@clawos-dev/clawd 0.2.502 → 0.2.504

package/dist/cli.cjs

@@ -450,8 +450,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path100, errorMaps, issueData } = params;
-      const fullPath = [...path100, ...issueData.path || []];
+      const { data, path: path101, errorMaps, issueData } = params;
+      const fullPath = [...path101, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -762,11 +762,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path100, key) {
+      constructor(parent, value, path101, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path100;
+        this._path = path101;
         this._key = key;
       }
       get path() {
@@ -5951,7 +5951,24 @@ var init_contact_handshake = __esm({
 });
 
 // ../protocol/src/environment-schemas.ts
-var EnvCliSchema, EnvSecretSchema, EnvAssetSchema, ConnectorNameSchema, EnvConnectorSchema, MANIFEST_BODY, EnvManifestBodySchema, EnvironmentManifestSchema, EnvEvidenceSchema;
+function connectorBlockers(c) {
+  if (!c.credentialSource) return [`\u8FDE\u63A5\u5668 ${c.name} \u8FD8\u6CA1\u5B9A\u51ED\u636E\u6765\u6E90\uFF08\u65E0 / \u5171\u4EAB / \u4E2A\u4EBA\uFF09`];
+  const out = [];
+  if (c.credentialSource === "personal") {
+    if (!c.auth) out.push(`\u8FDE\u63A5\u5668 ${c.name} \u8FD8\u6CA1\u9009\u5173\u8054\u8FD8\u662F\u586B\u5199`);
+    else if (c.auth === "oauth" && c.kind === "env") out.push(`\u8FDE\u63A5\u5668 ${c.name} \u662F\u8FDB\u7A0B\u578B\uFF08stdio MCP / CLI\uFF09\uFF0C\u53EA\u80FD\u586B\u5199\u4E0D\u80FD\u5173\u8054`);
+    else if (c.auth === "fields" && c.fields.length === 0) out.push(`\u8FDE\u63A5\u5668 ${c.name} \u8981\u586B\u7684\u683C\u8FD8\u6CA1\u5217`);
+  }
+  if (c.credentialSource === "shared" && c.fields.length === 0) out.push(`\u8FDE\u63A5\u5668 ${c.name} \u9009\u4E86\u5171\u4EAB\uFF0C\u4F46\u8981\u586B\u7684\u683C\u8FD8\u6CA1\u5217`);
+  return out;
+}
+function sharedConnectorSecrets(m2) {
+  return m2.connectors.filter((c) => c.credentialSource === "shared" && c.fields.length > 0).map((c) => ({ name: c.name, env: [...c.fields] }));
+}
+function requiredSecretEnvNames(m2) {
+  return [.../* @__PURE__ */ new Set([...m2.secrets.flatMap((s) => s.env), ...sharedConnectorSecrets(m2).flatMap((s) => s.env)])];
+}
+var EnvCliSchema, EnvSecretSchema, EnvAssetSchema, ConnectorNameSchema, CONNECTOR_KINDS, CONNECTOR_RUNNERS, CONNECTOR_PROTOCOLS, CREDENTIAL_SOURCES, CONNECTOR_AUTHS, ConnectorFieldSchema, EnvConnectorSchema, MANIFEST_BODY, EnvManifestBodySchema, EnvironmentManifestSchema, EnvEvidenceSchema;
 var init_environment_schemas = __esm({
   "../protocol/src/environment-schemas.ts"() {
     "use strict";
@@ -5994,21 +6011,36 @@ var init_environment_schemas = __esm({
       name: external_exports.string().min(1)
     });
     ConnectorNameSchema = external_exports.string().regex(/^[a-z0-9-]+$/, "\u8FDE\u63A5\u5668\u540D\u53EA\u80FD\u662F\u5C0F\u5199\u5B57\u6BCD\u3001\u6570\u5B57\u548C\u77ED\u6A2A\u7EBF");
-    EnvConnectorSchema = external_exports.object({ name: ConnectorNameSchema });
+    CONNECTOR_KINDS = ["proxy", "env"];
+    CONNECTOR_RUNNERS = ["mcp", "cli"];
+    CONNECTOR_PROTOCOLS = ["bearer", "lark-sidecar"];
+    CREDENTIAL_SOURCES = ["none", "shared", "personal"];
+    CONNECTOR_AUTHS = ["oauth", "fields"];
+    ConnectorFieldSchema = external_exports.string().regex(/^[A-Z][A-Z0-9_]*$/, "\u8981\u586B\u7684\u683C\u7684\u540D\u5B57\u53EA\u80FD\u662F\u5927\u5199\u5B57\u6BCD\u3001\u6570\u5B57\u548C\u4E0B\u5212\u7EBF\uFF0C\u4E14\u4EE5\u5B57\u6BCD\u5F00\u5934");
+    EnvConnectorSchema = external_exports.object({
+      name: ConnectorNameSchema,
+      kind: external_exports.enum(CONNECTOR_KINDS),
+      runner: external_exports.enum(CONNECTOR_RUNNERS),
+      protocol: external_exports.enum(CONNECTOR_PROTOCOLS).optional(),
+      id: external_exports.string().min(1),
+      credentialSource: external_exports.enum(CREDENTIAL_SOURCES).optional(),
+      auth: external_exports.enum(CONNECTOR_AUTHS).optional(),
+      fields: external_exports.array(ConnectorFieldSchema).default([]),
+      http: external_exports.object({ url: external_exports.string().min(1), headers: external_exports.record(external_exports.string(), external_exports.string()) }).optional()
+    });
     MANIFEST_BODY = {
       clis: external_exports.array(EnvCliSchema),
       secrets: external_exports.array(EnvSecretSchema),
       assets: external_exports.array(EnvAssetSchema),
       /**
-       * 装了哪些连接器（design 2026-09-09-cloud-connector-credentials §7.1）。**字符串数组**，
-       * 是四段里唯一不是 `{name}` 对象数组的一段：连接器没有任何附加属性，包一层对象只是多一层壳。
+       * 装了哪些连接器（design 2026-09-11-mcp-connector §3.1）。一条一个对象，形状见 `EnvConnectorSchema`。
        *
-       * 不复用 secrets：那段说的是「需要一份值，由部署者填」，这里没有值要填；
-       * 不从 clis 推断：lark-cli 在底座里，每个 persona 都有它，推不出任何东西。
+       * 不复用 secrets：那段说的是「需要一份值，由部署者填」；连接器的凭据谁出是单据上点出来的，
+       * 三种来源里只有「共享」才落到 Secrets，而且靠 `sharedConnectorSecrets` 在消费处并入，不写进那段。
        *
-       * **缺省空而不是必填**：本机上已有的单据不用为此重扫一遍；没声明就是没装，扫描器照样会报。
+       * **缺省空而不是必填**：本机上已有的单据不用为此重扫一遍；没声明就是没装。
        */
-      connectors: external_exports.array(ConnectorNameSchema).default([])
+      connectors: external_exports.array(EnvConnectorSchema).default([])
     };
     EnvManifestBodySchema = external_exports.object(MANIFEST_BODY);
     EnvironmentManifestSchema = external_exports.object({
@@ -6198,7 +6230,8 @@ var init_deploy_schemas = __esm({
       personaId: external_exports.string().min(1),
       kind: external_exports.enum(["cli", "secret", "asset", "connector"]),
       // 该条目在 manifest 对应数组里的内容（形状随 kind 变，handler 按 kind 收窄校验）
-      // connector 的 item 只有 name，落进清单时只留名字（manifest.connectors 是字符串数组）
+      // connector 的 item 是 butler 报的 CLI 连接器（{ name, fields? }），daemon 补齐 kind / runner / id 后落进清单；
+      // MCP 连接器不经这里——由 daemon 从 .mcp.json 机械列出（design 2026-09-11-mcp-connector §3.2）
       item: external_exports.record(external_exports.string(), external_exports.unknown()),
       // 这条发现的来历（一句人话 + 原文出处），形状同 EnvEvidence，target 由 handler 从 kind+name 派生
       evidence: external_exports.object({
@@ -6238,6 +6271,43 @@ var init_contact_remote_access = __esm({
   }
 });
 
+// ../protocol/src/cloud-connector-schemas.ts
+var CloudConnectorsListArgsSchema, CLOUD_CONNECTOR_STATUSES, CLOUD_CONNECTOR_ACTIONS, CloudConnectorStatusSchema, CloudConnectorsListResultSchema, CloudConnectorFillArgsSchema;
+var init_cloud_connector_schemas = __esm({
+  "../protocol/src/cloud-connector-schemas.ts"() {
+    "use strict";
+    init_zod();
+    init_environment_schemas();
+    CloudConnectorsListArgsSchema = external_exports.object({
+      /** 本机 registry 里的键（`<gateway 名>-cloud`）；daemon 从它的 `cloud.personaId` 找 gateway 登记行 */
+      personaId: external_exports.string().min(1)
+    }).strict();
+    CLOUD_CONNECTOR_STATUSES = ["connected", "missing", "reauth"];
+    CLOUD_CONNECTOR_ACTIONS = ["link", "fill"];
+    CloudConnectorStatusSchema = external_exports.object({
+      name: ConnectorNameSchema,
+      id: external_exports.string().min(1),
+      kind: external_exports.enum(CONNECTOR_KINDS),
+      runner: external_exports.enum(CONNECTOR_RUNNERS),
+      auth: external_exports.enum(CONNECTOR_AUTHS),
+      status: external_exports.enum(CLOUD_CONNECTOR_STATUSES),
+      action: external_exports.enum(CLOUD_CONNECTOR_ACTIONS),
+      /** 只有 `action: link` 且没连上（或要重新关联）时有；它不是凭证，几分钟过期 */
+      authUrl: external_exports.string().optional(),
+      fields: external_exports.array(ConnectorFieldSchema)
+    }).strict();
+    CloudConnectorsListResultSchema = external_exports.object({
+      connectors: external_exports.array(CloudConnectorStatusSchema)
+    }).strict();
+    CloudConnectorFillArgsSchema = external_exports.object({
+      personaId: external_exports.string().min(1),
+      name: ConnectorNameSchema,
+      /** 格名 → 值。格名必须是该连接器声明过的 `fields` 之一，中心校验 */
+      values: external_exports.record(ConnectorFieldSchema, external_exports.string().min(1))
+    }).strict();
+  }
+});
+
 // ../protocol/src/contact.ts
 var ContactSchema, ContactWireSchema, ContactRemoveArgsSchema, ContactRemoveOkSchema, ContactListOkSchema, ContactAddedFrameSchema, ContactRemovedFrameSchema, ContactPinArgsSchema, ContactSetNoteArgsSchema, ContactSetNoteOkSchema, ContactPinOkSchema, ContactPinnedFrameSchema;
 var init_contact = __esm({
@@ -8781,6 +8851,7 @@ var init_methods = __esm({
     init_contact_handshake();
     init_deploy_schemas();
     init_contact_remote_access();
+    init_cloud_connector_schemas();
     init_contact();
     init_feishu_auth();
     init_dispatch();
@@ -9016,6 +9087,15 @@ var init_methods = __esm({
         summary: "\u539F\u6837\u91CD\u8DD1\u6700\u65B0\u90A3\u6761\u6D41\u6C34\u7EBF\u91CC\u5931\u8D25\u7684\u67D0\u4E00\u6BB5\uFF08gh run rerun --job\uFF09\u3002**\u540C\u4E00\u4E2A commit\u3001\u540C\u4E00\u4EFD\u8F93\u5165**\uFF0C\u4E0D\u4EA7\u751F\u65B0\u63D0\u4EA4\u2014\u2014\u6539\u4E86 persona \u5185\u5BB9\u6216\u51ED\u636E\u8981\u8D70 deploy:release\u3002jobId \u5FC5\u987B\u5C5E\u4E8E\u6700\u65B0\u90A3\u6761 run\uFF1Bowner-only",
         args: DeployRerunJobArgsSchema
       },
+      // ---- cloud:connectors:*（云 persona 卡片上的连接器；design 2026-09-11-mcp-connector §3.8）----
+      "cloud:connectors:list": {
+        summary: "\u4E91\u4E0A persona \u5361\u7247\u4E0A\u7684\u8FDE\u63A5\u5668\u533A\uFF1A\u8FD9\u4E2A persona \u58F0\u660E\u7684\u3001**\u8981\u4F7F\u7528\u8005\u672C\u4EBA\u6388\u6743\u7684**\u8FDE\u63A5\u5668\u5404\u81EA\u8FDE\u6CA1\u8FDE\u4E0A\uFF08connected / missing / reauth\uFF09\u3001\u6309\u94AE\u662F\u5173\u8054\uFF08\u5E26\u73B0\u7B97\u7684 authUrl\uFF09\u8FD8\u662F\u586B\u5199\uFF08\u5E26\u8981\u586B\u7684\u683C\uFF09\u3002daemon \u62FF gateway \u767B\u8BB0\u884C + \u672C\u673A\u767B\u5F55\u51ED\u8BC1\u5411\u4E2D\u5FC3\u4EE3\u67E5\uFF0C\u51ED\u8BC1\u4E0D\u51FA ws\uFF1Bowner-only",
+        args: CloudConnectorsListArgsSchema
+      },
+      "cloud:connectors:fill": {
+        summary: "\u586B\u5199\u578B\u8FDE\u63A5\u5668\uFF1A\u628A\u4F7F\u7528\u8005\u672C\u4EBA\u7684\u51ED\u636E\u503C\u4EA4\u7ED9\u4E2D\u5FC3\u52A0\u5BC6\u5165\u5E93\uFF08\u4E00\u6B21\u586B\u5199\u5168\u5C40\u5171\u7528\uFF09\u3002**\u8FD9\u662F\u503C\u552F\u4E00\u7684\u5165\u53E3**\uFF1A\u5165\u53C2\u4E0D\u8FDB\u65E5\u5FD7\u3001\u54CD\u5E94\u4E0D\u56DE\u663E\u3001\u672C\u673A\u4E0D\u843D\u76D8\uFF1B\u683C\u540D\u5FC5\u987B\u662F\u8BE5\u8FDE\u63A5\u5668\u58F0\u660E\u8FC7\u7684\uFF1Bowner-only",
+        args: CloudConnectorFillArgsSchema
+      },
       "shift:list": {
         summary: "\u5217\u51FA owner \u7684\u5168\u90E8 shift\uFF08\u6392\u73ED\uFF09\uFF0C\u7ED9 UI \u65E5\u5386\u6E32\u67D3\u7528\uFF1Bowner-only",
         args: NO_ARGS
@@ -9728,6 +9808,7 @@ var init_runtime = __esm({
     init_schemas();
     init_frames();
     init_environment_schemas();
+    init_cloud_connector_schemas();
     init_deploy_schemas();
     init_persona_schemas();
     init_persona_mode();
@@ -10028,8 +10109,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path100 = req.path;
-        _req.url = typeof path100 === "string" ? path100 : req.url ? req.url.path || req.url : void 0;
+        const path101 = req.path;
+        _req.url = typeof path101 === "string" ? path101 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -10194,14 +10275,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path100) {
+    function parsePath(path101) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path100.length; i++) {
-        const char = path100[i];
+      for (let i = 0; i < path101.length; i++) {
+        const char = path101[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -10332,10 +10413,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path100 of paths) {
-        const parts = parsePath(path100);
+      for (const path101 of paths) {
+        const parts = parsePath(path101);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path100, remove);
+          redactWildcardPath(obj, parts, censor, path101, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -10420,8 +10501,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path100) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path100];
+            const wrappedCensor = typeof censor === "function" ? (value, path101) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path101];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -10456,8 +10537,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path100 of pathsToClone) {
-        const parts = parsePath(path100);
+      for (const path101 of pathsToClone) {
+        const parts = parsePath(path101);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -10509,24 +10590,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path100) {
-      if (typeof path100 !== "string") {
+    function validatePath(path101) {
+      if (typeof path101 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path100 === "") {
+      if (path101 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path100.includes("..")) {
-        throw new Error(`Invalid redaction path (${path100})`);
+      if (path101.includes("..")) {
+        throw new Error(`Invalid redaction path (${path101})`);
       }
-      if (path100.includes(",")) {
-        throw new Error(`Invalid redaction path (${path100})`);
+      if (path101.includes(",")) {
+        throw new Error(`Invalid redaction path (${path101})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path100.length; i++) {
-        const char = path100[i];
+      for (let i = 0; i < path101.length; i++) {
+        const char = path101[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -10540,20 +10621,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path100})`);
+            throw new Error(`Invalid redaction path (${path101})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path100})`);
+        throw new Error(`Invalid redaction path (${path101})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path100 of paths) {
-        validatePath(path100);
+      for (const path101 of paths) {
+        validatePath(path101);
       }
     }
     function slowRedact(options = {}) {
@@ -10721,8 +10802,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path100) => {
-            return censor(value, [k2, ...path100]);
+          const wrappedCensor = typeof censor === "function" ? (value, path101) => {
+            return censor(value, [k2, ...path101]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -10940,10 +11021,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs91 = require("fs");
+    var fs92 = require("fs");
     var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
-    var path100 = require("path");
+    var path101 = require("path");
     var sleep2 = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -10997,20 +11078,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs91.mkdirSync(path100.dirname(file), { recursive: true });
-          const fd = fs91.openSync(file, flags, mode);
+          if (sonic.mkdir) fs92.mkdirSync(path101.dirname(file), { recursive: true });
+          const fd = fs92.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs91.mkdir(path100.dirname(file), { recursive: true }, (err) => {
+        fs92.mkdir(path101.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs91.open(file, flags, mode, fileOpened);
+          fs92.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs91.open(file, flags, mode, fileOpened);
+        fs92.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -11051,8 +11132,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs91.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs91.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs92.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs92.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -11061,15 +11142,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs91.writeSync(this.fd, this._writingBuf);
+            return fs92.writeSync(this.fd, this._writingBuf);
           }
-          return fs91.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs92.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs91.write(this.fd, this._writingBuf, this.release);
+            return fs92.write(this.fd, this._writingBuf, this.release);
           }
-          return fs91.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs92.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -11126,7 +11207,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs91.fsyncSync(this.fd);
+          fs92.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -11240,7 +11321,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs91.fsync(this.fd, (err) => {
+            fs92.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -11342,7 +11423,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs91.close(fd, (err) => {
+          fs92.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -11391,7 +11472,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs91.writeSync(this.fd, buf) : fs91.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs92.writeSync(this.fd, buf) : fs92.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -11407,7 +11488,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs91.fsyncSync(this.fd);
+        fs92.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -11428,7 +11509,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs91.writeSync(this.fd, buf);
+          const n = fs92.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -11456,13 +11537,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs91.writeSync(this.fd, this._writingBuf) : fs91.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs92.writeSync(this.fd, this._writingBuf) : fs92.writeSync(this.fd, this._writingBuf, "utf8");
           release2(null, written);
         } catch (err) {
           release2(err);
         }
       } else {
-        fs91.write(this.fd, this._writingBuf, release2);
+        fs92.write(this.fd, this._writingBuf, release2);
       }
     }
     function actualWriteBuffer() {
@@ -11471,7 +11552,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs91.writeSync(this.fd, this._writingBuf);
+          const written = fs92.writeSync(this.fd, this._writingBuf);
           release2(null, written);
         } catch (err) {
           release2(err);
@@ -11480,7 +11561,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs91.write(this.fd, this._writingBuf, release2);
+        fs92.write(this.fd, this._writingBuf, release2);
       }
     }
     function actualClose(sonic) {
@@ -11496,12 +11577,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs91.fsync(sonic.fd, closeWrapped);
+        fs92.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs91.close(sonic.fd, done);
+          fs92.close(sonic.fd, done);
         } else {
           done();
         }
@@ -14636,11 +14717,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path100, added, removed, oldPosInc, options) {
-        var last = path100.lastComponent;
+      addToPath: function addToPath(path101, added, removed, oldPosInc, options) {
+        var last = path101.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path100.oldPos + oldPosInc,
+            oldPos: path101.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -14650,7 +14731,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path100.oldPos + oldPosInc,
+            oldPos: path101.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -15232,10 +15313,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec5 = m2;
-      const path100 = typeof rec5.path === "string" ? rec5.path : null;
+      const path101 = typeof rec5.path === "string" ? rec5.path : null;
       const content = typeof rec5.content === "string" ? rec5.content : null;
-      if (!path100 || content == null) return null;
-      const entry = { path: path100, content };
+      if (!path101 || content == null) return null;
+      const entry = { path: path101, content };
       if (typeof rec5.mtimeMs === "number") entry.mtimeMs = rec5.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -16101,10 +16182,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec5 = m2;
-      const path100 = typeof rec5.path === "string" ? rec5.path : null;
+      const path101 = typeof rec5.path === "string" ? rec5.path : null;
       const content = typeof rec5.content === "string" ? rec5.content : null;
-      if (!path100 || content == null) return null;
-      const out = { path: path100, content };
+      if (!path101 || content == null) return null;
+      const out = { path: path101, content };
       if (typeof rec5.mtimeMs === "number") out.mtimeMs = rec5.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -24576,12 +24657,12 @@ var require_luxon = __commonJS({
         if (!reason) {
           throw new InvalidArgumentError("need to specify a reason the Duration is invalid");
         }
-        const invalid2 = reason instanceof Invalid ? reason : new Invalid(reason, explanation);
+        const invalid3 = reason instanceof Invalid ? reason : new Invalid(reason, explanation);
         if (Settings.throwOnInvalid) {
-          throw new InvalidDurationError(invalid2);
+          throw new InvalidDurationError(invalid3);
         } else {
           return new _Duration({
-            invalid: invalid2
+            invalid: invalid3
           });
         }
       }
@@ -25173,12 +25254,12 @@ var require_luxon = __commonJS({
         if (!reason) {
           throw new InvalidArgumentError("need to specify a reason the Interval is invalid");
         }
-        const invalid2 = reason instanceof Invalid ? reason : new Invalid(reason, explanation);
+        const invalid3 = reason instanceof Invalid ? reason : new Invalid(reason, explanation);
         if (Settings.throwOnInvalid) {
-          throw new InvalidIntervalError(invalid2);
+          throw new InvalidIntervalError(invalid3);
         } else {
           return new _Interval({
-            invalid: invalid2
+            invalid: invalid3
           });
         }
       }
@@ -26680,9 +26761,9 @@ var require_luxon = __commonJS({
             obj[u] = defaultUnitValues[u];
           }
         }
-        const invalid2 = hasInvalidGregorianData(obj) || hasInvalidTimeData(obj);
-        if (invalid2) {
-          return DateTime.invalid(invalid2);
+        const invalid3 = hasInvalidGregorianData(obj) || hasInvalidTimeData(obj);
+        if (invalid3) {
+          return DateTime.invalid(invalid3);
         }
         const offsetProvis = guessOffsetForZone(zone);
         [ts, o] = objToTS(obj, offsetProvis, zone);
@@ -26739,24 +26820,24 @@ var require_luxon = __commonJS({
        */
       constructor(config) {
         const zone = config.zone || Settings.defaultZone;
-        let invalid2 = config.invalid || (Number.isNaN(config.ts) ? new Invalid("invalid input") : null) || (!zone.isValid ? unsupportedZone(zone) : null);
+        let invalid3 = config.invalid || (Number.isNaN(config.ts) ? new Invalid("invalid input") : null) || (!zone.isValid ? unsupportedZone(zone) : null);
         this.ts = isUndefined(config.ts) ? Settings.now() : config.ts;
         let c = null, o = null;
-        if (!invalid2) {
+        if (!invalid3) {
           const unchanged = config.old && config.old.ts === this.ts && config.old.zone.equals(zone);
           if (unchanged) {
             [c, o] = [config.old.c, config.old.o];
           } else {
             const ot = isNumber(config.o) && !config.old ? config.o : zone.offset(this.ts);
             c = tsToObj(this.ts, ot);
-            invalid2 = Number.isNaN(c.year) ? new Invalid("invalid input") : null;
-            c = invalid2 ? null : c;
-            o = invalid2 ? null : ot;
+            invalid3 = Number.isNaN(c.year) ? new Invalid("invalid input") : null;
+            c = invalid3 ? null : c;
+            o = invalid3 ? null : ot;
           }
         }
         this._zone = zone;
         this.loc = config.loc || Locale.create();
-        this.invalid = invalid2;
+        this.invalid = invalid3;
         this.weekData = null;
         this.localWeekData = null;
         this.c = c;
@@ -26990,9 +27071,9 @@ var require_luxon = __commonJS({
             normalized[u] = objNow[u];
           }
         }
-        const higherOrderInvalid = useWeekData ? hasInvalidWeekData(normalized, minDaysInFirstWeek, startOfWeek) : containsOrdinal ? hasInvalidOrdinalData(normalized) : hasInvalidGregorianData(normalized), invalid2 = higherOrderInvalid || hasInvalidTimeData(normalized);
-        if (invalid2) {
-          return _DateTime.invalid(invalid2);
+        const higherOrderInvalid = useWeekData ? hasInvalidWeekData(normalized, minDaysInFirstWeek, startOfWeek) : containsOrdinal ? hasInvalidOrdinalData(normalized) : hasInvalidGregorianData(normalized), invalid3 = higherOrderInvalid || hasInvalidTimeData(normalized);
+        if (invalid3) {
+          return _DateTime.invalid(invalid3);
         }
         const gregorian = useWeekData ? weekToGregorian(normalized, minDaysInFirstWeek, startOfWeek) : containsOrdinal ? ordinalToGregorian(normalized) : normalized, [tsFinal, offsetFinal] = objToTS(gregorian, offsetProvis, zoneToUse), inst = new _DateTime({
           ts: tsFinal,
@@ -27093,9 +27174,9 @@ var require_luxon = __commonJS({
           locale,
           numberingSystem,
           defaultToEN: true
-        }), [vals, parsedZone, specificOffset, invalid2] = parseFromTokens(localeToUse, text, fmt);
-        if (invalid2) {
-          return _DateTime.invalid(invalid2);
+        }), [vals, parsedZone, specificOffset, invalid3] = parseFromTokens(localeToUse, text, fmt);
+        if (invalid3) {
+          return _DateTime.invalid(invalid3);
         } else {
           return parseDataToDateTime(vals, parsedZone, opts, `format ${fmt}`, text, specificOffset);
         }
@@ -27141,12 +27222,12 @@ var require_luxon = __commonJS({
         if (!reason) {
           throw new InvalidArgumentError("need to specify a reason the DateTime is invalid");
         }
-        const invalid2 = reason instanceof Invalid ? reason : new Invalid(reason, explanation);
+        const invalid3 = reason instanceof Invalid ? reason : new Invalid(reason, explanation);
         if (Settings.throwOnInvalid) {
-          throw new InvalidDateTimeError(invalid2);
+          throw new InvalidDateTimeError(invalid3);
         } else {
           return new _DateTime({
-            invalid: invalid2
+            invalid: invalid3
           });
         }
       }
@@ -37078,8 +37159,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path100) {
-      var parts = path100.split("/");
+    exports2.resolve = function(path101) {
+      var parts = path101.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -42932,18 +43013,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path100) {
-      if (path100.slice(-1) === "/") {
-        path100 = path100.substring(0, path100.length - 1);
+    var parentFolder = function(path101) {
+      if (path101.slice(-1) === "/") {
+        path101 = path101.substring(0, path101.length - 1);
       }
-      var lastSlash = path100.lastIndexOf("/");
-      return lastSlash > 0 ? path100.substring(0, lastSlash) : "";
+      var lastSlash = path101.lastIndexOf("/");
+      return lastSlash > 0 ? path101.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path100) {
-      if (path100.slice(-1) !== "/") {
-        path100 += "/";
+    var forceTrailingSlash = function(path101) {
+      if (path101.slice(-1) !== "/") {
+        path101 += "/";
       }
-      return path100;
+      return path101;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -43945,7 +44026,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path82.default.dirname(opts.recordPath);
+  const dir = import_node_path83.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -43959,8 +44040,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs63.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs63.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs64.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs64.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -43985,12 +44066,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs63, import_node_path82;
+var import_node_fs64, import_node_path83;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs63 = __toESM(require("fs"), 1);
-    import_node_path82 = __toESM(require("path"), 1);
+    import_node_fs64 = __toESM(require("fs"), 1);
+    import_node_path83 = __toESM(require("path"), 1);
   }
 });
 
@@ -44033,7 +44114,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs64.mkdtempSync)(import_node_path83.default.join(import_node_os29.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs65.mkdtempSync)(import_node_path84.default.join(import_node_os29.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -44194,19 +44275,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs64.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs65.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs64, import_node_os29, import_node_path83;
+var import_node_fs65, import_node_os29, import_node_path84;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs64 = require("fs");
+    import_node_fs65 = require("fs");
     import_node_os29 = __toESM(require("os"), 1);
-    import_node_path83 = __toESM(require("path"), 1);
+    import_node_path84 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -44481,8 +44562,8 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path81 = __toESM(require("path"), 1);
-var import_node_fs62 = __toESM(require("fs"), 1);
+var import_node_path82 = __toESM(require("path"), 1);
+var import_node_fs63 = __toESM(require("fs"), 1);
 var import_node_os28 = __toESM(require("os"), 1);
 var import_node_crypto23 = require("crypto");
 var import_node_url5 = require("url");
@@ -46656,17 +46737,23 @@ function renderPersonaMcpSecrets(args) {
     if (Array.isArray(def.args) && def.args.some(hasPlaceholder)) {
       args.logger?.warn("persona.mcp-secret.placeholder-in-args", { persona: args.personaId, server: name });
     }
-    if (!env || !Object.values(env).some(hasPlaceholder)) continue;
-    const renderedEnv = {};
-    for (const [k2, v2] of Object.entries(env)) {
-      if (typeof v2 !== "string") continue;
-      renderedEnv[k2] = v2.replace(PLACEHOLDER, (_m, varName) => {
-        const hit = args.secrets[varName];
-        if (hit === void 0) missing.add(varName);
-        return hit ?? "";
-      });
-    }
-    rendered[name] = { ...def, env: renderedEnv };
+    const headers = def.headers && typeof def.headers === "object" ? def.headers : void 0;
+    const envHas = !!env && Object.values(env).some(hasPlaceholder);
+    const headersHas = !!headers && Object.values(headers).some(hasPlaceholder);
+    if (!envHas && !headersHas) continue;
+    const renderTable = (table) => {
+      const out = {};
+      for (const [k2, v2] of Object.entries(table)) {
+        if (typeof v2 !== "string") continue;
+        out[k2] = v2.replace(PLACEHOLDER, (_m, varName) => {
+          const hit = args.secrets[varName];
+          if (hit === void 0) missing.add(varName);
+          return hit ?? "";
+        });
+      }
+      return out;
+    };
+    rendered[name] = { ...def, ...envHas ? { env: renderTable(env) } : {}, ...headersHas ? { headers: renderTable(headers) } : {} };
   }
   if (Object.keys(rendered).length === 0) return void 0;
   if (missing.size > 0) {
@@ -51770,7 +51857,7 @@ function codexGuestCliArgs(cs, opts = {}) {
 function codexMcpCliArgs(defs) {
   const out = [];
   for (const d of defs) {
-    const cfg = {
+    const cfg = "url" in d ? { url: d.url, ...d.httpHeaders && Object.keys(d.httpHeaders).length > 0 ? { http_headers: d.httpHeaders } : {} } : {
       command: d.command,
       ...d.args && d.args.length > 0 ? { args: d.args } : {},
       ...d.env && Object.keys(d.env).length > 0 ? { env: d.env } : {}
@@ -51816,8 +51903,8 @@ function turnStartInput(text, resolveImage) {
   const items = [];
   let leftover = text;
   for (const m2 of text.matchAll(SKILL_RE)) {
-    const [marker, name, path100] = m2;
-    items.push({ type: "skill", name, path: path100 });
+    const [marker, name, path101] = m2;
+    items.push({ type: "skill", name, path: path101 });
     leftover = leftover.replace(marker, "");
   }
   for (const m2 of text.matchAll(ATTACHMENT_RE2)) {
@@ -51963,6 +52050,7 @@ function stringValue2(value) {
 // src/tools/codex-mcp-config.ts
 var import_node_fs17 = __toESM(require("fs"), 1);
 var import_node_path15 = __toESM(require("path"), 1);
+var HTTP_TYPES = /* @__PURE__ */ new Set(["http", "sse", "streamable_http", "streamable-http"]);
 function loadCodexMcpServerDefs(args) {
   const out = [];
   const seen = /* @__PURE__ */ new Set();
@@ -51982,7 +52070,21 @@ function loadCodexMcpServerDefs(args) {
     if (!servers || typeof servers !== "object") continue;
     for (const [name, raw] of Object.entries(servers)) {
       const def = raw ?? {};
-      const type = typeof def.type === "string" ? def.type : "stdio";
+      const type = typeof def.type === "string" ? def.type.toLowerCase() : typeof def.url === "string" ? "http" : "stdio";
+      if (HTTP_TYPES.has(type)) {
+        if (typeof def.url !== "string" || !def.url) {
+          args.logger?.warn("codex mcp server http without url, skipped", { file, name });
+          continue;
+        }
+        if (seen.has(name)) {
+          args.logger?.warn("codex mcp server name collision, first-wins", { file, name });
+          continue;
+        }
+        seen.add(name);
+        const headers = def.headers && typeof def.headers === "object" ? Object.fromEntries(Object.entries(def.headers).filter((kv) => typeof kv[1] === "string")) : {};
+        out.push({ name, url: def.url, ...Object.keys(headers).length > 0 ? { httpHeaders: headers } : {} });
+        continue;
+      }
       if (type !== "stdio") {
         args.logger?.warn("codex mcp server type unsupported, skipped", { file, name, type });
         continue;
@@ -55259,10 +55361,160 @@ function redactEvidence(evidence) {
 
 // src/deploy/deploy-file.ts
 var import_promises4 = __toESM(require("fs/promises"), 1);
+var import_node_path33 = __toESM(require("path"), 1);
+init_protocol();
+
+// src/deploy/connectors.ts
+var import_node_fs29 = __toESM(require("fs"), 1);
 var import_node_path32 = __toESM(require("path"), 1);
+init_zod();
 init_protocol();
-var DEPLOY_FILE = import_node_path32.default.join(".clawd", "deploy.json");
-var SCAN_FILE = import_node_path32.default.join(".clawd", "deploy-scan.json");
+var PLACEHOLDER2 = /\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g;
+var MCP_SCAN_NOTE_PREFIX = "\u3010.mcp.json\u3011";
+var LARK_SIDECAR_CONNECTOR = "feishu";
+var CliConnectorFindingSchema = external_exports.object({
+  name: ConnectorNameSchema,
+  fields: external_exports.array(ConnectorFieldSchema).default([])
+});
+function canonicalConnectorUrl(raw) {
+  const u = new URL(raw);
+  return `${u.origin}${u.pathname.replace(/\/+$/, "")}${u.search}`;
+}
+function placeholdersIn(value) {
+  if (typeof value !== "string") return [];
+  return [...value.matchAll(new RegExp(PLACEHOLDER2))].map((m2) => m2[1]);
+}
+var uniq = (xs) => [...new Set(xs)];
+function fieldsOf(name, where, placeholders, warnings) {
+  const ok = [];
+  for (const p2 of uniq(placeholders)) {
+    if (ConnectorFieldSchema.safeParse(p2).success) ok.push(p2);
+    else warnings.push(`MCP server\u300C${name}\u300D\u7684 ${where} \u91CC\u6709\u5360\u4F4D \${${p2}}\uFF0C\u53D8\u91CF\u540D\u4E0D\u5408\u5F62\u72B6\uFF08\u53EA\u80FD\u5927\u5199\u5B57\u6BCD\u3001\u6570\u5B57\u3001\u4E0B\u5212\u7EBF\uFF0C\u5B57\u6BCD\u5F00\u5934\uFF09\uFF0C\u6CA1\u7B97\u8FDB\u8981\u586B\u7684\u683C\uFF1B\u6539\u540D\u540E\u91CD\u65B0\u626B\u63CF`);
+  }
+  return ok;
+}
+function sanitizeForQuote(def) {
+  const strip2 = (obj) => {
+    if (!obj || typeof obj !== "object") return obj;
+    return Object.fromEntries(
+      Object.entries(obj).map(([k2, v2]) => [
+        k2,
+        // 用一份新正则做 test：全局正则的 lastIndex 会串进后面的 matchAll（mcp-secret-render.ts 同款写法）
+        typeof v2 === "string" && v2.length > 0 && !new RegExp(PLACEHOLDER2).test(v2) ? REDACTED : v2
+      ])
+    );
+  };
+  const out = {};
+  for (const [k2, v2] of Object.entries(def)) {
+    out[k2] = k2 === "env" || k2 === "headers" ? strip2(v2) : v2;
+  }
+  return out;
+}
+var stringRecord = (v2) => v2 && typeof v2 === "object" ? Object.fromEntries(Object.entries(v2).filter((kv) => typeof kv[1] === "string")) : {};
+var HTTP_TYPES2 = /* @__PURE__ */ new Set(["http", "sse", "streamable_http", "streamable-http"]);
+var PACKAGE_RUNNERS = /* @__PURE__ */ new Set(["npx", "uvx", "pnpx", "bunx"]);
+function scanMcpConnectors(personaDir) {
+  const file = import_node_path32.default.join(personaDir, ".mcp.json");
+  const out = { readable: true, connectors: [], evidence: [], warnings: [] };
+  let parsed;
+  try {
+    parsed = JSON.parse(import_node_fs29.default.readFileSync(file, "utf8"));
+  } catch (e) {
+    if (e.code === "ENOENT") return out;
+    out.readable = false;
+    out.warnings.push(`.mcp.json \u8BFB\u4E0D\u51FA\u6765\uFF08${e.message.split("\n")[0]}\uFF09\uFF0C\u91CC\u9762\u7684 MCP server \u8FD9\u6B21\u6CA1\u91CD\u65B0\u5217\uFF1B\u6E05\u5355\u91CC\u539F\u6709\u7684\u7167\u65E7`);
+    return out;
+  }
+  const servers = parsed?.mcpServers;
+  if (!servers || typeof servers !== "object") return out;
+  for (const [name, raw] of Object.entries(servers)) {
+    const def = raw && typeof raw === "object" ? raw : {};
+    if (!ConnectorNameSchema.safeParse(name).success) {
+      out.warnings.push(`MCP server\u300C${name}\u300D\u7684\u540D\u5B57\u4E0D\u5408\u5F62\u72B6\uFF08\u53EA\u80FD\u5C0F\u5199\u5B57\u6BCD\u3001\u6570\u5B57\u3001\u77ED\u6A2A\u7EBF\uFF09\uFF0C\u6CA1\u5217\u8FDB\u6E05\u5355\uFF1B\u6539\u540D\u540E\u91CD\u65B0\u626B\u63CF`);
+      continue;
+    }
+    const type = typeof def.type === "string" ? def.type.toLowerCase() : typeof def.url === "string" ? "http" : "stdio";
+    const quote = JSON.stringify({ [name]: sanitizeForQuote(def) }, null, 2);
+    if (HTTP_TYPES2.has(type)) {
+      const url = typeof def.url === "string" ? def.url : "";
+      let id2;
+      try {
+        id2 = canonicalConnectorUrl(url);
+      } catch {
+        out.warnings.push(`MCP server\u300C${name}\u300D\u662F http \u578B\u4F46 url \u4E0D\u5408\u6CD5\uFF08${url || "\u7A7A"}\uFF09\uFF0C\u6CA1\u5217\u8FDB\u6E05\u5355`);
+        continue;
+      }
+      const headers = stringRecord(def.headers);
+      if (placeholdersIn(url).length > 0) {
+        out.warnings.push(`MCP server\u300C${name}\u300D\u7684 url \u91CC\u6709 \${VAR} \u5360\u4F4D\u2014\u2014url \u4E0D\u4F1A\u88AB\u6E32\uFF0C\u51ED\u636E\u8BF7\u6539\u5230 headers \u91CC`);
+      }
+      const fields2 = fieldsOf(name, "headers", Object.values(headers).flatMap(placeholdersIn), out.warnings);
+      out.connectors.push({ name, kind: "proxy", runner: "mcp", id: id2, fields: fields2, http: { url, headers } });
+      out.evidence.push({
+        target: `connector:${name}`,
+        reason: `.mcp.json \u91CC\u6302\u4E86 http \u578B MCP server\u300C${name}\u300D\uFF08${id2}\uFF09\u3002` + (fields2.length > 0 ? `\u8BF7\u6C42\u5934\u91CC\u8981\u586B ${fields2.join(" / ")}\u3002` : "\u6CA1\u6709\u5360\u4F4D\uFF1A\u51ED\u636E\u7531\u4F7F\u7528\u8005\u5173\u8054\uFF0C\u6216\u90E8\u7F72\u8005\u5B9A\u4E00\u79CD\u3002") + "\u8C01\u51FA\u51ED\u636E\u5728\u5355\u636E\u4E0A\u70B9\u3002",
+        file: ".mcp.json",
+        quote
+      });
+      continue;
+    }
+    const command = typeof def.command === "string" ? def.command : "";
+    if (!command) {
+      out.warnings.push(`MCP server\u300C${name}\u300D\u65E2\u6CA1\u6709 url \u4E5F\u6CA1\u6709 command\uFF0C\u6CA1\u5217\u8FDB\u6E05\u5355`);
+      continue;
+    }
+    const args = Array.isArray(def.args) ? def.args.map(String) : [];
+    const pkg = PACKAGE_RUNNERS.has(command) ? args.find((a) => !a.startsWith("-")) : void 0;
+    const id = pkg ?? command;
+    const fields = fieldsOf(name, "env", Object.values(stringRecord(def.env)).flatMap(placeholdersIn), out.warnings);
+    if (args.some((a) => placeholdersIn(a).length > 0)) {
+      out.warnings.push(`MCP server\u300C${name}\u300D\u7684 args \u91CC\u6709 \${VAR} \u5360\u4F4D\u2014\u2014args \u4F1A\u8FDB ps\uFF0C\u4E91\u4E0A\u548C\u672C\u673A\u90FD\u53EA\u6E32 env\uFF0C\u8FD9\u4E9B\u5360\u4F4D\u4E0D\u4F1A\u88AB\u586B\uFF1B\u628A\u51ED\u636E\u6539\u5230 env \u91CC`);
+    }
+    out.connectors.push({ name, kind: "env", runner: "mcp", id, fields });
+    out.evidence.push({
+      target: `connector:${name}`,
+      reason: `.mcp.json \u91CC\u6302\u4E86 stdio \u578B MCP server\u300C${name}\u300D\uFF08${id}\uFF09\u3002` + (fields.length > 0 ? `\u5B83\u4ECE\u73AF\u5883\u53D8\u91CF\u8BFB ${fields.join(" / ")}\u3002` : "\u6CA1\u6709\u8981\u586B\u7684\u73AF\u5883\u53D8\u91CF\u3002") + "\u8C01\u51FA\u51ED\u636E\u5728\u5355\u636E\u4E0A\u70B9\uFF1A\u5171\u4EAB = \u90E8\u7F72\u8005\u586B\u8FDB\u4ED3\u5E93 Secrets\uFF0C\u4E2A\u4EBA = \u6BCF\u4E2A\u4F7F\u7528\u8005\u5728\u5361\u7247\u4E0A\u586B\u3002",
+      file: ".mcp.json",
+      quote
+    });
+  }
+  return out;
+}
+function cliConnectorFromFinding(item) {
+  if (item.name === LARK_SIDECAR_CONNECTOR) {
+    return {
+      name: item.name,
+      kind: "proxy",
+      runner: "cli",
+      protocol: "lark-sidecar",
+      id: item.name,
+      credentialSource: "personal",
+      auth: "oauth",
+      fields: []
+    };
+  }
+  return { name: item.name, kind: "env", runner: "cli", id: item.name, fields: item.fields };
+}
+function mergeConnector(existing, incoming) {
+  if (!existing) return incoming;
+  const reviewed = existing.credentialSource !== void 0;
+  return {
+    ...incoming,
+    ...existing.credentialSource ? { credentialSource: existing.credentialSource } : {},
+    ...existing.auth ? { auth: existing.auth } : {},
+    fields: reviewed ? existing.fields : incoming.fields
+  };
+}
+function mergeScannedConnectors(existing, scanned) {
+  const byName = new Map(existing.map((c) => [c.name, c]));
+  const mcp = scanned.map((c) => mergeConnector(byName.get(c.name), c));
+  const cli = existing.filter((c) => c.runner === "cli" && !scanned.some((s) => s.name === c.name));
+  return [...mcp, ...cli];
+}
+
+// src/deploy/deploy-file.ts
+var DEPLOY_FILE = import_node_path33.default.join(".clawd", "deploy.json");
+var SCAN_FILE = import_node_path33.default.join(".clawd", "deploy-scan.json");
 async function readJson(file) {
   let raw;
   try {
@@ -55278,14 +55530,14 @@ async function readJson(file) {
   }
 }
 async function writeJson(file, value) {
-  await import_promises4.default.mkdir(import_node_path32.default.dirname(file), { recursive: true });
+  await import_promises4.default.mkdir(import_node_path33.default.dirname(file), { recursive: true });
   const tmp = `${file}.tmp-${process.pid}`;
   await import_promises4.default.writeFile(tmp, `${JSON.stringify(value, null, 2)}
 `);
   await import_promises4.default.rename(tmp, file);
 }
 async function readDeployFile(dir) {
-  const raw = await readJson(import_node_path32.default.join(dir, DEPLOY_FILE));
+  const raw = await readJson(import_node_path33.default.join(dir, DEPLOY_FILE));
   if (raw === void 0) return void 0;
   const parsed = DeployFileSchema.safeParse(raw);
   if (!parsed.success) {
@@ -55295,10 +55547,10 @@ async function readDeployFile(dir) {
   return parsed.data;
 }
 async function writeDeployFile(dir, file) {
-  await writeJson(import_node_path32.default.join(dir, DEPLOY_FILE), DeployFileSchema.parse(file));
+  await writeJson(import_node_path33.default.join(dir, DEPLOY_FILE), DeployFileSchema.parse(file));
 }
 async function readScan(dir) {
-  const raw = await readJson(import_node_path32.default.join(dir, SCAN_FILE));
+  const raw = await readJson(import_node_path33.default.join(dir, SCAN_FILE));
   if (raw === void 0) return void 0;
   const parsed = DeployScanSchema.safeParse(raw);
   if (!parsed.success) {
@@ -55308,7 +55560,7 @@ async function readScan(dir) {
   return parsed.data;
 }
 async function writeScan(dir, scan) {
-  await writeJson(import_node_path32.default.join(dir, SCAN_FILE), DeployScanSchema.parse(scan));
+  await writeJson(import_node_path33.default.join(dir, SCAN_FILE), DeployScanSchema.parse(scan));
 }
 function emptyDeployFile() {
   return { version: 1, manifest: { version: 1, clis: [], secrets: [], assets: [], connectors: [] } };
@@ -55317,7 +55569,9 @@ var FINDING_SCHEMAS = {
   cli: EnvCliSchema,
   secret: EnvSecretSchema,
   asset: EnvAssetSchema,
-  connector: EnvConnectorSchema
+  // butler 报的是 CLI 连接器的「名字 + 它读的环境变量名」，kind / runner / id 由 daemon 补
+  //（handlers/deploy.ts 的 cliConnectorFromFinding）。MCP 连接器不经上报口，由 scanMcpConnectors 机械列出。
+  connector: CliConnectorFindingSchema
 };
 function parseFinding(kind, item) {
   const parsed = FINDING_SCHEMAS[kind].safeParse(item);
@@ -55329,8 +55583,12 @@ function parseFinding(kind, item) {
 }
 function upsertFinding(file, kind, item) {
   if (kind === "connector") {
+    const incoming = item;
     const have = file.manifest.connectors;
-    const connectors = have.includes(item.name) ? have : [...have, item.name];
+    const idx2 = have.findIndex((c) => c.name === incoming.name);
+    if (idx2 !== -1 && have[idx2].runner === "mcp" && incoming.runner === "cli") return file;
+    const merged = mergeConnector(idx2 === -1 ? void 0 : have[idx2], incoming);
+    const connectors = idx2 === -1 ? [...have, merged] : have.map((c, i) => i === idx2 ? merged : c);
     return { ...file, manifest: { ...file.manifest, connectors } };
   }
   const key = kind === "cli" ? "clis" : kind === "secret" ? "secrets" : "assets";
@@ -55342,13 +55600,13 @@ function upsertFinding(file, kind, item) {
 }
 function requiredEnvNames(file) {
   if (!file) return [];
-  return [...new Set(file.manifest.secrets.flatMap((s) => s.env))];
+  return requiredSecretEnvNames(file.manifest);
 }
 
 // src/deploy/repo.ts
 var import_node_child_process8 = require("child_process");
 var import_promises5 = __toESM(require("fs/promises"), 1);
-var import_node_path33 = __toESM(require("path"), 1);
+var import_node_path34 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/deploy/templates.ts
@@ -55582,7 +55840,7 @@ var L = [
 var WORKFLOW_TEMPLATE = L.join("\n");
 
 // src/deploy/repo.ts
-var DEPLOY_FILE_REL = DEPLOY_FILE.split(import_node_path33.default.sep).join("/");
+var DEPLOY_FILE_REL = DEPLOY_FILE.split(import_node_path34.default.sep).join("/");
 var DEFAULT_TIMEOUT_MS3 = 6e4;
 var runCommand = (cmd, args, opts = {}) => new Promise((resolve9) => {
   const child = (0, import_node_child_process8.spawn)(cmd, args, {
@@ -55649,7 +55907,7 @@ async function samePath(a, b2) {
     try {
       return await import_promises5.default.realpath(x);
     } catch {
-      return import_node_path33.default.resolve(x);
+      return import_node_path34.default.resolve(x);
     }
   };
   return await real(a) === await real(b2);
@@ -55675,7 +55933,7 @@ async function identityArgs(exec, dir) {
   return ["-c", "user.name=clawd", "-c", "user.email=clawd@clawos.local"];
 }
 async function writeTemplates(dir) {
-  const gi = import_node_path33.default.join(dir, ".gitignore");
+  const gi = import_node_path34.default.join(dir, ".gitignore");
   let existing;
   try {
     existing = await import_promises5.default.readFile(gi, "utf8");
@@ -55683,8 +55941,8 @@ async function writeTemplates(dir) {
     existing = void 0;
   }
   await import_promises5.default.writeFile(gi, mergeGitignore(existing));
-  const wf = import_node_path33.default.join(dir, WORKFLOW_PATH);
-  await import_promises5.default.mkdir(import_node_path33.default.dirname(wf), { recursive: true });
+  const wf = import_node_path34.default.join(dir, WORKFLOW_PATH);
+  await import_promises5.default.mkdir(import_node_path34.default.dirname(wf), { recursive: true });
   await import_promises5.default.writeFile(wf, WORKFLOW_TEMPLATE);
 }
 async function ensureRepo(exec, args) {
@@ -55813,8 +56071,8 @@ function runStatusOf(status) {
   if (status === "queued" || status === "waiting" || status === "requested" || status === "pending") return "queued";
   return "running";
 }
-async function ghJson(exec, path100) {
-  const r = await exec("gh", ["api", path100], { timeoutMs: TIMEOUT_MS });
+async function ghJson(exec, path101) {
+  const r = await exec("gh", ["api", path101], { timeoutMs: TIMEOUT_MS });
   if (r.spawnError || r.code !== 0) return void 0;
   try {
     return JSON.parse(r.stdout);
@@ -55874,12 +56132,12 @@ async function rerunJob(exec, slug, runId, jobId) {
 }
 
 // src/deploy/scan-task.ts
-var import_node_path34 = __toESM(require("path"), 1);
+var import_node_path35 = __toESM(require("path"), 1);
 var BUTLER_PERSONA_ID = "persona-clawd-butler";
 var SCANNABLE_ASSETS = [
   {
     name: "deploy-kit",
-    path: (dataDir) => import_node_path34.default.join(dataDir, "deploy-kit"),
+    path: (dataDir) => import_node_path35.default.join(dataDir, "deploy-kit"),
     what: "FC \u90E8\u7F72\u80FD\u529B\uFF08publish.sh / new-extension.sh / \u5DE5\u5177\u94FE / \u51ED\u8BC1\u76EE\u5F55\uFF09\u3002persona \u7528\u7EDD\u5BF9\u8DEF\u5F84\u53BB\u8C03\u8FD9\u91CC\u7684\u811A\u672C\u65F6\uFF0C\u5C31\u8BE5\u62A5\u4E00\u6761 asset\u3002"
   },
   {
@@ -56042,7 +56300,7 @@ function buildDeployHandlers(deps) {
     const startedAt = deps.now();
     const base = {
       evidence: scanBase.kind === "hard" ? [] : current?.evidence ?? [],
-      // notes 反过来不沿用：它是「这次扫描要老板判断的事」，沿用会把上次的存疑项一直复读
+      // notes 反过来不沿用：它是「这次扫描要老板处理的事」，沿用会把上次的事项一直复读
       notes: [],
       scannedAssets: [],
       startedAt,
@@ -56059,13 +56317,27 @@ function buildDeployHandlers(deps) {
     };
     await writeScan(dir, { status: "scanning", ...base });
     if (scanBase.kind === "hard") await writeDeployFile(dir, emptyDeployFile());
+    const mcp = scanMcpConnectors(dir);
+    const current0 = await readDeployFile(dir) ?? emptyDeployFile();
+    const carried = scanBase.kind === "hard" ? (prevManifest?.manifest.connectors ?? []).filter((c) => c.runner === "mcp") : current0.manifest.connectors;
+    await writeDeployFile(dir, {
+      ...current0,
+      // 文件读不出来（坏 JSON）时保持原样：当成「零个 MCP」会把清单里的连接器清光，而发布闸对零连接器是放行的
+      manifest: { ...current0.manifest, connectors: mcp.readable ? mergeScannedConnectors(carried, mcp.connectors) : carried }
+    });
+    const mcpTargets = new Set(mcp.evidence.map((e) => e.target));
+    const withMcp = {
+      ...base,
+      evidence: [...base.evidence.filter((e) => !mcpTargets.has(e.target)), ...mcp.evidence.map(redactEvidence)],
+      notes: mcp.warnings.map((w2) => `${MCP_SCAN_NOTE_PREFIX}${w2}`)
+    };
     const started = deps.startScan(personaId2, scanBase);
     if ("sessionId" in started) {
-      await writeScan(dir, { status: "scanning", scanSessionId: started.sessionId, ...base });
+      await writeScan(dir, { status: "scanning", scanSessionId: started.sessionId, ...withMcp });
     } else {
       await writeScan(dir, {
         status: "failed",
-        ...base,
+        ...withMcp,
         finishedAt: deps.now(),
         error: `\u8D77\u626B\u63CF\u4F1A\u8BDD\u5931\u8D25\uFF1A${started.error}`
       });
@@ -56095,7 +56367,7 @@ function buildDeployHandlers(deps) {
     const args = parseArgs2(DeployPutSecretArgsSchema, frame, "deploy:putSecret");
     const dir = mustPersona(args.personaId);
     const file = await readDeployFile(dir);
-    const declared = file?.manifest.secrets.find((s) => s.name === args.name);
+    const declared = file ? [...file.manifest.secrets, ...sharedConnectorSecrets(file.manifest)].find((s) => s.name === args.name) : void 0;
     if (!declared) throw invalid(`\u6E05\u5355\u91CC\u6CA1\u6709\u53EB\u300C${args.name}\u300D\u7684\u51ED\u636E`);
     const allowed = new Set(declared.env);
     for (const key of Object.keys(args.values)) {
@@ -56122,6 +56394,7 @@ function buildDeployHandlers(deps) {
     } catch (err) {
       throw invalid(err instanceof Error ? err.message : String(err));
     }
+    if (args.kind === "connector") item = cliConnectorFromFinding(item);
     const file = await readDeployFile(dir) ?? emptyDeployFile();
     await writeDeployFile(dir, upsertFinding(file, args.kind, item));
     const target = `${args.kind}:${item.name}`;
@@ -56140,8 +56413,9 @@ function buildDeployHandlers(deps) {
       ...scan,
       status: "done",
       finishedAt: deps.now(),
-      // 存疑项也是 agent 的自由文本，跟证据同一道涂抹
-      notes: args.notes.map(redactSecretValues),
+      // 存疑项也是 agent 的自由文本，跟证据同一道涂抹。daemon 自己扫 .mcp.json 时发现的问题
+      //（带 MCP_SCAN_NOTE_PREFIX）留着——butler 不知道那些，它的那份不该把它们冲掉
+      notes: [...scan.notes.filter((n) => n.startsWith(MCP_SCAN_NOTE_PREFIX)), ...args.notes.map(redactSecretValues)],
       // 记下这次扫描**被告知有哪些共享资产**。以后资产表长出新条目时，只有扫的时候还不知道
       // 它的那些记录会被提示一次（见 staleScannerAssets）
       scannedAssets: SCANNABLE_ASSETS.map((a) => a.name),
@@ -56175,6 +56449,7 @@ function buildDeployHandlers(deps) {
     }
     const missing = requiredEnvNames(file).filter((e) => !present.has(e));
     if (missing.length > 0) blockers.push(`${missing.join(" / ")} \u8FD8\u6CA1\u586B`);
+    for (const c of file.manifest.connectors) blockers.push(...connectorBlockers(c));
     const engine = deps.personaEngine(personaId2);
     const wrongTool = wrongEngine(engine?.tool);
     if (wrongTool) {
@@ -56612,15 +56887,15 @@ async function refreshTunnelUrlOnStartup(deps) {
 }
 
 // src/lark-bot-connector/binding-store.ts
-var import_node_fs29 = __toESM(require("fs"), 1);
-var import_node_path35 = __toESM(require("path"), 1);
+var import_node_fs30 = __toESM(require("fs"), 1);
+var import_node_path36 = __toESM(require("path"), 1);
 function createLarkBotBindingStore(personaRoot) {
-  const filePath = (personaId2) => import_node_path35.default.join(personaRoot, safeFileName(personaId2), ".clawd", "lark-bot.json");
+  const filePath = (personaId2) => import_node_path36.default.join(personaRoot, safeFileName(personaId2), ".clawd", "lark-bot.json");
   const read = (personaId2) => {
     const file = filePath(personaId2);
-    if (!import_node_fs29.default.existsSync(file)) return null;
+    if (!import_node_fs30.default.existsSync(file)) return null;
     try {
-      const raw = JSON.parse(import_node_fs29.default.readFileSync(file, "utf8"));
+      const raw = JSON.parse(import_node_fs30.default.readFileSync(file, "utf8"));
       if (typeof raw?.appId !== "string" || raw.appId.length === 0) return null;
       return raw;
     } catch {
@@ -56629,16 +56904,16 @@ function createLarkBotBindingStore(personaRoot) {
   };
   const write = (personaId2, meta) => {
     const file = filePath(personaId2);
-    import_node_fs29.default.mkdirSync(import_node_path35.default.dirname(file), { recursive: true });
+    import_node_fs30.default.mkdirSync(import_node_path36.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
-    import_node_fs29.default.writeFileSync(tmp, JSON.stringify(meta, null, 2), { mode: 384 });
-    import_node_fs29.default.renameSync(tmp, file);
+    import_node_fs30.default.writeFileSync(tmp, JSON.stringify(meta, null, 2), { mode: 384 });
+    import_node_fs30.default.renameSync(tmp, file);
   };
   return {
     read,
     write,
     remove(personaId2) {
-      import_node_fs29.default.rmSync(filePath(personaId2), { force: true });
+      import_node_fs30.default.rmSync(filePath(personaId2), { force: true });
     },
     addRemovedChat(personaId2, chatId) {
       const meta = read(personaId2);
@@ -56796,8 +57071,8 @@ function createLarkBotCloudClient(opts) {
 }
 
 // src/lark-bot-connector/chat-router.ts
-var import_node_fs30 = __toESM(require("fs"), 1);
-var import_node_path36 = __toESM(require("path"), 1);
+var import_node_fs31 = __toESM(require("fs"), 1);
+var import_node_path37 = __toESM(require("path"), 1);
 init_protocol();
 var ERROR_REPLY_TEXT = "\u5904\u7406\u51FA\u9519\u4E86\uFF0C\u8BF7\u91CD\u8BD5";
 var LOCAL_TURN_RETRIES = 2;
@@ -56875,9 +57150,9 @@ function createLarkChatRouter(deps) {
           continue;
         }
         const dir = deps.mediaRootFor(env.chatId);
-        import_node_fs30.default.mkdirSync(dir, { recursive: true });
-        const p2 = import_node_path36.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}.${ext}`);
-        import_node_fs30.default.writeFileSync(p2, r.data);
+        import_node_fs31.default.mkdirSync(dir, { recursive: true });
+        const p2 = import_node_path37.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}.${ext}`);
+        import_node_fs31.default.writeFileSync(p2, r.data);
         lines.push(`[\u56FE\u7247: ${p2}]\uFF08\u7528 Read \u5DE5\u5177\u67E5\u770B\uFF09`);
       } catch (err) {
         deps.logger?.warn(`larkBot image fetch failed ${key}: ${err.message}`);
@@ -56898,9 +57173,9 @@ function createLarkChatRouter(deps) {
           continue;
         }
         const dir = deps.mediaRootFor(env.chatId);
-        import_node_fs30.default.mkdirSync(dir, { recursive: true });
-        const p2 = import_node_path36.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}-${safeAttachmentName(f.name)}`);
-        import_node_fs30.default.writeFileSync(p2, r.data);
+        import_node_fs31.default.mkdirSync(dir, { recursive: true });
+        const p2 = import_node_path37.default.join(dir, `${safeMediaName(ownerMessageId)}-${i}-${safeAttachmentName(f.name)}`);
+        import_node_fs31.default.writeFileSync(p2, r.data);
         lines.push(`[\u6587\u4EF6: ${p2}]\uFF08\u7528 Read \u5DE5\u5177\u67E5\u770B\uFF09`);
       } catch (err) {
         deps.logger?.warn(`larkBot file fetch failed ${f.key}: ${err.message}`);
@@ -57724,12 +57999,12 @@ async function forwardPeerExecToPeer(args) {
 }
 
 // src/tools/codex-history.ts
-var import_node_fs32 = __toESM(require("fs"), 1);
-var import_node_path38 = __toESM(require("path"), 1);
+var import_node_fs33 = __toESM(require("fs"), 1);
+var import_node_path39 = __toESM(require("path"), 1);
 
 // src/tools/transcript-search.ts
-var import_node_fs31 = __toESM(require("fs"), 1);
-var import_node_path37 = __toESM(require("path"), 1);
+var import_node_fs32 = __toESM(require("fs"), 1);
+var import_node_path38 = __toESM(require("path"), 1);
 var SNIPPET_PAD = 60;
 var INJECTED_ENVELOPE_RE = /^<(system-reminder|command-name|command-message|command-args|local-command-stdout|local-command-stderr|task-notification|user-prompt-submit-hook|environment_context|user_instructions)\b/;
 var CODEX_WRAPPER_RE = /<(related-dir|environment_context|user_instructions)>[\s\S]*?<\/\1>/g;
@@ -57784,7 +58059,7 @@ function makeSnippet(text, at2, needleLength) {
 function searchTranscriptFile(file, query) {
   let buf;
   try {
-    buf = import_node_fs31.default.readFileSync(file);
+    buf = import_node_fs32.default.readFileSync(file);
   } catch {
     return null;
   }
@@ -57817,12 +58092,12 @@ function createCodexRolloutLocator(roots) {
   const walk2 = (dir, into) => {
     let entries;
     try {
-      entries = import_node_fs31.default.readdirSync(dir, { withFileTypes: true });
+      entries = import_node_fs32.default.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const entry of entries) {
-      const full = import_node_path37.default.join(dir, entry.name);
+      const full = import_node_path38.default.join(dir, entry.name);
       if (entry.isDirectory()) {
         walk2(full, into);
         continue;
@@ -58044,18 +58319,18 @@ var TITLE_BYTES = 256 * 1024;
 function readHead(file, bytes) {
   let fd;
   try {
-    fd = import_node_fs32.default.openSync(file, "r");
+    fd = import_node_fs33.default.openSync(file, "r");
   } catch {
     return null;
   }
   try {
     const buf = Buffer.alloc(bytes);
-    const n = import_node_fs32.default.readSync(fd, buf, 0, bytes, 0);
+    const n = import_node_fs33.default.readSync(fd, buf, 0, bytes, 0);
     return buf.subarray(0, n).toString("utf8");
   } catch {
     return null;
   } finally {
-    import_node_fs32.default.closeSync(fd);
+    import_node_fs33.default.closeSync(fd);
   }
 }
 function peekSessionCwd(head) {
@@ -58071,7 +58346,7 @@ function peekSessionCwd(head) {
 function readFirstLine(file, max = 512 * 1024) {
   let fd;
   try {
-    fd = import_node_fs32.default.openSync(file, "r");
+    fd = import_node_fs33.default.openSync(file, "r");
   } catch {
     return null;
   }
@@ -58080,7 +58355,7 @@ function readFirstLine(file, max = 512 * 1024) {
     const parts = [];
     let total = 0;
     while (total < max) {
-      const n = import_node_fs32.default.readSync(fd, chunk, 0, chunk.length, total);
+      const n = import_node_fs33.default.readSync(fd, chunk, 0, chunk.length, total);
       if (n <= 0) break;
       const nl = chunk.subarray(0, n).indexOf(10);
       if (nl >= 0) {
@@ -58094,7 +58369,7 @@ function readFirstLine(file, max = 512 * 1024) {
   } catch {
     return null;
   } finally {
-    import_node_fs32.default.closeSync(fd);
+    import_node_fs33.default.closeSync(fd);
   }
 }
 function readThreadNames(sharedHome) {
@@ -58102,7 +58377,7 @@ function readThreadNames(sharedHome) {
   if (!sharedHome) return names;
   let raw;
   try {
-    raw = import_node_fs32.default.readFileSync(import_node_path38.default.join(sharedHome, "session_index.jsonl"), "utf8");
+    raw = import_node_fs33.default.readFileSync(import_node_path39.default.join(sharedHome, "session_index.jsonl"), "utf8");
   } catch {
     return names;
   }
@@ -58121,13 +58396,13 @@ function readThreadNames(sharedHome) {
 function walkRollouts(dir, visit) {
   let entries;
   try {
-    entries = import_node_fs32.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs33.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return true;
   }
   entries.sort((a, b2) => a.name < b2.name ? 1 : a.name > b2.name ? -1 : 0);
   for (const entry of entries) {
-    const full = import_node_path38.default.join(dir, entry.name);
+    const full = import_node_path39.default.join(dir, entry.name);
     if (entry.isDirectory()) {
       if (!walkRollouts(full, visit)) return false;
     } else if (ROLLOUT_NAME_RE.test(entry.name)) {
@@ -58195,7 +58470,7 @@ var CodexHistoryReader = class {
     return [];
   }
   async listSessions(args) {
-    const want = import_node_path38.default.resolve(args.projectPath);
+    const want = import_node_path39.default.resolve(args.projectPath);
     const names = readThreadNames(this.deps.sharedHome);
     const found = [];
     let scanned = 0;
@@ -58204,13 +58479,13 @@ var CodexHistoryReader = class {
         if (++scanned > CODEX_LIST_SESSIONS_SCAN_CAP) return false;
         const head = readHead(file, PEEK_BYTES);
         const cwd = head === null ? null : peekSessionCwd(head);
-        if (!cwd || import_node_path38.default.resolve(cwd) !== want) return;
+        if (!cwd || import_node_path39.default.resolve(cwd) !== want) return;
         const first = readFirstLine(file);
         const meta = first === null ? null : parseCodexRolloutMeta(first);
         if (!meta) return;
         let mtimeMs;
         try {
-          mtimeMs = import_node_fs32.default.statSync(file).mtimeMs;
+          mtimeMs = import_node_fs33.default.statSync(file).mtimeMs;
         } catch {
           return;
         }
@@ -58242,7 +58517,7 @@ var CodexHistoryReader = class {
       args.toolSessionId,
       async (agentId) => {
         const file = locate(agentId);
-        return file ? import_node_fs32.default.readFileSync(file, "utf8") : null;
+        return file ? import_node_fs33.default.readFileSync(file, "utf8") : null;
       },
       this.deps.logger
     );
@@ -58269,7 +58544,7 @@ var CodexHistoryReader = class {
   parseThread(locate, threadId) {
     const file = locate(threadId);
     if (!file) throw new Error(`Codex rollout not found for thread ${threadId}`);
-    return parseCodexRollout(import_node_fs32.default.readFileSync(file, "utf8"));
+    return parseCodexRollout(import_node_fs33.default.readFileSync(file, "utf8"));
   }
 };
 
@@ -58288,9 +58563,9 @@ var CentralClientError = class extends Error {
   code;
   cause;
 };
-async function centralRequest(opts, path100, init) {
+async function centralRequest(opts, path101, init) {
   const f = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}${path100}`;
+  const url = `${opts.api.replace(/\/+$/, "")}${path101}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
   let res;
@@ -58313,7 +58588,13 @@ async function centralRequest(opts, path100, init) {
     throw new CentralClientError("UNAUTHORIZED", "TTC JWT invalid or expired");
   }
   if (!res.ok) {
-    throw new CentralClientError("API_ERROR", `central server HTTP ${res.status}`);
+    let detail = "";
+    try {
+      const body = await res.json();
+      if (typeof body?.message === "string" && body.message) detail = `: ${body.message}`;
+    } catch {
+    }
+    throw new CentralClientError("API_ERROR", `central server HTTP ${res.status}${detail}`);
   }
   try {
     return await res.json();
@@ -58425,6 +58706,23 @@ async function centralListDevices(opts) {
   }
   return out;
 }
+async function centralConnectorsMine(opts) {
+  const body = await centralRequest(opts, "/api/persona-cloud/connectors/mine", {
+    method: "POST",
+    bearer: opts.ttcJwt,
+    body: { provider: opts.provider, personaId: opts.personaId, connectors: opts.connectors }
+  });
+  if (!Array.isArray(body.connectors)) throw new CentralClientError("BAD_RESPONSE", "connectors/mine: missing connectors array");
+  return { connectors: body.connectors };
+}
+async function centralConnectorFill(opts) {
+  const body = await centralRequest(opts, "/api/persona-cloud/connectors/fields", {
+    method: "PUT",
+    bearer: opts.ttcJwt,
+    body: { provider: opts.provider, connector: opts.connector, values: opts.values }
+  });
+  if (body.ok !== true) throw new CentralClientError("BAD_RESPONSE", "connectors/fields: server did not ack ok");
+}
 
 // src/cloud/gateway-client.ts
 var GATEWAY_ROUTES = {
@@ -58483,11 +58781,18 @@ var CloudGatewayClient = class {
         ...typeof d.image === "string" ? { image: d.image } : {},
         ...typeof d.model === "string" && d.model ? { model: d.model } : {},
         ...typeof d.effort === "string" && d.effort ? { effort: d.effort } : {},
-        ...typeof d.registeredAt === "number" ? { registeredAt: d.registeredAt } : {}
+        ...typeof d.registeredAt === "number" ? { registeredAt: d.registeredAt } : {},
+        // 形状不对的条目丢掉不抛：老 gateway 的登记行是名字数组，那种就是「没有连接器」
+        ...Array.isArray(d.connectors) ? { connectors: d.connectors.map((c) => EnvConnectorSchema.safeParse(c)).flatMap((p2) => p2.success ? [p2.data] : []) } : {}
       });
     }
     return out;
   }
+  /** gateway 登记行上这个 persona（gateway 名）装了哪些连接器；没这行 = 空 */
+  async personaConnectors(gatewayPersonaId) {
+    const list = await this.listPersonas();
+    return list.find((p2) => p2.personaId === gatewayPersonaId)?.connectors ?? [];
+  }
   /**
    * 会话通道。返回的行流在 Pod 就绪前就能 write：写入先攒着，收到 `ready` 控制行后按序 POST 出去——
    * 编排那头一构造就发 initialize，不用知道 Pod 还在起。
@@ -58682,7 +58987,7 @@ function openHttpLineStream(opts) {
 init_protocol();
 
 // src/tools/codex-cloud-session.ts
-var import_node_fs33 = __toESM(require("fs"), 1);
+var import_node_fs34 = __toESM(require("fs"), 1);
 
 // src/tools/codex-cloud-history.ts
 function personaIdFromCloudCwd(cwd) {
@@ -58806,7 +59111,7 @@ function cloudImageInput(deps) {
     const mime = lookupMime(p2);
     if (!mime.startsWith("image/")) return null;
     try {
-      const bytes = (deps.readFile ?? import_node_fs33.default.readFileSync)(p2);
+      const bytes = (deps.readFile ?? import_node_fs34.default.readFileSync)(p2);
       return { type: "image", url: `data:${mime};base64,${bytes.toString("base64")}` };
     } catch (e) {
       deps.logger?.warn("cloud image attachment unreadable", { path: p2, message: e.message });
@@ -58919,7 +59224,7 @@ var CloudCodexAdapter = class {
 
 // src/tools/pi.ts
 var import_node_child_process10 = require("child_process");
-var import_node_fs36 = __toESM(require("fs"), 1);
+var import_node_fs37 = __toESM(require("fs"), 1);
 init_protocol();
 
 // src/tools/pi-rpc-client.ts
@@ -58998,8 +59303,8 @@ var PiRpcClient = class {
 // src/tools/pi-session.ts
 var import_node_child_process9 = require("child_process");
 var import_node_crypto9 = require("crypto");
-var import_node_fs34 = __toESM(require("fs"), 1);
-var import_node_path39 = __toESM(require("path"), 1);
+var import_node_fs35 = __toESM(require("fs"), 1);
+var import_node_path40 = __toESM(require("path"), 1);
 
 // src/tools/pi-events.ts
 init_protocol();
@@ -59176,8 +59481,8 @@ ${dirs.map((d) => `- ${d}`).join("\n")}`;
 function createPiSession(ctx, sink, deps = {}) {
   const cmd = process.env.PI_BIN ?? "pi";
   const sessionId = ctx.toolSessionId ?? (0, import_node_crypto9.randomUUID)();
-  const skillsDir = import_node_path39.default.join(ctx.cwd, ".claude", "skills");
-  const exists = deps.skillsDirExists ?? ((d) => import_node_fs34.default.existsSync(d));
+  const skillsDir = import_node_path40.default.join(ctx.cwd, ".claude", "skills");
+  const exists = deps.skillsDirExists ?? ((d) => import_node_fs35.default.existsSync(d));
   const args = buildPiArgs(ctx, {
     sessionId,
     skillsDir: exists(skillsDir) ? skillsDir : void 0,
@@ -59293,45 +59598,45 @@ function createPiSession(ctx, sink, deps = {}) {
 }
 
 // src/tools/pi-history.ts
-var import_node_fs35 = __toESM(require("fs"), 1);
+var import_node_fs36 = __toESM(require("fs"), 1);
 var import_node_os10 = __toESM(require("os"), 1);
-var import_node_path40 = __toESM(require("path"), 1);
+var import_node_path41 = __toESM(require("path"), 1);
 var PI_LIST_SESSIONS_LIMIT = 100;
 var PI_LIST_SESSIONS_SCAN_CAP = 4e3;
 function piAgentDir(env = process.env) {
-  return env.PI_CODING_AGENT_DIR || import_node_path40.default.join(import_node_os10.default.homedir(), ".pi", "agent");
+  return env.PI_CODING_AGENT_DIR || import_node_path41.default.join(import_node_os10.default.homedir(), ".pi", "agent");
 }
 function piSessionsRoot(env = process.env) {
-  return import_node_path40.default.join(piAgentDir(env), "sessions");
+  return import_node_path41.default.join(piAgentDir(env), "sessions");
 }
 function encodePiCwd(cwd) {
   return `--${cwd.replace(/^[\\/]+/, "").replace(/[\\/:]/g, "-")}--`;
 }
 function piProjectSessionDir(sessionsRoot, cwd) {
-  return import_node_path40.default.join(sessionsRoot, encodePiCwd(cwd));
+  return import_node_path41.default.join(sessionsRoot, encodePiCwd(cwd));
 }
 function findInDir(dir, toolSessionId) {
   let names;
   try {
-    names = import_node_fs35.default.readdirSync(dir);
+    names = import_node_fs36.default.readdirSync(dir);
   } catch {
     return null;
   }
   const suffix = `_${toolSessionId}.jsonl`;
   const hit = names.filter((n) => n.endsWith(suffix)).sort().at(-1);
-  return hit ? import_node_path40.default.join(dir, hit) : null;
+  return hit ? import_node_path41.default.join(dir, hit) : null;
 }
 function locatePiSessionFile(sessionsRoot, cwd, toolSessionId) {
   const direct = findInDir(piProjectSessionDir(sessionsRoot, cwd), toolSessionId);
   if (direct) return direct;
   let dirs;
   try {
-    dirs = import_node_fs35.default.readdirSync(sessionsRoot, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
+    dirs = import_node_fs36.default.readdirSync(sessionsRoot, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
   } catch {
     return null;
   }
   for (const d of dirs) {
-    const hit = findInDir(import_node_path40.default.join(sessionsRoot, d), toolSessionId);
+    const hit = findInDir(import_node_path41.default.join(sessionsRoot, d), toolSessionId);
     if (hit) return hit;
   }
   return null;
@@ -59430,11 +59735,11 @@ var PiHistoryReader = class {
     return [];
   }
   async listSessions(args) {
-    const want = import_node_path40.default.resolve(args.projectPath);
+    const want = import_node_path41.default.resolve(args.projectPath);
     const dir = piProjectSessionDir(this.deps.sessionsRoot, want);
     let names;
     try {
-      names = import_node_fs35.default.readdirSync(dir).filter((n) => n.endsWith(".jsonl"));
+      names = import_node_fs36.default.readdirSync(dir).filter((n) => n.endsWith(".jsonl"));
     } catch {
       return [];
     }
@@ -59442,15 +59747,15 @@ var PiHistoryReader = class {
     let scanned = 0;
     for (const n of names) {
       if (++scanned > PI_LIST_SESSIONS_SCAN_CAP) break;
-      const file = import_node_path40.default.join(dir, n);
+      const file = import_node_path41.default.join(dir, n);
       const head = parseLine2(readFirstLine(file) ?? "");
       if (!head || head.type !== "session") continue;
       const cwd = str3(head.cwd);
       const id = str3(head.id);
-      if (!cwd || !id || import_node_path40.default.resolve(cwd) !== want) continue;
+      if (!cwd || !id || import_node_path41.default.resolve(cwd) !== want) continue;
       let mtimeMs;
       try {
-        mtimeMs = import_node_fs35.default.statSync(file).mtimeMs;
+        mtimeMs = import_node_fs36.default.statSync(file).mtimeMs;
       } catch {
         continue;
       }
@@ -59458,7 +59763,7 @@ var PiHistoryReader = class {
     }
     found.sort((a, b2) => b2.mtimeMs - a.mtimeMs);
     return found.slice(0, PI_LIST_SESSIONS_LIMIT).map((f) => {
-      const parsed = parsePiSession(import_node_fs35.default.readFileSync(f.file, "utf8"));
+      const parsed = parsePiSession(import_node_fs36.default.readFileSync(f.file, "utf8"));
       const firstUser = parsed.messages.find((m2) => m2.kind === "user-text");
       return {
         toolSessionId: f.id,
@@ -59471,7 +59776,7 @@ var PiHistoryReader = class {
   async read(args) {
     const file = locatePiSessionFile(this.deps.sessionsRoot, args.cwd, args.toolSessionId);
     if (!file) throw new Error(`pi session not found for ${args.toolSessionId}`);
-    return pageMessages(parsePiSession(import_node_fs35.default.readFileSync(file, "utf8")).messages, args);
+    return pageMessages(parsePiSession(import_node_fs36.default.readFileSync(file, "utf8")).messages, args);
   }
   async listSubagents(_args) {
     return [];
@@ -59506,10 +59811,10 @@ var PI_DEFAULT_MODEL_ENTRY = {
 };
 var PI_FULL_ACCESS = { id: "never", label: "Full Access", description: "pi \u65E0\u5BA1\u6279\uFF1A\u4ECE\u4E0D\u8BE2\u95EE\uFF0C\u81EA\u4E3B\u6267\u884C" };
 async function probePi(env = process.env) {
-  if (env.PI_BIN && import_node_fs36.default.existsSync(env.PI_BIN)) return { available: true, path: env.PI_BIN };
+  if (env.PI_BIN && import_node_fs37.default.existsSync(env.PI_BIN)) return { available: true, path: env.PI_BIN };
   try {
     const out = (0, import_node_child_process10.execFileSync)("which", ["pi"], { encoding: "utf8" }).trim();
-    if (out && import_node_fs36.default.existsSync(out)) return { available: true, path: out };
+    if (out && import_node_fs37.default.existsSync(out)) return { available: true, path: out };
   } catch {
   }
   return { available: false };
@@ -59676,7 +59981,7 @@ var PiAdapter = class {
 init_protocol();
 
 // src/tools/codex-skills.ts
-var import_node_path41 = __toESM(require("path"), 1);
+var import_node_path42 = __toESM(require("path"), 1);
 function str4(v2) {
   return typeof v2 === "string" ? v2 : void 0;
 }
@@ -59691,13 +59996,13 @@ function mapSkillsListResponse(res) {
       const r = s ?? {};
       const name = str4(r.name);
       if (!name) continue;
-      const path100 = str4(r.path);
+      const path101 = str4(r.path);
       const description = str4(r.description);
       const isPlugin = name.includes(":");
       out.push({
         name,
         source: isPlugin ? "plugin" : "project",
-        ...path100 ? { path: path100 } : {},
+        ...path101 ? { path: path101 } : {},
         ...description ? { description } : {},
         ...isPlugin ? { plugin: name.split(":")[0] } : {}
       });
@@ -59713,7 +60018,7 @@ async function listCodexSkills(cwd, deps = {}) {
     // 先写 extraRoots 再写 list（stdio 按写入顺序处理，fire-and-forget 不 await 回包；
     // codex-session.ts ready 序列同款，两处保持一致）。失败不阻塞 list。
     beforeRequest: (client) => {
-      void client.request("skills/extraRoots/set", { extraRoots: [import_node_path41.default.join(cwd, ".claude", "skills")] }).catch(() => void 0);
+      void client.request("skills/extraRoots/set", { extraRoots: [import_node_path42.default.join(cwd, ".claude", "skills")] }).catch(() => void 0);
     }
   });
   return mapSkillsListResponse(res);
@@ -59787,23 +60092,23 @@ function rec4(v2) {
 }
 
 // src/workspace/browser.ts
-var import_node_fs37 = __toESM(require("fs"), 1);
+var import_node_fs38 = __toESM(require("fs"), 1);
 var import_node_os11 = __toESM(require("os"), 1);
-var import_node_path42 = __toESM(require("path"), 1);
+var import_node_path43 = __toESM(require("path"), 1);
 init_protocol();
 var MAX_FILE_BYTES2 = 2 * 1024 * 1024;
 function resolveInsideCwd(cwd, subpath) {
-  const absCwd = import_node_path42.default.resolve(cwd);
-  const joined = import_node_path42.default.resolve(absCwd, subpath ?? ".");
-  const rel = import_node_path42.default.relative(absCwd, joined);
-  if (rel.startsWith("..") || import_node_path42.default.isAbsolute(rel)) {
+  const absCwd = import_node_path43.default.resolve(cwd);
+  const joined = import_node_path43.default.resolve(absCwd, subpath ?? ".");
+  const rel = import_node_path43.default.relative(absCwd, joined);
+  if (rel.startsWith("..") || import_node_path43.default.isAbsolute(rel)) {
     throw new ClawdError(ERROR_CODES.INVALID_PATH, `path escapes cwd: ${subpath}`);
   }
   return joined;
 }
 function ensureCwd(cwd) {
   try {
-    const stat = import_node_fs37.default.statSync(cwd);
+    const stat = import_node_fs38.default.statSync(cwd);
     if (!stat.isDirectory()) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${cwd}`);
     }
@@ -59817,7 +60122,7 @@ var WorkspaceBrowser = class {
     const cwd = args.cwd && args.cwd.length > 0 ? args.cwd : import_node_os11.default.homedir();
     ensureCwd(cwd);
     const full = resolveInsideCwd(cwd, args.path);
-    const dirents = import_node_fs37.default.readdirSync(full, { withFileTypes: true });
+    const dirents = import_node_fs38.default.readdirSync(full, { withFileTypes: true });
     const entries = [];
     for (const d of dirents) {
       if (!args.showHidden && d.name.startsWith(".")) continue;
@@ -59827,7 +60132,7 @@ var WorkspaceBrowser = class {
         mtime: ""
       };
       try {
-        const st = import_node_fs37.default.statSync(import_node_path42.default.join(full, d.name));
+        const st = import_node_fs38.default.statSync(import_node_path43.default.join(full, d.name));
         entry.mtime = new Date(st.mtimeMs).toISOString();
         if (d.isFile()) entry.size = st.size;
       } catch {
@@ -59843,14 +60148,14 @@ var WorkspaceBrowser = class {
   read(args) {
     ensureCwd(args.cwd);
     const full = resolveInsideCwd(args.cwd, args.path);
-    const st = import_node_fs37.default.statSync(full);
+    const st = import_node_fs38.default.statSync(full);
     if (!st.isFile()) {
       throw new ClawdError(ERROR_CODES.INVALID_PATH, `not a file: ${args.path}`);
     }
     if (st.size > MAX_FILE_BYTES2) {
       throw new ClawdError(ERROR_CODES.FILE_TOO_LARGE, `file > ${MAX_FILE_BYTES2} bytes`);
     }
-    const buf = import_node_fs37.default.readFileSync(full);
+    const buf = import_node_fs38.default.readFileSync(full);
     const isBinary = buf.includes(0);
     if (isBinary) {
       return {
@@ -59872,20 +60177,20 @@ var WorkspaceBrowser = class {
 };
 
 // src/skills/agents-scanner.ts
-var import_node_fs38 = __toESM(require("fs"), 1);
+var import_node_fs39 = __toESM(require("fs"), 1);
 var import_node_os12 = __toESM(require("os"), 1);
-var import_node_path43 = __toESM(require("path"), 1);
+var import_node_path44 = __toESM(require("path"), 1);
 var DEFAULT_POLICY_DIR_DARWIN = "/Library/Application Support/ClaudeCode/.claude/agents";
 function isDirLikeSync2(p2) {
   try {
-    return import_node_fs38.default.statSync(p2).isDirectory();
+    return import_node_fs39.default.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function fileExistsSync(p2) {
   try {
-    return import_node_fs38.default.statSync(p2).isFile();
+    return import_node_fs39.default.statSync(p2).isFile();
   } catch {
     return false;
   }
@@ -59893,7 +60198,7 @@ function fileExistsSync(p2) {
 function parseAgentFile(filePath) {
   let content;
   try {
-    content = import_node_fs38.default.readFileSync(filePath, "utf8");
+    content = import_node_fs39.default.readFileSync(filePath, "utf8");
   } catch {
     return {};
   }
@@ -59906,16 +60211,16 @@ function parseAgentFile(filePath) {
 function scanAgentsDir(dir, source, seen, out) {
   let entries;
   try {
-    entries = import_node_fs38.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs39.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
     if (!ent.name.endsWith(".md")) continue;
-    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path43.default.join(dir, ent.name)))) {
+    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path44.default.join(dir, ent.name)))) {
       continue;
     }
-    const filePath = import_node_path43.default.join(dir, ent.name);
+    const filePath = import_node_path44.default.join(dir, ent.name);
     const baseName = ent.name.replace(/\.md$/, "");
     if (seen.has(baseName)) continue;
     seen.add(baseName);
@@ -59933,12 +60238,12 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   function walk2(dir, namespaces) {
     let entries;
     try {
-      entries = import_node_fs38.default.readdirSync(dir, { withFileTypes: true });
+      entries = import_node_fs39.default.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const ent of entries) {
-      const childPath = import_node_path43.default.join(dir, ent.name);
+      const childPath = import_node_path44.default.join(dir, ent.name);
       if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync2(childPath)) {
         walk2(childPath, [...namespaces, ent.name]);
         continue;
@@ -59963,13 +60268,13 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   walk2(root, []);
 }
 function readInstalledPlugins2(home) {
-  const pluginsDir = import_node_path43.default.join(home, ".claude", "plugins");
-  const v2 = import_node_path43.default.join(pluginsDir, "installed_plugins_v2.json");
-  const v1 = import_node_path43.default.join(pluginsDir, "installed_plugins.json");
+  const pluginsDir = import_node_path44.default.join(home, ".claude", "plugins");
+  const v2 = import_node_path44.default.join(pluginsDir, "installed_plugins_v2.json");
+  const v1 = import_node_path44.default.join(pluginsDir, "installed_plugins.json");
   let raw = null;
   for (const candidate of [v2, v1]) {
     try {
-      raw = import_node_fs38.default.readFileSync(candidate, "utf8");
+      raw = import_node_fs39.default.readFileSync(candidate, "utf8");
       break;
     } catch {
     }
@@ -59994,19 +60299,19 @@ function readInstalledPlugins2(home) {
   return out;
 }
 function walkUpProjectAgentsDirs(startCwd, home, seen, out) {
-  let cur = import_node_path43.default.resolve(startCwd);
-  const fsRoot = import_node_path43.default.parse(cur).root;
+  let cur = import_node_path44.default.resolve(startCwd);
+  const fsRoot = import_node_path44.default.parse(cur).root;
   while (true) {
-    scanAgentsDir(import_node_path43.default.join(cur, ".claude", "agents"), "project", seen, out);
+    scanAgentsDir(import_node_path44.default.join(cur, ".claude", "agents"), "project", seen, out);
     let hasGit = false;
     try {
-      hasGit = import_node_fs38.default.existsSync(import_node_path43.default.join(cur, ".git"));
+      hasGit = import_node_fs39.default.existsSync(import_node_path44.default.join(cur, ".git"));
     } catch {
     }
     if (hasGit) return;
     if (cur === home) return;
     if (cur === fsRoot) return;
-    const parent = import_node_path43.default.dirname(cur);
+    const parent = import_node_path44.default.dirname(cur);
     if (parent === cur) return;
     cur = parent;
   }
@@ -60041,7 +60346,7 @@ var AgentsScanner = class {
     }
     const fsBlock = [];
     scanAgentsDir(
-      import_node_path43.default.join(this.home, ".claude", "agents"),
+      import_node_path44.default.join(this.home, ".claude", "agents"),
       "global",
       seen,
       fsBlock
@@ -60055,7 +60360,7 @@ var AgentsScanner = class {
       ...this.extraPluginRoots
     ];
     for (const { name, root } of plugins) {
-      const agentsRoot = import_node_path43.default.join(root, "agents");
+      const agentsRoot = import_node_path44.default.join(root, "agents");
       scanPluginAgentsTree(agentsRoot, name, seen, fsBlock);
     }
     return [...builtinBlock, ...fsBlock];
@@ -60063,15 +60368,15 @@ var AgentsScanner = class {
 };
 
 // src/observer/session-observer.ts
-var import_node_fs40 = __toESM(require("fs"), 1);
+var import_node_fs41 = __toESM(require("fs"), 1);
 var import_node_os14 = __toESM(require("os"), 1);
-var import_node_path45 = __toESM(require("path"), 1);
+var import_node_path46 = __toESM(require("path"), 1);
 init_claude_history();
 
 // src/observer/subagent-meta-observer.ts
-var import_node_fs39 = __toESM(require("fs"), 1);
+var import_node_fs40 = __toESM(require("fs"), 1);
 var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path44 = __toESM(require("path"), 1);
+var import_node_path45 = __toESM(require("path"), 1);
 init_claude_history();
 var META_RE = /^agent-([A-Za-z0-9_-]+)\.meta\.json$/;
 var SubagentMetaObserver = class {
@@ -60084,7 +60389,7 @@ var SubagentMetaObserver = class {
   watches = /* @__PURE__ */ new Map();
   // public for spec only：测试直接拼路径写假 meta.json；生产 start() 内部自己解析
   resolveSubagentDir(cwd, toolSessionId) {
-    return import_node_path44.default.join(
+    return import_node_path45.default.join(
       this.home,
       ".claude",
       "projects",
@@ -60114,7 +60419,7 @@ var SubagentMetaObserver = class {
   attachWatcher(w2) {
     if (w2.watcher) return;
     try {
-      w2.watcher = import_node_fs39.default.watch(w2.dirPath, { persistent: false }, (_evt, name) => {
+      w2.watcher = import_node_fs40.default.watch(w2.dirPath, { persistent: false }, (_evt, name) => {
         if (!name) return;
         const m2 = META_RE.exec(String(name));
         if (!m2) return;
@@ -60126,7 +60431,7 @@ var SubagentMetaObserver = class {
   scan(w2) {
     let entries;
     try {
-      entries = import_node_fs39.default.readdirSync(w2.dirPath);
+      entries = import_node_fs40.default.readdirSync(w2.dirPath);
     } catch {
       return;
     }
@@ -60140,10 +60445,10 @@ var SubagentMetaObserver = class {
     if (!m2) return;
     const agentId = m2[1];
     if (w2.emitted.has(agentId)) return;
-    const file = import_node_path44.default.join(w2.dirPath, name);
+    const file = import_node_path45.default.join(w2.dirPath, name);
     let raw;
     try {
-      raw = import_node_fs39.default.readFileSync(file, "utf8");
+      raw = import_node_fs40.default.readFileSync(file, "utf8");
     } catch {
       return;
     }
@@ -60200,14 +60505,14 @@ var SessionObserver = class {
   metaObserver;
   resolveJsonlPath(cwd, toolSessionId, override) {
     if (override) return override;
-    return import_node_path45.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
+    return import_node_path46.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
   }
   start(args) {
     this.stop(args.sessionId);
     const filePath = this.resolveJsonlPath(args.cwd, args.toolSessionId, args.jsonlPath);
     let size = 0;
     try {
-      size = import_node_fs40.default.statSync(filePath).size;
+      size = import_node_fs41.default.statSync(filePath).size;
     } catch {
     }
     const w2 = {
@@ -60220,16 +60525,16 @@ var SessionObserver = class {
       adapter: args.adapter,
       prevIsRejectSentinel: false,
       toolSessionId: args.toolSessionId,
-      sawFile: import_node_fs40.default.existsSync(filePath),
+      sawFile: import_node_fs41.default.existsSync(filePath),
       lastRelocateScanMs: 0,
       pendingCwdDerive: false,
       lastDeriveMs: 0
     };
     try {
-      import_node_fs40.default.mkdirSync(import_node_path45.default.dirname(filePath), { recursive: true });
+      import_node_fs41.default.mkdirSync(import_node_path46.default.dirname(filePath), { recursive: true });
     } catch {
     }
-    w2.watcher = import_node_fs40.default.watch(import_node_path45.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
+    w2.watcher = import_node_fs41.default.watch(import_node_path46.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
       if (!changedName || !w2.filePath.endsWith(changedName)) return;
       this.poll(w2);
     });
@@ -60252,7 +60557,7 @@ var SessionObserver = class {
   // 异常静默吞，不阻塞 watcher 启动
   hydrateMetaTail(w2, maxLines = 200) {
     try {
-      const raw = import_node_fs40.default.readFileSync(w2.filePath, "utf8");
+      const raw = import_node_fs41.default.readFileSync(w2.filePath, "utf8");
       if (!raw) return;
       const allLines = raw.split("\n").filter((l) => l.trim().length > 0);
       if (allLines.length === 0) return;
@@ -60276,7 +60581,7 @@ var SessionObserver = class {
   poll(w2) {
     let size = 0;
     try {
-      size = import_node_fs40.default.statSync(w2.filePath).size;
+      size = import_node_fs41.default.statSync(w2.filePath).size;
     } catch {
       if (w2.sawFile) this.maybeRelocate(w2);
       return;
@@ -60287,11 +60592,11 @@ var SessionObserver = class {
       w2.buf = "";
     }
     if (size === w2.lastSize) return;
-    const fd = import_node_fs40.default.openSync(w2.filePath, "r");
+    const fd = import_node_fs41.default.openSync(w2.filePath, "r");
     try {
       const len = size - w2.lastSize;
       const buf = Buffer.alloc(len);
-      import_node_fs40.default.readSync(fd, buf, 0, len, w2.lastSize);
+      import_node_fs41.default.readSync(fd, buf, 0, len, w2.lastSize);
       w2.lastSize = size;
       w2.buf += buf.toString("utf8");
       let newlineIndex;
@@ -60314,7 +60619,7 @@ var SessionObserver = class {
         }
       }
     } finally {
-      import_node_fs40.default.closeSync(fd);
+      import_node_fs41.default.closeSync(fd);
     }
     if (w2.pendingCwdDerive) this.maybeDeriveCwd(w2);
   }
@@ -60326,7 +60631,7 @@ var SessionObserver = class {
     const now = Date.now();
     if (now - w2.lastRelocateScanMs < 1e3) return;
     w2.lastRelocateScanMs = now;
-    const projectsRoot = import_node_path45.default.join(this.home, ".claude", "projects");
+    const projectsRoot = import_node_path46.default.join(this.home, ".claude", "projects");
     const found = findTranscriptByToolSessionId(projectsRoot, w2.toolSessionId);
     if (!found || found === w2.filePath) return;
     try {
@@ -60335,7 +60640,7 @@ var SessionObserver = class {
     }
     w2.filePath = found;
     try {
-      w2.watcher = import_node_fs40.default.watch(import_node_path45.default.dirname(found), { persistent: false }, (_event, changedName) => {
+      w2.watcher = import_node_fs41.default.watch(import_node_path46.default.dirname(found), { persistent: false }, (_event, changedName) => {
         if (!changedName || !w2.filePath.endsWith(changedName)) return;
         this.poll(w2);
       });
@@ -60457,9 +60762,9 @@ function listRegistered() {
 // src/tools/title-generator.ts
 var import_node_child_process11 = require("child_process");
 init_protocol();
-var import_node_fs41 = __toESM(require("fs"), 1);
+var import_node_fs42 = __toESM(require("fs"), 1);
 var import_node_os15 = __toESM(require("os"), 1);
-var import_node_path46 = __toESM(require("path"), 1);
+var import_node_path47 = __toESM(require("path"), 1);
 var TITLE_GEN_DIR_PREFIX = "clawd-title-";
 var TITLE_MODEL_BY_TOOL = {
   claude: "haiku",
@@ -60530,21 +60835,21 @@ async function generateSessionTitle(tool, firstMessage, deps = {}) {
   if (!text) return null;
   let workDir;
   try {
-    workDir = import_node_fs41.default.mkdtempSync(import_node_path46.default.join(import_node_os15.default.tmpdir(), TITLE_GEN_DIR_PREFIX));
+    workDir = import_node_fs42.default.mkdtempSync(import_node_path47.default.join(import_node_os15.default.tmpdir(), TITLE_GEN_DIR_PREFIX));
   } catch {
     return null;
   }
   const cleanupWorkDir = () => {
     try {
-      import_node_fs41.default.rmSync(workDir, { recursive: true, force: true });
+      import_node_fs42.default.rmSync(workDir, { recursive: true, force: true });
     } catch {
     }
   };
-  const outFile = import_node_path46.default.join(workDir, `codex-title-${process.pid}-${++outFileSeq}-${Date.now()}.txt`);
-  const schemaFile = import_node_path46.default.join(workDir, "title-schema.json");
+  const outFile = import_node_path47.default.join(workDir, `codex-title-${process.pid}-${++outFileSeq}-${Date.now()}.txt`);
+  const schemaFile = import_node_path47.default.join(workDir, "title-schema.json");
   if (isCodexFamily(tool)) {
     try {
-      import_node_fs41.default.writeFileSync(schemaFile, CODEX_TITLE_SCHEMA);
+      import_node_fs42.default.writeFileSync(schemaFile, CODEX_TITLE_SCHEMA);
     } catch {
       cleanupWorkDir();
       return null;
@@ -60594,7 +60899,7 @@ async function generateSessionTitle(tool, firstMessage, deps = {}) {
       if (tool === "claude") return finish(parseTitleJson(stdout));
       let fileText = "";
       try {
-        fileText = import_node_fs41.default.readFileSync(outFile, "utf8");
+        fileText = import_node_fs42.default.readFileSync(outFile, "utf8");
       } catch {
         return finish(null);
       }
@@ -61306,8 +61611,8 @@ async function authenticate(token, deps) {
 }
 
 // src/legacy-cleanup.ts
-var fs52 = __toESM(require("fs/promises"), 1);
-var path54 = __toESM(require("path"), 1);
+var fs53 = __toESM(require("fs/promises"), 1);
+var path55 = __toESM(require("path"), 1);
 var LEGACY_FILES = [
   "personal-capability.json",
   "received-capabilities.json",
@@ -61316,9 +61621,9 @@ var LEGACY_FILES = [
 async function cleanupLegacyCapabilityFiles(dataDir, logger) {
   const removed = [];
   for (const name of LEGACY_FILES) {
-    const p2 = path54.join(dataDir, name);
+    const p2 = path55.join(dataDir, name);
     try {
-      await fs52.unlink(p2);
+      await fs53.unlink(p2);
       removed.push(name);
       logger.debug("legacy capability file removed", { file: name });
     } catch (err) {
@@ -61330,13 +61635,13 @@ async function cleanupLegacyCapabilityFiles(dataDir, logger) {
 }
 
 // src/inbox/inbox-store.ts
-var fs53 = __toESM(require("fs"), 1);
-var path55 = __toESM(require("path"), 1);
+var fs54 = __toESM(require("fs"), 1);
+var path56 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs53.mkdirSync(this.dirPath(), { recursive: true });
+    fs54.mkdirSync(this.dirPath(), { recursive: true });
   }
   dataDir;
   /**
@@ -61348,7 +61653,7 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     let raw;
     try {
-      raw = fs53.readFileSync(file, "utf8");
+      raw = fs54.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -61364,7 +61669,7 @@ var InboxStore = class {
     const dir = this.dirPath();
     let entries;
     try {
-      entries = fs53.readdirSync(dir);
+      entries = fs54.readdirSync(dir);
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -61380,9 +61685,9 @@ var InboxStore = class {
     if (existing.some((m2) => m2.id === message.id)) return;
     const file = this.filePath(message.peerDeviceId);
     const line = JSON.stringify(message) + "\n";
-    fs53.appendFileSync(file, line, { mode: 384 });
+    fs54.appendFileSync(file, line, { mode: 384 });
     try {
-      fs53.chmodSync(file, 384);
+      fs54.chmodSync(file, 384);
     } catch {
     }
   }
@@ -61412,7 +61717,7 @@ var InboxStore = class {
   removeByPeerDeviceId(peerDeviceId) {
     const file = this.filePath(peerDeviceId);
     try {
-      fs53.unlinkSync(file);
+      fs54.unlinkSync(file);
     } catch (err) {
       if (err?.code === "ENOENT") return;
     }
@@ -61421,18 +61726,18 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     const content = messages.map((m2) => JSON.stringify(m2)).join("\n") + (messages.length > 0 ? "\n" : "");
-    fs53.writeFileSync(tmp, content, { mode: 384 });
-    fs53.renameSync(tmp, file);
+    fs54.writeFileSync(tmp, content, { mode: 384 });
+    fs54.renameSync(tmp, file);
     try {
-      fs53.chmodSync(file, 384);
+      fs54.chmodSync(file, 384);
     } catch {
     }
   }
   dirPath() {
-    return path55.join(this.dataDir, INBOX_SUBDIR);
+    return path56.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerDeviceId) {
-    return path55.join(this.dirPath(), `${peerDeviceId}.jsonl`);
+    return path56.join(this.dirPath(), `${peerDeviceId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -61520,8 +61825,8 @@ var InboxManager = class {
 };
 
 // src/state/contact-store.ts
-var fs54 = __toESM(require("fs"), 1);
-var path56 = __toESM(require("path"), 1);
+var fs55 = __toESM(require("fs"), 1);
+var path57 = __toESM(require("path"), 1);
 var FILE_NAME = "contacts.json";
 var ContactStore = class {
   constructor(dataDir) {
@@ -61531,10 +61836,10 @@ var ContactStore = class {
   contacts = /* @__PURE__ */ new Map();
   load() {
     this.contacts.clear();
-    const file = path56.join(this.dataDir, FILE_NAME);
+    const file = path57.join(this.dataDir, FILE_NAME);
     let raw;
     try {
-      raw = fs54.readFileSync(file, "utf8");
+      raw = fs55.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code !== "ENOENT") this.renameBak(file);
       return;
@@ -61615,20 +61920,20 @@ var ContactStore = class {
     return true;
   }
   flush() {
-    const file = path56.join(this.dataDir, FILE_NAME);
+    const file = path57.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
       { contacts: Array.from(this.contacts.values()) },
       null,
       2
     );
-    fs54.mkdirSync(this.dataDir, { recursive: true });
-    fs54.writeFileSync(tmp, content, { mode: 384 });
-    fs54.renameSync(tmp, file);
+    fs55.mkdirSync(this.dataDir, { recursive: true });
+    fs55.writeFileSync(tmp, content, { mode: 384 });
+    fs55.renameSync(tmp, file);
   }
   renameBak(file) {
     try {
-      fs54.renameSync(file, `${file}.bak`);
+      fs55.renameSync(file, `${file}.bak`);
     } catch {
     }
   }
@@ -61736,61 +62041,61 @@ async function connectRemote(args) {
 }
 
 // src/migrations/2026-05-20-flatten-sessions.ts
-var fs55 = __toESM(require("fs"), 1);
-var path57 = __toESM(require("path"), 1);
+var fs56 = __toESM(require("fs"), 1);
+var path58 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path57.join(dataDir, "sessions");
-  const flagPath = path57.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path58.join(dataDir, "sessions");
+  const flagPath = path58.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path57.join(sessionsDir, "default");
+  const defaultDir = path58.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path57.join(defaultDir, entry);
-      const dst = path57.join(sessionsDir, entry);
-      fs55.renameSync(src, dst);
+      const src = path58.join(defaultDir, entry);
+      const dst = path58.join(sessionsDir, entry);
+      fs56.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path57.join(sessionsDir, pid);
+    const personaDir = path58.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path57.join(personaDir, "owner");
+    const ownerSrc = path58.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path57.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs55.mkdirSync(ownerDst, { recursive: true });
+      const ownerDst = path58.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      fs56.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs55.renameSync(path57.join(ownerSrc, file), path57.join(ownerDst, file));
+        fs56.renameSync(path58.join(ownerSrc, file), path58.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path57.join(personaDir, "listener");
+    const listenerSrc = path58.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path57.join(dataDir, ".legacy", `listener-${pid}`);
-      fs55.mkdirSync(archiveDst, { recursive: true });
+      const archiveDst = path58.join(dataDir, ".legacy", `listener-${pid}`);
+      fs56.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs55.renameSync(path57.join(listenerSrc, file), path57.join(archiveDst, file));
+        fs56.renameSync(path58.join(listenerSrc, file), path58.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs55.mkdirSync(sessionsDir, { recursive: true });
-  fs55.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs56.mkdirSync(sessionsDir, { recursive: true });
+  fs56.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -61801,7 +62106,7 @@ function migrateFlattenSessions(opts) {
 }
 function existsSync3(p2) {
   try {
-    fs55.statSync(p2);
+    fs56.statSync(p2);
     return true;
   } catch {
     return false;
@@ -61809,62 +62114,62 @@ function existsSync3(p2) {
 }
 function isDir(p2) {
   try {
-    return fs55.statSync(p2).isDirectory();
+    return fs56.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p2) {
   try {
-    return fs55.readdirSync(p2);
+    return fs56.readdirSync(p2);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p2) {
   try {
-    fs55.rmdirSync(p2);
+    fs56.rmdirSync(p2);
   } catch {
   }
 }
 
 // src/migrations/2026-08-18-drop-seeded-projects.ts
-var fs56 = __toESM(require("fs"), 1);
-var path58 = __toESM(require("path"), 1);
+var fs57 = __toESM(require("fs"), 1);
+var path59 = __toESM(require("path"), 1);
 var DROP_SEEDED_PROJECTS_FLAG = ".projects-seed-dropped.v1.done";
 function dropSeededProjects(opts) {
-  fs56.mkdirSync(opts.dataDir, { recursive: true });
-  const flag = path58.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
-  if (fs56.existsSync(flag)) return { skipped: true, dropped: 0, backup: null };
-  const file = path58.join(opts.dataDir, "projects.json");
+  fs57.mkdirSync(opts.dataDir, { recursive: true });
+  const flag = path59.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
+  if (fs57.existsSync(flag)) return { skipped: true, dropped: 0, backup: null };
+  const file = path59.join(opts.dataDir, "projects.json");
   let raw = null;
   let dropped = 0;
   try {
-    raw = fs56.readFileSync(file, "utf8");
+    raw = fs57.readFileSync(file, "utf8");
     dropped = JSON.parse(raw).projects?.length ?? 0;
   } catch {
   }
   let backup = null;
   if (raw != null && dropped > 0) {
-    const dir = path58.join(opts.dataDir, "backups");
-    fs56.mkdirSync(dir, { recursive: true });
-    backup = path58.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
-    fs56.writeFileSync(backup, raw);
+    const dir = path59.join(opts.dataDir, "backups");
+    fs57.mkdirSync(dir, { recursive: true });
+    backup = path59.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
+    fs57.writeFileSync(backup, raw);
   }
   if (raw != null || dropped > 0) {
-    fs56.writeFileSync(file, JSON.stringify({ projects: [] }, null, 2));
+    fs57.writeFileSync(file, JSON.stringify({ projects: [] }, null, 2));
   }
-  fs56.writeFileSync(flag, (/* @__PURE__ */ new Date()).toISOString());
+  fs57.writeFileSync(flag, (/* @__PURE__ */ new Date()).toISOString());
   return { skipped: false, dropped, backup };
 }
 
 // src/transport/http-router.ts
-var import_node_fs43 = __toESM(require("fs"), 1);
-var import_node_path49 = __toESM(require("path"), 1);
+var import_node_fs44 = __toESM(require("fs"), 1);
+var import_node_path50 = __toESM(require("path"), 1);
 
 // src/attachment/upload.ts
-var import_node_fs42 = __toESM(require("fs"), 1);
-var import_node_path47 = __toESM(require("path"), 1);
+var import_node_fs43 = __toESM(require("fs"), 1);
+var import_node_path48 = __toESM(require("path"), 1);
 var import_node_crypto11 = __toESM(require("crypto"), 1);
 var import_promises7 = require("stream/promises");
 var UploadError = class extends Error {
@@ -61876,22 +62181,22 @@ var UploadError = class extends Error {
   code;
 };
 function assertValidFileName(fileName) {
-  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path47.default.basename(fileName)) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path48.default.basename(fileName)) {
     throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
   }
 }
 var HASH_PREFIX_LEN = 16;
 async function writeUploadedAttachment(args) {
   assertValidFileName(args.fileName);
-  const attachmentsRoot = import_node_path47.default.join(args.baseDir, ".attachments");
+  const attachmentsRoot = import_node_path48.default.join(args.baseDir, ".attachments");
   try {
-    import_node_fs42.default.mkdirSync(attachmentsRoot, { recursive: true });
+    import_node_fs43.default.mkdirSync(attachmentsRoot, { recursive: true });
   } catch (err) {
     throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
   }
   const hasher = import_node_crypto11.default.createHash("sha256");
   let actualSize = 0;
-  const tmpPath = import_node_path47.default.join(
+  const tmpPath = import_node_path48.default.join(
     attachmentsRoot,
     `.upload-${process.pid}-${Date.now()}-${import_node_crypto11.default.randomBytes(4).toString("hex")}`
   );
@@ -61906,18 +62211,18 @@ async function writeUploadedAttachment(args) {
           yield buf;
         }
       },
-      import_node_fs42.default.createWriteStream(tmpPath, { mode: 384 })
+      import_node_fs43.default.createWriteStream(tmpPath, { mode: 384 })
     );
   } catch (err) {
     try {
-      import_node_fs42.default.unlinkSync(tmpPath);
+      import_node_fs43.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError("STORAGE_ERROR", `write failed: ${err.message}`);
   }
   if (actualSize !== args.contentLength) {
     try {
-      import_node_fs42.default.unlinkSync(tmpPath);
+      import_node_fs43.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError(
@@ -61926,34 +62231,34 @@ async function writeUploadedAttachment(args) {
     );
   }
   const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
-  const hashDir = import_node_path47.default.join(attachmentsRoot, attachmentId);
+  const hashDir = import_node_path48.default.join(attachmentsRoot, attachmentId);
   let finalFileName;
   let hashDirExists = false;
   try {
-    hashDirExists = import_node_fs42.default.statSync(hashDir).isDirectory();
+    hashDirExists = import_node_fs43.default.statSync(hashDir).isDirectory();
   } catch {
   }
   if (hashDirExists) {
-    const existing = import_node_fs42.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
+    const existing = import_node_fs43.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
     finalFileName = existing[0] ?? args.fileName;
     try {
-      import_node_fs42.default.unlinkSync(tmpPath);
+      import_node_fs43.default.unlinkSync(tmpPath);
     } catch {
     }
   } else {
     try {
-      import_node_fs42.default.mkdirSync(hashDir, { recursive: true });
+      import_node_fs43.default.mkdirSync(hashDir, { recursive: true });
       finalFileName = args.fileName;
-      import_node_fs42.default.renameSync(tmpPath, import_node_path47.default.join(hashDir, finalFileName));
+      import_node_fs43.default.renameSync(tmpPath, import_node_path48.default.join(hashDir, finalFileName));
     } catch (err) {
       try {
-        import_node_fs42.default.unlinkSync(tmpPath);
+        import_node_fs43.default.unlinkSync(tmpPath);
       } catch {
       }
       throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
     }
   }
-  const absPath = import_node_path47.default.join(hashDir, finalFileName);
+  const absPath = import_node_path48.default.join(hashDir, finalFileName);
   const relPath = absPath;
   args.groupFileStore.upsert(args.scope, args.sessionId, {
     relPath: absPath,
@@ -61968,7 +62273,7 @@ async function writeUploadedAttachment(args) {
 
 // src/extension/import.ts
 var import_promises8 = __toESM(require("fs/promises"), 1);
-var import_node_path48 = __toESM(require("path"), 1);
+var import_node_path49 = __toESM(require("path"), 1);
 var import_node_os16 = __toESM(require("os"), 1);
 var import_jszip = __toESM(require_lib3(), 1);
 var ImportError = class extends Error {
@@ -61986,7 +62291,7 @@ async function importZip(buf, root) {
     throw new ImportError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path48.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path49.default.isAbsolute(name)) {
       throw new ImportError("ZIP_INVALID", `unsafe zip entry path: ${name}`);
     }
   }
@@ -62019,7 +62324,7 @@ async function importZip(buf, root) {
       );
     }
   }
-  const destDir = import_node_path48.default.join(root, manifest.id);
+  const destDir = import_node_path49.default.join(root, manifest.id);
   let destExists = false;
   try {
     await import_promises8.default.access(destDir);
@@ -62029,15 +62334,15 @@ async function importZip(buf, root) {
   if (destExists) {
     throw new ImportError("ALREADY_EXISTS", `extension ${manifest.id} already installed`);
   }
-  const stage = await import_promises8.default.mkdtemp(import_node_path48.default.join(import_node_os16.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
+  const stage = await import_promises8.default.mkdtemp(import_node_path49.default.join(import_node_os16.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path48.default.join(stage, name);
+      const dest = import_node_path49.default.join(stage, name);
       if (entry.dir) {
         await import_promises8.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises8.default.mkdir(import_node_path48.default.dirname(dest), { recursive: true });
+      await import_promises8.default.mkdir(import_node_path49.default.dirname(dest), { recursive: true });
       const content = await entry.async("nodebuffer");
       await import_promises8.default.writeFile(dest, content);
     }
@@ -62067,7 +62372,7 @@ var SHARE_UI_ASSET_MIME = {
   ".wasm": "application/wasm"
 };
 function shareUiAssetMime(filePath) {
-  const ext = import_node_path49.default.extname(filePath).toLowerCase();
+  const ext = import_node_path50.default.extname(filePath).toLowerCase();
   return SHARE_UI_ASSET_MIME[ext] ?? lookupMime(filePath);
 }
 var AUTHED_RPC_ROUTE_PREFIX = "/rpc/";
@@ -62166,7 +62471,7 @@ function isValidUploadFileName(fileName) {
   if (fileName === "." || fileName === "..") return false;
   if (fileName.startsWith(".")) return false;
   if (fileName.includes("/") || fileName.includes("\\")) return false;
-  return fileName === import_node_path49.default.basename(fileName);
+  return fileName === import_node_path50.default.basename(fileName);
 }
 function createHttpRouter(deps) {
   return async (req, res) => {
@@ -62254,7 +62559,7 @@ function createHttpRouter(deps) {
       }
       let buf;
       try {
-        buf = await import_node_fs43.default.promises.readFile(abs);
+        buf = await import_node_fs44.default.promises.readFile(abs);
       } catch {
         sendJson(res, 404, { code: "NOT_FOUND", message: "asset not found" });
         return true;
@@ -62402,7 +62707,7 @@ function createHttpRouter(deps) {
         sendHtml(res, statusByCode[r.code], loader.renderErrorHtml(r.code, msgByCode[r.code]));
         return true;
       }
-      sendHtml(res, 200, loader.renderViewerHtml(import_node_path49.default.basename(r.absPath)));
+      sendHtml(res, 200, loader.renderViewerHtml(import_node_path50.default.basename(r.absPath)));
       return true;
     }
     const ctx = deps.authResolver.resolveFromHeader(
@@ -62523,7 +62828,7 @@ function createHttpRouter(deps) {
         return true;
       }
       let absPath;
-      if (import_node_path49.default.isAbsolute(pathParam)) {
+      if (import_node_path50.default.isAbsolute(pathParam)) {
         absPath = pathParam;
       } else if (deps.sessionStore) {
         const file = deps.sessionStore.read(sid);
@@ -62531,7 +62836,7 @@ function createHttpRouter(deps) {
           sendJson(res, 404, { code: "NOT_FOUND", message: `session ${sid} not found` });
           return true;
         }
-        absPath = import_node_path49.default.join(file.cwd, pathParam);
+        absPath = import_node_path50.default.join(file.cwd, pathParam);
       } else {
         sendJson(res, 501, withCtx(ctx, { code: "NOT_IMPLEMENTED", message: "sessionStore not wired" }));
         return true;
@@ -62618,7 +62923,7 @@ function withCtx(ctx, body) {
 function streamFile(res, absPath, logger) {
   let stat;
   try {
-    stat = import_node_fs43.default.statSync(absPath);
+    stat = import_node_fs44.default.statSync(absPath);
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") {
@@ -62633,7 +62938,7 @@ function streamFile(res, absPath, logger) {
     return;
   }
   const mime = lookupMime(absPath);
-  const basename2 = import_node_path49.default.basename(absPath);
+  const basename2 = import_node_path50.default.basename(absPath);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": String(stat.size),
@@ -62641,7 +62946,7 @@ function streamFile(res, absPath, logger) {
     // 防止浏览器把任意 mime 当 html 渲染
     "X-Content-Type-Options": "nosniff"
   });
-  const stream = import_node_fs43.default.createReadStream(absPath);
+  const stream = import_node_fs44.default.createReadStream(absPath);
   stream.on("error", (err) => {
     logger?.warn("streamFile read error", { absPath, err: err.message });
     res.destroy();
@@ -62650,8 +62955,8 @@ function streamFile(res, absPath, logger) {
 }
 
 // src/attachment/gc.ts
-var import_node_fs44 = __toESM(require("fs"), 1);
-var import_node_path50 = __toESM(require("path"), 1);
+var import_node_fs45 = __toESM(require("fs"), 1);
+var import_node_path51 = __toESM(require("path"), 1);
 var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
 function runAttachmentGc(args) {
   const now = (args.now ?? Date.now)();
@@ -62660,12 +62965,12 @@ function runAttachmentGc(args) {
   for (const { scope, sessionId } of args.sessionScopes) {
     for (const entry of args.groupFileStore.list(scope, sessionId)) {
       if (entry.stale) continue;
-      if (import_node_path50.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+      if (import_node_path51.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
     }
   }
   const visited = /* @__PURE__ */ new Set();
   for (const { scope, sessionId } of args.sessionScopes) {
-    const legacyDir = args.getSessionCwd?.(sessionId) ?? import_node_path50.default.join(
+    const legacyDir = args.getSessionCwd?.(sessionId) ?? import_node_path51.default.join(
       args.dataDir,
       "sessions",
       ...scopeSubPath(scope).map(safeFileName),
@@ -62678,28 +62983,28 @@ function runAttachmentGc(args) {
       return true;
     });
     for (const rootDir of roots) {
-      const attRoot = import_node_path50.default.join(rootDir, ".attachments");
+      const attRoot = import_node_path51.default.join(rootDir, ".attachments");
       let hashDirs;
       try {
-        hashDirs = import_node_fs44.default.readdirSync(attRoot);
+        hashDirs = import_node_fs45.default.readdirSync(attRoot);
       } catch (err) {
         if (err.code === "ENOENT") continue;
         args.logger?.warn("attachment gc: readdir failed", { attRoot, err: err.message });
         continue;
       }
       for (const hashDir of hashDirs) {
-        const hashDirAbs = import_node_path50.default.join(attRoot, hashDir);
+        const hashDirAbs = import_node_path51.default.join(attRoot, hashDir);
         let files;
         try {
-          files = import_node_fs44.default.readdirSync(hashDirAbs);
+          files = import_node_fs45.default.readdirSync(hashDirAbs);
         } catch {
           continue;
         }
         for (const name of files) {
-          const file = import_node_path50.default.join(hashDirAbs, name);
+          const file = import_node_path51.default.join(hashDirAbs, name);
           let stat;
           try {
-            stat = import_node_fs44.default.statSync(file);
+            stat = import_node_fs45.default.statSync(file);
           } catch {
             continue;
           }
@@ -62708,18 +63013,18 @@ function runAttachmentGc(args) {
           if (age < ttlMs) continue;
           if (liveAbs.has(file)) continue;
           try {
-            import_node_fs44.default.unlinkSync(file);
+            import_node_fs45.default.unlinkSync(file);
           } catch (err) {
             args.logger?.warn("attachment gc: unlink failed", { file, err: err.message });
           }
         }
         try {
-          if (import_node_fs44.default.readdirSync(hashDirAbs).length === 0) import_node_fs44.default.rmdirSync(hashDirAbs);
+          if (import_node_fs45.default.readdirSync(hashDirAbs).length === 0) import_node_fs45.default.rmdirSync(hashDirAbs);
         } catch {
         }
       }
       try {
-        if (import_node_fs44.default.readdirSync(attRoot).length === 0) import_node_fs44.default.rmdirSync(attRoot);
+        if (import_node_fs45.default.readdirSync(attRoot).length === 0) import_node_fs45.default.rmdirSync(attRoot);
       } catch {
       }
     }
@@ -62727,8 +63032,8 @@ function runAttachmentGc(args) {
 }
 
 // src/attachment/group.ts
-var import_node_fs45 = __toESM(require("fs"), 1);
-var import_node_path51 = __toESM(require("path"), 1);
+var import_node_fs46 = __toESM(require("fs"), 1);
+var import_node_path52 = __toESM(require("path"), 1);
 var import_node_crypto12 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
@@ -62740,11 +63045,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path51.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path52.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path51.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path52.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -62753,7 +63058,7 @@ var GroupFileStore = class {
   readFile(scope, sessionId) {
     const file = this.filePath(scope, sessionId);
     try {
-      const raw = import_node_fs45.default.readFileSync(file, "utf8");
+      const raw = import_node_fs46.default.readFileSync(file, "utf8");
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) {
         this.logger?.warn("GroupFileStore.readFile: not an array; resetting session entries", {
@@ -62779,10 +63084,10 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs45.default.mkdirSync(import_node_path51.default.dirname(file), { recursive: true });
+    import_node_fs46.default.mkdirSync(import_node_path52.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs45.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
-    import_node_fs45.default.renameSync(tmp, file);
+    import_node_fs46.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
+    import_node_fs46.default.renameSync(tmp, file);
   }
   /** 拉一份当前 session 的清单。读盘 → cache；之后调用复用 cache */
   list(scope, sessionId) {
@@ -62874,7 +63179,7 @@ var GroupFileStore = class {
    */
   deleteSession(scope, sessionId) {
     try {
-      import_node_fs45.default.unlinkSync(this.filePath(scope, sessionId));
+      import_node_fs46.default.unlinkSync(this.filePath(scope, sessionId));
     } catch (err) {
       if (err?.code !== "ENOENT") throw err;
     }
@@ -62887,7 +63192,7 @@ var GroupFileStore = class {
    * 不在 persona 目录里（见文件头的路径约定）。没树的 persona 是 noop。
    */
   deletePersona(personaId2) {
-    import_node_fs45.default.rmSync(import_node_path51.default.join(this.dataDir, "sessions", safeFileName(personaId2)), { recursive: true, force: true });
+    import_node_fs46.default.rmSync(import_node_path52.default.join(this.dataDir, "sessions", safeFileName(personaId2)), { recursive: true, force: true });
     const prefix = `persona:${personaId2}:`;
     for (const key of this.cache.keys()) {
       if (key.startsWith(prefix)) this.cache.delete(key);
@@ -62896,10 +63201,10 @@ var GroupFileStore = class {
 };
 
 // src/discovery/state-file.ts
-var import_node_fs46 = __toESM(require("fs"), 1);
-var import_node_path52 = __toESM(require("path"), 1);
+var import_node_fs47 = __toESM(require("fs"), 1);
+var import_node_path53 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path52.default.join(dataDir, "state.json");
+  return import_node_path53.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -62921,7 +63226,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs46.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs47.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -62935,20 +63240,20 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs46.default.mkdirSync(import_node_path52.default.dirname(this.file), { recursive: true });
+    import_node_fs47.default.mkdirSync(import_node_path53.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs46.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs46.default.renameSync(tmp, this.file);
+    import_node_fs47.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs47.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs46.default.chmodSync(this.file, 384);
+        import_node_fs47.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs46.default.unlinkSync(this.file);
+      import_node_fs47.default.unlinkSync(this.file);
     } catch {
     }
   }
@@ -62962,14 +63267,14 @@ function readSpawnedByDesktopFromEnv(env = process.env) {
 }
 
 // src/tunnel/tunnel-manager.ts
-var import_node_fs50 = __toESM(require("fs"), 1);
-var import_node_path56 = __toESM(require("path"), 1);
+var import_node_fs51 = __toESM(require("fs"), 1);
+var import_node_path57 = __toESM(require("path"), 1);
 var import_node_crypto13 = __toESM(require("crypto"), 1);
 var import_node_child_process14 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
-var import_node_fs47 = __toESM(require("fs"), 1);
-var import_node_path53 = __toESM(require("path"), 1);
+var import_node_fs48 = __toESM(require("fs"), 1);
+var import_node_path54 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -62977,7 +63282,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs47.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs48.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -62988,22 +63293,22 @@ var TunnelStore = class {
     }
   }
   async set(v2) {
-    const dir = import_node_path53.default.dirname(this.filePath);
-    await import_node_fs47.default.promises.mkdir(dir, { recursive: true });
+    const dir = import_node_path54.default.dirname(this.filePath);
+    await import_node_fs48.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs47.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs48.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs47.default.promises.chmod(tmp, 384);
+        await import_node_fs48.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs47.default.promises.rename(tmp, this.filePath);
+    await import_node_fs48.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs47.default.promises.unlink(this.filePath);
+      await import_node_fs48.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -63098,9 +63403,9 @@ function escape(v2) {
 }
 
 // src/tunnel/frpc-binary.ts
-var import_node_fs48 = __toESM(require("fs"), 1);
+var import_node_fs49 = __toESM(require("fs"), 1);
 var import_node_os17 = __toESM(require("os"), 1);
-var import_node_path54 = __toESM(require("path"), 1);
+var import_node_path55 = __toESM(require("path"), 1);
 var import_node_child_process12 = require("child_process");
 var import_node_stream3 = require("stream");
 var import_promises9 = require("stream/promises");
@@ -63132,20 +63437,20 @@ function frpcDownloadUrl(version2, p2) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs48.default.existsSync(opts.override)) {
+    if (!import_node_fs49.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path54.default.join(opts.dataDir, "bin");
-  import_node_fs48.default.mkdirSync(binDir, { recursive: true });
+  const binDir = import_node_path55.default.join(opts.dataDir, "bin");
+  import_node_fs49.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path54.default.join(binDir, "frpc");
-  if (import_node_fs48.default.existsSync(stableBin)) return stableBin;
+  const stableBin = import_node_path55.default.join(binDir, "frpc");
+  if (import_node_fs49.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path54.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path55.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -63154,8 +63459,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs48.default.chmodSync(partialBin, 493);
-    import_node_fs48.default.renameSync(partialBin, stableBin);
+    import_node_fs49.default.chmodSync(partialBin, 493);
+    import_node_fs49.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -63165,15 +63470,15 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs48.default.readdirSync(binDir);
+    entries = import_node_fs49.default.readdirSync(binDir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path54.default.join(binDir, name);
+      const full = import_node_path55.default.join(binDir, name);
       try {
-        import_node_fs48.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs49.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -63181,7 +63486,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p2) {
   try {
-    import_node_fs48.default.unlinkSync(p2);
+    import_node_fs49.default.unlinkSync(p2);
   } catch {
   }
 }
@@ -63192,13 +63497,13 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs48.default.createWriteStream(dest);
+  const out = import_node_fs49.default.createWriteStream(dest);
   const nodeStream = import_node_stream3.Readable.fromWeb(res.body);
   await (0, import_promises9.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path54.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs48.default.mkdirSync(work, { recursive: true });
+  const work = import_node_path55.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  import_node_fs49.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve9, reject) => {
       const proc = (0, import_node_child_process12.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
@@ -63206,32 +63511,32 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
       proc.on("exit", (code) => code === 0 ? resolve9() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path54.default.join(work, dirName, "frpc");
-    if (!import_node_fs48.default.existsSync(src)) {
+    const src = import_node_path55.default.join(work, dirName, "frpc");
+    if (!import_node_fs49.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs48.default.copyFileSync(src, destBin);
+    import_node_fs49.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs48.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs49.default.rmSync(work, { recursive: true, force: true });
   }
 }
 
 // src/tunnel/frpc-process.ts
-var import_node_fs49 = __toESM(require("fs"), 1);
-var import_node_path55 = __toESM(require("path"), 1);
+var import_node_fs50 = __toESM(require("fs"), 1);
+var import_node_path56 = __toESM(require("path"), 1);
 var import_node_child_process13 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path55.default.join(dataDir, "frpc.pid");
+  return import_node_path56.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
-    import_node_fs49.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
+    import_node_fs50.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearFrpcPid(dataDir) {
   try {
-    import_node_fs49.default.unlinkSync(frpcPidFilePath(dataDir));
+    import_node_fs50.default.unlinkSync(frpcPidFilePath(dataDir));
   } catch {
   }
 }
@@ -63247,7 +63552,7 @@ function defaultIsPidAlive(pid) {
 }
 function defaultReadPidFile(file) {
   try {
-    return import_node_fs49.default.readFileSync(file, "utf8");
+    return import_node_fs50.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -63263,7 +63568,7 @@ function defaultSleep2(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path55.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path56.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -63287,7 +63592,7 @@ async function killStaleFrpc(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs49.default.unlinkSync(pidFile);
+      import_node_fs50.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -63298,7 +63603,7 @@ async function killStaleFrpc(deps) {
   }
   await sleep2(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs49.default.unlinkSync(pidFile);
+    import_node_fs50.default.unlinkSync(pidFile);
   } catch {
   }
 }
@@ -63335,7 +63640,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path56.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path57.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -63462,7 +63767,7 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path56.default.join(this.deps.dataDir, "frpc.toml");
+      const tomlPath = import_node_path57.default.join(this.deps.dataDir, "frpc.toml");
       const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto13.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
@@ -63473,14 +63778,14 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs50.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      await import_node_fs51.default.promises.writeFile(tomlPath, toml, { mode: 384 });
       const proc = (this.deps.spawnImpl ?? import_node_child_process14.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logDir = import_node_path56.default.join(this.deps.dataDir, "log");
-      import_node_fs50.default.mkdirSync(logDir, { recursive: true });
-      const logFilePath = import_node_path56.default.join(logDir, "frpc.log");
-      const logStream = import_node_fs50.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logDir = import_node_path57.default.join(this.deps.dataDir, "log");
+      import_node_fs51.default.mkdirSync(logDir, { recursive: true });
+      const logFilePath = import_node_path57.default.join(logDir, "frpc.log");
+      const logStream = import_node_fs51.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -63563,27 +63868,27 @@ async function waitForFrpcReady(proc, timeoutMs) {
 
 // src/tunnel/device-key.ts
 var import_node_os18 = __toESM(require("os"), 1);
-var import_node_path57 = __toESM(require("path"), 1);
+var import_node_path58 = __toESM(require("path"), 1);
 var import_node_crypto14 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os18.default.hostname();
   const uid = opts.uid ?? (typeof import_node_os18.default.userInfo === "function" ? import_node_os18.default.userInfo().uid : 0);
   const home = opts.home ?? import_node_os18.default.homedir();
-  const defaultDataDir = import_node_path57.default.resolve(import_node_path57.default.join(home, ".clawd"));
-  const normalizedDataDir = opts.dataDir ? import_node_path57.default.resolve(opts.dataDir) : null;
+  const defaultDataDir = import_node_path58.default.resolve(import_node_path58.default.join(home, ".clawd"));
+  const normalizedDataDir = opts.dataDir ? import_node_path58.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
   return import_node_crypto14.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
-var import_node_fs51 = __toESM(require("fs"), 1);
-var import_node_path58 = __toESM(require("path"), 1);
+var import_node_fs52 = __toESM(require("fs"), 1);
+var import_node_path59 = __toESM(require("path"), 1);
 var import_node_crypto15 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path58.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path59.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -63615,7 +63920,7 @@ function defaultGenerateOwnerPrincipalId() {
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs51.default.readFileSync(file, "utf8");
+    const raw = import_node_fs52.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -63635,26 +63940,26 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs51.default.mkdirSync(import_node_path58.default.dirname(file), { recursive: true });
-  import_node_fs51.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs52.default.mkdirSync(import_node_path59.default.dirname(file), { recursive: true });
+  import_node_fs52.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs51.default.chmodSync(file, 384);
+    import_node_fs52.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs52 = __toESM(require("fs"), 1);
+var import_node_fs53 = __toESM(require("fs"), 1);
 var import_node_os19 = __toESM(require("os"), 1);
-var import_node_path59 = __toESM(require("path"), 1);
+var import_node_path60 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function profilePath(dataDir) {
-  return import_node_path59.default.join(dataDir, PROFILE_FILENAME);
+  return import_node_path60.default.join(dataDir, PROFILE_FILENAME);
 }
 function loadOwnerProfile(dataDir) {
   let raw;
   try {
-    raw = import_node_fs52.default.readFileSync(profilePath(dataDir), "utf8");
+    raw = import_node_fs53.default.readFileSync(profilePath(dataDir), "utf8");
   } catch {
     return {};
   }
@@ -63670,7 +63975,7 @@ function loadOwnerProfile(dataDir) {
 }
 function patchOwnerProfile(dataDir, patch) {
   const merged = { ...loadOwnerProfile(dataDir), ...patch };
-  import_node_fs52.default.writeFileSync(profilePath(dataDir), JSON.stringify(merged, null, 2), { encoding: "utf8", mode: 384 });
+  import_node_fs53.default.writeFileSync(profilePath(dataDir), JSON.stringify(merged, null, 2), { encoding: "utf8", mode: 384 });
   return merged;
 }
 function loadOwnerDisplayName(dataDir) {
@@ -63686,18 +63991,18 @@ function loadOwnerDisplayName(dataDir) {
 }
 
 // src/feishu-auth/owner-identity-store.ts
-var import_node_fs53 = __toESM(require("fs"), 1);
-var import_node_path60 = __toESM(require("path"), 1);
+var import_node_fs54 = __toESM(require("fs"), 1);
+var import_node_path61 = __toESM(require("path"), 1);
 var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
 var OwnerIdentityStore = class {
   file;
   constructor(dataDir) {
-    this.file = import_node_path60.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
+    this.file = import_node_path61.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
   }
   read() {
     let raw;
     try {
-      raw = import_node_fs53.default.readFileSync(this.file, "utf8");
+      raw = import_node_fs54.default.readFileSync(this.file, "utf8");
     } catch {
       return null;
     }
@@ -63725,16 +64030,16 @@ var OwnerIdentityStore = class {
     };
   }
   write(record3) {
-    import_node_fs53.default.mkdirSync(import_node_path60.default.dirname(this.file), { recursive: true });
-    import_node_fs53.default.writeFileSync(this.file, JSON.stringify(record3, null, 2), { mode: 384 });
+    import_node_fs54.default.mkdirSync(import_node_path61.default.dirname(this.file), { recursive: true });
+    import_node_fs54.default.writeFileSync(this.file, JSON.stringify(record3, null, 2), { mode: 384 });
     try {
-      import_node_fs53.default.chmodSync(this.file, 384);
+      import_node_fs54.default.chmodSync(this.file, 384);
     } catch {
     }
   }
   clear() {
     try {
-      import_node_fs53.default.unlinkSync(this.file);
+      import_node_fs54.default.unlinkSync(this.file);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -64195,8 +64500,8 @@ function verifyConnectToken(args) {
 }
 
 // src/feishu-auth/server-key.ts
-var fs70 = __toESM(require("fs"), 1);
-var path73 = __toESM(require("path"), 1);
+var fs71 = __toESM(require("fs"), 1);
+var path74 = __toESM(require("path"), 1);
 var FILE_NAME2 = "server-signing-key.json";
 var ServerKeyStore = class {
   constructor(dataDir) {
@@ -64204,12 +64509,12 @@ var ServerKeyStore = class {
   }
   dataDir;
   filePath() {
-    return path73.join(this.dataDir, FILE_NAME2);
+    return path74.join(this.dataDir, FILE_NAME2);
   }
   /** 读缓存的公钥；无缓存 / 损坏 → null（调用方决定是否触发拉取） */
   read() {
     try {
-      const raw = fs70.readFileSync(this.filePath(), "utf8");
+      const raw = fs71.readFileSync(this.filePath(), "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.publicKeyPem === "string" && parsed.publicKeyPem.includes("PUBLIC KEY")) {
         return parsed.publicKeyPem;
@@ -64224,12 +64529,12 @@ var ServerKeyStore = class {
       publicKeyPem,
       fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    fs70.mkdirSync(this.dataDir, { recursive: true });
-    fs70.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
+    fs71.mkdirSync(this.dataDir, { recursive: true });
+    fs71.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
   }
   clear() {
     try {
-      fs70.unlinkSync(this.filePath());
+      fs71.unlinkSync(this.filePath());
     } catch {
     }
   }
@@ -64239,19 +64544,19 @@ var ServerKeyStore = class {
 init_protocol();
 
 // src/handlers/index.ts
-var import_node_path74 = __toESM(require("path"), 1);
+var import_node_path75 = __toESM(require("path"), 1);
 
 // src/handlers/session.ts
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs54 = __toESM(require("fs"), 1);
+var import_node_fs55 = __toESM(require("fs"), 1);
 var import_node_os20 = __toESM(require("os"), 1);
-var import_node_path61 = __toESM(require("path"), 1);
+var import_node_path62 = __toESM(require("path"), 1);
 var import_node_crypto17 = require("crypto");
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs54.default.readFileSync(file, "utf8");
+  const raw = import_node_fs55.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -64264,19 +64569,19 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path61.default.join(import_node_os20.default.homedir(), ".claude");
-  let projectDir = import_node_path61.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  let sourceFile = import_node_path61.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs54.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path62.default.join(import_node_os20.default.homedir(), ".claude");
+  let projectDir = import_node_path62.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  let sourceFile = import_node_path62.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs55.default.existsSync(sourceFile)) {
     const found = findTranscriptByToolSessionId(
-      import_node_path61.default.join(baseDir, "projects"),
+      import_node_path62.default.join(baseDir, "projects"),
       input.toolSessionId
     );
     if (!found) {
       throw new Error(`fork: source transcript not found: ${sourceFile}`);
     }
     sourceFile = found;
-    projectDir = import_node_path61.default.dirname(found);
+    projectDir = import_node_path62.default.dirname(found);
   }
   const entries = readJsonlEntries(sourceFile);
   const mainEntries = entries.filter((e) => e.isSidechain !== true);
@@ -64305,27 +64610,27 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const outDir = input.targetCwd ? import_node_path61.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
-  const forkedFilePath = import_node_path61.default.join(outDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs54.default.mkdirSync(outDir, { recursive: true });
-  import_node_fs54.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const outDir = input.targetCwd ? import_node_path62.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
+  const forkedFilePath = import_node_path62.default.join(outDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs55.default.mkdirSync(outDir, { recursive: true });
+  import_node_fs55.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
 // src/session/external-scan.ts
-var import_node_fs55 = __toESM(require("fs"), 1);
+var import_node_fs56 = __toESM(require("fs"), 1);
 var import_promises10 = __toESM(require("fs/promises"), 1);
 var import_node_os21 = __toESM(require("os"), 1);
-var import_node_path62 = __toESM(require("path"), 1);
+var import_node_path63 = __toESM(require("path"), 1);
 var import_node_module = require("module");
 var import_node_child_process15 = require("child_process");
 var import_meta5 = {};
 function defaultRoots() {
   const home = import_node_os21.default.homedir();
   return {
-    claudeProjectsDir: import_node_path62.default.join(home, ".claude", "projects"),
-    codexDir: import_node_path62.default.join(home, ".codex"),
-    clawdDir: import_node_path62.default.join(home, ".clawd")
+    claudeProjectsDir: import_node_path63.default.join(home, ".claude", "projects"),
+    codexDir: import_node_path63.default.join(home, ".codex"),
+    clawdDir: import_node_path63.default.join(home, ".clawd")
   };
 }
 function width(s) {
@@ -64376,7 +64681,7 @@ function userText(msg) {
 }
 function isDir2(p2) {
   try {
-    return import_node_fs55.default.statSync(p2).isDirectory();
+    return import_node_fs56.default.statSync(p2).isDirectory();
   } catch {
     return false;
   }
@@ -64385,7 +64690,7 @@ async function scanClaude(roots) {
   const out = [];
   let dirs;
   try {
-    dirs = import_node_fs55.default.readdirSync(roots.claudeProjectsDir, { withFileTypes: true });
+    dirs = import_node_fs56.default.readdirSync(roots.claudeProjectsDir, { withFileTypes: true });
   } catch {
     return out;
   }
@@ -64393,16 +64698,16 @@ async function scanClaude(roots) {
     if (!d.isDirectory()) continue;
     let files;
     try {
-      files = import_node_fs55.default.readdirSync(import_node_path62.default.join(roots.claudeProjectsDir, d.name));
+      files = import_node_fs56.default.readdirSync(import_node_path63.default.join(roots.claudeProjectsDir, d.name));
     } catch {
       continue;
     }
     for (const name of files) {
       if (!name.endsWith(".jsonl")) continue;
-      const file = import_node_path62.default.join(roots.claudeProjectsDir, d.name, name);
+      const file = import_node_path63.default.join(roots.claudeProjectsDir, d.name, name);
       let st;
       try {
-        st = import_node_fs55.default.statSync(file);
+        st = import_node_fs56.default.statSync(file);
       } catch {
         continue;
       }
@@ -64455,7 +64760,7 @@ async function scanClaude(roots) {
   return out;
 }
 async function countCodexTurns(rolloutPath) {
-  if (!rolloutPath || !import_node_fs55.default.existsSync(rolloutPath)) return { turns: 0, first: "" };
+  if (!rolloutPath || !import_node_fs56.default.existsSync(rolloutPath)) return { turns: 0, first: "" };
   let turns = 0;
   let first = "";
   for await (const rec5 of jsonLines(rolloutPath)) {
@@ -64529,7 +64834,7 @@ async function codexFromRows(rows) {
 async function scanCodex(roots) {
   let dbs = [];
   try {
-    dbs = import_node_fs55.default.readdirSync(roots.codexDir).filter((n) => /^state_.*\.sqlite$/.test(n)).sort().map((n) => import_node_path62.default.join(roots.codexDir, n));
+    dbs = import_node_fs56.default.readdirSync(roots.codexDir).filter((n) => /^state_.*\.sqlite$/.test(n)).sort().map((n) => import_node_path63.default.join(roots.codexDir, n));
   } catch {
   }
   if (!dbs.length) return [];
@@ -64538,14 +64843,14 @@ async function scanCodex(roots) {
 }
 async function scanExternalSessions(rootsIn) {
   const roots = { ...defaultRoots(), ...rootsIn };
-  const personaRoot = import_node_path62.default.join(roots.clawdDir, "personas");
+  const personaRoot = import_node_path63.default.join(roots.clawdDir, "personas");
   const all = [...await scanClaude(roots), ...await scanCodex(roots)];
   const out = [];
   for (const c of all) {
     if (c.skip) continue;
     if (c.turns < 1) continue;
     if (!c.cwd || !isDir2(c.cwd)) continue;
-    if (c.cwd === roots.clawdDir || c.cwd === personaRoot || c.cwd.startsWith(personaRoot + import_node_path62.default.sep) || c.cwd.startsWith(roots.clawdDir + import_node_path62.default.sep)) {
+    if (c.cwd === roots.clawdDir || c.cwd === personaRoot || c.cwd.startsWith(personaRoot + import_node_path63.default.sep) || c.cwd.startsWith(roots.clawdDir + import_node_path63.default.sep)) {
       continue;
     }
     out.push({
@@ -64562,13 +64867,13 @@ async function scanExternalSessions(rootsIn) {
 }
 
 // src/session/import-ledger.ts
-var import_node_fs56 = __toESM(require("fs"), 1);
-var import_node_path63 = __toESM(require("path"), 1);
+var import_node_fs57 = __toESM(require("fs"), 1);
+var import_node_path64 = __toESM(require("path"), 1);
 var LEDGER_FILENAME = "session-import-ledger.json";
 function readImportLedger(dataDir) {
   try {
     const parsed = JSON.parse(
-      import_node_fs56.default.readFileSync(import_node_path63.default.join(dataDir, LEDGER_FILENAME), "utf8")
+      import_node_fs57.default.readFileSync(import_node_path64.default.join(dataDir, LEDGER_FILENAME), "utf8")
     );
     return Array.isArray(parsed) ? parsed : [];
   } catch {
@@ -64576,10 +64881,10 @@ function readImportLedger(dataDir) {
   }
 }
 function appendImportLedger(dataDir, entry) {
-  const file = import_node_path63.default.join(dataDir, LEDGER_FILENAME);
+  const file = import_node_path64.default.join(dataDir, LEDGER_FILENAME);
   const entries = readImportLedger(dataDir);
   entries.push(entry);
-  import_node_fs56.default.writeFileSync(file, JSON.stringify(entries, null, 2), { encoding: "utf8", mode: 384 });
+  import_node_fs57.default.writeFileSync(file, JSON.stringify(entries, null, 2), { encoding: "utf8", mode: 384 });
 }
 
 // src/handlers/session.ts
@@ -65135,7 +65440,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path78 = __toESM(require("path"), 1);
+var path79 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -65153,7 +65458,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path77 = __toESM(require("path"), 1);
+var path78 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -65166,42 +65471,42 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read", userWorkDir) {
-  const target = path77.resolve(absPath);
+  const target = path78.resolve(absPath);
   if (userWorkDir) {
-    const u = path77.resolve(userWorkDir);
-    const usep = u.endsWith(path77.sep) ? "" : path77.sep;
+    const u = path78.resolve(userWorkDir);
+    const usep = u.endsWith(path78.sep) ? "" : path78.sep;
     if (target === u || target.startsWith(u + usep)) return true;
   }
-  const root = path77.resolve(personaRoot);
-  const sep4 = root.endsWith(path77.sep) ? "" : path77.sep;
+  const root = path78.resolve(personaRoot);
+  const sep4 = root.endsWith(path78.sep) ? "" : path78.sep;
   if (!target.startsWith(root + sep4)) return false;
-  const rel = path77.relative(root, target);
+  const rel = path78.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId2 = rel.split(path77.sep)[0];
+  const personaId2 = rel.split(path78.sep)[0];
   if (!personaId2) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId2);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path77.resolve(personaRoot);
-  const target = path77.resolve(absPath);
-  const sep4 = root.endsWith(path77.sep) ? "" : path77.sep;
+  const root = path78.resolve(personaRoot);
+  const target = path78.resolve(absPath);
+  const sep4 = root.endsWith(path78.sep) ? "" : path78.sep;
   if (!target.startsWith(root + sep4)) return null;
-  const rel = path77.relative(root, target);
+  const rel = path78.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path77.sep)[0];
+  const id = rel.split(path78.sep)[0];
   return id || null;
 }
 function isPathWithin(dir, absPath) {
-  const d = path77.resolve(dir);
-  const t = path77.resolve(absPath);
-  const sep4 = d.endsWith(path77.sep) ? "" : path77.sep;
+  const d = path78.resolve(dir);
+  const t = path78.resolve(absPath);
+  const sep4 = d.endsWith(path78.sep) ? "" : path78.sep;
   return t === d || t.startsWith(d + sep4);
 }
 function isPathInGuestBoundary(personaRoot, personaId2, userWorkDir, absPath) {
   if (userWorkDir && isPathWithin(userWorkDir, absPath)) return true;
-  return personaIdFromPath(path77.resolve(absPath), personaRoot) === personaId2;
+  return personaIdFromPath(path78.resolve(absPath), personaRoot) === personaId2;
 }
 
 // src/handlers/history.ts
@@ -65254,7 +65559,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path78.join(personaRoot, pid),
+          path79.join(personaRoot, pid),
           personaRoot,
           "read",
           userWorkDir
@@ -65266,7 +65571,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path78.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
+    assertGuestPath(ctx, path79.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -65314,14 +65619,14 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path78.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
+    assertGuestPath(ctx, path79.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagents");
     const subs = await historyReaderForToolSession(args.toolSessionId).listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path78.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
+    assertGuestPath(ctx, path79.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagent-read");
     const res = await historyReaderForToolSession(args.toolSessionId).readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
@@ -65331,7 +65636,7 @@ function buildHistoryHandlers(deps) {
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path78.resolve(d.cwd), personaRoot, "read", userWorkDir)
+        (d) => isGuestPathAllowed(ctx.grants, path79.resolve(d.cwd), personaRoot, "read", userWorkDir)
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -65348,17 +65653,17 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/projects.ts
-var fs74 = __toESM(require("fs"), 1);
+var fs75 = __toESM(require("fs"), 1);
 var os23 = __toESM(require("os"), 1);
-var path79 = __toESM(require("path"), 1);
+var path80 = __toESM(require("path"), 1);
 var import_node_child_process16 = require("child_process");
 init_protocol();
-var DEFAULT_PROJECTS_ROOT = path79.join(os23.homedir(), "Documents", "ChatGPT");
+var DEFAULT_PROJECTS_ROOT = path80.join(os23.homedir(), "Documents", "ChatGPT");
 function allocateDir(root, name) {
-  let candidate = path79.join(root, name);
+  let candidate = path80.join(root, name);
   let n = 2;
-  while (fs74.existsSync(candidate)) {
-    candidate = path79.join(root, `${name} ${n}`);
+  while (fs75.existsSync(candidate)) {
+    candidate = path80.join(root, `${name} ${n}`);
     n += 1;
   }
   return candidate;
@@ -65386,7 +65691,7 @@ function buildProjectHandlers(deps) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, "project:reveal \u4EC5\u652F\u6301 macOS");
     }
     try {
-      if (!fs74.statSync(args.path).isDirectory()) throw new Error("not dir");
+      if (!fs75.statSync(args.path).isDirectory()) throw new Error("not dir");
     } catch {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${args.path}`);
     }
@@ -65402,7 +65707,7 @@ function buildProjectHandlers(deps) {
     let target;
     if (args.path) {
       try {
-        if (!fs74.statSync(args.path).isDirectory()) throw new Error("not dir");
+        if (!fs75.statSync(args.path).isDirectory()) throw new Error("not dir");
       } catch {
         throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${args.path}`);
       }
@@ -65410,15 +65715,15 @@ function buildProjectHandlers(deps) {
     } else {
       const name = args.name;
       try {
-        fs74.mkdirSync(root, { recursive: true });
+        fs75.mkdirSync(root, { recursive: true });
         target = allocateDir(root, name);
-        fs74.mkdirSync(target);
+        fs75.mkdirSync(target);
       } catch (err) {
         throw new ClawdError(ERROR_CODES.INVALID_CWD, `\u521B\u5EFA\u9879\u76EE\u76EE\u5F55\u5931\u8D25: ${String(err)}`);
       }
       const git2 = (0, import_node_child_process16.spawnSync)("git", ["init"], { cwd: target, stdio: "ignore" });
       if (git2.status !== 0) {
-        fs74.rmSync(target, { recursive: true, force: true });
+        fs75.rmSync(target, { recursive: true, force: true });
         throw new ClawdError(
           ERROR_CODES.INVALID_CWD,
           `git init \u5931\u8D25\uFF08${git2.error ? String(git2.error) : `exit ${git2.status}`}\uFF09: ${target}`
@@ -65443,7 +65748,7 @@ function buildProjectHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path80 = __toESM(require("path"), 1);
+var path81 = __toESM(require("path"), 1);
 init_protocol();
 var os24 = __toESM(require("os"), 1);
 init_protocol();
@@ -65486,22 +65791,22 @@ function buildWorkspaceHandlers(deps) {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
     const fallbackCwd = isGuest && personaRoot ? personaRoot : os24.homedir();
-    const resolvedCwd = path80.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path80.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const resolvedCwd = path81.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path81.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list", usersRoot);
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path80.isAbsolute(args.path) ? path80.resolve(args.path) : path80.resolve(args.cwd, args.path);
+    const target = path81.isAbsolute(args.path) ? path81.resolve(args.path) : path81.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read", usersRoot);
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path80.resolve(args.cwd);
+    const cwdAbs = path81.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list", usersRoot);
     const list2 = await getSkillsForTool(args.tool ?? "claude", cwdAbs);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -65513,7 +65818,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path80.resolve(args.cwd);
+    const cwdAbs = path81.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list", usersRoot);
     if (isCodexFamily(args.tool) || args.tool === PI_TOOL_ID) {
       return { response: { type: "agents:list", agents: [] } };
@@ -65535,20 +65840,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path82 = __toESM(require("path"), 1);
+var path83 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process17 = require("child_process");
-var import_node_fs57 = __toESM(require("fs"), 1);
-var import_node_path64 = __toESM(require("path"), 1);
+var import_node_fs58 = __toESM(require("fs"), 1);
+var import_node_path65 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process17.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path64.default.resolve(p2);
+  const resolved = import_node_path65.default.resolve(p2);
   try {
-    return import_node_fs57.default.realpathSync(resolved);
+    return import_node_fs58.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -65622,7 +65927,7 @@ async function listGitBranches(cwd) {
 function assertGuestCwd(ctx, cwd, personaRoot, method, usersRoot) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
   const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
-  if (!isGuestPathAllowed(ctx.grants, path82.resolve(cwd), personaRoot, "read", userWorkDir)) {
+  if (!isGuestPathAllowed(ctx.grants, path83.resolve(cwd), personaRoot, "read", userWorkDir)) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -66191,6 +66496,54 @@ function buildFeishuAuthHandlers(deps) {
   };
 }
 
+// src/handlers/cloud-connectors.ts
+init_protocol();
+function ensureOwner5(ctx) {
+  if (!ctx || ctx.principal.kind !== "owner") {
+    throw new ClawdError(ERROR_CODES.UNAUTHORIZED, "UNAUTHORIZED: cloud:connectors:* requires owner ctx");
+  }
+}
+var invalid2 = (msg) => new ClawdError(ERROR_CODES.VALIDATION_ERROR, `VALIDATION_ERROR: ${msg}`);
+function buildCloudConnectorsHandlers(deps) {
+  function requireLogin() {
+    const rec5 = deps.readIdentity();
+    if (!rec5) throw new ClawdError(ERROR_CODES.FEISHU_LOGIN_REQUIRED, "FEISHU_LOGIN_REQUIRED: \u8FD8\u6CA1\u767B\u5F55\u98DE\u4E66\uFF0C\u4E91\u4E0A persona \u7684\u8FDE\u63A5\u5668\u7528\u4E0D\u4E86");
+    return rec5;
+  }
+  async function personalConnectors(personaId2) {
+    const persona = deps.getPersona(personaId2);
+    if (!persona) throw new ClawdError(ERROR_CODES.PERSONA_NOT_FOUND, `PERSONA_NOT_FOUND: \u6CA1\u6709\u8FD9\u4E2A persona\uFF08${personaId2}\uFF09`);
+    if (!persona.cloud) throw invalid2(`${personaId2} \u4E0D\u662F\u4E91\u4E0A persona\uFF0C\u6CA1\u6709\u8FDE\u63A5\u5668\u533A`);
+    const all = await deps.gatewayConnectors(persona.cloud.personaId);
+    return { gatewayPersonaId: persona.cloud.personaId, connectors: all.filter((c) => c.credentialSource === "personal") };
+  }
+  const list = async (frame, _client, ctx) => {
+    ensureOwner5(ctx);
+    const { personaId: personaId2 } = parseArgs2(CloudConnectorsListArgsSchema, frame, "cloud:connectors:list");
+    const { gatewayPersonaId, connectors } = await personalConnectors(personaId2);
+    if (connectors.length === 0) return { response: { type: "cloud:connectors:list:ok", connectors: [] } };
+    const login = requireLogin();
+    const r = await deps.central.mine({ ...login, personaId: gatewayPersonaId, connectors });
+    const parsed = CloudConnectorsListResultSchema.safeParse(r);
+    if (!parsed.success) throw new ClawdError(ERROR_CODES.INTERNAL, `\u4E2D\u5FC3\u56DE\u7684\u8FDE\u63A5\u5668\u72B6\u6001\u4E0D\u5408\u5F62\u72B6\uFF1A${parsed.error.issues[0]?.message ?? ""}`);
+    return { response: { type: "cloud:connectors:list:ok", connectors: parsed.data.connectors } };
+  };
+  const fill = async (frame, _client, ctx) => {
+    ensureOwner5(ctx);
+    const args = parseArgs2(CloudConnectorFillArgsSchema, frame, "cloud:connectors:fill");
+    const { connectors } = await personalConnectors(args.personaId);
+    const connector = connectors.find((c) => c.name === args.name);
+    if (!connector) throw invalid2(`\u8FD9\u4E2A persona \u6CA1\u6709\u53EB\u300C${args.name}\u300D\u7684\u3001\u8981\u672C\u4EBA\u586B\u5199\u7684\u8FDE\u63A5\u5668`);
+    const login = requireLogin();
+    await deps.central.fill({ ...login, connector, values: args.values });
+    return { response: { type: "cloud:connectors:fill:ok" } };
+  };
+  return {
+    "cloud:connectors:list": list,
+    "cloud:connectors:fill": fill
+  };
+}
+
 // src/handlers/meta.ts
 var import_node_os22 = __toESM(require("os"), 1);
 init_protocol();
@@ -66247,6 +66600,10 @@ var METHOD_GRANT_MAP = {
   "deploy:finishScan": ADMIN_ANY,
   "deploy:release": ADMIN_ANY,
   "deploy:rerunJob": ADMIN_ANY,
+  // cloud:connectors:*（云 persona 卡片上的连接器；design 2026-09-11-mcp-connector）：
+  // 拿本机登录凭证向中心代查 / 代填使用者本人的凭据，guest 一律够不着
+  "cloud:connectors:list": ADMIN_ANY,
+  "cloud:connectors:fill": ADMIN_ANY,
   // ---- session:* / chat:* 业务方法（v2 Phase 8 两层模型）----
   // dispatcher 不验资源，handler 内按 ctx + frame.args 反查 ownerPersonaId 调 assertGrant。
   // owner 自动通过（ctx 自带 '*':'admin' grant 一切 match）；guest 在被授权 persona 内可调。
@@ -66508,21 +66865,21 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.502".length > 0 ? "0.2.502" : "dev";
+var version = "0.2.504".length > 0 ? "0.2.504" : "dev";
 
 // src/cli-probe/probe.ts
-var fs76 = __toESM(require("fs"), 1);
-var path83 = __toESM(require("path"), 1);
+var fs77 = __toESM(require("fs"), 1);
+var path84 = __toESM(require("path"), 1);
 var PKG_NAME = "@clawos-dev/clawd";
 var BIN_NAME = "clawd";
 var MAX_PARENT_HOPS = 5;
 function probeGlobalCli(pathEnv) {
   if (!pathEnv) return null;
-  for (const dir of pathEnv.split(path83.delimiter)) {
+  for (const dir of pathEnv.split(path84.delimiter)) {
     if (!dir) continue;
     let real;
     try {
-      real = fs76.realpathSync(path83.join(dir, BIN_NAME));
+      real = fs77.realpathSync(path84.join(dir, BIN_NAME));
     } catch {
       continue;
     }
@@ -66532,15 +66889,15 @@ function probeGlobalCli(pathEnv) {
   return null;
 }
 function readOwnPackageVersion(entryPath) {
-  let dir = path83.dirname(entryPath);
+  let dir = path84.dirname(entryPath);
   for (let i = 0; i < MAX_PARENT_HOPS; i++) {
     try {
-      const raw = fs76.readFileSync(path83.join(dir, "package.json"), "utf8");
+      const raw = fs77.readFileSync(path84.join(dir, "package.json"), "utf8");
       const pkg = JSON.parse(raw);
       if (pkg.name !== PKG_NAME) return null;
       return typeof pkg.version === "string" && pkg.version ? pkg.version : null;
     } catch {
-      const parent = path83.dirname(dir);
+      const parent = path84.dirname(dir);
       if (parent === dir) return null;
       dir = parent;
     }
@@ -66716,7 +67073,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path65 = __toESM(require("path"), 1);
+var import_node_path66 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -66796,12 +67153,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path65.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path65.default.isAbsolute(args.relPath) ? import_node_path65.default.resolve(args.relPath) : import_node_path65.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path66.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path66.default.isAbsolute(args.relPath) ? import_node_path66.default.resolve(args.relPath) : import_node_path66.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.signUrl", "group-acl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path65.default.isAbsolute(e.relPath) ? import_node_path65.default.resolve(e.relPath) : import_node_path65.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path66.default.isAbsolute(e.relPath) ? import_node_path66.default.resolve(e.relPath) : import_node_path66.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -66826,7 +67183,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path65.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
+    assertGuestAttachmentPath(ctx, import_node_path66.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -66841,8 +67198,8 @@ function buildAttachmentHandlers(deps) {
     if (!scope) {
       throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, `session ${args.sessionId} not found`);
     }
-    const cwdAbs = import_node_path65.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
-    const candidateAbs = import_node_path65.default.isAbsolute(args.relPath) ? import_node_path65.default.resolve(args.relPath) : import_node_path65.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path66.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
+    const candidateAbs = import_node_path66.default.isAbsolute(args.relPath) ? import_node_path66.default.resolve(args.relPath) : import_node_path66.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.groupAdd", "cwd-subtree");
     const from = args.origin === "agent" ? "agent" : ctx?.principal.kind === "owner" ? "owner" : "agent";
     const size = 0;
@@ -66901,19 +67258,19 @@ function buildAttachmentHandlers(deps) {
 
 // src/handlers/extension.ts
 var import_promises14 = __toESM(require("fs/promises"), 1);
-var import_node_path70 = __toESM(require("path"), 1);
+var import_node_path71 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/extension/bundle-zip.ts
 var import_promises11 = __toESM(require("fs/promises"), 1);
-var import_node_path66 = __toESM(require("path"), 1);
+var import_node_path67 = __toESM(require("path"), 1);
 var import_node_crypto18 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
   const zip = new import_jszip2.default();
   for (const rel of entries) {
-    const abs = import_node_path66.default.join(dir, rel);
+    const abs = import_node_path67.default.join(dir, rel);
     const content = await import_promises11.default.readFile(abs);
     zip.file(rel, content, { date: FIXED_DATE });
   }
@@ -66934,7 +67291,7 @@ async function listFilesSorted(rootDir) {
   return out;
 }
 async function walk(absRoot, relPrefix, out) {
-  const dirAbs = import_node_path66.default.join(absRoot, relPrefix);
+  const dirAbs = import_node_path67.default.join(absRoot, relPrefix);
   const entries = await import_promises11.default.readdir(dirAbs, { withFileTypes: true });
   for (const e of entries) {
     if (IGNORE_BASENAMES.has(e.name)) continue;
@@ -66988,25 +67345,25 @@ function computePublishCheck(args) {
 
 // src/extension/install-flow.ts
 var import_promises12 = __toESM(require("fs/promises"), 1);
-var import_node_path68 = __toESM(require("path"), 1);
+var import_node_path69 = __toESM(require("path"), 1);
 var import_node_os24 = __toESM(require("os"), 1);
 var import_node_crypto19 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
 var import_node_os23 = __toESM(require("os"), 1);
-var import_node_path67 = __toESM(require("path"), 1);
+var import_node_path68 = __toESM(require("path"), 1);
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path67.default.join(import_node_os23.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path68.default.join(import_node_os23.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
-  return import_node_path67.default.join(clawdHomeRoot(override), "extensions");
+  return import_node_path68.default.join(clawdHomeRoot(override), "extensions");
 }
 function publishedChannelsFile(override) {
-  return import_node_path67.default.join(clawdHomeRoot(override), "extensions-published.json");
+  return import_node_path68.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
 function bundleCacheRoot(override) {
-  return import_node_path67.default.join(clawdHomeRoot(override), "extension-bundles");
+  return import_node_path68.default.join(clawdHomeRoot(override), "extension-bundles");
 }
 
 // src/extension/install-flow.ts
@@ -67033,7 +67390,7 @@ async function installFromChannel(args, deps) {
     throw new InstallError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path68.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path69.default.isAbsolute(name)) {
       throw new InstallError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -67065,7 +67422,7 @@ async function installFromChannel(args, deps) {
     );
   }
   const localExtId = namespacedExtId(ownerSlug, channelRef.ownerPrincipalId);
-  const destDir = import_node_path68.default.join(deps.extensionsRoot, localExtId);
+  const destDir = import_node_path69.default.join(deps.extensionsRoot, localExtId);
   let destExists = false;
   try {
     await import_promises12.default.access(destDir);
@@ -67079,16 +67436,16 @@ async function installFromChannel(args, deps) {
     );
   }
   const stage = await import_promises12.default.mkdtemp(
-    import_node_path68.default.join(import_node_os24.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+    import_node_path69.default.join(import_node_os24.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path68.default.join(stage, name);
+      const dest = import_node_path69.default.join(stage, name);
       if (entry.dir) {
         await import_promises12.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises12.default.mkdir(import_node_path68.default.dirname(dest), { recursive: true });
+      await import_promises12.default.mkdir(import_node_path69.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises12.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -67109,7 +67466,7 @@ async function installFromChannel(args, deps) {
 
 // src/extension/update-flow.ts
 var import_promises13 = __toESM(require("fs/promises"), 1);
-var import_node_path69 = __toESM(require("path"), 1);
+var import_node_path70 = __toESM(require("path"), 1);
 var import_node_os25 = __toESM(require("os"), 1);
 var import_node_crypto20 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
@@ -67126,11 +67483,11 @@ async function updateFromChannel(args, deps) {
     channelRef.extId,
     channelRef.ownerPrincipalId
   );
-  const liveDir = import_node_path69.default.join(deps.extensionsRoot, localExtId);
+  const liveDir = import_node_path70.default.join(deps.extensionsRoot, localExtId);
   const prevDir = `${liveDir}.prev`;
   let existingVersion;
   try {
-    const raw = await import_promises13.default.readFile(import_node_path69.default.join(liveDir, "manifest.json"), "utf8");
+    const raw = await import_promises13.default.readFile(import_node_path70.default.join(liveDir, "manifest.json"), "utf8");
     const parsed2 = ExtensionManifestSchema.safeParse(JSON.parse(raw));
     if (!parsed2.success) {
       throw new UpdateError(
@@ -67163,7 +67520,7 @@ async function updateFromChannel(args, deps) {
     throw new UpdateError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path69.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path70.default.isAbsolute(name)) {
       throw new UpdateError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -67198,16 +67555,16 @@ async function updateFromChannel(args, deps) {
   await import_promises13.default.rm(prevDir, { recursive: true, force: true });
   await import_promises13.default.rename(liveDir, prevDir);
   const stage = await import_promises13.default.mkdtemp(
-    import_node_path69.default.join(import_node_os25.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+    import_node_path70.default.join(import_node_os25.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path69.default.join(stage, name);
+      const dest = import_node_path70.default.join(stage, name);
       if (entry.dir) {
         await import_promises13.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises13.default.mkdir(import_node_path69.default.dirname(dest), { recursive: true });
+      await import_promises13.default.mkdir(import_node_path70.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises13.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -67274,7 +67631,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
       );
     }
   }
-  const manifestPath = import_node_path70.default.join(root, extId, "manifest.json");
+  const manifestPath = import_node_path71.default.join(root, extId, "manifest.json");
   const manifest = await readManifest(root, extId);
   const next = { ...manifest, version: newVersion };
   const tmp = `${manifestPath}.tmp`;
@@ -67282,7 +67639,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
   await import_promises14.default.rename(tmp, manifestPath);
 }
 async function readManifest(root, extId) {
-  const file = import_node_path70.default.join(root, extId, "manifest.json");
+  const file = import_node_path71.default.join(root, extId, "manifest.json");
   let raw;
   try {
     raw = await import_promises14.default.readFile(file, "utf8");
@@ -67366,7 +67723,7 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256, buffer } = await bundleExtensionDir(import_node_path70.default.join(deps.root, extId));
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path71.default.join(deps.root, extId));
     return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
@@ -67609,8 +67966,8 @@ var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
 
 // src/handlers/app-builder.ts
 init_protocol();
-var import_node_path71 = require("path");
-var import_node_fs58 = require("fs");
+var import_node_path72 = require("path");
+var import_node_fs59 = require("fs");
 var DEFAULT_TEMPLATE = "nestjs-react";
 var DEV_SERVER_READY_TIMEOUT_MS = 3e4;
 function buildAppBuilderHandlers(deps) {
@@ -67683,7 +68040,7 @@ function buildAppBuilderHandlers(deps) {
   async function listAllUsersProjects() {
     if (!deps.usersRoot || !deps.getStore) return [];
     const getStore = deps.getStore;
-    const userIds = await import_node_fs58.promises.readdir(deps.usersRoot).catch(() => []);
+    const userIds = await import_node_fs59.promises.readdir(deps.usersRoot).catch(() => []);
     const perUser = await Promise.all(
       userIds.map((uid) => getStore(uid).list().catch(() => []))
     );
@@ -67756,13 +68113,13 @@ function buildAppBuilderHandlers(deps) {
       const created = await deps.createProjectOnDisk({
         store: userStore,
         name: f.name,
-        templateSrcDir: (0, import_node_path71.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE),
-        scaffoldScript: (0, import_node_path71.join)(deps.deployKitRoot, "scripts", "new-extension.sh"),
+        templateSrcDir: (0, import_node_path72.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE),
+        scaffoldScript: (0, import_node_path72.join)(deps.deployKitRoot, "scripts", "new-extension.sh"),
         reservedPorts,
         // 凭据只进 scaffold 子进程的 env，且**只给这个 persona 的 kit 模板声明要的那几个变量**
         // （M1b Step 5）。整表塞进去粒度只到「进程」——那会把 service-role key 交给一个用不到
         // 它的脚本。new-extension.sh 用它把模板的 `${VAR}` 渲成项目可跑的 server/.env。
-        extraEnv: secretsForKit(deps.readSecrets?.(), (0, import_node_path71.join)(personaRoot, "extension-kit")),
+        extraEnv: secretsForKit(deps.readSecrets?.(), (0, import_node_path72.join)(personaRoot, "extension-kit")),
         ...deps.logger ? { logger: deps.logger } : {}
       });
       project = created.project;
@@ -67961,7 +68318,7 @@ function buildAppBuilderHandlers(deps) {
       await userStore.clearPublishJob(args.name);
     }
     const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(boundSession.ownerPersonaId ?? "") : deps.personaRoot;
-    const scriptPath = (0, import_node_path71.join)(deps.deployKitRoot, "scripts", "publish.sh");
+    const scriptPath = (0, import_node_path72.join)(deps.deployKitRoot, "scripts", "publish.sh");
     deps.logger?.info("app-builder.publish.start", {
       name: args.name,
       sessionId: boundSession.sessionId,
@@ -67977,7 +68334,7 @@ function buildAppBuilderHandlers(deps) {
       // 凭据只进 publish.sh 这个子进程的 env，且只给它的 kit 模板声明要的那几个变量
       // （M1b Step 5）。那个进程里跑着 `eval "$BUILD_CMD"`——项目自带的构建命令会继承这份
       // env，多给一个变量就是多交一个凭据给它。personaRoot 上面已按绑定 session 的 persona 解析。
-      extraEnv: secretsForKit(deps.readSecrets?.(), (0, import_node_path71.join)(personaRoot, "extension-kit")),
+      extraEnv: secretsForKit(deps.readSecrets?.(), (0, import_node_path72.join)(personaRoot, "extension-kit")),
       hooks: {
         // 元数据每次写盘（publishJob 起落 / prodUrl 回填）后重推一帧：UI 渲染 PublishProgress
         // 三段 checklist 依赖 project.publishJob.status==='in-flight'，而 publishJob 字段只有
@@ -68688,7 +69045,7 @@ function buildGithubHandlers(deps) {
 
 // src/handlers/visitor.ts
 init_protocol();
-function ensureOwner5(ctx) {
+function ensureOwner6(ctx) {
   if (!ctx || ctx.principal.kind !== "owner") {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
@@ -68698,7 +69055,7 @@ function ensureOwner5(ctx) {
 }
 function buildVisitorHandlers(deps) {
   const list = async (_frame, _client, ctx) => {
-    ensureOwner5(ctx);
+    ensureOwner6(ctx);
     return {
       response: {
         type: "visitor:list",
@@ -68713,7 +69070,7 @@ function buildVisitorHandlers(deps) {
 
 // src/extension/registry.ts
 var import_promises16 = __toESM(require("fs/promises"), 1);
-var import_node_path72 = __toESM(require("path"), 1);
+var import_node_path73 = __toESM(require("path"), 1);
 async function loadAll(root) {
   let entries;
   try {
@@ -68726,13 +69083,13 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path72.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path73.default.join(root, ent.name), ent.name));
   }
   records.sort((a, b2) => a.extId < b2.extId ? -1 : a.extId > b2.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path72.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path73.default.join(dir, "manifest.json");
   let raw;
   try {
     raw = await import_promises16.default.readFile(manifestPath, "utf8");
@@ -68777,7 +69134,7 @@ async function loadOne(dir, dirName) {
 
 // src/extension/uninstall.ts
 var import_promises17 = __toESM(require("fs/promises"), 1);
-var import_node_path73 = __toESM(require("path"), 1);
+var import_node_path74 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -68786,7 +69143,7 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path73.default.join(deps.root, deps.extId);
+  const dir = import_node_path74.default.join(deps.root, deps.extId);
   try {
     await import_promises17.default.access(dir);
   } catch {
@@ -68985,6 +69342,7 @@ function buildMethodHandlers(deps) {
     }),
     ...buildFeishuAuthHandlers(deps.feishuAuth),
     ...buildDeviceHandlers(deps.feishuDevice),
+    ...buildCloudConnectorsHandlers(deps.cloudConnectors),
     ...deps.attachment ? buildAttachmentHandlers(deps.attachment) : {},
     ...buildExtensionHandlers({
       loadAll,
@@ -69023,7 +69381,7 @@ function buildMethodHandlers(deps) {
       broadcast: deps.broadcastToOwners
     }),
     ...buildMasterHandlers({
-      authorityTablePath: import_node_path74.default.join(deps.masterDataDir, "master-authority.json")
+      authorityTablePath: import_node_path75.default.join(deps.masterDataDir, "master-authority.json")
     }),
     ...buildTopicHandlers({
       topicStore: deps.topicStore,
@@ -69070,8 +69428,8 @@ function refreshPathFromLoginShell() {
       timeout: 3e3,
       stdio: ["ignore", "pipe", "ignore"]
     });
-    const path100 = out.trim();
-    if (path100) process.env.PATH = path100;
+    const path101 = out.trim();
+    if (path101) process.env.PATH = path101;
   } catch {
   }
 }
@@ -69195,9 +69553,9 @@ function buildOnboardingHandlers(deps) {
 }
 
 // src/app-builder-plugin/project-store.ts
-var import_node_fs59 = require("fs");
+var import_node_fs60 = require("fs");
 var import_node_child_process22 = require("child_process");
-var import_node_path75 = require("path");
+var import_node_path76 = require("path");
 init_protocol();
 var PROJECTS_DIR = "projects";
 var META_FILE = ".clawd-project.json";
@@ -69227,19 +69585,19 @@ var ProjectStore = class {
   }
   /** projects/<name>/.clawd-project.json 路径 */
   metaPath(name) {
-    return (0, import_node_path75.join)(this.projectsRoot(), name, META_FILE);
+    return (0, import_node_path76.join)(this.projectsRoot(), name, META_FILE);
   }
   /** projects/<name>/ 目录路径（cwd 用） */
   projectDir(name) {
-    return (0, import_node_path75.join)(this.projectsRoot(), name);
+    return (0, import_node_path76.join)(this.projectsRoot(), name);
   }
   projectsRoot() {
-    return (0, import_node_path75.join)(this.root, PROJECTS_DIR);
+    return (0, import_node_path76.join)(this.root, PROJECTS_DIR);
   }
   async list() {
     let entries;
     try {
-      entries = await import_node_fs59.promises.readdir(this.projectsRoot());
+      entries = await import_node_fs60.promises.readdir(this.projectsRoot());
     } catch (err) {
       if (err.code === "ENOENT") return [];
       throw err;
@@ -69247,7 +69605,7 @@ var ProjectStore = class {
     const out = [];
     for (const name of entries) {
       try {
-        const raw = await import_node_fs59.promises.readFile(this.metaPath(name), "utf8");
+        const raw = await import_node_fs60.promises.readFile(this.metaPath(name), "utf8");
         const json = JSON.parse(raw);
         let migrated = false;
         if (typeof json.devCommand !== "string" || json.devCommand.length === 0) {
@@ -69258,7 +69616,7 @@ var ProjectStore = class {
         if (parsed.success) {
           out.push(parsed.data);
           if (migrated) {
-            void import_node_fs59.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
+            void import_node_fs60.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
             });
           }
         }
@@ -69302,8 +69660,8 @@ var ProjectStore = class {
       throw new Error(`invalid name "${name}": ${validated.error.message}`);
     }
     const dir = this.projectDir(name);
-    await import_node_fs59.promises.mkdir(dir, { recursive: true });
-    await import_node_fs59.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
+    await import_node_fs60.promises.mkdir(dir, { recursive: true });
+    await import_node_fs60.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
     return meta;
   }
   /**
@@ -69348,7 +69706,7 @@ var ProjectStore = class {
   }
   async delete(name) {
     const dir = this.projectDir(name);
-    await import_node_fs59.promises.rm(dir, { recursive: true, force: true });
+    await import_node_fs60.promises.rm(dir, { recursive: true, force: true });
   }
   async updatePort(name, newPort) {
     if (newPort < PROJECT_PORT_MIN || newPort > PROJECT_PORT_MAX) {
@@ -69365,7 +69723,7 @@ var ProjectStore = class {
         throw new Error(`port ${newPort} already used / \u5DF2\u88AB project "${conflict.name}" \u5360\u7528`);
       }
       const updated = { ...target, port: newPort };
-      await import_node_fs59.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
+      await import_node_fs60.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
       return updated;
     });
   }
@@ -69384,7 +69742,7 @@ var ProjectStore = class {
       if (!validated.success) {
         throw new Error(`invalid prodUrl "${url}": ${validated.error.message}`);
       }
-      await import_node_fs59.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+      await import_node_fs60.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
       return validated.data;
     });
   }
@@ -69407,7 +69765,7 @@ var ProjectStore = class {
       if (!validated.success) {
         throw new Error(`invalid publishJob: ${validated.error.message}`);
       }
-      await import_node_fs59.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+      await import_node_fs60.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
       return validated.data;
     });
   }
@@ -69424,7 +69782,7 @@ var ProjectStore = class {
       if (!validated.success) {
         throw new Error(`failed to clear publishJob: ${validated.error.message}`);
       }
-      await import_node_fs59.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+      await import_node_fs60.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
       return validated.data;
     });
   }
@@ -69739,8 +70097,8 @@ var PublishJobRegistry = class {
 
 // src/app-builder-plugin/publish-job-runner.ts
 var import_node_child_process24 = require("child_process");
-var import_node_fs60 = require("fs");
-var import_node_path76 = require("path");
+var import_node_fs61 = require("fs");
+var import_node_path77 = require("path");
 
 // src/app-builder-plugin/publish-stage-parser.ts
 var STAGE_RE = /^\s*::stage::(build|deploy|verify)\s*$/;
@@ -69772,10 +70130,10 @@ async function startPublishJob(deps, args) {
     return { jobId: registry2.get(args.name).jobId, status: "already-publishing" };
   }
   const projDir = projectDir(args.name);
-  const logPath = (0, import_node_path76.join)(projDir, ".publish.log");
+  const logPath = (0, import_node_path77.join)(projDir, ".publish.log");
   let logStream = null;
   try {
-    logStream = (0, import_node_fs60.createWriteStream)(logPath, { flags: "w" });
+    logStream = (0, import_node_fs61.createWriteStream)(logPath, { flags: "w" });
   } catch {
     logStream = null;
   }
@@ -70118,10 +70476,10 @@ async function recoverInterruptedPublishJobs(store, logger) {
 }
 
 // src/app-builder-plugin/mcp-config.ts
-var import_node_fs61 = __toESM(require("fs"), 1);
-var import_node_path77 = __toESM(require("path"), 1);
+var import_node_fs62 = __toESM(require("fs"), 1);
+var import_node_path78 = __toESM(require("path"), 1);
 function appBuilderMcpConfigPath(dataDir) {
-  return import_node_path77.default.join(dataDir, "app-builder.mcp.json");
+  return import_node_path78.default.join(dataDir, "app-builder.mcp.json");
 }
 function writeAppBuilderMcpConfig(args) {
   const cfgPath = appBuilderMcpConfigPath(args.dataDir);
@@ -70135,15 +70493,15 @@ function writeAppBuilderMcpConfig(args) {
         env: {
           CLAWD_DAEMON_TOKEN: args.daemonToken,
           CLAWD_DAEMON_URL: args.daemonUrl,
-          CLAWD_APP_BUILDER_SCAFFOLD_SCRIPT: import_node_path77.default.join(args.deployKitScriptsDir, "new-extension.sh"),
-          CLAWD_APP_BUILDER_PUBLISH_SCRIPT: import_node_path77.default.join(args.deployKitScriptsDir, "publish.sh"),
+          CLAWD_APP_BUILDER_SCAFFOLD_SCRIPT: import_node_path78.default.join(args.deployKitScriptsDir, "new-extension.sh"),
+          CLAWD_APP_BUILDER_PUBLISH_SCRIPT: import_node_path78.default.join(args.deployKitScriptsDir, "publish.sh"),
           ...args.logPath ? { CLAWD_APP_BUILDER_LOG: args.logPath } : {}
         }
       }
     }
   };
-  import_node_fs61.default.mkdirSync(args.dataDir, { recursive: true });
-  import_node_fs61.default.writeFileSync(cfgPath, JSON.stringify(cfg, null, 2), "utf8");
+  import_node_fs62.default.mkdirSync(args.dataDir, { recursive: true });
+  import_node_fs62.default.writeFileSync(cfgPath, JSON.stringify(cfg, null, 2), "utf8");
   return cfgPath;
 }
 
@@ -70190,7 +70548,7 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 
 // src/extension/runtime.ts
 var import_node_child_process26 = require("child_process");
-var import_node_path78 = __toESM(require("path"), 1);
+var import_node_path79 = __toESM(require("path"), 1);
 var import_promises18 = require("timers/promises");
 
 // src/extension/port-allocator.ts
@@ -70291,7 +70649,7 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path78.default.join(this.root, extId);
+    const dir = import_node_path79.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
@@ -70403,7 +70761,7 @@ ${handle.stderrTail}`
 
 // src/extension/published-channels.ts
 var import_promises19 = __toESM(require("fs/promises"), 1);
-var import_node_path79 = __toESM(require("path"), 1);
+var import_node_path80 = __toESM(require("path"), 1);
 init_zod();
 var PublishedChannelsError = class extends Error {
   constructor(code, message) {
@@ -70502,7 +70860,7 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises19.default.mkdir(import_node_path79.default.dirname(this.filePath), { recursive: true });
+    await import_promises19.default.mkdir(import_node_path80.default.dirname(this.filePath), { recursive: true });
     await import_promises19.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
     await import_promises19.default.rename(tmp, this.filePath);
   }
@@ -70510,7 +70868,7 @@ var PublishedChannelStore = class {
 
 // src/extension/bundle-cache.ts
 var import_promises20 = __toESM(require("fs/promises"), 1);
-var import_node_path80 = __toESM(require("path"), 1);
+var import_node_path81 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -70519,14 +70877,14 @@ var BundleCache = class {
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
     await import_promises20.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path80.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path81.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
     await import_promises20.default.writeFile(tmp, buffer, { mode: 384 });
     await import_promises20.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path80.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path81.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
       return await import_promises20.default.readFile(file);
     } catch (e) {
@@ -70536,7 +70894,7 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path80.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path81.default.join(this.rootDir, `${snapshotHash}.zip`);
     await import_promises20.default.rm(file, { force: true });
   }
 };
@@ -70559,24 +70917,24 @@ async function startDaemon(config) {
     sampling: logShippingCfg.sampling,
     homeDir: import_node_os28.default.homedir()
   });
-  const logDir = import_node_path81.default.join(config.dataDir, "log");
-  import_node_fs62.default.mkdirSync(logDir, { recursive: true });
+  const logDir = import_node_path82.default.join(config.dataDir, "log");
+  import_node_fs63.default.mkdirSync(logDir, { recursive: true });
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path81.default.join(logDir, "clawd.log"),
+    file: import_node_path82.default.join(logDir, "clawd.log"),
     logClient
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const screenIdleProbeLogger = createFileOnlyLogger({
-    file: import_node_path81.default.join(logDir, "screen-idle-probe.log"),
+    file: import_node_path82.default.join(logDir, "screen-idle-probe.log"),
     level: "debug"
   });
   logger.info("screen-idle probe logger enabled", {
-    file: import_node_path81.default.join(logDir, "screen-idle-probe.log")
+    file: import_node_path82.default.join(logDir, "screen-idle-probe.log")
   });
   const CAP_TARGETS = [
-    import_node_path81.default.join(logDir, "clawd.log"),
-    import_node_path81.default.join(logDir, "screen-idle-probe.log")
+    import_node_path82.default.join(logDir, "clawd.log"),
+    import_node_path82.default.join(logDir, "screen-idle-probe.log")
   ];
   const LOG_CAP_MAX_BYTES = 10 * 1024 * 1024;
   const LOG_CAP_KEEP_BYTES = 5 * 1024 * 1024;
@@ -70698,8 +71056,8 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path81.default.join(config.dataDir, "personas"));
-  const usersRoot = import_node_path81.default.join(config.dataDir, "users");
+  const personaStore = new PersonaStore(import_node_path82.default.join(config.dataDir, "personas"));
+  const usersRoot = import_node_path82.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -70723,7 +71081,7 @@ async function startDaemon(config) {
   retirePersonaBuilder({ store: personaStore, logger });
   const groupFileStore = new GroupFileStore({ dataDir: config.dataDir, logger });
   const dispatchStore = createDispatchStore({
-    filePath: import_node_path81.default.join(config.dataDir, "dispatch.json"),
+    filePath: import_node_path82.default.join(config.dataDir, "dispatch.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("dispatch store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
@@ -70732,7 +71090,7 @@ async function startDaemon(config) {
   await dispatchStore.load();
   dispatchStore.markInterruptedAsFailed((/* @__PURE__ */ new Date()).toISOString());
   const channelStore = createChannelStore({
-    filePath: import_node_path81.default.join(config.dataDir, "channels.json"),
+    filePath: import_node_path82.default.join(config.dataDir, "channels.json"),
     now: () => Date.now(),
     genId: () => `ch-${(0, import_node_crypto23.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("channel store flush failed", {
@@ -70741,7 +71099,7 @@ async function startDaemon(config) {
   });
   await channelStore.load();
   const topicStore = createTopicStore({
-    filePath: import_node_path81.default.join(config.dataDir, "topics.json"),
+    filePath: import_node_path82.default.join(config.dataDir, "topics.json"),
     now: () => Date.now(),
     genId: () => `tp-${(0, import_node_crypto23.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("topic store flush failed", {
@@ -70768,28 +71126,28 @@ async function startDaemon(config) {
       });
     }
   });
-  const here = typeof __dirname === "string" ? __dirname : import_node_path81.default.dirname((0, import_node_url5.fileURLToPath)(import_meta8.url));
+  const here = typeof __dirname === "string" ? __dirname : import_node_path82.default.dirname((0, import_node_url5.fileURLToPath)(import_meta8.url));
   const mcpConfigs = [];
   const secretsBundleRoot = findSecretsBundleRoot(logger);
-  const localSecretsDir = import_node_path81.default.join(config.dataDir, LOCAL_SECRETS_DIRNAME);
+  const localSecretsDir = import_node_path82.default.join(config.dataDir, LOCAL_SECRETS_DIRNAME);
   const readSecrets = () => readSecretTable({ bundleRoot: secretsBundleRoot, overrideDir: localSecretsDir, logger });
   const resolvePersonaMcpConfig = (personaId2) => renderPersonaMcpSecrets({
     personaId: personaId2,
-    personaDir: import_node_path81.default.join(config.dataDir, "personas", personaId2),
+    personaDir: import_node_path82.default.join(config.dataDir, "personas", personaId2),
     secrets: readSecrets(),
-    outDir: import_node_path81.default.join(config.dataDir, "persona-mcp"),
+    outDir: import_node_path82.default.join(config.dataDir, "persona-mcp"),
     logger
   });
   const mcpDaemonUrl = `http://127.0.0.1:${config.port}`;
   const dispatchServerCandidates = [
-    import_node_path81.default.join(here, "dispatch", "mcp-server.cjs"),
+    import_node_path82.default.join(here, "dispatch", "mcp-server.cjs"),
     // 生产 dist/index → dist/dispatch/mcp-server.cjs
-    import_node_path81.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
+    import_node_path82.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
-  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs62.default.existsSync(p2));
+  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs63.default.existsSync(p2));
   if (dispatchServerScriptPath) {
-    const dispatchLogPath = import_node_path81.default.join(logDir, "dispatch-mcp-server.log");
+    const dispatchLogPath = import_node_path82.default.join(logDir, "dispatch-mcp-server.log");
     const dispatchCfgPath = writeDispatchMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: dispatchServerScriptPath,
@@ -70809,12 +71167,12 @@ async function startDaemon(config) {
     });
   }
   const ticketServerCandidates = [
-    import_node_path81.default.join(here, "ticket", "mcp-server.cjs"),
-    import_node_path81.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
+    import_node_path82.default.join(here, "ticket", "mcp-server.cjs"),
+    import_node_path82.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
-  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs62.default.existsSync(p2));
+  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs63.default.existsSync(p2));
   if (ticketServerScriptPath) {
-    const ticketLogPath = import_node_path81.default.join(logDir, "ticket-mcp-server.log");
+    const ticketLogPath = import_node_path82.default.join(logDir, "ticket-mcp-server.log");
     const ticketCfgPath = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
@@ -70836,12 +71194,12 @@ async function startDaemon(config) {
     });
   }
   const shiftServerCandidates = [
-    import_node_path81.default.join(here, "shift", "mcp-server.cjs"),
-    import_node_path81.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
+    import_node_path82.default.join(here, "shift", "mcp-server.cjs"),
+    import_node_path82.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
-  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs62.default.existsSync(p2));
+  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs63.default.existsSync(p2));
   if (shiftServerScriptPath) {
-    const shiftLogPath = import_node_path81.default.join(logDir, "shift-mcp-server.log");
+    const shiftLogPath = import_node_path82.default.join(logDir, "shift-mcp-server.log");
     const shiftCfgPath = await writeShiftMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: shiftServerScriptPath,
@@ -70862,12 +71220,12 @@ async function startDaemon(config) {
     );
   }
   const inboxServerCandidates = [
-    import_node_path81.default.join(here, "inbox", "mcp-server.cjs"),
-    import_node_path81.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
+    import_node_path82.default.join(here, "inbox", "mcp-server.cjs"),
+    import_node_path82.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
   ];
-  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs62.default.existsSync(p2));
+  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs63.default.existsSync(p2));
   if (inboxServerScriptPath) {
-    const inboxLogPath = import_node_path81.default.join(logDir, "inbox-mcp-server.log");
+    const inboxLogPath = import_node_path82.default.join(logDir, "inbox-mcp-server.log");
     const inboxCfgPath = await writeInboxMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: inboxServerScriptPath,
@@ -70888,10 +71246,10 @@ async function startDaemon(config) {
     );
   }
   const peerOpsServerCandidates = [
-    import_node_path81.default.join(here, "peer-ops", "mcp-server.cjs"),
-    import_node_path81.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
+    import_node_path82.default.join(here, "peer-ops", "mcp-server.cjs"),
+    import_node_path82.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
   ];
-  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs62.default.existsSync(p2));
+  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs63.default.existsSync(p2));
   if (peerOpsServerScriptPath) {
     const peerOpsCfgPath = writePeerOpsMcpConfig({
       dataDir: config.dataDir,
@@ -70911,12 +71269,12 @@ async function startDaemon(config) {
     );
   }
   const rpcToolServerCandidates = [
-    import_node_path81.default.join(here, "rpc-tool", "mcp-server.cjs"),
-    import_node_path81.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
+    import_node_path82.default.join(here, "rpc-tool", "mcp-server.cjs"),
+    import_node_path82.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
   ];
-  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p2) => import_node_fs62.default.existsSync(p2));
+  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p2) => import_node_fs63.default.existsSync(p2));
   if (rpcToolServerScriptPath) {
-    const rpcToolLogPath = import_node_path81.default.join(logDir, "rpc-tool-mcp-server.log");
+    const rpcToolLogPath = import_node_path82.default.join(logDir, "rpc-tool-mcp-server.log");
     const rpcToolCfgPath = writeRpcToolMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: rpcToolServerScriptPath,
@@ -70937,18 +71295,18 @@ async function startDaemon(config) {
     );
   }
   const appBuilderServerCandidates = [
-    import_node_path81.default.join(here, "app-builder-plugin", "mcp-server.cjs"),
-    import_node_path81.default.join(here, "..", "dist", "app-builder-plugin", "mcp-server.cjs")
+    import_node_path82.default.join(here, "app-builder-plugin", "mcp-server.cjs"),
+    import_node_path82.default.join(here, "..", "dist", "app-builder-plugin", "mcp-server.cjs")
   ];
-  const appBuilderServerScriptPath = appBuilderServerCandidates.find((p2) => import_node_fs62.default.existsSync(p2));
+  const appBuilderServerScriptPath = appBuilderServerCandidates.find((p2) => import_node_fs63.default.existsSync(p2));
   if (appBuilderServerScriptPath) {
-    const appBuilderLogPath = import_node_path81.default.join(logDir, "app-builder-mcp-server.log");
+    const appBuilderLogPath = import_node_path82.default.join(logDir, "app-builder-mcp-server.log");
     const appBuilderCfgPath = writeAppBuilderMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: appBuilderServerScriptPath,
       daemonToken: resolvedAuthToken,
       daemonUrl: mcpDaemonUrl,
-      deployKitScriptsDir: import_node_path81.default.join(config.dataDir, "deploy-kit", "scripts"),
+      deployKitScriptsDir: import_node_path82.default.join(config.dataDir, "deploy-kit", "scripts"),
       logPath: appBuilderLogPath
     });
     mcpConfigs.push({ id: "app-builder", path: appBuilderCfgPath, personas: APP_BUILDER_PERSONAS });
@@ -70964,7 +71322,7 @@ async function startDaemon(config) {
     );
   }
   const shiftStore = createShiftStore({
-    filePath: import_node_path81.default.join(config.dataDir, "shift.json"),
+    filePath: import_node_path82.default.join(config.dataDir, "shift.json"),
     ownerIdProvider: () => ownerPrincipalId,
     now: () => Date.now()
   });
@@ -70986,7 +71344,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path81.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path82.default.join(config.dataDir, "personas"),
     // dispatch / shift 自动化 spawn 按 persona 绑定 tool 起 B session（codex persona 用 codex）。
     // personaRegistry 声明在 manager 之后（同作用域 const，调用时机在启动完成后，无 TDZ 风险）。
     getPersonaDefaults: (personaId2) => personaRegistry.get(personaId2),
@@ -71043,10 +71401,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path81.default.isAbsolute(input.relPath) ? input.relPath : import_node_path81.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path82.default.isAbsolute(input.relPath) ? input.relPath : import_node_path82.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs62.default.statSync(absPath).size;
+          size = import_node_fs63.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -71087,9 +71445,9 @@ async function startDaemon(config) {
     logger.info("projects.seed-dropped", { dropped: droppedSeed.dropped, backup: droppedSeed.backup });
   }
   const projectsStore = new ProjectsStore({
-    file: import_node_path81.default.join(config.dataDir, "projects.json"),
+    file: import_node_path82.default.join(config.dataDir, "projects.json"),
     clawdDir: config.dataDir,
-    codexStateFile: import_node_path81.default.join(import_node_os28.default.homedir(), ".codex", ".codex-global-state.json"),
+    codexStateFile: import_node_path82.default.join(import_node_os28.default.homedir(), ".codex", ".codex-global-state.json"),
     logger
   });
   const observer = new SessionObserver({
@@ -71157,13 +71515,13 @@ async function startDaemon(config) {
     logger
   });
   registerAdapter("claude", claudeAdapter);
-  const codexIsolatedHome = import_node_path81.default.join(config.dataDir, "codex-home");
+  const codexIsolatedHome = import_node_path82.default.join(config.dataDir, "codex-home");
   try {
-    import_node_fs62.default.mkdirSync(codexIsolatedHome, { recursive: true });
+    import_node_fs63.default.mkdirSync(codexIsolatedHome, { recursive: true });
     for (const f of ["auth.json", "config.toml"]) {
-      const link = import_node_path81.default.join(codexIsolatedHome, f);
-      const target = import_node_path81.default.join(import_node_os28.default.homedir(), ".codex", f);
-      if (!import_node_fs62.default.existsSync(link) && import_node_fs62.default.existsSync(target)) import_node_fs62.default.symlinkSync(target, link);
+      const link = import_node_path82.default.join(codexIsolatedHome, f);
+      const target = import_node_path82.default.join(import_node_os28.default.homedir(), ".codex", f);
+      if (!import_node_fs63.default.existsSync(link) && import_node_fs63.default.existsSync(target)) import_node_fs63.default.symlinkSync(target, link);
     }
   } catch (err) {
     logger.warn("codex isolated home setup failed", { err: String(err) });
@@ -71174,17 +71532,17 @@ async function startDaemon(config) {
       logger,
       historyReader: new CodexHistoryReader({
         roots: codexRolloutRoots(config.dataDir),
-        sharedHome: import_node_path81.default.join(import_node_os28.default.homedir(), ".codex"),
+        sharedHome: import_node_path82.default.join(import_node_os28.default.homedir(), ".codex"),
         logger
       }),
       // projectPaths 每次调用现取 —— 用户新建 project 后立即生效，不用重启 daemon
       codexHomeFor: (cwd) => resolveCodexHome({
         cwd,
-        personaRoot: import_node_path81.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path82.default.join(config.dataDir, "personas"),
         // 必须用 listMerged（Codex registry ∪ 叠加层）：只用本地 list() 的话，用户在
         // Codex 里建的 project 不在表里，在它下面开的会话会被误判成隔离 → Codex 侧看不到
         projectPaths: projectsStore.listMerged().map((x) => x.path),
-        sharedHome: import_node_path81.default.join(import_node_os28.default.homedir(), ".codex"),
+        sharedHome: import_node_path82.default.join(import_node_os28.default.homedir(), ".codex"),
         isolatedHome: codexIsolatedHome
       }),
       // 附件图片验签：与 http-router /files 路由同一把 secret
@@ -71193,10 +71551,10 @@ async function startDaemon(config) {
   );
   registerAdapter(CODEX_CLOUD_TOOL_ID, new CloudCodexAdapter({ client: cloudGateway, logger, getSignSecret: () => authFile.token }));
   const piMcpBridgeCandidates = [
-    import_node_path81.default.join(here, "pi-mcp-bridge", "extension.cjs"),
-    import_node_path81.default.join(here, "..", "dist", "pi-mcp-bridge", "extension.cjs")
+    import_node_path82.default.join(here, "pi-mcp-bridge", "extension.cjs"),
+    import_node_path82.default.join(here, "..", "dist", "pi-mcp-bridge", "extension.cjs")
   ];
-  const piMcpBridgePath = piMcpBridgeCandidates.find((p2) => import_node_fs62.default.existsSync(p2));
+  const piMcpBridgePath = piMcpBridgeCandidates.find((p2) => import_node_fs63.default.existsSync(p2));
   if (piMcpBridgePath) {
     logger.info("pi-mcp-bridge extension resolved", { path: piMcpBridgePath });
   } else {
@@ -71507,11 +71865,11 @@ async function startDaemon(config) {
         // 'persona/<pid>/owner'，default 走 'default'。
         getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
         // guest path guard：candidate 必须在 personaRoot 子树或调用者自己的 user-dir 下
-        personaRoot: import_node_path81.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path82.default.join(config.dataDir, "personas"),
         usersRoot
       },
       // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-      personaRoot: import_node_path81.default.join(config.dataDir, "personas"),
+      personaRoot: import_node_path82.default.join(config.dataDir, "personas"),
       // v2 多人 persona 隔离：handler 派生 guest user-dir 放行
       usersRoot,
       // v2 Phase 6: whoami handler 装在 owner principal.displayName + persona 解析
@@ -71590,6 +71948,20 @@ async function startDaemon(config) {
           issue: (args) => centralIssueApiKey({ api: config.clawosApi ?? DEFAULT_CLAWOS_API, ...args })
         }
       },
+      // 云 persona 卡片上的连接器区（design 2026-09-11-mcp-connector §3.8）：装了什么以 gateway 登记行为真源，
+      // 连没连上问中心。登录凭证只在 daemon 内部传给中心，与 apiKeyClient 同一条纪律。
+      cloudConnectors: {
+        getPersona: (personaId2) => personaRegistry.get(personaId2),
+        gatewayConnectors: (gatewayPersonaId) => cloudGateway.personaConnectors(gatewayPersonaId),
+        readIdentity: () => {
+          const r = ownerIdentityStore.read();
+          return r ? { ttcJwt: r.ttcToken, provider: r.identity.provider } : null;
+        },
+        central: {
+          mine: (args) => centralConnectorsMine({ api: config.clawosApi ?? DEFAULT_CLAWOS_API, ...args }),
+          fill: (args) => centralConnectorFill({ api: config.clawosApi ?? DEFAULT_CLAWOS_API, ...args })
+        }
+      },
       // 设备目录 + 连接（决策 #15：daemon 代理中心 server）。
       // exchange/listDevices 包掉 owner ttcJwt（每次现读 store——热切换后立即用新身份）；
       // dispatcher 的 FEISHU_GATED_METHODS gate 已保证未登录时这些 RPC 到不了 handler，
@@ -71618,11 +71990,11 @@ async function startDaemon(config) {
       // 发布上线脚手架化 (spec 2026-06-03 §5.2):
       // appBuilderPersonaRoot 用于拼 publish.sh 绝对路径（persona-app-builder 安装在
       // dataDir/personas/persona-app-builder 之下，extension-kit/scripts/publish.sh 是相对路径）。
-      appBuilderPersonaRoot: import_node_path81.default.join(config.dataDir, "personas", "persona-app-builder"),
+      appBuilderPersonaRoot: import_node_path82.default.join(config.dataDir, "personas", "persona-app-builder"),
       // 共享 deploy-kit 根：scaffold/publish 脚本骨架 + 阿里云凭证单一真源。
-      deployKitRoot: import_node_path81.default.join(config.dataDir, "deploy-kit"),
+      deployKitRoot: import_node_path82.default.join(config.dataDir, "deploy-kit"),
       // scaffold/publish 按当前 session 的 persona 解析其安装根，让每个 persona 用自己的模板/注入配置。
-      resolvePersonaRoot: (personaId2) => import_node_path81.default.join(config.dataDir, "personas", personaId2),
+      resolvePersonaRoot: (personaId2) => import_node_path82.default.join(config.dataDir, "personas", personaId2),
       // 凭据表（M1b Step 5）：与 MCP 那条同一张表、同一个来源，只是交付给另一个子进程。
       readSecrets,
       // 发布上线脚手架化 (spec 2026-06-03 §5.2.2):
@@ -71819,7 +72191,7 @@ async function startDaemon(config) {
   });
   shiftScheduler.start();
   logger.info("shift scheduler started", { shiftCount: shiftStore.list().length });
-  const larkBotStore = createLarkBotBindingStore(import_node_path81.default.join(config.dataDir, "personas"));
+  const larkBotStore = createLarkBotBindingStore(import_node_path82.default.join(config.dataDir, "personas"));
   const larkBotCloud = createLarkBotCloudClient({
     api: config.clawosApi ?? DEFAULT_CLAWOS_API,
     apiKey: resolveClawdTicketsApiKey(),
@@ -71833,7 +72205,7 @@ async function startDaemon(config) {
     store: larkBotStore,
     fetchResource: (appId, messageId, fileKey, maxBytes, type) => larkBotCloud.fetchResource(appId, messageId, fileKey, maxBytes, type),
     // 图片落 guest userWorkDir 下（capId = lark-<chat_id>）：CC 经 --add-dir + allowRead carve 可 Read
-    mediaRootFor: (chatId) => import_node_path81.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
+    mediaRootFor: (chatId) => import_node_path82.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
     isShuttingDown: () => larkDraining,
     logger: {
       warn: (msg) => logger.warn(msg),
@@ -72140,8 +72512,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path81.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path81.default.join(logDir, "frpc.log")}`
+        `Frpc config: ${import_node_path82.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path82.default.join(logDir, "frpc.log")}`
       ];
       const width2 = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width2 + 4);
@@ -72154,8 +72526,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path81.default.join(config.dataDir, "connect.txt");
-        import_node_fs62.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path82.default.join(config.dataDir, "connect.txt");
+        import_node_fs63.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -72242,9 +72614,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path81.default.join(dataDir, "persons");
+  const dir = import_node_path82.default.join(dataDir, "persons");
   try {
-    import_node_fs62.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs63.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }