@clawos-dev/clawd 0.2.499 → 0.2.500

package/dist/cli.cjs

@@ -10935,7 +10935,7 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs87 = require("fs");
+    var fs88 = require("fs");
     var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
     var path98 = require("path");
@@ -10992,20 +10992,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs87.mkdirSync(path98.dirname(file), { recursive: true });
-          const fd = fs87.openSync(file, flags, mode);
+          if (sonic.mkdir) fs88.mkdirSync(path98.dirname(file), { recursive: true });
+          const fd = fs88.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs87.mkdir(path98.dirname(file), { recursive: true }, (err) => {
+        fs88.mkdir(path98.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs87.open(file, flags, mode, fileOpened);
+          fs88.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs87.open(file, flags, mode, fileOpened);
+        fs88.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -11046,8 +11046,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs87.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs87.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs88.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs88.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -11056,15 +11056,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs87.writeSync(this.fd, this._writingBuf);
+            return fs88.writeSync(this.fd, this._writingBuf);
           }
-          return fs87.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs88.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs87.write(this.fd, this._writingBuf, this.release);
+            return fs88.write(this.fd, this._writingBuf, this.release);
           }
-          return fs87.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs88.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -11121,7 +11121,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs87.fsyncSync(this.fd);
+          fs88.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -11235,7 +11235,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs87.fsync(this.fd, (err) => {
+            fs88.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -11337,7 +11337,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs87.close(fd, (err) => {
+          fs88.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -11386,7 +11386,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs87.writeSync(this.fd, buf) : fs87.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs88.writeSync(this.fd, buf) : fs88.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -11402,7 +11402,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs87.fsyncSync(this.fd);
+        fs88.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -11423,7 +11423,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs87.writeSync(this.fd, buf);
+          const n = fs88.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -11451,13 +11451,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs87.writeSync(this.fd, this._writingBuf) : fs87.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs88.writeSync(this.fd, this._writingBuf) : fs88.writeSync(this.fd, this._writingBuf, "utf8");
           release2(null, written);
         } catch (err) {
           release2(err);
         }
       } else {
-        fs87.write(this.fd, this._writingBuf, release2);
+        fs88.write(this.fd, this._writingBuf, release2);
       }
     }
     function actualWriteBuffer() {
@@ -11466,7 +11466,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs87.writeSync(this.fd, this._writingBuf);
+          const written = fs88.writeSync(this.fd, this._writingBuf);
           release2(null, written);
         } catch (err) {
           release2(err);
@@ -11475,7 +11475,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs87.write(this.fd, this._writingBuf, release2);
+        fs88.write(this.fd, this._writingBuf, release2);
       }
     }
     function actualClose(sonic) {
@@ -11491,12 +11491,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs87.fsync(sonic.fd, closeWrapped);
+        fs88.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs87.close(sonic.fd, done);
+          fs88.close(sonic.fd, done);
         } else {
           done();
         }
@@ -43954,8 +43954,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs59.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs59.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs60.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs60.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -43980,11 +43980,11 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs59, import_node_path80;
+var import_node_fs60, import_node_path80;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs59 = __toESM(require("fs"), 1);
+    import_node_fs60 = __toESM(require("fs"), 1);
     import_node_path80 = __toESM(require("path"), 1);
   }
 });
@@ -44028,7 +44028,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs60.mkdtempSync)(import_node_path81.default.join(import_node_os28.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs61.mkdtempSync)(import_node_path81.default.join(import_node_os28.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -44189,17 +44189,17 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs60.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs61.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs60, import_node_os28, import_node_path81;
+var import_node_fs61, import_node_os28, import_node_path81;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs60 = require("fs");
+    import_node_fs61 = require("fs");
     import_node_os28 = __toESM(require("os"), 1);
     import_node_path81 = __toESM(require("path"), 1);
     init_claude();
@@ -44477,7 +44477,7 @@ Env (advanced):
 
 // src/index.ts
 var import_node_path79 = __toESM(require("path"), 1);
-var import_node_fs58 = __toESM(require("fs"), 1);
+var import_node_fs59 = __toESM(require("fs"), 1);
 var import_node_os27 = __toESM(require("os"), 1);
 var import_node_crypto22 = require("crypto");
 var import_node_url5 = require("url");
@@ -51298,7 +51298,7 @@ var import_node_fs20 = __toESM(require("fs"), 1);
 
 // src/tools/codex-session.ts
 var import_node_child_process4 = require("child_process");
-var import_node_path17 = __toESM(require("path"), 1);
+var import_node_path18 = __toESM(require("path"), 1);
 
 // src/tools/codex-app-server-client.ts
 var import_node_readline = require("readline");
@@ -51787,7 +51787,7 @@ function threadStartParams(ctx) {
 }
 var ATTACHMENT_RE2 = /\[attachment:(image|file):([^\]]+)\]/g;
 var SKILL_RE = /\[skill:(.+?):(\/[^\]]+)\]/g;
-function turnStartInput(text) {
+function turnStartInput(text, resolveImage) {
   const items = [];
   let leftover = text;
   for (const m2 of text.matchAll(SKILL_RE)) {
@@ -51797,8 +51797,10 @@ function turnStartInput(text) {
   }
   for (const m2 of text.matchAll(ATTACHMENT_RE2)) {
     const [marker, kind, url] = m2;
-    if (kind === "image") {
-      items.push({ type: "image", url });
+    if (kind !== "image") continue;
+    const item = url.startsWith("data:") ? { type: "image", url } : resolveImage?.(url) ?? null;
+    if (item) {
+      items.push(item);
       leftover = leftover.replace(marker, "");
     }
   }
@@ -51889,16 +51891,17 @@ function driveCodexThread(opts) {
         if (threadId)
           void client.request("turn/start", {
             threadId,
-            input: turnStartInput(text),
+            input: turnStartInput(text, opts.imageInput),
             // TurnStartParams 字段是 `effort`（不是 `reasoningEffort`，0.138 改名）——传错名字
             // codex 静默忽略, reasoning effort 改了不生效。"override for this turn and subsequent turns"。
             ...effort ? { effort } : {}
-          }).catch(
-            (e) => sink.pushEvents([
+          }).catch((e) => {
+            if (exited) return;
+            sink.pushEvents([
               { kind: "error", message: `turn/start failed: ${e.message}` },
               { kind: "turn_end" }
-            ])
-          );
+            ]);
+          });
       });
     },
     respondPermission(requestId, allow) {
@@ -52052,6 +52055,200 @@ function warmCodexFeatureCache() {
   );
 }
 
+// src/attachment/sign-url.ts
+var import_node_crypto5 = __toESM(require("crypto"), 1);
+var HMAC_ALGO = "sha256";
+function base64urlEncode(buf) {
+  const b2 = typeof buf === "string" ? Buffer.from(buf, "utf8") : buf;
+  return b2.toString("base64url");
+}
+function base64urlDecodeBuf(s) {
+  return Buffer.from(s, "base64url");
+}
+function encodeAbsPathForUrl(absPath) {
+  return absPath.split("/").map(encodeURIComponent).join("/");
+}
+function decodeAbsPathFromUrl(encoded) {
+  return encoded.split("/").map(decodeURIComponent).join("/");
+}
+var DOMAIN_PREFIX2 = "clawd-attach-v1|";
+function computeSig(secret, absPath, e) {
+  const msg = e === null ? `${DOMAIN_PREFIX2}${absPath}` : `${DOMAIN_PREFIX2}${absPath}|${e}`;
+  return import_node_crypto5.default.createHmac(HMAC_ALGO, secret).update(msg).digest();
+}
+function signUrlParts(secret, absPath, ttlSeconds, now = Date.now) {
+  const e = ttlSeconds === null ? null : Math.floor(now() / 1e3) + ttlSeconds;
+  const s = base64urlEncode(computeSig(secret, absPath, e));
+  return { absPath, e, s };
+}
+function buildSignedFileUrl(httpBaseUrl, parts, prefix = "/files") {
+  const encodedPath = encodeAbsPathForUrl(parts.absPath);
+  const query = parts.e === null ? `s=${encodeURIComponent(parts.s)}` : `e=${parts.e}&s=${encodeURIComponent(parts.s)}`;
+  const base = httpBaseUrl.endsWith("/") ? httpBaseUrl.slice(0, -1) : httpBaseUrl;
+  return `${base}${prefix}${encodedPath}?${query}`;
+}
+function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
+  let e;
+  if (eRaw === null || eRaw === void 0 || eRaw === "") {
+    e = null;
+  } else {
+    const parsed = Number.parseInt(eRaw, 10);
+    if (!Number.isFinite(parsed) || parsed < 0) {
+      return { ok: false, code: "MALFORMED" };
+    }
+    e = parsed;
+  }
+  if (!absPath || !s) return { ok: false, code: "MALFORMED" };
+  const expected = computeSig(secret, absPath, e);
+  let provided;
+  try {
+    provided = base64urlDecodeBuf(s);
+  } catch {
+    return { ok: false, code: "MALFORMED" };
+  }
+  if (provided.length !== expected.length) {
+    return { ok: false, code: "BAD_SIG" };
+  }
+  if (!import_node_crypto5.default.timingSafeEqual(provided, expected)) {
+    return { ok: false, code: "BAD_SIG" };
+  }
+  if (e !== null && now() / 1e3 > e) {
+    return { ok: false, code: "EXPIRED" };
+  }
+  return { ok: true, absPath };
+}
+function resolveSignedFileUrl(secret, url, now = Date.now) {
+  let u;
+  try {
+    u = new URL(url);
+  } catch {
+    return null;
+  }
+  if (!u.pathname.startsWith("/files/")) return null;
+  let absPath;
+  try {
+    absPath = decodeAbsPathFromUrl(u.pathname.slice("/files".length));
+  } catch {
+    return null;
+  }
+  const r = verifySignedUrl(secret, absPath, u.searchParams.get("e"), u.searchParams.get("s") ?? "", now);
+  return r.ok ? r.absPath : null;
+}
+
+// src/attachment/mime.ts
+var import_node_path17 = __toESM(require("path"), 1);
+var TEXT_PLAIN = "text/plain; charset=utf-8";
+var EXT_TO_NATIVE_MIME = {
+  // 图片
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".webp": "image/webp",
+  ".svg": "image/svg+xml",
+  ".bmp": "image/bmp",
+  ".ico": "image/x-icon",
+  ".avif": "image/avif",
+  // 文档 / 富文本
+  ".pdf": "application/pdf",
+  ".html": "text/html; charset=utf-8",
+  ".htm": "text/html; charset=utf-8",
+  // 视频 / 音频
+  ".mp4": "video/mp4",
+  ".webm": "video/webm",
+  ".mov": "video/quicktime",
+  ".mp3": "audio/mpeg",
+  ".wav": "audio/wav",
+  ".ogg": "audio/ogg",
+  ".flac": "audio/flac",
+  // 真二进制（让浏览器下载而不是错把它当文本明文）
+  ".zip": "application/zip",
+  ".gz": "application/gzip",
+  ".tar": "application/x-tar",
+  ".7z": "application/x-7z-compressed",
+  ".rar": "application/x-rar-compressed"
+};
+var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
+  // 文档
+  ".md",
+  ".markdown",
+  ".rst",
+  ".adoc",
+  ".txt",
+  ".log",
+  // 通用结构化
+  ".json",
+  ".jsonc",
+  ".json5",
+  ".yaml",
+  ".yml",
+  ".toml",
+  ".xml",
+  ".csv",
+  ".tsv",
+  ".ini",
+  ".conf",
+  ".cfg",
+  ".env",
+  // 前端
+  ".js",
+  ".jsx",
+  ".mjs",
+  ".cjs",
+  ".ts",
+  ".tsx",
+  ".css",
+  ".scss",
+  ".sass",
+  ".less",
+  ".vue",
+  ".svelte",
+  ".graphql",
+  ".gql",
+  // 后端 / 各语言
+  ".py",
+  ".rb",
+  ".go",
+  ".rs",
+  ".java",
+  ".kt",
+  ".kts",
+  ".scala",
+  ".c",
+  ".h",
+  ".cpp",
+  ".hpp",
+  ".cc",
+  ".hh",
+  ".cs",
+  ".php",
+  ".swift",
+  ".m",
+  ".mm",
+  ".dart",
+  ".lua",
+  ".pl",
+  ".r",
+  ".sh",
+  ".bash",
+  ".zsh",
+  ".fish",
+  // 其他
+  ".sql",
+  ".proto",
+  ".dockerfile",
+  ".diff",
+  ".patch",
+  ".makefile",
+  ".mk"
+]);
+function lookupMime(filePathOrName) {
+  const ext = import_node_path17.default.extname(filePathOrName).toLowerCase();
+  if (EXT_TO_NATIVE_MIME[ext]) return EXT_TO_NATIVE_MIME[ext];
+  if (TEXT_EXTENSIONS.has(ext)) return TEXT_PLAIN;
+  return "application/octet-stream";
+}
+
 // src/tools/codex-session.ts
 function createCodexSession(ctx, sink, deps = {}) {
   const cmd = process.env.CODEX_BIN ?? "codex";
@@ -52094,7 +52291,15 @@ function createCodexSession(ctx, sink, deps = {}) {
     threadParams: threadStartParams(ctx),
     // persona 惯例装在 <cwd>/.claude/skills/，经 extraRoots 注入 discovery
     // （skills:list RPC 侧 codex-skills.ts 同款注入，两处保持一致）。
-    skillsExtraRoots: [import_node_path17.default.join(ctx.cwd, ".claude", "skills")],
+    skillsExtraRoots: [import_node_path18.default.join(ctx.cwd, ".claude", "skills")],
+    // 附件图片：验签认出本机 absPath → localImage，codex 自己读文件（TUI 拖图 / SDK local_image 同一条路）。
+    // 0.145 起 http(s) URL 在 turn/start 入口被拒，不能再按 url 传（codex-app-server-params.ts 头注释）。
+    // 与云上 cloudImageInput 同一道 mime 门：非图片（签过的 .md 之类）留文本，别让 codex 读到一半才炸。
+    imageInput: (url) => {
+      const secret = deps.getSignSecret?.();
+      const p2 = secret ? resolveSignedFileUrl(secret, url) : null;
+      return p2 && lookupMime(p2).startsWith("image/") ? { type: "localImage", path: p2 } : null;
+    },
     kill: (signal) => {
       if (alive()) proc.kill(signal);
     },
@@ -52241,14 +52446,14 @@ function mergeProviderModels(native, provider) {
 // src/tools/codex-provider-models.ts
 var import_node_fs19 = __toESM(require("fs"), 1);
 var import_node_os8 = __toESM(require("os"), 1);
-var import_node_path18 = __toESM(require("path"), 1);
+var import_node_path19 = __toESM(require("path"), 1);
 var PROVIDER_FETCH_TIMEOUT_MS = 3e3;
 function asRecord(v2) {
   return v2 && typeof v2 === "object" && !Array.isArray(v2) ? v2 : null;
 }
 function readAuthKey(codexHome) {
   try {
-    const raw = JSON.parse(import_node_fs19.default.readFileSync(import_node_path18.default.join(codexHome, "auth.json"), "utf8"));
+    const raw = JSON.parse(import_node_fs19.default.readFileSync(import_node_path19.default.join(codexHome, "auth.json"), "utf8"));
     const key = asRecord(raw)?.OPENAI_API_KEY;
     return typeof key === "string" && key ? key : void 0;
   } catch {
@@ -52265,7 +52470,7 @@ function resolveProviderEndpoint(rawConfig, deps = {}) {
   const baseUrl = entry.base_url;
   if (typeof baseUrl !== "string" || !baseUrl) return null;
   const env = deps.env ?? process.env;
-  const codexHome = deps.codexHome ?? env.CODEX_HOME ?? import_node_path18.default.join(import_node_os8.default.homedir(), ".codex");
+  const codexHome = deps.codexHome ?? env.CODEX_HOME ?? import_node_path19.default.join(import_node_os8.default.homedir(), ".codex");
   const envKey = typeof entry.env_key === "string" && entry.env_key ? entry.env_key : null;
   const token = envKey ? env[envKey] : readAuthKey(codexHome);
   if (!token) {
@@ -52398,6 +52603,7 @@ var CodexAdapter = class {
   fetchImpl;
   /** CODEX_HOME 归属解析（spec 2026-08-18-codex-project-alignment §3.1），由 index.ts 注入 */
   codexHomeFor;
+  getSignSecret;
   // capabilities 的进程级 memo。**回落结果同样被缓存**——否则 codex 没装时每次开弹窗都
   // spawn 一次必然失败的子进程。代价是装好 codex 后要重启 daemon 才恢复，与「codex 升级后
   // 要重启才更新模型表」是同一条语义。
@@ -52410,6 +52616,7 @@ var CodexAdapter = class {
     this.configQueryOverride = opts.configQueryOverride;
     this.fetchImpl = opts.fetchImpl;
     this.codexHomeFor = opts.codexHomeFor;
+    this.getSignSecret = opts.getSignSecret;
   }
   async probe() {
     if (this.probeCache) return this.probeCache;
@@ -52472,7 +52679,8 @@ var CodexAdapter = class {
   createSession(ctx, sink) {
     return createCodexSession({ ...ctx, model: sanitizeCodexModel(ctx.model) }, sink, {
       logger: this.logger,
-      codexHomeFor: this.codexHomeFor
+      codexHomeFor: this.codexHomeFor,
+      getSignSecret: this.getSignSecret
     });
   }
   spawn(_ctx) {
@@ -52489,10 +52697,10 @@ var CodexAdapter = class {
 };
 
 // src/tools/claude-tui.ts
-var import_node_crypto5 = require("crypto");
+var import_node_crypto6 = require("crypto");
 var import_node_fs21 = __toESM(require("fs"), 1);
 var import_node_os9 = __toESM(require("os"), 1);
-var import_node_path19 = __toESM(require("path"), 1);
+var import_node_path20 = __toESM(require("path"), 1);
 var import_headless = __toESM(require_xterm_headless(), 1);
 
 // ../node_modules/.pnpm/@xterm+addon-serialize@0.14.0/node_modules/@xterm/addon-serialize/lib/addon-serialize.mjs
@@ -53377,7 +53585,7 @@ function observeScreenIdle(surface, opts) {
   };
 }
 function shortHash(s) {
-  return (0, import_node_crypto5.createHash)("sha1").update(s).digest("hex").slice(0, 8);
+  return (0, import_node_crypto6.createHash)("sha1").update(s).digest("hex").slice(0, 8);
 }
 function firstLineDiff(prev, next) {
   const p2 = prev.split("\n");
@@ -53718,7 +53926,7 @@ function buildTuiSpawnArgs(ctx, isResume = false) {
 function jsonlExistsForCtx(ctx) {
   if (!ctx.toolSessionId) return false;
   const home = import_node_os9.default.homedir();
-  const file = import_node_path19.default.join(home, ".claude", "projects", cwdToHashDir(ctx.cwd), `${ctx.toolSessionId}.jsonl`);
+  const file = import_node_path20.default.join(home, ".claude", "projects", cwdToHashDir(ctx.cwd), `${ctx.toolSessionId}.jsonl`);
   try {
     return import_node_fs21.default.statSync(file).isFile();
   } catch {
@@ -53805,7 +54013,7 @@ var PersonaDispatchManager = class {
 
 // src/dispatch/store.ts
 var import_promises = __toESM(require("fs/promises"), 1);
-var import_node_path20 = __toESM(require("path"), 1);
+var import_node_path21 = __toESM(require("path"), 1);
 
 // src/shift/constants.ts
 var MAX_RUNS_PER_SHIFT = 30;
@@ -53843,7 +54051,7 @@ function createDispatchStore(deps) {
       flushTimer = null;
     }
     const content = { version: 1, records };
-    await import_promises.default.mkdir(import_node_path20.default.dirname(deps.filePath), { recursive: true });
+    await import_promises.default.mkdir(import_node_path21.default.dirname(deps.filePath), { recursive: true });
     const tmp = `${deps.filePath}.tmp-${deps.now()}-${Math.floor(Math.random() * 1e6)}`;
     await import_promises.default.writeFile(tmp, JSON.stringify(content, null, 2), "utf8");
     await import_promises.default.rename(tmp, deps.filePath);
@@ -53912,7 +54120,7 @@ function createDispatchStore(deps) {
 
 // src/channel/json-store.ts
 var import_promises2 = __toESM(require("fs/promises"), 1);
-var import_node_path21 = __toESM(require("path"), 1);
+var import_node_path22 = __toESM(require("path"), 1);
 function createJsonStore(deps) {
   let items = [];
   let flushTimer = null;
@@ -53923,7 +54131,7 @@ function createJsonStore(deps) {
       flushTimer = null;
     }
     const content = { version: version2, [deps.key]: items };
-    await import_promises2.default.mkdir(import_node_path21.default.dirname(deps.filePath), { recursive: true });
+    await import_promises2.default.mkdir(import_node_path22.default.dirname(deps.filePath), { recursive: true });
     const tmp = `${deps.filePath}.tmp-${deps.now()}-${Math.floor(Math.random() * 1e6)}`;
     await import_promises2.default.writeFile(tmp, JSON.stringify(content, null, 2), "utf8");
     await import_promises2.default.rename(tmp, deps.filePath);
@@ -54216,9 +54424,9 @@ function createTopicStore(deps) {
 
 // src/dispatch/mcp-config.ts
 var import_node_fs22 = __toESM(require("fs"), 1);
-var import_node_path22 = __toESM(require("path"), 1);
+var import_node_path23 = __toESM(require("path"), 1);
 function dispatchMcpConfigPath(dataDir) {
-  return import_node_path22.default.join(dataDir, "dispatch.mcp.json");
+  return import_node_path23.default.join(dataDir, "dispatch.mcp.json");
 }
 function writeDispatchMcpConfig(args) {
   const cfgPath = dispatchMcpConfigPath(args.dataDir);
@@ -54244,9 +54452,9 @@ function writeDispatchMcpConfig(args) {
 
 // src/ticket/mcp-config.ts
 var import_node_fs23 = __toESM(require("fs"), 1);
-var import_node_path23 = __toESM(require("path"), 1);
+var import_node_path24 = __toESM(require("path"), 1);
 function ticketMcpConfigPath(dataDir) {
-  return import_node_path23.default.join(dataDir, "ticket.mcp.json");
+  return import_node_path24.default.join(dataDir, "ticket.mcp.json");
 }
 function writeTicketMcpConfig(args) {
   const cfgPath = ticketMcpConfigPath(args.dataDir);
@@ -54275,9 +54483,9 @@ function writeTicketMcpConfig(args) {
 
 // src/shift/mcp-config.ts
 var import_node_fs24 = __toESM(require("fs"), 1);
-var import_node_path24 = __toESM(require("path"), 1);
+var import_node_path25 = __toESM(require("path"), 1);
 function shiftMcpConfigPath(dataDir) {
-  return import_node_path24.default.join(dataDir, "shift.mcp.json");
+  return import_node_path25.default.join(dataDir, "shift.mcp.json");
 }
 async function writeShiftMcpConfig(args) {
   const cfgPath = shiftMcpConfigPath(args.dataDir);
@@ -54303,9 +54511,9 @@ async function writeShiftMcpConfig(args) {
 
 // src/inbox/mcp-config.ts
 var import_node_fs25 = __toESM(require("fs"), 1);
-var import_node_path25 = __toESM(require("path"), 1);
+var import_node_path26 = __toESM(require("path"), 1);
 function inboxMcpConfigPath(dataDir) {
-  return import_node_path25.default.join(dataDir, "inbox.mcp.json");
+  return import_node_path26.default.join(dataDir, "inbox.mcp.json");
 }
 async function writeInboxMcpConfig(args) {
   const cfgPath = inboxMcpConfigPath(args.dataDir);
@@ -54331,9 +54539,9 @@ async function writeInboxMcpConfig(args) {
 
 // src/peer-ops/mcp-config.ts
 var import_node_fs26 = __toESM(require("fs"), 1);
-var import_node_path26 = __toESM(require("path"), 1);
+var import_node_path27 = __toESM(require("path"), 1);
 function peerOpsMcpConfigPath(dataDir) {
-  return import_node_path26.default.join(dataDir, "peer-ops.mcp.json");
+  return import_node_path27.default.join(dataDir, "peer-ops.mcp.json");
 }
 function writePeerOpsMcpConfig(args) {
   const cfgPath = peerOpsMcpConfigPath(args.dataDir);
@@ -54357,9 +54565,9 @@ function writePeerOpsMcpConfig(args) {
 
 // src/rpc-tool/mcp-config.ts
 var import_node_fs27 = __toESM(require("fs"), 1);
-var import_node_path27 = __toESM(require("path"), 1);
+var import_node_path28 = __toESM(require("path"), 1);
 function rpcToolMcpConfigPath(dataDir) {
-  return import_node_path27.default.join(dataDir, "rpc-tool.mcp.json");
+  return import_node_path28.default.join(dataDir, "rpc-tool.mcp.json");
 }
 function writeRpcToolMcpConfig(args) {
   const cfgPath = rpcToolMcpConfigPath(args.dataDir);
@@ -54385,15 +54593,15 @@ function writeRpcToolMcpConfig(args) {
 
 // src/deploy/secret-table.ts
 var import_node_fs28 = __toESM(require("fs"), 1);
-var import_node_path28 = __toESM(require("path"), 1);
+var import_node_path29 = __toESM(require("path"), 1);
 var import_node_url4 = require("url");
 var import_meta4 = {};
 var LOCAL_SECRETS_DIRNAME = "secrets";
 function findSecretsBundleRoot(logger) {
   const candidates = [];
   try {
-    const here = import_node_path28.default.dirname((0, import_node_url4.fileURLToPath)(import_meta4.url));
-    candidates.push(import_node_path28.default.resolve(here, "..", "secrets"));
+    const here = import_node_path29.default.dirname((0, import_node_url4.fileURLToPath)(import_meta4.url));
+    candidates.push(import_node_path29.default.resolve(here, "..", "secrets"));
   } catch {
   }
   const fromArgv = bundleSiblingFromArgv(process.argv[1], "secrets");
@@ -54434,9 +54642,9 @@ function readDir(dir, logger) {
   }
   for (const f of files) {
     try {
-      Object.assign(out, parseEnvFile(import_node_fs28.default.readFileSync(import_node_path28.default.join(dir, f), "utf8")));
+      Object.assign(out, parseEnvFile(import_node_fs28.default.readFileSync(import_node_path29.default.join(dir, f), "utf8")));
     } catch (e) {
-      logger?.warn("secrets.file-unreadable", { file: import_node_path28.default.join(dir, f), error: e.message });
+      logger?.warn("secrets.file-unreadable", { file: import_node_path29.default.join(dir, f), error: e.message });
     }
   }
   return out;
@@ -54462,14 +54670,14 @@ function collectKitPlaceholders(kitDir) {
     }
     return entries.flatMap((e) => {
       if (e.name === "node_modules") return [];
-      const p2 = import_node_path28.default.join(dir, e.name);
+      const p2 = import_node_path29.default.join(dir, e.name);
       return e.isDirectory() ? walk2(p2, depth + 1) : [p2];
     });
   };
-  for (const f of walk2(import_node_path28.default.join(kitDir, "contract"), 0)) {
+  for (const f of walk2(import_node_path29.default.join(kitDir, "contract"), 0)) {
     if (f.endsWith(".tmpl")) scan(f, /__([A-Z0-9_]+)__/g);
   }
-  for (const f of walk2(import_node_path28.default.join(kitDir, "examples"), 0)) {
+  for (const f of walk2(import_node_path29.default.join(kitDir, "examples"), 0)) {
     if (f.endsWith(".env.example")) scan(f, /\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g);
   }
   return out;
@@ -54487,12 +54695,12 @@ function readSecretTable(args) {
 }
 
 // src/dispatch/source-transcript.ts
-var import_node_path29 = __toESM(require("path"), 1);
+var import_node_path30 = __toESM(require("path"), 1);
 init_claude_history();
 var NO_SOURCE_TRANSCRIPT = "(no transcript yet \u2014 operate from the task description alone)";
 function resolveSourceJsonlPath(sourceFile, home) {
   if (!sourceFile?.toolSessionId) return NO_SOURCE_TRANSCRIPT;
-  return import_node_path29.default.join(
+  return import_node_path30.default.join(
     home,
     ".claude",
     "projects",
@@ -54503,8 +54711,8 @@ function resolveSourceJsonlPath(sourceFile, home) {
 
 // src/shift/store.ts
 var import_promises3 = __toESM(require("fs/promises"), 1);
-var import_node_path30 = __toESM(require("path"), 1);
-var import_node_crypto6 = require("crypto");
+var import_node_path31 = __toESM(require("path"), 1);
+var import_node_crypto7 = require("crypto");
 
 // src/shift/schedule.ts
 var import_cron_parser = __toESM(require_dist(), 1);
@@ -54578,7 +54786,7 @@ function createShiftStore(deps) {
       flushTimer = null;
     }
     const content = { version: 1, shifts };
-    await import_promises3.default.mkdir(import_node_path30.default.dirname(deps.filePath), { recursive: true });
+    await import_promises3.default.mkdir(import_node_path31.default.dirname(deps.filePath), { recursive: true });
     const tmp = `${deps.filePath}.tmp-${deps.now()}-${Math.floor(Math.random() * 1e6)}`;
     await import_promises3.default.writeFile(tmp, JSON.stringify(content, null, 2), "utf8");
     await import_promises3.default.rename(tmp, deps.filePath);
@@ -54608,7 +54816,7 @@ function createShiftStore(deps) {
     const shift = {
       ...input,
       schedule,
-      id: (0, import_node_crypto6.randomUUID)(),
+      id: (0, import_node_crypto7.randomUUID)(),
       createdAtMs: now,
       updatedAtMs: now,
       state: { nextRunAtMs },
@@ -55026,10 +55234,10 @@ function redactEvidence(evidence) {
 
 // src/deploy/deploy-file.ts
 var import_promises4 = __toESM(require("fs/promises"), 1);
-var import_node_path31 = __toESM(require("path"), 1);
+var import_node_path32 = __toESM(require("path"), 1);
 init_protocol();
-var DEPLOY_FILE = import_node_path31.default.join(".clawd", "deploy.json");
-var SCAN_FILE = import_node_path31.default.join(".clawd", "deploy-scan.json");
+var DEPLOY_FILE = import_node_path32.default.join(".clawd", "deploy.json");
+var SCAN_FILE = import_node_path32.default.join(".clawd", "deploy-scan.json");
 async function readJson(file) {
   let raw;
   try {
@@ -55045,14 +55253,14 @@ async function readJson(file) {
   }
 }
 async function writeJson(file, value) {
-  await import_promises4.default.mkdir(import_node_path31.default.dirname(file), { recursive: true });
+  await import_promises4.default.mkdir(import_node_path32.default.dirname(file), { recursive: true });
   const tmp = `${file}.tmp-${process.pid}`;
   await import_promises4.default.writeFile(tmp, `${JSON.stringify(value, null, 2)}
 `);
   await import_promises4.default.rename(tmp, file);
 }
 async function readDeployFile(dir) {
-  const raw = await readJson(import_node_path31.default.join(dir, DEPLOY_FILE));
+  const raw = await readJson(import_node_path32.default.join(dir, DEPLOY_FILE));
   if (raw === void 0) return void 0;
   const parsed = DeployFileSchema.safeParse(raw);
   if (!parsed.success) {
@@ -55062,10 +55270,10 @@ async function readDeployFile(dir) {
   return parsed.data;
 }
 async function writeDeployFile(dir, file) {
-  await writeJson(import_node_path31.default.join(dir, DEPLOY_FILE), DeployFileSchema.parse(file));
+  await writeJson(import_node_path32.default.join(dir, DEPLOY_FILE), DeployFileSchema.parse(file));
 }
 async function readScan(dir) {
-  const raw = await readJson(import_node_path31.default.join(dir, SCAN_FILE));
+  const raw = await readJson(import_node_path32.default.join(dir, SCAN_FILE));
   if (raw === void 0) return void 0;
   const parsed = DeployScanSchema.safeParse(raw);
   if (!parsed.success) {
@@ -55075,7 +55283,7 @@ async function readScan(dir) {
   return parsed.data;
 }
 async function writeScan(dir, scan) {
-  await writeJson(import_node_path31.default.join(dir, SCAN_FILE), DeployScanSchema.parse(scan));
+  await writeJson(import_node_path32.default.join(dir, SCAN_FILE), DeployScanSchema.parse(scan));
 }
 function emptyDeployFile() {
   return { version: 1, manifest: { version: 1, clis: [], secrets: [], assets: [], connectors: [] } };
@@ -55115,7 +55323,7 @@ function requiredEnvNames(file) {
 // src/deploy/repo.ts
 var import_node_child_process8 = require("child_process");
 var import_promises5 = __toESM(require("fs/promises"), 1);
-var import_node_path32 = __toESM(require("path"), 1);
+var import_node_path33 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/deploy/templates.ts
@@ -55349,7 +55557,7 @@ var L = [
 var WORKFLOW_TEMPLATE = L.join("\n");
 
 // src/deploy/repo.ts
-var DEPLOY_FILE_REL = DEPLOY_FILE.split(import_node_path32.default.sep).join("/");
+var DEPLOY_FILE_REL = DEPLOY_FILE.split(import_node_path33.default.sep).join("/");
 var DEFAULT_TIMEOUT_MS3 = 6e4;
 var runCommand = (cmd, args, opts = {}) => new Promise((resolve9) => {
   const child = (0, import_node_child_process8.spawn)(cmd, args, {
@@ -55416,7 +55624,7 @@ async function samePath(a, b2) {
     try {
       return await import_promises5.default.realpath(x);
     } catch {
-      return import_node_path32.default.resolve(x);
+      return import_node_path33.default.resolve(x);
     }
   };
   return await real(a) === await real(b2);
@@ -55442,7 +55650,7 @@ async function identityArgs(exec, dir) {
   return ["-c", "user.name=clawd", "-c", "user.email=clawd@clawos.local"];
 }
 async function writeTemplates(dir) {
-  const gi = import_node_path32.default.join(dir, ".gitignore");
+  const gi = import_node_path33.default.join(dir, ".gitignore");
   let existing;
   try {
     existing = await import_promises5.default.readFile(gi, "utf8");
@@ -55450,8 +55658,8 @@ async function writeTemplates(dir) {
     existing = void 0;
   }
   await import_promises5.default.writeFile(gi, mergeGitignore(existing));
-  const wf = import_node_path32.default.join(dir, WORKFLOW_PATH);
-  await import_promises5.default.mkdir(import_node_path32.default.dirname(wf), { recursive: true });
+  const wf = import_node_path33.default.join(dir, WORKFLOW_PATH);
+  await import_promises5.default.mkdir(import_node_path33.default.dirname(wf), { recursive: true });
   await import_promises5.default.writeFile(wf, WORKFLOW_TEMPLATE);
 }
 async function ensureRepo(exec, args) {
@@ -55641,12 +55849,12 @@ async function rerunJob(exec, slug, runId, jobId) {
 }
 
 // src/deploy/scan-task.ts
-var import_node_path33 = __toESM(require("path"), 1);
+var import_node_path34 = __toESM(require("path"), 1);
 var BUTLER_PERSONA_ID = "persona-clawd-butler";
 var SCANNABLE_ASSETS = [
   {
     name: "deploy-kit",
-    path: (dataDir) => import_node_path33.default.join(dataDir, "deploy-kit"),
+    path: (dataDir) => import_node_path34.default.join(dataDir, "deploy-kit"),
     what: "FC \u90E8\u7F72\u80FD\u529B\uFF08publish.sh / new-extension.sh / \u5DE5\u5177\u94FE / \u51ED\u8BC1\u76EE\u5F55\uFF09\u3002persona \u7528\u7EDD\u5BF9\u8DEF\u5F84\u53BB\u8C03\u8FD9\u91CC\u7684\u811A\u672C\u65F6\uFF0C\u5C31\u8BE5\u62A5\u4E00\u6761 asset\u3002"
   },
   {
@@ -56380,9 +56588,9 @@ async function refreshTunnelUrlOnStartup(deps) {
 
 // src/lark-bot-connector/binding-store.ts
 var import_node_fs29 = __toESM(require("fs"), 1);
-var import_node_path34 = __toESM(require("path"), 1);
+var import_node_path35 = __toESM(require("path"), 1);
 function createLarkBotBindingStore(personaRoot) {
-  const filePath = (personaId2) => import_node_path34.default.join(personaRoot, safeFileName(personaId2), ".clawd", "lark-bot.json");
+  const filePath = (personaId2) => import_node_path35.default.join(personaRoot, safeFileName(personaId2), ".clawd", "lark-bot.json");
   const read = (personaId2) => {
     const file = filePath(personaId2);
     if (!import_node_fs29.default.existsSync(file)) return null;
@@ -56396,7 +56604,7 @@ function createLarkBotBindingStore(personaRoot) {
   };
   const write = (personaId2, meta) => {
     const file = filePath(personaId2);
-    import_node_fs29.default.mkdirSync(import_node_path34.default.dirname(file), { recursive: true });
+    import_node_fs29.default.mkdirSync(import_node_path35.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     import_node_fs29.default.writeFileSync(tmp, JSON.stringify(meta, null, 2), { mode: 384 });
     import_node_fs29.default.renameSync(tmp, file);
@@ -56564,7 +56772,7 @@ function createLarkBotCloudClient(opts) {
 
 // src/lark-bot-connector/chat-router.ts
 var import_node_fs30 = __toESM(require("fs"), 1);
-var import_node_path35 = __toESM(require("path"), 1);
+var import_node_path36 = __toESM(require("path"), 1);
 init_protocol();
 var ERROR_REPLY_TEXT = "\u5904\u7406\u51FA\u9519\u4E86\uFF0C\u8BF7\u91CD\u8BD5";
 var LOCAL_TURN_RETRIES = 2;
@@ -56643,7 +56851,7 @@ function createLarkChatRouter(deps) {
         }
         const dir = deps.mediaRootFor(env.chatId);
         import_node_fs30.default.mkdirSync(dir, { recursive: true });
-        const p2 = import_node_path35.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}.${ext}`);
+        const p2 = import_node_path36.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}.${ext}`);
         import_node_fs30.default.writeFileSync(p2, r.data);
         lines.push(`[\u56FE\u7247: ${p2}]\uFF08\u7528 Read \u5DE5\u5177\u67E5\u770B\uFF09`);
       } catch (err) {
@@ -56666,7 +56874,7 @@ function createLarkChatRouter(deps) {
         }
         const dir = deps.mediaRootFor(env.chatId);
         import_node_fs30.default.mkdirSync(dir, { recursive: true });
-        const p2 = import_node_path35.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}-${safeAttachmentName(f.name)}`);
+        const p2 = import_node_path36.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}-${safeAttachmentName(f.name)}`);
         import_node_fs30.default.writeFileSync(p2, r.data);
         lines.push(`[\u6587\u4EF6: ${p2}]\uFF08\u7528 Read \u5DE5\u5177\u67E5\u770B\uFF09`);
       } catch (err) {
@@ -56881,7 +57089,7 @@ ${formatLarkSpeakerReminder(speaker)}`
 }
 
 // src/lark-bot-connector/envelope.ts
-var import_node_crypto7 = require("crypto");
+var import_node_crypto8 = require("crypto");
 var LARK_ENVELOPE_PREFIX = "clawdlbe1";
 function verifyLarkEventEnvelope(args) {
   const { token, publicKeyPem } = args;
@@ -56900,7 +57108,7 @@ function verifyLarkEventEnvelope(args) {
   const data = Buffer.from(`${prefix}.${payloadB64}`, "utf8");
   let sigOk = false;
   try {
-    sigOk = (0, import_node_crypto7.verify)(null, data, publicKeyPem, Buffer.from(sigB64, "base64url"));
+    sigOk = (0, import_node_crypto8.verify)(null, data, publicKeyPem, Buffer.from(sigB64, "base64url"));
   } catch {
     sigOk = false;
   }
@@ -57493,11 +57701,11 @@ async function forwardPeerExecToPeer(args) {
 
 // src/tools/codex-history.ts
 var import_node_fs32 = __toESM(require("fs"), 1);
-var import_node_path37 = __toESM(require("path"), 1);
+var import_node_path38 = __toESM(require("path"), 1);
 
 // src/tools/transcript-search.ts
 var import_node_fs31 = __toESM(require("fs"), 1);
-var import_node_path36 = __toESM(require("path"), 1);
+var import_node_path37 = __toESM(require("path"), 1);
 var SNIPPET_PAD = 60;
 var INJECTED_ENVELOPE_RE = /^<(system-reminder|command-name|command-message|command-args|local-command-stdout|local-command-stderr|task-notification|user-prompt-submit-hook|environment_context|user_instructions)\b/;
 var CODEX_WRAPPER_RE = /<(related-dir|environment_context|user_instructions)>[\s\S]*?<\/\1>/g;
@@ -57590,7 +57798,7 @@ function createCodexRolloutLocator(roots) {
       return;
     }
     for (const entry of entries) {
-      const full = import_node_path36.default.join(dir, entry.name);
+      const full = import_node_path37.default.join(dir, entry.name);
       if (entry.isDirectory()) {
         walk2(full, into);
         continue;
@@ -57870,7 +58078,7 @@ function readThreadNames(sharedHome) {
   if (!sharedHome) return names;
   let raw;
   try {
-    raw = import_node_fs32.default.readFileSync(import_node_path37.default.join(sharedHome, "session_index.jsonl"), "utf8");
+    raw = import_node_fs32.default.readFileSync(import_node_path38.default.join(sharedHome, "session_index.jsonl"), "utf8");
   } catch {
     return names;
   }
@@ -57895,7 +58103,7 @@ function walkRollouts(dir, visit) {
   }
   entries.sort((a, b2) => a.name < b2.name ? 1 : a.name > b2.name ? -1 : 0);
   for (const entry of entries) {
-    const full = import_node_path37.default.join(dir, entry.name);
+    const full = import_node_path38.default.join(dir, entry.name);
     if (entry.isDirectory()) {
       if (!walkRollouts(full, visit)) return false;
     } else if (ROLLOUT_NAME_RE.test(entry.name)) {
@@ -57963,7 +58171,7 @@ var CodexHistoryReader = class {
     return [];
   }
   async listSessions(args) {
-    const want = import_node_path37.default.resolve(args.projectPath);
+    const want = import_node_path38.default.resolve(args.projectPath);
     const names = readThreadNames(this.deps.sharedHome);
     const found = [];
     let scanned = 0;
@@ -57972,7 +58180,7 @@ var CodexHistoryReader = class {
         if (++scanned > CODEX_LIST_SESSIONS_SCAN_CAP) return false;
         const head = readHead(file, PEEK_BYTES);
         const cwd = head === null ? null : peekSessionCwd(head);
-        if (!cwd || import_node_path37.default.resolve(cwd) !== want) return;
+        if (!cwd || import_node_path38.default.resolve(cwd) !== want) return;
         const first = readFirstLine(file);
         const meta = first === null ? null : parseCodexRolloutMeta(first);
         if (!meta) return;
@@ -58449,6 +58657,9 @@ function openHttpLineStream(opts) {
 // src/tools/codex-cloud.ts
 init_protocol();
 
+// src/tools/codex-cloud-session.ts
+var import_node_fs33 = __toESM(require("fs"), 1);
+
 // src/tools/codex-cloud-history.ts
 function personaIdFromCloudCwd(cwd) {
   const m2 = /\/p\/([^/?#]+)(?:[/?#]|$)/.exec(cwd);
@@ -58563,6 +58774,22 @@ function deferredLineStream() {
     }
   };
 }
+function cloudImageInput(deps) {
+  return (url) => {
+    const secret = deps.getSignSecret?.();
+    const p2 = secret ? resolveSignedFileUrl(secret, url) : null;
+    if (!p2) return null;
+    const mime = lookupMime(p2);
+    if (!mime.startsWith("image/")) return null;
+    try {
+      const bytes = (deps.readFile ?? import_node_fs33.default.readFileSync)(p2);
+      return { type: "image", url: `data:${mime};base64,${bytes.toString("base64")}` };
+    } catch (e) {
+      deps.logger?.warn("cloud image attachment unreadable", { path: p2, message: e.message });
+      return null;
+    }
+  };
+}
 function createCloudCodexSession(ctx, sink, deps) {
   const personaId2 = personaIdFromCloudCwd(ctx.cwd);
   const stream = deferredLineStream();
@@ -58572,6 +58799,7 @@ function createCloudCodexSession(ctx, sink, deps) {
     stream,
     logger: deps.logger,
     threadParams: cloudThreadParams(ctx),
+    imageInput: cloudImageInput(deps),
     // skills 在 Pod 里由 persona 目录自带，本机路径对它没意义
     // 「让对端走人」= 断开下行流，gateway 收到就删 Job；信号对 Pod 没有意义
     kill: () => stream.close()
@@ -58628,9 +58856,11 @@ var CloudCodexAdapter = class {
   historyReader;
   client;
   logger;
+  getSignSecret;
   constructor(opts) {
     this.client = opts.client;
     this.logger = opts.logger;
+    this.getSignSecret = opts.getSignSecret;
     this.historyReader = new CloudCodexHistoryReader(opts.client, opts.logger);
   }
   /** 可用 = 能拿到凭据（登了飞书、生成过 key、中心配了 gateway），与本机装没装 codex 无关 */
@@ -58650,7 +58880,7 @@ var CloudCodexAdapter = class {
     return CODEX_CONTEXT_WINDOW;
   }
   createSession(ctx, sink) {
-    return createCloudCodexSession(ctx, sink, { client: this.client, logger: this.logger });
+    return createCloudCodexSession(ctx, sink, { client: this.client, logger: this.logger, getSignSecret: this.getSignSecret });
   }
   spawn(_ctx) {
     throw new Error("CloudCodexAdapter uses createSession, not spawn");
@@ -58667,7 +58897,7 @@ var CloudCodexAdapter = class {
 init_protocol();
 
 // src/tools/codex-skills.ts
-var import_node_path38 = __toESM(require("path"), 1);
+var import_node_path39 = __toESM(require("path"), 1);
 function str3(v2) {
   return typeof v2 === "string" ? v2 : void 0;
 }
@@ -58704,7 +58934,7 @@ async function listCodexSkills(cwd, deps = {}) {
     // 先写 extraRoots 再写 list（stdio 按写入顺序处理，fire-and-forget 不 await 回包；
     // codex-session.ts ready 序列同款，两处保持一致）。失败不阻塞 list。
     beforeRequest: (client) => {
-      void client.request("skills/extraRoots/set", { extraRoots: [import_node_path38.default.join(cwd, ".claude", "skills")] }).catch(() => void 0);
+      void client.request("skills/extraRoots/set", { extraRoots: [import_node_path39.default.join(cwd, ".claude", "skills")] }).catch(() => void 0);
     }
   });
   return mapSkillsListResponse(res);
@@ -58778,23 +59008,23 @@ function rec3(v2) {
 }
 
 // src/workspace/browser.ts
-var import_node_fs33 = __toESM(require("fs"), 1);
+var import_node_fs34 = __toESM(require("fs"), 1);
 var import_node_os10 = __toESM(require("os"), 1);
-var import_node_path39 = __toESM(require("path"), 1);
+var import_node_path40 = __toESM(require("path"), 1);
 init_protocol();
 var MAX_FILE_BYTES2 = 2 * 1024 * 1024;
 function resolveInsideCwd(cwd, subpath) {
-  const absCwd = import_node_path39.default.resolve(cwd);
-  const joined = import_node_path39.default.resolve(absCwd, subpath ?? ".");
-  const rel = import_node_path39.default.relative(absCwd, joined);
-  if (rel.startsWith("..") || import_node_path39.default.isAbsolute(rel)) {
+  const absCwd = import_node_path40.default.resolve(cwd);
+  const joined = import_node_path40.default.resolve(absCwd, subpath ?? ".");
+  const rel = import_node_path40.default.relative(absCwd, joined);
+  if (rel.startsWith("..") || import_node_path40.default.isAbsolute(rel)) {
     throw new ClawdError(ERROR_CODES.INVALID_PATH, `path escapes cwd: ${subpath}`);
   }
   return joined;
 }
 function ensureCwd(cwd) {
   try {
-    const stat = import_node_fs33.default.statSync(cwd);
+    const stat = import_node_fs34.default.statSync(cwd);
     if (!stat.isDirectory()) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${cwd}`);
     }
@@ -58808,7 +59038,7 @@ var WorkspaceBrowser = class {
     const cwd = args.cwd && args.cwd.length > 0 ? args.cwd : import_node_os10.default.homedir();
     ensureCwd(cwd);
     const full = resolveInsideCwd(cwd, args.path);
-    const dirents = import_node_fs33.default.readdirSync(full, { withFileTypes: true });
+    const dirents = import_node_fs34.default.readdirSync(full, { withFileTypes: true });
     const entries = [];
     for (const d of dirents) {
       if (!args.showHidden && d.name.startsWith(".")) continue;
@@ -58818,7 +59048,7 @@ var WorkspaceBrowser = class {
         mtime: ""
       };
       try {
-        const st = import_node_fs33.default.statSync(import_node_path39.default.join(full, d.name));
+        const st = import_node_fs34.default.statSync(import_node_path40.default.join(full, d.name));
         entry.mtime = new Date(st.mtimeMs).toISOString();
         if (d.isFile()) entry.size = st.size;
       } catch {
@@ -58834,14 +59064,14 @@ var WorkspaceBrowser = class {
   read(args) {
     ensureCwd(args.cwd);
     const full = resolveInsideCwd(args.cwd, args.path);
-    const st = import_node_fs33.default.statSync(full);
+    const st = import_node_fs34.default.statSync(full);
     if (!st.isFile()) {
       throw new ClawdError(ERROR_CODES.INVALID_PATH, `not a file: ${args.path}`);
     }
     if (st.size > MAX_FILE_BYTES2) {
       throw new ClawdError(ERROR_CODES.FILE_TOO_LARGE, `file > ${MAX_FILE_BYTES2} bytes`);
     }
-    const buf = import_node_fs33.default.readFileSync(full);
+    const buf = import_node_fs34.default.readFileSync(full);
     const isBinary = buf.includes(0);
     if (isBinary) {
       return {
@@ -58863,20 +59093,20 @@ var WorkspaceBrowser = class {
 };
 
 // src/skills/agents-scanner.ts
-var import_node_fs34 = __toESM(require("fs"), 1);
+var import_node_fs35 = __toESM(require("fs"), 1);
 var import_node_os11 = __toESM(require("os"), 1);
-var import_node_path40 = __toESM(require("path"), 1);
+var import_node_path41 = __toESM(require("path"), 1);
 var DEFAULT_POLICY_DIR_DARWIN = "/Library/Application Support/ClaudeCode/.claude/agents";
 function isDirLikeSync2(p2) {
   try {
-    return import_node_fs34.default.statSync(p2).isDirectory();
+    return import_node_fs35.default.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function fileExistsSync(p2) {
   try {
-    return import_node_fs34.default.statSync(p2).isFile();
+    return import_node_fs35.default.statSync(p2).isFile();
   } catch {
     return false;
   }
@@ -58884,7 +59114,7 @@ function fileExistsSync(p2) {
 function parseAgentFile(filePath) {
   let content;
   try {
-    content = import_node_fs34.default.readFileSync(filePath, "utf8");
+    content = import_node_fs35.default.readFileSync(filePath, "utf8");
   } catch {
     return {};
   }
@@ -58897,16 +59127,16 @@ function parseAgentFile(filePath) {
 function scanAgentsDir(dir, source, seen, out) {
   let entries;
   try {
-    entries = import_node_fs34.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs35.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
     if (!ent.name.endsWith(".md")) continue;
-    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path40.default.join(dir, ent.name)))) {
+    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path41.default.join(dir, ent.name)))) {
       continue;
     }
-    const filePath = import_node_path40.default.join(dir, ent.name);
+    const filePath = import_node_path41.default.join(dir, ent.name);
     const baseName = ent.name.replace(/\.md$/, "");
     if (seen.has(baseName)) continue;
     seen.add(baseName);
@@ -58924,12 +59154,12 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   function walk2(dir, namespaces) {
     let entries;
     try {
-      entries = import_node_fs34.default.readdirSync(dir, { withFileTypes: true });
+      entries = import_node_fs35.default.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const ent of entries) {
-      const childPath = import_node_path40.default.join(dir, ent.name);
+      const childPath = import_node_path41.default.join(dir, ent.name);
       if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync2(childPath)) {
         walk2(childPath, [...namespaces, ent.name]);
         continue;
@@ -58954,13 +59184,13 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   walk2(root, []);
 }
 function readInstalledPlugins2(home) {
-  const pluginsDir = import_node_path40.default.join(home, ".claude", "plugins");
-  const v2 = import_node_path40.default.join(pluginsDir, "installed_plugins_v2.json");
-  const v1 = import_node_path40.default.join(pluginsDir, "installed_plugins.json");
+  const pluginsDir = import_node_path41.default.join(home, ".claude", "plugins");
+  const v2 = import_node_path41.default.join(pluginsDir, "installed_plugins_v2.json");
+  const v1 = import_node_path41.default.join(pluginsDir, "installed_plugins.json");
   let raw = null;
   for (const candidate of [v2, v1]) {
     try {
-      raw = import_node_fs34.default.readFileSync(candidate, "utf8");
+      raw = import_node_fs35.default.readFileSync(candidate, "utf8");
       break;
     } catch {
     }
@@ -58985,19 +59215,19 @@ function readInstalledPlugins2(home) {
   return out;
 }
 function walkUpProjectAgentsDirs(startCwd, home, seen, out) {
-  let cur = import_node_path40.default.resolve(startCwd);
-  const fsRoot = import_node_path40.default.parse(cur).root;
+  let cur = import_node_path41.default.resolve(startCwd);
+  const fsRoot = import_node_path41.default.parse(cur).root;
   while (true) {
-    scanAgentsDir(import_node_path40.default.join(cur, ".claude", "agents"), "project", seen, out);
+    scanAgentsDir(import_node_path41.default.join(cur, ".claude", "agents"), "project", seen, out);
     let hasGit = false;
     try {
-      hasGit = import_node_fs34.default.existsSync(import_node_path40.default.join(cur, ".git"));
+      hasGit = import_node_fs35.default.existsSync(import_node_path41.default.join(cur, ".git"));
     } catch {
     }
     if (hasGit) return;
     if (cur === home) return;
     if (cur === fsRoot) return;
-    const parent = import_node_path40.default.dirname(cur);
+    const parent = import_node_path41.default.dirname(cur);
     if (parent === cur) return;
     cur = parent;
   }
@@ -59032,7 +59262,7 @@ var AgentsScanner = class {
     }
     const fsBlock = [];
     scanAgentsDir(
-      import_node_path40.default.join(this.home, ".claude", "agents"),
+      import_node_path41.default.join(this.home, ".claude", "agents"),
       "global",
       seen,
       fsBlock
@@ -59046,7 +59276,7 @@ var AgentsScanner = class {
       ...this.extraPluginRoots
     ];
     for (const { name, root } of plugins) {
-      const agentsRoot = import_node_path40.default.join(root, "agents");
+      const agentsRoot = import_node_path41.default.join(root, "agents");
       scanPluginAgentsTree(agentsRoot, name, seen, fsBlock);
     }
     return [...builtinBlock, ...fsBlock];
@@ -59054,15 +59284,15 @@ var AgentsScanner = class {
 };
 
 // src/observer/session-observer.ts
-var import_node_fs36 = __toESM(require("fs"), 1);
+var import_node_fs37 = __toESM(require("fs"), 1);
 var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path42 = __toESM(require("path"), 1);
+var import_node_path43 = __toESM(require("path"), 1);
 init_claude_history();
 
 // src/observer/subagent-meta-observer.ts
-var import_node_fs35 = __toESM(require("fs"), 1);
+var import_node_fs36 = __toESM(require("fs"), 1);
 var import_node_os12 = __toESM(require("os"), 1);
-var import_node_path41 = __toESM(require("path"), 1);
+var import_node_path42 = __toESM(require("path"), 1);
 init_claude_history();
 var META_RE = /^agent-([A-Za-z0-9_-]+)\.meta\.json$/;
 var SubagentMetaObserver = class {
@@ -59075,7 +59305,7 @@ var SubagentMetaObserver = class {
   watches = /* @__PURE__ */ new Map();
   // public for spec only：测试直接拼路径写假 meta.json；生产 start() 内部自己解析
   resolveSubagentDir(cwd, toolSessionId) {
-    return import_node_path41.default.join(
+    return import_node_path42.default.join(
       this.home,
       ".claude",
       "projects",
@@ -59105,7 +59335,7 @@ var SubagentMetaObserver = class {
   attachWatcher(w2) {
     if (w2.watcher) return;
     try {
-      w2.watcher = import_node_fs35.default.watch(w2.dirPath, { persistent: false }, (_evt, name) => {
+      w2.watcher = import_node_fs36.default.watch(w2.dirPath, { persistent: false }, (_evt, name) => {
         if (!name) return;
         const m2 = META_RE.exec(String(name));
         if (!m2) return;
@@ -59117,7 +59347,7 @@ var SubagentMetaObserver = class {
   scan(w2) {
     let entries;
     try {
-      entries = import_node_fs35.default.readdirSync(w2.dirPath);
+      entries = import_node_fs36.default.readdirSync(w2.dirPath);
     } catch {
       return;
     }
@@ -59131,10 +59361,10 @@ var SubagentMetaObserver = class {
     if (!m2) return;
     const agentId = m2[1];
     if (w2.emitted.has(agentId)) return;
-    const file = import_node_path41.default.join(w2.dirPath, name);
+    const file = import_node_path42.default.join(w2.dirPath, name);
     let raw;
     try {
-      raw = import_node_fs35.default.readFileSync(file, "utf8");
+      raw = import_node_fs36.default.readFileSync(file, "utf8");
     } catch {
       return;
     }
@@ -59191,14 +59421,14 @@ var SessionObserver = class {
   metaObserver;
   resolveJsonlPath(cwd, toolSessionId, override) {
     if (override) return override;
-    return import_node_path42.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
+    return import_node_path43.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
   }
   start(args) {
     this.stop(args.sessionId);
     const filePath = this.resolveJsonlPath(args.cwd, args.toolSessionId, args.jsonlPath);
     let size = 0;
     try {
-      size = import_node_fs36.default.statSync(filePath).size;
+      size = import_node_fs37.default.statSync(filePath).size;
     } catch {
     }
     const w2 = {
@@ -59211,16 +59441,16 @@ var SessionObserver = class {
       adapter: args.adapter,
       prevIsRejectSentinel: false,
       toolSessionId: args.toolSessionId,
-      sawFile: import_node_fs36.default.existsSync(filePath),
+      sawFile: import_node_fs37.default.existsSync(filePath),
       lastRelocateScanMs: 0,
       pendingCwdDerive: false,
       lastDeriveMs: 0
     };
     try {
-      import_node_fs36.default.mkdirSync(import_node_path42.default.dirname(filePath), { recursive: true });
+      import_node_fs37.default.mkdirSync(import_node_path43.default.dirname(filePath), { recursive: true });
     } catch {
     }
-    w2.watcher = import_node_fs36.default.watch(import_node_path42.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
+    w2.watcher = import_node_fs37.default.watch(import_node_path43.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
       if (!changedName || !w2.filePath.endsWith(changedName)) return;
       this.poll(w2);
     });
@@ -59243,7 +59473,7 @@ var SessionObserver = class {
   // 异常静默吞，不阻塞 watcher 启动
   hydrateMetaTail(w2, maxLines = 200) {
     try {
-      const raw = import_node_fs36.default.readFileSync(w2.filePath, "utf8");
+      const raw = import_node_fs37.default.readFileSync(w2.filePath, "utf8");
       if (!raw) return;
       const allLines = raw.split("\n").filter((l) => l.trim().length > 0);
       if (allLines.length === 0) return;
@@ -59267,7 +59497,7 @@ var SessionObserver = class {
   poll(w2) {
     let size = 0;
     try {
-      size = import_node_fs36.default.statSync(w2.filePath).size;
+      size = import_node_fs37.default.statSync(w2.filePath).size;
     } catch {
       if (w2.sawFile) this.maybeRelocate(w2);
       return;
@@ -59278,11 +59508,11 @@ var SessionObserver = class {
       w2.buf = "";
     }
     if (size === w2.lastSize) return;
-    const fd = import_node_fs36.default.openSync(w2.filePath, "r");
+    const fd = import_node_fs37.default.openSync(w2.filePath, "r");
     try {
       const len = size - w2.lastSize;
       const buf = Buffer.alloc(len);
-      import_node_fs36.default.readSync(fd, buf, 0, len, w2.lastSize);
+      import_node_fs37.default.readSync(fd, buf, 0, len, w2.lastSize);
       w2.lastSize = size;
       w2.buf += buf.toString("utf8");
       let newlineIndex;
@@ -59305,7 +59535,7 @@ var SessionObserver = class {
         }
       }
     } finally {
-      import_node_fs36.default.closeSync(fd);
+      import_node_fs37.default.closeSync(fd);
     }
     if (w2.pendingCwdDerive) this.maybeDeriveCwd(w2);
   }
@@ -59317,7 +59547,7 @@ var SessionObserver = class {
     const now = Date.now();
     if (now - w2.lastRelocateScanMs < 1e3) return;
     w2.lastRelocateScanMs = now;
-    const projectsRoot = import_node_path42.default.join(this.home, ".claude", "projects");
+    const projectsRoot = import_node_path43.default.join(this.home, ".claude", "projects");
     const found = findTranscriptByToolSessionId(projectsRoot, w2.toolSessionId);
     if (!found || found === w2.filePath) return;
     try {
@@ -59326,7 +59556,7 @@ var SessionObserver = class {
     }
     w2.filePath = found;
     try {
-      w2.watcher = import_node_fs36.default.watch(import_node_path42.default.dirname(found), { persistent: false }, (_event, changedName) => {
+      w2.watcher = import_node_fs37.default.watch(import_node_path43.default.dirname(found), { persistent: false }, (_event, changedName) => {
         if (!changedName || !w2.filePath.endsWith(changedName)) return;
         this.poll(w2);
       });
@@ -59448,9 +59678,9 @@ function listRegistered() {
 // src/tools/title-generator.ts
 var import_node_child_process9 = require("child_process");
 init_protocol();
-var import_node_fs37 = __toESM(require("fs"), 1);
+var import_node_fs38 = __toESM(require("fs"), 1);
 var import_node_os14 = __toESM(require("os"), 1);
-var import_node_path43 = __toESM(require("path"), 1);
+var import_node_path44 = __toESM(require("path"), 1);
 var TITLE_GEN_DIR_PREFIX = "clawd-title-";
 var TITLE_MODEL_BY_TOOL = {
   claude: "haiku",
@@ -59521,21 +59751,21 @@ async function generateSessionTitle(tool, firstMessage, deps = {}) {
   if (!text) return null;
   let workDir;
   try {
-    workDir = import_node_fs37.default.mkdtempSync(import_node_path43.default.join(import_node_os14.default.tmpdir(), TITLE_GEN_DIR_PREFIX));
+    workDir = import_node_fs38.default.mkdtempSync(import_node_path44.default.join(import_node_os14.default.tmpdir(), TITLE_GEN_DIR_PREFIX));
   } catch {
     return null;
   }
   const cleanupWorkDir = () => {
     try {
-      import_node_fs37.default.rmSync(workDir, { recursive: true, force: true });
+      import_node_fs38.default.rmSync(workDir, { recursive: true, force: true });
     } catch {
     }
   };
-  const outFile = import_node_path43.default.join(workDir, `codex-title-${process.pid}-${++outFileSeq}-${Date.now()}.txt`);
-  const schemaFile = import_node_path43.default.join(workDir, "title-schema.json");
+  const outFile = import_node_path44.default.join(workDir, `codex-title-${process.pid}-${++outFileSeq}-${Date.now()}.txt`);
+  const schemaFile = import_node_path44.default.join(workDir, "title-schema.json");
   if (isCodexFamily(tool)) {
     try {
-      import_node_fs37.default.writeFileSync(schemaFile, CODEX_TITLE_SCHEMA);
+      import_node_fs38.default.writeFileSync(schemaFile, CODEX_TITLE_SCHEMA);
     } catch {
       cleanupWorkDir();
       return null;
@@ -59585,7 +59815,7 @@ async function generateSessionTitle(tool, firstMessage, deps = {}) {
       if (tool === "claude") return finish(parseTitleJson(stdout));
       let fileText = "";
       try {
-        fileText = import_node_fs37.default.readFileSync(outFile, "utf8");
+        fileText = import_node_fs38.default.readFileSync(outFile, "utf8");
       } catch {
         return finish(null);
       }
@@ -59607,7 +59837,7 @@ var wrapper_default = import_websocket.default;
 
 // src/transport/local-ws-server.ts
 var import_node_http2 = __toESM(require("http"), 1);
-var import_node_crypto8 = require("crypto");
+var import_node_crypto9 = require("crypto");
 
 // src/transport/preview-proxy.ts
 var import_node_http = __toESM(require("http"), 1);
@@ -59891,7 +60121,7 @@ var LocalWsServer = class {
     }
   }
   onConnection(socket, remoteAddress) {
-    const id = (0, import_node_crypto8.randomUUID)();
+    const id = (0, import_node_crypto9.randomUUID)();
     const subscribedSessions = /* @__PURE__ */ new Map();
     const handle = {
       id,
@@ -60297,8 +60527,8 @@ async function authenticate(token, deps) {
 }
 
 // src/legacy-cleanup.ts
-var fs48 = __toESM(require("fs/promises"), 1);
-var path51 = __toESM(require("path"), 1);
+var fs49 = __toESM(require("fs/promises"), 1);
+var path52 = __toESM(require("path"), 1);
 var LEGACY_FILES = [
   "personal-capability.json",
   "received-capabilities.json",
@@ -60307,9 +60537,9 @@ var LEGACY_FILES = [
 async function cleanupLegacyCapabilityFiles(dataDir, logger) {
   const removed = [];
   for (const name of LEGACY_FILES) {
-    const p2 = path51.join(dataDir, name);
+    const p2 = path52.join(dataDir, name);
     try {
-      await fs48.unlink(p2);
+      await fs49.unlink(p2);
       removed.push(name);
       logger.debug("legacy capability file removed", { file: name });
     } catch (err) {
@@ -60321,13 +60551,13 @@ async function cleanupLegacyCapabilityFiles(dataDir, logger) {
 }
 
 // src/inbox/inbox-store.ts
-var fs49 = __toESM(require("fs"), 1);
-var path52 = __toESM(require("path"), 1);
+var fs50 = __toESM(require("fs"), 1);
+var path53 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs49.mkdirSync(this.dirPath(), { recursive: true });
+    fs50.mkdirSync(this.dirPath(), { recursive: true });
   }
   dataDir;
   /**
@@ -60339,7 +60569,7 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     let raw;
     try {
-      raw = fs49.readFileSync(file, "utf8");
+      raw = fs50.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -60355,7 +60585,7 @@ var InboxStore = class {
     const dir = this.dirPath();
     let entries;
     try {
-      entries = fs49.readdirSync(dir);
+      entries = fs50.readdirSync(dir);
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -60371,9 +60601,9 @@ var InboxStore = class {
     if (existing.some((m2) => m2.id === message.id)) return;
     const file = this.filePath(message.peerDeviceId);
     const line = JSON.stringify(message) + "\n";
-    fs49.appendFileSync(file, line, { mode: 384 });
+    fs50.appendFileSync(file, line, { mode: 384 });
     try {
-      fs49.chmodSync(file, 384);
+      fs50.chmodSync(file, 384);
     } catch {
     }
   }
@@ -60403,7 +60633,7 @@ var InboxStore = class {
   removeByPeerDeviceId(peerDeviceId) {
     const file = this.filePath(peerDeviceId);
     try {
-      fs49.unlinkSync(file);
+      fs50.unlinkSync(file);
     } catch (err) {
       if (err?.code === "ENOENT") return;
     }
@@ -60412,18 +60642,18 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     const content = messages.map((m2) => JSON.stringify(m2)).join("\n") + (messages.length > 0 ? "\n" : "");
-    fs49.writeFileSync(tmp, content, { mode: 384 });
-    fs49.renameSync(tmp, file);
+    fs50.writeFileSync(tmp, content, { mode: 384 });
+    fs50.renameSync(tmp, file);
     try {
-      fs49.chmodSync(file, 384);
+      fs50.chmodSync(file, 384);
     } catch {
     }
   }
   dirPath() {
-    return path52.join(this.dataDir, INBOX_SUBDIR);
+    return path53.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerDeviceId) {
-    return path52.join(this.dirPath(), `${peerDeviceId}.jsonl`);
+    return path53.join(this.dirPath(), `${peerDeviceId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -60511,8 +60741,8 @@ var InboxManager = class {
 };
 
 // src/state/contact-store.ts
-var fs50 = __toESM(require("fs"), 1);
-var path53 = __toESM(require("path"), 1);
+var fs51 = __toESM(require("fs"), 1);
+var path54 = __toESM(require("path"), 1);
 var FILE_NAME = "contacts.json";
 var ContactStore = class {
   constructor(dataDir) {
@@ -60522,10 +60752,10 @@ var ContactStore = class {
   contacts = /* @__PURE__ */ new Map();
   load() {
     this.contacts.clear();
-    const file = path53.join(this.dataDir, FILE_NAME);
+    const file = path54.join(this.dataDir, FILE_NAME);
     let raw;
     try {
-      raw = fs50.readFileSync(file, "utf8");
+      raw = fs51.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code !== "ENOENT") this.renameBak(file);
       return;
@@ -60606,27 +60836,27 @@ var ContactStore = class {
     return true;
   }
   flush() {
-    const file = path53.join(this.dataDir, FILE_NAME);
+    const file = path54.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
       { contacts: Array.from(this.contacts.values()) },
       null,
       2
     );
-    fs50.mkdirSync(this.dataDir, { recursive: true });
-    fs50.writeFileSync(tmp, content, { mode: 384 });
-    fs50.renameSync(tmp, file);
+    fs51.mkdirSync(this.dataDir, { recursive: true });
+    fs51.writeFileSync(tmp, content, { mode: 384 });
+    fs51.renameSync(tmp, file);
   }
   renameBak(file) {
     try {
-      fs50.renameSync(file, `${file}.bak`);
+      fs51.renameSync(file, `${file}.bak`);
     } catch {
     }
   }
 };
 
 // src/contact/connect-remote.ts
-var crypto3 = __toESM(require("crypto"), 1);
+var crypto4 = __toESM(require("crypto"), 1);
 init_protocol();
 var HANDSHAKE_TIMEOUT_MS = 5e3;
 var RPC_TIMEOUT_MS = 5e3;
@@ -60681,7 +60911,7 @@ async function connectRemote(args) {
     ws.once("close", onClose);
   });
   function call(method, payload) {
-    const requestId = crypto3.randomUUID();
+    const requestId = crypto4.randomUUID();
     return new Promise((resolve9, reject) => {
       const onMessage = (raw) => {
         let f;
@@ -60727,61 +60957,61 @@ async function connectRemote(args) {
 }
 
 // src/migrations/2026-05-20-flatten-sessions.ts
-var fs51 = __toESM(require("fs"), 1);
-var path54 = __toESM(require("path"), 1);
+var fs52 = __toESM(require("fs"), 1);
+var path55 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path54.join(dataDir, "sessions");
-  const flagPath = path54.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path55.join(dataDir, "sessions");
+  const flagPath = path55.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path54.join(sessionsDir, "default");
+  const defaultDir = path55.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path54.join(defaultDir, entry);
-      const dst = path54.join(sessionsDir, entry);
-      fs51.renameSync(src, dst);
+      const src = path55.join(defaultDir, entry);
+      const dst = path55.join(sessionsDir, entry);
+      fs52.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path54.join(sessionsDir, pid);
+    const personaDir = path55.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path54.join(personaDir, "owner");
+    const ownerSrc = path55.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path54.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs51.mkdirSync(ownerDst, { recursive: true });
+      const ownerDst = path55.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      fs52.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs51.renameSync(path54.join(ownerSrc, file), path54.join(ownerDst, file));
+        fs52.renameSync(path55.join(ownerSrc, file), path55.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path54.join(personaDir, "listener");
+    const listenerSrc = path55.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path54.join(dataDir, ".legacy", `listener-${pid}`);
-      fs51.mkdirSync(archiveDst, { recursive: true });
+      const archiveDst = path55.join(dataDir, ".legacy", `listener-${pid}`);
+      fs52.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs51.renameSync(path54.join(listenerSrc, file), path54.join(archiveDst, file));
+        fs52.renameSync(path55.join(listenerSrc, file), path55.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs51.mkdirSync(sessionsDir, { recursive: true });
-  fs51.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs52.mkdirSync(sessionsDir, { recursive: true });
+  fs52.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -60792,7 +61022,7 @@ function migrateFlattenSessions(opts) {
 }
 function existsSync3(p2) {
   try {
-    fs51.statSync(p2);
+    fs52.statSync(p2);
     return true;
   } catch {
     return false;
@@ -60800,238 +61030,61 @@ function existsSync3(p2) {
 }
 function isDir(p2) {
   try {
-    return fs51.statSync(p2).isDirectory();
+    return fs52.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p2) {
   try {
-    return fs51.readdirSync(p2);
+    return fs52.readdirSync(p2);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p2) {
   try {
-    fs51.rmdirSync(p2);
+    fs52.rmdirSync(p2);
   } catch {
   }
 }
 
 // src/migrations/2026-08-18-drop-seeded-projects.ts
-var fs52 = __toESM(require("fs"), 1);
-var path55 = __toESM(require("path"), 1);
+var fs53 = __toESM(require("fs"), 1);
+var path56 = __toESM(require("path"), 1);
 var DROP_SEEDED_PROJECTS_FLAG = ".projects-seed-dropped.v1.done";
 function dropSeededProjects(opts) {
-  fs52.mkdirSync(opts.dataDir, { recursive: true });
-  const flag = path55.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
-  if (fs52.existsSync(flag)) return { skipped: true, dropped: 0, backup: null };
-  const file = path55.join(opts.dataDir, "projects.json");
+  fs53.mkdirSync(opts.dataDir, { recursive: true });
+  const flag = path56.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
+  if (fs53.existsSync(flag)) return { skipped: true, dropped: 0, backup: null };
+  const file = path56.join(opts.dataDir, "projects.json");
   let raw = null;
   let dropped = 0;
   try {
-    raw = fs52.readFileSync(file, "utf8");
+    raw = fs53.readFileSync(file, "utf8");
     dropped = JSON.parse(raw).projects?.length ?? 0;
   } catch {
   }
   let backup = null;
   if (raw != null && dropped > 0) {
-    const dir = path55.join(opts.dataDir, "backups");
-    fs52.mkdirSync(dir, { recursive: true });
-    backup = path55.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
-    fs52.writeFileSync(backup, raw);
+    const dir = path56.join(opts.dataDir, "backups");
+    fs53.mkdirSync(dir, { recursive: true });
+    backup = path56.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
+    fs53.writeFileSync(backup, raw);
   }
   if (raw != null || dropped > 0) {
-    fs52.writeFileSync(file, JSON.stringify({ projects: [] }, null, 2));
+    fs53.writeFileSync(file, JSON.stringify({ projects: [] }, null, 2));
   }
-  fs52.writeFileSync(flag, (/* @__PURE__ */ new Date()).toISOString());
+  fs53.writeFileSync(flag, (/* @__PURE__ */ new Date()).toISOString());
   return { skipped: false, dropped, backup };
 }
 
 // src/transport/http-router.ts
-var import_node_fs39 = __toESM(require("fs"), 1);
+var import_node_fs40 = __toESM(require("fs"), 1);
 var import_node_path47 = __toESM(require("path"), 1);
 
-// src/attachment/mime.ts
-var import_node_path44 = __toESM(require("path"), 1);
-var TEXT_PLAIN = "text/plain; charset=utf-8";
-var EXT_TO_NATIVE_MIME = {
-  // 图片
-  ".png": "image/png",
-  ".jpg": "image/jpeg",
-  ".jpeg": "image/jpeg",
-  ".gif": "image/gif",
-  ".webp": "image/webp",
-  ".svg": "image/svg+xml",
-  ".bmp": "image/bmp",
-  ".ico": "image/x-icon",
-  ".avif": "image/avif",
-  // 文档 / 富文本
-  ".pdf": "application/pdf",
-  ".html": "text/html; charset=utf-8",
-  ".htm": "text/html; charset=utf-8",
-  // 视频 / 音频
-  ".mp4": "video/mp4",
-  ".webm": "video/webm",
-  ".mov": "video/quicktime",
-  ".mp3": "audio/mpeg",
-  ".wav": "audio/wav",
-  ".ogg": "audio/ogg",
-  ".flac": "audio/flac",
-  // 真二进制（让浏览器下载而不是错把它当文本明文）
-  ".zip": "application/zip",
-  ".gz": "application/gzip",
-  ".tar": "application/x-tar",
-  ".7z": "application/x-7z-compressed",
-  ".rar": "application/x-rar-compressed"
-};
-var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
-  // 文档
-  ".md",
-  ".markdown",
-  ".rst",
-  ".adoc",
-  ".txt",
-  ".log",
-  // 通用结构化
-  ".json",
-  ".jsonc",
-  ".json5",
-  ".yaml",
-  ".yml",
-  ".toml",
-  ".xml",
-  ".csv",
-  ".tsv",
-  ".ini",
-  ".conf",
-  ".cfg",
-  ".env",
-  // 前端
-  ".js",
-  ".jsx",
-  ".mjs",
-  ".cjs",
-  ".ts",
-  ".tsx",
-  ".css",
-  ".scss",
-  ".sass",
-  ".less",
-  ".vue",
-  ".svelte",
-  ".graphql",
-  ".gql",
-  // 后端 / 各语言
-  ".py",
-  ".rb",
-  ".go",
-  ".rs",
-  ".java",
-  ".kt",
-  ".kts",
-  ".scala",
-  ".c",
-  ".h",
-  ".cpp",
-  ".hpp",
-  ".cc",
-  ".hh",
-  ".cs",
-  ".php",
-  ".swift",
-  ".m",
-  ".mm",
-  ".dart",
-  ".lua",
-  ".pl",
-  ".r",
-  ".sh",
-  ".bash",
-  ".zsh",
-  ".fish",
-  // 其他
-  ".sql",
-  ".proto",
-  ".dockerfile",
-  ".diff",
-  ".patch",
-  ".makefile",
-  ".mk"
-]);
-function lookupMime(filePathOrName) {
-  const ext = import_node_path44.default.extname(filePathOrName).toLowerCase();
-  if (EXT_TO_NATIVE_MIME[ext]) return EXT_TO_NATIVE_MIME[ext];
-  if (TEXT_EXTENSIONS.has(ext)) return TEXT_PLAIN;
-  return "application/octet-stream";
-}
-
-// src/attachment/sign-url.ts
-var import_node_crypto9 = __toESM(require("crypto"), 1);
-var HMAC_ALGO = "sha256";
-function base64urlEncode(buf) {
-  const b2 = typeof buf === "string" ? Buffer.from(buf, "utf8") : buf;
-  return b2.toString("base64url");
-}
-function base64urlDecodeBuf(s) {
-  return Buffer.from(s, "base64url");
-}
-function encodeAbsPathForUrl(absPath) {
-  return absPath.split("/").map(encodeURIComponent).join("/");
-}
-function decodeAbsPathFromUrl(encoded) {
-  return encoded.split("/").map(decodeURIComponent).join("/");
-}
-var DOMAIN_PREFIX2 = "clawd-attach-v1|";
-function computeSig(secret, absPath, e) {
-  const msg = e === null ? `${DOMAIN_PREFIX2}${absPath}` : `${DOMAIN_PREFIX2}${absPath}|${e}`;
-  return import_node_crypto9.default.createHmac(HMAC_ALGO, secret).update(msg).digest();
-}
-function signUrlParts(secret, absPath, ttlSeconds, now = Date.now) {
-  const e = ttlSeconds === null ? null : Math.floor(now() / 1e3) + ttlSeconds;
-  const s = base64urlEncode(computeSig(secret, absPath, e));
-  return { absPath, e, s };
-}
-function buildSignedFileUrl(httpBaseUrl, parts, prefix = "/files") {
-  const encodedPath = encodeAbsPathForUrl(parts.absPath);
-  const query = parts.e === null ? `s=${encodeURIComponent(parts.s)}` : `e=${parts.e}&s=${encodeURIComponent(parts.s)}`;
-  const base = httpBaseUrl.endsWith("/") ? httpBaseUrl.slice(0, -1) : httpBaseUrl;
-  return `${base}${prefix}${encodedPath}?${query}`;
-}
-function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
-  let e;
-  if (eRaw === null || eRaw === void 0 || eRaw === "") {
-    e = null;
-  } else {
-    const parsed = Number.parseInt(eRaw, 10);
-    if (!Number.isFinite(parsed) || parsed < 0) {
-      return { ok: false, code: "MALFORMED" };
-    }
-    e = parsed;
-  }
-  if (!absPath || !s) return { ok: false, code: "MALFORMED" };
-  const expected = computeSig(secret, absPath, e);
-  let provided;
-  try {
-    provided = base64urlDecodeBuf(s);
-  } catch {
-    return { ok: false, code: "MALFORMED" };
-  }
-  if (provided.length !== expected.length) {
-    return { ok: false, code: "BAD_SIG" };
-  }
-  if (!import_node_crypto9.default.timingSafeEqual(provided, expected)) {
-    return { ok: false, code: "BAD_SIG" };
-  }
-  if (e !== null && now() / 1e3 > e) {
-    return { ok: false, code: "EXPIRED" };
-  }
-  return { ok: true, absPath };
-}
-
 // src/attachment/upload.ts
-var import_node_fs38 = __toESM(require("fs"), 1);
+var import_node_fs39 = __toESM(require("fs"), 1);
 var import_node_path45 = __toESM(require("path"), 1);
 var import_node_crypto10 = __toESM(require("crypto"), 1);
 var import_promises7 = require("stream/promises");
@@ -61053,7 +61106,7 @@ async function writeUploadedAttachment(args) {
   assertValidFileName(args.fileName);
   const attachmentsRoot = import_node_path45.default.join(args.baseDir, ".attachments");
   try {
-    import_node_fs38.default.mkdirSync(attachmentsRoot, { recursive: true });
+    import_node_fs39.default.mkdirSync(attachmentsRoot, { recursive: true });
   } catch (err) {
     throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
   }
@@ -61074,18 +61127,18 @@ async function writeUploadedAttachment(args) {
           yield buf;
         }
       },
-      import_node_fs38.default.createWriteStream(tmpPath, { mode: 384 })
+      import_node_fs39.default.createWriteStream(tmpPath, { mode: 384 })
     );
   } catch (err) {
     try {
-      import_node_fs38.default.unlinkSync(tmpPath);
+      import_node_fs39.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError("STORAGE_ERROR", `write failed: ${err.message}`);
   }
   if (actualSize !== args.contentLength) {
     try {
-      import_node_fs38.default.unlinkSync(tmpPath);
+      import_node_fs39.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError(
@@ -61098,24 +61151,24 @@ async function writeUploadedAttachment(args) {
   let finalFileName;
   let hashDirExists = false;
   try {
-    hashDirExists = import_node_fs38.default.statSync(hashDir).isDirectory();
+    hashDirExists = import_node_fs39.default.statSync(hashDir).isDirectory();
   } catch {
   }
   if (hashDirExists) {
-    const existing = import_node_fs38.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
+    const existing = import_node_fs39.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
     finalFileName = existing[0] ?? args.fileName;
     try {
-      import_node_fs38.default.unlinkSync(tmpPath);
+      import_node_fs39.default.unlinkSync(tmpPath);
     } catch {
     }
   } else {
     try {
-      import_node_fs38.default.mkdirSync(hashDir, { recursive: true });
+      import_node_fs39.default.mkdirSync(hashDir, { recursive: true });
       finalFileName = args.fileName;
-      import_node_fs38.default.renameSync(tmpPath, import_node_path45.default.join(hashDir, finalFileName));
+      import_node_fs39.default.renameSync(tmpPath, import_node_path45.default.join(hashDir, finalFileName));
     } catch (err) {
       try {
-        import_node_fs38.default.unlinkSync(tmpPath);
+        import_node_fs39.default.unlinkSync(tmpPath);
       } catch {
       }
       throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
@@ -61422,7 +61475,7 @@ function createHttpRouter(deps) {
       }
       let buf;
       try {
-        buf = await import_node_fs39.default.promises.readFile(abs);
+        buf = await import_node_fs40.default.promises.readFile(abs);
       } catch {
         sendJson(res, 404, { code: "NOT_FOUND", message: "asset not found" });
         return true;
@@ -61786,7 +61839,7 @@ function withCtx(ctx, body) {
 function streamFile(res, absPath, logger) {
   let stat;
   try {
-    stat = import_node_fs39.default.statSync(absPath);
+    stat = import_node_fs40.default.statSync(absPath);
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") {
@@ -61809,7 +61862,7 @@ function streamFile(res, absPath, logger) {
     // 防止浏览器把任意 mime 当 html 渲染
     "X-Content-Type-Options": "nosniff"
   });
-  const stream = import_node_fs39.default.createReadStream(absPath);
+  const stream = import_node_fs40.default.createReadStream(absPath);
   stream.on("error", (err) => {
     logger?.warn("streamFile read error", { absPath, err: err.message });
     res.destroy();
@@ -61818,7 +61871,7 @@ function streamFile(res, absPath, logger) {
 }
 
 // src/attachment/gc.ts
-var import_node_fs40 = __toESM(require("fs"), 1);
+var import_node_fs41 = __toESM(require("fs"), 1);
 var import_node_path48 = __toESM(require("path"), 1);
 var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
 function runAttachmentGc(args) {
@@ -61849,7 +61902,7 @@ function runAttachmentGc(args) {
       const attRoot = import_node_path48.default.join(rootDir, ".attachments");
       let hashDirs;
       try {
-        hashDirs = import_node_fs40.default.readdirSync(attRoot);
+        hashDirs = import_node_fs41.default.readdirSync(attRoot);
       } catch (err) {
         if (err.code === "ENOENT") continue;
         args.logger?.warn("attachment gc: readdir failed", { attRoot, err: err.message });
@@ -61859,7 +61912,7 @@ function runAttachmentGc(args) {
         const hashDirAbs = import_node_path48.default.join(attRoot, hashDir);
         let files;
         try {
-          files = import_node_fs40.default.readdirSync(hashDirAbs);
+          files = import_node_fs41.default.readdirSync(hashDirAbs);
         } catch {
           continue;
         }
@@ -61867,7 +61920,7 @@ function runAttachmentGc(args) {
           const file = import_node_path48.default.join(hashDirAbs, name);
           let stat;
           try {
-            stat = import_node_fs40.default.statSync(file);
+            stat = import_node_fs41.default.statSync(file);
           } catch {
             continue;
           }
@@ -61876,18 +61929,18 @@ function runAttachmentGc(args) {
           if (age < ttlMs) continue;
           if (liveAbs.has(file)) continue;
           try {
-            import_node_fs40.default.unlinkSync(file);
+            import_node_fs41.default.unlinkSync(file);
           } catch (err) {
             args.logger?.warn("attachment gc: unlink failed", { file, err: err.message });
           }
         }
         try {
-          if (import_node_fs40.default.readdirSync(hashDirAbs).length === 0) import_node_fs40.default.rmdirSync(hashDirAbs);
+          if (import_node_fs41.default.readdirSync(hashDirAbs).length === 0) import_node_fs41.default.rmdirSync(hashDirAbs);
         } catch {
         }
       }
       try {
-        if (import_node_fs40.default.readdirSync(attRoot).length === 0) import_node_fs40.default.rmdirSync(attRoot);
+        if (import_node_fs41.default.readdirSync(attRoot).length === 0) import_node_fs41.default.rmdirSync(attRoot);
       } catch {
       }
     }
@@ -61895,7 +61948,7 @@ function runAttachmentGc(args) {
 }
 
 // src/attachment/group.ts
-var import_node_fs41 = __toESM(require("fs"), 1);
+var import_node_fs42 = __toESM(require("fs"), 1);
 var import_node_path49 = __toESM(require("path"), 1);
 var import_node_crypto11 = __toESM(require("crypto"), 1);
 init_protocol();
@@ -61921,7 +61974,7 @@ var GroupFileStore = class {
   readFile(scope, sessionId) {
     const file = this.filePath(scope, sessionId);
     try {
-      const raw = import_node_fs41.default.readFileSync(file, "utf8");
+      const raw = import_node_fs42.default.readFileSync(file, "utf8");
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) {
         this.logger?.warn("GroupFileStore.readFile: not an array; resetting session entries", {
@@ -61947,10 +62000,10 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs41.default.mkdirSync(import_node_path49.default.dirname(file), { recursive: true });
+    import_node_fs42.default.mkdirSync(import_node_path49.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs41.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
-    import_node_fs41.default.renameSync(tmp, file);
+    import_node_fs42.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
+    import_node_fs42.default.renameSync(tmp, file);
   }
   /** 拉一份当前 session 的清单。读盘 → cache；之后调用复用 cache */
   list(scope, sessionId) {
@@ -62036,7 +62089,7 @@ var GroupFileStore = class {
 };
 
 // src/discovery/state-file.ts
-var import_node_fs42 = __toESM(require("fs"), 1);
+var import_node_fs43 = __toESM(require("fs"), 1);
 var import_node_path50 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
   return import_node_path50.default.join(dataDir, "state.json");
@@ -62061,7 +62114,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs42.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs43.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -62075,20 +62128,20 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs42.default.mkdirSync(import_node_path50.default.dirname(this.file), { recursive: true });
+    import_node_fs43.default.mkdirSync(import_node_path50.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs42.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs42.default.renameSync(tmp, this.file);
+    import_node_fs43.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs43.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs42.default.chmodSync(this.file, 384);
+        import_node_fs43.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs42.default.unlinkSync(this.file);
+      import_node_fs43.default.unlinkSync(this.file);
     } catch {
     }
   }
@@ -62102,13 +62155,13 @@ function readSpawnedByDesktopFromEnv(env = process.env) {
 }
 
 // src/tunnel/tunnel-manager.ts
-var import_node_fs46 = __toESM(require("fs"), 1);
+var import_node_fs47 = __toESM(require("fs"), 1);
 var import_node_path54 = __toESM(require("path"), 1);
 var import_node_crypto12 = __toESM(require("crypto"), 1);
 var import_node_child_process12 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
-var import_node_fs43 = __toESM(require("fs"), 1);
+var import_node_fs44 = __toESM(require("fs"), 1);
 var import_node_path51 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
@@ -62117,7 +62170,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs43.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs44.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -62129,21 +62182,21 @@ var TunnelStore = class {
   }
   async set(v2) {
     const dir = import_node_path51.default.dirname(this.filePath);
-    await import_node_fs43.default.promises.mkdir(dir, { recursive: true });
+    await import_node_fs44.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs43.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs44.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs43.default.promises.chmod(tmp, 384);
+        await import_node_fs44.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs43.default.promises.rename(tmp, this.filePath);
+    await import_node_fs44.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs43.default.promises.unlink(this.filePath);
+      await import_node_fs44.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -62238,7 +62291,7 @@ function escape(v2) {
 }
 
 // src/tunnel/frpc-binary.ts
-var import_node_fs44 = __toESM(require("fs"), 1);
+var import_node_fs45 = __toESM(require("fs"), 1);
 var import_node_os16 = __toESM(require("os"), 1);
 var import_node_path52 = __toESM(require("path"), 1);
 var import_node_child_process10 = require("child_process");
@@ -62272,7 +62325,7 @@ function frpcDownloadUrl(version2, p2) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs44.default.existsSync(opts.override)) {
+    if (!import_node_fs45.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
@@ -62280,10 +62333,10 @@ async function ensureFrpcBinary(opts) {
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
   const binDir = import_node_path52.default.join(opts.dataDir, "bin");
-  import_node_fs44.default.mkdirSync(binDir, { recursive: true });
+  import_node_fs45.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
   const stableBin = import_node_path52.default.join(binDir, "frpc");
-  if (import_node_fs44.default.existsSync(stableBin)) return stableBin;
+  if (import_node_fs45.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
   const tarballPath = import_node_path52.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
@@ -62294,8 +62347,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs44.default.chmodSync(partialBin, 493);
-    import_node_fs44.default.renameSync(partialBin, stableBin);
+    import_node_fs45.default.chmodSync(partialBin, 493);
+    import_node_fs45.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -62305,7 +62358,7 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs44.default.readdirSync(binDir);
+    entries = import_node_fs45.default.readdirSync(binDir);
   } catch {
     return;
   }
@@ -62313,7 +62366,7 @@ function cleanupStaleArtifacts(binDir) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
       const full = import_node_path52.default.join(binDir, name);
       try {
-        import_node_fs44.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs45.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -62321,7 +62374,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p2) {
   try {
-    import_node_fs44.default.unlinkSync(p2);
+    import_node_fs45.default.unlinkSync(p2);
   } catch {
   }
 }
@@ -62332,13 +62385,13 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs44.default.createWriteStream(dest);
+  const out = import_node_fs45.default.createWriteStream(dest);
   const nodeStream = import_node_stream3.Readable.fromWeb(res.body);
   await (0, import_promises9.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
   const work = import_node_path52.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs44.default.mkdirSync(work, { recursive: true });
+  import_node_fs45.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve9, reject) => {
       const proc = (0, import_node_child_process10.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
@@ -62347,17 +62400,17 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
     const src = import_node_path52.default.join(work, dirName, "frpc");
-    if (!import_node_fs44.default.existsSync(src)) {
+    if (!import_node_fs45.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs44.default.copyFileSync(src, destBin);
+    import_node_fs45.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs44.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs45.default.rmSync(work, { recursive: true, force: true });
   }
 }
 
 // src/tunnel/frpc-process.ts
-var import_node_fs45 = __toESM(require("fs"), 1);
+var import_node_fs46 = __toESM(require("fs"), 1);
 var import_node_path53 = __toESM(require("path"), 1);
 var import_node_child_process11 = require("child_process");
 function frpcPidFilePath(dataDir) {
@@ -62365,13 +62418,13 @@ function frpcPidFilePath(dataDir) {
 }
 function writeFrpcPid(dataDir, pid) {
   try {
-    import_node_fs45.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
+    import_node_fs46.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearFrpcPid(dataDir) {
   try {
-    import_node_fs45.default.unlinkSync(frpcPidFilePath(dataDir));
+    import_node_fs46.default.unlinkSync(frpcPidFilePath(dataDir));
   } catch {
   }
 }
@@ -62387,7 +62440,7 @@ function defaultIsPidAlive(pid) {
 }
 function defaultReadPidFile(file) {
   try {
-    return import_node_fs45.default.readFileSync(file, "utf8");
+    return import_node_fs46.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -62427,7 +62480,7 @@ async function killStaleFrpc(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs45.default.unlinkSync(pidFile);
+      import_node_fs46.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -62438,7 +62491,7 @@ async function killStaleFrpc(deps) {
   }
   await sleep2(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs45.default.unlinkSync(pidFile);
+    import_node_fs46.default.unlinkSync(pidFile);
   } catch {
   }
 }
@@ -62613,14 +62666,14 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs46.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      await import_node_fs47.default.promises.writeFile(tomlPath, toml, { mode: 384 });
       const proc = (this.deps.spawnImpl ?? import_node_child_process12.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
       const logDir = import_node_path54.default.join(this.deps.dataDir, "log");
-      import_node_fs46.default.mkdirSync(logDir, { recursive: true });
+      import_node_fs47.default.mkdirSync(logDir, { recursive: true });
       const logFilePath = import_node_path54.default.join(logDir, "frpc.log");
-      const logStream = import_node_fs46.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logStream = import_node_fs47.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -62718,7 +62771,7 @@ function deriveStableDeviceKey(opts = {}) {
 }
 
 // src/auth-store.ts
-var import_node_fs47 = __toESM(require("fs"), 1);
+var import_node_fs48 = __toESM(require("fs"), 1);
 var import_node_path56 = __toESM(require("path"), 1);
 var import_node_crypto14 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
@@ -62755,7 +62808,7 @@ function defaultGenerateOwnerPrincipalId() {
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs47.default.readFileSync(file, "utf8");
+    const raw = import_node_fs48.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -62775,16 +62828,16 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs47.default.mkdirSync(import_node_path56.default.dirname(file), { recursive: true });
-  import_node_fs47.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs48.default.mkdirSync(import_node_path56.default.dirname(file), { recursive: true });
+  import_node_fs48.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs47.default.chmodSync(file, 384);
+    import_node_fs48.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs48 = __toESM(require("fs"), 1);
+var import_node_fs49 = __toESM(require("fs"), 1);
 var import_node_os18 = __toESM(require("os"), 1);
 var import_node_path57 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
@@ -62794,7 +62847,7 @@ function profilePath(dataDir) {
 function loadOwnerProfile(dataDir) {
   let raw;
   try {
-    raw = import_node_fs48.default.readFileSync(profilePath(dataDir), "utf8");
+    raw = import_node_fs49.default.readFileSync(profilePath(dataDir), "utf8");
   } catch {
     return {};
   }
@@ -62810,7 +62863,7 @@ function loadOwnerProfile(dataDir) {
 }
 function patchOwnerProfile(dataDir, patch) {
   const merged = { ...loadOwnerProfile(dataDir), ...patch };
-  import_node_fs48.default.writeFileSync(profilePath(dataDir), JSON.stringify(merged, null, 2), { encoding: "utf8", mode: 384 });
+  import_node_fs49.default.writeFileSync(profilePath(dataDir), JSON.stringify(merged, null, 2), { encoding: "utf8", mode: 384 });
   return merged;
 }
 function loadOwnerDisplayName(dataDir) {
@@ -62826,7 +62879,7 @@ function loadOwnerDisplayName(dataDir) {
 }
 
 // src/feishu-auth/owner-identity-store.ts
-var import_node_fs49 = __toESM(require("fs"), 1);
+var import_node_fs50 = __toESM(require("fs"), 1);
 var import_node_path58 = __toESM(require("path"), 1);
 var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
 var OwnerIdentityStore = class {
@@ -62837,7 +62890,7 @@ var OwnerIdentityStore = class {
   read() {
     let raw;
     try {
-      raw = import_node_fs49.default.readFileSync(this.file, "utf8");
+      raw = import_node_fs50.default.readFileSync(this.file, "utf8");
     } catch {
       return null;
     }
@@ -62865,16 +62918,16 @@ var OwnerIdentityStore = class {
     };
   }
   write(record3) {
-    import_node_fs49.default.mkdirSync(import_node_path58.default.dirname(this.file), { recursive: true });
-    import_node_fs49.default.writeFileSync(this.file, JSON.stringify(record3, null, 2), { mode: 384 });
+    import_node_fs50.default.mkdirSync(import_node_path58.default.dirname(this.file), { recursive: true });
+    import_node_fs50.default.writeFileSync(this.file, JSON.stringify(record3, null, 2), { mode: 384 });
     try {
-      import_node_fs49.default.chmodSync(this.file, 384);
+      import_node_fs50.default.chmodSync(this.file, 384);
     } catch {
     }
   }
   clear() {
     try {
-      import_node_fs49.default.unlinkSync(this.file);
+      import_node_fs50.default.unlinkSync(this.file);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -63335,7 +63388,7 @@ function verifyConnectToken(args) {
 }
 
 // src/feishu-auth/server-key.ts
-var fs66 = __toESM(require("fs"), 1);
+var fs67 = __toESM(require("fs"), 1);
 var path71 = __toESM(require("path"), 1);
 var FILE_NAME2 = "server-signing-key.json";
 var ServerKeyStore = class {
@@ -63349,7 +63402,7 @@ var ServerKeyStore = class {
   /** 读缓存的公钥；无缓存 / 损坏 → null（调用方决定是否触发拉取） */
   read() {
     try {
-      const raw = fs66.readFileSync(this.filePath(), "utf8");
+      const raw = fs67.readFileSync(this.filePath(), "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.publicKeyPem === "string" && parsed.publicKeyPem.includes("PUBLIC KEY")) {
         return parsed.publicKeyPem;
@@ -63364,12 +63417,12 @@ var ServerKeyStore = class {
       publicKeyPem,
       fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    fs66.mkdirSync(this.dataDir, { recursive: true });
-    fs66.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
+    fs67.mkdirSync(this.dataDir, { recursive: true });
+    fs67.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
   }
   clear() {
     try {
-      fs66.unlinkSync(this.filePath());
+      fs67.unlinkSync(this.filePath());
     } catch {
     }
   }
@@ -63385,13 +63438,13 @@ var import_node_path72 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs50 = __toESM(require("fs"), 1);
+var import_node_fs51 = __toESM(require("fs"), 1);
 var import_node_os19 = __toESM(require("os"), 1);
 var import_node_path59 = __toESM(require("path"), 1);
 var import_node_crypto16 = require("crypto");
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs50.default.readFileSync(file, "utf8");
+  const raw = import_node_fs51.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -63407,7 +63460,7 @@ function forkSession(input) {
   const baseDir = input.baseDir ?? import_node_path59.default.join(import_node_os19.default.homedir(), ".claude");
   let projectDir = import_node_path59.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
   let sourceFile = import_node_path59.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs50.default.existsSync(sourceFile)) {
+  if (!import_node_fs51.default.existsSync(sourceFile)) {
     const found = findTranscriptByToolSessionId(
       import_node_path59.default.join(baseDir, "projects"),
       input.toolSessionId
@@ -63447,13 +63500,13 @@ function forkSession(input) {
   }
   const outDir = input.targetCwd ? import_node_path59.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
   const forkedFilePath = import_node_path59.default.join(outDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs50.default.mkdirSync(outDir, { recursive: true });
-  import_node_fs50.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  import_node_fs51.default.mkdirSync(outDir, { recursive: true });
+  import_node_fs51.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
 // src/session/external-scan.ts
-var import_node_fs51 = __toESM(require("fs"), 1);
+var import_node_fs52 = __toESM(require("fs"), 1);
 var import_promises10 = __toESM(require("fs/promises"), 1);
 var import_node_os20 = __toESM(require("os"), 1);
 var import_node_path60 = __toESM(require("path"), 1);
@@ -63516,7 +63569,7 @@ function userText(msg) {
 }
 function isDir2(p2) {
   try {
-    return import_node_fs51.default.statSync(p2).isDirectory();
+    return import_node_fs52.default.statSync(p2).isDirectory();
   } catch {
     return false;
   }
@@ -63525,7 +63578,7 @@ async function scanClaude(roots) {
   const out = [];
   let dirs;
   try {
-    dirs = import_node_fs51.default.readdirSync(roots.claudeProjectsDir, { withFileTypes: true });
+    dirs = import_node_fs52.default.readdirSync(roots.claudeProjectsDir, { withFileTypes: true });
   } catch {
     return out;
   }
@@ -63533,7 +63586,7 @@ async function scanClaude(roots) {
     if (!d.isDirectory()) continue;
     let files;
     try {
-      files = import_node_fs51.default.readdirSync(import_node_path60.default.join(roots.claudeProjectsDir, d.name));
+      files = import_node_fs52.default.readdirSync(import_node_path60.default.join(roots.claudeProjectsDir, d.name));
     } catch {
       continue;
     }
@@ -63542,7 +63595,7 @@ async function scanClaude(roots) {
       const file = import_node_path60.default.join(roots.claudeProjectsDir, d.name, name);
       let st;
       try {
-        st = import_node_fs51.default.statSync(file);
+        st = import_node_fs52.default.statSync(file);
       } catch {
         continue;
       }
@@ -63595,7 +63648,7 @@ async function scanClaude(roots) {
   return out;
 }
 async function countCodexTurns(rolloutPath) {
-  if (!rolloutPath || !import_node_fs51.default.existsSync(rolloutPath)) return { turns: 0, first: "" };
+  if (!rolloutPath || !import_node_fs52.default.existsSync(rolloutPath)) return { turns: 0, first: "" };
   let turns = 0;
   let first = "";
   for await (const rec4 of jsonLines(rolloutPath)) {
@@ -63669,7 +63722,7 @@ async function codexFromRows(rows) {
 async function scanCodex(roots) {
   let dbs = [];
   try {
-    dbs = import_node_fs51.default.readdirSync(roots.codexDir).filter((n) => /^state_.*\.sqlite$/.test(n)).sort().map((n) => import_node_path60.default.join(roots.codexDir, n));
+    dbs = import_node_fs52.default.readdirSync(roots.codexDir).filter((n) => /^state_.*\.sqlite$/.test(n)).sort().map((n) => import_node_path60.default.join(roots.codexDir, n));
   } catch {
   }
   if (!dbs.length) return [];
@@ -63702,13 +63755,13 @@ async function scanExternalSessions(rootsIn) {
 }
 
 // src/session/import-ledger.ts
-var import_node_fs52 = __toESM(require("fs"), 1);
+var import_node_fs53 = __toESM(require("fs"), 1);
 var import_node_path61 = __toESM(require("path"), 1);
 var LEDGER_FILENAME = "session-import-ledger.json";
 function readImportLedger(dataDir) {
   try {
     const parsed = JSON.parse(
-      import_node_fs52.default.readFileSync(import_node_path61.default.join(dataDir, LEDGER_FILENAME), "utf8")
+      import_node_fs53.default.readFileSync(import_node_path61.default.join(dataDir, LEDGER_FILENAME), "utf8")
     );
     return Array.isArray(parsed) ? parsed : [];
   } catch {
@@ -63719,7 +63772,7 @@ function appendImportLedger(dataDir, entry) {
   const file = import_node_path61.default.join(dataDir, LEDGER_FILENAME);
   const entries = readImportLedger(dataDir);
   entries.push(entry);
-  import_node_fs52.default.writeFileSync(file, JSON.stringify(entries, null, 2), { encoding: "utf8", mode: 384 });
+  import_node_fs53.default.writeFileSync(file, JSON.stringify(entries, null, 2), { encoding: "utf8", mode: 384 });
 }
 
 // src/handlers/session.ts
@@ -64488,7 +64541,7 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/projects.ts
-var fs70 = __toESM(require("fs"), 1);
+var fs71 = __toESM(require("fs"), 1);
 var os22 = __toESM(require("os"), 1);
 var path77 = __toESM(require("path"), 1);
 var import_node_child_process14 = require("child_process");
@@ -64497,7 +64550,7 @@ var DEFAULT_PROJECTS_ROOT = path77.join(os22.homedir(), "Documents", "ChatGPT");
 function allocateDir(root, name) {
   let candidate = path77.join(root, name);
   let n = 2;
-  while (fs70.existsSync(candidate)) {
+  while (fs71.existsSync(candidate)) {
     candidate = path77.join(root, `${name} ${n}`);
     n += 1;
   }
@@ -64526,7 +64579,7 @@ function buildProjectHandlers(deps) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, "project:reveal \u4EC5\u652F\u6301 macOS");
     }
     try {
-      if (!fs70.statSync(args.path).isDirectory()) throw new Error("not dir");
+      if (!fs71.statSync(args.path).isDirectory()) throw new Error("not dir");
     } catch {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${args.path}`);
     }
@@ -64542,7 +64595,7 @@ function buildProjectHandlers(deps) {
     let target;
     if (args.path) {
       try {
-        if (!fs70.statSync(args.path).isDirectory()) throw new Error("not dir");
+        if (!fs71.statSync(args.path).isDirectory()) throw new Error("not dir");
       } catch {
         throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${args.path}`);
       }
@@ -64550,15 +64603,15 @@ function buildProjectHandlers(deps) {
     } else {
       const name = args.name;
       try {
-        fs70.mkdirSync(root, { recursive: true });
+        fs71.mkdirSync(root, { recursive: true });
         target = allocateDir(root, name);
-        fs70.mkdirSync(target);
+        fs71.mkdirSync(target);
       } catch (err) {
         throw new ClawdError(ERROR_CODES.INVALID_CWD, `\u521B\u5EFA\u9879\u76EE\u76EE\u5F55\u5931\u8D25: ${String(err)}`);
       }
       const git2 = (0, import_node_child_process14.spawnSync)("git", ["init"], { cwd: target, stdio: "ignore" });
       if (git2.status !== 0) {
-        fs70.rmSync(target, { recursive: true, force: true });
+        fs71.rmSync(target, { recursive: true, force: true });
         throw new ClawdError(
           ERROR_CODES.INVALID_CWD,
           `git init \u5931\u8D25\uFF08${git2.error ? String(git2.error) : `exit ${git2.status}`}\uFF09: ${target}`
@@ -64681,14 +64734,14 @@ init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process15 = require("child_process");
-var import_node_fs53 = __toESM(require("fs"), 1);
+var import_node_fs54 = __toESM(require("fs"), 1);
 var import_node_path62 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process15.execFile);
 function normalizePath(p2) {
   const resolved = import_node_path62.default.resolve(p2);
   try {
-    return import_node_fs53.default.realpathSync(resolved);
+    return import_node_fs54.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -65648,10 +65701,10 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.499".length > 0 ? "0.2.499" : "dev";
+var version = "0.2.500".length > 0 ? "0.2.500" : "dev";
 
 // src/cli-probe/probe.ts
-var fs72 = __toESM(require("fs"), 1);
+var fs73 = __toESM(require("fs"), 1);
 var path81 = __toESM(require("path"), 1);
 var PKG_NAME = "@clawos-dev/clawd";
 var BIN_NAME = "clawd";
@@ -65662,7 +65715,7 @@ function probeGlobalCli(pathEnv) {
     if (!dir) continue;
     let real;
     try {
-      real = fs72.realpathSync(path81.join(dir, BIN_NAME));
+      real = fs73.realpathSync(path81.join(dir, BIN_NAME));
     } catch {
       continue;
     }
@@ -65675,7 +65728,7 @@ function readOwnPackageVersion(entryPath) {
   let dir = path81.dirname(entryPath);
   for (let i = 0; i < MAX_PARENT_HOPS; i++) {
     try {
-      const raw = fs72.readFileSync(path81.join(dir, "package.json"), "utf8");
+      const raw = fs73.readFileSync(path81.join(dir, "package.json"), "utf8");
       const pkg = JSON.parse(raw);
       if (pkg.name !== PKG_NAME) return null;
       return typeof pkg.version === "string" && pkg.version ? pkg.version : null;
@@ -66750,7 +66803,7 @@ var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
 // src/handlers/app-builder.ts
 init_protocol();
 var import_node_path69 = require("path");
-var import_node_fs54 = require("fs");
+var import_node_fs55 = require("fs");
 var DEFAULT_TEMPLATE = "nestjs-react";
 var DEV_SERVER_READY_TIMEOUT_MS = 3e4;
 function buildAppBuilderHandlers(deps) {
@@ -66823,7 +66876,7 @@ function buildAppBuilderHandlers(deps) {
   async function listAllUsersProjects() {
     if (!deps.usersRoot || !deps.getStore) return [];
     const getStore = deps.getStore;
-    const userIds = await import_node_fs54.promises.readdir(deps.usersRoot).catch(() => []);
+    const userIds = await import_node_fs55.promises.readdir(deps.usersRoot).catch(() => []);
     const perUser = await Promise.all(
       userIds.map((uid) => getStore(uid).list().catch(() => []))
     );
@@ -68334,7 +68387,7 @@ function buildOnboardingHandlers(deps) {
 }
 
 // src/app-builder-plugin/project-store.ts
-var import_node_fs55 = require("fs");
+var import_node_fs56 = require("fs");
 var import_node_child_process20 = require("child_process");
 var import_node_path73 = require("path");
 init_protocol();
@@ -68378,7 +68431,7 @@ var ProjectStore = class {
   async list() {
     let entries;
     try {
-      entries = await import_node_fs55.promises.readdir(this.projectsRoot());
+      entries = await import_node_fs56.promises.readdir(this.projectsRoot());
     } catch (err) {
       if (err.code === "ENOENT") return [];
       throw err;
@@ -68386,7 +68439,7 @@ var ProjectStore = class {
     const out = [];
     for (const name of entries) {
       try {
-        const raw = await import_node_fs55.promises.readFile(this.metaPath(name), "utf8");
+        const raw = await import_node_fs56.promises.readFile(this.metaPath(name), "utf8");
         const json = JSON.parse(raw);
         let migrated = false;
         if (typeof json.devCommand !== "string" || json.devCommand.length === 0) {
@@ -68397,7 +68450,7 @@ var ProjectStore = class {
         if (parsed.success) {
           out.push(parsed.data);
           if (migrated) {
-            void import_node_fs55.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
+            void import_node_fs56.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
             });
           }
         }
@@ -68441,8 +68494,8 @@ var ProjectStore = class {
       throw new Error(`invalid name "${name}": ${validated.error.message}`);
     }
     const dir = this.projectDir(name);
-    await import_node_fs55.promises.mkdir(dir, { recursive: true });
-    await import_node_fs55.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
+    await import_node_fs56.promises.mkdir(dir, { recursive: true });
+    await import_node_fs56.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
     return meta;
   }
   /**
@@ -68487,7 +68540,7 @@ var ProjectStore = class {
   }
   async delete(name) {
     const dir = this.projectDir(name);
-    await import_node_fs55.promises.rm(dir, { recursive: true, force: true });
+    await import_node_fs56.promises.rm(dir, { recursive: true, force: true });
   }
   async updatePort(name, newPort) {
     if (newPort < PROJECT_PORT_MIN || newPort > PROJECT_PORT_MAX) {
@@ -68504,7 +68557,7 @@ var ProjectStore = class {
         throw new Error(`port ${newPort} already used / \u5DF2\u88AB project "${conflict.name}" \u5360\u7528`);
       }
       const updated = { ...target, port: newPort };
-      await import_node_fs55.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
+      await import_node_fs56.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
       return updated;
     });
   }
@@ -68523,7 +68576,7 @@ var ProjectStore = class {
       if (!validated.success) {
         throw new Error(`invalid prodUrl "${url}": ${validated.error.message}`);
       }
-      await import_node_fs55.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+      await import_node_fs56.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
       return validated.data;
     });
   }
@@ -68546,7 +68599,7 @@ var ProjectStore = class {
       if (!validated.success) {
         throw new Error(`invalid publishJob: ${validated.error.message}`);
       }
-      await import_node_fs55.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+      await import_node_fs56.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
       return validated.data;
     });
   }
@@ -68563,7 +68616,7 @@ var ProjectStore = class {
       if (!validated.success) {
         throw new Error(`failed to clear publishJob: ${validated.error.message}`);
       }
-      await import_node_fs55.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+      await import_node_fs56.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
       return validated.data;
     });
   }
@@ -68878,7 +68931,7 @@ var PublishJobRegistry = class {
 
 // src/app-builder-plugin/publish-job-runner.ts
 var import_node_child_process22 = require("child_process");
-var import_node_fs56 = require("fs");
+var import_node_fs57 = require("fs");
 var import_node_path74 = require("path");
 
 // src/app-builder-plugin/publish-stage-parser.ts
@@ -68914,7 +68967,7 @@ async function startPublishJob(deps, args) {
   const logPath = (0, import_node_path74.join)(projDir, ".publish.log");
   let logStream = null;
   try {
-    logStream = (0, import_node_fs56.createWriteStream)(logPath, { flags: "w" });
+    logStream = (0, import_node_fs57.createWriteStream)(logPath, { flags: "w" });
   } catch {
     logStream = null;
   }
@@ -69257,7 +69310,7 @@ async function recoverInterruptedPublishJobs(store, logger) {
 }
 
 // src/app-builder-plugin/mcp-config.ts
-var import_node_fs57 = __toESM(require("fs"), 1);
+var import_node_fs58 = __toESM(require("fs"), 1);
 var import_node_path75 = __toESM(require("path"), 1);
 function appBuilderMcpConfigPath(dataDir) {
   return import_node_path75.default.join(dataDir, "app-builder.mcp.json");
@@ -69281,8 +69334,8 @@ function writeAppBuilderMcpConfig(args) {
       }
     }
   };
-  import_node_fs57.default.mkdirSync(args.dataDir, { recursive: true });
-  import_node_fs57.default.writeFileSync(cfgPath, JSON.stringify(cfg, null, 2), "utf8");
+  import_node_fs58.default.mkdirSync(args.dataDir, { recursive: true });
+  import_node_fs58.default.writeFileSync(cfgPath, JSON.stringify(cfg, null, 2), "utf8");
   return cfgPath;
 }
 
@@ -69699,7 +69752,7 @@ async function startDaemon(config) {
     homeDir: import_node_os27.default.homedir()
   });
   const logDir = import_node_path79.default.join(config.dataDir, "log");
-  import_node_fs58.default.mkdirSync(logDir, { recursive: true });
+  import_node_fs59.default.mkdirSync(logDir, { recursive: true });
   const logger = createLogger({
     level: config.logLevel,
     file: import_node_path79.default.join(logDir, "clawd.log"),
@@ -69926,7 +69979,7 @@ async function startDaemon(config) {
     import_node_path79.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
-  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs58.default.existsSync(p2));
+  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs59.default.existsSync(p2));
   if (dispatchServerScriptPath) {
     const dispatchLogPath = import_node_path79.default.join(logDir, "dispatch-mcp-server.log");
     const dispatchCfgPath = writeDispatchMcpConfig({
@@ -69951,7 +70004,7 @@ async function startDaemon(config) {
     import_node_path79.default.join(here, "ticket", "mcp-server.cjs"),
     import_node_path79.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
-  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs58.default.existsSync(p2));
+  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs59.default.existsSync(p2));
   if (ticketServerScriptPath) {
     const ticketLogPath = import_node_path79.default.join(logDir, "ticket-mcp-server.log");
     const ticketCfgPath = writeTicketMcpConfig({
@@ -69978,7 +70031,7 @@ async function startDaemon(config) {
     import_node_path79.default.join(here, "shift", "mcp-server.cjs"),
     import_node_path79.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
-  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs58.default.existsSync(p2));
+  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs59.default.existsSync(p2));
   if (shiftServerScriptPath) {
     const shiftLogPath = import_node_path79.default.join(logDir, "shift-mcp-server.log");
     const shiftCfgPath = await writeShiftMcpConfig({
@@ -70004,7 +70057,7 @@ async function startDaemon(config) {
     import_node_path79.default.join(here, "inbox", "mcp-server.cjs"),
     import_node_path79.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
   ];
-  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs58.default.existsSync(p2));
+  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs59.default.existsSync(p2));
   if (inboxServerScriptPath) {
     const inboxLogPath = import_node_path79.default.join(logDir, "inbox-mcp-server.log");
     const inboxCfgPath = await writeInboxMcpConfig({
@@ -70030,7 +70083,7 @@ async function startDaemon(config) {
     import_node_path79.default.join(here, "peer-ops", "mcp-server.cjs"),
     import_node_path79.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
   ];
-  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs58.default.existsSync(p2));
+  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs59.default.existsSync(p2));
   if (peerOpsServerScriptPath) {
     const peerOpsCfgPath = writePeerOpsMcpConfig({
       dataDir: config.dataDir,
@@ -70053,7 +70106,7 @@ async function startDaemon(config) {
     import_node_path79.default.join(here, "rpc-tool", "mcp-server.cjs"),
     import_node_path79.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
   ];
-  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p2) => import_node_fs58.default.existsSync(p2));
+  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p2) => import_node_fs59.default.existsSync(p2));
   if (rpcToolServerScriptPath) {
     const rpcToolLogPath = import_node_path79.default.join(logDir, "rpc-tool-mcp-server.log");
     const rpcToolCfgPath = writeRpcToolMcpConfig({
@@ -70079,7 +70132,7 @@ async function startDaemon(config) {
     import_node_path79.default.join(here, "app-builder-plugin", "mcp-server.cjs"),
     import_node_path79.default.join(here, "..", "dist", "app-builder-plugin", "mcp-server.cjs")
   ];
-  const appBuilderServerScriptPath = appBuilderServerCandidates.find((p2) => import_node_fs58.default.existsSync(p2));
+  const appBuilderServerScriptPath = appBuilderServerCandidates.find((p2) => import_node_fs59.default.existsSync(p2));
   if (appBuilderServerScriptPath) {
     const appBuilderLogPath = import_node_path79.default.join(logDir, "app-builder-mcp-server.log");
     const appBuilderCfgPath = writeAppBuilderMcpConfig({
@@ -70185,7 +70238,7 @@ async function startDaemon(config) {
         const absPath = import_node_path79.default.isAbsolute(input.relPath) ? input.relPath : import_node_path79.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs58.default.statSync(absPath).size;
+          size = import_node_fs59.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -70287,11 +70340,11 @@ async function startDaemon(config) {
   registerAdapter("claude", claudeAdapter);
   const codexIsolatedHome = import_node_path79.default.join(config.dataDir, "codex-home");
   try {
-    import_node_fs58.default.mkdirSync(codexIsolatedHome, { recursive: true });
+    import_node_fs59.default.mkdirSync(codexIsolatedHome, { recursive: true });
     for (const f of ["auth.json", "config.toml"]) {
       const link = import_node_path79.default.join(codexIsolatedHome, f);
       const target = import_node_path79.default.join(import_node_os27.default.homedir(), ".codex", f);
-      if (!import_node_fs58.default.existsSync(link) && import_node_fs58.default.existsSync(target)) import_node_fs58.default.symlinkSync(target, link);
+      if (!import_node_fs59.default.existsSync(link) && import_node_fs59.default.existsSync(target)) import_node_fs59.default.symlinkSync(target, link);
     }
   } catch (err) {
     logger.warn("codex isolated home setup failed", { err: String(err) });
@@ -70314,10 +70367,12 @@ async function startDaemon(config) {
         projectPaths: projectsStore.listMerged().map((x) => x.path),
         sharedHome: import_node_path79.default.join(import_node_os27.default.homedir(), ".codex"),
         isolatedHome: codexIsolatedHome
-      })
+      }),
+      // 附件图片验签：与 http-router /files 路由同一把 secret
+      getSignSecret: () => authFile.token
     })
   );
-  registerAdapter(CODEX_CLOUD_TOOL_ID, new CloudCodexAdapter({ client: cloudGateway, logger }));
+  registerAdapter(CODEX_CLOUD_TOOL_ID, new CloudCodexAdapter({ client: cloudGateway, logger, getSignSecret: () => authFile.token }));
   warmCodexFeatureCache();
   const personaRegistry = new PersonaRegistry(personaStore);
   const refreshCloudPersonas = async () => {
@@ -71259,7 +71314,7 @@ ${bar}
 `);
       try {
         const connectPath = import_node_path79.default.join(config.dataDir, "connect.txt");
-        import_node_fs58.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        import_node_fs59.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -71348,7 +71403,7 @@ ${bar}
 function migrateDropPersonsDir(dataDir) {
   const dir = import_node_path79.default.join(dataDir, "persons");
   try {
-    import_node_fs58.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs59.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }