@clawos-dev/clawd 0.2.440 → 0.2.441

package/dist/cli.cjs

@@ -7089,10 +7089,9 @@ var init_persona_schemas = __esm({
       writableRoots: external_exports.array(external_exports.string()).optional(),
       // 禁读 glob（相对 workspace root 或绝对），如 ".secrets/**"、"**/*.env"。
       denyRead: external_exports.array(external_exports.string()).optional(),
-      // true → 网络全放(*)；false → 断网。**缺省等于联网**：daemon 写入的默认值是 network:true
-      // （对齐 claude guest 一贯的域名全放，见 spec 2026-09-01-codex-guest-network §1.3），
-      // 且 manager / UI 读到 undefined 时都回落 true —— 两侧必须同向，否则出现
-      // 「卡片显示开、实际断网」的幽灵态。
+      // true → 网络全放(*)；false / 缺省 → 断网（fail-closed）。**「新建默认联网」不靠这里的缺省**，
+      // 靠 persona 创建时就把 CODEX_SANDBOX_DEFAULT 物化进文件（见 PersonaManager.create）——
+      // 缺省只在文件损坏这种异常路径上出现，那时断网是更安全的一侧。
       network: external_exports.boolean().optional()
     }).strict();
     PersonaSandboxSettingsSchema = external_exports.object({
@@ -47089,7 +47088,7 @@ var SessionManager = class {
       subSessionMeta.codexSandbox = {
         writableRoots: [subSessionMeta.userWorkDir, ...(codexCfg?.writableRoots ?? []).map(expand)],
         denyRead: codexCfg?.denyRead ?? [],
-        network: codexCfg?.network ?? true
+        network: codexCfg?.network ?? false
       };
     }
     if (subSessionMeta?.personaMode === "owner" && file.projectPath) {
@@ -49466,408 +49465,20 @@ var PersonaRegistry = class {
   }
 };
 
-// src/skills/scanner.ts
-var import_node_fs9 = __toESM(require("fs"), 1);
-var import_node_os6 = __toESM(require("os"), 1);
-var import_node_path9 = __toESM(require("path"), 1);
-
-// src/skills/frontmatter.ts
-var STRIP_QUOTES = /^["']|["']$/g;
-function strip(s) {
-  return s.trim().replace(STRIP_QUOTES, "");
-}
-function parseFrontmatter(content, keys) {
-  const out = {};
-  if (!content.startsWith("---")) return out;
-  const end = content.indexOf("---", 3);
-  if (end === -1) return out;
-  const lines = content.slice(3, end).split("\n");
-  for (let i = 0; i < lines.length; i++) {
-    const trimmed = lines[i].trim();
-    for (const key of keys) {
-      const prefix = `${key}:`;
-      if (!trimmed.startsWith(prefix)) continue;
-      const rest = trimmed.slice(prefix.length).trim();
-      if (rest === "|" || rest === ">" || rest === "|-" || rest === ">-") {
-        const parts = [];
-        for (let j = i + 1; j < lines.length; j++) {
-          const next = lines[j];
-          if (next.length === 0) {
-            parts.push("");
-            continue;
-          }
-          if (!/^\s/.test(next)) break;
-          parts.push(next.replace(/^\s+/, ""));
-        }
-        const value = parts.filter(Boolean).join(" ").trim();
-        if (value) out[key] = value;
-      } else {
-        const value = strip(rest);
-        if (value) out[key] = value;
-      }
-      break;
-    }
-  }
-  return out;
-}
-
-// src/skills/builtin-cc-resources.ts
-var BUILTIN_SKILLS = [
-  { name: "update-config", source: "builtin", description: "Update Claude Code configuration." },
-  { name: "keybindings-help", source: "builtin", description: "Show available keybindings." },
-  { name: "verify", source: "builtin", description: "Verify the implementation." },
-  { name: "debug", source: "builtin", description: "Debug current issue." },
-  { name: "lorem-ipsum", source: "builtin", description: "Generate lorem ipsum placeholder text." },
-  { name: "skillify", source: "builtin", description: "Convert a process into a reusable skill." },
-  { name: "remember", source: "builtin", description: "Remember context for later use." },
-  { name: "simplify", source: "builtin", description: "Simplify the code or message." },
-  { name: "batch", source: "builtin", description: "Run a batch of similar operations." },
-  { name: "stuck", source: "builtin", description: "Help unstick a stalled task." },
-  { name: "loop", source: "builtin", description: "Loop a task until a condition is met." },
-  { name: "cron-list", source: "builtin", description: "List scheduled cron tasks." },
-  { name: "cron-delete", source: "builtin", description: "Delete a scheduled cron task." },
-  { name: "dream", source: "builtin", description: "Brainstorm freely without constraints." },
-  { name: "hunter", source: "builtin", description: "Hunt down a bug or root cause." },
-  { name: "schedule", source: "builtin", description: "Schedule a task to run later." },
-  { name: "claude-api", source: "builtin", description: "Use the Claude API directly." },
-  { name: "claude-in-chrome", source: "builtin", description: "Drive Claude inside Chrome via the Chrome extension." }
-];
-var BUILTIN_AGENTS = [
-  {
-    name: "general-purpose",
-    source: "builtin",
-    description: "General-purpose agent for researching complex questions and executing multi-step tasks.",
-    whenToUse: "When you are searching for a keyword or file and are not confident you will find the right match in the first few tries."
-  },
-  {
-    name: "statusline-setup",
-    source: "builtin",
-    description: "Configure the user's Claude Code status line setting.",
-    whenToUse: "When the user is setting up or changing their status line configuration."
-  },
-  {
-    name: "Explore",
-    source: "builtin",
-    description: "Explore the codebase to gather context.",
-    whenToUse: "Before making changes that require understanding the surrounding code."
-  },
-  {
-    name: "Plan",
-    source: "builtin",
-    description: "Produce an implementation plan before writing code.",
-    whenToUse: "When the task is non-trivial and would benefit from an explicit plan."
-  },
-  {
-    name: "claude-code-guide",
-    source: "builtin",
-    description: "Guide the user through Claude Code features.",
-    whenToUse: "When the user needs help understanding what Claude Code can do."
-  },
-  {
-    name: "verification",
-    source: "builtin",
-    description: "Verify that a change works as intended.",
-    whenToUse: "After implementing a change, before declaring it done."
-  }
-];
-
-// src/skills/scanner.ts
-function parseDescription(content) {
-  const fields = parseFrontmatter(content, ["description"]);
-  return { description: fields.description ?? "" };
-}
-function isDirLikeSync(p2) {
-  try {
-    return import_node_fs9.default.statSync(p2).isDirectory();
-  } catch {
-    return false;
-  }
-}
-function scanSkillDir(dir, source, seen, out, pluginName) {
-  let entries;
-  try {
-    entries = import_node_fs9.default.readdirSync(dir, { withFileTypes: true });
-  } catch {
-    return;
-  }
-  for (const ent of entries) {
-    const entryPath = import_node_path9.default.join(dir, ent.name);
-    if (!ent.isDirectory() && !(ent.isSymbolicLink() && isDirLikeSync(entryPath))) continue;
-    let content;
-    try {
-      content = import_node_fs9.default.readFileSync(import_node_path9.default.join(entryPath, "SKILL.md"), "utf8");
-    } catch {
-      try {
-        content = import_node_fs9.default.readFileSync(import_node_path9.default.join(entryPath, "skill.md"), "utf8");
-      } catch {
-        continue;
-      }
-    }
-    const { description } = parseDescription(content);
-    const baseName = ent.name;
-    const name = pluginName ? `${pluginName}:${baseName}` : baseName;
-    if (seen.has(name)) continue;
-    seen.add(name);
-    const info = { name, source, path: entryPath, description: description || void 0 };
-    if (pluginName) info.plugin = pluginName;
-    out.push(info);
-  }
-}
-function listSkillsForDir(dir, source) {
-  const seen = /* @__PURE__ */ new Set();
-  const out = [];
-  scanSkillDir(dir, source, seen, out);
-  return out;
-}
-function scanCommandDir(dir, source, seen, out, pluginName) {
-  let entries;
-  try {
-    entries = import_node_fs9.default.readdirSync(dir, { withFileTypes: true });
-  } catch {
-    return;
-  }
-  for (const ent of entries) {
-    const entryPath = import_node_path9.default.join(dir, ent.name);
-    if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync(entryPath)) {
-      const ns = ent.name;
-      let subEntries;
-      try {
-        subEntries = import_node_fs9.default.readdirSync(entryPath, { withFileTypes: true });
-      } catch {
-        continue;
-      }
-      for (const se of subEntries) {
-        if (!se.name.endsWith(".md")) continue;
-        const sePath = import_node_path9.default.join(entryPath, se.name);
-        let content;
-        try {
-          content = import_node_fs9.default.readFileSync(sePath, "utf8");
-        } catch {
-          continue;
-        }
-        const cmd = se.name.replace(/\.md$/, "");
-        const { description } = parseDescription(content);
-        const qualified = `${ns}:${cmd}`;
-        const name = pluginName ? `${pluginName}:${qualified}` : qualified;
-        if (seen.has(name)) continue;
-        seen.add(name);
-        const info = { name, source, path: sePath, description: description || void 0 };
-        if (pluginName) info.plugin = pluginName;
-        out.push(info);
-      }
-    } else if (ent.name.endsWith(".md")) {
-      let content;
-      try {
-        content = import_node_fs9.default.readFileSync(entryPath, "utf8");
-      } catch {
-        continue;
-      }
-      const cmd = ent.name.replace(/\.md$/, "");
-      const { description } = parseDescription(content);
-      const name = pluginName ? `${pluginName}:${cmd}` : cmd;
-      if (seen.has(name)) continue;
-      seen.add(name);
-      const info = { name, source, path: entryPath, description: description || void 0 };
-      if (pluginName) info.plugin = pluginName;
-      out.push(info);
-    }
-  }
-}
-function readInstalledPlugins(home) {
-  const file = import_node_path9.default.join(home, ".claude", "plugins", "installed_plugins.json");
-  let raw;
-  try {
-    raw = import_node_fs9.default.readFileSync(file, "utf8");
-  } catch {
-    return [];
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    return [];
-  }
-  const out = [];
-  for (const [key, entries] of Object.entries(parsed.plugins ?? {})) {
-    if (!Array.isArray(entries) || entries.length === 0) continue;
-    const entry = entries[0];
-    if (!entry?.installPath) continue;
-    const pluginName = key.includes("@") ? key.slice(0, key.indexOf("@")) : key;
-    if (!pluginName) continue;
-    out.push({ name: pluginName, root: entry.installPath });
-  }
-  return out;
-}
-var SkillsScanner = class {
-  home;
-  extraPluginRoots;
-  constructor(opts = {}) {
-    this.home = opts.home ?? import_node_os6.default.homedir();
-    this.extraPluginRoots = opts.extraPluginRoots ?? [];
-  }
-  /**
-   * 对齐 cc-direct（openclaw-plugin-clawos/src/claude-code/skills-scanner.ts）：
-   * 1. global: ~/.claude/skills + ~/.claude/commands
-   * 2. project: <cwd>/.claude/skills + <cwd>/.claude/commands
-   * 3. plugin: installed_plugins.json 里每个 plugin 的 skills + commands
-   * 顺序 global → project → plugin，同名去重（先到先得）
-   */
-  list(args) {
-    const seen = /* @__PURE__ */ new Set();
-    const builtinBlock = [];
-    for (const b2 of BUILTIN_SKILLS) {
-      if (seen.has(b2.name)) continue;
-      seen.add(b2.name);
-      builtinBlock.push({
-        name: b2.name,
-        source: "builtin",
-        description: b2.description
-      });
-    }
-    const fsBlock = [];
-    scanSkillDir(import_node_path9.default.join(this.home, ".claude", "skills"), "global", seen, fsBlock);
-    scanCommandDir(import_node_path9.default.join(this.home, ".claude", "commands"), "global", seen, fsBlock);
-    scanSkillDir(import_node_path9.default.join(args.cwd, ".claude", "skills"), "project", seen, fsBlock);
-    scanCommandDir(import_node_path9.default.join(args.cwd, ".claude", "commands"), "project", seen, fsBlock);
-    const plugins = [...readInstalledPlugins(this.home), ...this.extraPluginRoots];
-    for (const { name, root } of plugins) {
-      scanSkillDir(import_node_path9.default.join(root, "skills"), "plugin", seen, fsBlock, name);
-      scanCommandDir(import_node_path9.default.join(root, "commands"), "plugin", seen, fsBlock, name);
-    }
-    fsBlock.sort((a, b2) => a.name < b2.name ? -1 : a.name > b2.name ? 1 : 0);
-    return [...builtinBlock, ...fsBlock];
-  }
-};
-
-// src/persona/manager.ts
-var PersonaManager = class {
-  constructor(deps) {
-    this.deps = deps;
-  }
-  deps;
-  /**
-   * slug 是 persona 的身份，label 只是显示名——两者刻意分开：id 落进文件路径 /
-   * 分享链接且创建后不可改，label 可中文、可随时改。此前 id 从 label 推导，
-   * 非 ascii 被剥空后一律 fallback 成 `persona-persona`。
-   *
-   * 撞名直接抛错而非改名：id 由调用方显式指定，静默换成带后缀的 id 等于把
-   * 用户的选择偷偷改掉。字符集校验在 PersonaCreateArgsSchema（路径穿越边界）。
-   */
-  create(args) {
-    const personaId2 = `persona-${args.slug}`;
-    if (this.deps.store.has(personaId2)) {
-      throw new Error(`personaId already exists: ${personaId2}`);
-    }
-    const now = Date.now();
-    const persona = {
-      personaId: personaId2,
-      label: args.label,
-      model: args.model,
-      // effort 兜底 high：persona 一律持有具体档位（spec 2026-08-12），UI 会带界面上高亮的
-      // 那一档，但 persona:create 也可能来自 butler 的 persona-authoring skill 这类不带该
-      // 字段的调用方——不兜的话要等下次 daemon 启动 backfill 才补上，中间建的 session 就漏了。
-      // 取值理由与 backfillPersonaSessionDefaults 一致（见那里的注释）。
-      effort: args.effort ?? "high",
-      tool: args.tool,
-      public: args.public ?? false,
-      iconKey: args.iconKey,
-      createdAt: now,
-      updatedAt: now
-    };
-    this.deps.store.write(persona, args.personality);
-    this.deps.registry.set(persona);
-    return persona;
-  }
-  update(personaId2, patch, texts) {
-    const existing = this.deps.registry.get(personaId2);
-    if (!existing) throw new Error(`persona not found: ${personaId2}`);
-    const { iconKey: iconKeyPatch, ...restPatch } = patch;
-    const updated = {
-      ...existing,
-      ...restPatch,
-      updatedAt: Date.now()
-    };
-    const toolChanged = patch.tool !== void 0 && (patch.tool ?? "claude") !== (existing.tool ?? "claude");
-    if (toolChanged) {
-      if (patch.model === void 0) delete updated.model;
-      if (patch.effort === void 0) delete updated.effort;
-    }
-    if (iconKeyPatch === null) {
-      delete updated.iconKey;
-    } else if (iconKeyPatch !== void 0) {
-      updated.iconKey = iconKeyPatch;
-    }
-    if (texts?.personality !== void 0) {
-      this.deps.store.writePersonality(personaId2, texts.personality);
-    }
-    if (texts?.personalityLocal !== void 0) {
-      this.deps.store.writePersonalityLocal(personaId2, texts.personalityLocal);
-    }
-    this.deps.store.writeMeta(updated);
-    this.deps.registry.set(updated);
-    return updated;
-  }
-  /** 读取 CLAUDE.md 内容；persona 目录或文件不存在时返回 null。透传给 handler 拼响应。 */
-  readPersonality(personaId2) {
-    return this.deps.store.readPersonality(personaId2);
-  }
-  /** 读人格补充层（`.clawd/personality.local.md`）；没写过返回 null。供 persona:get 拼响应。 */
-  readPersonalityLocal(personaId2) {
-    return this.deps.store.readPersonalityLocal(personaId2);
-  }
-  /** 扫 persona 私有 skills 目录；目录不存在返回空数组。供 persona:get handler 拼响应。 */
-  listSkills(personaId2) {
-    return listSkillsForDir(this.deps.store.skillsDir(personaId2), "project");
-  }
-  /**
-   * 读取 persona `.claude/settings.json` 中已启用的插件列表（value === true 的 key）。
-   * 文件不存在 / 解析失败 / 字段缺失 → 空数组。供 persona:get handler 拼响应。
-   */
-  listEnabledPlugins(personaId2) {
-    return this.deps.store.readEnabledPlugins(personaId2);
-  }
-  /** 读 sandbox-settings.json；不存在 / 损坏返回 null。供 persona:get handler 拼响应。 */
-  /** 读 codex guest 沙箱配置（`.clawd/codex-sandbox.json`）；缺失 / 坏 → null。透传给 handler 拼响应。 */
-  readCodexSandboxSettings(personaId2) {
-    return this.deps.store.readCodexSandboxSettings(personaId2);
-  }
-  /**
-   * 局部合并写 codex guest 沙箱配置，返回合并后的全量。
-   *
-   * **必须是合并不是覆盖**：UI 的「访客联网」开关只发 `{network}`，整体覆盖会静默抹掉 owner
-   * 手配的 writableRoots / denyRead（丢的是安全边界，且用户不会立刻发现）。
-   * 不走 PersonaManager.update 是因为它管的是 PersonaFile meta + 人格两层文本，
-   * 而这份配置是另一个文件、另一套 schema。
-   */
-  mergeCodexSandbox(personaId2, patch) {
-    if (!this.deps.registry.get(personaId2)) throw new Error(`persona not found: ${personaId2}`);
-    const merged = { ...this.deps.store.readCodexSandboxSettings(personaId2) ?? {}, ...patch };
-    this.deps.store.writeCodexSandboxSettings(personaId2, merged);
-    return merged;
-  }
-  readSandboxSettings(personaId2) {
-    return this.deps.store.readSandboxSettings(personaId2);
-  }
-  /**
-   * 删除 persona。
-   * PersonaStore.remove(personaId) 级联删整个 <personaRoot>/<personaId>/ 目录
-   * （含 .clawd/sessions/owner/ 和 .clawd/sessions/guests/<capId>/），rmSync
-   * recursive force 一锅清。
-   */
-  delete(personaId2) {
-    this.deps.store.remove(personaId2);
-    this.deps.registry.remove(personaId2);
-  }
-};
-
 // src/persona/seed.ts
-var fs13 = __toESM(require("fs"), 1);
-var path16 = __toESM(require("path"), 1);
+var fs12 = __toESM(require("fs"), 1);
+var path15 = __toESM(require("path"), 1);
 var import_node_url = require("url");
 var import_meta = {};
 var DEFAULT_BYPASS_PROFILE = {
   permissions: { defaultMode: "bypassPermissions" }
 };
+var PKG_CACHE_ROOTS = ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"];
+var CODEX_SANDBOX_DEFAULT = {
+  writableRoots: [...PKG_CACHE_ROOTS],
+  denyRead: [".secrets/**"],
+  network: true
+};
 var DEFAULT_PERSONAS = [
   {
     personaId: "persona-researcher",
@@ -49952,7 +49563,7 @@ var DEFAULT_PERSONAS = [
       }
     },
     codexSandbox: {
-      writableRoots: ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"],
+      writableRoots: [...PKG_CACHE_ROOTS],
       denyRead: [".secrets/**"],
       network: true
     }
@@ -49986,7 +49597,7 @@ var DEFAULT_PERSONAS = [
       }
     },
     codexSandbox: {
-      writableRoots: ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"],
+      writableRoots: [...PKG_CACHE_ROOTS],
       denyRead: [".secrets/**"],
       network: true
     }
@@ -50028,7 +49639,7 @@ var DEFAULT_PERSONAS = [
       }
     },
     codexSandbox: {
-      writableRoots: ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"],
+      writableRoots: [...PKG_CACHE_ROOTS],
       denyRead: [".secrets/**"],
       network: true
     }
@@ -50053,24 +49664,24 @@ function bundleSiblingFromArgv(argv1, sibling) {
   if (!argv1) return null;
   let real = argv1;
   try {
-    real = fs13.realpathSync(argv1);
+    real = fs12.realpathSync(argv1);
   } catch {
   }
-  return path16.resolve(path16.dirname(real), sibling);
+  return path15.resolve(path15.dirname(real), sibling);
 }
 function findDefaultsRoot(logger) {
   const candidates = [];
   try {
-    const here = path16.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
-    candidates.push(path16.resolve(here, "defaults"));
-    candidates.push(path16.resolve(here, "persona-defaults"));
+    const here = path15.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
+    candidates.push(path15.resolve(here, "defaults"));
+    candidates.push(path15.resolve(here, "persona-defaults"));
   } catch {
   }
   const fromArgv = bundleSiblingFromArgv(process.argv[1], "persona-defaults");
   if (fromArgv) candidates.push(fromArgv);
   for (const c of candidates) {
     try {
-      if (fs13.statSync(c).isDirectory()) {
+      if (fs12.statSync(c).isDirectory()) {
         logger?.info("persona.defaults-root.resolved", { root: c });
         return c;
       }
@@ -50087,8 +49698,8 @@ function seedDefaultPersonas(args) {
       args.logger.info("persona.seed.skip", { personaId: entry.personaId, reason: "exists" });
       continue;
     }
-    const bundleDir = path16.join(args.defaultsRoot, entry.personaId);
-    if (!fs13.existsSync(bundleDir)) {
+    const bundleDir = path15.join(args.defaultsRoot, entry.personaId);
+    if (!fs12.existsSync(bundleDir)) {
       args.logger.warn("persona.seed.skip", {
         personaId: entry.personaId,
         reason: "bundle-missing",
@@ -50096,8 +49707,8 @@ function seedDefaultPersonas(args) {
       });
       continue;
     }
-    const claudeMdPath = path16.join(bundleDir, "CLAUDE.md");
-    if (!fs13.existsSync(claudeMdPath)) {
+    const claudeMdPath = path15.join(bundleDir, "CLAUDE.md");
+    if (!fs12.existsSync(claudeMdPath)) {
       args.logger.warn("persona.seed.skip", {
         personaId: entry.personaId,
         reason: "no-CLAUDE.md",
@@ -50105,7 +49716,7 @@ function seedDefaultPersonas(args) {
       });
       continue;
     }
-    const personality = fs13.readFileSync(claudeMdPath, "utf8");
+    const personality = fs12.readFileSync(claudeMdPath, "utf8");
     const now = Date.now();
     const persona = {
       personaId: entry.personaId,
@@ -50132,51 +49743,51 @@ function seedDefaultPersonas(args) {
   }
 }
 function skipNodeModulesUnder(srcRoot) {
-  return (src) => !path16.relative(srcRoot, src).split(path16.sep).includes("node_modules");
+  return (src) => !path15.relative(srcRoot, src).split(path15.sep).includes("node_modules");
 }
 function copyBundleExtras(srcDir, dstDir) {
-  for (const entry of fs13.readdirSync(srcDir, { withFileTypes: true })) {
+  for (const entry of fs12.readdirSync(srcDir, { withFileTypes: true })) {
     if (entry.name === "CLAUDE.md" || entry.name === ".clawd") continue;
-    const srcPath = path16.join(srcDir, entry.name);
-    const dstPath = path16.join(dstDir, entry.name);
+    const srcPath = path15.join(srcDir, entry.name);
+    const dstPath = path15.join(dstDir, entry.name);
     if (entry.isDirectory()) {
-      fs13.cpSync(srcPath, dstPath, { recursive: true, dereference: true, filter: skipNodeModulesUnder(srcPath) });
+      fs12.cpSync(srcPath, dstPath, { recursive: true, dereference: true, filter: skipNodeModulesUnder(srcPath) });
     } else if (entry.isFile()) {
-      fs13.copyFileSync(srcPath, dstPath);
+      fs12.copyFileSync(srcPath, dstPath);
     }
   }
 }
 var DAEMON_MANAGED_PATHS = ["extension-kit", "CLAUDE.md", ".mcp.json", ".claude/skills", ".claude/agents"];
 function replaceManagedPath(src, dst) {
-  if (!fs13.statSync(src).isDirectory()) {
-    fs13.mkdirSync(path16.dirname(dst), { recursive: true });
-    fs13.rmSync(dst, { recursive: true, force: true });
-    fs13.cpSync(src, dst, { dereference: true });
+  if (!fs12.statSync(src).isDirectory()) {
+    fs12.mkdirSync(path15.dirname(dst), { recursive: true });
+    fs12.rmSync(dst, { recursive: true, force: true });
+    fs12.cpSync(src, dst, { dereference: true });
     return;
   }
-  fs13.mkdirSync(dst, { recursive: true });
-  for (const e of fs13.readdirSync(src, { withFileTypes: true })) {
+  fs12.mkdirSync(dst, { recursive: true });
+  for (const e of fs12.readdirSync(src, { withFileTypes: true })) {
     if (e.name === "node_modules") continue;
-    const child = path16.join(dst, e.name);
-    fs13.rmSync(child, { recursive: true, force: true });
-    fs13.cpSync(path16.join(src, e.name), child, { recursive: true, dereference: true });
+    const child = path15.join(dst, e.name);
+    fs12.rmSync(child, { recursive: true, force: true });
+    fs12.cpSync(path15.join(src, e.name), child, { recursive: true, dereference: true });
   }
 }
 function refreshDaemonManagedDirs(args) {
   const entries = args.entries ?? DEFAULT_PERSONAS;
   for (const entry of entries) {
-    const bundleDir = path16.join(args.defaultsRoot, entry.personaId);
-    if (!fs13.existsSync(bundleDir)) continue;
+    const bundleDir = path15.join(args.defaultsRoot, entry.personaId);
+    if (!fs12.existsSync(bundleDir)) continue;
     const personaDir = args.store.personaDirPath(entry.personaId);
-    if (!fs13.existsSync(personaDir)) continue;
+    if (!fs12.existsSync(personaDir)) continue;
     for (const relPath of DAEMON_MANAGED_PATHS) {
-      const srcPath = path16.join(bundleDir, relPath);
-      if (!fs13.existsSync(srcPath)) continue;
-      const dstPath = path16.join(personaDir, relPath);
+      const srcPath = path15.join(bundleDir, relPath);
+      if (!fs12.existsSync(srcPath)) continue;
+      const dstPath = path15.join(personaDir, relPath);
       try {
         replaceManagedPath(srcPath, dstPath);
         if (relPath === "CLAUDE.md") {
-          replaceManagedPath(srcPath, path16.join(personaDir, "AGENTS.md"));
+          replaceManagedPath(srcPath, path15.join(personaDir, "AGENTS.md"));
         }
         args.logger.info("persona.refresh.synced", {
           personaId: entry.personaId,
@@ -50200,12 +49811,12 @@ function migratePersonalityOverlay(args) {
   for (const entry of entries) {
     const personaId2 = entry.personaId;
     try {
-      if (fs13.existsSync(args.store.personalityLocalPath(personaId2))) continue;
-      const bundleClaudeMd = path16.join(args.defaultsRoot, personaId2, "CLAUDE.md");
-      if (!fs13.existsSync(bundleClaudeMd)) continue;
+      if (fs12.existsSync(args.store.personalityLocalPath(personaId2))) continue;
+      const bundleClaudeMd = path15.join(args.defaultsRoot, personaId2, "CLAUDE.md");
+      if (!fs12.existsSync(bundleClaudeMd)) continue;
       const current = args.store.readPersonality(personaId2);
       if (current === null) continue;
-      const bundle = fs13.readFileSync(bundleClaudeMd, "utf8");
+      const bundle = fs12.readFileSync(bundleClaudeMd, "utf8");
       if (current === bundle) continue;
       if (!current.startsWith(bundle)) continue;
       const tail = current.slice(bundle.length).trim();
@@ -50246,8 +49857,6 @@ function migrateAgentsMirror(args) {
   }
   if (mirrored > 0) args.logger.info("persona.agents-mirror.done", { mirrored });
 }
-var PKG_CACHE_ROOTS = ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"];
-var CODEX_SANDBOX_DEFAULT = { writableRoots: [...PKG_CACHE_ROOTS], denyRead: [], network: true };
 function migrateCodexSandbox(args) {
   const entries = args.entries ?? DEFAULT_PERSONAS;
   let n = 0;
@@ -50306,7 +49915,7 @@ function migrateSandboxAllowRead(args) {
   for (const personaId2 of args.store.list()) {
     try {
       const readPath = tildePath(args.store.personaDirPath(personaId2));
-      if (!fs13.existsSync(args.store.sandboxSettingsPath(personaId2))) {
+      if (!fs12.existsSync(args.store.sandboxSettingsPath(personaId2))) {
         args.store.writeSandboxSettings(personaId2, buildGuestSettingsV1());
         n++;
         continue;
@@ -50349,13 +49958,13 @@ var PERSONA_BUILDER_TOMBSTONE = `${PERSONA_BUILDER_TOMBSTONE_MARKER}
 function containsAnyFile(dir) {
   let entries;
   try {
-    entries = fs13.readdirSync(dir, { withFileTypes: true });
+    entries = fs12.readdirSync(dir, { withFileTypes: true });
   } catch {
     return false;
   }
   for (const e of entries) {
     if (e.isDirectory()) {
-      if (containsAnyFile(path16.join(dir, e.name))) return true;
+      if (containsAnyFile(path15.join(dir, e.name))) return true;
     } else {
       return true;
     }
@@ -50364,9 +49973,9 @@ function containsAnyFile(dir) {
 }
 function retirePersonaBuilder(args) {
   const dir = args.store.personaDirPath(PERSONA_BUILDER_ID);
-  if (!fs13.existsSync(dir)) return;
+  if (!fs12.existsSync(dir)) return;
   try {
-    const used = containsAnyFile(path16.join(dir, ".clawd", "sessions")) || containsAnyFile(path16.join(dir, ".claude", "skills")) || containsAnyFile(path16.join(dir, "projects"));
+    const used = containsAnyFile(path15.join(dir, ".clawd", "sessions")) || containsAnyFile(path15.join(dir, ".claude", "skills")) || containsAnyFile(path15.join(dir, "projects"));
     if (!used) {
       args.store.remove(PERSONA_BUILDER_ID);
       args.logger.info("persona.retire-builder.removed", { personaId: PERSONA_BUILDER_ID });
@@ -50374,10 +49983,10 @@ function retirePersonaBuilder(args) {
     }
     let wrote = false;
     for (const name of ["CLAUDE.md", "AGENTS.md"]) {
-      const p2 = path16.join(dir, name);
-      const cur = fs13.existsSync(p2) ? fs13.readFileSync(p2, "utf8") : null;
+      const p2 = path15.join(dir, name);
+      const cur = fs12.existsSync(p2) ? fs12.readFileSync(p2, "utf8") : null;
       if (cur?.startsWith(PERSONA_BUILDER_TOMBSTONE_MARKER)) continue;
-      fs13.writeFileSync(p2, PERSONA_BUILDER_TOMBSTONE);
+      fs12.writeFileSync(p2, PERSONA_BUILDER_TOMBSTONE);
       wrote = true;
     }
     if (wrote) args.logger.info("persona.retire-builder.tombstoned", { personaId: PERSONA_BUILDER_ID });
@@ -50391,15 +50000,15 @@ function retirePersonaBuilder(args) {
 function findDeployKitRoot(logger) {
   const candidates = [];
   try {
-    const here = path16.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
-    candidates.push(path16.resolve(here, "..", "deploy-kit"));
+    const here = path15.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
+    candidates.push(path15.resolve(here, "..", "deploy-kit"));
   } catch {
   }
   const fromArgv = bundleSiblingFromArgv(process.argv[1], "deploy-kit");
   if (fromArgv) candidates.push(fromArgv);
   for (const c of candidates) {
     try {
-      if (fs13.statSync(c).isDirectory()) {
+      if (fs12.statSync(c).isDirectory()) {
         logger?.info("persona.deploy-kit-root.resolved", { root: c });
         return c;
       }
@@ -50410,8 +50019,8 @@ function findDeployKitRoot(logger) {
   return null;
 }
 function seedDeployKit(args) {
-  const dst = path16.join(args.dataDir, "deploy-kit");
-  fs13.cpSync(args.deployKitBundleRoot, dst, {
+  const dst = path15.join(args.dataDir, "deploy-kit");
+  fs12.cpSync(args.deployKitBundleRoot, dst, {
     recursive: true,
     dereference: true,
     force: false,
@@ -50420,28 +50029,434 @@ function seedDeployKit(args) {
   args.logger.info("deploy-kit.seed.done", { dst });
 }
 function refreshDeployKit(args) {
-  const dst = path16.join(args.dataDir, "deploy-kit");
-  if (!fs13.existsSync(dst)) {
+  const dst = path15.join(args.dataDir, "deploy-kit");
+  if (!fs12.existsSync(dst)) {
     seedDeployKit(args);
     return;
   }
   for (const sub of ["scripts", "contract"]) {
-    const s = path16.join(args.deployKitBundleRoot, sub);
-    if (fs13.existsSync(s)) {
-      fs13.cpSync(s, path16.join(dst, sub), { recursive: true, force: true, dereference: true });
+    const s = path15.join(args.deployKitBundleRoot, sub);
+    if (fs12.existsSync(s)) {
+      fs12.cpSync(s, path15.join(dst, sub), { recursive: true, force: true, dereference: true });
     }
   }
-  const secretsSrc = path16.join(args.deployKitBundleRoot, ".secrets");
-  if (fs13.existsSync(secretsSrc)) {
-    fs13.mkdirSync(path16.join(dst, ".secrets"), { recursive: true });
-    for (const f of fs13.readdirSync(secretsSrc)) {
+  const secretsSrc = path15.join(args.deployKitBundleRoot, ".secrets");
+  if (fs12.existsSync(secretsSrc)) {
+    fs12.mkdirSync(path15.join(dst, ".secrets"), { recursive: true });
+    for (const f of fs12.readdirSync(secretsSrc)) {
       if (f.endsWith(".local")) continue;
-      fs13.copyFileSync(path16.join(secretsSrc, f), path16.join(dst, ".secrets", f));
+      fs12.copyFileSync(path15.join(secretsSrc, f), path15.join(dst, ".secrets", f));
     }
   }
   args.logger.info("deploy-kit.refresh.done", { dst });
 }
 
+// src/skills/scanner.ts
+var import_node_fs9 = __toESM(require("fs"), 1);
+var import_node_os6 = __toESM(require("os"), 1);
+var import_node_path9 = __toESM(require("path"), 1);
+
+// src/skills/frontmatter.ts
+var STRIP_QUOTES = /^["']|["']$/g;
+function strip(s) {
+  return s.trim().replace(STRIP_QUOTES, "");
+}
+function parseFrontmatter(content, keys) {
+  const out = {};
+  if (!content.startsWith("---")) return out;
+  const end = content.indexOf("---", 3);
+  if (end === -1) return out;
+  const lines = content.slice(3, end).split("\n");
+  for (let i = 0; i < lines.length; i++) {
+    const trimmed = lines[i].trim();
+    for (const key of keys) {
+      const prefix = `${key}:`;
+      if (!trimmed.startsWith(prefix)) continue;
+      const rest = trimmed.slice(prefix.length).trim();
+      if (rest === "|" || rest === ">" || rest === "|-" || rest === ">-") {
+        const parts = [];
+        for (let j = i + 1; j < lines.length; j++) {
+          const next = lines[j];
+          if (next.length === 0) {
+            parts.push("");
+            continue;
+          }
+          if (!/^\s/.test(next)) break;
+          parts.push(next.replace(/^\s+/, ""));
+        }
+        const value = parts.filter(Boolean).join(" ").trim();
+        if (value) out[key] = value;
+      } else {
+        const value = strip(rest);
+        if (value) out[key] = value;
+      }
+      break;
+    }
+  }
+  return out;
+}
+
+// src/skills/builtin-cc-resources.ts
+var BUILTIN_SKILLS = [
+  { name: "update-config", source: "builtin", description: "Update Claude Code configuration." },
+  { name: "keybindings-help", source: "builtin", description: "Show available keybindings." },
+  { name: "verify", source: "builtin", description: "Verify the implementation." },
+  { name: "debug", source: "builtin", description: "Debug current issue." },
+  { name: "lorem-ipsum", source: "builtin", description: "Generate lorem ipsum placeholder text." },
+  { name: "skillify", source: "builtin", description: "Convert a process into a reusable skill." },
+  { name: "remember", source: "builtin", description: "Remember context for later use." },
+  { name: "simplify", source: "builtin", description: "Simplify the code or message." },
+  { name: "batch", source: "builtin", description: "Run a batch of similar operations." },
+  { name: "stuck", source: "builtin", description: "Help unstick a stalled task." },
+  { name: "loop", source: "builtin", description: "Loop a task until a condition is met." },
+  { name: "cron-list", source: "builtin", description: "List scheduled cron tasks." },
+  { name: "cron-delete", source: "builtin", description: "Delete a scheduled cron task." },
+  { name: "dream", source: "builtin", description: "Brainstorm freely without constraints." },
+  { name: "hunter", source: "builtin", description: "Hunt down a bug or root cause." },
+  { name: "schedule", source: "builtin", description: "Schedule a task to run later." },
+  { name: "claude-api", source: "builtin", description: "Use the Claude API directly." },
+  { name: "claude-in-chrome", source: "builtin", description: "Drive Claude inside Chrome via the Chrome extension." }
+];
+var BUILTIN_AGENTS = [
+  {
+    name: "general-purpose",
+    source: "builtin",
+    description: "General-purpose agent for researching complex questions and executing multi-step tasks.",
+    whenToUse: "When you are searching for a keyword or file and are not confident you will find the right match in the first few tries."
+  },
+  {
+    name: "statusline-setup",
+    source: "builtin",
+    description: "Configure the user's Claude Code status line setting.",
+    whenToUse: "When the user is setting up or changing their status line configuration."
+  },
+  {
+    name: "Explore",
+    source: "builtin",
+    description: "Explore the codebase to gather context.",
+    whenToUse: "Before making changes that require understanding the surrounding code."
+  },
+  {
+    name: "Plan",
+    source: "builtin",
+    description: "Produce an implementation plan before writing code.",
+    whenToUse: "When the task is non-trivial and would benefit from an explicit plan."
+  },
+  {
+    name: "claude-code-guide",
+    source: "builtin",
+    description: "Guide the user through Claude Code features.",
+    whenToUse: "When the user needs help understanding what Claude Code can do."
+  },
+  {
+    name: "verification",
+    source: "builtin",
+    description: "Verify that a change works as intended.",
+    whenToUse: "After implementing a change, before declaring it done."
+  }
+];
+
+// src/skills/scanner.ts
+function parseDescription(content) {
+  const fields = parseFrontmatter(content, ["description"]);
+  return { description: fields.description ?? "" };
+}
+function isDirLikeSync(p2) {
+  try {
+    return import_node_fs9.default.statSync(p2).isDirectory();
+  } catch {
+    return false;
+  }
+}
+function scanSkillDir(dir, source, seen, out, pluginName) {
+  let entries;
+  try {
+    entries = import_node_fs9.default.readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const ent of entries) {
+    const entryPath = import_node_path9.default.join(dir, ent.name);
+    if (!ent.isDirectory() && !(ent.isSymbolicLink() && isDirLikeSync(entryPath))) continue;
+    let content;
+    try {
+      content = import_node_fs9.default.readFileSync(import_node_path9.default.join(entryPath, "SKILL.md"), "utf8");
+    } catch {
+      try {
+        content = import_node_fs9.default.readFileSync(import_node_path9.default.join(entryPath, "skill.md"), "utf8");
+      } catch {
+        continue;
+      }
+    }
+    const { description } = parseDescription(content);
+    const baseName = ent.name;
+    const name = pluginName ? `${pluginName}:${baseName}` : baseName;
+    if (seen.has(name)) continue;
+    seen.add(name);
+    const info = { name, source, path: entryPath, description: description || void 0 };
+    if (pluginName) info.plugin = pluginName;
+    out.push(info);
+  }
+}
+function listSkillsForDir(dir, source) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  scanSkillDir(dir, source, seen, out);
+  return out;
+}
+function scanCommandDir(dir, source, seen, out, pluginName) {
+  let entries;
+  try {
+    entries = import_node_fs9.default.readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const ent of entries) {
+    const entryPath = import_node_path9.default.join(dir, ent.name);
+    if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync(entryPath)) {
+      const ns = ent.name;
+      let subEntries;
+      try {
+        subEntries = import_node_fs9.default.readdirSync(entryPath, { withFileTypes: true });
+      } catch {
+        continue;
+      }
+      for (const se of subEntries) {
+        if (!se.name.endsWith(".md")) continue;
+        const sePath = import_node_path9.default.join(entryPath, se.name);
+        let content;
+        try {
+          content = import_node_fs9.default.readFileSync(sePath, "utf8");
+        } catch {
+          continue;
+        }
+        const cmd = se.name.replace(/\.md$/, "");
+        const { description } = parseDescription(content);
+        const qualified = `${ns}:${cmd}`;
+        const name = pluginName ? `${pluginName}:${qualified}` : qualified;
+        if (seen.has(name)) continue;
+        seen.add(name);
+        const info = { name, source, path: sePath, description: description || void 0 };
+        if (pluginName) info.plugin = pluginName;
+        out.push(info);
+      }
+    } else if (ent.name.endsWith(".md")) {
+      let content;
+      try {
+        content = import_node_fs9.default.readFileSync(entryPath, "utf8");
+      } catch {
+        continue;
+      }
+      const cmd = ent.name.replace(/\.md$/, "");
+      const { description } = parseDescription(content);
+      const name = pluginName ? `${pluginName}:${cmd}` : cmd;
+      if (seen.has(name)) continue;
+      seen.add(name);
+      const info = { name, source, path: entryPath, description: description || void 0 };
+      if (pluginName) info.plugin = pluginName;
+      out.push(info);
+    }
+  }
+}
+function readInstalledPlugins(home) {
+  const file = import_node_path9.default.join(home, ".claude", "plugins", "installed_plugins.json");
+  let raw;
+  try {
+    raw = import_node_fs9.default.readFileSync(file, "utf8");
+  } catch {
+    return [];
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const [key, entries] of Object.entries(parsed.plugins ?? {})) {
+    if (!Array.isArray(entries) || entries.length === 0) continue;
+    const entry = entries[0];
+    if (!entry?.installPath) continue;
+    const pluginName = key.includes("@") ? key.slice(0, key.indexOf("@")) : key;
+    if (!pluginName) continue;
+    out.push({ name: pluginName, root: entry.installPath });
+  }
+  return out;
+}
+var SkillsScanner = class {
+  home;
+  extraPluginRoots;
+  constructor(opts = {}) {
+    this.home = opts.home ?? import_node_os6.default.homedir();
+    this.extraPluginRoots = opts.extraPluginRoots ?? [];
+  }
+  /**
+   * 对齐 cc-direct（openclaw-plugin-clawos/src/claude-code/skills-scanner.ts）：
+   * 1. global: ~/.claude/skills + ~/.claude/commands
+   * 2. project: <cwd>/.claude/skills + <cwd>/.claude/commands
+   * 3. plugin: installed_plugins.json 里每个 plugin 的 skills + commands
+   * 顺序 global → project → plugin，同名去重（先到先得）
+   */
+  list(args) {
+    const seen = /* @__PURE__ */ new Set();
+    const builtinBlock = [];
+    for (const b2 of BUILTIN_SKILLS) {
+      if (seen.has(b2.name)) continue;
+      seen.add(b2.name);
+      builtinBlock.push({
+        name: b2.name,
+        source: "builtin",
+        description: b2.description
+      });
+    }
+    const fsBlock = [];
+    scanSkillDir(import_node_path9.default.join(this.home, ".claude", "skills"), "global", seen, fsBlock);
+    scanCommandDir(import_node_path9.default.join(this.home, ".claude", "commands"), "global", seen, fsBlock);
+    scanSkillDir(import_node_path9.default.join(args.cwd, ".claude", "skills"), "project", seen, fsBlock);
+    scanCommandDir(import_node_path9.default.join(args.cwd, ".claude", "commands"), "project", seen, fsBlock);
+    const plugins = [...readInstalledPlugins(this.home), ...this.extraPluginRoots];
+    for (const { name, root } of plugins) {
+      scanSkillDir(import_node_path9.default.join(root, "skills"), "plugin", seen, fsBlock, name);
+      scanCommandDir(import_node_path9.default.join(root, "commands"), "plugin", seen, fsBlock, name);
+    }
+    fsBlock.sort((a, b2) => a.name < b2.name ? -1 : a.name > b2.name ? 1 : 0);
+    return [...builtinBlock, ...fsBlock];
+  }
+};
+
+// src/persona/manager.ts
+var PersonaManager = class {
+  constructor(deps) {
+    this.deps = deps;
+  }
+  deps;
+  /**
+   * slug 是 persona 的身份，label 只是显示名——两者刻意分开：id 落进文件路径 /
+   * 分享链接且创建后不可改，label 可中文、可随时改。此前 id 从 label 推导，
+   * 非 ascii 被剥空后一律 fallback 成 `persona-persona`。
+   *
+   * 撞名直接抛错而非改名：id 由调用方显式指定，静默换成带后缀的 id 等于把
+   * 用户的选择偷偷改掉。字符集校验在 PersonaCreateArgsSchema（路径穿越边界）。
+   */
+  create(args) {
+    const personaId2 = `persona-${args.slug}`;
+    if (this.deps.store.has(personaId2)) {
+      throw new Error(`personaId already exists: ${personaId2}`);
+    }
+    const now = Date.now();
+    const persona = {
+      personaId: personaId2,
+      label: args.label,
+      model: args.model,
+      // effort 兜底 high：persona 一律持有具体档位（spec 2026-08-12），UI 会带界面上高亮的
+      // 那一档，但 persona:create 也可能来自 butler 的 persona-authoring skill 这类不带该
+      // 字段的调用方——不兜的话要等下次 daemon 启动 backfill 才补上，中间建的 session 就漏了。
+      // 取值理由与 backfillPersonaSessionDefaults 一致（见那里的注释）。
+      effort: args.effort ?? "high",
+      tool: args.tool,
+      public: args.public ?? false,
+      iconKey: args.iconKey,
+      createdAt: now,
+      updatedAt: now
+    };
+    this.deps.store.write(persona, args.personality);
+    this.deps.store.writeCodexSandboxSettings(personaId2, CODEX_SANDBOX_DEFAULT);
+    this.deps.registry.set(persona);
+    return persona;
+  }
+  update(personaId2, patch, texts) {
+    const existing = this.deps.registry.get(personaId2);
+    if (!existing) throw new Error(`persona not found: ${personaId2}`);
+    const { iconKey: iconKeyPatch, ...restPatch } = patch;
+    const updated = {
+      ...existing,
+      ...restPatch,
+      updatedAt: Date.now()
+    };
+    const toolChanged = patch.tool !== void 0 && (patch.tool ?? "claude") !== (existing.tool ?? "claude");
+    if (toolChanged) {
+      if (patch.model === void 0) delete updated.model;
+      if (patch.effort === void 0) delete updated.effort;
+    }
+    if (iconKeyPatch === null) {
+      delete updated.iconKey;
+    } else if (iconKeyPatch !== void 0) {
+      updated.iconKey = iconKeyPatch;
+    }
+    if (texts?.personality !== void 0) {
+      this.deps.store.writePersonality(personaId2, texts.personality);
+    }
+    if (texts?.personalityLocal !== void 0) {
+      this.deps.store.writePersonalityLocal(personaId2, texts.personalityLocal);
+    }
+    this.deps.store.writeMeta(updated);
+    this.deps.registry.set(updated);
+    return updated;
+  }
+  /** 读取 CLAUDE.md 内容；persona 目录或文件不存在时返回 null。透传给 handler 拼响应。 */
+  readPersonality(personaId2) {
+    return this.deps.store.readPersonality(personaId2);
+  }
+  /** 读人格补充层（`.clawd/personality.local.md`）；没写过返回 null。供 persona:get 拼响应。 */
+  readPersonalityLocal(personaId2) {
+    return this.deps.store.readPersonalityLocal(personaId2);
+  }
+  /** 扫 persona 私有 skills 目录；目录不存在返回空数组。供 persona:get handler 拼响应。 */
+  listSkills(personaId2) {
+    return listSkillsForDir(this.deps.store.skillsDir(personaId2), "project");
+  }
+  /**
+   * 读取 persona `.claude/settings.json` 中已启用的插件列表（value === true 的 key）。
+   * 文件不存在 / 解析失败 / 字段缺失 → 空数组。供 persona:get handler 拼响应。
+   */
+  listEnabledPlugins(personaId2) {
+    return this.deps.store.readEnabledPlugins(personaId2);
+  }
+  /** 读 codex guest 沙箱配置（`.clawd/codex-sandbox.json`）；缺失 / 坏 → null。透传给 handler 拼响应。 */
+  readCodexSandboxSettings(personaId2) {
+    return this.deps.store.readCodexSandboxSettings(personaId2);
+  }
+  /**
+   * 局部合并写 codex guest 沙箱配置，返回合并后的全量。
+   *
+   * **必须是合并不是覆盖**：UI 的「访客联网」开关只发 `{network}`，整体覆盖会静默抹掉 owner
+   * 手配的 writableRoots / denyRead（丢的是安全边界，且用户不会立刻发现）。
+   * 不走 PersonaManager.update 是因为它管的是 PersonaFile meta + 人格两层文本，
+   * 而这份配置是另一个文件、另一套 schema。
+   *
+   * **读不到时 base 用 CODEX_SANDBOX_DEFAULT 而不是 `{}`**：`{}` 会让这次「合并」实际写出一份
+   * 只有 patch 字段的残缺配置（例如只有 `{network:true}`，没有包管理器缓存目录 → `npm install`
+   * EPERM），而且从此 migrateCodexSandbox 见文件已存在就跳过，UI 上再也补不回来。
+   * 正常路径下文件在 create 时就已物化，这条兜底只在文件被删 / 被改坏时触发。
+   *
+   * ⚠️ 已知限制：`CodexSandboxSettingsSchema` 是 `.strict()` 的，owner 手编时多写一个键
+   * （注释键 / 历史字段）会让整份文件读成 null，于是这次合并把它替换成默认值 ⊕ patch。
+   * 已有测试锁定该 strict 语义（store.spec「schema 校验失败 → 返回 null」），本次不动它——
+   * 至少残缺配置不会再被写出去。要放宽得单独评估。
+   */
+  mergeCodexSandbox(personaId2, patch) {
+    if (!this.deps.registry.get(personaId2)) throw new Error(`persona not found: ${personaId2}`);
+    const base = this.deps.store.readCodexSandboxSettings(personaId2) ?? CODEX_SANDBOX_DEFAULT;
+    const merged = { ...base, ...patch };
+    this.deps.store.writeCodexSandboxSettings(personaId2, merged);
+    return merged;
+  }
+  /** 读 sandbox-settings.json；不存在 / 损坏返回 null。供 persona:get handler 拼响应。 */
+  readSandboxSettings(personaId2) {
+    return this.deps.store.readSandboxSettings(personaId2);
+  }
+  /**
+   * 删除 persona。
+   * PersonaStore.remove(personaId) 级联删整个 <personaRoot>/<personaId>/ 目录
+   * （含 .clawd/sessions/owner/ 和 .clawd/sessions/guests/<capId>/），rmSync
+   * recursive force 一锅清。
+   */
+  delete(personaId2) {
+    this.deps.store.remove(personaId2);
+    this.deps.registry.remove(personaId2);
+  }
+};
+
 // src/share-md-viewer/load.ts
 var import_node_fs11 = __toESM(require("fs"), 1);
 var import_node_path10 = __toESM(require("path"), 1);
@@ -63003,7 +63018,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.440".length > 0 ? "0.2.440" : "dev";
+var version = "0.2.441".length > 0 ? "0.2.441" : "dev";
 
 // src/cli-probe/probe.ts
 var fs66 = __toESM(require("fs"), 1);
@@ -63187,16 +63202,8 @@ function buildPersonaHandlers(deps) {
     const args = parseArgs2(PersonaUpdateArgsSchema, frame, "persona:update");
     const { personality, personalityLocal, codexSandbox, ...metaPatch } = args.patch;
     const persona = personaManager.update(args.personaId, metaPatch, { personality, personalityLocal });
-    const mergedCodexSandbox = codexSandbox ? personaManager.mergeCodexSandbox(args.personaId, codexSandbox) : void 0;
-    return {
-      response: {
-        type: "persona:info",
-        ...persona,
-        // 只在本次确实动过时回带，让调用方拿到合并后的真值而不用再 get 一次；
-        // 没动就不带（与 personality 等分层字段同口径：persona:update 的响应是 meta 视图）。
-        ...mergedCodexSandbox ? { codexSandbox: mergedCodexSandbox } : {}
-      }
-    };
+    if (codexSandbox) personaManager.mergeCodexSandbox(args.personaId, codexSandbox);
+    return { response: { type: "persona:info", ...persona } };
   };
   const del = async (frame) => {
     const args = parseArgs2(PersonaIdArgsSchema, frame, "persona:delete");