@clawos-dev/clawd 0.2.547 → 0.2.549

package/dist/cli.cjs

@@ -450,8 +450,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path102, errorMaps, issueData } = params;
-      const fullPath = [...path102, ...issueData.path || []];
+      const { data, path: path100, errorMaps, issueData } = params;
+      const fullPath = [...path100, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -762,11 +762,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path102, key) {
+      constructor(parent, value, path100, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path102;
+        this._path = path100;
         this._key = key;
       }
       get path() {
@@ -6098,7 +6098,7 @@ function cloudEngineOk(tool) {
 function repoSlug(url) {
   return url.trim().replace(/^git@[^:]+:/, "").replace(/^https?:\/\/[^/]+\//, "").replace(/\.git$/, "");
 }
-var DeployFileSchema, SCAN_BASE_KINDS, ScanBaseKindSchema, DeployScanStatusSchema, DeployScanSchema, DeployRepoSchema, DeploySecretPresenceSchema, DEPLOY_STAGE_STATUSES, DeployStageStatusSchema, DEPLOY_STAGE_KEYS, DeployStageKeySchema, DeployJobSchema, DeployRunSchema, DeployStateSchema, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeployRerunJobArgsSchema, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
+var DeployFileSchema, SCAN_BASE_KINDS, ScanBaseKindSchema, DeployScanStatusSchema, DeployScanSchema, DeployRepoSchema, DeploySecretPresenceSchema, DEPLOY_STAGE_STATUSES, DeployStageStatusSchema, DEPLOY_STAGE_KEYS, DeployStageKeySchema, DeployJobSchema, DeployRunSchema, DeployStateSchema, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployReleaseArgsSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeployRerunJobArgsSchema, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
 var init_deploy_schemas = __esm({
   "../protocol/src/deploy-schemas.ts"() {
     "use strict";
@@ -6228,6 +6228,9 @@ var init_deploy_schemas = __esm({
     DeployPersonaArgsSchema = external_exports.object({
       personaId: external_exports.string().min(1)
     }).strict();
+    DeployReleaseArgsSchema = DeployPersonaArgsSchema.extend({
+      scanBase: ScanBaseKindSchema.optional()
+    }).strict();
     DeployPatchArgsSchema = external_exports.object({
       personaId: external_exports.string().min(1),
       patch: external_exports.object({
@@ -8999,8 +9002,8 @@ var init_methods = __esm({
         args: DeployFinishScanArgsSchema
       },
       "deploy:release": {
-        summary: "\u53D1\u5E03\u2014\u2014\u4E0A\u4E91\u552F\u4E00\u7684\u52A8\u4F5C\uFF0C\u626B\u63CF\u662F\u5B83\u7684\u7B2C\u4E00\u6BB5\u3002**\u6CA1\u4ED3\u5E93\u5148\u5EFA\u4ED3**\uFF08GitHub REST \u5EFA\u5728\u7EC4\u7EC7\u4E0B\u3001\u79C1\u6709\uFF0Cgit \u63A8\u9996\u4E2A\u63D0\u4EA4\uFF1Btoken \u6765\u81EA\u672C\u673A git \u7684\u8EAB\u4EFD\uFF0C\u6CA1\u6388\u6743\u5148\u62D2\uFF09\u3002\u6E05\u5355\u8FC7\u65F6\uFF08persona \u6539\u8FC7 / \u6CA1\u626B\u8FC7 / \u4E0A\u6B21\u626B\u5931\u8D25\uFF09\uFF1A\u5148\u628A persona \u76EE\u5F55\u63D0\u4EA4\u5230\u672C\u5730\uFF08\u4E0D\u63A8\uFF09\uFF0C\u8D77 persona-butler \u7684\u626B\u63CF\u4F1A\u8BDD\uFF0C\u56DE outcome=scanning\u2014\u2014\u7ED3\u679C\u5199\u8FDB .clawd/deploy.json\uFF08\u6E05\u5355\uFF0C\u8FDB\u4ED3\u5E93\uFF09\u4E0E .clawd/deploy-scan.json\uFF08\u8BC1\u636E\uFF0C\u4E0D\u8FDB\u4ED3\u5E93\uFF09\uFF0C\u6B63\u5728\u626B\u7684\u8BDD\u539F\u6837\u8FD4\u56DE\u4E0D\u8D77\u7B2C\u4E8C\u4E2A\u4F1A\u8BDD\u3002\u6E05\u5355\u65B0\u9C9C\uFF1A\u8FC7\u95F8\uFF08\u6BCF\u4E2A\u53D8\u91CF\u540D\u90FD\u5728 Secrets \u91CC\u3001\u8FDE\u63A5\u5668\u6765\u6E90\u70B9\u8FC7\u3001\u9009\u4E86\u6A21\u578B\uFF09\u2192 \u91CD\u5199 workflow \u6A21\u677F \u2192 git add -A \u2192 \u7A7A\u63D0\u4EA4\u4E5F\u5141\u8BB8 \u2192 push\uFF0C\u56DE outcome=pushed \u5E26 commit \u4E0E Actions \u5730\u5740\uFF1B\u4ED3\u5E93\u91CC\u7684\u6D41\u6C34\u7EBF\u63A5\u7740\u6784\u955C\u50CF\u3001\u8BD5\u8DD1\u3001\u767B\u8BB0\u3002owner-only",
-        args: DeployPersonaArgsSchema
+        summary: "\u53D1\u5E03\u2014\u2014\u4E0A\u4E91\u552F\u4E00\u7684\u52A8\u4F5C\uFF0C\u626B\u63CF\u662F\u5B83\u7684\u7B2C\u4E00\u6BB5\u3002**\u6CA1\u4ED3\u5E93\u5148\u5EFA\u4ED3**\uFF08GitHub REST \u5EFA\u5728\u7EC4\u7EC7\u4E0B\u3001\u79C1\u6709\uFF0Cgit \u63A8\u9996\u4E2A\u63D0\u4EA4\uFF1Btoken \u6765\u81EA\u672C\u673A git \u7684\u8EAB\u4EFD\uFF0C\u6CA1\u6388\u6743\u5148\u62D2\uFF09\u3002\u6E05\u5355\u8FC7\u65F6\uFF08persona \u6539\u8FC7 / \u6CA1\u626B\u8FC7 / \u4E0A\u6B21\u626B\u5931\u8D25\uFF09\uFF1A\u5148\u628A persona \u76EE\u5F55\u63D0\u4EA4\u5230\u672C\u5730\uFF08\u4E0D\u63A8\uFF09\uFF0C\u8D77 persona-butler \u7684\u626B\u63CF\u4F1A\u8BDD\uFF0C\u56DE outcome=scanning\u2014\u2014\u7ED3\u679C\u5199\u8FDB .clawd/deploy.json\uFF08\u6E05\u5355\uFF0C\u8FDB\u4ED3\u5E93\uFF09\u4E0E .clawd/deploy-scan.json\uFF08\u8BC1\u636E\uFF0C\u4E0D\u8FDB\u4ED3\u5E93\uFF09\uFF0C\u6B63\u5728\u626B\u7684\u8BDD\u539F\u6837\u8FD4\u56DE\u4E0D\u8D77\u7B2C\u4E8C\u4E2A\u4F1A\u8BDD\u3002\u6E05\u5355\u65B0\u9C9C\uFF1A\u8FC7\u95F8\uFF08\u6BCF\u4E2A\u53D8\u91CF\u540D\u90FD\u5728 Secrets \u91CC\u3001\u8FDE\u63A5\u5668\u6765\u6E90\u70B9\u8FC7\u3001\u9009\u4E86\u6A21\u578B\uFF09\u2192 \u91CD\u5199 workflow \u6A21\u677F \u2192 git add -A \u2192 \u7A7A\u63D0\u4EA4\u4E5F\u5141\u8BB8 \u2192 push\uFF0C\u56DE outcome=pushed \u5E26 commit \u4E0E Actions \u5730\u5740\uFF1B\u4ED3\u5E93\u91CC\u7684\u6D41\u6C34\u7EBF\u63A5\u7740\u6784\u955C\u50CF\u3001\u8BD5\u8DD1\u3001\u767B\u8BB0\u3002\u5E26 scanBase\uFF08hard / soft\uFF09= \u8FD9\u6B21\u4E00\u5B9A\u5148\u626B\u3001\u6309\u8BE5\u6863\u4F4D\u626B\uFF08soft \u4E0D\u6210\u7ACB\u81EA\u52A8\u9000 hard\uFF09\uFF0C\u6E05\u5355\u65B0\u9C9C\u4E5F\u56DE scanning\uFF1Bowner-only",
+        args: DeployReleaseArgsSchema
       },
       "deploy:rerunJob": {
         summary: "\u539F\u6837\u91CD\u8DD1\u6700\u65B0\u90A3\u6761\u6D41\u6C34\u7EBF\u91CC\u5931\u8D25\u7684\u67D0\u4E00\u6BB5\uFF08GitHub REST rerun job\uFF09\u3002**\u540C\u4E00\u4E2A commit\u3001\u540C\u4E00\u4EFD\u8F93\u5165**\uFF0C\u4E0D\u4EA7\u751F\u65B0\u63D0\u4EA4\u2014\u2014\u6539\u4E86 persona \u5185\u5BB9\u6216\u51ED\u636E\u8981\u8D70 deploy:release\u3002jobId \u5FC5\u987B\u5C5E\u4E8E\u6700\u65B0\u90A3\u6761 run\uFF1Bowner-only",
@@ -10033,8 +10036,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path102 = req.path;
-        _req.url = typeof path102 === "string" ? path102 : req.url ? req.url.path || req.url : void 0;
+        const path100 = req.path;
+        _req.url = typeof path100 === "string" ? path100 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -10199,14 +10202,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path102) {
+    function parsePath(path100) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i2 = 0; i2 < path102.length; i2++) {
-        const char = path102[i2];
+      for (let i2 = 0; i2 < path100.length; i2++) {
+        const char = path100[i2];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -10337,10 +10340,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path102 of paths) {
-        const parts = parsePath(path102);
+      for (const path100 of paths) {
+        const parts = parsePath(path100);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path102, remove);
+          redactWildcardPath(obj, parts, censor, path100, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -10425,8 +10428,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path102) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path102];
+            const wrappedCensor = typeof censor === "function" ? (value, path100) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path100];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -10461,8 +10464,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path102 of pathsToClone) {
-        const parts = parsePath(path102);
+      for (const path100 of pathsToClone) {
+        const parts = parsePath(path100);
         let current = pathStructure;
         for (let i2 = 0; i2 < parts.length; i2++) {
           const part = parts[i2];
@@ -10514,24 +10517,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path102) {
-      if (typeof path102 !== "string") {
+    function validatePath(path100) {
+      if (typeof path100 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path102 === "") {
+      if (path100 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path102.includes("..")) {
-        throw new Error(`Invalid redaction path (${path102})`);
+      if (path100.includes("..")) {
+        throw new Error(`Invalid redaction path (${path100})`);
       }
-      if (path102.includes(",")) {
-        throw new Error(`Invalid redaction path (${path102})`);
+      if (path100.includes(",")) {
+        throw new Error(`Invalid redaction path (${path100})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i2 = 0; i2 < path102.length; i2++) {
-        const char = path102[i2];
+      for (let i2 = 0; i2 < path100.length; i2++) {
+        const char = path100[i2];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -10545,20 +10548,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path102})`);
+            throw new Error(`Invalid redaction path (${path100})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path102})`);
+        throw new Error(`Invalid redaction path (${path100})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path102 of paths) {
-        validatePath(path102);
+      for (const path100 of paths) {
+        validatePath(path100);
       }
     }
     function slowRedact(options = {}) {
@@ -10726,8 +10729,8 @@ var require_redaction = __commonJS({
         if (shape[k3] === null) {
           o2[k3] = (value) => topCensor(value, [k3]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path102) => {
-            return censor(value, [k3, ...path102]);
+          const wrappedCensor = typeof censor === "function" ? (value, path100) => {
+            return censor(value, [k3, ...path100]);
           } : censor;
           o2[k3] = Redact({
             paths: shape[k3],
@@ -10945,10 +10948,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs91 = require("fs");
+    var fs90 = require("fs");
     var EventEmitter2 = require("events");
     var inherits = require("util").inherits;
-    var path102 = require("path");
+    var path100 = require("path");
     var sleep2 = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -11002,20 +11005,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs91.mkdirSync(path102.dirname(file), { recursive: true });
-          const fd = fs91.openSync(file, flags, mode);
+          if (sonic.mkdir) fs90.mkdirSync(path100.dirname(file), { recursive: true });
+          const fd = fs90.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs91.mkdir(path102.dirname(file), { recursive: true }, (err) => {
+        fs90.mkdir(path100.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs91.open(file, flags, mode, fileOpened);
+          fs90.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs91.open(file, flags, mode, fileOpened);
+        fs90.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -11056,8 +11059,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs91.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs91.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs90.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs90.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -11066,15 +11069,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs91.writeSync(this.fd, this._writingBuf);
+            return fs90.writeSync(this.fd, this._writingBuf);
           }
-          return fs91.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs90.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs91.write(this.fd, this._writingBuf, this.release);
+            return fs90.write(this.fd, this._writingBuf, this.release);
           }
-          return fs91.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs90.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -11131,7 +11134,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs91.fsyncSync(this.fd);
+          fs90.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -11245,7 +11248,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs91.fsync(this.fd, (err) => {
+            fs90.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -11347,7 +11350,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs91.close(fd, (err) => {
+          fs90.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -11396,7 +11399,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n2 = Buffer.isBuffer(buf) ? fs91.writeSync(this.fd, buf) : fs91.writeSync(this.fd, buf, "utf8");
+          const n2 = Buffer.isBuffer(buf) ? fs90.writeSync(this.fd, buf) : fs90.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n2);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -11412,7 +11415,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs91.fsyncSync(this.fd);
+        fs90.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -11433,7 +11436,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n2 = fs91.writeSync(this.fd, buf);
+          const n2 = fs90.writeSync(this.fd, buf);
           buf = buf.subarray(n2);
           this._len = Math.max(this._len - n2, 0);
           if (buf.length <= 0) {
@@ -11461,13 +11464,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs91.writeSync(this.fd, this._writingBuf) : fs91.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs90.writeSync(this.fd, this._writingBuf) : fs90.writeSync(this.fd, this._writingBuf, "utf8");
           release2(null, written);
         } catch (err) {
           release2(err);
         }
       } else {
-        fs91.write(this.fd, this._writingBuf, release2);
+        fs90.write(this.fd, this._writingBuf, release2);
       }
     }
     function actualWriteBuffer() {
@@ -11476,7 +11479,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs91.writeSync(this.fd, this._writingBuf);
+          const written = fs90.writeSync(this.fd, this._writingBuf);
           release2(null, written);
         } catch (err) {
           release2(err);
@@ -11485,7 +11488,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs91.write(this.fd, this._writingBuf, release2);
+        fs90.write(this.fd, this._writingBuf, release2);
       }
     }
     function actualClose(sonic) {
@@ -11501,12 +11504,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs91.fsync(sonic.fd, closeWrapped);
+        fs90.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs91.close(sonic.fd, done);
+          fs90.close(sonic.fd, done);
         } else {
           done();
         }
@@ -14641,11 +14644,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path102, added, removed, oldPosInc, options) {
-        var last = path102.lastComponent;
+      addToPath: function addToPath(path100, added, removed, oldPosInc, options) {
+        var last = path100.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path102.oldPos + oldPosInc,
+            oldPos: path100.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -14655,7 +14658,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path102.oldPos + oldPosInc,
+            oldPos: path100.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -15237,10 +15240,10 @@ function attachmentToHistoryMessage(o2, ts) {
     const memories = raw.map((m3) => {
       if (!m3 || typeof m3 !== "object") return null;
       const rec6 = m3;
-      const path102 = typeof rec6.path === "string" ? rec6.path : null;
+      const path100 = typeof rec6.path === "string" ? rec6.path : null;
       const content = typeof rec6.content === "string" ? rec6.content : null;
-      if (!path102 || content == null) return null;
-      const entry = { path: path102, content };
+      if (!path100 || content == null) return null;
+      const entry = { path: path100, content };
       if (typeof rec6.mtimeMs === "number") entry.mtimeMs = rec6.mtimeMs;
       return entry;
     }).filter((m3) => m3 !== null);
@@ -16106,10 +16109,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m3) => {
       if (!m3 || typeof m3 !== "object") return null;
       const rec6 = m3;
-      const path102 = typeof rec6.path === "string" ? rec6.path : null;
+      const path100 = typeof rec6.path === "string" ? rec6.path : null;
       const content = typeof rec6.content === "string" ? rec6.content : null;
-      if (!path102 || content == null) return null;
-      const out = { path: path102, content };
+      if (!path100 || content == null) return null;
+      const out = { path: path100, content };
       if (typeof rec6.mtimeMs === "number") out.mtimeMs = rec6.mtimeMs;
       return out;
     }).filter((m3) => m3 !== null);
@@ -37083,8 +37086,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path102) {
-      var parts = path102.split("/");
+    exports2.resolve = function(path100) {
+      var parts = path100.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -42937,18 +42940,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o2);
       this.files[name] = object;
     };
-    var parentFolder = function(path102) {
-      if (path102.slice(-1) === "/") {
-        path102 = path102.substring(0, path102.length - 1);
+    var parentFolder = function(path100) {
+      if (path100.slice(-1) === "/") {
+        path100 = path100.substring(0, path100.length - 1);
       }
-      var lastSlash = path102.lastIndexOf("/");
-      return lastSlash > 0 ? path102.substring(0, lastSlash) : "";
+      var lastSlash = path100.lastIndexOf("/");
+      return lastSlash > 0 ? path100.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path102) {
-      if (path102.slice(-1) !== "/") {
-        path102 += "/";
+    var forceTrailingSlash = function(path100) {
+      if (path100.slice(-1) !== "/") {
+        path100 += "/";
       }
-      return path102;
+      return path100;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -43950,7 +43953,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path81.default.dirname(opts.recordPath);
+  const dir = import_node_path79.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -43964,8 +43967,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs62.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs62.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs61.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs61.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -43990,12 +43993,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs62, import_node_path81;
+var import_node_fs61, import_node_path79;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs62 = __toESM(require("fs"), 1);
-    import_node_path81 = __toESM(require("path"), 1);
+    import_node_fs61 = __toESM(require("fs"), 1);
+    import_node_path79 = __toESM(require("path"), 1);
   }
 });
 
@@ -44038,7 +44041,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs63.mkdtempSync)(import_node_path82.default.join(import_node_os29.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs62.mkdtempSync)(import_node_path80.default.join(import_node_os29.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -44199,19 +44202,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs63.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs62.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs63, import_node_os29, import_node_path82;
+var import_node_fs62, import_node_os29, import_node_path80;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs63 = require("fs");
+    import_node_fs62 = require("fs");
     import_node_os29 = __toESM(require("os"), 1);
-    import_node_path82 = __toESM(require("path"), 1);
+    import_node_path80 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -44483,8 +44486,8 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path80 = __toESM(require("path"), 1);
-var import_node_fs61 = __toESM(require("fs"), 1);
+var import_node_path78 = __toESM(require("path"), 1);
+var import_node_fs60 = __toESM(require("fs"), 1);
 var import_node_os28 = __toESM(require("os"), 1);
 var import_node_crypto22 = require("crypto");
 var import_node_url5 = require("url");
@@ -45796,10 +45799,9 @@ function buildSpawnContext(state, deps) {
   const personaId2 = file.ownerPersonaId;
   if (personaId2) env.CLAWD_PERSONA_ID = personaId2;
   const userWorkDir = state.subSessionMeta?.userWorkDir;
-  if (userWorkDir) env.CLAWD_APP_BUILDER_ROOT = userWorkDir;
-  const mcpConfigs = (deps.getMcpConfigs?.() ?? []).filter(
-    (c2) => !c2.personas || personaId2 != null && c2.personas.includes(personaId2)
-  );
+  if (personaId2) env.CLAWD_PERSONA_DIR = file.cwd;
+  if (personaId2 && userWorkDir) env.CLAWD_WORK_DIR = userWorkDir;
+  const mcpConfigs = deps.getMcpConfigs?.() ?? [];
   const ctx = {
     cwd: file.cwd,
     toolSessionId: file.toolSessionId,
@@ -46642,9 +46644,13 @@ var import_node_fs7 = __toESM(require("fs"), 1);
 var import_node_path6 = __toESM(require("path"), 1);
 var PLACEHOLDER = /\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g;
 var PERSONA_SECRET_MCP_ID_PREFIX = "persona-secrets:";
+var PERSONA_DIR_PLACEHOLDER = "${CLAWD_PERSONA_DIR}";
 function hasPlaceholder(v3) {
   return typeof v3 === "string" && new RegExp(PLACEHOLDER).test(v3);
 }
+function renderPersonaDir(v3, personaDir) {
+  return v3.split(PERSONA_DIR_PLACEHOLDER).join(personaDir);
+}
 function renderPersonaMcpSecrets(args) {
   const src = import_node_path6.default.join(args.personaDir, ".mcp.json");
   let parsed;
@@ -46664,13 +46670,17 @@ function renderPersonaMcpSecrets(args) {
   for (const [name, raw] of Object.entries(servers)) {
     const def = raw ?? {};
     const env = def.env && typeof def.env === "object" ? def.env : void 0;
-    if (Array.isArray(def.args) && def.args.some(hasPlaceholder)) {
+    const command = typeof def.command === "string" ? renderPersonaDir(def.command, args.personaDir) : void 0;
+    const rawArgs = Array.isArray(def.args) ? def.args : void 0;
+    const argv = rawArgs?.map((a2) => typeof a2 === "string" ? renderPersonaDir(a2, args.personaDir) : a2);
+    const argvHas = command !== void 0 && command !== def.command || argv !== void 0 && argv.some((a2, i2) => a2 !== rawArgs[i2]);
+    if (argv?.some(hasPlaceholder)) {
       args.logger?.warn("persona.mcp-secret.placeholder-in-args", { persona: args.personaId, server: name });
     }
     const headers = def.headers && typeof def.headers === "object" ? def.headers : void 0;
     const envHas = !!env && Object.values(env).some(hasPlaceholder);
     const headersHas = !!headers && Object.values(headers).some(hasPlaceholder);
-    if (!envHas && !headersHas) continue;
+    if (!envHas && !headersHas && !argvHas) continue;
     const renderTable = (table) => {
       const out = {};
       for (const [k3, v3] of Object.entries(table)) {
@@ -46683,7 +46693,13 @@ function renderPersonaMcpSecrets(args) {
       }
       return out;
     };
-    rendered[name] = { ...def, ...envHas ? { env: renderTable(env) } : {}, ...headersHas ? { headers: renderTable(headers) } : {} };
+    rendered[name] = {
+      ...def,
+      ...command !== void 0 ? { command } : {},
+      ...argv !== void 0 ? { args: argv } : {},
+      ...envHas ? { env: renderTable(env) } : {},
+      ...headersHas ? { headers: renderTable(headers) } : {}
+    };
   }
   if (Object.keys(rendered).length === 0) return void 0;
   if (missing.size > 0) {
@@ -46695,7 +46711,7 @@ function renderPersonaMcpSecrets(args) {
   const outPath = import_node_path6.default.join(args.outDir, `${safeFileName(args.personaId)}.mcp.json`);
   import_node_fs7.default.mkdirSync(args.outDir, { recursive: true, mode: 448 });
   const content = {
-    _comment: "daemon \u6BCF\u6B21 spawn \u73B0\u6E32\uFF1B\u6765\u6E90\u662F persona \u76EE\u5F55\u7684 .mcp.json\uFF08\u53EA\u6709\u58F0\u660E\uFF09+ \u51ED\u636E\u8868\uFF08\u53EA\u6709\u503C\uFF09\u3002\u540C\u540D server \u538B\u8FC7 persona \u76EE\u5F55\u90A3\u4EFD\uFF0C\u503C\u56E0\u6B64\u4E0D\u843D persona \u76EE\u5F55\u3001\u4E0D\u8FDB agent \u4E3B\u8FDB\u7A0B env\u3002\u624B\u6539\u65E0\u6548\u3002",
+    _comment: "daemon \u6BCF\u6B21 spawn \u73B0\u6E32\uFF1B\u6765\u6E90\u662F persona \u76EE\u5F55\u7684 .mcp.json\uFF08\u53EA\u6709\u58F0\u660E\uFF09+ \u51ED\u636E\u8868\uFF08\u53EA\u6709\u503C\uFF09+ persona \u76EE\u5F55\u8DEF\u5F84\uFF08args \u91CC\u7684 ${CLAWD_PERSONA_DIR}\uFF09\u3002\u540C\u540D server \u538B\u8FC7 persona \u76EE\u5F55\u90A3\u4EFD\uFF0C\u503C\u56E0\u6B64\u4E0D\u843D persona \u76EE\u5F55\u3001\u4E0D\u8FDB agent \u4E3B\u8FDB\u7A0B env\u3002\u624B\u6539\u65E0\u6548\u3002",
     mcpServers: rendered
   };
   const tmp = `${outPath}.tmp-${process.pid}-${Date.now()}`;
@@ -46703,8 +46719,7 @@ function renderPersonaMcpSecrets(args) {
   import_node_fs7.default.renameSync(tmp, outPath);
   return {
     id: `${PERSONA_SECRET_MCP_ID_PREFIX}${args.personaId}`,
-    path: outPath,
-    personas: [args.personaId]
+    path: outPath
   };
 }
 function attachPersonaSecretMcp(ctx, resolve9) {
@@ -49814,7 +49829,7 @@ var PersonaStore = class {
    *
    * 位置不是随手挑的，两条既有约定叠出来的：`.clawd/` 是 daemon 声明「不动」的 persona 私有区
    * （不在 seed.ts 的 DAEMON_MANAGED_PATHS 里），`.local` 是仓内已成立的「本机个人 override
-   * 永不被 OTA 覆盖」后缀（见 seed.refreshDeployKit）。于是内置 persona 的 CLAUDE.md 继续被
+   * 永不被 OTA 覆盖」后缀。于是内置 persona 的 CLAUDE.md 继续被
    * refresh 覆盖成 bundle 新版、用户写的这层原样活着。
    *
    * 同 sandbox-settings.json 的理由：放 `.clawd/` 而非 persona 根目录，让 CC 的 project
@@ -50229,12 +50244,12 @@ var DEFAULT_PERSONAS = [
     // 与 app-builder 对齐"调用阿里云的工作方式"（owner 2026-06-17 要求）：开发型 profile —— 放开文件/web
     // 工具 + node/pnpm 工具链精确路径 + 出站 TLD 通配白名单。html-slides 需要联网（git clone frontend-slides
     // skill、调阿里云 CLI/SDK）。
-    // 阿里云凭证：**复用共享 deploy-kit 单源**（$HOME/.clawd/deploy-kit/.secrets/aliyun.env.local，使用者自己写、
-    // 全 FC persona 共用；bundle 不再 ship AK，见 specs/2026-09-18-aliyun-ak-leak-rotate-design.md），不在 persona
-    // 目录另存一份。app-builder 的 FC 部署走 daemon 侧脚本（沙箱外）故其 profile 无需 carve 这个路径；html-slides
-    // 没有 daemon 侧流程、要在 cc 沙箱内直接 `set -a; . $HOME/.clawd/deploy-kit/.secrets/aliyun.env.local; set +a`
-    // 后调 aliyun CLI（env 凭证绕过沙箱外的 ~/.aliyun/），所以这里**额外**把这两个凭证文件加进 allowRead
-    // （denyRead '~/' 之上的精确凿洞，单文件、最小暴露，同 ~/.npmrc 先例；aliyun.env 是老机器上的遗留文件）。
+    // 阿里云凭证：**凭据表单源**（$HOME/.clawd/secrets/aliyun.env，使用者自己写；bundle 不 ship AK，见
+    // specs/2026-09-18-aliyun-ak-leak-rotate-design.md；deploy-kit 下那份 .secrets/ 已随 design 2026-09-19-persona-mcp-single-source 删），
+    // 不在 persona 目录另存一份。app-builder 的 FC 部署由 clawd-app-builder MCP server 起（沙箱外、AK 在它 env 里）故其 profile
+    // 无需 carve 这个路径；html-slides 没有 daemon 侧流程、要在 cc 沙箱内直接 `set -a; . $HOME/.clawd/secrets/aliyun.env; set +a`
+    // 后调 aliyun CLI（env 凭证绕过沙箱外的 ~/.aliyun/），所以这里**额外**把这个凭证文件加进 allowRead
+    // （denyRead '~/' 之上的精确凿洞，单文件、最小暴露，同 ~/.npmrc 先例）。
     // excludedCommands: ['aliyun *'] —— 额外把 aliyun CLI 放沙箱外跑（逃出 seatbelt 直接用宿主凭证/网络），
     // 与上面沙箱内 env 凭证方案并存，按运行时实际命令前缀匹配生效。
     sandboxProfile: {
@@ -50244,7 +50259,7 @@ var DEFAULT_PERSONAS = [
       },
       sandbox: {
         filesystem: {
-          allowRead: ["~/.npmrc", "~/Library/Preferences/pnpm", "~/.nvm", "~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store", "~/.clawd/deploy-kit/.secrets/aliyun.env", "~/.clawd/deploy-kit/.secrets/aliyun.env.local"],
+          allowRead: ["~/.npmrc", "~/Library/Preferences/pnpm", "~/.nvm", "~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store", "~/.clawd/secrets/aliyun.env"],
           allowWrite: ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"]
         },
         network: {
@@ -50373,7 +50388,7 @@ function copyBundleExtras(srcDir, dstDir) {
     }
   }
 }
-var DAEMON_MANAGED_PATHS = ["extension-kit", "CLAUDE.md", ".mcp.json", ".claude/skills", ".claude/agents"];
+var DAEMON_MANAGED_PATHS = ["extension-kit", "CLAUDE.md", ".mcp.json", ".claude/skills", ".claude/agents", "mcp"];
 function replaceManagedPath(src, dst) {
   if (!fs13.statSync(src).isDirectory()) {
     fs13.mkdirSync(path16.dirname(dst), { recursive: true });
@@ -50613,59 +50628,6 @@ function retirePersonaBuilder(args) {
     });
   }
 }
-function findDeployKitRoot(logger) {
-  const candidates = [];
-  try {
-    const here = path16.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
-    candidates.push(path16.resolve(here, "..", "deploy-kit"));
-  } catch {
-  }
-  const fromArgv = bundleSiblingFromArgv(process.argv[1], "deploy-kit");
-  if (fromArgv) candidates.push(fromArgv);
-  for (const c2 of candidates) {
-    try {
-      if (fs13.statSync(c2).isDirectory()) {
-        logger?.info("persona.deploy-kit-root.resolved", { root: c2 });
-        return c2;
-      }
-    } catch {
-    }
-  }
-  logger?.warn("persona.deploy-kit-root.not-found", { argv1: process.argv[1], candidates });
-  return null;
-}
-function seedDeployKit(args) {
-  const dst = path16.join(args.dataDir, "deploy-kit");
-  fs13.cpSync(args.deployKitBundleRoot, dst, {
-    recursive: true,
-    dereference: true,
-    force: false,
-    errorOnExist: false
-  });
-  args.logger.info("deploy-kit.seed.done", { dst });
-}
-function refreshDeployKit(args) {
-  const dst = path16.join(args.dataDir, "deploy-kit");
-  if (!fs13.existsSync(dst)) {
-    seedDeployKit(args);
-    return;
-  }
-  for (const sub of ["scripts", "contract"]) {
-    const s2 = path16.join(args.deployKitBundleRoot, sub);
-    if (fs13.existsSync(s2)) {
-      fs13.cpSync(s2, path16.join(dst, sub), { recursive: true, force: true, dereference: true });
-    }
-  }
-  const secretsSrc = path16.join(args.deployKitBundleRoot, ".secrets");
-  if (fs13.existsSync(secretsSrc)) {
-    fs13.mkdirSync(path16.join(dst, ".secrets"), { recursive: true });
-    for (const f2 of fs13.readdirSync(secretsSrc)) {
-      if (f2.endsWith(".local")) continue;
-      fs13.copyFileSync(path16.join(secretsSrc, f2), path16.join(dst, ".secrets", f2));
-    }
-  }
-  args.logger.info("deploy-kit.refresh.done", { dst });
-}
 
 // src/skills/scanner.ts
 var import_node_fs10 = __toESM(require("fs"), 1);
@@ -51834,8 +51796,8 @@ function turnStartInput(text, resolveImage) {
   const items = [];
   let leftover = text;
   for (const m3 of text.matchAll(SKILL_RE)) {
-    const [marker, name, path102] = m3;
-    items.push({ type: "skill", name, path: path102 });
+    const [marker, name, path100] = m3;
+    items.push({ type: "skill", name, path: path100 });
     leftover = leftover.replace(marker, "");
   }
   for (const m3 of text.matchAll(ATTACHMENT_RE2)) {
@@ -54741,44 +54703,6 @@ function readDir(dir, logger) {
   }
   return out;
 }
-function collectKitPlaceholders(kitDir) {
-  const out = /* @__PURE__ */ new Set();
-  const scan = (file, re2) => {
-    let text;
-    try {
-      text = import_node_fs28.default.readFileSync(file, "utf8");
-    } catch {
-      return;
-    }
-    for (const m3 of text.matchAll(re2)) out.add(m3[1]);
-  };
-  const walk2 = (dir, depth) => {
-    if (depth > 6) return [];
-    let entries;
-    try {
-      entries = import_node_fs28.default.readdirSync(dir, { withFileTypes: true });
-    } catch {
-      return [];
-    }
-    return entries.flatMap((e) => {
-      if (e.name === "node_modules") return [];
-      const p3 = import_node_path29.default.join(dir, e.name);
-      return e.isDirectory() ? walk2(p3, depth + 1) : [p3];
-    });
-  };
-  for (const f2 of walk2(import_node_path29.default.join(kitDir, "contract"), 0)) {
-    if (f2.endsWith(".tmpl")) scan(f2, /__([A-Z0-9_]+)__/g);
-  }
-  for (const f2 of walk2(import_node_path29.default.join(kitDir, "examples"), 0)) {
-    if (f2.endsWith(".env.example")) scan(f2, /\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g);
-  }
-  return out;
-}
-function secretsForKit(table, kitDir) {
-  if (!table) return void 0;
-  const wanted = collectKitPlaceholders(kitDir);
-  return Object.fromEntries(Object.entries(table).filter(([k3]) => wanted.has(k3)));
-}
 function upsertEnvFileVar(file, key, value) {
   if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) throw new Error(`invalid env name: ${key}`);
   import_node_fs28.default.mkdirSync(import_node_path29.default.dirname(file), { recursive: true, mode: 448 });
@@ -55426,6 +55350,8 @@ function sanitizeForQuote(def) {
 var stringRecord = (v3) => v3 && typeof v3 === "object" ? Object.fromEntries(Object.entries(v3).filter((kv) => typeof kv[1] === "string")) : {};
 var HTTP_TYPES2 = /* @__PURE__ */ new Set(["http", "sse", "streamable_http", "streamable-http"]);
 var PACKAGE_RUNNERS = /* @__PURE__ */ new Set(["npx", "uvx", "pnpx", "bunx"]);
+var SCRIPT_RUNNERS = /* @__PURE__ */ new Set(["node", "bun", "deno", "python", "python3"]);
+var HOST_ARG_PLACEHOLDER = "CLAWD_PERSONA_DIR";
 function scanMcpConnectors(personaDir) {
   const file = import_node_path32.default.join(personaDir, ".mcp.json");
   const out = { readable: true, connectors: [], evidence: [], warnings: [] };
@@ -55477,10 +55403,10 @@ function scanMcpConnectors(personaDir) {
       continue;
     }
     const args = Array.isArray(def.args) ? def.args.map(String) : [];
-    const pkg = PACKAGE_RUNNERS.has(command) ? args.find((a2) => !a2.startsWith("-")) : void 0;
-    const id = pkg ?? command;
+    const target = PACKAGE_RUNNERS.has(command) || SCRIPT_RUNNERS.has(command) ? args.find((a2) => !a2.startsWith("-")) : void 0;
+    const id = target ?? command;
     const fields = fieldsOf(name, "env", Object.values(stringRecord(def.env)).flatMap(placeholdersIn), out.warnings);
-    if (args.some((a2) => placeholdersIn(a2).length > 0)) {
+    if (args.some((a2) => placeholdersIn(a2).some((p3) => p3 !== HOST_ARG_PLACEHOLDER))) {
       out.warnings.push(`MCP server\u300C${name}\u300D\u7684 args \u91CC\u6709 \${VAR} \u5360\u4F4D\u2014\u2014args \u4F1A\u8FDB ps\uFF0C\u4E91\u4E0A\u548C\u672C\u673A\u90FD\u53EA\u6E32 env\uFF0C\u8FD9\u4E9B\u5360\u4F4D\u4E0D\u4F1A\u88AB\u586B\uFF1B\u628A\u51ED\u636E\u6539\u5230 env \u91CC`);
     }
     out.connectors.push({ name, kind: "env", runner: "mcp", id, fields });
@@ -59079,10 +59005,10 @@ function createGithubApi(args) {
   const doFetch = args.fetch ?? fetch;
   const seal = args.seal ?? sealWithSodium;
   const timeoutMs = args.timeoutMs ?? TIMEOUT_MS;
-  async function request(method, path102, body) {
+  async function request(method, path100, body) {
     let res;
     try {
-      res = await doFetch(`${API}${path102}`, {
+      res = await doFetch(`${API}${path100}`, {
         method,
         headers: {
           Authorization: `Bearer ${args.token}`,
@@ -59107,8 +59033,8 @@ function createGithubApi(args) {
     }
     return { status: res.status, json };
   }
-  async function must(method, path102, what, body) {
-    const r2 = await request(method, path102, body);
+  async function must(method, path100, what, body) {
+    const r2 = await request(method, path100, body);
     if (r2.status < 200 || r2.status >= 300) throw new GithubApiError(r2.status, explain(r2.status, what, r2.json));
     return r2.json;
   }
@@ -59148,9 +59074,9 @@ function createGithubApi(args) {
         return { env: x2.name, ...Number.isFinite(at3) ? { setAt: at3 } : {} };
       });
     },
-    async getJson(path102) {
+    async getJson(path100) {
       try {
-        const r2 = await request("GET", path102);
+        const r2 = await request("GET", path100);
         return r2.status >= 200 && r2.status < 300 ? r2.json : void 0;
       } catch {
         return void 0;
@@ -59231,7 +59157,8 @@ var GITIGNORE_LINES = [
   ".attachments/",
   ".clawd/sessions/",
   ".clawd/deploy-scan.json",
-  "node_modules/"
+  "node_modules/",
+  ".s-home/"
 ];
 function mergeGitignore(existing) {
   const lines = (existing ?? "").split("\n");
@@ -59669,6 +59596,7 @@ async function release(exec, api, args) {
 
 // src/deploy/scan-base.ts
 function pickScanBase(args) {
+  if (args.want === "hard") return { kind: "hard" };
   if (!args.hasUsableManifest || !args.releasedHead) return { kind: "hard" };
   return { kind: "soft", base: args.releasedHead };
 }
@@ -59741,19 +59669,8 @@ async function rerunJob(api, slug, jobId) {
 }
 
 // src/deploy/scan-task.ts
-var import_node_path35 = __toESM(require("path"), 1);
 var BUTLER_PERSONA_ID = "persona-clawd-butler";
-var SCANNABLE_ASSETS = [
-  {
-    name: "deploy-kit",
-    path: (dataDir) => import_node_path35.default.join(dataDir, "deploy-kit"),
-    what: "FC \u90E8\u7F72\u80FD\u529B\uFF08publish.sh / new-extension.sh / \u5DE5\u5177\u94FE / \u51ED\u8BC1\u76EE\u5F55\uFF09\u3002persona \u7528\u7EDD\u5BF9\u8DEF\u5F84\u53BB\u8C03\u8FD9\u91CC\u7684\u811A\u672C\u65F6\uFF0C\u5C31\u8BE5\u62A5\u4E00\u6761 asset\u3002"
-  },
-  {
-    name: "app-builder-plugin",
-    what: "clawd-app-builder MCP server \u7684\u6784\u5EFA\u4EA7\u7269\uFF08daemon \u7684 tsup \u4EA7\u7269\uFF0C\u672C\u673A\u4E0D\u5728\u76D8\u4E0A\u5355\u72EC\u5B58\u4E00\u4EFD\uFF09\u3002**\u5224\u636E**\uFF1Apersona \u7684\u4E3B\u5E72\u52A8\u4F5C\u8D70 clawd-app-builder \u8FD9\u4E2A MCP \u65F6\uFF0C\u4E91\u4E0A\u5BB9\u5668\u91CC\u8DD1\u7684\u5C31\u662F\u8FD9\u4EFD\u4EA7\u7269\u2014\u2014\u7528\u5230\u5B83\u5C31\u62A5\u4E00\u6761 asset\uFF0C\u5426\u5219\u5B83\u8FDB\u4E0D\u4E86\u955C\u50CF\u3002"
-  }
-];
+var SCANNABLE_ASSETS = [];
 function staleScannerAssets(scan, known = SCANNABLE_ASSETS) {
   const knew = new Set(scan.scannedAssets ?? []);
   return known.filter((a2) => !knew.has(a2.name));
@@ -59813,6 +59730,7 @@ function mustBeScanning(scan, method) {
   return scan;
 }
 function buildDeployHandlers(deps) {
+  const scannableAssets = deps.scannableAssets ?? SCANNABLE_ASSETS;
   const cacheMs = deps.secretsCacheMs ?? SECRETS_CACHE_MS;
   const secretsCache = /* @__PURE__ */ new Map();
   const runCache = /* @__PURE__ */ new Map();
@@ -59850,7 +59768,7 @@ function buildDeployHandlers(deps) {
     }
     let scan = await readScan(dir);
     if (scan && scan.status === "done") {
-      const stale = describeStaleAssets(staleScannerAssets(scan));
+      const stale = describeStaleAssets(staleScannerAssets(scan, scannableAssets));
       const kept = scan.notes.filter((n2) => !n2.startsWith(STALE_ASSETS_NOTE_PREFIX));
       scan = { ...scan, notes: stale ? [...kept, stale] : kept };
     }
@@ -59884,13 +59802,14 @@ function buildDeployHandlers(deps) {
   const view = async (personaId2) => ({
     response: { type: "deploy:state", ...await stateOf(personaId2) }
   });
-  async function beginScan(personaId2, dir, current, head) {
+  async function beginScan(personaId2, dir, current, head, want) {
     const prevManifest = await readDeployFile(dir).catch(() => void 0);
     const scanBase = pickScanBase({
       // **文件在 ≠ 清单能用**：硬扫一开头就写了一份空清单，那一轮没跑完（OTA 重启 / butler 崩，
       // 见 scan-task.ts 的收尾判定）的话文件在、内容是空的。所以判据连上「上一轮扫完了」。
       hasUsableManifest: prevManifest !== void 0 && current?.status === "done",
-      releasedHead: await hasCommit(deps.exec, dir, current?.releasedHead) ? current?.releasedHead : void 0
+      releasedHead: await hasCommit(deps.exec, dir, current?.releasedHead) ? current?.releasedHead : void 0,
+      ...want ? { want } : {}
     });
     const startedAt = deps.now();
     const base = {
@@ -60013,14 +59932,14 @@ function buildDeployHandlers(deps) {
       notes: [...scan.notes.filter((n2) => n2.startsWith(MCP_SCAN_NOTE_PREFIX)), ...args.notes.map(redactSecretValues)],
       // 记下这次扫描**被告知有哪些共享资产**。以后资产表长出新条目时，只有扫的时候还不知道
       // 它的那些记录会被提示一次（见 staleScannerAssets）
-      scannedAssets: SCANNABLE_ASSETS.map((a2) => a2.name),
+      scannedAssets: scannableAssets.map((a2) => a2.name),
       error: void 0
     });
     return view(args.personaId);
   };
   const releaseHandler = async (frame, _client, ctx) => {
     ensureOwner(ctx);
-    const { personaId: personaId2 } = parseArgs2(DeployPersonaArgsSchema, frame, "deploy:release");
+    const { personaId: personaId2, scanBase } = parseArgs2(DeployReleaseArgsSchema, frame, "deploy:release");
     const dir = mustPersona(personaId2);
     const wrong = wrongEngine(deps.personaEngine(personaId2)?.tool);
     if (wrong) throw invalid(wrong);
@@ -60040,7 +59959,7 @@ function buildDeployHandlers(deps) {
     const current = await readScan(dir);
     if (current?.status === "scanning") return { response: { type: "deploy:release", outcome: "scanning" } };
     const fileUsable = await readDeployFile(dir).then((f2) => f2 !== void 0).catch(() => false);
-    if (!fileUsable || !isScanFresh(current, repo2)) {
+    if (scanBase !== void 0 || !fileUsable || !isScanFresh(current, repo2)) {
       let head;
       try {
         head = await commitAll(deps.exec, { dir, message: `clawd: \u626B\u63CF\u524D\u843D\u5B58 ${new Date(deps.now()).toISOString()}` });
@@ -60048,7 +59967,7 @@ function buildDeployHandlers(deps) {
         throw toClawdError(err);
       }
       runCache.delete(personaId2);
-      await beginScan(personaId2, dir, current, head);
+      await beginScan(personaId2, dir, current, head, scanBase);
       return { response: { type: "deploy:release", outcome: "scanning" } };
     }
     const file = await readDeployFile(dir);
@@ -60643,9 +60562,9 @@ async function refreshTunnelUrlOnStartup(deps) {
 
 // src/lark-bot-connector/binding-store.ts
 var import_node_fs30 = __toESM(require("fs"), 1);
-var import_node_path36 = __toESM(require("path"), 1);
+var import_node_path35 = __toESM(require("path"), 1);
 function createLarkBotBindingStore(personaRoot) {
-  const filePath = (personaId2) => import_node_path36.default.join(personaRoot, safeFileName(personaId2), ".clawd", "lark-bot.json");
+  const filePath = (personaId2) => import_node_path35.default.join(personaRoot, safeFileName(personaId2), ".clawd", "lark-bot.json");
   const read = (personaId2) => {
     const file = filePath(personaId2);
     if (!import_node_fs30.default.existsSync(file)) return null;
@@ -60659,7 +60578,7 @@ function createLarkBotBindingStore(personaRoot) {
   };
   const write = (personaId2, meta) => {
     const file = filePath(personaId2);
-    import_node_fs30.default.mkdirSync(import_node_path36.default.dirname(file), { recursive: true });
+    import_node_fs30.default.mkdirSync(import_node_path35.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     import_node_fs30.default.writeFileSync(tmp, JSON.stringify(meta, null, 2), { mode: 384 });
     import_node_fs30.default.renameSync(tmp, file);
@@ -60821,7 +60740,7 @@ function createLarkBotCloudClient(opts) {
 
 // src/lark-bot-connector/chat-router.ts
 var import_node_fs31 = __toESM(require("fs"), 1);
-var import_node_path37 = __toESM(require("path"), 1);
+var import_node_path36 = __toESM(require("path"), 1);
 init_protocol();
 var ERROR_REPLY_TEXT = "\u5904\u7406\u51FA\u9519\u4E86\uFF0C\u8BF7\u91CD\u8BD5";
 var LOCAL_TURN_RETRIES = 2;
@@ -60900,7 +60819,7 @@ function createLarkChatRouter(deps) {
         }
         const dir = deps.mediaRootFor(env.chatId);
         import_node_fs31.default.mkdirSync(dir, { recursive: true });
-        const p3 = import_node_path37.default.join(dir, `${safeMediaName(ownerMessageId)}-${i2}.${ext}`);
+        const p3 = import_node_path36.default.join(dir, `${safeMediaName(ownerMessageId)}-${i2}.${ext}`);
         import_node_fs31.default.writeFileSync(p3, r2.data);
         lines.push(`[\u56FE\u7247: ${p3}]\uFF08\u7528 Read \u5DE5\u5177\u67E5\u770B\uFF09`);
       } catch (err) {
@@ -60923,7 +60842,7 @@ function createLarkChatRouter(deps) {
         }
         const dir = deps.mediaRootFor(env.chatId);
         import_node_fs31.default.mkdirSync(dir, { recursive: true });
-        const p3 = import_node_path37.default.join(dir, `${safeMediaName(ownerMessageId)}-${i2}-${safeAttachmentName(f2.name)}`);
+        const p3 = import_node_path36.default.join(dir, `${safeMediaName(ownerMessageId)}-${i2}-${safeAttachmentName(f2.name)}`);
         import_node_fs31.default.writeFileSync(p3, r2.data);
         lines.push(`[\u6587\u4EF6: ${p3}]\uFF08\u7528 Read \u5DE5\u5177\u67E5\u770B\uFF09`);
       } catch (err) {
@@ -61749,11 +61668,11 @@ async function forwardPeerExecToPeer(args) {
 
 // src/tools/codex-history.ts
 var import_node_fs33 = __toESM(require("fs"), 1);
-var import_node_path39 = __toESM(require("path"), 1);
+var import_node_path38 = __toESM(require("path"), 1);
 
 // src/tools/transcript-search.ts
 var import_node_fs32 = __toESM(require("fs"), 1);
-var import_node_path38 = __toESM(require("path"), 1);
+var import_node_path37 = __toESM(require("path"), 1);
 var SNIPPET_PAD = 60;
 var INJECTED_ENVELOPE_RE = /^<(system-reminder|command-name|command-message|command-args|local-command-stdout|local-command-stderr|task-notification|user-prompt-submit-hook|environment_context|user_instructions)\b/;
 var CODEX_WRAPPER_RE = /<(related-dir|environment_context|user_instructions)>[\s\S]*?<\/\1>/g;
@@ -61846,7 +61765,7 @@ function createCodexRolloutLocator(roots) {
       return;
     }
     for (const entry of entries) {
-      const full = import_node_path38.default.join(dir, entry.name);
+      const full = import_node_path37.default.join(dir, entry.name);
       if (entry.isDirectory()) {
         walk2(full, into);
         continue;
@@ -62126,7 +62045,7 @@ function readThreadNames(sharedHome) {
   if (!sharedHome) return names;
   let raw;
   try {
-    raw = import_node_fs33.default.readFileSync(import_node_path39.default.join(sharedHome, "session_index.jsonl"), "utf8");
+    raw = import_node_fs33.default.readFileSync(import_node_path38.default.join(sharedHome, "session_index.jsonl"), "utf8");
   } catch {
     return names;
   }
@@ -62151,7 +62070,7 @@ function walkRollouts(dir, visit) {
   }
   entries.sort((a2, b3) => a2.name < b3.name ? 1 : a2.name > b3.name ? -1 : 0);
   for (const entry of entries) {
-    const full = import_node_path39.default.join(dir, entry.name);
+    const full = import_node_path38.default.join(dir, entry.name);
     if (entry.isDirectory()) {
       if (!walkRollouts(full, visit)) return false;
     } else if (ROLLOUT_NAME_RE.test(entry.name)) {
@@ -62219,7 +62138,7 @@ var CodexHistoryReader = class {
     return [];
   }
   async listSessions(args) {
-    const want = import_node_path39.default.resolve(args.projectPath);
+    const want = import_node_path38.default.resolve(args.projectPath);
     const names = readThreadNames(this.deps.sharedHome);
     const found = [];
     let scanned = 0;
@@ -62228,7 +62147,7 @@ var CodexHistoryReader = class {
         if (++scanned > CODEX_LIST_SESSIONS_SCAN_CAP) return false;
         const head = readHead(file, PEEK_BYTES);
         const cwd = head === null ? null : peekSessionCwd(head);
-        if (!cwd || import_node_path39.default.resolve(cwd) !== want) return;
+        if (!cwd || import_node_path38.default.resolve(cwd) !== want) return;
         const first = readFirstLine(file);
         const meta = first === null ? null : parseCodexRolloutMeta(first);
         if (!meta) return;
@@ -62312,9 +62231,9 @@ var CentralClientError = class extends Error {
   code;
   cause;
 };
-async function centralRequest(opts, path102, init) {
+async function centralRequest(opts, path100, init) {
   const f2 = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}${path102}`;
+  const url = `${opts.api.replace(/\/+$/, "")}${path100}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
   let res;
@@ -63148,7 +63067,7 @@ var PiRpcClient = class {
 var import_node_child_process10 = require("child_process");
 var import_node_crypto9 = require("crypto");
 var import_node_fs35 = __toESM(require("fs"), 1);
-var import_node_path40 = __toESM(require("path"), 1);
+var import_node_path39 = __toESM(require("path"), 1);
 
 // src/tools/pi-events.ts
 init_protocol();
@@ -63325,7 +63244,7 @@ ${dirs.map((d2) => `- ${d2}`).join("\n")}`;
 function createPiSession(ctx, sink, deps = {}) {
   const cmd = process.env.PI_BIN ?? "pi";
   const sessionId = ctx.toolSessionId ?? (0, import_node_crypto9.randomUUID)();
-  const skillsDir = import_node_path40.default.join(ctx.cwd, ".claude", "skills");
+  const skillsDir = import_node_path39.default.join(ctx.cwd, ".claude", "skills");
   const exists = deps.skillsDirExists ?? ((d2) => import_node_fs35.default.existsSync(d2));
   const args = buildPiArgs(ctx, {
     sessionId,
@@ -63444,20 +63363,20 @@ function createPiSession(ctx, sink, deps = {}) {
 // src/tools/pi-history.ts
 var import_node_fs36 = __toESM(require("fs"), 1);
 var import_node_os10 = __toESM(require("os"), 1);
-var import_node_path41 = __toESM(require("path"), 1);
+var import_node_path40 = __toESM(require("path"), 1);
 var PI_LIST_SESSIONS_LIMIT = 100;
 var PI_LIST_SESSIONS_SCAN_CAP = 4e3;
 function piAgentDir(env = process.env) {
-  return env.PI_CODING_AGENT_DIR || import_node_path41.default.join(import_node_os10.default.homedir(), ".pi", "agent");
+  return env.PI_CODING_AGENT_DIR || import_node_path40.default.join(import_node_os10.default.homedir(), ".pi", "agent");
 }
 function piSessionsRoot(env = process.env) {
-  return import_node_path41.default.join(piAgentDir(env), "sessions");
+  return import_node_path40.default.join(piAgentDir(env), "sessions");
 }
 function encodePiCwd(cwd) {
   return `--${cwd.replace(/^[\\/]+/, "").replace(/[\\/:]/g, "-")}--`;
 }
 function piProjectSessionDir(sessionsRoot, cwd) {
-  return import_node_path41.default.join(sessionsRoot, encodePiCwd(cwd));
+  return import_node_path40.default.join(sessionsRoot, encodePiCwd(cwd));
 }
 function findInDir(dir, toolSessionId) {
   let names;
@@ -63468,7 +63387,7 @@ function findInDir(dir, toolSessionId) {
   }
   const suffix = `_${toolSessionId}.jsonl`;
   const hit = names.filter((n2) => n2.endsWith(suffix)).sort().at(-1);
-  return hit ? import_node_path41.default.join(dir, hit) : null;
+  return hit ? import_node_path40.default.join(dir, hit) : null;
 }
 function locatePiSessionFile(sessionsRoot, cwd, toolSessionId) {
   const direct = findInDir(piProjectSessionDir(sessionsRoot, cwd), toolSessionId);
@@ -63480,7 +63399,7 @@ function locatePiSessionFile(sessionsRoot, cwd, toolSessionId) {
     return null;
   }
   for (const d2 of dirs) {
-    const hit = findInDir(import_node_path41.default.join(sessionsRoot, d2), toolSessionId);
+    const hit = findInDir(import_node_path40.default.join(sessionsRoot, d2), toolSessionId);
     if (hit) return hit;
   }
   return null;
@@ -63579,7 +63498,7 @@ var PiHistoryReader = class {
     return [];
   }
   async listSessions(args) {
-    const want = import_node_path41.default.resolve(args.projectPath);
+    const want = import_node_path40.default.resolve(args.projectPath);
     const dir = piProjectSessionDir(this.deps.sessionsRoot, want);
     let names;
     try {
@@ -63591,12 +63510,12 @@ var PiHistoryReader = class {
     let scanned = 0;
     for (const n2 of names) {
       if (++scanned > PI_LIST_SESSIONS_SCAN_CAP) break;
-      const file = import_node_path41.default.join(dir, n2);
+      const file = import_node_path40.default.join(dir, n2);
       const head = parseLine2(readFirstLine(file) ?? "");
       if (!head || head.type !== "session") continue;
       const cwd = str3(head.cwd);
       const id = str3(head.id);
-      if (!cwd || !id || import_node_path41.default.resolve(cwd) !== want) continue;
+      if (!cwd || !id || import_node_path40.default.resolve(cwd) !== want) continue;
       let mtimeMs;
       try {
         mtimeMs = import_node_fs36.default.statSync(file).mtimeMs;
@@ -63831,7 +63750,7 @@ var PiAdapter = class {
 init_protocol();
 
 // src/tools/codex-skills.ts
-var import_node_path42 = __toESM(require("path"), 1);
+var import_node_path41 = __toESM(require("path"), 1);
 function str4(v3) {
   return typeof v3 === "string" ? v3 : void 0;
 }
@@ -63846,13 +63765,13 @@ function mapSkillsListResponse(res) {
       const r2 = s2 ?? {};
       const name = str4(r2.name);
       if (!name) continue;
-      const path102 = str4(r2.path);
+      const path100 = str4(r2.path);
       const description = str4(r2.description);
       const isPlugin = name.includes(":");
       out.push({
         name,
         source: isPlugin ? "plugin" : "project",
-        ...path102 ? { path: path102 } : {},
+        ...path100 ? { path: path100 } : {},
         ...description ? { description } : {},
         ...isPlugin ? { plugin: name.split(":")[0] } : {}
       });
@@ -63868,7 +63787,7 @@ async function listCodexSkills(cwd, deps = {}) {
     // 先写 extraRoots 再写 list（stdio 按写入顺序处理，fire-and-forget 不 await 回包；
     // codex-session.ts ready 序列同款，两处保持一致）。失败不阻塞 list。
     beforeRequest: (client) => {
-      void client.request("skills/extraRoots/set", { extraRoots: [import_node_path42.default.join(cwd, ".claude", "skills")] }).catch(() => void 0);
+      void client.request("skills/extraRoots/set", { extraRoots: [import_node_path41.default.join(cwd, ".claude", "skills")] }).catch(() => void 0);
     }
   });
   return mapSkillsListResponse(res);
@@ -63944,14 +63863,14 @@ function rec4(v3) {
 // src/workspace/browser.ts
 var import_node_fs38 = __toESM(require("fs"), 1);
 var import_node_os11 = __toESM(require("os"), 1);
-var import_node_path43 = __toESM(require("path"), 1);
+var import_node_path42 = __toESM(require("path"), 1);
 init_protocol();
 var MAX_FILE_BYTES2 = 2 * 1024 * 1024;
 function resolveInsideCwd(cwd, subpath) {
-  const absCwd = import_node_path43.default.resolve(cwd);
-  const joined = import_node_path43.default.resolve(absCwd, subpath ?? ".");
-  const rel = import_node_path43.default.relative(absCwd, joined);
-  if (rel.startsWith("..") || import_node_path43.default.isAbsolute(rel)) {
+  const absCwd = import_node_path42.default.resolve(cwd);
+  const joined = import_node_path42.default.resolve(absCwd, subpath ?? ".");
+  const rel = import_node_path42.default.relative(absCwd, joined);
+  if (rel.startsWith("..") || import_node_path42.default.isAbsolute(rel)) {
     throw new ClawdError(ERROR_CODES.INVALID_PATH, `path escapes cwd: ${subpath}`);
   }
   return joined;
@@ -63982,7 +63901,7 @@ var WorkspaceBrowser = class {
         mtime: ""
       };
       try {
-        const st2 = import_node_fs38.default.statSync(import_node_path43.default.join(full, d2.name));
+        const st2 = import_node_fs38.default.statSync(import_node_path42.default.join(full, d2.name));
         entry.mtime = new Date(st2.mtimeMs).toISOString();
         if (d2.isFile()) entry.size = st2.size;
       } catch {
@@ -64029,7 +63948,7 @@ var WorkspaceBrowser = class {
 // src/skills/agents-scanner.ts
 var import_node_fs39 = __toESM(require("fs"), 1);
 var import_node_os12 = __toESM(require("os"), 1);
-var import_node_path44 = __toESM(require("path"), 1);
+var import_node_path43 = __toESM(require("path"), 1);
 var DEFAULT_POLICY_DIR_DARWIN = "/Library/Application Support/ClaudeCode/.claude/agents";
 function isDirLikeSync2(p3) {
   try {
@@ -64067,10 +63986,10 @@ function scanAgentsDir(dir, source, seen, out) {
   }
   for (const ent of entries) {
     if (!ent.name.endsWith(".md")) continue;
-    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path44.default.join(dir, ent.name)))) {
+    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path43.default.join(dir, ent.name)))) {
       continue;
     }
-    const filePath = import_node_path44.default.join(dir, ent.name);
+    const filePath = import_node_path43.default.join(dir, ent.name);
     const baseName = ent.name.replace(/\.md$/, "");
     if (seen.has(baseName)) continue;
     seen.add(baseName);
@@ -64093,7 +64012,7 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
       return;
     }
     for (const ent of entries) {
-      const childPath = import_node_path44.default.join(dir, ent.name);
+      const childPath = import_node_path43.default.join(dir, ent.name);
       if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync2(childPath)) {
         walk2(childPath, [...namespaces, ent.name]);
         continue;
@@ -64118,9 +64037,9 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   walk2(root, []);
 }
 function readInstalledPlugins2(home) {
-  const pluginsDir = import_node_path44.default.join(home, ".claude", "plugins");
-  const v22 = import_node_path44.default.join(pluginsDir, "installed_plugins_v2.json");
-  const v1 = import_node_path44.default.join(pluginsDir, "installed_plugins.json");
+  const pluginsDir = import_node_path43.default.join(home, ".claude", "plugins");
+  const v22 = import_node_path43.default.join(pluginsDir, "installed_plugins_v2.json");
+  const v1 = import_node_path43.default.join(pluginsDir, "installed_plugins.json");
   let raw = null;
   for (const candidate of [v22, v1]) {
     try {
@@ -64149,19 +64068,19 @@ function readInstalledPlugins2(home) {
   return out;
 }
 function walkUpProjectAgentsDirs(startCwd, home, seen, out) {
-  let cur = import_node_path44.default.resolve(startCwd);
-  const fsRoot = import_node_path44.default.parse(cur).root;
+  let cur = import_node_path43.default.resolve(startCwd);
+  const fsRoot = import_node_path43.default.parse(cur).root;
   while (true) {
-    scanAgentsDir(import_node_path44.default.join(cur, ".claude", "agents"), "project", seen, out);
+    scanAgentsDir(import_node_path43.default.join(cur, ".claude", "agents"), "project", seen, out);
     let hasGit = false;
     try {
-      hasGit = import_node_fs39.default.existsSync(import_node_path44.default.join(cur, ".git"));
+      hasGit = import_node_fs39.default.existsSync(import_node_path43.default.join(cur, ".git"));
     } catch {
     }
     if (hasGit) return;
     if (cur === home) return;
     if (cur === fsRoot) return;
-    const parent = import_node_path44.default.dirname(cur);
+    const parent = import_node_path43.default.dirname(cur);
     if (parent === cur) return;
     cur = parent;
   }
@@ -64196,7 +64115,7 @@ var AgentsScanner = class {
     }
     const fsBlock = [];
     scanAgentsDir(
-      import_node_path44.default.join(this.home, ".claude", "agents"),
+      import_node_path43.default.join(this.home, ".claude", "agents"),
       "global",
       seen,
       fsBlock
@@ -64210,7 +64129,7 @@ var AgentsScanner = class {
       ...this.extraPluginRoots
     ];
     for (const { name, root } of plugins) {
-      const agentsRoot = import_node_path44.default.join(root, "agents");
+      const agentsRoot = import_node_path43.default.join(root, "agents");
       scanPluginAgentsTree(agentsRoot, name, seen, fsBlock);
     }
     return [...builtinBlock, ...fsBlock];
@@ -64220,13 +64139,13 @@ var AgentsScanner = class {
 // src/observer/session-observer.ts
 var import_node_fs41 = __toESM(require("fs"), 1);
 var import_node_os14 = __toESM(require("os"), 1);
-var import_node_path46 = __toESM(require("path"), 1);
+var import_node_path45 = __toESM(require("path"), 1);
 init_claude_history();
 
 // src/observer/subagent-meta-observer.ts
 var import_node_fs40 = __toESM(require("fs"), 1);
 var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path45 = __toESM(require("path"), 1);
+var import_node_path44 = __toESM(require("path"), 1);
 init_claude_history();
 var META_RE = /^agent-([A-Za-z0-9_-]+)\.meta\.json$/;
 var SubagentMetaObserver = class {
@@ -64239,7 +64158,7 @@ var SubagentMetaObserver = class {
   watches = /* @__PURE__ */ new Map();
   // public for spec only：测试直接拼路径写假 meta.json；生产 start() 内部自己解析
   resolveSubagentDir(cwd, toolSessionId) {
-    return import_node_path45.default.join(
+    return import_node_path44.default.join(
       this.home,
       ".claude",
       "projects",
@@ -64295,7 +64214,7 @@ var SubagentMetaObserver = class {
     if (!m3) return;
     const agentId = m3[1];
     if (w3.emitted.has(agentId)) return;
-    const file = import_node_path45.default.join(w3.dirPath, name);
+    const file = import_node_path44.default.join(w3.dirPath, name);
     let raw;
     try {
       raw = import_node_fs40.default.readFileSync(file, "utf8");
@@ -64355,7 +64274,7 @@ var SessionObserver = class {
   metaObserver;
   resolveJsonlPath(cwd, toolSessionId, override) {
     if (override) return override;
-    return import_node_path46.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
+    return import_node_path45.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
   }
   start(args) {
     this.stop(args.sessionId);
@@ -64381,10 +64300,10 @@ var SessionObserver = class {
       lastDeriveMs: 0
     };
     try {
-      import_node_fs41.default.mkdirSync(import_node_path46.default.dirname(filePath), { recursive: true });
+      import_node_fs41.default.mkdirSync(import_node_path45.default.dirname(filePath), { recursive: true });
     } catch {
     }
-    w3.watcher = import_node_fs41.default.watch(import_node_path46.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
+    w3.watcher = import_node_fs41.default.watch(import_node_path45.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
       if (!changedName || !w3.filePath.endsWith(changedName)) return;
       this.poll(w3);
     });
@@ -64481,7 +64400,7 @@ var SessionObserver = class {
     const now = Date.now();
     if (now - w3.lastRelocateScanMs < 1e3) return;
     w3.lastRelocateScanMs = now;
-    const projectsRoot = import_node_path46.default.join(this.home, ".claude", "projects");
+    const projectsRoot = import_node_path45.default.join(this.home, ".claude", "projects");
     const found = findTranscriptByToolSessionId(projectsRoot, w3.toolSessionId);
     if (!found || found === w3.filePath) return;
     try {
@@ -64490,7 +64409,7 @@ var SessionObserver = class {
     }
     w3.filePath = found;
     try {
-      w3.watcher = import_node_fs41.default.watch(import_node_path46.default.dirname(found), { persistent: false }, (_event, changedName) => {
+      w3.watcher = import_node_fs41.default.watch(import_node_path45.default.dirname(found), { persistent: false }, (_event, changedName) => {
         if (!changedName || !w3.filePath.endsWith(changedName)) return;
         this.poll(w3);
       });
@@ -64614,7 +64533,7 @@ var import_node_child_process12 = require("child_process");
 init_protocol();
 var import_node_fs42 = __toESM(require("fs"), 1);
 var import_node_os15 = __toESM(require("os"), 1);
-var import_node_path47 = __toESM(require("path"), 1);
+var import_node_path46 = __toESM(require("path"), 1);
 var TITLE_GEN_DIR_PREFIX = "clawd-title-";
 var TITLE_MODEL_BY_TOOL = {
   claude: "haiku",
@@ -64685,7 +64604,7 @@ async function generateSessionTitle(tool, firstMessage, deps = {}) {
   if (!text) return null;
   let workDir;
   try {
-    workDir = import_node_fs42.default.mkdtempSync(import_node_path47.default.join(import_node_os15.default.tmpdir(), TITLE_GEN_DIR_PREFIX));
+    workDir = import_node_fs42.default.mkdtempSync(import_node_path46.default.join(import_node_os15.default.tmpdir(), TITLE_GEN_DIR_PREFIX));
   } catch {
     return null;
   }
@@ -64695,8 +64614,8 @@ async function generateSessionTitle(tool, firstMessage, deps = {}) {
     } catch {
     }
   };
-  const outFile = import_node_path47.default.join(workDir, `codex-title-${process.pid}-${++outFileSeq}-${Date.now()}.txt`);
-  const schemaFile = import_node_path47.default.join(workDir, "title-schema.json");
+  const outFile = import_node_path46.default.join(workDir, `codex-title-${process.pid}-${++outFileSeq}-${Date.now()}.txt`);
+  const schemaFile = import_node_path46.default.join(workDir, "title-schema.json");
   if (isCodexFamily(tool)) {
     try {
       import_node_fs42.default.writeFileSync(schemaFile, CODEX_TITLE_SCHEMA);
@@ -65395,7 +65314,7 @@ async function authenticate(token, deps) {
 
 // src/legacy-cleanup.ts
 var fs53 = __toESM(require("fs/promises"), 1);
-var path55 = __toESM(require("path"), 1);
+var path54 = __toESM(require("path"), 1);
 var LEGACY_FILES = [
   "personal-capability.json",
   "received-capabilities.json",
@@ -65404,7 +65323,7 @@ var LEGACY_FILES = [
 async function cleanupLegacyCapabilityFiles(dataDir, logger) {
   const removed = [];
   for (const name of LEGACY_FILES) {
-    const p3 = path55.join(dataDir, name);
+    const p3 = path54.join(dataDir, name);
     try {
       await fs53.unlink(p3);
       removed.push(name);
@@ -65419,7 +65338,7 @@ async function cleanupLegacyCapabilityFiles(dataDir, logger) {
 
 // src/inbox/inbox-store.ts
 var fs54 = __toESM(require("fs"), 1);
-var path56 = __toESM(require("path"), 1);
+var path55 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
@@ -65517,10 +65436,10 @@ var InboxStore = class {
     }
   }
   dirPath() {
-    return path56.join(this.dataDir, INBOX_SUBDIR);
+    return path55.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerDeviceId) {
-    return path56.join(this.dirPath(), `${peerDeviceId}.jsonl`);
+    return path55.join(this.dirPath(), `${peerDeviceId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -65609,7 +65528,7 @@ var InboxManager = class {
 
 // src/state/contact-store.ts
 var fs55 = __toESM(require("fs"), 1);
-var path57 = __toESM(require("path"), 1);
+var path56 = __toESM(require("path"), 1);
 var FILE_NAME = "contacts.json";
 var ContactStore = class {
   constructor(dataDir) {
@@ -65619,7 +65538,7 @@ var ContactStore = class {
   contacts = /* @__PURE__ */ new Map();
   load() {
     this.contacts.clear();
-    const file = path57.join(this.dataDir, FILE_NAME);
+    const file = path56.join(this.dataDir, FILE_NAME);
     let raw;
     try {
       raw = fs55.readFileSync(file, "utf8");
@@ -65703,7 +65622,7 @@ var ContactStore = class {
     return true;
   }
   flush() {
-    const file = path57.join(this.dataDir, FILE_NAME);
+    const file = path56.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
       { contacts: Array.from(this.contacts.values()) },
@@ -65825,52 +65744,52 @@ async function connectRemote(args) {
 
 // src/migrations/2026-05-20-flatten-sessions.ts
 var fs56 = __toESM(require("fs"), 1);
-var path58 = __toESM(require("path"), 1);
+var path57 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path58.join(dataDir, "sessions");
-  const flagPath = path58.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path57.join(dataDir, "sessions");
+  const flagPath = path57.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path58.join(sessionsDir, "default");
+  const defaultDir = path57.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path58.join(defaultDir, entry);
-      const dst = path58.join(sessionsDir, entry);
+      const src = path57.join(defaultDir, entry);
+      const dst = path57.join(sessionsDir, entry);
       fs56.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path58.join(sessionsDir, pid);
+    const personaDir = path57.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path58.join(personaDir, "owner");
+    const ownerSrc = path57.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path58.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      const ownerDst = path57.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
       fs56.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs56.renameSync(path58.join(ownerSrc, file), path58.join(ownerDst, file));
+        fs56.renameSync(path57.join(ownerSrc, file), path57.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path58.join(personaDir, "listener");
+    const listenerSrc = path57.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path58.join(dataDir, ".legacy", `listener-${pid}`);
+      const archiveDst = path57.join(dataDir, ".legacy", `listener-${pid}`);
       fs56.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs56.renameSync(path58.join(listenerSrc, file), path58.join(archiveDst, file));
+        fs56.renameSync(path57.join(listenerSrc, file), path57.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
@@ -65918,13 +65837,13 @@ function rmdirIfEmpty(p3) {
 
 // src/migrations/2026-08-18-drop-seeded-projects.ts
 var fs57 = __toESM(require("fs"), 1);
-var path59 = __toESM(require("path"), 1);
+var path58 = __toESM(require("path"), 1);
 var DROP_SEEDED_PROJECTS_FLAG = ".projects-seed-dropped.v1.done";
 function dropSeededProjects(opts) {
   fs57.mkdirSync(opts.dataDir, { recursive: true });
-  const flag = path59.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
+  const flag = path58.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
   if (fs57.existsSync(flag)) return { skipped: true, dropped: 0, backup: null };
-  const file = path59.join(opts.dataDir, "projects.json");
+  const file = path58.join(opts.dataDir, "projects.json");
   let raw = null;
   let dropped = 0;
   try {
@@ -65934,9 +65853,9 @@ function dropSeededProjects(opts) {
   }
   let backup = null;
   if (raw != null && dropped > 0) {
-    const dir = path59.join(opts.dataDir, "backups");
+    const dir = path58.join(opts.dataDir, "backups");
     fs57.mkdirSync(dir, { recursive: true });
-    backup = path59.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
+    backup = path58.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
     fs57.writeFileSync(backup, raw);
   }
   if (raw != null || dropped > 0) {
@@ -65948,11 +65867,11 @@ function dropSeededProjects(opts) {
 
 // src/transport/http-router.ts
 var import_node_fs44 = __toESM(require("fs"), 1);
-var import_node_path50 = __toESM(require("path"), 1);
+var import_node_path49 = __toESM(require("path"), 1);
 
 // src/attachment/upload.ts
 var import_node_fs43 = __toESM(require("fs"), 1);
-var import_node_path48 = __toESM(require("path"), 1);
+var import_node_path47 = __toESM(require("path"), 1);
 var import_node_crypto11 = __toESM(require("crypto"), 1);
 var import_promises7 = require("stream/promises");
 var UploadError = class extends Error {
@@ -65964,14 +65883,14 @@ var UploadError = class extends Error {
   code;
 };
 function assertValidFileName(fileName) {
-  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path48.default.basename(fileName)) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path47.default.basename(fileName)) {
     throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
   }
 }
 var HASH_PREFIX_LEN = 16;
 async function writeUploadedAttachment(args) {
   assertValidFileName(args.fileName);
-  const attachmentsRoot = import_node_path48.default.join(args.baseDir, ".attachments");
+  const attachmentsRoot = import_node_path47.default.join(args.baseDir, ".attachments");
   try {
     import_node_fs43.default.mkdirSync(attachmentsRoot, { recursive: true });
   } catch (err) {
@@ -65979,7 +65898,7 @@ async function writeUploadedAttachment(args) {
   }
   const hasher = import_node_crypto11.default.createHash("sha256");
   let actualSize = 0;
-  const tmpPath = import_node_path48.default.join(
+  const tmpPath = import_node_path47.default.join(
     attachmentsRoot,
     `.upload-${process.pid}-${Date.now()}-${import_node_crypto11.default.randomBytes(4).toString("hex")}`
   );
@@ -66014,7 +65933,7 @@ async function writeUploadedAttachment(args) {
     );
   }
   const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
-  const hashDir = import_node_path48.default.join(attachmentsRoot, attachmentId);
+  const hashDir = import_node_path47.default.join(attachmentsRoot, attachmentId);
   let finalFileName;
   let hashDirExists = false;
   try {
@@ -66032,7 +65951,7 @@ async function writeUploadedAttachment(args) {
     try {
       import_node_fs43.default.mkdirSync(hashDir, { recursive: true });
       finalFileName = args.fileName;
-      import_node_fs43.default.renameSync(tmpPath, import_node_path48.default.join(hashDir, finalFileName));
+      import_node_fs43.default.renameSync(tmpPath, import_node_path47.default.join(hashDir, finalFileName));
     } catch (err) {
       try {
         import_node_fs43.default.unlinkSync(tmpPath);
@@ -66041,7 +65960,7 @@ async function writeUploadedAttachment(args) {
       throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
     }
   }
-  const absPath = import_node_path48.default.join(hashDir, finalFileName);
+  const absPath = import_node_path47.default.join(hashDir, finalFileName);
   const relPath = absPath;
   args.groupFileStore.upsert(args.scope, args.sessionId, {
     relPath: absPath,
@@ -66056,7 +65975,7 @@ async function writeUploadedAttachment(args) {
 
 // src/extension/import.ts
 var import_promises8 = __toESM(require("fs/promises"), 1);
-var import_node_path49 = __toESM(require("path"), 1);
+var import_node_path48 = __toESM(require("path"), 1);
 var import_node_os16 = __toESM(require("os"), 1);
 var import_jszip = __toESM(require_lib3(), 1);
 var ImportError = class extends Error {
@@ -66074,7 +65993,7 @@ async function importZip(buf, root) {
     throw new ImportError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path49.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path48.default.isAbsolute(name)) {
       throw new ImportError("ZIP_INVALID", `unsafe zip entry path: ${name}`);
     }
   }
@@ -66107,7 +66026,7 @@ async function importZip(buf, root) {
       );
     }
   }
-  const destDir = import_node_path49.default.join(root, manifest.id);
+  const destDir = import_node_path48.default.join(root, manifest.id);
   let destExists = false;
   try {
     await import_promises8.default.access(destDir);
@@ -66117,15 +66036,15 @@ async function importZip(buf, root) {
   if (destExists) {
     throw new ImportError("ALREADY_EXISTS", `extension ${manifest.id} already installed`);
   }
-  const stage = await import_promises8.default.mkdtemp(import_node_path49.default.join(import_node_os16.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
+  const stage = await import_promises8.default.mkdtemp(import_node_path48.default.join(import_node_os16.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path49.default.join(stage, name);
+      const dest = import_node_path48.default.join(stage, name);
       if (entry.dir) {
         await import_promises8.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises8.default.mkdir(import_node_path49.default.dirname(dest), { recursive: true });
+      await import_promises8.default.mkdir(import_node_path48.default.dirname(dest), { recursive: true });
       const content = await entry.async("nodebuffer");
       await import_promises8.default.writeFile(dest, content);
     }
@@ -66179,7 +66098,7 @@ var SHARE_UI_ASSET_MIME = {
   ".wasm": "application/wasm"
 };
 function shareUiAssetMime(filePath) {
-  const ext = import_node_path50.default.extname(filePath).toLowerCase();
+  const ext = import_node_path49.default.extname(filePath).toLowerCase();
   return SHARE_UI_ASSET_MIME[ext] ?? lookupMime(filePath);
 }
 var AUTHED_RPC_ROUTE_PREFIX = "/rpc/";
@@ -66278,7 +66197,7 @@ function isValidUploadFileName(fileName) {
   if (fileName === "." || fileName === "..") return false;
   if (fileName.startsWith(".")) return false;
   if (fileName.includes("/") || fileName.includes("\\")) return false;
-  return fileName === import_node_path50.default.basename(fileName);
+  return fileName === import_node_path49.default.basename(fileName);
 }
 function createHttpRouter(deps) {
   return async (req, res) => {
@@ -66501,7 +66420,7 @@ function createHttpRouter(deps) {
         sendHtml(res, statusByCode[r2.code], loader.renderErrorHtml(r2.code, msgByCode[r2.code]));
         return true;
       }
-      sendHtml(res, 200, loader.renderViewerHtml(import_node_path50.default.basename(r2.absPath)));
+      sendHtml(res, 200, loader.renderViewerHtml(import_node_path49.default.basename(r2.absPath)));
       return true;
     }
     const ctx = deps.authResolver.resolveFromHeader(
@@ -66622,7 +66541,7 @@ function createHttpRouter(deps) {
         return true;
       }
       let absPath;
-      if (import_node_path50.default.isAbsolute(pathParam)) {
+      if (import_node_path49.default.isAbsolute(pathParam)) {
         absPath = pathParam;
       } else if (deps.sessionStore) {
         const file = deps.sessionStore.read(sid);
@@ -66630,7 +66549,7 @@ function createHttpRouter(deps) {
           sendJson(res, 404, { code: "NOT_FOUND", message: `session ${sid} not found` });
           return true;
         }
-        absPath = import_node_path50.default.join(file.cwd, pathParam);
+        absPath = import_node_path49.default.join(file.cwd, pathParam);
       } else {
         sendJson(res, 501, withCtx(ctx, { code: "NOT_IMPLEMENTED", message: "sessionStore not wired" }));
         return true;
@@ -66729,7 +66648,7 @@ function streamFile(res, absPath, logger) {
     return;
   }
   const mime = lookupMime(absPath);
-  const basename2 = import_node_path50.default.basename(absPath);
+  const basename2 = import_node_path49.default.basename(absPath);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": String(stat.size),
@@ -66747,7 +66666,7 @@ function streamFile(res, absPath, logger) {
 
 // src/attachment/gc.ts
 var import_node_fs45 = __toESM(require("fs"), 1);
-var import_node_path51 = __toESM(require("path"), 1);
+var import_node_path50 = __toESM(require("path"), 1);
 var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
 function runAttachmentGc(args) {
   const now = (args.now ?? Date.now)();
@@ -66756,12 +66675,12 @@ function runAttachmentGc(args) {
   for (const { scope, sessionId } of args.sessionScopes) {
     for (const entry of args.groupFileStore.list(scope, sessionId)) {
       if (entry.stale) continue;
-      if (import_node_path51.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+      if (import_node_path50.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
     }
   }
   const visited = /* @__PURE__ */ new Set();
   for (const { scope, sessionId } of args.sessionScopes) {
-    const legacyDir = args.getSessionCwd?.(sessionId) ?? import_node_path51.default.join(
+    const legacyDir = args.getSessionCwd?.(sessionId) ?? import_node_path50.default.join(
       args.dataDir,
       "sessions",
       ...scopeSubPath(scope).map(safeFileName),
@@ -66774,7 +66693,7 @@ function runAttachmentGc(args) {
       return true;
     });
     for (const rootDir of roots) {
-      const attRoot = import_node_path51.default.join(rootDir, ".attachments");
+      const attRoot = import_node_path50.default.join(rootDir, ".attachments");
       let hashDirs;
       try {
         hashDirs = import_node_fs45.default.readdirSync(attRoot);
@@ -66784,7 +66703,7 @@ function runAttachmentGc(args) {
         continue;
       }
       for (const hashDir of hashDirs) {
-        const hashDirAbs = import_node_path51.default.join(attRoot, hashDir);
+        const hashDirAbs = import_node_path50.default.join(attRoot, hashDir);
         let files;
         try {
           files = import_node_fs45.default.readdirSync(hashDirAbs);
@@ -66792,7 +66711,7 @@ function runAttachmentGc(args) {
           continue;
         }
         for (const name of files) {
-          const file = import_node_path51.default.join(hashDirAbs, name);
+          const file = import_node_path50.default.join(hashDirAbs, name);
           let stat;
           try {
             stat = import_node_fs45.default.statSync(file);
@@ -66824,7 +66743,7 @@ function runAttachmentGc(args) {
 
 // src/attachment/group.ts
 var import_node_fs46 = __toESM(require("fs"), 1);
-var import_node_path52 = __toESM(require("path"), 1);
+var import_node_path51 = __toESM(require("path"), 1);
 var import_node_crypto12 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
@@ -66836,11 +66755,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path52.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path51.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path52.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path51.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -66875,7 +66794,7 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs46.default.mkdirSync(import_node_path52.default.dirname(file), { recursive: true });
+    import_node_fs46.default.mkdirSync(import_node_path51.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     import_node_fs46.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
     import_node_fs46.default.renameSync(tmp, file);
@@ -66983,7 +66902,7 @@ var GroupFileStore = class {
    * 不在 persona 目录里（见文件头的路径约定）。没树的 persona 是 noop。
    */
   deletePersona(personaId2) {
-    import_node_fs46.default.rmSync(import_node_path52.default.join(this.dataDir, "sessions", safeFileName(personaId2)), { recursive: true, force: true });
+    import_node_fs46.default.rmSync(import_node_path51.default.join(this.dataDir, "sessions", safeFileName(personaId2)), { recursive: true, force: true });
     const prefix = `persona:${personaId2}:`;
     for (const key of this.cache.keys()) {
       if (key.startsWith(prefix)) this.cache.delete(key);
@@ -66993,9 +66912,9 @@ var GroupFileStore = class {
 
 // src/discovery/state-file.ts
 var import_node_fs47 = __toESM(require("fs"), 1);
-var import_node_path53 = __toESM(require("path"), 1);
+var import_node_path52 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path53.default.join(dataDir, "state.json");
+  return import_node_path52.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -67031,7 +66950,7 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs47.default.mkdirSync(import_node_path53.default.dirname(this.file), { recursive: true });
+    import_node_fs47.default.mkdirSync(import_node_path52.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
     import_node_fs47.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
     import_node_fs47.default.renameSync(tmp, this.file);
@@ -67059,13 +66978,13 @@ function readSpawnedByDesktopFromEnv(env = process.env) {
 
 // src/tunnel/tunnel-manager.ts
 var import_node_fs51 = __toESM(require("fs"), 1);
-var import_node_path57 = __toESM(require("path"), 1);
+var import_node_path56 = __toESM(require("path"), 1);
 var import_node_crypto13 = __toESM(require("crypto"), 1);
 var import_node_child_process15 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
 var import_node_fs48 = __toESM(require("fs"), 1);
-var import_node_path54 = __toESM(require("path"), 1);
+var import_node_path53 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -67084,7 +67003,7 @@ var TunnelStore = class {
     }
   }
   async set(v3) {
-    const dir = import_node_path54.default.dirname(this.filePath);
+    const dir = import_node_path53.default.dirname(this.filePath);
     await import_node_fs48.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v3, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
@@ -67196,7 +67115,7 @@ function escape2(v3) {
 // src/tunnel/frpc-binary.ts
 var import_node_fs49 = __toESM(require("fs"), 1);
 var import_node_os17 = __toESM(require("os"), 1);
-var import_node_path55 = __toESM(require("path"), 1);
+var import_node_path54 = __toESM(require("path"), 1);
 var import_node_child_process13 = require("child_process");
 var import_node_stream3 = require("stream");
 var import_promises9 = require("stream/promises");
@@ -67235,13 +67154,13 @@ async function ensureFrpcBinary(opts) {
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path55.default.join(opts.dataDir, "bin");
+  const binDir = import_node_path54.default.join(opts.dataDir, "bin");
   import_node_fs49.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path55.default.join(binDir, "frpc");
+  const stableBin = import_node_path54.default.join(binDir, "frpc");
   if (import_node_fs49.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path55.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path54.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -67267,7 +67186,7 @@ function cleanupStaleArtifacts(binDir) {
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path55.default.join(binDir, name);
+      const full = import_node_path54.default.join(binDir, name);
       try {
         import_node_fs49.default.rmSync(full, { recursive: true, force: true });
       } catch {
@@ -67293,7 +67212,7 @@ async function downloadToFile(url, dest, fetchImpl) {
   await (0, import_promises9.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path55.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  const work = import_node_path54.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
   import_node_fs49.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve9, reject) => {
@@ -67302,7 +67221,7 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
       proc.on("exit", (code) => code === 0 ? resolve9() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path55.default.join(work, dirName, "frpc");
+    const src = import_node_path54.default.join(work, dirName, "frpc");
     if (!import_node_fs49.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
@@ -67314,10 +67233,10 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
 
 // src/tunnel/frpc-process.ts
 var import_node_fs50 = __toESM(require("fs"), 1);
-var import_node_path56 = __toESM(require("path"), 1);
+var import_node_path55 = __toESM(require("path"), 1);
 var import_node_child_process14 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path56.default.join(dataDir, "frpc.pid");
+  return import_node_path55.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
@@ -67359,7 +67278,7 @@ function defaultSleep2(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path56.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path55.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -67431,7 +67350,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path57.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path56.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -67558,7 +67477,7 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path57.default.join(this.deps.dataDir, "frpc.toml");
+      const tomlPath = import_node_path56.default.join(this.deps.dataDir, "frpc.toml");
       const proxyName = `clawd-${t2.subdomain}-${localPort}-${import_node_crypto13.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t2.frpsHost,
@@ -67573,9 +67492,9 @@ var TunnelManager = class {
       const proc = (this.deps.spawnImpl ?? import_node_child_process15.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logDir = import_node_path57.default.join(this.deps.dataDir, "log");
+      const logDir = import_node_path56.default.join(this.deps.dataDir, "log");
       import_node_fs51.default.mkdirSync(logDir, { recursive: true });
-      const logFilePath = import_node_path57.default.join(logDir, "frpc.log");
+      const logFilePath = import_node_path56.default.join(logDir, "frpc.log");
       const logStream = import_node_fs51.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
@@ -67659,15 +67578,15 @@ async function waitForFrpcReady(proc, timeoutMs) {
 
 // src/tunnel/device-key.ts
 var import_node_os18 = __toESM(require("os"), 1);
-var import_node_path58 = __toESM(require("path"), 1);
+var import_node_path57 = __toESM(require("path"), 1);
 var import_node_crypto14 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os18.default.hostname();
   const uid = opts.uid ?? (typeof import_node_os18.default.userInfo === "function" ? import_node_os18.default.userInfo().uid : 0);
   const home = opts.home ?? import_node_os18.default.homedir();
-  const defaultDataDir = import_node_path58.default.resolve(import_node_path58.default.join(home, ".clawd"));
-  const normalizedDataDir = opts.dataDir ? import_node_path58.default.resolve(opts.dataDir) : null;
+  const defaultDataDir = import_node_path57.default.resolve(import_node_path57.default.join(home, ".clawd"));
+  const normalizedDataDir = opts.dataDir ? import_node_path57.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
   return import_node_crypto14.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
@@ -67675,11 +67594,11 @@ function deriveStableDeviceKey(opts = {}) {
 
 // src/auth-store.ts
 var import_node_fs52 = __toESM(require("fs"), 1);
-var import_node_path59 = __toESM(require("path"), 1);
+var import_node_path58 = __toESM(require("path"), 1);
 var import_node_crypto15 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path59.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path58.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -67741,7 +67660,7 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs52.default.mkdirSync(import_node_path59.default.dirname(file), { recursive: true });
+  import_node_fs52.default.mkdirSync(import_node_path58.default.dirname(file), { recursive: true });
   import_node_fs52.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
     import_node_fs52.default.chmodSync(file, 384);
@@ -67752,10 +67671,10 @@ function writeAuthFile(file, content) {
 // src/owner-profile.ts
 var import_node_fs53 = __toESM(require("fs"), 1);
 var import_node_os19 = __toESM(require("os"), 1);
-var import_node_path60 = __toESM(require("path"), 1);
+var import_node_path59 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function profilePath(dataDir) {
-  return import_node_path60.default.join(dataDir, PROFILE_FILENAME);
+  return import_node_path59.default.join(dataDir, PROFILE_FILENAME);
 }
 function loadOwnerProfile(dataDir) {
   let raw;
@@ -67793,12 +67712,12 @@ function loadOwnerDisplayName(dataDir) {
 
 // src/feishu-auth/owner-identity-store.ts
 var import_node_fs54 = __toESM(require("fs"), 1);
-var import_node_path61 = __toESM(require("path"), 1);
+var import_node_path60 = __toESM(require("path"), 1);
 var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
 var OwnerIdentityStore = class {
   file;
   constructor(dataDir) {
-    this.file = import_node_path61.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
+    this.file = import_node_path60.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
   }
   read() {
     let raw;
@@ -67830,7 +67749,7 @@ var OwnerIdentityStore = class {
     };
   }
   write(record4) {
-    import_node_fs54.default.mkdirSync(import_node_path61.default.dirname(this.file), { recursive: true });
+    import_node_fs54.default.mkdirSync(import_node_path60.default.dirname(this.file), { recursive: true });
     import_node_fs54.default.writeFileSync(this.file, JSON.stringify(record4, null, 2), { mode: 384 });
     try {
       import_node_fs54.default.chmodSync(this.file, 384);
@@ -68336,7 +68255,7 @@ function verifyConnectToken(args) {
 
 // src/feishu-auth/server-key.ts
 var fs71 = __toESM(require("fs"), 1);
-var path74 = __toESM(require("path"), 1);
+var path73 = __toESM(require("path"), 1);
 var FILE_NAME2 = "server-signing-key.json";
 var ServerKeyStore = class {
   constructor(dataDir) {
@@ -68344,7 +68263,7 @@ var ServerKeyStore = class {
   }
   dataDir;
   filePath() {
-    return path74.join(this.dataDir, FILE_NAME2);
+    return path73.join(this.dataDir, FILE_NAME2);
   }
   /** 读缓存的公钥；无缓存 / 损坏 → null（调用方决定是否触发拉取） */
   read() {
@@ -68379,7 +68298,7 @@ var ServerKeyStore = class {
 init_protocol();
 
 // src/handlers/index.ts
-var import_node_path75 = __toESM(require("path"), 1);
+var import_node_path74 = __toESM(require("path"), 1);
 
 // src/handlers/session.ts
 init_protocol();
@@ -68387,7 +68306,7 @@ init_protocol();
 // src/session/fork.ts
 var import_node_fs55 = __toESM(require("fs"), 1);
 var import_node_os20 = __toESM(require("os"), 1);
-var import_node_path62 = __toESM(require("path"), 1);
+var import_node_path61 = __toESM(require("path"), 1);
 var import_node_crypto17 = require("crypto");
 init_claude_history();
 function readJsonlEntries(file) {
@@ -68404,19 +68323,19 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path62.default.join(import_node_os20.default.homedir(), ".claude");
-  let projectDir = import_node_path62.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  let sourceFile = import_node_path62.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  const baseDir = input.baseDir ?? import_node_path61.default.join(import_node_os20.default.homedir(), ".claude");
+  let projectDir = import_node_path61.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  let sourceFile = import_node_path61.default.join(projectDir, `${input.toolSessionId}.jsonl`);
   if (!import_node_fs55.default.existsSync(sourceFile)) {
     const found = findTranscriptByToolSessionId(
-      import_node_path62.default.join(baseDir, "projects"),
+      import_node_path61.default.join(baseDir, "projects"),
       input.toolSessionId
     );
     if (!found) {
       throw new Error(`fork: source transcript not found: ${sourceFile}`);
     }
     sourceFile = found;
-    projectDir = import_node_path62.default.dirname(found);
+    projectDir = import_node_path61.default.dirname(found);
   }
   const entries = readJsonlEntries(sourceFile);
   const mainEntries = entries.filter((e) => e.isSidechain !== true);
@@ -68445,8 +68364,8 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const outDir = input.targetCwd ? import_node_path62.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
-  const forkedFilePath = import_node_path62.default.join(outDir, `${forkedToolSessionId}.jsonl`);
+  const outDir = input.targetCwd ? import_node_path61.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
+  const forkedFilePath = import_node_path61.default.join(outDir, `${forkedToolSessionId}.jsonl`);
   import_node_fs55.default.mkdirSync(outDir, { recursive: true });
   import_node_fs55.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
@@ -68456,16 +68375,16 @@ function forkSession(input) {
 var import_node_fs56 = __toESM(require("fs"), 1);
 var import_promises10 = __toESM(require("fs/promises"), 1);
 var import_node_os21 = __toESM(require("os"), 1);
-var import_node_path63 = __toESM(require("path"), 1);
+var import_node_path62 = __toESM(require("path"), 1);
 var import_node_module = require("module");
 var import_node_child_process16 = require("child_process");
 var import_meta6 = {};
 function defaultRoots() {
   const home = import_node_os21.default.homedir();
   return {
-    claudeProjectsDir: import_node_path63.default.join(home, ".claude", "projects"),
-    codexDir: import_node_path63.default.join(home, ".codex"),
-    clawdDir: import_node_path63.default.join(home, ".clawd")
+    claudeProjectsDir: import_node_path62.default.join(home, ".claude", "projects"),
+    codexDir: import_node_path62.default.join(home, ".codex"),
+    clawdDir: import_node_path62.default.join(home, ".clawd")
   };
 }
 function width(s2) {
@@ -68533,13 +68452,13 @@ async function scanClaude(roots) {
     if (!d2.isDirectory()) continue;
     let files;
     try {
-      files = import_node_fs56.default.readdirSync(import_node_path63.default.join(roots.claudeProjectsDir, d2.name));
+      files = import_node_fs56.default.readdirSync(import_node_path62.default.join(roots.claudeProjectsDir, d2.name));
     } catch {
       continue;
     }
     for (const name of files) {
       if (!name.endsWith(".jsonl")) continue;
-      const file = import_node_path63.default.join(roots.claudeProjectsDir, d2.name, name);
+      const file = import_node_path62.default.join(roots.claudeProjectsDir, d2.name, name);
       let st2;
       try {
         st2 = import_node_fs56.default.statSync(file);
@@ -68669,7 +68588,7 @@ async function codexFromRows(rows) {
 async function scanCodex(roots) {
   let dbs = [];
   try {
-    dbs = import_node_fs56.default.readdirSync(roots.codexDir).filter((n2) => /^state_.*\.sqlite$/.test(n2)).sort().map((n2) => import_node_path63.default.join(roots.codexDir, n2));
+    dbs = import_node_fs56.default.readdirSync(roots.codexDir).filter((n2) => /^state_.*\.sqlite$/.test(n2)).sort().map((n2) => import_node_path62.default.join(roots.codexDir, n2));
   } catch {
   }
   if (!dbs.length) return [];
@@ -68678,14 +68597,14 @@ async function scanCodex(roots) {
 }
 async function scanExternalSessions(rootsIn) {
   const roots = { ...defaultRoots(), ...rootsIn };
-  const personaRoot = import_node_path63.default.join(roots.clawdDir, "personas");
+  const personaRoot = import_node_path62.default.join(roots.clawdDir, "personas");
   const all = [...await scanClaude(roots), ...await scanCodex(roots)];
   const out = [];
   for (const c2 of all) {
     if (c2.skip) continue;
     if (c2.turns < 1) continue;
     if (!c2.cwd || !isDir2(c2.cwd)) continue;
-    if (c2.cwd === roots.clawdDir || c2.cwd === personaRoot || c2.cwd.startsWith(personaRoot + import_node_path63.default.sep) || c2.cwd.startsWith(roots.clawdDir + import_node_path63.default.sep)) {
+    if (c2.cwd === roots.clawdDir || c2.cwd === personaRoot || c2.cwd.startsWith(personaRoot + import_node_path62.default.sep) || c2.cwd.startsWith(roots.clawdDir + import_node_path62.default.sep)) {
       continue;
     }
     out.push({
@@ -68703,12 +68622,12 @@ async function scanExternalSessions(rootsIn) {
 
 // src/session/import-ledger.ts
 var import_node_fs57 = __toESM(require("fs"), 1);
-var import_node_path64 = __toESM(require("path"), 1);
+var import_node_path63 = __toESM(require("path"), 1);
 var LEDGER_FILENAME = "session-import-ledger.json";
 function readImportLedger(dataDir) {
   try {
     const parsed = JSON.parse(
-      import_node_fs57.default.readFileSync(import_node_path64.default.join(dataDir, LEDGER_FILENAME), "utf8")
+      import_node_fs57.default.readFileSync(import_node_path63.default.join(dataDir, LEDGER_FILENAME), "utf8")
     );
     return Array.isArray(parsed) ? parsed : [];
   } catch {
@@ -68716,7 +68635,7 @@ function readImportLedger(dataDir) {
   }
 }
 function appendImportLedger(dataDir, entry) {
-  const file = import_node_path64.default.join(dataDir, LEDGER_FILENAME);
+  const file = import_node_path63.default.join(dataDir, LEDGER_FILENAME);
   const entries = readImportLedger(dataDir);
   entries.push(entry);
   import_node_fs57.default.writeFileSync(file, JSON.stringify(entries, null, 2), { encoding: "utf8", mode: 384 });
@@ -69252,7 +69171,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path79 = __toESM(require("path"), 1);
+var path78 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -69270,7 +69189,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path78 = __toESM(require("path"), 1);
+var path77 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g3 of grants) {
@@ -69283,42 +69202,42 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read", userWorkDir) {
-  const target = path78.resolve(absPath);
+  const target = path77.resolve(absPath);
   if (userWorkDir) {
-    const u2 = path78.resolve(userWorkDir);
-    const usep = u2.endsWith(path78.sep) ? "" : path78.sep;
+    const u2 = path77.resolve(userWorkDir);
+    const usep = u2.endsWith(path77.sep) ? "" : path77.sep;
     if (target === u2 || target.startsWith(u2 + usep)) return true;
   }
-  const root = path78.resolve(personaRoot);
-  const sep4 = root.endsWith(path78.sep) ? "" : path78.sep;
+  const root = path77.resolve(personaRoot);
+  const sep4 = root.endsWith(path77.sep) ? "" : path77.sep;
   if (!target.startsWith(root + sep4)) return false;
-  const rel = path78.relative(root, target);
+  const rel = path77.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId2 = rel.split(path78.sep)[0];
+  const personaId2 = rel.split(path77.sep)[0];
   if (!personaId2) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId2);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path78.resolve(personaRoot);
-  const target = path78.resolve(absPath);
-  const sep4 = root.endsWith(path78.sep) ? "" : path78.sep;
+  const root = path77.resolve(personaRoot);
+  const target = path77.resolve(absPath);
+  const sep4 = root.endsWith(path77.sep) ? "" : path77.sep;
   if (!target.startsWith(root + sep4)) return null;
-  const rel = path78.relative(root, target);
+  const rel = path77.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path78.sep)[0];
+  const id = rel.split(path77.sep)[0];
   return id || null;
 }
 function isPathWithin(dir, absPath) {
-  const d2 = path78.resolve(dir);
-  const t2 = path78.resolve(absPath);
-  const sep4 = d2.endsWith(path78.sep) ? "" : path78.sep;
+  const d2 = path77.resolve(dir);
+  const t2 = path77.resolve(absPath);
+  const sep4 = d2.endsWith(path77.sep) ? "" : path77.sep;
   return t2 === d2 || t2.startsWith(d2 + sep4);
 }
 function isPathInGuestBoundary(personaRoot, personaId2, userWorkDir, absPath) {
   if (userWorkDir && isPathWithin(userWorkDir, absPath)) return true;
-  return personaIdFromPath(path78.resolve(absPath), personaRoot) === personaId2;
+  return personaIdFromPath(path77.resolve(absPath), personaRoot) === personaId2;
 }
 
 // src/handlers/history.ts
@@ -69371,7 +69290,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path79.join(personaRoot, pid),
+          path78.join(personaRoot, pid),
           personaRoot,
           "read",
           userWorkDir
@@ -69383,7 +69302,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path79.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
+    assertGuestPath(ctx, path78.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -69431,14 +69350,14 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path79.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
+    assertGuestPath(ctx, path78.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagents");
     const subs = await historyReaderForToolSession(args.toolSessionId).listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path79.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
+    assertGuestPath(ctx, path78.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagent-read");
     const res = await historyReaderForToolSession(args.toolSessionId).readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
@@ -69448,7 +69367,7 @@ function buildHistoryHandlers(deps) {
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
       const filtered = dirs.filter(
-        (d2) => isGuestPathAllowed(ctx.grants, path79.resolve(d2.cwd), personaRoot, "read", userWorkDir)
+        (d2) => isGuestPathAllowed(ctx.grants, path78.resolve(d2.cwd), personaRoot, "read", userWorkDir)
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -69467,15 +69386,15 @@ function buildHistoryHandlers(deps) {
 // src/handlers/projects.ts
 var fs75 = __toESM(require("fs"), 1);
 var os23 = __toESM(require("os"), 1);
-var path80 = __toESM(require("path"), 1);
+var path79 = __toESM(require("path"), 1);
 var import_node_child_process17 = require("child_process");
 init_protocol();
-var DEFAULT_PROJECTS_ROOT = path80.join(os23.homedir(), "Documents", "ChatGPT");
+var DEFAULT_PROJECTS_ROOT = path79.join(os23.homedir(), "Documents", "ChatGPT");
 function allocateDir(root, name) {
-  let candidate = path80.join(root, name);
+  let candidate = path79.join(root, name);
   let n2 = 2;
   while (fs75.existsSync(candidate)) {
-    candidate = path80.join(root, `${name} ${n2}`);
+    candidate = path79.join(root, `${name} ${n2}`);
     n2 += 1;
   }
   return candidate;
@@ -69560,7 +69479,7 @@ function buildProjectHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path81 = __toESM(require("path"), 1);
+var path80 = __toESM(require("path"), 1);
 init_protocol();
 var os24 = __toESM(require("os"), 1);
 init_protocol();
@@ -69603,22 +69522,22 @@ function buildWorkspaceHandlers(deps) {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
     const fallbackCwd = isGuest && personaRoot ? personaRoot : os24.homedir();
-    const resolvedCwd = path81.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path81.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const resolvedCwd = path80.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path80.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list", usersRoot);
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path81.isAbsolute(args.path) ? path81.resolve(args.path) : path81.resolve(args.cwd, args.path);
+    const target = path80.isAbsolute(args.path) ? path80.resolve(args.path) : path80.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read", usersRoot);
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path81.resolve(args.cwd);
+    const cwdAbs = path80.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list", usersRoot);
     const list2 = await getSkillsForTool(args.tool ?? "claude", cwdAbs);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -69630,7 +69549,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path81.resolve(args.cwd);
+    const cwdAbs = path80.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list", usersRoot);
     if (isCodexFamily(args.tool) || args.tool === PI_TOOL_ID) {
       return { response: { type: "agents:list", agents: [] } };
@@ -69652,18 +69571,18 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path83 = __toESM(require("path"), 1);
+var path82 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process18 = require("child_process");
 var import_node_fs58 = __toESM(require("fs"), 1);
-var import_node_path65 = __toESM(require("path"), 1);
+var import_node_path64 = __toESM(require("path"), 1);
 var import_node_util2 = require("util");
 var pexec = (0, import_node_util2.promisify)(import_node_child_process18.execFile);
 function normalizePath(p3) {
-  const resolved = import_node_path65.default.resolve(p3);
+  const resolved = import_node_path64.default.resolve(p3);
   try {
     return import_node_fs58.default.realpathSync(resolved);
   } catch {
@@ -69739,7 +69658,7 @@ async function listGitBranches(cwd) {
 function assertGuestCwd(ctx, cwd, personaRoot, method, usersRoot) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
   const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
-  if (!isGuestPathAllowed(ctx.grants, path83.resolve(cwd), personaRoot, "read", userWorkDir)) {
+  if (!isGuestPathAllowed(ctx.grants, path82.resolve(cwd), personaRoot, "read", userWorkDir)) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -69807,8 +69726,8 @@ function refreshPathFromLoginShell() {
       timeout: 3e3,
       stdio: ["ignore", "pipe", "ignore"]
     });
-    const path102 = out.trim();
-    if (path102) process.env.PATH = path102;
+    const path100 = out.trim();
+    if (path100) process.env.PATH = path100;
   } catch {
   }
 }
@@ -70017,11 +69936,11 @@ async function queryCodexAccount(deps = {}) {
 
 // src/tools/pi-account.ts
 var import_node_fs59 = __toESM(require("fs"), 1);
-var import_node_path66 = __toESM(require("path"), 1);
+var import_node_path65 = __toESM(require("path"), 1);
 function readPiCredentials(agentDir) {
   let raw;
   try {
-    raw = JSON.parse(import_node_fs59.default.readFileSync(import_node_path66.default.join(agentDir, "auth.json"), "utf8"));
+    raw = JSON.parse(import_node_fs59.default.readFileSync(import_node_path65.default.join(agentDir, "auth.json"), "utf8"));
   } catch {
     return {};
   }
@@ -71011,21 +70930,21 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.547".length > 0 ? "0.2.547" : "dev";
+var version = "0.2.549".length > 0 ? "0.2.549" : "dev";
 
 // src/cli-probe/probe.ts
 var fs78 = __toESM(require("fs"), 1);
-var path85 = __toESM(require("path"), 1);
+var path84 = __toESM(require("path"), 1);
 var PKG_NAME = "@clawos-dev/clawd";
 var BIN_NAME = "clawd";
 var MAX_PARENT_HOPS = 5;
 function probeGlobalCli(pathEnv) {
   if (!pathEnv) return null;
-  for (const dir of pathEnv.split(path85.delimiter)) {
+  for (const dir of pathEnv.split(path84.delimiter)) {
     if (!dir) continue;
     let real;
     try {
-      real = fs78.realpathSync(path85.join(dir, BIN_NAME));
+      real = fs78.realpathSync(path84.join(dir, BIN_NAME));
     } catch {
       continue;
     }
@@ -71035,15 +70954,15 @@ function probeGlobalCli(pathEnv) {
   return null;
 }
 function readOwnPackageVersion(entryPath) {
-  let dir = path85.dirname(entryPath);
+  let dir = path84.dirname(entryPath);
   for (let i2 = 0; i2 < MAX_PARENT_HOPS; i2++) {
     try {
-      const raw = fs78.readFileSync(path85.join(dir, "package.json"), "utf8");
+      const raw = fs78.readFileSync(path84.join(dir, "package.json"), "utf8");
       const pkg = JSON.parse(raw);
       if (pkg.name !== PKG_NAME) return null;
       return typeof pkg.version === "string" && pkg.version ? pkg.version : null;
     } catch {
-      const parent = path85.dirname(dir);
+      const parent = path84.dirname(dir);
       if (parent === dir) return null;
       dir = parent;
     }
@@ -71219,7 +71138,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path67 = __toESM(require("path"), 1);
+var import_node_path66 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 function assertGuestAttachmentPath(ctx, absPath, personaRoot, method, usersRoot) {
@@ -71298,12 +71217,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path67.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path67.default.isAbsolute(args.relPath) ? import_node_path67.default.resolve(args.relPath) : import_node_path67.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path66.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path66.default.isAbsolute(args.relPath) ? import_node_path66.default.resolve(args.relPath) : import_node_path66.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.signUrl", "group-acl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path67.default.isAbsolute(e.relPath) ? import_node_path67.default.resolve(e.relPath) : import_node_path67.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path66.default.isAbsolute(e.relPath) ? import_node_path66.default.resolve(e.relPath) : import_node_path66.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -71327,7 +71246,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f2 = deps.sessionStore.read(sessionId);
     if (!f2) return;
-    assertGuestAttachmentPath(ctx, import_node_path67.default.resolve(f2.cwd), deps.personaRoot, method, deps.usersRoot);
+    assertGuestAttachmentPath(ctx, import_node_path66.default.resolve(f2.cwd), deps.personaRoot, method, deps.usersRoot);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -71342,8 +71261,8 @@ function buildAttachmentHandlers(deps) {
     if (!scope) {
       throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, `session ${args.sessionId} not found`);
     }
-    const cwdAbs = import_node_path67.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
-    const candidateAbs = import_node_path67.default.isAbsolute(args.relPath) ? import_node_path67.default.resolve(args.relPath) : import_node_path67.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path66.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
+    const candidateAbs = import_node_path66.default.isAbsolute(args.relPath) ? import_node_path66.default.resolve(args.relPath) : import_node_path66.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.groupAdd", "cwd-subtree");
     const from = args.origin === "agent" ? "agent" : ctx?.principal.kind === "owner" ? "owner" : "agent";
     const size = 0;
@@ -71402,19 +71321,19 @@ function buildAttachmentHandlers(deps) {
 
 // src/handlers/extension.ts
 var import_promises14 = __toESM(require("fs/promises"), 1);
-var import_node_path72 = __toESM(require("path"), 1);
+var import_node_path71 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/extension/bundle-zip.ts
 var import_promises11 = __toESM(require("fs/promises"), 1);
-var import_node_path68 = __toESM(require("path"), 1);
+var import_node_path67 = __toESM(require("path"), 1);
 var import_node_crypto18 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
   const zip = new import_jszip2.default();
   for (const rel of entries) {
-    const abs = import_node_path68.default.join(dir, rel);
+    const abs = import_node_path67.default.join(dir, rel);
     const content = await import_promises11.default.readFile(abs);
     zip.file(rel, content, { date: FIXED_DATE });
   }
@@ -71435,7 +71354,7 @@ async function listFilesSorted(rootDir) {
   return out;
 }
 async function walk(absRoot, relPrefix, out) {
-  const dirAbs = import_node_path68.default.join(absRoot, relPrefix);
+  const dirAbs = import_node_path67.default.join(absRoot, relPrefix);
   const entries = await import_promises11.default.readdir(dirAbs, { withFileTypes: true });
   for (const e of entries) {
     if (IGNORE_BASENAMES.has(e.name)) continue;
@@ -71489,25 +71408,25 @@ function computePublishCheck(args) {
 
 // src/extension/install-flow.ts
 var import_promises12 = __toESM(require("fs/promises"), 1);
-var import_node_path70 = __toESM(require("path"), 1);
+var import_node_path69 = __toESM(require("path"), 1);
 var import_node_os25 = __toESM(require("os"), 1);
 var import_node_crypto19 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
 var import_node_os24 = __toESM(require("os"), 1);
-var import_node_path69 = __toESM(require("path"), 1);
+var import_node_path68 = __toESM(require("path"), 1);
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path69.default.join(import_node_os24.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path68.default.join(import_node_os24.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
-  return import_node_path69.default.join(clawdHomeRoot(override), "extensions");
+  return import_node_path68.default.join(clawdHomeRoot(override), "extensions");
 }
 function publishedChannelsFile(override) {
-  return import_node_path69.default.join(clawdHomeRoot(override), "extensions-published.json");
+  return import_node_path68.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
 function bundleCacheRoot(override) {
-  return import_node_path69.default.join(clawdHomeRoot(override), "extension-bundles");
+  return import_node_path68.default.join(clawdHomeRoot(override), "extension-bundles");
 }
 
 // src/extension/install-flow.ts
@@ -71534,7 +71453,7 @@ async function installFromChannel(args, deps) {
     throw new InstallError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path70.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path69.default.isAbsolute(name)) {
       throw new InstallError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -71566,7 +71485,7 @@ async function installFromChannel(args, deps) {
     );
   }
   const localExtId = namespacedExtId(ownerSlug, channelRef.ownerPrincipalId);
-  const destDir = import_node_path70.default.join(deps.extensionsRoot, localExtId);
+  const destDir = import_node_path69.default.join(deps.extensionsRoot, localExtId);
   let destExists = false;
   try {
     await import_promises12.default.access(destDir);
@@ -71580,16 +71499,16 @@ async function installFromChannel(args, deps) {
     );
   }
   const stage = await import_promises12.default.mkdtemp(
-    import_node_path70.default.join(import_node_os25.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+    import_node_path69.default.join(import_node_os25.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path70.default.join(stage, name);
+      const dest = import_node_path69.default.join(stage, name);
       if (entry.dir) {
         await import_promises12.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises12.default.mkdir(import_node_path70.default.dirname(dest), { recursive: true });
+      await import_promises12.default.mkdir(import_node_path69.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises12.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -71610,7 +71529,7 @@ async function installFromChannel(args, deps) {
 
 // src/extension/update-flow.ts
 var import_promises13 = __toESM(require("fs/promises"), 1);
-var import_node_path71 = __toESM(require("path"), 1);
+var import_node_path70 = __toESM(require("path"), 1);
 var import_node_os26 = __toESM(require("os"), 1);
 var import_node_crypto20 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
@@ -71627,11 +71546,11 @@ async function updateFromChannel(args, deps) {
     channelRef.extId,
     channelRef.ownerPrincipalId
   );
-  const liveDir = import_node_path71.default.join(deps.extensionsRoot, localExtId);
+  const liveDir = import_node_path70.default.join(deps.extensionsRoot, localExtId);
   const prevDir = `${liveDir}.prev`;
   let existingVersion;
   try {
-    const raw = await import_promises13.default.readFile(import_node_path71.default.join(liveDir, "manifest.json"), "utf8");
+    const raw = await import_promises13.default.readFile(import_node_path70.default.join(liveDir, "manifest.json"), "utf8");
     const parsed2 = ExtensionManifestSchema.safeParse(JSON.parse(raw));
     if (!parsed2.success) {
       throw new UpdateError(
@@ -71664,7 +71583,7 @@ async function updateFromChannel(args, deps) {
     throw new UpdateError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path71.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path70.default.isAbsolute(name)) {
       throw new UpdateError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -71699,16 +71618,16 @@ async function updateFromChannel(args, deps) {
   await import_promises13.default.rm(prevDir, { recursive: true, force: true });
   await import_promises13.default.rename(liveDir, prevDir);
   const stage = await import_promises13.default.mkdtemp(
-    import_node_path71.default.join(import_node_os26.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+    import_node_path70.default.join(import_node_os26.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path71.default.join(stage, name);
+      const dest = import_node_path70.default.join(stage, name);
       if (entry.dir) {
         await import_promises13.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises13.default.mkdir(import_node_path71.default.dirname(dest), { recursive: true });
+      await import_promises13.default.mkdir(import_node_path70.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises13.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -71775,7 +71694,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
       );
     }
   }
-  const manifestPath = import_node_path72.default.join(root, extId, "manifest.json");
+  const manifestPath = import_node_path71.default.join(root, extId, "manifest.json");
   const manifest = await readManifest(root, extId);
   const next = { ...manifest, version: newVersion };
   const tmp = `${manifestPath}.tmp`;
@@ -71783,7 +71702,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
   await import_promises14.default.rename(tmp, manifestPath);
 }
 async function readManifest(root, extId) {
-  const file = import_node_path72.default.join(root, extId, "manifest.json");
+  const file = import_node_path71.default.join(root, extId, "manifest.json");
   let raw;
   try {
     raw = await import_promises14.default.readFile(file, "utf8");
@@ -71867,7 +71786,7 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256, buffer } = await bundleExtensionDir(import_node_path72.default.join(deps.root, extId));
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path71.default.join(deps.root, extId));
     return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
@@ -72695,7 +72614,7 @@ function buildVisitorHandlers(deps) {
 
 // src/extension/registry.ts
 var import_promises16 = __toESM(require("fs/promises"), 1);
-var import_node_path73 = __toESM(require("path"), 1);
+var import_node_path72 = __toESM(require("path"), 1);
 async function loadAll(root) {
   let entries;
   try {
@@ -72708,13 +72627,13 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path73.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path72.default.join(root, ent.name), ent.name));
   }
   records.sort((a2, b3) => a2.extId < b3.extId ? -1 : a2.extId > b3.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path73.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path72.default.join(dir, "manifest.json");
   let raw;
   try {
     raw = await import_promises16.default.readFile(manifestPath, "utf8");
@@ -72759,7 +72678,7 @@ async function loadOne(dir, dirName) {
 
 // src/extension/uninstall.ts
 var import_promises17 = __toESM(require("fs/promises"), 1);
-var import_node_path74 = __toESM(require("path"), 1);
+var import_node_path73 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -72768,7 +72687,7 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path74.default.join(deps.root, deps.extId);
+  const dir = import_node_path73.default.join(deps.root, deps.extId);
   try {
     await import_promises17.default.access(dir);
   } catch {
@@ -72983,7 +72902,7 @@ function buildMethodHandlers(deps) {
       broadcast: deps.broadcastToOwners
     }),
     ...buildMasterHandlers({
-      authorityTablePath: import_node_path75.default.join(deps.masterDataDir, "master-authority.json")
+      authorityTablePath: import_node_path74.default.join(deps.masterDataDir, "master-authority.json")
     }),
     ...buildTopicHandlers({
       topicStore: deps.topicStore,
@@ -73083,45 +73002,6 @@ function buildOnboardingHandlers(deps) {
   return { "onboarding:complete": complete, "tools:probe": toolsProbe, "onboarding:iosInterest": iosInterest };
 }
 
-// src/app-builder-plugin/mcp-config.ts
-var import_node_fs60 = __toESM(require("fs"), 1);
-var import_node_path76 = __toESM(require("path"), 1);
-function appBuilderMcpConfigPath(outDir, personaId2) {
-  return import_node_path76.default.join(outDir, `${personaId2}.app-builder.mcp.json`);
-}
-function writeAppBuilderMcpConfig(args) {
-  const cfgPath = appBuilderMcpConfigPath(args.outDir, args.personaId);
-  const cfg = {
-    _comment: `daemon \u81EA\u52A8\u751F\u6210\uFF08${args.personaId} \u7684\u4F1A\u8BDD spawn \u524D\u91CD\u6E32\uFF09\uFF1Bagent spawn \u901A\u8FC7 --mcp-config \u6CE8\u5165\u3002app-builder-plugin/mcp-server.cjs \u662F clawd-app-builder \u63D2\u4EF6\uFF1A\u9879\u76EE\u76EE\u5F55 / scaffold / \u53D1\u5E03 / \u62C6\u9664\u90FD\u5728\u5B83\u8FDB\u7A0B\u91CC\u505A\uFF0C\u51ED\u636E\u53EA\u5728\u8FD9\u4EFD per-server env \u91CC\uFF08GitHub \u5EFA\u4ED3 / \u63D0\u4EA4\u4E0D\u5728\u8FD9\u91CC\uFF0Cagent \u6309 skill \u8D70 GitHub MCP\uFF09\u3002\u975E app-builder \u7CFB persona \u7684\u4F1A\u8BDD\u4E0D\u6302\u672C server\u3002`,
-    mcpServers: {
-      "clawd-app-builder": {
-        type: "stdio",
-        command: "node",
-        args: [args.serverScriptPath],
-        env: {
-          // 凭据排前面：固定键在后，凭据表里若混进同名条目也顶不掉路径
-          ...args.secrets ?? {},
-          CLAWD_APP_BUILDER_PERSONA_ROOT: args.personaRoot,
-          CLAWD_APP_BUILDER_TEMPLATE_DIR: args.templateDir,
-          CLAWD_APP_BUILDER_SCAFFOLD_SCRIPT: import_node_path76.default.join(args.deployKitScriptsDir, "new-extension.sh"),
-          CLAWD_APP_BUILDER_PUBLISH_SCRIPT: import_node_path76.default.join(args.deployKitScriptsDir, "publish.sh"),
-          CLAWD_APP_BUILDER_REMOVE_SCRIPT: import_node_path76.default.join(args.deployKitScriptsDir, "remove-extension.sh"),
-          ...args.logPath ? { CLAWD_APP_BUILDER_LOG: args.logPath } : {}
-        }
-      }
-    }
-  };
-  import_node_fs60.default.mkdirSync(args.outDir, { recursive: true, mode: 448 });
-  const tmp = `${cfgPath}.${process.pid}.tmp`;
-  import_node_fs60.default.writeFileSync(tmp, JSON.stringify(cfg, null, 2), { encoding: "utf8", mode: 384 });
-  import_node_fs60.default.renameSync(tmp, cfgPath);
-  return cfgPath;
-}
-
-// src/app-builder-plugin/personas.ts
-var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
-var APP_BUILDER_TEMPLATE = "nestjs-react";
-
 // src/handlers/dispatch-rpc.ts
 init_zod();
 init_protocol();
@@ -73165,7 +73045,7 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 
 // src/extension/runtime.ts
 var import_node_child_process24 = require("child_process");
-var import_node_path77 = __toESM(require("path"), 1);
+var import_node_path75 = __toESM(require("path"), 1);
 var import_promises18 = require("timers/promises");
 
 // src/extension/port-allocator.ts
@@ -73266,7 +73146,7 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path77.default.join(this.root, extId);
+    const dir = import_node_path75.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
@@ -73378,7 +73258,7 @@ ${handle.stderrTail}`
 
 // src/extension/published-channels.ts
 var import_promises19 = __toESM(require("fs/promises"), 1);
-var import_node_path78 = __toESM(require("path"), 1);
+var import_node_path76 = __toESM(require("path"), 1);
 init_zod();
 var PublishedChannelsError = class extends Error {
   constructor(code, message) {
@@ -73477,7 +73357,7 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises19.default.mkdir(import_node_path78.default.dirname(this.filePath), { recursive: true });
+    await import_promises19.default.mkdir(import_node_path76.default.dirname(this.filePath), { recursive: true });
     await import_promises19.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
     await import_promises19.default.rename(tmp, this.filePath);
   }
@@ -73485,7 +73365,7 @@ var PublishedChannelStore = class {
 
 // src/extension/bundle-cache.ts
 var import_promises20 = __toESM(require("fs/promises"), 1);
-var import_node_path79 = __toESM(require("path"), 1);
+var import_node_path77 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -73494,14 +73374,14 @@ var BundleCache = class {
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
     await import_promises20.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path79.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path77.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
     await import_promises20.default.writeFile(tmp, buffer, { mode: 384 });
     await import_promises20.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path79.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path77.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
       return await import_promises20.default.readFile(file);
     } catch (e) {
@@ -73511,7 +73391,7 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path79.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path77.default.join(this.rootDir, `${snapshotHash}.zip`);
     await import_promises20.default.rm(file, { force: true });
   }
 };
@@ -73534,24 +73414,24 @@ async function startDaemon(config) {
     sampling: logShippingCfg.sampling,
     homeDir: import_node_os28.default.homedir()
   });
-  const logDir = import_node_path80.default.join(config.dataDir, "log");
-  import_node_fs61.default.mkdirSync(logDir, { recursive: true });
+  const logDir = import_node_path78.default.join(config.dataDir, "log");
+  import_node_fs60.default.mkdirSync(logDir, { recursive: true });
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path80.default.join(logDir, "clawd.log"),
+    file: import_node_path78.default.join(logDir, "clawd.log"),
     logClient
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const screenIdleProbeLogger = createFileOnlyLogger({
-    file: import_node_path80.default.join(logDir, "screen-idle-probe.log"),
+    file: import_node_path78.default.join(logDir, "screen-idle-probe.log"),
     level: "debug"
   });
   logger.info("screen-idle probe logger enabled", {
-    file: import_node_path80.default.join(logDir, "screen-idle-probe.log")
+    file: import_node_path78.default.join(logDir, "screen-idle-probe.log")
   });
   const CAP_TARGETS = [
-    import_node_path80.default.join(logDir, "clawd.log"),
-    import_node_path80.default.join(logDir, "screen-idle-probe.log")
+    import_node_path78.default.join(logDir, "clawd.log"),
+    import_node_path78.default.join(logDir, "screen-idle-probe.log")
   ];
   const LOG_CAP_MAX_BYTES = 10 * 1024 * 1024;
   const LOG_CAP_KEEP_BYTES = 5 * 1024 * 1024;
@@ -73673,8 +73553,8 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path80.default.join(config.dataDir, "personas"));
-  const usersRoot = import_node_path80.default.join(config.dataDir, "users");
+  const personaStore = new PersonaStore(import_node_path78.default.join(config.dataDir, "personas"));
+  const usersRoot = import_node_path78.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -73683,13 +73563,6 @@ async function startDaemon(config) {
   } else {
     logger.warn("persona.seed.skip", { reason: "defaults-root-not-found" });
   }
-  const deployKitBundleRoot = findDeployKitRoot(logger);
-  if (deployKitBundleRoot) {
-    seedDeployKit({ deployKitBundleRoot, dataDir: config.dataDir, logger });
-    refreshDeployKit({ deployKitBundleRoot, dataDir: config.dataDir, logger });
-  } else {
-    logger.warn("deploy-kit.bundle-missing", {});
-  }
   refreshSandboxSettings({ store: personaStore, logger });
   migrateAgentsMirror({ store: personaStore, logger });
   migrateCodexSandbox({ store: personaStore, logger });
@@ -73698,7 +73571,7 @@ async function startDaemon(config) {
   retirePersonaBuilder({ store: personaStore, logger });
   const groupFileStore = new GroupFileStore({ dataDir: config.dataDir, logger });
   const dispatchStore = createDispatchStore({
-    filePath: import_node_path80.default.join(config.dataDir, "dispatch.json"),
+    filePath: import_node_path78.default.join(config.dataDir, "dispatch.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("dispatch store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
@@ -73707,7 +73580,7 @@ async function startDaemon(config) {
   await dispatchStore.load();
   dispatchStore.markInterruptedAsFailed((/* @__PURE__ */ new Date()).toISOString());
   const channelStore = createChannelStore({
-    filePath: import_node_path80.default.join(config.dataDir, "channels.json"),
+    filePath: import_node_path78.default.join(config.dataDir, "channels.json"),
     now: () => Date.now(),
     genId: () => `ch-${(0, import_node_crypto22.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("channel store flush failed", {
@@ -73716,7 +73589,7 @@ async function startDaemon(config) {
   });
   await channelStore.load();
   const topicStore = createTopicStore({
-    filePath: import_node_path80.default.join(config.dataDir, "topics.json"),
+    filePath: import_node_path78.default.join(config.dataDir, "topics.json"),
     now: () => Date.now(),
     genId: () => `tp-${(0, import_node_crypto22.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("topic store flush failed", {
@@ -73743,12 +73616,12 @@ async function startDaemon(config) {
       });
     }
   });
-  const here = typeof __dirname === "string" ? __dirname : import_node_path80.default.dirname((0, import_node_url5.fileURLToPath)(import_meta9.url));
+  const here = typeof __dirname === "string" ? __dirname : import_node_path78.default.dirname((0, import_node_url5.fileURLToPath)(import_meta9.url));
   const mcpConfigs = [];
   const secretsBundleRoot = findSecretsBundleRoot(logger);
-  const localSecretsDir = import_node_path80.default.join(config.dataDir, LOCAL_SECRETS_DIRNAME);
+  const localSecretsDir = import_node_path78.default.join(config.dataDir, LOCAL_SECRETS_DIRNAME);
   const readSecrets = () => readSecretTable({ bundleRoot: secretsBundleRoot, overrideDir: localSecretsDir, logger });
-  const githubTokenFile = import_node_path80.default.join(localSecretsDir, GITHUB_TOKEN_FILE);
+  const githubTokenFile = import_node_path78.default.join(localSecretsDir, GITHUB_TOKEN_FILE);
   const githubIdentity = createGithubIdentity({
     resolve: () => resolveGithubAuth({ exec: runCommand, fileToken: () => readEnvFileVar(githubTokenFile, GITHUB_TOKEN_VAR) }),
     store: (token) => storeGithubAuth({
@@ -73781,29 +73654,27 @@ async function startDaemon(config) {
     logger
   });
   void githubIdentity.refresh();
-  let refreshAppBuilderMcpConfig;
   const resolvePersonaMcpConfig = (personaId2) => {
-    refreshAppBuilderMcpConfig?.(personaId2);
     const secrets = secretsWithGithubIdentity(readSecrets(), githubIdentity.cached());
     void githubIdentity.refresh();
     return renderPersonaMcpSecrets({
       personaId: personaId2,
-      personaDir: import_node_path80.default.join(config.dataDir, "personas", personaId2),
+      personaDir: import_node_path78.default.join(config.dataDir, "personas", personaId2),
       secrets,
-      outDir: import_node_path80.default.join(config.dataDir, "persona-mcp"),
+      outDir: import_node_path78.default.join(config.dataDir, "persona-mcp"),
       logger
     });
   };
   const mcpDaemonUrl = `http://127.0.0.1:${config.port}`;
   const dispatchServerCandidates = [
-    import_node_path80.default.join(here, "dispatch", "mcp-server.cjs"),
+    import_node_path78.default.join(here, "dispatch", "mcp-server.cjs"),
     // 生产 dist/index → dist/dispatch/mcp-server.cjs
-    import_node_path80.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
+    import_node_path78.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
-  const dispatchServerScriptPath = dispatchServerCandidates.find((p3) => import_node_fs61.default.existsSync(p3));
+  const dispatchServerScriptPath = dispatchServerCandidates.find((p3) => import_node_fs60.default.existsSync(p3));
   if (dispatchServerScriptPath) {
-    const dispatchLogPath = import_node_path80.default.join(logDir, "dispatch-mcp-server.log");
+    const dispatchLogPath = import_node_path78.default.join(logDir, "dispatch-mcp-server.log");
     const dispatchCfgPath = writeDispatchMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: dispatchServerScriptPath,
@@ -73823,12 +73694,12 @@ async function startDaemon(config) {
     });
   }
   const ticketServerCandidates = [
-    import_node_path80.default.join(here, "ticket", "mcp-server.cjs"),
-    import_node_path80.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
+    import_node_path78.default.join(here, "ticket", "mcp-server.cjs"),
+    import_node_path78.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
-  const ticketServerScriptPath = ticketServerCandidates.find((p3) => import_node_fs61.default.existsSync(p3));
+  const ticketServerScriptPath = ticketServerCandidates.find((p3) => import_node_fs60.default.existsSync(p3));
   if (ticketServerScriptPath) {
-    const ticketLogPath = import_node_path80.default.join(logDir, "ticket-mcp-server.log");
+    const ticketLogPath = import_node_path78.default.join(logDir, "ticket-mcp-server.log");
     const ticketCfgPath = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
@@ -73850,12 +73721,12 @@ async function startDaemon(config) {
     });
   }
   const shiftServerCandidates = [
-    import_node_path80.default.join(here, "shift", "mcp-server.cjs"),
-    import_node_path80.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
+    import_node_path78.default.join(here, "shift", "mcp-server.cjs"),
+    import_node_path78.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
-  const shiftServerScriptPath = shiftServerCandidates.find((p3) => import_node_fs61.default.existsSync(p3));
+  const shiftServerScriptPath = shiftServerCandidates.find((p3) => import_node_fs60.default.existsSync(p3));
   if (shiftServerScriptPath) {
-    const shiftLogPath = import_node_path80.default.join(logDir, "shift-mcp-server.log");
+    const shiftLogPath = import_node_path78.default.join(logDir, "shift-mcp-server.log");
     const shiftCfgPath = await writeShiftMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: shiftServerScriptPath,
@@ -73876,12 +73747,12 @@ async function startDaemon(config) {
     );
   }
   const inboxServerCandidates = [
-    import_node_path80.default.join(here, "inbox", "mcp-server.cjs"),
-    import_node_path80.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
+    import_node_path78.default.join(here, "inbox", "mcp-server.cjs"),
+    import_node_path78.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
   ];
-  const inboxServerScriptPath = inboxServerCandidates.find((p3) => import_node_fs61.default.existsSync(p3));
+  const inboxServerScriptPath = inboxServerCandidates.find((p3) => import_node_fs60.default.existsSync(p3));
   if (inboxServerScriptPath) {
-    const inboxLogPath = import_node_path80.default.join(logDir, "inbox-mcp-server.log");
+    const inboxLogPath = import_node_path78.default.join(logDir, "inbox-mcp-server.log");
     const inboxCfgPath = await writeInboxMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: inboxServerScriptPath,
@@ -73902,10 +73773,10 @@ async function startDaemon(config) {
     );
   }
   const peerOpsServerCandidates = [
-    import_node_path80.default.join(here, "peer-ops", "mcp-server.cjs"),
-    import_node_path80.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
+    import_node_path78.default.join(here, "peer-ops", "mcp-server.cjs"),
+    import_node_path78.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
   ];
-  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p3) => import_node_fs61.default.existsSync(p3));
+  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p3) => import_node_fs60.default.existsSync(p3));
   if (peerOpsServerScriptPath) {
     const peerOpsCfgPath = writePeerOpsMcpConfig({
       dataDir: config.dataDir,
@@ -73925,12 +73796,12 @@ async function startDaemon(config) {
     );
   }
   const rpcToolServerCandidates = [
-    import_node_path80.default.join(here, "rpc-tool", "mcp-server.cjs"),
-    import_node_path80.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
+    import_node_path78.default.join(here, "rpc-tool", "mcp-server.cjs"),
+    import_node_path78.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
   ];
-  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p3) => import_node_fs61.default.existsSync(p3));
+  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p3) => import_node_fs60.default.existsSync(p3));
   if (rpcToolServerScriptPath) {
-    const rpcToolLogPath = import_node_path80.default.join(logDir, "rpc-tool-mcp-server.log");
+    const rpcToolLogPath = import_node_path78.default.join(logDir, "rpc-tool-mcp-server.log");
     const rpcToolCfgPath = writeRpcToolMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: rpcToolServerScriptPath,
@@ -73950,48 +73821,8 @@ async function startDaemon(config) {
       { tried: rpcToolServerCandidates }
     );
   }
-  const appBuilderServerCandidates = [
-    import_node_path80.default.join(here, "app-builder-plugin", "mcp-server.cjs"),
-    import_node_path80.default.join(here, "..", "dist", "app-builder-plugin", "mcp-server.cjs")
-  ];
-  const appBuilderServerScriptPath = appBuilderServerCandidates.find((p3) => import_node_fs61.default.existsSync(p3));
-  if (appBuilderServerScriptPath) {
-    const appBuilderLogPath = import_node_path80.default.join(logDir, "app-builder-mcp-server.log");
-    const writeAppBuilderConfigFor = (personaId2) => {
-      const personaRoot = import_node_path80.default.join(config.dataDir, "personas", personaId2);
-      const secrets = secretsForKit(readSecrets(), import_node_path80.default.join(personaRoot, "extension-kit"));
-      return writeAppBuilderMcpConfig({
-        outDir: import_node_path80.default.join(config.dataDir, "persona-mcp"),
-        personaId: personaId2,
-        serverScriptPath: appBuilderServerScriptPath,
-        personaRoot,
-        templateDir: import_node_path80.default.join(personaRoot, "extension-kit", "examples", APP_BUILDER_TEMPLATE),
-        deployKitScriptsDir: import_node_path80.default.join(config.dataDir, "deploy-kit", "scripts"),
-        ...secrets ? { secrets } : {},
-        logPath: appBuilderLogPath
-      });
-    };
-    for (const personaId2 of APP_BUILDER_PERSONAS) {
-      const cfgPath = writeAppBuilderConfigFor(personaId2);
-      mcpConfigs.push({ id: `app-builder:${personaId2}`, path: cfgPath, personas: [personaId2] });
-      logger.info("app-builder.mcp.json written", { personaId: personaId2, path: cfgPath, server: appBuilderServerScriptPath });
-    }
-    refreshAppBuilderMcpConfig = (personaId2) => {
-      if (!APP_BUILDER_PERSONAS.includes(personaId2)) return;
-      try {
-        writeAppBuilderConfigFor(personaId2);
-      } catch (err) {
-        logger.warn("app-builder.mcp.json refresh failed", { personaId: personaId2, error: err instanceof Error ? err.message : String(err) });
-      }
-    };
-  } else {
-    logger.warn(
-      "app-builder-plugin/mcp-server.cjs not found; clawd-app-builder tools disabled (dev tsx \u6A21\u5F0F\u4E0B\u9700\u5148\u8DD1\u8FC7 build)",
-      { tried: appBuilderServerCandidates }
-    );
-  }
   const shiftStore = createShiftStore({
-    filePath: import_node_path80.default.join(config.dataDir, "shift.json"),
+    filePath: import_node_path78.default.join(config.dataDir, "shift.json"),
     ownerIdProvider: () => ownerPrincipalId,
     now: () => Date.now()
   });
@@ -74013,7 +73844,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path80.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path78.default.join(config.dataDir, "personas"),
     // dispatch / shift 自动化 spawn 按 persona 绑定 tool 起 B session（codex persona 用 codex）。
     // personaRegistry 声明在 manager 之后（同作用域 const，调用时机在启动完成后，无 TDZ 风险）。
     getPersonaDefaults: (personaId2) => personaRegistry.get(personaId2),
@@ -74070,10 +73901,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path80.default.isAbsolute(input.relPath) ? input.relPath : import_node_path80.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path78.default.isAbsolute(input.relPath) ? input.relPath : import_node_path78.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs61.default.statSync(absPath).size;
+          size = import_node_fs60.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -74114,9 +73945,9 @@ async function startDaemon(config) {
     logger.info("projects.seed-dropped", { dropped: droppedSeed.dropped, backup: droppedSeed.backup });
   }
   const projectsStore = new ProjectsStore({
-    file: import_node_path80.default.join(config.dataDir, "projects.json"),
+    file: import_node_path78.default.join(config.dataDir, "projects.json"),
     clawdDir: config.dataDir,
-    codexStateFile: import_node_path80.default.join(import_node_os28.default.homedir(), ".codex", ".codex-global-state.json"),
+    codexStateFile: import_node_path78.default.join(import_node_os28.default.homedir(), ".codex", ".codex-global-state.json"),
     logger
   });
   const observer = new SessionObserver({
@@ -74181,13 +74012,13 @@ async function startDaemon(config) {
     logger
   });
   registerAdapter("claude", claudeAdapter);
-  const codexIsolatedHome = import_node_path80.default.join(config.dataDir, "codex-home");
+  const codexIsolatedHome = import_node_path78.default.join(config.dataDir, "codex-home");
   try {
-    import_node_fs61.default.mkdirSync(codexIsolatedHome, { recursive: true });
+    import_node_fs60.default.mkdirSync(codexIsolatedHome, { recursive: true });
     for (const f2 of ["auth.json", "config.toml"]) {
-      const link = import_node_path80.default.join(codexIsolatedHome, f2);
-      const target = import_node_path80.default.join(import_node_os28.default.homedir(), ".codex", f2);
-      if (!import_node_fs61.default.existsSync(link) && import_node_fs61.default.existsSync(target)) import_node_fs61.default.symlinkSync(target, link);
+      const link = import_node_path78.default.join(codexIsolatedHome, f2);
+      const target = import_node_path78.default.join(import_node_os28.default.homedir(), ".codex", f2);
+      if (!import_node_fs60.default.existsSync(link) && import_node_fs60.default.existsSync(target)) import_node_fs60.default.symlinkSync(target, link);
     }
   } catch (err) {
     logger.warn("codex isolated home setup failed", { err: String(err) });
@@ -74198,17 +74029,17 @@ async function startDaemon(config) {
       logger,
       historyReader: new CodexHistoryReader({
         roots: codexRolloutRoots(config.dataDir),
-        sharedHome: import_node_path80.default.join(import_node_os28.default.homedir(), ".codex"),
+        sharedHome: import_node_path78.default.join(import_node_os28.default.homedir(), ".codex"),
         logger
       }),
       // projectPaths 每次调用现取 —— 用户新建 project 后立即生效，不用重启 daemon
       codexHomeFor: (cwd) => resolveCodexHome({
         cwd,
-        personaRoot: import_node_path80.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path78.default.join(config.dataDir, "personas"),
         // 必须用 listMerged（Codex registry ∪ 叠加层）：只用本地 list() 的话，用户在
         // Codex 里建的 project 不在表里，在它下面开的会话会被误判成隔离 → Codex 侧看不到
         projectPaths: projectsStore.listMerged().map((x2) => x2.path),
-        sharedHome: import_node_path80.default.join(import_node_os28.default.homedir(), ".codex"),
+        sharedHome: import_node_path78.default.join(import_node_os28.default.homedir(), ".codex"),
         isolatedHome: codexIsolatedHome
       }),
       // 附件图片验签：与 http-router /files 路由同一把 secret
@@ -74232,10 +74063,10 @@ async function startDaemon(config) {
     })
   );
   const piMcpBridgeCandidates = [
-    import_node_path80.default.join(here, "pi-mcp-bridge", "extension.cjs"),
-    import_node_path80.default.join(here, "..", "dist", "pi-mcp-bridge", "extension.cjs")
+    import_node_path78.default.join(here, "pi-mcp-bridge", "extension.cjs"),
+    import_node_path78.default.join(here, "..", "dist", "pi-mcp-bridge", "extension.cjs")
   ];
-  const piMcpBridgePath = piMcpBridgeCandidates.find((p3) => import_node_fs61.default.existsSync(p3));
+  const piMcpBridgePath = piMcpBridgeCandidates.find((p3) => import_node_fs60.default.existsSync(p3));
   if (piMcpBridgePath) {
     logger.info("pi-mcp-bridge extension resolved", { path: piMcpBridgePath });
   } else {
@@ -74530,11 +74361,11 @@ async function startDaemon(config) {
         // 'persona/<pid>/owner'，default 走 'default'。
         getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
         // guest path guard：candidate 必须在 personaRoot 子树或调用者自己的 user-dir 下
-        personaRoot: import_node_path80.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path78.default.join(config.dataDir, "personas"),
         usersRoot
       },
       // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-      personaRoot: import_node_path80.default.join(config.dataDir, "personas"),
+      personaRoot: import_node_path78.default.join(config.dataDir, "personas"),
       // v2 多人 persona 隔离：handler 派生 guest user-dir 放行
       usersRoot,
       // v2 Phase 6: whoami handler 装在 owner principal.displayName + persona 解析
@@ -74815,7 +74646,7 @@ async function startDaemon(config) {
   });
   shiftScheduler.start();
   logger.info("shift scheduler started", { shiftCount: shiftStore.list().length });
-  const larkBotStore = createLarkBotBindingStore(import_node_path80.default.join(config.dataDir, "personas"));
+  const larkBotStore = createLarkBotBindingStore(import_node_path78.default.join(config.dataDir, "personas"));
   const larkBotCloud = createLarkBotCloudClient({
     api: config.clawosApi ?? DEFAULT_CLAWOS_API,
     getLoginPass: () => ownerIdentityStore.read()?.loginPass ?? null
@@ -74827,7 +74658,7 @@ async function startDaemon(config) {
     store: larkBotStore,
     fetchResource: (appId, messageId, fileKey, maxBytes, type) => larkBotCloud.fetchResource(appId, messageId, fileKey, maxBytes, type),
     // 图片落 guest userWorkDir 下（capId = lark-<chat_id>）：CC 经 --add-dir + allowRead carve 可 Read
-    mediaRootFor: (chatId) => import_node_path80.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
+    mediaRootFor: (chatId) => import_node_path78.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
     isShuttingDown: () => larkDraining,
     logger: {
       warn: (msg) => logger.warn(msg),
@@ -75111,8 +74942,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r2.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path80.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path80.default.join(logDir, "frpc.log")}`
+        `Frpc config: ${import_node_path78.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path78.default.join(logDir, "frpc.log")}`
       ];
       const width2 = Math.max(...lines.map((l2) => l2.length));
       const bar = "\u2550".repeat(width2 + 4);
@@ -75125,8 +74956,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path80.default.join(config.dataDir, "connect.txt");
-        import_node_fs61.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path78.default.join(config.dataDir, "connect.txt");
+        import_node_fs60.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -75224,9 +75055,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path80.default.join(dataDir, "persons");
+  const dir = import_node_path78.default.join(dataDir, "persons");
   try {
-    import_node_fs61.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs60.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }