askBecause(`\u6388\u6743\u8BBE\u5B9A\u7ED3\u6784\u4E0D\u5BF9\uFF08${args.tablePath}\uFF09\uFF1A${check.error.issues[0]?.message ?? "\u672A\u77E5"}`);
+    }
+    rules = check.data.rules;
+    source = "table";
+  }
+  const hit = rules.find((r) => r.id === args.ruleId);
+  if (!hit) return askBecause(`\u8868\u91CC\u6CA1\u6709 "${args.ruleId}" \u8FD9\u6761\uFF0C\u672A\u77E5\u52A8\u4F5C\u4E00\u5F8B\u505C\u4E0B\u95EE\u8001\u677F`);
+  return { action: hit.action, desc: hit.desc, source };
+}
+
+// src/handlers/master.ts
+function buildMasterHandlers(deps) {
+  return {
+    "master:authorityCheck": async (frame) => {
+      const { ruleId } = AuthorityCheckArgsSchema.parse(frame);
+      const result = await resolveAuthority({ tablePath: deps.authorityTablePath, ruleId });
+      return { response: AuthorityCheckResultSchema.parse(result) };
+    }
+  };
+}
+
 // src/handlers/github.ts
 init_protocol();
 
@@ -63616,12 +64574,12 @@ function buildVisitorHandlers(deps) {
 }
 
 // src/extension/registry.ts
-var import_promises12 = __toESM(require("fs/promises"), 1);
-var import_node_path63 = __toESM(require("path"), 1);
+var import_promises14 = __toESM(require("fs/promises"), 1);
+var import_node_path64 = __toESM(require("path"), 1);
 async function loadAll(root) {
   let entries;
   try {
-    entries = await import_promises12.default.readdir(root, { withFileTypes: true });
+    entries = await import_promises14.default.readdir(root, { withFileTypes: true });
   } catch (e) {
     if (e.code === "ENOENT") return [];
     throw e;
@@ -63630,16 +64588,16 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path63.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path64.default.join(root, ent.name), ent.name));
   }
   records.sort((a, b2) => a.extId < b2.extId ? -1 : a.extId > b2.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path63.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path64.default.join(dir, "manifest.json");
   let raw;
   try {
-    raw = await import_promises12.default.readFile(manifestPath, "utf8");
+    raw = await import_promises14.default.readFile(manifestPath, "utf8");
   } catch {
     return {
       extId: dirName,
@@ -63680,8 +64638,8 @@ async function loadOne(dir, dirName) {
 }
 
 // src/extension/uninstall.ts
-var import_promises13 = __toESM(require("fs/promises"), 1);
-var import_node_path64 = __toESM(require("path"), 1);
+var import_promises15 = __toESM(require("fs/promises"), 1);
+var import_node_path65 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -63690,14 +64648,14 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path64.default.join(deps.root, deps.extId);
+  const dir = import_node_path65.default.join(deps.root, deps.extId);
   try {
-    await import_promises13.default.access(dir);
+    await import_promises15.default.access(dir);
   } catch {
     throw new UninstallError("NOT_FOUND", `extension ${deps.extId} not installed`);
   }
   await deps.runtime.close(deps.extId);
-  await import_promises13.default.rm(dir, { recursive: true, force: true });
+  await import_promises15.default.rm(dir, { recursive: true, force: true });
 }
 
 // src/handlers/index.ts
@@ -63916,6 +64874,22 @@ function buildMethodHandlers(deps) {
       resolvePersonaRoot: deps.resolvePersonaRoot,
       broadcastSessionFrame: deps.broadcastSessionFrame
     }),
+    ...buildChannelHandlers({ channelStore: deps.channelStore, topicStore: deps.topicStore }),
+    ...buildMasterHandlers({
+      authorityTablePath: import_node_path66.default.join(deps.masterDataDir, "master-authority.json")
+    }),
+    ...buildLineHandlers({
+      dispatchStore: deps.dispatchStore,
+      getSessionFile: deps.getWorkerSessionFile,
+      // transcript 定位/读取复用 history:* 那个同一个 reader，不另起一份路径规则
+      history: deps.history
+    }),
+    ...buildTopicHandlers({
+      topicStore: deps.topicStore,
+      channelStore: deps.channelStore,
+      dispatchStore: deps.dispatchStore,
+      createMasterSession: deps.createMasterSession
+    }),
     ...buildShiftHandlers({
       shiftStore: deps.shiftStore,
       ownerIdProvider: deps.shiftOwnerIdProvider,
@@ -64343,8 +65317,8 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 
 // src/extension/runtime.ts
 var import_node_child_process21 = require("child_process");
-var import_node_path65 = __toESM(require("path"), 1);
-var import_promises14 = require("timers/promises");
+var import_node_path67 = __toESM(require("path"), 1);
+var import_promises16 = require("timers/promises");
 
 // src/extension/port-allocator.ts
 var import_node_net2 = __toESM(require("net"), 1);
@@ -64444,7 +65418,7 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path65.default.join(this.root, extId);
+    const dir = import_node_path67.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
@@ -64520,7 +65494,7 @@ ${handle.stderrTail}`
         if (res.ok) return;
       } catch {
       }
-      await (0, import_promises14.setTimeout)(this.healthzIntervalMs);
+      await (0, import_promises16.setTimeout)(this.healthzIntervalMs);
     }
     throw new RuntimeError(
       "HEALTHZ_FAILED",
@@ -64545,7 +65519,7 @@ ${handle.stderrTail}`
     };
     killGroup("SIGTERM");
     const exited = new Promise((resolve9) => child.once("exit", () => resolve9()));
-    const timed = (0, import_promises14.setTimeout)(5e3).then(() => "timeout");
+    const timed = (0, import_promises16.setTimeout)(5e3).then(() => "timeout");
     const winner = await Promise.race([exited.then(() => "exited"), timed]);
     if (winner === "timeout" && child.exitCode === null) {
       killGroup("SIGKILL");
@@ -64555,8 +65529,8 @@ ${handle.stderrTail}`
 };
 
 // src/extension/published-channels.ts
-var import_promises15 = __toESM(require("fs/promises"), 1);
-var import_node_path66 = __toESM(require("path"), 1);
+var import_promises17 = __toESM(require("fs/promises"), 1);
+var import_node_path68 = __toESM(require("path"), 1);
 init_zod();
 var PublishedChannelsError = class extends Error {
   constructor(code, message) {
@@ -64586,7 +65560,7 @@ var PublishedChannelStore = class {
     this.channels.clear();
     let raw;
     try {
-      raw = await import_promises15.default.readFile(this.filePath, "utf8");
+      raw = await import_promises17.default.readFile(this.filePath, "utf8");
     } catch (e) {
       if (e.code === "ENOENT") {
         this.loaded = true;
@@ -64655,15 +65629,15 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises15.default.mkdir(import_node_path66.default.dirname(this.filePath), { recursive: true });
-    await import_promises15.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
-    await import_promises15.default.rename(tmp, this.filePath);
+    await import_promises17.default.mkdir(import_node_path68.default.dirname(this.filePath), { recursive: true });
+    await import_promises17.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
+    await import_promises17.default.rename(tmp, this.filePath);
   }
 };
 
 // src/extension/bundle-cache.ts
-var import_promises16 = __toESM(require("fs/promises"), 1);
-var import_node_path67 = __toESM(require("path"), 1);
+var import_promises18 = __toESM(require("fs/promises"), 1);
+var import_node_path69 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -64671,17 +65645,17 @@ var BundleCache = class {
   rootDir;
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
-    await import_promises16.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path67.default.join(this.rootDir, `${snapshotHash}.zip`);
+    await import_promises18.default.mkdir(this.rootDir, { recursive: true });
+    const file = import_node_path69.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
-    await import_promises16.default.writeFile(tmp, buffer, { mode: 384 });
-    await import_promises16.default.rename(tmp, file);
+    await import_promises18.default.writeFile(tmp, buffer, { mode: 384 });
+    await import_promises18.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path67.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path69.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
-      return await import_promises16.default.readFile(file);
+      return await import_promises18.default.readFile(file);
     } catch (e) {
       if (e.code === "ENOENT") return null;
       throw e;
@@ -64689,8 +65663,8 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path67.default.join(this.rootDir, `${snapshotHash}.zip`);
-    await import_promises16.default.rm(file, { force: true });
+    const file = import_node_path69.default.join(this.rootDir, `${snapshotHash}.zip`);
+    await import_promises18.default.rm(file, { force: true });
   }
 };
 
@@ -64712,24 +65686,24 @@ async function startDaemon(config) {
     sampling: logShippingCfg.sampling,
     homeDir: import_node_os24.default.homedir()
   });
-  const logDir = import_node_path68.default.join(config.dataDir, "log");
+  const logDir = import_node_path70.default.join(config.dataDir, "log");
   import_node_fs52.default.mkdirSync(logDir, { recursive: true });
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path68.default.join(logDir, "clawd.log"),
+    file: import_node_path70.default.join(logDir, "clawd.log"),
     logClient
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const screenIdleProbeLogger = createFileOnlyLogger({
-    file: import_node_path68.default.join(logDir, "screen-idle-probe.log"),
+    file: import_node_path70.default.join(logDir, "screen-idle-probe.log"),
     level: "debug"
   });
   logger.info("screen-idle probe logger enabled", {
-    file: import_node_path68.default.join(logDir, "screen-idle-probe.log")
+    file: import_node_path70.default.join(logDir, "screen-idle-probe.log")
   });
   const CAP_TARGETS = [
-    import_node_path68.default.join(logDir, "clawd.log"),
-    import_node_path68.default.join(logDir, "screen-idle-probe.log")
+    import_node_path70.default.join(logDir, "clawd.log"),
+    import_node_path70.default.join(logDir, "screen-idle-probe.log")
   ];
   const LOG_CAP_MAX_BYTES = 10 * 1024 * 1024;
   const LOG_CAP_KEEP_BYTES = 5 * 1024 * 1024;
@@ -64825,8 +65799,8 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path68.default.join(config.dataDir, "personas"));
-  const usersRoot = import_node_path68.default.join(config.dataDir, "users");
+  const personaStore = new PersonaStore(import_node_path70.default.join(config.dataDir, "personas"));
+  const usersRoot = import_node_path70.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -64849,7 +65823,7 @@ async function startDaemon(config) {
   retirePersonaBuilder({ store: personaStore, logger });
   const groupFileStore = new GroupFileStore({ dataDir: config.dataDir, logger });
   const dispatchStore = createDispatchStore({
-    filePath: import_node_path68.default.join(config.dataDir, "dispatch.json"),
+    filePath: import_node_path70.default.join(config.dataDir, "dispatch.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("dispatch store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
@@ -64857,6 +65831,24 @@ async function startDaemon(config) {
   });
   await dispatchStore.load();
   dispatchStore.markInterruptedAsFailed((/* @__PURE__ */ new Date()).toISOString());
+  const channelStore = createChannelStore({
+    filePath: import_node_path70.default.join(config.dataDir, "channels.json"),
+    now: () => Date.now(),
+    genId: () => `ch-${v4_default().slice(0, 8)}`,
+    onFlushError: (err) => logger.error("channel store flush failed", {
+      reason: err instanceof Error ? err.message : String(err)
+    })
+  });
+  await channelStore.load();
+  const topicStore = createTopicStore({
+    filePath: import_node_path70.default.join(config.dataDir, "topics.json"),
+    now: () => Date.now(),
+    genId: () => `tp-${v4_default().slice(0, 8)}`,
+    onFlushError: (err) => logger.error("topic store flush failed", {
+      reason: err instanceof Error ? err.message : String(err)
+    })
+  });
+  await topicStore.load();
   let deliverPendingRef;
   const personaDispatchManager = new PersonaDispatchManager({
     genId: () => v4_default(),
@@ -64864,18 +65856,18 @@ async function startDaemon(config) {
     now: () => Date.now(),
     onCompleted: (sid) => deliverPendingRef?.(sid)
   });
-  const here = typeof __dirname === "string" ? __dirname : import_node_path68.default.dirname((0, import_node_url4.fileURLToPath)(import_meta7.url));
+  const here = typeof __dirname === "string" ? __dirname : import_node_path70.default.dirname((0, import_node_url4.fileURLToPath)(import_meta7.url));
   const mcpConfigs = [];
   const mcpDaemonUrl = `http://127.0.0.1:${config.port}`;
   const dispatchServerCandidates = [
-    import_node_path68.default.join(here, "dispatch", "mcp-server.cjs"),
+    import_node_path70.default.join(here, "dispatch", "mcp-server.cjs"),
     // 生产 dist/index → dist/dispatch/mcp-server.cjs
-    import_node_path68.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
+    import_node_path70.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
   const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
   if (dispatchServerScriptPath) {
-    const dispatchLogPath = import_node_path68.default.join(logDir, "dispatch-mcp-server.log");
+    const dispatchLogPath = import_node_path70.default.join(logDir, "dispatch-mcp-server.log");
     const dispatchCfgPath = writeDispatchMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: dispatchServerScriptPath,
@@ -64895,12 +65887,12 @@ async function startDaemon(config) {
     });
   }
   const ticketServerCandidates = [
-    import_node_path68.default.join(here, "ticket", "mcp-server.cjs"),
-    import_node_path68.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
+    import_node_path70.default.join(here, "ticket", "mcp-server.cjs"),
+    import_node_path70.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
   const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
   if (ticketServerScriptPath) {
-    const ticketLogPath = import_node_path68.default.join(logDir, "ticket-mcp-server.log");
+    const ticketLogPath = import_node_path70.default.join(logDir, "ticket-mcp-server.log");
     const ticketCfgPath = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
@@ -64922,12 +65914,12 @@ async function startDaemon(config) {
     });
   }
   const shiftServerCandidates = [
-    import_node_path68.default.join(here, "shift", "mcp-server.cjs"),
-    import_node_path68.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
+    import_node_path70.default.join(here, "shift", "mcp-server.cjs"),
+    import_node_path70.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
   const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
   if (shiftServerScriptPath) {
-    const shiftLogPath = import_node_path68.default.join(logDir, "shift-mcp-server.log");
+    const shiftLogPath = import_node_path70.default.join(logDir, "shift-mcp-server.log");
     const shiftCfgPath = await writeShiftMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: shiftServerScriptPath,
@@ -64948,12 +65940,12 @@ async function startDaemon(config) {
     );
   }
   const inboxServerCandidates = [
-    import_node_path68.default.join(here, "inbox", "mcp-server.cjs"),
-    import_node_path68.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
+    import_node_path70.default.join(here, "inbox", "mcp-server.cjs"),
+    import_node_path70.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
   ];
   const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
   if (inboxServerScriptPath) {
-    const inboxLogPath = import_node_path68.default.join(logDir, "inbox-mcp-server.log");
+    const inboxLogPath = import_node_path70.default.join(logDir, "inbox-mcp-server.log");
     const inboxCfgPath = await writeInboxMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: inboxServerScriptPath,
@@ -64974,8 +65966,8 @@ async function startDaemon(config) {
     );
   }
   const peerOpsServerCandidates = [
-    import_node_path68.default.join(here, "peer-ops", "mcp-server.cjs"),
-    import_node_path68.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
+    import_node_path70.default.join(here, "peer-ops", "mcp-server.cjs"),
+    import_node_path70.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
   ];
   const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
   if (peerOpsServerScriptPath) {
@@ -64997,12 +65989,12 @@ async function startDaemon(config) {
     );
   }
   const rpcToolServerCandidates = [
-    import_node_path68.default.join(here, "rpc-tool", "mcp-server.cjs"),
-    import_node_path68.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
+    import_node_path70.default.join(here, "rpc-tool", "mcp-server.cjs"),
+    import_node_path70.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
   ];
   const rpcToolServerScriptPath = rpcToolServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
   if (rpcToolServerScriptPath) {
-    const rpcToolLogPath = import_node_path68.default.join(logDir, "rpc-tool-mcp-server.log");
+    const rpcToolLogPath = import_node_path70.default.join(logDir, "rpc-tool-mcp-server.log");
     const rpcToolCfgPath = writeRpcToolMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: rpcToolServerScriptPath,
@@ -65023,7 +66015,7 @@ async function startDaemon(config) {
     );
   }
   const shiftStore = createShiftStore({
-    filePath: import_node_path68.default.join(config.dataDir, "shift.json"),
+    filePath: import_node_path70.default.join(config.dataDir, "shift.json"),
     ownerIdProvider: () => ownerPrincipalId,
     now: () => Date.now()
   });
@@ -65045,7 +66037,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path68.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path70.default.join(config.dataDir, "personas"),
     // dispatch / shift 自动化 spawn 按 persona 绑定 tool 起 B session（codex persona 用 codex）。
     // personaRegistry 声明在 manager 之后（同作用域 const，调用时机在启动完成后，无 TDZ 风险）。
     getPersonaDefaults: (personaId2) => personaRegistry.get(personaId2),
@@ -65099,7 +66091,7 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path68.default.isAbsolute(input.relPath) ? input.relPath : import_node_path68.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path70.default.isAbsolute(input.relPath) ? input.relPath : import_node_path70.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
           size = import_node_fs52.default.statSync(absPath).size;
@@ -65132,9 +66124,9 @@ async function startDaemon(config) {
     logger.info("projects.seed-dropped", { dropped: droppedSeed.dropped, backup: droppedSeed.backup });
   }
   const projectsStore = new ProjectsStore({
-    file: import_node_path68.default.join(config.dataDir, "projects.json"),
+    file: import_node_path70.default.join(config.dataDir, "projects.json"),
     clawdDir: config.dataDir,
-    codexStateFile: import_node_path68.default.join(import_node_os24.default.homedir(), ".codex", ".codex-global-state.json"),
+    codexStateFile: import_node_path70.default.join(import_node_os24.default.homedir(), ".codex", ".codex-global-state.json"),
     logger
   });
   const observer = new SessionObserver({
@@ -65194,12 +66186,12 @@ async function startDaemon(config) {
     screenIdleProbeLogger
   }) : new ClaudeAdapter({ logger, historyReader: new ClaudeHistoryReader() });
   registerAdapter("claude", claudeAdapter);
-  const codexIsolatedHome = import_node_path68.default.join(config.dataDir, "codex-home");
+  const codexIsolatedHome = import_node_path70.default.join(config.dataDir, "codex-home");
   try {
     import_node_fs52.default.mkdirSync(codexIsolatedHome, { recursive: true });
     for (const f of ["auth.json", "config.toml"]) {
-      const link = import_node_path68.default.join(codexIsolatedHome, f);
-      const target = import_node_path68.default.join(import_node_os24.default.homedir(), ".codex", f);
+      const link = import_node_path70.default.join(codexIsolatedHome, f);
+      const target = import_node_path70.default.join(import_node_os24.default.homedir(), ".codex", f);
       if (!import_node_fs52.default.existsSync(link) && import_node_fs52.default.existsSync(target)) import_node_fs52.default.symlinkSync(target, link);
     }
   } catch (err) {
@@ -65213,11 +66205,11 @@ async function startDaemon(config) {
       // projectPaths 每次调用现取 —— 用户新建 project 后立即生效，不用重启 daemon
       codexHomeFor: (cwd) => resolveCodexHome({
         cwd,
-        personaRoot: import_node_path68.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path70.default.join(config.dataDir, "personas"),
         // 必须用 listMerged（Codex registry ∪ 叠加层）：只用本地 list() 的话，用户在
         // Codex 里建的 project 不在表里，在它下面开的会话会被误判成隔离 → Codex 侧看不到
         projectPaths: projectsStore.listMerged().map((x) => x.path),
-        sharedHome: import_node_path68.default.join(import_node_os24.default.homedir(), ".codex"),
+        sharedHome: import_node_path70.default.join(import_node_os24.default.homedir(), ".codex"),
         isolatedHome: codexIsolatedHome
       })
     })
@@ -65359,6 +66351,29 @@ async function startDaemon(config) {
   });
   const handlers = {
     ...buildMethodHandlers({
+      channelStore,
+      topicStore,
+      dispatchStore,
+      // line:digest 用：worker session 的 cwd / toolSessionId（transcript 定位的输入）
+      getWorkerSessionFile: (sessionId) => {
+        const f = manager.findOwnedSession(sessionId);
+        return f ? { cwd: f.cwd, ...f.toolSessionId ? { toolSessionId: f.toolSessionId } : {} } : void 0;
+      },
+      masterDataDir: config.dataDir,
+      // 建话题即起该话题的 Master session（1:1）。走与 session:create 同一条 manager.create
+      // 链路，不复制会话创建逻辑；creatorPrincipalId 用本机 deviceId（owner ctx 的 principal.id）。
+      createMasterSession: ({ label }) => {
+        const { response } = manager.create(
+          { ownerPersonaId: "persona-master", label },
+          authFile.deviceId,
+          ownerDisplayName
+        );
+        const sessionId = response.sessionId;
+        if (typeof sessionId !== "string" || !sessionId) {
+          throw new Error("createMasterSession: manager.create \u6CA1\u6709\u8FD4\u56DE sessionId");
+        }
+        return { sessionId };
+      },
       // meta:methods 自省：飞书 gate getter + 最终 handler 表（下面还会 spread 进
       // dispatch / shift-internal 两组，只看 buildMethodHandlers 内部表会误报死方法）
       feishuActive: () => feishuActive,
@@ -65408,11 +66423,11 @@ async function startDaemon(config) {
         // 'persona/<pid>/owner'，default 走 'default'。
         getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
         // guest path guard：candidate 必须在 personaRoot 子树或调用者自己的 user-dir 下
-        personaRoot: import_node_path68.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path70.default.join(config.dataDir, "personas"),
         usersRoot
       },
       // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-      personaRoot: import_node_path68.default.join(config.dataDir, "personas"),
+      personaRoot: import_node_path70.default.join(config.dataDir, "personas"),
       // v2 多人 persona 隔离：handler 派生 guest user-dir 放行
       usersRoot,
       // v2 Phase 6: whoami handler 装在 owner principal.displayName + persona 解析
@@ -65545,11 +66560,11 @@ async function startDaemon(config) {
       // 发布上线脚手架化 (spec 2026-06-03 §5.2):
       // appBuilderPersonaRoot 用于拼 publish.sh 绝对路径（persona-app-builder 安装在
       // dataDir/personas/persona-app-builder 之下，extension-kit/scripts/publish.sh 是相对路径）。
-      appBuilderPersonaRoot: import_node_path68.default.join(config.dataDir, "personas", "persona-app-builder"),
+      appBuilderPersonaRoot: import_node_path70.default.join(config.dataDir, "personas", "persona-app-builder"),
       // 共享 deploy-kit 根：scaffold/publish 脚本骨架 + 阿里云凭证单一真源。
-      deployKitRoot: import_node_path68.default.join(config.dataDir, "deploy-kit"),
+      deployKitRoot: import_node_path70.default.join(config.dataDir, "deploy-kit"),
       // scaffold/publish 按当前 session 的 persona 解析其安装根，让每个 persona 用自己的模板/注入配置。
-      resolvePersonaRoot: (personaId2) => import_node_path68.default.join(config.dataDir, "personas", personaId2),
+      resolvePersonaRoot: (personaId2) => import_node_path70.default.join(config.dataDir, "personas", personaId2),
       // 发布上线脚手架化 (spec 2026-06-03 §5.2.2):
       // 复用 SessionManagerDeps.broadcastFrame 同款 dispatch 逻辑 —— runner 调 manager.send
       // 取回 broadcast 帧后逐帧 push 到 transport，跟 manager 自身的 deps 一致。
@@ -65654,7 +66669,7 @@ async function startDaemon(config) {
   });
   shiftScheduler.start();
   logger.info("shift scheduler started", { shiftCount: shiftStore.list().length });
-  const larkBotStore = createLarkBotBindingStore(import_node_path68.default.join(config.dataDir, "personas"));
+  const larkBotStore = createLarkBotBindingStore(import_node_path70.default.join(config.dataDir, "personas"));
   const larkBotCloud = createLarkBotCloudClient({
     api: config.clawosApi ?? DEFAULT_CLAWOS_API,
     apiKey: resolveClawdTicketsApiKey(),
@@ -65668,7 +66683,7 @@ async function startDaemon(config) {
     store: larkBotStore,
     fetchResource: (appId, messageId, fileKey, maxBytes, type) => larkBotCloud.fetchResource(appId, messageId, fileKey, maxBytes, type),
     // 图片落 guest userWorkDir 下（capId = lark-<chat_id>）：CC 经 --add-dir + allowRead carve 可 Read
-    mediaRootFor: (chatId) => import_node_path68.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
+    mediaRootFor: (chatId) => import_node_path70.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
     isShuttingDown: () => larkDraining,
     logger: {
       warn: (msg) => logger.warn(msg),
@@ -65973,8 +66988,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path68.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path68.default.join(logDir, "frpc.log")}`
+        `Frpc config: ${import_node_path70.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path70.default.join(logDir, "frpc.log")}`
       ];
       const width2 = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width2 + 4);
@@ -65987,7 +67002,7 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path68.default.join(config.dataDir, "connect.txt");
+        const connectPath = import_node_path70.default.join(config.dataDir, "connect.txt");
         import_node_fs52.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
@@ -66051,6 +67066,17 @@ ${bar}
       await tunnelMgr.stop();
     }
     await wss.stop();
+    for (const [name, store2] of [
+      ["channels", channelStore],
+      ["topics", topicStore]
+    ]) {
+      await store2.flushNow().catch((err) => {
+        logger.warn("shutdown.store-flush-failed", {
+          store: name,
+          error: err instanceof Error ? err.message : String(err)
+        });
+      });
+    }
     stateMgr.delete();
     if (logClient) await logClient.dispose();
   };
@@ -66063,7 +67089,7 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path68.default.join(dataDir, "persons");
+  const dir = import_node_path70.default.join(dataDir, "persons");
   try {
     import_node_fs52.default.rmSync(dir, { recursive: true, force: true });
   } catch {