@clawos-dev/clawd 0.2.439 → 0.2.441

package/dist/cli.cjs

@@ -450,8 +450,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path89, errorMaps, issueData } = params;
-      const fullPath = [...path89, ...issueData.path || []];
+      const { data, path: path91, errorMaps, issueData } = params;
+      const fullPath = [...path91, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -762,11 +762,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path89, key) {
+      constructor(parent, value, path91, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path89;
+        this._path = path91;
         this._key = key;
       }
       get path() {
@@ -7089,10 +7089,9 @@ var init_persona_schemas = __esm({
       writableRoots: external_exports.array(external_exports.string()).optional(),
       // 禁读 glob（相对 workspace root 或绝对），如 ".secrets/**"、"**/*.env"。
       denyRead: external_exports.array(external_exports.string()).optional(),
-      // true → 网络全放(*)；false → 断网。**缺省等于联网**：daemon 写入的默认值是 network:true
-      // （对齐 claude guest 一贯的域名全放，见 spec 2026-09-01-codex-guest-network §1.3），
-      // 且 manager / UI 读到 undefined 时都回落 true —— 两侧必须同向，否则出现
-      // 「卡片显示开、实际断网」的幽灵态。
+      // true → 网络全放(*)；false / 缺省 → 断网（fail-closed）。**「新建默认联网」不靠这里的缺省**，
+      // 靠 persona 创建时就把 CODEX_SANDBOX_DEFAULT 物化进文件（见 PersonaManager.create）——
+      // 缺省只在文件损坏这种异常路径上出现，那时断网是更安全的一侧。
       network: external_exports.boolean().optional()
     }).strict();
     PersonaSandboxSettingsSchema = external_exports.object({
@@ -7285,7 +7284,7 @@ var init_principal = __esm({
 });
 
 // ../protocol/src/schemas.ts
-var SessionStatusSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, SelectOptionSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, ToolFeaturesSchema, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, TURN_END_REASONS, ParsedEventSchema, SessionCreateArgs, ProjectEntry, ProjectPatchArgs, ProjectRevealArgs, ProjectCreateArgs, SessionImportExternalArgs, SessionListArgs, SessionIdArgs, SessionUpdateArgs, QueuedMessage, SessionSendArgs, SessionDequeueArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionCurrentTurnSenderArgs, SessionSubscribeArgs, SessionPinArgs, SessionArchiveArgs, PeerSessionUpsertArgs, PeerSessionUpsertResponseSchema, PeerSessionRemoveArgs, PeerSessionRemoveResponseSchema, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, ClientInfoSchema, AuthRequestFrameSchema, AuthOkFrameSchema, DeviceConnectionEntrySchema, DeviceConnectionsResponseSchema, TunnelReadyEventSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema, PROJECT_PORT_MIN, PROJECT_PORT_MAX, projectNameRegex, DEFAULT_DEV_COMMAND, ProjectMetadataSchema, PROJECT_STAGE_VALUES, ProjectStageSchema, ProjectWithStatusSchema, ListProjectsArgsSchema, ListProjectsResultSchema, GetProjectArgsSchema, GetProjectResultSchema, CreateProjectArgsSchema, CreateProjectResultSchema, DeleteProjectArgsSchema, DeleteProjectResultSchema, UpdateProjectPortArgsSchema, UpdateProjectPortResultSchema, SetProdUrlArgsSchema, SetProdUrlResultSchema, StartDevServerArgsSchema, StartDevServerResultSchema, ASSISTANT_REPORTABLE_STAGES, ReportStageArgsSchema, ReportStageResultSchema, StopDevServerArgsSchema, StopDevServerResultSchema, AppBuilderProjectUpdatedEventSchema, PublishArgsSchema, PublishResultSchema, DismissPublishJobArgsSchema, DismissPublishJobResultSchema, AppBuilderPublishProgressEventSchema, AppBuilderPublishFailedEventSchema;
+var SessionStatusSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, SelectOptionSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, ToolFeaturesSchema, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, TURN_END_REASONS, ParsedEventSchema, SessionCreateArgs, ProjectEntry, ProjectPatchArgs, ProjectRevealArgs, ProjectCreateArgs, SessionImportExternalArgs, SessionListArgs, SessionIdArgs, SessionUpdateArgs, QueuedMessage, SessionSendArgs, SessionDequeueArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionCurrentTurnSenderArgs, SessionSubscribeArgs, SessionPinArgs, SessionArchiveArgs, SessionSearchContentArgs, SessionSearchMatchSchema, SessionSearchContentResponseSchema, PeerSessionUpsertArgs, PeerSessionUpsertResponseSchema, PeerSessionRemoveArgs, PeerSessionRemoveResponseSchema, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, ClientInfoSchema, AuthRequestFrameSchema, AuthOkFrameSchema, DeviceConnectionEntrySchema, DeviceConnectionsResponseSchema, TunnelReadyEventSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema, PROJECT_PORT_MIN, PROJECT_PORT_MAX, projectNameRegex, DEFAULT_DEV_COMMAND, ProjectMetadataSchema, PROJECT_STAGE_VALUES, ProjectStageSchema, ProjectWithStatusSchema, ListProjectsArgsSchema, ListProjectsResultSchema, GetProjectArgsSchema, GetProjectResultSchema, CreateProjectArgsSchema, CreateProjectResultSchema, DeleteProjectArgsSchema, DeleteProjectResultSchema, UpdateProjectPortArgsSchema, UpdateProjectPortResultSchema, SetProdUrlArgsSchema, SetProdUrlResultSchema, StartDevServerArgsSchema, StartDevServerResultSchema, ASSISTANT_REPORTABLE_STAGES, ReportStageArgsSchema, ReportStageResultSchema, StopDevServerArgsSchema, StopDevServerResultSchema, AppBuilderProjectUpdatedEventSchema, PublishArgsSchema, PublishResultSchema, DismissPublishJobArgsSchema, DismissPublishJobResultSchema, AppBuilderPublishProgressEventSchema, AppBuilderPublishFailedEventSchema;
 var init_schemas = __esm({
   "../protocol/src/schemas.ts"() {
     "use strict";
@@ -8029,6 +8028,22 @@ var init_schemas = __esm({
       sessionId: external_exports.string().min(1),
       archived: external_exports.boolean()
     });
+    SessionSearchContentArgs = external_exports.object({
+      query: external_exports.string().min(1),
+      // 扫描顺序 = 数组顺序（调用方按 updatedAt 倒序传），攒够 limit 即停
+      sessionIds: external_exports.array(external_exports.string().min(1)),
+      limit: external_exports.number().int().positive().max(50).optional()
+    });
+    SessionSearchMatchSchema = external_exports.object({
+      sessionId: external_exports.string().min(1),
+      // 命中处上下文片段，已单行化。**不回高亮 offset**：调用方手里有 query，
+      // 自己在 snippet 里 indexOf 就能高亮，wire 上少一组坐标少一处漂
+      snippet: external_exports.string()
+    });
+    SessionSearchContentResponseSchema = external_exports.object({
+      type: external_exports.literal("session:searchContent"),
+      matches: external_exports.array(SessionSearchMatchSchema)
+    });
     PeerSessionUpsertArgs = SessionFileSchema;
     PeerSessionUpsertResponseSchema = external_exports.object({
       type: external_exports.literal("peerSession:upsert:ok")
@@ -8515,6 +8530,10 @@ var init_methods = __esm({
         summary: "\u5F52\u6863 / \u53D6\u6D88\u5F52\u6863\u4F1A\u8BDD\uFF08\u5F52\u6863 = \u5168\u5C40\u6536\u7EB3\u6001\uFF1A\u9000\u51FA sidebar\u3001\u539F\u5B50\u6E05 pinnedAt\uFF09",
         args: SessionArchiveArgs
       },
+      "session:searchContent": {
+        summary: '\u5728 sessionIds \u7ED9\u5B9A\u7684\u8FD9\u6279\u4F1A\u8BDD\u91CC\u641C\u6B63\u6587\u5185\u5BB9\uFF08user / assistant \u7684\u6587\u672C\u6D88\u606F\uFF1B\u5DE5\u5177\u5165\u53C2\u51FA\u53C2\u4E0E\u7CFB\u7EDF\u6CE8\u5165\u4E0D\u7B97\uFF09\uFF0C\u547D\u4E2D\u8FD4\u56DE\u4E0A\u4E0B\u6587\u7247\u6BB5\u3002**\u626B\u63CF\u987A\u5E8F = sessionIds \u6570\u7EC4\u987A\u5E8F\uFF0C\u6512\u591F limit \u5C31\u505C**\uFF08\u8C03\u7528\u65B9\u6309 updatedAt \u5012\u5E8F\u4F20 \u2192 \u65E9\u505C\u7ED3\u679C\u5373"\u6700\u8FD1 N \u6761"\uFF09\uFF1Blimit \u7F3A\u7701 9\u3002\u5019\u9009\u7531\u8C03\u7528\u65B9\u7ED9\u5B9A\uFF0Cdaemon \u4E0D\u81EA\u5DF1\u6309 archivedAt \u7B5B\uFF08\u8BDD\u9898\u5F52\u6863\u53EA\u6253\u5728 Master \u4F1A\u8BDD\u4E0A\uFF0Cworker \u4F1A\u8BDD\u6CA1\u6807\u8BB0\uFF09\uFF1B\u65E0\u6743\u8BFB / \u5B9A\u4F4D\u4E0D\u5230 transcript / transcript \u5DF2\u88AB CC \u6E05\u7406\u7684\u4F1A\u8BDD\u9759\u9ED8\u8DF3\u8FC7\uFF0C\u4E0D\u62A5\u9519',
+        args: SessionSearchContentArgs
+      },
       "session:markRead": {
         summary: "\u6E05\u6389\u4F1A\u8BDD\u7684\u5171\u4EAB\u672A\u8BFB\u6807\u8BB0\u5E76\u5E7F\u64AD session:info\uFF1B\u5E42\u7B49",
         args: SessionIdArgs
@@ -9574,8 +9593,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path89 = req.path;
-        _req.url = typeof path89 === "string" ? path89 : req.url ? req.url.path || req.url : void 0;
+        const path91 = req.path;
+        _req.url = typeof path91 === "string" ? path91 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -9740,14 +9759,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path89) {
+    function parsePath(path91) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path89.length; i++) {
-        const char = path89[i];
+      for (let i = 0; i < path91.length; i++) {
+        const char = path91[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -9878,10 +9897,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path89 of paths) {
-        const parts = parsePath(path89);
+      for (const path91 of paths) {
+        const parts = parsePath(path91);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path89, remove);
+          redactWildcardPath(obj, parts, censor, path91, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -9966,8 +9985,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path89) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path89];
+            const wrappedCensor = typeof censor === "function" ? (value, path91) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path91];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -10002,8 +10021,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path89 of pathsToClone) {
-        const parts = parsePath(path89);
+      for (const path91 of pathsToClone) {
+        const parts = parsePath(path91);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -10055,24 +10074,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path89) {
-      if (typeof path89 !== "string") {
+    function validatePath(path91) {
+      if (typeof path91 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path89 === "") {
+      if (path91 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path89.includes("..")) {
-        throw new Error(`Invalid redaction path (${path89})`);
+      if (path91.includes("..")) {
+        throw new Error(`Invalid redaction path (${path91})`);
       }
-      if (path89.includes(",")) {
-        throw new Error(`Invalid redaction path (${path89})`);
+      if (path91.includes(",")) {
+        throw new Error(`Invalid redaction path (${path91})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path89.length; i++) {
-        const char = path89[i];
+      for (let i = 0; i < path91.length; i++) {
+        const char = path91[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -10086,20 +10105,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path89})`);
+            throw new Error(`Invalid redaction path (${path91})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path89})`);
+        throw new Error(`Invalid redaction path (${path91})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path89 of paths) {
-        validatePath(path89);
+      for (const path91 of paths) {
+        validatePath(path91);
       }
     }
     function slowRedact(options = {}) {
@@ -10267,8 +10286,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path89) => {
-            return censor(value, [k2, ...path89]);
+          const wrappedCensor = typeof censor === "function" ? (value, path91) => {
+            return censor(value, [k2, ...path91]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -10486,10 +10505,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs79 = require("fs");
+    var fs80 = require("fs");
     var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
-    var path89 = require("path");
+    var path91 = require("path");
     var sleep2 = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -10543,20 +10562,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs79.mkdirSync(path89.dirname(file), { recursive: true });
-          const fd = fs79.openSync(file, flags, mode);
+          if (sonic.mkdir) fs80.mkdirSync(path91.dirname(file), { recursive: true });
+          const fd = fs80.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs79.mkdir(path89.dirname(file), { recursive: true }, (err) => {
+        fs80.mkdir(path91.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs79.open(file, flags, mode, fileOpened);
+          fs80.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs79.open(file, flags, mode, fileOpened);
+        fs80.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -10597,8 +10616,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs79.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs79.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs80.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs80.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -10607,15 +10626,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs79.writeSync(this.fd, this._writingBuf);
+            return fs80.writeSync(this.fd, this._writingBuf);
           }
-          return fs79.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs80.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs79.write(this.fd, this._writingBuf, this.release);
+            return fs80.write(this.fd, this._writingBuf, this.release);
           }
-          return fs79.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs80.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -10672,7 +10691,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs79.fsyncSync(this.fd);
+          fs80.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -10786,7 +10805,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs79.fsync(this.fd, (err) => {
+            fs80.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -10888,7 +10907,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs79.close(fd, (err) => {
+          fs80.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -10937,7 +10956,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs79.writeSync(this.fd, buf) : fs79.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs80.writeSync(this.fd, buf) : fs80.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -10953,7 +10972,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs79.fsyncSync(this.fd);
+        fs80.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -10974,7 +10993,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs79.writeSync(this.fd, buf);
+          const n = fs80.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -11002,13 +11021,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs79.writeSync(this.fd, this._writingBuf) : fs79.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs80.writeSync(this.fd, this._writingBuf) : fs80.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs79.write(this.fd, this._writingBuf, release);
+        fs80.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -11017,7 +11036,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs79.writeSync(this.fd, this._writingBuf);
+          const written = fs80.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -11026,7 +11045,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs79.write(this.fd, this._writingBuf, release);
+        fs80.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -11042,12 +11061,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs79.fsync(sonic.fd, closeWrapped);
+        fs80.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs79.close(sonic.fd, done);
+          fs80.close(sonic.fd, done);
         } else {
           done();
         }
@@ -13411,7 +13430,7 @@ var require_multistream = __commonJS({
 var require_pino = __commonJS({
   "../node_modules/.pnpm/pino@9.14.0/node_modules/pino/pino.js"(exports2, module2) {
     "use strict";
-    var os30 = require("os");
+    var os31 = require("os");
     var stdSerializers = require_pino_std_serializers();
     var caller = require_caller();
     var redaction = require_redaction();
@@ -13458,7 +13477,7 @@ var require_pino = __commonJS({
     } = symbols;
     var { epochTime, nullTime } = time;
     var { pid } = process;
-    var hostname = os30.hostname();
+    var hostname = os31.hostname();
     var defaultErrorSerializer = stdSerializers.err;
     var defaultOptions2 = {
       level: "info",
@@ -14182,11 +14201,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path89, added, removed, oldPosInc, options) {
-        var last = path89.lastComponent;
+      addToPath: function addToPath(path91, added, removed, oldPosInc, options) {
+        var last = path91.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path89.oldPos + oldPosInc,
+            oldPos: path91.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -14196,7 +14215,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path89.oldPos + oldPosInc,
+            oldPos: path91.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -14778,10 +14797,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec4 = m2;
-      const path89 = typeof rec4.path === "string" ? rec4.path : null;
+      const path91 = typeof rec4.path === "string" ? rec4.path : null;
       const content = typeof rec4.content === "string" ? rec4.content : null;
-      if (!path89 || content == null) return null;
-      const entry = { path: path89, content };
+      if (!path91 || content == null) return null;
+      const entry = { path: path91, content };
       if (typeof rec4.mtimeMs === "number") entry.mtimeMs = rec4.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -15647,10 +15666,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec4 = m2;
-      const path89 = typeof rec4.path === "string" ? rec4.path : null;
+      const path91 = typeof rec4.path === "string" ? rec4.path : null;
       const content = typeof rec4.content === "string" ? rec4.content : null;
-      if (!path89 || content == null) return null;
-      const out = { path: path89, content };
+      if (!path91 || content == null) return null;
+      const out = { path: path91, content };
       if (typeof rec4.mtimeMs === "number") out.mtimeMs = rec4.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -36624,8 +36643,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path89) {
-      var parts = path89.split("/");
+    exports2.resolve = function(path91) {
+      var parts = path91.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -42478,18 +42497,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path89) {
-      if (path89.slice(-1) === "/") {
-        path89 = path89.substring(0, path89.length - 1);
+    var parentFolder = function(path91) {
+      if (path91.slice(-1) === "/") {
+        path91 = path91.substring(0, path91.length - 1);
       }
-      var lastSlash = path89.lastIndexOf("/");
-      return lastSlash > 0 ? path89.substring(0, lastSlash) : "";
+      var lastSlash = path91.lastIndexOf("/");
+      return lastSlash > 0 ? path91.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path89) {
-      if (path89.slice(-1) !== "/") {
-        path89 += "/";
+    var forceTrailingSlash = function(path91) {
+      if (path91.slice(-1) !== "/") {
+        path91 += "/";
       }
-      return path89;
+      return path91;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -43491,7 +43510,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path71.default.dirname(opts.recordPath);
+  const dir = import_node_path73.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -43505,8 +43524,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs53.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs53.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs54.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs54.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -43531,12 +43550,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs53, import_node_path71;
+var import_node_fs54, import_node_path73;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs53 = __toESM(require("fs"), 1);
-    import_node_path71 = __toESM(require("path"), 1);
+    import_node_fs54 = __toESM(require("fs"), 1);
+    import_node_path73 = __toESM(require("path"), 1);
   }
 });
 
@@ -43579,7 +43598,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs54.mkdtempSync)(import_node_path72.default.join(import_node_os26.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs55.mkdtempSync)(import_node_path74.default.join(import_node_os27.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -43740,19 +43759,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs54.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs55.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs54, import_node_os26, import_node_path72;
+var import_node_fs55, import_node_os27, import_node_path74;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs54 = require("fs");
-    import_node_os26 = __toESM(require("os"), 1);
-    import_node_path72 = __toESM(require("path"), 1);
+    import_node_fs55 = require("fs");
+    import_node_os27 = __toESM(require("os"), 1);
+    import_node_path74 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -44027,9 +44046,9 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path70 = __toESM(require("path"), 1);
-var import_node_fs52 = __toESM(require("fs"), 1);
-var import_node_os25 = __toESM(require("os"), 1);
+var import_node_path72 = __toESM(require("path"), 1);
+var import_node_fs53 = __toESM(require("fs"), 1);
+var import_node_os26 = __toESM(require("os"), 1);
 var import_node_crypto22 = require("crypto");
 var import_node_url4 = require("url");
 
@@ -47069,7 +47088,7 @@ var SessionManager = class {
       subSessionMeta.codexSandbox = {
         writableRoots: [subSessionMeta.userWorkDir, ...(codexCfg?.writableRoots ?? []).map(expand)],
         denyRead: codexCfg?.denyRead ?? [],
-        network: codexCfg?.network ?? true
+        network: codexCfg?.network ?? false
       };
     }
     if (subSessionMeta?.personaMode === "owner" && file.projectPath) {
@@ -49446,408 +49465,20 @@ var PersonaRegistry = class {
   }
 };
 
-// src/skills/scanner.ts
-var import_node_fs9 = __toESM(require("fs"), 1);
-var import_node_os6 = __toESM(require("os"), 1);
-var import_node_path9 = __toESM(require("path"), 1);
-
-// src/skills/frontmatter.ts
-var STRIP_QUOTES = /^["']|["']$/g;
-function strip(s) {
-  return s.trim().replace(STRIP_QUOTES, "");
-}
-function parseFrontmatter(content, keys) {
-  const out = {};
-  if (!content.startsWith("---")) return out;
-  const end = content.indexOf("---", 3);
-  if (end === -1) return out;
-  const lines = content.slice(3, end).split("\n");
-  for (let i = 0; i < lines.length; i++) {
-    const trimmed = lines[i].trim();
-    for (const key of keys) {
-      const prefix = `${key}:`;
-      if (!trimmed.startsWith(prefix)) continue;
-      const rest = trimmed.slice(prefix.length).trim();
-      if (rest === "|" || rest === ">" || rest === "|-" || rest === ">-") {
-        const parts = [];
-        for (let j = i + 1; j < lines.length; j++) {
-          const next = lines[j];
-          if (next.length === 0) {
-            parts.push("");
-            continue;
-          }
-          if (!/^\s/.test(next)) break;
-          parts.push(next.replace(/^\s+/, ""));
-        }
-        const value = parts.filter(Boolean).join(" ").trim();
-        if (value) out[key] = value;
-      } else {
-        const value = strip(rest);
-        if (value) out[key] = value;
-      }
-      break;
-    }
-  }
-  return out;
-}
-
-// src/skills/builtin-cc-resources.ts
-var BUILTIN_SKILLS = [
-  { name: "update-config", source: "builtin", description: "Update Claude Code configuration." },
-  { name: "keybindings-help", source: "builtin", description: "Show available keybindings." },
-  { name: "verify", source: "builtin", description: "Verify the implementation." },
-  { name: "debug", source: "builtin", description: "Debug current issue." },
-  { name: "lorem-ipsum", source: "builtin", description: "Generate lorem ipsum placeholder text." },
-  { name: "skillify", source: "builtin", description: "Convert a process into a reusable skill." },
-  { name: "remember", source: "builtin", description: "Remember context for later use." },
-  { name: "simplify", source: "builtin", description: "Simplify the code or message." },
-  { name: "batch", source: "builtin", description: "Run a batch of similar operations." },
-  { name: "stuck", source: "builtin", description: "Help unstick a stalled task." },
-  { name: "loop", source: "builtin", description: "Loop a task until a condition is met." },
-  { name: "cron-list", source: "builtin", description: "List scheduled cron tasks." },
-  { name: "cron-delete", source: "builtin", description: "Delete a scheduled cron task." },
-  { name: "dream", source: "builtin", description: "Brainstorm freely without constraints." },
-  { name: "hunter", source: "builtin", description: "Hunt down a bug or root cause." },
-  { name: "schedule", source: "builtin", description: "Schedule a task to run later." },
-  { name: "claude-api", source: "builtin", description: "Use the Claude API directly." },
-  { name: "claude-in-chrome", source: "builtin", description: "Drive Claude inside Chrome via the Chrome extension." }
-];
-var BUILTIN_AGENTS = [
-  {
-    name: "general-purpose",
-    source: "builtin",
-    description: "General-purpose agent for researching complex questions and executing multi-step tasks.",
-    whenToUse: "When you are searching for a keyword or file and are not confident you will find the right match in the first few tries."
-  },
-  {
-    name: "statusline-setup",
-    source: "builtin",
-    description: "Configure the user's Claude Code status line setting.",
-    whenToUse: "When the user is setting up or changing their status line configuration."
-  },
-  {
-    name: "Explore",
-    source: "builtin",
-    description: "Explore the codebase to gather context.",
-    whenToUse: "Before making changes that require understanding the surrounding code."
-  },
-  {
-    name: "Plan",
-    source: "builtin",
-    description: "Produce an implementation plan before writing code.",
-    whenToUse: "When the task is non-trivial and would benefit from an explicit plan."
-  },
-  {
-    name: "claude-code-guide",
-    source: "builtin",
-    description: "Guide the user through Claude Code features.",
-    whenToUse: "When the user needs help understanding what Claude Code can do."
-  },
-  {
-    name: "verification",
-    source: "builtin",
-    description: "Verify that a change works as intended.",
-    whenToUse: "After implementing a change, before declaring it done."
-  }
-];
-
-// src/skills/scanner.ts
-function parseDescription(content) {
-  const fields = parseFrontmatter(content, ["description"]);
-  return { description: fields.description ?? "" };
-}
-function isDirLikeSync(p2) {
-  try {
-    return import_node_fs9.default.statSync(p2).isDirectory();
-  } catch {
-    return false;
-  }
-}
-function scanSkillDir(dir, source, seen, out, pluginName) {
-  let entries;
-  try {
-    entries = import_node_fs9.default.readdirSync(dir, { withFileTypes: true });
-  } catch {
-    return;
-  }
-  for (const ent of entries) {
-    const entryPath = import_node_path9.default.join(dir, ent.name);
-    if (!ent.isDirectory() && !(ent.isSymbolicLink() && isDirLikeSync(entryPath))) continue;
-    let content;
-    try {
-      content = import_node_fs9.default.readFileSync(import_node_path9.default.join(entryPath, "SKILL.md"), "utf8");
-    } catch {
-      try {
-        content = import_node_fs9.default.readFileSync(import_node_path9.default.join(entryPath, "skill.md"), "utf8");
-      } catch {
-        continue;
-      }
-    }
-    const { description } = parseDescription(content);
-    const baseName = ent.name;
-    const name = pluginName ? `${pluginName}:${baseName}` : baseName;
-    if (seen.has(name)) continue;
-    seen.add(name);
-    const info = { name, source, path: entryPath, description: description || void 0 };
-    if (pluginName) info.plugin = pluginName;
-    out.push(info);
-  }
-}
-function listSkillsForDir(dir, source) {
-  const seen = /* @__PURE__ */ new Set();
-  const out = [];
-  scanSkillDir(dir, source, seen, out);
-  return out;
-}
-function scanCommandDir(dir, source, seen, out, pluginName) {
-  let entries;
-  try {
-    entries = import_node_fs9.default.readdirSync(dir, { withFileTypes: true });
-  } catch {
-    return;
-  }
-  for (const ent of entries) {
-    const entryPath = import_node_path9.default.join(dir, ent.name);
-    if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync(entryPath)) {
-      const ns = ent.name;
-      let subEntries;
-      try {
-        subEntries = import_node_fs9.default.readdirSync(entryPath, { withFileTypes: true });
-      } catch {
-        continue;
-      }
-      for (const se of subEntries) {
-        if (!se.name.endsWith(".md")) continue;
-        const sePath = import_node_path9.default.join(entryPath, se.name);
-        let content;
-        try {
-          content = import_node_fs9.default.readFileSync(sePath, "utf8");
-        } catch {
-          continue;
-        }
-        const cmd = se.name.replace(/\.md$/, "");
-        const { description } = parseDescription(content);
-        const qualified = `${ns}:${cmd}`;
-        const name = pluginName ? `${pluginName}:${qualified}` : qualified;
-        if (seen.has(name)) continue;
-        seen.add(name);
-        const info = { name, source, path: sePath, description: description || void 0 };
-        if (pluginName) info.plugin = pluginName;
-        out.push(info);
-      }
-    } else if (ent.name.endsWith(".md")) {
-      let content;
-      try {
-        content = import_node_fs9.default.readFileSync(entryPath, "utf8");
-      } catch {
-        continue;
-      }
-      const cmd = ent.name.replace(/\.md$/, "");
-      const { description } = parseDescription(content);
-      const name = pluginName ? `${pluginName}:${cmd}` : cmd;
-      if (seen.has(name)) continue;
-      seen.add(name);
-      const info = { name, source, path: entryPath, description: description || void 0 };
-      if (pluginName) info.plugin = pluginName;
-      out.push(info);
-    }
-  }
-}
-function readInstalledPlugins(home) {
-  const file = import_node_path9.default.join(home, ".claude", "plugins", "installed_plugins.json");
-  let raw;
-  try {
-    raw = import_node_fs9.default.readFileSync(file, "utf8");
-  } catch {
-    return [];
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    return [];
-  }
-  const out = [];
-  for (const [key, entries] of Object.entries(parsed.plugins ?? {})) {
-    if (!Array.isArray(entries) || entries.length === 0) continue;
-    const entry = entries[0];
-    if (!entry?.installPath) continue;
-    const pluginName = key.includes("@") ? key.slice(0, key.indexOf("@")) : key;
-    if (!pluginName) continue;
-    out.push({ name: pluginName, root: entry.installPath });
-  }
-  return out;
-}
-var SkillsScanner = class {
-  home;
-  extraPluginRoots;
-  constructor(opts = {}) {
-    this.home = opts.home ?? import_node_os6.default.homedir();
-    this.extraPluginRoots = opts.extraPluginRoots ?? [];
-  }
-  /**
-   * 对齐 cc-direct（openclaw-plugin-clawos/src/claude-code/skills-scanner.ts）：
-   * 1. global: ~/.claude/skills + ~/.claude/commands
-   * 2. project: <cwd>/.claude/skills + <cwd>/.claude/commands
-   * 3. plugin: installed_plugins.json 里每个 plugin 的 skills + commands
-   * 顺序 global → project → plugin，同名去重（先到先得）
-   */
-  list(args) {
-    const seen = /* @__PURE__ */ new Set();
-    const builtinBlock = [];
-    for (const b2 of BUILTIN_SKILLS) {
-      if (seen.has(b2.name)) continue;
-      seen.add(b2.name);
-      builtinBlock.push({
-        name: b2.name,
-        source: "builtin",
-        description: b2.description
-      });
-    }
-    const fsBlock = [];
-    scanSkillDir(import_node_path9.default.join(this.home, ".claude", "skills"), "global", seen, fsBlock);
-    scanCommandDir(import_node_path9.default.join(this.home, ".claude", "commands"), "global", seen, fsBlock);
-    scanSkillDir(import_node_path9.default.join(args.cwd, ".claude", "skills"), "project", seen, fsBlock);
-    scanCommandDir(import_node_path9.default.join(args.cwd, ".claude", "commands"), "project", seen, fsBlock);
-    const plugins = [...readInstalledPlugins(this.home), ...this.extraPluginRoots];
-    for (const { name, root } of plugins) {
-      scanSkillDir(import_node_path9.default.join(root, "skills"), "plugin", seen, fsBlock, name);
-      scanCommandDir(import_node_path9.default.join(root, "commands"), "plugin", seen, fsBlock, name);
-    }
-    fsBlock.sort((a, b2) => a.name < b2.name ? -1 : a.name > b2.name ? 1 : 0);
-    return [...builtinBlock, ...fsBlock];
-  }
-};
-
-// src/persona/manager.ts
-var PersonaManager = class {
-  constructor(deps) {
-    this.deps = deps;
-  }
-  deps;
-  /**
-   * slug 是 persona 的身份，label 只是显示名——两者刻意分开：id 落进文件路径 /
-   * 分享链接且创建后不可改，label 可中文、可随时改。此前 id 从 label 推导，
-   * 非 ascii 被剥空后一律 fallback 成 `persona-persona`。
-   *
-   * 撞名直接抛错而非改名：id 由调用方显式指定，静默换成带后缀的 id 等于把
-   * 用户的选择偷偷改掉。字符集校验在 PersonaCreateArgsSchema（路径穿越边界）。
-   */
-  create(args) {
-    const personaId2 = `persona-${args.slug}`;
-    if (this.deps.store.has(personaId2)) {
-      throw new Error(`personaId already exists: ${personaId2}`);
-    }
-    const now = Date.now();
-    const persona = {
-      personaId: personaId2,
-      label: args.label,
-      model: args.model,
-      // effort 兜底 high：persona 一律持有具体档位（spec 2026-08-12），UI 会带界面上高亮的
-      // 那一档，但 persona:create 也可能来自 butler 的 persona-authoring skill 这类不带该
-      // 字段的调用方——不兜的话要等下次 daemon 启动 backfill 才补上，中间建的 session 就漏了。
-      // 取值理由与 backfillPersonaSessionDefaults 一致（见那里的注释）。
-      effort: args.effort ?? "high",
-      tool: args.tool,
-      public: args.public ?? false,
-      iconKey: args.iconKey,
-      createdAt: now,
-      updatedAt: now
-    };
-    this.deps.store.write(persona, args.personality);
-    this.deps.registry.set(persona);
-    return persona;
-  }
-  update(personaId2, patch, texts) {
-    const existing = this.deps.registry.get(personaId2);
-    if (!existing) throw new Error(`persona not found: ${personaId2}`);
-    const { iconKey: iconKeyPatch, ...restPatch } = patch;
-    const updated = {
-      ...existing,
-      ...restPatch,
-      updatedAt: Date.now()
-    };
-    const toolChanged = patch.tool !== void 0 && (patch.tool ?? "claude") !== (existing.tool ?? "claude");
-    if (toolChanged) {
-      if (patch.model === void 0) delete updated.model;
-      if (patch.effort === void 0) delete updated.effort;
-    }
-    if (iconKeyPatch === null) {
-      delete updated.iconKey;
-    } else if (iconKeyPatch !== void 0) {
-      updated.iconKey = iconKeyPatch;
-    }
-    if (texts?.personality !== void 0) {
-      this.deps.store.writePersonality(personaId2, texts.personality);
-    }
-    if (texts?.personalityLocal !== void 0) {
-      this.deps.store.writePersonalityLocal(personaId2, texts.personalityLocal);
-    }
-    this.deps.store.writeMeta(updated);
-    this.deps.registry.set(updated);
-    return updated;
-  }
-  /** 读取 CLAUDE.md 内容；persona 目录或文件不存在时返回 null。透传给 handler 拼响应。 */
-  readPersonality(personaId2) {
-    return this.deps.store.readPersonality(personaId2);
-  }
-  /** 读人格补充层（`.clawd/personality.local.md`）；没写过返回 null。供 persona:get 拼响应。 */
-  readPersonalityLocal(personaId2) {
-    return this.deps.store.readPersonalityLocal(personaId2);
-  }
-  /** 扫 persona 私有 skills 目录；目录不存在返回空数组。供 persona:get handler 拼响应。 */
-  listSkills(personaId2) {
-    return listSkillsForDir(this.deps.store.skillsDir(personaId2), "project");
-  }
-  /**
-   * 读取 persona `.claude/settings.json` 中已启用的插件列表（value === true 的 key）。
-   * 文件不存在 / 解析失败 / 字段缺失 → 空数组。供 persona:get handler 拼响应。
-   */
-  listEnabledPlugins(personaId2) {
-    return this.deps.store.readEnabledPlugins(personaId2);
-  }
-  /** 读 sandbox-settings.json；不存在 / 损坏返回 null。供 persona:get handler 拼响应。 */
-  /** 读 codex guest 沙箱配置（`.clawd/codex-sandbox.json`）；缺失 / 坏 → null。透传给 handler 拼响应。 */
-  readCodexSandboxSettings(personaId2) {
-    return this.deps.store.readCodexSandboxSettings(personaId2);
-  }
-  /**
-   * 局部合并写 codex guest 沙箱配置，返回合并后的全量。
-   *
-   * **必须是合并不是覆盖**：UI 的「访客联网」开关只发 `{network}`，整体覆盖会静默抹掉 owner
-   * 手配的 writableRoots / denyRead（丢的是安全边界，且用户不会立刻发现）。
-   * 不走 PersonaManager.update 是因为它管的是 PersonaFile meta + 人格两层文本，
-   * 而这份配置是另一个文件、另一套 schema。
-   */
-  mergeCodexSandbox(personaId2, patch) {
-    if (!this.deps.registry.get(personaId2)) throw new Error(`persona not found: ${personaId2}`);
-    const merged = { ...this.deps.store.readCodexSandboxSettings(personaId2) ?? {}, ...patch };
-    this.deps.store.writeCodexSandboxSettings(personaId2, merged);
-    return merged;
-  }
-  readSandboxSettings(personaId2) {
-    return this.deps.store.readSandboxSettings(personaId2);
-  }
-  /**
-   * 删除 persona。
-   * PersonaStore.remove(personaId) 级联删整个 <personaRoot>/<personaId>/ 目录
-   * （含 .clawd/sessions/owner/ 和 .clawd/sessions/guests/<capId>/），rmSync
-   * recursive force 一锅清。
-   */
-  delete(personaId2) {
-    this.deps.store.remove(personaId2);
-    this.deps.registry.remove(personaId2);
-  }
-};
-
 // src/persona/seed.ts
-var fs13 = __toESM(require("fs"), 1);
-var path16 = __toESM(require("path"), 1);
+var fs12 = __toESM(require("fs"), 1);
+var path15 = __toESM(require("path"), 1);
 var import_node_url = require("url");
 var import_meta = {};
 var DEFAULT_BYPASS_PROFILE = {
   permissions: { defaultMode: "bypassPermissions" }
 };
+var PKG_CACHE_ROOTS = ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"];
+var CODEX_SANDBOX_DEFAULT = {
+  writableRoots: [...PKG_CACHE_ROOTS],
+  denyRead: [".secrets/**"],
+  network: true
+};
 var DEFAULT_PERSONAS = [
   {
     personaId: "persona-researcher",
@@ -49932,7 +49563,7 @@ var DEFAULT_PERSONAS = [
       }
     },
     codexSandbox: {
-      writableRoots: ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"],
+      writableRoots: [...PKG_CACHE_ROOTS],
       denyRead: [".secrets/**"],
       network: true
     }
@@ -49966,7 +49597,7 @@ var DEFAULT_PERSONAS = [
       }
     },
     codexSandbox: {
-      writableRoots: ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"],
+      writableRoots: [...PKG_CACHE_ROOTS],
       denyRead: [".secrets/**"],
       network: true
     }
@@ -50008,7 +49639,7 @@ var DEFAULT_PERSONAS = [
       }
     },
     codexSandbox: {
-      writableRoots: ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"],
+      writableRoots: [...PKG_CACHE_ROOTS],
       denyRead: [".secrets/**"],
       network: true
     }
@@ -50033,24 +49664,24 @@ function bundleSiblingFromArgv(argv1, sibling) {
   if (!argv1) return null;
   let real = argv1;
   try {
-    real = fs13.realpathSync(argv1);
+    real = fs12.realpathSync(argv1);
   } catch {
   }
-  return path16.resolve(path16.dirname(real), sibling);
+  return path15.resolve(path15.dirname(real), sibling);
 }
 function findDefaultsRoot(logger) {
   const candidates = [];
   try {
-    const here = path16.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
-    candidates.push(path16.resolve(here, "defaults"));
-    candidates.push(path16.resolve(here, "persona-defaults"));
+    const here = path15.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
+    candidates.push(path15.resolve(here, "defaults"));
+    candidates.push(path15.resolve(here, "persona-defaults"));
   } catch {
   }
   const fromArgv = bundleSiblingFromArgv(process.argv[1], "persona-defaults");
   if (fromArgv) candidates.push(fromArgv);
   for (const c of candidates) {
     try {
-      if (fs13.statSync(c).isDirectory()) {
+      if (fs12.statSync(c).isDirectory()) {
         logger?.info("persona.defaults-root.resolved", { root: c });
         return c;
       }
@@ -50067,8 +49698,8 @@ function seedDefaultPersonas(args) {
       args.logger.info("persona.seed.skip", { personaId: entry.personaId, reason: "exists" });
       continue;
     }
-    const bundleDir = path16.join(args.defaultsRoot, entry.personaId);
-    if (!fs13.existsSync(bundleDir)) {
+    const bundleDir = path15.join(args.defaultsRoot, entry.personaId);
+    if (!fs12.existsSync(bundleDir)) {
       args.logger.warn("persona.seed.skip", {
         personaId: entry.personaId,
         reason: "bundle-missing",
@@ -50076,8 +49707,8 @@ function seedDefaultPersonas(args) {
       });
       continue;
     }
-    const claudeMdPath = path16.join(bundleDir, "CLAUDE.md");
-    if (!fs13.existsSync(claudeMdPath)) {
+    const claudeMdPath = path15.join(bundleDir, "CLAUDE.md");
+    if (!fs12.existsSync(claudeMdPath)) {
       args.logger.warn("persona.seed.skip", {
         personaId: entry.personaId,
         reason: "no-CLAUDE.md",
@@ -50085,7 +49716,7 @@ function seedDefaultPersonas(args) {
       });
       continue;
     }
-    const personality = fs13.readFileSync(claudeMdPath, "utf8");
+    const personality = fs12.readFileSync(claudeMdPath, "utf8");
     const now = Date.now();
     const persona = {
       personaId: entry.personaId,
@@ -50112,51 +49743,51 @@ function seedDefaultPersonas(args) {
   }
 }
 function skipNodeModulesUnder(srcRoot) {
-  return (src) => !path16.relative(srcRoot, src).split(path16.sep).includes("node_modules");
+  return (src) => !path15.relative(srcRoot, src).split(path15.sep).includes("node_modules");
 }
 function copyBundleExtras(srcDir, dstDir) {
-  for (const entry of fs13.readdirSync(srcDir, { withFileTypes: true })) {
+  for (const entry of fs12.readdirSync(srcDir, { withFileTypes: true })) {
     if (entry.name === "CLAUDE.md" || entry.name === ".clawd") continue;
-    const srcPath = path16.join(srcDir, entry.name);
-    const dstPath = path16.join(dstDir, entry.name);
+    const srcPath = path15.join(srcDir, entry.name);
+    const dstPath = path15.join(dstDir, entry.name);
     if (entry.isDirectory()) {
-      fs13.cpSync(srcPath, dstPath, { recursive: true, dereference: true, filter: skipNodeModulesUnder(srcPath) });
+      fs12.cpSync(srcPath, dstPath, { recursive: true, dereference: true, filter: skipNodeModulesUnder(srcPath) });
     } else if (entry.isFile()) {
-      fs13.copyFileSync(srcPath, dstPath);
+      fs12.copyFileSync(srcPath, dstPath);
     }
   }
 }
 var DAEMON_MANAGED_PATHS = ["extension-kit", "CLAUDE.md", ".mcp.json", ".claude/skills", ".claude/agents"];
 function replaceManagedPath(src, dst) {
-  if (!fs13.statSync(src).isDirectory()) {
-    fs13.mkdirSync(path16.dirname(dst), { recursive: true });
-    fs13.rmSync(dst, { recursive: true, force: true });
-    fs13.cpSync(src, dst, { dereference: true });
+  if (!fs12.statSync(src).isDirectory()) {
+    fs12.mkdirSync(path15.dirname(dst), { recursive: true });
+    fs12.rmSync(dst, { recursive: true, force: true });
+    fs12.cpSync(src, dst, { dereference: true });
     return;
   }
-  fs13.mkdirSync(dst, { recursive: true });
-  for (const e of fs13.readdirSync(src, { withFileTypes: true })) {
+  fs12.mkdirSync(dst, { recursive: true });
+  for (const e of fs12.readdirSync(src, { withFileTypes: true })) {
     if (e.name === "node_modules") continue;
-    const child = path16.join(dst, e.name);
-    fs13.rmSync(child, { recursive: true, force: true });
-    fs13.cpSync(path16.join(src, e.name), child, { recursive: true, dereference: true });
+    const child = path15.join(dst, e.name);
+    fs12.rmSync(child, { recursive: true, force: true });
+    fs12.cpSync(path15.join(src, e.name), child, { recursive: true, dereference: true });
   }
 }
 function refreshDaemonManagedDirs(args) {
   const entries = args.entries ?? DEFAULT_PERSONAS;
   for (const entry of entries) {
-    const bundleDir = path16.join(args.defaultsRoot, entry.personaId);
-    if (!fs13.existsSync(bundleDir)) continue;
+    const bundleDir = path15.join(args.defaultsRoot, entry.personaId);
+    if (!fs12.existsSync(bundleDir)) continue;
     const personaDir = args.store.personaDirPath(entry.personaId);
-    if (!fs13.existsSync(personaDir)) continue;
+    if (!fs12.existsSync(personaDir)) continue;
     for (const relPath of DAEMON_MANAGED_PATHS) {
-      const srcPath = path16.join(bundleDir, relPath);
-      if (!fs13.existsSync(srcPath)) continue;
-      const dstPath = path16.join(personaDir, relPath);
+      const srcPath = path15.join(bundleDir, relPath);
+      if (!fs12.existsSync(srcPath)) continue;
+      const dstPath = path15.join(personaDir, relPath);
       try {
         replaceManagedPath(srcPath, dstPath);
         if (relPath === "CLAUDE.md") {
-          replaceManagedPath(srcPath, path16.join(personaDir, "AGENTS.md"));
+          replaceManagedPath(srcPath, path15.join(personaDir, "AGENTS.md"));
         }
         args.logger.info("persona.refresh.synced", {
           personaId: entry.personaId,
@@ -50180,12 +49811,12 @@ function migratePersonalityOverlay(args) {
   for (const entry of entries) {
     const personaId2 = entry.personaId;
     try {
-      if (fs13.existsSync(args.store.personalityLocalPath(personaId2))) continue;
-      const bundleClaudeMd = path16.join(args.defaultsRoot, personaId2, "CLAUDE.md");
-      if (!fs13.existsSync(bundleClaudeMd)) continue;
+      if (fs12.existsSync(args.store.personalityLocalPath(personaId2))) continue;
+      const bundleClaudeMd = path15.join(args.defaultsRoot, personaId2, "CLAUDE.md");
+      if (!fs12.existsSync(bundleClaudeMd)) continue;
       const current = args.store.readPersonality(personaId2);
       if (current === null) continue;
-      const bundle = fs13.readFileSync(bundleClaudeMd, "utf8");
+      const bundle = fs12.readFileSync(bundleClaudeMd, "utf8");
       if (current === bundle) continue;
       if (!current.startsWith(bundle)) continue;
       const tail = current.slice(bundle.length).trim();
@@ -50226,8 +49857,6 @@ function migrateAgentsMirror(args) {
   }
   if (mirrored > 0) args.logger.info("persona.agents-mirror.done", { mirrored });
 }
-var PKG_CACHE_ROOTS = ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"];
-var CODEX_SANDBOX_DEFAULT = { writableRoots: [...PKG_CACHE_ROOTS], denyRead: [], network: true };
 function migrateCodexSandbox(args) {
   const entries = args.entries ?? DEFAULT_PERSONAS;
   let n = 0;
@@ -50286,7 +49915,7 @@ function migrateSandboxAllowRead(args) {
   for (const personaId2 of args.store.list()) {
     try {
       const readPath = tildePath(args.store.personaDirPath(personaId2));
-      if (!fs13.existsSync(args.store.sandboxSettingsPath(personaId2))) {
+      if (!fs12.existsSync(args.store.sandboxSettingsPath(personaId2))) {
         args.store.writeSandboxSettings(personaId2, buildGuestSettingsV1());
         n++;
         continue;
@@ -50329,13 +49958,13 @@ var PERSONA_BUILDER_TOMBSTONE = `${PERSONA_BUILDER_TOMBSTONE_MARKER}
 function containsAnyFile(dir) {
   let entries;
   try {
-    entries = fs13.readdirSync(dir, { withFileTypes: true });
+    entries = fs12.readdirSync(dir, { withFileTypes: true });
   } catch {
     return false;
   }
   for (const e of entries) {
     if (e.isDirectory()) {
-      if (containsAnyFile(path16.join(dir, e.name))) return true;
+      if (containsAnyFile(path15.join(dir, e.name))) return true;
     } else {
       return true;
     }
@@ -50344,9 +49973,9 @@ function containsAnyFile(dir) {
 }
 function retirePersonaBuilder(args) {
   const dir = args.store.personaDirPath(PERSONA_BUILDER_ID);
-  if (!fs13.existsSync(dir)) return;
+  if (!fs12.existsSync(dir)) return;
   try {
-    const used = containsAnyFile(path16.join(dir, ".clawd", "sessions")) || containsAnyFile(path16.join(dir, ".claude", "skills")) || containsAnyFile(path16.join(dir, "projects"));
+    const used = containsAnyFile(path15.join(dir, ".clawd", "sessions")) || containsAnyFile(path15.join(dir, ".claude", "skills")) || containsAnyFile(path15.join(dir, "projects"));
     if (!used) {
       args.store.remove(PERSONA_BUILDER_ID);
       args.logger.info("persona.retire-builder.removed", { personaId: PERSONA_BUILDER_ID });
@@ -50354,10 +49983,10 @@ function retirePersonaBuilder(args) {
     }
     let wrote = false;
     for (const name of ["CLAUDE.md", "AGENTS.md"]) {
-      const p2 = path16.join(dir, name);
-      const cur = fs13.existsSync(p2) ? fs13.readFileSync(p2, "utf8") : null;
+      const p2 = path15.join(dir, name);
+      const cur = fs12.existsSync(p2) ? fs12.readFileSync(p2, "utf8") : null;
       if (cur?.startsWith(PERSONA_BUILDER_TOMBSTONE_MARKER)) continue;
-      fs13.writeFileSync(p2, PERSONA_BUILDER_TOMBSTONE);
+      fs12.writeFileSync(p2, PERSONA_BUILDER_TOMBSTONE);
       wrote = true;
     }
     if (wrote) args.logger.info("persona.retire-builder.tombstoned", { personaId: PERSONA_BUILDER_ID });
@@ -50371,15 +50000,15 @@ function retirePersonaBuilder(args) {
 function findDeployKitRoot(logger) {
   const candidates = [];
   try {
-    const here = path16.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
-    candidates.push(path16.resolve(here, "..", "deploy-kit"));
+    const here = path15.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
+    candidates.push(path15.resolve(here, "..", "deploy-kit"));
   } catch {
   }
   const fromArgv = bundleSiblingFromArgv(process.argv[1], "deploy-kit");
   if (fromArgv) candidates.push(fromArgv);
   for (const c of candidates) {
     try {
-      if (fs13.statSync(c).isDirectory()) {
+      if (fs12.statSync(c).isDirectory()) {
         logger?.info("persona.deploy-kit-root.resolved", { root: c });
         return c;
       }
@@ -50390,8 +50019,8 @@ function findDeployKitRoot(logger) {
   return null;
 }
 function seedDeployKit(args) {
-  const dst = path16.join(args.dataDir, "deploy-kit");
-  fs13.cpSync(args.deployKitBundleRoot, dst, {
+  const dst = path15.join(args.dataDir, "deploy-kit");
+  fs12.cpSync(args.deployKitBundleRoot, dst, {
     recursive: true,
     dereference: true,
     force: false,
@@ -50400,28 +50029,434 @@ function seedDeployKit(args) {
   args.logger.info("deploy-kit.seed.done", { dst });
 }
 function refreshDeployKit(args) {
-  const dst = path16.join(args.dataDir, "deploy-kit");
-  if (!fs13.existsSync(dst)) {
+  const dst = path15.join(args.dataDir, "deploy-kit");
+  if (!fs12.existsSync(dst)) {
     seedDeployKit(args);
     return;
   }
   for (const sub of ["scripts", "contract"]) {
-    const s = path16.join(args.deployKitBundleRoot, sub);
-    if (fs13.existsSync(s)) {
-      fs13.cpSync(s, path16.join(dst, sub), { recursive: true, force: true, dereference: true });
+    const s = path15.join(args.deployKitBundleRoot, sub);
+    if (fs12.existsSync(s)) {
+      fs12.cpSync(s, path15.join(dst, sub), { recursive: true, force: true, dereference: true });
     }
   }
-  const secretsSrc = path16.join(args.deployKitBundleRoot, ".secrets");
-  if (fs13.existsSync(secretsSrc)) {
-    fs13.mkdirSync(path16.join(dst, ".secrets"), { recursive: true });
-    for (const f of fs13.readdirSync(secretsSrc)) {
+  const secretsSrc = path15.join(args.deployKitBundleRoot, ".secrets");
+  if (fs12.existsSync(secretsSrc)) {
+    fs12.mkdirSync(path15.join(dst, ".secrets"), { recursive: true });
+    for (const f of fs12.readdirSync(secretsSrc)) {
       if (f.endsWith(".local")) continue;
-      fs13.copyFileSync(path16.join(secretsSrc, f), path16.join(dst, ".secrets", f));
+      fs12.copyFileSync(path15.join(secretsSrc, f), path15.join(dst, ".secrets", f));
     }
   }
   args.logger.info("deploy-kit.refresh.done", { dst });
 }
 
+// src/skills/scanner.ts
+var import_node_fs9 = __toESM(require("fs"), 1);
+var import_node_os6 = __toESM(require("os"), 1);
+var import_node_path9 = __toESM(require("path"), 1);
+
+// src/skills/frontmatter.ts
+var STRIP_QUOTES = /^["']|["']$/g;
+function strip(s) {
+  return s.trim().replace(STRIP_QUOTES, "");
+}
+function parseFrontmatter(content, keys) {
+  const out = {};
+  if (!content.startsWith("---")) return out;
+  const end = content.indexOf("---", 3);
+  if (end === -1) return out;
+  const lines = content.slice(3, end).split("\n");
+  for (let i = 0; i < lines.length; i++) {
+    const trimmed = lines[i].trim();
+    for (const key of keys) {
+      const prefix = `${key}:`;
+      if (!trimmed.startsWith(prefix)) continue;
+      const rest = trimmed.slice(prefix.length).trim();
+      if (rest === "|" || rest === ">" || rest === "|-" || rest === ">-") {
+        const parts = [];
+        for (let j = i + 1; j < lines.length; j++) {
+          const next = lines[j];
+          if (next.length === 0) {
+            parts.push("");
+            continue;
+          }
+          if (!/^\s/.test(next)) break;
+          parts.push(next.replace(/^\s+/, ""));
+        }
+        const value = parts.filter(Boolean).join(" ").trim();
+        if (value) out[key] = value;
+      } else {
+        const value = strip(rest);
+        if (value) out[key] = value;
+      }
+      break;
+    }
+  }
+  return out;
+}
+
+// src/skills/builtin-cc-resources.ts
+var BUILTIN_SKILLS = [
+  { name: "update-config", source: "builtin", description: "Update Claude Code configuration." },
+  { name: "keybindings-help", source: "builtin", description: "Show available keybindings." },
+  { name: "verify", source: "builtin", description: "Verify the implementation." },
+  { name: "debug", source: "builtin", description: "Debug current issue." },
+  { name: "lorem-ipsum", source: "builtin", description: "Generate lorem ipsum placeholder text." },
+  { name: "skillify", source: "builtin", description: "Convert a process into a reusable skill." },
+  { name: "remember", source: "builtin", description: "Remember context for later use." },
+  { name: "simplify", source: "builtin", description: "Simplify the code or message." },
+  { name: "batch", source: "builtin", description: "Run a batch of similar operations." },
+  { name: "stuck", source: "builtin", description: "Help unstick a stalled task." },
+  { name: "loop", source: "builtin", description: "Loop a task until a condition is met." },
+  { name: "cron-list", source: "builtin", description: "List scheduled cron tasks." },
+  { name: "cron-delete", source: "builtin", description: "Delete a scheduled cron task." },
+  { name: "dream", source: "builtin", description: "Brainstorm freely without constraints." },
+  { name: "hunter", source: "builtin", description: "Hunt down a bug or root cause." },
+  { name: "schedule", source: "builtin", description: "Schedule a task to run later." },
+  { name: "claude-api", source: "builtin", description: "Use the Claude API directly." },
+  { name: "claude-in-chrome", source: "builtin", description: "Drive Claude inside Chrome via the Chrome extension." }
+];
+var BUILTIN_AGENTS = [
+  {
+    name: "general-purpose",
+    source: "builtin",
+    description: "General-purpose agent for researching complex questions and executing multi-step tasks.",
+    whenToUse: "When you are searching for a keyword or file and are not confident you will find the right match in the first few tries."
+  },
+  {
+    name: "statusline-setup",
+    source: "builtin",
+    description: "Configure the user's Claude Code status line setting.",
+    whenToUse: "When the user is setting up or changing their status line configuration."
+  },
+  {
+    name: "Explore",
+    source: "builtin",
+    description: "Explore the codebase to gather context.",
+    whenToUse: "Before making changes that require understanding the surrounding code."
+  },
+  {
+    name: "Plan",
+    source: "builtin",
+    description: "Produce an implementation plan before writing code.",
+    whenToUse: "When the task is non-trivial and would benefit from an explicit plan."
+  },
+  {
+    name: "claude-code-guide",
+    source: "builtin",
+    description: "Guide the user through Claude Code features.",
+    whenToUse: "When the user needs help understanding what Claude Code can do."
+  },
+  {
+    name: "verification",
+    source: "builtin",
+    description: "Verify that a change works as intended.",
+    whenToUse: "After implementing a change, before declaring it done."
+  }
+];
+
+// src/skills/scanner.ts
+function parseDescription(content) {
+  const fields = parseFrontmatter(content, ["description"]);
+  return { description: fields.description ?? "" };
+}
+function isDirLikeSync(p2) {
+  try {
+    return import_node_fs9.default.statSync(p2).isDirectory();
+  } catch {
+    return false;
+  }
+}
+function scanSkillDir(dir, source, seen, out, pluginName) {
+  let entries;
+  try {
+    entries = import_node_fs9.default.readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const ent of entries) {
+    const entryPath = import_node_path9.default.join(dir, ent.name);
+    if (!ent.isDirectory() && !(ent.isSymbolicLink() && isDirLikeSync(entryPath))) continue;
+    let content;
+    try {
+      content = import_node_fs9.default.readFileSync(import_node_path9.default.join(entryPath, "SKILL.md"), "utf8");
+    } catch {
+      try {
+        content = import_node_fs9.default.readFileSync(import_node_path9.default.join(entryPath, "skill.md"), "utf8");
+      } catch {
+        continue;
+      }
+    }
+    const { description } = parseDescription(content);
+    const baseName = ent.name;
+    const name = pluginName ? `${pluginName}:${baseName}` : baseName;
+    if (seen.has(name)) continue;
+    seen.add(name);
+    const info = { name, source, path: entryPath, description: description || void 0 };
+    if (pluginName) info.plugin = pluginName;
+    out.push(info);
+  }
+}
+function listSkillsForDir(dir, source) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  scanSkillDir(dir, source, seen, out);
+  return out;
+}
+function scanCommandDir(dir, source, seen, out, pluginName) {
+  let entries;
+  try {
+    entries = import_node_fs9.default.readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const ent of entries) {
+    const entryPath = import_node_path9.default.join(dir, ent.name);
+    if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync(entryPath)) {
+      const ns = ent.name;
+      let subEntries;
+      try {
+        subEntries = import_node_fs9.default.readdirSync(entryPath, { withFileTypes: true });
+      } catch {
+        continue;
+      }
+      for (const se of subEntries) {
+        if (!se.name.endsWith(".md")) continue;
+        const sePath = import_node_path9.default.join(entryPath, se.name);
+        let content;
+        try {
+          content = import_node_fs9.default.readFileSync(sePath, "utf8");
+        } catch {
+          continue;
+        }
+        const cmd = se.name.replace(/\.md$/, "");
+        const { description } = parseDescription(content);
+        const qualified = `${ns}:${cmd}`;
+        const name = pluginName ? `${pluginName}:${qualified}` : qualified;
+        if (seen.has(name)) continue;
+        seen.add(name);
+        const info = { name, source, path: sePath, description: description || void 0 };
+        if (pluginName) info.plugin = pluginName;
+        out.push(info);
+      }
+    } else if (ent.name.endsWith(".md")) {
+      let content;
+      try {
+        content = import_node_fs9.default.readFileSync(entryPath, "utf8");
+      } catch {
+        continue;
+      }
+      const cmd = ent.name.replace(/\.md$/, "");
+      const { description } = parseDescription(content);
+      const name = pluginName ? `${pluginName}:${cmd}` : cmd;
+      if (seen.has(name)) continue;
+      seen.add(name);
+      const info = { name, source, path: entryPath, description: description || void 0 };
+      if (pluginName) info.plugin = pluginName;
+      out.push(info);
+    }
+  }
+}
+function readInstalledPlugins(home) {
+  const file = import_node_path9.default.join(home, ".claude", "plugins", "installed_plugins.json");
+  let raw;
+  try {
+    raw = import_node_fs9.default.readFileSync(file, "utf8");
+  } catch {
+    return [];
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const [key, entries] of Object.entries(parsed.plugins ?? {})) {
+    if (!Array.isArray(entries) || entries.length === 0) continue;
+    const entry = entries[0];
+    if (!entry?.installPath) continue;
+    const pluginName = key.includes("@") ? key.slice(0, key.indexOf("@")) : key;
+    if (!pluginName) continue;
+    out.push({ name: pluginName, root: entry.installPath });
+  }
+  return out;
+}
+var SkillsScanner = class {
+  home;
+  extraPluginRoots;
+  constructor(opts = {}) {
+    this.home = opts.home ?? import_node_os6.default.homedir();
+    this.extraPluginRoots = opts.extraPluginRoots ?? [];
+  }
+  /**
+   * 对齐 cc-direct（openclaw-plugin-clawos/src/claude-code/skills-scanner.ts）：
+   * 1. global: ~/.claude/skills + ~/.claude/commands
+   * 2. project: <cwd>/.claude/skills + <cwd>/.claude/commands
+   * 3. plugin: installed_plugins.json 里每个 plugin 的 skills + commands
+   * 顺序 global → project → plugin，同名去重（先到先得）
+   */
+  list(args) {
+    const seen = /* @__PURE__ */ new Set();
+    const builtinBlock = [];
+    for (const b2 of BUILTIN_SKILLS) {
+      if (seen.has(b2.name)) continue;
+      seen.add(b2.name);
+      builtinBlock.push({
+        name: b2.name,
+        source: "builtin",
+        description: b2.description
+      });
+    }
+    const fsBlock = [];
+    scanSkillDir(import_node_path9.default.join(this.home, ".claude", "skills"), "global", seen, fsBlock);
+    scanCommandDir(import_node_path9.default.join(this.home, ".claude", "commands"), "global", seen, fsBlock);
+    scanSkillDir(import_node_path9.default.join(args.cwd, ".claude", "skills"), "project", seen, fsBlock);
+    scanCommandDir(import_node_path9.default.join(args.cwd, ".claude", "commands"), "project", seen, fsBlock);
+    const plugins = [...readInstalledPlugins(this.home), ...this.extraPluginRoots];
+    for (const { name, root } of plugins) {
+      scanSkillDir(import_node_path9.default.join(root, "skills"), "plugin", seen, fsBlock, name);
+      scanCommandDir(import_node_path9.default.join(root, "commands"), "plugin", seen, fsBlock, name);
+    }
+    fsBlock.sort((a, b2) => a.name < b2.name ? -1 : a.name > b2.name ? 1 : 0);
+    return [...builtinBlock, ...fsBlock];
+  }
+};
+
+// src/persona/manager.ts
+var PersonaManager = class {
+  constructor(deps) {
+    this.deps = deps;
+  }
+  deps;
+  /**
+   * slug 是 persona 的身份，label 只是显示名——两者刻意分开：id 落进文件路径 /
+   * 分享链接且创建后不可改，label 可中文、可随时改。此前 id 从 label 推导，
+   * 非 ascii 被剥空后一律 fallback 成 `persona-persona`。
+   *
+   * 撞名直接抛错而非改名：id 由调用方显式指定，静默换成带后缀的 id 等于把
+   * 用户的选择偷偷改掉。字符集校验在 PersonaCreateArgsSchema（路径穿越边界）。
+   */
+  create(args) {
+    const personaId2 = `persona-${args.slug}`;
+    if (this.deps.store.has(personaId2)) {
+      throw new Error(`personaId already exists: ${personaId2}`);
+    }
+    const now = Date.now();
+    const persona = {
+      personaId: personaId2,
+      label: args.label,
+      model: args.model,
+      // effort 兜底 high：persona 一律持有具体档位（spec 2026-08-12），UI 会带界面上高亮的
+      // 那一档，但 persona:create 也可能来自 butler 的 persona-authoring skill 这类不带该
+      // 字段的调用方——不兜的话要等下次 daemon 启动 backfill 才补上，中间建的 session 就漏了。
+      // 取值理由与 backfillPersonaSessionDefaults 一致（见那里的注释）。
+      effort: args.effort ?? "high",
+      tool: args.tool,
+      public: args.public ?? false,
+      iconKey: args.iconKey,
+      createdAt: now,
+      updatedAt: now
+    };
+    this.deps.store.write(persona, args.personality);
+    this.deps.store.writeCodexSandboxSettings(personaId2, CODEX_SANDBOX_DEFAULT);
+    this.deps.registry.set(persona);
+    return persona;
+  }
+  update(personaId2, patch, texts) {
+    const existing = this.deps.registry.get(personaId2);
+    if (!existing) throw new Error(`persona not found: ${personaId2}`);
+    const { iconKey: iconKeyPatch, ...restPatch } = patch;
+    const updated = {
+      ...existing,
+      ...restPatch,
+      updatedAt: Date.now()
+    };
+    const toolChanged = patch.tool !== void 0 && (patch.tool ?? "claude") !== (existing.tool ?? "claude");
+    if (toolChanged) {
+      if (patch.model === void 0) delete updated.model;
+      if (patch.effort === void 0) delete updated.effort;
+    }
+    if (iconKeyPatch === null) {
+      delete updated.iconKey;
+    } else if (iconKeyPatch !== void 0) {
+      updated.iconKey = iconKeyPatch;
+    }
+    if (texts?.personality !== void 0) {
+      this.deps.store.writePersonality(personaId2, texts.personality);
+    }
+    if (texts?.personalityLocal !== void 0) {
+      this.deps.store.writePersonalityLocal(personaId2, texts.personalityLocal);
+    }
+    this.deps.store.writeMeta(updated);
+    this.deps.registry.set(updated);
+    return updated;
+  }
+  /** 读取 CLAUDE.md 内容；persona 目录或文件不存在时返回 null。透传给 handler 拼响应。 */
+  readPersonality(personaId2) {
+    return this.deps.store.readPersonality(personaId2);
+  }
+  /** 读人格补充层（`.clawd/personality.local.md`）；没写过返回 null。供 persona:get 拼响应。 */
+  readPersonalityLocal(personaId2) {
+    return this.deps.store.readPersonalityLocal(personaId2);
+  }
+  /** 扫 persona 私有 skills 目录；目录不存在返回空数组。供 persona:get handler 拼响应。 */
+  listSkills(personaId2) {
+    return listSkillsForDir(this.deps.store.skillsDir(personaId2), "project");
+  }
+  /**
+   * 读取 persona `.claude/settings.json` 中已启用的插件列表（value === true 的 key）。
+   * 文件不存在 / 解析失败 / 字段缺失 → 空数组。供 persona:get handler 拼响应。
+   */
+  listEnabledPlugins(personaId2) {
+    return this.deps.store.readEnabledPlugins(personaId2);
+  }
+  /** 读 codex guest 沙箱配置（`.clawd/codex-sandbox.json`）；缺失 / 坏 → null。透传给 handler 拼响应。 */
+  readCodexSandboxSettings(personaId2) {
+    return this.deps.store.readCodexSandboxSettings(personaId2);
+  }
+  /**
+   * 局部合并写 codex guest 沙箱配置，返回合并后的全量。
+   *
+   * **必须是合并不是覆盖**：UI 的「访客联网」开关只发 `{network}`，整体覆盖会静默抹掉 owner
+   * 手配的 writableRoots / denyRead（丢的是安全边界，且用户不会立刻发现）。
+   * 不走 PersonaManager.update 是因为它管的是 PersonaFile meta + 人格两层文本，
+   * 而这份配置是另一个文件、另一套 schema。
+   *
+   * **读不到时 base 用 CODEX_SANDBOX_DEFAULT 而不是 `{}`**：`{}` 会让这次「合并」实际写出一份
+   * 只有 patch 字段的残缺配置（例如只有 `{network:true}`，没有包管理器缓存目录 → `npm install`
+   * EPERM），而且从此 migrateCodexSandbox 见文件已存在就跳过，UI 上再也补不回来。
+   * 正常路径下文件在 create 时就已物化，这条兜底只在文件被删 / 被改坏时触发。
+   *
+   * ⚠️ 已知限制：`CodexSandboxSettingsSchema` 是 `.strict()` 的，owner 手编时多写一个键
+   * （注释键 / 历史字段）会让整份文件读成 null，于是这次合并把它替换成默认值 ⊕ patch。
+   * 已有测试锁定该 strict 语义（store.spec「schema 校验失败 → 返回 null」），本次不动它——
+   * 至少残缺配置不会再被写出去。要放宽得单独评估。
+   */
+  mergeCodexSandbox(personaId2, patch) {
+    if (!this.deps.registry.get(personaId2)) throw new Error(`persona not found: ${personaId2}`);
+    const base = this.deps.store.readCodexSandboxSettings(personaId2) ?? CODEX_SANDBOX_DEFAULT;
+    const merged = { ...base, ...patch };
+    this.deps.store.writeCodexSandboxSettings(personaId2, merged);
+    return merged;
+  }
+  /** 读 sandbox-settings.json；不存在 / 损坏返回 null。供 persona:get handler 拼响应。 */
+  readSandboxSettings(personaId2) {
+    return this.deps.store.readSandboxSettings(personaId2);
+  }
+  /**
+   * 删除 persona。
+   * PersonaStore.remove(personaId) 级联删整个 <personaRoot>/<personaId>/ 目录
+   * （含 .clawd/sessions/owner/ 和 .clawd/sessions/guests/<capId>/），rmSync
+   * recursive force 一锅清。
+   */
+  delete(personaId2) {
+    this.deps.store.remove(personaId2);
+    this.deps.registry.remove(personaId2);
+  }
+};
+
 // src/share-md-viewer/load.ts
 var import_node_fs11 = __toESM(require("fs"), 1);
 var import_node_path10 = __toESM(require("path"), 1);
@@ -51154,8 +51189,8 @@ function turnStartInput(text) {
   const items = [];
   let leftover = text;
   for (const m2 of text.matchAll(SKILL_RE)) {
-    const [marker, name, path89] = m2;
-    items.push({ type: "skill", name, path: path89 });
+    const [marker, name, path91] = m2;
+    items.push({ type: "skill", name, path: path91 });
     leftover = leftover.replace(marker, "");
   }
   for (const m2 of text.matchAll(ATTACHMENT_RE2)) {
@@ -55842,13 +55877,13 @@ function mapSkillsListResponse(res) {
       const r = s ?? {};
       const name = str3(r.name);
       if (!name) continue;
-      const path89 = str3(r.path);
+      const path91 = str3(r.path);
       const description = str3(r.description);
       const isPlugin = name.includes(":");
       out.push({
         name,
         source: isPlugin ? "plugin" : "project",
-        ...path89 ? { path: path89 } : {},
+        ...path91 ? { path: path91 } : {},
         ...description ? { description } : {},
         ...isPlugin ? { plugin: name.split(":")[0] } : {}
       });
@@ -60170,9 +60205,9 @@ var CentralClientError = class extends Error {
   code;
   cause;
 };
-async function centralRequest(opts, path89, init) {
+async function centralRequest(opts, path91, init) {
   const f = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}${path89}`;
+  const url = `${opts.api.replace(/\/+$/, "")}${path91}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
   let res;
@@ -60653,7 +60688,7 @@ var ServerKeyStore = class {
 init_protocol();
 
 // src/handlers/index.ts
-var import_node_path66 = __toESM(require("path"), 1);
+var import_node_path68 = __toESM(require("path"), 1);
 
 // src/handlers/session.ts
 init_protocol();
@@ -60996,8 +61031,133 @@ function appendImportLedger(dataDir, entry) {
   import_node_fs47.default.writeFileSync(file, JSON.stringify(entries, null, 2), { encoding: "utf8", mode: 384 });
 }
 
+// src/tools/transcript-search.ts
+var import_node_fs48 = __toESM(require("fs"), 1);
+var import_node_path54 = __toESM(require("path"), 1);
+var SNIPPET_PAD = 60;
+var INJECTED_ENVELOPE_RE = /^<(system-reminder|command-name|command-message|command-args|local-command-stdout|local-command-stderr|task-notification|user-prompt-submit-hook|environment_context|user_instructions)\b/;
+var CODEX_WRAPPER_RE = /<(related-dir|environment_context|user_instructions)>[\s\S]*?<\/\1>/g;
+function asRecord(v2) {
+  return typeof v2 === "object" && v2 !== null ? v2 : null;
+}
+function textOfBlocks(content, types) {
+  if (!Array.isArray(content)) return null;
+  const parts = [];
+  for (const block of content) {
+    const b2 = asRecord(block);
+    if (!b2 || typeof b2.type !== "string" || !types.includes(b2.type)) continue;
+    const text = b2.text;
+    if (typeof text === "string" && text !== "") parts.push(text);
+  }
+  return parts.length > 0 ? parts.join("\n") : null;
+}
+function lineToSearchableText(raw) {
+  const line = asRecord(raw);
+  if (!line) return null;
+  if (line.type === "response_item") {
+    const payload = asRecord(line.payload);
+    if (!payload || payload.type !== "message") return null;
+    const role = payload.role;
+    if (role !== "user" && role !== "assistant") return null;
+    const text2 = textOfBlocks(payload.content, ["input_text", "output_text"]);
+    if (text2 === null) return null;
+    if (role !== "user") return text2;
+    const stripped = text2.replace(CODEX_WRAPPER_RE, "").trim();
+    if (stripped === "") return null;
+    return INJECTED_ENVELOPE_RE.test(stripped) ? null : stripped;
+  }
+  if (line.type !== "user" && line.type !== "assistant") return null;
+  const message = asRecord(line.message);
+  if (!message) return null;
+  const content = message.content;
+  const text = typeof content === "string" && content !== "" ? content : textOfBlocks(content, ["text"]);
+  if (text === null) return null;
+  if (line.type === "user" && (line.isMeta === true || line.isSynthetic === true)) return null;
+  if (line.type === "user" && INJECTED_ENVELOPE_RE.test(text.trimStart())) return null;
+  return text;
+}
+function escapeRegExp(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function makeSnippet(text, at, needleLength) {
+  const from = Math.max(0, at - SNIPPET_PAD);
+  const to = Math.min(text.length, at + needleLength + SNIPPET_PAD);
+  const body = text.slice(from, to).replace(/\s+/g, " ").trim();
+  return `${from > 0 ? "\u2026 " : ""}${body}${to < text.length ? " \u2026" : ""}`;
+}
+function searchTranscriptFile(file, query) {
+  let buf;
+  try {
+    buf = import_node_fs48.default.readFileSync(file);
+  } catch {
+    return null;
+  }
+  const haystack = buf.toString("latin1");
+  const needle = Buffer.from(query, "utf8").toString("latin1");
+  const re = new RegExp(escapeRegExp(needle), "gi");
+  let m2;
+  while ((m2 = re.exec(haystack)) !== null) {
+    const lineStart = haystack.lastIndexOf("\n", m2.index) + 1;
+    let lineEnd = haystack.indexOf("\n", m2.index);
+    if (lineEnd < 0) lineEnd = haystack.length;
+    re.lastIndex = lineEnd + 1;
+    let parsed;
+    try {
+      parsed = JSON.parse(Buffer.from(haystack.slice(lineStart, lineEnd), "latin1").toString("utf8"));
+    } catch {
+      continue;
+    }
+    const text = lineToSearchableText(parsed);
+    if (text === null) continue;
+    const at = text.toLowerCase().indexOf(query.toLowerCase());
+    if (at < 0) continue;
+    return makeSnippet(text, at, query.length);
+  }
+  return null;
+}
+var ROLLOUT_NAME_RE = /-([0-9a-fA-F-]{36})\.jsonl$/;
+function createCodexRolloutLocator(roots) {
+  let index = null;
+  const walk2 = (dir, into) => {
+    let entries;
+    try {
+      entries = import_node_fs48.default.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      const full = import_node_path54.default.join(dir, entry.name);
+      if (entry.isDirectory()) {
+        walk2(full, into);
+        continue;
+      }
+      const matched = ROLLOUT_NAME_RE.exec(entry.name);
+      if (matched) into.set(matched[1].toLowerCase(), full);
+    }
+  };
+  return (toolSessionId) => {
+    if (index === null) {
+      index = /* @__PURE__ */ new Map();
+      for (const root of roots) walk2(root, index);
+    }
+    return index.get(toolSessionId.toLowerCase()) ?? null;
+  };
+}
+
 // src/handlers/session.ts
 init_protocol();
+var import_node_os19 = __toESM(require("os"), 1);
+var import_node_path55 = __toESM(require("path"), 1);
+function canReadSearchHit(ctx, file) {
+  if (!ctx || ctx.principal.kind === "owner") return true;
+  return canAccessPersona(ctx.grants, file.ownerPersonaId, "read") && file.creatorPrincipalId === ctx.principal.id;
+}
+var DEFAULT_SEARCH_LIMIT = 9;
+function codexRolloutRoots(dataDir) {
+  const roots = [import_node_path55.default.join(import_node_os19.default.homedir(), ".codex", "sessions")];
+  if (dataDir) roots.push(import_node_path55.default.join(dataDir, "codex-home", "sessions"));
+  return roots;
+}
 function buildSessionHandlers(deps) {
   const { manager, observer, getAdapter: getAdapter2, store, ownerPrincipalId } = deps;
   const ensureSessionAccess = (ctx, sessionId, action) => {
@@ -61373,6 +61533,23 @@ ${attribution}` } : args;
     const { response, broadcast } = manager.markRead(args);
     return { response: { type: "session:info", ...response }, broadcast };
   };
+  const searchContent = async (frame, _client, ctx) => {
+    const args = SessionSearchContentArgs.parse(frame);
+    const limit = args.limit ?? DEFAULT_SEARCH_LIMIT;
+    const locateCodexRollout = createCodexRolloutLocator(codexRolloutRoots(deps.dataDir));
+    const matches = [];
+    for (const sessionId of args.sessionIds) {
+      if (matches.length >= limit) break;
+      const file = manager.findOwnedSession(sessionId);
+      if (!file?.toolSessionId) continue;
+      if (!canReadSearchHit(ctx, file)) continue;
+      const transcript = file.tool === "codex" ? locateCodexRollout(file.toolSessionId) : deps.history?.resolveTranscriptFile(file.cwd, file.toolSessionId) ?? null;
+      if (!transcript) continue;
+      const snippet = searchTranscriptFile(transcript, args.query);
+      if (snippet !== null) matches.push({ sessionId, snippet });
+    }
+    return { response: { type: "session:searchContent", matches } };
+  };
   const reorderPins = async (frame) => {
     const args = SessionReorderPinsArgs.parse(frame);
     const { response, broadcast } = manager.reorderPins(args);
@@ -61493,6 +61670,7 @@ ${attribution}` } : args;
     "session:pin": pin,
     "session:archive": archive,
     "session:markRead": markRead,
+    "session:searchContent": searchContent,
     "session:reorderPins": reorderPins,
     "session:answerQuestion": answerQuestion,
     "session:cancelQuestion": cancelQuestion,
@@ -61519,7 +61697,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path68 = __toESM(require("path"), 1);
+var path70 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -61537,7 +61715,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path67 = __toESM(require("path"), 1);
+var path69 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -61550,42 +61728,42 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read", userWorkDir) {
-  const target = path67.resolve(absPath);
+  const target = path69.resolve(absPath);
   if (userWorkDir) {
-    const u = path67.resolve(userWorkDir);
-    const usep = u.endsWith(path67.sep) ? "" : path67.sep;
+    const u = path69.resolve(userWorkDir);
+    const usep = u.endsWith(path69.sep) ? "" : path69.sep;
     if (target === u || target.startsWith(u + usep)) return true;
   }
-  const root = path67.resolve(personaRoot);
-  const sep4 = root.endsWith(path67.sep) ? "" : path67.sep;
+  const root = path69.resolve(personaRoot);
+  const sep4 = root.endsWith(path69.sep) ? "" : path69.sep;
   if (!target.startsWith(root + sep4)) return false;
-  const rel = path67.relative(root, target);
+  const rel = path69.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId2 = rel.split(path67.sep)[0];
+  const personaId2 = rel.split(path69.sep)[0];
   if (!personaId2) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId2);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path67.resolve(personaRoot);
-  const target = path67.resolve(absPath);
-  const sep4 = root.endsWith(path67.sep) ? "" : path67.sep;
+  const root = path69.resolve(personaRoot);
+  const target = path69.resolve(absPath);
+  const sep4 = root.endsWith(path69.sep) ? "" : path69.sep;
   if (!target.startsWith(root + sep4)) return null;
-  const rel = path67.relative(root, target);
+  const rel = path69.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path67.sep)[0];
+  const id = rel.split(path69.sep)[0];
   return id || null;
 }
 function isPathWithin(dir, absPath) {
-  const d = path67.resolve(dir);
-  const t = path67.resolve(absPath);
-  const sep4 = d.endsWith(path67.sep) ? "" : path67.sep;
+  const d = path69.resolve(dir);
+  const t = path69.resolve(absPath);
+  const sep4 = d.endsWith(path69.sep) ? "" : path69.sep;
   return t === d || t.startsWith(d + sep4);
 }
 function isPathInGuestBoundary(personaRoot, personaId2, userWorkDir, absPath) {
   if (userWorkDir && isPathWithin(userWorkDir, absPath)) return true;
-  return personaIdFromPath(path67.resolve(absPath), personaRoot) === personaId2;
+  return personaIdFromPath(path69.resolve(absPath), personaRoot) === personaId2;
 }
 
 // src/handlers/history.ts
@@ -61638,7 +61816,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path68.join(personaRoot, pid),
+          path70.join(personaRoot, pid),
           personaRoot,
           "read",
           userWorkDir
@@ -61650,7 +61828,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path68.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
+    assertGuestPath(ctx, path70.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -61698,14 +61876,14 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path68.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
+    assertGuestPath(ctx, path70.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagents");
     const subs = await historyReaderForToolSession(args.toolSessionId).listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path68.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
+    assertGuestPath(ctx, path70.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagent-read");
     const res = await historyReaderForToolSession(args.toolSessionId).readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
@@ -61715,7 +61893,7 @@ function buildHistoryHandlers(deps) {
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path68.resolve(d.cwd), personaRoot, "read", userWorkDir)
+        (d) => isGuestPathAllowed(ctx.grants, path70.resolve(d.cwd), personaRoot, "read", userWorkDir)
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -61732,17 +61910,17 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/projects.ts
-var fs63 = __toESM(require("fs"), 1);
-var os20 = __toESM(require("os"), 1);
-var path69 = __toESM(require("path"), 1);
+var fs64 = __toESM(require("fs"), 1);
+var os21 = __toESM(require("os"), 1);
+var path71 = __toESM(require("path"), 1);
 var import_node_child_process13 = require("child_process");
 init_protocol();
-var DEFAULT_PROJECTS_ROOT = path69.join(os20.homedir(), "Documents", "ChatGPT");
+var DEFAULT_PROJECTS_ROOT = path71.join(os21.homedir(), "Documents", "ChatGPT");
 function allocateDir(root, name) {
-  let candidate = path69.join(root, name);
+  let candidate = path71.join(root, name);
   let n = 2;
-  while (fs63.existsSync(candidate)) {
-    candidate = path69.join(root, `${name} ${n}`);
+  while (fs64.existsSync(candidate)) {
+    candidate = path71.join(root, `${name} ${n}`);
     n += 1;
   }
   return candidate;
@@ -61770,7 +61948,7 @@ function buildProjectHandlers(deps) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, "project:reveal \u4EC5\u652F\u6301 macOS");
     }
     try {
-      if (!fs63.statSync(args.path).isDirectory()) throw new Error("not dir");
+      if (!fs64.statSync(args.path).isDirectory()) throw new Error("not dir");
     } catch {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${args.path}`);
     }
@@ -61786,7 +61964,7 @@ function buildProjectHandlers(deps) {
     let target;
     if (args.path) {
       try {
-        if (!fs63.statSync(args.path).isDirectory()) throw new Error("not dir");
+        if (!fs64.statSync(args.path).isDirectory()) throw new Error("not dir");
       } catch {
         throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${args.path}`);
       }
@@ -61794,15 +61972,15 @@ function buildProjectHandlers(deps) {
     } else {
       const name = args.name;
       try {
-        fs63.mkdirSync(root, { recursive: true });
+        fs64.mkdirSync(root, { recursive: true });
         target = allocateDir(root, name);
-        fs63.mkdirSync(target);
+        fs64.mkdirSync(target);
       } catch (err) {
         throw new ClawdError(ERROR_CODES.INVALID_CWD, `\u521B\u5EFA\u9879\u76EE\u76EE\u5F55\u5931\u8D25: ${String(err)}`);
       }
       const git = (0, import_node_child_process13.spawnSync)("git", ["init"], { cwd: target, stdio: "ignore" });
       if (git.status !== 0) {
-        fs63.rmSync(target, { recursive: true, force: true });
+        fs64.rmSync(target, { recursive: true, force: true });
         throw new ClawdError(
           ERROR_CODES.INVALID_CWD,
           `git init \u5931\u8D25\uFF08${git.error ? String(git.error) : `exit ${git.status}`}\uFF09: ${target}`
@@ -61827,8 +62005,8 @@ function buildProjectHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path70 = __toESM(require("path"), 1);
-var os21 = __toESM(require("os"), 1);
+var path72 = __toESM(require("path"), 1);
+var os22 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
 function buildEnabledPluginNames(personaManager, personaId2) {
@@ -61868,23 +62046,23 @@ function buildWorkspaceHandlers(deps) {
   const list = async (frame, _client, ctx) => {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
-    const fallbackCwd = isGuest && personaRoot ? personaRoot : os21.homedir();
-    const resolvedCwd = path70.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path70.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const fallbackCwd = isGuest && personaRoot ? personaRoot : os22.homedir();
+    const resolvedCwd = path72.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path72.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list", usersRoot);
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path70.isAbsolute(args.path) ? path70.resolve(args.path) : path70.resolve(args.cwd, args.path);
+    const target = path72.isAbsolute(args.path) ? path72.resolve(args.path) : path72.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read", usersRoot);
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path70.resolve(args.cwd);
+    const cwdAbs = path72.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list", usersRoot);
     const list2 = await getSkillsForTool(args.tool ?? "claude", cwdAbs);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -61896,7 +62074,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path70.resolve(args.cwd);
+    const cwdAbs = path72.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list", usersRoot);
     if (args.tool === "codex") {
       return { response: { type: "agents:list", agents: [] } };
@@ -61918,20 +62096,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path72 = __toESM(require("path"), 1);
+var path74 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process14 = require("child_process");
-var import_node_fs48 = __toESM(require("fs"), 1);
-var import_node_path54 = __toESM(require("path"), 1);
+var import_node_fs49 = __toESM(require("fs"), 1);
+var import_node_path56 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process14.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path54.default.resolve(p2);
+  const resolved = import_node_path56.default.resolve(p2);
   try {
-    return import_node_fs48.default.realpathSync(resolved);
+    return import_node_fs49.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -62005,7 +62183,7 @@ async function listGitBranches(cwd) {
 function assertGuestCwd(ctx, cwd, personaRoot, method, usersRoot) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
   const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
-  if (!isGuestPathAllowed(ctx.grants, path72.resolve(cwd), personaRoot, "read", userWorkDir)) {
+  if (!isGuestPathAllowed(ctx.grants, path74.resolve(cwd), personaRoot, "read", userWorkDir)) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -62550,7 +62728,7 @@ function buildFeishuAuthHandlers(deps) {
 }
 
 // src/handlers/meta.ts
-var import_node_os19 = __toESM(require("os"), 1);
+var import_node_os20 = __toESM(require("os"), 1);
 init_protocol();
 
 // src/handlers/method-grants.ts
@@ -62626,6 +62804,9 @@ var METHOD_GRANT_MAP = {
   "session:pin": CAPABILITY_SCOPED,
   "session:archive": CAPABILITY_SCOPED,
   "session:markRead": CAPABILITY_SCOPED,
+  // 全局搜索扫 transcript 正文。与 history:read 同档：guest 进 persona VM 后要能搜自己的会话，
+  // handler 内仍逐条 ensureSessionAccess，可见面不因 sessionIds 由客户端给定而放大
+  "session:searchContent": CAPABILITY_SCOPED,
   "session:reorderPins": ADMIN_ANY,
   // owner 全局操作，无 personaId 维度
   // mirror peer sessions (2026-05-26)：owner-only — guest 不应能写/删本机 mirror SessionFile
@@ -62837,21 +63018,21 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.439".length > 0 ? "0.2.439" : "dev";
+var version = "0.2.441".length > 0 ? "0.2.441" : "dev";
 
 // src/cli-probe/probe.ts
-var fs65 = __toESM(require("fs"), 1);
-var path73 = __toESM(require("path"), 1);
+var fs66 = __toESM(require("fs"), 1);
+var path75 = __toESM(require("path"), 1);
 var PKG_NAME = "@clawos-dev/clawd";
 var BIN_NAME = "clawd";
 var MAX_PARENT_HOPS = 5;
 function probeGlobalCli(pathEnv) {
   if (!pathEnv) return null;
-  for (const dir of pathEnv.split(path73.delimiter)) {
+  for (const dir of pathEnv.split(path75.delimiter)) {
     if (!dir) continue;
     let real;
     try {
-      real = fs65.realpathSync(path73.join(dir, BIN_NAME));
+      real = fs66.realpathSync(path75.join(dir, BIN_NAME));
     } catch {
       continue;
     }
@@ -62861,15 +63042,15 @@ function probeGlobalCli(pathEnv) {
   return null;
 }
 function readOwnPackageVersion(entryPath) {
-  let dir = path73.dirname(entryPath);
+  let dir = path75.dirname(entryPath);
   for (let i = 0; i < MAX_PARENT_HOPS; i++) {
     try {
-      const raw = fs65.readFileSync(path73.join(dir, "package.json"), "utf8");
+      const raw = fs66.readFileSync(path75.join(dir, "package.json"), "utf8");
       const pkg = JSON.parse(raw);
       if (pkg.name !== PKG_NAME) return null;
       return typeof pkg.version === "string" && pkg.version ? pkg.version : null;
     } catch {
-      const parent = path73.dirname(dir);
+      const parent = path75.dirname(dir);
       if (parent === dir) return null;
       dir = parent;
     }
@@ -62905,7 +63086,7 @@ function buildReadyFrame(deps, client) {
   return {
     version,
     protocolVersion: PROTOCOL_VERSION,
-    hostname: import_node_os19.default.hostname(),
+    hostname: import_node_os20.default.hostname(),
     os: process.platform,
     tools,
     runningSessions: info.runningSessions,
@@ -63021,16 +63202,8 @@ function buildPersonaHandlers(deps) {
     const args = parseArgs2(PersonaUpdateArgsSchema, frame, "persona:update");
     const { personality, personalityLocal, codexSandbox, ...metaPatch } = args.patch;
     const persona = personaManager.update(args.personaId, metaPatch, { personality, personalityLocal });
-    const mergedCodexSandbox = codexSandbox ? personaManager.mergeCodexSandbox(args.personaId, codexSandbox) : void 0;
-    return {
-      response: {
-        type: "persona:info",
-        ...persona,
-        // 只在本次确实动过时回带，让调用方拿到合并后的真值而不用再 get 一次；
-        // 没动就不带（与 personality 等分层字段同口径：persona:update 的响应是 meta 视图）。
-        ...mergedCodexSandbox ? { codexSandbox: mergedCodexSandbox } : {}
-      }
-    };
+    if (codexSandbox) personaManager.mergeCodexSandbox(args.personaId, codexSandbox);
+    return { response: { type: "persona:info", ...persona } };
   };
   const del = async (frame) => {
     const args = parseArgs2(PersonaIdArgsSchema, frame, "persona:delete");
@@ -63049,7 +63222,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path55 = __toESM(require("path"), 1);
+var import_node_path57 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -63129,12 +63302,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path55.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path55.default.isAbsolute(args.relPath) ? import_node_path55.default.resolve(args.relPath) : import_node_path55.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path57.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path57.default.isAbsolute(args.relPath) ? import_node_path57.default.resolve(args.relPath) : import_node_path57.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.signUrl", "group-acl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path55.default.isAbsolute(e.relPath) ? import_node_path55.default.resolve(e.relPath) : import_node_path55.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path57.default.isAbsolute(e.relPath) ? import_node_path57.default.resolve(e.relPath) : import_node_path57.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -63159,7 +63332,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path55.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
+    assertGuestAttachmentPath(ctx, import_node_path57.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -63174,8 +63347,8 @@ function buildAttachmentHandlers(deps) {
     if (!scope) {
       throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, `session ${args.sessionId} not found`);
     }
-    const cwdAbs = import_node_path55.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
-    const candidateAbs = import_node_path55.default.isAbsolute(args.relPath) ? import_node_path55.default.resolve(args.relPath) : import_node_path55.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path57.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
+    const candidateAbs = import_node_path57.default.isAbsolute(args.relPath) ? import_node_path57.default.resolve(args.relPath) : import_node_path57.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.groupAdd", "cwd-subtree");
     const from = args.origin === "agent" ? "agent" : ctx?.principal.kind === "owner" ? "owner" : "agent";
     const size = 0;
@@ -63234,19 +63407,19 @@ function buildAttachmentHandlers(deps) {
 
 // src/handlers/extension.ts
 var import_promises12 = __toESM(require("fs/promises"), 1);
-var import_node_path60 = __toESM(require("path"), 1);
+var import_node_path62 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/extension/bundle-zip.ts
 var import_promises9 = __toESM(require("fs/promises"), 1);
-var import_node_path56 = __toESM(require("path"), 1);
+var import_node_path58 = __toESM(require("path"), 1);
 var import_node_crypto17 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
   const zip = new import_jszip2.default();
   for (const rel of entries) {
-    const abs = import_node_path56.default.join(dir, rel);
+    const abs = import_node_path58.default.join(dir, rel);
     const content = await import_promises9.default.readFile(abs);
     zip.file(rel, content, { date: FIXED_DATE });
   }
@@ -63267,7 +63440,7 @@ async function listFilesSorted(rootDir) {
   return out;
 }
 async function walk(absRoot, relPrefix, out) {
-  const dirAbs = import_node_path56.default.join(absRoot, relPrefix);
+  const dirAbs = import_node_path58.default.join(absRoot, relPrefix);
   const entries = await import_promises9.default.readdir(dirAbs, { withFileTypes: true });
   for (const e of entries) {
     if (IGNORE_BASENAMES.has(e.name)) continue;
@@ -63321,25 +63494,25 @@ function computePublishCheck(args) {
 
 // src/extension/install-flow.ts
 var import_promises10 = __toESM(require("fs/promises"), 1);
-var import_node_path58 = __toESM(require("path"), 1);
-var import_node_os21 = __toESM(require("os"), 1);
+var import_node_path60 = __toESM(require("path"), 1);
+var import_node_os22 = __toESM(require("os"), 1);
 var import_node_crypto18 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
-var import_node_os20 = __toESM(require("os"), 1);
-var import_node_path57 = __toESM(require("path"), 1);
+var import_node_os21 = __toESM(require("os"), 1);
+var import_node_path59 = __toESM(require("path"), 1);
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path57.default.join(import_node_os20.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path59.default.join(import_node_os21.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
-  return import_node_path57.default.join(clawdHomeRoot(override), "extensions");
+  return import_node_path59.default.join(clawdHomeRoot(override), "extensions");
 }
 function publishedChannelsFile(override) {
-  return import_node_path57.default.join(clawdHomeRoot(override), "extensions-published.json");
+  return import_node_path59.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
 function bundleCacheRoot(override) {
-  return import_node_path57.default.join(clawdHomeRoot(override), "extension-bundles");
+  return import_node_path59.default.join(clawdHomeRoot(override), "extension-bundles");
 }
 
 // src/extension/install-flow.ts
@@ -63366,7 +63539,7 @@ async function installFromChannel(args, deps) {
     throw new InstallError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path58.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path60.default.isAbsolute(name)) {
       throw new InstallError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -63398,7 +63571,7 @@ async function installFromChannel(args, deps) {
     );
   }
   const localExtId = namespacedExtId(ownerSlug, channelRef.ownerPrincipalId);
-  const destDir = import_node_path58.default.join(deps.extensionsRoot, localExtId);
+  const destDir = import_node_path60.default.join(deps.extensionsRoot, localExtId);
   let destExists = false;
   try {
     await import_promises10.default.access(destDir);
@@ -63412,16 +63585,16 @@ async function installFromChannel(args, deps) {
     );
   }
   const stage = await import_promises10.default.mkdtemp(
-    import_node_path58.default.join(import_node_os21.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+    import_node_path60.default.join(import_node_os22.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path58.default.join(stage, name);
+      const dest = import_node_path60.default.join(stage, name);
       if (entry.dir) {
         await import_promises10.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises10.default.mkdir(import_node_path58.default.dirname(dest), { recursive: true });
+      await import_promises10.default.mkdir(import_node_path60.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises10.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -63442,8 +63615,8 @@ async function installFromChannel(args, deps) {
 
 // src/extension/update-flow.ts
 var import_promises11 = __toESM(require("fs/promises"), 1);
-var import_node_path59 = __toESM(require("path"), 1);
-var import_node_os22 = __toESM(require("os"), 1);
+var import_node_path61 = __toESM(require("path"), 1);
+var import_node_os23 = __toESM(require("os"), 1);
 var import_node_crypto19 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
 var UpdateError = class extends Error {
@@ -63459,11 +63632,11 @@ async function updateFromChannel(args, deps) {
     channelRef.extId,
     channelRef.ownerPrincipalId
   );
-  const liveDir = import_node_path59.default.join(deps.extensionsRoot, localExtId);
+  const liveDir = import_node_path61.default.join(deps.extensionsRoot, localExtId);
   const prevDir = `${liveDir}.prev`;
   let existingVersion;
   try {
-    const raw = await import_promises11.default.readFile(import_node_path59.default.join(liveDir, "manifest.json"), "utf8");
+    const raw = await import_promises11.default.readFile(import_node_path61.default.join(liveDir, "manifest.json"), "utf8");
     const parsed2 = ExtensionManifestSchema.safeParse(JSON.parse(raw));
     if (!parsed2.success) {
       throw new UpdateError(
@@ -63496,7 +63669,7 @@ async function updateFromChannel(args, deps) {
     throw new UpdateError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path59.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path61.default.isAbsolute(name)) {
       throw new UpdateError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -63531,16 +63704,16 @@ async function updateFromChannel(args, deps) {
   await import_promises11.default.rm(prevDir, { recursive: true, force: true });
   await import_promises11.default.rename(liveDir, prevDir);
   const stage = await import_promises11.default.mkdtemp(
-    import_node_path59.default.join(import_node_os22.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+    import_node_path61.default.join(import_node_os23.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path59.default.join(stage, name);
+      const dest = import_node_path61.default.join(stage, name);
       if (entry.dir) {
         await import_promises11.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises11.default.mkdir(import_node_path59.default.dirname(dest), { recursive: true });
+      await import_promises11.default.mkdir(import_node_path61.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises11.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -63607,7 +63780,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
       );
     }
   }
-  const manifestPath = import_node_path60.default.join(root, extId, "manifest.json");
+  const manifestPath = import_node_path62.default.join(root, extId, "manifest.json");
   const manifest = await readManifest(root, extId);
   const next = { ...manifest, version: newVersion };
   const tmp = `${manifestPath}.tmp`;
@@ -63615,7 +63788,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
   await import_promises12.default.rename(tmp, manifestPath);
 }
 async function readManifest(root, extId) {
-  const file = import_node_path60.default.join(root, extId, "manifest.json");
+  const file = import_node_path62.default.join(root, extId, "manifest.json");
   let raw;
   try {
     raw = await import_promises12.default.readFile(file, "utf8");
@@ -63699,7 +63872,7 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256, buffer } = await bundleExtensionDir(import_node_path60.default.join(deps.root, extId));
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path62.default.join(deps.root, extId));
     return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
@@ -63874,9 +64047,9 @@ function buildExtensionHandlers(deps) {
 }
 
 // src/app-builder/project-store.ts
-var import_node_fs49 = require("fs");
+var import_node_fs50 = require("fs");
 var import_node_child_process15 = require("child_process");
-var import_node_path61 = require("path");
+var import_node_path63 = require("path");
 init_protocol();
 var PROJECTS_DIR = "projects";
 var META_FILE = ".clawd-project.json";
@@ -63890,19 +64063,19 @@ var ProjectStore = class {
   root;
   /** projects/<name>/.clawd-project.json 路径 */
   metaPath(name) {
-    return (0, import_node_path61.join)(this.projectsRoot(), name, META_FILE);
+    return (0, import_node_path63.join)(this.projectsRoot(), name, META_FILE);
   }
   /** projects/<name>/ 目录路径（cwd 用） */
   projectDir(name) {
-    return (0, import_node_path61.join)(this.projectsRoot(), name);
+    return (0, import_node_path63.join)(this.projectsRoot(), name);
   }
   projectsRoot() {
-    return (0, import_node_path61.join)(this.root, PROJECTS_DIR);
+    return (0, import_node_path63.join)(this.root, PROJECTS_DIR);
   }
   async list() {
     let entries;
     try {
-      entries = await import_node_fs49.promises.readdir(this.projectsRoot());
+      entries = await import_node_fs50.promises.readdir(this.projectsRoot());
     } catch (err) {
       if (err.code === "ENOENT") return [];
       throw err;
@@ -63910,7 +64083,7 @@ var ProjectStore = class {
     const out = [];
     for (const name of entries) {
       try {
-        const raw = await import_node_fs49.promises.readFile(this.metaPath(name), "utf8");
+        const raw = await import_node_fs50.promises.readFile(this.metaPath(name), "utf8");
         const json = JSON.parse(raw);
         let migrated = false;
         if (typeof json.devCommand !== "string" || json.devCommand.length === 0) {
@@ -63921,7 +64094,7 @@ var ProjectStore = class {
         if (parsed.success) {
           out.push(parsed.data);
           if (migrated) {
-            void import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
+            void import_node_fs50.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
             });
           }
         }
@@ -63965,8 +64138,8 @@ var ProjectStore = class {
       throw new Error(`invalid name "${name}": ${validated.error.message}`);
     }
     const dir = this.projectDir(name);
-    await import_node_fs49.promises.mkdir(dir, { recursive: true });
-    await import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
+    await import_node_fs50.promises.mkdir(dir, { recursive: true });
+    await import_node_fs50.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
     return meta;
   }
   /**
@@ -64009,7 +64182,7 @@ var ProjectStore = class {
   }
   async delete(name) {
     const dir = this.projectDir(name);
-    await import_node_fs49.promises.rm(dir, { recursive: true, force: true });
+    await import_node_fs50.promises.rm(dir, { recursive: true, force: true });
   }
   async updatePort(name, newPort) {
     if (newPort < PROJECT_PORT_MIN || newPort > PROJECT_PORT_MAX) {
@@ -64025,7 +64198,7 @@ var ProjectStore = class {
       throw new Error(`port ${newPort} already used / \u5DF2\u88AB project "${conflict.name}" \u5360\u7528`);
     }
     const updated = { ...target, port: newPort };
-    await import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
+    await import_node_fs50.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
     return updated;
   }
   /**
@@ -64042,7 +64215,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`invalid prodUrl "${url}": ${validated.error.message}`);
     }
-    await import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs50.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
   /**
@@ -64063,7 +64236,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`invalid publishJob: ${validated.error.message}`);
     }
-    await import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs50.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
   /** 清掉 .clawd-project.json.publishJob 字段。其他字段保持原样。 */
@@ -64078,7 +64251,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`failed to clear publishJob: ${validated.error.message}`);
     }
-    await import_node_fs49.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs50.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
 };
@@ -64199,8 +64372,8 @@ var PublishJobRegistry = class {
 
 // src/app-builder/publish-job-runner.ts
 var import_node_child_process17 = require("child_process");
-var import_node_fs50 = require("fs");
-var import_node_path62 = require("path");
+var import_node_fs51 = require("fs");
+var import_node_path64 = require("path");
 
 // src/app-builder/publish-stage-parser.ts
 var STAGE_RE = /^\s*::stage::(build|deploy|verify)\s*$/;
@@ -64232,10 +64405,10 @@ async function startPublishJob(deps, args) {
     return { jobId: registry2.get(args.name).jobId, status: "already-publishing" };
   }
   const projDir = projectDir(args.name);
-  const logPath = (0, import_node_path62.join)(projDir, ".publish.log");
+  const logPath = (0, import_node_path64.join)(projDir, ".publish.log");
   let logStream = null;
   try {
-    logStream = (0, import_node_fs50.createWriteStream)(logPath, { flags: "w" });
+    logStream = (0, import_node_fs51.createWriteStream)(logPath, { flags: "w" });
   } catch {
     logStream = null;
   }
@@ -64492,8 +64665,8 @@ async function recoverInterruptedJobs(deps) {
 
 // src/handlers/app-builder.ts
 init_protocol();
-var import_node_path63 = require("path");
-var import_node_fs51 = require("fs");
+var import_node_path65 = require("path");
+var import_node_fs52 = require("fs");
 var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
 var DEV_SERVER_READY_TIMEOUT_MS = 3e4;
 async function recoverInterruptedPublishJobs(store, logger) {
@@ -64574,7 +64747,7 @@ function buildAppBuilderHandlers(deps) {
   async function listAllUsersProjects() {
     if (!deps.usersRoot || !deps.getStore) return [];
     const getStore = deps.getStore;
-    const userIds = await import_node_fs51.promises.readdir(deps.usersRoot).catch(() => []);
+    const userIds = await import_node_fs52.promises.readdir(deps.usersRoot).catch(() => []);
     const perUser = await Promise.all(
       userIds.map((uid) => getStore(uid).list().catch(() => []))
     );
@@ -64643,8 +64816,8 @@ function buildAppBuilderHandlers(deps) {
     const project = await userStore.create(f.name, reservedPorts);
     try {
       const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(session.ownerPersonaId ?? "") : deps.personaRoot;
-      const templateSrcDir = (0, import_node_path63.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE);
-      const scaffoldScript = (0, import_node_path63.join)(deps.deployKitRoot, "scripts", "new-extension.sh");
+      const templateSrcDir = (0, import_node_path65.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE);
+      const scaffoldScript = (0, import_node_path65.join)(deps.deployKitRoot, "scripts", "new-extension.sh");
       const scaffoldResult = await userStore.scaffold(project.name, templateSrcDir, scaffoldScript);
       deps.logger?.info("app-builder.scaffold.done", {
         name: project.name,
@@ -64848,7 +65021,7 @@ function buildAppBuilderHandlers(deps) {
       await userStore.clearPublishJob(args.name);
     }
     const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(boundSession.ownerPersonaId ?? "") : deps.personaRoot;
-    const scriptPath = (0, import_node_path63.join)(deps.deployKitRoot, "scripts", "publish.sh");
+    const scriptPath = (0, import_node_path65.join)(deps.deployKitRoot, "scripts", "publish.sh");
     deps.logger?.info("app-builder.publish.start", {
       name: args.name,
       sessionId: boundSession.sessionId,
@@ -65404,20 +65577,20 @@ function mapPrState(state, isDraft) {
   if (state === "CLOSED") return "closed";
   return isDraft === true ? "draft" : "open";
 }
-function asRecord(v2) {
+function asRecord2(v2) {
   return typeof v2 === "object" && v2 !== null ? v2 : {};
 }
 function lastCommitRollup(node) {
-  const first = asRecord(node.commits).nodes?.[0];
-  return asRecord(asRecord(first).commit).statusCheckRollup;
+  const first = asRecord2(node.commits).nodes?.[0];
+  return asRecord2(asRecord2(first).commit).statusCheckRollup;
 }
 function parsePrListResponse(json) {
-  const nodes = asRecord(asRecord(asRecord(json).data).search).nodes ?? [];
+  const nodes = asRecord2(asRecord2(asRecord2(json).data).search).nodes ?? [];
   const items = [];
   for (const raw of nodes) {
-    const n = asRecord(raw);
+    const n = asRecord2(raw);
     if (typeof n.number !== "number") continue;
-    const nameWithOwner = String(asRecord(n.repository).nameWithOwner ?? "");
+    const nameWithOwner = String(asRecord2(n.repository).nameWithOwner ?? "");
     const slash = nameWithOwner.indexOf("/");
     if (slash <= 0) continue;
     const rollup = lastCommitRollup(n);
@@ -65431,27 +65604,27 @@ function parsePrListResponse(json) {
       additions: typeof n.additions === "number" ? n.additions : 0,
       deletions: typeof n.deletions === "number" ? n.deletions : 0,
       updatedAt: String(n.updatedAt ?? ""),
-      author: String(asRecord(n.author).login ?? ""),
-      checksRollup: rollup == null ? "none" : mapRollupState(asRecord(rollup).state)
+      author: String(asRecord2(n.author).login ?? ""),
+      checksRollup: rollup == null ? "none" : mapRollupState(asRecord2(rollup).state)
     });
   }
   return items;
 }
 function parsePrDetailResponse(json, repoRef) {
-  const pr = asRecord(asRecord(asRecord(json).data).repository).pullRequest;
+  const pr = asRecord2(asRecord2(asRecord2(json).data).repository).pullRequest;
   if (pr == null || typeof pr !== "object") return null;
-  const n = asRecord(pr);
+  const n = asRecord2(pr);
   const rollup = lastCommitRollup(n);
-  const contextNodes = asRecord(asRecord(rollup).contexts).nodes ?? [];
+  const contextNodes = asRecord2(asRecord2(rollup).contexts).nodes ?? [];
   const checks = [];
   for (const c of contextNodes) {
-    const mapped = mapCheckNode(asRecord(c));
+    const mapped = mapCheckNode(asRecord2(c));
     if (mapped) checks.push(mapped);
   }
-  const reviewerNodes = asRecord(n.reviewRequests).nodes ?? [];
-  const reviewers = reviewerNodes.map((r) => String(asRecord(asRecord(r).requestedReviewer).login ?? "")).filter((s) => s !== "");
+  const reviewerNodes = asRecord2(n.reviewRequests).nodes ?? [];
+  const reviewers = reviewerNodes.map((r) => String(asRecord2(asRecord2(r).requestedReviewer).login ?? "")).filter((s) => s !== "");
   const mergeable = n.mergeable === "MERGEABLE" ? "mergeable" : n.mergeable === "CONFLICTING" ? "conflicting" : "unknown";
-  const commentCountRaw = asRecord(n.comments).totalCount;
+  const commentCountRaw = asRecord2(n.comments).totalCount;
   return {
     owner: repoRef.owner,
     repo: repoRef.repo,
@@ -65459,7 +65632,7 @@ function parsePrDetailResponse(json, repoRef) {
     title: String(n.title ?? ""),
     body: String(n.body ?? ""),
     state: mapPrState(n.state, n.isDraft),
-    author: String(asRecord(n.author).login ?? ""),
+    author: String(asRecord2(n.author).login ?? ""),
     updatedAt: String(n.updatedAt ?? ""),
     headRef: String(n.headRefName ?? ""),
     baseRef: String(n.baseRefName ?? ""),
@@ -65469,7 +65642,7 @@ function parsePrDetailResponse(json, repoRef) {
     mergeable,
     reviewers,
     commentCount: typeof commentCountRaw === "number" ? commentCountRaw : 0,
-    checksRollup: rollup == null ? "none" : mapRollupState(asRecord(rollup).state),
+    checksRollup: rollup == null ? "none" : mapRollupState(asRecord2(rollup).state),
     checks
   };
 }
@@ -65607,7 +65780,7 @@ function buildVisitorHandlers(deps) {
 
 // src/extension/registry.ts
 var import_promises14 = __toESM(require("fs/promises"), 1);
-var import_node_path64 = __toESM(require("path"), 1);
+var import_node_path66 = __toESM(require("path"), 1);
 async function loadAll(root) {
   let entries;
   try {
@@ -65620,13 +65793,13 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path64.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path66.default.join(root, ent.name), ent.name));
   }
   records.sort((a, b2) => a.extId < b2.extId ? -1 : a.extId > b2.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path64.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path66.default.join(dir, "manifest.json");
   let raw;
   try {
     raw = await import_promises14.default.readFile(manifestPath, "utf8");
@@ -65671,7 +65844,7 @@ async function loadOne(dir, dirName) {
 
 // src/extension/uninstall.ts
 var import_promises15 = __toESM(require("fs/promises"), 1);
-var import_node_path65 = __toESM(require("path"), 1);
+var import_node_path67 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -65680,7 +65853,7 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path65.default.join(deps.root, deps.extId);
+  const dir = import_node_path67.default.join(deps.root, deps.extId);
   try {
     await import_promises15.default.access(dir);
   } catch {
@@ -65698,14 +65871,14 @@ init_protocol();
 
 // src/peer-ops/run-command.ts
 var import_node_child_process18 = require("child_process");
-var import_node_os23 = __toESM(require("os"), 1);
+var import_node_os24 = __toESM(require("os"), 1);
 var DEFAULT_TIMEOUT_MS5 = 3e4;
 var MAX_TIMEOUT_MS = 3e5;
 var MAX_OUTPUT_BYTES = 1048576;
 function runCommand(command, opts = {}) {
   const timeoutMs = Math.min(opts.timeoutMs ?? DEFAULT_TIMEOUT_MS5, MAX_TIMEOUT_MS);
   return new Promise((resolve9) => {
-    const child = (0, import_node_child_process18.spawn)("bash", ["-c", command], { cwd: import_node_os23.default.homedir() });
+    const child = (0, import_node_child_process18.spawn)("bash", ["-c", command], { cwd: import_node_os24.default.homedir() });
     const out = [];
     const err = [];
     let outBytes = 0;
@@ -65913,7 +66086,7 @@ function buildMethodHandlers(deps) {
       broadcast: deps.broadcastToOwners
     }),
     ...buildMasterHandlers({
-      authorityTablePath: import_node_path66.default.join(deps.masterDataDir, "master-authority.json")
+      authorityTablePath: import_node_path68.default.join(deps.masterDataDir, "master-authority.json")
     }),
     ...buildTopicHandlers({
       topicStore: deps.topicStore,
@@ -65949,18 +66122,18 @@ init_claude();
 
 // src/tools/shell-path.ts
 var import_node_child_process19 = require("child_process");
-var import_node_os24 = __toESM(require("os"), 1);
+var import_node_os25 = __toESM(require("os"), 1);
 function refreshPathFromLoginShell() {
   if (process.platform === "win32") return;
-  const shell = process.env.SHELL ?? import_node_os24.default.userInfo().shell ?? "/bin/zsh";
+  const shell = process.env.SHELL ?? import_node_os25.default.userInfo().shell ?? "/bin/zsh";
   try {
     const out = (0, import_node_child_process19.execFileSync)(shell, ["-ilc", 'command echo -n "$PATH"'], {
       encoding: "utf8",
       timeout: 3e3,
       stdio: ["ignore", "pipe", "ignore"]
     });
-    const path89 = out.trim();
-    if (path89) process.env.PATH = path89;
+    const path91 = out.trim();
+    if (path91) process.env.PATH = path91;
   } catch {
   }
 }
@@ -66374,7 +66547,7 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 
 // src/extension/runtime.ts
 var import_node_child_process22 = require("child_process");
-var import_node_path67 = __toESM(require("path"), 1);
+var import_node_path69 = __toESM(require("path"), 1);
 var import_promises16 = require("timers/promises");
 
 // src/extension/port-allocator.ts
@@ -66475,7 +66648,7 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path67.default.join(this.root, extId);
+    const dir = import_node_path69.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
@@ -66587,7 +66760,7 @@ ${handle.stderrTail}`
 
 // src/extension/published-channels.ts
 var import_promises17 = __toESM(require("fs/promises"), 1);
-var import_node_path68 = __toESM(require("path"), 1);
+var import_node_path70 = __toESM(require("path"), 1);
 init_zod();
 var PublishedChannelsError = class extends Error {
   constructor(code, message) {
@@ -66686,7 +66859,7 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises17.default.mkdir(import_node_path68.default.dirname(this.filePath), { recursive: true });
+    await import_promises17.default.mkdir(import_node_path70.default.dirname(this.filePath), { recursive: true });
     await import_promises17.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
     await import_promises17.default.rename(tmp, this.filePath);
   }
@@ -66694,7 +66867,7 @@ var PublishedChannelStore = class {
 
 // src/extension/bundle-cache.ts
 var import_promises18 = __toESM(require("fs/promises"), 1);
-var import_node_path69 = __toESM(require("path"), 1);
+var import_node_path71 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -66703,14 +66876,14 @@ var BundleCache = class {
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
     await import_promises18.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path69.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path71.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
     await import_promises18.default.writeFile(tmp, buffer, { mode: 384 });
     await import_promises18.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path69.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path71.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
       return await import_promises18.default.readFile(file);
     } catch (e) {
@@ -66720,7 +66893,7 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path69.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path71.default.join(this.rootDir, `${snapshotHash}.zip`);
     await import_promises18.default.rm(file, { force: true });
   }
 };
@@ -66741,26 +66914,26 @@ async function startDaemon(config) {
     },
     source: "daemon",
     sampling: logShippingCfg.sampling,
-    homeDir: import_node_os25.default.homedir()
+    homeDir: import_node_os26.default.homedir()
   });
-  const logDir = import_node_path70.default.join(config.dataDir, "log");
-  import_node_fs52.default.mkdirSync(logDir, { recursive: true });
+  const logDir = import_node_path72.default.join(config.dataDir, "log");
+  import_node_fs53.default.mkdirSync(logDir, { recursive: true });
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path70.default.join(logDir, "clawd.log"),
+    file: import_node_path72.default.join(logDir, "clawd.log"),
     logClient
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const screenIdleProbeLogger = createFileOnlyLogger({
-    file: import_node_path70.default.join(logDir, "screen-idle-probe.log"),
+    file: import_node_path72.default.join(logDir, "screen-idle-probe.log"),
     level: "debug"
   });
   logger.info("screen-idle probe logger enabled", {
-    file: import_node_path70.default.join(logDir, "screen-idle-probe.log")
+    file: import_node_path72.default.join(logDir, "screen-idle-probe.log")
   });
   const CAP_TARGETS = [
-    import_node_path70.default.join(logDir, "clawd.log"),
-    import_node_path70.default.join(logDir, "screen-idle-probe.log")
+    import_node_path72.default.join(logDir, "clawd.log"),
+    import_node_path72.default.join(logDir, "screen-idle-probe.log")
   ];
   const LOG_CAP_MAX_BYTES = 10 * 1024 * 1024;
   const LOG_CAP_KEEP_BYTES = 5 * 1024 * 1024;
@@ -66882,8 +67055,8 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path70.default.join(config.dataDir, "personas"));
-  const usersRoot = import_node_path70.default.join(config.dataDir, "users");
+  const personaStore = new PersonaStore(import_node_path72.default.join(config.dataDir, "personas"));
+  const usersRoot = import_node_path72.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -66907,7 +67080,7 @@ async function startDaemon(config) {
   retirePersonaBuilder({ store: personaStore, logger });
   const groupFileStore = new GroupFileStore({ dataDir: config.dataDir, logger });
   const dispatchStore = createDispatchStore({
-    filePath: import_node_path70.default.join(config.dataDir, "dispatch.json"),
+    filePath: import_node_path72.default.join(config.dataDir, "dispatch.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("dispatch store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
@@ -66916,7 +67089,7 @@ async function startDaemon(config) {
   await dispatchStore.load();
   dispatchStore.markInterruptedAsFailed((/* @__PURE__ */ new Date()).toISOString());
   const channelStore = createChannelStore({
-    filePath: import_node_path70.default.join(config.dataDir, "channels.json"),
+    filePath: import_node_path72.default.join(config.dataDir, "channels.json"),
     now: () => Date.now(),
     genId: () => `ch-${(0, import_node_crypto22.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("channel store flush failed", {
@@ -66925,7 +67098,7 @@ async function startDaemon(config) {
   });
   await channelStore.load();
   const topicStore = createTopicStore({
-    filePath: import_node_path70.default.join(config.dataDir, "topics.json"),
+    filePath: import_node_path72.default.join(config.dataDir, "topics.json"),
     now: () => Date.now(),
     genId: () => `tp-${(0, import_node_crypto22.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("topic store flush failed", {
@@ -66952,18 +67125,18 @@ async function startDaemon(config) {
       });
     }
   });
-  const here = typeof __dirname === "string" ? __dirname : import_node_path70.default.dirname((0, import_node_url4.fileURLToPath)(import_meta7.url));
+  const here = typeof __dirname === "string" ? __dirname : import_node_path72.default.dirname((0, import_node_url4.fileURLToPath)(import_meta7.url));
   const mcpConfigs = [];
   const mcpDaemonUrl = `http://127.0.0.1:${config.port}`;
   const dispatchServerCandidates = [
-    import_node_path70.default.join(here, "dispatch", "mcp-server.cjs"),
+    import_node_path72.default.join(here, "dispatch", "mcp-server.cjs"),
     // 生产 dist/index → dist/dispatch/mcp-server.cjs
-    import_node_path70.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
+    import_node_path72.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
-  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
+  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs53.default.existsSync(p2));
   if (dispatchServerScriptPath) {
-    const dispatchLogPath = import_node_path70.default.join(logDir, "dispatch-mcp-server.log");
+    const dispatchLogPath = import_node_path72.default.join(logDir, "dispatch-mcp-server.log");
     const dispatchCfgPath = writeDispatchMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: dispatchServerScriptPath,
@@ -66983,12 +67156,12 @@ async function startDaemon(config) {
     });
   }
   const ticketServerCandidates = [
-    import_node_path70.default.join(here, "ticket", "mcp-server.cjs"),
-    import_node_path70.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
+    import_node_path72.default.join(here, "ticket", "mcp-server.cjs"),
+    import_node_path72.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
-  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
+  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs53.default.existsSync(p2));
   if (ticketServerScriptPath) {
-    const ticketLogPath = import_node_path70.default.join(logDir, "ticket-mcp-server.log");
+    const ticketLogPath = import_node_path72.default.join(logDir, "ticket-mcp-server.log");
     const ticketCfgPath = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
@@ -67010,12 +67183,12 @@ async function startDaemon(config) {
     });
   }
   const shiftServerCandidates = [
-    import_node_path70.default.join(here, "shift", "mcp-server.cjs"),
-    import_node_path70.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
+    import_node_path72.default.join(here, "shift", "mcp-server.cjs"),
+    import_node_path72.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
-  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
+  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs53.default.existsSync(p2));
   if (shiftServerScriptPath) {
-    const shiftLogPath = import_node_path70.default.join(logDir, "shift-mcp-server.log");
+    const shiftLogPath = import_node_path72.default.join(logDir, "shift-mcp-server.log");
     const shiftCfgPath = await writeShiftMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: shiftServerScriptPath,
@@ -67036,12 +67209,12 @@ async function startDaemon(config) {
     );
   }
   const inboxServerCandidates = [
-    import_node_path70.default.join(here, "inbox", "mcp-server.cjs"),
-    import_node_path70.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
+    import_node_path72.default.join(here, "inbox", "mcp-server.cjs"),
+    import_node_path72.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
   ];
-  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
+  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs53.default.existsSync(p2));
   if (inboxServerScriptPath) {
-    const inboxLogPath = import_node_path70.default.join(logDir, "inbox-mcp-server.log");
+    const inboxLogPath = import_node_path72.default.join(logDir, "inbox-mcp-server.log");
     const inboxCfgPath = await writeInboxMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: inboxServerScriptPath,
@@ -67062,10 +67235,10 @@ async function startDaemon(config) {
     );
   }
   const peerOpsServerCandidates = [
-    import_node_path70.default.join(here, "peer-ops", "mcp-server.cjs"),
-    import_node_path70.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
+    import_node_path72.default.join(here, "peer-ops", "mcp-server.cjs"),
+    import_node_path72.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
   ];
-  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
+  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs53.default.existsSync(p2));
   if (peerOpsServerScriptPath) {
     const peerOpsCfgPath = writePeerOpsMcpConfig({
       dataDir: config.dataDir,
@@ -67085,12 +67258,12 @@ async function startDaemon(config) {
     );
   }
   const rpcToolServerCandidates = [
-    import_node_path70.default.join(here, "rpc-tool", "mcp-server.cjs"),
-    import_node_path70.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
+    import_node_path72.default.join(here, "rpc-tool", "mcp-server.cjs"),
+    import_node_path72.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
   ];
-  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p2) => import_node_fs52.default.existsSync(p2));
+  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p2) => import_node_fs53.default.existsSync(p2));
   if (rpcToolServerScriptPath) {
-    const rpcToolLogPath = import_node_path70.default.join(logDir, "rpc-tool-mcp-server.log");
+    const rpcToolLogPath = import_node_path72.default.join(logDir, "rpc-tool-mcp-server.log");
     const rpcToolCfgPath = writeRpcToolMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: rpcToolServerScriptPath,
@@ -67111,7 +67284,7 @@ async function startDaemon(config) {
     );
   }
   const shiftStore = createShiftStore({
-    filePath: import_node_path70.default.join(config.dataDir, "shift.json"),
+    filePath: import_node_path72.default.join(config.dataDir, "shift.json"),
     ownerIdProvider: () => ownerPrincipalId,
     now: () => Date.now()
   });
@@ -67133,7 +67306,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path70.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path72.default.join(config.dataDir, "personas"),
     // dispatch / shift 自动化 spawn 按 persona 绑定 tool 起 B session（codex persona 用 codex）。
     // personaRegistry 声明在 manager 之后（同作用域 const，调用时机在启动完成后，无 TDZ 风险）。
     getPersonaDefaults: (personaId2) => personaRegistry.get(personaId2),
@@ -67187,10 +67360,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path70.default.isAbsolute(input.relPath) ? input.relPath : import_node_path70.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path72.default.isAbsolute(input.relPath) ? input.relPath : import_node_path72.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs52.default.statSync(absPath).size;
+          size = import_node_fs53.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -67220,9 +67393,9 @@ async function startDaemon(config) {
     logger.info("projects.seed-dropped", { dropped: droppedSeed.dropped, backup: droppedSeed.backup });
   }
   const projectsStore = new ProjectsStore({
-    file: import_node_path70.default.join(config.dataDir, "projects.json"),
+    file: import_node_path72.default.join(config.dataDir, "projects.json"),
     clawdDir: config.dataDir,
-    codexStateFile: import_node_path70.default.join(import_node_os25.default.homedir(), ".codex", ".codex-global-state.json"),
+    codexStateFile: import_node_path72.default.join(import_node_os26.default.homedir(), ".codex", ".codex-global-state.json"),
     logger
   });
   const observer = new SessionObserver({
@@ -67282,13 +67455,13 @@ async function startDaemon(config) {
     screenIdleProbeLogger
   }) : new ClaudeAdapter({ logger, historyReader: new ClaudeHistoryReader() });
   registerAdapter("claude", claudeAdapter);
-  const codexIsolatedHome = import_node_path70.default.join(config.dataDir, "codex-home");
+  const codexIsolatedHome = import_node_path72.default.join(config.dataDir, "codex-home");
   try {
-    import_node_fs52.default.mkdirSync(codexIsolatedHome, { recursive: true });
+    import_node_fs53.default.mkdirSync(codexIsolatedHome, { recursive: true });
     for (const f of ["auth.json", "config.toml"]) {
-      const link = import_node_path70.default.join(codexIsolatedHome, f);
-      const target = import_node_path70.default.join(import_node_os25.default.homedir(), ".codex", f);
-      if (!import_node_fs52.default.existsSync(link) && import_node_fs52.default.existsSync(target)) import_node_fs52.default.symlinkSync(target, link);
+      const link = import_node_path72.default.join(codexIsolatedHome, f);
+      const target = import_node_path72.default.join(import_node_os26.default.homedir(), ".codex", f);
+      if (!import_node_fs53.default.existsSync(link) && import_node_fs53.default.existsSync(target)) import_node_fs53.default.symlinkSync(target, link);
     }
   } catch (err) {
     logger.warn("codex isolated home setup failed", { err: String(err) });
@@ -67301,11 +67474,11 @@ async function startDaemon(config) {
       // projectPaths 每次调用现取 —— 用户新建 project 后立即生效，不用重启 daemon
       codexHomeFor: (cwd) => resolveCodexHome({
         cwd,
-        personaRoot: import_node_path70.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path72.default.join(config.dataDir, "personas"),
         // 必须用 listMerged（Codex registry ∪ 叠加层）：只用本地 list() 的话，用户在
         // Codex 里建的 project 不在表里，在它下面开的会话会被误判成隔离 → Codex 侧看不到
         projectPaths: projectsStore.listMerged().map((x) => x.path),
-        sharedHome: import_node_path70.default.join(import_node_os25.default.homedir(), ".codex"),
+        sharedHome: import_node_path72.default.join(import_node_os26.default.homedir(), ".codex"),
         isolatedHome: codexIsolatedHome
       })
     })
@@ -67589,11 +67762,11 @@ async function startDaemon(config) {
         // 'persona/<pid>/owner'，default 走 'default'。
         getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
         // guest path guard：candidate 必须在 personaRoot 子树或调用者自己的 user-dir 下
-        personaRoot: import_node_path70.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path72.default.join(config.dataDir, "personas"),
         usersRoot
       },
       // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-      personaRoot: import_node_path70.default.join(config.dataDir, "personas"),
+      personaRoot: import_node_path72.default.join(config.dataDir, "personas"),
       // v2 多人 persona 隔离：handler 派生 guest user-dir 放行
       usersRoot,
       // v2 Phase 6: whoami handler 装在 owner principal.displayName + persona 解析
@@ -67692,11 +67865,11 @@ async function startDaemon(config) {
       // 发布上线脚手架化 (spec 2026-06-03 §5.2):
       // appBuilderPersonaRoot 用于拼 publish.sh 绝对路径（persona-app-builder 安装在
       // dataDir/personas/persona-app-builder 之下，extension-kit/scripts/publish.sh 是相对路径）。
-      appBuilderPersonaRoot: import_node_path70.default.join(config.dataDir, "personas", "persona-app-builder"),
+      appBuilderPersonaRoot: import_node_path72.default.join(config.dataDir, "personas", "persona-app-builder"),
       // 共享 deploy-kit 根：scaffold/publish 脚本骨架 + 阿里云凭证单一真源。
-      deployKitRoot: import_node_path70.default.join(config.dataDir, "deploy-kit"),
+      deployKitRoot: import_node_path72.default.join(config.dataDir, "deploy-kit"),
       // scaffold/publish 按当前 session 的 persona 解析其安装根，让每个 persona 用自己的模板/注入配置。
-      resolvePersonaRoot: (personaId2) => import_node_path70.default.join(config.dataDir, "personas", personaId2),
+      resolvePersonaRoot: (personaId2) => import_node_path72.default.join(config.dataDir, "personas", personaId2),
       // 发布上线脚手架化 (spec 2026-06-03 §5.2.2):
       // 复用 SessionManagerDeps.broadcastFrame 同款 dispatch 逻辑 —— runner 调 manager.send
       // 取回 broadcast 帧后逐帧 push 到 transport，跟 manager 自身的 deps 一致。
@@ -67751,7 +67924,7 @@ async function startDaemon(config) {
         sourceSessionId: args.sourceSessionId
       });
       const sourceFile = manager.findOwnedSession(args.sourceSessionId);
-      const sourceJsonlPath = resolveSourceJsonlPath(sourceFile, import_node_os25.default.homedir());
+      const sourceJsonlPath = resolveSourceJsonlPath(sourceFile, import_node_os26.default.homedir());
       logger.info("dispatch.spawnB.source-resolved", {
         dispatchId: args.dispatchId,
         sourceJsonlPath,
@@ -67817,7 +67990,7 @@ async function startDaemon(config) {
   });
   shiftScheduler.start();
   logger.info("shift scheduler started", { shiftCount: shiftStore.list().length });
-  const larkBotStore = createLarkBotBindingStore(import_node_path70.default.join(config.dataDir, "personas"));
+  const larkBotStore = createLarkBotBindingStore(import_node_path72.default.join(config.dataDir, "personas"));
   const larkBotCloud = createLarkBotCloudClient({
     api: config.clawosApi ?? DEFAULT_CLAWOS_API,
     apiKey: resolveClawdTicketsApiKey(),
@@ -67831,7 +68004,7 @@ async function startDaemon(config) {
     store: larkBotStore,
     fetchResource: (appId, messageId, fileKey, maxBytes, type) => larkBotCloud.fetchResource(appId, messageId, fileKey, maxBytes, type),
     // 图片落 guest userWorkDir 下（capId = lark-<chat_id>）：CC 经 --add-dir + allowRead carve 可 Read
-    mediaRootFor: (chatId) => import_node_path70.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
+    mediaRootFor: (chatId) => import_node_path72.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
     isShuttingDown: () => larkDraining,
     logger: {
       warn: (msg) => logger.warn(msg),
@@ -68136,8 +68309,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path70.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path70.default.join(logDir, "frpc.log")}`
+        `Frpc config: ${import_node_path72.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path72.default.join(logDir, "frpc.log")}`
       ];
       const width2 = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width2 + 4);
@@ -68150,8 +68323,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path70.default.join(config.dataDir, "connect.txt");
-        import_node_fs52.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path72.default.join(config.dataDir, "connect.txt");
+        import_node_fs53.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -68238,9 +68411,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path70.default.join(dataDir, "persons");
+  const dir = import_node_path72.default.join(dataDir, "persons");
   try {
-    import_node_fs52.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs53.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }