@clawos-dev/clawd 0.2.453 → 0.2.454

package/dist/cli.cjs

@@ -450,8 +450,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path93, errorMaps, issueData } = params;
-      const fullPath = [...path93, ...issueData.path || []];
+      const { data, path: path94, errorMaps, issueData } = params;
+      const fullPath = [...path94, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -762,11 +762,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path93, key) {
+      constructor(parent, value, path94, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path93;
+        this._path = path94;
         this._key = key;
       }
       get path() {
@@ -9823,8 +9823,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path93 = req.path;
-        _req.url = typeof path93 === "string" ? path93 : req.url ? req.url.path || req.url : void 0;
+        const path94 = req.path;
+        _req.url = typeof path94 === "string" ? path94 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -9989,14 +9989,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path93) {
+    function parsePath(path94) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path93.length; i++) {
-        const char = path93[i];
+      for (let i = 0; i < path94.length; i++) {
+        const char = path94[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -10127,10 +10127,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path93 of paths) {
-        const parts = parsePath(path93);
+      for (const path94 of paths) {
+        const parts = parsePath(path94);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path93, remove);
+          redactWildcardPath(obj, parts, censor, path94, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -10215,8 +10215,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path93) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path93];
+            const wrappedCensor = typeof censor === "function" ? (value, path94) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path94];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -10251,8 +10251,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path93 of pathsToClone) {
-        const parts = parsePath(path93);
+      for (const path94 of pathsToClone) {
+        const parts = parsePath(path94);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -10304,24 +10304,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path93) {
-      if (typeof path93 !== "string") {
+    function validatePath(path94) {
+      if (typeof path94 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path93 === "") {
+      if (path94 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path93.includes("..")) {
-        throw new Error(`Invalid redaction path (${path93})`);
+      if (path94.includes("..")) {
+        throw new Error(`Invalid redaction path (${path94})`);
       }
-      if (path93.includes(",")) {
-        throw new Error(`Invalid redaction path (${path93})`);
+      if (path94.includes(",")) {
+        throw new Error(`Invalid redaction path (${path94})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path93.length; i++) {
-        const char = path93[i];
+      for (let i = 0; i < path94.length; i++) {
+        const char = path94[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -10335,20 +10335,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path93})`);
+            throw new Error(`Invalid redaction path (${path94})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path93})`);
+        throw new Error(`Invalid redaction path (${path94})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path93 of paths) {
-        validatePath(path93);
+      for (const path94 of paths) {
+        validatePath(path94);
       }
     }
     function slowRedact(options = {}) {
@@ -10516,8 +10516,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path93) => {
-            return censor(value, [k2, ...path93]);
+          const wrappedCensor = typeof censor === "function" ? (value, path94) => {
+            return censor(value, [k2, ...path94]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -10735,10 +10735,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs82 = require("fs");
+    var fs83 = require("fs");
     var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
-    var path93 = require("path");
+    var path94 = require("path");
     var sleep2 = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -10792,20 +10792,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs82.mkdirSync(path93.dirname(file), { recursive: true });
-          const fd = fs82.openSync(file, flags, mode);
+          if (sonic.mkdir) fs83.mkdirSync(path94.dirname(file), { recursive: true });
+          const fd = fs83.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs82.mkdir(path93.dirname(file), { recursive: true }, (err) => {
+        fs83.mkdir(path94.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs82.open(file, flags, mode, fileOpened);
+          fs83.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs82.open(file, flags, mode, fileOpened);
+        fs83.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -10846,8 +10846,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs82.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs82.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs83.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs83.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -10856,15 +10856,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs82.writeSync(this.fd, this._writingBuf);
+            return fs83.writeSync(this.fd, this._writingBuf);
           }
-          return fs82.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs83.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs82.write(this.fd, this._writingBuf, this.release);
+            return fs83.write(this.fd, this._writingBuf, this.release);
           }
-          return fs82.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs83.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -10921,7 +10921,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs82.fsyncSync(this.fd);
+          fs83.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -11035,7 +11035,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs82.fsync(this.fd, (err) => {
+            fs83.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -11137,7 +11137,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs82.close(fd, (err) => {
+          fs83.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -11186,7 +11186,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs82.writeSync(this.fd, buf) : fs82.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs83.writeSync(this.fd, buf) : fs83.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -11202,7 +11202,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs82.fsyncSync(this.fd);
+        fs83.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -11223,7 +11223,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs82.writeSync(this.fd, buf);
+          const n = fs83.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -11251,13 +11251,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs82.writeSync(this.fd, this._writingBuf) : fs82.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs83.writeSync(this.fd, this._writingBuf) : fs83.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs82.write(this.fd, this._writingBuf, release);
+        fs83.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -11266,7 +11266,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs82.writeSync(this.fd, this._writingBuf);
+          const written = fs83.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -11275,7 +11275,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs82.write(this.fd, this._writingBuf, release);
+        fs83.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -11291,12 +11291,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs82.fsync(sonic.fd, closeWrapped);
+        fs83.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs82.close(sonic.fd, done);
+          fs83.close(sonic.fd, done);
         } else {
           done();
         }
@@ -14431,11 +14431,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path93, added, removed, oldPosInc, options) {
-        var last = path93.lastComponent;
+      addToPath: function addToPath(path94, added, removed, oldPosInc, options) {
+        var last = path94.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path93.oldPos + oldPosInc,
+            oldPos: path94.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -14445,7 +14445,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path93.oldPos + oldPosInc,
+            oldPos: path94.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -15027,10 +15027,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec4 = m2;
-      const path93 = typeof rec4.path === "string" ? rec4.path : null;
+      const path94 = typeof rec4.path === "string" ? rec4.path : null;
       const content = typeof rec4.content === "string" ? rec4.content : null;
-      if (!path93 || content == null) return null;
-      const entry = { path: path93, content };
+      if (!path94 || content == null) return null;
+      const entry = { path: path94, content };
       if (typeof rec4.mtimeMs === "number") entry.mtimeMs = rec4.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -15896,10 +15896,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec4 = m2;
-      const path93 = typeof rec4.path === "string" ? rec4.path : null;
+      const path94 = typeof rec4.path === "string" ? rec4.path : null;
       const content = typeof rec4.content === "string" ? rec4.content : null;
-      if (!path93 || content == null) return null;
-      const out = { path: path93, content };
+      if (!path94 || content == null) return null;
+      const out = { path: path94, content };
       if (typeof rec4.mtimeMs === "number") out.mtimeMs = rec4.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -36873,8 +36873,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path93) {
-      var parts = path93.split("/");
+    exports2.resolve = function(path94) {
+      var parts = path94.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -42727,18 +42727,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path93) {
-      if (path93.slice(-1) === "/") {
-        path93 = path93.substring(0, path93.length - 1);
+    var parentFolder = function(path94) {
+      if (path94.slice(-1) === "/") {
+        path94 = path94.substring(0, path94.length - 1);
       }
-      var lastSlash = path93.lastIndexOf("/");
-      return lastSlash > 0 ? path93.substring(0, lastSlash) : "";
+      var lastSlash = path94.lastIndexOf("/");
+      return lastSlash > 0 ? path94.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path93) {
-      if (path93.slice(-1) !== "/") {
-        path93 += "/";
+    var forceTrailingSlash = function(path94) {
+      if (path94.slice(-1) !== "/") {
+        path94 += "/";
       }
-      return path93;
+      return path94;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -43740,7 +43740,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path75.default.dirname(opts.recordPath);
+  const dir = import_node_path76.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -43754,8 +43754,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs54.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs54.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs55.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs55.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -43780,12 +43780,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs54, import_node_path75;
+var import_node_fs55, import_node_path76;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs54 = __toESM(require("fs"), 1);
-    import_node_path75 = __toESM(require("path"), 1);
+    import_node_fs55 = __toESM(require("fs"), 1);
+    import_node_path76 = __toESM(require("path"), 1);
   }
 });
 
@@ -43828,7 +43828,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs55.mkdtempSync)(import_node_path76.default.join(import_node_os27.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs56.mkdtempSync)(import_node_path77.default.join(import_node_os27.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -43989,19 +43989,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs55.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs56.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs55, import_node_os27, import_node_path76;
+var import_node_fs56, import_node_os27, import_node_path77;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs55 = require("fs");
+    import_node_fs56 = require("fs");
     import_node_os27 = __toESM(require("os"), 1);
-    import_node_path76 = __toESM(require("path"), 1);
+    import_node_path77 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -44276,8 +44276,8 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path74 = __toESM(require("path"), 1);
-var import_node_fs53 = __toESM(require("fs"), 1);
+var import_node_path75 = __toESM(require("path"), 1);
+var import_node_fs54 = __toESM(require("fs"), 1);
 var import_node_os26 = __toESM(require("os"), 1);
 var import_node_crypto22 = require("crypto");
 var import_node_url4 = require("url");
@@ -45582,7 +45582,9 @@ function buildSpawnContext(state, deps) {
   if (dispatchId) env.CLAWD_DISPATCH_ID = dispatchId;
   const personaId2 = file.ownerPersonaId;
   if (personaId2) env.CLAWD_PERSONA_ID = personaId2;
-  const mcpConfigs = deps.getMcpConfigs?.() ?? [];
+  const mcpConfigs = (deps.getMcpConfigs?.() ?? []).filter(
+    (c) => !c.personas || personaId2 != null && c.personas.includes(personaId2)
+  );
   const ctx = {
     cwd: file.cwd,
     toolSessionId: file.toolSessionId,
@@ -51424,8 +51426,8 @@ function turnStartInput(text) {
   const items = [];
   let leftover = text;
   for (const m2 of text.matchAll(SKILL_RE)) {
-    const [marker, name, path93] = m2;
-    items.push({ type: "skill", name, path: path93 });
+    const [marker, name, path94] = m2;
+    items.push({ type: "skill", name, path: path94 });
     leftover = leftover.replace(marker, "");
   }
   for (const m2 of text.matchAll(ATTACHMENT_RE2)) {
@@ -56537,13 +56539,13 @@ function mapSkillsListResponse(res) {
       const r = s ?? {};
       const name = str3(r.name);
       if (!name) continue;
-      const path93 = str3(r.path);
+      const path94 = str3(r.path);
       const description = str3(r.description);
       const isPlugin = name.includes(":");
       out.push({
         name,
         source: isPlugin ? "plugin" : "project",
-        ...path93 ? { path: path93 } : {},
+        ...path94 ? { path: path94 } : {},
         ...description ? { description } : {},
         ...isPlugin ? { plugin: name.split(":")[0] } : {}
       });
@@ -60865,9 +60867,9 @@ var CentralClientError = class extends Error {
   code;
   cause;
 };
-async function centralRequest(opts, path93, init) {
+async function centralRequest(opts, path94, init) {
   const f = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}${path93}`;
+  const url = `${opts.api.replace(/\/+$/, "")}${path94}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
   let res;
@@ -61348,7 +61350,7 @@ var ServerKeyStore = class {
 init_protocol();
 
 // src/handlers/index.ts
-var import_node_path70 = __toESM(require("path"), 1);
+var import_node_path68 = __toESM(require("path"), 1);
 
 // src/handlers/session.ts
 init_protocol();
@@ -63689,7 +63691,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.453".length > 0 ? "0.2.453" : "dev";
+var version = "0.2.454".length > 0 ? "0.2.454" : "dev";
 
 // src/cli-probe/probe.ts
 var fs68 = __toESM(require("fs"), 1);
@@ -64717,218 +64719,8 @@ function buildExtensionHandlers(deps) {
   };
 }
 
-// src/app-builder/project-store.ts
-var import_node_fs50 = require("fs");
-var import_node_child_process15 = require("child_process");
-var import_node_path65 = require("path");
-init_protocol();
-var PROJECTS_DIR = "projects";
-var META_FILE = ".clawd-project.json";
-var DEFAULT_TEMPLATE = "nestjs-react";
-var SCAFFOLD_TIMEOUT_MS = 3e4;
-var ProjectStore = class {
-  /** @param root projects 父目录，例如 `~/.clawd/users/<userId>/`（v2 per-user） */
-  constructor(root) {
-    this.root = root;
-  }
-  root;
-  /** projects/<name>/.clawd-project.json 路径 */
-  metaPath(name) {
-    return (0, import_node_path65.join)(this.projectsRoot(), name, META_FILE);
-  }
-  /** projects/<name>/ 目录路径（cwd 用） */
-  projectDir(name) {
-    return (0, import_node_path65.join)(this.projectsRoot(), name);
-  }
-  projectsRoot() {
-    return (0, import_node_path65.join)(this.root, PROJECTS_DIR);
-  }
-  async list() {
-    let entries;
-    try {
-      entries = await import_node_fs50.promises.readdir(this.projectsRoot());
-    } catch (err) {
-      if (err.code === "ENOENT") return [];
-      throw err;
-    }
-    const out = [];
-    for (const name of entries) {
-      try {
-        const raw = await import_node_fs50.promises.readFile(this.metaPath(name), "utf8");
-        const json = JSON.parse(raw);
-        let migrated = false;
-        if (typeof json.devCommand !== "string" || json.devCommand.length === 0) {
-          json.devCommand = DEFAULT_DEV_COMMAND;
-          migrated = true;
-        }
-        const parsed = ProjectMetadataSchema.safeParse(json);
-        if (parsed.success) {
-          out.push(parsed.data);
-          if (migrated) {
-            void import_node_fs50.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
-            });
-          }
-        }
-      } catch {
-      }
-    }
-    return out.sort((a, b2) => a.name.localeCompare(b2.name));
-  }
-  /**
-   * @param reservedPorts 其它 user 已占端口（v2 per-user：端口必须全局唯一，所有 user 的
-   *   dev server 同机跑；per-user store 各自只 list 自己，靠 handler 收集全局端口传进来，
-   *   否则不同 user 的首个项目都从 PROJECT_PORT_MIN 起 → 全撞 6173）。
-   */
-  async create(name, reservedPorts) {
-    const existing = await this.list();
-    if (existing.some((p2) => p2.name === name)) {
-      throw new Error(`project "${name}" already exists / \u5DF2\u5B58\u5728`);
-    }
-    const usedPorts = new Set(existing.map((p2) => p2.port));
-    if (reservedPorts) for (const p2 of reservedPorts) usedPorts.add(p2);
-    let port = -1;
-    for (let p2 = PROJECT_PORT_MIN; p2 <= PROJECT_PORT_MAX; p2++) {
-      if (!usedPorts.has(p2)) {
-        port = p2;
-        break;
-      }
-    }
-    if (port < 0) {
-      throw new Error(
-        `port pool exhausted / \u7AEF\u53E3\u6C60\u5DF2\u6EE1\uFF08${PROJECT_PORT_MIN}-${PROJECT_PORT_MAX}\uFF09\uFF0C\u5148\u5220\u4E00\u4E2A project \u91CA\u653E\u7AEF\u53E3`
-      );
-    }
-    const meta = {
-      name,
-      port,
-      createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-      devCommand: DEFAULT_DEV_COMMAND
-    };
-    const validated = ProjectMetadataSchema.safeParse(meta);
-    if (!validated.success) {
-      throw new Error(`invalid name "${name}": ${validated.error.message}`);
-    }
-    const dir = this.projectDir(name);
-    await import_node_fs50.promises.mkdir(dir, { recursive: true });
-    await import_node_fs50.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
-    return meta;
-  }
-  /**
-   * 同步内联 scaffold：spawn `extension-kit/scripts/new-extension.sh <name>` 等 exit。
-   * 必须在 `create()` 之后调（脚本期望 projects/<name>/.clawd-project.json 已就位 = picker 模式）。
-   * 失败抛错；上层（handler）应当 catch 后回滚（删 dir + 不 mutate session）。
-   *
-   * spec 2026-06-02 §5.6.3：scaffold 对 assistant 不可见，避免 assistant 被诱导去"读 example
-   * 代码再参考"。assistant 进 project 时目录已是完整模板，直接 pnpm install 即可。
-   */
-  async scaffold(name, templateSrcDir, scaffoldScriptPath) {
-    const destDir = this.projectDir(name);
-    return await new Promise((resolve9, reject) => {
-      const child = (0, import_node_child_process15.spawn)("bash", [scaffoldScriptPath, name, templateSrcDir, destDir], {
-        env: { ...process.env, PATH: process.env.PATH ?? "" },
-        stdio: ["ignore", "pipe", "pipe"]
-      });
-      let stdout = "";
-      let stderr = "";
-      child.stdout.on("data", (d) => {
-        stdout += d.toString("utf8");
-      });
-      child.stderr.on("data", (d) => {
-        stderr += d.toString("utf8");
-      });
-      const timer = setTimeout(() => {
-        child.kill("SIGKILL");
-        reject(new Error(`scaffold timeout (>${SCAFFOLD_TIMEOUT_MS}ms): ${scaffoldScriptPath} ${name}`));
-      }, SCAFFOLD_TIMEOUT_MS);
-      child.on("error", (err) => {
-        clearTimeout(timer);
-        reject(new Error(`scaffold spawn failed: ${err.message}`));
-      });
-      child.on("exit", (code, signal) => {
-        clearTimeout(timer);
-        if (code === 0) resolve9({ stdout, stderr });
-        else reject(new Error(`scaffold exit ${code ?? signal}: ${stderr.slice(0, 500)}`));
-      });
-    });
-  }
-  async delete(name) {
-    const dir = this.projectDir(name);
-    await import_node_fs50.promises.rm(dir, { recursive: true, force: true });
-  }
-  async updatePort(name, newPort) {
-    if (newPort < PROJECT_PORT_MIN || newPort > PROJECT_PORT_MAX) {
-      throw new Error(
-        `port range invalid: must be ${PROJECT_PORT_MIN}-${PROJECT_PORT_MAX}, got ${newPort}`
-      );
-    }
-    const list = await this.list();
-    const target = list.find((p2) => p2.name === name);
-    if (!target) throw new Error(`project "${name}" not found / \u4E0D\u5B58\u5728`);
-    const conflict = list.find((p2) => p2.name !== name && p2.port === newPort);
-    if (conflict) {
-      throw new Error(`port ${newPort} already used / \u5DF2\u88AB project "${conflict.name}" \u5360\u7528`);
-    }
-    const updated = { ...target, port: newPort };
-    await import_node_fs50.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
-    return updated;
-  }
-  /**
-   * 单栏 refactor (spec 2026-06-02 §5.6.1)：发布上线后写公网 URL 到 .clawd-project.json.prodUrl。
-   * UI 通过 listProjects 读到 prodUrl 后切预览栏到线上 URL，取代旧 prod marker 机制。
-   * 重复调用幂等（覆盖旧 URL）。url 由 ProjectMetadataSchema 校验 url() 格式。
-   */
-  async setProdUrl(name, url) {
-    const list = await this.list();
-    const target = list.find((p2) => p2.name === name);
-    if (!target) throw new Error(`project "${name}" not found / \u4E0D\u5B58\u5728`);
-    const updated = { ...target, prodUrl: url };
-    const validated = ProjectMetadataSchema.safeParse(updated);
-    if (!validated.success) {
-      throw new Error(`invalid prodUrl "${url}": ${validated.error.message}`);
-    }
-    await import_node_fs50.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
-    return validated.data;
-  }
-  /**
-   * 发布上线脚手架化 (spec 2026-06-03-app-builder-publish-scaffold-design §5.1.4)：
-   * 写 publishJob 字段到 .clawd-project.json。仅承载 in-flight 状态 ——
-   *   - daemon 收到第一个 ::stage::build marker 时写入
-   *   - 每次 stage 切换更新 stage 字段（jobId / startedAt 不变）
-   *   - 成功 / 失败 / dismiss 时调 clearPublishJob 清掉
-   *   - 只有 daemon 崩才会留残骸
-   * 写入时保留所有其他字段（prodUrl 等不受影响）。
-   */
-  async setPublishJob(name, job) {
-    const list = await this.list();
-    const target = list.find((p2) => p2.name === name);
-    if (!target) throw new Error(`project "${name}" not found / \u4E0D\u5B58\u5728`);
-    const updated = { ...target, publishJob: job };
-    const validated = ProjectMetadataSchema.safeParse(updated);
-    if (!validated.success) {
-      throw new Error(`invalid publishJob: ${validated.error.message}`);
-    }
-    await import_node_fs50.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
-    return validated.data;
-  }
-  /** 清掉 .clawd-project.json.publishJob 字段。其他字段保持原样。 */
-  async clearPublishJob(name) {
-    const list = await this.list();
-    const target = list.find((p2) => p2.name === name);
-    if (!target) throw new Error(`project "${name}" not found / \u4E0D\u5B58\u5728`);
-    if (!target.publishJob) return target;
-    const { publishJob: _drop, ...rest } = target;
-    void _drop;
-    const validated = ProjectMetadataSchema.safeParse(rest);
-    if (!validated.success) {
-      throw new Error(`failed to clear publishJob: ${validated.error.message}`);
-    }
-    await import_node_fs50.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
-    return validated.data;
-  }
-};
-
 // src/app-builder/kill-port.ts
-var import_node_child_process16 = require("child_process");
+var import_node_child_process15 = require("child_process");
 async function killPortOccupants(port, ownedPids, logger) {
   let pids;
   try {
@@ -64970,7 +64762,7 @@ async function killPortOccupants(port, ownedPids, logger) {
 }
 function listPidsOnPort(port) {
   return new Promise((resolve9, reject) => {
-    (0, import_node_child_process16.execFile)(
+    (0, import_node_child_process15.execFile)(
       "lsof",
       ["-ti", `:${port}`],
       { timeout: 3e3 },
@@ -64991,361 +64783,15 @@ function listPidsOnPort(port) {
   });
 }
 
-// src/app-builder/publish-registry.ts
-var import_node_crypto20 = require("crypto");
-var PublishJobRegistry = class {
-  jobs = /* @__PURE__ */ new Map();
-  has(name) {
-    return this.jobs.has(name);
-  }
-  get(name) {
-    return this.jobs.get(name);
-  }
-  /**
-   * args.jobId 仅用于测试注入；生产代码不传，registry 自己生成。
-   * args.now 仅用于测试注入；生产代码不传，用 Date.now()。
-   */
-  create(args) {
-    if (this.jobs.has(args.name)) {
-      throw new Error(`already publishing: ${args.name}`);
-    }
-    const jobId = args.jobId ?? `job-${(0, import_node_crypto20.randomUUID)()}`;
-    this.jobs.set(args.name, {
-      jobId,
-      name: args.name,
-      stage: "build",
-      sessionId: args.sessionId,
-      childProc: args.childProc,
-      dismissed: false,
-      sawAnyStage: false,
-      startedAt: args.now ?? Date.now()
-    });
-    return jobId;
-  }
-  updateStage(name, stage) {
-    const job = this.jobs.get(name);
-    if (!job) return;
-    job.stage = stage;
-    job.sawAnyStage = true;
-  }
-  markDismissed(name) {
-    const job = this.jobs.get(name);
-    if (!job) return;
-    job.dismissed = true;
-  }
-  remove(name) {
-    const job = this.jobs.get(name);
-    if (!job) return void 0;
-    this.jobs.delete(name);
-    return { sessionId: job.sessionId };
-  }
-};
-
-// src/app-builder/publish-job-runner.ts
-var import_node_child_process17 = require("child_process");
-var import_node_fs51 = require("fs");
-var import_node_path66 = require("path");
-
-// src/app-builder/publish-stage-parser.ts
-var STAGE_RE = /^\s*::stage::(build|deploy|verify)\s*$/;
-var PROD_URL_RE = /^\s*::prod-url::(\S+)\s*$/;
-var URL_RE = /\bhttps?:\/\/[^\s]+/;
-function parsePublishLine(line) {
-  const stageMatch = STAGE_RE.exec(line);
-  if (stageMatch) return { kind: "stage", stage: stageMatch[1] };
-  const urlMatch = PROD_URL_RE.exec(line);
-  if (urlMatch) return { kind: "prod-url", url: urlMatch[1] };
-  return null;
-}
-function extractProdUrl(text) {
-  const m2 = URL_RE.exec(text);
-  return m2 ? m2[0] : null;
-}
-function tailStderrLines(buf, n) {
-  if (!buf) return "";
-  const lines = buf.split("\n");
-  if (lines.length <= n) return buf;
-  return lines.slice(lines.length - n).join("\n");
-}
-
-// src/app-builder/publish-job-runner.ts
-async function startPublishJob(deps, args) {
-  const { registry: registry2, projectDir } = deps;
-  const spawn13 = deps.spawnImpl ?? import_node_child_process17.spawn;
-  if (registry2.has(args.name)) {
-    return { jobId: registry2.get(args.name).jobId, status: "already-publishing" };
-  }
-  const projDir = projectDir(args.name);
-  const logPath = (0, import_node_path66.join)(projDir, ".publish.log");
-  let logStream = null;
-  try {
-    logStream = (0, import_node_fs51.createWriteStream)(logPath, { flags: "w" });
-  } catch {
-    logStream = null;
-  }
-  const child = spawn13("bash", [args.scriptPath, projDir, args.personaRoot ?? ""], {
-    cwd: projDir,
-    env: process.env,
-    stdio: ["ignore", "pipe", "pipe"]
-  });
-  const jobId = registry2.create({
-    name: args.name,
-    sessionId: args.sessionId,
-    childProc: child
-  });
-  deps.logger?.info("app-builder.publish.spawned", {
-    name: args.name,
-    jobId,
-    pid: child.pid ?? null,
-    scriptPath: args.scriptPath,
-    logPath
-  });
-  child.on("error", (err) => {
-    deps.logger?.warn("app-builder.publish.spawn-error", {
-      name: args.name,
-      jobId,
-      error: err instanceof Error ? err.message : String(err)
-    });
-    void handleExit(deps, {
-      name: args.name,
-      jobId,
-      code: null,
-      signal: null,
-      urlCandidate: null,
-      stderrTail: err instanceof Error ? err.message : String(err),
-      logPath
-    });
-  });
-  let urlFromMarker = null;
-  let urlFallback = null;
-  let stdoutBuf = "";
-  child.stdout?.on("data", (chunk) => {
-    if (logStream) logStream.write(chunk);
-    stdoutBuf += chunk.toString();
-    let nlIdx;
-    while ((nlIdx = stdoutBuf.indexOf("\n")) >= 0) {
-      const line = stdoutBuf.slice(0, nlIdx);
-      stdoutBuf = stdoutBuf.slice(nlIdx + 1);
-      handleStdoutLine(deps, args.name, jobId, line);
-      const parsedForUrl = parsePublishLine(line);
-      if (parsedForUrl?.kind === "prod-url") urlFromMarker = parsedForUrl.url;
-      const url = extractProdUrl(line);
-      if (url && !urlFallback) urlFallback = url;
-    }
-  });
-  let stderrBuf = "";
-  child.stderr?.on("data", (chunk) => {
-    if (logStream) logStream.write(chunk);
-    stderrBuf += chunk.toString();
-  });
-  child.on("exit", (code, signal) => {
-    if (logStream) logStream.end();
-    const urlCandidate = urlFromMarker ?? urlFallback;
-    deps.logger?.info("app-builder.publish.child-exit", {
-      name: args.name,
-      jobId,
-      code,
-      signal,
-      hadUrl: !!urlCandidate,
-      urlSource: urlFromMarker ? "marker" : urlFallback ? "fallback" : "none",
-      stderrBytes: stderrBuf.length
-    });
-    void handleExit(deps, {
-      name: args.name,
-      jobId,
-      code,
-      signal,
-      urlCandidate,
-      stderrTail: tailStderrLines(stderrBuf, 20),
-      logPath
-    });
-  });
-  return { jobId, status: "started" };
-}
-function handleStdoutLine(deps, name, jobId, line) {
-  const parsed = parsePublishLine(line);
-  if (parsed?.kind !== "stage") return;
-  advanceStage(deps, name, jobId, parsed.stage);
-}
-function advanceStage(deps, name, jobId, next) {
-  const job = deps.registry.get(name);
-  if (!job) return;
-  const prev = job.stage;
-  const wasFirstStage = !job.sawAnyStage;
-  deps.logger?.info("app-builder.publish.stage-advance", {
-    name,
-    jobId,
-    prev: wasFirstStage ? null : prev,
-    next,
-    firstStage: wasFirstStage
-  });
-  if (wasFirstStage) {
-    deps.registry.updateStage(name, next);
-    void deps.setPublishJob(name, {
-      jobId,
-      stage: next,
-      startedAt: job.startedAt
-    });
-    deps.broadcast({
-      type: "appBuilder:publish-progress",
-      name,
-      jobId,
-      stage: next,
-      status: "started"
-    });
-    return;
-  }
-  if (prev === next) {
-    return;
-  }
-  deps.broadcast({
-    type: "appBuilder:publish-progress",
-    name,
-    jobId,
-    stage: prev,
-    status: "completed"
-  });
-  deps.registry.updateStage(name, next);
-  void deps.setPublishJob(name, {
-    jobId,
-    stage: next,
-    startedAt: job.startedAt
-  });
-  deps.broadcast({
-    type: "appBuilder:publish-progress",
-    name,
-    jobId,
-    stage: next,
-    status: "started"
-  });
-}
-async function handleExit(deps, args) {
-  const job = deps.registry.get(args.name);
-  if (args.signal === "SIGTERM" && job?.dismissed) {
-    try {
-      await deps.clearPublishJob(args.name);
-    } catch (err) {
-      console.error("[publish] clearPublishJob failed (dismissed branch)", err);
-    }
-    deps.registry.remove(args.name);
-    return;
-  }
-  if (args.code === 0 && args.urlCandidate) {
-    if (job?.sawAnyStage) {
-      deps.broadcast({
-        type: "appBuilder:publish-progress",
-        name: args.name,
-        jobId: args.jobId,
-        stage: job.stage,
-        status: "completed"
-      });
-    }
-    try {
-      await deps.setProdUrl(args.name, args.urlCandidate);
-    } catch (err) {
-      console.error("[publish] setProdUrl failed; falling through to failure branch", err);
-      await emitFailure(deps, args, "\u8C03 setProdUrl \u5931\u8D25\uFF1A" + (err instanceof Error ? err.message : String(err)));
-      return;
-    }
-    try {
-      await deps.clearPublishJob(args.name);
-    } catch (err) {
-      console.error("[publish] clearPublishJob failed (success branch)", err);
-    }
-    deps.registry.remove(args.name);
-    return;
-  }
-  await emitFailure(deps, args, buildErrorSummary(args));
-}
-async function emitFailure(deps, args, errorSummary) {
-  const job = deps.registry.get(args.name);
-  const failStage = job?.sawAnyStage ? job.stage : "unknown";
-  deps.logger?.warn("app-builder.publish.failed", {
-    name: args.name,
-    jobId: args.jobId,
-    stage: failStage,
-    errorSummary: errorSummary.slice(0, 500)
-  });
-  try {
-    await deps.clearPublishJob(args.name);
-  } catch (err) {
-    deps.logger?.warn("app-builder.publish.clear-field-failed", {
-      name: args.name,
-      jobId: args.jobId,
-      error: err instanceof Error ? err.message : String(err)
-    });
-  }
-  const removed = deps.registry.remove(args.name);
-  deps.broadcast({
-    type: "appBuilder:publish-failed",
-    name: args.name,
-    jobId: args.jobId,
-    stage: failStage,
-    errorSummary
-  });
-  if (removed) {
-    const msg = formatFailureMessage(failStage, errorSummary, args.logPath);
-    try {
-      await deps.injectUserText(removed.sessionId, msg);
-      deps.logger?.info("app-builder.publish.failure-injected-to-chat", {
-        name: args.name,
-        jobId: args.jobId,
-        sessionId: removed.sessionId
-      });
-    } catch (err) {
-      deps.logger?.warn("app-builder.publish.inject-user-text-failed", {
-        name: args.name,
-        jobId: args.jobId,
-        sessionId: removed.sessionId,
-        error: err instanceof Error ? err.message : String(err)
-      });
-    }
-  } else {
-    deps.logger?.warn("app-builder.publish.no-registry-entry-on-failure", {
-      name: args.name,
-      jobId: args.jobId
-    });
-  }
-}
-function buildErrorSummary(args) {
-  if (args.signal) {
-    return `publish.sh \u88AB\u4E2D\u65AD\uFF08signal: ${args.signal}\uFF09`;
-  }
-  if (args.code === 0 && !args.urlCandidate) {
-    return "publish.sh \u6210\u529F\u9000\u51FA\u4F46\u672A\u8F93\u51FA\u516C\u7F51 URL";
-  }
-  return args.stderrTail || `publish.sh \u5F02\u5E38\u9000\u51FA\uFF08exit code: ${args.code}\uFF09`;
-}
-function formatFailureMessage(stage, errorSummary, logPath) {
-  return `\u53D1\u5E03\u5931\u8D25\uFF1A[${stage}] \u9636\u6BB5
-${errorSummary}
-
-\u5B8C\u6574\u65E5\u5FD7\uFF1A${logPath}
-\u8BF7\u4F60\u63A5\u7BA1\u5B8C\u6210\u672C\u6B21\u53D1\u5E03\uFF1A\u5148\u6839\u636E\u65E5\u5FD7\u4FEE\u590D\u95EE\u9898\uFF0C\u7136\u540E\u91CD\u8DD1 publish.sh \u76F4\u5230\u4E0A\u7EBF\u6210\u529F\uFF0C\u6700\u540E\u7528 appBuilder.setProdUrl \u5199\u5165\u516C\u7F51 URL\u3002`;
-}
-async function recoverInterruptedJobs(deps) {
-  const projects = await deps.listAllProjects();
-  for (const p2 of projects) {
-    if (p2.publishJob) {
-      deps.log(
-        `[publish] found interrupted job ${p2.publishJob.jobId} for ${p2.name}, stage=${p2.publishJob.stage}`
-      );
-    }
-  }
-}
+// src/app-builder/ports.ts
+var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
 
 // src/handlers/app-builder.ts
 init_protocol();
-var import_node_path67 = require("path");
-var import_node_fs52 = require("fs");
-var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
+var import_node_path65 = require("path");
+var import_node_fs50 = require("fs");
+var DEFAULT_TEMPLATE = "nestjs-react";
 var DEV_SERVER_READY_TIMEOUT_MS = 3e4;
-async function recoverInterruptedPublishJobs(store, logger) {
-  await recoverInterruptedJobs({
-    listAllProjects: async () => store.list(),
-    log: (msg) => logger?.info(msg)
-  });
-}
 function buildAppBuilderHandlers(deps) {
   const { store, devServerLifecycle, sessionManager, getTunnelUrl, broadcastProjectUpdated } = deps;
   function resolveStore(opts) {
@@ -65372,11 +64818,9 @@ function buildAppBuilderHandlers(deps) {
     }
   }
   const stages = /* @__PURE__ */ new Map();
-  const publishRegistry = new PublishJobRegistry();
   function withPublishJobStatus(meta) {
     if (!meta.publishJob) return void 0;
-    const job = publishRegistry.get(meta.name);
-    const inFlight = !!job && job.jobId === meta.publishJob.jobId;
+    const inFlight = deps.publishService.inFlightJobId(meta.name) === meta.publishJob.jobId;
     return {
       ...meta.publishJob,
       status: inFlight ? "in-flight" : "interrupted"
@@ -65418,7 +64862,7 @@ function buildAppBuilderHandlers(deps) {
   async function listAllUsersProjects() {
     if (!deps.usersRoot || !deps.getStore) return [];
     const getStore = deps.getStore;
-    const userIds = await import_node_fs52.promises.readdir(deps.usersRoot).catch(() => []);
+    const userIds = await import_node_fs50.promises.readdir(deps.usersRoot).catch(() => []);
     const perUser = await Promise.all(
       userIds.map((uid) => getStore(uid).list().catch(() => []))
     );
@@ -65484,26 +64928,26 @@ function buildAppBuilderHandlers(deps) {
     const userStore = resolveStore({ ctx, sessionId: f.sessionId });
     deps.logger?.info("app-builder.create-project.start", { name: f.name, sessionId: f.sessionId });
     const reservedPorts = new Set((await listAllUsersProjects()).map((p2) => p2.port));
-    const project = await userStore.create(f.name, reservedPorts);
+    const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(session.ownerPersonaId ?? "") : deps.personaRoot;
+    let project;
+    let projectDir;
     try {
-      const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(session.ownerPersonaId ?? "") : deps.personaRoot;
-      const templateSrcDir = (0, import_node_path67.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE);
-      const scaffoldScript = (0, import_node_path67.join)(deps.deployKitRoot, "scripts", "new-extension.sh");
-      const scaffoldResult = await userStore.scaffold(project.name, templateSrcDir, scaffoldScript);
-      deps.logger?.info("app-builder.scaffold.done", {
-        name: project.name,
-        stdout: scaffoldResult.stdout.slice(0, 200)
+      const created = await deps.createProjectOnDisk({
+        store: userStore,
+        name: f.name,
+        templateSrcDir: (0, import_node_path65.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE),
+        scaffoldScript: (0, import_node_path65.join)(deps.deployKitRoot, "scripts", "new-extension.sh"),
+        reservedPorts,
+        ...deps.logger ? { logger: deps.logger } : {}
       });
+      project = created.project;
+      projectDir = created.projectDir;
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
-      deps.logger?.warn("app-builder.scaffold.failed", { name: project.name, error: message });
-      await userStore.delete(project.name).catch((delErr) => {
-        deps.logger?.warn("app-builder.scaffold.rollback-failed", {
-          name: project.name,
-          error: delErr instanceof Error ? delErr.message : String(delErr)
-        });
-      });
-      throw new ClawdError(ERROR_CODES.INTERNAL, `scaffold failed: ${message}`);
+      if (message.startsWith("scaffold failed")) {
+        throw new ClawdError(ERROR_CODES.INTERNAL, message);
+      }
+      throw err;
     }
     const { broadcast } = sessionManager.update({
       sessionId: f.sessionId,
@@ -65515,7 +64959,7 @@ function buildAppBuilderHandlers(deps) {
       port: project.port,
       sessionId: f.sessionId
     });
-    return { response: { project, projectDir: userStore.projectDir(project.name) }, broadcast };
+    return { response: { project, projectDir }, broadcast };
   };
   const deleteProject = async (frame, _client, ctx) => {
     const { name } = parseArgs2(DeleteProjectArgsSchema, frame, "deleteProject");
@@ -65683,7 +65127,7 @@ function buildAppBuilderHandlers(deps) {
         `publish: project "${args.name}" has no bound session (orphan); cannot inject failure to chat`
       );
     }
-    if (project.publishJob && !publishRegistry.has(args.name)) {
+    if (project.publishJob && deps.publishService.inFlightJobId(args.name) === null) {
       deps.logger?.info("app-builder.publish.clear-interrupted", {
         name: args.name,
         previousJobId: project.publishJob.jobId,
@@ -65692,28 +65136,25 @@ function buildAppBuilderHandlers(deps) {
       await userStore.clearPublishJob(args.name);
     }
     const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(boundSession.ownerPersonaId ?? "") : deps.personaRoot;
-    const scriptPath = (0, import_node_path67.join)(deps.deployKitRoot, "scripts", "publish.sh");
+    const scriptPath = (0, import_node_path65.join)(deps.deployKitRoot, "scripts", "publish.sh");
     deps.logger?.info("app-builder.publish.start", {
       name: args.name,
       sessionId: boundSession.sessionId,
       scriptPath,
       personaRoot
     });
-    const result = await startPublishJob(
-      {
-        registry: publishRegistry,
-        setPublishJob: async (name, job) => {
-          await userStore.setPublishJob(name, job);
-          const current = getStageOf(name);
-          await setStageAndBroadcast(name, current.stage, current.reason, userStore);
-        },
-        clearPublishJob: async (name) => {
-          await userStore.clearPublishJob(name);
-          const current = getStageOf(name);
-          await setStageAndBroadcast(name, current.stage, current.reason, userStore);
-        },
-        setProdUrl: async (name, url) => {
-          await userStore.setProdUrl(name, url);
+    const result = await deps.publishService.start({
+      name: args.name,
+      sessionId: boundSession.sessionId,
+      scriptPath,
+      personaRoot,
+      store: userStore,
+      hooks: {
+        // 元数据每次写盘（publishJob 起落 / prodUrl 回填）后重推一帧：UI 渲染 PublishProgress
+        // 三段 checklist 依赖 project.publishJob.status==='in-flight'，而 publishJob 字段只有
+        // 通过 project-updated 帧才能到达 UI（publish-progress 帧 UI 端只用来设 currentStage，
+        // 不更新 currentProject）。prodUrl 同理，靠这条链路让 PreviewPane 切线上预览。
+        onProjectChanged: async (name) => {
           const current = getStageOf(name);
           await setStageAndBroadcast(name, current.stage, current.reason, userStore);
         },
@@ -65732,17 +65173,10 @@ function buildAppBuilderHandlers(deps) {
           for (const entry of broadcast) {
             deps.broadcastSessionFrame(entry.frame, entry.target);
           }
-        },
-        projectDir: (name) => userStore.projectDir(name),
-        logger: deps.logger
+        }
       },
-      {
-        name: args.name,
-        sessionId: boundSession.sessionId,
-        scriptPath,
-        personaRoot
-      }
-    );
+      ...deps.logger ? { logger: deps.logger } : {}
+    });
     return { response: { ...result } };
   };
   const dismissPublishJob = async (frame, _client, ctx) => {
@@ -65757,15 +65191,13 @@ function buildAppBuilderHandlers(deps) {
         `dismissPublishJob: project "${args.name}" not found`
       );
     }
-    const job = publishRegistry.get(args.name);
-    if (job) {
+    const inFlightJobId = deps.publishService.inFlightJobId(args.name);
+    if (inFlightJobId) {
       deps.logger?.info("app-builder.publish.dismiss.in-flight", {
         name: args.name,
-        jobId: job.jobId,
-        stage: job.stage
+        jobId: inFlightJobId
       });
-      publishRegistry.markDismissed(args.name);
-      job.childProc.kill("SIGTERM");
+      deps.publishService.dismiss(args.name);
     } else if (project.publishJob) {
       deps.logger?.info("app-builder.publish.dismiss.interrupted", {
         name: args.name,
@@ -66451,7 +65883,7 @@ function buildVisitorHandlers(deps) {
 
 // src/extension/registry.ts
 var import_promises16 = __toESM(require("fs/promises"), 1);
-var import_node_path68 = __toESM(require("path"), 1);
+var import_node_path66 = __toESM(require("path"), 1);
 async function loadAll(root) {
   let entries;
   try {
@@ -66464,13 +65896,13 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path68.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path66.default.join(root, ent.name), ent.name));
   }
   records.sort((a, b2) => a.extId < b2.extId ? -1 : a.extId > b2.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path68.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path66.default.join(dir, "manifest.json");
   let raw;
   try {
     raw = await import_promises16.default.readFile(manifestPath, "utf8");
@@ -66515,7 +65947,7 @@ async function loadOne(dir, dirName) {
 
 // src/extension/uninstall.ts
 var import_promises17 = __toESM(require("fs/promises"), 1);
-var import_node_path69 = __toESM(require("path"), 1);
+var import_node_path67 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -66524,7 +65956,7 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path69.default.join(deps.root, deps.extId);
+  const dir = import_node_path67.default.join(deps.root, deps.extId);
   try {
     await import_promises17.default.access(dir);
   } catch {
@@ -66535,13 +65967,13 @@ async function uninstall(deps) {
 }
 
 // src/handlers/index.ts
-var import_node_crypto21 = require("crypto");
+var import_node_crypto20 = require("crypto");
 
 // src/handlers/peer-exec.ts
 init_protocol();
 
 // src/peer-ops/run-command.ts
-var import_node_child_process18 = require("child_process");
+var import_node_child_process16 = require("child_process");
 var import_node_os24 = __toESM(require("os"), 1);
 var DEFAULT_TIMEOUT_MS5 = 3e4;
 var MAX_TIMEOUT_MS = 3e5;
@@ -66549,7 +65981,7 @@ var MAX_OUTPUT_BYTES = 1048576;
 function runCommand(command, opts = {}) {
   const timeoutMs = Math.min(opts.timeoutMs ?? DEFAULT_TIMEOUT_MS5, MAX_TIMEOUT_MS);
   return new Promise((resolve9) => {
-    const child = (0, import_node_child_process18.spawn)("bash", ["-c", command], { cwd: import_node_os24.default.homedir() });
+    const child = (0, import_node_child_process16.spawn)("bash", ["-c", command], { cwd: import_node_os24.default.homedir() });
     const out = [];
     const err = [];
     let outBytes = 0;
@@ -66691,7 +66123,7 @@ function buildMethodHandlers(deps) {
           const c = deps.contactStore.get(deviceId);
           return c ? { deviceId: c.deviceId, remoteUrl: c.remoteUrl, connectToken: c.connectToken } : null;
         },
-        genId: () => (0, import_node_crypto21.randomUUID)(),
+        genId: () => (0, import_node_crypto20.randomUUID)(),
         now: () => Date.now(),
         forwardInboxPostToPeer,
         logger: deps.logger
@@ -66734,6 +66166,8 @@ function buildMethodHandlers(deps) {
     ...buildAppBuilderHandlers({
       store: deps.appBuilderStore,
       getStore: deps.getProjectStore,
+      publishService: deps.publishService,
+      createProjectOnDisk: deps.createProjectOnDisk,
       usersRoot: deps.usersRoot,
       devServerLifecycle: deps.devServerLifecycle,
       sessionManager: deps.manager,
@@ -66757,7 +66191,7 @@ function buildMethodHandlers(deps) {
       broadcast: deps.broadcastToOwners
     }),
     ...buildMasterHandlers({
-      authorityTablePath: import_node_path70.default.join(deps.masterDataDir, "master-authority.json")
+      authorityTablePath: import_node_path68.default.join(deps.masterDataDir, "master-authority.json")
     }),
     ...buildTopicHandlers({
       topicStore: deps.topicStore,
@@ -66788,23 +66222,23 @@ function buildMethodHandlers(deps) {
 init_protocol();
 
 // src/tools/version-probe.ts
-var import_node_child_process20 = require("child_process");
+var import_node_child_process18 = require("child_process");
 init_claude();
 
 // src/tools/shell-path.ts
-var import_node_child_process19 = require("child_process");
+var import_node_child_process17 = require("child_process");
 var import_node_os25 = __toESM(require("os"), 1);
 function refreshPathFromLoginShell() {
   if (process.platform === "win32") return;
   const shell = process.env.SHELL ?? import_node_os25.default.userInfo().shell ?? "/bin/zsh";
   try {
-    const out = (0, import_node_child_process19.execFileSync)(shell, ["-ilc", 'command echo -n "$PATH"'], {
+    const out = (0, import_node_child_process17.execFileSync)(shell, ["-ilc", 'command echo -n "$PATH"'], {
       encoding: "utf8",
       timeout: 3e3,
       stdio: ["ignore", "pipe", "ignore"]
     });
-    const path93 = out.trim();
-    if (path93) process.env.PATH = path93;
+    const path94 = out.trim();
+    if (path94) process.env.PATH = path94;
   } catch {
   }
 }
@@ -66815,7 +66249,7 @@ function parseVersionOutput(out) {
 }
 function execVersion(bin) {
   return new Promise((resolve9, reject) => {
-    (0, import_node_child_process20.execFile)(bin, ["--version"], { timeout: 5e3 }, (err, stdout) => {
+    (0, import_node_child_process18.execFile)(bin, ["--version"], { timeout: 5e3 }, (err, stdout) => {
       if (err) reject(err);
       else resolve9(String(stdout));
     });
@@ -66927,8 +66361,242 @@ function buildOnboardingHandlers(deps) {
   return { "onboarding:complete": complete, "tools:probe": toolsProbe, "onboarding:iosInterest": iosInterest };
 }
 
+// src/app-builder-plugin/project-store.ts
+var import_node_fs51 = require("fs");
+var import_node_child_process19 = require("child_process");
+var import_node_path69 = require("path");
+init_protocol();
+var PROJECTS_DIR = "projects";
+var META_FILE = ".clawd-project.json";
+var SCAFFOLD_TIMEOUT_MS = 3e4;
+var metaWriteQueues = /* @__PURE__ */ new Map();
+function serializeMetaWrite(metaPath, op) {
+  const prev = metaWriteQueues.get(metaPath) ?? Promise.resolve();
+  const next = prev.then(op, op);
+  const settled = next.then(
+    () => void 0,
+    () => void 0
+  );
+  metaWriteQueues.set(metaPath, settled);
+  void settled.then(() => {
+    if (metaWriteQueues.get(metaPath) === settled) metaWriteQueues.delete(metaPath);
+  });
+  return next;
+}
+var ProjectStore = class {
+  /** @param root projects 父目录，例如 `~/.clawd/users/<userId>/`（v2 per-user） */
+  constructor(root) {
+    this.root = root;
+  }
+  root;
+  serializeWrite(name, op) {
+    return serializeMetaWrite(this.metaPath(name), op);
+  }
+  /** projects/<name>/.clawd-project.json 路径 */
+  metaPath(name) {
+    return (0, import_node_path69.join)(this.projectsRoot(), name, META_FILE);
+  }
+  /** projects/<name>/ 目录路径（cwd 用） */
+  projectDir(name) {
+    return (0, import_node_path69.join)(this.projectsRoot(), name);
+  }
+  projectsRoot() {
+    return (0, import_node_path69.join)(this.root, PROJECTS_DIR);
+  }
+  async list() {
+    let entries;
+    try {
+      entries = await import_node_fs51.promises.readdir(this.projectsRoot());
+    } catch (err) {
+      if (err.code === "ENOENT") return [];
+      throw err;
+    }
+    const out = [];
+    for (const name of entries) {
+      try {
+        const raw = await import_node_fs51.promises.readFile(this.metaPath(name), "utf8");
+        const json = JSON.parse(raw);
+        let migrated = false;
+        if (typeof json.devCommand !== "string" || json.devCommand.length === 0) {
+          json.devCommand = DEFAULT_DEV_COMMAND;
+          migrated = true;
+        }
+        const parsed = ProjectMetadataSchema.safeParse(json);
+        if (parsed.success) {
+          out.push(parsed.data);
+          if (migrated) {
+            void import_node_fs51.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
+            });
+          }
+        }
+      } catch {
+      }
+    }
+    return out.sort((a, b2) => a.name.localeCompare(b2.name));
+  }
+  /**
+   * @param reservedPorts 其它 user 已占端口（v2 per-user：端口必须全局唯一，所有 user 的
+   *   dev server 同机跑；per-user store 各自只 list 自己，靠 handler 收集全局端口传进来，
+   *   否则不同 user 的首个项目都从 PROJECT_PORT_MIN 起 → 全撞 6173）。
+   */
+  async create(name, reservedPorts) {
+    const existing = await this.list();
+    if (existing.some((p2) => p2.name === name)) {
+      throw new Error(`project "${name}" already exists / \u5DF2\u5B58\u5728`);
+    }
+    const usedPorts = new Set(existing.map((p2) => p2.port));
+    if (reservedPorts) for (const p2 of reservedPorts) usedPorts.add(p2);
+    let port = -1;
+    for (let p2 = PROJECT_PORT_MIN; p2 <= PROJECT_PORT_MAX; p2++) {
+      if (!usedPorts.has(p2)) {
+        port = p2;
+        break;
+      }
+    }
+    if (port < 0) {
+      throw new Error(
+        `port pool exhausted / \u7AEF\u53E3\u6C60\u5DF2\u6EE1\uFF08${PROJECT_PORT_MIN}-${PROJECT_PORT_MAX}\uFF09\uFF0C\u5148\u5220\u4E00\u4E2A project \u91CA\u653E\u7AEF\u53E3`
+      );
+    }
+    const meta = {
+      name,
+      port,
+      createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+      devCommand: DEFAULT_DEV_COMMAND
+    };
+    const validated = ProjectMetadataSchema.safeParse(meta);
+    if (!validated.success) {
+      throw new Error(`invalid name "${name}": ${validated.error.message}`);
+    }
+    const dir = this.projectDir(name);
+    await import_node_fs51.promises.mkdir(dir, { recursive: true });
+    await import_node_fs51.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
+    return meta;
+  }
+  /**
+   * 同步内联 scaffold：spawn `extension-kit/scripts/new-extension.sh <name>` 等 exit。
+   * 必须在 `create()` 之后调（脚本期望 projects/<name>/.clawd-project.json 已就位 = picker 模式）。
+   * 失败抛错；上层（handler）应当 catch 后回滚（删 dir + 不 mutate session）。
+   *
+   * spec 2026-06-02 §5.6.3：scaffold 对 assistant 不可见，避免 assistant 被诱导去"读 example
+   * 代码再参考"。assistant 进 project 时目录已是完整模板，直接 pnpm install 即可。
+   */
+  async scaffold(name, templateSrcDir, scaffoldScriptPath) {
+    const destDir = this.projectDir(name);
+    return await new Promise((resolve9, reject) => {
+      const child = (0, import_node_child_process19.spawn)("bash", [scaffoldScriptPath, name, templateSrcDir, destDir], {
+        env: { ...process.env, PATH: process.env.PATH ?? "" },
+        stdio: ["ignore", "pipe", "pipe"]
+      });
+      let stdout = "";
+      let stderr = "";
+      child.stdout.on("data", (d) => {
+        stdout += d.toString("utf8");
+      });
+      child.stderr.on("data", (d) => {
+        stderr += d.toString("utf8");
+      });
+      const timer = setTimeout(() => {
+        child.kill("SIGKILL");
+        reject(new Error(`scaffold timeout (>${SCAFFOLD_TIMEOUT_MS}ms): ${scaffoldScriptPath} ${name}`));
+      }, SCAFFOLD_TIMEOUT_MS);
+      child.on("error", (err) => {
+        clearTimeout(timer);
+        reject(new Error(`scaffold spawn failed: ${err.message}`));
+      });
+      child.on("exit", (code, signal) => {
+        clearTimeout(timer);
+        if (code === 0) resolve9({ stdout, stderr });
+        else reject(new Error(`scaffold exit ${code ?? signal}: ${stderr.slice(0, 500)}`));
+      });
+    });
+  }
+  async delete(name) {
+    const dir = this.projectDir(name);
+    await import_node_fs51.promises.rm(dir, { recursive: true, force: true });
+  }
+  async updatePort(name, newPort) {
+    if (newPort < PROJECT_PORT_MIN || newPort > PROJECT_PORT_MAX) {
+      throw new Error(
+        `port range invalid: must be ${PROJECT_PORT_MIN}-${PROJECT_PORT_MAX}, got ${newPort}`
+      );
+    }
+    return await this.serializeWrite(name, async () => {
+      const list = await this.list();
+      const target = list.find((p2) => p2.name === name);
+      if (!target) throw new Error(`project "${name}" not found / \u4E0D\u5B58\u5728`);
+      const conflict = list.find((p2) => p2.name !== name && p2.port === newPort);
+      if (conflict) {
+        throw new Error(`port ${newPort} already used / \u5DF2\u88AB project "${conflict.name}" \u5360\u7528`);
+      }
+      const updated = { ...target, port: newPort };
+      await import_node_fs51.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
+      return updated;
+    });
+  }
+  /**
+   * 单栏 refactor (spec 2026-06-02 §5.6.1)：发布上线后写公网 URL 到 .clawd-project.json.prodUrl。
+   * UI 通过 listProjects 读到 prodUrl 后切预览栏到线上 URL，取代旧 prod marker 机制。
+   * 重复调用幂等（覆盖旧 URL）。url 由 ProjectMetadataSchema 校验 url() 格式。
+   */
+  async setProdUrl(name, url) {
+    return await this.serializeWrite(name, async () => {
+      const list = await this.list();
+      const target = list.find((p2) => p2.name === name);
+      if (!target) throw new Error(`project "${name}" not found / \u4E0D\u5B58\u5728`);
+      const updated = { ...target, prodUrl: url };
+      const validated = ProjectMetadataSchema.safeParse(updated);
+      if (!validated.success) {
+        throw new Error(`invalid prodUrl "${url}": ${validated.error.message}`);
+      }
+      await import_node_fs51.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+      return validated.data;
+    });
+  }
+  /**
+   * 发布上线脚手架化 (spec 2026-06-03-app-builder-publish-scaffold-design §5.1.4)：
+   * 写 publishJob 字段到 .clawd-project.json。仅承载 in-flight 状态 ——
+   *   - daemon 收到第一个 ::stage::build marker 时写入
+   *   - 每次 stage 切换更新 stage 字段（jobId / startedAt 不变）
+   *   - 成功 / 失败 / dismiss 时调 clearPublishJob 清掉
+   *   - 只有 daemon 崩才会留残骸
+   * 写入时保留所有其他字段（prodUrl 等不受影响）。
+   */
+  async setPublishJob(name, job) {
+    return await this.serializeWrite(name, async () => {
+      const list = await this.list();
+      const target = list.find((p2) => p2.name === name);
+      if (!target) throw new Error(`project "${name}" not found / \u4E0D\u5B58\u5728`);
+      const updated = { ...target, publishJob: job };
+      const validated = ProjectMetadataSchema.safeParse(updated);
+      if (!validated.success) {
+        throw new Error(`invalid publishJob: ${validated.error.message}`);
+      }
+      await import_node_fs51.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+      return validated.data;
+    });
+  }
+  /** 清掉 .clawd-project.json.publishJob 字段。其他字段保持原样。 */
+  async clearPublishJob(name) {
+    return await this.serializeWrite(name, async () => {
+      const list = await this.list();
+      const target = list.find((p2) => p2.name === name);
+      if (!target) throw new Error(`project "${name}" not found / \u4E0D\u5B58\u5728`);
+      if (!target.publishJob) return target;
+      const { publishJob: _drop, ...rest } = target;
+      void _drop;
+      const validated = ProjectMetadataSchema.safeParse(rest);
+      if (!validated.success) {
+        throw new Error(`failed to clear publishJob: ${validated.error.message}`);
+      }
+      await import_node_fs51.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+      return validated.data;
+    });
+  }
+};
+
 // src/app-builder/dev-server-supervisor.ts
-var import_node_child_process21 = require("child_process");
+var import_node_child_process20 = require("child_process");
 var import_node_events2 = require("events");
 var DEFAULT_READY_PATTERN = /Local:\s+https?:\/\/|Nest application successfully started|server listening on/i;
 var DevServerSupervisor = class extends import_node_events2.EventEmitter {
@@ -66965,7 +66633,7 @@ var DevServerSupervisor = class extends import_node_events2.EventEmitter {
       tunnelHost: args.tunnelHost,
       devCommand: cmd
     });
-    const child = (0, import_node_child_process21.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process20.spawn)("sh", ["-c", cmd], {
       cwd: args.cwd,
       env,
       stdio: "pipe",
@@ -67181,6 +66849,460 @@ var DevServerSupervisor = class extends import_node_events2.EventEmitter {
   }
 };
 
+// src/app-builder-plugin/publish-registry.ts
+var import_node_crypto21 = require("crypto");
+var PublishJobRegistry = class {
+  jobs = /* @__PURE__ */ new Map();
+  has(name) {
+    return this.jobs.has(name);
+  }
+  get(name) {
+    return this.jobs.get(name);
+  }
+  /**
+   * args.jobId 仅用于测试注入；生产代码不传，registry 自己生成。
+   * args.now 仅用于测试注入；生产代码不传，用 Date.now()。
+   */
+  create(args) {
+    if (this.jobs.has(args.name)) {
+      throw new Error(`already publishing: ${args.name}`);
+    }
+    const jobId = args.jobId ?? `job-${(0, import_node_crypto21.randomUUID)()}`;
+    this.jobs.set(args.name, {
+      jobId,
+      name: args.name,
+      stage: "build",
+      sessionId: args.sessionId,
+      childProc: args.childProc,
+      dismissed: false,
+      sawAnyStage: false,
+      startedAt: args.now ?? Date.now()
+    });
+    return jobId;
+  }
+  updateStage(name, stage) {
+    const job = this.jobs.get(name);
+    if (!job) return;
+    job.stage = stage;
+    job.sawAnyStage = true;
+  }
+  markDismissed(name) {
+    const job = this.jobs.get(name);
+    if (!job) return;
+    job.dismissed = true;
+  }
+  remove(name) {
+    const job = this.jobs.get(name);
+    if (!job) return void 0;
+    this.jobs.delete(name);
+    return { sessionId: job.sessionId };
+  }
+};
+
+// src/app-builder-plugin/publish-job-runner.ts
+var import_node_child_process21 = require("child_process");
+var import_node_fs52 = require("fs");
+var import_node_path70 = require("path");
+
+// src/app-builder-plugin/publish-stage-parser.ts
+var STAGE_RE = /^\s*::stage::(build|deploy|verify)\s*$/;
+var PROD_URL_RE = /^\s*::prod-url::(\S+)\s*$/;
+var URL_RE = /\bhttps?:\/\/[^\s]+/;
+function parsePublishLine(line) {
+  const stageMatch = STAGE_RE.exec(line);
+  if (stageMatch) return { kind: "stage", stage: stageMatch[1] };
+  const urlMatch = PROD_URL_RE.exec(line);
+  if (urlMatch) return { kind: "prod-url", url: urlMatch[1] };
+  return null;
+}
+function extractProdUrl(text) {
+  const m2 = URL_RE.exec(text);
+  return m2 ? m2[0] : null;
+}
+function tailStderrLines(buf, n) {
+  if (!buf) return "";
+  const lines = buf.split("\n");
+  if (lines.length <= n) return buf;
+  return lines.slice(lines.length - n).join("\n");
+}
+
+// src/app-builder-plugin/publish-job-runner.ts
+async function startPublishJob(deps, args) {
+  const { registry: registry2, projectDir } = deps;
+  const spawn13 = deps.spawnImpl ?? import_node_child_process21.spawn;
+  if (registry2.has(args.name)) {
+    return { jobId: registry2.get(args.name).jobId, status: "already-publishing" };
+  }
+  const projDir = projectDir(args.name);
+  const logPath = (0, import_node_path70.join)(projDir, ".publish.log");
+  let logStream = null;
+  try {
+    logStream = (0, import_node_fs52.createWriteStream)(logPath, { flags: "w" });
+  } catch {
+    logStream = null;
+  }
+  const child = spawn13("bash", [args.scriptPath, projDir, args.personaRoot ?? ""], {
+    cwd: projDir,
+    env: process.env,
+    stdio: ["ignore", "pipe", "pipe"]
+  });
+  const jobId = registry2.create({
+    name: args.name,
+    sessionId: args.sessionId,
+    childProc: child
+  });
+  deps.logger?.info("app-builder.publish.spawned", {
+    name: args.name,
+    jobId,
+    pid: child.pid ?? null,
+    scriptPath: args.scriptPath,
+    logPath
+  });
+  child.on("error", (err) => {
+    deps.logger?.warn("app-builder.publish.spawn-error", {
+      name: args.name,
+      jobId,
+      error: err instanceof Error ? err.message : String(err)
+    });
+    void handleExit(deps, {
+      name: args.name,
+      jobId,
+      code: null,
+      signal: null,
+      urlCandidate: null,
+      stderrTail: err instanceof Error ? err.message : String(err),
+      logPath
+    });
+  });
+  let urlFromMarker = null;
+  let urlFallback = null;
+  let stdoutBuf = "";
+  child.stdout?.on("data", (chunk) => {
+    if (logStream) logStream.write(chunk);
+    stdoutBuf += chunk.toString();
+    let nlIdx;
+    while ((nlIdx = stdoutBuf.indexOf("\n")) >= 0) {
+      const line = stdoutBuf.slice(0, nlIdx);
+      stdoutBuf = stdoutBuf.slice(nlIdx + 1);
+      handleStdoutLine(deps, args.name, jobId, line);
+      const parsedForUrl = parsePublishLine(line);
+      if (parsedForUrl?.kind === "prod-url") urlFromMarker = parsedForUrl.url;
+      const url = extractProdUrl(line);
+      if (url && !urlFallback) urlFallback = url;
+    }
+  });
+  let stderrBuf = "";
+  child.stderr?.on("data", (chunk) => {
+    if (logStream) logStream.write(chunk);
+    stderrBuf += chunk.toString();
+  });
+  child.on("exit", (code, signal) => {
+    if (logStream) logStream.end();
+    const urlCandidate = urlFromMarker ?? urlFallback;
+    deps.logger?.info("app-builder.publish.child-exit", {
+      name: args.name,
+      jobId,
+      code,
+      signal,
+      hadUrl: !!urlCandidate,
+      urlSource: urlFromMarker ? "marker" : urlFallback ? "fallback" : "none",
+      stderrBytes: stderrBuf.length
+    });
+    void handleExit(deps, {
+      name: args.name,
+      jobId,
+      code,
+      signal,
+      urlCandidate,
+      stderrTail: tailStderrLines(stderrBuf, 20),
+      logPath
+    });
+  });
+  return { jobId, status: "started" };
+}
+function handleStdoutLine(deps, name, jobId, line) {
+  const parsed = parsePublishLine(line);
+  if (parsed?.kind !== "stage") return;
+  advanceStage(deps, name, jobId, parsed.stage);
+}
+function advanceStage(deps, name, jobId, next) {
+  const job = deps.registry.get(name);
+  if (!job) return;
+  const prev = job.stage;
+  const wasFirstStage = !job.sawAnyStage;
+  deps.logger?.info("app-builder.publish.stage-advance", {
+    name,
+    jobId,
+    prev: wasFirstStage ? null : prev,
+    next,
+    firstStage: wasFirstStage
+  });
+  if (wasFirstStage) {
+    deps.registry.updateStage(name, next);
+    void deps.setPublishJob(name, {
+      jobId,
+      stage: next,
+      startedAt: job.startedAt
+    });
+    deps.broadcast({
+      type: "appBuilder:publish-progress",
+      name,
+      jobId,
+      stage: next,
+      status: "started"
+    });
+    return;
+  }
+  if (prev === next) {
+    return;
+  }
+  deps.broadcast({
+    type: "appBuilder:publish-progress",
+    name,
+    jobId,
+    stage: prev,
+    status: "completed"
+  });
+  deps.registry.updateStage(name, next);
+  void deps.setPublishJob(name, {
+    jobId,
+    stage: next,
+    startedAt: job.startedAt
+  });
+  deps.broadcast({
+    type: "appBuilder:publish-progress",
+    name,
+    jobId,
+    stage: next,
+    status: "started"
+  });
+}
+async function handleExit(deps, args) {
+  const job = deps.registry.get(args.name);
+  if (args.signal === "SIGTERM" && job?.dismissed) {
+    try {
+      await deps.clearPublishJob(args.name);
+    } catch (err) {
+      console.error("[publish] clearPublishJob failed (dismissed branch)", err);
+    }
+    deps.registry.remove(args.name);
+    deps.onSettled?.({ kind: "dismissed" });
+    return;
+  }
+  if (args.code === 0 && args.urlCandidate) {
+    if (job?.sawAnyStage) {
+      deps.broadcast({
+        type: "appBuilder:publish-progress",
+        name: args.name,
+        jobId: args.jobId,
+        stage: job.stage,
+        status: "completed"
+      });
+    }
+    try {
+      await deps.setProdUrl(args.name, args.urlCandidate);
+    } catch (err) {
+      console.error("[publish] setProdUrl failed; falling through to failure branch", err);
+      await emitFailure(deps, args, "\u8C03 setProdUrl \u5931\u8D25\uFF1A" + (err instanceof Error ? err.message : String(err)));
+      return;
+    }
+    try {
+      await deps.clearPublishJob(args.name);
+    } catch (err) {
+      console.error("[publish] clearPublishJob failed (success branch)", err);
+    }
+    deps.registry.remove(args.name);
+    deps.onSettled?.({ kind: "published", url: args.urlCandidate });
+    return;
+  }
+  await emitFailure(deps, args, buildErrorSummary(args));
+}
+async function emitFailure(deps, args, errorSummary) {
+  const job = deps.registry.get(args.name);
+  const failStage = job?.sawAnyStage ? job.stage : "unknown";
+  deps.logger?.warn("app-builder.publish.failed", {
+    name: args.name,
+    jobId: args.jobId,
+    stage: failStage,
+    errorSummary: errorSummary.slice(0, 500)
+  });
+  try {
+    await deps.clearPublishJob(args.name);
+  } catch (err) {
+    deps.logger?.warn("app-builder.publish.clear-field-failed", {
+      name: args.name,
+      jobId: args.jobId,
+      error: err instanceof Error ? err.message : String(err)
+    });
+  }
+  const removed = deps.registry.remove(args.name);
+  deps.broadcast({
+    type: "appBuilder:publish-failed",
+    name: args.name,
+    jobId: args.jobId,
+    stage: failStage,
+    errorSummary
+  });
+  if (removed) {
+    const msg = formatFailureMessage(failStage, errorSummary, args.logPath);
+    try {
+      await deps.injectUserText(removed.sessionId, msg);
+      deps.logger?.info("app-builder.publish.failure-injected-to-chat", {
+        name: args.name,
+        jobId: args.jobId,
+        sessionId: removed.sessionId
+      });
+    } catch (err) {
+      deps.logger?.warn("app-builder.publish.inject-user-text-failed", {
+        name: args.name,
+        jobId: args.jobId,
+        sessionId: removed.sessionId,
+        error: err instanceof Error ? err.message : String(err)
+      });
+    }
+  } else {
+    deps.logger?.warn("app-builder.publish.no-registry-entry-on-failure", {
+      name: args.name,
+      jobId: args.jobId
+    });
+  }
+  deps.onSettled?.({ kind: "failed", stage: failStage, errorSummary });
+}
+function buildErrorSummary(args) {
+  if (args.signal) {
+    return `publish.sh \u88AB\u4E2D\u65AD\uFF08signal: ${args.signal}\uFF09`;
+  }
+  if (args.code === 0 && !args.urlCandidate) {
+    return "publish.sh \u6210\u529F\u9000\u51FA\u4F46\u672A\u8F93\u51FA\u516C\u7F51 URL";
+  }
+  return args.stderrTail || `publish.sh \u5F02\u5E38\u9000\u51FA\uFF08exit code: ${args.code}\uFF09`;
+}
+function formatFailureMessage(stage, errorSummary, logPath) {
+  return `\u53D1\u5E03\u5931\u8D25\uFF1A[${stage}] \u9636\u6BB5
+${errorSummary}
+
+\u5B8C\u6574\u65E5\u5FD7\uFF1A${logPath}
+\u8BF7\u4F60\u63A5\u7BA1\u5B8C\u6210\u672C\u6B21\u53D1\u5E03\uFF1A\u5148\u6839\u636E\u65E5\u5FD7\u4FEE\u590D\u95EE\u9898\uFF0C\u7136\u540E\u91CD\u8DD1 publish.sh \u76F4\u5230\u4E0A\u7EBF\u6210\u529F\uFF0C\u6700\u540E\u7528 appBuilder.setProdUrl \u5199\u5165\u516C\u7F51 URL\u3002`;
+}
+async function recoverInterruptedJobs(deps) {
+  const projects = await deps.listAllProjects();
+  for (const p2 of projects) {
+    if (p2.publishJob) {
+      deps.log(
+        `[publish] found interrupted job ${p2.publishJob.jobId} for ${p2.name}, stage=${p2.publishJob.stage}`
+      );
+    }
+  }
+}
+
+// src/app-builder-plugin/core.ts
+function createPublishService() {
+  const registry2 = new PublishJobRegistry();
+  return {
+    inFlightJobId(name) {
+      return registry2.get(name)?.jobId ?? null;
+    },
+    async start(args) {
+      const { store, hooks, logger } = args;
+      const changed = async (name) => {
+        await hooks?.onProjectChanged?.(name);
+      };
+      return await startPublishJob(
+        {
+          registry: registry2,
+          setPublishJob: async (name, job) => {
+            await store.setPublishJob(name, job);
+            await changed(name);
+          },
+          clearPublishJob: async (name) => {
+            await store.clearPublishJob(name);
+            await changed(name);
+          },
+          setProdUrl: async (name, url) => {
+            await store.setProdUrl(name, url);
+            await changed(name);
+          },
+          broadcast: (frame) => hooks?.broadcast?.(frame),
+          injectUserText: async (sessionId, text) => {
+            await hooks?.injectUserText?.(sessionId, text);
+          },
+          projectDir: (name) => store.projectDir(name),
+          ...hooks?.onSettled ? { onSettled: hooks.onSettled } : {},
+          ...logger ? { logger } : {}
+        },
+        {
+          name: args.name,
+          sessionId: args.sessionId,
+          scriptPath: args.scriptPath,
+          personaRoot: args.personaRoot
+        }
+      );
+    },
+    dismiss(name) {
+      const job = registry2.get(name);
+      if (!job) return false;
+      registry2.markDismissed(name);
+      job.childProc.kill("SIGTERM");
+      return true;
+    }
+  };
+}
+async function createProjectOnDisk(args) {
+  const { store, name, templateSrcDir, scaffoldScript, logger } = args;
+  const project = await store.create(name, args.reservedPorts);
+  try {
+    const result = await store.scaffold(name, templateSrcDir, scaffoldScript);
+    logger?.info("app-builder.scaffold.done", { name, stdout: result.stdout.slice(0, 200) });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    logger?.warn("app-builder.scaffold.failed", { name, error: message });
+    await store.delete(name).catch((delErr) => {
+      logger?.warn("app-builder.scaffold.rollback-failed", {
+        name,
+        error: delErr instanceof Error ? delErr.message : String(delErr)
+      });
+    });
+    throw new Error(`scaffold failed: ${message}`);
+  }
+  return { project, projectDir: store.projectDir(name) };
+}
+async function recoverInterruptedPublishJobs(store, logger) {
+  await recoverInterruptedJobs({
+    listAllProjects: async () => store.list(),
+    log: (msg) => logger?.info(msg)
+  });
+}
+
+// src/app-builder-plugin/mcp-config.ts
+var import_node_fs53 = __toESM(require("fs"), 1);
+var import_node_path71 = __toESM(require("path"), 1);
+function appBuilderMcpConfigPath(dataDir) {
+  return import_node_path71.default.join(dataDir, "app-builder.mcp.json");
+}
+function writeAppBuilderMcpConfig(args) {
+  const cfgPath = appBuilderMcpConfigPath(args.dataDir);
+  const cfg = {
+    _comment: "daemon \u542F\u52A8\u81EA\u52A8\u751F\u6210\uFF1Bagent spawn \u901A\u8FC7 --mcp-config \u6CE8\u5165\u3002app-builder-plugin/mcp-server.cjs \u662F clawd-app-builder \u63D2\u4EF6\uFF08app-builder persona \u79C1\u6709\u7684\u540E\u7AEF\uFF1Aproject \u76EE\u5F55/\u5143\u6570\u636E + \u53D1\u5E03\u6D41\u6C34\u7EBF\uFF09\u3002\u6709 CLAWD_DAEMON_URL \u65F6\u8F6C\u8C03 appBuilder:* RPC\uFF08\u7AEF\u53E3\u6C60 / \u4F1A\u8BDD\u7ED1\u5B9A / UI \u5E7F\u64AD\u5F52 daemon\uFF09\uFF0C\u6CA1\u6709\u65F6\u7528\u540C\u4E00\u4EFD\u5185\u6838\u81EA\u5DF1\u5E72\uFF08\u4E91\u4E0A\u5BB9\u5668\uFF09\u3002\u975E app-builder \u7CFB persona \u7684\u4F1A\u8BDD\u91CC\u672C server \u4E0D\u6CE8\u518C\u4EFB\u4F55 tool\u3002",
+    mcpServers: {
+      "clawd-app-builder": {
+        type: "stdio",
+        command: "node",
+        args: [args.serverScriptPath],
+        env: {
+          CLAWD_DAEMON_TOKEN: args.daemonToken,
+          CLAWD_DAEMON_URL: args.daemonUrl,
+          CLAWD_APP_BUILDER_SCAFFOLD_SCRIPT: import_node_path71.default.join(args.deployKitScriptsDir, "new-extension.sh"),
+          CLAWD_APP_BUILDER_PUBLISH_SCRIPT: import_node_path71.default.join(args.deployKitScriptsDir, "publish.sh"),
+          ...args.logPath ? { CLAWD_APP_BUILDER_LOG: args.logPath } : {}
+        }
+      }
+    }
+  };
+  import_node_fs53.default.mkdirSync(args.dataDir, { recursive: true });
+  import_node_fs53.default.writeFileSync(cfgPath, JSON.stringify(cfg, null, 2), "utf8");
+  return cfgPath;
+}
+
 // src/handlers/dispatch-rpc.ts
 init_zod();
 init_protocol();
@@ -67218,7 +67340,7 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 
 // src/extension/runtime.ts
 var import_node_child_process22 = require("child_process");
-var import_node_path71 = __toESM(require("path"), 1);
+var import_node_path72 = __toESM(require("path"), 1);
 var import_promises18 = require("timers/promises");
 
 // src/extension/port-allocator.ts
@@ -67319,7 +67441,7 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path71.default.join(this.root, extId);
+    const dir = import_node_path72.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
@@ -67431,7 +67553,7 @@ ${handle.stderrTail}`
 
 // src/extension/published-channels.ts
 var import_promises19 = __toESM(require("fs/promises"), 1);
-var import_node_path72 = __toESM(require("path"), 1);
+var import_node_path73 = __toESM(require("path"), 1);
 init_zod();
 var PublishedChannelsError = class extends Error {
   constructor(code, message) {
@@ -67530,7 +67652,7 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises19.default.mkdir(import_node_path72.default.dirname(this.filePath), { recursive: true });
+    await import_promises19.default.mkdir(import_node_path73.default.dirname(this.filePath), { recursive: true });
     await import_promises19.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
     await import_promises19.default.rename(tmp, this.filePath);
   }
@@ -67538,7 +67660,7 @@ var PublishedChannelStore = class {
 
 // src/extension/bundle-cache.ts
 var import_promises20 = __toESM(require("fs/promises"), 1);
-var import_node_path73 = __toESM(require("path"), 1);
+var import_node_path74 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -67547,14 +67669,14 @@ var BundleCache = class {
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
     await import_promises20.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path73.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path74.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
     await import_promises20.default.writeFile(tmp, buffer, { mode: 384 });
     await import_promises20.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path73.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path74.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
       return await import_promises20.default.readFile(file);
     } catch (e) {
@@ -67564,7 +67686,7 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path73.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path74.default.join(this.rootDir, `${snapshotHash}.zip`);
     await import_promises20.default.rm(file, { force: true });
   }
 };
@@ -67587,24 +67709,24 @@ async function startDaemon(config) {
     sampling: logShippingCfg.sampling,
     homeDir: import_node_os26.default.homedir()
   });
-  const logDir = import_node_path74.default.join(config.dataDir, "log");
-  import_node_fs53.default.mkdirSync(logDir, { recursive: true });
+  const logDir = import_node_path75.default.join(config.dataDir, "log");
+  import_node_fs54.default.mkdirSync(logDir, { recursive: true });
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path74.default.join(logDir, "clawd.log"),
+    file: import_node_path75.default.join(logDir, "clawd.log"),
     logClient
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const screenIdleProbeLogger = createFileOnlyLogger({
-    file: import_node_path74.default.join(logDir, "screen-idle-probe.log"),
+    file: import_node_path75.default.join(logDir, "screen-idle-probe.log"),
     level: "debug"
   });
   logger.info("screen-idle probe logger enabled", {
-    file: import_node_path74.default.join(logDir, "screen-idle-probe.log")
+    file: import_node_path75.default.join(logDir, "screen-idle-probe.log")
   });
   const CAP_TARGETS = [
-    import_node_path74.default.join(logDir, "clawd.log"),
-    import_node_path74.default.join(logDir, "screen-idle-probe.log")
+    import_node_path75.default.join(logDir, "clawd.log"),
+    import_node_path75.default.join(logDir, "screen-idle-probe.log")
   ];
   const LOG_CAP_MAX_BYTES = 10 * 1024 * 1024;
   const LOG_CAP_KEEP_BYTES = 5 * 1024 * 1024;
@@ -67726,8 +67848,8 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path74.default.join(config.dataDir, "personas"));
-  const usersRoot = import_node_path74.default.join(config.dataDir, "users");
+  const personaStore = new PersonaStore(import_node_path75.default.join(config.dataDir, "personas"));
+  const usersRoot = import_node_path75.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -67751,7 +67873,7 @@ async function startDaemon(config) {
   retirePersonaBuilder({ store: personaStore, logger });
   const groupFileStore = new GroupFileStore({ dataDir: config.dataDir, logger });
   const dispatchStore = createDispatchStore({
-    filePath: import_node_path74.default.join(config.dataDir, "dispatch.json"),
+    filePath: import_node_path75.default.join(config.dataDir, "dispatch.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("dispatch store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
@@ -67760,7 +67882,7 @@ async function startDaemon(config) {
   await dispatchStore.load();
   dispatchStore.markInterruptedAsFailed((/* @__PURE__ */ new Date()).toISOString());
   const channelStore = createChannelStore({
-    filePath: import_node_path74.default.join(config.dataDir, "channels.json"),
+    filePath: import_node_path75.default.join(config.dataDir, "channels.json"),
     now: () => Date.now(),
     genId: () => `ch-${(0, import_node_crypto22.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("channel store flush failed", {
@@ -67769,7 +67891,7 @@ async function startDaemon(config) {
   });
   await channelStore.load();
   const topicStore = createTopicStore({
-    filePath: import_node_path74.default.join(config.dataDir, "topics.json"),
+    filePath: import_node_path75.default.join(config.dataDir, "topics.json"),
     now: () => Date.now(),
     genId: () => `tp-${(0, import_node_crypto22.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("topic store flush failed", {
@@ -67796,18 +67918,18 @@ async function startDaemon(config) {
       });
     }
   });
-  const here = typeof __dirname === "string" ? __dirname : import_node_path74.default.dirname((0, import_node_url4.fileURLToPath)(import_meta7.url));
+  const here = typeof __dirname === "string" ? __dirname : import_node_path75.default.dirname((0, import_node_url4.fileURLToPath)(import_meta7.url));
   const mcpConfigs = [];
   const mcpDaemonUrl = `http://127.0.0.1:${config.port}`;
   const dispatchServerCandidates = [
-    import_node_path74.default.join(here, "dispatch", "mcp-server.cjs"),
+    import_node_path75.default.join(here, "dispatch", "mcp-server.cjs"),
     // 生产 dist/index → dist/dispatch/mcp-server.cjs
-    import_node_path74.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
+    import_node_path75.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
-  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs53.default.existsSync(p2));
+  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs54.default.existsSync(p2));
   if (dispatchServerScriptPath) {
-    const dispatchLogPath = import_node_path74.default.join(logDir, "dispatch-mcp-server.log");
+    const dispatchLogPath = import_node_path75.default.join(logDir, "dispatch-mcp-server.log");
     const dispatchCfgPath = writeDispatchMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: dispatchServerScriptPath,
@@ -67827,12 +67949,12 @@ async function startDaemon(config) {
     });
   }
   const ticketServerCandidates = [
-    import_node_path74.default.join(here, "ticket", "mcp-server.cjs"),
-    import_node_path74.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
+    import_node_path75.default.join(here, "ticket", "mcp-server.cjs"),
+    import_node_path75.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
-  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs53.default.existsSync(p2));
+  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs54.default.existsSync(p2));
   if (ticketServerScriptPath) {
-    const ticketLogPath = import_node_path74.default.join(logDir, "ticket-mcp-server.log");
+    const ticketLogPath = import_node_path75.default.join(logDir, "ticket-mcp-server.log");
     const ticketCfgPath = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
@@ -67854,12 +67976,12 @@ async function startDaemon(config) {
     });
   }
   const shiftServerCandidates = [
-    import_node_path74.default.join(here, "shift", "mcp-server.cjs"),
-    import_node_path74.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
+    import_node_path75.default.join(here, "shift", "mcp-server.cjs"),
+    import_node_path75.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
-  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs53.default.existsSync(p2));
+  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs54.default.existsSync(p2));
   if (shiftServerScriptPath) {
-    const shiftLogPath = import_node_path74.default.join(logDir, "shift-mcp-server.log");
+    const shiftLogPath = import_node_path75.default.join(logDir, "shift-mcp-server.log");
     const shiftCfgPath = await writeShiftMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: shiftServerScriptPath,
@@ -67880,12 +68002,12 @@ async function startDaemon(config) {
     );
   }
   const inboxServerCandidates = [
-    import_node_path74.default.join(here, "inbox", "mcp-server.cjs"),
-    import_node_path74.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
+    import_node_path75.default.join(here, "inbox", "mcp-server.cjs"),
+    import_node_path75.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
   ];
-  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs53.default.existsSync(p2));
+  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs54.default.existsSync(p2));
   if (inboxServerScriptPath) {
-    const inboxLogPath = import_node_path74.default.join(logDir, "inbox-mcp-server.log");
+    const inboxLogPath = import_node_path75.default.join(logDir, "inbox-mcp-server.log");
     const inboxCfgPath = await writeInboxMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: inboxServerScriptPath,
@@ -67906,10 +68028,10 @@ async function startDaemon(config) {
     );
   }
   const peerOpsServerCandidates = [
-    import_node_path74.default.join(here, "peer-ops", "mcp-server.cjs"),
-    import_node_path74.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
+    import_node_path75.default.join(here, "peer-ops", "mcp-server.cjs"),
+    import_node_path75.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
   ];
-  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs53.default.existsSync(p2));
+  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs54.default.existsSync(p2));
   if (peerOpsServerScriptPath) {
     const peerOpsCfgPath = writePeerOpsMcpConfig({
       dataDir: config.dataDir,
@@ -67929,12 +68051,12 @@ async function startDaemon(config) {
     );
   }
   const rpcToolServerCandidates = [
-    import_node_path74.default.join(here, "rpc-tool", "mcp-server.cjs"),
-    import_node_path74.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
+    import_node_path75.default.join(here, "rpc-tool", "mcp-server.cjs"),
+    import_node_path75.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
   ];
-  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p2) => import_node_fs53.default.existsSync(p2));
+  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p2) => import_node_fs54.default.existsSync(p2));
   if (rpcToolServerScriptPath) {
-    const rpcToolLogPath = import_node_path74.default.join(logDir, "rpc-tool-mcp-server.log");
+    const rpcToolLogPath = import_node_path75.default.join(logDir, "rpc-tool-mcp-server.log");
     const rpcToolCfgPath = writeRpcToolMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: rpcToolServerScriptPath,
@@ -67954,8 +68076,35 @@ async function startDaemon(config) {
       { tried: rpcToolServerCandidates }
     );
   }
+  const appBuilderServerCandidates = [
+    import_node_path75.default.join(here, "app-builder-plugin", "mcp-server.cjs"),
+    import_node_path75.default.join(here, "..", "dist", "app-builder-plugin", "mcp-server.cjs")
+  ];
+  const appBuilderServerScriptPath = appBuilderServerCandidates.find((p2) => import_node_fs54.default.existsSync(p2));
+  if (appBuilderServerScriptPath) {
+    const appBuilderLogPath = import_node_path75.default.join(logDir, "app-builder-mcp-server.log");
+    const appBuilderCfgPath = writeAppBuilderMcpConfig({
+      dataDir: config.dataDir,
+      serverScriptPath: appBuilderServerScriptPath,
+      daemonToken: resolvedAuthToken,
+      daemonUrl: mcpDaemonUrl,
+      deployKitScriptsDir: import_node_path75.default.join(config.dataDir, "deploy-kit", "scripts"),
+      logPath: appBuilderLogPath
+    });
+    mcpConfigs.push({ id: "app-builder", path: appBuilderCfgPath, personas: APP_BUILDER_PERSONAS });
+    logger.info("app-builder.mcp.json written", {
+      path: appBuilderCfgPath,
+      server: appBuilderServerScriptPath,
+      serverLog: appBuilderLogPath
+    });
+  } else {
+    logger.warn(
+      "app-builder-plugin/mcp-server.cjs not found; clawd-app-builder tools disabled (dev tsx \u6A21\u5F0F\u4E0B\u9700\u5148\u8DD1\u8FC7 build)",
+      { tried: appBuilderServerCandidates }
+    );
+  }
   const shiftStore = createShiftStore({
-    filePath: import_node_path74.default.join(config.dataDir, "shift.json"),
+    filePath: import_node_path75.default.join(config.dataDir, "shift.json"),
     ownerIdProvider: () => ownerPrincipalId,
     now: () => Date.now()
   });
@@ -67977,7 +68126,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path74.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path75.default.join(config.dataDir, "personas"),
     // dispatch / shift 自动化 spawn 按 persona 绑定 tool 起 B session（codex persona 用 codex）。
     // personaRegistry 声明在 manager 之后（同作用域 const，调用时机在启动完成后，无 TDZ 风险）。
     getPersonaDefaults: (personaId2) => personaRegistry.get(personaId2),
@@ -68031,10 +68180,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path74.default.isAbsolute(input.relPath) ? input.relPath : import_node_path74.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path75.default.isAbsolute(input.relPath) ? input.relPath : import_node_path75.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs53.default.statSync(absPath).size;
+          size = import_node_fs54.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -68064,9 +68213,9 @@ async function startDaemon(config) {
     logger.info("projects.seed-dropped", { dropped: droppedSeed.dropped, backup: droppedSeed.backup });
   }
   const projectsStore = new ProjectsStore({
-    file: import_node_path74.default.join(config.dataDir, "projects.json"),
+    file: import_node_path75.default.join(config.dataDir, "projects.json"),
     clawdDir: config.dataDir,
-    codexStateFile: import_node_path74.default.join(import_node_os26.default.homedir(), ".codex", ".codex-global-state.json"),
+    codexStateFile: import_node_path75.default.join(import_node_os26.default.homedir(), ".codex", ".codex-global-state.json"),
     logger
   });
   const observer = new SessionObserver({
@@ -68126,13 +68275,13 @@ async function startDaemon(config) {
     screenIdleProbeLogger
   }) : new ClaudeAdapter({ logger, historyReader: new ClaudeHistoryReader() });
   registerAdapter("claude", claudeAdapter);
-  const codexIsolatedHome = import_node_path74.default.join(config.dataDir, "codex-home");
+  const codexIsolatedHome = import_node_path75.default.join(config.dataDir, "codex-home");
   try {
-    import_node_fs53.default.mkdirSync(codexIsolatedHome, { recursive: true });
+    import_node_fs54.default.mkdirSync(codexIsolatedHome, { recursive: true });
     for (const f of ["auth.json", "config.toml"]) {
-      const link = import_node_path74.default.join(codexIsolatedHome, f);
-      const target = import_node_path74.default.join(import_node_os26.default.homedir(), ".codex", f);
-      if (!import_node_fs53.default.existsSync(link) && import_node_fs53.default.existsSync(target)) import_node_fs53.default.symlinkSync(target, link);
+      const link = import_node_path75.default.join(codexIsolatedHome, f);
+      const target = import_node_path75.default.join(import_node_os26.default.homedir(), ".codex", f);
+      if (!import_node_fs54.default.existsSync(link) && import_node_fs54.default.existsSync(target)) import_node_fs54.default.symlinkSync(target, link);
     }
   } catch (err) {
     logger.warn("codex isolated home setup failed", { err: String(err) });
@@ -68145,11 +68294,11 @@ async function startDaemon(config) {
       // projectPaths 每次调用现取 —— 用户新建 project 后立即生效，不用重启 daemon
       codexHomeFor: (cwd) => resolveCodexHome({
         cwd,
-        personaRoot: import_node_path74.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path75.default.join(config.dataDir, "personas"),
         // 必须用 listMerged（Codex registry ∪ 叠加层）：只用本地 list() 的话，用户在
         // Codex 里建的 project 不在表里，在它下面开的会话会被误判成隔离 → Codex 侧看不到
         projectPaths: projectsStore.listMerged().map((x) => x.path),
-        sharedHome: import_node_path74.default.join(import_node_os26.default.homedir(), ".codex"),
+        sharedHome: import_node_path75.default.join(import_node_os26.default.homedir(), ".codex"),
         isolatedHome: codexIsolatedHome
       })
     })
@@ -68331,6 +68480,7 @@ async function startDaemon(config) {
       error: err instanceof Error ? err.message : String(err)
     });
   });
+  const appBuilderPublishService = createPublishService();
   const devServerSupervisor = new DevServerSupervisor();
   devServerSupervisor.setLogger(logger);
   const appBuilderPortRange = [];
@@ -68433,11 +68583,11 @@ async function startDaemon(config) {
         // 'persona/<pid>/owner'，default 走 'default'。
         getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
         // guest path guard：candidate 必须在 personaRoot 子树或调用者自己的 user-dir 下
-        personaRoot: import_node_path74.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path75.default.join(config.dataDir, "personas"),
         usersRoot
       },
       // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-      personaRoot: import_node_path74.default.join(config.dataDir, "personas"),
+      personaRoot: import_node_path75.default.join(config.dataDir, "personas"),
       // v2 多人 persona 隔离：handler 派生 guest user-dir 放行
       usersRoot,
       // v2 Phase 6: whoami handler 装在 owner principal.displayName + persona 解析
@@ -68518,6 +68668,8 @@ async function startDaemon(config) {
       // app-builder
       appBuilderStore,
       getProjectStore,
+      publishService: appBuilderPublishService,
+      createProjectOnDisk,
       devServerLifecycle: devServerSupervisor,
       // 单栏 refactor §5.6.2 stage fix：appBuilder:project-updated 帧通过 wsServer broadcast。
       // 推给所有 owner 连接（picker 可能没订阅特定 session，全局 broadcast 最稳）。
@@ -68536,11 +68688,11 @@ async function startDaemon(config) {
       // 发布上线脚手架化 (spec 2026-06-03 §5.2):
       // appBuilderPersonaRoot 用于拼 publish.sh 绝对路径（persona-app-builder 安装在
       // dataDir/personas/persona-app-builder 之下，extension-kit/scripts/publish.sh 是相对路径）。
-      appBuilderPersonaRoot: import_node_path74.default.join(config.dataDir, "personas", "persona-app-builder"),
+      appBuilderPersonaRoot: import_node_path75.default.join(config.dataDir, "personas", "persona-app-builder"),
       // 共享 deploy-kit 根：scaffold/publish 脚本骨架 + 阿里云凭证单一真源。
-      deployKitRoot: import_node_path74.default.join(config.dataDir, "deploy-kit"),
+      deployKitRoot: import_node_path75.default.join(config.dataDir, "deploy-kit"),
       // scaffold/publish 按当前 session 的 persona 解析其安装根，让每个 persona 用自己的模板/注入配置。
-      resolvePersonaRoot: (personaId2) => import_node_path74.default.join(config.dataDir, "personas", personaId2),
+      resolvePersonaRoot: (personaId2) => import_node_path75.default.join(config.dataDir, "personas", personaId2),
       // 发布上线脚手架化 (spec 2026-06-03 §5.2.2):
       // 复用 SessionManagerDeps.broadcastFrame 同款 dispatch 逻辑 —— runner 调 manager.send
       // 取回 broadcast 帧后逐帧 push 到 transport，跟 manager 自身的 deps 一致。
@@ -68653,12 +68805,12 @@ async function startDaemon(config) {
   });
   Object.assign(handlers, shiftHandlers);
   const deployReceipts = createReceiptStore({
-    filePath: import_node_path74.default.join(config.dataDir, "deploy.json"),
+    filePath: import_node_path75.default.join(config.dataDir, "deploy.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("deploy receipts flush failed", { error: String(err) })
   });
   const deploySecrets = createSecretStore({
-    filePath: import_node_path74.default.join(config.dataDir, "deploy-secrets.json"),
+    filePath: import_node_path75.default.join(config.dataDir, "deploy-secrets.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("deploy secrets flush failed", { error: String(err) })
   });
@@ -68672,7 +68824,7 @@ async function startDaemon(config) {
     hasPersona: (personaId2) => personaStore.has(personaId2),
     startScan: (deployId, personaId2) => {
       const assetLines = SCANNABLE_ASSETS.map(
-        (name) => `  - ${name}\uFF1A${import_node_path74.default.join(config.dataDir, name)}`
+        (name) => `  - ${name}\uFF1A${import_node_path75.default.join(config.dataDir, name)}`
       ).join("\n");
       const prompt = [
         `\u626B\u63CF persona\u300C${personaId2}\u300D\u7684\u90E8\u7F72\u73AF\u5883\uFF0CdeployId=${deployId}\u3002`,
@@ -68713,7 +68865,7 @@ async function startDaemon(config) {
   });
   shiftScheduler.start();
   logger.info("shift scheduler started", { shiftCount: shiftStore.list().length });
-  const larkBotStore = createLarkBotBindingStore(import_node_path74.default.join(config.dataDir, "personas"));
+  const larkBotStore = createLarkBotBindingStore(import_node_path75.default.join(config.dataDir, "personas"));
   const larkBotCloud = createLarkBotCloudClient({
     api: config.clawosApi ?? DEFAULT_CLAWOS_API,
     apiKey: resolveClawdTicketsApiKey(),
@@ -68727,7 +68879,7 @@ async function startDaemon(config) {
     store: larkBotStore,
     fetchResource: (appId, messageId, fileKey, maxBytes, type) => larkBotCloud.fetchResource(appId, messageId, fileKey, maxBytes, type),
     // 图片落 guest userWorkDir 下（capId = lark-<chat_id>）：CC 经 --add-dir + allowRead carve 可 Read
-    mediaRootFor: (chatId) => import_node_path74.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
+    mediaRootFor: (chatId) => import_node_path75.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
     isShuttingDown: () => larkDraining,
     logger: {
       warn: (msg) => logger.warn(msg),
@@ -69032,8 +69184,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path74.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path74.default.join(logDir, "frpc.log")}`
+        `Frpc config: ${import_node_path75.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path75.default.join(logDir, "frpc.log")}`
       ];
       const width2 = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width2 + 4);
@@ -69046,8 +69198,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path74.default.join(config.dataDir, "connect.txt");
-        import_node_fs53.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path75.default.join(config.dataDir, "connect.txt");
+        import_node_fs54.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -69136,9 +69288,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path74.default.join(dataDir, "persons");
+  const dir = import_node_path75.default.join(dataDir, "persons");
   try {
-    import_node_fs53.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs54.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }