npm - @clawos-dev/clawd - Versions diffs - 0.2.468 → 0.2.469 - Mend

@clawos-dev/clawd 0.2.468 → 0.2.469

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (7) hide show

package/dist/app-builder-plugin/mcp-server.cjs +10 -0
package/dist/cli.cjs +562 -467
package/dist/dispatch/mcp-server.cjs +10 -0
package/dist/persona-defaults/persona-clawd-butler/.claude/skills/scan-persona-for-deploy/SKILL.md +20 -1
package/dist/share-ui/assets/{guest-BCPZNGfX.js → guest-DNeZJT0N.js} +1 -1
package/dist/share-ui/guest.html +1 -1
package/package.json +1 -1

package/dist/cli.cjs CHANGED Viewed

@@ -450,8 +450,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path99, errorMaps, issueData } = params;
-      const fullPath = [...path99, ...issueData.path || []];
+      const { data, path: path100, errorMaps, issueData } = params;
+      const fullPath = [...path100, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -762,11 +762,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path99, key) {
+      constructor(parent, value, path100, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path99;
+        this._path = path100;
         this._key = key;
       }
       get path() {
@@ -6077,6 +6077,16 @@ var init_deploy_schemas = __esm({
       evidence: external_exports.array(EnvEvidenceSchema).optional(),
       smokeTask: external_exports.string().optional(),
       notes: external_exports.array(external_exports.string()).default([]),
+      /**
+       * 这次扫描**被告知有哪些共享资产**（daemon 的 `SCANNABLE_ASSETS` 在 finishScan 那一刻的名单）。
+       *
+       * 记它是为了回答一个只有它答得了的问题：「这张单据是不是用还不知道某个资产的扫描器扫的」。
+       * 没有它就只能拿「当前资产表 ⊄ 单据的 assets」当判据——而一个 persona 本来就可能真的用不到
+       * 某个资产，那会变成对每张单据的常态唠叨。
+       *
+       * 缺席 = M1b 及以前扫的老单据（那时候扫描器只被告知了 deploy-kit 一条）。
+       */
+      scannedAssets: external_exports.array(external_exports.string()).optional(),
       /**
        * 每条凭据的履约选择：secret name → 'deployer' | 'user'。
        * **只记「谁出」，不记值。** 没做选择的凭据不在这个 map 里（缺席即未定），
@@ -9905,8 +9915,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path99 = req.path;
-        _req.url = typeof path99 === "string" ? path99 : req.url ? req.url.path || req.url : void 0;
+        const path100 = req.path;
+        _req.url = typeof path100 === "string" ? path100 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -10071,14 +10081,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path99) {
+    function parsePath(path100) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path99.length; i++) {
-        const char = path99[i];
+      for (let i = 0; i < path100.length; i++) {
+        const char = path100[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -10209,10 +10219,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path99 of paths) {
-        const parts = parsePath(path99);
+      for (const path100 of paths) {
+        const parts = parsePath(path100);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path99, remove);
+          redactWildcardPath(obj, parts, censor, path100, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -10297,8 +10307,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path99) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path99];
+            const wrappedCensor = typeof censor === "function" ? (value, path100) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path100];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -10333,8 +10343,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path99 of pathsToClone) {
-        const parts = parsePath(path99);
+      for (const path100 of pathsToClone) {
+        const parts = parsePath(path100);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -10386,24 +10396,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path99) {
-      if (typeof path99 !== "string") {
+    function validatePath(path100) {
+      if (typeof path100 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path99 === "") {
+      if (path100 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path99.includes("..")) {
-        throw new Error(`Invalid redaction path (${path99})`);
+      if (path100.includes("..")) {
+        throw new Error(`Invalid redaction path (${path100})`);
       }
-      if (path99.includes(",")) {
-        throw new Error(`Invalid redaction path (${path99})`);
+      if (path100.includes(",")) {
+        throw new Error(`Invalid redaction path (${path100})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path99.length; i++) {
-        const char = path99[i];
+      for (let i = 0; i < path100.length; i++) {
+        const char = path100[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -10417,20 +10427,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path99})`);
+            throw new Error(`Invalid redaction path (${path100})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path99})`);
+        throw new Error(`Invalid redaction path (${path100})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path99 of paths) {
-        validatePath(path99);
+      for (const path100 of paths) {
+        validatePath(path100);
       }
     }
     function slowRedact(options = {}) {
@@ -10598,8 +10608,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path99) => {
-            return censor(value, [k2, ...path99]);
+          const wrappedCensor = typeof censor === "function" ? (value, path100) => {
+            return censor(value, [k2, ...path100]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -10820,7 +10830,7 @@ var require_sonic_boom = __commonJS({
     var fs88 = require("fs");
     var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
-    var path99 = require("path");
+    var path100 = require("path");
     var sleep2 = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -10874,7 +10884,7 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs88.mkdirSync(path99.dirname(file), { recursive: true });
+          if (sonic.mkdir) fs88.mkdirSync(path100.dirname(file), { recursive: true });
           const fd = fs88.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
@@ -10882,7 +10892,7 @@ var require_sonic_boom = __commonJS({
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs88.mkdir(path99.dirname(file), { recursive: true }, (err) => {
+        fs88.mkdir(path100.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
           fs88.open(file, flags, mode, fileOpened);
         });
@@ -14513,11 +14523,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path99, added, removed, oldPosInc, options) {
-        var last = path99.lastComponent;
+      addToPath: function addToPath(path100, added, removed, oldPosInc, options) {
+        var last = path100.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path99.oldPos + oldPosInc,
+            oldPos: path100.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -14527,7 +14537,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path99.oldPos + oldPosInc,
+            oldPos: path100.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -15109,10 +15119,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec4 = m2;
-      const path99 = typeof rec4.path === "string" ? rec4.path : null;
+      const path100 = typeof rec4.path === "string" ? rec4.path : null;
       const content = typeof rec4.content === "string" ? rec4.content : null;
-      if (!path99 || content == null) return null;
-      const entry = { path: path99, content };
+      if (!path100 || content == null) return null;
+      const entry = { path: path100, content };
       if (typeof rec4.mtimeMs === "number") entry.mtimeMs = rec4.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -15978,10 +15988,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec4 = m2;
-      const path99 = typeof rec4.path === "string" ? rec4.path : null;
+      const path100 = typeof rec4.path === "string" ? rec4.path : null;
       const content = typeof rec4.content === "string" ? rec4.content : null;
-      if (!path99 || content == null) return null;
-      const out = { path: path99, content };
+      if (!path100 || content == null) return null;
+      const out = { path: path100, content };
       if (typeof rec4.mtimeMs === "number") out.mtimeMs = rec4.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -36955,8 +36965,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path99) {
-      var parts = path99.split("/");
+    exports2.resolve = function(path100) {
+      var parts = path100.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -42809,18 +42819,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path99) {
-      if (path99.slice(-1) === "/") {
-        path99 = path99.substring(0, path99.length - 1);
+    var parentFolder = function(path100) {
+      if (path100.slice(-1) === "/") {
+        path100 = path100.substring(0, path100.length - 1);
       }
-      var lastSlash = path99.lastIndexOf("/");
-      return lastSlash > 0 ? path99.substring(0, lastSlash) : "";
+      var lastSlash = path100.lastIndexOf("/");
+      return lastSlash > 0 ? path100.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path99) {
-      if (path99.slice(-1) !== "/") {
-        path99 += "/";
+    var forceTrailingSlash = function(path100) {
+      if (path100.slice(-1) !== "/") {
+        path100 += "/";
       }
-      return path99;
+      return path100;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -43822,7 +43832,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path81.default.dirname(opts.recordPath);
+  const dir = import_node_path82.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -43862,12 +43872,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs57, import_node_path81;
+var import_node_fs57, import_node_path82;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
     import_node_fs57 = __toESM(require("fs"), 1);
-    import_node_path81 = __toESM(require("path"), 1);
+    import_node_path82 = __toESM(require("path"), 1);
   }
 });
@@ -43910,7 +43920,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs58.mkdtempSync)(import_node_path82.default.join(import_node_os29.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs58.mkdtempSync)(import_node_path83.default.join(import_node_os29.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -44077,13 +44087,13 @@ async function runController(opts) {
   }
   return exitCode ?? 0;
 }
-var import_node_fs58, import_node_os29, import_node_path82;
+var import_node_fs58, import_node_os29, import_node_path83;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
     import_node_fs58 = require("fs");
     import_node_os29 = __toESM(require("os"), 1);
-    import_node_path82 = __toESM(require("path"), 1);
+    import_node_path83 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -44358,7 +44368,7 @@ Env (advanced):
 `;
 // src/index.ts
-var import_node_path80 = __toESM(require("path"), 1);
+var import_node_path81 = __toESM(require("path"), 1);
 var import_node_fs56 = __toESM(require("fs"), 1);
 var import_node_os28 = __toESM(require("os"), 1);
 var import_node_crypto23 = require("crypto");
@@ -51616,8 +51626,8 @@ function turnStartInput(text) {
   const items = [];
   let leftover = text;
   for (const m2 of text.matchAll(SKILL_RE)) {
-    const [marker, name, path99] = m2;
-    items.push({ type: "skill", name, path: path99 });
+    const [marker, name, path100] = m2;
+    items.push({ type: "skill", name, path: path100 });
     leftover = leftover.replace(marker, "");
   }
   for (const m2 of text.matchAll(ATTACHMENT_RE2)) {
@@ -54712,6 +54722,56 @@ function nextReadiness(receipt, filledEnv) {
   return next === receipt.status ? void 0 : next;
 }
+// src/deploy/scan-task.ts
+var import_node_path30 = __toESM(require("path"), 1);
+var BUTLER_PERSONA_ID = "persona-clawd-butler";
+var SCANNABLE_ASSETS = [
+  {
+    name: "deploy-kit",
+    path: (dataDir) => import_node_path30.default.join(dataDir, "deploy-kit"),
+    what: "FC \u90E8\u7F72\u80FD\u529B\uFF08publish.sh / new-extension.sh / \u5DE5\u5177\u94FE / \u51ED\u8BC1\u76EE\u5F55\uFF09\u3002persona \u7528\u7EDD\u5BF9\u8DEF\u5F84\u53BB\u8C03\u8FD9\u91CC\u7684\u811A\u672C\u65F6\uFF0C\u5C31\u8BE5\u62A5\u4E00\u6761 asset\u3002"
+  },
+  {
+    name: "app-builder-plugin",
+    what: "clawd-app-builder MCP server \u7684\u6784\u5EFA\u4EA7\u7269\uFF08daemon \u7684 tsup \u4EA7\u7269\uFF0C\u672C\u673A\u4E0D\u5728\u76D8\u4E0A\u5355\u72EC\u5B58\u4E00\u4EFD\uFF09\u3002**\u5224\u636E**\uFF1Apersona \u7684\u4E3B\u5E72\u52A8\u4F5C\u8D70\u7684\u662F daemon \u63D0\u4F9B\u7684 MCP\uFF08clawd-rpc / app-builder \u90A3\u7C7B\uFF09\u65F6\uFF0C\u4E91\u4E0A\u5BB9\u5668\u91CC\u6CA1\u6709 daemon\uFF0C\u8DD1\u7684\u5C31\u662F\u8FD9\u4EFD\u4EA7\u7269\u2014\u2014\u7528\u5230\u5B83\u5C31\u62A5\u4E00\u6761 asset\uFF0C\u5426\u5219\u5B83\u8FDB\u4E0D\u4E86\u955C\u50CF\u3002"
+  }
+];
+function staleScannerAssets(receipt, known = SCANNABLE_ASSETS) {
+  const knew = new Set(receipt.scannedAssets ?? []);
+  return known.filter((a) => !knew.has(a.name));
+}
+var STALE_ASSETS_NOTE_PREFIX = "\u3010\u4E0A\u4E91\u626B\u63CF\u3011";
+function describeStaleAssets(stale) {
+  if (stale.length === 0) return void 0;
+  const plain = (s) => s.replace(/\*\*/g, "").replace(/\s+/g, " ").trim();
+  return `${STALE_ASSETS_NOTE_PREFIX}\u8FD9\u5F20\u5355\u636E\u626B\u7684\u65F6\u5019\uFF0C\u626B\u63CF\u5668\u8FD8\u4E0D\u77E5\u9053\u6709${stale.map((a) => `\u300C${a.name}\u300D`).join("\u3001")}\u8FD9${stale.length > 1 ? "\u51E0" : ""}\u9879\u5171\u4EAB\u8D44\u4EA7\uFF0C\u6240\u4EE5\u6E05\u5355\u91CC\u53EF\u80FD\u6F0F\u4E86\u58F0\u660E\u3002${stale.map((a) => ` ${a.name} \u662F\uFF1A${plain(a.what)}`).join("")} \u7528\u5F97\u4E0A\u7684\u8BDD\uFF0C\u5728\u6E05\u5355\u91CC\u8865\u4E00\u6761 asset\uFF0C\u6216\u8005\u91CD\u626B\uFF08deploy:rescan\uFF09\u4E00\u904D\u3002`;
+}
+function settleEndedScan(outcome, current) {
+  if (current?.status !== "scanning") return void 0;
+  return {
+    status: "scanFailed",
+    error: "error" in outcome ? outcome.error : "butler \u4F1A\u8BDD\u7ED3\u675F\u4E86\u4F46\u6CA1\u6709\u8C03 finishScan"
+  };
+}
+function reconcileInterruptedScans(deps) {
+  const stale = deps.list().filter((r) => r.status === "scanning");
+  for (const r of stale) {
+    deps.update(r.deployId, { status: "scanFailed", error: "daemon \u91CD\u542F\uFF0C\u626B\u63CF\u4F1A\u8BDD\u5DF2\u4E2D\u65AD\u2014\u2014\u8BF7\u91CD\u65B0\u626B\u63CF" });
+  }
+  return stale.map((r) => r.deployId);
+}
+function reconcileInterruptedTrials(deps) {
+  const stale = deps.list().filter((r) => r.status === "trialing");
+  for (const r of stale) {
+    deps.update(r.deployId, {
+      status: "failed",
+      trialStage: void 0,
+      gaps: [{ errorText: "daemon \u91CD\u542F\uFF0C\u8FD9\u4E00\u8F6E\u8BD5\u88C5\u88AB\u6253\u65AD\u4E86\u2014\u2014\u6CA1\u7ED3\u8BBA\uFF0C\u91CD\u8DD1\u4E00\u6B21\u5373\u53EF\u3002" }]
+    });
+  }
+  return stale.map((r) => r.deployId);
+}
 // src/handlers/deploy.ts
 function ensureOwner(ctx) {
   if (!ctx || ctx.principal.kind !== "owner") {
@@ -54892,6 +54952,9 @@ function buildDeployHandlers(deps) {
       status: "draft",
       smokeTask: args.smokeTask ? redactSecretValues(args.smokeTask) : args.smokeTask,
       notes: args.notes?.map(redactSecretValues),
+      // 记下这次扫描**被告知有哪些共享资产**。以后资产表长出新条目时，只有扫的时候还不知道
+      // 它的那些单据会被提示一次（见 staleScannerAssets）——不记的话就只能对每张单据都唠叨。
+      scannedAssets: SCANNABLE_ASSETS.map((a) => a.name),
       error: void 0
     });
     return view(applyReadiness(deps, next));
@@ -54928,12 +54991,16 @@ function buildDeployHandlers(deps) {
         `VALIDATION_ERROR: \u5DF2\u7ECF\u8BD5\u88C5 ${receipt.trialRound} \u8F6E\u4E86\uFF08\u4E0A\u9650 ${TRIAL_ROUND_MAX}\uFF09\u3002\u4E00\u8F6E\u662F\u4E00\u6B21\u771F\u7684\u955C\u50CF\u6784\u5EFA\u52A0\u4E00\u6B21\u771F\u7684\u53D1\u5E03\uFF0C\u5230\u8FD9\u4E2A\u6570\u8BF4\u660E\u7F3A\u7684\u591A\u534A\u4E0D\u662F\u4E00\u6761\u4F9D\u8D56\u2014\u2014\u56DE\u53BB\u91CD\u626B\u4E00\u904D\uFF0C\u6216\u8005\u627E\u4EBA\u770B\u770B\u8FD9\u6761\u8DEF\u662F\u4E0D\u662F\u8D70\u4E0D\u901A`
       );
     }
+    const stale = describeStaleAssets(staleScannerAssets(receipt));
+    const kept = receipt.notes.filter((n) => !n.startsWith(STALE_ASSETS_NOTE_PREFIX));
+    const notes = stale ? [...kept, stale] : kept.length === receipt.notes.length ? void 0 : kept;
     const next = deps.receipts.update(args.deployId, {
       status: "trialing",
       trialRound: receipt.trialRound + 1,
       trialStage: "\u6392\u961F\u51C6\u5907\u4E2D",
       // 上一轮的缺口不留到这一轮：人已经照着补过了，留着会让人以为没改动
       gaps: [],
+      ...notes ? { notes } : {},
       error: void 0
     });
     deps.startTrial(args.deployId);
@@ -54986,7 +55053,7 @@ function buildDeployHandlers(deps) {
 // src/deploy/receipt-store.ts
 var import_promises4 = __toESM(require("fs/promises"), 1);
-var import_node_path30 = __toESM(require("path"), 1);
+var import_node_path31 = __toESM(require("path"), 1);
 init_protocol();
 function createReceiptStore(deps) {
   let receipts = [];
@@ -55012,7 +55079,7 @@ function createReceiptStore(deps) {
       flushTimer = null;
     }
     const content = { version: 1, receipts };
-    await import_promises4.default.mkdir(import_node_path30.default.dirname(deps.filePath), { recursive: true });
+    await import_promises4.default.mkdir(import_node_path31.default.dirname(deps.filePath), { recursive: true });
     const tmp = `${deps.filePath}.tmp-${process.pid}-${deps.now()}`;
     await import_promises4.default.writeFile(tmp, JSON.stringify(content, null, 2), { encoding: "utf8", mode: 384 });
     await import_promises4.default.rename(tmp, deps.filePath);
@@ -55070,7 +55137,7 @@ function createReceiptStore(deps) {
 // src/deploy/secret-store.ts
 var import_promises5 = __toESM(require("fs/promises"), 1);
-var import_node_path31 = __toESM(require("path"), 1);
+var import_node_path32 = __toESM(require("path"), 1);
 function createSecretStore(deps) {
   let entries = [];
   let flushTimer = null;
@@ -55096,7 +55163,7 @@ function createSecretStore(deps) {
       flushTimer = null;
     }
     const content = { version: 1, entries };
-    await import_promises5.default.mkdir(import_node_path31.default.dirname(deps.filePath), { recursive: true });
+    await import_promises5.default.mkdir(import_node_path32.default.dirname(deps.filePath), { recursive: true });
     const tmp = `${deps.filePath}.tmp-${process.pid}-${deps.now()}`;
     await import_promises5.default.writeFile(tmp, JSON.stringify(content, null, 2), { encoding: "utf8", mode: 384 });
     await import_promises5.default.rename(tmp, deps.filePath);
@@ -55167,9 +55234,10 @@ function createSecretStore(deps) {
 // src/deploy/cloud-host-config.ts
 var import_promises6 = __toESM(require("fs/promises"), 1);
-var import_node_path32 = __toESM(require("path"), 1);
+var import_node_path33 = __toESM(require("path"), 1);
 var CLOUD_HOST_CONFIG_FILE = "cloud-host.json";
-var REQUIRED = ["provisionDir", "gatewayUrl", "gatewayAdminKey", "gatewayApiKey"];
+var REQUIRED = ["gatewayUrl", "gatewayAdminKey", "gatewayApiKey"];
+var LOCAL_REQUIRED = ["provisionDir", "k3sHost", "k3sKeyPath"];
 var CloudHostConfigError = class extends Error {
 };
 var looksLikeRegistryRef = (s) => {
@@ -55251,7 +55319,7 @@ function formatGaps(file, gaps, hasLocalCoords) {
   return lines.join("\n");
 }
 async function loadCloudHostConfig(dataDir) {
-  const file = import_node_path32.default.join(dataDir, CLOUD_HOST_CONFIG_FILE);
+  const file = import_node_path33.default.join(dataDir, CLOUD_HOST_CONFIG_FILE);
   let raw;
   try {
     raw = await import_promises6.default.readFile(file, "utf8");
@@ -55276,9 +55344,11 @@ async function loadCloudHostConfig(dataDir) {
   const buildHost = parsed.buildHost === "local" ? "local" : "gha";
   const imageRepo = parsed.imageRepo ?? "clawd-persona-cloud";
   if (buildHost === "local") {
-    const need = ["k3sHost", "k3sKeyPath"].filter((k2) => !parsed[k2]);
+    const need = LOCAL_REQUIRED.filter((k2) => !parsed[k2]);
     if (need.length > 0) {
-      throw new CloudHostConfigError(`${file} \u7684 buildHost \u662F local\uFF0C\u8FD8\u7F3A\uFF1A${need.join(" / ")}`);
+      throw new CloudHostConfigError(
+        `${file} \u7684 buildHost \u662F local\uFF0C\u8FD8\u7F3A\uFF1A${need.join(" / ")}\u3002` + (need.includes("provisionDir") ? '\uFF08provisionDir \u662F clawos checkout \u91CC\u7684 cloud-host/provision \u7EDD\u5BF9\u8DEF\u5F84\u2014\u2014local \u8FD9\u6761\u8DEF\u8981\u5728\u672C\u673A\u8DD1\u6784\u5EFA\u5668\u3001\u8FD8\u8981\u4ECE\u4ED3\u5E93\u53D6\u968F\u884C\u8D44\u4EA7\uFF0C\u6240\u4EE5\u5B83\u5FC5\u987B\u6307\u5411\u4E00\u4EFD checkout\u3002\u4E0D\u60F3\u8981\u8FD9\u4E2A\u524D\u63D0\u7684\u8BDD\uFF0C\u6539\u6210\u9ED8\u8BA4\u7684 "buildHost": "gha"\uFF0C\u90A3\u6761\u8DEF\u4E0D\u78B0\u4ED3\u5E93\u3002\uFF09' : "")
+      );
     }
   } else {
     const gaps = ghaGaps(parsed, imageRepo);
@@ -55289,7 +55359,7 @@ async function loadCloudHostConfig(dataDir) {
     }
   }
   return {
-    provisionDir: parsed.provisionDir,
+    ...parsed.provisionDir ? { provisionDir: parsed.provisionDir } : {},
     gatewayUrl: parsed.gatewayUrl.replace(/\/+$/, ""),
     gatewayAdminKey: parsed.gatewayAdminKey,
     gatewayApiKey: parsed.gatewayApiKey,
@@ -55322,34 +55392,34 @@ async function loadCloudHostConfig(dataDir) {
 // src/deploy/trial-runner.ts
 var import_promises8 = __toESM(require("fs/promises"), 1);
 var import_node_os9 = __toESM(require("os"), 1);
-var import_node_path34 = __toESM(require("path"), 1);
+var import_node_path35 = __toESM(require("path"), 1);
 // src/deploy/bundle-store.ts
 var import_node_crypto7 = __toESM(require("crypto"), 1);
 var import_promises7 = __toESM(require("fs/promises"), 1);
 var import_node_os8 = __toESM(require("os"), 1);
-var import_node_path33 = __toESM(require("path"), 1);
+var import_node_path34 = __toESM(require("path"), 1);
 var import_node_child_process8 = require("child_process");
 var BUNDLE_URL_TTL_SEC = 30 * 60;
 var RUNTIME_STATE = /* @__PURE__ */ new Set(["projects", ".attachments", ".clawd/sessions"]);
 var NEVER_PERSONA = /* @__PURE__ */ new Set(["node_modules", ".git"]);
 async function stagePersonaDir(personaDir) {
-  const stage = await import_promises7.default.mkdtemp(import_node_path33.default.join(import_node_os8.default.tmpdir(), "clawd-bundle-"));
-  const root = import_node_path33.default.resolve(personaDir);
-  await import_promises7.default.cp(root, import_node_path33.default.join(stage, "persona"), {
+  const stage = await import_promises7.default.mkdtemp(import_node_path34.default.join(import_node_os8.default.tmpdir(), "clawd-bundle-"));
+  const root = import_node_path34.default.resolve(personaDir);
+  await import_promises7.default.cp(root, import_node_path34.default.join(stage, "persona"), {
     recursive: true,
     dereference: true,
     filter: (src) => {
-      const rel = import_node_path33.default.relative(root, import_node_path33.default.resolve(src));
+      const rel = import_node_path34.default.relative(root, import_node_path34.default.resolve(src));
       if (!rel) return true;
-      return !RUNTIME_STATE.has(rel) && !NEVER_PERSONA.has(import_node_path33.default.basename(rel));
+      return !RUNTIME_STATE.has(rel) && !NEVER_PERSONA.has(import_node_path34.default.basename(rel));
     }
   });
   return { dir: stage, cleanup: () => import_promises7.default.rm(stage, { recursive: true, force: true }) };
 }
 async function packPersonaBundle(personaDir) {
   const { dir: stage, cleanup } = await stagePersonaDir(personaDir);
-  const file = import_node_path33.default.join(stage, "bundle.tgz");
+  const file = import_node_path34.default.join(stage, "bundle.tgz");
   await new Promise((resolve9, reject) => {
     const child = (0, import_node_child_process8.spawn)("tar", ["-czf", file, "-C", stage, "persona"], { stdio: ["ignore", "ignore", "pipe"] });
     let err = "";
@@ -55614,12 +55684,24 @@ var gap = (errorText, raw, suggest) => ({
   ...raw ? { raw: redactSecretValues(raw.slice(-RAW_TAIL_CHARS)) } : {},
   ...suggest ? { suggest } : {}
 });
+var CLI_NAME = /^(@[a-z0-9][a-z0-9._+-]*\/)?[a-z0-9][a-z0-9._+-]*$/i;
+var CLI_NAME_MAX = 40;
+var stripCliPrefix = (s) => s.replace(/^cli:/i, "");
 function missingFromAgentText(text) {
+  const empty = { clis: [], notes: [] };
   const idx = text.lastIndexOf(MISSING_MARKER);
-  if (idx === -1) return [];
+  if (idx === -1) return empty;
   const line = text.slice(idx + MISSING_MARKER.length).split("\n")[0].trim();
-  if (!line || /^(none|无|没有)[.。]?$/i.test(line)) return [];
-  return line.replace(/[`*]/g, "").split(/[,，、]/).map((s) => s.trim()).filter((s) => s.length > 0 && s.length <= 40 && !/[\s（(]/.test(s));
+  if (!line || /^(none|无|没有)[.。]?$/i.test(line)) return empty;
+  const out = { clis: [], notes: [] };
+  for (const raw of line.replace(/[`*]/g, "").split(/[,，、]/)) {
+    const item = raw.trim();
+    if (!item) continue;
+    const name = stripCliPrefix(item);
+    if (name.length <= CLI_NAME_MAX && CLI_NAME.test(name)) out.clis.push(name);
+    else out.notes.push(item);
+  }
+  return out;
 }
 function gapsFromBuildOutput(r) {
   try {
@@ -55641,6 +55723,8 @@ async function chat(deps, args) {
   const timer = setTimeout(() => ctl.abort(), args.timeoutMs);
   const notes = [];
   let text = "";
+  let meta;
+  let delivered = false;
   try {
     const res = await deps.fetchImpl(`${cloudHost.gatewayUrl}/v1/chat/completions`, {
       method: "POST",
@@ -55658,8 +55742,14 @@ async function chat(deps, args) {
     });
     if (!res.ok) {
       const body = await res.text().catch(() => "");
-      return { ok: false, text: `gateway \u62D2\u4E86\u8FD9\u6B21\u6295\u5582\uFF08HTTP ${res.status}\uFF09\uFF1A${body.slice(0, 500)}`, notes };
+      return {
+        ok: false,
+        notes,
+        text: `gateway \u62D2\u4E86\u8FD9\u6B21\u6295\u5582\uFF08HTTP ${res.status}\uFF09\uFF1A${body.slice(0, 500)}`,
+        infra: { stage: "schedule", reason: `HTTP ${res.status}` }
+      };
     }
+    delivered = true;
     for await (const line of sseLines(res)) {
       if (line.startsWith(":")) {
         const note = line.slice(1).trim();
@@ -55675,6 +55765,7 @@ async function chat(deps, args) {
       try {
         const frame = JSON.parse(payload);
         text += frame.choices?.[0]?.delta?.content ?? "";
+        if (frame.clawd) meta = frame.clawd;
       } catch {
       }
     }
@@ -55683,13 +55774,22 @@ async function chat(deps, args) {
     return {
       ok: false,
       notes,
-      text: aborted ? `\u7B49\u4E86 ${Math.round(args.timeoutMs / 6e4)} \u5206\u949F\uFF0C\u5BB9\u5668\u90A3\u8FB9\u8FD8\u6CA1\u8DD1\u5B8C` : `\u8DDF gateway \u8BF4\u4E0D\u4E0A\u8BDD\uFF1A${String(err)}`
+      text: aborted ? `\u7B49\u4E86 ${Math.round(args.timeoutMs / 6e4)} \u5206\u949F\uFF0C\u5BB9\u5668\u90A3\u8FB9\u8FD8\u6CA1\u8DD1\u5B8C` : `\u8DDF gateway \u8BF4\u4E0D\u4E0A\u8BDD\uFF1A${String(err)}`,
+      // 连响应都没拿到 = 这次投喂没落地；**流中途才断**的另说：任务还在云上跑，
+      // 判不出是清单的错还是网络的错，从严算数
+      ...delivered ? {} : { infra: { stage: "schedule", reason: String(err) } }
     };
   } finally {
     clearTimeout(timer);
   }
-  const failed = /\[gateway\]/.test(text);
-  return { ok: !failed, text, notes };
+  if (!meta?.outcome) {
+    deps.logger?.warn("deploy.trial.no-final-frame", {
+      note: "gateway \u6CA1\u7ED9\u672B\u5E27\u7684 clawd.outcome\uFF0C\u56DE\u843D\u5230\u6B63\u6587\u5224\u5B9A\uFF08\u8001 gateway\uFF0C\u6216\u8005\u8FD9\u6761\u6D41\u88AB\u622A\u65AD\u4E86\uFF09"
+    });
+  }
+  const failed = meta?.outcome ? meta.outcome.kind !== "success" : /\[gateway\]/.test(text);
+  const infra = meta?.outcome?.infra;
+  return { ok: !failed, text, notes, ...failed && infra ? { infra } : {} };
 }
 async function* sseLines(res) {
   const reader = res.body?.getReader();
@@ -55709,8 +55809,8 @@ async function* sseLines(res) {
   }
   if (buf.trim()) yield buf.trim();
 }
-async function gatewayAdmin(deps, path99, body) {
-  const res = await deps.fetchImpl(`${deps.cloudHost.gatewayUrl}${path99}`, {
+async function gatewayAdmin(deps, path100, body) {
+  const res = await deps.fetchImpl(`${deps.cloudHost.gatewayUrl}${path100}`, {
     method: "POST",
     headers: {
       "content-type": "application/json",
@@ -55723,11 +55823,11 @@ async function gatewayAdmin(deps, path99, body) {
     signal: AbortSignal.timeout(GATEWAY_ADMIN_TIMEOUT_MS)
   });
   const text = await res.text();
-  if (!res.ok) throw new Error(`gateway ${path99} \u56DE\u4E86 HTTP ${res.status}\uFF1A${text.slice(0, 300)}`);
+  if (!res.ok) throw new Error(`gateway ${path100} \u56DE\u4E86 HTTP ${res.status}\uFF1A${text.slice(0, 300)}`);
   try {
     return JSON.parse(text);
   } catch {
-    throw new Error(`gateway ${path99} \u56DE\u7684\u4E0D\u662F JSON\uFF1A${text.slice(0, 300)}`);
+    throw new Error(`gateway ${path100} \u56DE\u7684\u4E0D\u662F JSON\uFF1A${text.slice(0, 300)}`);
   }
 }
 async function registerOfficialDeployment(deps, receipt, deployerSecrets) {
@@ -55826,28 +55926,37 @@ async function buildViaGha(deps, args) {
 }
 async function buildLocally(deps, args) {
   const { cloudHost } = deps;
+  const needed = [
+    ["provisionDir", cloudHost.provisionDir],
+    ["k3sHost", cloudHost.k3sHost],
+    ["k3sKeyPath", cloudHost.k3sKeyPath]
+  ].filter(([, v2]) => !v2).map(([k2]) => k2);
+  if (needed.length > 0) {
+    return { ok: false, gaps: [gap(`cloud-host.json \u7684 buildHost \u662F local\uFF0C\u4F46\u7F3A ${needed.join(" / ")}\u3002`)] };
+  }
+  const provisionDir = cloudHost.provisionDir;
   const baseTag = `${cloudHost.imageRepo}:base-local`;
   const deadline = deps.now() + args.timeoutMs;
   const left = () => Math.max(3e4, deadline - deps.now());
   deps.onStage("\u5728\u672C\u673A\u6784\u5E95\u5EA7");
   const base = await deps.runNode(
-    `${cloudHost.provisionDir}/build-image.mjs`,
+    `${provisionDir}/build-image.mjs`,
     [
       "--base",
       "--manifest",
-      `${cloudHost.provisionDir}/manifests/base.json`,
+      `${provisionDir}/manifests/base.json`,
       "--tag",
       baseTag,
       "--platform",
       "linux/amd64",
       "--context",
-      `${cloudHost.provisionDir}/build-context-base`
+      `${provisionDir}/build-context-base`
     ],
     { timeoutMs: left() }
   );
   if (base.code !== 0) return { ok: false, gaps: gapsFromBuildOutput(base) };
   deps.onStage("\u5728\u6309\u6E05\u5355\u6784 persona \u5C42");
-  const manifestFile = import_node_path34.default.join(import_node_os9.default.tmpdir(), `clawd-trial-${args.tmpKey}.json`);
+  const manifestFile = import_node_path35.default.join(import_node_os9.default.tmpdir(), `clawd-trial-${args.tmpKey}.json`);
   let built;
   let staged;
   try {
@@ -55858,14 +55967,14 @@ async function buildLocally(deps, args) {
   try {
     await import_promises8.default.writeFile(manifestFile, JSON.stringify({ manifest: args.manifest }, null, 2), { mode: 384 });
     built = await deps.runNode(
-      `${cloudHost.provisionDir}/build-image.mjs`,
+      `${provisionDir}/build-image.mjs`,
       [
         "--manifest",
         manifestFile,
         "--from",
         baseTag,
         "--persona-dir",
-        import_node_path34.default.join(staged.dir, "persona"),
+        import_node_path35.default.join(staged.dir, "persona"),
         "--tag",
         args.image,
         "--platform",
@@ -55882,11 +55991,8 @@ async function buildLocally(deps, args) {
   }
   if (built.code !== 0) return { ok: false, gaps: gapsFromBuildOutput(built) };
   deps.onStage("\u628A\u955C\u50CF\u63A8\u5230\u4E91\u4E0A\u90A3\u53F0\u673A\u5668");
-  if (!cloudHost.k3sHost || !cloudHost.k3sKeyPath) {
-    return { ok: false, gaps: [gap("cloud-host.json \u7684 buildHost \u662F local\uFF0C\u4F46\u7F3A k3sHost / k3sKeyPath\u3002")] };
-  }
   const pushed = await deps.runNode(
-    `${cloudHost.provisionDir}/push-to-k3s.mjs`,
+    `${provisionDir}/push-to-k3s.mjs`,
     ["--host", cloudHost.k3sHost, "--key", cloudHost.k3sKeyPath, "--image", args.image],
     { timeoutMs: left() }
   );
@@ -55906,6 +56012,12 @@ async function runTrial(deps, args) {
   const appName = trialAppName(receipt.deployId);
   const deadline = deps.now() + cloudHost.trialTimeoutMs;
   const left = () => Math.max(3e4, deadline - deps.now());
+  if (cloudHost.buildHost !== "local" && cloudHost.provisionDir) {
+    deps.logger?.info("deploy.trial.provision-dir-unused", {
+      provisionDir: cloudHost.provisionDir,
+      note: "buildHost=gha \u4E0D\u8BFB provisionDir\uFF08\u6784\u5EFA\u6574\u4E2A\u53D1\u751F\u5728 GitHub runner \u4E0A\uFF09\uFF0C\u8FD9\u4E00\u884C\u53EF\u4EE5\u4ECE cloud-host.json \u5220\u6389"
+    });
+  }
   const buildOutcome = cloudHost.buildHost === "local" ? await buildLocally(deps, {
     manifest,
     personaDir: args.personaDir,
@@ -55942,10 +56054,15 @@ async function runTrial(deps, args) {
       prompt: buildTeardownPrompt(appName),
       timeoutMs: Math.min(left(), 15 * 6e4)
     });
+    const infra = smoke.infra ?? (smoke.ok ? teardown.infra : void 0);
+    if (infra) {
+      deps.logger?.warn("deploy.trial.infra-failure", { deployId: receipt.deployId, round, stage: infra.stage });
+    }
+    const spent = !infra;
     if (!smoke.ok) {
       return {
         ok: false,
-        spent: true,
+        spent,
         gaps: [
           gap(smoke.text.trim() || "\u5BB9\u5668\u91CC\u90A3\u4E2A persona \u6CA1\u8BF4\u6E05\u695A\u4E3A\u4EC0\u4E48\u6CA1\u8DD1\u5B8C", smoke.notes.slice(-20).join("\n")),
           ...teardown.ok ? [] : [gap(`\u987A\u5E26\uFF1A\u8BD5\u88C5\u4EA7\u7269\u6CA1\u62C6\u5E72\u51C0\u2014\u2014${teardown.text.trim()}`)]
@@ -55953,14 +56070,21 @@ async function runTrial(deps, args) {
       };
     }
     if (!teardown.ok) {
-      return { ok: false, spent: true, gaps: [gap(`\u5E94\u7528\u5EFA\u51FA\u6765\u5E76\u53D1\u5E03\u6210\u529F\u4E86\uFF0C\u4F46\u62C6\u4E0D\u5E72\u51C0\uFF1A${teardown.text.trim()}`, teardown.notes.slice(-20).join("\n"))] };
+      return { ok: false, spent, gaps: [gap(`\u5E94\u7528\u5EFA\u51FA\u6765\u5E76\u53D1\u5E03\u6210\u529F\u4E86\uFF0C\u4F46\u62C6\u4E0D\u5E72\u51C0\uFF1A${teardown.text.trim()}`, teardown.notes.slice(-20).join("\n"))] };
     }
     const missing = missingFromAgentText(smoke.text);
-    if (missing.length > 0) {
+    if (missing.notes.length > 0) {
+      deps.logger?.warn("deploy.trial.missing-not-a-dependency", {
+        deployId: receipt.deployId,
+        round,
+        items: missing.notes
+      });
+    }
+    if (missing.clis.length > 0) {
       return {
         ok: false,
         spent: true,
-        gaps: missing.map((name) => gap(
+        gaps: missing.clis.map((name) => gap(
           `\u5BB9\u5668\u91CC\u6CA1\u6709 \`${name}\`\uFF0C\u662F\u5B83\u81EA\u5DF1\u52A8\u624B\u8865\u4E0A\u624D\u8DD1\u4E0B\u53BB\u7684\u2014\u2014\u6E05\u5355\u91CC\u6F0F\u4E86\u8FD9\u6761\uFF0C\u4E0B\u4E00\u4E2A\u5BB9\u5668\u7167\u6837\u7F3A\u3002`,
           smoke.text.slice(-RAW_TAIL_CHARS),
           `cli:${name}`
@@ -56008,35 +56132,6 @@ async function runNodeScript(script, args, timeoutMs) {
   });
 }
-// src/deploy/scan-task.ts
-var BUTLER_PERSONA_ID = "persona-clawd-butler";
-var SCANNABLE_ASSETS = ["deploy-kit"];
-function settleEndedScan(outcome, current) {
-  if (current?.status !== "scanning") return void 0;
-  return {
-    status: "scanFailed",
-    error: "error" in outcome ? outcome.error : "butler \u4F1A\u8BDD\u7ED3\u675F\u4E86\u4F46\u6CA1\u6709\u8C03 finishScan"
-  };
-}
-function reconcileInterruptedScans(deps) {
-  const stale = deps.list().filter((r) => r.status === "scanning");
-  for (const r of stale) {
-    deps.update(r.deployId, { status: "scanFailed", error: "daemon \u91CD\u542F\uFF0C\u626B\u63CF\u4F1A\u8BDD\u5DF2\u4E2D\u65AD\u2014\u2014\u8BF7\u91CD\u65B0\u626B\u63CF" });
-  }
-  return stale.map((r) => r.deployId);
-}
-function reconcileInterruptedTrials(deps) {
-  const stale = deps.list().filter((r) => r.status === "trialing");
-  for (const r of stale) {
-    deps.update(r.deployId, {
-      status: "failed",
-      trialStage: void 0,
-      gaps: [{ errorText: "daemon \u91CD\u542F\uFF0C\u8FD9\u4E00\u8F6E\u8BD5\u88C5\u88AB\u6253\u65AD\u4E86\u2014\u2014\u6CA1\u7ED3\u8BBA\uFF0C\u91CD\u8DD1\u4E00\u6B21\u5373\u53EF\u3002" }]
-    });
-  }
-  return stale.map((r) => r.deployId);
-}
 // src/handlers/lark-bot.ts
 init_protocol();
 var PROVISION_ERROR_SET = new Set(LARK_BOT_PROVISION_ERROR_REASONS);
@@ -56425,9 +56520,9 @@ async function refreshTunnelUrlOnStartup(deps) {
 // src/lark-bot-connector/binding-store.ts
 var import_node_fs28 = __toESM(require("fs"), 1);
-var import_node_path35 = __toESM(require("path"), 1);
+var import_node_path36 = __toESM(require("path"), 1);
 function createLarkBotBindingStore(personaRoot) {
-  const filePath = (personaId2) => import_node_path35.default.join(personaRoot, safeFileName(personaId2), ".clawd", "lark-bot.json");
+  const filePath = (personaId2) => import_node_path36.default.join(personaRoot, safeFileName(personaId2), ".clawd", "lark-bot.json");
   const read = (personaId2) => {
     const file = filePath(personaId2);
     if (!import_node_fs28.default.existsSync(file)) return null;
@@ -56441,7 +56536,7 @@ function createLarkBotBindingStore(personaRoot) {
   };
   const write = (personaId2, meta) => {
     const file = filePath(personaId2);
-    import_node_fs28.default.mkdirSync(import_node_path35.default.dirname(file), { recursive: true });
+    import_node_fs28.default.mkdirSync(import_node_path36.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     import_node_fs28.default.writeFileSync(tmp, JSON.stringify(meta, null, 2), { mode: 384 });
     import_node_fs28.default.renameSync(tmp, file);
@@ -56609,7 +56704,7 @@ function createLarkBotCloudClient(opts) {
 // src/lark-bot-connector/chat-router.ts
 var import_node_fs29 = __toESM(require("fs"), 1);
-var import_node_path36 = __toESM(require("path"), 1);
+var import_node_path37 = __toESM(require("path"), 1);
 init_protocol();
 var ERROR_REPLY_TEXT = "\u5904\u7406\u51FA\u9519\u4E86\uFF0C\u8BF7\u91CD\u8BD5";
 var LOCAL_TURN_RETRIES = 2;
@@ -56676,7 +56771,7 @@ function createLarkChatRouter(deps) {
         }
         const dir = deps.mediaRootFor(env.chatId);
         import_node_fs29.default.mkdirSync(dir, { recursive: true });
-        const p2 = import_node_path36.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}.${ext}`);
+        const p2 = import_node_path37.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}.${ext}`);
         import_node_fs29.default.writeFileSync(p2, r.data);
         lines.push(`[\u56FE\u7247: ${p2}]\uFF08\u7528 Read \u5DE5\u5177\u67E5\u770B\uFF09`);
       } catch (err) {
@@ -56699,7 +56794,7 @@ function createLarkChatRouter(deps) {
         }
         const dir = deps.mediaRootFor(env.chatId);
         import_node_fs29.default.mkdirSync(dir, { recursive: true });
-        const p2 = import_node_path36.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}-${safeAttachmentName(f.name)}`);
+        const p2 = import_node_path37.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}-${safeAttachmentName(f.name)}`);
         import_node_fs29.default.writeFileSync(p2, r.data);
         lines.push(`[\u6587\u4EF6: ${p2}]\uFF08\u7528 Read \u5DE5\u5177\u67E5\u770B\uFF09`);
       } catch (err) {
@@ -57789,7 +57884,7 @@ var CodexHistoryReader = class {
 };
 // src/tools/codex-skills.ts
-var import_node_path37 = __toESM(require("path"), 1);
+var import_node_path38 = __toESM(require("path"), 1);
 function str3(v2) {
   return typeof v2 === "string" ? v2 : void 0;
 }
@@ -57804,13 +57899,13 @@ function mapSkillsListResponse(res) {
       const r = s ?? {};
       const name = str3(r.name);
       if (!name) continue;
-      const path99 = str3(r.path);
+      const path100 = str3(r.path);
       const description = str3(r.description);
       const isPlugin = name.includes(":");
       out.push({
         name,
         source: isPlugin ? "plugin" : "project",
-        ...path99 ? { path: path99 } : {},
+        ...path100 ? { path: path100 } : {},
         ...description ? { description } : {},
         ...isPlugin ? { plugin: name.split(":")[0] } : {}
       });
@@ -57826,7 +57921,7 @@ async function listCodexSkills(cwd, deps = {}) {
     // 先写 extraRoots 再写 list（stdio 按写入顺序处理，fire-and-forget 不 await 回包；
     // codex-session.ts ready 序列同款，两处保持一致）。失败不阻塞 list。
     beforeRequest: (client) => {
-      void client.request("skills/extraRoots/set", { extraRoots: [import_node_path37.default.join(cwd, ".claude", "skills")] }).catch(() => void 0);
+      void client.request("skills/extraRoots/set", { extraRoots: [import_node_path38.default.join(cwd, ".claude", "skills")] }).catch(() => void 0);
     }
   });
   return mapSkillsListResponse(res);
@@ -57913,14 +58008,14 @@ function str4(v2) {
 // src/workspace/browser.ts
 var import_node_fs30 = __toESM(require("fs"), 1);
 var import_node_os10 = __toESM(require("os"), 1);
-var import_node_path38 = __toESM(require("path"), 1);
+var import_node_path39 = __toESM(require("path"), 1);
 init_protocol();
 var MAX_FILE_BYTES2 = 2 * 1024 * 1024;
 function resolveInsideCwd(cwd, subpath) {
-  const absCwd = import_node_path38.default.resolve(cwd);
-  const joined = import_node_path38.default.resolve(absCwd, subpath ?? ".");
-  const rel = import_node_path38.default.relative(absCwd, joined);
-  if (rel.startsWith("..") || import_node_path38.default.isAbsolute(rel)) {
+  const absCwd = import_node_path39.default.resolve(cwd);
+  const joined = import_node_path39.default.resolve(absCwd, subpath ?? ".");
+  const rel = import_node_path39.default.relative(absCwd, joined);
+  if (rel.startsWith("..") || import_node_path39.default.isAbsolute(rel)) {
     throw new ClawdError(ERROR_CODES.INVALID_PATH, `path escapes cwd: ${subpath}`);
   }
   return joined;
@@ -57951,7 +58046,7 @@ var WorkspaceBrowser = class {
         mtime: ""
       };
       try {
-        const st = import_node_fs30.default.statSync(import_node_path38.default.join(full, d.name));
+        const st = import_node_fs30.default.statSync(import_node_path39.default.join(full, d.name));
         entry.mtime = new Date(st.mtimeMs).toISOString();
         if (d.isFile()) entry.size = st.size;
       } catch {
@@ -57998,7 +58093,7 @@ var WorkspaceBrowser = class {
 // src/skills/agents-scanner.ts
 var import_node_fs31 = __toESM(require("fs"), 1);
 var import_node_os11 = __toESM(require("os"), 1);
-var import_node_path39 = __toESM(require("path"), 1);
+var import_node_path40 = __toESM(require("path"), 1);
 var DEFAULT_POLICY_DIR_DARWIN = "/Library/Application Support/ClaudeCode/.claude/agents";
 function isDirLikeSync2(p2) {
   try {
@@ -58036,10 +58131,10 @@ function scanAgentsDir(dir, source, seen, out) {
   }
   for (const ent of entries) {
     if (!ent.name.endsWith(".md")) continue;
-    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path39.default.join(dir, ent.name)))) {
+    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path40.default.join(dir, ent.name)))) {
       continue;
     }
-    const filePath = import_node_path39.default.join(dir, ent.name);
+    const filePath = import_node_path40.default.join(dir, ent.name);
     const baseName = ent.name.replace(/\.md$/, "");
     if (seen.has(baseName)) continue;
     seen.add(baseName);
@@ -58062,7 +58157,7 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
       return;
     }
     for (const ent of entries) {
-      const childPath = import_node_path39.default.join(dir, ent.name);
+      const childPath = import_node_path40.default.join(dir, ent.name);
       if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync2(childPath)) {
         walk2(childPath, [...namespaces, ent.name]);
         continue;
@@ -58087,9 +58182,9 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   walk2(root, []);
 }
 function readInstalledPlugins2(home) {
-  const pluginsDir = import_node_path39.default.join(home, ".claude", "plugins");
-  const v2 = import_node_path39.default.join(pluginsDir, "installed_plugins_v2.json");
-  const v1 = import_node_path39.default.join(pluginsDir, "installed_plugins.json");
+  const pluginsDir = import_node_path40.default.join(home, ".claude", "plugins");
+  const v2 = import_node_path40.default.join(pluginsDir, "installed_plugins_v2.json");
+  const v1 = import_node_path40.default.join(pluginsDir, "installed_plugins.json");
   let raw = null;
   for (const candidate of [v2, v1]) {
     try {
@@ -58118,19 +58213,19 @@ function readInstalledPlugins2(home) {
   return out;
 }
 function walkUpProjectAgentsDirs(startCwd, home, seen, out) {
-  let cur = import_node_path39.default.resolve(startCwd);
-  const fsRoot = import_node_path39.default.parse(cur).root;
+  let cur = import_node_path40.default.resolve(startCwd);
+  const fsRoot = import_node_path40.default.parse(cur).root;
   while (true) {
-    scanAgentsDir(import_node_path39.default.join(cur, ".claude", "agents"), "project", seen, out);
+    scanAgentsDir(import_node_path40.default.join(cur, ".claude", "agents"), "project", seen, out);
     let hasGit = false;
     try {
-      hasGit = import_node_fs31.default.existsSync(import_node_path39.default.join(cur, ".git"));
+      hasGit = import_node_fs31.default.existsSync(import_node_path40.default.join(cur, ".git"));
     } catch {
     }
     if (hasGit) return;
     if (cur === home) return;
     if (cur === fsRoot) return;
-    const parent = import_node_path39.default.dirname(cur);
+    const parent = import_node_path40.default.dirname(cur);
     if (parent === cur) return;
     cur = parent;
   }
@@ -58165,7 +58260,7 @@ var AgentsScanner = class {
     }
     const fsBlock = [];
     scanAgentsDir(
-      import_node_path39.default.join(this.home, ".claude", "agents"),
+      import_node_path40.default.join(this.home, ".claude", "agents"),
       "global",
       seen,
       fsBlock
@@ -58179,7 +58274,7 @@ var AgentsScanner = class {
       ...this.extraPluginRoots
     ];
     for (const { name, root } of plugins) {
-      const agentsRoot = import_node_path39.default.join(root, "agents");
+      const agentsRoot = import_node_path40.default.join(root, "agents");
       scanPluginAgentsTree(agentsRoot, name, seen, fsBlock);
     }
     return [...builtinBlock, ...fsBlock];
@@ -58189,13 +58284,13 @@ var AgentsScanner = class {
 // src/observer/session-observer.ts
 var import_node_fs33 = __toESM(require("fs"), 1);
 var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path41 = __toESM(require("path"), 1);
+var import_node_path42 = __toESM(require("path"), 1);
 init_claude_history();
 // src/observer/subagent-meta-observer.ts
 var import_node_fs32 = __toESM(require("fs"), 1);
 var import_node_os12 = __toESM(require("os"), 1);
-var import_node_path40 = __toESM(require("path"), 1);
+var import_node_path41 = __toESM(require("path"), 1);
 init_claude_history();
 var META_RE = /^agent-([A-Za-z0-9_-]+)\.meta\.json$/;
 var SubagentMetaObserver = class {
@@ -58208,7 +58303,7 @@ var SubagentMetaObserver = class {
   watches = /* @__PURE__ */ new Map();
   // public for spec only：测试直接拼路径写假 meta.json；生产 start() 内部自己解析
   resolveSubagentDir(cwd, toolSessionId) {
-    return import_node_path40.default.join(
+    return import_node_path41.default.join(
       this.home,
       ".claude",
       "projects",
@@ -58264,7 +58359,7 @@ var SubagentMetaObserver = class {
     if (!m2) return;
     const agentId = m2[1];
     if (w2.emitted.has(agentId)) return;
-    const file = import_node_path40.default.join(w2.dirPath, name);
+    const file = import_node_path41.default.join(w2.dirPath, name);
     let raw;
     try {
       raw = import_node_fs32.default.readFileSync(file, "utf8");
@@ -58324,7 +58419,7 @@ var SessionObserver = class {
   metaObserver;
   resolveJsonlPath(cwd, toolSessionId, override) {
     if (override) return override;
-    return import_node_path41.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
+    return import_node_path42.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
   }
   start(args) {
     this.stop(args.sessionId);
@@ -58350,10 +58445,10 @@ var SessionObserver = class {
       lastDeriveMs: 0
     };
     try {
-      import_node_fs33.default.mkdirSync(import_node_path41.default.dirname(filePath), { recursive: true });
+      import_node_fs33.default.mkdirSync(import_node_path42.default.dirname(filePath), { recursive: true });
     } catch {
     }
-    w2.watcher = import_node_fs33.default.watch(import_node_path41.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
+    w2.watcher = import_node_fs33.default.watch(import_node_path42.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
       if (!changedName || !w2.filePath.endsWith(changedName)) return;
       this.poll(w2);
     });
@@ -58450,7 +58545,7 @@ var SessionObserver = class {
     const now = Date.now();
     if (now - w2.lastRelocateScanMs < 1e3) return;
     w2.lastRelocateScanMs = now;
-    const projectsRoot = import_node_path41.default.join(this.home, ".claude", "projects");
+    const projectsRoot = import_node_path42.default.join(this.home, ".claude", "projects");
     const found = findTranscriptByToolSessionId(projectsRoot, w2.toolSessionId);
     if (!found || found === w2.filePath) return;
     try {
@@ -58459,7 +58554,7 @@ var SessionObserver = class {
     }
     w2.filePath = found;
     try {
-      w2.watcher = import_node_fs33.default.watch(import_node_path41.default.dirname(found), { persistent: false }, (_event, changedName) => {
+      w2.watcher = import_node_fs33.default.watch(import_node_path42.default.dirname(found), { persistent: false }, (_event, changedName) => {
         if (!changedName || !w2.filePath.endsWith(changedName)) return;
         this.poll(w2);
       });
@@ -58582,7 +58677,7 @@ function listRegistered() {
 var import_node_child_process10 = require("child_process");
 var import_node_fs34 = __toESM(require("fs"), 1);
 var import_node_os14 = __toESM(require("os"), 1);
-var import_node_path42 = __toESM(require("path"), 1);
+var import_node_path43 = __toESM(require("path"), 1);
 var TITLE_GEN_DIR_PREFIX = "clawd-title-";
 var TITLE_MODEL_BY_TOOL = {
   claude: "haiku",
@@ -58653,7 +58748,7 @@ async function generateSessionTitle(tool, firstMessage, deps = {}) {
   if (!text) return null;
   let workDir;
   try {
-    workDir = import_node_fs34.default.mkdtempSync(import_node_path42.default.join(import_node_os14.default.tmpdir(), TITLE_GEN_DIR_PREFIX));
+    workDir = import_node_fs34.default.mkdtempSync(import_node_path43.default.join(import_node_os14.default.tmpdir(), TITLE_GEN_DIR_PREFIX));
   } catch {
     return null;
   }
@@ -58663,8 +58758,8 @@ async function generateSessionTitle(tool, firstMessage, deps = {}) {
     } catch {
     }
   };
-  const outFile = import_node_path42.default.join(workDir, `codex-title-${process.pid}-${++outFileSeq}-${Date.now()}.txt`);
-  const schemaFile = import_node_path42.default.join(workDir, "title-schema.json");
+  const outFile = import_node_path43.default.join(workDir, `codex-title-${process.pid}-${++outFileSeq}-${Date.now()}.txt`);
+  const schemaFile = import_node_path43.default.join(workDir, "title-schema.json");
   if (tool === "codex") {
     try {
       import_node_fs34.default.writeFileSync(schemaFile, CODEX_TITLE_SCHEMA);
@@ -59428,7 +59523,7 @@ async function authenticate(token, deps) {
 // src/legacy-cleanup.ts
 var fs48 = __toESM(require("fs/promises"), 1);
-var path50 = __toESM(require("path"), 1);
+var path51 = __toESM(require("path"), 1);
 var LEGACY_FILES = [
   "personal-capability.json",
   "received-capabilities.json",
@@ -59437,7 +59532,7 @@ var LEGACY_FILES = [
 async function cleanupLegacyCapabilityFiles(dataDir, logger) {
   const removed = [];
   for (const name of LEGACY_FILES) {
-    const p2 = path50.join(dataDir, name);
+    const p2 = path51.join(dataDir, name);
     try {
       await fs48.unlink(p2);
       removed.push(name);
@@ -59452,7 +59547,7 @@ async function cleanupLegacyCapabilityFiles(dataDir, logger) {
 // src/inbox/inbox-store.ts
 var fs49 = __toESM(require("fs"), 1);
-var path51 = __toESM(require("path"), 1);
+var path52 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
@@ -59550,10 +59645,10 @@ var InboxStore = class {
     }
   }
   dirPath() {
-    return path51.join(this.dataDir, INBOX_SUBDIR);
+    return path52.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerDeviceId) {
-    return path51.join(this.dirPath(), `${peerDeviceId}.jsonl`);
+    return path52.join(this.dirPath(), `${peerDeviceId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -59642,7 +59737,7 @@ var InboxManager = class {
 // src/state/contact-store.ts
 var fs50 = __toESM(require("fs"), 1);
-var path52 = __toESM(require("path"), 1);
+var path53 = __toESM(require("path"), 1);
 var FILE_NAME = "contacts.json";
 var ContactStore = class {
   constructor(dataDir) {
@@ -59652,7 +59747,7 @@ var ContactStore = class {
   contacts = /* @__PURE__ */ new Map();
   load() {
     this.contacts.clear();
-    const file = path52.join(this.dataDir, FILE_NAME);
+    const file = path53.join(this.dataDir, FILE_NAME);
     let raw;
     try {
       raw = fs50.readFileSync(file, "utf8");
@@ -59736,7 +59831,7 @@ var ContactStore = class {
     return true;
   }
   flush() {
-    const file = path52.join(this.dataDir, FILE_NAME);
+    const file = path53.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
       { contacts: Array.from(this.contacts.values()) },
@@ -59858,52 +59953,52 @@ async function connectRemote(args) {
 // src/migrations/2026-05-20-flatten-sessions.ts
 var fs51 = __toESM(require("fs"), 1);
-var path53 = __toESM(require("path"), 1);
+var path54 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path53.join(dataDir, "sessions");
-  const flagPath = path53.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path54.join(dataDir, "sessions");
+  const flagPath = path54.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path53.join(sessionsDir, "default");
+  const defaultDir = path54.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path53.join(defaultDir, entry);
-      const dst = path53.join(sessionsDir, entry);
+      const src = path54.join(defaultDir, entry);
+      const dst = path54.join(sessionsDir, entry);
       fs51.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path53.join(sessionsDir, pid);
+    const personaDir = path54.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path53.join(personaDir, "owner");
+    const ownerSrc = path54.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path53.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      const ownerDst = path54.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
       fs51.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs51.renameSync(path53.join(ownerSrc, file), path53.join(ownerDst, file));
+        fs51.renameSync(path54.join(ownerSrc, file), path54.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path53.join(personaDir, "listener");
+    const listenerSrc = path54.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path53.join(dataDir, ".legacy", `listener-${pid}`);
+      const archiveDst = path54.join(dataDir, ".legacy", `listener-${pid}`);
       fs51.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs51.renameSync(path53.join(listenerSrc, file), path53.join(archiveDst, file));
+        fs51.renameSync(path54.join(listenerSrc, file), path54.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
@@ -59951,13 +60046,13 @@ function rmdirIfEmpty(p2) {
 // src/migrations/2026-08-18-drop-seeded-projects.ts
 var fs52 = __toESM(require("fs"), 1);
-var path54 = __toESM(require("path"), 1);
+var path55 = __toESM(require("path"), 1);
 var DROP_SEEDED_PROJECTS_FLAG = ".projects-seed-dropped.v1.done";
 function dropSeededProjects(opts) {
   fs52.mkdirSync(opts.dataDir, { recursive: true });
-  const flag = path54.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
+  const flag = path55.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
   if (fs52.existsSync(flag)) return { skipped: true, dropped: 0, backup: null };
-  const file = path54.join(opts.dataDir, "projects.json");
+  const file = path55.join(opts.dataDir, "projects.json");
   let raw = null;
   let dropped = 0;
   try {
@@ -59967,9 +60062,9 @@ function dropSeededProjects(opts) {
   }
   let backup = null;
   if (raw != null && dropped > 0) {
-    const dir = path54.join(opts.dataDir, "backups");
+    const dir = path55.join(opts.dataDir, "backups");
     fs52.mkdirSync(dir, { recursive: true });
-    backup = path54.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
+    backup = path55.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
     fs52.writeFileSync(backup, raw);
   }
   if (raw != null || dropped > 0) {
@@ -59981,10 +60076,10 @@ function dropSeededProjects(opts) {
 // src/transport/http-router.ts
 var import_node_fs36 = __toESM(require("fs"), 1);
-var import_node_path46 = __toESM(require("path"), 1);
+var import_node_path47 = __toESM(require("path"), 1);
 // src/attachment/mime.ts
-var import_node_path43 = __toESM(require("path"), 1);
+var import_node_path44 = __toESM(require("path"), 1);
 var TEXT_PLAIN = "text/plain; charset=utf-8";
 var EXT_TO_NATIVE_MIME = {
   // 图片
@@ -60091,7 +60186,7 @@ var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
   ".mk"
 ]);
 function lookupMime(filePathOrName) {
-  const ext = import_node_path43.default.extname(filePathOrName).toLowerCase();
+  const ext = import_node_path44.default.extname(filePathOrName).toLowerCase();
   if (EXT_TO_NATIVE_MIME[ext]) return EXT_TO_NATIVE_MIME[ext];
   if (TEXT_EXTENSIONS.has(ext)) return TEXT_PLAIN;
   return "application/octet-stream";
@@ -60162,7 +60257,7 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
 // src/attachment/upload.ts
 var import_node_fs35 = __toESM(require("fs"), 1);
-var import_node_path44 = __toESM(require("path"), 1);
+var import_node_path45 = __toESM(require("path"), 1);
 var import_node_crypto11 = __toESM(require("crypto"), 1);
 var import_promises10 = require("stream/promises");
 var UploadError = class extends Error {
@@ -60174,14 +60269,14 @@ var UploadError = class extends Error {
   code;
 };
 function assertValidFileName(fileName) {
-  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path44.default.basename(fileName)) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path45.default.basename(fileName)) {
     throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
   }
 }
 var HASH_PREFIX_LEN = 16;
 async function writeUploadedAttachment(args) {
   assertValidFileName(args.fileName);
-  const attachmentsRoot = import_node_path44.default.join(args.baseDir, ".attachments");
+  const attachmentsRoot = import_node_path45.default.join(args.baseDir, ".attachments");
   try {
     import_node_fs35.default.mkdirSync(attachmentsRoot, { recursive: true });
   } catch (err) {
@@ -60189,7 +60284,7 @@ async function writeUploadedAttachment(args) {
   }
   const hasher = import_node_crypto11.default.createHash("sha256");
   let actualSize = 0;
-  const tmpPath = import_node_path44.default.join(
+  const tmpPath = import_node_path45.default.join(
     attachmentsRoot,
     `.upload-${process.pid}-${Date.now()}-${import_node_crypto11.default.randomBytes(4).toString("hex")}`
   );
@@ -60224,7 +60319,7 @@ async function writeUploadedAttachment(args) {
     );
   }
   const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
-  const hashDir = import_node_path44.default.join(attachmentsRoot, attachmentId);
+  const hashDir = import_node_path45.default.join(attachmentsRoot, attachmentId);
   let finalFileName;
   let hashDirExists = false;
   try {
@@ -60242,7 +60337,7 @@ async function writeUploadedAttachment(args) {
     try {
       import_node_fs35.default.mkdirSync(hashDir, { recursive: true });
       finalFileName = args.fileName;
-      import_node_fs35.default.renameSync(tmpPath, import_node_path44.default.join(hashDir, finalFileName));
+      import_node_fs35.default.renameSync(tmpPath, import_node_path45.default.join(hashDir, finalFileName));
     } catch (err) {
       try {
         import_node_fs35.default.unlinkSync(tmpPath);
@@ -60251,7 +60346,7 @@ async function writeUploadedAttachment(args) {
       throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
     }
   }
-  const absPath = import_node_path44.default.join(hashDir, finalFileName);
+  const absPath = import_node_path45.default.join(hashDir, finalFileName);
   const relPath = absPath;
   args.groupFileStore.upsert(args.scope, args.sessionId, {
     relPath: absPath,
@@ -60266,7 +60361,7 @@ async function writeUploadedAttachment(args) {
 // src/extension/import.ts
 var import_promises11 = __toESM(require("fs/promises"), 1);
-var import_node_path45 = __toESM(require("path"), 1);
+var import_node_path46 = __toESM(require("path"), 1);
 var import_node_os15 = __toESM(require("os"), 1);
 var import_jszip = __toESM(require_lib3(), 1);
 var ImportError = class extends Error {
@@ -60284,7 +60379,7 @@ async function importZip(buf, root) {
     throw new ImportError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path45.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path46.default.isAbsolute(name)) {
       throw new ImportError("ZIP_INVALID", `unsafe zip entry path: ${name}`);
     }
   }
@@ -60317,7 +60412,7 @@ async function importZip(buf, root) {
       );
     }
   }
-  const destDir = import_node_path45.default.join(root, manifest.id);
+  const destDir = import_node_path46.default.join(root, manifest.id);
   let destExists = false;
   try {
     await import_promises11.default.access(destDir);
@@ -60327,15 +60422,15 @@ async function importZip(buf, root) {
   if (destExists) {
     throw new ImportError("ALREADY_EXISTS", `extension ${manifest.id} already installed`);
   }
-  const stage = await import_promises11.default.mkdtemp(import_node_path45.default.join(import_node_os15.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
+  const stage = await import_promises11.default.mkdtemp(import_node_path46.default.join(import_node_os15.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path45.default.join(stage, name);
+      const dest = import_node_path46.default.join(stage, name);
       if (entry.dir) {
         await import_promises11.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises11.default.mkdir(import_node_path45.default.dirname(dest), { recursive: true });
+      await import_promises11.default.mkdir(import_node_path46.default.dirname(dest), { recursive: true });
       const content = await entry.async("nodebuffer");
       await import_promises11.default.writeFile(dest, content);
     }
@@ -60365,7 +60460,7 @@ var SHARE_UI_ASSET_MIME = {
   ".wasm": "application/wasm"
 };
 function shareUiAssetMime(filePath) {
-  const ext = import_node_path46.default.extname(filePath).toLowerCase();
+  const ext = import_node_path47.default.extname(filePath).toLowerCase();
   return SHARE_UI_ASSET_MIME[ext] ?? lookupMime(filePath);
 }
 var AUTHED_RPC_ROUTE_PREFIX = "/rpc/";
@@ -60464,7 +60559,7 @@ function isValidUploadFileName(fileName) {
   if (fileName === "." || fileName === "..") return false;
   if (fileName.startsWith(".")) return false;
   if (fileName.includes("/") || fileName.includes("\\")) return false;
-  return fileName === import_node_path46.default.basename(fileName);
+  return fileName === import_node_path47.default.basename(fileName);
 }
 function createHttpRouter(deps) {
   return async (req, res) => {
@@ -60700,7 +60795,7 @@ function createHttpRouter(deps) {
         sendHtml(res, statusByCode[r.code], loader.renderErrorHtml(r.code, msgByCode[r.code]));
         return true;
       }
-      sendHtml(res, 200, loader.renderViewerHtml(import_node_path46.default.basename(r.absPath)));
+      sendHtml(res, 200, loader.renderViewerHtml(import_node_path47.default.basename(r.absPath)));
       return true;
     }
     const ctx = deps.authResolver.resolveFromHeader(
@@ -60821,7 +60916,7 @@ function createHttpRouter(deps) {
         return true;
       }
       let absPath;
-      if (import_node_path46.default.isAbsolute(pathParam)) {
+      if (import_node_path47.default.isAbsolute(pathParam)) {
         absPath = pathParam;
       } else if (deps.sessionStore) {
         const file = deps.sessionStore.read(sid);
@@ -60829,7 +60924,7 @@ function createHttpRouter(deps) {
           sendJson(res, 404, { code: "NOT_FOUND", message: `session ${sid} not found` });
           return true;
         }
-        absPath = import_node_path46.default.join(file.cwd, pathParam);
+        absPath = import_node_path47.default.join(file.cwd, pathParam);
       } else {
         sendJson(res, 501, withCtx(ctx, { code: "NOT_IMPLEMENTED", message: "sessionStore not wired" }));
         return true;
@@ -60931,7 +61026,7 @@ function streamFile(res, absPath, logger) {
     return;
   }
   const mime = lookupMime(absPath);
-  const basename2 = import_node_path46.default.basename(absPath);
+  const basename2 = import_node_path47.default.basename(absPath);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": String(stat.size),
@@ -60949,7 +61044,7 @@ function streamFile(res, absPath, logger) {
 // src/attachment/gc.ts
 var import_node_fs37 = __toESM(require("fs"), 1);
-var import_node_path47 = __toESM(require("path"), 1);
+var import_node_path48 = __toESM(require("path"), 1);
 var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
 function runAttachmentGc(args) {
   const now = (args.now ?? Date.now)();
@@ -60958,12 +61053,12 @@ function runAttachmentGc(args) {
   for (const { scope, sessionId } of args.sessionScopes) {
     for (const entry of args.groupFileStore.list(scope, sessionId)) {
       if (entry.stale) continue;
-      if (import_node_path47.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+      if (import_node_path48.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
     }
   }
   const visited = /* @__PURE__ */ new Set();
   for (const { scope, sessionId } of args.sessionScopes) {
-    const legacyDir = args.getSessionCwd?.(sessionId) ?? import_node_path47.default.join(
+    const legacyDir = args.getSessionCwd?.(sessionId) ?? import_node_path48.default.join(
       args.dataDir,
       "sessions",
       ...scopeSubPath(scope).map(safeFileName),
@@ -60976,7 +61071,7 @@ function runAttachmentGc(args) {
       return true;
     });
     for (const rootDir of roots) {
-      const attRoot = import_node_path47.default.join(rootDir, ".attachments");
+      const attRoot = import_node_path48.default.join(rootDir, ".attachments");
       let hashDirs;
       try {
         hashDirs = import_node_fs37.default.readdirSync(attRoot);
@@ -60986,7 +61081,7 @@ function runAttachmentGc(args) {
         continue;
       }
       for (const hashDir of hashDirs) {
-        const hashDirAbs = import_node_path47.default.join(attRoot, hashDir);
+        const hashDirAbs = import_node_path48.default.join(attRoot, hashDir);
         let files;
         try {
           files = import_node_fs37.default.readdirSync(hashDirAbs);
@@ -60994,7 +61089,7 @@ function runAttachmentGc(args) {
           continue;
         }
         for (const name of files) {
-          const file = import_node_path47.default.join(hashDirAbs, name);
+          const file = import_node_path48.default.join(hashDirAbs, name);
           let stat;
           try {
             stat = import_node_fs37.default.statSync(file);
@@ -61026,7 +61121,7 @@ function runAttachmentGc(args) {
 // src/attachment/group.ts
 var import_node_fs38 = __toESM(require("fs"), 1);
-var import_node_path48 = __toESM(require("path"), 1);
+var import_node_path49 = __toESM(require("path"), 1);
 var import_node_crypto12 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
@@ -61038,11 +61133,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path48.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path49.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path48.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path49.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -61077,7 +61172,7 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs38.default.mkdirSync(import_node_path48.default.dirname(file), { recursive: true });
+    import_node_fs38.default.mkdirSync(import_node_path49.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     import_node_fs38.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
     import_node_fs38.default.renameSync(tmp, file);
@@ -61167,9 +61262,9 @@ var GroupFileStore = class {
 // src/discovery/state-file.ts
 var import_node_fs39 = __toESM(require("fs"), 1);
-var import_node_path49 = __toESM(require("path"), 1);
+var import_node_path50 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path49.default.join(dataDir, "state.json");
+  return import_node_path50.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -61205,7 +61300,7 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs39.default.mkdirSync(import_node_path49.default.dirname(this.file), { recursive: true });
+    import_node_fs39.default.mkdirSync(import_node_path50.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
     import_node_fs39.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
     import_node_fs39.default.renameSync(tmp, this.file);
@@ -61233,13 +61328,13 @@ function readSpawnedByDesktopFromEnv(env = process.env) {
 // src/tunnel/tunnel-manager.ts
 var import_node_fs43 = __toESM(require("fs"), 1);
-var import_node_path53 = __toESM(require("path"), 1);
+var import_node_path54 = __toESM(require("path"), 1);
 var import_node_crypto13 = __toESM(require("crypto"), 1);
 var import_node_child_process13 = require("child_process");
 // src/tunnel/tunnel-store.ts
 var import_node_fs40 = __toESM(require("fs"), 1);
-var import_node_path50 = __toESM(require("path"), 1);
+var import_node_path51 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -61258,7 +61353,7 @@ var TunnelStore = class {
     }
   }
   async set(v2) {
-    const dir = import_node_path50.default.dirname(this.filePath);
+    const dir = import_node_path51.default.dirname(this.filePath);
     await import_node_fs40.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
@@ -61370,7 +61465,7 @@ function escape(v2) {
 // src/tunnel/frpc-binary.ts
 var import_node_fs41 = __toESM(require("fs"), 1);
 var import_node_os16 = __toESM(require("os"), 1);
-var import_node_path51 = __toESM(require("path"), 1);
+var import_node_path52 = __toESM(require("path"), 1);
 var import_node_child_process11 = require("child_process");
 var import_node_stream3 = require("stream");
 var import_promises12 = require("stream/promises");
@@ -61409,13 +61504,13 @@ async function ensureFrpcBinary(opts) {
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path51.default.join(opts.dataDir, "bin");
+  const binDir = import_node_path52.default.join(opts.dataDir, "bin");
   import_node_fs41.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path51.default.join(binDir, "frpc");
+  const stableBin = import_node_path52.default.join(binDir, "frpc");
   if (import_node_fs41.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path51.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path52.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -61441,7 +61536,7 @@ function cleanupStaleArtifacts(binDir) {
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path51.default.join(binDir, name);
+      const full = import_node_path52.default.join(binDir, name);
       try {
         import_node_fs41.default.rmSync(full, { recursive: true, force: true });
       } catch {
@@ -61467,7 +61562,7 @@ async function downloadToFile(url, dest, fetchImpl) {
   await (0, import_promises12.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path51.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  const work = import_node_path52.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
   import_node_fs41.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve9, reject) => {
@@ -61476,7 +61571,7 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
       proc.on("exit", (code) => code === 0 ? resolve9() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path51.default.join(work, dirName, "frpc");
+    const src = import_node_path52.default.join(work, dirName, "frpc");
     if (!import_node_fs41.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
@@ -61488,10 +61583,10 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
 // src/tunnel/frpc-process.ts
 var import_node_fs42 = __toESM(require("fs"), 1);
-var import_node_path52 = __toESM(require("path"), 1);
+var import_node_path53 = __toESM(require("path"), 1);
 var import_node_child_process12 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path52.default.join(dataDir, "frpc.pid");
+  return import_node_path53.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
@@ -61533,7 +61628,7 @@ function defaultSleep2(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path52.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path53.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -61605,7 +61700,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path53.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path54.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -61732,7 +61827,7 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path53.default.join(this.deps.dataDir, "frpc.toml");
+      const tomlPath = import_node_path54.default.join(this.deps.dataDir, "frpc.toml");
       const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto13.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
@@ -61747,9 +61842,9 @@ var TunnelManager = class {
       const proc = (this.deps.spawnImpl ?? import_node_child_process13.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logDir = import_node_path53.default.join(this.deps.dataDir, "log");
+      const logDir = import_node_path54.default.join(this.deps.dataDir, "log");
       import_node_fs43.default.mkdirSync(logDir, { recursive: true });
-      const logFilePath = import_node_path53.default.join(logDir, "frpc.log");
+      const logFilePath = import_node_path54.default.join(logDir, "frpc.log");
       const logStream = import_node_fs43.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
@@ -61833,15 +61928,15 @@ async function waitForFrpcReady(proc, timeoutMs) {
 // src/tunnel/device-key.ts
 var import_node_os17 = __toESM(require("os"), 1);
-var import_node_path54 = __toESM(require("path"), 1);
+var import_node_path55 = __toESM(require("path"), 1);
 var import_node_crypto14 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os17.default.hostname();
   const uid = opts.uid ?? (typeof import_node_os17.default.userInfo === "function" ? import_node_os17.default.userInfo().uid : 0);
   const home = opts.home ?? import_node_os17.default.homedir();
-  const defaultDataDir = import_node_path54.default.resolve(import_node_path54.default.join(home, ".clawd"));
-  const normalizedDataDir = opts.dataDir ? import_node_path54.default.resolve(opts.dataDir) : null;
+  const defaultDataDir = import_node_path55.default.resolve(import_node_path55.default.join(home, ".clawd"));
+  const normalizedDataDir = opts.dataDir ? import_node_path55.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
   return import_node_crypto14.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
@@ -61849,11 +61944,11 @@ function deriveStableDeviceKey(opts = {}) {
 // src/auth-store.ts
 var import_node_fs44 = __toESM(require("fs"), 1);
-var import_node_path55 = __toESM(require("path"), 1);
+var import_node_path56 = __toESM(require("path"), 1);
 var import_node_crypto15 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path55.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path56.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -61905,7 +62000,7 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs44.default.mkdirSync(import_node_path55.default.dirname(file), { recursive: true });
+  import_node_fs44.default.mkdirSync(import_node_path56.default.dirname(file), { recursive: true });
   import_node_fs44.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
     import_node_fs44.default.chmodSync(file, 384);
@@ -61916,10 +62011,10 @@ function writeAuthFile(file, content) {
 // src/owner-profile.ts
 var import_node_fs45 = __toESM(require("fs"), 1);
 var import_node_os18 = __toESM(require("os"), 1);
-var import_node_path56 = __toESM(require("path"), 1);
+var import_node_path57 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function profilePath(dataDir) {
-  return import_node_path56.default.join(dataDir, PROFILE_FILENAME);
+  return import_node_path57.default.join(dataDir, PROFILE_FILENAME);
 }
 function loadOwnerProfile(dataDir) {
   let raw;
@@ -61957,12 +62052,12 @@ function loadOwnerDisplayName(dataDir) {
 // src/feishu-auth/owner-identity-store.ts
 var import_node_fs46 = __toESM(require("fs"), 1);
-var import_node_path57 = __toESM(require("path"), 1);
+var import_node_path58 = __toESM(require("path"), 1);
 var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
 var OwnerIdentityStore = class {
   file;
   constructor(dataDir) {
-    this.file = import_node_path57.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
+    this.file = import_node_path58.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
   }
   read() {
     let raw;
@@ -61995,7 +62090,7 @@ var OwnerIdentityStore = class {
     };
   }
   write(record3) {
-    import_node_fs46.default.mkdirSync(import_node_path57.default.dirname(this.file), { recursive: true });
+    import_node_fs46.default.mkdirSync(import_node_path58.default.dirname(this.file), { recursive: true });
     import_node_fs46.default.writeFileSync(this.file, JSON.stringify(record3, null, 2), { mode: 384 });
     try {
       import_node_fs46.default.chmodSync(this.file, 384);
@@ -62141,9 +62236,9 @@ var CentralClientError = class extends Error {
   code;
   cause;
 };
-async function centralRequest(opts, path99, init) {
+async function centralRequest(opts, path100, init) {
   const f = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}${path99}`;
+  const url = `${opts.api.replace(/\/+$/, "")}${path100}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
   let res;
@@ -62581,7 +62676,7 @@ function verifyConnectToken(args) {
 // src/feishu-auth/server-key.ts
 var fs66 = __toESM(require("fs"), 1);
-var path70 = __toESM(require("path"), 1);
+var path71 = __toESM(require("path"), 1);
 var FILE_NAME2 = "server-signing-key.json";
 var ServerKeyStore = class {
   constructor(dataDir) {
@@ -62589,7 +62684,7 @@ var ServerKeyStore = class {
   }
   dataDir;
   filePath() {
-    return path70.join(this.dataDir, FILE_NAME2);
+    return path71.join(this.dataDir, FILE_NAME2);
   }
   /** 读缓存的公钥；无缓存 / 损坏 → null（调用方决定是否触发拉取） */
   read() {
@@ -62624,7 +62719,7 @@ var ServerKeyStore = class {
 init_protocol();
 // src/handlers/index.ts
-var import_node_path73 = __toESM(require("path"), 1);
+var import_node_path74 = __toESM(require("path"), 1);
 // src/handlers/session.ts
 init_protocol();
@@ -62632,7 +62727,7 @@ init_protocol();
 // src/session/fork.ts
 var import_node_fs47 = __toESM(require("fs"), 1);
 var import_node_os19 = __toESM(require("os"), 1);
-var import_node_path58 = __toESM(require("path"), 1);
+var import_node_path59 = __toESM(require("path"), 1);
 var import_node_crypto17 = require("crypto");
 init_claude_history();
 function readJsonlEntries(file) {
@@ -62649,19 +62744,19 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path58.default.join(import_node_os19.default.homedir(), ".claude");
-  let projectDir = import_node_path58.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  let sourceFile = import_node_path58.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  const baseDir = input.baseDir ?? import_node_path59.default.join(import_node_os19.default.homedir(), ".claude");
+  let projectDir = import_node_path59.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  let sourceFile = import_node_path59.default.join(projectDir, `${input.toolSessionId}.jsonl`);
   if (!import_node_fs47.default.existsSync(sourceFile)) {
     const found = findTranscriptByToolSessionId(
-      import_node_path58.default.join(baseDir, "projects"),
+      import_node_path59.default.join(baseDir, "projects"),
       input.toolSessionId
     );
     if (!found) {
       throw new Error(`fork: source transcript not found: ${sourceFile}`);
     }
     sourceFile = found;
-    projectDir = import_node_path58.default.dirname(found);
+    projectDir = import_node_path59.default.dirname(found);
   }
   const entries = readJsonlEntries(sourceFile);
   const mainEntries = entries.filter((e) => e.isSidechain !== true);
@@ -62690,8 +62785,8 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const outDir = input.targetCwd ? import_node_path58.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
-  const forkedFilePath = import_node_path58.default.join(outDir, `${forkedToolSessionId}.jsonl`);
+  const outDir = input.targetCwd ? import_node_path59.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
+  const forkedFilePath = import_node_path59.default.join(outDir, `${forkedToolSessionId}.jsonl`);
   import_node_fs47.default.mkdirSync(outDir, { recursive: true });
   import_node_fs47.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
@@ -62701,16 +62796,16 @@ function forkSession(input) {
 var import_node_fs48 = __toESM(require("fs"), 1);
 var import_promises13 = __toESM(require("fs/promises"), 1);
 var import_node_os20 = __toESM(require("os"), 1);
-var import_node_path59 = __toESM(require("path"), 1);
+var import_node_path60 = __toESM(require("path"), 1);
 var import_node_module = require("module");
 var import_node_child_process14 = require("child_process");
 var import_meta5 = {};
 function defaultRoots() {
   const home = import_node_os20.default.homedir();
   return {
-    claudeProjectsDir: import_node_path59.default.join(home, ".claude", "projects"),
-    codexDir: import_node_path59.default.join(home, ".codex"),
-    clawdDir: import_node_path59.default.join(home, ".clawd")
+    claudeProjectsDir: import_node_path60.default.join(home, ".claude", "projects"),
+    codexDir: import_node_path60.default.join(home, ".codex"),
+    clawdDir: import_node_path60.default.join(home, ".clawd")
   };
 }
 function width(s) {
@@ -62778,13 +62873,13 @@ async function scanClaude(roots) {
     if (!d.isDirectory()) continue;
     let files;
     try {
-      files = import_node_fs48.default.readdirSync(import_node_path59.default.join(roots.claudeProjectsDir, d.name));
+      files = import_node_fs48.default.readdirSync(import_node_path60.default.join(roots.claudeProjectsDir, d.name));
     } catch {
       continue;
     }
     for (const name of files) {
       if (!name.endsWith(".jsonl")) continue;
-      const file = import_node_path59.default.join(roots.claudeProjectsDir, d.name, name);
+      const file = import_node_path60.default.join(roots.claudeProjectsDir, d.name, name);
       let st;
       try {
         st = import_node_fs48.default.statSync(file);
@@ -62914,7 +63009,7 @@ async function codexFromRows(rows) {
 async function scanCodex(roots) {
   let dbs = [];
   try {
-    dbs = import_node_fs48.default.readdirSync(roots.codexDir).filter((n) => /^state_.*\.sqlite$/.test(n)).sort().map((n) => import_node_path59.default.join(roots.codexDir, n));
+    dbs = import_node_fs48.default.readdirSync(roots.codexDir).filter((n) => /^state_.*\.sqlite$/.test(n)).sort().map((n) => import_node_path60.default.join(roots.codexDir, n));
   } catch {
   }
   if (!dbs.length) return [];
@@ -62923,14 +63018,14 @@ async function scanCodex(roots) {
 }
 async function scanExternalSessions(rootsIn) {
   const roots = { ...defaultRoots(), ...rootsIn };
-  const personaRoot = import_node_path59.default.join(roots.clawdDir, "personas");
+  const personaRoot = import_node_path60.default.join(roots.clawdDir, "personas");
   const all = [...await scanClaude(roots), ...await scanCodex(roots)];
   const out = [];
   for (const c of all) {
     if (c.skip) continue;
     if (c.turns < 1) continue;
     if (!c.cwd || !isDir2(c.cwd)) continue;
-    if (c.cwd === roots.clawdDir || c.cwd === personaRoot || c.cwd.startsWith(personaRoot + import_node_path59.default.sep) || c.cwd.startsWith(roots.clawdDir + import_node_path59.default.sep)) {
+    if (c.cwd === roots.clawdDir || c.cwd === personaRoot || c.cwd.startsWith(personaRoot + import_node_path60.default.sep) || c.cwd.startsWith(roots.clawdDir + import_node_path60.default.sep)) {
       continue;
     }
     out.push({
@@ -62948,12 +63043,12 @@ async function scanExternalSessions(rootsIn) {
 // src/session/import-ledger.ts
 var import_node_fs49 = __toESM(require("fs"), 1);
-var import_node_path60 = __toESM(require("path"), 1);
+var import_node_path61 = __toESM(require("path"), 1);
 var LEDGER_FILENAME = "session-import-ledger.json";
 function readImportLedger(dataDir) {
   try {
     const parsed = JSON.parse(
-      import_node_fs49.default.readFileSync(import_node_path60.default.join(dataDir, LEDGER_FILENAME), "utf8")
+      import_node_fs49.default.readFileSync(import_node_path61.default.join(dataDir, LEDGER_FILENAME), "utf8")
     );
     return Array.isArray(parsed) ? parsed : [];
   } catch {
@@ -62961,7 +63056,7 @@ function readImportLedger(dataDir) {
   }
 }
 function appendImportLedger(dataDir, entry) {
-  const file = import_node_path60.default.join(dataDir, LEDGER_FILENAME);
+  const file = import_node_path61.default.join(dataDir, LEDGER_FILENAME);
   const entries = readImportLedger(dataDir);
   entries.push(entry);
   import_node_fs49.default.writeFileSync(file, JSON.stringify(entries, null, 2), { encoding: "utf8", mode: 384 });
@@ -62969,7 +63064,7 @@ function appendImportLedger(dataDir, entry) {
 // src/tools/transcript-search.ts
 var import_node_fs50 = __toESM(require("fs"), 1);
-var import_node_path61 = __toESM(require("path"), 1);
+var import_node_path62 = __toESM(require("path"), 1);
 var SNIPPET_PAD = 60;
 var INJECTED_ENVELOPE_RE = /^<(system-reminder|command-name|command-message|command-args|local-command-stdout|local-command-stderr|task-notification|user-prompt-submit-hook|environment_context|user_instructions)\b/;
 var CODEX_WRAPPER_RE = /<(related-dir|environment_context|user_instructions)>[\s\S]*?<\/\1>/g;
@@ -63062,7 +63157,7 @@ function createCodexRolloutLocator(roots) {
       return;
     }
     for (const entry of entries) {
-      const full = import_node_path61.default.join(dir, entry.name);
+      const full = import_node_path62.default.join(dir, entry.name);
       if (entry.isDirectory()) {
         walk2(full, into);
         continue;
@@ -63083,15 +63178,15 @@ function createCodexRolloutLocator(roots) {
 // src/handlers/session.ts
 init_protocol();
 var import_node_os21 = __toESM(require("os"), 1);
-var import_node_path62 = __toESM(require("path"), 1);
+var import_node_path63 = __toESM(require("path"), 1);
 function canReadSearchHit(ctx, file) {
   if (!ctx || ctx.principal.kind === "owner") return true;
   return canAccessPersona(ctx.grants, file.ownerPersonaId, "read") && file.creatorPrincipalId === ctx.principal.id;
 }
 var DEFAULT_SEARCH_LIMIT = 9;
 function codexRolloutRoots(dataDir) {
-  const roots = [import_node_path62.default.join(import_node_os21.default.homedir(), ".codex", "sessions")];
-  if (dataDir) roots.push(import_node_path62.default.join(dataDir, "codex-home", "sessions"));
+  const roots = [import_node_path63.default.join(import_node_os21.default.homedir(), ".codex", "sessions")];
+  if (dataDir) roots.push(import_node_path63.default.join(dataDir, "codex-home", "sessions"));
   return roots;
 }
 function buildSessionHandlers(deps) {
@@ -63640,7 +63735,7 @@ function buildPermissionHandlers(deps) {
 }
 // src/handlers/history.ts
-var path77 = __toESM(require("path"), 1);
+var path78 = __toESM(require("path"), 1);
 init_protocol();
 // src/session/recent-dirs.ts
@@ -63658,7 +63753,7 @@ function listRecentDirs(store, limit = 50) {
 }
 // src/permission/persona-paths.ts
-var path76 = __toESM(require("path"), 1);
+var path77 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -63671,42 +63766,42 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read", userWorkDir) {
-  const target = path76.resolve(absPath);
+  const target = path77.resolve(absPath);
   if (userWorkDir) {
-    const u = path76.resolve(userWorkDir);
-    const usep = u.endsWith(path76.sep) ? "" : path76.sep;
+    const u = path77.resolve(userWorkDir);
+    const usep = u.endsWith(path77.sep) ? "" : path77.sep;
     if (target === u || target.startsWith(u + usep)) return true;
   }
-  const root = path76.resolve(personaRoot);
-  const sep4 = root.endsWith(path76.sep) ? "" : path76.sep;
+  const root = path77.resolve(personaRoot);
+  const sep4 = root.endsWith(path77.sep) ? "" : path77.sep;
   if (!target.startsWith(root + sep4)) return false;
-  const rel = path76.relative(root, target);
+  const rel = path77.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId2 = rel.split(path76.sep)[0];
+  const personaId2 = rel.split(path77.sep)[0];
   if (!personaId2) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId2);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path76.resolve(personaRoot);
-  const target = path76.resolve(absPath);
-  const sep4 = root.endsWith(path76.sep) ? "" : path76.sep;
+  const root = path77.resolve(personaRoot);
+  const target = path77.resolve(absPath);
+  const sep4 = root.endsWith(path77.sep) ? "" : path77.sep;
   if (!target.startsWith(root + sep4)) return null;
-  const rel = path76.relative(root, target);
+  const rel = path77.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path76.sep)[0];
+  const id = rel.split(path77.sep)[0];
   return id || null;
 }
 function isPathWithin(dir, absPath) {
-  const d = path76.resolve(dir);
-  const t = path76.resolve(absPath);
-  const sep4 = d.endsWith(path76.sep) ? "" : path76.sep;
+  const d = path77.resolve(dir);
+  const t = path77.resolve(absPath);
+  const sep4 = d.endsWith(path77.sep) ? "" : path77.sep;
   return t === d || t.startsWith(d + sep4);
 }
 function isPathInGuestBoundary(personaRoot, personaId2, userWorkDir, absPath) {
   if (userWorkDir && isPathWithin(userWorkDir, absPath)) return true;
-  return personaIdFromPath(path76.resolve(absPath), personaRoot) === personaId2;
+  return personaIdFromPath(path77.resolve(absPath), personaRoot) === personaId2;
 }
 // src/handlers/history.ts
@@ -63759,7 +63854,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path77.join(personaRoot, pid),
+          path78.join(personaRoot, pid),
           personaRoot,
           "read",
           userWorkDir
@@ -63771,7 +63866,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path77.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
+    assertGuestPath(ctx, path78.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -63819,14 +63914,14 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path77.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
+    assertGuestPath(ctx, path78.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagents");
     const subs = await historyReaderForToolSession(args.toolSessionId).listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path77.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
+    assertGuestPath(ctx, path78.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagent-read");
     const res = await historyReaderForToolSession(args.toolSessionId).readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
@@ -63836,7 +63931,7 @@ function buildHistoryHandlers(deps) {
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path77.resolve(d.cwd), personaRoot, "read", userWorkDir)
+        (d) => isGuestPathAllowed(ctx.grants, path78.resolve(d.cwd), personaRoot, "read", userWorkDir)
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -63855,15 +63950,15 @@ function buildHistoryHandlers(deps) {
 // src/handlers/projects.ts
 var fs71 = __toESM(require("fs"), 1);
 var os23 = __toESM(require("os"), 1);
-var path78 = __toESM(require("path"), 1);
+var path79 = __toESM(require("path"), 1);
 var import_node_child_process15 = require("child_process");
 init_protocol();
-var DEFAULT_PROJECTS_ROOT = path78.join(os23.homedir(), "Documents", "ChatGPT");
+var DEFAULT_PROJECTS_ROOT = path79.join(os23.homedir(), "Documents", "ChatGPT");
 function allocateDir(root, name) {
-  let candidate = path78.join(root, name);
+  let candidate = path79.join(root, name);
   let n = 2;
   while (fs71.existsSync(candidate)) {
-    candidate = path78.join(root, `${name} ${n}`);
+    candidate = path79.join(root, `${name} ${n}`);
     n += 1;
   }
   return candidate;
@@ -63948,7 +64043,7 @@ function buildProjectHandlers(deps) {
 }
 // src/handlers/workspace.ts
-var path79 = __toESM(require("path"), 1);
+var path80 = __toESM(require("path"), 1);
 var os24 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
@@ -63990,22 +64085,22 @@ function buildWorkspaceHandlers(deps) {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
     const fallbackCwd = isGuest && personaRoot ? personaRoot : os24.homedir();
-    const resolvedCwd = path79.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path79.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const resolvedCwd = path80.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path80.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list", usersRoot);
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path79.isAbsolute(args.path) ? path79.resolve(args.path) : path79.resolve(args.cwd, args.path);
+    const target = path80.isAbsolute(args.path) ? path80.resolve(args.path) : path80.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read", usersRoot);
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path79.resolve(args.cwd);
+    const cwdAbs = path80.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list", usersRoot);
     const list2 = await getSkillsForTool(args.tool ?? "claude", cwdAbs);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -64017,7 +64112,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path79.resolve(args.cwd);
+    const cwdAbs = path80.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list", usersRoot);
     if (args.tool === "codex") {
       return { response: { type: "agents:list", agents: [] } };
@@ -64039,18 +64134,18 @@ function buildWorkspaceHandlers(deps) {
 }
 // src/handlers/git.ts
-var path81 = __toESM(require("path"), 1);
+var path82 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 // src/workspace/git.ts
 var import_node_child_process16 = require("child_process");
 var import_node_fs51 = __toESM(require("fs"), 1);
-var import_node_path63 = __toESM(require("path"), 1);
+var import_node_path64 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process16.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path63.default.resolve(p2);
+  const resolved = import_node_path64.default.resolve(p2);
   try {
     return import_node_fs51.default.realpathSync(resolved);
   } catch {
@@ -64126,7 +64221,7 @@ async function listGitBranches(cwd) {
 function assertGuestCwd(ctx, cwd, personaRoot, method, usersRoot) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
   const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
-  if (!isGuestPathAllowed(ctx.grants, path81.resolve(cwd), personaRoot, "read", userWorkDir)) {
+  if (!isGuestPathAllowed(ctx.grants, path82.resolve(cwd), personaRoot, "read", userWorkDir)) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -64974,21 +65069,21 @@ function computeMethodAccess(args) {
 }
 // src/version.ts
-var version = "0.2.468".length > 0 ? "0.2.468" : "dev";
+var version = "0.2.469".length > 0 ? "0.2.469" : "dev";
 // src/cli-probe/probe.ts
 var fs73 = __toESM(require("fs"), 1);
-var path82 = __toESM(require("path"), 1);
+var path83 = __toESM(require("path"), 1);
 var PKG_NAME = "@clawos-dev/clawd";
 var BIN_NAME = "clawd";
 var MAX_PARENT_HOPS = 5;
 function probeGlobalCli(pathEnv) {
   if (!pathEnv) return null;
-  for (const dir of pathEnv.split(path82.delimiter)) {
+  for (const dir of pathEnv.split(path83.delimiter)) {
     if (!dir) continue;
     let real;
     try {
-      real = fs73.realpathSync(path82.join(dir, BIN_NAME));
+      real = fs73.realpathSync(path83.join(dir, BIN_NAME));
     } catch {
       continue;
     }
@@ -64998,15 +65093,15 @@ function probeGlobalCli(pathEnv) {
   return null;
 }
 function readOwnPackageVersion(entryPath) {
-  let dir = path82.dirname(entryPath);
+  let dir = path83.dirname(entryPath);
   for (let i = 0; i < MAX_PARENT_HOPS; i++) {
     try {
-      const raw = fs73.readFileSync(path82.join(dir, "package.json"), "utf8");
+      const raw = fs73.readFileSync(path83.join(dir, "package.json"), "utf8");
       const pkg = JSON.parse(raw);
       if (pkg.name !== PKG_NAME) return null;
       return typeof pkg.version === "string" && pkg.version ? pkg.version : null;
     } catch {
-      const parent = path82.dirname(dir);
+      const parent = path83.dirname(dir);
       if (parent === dir) return null;
       dir = parent;
     }
@@ -65178,7 +65273,7 @@ function buildPersonaHandlers(deps) {
 }
 // src/handlers/attachment.ts
-var import_node_path64 = __toESM(require("path"), 1);
+var import_node_path65 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -65258,12 +65353,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path64.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path64.default.isAbsolute(args.relPath) ? import_node_path64.default.resolve(args.relPath) : import_node_path64.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path65.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path65.default.isAbsolute(args.relPath) ? import_node_path65.default.resolve(args.relPath) : import_node_path65.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.signUrl", "group-acl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path64.default.isAbsolute(e.relPath) ? import_node_path64.default.resolve(e.relPath) : import_node_path64.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path65.default.isAbsolute(e.relPath) ? import_node_path65.default.resolve(e.relPath) : import_node_path65.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -65288,7 +65383,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path64.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
+    assertGuestAttachmentPath(ctx, import_node_path65.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -65303,8 +65398,8 @@ function buildAttachmentHandlers(deps) {
     if (!scope) {
       throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, `session ${args.sessionId} not found`);
     }
-    const cwdAbs = import_node_path64.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
-    const candidateAbs = import_node_path64.default.isAbsolute(args.relPath) ? import_node_path64.default.resolve(args.relPath) : import_node_path64.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path65.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
+    const candidateAbs = import_node_path65.default.isAbsolute(args.relPath) ? import_node_path65.default.resolve(args.relPath) : import_node_path65.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.groupAdd", "cwd-subtree");
     const from = args.origin === "agent" ? "agent" : ctx?.principal.kind === "owner" ? "owner" : "agent";
     const size = 0;
@@ -65363,19 +65458,19 @@ function buildAttachmentHandlers(deps) {
 // src/handlers/extension.ts
 var import_promises17 = __toESM(require("fs/promises"), 1);
-var import_node_path69 = __toESM(require("path"), 1);
+var import_node_path70 = __toESM(require("path"), 1);
 init_protocol();
 // src/extension/bundle-zip.ts
 var import_promises14 = __toESM(require("fs/promises"), 1);
-var import_node_path65 = __toESM(require("path"), 1);
+var import_node_path66 = __toESM(require("path"), 1);
 var import_node_crypto18 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
   const zip = new import_jszip2.default();
   for (const rel of entries) {
-    const abs = import_node_path65.default.join(dir, rel);
+    const abs = import_node_path66.default.join(dir, rel);
     const content = await import_promises14.default.readFile(abs);
     zip.file(rel, content, { date: FIXED_DATE });
   }
@@ -65396,7 +65491,7 @@ async function listFilesSorted(rootDir) {
   return out;
 }
 async function walk(absRoot, relPrefix, out) {
-  const dirAbs = import_node_path65.default.join(absRoot, relPrefix);
+  const dirAbs = import_node_path66.default.join(absRoot, relPrefix);
   const entries = await import_promises14.default.readdir(dirAbs, { withFileTypes: true });
   for (const e of entries) {
     if (IGNORE_BASENAMES.has(e.name)) continue;
@@ -65450,25 +65545,25 @@ function computePublishCheck(args) {
 // src/extension/install-flow.ts
 var import_promises15 = __toESM(require("fs/promises"), 1);
-var import_node_path67 = __toESM(require("path"), 1);
+var import_node_path68 = __toESM(require("path"), 1);
 var import_node_os24 = __toESM(require("os"), 1);
 var import_node_crypto19 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 // src/extension/paths.ts
 var import_node_os23 = __toESM(require("os"), 1);
-var import_node_path66 = __toESM(require("path"), 1);
+var import_node_path67 = __toESM(require("path"), 1);
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path66.default.join(import_node_os23.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path67.default.join(import_node_os23.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
-  return import_node_path66.default.join(clawdHomeRoot(override), "extensions");
+  return import_node_path67.default.join(clawdHomeRoot(override), "extensions");
 }
 function publishedChannelsFile(override) {
-  return import_node_path66.default.join(clawdHomeRoot(override), "extensions-published.json");
+  return import_node_path67.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
 function bundleCacheRoot(override) {
-  return import_node_path66.default.join(clawdHomeRoot(override), "extension-bundles");
+  return import_node_path67.default.join(clawdHomeRoot(override), "extension-bundles");
 }
 // src/extension/install-flow.ts
@@ -65495,7 +65590,7 @@ async function installFromChannel(args, deps) {
     throw new InstallError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path67.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path68.default.isAbsolute(name)) {
       throw new InstallError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -65527,7 +65622,7 @@ async function installFromChannel(args, deps) {
     );
   }
   const localExtId = namespacedExtId(ownerSlug, channelRef.ownerPrincipalId);
-  const destDir = import_node_path67.default.join(deps.extensionsRoot, localExtId);
+  const destDir = import_node_path68.default.join(deps.extensionsRoot, localExtId);
   let destExists = false;
   try {
     await import_promises15.default.access(destDir);
@@ -65541,16 +65636,16 @@ async function installFromChannel(args, deps) {
     );
   }
   const stage = await import_promises15.default.mkdtemp(
-    import_node_path67.default.join(import_node_os24.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+    import_node_path68.default.join(import_node_os24.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path67.default.join(stage, name);
+      const dest = import_node_path68.default.join(stage, name);
       if (entry.dir) {
         await import_promises15.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises15.default.mkdir(import_node_path67.default.dirname(dest), { recursive: true });
+      await import_promises15.default.mkdir(import_node_path68.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises15.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -65571,7 +65666,7 @@ async function installFromChannel(args, deps) {
 // src/extension/update-flow.ts
 var import_promises16 = __toESM(require("fs/promises"), 1);
-var import_node_path68 = __toESM(require("path"), 1);
+var import_node_path69 = __toESM(require("path"), 1);
 var import_node_os25 = __toESM(require("os"), 1);
 var import_node_crypto20 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
@@ -65588,11 +65683,11 @@ async function updateFromChannel(args, deps) {
     channelRef.extId,
     channelRef.ownerPrincipalId
   );
-  const liveDir = import_node_path68.default.join(deps.extensionsRoot, localExtId);
+  const liveDir = import_node_path69.default.join(deps.extensionsRoot, localExtId);
   const prevDir = `${liveDir}.prev`;
   let existingVersion;
   try {
-    const raw = await import_promises16.default.readFile(import_node_path68.default.join(liveDir, "manifest.json"), "utf8");
+    const raw = await import_promises16.default.readFile(import_node_path69.default.join(liveDir, "manifest.json"), "utf8");
     const parsed2 = ExtensionManifestSchema.safeParse(JSON.parse(raw));
     if (!parsed2.success) {
       throw new UpdateError(
@@ -65625,7 +65720,7 @@ async function updateFromChannel(args, deps) {
     throw new UpdateError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path68.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path69.default.isAbsolute(name)) {
       throw new UpdateError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -65660,16 +65755,16 @@ async function updateFromChannel(args, deps) {
   await import_promises16.default.rm(prevDir, { recursive: true, force: true });
   await import_promises16.default.rename(liveDir, prevDir);
   const stage = await import_promises16.default.mkdtemp(
-    import_node_path68.default.join(import_node_os25.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+    import_node_path69.default.join(import_node_os25.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path68.default.join(stage, name);
+      const dest = import_node_path69.default.join(stage, name);
       if (entry.dir) {
         await import_promises16.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises16.default.mkdir(import_node_path68.default.dirname(dest), { recursive: true });
+      await import_promises16.default.mkdir(import_node_path69.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises16.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -65736,7 +65831,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
       );
     }
   }
-  const manifestPath = import_node_path69.default.join(root, extId, "manifest.json");
+  const manifestPath = import_node_path70.default.join(root, extId, "manifest.json");
   const manifest = await readManifest(root, extId);
   const next = { ...manifest, version: newVersion };
   const tmp = `${manifestPath}.tmp`;
@@ -65744,7 +65839,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
   await import_promises17.default.rename(tmp, manifestPath);
 }
 async function readManifest(root, extId) {
-  const file = import_node_path69.default.join(root, extId, "manifest.json");
+  const file = import_node_path70.default.join(root, extId, "manifest.json");
   let raw;
   try {
     raw = await import_promises17.default.readFile(file, "utf8");
@@ -65828,7 +65923,7 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256, buffer } = await bundleExtensionDir(import_node_path69.default.join(deps.root, extId));
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path70.default.join(deps.root, extId));
     return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
@@ -66071,7 +66166,7 @@ var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
 // src/handlers/app-builder.ts
 init_protocol();
-var import_node_path70 = require("path");
+var import_node_path71 = require("path");
 var import_node_fs52 = require("fs");
 var DEFAULT_TEMPLATE = "nestjs-react";
 var DEV_SERVER_READY_TIMEOUT_MS = 3e4;
@@ -66218,13 +66313,13 @@ function buildAppBuilderHandlers(deps) {
       const created = await deps.createProjectOnDisk({
         store: userStore,
         name: f.name,
-        templateSrcDir: (0, import_node_path70.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE),
-        scaffoldScript: (0, import_node_path70.join)(deps.deployKitRoot, "scripts", "new-extension.sh"),
+        templateSrcDir: (0, import_node_path71.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE),
+        scaffoldScript: (0, import_node_path71.join)(deps.deployKitRoot, "scripts", "new-extension.sh"),
         reservedPorts,
         // 凭据只进 scaffold 子进程的 env，且**只给这个 persona 的 kit 模板声明要的那几个变量**
         // （M1b Step 5）。整表塞进去粒度只到「进程」——那会把 service-role key 交给一个用不到
         // 它的脚本。new-extension.sh 用它把模板的 `${VAR}` 渲成项目可跑的 server/.env。
-        extraEnv: secretsForKit(deps.readSecrets?.(), (0, import_node_path70.join)(personaRoot, "extension-kit")),
+        extraEnv: secretsForKit(deps.readSecrets?.(), (0, import_node_path71.join)(personaRoot, "extension-kit")),
         ...deps.logger ? { logger: deps.logger } : {}
       });
       project = created.project;
@@ -66423,7 +66518,7 @@ function buildAppBuilderHandlers(deps) {
       await userStore.clearPublishJob(args.name);
     }
     const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(boundSession.ownerPersonaId ?? "") : deps.personaRoot;
-    const scriptPath = (0, import_node_path70.join)(deps.deployKitRoot, "scripts", "publish.sh");
+    const scriptPath = (0, import_node_path71.join)(deps.deployKitRoot, "scripts", "publish.sh");
     deps.logger?.info("app-builder.publish.start", {
       name: args.name,
       sessionId: boundSession.sessionId,
@@ -66439,7 +66534,7 @@ function buildAppBuilderHandlers(deps) {
       // 凭据只进 publish.sh 这个子进程的 env，且只给它的 kit 模板声明要的那几个变量
       // （M1b Step 5）。那个进程里跑着 `eval "$BUILD_CMD"`——项目自带的构建命令会继承这份
       // env，多给一个变量就是多交一个凭据给它。personaRoot 上面已按绑定 session 的 persona 解析。
-      extraEnv: secretsForKit(deps.readSecrets?.(), (0, import_node_path70.join)(personaRoot, "extension-kit")),
+      extraEnv: secretsForKit(deps.readSecrets?.(), (0, import_node_path71.join)(personaRoot, "extension-kit")),
       hooks: {
         // 元数据每次写盘（publishJob 起落 / prodUrl 回填）后重推一帧：UI 渲染 PublishProgress
         // 三段 checklist 依赖 project.publishJob.status==='in-flight'，而 publishJob 字段只有
@@ -67175,7 +67270,7 @@ function buildVisitorHandlers(deps) {
 // src/extension/registry.ts
 var import_promises19 = __toESM(require("fs/promises"), 1);
-var import_node_path71 = __toESM(require("path"), 1);
+var import_node_path72 = __toESM(require("path"), 1);
 async function loadAll(root) {
   let entries;
   try {
@@ -67188,13 +67283,13 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path71.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path72.default.join(root, ent.name), ent.name));
   }
   records.sort((a, b2) => a.extId < b2.extId ? -1 : a.extId > b2.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path71.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path72.default.join(dir, "manifest.json");
   let raw;
   try {
     raw = await import_promises19.default.readFile(manifestPath, "utf8");
@@ -67239,7 +67334,7 @@ async function loadOne(dir, dirName) {
 // src/extension/uninstall.ts
 var import_promises20 = __toESM(require("fs/promises"), 1);
-var import_node_path72 = __toESM(require("path"), 1);
+var import_node_path73 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -67248,7 +67343,7 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path72.default.join(deps.root, deps.extId);
+  const dir = import_node_path73.default.join(deps.root, deps.extId);
   try {
     await import_promises20.default.access(dir);
   } catch {
@@ -67484,7 +67579,7 @@ function buildMethodHandlers(deps) {
       broadcast: deps.broadcastToOwners
     }),
     ...buildMasterHandlers({
-      authorityTablePath: import_node_path73.default.join(deps.masterDataDir, "master-authority.json")
+      authorityTablePath: import_node_path74.default.join(deps.masterDataDir, "master-authority.json")
     }),
     ...buildTopicHandlers({
       topicStore: deps.topicStore,
@@ -67530,8 +67625,8 @@ function refreshPathFromLoginShell() {
       timeout: 3e3,
       stdio: ["ignore", "pipe", "ignore"]
     });
-    const path99 = out.trim();
-    if (path99) process.env.PATH = path99;
+    const path100 = out.trim();
+    if (path100) process.env.PATH = path100;
   } catch {
   }
 }
@@ -67657,7 +67752,7 @@ function buildOnboardingHandlers(deps) {
 // src/app-builder-plugin/project-store.ts
 var import_node_fs53 = require("fs");
 var import_node_child_process21 = require("child_process");
-var import_node_path74 = require("path");
+var import_node_path75 = require("path");
 init_protocol();
 var PROJECTS_DIR = "projects";
 var META_FILE = ".clawd-project.json";
@@ -67687,14 +67782,14 @@ var ProjectStore = class {
   }
   /** projects/<name>/.clawd-project.json 路径 */
   metaPath(name) {
-    return (0, import_node_path74.join)(this.projectsRoot(), name, META_FILE);
+    return (0, import_node_path75.join)(this.projectsRoot(), name, META_FILE);
   }
   /** projects/<name>/ 目录路径（cwd 用） */
   projectDir(name) {
-    return (0, import_node_path74.join)(this.projectsRoot(), name);
+    return (0, import_node_path75.join)(this.projectsRoot(), name);
   }
   projectsRoot() {
-    return (0, import_node_path74.join)(this.root, PROJECTS_DIR);
+    return (0, import_node_path75.join)(this.root, PROJECTS_DIR);
   }
   async list() {
     let entries;
@@ -68200,7 +68295,7 @@ var PublishJobRegistry = class {
 // src/app-builder-plugin/publish-job-runner.ts
 var import_node_child_process23 = require("child_process");
 var import_node_fs54 = require("fs");
-var import_node_path75 = require("path");
+var import_node_path76 = require("path");
 // src/app-builder-plugin/publish-stage-parser.ts
 var STAGE_RE = /^\s*::stage::(build|deploy|verify)\s*$/;
@@ -68232,7 +68327,7 @@ async function startPublishJob(deps, args) {
     return { jobId: registry2.get(args.name).jobId, status: "already-publishing" };
   }
   const projDir = projectDir(args.name);
-  const logPath = (0, import_node_path75.join)(projDir, ".publish.log");
+  const logPath = (0, import_node_path76.join)(projDir, ".publish.log");
   let logStream = null;
   try {
     logStream = (0, import_node_fs54.createWriteStream)(logPath, { flags: "w" });
@@ -68579,9 +68674,9 @@ async function recoverInterruptedPublishJobs(store, logger) {
 // src/app-builder-plugin/mcp-config.ts
 var import_node_fs55 = __toESM(require("fs"), 1);
-var import_node_path76 = __toESM(require("path"), 1);
+var import_node_path77 = __toESM(require("path"), 1);
 function appBuilderMcpConfigPath(dataDir) {
-  return import_node_path76.default.join(dataDir, "app-builder.mcp.json");
+  return import_node_path77.default.join(dataDir, "app-builder.mcp.json");
 }
 function writeAppBuilderMcpConfig(args) {
   const cfgPath = appBuilderMcpConfigPath(args.dataDir);
@@ -68595,8 +68690,8 @@ function writeAppBuilderMcpConfig(args) {
         env: {
           CLAWD_DAEMON_TOKEN: args.daemonToken,
           CLAWD_DAEMON_URL: args.daemonUrl,
-          CLAWD_APP_BUILDER_SCAFFOLD_SCRIPT: import_node_path76.default.join(args.deployKitScriptsDir, "new-extension.sh"),
-          CLAWD_APP_BUILDER_PUBLISH_SCRIPT: import_node_path76.default.join(args.deployKitScriptsDir, "publish.sh"),
+          CLAWD_APP_BUILDER_SCAFFOLD_SCRIPT: import_node_path77.default.join(args.deployKitScriptsDir, "new-extension.sh"),
+          CLAWD_APP_BUILDER_PUBLISH_SCRIPT: import_node_path77.default.join(args.deployKitScriptsDir, "publish.sh"),
           ...args.logPath ? { CLAWD_APP_BUILDER_LOG: args.logPath } : {}
         }
       }
@@ -68644,7 +68739,7 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 // src/extension/runtime.ts
 var import_node_child_process25 = require("child_process");
-var import_node_path77 = __toESM(require("path"), 1);
+var import_node_path78 = __toESM(require("path"), 1);
 var import_promises21 = require("timers/promises");
 // src/extension/port-allocator.ts
@@ -68745,7 +68840,7 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path77.default.join(this.root, extId);
+    const dir = import_node_path78.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
@@ -68857,7 +68952,7 @@ ${handle.stderrTail}`
 // src/extension/published-channels.ts
 var import_promises22 = __toESM(require("fs/promises"), 1);
-var import_node_path78 = __toESM(require("path"), 1);
+var import_node_path79 = __toESM(require("path"), 1);
 init_zod();
 var PublishedChannelsError = class extends Error {
   constructor(code, message) {
@@ -68956,7 +69051,7 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises22.default.mkdir(import_node_path78.default.dirname(this.filePath), { recursive: true });
+    await import_promises22.default.mkdir(import_node_path79.default.dirname(this.filePath), { recursive: true });
     await import_promises22.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
     await import_promises22.default.rename(tmp, this.filePath);
   }
@@ -68964,7 +69059,7 @@ var PublishedChannelStore = class {
 // src/extension/bundle-cache.ts
 var import_promises23 = __toESM(require("fs/promises"), 1);
-var import_node_path79 = __toESM(require("path"), 1);
+var import_node_path80 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -68973,14 +69068,14 @@ var BundleCache = class {
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
     await import_promises23.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path79.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path80.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
     await import_promises23.default.writeFile(tmp, buffer, { mode: 384 });
     await import_promises23.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path79.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path80.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
       return await import_promises23.default.readFile(file);
     } catch (e) {
@@ -68990,7 +69085,7 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path79.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path80.default.join(this.rootDir, `${snapshotHash}.zip`);
     await import_promises23.default.rm(file, { force: true });
   }
 };
@@ -69013,24 +69108,24 @@ async function startDaemon(config) {
     sampling: logShippingCfg.sampling,
     homeDir: import_node_os28.default.homedir()
   });
-  const logDir = import_node_path80.default.join(config.dataDir, "log");
+  const logDir = import_node_path81.default.join(config.dataDir, "log");
   import_node_fs56.default.mkdirSync(logDir, { recursive: true });
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path80.default.join(logDir, "clawd.log"),
+    file: import_node_path81.default.join(logDir, "clawd.log"),
     logClient
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const screenIdleProbeLogger = createFileOnlyLogger({
-    file: import_node_path80.default.join(logDir, "screen-idle-probe.log"),
+    file: import_node_path81.default.join(logDir, "screen-idle-probe.log"),
     level: "debug"
   });
   logger.info("screen-idle probe logger enabled", {
-    file: import_node_path80.default.join(logDir, "screen-idle-probe.log")
+    file: import_node_path81.default.join(logDir, "screen-idle-probe.log")
   });
   const CAP_TARGETS = [
-    import_node_path80.default.join(logDir, "clawd.log"),
-    import_node_path80.default.join(logDir, "screen-idle-probe.log")
+    import_node_path81.default.join(logDir, "clawd.log"),
+    import_node_path81.default.join(logDir, "screen-idle-probe.log")
   ];
   const LOG_CAP_MAX_BYTES = 10 * 1024 * 1024;
   const LOG_CAP_KEEP_BYTES = 5 * 1024 * 1024;
@@ -69152,8 +69247,8 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path80.default.join(config.dataDir, "personas"));
-  const usersRoot = import_node_path80.default.join(config.dataDir, "users");
+  const personaStore = new PersonaStore(import_node_path81.default.join(config.dataDir, "personas"));
+  const usersRoot = import_node_path81.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -69177,7 +69272,7 @@ async function startDaemon(config) {
   retirePersonaBuilder({ store: personaStore, logger });
   const groupFileStore = new GroupFileStore({ dataDir: config.dataDir, logger });
   const dispatchStore = createDispatchStore({
-    filePath: import_node_path80.default.join(config.dataDir, "dispatch.json"),
+    filePath: import_node_path81.default.join(config.dataDir, "dispatch.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("dispatch store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
@@ -69186,7 +69281,7 @@ async function startDaemon(config) {
   await dispatchStore.load();
   dispatchStore.markInterruptedAsFailed((/* @__PURE__ */ new Date()).toISOString());
   const channelStore = createChannelStore({
-    filePath: import_node_path80.default.join(config.dataDir, "channels.json"),
+    filePath: import_node_path81.default.join(config.dataDir, "channels.json"),
     now: () => Date.now(),
     genId: () => `ch-${(0, import_node_crypto23.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("channel store flush failed", {
@@ -69195,7 +69290,7 @@ async function startDaemon(config) {
   });
   await channelStore.load();
   const topicStore = createTopicStore({
-    filePath: import_node_path80.default.join(config.dataDir, "topics.json"),
+    filePath: import_node_path81.default.join(config.dataDir, "topics.json"),
     now: () => Date.now(),
     genId: () => `tp-${(0, import_node_crypto23.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("topic store flush failed", {
@@ -69222,28 +69317,28 @@ async function startDaemon(config) {
       });
     }
   });
-  const here = typeof __dirname === "string" ? __dirname : import_node_path80.default.dirname((0, import_node_url5.fileURLToPath)(import_meta8.url));
+  const here = typeof __dirname === "string" ? __dirname : import_node_path81.default.dirname((0, import_node_url5.fileURLToPath)(import_meta8.url));
   const mcpConfigs = [];
   const secretsBundleRoot = findSecretsBundleRoot(logger);
-  const localSecretsDir = import_node_path80.default.join(config.dataDir, LOCAL_SECRETS_DIRNAME);
+  const localSecretsDir = import_node_path81.default.join(config.dataDir, LOCAL_SECRETS_DIRNAME);
   const readSecrets = () => readSecretTable({ bundleRoot: secretsBundleRoot, overrideDir: localSecretsDir, logger });
   const resolvePersonaMcpConfig = (personaId2) => renderPersonaMcpSecrets({
     personaId: personaId2,
-    personaDir: import_node_path80.default.join(config.dataDir, "personas", personaId2),
+    personaDir: import_node_path81.default.join(config.dataDir, "personas", personaId2),
     secrets: readSecrets(),
-    outDir: import_node_path80.default.join(config.dataDir, "persona-mcp"),
+    outDir: import_node_path81.default.join(config.dataDir, "persona-mcp"),
     logger
   });
   const mcpDaemonUrl = `http://127.0.0.1:${config.port}`;
   const dispatchServerCandidates = [
-    import_node_path80.default.join(here, "dispatch", "mcp-server.cjs"),
+    import_node_path81.default.join(here, "dispatch", "mcp-server.cjs"),
     // 生产 dist/index → dist/dispatch/mcp-server.cjs
-    import_node_path80.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
+    import_node_path81.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
   const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs56.default.existsSync(p2));
   if (dispatchServerScriptPath) {
-    const dispatchLogPath = import_node_path80.default.join(logDir, "dispatch-mcp-server.log");
+    const dispatchLogPath = import_node_path81.default.join(logDir, "dispatch-mcp-server.log");
     const dispatchCfgPath = writeDispatchMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: dispatchServerScriptPath,
@@ -69263,12 +69358,12 @@ async function startDaemon(config) {
     });
   }
   const ticketServerCandidates = [
-    import_node_path80.default.join(here, "ticket", "mcp-server.cjs"),
-    import_node_path80.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
+    import_node_path81.default.join(here, "ticket", "mcp-server.cjs"),
+    import_node_path81.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
   const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs56.default.existsSync(p2));
   if (ticketServerScriptPath) {
-    const ticketLogPath = import_node_path80.default.join(logDir, "ticket-mcp-server.log");
+    const ticketLogPath = import_node_path81.default.join(logDir, "ticket-mcp-server.log");
     const ticketCfgPath = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
@@ -69290,12 +69385,12 @@ async function startDaemon(config) {
     });
   }
   const shiftServerCandidates = [
-    import_node_path80.default.join(here, "shift", "mcp-server.cjs"),
-    import_node_path80.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
+    import_node_path81.default.join(here, "shift", "mcp-server.cjs"),
+    import_node_path81.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
   const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs56.default.existsSync(p2));
   if (shiftServerScriptPath) {
-    const shiftLogPath = import_node_path80.default.join(logDir, "shift-mcp-server.log");
+    const shiftLogPath = import_node_path81.default.join(logDir, "shift-mcp-server.log");
     const shiftCfgPath = await writeShiftMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: shiftServerScriptPath,
@@ -69316,12 +69411,12 @@ async function startDaemon(config) {
     );
   }
   const inboxServerCandidates = [
-    import_node_path80.default.join(here, "inbox", "mcp-server.cjs"),
-    import_node_path80.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
+    import_node_path81.default.join(here, "inbox", "mcp-server.cjs"),
+    import_node_path81.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
   ];
   const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs56.default.existsSync(p2));
   if (inboxServerScriptPath) {
-    const inboxLogPath = import_node_path80.default.join(logDir, "inbox-mcp-server.log");
+    const inboxLogPath = import_node_path81.default.join(logDir, "inbox-mcp-server.log");
     const inboxCfgPath = await writeInboxMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: inboxServerScriptPath,
@@ -69342,8 +69437,8 @@ async function startDaemon(config) {
     );
   }
   const peerOpsServerCandidates = [
-    import_node_path80.default.join(here, "peer-ops", "mcp-server.cjs"),
-    import_node_path80.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
+    import_node_path81.default.join(here, "peer-ops", "mcp-server.cjs"),
+    import_node_path81.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
   ];
   const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs56.default.existsSync(p2));
   if (peerOpsServerScriptPath) {
@@ -69365,12 +69460,12 @@ async function startDaemon(config) {
     );
   }
   const rpcToolServerCandidates = [
-    import_node_path80.default.join(here, "rpc-tool", "mcp-server.cjs"),
-    import_node_path80.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
+    import_node_path81.default.join(here, "rpc-tool", "mcp-server.cjs"),
+    import_node_path81.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
   ];
   const rpcToolServerScriptPath = rpcToolServerCandidates.find((p2) => import_node_fs56.default.existsSync(p2));
   if (rpcToolServerScriptPath) {
-    const rpcToolLogPath = import_node_path80.default.join(logDir, "rpc-tool-mcp-server.log");
+    const rpcToolLogPath = import_node_path81.default.join(logDir, "rpc-tool-mcp-server.log");
     const rpcToolCfgPath = writeRpcToolMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: rpcToolServerScriptPath,
@@ -69391,18 +69486,18 @@ async function startDaemon(config) {
     );
   }
   const appBuilderServerCandidates = [
-    import_node_path80.default.join(here, "app-builder-plugin", "mcp-server.cjs"),
-    import_node_path80.default.join(here, "..", "dist", "app-builder-plugin", "mcp-server.cjs")
+    import_node_path81.default.join(here, "app-builder-plugin", "mcp-server.cjs"),
+    import_node_path81.default.join(here, "..", "dist", "app-builder-plugin", "mcp-server.cjs")
   ];
   const appBuilderServerScriptPath = appBuilderServerCandidates.find((p2) => import_node_fs56.default.existsSync(p2));
   if (appBuilderServerScriptPath) {
-    const appBuilderLogPath = import_node_path80.default.join(logDir, "app-builder-mcp-server.log");
+    const appBuilderLogPath = import_node_path81.default.join(logDir, "app-builder-mcp-server.log");
     const appBuilderCfgPath = writeAppBuilderMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: appBuilderServerScriptPath,
       daemonToken: resolvedAuthToken,
       daemonUrl: mcpDaemonUrl,
-      deployKitScriptsDir: import_node_path80.default.join(config.dataDir, "deploy-kit", "scripts"),
+      deployKitScriptsDir: import_node_path81.default.join(config.dataDir, "deploy-kit", "scripts"),
       logPath: appBuilderLogPath
     });
     mcpConfigs.push({ id: "app-builder", path: appBuilderCfgPath, personas: APP_BUILDER_PERSONAS });
@@ -69418,7 +69513,7 @@ async function startDaemon(config) {
     );
   }
   const shiftStore = createShiftStore({
-    filePath: import_node_path80.default.join(config.dataDir, "shift.json"),
+    filePath: import_node_path81.default.join(config.dataDir, "shift.json"),
     ownerIdProvider: () => ownerPrincipalId,
     now: () => Date.now()
   });
@@ -69440,7 +69535,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path80.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path81.default.join(config.dataDir, "personas"),
     // dispatch / shift 自动化 spawn 按 persona 绑定 tool 起 B session（codex persona 用 codex）。
     // personaRegistry 声明在 manager 之后（同作用域 const，调用时机在启动完成后，无 TDZ 风险）。
     getPersonaDefaults: (personaId2) => personaRegistry.get(personaId2),
@@ -69497,7 +69592,7 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path80.default.isAbsolute(input.relPath) ? input.relPath : import_node_path80.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path81.default.isAbsolute(input.relPath) ? input.relPath : import_node_path81.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
           size = import_node_fs56.default.statSync(absPath).size;
@@ -69530,9 +69625,9 @@ async function startDaemon(config) {
     logger.info("projects.seed-dropped", { dropped: droppedSeed.dropped, backup: droppedSeed.backup });
   }
   const projectsStore = new ProjectsStore({
-    file: import_node_path80.default.join(config.dataDir, "projects.json"),
+    file: import_node_path81.default.join(config.dataDir, "projects.json"),
     clawdDir: config.dataDir,
-    codexStateFile: import_node_path80.default.join(import_node_os28.default.homedir(), ".codex", ".codex-global-state.json"),
+    codexStateFile: import_node_path81.default.join(import_node_os28.default.homedir(), ".codex", ".codex-global-state.json"),
     logger
   });
   const observer = new SessionObserver({
@@ -69592,12 +69687,12 @@ async function startDaemon(config) {
     screenIdleProbeLogger
   }) : new ClaudeAdapter({ logger, historyReader: new ClaudeHistoryReader() });
   registerAdapter("claude", claudeAdapter);
-  const codexIsolatedHome = import_node_path80.default.join(config.dataDir, "codex-home");
+  const codexIsolatedHome = import_node_path81.default.join(config.dataDir, "codex-home");
   try {
     import_node_fs56.default.mkdirSync(codexIsolatedHome, { recursive: true });
     for (const f of ["auth.json", "config.toml"]) {
-      const link = import_node_path80.default.join(codexIsolatedHome, f);
-      const target = import_node_path80.default.join(import_node_os28.default.homedir(), ".codex", f);
+      const link = import_node_path81.default.join(codexIsolatedHome, f);
+      const target = import_node_path81.default.join(import_node_os28.default.homedir(), ".codex", f);
       if (!import_node_fs56.default.existsSync(link) && import_node_fs56.default.existsSync(target)) import_node_fs56.default.symlinkSync(target, link);
     }
   } catch (err) {
@@ -69611,11 +69706,11 @@ async function startDaemon(config) {
       // projectPaths 每次调用现取 —— 用户新建 project 后立即生效，不用重启 daemon
       codexHomeFor: (cwd) => resolveCodexHome({
         cwd,
-        personaRoot: import_node_path80.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path81.default.join(config.dataDir, "personas"),
         // 必须用 listMerged（Codex registry ∪ 叠加层）：只用本地 list() 的话，用户在
         // Codex 里建的 project 不在表里，在它下面开的会话会被误判成隔离 → Codex 侧看不到
         projectPaths: projectsStore.listMerged().map((x) => x.path),
-        sharedHome: import_node_path80.default.join(import_node_os28.default.homedir(), ".codex"),
+        sharedHome: import_node_path81.default.join(import_node_os28.default.homedir(), ".codex"),
         isolatedHome: codexIsolatedHome
       })
     })
@@ -69900,11 +69995,11 @@ async function startDaemon(config) {
         // 'persona/<pid>/owner'，default 走 'default'。
         getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
         // guest path guard：candidate 必须在 personaRoot 子树或调用者自己的 user-dir 下
-        personaRoot: import_node_path80.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path81.default.join(config.dataDir, "personas"),
         usersRoot
       },
       // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-      personaRoot: import_node_path80.default.join(config.dataDir, "personas"),
+      personaRoot: import_node_path81.default.join(config.dataDir, "personas"),
       // v2 多人 persona 隔离：handler 派生 guest user-dir 放行
       usersRoot,
       // v2 Phase 6: whoami handler 装在 owner principal.displayName + persona 解析
@@ -70005,11 +70100,11 @@ async function startDaemon(config) {
       // 发布上线脚手架化 (spec 2026-06-03 §5.2):
       // appBuilderPersonaRoot 用于拼 publish.sh 绝对路径（persona-app-builder 安装在
       // dataDir/personas/persona-app-builder 之下，extension-kit/scripts/publish.sh 是相对路径）。
-      appBuilderPersonaRoot: import_node_path80.default.join(config.dataDir, "personas", "persona-app-builder"),
+      appBuilderPersonaRoot: import_node_path81.default.join(config.dataDir, "personas", "persona-app-builder"),
       // 共享 deploy-kit 根：scaffold/publish 脚本骨架 + 阿里云凭证单一真源。
-      deployKitRoot: import_node_path80.default.join(config.dataDir, "deploy-kit"),
+      deployKitRoot: import_node_path81.default.join(config.dataDir, "deploy-kit"),
       // scaffold/publish 按当前 session 的 persona 解析其安装根，让每个 persona 用自己的模板/注入配置。
-      resolvePersonaRoot: (personaId2) => import_node_path80.default.join(config.dataDir, "personas", personaId2),
+      resolvePersonaRoot: (personaId2) => import_node_path81.default.join(config.dataDir, "personas", personaId2),
       // 凭据表（M1b Step 5）：与 MCP 那条同一张表、同一个来源，只是交付给另一个子进程。
       readSecrets,
       // 发布上线脚手架化 (spec 2026-06-03 §5.2.2):
@@ -70124,12 +70219,12 @@ async function startDaemon(config) {
   });
   Object.assign(handlers, shiftHandlers);
   const deployReceipts = createReceiptStore({
-    filePath: import_node_path80.default.join(config.dataDir, "deploy.json"),
+    filePath: import_node_path81.default.join(config.dataDir, "deploy.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("deploy receipts flush failed", { error: String(err) })
   });
   const deploySecrets = createSecretStore({
-    filePath: import_node_path80.default.join(config.dataDir, "deploy-secrets.json"),
+    filePath: import_node_path81.default.join(config.dataDir, "deploy-secrets.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("deploy secrets flush failed", { error: String(err) })
   });
@@ -70205,13 +70300,13 @@ async function startDaemon(config) {
     hasPersona: (personaId2) => personaStore.has(personaId2),
     startScan: (deployId, personaId2) => {
       const assetLines = SCANNABLE_ASSETS.map(
-        (name) => `  - ${name}\uFF1A${import_node_path80.default.join(config.dataDir, name)}`
+        (a) => `  - ${a.name}${a.path ? `\uFF08${a.path(config.dataDir)}\uFF09` : ""}\uFF1A${a.what}`
       ).join("\n");
       const prompt = [
         `\u626B\u63CF persona\u300C${personaId2}\u300D\u7684\u90E8\u7F72\u73AF\u5883\uFF0CdeployId=${deployId}\u3002`,
         "",
         `persona \u76EE\u5F55\uFF1A${personaStore.personaDirPath(personaId2)}`,
-        "\u53EF\u4EE5\u8BFB\u5230\u7684 persona \u76EE\u5F55\u4E4B\u5916\u7684\u5171\u4EAB\u8D44\u4EA7\uFF1A",
+        "\u53EF\u4EE5\u58F0\u660E\u7684 persona \u76EE\u5F55\u4E4B\u5916\u7684\u5171\u4EAB\u8D44\u4EA7\uFF08\u7528\u5230\u54EA\u6761\u5C31\u62A5\u54EA\u6761\uFF09\uFF1A",
         assetLines || "  \uFF08\u65E0\uFF09",
         "",
         "\u6309 scan-persona-for-deploy skill \u5E72\u6D3B\uFF1A\u8FB9\u67E5\u8FB9\u7528 deploy:reportFinding \u4E0A\u62A5\uFF0C",
@@ -70270,7 +70365,7 @@ async function startDaemon(config) {
   });
   shiftScheduler.start();
   logger.info("shift scheduler started", { shiftCount: shiftStore.list().length });
-  const larkBotStore = createLarkBotBindingStore(import_node_path80.default.join(config.dataDir, "personas"));
+  const larkBotStore = createLarkBotBindingStore(import_node_path81.default.join(config.dataDir, "personas"));
   const larkBotCloud = createLarkBotCloudClient({
     api: config.clawosApi ?? DEFAULT_CLAWOS_API,
     apiKey: resolveClawdTicketsApiKey(),
@@ -70284,7 +70379,7 @@ async function startDaemon(config) {
     store: larkBotStore,
     fetchResource: (appId, messageId, fileKey, maxBytes, type) => larkBotCloud.fetchResource(appId, messageId, fileKey, maxBytes, type),
     // 图片落 guest userWorkDir 下（capId = lark-<chat_id>）：CC 经 --add-dir + allowRead carve 可 Read
-    mediaRootFor: (chatId) => import_node_path80.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
+    mediaRootFor: (chatId) => import_node_path81.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
     isShuttingDown: () => larkDraining,
     logger: {
       warn: (msg) => logger.warn(msg),
@@ -70589,8 +70684,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path80.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path80.default.join(logDir, "frpc.log")}`
+        `Frpc config: ${import_node_path81.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path81.default.join(logDir, "frpc.log")}`
       ];
       const width2 = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width2 + 4);
@@ -70603,7 +70698,7 @@ ${bar}
 `);
       try {
-        const connectPath = import_node_path80.default.join(config.dataDir, "connect.txt");
+        const connectPath = import_node_path81.default.join(config.dataDir, "connect.txt");
         import_node_fs56.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
@@ -70693,7 +70788,7 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path80.default.join(dataDir, "persons");
+  const dir = import_node_path81.default.join(dataDir, "persons");
   try {
     import_node_fs56.default.rmSync(dir, { recursive: true, force: true });
   } catch {