@clawos-dev/clawd 0.2.464 → 0.2.466

package/dist/cli.cjs

@@ -450,8 +450,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path98, errorMaps, issueData } = params;
-      const fullPath = [...path98, ...issueData.path || []];
+      const { data, path: path99, errorMaps, issueData } = params;
+      const fullPath = [...path99, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -762,11 +762,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path98, key) {
+      constructor(parent, value, path99, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path98;
+        this._path = path99;
         this._key = key;
       }
       get path() {
@@ -9905,8 +9905,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path98 = req.path;
-        _req.url = typeof path98 === "string" ? path98 : req.url ? req.url.path || req.url : void 0;
+        const path99 = req.path;
+        _req.url = typeof path99 === "string" ? path99 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -10071,14 +10071,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path98) {
+    function parsePath(path99) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path98.length; i++) {
-        const char = path98[i];
+      for (let i = 0; i < path99.length; i++) {
+        const char = path99[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -10209,10 +10209,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path98 of paths) {
-        const parts = parsePath(path98);
+      for (const path99 of paths) {
+        const parts = parsePath(path99);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path98, remove);
+          redactWildcardPath(obj, parts, censor, path99, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -10297,8 +10297,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path98) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path98];
+            const wrappedCensor = typeof censor === "function" ? (value, path99) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path99];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -10333,8 +10333,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path98 of pathsToClone) {
-        const parts = parsePath(path98);
+      for (const path99 of pathsToClone) {
+        const parts = parsePath(path99);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -10386,24 +10386,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path98) {
-      if (typeof path98 !== "string") {
+    function validatePath(path99) {
+      if (typeof path99 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path98 === "") {
+      if (path99 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path98.includes("..")) {
-        throw new Error(`Invalid redaction path (${path98})`);
+      if (path99.includes("..")) {
+        throw new Error(`Invalid redaction path (${path99})`);
       }
-      if (path98.includes(",")) {
-        throw new Error(`Invalid redaction path (${path98})`);
+      if (path99.includes(",")) {
+        throw new Error(`Invalid redaction path (${path99})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path98.length; i++) {
-        const char = path98[i];
+      for (let i = 0; i < path99.length; i++) {
+        const char = path99[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -10417,20 +10417,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path98})`);
+            throw new Error(`Invalid redaction path (${path99})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path98})`);
+        throw new Error(`Invalid redaction path (${path99})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path98 of paths) {
-        validatePath(path98);
+      for (const path99 of paths) {
+        validatePath(path99);
       }
     }
     function slowRedact(options = {}) {
@@ -10598,8 +10598,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path98) => {
-            return censor(value, [k2, ...path98]);
+          const wrappedCensor = typeof censor === "function" ? (value, path99) => {
+            return censor(value, [k2, ...path99]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -10817,10 +10817,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs87 = require("fs");
+    var fs88 = require("fs");
     var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
-    var path98 = require("path");
+    var path99 = require("path");
     var sleep2 = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -10874,20 +10874,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs87.mkdirSync(path98.dirname(file), { recursive: true });
-          const fd = fs87.openSync(file, flags, mode);
+          if (sonic.mkdir) fs88.mkdirSync(path99.dirname(file), { recursive: true });
+          const fd = fs88.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs87.mkdir(path98.dirname(file), { recursive: true }, (err) => {
+        fs88.mkdir(path99.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs87.open(file, flags, mode, fileOpened);
+          fs88.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs87.open(file, flags, mode, fileOpened);
+        fs88.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -10928,8 +10928,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs87.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs87.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs88.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs88.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -10938,15 +10938,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs87.writeSync(this.fd, this._writingBuf);
+            return fs88.writeSync(this.fd, this._writingBuf);
           }
-          return fs87.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs88.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs87.write(this.fd, this._writingBuf, this.release);
+            return fs88.write(this.fd, this._writingBuf, this.release);
           }
-          return fs87.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs88.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -11003,7 +11003,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs87.fsyncSync(this.fd);
+          fs88.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -11117,7 +11117,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs87.fsync(this.fd, (err) => {
+            fs88.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -11219,7 +11219,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs87.close(fd, (err) => {
+          fs88.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -11268,7 +11268,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs87.writeSync(this.fd, buf) : fs87.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs88.writeSync(this.fd, buf) : fs88.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -11284,7 +11284,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs87.fsyncSync(this.fd);
+        fs88.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -11305,7 +11305,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs87.writeSync(this.fd, buf);
+          const n = fs88.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -11333,13 +11333,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs87.writeSync(this.fd, this._writingBuf) : fs87.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs88.writeSync(this.fd, this._writingBuf) : fs88.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs87.write(this.fd, this._writingBuf, release);
+        fs88.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -11348,7 +11348,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs87.writeSync(this.fd, this._writingBuf);
+          const written = fs88.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -11357,7 +11357,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs87.write(this.fd, this._writingBuf, release);
+        fs88.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -11373,12 +11373,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs87.fsync(sonic.fd, closeWrapped);
+        fs88.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs87.close(sonic.fd, done);
+          fs88.close(sonic.fd, done);
         } else {
           done();
         }
@@ -13742,7 +13742,7 @@ var require_multistream = __commonJS({
 var require_pino = __commonJS({
   "../node_modules/.pnpm/pino@9.14.0/node_modules/pino/pino.js"(exports2, module2) {
     "use strict";
-    var os32 = require("os");
+    var os33 = require("os");
     var stdSerializers = require_pino_std_serializers();
     var caller = require_caller();
     var redaction = require_redaction();
@@ -13789,7 +13789,7 @@ var require_pino = __commonJS({
     } = symbols;
     var { epochTime, nullTime } = time;
     var { pid } = process;
-    var hostname = os32.hostname();
+    var hostname = os33.hostname();
     var defaultErrorSerializer = stdSerializers.err;
     var defaultOptions2 = {
       level: "info",
@@ -14513,11 +14513,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path98, added, removed, oldPosInc, options) {
-        var last = path98.lastComponent;
+      addToPath: function addToPath(path99, added, removed, oldPosInc, options) {
+        var last = path99.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path98.oldPos + oldPosInc,
+            oldPos: path99.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -14527,7 +14527,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path98.oldPos + oldPosInc,
+            oldPos: path99.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -15109,10 +15109,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec4 = m2;
-      const path98 = typeof rec4.path === "string" ? rec4.path : null;
+      const path99 = typeof rec4.path === "string" ? rec4.path : null;
       const content = typeof rec4.content === "string" ? rec4.content : null;
-      if (!path98 || content == null) return null;
-      const entry = { path: path98, content };
+      if (!path99 || content == null) return null;
+      const entry = { path: path99, content };
       if (typeof rec4.mtimeMs === "number") entry.mtimeMs = rec4.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -15978,10 +15978,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec4 = m2;
-      const path98 = typeof rec4.path === "string" ? rec4.path : null;
+      const path99 = typeof rec4.path === "string" ? rec4.path : null;
       const content = typeof rec4.content === "string" ? rec4.content : null;
-      if (!path98 || content == null) return null;
-      const out = { path: path98, content };
+      if (!path99 || content == null) return null;
+      const out = { path: path99, content };
       if (typeof rec4.mtimeMs === "number") out.mtimeMs = rec4.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -23490,14 +23490,14 @@ var require_luxon = __commonJS({
       return normalized;
     }
     function formatOffset(offset2, format) {
-      const hours = Math.trunc(Math.abs(offset2 / 60)), minutes = Math.trunc(Math.abs(offset2 % 60)), sign = offset2 >= 0 ? "+" : "-";
+      const hours = Math.trunc(Math.abs(offset2 / 60)), minutes = Math.trunc(Math.abs(offset2 % 60)), sign2 = offset2 >= 0 ? "+" : "-";
       switch (format) {
         case "short":
-          return `${sign}${padStart(hours, 2)}:${padStart(minutes, 2)}`;
+          return `${sign2}${padStart(hours, 2)}:${padStart(minutes, 2)}`;
         case "narrow":
-          return `${sign}${hours}${minutes > 0 ? `:${minutes}` : ""}`;
+          return `${sign2}${hours}${minutes > 0 ? `:${minutes}` : ""}`;
         case "techie":
-          return `${sign}${padStart(hours, 2)}${padStart(minutes, 2)}`;
+          return `${sign2}${padStart(hours, 2)}${padStart(minutes, 2)}`;
         default:
           throw new RangeError(`Value format ${format} is out of range for property format`);
       }
@@ -36955,8 +36955,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path98) {
-      var parts = path98.split("/");
+    exports2.resolve = function(path99) {
+      var parts = path99.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -42809,18 +42809,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path98) {
-      if (path98.slice(-1) === "/") {
-        path98 = path98.substring(0, path98.length - 1);
+    var parentFolder = function(path99) {
+      if (path99.slice(-1) === "/") {
+        path99 = path99.substring(0, path99.length - 1);
       }
-      var lastSlash = path98.lastIndexOf("/");
-      return lastSlash > 0 ? path98.substring(0, lastSlash) : "";
+      var lastSlash = path99.lastIndexOf("/");
+      return lastSlash > 0 ? path99.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path98) {
-      if (path98.slice(-1) !== "/") {
-        path98 += "/";
+    var forceTrailingSlash = function(path99) {
+      if (path99.slice(-1) !== "/") {
+        path99 += "/";
       }
-      return path98;
+      return path99;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -43822,7 +43822,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path80.default.dirname(opts.recordPath);
+  const dir = import_node_path81.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -43862,12 +43862,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs57, import_node_path80;
+var import_node_fs57, import_node_path81;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
     import_node_fs57 = __toESM(require("fs"), 1);
-    import_node_path80 = __toESM(require("path"), 1);
+    import_node_path81 = __toESM(require("path"), 1);
   }
 });
 
@@ -43910,7 +43910,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs58.mkdtempSync)(import_node_path81.default.join(import_node_os28.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs58.mkdtempSync)(import_node_path82.default.join(import_node_os29.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -44077,13 +44077,13 @@ async function runController(opts) {
   }
   return exitCode ?? 0;
 }
-var import_node_fs58, import_node_os28, import_node_path81;
+var import_node_fs58, import_node_os29, import_node_path82;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
     import_node_fs58 = require("fs");
-    import_node_os28 = __toESM(require("os"), 1);
-    import_node_path81 = __toESM(require("path"), 1);
+    import_node_os29 = __toESM(require("os"), 1);
+    import_node_path82 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -44358,10 +44358,10 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path79 = __toESM(require("path"), 1);
+var import_node_path80 = __toESM(require("path"), 1);
 var import_node_fs56 = __toESM(require("fs"), 1);
-var import_node_os27 = __toESM(require("os"), 1);
-var import_node_crypto22 = require("crypto");
+var import_node_os28 = __toESM(require("os"), 1);
+var import_node_crypto23 = require("crypto");
 var import_node_url5 = require("url");
 
 // src/logger.ts
@@ -51616,8 +51616,8 @@ function turnStartInput(text) {
   const items = [];
   let leftover = text;
   for (const m2 of text.matchAll(SKILL_RE)) {
-    const [marker, name, path98] = m2;
-    items.push({ type: "skill", name, path: path98 });
+    const [marker, name, path99] = m2;
+    items.push({ type: "skill", name, path: path99 });
     leftover = leftover.replace(marker, "");
   }
   for (const m2 of text.matchAll(ATTACHMENT_RE2)) {
@@ -55169,9 +55169,87 @@ function createSecretStore(deps) {
 var import_promises6 = __toESM(require("fs/promises"), 1);
 var import_node_path32 = __toESM(require("path"), 1);
 var CLOUD_HOST_CONFIG_FILE = "cloud-host.json";
-var REQUIRED = ["provisionDir", "gatewayUrl", "gatewayAdminKey", "gatewayApiKey", "k3sHost", "k3sKeyPath"];
+var REQUIRED = ["provisionDir", "gatewayUrl", "gatewayAdminKey", "gatewayApiKey"];
 var CloudHostConfigError = class extends Error {
 };
+var looksLikeRegistryRef = (s) => {
+  const head = s.split("/")[0] ?? "";
+  return s.includes("/") && (head.includes(".") || head.includes(":"));
+};
+var EXAMPLE_FILE = "cloud-host/deploy/cloud-host.json.example";
+function ghaGaps(parsed, imageRepo) {
+  const gaps = [];
+  if (!parsed.baseImage) {
+    gaps.push({
+      field: "baseImage",
+      why: "persona \u5C42\u8981 FROM \u4E00\u4E2A\u5E95\u5EA7\u955C\u50CF\u3002\u5FC5\u987B\u662F\u4E0D\u53EF\u53D8\u7684 sha tag\uFF0C\u4E14\u7528**\u516C\u7F51**\u5730\u5740\u2014\u2014\u6784\u5EFA\u8DD1\u5728\u5883\u5916\u7684 runner \u4E0A\uFF0CVPC \u5730\u5740\u5B83\u89E3\u6790\u4E0D\u4E86",
+      example: "registry.cn-hangzhou.aliyuncs.com/ttc-prod/clawd-persona-cloud:base-<40 \u4F4D sha>",
+      where: "GitHub Actions \u91CC\u300CBuild persona-cloud base image\u300D\u6700\u8FD1\u4E00\u6B21\u6210\u529F run \u7684 Summary\uFF0C\u90A3\u5F20\u8868\u91CC\u76F4\u63A5\u7ED9\u4E86\u8FD9\u4E00\u884C"
+    });
+  }
+  const gh2 = parsed.github;
+  if (!gh2?.repo) {
+    gaps.push({
+      field: "github.repo",
+      why: "\u5F80\u54EA\u4E2A\u4ED3\u5E93\u89E6\u53D1\u6784\u5EFA",
+      example: "ottin4ttc/clawos",
+      where: "\u5C31\u662F\u653E workflow \u7684\u90A3\u4E2A\u4ED3\u5E93"
+    });
+  }
+  if (!gh2?.token) {
+    gaps.push({
+      field: "github.token",
+      why: "\u89E6\u53D1 workflow_dispatch\u3001\u8F6E\u8BE2 run\u3001\u5931\u8D25\u65F6\u8BFB job \u65E5\u5FD7",
+      example: "ghp_\u2026 / github_pat_\u2026",
+      where: "`gh auth token`\uFF08classic token \u7684 `repo` scope \u5C31\u591F\uFF0C\u5DF2\u5B9E\u6D4B\u53EF\u89E6\u53D1\uFF09\uFF1B\u6216\u5EFA\u4E00\u4E2A fine-grained PAT\uFF0C\u5BF9\u8BE5\u4ED3\u5E93\u7ED9 **Actions: read and write** + **Contents: read**"
+    });
+  }
+  const store = parsed.bundleStore;
+  if (!store?.bucket || !store?.endpoint) {
+    gaps.push({
+      field: "bundleStore.bucket / bundleStore.endpoint",
+      why: "persona \u76EE\u5F55\u7ECF\u8FD9\u4E2A\u79C1\u6709\u6876\u4E2D\u8F6C\u7ED9 runner\uFF08\u4E0D\u8D70 workflow inputs\uFF1A\u90A3\u513F\u6709 64KB \u4E0A\u9650\uFF0C\u800C\u4E14\u5165\u53C2\u4F1A\u957F\u671F\u663E\u793A\u5728 run \u9875\u9762\u4E0A\uFF09",
+      example: '"bucket": "clawd-persona-bundle", "endpoint": "oss-cn-hangzhou.aliyuncs.com"',
+      where: "endpoint \u7528**\u516C\u7F51**\u5730\u5740\uFF08\u4E0B\u8F7D\u65B9\u662F\u5883\u5916\u7684 runner\uFF0C\u5185\u7F51\u5730\u5740\u5B83\u8FDE\u4E0D\u4E0A\uFF09\u3002\u6876\u8981\u662F\u79C1\u6709\u7684\uFF0C\u5EFA\u8BAE\u7ED9\u4E2D\u8F6C\u524D\u7F00\u6302\u4E00\u6761\u300CN \u5929\u81EA\u52A8\u8FC7\u671F\u300D\u7684\u751F\u547D\u5468\u671F\u89C4\u5219\u515C\u5E95"
+    });
+  }
+  if (!store?.accessKeyId || !store?.accessKeySecret) {
+    gaps.push({
+      field: "bundleStore.accessKeyId / bundleStore.accessKeySecret",
+      why: "\u5F80\u90A3\u4E2A\u6876\u4F20\u5BF9\u8C61\u3001\u7B7E URL\u3001\u7528\u5B8C\u5220\u5BF9\u8C61",
+      example: '"accessKeyId": "LTAI\u2026", "accessKeySecret": "\u2026"',
+      where: "\u5EFA\u6876\u90A3\u4E2A\u963F\u91CC\u4E91\u8D26\u53F7\u4E0B\u7684 AccessKey\uFF08`~/.aliyun/config.json` \u91CC\u5C31\u6709\uFF09\u3002\u53EA\u9700\u8981\u5BF9\u8FD9\u4E00\u4E2A\u6876\u53EF\u8BFB\u5199"
+    });
+  }
+  if (!looksLikeRegistryRef(imageRepo)) {
+    gaps.push({
+      field: "imageRepo",
+      why: `\u73B0\u5728\u662F \`${imageRepo}\`\uFF0C\u6CA1\u6709 registry \u524D\u7F00\u3002\u8FD9\u4E2A\u503C\u4F1A**\u539F\u6837\u8FDB\u90E8\u7F72\u767B\u8BB0\u8868**\uFF0Ckubelet \u7167\u5B83\u53BB\u62C9\uFF1B\u6CA1\u524D\u7F00\u4F1A\u88AB\u89E3\u6790\u6210 \`docker.io/library/\u2026\`\uFF0C\u62A5\u51FA\u6765\u662F\u300C\u8FDE\u4E0D\u4E0A Docker Hub\u300D\u800C\u4E0D\u662F\u300C\u8282\u70B9\u4E0A\u6CA1\u8FD9\u4E2A\u955C\u50CF\u300D`,
+      example: "registry-vpc.cn-hangzhou.aliyuncs.com/ttc-prod/clawd-persona-cloud",
+      where: "\u8DDF baseImage \u662F**\u540C\u4E00\u4E2A ACR \u4ED3\u5E93**\uFF0C\u4F46\u8FD9\u91CC\u8981 **VPC \u5185\u7F51**\u5730\u5740\uFF08\u4E91\u5BBF\u4E3B\u6309\u5B83\u62C9\uFF09\uFF0CbaseImage \u90A3\u8FB9\u8981\u516C\u7F51\u5730\u5740\uFF08runner \u6309\u5B83\u62C9\uFF09\u3002\u522B\u5199\u53CD"
+    });
+  }
+  return gaps;
+}
+function formatGaps(file, gaps, hasLocalCoords) {
+  const lines = [
+    `${file} \u8FD8\u5DEE ${gaps.length} \u9879\u624D\u80FD\u7528 buildHost=gha \u8DD1\u8BD5\u88C5\uFF08\u955C\u50CF\u5207\u6210\u300C\u5E95\u5EA7 + persona \u5C42\u300D\u4E4B\u540E\u65B0\u589E\u7684\uFF0C\u65E7\u914D\u7F6E\u5347\u4E0A\u6765\u90FD\u4F1A\u7F3A\uFF09\uFF1A`,
+    ""
+  ];
+  for (const g2 of gaps) {
+    lines.push(`  \xB7 ${g2.field} \u2014\u2014 ${g2.why}`);
+    lines.push(`      \u793A\u4F8B\uFF1A${g2.example}`);
+    lines.push(`      \u4ECE\u54EA\u62FF\uFF1A${g2.where}`);
+    lines.push("");
+  }
+  lines.push(`\u5B8C\u6574\u793A\u4F8B\u89C1 ${EXAMPLE_FILE}\u3002`);
+  if (hasLocalCoords) {
+    lines.push(
+      '\u4E0D\u60F3\u73B0\u5728\u914D\u8FD9\u4E9B\u7684\u8BDD\uFF1A\u8FD9\u4EFD\u914D\u7F6E\u91CC\u5DF2\u7ECF\u6709 k3sHost / k3sKeyPath \u4E86\uFF0C\u52A0\u4E00\u884C `"buildHost": "local"` \u5C31\u9000\u56DE\u672C\u673A docker \u6784\u5EFA + \u4FA7\u8F7D\u90A3\u6761\u8DEF\uFF08\u8981\u672C\u673A\u6709 docker\uFF09\u3002'
+    );
+  }
+  return lines.join("\n");
+}
 async function loadCloudHostConfig(dataDir) {
   const file = import_node_path32.default.join(dataDir, CLOUD_HOST_CONFIG_FILE);
   let raw;
@@ -55180,7 +55258,7 @@ async function loadCloudHostConfig(dataDir) {
   } catch (err) {
     if (err.code === "ENOENT") {
       throw new CloudHostConfigError(
-        `\u8FD8\u6CA1\u914D ${file}\u3002\u8BD5\u88C5\u8981\u77E5\u9053\u5F80\u54EA\u53F0\u673A\u5668\u63A8\u955C\u50CF\u3001\u8DDF\u54EA\u4E2A gateway \u8BF4\u8BDD\uFF0C\u5B57\u6BB5\u89C1 specs/2026-09-03-persona-cloud-m1b-trial-design.md \u7B2C\u4E94\u8282\u3002`
+        `\u8FD8\u6CA1\u914D ${file}\u3002\u8BD5\u88C5\u8981\u77E5\u9053\u955C\u50CF\u5728\u54EA\u513F\u6784\u3001\u8DDF\u54EA\u4E2A gateway \u8BF4\u8BDD\uFF0C\u5B57\u6BB5\u89C1 specs/2026-09-04-persona-cloud-base-image-design.md\u3002`
       );
     }
     throw err;
@@ -55195,24 +55273,284 @@ async function loadCloudHostConfig(dataDir) {
   if (missing.length > 0) {
     throw new CloudHostConfigError(`${file} \u7F3A\u5B57\u6BB5\uFF1A${missing.join(" / ")}`);
   }
+  const buildHost = parsed.buildHost === "local" ? "local" : "gha";
+  const imageRepo = parsed.imageRepo ?? "clawd-persona-cloud";
+  if (buildHost === "local") {
+    const need = ["k3sHost", "k3sKeyPath"].filter((k2) => !parsed[k2]);
+    if (need.length > 0) {
+      throw new CloudHostConfigError(`${file} \u7684 buildHost \u662F local\uFF0C\u8FD8\u7F3A\uFF1A${need.join(" / ")}`);
+    }
+  } else {
+    const gaps = ghaGaps(parsed, imageRepo);
+    if (gaps.length > 0) {
+      throw new CloudHostConfigError(
+        formatGaps(file, gaps, Boolean(parsed.k3sHost && parsed.k3sKeyPath))
+      );
+    }
+  }
   return {
     provisionDir: parsed.provisionDir,
     gatewayUrl: parsed.gatewayUrl.replace(/\/+$/, ""),
     gatewayAdminKey: parsed.gatewayAdminKey,
     gatewayApiKey: parsed.gatewayApiKey,
-    k3sHost: parsed.k3sHost,
-    k3sKeyPath: parsed.k3sKeyPath,
-    imageRepo: parsed.imageRepo ?? "clawd-persona-cloud",
+    buildHost,
+    imageRepo,
+    ...parsed.baseImage ? { baseImage: parsed.baseImage } : {},
+    ...parsed.github ? {
+      github: {
+        repo: parsed.github.repo,
+        token: parsed.github.token,
+        ref: parsed.github.ref ?? "release",
+        workflow: parsed.github.workflow ?? "build-persona-deploy-image.yml"
+      }
+    } : {},
+    ...parsed.bundleStore ? {
+      bundleStore: {
+        endpoint: parsed.bundleStore.endpoint,
+        bucket: parsed.bundleStore.bucket,
+        accessKeyId: parsed.bundleStore.accessKeyId,
+        accessKeySecret: parsed.bundleStore.accessKeySecret,
+        prefix: parsed.bundleStore.prefix ?? "persona-bundles/"
+      }
+    } : {},
+    ...parsed.k3sHost ? { k3sHost: parsed.k3sHost } : {},
+    ...parsed.k3sKeyPath ? { k3sKeyPath: parsed.k3sKeyPath } : {},
     trialTimeoutMs: parsed.trialTimeoutMs ?? 45 * 6e4
   };
 }
 
 // src/deploy/trial-runner.ts
+var import_promises8 = __toESM(require("fs/promises"), 1);
+var import_node_os9 = __toESM(require("os"), 1);
+var import_node_path34 = __toESM(require("path"), 1);
+
+// src/deploy/bundle-store.ts
+var import_node_crypto7 = __toESM(require("crypto"), 1);
 var import_promises7 = __toESM(require("fs/promises"), 1);
 var import_node_os8 = __toESM(require("os"), 1);
 var import_node_path33 = __toESM(require("path"), 1);
+var import_node_child_process8 = require("child_process");
+var BUNDLE_URL_TTL_SEC = 30 * 60;
+var RUNTIME_STATE = /* @__PURE__ */ new Set(["projects", ".attachments", ".clawd/sessions"]);
+var NEVER_PERSONA = /* @__PURE__ */ new Set(["node_modules", ".git"]);
+async function stagePersonaDir(personaDir) {
+  const stage = await import_promises7.default.mkdtemp(import_node_path33.default.join(import_node_os8.default.tmpdir(), "clawd-bundle-"));
+  const root = import_node_path33.default.resolve(personaDir);
+  await import_promises7.default.cp(root, import_node_path33.default.join(stage, "persona"), {
+    recursive: true,
+    dereference: true,
+    filter: (src) => {
+      const rel = import_node_path33.default.relative(root, import_node_path33.default.resolve(src));
+      if (!rel) return true;
+      return !RUNTIME_STATE.has(rel) && !NEVER_PERSONA.has(import_node_path33.default.basename(rel));
+    }
+  });
+  return { dir: stage, cleanup: () => import_promises7.default.rm(stage, { recursive: true, force: true }) };
+}
+async function packPersonaBundle(personaDir) {
+  const { dir: stage, cleanup } = await stagePersonaDir(personaDir);
+  const file = import_node_path33.default.join(stage, "bundle.tgz");
+  await new Promise((resolve9, reject) => {
+    const child = (0, import_node_child_process8.spawn)("tar", ["-czf", file, "-C", stage, "persona"], { stdio: ["ignore", "ignore", "pipe"] });
+    let err = "";
+    child.stderr.on("data", (d) => {
+      err += d.toString("utf8");
+    });
+    child.on("error", (e) => reject(new Error(`\u6253\u5305 persona \u76EE\u5F55\u8D77\u4E0D\u6765 tar\uFF1A${e.message}`)));
+    child.on("close", (code) => code === 0 ? resolve9() : reject(new Error(`tar \u9000\u51FA\u7801 ${code}\uFF1A${err.slice(-500)}`)));
+  });
+  return { file, cleanup };
+}
+function sign(cfg, args) {
+  const canonical = [
+    args.method,
+    args.contentMd5 ?? "",
+    args.contentType ?? "",
+    args.dateOrExpires,
+    `/${cfg.bucket}/${args.key}`
+  ].join("\n");
+  return import_node_crypto7.default.createHmac("sha1", cfg.accessKeySecret).update(canonical).digest("base64");
+}
+var objectUrl = (cfg, key) => `https://${cfg.bucket}.${cfg.endpoint}/${key.split("/").map(encodeURIComponent).join("/")}`;
+async function putBundle(cfg, key, body, fetchImpl = fetch, now = () => Date.now()) {
+  const date = new Date(now()).toUTCString();
+  const contentType = "application/gzip";
+  const contentMd5 = import_node_crypto7.default.createHash("md5").update(body).digest("base64");
+  const res = await fetchImpl(objectUrl(cfg, key), {
+    method: "PUT",
+    headers: {
+      Date: date,
+      "Content-Type": contentType,
+      "Content-MD5": contentMd5,
+      Authorization: `OSS ${cfg.accessKeyId}:${sign(cfg, { method: "PUT", key, dateOrExpires: date, contentMd5, contentType })}`
+    },
+    body: new Uint8Array(body)
+  });
+  if (!res.ok) {
+    const text = await res.text().catch(() => "");
+    throw new Error(`bundle \u4F20\u4E0D\u4E0A OSS\uFF08HTTP ${res.status}\uFF09\uFF1A${text.slice(0, 400)}`);
+  }
+  const expires = String(Math.floor(now() / 1e3) + BUNDLE_URL_TTL_SEC);
+  const sig = sign(cfg, { method: "GET", key, dateOrExpires: expires });
+  const q = new URLSearchParams({
+    OSSAccessKeyId: cfg.accessKeyId,
+    Expires: expires,
+    Signature: sig
+  });
+  return { key, url: `${objectUrl(cfg, key)}?${q.toString()}`, bytes: body.length };
+}
+async function removeBundle(cfg, key, fetchImpl = fetch, now = () => Date.now()) {
+  const date = new Date(now()).toUTCString();
+  try {
+    const res = await fetchImpl(objectUrl(cfg, key), {
+      method: "DELETE",
+      headers: {
+        Date: date,
+        Authorization: `OSS ${cfg.accessKeyId}:${sign(cfg, { method: "DELETE", key, dateOrExpires: date })}`
+      }
+    });
+    return res.ok || res.status === 404;
+  } catch {
+    return false;
+  }
+}
+
+// src/deploy/gha-build.ts
+var POLL_MS = 5e3;
+var CLAIM_TIMEOUT_MS = 12e4;
+var LOG_TAIL_CHARS = 4e3;
+var GAP_MARKER = "::clawd-build-gaps::";
+function gapsFromRunnerLog(log) {
+  const i = log.lastIndexOf(GAP_MARKER);
+  if (i === -1) return [];
+  const line = log.slice(i + GAP_MARKER.length).split("\n")[0].trim();
+  try {
+    const parsed = JSON.parse(line);
+    if (!Array.isArray(parsed)) return [];
+    return parsed.filter((g2) => g2 && typeof g2.errorText === "string" && g2.errorText.length > 0).map((g2) => ({
+      errorText: g2.errorText,
+      ...g2.raw ? { raw: g2.raw } : {},
+      ...g2.suggest ? { suggest: g2.suggest } : {}
+    }));
+  } catch {
+    return [];
+  }
+}
+async function gh(deps, url, init) {
+  const res = await deps.fetchImpl(`https://api.github.com${url}`, {
+    ...init,
+    headers: {
+      accept: "application/vnd.github+json",
+      authorization: `Bearer ${deps.github.token}`,
+      "x-github-api-version": "2022-11-28",
+      ...init?.body ? { "content-type": "application/json" } : {},
+      ...init?.headers
+    }
+  });
+  if (!res.ok) {
+    const text = await res.text().catch(() => "");
+    throw new Error(`GitHub ${init?.method ?? "GET"} ${url} \u2192 HTTP ${res.status}\uFF1A${text.slice(0, 400)}`);
+  }
+  if (res.status === 204) return void 0;
+  return await res.json();
+}
+async function claimRun(deps, tag) {
+  const { repo: repo2, workflow } = deps.github;
+  const deadline = deps.now() + CLAIM_TIMEOUT_MS;
+  for (; ; ) {
+    const list = await gh(
+      deps,
+      `/repos/${repo2}/actions/workflows/${encodeURIComponent(workflow)}/runs?event=workflow_dispatch&per_page=30`
+    );
+    const hit = list.workflow_runs.find((r) => [r.name, r.display_title].some((n) => typeof n === "string" && n.includes(tag)));
+    if (hit) return hit;
+    if (deps.now() > deadline) {
+      throw new Error(
+        `\u89E6\u53D1\u4E4B\u540E ${Math.round(CLAIM_TIMEOUT_MS / 1e3)}s \u6CA1\u5728 ${repo2} \u7684 ${workflow} \u91CC\u627E\u5230 run-name \u5E26 \`${tag}\` \u7684 run\u3002workflow \u6587\u4EF6\u5728\u76EE\u6807 ref \u4E0A\u5B58\u5728\u5417\uFF1F\u5B83\u7684 run-name \u91CC\u5E26 inputs.tag \u5417\uFF1F`
+      );
+    }
+    await deps.sleep(POLL_MS);
+  }
+}
+async function failureDetail(deps, run) {
+  const { repo: repo2 } = deps.github;
+  try {
+    const jobs = await gh(
+      deps,
+      `/repos/${repo2}/actions/runs/${run.id}/jobs`
+    );
+    const failed = jobs.jobs.find((j) => j.conclusion && j.conclusion !== "success");
+    if (!failed) return { raw: "", gaps: [] };
+    const step = failed.steps?.find((s) => s.conclusion && s.conclusion !== "success");
+    const res = await deps.fetchImpl(`https://api.github.com/repos/${repo2}/actions/jobs/${failed.id}/logs`, {
+      headers: { authorization: `Bearer ${deps.github.token}`, "x-github-api-version": "2022-11-28" }
+    });
+    const log = res.ok ? await res.text() : "";
+    return {
+      gaps: gapsFromRunnerLog(log),
+      raw: [
+        `\u5931\u8D25\u7684\u6B65\u9AA4\uFF1A${failed.name}${step ? ` / ${step.name}` : ""}`,
+        log ? log.slice(-LOG_TAIL_CHARS) : "\uFF08\u65E5\u5FD7\u53D6\u4E0D\u5230\uFF09"
+      ].join("\n")
+    };
+  } catch (err) {
+    return { raw: `\uFF08\u53D6\u5931\u8D25\u8BE6\u60C5\u65F6\u53C8\u51FA\u9519\u4E86\uFF1A${String(err)}\uFF09`, gaps: [] };
+  }
+}
+async function buildOnGha(deps, args) {
+  const { repo: repo2, ref, workflow } = deps.github;
+  const started = deps.now();
+  try {
+    deps.onStage("\u5728 GitHub \u4E0A\u6392\u4E00\u6B21\u955C\u50CF\u6784\u5EFA");
+    await gh(deps, `/repos/${repo2}/actions/workflows/${encodeURIComponent(workflow)}/dispatches`, {
+      method: "POST",
+      body: JSON.stringify({ ref, inputs: args.inputs })
+    });
+  } catch (err) {
+    return { ok: false, errorText: `\u89E6\u53D1\u4E0D\u4E86 ${repo2} \u7684 ${workflow}\uFF1A${String(err)}` };
+  }
+  let run;
+  try {
+    run = await claimRun(deps, args.inputs.tag);
+  } catch (err) {
+    return { ok: false, errorText: String(err) };
+  }
+  deps.onStage(`\u955C\u50CF\u6784\u5EFA\u8DD1\u8D77\u6765\u4E86\uFF1A${run.html_url}`);
+  const deadline = started + args.timeoutMs;
+  for (; ; ) {
+    if (deps.now() > deadline) {
+      return {
+        ok: false,
+        runUrl: run.html_url,
+        errorText: `\u7B49\u4E86 ${Math.round(args.timeoutMs / 6e4)} \u5206\u949F\uFF0C\u955C\u50CF\u8FD8\u6CA1\u6784\u5B8C\uFF1A${run.html_url}`
+      };
+    }
+    await deps.sleep(POLL_MS);
+    let cur;
+    try {
+      cur = await gh(deps, `/repos/${repo2}/actions/runs/${run.id}`);
+    } catch (err) {
+      deps.onStage(`\u95EE GitHub \u6784\u5EFA\u8FDB\u5C55\u6CA1\u95EE\u7740\uFF08\u4F1A\u91CD\u8BD5\uFF09\uFF1A${String(err).slice(0, 120)}`);
+      continue;
+    }
+    if (cur.status !== "completed") continue;
+    const seconds = Math.round((deps.now() - started) / 1e3);
+    if (cur.conclusion === "success") return { ok: true, runUrl: cur.html_url, seconds };
+    const detail = await failureDetail(deps, cur);
+    return {
+      ok: false,
+      runUrl: cur.html_url,
+      errorText: `\u955C\u50CF\u6CA1\u6784\u6210\uFF08${cur.conclusion}\uFF09\uFF1A${cur.html_url}`,
+      raw: detail.raw,
+      ...detail.gaps.length > 0 ? { gaps: detail.gaps } : {}
+    };
+  }
+}
+
+// src/deploy/trial-runner.ts
 var RAW_TAIL_CHARS = 2e3;
 var GATEWAY_ADMIN_TIMEOUT_MS = 3e4;
+var MAX_BUNDLE_BYTES = 64 * 1024 * 1024;
 var trialStamp = (nowMs) => Math.floor(nowMs / 1e3).toString(36);
 var trialImageTag = (repo2, deployId, round, stamp) => `${repo2}:${trialDeployId(deployId, round, stamp)}`;
 var trialDeployId = (deployId, round, stamp) => `${deployId}-t${round}-${stamp}`;
@@ -55371,8 +55709,8 @@ async function* sseLines(res) {
   }
   if (buf.trim()) yield buf.trim();
 }
-async function gatewayAdmin(deps, path98, body) {
-  const res = await deps.fetchImpl(`${deps.cloudHost.gatewayUrl}${path98}`, {
+async function gatewayAdmin(deps, path99, body) {
+  const res = await deps.fetchImpl(`${deps.cloudHost.gatewayUrl}${path99}`, {
     method: "POST",
     headers: {
       "content-type": "application/json",
@@ -55385,11 +55723,11 @@ async function gatewayAdmin(deps, path98, body) {
     signal: AbortSignal.timeout(GATEWAY_ADMIN_TIMEOUT_MS)
   });
   const text = await res.text();
-  if (!res.ok) throw new Error(`gateway ${path98} \u56DE\u4E86 HTTP ${res.status}\uFF1A${text.slice(0, 300)}`);
+  if (!res.ok) throw new Error(`gateway ${path99} \u56DE\u4E86 HTTP ${res.status}\uFF1A${text.slice(0, 300)}`);
   try {
     return JSON.parse(text);
   } catch {
-    throw new Error(`gateway ${path98} \u56DE\u7684\u4E0D\u662F JSON\uFF1A${text.slice(0, 300)}`);
+    throw new Error(`gateway ${path99} \u56DE\u7684\u4E0D\u662F JSON\uFF1A${text.slice(0, 300)}`);
   }
 }
 async function registerOfficialDeployment(deps, receipt, deployerSecrets) {
@@ -55414,41 +55752,168 @@ async function registerOfficialDeployment(deps, receipt, deployerSecrets) {
     deployedAt: deps.now()
   };
 }
-async function runTrial(deps, args) {
-  const { receipt, round } = args;
+async function buildViaGha(deps, args) {
   const { cloudHost } = deps;
-  const manifest = receipt.manifest;
-  const stamp = trialStamp(deps.now());
-  const trialId = trialDeployId(receipt.deployId, round, stamp);
-  const image = trialImageTag(cloudHost.imageRepo, receipt.deployId, round, stamp);
-  const appName = trialAppName(receipt.deployId);
-  const deadline = deps.now() + cloudHost.trialTimeoutMs;
+  const store = cloudHost.bundleStore;
+  const github = cloudHost.github;
+  const baseImage = cloudHost.baseImage;
+  if (!store || !github || !baseImage) {
+    return { ok: false, gaps: [gap(
+      `cloud-host.json \u7684 buildHost \u662F gha\uFF0C\u4F46\u7F3A ${[
+        !github && "github",
+        !store && "bundleStore",
+        !baseImage && "baseImage"
+      ].filter(Boolean).join(" / ")}\u3002`
+    )] };
+  }
+  const key = `${store.prefix}${args.tag}.tgz`;
+  deps.onStage("\u5728\u6253\u5305 persona \u76EE\u5F55");
+  let packed;
+  try {
+    packed = await packPersonaBundle(args.personaDir);
+  } catch (err) {
+    return { ok: false, gaps: [gap(`\u6253\u4E0D\u51FA persona \u76EE\u5F55\u7684\u5305\uFF1A${String(err)}`)] };
+  }
+  try {
+    const body = await import_promises8.default.readFile(packed.file);
+    if (body.length > MAX_BUNDLE_BYTES) {
+      return { ok: false, gaps: [gap(
+        `persona \u76EE\u5F55\u6253\u5B8C\u5305\u8FD8\u6709 ${Math.round(body.length / 1e6)} MB\uFF0C\u8D85\u8FC7 ${MAX_BUNDLE_BYTES / 1e6} MB \u5C31\u4E0D\u4F20\u4E86\u3002\u955C\u50CF\u91CC\u53EA\u8BE5\u6709\u4EBA\u683C\uFF0C\u9879\u76EE / \u4F1A\u8BDD\u8BB0\u5F55 / \u9644\u4EF6\u8FD9\u4E9B\u8FD0\u884C\u671F\u72B6\u6001\u5728\u4E91\u4E0A\u662F\u6302\u8F7D\u5377\u3002`,
+        args.personaDir
+      )] };
+    }
+    let ref;
+    try {
+      ref = await putBundle(store, key, body, deps.fetchImpl, deps.now);
+    } catch (err) {
+      return { ok: false, gaps: [gap(`persona \u76EE\u5F55\u4F20\u4E0D\u4E0A\u4E2D\u8F6C\u4ED3\u5E93\uFF1A${String(err)}`)] };
+    }
+    deps.onStage(`persona \u76EE\u5F55\u9001\u4E0A\u53BB\u4E86\uFF08${Math.round(ref.bytes / 1024)} KB\uFF09`);
+    const built = await buildOnGha(
+      {
+        github,
+        fetchImpl: deps.fetchImpl,
+        now: deps.now,
+        sleep: deps.sleep,
+        onStage: deps.onStage
+      },
+      {
+        timeoutMs: args.timeoutMs,
+        inputs: {
+          tag: args.tag,
+          base_image: baseImage,
+          bundle_url: ref.url,
+          manifest_b64: Buffer.from(JSON.stringify({ manifest: args.manifest })).toString("base64")
+        }
+      }
+    );
+    if (!built.ok) {
+      return {
+        ok: false,
+        gaps: built.gaps?.length ? built.gaps.map((g2) => gap(g2.errorText, g2.raw ?? built.raw, g2.suggest)) : [gap(built.errorText, built.raw)]
+      };
+    }
+    deps.logger?.info("deploy.trial.image-built", { tag: args.tag, seconds: built.seconds, run: built.runUrl });
+    return { ok: true };
+  } catch (err) {
+    return { ok: false, gaps: [gap(`\u6784\u955C\u50CF\u8FD9\u4E00\u6B65\u8D77\u4E0D\u6765\uFF1A${String(err)}`)] };
+  } finally {
+    await packed.cleanup().catch(() => {
+    });
+    const gone = await removeBundle(store, key, deps.fetchImpl, deps.now);
+    if (!gone) deps.logger?.warn("deploy.trial.bundle-not-removed", { key });
+  }
+}
+async function buildLocally(deps, args) {
+  const { cloudHost } = deps;
+  const baseTag = `${cloudHost.imageRepo}:base-local`;
+  const deadline = deps.now() + args.timeoutMs;
   const left = () => Math.max(3e4, deadline - deps.now());
-  deps.onStage("\u5728\u6309\u6E05\u5355\u6784\u955C\u50CF");
-  const manifestFile = import_node_path33.default.join(import_node_os8.default.tmpdir(), `clawd-trial-${receipt.deployId}-t${round}-${stamp}.json`);
+  deps.onStage("\u5728\u672C\u673A\u6784\u5E95\u5EA7");
+  const base = await deps.runNode(
+    `${cloudHost.provisionDir}/build-image.mjs`,
+    [
+      "--base",
+      "--manifest",
+      `${cloudHost.provisionDir}/manifests/base.json`,
+      "--tag",
+      baseTag,
+      "--platform",
+      "linux/amd64",
+      "--context",
+      `${cloudHost.provisionDir}/build-context-base`
+    ],
+    { timeoutMs: left() }
+  );
+  if (base.code !== 0) return { ok: false, gaps: gapsFromBuildOutput(base) };
+  deps.onStage("\u5728\u6309\u6E05\u5355\u6784 persona \u5C42");
+  const manifestFile = import_node_path34.default.join(import_node_os9.default.tmpdir(), `clawd-trial-${args.tmpKey}.json`);
   let built;
+  let staged;
+  try {
+    staged = await stagePersonaDir(args.personaDir);
+  } catch (err) {
+    return { ok: false, gaps: [gap(`\u7406\u4E0D\u51FA\u8981\u6253\u8FDB\u955C\u50CF\u7684 persona \u76EE\u5F55\uFF1A${String(err)}`)] };
+  }
   try {
-    await import_promises7.default.writeFile(manifestFile, JSON.stringify({ manifest }, null, 2), { mode: 384 });
+    await import_promises8.default.writeFile(manifestFile, JSON.stringify({ manifest: args.manifest }, null, 2), { mode: 384 });
     built = await deps.runNode(
       `${cloudHost.provisionDir}/build-image.mjs`,
-      ["--manifest", manifestFile, "--tag", image, "--platform", "linux/amd64"],
+      [
+        "--manifest",
+        manifestFile,
+        "--from",
+        baseTag,
+        "--persona-dir",
+        import_node_path34.default.join(staged.dir, "persona"),
+        "--tag",
+        args.image,
+        "--platform",
+        "linux/amd64"
+      ],
       { timeoutMs: left() }
     );
-    await import_promises7.default.rm(manifestFile, { force: true });
+    await import_promises8.default.rm(manifestFile, { force: true });
   } catch (err) {
-    return { ok: false, spent: false, gaps: [gap(`\u6784\u955C\u50CF\u8FD9\u4E00\u6B65\u8D77\u4E0D\u6765\uFF1A${String(err)}`)] };
+    return { ok: false, gaps: [gap(`\u6784\u955C\u50CF\u8FD9\u4E00\u6B65\u8D77\u4E0D\u6765\uFF1A${String(err)}`)] };
+  } finally {
+    await staged.cleanup().catch(() => {
+    });
   }
-  if (built.code !== 0) return { ok: false, spent: false, gaps: gapsFromBuildOutput(built) };
+  if (built.code !== 0) return { ok: false, gaps: gapsFromBuildOutput(built) };
   deps.onStage("\u628A\u955C\u50CF\u63A8\u5230\u4E91\u4E0A\u90A3\u53F0\u673A\u5668");
+  if (!cloudHost.k3sHost || !cloudHost.k3sKeyPath) {
+    return { ok: false, gaps: [gap("cloud-host.json \u7684 buildHost \u662F local\uFF0C\u4F46\u7F3A k3sHost / k3sKeyPath\u3002")] };
+  }
   const pushed = await deps.runNode(
     `${cloudHost.provisionDir}/push-to-k3s.mjs`,
-    ["--host", cloudHost.k3sHost, "--key", cloudHost.k3sKeyPath, "--image", image],
+    ["--host", cloudHost.k3sHost, "--key", cloudHost.k3sKeyPath, "--image", args.image],
     { timeoutMs: left() }
   );
   if (pushed.code !== 0) {
-    return { ok: false, spent: false, gaps: [gap(`\u955C\u50CF\u63A8\u4E0D\u4E0A\u53BB\uFF08\u9000\u51FA\u7801 ${pushed.code}\uFF09\u3002`, `${pushed.stdout}
+    return { ok: false, gaps: [gap(`\u955C\u50CF\u63A8\u4E0D\u4E0A\u53BB\uFF08\u9000\u51FA\u7801 ${pushed.code}\uFF09\u3002`, `${pushed.stdout}
 ${pushed.stderr}`)] };
   }
+  return { ok: true };
+}
+async function runTrial(deps, args) {
+  const { receipt, round } = args;
+  const { cloudHost } = deps;
+  const manifest = receipt.manifest;
+  const stamp = trialStamp(deps.now());
+  const trialId = trialDeployId(receipt.deployId, round, stamp);
+  const image = trialImageTag(cloudHost.imageRepo, receipt.deployId, round, stamp);
+  const appName = trialAppName(receipt.deployId);
+  const deadline = deps.now() + cloudHost.trialTimeoutMs;
+  const left = () => Math.max(3e4, deadline - deps.now());
+  const buildOutcome = cloudHost.buildHost === "local" ? await buildLocally(deps, {
+    manifest,
+    personaDir: args.personaDir,
+    image,
+    timeoutMs: left(),
+    tmpKey: `${receipt.deployId}-t${round}-${stamp}`
+  }) : await buildViaGha(deps, { manifest, personaDir: args.personaDir, tag: trialId, timeoutMs: left() });
+  if (!buildOutcome.ok) return { ok: false, spent: false, gaps: buildOutcome.gaps };
   deps.onStage("\u5728\u4E91\u4E0A\u767B\u8BB0\u8FD9\u6B21\u8BD5\u88C5");
   try {
     await gatewayAdmin(deps, "/admin/deployments", {
@@ -55514,10 +55979,10 @@ ${pushed.stderr}`)] };
 }
 
 // src/deploy/run-node.ts
-var import_node_child_process8 = require("child_process");
+var import_node_child_process9 = require("child_process");
 async function runNodeScript(script, args, timeoutMs) {
   return await new Promise((resolve9, reject) => {
-    const child = (0, import_node_child_process8.spawn)(process.execPath, [script, ...args], { stdio: ["ignore", "pipe", "pipe"] });
+    const child = (0, import_node_child_process9.spawn)(process.execPath, [script, ...args], { stdio: ["ignore", "pipe", "pipe"] });
     let stdout = "";
     let stderr = "";
     child.stdout.on("data", (d) => {
@@ -55960,9 +56425,9 @@ async function refreshTunnelUrlOnStartup(deps) {
 
 // src/lark-bot-connector/binding-store.ts
 var import_node_fs28 = __toESM(require("fs"), 1);
-var import_node_path34 = __toESM(require("path"), 1);
+var import_node_path35 = __toESM(require("path"), 1);
 function createLarkBotBindingStore(personaRoot) {
-  const filePath = (personaId2) => import_node_path34.default.join(personaRoot, safeFileName(personaId2), ".clawd", "lark-bot.json");
+  const filePath = (personaId2) => import_node_path35.default.join(personaRoot, safeFileName(personaId2), ".clawd", "lark-bot.json");
   const read = (personaId2) => {
     const file = filePath(personaId2);
     if (!import_node_fs28.default.existsSync(file)) return null;
@@ -55976,7 +56441,7 @@ function createLarkBotBindingStore(personaRoot) {
   };
   const write = (personaId2, meta) => {
     const file = filePath(personaId2);
-    import_node_fs28.default.mkdirSync(import_node_path34.default.dirname(file), { recursive: true });
+    import_node_fs28.default.mkdirSync(import_node_path35.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     import_node_fs28.default.writeFileSync(tmp, JSON.stringify(meta, null, 2), { mode: 384 });
     import_node_fs28.default.renameSync(tmp, file);
@@ -56144,7 +56609,7 @@ function createLarkBotCloudClient(opts) {
 
 // src/lark-bot-connector/chat-router.ts
 var import_node_fs29 = __toESM(require("fs"), 1);
-var import_node_path35 = __toESM(require("path"), 1);
+var import_node_path36 = __toESM(require("path"), 1);
 init_protocol();
 var ERROR_REPLY_TEXT = "\u5904\u7406\u51FA\u9519\u4E86\uFF0C\u8BF7\u91CD\u8BD5";
 var LOCAL_TURN_RETRIES = 2;
@@ -56211,7 +56676,7 @@ function createLarkChatRouter(deps) {
         }
         const dir = deps.mediaRootFor(env.chatId);
         import_node_fs29.default.mkdirSync(dir, { recursive: true });
-        const p2 = import_node_path35.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}.${ext}`);
+        const p2 = import_node_path36.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}.${ext}`);
         import_node_fs29.default.writeFileSync(p2, r.data);
         lines.push(`[\u56FE\u7247: ${p2}]\uFF08\u7528 Read \u5DE5\u5177\u67E5\u770B\uFF09`);
       } catch (err) {
@@ -56234,7 +56699,7 @@ function createLarkChatRouter(deps) {
         }
         const dir = deps.mediaRootFor(env.chatId);
         import_node_fs29.default.mkdirSync(dir, { recursive: true });
-        const p2 = import_node_path35.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}-${safeAttachmentName(f.name)}`);
+        const p2 = import_node_path36.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}-${safeAttachmentName(f.name)}`);
         import_node_fs29.default.writeFileSync(p2, r.data);
         lines.push(`[\u6587\u4EF6: ${p2}]\uFF08\u7528 Read \u5DE5\u5177\u67E5\u770B\uFF09`);
       } catch (err) {
@@ -56430,7 +56895,7 @@ ${formatLarkSpeakerReminder(speaker)}`
 }
 
 // src/lark-bot-connector/envelope.ts
-var import_node_crypto7 = require("crypto");
+var import_node_crypto8 = require("crypto");
 var LARK_ENVELOPE_PREFIX = "clawdlbe1";
 function verifyLarkEventEnvelope(args) {
   const { token, publicKeyPem } = args;
@@ -56449,7 +56914,7 @@ function verifyLarkEventEnvelope(args) {
   const data = Buffer.from(`${prefix}.${payloadB64}`, "utf8");
   let sigOk = false;
   try {
-    sigOk = (0, import_node_crypto7.verify)(null, data, publicKeyPem, Buffer.from(sigB64, "base64url"));
+    sigOk = (0, import_node_crypto8.verify)(null, data, publicKeyPem, Buffer.from(sigB64, "base64url"));
   } catch {
     sigOk = false;
   }
@@ -57324,7 +57789,7 @@ var CodexHistoryReader = class {
 };
 
 // src/tools/codex-skills.ts
-var import_node_path36 = __toESM(require("path"), 1);
+var import_node_path37 = __toESM(require("path"), 1);
 function str3(v2) {
   return typeof v2 === "string" ? v2 : void 0;
 }
@@ -57339,13 +57804,13 @@ function mapSkillsListResponse(res) {
       const r = s ?? {};
       const name = str3(r.name);
       if (!name) continue;
-      const path98 = str3(r.path);
+      const path99 = str3(r.path);
       const description = str3(r.description);
       const isPlugin = name.includes(":");
       out.push({
         name,
         source: isPlugin ? "plugin" : "project",
-        ...path98 ? { path: path98 } : {},
+        ...path99 ? { path: path99 } : {},
         ...description ? { description } : {},
         ...isPlugin ? { plugin: name.split(":")[0] } : {}
       });
@@ -57361,14 +57826,14 @@ async function listCodexSkills(cwd, deps = {}) {
     // 先写 extraRoots 再写 list（stdio 按写入顺序处理，fire-and-forget 不 await 回包；
     // codex-session.ts ready 序列同款，两处保持一致）。失败不阻塞 list。
     beforeRequest: (client) => {
-      void client.request("skills/extraRoots/set", { extraRoots: [import_node_path36.default.join(cwd, ".claude", "skills")] }).catch(() => void 0);
+      void client.request("skills/extraRoots/set", { extraRoots: [import_node_path37.default.join(cwd, ".claude", "skills")] }).catch(() => void 0);
     }
   });
   return mapSkillsListResponse(res);
 }
 
 // src/tools/codex-turn-context.ts
-var import_promises8 = __toESM(require("fs/promises"), 1);
+var import_promises9 = __toESM(require("fs/promises"), 1);
 function parseTurnContextFromRollout(raw) {
   const lines = raw.split("\n");
   for (let i = lines.length - 1; i >= 0; i--) {
@@ -57403,7 +57868,7 @@ async function readCodexTurnContext(args, deps = {}) {
   );
   const rolloutPath = str4(rec3(res?.thread)?.path);
   if (!rolloutPath) return null;
-  return parseTurnContextFromRollout(await import_promises8.default.readFile(rolloutPath, "utf8"));
+  return parseTurnContextFromRollout(await import_promises9.default.readFile(rolloutPath, "utf8"));
 }
 function createCodexResolvedMetaHydrator(deps) {
   const fetchedThreadIds = /* @__PURE__ */ new Set();
@@ -57447,15 +57912,15 @@ function str4(v2) {
 
 // src/workspace/browser.ts
 var import_node_fs30 = __toESM(require("fs"), 1);
-var import_node_os9 = __toESM(require("os"), 1);
-var import_node_path37 = __toESM(require("path"), 1);
+var import_node_os10 = __toESM(require("os"), 1);
+var import_node_path38 = __toESM(require("path"), 1);
 init_protocol();
 var MAX_FILE_BYTES2 = 2 * 1024 * 1024;
 function resolveInsideCwd(cwd, subpath) {
-  const absCwd = import_node_path37.default.resolve(cwd);
-  const joined = import_node_path37.default.resolve(absCwd, subpath ?? ".");
-  const rel = import_node_path37.default.relative(absCwd, joined);
-  if (rel.startsWith("..") || import_node_path37.default.isAbsolute(rel)) {
+  const absCwd = import_node_path38.default.resolve(cwd);
+  const joined = import_node_path38.default.resolve(absCwd, subpath ?? ".");
+  const rel = import_node_path38.default.relative(absCwd, joined);
+  if (rel.startsWith("..") || import_node_path38.default.isAbsolute(rel)) {
     throw new ClawdError(ERROR_CODES.INVALID_PATH, `path escapes cwd: ${subpath}`);
   }
   return joined;
@@ -57473,7 +57938,7 @@ function ensureCwd(cwd) {
 }
 var WorkspaceBrowser = class {
   list(args) {
-    const cwd = args.cwd && args.cwd.length > 0 ? args.cwd : import_node_os9.default.homedir();
+    const cwd = args.cwd && args.cwd.length > 0 ? args.cwd : import_node_os10.default.homedir();
     ensureCwd(cwd);
     const full = resolveInsideCwd(cwd, args.path);
     const dirents = import_node_fs30.default.readdirSync(full, { withFileTypes: true });
@@ -57486,7 +57951,7 @@ var WorkspaceBrowser = class {
         mtime: ""
       };
       try {
-        const st = import_node_fs30.default.statSync(import_node_path37.default.join(full, d.name));
+        const st = import_node_fs30.default.statSync(import_node_path38.default.join(full, d.name));
         entry.mtime = new Date(st.mtimeMs).toISOString();
         if (d.isFile()) entry.size = st.size;
       } catch {
@@ -57532,8 +57997,8 @@ var WorkspaceBrowser = class {
 
 // src/skills/agents-scanner.ts
 var import_node_fs31 = __toESM(require("fs"), 1);
-var import_node_os10 = __toESM(require("os"), 1);
-var import_node_path38 = __toESM(require("path"), 1);
+var import_node_os11 = __toESM(require("os"), 1);
+var import_node_path39 = __toESM(require("path"), 1);
 var DEFAULT_POLICY_DIR_DARWIN = "/Library/Application Support/ClaudeCode/.claude/agents";
 function isDirLikeSync2(p2) {
   try {
@@ -57571,10 +58036,10 @@ function scanAgentsDir(dir, source, seen, out) {
   }
   for (const ent of entries) {
     if (!ent.name.endsWith(".md")) continue;
-    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path38.default.join(dir, ent.name)))) {
+    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path39.default.join(dir, ent.name)))) {
       continue;
     }
-    const filePath = import_node_path38.default.join(dir, ent.name);
+    const filePath = import_node_path39.default.join(dir, ent.name);
     const baseName = ent.name.replace(/\.md$/, "");
     if (seen.has(baseName)) continue;
     seen.add(baseName);
@@ -57597,7 +58062,7 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
       return;
     }
     for (const ent of entries) {
-      const childPath = import_node_path38.default.join(dir, ent.name);
+      const childPath = import_node_path39.default.join(dir, ent.name);
       if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync2(childPath)) {
         walk2(childPath, [...namespaces, ent.name]);
         continue;
@@ -57622,9 +58087,9 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   walk2(root, []);
 }
 function readInstalledPlugins2(home) {
-  const pluginsDir = import_node_path38.default.join(home, ".claude", "plugins");
-  const v2 = import_node_path38.default.join(pluginsDir, "installed_plugins_v2.json");
-  const v1 = import_node_path38.default.join(pluginsDir, "installed_plugins.json");
+  const pluginsDir = import_node_path39.default.join(home, ".claude", "plugins");
+  const v2 = import_node_path39.default.join(pluginsDir, "installed_plugins_v2.json");
+  const v1 = import_node_path39.default.join(pluginsDir, "installed_plugins.json");
   let raw = null;
   for (const candidate of [v2, v1]) {
     try {
@@ -57653,19 +58118,19 @@ function readInstalledPlugins2(home) {
   return out;
 }
 function walkUpProjectAgentsDirs(startCwd, home, seen, out) {
-  let cur = import_node_path38.default.resolve(startCwd);
-  const fsRoot = import_node_path38.default.parse(cur).root;
+  let cur = import_node_path39.default.resolve(startCwd);
+  const fsRoot = import_node_path39.default.parse(cur).root;
   while (true) {
-    scanAgentsDir(import_node_path38.default.join(cur, ".claude", "agents"), "project", seen, out);
+    scanAgentsDir(import_node_path39.default.join(cur, ".claude", "agents"), "project", seen, out);
     let hasGit = false;
     try {
-      hasGit = import_node_fs31.default.existsSync(import_node_path38.default.join(cur, ".git"));
+      hasGit = import_node_fs31.default.existsSync(import_node_path39.default.join(cur, ".git"));
     } catch {
     }
     if (hasGit) return;
     if (cur === home) return;
     if (cur === fsRoot) return;
-    const parent = import_node_path38.default.dirname(cur);
+    const parent = import_node_path39.default.dirname(cur);
     if (parent === cur) return;
     cur = parent;
   }
@@ -57675,7 +58140,7 @@ var AgentsScanner = class {
   extraPluginRoots;
   policyDir;
   constructor(opts = {}) {
-    this.home = opts.home ?? process.env.CLAUDE_CONFIG_DIR ?? import_node_os10.default.homedir();
+    this.home = opts.home ?? process.env.CLAUDE_CONFIG_DIR ?? import_node_os11.default.homedir();
     this.extraPluginRoots = opts.extraPluginRoots ?? [];
     if (opts.policyDir !== void 0) {
       this.policyDir = opts.policyDir;
@@ -57700,7 +58165,7 @@ var AgentsScanner = class {
     }
     const fsBlock = [];
     scanAgentsDir(
-      import_node_path38.default.join(this.home, ".claude", "agents"),
+      import_node_path39.default.join(this.home, ".claude", "agents"),
       "global",
       seen,
       fsBlock
@@ -57714,7 +58179,7 @@ var AgentsScanner = class {
       ...this.extraPluginRoots
     ];
     for (const { name, root } of plugins) {
-      const agentsRoot = import_node_path38.default.join(root, "agents");
+      const agentsRoot = import_node_path39.default.join(root, "agents");
       scanPluginAgentsTree(agentsRoot, name, seen, fsBlock);
     }
     return [...builtinBlock, ...fsBlock];
@@ -57723,27 +58188,27 @@ var AgentsScanner = class {
 
 // src/observer/session-observer.ts
 var import_node_fs33 = __toESM(require("fs"), 1);
-var import_node_os12 = __toESM(require("os"), 1);
-var import_node_path40 = __toESM(require("path"), 1);
+var import_node_os13 = __toESM(require("os"), 1);
+var import_node_path41 = __toESM(require("path"), 1);
 init_claude_history();
 
 // src/observer/subagent-meta-observer.ts
 var import_node_fs32 = __toESM(require("fs"), 1);
-var import_node_os11 = __toESM(require("os"), 1);
-var import_node_path39 = __toESM(require("path"), 1);
+var import_node_os12 = __toESM(require("os"), 1);
+var import_node_path40 = __toESM(require("path"), 1);
 init_claude_history();
 var META_RE = /^agent-([A-Za-z0-9_-]+)\.meta\.json$/;
 var SubagentMetaObserver = class {
   constructor(opts) {
     this.opts = opts;
-    this.home = opts.home ?? import_node_os11.default.homedir();
+    this.home = opts.home ?? import_node_os12.default.homedir();
   }
   opts;
   home;
   watches = /* @__PURE__ */ new Map();
   // public for spec only：测试直接拼路径写假 meta.json；生产 start() 内部自己解析
   resolveSubagentDir(cwd, toolSessionId) {
-    return import_node_path39.default.join(
+    return import_node_path40.default.join(
       this.home,
       ".claude",
       "projects",
@@ -57799,7 +58264,7 @@ var SubagentMetaObserver = class {
     if (!m2) return;
     const agentId = m2[1];
     if (w2.emitted.has(agentId)) return;
-    const file = import_node_path39.default.join(w2.dirPath, name);
+    const file = import_node_path40.default.join(w2.dirPath, name);
     let raw;
     try {
       raw = import_node_fs32.default.readFileSync(file, "utf8");
@@ -57847,7 +58312,7 @@ var SubagentMetaObserver = class {
 var SessionObserver = class {
   constructor(opts) {
     this.opts = opts;
-    this.home = opts.home ?? import_node_os12.default.homedir();
+    this.home = opts.home ?? import_node_os13.default.homedir();
     this.metaObserver = opts.enableSubagentMetaObserver ? new SubagentMetaObserver({ home: this.home, onEvent: opts.onEvent }) : null;
   }
   opts;
@@ -57859,7 +58324,7 @@ var SessionObserver = class {
   metaObserver;
   resolveJsonlPath(cwd, toolSessionId, override) {
     if (override) return override;
-    return import_node_path40.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
+    return import_node_path41.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
   }
   start(args) {
     this.stop(args.sessionId);
@@ -57885,10 +58350,10 @@ var SessionObserver = class {
       lastDeriveMs: 0
     };
     try {
-      import_node_fs33.default.mkdirSync(import_node_path40.default.dirname(filePath), { recursive: true });
+      import_node_fs33.default.mkdirSync(import_node_path41.default.dirname(filePath), { recursive: true });
     } catch {
     }
-    w2.watcher = import_node_fs33.default.watch(import_node_path40.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
+    w2.watcher = import_node_fs33.default.watch(import_node_path41.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
       if (!changedName || !w2.filePath.endsWith(changedName)) return;
       this.poll(w2);
     });
@@ -57985,7 +58450,7 @@ var SessionObserver = class {
     const now = Date.now();
     if (now - w2.lastRelocateScanMs < 1e3) return;
     w2.lastRelocateScanMs = now;
-    const projectsRoot = import_node_path40.default.join(this.home, ".claude", "projects");
+    const projectsRoot = import_node_path41.default.join(this.home, ".claude", "projects");
     const found = findTranscriptByToolSessionId(projectsRoot, w2.toolSessionId);
     if (!found || found === w2.filePath) return;
     try {
@@ -57994,7 +58459,7 @@ var SessionObserver = class {
     }
     w2.filePath = found;
     try {
-      w2.watcher = import_node_fs33.default.watch(import_node_path40.default.dirname(found), { persistent: false }, (_event, changedName) => {
+      w2.watcher = import_node_fs33.default.watch(import_node_path41.default.dirname(found), { persistent: false }, (_event, changedName) => {
         if (!changedName || !w2.filePath.endsWith(changedName)) return;
         this.poll(w2);
       });
@@ -58114,10 +58579,10 @@ function listRegistered() {
 }
 
 // src/tools/title-generator.ts
-var import_node_child_process9 = require("child_process");
+var import_node_child_process10 = require("child_process");
 var import_node_fs34 = __toESM(require("fs"), 1);
-var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path41 = __toESM(require("path"), 1);
+var import_node_os14 = __toESM(require("os"), 1);
+var import_node_path42 = __toESM(require("path"), 1);
 var TITLE_GEN_DIR_PREFIX = "clawd-title-";
 var TITLE_MODEL_BY_TOOL = {
   claude: "haiku",
@@ -58188,7 +58653,7 @@ async function generateSessionTitle(tool, firstMessage, deps = {}) {
   if (!text) return null;
   let workDir;
   try {
-    workDir = import_node_fs34.default.mkdtempSync(import_node_path41.default.join(import_node_os13.default.tmpdir(), TITLE_GEN_DIR_PREFIX));
+    workDir = import_node_fs34.default.mkdtempSync(import_node_path42.default.join(import_node_os14.default.tmpdir(), TITLE_GEN_DIR_PREFIX));
   } catch {
     return null;
   }
@@ -58198,8 +58663,8 @@ async function generateSessionTitle(tool, firstMessage, deps = {}) {
     } catch {
     }
   };
-  const outFile = import_node_path41.default.join(workDir, `codex-title-${process.pid}-${++outFileSeq}-${Date.now()}.txt`);
-  const schemaFile = import_node_path41.default.join(workDir, "title-schema.json");
+  const outFile = import_node_path42.default.join(workDir, `codex-title-${process.pid}-${++outFileSeq}-${Date.now()}.txt`);
+  const schemaFile = import_node_path42.default.join(workDir, "title-schema.json");
   if (tool === "codex") {
     try {
       import_node_fs34.default.writeFileSync(schemaFile, CODEX_TITLE_SCHEMA);
@@ -58210,7 +58675,7 @@ async function generateSessionTitle(tool, firstMessage, deps = {}) {
   }
   const cmd = tool === "claude" ? process.env.CLAUDE_BIN ?? "claude" : process.env.CODEX_BIN ?? "codex";
   const args = tool === "claude" ? buildClaudeTitleArgs(buildClaudeTitlePrompt(text)) : buildCodexTitleArgs(buildTitlePrompt(text), outFile, schemaFile);
-  const doSpawn = deps.spawnOverride ?? ((c, a, o) => (0, import_node_child_process9.spawn)(c, a, { ...o, stdio: ["ignore", "pipe", "pipe"] }));
+  const doSpawn = deps.spawnOverride ?? ((c, a, o) => (0, import_node_child_process10.spawn)(c, a, { ...o, stdio: ["ignore", "pipe", "pipe"] }));
   const timeoutMs = deps.timeoutMs ?? DEFAULT_TITLE_GEN_TIMEOUT_MS;
   return await new Promise((resolve9) => {
     let proc;
@@ -58274,7 +58739,7 @@ var wrapper_default = import_websocket.default;
 
 // src/transport/local-ws-server.ts
 var import_node_http2 = __toESM(require("http"), 1);
-var import_node_crypto8 = require("crypto");
+var import_node_crypto9 = require("crypto");
 
 // src/transport/preview-proxy.ts
 var import_node_http = __toESM(require("http"), 1);
@@ -58558,7 +59023,7 @@ var LocalWsServer = class {
     }
   }
   onConnection(socket, remoteAddress) {
-    const id = (0, import_node_crypto8.randomUUID)();
+    const id = (0, import_node_crypto9.randomUUID)();
     const subscribedSessions = /* @__PURE__ */ new Map();
     const handle = {
       id,
@@ -58961,8 +59426,8 @@ async function authenticate(token, deps) {
 }
 
 // src/legacy-cleanup.ts
-var fs47 = __toESM(require("fs/promises"), 1);
-var path49 = __toESM(require("path"), 1);
+var fs48 = __toESM(require("fs/promises"), 1);
+var path50 = __toESM(require("path"), 1);
 var LEGACY_FILES = [
   "personal-capability.json",
   "received-capabilities.json",
@@ -58971,9 +59436,9 @@ var LEGACY_FILES = [
 async function cleanupLegacyCapabilityFiles(dataDir, logger) {
   const removed = [];
   for (const name of LEGACY_FILES) {
-    const p2 = path49.join(dataDir, name);
+    const p2 = path50.join(dataDir, name);
     try {
-      await fs47.unlink(p2);
+      await fs48.unlink(p2);
       removed.push(name);
       logger.debug("legacy capability file removed", { file: name });
     } catch (err) {
@@ -58985,13 +59450,13 @@ async function cleanupLegacyCapabilityFiles(dataDir, logger) {
 }
 
 // src/inbox/inbox-store.ts
-var fs48 = __toESM(require("fs"), 1);
-var path50 = __toESM(require("path"), 1);
+var fs49 = __toESM(require("fs"), 1);
+var path51 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs48.mkdirSync(this.dirPath(), { recursive: true });
+    fs49.mkdirSync(this.dirPath(), { recursive: true });
   }
   dataDir;
   /**
@@ -59003,7 +59468,7 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     let raw;
     try {
-      raw = fs48.readFileSync(file, "utf8");
+      raw = fs49.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -59019,7 +59484,7 @@ var InboxStore = class {
     const dir = this.dirPath();
     let entries;
     try {
-      entries = fs48.readdirSync(dir);
+      entries = fs49.readdirSync(dir);
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -59035,9 +59500,9 @@ var InboxStore = class {
     if (existing.some((m2) => m2.id === message.id)) return;
     const file = this.filePath(message.peerDeviceId);
     const line = JSON.stringify(message) + "\n";
-    fs48.appendFileSync(file, line, { mode: 384 });
+    fs49.appendFileSync(file, line, { mode: 384 });
     try {
-      fs48.chmodSync(file, 384);
+      fs49.chmodSync(file, 384);
     } catch {
     }
   }
@@ -59067,7 +59532,7 @@ var InboxStore = class {
   removeByPeerDeviceId(peerDeviceId) {
     const file = this.filePath(peerDeviceId);
     try {
-      fs48.unlinkSync(file);
+      fs49.unlinkSync(file);
     } catch (err) {
       if (err?.code === "ENOENT") return;
     }
@@ -59076,18 +59541,18 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     const content = messages.map((m2) => JSON.stringify(m2)).join("\n") + (messages.length > 0 ? "\n" : "");
-    fs48.writeFileSync(tmp, content, { mode: 384 });
-    fs48.renameSync(tmp, file);
+    fs49.writeFileSync(tmp, content, { mode: 384 });
+    fs49.renameSync(tmp, file);
     try {
-      fs48.chmodSync(file, 384);
+      fs49.chmodSync(file, 384);
     } catch {
     }
   }
   dirPath() {
-    return path50.join(this.dataDir, INBOX_SUBDIR);
+    return path51.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerDeviceId) {
-    return path50.join(this.dirPath(), `${peerDeviceId}.jsonl`);
+    return path51.join(this.dirPath(), `${peerDeviceId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -59175,8 +59640,8 @@ var InboxManager = class {
 };
 
 // src/state/contact-store.ts
-var fs49 = __toESM(require("fs"), 1);
-var path51 = __toESM(require("path"), 1);
+var fs50 = __toESM(require("fs"), 1);
+var path52 = __toESM(require("path"), 1);
 var FILE_NAME = "contacts.json";
 var ContactStore = class {
   constructor(dataDir) {
@@ -59186,10 +59651,10 @@ var ContactStore = class {
   contacts = /* @__PURE__ */ new Map();
   load() {
     this.contacts.clear();
-    const file = path51.join(this.dataDir, FILE_NAME);
+    const file = path52.join(this.dataDir, FILE_NAME);
     let raw;
     try {
-      raw = fs49.readFileSync(file, "utf8");
+      raw = fs50.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code !== "ENOENT") this.renameBak(file);
       return;
@@ -59270,27 +59735,27 @@ var ContactStore = class {
     return true;
   }
   flush() {
-    const file = path51.join(this.dataDir, FILE_NAME);
+    const file = path52.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
       { contacts: Array.from(this.contacts.values()) },
       null,
       2
     );
-    fs49.mkdirSync(this.dataDir, { recursive: true });
-    fs49.writeFileSync(tmp, content, { mode: 384 });
-    fs49.renameSync(tmp, file);
+    fs50.mkdirSync(this.dataDir, { recursive: true });
+    fs50.writeFileSync(tmp, content, { mode: 384 });
+    fs50.renameSync(tmp, file);
   }
   renameBak(file) {
     try {
-      fs49.renameSync(file, `${file}.bak`);
+      fs50.renameSync(file, `${file}.bak`);
     } catch {
     }
   }
 };
 
 // src/contact/connect-remote.ts
-var crypto3 = __toESM(require("crypto"), 1);
+var crypto4 = __toESM(require("crypto"), 1);
 init_protocol();
 var HANDSHAKE_TIMEOUT_MS = 5e3;
 var RPC_TIMEOUT_MS = 5e3;
@@ -59345,7 +59810,7 @@ async function connectRemote(args) {
     ws.once("close", onClose);
   });
   function call(method, payload) {
-    const requestId = crypto3.randomUUID();
+    const requestId = crypto4.randomUUID();
     return new Promise((resolve9, reject) => {
       const onMessage = (raw) => {
         let f;
@@ -59391,61 +59856,61 @@ async function connectRemote(args) {
 }
 
 // src/migrations/2026-05-20-flatten-sessions.ts
-var fs50 = __toESM(require("fs"), 1);
-var path52 = __toESM(require("path"), 1);
+var fs51 = __toESM(require("fs"), 1);
+var path53 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path52.join(dataDir, "sessions");
-  const flagPath = path52.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path53.join(dataDir, "sessions");
+  const flagPath = path53.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path52.join(sessionsDir, "default");
+  const defaultDir = path53.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path52.join(defaultDir, entry);
-      const dst = path52.join(sessionsDir, entry);
-      fs50.renameSync(src, dst);
+      const src = path53.join(defaultDir, entry);
+      const dst = path53.join(sessionsDir, entry);
+      fs51.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path52.join(sessionsDir, pid);
+    const personaDir = path53.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path52.join(personaDir, "owner");
+    const ownerSrc = path53.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path52.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs50.mkdirSync(ownerDst, { recursive: true });
+      const ownerDst = path53.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      fs51.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs50.renameSync(path52.join(ownerSrc, file), path52.join(ownerDst, file));
+        fs51.renameSync(path53.join(ownerSrc, file), path53.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path52.join(personaDir, "listener");
+    const listenerSrc = path53.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path52.join(dataDir, ".legacy", `listener-${pid}`);
-      fs50.mkdirSync(archiveDst, { recursive: true });
+      const archiveDst = path53.join(dataDir, ".legacy", `listener-${pid}`);
+      fs51.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs50.renameSync(path52.join(listenerSrc, file), path52.join(archiveDst, file));
+        fs51.renameSync(path53.join(listenerSrc, file), path53.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs50.mkdirSync(sessionsDir, { recursive: true });
-  fs50.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs51.mkdirSync(sessionsDir, { recursive: true });
+  fs51.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -59456,7 +59921,7 @@ function migrateFlattenSessions(opts) {
 }
 function existsSync3(p2) {
   try {
-    fs50.statSync(p2);
+    fs51.statSync(p2);
     return true;
   } catch {
     return false;
@@ -59464,61 +59929,61 @@ function existsSync3(p2) {
 }
 function isDir(p2) {
   try {
-    return fs50.statSync(p2).isDirectory();
+    return fs51.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p2) {
   try {
-    return fs50.readdirSync(p2);
+    return fs51.readdirSync(p2);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p2) {
   try {
-    fs50.rmdirSync(p2);
+    fs51.rmdirSync(p2);
   } catch {
   }
 }
 
 // src/migrations/2026-08-18-drop-seeded-projects.ts
-var fs51 = __toESM(require("fs"), 1);
-var path53 = __toESM(require("path"), 1);
+var fs52 = __toESM(require("fs"), 1);
+var path54 = __toESM(require("path"), 1);
 var DROP_SEEDED_PROJECTS_FLAG = ".projects-seed-dropped.v1.done";
 function dropSeededProjects(opts) {
-  fs51.mkdirSync(opts.dataDir, { recursive: true });
-  const flag = path53.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
-  if (fs51.existsSync(flag)) return { skipped: true, dropped: 0, backup: null };
-  const file = path53.join(opts.dataDir, "projects.json");
+  fs52.mkdirSync(opts.dataDir, { recursive: true });
+  const flag = path54.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
+  if (fs52.existsSync(flag)) return { skipped: true, dropped: 0, backup: null };
+  const file = path54.join(opts.dataDir, "projects.json");
   let raw = null;
   let dropped = 0;
   try {
-    raw = fs51.readFileSync(file, "utf8");
+    raw = fs52.readFileSync(file, "utf8");
     dropped = JSON.parse(raw).projects?.length ?? 0;
   } catch {
   }
   let backup = null;
   if (raw != null && dropped > 0) {
-    const dir = path53.join(opts.dataDir, "backups");
-    fs51.mkdirSync(dir, { recursive: true });
-    backup = path53.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
-    fs51.writeFileSync(backup, raw);
+    const dir = path54.join(opts.dataDir, "backups");
+    fs52.mkdirSync(dir, { recursive: true });
+    backup = path54.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
+    fs52.writeFileSync(backup, raw);
   }
   if (raw != null || dropped > 0) {
-    fs51.writeFileSync(file, JSON.stringify({ projects: [] }, null, 2));
+    fs52.writeFileSync(file, JSON.stringify({ projects: [] }, null, 2));
   }
-  fs51.writeFileSync(flag, (/* @__PURE__ */ new Date()).toISOString());
+  fs52.writeFileSync(flag, (/* @__PURE__ */ new Date()).toISOString());
   return { skipped: false, dropped, backup };
 }
 
 // src/transport/http-router.ts
 var import_node_fs36 = __toESM(require("fs"), 1);
-var import_node_path45 = __toESM(require("path"), 1);
+var import_node_path46 = __toESM(require("path"), 1);
 
 // src/attachment/mime.ts
-var import_node_path42 = __toESM(require("path"), 1);
+var import_node_path43 = __toESM(require("path"), 1);
 var TEXT_PLAIN = "text/plain; charset=utf-8";
 var EXT_TO_NATIVE_MIME = {
   // 图片
@@ -59625,14 +60090,14 @@ var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
   ".mk"
 ]);
 function lookupMime(filePathOrName) {
-  const ext = import_node_path42.default.extname(filePathOrName).toLowerCase();
+  const ext = import_node_path43.default.extname(filePathOrName).toLowerCase();
   if (EXT_TO_NATIVE_MIME[ext]) return EXT_TO_NATIVE_MIME[ext];
   if (TEXT_EXTENSIONS.has(ext)) return TEXT_PLAIN;
   return "application/octet-stream";
 }
 
 // src/attachment/sign-url.ts
-var import_node_crypto9 = __toESM(require("crypto"), 1);
+var import_node_crypto10 = __toESM(require("crypto"), 1);
 var HMAC_ALGO = "sha256";
 function base64urlEncode(buf) {
   const b2 = typeof buf === "string" ? Buffer.from(buf, "utf8") : buf;
@@ -59650,7 +60115,7 @@ function decodeAbsPathFromUrl(encoded) {
 var DOMAIN_PREFIX2 = "clawd-attach-v1|";
 function computeSig(secret, absPath, e) {
   const msg = e === null ? `${DOMAIN_PREFIX2}${absPath}` : `${DOMAIN_PREFIX2}${absPath}|${e}`;
-  return import_node_crypto9.default.createHmac(HMAC_ALGO, secret).update(msg).digest();
+  return import_node_crypto10.default.createHmac(HMAC_ALGO, secret).update(msg).digest();
 }
 function signUrlParts(secret, absPath, ttlSeconds, now = Date.now) {
   const e = ttlSeconds === null ? null : Math.floor(now() / 1e3) + ttlSeconds;
@@ -59685,7 +60150,7 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
   if (provided.length !== expected.length) {
     return { ok: false, code: "BAD_SIG" };
   }
-  if (!import_node_crypto9.default.timingSafeEqual(provided, expected)) {
+  if (!import_node_crypto10.default.timingSafeEqual(provided, expected)) {
     return { ok: false, code: "BAD_SIG" };
   }
   if (e !== null && now() / 1e3 > e) {
@@ -59696,9 +60161,9 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
 
 // src/attachment/upload.ts
 var import_node_fs35 = __toESM(require("fs"), 1);
-var import_node_path43 = __toESM(require("path"), 1);
-var import_node_crypto10 = __toESM(require("crypto"), 1);
-var import_promises9 = require("stream/promises");
+var import_node_path44 = __toESM(require("path"), 1);
+var import_node_crypto11 = __toESM(require("crypto"), 1);
+var import_promises10 = require("stream/promises");
 var UploadError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -59708,27 +60173,27 @@ var UploadError = class extends Error {
   code;
 };
 function assertValidFileName(fileName) {
-  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path43.default.basename(fileName)) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path44.default.basename(fileName)) {
     throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
   }
 }
 var HASH_PREFIX_LEN = 16;
 async function writeUploadedAttachment(args) {
   assertValidFileName(args.fileName);
-  const attachmentsRoot = import_node_path43.default.join(args.baseDir, ".attachments");
+  const attachmentsRoot = import_node_path44.default.join(args.baseDir, ".attachments");
   try {
     import_node_fs35.default.mkdirSync(attachmentsRoot, { recursive: true });
   } catch (err) {
     throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
   }
-  const hasher = import_node_crypto10.default.createHash("sha256");
+  const hasher = import_node_crypto11.default.createHash("sha256");
   let actualSize = 0;
-  const tmpPath = import_node_path43.default.join(
+  const tmpPath = import_node_path44.default.join(
     attachmentsRoot,
-    `.upload-${process.pid}-${Date.now()}-${import_node_crypto10.default.randomBytes(4).toString("hex")}`
+    `.upload-${process.pid}-${Date.now()}-${import_node_crypto11.default.randomBytes(4).toString("hex")}`
   );
   try {
-    await (0, import_promises9.pipeline)(
+    await (0, import_promises10.pipeline)(
       args.body,
       async function* (source) {
         for await (const chunk of source) {
@@ -59758,7 +60223,7 @@ async function writeUploadedAttachment(args) {
     );
   }
   const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
-  const hashDir = import_node_path43.default.join(attachmentsRoot, attachmentId);
+  const hashDir = import_node_path44.default.join(attachmentsRoot, attachmentId);
   let finalFileName;
   let hashDirExists = false;
   try {
@@ -59776,7 +60241,7 @@ async function writeUploadedAttachment(args) {
     try {
       import_node_fs35.default.mkdirSync(hashDir, { recursive: true });
       finalFileName = args.fileName;
-      import_node_fs35.default.renameSync(tmpPath, import_node_path43.default.join(hashDir, finalFileName));
+      import_node_fs35.default.renameSync(tmpPath, import_node_path44.default.join(hashDir, finalFileName));
     } catch (err) {
       try {
         import_node_fs35.default.unlinkSync(tmpPath);
@@ -59785,7 +60250,7 @@ async function writeUploadedAttachment(args) {
       throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
     }
   }
-  const absPath = import_node_path43.default.join(hashDir, finalFileName);
+  const absPath = import_node_path44.default.join(hashDir, finalFileName);
   const relPath = absPath;
   args.groupFileStore.upsert(args.scope, args.sessionId, {
     relPath: absPath,
@@ -59799,9 +60264,9 @@ async function writeUploadedAttachment(args) {
 }
 
 // src/extension/import.ts
-var import_promises10 = __toESM(require("fs/promises"), 1);
-var import_node_path44 = __toESM(require("path"), 1);
-var import_node_os14 = __toESM(require("os"), 1);
+var import_promises11 = __toESM(require("fs/promises"), 1);
+var import_node_path45 = __toESM(require("path"), 1);
+var import_node_os15 = __toESM(require("os"), 1);
 var import_jszip = __toESM(require_lib3(), 1);
 var ImportError = class extends Error {
   constructor(code, message) {
@@ -59818,7 +60283,7 @@ async function importZip(buf, root) {
     throw new ImportError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path44.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path45.default.isAbsolute(name)) {
       throw new ImportError("ZIP_INVALID", `unsafe zip entry path: ${name}`);
     }
   }
@@ -59851,33 +60316,33 @@ async function importZip(buf, root) {
       );
     }
   }
-  const destDir = import_node_path44.default.join(root, manifest.id);
+  const destDir = import_node_path45.default.join(root, manifest.id);
   let destExists = false;
   try {
-    await import_promises10.default.access(destDir);
+    await import_promises11.default.access(destDir);
     destExists = true;
   } catch {
   }
   if (destExists) {
     throw new ImportError("ALREADY_EXISTS", `extension ${manifest.id} already installed`);
   }
-  const stage = await import_promises10.default.mkdtemp(import_node_path44.default.join(import_node_os14.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
+  const stage = await import_promises11.default.mkdtemp(import_node_path45.default.join(import_node_os15.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path44.default.join(stage, name);
+      const dest = import_node_path45.default.join(stage, name);
       if (entry.dir) {
-        await import_promises10.default.mkdir(dest, { recursive: true });
+        await import_promises11.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises10.default.mkdir(import_node_path44.default.dirname(dest), { recursive: true });
+      await import_promises11.default.mkdir(import_node_path45.default.dirname(dest), { recursive: true });
       const content = await entry.async("nodebuffer");
-      await import_promises10.default.writeFile(dest, content);
+      await import_promises11.default.writeFile(dest, content);
     }
-    await import_promises10.default.mkdir(root, { recursive: true });
-    await import_promises10.default.rename(stage, destDir);
+    await import_promises11.default.mkdir(root, { recursive: true });
+    await import_promises11.default.rename(stage, destDir);
     return { extId: manifest.id };
   } catch (e) {
-    await import_promises10.default.rm(stage, { recursive: true, force: true }).catch(() => {
+    await import_promises11.default.rm(stage, { recursive: true, force: true }).catch(() => {
     });
     throw e;
   }
@@ -59899,7 +60364,7 @@ var SHARE_UI_ASSET_MIME = {
   ".wasm": "application/wasm"
 };
 function shareUiAssetMime(filePath) {
-  const ext = import_node_path45.default.extname(filePath).toLowerCase();
+  const ext = import_node_path46.default.extname(filePath).toLowerCase();
   return SHARE_UI_ASSET_MIME[ext] ?? lookupMime(filePath);
 }
 var AUTHED_RPC_ROUTE_PREFIX = "/rpc/";
@@ -59998,7 +60463,7 @@ function isValidUploadFileName(fileName) {
   if (fileName === "." || fileName === "..") return false;
   if (fileName.startsWith(".")) return false;
   if (fileName.includes("/") || fileName.includes("\\")) return false;
-  return fileName === import_node_path45.default.basename(fileName);
+  return fileName === import_node_path46.default.basename(fileName);
 }
 function createHttpRouter(deps) {
   return async (req, res) => {
@@ -60234,7 +60699,7 @@ function createHttpRouter(deps) {
         sendHtml(res, statusByCode[r.code], loader.renderErrorHtml(r.code, msgByCode[r.code]));
         return true;
       }
-      sendHtml(res, 200, loader.renderViewerHtml(import_node_path45.default.basename(r.absPath)));
+      sendHtml(res, 200, loader.renderViewerHtml(import_node_path46.default.basename(r.absPath)));
       return true;
     }
     const ctx = deps.authResolver.resolveFromHeader(
@@ -60355,7 +60820,7 @@ function createHttpRouter(deps) {
         return true;
       }
       let absPath;
-      if (import_node_path45.default.isAbsolute(pathParam)) {
+      if (import_node_path46.default.isAbsolute(pathParam)) {
         absPath = pathParam;
       } else if (deps.sessionStore) {
         const file = deps.sessionStore.read(sid);
@@ -60363,7 +60828,7 @@ function createHttpRouter(deps) {
           sendJson(res, 404, { code: "NOT_FOUND", message: `session ${sid} not found` });
           return true;
         }
-        absPath = import_node_path45.default.join(file.cwd, pathParam);
+        absPath = import_node_path46.default.join(file.cwd, pathParam);
       } else {
         sendJson(res, 501, withCtx(ctx, { code: "NOT_IMPLEMENTED", message: "sessionStore not wired" }));
         return true;
@@ -60465,7 +60930,7 @@ function streamFile(res, absPath, logger) {
     return;
   }
   const mime = lookupMime(absPath);
-  const basename2 = import_node_path45.default.basename(absPath);
+  const basename2 = import_node_path46.default.basename(absPath);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": String(stat.size),
@@ -60483,7 +60948,7 @@ function streamFile(res, absPath, logger) {
 
 // src/attachment/gc.ts
 var import_node_fs37 = __toESM(require("fs"), 1);
-var import_node_path46 = __toESM(require("path"), 1);
+var import_node_path47 = __toESM(require("path"), 1);
 var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
 function runAttachmentGc(args) {
   const now = (args.now ?? Date.now)();
@@ -60492,12 +60957,12 @@ function runAttachmentGc(args) {
   for (const { scope, sessionId } of args.sessionScopes) {
     for (const entry of args.groupFileStore.list(scope, sessionId)) {
       if (entry.stale) continue;
-      if (import_node_path46.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+      if (import_node_path47.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
     }
   }
   const visited = /* @__PURE__ */ new Set();
   for (const { scope, sessionId } of args.sessionScopes) {
-    const legacyDir = args.getSessionCwd?.(sessionId) ?? import_node_path46.default.join(
+    const legacyDir = args.getSessionCwd?.(sessionId) ?? import_node_path47.default.join(
       args.dataDir,
       "sessions",
       ...scopeSubPath(scope).map(safeFileName),
@@ -60510,7 +60975,7 @@ function runAttachmentGc(args) {
       return true;
     });
     for (const rootDir of roots) {
-      const attRoot = import_node_path46.default.join(rootDir, ".attachments");
+      const attRoot = import_node_path47.default.join(rootDir, ".attachments");
       let hashDirs;
       try {
         hashDirs = import_node_fs37.default.readdirSync(attRoot);
@@ -60520,7 +60985,7 @@ function runAttachmentGc(args) {
         continue;
       }
       for (const hashDir of hashDirs) {
-        const hashDirAbs = import_node_path46.default.join(attRoot, hashDir);
+        const hashDirAbs = import_node_path47.default.join(attRoot, hashDir);
         let files;
         try {
           files = import_node_fs37.default.readdirSync(hashDirAbs);
@@ -60528,7 +60993,7 @@ function runAttachmentGc(args) {
           continue;
         }
         for (const name of files) {
-          const file = import_node_path46.default.join(hashDirAbs, name);
+          const file = import_node_path47.default.join(hashDirAbs, name);
           let stat;
           try {
             stat = import_node_fs37.default.statSync(file);
@@ -60560,8 +61025,8 @@ function runAttachmentGc(args) {
 
 // src/attachment/group.ts
 var import_node_fs38 = __toESM(require("fs"), 1);
-var import_node_path47 = __toESM(require("path"), 1);
-var import_node_crypto11 = __toESM(require("crypto"), 1);
+var import_node_path48 = __toESM(require("path"), 1);
+var import_node_crypto12 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
   dataDir;
@@ -60572,11 +61037,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path47.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path48.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path47.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path48.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -60611,7 +61076,7 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs38.default.mkdirSync(import_node_path47.default.dirname(file), { recursive: true });
+    import_node_fs38.default.mkdirSync(import_node_path48.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     import_node_fs38.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
     import_node_fs38.default.renameSync(tmp, file);
@@ -60650,7 +61115,7 @@ var GroupFileStore = class {
       entries[idx] = next;
     } else {
       next = {
-        id: `gf-${import_node_crypto11.default.randomBytes(6).toString("base64url")}`,
+        id: `gf-${import_node_crypto12.default.randomBytes(6).toString("base64url")}`,
         relPath: input.relPath,
         from: input.from,
         label: input.label,
@@ -60701,9 +61166,9 @@ var GroupFileStore = class {
 
 // src/discovery/state-file.ts
 var import_node_fs39 = __toESM(require("fs"), 1);
-var import_node_path48 = __toESM(require("path"), 1);
+var import_node_path49 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path48.default.join(dataDir, "state.json");
+  return import_node_path49.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -60739,7 +61204,7 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs39.default.mkdirSync(import_node_path48.default.dirname(this.file), { recursive: true });
+    import_node_fs39.default.mkdirSync(import_node_path49.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
     import_node_fs39.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
     import_node_fs39.default.renameSync(tmp, this.file);
@@ -60767,13 +61232,13 @@ function readSpawnedByDesktopFromEnv(env = process.env) {
 
 // src/tunnel/tunnel-manager.ts
 var import_node_fs43 = __toESM(require("fs"), 1);
-var import_node_path52 = __toESM(require("path"), 1);
-var import_node_crypto12 = __toESM(require("crypto"), 1);
-var import_node_child_process12 = require("child_process");
+var import_node_path53 = __toESM(require("path"), 1);
+var import_node_crypto13 = __toESM(require("crypto"), 1);
+var import_node_child_process13 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
 var import_node_fs40 = __toESM(require("fs"), 1);
-var import_node_path49 = __toESM(require("path"), 1);
+var import_node_path50 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -60792,7 +61257,7 @@ var TunnelStore = class {
     }
   }
   async set(v2) {
-    const dir = import_node_path49.default.dirname(this.filePath);
+    const dir = import_node_path50.default.dirname(this.filePath);
     await import_node_fs40.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
@@ -60903,11 +61368,11 @@ function escape(v2) {
 
 // src/tunnel/frpc-binary.ts
 var import_node_fs41 = __toESM(require("fs"), 1);
-var import_node_os15 = __toESM(require("os"), 1);
-var import_node_path50 = __toESM(require("path"), 1);
-var import_node_child_process10 = require("child_process");
+var import_node_os16 = __toESM(require("os"), 1);
+var import_node_path51 = __toESM(require("path"), 1);
+var import_node_child_process11 = require("child_process");
 var import_node_stream3 = require("stream");
-var import_promises11 = require("stream/promises");
+var import_promises12 = require("stream/promises");
 var FRPC_VERSION = "0.68.0";
 var UnsupportedPlatformError = class extends Error {
   constructor(platform, arch) {
@@ -60943,13 +61408,13 @@ async function ensureFrpcBinary(opts) {
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path50.default.join(opts.dataDir, "bin");
+  const binDir = import_node_path51.default.join(opts.dataDir, "bin");
   import_node_fs41.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path50.default.join(binDir, "frpc");
+  const stableBin = import_node_path51.default.join(binDir, "frpc");
   if (import_node_fs41.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path50.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path51.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -60975,7 +61440,7 @@ function cleanupStaleArtifacts(binDir) {
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path50.default.join(binDir, name);
+      const full = import_node_path51.default.join(binDir, name);
       try {
         import_node_fs41.default.rmSync(full, { recursive: true, force: true });
       } catch {
@@ -60998,19 +61463,19 @@ async function downloadToFile(url, dest, fetchImpl) {
   }
   const out = import_node_fs41.default.createWriteStream(dest);
   const nodeStream = import_node_stream3.Readable.fromWeb(res.body);
-  await (0, import_promises11.pipeline)(nodeStream, out);
+  await (0, import_promises12.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path50.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  const work = import_node_path51.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
   import_node_fs41.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve9, reject) => {
-      const proc = (0, import_node_child_process10.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
+      const proc = (0, import_node_child_process11.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
       proc.on("error", reject);
       proc.on("exit", (code) => code === 0 ? resolve9() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path50.default.join(work, dirName, "frpc");
+    const src = import_node_path51.default.join(work, dirName, "frpc");
     if (!import_node_fs41.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
@@ -61022,10 +61487,10 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
 
 // src/tunnel/frpc-process.ts
 var import_node_fs42 = __toESM(require("fs"), 1);
-var import_node_path51 = __toESM(require("path"), 1);
-var import_node_child_process11 = require("child_process");
+var import_node_path52 = __toESM(require("path"), 1);
+var import_node_child_process12 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path51.default.join(dataDir, "frpc.pid");
+  return import_node_path52.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
@@ -61067,7 +61532,7 @@ function defaultSleep2(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path51.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path52.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -61109,7 +61574,7 @@ async function killStaleFrpc(deps) {
 async function defaultScanFrpcPidsByCmdline(tomlPath, logger) {
   if (process.platform === "win32") return [];
   return new Promise((resolve9) => {
-    const ps = (0, import_node_child_process11.spawn)("ps", ["-axo", "pid=,command="], { stdio: ["ignore", "pipe", "ignore"] });
+    const ps = (0, import_node_child_process12.spawn)("ps", ["-axo", "pid=,command="], { stdio: ["ignore", "pipe", "ignore"] });
     let buf = "";
     ps.stdout.on("data", (c) => {
       buf += c.toString();
@@ -61139,7 +61604,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path52.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path53.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -61266,8 +61731,8 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path52.default.join(this.deps.dataDir, "frpc.toml");
-      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto12.default.randomBytes(3).toString("hex")}`;
+      const tomlPath = import_node_path53.default.join(this.deps.dataDir, "frpc.toml");
+      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto13.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
         serverPort: t.frpsPort,
@@ -61278,12 +61743,12 @@ var TunnelManager = class {
         logLevel: "info"
       });
       await import_node_fs43.default.promises.writeFile(tomlPath, toml, { mode: 384 });
-      const proc = (this.deps.spawnImpl ?? import_node_child_process12.spawn)(frpcBin, ["-c", tomlPath], {
+      const proc = (this.deps.spawnImpl ?? import_node_child_process13.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logDir = import_node_path52.default.join(this.deps.dataDir, "log");
+      const logDir = import_node_path53.default.join(this.deps.dataDir, "log");
       import_node_fs43.default.mkdirSync(logDir, { recursive: true });
-      const logFilePath = import_node_path52.default.join(logDir, "frpc.log");
+      const logFilePath = import_node_path53.default.join(logDir, "frpc.log");
       const logStream = import_node_fs43.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
@@ -61366,28 +61831,28 @@ async function waitForFrpcReady(proc, timeoutMs) {
 }
 
 // src/tunnel/device-key.ts
-var import_node_os16 = __toESM(require("os"), 1);
-var import_node_path53 = __toESM(require("path"), 1);
-var import_node_crypto13 = __toESM(require("crypto"), 1);
+var import_node_os17 = __toESM(require("os"), 1);
+var import_node_path54 = __toESM(require("path"), 1);
+var import_node_crypto14 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
-  const hostname = opts.hostname ?? import_node_os16.default.hostname();
-  const uid = opts.uid ?? (typeof import_node_os16.default.userInfo === "function" ? import_node_os16.default.userInfo().uid : 0);
-  const home = opts.home ?? import_node_os16.default.homedir();
-  const defaultDataDir = import_node_path53.default.resolve(import_node_path53.default.join(home, ".clawd"));
-  const normalizedDataDir = opts.dataDir ? import_node_path53.default.resolve(opts.dataDir) : null;
+  const hostname = opts.hostname ?? import_node_os17.default.hostname();
+  const uid = opts.uid ?? (typeof import_node_os17.default.userInfo === "function" ? import_node_os17.default.userInfo().uid : 0);
+  const home = opts.home ?? import_node_os17.default.homedir();
+  const defaultDataDir = import_node_path54.default.resolve(import_node_path54.default.join(home, ".clawd"));
+  const normalizedDataDir = opts.dataDir ? import_node_path54.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
-  return import_node_crypto13.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
+  return import_node_crypto14.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
 var import_node_fs44 = __toESM(require("fs"), 1);
-var import_node_path54 = __toESM(require("path"), 1);
-var import_node_crypto14 = __toESM(require("crypto"), 1);
+var import_node_path55 = __toESM(require("path"), 1);
+var import_node_crypto15 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path54.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path55.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -61412,10 +61877,10 @@ function loadOrCreateAuthFile(opts) {
   return next;
 }
 function defaultGenerateToken() {
-  return import_node_crypto14.default.randomBytes(32).toString("base64url");
+  return import_node_crypto15.default.randomBytes(32).toString("base64url");
 }
 function defaultGenerateOwnerPrincipalId() {
-  return `owner-${import_node_crypto14.default.randomUUID()}`;
+  return `owner-${import_node_crypto15.default.randomUUID()}`;
 }
 function readAuthFile(file) {
   try {
@@ -61439,7 +61904,7 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs44.default.mkdirSync(import_node_path54.default.dirname(file), { recursive: true });
+  import_node_fs44.default.mkdirSync(import_node_path55.default.dirname(file), { recursive: true });
   import_node_fs44.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
     import_node_fs44.default.chmodSync(file, 384);
@@ -61449,11 +61914,11 @@ function writeAuthFile(file, content) {
 
 // src/owner-profile.ts
 var import_node_fs45 = __toESM(require("fs"), 1);
-var import_node_os17 = __toESM(require("os"), 1);
-var import_node_path55 = __toESM(require("path"), 1);
+var import_node_os18 = __toESM(require("os"), 1);
+var import_node_path56 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function profilePath(dataDir) {
-  return import_node_path55.default.join(dataDir, PROFILE_FILENAME);
+  return import_node_path56.default.join(dataDir, PROFILE_FILENAME);
 }
 function loadOwnerProfile(dataDir) {
   let raw;
@@ -61478,7 +61943,7 @@ function patchOwnerProfile(dataDir, patch) {
   return merged;
 }
 function loadOwnerDisplayName(dataDir) {
-  const fallback = import_node_os17.default.userInfo().username;
+  const fallback = import_node_os18.default.userInfo().username;
   const displayName = loadOwnerProfile(dataDir).displayName;
   if (typeof displayName !== "string" || displayName.length === 0) {
     if (displayName !== void 0) {
@@ -61491,12 +61956,12 @@ function loadOwnerDisplayName(dataDir) {
 
 // src/feishu-auth/owner-identity-store.ts
 var import_node_fs46 = __toESM(require("fs"), 1);
-var import_node_path56 = __toESM(require("path"), 1);
+var import_node_path57 = __toESM(require("path"), 1);
 var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
 var OwnerIdentityStore = class {
   file;
   constructor(dataDir) {
-    this.file = import_node_path56.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
+    this.file = import_node_path57.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
   }
   read() {
     let raw;
@@ -61529,7 +61994,7 @@ var OwnerIdentityStore = class {
     };
   }
   write(record3) {
-    import_node_fs46.default.mkdirSync(import_node_path56.default.dirname(this.file), { recursive: true });
+    import_node_fs46.default.mkdirSync(import_node_path57.default.dirname(this.file), { recursive: true });
     import_node_fs46.default.writeFileSync(this.file, JSON.stringify(record3, null, 2), { mode: 384 });
     try {
       import_node_fs46.default.chmodSync(this.file, 384);
@@ -61547,7 +62012,7 @@ var OwnerIdentityStore = class {
 };
 
 // src/feishu-auth/login-flow.ts
-var import_node_crypto15 = __toESM(require("crypto"), 1);
+var import_node_crypto16 = __toESM(require("crypto"), 1);
 var STATE_TTL_MS = 5 * 60 * 1e3;
 var LoginFlow = class {
   constructor(deps) {
@@ -61556,7 +62021,7 @@ var LoginFlow = class {
   deps;
   pendingStates = /* @__PURE__ */ new Map();
   start() {
-    const state = import_node_crypto15.default.randomBytes(16).toString("base64url");
+    const state = import_node_crypto16.default.randomBytes(16).toString("base64url");
     const now = (this.deps.now ?? Date.now)();
     this.pendingStates.set(state, now);
     this.gcExpired(now);
@@ -61675,9 +62140,9 @@ var CentralClientError = class extends Error {
   code;
   cause;
 };
-async function centralRequest(opts, path98, init) {
+async function centralRequest(opts, path99, init) {
   const f = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}${path98}`;
+  const url = `${opts.api.replace(/\/+$/, "")}${path99}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
   let res;
@@ -62065,7 +62530,7 @@ function buildDeviceHandlers(deps) {
 }
 
 // src/feishu-auth/verify-token.ts
-var crypto11 = __toESM(require("crypto"), 1);
+var crypto12 = __toESM(require("crypto"), 1);
 var CONNECT_TOKEN_PREFIX = "clawdtk1";
 function verifyConnectToken(args) {
   const now = args.nowSeconds ?? Math.floor(Date.now() / 1e3);
@@ -62077,7 +62542,7 @@ function verifyConnectToken(args) {
   const data = `${prefix}.${payloadB64}`;
   let signatureValid = false;
   try {
-    signatureValid = crypto11.verify(
+    signatureValid = crypto12.verify(
       null,
       Buffer.from(data, "utf8"),
       args.publicKeyPem,
@@ -62114,8 +62579,8 @@ function verifyConnectToken(args) {
 }
 
 // src/feishu-auth/server-key.ts
-var fs65 = __toESM(require("fs"), 1);
-var path69 = __toESM(require("path"), 1);
+var fs66 = __toESM(require("fs"), 1);
+var path70 = __toESM(require("path"), 1);
 var FILE_NAME2 = "server-signing-key.json";
 var ServerKeyStore = class {
   constructor(dataDir) {
@@ -62123,12 +62588,12 @@ var ServerKeyStore = class {
   }
   dataDir;
   filePath() {
-    return path69.join(this.dataDir, FILE_NAME2);
+    return path70.join(this.dataDir, FILE_NAME2);
   }
   /** 读缓存的公钥；无缓存 / 损坏 → null（调用方决定是否触发拉取） */
   read() {
     try {
-      const raw = fs65.readFileSync(this.filePath(), "utf8");
+      const raw = fs66.readFileSync(this.filePath(), "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.publicKeyPem === "string" && parsed.publicKeyPem.includes("PUBLIC KEY")) {
         return parsed.publicKeyPem;
@@ -62143,12 +62608,12 @@ var ServerKeyStore = class {
       publicKeyPem,
       fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    fs65.mkdirSync(this.dataDir, { recursive: true });
-    fs65.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
+    fs66.mkdirSync(this.dataDir, { recursive: true });
+    fs66.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
   }
   clear() {
     try {
-      fs65.unlinkSync(this.filePath());
+      fs66.unlinkSync(this.filePath());
     } catch {
     }
   }
@@ -62158,16 +62623,16 @@ var ServerKeyStore = class {
 init_protocol();
 
 // src/handlers/index.ts
-var import_node_path72 = __toESM(require("path"), 1);
+var import_node_path73 = __toESM(require("path"), 1);
 
 // src/handlers/session.ts
 init_protocol();
 
 // src/session/fork.ts
 var import_node_fs47 = __toESM(require("fs"), 1);
-var import_node_os18 = __toESM(require("os"), 1);
-var import_node_path57 = __toESM(require("path"), 1);
-var import_node_crypto16 = require("crypto");
+var import_node_os19 = __toESM(require("os"), 1);
+var import_node_path58 = __toESM(require("path"), 1);
+var import_node_crypto17 = require("crypto");
 init_claude_history();
 function readJsonlEntries(file) {
   const raw = import_node_fs47.default.readFileSync(file, "utf8");
@@ -62183,19 +62648,19 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path57.default.join(import_node_os18.default.homedir(), ".claude");
-  let projectDir = import_node_path57.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  let sourceFile = import_node_path57.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  const baseDir = input.baseDir ?? import_node_path58.default.join(import_node_os19.default.homedir(), ".claude");
+  let projectDir = import_node_path58.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  let sourceFile = import_node_path58.default.join(projectDir, `${input.toolSessionId}.jsonl`);
   if (!import_node_fs47.default.existsSync(sourceFile)) {
     const found = findTranscriptByToolSessionId(
-      import_node_path57.default.join(baseDir, "projects"),
+      import_node_path58.default.join(baseDir, "projects"),
       input.toolSessionId
     );
     if (!found) {
       throw new Error(`fork: source transcript not found: ${sourceFile}`);
     }
     sourceFile = found;
-    projectDir = import_node_path57.default.dirname(found);
+    projectDir = import_node_path58.default.dirname(found);
   }
   const entries = readJsonlEntries(sourceFile);
   const mainEntries = entries.filter((e) => e.isSidechain !== true);
@@ -62204,7 +62669,7 @@ function forkSession(input) {
     throw new Error(`fork: messageUuid not found in transcript: ${input.messageUuid}`);
   }
   const sliced = mainEntries.slice(0, targetIdx + 1);
-  const forkedToolSessionId = (0, import_node_crypto16.randomUUID)();
+  const forkedToolSessionId = (0, import_node_crypto17.randomUUID)();
   let parentUuid = null;
   const forkedLines = [];
   for (const entry of sliced) {
@@ -62224,8 +62689,8 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const outDir = input.targetCwd ? import_node_path57.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
-  const forkedFilePath = import_node_path57.default.join(outDir, `${forkedToolSessionId}.jsonl`);
+  const outDir = input.targetCwd ? import_node_path58.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
+  const forkedFilePath = import_node_path58.default.join(outDir, `${forkedToolSessionId}.jsonl`);
   import_node_fs47.default.mkdirSync(outDir, { recursive: true });
   import_node_fs47.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
@@ -62233,18 +62698,18 @@ function forkSession(input) {
 
 // src/session/external-scan.ts
 var import_node_fs48 = __toESM(require("fs"), 1);
-var import_promises12 = __toESM(require("fs/promises"), 1);
-var import_node_os19 = __toESM(require("os"), 1);
-var import_node_path58 = __toESM(require("path"), 1);
+var import_promises13 = __toESM(require("fs/promises"), 1);
+var import_node_os20 = __toESM(require("os"), 1);
+var import_node_path59 = __toESM(require("path"), 1);
 var import_node_module = require("module");
-var import_node_child_process13 = require("child_process");
+var import_node_child_process14 = require("child_process");
 var import_meta5 = {};
 function defaultRoots() {
-  const home = import_node_os19.default.homedir();
+  const home = import_node_os20.default.homedir();
   return {
-    claudeProjectsDir: import_node_path58.default.join(home, ".claude", "projects"),
-    codexDir: import_node_path58.default.join(home, ".codex"),
-    clawdDir: import_node_path58.default.join(home, ".clawd")
+    claudeProjectsDir: import_node_path59.default.join(home, ".claude", "projects"),
+    codexDir: import_node_path59.default.join(home, ".codex"),
+    clawdDir: import_node_path59.default.join(home, ".clawd")
   };
 }
 function width(s) {
@@ -62272,7 +62737,7 @@ function toMs(v2) {
 async function* jsonLines(file) {
   let raw;
   try {
-    raw = await import_promises12.default.readFile(file, "utf8");
+    raw = await import_promises13.default.readFile(file, "utf8");
   } catch {
     return;
   }
@@ -62312,13 +62777,13 @@ async function scanClaude(roots) {
     if (!d.isDirectory()) continue;
     let files;
     try {
-      files = import_node_fs48.default.readdirSync(import_node_path58.default.join(roots.claudeProjectsDir, d.name));
+      files = import_node_fs48.default.readdirSync(import_node_path59.default.join(roots.claudeProjectsDir, d.name));
     } catch {
       continue;
     }
     for (const name of files) {
       if (!name.endsWith(".jsonl")) continue;
-      const file = import_node_path58.default.join(roots.claudeProjectsDir, d.name, name);
+      const file = import_node_path59.default.join(roots.claudeProjectsDir, d.name, name);
       let st;
       try {
         st = import_node_fs48.default.statSync(file);
@@ -62405,14 +62870,14 @@ function readCodexThreads(db) {
   } catch {
   }
   try {
-    const info = (0, import_node_child_process13.spawnSync)("sqlite3", [db, "PRAGMA table_info(threads);"], { encoding: "utf8" });
+    const info = (0, import_node_child_process14.spawnSync)("sqlite3", [db, "PRAGMA table_info(threads);"], { encoding: "utf8" });
     if (info.status !== 0) return null;
     const have = new Set(
       info.stdout.split("\n").map((l) => l.split("|")[1]).filter(Boolean)
     );
     if (!["id", "cwd", "updated_at", "thread_source"].every((c) => have.has(c))) return null;
     const sel = COLS.map((c) => have.has(c) ? c : `NULL AS ${c}`).join(", ");
-    const res = (0, import_node_child_process13.spawnSync)("sqlite3", ["-json", db, `SELECT ${sel} FROM threads;`], {
+    const res = (0, import_node_child_process14.spawnSync)("sqlite3", ["-json", db, `SELECT ${sel} FROM threads;`], {
       encoding: "utf8",
       maxBuffer: 64 * 1024 * 1024
     });
@@ -62448,7 +62913,7 @@ async function codexFromRows(rows) {
 async function scanCodex(roots) {
   let dbs = [];
   try {
-    dbs = import_node_fs48.default.readdirSync(roots.codexDir).filter((n) => /^state_.*\.sqlite$/.test(n)).sort().map((n) => import_node_path58.default.join(roots.codexDir, n));
+    dbs = import_node_fs48.default.readdirSync(roots.codexDir).filter((n) => /^state_.*\.sqlite$/.test(n)).sort().map((n) => import_node_path59.default.join(roots.codexDir, n));
   } catch {
   }
   if (!dbs.length) return [];
@@ -62457,14 +62922,14 @@ async function scanCodex(roots) {
 }
 async function scanExternalSessions(rootsIn) {
   const roots = { ...defaultRoots(), ...rootsIn };
-  const personaRoot = import_node_path58.default.join(roots.clawdDir, "personas");
+  const personaRoot = import_node_path59.default.join(roots.clawdDir, "personas");
   const all = [...await scanClaude(roots), ...await scanCodex(roots)];
   const out = [];
   for (const c of all) {
     if (c.skip) continue;
     if (c.turns < 1) continue;
     if (!c.cwd || !isDir2(c.cwd)) continue;
-    if (c.cwd === roots.clawdDir || c.cwd === personaRoot || c.cwd.startsWith(personaRoot + import_node_path58.default.sep) || c.cwd.startsWith(roots.clawdDir + import_node_path58.default.sep)) {
+    if (c.cwd === roots.clawdDir || c.cwd === personaRoot || c.cwd.startsWith(personaRoot + import_node_path59.default.sep) || c.cwd.startsWith(roots.clawdDir + import_node_path59.default.sep)) {
       continue;
     }
     out.push({
@@ -62482,12 +62947,12 @@ async function scanExternalSessions(rootsIn) {
 
 // src/session/import-ledger.ts
 var import_node_fs49 = __toESM(require("fs"), 1);
-var import_node_path59 = __toESM(require("path"), 1);
+var import_node_path60 = __toESM(require("path"), 1);
 var LEDGER_FILENAME = "session-import-ledger.json";
 function readImportLedger(dataDir) {
   try {
     const parsed = JSON.parse(
-      import_node_fs49.default.readFileSync(import_node_path59.default.join(dataDir, LEDGER_FILENAME), "utf8")
+      import_node_fs49.default.readFileSync(import_node_path60.default.join(dataDir, LEDGER_FILENAME), "utf8")
     );
     return Array.isArray(parsed) ? parsed : [];
   } catch {
@@ -62495,7 +62960,7 @@ function readImportLedger(dataDir) {
   }
 }
 function appendImportLedger(dataDir, entry) {
-  const file = import_node_path59.default.join(dataDir, LEDGER_FILENAME);
+  const file = import_node_path60.default.join(dataDir, LEDGER_FILENAME);
   const entries = readImportLedger(dataDir);
   entries.push(entry);
   import_node_fs49.default.writeFileSync(file, JSON.stringify(entries, null, 2), { encoding: "utf8", mode: 384 });
@@ -62503,7 +62968,7 @@ function appendImportLedger(dataDir, entry) {
 
 // src/tools/transcript-search.ts
 var import_node_fs50 = __toESM(require("fs"), 1);
-var import_node_path60 = __toESM(require("path"), 1);
+var import_node_path61 = __toESM(require("path"), 1);
 var SNIPPET_PAD = 60;
 var INJECTED_ENVELOPE_RE = /^<(system-reminder|command-name|command-message|command-args|local-command-stdout|local-command-stderr|task-notification|user-prompt-submit-hook|environment_context|user_instructions)\b/;
 var CODEX_WRAPPER_RE = /<(related-dir|environment_context|user_instructions)>[\s\S]*?<\/\1>/g;
@@ -62596,7 +63061,7 @@ function createCodexRolloutLocator(roots) {
       return;
     }
     for (const entry of entries) {
-      const full = import_node_path60.default.join(dir, entry.name);
+      const full = import_node_path61.default.join(dir, entry.name);
       if (entry.isDirectory()) {
         walk2(full, into);
         continue;
@@ -62616,16 +63081,16 @@ function createCodexRolloutLocator(roots) {
 
 // src/handlers/session.ts
 init_protocol();
-var import_node_os20 = __toESM(require("os"), 1);
-var import_node_path61 = __toESM(require("path"), 1);
+var import_node_os21 = __toESM(require("os"), 1);
+var import_node_path62 = __toESM(require("path"), 1);
 function canReadSearchHit(ctx, file) {
   if (!ctx || ctx.principal.kind === "owner") return true;
   return canAccessPersona(ctx.grants, file.ownerPersonaId, "read") && file.creatorPrincipalId === ctx.principal.id;
 }
 var DEFAULT_SEARCH_LIMIT = 9;
 function codexRolloutRoots(dataDir) {
-  const roots = [import_node_path61.default.join(import_node_os20.default.homedir(), ".codex", "sessions")];
-  if (dataDir) roots.push(import_node_path61.default.join(dataDir, "codex-home", "sessions"));
+  const roots = [import_node_path62.default.join(import_node_os21.default.homedir(), ".codex", "sessions")];
+  if (dataDir) roots.push(import_node_path62.default.join(dataDir, "codex-home", "sessions"));
   return roots;
 }
 function buildSessionHandlers(deps) {
@@ -63174,7 +63639,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path76 = __toESM(require("path"), 1);
+var path77 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -63192,7 +63657,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path75 = __toESM(require("path"), 1);
+var path76 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -63205,42 +63670,42 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read", userWorkDir) {
-  const target = path75.resolve(absPath);
+  const target = path76.resolve(absPath);
   if (userWorkDir) {
-    const u = path75.resolve(userWorkDir);
-    const usep = u.endsWith(path75.sep) ? "" : path75.sep;
+    const u = path76.resolve(userWorkDir);
+    const usep = u.endsWith(path76.sep) ? "" : path76.sep;
     if (target === u || target.startsWith(u + usep)) return true;
   }
-  const root = path75.resolve(personaRoot);
-  const sep4 = root.endsWith(path75.sep) ? "" : path75.sep;
+  const root = path76.resolve(personaRoot);
+  const sep4 = root.endsWith(path76.sep) ? "" : path76.sep;
   if (!target.startsWith(root + sep4)) return false;
-  const rel = path75.relative(root, target);
+  const rel = path76.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId2 = rel.split(path75.sep)[0];
+  const personaId2 = rel.split(path76.sep)[0];
   if (!personaId2) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId2);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path75.resolve(personaRoot);
-  const target = path75.resolve(absPath);
-  const sep4 = root.endsWith(path75.sep) ? "" : path75.sep;
+  const root = path76.resolve(personaRoot);
+  const target = path76.resolve(absPath);
+  const sep4 = root.endsWith(path76.sep) ? "" : path76.sep;
   if (!target.startsWith(root + sep4)) return null;
-  const rel = path75.relative(root, target);
+  const rel = path76.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path75.sep)[0];
+  const id = rel.split(path76.sep)[0];
   return id || null;
 }
 function isPathWithin(dir, absPath) {
-  const d = path75.resolve(dir);
-  const t = path75.resolve(absPath);
-  const sep4 = d.endsWith(path75.sep) ? "" : path75.sep;
+  const d = path76.resolve(dir);
+  const t = path76.resolve(absPath);
+  const sep4 = d.endsWith(path76.sep) ? "" : path76.sep;
   return t === d || t.startsWith(d + sep4);
 }
 function isPathInGuestBoundary(personaRoot, personaId2, userWorkDir, absPath) {
   if (userWorkDir && isPathWithin(userWorkDir, absPath)) return true;
-  return personaIdFromPath(path75.resolve(absPath), personaRoot) === personaId2;
+  return personaIdFromPath(path76.resolve(absPath), personaRoot) === personaId2;
 }
 
 // src/handlers/history.ts
@@ -63293,7 +63758,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path76.join(personaRoot, pid),
+          path77.join(personaRoot, pid),
           personaRoot,
           "read",
           userWorkDir
@@ -63305,7 +63770,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path76.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
+    assertGuestPath(ctx, path77.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -63353,14 +63818,14 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path76.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
+    assertGuestPath(ctx, path77.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagents");
     const subs = await historyReaderForToolSession(args.toolSessionId).listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path76.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
+    assertGuestPath(ctx, path77.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagent-read");
     const res = await historyReaderForToolSession(args.toolSessionId).readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
@@ -63370,7 +63835,7 @@ function buildHistoryHandlers(deps) {
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path76.resolve(d.cwd), personaRoot, "read", userWorkDir)
+        (d) => isGuestPathAllowed(ctx.grants, path77.resolve(d.cwd), personaRoot, "read", userWorkDir)
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -63387,17 +63852,17 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/projects.ts
-var fs70 = __toESM(require("fs"), 1);
-var os22 = __toESM(require("os"), 1);
-var path77 = __toESM(require("path"), 1);
-var import_node_child_process14 = require("child_process");
+var fs71 = __toESM(require("fs"), 1);
+var os23 = __toESM(require("os"), 1);
+var path78 = __toESM(require("path"), 1);
+var import_node_child_process15 = require("child_process");
 init_protocol();
-var DEFAULT_PROJECTS_ROOT = path77.join(os22.homedir(), "Documents", "ChatGPT");
+var DEFAULT_PROJECTS_ROOT = path78.join(os23.homedir(), "Documents", "ChatGPT");
 function allocateDir(root, name) {
-  let candidate = path77.join(root, name);
+  let candidate = path78.join(root, name);
   let n = 2;
-  while (fs70.existsSync(candidate)) {
-    candidate = path77.join(root, `${name} ${n}`);
+  while (fs71.existsSync(candidate)) {
+    candidate = path78.join(root, `${name} ${n}`);
     n += 1;
   }
   return candidate;
@@ -63425,11 +63890,11 @@ function buildProjectHandlers(deps) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, "project:reveal \u4EC5\u652F\u6301 macOS");
     }
     try {
-      if (!fs70.statSync(args.path).isDirectory()) throw new Error("not dir");
+      if (!fs71.statSync(args.path).isDirectory()) throw new Error("not dir");
     } catch {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${args.path}`);
     }
-    const r = (0, import_node_child_process14.spawnSync)("open", ["-R", args.path], { stdio: "ignore" });
+    const r = (0, import_node_child_process15.spawnSync)("open", ["-R", args.path], { stdio: "ignore" });
     if (r.status !== 0) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `open -R \u5931\u8D25: exit ${r.status}`);
     }
@@ -63441,7 +63906,7 @@ function buildProjectHandlers(deps) {
     let target;
     if (args.path) {
       try {
-        if (!fs70.statSync(args.path).isDirectory()) throw new Error("not dir");
+        if (!fs71.statSync(args.path).isDirectory()) throw new Error("not dir");
       } catch {
         throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${args.path}`);
       }
@@ -63449,15 +63914,15 @@ function buildProjectHandlers(deps) {
     } else {
       const name = args.name;
       try {
-        fs70.mkdirSync(root, { recursive: true });
+        fs71.mkdirSync(root, { recursive: true });
         target = allocateDir(root, name);
-        fs70.mkdirSync(target);
+        fs71.mkdirSync(target);
       } catch (err) {
         throw new ClawdError(ERROR_CODES.INVALID_CWD, `\u521B\u5EFA\u9879\u76EE\u76EE\u5F55\u5931\u8D25: ${String(err)}`);
       }
-      const git = (0, import_node_child_process14.spawnSync)("git", ["init"], { cwd: target, stdio: "ignore" });
+      const git = (0, import_node_child_process15.spawnSync)("git", ["init"], { cwd: target, stdio: "ignore" });
       if (git.status !== 0) {
-        fs70.rmSync(target, { recursive: true, force: true });
+        fs71.rmSync(target, { recursive: true, force: true });
         throw new ClawdError(
           ERROR_CODES.INVALID_CWD,
           `git init \u5931\u8D25\uFF08${git.error ? String(git.error) : `exit ${git.status}`}\uFF09: ${target}`
@@ -63482,8 +63947,8 @@ function buildProjectHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path78 = __toESM(require("path"), 1);
-var os23 = __toESM(require("os"), 1);
+var path79 = __toESM(require("path"), 1);
+var os24 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
 function buildEnabledPluginNames(personaManager, personaId2) {
@@ -63523,23 +63988,23 @@ function buildWorkspaceHandlers(deps) {
   const list = async (frame, _client, ctx) => {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
-    const fallbackCwd = isGuest && personaRoot ? personaRoot : os23.homedir();
-    const resolvedCwd = path78.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path78.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const fallbackCwd = isGuest && personaRoot ? personaRoot : os24.homedir();
+    const resolvedCwd = path79.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path79.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list", usersRoot);
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path78.isAbsolute(args.path) ? path78.resolve(args.path) : path78.resolve(args.cwd, args.path);
+    const target = path79.isAbsolute(args.path) ? path79.resolve(args.path) : path79.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read", usersRoot);
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path78.resolve(args.cwd);
+    const cwdAbs = path79.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list", usersRoot);
     const list2 = await getSkillsForTool(args.tool ?? "claude", cwdAbs);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -63551,7 +64016,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path78.resolve(args.cwd);
+    const cwdAbs = path79.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list", usersRoot);
     if (args.tool === "codex") {
       return { response: { type: "agents:list", agents: [] } };
@@ -63573,18 +64038,18 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path80 = __toESM(require("path"), 1);
+var path81 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
-var import_node_child_process15 = require("child_process");
+var import_node_child_process16 = require("child_process");
 var import_node_fs51 = __toESM(require("fs"), 1);
-var import_node_path62 = __toESM(require("path"), 1);
+var import_node_path63 = __toESM(require("path"), 1);
 var import_node_util = require("util");
-var pexec = (0, import_node_util.promisify)(import_node_child_process15.execFile);
+var pexec = (0, import_node_util.promisify)(import_node_child_process16.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path62.default.resolve(p2);
+  const resolved = import_node_path63.default.resolve(p2);
   try {
     return import_node_fs51.default.realpathSync(resolved);
   } catch {
@@ -63660,7 +64125,7 @@ async function listGitBranches(cwd) {
 function assertGuestCwd(ctx, cwd, personaRoot, method, usersRoot) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
   const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
-  if (!isGuestPathAllowed(ctx.grants, path80.resolve(cwd), personaRoot, "read", userWorkDir)) {
+  if (!isGuestPathAllowed(ctx.grants, path81.resolve(cwd), personaRoot, "read", userWorkDir)) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -64205,7 +64670,7 @@ function buildFeishuAuthHandlers(deps) {
 }
 
 // src/handlers/meta.ts
-var import_node_os21 = __toESM(require("os"), 1);
+var import_node_os22 = __toESM(require("os"), 1);
 init_protocol();
 
 // src/handlers/method-grants.ts
@@ -64508,21 +64973,21 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.464".length > 0 ? "0.2.464" : "dev";
+var version = "0.2.466".length > 0 ? "0.2.466" : "dev";
 
 // src/cli-probe/probe.ts
-var fs72 = __toESM(require("fs"), 1);
-var path81 = __toESM(require("path"), 1);
+var fs73 = __toESM(require("fs"), 1);
+var path82 = __toESM(require("path"), 1);
 var PKG_NAME = "@clawos-dev/clawd";
 var BIN_NAME = "clawd";
 var MAX_PARENT_HOPS = 5;
 function probeGlobalCli(pathEnv) {
   if (!pathEnv) return null;
-  for (const dir of pathEnv.split(path81.delimiter)) {
+  for (const dir of pathEnv.split(path82.delimiter)) {
     if (!dir) continue;
     let real;
     try {
-      real = fs72.realpathSync(path81.join(dir, BIN_NAME));
+      real = fs73.realpathSync(path82.join(dir, BIN_NAME));
     } catch {
       continue;
     }
@@ -64532,15 +64997,15 @@ function probeGlobalCli(pathEnv) {
   return null;
 }
 function readOwnPackageVersion(entryPath) {
-  let dir = path81.dirname(entryPath);
+  let dir = path82.dirname(entryPath);
   for (let i = 0; i < MAX_PARENT_HOPS; i++) {
     try {
-      const raw = fs72.readFileSync(path81.join(dir, "package.json"), "utf8");
+      const raw = fs73.readFileSync(path82.join(dir, "package.json"), "utf8");
       const pkg = JSON.parse(raw);
       if (pkg.name !== PKG_NAME) return null;
       return typeof pkg.version === "string" && pkg.version ? pkg.version : null;
     } catch {
-      const parent = path81.dirname(dir);
+      const parent = path82.dirname(dir);
       if (parent === dir) return null;
       dir = parent;
     }
@@ -64576,7 +65041,7 @@ function buildReadyFrame(deps, client) {
   return {
     version,
     protocolVersion: PROTOCOL_VERSION,
-    hostname: import_node_os21.default.hostname(),
+    hostname: import_node_os22.default.hostname(),
     os: process.platform,
     tools,
     runningSessions: info.runningSessions,
@@ -64712,7 +65177,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path63 = __toESM(require("path"), 1);
+var import_node_path64 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -64792,12 +65257,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path63.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path63.default.isAbsolute(args.relPath) ? import_node_path63.default.resolve(args.relPath) : import_node_path63.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path64.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path64.default.isAbsolute(args.relPath) ? import_node_path64.default.resolve(args.relPath) : import_node_path64.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.signUrl", "group-acl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path63.default.isAbsolute(e.relPath) ? import_node_path63.default.resolve(e.relPath) : import_node_path63.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path64.default.isAbsolute(e.relPath) ? import_node_path64.default.resolve(e.relPath) : import_node_path64.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -64822,7 +65287,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path63.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
+    assertGuestAttachmentPath(ctx, import_node_path64.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -64837,8 +65302,8 @@ function buildAttachmentHandlers(deps) {
     if (!scope) {
       throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, `session ${args.sessionId} not found`);
     }
-    const cwdAbs = import_node_path63.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
-    const candidateAbs = import_node_path63.default.isAbsolute(args.relPath) ? import_node_path63.default.resolve(args.relPath) : import_node_path63.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path64.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
+    const candidateAbs = import_node_path64.default.isAbsolute(args.relPath) ? import_node_path64.default.resolve(args.relPath) : import_node_path64.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.groupAdd", "cwd-subtree");
     const from = args.origin === "agent" ? "agent" : ctx?.principal.kind === "owner" ? "owner" : "agent";
     const size = 0;
@@ -64896,21 +65361,21 @@ function buildAttachmentHandlers(deps) {
 }
 
 // src/handlers/extension.ts
-var import_promises16 = __toESM(require("fs/promises"), 1);
-var import_node_path68 = __toESM(require("path"), 1);
+var import_promises17 = __toESM(require("fs/promises"), 1);
+var import_node_path69 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/extension/bundle-zip.ts
-var import_promises13 = __toESM(require("fs/promises"), 1);
-var import_node_path64 = __toESM(require("path"), 1);
-var import_node_crypto17 = __toESM(require("crypto"), 1);
+var import_promises14 = __toESM(require("fs/promises"), 1);
+var import_node_path65 = __toESM(require("path"), 1);
+var import_node_crypto18 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
   const zip = new import_jszip2.default();
   for (const rel of entries) {
-    const abs = import_node_path64.default.join(dir, rel);
-    const content = await import_promises13.default.readFile(abs);
+    const abs = import_node_path65.default.join(dir, rel);
+    const content = await import_promises14.default.readFile(abs);
     zip.file(rel, content, { date: FIXED_DATE });
   }
   const buffer = await zip.generateAsync({
@@ -64918,7 +65383,7 @@ async function bundleExtensionDir(dir) {
     compression: "DEFLATE",
     compressionOptions: { level: 6 }
   });
-  const sha256 = import_node_crypto17.default.createHash("sha256").update(buffer).digest("hex");
+  const sha256 = import_node_crypto18.default.createHash("sha256").update(buffer).digest("hex");
   return { buffer, sha256 };
 }
 var FIXED_DATE = /* @__PURE__ */ new Date("2020-01-01T00:00:00.000Z");
@@ -64930,8 +65395,8 @@ async function listFilesSorted(rootDir) {
   return out;
 }
 async function walk(absRoot, relPrefix, out) {
-  const dirAbs = import_node_path64.default.join(absRoot, relPrefix);
-  const entries = await import_promises13.default.readdir(dirAbs, { withFileTypes: true });
+  const dirAbs = import_node_path65.default.join(absRoot, relPrefix);
+  const entries = await import_promises14.default.readdir(dirAbs, { withFileTypes: true });
   for (const e of entries) {
     if (IGNORE_BASENAMES.has(e.name)) continue;
     const rel = relPrefix ? `${relPrefix}/${e.name}` : e.name;
@@ -64983,26 +65448,26 @@ function computePublishCheck(args) {
 }
 
 // src/extension/install-flow.ts
-var import_promises14 = __toESM(require("fs/promises"), 1);
-var import_node_path66 = __toESM(require("path"), 1);
-var import_node_os23 = __toESM(require("os"), 1);
-var import_node_crypto18 = __toESM(require("crypto"), 1);
+var import_promises15 = __toESM(require("fs/promises"), 1);
+var import_node_path67 = __toESM(require("path"), 1);
+var import_node_os24 = __toESM(require("os"), 1);
+var import_node_crypto19 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
-var import_node_os22 = __toESM(require("os"), 1);
-var import_node_path65 = __toESM(require("path"), 1);
+var import_node_os23 = __toESM(require("os"), 1);
+var import_node_path66 = __toESM(require("path"), 1);
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path65.default.join(import_node_os22.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path66.default.join(import_node_os23.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
-  return import_node_path65.default.join(clawdHomeRoot(override), "extensions");
+  return import_node_path66.default.join(clawdHomeRoot(override), "extensions");
 }
 function publishedChannelsFile(override) {
-  return import_node_path65.default.join(clawdHomeRoot(override), "extensions-published.json");
+  return import_node_path66.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
 function bundleCacheRoot(override) {
-  return import_node_path65.default.join(clawdHomeRoot(override), "extension-bundles");
+  return import_node_path66.default.join(clawdHomeRoot(override), "extension-bundles");
 }
 
 // src/extension/install-flow.ts
@@ -65015,7 +65480,7 @@ var InstallError = class extends Error {
 };
 async function installFromChannel(args, deps) {
   const { channelRef, snapshotHash, bundleZip } = args;
-  const computed = import_node_crypto18.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto19.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new InstallError(
       "HASH_MISMATCH",
@@ -65029,7 +65494,7 @@ async function installFromChannel(args, deps) {
     throw new InstallError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path66.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path67.default.isAbsolute(name)) {
       throw new InstallError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -65061,10 +65526,10 @@ async function installFromChannel(args, deps) {
     );
   }
   const localExtId = namespacedExtId(ownerSlug, channelRef.ownerPrincipalId);
-  const destDir = import_node_path66.default.join(deps.extensionsRoot, localExtId);
+  const destDir = import_node_path67.default.join(deps.extensionsRoot, localExtId);
   let destExists = false;
   try {
-    await import_promises14.default.access(destDir);
+    await import_promises15.default.access(destDir);
     destExists = true;
   } catch {
   }
@@ -65074,28 +65539,28 @@ async function installFromChannel(args, deps) {
       `extension ${localExtId} already installed locally (from owner ${channelRef.ownerPrincipalId})`
     );
   }
-  const stage = await import_promises14.default.mkdtemp(
-    import_node_path66.default.join(import_node_os23.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+  const stage = await import_promises15.default.mkdtemp(
+    import_node_path67.default.join(import_node_os24.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path66.default.join(stage, name);
+      const dest = import_node_path67.default.join(stage, name);
       if (entry.dir) {
-        await import_promises14.default.mkdir(dest, { recursive: true });
+        await import_promises15.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises14.default.mkdir(import_node_path66.default.dirname(dest), { recursive: true });
+      await import_promises15.default.mkdir(import_node_path67.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
-        await import_promises14.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
+        await import_promises15.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
       } else {
-        await import_promises14.default.writeFile(dest, await entry.async("nodebuffer"));
+        await import_promises15.default.writeFile(dest, await entry.async("nodebuffer"));
       }
     }
-    await import_promises14.default.mkdir(deps.extensionsRoot, { recursive: true });
-    await import_promises14.default.rename(stage, destDir);
+    await import_promises15.default.mkdir(deps.extensionsRoot, { recursive: true });
+    await import_promises15.default.rename(stage, destDir);
   } catch (e) {
-    await import_promises14.default.rm(stage, { recursive: true, force: true }).catch(() => {
+    await import_promises15.default.rm(stage, { recursive: true, force: true }).catch(() => {
     });
     throw e;
   }
@@ -65104,10 +65569,10 @@ async function installFromChannel(args, deps) {
 }
 
 // src/extension/update-flow.ts
-var import_promises15 = __toESM(require("fs/promises"), 1);
-var import_node_path67 = __toESM(require("path"), 1);
-var import_node_os24 = __toESM(require("os"), 1);
-var import_node_crypto19 = __toESM(require("crypto"), 1);
+var import_promises16 = __toESM(require("fs/promises"), 1);
+var import_node_path68 = __toESM(require("path"), 1);
+var import_node_os25 = __toESM(require("os"), 1);
+var import_node_crypto20 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
 var UpdateError = class extends Error {
   constructor(code, message) {
@@ -65122,11 +65587,11 @@ async function updateFromChannel(args, deps) {
     channelRef.extId,
     channelRef.ownerPrincipalId
   );
-  const liveDir = import_node_path67.default.join(deps.extensionsRoot, localExtId);
+  const liveDir = import_node_path68.default.join(deps.extensionsRoot, localExtId);
   const prevDir = `${liveDir}.prev`;
   let existingVersion;
   try {
-    const raw = await import_promises15.default.readFile(import_node_path67.default.join(liveDir, "manifest.json"), "utf8");
+    const raw = await import_promises16.default.readFile(import_node_path68.default.join(liveDir, "manifest.json"), "utf8");
     const parsed2 = ExtensionManifestSchema.safeParse(JSON.parse(raw));
     if (!parsed2.success) {
       throw new UpdateError(
@@ -65145,7 +65610,7 @@ async function updateFromChannel(args, deps) {
     if (e instanceof UpdateError) throw e;
     throw e;
   }
-  const computed = import_node_crypto19.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto20.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new UpdateError(
       "HASH_MISMATCH",
@@ -65159,7 +65624,7 @@ async function updateFromChannel(args, deps) {
     throw new UpdateError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path67.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path68.default.isAbsolute(name)) {
       throw new UpdateError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -65191,31 +65656,31 @@ async function updateFromChannel(args, deps) {
     );
   }
   await deps.runtime.close(localExtId);
-  await import_promises15.default.rm(prevDir, { recursive: true, force: true });
-  await import_promises15.default.rename(liveDir, prevDir);
-  const stage = await import_promises15.default.mkdtemp(
-    import_node_path67.default.join(import_node_os24.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+  await import_promises16.default.rm(prevDir, { recursive: true, force: true });
+  await import_promises16.default.rename(liveDir, prevDir);
+  const stage = await import_promises16.default.mkdtemp(
+    import_node_path68.default.join(import_node_os25.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path67.default.join(stage, name);
+      const dest = import_node_path68.default.join(stage, name);
       if (entry.dir) {
-        await import_promises15.default.mkdir(dest, { recursive: true });
+        await import_promises16.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises15.default.mkdir(import_node_path67.default.dirname(dest), { recursive: true });
+      await import_promises16.default.mkdir(import_node_path68.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
-        await import_promises15.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
+        await import_promises16.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
       } else {
-        await import_promises15.default.writeFile(dest, await entry.async("nodebuffer"));
+        await import_promises16.default.writeFile(dest, await entry.async("nodebuffer"));
       }
     }
-    await import_promises15.default.rename(stage, liveDir);
+    await import_promises16.default.rename(stage, liveDir);
   } catch (e) {
-    await import_promises15.default.rm(stage, { recursive: true, force: true }).catch(() => {
+    await import_promises16.default.rm(stage, { recursive: true, force: true }).catch(() => {
     });
-    await import_promises15.default.rename(prevDir, liveDir).catch(() => {
+    await import_promises16.default.rename(prevDir, liveDir).catch(() => {
     });
     await deps.runtime.open(localExtId).catch(() => {
     });
@@ -65237,7 +65702,7 @@ async function updateFromChannel(args, deps) {
       reason: e.message
     };
   }
-  await import_promises15.default.rm(prevDir, { recursive: true, force: true });
+  await import_promises16.default.rm(prevDir, { recursive: true, force: true });
   return {
     kind: "updated",
     extId: localExtId,
@@ -65245,9 +65710,9 @@ async function updateFromChannel(args, deps) {
   };
 }
 async function rollback(deps, localExtId, liveDir, prevDir) {
-  await import_promises15.default.rm(liveDir, { recursive: true, force: true }).catch(() => {
+  await import_promises16.default.rm(liveDir, { recursive: true, force: true }).catch(() => {
   });
-  await import_promises15.default.rename(prevDir, liveDir).catch(() => {
+  await import_promises16.default.rename(prevDir, liveDir).catch(() => {
   });
   await deps.runtime.open(localExtId).catch(() => {
   });
@@ -65270,18 +65735,18 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
       );
     }
   }
-  const manifestPath = import_node_path68.default.join(root, extId, "manifest.json");
+  const manifestPath = import_node_path69.default.join(root, extId, "manifest.json");
   const manifest = await readManifest(root, extId);
   const next = { ...manifest, version: newVersion };
   const tmp = `${manifestPath}.tmp`;
-  await import_promises16.default.writeFile(tmp, JSON.stringify(next, null, 2));
-  await import_promises16.default.rename(tmp, manifestPath);
+  await import_promises17.default.writeFile(tmp, JSON.stringify(next, null, 2));
+  await import_promises17.default.rename(tmp, manifestPath);
 }
 async function readManifest(root, extId) {
-  const file = import_node_path68.default.join(root, extId, "manifest.json");
+  const file = import_node_path69.default.join(root, extId, "manifest.json");
   let raw;
   try {
-    raw = await import_promises16.default.readFile(file, "utf8");
+    raw = await import_promises17.default.readFile(file, "utf8");
   } catch (e) {
     if (e.code === "ENOENT") {
       throw new ClawdError(ERROR_CODES.INVALID_PARAM, `extension ${extId} not installed`);
@@ -65362,7 +65827,7 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256, buffer } = await bundleExtensionDir(import_node_path68.default.join(deps.root, extId));
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path69.default.join(deps.root, extId));
     return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
@@ -65537,7 +66002,7 @@ function buildExtensionHandlers(deps) {
 }
 
 // src/app-builder/kill-port.ts
-var import_node_child_process16 = require("child_process");
+var import_node_child_process17 = require("child_process");
 async function killPortOccupants(port, ownedPids, logger) {
   let pids;
   try {
@@ -65579,7 +66044,7 @@ async function killPortOccupants(port, ownedPids, logger) {
 }
 function listPidsOnPort(port) {
   return new Promise((resolve9, reject) => {
-    (0, import_node_child_process16.execFile)(
+    (0, import_node_child_process17.execFile)(
       "lsof",
       ["-ti", `:${port}`],
       { timeout: 3e3 },
@@ -65605,7 +66070,7 @@ var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
 
 // src/handlers/app-builder.ts
 init_protocol();
-var import_node_path69 = require("path");
+var import_node_path70 = require("path");
 var import_node_fs52 = require("fs");
 var DEFAULT_TEMPLATE = "nestjs-react";
 var DEV_SERVER_READY_TIMEOUT_MS = 3e4;
@@ -65752,13 +66217,13 @@ function buildAppBuilderHandlers(deps) {
       const created = await deps.createProjectOnDisk({
         store: userStore,
         name: f.name,
-        templateSrcDir: (0, import_node_path69.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE),
-        scaffoldScript: (0, import_node_path69.join)(deps.deployKitRoot, "scripts", "new-extension.sh"),
+        templateSrcDir: (0, import_node_path70.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE),
+        scaffoldScript: (0, import_node_path70.join)(deps.deployKitRoot, "scripts", "new-extension.sh"),
         reservedPorts,
         // 凭据只进 scaffold 子进程的 env，且**只给这个 persona 的 kit 模板声明要的那几个变量**
         // （M1b Step 5）。整表塞进去粒度只到「进程」——那会把 service-role key 交给一个用不到
         // 它的脚本。new-extension.sh 用它把模板的 `${VAR}` 渲成项目可跑的 server/.env。
-        extraEnv: secretsForKit(deps.readSecrets?.(), (0, import_node_path69.join)(personaRoot, "extension-kit")),
+        extraEnv: secretsForKit(deps.readSecrets?.(), (0, import_node_path70.join)(personaRoot, "extension-kit")),
         ...deps.logger ? { logger: deps.logger } : {}
       });
       project = created.project;
@@ -65957,7 +66422,7 @@ function buildAppBuilderHandlers(deps) {
       await userStore.clearPublishJob(args.name);
     }
     const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(boundSession.ownerPersonaId ?? "") : deps.personaRoot;
-    const scriptPath = (0, import_node_path69.join)(deps.deployKitRoot, "scripts", "publish.sh");
+    const scriptPath = (0, import_node_path70.join)(deps.deployKitRoot, "scripts", "publish.sh");
     deps.logger?.info("app-builder.publish.start", {
       name: args.name,
       sessionId: boundSession.sessionId,
@@ -65973,7 +66438,7 @@ function buildAppBuilderHandlers(deps) {
       // 凭据只进 publish.sh 这个子进程的 env，且只给它的 kit 模板声明要的那几个变量
       // （M1b Step 5）。那个进程里跑着 `eval "$BUILD_CMD"`——项目自带的构建命令会继承这份
       // env，多给一个变量就是多交一个凭据给它。personaRoot 上面已按绑定 session 的 persona 解析。
-      extraEnv: secretsForKit(deps.readSecrets?.(), (0, import_node_path69.join)(personaRoot, "extension-kit")),
+      extraEnv: secretsForKit(deps.readSecrets?.(), (0, import_node_path70.join)(personaRoot, "extension-kit")),
       hooks: {
         // 元数据每次写盘（publishJob 起落 / prodUrl 回填）后重推一帧：UI 渲染 PublishProgress
         // 三段 checklist 依赖 project.publishJob.status==='in-flight'，而 publishJob 字段只有
@@ -66381,7 +66846,7 @@ function buildTopicHandlers(deps) {
 init_protocol();
 
 // src/channel/authority.ts
-var import_promises17 = __toESM(require("fs/promises"), 1);
+var import_promises18 = __toESM(require("fs/promises"), 1);
 init_protocol();
 var DEFAULT_AUTHORITY_RULES = [
   { id: "outbound-message", desc: "\u4EE5\u8001\u677F\u540D\u4E49\u7ED9\u5176\u4ED6\u4EBA\u53D1\u6D88\u606F\uFF08IM/\u90AE\u4EF6\uFF09", action: "ask" },
@@ -66399,7 +66864,7 @@ async function resolveAuthority(args) {
   let source;
   let raw = null;
   try {
-    raw = await import_promises17.default.readFile(args.tablePath, "utf8");
+    raw = await import_promises18.default.readFile(args.tablePath, "utf8");
   } catch (e) {
     if (e.code !== "ENOENT") {
       return askBecause(`\u6388\u6743\u8BBE\u5B9A\u8BFB\u4E0D\u51FA\u6765\uFF08${args.tablePath}\uFF09\uFF1A${e.message}`);
@@ -66579,11 +67044,11 @@ function parsePrDetailResponse(json, repoRef) {
 // src/handlers/github.ts
 var HOSTNAME = "github.com";
 function buildGithubHandlers(deps) {
-  const { gh } = deps;
+  const { gh: gh2 } = deps;
   return {
     "github:status": async () => {
       try {
-        await gh.run(["--version"]);
+        await gh2.run(["--version"]);
       } catch (err) {
         if (err instanceof GhError && err.kind === "gh-missing") {
           return { response: { installed: false, authenticated: false } };
@@ -66591,17 +67056,17 @@ function buildGithubHandlers(deps) {
         throw err;
       }
       try {
-        await gh.run(["auth", "status", "--active", "--hostname", HOSTNAME]);
+        await gh2.run(["auth", "status", "--active", "--hostname", HOSTNAME]);
       } catch {
         return { response: { installed: true, authenticated: false } };
       }
-      const login = (await gh.run(["api", "user", "--jq", ".login"])).trim();
+      const login = (await gh2.run(["api", "user", "--jq", ".login"])).trim();
       const response = { installed: true, authenticated: true, login };
       return { response };
     },
     "github:prList": async (frame) => {
       const { role } = GithubPrListArgs.parse(frame);
-      const stdout = await gh.run([
+      const stdout = await gh2.run([
         "api",
         "graphql",
         "-f",
@@ -66617,7 +67082,7 @@ function buildGithubHandlers(deps) {
     },
     "github:prDetail": async (frame) => {
       const { owner: owner2, repo: repo2, number: number2 } = GithubPrDetailArgs.parse(frame);
-      const stdout = await gh.run([
+      const stdout = await gh2.run([
         "api",
         "graphql",
         "-f",
@@ -66635,7 +67100,7 @@ function buildGithubHandlers(deps) {
     "github:prMerge": async (frame) => {
       const { owner: owner2, repo: repo2, number: number2, expectedHeadSha } = GithubPrMergeArgs.parse(frame);
       try {
-        await gh.run([
+        await gh2.run([
           "pr",
           "merge",
           String(number2),
@@ -66655,19 +67120,19 @@ function buildGithubHandlers(deps) {
     },
     "github:prComment": async (frame) => {
       const { owner: owner2, repo: repo2, number: number2, body } = GithubPrCommentArgs.parse(frame);
-      await gh.run(["api", `repos/${owner2}/${repo2}/issues/${number2}/comments`, "-f", `body=${body}`]);
+      await gh2.run(["api", `repos/${owner2}/${repo2}/issues/${number2}/comments`, "-f", `body=${body}`]);
       return { response: { posted: true } };
     },
     "github:prSetReady": async (frame) => {
       const { owner: owner2, repo: repo2, number: number2, ready } = GithubPrSetReadyArgs.parse(frame);
       const args = ["pr", "ready", String(number2), "--repo", `${owner2}/${repo2}`];
       if (!ready) args.push("--undo");
-      await gh.run(args);
+      await gh2.run(args);
       return { response: { updated: true } };
     },
     "github:collaborators": async (frame) => {
       const { owner: owner2, repo: repo2 } = GithubCollaboratorsArgs.parse(frame);
-      const stdout = await gh.run(["api", `repos/${owner2}/${repo2}/collaborators?per_page=100`]);
+      const stdout = await gh2.run(["api", `repos/${owner2}/${repo2}/collaborators?per_page=100`]);
       const arr = JSON.parse(stdout);
       const logins = arr.map((c) => String(c.login ?? "")).filter((s) => s !== "");
       return { response: { logins } };
@@ -66676,7 +67141,7 @@ function buildGithubHandlers(deps) {
       const { owner: owner2, repo: repo2, number: number2, reviewers } = GithubPrRequestReviewersArgs.parse(frame);
       const args = ["api", "-X", "POST", `repos/${owner2}/${repo2}/pulls/${number2}/requested_reviewers`];
       for (const r of reviewers) args.push("-f", `reviewers[]=${r}`);
-      await gh.run(args);
+      await gh2.run(args);
       return { response: { requested: true } };
     }
   };
@@ -66708,12 +67173,12 @@ function buildVisitorHandlers(deps) {
 }
 
 // src/extension/registry.ts
-var import_promises18 = __toESM(require("fs/promises"), 1);
-var import_node_path70 = __toESM(require("path"), 1);
+var import_promises19 = __toESM(require("fs/promises"), 1);
+var import_node_path71 = __toESM(require("path"), 1);
 async function loadAll(root) {
   let entries;
   try {
-    entries = await import_promises18.default.readdir(root, { withFileTypes: true });
+    entries = await import_promises19.default.readdir(root, { withFileTypes: true });
   } catch (e) {
     if (e.code === "ENOENT") return [];
     throw e;
@@ -66722,16 +67187,16 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path70.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path71.default.join(root, ent.name), ent.name));
   }
   records.sort((a, b2) => a.extId < b2.extId ? -1 : a.extId > b2.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path70.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path71.default.join(dir, "manifest.json");
   let raw;
   try {
-    raw = await import_promises18.default.readFile(manifestPath, "utf8");
+    raw = await import_promises19.default.readFile(manifestPath, "utf8");
   } catch {
     return {
       extId: dirName,
@@ -66772,8 +67237,8 @@ async function loadOne(dir, dirName) {
 }
 
 // src/extension/uninstall.ts
-var import_promises19 = __toESM(require("fs/promises"), 1);
-var import_node_path71 = __toESM(require("path"), 1);
+var import_promises20 = __toESM(require("fs/promises"), 1);
+var import_node_path72 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -66782,32 +67247,32 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path71.default.join(deps.root, deps.extId);
+  const dir = import_node_path72.default.join(deps.root, deps.extId);
   try {
-    await import_promises19.default.access(dir);
+    await import_promises20.default.access(dir);
   } catch {
     throw new UninstallError("NOT_FOUND", `extension ${deps.extId} not installed`);
   }
   await deps.runtime.close(deps.extId);
-  await import_promises19.default.rm(dir, { recursive: true, force: true });
+  await import_promises20.default.rm(dir, { recursive: true, force: true });
 }
 
 // src/handlers/index.ts
-var import_node_crypto20 = require("crypto");
+var import_node_crypto21 = require("crypto");
 
 // src/handlers/peer-exec.ts
 init_protocol();
 
 // src/peer-ops/run-command.ts
-var import_node_child_process17 = require("child_process");
-var import_node_os25 = __toESM(require("os"), 1);
+var import_node_child_process18 = require("child_process");
+var import_node_os26 = __toESM(require("os"), 1);
 var DEFAULT_TIMEOUT_MS5 = 3e4;
 var MAX_TIMEOUT_MS = 3e5;
 var MAX_OUTPUT_BYTES = 1048576;
 function runCommand(command, opts = {}) {
   const timeoutMs = Math.min(opts.timeoutMs ?? DEFAULT_TIMEOUT_MS5, MAX_TIMEOUT_MS);
   return new Promise((resolve9) => {
-    const child = (0, import_node_child_process17.spawn)("bash", ["-c", command], { cwd: import_node_os25.default.homedir() });
+    const child = (0, import_node_child_process18.spawn)("bash", ["-c", command], { cwd: import_node_os26.default.homedir() });
     const out = [];
     const err = [];
     let outBytes = 0;
@@ -66949,7 +67414,7 @@ function buildMethodHandlers(deps) {
           const c = deps.contactStore.get(deviceId);
           return c ? { deviceId: c.deviceId, remoteUrl: c.remoteUrl, connectToken: c.connectToken } : null;
         },
-        genId: () => (0, import_node_crypto20.randomUUID)(),
+        genId: () => (0, import_node_crypto21.randomUUID)(),
         now: () => Date.now(),
         forwardInboxPostToPeer,
         logger: deps.logger
@@ -67018,7 +67483,7 @@ function buildMethodHandlers(deps) {
       broadcast: deps.broadcastToOwners
     }),
     ...buildMasterHandlers({
-      authorityTablePath: import_node_path72.default.join(deps.masterDataDir, "master-authority.json")
+      authorityTablePath: import_node_path73.default.join(deps.masterDataDir, "master-authority.json")
     }),
     ...buildTopicHandlers({
       topicStore: deps.topicStore,
@@ -67049,23 +67514,23 @@ function buildMethodHandlers(deps) {
 init_protocol();
 
 // src/tools/version-probe.ts
-var import_node_child_process19 = require("child_process");
+var import_node_child_process20 = require("child_process");
 init_claude();
 
 // src/tools/shell-path.ts
-var import_node_child_process18 = require("child_process");
-var import_node_os26 = __toESM(require("os"), 1);
+var import_node_child_process19 = require("child_process");
+var import_node_os27 = __toESM(require("os"), 1);
 function refreshPathFromLoginShell() {
   if (process.platform === "win32") return;
-  const shell = process.env.SHELL ?? import_node_os26.default.userInfo().shell ?? "/bin/zsh";
+  const shell = process.env.SHELL ?? import_node_os27.default.userInfo().shell ?? "/bin/zsh";
   try {
-    const out = (0, import_node_child_process18.execFileSync)(shell, ["-ilc", 'command echo -n "$PATH"'], {
+    const out = (0, import_node_child_process19.execFileSync)(shell, ["-ilc", 'command echo -n "$PATH"'], {
       encoding: "utf8",
       timeout: 3e3,
       stdio: ["ignore", "pipe", "ignore"]
     });
-    const path98 = out.trim();
-    if (path98) process.env.PATH = path98;
+    const path99 = out.trim();
+    if (path99) process.env.PATH = path99;
   } catch {
   }
 }
@@ -67076,7 +67541,7 @@ function parseVersionOutput(out) {
 }
 function execVersion(bin) {
   return new Promise((resolve9, reject) => {
-    (0, import_node_child_process19.execFile)(bin, ["--version"], { timeout: 5e3 }, (err, stdout) => {
+    (0, import_node_child_process20.execFile)(bin, ["--version"], { timeout: 5e3 }, (err, stdout) => {
       if (err) reject(err);
       else resolve9(String(stdout));
     });
@@ -67190,8 +67655,8 @@ function buildOnboardingHandlers(deps) {
 
 // src/app-builder-plugin/project-store.ts
 var import_node_fs53 = require("fs");
-var import_node_child_process20 = require("child_process");
-var import_node_path73 = require("path");
+var import_node_child_process21 = require("child_process");
+var import_node_path74 = require("path");
 init_protocol();
 var PROJECTS_DIR = "projects";
 var META_FILE = ".clawd-project.json";
@@ -67221,14 +67686,14 @@ var ProjectStore = class {
   }
   /** projects/<name>/.clawd-project.json 路径 */
   metaPath(name) {
-    return (0, import_node_path73.join)(this.projectsRoot(), name, META_FILE);
+    return (0, import_node_path74.join)(this.projectsRoot(), name, META_FILE);
   }
   /** projects/<name>/ 目录路径（cwd 用） */
   projectDir(name) {
-    return (0, import_node_path73.join)(this.projectsRoot(), name);
+    return (0, import_node_path74.join)(this.projectsRoot(), name);
   }
   projectsRoot() {
-    return (0, import_node_path73.join)(this.root, PROJECTS_DIR);
+    return (0, import_node_path74.join)(this.root, PROJECTS_DIR);
   }
   async list() {
     let entries;
@@ -67311,7 +67776,7 @@ var ProjectStore = class {
   async scaffold(name, templateSrcDir, scaffoldScriptPath, extraEnv) {
     const destDir = this.projectDir(name);
     return await new Promise((resolve9, reject) => {
-      const child = (0, import_node_child_process20.spawn)("bash", [scaffoldScriptPath, name, templateSrcDir, destDir], {
+      const child = (0, import_node_child_process21.spawn)("bash", [scaffoldScriptPath, name, templateSrcDir, destDir], {
         // extraEnv 排在 PATH **之前**：凭据表里若混进一条名叫 PATH 的条目，顶掉 PATH 会让
         // 脚本以「命令找不到」的形态崩在离现场很远的地方。
         env: { ...process.env, ...extraEnv ?? {}, PATH: process.env.PATH ?? "" },
@@ -67425,7 +67890,7 @@ var ProjectStore = class {
 };
 
 // src/app-builder/dev-server-supervisor.ts
-var import_node_child_process21 = require("child_process");
+var import_node_child_process22 = require("child_process");
 var import_node_events2 = require("events");
 var DEFAULT_READY_PATTERN = /Local:\s+https?:\/\/|Nest application successfully started|server listening on/i;
 var DevServerSupervisor = class extends import_node_events2.EventEmitter {
@@ -67462,7 +67927,7 @@ var DevServerSupervisor = class extends import_node_events2.EventEmitter {
       tunnelHost: args.tunnelHost,
       devCommand: cmd
     });
-    const child = (0, import_node_child_process21.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process22.spawn)("sh", ["-c", cmd], {
       cwd: args.cwd,
       env,
       stdio: "pipe",
@@ -67679,10 +68144,10 @@ var DevServerSupervisor = class extends import_node_events2.EventEmitter {
 };
 
 // src/app-builder-plugin/core.ts
-var import_node_child_process23 = require("child_process");
+var import_node_child_process24 = require("child_process");
 
 // src/app-builder-plugin/publish-registry.ts
-var import_node_crypto21 = require("crypto");
+var import_node_crypto22 = require("crypto");
 var PublishJobRegistry = class {
   jobs = /* @__PURE__ */ new Map();
   has(name) {
@@ -67699,7 +68164,7 @@ var PublishJobRegistry = class {
     if (this.jobs.has(args.name)) {
       throw new Error(`already publishing: ${args.name}`);
     }
-    const jobId = args.jobId ?? `job-${(0, import_node_crypto21.randomUUID)()}`;
+    const jobId = args.jobId ?? `job-${(0, import_node_crypto22.randomUUID)()}`;
     this.jobs.set(args.name, {
       jobId,
       name: args.name,
@@ -67732,9 +68197,9 @@ var PublishJobRegistry = class {
 };
 
 // src/app-builder-plugin/publish-job-runner.ts
-var import_node_child_process22 = require("child_process");
+var import_node_child_process23 = require("child_process");
 var import_node_fs54 = require("fs");
-var import_node_path74 = require("path");
+var import_node_path75 = require("path");
 
 // src/app-builder-plugin/publish-stage-parser.ts
 var STAGE_RE = /^\s*::stage::(build|deploy|verify)\s*$/;
@@ -67761,19 +68226,19 @@ function tailStderrLines(buf, n) {
 // src/app-builder-plugin/publish-job-runner.ts
 async function startPublishJob(deps, args) {
   const { registry: registry2, projectDir } = deps;
-  const spawn14 = deps.spawnImpl ?? import_node_child_process22.spawn;
+  const spawn15 = deps.spawnImpl ?? import_node_child_process23.spawn;
   if (registry2.has(args.name)) {
     return { jobId: registry2.get(args.name).jobId, status: "already-publishing" };
   }
   const projDir = projectDir(args.name);
-  const logPath = (0, import_node_path74.join)(projDir, ".publish.log");
+  const logPath = (0, import_node_path75.join)(projDir, ".publish.log");
   let logStream = null;
   try {
     logStream = (0, import_node_fs54.createWriteStream)(logPath, { flags: "w" });
   } catch {
     logStream = null;
   }
-  const child = spawn14("bash", [args.scriptPath, projDir, args.personaRoot ?? ""], {
+  const child = spawn15("bash", [args.scriptPath, projDir, args.personaRoot ?? ""], {
     cwd: projDir,
     // 宿主给的 env 覆盖在 process.env 之上：daemon 进程本身没有这些变量（它们只在这一个
     // 子进程里活着）。云上宿主不传 extraEnv，凭据本来就在容器 env 里。
@@ -68113,9 +68578,9 @@ async function recoverInterruptedPublishJobs(store, logger) {
 
 // src/app-builder-plugin/mcp-config.ts
 var import_node_fs55 = __toESM(require("fs"), 1);
-var import_node_path75 = __toESM(require("path"), 1);
+var import_node_path76 = __toESM(require("path"), 1);
 function appBuilderMcpConfigPath(dataDir) {
-  return import_node_path75.default.join(dataDir, "app-builder.mcp.json");
+  return import_node_path76.default.join(dataDir, "app-builder.mcp.json");
 }
 function writeAppBuilderMcpConfig(args) {
   const cfgPath = appBuilderMcpConfigPath(args.dataDir);
@@ -68129,8 +68594,8 @@ function writeAppBuilderMcpConfig(args) {
         env: {
           CLAWD_DAEMON_TOKEN: args.daemonToken,
           CLAWD_DAEMON_URL: args.daemonUrl,
-          CLAWD_APP_BUILDER_SCAFFOLD_SCRIPT: import_node_path75.default.join(args.deployKitScriptsDir, "new-extension.sh"),
-          CLAWD_APP_BUILDER_PUBLISH_SCRIPT: import_node_path75.default.join(args.deployKitScriptsDir, "publish.sh"),
+          CLAWD_APP_BUILDER_SCAFFOLD_SCRIPT: import_node_path76.default.join(args.deployKitScriptsDir, "new-extension.sh"),
+          CLAWD_APP_BUILDER_PUBLISH_SCRIPT: import_node_path76.default.join(args.deployKitScriptsDir, "publish.sh"),
           ...args.logPath ? { CLAWD_APP_BUILDER_LOG: args.logPath } : {}
         }
       }
@@ -68177,9 +68642,9 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 }
 
 // src/extension/runtime.ts
-var import_node_child_process24 = require("child_process");
-var import_node_path76 = __toESM(require("path"), 1);
-var import_promises20 = require("timers/promises");
+var import_node_child_process25 = require("child_process");
+var import_node_path77 = __toESM(require("path"), 1);
+var import_promises21 = require("timers/promises");
 
 // src/extension/port-allocator.ts
 var import_node_net2 = __toESM(require("net"), 1);
@@ -68279,13 +68744,13 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path76.default.join(this.root, extId);
+    const dir = import_node_path77.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
       CLAWOS_EXT_ID: extId
     };
-    const child = (0, import_node_child_process24.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process25.spawn)("sh", ["-c", cmd], {
       cwd: dir,
       env,
       stdio: ["ignore", "pipe", "pipe"],
@@ -68355,7 +68820,7 @@ ${handle.stderrTail}`
         if (res.ok) return;
       } catch {
       }
-      await (0, import_promises20.setTimeout)(this.healthzIntervalMs);
+      await (0, import_promises21.setTimeout)(this.healthzIntervalMs);
     }
     throw new RuntimeError(
       "HEALTHZ_FAILED",
@@ -68380,7 +68845,7 @@ ${handle.stderrTail}`
     };
     killGroup("SIGTERM");
     const exited = new Promise((resolve9) => child.once("exit", () => resolve9()));
-    const timed = (0, import_promises20.setTimeout)(5e3).then(() => "timeout");
+    const timed = (0, import_promises21.setTimeout)(5e3).then(() => "timeout");
     const winner = await Promise.race([exited.then(() => "exited"), timed]);
     if (winner === "timeout" && child.exitCode === null) {
       killGroup("SIGKILL");
@@ -68390,8 +68855,8 @@ ${handle.stderrTail}`
 };
 
 // src/extension/published-channels.ts
-var import_promises21 = __toESM(require("fs/promises"), 1);
-var import_node_path77 = __toESM(require("path"), 1);
+var import_promises22 = __toESM(require("fs/promises"), 1);
+var import_node_path78 = __toESM(require("path"), 1);
 init_zod();
 var PublishedChannelsError = class extends Error {
   constructor(code, message) {
@@ -68421,7 +68886,7 @@ var PublishedChannelStore = class {
     this.channels.clear();
     let raw;
     try {
-      raw = await import_promises21.default.readFile(this.filePath, "utf8");
+      raw = await import_promises22.default.readFile(this.filePath, "utf8");
     } catch (e) {
       if (e.code === "ENOENT") {
         this.loaded = true;
@@ -68490,15 +68955,15 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises21.default.mkdir(import_node_path77.default.dirname(this.filePath), { recursive: true });
-    await import_promises21.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
-    await import_promises21.default.rename(tmp, this.filePath);
+    await import_promises22.default.mkdir(import_node_path78.default.dirname(this.filePath), { recursive: true });
+    await import_promises22.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
+    await import_promises22.default.rename(tmp, this.filePath);
   }
 };
 
 // src/extension/bundle-cache.ts
-var import_promises22 = __toESM(require("fs/promises"), 1);
-var import_node_path78 = __toESM(require("path"), 1);
+var import_promises23 = __toESM(require("fs/promises"), 1);
+var import_node_path79 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -68506,17 +68971,17 @@ var BundleCache = class {
   rootDir;
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
-    await import_promises22.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path78.default.join(this.rootDir, `${snapshotHash}.zip`);
+    await import_promises23.default.mkdir(this.rootDir, { recursive: true });
+    const file = import_node_path79.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
-    await import_promises22.default.writeFile(tmp, buffer, { mode: 384 });
-    await import_promises22.default.rename(tmp, file);
+    await import_promises23.default.writeFile(tmp, buffer, { mode: 384 });
+    await import_promises23.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path78.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path79.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
-      return await import_promises22.default.readFile(file);
+      return await import_promises23.default.readFile(file);
     } catch (e) {
       if (e.code === "ENOENT") return null;
       throw e;
@@ -68524,8 +68989,8 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path78.default.join(this.rootDir, `${snapshotHash}.zip`);
-    await import_promises22.default.rm(file, { force: true });
+    const file = import_node_path79.default.join(this.rootDir, `${snapshotHash}.zip`);
+    await import_promises23.default.rm(file, { force: true });
   }
 };
 
@@ -68545,26 +69010,26 @@ async function startDaemon(config) {
     },
     source: "daemon",
     sampling: logShippingCfg.sampling,
-    homeDir: import_node_os27.default.homedir()
+    homeDir: import_node_os28.default.homedir()
   });
-  const logDir = import_node_path79.default.join(config.dataDir, "log");
+  const logDir = import_node_path80.default.join(config.dataDir, "log");
   import_node_fs56.default.mkdirSync(logDir, { recursive: true });
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path79.default.join(logDir, "clawd.log"),
+    file: import_node_path80.default.join(logDir, "clawd.log"),
     logClient
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const screenIdleProbeLogger = createFileOnlyLogger({
-    file: import_node_path79.default.join(logDir, "screen-idle-probe.log"),
+    file: import_node_path80.default.join(logDir, "screen-idle-probe.log"),
     level: "debug"
   });
   logger.info("screen-idle probe logger enabled", {
-    file: import_node_path79.default.join(logDir, "screen-idle-probe.log")
+    file: import_node_path80.default.join(logDir, "screen-idle-probe.log")
   });
   const CAP_TARGETS = [
-    import_node_path79.default.join(logDir, "clawd.log"),
-    import_node_path79.default.join(logDir, "screen-idle-probe.log")
+    import_node_path80.default.join(logDir, "clawd.log"),
+    import_node_path80.default.join(logDir, "screen-idle-probe.log")
   ];
   const LOG_CAP_MAX_BYTES = 10 * 1024 * 1024;
   const LOG_CAP_KEEP_BYTES = 5 * 1024 * 1024;
@@ -68686,8 +69151,8 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path79.default.join(config.dataDir, "personas"));
-  const usersRoot = import_node_path79.default.join(config.dataDir, "users");
+  const personaStore = new PersonaStore(import_node_path80.default.join(config.dataDir, "personas"));
+  const usersRoot = import_node_path80.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -68711,7 +69176,7 @@ async function startDaemon(config) {
   retirePersonaBuilder({ store: personaStore, logger });
   const groupFileStore = new GroupFileStore({ dataDir: config.dataDir, logger });
   const dispatchStore = createDispatchStore({
-    filePath: import_node_path79.default.join(config.dataDir, "dispatch.json"),
+    filePath: import_node_path80.default.join(config.dataDir, "dispatch.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("dispatch store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
@@ -68720,18 +69185,18 @@ async function startDaemon(config) {
   await dispatchStore.load();
   dispatchStore.markInterruptedAsFailed((/* @__PURE__ */ new Date()).toISOString());
   const channelStore = createChannelStore({
-    filePath: import_node_path79.default.join(config.dataDir, "channels.json"),
+    filePath: import_node_path80.default.join(config.dataDir, "channels.json"),
     now: () => Date.now(),
-    genId: () => `ch-${(0, import_node_crypto22.randomUUID)().slice(0, 8)}`,
+    genId: () => `ch-${(0, import_node_crypto23.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("channel store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
     })
   });
   await channelStore.load();
   const topicStore = createTopicStore({
-    filePath: import_node_path79.default.join(config.dataDir, "topics.json"),
+    filePath: import_node_path80.default.join(config.dataDir, "topics.json"),
     now: () => Date.now(),
-    genId: () => `tp-${(0, import_node_crypto22.randomUUID)().slice(0, 8)}`,
+    genId: () => `tp-${(0, import_node_crypto23.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("topic store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
     })
@@ -68739,7 +69204,7 @@ async function startDaemon(config) {
   await topicStore.load();
   let deliverPendingRef;
   const personaDispatchManager = new PersonaDispatchManager({
-    genId: () => (0, import_node_crypto22.randomUUID)(),
+    genId: () => (0, import_node_crypto23.randomUUID)(),
     store: dispatchStore,
     now: () => Date.now(),
     onCompleted: (sid) => deliverPendingRef?.(sid),
@@ -68756,28 +69221,28 @@ async function startDaemon(config) {
       });
     }
   });
-  const here = typeof __dirname === "string" ? __dirname : import_node_path79.default.dirname((0, import_node_url5.fileURLToPath)(import_meta8.url));
+  const here = typeof __dirname === "string" ? __dirname : import_node_path80.default.dirname((0, import_node_url5.fileURLToPath)(import_meta8.url));
   const mcpConfigs = [];
   const secretsBundleRoot = findSecretsBundleRoot(logger);
-  const localSecretsDir = import_node_path79.default.join(config.dataDir, LOCAL_SECRETS_DIRNAME);
+  const localSecretsDir = import_node_path80.default.join(config.dataDir, LOCAL_SECRETS_DIRNAME);
   const readSecrets = () => readSecretTable({ bundleRoot: secretsBundleRoot, overrideDir: localSecretsDir, logger });
   const resolvePersonaMcpConfig = (personaId2) => renderPersonaMcpSecrets({
     personaId: personaId2,
-    personaDir: import_node_path79.default.join(config.dataDir, "personas", personaId2),
+    personaDir: import_node_path80.default.join(config.dataDir, "personas", personaId2),
     secrets: readSecrets(),
-    outDir: import_node_path79.default.join(config.dataDir, "persona-mcp"),
+    outDir: import_node_path80.default.join(config.dataDir, "persona-mcp"),
     logger
   });
   const mcpDaemonUrl = `http://127.0.0.1:${config.port}`;
   const dispatchServerCandidates = [
-    import_node_path79.default.join(here, "dispatch", "mcp-server.cjs"),
+    import_node_path80.default.join(here, "dispatch", "mcp-server.cjs"),
     // 生产 dist/index → dist/dispatch/mcp-server.cjs
-    import_node_path79.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
+    import_node_path80.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
   const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs56.default.existsSync(p2));
   if (dispatchServerScriptPath) {
-    const dispatchLogPath = import_node_path79.default.join(logDir, "dispatch-mcp-server.log");
+    const dispatchLogPath = import_node_path80.default.join(logDir, "dispatch-mcp-server.log");
     const dispatchCfgPath = writeDispatchMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: dispatchServerScriptPath,
@@ -68797,12 +69262,12 @@ async function startDaemon(config) {
     });
   }
   const ticketServerCandidates = [
-    import_node_path79.default.join(here, "ticket", "mcp-server.cjs"),
-    import_node_path79.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
+    import_node_path80.default.join(here, "ticket", "mcp-server.cjs"),
+    import_node_path80.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
   const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs56.default.existsSync(p2));
   if (ticketServerScriptPath) {
-    const ticketLogPath = import_node_path79.default.join(logDir, "ticket-mcp-server.log");
+    const ticketLogPath = import_node_path80.default.join(logDir, "ticket-mcp-server.log");
     const ticketCfgPath = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
@@ -68824,12 +69289,12 @@ async function startDaemon(config) {
     });
   }
   const shiftServerCandidates = [
-    import_node_path79.default.join(here, "shift", "mcp-server.cjs"),
-    import_node_path79.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
+    import_node_path80.default.join(here, "shift", "mcp-server.cjs"),
+    import_node_path80.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
   const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs56.default.existsSync(p2));
   if (shiftServerScriptPath) {
-    const shiftLogPath = import_node_path79.default.join(logDir, "shift-mcp-server.log");
+    const shiftLogPath = import_node_path80.default.join(logDir, "shift-mcp-server.log");
     const shiftCfgPath = await writeShiftMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: shiftServerScriptPath,
@@ -68850,12 +69315,12 @@ async function startDaemon(config) {
     );
   }
   const inboxServerCandidates = [
-    import_node_path79.default.join(here, "inbox", "mcp-server.cjs"),
-    import_node_path79.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
+    import_node_path80.default.join(here, "inbox", "mcp-server.cjs"),
+    import_node_path80.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
   ];
   const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs56.default.existsSync(p2));
   if (inboxServerScriptPath) {
-    const inboxLogPath = import_node_path79.default.join(logDir, "inbox-mcp-server.log");
+    const inboxLogPath = import_node_path80.default.join(logDir, "inbox-mcp-server.log");
     const inboxCfgPath = await writeInboxMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: inboxServerScriptPath,
@@ -68876,8 +69341,8 @@ async function startDaemon(config) {
     );
   }
   const peerOpsServerCandidates = [
-    import_node_path79.default.join(here, "peer-ops", "mcp-server.cjs"),
-    import_node_path79.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
+    import_node_path80.default.join(here, "peer-ops", "mcp-server.cjs"),
+    import_node_path80.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
   ];
   const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs56.default.existsSync(p2));
   if (peerOpsServerScriptPath) {
@@ -68899,12 +69364,12 @@ async function startDaemon(config) {
     );
   }
   const rpcToolServerCandidates = [
-    import_node_path79.default.join(here, "rpc-tool", "mcp-server.cjs"),
-    import_node_path79.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
+    import_node_path80.default.join(here, "rpc-tool", "mcp-server.cjs"),
+    import_node_path80.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
   ];
   const rpcToolServerScriptPath = rpcToolServerCandidates.find((p2) => import_node_fs56.default.existsSync(p2));
   if (rpcToolServerScriptPath) {
-    const rpcToolLogPath = import_node_path79.default.join(logDir, "rpc-tool-mcp-server.log");
+    const rpcToolLogPath = import_node_path80.default.join(logDir, "rpc-tool-mcp-server.log");
     const rpcToolCfgPath = writeRpcToolMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: rpcToolServerScriptPath,
@@ -68925,18 +69390,18 @@ async function startDaemon(config) {
     );
   }
   const appBuilderServerCandidates = [
-    import_node_path79.default.join(here, "app-builder-plugin", "mcp-server.cjs"),
-    import_node_path79.default.join(here, "..", "dist", "app-builder-plugin", "mcp-server.cjs")
+    import_node_path80.default.join(here, "app-builder-plugin", "mcp-server.cjs"),
+    import_node_path80.default.join(here, "..", "dist", "app-builder-plugin", "mcp-server.cjs")
   ];
   const appBuilderServerScriptPath = appBuilderServerCandidates.find((p2) => import_node_fs56.default.existsSync(p2));
   if (appBuilderServerScriptPath) {
-    const appBuilderLogPath = import_node_path79.default.join(logDir, "app-builder-mcp-server.log");
+    const appBuilderLogPath = import_node_path80.default.join(logDir, "app-builder-mcp-server.log");
     const appBuilderCfgPath = writeAppBuilderMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: appBuilderServerScriptPath,
       daemonToken: resolvedAuthToken,
       daemonUrl: mcpDaemonUrl,
-      deployKitScriptsDir: import_node_path79.default.join(config.dataDir, "deploy-kit", "scripts"),
+      deployKitScriptsDir: import_node_path80.default.join(config.dataDir, "deploy-kit", "scripts"),
       logPath: appBuilderLogPath
     });
     mcpConfigs.push({ id: "app-builder", path: appBuilderCfgPath, personas: APP_BUILDER_PERSONAS });
@@ -68952,7 +69417,7 @@ async function startDaemon(config) {
     );
   }
   const shiftStore = createShiftStore({
-    filePath: import_node_path79.default.join(config.dataDir, "shift.json"),
+    filePath: import_node_path80.default.join(config.dataDir, "shift.json"),
     ownerIdProvider: () => ownerPrincipalId,
     now: () => Date.now()
   });
@@ -68974,7 +69439,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path79.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path80.default.join(config.dataDir, "personas"),
     // dispatch / shift 自动化 spawn 按 persona 绑定 tool 起 B session（codex persona 用 codex）。
     // personaRegistry 声明在 manager 之后（同作用域 const，调用时机在启动完成后，无 TDZ 风险）。
     getPersonaDefaults: (personaId2) => personaRegistry.get(personaId2),
@@ -69031,7 +69496,7 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path79.default.isAbsolute(input.relPath) ? input.relPath : import_node_path79.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path80.default.isAbsolute(input.relPath) ? input.relPath : import_node_path80.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
           size = import_node_fs56.default.statSync(absPath).size;
@@ -69064,9 +69529,9 @@ async function startDaemon(config) {
     logger.info("projects.seed-dropped", { dropped: droppedSeed.dropped, backup: droppedSeed.backup });
   }
   const projectsStore = new ProjectsStore({
-    file: import_node_path79.default.join(config.dataDir, "projects.json"),
+    file: import_node_path80.default.join(config.dataDir, "projects.json"),
     clawdDir: config.dataDir,
-    codexStateFile: import_node_path79.default.join(import_node_os27.default.homedir(), ".codex", ".codex-global-state.json"),
+    codexStateFile: import_node_path80.default.join(import_node_os28.default.homedir(), ".codex", ".codex-global-state.json"),
     logger
   });
   const observer = new SessionObserver({
@@ -69126,12 +69591,12 @@ async function startDaemon(config) {
     screenIdleProbeLogger
   }) : new ClaudeAdapter({ logger, historyReader: new ClaudeHistoryReader() });
   registerAdapter("claude", claudeAdapter);
-  const codexIsolatedHome = import_node_path79.default.join(config.dataDir, "codex-home");
+  const codexIsolatedHome = import_node_path80.default.join(config.dataDir, "codex-home");
   try {
     import_node_fs56.default.mkdirSync(codexIsolatedHome, { recursive: true });
     for (const f of ["auth.json", "config.toml"]) {
-      const link = import_node_path79.default.join(codexIsolatedHome, f);
-      const target = import_node_path79.default.join(import_node_os27.default.homedir(), ".codex", f);
+      const link = import_node_path80.default.join(codexIsolatedHome, f);
+      const target = import_node_path80.default.join(import_node_os28.default.homedir(), ".codex", f);
       if (!import_node_fs56.default.existsSync(link) && import_node_fs56.default.existsSync(target)) import_node_fs56.default.symlinkSync(target, link);
     }
   } catch (err) {
@@ -69145,11 +69610,11 @@ async function startDaemon(config) {
       // projectPaths 每次调用现取 —— 用户新建 project 后立即生效，不用重启 daemon
       codexHomeFor: (cwd) => resolveCodexHome({
         cwd,
-        personaRoot: import_node_path79.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path80.default.join(config.dataDir, "personas"),
         // 必须用 listMerged（Codex registry ∪ 叠加层）：只用本地 list() 的话，用户在
         // Codex 里建的 project 不在表里，在它下面开的会话会被误判成隔离 → Codex 侧看不到
         projectPaths: projectsStore.listMerged().map((x) => x.path),
-        sharedHome: import_node_path79.default.join(import_node_os27.default.homedir(), ".codex"),
+        sharedHome: import_node_path80.default.join(import_node_os28.default.homedir(), ".codex"),
         isolatedHome: codexIsolatedHome
       })
     })
@@ -69434,11 +69899,11 @@ async function startDaemon(config) {
         // 'persona/<pid>/owner'，default 走 'default'。
         getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
         // guest path guard：candidate 必须在 personaRoot 子树或调用者自己的 user-dir 下
-        personaRoot: import_node_path79.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path80.default.join(config.dataDir, "personas"),
         usersRoot
       },
       // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-      personaRoot: import_node_path79.default.join(config.dataDir, "personas"),
+      personaRoot: import_node_path80.default.join(config.dataDir, "personas"),
       // v2 多人 persona 隔离：handler 派生 guest user-dir 放行
       usersRoot,
       // v2 Phase 6: whoami handler 装在 owner principal.displayName + persona 解析
@@ -69539,11 +70004,11 @@ async function startDaemon(config) {
       // 发布上线脚手架化 (spec 2026-06-03 §5.2):
       // appBuilderPersonaRoot 用于拼 publish.sh 绝对路径（persona-app-builder 安装在
       // dataDir/personas/persona-app-builder 之下，extension-kit/scripts/publish.sh 是相对路径）。
-      appBuilderPersonaRoot: import_node_path79.default.join(config.dataDir, "personas", "persona-app-builder"),
+      appBuilderPersonaRoot: import_node_path80.default.join(config.dataDir, "personas", "persona-app-builder"),
       // 共享 deploy-kit 根：scaffold/publish 脚本骨架 + 阿里云凭证单一真源。
-      deployKitRoot: import_node_path79.default.join(config.dataDir, "deploy-kit"),
+      deployKitRoot: import_node_path80.default.join(config.dataDir, "deploy-kit"),
       // scaffold/publish 按当前 session 的 persona 解析其安装根，让每个 persona 用自己的模板/注入配置。
-      resolvePersonaRoot: (personaId2) => import_node_path79.default.join(config.dataDir, "personas", personaId2),
+      resolvePersonaRoot: (personaId2) => import_node_path80.default.join(config.dataDir, "personas", personaId2),
       // 凭据表（M1b Step 5）：与 MCP 那条同一张表、同一个来源，只是交付给另一个子进程。
       readSecrets,
       // 发布上线脚手架化 (spec 2026-06-03 §5.2.2):
@@ -69600,7 +70065,7 @@ async function startDaemon(config) {
         sourceSessionId: args.sourceSessionId
       });
       const sourceFile = manager.findOwnedSession(args.sourceSessionId);
-      const sourceJsonlPath = resolveSourceJsonlPath(sourceFile, import_node_os27.default.homedir());
+      const sourceJsonlPath = resolveSourceJsonlPath(sourceFile, import_node_os28.default.homedir());
       logger.info("dispatch.spawnB.source-resolved", {
         dispatchId: args.dispatchId,
         sourceJsonlPath,
@@ -69658,12 +70123,12 @@ async function startDaemon(config) {
   });
   Object.assign(handlers, shiftHandlers);
   const deployReceipts = createReceiptStore({
-    filePath: import_node_path79.default.join(config.dataDir, "deploy.json"),
+    filePath: import_node_path80.default.join(config.dataDir, "deploy.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("deploy receipts flush failed", { error: String(err) })
   });
   const deploySecrets = createSecretStore({
-    filePath: import_node_path79.default.join(config.dataDir, "deploy-secrets.json"),
+    filePath: import_node_path80.default.join(config.dataDir, "deploy-secrets.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("deploy secrets flush failed", { error: String(err) })
   });
@@ -69694,6 +70159,7 @@ async function startDaemon(config) {
         runNode: (script, args, opts) => runNodeScript(script, args, opts.timeoutMs),
         fetchImpl: fetch,
         now: () => Date.now(),
+        sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
         onStage: (stage) => {
           deployReceipts.update(deployId, { trialStage: stage });
         },
@@ -69706,6 +70172,8 @@ async function startDaemon(config) {
         receipt,
         // 试装带全量（含使用者自带那几条的临时垫付值）——它要真跑一次发布
         secretTable: secretTableFor(receipt, deploySecrets.resolve(deployId), "all"),
+        // persona 目录由 daemon 给：构建器不认识任何 persona 的名字（见 RunTrialArgs.personaDir）
+        personaDir: personaStore.personaDirPath(receipt.personaId),
         round: receipt.trialRound
       }
     );
@@ -69736,7 +70204,7 @@ async function startDaemon(config) {
     hasPersona: (personaId2) => personaStore.has(personaId2),
     startScan: (deployId, personaId2) => {
       const assetLines = SCANNABLE_ASSETS.map(
-        (name) => `  - ${name}\uFF1A${import_node_path79.default.join(config.dataDir, name)}`
+        (name) => `  - ${name}\uFF1A${import_node_path80.default.join(config.dataDir, name)}`
       ).join("\n");
       const prompt = [
         `\u626B\u63CF persona\u300C${personaId2}\u300D\u7684\u90E8\u7F72\u73AF\u5883\uFF0CdeployId=${deployId}\u3002`,
@@ -69788,7 +70256,7 @@ async function startDaemon(config) {
       const cloudHost = await loadCloudHostConfig(config.dataDir);
       await gatewayAdmin({ cloudHost, fetchImpl: fetch }, "/admin/deployments:remove", { deployId });
     },
-    genId: () => `dp-${(0, import_node_crypto22.randomUUID)().slice(0, 8)}`,
+    genId: () => `dp-${(0, import_node_crypto23.randomUUID)().slice(0, 8)}`,
     now: () => Date.now()
   });
   Object.assign(handlers, deployHandlers);
@@ -69801,7 +70269,7 @@ async function startDaemon(config) {
   });
   shiftScheduler.start();
   logger.info("shift scheduler started", { shiftCount: shiftStore.list().length });
-  const larkBotStore = createLarkBotBindingStore(import_node_path79.default.join(config.dataDir, "personas"));
+  const larkBotStore = createLarkBotBindingStore(import_node_path80.default.join(config.dataDir, "personas"));
   const larkBotCloud = createLarkBotCloudClient({
     api: config.clawosApi ?? DEFAULT_CLAWOS_API,
     apiKey: resolveClawdTicketsApiKey(),
@@ -69815,7 +70283,7 @@ async function startDaemon(config) {
     store: larkBotStore,
     fetchResource: (appId, messageId, fileKey, maxBytes, type) => larkBotCloud.fetchResource(appId, messageId, fileKey, maxBytes, type),
     // 图片落 guest userWorkDir 下（capId = lark-<chat_id>）：CC 经 --add-dir + allowRead carve 可 Read
-    mediaRootFor: (chatId) => import_node_path79.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
+    mediaRootFor: (chatId) => import_node_path80.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
     isShuttingDown: () => larkDraining,
     logger: {
       warn: (msg) => logger.warn(msg),
@@ -70120,8 +70588,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path79.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path79.default.join(logDir, "frpc.log")}`
+        `Frpc config: ${import_node_path80.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path80.default.join(logDir, "frpc.log")}`
       ];
       const width2 = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width2 + 4);
@@ -70134,7 +70602,7 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path79.default.join(config.dataDir, "connect.txt");
+        const connectPath = import_node_path80.default.join(config.dataDir, "connect.txt");
         import_node_fs56.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
@@ -70224,7 +70692,7 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path79.default.join(dataDir, "persons");
+  const dir = import_node_path80.default.join(dataDir, "persons");
   try {
     import_node_fs56.default.rmSync(dir, { recursive: true, force: true });
   } catch {