@clawos-dev/clawd 0.2.512 → 0.2.514

package/dist/cli.cjs

@@ -7710,7 +7710,7 @@ var init_principal = __esm({
 });
 
 // ../protocol/src/schemas.ts
-var SessionStatusSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, SelectOptionSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, ToolFeaturesSchema, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, TURN_END_REASONS, ParsedEventSchema, SessionCreateArgs, ProjectEntry, ProjectPatchArgs, ProjectRevealArgs, ProjectCreateArgs, SessionImportExternalArgs, SessionListArgs, SessionIdArgs, SessionUpdateArgs, QueuedMessage, SessionSendArgs, SessionDequeueArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionCurrentTurnSenderArgs, SessionSubscribeArgs, SessionPinArgs, SessionArchiveArgs, SessionSearchContentArgs, SessionSearchMatchSchema, SessionSearchContentResponseSchema, PeerSessionUpsertArgs, PeerSessionUpsertResponseSchema, PeerSessionRemoveArgs, PeerSessionRemoveResponseSchema, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, ClientInfoSchema, AuthRequestFrameSchema, AuthOkFrameSchema, DeviceConnectionEntrySchema, DeviceConnectionsResponseSchema, TunnelReadyEventSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema, PROJECT_PORT_MIN, PROJECT_PORT_MAX, projectNameRegex, DEFAULT_DEV_COMMAND, ProjectMetadataSchema, PROJECT_STAGE_VALUES, ProjectStageSchema, ProjectWithStatusSchema, ListProjectsArgsSchema, ListProjectsResultSchema, GetProjectArgsSchema, GetProjectResultSchema, CreateProjectArgsSchema, CreateProjectResultSchema, DeleteProjectArgsSchema, DeleteProjectResultSchema, UpdateProjectPortArgsSchema, UpdateProjectPortResultSchema, SetProdUrlArgsSchema, SetProdUrlResultSchema, StartDevServerArgsSchema, StartDevServerResultSchema, ASSISTANT_REPORTABLE_STAGES, ReportStageArgsSchema, ReportStageResultSchema, StopDevServerArgsSchema, StopDevServerResultSchema, AppBuilderProjectUpdatedEventSchema, PublishArgsSchema, PublishResultSchema, DismissPublishJobArgsSchema, DismissPublishJobResultSchema, AppBuilderPublishProgressEventSchema, AppBuilderPublishFailedEventSchema;
+var SessionStatusSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, SelectOptionSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, ToolFeaturesSchema, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, TURN_END_REASONS, ParsedEventSchema, SessionCreateArgs, ProjectEntry, ProjectPatchArgs, ProjectRevealArgs, ProjectCreateArgs, SessionImportExternalArgs, SessionListArgs, SessionIdArgs, SessionUpdateArgs, QueuedMessage, SessionSendArgs, SessionDequeueArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionCurrentTurnSenderArgs, SessionSubscribeArgs, SessionPinArgs, SessionArchiveArgs, SessionSearchContentArgs, SessionSearchMatchSchema, SessionSearchContentResponseSchema, PeerSessionUpsertArgs, PeerSessionUpsertResponseSchema, PeerSessionRemoveArgs, PeerSessionRemoveResponseSchema, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, ClientInfoSchema, AuthRequestFrameSchema, AuthOkFrameSchema, DeviceConnectionEntrySchema, DeviceConnectionsResponseSchema, TunnelReadyEventSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema;
 var init_schemas = __esm({
   "../protocol/src/schemas.ts"() {
     "use strict";
@@ -7861,10 +7861,6 @@ var init_schemas = __esm({
        * 本机资源指针——mirror 上与 ownerPersonaId 同地点 strip（#750 防线）。
        */
       projectPath: external_exports.string().min(1).optional(),
-      // app-builder Project 反向索引（spec: superpowers/specs/2026-06-01-app-builder-project-picker-design.md）。
-      // 当此 session 绑定到某个 build 中的 project 时填写；name 与 projects/<name>/ 子目录同名，
-      // 受 projectNameSchema regex 约束。daemon session:resume 时校验该目录存在，不存在则拒。
-      appBuilderProject: external_exports.string().regex(/^[a-z][a-z0-9-]{0,39}$/).optional(),
       // listener-mode sub-session 的原始 chatId（owner-mode 不写；listener-scope 强制写入）。
       // 派生 sessionId 是单向 hash `${personaId}-${tokenHash12}-${chatHash8}`，必须保留原始 chatId
       // 才能让 alice 重连同一 sub-session（持久化在 alice localStorage 之外，由 daemon push 同步）。
@@ -8199,10 +8195,6 @@ var init_schemas = __esm({
       // owner-mode persona session：传此字段时 daemon 自行派生 cwd 和启动参数，
       // 且按 ownerPersonaId 做 idempotent dedupe（每 persona 永远只有一个 owner session）
       ownerPersonaId: external_exports.string().min(1).optional(),
-      // 单栏默认 refactor (spec 2026-06-02)：appBuilderProject 字段已从 SessionCreateArgs 砍掉。
-      // 绑定路径收敛到 appBuilder:createProject —— 先创建空 session（仅传 ownerPersonaId=persona-app-builder），
-      // 后通过 createProject RPC 创建 project 并 daemon 内部 mutate 写入 appBuilderProject。
-      // SessionFile schema 仍保留该字段供 daemon 内部 mutate（manager.update 内部调用通道）。
       /**
        * 新建会话选择的 project（spec 2026-08-17-projects-sidebar §4.2）：
        * - 单独出现：daemon 以它为 cwd（等价传 cwd）
@@ -8289,9 +8281,6 @@ var init_schemas = __esm({
         // 从所有 sidebar 消费者视野消失（App.visibleSessions / buildSessionTree），用户看不见
         // 也删不掉，再被 sweepEphemeralOnStartup 静默删除——数据丢失级别的口子。
         ephemeral: external_exports.literal(false).optional()
-        // 注意：appBuilderProject 字段已从 patch 中砍掉（spec 2026-06-02-app-builder-single-pane-default-design）。
-        // 绑定单向不可变 —— 由 appBuilder:createProject 在 daemon 内部一次写入；UI / assistant 不再
-        // 通过 sessionUpdate 修改这个字段。SessionFile 仍保留 appBuilderProject 字段供 daemon 内部 mutate。
       })
     });
     QueuedMessage = external_exports.object({
@@ -8638,189 +8627,6 @@ var init_schemas = __esm({
        *  探测见 daemon/src/cli-probe/probe.ts。旧 daemon 不发 → undefined。 */
       globalCliVersion: external_exports.string().nullable().optional()
     });
-    PROJECT_PORT_MIN = 6173;
-    PROJECT_PORT_MAX = 6272;
-    projectNameRegex = /^[a-z][a-z0-9-]{0,39}$/;
-    DEFAULT_DEV_COMMAND = "cd server && pnpm dev";
-    ProjectMetadataSchema = external_exports.object({
-      name: external_exports.string().regex(projectNameRegex, {
-        message: "kebab-case, \u5C0F\u5199\u5B57\u6BCD\u5F00\u5934\uFF0C\u53EA\u5141\u8BB8\u5C0F\u5199\u5B57\u6BCD / \u6570\u5B57 / -\uFF0C\u6700\u957F 40 \u5B57\u7B26"
-      }),
-      port: external_exports.number().int().min(PROJECT_PORT_MIN).max(PROJECT_PORT_MAX),
-      createdAt: external_exports.string().datetime(),
-      /** dev server 启动命令（shell 字符串）；占位符 $CLAWD_PREVIEW_PORT 替换 + env 注入 */
-      devCommand: external_exports.string().min(1),
-      /**
-       * 发布上线后的公网 URL（spec 2026-06-02-app-builder-single-pane-default-design §5.6.1）。
-       * assistant 跑完 publish.sh 后调 appBuilder:setProdUrl 写入；UI 读这个字段切预览栏到线上 URL，
-       * 取代旧 `<builder-preview url=... label="prod" />` marker 机制。
-       * 老 project 元数据无此字段（optional 兼容）。
-       */
-      prodUrl: external_exports.string().url().optional(),
-      /**
-       * dev server 就绪 stdout regex（spec 2026-06-02-app-builder-explicit-dev-server-control §2）。
-       * supervisor spawn 后会监听子进程 stdout，命中此 regex 视为 dev server 真 ready；
-       * 仅当 await ready 后才把 stage 切到 'running'，避免 cold start race 导致 iframe 502。
-       * optional：缺省时 supervisor 用默认 /Local:\s+https?:\/\//（vite "Local: http://..." 输出）。
-       * 老板换非 vite 技术栈（Next.js "Ready in"、webpack "Compiled" 等）时自定义这个字段。
-       */
-      readyPattern: external_exports.string().optional(),
-      /**
-       * 发布上线脚手架化 (spec 2026-06-03-app-builder-publish-scaffold-design §5.1.4)：
-       * in-flight 发布 job 的元数据。仅承载"in-flight"或"中断残骸"两种状态：
-       *   - daemon spawn publish.sh + 收到第一个 ::stage::build marker 时写入
-       *   - 每次 stage 切换更新 stage 字段
-       *   - 成功 / 正常失败 / 用户 dismiss 时立即清掉
-       *   - 只有 daemon 崩才会留残骸（子进程随 daemon 一起死）
-       * status 字段在 ProjectWithStatus 派生而不在这里 —— 本 schema 是落盘形态，
-       * "in-flight vs interrupted" 区分由 daemon 响应时实时拼 registry 状态得出。
-       */
-      publishJob: external_exports.object({
-        jobId: external_exports.string().min(1),
-        stage: external_exports.enum(["build", "deploy", "verify"]),
-        startedAt: external_exports.number().int().nonnegative()
-      }).optional()
-    });
-    PROJECT_STAGE_VALUES = [
-      "install-pending",
-      // createProject 刚返回，scaffold 已完成（daemon 同步内联跑），等 assistant pnpm install
-      "installing",
-      // assistant pnpm install 中
-      "starting-dev-server",
-      // startDevServer 已调，supervisor spawn 子进程中（await ready 期间也在此 stage）
-      "running",
-      // dev server 跑起来了（supervisor stdout 命中 readyPattern + 端口已监听）
-      "stopped",
-      // 用户显式点"收起预览"停掉 / daemon 重启后默认；UI 渲染折叠条 + "展开预览"按钮
-      "failed"
-      // 某个阶段失败（stageReason 字段携带原因，含 dev server cold start timeout）
-    ];
-    ProjectStageSchema = external_exports.enum(PROJECT_STAGE_VALUES);
-    ProjectWithStatusSchema = ProjectMetadataSchema.extend({
-      isRunning: external_exports.boolean(),
-      boundSessionId: external_exports.string().nullable(),
-      /**
-       * 单栏 refactor stage fix (spec 2026-06-02 §5.6.2)：daemon 内存维护的当前 stage。
-       * UI 据此切 PreviewPane spinner / iframe / error。
-       * optional 兼容启动后 daemon 还没有 stage 记录的 fresh project（按 isRunning 推断兜底）。
-       */
-      stage: ProjectStageSchema.optional(),
-      /** stage='failed' 时携带失败原因 */
-      stageReason: external_exports.string().optional(),
-      /**
-       * 发布上线脚手架化 (spec 2026-06-03-app-builder-publish-scaffold-design §5.1.3)：
-       * ProjectMetadata.publishJob 的 status 派生版。daemon 响应时按以下规则实时拼装：
-       *   - 落盘字段存在 + PublishJobRegistry 有匹配 jobId → 'in-flight'
-       *   - 落盘字段存在 + Registry 无匹配（jobId 对不上或 entry 缺失）→ 'interrupted'（daemon 崩残骸）
-       *   - 落盘字段不存在 → undefined（字段省略）
-       * UI 用 status 决定 PreviewPane 渲染分支（in-flight 三段 checklist / interrupted 恢复条）。
-       */
-      publishJob: external_exports.object({
-        jobId: external_exports.string().min(1),
-        stage: external_exports.enum(["build", "deploy", "verify"]),
-        startedAt: external_exports.number().int().nonnegative(),
-        status: external_exports.enum(["in-flight", "interrupted"])
-      }).optional()
-    });
-    ListProjectsArgsSchema = external_exports.object({}).strict();
-    ListProjectsResultSchema = external_exports.object({
-      projects: external_exports.array(ProjectWithStatusSchema)
-    }).strict();
-    GetProjectArgsSchema = external_exports.object({
-      sessionId: external_exports.string().min(1)
-    }).strict();
-    GetProjectResultSchema = external_exports.object({
-      /** session 未绑 project / project 不存在时为 null（UI 走单栏 / 折叠） */
-      project: ProjectWithStatusSchema.nullable()
-    }).strict();
-    CreateProjectArgsSchema = external_exports.object({
-      /** 必填：caller session，daemon 自动绑过去（spec 2026-06-02 §3 invariant 1 Session ↔ 1 Project） */
-      sessionId: external_exports.string().min(1),
-      // .min(1)：改造前手写校验是 `!f.name` 明确拒空串；空 name 会让 projectDir('')
-      // 落到 projects 根目录，scaffold 往根上铺模板。
-      name: external_exports.string().min(1)
-    }).strict();
-    CreateProjectResultSchema = external_exports.object({
-      project: ProjectMetadataSchema
-    }).strict();
-    DeleteProjectArgsSchema = external_exports.object({
-      name: external_exports.string()
-    }).strict();
-    DeleteProjectResultSchema = external_exports.object({}).strict();
-    UpdateProjectPortArgsSchema = external_exports.object({
-      name: external_exports.string(),
-      newPort: external_exports.number().int()
-    }).strict();
-    UpdateProjectPortResultSchema = external_exports.object({
-      project: ProjectMetadataSchema
-    }).strict();
-    SetProdUrlArgsSchema = external_exports.object({
-      name: external_exports.string().regex(projectNameRegex),
-      url: external_exports.string().url()
-    }).strict();
-    SetProdUrlResultSchema = external_exports.object({
-      project: ProjectMetadataSchema
-    }).strict();
-    StartDevServerArgsSchema = external_exports.object({
-      sessionId: external_exports.string().min(1),
-      force: external_exports.boolean().optional()
-    }).strict();
-    StartDevServerResultSchema = external_exports.object({
-      project: ProjectMetadataSchema
-    }).strict();
-    ASSISTANT_REPORTABLE_STAGES = [
-      "installing",
-      "failed"
-    ];
-    ReportStageArgsSchema = external_exports.object({
-      sessionId: external_exports.string().min(1),
-      stage: external_exports.enum(ASSISTANT_REPORTABLE_STAGES),
-      /** stage='failed' 时必填的原因（一句话），其它 stage optional */
-      reason: external_exports.string().optional()
-    }).strict();
-    ReportStageResultSchema = external_exports.object({
-      ok: external_exports.literal(true)
-    }).strict();
-    StopDevServerArgsSchema = external_exports.object({
-      sessionId: external_exports.string().min(1)
-    }).strict();
-    StopDevServerResultSchema = external_exports.object({
-      ok: external_exports.literal(true)
-    }).strict();
-    AppBuilderProjectUpdatedEventSchema = external_exports.object({
-      type: external_exports.literal("appBuilder:project-updated"),
-      project: ProjectWithStatusSchema,
-      stage: ProjectStageSchema,
-      /** stage='failed' 时的失败原因 */
-      stageReason: external_exports.string().optional()
-    }).strict();
-    PublishArgsSchema = external_exports.object({
-      name: external_exports.string().regex(projectNameRegex)
-    });
-    PublishResultSchema = external_exports.object({
-      jobId: external_exports.string().min(1),
-      status: external_exports.enum(["started", "already-publishing"])
-    }).strict();
-    DismissPublishJobArgsSchema = external_exports.object({
-      name: external_exports.string().regex(projectNameRegex)
-    });
-    DismissPublishJobResultSchema = external_exports.object({
-      ok: external_exports.literal(true)
-    }).strict();
-    AppBuilderPublishProgressEventSchema = external_exports.object({
-      type: external_exports.literal("appBuilder:publish-progress"),
-      name: external_exports.string().regex(projectNameRegex),
-      jobId: external_exports.string().min(1),
-      stage: external_exports.enum(["build", "deploy", "verify"]),
-      status: external_exports.enum(["started", "completed"])
-    }).strict();
-    AppBuilderPublishFailedEventSchema = external_exports.object({
-      type: external_exports.literal("appBuilder:publish-failed"),
-      name: external_exports.string().regex(projectNameRegex),
-      jobId: external_exports.string().min(1),
-      stage: external_exports.enum(["build", "deploy", "verify", "unknown"]),
-      errorSummary: external_exports.string()
-    }).strict();
   }
 });
 
@@ -8900,7 +8706,7 @@ var init_methods = __esm({
         args: SessionUpdateArgs
       },
       "session:delete": {
-        summary: "\u5220\u4F1A\u8BDD\uFF1A\u505C\u8FDB\u7A0B + \u5220 SessionFile\uFF0C\u5E76\u8054\u52A8\u6E05\u7406\u7ED1\u5B9A\u7684 app-builder project",
+        summary: "\u5220\u4F1A\u8BDD\uFF1A\u505C\u8FDB\u7A0B + \u5220 SessionFile",
         args: SessionIdArgs
       },
       "session:send": {
@@ -9491,50 +9297,6 @@ var init_methods = __esm({
       "device:connections": {
         summary: '\u5217\u51FA\u672C daemon \u5F53\u524D\u6240\u6709 owner WS \u8FDE\u63A5\uFF08\u672C\u673A UI / \u624B\u673A / \u7B2C\u4E8C\u53F0\u684C\u9762\uFF09+ \u5404\u81EA clientInfo\u3002owner-only\uFF1Bguest \u8FDE\u63A5\u4E0D\u5728\u5217\uFF08\u4E0D\u662F"\u6211\u7684\u8BBE\u5907"\u4E14\u4E0D\u5411 UI \u6CC4\u9732 guest \u4FE1\u606F\uFF09',
         args: NO_ARGS
-      },
-      "appBuilder:listProjects": {
-        summary: "\u5217\u51FA app-builder project\uFF08\u542B dev server \u72B6\u6001\uFF09",
-        args: ListProjectsArgsSchema
-      },
-      "appBuilder:getProject": {
-        summary: "\u6309 sessionId \u53D6\u5355\u4E2A\u7ED1\u5B9A\u7684 project\uFF08\u542B status\uFF09",
-        args: GetProjectArgsSchema
-      },
-      "appBuilder:createProject": {
-        summary: "\u7ED9\u4F1A\u8BDD\u7ED1\u5B9A\u65B0 project\uFF1A\u6821\u9A8C\u540D + \u4ECE PROJECT_PORT_MIN..MAX \u6BB5\uFF08\u5F53\u524D 6173-6272\uFF09\u5206\u914D\u672A\u5360\u7528\u7AEF\u53E3\uFF08\u8DE8 user \u5168\u5C40\u552F\u4E00\uFF0C\u6C60\u6EE1\u62A5\u9519\uFF09+ \u5EFA\u76EE\u5F55\u5199\u5143\u6570\u636E + **\u540C\u6B65 scaffold**\uFF08spawn \u811A\u672C\u628A nestjs-react \u6A21\u677F\u62F7\u8FDB\u53BB\uFF1B\u5931\u8D25\u4F1A\u5220\u6389\u521A\u5EFA\u7684\u76EE\u5F55\u518D\u629B INTERNAL\uFF0C\u4E0D\u7559\u534A\u6210\u54C1\uFF09\u3002**\u88C5\u4F9D\u8D56\u548C\u8D77 dev server \u90FD\u4E0D\u5728\u8FD9\u91CC**\uFF1A\u843D\u5730 stage=install-pending\uFF0C\u8C03\u7528\u65B9\u81EA\u5DF1 pnpm install + appBuilder:reportStage + appBuilder:startDevServer",
-        args: CreateProjectArgsSchema
-      },
-      "appBuilder:deleteProject": {
-        summary: "\u505C dev server + \u5220 project \u76EE\u5F55\uFF08\u7ED1\u5B9A\u7684\u4F1A\u8BDD\u4E0D\u5728\u8FD9\u91CC\u5220\uFF09",
-        args: DeleteProjectArgsSchema
-      },
-      "appBuilder:updateProjectPort": {
-        summary: "\u6539 dev server \u7AEF\u53E3\uFF08\u6821\u9A8C\u5728 PROJECT_PORT_MIN..MAX \u6BB5\u5185\u3001\u5F53\u524D 6173-6272\uFF1B**\u649E\u8F66\u53EA\u67E5\u8C03\u7528\u65B9\u81EA\u5DF1\u540D\u4E0B\u7684 project**\uFF0C\u4E0D\u50CF createProject \u90A3\u6837\u8DE8 user \u67E5\uFF09\uFF1A\u505C\u65E7\u7AEF\u53E3 dev server + \u6539 .clawd-project.json + \u7F6E stage=stopped\u3002**\u4E0D\u81EA\u52A8\u62C9\u8D77\u65B0\u7AEF\u53E3\u7684 dev server**\u2014\u2014\u8981\u8D77\u5F97\u518D\u8C03 appBuilder:startDevServer\uFF08\u90A3\u6761\u624D\u8D70 readiness probe\uFF09",
-        args: UpdateProjectPortArgsSchema
-      },
-      "appBuilder:setProdUrl": {
-        summary: "\u53D1\u5E03\u4E0A\u7EBF\u540E\u56DE\u586B\u7EBF\u4E0A\u5730\u5740\u5230 .clawd-project.json",
-        args: SetProdUrlArgsSchema
-      },
-      "appBuilder:startDevServer": {
-        summary: "scaffold + \u4F9D\u8D56\u5B89\u88C5\u5B8C\u6210\u540E\u663E\u5F0F\u62C9\u8D77 dev server\uFF08createProject \u4E0D\u518D\u81EA\u52A8\u8D77\uFF09",
-        args: StartDevServerArgsSchema
-      },
-      "appBuilder:reportStage": {
-        summary: "\u4E0A\u62A5\u811A\u624B\u67B6\u9636\u6BB5\uFF08scaffolding / installing / failed \u7B49\uFF09\uFF0Cdaemon \u5E7F\u64AD\u5E27\u8BA9 UI \u5207 PreviewPane",
-        args: ReportStageArgsSchema
-      },
-      "appBuilder:stopDevServer": {
-        summary: "\u6536\u8D77\u9884\u89C8\uFF1A\u505C\u6389 dev server\uFF08\u5BF9\u79F0 startDevServer\uFF09",
-        args: StopDevServerArgsSchema
-      },
-      "appBuilder:publish": {
-        summary: "\u53D1\u5E03\u4E0A\u7EBF\uFF1A\u4E32\u884C\u5316 spawn publish.sh \u5E76\u5E7F\u64AD\u9636\u6BB5\u8FDB\u5EA6\u5E27\uFF1B\u540C project \u5DF2\u6709 in-flight job \u65F6\u8FD4\u56DE already-publishing",
-        args: PublishArgsSchema
-      },
-      "appBuilder:dismissPublishJob": {
-        summary: "\u53D6\u6D88 in-flight publish\uFF08SIGTERM \u5B50\u8FDB\u7A0B\uFF09\u6216\u6E05\u6389 daemon \u5D29\u6E83\u7559\u4E0B\u7684\u6B8B\u9AB8 publishJob \u5B57\u6BB5",
-        args: DismissPublishJobArgsSchema
       }
     };
     METHOD_NAMES = Object.keys(METHOD_DOCS);
@@ -9602,10 +9364,6 @@ var init_errors2 = __esm({
       // daemon 进程身份未激活为飞书 unionId 时，FEISHU_GATED_METHODS 内的 RPC 一律返回此错误；
       // UI 据此显示登录引导（区别于 UNAUTHORIZED 的越权语义）。
       FEISHU_LOGIN_REQUIRED: "FEISHU_LOGIN_REQUIRED",
-      // app-builder 单栏默认 refactor (spec 2026-06-02-app-builder-single-pane-default-design)：
-      // appBuilder:createProject 加 personaId + session 未绑校验后抛的两个错码。
-      WRONG_PERSONA: "WRONG_PERSONA",
-      SESSION_ALREADY_BOUND: "SESSION_ALREADY_BOUND",
       // 2026-07-02 unified people sidebar: contact:pin 时 deviceId 不在 store（可能被别处删了）
       CONTACT_NOT_FOUND: "CONTACT_NOT_FOUND",
       // 统一 RPC 鉴权（spec 2026-07-28）：personaDispatch:get 查不到台账行，或 guest ctx
@@ -11021,8 +10779,8 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs92 = require("fs");
-    var EventEmitter3 = require("events");
+    var fs90 = require("fs");
+    var EventEmitter2 = require("events");
     var inherits = require("util").inherits;
     var path101 = require("path");
     var sleep2 = require_atomic_sleep();
@@ -11078,20 +10836,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs92.mkdirSync(path101.dirname(file), { recursive: true });
-          const fd = fs92.openSync(file, flags, mode);
+          if (sonic.mkdir) fs90.mkdirSync(path101.dirname(file), { recursive: true });
+          const fd = fs90.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs92.mkdir(path101.dirname(file), { recursive: true }, (err) => {
+        fs90.mkdir(path101.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs92.open(file, flags, mode, fileOpened);
+          fs90.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs92.open(file, flags, mode, fileOpened);
+        fs90.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -11132,8 +10890,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs92.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs92.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs90.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs90.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -11142,15 +10900,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs92.writeSync(this.fd, this._writingBuf);
+            return fs90.writeSync(this.fd, this._writingBuf);
           }
-          return fs92.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs90.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs92.write(this.fd, this._writingBuf, this.release);
+            return fs90.write(this.fd, this._writingBuf, this.release);
           }
-          return fs92.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs90.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -11207,7 +10965,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs92.fsyncSync(this.fd);
+          fs90.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -11259,7 +11017,7 @@ var require_sonic_boom = __commonJS({
       sonic._asyncDrainScheduled = false;
       sonic.emit("drain");
     }
-    inherits(SonicBoom, EventEmitter3);
+    inherits(SonicBoom, EventEmitter2);
     function mergeBuf(bufs, len) {
       if (bufs.length === 0) {
         return kEmptyBuffer;
@@ -11321,7 +11079,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs92.fsync(this.fd, (err) => {
+            fs90.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -11423,7 +11181,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs92.close(fd, (err) => {
+          fs90.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -11472,7 +11230,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs92.writeSync(this.fd, buf) : fs92.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs90.writeSync(this.fd, buf) : fs90.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -11488,7 +11246,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs92.fsyncSync(this.fd);
+        fs90.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -11509,7 +11267,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs92.writeSync(this.fd, buf);
+          const n = fs90.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -11537,13 +11295,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs92.writeSync(this.fd, this._writingBuf) : fs92.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs90.writeSync(this.fd, this._writingBuf) : fs90.writeSync(this.fd, this._writingBuf, "utf8");
           release2(null, written);
         } catch (err) {
           release2(err);
         }
       } else {
-        fs92.write(this.fd, this._writingBuf, release2);
+        fs90.write(this.fd, this._writingBuf, release2);
       }
     }
     function actualWriteBuffer() {
@@ -11552,7 +11310,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs92.writeSync(this.fd, this._writingBuf);
+          const written = fs90.writeSync(this.fd, this._writingBuf);
           release2(null, written);
         } catch (err) {
           release2(err);
@@ -11561,7 +11319,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs92.write(this.fd, this._writingBuf, release2);
+        fs90.write(this.fd, this._writingBuf, release2);
       }
     }
     function actualClose(sonic) {
@@ -11577,12 +11335,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs92.fsync(sonic.fd, closeWrapped);
+        fs90.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs92.close(sonic.fd, done);
+          fs90.close(sonic.fd, done);
         } else {
           done();
         }
@@ -11837,9 +11595,9 @@ var require_thread_stream = __commonJS({
   "../node_modules/.pnpm/thread-stream@3.1.0/node_modules/thread-stream/index.js"(exports2, module2) {
     "use strict";
     var { version: version2 } = require_package();
-    var { EventEmitter: EventEmitter3 } = require("events");
+    var { EventEmitter: EventEmitter2 } = require("events");
     var { Worker } = require("worker_threads");
-    var { join: join20 } = require("path");
+    var { join: join17 } = require("path");
     var { pathToFileURL } = require("url");
     var { wait } = require_wait();
     var {
@@ -11875,7 +11633,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join20(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join17(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         trackUnmanagedFds: false,
@@ -11993,7 +11751,7 @@ var require_thread_stream = __commonJS({
       stream.worker.off("exit", onWorkerExit);
       destroy(stream, code !== 0 ? new Error("the worker thread exited") : null);
     }
-    var ThreadStream = class extends EventEmitter3 {
+    var ThreadStream = class extends EventEmitter2 {
       constructor(opts = {}) {
         super();
         if (opts.bufferSize < 4) {
@@ -12261,7 +12019,7 @@ var require_transport = __commonJS({
     "use strict";
     var { createRequire: createRequire2 } = require("module");
     var getCallers = require_caller();
-    var { join: join20, isAbsolute: isAbsolute4, sep: sep4 } = require("path");
+    var { join: join17, isAbsolute: isAbsolute4, sep: sep4 } = require("path");
     var sleep2 = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
     var ThreadStream = require_thread_stream();
@@ -12324,7 +12082,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join20(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join17(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -12342,7 +12100,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline3) {
-        target = bundlerOverrides["pino-worker"] || join20(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join17(__dirname, "worker.js");
         options.pipelines = [pipeline3.map((dest) => {
           return {
             ...dest,
@@ -12364,7 +12122,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join20(__dirname, "..", "file.js");
+          return join17(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -12951,7 +12709,7 @@ var require_meta = __commonJS({
 var require_proto = __commonJS({
   "../node_modules/.pnpm/pino@9.14.0/node_modules/pino/lib/proto.js"(exports2, module2) {
     "use strict";
-    var { EventEmitter: EventEmitter3 } = require("events");
+    var { EventEmitter: EventEmitter2 } = require("events");
     var {
       lsCacheSym,
       levelValSym,
@@ -13033,7 +12791,7 @@ var require_proto = __commonJS({
       [getLevelSym]: getLevel,
       [setLevelSym]: setLevel
     };
-    Object.setPrototypeOf(prototype, EventEmitter3.prototype);
+    Object.setPrototypeOf(prototype, EventEmitter2.prototype);
     module2.exports = function() {
       return Object.create(prototype);
     };
@@ -13354,7 +13112,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join20 = ",";
+            let join17 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -13368,7 +13126,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join20 = `,
+                join17 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -13376,13 +13134,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join20;
+                res += join17;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join20}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join17}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -13403,7 +13161,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join20 = `,
+              join17 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -13417,13 +13175,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join20;
+                separator = join17;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join20;
+              separator = join17;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -13464,7 +13222,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join20 = ",";
+            let join17 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -13477,7 +13235,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join20 = `,
+                join17 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -13485,13 +13243,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join20;
+                res += join17;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join20}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join17}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -13504,7 +13262,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join20 = `,
+              join17 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -13513,7 +13271,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join20;
+                separator = join17;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -13571,20 +13329,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join21 = `,
+              const join18 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join21;
+                res2 += join18;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join21}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join18}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -13600,16 +13358,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join20 = `,
+            const join17 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join20, maximumBreadth);
+              res += stringifyTypedArray(value, join17, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join20;
+              separator = join17;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -13620,13 +13378,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join20;
+                separator = join17;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join20;
+              separator = join17;
             }
             if (separator !== "") {
               res = `
@@ -32864,10 +32622,10 @@ var require_extension = __commonJS({
 var require_websocket = __commonJS({
   "../node_modules/.pnpm/ws@8.20.0/node_modules/ws/lib/websocket.js"(exports2, module2) {
     "use strict";
-    var EventEmitter3 = require("events");
+    var EventEmitter2 = require("events");
     var https = require("https");
-    var http3 = require("http");
-    var net3 = require("net");
+    var http2 = require("http");
+    var net2 = require("net");
     var tls = require("tls");
     var { randomBytes, createHash: createHash2 } = require("crypto");
     var { Duplex, Readable: Readable3 } = require("stream");
@@ -32896,7 +32654,7 @@ var require_websocket = __commonJS({
     var protocolVersions = [8, 13];
     var readyStates = ["CONNECTING", "OPEN", "CLOSING", "CLOSED"];
     var subprotocolRegex = /^[!#$%&'*+\-.0-9A-Z^_`|a-z~]+$/;
-    var WebSocket2 = class _WebSocket extends EventEmitter3 {
+    var WebSocket2 = class _WebSocket extends EventEmitter2 {
       /**
        * Create a new `WebSocket`.
        *
@@ -33400,7 +33158,7 @@ var require_websocket = __commonJS({
       }
       const defaultPort = isSecure ? 443 : 80;
       const key = randomBytes(16).toString("base64");
-      const request = isSecure ? https.request : http3.request;
+      const request = isSecure ? https.request : http2.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
       opts.createConnection = opts.createConnection || (isSecure ? tlsConnect : netConnect);
@@ -33601,12 +33359,12 @@ var require_websocket = __commonJS({
     }
     function netConnect(options) {
       options.path = options.socketPath;
-      return net3.connect(options);
+      return net2.connect(options);
     }
     function tlsConnect(options) {
       options.path = void 0;
       if (!options.servername && options.servername !== "") {
-        options.servername = net3.isIP(options.host) ? "" : options.host;
+        options.servername = net2.isIP(options.host) ? "" : options.host;
       }
       return tls.connect(options);
     }
@@ -33893,8 +33651,8 @@ var require_subprotocol = __commonJS({
 var require_websocket_server = __commonJS({
   "../node_modules/.pnpm/ws@8.20.0/node_modules/ws/lib/websocket-server.js"(exports2, module2) {
     "use strict";
-    var EventEmitter3 = require("events");
-    var http3 = require("http");
+    var EventEmitter2 = require("events");
+    var http2 = require("http");
     var { Duplex } = require("stream");
     var { createHash: createHash2 } = require("crypto");
     var extension2 = require_extension();
@@ -33906,7 +33664,7 @@ var require_websocket_server = __commonJS({
     var RUNNING = 0;
     var CLOSING = 1;
     var CLOSED = 2;
-    var WebSocketServer2 = class extends EventEmitter3 {
+    var WebSocketServer2 = class extends EventEmitter2 {
       /**
        * Create a `WebSocketServer` instance.
        *
@@ -33969,8 +33727,8 @@ var require_websocket_server = __commonJS({
           );
         }
         if (options.port != null) {
-          this._server = http3.createServer((req, res) => {
-            const body = http3.STATUS_CODES[426];
+          this._server = http2.createServer((req, res) => {
+            const body = http2.STATUS_CODES[426];
             res.writeHead(426, {
               "Content-Length": body.length,
               "Content-Type": "text/plain"
@@ -34257,7 +34015,7 @@ var require_websocket_server = __commonJS({
       this.destroy();
     }
     function abortHandshake(socket, code, message, headers) {
-      message = message || http3.STATUS_CODES[code];
+      message = message || http2.STATUS_CODES[code];
       headers = {
         Connection: "close",
         "Content-Type": "text/html",
@@ -34266,7 +34024,7 @@ var require_websocket_server = __commonJS({
       };
       socket.once("finish", socket.destroy);
       socket.end(
-        `HTTP/1.1 ${code} ${http3.STATUS_CODES[code]}\r
+        `HTTP/1.1 ${code} ${http2.STATUS_CODES[code]}\r
 ` + Object.keys(headers).map((h) => `${h}: ${headers[h]}`).join("\r\n") + "\r\n\r\n" + message
       );
     }
@@ -34569,7 +34327,7 @@ var require_BufferList = __commonJS({
         this.head = this.tail = null;
         this.length = 0;
       };
-      BufferList.prototype.join = function join20(s) {
+      BufferList.prototype.join = function join17(s) {
         if (this.length === 0) return "";
         var p2 = this.head;
         var ret = "" + p2.data;
@@ -44026,7 +43784,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path83.default.dirname(opts.recordPath);
+  const dir = import_node_path80.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -44040,8 +43798,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs64.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs64.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs61.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs61.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -44066,12 +43824,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs64, import_node_path83;
+var import_node_fs61, import_node_path80;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs64 = __toESM(require("fs"), 1);
-    import_node_path83 = __toESM(require("path"), 1);
+    import_node_fs61 = __toESM(require("fs"), 1);
+    import_node_path80 = __toESM(require("path"), 1);
   }
 });
 
@@ -44114,7 +43872,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs65.mkdtempSync)(import_node_path84.default.join(import_node_os29.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs62.mkdtempSync)(import_node_path81.default.join(import_node_os29.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -44275,19 +44033,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs65.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs62.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs65, import_node_os29, import_node_path84;
+var import_node_fs62, import_node_os29, import_node_path81;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs65 = require("fs");
+    import_node_fs62 = require("fs");
     import_node_os29 = __toESM(require("os"), 1);
-    import_node_path84 = __toESM(require("path"), 1);
+    import_node_path81 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -44507,8 +44265,6 @@ function resolveConfig(opts) {
   const frpcBinary = env.CLAWD_FRPC_BIN ?? null;
   const rawMode = env.CLAWD_CC_MODE;
   const mode = DAEMON_MODE_VALUES.includes(rawMode ?? "") ? rawMode : "sdk";
-  const filePreviewPorts = Array.isArray(fileCfg.previewPorts) ? fileCfg.previewPorts.map((n) => Number(n)).filter((n) => Number.isInteger(n) && n > 0) : null;
-  const previewPorts = env.CLAWD_PREVIEW_PORTS ? env.CLAWD_PREVIEW_PORTS.split(",").map((s) => Number(s.trim())).filter((n) => Number.isInteger(n) && n > 0) : filePreviewPorts && filePreviewPorts.length > 0 ? filePreviewPorts : null;
   const ownerIdleKillDelayMs = resolveIdleKillMs(env.CLAWD_OWNER_IDLE_KILL_DELAY_MS) ?? resolveIdleKillMs(fileCfg.ownerIdleKillDelayMs) ?? DEFAULT_OWNER_IDLE_KILL_DELAY_MS;
   const logShipping = resolveLogShipping(
     fileCfg.logShipping,
@@ -44526,7 +44282,6 @@ function resolveConfig(opts) {
     noTunnelPersist,
     frpcBinary,
     mode,
-    previewPorts,
     logShipping,
     ownerIdleKillDelayMs
   };
@@ -44562,10 +44317,10 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path82 = __toESM(require("path"), 1);
-var import_node_fs63 = __toESM(require("fs"), 1);
+var import_node_path79 = __toESM(require("path"), 1);
+var import_node_fs60 = __toESM(require("fs"), 1);
 var import_node_os28 = __toESM(require("os"), 1);
-var import_node_crypto23 = require("crypto");
+var import_node_crypto22 = require("crypto");
 var import_node_url5 = require("url");
 
 // src/logger.ts
@@ -45871,6 +45626,8 @@ function buildSpawnContext(state, deps) {
   if (dispatchId) env.CLAWD_DISPATCH_ID = dispatchId;
   const personaId2 = file.ownerPersonaId;
   if (personaId2) env.CLAWD_PERSONA_ID = personaId2;
+  const userWorkDir = state.subSessionMeta?.userWorkDir;
+  if (userWorkDir) env.CLAWD_APP_BUILDER_ROOT = userWorkDir;
   const mcpConfigs = (deps.getMcpConfigs?.() ?? []).filter(
     (c) => !c.personas || personaId2 != null && c.personas.includes(personaId2)
   );
@@ -47651,14 +47408,6 @@ var SessionManager = class {
   // guest sessions 由 handlers/session.ts list 处按 ctx.principal.kind === 'guest' 做权限过滤
   // (creatorPrincipalId === capId), 这里仅负责数据源汇总.
   // listener sub-session 不走这条（listener 走 persona:listSubSessions RPC 单独入口）。
-  /**
-   * 发布上线脚手架化 (spec 2026-06-03-app-builder-publish-scaffold-design §5.2.2)：
-   * 反查绑定到指定 app-builder project 的 session。按 invariant "1 Session ↔ 1 Project"
-   * 应当唯一；找不到 → undefined（项目已成孤儿）。
-   */
-  findOwnedSessionByAppBuilderProject(projectName) {
-    return this.listAllOwned().find((file) => file.appBuilderProject === projectName);
-  }
   listAllOwned() {
     const out = [];
     out.push(...this.deps.store.list());
@@ -47967,7 +47716,6 @@ var SessionManager = class {
       // projectPath 只在 persona+project 组合写入（spec 2026-08-17-projects-sidebar §3.2）；
       // project-only 会话 cwd 即 project 路径，靠 UI 前缀匹配归组
       ...args.ownerPersonaId && args.projectPath ? { projectPath: args.projectPath } : {},
-      appBuilderProject: args.appBuilderProject,
       ephemeral: args.ephemeral,
       creatorPrincipalId,
       creatorDisplayName,
@@ -55957,18 +55705,22 @@ async function writeTemplates(dir) {
   await import_promises5.default.mkdir(import_node_path34.default.dirname(wf), { recursive: true });
   await import_promises5.default.writeFile(wf, WORKFLOW_TEMPLATE);
 }
-async function ensureRepo(exec, args) {
-  const { dir, org, personaId: personaId2 } = args;
-  const existing = await repoInfo(exec, dir);
-  if (existing) return { created: false, url: existing.url };
+var RepoAlreadyExistsError = class extends RepoError {
+  constructor(slug) {
+    super(`\u7EC4\u7EC7\u91CC\u5DF2\u7ECF\u6709 https://github.com/${slug} \u4E86`);
+    this.slug = slug;
+  }
+  slug;
+};
+async function createOrgRepo(exec, args) {
+  const { dir, org, repoName, message } = args;
   if (!await isToplevel(exec, dir)) {
     await mustGit(exec, dir, ["init", "-b", "main"], "\u521D\u59CB\u5316\u4ED3\u5E93");
   }
-  await writeTemplates(dir);
   const identity = await identityArgs(exec, dir);
   await mustGit(exec, dir, ["add", "-A"], "\u6682\u5B58\u6587\u4EF6");
-  await mustGit(exec, dir, [...identity, "commit", "--allow-empty", "-m", "clawd: \u4E0A\u4E91"], "\u9996\u6B21\u63D0\u4EA4");
-  const slug = `${org}/${personaId2}`;
+  await mustGit(exec, dir, [...identity, "commit", "--allow-empty", "-m", message], "\u9996\u6B21\u63D0\u4EA4");
+  const slug = `${org}/${repoName}`;
   const r = await exec(
     "gh",
     ["repo", "create", slug, "--private", "--source", dir, "--remote", "origin", "--push"],
@@ -55977,16 +55729,30 @@ async function ensureRepo(exec, args) {
   if (r.spawnError) throw new RepoError(`\u672C\u673A\u8DD1\u4E0D\u4E86 gh\uFF1A${r.spawnError}`);
   if (r.code !== 0) {
     const err = tail(r.stderr) || tail(r.stdout);
-    if (/already exists/i.test(err)) {
+    if (/already exists/i.test(err)) throw new RepoAlreadyExistsError(slug);
+    throw new RepoError(`\u5EFA\u4ED3\u5E93\u6CA1\u6210\uFF08gh repo create \u9000\u51FA\u7801 ${r.code}\uFF09\uFF1A${err}`);
+  }
+  const info = await repoInfo(exec, dir);
+  return { slug, url: info?.url ?? `https://github.com/${slug}` };
+}
+async function ensureRepo(exec, args) {
+  const { dir, org, personaId: personaId2 } = args;
+  const existing = await repoInfo(exec, dir);
+  if (existing) return { created: false, url: existing.url };
+  await writeTemplates(dir);
+  let created;
+  try {
+    created = await createOrgRepo(exec, { dir, org, repoName: personaId2, message: "clawd: \u4E0A\u4E91" });
+  } catch (err) {
+    if (err instanceof RepoAlreadyExistsError) {
       throw new RepoError(
-        `\u7EC4\u7EC7\u91CC\u5DF2\u7ECF\u6709 https://github.com/${slug} \u4E86\uFF0C\u591A\u534A\u662F\u522B\u4EBA\u5DF2\u7ECF\u53D1\u8FC7\u8FD9\u4E2A persona\u3002\u4E00\u4E2A persona \u53EA\u8BE5\u6709\u4E00\u4E2A\u4ED3\u5E93\uFF1A\u8981\u63A5\u7740\u7528\u90A3\u4E2A\u4ED3\u5E93\u7684\u8BDD\uFF0C\u628A\u672C\u5730\u76EE\u5F55\u6362\u6210\u5B83\u7684 clone\u3002`
+        `\u7EC4\u7EC7\u91CC\u5DF2\u7ECF\u6709 https://github.com/${err.slug} \u4E86\uFF0C\u591A\u534A\u662F\u522B\u4EBA\u5DF2\u7ECF\u53D1\u8FC7\u8FD9\u4E2A persona\u3002\u4E00\u4E2A persona \u53EA\u8BE5\u6709\u4E00\u4E2A\u4ED3\u5E93\uFF1A\u8981\u63A5\u7740\u7528\u90A3\u4E2A\u4ED3\u5E93\u7684\u8BDD\uFF0C\u628A\u672C\u5730\u76EE\u5F55\u6362\u6210\u5B83\u7684 clone\u3002`
       );
     }
-    throw new RepoError(`\u5EFA\u4ED3\u5E93\u6CA1\u6210\uFF08gh repo create \u9000\u51FA\u7801 ${r.code}\uFF09\uFF1A${err}`);
+    throw err;
   }
-  await enableActions(exec, slug);
-  const info = await repoInfo(exec, dir);
-  return { created: true, url: info?.url ?? `https://github.com/${slug}` };
+  await enableActions(exec, created.slug);
+  return { created: true, url: created.url };
 }
 async function enableActions(exec, slug) {
   await exec(
@@ -56154,7 +55920,7 @@ var SCANNABLE_ASSETS = [
   },
   {
     name: "app-builder-plugin",
-    what: "clawd-app-builder MCP server \u7684\u6784\u5EFA\u4EA7\u7269\uFF08daemon \u7684 tsup \u4EA7\u7269\uFF0C\u672C\u673A\u4E0D\u5728\u76D8\u4E0A\u5355\u72EC\u5B58\u4E00\u4EFD\uFF09\u3002**\u5224\u636E**\uFF1Apersona \u7684\u4E3B\u5E72\u52A8\u4F5C\u8D70\u7684\u662F daemon \u63D0\u4F9B\u7684 MCP\uFF08clawd-rpc / app-builder \u90A3\u7C7B\uFF09\u65F6\uFF0C\u4E91\u4E0A\u5BB9\u5668\u91CC\u6CA1\u6709 daemon\uFF0C\u8DD1\u7684\u5C31\u662F\u8FD9\u4EFD\u4EA7\u7269\u2014\u2014\u7528\u5230\u5B83\u5C31\u62A5\u4E00\u6761 asset\uFF0C\u5426\u5219\u5B83\u8FDB\u4E0D\u4E86\u955C\u50CF\u3002"
+    what: "clawd-app-builder MCP server \u7684\u6784\u5EFA\u4EA7\u7269\uFF08daemon \u7684 tsup \u4EA7\u7269\uFF0C\u672C\u673A\u4E0D\u5728\u76D8\u4E0A\u5355\u72EC\u5B58\u4E00\u4EFD\uFF09\u3002**\u5224\u636E**\uFF1Apersona \u7684\u4E3B\u5E72\u52A8\u4F5C\u8D70 clawd-app-builder \u8FD9\u4E2A MCP \u65F6\uFF0C\u4E91\u4E0A\u5BB9\u5668\u91CC\u8DD1\u7684\u5C31\u662F\u8FD9\u4EFD\u4EA7\u7269\u2014\u2014\u7528\u5230\u5B83\u5C31\u62A5\u4E00\u6761 asset\uFF0C\u5426\u5219\u5B83\u8FDB\u4E0D\u4E86\u955C\u50CF\u3002"
   }
 ];
 function staleScannerAssets(scan, known = SCANNABLE_ASSETS) {
@@ -60954,59 +60720,8 @@ var import_websocket_server = __toESM(require_websocket_server(), 1);
 var wrapper_default = import_websocket.default;
 
 // src/transport/local-ws-server.ts
-var import_node_http2 = __toESM(require("http"), 1);
-var import_node_crypto10 = require("crypto");
-
-// src/transport/preview-proxy.ts
 var import_node_http = __toESM(require("http"), 1);
-var import_node_net = __toESM(require("net"), 1);
-var PREVIEW_RE = /^\/preview\/(\d+)(?:\/.*)?$/;
-function matchPreviewPort(pathname) {
-  const m2 = pathname.match(PREVIEW_RE);
-  return m2 ? Number(m2[1]) : null;
-}
-function isPreviewPortAllowed(port, cfg) {
-  return cfg.allowedPorts.includes(port);
-}
-function proxyPreviewHttp(req, res, port) {
-  return new Promise((resolve9) => {
-    const upstream = import_node_http.default.request(
-      { host: "localhost", port, method: req.method, path: req.url, headers: req.headers },
-      (upRes) => {
-        res.writeHead(upRes.statusCode || 502, upRes.headers);
-        upRes.pipe(res);
-        upRes.on("end", () => resolve9());
-      }
-    );
-    upstream.on("error", (e) => {
-      if (!res.headersSent) {
-        res.writeHead(502, { "content-type": "text/plain; charset=utf-8" });
-      }
-      res.end(`preview upstream error: ${e.message}`);
-      resolve9();
-    });
-    req.pipe(upstream);
-  });
-}
-function proxyPreviewUpgrade(req, socket, head, port) {
-  const upstream = import_node_net.default.connect(port, "localhost", () => {
-    let raw = `${req.method} ${req.url} HTTP/1.1\r
-`;
-    for (let i = 0; i < req.rawHeaders.length; i += 2) {
-      raw += `${req.rawHeaders[i]}: ${req.rawHeaders[i + 1]}\r
-`;
-    }
-    raw += "\r\n";
-    upstream.write(raw);
-    if (head && head.length) upstream.write(head);
-    upstream.pipe(socket);
-    socket.pipe(upstream);
-  });
-  upstream.on("error", () => socket.destroy());
-  socket.on("error", () => upstream.destroy());
-}
-
-// src/transport/local-ws-server.ts
+var import_node_crypto10 = require("crypto");
 var LocalWsServer = class {
   constructor(opts) {
     this.opts = opts;
@@ -61027,25 +60742,9 @@ var LocalWsServer = class {
   async start() {
     const host = this.opts.host ?? "127.0.0.1";
     await new Promise((resolve9, reject) => {
-      const httpServer = import_node_http2.default.createServer((req, res) => this.handleHttpRequest(req, res));
+      const httpServer = import_node_http.default.createServer((req, res) => this.handleHttpRequest(req, res));
       const wss = new import_websocket_server.default({ noServer: true, clientTracking: true });
       httpServer.on("upgrade", (req, socket, head) => {
-        if (req.url?.startsWith("/preview/")) {
-          const pathname = (() => {
-            try {
-              return new URL(req.url, "http://localhost").pathname;
-            } catch {
-              return "/";
-            }
-          })();
-          const port = matchPreviewPort(pathname);
-          if (port != null && (this.opts.previewPorts ?? []).includes(port)) {
-            proxyPreviewUpgrade(req, socket, head, port);
-          } else {
-            socket.destroy();
-          }
-          return;
-        }
         wss.handleUpgrade(req, socket, head, (ws) => {
           this.routeConnection(ws, req);
         });
@@ -61129,7 +60828,7 @@ var LocalWsServer = class {
     }
   }
   // 仅广播给 owner 连接（跳过 guest ws）。用于 contact:added / contact:removed /
-  // contact:pinned / friend:reverseTokenOffered / appBuilder:project-updated 等
+  // contact:pinned / friend:reverseTokenOffered 等
   // owner-only push frame——guest 无需消费。noAuth localhost ws 无 ctx，视作 owner。
   broadcastToOwners(frame) {
     const gate = this.opts.authGate;
@@ -62654,15 +62353,6 @@ function createHttpRouter(deps) {
       if (broadcastAfterResponse?.length) deps.authedRpc.fanOutBroadcast?.(broadcastAfterResponse);
       return true;
     }
-    if (url.pathname.startsWith("/preview/")) {
-      const port = matchPreviewPort(url.pathname);
-      if (port != null && isPreviewPortAllowed(port, { allowedPorts: deps.previewPorts ?? [] })) {
-        await proxyPreviewHttp(req, res, port);
-        return true;
-      }
-      sendJson(res, 403, { code: "PREVIEW_PORT_FORBIDDEN", message: "preview port not allowed" });
-      return true;
-    }
     if (!url.pathname.startsWith("/session/") && !url.pathname.startsWith("/files/") && !url.pathname.startsWith("/share/md/") && url.pathname !== "/attachments/upload" && url.pathname !== "/extensions/import") {
       return false;
     }
@@ -64578,7 +64268,7 @@ var ServerKeyStore = class {
 init_protocol();
 
 // src/handlers/index.ts
-var import_node_path75 = __toESM(require("path"), 1);
+var import_node_path74 = __toESM(require("path"), 1);
 
 // src/handlers/session.ts
 init_protocol();
@@ -65098,29 +64788,6 @@ function buildSessionHandlers(deps) {
   const del = async (frame, _client, ctx) => {
     const args = SessionIdArgs.parse(frame);
     ensureSessionAccess(ctx, args.sessionId, "send");
-    const sessionFile = manager.findOwnedSession(args.sessionId);
-    const projectName = sessionFile?.appBuilderProject ?? null;
-    const projectStore = (sessionFile?.creatorPrincipalId ? deps.getProjectStore?.(sessionFile.creatorPrincipalId) : void 0) ?? deps.appBuilderStore;
-    if (projectName && deps.devServerLifecycle && projectStore) {
-      try {
-        await deps.devServerLifecycle.stopForProject(projectName);
-      } catch (err) {
-        deps.logger?.warn("session-delete.stop-dev-server-failed", {
-          sessionId: args.sessionId,
-          projectName,
-          error: err instanceof Error ? err.message : String(err)
-        });
-      }
-      try {
-        await projectStore.delete(projectName);
-      } catch (err) {
-        deps.logger?.warn("session-delete.delete-project-failed", {
-          sessionId: args.sessionId,
-          projectName,
-          error: err instanceof Error ? err.message : String(err)
-        });
-      }
-    }
     const { broadcast } = manager.delete(args);
     return {
       response: { type: "session:deleted", sessionId: args.sessionId },
@@ -66827,30 +66494,7 @@ var METHOD_GRANT_MAP = {
   // 设备目录 / 连接都是 owner 本机操作（用 owner 的 ttcJwt 找中心 server），guest 不可调
   "device:list": ADMIN_ANY,
   "device:connect": ADMIN_ANY,
-  "device:connections": ADMIN_ANY,
-  // ---- app-builder Project picker（spec 2026-06-01-app-builder-project-picker-design） ----
-  // owner-only：picker UI 给 owner 管理本机 build 中的 project（fs + 端口分配）。
-  // 即使 persona-app-builder 是 PreinstalledPersona，project 管理也属本机 owner 行为，
-  // 不暴露给 guest（远端接入者）。
-  "appBuilder:listProjects": ADMIN_ANY,
-  // getProject 走 capability-scoped（区别于其它 appBuilder 的 owner-only ADMIN_ANY）：mirror/people
-  // 的本机 owner 在远端是 guest，需能调 getProject 拿它 mirror 的 session 的 project。dispatcher
-  // 放行后由 handler 内 canAccessSession(read) 按 session 可见性授权（防 guest 越权拿别人 project）。
-  "appBuilder:getProject": CAPABILITY_SCOPED,
-  "appBuilder:createProject": ADMIN_ANY,
-  "appBuilder:deleteProject": ADMIN_ANY,
-  "appBuilder:updateProjectPort": ADMIN_ANY,
-  // people/mirror 协同写操作（spec 2026-06-04-people-mode-app-builder-write-and-push）：以下 5 个写
-  // method 走 CAPABILITY_SCOPED（不再 owner-only ADMIN_ANY），handler 内 ensureProjectWriteAccess
-  // 按 session 可见性（canAccessSession 'send'）授权——mirror 的本机 owner 在远端是 guest，能 mirror
-  // 该 session 就能操作它绑定的 project（发布凭证是 persona 共享资产，老板决策"统一 session 授权"）。
-  "appBuilder:setProdUrl": CAPABILITY_SCOPED,
-  "appBuilder:startDevServer": CAPABILITY_SCOPED,
-  // reportStage 仍 owner-only：assistant 走 HTTP RPC 上报（不过 WS admin grant），UI 不调它。
-  "appBuilder:reportStage": ADMIN_ANY,
-  "appBuilder:stopDevServer": CAPABILITY_SCOPED,
-  "appBuilder:publish": CAPABILITY_SCOPED,
-  "appBuilder:dismissPublishJob": CAPABILITY_SCOPED
+  "device:connections": ADMIN_ANY
 };
 var HUMAN_ONLY_METHODS = [
   "deploy:start",
@@ -66899,7 +66543,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.512".length > 0 ? "0.2.512" : "dev";
+var version = "0.2.514".length > 0 ? "0.2.514" : "dev";
 
 // src/cli-probe/probe.ts
 var fs77 = __toESM(require("fs"), 1);
@@ -67931,520 +67575,6 @@ function buildExtensionHandlers(deps) {
   };
 }
 
-// src/app-builder/kill-port.ts
-var import_node_child_process18 = require("child_process");
-async function killPortOccupants(port, ownedPids, logger) {
-  let pids;
-  try {
-    pids = await listPidsOnPort(port);
-  } catch (err) {
-    logger?.warn("app-builder.kill-port.lsof-failed", {
-      port,
-      error: err instanceof Error ? err.message : String(err)
-    });
-    return;
-  }
-  if (pids.length === 0) {
-    logger?.info("app-builder.kill-port.no-occupants", { port });
-    return;
-  }
-  for (const pid of pids) {
-    if (!ownedPids.has(pid)) {
-      logger?.warn("app-builder.kill-port.skip-external", {
-        port,
-        pid,
-        hint: "pid not in supervisor owned set; might be another daemon or external process. handle manually via lsof + kill."
-      });
-      continue;
-    }
-    try {
-      process.kill(pid, "SIGKILL");
-      logger?.info("app-builder.kill-port-occupant", { port, pid });
-    } catch (err) {
-      const code = err.code;
-      if (code !== "ESRCH") {
-        logger?.warn("app-builder.kill-port-occupant.failed", {
-          port,
-          pid,
-          error: err instanceof Error ? err.message : String(err)
-        });
-      }
-    }
-  }
-}
-function listPidsOnPort(port) {
-  return new Promise((resolve9, reject) => {
-    (0, import_node_child_process18.execFile)(
-      "lsof",
-      ["-ti", `:${port}`],
-      { timeout: 3e3 },
-      (err, stdout) => {
-        if (err && err.code === "ENOENT") {
-          reject(new Error("lsof not found in PATH"));
-          return;
-        }
-        const text = (stdout ?? "").toString().trim();
-        if (!text) {
-          resolve9([]);
-          return;
-        }
-        const list = text.split("\n").map((s) => Number(s.trim())).filter((n) => Number.isInteger(n) && n > 0);
-        resolve9(list);
-      }
-    );
-  });
-}
-
-// src/app-builder/ports.ts
-var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
-
-// src/handlers/app-builder.ts
-init_protocol();
-var import_node_path72 = require("path");
-var import_node_fs59 = require("fs");
-var DEFAULT_TEMPLATE = "nestjs-react";
-var DEV_SERVER_READY_TIMEOUT_MS = 3e4;
-function buildAppBuilderHandlers(deps) {
-  const { store, devServerLifecycle, sessionManager, getTunnelUrl, broadcastProjectUpdated } = deps;
-  function resolveStore(opts) {
-    if (!deps.getStore) return store;
-    if (opts.sessionId) {
-      const s = sessionManager.findOwnedSession(opts.sessionId);
-      if (s?.creatorPrincipalId) return deps.getStore(s.creatorPrincipalId);
-    }
-    if (opts.projectName) {
-      const s = sessionManager.findOwnedSessionByAppBuilderProject(opts.projectName);
-      if (s?.creatorPrincipalId) return deps.getStore(s.creatorPrincipalId);
-    }
-    if (opts.ctx) return deps.getStore(opts.ctx.principal.id);
-    return store;
-  }
-  function ensureProjectWriteAccess(ctx, opts) {
-    if (!ctx) return;
-    const sessionId = opts.sessionId ?? (opts.projectName ? sessionManager.findOwnedSessionByAppBuilderProject(opts.projectName)?.sessionId : void 0);
-    if (!sessionId) return;
-    if (!canAccessSession(ctx, sessionId, "send", {
-      readSession: (sid) => sessionManager.findOwnedSession(sid) ?? null
-    })) {
-      throw new ClawdError(ERROR_CODES.UNAUTHORIZED, `cannot write project of session ${sessionId}`);
-    }
-  }
-  const stages = /* @__PURE__ */ new Map();
-  function withPublishJobStatus(meta) {
-    if (!meta.publishJob) return void 0;
-    const inFlight = deps.publishService.inFlightJobId(meta.name) === meta.publishJob.jobId;
-    return {
-      ...meta.publishJob,
-      status: inFlight ? "in-flight" : "interrupted"
-    };
-  }
-  function getStageOf(name) {
-    const recorded = stages.get(name);
-    if (recorded) return recorded;
-    return devServerLifecycle.isRunning(name) ? { stage: "running" } : { stage: "stopped" };
-  }
-  async function setStageAndBroadcast(name, stage, reason, s = store) {
-    if (reason !== void 0) {
-      stages.set(name, { stage, reason });
-    } else {
-      stages.set(name, { stage });
-    }
-    const projects = await s.list();
-    const meta = projects.find((p2) => p2.name === name);
-    if (!meta) {
-      deps.logger?.warn("app-builder.stage-broadcast.project-missing", { name, stage });
-      return;
-    }
-    deps.logger?.info("app-builder.stage-transition", { name, stage, reason });
-    const publishJobWithStatus = withPublishJobStatus(meta);
-    broadcastProjectUpdated({
-      type: "appBuilder:project-updated",
-      project: {
-        ...meta,
-        isRunning: devServerLifecycle.isRunning(name),
-        boundSessionId: devServerLifecycle.boundSessionId(name),
-        stage,
-        ...reason !== void 0 ? { stageReason: reason } : {},
-        ...publishJobWithStatus !== void 0 ? { publishJob: publishJobWithStatus } : { publishJob: void 0 }
-      },
-      stage,
-      ...reason !== void 0 ? { stageReason: reason } : {}
-    });
-  }
-  async function listAllUsersProjects() {
-    if (!deps.usersRoot || !deps.getStore) return [];
-    const getStore = deps.getStore;
-    const userIds = await import_node_fs59.promises.readdir(deps.usersRoot).catch(() => []);
-    const perUser = await Promise.all(
-      userIds.map((uid) => getStore(uid).list().catch(() => []))
-    );
-    return perUser.flat();
-  }
-  function toProjectWithStatus(p2) {
-    const s = getStageOf(p2.name);
-    return {
-      ...p2,
-      isRunning: devServerLifecycle.isRunning(p2.name),
-      boundSessionId: devServerLifecycle.boundSessionId(p2.name),
-      stage: s.stage,
-      ...s.reason !== void 0 ? { stageReason: s.reason } : {},
-      publishJob: withPublishJobStatus(p2)
-    };
-  }
-  const listProjects = async (frame, _client, ctx) => {
-    const f = frame;
-    const sessionId = typeof f.sessionId === "string" ? f.sessionId : void 0;
-    let metas;
-    if (sessionId) {
-      metas = await resolveStore({ ctx, sessionId }).list();
-    } else if (ctx?.principal.kind === "owner" && deps.usersRoot && deps.getStore) {
-      metas = await listAllUsersProjects();
-    } else {
-      metas = await resolveStore({ ctx }).list();
-    }
-    return { response: { projects: metas.map(toProjectWithStatus) } };
-  };
-  const getProject = async (frame, _client, ctx) => {
-    const f = parseArgs2(GetProjectArgsSchema, frame, "getProject");
-    if (ctx && !canAccessSession(ctx, f.sessionId, "read", {
-      readSession: (sid) => sessionManager.findOwnedSession(sid) ?? null
-    })) {
-      throw new ClawdError(ERROR_CODES.UNAUTHORIZED, `cannot read session ${f.sessionId}`);
-    }
-    const session = sessionManager.findOwnedSession(f.sessionId);
-    const projectName = session?.appBuilderProject ?? null;
-    if (!projectName) return { response: { project: null } };
-    const meta = (await resolveStore({ ctx, sessionId: f.sessionId }).list()).find(
-      (p2) => p2.name === projectName
-    );
-    return { response: { project: meta ? toProjectWithStatus(meta) : null } };
-  };
-  const createProject = async (frame, _client, ctx) => {
-    const f = parseArgs2(CreateProjectArgsSchema, frame, "createProject");
-    const session = sessionManager.findOwnedSession(f.sessionId);
-    if (!session) {
-      throw new ClawdError(ERROR_CODES.SESSION_NOT_FOUND, `session ${f.sessionId} not found`);
-    }
-    if (!APP_BUILDER_PERSONAS.includes(session.ownerPersonaId ?? "")) {
-      throw new ClawdError(
-        ERROR_CODES.WRONG_PERSONA,
-        `createProject only allowed in app-builder persona sessions (got: ${session.ownerPersonaId ?? "<none>"})`
-      );
-    }
-    if (session.appBuilderProject) {
-      throw new ClawdError(
-        ERROR_CODES.SESSION_ALREADY_BOUND,
-        `session ${f.sessionId} already bound to project ${session.appBuilderProject}`
-      );
-    }
-    const userStore = resolveStore({ ctx, sessionId: f.sessionId });
-    deps.logger?.info("app-builder.create-project.start", { name: f.name, sessionId: f.sessionId });
-    const reservedPorts = new Set((await listAllUsersProjects()).map((p2) => p2.port));
-    const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(session.ownerPersonaId ?? "") : deps.personaRoot;
-    let project;
-    let projectDir;
-    try {
-      const created = await deps.createProjectOnDisk({
-        store: userStore,
-        name: f.name,
-        templateSrcDir: (0, import_node_path72.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE),
-        scaffoldScript: (0, import_node_path72.join)(deps.deployKitRoot, "scripts", "new-extension.sh"),
-        reservedPorts,
-        // 凭据只进 scaffold 子进程的 env，且**只给这个 persona 的 kit 模板声明要的那几个变量**
-        // （M1b Step 5）。整表塞进去粒度只到「进程」——那会把 service-role key 交给一个用不到
-        // 它的脚本。new-extension.sh 用它把模板的 `${VAR}` 渲成项目可跑的 server/.env。
-        extraEnv: secretsForKit(deps.readSecrets?.(), (0, import_node_path72.join)(personaRoot, "extension-kit")),
-        ...deps.logger ? { logger: deps.logger } : {}
-      });
-      project = created.project;
-      projectDir = created.projectDir;
-    } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
-      if (message.startsWith("scaffold failed")) {
-        throw new ClawdError(ERROR_CODES.INTERNAL, message);
-      }
-      throw err;
-    }
-    const { broadcast } = sessionManager.update({
-      sessionId: f.sessionId,
-      patch: { appBuilderProject: project.name }
-    });
-    await setStageAndBroadcast(project.name, "install-pending", void 0, userStore);
-    deps.logger?.info("app-builder.create-project.done", {
-      name: project.name,
-      port: project.port,
-      sessionId: f.sessionId
-    });
-    return { response: { project, projectDir }, broadcast };
-  };
-  const deleteProject = async (frame, _client, ctx) => {
-    const { name } = parseArgs2(DeleteProjectArgsSchema, frame, "deleteProject");
-    const userStore = resolveStore({ ctx, projectName: name });
-    await devServerLifecycle.stopForProject(name);
-    await userStore.delete(name);
-    stages.delete(name);
-    return { response: {} };
-  };
-  const updateProjectPort = async (frame, _client, ctx) => {
-    const f = parseArgs2(UpdateProjectPortArgsSchema, frame, "updateProjectPort");
-    const userStore = resolveStore({ ctx, projectName: f.name });
-    await devServerLifecycle.stopForProject(f.name);
-    const project = await userStore.updatePort(f.name, f.newPort);
-    await setStageAndBroadcast(f.name, "stopped", void 0, userStore);
-    return { response: { project } };
-  };
-  const setProdUrl = async (frame, _client, ctx) => {
-    const f = parseArgs2(SetProdUrlArgsSchema, frame, "setProdUrl");
-    ensureProjectWriteAccess(ctx, { projectName: f.name });
-    const userStore = resolveStore({ ctx, projectName: f.name });
-    const project = await userStore.setProdUrl(f.name, f.url);
-    const current = getStageOf(f.name);
-    await setStageAndBroadcast(f.name, current.stage, current.reason, userStore);
-    return { response: { project } };
-  };
-  const startDevServer = async (frame, _client, ctx) => {
-    const f = parseArgs2(StartDevServerArgsSchema, frame, "startDevServer");
-    const force = f.force === true;
-    ensureProjectWriteAccess(ctx, { sessionId: f.sessionId });
-    const session = sessionManager.findOwnedSession(f.sessionId);
-    if (!session) throw new ClawdError(ERROR_CODES.SESSION_NOT_FOUND, `session ${f.sessionId} not found`);
-    const projectName = session.appBuilderProject;
-    if (!projectName) {
-      throw new ClawdError(
-        ERROR_CODES.VALIDATION_ERROR,
-        `session ${f.sessionId} is not bound to any project; cannot start dev server`
-      );
-    }
-    const userStore = resolveStore({ ctx, sessionId: f.sessionId });
-    const projects = await userStore.list();
-    const meta = projects.find((p2) => p2.name === projectName);
-    if (!meta) {
-      throw new ClawdError(ERROR_CODES.SESSION_NOT_FOUND, `project ${projectName} not found on disk`);
-    }
-    const alreadyRunning = devServerLifecycle.isRunning(projectName);
-    deps.logger?.info("app-builder.start-dev-server.called", {
-      name: projectName,
-      sessionId: f.sessionId,
-      alreadyRunning,
-      force,
-      port: meta.port
-    });
-    if (alreadyRunning && !force) {
-      return { response: { project: meta } };
-    }
-    if (alreadyRunning && force) {
-      deps.logger?.info("app-builder.start-dev-server.force-stop", { name: projectName });
-      await devServerLifecycle.stopForProject(projectName);
-    }
-    await setStageAndBroadcast(projectName, "starting-dev-server", void 0, userStore);
-    const tunnelUrl = getTunnelUrl();
-    const tunnelHost = tunnelUrl ? new URL(tunnelUrl.replace(/^wss?:\/\//i, "https://")).host : null;
-    devServerLifecycle.startForSession({
-      sessionId: f.sessionId,
-      projectName,
-      cwd: userStore.projectDir(projectName),
-      port: meta.port,
-      tunnelHost,
-      devCommand: meta.devCommand
-    });
-    try {
-      await devServerLifecycle.awaitReady(projectName, { timeoutMs: DEV_SERVER_READY_TIMEOUT_MS });
-      await setStageAndBroadcast(projectName, "running", void 0, userStore);
-    } catch (err) {
-      const reason = err instanceof Error ? err.message : "dev server not ready";
-      deps.logger?.warn("app-builder.start-dev-server.ready-failed", {
-        name: projectName,
-        sessionId: f.sessionId,
-        reason
-      });
-      await setStageAndBroadcast(projectName, "failed", reason, userStore);
-    }
-    return { response: { project: meta } };
-  };
-  const reportStage = async (frame, _client, ctx) => {
-    const f = parseArgs2(ReportStageArgsSchema, frame, "reportStage");
-    if (!ASSISTANT_REPORTABLE_STAGES.includes(f.stage)) {
-      throw new ClawdError(
-        ERROR_CODES.VALIDATION_ERROR,
-        `reportStage: stage "${f.stage}" not reportable by assistant (allowed: ${ASSISTANT_REPORTABLE_STAGES.join(", ")})`
-      );
-    }
-    const session = sessionManager.findOwnedSession(f.sessionId);
-    if (!session) throw new ClawdError(ERROR_CODES.SESSION_NOT_FOUND, `session ${f.sessionId} not found`);
-    const projectName = session.appBuilderProject;
-    if (!projectName) {
-      throw new ClawdError(
-        ERROR_CODES.VALIDATION_ERROR,
-        `session ${f.sessionId} is not bound to any project`
-      );
-    }
-    const reason = typeof f.reason === "string" ? f.reason : void 0;
-    deps.logger?.info("app-builder.report-stage", {
-      name: projectName,
-      stage: f.stage,
-      reason,
-      sessionId: f.sessionId
-    });
-    const userStore = resolveStore({ ctx, sessionId: f.sessionId });
-    await setStageAndBroadcast(projectName, f.stage, reason, userStore);
-    return { response: { ok: true } };
-  };
-  const stopDevServer = async (frame, _client, ctx) => {
-    const f = parseArgs2(StopDevServerArgsSchema, frame, "stopDevServer");
-    ensureProjectWriteAccess(ctx, { sessionId: f.sessionId });
-    const session = sessionManager.findOwnedSession(f.sessionId);
-    if (!session) {
-      throw new ClawdError(ERROR_CODES.SESSION_NOT_FOUND, `session ${f.sessionId} not found`);
-    }
-    const projectName = session.appBuilderProject;
-    if (!projectName) {
-      throw new ClawdError(
-        ERROR_CODES.VALIDATION_ERROR,
-        `session ${f.sessionId} is not bound to any project; cannot stop dev server`
-      );
-    }
-    const userStore = resolveStore({ ctx, sessionId: f.sessionId });
-    deps.logger?.info("app-builder.stop-dev-server.called", {
-      name: projectName,
-      sessionId: f.sessionId,
-      isRunning: devServerLifecycle.isRunning(projectName)
-    });
-    if (devServerLifecycle.isRunning(projectName)) {
-      await devServerLifecycle.stopForProject(projectName);
-    }
-    try {
-      const projects = await userStore.list();
-      const meta = projects.find((p2) => p2.name === projectName);
-      if (meta) {
-        await killPortOccupants(meta.port, devServerLifecycle.getOwnedPids(), deps.logger);
-      }
-    } catch (err) {
-      deps.logger?.warn("app-builder.stop-dev-server.kill-port-skipped", {
-        name: projectName,
-        error: err instanceof Error ? err.message : String(err)
-      });
-    }
-    await setStageAndBroadcast(projectName, "stopped", void 0, userStore);
-    return { response: { ok: true } };
-  };
-  const publish = async (frame, _client, ctx) => {
-    const args = PublishArgsSchema.parse(frame);
-    ensureProjectWriteAccess(ctx, { projectName: args.name });
-    const userStore = resolveStore({ ctx, projectName: args.name });
-    const projects = await userStore.list();
-    const project = projects.find((p2) => p2.name === args.name);
-    if (!project) {
-      throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, `publish: project "${args.name}" not found`);
-    }
-    const boundSession = sessionManager.findOwnedSessionByAppBuilderProject(args.name);
-    if (!boundSession) {
-      throw new ClawdError(
-        ERROR_CODES.VALIDATION_ERROR,
-        `publish: project "${args.name}" has no bound session (orphan); cannot inject failure to chat`
-      );
-    }
-    if (project.publishJob && deps.publishService.inFlightJobId(args.name) === null) {
-      deps.logger?.info("app-builder.publish.clear-interrupted", {
-        name: args.name,
-        previousJobId: project.publishJob.jobId,
-        previousStage: project.publishJob.stage
-      });
-      await userStore.clearPublishJob(args.name);
-    }
-    const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(boundSession.ownerPersonaId ?? "") : deps.personaRoot;
-    const scriptPath = (0, import_node_path72.join)(deps.deployKitRoot, "scripts", "publish.sh");
-    deps.logger?.info("app-builder.publish.start", {
-      name: args.name,
-      sessionId: boundSession.sessionId,
-      scriptPath,
-      personaRoot
-    });
-    const result = await deps.publishService.start({
-      name: args.name,
-      sessionId: boundSession.sessionId,
-      scriptPath,
-      personaRoot,
-      store: userStore,
-      // 凭据只进 publish.sh 这个子进程的 env，且只给它的 kit 模板声明要的那几个变量
-      // （M1b Step 5）。那个进程里跑着 `eval "$BUILD_CMD"`——项目自带的构建命令会继承这份
-      // env，多给一个变量就是多交一个凭据给它。personaRoot 上面已按绑定 session 的 persona 解析。
-      extraEnv: secretsForKit(deps.readSecrets?.(), (0, import_node_path72.join)(personaRoot, "extension-kit")),
-      hooks: {
-        // 元数据每次写盘（publishJob 起落 / prodUrl 回填）后重推一帧：UI 渲染 PublishProgress
-        // 三段 checklist 依赖 project.publishJob.status==='in-flight'，而 publishJob 字段只有
-        // 通过 project-updated 帧才能到达 UI（publish-progress 帧 UI 端只用来设 currentStage，
-        // 不更新 currentProject）。prodUrl 同理，靠这条链路让 PreviewPane 切线上预览。
-        onProjectChanged: async (name) => {
-          const current = getStageOf(name);
-          await setStageAndBroadcast(name, current.stage, current.reason, userStore);
-        },
-        broadcast: (f) => {
-          broadcastProjectUpdated(f);
-        },
-        injectUserText: async (sessionId, text) => {
-          const ownerSender = principalToSender(
-            makeOwnerPrincipal(
-              deps.ownerPrincipalId,
-              deps.getOwnerIdentity().displayName || "Owner",
-              deps.getOwnerIdentity().feishuUnionId
-            )
-          );
-          const { broadcast } = sessionManager.send({ sessionId, text }, ownerSender);
-          for (const entry of broadcast) {
-            deps.broadcastSessionFrame(entry.frame, entry.target);
-          }
-        }
-      },
-      ...deps.logger ? { logger: deps.logger } : {}
-    });
-    return { response: { ...result } };
-  };
-  const dismissPublishJob = async (frame, _client, ctx) => {
-    const args = DismissPublishJobArgsSchema.parse(frame);
-    ensureProjectWriteAccess(ctx, { projectName: args.name });
-    const userStore = resolveStore({ ctx, projectName: args.name });
-    const projects = await userStore.list();
-    const project = projects.find((p2) => p2.name === args.name);
-    if (!project) {
-      throw new ClawdError(
-        ERROR_CODES.VALIDATION_ERROR,
-        `dismissPublishJob: project "${args.name}" not found`
-      );
-    }
-    const inFlightJobId = deps.publishService.inFlightJobId(args.name);
-    if (inFlightJobId) {
-      deps.logger?.info("app-builder.publish.dismiss.in-flight", {
-        name: args.name,
-        jobId: inFlightJobId
-      });
-      deps.publishService.dismiss(args.name);
-    } else if (project.publishJob) {
-      deps.logger?.info("app-builder.publish.dismiss.interrupted", {
-        name: args.name,
-        jobId: project.publishJob.jobId,
-        stage: project.publishJob.stage
-      });
-      await userStore.clearPublishJob(args.name);
-      const current = getStageOf(args.name);
-      await setStageAndBroadcast(args.name, current.stage, current.reason, userStore);
-    }
-    return { response: { ok: true } };
-  };
-  return {
-    "appBuilder:listProjects": listProjects,
-    "appBuilder:getProject": getProject,
-    "appBuilder:createProject": createProject,
-    "appBuilder:deleteProject": deleteProject,
-    "appBuilder:updateProjectPort": updateProjectPort,
-    "appBuilder:setProdUrl": setProdUrl,
-    "appBuilder:startDevServer": startDevServer,
-    "appBuilder:reportStage": reportStage,
-    "appBuilder:stopDevServer": stopDevServer,
-    "appBuilder:publish": publish,
-    "appBuilder:dismissPublishJob": dismissPublishJob
-  };
-}
-
 // src/handlers/shift.ts
 function daemonShiftToUiShift(d, _nowMs) {
   if (d.schedule.kind === "at") {
@@ -69104,7 +68234,7 @@ function buildVisitorHandlers(deps) {
 
 // src/extension/registry.ts
 var import_promises16 = __toESM(require("fs/promises"), 1);
-var import_node_path73 = __toESM(require("path"), 1);
+var import_node_path72 = __toESM(require("path"), 1);
 async function loadAll(root) {
   let entries;
   try {
@@ -69117,13 +68247,13 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path73.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path72.default.join(root, ent.name), ent.name));
   }
   records.sort((a, b2) => a.extId < b2.extId ? -1 : a.extId > b2.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path73.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path72.default.join(dir, "manifest.json");
   let raw;
   try {
     raw = await import_promises16.default.readFile(manifestPath, "utf8");
@@ -69168,7 +68298,7 @@ async function loadOne(dir, dirName) {
 
 // src/extension/uninstall.ts
 var import_promises17 = __toESM(require("fs/promises"), 1);
-var import_node_path74 = __toESM(require("path"), 1);
+var import_node_path73 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -69177,7 +68307,7 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path74.default.join(deps.root, deps.extId);
+  const dir = import_node_path73.default.join(deps.root, deps.extId);
   try {
     await import_promises17.default.access(dir);
   } catch {
@@ -69194,7 +68324,7 @@ var import_node_crypto21 = require("crypto");
 init_protocol();
 
 // src/peer-ops/run-command.ts
-var import_node_child_process19 = require("child_process");
+var import_node_child_process18 = require("child_process");
 var import_node_os26 = __toESM(require("os"), 1);
 var DEFAULT_TIMEOUT_MS6 = 3e4;
 var MAX_TIMEOUT_MS = 3e5;
@@ -69202,7 +68332,7 @@ var MAX_OUTPUT_BYTES = 1048576;
 function runCommand2(command, opts = {}) {
   const timeoutMs = Math.min(opts.timeoutMs ?? DEFAULT_TIMEOUT_MS6, MAX_TIMEOUT_MS);
   return new Promise((resolve9) => {
-    const child = (0, import_node_child_process19.spawn)("bash", ["-c", command], { cwd: import_node_os26.default.homedir() });
+    const child = (0, import_node_child_process18.spawn)("bash", ["-c", command], { cwd: import_node_os26.default.homedir() });
     const out = [];
     const err = [];
     let outBytes = 0;
@@ -69318,9 +68448,6 @@ function buildMethodHandlers(deps) {
   const handlers = {
     ...buildSessionHandlers({
       ...deps,
-      devServerLifecycle: deps.devServerLifecycle,
-      appBuilderStore: deps.appBuilderStore,
-      getProjectStore: deps.getProjectStore,
       getTunnelUrl: deps.getTunnelUrl,
       logger: deps.logger
     }),
@@ -69386,28 +68513,6 @@ function buildMethodHandlers(deps) {
       publishedChannelStore: deps.publishedChannelStore,
       bundleCache: deps.bundleCache
     }),
-    ...buildAppBuilderHandlers({
-      store: deps.appBuilderStore,
-      getStore: deps.getProjectStore,
-      publishService: deps.publishService,
-      createProjectOnDisk: deps.createProjectOnDisk,
-      usersRoot: deps.usersRoot,
-      devServerLifecycle: deps.devServerLifecycle,
-      sessionManager: deps.manager,
-      ownerPrincipalId: deps.ownerPrincipalId,
-      getOwnerIdentity: deps.getOwnerIdentity,
-      getTunnelUrl: deps.getTunnelUrl,
-      broadcastProjectUpdated: deps.broadcastProjectUpdated,
-      logger: deps.logger,
-      // 发布上线脚手架化 (spec 2026-06-03 §5.2):
-      // personaRoot 仅作 resolvePersonaRoot 未注入时的兜底；deployKitRoot 为共享脚本根。
-      // broadcastSessionFrame 用于失败回灌路径（runner 调 manager.send 后逐帧 dispatch 到 transport）。
-      personaRoot: deps.appBuilderPersonaRoot,
-      deployKitRoot: deps.deployKitRoot,
-      resolvePersonaRoot: deps.resolvePersonaRoot,
-      readSecrets: deps.readSecrets,
-      broadcastSessionFrame: deps.broadcastSessionFrame
-    }),
     ...buildChannelHandlers({
       channelStore: deps.channelStore,
       topicStore: deps.topicStore,
@@ -69415,7 +68520,7 @@ function buildMethodHandlers(deps) {
       broadcast: deps.broadcastToOwners
     }),
     ...buildMasterHandlers({
-      authorityTablePath: import_node_path75.default.join(deps.masterDataDir, "master-authority.json")
+      authorityTablePath: import_node_path74.default.join(deps.masterDataDir, "master-authority.json")
     }),
     ...buildTopicHandlers({
       topicStore: deps.topicStore,
@@ -69446,18 +68551,18 @@ function buildMethodHandlers(deps) {
 init_protocol();
 
 // src/tools/version-probe.ts
-var import_node_child_process21 = require("child_process");
+var import_node_child_process20 = require("child_process");
 init_claude();
 init_protocol();
 
 // src/tools/shell-path.ts
-var import_node_child_process20 = require("child_process");
+var import_node_child_process19 = require("child_process");
 var import_node_os27 = __toESM(require("os"), 1);
 function refreshPathFromLoginShell() {
   if (process.platform === "win32") return;
   const shell = process.env.SHELL ?? import_node_os27.default.userInfo().shell ?? "/bin/zsh";
   try {
-    const out = (0, import_node_child_process20.execFileSync)(shell, ["-ilc", 'command echo -n "$PATH"'], {
+    const out = (0, import_node_child_process19.execFileSync)(shell, ["-ilc", 'command echo -n "$PATH"'], {
       encoding: "utf8",
       timeout: 3e3,
       stdio: ["ignore", "pipe", "ignore"]
@@ -69474,7 +68579,7 @@ function parseVersionOutput(out) {
 }
 function execVersion(bin) {
   return new Promise((resolve9, reject) => {
-    (0, import_node_child_process21.execFile)(bin, ["--version"], { timeout: 5e3 }, (err, stdout) => {
+    (0, import_node_child_process20.execFile)(bin, ["--version"], { timeout: 5e3 }, (err, stdout) => {
       if (err) reject(err);
       else resolve9(String(stdout));
     });
@@ -69586,959 +68691,45 @@ function buildOnboardingHandlers(deps) {
   return { "onboarding:complete": complete, "tools:probe": toolsProbe, "onboarding:iosInterest": iosInterest };
 }
 
-// src/app-builder-plugin/project-store.ts
-var import_node_fs60 = require("fs");
-var import_node_child_process22 = require("child_process");
-var import_node_path76 = require("path");
-init_protocol();
-var PROJECTS_DIR = "projects";
-var META_FILE = ".clawd-project.json";
-var SCAFFOLD_TIMEOUT_MS = 3e4;
-var metaWriteQueues = /* @__PURE__ */ new Map();
-function serializeMetaWrite(metaPath, op) {
-  const prev = metaWriteQueues.get(metaPath) ?? Promise.resolve();
-  const next = prev.then(op, op);
-  const settled = next.then(
-    () => void 0,
-    () => void 0
-  );
-  metaWriteQueues.set(metaPath, settled);
-  void settled.then(() => {
-    if (metaWriteQueues.get(metaPath) === settled) metaWriteQueues.delete(metaPath);
-  });
-  return next;
-}
-var ProjectStore = class {
-  /** @param root projects 父目录，例如 `~/.clawd/users/<userId>/`（v2 per-user） */
-  constructor(root) {
-    this.root = root;
-  }
-  root;
-  serializeWrite(name, op) {
-    return serializeMetaWrite(this.metaPath(name), op);
-  }
-  /** projects/<name>/.clawd-project.json 路径 */
-  metaPath(name) {
-    return (0, import_node_path76.join)(this.projectsRoot(), name, META_FILE);
-  }
-  /** projects/<name>/ 目录路径（cwd 用） */
-  projectDir(name) {
-    return (0, import_node_path76.join)(this.projectsRoot(), name);
-  }
-  projectsRoot() {
-    return (0, import_node_path76.join)(this.root, PROJECTS_DIR);
-  }
-  async list() {
-    let entries;
-    try {
-      entries = await import_node_fs60.promises.readdir(this.projectsRoot());
-    } catch (err) {
-      if (err.code === "ENOENT") return [];
-      throw err;
-    }
-    const out = [];
-    for (const name of entries) {
-      try {
-        const raw = await import_node_fs60.promises.readFile(this.metaPath(name), "utf8");
-        const json = JSON.parse(raw);
-        let migrated = false;
-        if (typeof json.devCommand !== "string" || json.devCommand.length === 0) {
-          json.devCommand = DEFAULT_DEV_COMMAND;
-          migrated = true;
-        }
-        const parsed = ProjectMetadataSchema.safeParse(json);
-        if (parsed.success) {
-          out.push(parsed.data);
-          if (migrated) {
-            void import_node_fs60.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
-            });
-          }
-        }
-      } catch {
-      }
-    }
-    return out.sort((a, b2) => a.name.localeCompare(b2.name));
-  }
-  /**
-   * @param reservedPorts 其它 user 已占端口（v2 per-user：端口必须全局唯一，所有 user 的
-   *   dev server 同机跑；per-user store 各自只 list 自己，靠 handler 收集全局端口传进来，
-   *   否则不同 user 的首个项目都从 PROJECT_PORT_MIN 起 → 全撞 6173）。
-   */
-  async create(name, reservedPorts) {
-    const existing = await this.list();
-    if (existing.some((p2) => p2.name === name)) {
-      throw new Error(`project "${name}" already exists / \u5DF2\u5B58\u5728`);
-    }
-    const usedPorts = new Set(existing.map((p2) => p2.port));
-    if (reservedPorts) for (const p2 of reservedPorts) usedPorts.add(p2);
-    let port = -1;
-    for (let p2 = PROJECT_PORT_MIN; p2 <= PROJECT_PORT_MAX; p2++) {
-      if (!usedPorts.has(p2)) {
-        port = p2;
-        break;
-      }
-    }
-    if (port < 0) {
-      throw new Error(
-        `port pool exhausted / \u7AEF\u53E3\u6C60\u5DF2\u6EE1\uFF08${PROJECT_PORT_MIN}-${PROJECT_PORT_MAX}\uFF09\uFF0C\u5148\u5220\u4E00\u4E2A project \u91CA\u653E\u7AEF\u53E3`
-      );
-    }
-    const meta = {
-      name,
-      port,
-      createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-      devCommand: DEFAULT_DEV_COMMAND
-    };
-    const validated = ProjectMetadataSchema.safeParse(meta);
-    if (!validated.success) {
-      throw new Error(`invalid name "${name}": ${validated.error.message}`);
-    }
-    const dir = this.projectDir(name);
-    await import_node_fs60.promises.mkdir(dir, { recursive: true });
-    await import_node_fs60.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
-    return meta;
-  }
-  /**
-   * 同步内联 scaffold：spawn `extension-kit/scripts/new-extension.sh <name>` 等 exit。
-   * 必须在 `create()` 之后调（脚本期望 projects/<name>/.clawd-project.json 已就位 = picker 模式）。
-   * 失败抛错；上层（handler）应当 catch 后回滚（删 dir + 不 mutate session）。
-   *
-   * spec 2026-06-02 §5.6.3：scaffold 对 assistant 不可见，避免 assistant 被诱导去"读 example
-   * 代码再参考"。assistant 进 project 时目录已是完整模板，直接 pnpm install 即可。
-   */
-  async scaffold(name, templateSrcDir, scaffoldScriptPath, extraEnv) {
-    const destDir = this.projectDir(name);
-    return await new Promise((resolve9, reject) => {
-      const child = (0, import_node_child_process22.spawn)("bash", [scaffoldScriptPath, name, templateSrcDir, destDir], {
-        // extraEnv 排在 PATH **之前**：凭据表里若混进一条名叫 PATH 的条目，顶掉 PATH 会让
-        // 脚本以「命令找不到」的形态崩在离现场很远的地方。
-        env: { ...process.env, ...extraEnv ?? {}, PATH: process.env.PATH ?? "" },
-        stdio: ["ignore", "pipe", "pipe"]
-      });
-      let stdout = "";
-      let stderr = "";
-      child.stdout.on("data", (d) => {
-        stdout += d.toString("utf8");
-      });
-      child.stderr.on("data", (d) => {
-        stderr += d.toString("utf8");
-      });
-      const timer = setTimeout(() => {
-        child.kill("SIGKILL");
-        reject(new Error(`scaffold timeout (>${SCAFFOLD_TIMEOUT_MS}ms): ${scaffoldScriptPath} ${name}`));
-      }, SCAFFOLD_TIMEOUT_MS);
-      child.on("error", (err) => {
-        clearTimeout(timer);
-        reject(new Error(`scaffold spawn failed: ${err.message}`));
-      });
-      child.on("exit", (code, signal) => {
-        clearTimeout(timer);
-        if (code === 0) resolve9({ stdout, stderr });
-        else reject(new Error(`scaffold exit ${code ?? signal}: ${stderr.slice(0, 500)}`));
-      });
-    });
-  }
-  async delete(name) {
-    const dir = this.projectDir(name);
-    await import_node_fs60.promises.rm(dir, { recursive: true, force: true });
-  }
-  async updatePort(name, newPort) {
-    if (newPort < PROJECT_PORT_MIN || newPort > PROJECT_PORT_MAX) {
-      throw new Error(
-        `port range invalid: must be ${PROJECT_PORT_MIN}-${PROJECT_PORT_MAX}, got ${newPort}`
-      );
-    }
-    return await this.serializeWrite(name, async () => {
-      const list = await this.list();
-      const target = list.find((p2) => p2.name === name);
-      if (!target) throw new Error(`project "${name}" not found / \u4E0D\u5B58\u5728`);
-      const conflict = list.find((p2) => p2.name !== name && p2.port === newPort);
-      if (conflict) {
-        throw new Error(`port ${newPort} already used / \u5DF2\u88AB project "${conflict.name}" \u5360\u7528`);
-      }
-      const updated = { ...target, port: newPort };
-      await import_node_fs60.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
-      return updated;
-    });
-  }
-  /**
-   * 单栏 refactor (spec 2026-06-02 §5.6.1)：发布上线后写公网 URL 到 .clawd-project.json.prodUrl。
-   * UI 通过 listProjects 读到 prodUrl 后切预览栏到线上 URL，取代旧 prod marker 机制。
-   * 重复调用幂等（覆盖旧 URL）。url 由 ProjectMetadataSchema 校验 url() 格式。
-   */
-  async setProdUrl(name, url) {
-    return await this.serializeWrite(name, async () => {
-      const list = await this.list();
-      const target = list.find((p2) => p2.name === name);
-      if (!target) throw new Error(`project "${name}" not found / \u4E0D\u5B58\u5728`);
-      const updated = { ...target, prodUrl: url };
-      const validated = ProjectMetadataSchema.safeParse(updated);
-      if (!validated.success) {
-        throw new Error(`invalid prodUrl "${url}": ${validated.error.message}`);
-      }
-      await import_node_fs60.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
-      return validated.data;
-    });
-  }
-  /**
-   * 发布上线脚手架化 (spec 2026-06-03-app-builder-publish-scaffold-design §5.1.4)：
-   * 写 publishJob 字段到 .clawd-project.json。仅承载 in-flight 状态 ——
-   *   - daemon 收到第一个 ::stage::build marker 时写入
-   *   - 每次 stage 切换更新 stage 字段（jobId / startedAt 不变）
-   *   - 成功 / 失败 / dismiss 时调 clearPublishJob 清掉
-   *   - 只有 daemon 崩才会留残骸
-   * 写入时保留所有其他字段（prodUrl 等不受影响）。
-   */
-  async setPublishJob(name, job) {
-    return await this.serializeWrite(name, async () => {
-      const list = await this.list();
-      const target = list.find((p2) => p2.name === name);
-      if (!target) throw new Error(`project "${name}" not found / \u4E0D\u5B58\u5728`);
-      const updated = { ...target, publishJob: job };
-      const validated = ProjectMetadataSchema.safeParse(updated);
-      if (!validated.success) {
-        throw new Error(`invalid publishJob: ${validated.error.message}`);
-      }
-      await import_node_fs60.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
-      return validated.data;
-    });
-  }
-  /** 清掉 .clawd-project.json.publishJob 字段。其他字段保持原样。 */
-  async clearPublishJob(name) {
-    return await this.serializeWrite(name, async () => {
-      const list = await this.list();
-      const target = list.find((p2) => p2.name === name);
-      if (!target) throw new Error(`project "${name}" not found / \u4E0D\u5B58\u5728`);
-      if (!target.publishJob) return target;
-      const { publishJob: _drop, ...rest } = target;
-      void _drop;
-      const validated = ProjectMetadataSchema.safeParse(rest);
-      if (!validated.success) {
-        throw new Error(`failed to clear publishJob: ${validated.error.message}`);
-      }
-      await import_node_fs60.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
-      return validated.data;
-    });
-  }
-};
-
-// src/app-builder/dev-server-supervisor.ts
-var import_node_child_process23 = require("child_process");
-var import_node_events2 = require("events");
-var DEFAULT_READY_PATTERN = /Local:\s+https?:\/\/|Nest application successfully started|server listening on/i;
-var DevServerSupervisor = class extends import_node_events2.EventEmitter {
-  running = /* @__PURE__ */ new Map();
-  // key: sessionId
-  logger = { warn: () => {
-  }, info: () => {
-  } };
-  /** daemon entry 启动后注入 logger，让 child 输出走 clawd.log */
-  setLogger(logger) {
-    this.logger = logger;
-  }
-  startForSession(args) {
-    if (this.running.has(args.sessionId)) return;
-    const augmentedPath = [
-      process.env.PATH ?? "",
-      "/opt/homebrew/bin",
-      "/usr/local/bin",
-      `${process.env.HOME}/.nvm/versions/node`,
-      `${process.env.HOME}/.local/share/pnpm`
-    ].filter(Boolean).join(":");
-    const env = {
-      ...process.env,
-      PATH: augmentedPath,
-      CLAWD_TUNNEL_HOST: args.tunnelHost ?? "",
-      CLAWD_PREVIEW_PORT: String(args.port)
-    };
-    const cmd = args.devCommand.replace(/\$CLAWD_PREVIEW_PORT/g, String(args.port));
-    this.logger.info("dev-server.start", {
-      projectName: args.projectName,
-      port: args.port,
-      cwd: args.cwd,
-      sessionId: args.sessionId,
-      tunnelHost: args.tunnelHost,
-      devCommand: cmd
-    });
-    const child = (0, import_node_child_process23.spawn)("sh", ["-c", cmd], {
-      cwd: args.cwd,
-      env,
-      stdio: "pipe",
-      detached: true
-    });
-    let readyResolve;
-    let readyReject;
-    const readyPromise = new Promise((resolve9, reject) => {
-      readyResolve = resolve9;
-      readyReject = reject;
-    });
-    readyPromise.catch(() => {
-    });
-    const readyPattern = args.readyPattern ? new RegExp(args.readyPattern) : DEFAULT_READY_PATTERN;
-    const entry = {
-      ...args,
-      process: child,
-      ready: false,
-      readyPromise,
-      readyResolve,
-      readyReject,
-      readyPattern
-    };
-    this.running.set(args.sessionId, entry);
-    child.stdout?.on("data", (chunk) => {
-      const text = chunk.toString();
-      this.logger.info("dev-server.stdout", {
-        projectName: args.projectName,
-        port: args.port,
-        chunk: text.trimEnd()
-      });
-      if (!entry.ready && entry.readyPattern.test(text)) {
-        entry.ready = true;
-        this.logger.info("dev-server.ready", {
-          projectName: args.projectName,
-          port: args.port
-        });
-        entry.readyResolve();
-      }
-    });
-    child.stderr?.on("data", (chunk) => {
-      this.logger.warn("dev-server.stderr", {
-        projectName: args.projectName,
-        port: args.port,
-        chunk: chunk.toString().trimEnd()
-      });
-    });
-    child.on("error", (err) => {
-      this.running.delete(args.sessionId);
-      this.logger.warn("dev-server.spawn-failed", {
-        projectName: args.projectName,
-        port: args.port,
-        error: err.message,
-        code: err.code
-      });
-      if (!entry.ready) {
-        entry.readyReject(new Error(`dev server spawn failed: ${err.message}`));
-      }
-      this.emit("devServer:failed", {
-        sessionId: args.sessionId,
-        projectName: args.projectName,
-        port: args.port,
-        exitCode: null
-      });
-    });
-    child.on("exit", (code) => {
-      this.running.delete(args.sessionId);
-      this.logger.info("dev-server.exit", { projectName: args.projectName, port: args.port, code });
-      if (!entry.ready) {
-        entry.readyReject(new Error(`dev server exited before ready (code=${code})`));
-      }
-      if (code !== 0 && code !== null) {
-        this.emit("devServer:failed", {
-          sessionId: args.sessionId,
-          projectName: args.projectName,
-          port: args.port,
-          exitCode: code
-        });
-      }
-    });
-  }
-  stopForSession(sessionId) {
-    const entry = this.running.get(sessionId);
-    if (!entry) return Promise.resolve();
-    if (!entry.ready) {
-      entry.readyReject(new Error("dev server stopped before ready"));
-    }
-    return new Promise((resolve9) => {
-      let settled = false;
-      let killTimer;
-      const cleanup = () => {
-        if (settled) return;
-        settled = true;
-        if (killTimer) clearTimeout(killTimer);
-        this.running.delete(sessionId);
-        resolve9();
-      };
-      entry.process.once("exit", cleanup);
-      const pid = entry.process.pid;
-      if (pid === void 0) {
-        cleanup();
-        return;
-      }
-      try {
-        process.kill(-pid, "SIGTERM");
-      } catch {
-        cleanup();
-        return;
-      }
-      killTimer = setTimeout(() => {
-        try {
-          process.kill(-pid, "SIGKILL");
-        } catch {
-        }
-      }, 3e3);
-    });
-  }
-  async stopForProject(projectName) {
-    const entry = [...this.running.values()].find((e) => e.projectName === projectName);
-    if (!entry) return;
-    await this.stopForSession(entry.sessionId);
-  }
-  /**
-   * 单栏 §5.6.5 fix: daemon shutdown 时调，停所有 active dev server。
-   * 不调的话 detached 子进程（F4-1 加的 detached:true）会成孤儿继续跑 + 持有端口，
-   * 下次 daemon 起来想 spawn 新 dev server 就 EADDRINUSE。
-   */
-  async stopAll() {
-    const sessionIds = [...this.running.keys()];
-    await Promise.all(sessionIds.map((sid) => this.stopForSession(sid)));
-  }
-  async restartForProjectAt(args) {
-    await this.stopForSession(args.sessionId);
-    this.startForSession({
-      sessionId: args.sessionId,
-      projectName: args.projectName,
-      port: args.newPort,
-      cwd: args.cwd,
-      tunnelHost: args.tunnelHost,
-      devCommand: args.devCommand
-    });
-  }
-  isRunning(projectName) {
-    return [...this.running.values()].some((e) => e.projectName === projectName);
-  }
-  /**
-   * 多 daemon fix (#803 follow-up): 返回 supervisor 当前 spawn 着的所有子进程 pid 集合。
-   * stopDevServer handler 调 killPortOccupants 时传入做白名单，避免无差别 kill 端口上的
-   * 进程把另一个 daemon (.clawd / .clawd-second) 的 dev server 也连带杀。
-   * undefined pid（spawn 还没拿到 pid 的极短窗口）会被过滤掉。
-   */
-  getOwnedPids() {
-    const pids = /* @__PURE__ */ new Set();
-    for (const entry of this.running.values()) {
-      const pid = entry.process.pid;
-      if (typeof pid === "number" && pid > 0) pids.add(pid);
-    }
-    return pids;
-  }
-  boundSessionId(projectName) {
-    const entry = [...this.running.values()].find((e) => e.projectName === projectName);
-    return entry?.sessionId ?? null;
-  }
-  /**
-   * 显式控制 fix §T2: 等待 dev server 就绪（stdout 命中 readyPattern）。
-   * spawnDevServerForSession / startDevServer 在 setStage('running') 之前 await 这个 promise，
-   * 避免 UI 收 running 帧时端口还没监听导致 preview-proxy 502。
-   *
-   * - resolve：stdout 命中 readyPattern（默认 "Local: http://..."）
-   * - reject：超过 timeoutMs / signal abort / 进程 exit before ready / stopForSession 强停
-   * - throw（sync）：project 不在 running map 里（never started 或 already stopped）
-   */
-  awaitReady(projectName, opts) {
-    const entry = [...this.running.values()].find((e) => e.projectName === projectName);
-    if (!entry) {
-      return Promise.reject(new Error(`dev server for project "${projectName}" not running`));
-    }
-    return new Promise((resolve9, reject) => {
-      let settled = false;
-      let timer;
-      const finish = (err) => {
-        if (settled) return;
-        settled = true;
-        if (timer) clearTimeout(timer);
-        if (opts.signal) opts.signal.removeEventListener("abort", onAbort);
-        err ? reject(err) : resolve9();
-      };
-      const onAbort = () => finish(new Error("awaitReady aborted via signal"));
-      entry.readyPromise.then(() => finish(), (err) => finish(err));
-      timer = setTimeout(
-        () => finish(new Error(`dev server ready timeout after ${opts.timeoutMs}ms`)),
-        opts.timeoutMs
-      );
-      if (opts.signal) {
-        if (opts.signal.aborted) {
-          onAbort();
-          return;
-        }
-        opts.signal.addEventListener("abort", onAbort, { once: true });
-      }
-    });
-  }
-  boundEntry(projectName) {
-    const entry = [...this.running.values()].find((e) => e.projectName === projectName);
-    if (!entry) return null;
-    return {
-      sessionId: entry.sessionId,
-      cwd: entry.cwd,
-      port: entry.port,
-      tunnelHost: entry.tunnelHost,
-      devCommand: entry.devCommand
-    };
-  }
-};
-
-// src/app-builder-plugin/core.ts
-var import_node_child_process25 = require("child_process");
-
-// src/app-builder-plugin/publish-registry.ts
-var import_node_crypto22 = require("crypto");
-var PublishJobRegistry = class {
-  jobs = /* @__PURE__ */ new Map();
-  has(name) {
-    return this.jobs.has(name);
-  }
-  get(name) {
-    return this.jobs.get(name);
-  }
-  /**
-   * args.jobId 仅用于测试注入；生产代码不传，registry 自己生成。
-   * args.now 仅用于测试注入；生产代码不传，用 Date.now()。
-   */
-  create(args) {
-    if (this.jobs.has(args.name)) {
-      throw new Error(`already publishing: ${args.name}`);
-    }
-    const jobId = args.jobId ?? `job-${(0, import_node_crypto22.randomUUID)()}`;
-    this.jobs.set(args.name, {
-      jobId,
-      name: args.name,
-      stage: "build",
-      sessionId: args.sessionId,
-      childProc: args.childProc,
-      dismissed: false,
-      sawAnyStage: false,
-      startedAt: args.now ?? Date.now()
-    });
-    return jobId;
-  }
-  updateStage(name, stage) {
-    const job = this.jobs.get(name);
-    if (!job) return;
-    job.stage = stage;
-    job.sawAnyStage = true;
-  }
-  markDismissed(name) {
-    const job = this.jobs.get(name);
-    if (!job) return;
-    job.dismissed = true;
-  }
-  remove(name) {
-    const job = this.jobs.get(name);
-    if (!job) return void 0;
-    this.jobs.delete(name);
-    return { sessionId: job.sessionId };
-  }
-};
-
-// src/app-builder-plugin/publish-job-runner.ts
-var import_node_child_process24 = require("child_process");
-var import_node_fs61 = require("fs");
-var import_node_path77 = require("path");
-
-// src/app-builder-plugin/publish-stage-parser.ts
-var STAGE_RE = /^\s*::stage::(build|deploy|verify)\s*$/;
-var PROD_URL_RE = /^\s*::prod-url::(\S+)\s*$/;
-var URL_RE = /\bhttps?:\/\/[^\s]+/;
-function parsePublishLine(line) {
-  const stageMatch = STAGE_RE.exec(line);
-  if (stageMatch) return { kind: "stage", stage: stageMatch[1] };
-  const urlMatch = PROD_URL_RE.exec(line);
-  if (urlMatch) return { kind: "prod-url", url: urlMatch[1] };
-  return null;
-}
-function extractProdUrl(text) {
-  const m2 = URL_RE.exec(text);
-  return m2 ? m2[0] : null;
-}
-function tailStderrLines(buf, n) {
-  if (!buf) return "";
-  const lines = buf.split("\n");
-  if (lines.length <= n) return buf;
-  return lines.slice(lines.length - n).join("\n");
-}
-
-// src/app-builder-plugin/publish-job-runner.ts
-async function startPublishJob(deps, args) {
-  const { registry: registry2, projectDir } = deps;
-  const spawn16 = deps.spawnImpl ?? import_node_child_process24.spawn;
-  if (registry2.has(args.name)) {
-    return { jobId: registry2.get(args.name).jobId, status: "already-publishing" };
-  }
-  const projDir = projectDir(args.name);
-  const logPath = (0, import_node_path77.join)(projDir, ".publish.log");
-  let logStream = null;
-  try {
-    logStream = (0, import_node_fs61.createWriteStream)(logPath, { flags: "w" });
-  } catch {
-    logStream = null;
-  }
-  const child = spawn16("bash", [args.scriptPath, projDir, args.personaRoot ?? ""], {
-    cwd: projDir,
-    // 宿主给的 env 覆盖在 process.env 之上：daemon 进程本身没有这些变量（它们只在这一个
-    // 子进程里活着）。云上宿主不传 extraEnv，凭据本来就在容器 env 里。
-    // PATH 排在最后（与 ProjectStore.scaffold 同款）：extraEnv 里若混进一条名叫 PATH 的条目，
-    // 顶掉 PATH 会让脚本以「命令找不到」的形态崩在离现场很远的地方。
-    env: { ...process.env, ...args.extraEnv ?? {}, PATH: process.env.PATH ?? "" },
-    stdio: ["ignore", "pipe", "pipe"]
-  });
-  const jobId = registry2.create({
-    name: args.name,
-    sessionId: args.sessionId,
-    childProc: child
-  });
-  deps.logger?.info("app-builder.publish.spawned", {
-    name: args.name,
-    jobId,
-    pid: child.pid ?? null,
-    scriptPath: args.scriptPath,
-    logPath
-  });
-  child.on("error", (err) => {
-    deps.logger?.warn("app-builder.publish.spawn-error", {
-      name: args.name,
-      jobId,
-      error: err instanceof Error ? err.message : String(err)
-    });
-    void handleExit(deps, {
-      name: args.name,
-      jobId,
-      code: null,
-      signal: null,
-      urlCandidate: null,
-      stderrTail: err instanceof Error ? err.message : String(err),
-      logPath
-    });
-  });
-  let urlFromMarker = null;
-  let urlFallback = null;
-  let stdoutBuf = "";
-  child.stdout?.on("data", (chunk) => {
-    if (logStream) logStream.write(chunk);
-    stdoutBuf += chunk.toString();
-    let nlIdx;
-    while ((nlIdx = stdoutBuf.indexOf("\n")) >= 0) {
-      const line = stdoutBuf.slice(0, nlIdx);
-      stdoutBuf = stdoutBuf.slice(nlIdx + 1);
-      handleStdoutLine(deps, args.name, jobId, line);
-      const parsedForUrl = parsePublishLine(line);
-      if (parsedForUrl?.kind === "prod-url") urlFromMarker = parsedForUrl.url;
-      const url = extractProdUrl(line);
-      if (url && !urlFallback) urlFallback = url;
-    }
-  });
-  let stderrBuf = "";
-  child.stderr?.on("data", (chunk) => {
-    if (logStream) logStream.write(chunk);
-    stderrBuf += chunk.toString();
-  });
-  child.on("exit", (code, signal) => {
-    if (logStream) logStream.end();
-    const urlCandidate = urlFromMarker ?? urlFallback;
-    deps.logger?.info("app-builder.publish.child-exit", {
-      name: args.name,
-      jobId,
-      code,
-      signal,
-      hadUrl: !!urlCandidate,
-      urlSource: urlFromMarker ? "marker" : urlFallback ? "fallback" : "none",
-      stderrBytes: stderrBuf.length
-    });
-    void handleExit(deps, {
-      name: args.name,
-      jobId,
-      code,
-      signal,
-      urlCandidate,
-      stderrTail: tailStderrLines(stderrBuf, 20),
-      logPath
-    });
-  });
-  return { jobId, status: "started" };
-}
-function handleStdoutLine(deps, name, jobId, line) {
-  const parsed = parsePublishLine(line);
-  if (parsed?.kind !== "stage") return;
-  advanceStage(deps, name, jobId, parsed.stage);
-}
-function advanceStage(deps, name, jobId, next) {
-  const job = deps.registry.get(name);
-  if (!job) return;
-  const prev = job.stage;
-  const wasFirstStage = !job.sawAnyStage;
-  deps.logger?.info("app-builder.publish.stage-advance", {
-    name,
-    jobId,
-    prev: wasFirstStage ? null : prev,
-    next,
-    firstStage: wasFirstStage
-  });
-  if (wasFirstStage) {
-    deps.registry.updateStage(name, next);
-    void deps.setPublishJob(name, {
-      jobId,
-      stage: next,
-      startedAt: job.startedAt
-    });
-    deps.broadcast({
-      type: "appBuilder:publish-progress",
-      name,
-      jobId,
-      stage: next,
-      status: "started"
-    });
-    return;
-  }
-  if (prev === next) {
-    return;
-  }
-  deps.broadcast({
-    type: "appBuilder:publish-progress",
-    name,
-    jobId,
-    stage: prev,
-    status: "completed"
-  });
-  deps.registry.updateStage(name, next);
-  void deps.setPublishJob(name, {
-    jobId,
-    stage: next,
-    startedAt: job.startedAt
-  });
-  deps.broadcast({
-    type: "appBuilder:publish-progress",
-    name,
-    jobId,
-    stage: next,
-    status: "started"
-  });
-}
-async function handleExit(deps, args) {
-  const job = deps.registry.get(args.name);
-  if (args.signal === "SIGTERM" && job?.dismissed) {
-    try {
-      await deps.clearPublishJob(args.name);
-    } catch (err) {
-      console.error("[publish] clearPublishJob failed (dismissed branch)", err);
-    }
-    deps.registry.remove(args.name);
-    deps.onSettled?.({ kind: "dismissed" });
-    return;
-  }
-  if (args.code === 0 && args.urlCandidate) {
-    if (job?.sawAnyStage) {
-      deps.broadcast({
-        type: "appBuilder:publish-progress",
-        name: args.name,
-        jobId: args.jobId,
-        stage: job.stage,
-        status: "completed"
-      });
-    }
-    try {
-      await deps.setProdUrl(args.name, args.urlCandidate);
-    } catch (err) {
-      console.error("[publish] setProdUrl failed; falling through to failure branch", err);
-      await emitFailure(deps, args, "\u8C03 setProdUrl \u5931\u8D25\uFF1A" + (err instanceof Error ? err.message : String(err)));
-      return;
-    }
-    try {
-      await deps.clearPublishJob(args.name);
-    } catch (err) {
-      console.error("[publish] clearPublishJob failed (success branch)", err);
-    }
-    deps.registry.remove(args.name);
-    deps.onSettled?.({ kind: "published", url: args.urlCandidate });
-    return;
-  }
-  await emitFailure(deps, args, buildErrorSummary(args));
-}
-async function emitFailure(deps, args, errorSummary) {
-  const job = deps.registry.get(args.name);
-  const failStage = job?.sawAnyStage ? job.stage : "unknown";
-  deps.logger?.warn("app-builder.publish.failed", {
-    name: args.name,
-    jobId: args.jobId,
-    stage: failStage,
-    errorSummary: errorSummary.slice(0, 500)
-  });
-  try {
-    await deps.clearPublishJob(args.name);
-  } catch (err) {
-    deps.logger?.warn("app-builder.publish.clear-field-failed", {
-      name: args.name,
-      jobId: args.jobId,
-      error: err instanceof Error ? err.message : String(err)
-    });
-  }
-  const removed = deps.registry.remove(args.name);
-  deps.broadcast({
-    type: "appBuilder:publish-failed",
-    name: args.name,
-    jobId: args.jobId,
-    stage: failStage,
-    errorSummary
-  });
-  if (removed) {
-    const msg = formatFailureMessage(failStage, errorSummary, args.logPath);
-    try {
-      await deps.injectUserText(removed.sessionId, msg);
-      deps.logger?.info("app-builder.publish.failure-injected-to-chat", {
-        name: args.name,
-        jobId: args.jobId,
-        sessionId: removed.sessionId
-      });
-    } catch (err) {
-      deps.logger?.warn("app-builder.publish.inject-user-text-failed", {
-        name: args.name,
-        jobId: args.jobId,
-        sessionId: removed.sessionId,
-        error: err instanceof Error ? err.message : String(err)
-      });
-    }
-  } else {
-    deps.logger?.warn("app-builder.publish.no-registry-entry-on-failure", {
-      name: args.name,
-      jobId: args.jobId
-    });
-  }
-  deps.onSettled?.({ kind: "failed", stage: failStage, errorSummary });
-}
-function buildErrorSummary(args) {
-  if (args.signal) {
-    return `publish.sh \u88AB\u4E2D\u65AD\uFF08signal: ${args.signal}\uFF09`;
-  }
-  if (args.code === 0 && !args.urlCandidate) {
-    return "publish.sh \u6210\u529F\u9000\u51FA\u4F46\u672A\u8F93\u51FA\u516C\u7F51 URL";
-  }
-  return args.stderrTail || `publish.sh \u5F02\u5E38\u9000\u51FA\uFF08exit code: ${args.code}\uFF09`;
-}
-function formatFailureMessage(stage, errorSummary, logPath) {
-  return `\u53D1\u5E03\u5931\u8D25\uFF1A[${stage}] \u9636\u6BB5
-${errorSummary}
-
-\u5B8C\u6574\u65E5\u5FD7\uFF1A${logPath}
-\u8BF7\u4F60\u63A5\u7BA1\u5B8C\u6210\u672C\u6B21\u53D1\u5E03\uFF1A\u5148\u6839\u636E\u65E5\u5FD7\u4FEE\u590D\u95EE\u9898\uFF0C\u7136\u540E\u91CD\u8DD1 publish.sh \u76F4\u5230\u4E0A\u7EBF\u6210\u529F\uFF0C\u6700\u540E\u7528 appBuilder.setProdUrl \u5199\u5165\u516C\u7F51 URL\u3002`;
-}
-async function recoverInterruptedJobs(deps) {
-  const projects = await deps.listAllProjects();
-  for (const p2 of projects) {
-    if (p2.publishJob) {
-      deps.log(
-        `[publish] found interrupted job ${p2.publishJob.jobId} for ${p2.name}, stage=${p2.publishJob.stage}`
-      );
-    }
-  }
-}
-
-// src/app-builder-plugin/core.ts
-function createPublishService() {
-  const registry2 = new PublishJobRegistry();
-  return {
-    inFlightJobId(name) {
-      return registry2.get(name)?.jobId ?? null;
-    },
-    async start(args) {
-      const { store, hooks, logger } = args;
-      const changed = async (name) => {
-        await hooks?.onProjectChanged?.(name);
-      };
-      return await startPublishJob(
-        {
-          registry: registry2,
-          setPublishJob: async (name, job) => {
-            await store.setPublishJob(name, job);
-            await changed(name);
-          },
-          clearPublishJob: async (name) => {
-            await store.clearPublishJob(name);
-            await changed(name);
-          },
-          setProdUrl: async (name, url) => {
-            await store.setProdUrl(name, url);
-            await changed(name);
-          },
-          broadcast: (frame) => hooks?.broadcast?.(frame),
-          injectUserText: async (sessionId, text) => {
-            await hooks?.injectUserText?.(sessionId, text);
-          },
-          projectDir: (name) => store.projectDir(name),
-          ...hooks?.onSettled ? { onSettled: hooks.onSettled } : {},
-          ...logger ? { logger } : {}
-        },
-        {
-          name: args.name,
-          sessionId: args.sessionId,
-          scriptPath: args.scriptPath,
-          personaRoot: args.personaRoot,
-          ...args.extraEnv ? { extraEnv: args.extraEnv } : {}
-        }
-      );
-    },
-    dismiss(name) {
-      const job = registry2.get(name);
-      if (!job) return false;
-      registry2.markDismissed(name);
-      job.childProc.kill("SIGTERM");
-      return true;
-    }
-  };
-}
-async function createProjectOnDisk(args) {
-  const { store, name, templateSrcDir, scaffoldScript, logger } = args;
-  const project = await store.create(name, args.reservedPorts);
-  try {
-    const result = await store.scaffold(name, templateSrcDir, scaffoldScript, args.extraEnv);
-    logger?.info("app-builder.scaffold.done", { name, stdout: result.stdout.slice(0, 200) });
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
-    logger?.warn("app-builder.scaffold.failed", { name, error: message });
-    await store.delete(name).catch((delErr) => {
-      logger?.warn("app-builder.scaffold.rollback-failed", {
-        name,
-        error: delErr instanceof Error ? delErr.message : String(delErr)
-      });
-    });
-    throw new Error(`scaffold failed: ${message}`);
-  }
-  return { project, projectDir: store.projectDir(name) };
-}
-var REMOVE_TIMEOUT_MS = 10 * 6e4;
-async function recoverInterruptedPublishJobs(store, logger) {
-  await recoverInterruptedJobs({
-    listAllProjects: async () => store.list(),
-    log: (msg) => logger?.info(msg)
-  });
-}
-
 // src/app-builder-plugin/mcp-config.ts
-var import_node_fs62 = __toESM(require("fs"), 1);
-var import_node_path78 = __toESM(require("path"), 1);
-function appBuilderMcpConfigPath(dataDir) {
-  return import_node_path78.default.join(dataDir, "app-builder.mcp.json");
+var import_node_fs59 = __toESM(require("fs"), 1);
+var import_node_path75 = __toESM(require("path"), 1);
+function appBuilderMcpConfigPath(outDir, personaId2) {
+  return import_node_path75.default.join(outDir, `${personaId2}.app-builder.mcp.json`);
 }
 function writeAppBuilderMcpConfig(args) {
-  const cfgPath = appBuilderMcpConfigPath(args.dataDir);
+  const cfgPath = appBuilderMcpConfigPath(args.outDir, args.personaId);
   const cfg = {
-    _comment: "daemon \u542F\u52A8\u81EA\u52A8\u751F\u6210\uFF1Bagent spawn \u901A\u8FC7 --mcp-config \u6CE8\u5165\u3002app-builder-plugin/mcp-server.cjs \u662F clawd-app-builder \u63D2\u4EF6\uFF08app-builder persona \u79C1\u6709\u7684\u540E\u7AEF\uFF1Aproject \u76EE\u5F55/\u5143\u6570\u636E + \u53D1\u5E03\u6D41\u6C34\u7EBF\uFF09\u3002\u6709 CLAWD_DAEMON_URL \u65F6\u8F6C\u8C03 appBuilder:* RPC\uFF08\u7AEF\u53E3\u6C60 / \u4F1A\u8BDD\u7ED1\u5B9A / UI \u5E7F\u64AD\u5F52 daemon\uFF09\uFF0C\u6CA1\u6709\u65F6\u7528\u540C\u4E00\u4EFD\u5185\u6838\u81EA\u5DF1\u5E72\uFF08\u4E91\u4E0A\u5BB9\u5668\uFF09\u3002\u975E app-builder \u7CFB persona \u7684\u4F1A\u8BDD\u91CC\u672C server \u4E0D\u6CE8\u518C\u4EFB\u4F55 tool\u3002",
+    _comment: `daemon \u81EA\u52A8\u751F\u6210\uFF08${args.personaId} \u7684\u4F1A\u8BDD spawn \u524D\u91CD\u6E32\uFF09\uFF1Bagent spawn \u901A\u8FC7 --mcp-config \u6CE8\u5165\u3002app-builder-plugin/mcp-server.cjs \u662F clawd-app-builder \u63D2\u4EF6\uFF1A\u9879\u76EE\u76EE\u5F55 / scaffold / git \u5EFA\u4ED3 / \u53D1\u5E03 / \u62C6\u9664\u90FD\u5728\u5B83\u8FDB\u7A0B\u91CC\u505A\uFF0C\u51ED\u636E\u53EA\u5728\u8FD9\u4EFD per-server env \u91CC\u3002\u975E app-builder \u7CFB persona \u7684\u4F1A\u8BDD\u4E0D\u6302\u672C server\u3002`,
     mcpServers: {
       "clawd-app-builder": {
         type: "stdio",
         command: "node",
         args: [args.serverScriptPath],
         env: {
-          CLAWD_DAEMON_TOKEN: args.daemonToken,
-          CLAWD_DAEMON_URL: args.daemonUrl,
-          CLAWD_APP_BUILDER_SCAFFOLD_SCRIPT: import_node_path78.default.join(args.deployKitScriptsDir, "new-extension.sh"),
-          CLAWD_APP_BUILDER_PUBLISH_SCRIPT: import_node_path78.default.join(args.deployKitScriptsDir, "publish.sh"),
+          // 凭据排前面：固定键在后，凭据表里若混进同名条目也顶不掉路径
+          ...args.secrets ?? {},
+          CLAWD_APP_BUILDER_PERSONA_ROOT: args.personaRoot,
+          CLAWD_APP_BUILDER_TEMPLATE_DIR: args.templateDir,
+          CLAWD_APP_BUILDER_SCAFFOLD_SCRIPT: import_node_path75.default.join(args.deployKitScriptsDir, "new-extension.sh"),
+          CLAWD_APP_BUILDER_PUBLISH_SCRIPT: import_node_path75.default.join(args.deployKitScriptsDir, "publish.sh"),
+          CLAWD_APP_BUILDER_REMOVE_SCRIPT: import_node_path75.default.join(args.deployKitScriptsDir, "remove-extension.sh"),
           ...args.logPath ? { CLAWD_APP_BUILDER_LOG: args.logPath } : {}
         }
       }
     }
   };
-  import_node_fs62.default.mkdirSync(args.dataDir, { recursive: true });
-  import_node_fs62.default.writeFileSync(cfgPath, JSON.stringify(cfg, null, 2), "utf8");
+  import_node_fs59.default.mkdirSync(args.outDir, { recursive: true, mode: 448 });
+  const tmp = `${cfgPath}.${process.pid}.tmp`;
+  import_node_fs59.default.writeFileSync(tmp, JSON.stringify(cfg, null, 2), { encoding: "utf8", mode: 384 });
+  import_node_fs59.default.renameSync(tmp, cfgPath);
   return cfgPath;
 }
 
+// src/app-builder-plugin/personas.ts
+var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
+var APP_BUILDER_TEMPLATE = "nestjs-react";
+
 // src/handlers/dispatch-rpc.ts
 init_zod();
 init_protocol();
@@ -70581,12 +68772,12 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 }
 
 // src/extension/runtime.ts
-var import_node_child_process26 = require("child_process");
-var import_node_path79 = __toESM(require("path"), 1);
+var import_node_child_process21 = require("child_process");
+var import_node_path76 = __toESM(require("path"), 1);
 var import_promises18 = require("timers/promises");
 
 // src/extension/port-allocator.ts
-var import_node_net2 = __toESM(require("net"), 1);
+var import_node_net = __toESM(require("net"), 1);
 var PortExhaustedError = class extends Error {
   constructor(min, max) {
     super(`no free port in [${min},${max}]`);
@@ -70599,7 +68790,7 @@ var PortExhaustedError = class extends Error {
 };
 function probe(port) {
   return new Promise((resolve9) => {
-    const srv = import_node_net2.default.createServer();
+    const srv = import_node_net.default.createServer();
     srv.once("error", () => resolve9(false));
     srv.once("listening", () => {
       srv.close(() => resolve9(true));
@@ -70683,13 +68874,13 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path79.default.join(this.root, extId);
+    const dir = import_node_path76.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
       CLAWOS_EXT_ID: extId
     };
-    const child = (0, import_node_child_process26.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process21.spawn)("sh", ["-c", cmd], {
       cwd: dir,
       env,
       stdio: ["ignore", "pipe", "pipe"],
@@ -70795,7 +68986,7 @@ ${handle.stderrTail}`
 
 // src/extension/published-channels.ts
 var import_promises19 = __toESM(require("fs/promises"), 1);
-var import_node_path80 = __toESM(require("path"), 1);
+var import_node_path77 = __toESM(require("path"), 1);
 init_zod();
 var PublishedChannelsError = class extends Error {
   constructor(code, message) {
@@ -70894,7 +69085,7 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises19.default.mkdir(import_node_path80.default.dirname(this.filePath), { recursive: true });
+    await import_promises19.default.mkdir(import_node_path77.default.dirname(this.filePath), { recursive: true });
     await import_promises19.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
     await import_promises19.default.rename(tmp, this.filePath);
   }
@@ -70902,7 +69093,7 @@ var PublishedChannelStore = class {
 
 // src/extension/bundle-cache.ts
 var import_promises20 = __toESM(require("fs/promises"), 1);
-var import_node_path81 = __toESM(require("path"), 1);
+var import_node_path78 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -70911,14 +69102,14 @@ var BundleCache = class {
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
     await import_promises20.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path81.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path78.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
     await import_promises20.default.writeFile(tmp, buffer, { mode: 384 });
     await import_promises20.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path81.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path78.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
       return await import_promises20.default.readFile(file);
     } catch (e) {
@@ -70928,7 +69119,7 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path81.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path78.default.join(this.rootDir, `${snapshotHash}.zip`);
     await import_promises20.default.rm(file, { force: true });
   }
 };
@@ -70951,24 +69142,24 @@ async function startDaemon(config) {
     sampling: logShippingCfg.sampling,
     homeDir: import_node_os28.default.homedir()
   });
-  const logDir = import_node_path82.default.join(config.dataDir, "log");
-  import_node_fs63.default.mkdirSync(logDir, { recursive: true });
+  const logDir = import_node_path79.default.join(config.dataDir, "log");
+  import_node_fs60.default.mkdirSync(logDir, { recursive: true });
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path82.default.join(logDir, "clawd.log"),
+    file: import_node_path79.default.join(logDir, "clawd.log"),
     logClient
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const screenIdleProbeLogger = createFileOnlyLogger({
-    file: import_node_path82.default.join(logDir, "screen-idle-probe.log"),
+    file: import_node_path79.default.join(logDir, "screen-idle-probe.log"),
     level: "debug"
   });
   logger.info("screen-idle probe logger enabled", {
-    file: import_node_path82.default.join(logDir, "screen-idle-probe.log")
+    file: import_node_path79.default.join(logDir, "screen-idle-probe.log")
   });
   const CAP_TARGETS = [
-    import_node_path82.default.join(logDir, "clawd.log"),
-    import_node_path82.default.join(logDir, "screen-idle-probe.log")
+    import_node_path79.default.join(logDir, "clawd.log"),
+    import_node_path79.default.join(logDir, "screen-idle-probe.log")
   ];
   const LOG_CAP_MAX_BYTES = 10 * 1024 * 1024;
   const LOG_CAP_KEEP_BYTES = 5 * 1024 * 1024;
@@ -71090,8 +69281,8 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path82.default.join(config.dataDir, "personas"));
-  const usersRoot = import_node_path82.default.join(config.dataDir, "users");
+  const personaStore = new PersonaStore(import_node_path79.default.join(config.dataDir, "personas"));
+  const usersRoot = import_node_path79.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -71115,7 +69306,7 @@ async function startDaemon(config) {
   retirePersonaBuilder({ store: personaStore, logger });
   const groupFileStore = new GroupFileStore({ dataDir: config.dataDir, logger });
   const dispatchStore = createDispatchStore({
-    filePath: import_node_path82.default.join(config.dataDir, "dispatch.json"),
+    filePath: import_node_path79.default.join(config.dataDir, "dispatch.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("dispatch store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
@@ -71124,18 +69315,18 @@ async function startDaemon(config) {
   await dispatchStore.load();
   dispatchStore.markInterruptedAsFailed((/* @__PURE__ */ new Date()).toISOString());
   const channelStore = createChannelStore({
-    filePath: import_node_path82.default.join(config.dataDir, "channels.json"),
+    filePath: import_node_path79.default.join(config.dataDir, "channels.json"),
     now: () => Date.now(),
-    genId: () => `ch-${(0, import_node_crypto23.randomUUID)().slice(0, 8)}`,
+    genId: () => `ch-${(0, import_node_crypto22.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("channel store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
     })
   });
   await channelStore.load();
   const topicStore = createTopicStore({
-    filePath: import_node_path82.default.join(config.dataDir, "topics.json"),
+    filePath: import_node_path79.default.join(config.dataDir, "topics.json"),
     now: () => Date.now(),
-    genId: () => `tp-${(0, import_node_crypto23.randomUUID)().slice(0, 8)}`,
+    genId: () => `tp-${(0, import_node_crypto22.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("topic store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
     })
@@ -71143,7 +69334,7 @@ async function startDaemon(config) {
   await topicStore.load();
   let deliverPendingRef;
   const personaDispatchManager = new PersonaDispatchManager({
-    genId: () => (0, import_node_crypto23.randomUUID)(),
+    genId: () => (0, import_node_crypto22.randomUUID)(),
     store: dispatchStore,
     now: () => Date.now(),
     onCompleted: (sid) => deliverPendingRef?.(sid),
@@ -71160,28 +69351,32 @@ async function startDaemon(config) {
       });
     }
   });
-  const here = typeof __dirname === "string" ? __dirname : import_node_path82.default.dirname((0, import_node_url5.fileURLToPath)(import_meta8.url));
+  const here = typeof __dirname === "string" ? __dirname : import_node_path79.default.dirname((0, import_node_url5.fileURLToPath)(import_meta8.url));
   const mcpConfigs = [];
   const secretsBundleRoot = findSecretsBundleRoot(logger);
-  const localSecretsDir = import_node_path82.default.join(config.dataDir, LOCAL_SECRETS_DIRNAME);
+  const localSecretsDir = import_node_path79.default.join(config.dataDir, LOCAL_SECRETS_DIRNAME);
   const readSecrets = () => readSecretTable({ bundleRoot: secretsBundleRoot, overrideDir: localSecretsDir, logger });
-  const resolvePersonaMcpConfig = (personaId2) => renderPersonaMcpSecrets({
-    personaId: personaId2,
-    personaDir: import_node_path82.default.join(config.dataDir, "personas", personaId2),
-    secrets: readSecrets(),
-    outDir: import_node_path82.default.join(config.dataDir, "persona-mcp"),
-    logger
-  });
+  let refreshAppBuilderMcpConfig;
+  const resolvePersonaMcpConfig = (personaId2) => {
+    refreshAppBuilderMcpConfig?.(personaId2);
+    return renderPersonaMcpSecrets({
+      personaId: personaId2,
+      personaDir: import_node_path79.default.join(config.dataDir, "personas", personaId2),
+      secrets: readSecrets(),
+      outDir: import_node_path79.default.join(config.dataDir, "persona-mcp"),
+      logger
+    });
+  };
   const mcpDaemonUrl = `http://127.0.0.1:${config.port}`;
   const dispatchServerCandidates = [
-    import_node_path82.default.join(here, "dispatch", "mcp-server.cjs"),
+    import_node_path79.default.join(here, "dispatch", "mcp-server.cjs"),
     // 生产 dist/index → dist/dispatch/mcp-server.cjs
-    import_node_path82.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
+    import_node_path79.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
-  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs63.default.existsSync(p2));
+  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs60.default.existsSync(p2));
   if (dispatchServerScriptPath) {
-    const dispatchLogPath = import_node_path82.default.join(logDir, "dispatch-mcp-server.log");
+    const dispatchLogPath = import_node_path79.default.join(logDir, "dispatch-mcp-server.log");
     const dispatchCfgPath = writeDispatchMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: dispatchServerScriptPath,
@@ -71201,12 +69396,12 @@ async function startDaemon(config) {
     });
   }
   const ticketServerCandidates = [
-    import_node_path82.default.join(here, "ticket", "mcp-server.cjs"),
-    import_node_path82.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
+    import_node_path79.default.join(here, "ticket", "mcp-server.cjs"),
+    import_node_path79.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
-  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs63.default.existsSync(p2));
+  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs60.default.existsSync(p2));
   if (ticketServerScriptPath) {
-    const ticketLogPath = import_node_path82.default.join(logDir, "ticket-mcp-server.log");
+    const ticketLogPath = import_node_path79.default.join(logDir, "ticket-mcp-server.log");
     const ticketCfgPath = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
@@ -71228,12 +69423,12 @@ async function startDaemon(config) {
     });
   }
   const shiftServerCandidates = [
-    import_node_path82.default.join(here, "shift", "mcp-server.cjs"),
-    import_node_path82.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
+    import_node_path79.default.join(here, "shift", "mcp-server.cjs"),
+    import_node_path79.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
-  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs63.default.existsSync(p2));
+  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs60.default.existsSync(p2));
   if (shiftServerScriptPath) {
-    const shiftLogPath = import_node_path82.default.join(logDir, "shift-mcp-server.log");
+    const shiftLogPath = import_node_path79.default.join(logDir, "shift-mcp-server.log");
     const shiftCfgPath = await writeShiftMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: shiftServerScriptPath,
@@ -71254,12 +69449,12 @@ async function startDaemon(config) {
     );
   }
   const inboxServerCandidates = [
-    import_node_path82.default.join(here, "inbox", "mcp-server.cjs"),
-    import_node_path82.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
+    import_node_path79.default.join(here, "inbox", "mcp-server.cjs"),
+    import_node_path79.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
   ];
-  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs63.default.existsSync(p2));
+  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs60.default.existsSync(p2));
   if (inboxServerScriptPath) {
-    const inboxLogPath = import_node_path82.default.join(logDir, "inbox-mcp-server.log");
+    const inboxLogPath = import_node_path79.default.join(logDir, "inbox-mcp-server.log");
     const inboxCfgPath = await writeInboxMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: inboxServerScriptPath,
@@ -71280,10 +69475,10 @@ async function startDaemon(config) {
     );
   }
   const peerOpsServerCandidates = [
-    import_node_path82.default.join(here, "peer-ops", "mcp-server.cjs"),
-    import_node_path82.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
+    import_node_path79.default.join(here, "peer-ops", "mcp-server.cjs"),
+    import_node_path79.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
   ];
-  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs63.default.existsSync(p2));
+  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs60.default.existsSync(p2));
   if (peerOpsServerScriptPath) {
     const peerOpsCfgPath = writePeerOpsMcpConfig({
       dataDir: config.dataDir,
@@ -71303,12 +69498,12 @@ async function startDaemon(config) {
     );
   }
   const rpcToolServerCandidates = [
-    import_node_path82.default.join(here, "rpc-tool", "mcp-server.cjs"),
-    import_node_path82.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
+    import_node_path79.default.join(here, "rpc-tool", "mcp-server.cjs"),
+    import_node_path79.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
   ];
-  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p2) => import_node_fs63.default.existsSync(p2));
+  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p2) => import_node_fs60.default.existsSync(p2));
   if (rpcToolServerScriptPath) {
-    const rpcToolLogPath = import_node_path82.default.join(logDir, "rpc-tool-mcp-server.log");
+    const rpcToolLogPath = import_node_path79.default.join(logDir, "rpc-tool-mcp-server.log");
     const rpcToolCfgPath = writeRpcToolMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: rpcToolServerScriptPath,
@@ -71329,26 +69524,39 @@ async function startDaemon(config) {
     );
   }
   const appBuilderServerCandidates = [
-    import_node_path82.default.join(here, "app-builder-plugin", "mcp-server.cjs"),
-    import_node_path82.default.join(here, "..", "dist", "app-builder-plugin", "mcp-server.cjs")
+    import_node_path79.default.join(here, "app-builder-plugin", "mcp-server.cjs"),
+    import_node_path79.default.join(here, "..", "dist", "app-builder-plugin", "mcp-server.cjs")
   ];
-  const appBuilderServerScriptPath = appBuilderServerCandidates.find((p2) => import_node_fs63.default.existsSync(p2));
+  const appBuilderServerScriptPath = appBuilderServerCandidates.find((p2) => import_node_fs60.default.existsSync(p2));
   if (appBuilderServerScriptPath) {
-    const appBuilderLogPath = import_node_path82.default.join(logDir, "app-builder-mcp-server.log");
-    const appBuilderCfgPath = writeAppBuilderMcpConfig({
-      dataDir: config.dataDir,
-      serverScriptPath: appBuilderServerScriptPath,
-      daemonToken: resolvedAuthToken,
-      daemonUrl: mcpDaemonUrl,
-      deployKitScriptsDir: import_node_path82.default.join(config.dataDir, "deploy-kit", "scripts"),
-      logPath: appBuilderLogPath
-    });
-    mcpConfigs.push({ id: "app-builder", path: appBuilderCfgPath, personas: APP_BUILDER_PERSONAS });
-    logger.info("app-builder.mcp.json written", {
-      path: appBuilderCfgPath,
-      server: appBuilderServerScriptPath,
-      serverLog: appBuilderLogPath
-    });
+    const appBuilderLogPath = import_node_path79.default.join(logDir, "app-builder-mcp-server.log");
+    const writeAppBuilderConfigFor = (personaId2) => {
+      const personaRoot = import_node_path79.default.join(config.dataDir, "personas", personaId2);
+      const secrets = secretsForKit(readSecrets(), import_node_path79.default.join(personaRoot, "extension-kit"));
+      return writeAppBuilderMcpConfig({
+        outDir: import_node_path79.default.join(config.dataDir, "persona-mcp"),
+        personaId: personaId2,
+        serverScriptPath: appBuilderServerScriptPath,
+        personaRoot,
+        templateDir: import_node_path79.default.join(personaRoot, "extension-kit", "examples", APP_BUILDER_TEMPLATE),
+        deployKitScriptsDir: import_node_path79.default.join(config.dataDir, "deploy-kit", "scripts"),
+        ...secrets ? { secrets } : {},
+        logPath: appBuilderLogPath
+      });
+    };
+    for (const personaId2 of APP_BUILDER_PERSONAS) {
+      const cfgPath = writeAppBuilderConfigFor(personaId2);
+      mcpConfigs.push({ id: `app-builder:${personaId2}`, path: cfgPath, personas: [personaId2] });
+      logger.info("app-builder.mcp.json written", { personaId: personaId2, path: cfgPath, server: appBuilderServerScriptPath });
+    }
+    refreshAppBuilderMcpConfig = (personaId2) => {
+      if (!APP_BUILDER_PERSONAS.includes(personaId2)) return;
+      try {
+        writeAppBuilderConfigFor(personaId2);
+      } catch (err) {
+        logger.warn("app-builder.mcp.json refresh failed", { personaId: personaId2, error: err instanceof Error ? err.message : String(err) });
+      }
+    };
   } else {
     logger.warn(
       "app-builder-plugin/mcp-server.cjs not found; clawd-app-builder tools disabled (dev tsx \u6A21\u5F0F\u4E0B\u9700\u5148\u8DD1\u8FC7 build)",
@@ -71356,7 +69564,7 @@ async function startDaemon(config) {
     );
   }
   const shiftStore = createShiftStore({
-    filePath: import_node_path82.default.join(config.dataDir, "shift.json"),
+    filePath: import_node_path79.default.join(config.dataDir, "shift.json"),
     ownerIdProvider: () => ownerPrincipalId,
     now: () => Date.now()
   });
@@ -71378,7 +69586,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path82.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path79.default.join(config.dataDir, "personas"),
     // dispatch / shift 自动化 spawn 按 persona 绑定 tool 起 B session（codex persona 用 codex）。
     // personaRegistry 声明在 manager 之后（同作用域 const，调用时机在启动完成后，无 TDZ 风险）。
     getPersonaDefaults: (personaId2) => personaRegistry.get(personaId2),
@@ -71435,10 +69643,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path82.default.isAbsolute(input.relPath) ? input.relPath : import_node_path82.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path79.default.isAbsolute(input.relPath) ? input.relPath : import_node_path79.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs63.default.statSync(absPath).size;
+          size = import_node_fs60.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -71479,9 +69687,9 @@ async function startDaemon(config) {
     logger.info("projects.seed-dropped", { dropped: droppedSeed.dropped, backup: droppedSeed.backup });
   }
   const projectsStore = new ProjectsStore({
-    file: import_node_path82.default.join(config.dataDir, "projects.json"),
+    file: import_node_path79.default.join(config.dataDir, "projects.json"),
     clawdDir: config.dataDir,
-    codexStateFile: import_node_path82.default.join(import_node_os28.default.homedir(), ".codex", ".codex-global-state.json"),
+    codexStateFile: import_node_path79.default.join(import_node_os28.default.homedir(), ".codex", ".codex-global-state.json"),
     logger
   });
   const observer = new SessionObserver({
@@ -71549,13 +69757,13 @@ async function startDaemon(config) {
     logger
   });
   registerAdapter("claude", claudeAdapter);
-  const codexIsolatedHome = import_node_path82.default.join(config.dataDir, "codex-home");
+  const codexIsolatedHome = import_node_path79.default.join(config.dataDir, "codex-home");
   try {
-    import_node_fs63.default.mkdirSync(codexIsolatedHome, { recursive: true });
+    import_node_fs60.default.mkdirSync(codexIsolatedHome, { recursive: true });
     for (const f of ["auth.json", "config.toml"]) {
-      const link = import_node_path82.default.join(codexIsolatedHome, f);
-      const target = import_node_path82.default.join(import_node_os28.default.homedir(), ".codex", f);
-      if (!import_node_fs63.default.existsSync(link) && import_node_fs63.default.existsSync(target)) import_node_fs63.default.symlinkSync(target, link);
+      const link = import_node_path79.default.join(codexIsolatedHome, f);
+      const target = import_node_path79.default.join(import_node_os28.default.homedir(), ".codex", f);
+      if (!import_node_fs60.default.existsSync(link) && import_node_fs60.default.existsSync(target)) import_node_fs60.default.symlinkSync(target, link);
     }
   } catch (err) {
     logger.warn("codex isolated home setup failed", { err: String(err) });
@@ -71566,17 +69774,17 @@ async function startDaemon(config) {
       logger,
       historyReader: new CodexHistoryReader({
         roots: codexRolloutRoots(config.dataDir),
-        sharedHome: import_node_path82.default.join(import_node_os28.default.homedir(), ".codex"),
+        sharedHome: import_node_path79.default.join(import_node_os28.default.homedir(), ".codex"),
         logger
       }),
       // projectPaths 每次调用现取 —— 用户新建 project 后立即生效，不用重启 daemon
       codexHomeFor: (cwd) => resolveCodexHome({
         cwd,
-        personaRoot: import_node_path82.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path79.default.join(config.dataDir, "personas"),
         // 必须用 listMerged（Codex registry ∪ 叠加层）：只用本地 list() 的话，用户在
         // Codex 里建的 project 不在表里，在它下面开的会话会被误判成隔离 → Codex 侧看不到
         projectPaths: projectsStore.listMerged().map((x) => x.path),
-        sharedHome: import_node_path82.default.join(import_node_os28.default.homedir(), ".codex"),
+        sharedHome: import_node_path79.default.join(import_node_os28.default.homedir(), ".codex"),
         isolatedHome: codexIsolatedHome
       }),
       // 附件图片验签：与 http-router /files 路由同一把 secret
@@ -71585,10 +69793,10 @@ async function startDaemon(config) {
   );
   registerAdapter(CODEX_CLOUD_TOOL_ID, new CloudCodexAdapter({ client: cloudGateway, logger, getSignSecret: () => authFile.token }));
   const piMcpBridgeCandidates = [
-    import_node_path82.default.join(here, "pi-mcp-bridge", "extension.cjs"),
-    import_node_path82.default.join(here, "..", "dist", "pi-mcp-bridge", "extension.cjs")
+    import_node_path79.default.join(here, "pi-mcp-bridge", "extension.cjs"),
+    import_node_path79.default.join(here, "..", "dist", "pi-mcp-bridge", "extension.cjs")
   ];
-  const piMcpBridgePath = piMcpBridgeCandidates.find((p2) => import_node_fs63.default.existsSync(p2));
+  const piMcpBridgePath = piMcpBridgeCandidates.find((p2) => import_node_fs60.default.existsSync(p2));
   if (piMcpBridgePath) {
     logger.info("pi-mcp-bridge extension resolved", { path: piMcpBridgePath });
   } else {
@@ -71782,27 +69990,12 @@ async function startDaemon(config) {
     now: () => Date.now(),
     ttlSeconds: 30 * 24 * 3600
   });
-  const getProjectStore = (userId) => new ProjectStore(deriveUserWorkDir(userId, usersRoot));
-  const appBuilderStore = getProjectStore(ownerPrincipalId);
   const attachmentUserWorkDir = (sid) => {
     const scope = manager.findOwnedSessionScope(sid);
     if (scope?.kind !== "persona") return null;
     const userId = scope.mode === "owner" ? ownerPrincipalId : scope.capId;
     return deriveUserWorkDir(userId, usersRoot);
   };
-  recoverInterruptedPublishJobs(appBuilderStore, logger).catch((err) => {
-    logger.warn("app-builder.publish.recover-startup-failed", {
-      error: err instanceof Error ? err.message : String(err)
-    });
-  });
-  const appBuilderPublishService = createPublishService();
-  const devServerSupervisor = new DevServerSupervisor();
-  devServerSupervisor.setLogger(logger);
-  const appBuilderPortRange = [];
-  for (let p2 = PROJECT_PORT_MIN; p2 <= PROJECT_PORT_MAX; p2++) appBuilderPortRange.push(p2);
-  const effectivePreviewPorts = Array.from(
-    /* @__PURE__ */ new Set([...config.previewPorts ?? [], ...appBuilderPortRange])
-  );
   const getOwnerIdentity = () => ({
     displayName: ownerDisplayName,
     ownerId,
@@ -71899,11 +70092,11 @@ async function startDaemon(config) {
         // 'persona/<pid>/owner'，default 走 'default'。
         getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
         // guest path guard：candidate 必须在 personaRoot 子树或调用者自己的 user-dir 下
-        personaRoot: import_node_path82.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path79.default.join(config.dataDir, "personas"),
         usersRoot
       },
       // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-      personaRoot: import_node_path82.default.join(config.dataDir, "personas"),
+      personaRoot: import_node_path79.default.join(config.dataDir, "personas"),
       // v2 多人 persona 隔离：handler 派生 guest user-dir 放行
       usersRoot,
       // v2 Phase 6: whoami handler 装在 owner principal.displayName + persona 解析
@@ -72001,53 +70194,6 @@ async function startDaemon(config) {
       // dispatcher 的 FEISHU_GATED_METHODS gate 已保证未登录时这些 RPC 到不了 handler，
       // 这里的 FEISHU_LOGIN_REQUIRED 抛错只是防御纵深。
       feishuDevice: feishuDeviceDeps,
-      // app-builder
-      appBuilderStore,
-      getProjectStore,
-      publishService: appBuilderPublishService,
-      createProjectOnDisk,
-      devServerLifecycle: devServerSupervisor,
-      // 单栏 refactor §5.6.2 stage fix：appBuilder:project-updated 帧通过 wsServer broadcast。
-      // 推给所有 owner 连接（picker 可能没订阅特定 session，全局 broadcast 最稳）。
-      // people/mirror（spec 2026-06-04-people-mode-app-builder-write-and-push）：额外推给订阅该 project
-      // 绑定 session 的 client（mirror guest 经 session:observe 订阅），让远端协同者也看到 stage / 发布进度。
-      // 同一帧 owner 也走 project-updated 复用给 publish-progress/failed（app-builder.ts 内 broadcast 闭包）：
-      // name 在 event.project.name（project-updated）或 event.name（publish 帧）。owner 双栏会同时命中
-      // owner-broadcast + session-broadcast，但 UI patch 幂等（同 project 覆盖）无害。
-      broadcastProjectUpdated: (event) => {
-        const ev = event;
-        wsServer?.broadcastToOwners(ev);
-        const projectName = event.project?.name ?? event.name;
-        const boundSid = projectName ? manager.findOwnedSessionByAppBuilderProject(projectName)?.sessionId : void 0;
-        if (boundSid) wsServer?.broadcastToSession(boundSid, ev);
-      },
-      // 发布上线脚手架化 (spec 2026-06-03 §5.2):
-      // appBuilderPersonaRoot 用于拼 publish.sh 绝对路径（persona-app-builder 安装在
-      // dataDir/personas/persona-app-builder 之下，extension-kit/scripts/publish.sh 是相对路径）。
-      appBuilderPersonaRoot: import_node_path82.default.join(config.dataDir, "personas", "persona-app-builder"),
-      // 共享 deploy-kit 根：scaffold/publish 脚本骨架 + 阿里云凭证单一真源。
-      deployKitRoot: import_node_path82.default.join(config.dataDir, "deploy-kit"),
-      // scaffold/publish 按当前 session 的 persona 解析其安装根，让每个 persona 用自己的模板/注入配置。
-      resolvePersonaRoot: (personaId2) => import_node_path82.default.join(config.dataDir, "personas", personaId2),
-      // 凭据表（M1b Step 5）：与 MCP 那条同一张表、同一个来源，只是交付给另一个子进程。
-      readSecrets,
-      // 发布上线脚手架化 (spec 2026-06-03 §5.2.2):
-      // 复用 SessionManagerDeps.broadcastFrame 同款 dispatch 逻辑 —— runner 调 manager.send
-      // 取回 broadcast 帧后逐帧 push 到 transport，跟 manager 自身的 deps 一致。
-      broadcastSessionFrame: (frame, target) => {
-        if (target === "all") {
-          transport?.broadcastAll(frame);
-          return;
-        }
-        const sid = frame.sessionId;
-        if (!sid) return;
-        if (target === "first-subscriber") {
-          const handle = transport?.firstSubscriber(sid);
-          if (handle) handle.send(frame);
-          return;
-        }
-        transport?.broadcastToSession(sid, frame);
-      },
       logger,
       // shift v1：shift:list 桥接 handler 透传 ShiftStore 单例（同实例也喂给
       // shift-internal:* MCP loopback handler）。owner 过滤用 ownerPrincipalId（跨
@@ -72225,7 +70371,7 @@ async function startDaemon(config) {
   });
   shiftScheduler.start();
   logger.info("shift scheduler started", { shiftCount: shiftStore.list().length });
-  const larkBotStore = createLarkBotBindingStore(import_node_path82.default.join(config.dataDir, "personas"));
+  const larkBotStore = createLarkBotBindingStore(import_node_path79.default.join(config.dataDir, "personas"));
   const larkBotCloud = createLarkBotCloudClient({
     api: config.clawosApi ?? DEFAULT_CLAWOS_API,
     apiKey: resolveClawdTicketsApiKey(),
@@ -72239,7 +70385,7 @@ async function startDaemon(config) {
     store: larkBotStore,
     fetchResource: (appId, messageId, fileKey, maxBytes, type) => larkBotCloud.fetchResource(appId, messageId, fileKey, maxBytes, type),
     // 图片落 guest userWorkDir 下（capId = lark-<chat_id>）：CC 经 --add-dir + allowRead carve 可 Read
-    mediaRootFor: (chatId) => import_node_path82.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
+    mediaRootFor: (chatId) => import_node_path79.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
     isShuttingDown: () => larkDraining,
     logger: {
       warn: (msg) => logger.warn(msg),
@@ -72392,9 +70538,7 @@ async function startDaemon(config) {
         }
         return result;
       }
-    },
-    // app-builder build 模式：/preview/<port>/ 反代 dev server 的端口白名单（见 spec §三.2）
-    previewPorts: effectivePreviewPorts
+    }
   });
   wsServer = new LocalWsServer({
     host: config.host,
@@ -72432,8 +70576,6 @@ async function startDaemon(config) {
     },
     // file-sharing HTTP 路由复用 daemon 同端口（spec §5 第 3 条）；router 自己处理 auth + 404
     httpRequestHandler: httpRouter,
-    // app-builder build 模式：/preview/<port>/ HMR websocket upgrade 转发的端口白名单（同 http-router 配置）
-    previewPorts: effectivePreviewPorts,
     // 订阅成功后给该 client 重放 in-flight pendingQuestions（plan: clawd-question-server-truth）。
     // daemon 是 pendingQuestions 的唯一 source of truth；新 client 接入 / 刷新页面时
     // 把当前所有未决 question 以 session:question 帧定向回放，让 UI 不再误显示 Ended。
@@ -72546,8 +70688,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path82.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path82.default.join(logDir, "frpc.log")}`
+        `Frpc config: ${import_node_path79.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path79.default.join(logDir, "frpc.log")}`
       ];
       const width2 = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width2 + 4);
@@ -72560,8 +70702,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path82.default.join(config.dataDir, "connect.txt");
-        import_node_fs63.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path79.default.join(config.dataDir, "connect.txt");
+        import_node_fs60.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -72618,9 +70760,6 @@ ${bar}
     observer.stopAll();
     manager.stopAll();
     await extensionRuntime.stopAll();
-    await devServerSupervisor.stopAll().catch((err) => {
-      logger.warn("shutdown.dev-server-stopAll-failed", { error: err instanceof Error ? err.message : String(err) });
-    });
     if (tunnelMgr) {
       await tunnelMgr.stop();
     }
@@ -72648,9 +70787,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path82.default.join(dataDir, "persons");
+  const dir = import_node_path79.default.join(dataDir, "persons");
   try {
-    import_node_fs63.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs60.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }