@clawos-dev/clawd 0.2.581 → 0.2.583

package/dist/cli.cjs

@@ -6168,7 +6168,7 @@ function cloudEngineOk(tool) {
 function repoSlug(url) {
   return url.trim().replace(/^git@[^:]+:/, "").replace(/^https?:\/\/[^/]+\//, "").replace(/\.git$/, "");
 }
-var DeployFileSchema, SCAN_BASE_KINDS, ScanBaseKindSchema, DeployScanStatusSchema, DeployScanSchema, DeployReleasedSchema, DeployScanFileSchema, DeployRepoSchema, DeploySecretPresenceSchema, DEPLOY_STAGE_STATUSES, DeployStageStatusSchema, DEPLOY_STAGE_KEYS, DeployStageKeySchema, DeployJobSchema, DeployRunSchema, CLOUD_ENGINES, DeployStateSchema, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployGetArgsSchema, DeployScanArgsSchema, DeployReleaseArgsSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeployRerunJobArgsSchema, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
+var DeployFileSchema, SCAN_BASE_KINDS, ScanBaseKindSchema, DeployScanStatusSchema, DeployScanSchema, DeployReleasedSchema, DeployScanFileSchema, DeployRepoSchema, DeploySecretPresenceSchema, DEPLOY_STAGE_STATUSES, DeployStageStatusSchema, DEPLOY_STAGE_KEYS, DeployStageKeySchema, DeployJobSchema, DeployRunSchema, CLOUD_ENGINES, DeployUnpublishRunSchema, DeployStateSchema, DeployUnpublishResultSchema, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployGetArgsSchema, DeployScanArgsSchema, DeployReleaseArgsSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeployRerunJobArgsSchema, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
 var init_deploy_schemas = __esm({
   "../protocol/src/deploy-schemas.ts"() {
     "use strict";
@@ -6277,6 +6277,12 @@ var init_deploy_schemas = __esm({
       jobs: external_exports.array(DeployJobSchema)
     }).strict();
     CLOUD_ENGINES = ["codex", "pi"];
+    DeployUnpublishRunSchema = external_exports.object({
+      runId: external_exports.number(),
+      status: DeployRunSchema.shape.status,
+      conclusion: external_exports.enum(["success", "failure"]).optional(),
+      htmlUrl: external_exports.string().min(1)
+    }).strict();
     DeployStateSchema = external_exports.object({
       personaId: external_exports.string().min(1),
       /** 本机 GitHub 身份（机器级，githubAuth:* 的同一份；上云页顶上那张卡用）。老 daemon 不给（可选只为兼容），UI 缺席时按未知处理 */
@@ -6293,12 +6299,23 @@ var init_deploy_schemas = __esm({
        * **缺席是常态**：没推过、没授权 GitHub、GitHub 查不到、仓库还没有 run，都不该让整页打不开——同 `secrets` 的处理。
        */
       run: DeployRunSchema.optional(),
+      /**
+       * 现在在不在线上 = gateway 的正式登记表里有没有它（`/healthz`，跟 persona 列表里云卡片同一个来源）。
+       * **缺席 = 查不到**（没登录飞书 / 连不上云上服务），不是「不在」——页面据此不给下线按钮，也不撤「线上」标。
+       * 不看 `releases`：发布过不等于还在线上（下线过、或者被人用脚本撤了）
+       */
+      online: external_exports.boolean().optional(),
+      /** 最新那次下线流水线。没下线过 / 没仓库 / 没 GitHub 身份 / 查不到都缺席 */
+      unpublish: DeployUnpublishRunSchema.optional(),
       /**
        * `.clawd/deploy-scan.json` 读不出来（坏 JSON / 不合形状）时的人话。有它 `scans` 为空。
        * 页面据此给一条能走的路（重新扫描会重建这个文件），而不是白屏。
        */
       historyError: external_exports.string().optional()
     }).strict();
+    DeployUnpublishResultSchema = external_exports.object({
+      before: external_exports.number().nullable()
+    }).strict();
     DeployReleaseResultSchema = external_exports.object({
       sha: external_exports.string().min(1),
       actionsUrl: external_exports.string().min(1)
@@ -7674,7 +7691,7 @@ var init_dashboard_schemas = __esm({
   "../protocol/src/dashboard-schemas.ts"() {
     "use strict";
     init_zod();
-    DASHBOARD_PAGES = ["cloud-persona-metrics"];
+    DASHBOARD_PAGES = ["cloud-persona-metrics", "cloud-persona-conversations"];
     DashboardPageSchema = external_exports.enum(DASHBOARD_PAGES);
     DASHBOARD_LINK_TTL_SECONDS = 24 * 3600;
     DashboardOpenUrlArgs = external_exports.object({ page: DashboardPageSchema }).strict();
@@ -9139,6 +9156,10 @@ var init_methods = __esm({
         summary: "\u539F\u6837\u91CD\u8DD1\u6700\u65B0\u90A3\u6761\u6D41\u6C34\u7EBF\u91CC\u5931\u8D25\u7684\u67D0\u4E00\u6BB5\uFF08GitHub REST rerun job\uFF09\u3002**\u540C\u4E00\u4E2A commit\u3001\u540C\u4E00\u4EFD\u8F93\u5165**\uFF0C\u4E0D\u4EA7\u751F\u65B0\u63D0\u4EA4\u2014\u2014\u6539\u4E86 persona \u5185\u5BB9\u8981 deploy:scan \u518D deploy:release\u3002jobId \u5FC5\u987B\u5C5E\u4E8E\u6700\u65B0\u90A3\u6761 run\uFF1Bowner-only",
         args: DeployRerunJobArgsSchema
       },
+      "deploy:unpublish": {
+        summary: "\u4E0B\u7EBF\uFF1A\u89E6\u53D1 persona \u4ED3\u5E93\u91CC\u7684 clawd-unpublish.yml\uFF08workflow_dispatch\uFF09\uFF0C\u7531\u6D41\u6C34\u7EBF\u5728 gateway \u64A4\u6389\u6B63\u5F0F\u767B\u8BB0\u2014\u2014\u522B\u4EBA\u770B\u4E0D\u5230\u3001\u7528\u4E0D\u4E86\uFF1B\u4ED3\u5E93 / \u955C\u50CF / \u672C\u673A\u4E0A\u4E91\u8BB0\u5F55\u90FD\u4E0D\u52A8\uFF0C\u91CD\u65B0\u53D1\u5E03\u5C31\u56DE\u6765\u3002\u6700\u540E\u4E00\u6B21\u53D1\u5E03\u7684 commit \u91CC\u6CA1\u6709\u8FD9\u4EFD workflow\uFF08\u65E7\u6A21\u677F\uFF09\u65F6\u62D2\uFF0C\u8981\u5148\u91CD\u65B0\u53D1\u5E03\u4E00\u6B21\u3002\u56DE { before }\uFF1A\u89E6\u53D1\u4E4B\u524D\u73B0\u67E5\u7684\u6700\u65B0\u4E0B\u7EBF run id\uFF08\u6CA1\u4E0B\u7EBF\u8FC7 = null\uFF09\uFF0C\u9875\u9762\u62FF\u5B83\u8BA4\u65B0 run\uFF1Bowner-only\u3001human-only",
+        args: DeployPersonaArgsSchema
+      },
       // ---- githubAuth:*（本机 GitHub 身份，机器级；spec 2026-09-15-github-auth-unify-design §4.3）----
       "githubAuth:get": {
         summary: "\u672C\u673A\u7684 GitHub \u8EAB\u4EFD\uFF1Aauthorized\uFF08@login\uFF0C\u6765\u81EA git \u51ED\u636E\u5B58\u50A8 / \u672C\u673A\u51ED\u636E\u8868\uFF09/ missing / invalid\uFF08GitHub \u4E0D\u8BA4\uFF09/ pending\uFF08\u7B49 GitHub \u8DF3\u56DE\u4E2D\u5FC3\uFF09\u3002\u8BBE\u7F6E\u9875\u300C\u8D26\u53F7\u300D\u3001\u4E0A\u4E91\u9875\u9876\u4E0A\u90A3\u5F20\u5361\u3001PR \u6536\u4EF6\u7BB1\u90FD\u770B\u5B83\uFF1Bpending \u671F\u9875\u9762\u6BCF 2 \u79D2\u8F6E\u8BE2\uFF0Cdaemon \u987A\u624B\u5411\u4E2D\u5FC3\u9886 token\u3002\u65E0\u53C2\u6570",
@@ -15890,13 +15911,13 @@ var init_claude_history = __esm({
 function probeViaWhich() {
   try {
     const out = (0, import_node_child_process2.execFileSync)("which", ["claude"], { encoding: "utf8" }).trim();
-    if (out && import_node_fs17.default.existsSync(out)) return out;
+    if (out && import_node_fs20.default.existsSync(out)) return out;
   } catch {
   }
   return null;
 }
 async function probeClaude(env = process.env) {
-  if (env.CLAUDE_BIN && import_node_fs17.default.existsSync(env.CLAUDE_BIN)) {
+  if (env.CLAUDE_BIN && import_node_fs20.default.existsSync(env.CLAUDE_BIN)) {
     return { available: true, path: env.CLAUDE_BIN };
   }
   const w3 = probeViaWhich();
@@ -16362,13 +16383,13 @@ function encodeClaudeStdin(text) {
   };
   return JSON.stringify(frame) + "\n";
 }
-var import_node_child_process, import_node_child_process2, import_node_fs17, ATTACHMENT_SILENT_SUBTYPES2, unknownTypeHandler, ATTACHMENT_RE, IMAGE_EXT_MIME, CLAUDE_MODEL_IDS, CLAUDE_MODELS, _assertModelIdsAligned, CLAUDE_PERMISSION_MODES, CLAUDE_CAPABILITIES, ClaudeAdapter;
+var import_node_child_process, import_node_child_process2, import_node_fs20, ATTACHMENT_SILENT_SUBTYPES2, unknownTypeHandler, ATTACHMENT_RE, IMAGE_EXT_MIME, CLAUDE_MODEL_IDS, CLAUDE_MODELS, _assertModelIdsAligned, CLAUDE_PERMISSION_MODES, CLAUDE_CAPABILITIES, ClaudeAdapter;
 var init_claude = __esm({
   "src/tools/claude.ts"() {
     "use strict";
     import_node_child_process = require("child_process");
     import_node_child_process2 = require("child_process");
-    import_node_fs17 = __toESM(require("fs"), 1);
+    import_node_fs20 = __toESM(require("fs"), 1);
     init_protocol();
     init_claude_history();
     init_tool_result_extra();
@@ -51402,19 +51423,37 @@ function verifyDashboardLink(secret, page, eRaw, s2, now = Date.now) {
 }
 
 // src/dashboard/routes.ts
+var DashboardDataError = class extends Error {
+  constructor(status, code, message) {
+    super(message);
+    this.status = status;
+    this.code = code;
+    this.name = "DashboardDataError";
+  }
+  status;
+  code;
+};
+var SUBROUTES = {
+  "cloud-persona-metrics": ["personas", "data"],
+  "cloud-persona-conversations": ["personas", "threads", "thread"]
+};
+var UPSTREAM_DOWN = { personas: "UPSTREAM_UNREACHABLE", data: "GATEWAY_UNREACHABLE", threads: "CENTER_UNREACHABLE", thread: "CENTER_UNREACHABLE" };
 var NO_STORE = { "cache-control": "no-store" };
 function send(res, status, contentType, body) {
   res.writeHead(status, { "content-type": contentType, ...NO_STORE });
   res.end(body);
 }
 var sendJson = (res, status, body) => send(res, status, "application/json; charset=utf-8", JSON.stringify(body));
+var sendPassthrough = (res, r2) => send(res, r2.status, "application/json; charset=utf-8", r2.body);
 var PERSONA_RE = /^[a-z0-9-]+$/;
+var ID_RE = /^[A-Za-z0-9_-]{1,128}$/;
 function createDashboardRoutes(deps) {
   const now = deps.now ?? Date.now;
   return async (req, res, url) => {
-    const m3 = /^\/dashboard\/([^/]+)(?:\/(data|personas))?$/.exec(url.pathname);
+    const m3 = /^\/dashboard\/([^/]+)(?:\/([a-z]+))?$/.exec(url.pathname);
     const page = m3 && DASHBOARD_PAGES.includes(m3[1]) ? m3[1] : null;
-    if (!m3 || !page || req.method !== "GET") {
+    const sub = m3?.[2];
+    if (!m3 || !page || req.method !== "GET" || sub !== void 0 && !SUBROUTES[page].includes(sub)) {
       sendJson(res, 404, { code: "NOT_FOUND", message: `no route for ${req.method} ${url.pathname}` });
       return true;
     }
@@ -51424,8 +51463,7 @@ function createDashboardRoutes(deps) {
       return true;
     }
     const v3 = verifyDashboardLink(secret, page, url.searchParams.get("e"), url.searchParams.get("s"), now);
-    const sub = m3[2];
-    if (!sub) {
+    if (sub === void 0) {
       if (!v3.ok && v3.code !== "EXPIRED") {
         send(res, 403, "text/plain; charset=utf-8", "\u94FE\u63A5\u65E0\u6548\uFF1A\u56DE\u5230 clawd \u7684\u300C\u8BBE\u7F6E \u2192 Dashboard\u300D\u91CD\u65B0\u6253\u5F00");
         return true;
@@ -51442,290 +51480,1517 @@ function createDashboardRoutes(deps) {
       sendJson(res, 403, v3.code === "EXPIRED" ? { code: "LINK_EXPIRED", message: "\u94FE\u63A5\u5DF2\u8FC7\u671F" } : { code: "LINK_INVALID", message: "\u94FE\u63A5\u65E0\u6548" });
       return true;
     }
+    const q3 = url.searchParams;
     try {
       if (sub === "personas") {
-        sendJson(res, 200, { personas: await deps.gateway.personas() });
+        sendJson(res, 200, { personas: await deps.data.personas() });
         return true;
       }
-      const personaId2 = url.searchParams.get("persona") ?? "";
+      const personaId2 = q3.get("persona") ?? "";
       if (!PERSONA_RE.test(personaId2)) {
         sendJson(res, 400, { code: "INVALID_PARAM", message: "persona \u8981\u662F\u4E91 persona \u540D\uFF08[a-z0-9-]\uFF09" });
         return true;
       }
-      const r2 = await deps.gateway.metrics({ personaId: personaId2, window: url.searchParams.get("window"), entry: url.searchParams.get("entry") });
-      send(res, r2.status, "application/json; charset=utf-8", r2.body);
+      if (sub === "data") {
+        sendPassthrough(res, await deps.data.metrics({ personaId: personaId2, window: q3.get("window"), entry: q3.get("entry") }));
+        return true;
+      }
+      if (sub === "threads") {
+        const limit = q3.get("limit");
+        if (limit !== null && !/^\d{1,3}$/.test(limit)) {
+          sendJson(res, 400, { code: "INVALID_PARAM", message: "limit \u8981\u662F\u6B63\u6574\u6570" });
+          return true;
+        }
+        sendPassthrough(res, await deps.data.threads({ personaId: personaId2, before: q3.get("before"), limit: limit === null ? null : Number(limit) }));
+        return true;
+      }
+      const unionId = q3.get("unionId") ?? "";
+      const threadId = q3.get("threadId") ?? "";
+      if (!ID_RE.test(unionId) || !ID_RE.test(threadId)) {
+        sendJson(res, 400, { code: "INVALID_PARAM", message: "unionId / threadId \u53EA\u8BA4 [A-Za-z0-9_-]" });
+        return true;
+      }
+      sendJson(res, 200, await deps.data.thread({ personaId: personaId2, unionId, threadId }));
     } catch (e) {
-      sendJson(res, 502, { code: "GATEWAY_UNREACHABLE", message: e.message });
+      if (e instanceof DashboardDataError) {
+        sendJson(res, e.status, { code: e.code, message: e.message });
+        return true;
+      }
+      sendJson(res, 502, { code: UPSTREAM_DOWN[sub], message: e.message });
     }
     return true;
   };
 }
 
-// src/share-ui/load.ts
-var import_node_fs15 = __toESM(require("fs"), 1);
-var import_node_path14 = __toESM(require("path"), 1);
-var import_node_url4 = require("url");
-
-// src/share-ui/asset-loader.ts
-var import_node_fs14 = __toESM(require("fs"), 1);
-var import_node_path13 = __toESM(require("path"), 1);
-function createShareUiAssetLoader(opts) {
-  let indexHtml;
-  try {
-    indexHtml = import_node_fs14.default.readFileSync(opts.indexHtmlPath, "utf8");
-  } catch (err) {
-    throw new Error(`share-ui index.html not found at ${opts.indexHtmlPath}: ${err.message}`);
-  }
-  const assetsDir = import_node_path13.default.resolve(opts.assetsDir);
-  return {
-    renderIndexHtml() {
-      return indexHtml;
-    },
-    resolveAssetPath(rel) {
-      const resolved = import_node_path13.default.resolve(assetsDir, rel);
-      if (resolved !== assetsDir && !resolved.startsWith(assetsDir + import_node_path13.default.sep)) return null;
-      try {
-        if (import_node_fs14.default.statSync(resolved).isFile()) return resolved;
-      } catch {
-      }
-      return null;
-    }
-  };
+// src/tools/codex-rollout.ts
+function rec(v3) {
+  return v3 && typeof v3 === "object" && !Array.isArray(v3) ? v3 : void 0;
 }
-
-// src/share-ui/load.ts
-var import_meta4 = {};
-function bundleDirFromArgv(argv1) {
-  if (!argv1) return null;
-  let real = argv1;
+function str(v3) {
+  return typeof v3 === "string" ? v3 : void 0;
+}
+function num(v3) {
+  return typeof v3 === "number" && Number.isFinite(v3) ? v3 : void 0;
+}
+function parseLine(line) {
+  const t2 = line.trim();
+  if (!t2) return void 0;
   try {
-    real = import_node_fs15.default.realpathSync(argv1);
+    return rec(JSON.parse(t2));
   } catch {
+    return void 0;
   }
-  return import_node_path14.default.dirname(real);
 }
-function tryLoadShareUi(logger) {
-  const candidates = [];
-  try {
-    const here = import_node_path14.default.dirname((0, import_node_url4.fileURLToPath)(import_meta4.url));
-    candidates.push(here);
-    candidates.push(import_node_path14.default.resolve(here, ".."));
-    candidates.push(import_node_path14.default.resolve(here, "..", "..", "dist"));
-  } catch {
+function metaFrom(obj) {
+  if (obj.type !== "session_meta") return null;
+  const p3 = rec(obj.payload);
+  const threadId = str(p3?.id) ?? str(p3?.session_id);
+  if (!p3 || !threadId) return null;
+  const meta = { threadId };
+  const cwd = str(p3.cwd);
+  if (cwd) meta.cwd = cwd;
+  const createdAt = str(p3.timestamp) ?? str(obj.timestamp);
+  if (createdAt) meta.createdAt = createdAt;
+  const parent = str(p3.parent_thread_id);
+  if (parent) meta.parentThreadId = parent;
+  const cli = str(p3.cli_version);
+  if (cli) meta.cliVersion = cli;
+  return meta;
+}
+function parseCodexRolloutMeta(firstLine) {
+  const obj = parseLine(firstLine);
+  return obj ? metaFrom(obj) : null;
+}
+function firstUserMessageText(text) {
+  for (const line of text.split("\n")) {
+    const obj = parseLine(line);
+    if (!obj || obj.type !== "event_msg") continue;
+    const p3 = rec(obj.payload);
+    if (p3?.type === "user_message") return str(p3.message);
   }
-  const argvDir = bundleDirFromArgv(process.argv[1]);
-  if (argvDir) candidates.push(argvDir);
-  for (const root of candidates) {
-    const shareUiDir = import_node_path14.default.join(root, "share-ui");
-    const indexHtmlPath = import_node_path14.default.join(shareUiDir, "guest.html");
-    const assetsDir = import_node_path14.default.join(shareUiDir, "assets");
+  return void 0;
+}
+function outputText(output) {
+  if (typeof output === "string") return output;
+  if (Array.isArray(output)) {
+    return output.map((part) => typeof part === "string" ? part : str(rec(part)?.text) ?? "").join("");
+  }
+  return "";
+}
+function functionCallInput(name, rawArgs) {
+  let args = rawArgs;
+  if (typeof rawArgs === "string") {
     try {
-      if (import_node_fs15.default.statSync(indexHtmlPath).isFile() && import_node_fs15.default.statSync(assetsDir).isDirectory()) {
-        logger?.info("share-ui.assets-root.resolved", { root: shareUiDir });
-        return createShareUiAssetLoader({ indexHtmlPath, assetsDir });
-      }
+      args = JSON.parse(rawArgs);
     } catch {
+      args = { arguments: rawArgs };
     }
   }
-  logger?.warn("share-ui.assets-not-found", {
-    candidates,
-    hint: "run `pnpm -F @clawos/clawd-ui build && pnpm -F @clawos-dev/clawd build`"
-  });
-  return null;
+  const a2 = rec(args) ?? {};
+  if (name === "exec_command" || name === "shell" || name === "container.exec") {
+    const cmd = a2.cmd ?? a2.command;
+    const command = Array.isArray(cmd) ? cmd.map(String).join(" ") : str(cmd) ?? "";
+    return { tool: "commandExecution", input: { command } };
+  }
+  return { tool: name, input: args };
+}
+function parseCodexRollout(text) {
+  const out = { meta: null, messages: [], subagents: [], turns: [] };
+  const collabCallIds = /* @__PURE__ */ new Set();
+  for (const line of text.split("\n")) {
+    const obj = parseLine(line);
+    if (!obj) continue;
+    const ts = str(obj.timestamp);
+    const p3 = rec(obj.payload);
+    if (!p3) continue;
+    if (obj.type === "session_meta") {
+      if (!out.meta) out.meta = metaFrom(obj);
+      continue;
+    }
+    if (obj.type === "event_msg") {
+      switch (p3.type) {
+        case "user_message": {
+          const t2 = str(p3.message);
+          if (t2) out.messages.push({ kind: "user-text", text: t2, raw: obj, ...ts ? { ts } : {} });
+          break;
+        }
+        case "agent_message": {
+          const t2 = str(p3.message);
+          if (t2) out.messages.push({ kind: "assistant-text", text: t2, raw: obj, ...ts ? { ts } : {} });
+          break;
+        }
+        case "sub_agent_activity": {
+          if (p3.kind !== "started") break;
+          const toolUseId = str(p3.event_id);
+          const agentId = str(p3.agent_thread_id);
+          const agentPath = str(p3.agent_path);
+          if (!toolUseId || !agentId || !agentPath) break;
+          const segments = agentPath.split("/").filter(Boolean);
+          const description = segments[segments.length - 1] ?? agentId;
+          out.subagents.push({ toolUseId, agentId, agentPath, description });
+          out.messages.push({
+            kind: "tool_call",
+            tool: "Agent",
+            toolUseId,
+            input: { agentId, description, agentPath },
+            raw: obj,
+            ...ts ? { ts } : {}
+          });
+          break;
+        }
+        case "task_complete":
+        case "turn_aborted": {
+          const durationMs = num(p3.duration_ms);
+          const turnId = str(p3.turn_id);
+          const reason = str(p3.reason);
+          out.turns.push({
+            status: p3.type === "task_complete" ? "completed" : "interrupted",
+            ...turnId ? { turnId } : {},
+            ...durationMs !== void 0 ? { durationMs } : {},
+            ...reason ? { reason } : {}
+          });
+          out.messages.push({
+            kind: "turn-end",
+            raw: obj,
+            ...ts ? { ts } : {},
+            ...durationMs !== void 0 ? { durationMs } : {}
+          });
+          break;
+        }
+        default:
+          break;
+      }
+      continue;
+    }
+    if (obj.type === "response_item") {
+      switch (p3.type) {
+        case "function_call": {
+          const callId = str(p3.call_id);
+          const name = str(p3.name);
+          if (!callId || !name) break;
+          if (p3.namespace === "collaboration") {
+            collabCallIds.add(callId);
+            break;
+          }
+          const { tool, input } = functionCallInput(name, p3.arguments);
+          out.messages.push({ kind: "tool_call", tool, toolUseId: callId, input, raw: obj, ...ts ? { ts } : {} });
+          break;
+        }
+        case "custom_tool_call": {
+          const callId = str(p3.call_id);
+          const name = str(p3.name);
+          if (!callId || !name) break;
+          out.messages.push({
+            kind: "tool_call",
+            tool: name,
+            toolUseId: callId,
+            input: { input: str(p3.input) ?? "" },
+            raw: obj,
+            ...ts ? { ts } : {}
+          });
+          break;
+        }
+        case "function_call_output":
+        case "custom_tool_call_output": {
+          const callId = str(p3.call_id);
+          if (!callId || collabCallIds.has(callId)) break;
+          out.messages.push({
+            kind: "tool_result",
+            toolUseId: callId,
+            output: outputText(p3.output),
+            raw: obj,
+            ...ts ? { ts } : {}
+          });
+          break;
+        }
+        default:
+          break;
+      }
+      continue;
+    }
+  }
+  return out;
+}
+function subagentTerminalResult(started, child) {
+  const first = child.turns[0];
+  if (!first) return void 0;
+  if (first.status === "completed") return { kind: "tool_result", toolUseId: started.toolUseId };
+  return { kind: "tool_result", toolUseId: started.toolUseId, error: first.reason ?? "Codex subagent interrupted" };
 }
 
-// src/visitor/visitor-token.ts
-var import_node_crypto6 = __toESM(require("crypto"), 1);
-
-// ../protocol/src/index.ts
-init_runtime();
+// src/tools/codex-history.ts
+var import_node_fs15 = __toESM(require("fs"), 1);
+var import_node_path14 = __toESM(require("path"), 1);
 
-// src/visitor/visitor-token.ts
-var DOMAIN_PREFIX3 = "clawd-visitor-v1|";
-function hmac(secret, body) {
-  return import_node_crypto6.default.createHmac("sha256", secret).update(`${DOMAIN_PREFIX3}${body}`).digest("base64url");
+// src/tools/transcript-search.ts
+var import_node_fs14 = __toESM(require("fs"), 1);
+var import_node_path13 = __toESM(require("path"), 1);
+var SNIPPET_PAD = 60;
+var INJECTED_ENVELOPE_RE = /^<(system-reminder|command-name|command-message|command-args|local-command-stdout|local-command-stderr|task-notification|user-prompt-submit-hook|environment_context|user_instructions)\b/;
+var CODEX_WRAPPER_RE = /<(related-dir|environment_context|user_instructions)>[\s\S]*?<\/\1>/g;
+function asRecord(v3) {
+  return typeof v3 === "object" && v3 !== null ? v3 : null;
 }
-function signVisitorToken(secret, payload) {
-  const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
-  return `${body}.${hmac(secret, body)}`;
+function textOfBlocks(content, types) {
+  if (!Array.isArray(content)) return null;
+  const parts = [];
+  for (const block of content) {
+    const b3 = asRecord(block);
+    if (!b3 || typeof b3.type !== "string" || !types.includes(b3.type)) continue;
+    const text = b3.text;
+    if (typeof text === "string" && text !== "") parts.push(text);
+  }
+  return parts.length > 0 ? parts.join("\n") : null;
 }
-function verifyVisitorToken(secret, token, now) {
-  const dot = token.indexOf(".");
-  if (dot <= 0) return { ok: false, reason: "BAD_FORMAT" };
-  const body = token.slice(0, dot);
-  const sig = token.slice(dot + 1);
-  const expected = hmac(secret, body);
-  if (sig.length !== expected.length) return { ok: false, reason: "BAD_SIGNATURE" };
-  if (!import_node_crypto6.default.timingSafeEqual(Buffer.from(sig), Buffer.from(expected))) {
-    return { ok: false, reason: "BAD_SIGNATURE" };
+function lineToSearchableText(raw) {
+  const line = asRecord(raw);
+  if (!line) return null;
+  if (line.type === "response_item") {
+    const payload = asRecord(line.payload);
+    if (!payload || payload.type !== "message") return null;
+    const role = payload.role;
+    if (role !== "user" && role !== "assistant") return null;
+    const text2 = textOfBlocks(payload.content, ["input_text", "output_text"]);
+    if (text2 === null) return null;
+    if (role !== "user") return text2;
+    const stripped = text2.replace(CODEX_WRAPPER_RE, "").trim();
+    if (stripped === "") return null;
+    return INJECTED_ENVELOPE_RE.test(stripped) ? null : stripped;
   }
-  let payload;
+  if (line.type !== "user" && line.type !== "assistant") return null;
+  const message = asRecord(line.message);
+  if (!message) return null;
+  const content = message.content;
+  const text = typeof content === "string" && content !== "" ? content : textOfBlocks(content, ["text"]);
+  if (text === null) return null;
+  if (line.type === "user" && (line.isMeta === true || line.isSynthetic === true)) return null;
+  if (line.type === "user" && INJECTED_ENVELOPE_RE.test(text.trimStart())) return null;
+  return text;
+}
+function escapeRegExp(s2) {
+  return s2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function makeSnippet(text, at3, needleLength) {
+  const from = Math.max(0, at3 - SNIPPET_PAD);
+  const to = Math.min(text.length, at3 + needleLength + SNIPPET_PAD);
+  const body = text.slice(from, to).replace(/\s+/g, " ").trim();
+  return `${from > 0 ? "\u2026 " : ""}${body}${to < text.length ? " \u2026" : ""}`;
+}
+function searchTranscriptFile(file, query) {
+  let buf;
   try {
-    const parsed = VisitorTokenPayloadSchema.safeParse(
-      JSON.parse(Buffer.from(body, "base64url").toString("utf8"))
-    );
-    if (!parsed.success) return { ok: false, reason: "BAD_FORMAT" };
-    payload = parsed.data;
+    buf = import_node_fs14.default.readFileSync(file);
   } catch {
-    return { ok: false, reason: "BAD_FORMAT" };
+    return null;
   }
-  if (now >= payload.exp) return { ok: false, reason: "EXPIRED" };
-  return { ok: true, payload };
-}
-
-// src/visitor/visitor-login.ts
-function buildVisitorLogin(deps) {
-  return async function exchangeVisitorToken(args) {
-    let id;
+  const haystack = buf.toString("latin1");
+  const needle = Buffer.from(query, "utf8").toString("latin1");
+  const re2 = new RegExp(escapeRegExp(needle), "gi");
+  let m3;
+  while ((m3 = re2.exec(haystack)) !== null) {
+    const lineStart = haystack.lastIndexOf("\n", m3.index) + 1;
+    let lineEnd = haystack.indexOf("\n", m3.index);
+    if (lineEnd < 0) lineEnd = haystack.length;
+    re2.lastIndex = lineEnd + 1;
+    let parsed;
     try {
-      id = await deps.fetchUserInfo(args.ttcToken);
+      parsed = JSON.parse(Buffer.from(haystack.slice(lineStart, lineEnd), "latin1").toString("utf8"));
     } catch {
-      return { ok: false, reason: "BAD_TTC_TOKEN" };
+      continue;
     }
-    deps.visitorStore.upsert({
-      visitorId: id.ownerId,
-      displayName: id.displayName,
-      provider: id.provider,
-      ...id.avatarUrl ? { avatarUrl: id.avatarUrl } : {},
-      now: deps.now()
-    });
-    const iat = Math.floor(deps.now() / 1e3);
-    const visitorToken = signVisitorToken(deps.getSecret(), {
-      v: 1,
-      visitorId: id.ownerId,
-      displayName: id.displayName,
-      provider: id.provider,
-      iat,
-      exp: iat + deps.ttlSeconds
-    });
-    return { ok: true, visitorToken };
-  };
+    const text = lineToSearchableText(parsed);
+    if (text === null) continue;
+    const at3 = text.toLowerCase().indexOf(query.toLowerCase());
+    if (at3 < 0) continue;
+    return makeSnippet(text, at3, query.length);
+  }
+  return null;
 }
-
-// src/visitor/visitor-store.ts
-var import_node_fs16 = __toESM(require("fs"), 1);
-var import_node_path15 = __toESM(require("path"), 1);
-function createVisitorStore(opts) {
-  const file = import_node_path15.default.join(opts.dir, "visitors.json");
-  const read = () => {
+var ROLLOUT_NAME_RE = /-([0-9a-fA-F-]{36})\.jsonl$/;
+function createCodexRolloutLocator(roots) {
+  let index = null;
+  const walk2 = (dir, into) => {
+    let entries;
     try {
-      return JSON.parse(import_node_fs16.default.readFileSync(file, "utf8"));
+      entries = import_node_fs14.default.readdirSync(dir, { withFileTypes: true });
     } catch {
-      return [];
+      return;
     }
-  };
-  const write = (rows) => {
-    import_node_fs16.default.mkdirSync(opts.dir, { recursive: true });
-    import_node_fs16.default.writeFileSync(file, JSON.stringify(rows, null, 2));
-  };
-  return {
-    upsert(r2) {
-      const rows = read();
-      const ex = rows.find((x2) => x2.visitorId === r2.visitorId);
-      if (ex) {
-        ex.displayName = r2.displayName;
-        ex.provider = r2.provider;
-        ex.lastSeen = r2.now;
-        if (r2.avatarUrl) ex.avatarUrl = r2.avatarUrl;
-      } else {
-        rows.push({
-          visitorId: r2.visitorId,
-          displayName: r2.displayName,
-          provider: r2.provider,
-          ...r2.avatarUrl ? { avatarUrl: r2.avatarUrl } : {},
-          firstSeen: r2.now,
-          lastSeen: r2.now
-        });
+    for (const entry of entries) {
+      const full = import_node_path13.default.join(dir, entry.name);
+      if (entry.isDirectory()) {
+        walk2(full, into);
+        continue;
       }
-      write(rows);
-    },
-    list() {
-      return read();
+      const matched = ROLLOUT_NAME_RE.exec(entry.name);
+      if (matched) into.set(matched[1].toLowerCase(), full);
     }
   };
-}
-
-// src/index.ts
-init_claude();
-
-// src/tools/codex.ts
-var import_node_child_process7 = require("child_process");
-var import_node_fs21 = __toESM(require("fs"), 1);
-
-// src/tools/codex-session.ts
-var import_node_child_process4 = require("child_process");
-var import_node_path19 = __toESM(require("path"), 1);
-
-// src/tools/codex-app-server-client.ts
-var import_node_readline = require("readline");
-function stdioLineStream(proc) {
-  const rl = (0, import_node_readline.createInterface)({ input: proc.stdout, crlfDelay: Infinity });
-  const lineCbs = [];
-  const closeCbs = [];
-  rl.on("line", (l2) => {
-    for (const cb of lineCbs) cb(l2);
-  });
-  rl.on("close", () => {
-    for (const cb of closeCbs) cb();
-  });
-  return {
-    write: (line) => {
-      proc.stdin.write(line + "\n");
-    },
-    onLine: (cb) => {
-      lineCbs.push(cb);
-    },
-    onClose: (cb) => {
-      closeCbs.push(cb);
-    },
-    close: () => {
-      proc.stdin?.end();
+  return (toolSessionId) => {
+    if (index === null) {
+      index = /* @__PURE__ */ new Map();
+      for (const root of roots) walk2(root, index);
     }
+    return index.get(toolSessionId.toLowerCase()) ?? null;
   };
 }
-var CodexAppServerClient = class {
-  constructor(stream, opts = {}) {
-    this.stream = stream;
-    this.opts = opts;
-    stream.onLine((l2) => this.onLine(l2));
-    stream.onClose(() => {
-      for (const p3 of this.pending.values()) p3.reject(new Error("app-server connection closed"));
-      this.pending.clear();
-      this.opts.onClose?.();
-    });
+
+// src/tools/codex-history.ts
+var CODEX_LIST_SESSIONS_LIMIT = 100;
+var CODEX_LIST_SESSIONS_SCAN_CAP = 4e3;
+var PEEK_BYTES = 8 * 1024;
+var TITLE_BYTES = 256 * 1024;
+function readHead(file, bytes) {
+  let fd;
+  try {
+    fd = import_node_fs15.default.openSync(file, "r");
+  } catch {
+    return null;
   }
-  stream;
-  opts;
-  nextId = 1;
-  pending = /* @__PURE__ */ new Map();
-  request(method, params) {
-    const id = this.nextId++;
-    return new Promise((resolve9, reject) => {
-      this.pending.set(id, { resolve: resolve9, reject });
-      this.write({ jsonrpc: "2.0", method, id, params });
-    });
+  try {
+    const buf = Buffer.alloc(bytes);
+    const n2 = import_node_fs15.default.readSync(fd, buf, 0, bytes, 0);
+    return buf.subarray(0, n2).toString("utf8");
+  } catch {
+    return null;
+  } finally {
+    import_node_fs15.default.closeSync(fd);
   }
-  notify(method, params) {
-    this.write({ jsonrpc: "2.0", method, params });
+}
+function peekSessionCwd(head) {
+  if (!head.includes('"session_meta"')) return null;
+  const m3 = /"cwd":"((?:[^"\\]|\\.)*)"/.exec(head);
+  if (!m3) return null;
+  try {
+    return JSON.parse(`"${m3[1]}"`);
+  } catch {
+    return null;
   }
-  // server-request 的响应也必须带 jsonrpc:'2.0'，否则 codex app-server 忽略它 → 审批/问答永远卡住。
-  respond(id, result) {
-    this.write({ jsonrpc: "2.0", id, result });
+}
+function readFirstLine(file, max = 512 * 1024) {
+  let fd;
+  try {
+    fd = import_node_fs15.default.openSync(file, "r");
+  } catch {
+    return null;
   }
-  onLine(line) {
-    const t2 = line.trim();
-    if (!t2) return;
-    let m3;
-    try {
-      m3 = JSON.parse(t2);
-    } catch {
-      return;
-    }
-    if (!isRecord(m3)) return;
-    const hasId = typeof m3.id === "number", hasMethod = typeof m3.method === "string";
-    if (hasId && !hasMethod) {
-      const p3 = this.pending.get(m3.id);
-      if (!p3) return;
+  try {
+    const chunk = Buffer.alloc(64 * 1024);
+    const parts = [];
+    let total = 0;
+    while (total < max) {
+      const n2 = import_node_fs15.default.readSync(fd, chunk, 0, chunk.length, total);
+      if (n2 <= 0) break;
+      const nl = chunk.subarray(0, n2).indexOf(10);
+      if (nl >= 0) {
+        parts.push(Buffer.from(chunk.subarray(0, nl)));
+        return Buffer.concat(parts).toString("utf8");
+      }
+      parts.push(Buffer.from(chunk.subarray(0, n2)));
+      total += n2;
+    }
+    return total < max && parts.length > 0 ? Buffer.concat(parts).toString("utf8") : null;
+  } catch {
+    return null;
+  } finally {
+    import_node_fs15.default.closeSync(fd);
+  }
+}
+function readThreadNames(sharedHome) {
+  const names = /* @__PURE__ */ new Map();
+  if (!sharedHome) return names;
+  let raw;
+  try {
+    raw = import_node_fs15.default.readFileSync(import_node_path14.default.join(sharedHome, "session_index.jsonl"), "utf8");
+  } catch {
+    return names;
+  }
+  for (const line of raw.split("\n")) {
+    if (!line.trim()) continue;
+    try {
+      const o2 = JSON.parse(line);
+      if (typeof o2.id === "string" && typeof o2.thread_name === "string" && o2.thread_name) {
+        names.set(o2.id.toLowerCase(), o2.thread_name);
+      }
+    } catch {
+    }
+  }
+  return names;
+}
+function walkRollouts(dir, visit) {
+  let entries;
+  try {
+    entries = import_node_fs15.default.readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return true;
+  }
+  entries.sort((a2, b3) => a2.name < b3.name ? 1 : a2.name > b3.name ? -1 : 0);
+  for (const entry of entries) {
+    const full = import_node_path14.default.join(dir, entry.name);
+    if (entry.isDirectory()) {
+      if (!walkRollouts(full, visit)) return false;
+    } else if (ROLLOUT_NAME_RE.test(entry.name)) {
+      if (visit(full) === false) return false;
+    }
+  }
+  return true;
+}
+async function withSubagentResults(parent, parentThreadId, loadChild, logger) {
+  const messages = [];
+  const started = new Map(parent.subagents.map((s2) => [s2.toolUseId, s2]));
+  for (const m3 of parent.messages) {
+    messages.push(m3);
+    const sub = m3.kind === "tool_call" && m3.toolUseId ? started.get(m3.toolUseId) : void 0;
+    if (!sub) continue;
+    let text;
+    try {
+      text = await loadChild(sub.agentId);
+    } catch (error) {
+      logger?.warn("codex subagent rollout unreadable", { childThreadId: sub.agentId, message: error.message });
+      continue;
+    }
+    if (text === null) {
+      logger?.warn("codex subagent rollout not found", { parentThreadId, childThreadId: sub.agentId });
+      continue;
+    }
+    const child = parseCodexRollout(text);
+    if (child.meta?.parentThreadId !== parentThreadId) {
+      logger?.warn("codex subagent rollout does not belong to parent", {
+        parentThreadId,
+        childThreadId: sub.agentId,
+        actualParent: child.meta?.parentThreadId ?? null
+      });
+      continue;
+    }
+    const result = subagentTerminalResult(sub, child);
+    if (result) messages.push(result);
+  }
+  return messages;
+}
+function pageMessages(messages, args) {
+  const total = messages.length;
+  const limit = args.limit ?? total;
+  const offset = typeof args.offset === "number" ? Math.min(Math.max(0, args.offset), total) : Math.max(0, total - limit);
+  return { messages: messages.slice(offset, offset + limit), total, offset };
+}
+function subagentSummaries(parent) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const s2 of parent.subagents) {
+    if (seen.has(s2.agentId)) continue;
+    seen.add(s2.agentId);
+    out.push({ subagentId: s2.agentId, summary: s2.description, messageCount: 0 });
+  }
+  return out;
+}
+var CodexHistoryReader = class {
+  deps;
+  constructor(deps) {
+    this.deps = deps;
+  }
+  // 仍返回 []：projects/list 非 session-scoped、不知 tool，跨-tool 项目浏览器合并排后续。
+  // codex 旧会话仍能经 clawd 活跃列表(session:list, tool-agnostic) + read 打开。
+  async listProjects() {
+    return [];
+  }
+  async listSessions(args) {
+    const want = import_node_path14.default.resolve(args.projectPath);
+    const names = readThreadNames(this.deps.sharedHome);
+    const found = [];
+    let scanned = 0;
+    for (const root of this.deps.roots) {
+      const goOn = walkRollouts(root, (file) => {
+        if (++scanned > CODEX_LIST_SESSIONS_SCAN_CAP) return false;
+        const head = readHead(file, PEEK_BYTES);
+        const cwd = head === null ? null : peekSessionCwd(head);
+        if (!cwd || import_node_path14.default.resolve(cwd) !== want) return;
+        const first = readFirstLine(file);
+        const meta = first === null ? null : parseCodexRolloutMeta(first);
+        if (!meta) return;
+        let mtimeMs;
+        try {
+          mtimeMs = import_node_fs15.default.statSync(file).mtimeMs;
+        } catch {
+          return;
+        }
+        found.push({ file, threadId: meta.threadId, mtimeMs });
+      });
+      if (!goOn) break;
+    }
+    found.sort((a2, b3) => b3.mtimeMs - a2.mtimeMs);
+    return found.slice(0, CODEX_LIST_SESSIONS_LIMIT).map((f2) => {
+      let summary = names.get(f2.threadId.toLowerCase());
+      if (!summary) {
+        const head = readHead(f2.file, TITLE_BYTES);
+        summary = head === null ? void 0 : firstUserMessageText(head);
+      }
+      return {
+        toolSessionId: f2.threadId,
+        summary: summary || "(\u7A7A\u4F1A\u8BDD)",
+        messageCount: 0,
+        // 与此前 thread/list 一致：列表不数条数
+        updatedAt: new Date(f2.mtimeMs).toISOString()
+      };
+    });
+  }
+  async read(args) {
+    const locate = createCodexRolloutLocator(this.deps.roots);
+    const parent = this.parseThread(locate, args.toolSessionId);
+    const messages = await withSubagentResults(
+      parent,
+      args.toolSessionId,
+      async (agentId) => {
+        const file = locate(agentId);
+        return file ? import_node_fs15.default.readFileSync(file, "utf8") : null;
+      },
+      this.deps.logger
+    );
+    return pageMessages(messages, args);
+  }
+  async listSubagents(args) {
+    return subagentSummaries(this.parseThread(createCodexRolloutLocator(this.deps.roots), args.toolSessionId));
+  }
+  async readSubagent(args) {
+    const child = this.parseThread(createCodexRolloutLocator(this.deps.roots), args.subagentId);
+    if (child.meta?.threadId !== args.subagentId || child.meta.parentThreadId !== args.toolSessionId) {
+      throw new Error(
+        `Codex subagent thread ${args.subagentId} does not belong to parent thread ${args.toolSessionId}`
+      );
+    }
+    return { messages: child.messages };
+  }
+  computeRewindDiff() {
+    return { canRewind: false, files: [], totalInsertions: 0, totalDeletions: 0 };
+  }
+  listRewindableUserMessageIds() {
+    return [];
+  }
+  parseThread(locate, threadId) {
+    const file = locate(threadId);
+    if (!file) throw new Error(`Codex rollout not found for thread ${threadId}`);
+    return parseCodexRollout(import_node_fs15.default.readFileSync(file, "utf8"));
+  }
+};
+
+// src/tools/codex-cloud-history.ts
+function personaIdFromCloudCwd(cwd) {
+  const m3 = /\/p\/([^/?#]+)(?:[/?#]|$)/.exec(cwd);
+  if (!m3) return void 0;
+  try {
+    return decodeURIComponent(m3[1]);
+  } catch {
+    return void 0;
+  }
+}
+var CloudCodexHistoryReader = class {
+  constructor(client, logger) {
+    this.client = client;
+    this.logger = logger;
+  }
+  client;
+  logger;
+  async listProjects() {
+    return [];
+  }
+  /** 云 persona 没有「关联已有 thread」的动线：会话列表就是本机的会话记录 */
+  async listSessions() {
+    return [];
+  }
+  async read(args) {
+    const parent = await this.fetchThread(args.toolSessionId);
+    const messages = await withSubagentResults(
+      parent,
+      args.toolSessionId,
+      (agentId) => this.client.fetchRollout(agentId),
+      this.logger
+    );
+    return pageMessages(messages, args);
+  }
+  async listSubagents(args) {
+    return subagentSummaries(await this.fetchThread(args.toolSessionId));
+  }
+  async readSubagent(args) {
+    const child = await this.fetchThread(args.subagentId);
+    if (child.meta?.threadId !== args.subagentId || child.meta.parentThreadId !== args.toolSessionId) {
+      throw new Error(
+        `Codex subagent thread ${args.subagentId} does not belong to parent thread ${args.toolSessionId}`
+      );
+    }
+    return { messages: child.messages };
+  }
+  computeRewindDiff() {
+    return { canRewind: false, files: [], totalInsertions: 0, totalDeletions: 0 };
+  }
+  listRewindableUserMessageIds() {
+    return [];
+  }
+  async fetchThread(threadId) {
+    const text = await this.client.fetchRollout(threadId);
+    if (text === null) throw new Error(`Codex rollout not found for thread ${threadId}`);
+    return parseCodexRollout(text);
+  }
+};
+
+// src/tools/pi-history.ts
+var import_node_fs16 = __toESM(require("fs"), 1);
+var import_node_os8 = __toESM(require("os"), 1);
+var import_node_path15 = __toESM(require("path"), 1);
+
+// src/tools/pi-json.ts
+function rec2(v3) {
+  return typeof v3 === "object" && v3 !== null && !Array.isArray(v3) ? v3 : void 0;
+}
+function str2(v3) {
+  return typeof v3 === "string" ? v3 : void 0;
+}
+function num2(v3) {
+  return typeof v3 === "number" && Number.isFinite(v3) ? v3 : void 0;
+}
+function arr(v3) {
+  return Array.isArray(v3) ? v3 : [];
+}
+function contentText(v3, imagePlaceholder = "") {
+  if (typeof v3 === "string") return v3;
+  return arr(v3).map((b3) => {
+    const r2 = rec2(b3);
+    if (!r2) return "";
+    if (r2.type === "text") return str2(r2.text) ?? "";
+    if (r2.type === "image") return imagePlaceholder;
+    return "";
+  }).filter(Boolean).join("\n");
+}
+
+// src/tools/pi-history.ts
+var PI_LIST_SESSIONS_LIMIT = 100;
+var PI_LIST_SESSIONS_SCAN_CAP = 4e3;
+function piAgentDir(env = process.env) {
+  return env.PI_CODING_AGENT_DIR || import_node_path15.default.join(import_node_os8.default.homedir(), ".pi", "agent");
+}
+function piSessionsRoot(env = process.env) {
+  return import_node_path15.default.join(piAgentDir(env), "sessions");
+}
+function encodePiCwd(cwd) {
+  return `--${cwd.replace(/^[\\/]+/, "").replace(/[\\/:]/g, "-")}--`;
+}
+function piProjectSessionDir(sessionsRoot, cwd) {
+  return import_node_path15.default.join(sessionsRoot, encodePiCwd(cwd));
+}
+function findInDir(dir, toolSessionId) {
+  let names;
+  try {
+    names = import_node_fs16.default.readdirSync(dir);
+  } catch {
+    return null;
+  }
+  const suffix = `_${toolSessionId}.jsonl`;
+  const hit = names.filter((n2) => n2.endsWith(suffix)).sort().at(-1);
+  return hit ? import_node_path15.default.join(dir, hit) : null;
+}
+function locatePiSessionFile(sessionsRoot, cwd, toolSessionId) {
+  const direct = findInDir(piProjectSessionDir(sessionsRoot, cwd), toolSessionId);
+  if (direct) return direct;
+  let dirs;
+  try {
+    dirs = import_node_fs16.default.readdirSync(sessionsRoot, { withFileTypes: true }).filter((d2) => d2.isDirectory()).map((d2) => d2.name);
+  } catch {
+    return null;
+  }
+  for (const d2 of dirs) {
+    const hit = findInDir(import_node_path15.default.join(sessionsRoot, d2), toolSessionId);
+    if (hit) return hit;
+  }
+  return null;
+}
+function parseLine2(line) {
+  const t2 = line.trim();
+  if (!t2) return null;
+  try {
+    return rec2(JSON.parse(t2)) ?? null;
+  } catch {
+    return null;
+  }
+}
+function parsePiSession(text) {
+  let meta = null;
+  const entries = /* @__PURE__ */ new Map();
+  let last = null;
+  for (const line of text.split("\n")) {
+    const o2 = parseLine2(line);
+    if (!o2) continue;
+    if (o2.type === "session") {
+      if (!meta) {
+        const timestamp = str2(o2.timestamp);
+        meta = { id: str2(o2.id) ?? "", cwd: str2(o2.cwd) ?? "", ...timestamp ? { timestamp } : {} };
+      }
+      continue;
+    }
+    const id = str2(o2.id);
+    if (!id) continue;
+    entries.set(id, o2);
+    last = o2;
+  }
+  const chain = [];
+  const seen = /* @__PURE__ */ new Set();
+  let cur = last;
+  while (cur) {
+    const id = str2(cur.id);
+    if (seen.has(id)) break;
+    seen.add(id);
+    chain.push(cur);
+    const pid = str2(cur.parentId);
+    cur = pid ? entries.get(pid) ?? null : null;
+  }
+  chain.reverse();
+  const messages = [];
+  for (const e of chain) {
+    if (e.type !== "message") continue;
+    const m3 = rec2(e.message);
+    if (!m3) continue;
+    const ts = str2(e.timestamp);
+    const base = { raw: e, uuid: str2(e.id), ...ts ? { ts } : {} };
+    switch (m3.role) {
+      case "user": {
+        const t2 = contentText(m3.content, "[image]");
+        if (t2) messages.push({ kind: "user-text", text: t2, ...base });
+        break;
+      }
+      case "assistant": {
+        for (const b3 of arr(m3.content)) {
+          const block = rec2(b3);
+          if (!block) continue;
+          if (block.type === "text") {
+            const t2 = str2(block.text);
+            if (t2) messages.push({ kind: "assistant-text", text: t2, ...base });
+          } else if (block.type === "toolCall") {
+            const toolUseId = str2(block.id);
+            const tool = str2(block.name);
+            if (toolUseId && tool) messages.push({ kind: "tool_call", tool, toolUseId, input: block.arguments ?? {}, ...base });
+          }
+        }
+        if (str2(m3.stopReason) !== "toolUse") messages.push({ kind: "turn-end", ...base });
+        break;
+      }
+      case "toolResult": {
+        const toolUseId = str2(m3.toolCallId);
+        if (!toolUseId) break;
+        const t2 = contentText(m3.content);
+        const msg = { kind: "tool_result", toolUseId, output: t2, ...base };
+        if (m3.isError === true) msg.error = t2 || "tool failed";
+        messages.push(msg);
+        break;
+      }
+      default:
+        break;
+    }
+  }
+  return { meta, messages };
+}
+var PiHistoryReader = class {
+  constructor(deps) {
+    this.deps = deps;
+  }
+  deps;
+  // projects/list 非 session-scoped、不知 tool（同 codex 的取舍）
+  async listProjects() {
+    return [];
+  }
+  async listSessions(args) {
+    const want = import_node_path15.default.resolve(args.projectPath);
+    const dir = piProjectSessionDir(this.deps.sessionsRoot, want);
+    let names;
+    try {
+      names = import_node_fs16.default.readdirSync(dir).filter((n2) => n2.endsWith(".jsonl"));
+    } catch {
+      return [];
+    }
+    const found = [];
+    let scanned = 0;
+    for (const n2 of names) {
+      if (++scanned > PI_LIST_SESSIONS_SCAN_CAP) break;
+      const file = import_node_path15.default.join(dir, n2);
+      const head = parseLine2(readFirstLine(file) ?? "");
+      if (!head || head.type !== "session") continue;
+      const cwd = str2(head.cwd);
+      const id = str2(head.id);
+      if (!cwd || !id || import_node_path15.default.resolve(cwd) !== want) continue;
+      let mtimeMs;
+      try {
+        mtimeMs = import_node_fs16.default.statSync(file).mtimeMs;
+      } catch {
+        continue;
+      }
+      found.push({ file, id, mtimeMs });
+    }
+    found.sort((a2, b3) => b3.mtimeMs - a2.mtimeMs);
+    return found.slice(0, PI_LIST_SESSIONS_LIMIT).map((f2) => {
+      const parsed = parsePiSession(import_node_fs16.default.readFileSync(f2.file, "utf8"));
+      const firstUser = parsed.messages.find((m3) => m3.kind === "user-text");
+      return {
+        toolSessionId: f2.id,
+        summary: firstUser?.text?.slice(0, 80) || "(\u7A7A\u4F1A\u8BDD)",
+        messageCount: parsed.messages.length,
+        updatedAt: new Date(f2.mtimeMs).toISOString()
+      };
+    });
+  }
+  async read(args) {
+    const file = locatePiSessionFile(this.deps.sessionsRoot, args.cwd, args.toolSessionId);
+    if (!file) throw new Error(`pi session not found for ${args.toolSessionId}`);
+    return pageMessages(parsePiSession(import_node_fs16.default.readFileSync(file, "utf8")).messages, args);
+  }
+  async listSubagents(_args) {
+    return [];
+  }
+  async readSubagent(args) {
+    throw new Error(`pi has no subagent threads (${args.subagentId})`);
+  }
+  computeRewindDiff() {
+    return { canRewind: false, files: [], totalInsertions: 0, totalDeletions: 0 };
+  }
+  listRewindableUserMessageIds() {
+    return [];
+  }
+};
+
+// src/tools/pi-cloud-history.ts
+var CloudPiHistoryReader = class {
+  constructor(client, logger) {
+    this.client = client;
+    this.logger = logger;
+  }
+  client;
+  logger;
+  async listProjects() {
+    return [];
+  }
+  /** 云 persona 没有「关联已有会话」的动线：会话列表就是本机的会话记录 */
+  async listSessions() {
+    return [];
+  }
+  async read(args) {
+    const text = await this.client.fetchRollout(args.toolSessionId);
+    if (text === null) throw new Error(`pi session not found for ${args.toolSessionId}`);
+    const parsed = parsePiSession(text);
+    if (!parsed.meta) this.logger?.warn("cloud pi session has no header line", { toolSessionId: args.toolSessionId });
+    return pageMessages(parsed.messages, args);
+  }
+  async listSubagents(_args) {
+    return [];
+  }
+  async readSubagent(args) {
+    throw new Error(`pi has no subagent threads (${args.subagentId})`);
+  }
+  computeRewindDiff() {
+    return { canRewind: false, files: [], totalInsertions: 0, totalDeletions: 0 };
+  }
+  listRewindableUserMessageIds() {
+    return [];
+  }
+};
+
+// src/feishu-auth/central-client.ts
+var CentralClientError = class extends Error {
+  constructor(code, message, cause, status) {
+    super(message);
+    this.code = code;
+    this.cause = cause;
+    this.status = status;
+    this.name = "CentralClientError";
+  }
+  code;
+  cause;
+  status;
+};
+async function centralRequest(opts, path102, init) {
+  const f2 = opts.fetchImpl ?? globalThis.fetch;
+  const url = `${opts.api.replace(/\/+$/, "")}${path102}`;
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
+  let res;
+  try {
+    res = await f2(url, {
+      method: init.method,
+      headers: {
+        "content-type": "application/json",
+        ...init.bearer ? { authorization: `Bearer ${init.bearer}` } : {}
+      },
+      ...init.body !== void 0 ? { body: JSON.stringify(init.body) } : {},
+      signal: ctrl.signal
+    });
+  } catch (err) {
+    clearTimeout(timer);
+    throw new CentralClientError("NETWORK", `central server request failed: ${err.message}`, err);
+  }
+  clearTimeout(timer);
+  if (res.status === 401) {
+    throw new CentralClientError("UNAUTHORIZED", "login pass rejected by center");
+  }
+  if (!res.ok) {
+    let detail = "";
+    try {
+      const body = await res.json();
+      if (typeof body?.message === "string" && body.message) detail = `: ${body.message}`;
+    } catch {
+    }
+    throw new CentralClientError("API_ERROR", `central server HTTP ${res.status}${detail}`, void 0, res.status);
+  }
+  try {
+    return await res.json();
+  } catch (err) {
+    throw new CentralClientError("BAD_RESPONSE", "central server: invalid json response", err);
+  }
+}
+async function centralExchange(opts) {
+  const body = await centralRequest(opts, "/api/clawd-identity/exchange", {
+    method: "POST",
+    bearer: opts.loginPass,
+    body: { deviceId: opts.deviceId }
+  });
+  if (typeof body.token !== "string" || body.token.length === 0 || typeof body.ownerId !== "string" || typeof body.provider !== "string" || typeof body.displayName !== "string") {
+    throw new CentralClientError("BAD_RESPONSE", "exchange: missing token/ownerId/provider/displayName");
+  }
+  const deviceUrl = typeof body.deviceUrl === "string" && body.deviceUrl.length > 0 ? body.deviceUrl : null;
+  return { token: body.token, ownerId: body.ownerId, provider: body.provider, displayName: body.displayName, deviceUrl };
+}
+async function centralGetPublicKey(opts) {
+  const body = await centralRequest(opts, "/api/clawd-identity/public-key", {
+    method: "GET"
+  });
+  if (typeof body.publicKeyPem !== "string" || !body.publicKeyPem.includes("PUBLIC KEY")) {
+    throw new CentralClientError("BAD_RESPONSE", "public-key: missing or malformed publicKeyPem");
+  }
+  return { publicKeyPem: body.publicKeyPem };
+}
+async function centralUpsertDevice(opts) {
+  const body = await centralRequest(opts, "/api/clawd-identity/devices/self", {
+    method: "PUT",
+    bearer: opts.loginPass,
+    body: {
+      ...opts.url ? { url: opts.url } : {},
+      ...opts.name ? { name: opts.name } : {}
+    }
+  });
+  if (body.ok !== true) {
+    throw new CentralClientError("BAD_RESPONSE", "upsertDevice: server did not ack ok");
+  }
+  return { ok: true };
+}
+async function centralPrincipalStatus(opts) {
+  const query = `provider=${encodeURIComponent(opts.provider)}&ownerId=${encodeURIComponent(opts.ownerId)}`;
+  const body = await centralRequest(opts, `/api/clawd-identity/principal-status?${query}`, {
+    method: "GET"
+  });
+  if (typeof body.active !== "boolean") {
+    throw new CentralClientError("BAD_RESPONSE", "principal-status: missing active flag");
+  }
+  return { active: body.active };
+}
+async function centralGetApiKey(opts) {
+  const body = await centralRequest(opts, "/api/persona-cloud/api-key", {
+    method: "GET",
+    bearer: opts.loginPass
+  });
+  if (body.apiKey !== null && typeof body.apiKey !== "string") {
+    throw new CentralClientError("BAD_RESPONSE", "api-key: apiKey must be string or null");
+  }
+  return {
+    apiKey: body.apiKey,
+    createdAt: typeof body.createdAt === "string" ? body.createdAt : null,
+    // 中心没配就是 null —— 不当成错误，key 本身照样有效
+    gatewayUrl: typeof body.gatewayUrl === "string" ? body.gatewayUrl : null
+  };
+}
+async function centralGetThread(opts) {
+  const f2 = opts.fetchImpl ?? globalThis.fetch;
+  const url = `${opts.api.replace(/\/+$/, "")}/api/persona-cloud/threads/${encodeURIComponent(opts.threadId)}`;
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
+  let res;
+  try {
+    res = await f2(url, { method: "GET", headers: { authorization: `Bearer ${opts.loginPass}` }, signal: ctrl.signal });
+  } catch (err) {
+    clearTimeout(timer);
+    throw new CentralClientError("NETWORK", `central server request failed: ${err.message}`, err);
+  }
+  clearTimeout(timer);
+  if (res.status === 404) return null;
+  if (res.status === 401) throw new CentralClientError("UNAUTHORIZED", "login pass rejected by center");
+  if (!res.ok) {
+    let detail = "";
+    try {
+      const body = await res.json();
+      if (typeof body?.message === "string" && body.message) detail = `: ${body.message}`;
+    } catch {
+    }
+    throw new CentralClientError("API_ERROR", `central server HTTP ${res.status}${detail}`);
+  }
+  return await res.text();
+}
+async function centralIssueApiKey(opts) {
+  const body = await centralRequest(opts, "/api/persona-cloud/api-key", {
+    method: "POST",
+    bearer: opts.loginPass
+  });
+  if (typeof body.apiKey !== "string" || body.apiKey.length === 0) {
+    throw new CentralClientError("BAD_RESPONSE", "api-key: missing apiKey");
+  }
+  if (typeof body.createdAt !== "string" || body.createdAt.length === 0) {
+    throw new CentralClientError("BAD_RESPONSE", "api-key: missing createdAt");
+  }
+  return {
+    apiKey: body.apiKey,
+    createdAt: body.createdAt,
+    gatewayUrl: typeof body.gatewayUrl === "string" ? body.gatewayUrl : null
+  };
+}
+async function centralRevokeApiKey(opts) {
+  const body = await centralRequest(opts, "/api/persona-cloud/api-key", {
+    method: "DELETE",
+    bearer: opts.loginPass
+  });
+  if (typeof body.revoked !== "boolean") {
+    throw new CentralClientError("BAD_RESPONSE", "api-key: revoked must be boolean");
+  }
+  return { revoked: body.revoked };
+}
+async function centralListDevices(opts) {
+  const body = await centralRequest(opts, "/api/clawd-identity/devices", {
+    method: "GET",
+    bearer: opts.loginPass
+  });
+  if (!Array.isArray(body.devices)) {
+    throw new CentralClientError("BAD_RESPONSE", "devices: missing devices array");
+  }
+  const out = [];
+  for (const raw of body.devices) {
+    const d2 = raw;
+    if (typeof d2.deviceId !== "string" || typeof d2.name !== "string" || typeof d2.url !== "string") {
+      throw new CentralClientError("BAD_RESPONSE", "devices: malformed device entry");
+    }
+    out.push({ deviceId: d2.deviceId, name: d2.name, url: d2.url });
+  }
+  return out;
+}
+async function centralConnectorsMine(opts) {
+  const body = await centralRequest(opts, "/api/persona-cloud/connectors/mine", {
+    method: "POST",
+    bearer: opts.loginPass,
+    body: { personaId: opts.personaId, connectors: opts.connectors }
+  });
+  if (!Array.isArray(body.connectors)) throw new CentralClientError("BAD_RESPONSE", "connectors/mine: missing connectors array");
+  return { connectors: body.connectors };
+}
+async function centralConnectorFill(opts) {
+  const body = await centralRequest(opts, "/api/persona-cloud/connectors/fields", {
+    method: "PUT",
+    bearer: opts.loginPass,
+    body: { connector: opts.connector, values: opts.values }
+  });
+  if (body.ok !== true) throw new CentralClientError("BAD_RESPONSE", "connectors/fields: server did not ack ok");
+}
+async function centralGithubAuthOauthStart(opts) {
+  const body = await centralRequest(opts, "/api/persona-cloud/github/oauth/start", {
+    method: "POST",
+    bearer: opts.loginPass,
+    body: { ...opts.returnTo ? { returnTo: opts.returnTo } : {} }
+  });
+  if (typeof body.authUrl !== "string" || !body.authUrl) throw new CentralClientError("BAD_RESPONSE", "github/oauth/start: missing authUrl");
+  return { authUrl: body.authUrl };
+}
+async function centralGithubAuthToken(opts) {
+  const body = await centralRequest(opts, "/api/persona-cloud/github/oauth/token", {
+    method: "POST",
+    bearer: opts.loginPass,
+    body: {}
+  });
+  if (body.token === null || body.token === void 0) return void 0;
+  if (typeof body.token !== "string" || !body.token) throw new CentralClientError("BAD_RESPONSE", "github/oauth/token: malformed token");
+  return { token: body.token, login: typeof body.login === "string" ? body.login : "" };
+}
+async function centralClaimPublisher(opts) {
+  await centralRequest(opts, `/api/persona-cloud/personas/${encodeURIComponent(opts.personaId)}/publisher`, {
+    method: "PUT",
+    bearer: opts.loginPass
+  });
+}
+async function centralVisiblePersonas(opts) {
+  const body = await centralRequest(opts, "/api/persona-cloud/personas/visible", { method: "GET", bearer: opts.loginPass });
+  if (typeof body.all !== "boolean" || !Array.isArray(body.personaIds) || !body.personaIds.every((p3) => typeof p3 === "string")) {
+    throw new CentralClientError("BAD_RESPONSE", "personas/visible: expected { all: boolean, personaIds: string[] }");
+  }
+  return { all: body.all, personaIds: body.personaIds };
+}
+async function centralPersonaThreads(opts) {
+  const f2 = opts.fetchImpl ?? globalThis.fetch;
+  const q3 = new URLSearchParams();
+  if (opts.before) q3.set("before", opts.before);
+  if (opts.limit !== null) q3.set("limit", String(opts.limit));
+  const qs = String(q3) ? `?${q3}` : "";
+  const url = `${opts.api.replace(/\/+$/, "")}/api/persona-cloud/personas/${encodeURIComponent(opts.personaId)}/threads${qs}`;
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
+  try {
+    const res = await f2(url, { method: "GET", headers: { authorization: `Bearer ${opts.loginPass}` }, signal: ctrl.signal });
+    return { status: res.status, body: await res.text() };
+  } catch (err) {
+    throw new CentralClientError("NETWORK", `central server request failed: ${err.message}`, err);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function centralPersonaThread(opts) {
+  const f2 = opts.fetchImpl ?? globalThis.fetch;
+  const url = `${opts.api.replace(/\/+$/, "")}/api/persona-cloud/personas/${encodeURIComponent(opts.personaId)}/threads/${encodeURIComponent(opts.unionId)}/${encodeURIComponent(opts.threadId)}`;
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
+  let res;
+  try {
+    res = await f2(url, { method: "GET", headers: { authorization: `Bearer ${opts.loginPass}` }, signal: ctrl.signal });
+  } catch (err) {
+    clearTimeout(timer);
+    throw new CentralClientError("NETWORK", `central server request failed: ${err.message}`, err);
+  }
+  clearTimeout(timer);
+  if (res.status === 404) return null;
+  if (res.status === 401) throw new CentralClientError("UNAUTHORIZED", "login pass rejected by center");
+  if (!res.ok) {
+    let detail = "";
+    try {
+      const body = await res.json();
+      const m3 = body?.message;
+      const said = typeof m3 === "string" ? m3 : Array.isArray(m3) ? m3.map(String).join("\uFF1B") : "";
+      if (said) detail = `: ${said}`;
+    } catch {
+    }
+    throw new CentralClientError("API_ERROR", `central server HTTP ${res.status}${detail}`, void 0, res.status);
+  }
+  return await res.text();
+}
+
+// src/dashboard/conversations.ts
+function visiblePersonaIds(registered, visible) {
+  if (visible.all) return registered;
+  const mine = new Set(visible.personaIds);
+  return registered.filter((id) => mine.has(id));
+}
+function engineOfRollout(text) {
+  const nl = text.indexOf("\n");
+  try {
+    const first = JSON.parse(nl < 0 ? text : text.slice(0, nl));
+    return first?.type === "session" ? "pi" : "codex";
+  } catch {
+    return "codex";
+  }
+}
+async function readConversation(args) {
+  const { threadId, fetchThread, logger } = args;
+  const first = await fetchThread(threadId);
+  if (first === null) throw new DashboardDataError(404, "THREAD_NOT_FOUND", "\u8FD9\u6761\u5BF9\u8BDD\u7684\u8BB0\u5F55\u4E0D\u5728\u4E86");
+  const engine = engineOfRollout(first);
+  const source = { fetchRollout: (id) => id === threadId ? Promise.resolve(first) : fetchThread(id) };
+  const reader = engine === "pi" ? new CloudPiHistoryReader(source, logger) : new CloudCodexHistoryReader(source, logger);
+  const { messages } = await reader.read({ cwd: "", toolSessionId: threadId, limit: Number.MAX_SAFE_INTEGER });
+  return { engine, messages };
+}
+function dashboardErrorOf(err) {
+  if (err instanceof CentralClientError && err.status === 403) {
+    const said = err.message.replace(/^central server HTTP \d+:?\s*/, "");
+    return new DashboardDataError(403, "NOT_PERSONA_VIEWER", said || "\u6CA1\u6709\u8FD9\u4E2A persona \u7684\u67E5\u770B\u6743\u9650");
+  }
+  return err;
+}
+function createDashboardData(deps) {
+  const mustLoginPass = () => {
+    const lp = deps.loginPass();
+    if (!lp) throw new Error("\u8FD8\u6CA1\u767B\u5F55 clawd\uFF1A\u5148\u5728\u8BBE\u7F6E\u91CC\u767B\u5F55\u98DE\u4E66");
+    return lp;
+  };
+  return {
+    async personas() {
+      const lp = mustLoginPass();
+      const [registered, visible] = await Promise.all([deps.registeredPersonas(), deps.visiblePersonas(lp)]);
+      return visiblePersonaIds(registered, visible);
+    },
+    metrics: (q3) => deps.metrics(q3),
+    async threads(q3) {
+      return deps.threads(mustLoginPass(), q3);
+    },
+    async thread({ personaId: personaId2, unionId, threadId }) {
+      const lp = mustLoginPass();
+      try {
+        return await readConversation({ threadId, fetchThread: (id) => deps.thread(lp, { personaId: personaId2, unionId, threadId: id }), logger: deps.logger });
+      } catch (err) {
+        throw dashboardErrorOf(err);
+      }
+    }
+  };
+}
+
+// src/share-ui/load.ts
+var import_node_fs18 = __toESM(require("fs"), 1);
+var import_node_path17 = __toESM(require("path"), 1);
+var import_node_url4 = require("url");
+
+// src/share-ui/asset-loader.ts
+var import_node_fs17 = __toESM(require("fs"), 1);
+var import_node_path16 = __toESM(require("path"), 1);
+function createShareUiAssetLoader(opts) {
+  let indexHtml;
+  try {
+    indexHtml = import_node_fs17.default.readFileSync(opts.indexHtmlPath, "utf8");
+  } catch (err) {
+    throw new Error(`share-ui index.html not found at ${opts.indexHtmlPath}: ${err.message}`);
+  }
+  const assetsDir = import_node_path16.default.resolve(opts.assetsDir);
+  return {
+    renderIndexHtml() {
+      return indexHtml;
+    },
+    resolveAssetPath(rel) {
+      const resolved = import_node_path16.default.resolve(assetsDir, rel);
+      if (resolved !== assetsDir && !resolved.startsWith(assetsDir + import_node_path16.default.sep)) return null;
+      try {
+        if (import_node_fs17.default.statSync(resolved).isFile()) return resolved;
+      } catch {
+      }
+      return null;
+    }
+  };
+}
+
+// src/share-ui/load.ts
+var import_meta4 = {};
+function bundleDirFromArgv(argv1) {
+  if (!argv1) return null;
+  let real = argv1;
+  try {
+    real = import_node_fs18.default.realpathSync(argv1);
+  } catch {
+  }
+  return import_node_path17.default.dirname(real);
+}
+function tryLoadShareUi(logger) {
+  const candidates = [];
+  try {
+    const here = import_node_path17.default.dirname((0, import_node_url4.fileURLToPath)(import_meta4.url));
+    candidates.push(here);
+    candidates.push(import_node_path17.default.resolve(here, ".."));
+    candidates.push(import_node_path17.default.resolve(here, "..", "..", "dist"));
+  } catch {
+  }
+  const argvDir = bundleDirFromArgv(process.argv[1]);
+  if (argvDir) candidates.push(argvDir);
+  for (const root of candidates) {
+    const shareUiDir = import_node_path17.default.join(root, "share-ui");
+    const indexHtmlPath = import_node_path17.default.join(shareUiDir, "guest.html");
+    const assetsDir = import_node_path17.default.join(shareUiDir, "assets");
+    try {
+      if (import_node_fs18.default.statSync(indexHtmlPath).isFile() && import_node_fs18.default.statSync(assetsDir).isDirectory()) {
+        logger?.info("share-ui.assets-root.resolved", { root: shareUiDir });
+        return createShareUiAssetLoader({ indexHtmlPath, assetsDir });
+      }
+    } catch {
+    }
+  }
+  logger?.warn("share-ui.assets-not-found", {
+    candidates,
+    hint: "run `pnpm -F @clawos/clawd-ui build && pnpm -F @clawos-dev/clawd build`"
+  });
+  return null;
+}
+
+// src/visitor/visitor-token.ts
+var import_node_crypto6 = __toESM(require("crypto"), 1);
+
+// ../protocol/src/index.ts
+init_runtime();
+
+// src/visitor/visitor-token.ts
+var DOMAIN_PREFIX3 = "clawd-visitor-v1|";
+function hmac(secret, body) {
+  return import_node_crypto6.default.createHmac("sha256", secret).update(`${DOMAIN_PREFIX3}${body}`).digest("base64url");
+}
+function signVisitorToken(secret, payload) {
+  const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
+  return `${body}.${hmac(secret, body)}`;
+}
+function verifyVisitorToken(secret, token, now) {
+  const dot = token.indexOf(".");
+  if (dot <= 0) return { ok: false, reason: "BAD_FORMAT" };
+  const body = token.slice(0, dot);
+  const sig = token.slice(dot + 1);
+  const expected = hmac(secret, body);
+  if (sig.length !== expected.length) return { ok: false, reason: "BAD_SIGNATURE" };
+  if (!import_node_crypto6.default.timingSafeEqual(Buffer.from(sig), Buffer.from(expected))) {
+    return { ok: false, reason: "BAD_SIGNATURE" };
+  }
+  let payload;
+  try {
+    const parsed = VisitorTokenPayloadSchema.safeParse(
+      JSON.parse(Buffer.from(body, "base64url").toString("utf8"))
+    );
+    if (!parsed.success) return { ok: false, reason: "BAD_FORMAT" };
+    payload = parsed.data;
+  } catch {
+    return { ok: false, reason: "BAD_FORMAT" };
+  }
+  if (now >= payload.exp) return { ok: false, reason: "EXPIRED" };
+  return { ok: true, payload };
+}
+
+// src/visitor/visitor-login.ts
+function buildVisitorLogin(deps) {
+  return async function exchangeVisitorToken(args) {
+    let id;
+    try {
+      id = await deps.fetchUserInfo(args.ttcToken);
+    } catch {
+      return { ok: false, reason: "BAD_TTC_TOKEN" };
+    }
+    deps.visitorStore.upsert({
+      visitorId: id.ownerId,
+      displayName: id.displayName,
+      provider: id.provider,
+      ...id.avatarUrl ? { avatarUrl: id.avatarUrl } : {},
+      now: deps.now()
+    });
+    const iat = Math.floor(deps.now() / 1e3);
+    const visitorToken = signVisitorToken(deps.getSecret(), {
+      v: 1,
+      visitorId: id.ownerId,
+      displayName: id.displayName,
+      provider: id.provider,
+      iat,
+      exp: iat + deps.ttlSeconds
+    });
+    return { ok: true, visitorToken };
+  };
+}
+
+// src/visitor/visitor-store.ts
+var import_node_fs19 = __toESM(require("fs"), 1);
+var import_node_path18 = __toESM(require("path"), 1);
+function createVisitorStore(opts) {
+  const file = import_node_path18.default.join(opts.dir, "visitors.json");
+  const read = () => {
+    try {
+      return JSON.parse(import_node_fs19.default.readFileSync(file, "utf8"));
+    } catch {
+      return [];
+    }
+  };
+  const write = (rows) => {
+    import_node_fs19.default.mkdirSync(opts.dir, { recursive: true });
+    import_node_fs19.default.writeFileSync(file, JSON.stringify(rows, null, 2));
+  };
+  return {
+    upsert(r2) {
+      const rows = read();
+      const ex = rows.find((x2) => x2.visitorId === r2.visitorId);
+      if (ex) {
+        ex.displayName = r2.displayName;
+        ex.provider = r2.provider;
+        ex.lastSeen = r2.now;
+        if (r2.avatarUrl) ex.avatarUrl = r2.avatarUrl;
+      } else {
+        rows.push({
+          visitorId: r2.visitorId,
+          displayName: r2.displayName,
+          provider: r2.provider,
+          ...r2.avatarUrl ? { avatarUrl: r2.avatarUrl } : {},
+          firstSeen: r2.now,
+          lastSeen: r2.now
+        });
+      }
+      write(rows);
+    },
+    list() {
+      return read();
+    }
+  };
+}
+
+// src/index.ts
+init_claude();
+
+// src/tools/codex.ts
+var import_node_child_process7 = require("child_process");
+var import_node_fs24 = __toESM(require("fs"), 1);
+
+// src/tools/codex-session.ts
+var import_node_child_process4 = require("child_process");
+var import_node_path22 = __toESM(require("path"), 1);
+
+// src/tools/codex-app-server-client.ts
+var import_node_readline = require("readline");
+function stdioLineStream(proc) {
+  const rl = (0, import_node_readline.createInterface)({ input: proc.stdout, crlfDelay: Infinity });
+  const lineCbs = [];
+  const closeCbs = [];
+  rl.on("line", (l2) => {
+    for (const cb of lineCbs) cb(l2);
+  });
+  rl.on("close", () => {
+    for (const cb of closeCbs) cb();
+  });
+  return {
+    write: (line) => {
+      proc.stdin.write(line + "\n");
+    },
+    onLine: (cb) => {
+      lineCbs.push(cb);
+    },
+    onClose: (cb) => {
+      closeCbs.push(cb);
+    },
+    close: () => {
+      proc.stdin?.end();
+    }
+  };
+}
+var CodexAppServerClient = class {
+  constructor(stream, opts = {}) {
+    this.stream = stream;
+    this.opts = opts;
+    stream.onLine((l2) => this.onLine(l2));
+    stream.onClose(() => {
+      for (const p3 of this.pending.values()) p3.reject(new Error("app-server connection closed"));
+      this.pending.clear();
+      this.opts.onClose?.();
+    });
+  }
+  stream;
+  opts;
+  nextId = 1;
+  pending = /* @__PURE__ */ new Map();
+  request(method, params) {
+    const id = this.nextId++;
+    return new Promise((resolve9, reject) => {
+      this.pending.set(id, { resolve: resolve9, reject });
+      this.write({ jsonrpc: "2.0", method, id, params });
+    });
+  }
+  notify(method, params) {
+    this.write({ jsonrpc: "2.0", method, params });
+  }
+  // server-request 的响应也必须带 jsonrpc:'2.0'，否则 codex app-server 忽略它 → 审批/问答永远卡住。
+  respond(id, result) {
+    this.write({ jsonrpc: "2.0", id, result });
+  }
+  onLine(line) {
+    const t2 = line.trim();
+    if (!t2) return;
+    let m3;
+    try {
+      m3 = JSON.parse(t2);
+    } catch {
+      return;
+    }
+    if (!isRecord(m3)) return;
+    const hasId = typeof m3.id === "number", hasMethod = typeof m3.method === "string";
+    if (hasId && !hasMethod) {
+      const p3 = this.pending.get(m3.id);
+      if (!p3) return;
       this.pending.delete(m3.id);
       if (m3.error) {
         const e = isRecord(m3.error) ? m3.error : {};
@@ -51749,49 +53014,49 @@ function isRecord(v3) {
 
 // src/tools/codex-app-server-events.ts
 function translateNotification(method, params) {
-  const p3 = rec(params);
+  const p3 = rec3(params);
   switch (method) {
     case "thread/started": {
-      const id = str(rec(p3?.thread)?.id);
+      const id = str3(rec3(p3?.thread)?.id);
       return id ? [{ kind: "session_init", toolSessionId: id }] : [];
     }
     case "item/agentMessage/delta": {
-      const text = str(p3?.delta);
-      const id = str(p3?.itemId);
+      const text = str3(p3?.delta);
+      const id = str3(p3?.itemId);
       return text ? [{ kind: "text", text, ...id ? { partialId: id } : {} }] : [];
     }
     case "item/reasoning/textDelta":
     case "item/reasoning/summaryTextDelta": {
-      const text = str(p3?.delta);
-      const id = str(p3?.itemId);
+      const text = str3(p3?.delta);
+      const id = str3(p3?.itemId);
       return text ? [{ kind: "thinking", text, ...id ? { partialId: id } : {} }] : [];
     }
     case "item/commandExecution/outputDelta":
       return [];
     // 命令输出增量 v1 不逐字（完成时整段给）
     case "item/started":
-      return itemStarted(rec(p3?.item));
+      return itemStarted(rec3(p3?.item));
     case "item/completed":
-      return itemCompleted(rec(p3?.item));
+      return itemCompleted(rec3(p3?.item));
     case "thread/tokenUsage/updated":
-      return tokenUsage(rec(rec(p3?.tokenUsage)));
+      return tokenUsage(rec3(rec3(p3?.tokenUsage)));
     // codex 自动生成的 thread 标题（实测 0.145：payload = { threadId, threadName }）
     case "thread/name/updated": {
-      const name = str(p3?.threadName);
+      const name = str3(p3?.threadName);
       return name ? [{ kind: "meta_update", patch: { aiLabel: name } }] : [];
     }
     case "turn/completed":
-      return turnCompleted(rec(p3?.turn));
+      return turnCompleted(rec3(p3?.turn));
     default:
       return [];
   }
 }
 function itemStarted(item) {
   if (!item) return [];
-  const id = str(item.id);
+  const id = str3(item.id);
   if (!id) return [];
   if (item.type === "commandExecution") {
-    return [{ kind: "tool_call", toolUseId: id, tool: "commandExecution", toolKind: "codex", input: { command: str(item.command) ?? "" } }];
+    return [{ kind: "tool_call", toolUseId: id, tool: "commandExecution", toolKind: "codex", input: { command: str3(item.command) ?? "" } }];
   }
   if (item.type === "fileChange") {
     return [{ kind: "tool_call", toolUseId: id, tool: "fileChange", toolKind: "codex", input: { changes: Array.isArray(item.changes) ? item.changes : [] } }];
@@ -51805,28 +53070,28 @@ function itemCompleted(item) {
       return [];
     // 用户输入回显, clawd 自己 synthesize user_text
     case "agentMessage": {
-      const text = str(item.text);
+      const text = str3(item.text);
       return text ? [{ kind: "text", text }] : [];
     }
     case "reasoning": {
-      const text = str(item.text);
+      const text = str3(item.text);
       return text ? [{ kind: "thinking", text }] : [];
     }
     case "commandExecution": {
-      const id = str(item.id);
+      const id = str3(item.id);
       if (!id) return [];
-      const exit = num(item.exitCode);
-      const ev = { kind: "tool_result", toolUseId: id, output: str(item.aggregatedOutput ?? item.output) ?? "" };
+      const exit = num3(item.exitCode);
+      const ev = { kind: "tool_result", toolUseId: id, output: str3(item.aggregatedOutput ?? item.output) ?? "" };
       if (exit !== void 0 && exit !== 0) ev.error = `exit ${exit}`;
       return [ev];
     }
     case "fileChange": {
-      const id = str(item.id);
+      const id = str3(item.id);
       if (!id) return [];
       const changes = Array.isArray(item.changes) ? item.changes : [];
-      const output = changes.map((c2) => str(c2.diff) ?? "").filter(Boolean).join("\n");
+      const output = changes.map((c2) => str3(c2.diff) ?? "").filter(Boolean).join("\n");
       const ev = { kind: "tool_result", toolUseId: id, output };
-      const status = str(item.status);
+      const status = str3(item.status);
       if (status === "failed" || status === "declined") ev.error = `patch ${status}`;
       return [ev];
     }
@@ -51836,26 +53101,26 @@ function itemCompleted(item) {
 }
 function tokenUsage(usage) {
   if (!usage) return [];
-  const last = rec(usage.last);
+  const last = rec3(usage.last);
   if (!last) return [];
-  const i2 = num(last.inputTokens), o2 = num(last.outputTokens);
+  const i2 = num3(last.inputTokens), o2 = num3(last.outputTokens);
   const patch = {};
   if (i2 !== void 0 && o2 !== void 0) patch.contextUsage = { inputTokens: i2, outputTokens: o2 };
-  const w3 = num(usage.modelContextWindow);
+  const w3 = num3(usage.modelContextWindow);
   if (w3 !== void 0) patch.contextWindowSize = w3;
   return Object.keys(patch).length ? [{ kind: "meta_update", patch }] : [];
 }
 function turnCompleted(turn) {
-  if (turn?.status === "failed") return [{ kind: "error", message: str(rec(turn.error)?.message) ?? "codex turn failed" }, { kind: "turn_end" }];
+  if (turn?.status === "failed") return [{ kind: "error", message: str3(rec3(turn.error)?.message) ?? "codex turn failed" }, { kind: "turn_end" }];
   return [{ kind: "turn_end" }];
 }
-function rec(v3) {
+function rec3(v3) {
   return typeof v3 === "object" && v3 !== null ? v3 : void 0;
 }
-function str(v3) {
+function str3(v3) {
   return typeof v3 === "string" ? v3 : void 0;
 }
-function num(v3) {
+function num3(v3) {
   return typeof v3 === "number" ? v3 : void 0;
 }
 
@@ -52319,17 +53584,17 @@ function stringValue2(value) {
 }
 
 // src/tools/mcp-server-defs.ts
-var import_node_fs18 = __toESM(require("fs"), 1);
-var import_node_path16 = __toESM(require("path"), 1);
+var import_node_fs21 = __toESM(require("fs"), 1);
+var import_node_path19 = __toESM(require("path"), 1);
 var HTTP_TYPES = /* @__PURE__ */ new Set(["http", "sse", "streamable_http", "streamable-http"]);
 function loadMcpServerDefs(args) {
   const out = [];
   const seen = /* @__PURE__ */ new Set();
-  const sources = [...args.mcpConfigPaths, import_node_path16.default.join(args.cwd, ".mcp.json")];
+  const sources = [...args.mcpConfigPaths, import_node_path19.default.join(args.cwd, ".mcp.json")];
   for (const file of sources) {
     let parsed;
     try {
-      parsed = JSON.parse(import_node_fs18.default.readFileSync(file, "utf8"));
+      parsed = JSON.parse(import_node_fs21.default.readFileSync(file, "utf8"));
     } catch (e) {
       const code = e.code;
       if (code !== "ENOENT") {
@@ -52393,18 +53658,18 @@ function loadMcpServerDefs(args) {
 }
 
 // src/tools/codex-agents-config.ts
-var import_node_fs19 = __toESM(require("fs"), 1);
-var import_node_path17 = __toESM(require("path"), 1);
+var import_node_fs22 = __toESM(require("fs"), 1);
+var import_node_path20 = __toESM(require("path"), 1);
 var AGENTS_SECTION = /^\[agents\][^\n]*\n([\s\S]*?)(?=^\[|$(?![\s\S]))/m;
 function readKey(section, key) {
   const m3 = new RegExp(`^[ \\t]*${key}[ \\t]*=[ \\t]*(["'])(.*?)\\1`, "m").exec(section);
   return m3?.[2].trim() || void 0;
 }
 function loadCodexAgentsConfig(args) {
-  const file = import_node_path17.default.join(args.cwd, ".codex", "config.toml");
+  const file = import_node_path20.default.join(args.cwd, ".codex", "config.toml");
   let text;
   try {
-    text = import_node_fs19.default.readFileSync(file, "utf8");
+    text = import_node_fs22.default.readFileSync(file, "utf8");
   } catch (e) {
     const code = e.code;
     if (code !== "ENOENT") {
@@ -52460,7 +53725,7 @@ function warmCodexFeatureCache() {
 }
 
 // src/attachment/mime.ts
-var import_node_path18 = __toESM(require("path"), 1);
+var import_node_path21 = __toESM(require("path"), 1);
 var TEXT_PLAIN = "text/plain; charset=utf-8";
 var EXT_TO_NATIVE_MIME = {
   // 图片
@@ -52567,7 +53832,7 @@ var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
   ".mk"
 ]);
 function lookupMime(filePathOrName) {
-  const ext = import_node_path18.default.extname(filePathOrName).toLowerCase();
+  const ext = import_node_path21.default.extname(filePathOrName).toLowerCase();
   if (EXT_TO_NATIVE_MIME[ext]) return EXT_TO_NATIVE_MIME[ext];
   if (TEXT_EXTENSIONS.has(ext)) return TEXT_PLAIN;
   return "application/octet-stream";
@@ -52616,7 +53881,7 @@ function createCodexSession(ctx, sink, deps = {}) {
     threadParams: threadStartParams(ctx),
     // persona 惯例装在 <cwd>/.claude/skills/，经 extraRoots 注入 discovery
     // （skills:list RPC 侧 codex-skills.ts 同款注入，两处保持一致）。
-    skillsExtraRoots: [import_node_path19.default.join(ctx.cwd, ".claude", "skills")],
+    skillsExtraRoots: [import_node_path22.default.join(ctx.cwd, ".claude", "skills")],
     // 附件图片：验签认出本机 absPath → localImage，codex 自己读文件（TUI 拖图 / SDK local_image 同一条路）。
     // 0.145 起 http(s) URL 在 turn/start 入口被拒，不能再按 url 传（codex-app-server-params.ts 头注释）。
     // 与云上 cloudImageInput 同一道 mime 门：非图片（签过的 .md 之类）留文本，别让 codex 读到一半才炸。
@@ -52770,18 +54035,18 @@ function mergeProviderModels(native, provider) {
 
 // src/tools/codex-provider-models.ts
 var import_node_child_process6 = require("child_process");
-var import_node_fs20 = __toESM(require("fs"), 1);
-var import_node_os8 = __toESM(require("os"), 1);
-var import_node_path20 = __toESM(require("path"), 1);
+var import_node_fs23 = __toESM(require("fs"), 1);
+var import_node_os9 = __toESM(require("os"), 1);
+var import_node_path23 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var PROVIDER_FETCH_TIMEOUT_MS = 3e3;
-function asRecord(v3) {
+function asRecord2(v3) {
   return v3 && typeof v3 === "object" && !Array.isArray(v3) ? v3 : null;
 }
 function readAuthKey(codexHome) {
   try {
-    const raw = JSON.parse(import_node_fs20.default.readFileSync(import_node_path20.default.join(codexHome, "auth.json"), "utf8"));
-    const key = asRecord(raw)?.OPENAI_API_KEY;
+    const raw = JSON.parse(import_node_fs23.default.readFileSync(import_node_path23.default.join(codexHome, "auth.json"), "utf8"));
+    const key = asRecord2(raw)?.OPENAI_API_KEY;
     return typeof key === "string" && key ? key : void 0;
   } catch {
     return void 0;
@@ -52808,19 +54073,19 @@ async function runAuthCommand(name, auth, deps) {
   return void 0;
 }
 async function resolveProviderEndpoint(rawConfig, deps = {}) {
-  const config = asRecord(asRecord(rawConfig)?.config);
+  const config = asRecord2(asRecord2(rawConfig)?.config);
   if (!config) return null;
   const name = config.model_provider;
   if (typeof name !== "string" || !name) return null;
-  const entry = asRecord(asRecord(config.model_providers)?.[name]);
+  const entry = asRecord2(asRecord2(config.model_providers)?.[name]);
   if (!entry) return null;
   const baseUrl = entry.base_url;
   if (typeof baseUrl !== "string" || !baseUrl) return null;
   const env = deps.env ?? process.env;
-  const codexHome = deps.codexHome ?? env.CODEX_HOME ?? import_node_path20.default.join(import_node_os8.default.homedir(), ".codex");
+  const codexHome = deps.codexHome ?? env.CODEX_HOME ?? import_node_path23.default.join(import_node_os9.default.homedir(), ".codex");
   const envKey = typeof entry.env_key === "string" && entry.env_key ? entry.env_key : null;
   const inlineToken = typeof entry.experimental_bearer_token === "string" && entry.experimental_bearer_token ? entry.experimental_bearer_token : void 0;
-  const auth = asRecord(entry.auth);
+  const auth = asRecord2(entry.auth);
   let token;
   if (envKey) token = env[envKey];
   else if (inlineToken) token = inlineToken;
@@ -52848,11 +54113,11 @@ async function fetchProviderModels(endpoint, deps = {}) {
   try {
     const res = await fetchImpl(url, { headers: endpoint.headers, signal: controller.signal });
     if (!res.ok) throw new Error(`provider model list failed: HTTP ${res.status} from ${url}`);
-    const data = asRecord(await res.json())?.data;
+    const data = asRecord2(await res.json())?.data;
     if (!Array.isArray(data)) throw new Error(`provider model list: \`data\` is not an array (${url})`);
     const out = [];
     for (const item of data) {
-      const e = asRecord(item);
+      const e = asRecord2(item);
       if (!e || typeof e.id !== "string" || !e.id) continue;
       out.push({ id: e.id, ...typeof e.owned_by === "string" ? { ownedBy: e.owned_by } : {} });
     }
@@ -52932,10 +54197,10 @@ function sanitizeCodexModel(model) {
   return model;
 }
 async function probeCodex(env = process.env) {
-  if (env.CODEX_BIN && import_node_fs21.default.existsSync(env.CODEX_BIN)) return { available: true, path: env.CODEX_BIN };
+  if (env.CODEX_BIN && import_node_fs24.default.existsSync(env.CODEX_BIN)) return { available: true, path: env.CODEX_BIN };
   try {
     const out = (0, import_node_child_process7.execFileSync)("which", ["codex"], { encoding: "utf8" }).trim();
-    if (out && import_node_fs21.default.existsSync(out)) return { available: true, path: out };
+    if (out && import_node_fs24.default.existsSync(out)) return { available: true, path: out };
   } catch {
   }
   return { available: false };
@@ -53055,9 +54320,9 @@ var CodexAdapter = class {
 
 // src/tools/claude-tui.ts
 var import_node_crypto7 = require("crypto");
-var import_node_fs22 = __toESM(require("fs"), 1);
-var import_node_os9 = __toESM(require("os"), 1);
-var import_node_path21 = __toESM(require("path"), 1);
+var import_node_fs25 = __toESM(require("fs"), 1);
+var import_node_os10 = __toESM(require("os"), 1);
+var import_node_path24 = __toESM(require("path"), 1);
 var import_headless = __toESM(require_xterm_headless(), 1);
 
 // ../node_modules/.pnpm/@xterm+addon-serialize@0.14.0/node_modules/@xterm/addon-serialize/lib/addon-serialize.mjs
@@ -54282,10 +55547,10 @@ function buildTuiSpawnArgs(ctx, isResume = false) {
 }
 function jsonlExistsForCtx(ctx) {
   if (!ctx.toolSessionId) return false;
-  const home = import_node_os9.default.homedir();
-  const file = import_node_path21.default.join(home, ".claude", "projects", cwdToHashDir(ctx.cwd), `${ctx.toolSessionId}.jsonl`);
+  const home = import_node_os10.default.homedir();
+  const file = import_node_path24.default.join(home, ".claude", "projects", cwdToHashDir(ctx.cwd), `${ctx.toolSessionId}.jsonl`);
   try {
-    return import_node_fs22.default.statSync(file).isFile();
+    return import_node_fs25.default.statSync(file).isFile();
   } catch {
     return false;
   }
@@ -54370,7 +55635,7 @@ var PersonaDispatchManager = class {
 
 // src/dispatch/store.ts
 var import_promises = __toESM(require("fs/promises"), 1);
-var import_node_path22 = __toESM(require("path"), 1);
+var import_node_path25 = __toESM(require("path"), 1);
 
 // src/shift/constants.ts
 var MAX_RUNS_PER_SHIFT = 30;
@@ -54408,7 +55673,7 @@ function createDispatchStore(deps) {
       flushTimer = null;
     }
     const content = { version: 1, records };
-    await import_promises.default.mkdir(import_node_path22.default.dirname(deps.filePath), { recursive: true });
+    await import_promises.default.mkdir(import_node_path25.default.dirname(deps.filePath), { recursive: true });
     const tmp = `${deps.filePath}.tmp-${deps.now()}-${Math.floor(Math.random() * 1e6)}`;
     await import_promises.default.writeFile(tmp, JSON.stringify(content, null, 2), "utf8");
     await import_promises.default.rename(tmp, deps.filePath);
@@ -54477,7 +55742,7 @@ function createDispatchStore(deps) {
 
 // src/channel/json-store.ts
 var import_promises2 = __toESM(require("fs/promises"), 1);
-var import_node_path23 = __toESM(require("path"), 1);
+var import_node_path26 = __toESM(require("path"), 1);
 function createJsonStore(deps) {
   let items = [];
   let flushTimer = null;
@@ -54488,7 +55753,7 @@ function createJsonStore(deps) {
       flushTimer = null;
     }
     const content = { version: version2, [deps.key]: items };
-    await import_promises2.default.mkdir(import_node_path23.default.dirname(deps.filePath), { recursive: true });
+    await import_promises2.default.mkdir(import_node_path26.default.dirname(deps.filePath), { recursive: true });
     const tmp = `${deps.filePath}.tmp-${deps.now()}-${Math.floor(Math.random() * 1e6)}`;
     await import_promises2.default.writeFile(tmp, JSON.stringify(content, null, 2), "utf8");
     await import_promises2.default.rename(tmp, deps.filePath);
@@ -54780,10 +56045,10 @@ function createTopicStore(deps) {
 }
 
 // src/dispatch/mcp-config.ts
-var import_node_fs23 = __toESM(require("fs"), 1);
-var import_node_path24 = __toESM(require("path"), 1);
+var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_path27 = __toESM(require("path"), 1);
 function dispatchMcpConfigPath(dataDir) {
-  return import_node_path24.default.join(dataDir, "dispatch.mcp.json");
+  return import_node_path27.default.join(dataDir, "dispatch.mcp.json");
 }
 function writeDispatchMcpConfig(args) {
   const cfgPath = dispatchMcpConfigPath(args.dataDir);
@@ -54802,16 +56067,16 @@ function writeDispatchMcpConfig(args) {
       }
     }
   };
-  import_node_fs23.default.mkdirSync(args.dataDir, { recursive: true });
-  import_node_fs23.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  import_node_fs26.default.mkdirSync(args.dataDir, { recursive: true });
+  import_node_fs26.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/ticket/mcp-config.ts
-var import_node_fs24 = __toESM(require("fs"), 1);
-var import_node_path25 = __toESM(require("path"), 1);
+var import_node_fs27 = __toESM(require("fs"), 1);
+var import_node_path28 = __toESM(require("path"), 1);
 function ticketMcpConfigPath(dataDir) {
-  return import_node_path25.default.join(dataDir, "ticket.mcp.json");
+  return import_node_path28.default.join(dataDir, "ticket.mcp.json");
 }
 function writeTicketMcpConfig(args) {
   const cfgPath = ticketMcpConfigPath(args.dataDir);
@@ -54833,16 +56098,16 @@ function writeTicketMcpConfig(args) {
       }
     }
   };
-  import_node_fs24.default.mkdirSync(args.dataDir, { recursive: true });
-  import_node_fs24.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  import_node_fs27.default.mkdirSync(args.dataDir, { recursive: true });
+  import_node_fs27.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/shift/mcp-config.ts
-var import_node_fs25 = __toESM(require("fs"), 1);
-var import_node_path26 = __toESM(require("path"), 1);
+var import_node_fs28 = __toESM(require("fs"), 1);
+var import_node_path29 = __toESM(require("path"), 1);
 function shiftMcpConfigPath(dataDir) {
-  return import_node_path26.default.join(dataDir, "shift.mcp.json");
+  return import_node_path29.default.join(dataDir, "shift.mcp.json");
 }
 async function writeShiftMcpConfig(args) {
   const cfgPath = shiftMcpConfigPath(args.dataDir);
@@ -54861,16 +56126,16 @@ async function writeShiftMcpConfig(args) {
       }
     }
   };
-  await import_node_fs25.default.promises.mkdir(args.dataDir, { recursive: true });
-  await import_node_fs25.default.promises.writeFile(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  await import_node_fs28.default.promises.mkdir(args.dataDir, { recursive: true });
+  await import_node_fs28.default.promises.writeFile(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/inbox/mcp-config.ts
-var import_node_fs26 = __toESM(require("fs"), 1);
-var import_node_path27 = __toESM(require("path"), 1);
+var import_node_fs29 = __toESM(require("fs"), 1);
+var import_node_path30 = __toESM(require("path"), 1);
 function inboxMcpConfigPath(dataDir) {
-  return import_node_path27.default.join(dataDir, "inbox.mcp.json");
+  return import_node_path30.default.join(dataDir, "inbox.mcp.json");
 }
 async function writeInboxMcpConfig(args) {
   const cfgPath = inboxMcpConfigPath(args.dataDir);
@@ -54889,16 +56154,16 @@ async function writeInboxMcpConfig(args) {
       }
     }
   };
-  await import_node_fs26.default.promises.mkdir(args.dataDir, { recursive: true });
-  await import_node_fs26.default.promises.writeFile(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  await import_node_fs29.default.promises.mkdir(args.dataDir, { recursive: true });
+  await import_node_fs29.default.promises.writeFile(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/peer-ops/mcp-config.ts
-var import_node_fs27 = __toESM(require("fs"), 1);
-var import_node_path28 = __toESM(require("path"), 1);
+var import_node_fs30 = __toESM(require("fs"), 1);
+var import_node_path31 = __toESM(require("path"), 1);
 function peerOpsMcpConfigPath(dataDir) {
-  return import_node_path28.default.join(dataDir, "peer-ops.mcp.json");
+  return import_node_path31.default.join(dataDir, "peer-ops.mcp.json");
 }
 function writePeerOpsMcpConfig(args) {
   const cfgPath = peerOpsMcpConfigPath(args.dataDir);
@@ -54915,16 +56180,16 @@ function writePeerOpsMcpConfig(args) {
       }
     }
   };
-  import_node_fs27.default.mkdirSync(args.dataDir, { recursive: true });
-  import_node_fs27.default.writeFileSync(cfgPath, JSON.stringify(cfg, null, 2));
+  import_node_fs30.default.mkdirSync(args.dataDir, { recursive: true });
+  import_node_fs30.default.writeFileSync(cfgPath, JSON.stringify(cfg, null, 2));
   return cfgPath;
 }
 
 // src/rpc-tool/mcp-config.ts
-var import_node_fs28 = __toESM(require("fs"), 1);
-var import_node_path29 = __toESM(require("path"), 1);
+var import_node_fs31 = __toESM(require("fs"), 1);
+var import_node_path32 = __toESM(require("path"), 1);
 function rpcToolMcpConfigPath(dataDir) {
-  return import_node_path29.default.join(dataDir, "rpc-tool.mcp.json");
+  return import_node_path32.default.join(dataDir, "rpc-tool.mcp.json");
 }
 function writeRpcToolMcpConfig(args) {
   const cfgPath = rpcToolMcpConfigPath(args.dataDir);
@@ -54943,29 +56208,29 @@ function writeRpcToolMcpConfig(args) {
       }
     }
   };
-  import_node_fs28.default.mkdirSync(args.dataDir, { recursive: true });
-  import_node_fs28.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  import_node_fs31.default.mkdirSync(args.dataDir, { recursive: true });
+  import_node_fs31.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/deploy/secret-table.ts
-var import_node_fs29 = __toESM(require("fs"), 1);
-var import_node_path30 = __toESM(require("path"), 1);
+var import_node_fs32 = __toESM(require("fs"), 1);
+var import_node_path33 = __toESM(require("path"), 1);
 var import_node_url5 = require("url");
 var import_meta5 = {};
 var LOCAL_SECRETS_DIRNAME = "secrets";
 function findSecretsBundleRoot(logger) {
   const candidates = [];
   try {
-    const here = import_node_path30.default.dirname((0, import_node_url5.fileURLToPath)(import_meta5.url));
-    candidates.push(import_node_path30.default.resolve(here, "..", "secrets"));
+    const here = import_node_path33.default.dirname((0, import_node_url5.fileURLToPath)(import_meta5.url));
+    candidates.push(import_node_path33.default.resolve(here, "..", "secrets"));
   } catch {
   }
   const fromArgv = bundleSiblingFromArgv(process.argv[1], "secrets");
   if (fromArgv) candidates.push(fromArgv);
   for (const c2 of candidates) {
     try {
-      if (import_node_fs29.default.statSync(c2).isDirectory()) return c2;
+      if (import_node_fs32.default.statSync(c2).isDirectory()) return c2;
     } catch {
     }
   }
@@ -54991,7 +56256,7 @@ function readDir(dir, logger) {
   const out = {};
   let files;
   try {
-    files = import_node_fs29.default.readdirSync(dir).filter((f2) => f2.endsWith(".env")).sort();
+    files = import_node_fs32.default.readdirSync(dir).filter((f2) => f2.endsWith(".env")).sort();
   } catch (e) {
     const code = e.code;
     if (code !== "ENOENT") logger?.warn("secrets.dir-unreadable", { dir, code: code ?? "unknown" });
@@ -54999,19 +56264,19 @@ function readDir(dir, logger) {
   }
   for (const f2 of files) {
     try {
-      Object.assign(out, parseEnvFile(import_node_fs29.default.readFileSync(import_node_path30.default.join(dir, f2), "utf8")));
+      Object.assign(out, parseEnvFile(import_node_fs32.default.readFileSync(import_node_path33.default.join(dir, f2), "utf8")));
     } catch (e) {
-      logger?.warn("secrets.file-unreadable", { file: import_node_path30.default.join(dir, f2), error: e.message });
+      logger?.warn("secrets.file-unreadable", { file: import_node_path33.default.join(dir, f2), error: e.message });
     }
   }
   return out;
 }
 function upsertEnvFileVar(file, key, value) {
   if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) throw new Error(`invalid env name: ${key}`);
-  import_node_fs29.default.mkdirSync(import_node_path30.default.dirname(file), { recursive: true, mode: 448 });
+  import_node_fs32.default.mkdirSync(import_node_path33.default.dirname(file), { recursive: true, mode: 448 });
   let lines = [];
   try {
-    lines = import_node_fs29.default.readFileSync(file, "utf8").split("\n");
+    lines = import_node_fs32.default.readFileSync(file, "utf8").split("\n");
     if (lines[lines.length - 1] === "") lines.pop();
   } catch {
   }
@@ -55019,12 +56284,12 @@ function upsertEnvFileVar(file, key, value) {
   let replaced = false;
   const out = lines.map((l2) => re2.test(l2) ? (replaced = true, `${key}=${value}`) : l2);
   if (!replaced) out.push(`${key}=${value}`);
-  import_node_fs29.default.writeFileSync(file, `${out.join("\n")}
+  import_node_fs32.default.writeFileSync(file, `${out.join("\n")}
 `, { encoding: "utf8", mode: 384 });
 }
 function readEnvFileVar(file, key) {
   try {
-    return parseEnvFile(import_node_fs29.default.readFileSync(file, "utf8"))[key];
+    return parseEnvFile(import_node_fs32.default.readFileSync(file, "utf8"))[key];
   } catch {
     return void 0;
   }
@@ -55033,7 +56298,7 @@ function removeEnvFileVar(file, key) {
   if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) throw new Error(`invalid env name: ${key}`);
   let lines;
   try {
-    lines = import_node_fs29.default.readFileSync(file, "utf8").split("\n");
+    lines = import_node_fs32.default.readFileSync(file, "utf8").split("\n");
   } catch {
     return;
   }
@@ -55042,10 +56307,10 @@ function removeEnvFileVar(file, key) {
   const out = lines.filter((l2) => !re2.test(l2));
   if (out.length === lines.length) return;
   if (out.every((l2) => l2.trim() === "" || l2.trim().startsWith("#"))) {
-    import_node_fs29.default.rmSync(file, { force: true });
+    import_node_fs32.default.rmSync(file, { force: true });
     return;
   }
-  import_node_fs29.default.writeFileSync(file, `${out.join("\n")}
+  import_node_fs32.default.writeFileSync(file, `${out.join("\n")}
 `, { encoding: "utf8", mode: 384 });
 }
 function readSecretTable(args) {
@@ -55056,12 +56321,12 @@ function readSecretTable(args) {
 }
 
 // src/dispatch/source-transcript.ts
-var import_node_path31 = __toESM(require("path"), 1);
+var import_node_path34 = __toESM(require("path"), 1);
 init_claude_history();
 var NO_SOURCE_TRANSCRIPT = "(no transcript yet \u2014 operate from the task description alone)";
 function resolveSourceJsonlPath(sourceFile, home) {
   if (!sourceFile?.toolSessionId) return NO_SOURCE_TRANSCRIPT;
-  return import_node_path31.default.join(
+  return import_node_path34.default.join(
     home,
     ".claude",
     "projects",
@@ -55072,7 +56337,7 @@ function resolveSourceJsonlPath(sourceFile, home) {
 
 // src/shift/store.ts
 var import_promises3 = __toESM(require("fs/promises"), 1);
-var import_node_path32 = __toESM(require("path"), 1);
+var import_node_path35 = __toESM(require("path"), 1);
 var import_node_crypto8 = require("crypto");
 
 // src/shift/schedule.ts
@@ -55147,7 +56412,7 @@ function createShiftStore(deps) {
       flushTimer = null;
     }
     const content = { version: 1, shifts };
-    await import_promises3.default.mkdir(import_node_path32.default.dirname(deps.filePath), { recursive: true });
+    await import_promises3.default.mkdir(import_node_path35.default.dirname(deps.filePath), { recursive: true });
     const tmp = `${deps.filePath}.tmp-${deps.now()}-${Math.floor(Math.random() * 1e6)}`;
     await import_promises3.default.writeFile(tmp, JSON.stringify(content, null, 2), "utf8");
     await import_promises3.default.rename(tmp, deps.filePath);
@@ -55601,14 +56866,14 @@ function redactEvidence(evidence) {
 
 // src/deploy/deploy-file.ts
 var import_promises4 = __toESM(require("fs/promises"), 1);
-var import_node_path34 = __toESM(require("path"), 1);
+var import_node_path37 = __toESM(require("path"), 1);
 var import_node_crypto9 = require("crypto");
 init_zod();
 init_protocol();
 
 // src/deploy/connectors.ts
-var import_node_fs30 = __toESM(require("fs"), 1);
-var import_node_path33 = __toESM(require("path"), 1);
+var import_node_fs33 = __toESM(require("fs"), 1);
+var import_node_path36 = __toESM(require("path"), 1);
 init_zod();
 init_protocol();
 var PLACEHOLDER2 = /\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g;
@@ -55658,11 +56923,11 @@ var PACKAGE_RUNNERS = /* @__PURE__ */ new Set(["npx", "uvx", "pnpx", "bunx"]);
 var SCRIPT_RUNNERS = /* @__PURE__ */ new Set(["node", "bun", "deno", "python", "python3"]);
 var HOST_ARG_PLACEHOLDER = "CLAWD_PERSONA_DIR";
 function scanMcpConnectors(personaDir) {
-  const file = import_node_path33.default.join(personaDir, ".mcp.json");
+  const file = import_node_path36.default.join(personaDir, ".mcp.json");
   const out = { readable: true, connectors: [], evidence: [], warnings: [] };
   let parsed;
   try {
-    parsed = JSON.parse(import_node_fs30.default.readFileSync(file, "utf8"));
+    parsed = JSON.parse(import_node_fs33.default.readFileSync(file, "utf8"));
   } catch (e) {
     if (e.code === "ENOENT") return out;
     out.readable = false;
@@ -55757,8 +57022,8 @@ function mergeScannedConnectors(existing, scanned) {
 }
 
 // src/deploy/deploy-file.ts
-var DEPLOY_FILE = import_node_path34.default.join(".clawd", "deploy.json");
-var SCAN_FILE = import_node_path34.default.join(".clawd", "deploy-scan.json");
+var DEPLOY_FILE = import_node_path37.default.join(".clawd", "deploy.json");
+var SCAN_FILE = import_node_path37.default.join(".clawd", "deploy-scan.json");
 async function readJson(file) {
   let raw;
   try {
@@ -55774,14 +57039,14 @@ async function readJson(file) {
   }
 }
 async function writeJson(file, value) {
-  await import_promises4.default.mkdir(import_node_path34.default.dirname(file), { recursive: true });
+  await import_promises4.default.mkdir(import_node_path37.default.dirname(file), { recursive: true });
   const tmp = `${file}.tmp-${process.pid}`;
   await import_promises4.default.writeFile(tmp, `${JSON.stringify(value, null, 2)}
 `);
   await import_promises4.default.rename(tmp, file);
 }
 async function readDeployFile(dir) {
-  const raw = await readJson(import_node_path34.default.join(dir, DEPLOY_FILE));
+  const raw = await readJson(import_node_path37.default.join(dir, DEPLOY_FILE));
   if (raw === void 0) return void 0;
   const parsed = DeployFileSchema.safeParse(raw);
   if (!parsed.success) {
@@ -55791,18 +57056,18 @@ async function readDeployFile(dir) {
   return parsed.data;
 }
 async function writeDeployFile(dir, file) {
-  await writeJson(import_node_path34.default.join(dir, DEPLOY_FILE), DeployFileSchema.parse(file));
+  await writeJson(import_node_path37.default.join(dir, DEPLOY_FILE), DeployFileSchema.parse(file));
 }
 async function readDeployFileRaw(dir) {
   try {
-    return await import_promises4.default.readFile(import_node_path34.default.join(dir, DEPLOY_FILE), "utf8");
+    return await import_promises4.default.readFile(import_node_path37.default.join(dir, DEPLOY_FILE), "utf8");
   } catch (err) {
     if (err.code === "ENOENT") return void 0;
     throw err;
   }
 }
 async function restoreDeployFileRaw(dir, raw) {
-  const file = import_node_path34.default.join(dir, DEPLOY_FILE);
+  const file = import_node_path37.default.join(dir, DEPLOY_FILE);
   if (raw === void 0) await import_promises4.default.rm(file, { force: true });
   else await import_promises4.default.writeFile(file, raw);
 }
@@ -55843,7 +57108,7 @@ function normalizeLegacyScan(raw) {
   return fix(raw);
 }
 async function readScanFile(dir) {
-  const raw = normalizeLegacyScan(await readJson(import_node_path34.default.join(dir, SCAN_FILE)));
+  const raw = normalizeLegacyScan(await readJson(import_node_path37.default.join(dir, SCAN_FILE)));
   if (raw === void 0) return void 0;
   const badShape = (issues) => {
     const first = issues[0];
@@ -55864,7 +57129,7 @@ async function readScanFile(dir) {
   return parsed.data;
 }
 async function writeScanFile(dir, file) {
-  await writeJson(import_node_path34.default.join(dir, SCAN_FILE), DeployScanFileSchema.parse(file));
+  await writeJson(import_node_path37.default.join(dir, SCAN_FILE), DeployScanFileSchema.parse(file));
 }
 function replaceScan(file, entry) {
   const idx = file.scans.findIndex((s2) => s2.id === entry.id);
@@ -55947,9 +57212,9 @@ function requiredEnvNames(manifest) {
 
 // src/deploy/artifact.ts
 var import_node_crypto10 = require("crypto");
-var import_node_fs31 = __toESM(require("fs"), 1);
-var import_node_os10 = __toESM(require("os"), 1);
-var import_node_path35 = __toESM(require("path"), 1);
+var import_node_fs34 = __toESM(require("fs"), 1);
+var import_node_os11 = __toESM(require("os"), 1);
+var import_node_path38 = __toESM(require("path"), 1);
 var import_node_stream3 = require("stream");
 var import_promises5 = require("stream/promises");
 var ARTIFACT_MAX_BYTES = 200 * 1024 * 1024;
@@ -55983,8 +57248,8 @@ function downloadArtifact(exec) {
     if (!res.ok || !res.body) throw new Error(`\u4E0B\u8F7D\u5931\u8D25 HTTP ${res.status}\uFF1A${url}`);
     const declared = Number(res.headers.get("content-length") ?? 0);
     if (declared > ARTIFACT_MAX_BYTES) throw new Error(`\u8D44\u4EA7 ${declared} \u5B57\u8282\uFF0C\u8D85\u8FC7\u4E0A\u9650 ${ARTIFACT_MAX_BYTES}\uFF1A${url}`);
-    const dir = await import_node_fs31.default.promises.mkdtemp(import_node_path35.default.join(import_node_os10.default.tmpdir(), "clawd-artifact-"));
-    const file = import_node_path35.default.join(dir, "pkg");
+    const dir = await import_node_fs34.default.promises.mkdtemp(import_node_path38.default.join(import_node_os11.default.tmpdir(), "clawd-artifact-"));
+    const file = import_node_path38.default.join(dir, "pkg");
     const hash = (0, import_node_crypto10.createHash)("sha256");
     let size = 0;
     const meter = new import_node_stream3.Transform({
@@ -55996,7 +57261,7 @@ function downloadArtifact(exec) {
       }
     });
     try {
-      await (0, import_promises5.pipeline)(import_node_stream3.Readable.fromWeb(res.body), meter, import_node_fs31.default.createWriteStream(file));
+      await (0, import_promises5.pipeline)(import_node_stream3.Readable.fromWeb(res.body), meter, import_node_fs34.default.createWriteStream(file));
       let entries;
       if (listEntries) {
         const r2 = await exec("tar", ["-tzf", file], { timeoutMs: 3e4 });
@@ -56005,7 +57270,7 @@ function downloadArtifact(exec) {
       }
       return { sha256: hash.digest("hex"), size, ...entries ? { entries } : {} };
     } finally {
-      await import_node_fs31.default.promises.rm(dir, { recursive: true, force: true });
+      await import_node_fs34.default.promises.rm(dir, { recursive: true, force: true });
     }
   };
 }
@@ -56056,7 +57321,7 @@ init_protocol();
 
 // src/deploy/repo.ts
 var import_promises6 = __toESM(require("fs/promises"), 1);
-var import_node_path36 = __toESM(require("path"), 1);
+var import_node_path39 = __toESM(require("path"), 1);
 init_protocol();
 
 // ../node_modules/.pnpm/libsodium@0.8.4/node_modules/libsodium/dist/modules-esm/libsodium.mjs
@@ -56076,13 +57341,13 @@ async function A2(A4 = {}) {
   (function() {
   }).bind();
   var E3, i2, D3, F3, o2, w3, h2, S3, y3, k3, c2, M3 = function() {
-  }.bind(), U2 = false, G2 = false;
+  }.bind(), U3 = false, G2 = false;
   function J2() {
     var A5 = d2.buffer;
     h2 = new Int8Array(A5), o2 = new Int16Array(A5), g3.HEAPU8 = c2 = new Uint8Array(A5), new Uint16Array(A5), w3 = new Int32Array(A5), k3 = new Uint32Array(A5), S3 = new Float32Array(A5), y3 = new Float64Array(A5);
   }
   function Y2(A5) {
-    g3.onAbort?.(A5), M3(A5 = `Aborted(${A5})`), U2 = true, A5 += ". Build with -sASSERTIONS for more info.";
+    g3.onAbort?.(A5), M3(A5 = `Aborted(${A5})`), U3 = true, A5 += ". Build with -sASSERTIONS for more info.";
     var I4 = new WebAssembly.RuntimeError(A5);
     throw D3?.(I4), I4;
   }
@@ -56240,7 +57505,7 @@ async function A2(A4 = {}) {
     })(0, F3, C3)).instance));
   })(), (function() {
     function A5() {
-      g3.calledRun = true, U2 || (G2 = true, i2?.(g3), g3.onRuntimeInitialized?.(), (function() {
+      g3.calledRun = true, U3 || (G2 = true, i2?.(g3), g3.onRuntimeInitialized?.(), (function() {
         if (g3.postRun) for ("function" == typeof g3.postRun && (g3.postRun = [g3.postRun]); g3.postRun.length; ) H2(g3.postRun.shift());
         N2(K2);
       })());
@@ -59596,6 +60861,9 @@ function createGithubApi(args) {
     },
     async rerunJob(slug, jobId) {
       await must("POST", `/repos/${slug}/actions/jobs/${jobId}/rerun`, "\u91CD\u8DD1\u8FD9\u4E00\u6BB5");
+    },
+    async dispatchWorkflow(slug, file, ref) {
+      await must("POST", `/repos/${slug}/actions/workflows/${encodeURIComponent(file)}/dispatches`, "\u89E6\u53D1\u6D41\u6C34\u7EBF", { ref });
     }
   };
 }
@@ -59663,7 +60931,10 @@ async function storeGithubAuth(args) {
 init_protocol();
 var CLAWOS_REPO = "ottin4ttc/clawos";
 var CLAWOS_REF = "release";
-var WORKFLOW_PATH = ".github/workflows/clawd-deploy.yml";
+var DEPLOY_WORKFLOW_FILE = "clawd-deploy.yml";
+var WORKFLOW_PATH = `.github/workflows/${DEPLOY_WORKFLOW_FILE}`;
+var UNPUBLISH_WORKFLOW_FILE = "clawd-unpublish.yml";
+var UNPUBLISH_WORKFLOW_PATH = `.github/workflows/${UNPUBLISH_WORKFLOW_FILE}`;
 var DOCKERFILE_PATH = "Dockerfile";
 var DOCKERIGNORE_PATH = ".dockerignore";
 var ACR_REGISTRY = "registry.cn-hangzhou.aliyuncs.com";
@@ -59757,6 +61028,7 @@ var ACR_LOGIN_STEPS = [
 ];
 var IMAGE_LATEST = '"$REGISTRY/$ACR_NAMESPACE/${{ steps.plan.outputs.persona_id }}:latest"';
 var RESOLVE_LINE = `          IMAGE_REF=$(node clawos/cloud-host/pipeline/acr.mjs resolve --image ${IMAGE_LATEST} --vpc-registry "$VPC_REGISTRY")`;
+var CONCURRENCY_GROUP = "  group: persona-cloud-${{ github.repository }}";
 var L2 = [
   "name: clawd deploy",
   "",
@@ -59777,7 +61049,7 @@ var L2 = [
   "",
   "concurrency:",
   "  # \u540C\u4E00\u4E2A\u4ED3\u5E93\u7684\u53D1\u5E03\u6392\u961F\u8DD1\uFF0C\u4E0D\u53D6\u6D88\uFF1A\u4E0A\u4E00\u6B21\u53EF\u80FD\u5DF2\u7ECF\u5728\u767B\u8BB0\u6B63\u5F0F\u4E86",
-  "  group: persona-cloud-${{ github.repository }}",
+  CONCURRENCY_GROUP,
   "",
   "env:",
   `  REGISTRY: ${ACR_REGISTRY}`,
@@ -59913,6 +61185,44 @@ var L2 = [
   ""
 ];
 var WORKFLOW_TEMPLATE = L2.join("\n");
+var U2 = [
+  "name: clawd unpublish",
+  "",
+  "# \u7531 clawd \u751F\u6210\u3001\u7531 clawd \u7EF4\u62A4\uFF1A\u6BCF\u6B21\u300C\u53D1\u5E03\u300D\u90FD\u4F1A\u7528\u5F53\u524D\u6A21\u677F\u91CD\u5199\u8FD9\u4EFD\u6587\u4EF6\u518D\u63D0\u4EA4\uFF0C\u624B\u6539\u4F1A\u88AB\u76D6\u6389\u3002",
+  "# \u4E0B\u7EBF\uFF1A\u5728 gateway \u64A4\u6389\u8FD9\u4E2A persona \u7684\u6B63\u5F0F\u767B\u8BB0\u2014\u2014\u522B\u4EBA\u770B\u4E0D\u5230\u3001\u7528\u4E0D\u4E86\uFF1B\u4ED3\u5E93\u548C\u955C\u50CF\u90FD\u4E0D\u52A8\uFF0C\u91CD\u65B0\u53D1\u5E03\u5C31\u56DE\u6765\u3002",
+  "# \u53EA\u7531 clawd \u4E0A\u4E91\u9875\u7684\u300C\u4E0B\u7EBF\u300D\u89E6\u53D1\uFF08workflow_dispatch\uFF09\uFF0C\u63A8\u4EE3\u7801\u4E0D\u8DD1\u3002\u6B63\u5728\u8DD1\u7684\u5BF9\u8BDD\u4E0D\u6253\u65AD\uFF0C\u8DD1\u5230\u7A7A\u95F2\u81EA\u5DF1\u9000\u3002",
+  "#",
+  "# \u8981\u7684\u7EC4\u7EC7\u7EA7 Secrets\uFF1ACLAWOS_READ_TOKEN\uFF08\u8BFB clawos \u4ED3\u5E93\uFF09\u3001CLAWD_GATEWAY_ADMIN_KEY\uFF1B\u7EC4\u7EC7\u7EA7 Variable\uFF1ACLAWD_GATEWAY_URL\u3002",
+  "",
+  "on:",
+  "  workflow_dispatch:",
+  "",
+  "concurrency:",
+  "  # \u4E0E\u53D1\u5E03\u540C\u4E00\u7EC4\uFF1A\u53D1\u5E03\u5728\u8DD1\u65F6\u70B9\u4E0B\u7EBF\uFF0C\u6392\u5728\u5B83\u540E\u9762\uFF1B\u540E\u70B9\u7684\u9876\u6389\u5148\u70B9\u7684",
+  CONCURRENCY_GROUP,
+  "",
+  "env:",
+  `  CLAWOS_REPO: ${CLAWOS_REPO}`,
+  `  CLAWOS_REF: ${CLAWOS_REF}`,
+  "",
+  "permissions:",
+  "  contents: read",
+  "",
+  "jobs:",
+  "  unpublish:",
+  "    name: unpublish",
+  "    runs-on: ubuntu-latest",
+  "    timeout-minutes: 10",
+  "    steps:",
+  ...CONTRACT_STEPS,
+  "      - name: \u64A4\u767B\u8BB0",
+  "        env:",
+  "          CLAWD_GATEWAY_URL: ${{ vars.CLAWD_GATEWAY_URL }}",
+  "          CLAWD_GATEWAY_ADMIN_KEY: ${{ secrets.CLAWD_GATEWAY_ADMIN_KEY }}",
+  "        run: node clawos/cloud-host/pipeline/unregister.mjs --persona-id '${{ steps.plan.outputs.persona_id }}'",
+  ""
+];
+var UNPUBLISH_WORKFLOW_TEMPLATE = U2.join("\n");
 
 // src/deploy/exec.ts
 var import_node_child_process9 = require("child_process");
@@ -59953,7 +61263,7 @@ var runCommand = (cmd, args, opts = {}) => new Promise((resolve9) => {
 });
 
 // src/deploy/repo.ts
-var DEPLOY_FILE_REL = DEPLOY_FILE.split(import_node_path36.default.sep).join("/");
+var DEPLOY_FILE_REL = DEPLOY_FILE.split(import_node_path39.default.sep).join("/");
 var PERSONA_FILE_REL = ".clawd/persona.json";
 var DIRTY_IGNORED = [DEPLOY_FILE_REL, PERSONA_FILE_REL];
 var RepoError = class extends Error {
@@ -59968,6 +61278,7 @@ async function mustGit(exec, dir, args, what, opts) {
   if (r2.code !== 0) throw new RepoError(`${what}\u6CA1\u6210\uFF08git \u9000\u51FA\u7801 ${r2.code}\uFF09\uFF1A${tail(r2.stderr) || tail(r2.stdout)}`);
   return r2.stdout.trim();
 }
+var cloudPersonaIdOf = (originUrl) => personaIdOf(repoSlug(originUrl).split("/").pop() ?? "");
 var INLINE_HELPER = '!f() { echo username=x-access-token; echo "password=$CLAWD_GITHUB_TOKEN"; }; f';
 async function gitPush(exec, dir, auth) {
   if (auth.source === "file") {
@@ -59992,7 +61303,7 @@ async function samePath(a2, b3) {
     try {
       return await import_promises6.default.realpath(x2);
     } catch {
-      return import_node_path36.default.resolve(x2);
+      return import_node_path39.default.resolve(x2);
     }
   };
   return await real(a2) === await real(b3);
@@ -60018,7 +61329,7 @@ async function identityArgs(exec, dir) {
   return ["-c", "user.name=clawd", "-c", "user.email=clawd@clawos.local"];
 }
 async function writeGitignore(dir) {
-  const gi = import_node_path36.default.join(dir, ".gitignore");
+  const gi = import_node_path39.default.join(dir, ".gitignore");
   let existing;
   try {
     existing = await import_promises6.default.readFile(gi, "utf8");
@@ -60028,13 +61339,15 @@ async function writeGitignore(dir) {
   await import_promises6.default.writeFile(gi, mergeGitignore(existing));
 }
 async function writeWorkflow(dir) {
-  const wf = import_node_path36.default.join(dir, WORKFLOW_PATH);
-  await import_promises6.default.mkdir(import_node_path36.default.dirname(wf), { recursive: true });
-  await import_promises6.default.writeFile(wf, WORKFLOW_TEMPLATE);
+  for (const [rel, body] of [[WORKFLOW_PATH, WORKFLOW_TEMPLATE], [UNPUBLISH_WORKFLOW_PATH, UNPUBLISH_WORKFLOW_TEMPLATE]]) {
+    const wf = import_node_path39.default.join(dir, rel);
+    await import_promises6.default.mkdir(import_node_path39.default.dirname(wf), { recursive: true });
+    await import_promises6.default.writeFile(wf, body);
+  }
 }
 async function writeDockerfile(dir, personaId2) {
-  await import_promises6.default.writeFile(import_node_path36.default.join(dir, DOCKERFILE_PATH), renderDockerfile(personaId2));
-  await import_promises6.default.writeFile(import_node_path36.default.join(dir, DOCKERIGNORE_PATH), DOCKERIGNORE_TEMPLATE);
+  await import_promises6.default.writeFile(import_node_path39.default.join(dir, DOCKERFILE_PATH), renderDockerfile(personaId2));
+  await import_promises6.default.writeFile(import_node_path39.default.join(dir, DOCKERIGNORE_PATH), DOCKERIGNORE_TEMPLATE);
 }
 var RepoAlreadyExistsError = class extends RepoError {
   constructor(slug) {
@@ -60071,7 +61384,7 @@ async function ensureRepo(exec, api, args) {
   const existing = await repoInfo(exec, dir);
   if (existing) return { created: false, url: existing.url };
   await writeGitignore(dir);
-  await import_promises6.default.rm(import_node_path36.default.join(dir, WORKFLOW_PATH), { force: true });
+  await import_promises6.default.rm(import_node_path39.default.join(dir, WORKFLOW_PATH), { force: true });
   let created;
   try {
     created = await createOrgRepo(exec, api, { dir, org, repoName: personaId2, message: "clawd: \u4E0A\u4E91", auth: args.auth });
@@ -60109,6 +61422,10 @@ async function hasCommit(exec, dir, sha) {
   const r2 = await git(exec, dir, ["cat-file", "-e", `${sha}^{commit}`]);
   return !r2.spawnError && r2.code === 0;
 }
+async function fileInCommit(exec, dir, sha, rel) {
+  const r2 = await git(exec, dir, ["cat-file", "-e", `${sha}:${rel}`]);
+  return !r2.spawnError && r2.code === 0;
+}
 async function commitAll(exec, args) {
   await mustGit(exec, args.dir, ["add", "-A"], "\u6682\u5B58\u6587\u4EF6");
   const staged = await git(exec, args.dir, ["diff", "--cached", "--quiet"]);
@@ -60124,7 +61441,7 @@ async function release(exec, api, args) {
   await api.enableActions(repoSlug(info.url));
   await writeGitignore(args.dir);
   await writeWorkflow(args.dir);
-  await writeDockerfile(args.dir, personaIdOf(repoSlug(info.url).split("/").pop() ?? ""));
+  await writeDockerfile(args.dir, cloudPersonaIdOf(info.url));
   const identity = await identityArgs(exec, args.dir);
   await mustGit(exec, args.dir, ["add", "-A"], "\u6682\u5B58\u6587\u4EF6");
   const stamp = new Date(args.now()).toISOString();
@@ -60147,6 +61464,7 @@ var SCAN_BASE_LABEL = {
 
 // src/deploy/run-status.ts
 init_protocol();
+var runsOf = (slug, file, query) => `/repos/${slug}/actions/workflows/${encodeURIComponent(file)}/runs?${query}`;
 var pipelineJobKey = (name) => DEPLOY_STAGE_KEYS.find((k3) => name === k3 || name.startsWith(`${k3} `));
 function stageStatusOf(status, conclusion) {
   if (status === "queued" || status === "requested" || status === "pending") return "pending";
@@ -60188,7 +61506,7 @@ async function runByHead(api, slug, head) {
   return fetchRun(api, slug, `head_sha=${encodeURIComponent(head)}&per_page=1`);
 }
 async function fetchRun(api, slug, query) {
-  const listed = await api.getJson(`/repos/${slug}/actions/runs?${query}`);
+  const listed = await api.getJson(runsOf(slug, DEPLOY_WORKFLOW_FILE, query));
   const raw = listed?.workflow_runs?.[0];
   if (!raw || typeof raw.id !== "number" || typeof raw.head_sha !== "string" || typeof raw.html_url !== "string") {
     return void 0;
@@ -60210,6 +61528,21 @@ async function fetchRun(api, slug, query) {
     jobs: DEPLOY_STAGE_KEYS.map((k3) => byKey.get(k3)).filter((j2) => j2 !== void 0)
   };
 }
+async function latestUnpublish(api, slug) {
+  const listed = await api.getJson(runsOf(slug, UNPUBLISH_WORKFLOW_FILE, "per_page=1"));
+  const runs = listed?.workflow_runs;
+  if (!Array.isArray(runs)) return void 0;
+  const raw = runs[0];
+  if (!raw) return null;
+  if (typeof raw.id !== "number" || typeof raw.html_url !== "string") return void 0;
+  const status = runStatusOf(String(raw.status ?? ""));
+  return {
+    runId: raw.id,
+    status,
+    htmlUrl: raw.html_url,
+    ...status === "completed" ? { conclusion: raw.conclusion === "success" ? "success" : "failure" } : {}
+  };
+}
 async function rerunJob(api, slug, jobId) {
   await api.rerunJob(slug, jobId);
 }
@@ -60241,6 +61574,8 @@ function reconcileInterruptedScans(deps) {
 // src/handlers/deploy.ts
 var SECRETS_CACHE_MS = 2e4;
 var RUN_CACHE_MS = 4e3;
+var ONLINE_CACHE_MS = 2e4;
+var UNPUBLISH_NEEDS_REPUBLISH = "\u8FD9\u4E2A persona \u7684\u6D41\u6C34\u7EBF\u662F\u65E7\u7248\u7684\uFF0C\u5148\u91CD\u65B0\u626B\u63CF\u3001\u53D1\u5E03\u4E00\u6B21\u518D\u4E0B\u7EBF";
 function ensureOwner(ctx) {
   if (!ctx || ctx.principal.kind !== "owner") {
     throw new ClawdError(ERROR_CODES.UNAUTHORIZED, "UNAUTHORIZED: deploy:* requires owner ctx");
@@ -60301,6 +61636,28 @@ function buildDeployHandlers(deps) {
     runCache.set(key, { at: deps.now(), run });
     return run;
   };
+  const unpublishCache = /* @__PURE__ */ new Map();
+  const cachedUnpublish = async (personaId2, api, slug) => {
+    const hit = unpublishCache.get(personaId2);
+    if (hit && deps.now() - hit.at < RUN_CACHE_MS) return hit.run;
+    const run = await latestUnpublish(api, slug) ?? void 0;
+    unpublishCache.set(personaId2, { at: deps.now(), run });
+    return run;
+  };
+  const onlineCache = /* @__PURE__ */ new Map();
+  const cachedOnline = async (personaId2, run, unpublish) => {
+    const stamp = `${run?.runId ?? "-"}:${run?.status ?? "-"}|${unpublish?.runId ?? "-"}:${unpublish?.status ?? "-"}`;
+    const hit = onlineCache.get(personaId2);
+    if (hit && hit.stamp === stamp && deps.now() - hit.at < ONLINE_CACHE_MS) return hit.online;
+    let online;
+    try {
+      online = await deps.cloudOnline(personaId2);
+    } catch {
+      online = void 0;
+    }
+    onlineCache.set(personaId2, { stamp, at: deps.now(), online });
+    return online;
+  };
   deps.githubIdentity.onChange(() => secretsCache.clear());
   async function requireGithub() {
     const auth = await deps.githubIdentity.refresh();
@@ -60337,6 +61694,7 @@ function buildDeployHandlers(deps) {
     const { scans } = file;
     let secrets;
     let run;
+    let unpublish;
     if (repo2 && api && github.status === "authorized") {
       try {
         secrets = await cachedSecrets(personaId2, dir, api);
@@ -60344,7 +61702,9 @@ function buildDeployHandlers(deps) {
         secrets = void 0;
       }
       run = await cachedRun(personaId2, api, repoSlug(repo2.url), releaseHead);
+      if (releaseHead === void 0) unpublish = await cachedUnpublish(personaId2, api, repoSlug(repo2.url));
     }
+    const online = releaseHead === void 0 && file.releases.length > 0 ? await cachedOnline(personaId2, run, unpublish) : void 0;
     return {
       personaId: personaId2,
       github,
@@ -60353,6 +61713,8 @@ function buildDeployHandlers(deps) {
       releases: file.releases,
       ...secrets ? { secrets } : {},
       ...run ? { run } : {},
+      ...online !== void 0 ? { online } : {},
+      ...unpublish ? { unpublish } : {},
       ...historyError ? { historyError } : {}
     };
   }
@@ -60562,6 +61924,14 @@ function buildDeployHandlers(deps) {
       repo2 = await repoInfo(deps.exec, dir);
       if (!repo2) throw new ClawdError(ERROR_CODES.INTERNAL, "\u4ED3\u5E93\u5EFA\u597D\u4E86\u4F46\u8BFB\u4E0D\u5230 origin");
     }
+    const cloudName = cloudPersonaIdOf(repo2.url);
+    let claim;
+    try {
+      claim = await deps.claimPublisher(cloudName);
+    } catch (err) {
+      throw toClawdError(err);
+    }
+    if (claim === "taken") throw invalid(`\u4E91\u4E0A\u7684 ${cloudName} \u767B\u8BB0\u5728\u522B\u4EBA\u540D\u4E0B\uFF0C\u770B\u677F\u53EA\u5F52\u539F\u53D1\u5E03\u8005\uFF1B\u8981\u4E00\u8D77\u7EF4\u62A4\u627E\u7BA1\u7406\u5458`);
     if (repo2.branch !== "main") throw invalid(`\u5F53\u524D\u5728\u5206\u652F ${repo2.branch}\uFF0C\u4ED3\u5E93\u91CC\u7684\u6D41\u6C34\u7EBF\u53EA\u8BA4 main\uFF1B\u5207\u56DE main \u518D\u626B\u63CF`);
     const live = liveScans.get(personaId2);
     if (live && live.sessionId === void 0) return view(personaId2);
@@ -60657,6 +62027,27 @@ function buildDeployHandlers(deps) {
     }
     return view(personaId2);
   };
+  const unpublishHandler = async (frame, _client, ctx) => {
+    ensureOwner(ctx);
+    const { personaId: personaId2 } = parseArgs2(DeployPersonaArgsSchema, frame, "deploy:unpublish");
+    const dir = mustPersona(personaId2);
+    const repo2 = await repoInfo(deps.exec, dir);
+    if (!repo2) throw invalid("\u8FD9\u4E2A persona \u8FD8\u6CA1\u4E0A\u8FC7\u4E91");
+    const { api } = await requireGithub();
+    const last = (await readHistory(dir)).releases.at(-1);
+    if (!last || !await fileInCommit(deps.exec, dir, last.head, UNPUBLISH_WORKFLOW_PATH)) throw invalid(UNPUBLISH_NEEDS_REPUBLISH);
+    const slug = repoSlug(repo2.url);
+    const before = await latestUnpublish(api, slug);
+    if (before === void 0) throw invalid("\u67E5\u4E0D\u5230\u8FD9\u4E2A\u4ED3\u5E93\u4E0A\u7684\u4E0B\u7EBF\u6D41\u6C34\u7EBF\uFF08GitHub \u6CA1\u54CD\u5E94\uFF09\uFF0C\u7A0D\u540E\u518D\u70B9\u4E00\u6B21");
+    try {
+      await api.dispatchWorkflow(slug, UNPUBLISH_WORKFLOW_FILE, "main");
+    } catch (err) {
+      throw new ClawdError(ERROR_CODES.INTERNAL, err instanceof Error ? err.message : String(err));
+    }
+    unpublishCache.delete(personaId2);
+    onlineCache.delete(personaId2);
+    return { response: { type: "deploy:unpublish", before: before?.runId ?? null } };
+  };
   return {
     "deploy:get": get,
     "deploy:scan": scanHandler,
@@ -60665,7 +62056,8 @@ function buildDeployHandlers(deps) {
     "deploy:reportFinding": reportFinding,
     "deploy:finishScan": finishScan,
     "deploy:release": releaseHandler,
-    "deploy:rerunJob": rerunJobHandler
+    "deploy:rerunJob": rerunJobHandler,
+    "deploy:unpublish": unpublishHandler
   };
 }
 
@@ -60717,10 +62109,10 @@ async function probeLocalVersion(exec, pkg) {
 
 // src/tools/shell-path.ts
 var import_node_child_process10 = require("child_process");
-var import_node_os11 = __toESM(require("os"), 1);
+var import_node_os12 = __toESM(require("os"), 1);
 function refreshPathFromLoginShell() {
   if (process.platform === "win32") return;
-  const shell = process.env.SHELL ?? import_node_os11.default.userInfo().shell ?? "/bin/zsh";
+  const shell = process.env.SHELL ?? import_node_os12.default.userInfo().shell ?? "/bin/zsh";
   try {
     const out = (0, import_node_child_process10.execFileSync)(shell, ["-ilc", 'command echo -n "$PATH"'], {
       encoding: "utf8",
@@ -61266,15 +62658,15 @@ async function refreshTunnelUrlOnStartup(deps) {
 }
 
 // src/lark-bot-connector/binding-store.ts
-var import_node_fs32 = __toESM(require("fs"), 1);
-var import_node_path37 = __toESM(require("path"), 1);
+var import_node_fs35 = __toESM(require("fs"), 1);
+var import_node_path40 = __toESM(require("path"), 1);
 function createLarkBotBindingStore(personaRoot) {
-  const filePath = (personaId2) => import_node_path37.default.join(personaRoot, safeFileName(personaId2), ".clawd", "lark-bot.json");
+  const filePath = (personaId2) => import_node_path40.default.join(personaRoot, safeFileName(personaId2), ".clawd", "lark-bot.json");
   const read = (personaId2) => {
     const file = filePath(personaId2);
-    if (!import_node_fs32.default.existsSync(file)) return null;
+    if (!import_node_fs35.default.existsSync(file)) return null;
     try {
-      const raw = JSON.parse(import_node_fs32.default.readFileSync(file, "utf8"));
+      const raw = JSON.parse(import_node_fs35.default.readFileSync(file, "utf8"));
       if (typeof raw?.appId !== "string" || raw.appId.length === 0) return null;
       return raw;
     } catch {
@@ -61283,16 +62675,16 @@ function createLarkBotBindingStore(personaRoot) {
   };
   const write = (personaId2, meta) => {
     const file = filePath(personaId2);
-    import_node_fs32.default.mkdirSync(import_node_path37.default.dirname(file), { recursive: true });
+    import_node_fs35.default.mkdirSync(import_node_path40.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
-    import_node_fs32.default.writeFileSync(tmp, JSON.stringify(meta, null, 2), { mode: 384 });
-    import_node_fs32.default.renameSync(tmp, file);
+    import_node_fs35.default.writeFileSync(tmp, JSON.stringify(meta, null, 2), { mode: 384 });
+    import_node_fs35.default.renameSync(tmp, file);
   };
   return {
     read,
     write,
     remove(personaId2) {
-      import_node_fs32.default.rmSync(filePath(personaId2), { force: true });
+      import_node_fs35.default.rmSync(filePath(personaId2), { force: true });
     },
     addRemovedChat(personaId2, chatId) {
       const meta = read(personaId2);
@@ -61444,8 +62836,8 @@ function createLarkBotCloudClient(opts) {
 }
 
 // src/lark-bot-connector/chat-router.ts
-var import_node_fs33 = __toESM(require("fs"), 1);
-var import_node_path38 = __toESM(require("path"), 1);
+var import_node_fs36 = __toESM(require("fs"), 1);
+var import_node_path41 = __toESM(require("path"), 1);
 init_protocol();
 var ERROR_REPLY_TEXT = "\u5904\u7406\u51FA\u9519\u4E86\uFF0C\u8BF7\u91CD\u8BD5";
 var LOCAL_TURN_RETRIES = 2;
@@ -61523,9 +62915,9 @@ function createLarkChatRouter(deps) {
           continue;
         }
         const dir = deps.mediaRootFor(env.chatId);
-        import_node_fs33.default.mkdirSync(dir, { recursive: true });
-        const p3 = import_node_path38.default.join(dir, `${safeMediaName(ownerMessageId)}-${i2}.${ext}`);
-        import_node_fs33.default.writeFileSync(p3, r2.data);
+        import_node_fs36.default.mkdirSync(dir, { recursive: true });
+        const p3 = import_node_path41.default.join(dir, `${safeMediaName(ownerMessageId)}-${i2}.${ext}`);
+        import_node_fs36.default.writeFileSync(p3, r2.data);
         lines.push(`[\u56FE\u7247: ${p3}]\uFF08\u7528 Read \u5DE5\u5177\u67E5\u770B\uFF09`);
       } catch (err) {
         deps.logger?.warn(`larkBot image fetch failed ${key}: ${err.message}`);
@@ -61546,9 +62938,9 @@ function createLarkChatRouter(deps) {
           continue;
         }
         const dir = deps.mediaRootFor(env.chatId);
-        import_node_fs33.default.mkdirSync(dir, { recursive: true });
-        const p3 = import_node_path38.default.join(dir, `${safeMediaName(ownerMessageId)}-${i2}-${safeAttachmentName(f2.name)}`);
-        import_node_fs33.default.writeFileSync(p3, r2.data);
+        import_node_fs36.default.mkdirSync(dir, { recursive: true });
+        const p3 = import_node_path41.default.join(dir, `${safeMediaName(ownerMessageId)}-${i2}-${safeAttachmentName(f2.name)}`);
+        import_node_fs36.default.writeFileSync(p3, r2.data);
         lines.push(`[\u6587\u4EF6: ${p3}]\uFF08\u7528 Read \u5DE5\u5177\u67E5\u770B\uFF09`);
       } catch (err) {
         deps.logger?.warn(`larkBot file fetch failed ${f2.key}: ${err.message}`);
@@ -62198,952 +63590,182 @@ function buildPersonaDispatchHandlers(deps) {
     "personaDispatch:get": get
   };
 }
-
-// src/dispatch/peer-forward.ts
-init_protocol();
-function wsUrlToHttp(url) {
-  if (url.startsWith("wss://")) return "https://" + url.slice("wss://".length);
-  if (url.startsWith("ws://")) return "http://" + url.slice("ws://".length);
-  return url;
-}
-var DISPATCH_POLL_INTERVAL_MS = 5e3;
-var DISPATCH_POLL_UNREACHABLE_MS = 6e5;
-var DISPATCH_POLL_TOTAL_MS = 864e5;
-var defaultSleep = (ms) => new Promise((r2) => setTimeout(r2, ms));
-async function forwardDispatchToPeer(args) {
-  const f2 = args.fetchImpl ?? fetch;
-  const sleep2 = args.sleepImpl ?? defaultSleep;
-  const base = wsUrlToHttp(args.contact.remoteUrl).replace(/\/+$/, "");
-  const url = `${base}/rpc/personaDispatch:run`;
-  let res;
-  try {
-    res = await f2(url, {
-      method: "POST",
-      headers: {
-        "content-type": "application/json",
-        authorization: `Bearer ${args.contact.connectToken}`
-      },
-      // 注意：不带 targetDeviceId —— B 端据此判定为本地执行（B 角色）。
-      body: JSON.stringify({
-        targetPersona: args.targetPersona,
-        prompt: args.prompt,
-        // T-20: 条件展开防 undefined 污染 JSON。远端 daemon handler 会再校验一次 model 合法性。
-        ...args.model ? { model: args.model } : {}
-      })
-    });
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    return { kind: "failure", reason: `forward to peer failed: ${msg}` };
-  }
-  let json;
-  try {
-    json = await res.json();
-  } catch {
-    return {
-      kind: "failure",
-      reason: `peer returned non-JSON response (HTTP ${res.status})`
-    };
-  }
-  if (json.ok === false) {
-    return { kind: "failure", reason: `peer rejected: ${json.error}: ${json.message}` };
-  }
-  if ("outcome" in json.result) return json.result.outcome;
-  const dispatchId = json.result.dispatchId;
-  let elapsed = 0;
-  let unreachableFor = 0;
-  while (elapsed < DISPATCH_POLL_TOTAL_MS) {
-    await sleep2(DISPATCH_POLL_INTERVAL_MS);
-    elapsed += DISPATCH_POLL_INTERVAL_MS;
-    const markUnreachable = () => {
-      unreachableFor += DISPATCH_POLL_INTERVAL_MS;
-      return unreachableFor >= DISPATCH_POLL_UNREACHABLE_MS ? {
-        kind: "failure",
-        reason: "peer unreachable while polling dispatch outcome (TARGET_UNREACHABLE)"
-      } : null;
-    };
-    let getRes;
-    try {
-      getRes = await f2(`${base}/rpc/personaDispatch:get`, {
-        method: "POST",
-        headers: {
-          "content-type": "application/json",
-          authorization: `Bearer ${args.contact.connectToken}`
-        },
-        body: JSON.stringify({ dispatchId })
-      });
-    } catch {
-      const dead = markUnreachable();
-      if (dead) return dead;
-      continue;
-    }
-    let getJson;
-    try {
-      getJson = await getRes.json();
-    } catch {
-      const dead = markUnreachable();
-      if (dead) return dead;
-      continue;
-    }
-    if (getJson.ok === false) {
-      if (getJson.error === ERROR_CODES.DISPATCH_NOT_FOUND) {
-        return { kind: "failure", reason: `peer lost dispatch ${dispatchId} (daemon restarted?)` };
-      }
-      const dead = markUnreachable();
-      if (dead) return dead;
-      continue;
-    }
-    unreachableFor = 0;
-    const { status, outcome } = getJson.result;
-    if (status === "completed" || status === "failed") {
-      return outcome ?? { kind: "failure", reason: "peer returned terminal status without outcome" };
-    }
-  }
-  return { kind: "failure", reason: "dispatch polling exceeded 24h (TIMEOUT)" };
-}
-async function forwardInboxPostToPeer(args) {
-  const f2 = args.fetchImpl ?? fetch;
-  const base = wsUrlToHttp(args.contact.remoteUrl).replace(/\/+$/, "");
-  const url = `${base}/rpc/inbox:postMessage`;
-  let res;
-  try {
-    res = await f2(url, {
-      method: "POST",
-      headers: {
-        "content-type": "application/json",
-        authorization: `Bearer ${args.contact.connectToken}`
-      },
-      body: JSON.stringify({
-        id: args.id,
-        text: args.text,
-        createdAt: args.createdAt,
-        ...args.origin ? { origin: args.origin } : {}
-      })
-    });
-  } catch (err) {
-    return { ok: false, error: err instanceof Error ? err.message : String(err) };
-  }
-  let json = null;
-  try {
-    json = await res.json();
-  } catch {
-    return { ok: false, error: `peer non-JSON (HTTP ${res.status})` };
-  }
-  if (res.status < 200 || res.status >= 300 || json?.ok === false) {
-    return { ok: false, error: json?.error ?? `HTTP ${res.status}` };
-  }
-  return { ok: true };
-}
-async function forwardPeerExecToPeer(args) {
-  const f2 = args.fetchImpl ?? fetch;
-  const base = wsUrlToHttp(args.contact.remoteUrl).replace(/\/+$/, "");
-  const url = `${base}/rpc/peerExec:run`;
-  const tunnelFail = (msg) => ({
-    type: "peerExec:run:ok",
-    stdout: "",
-    stderr: msg,
-    exitCode: null,
-    timedOut: false,
-    stdoutTruncated: false,
-    stderrTruncated: false
-  });
-  let res;
-  try {
-    res = await f2(url, {
-      method: "POST",
-      headers: {
-        "content-type": "application/json",
-        authorization: `Bearer ${args.contact.connectToken}`
-      },
-      body: JSON.stringify({ command: args.command, ...args.timeoutMs ? { timeoutMs: args.timeoutMs } : {} })
-    });
-  } catch (err) {
-    return tunnelFail(`forward to peer failed: ${err instanceof Error ? err.message : String(err)}`);
-  }
-  let json;
-  try {
-    json = await res.json();
-  } catch {
-    return tunnelFail(`peer returned non-JSON response (HTTP ${res.status})`);
-  }
-  if (json.ok === false) {
-    throw new ClawdError(json.error || ERROR_CODES.INTERNAL, json.message || json.error);
-  }
-  return json.result;
-}
-
-// src/tools/codex-history.ts
-var import_node_fs35 = __toESM(require("fs"), 1);
-var import_node_path40 = __toESM(require("path"), 1);
-
-// src/tools/transcript-search.ts
-var import_node_fs34 = __toESM(require("fs"), 1);
-var import_node_path39 = __toESM(require("path"), 1);
-var SNIPPET_PAD = 60;
-var INJECTED_ENVELOPE_RE = /^<(system-reminder|command-name|command-message|command-args|local-command-stdout|local-command-stderr|task-notification|user-prompt-submit-hook|environment_context|user_instructions)\b/;
-var CODEX_WRAPPER_RE = /<(related-dir|environment_context|user_instructions)>[\s\S]*?<\/\1>/g;
-function asRecord2(v3) {
-  return typeof v3 === "object" && v3 !== null ? v3 : null;
-}
-function textOfBlocks(content, types) {
-  if (!Array.isArray(content)) return null;
-  const parts = [];
-  for (const block of content) {
-    const b3 = asRecord2(block);
-    if (!b3 || typeof b3.type !== "string" || !types.includes(b3.type)) continue;
-    const text = b3.text;
-    if (typeof text === "string" && text !== "") parts.push(text);
-  }
-  return parts.length > 0 ? parts.join("\n") : null;
-}
-function lineToSearchableText(raw) {
-  const line = asRecord2(raw);
-  if (!line) return null;
-  if (line.type === "response_item") {
-    const payload = asRecord2(line.payload);
-    if (!payload || payload.type !== "message") return null;
-    const role = payload.role;
-    if (role !== "user" && role !== "assistant") return null;
-    const text2 = textOfBlocks(payload.content, ["input_text", "output_text"]);
-    if (text2 === null) return null;
-    if (role !== "user") return text2;
-    const stripped = text2.replace(CODEX_WRAPPER_RE, "").trim();
-    if (stripped === "") return null;
-    return INJECTED_ENVELOPE_RE.test(stripped) ? null : stripped;
-  }
-  if (line.type !== "user" && line.type !== "assistant") return null;
-  const message = asRecord2(line.message);
-  if (!message) return null;
-  const content = message.content;
-  const text = typeof content === "string" && content !== "" ? content : textOfBlocks(content, ["text"]);
-  if (text === null) return null;
-  if (line.type === "user" && (line.isMeta === true || line.isSynthetic === true)) return null;
-  if (line.type === "user" && INJECTED_ENVELOPE_RE.test(text.trimStart())) return null;
-  return text;
-}
-function escapeRegExp(s2) {
-  return s2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-function makeSnippet(text, at3, needleLength) {
-  const from = Math.max(0, at3 - SNIPPET_PAD);
-  const to = Math.min(text.length, at3 + needleLength + SNIPPET_PAD);
-  const body = text.slice(from, to).replace(/\s+/g, " ").trim();
-  return `${from > 0 ? "\u2026 " : ""}${body}${to < text.length ? " \u2026" : ""}`;
-}
-function searchTranscriptFile(file, query) {
-  let buf;
-  try {
-    buf = import_node_fs34.default.readFileSync(file);
-  } catch {
-    return null;
-  }
-  const haystack = buf.toString("latin1");
-  const needle = Buffer.from(query, "utf8").toString("latin1");
-  const re2 = new RegExp(escapeRegExp(needle), "gi");
-  let m3;
-  while ((m3 = re2.exec(haystack)) !== null) {
-    const lineStart = haystack.lastIndexOf("\n", m3.index) + 1;
-    let lineEnd = haystack.indexOf("\n", m3.index);
-    if (lineEnd < 0) lineEnd = haystack.length;
-    re2.lastIndex = lineEnd + 1;
-    let parsed;
-    try {
-      parsed = JSON.parse(Buffer.from(haystack.slice(lineStart, lineEnd), "latin1").toString("utf8"));
-    } catch {
-      continue;
-    }
-    const text = lineToSearchableText(parsed);
-    if (text === null) continue;
-    const at3 = text.toLowerCase().indexOf(query.toLowerCase());
-    if (at3 < 0) continue;
-    return makeSnippet(text, at3, query.length);
-  }
-  return null;
-}
-var ROLLOUT_NAME_RE = /-([0-9a-fA-F-]{36})\.jsonl$/;
-function createCodexRolloutLocator(roots) {
-  let index = null;
-  const walk2 = (dir, into) => {
-    let entries;
-    try {
-      entries = import_node_fs34.default.readdirSync(dir, { withFileTypes: true });
-    } catch {
-      return;
-    }
-    for (const entry of entries) {
-      const full = import_node_path39.default.join(dir, entry.name);
-      if (entry.isDirectory()) {
-        walk2(full, into);
-        continue;
-      }
-      const matched = ROLLOUT_NAME_RE.exec(entry.name);
-      if (matched) into.set(matched[1].toLowerCase(), full);
-    }
-  };
-  return (toolSessionId) => {
-    if (index === null) {
-      index = /* @__PURE__ */ new Map();
-      for (const root of roots) walk2(root, index);
-    }
-    return index.get(toolSessionId.toLowerCase()) ?? null;
-  };
-}
-
-// src/tools/codex-rollout.ts
-function rec2(v3) {
-  return v3 && typeof v3 === "object" && !Array.isArray(v3) ? v3 : void 0;
-}
-function str2(v3) {
-  return typeof v3 === "string" ? v3 : void 0;
-}
-function num2(v3) {
-  return typeof v3 === "number" && Number.isFinite(v3) ? v3 : void 0;
-}
-function parseLine(line) {
-  const t2 = line.trim();
-  if (!t2) return void 0;
-  try {
-    return rec2(JSON.parse(t2));
-  } catch {
-    return void 0;
-  }
-}
-function metaFrom(obj) {
-  if (obj.type !== "session_meta") return null;
-  const p3 = rec2(obj.payload);
-  const threadId = str2(p3?.id) ?? str2(p3?.session_id);
-  if (!p3 || !threadId) return null;
-  const meta = { threadId };
-  const cwd = str2(p3.cwd);
-  if (cwd) meta.cwd = cwd;
-  const createdAt = str2(p3.timestamp) ?? str2(obj.timestamp);
-  if (createdAt) meta.createdAt = createdAt;
-  const parent = str2(p3.parent_thread_id);
-  if (parent) meta.parentThreadId = parent;
-  const cli = str2(p3.cli_version);
-  if (cli) meta.cliVersion = cli;
-  return meta;
-}
-function parseCodexRolloutMeta(firstLine) {
-  const obj = parseLine(firstLine);
-  return obj ? metaFrom(obj) : null;
-}
-function firstUserMessageText(text) {
-  for (const line of text.split("\n")) {
-    const obj = parseLine(line);
-    if (!obj || obj.type !== "event_msg") continue;
-    const p3 = rec2(obj.payload);
-    if (p3?.type === "user_message") return str2(p3.message);
-  }
-  return void 0;
-}
-function outputText(output) {
-  if (typeof output === "string") return output;
-  if (Array.isArray(output)) {
-    return output.map((part) => typeof part === "string" ? part : str2(rec2(part)?.text) ?? "").join("");
-  }
-  return "";
-}
-function functionCallInput(name, rawArgs) {
-  let args = rawArgs;
-  if (typeof rawArgs === "string") {
-    try {
-      args = JSON.parse(rawArgs);
-    } catch {
-      args = { arguments: rawArgs };
-    }
-  }
-  const a2 = rec2(args) ?? {};
-  if (name === "exec_command" || name === "shell" || name === "container.exec") {
-    const cmd = a2.cmd ?? a2.command;
-    const command = Array.isArray(cmd) ? cmd.map(String).join(" ") : str2(cmd) ?? "";
-    return { tool: "commandExecution", input: { command } };
-  }
-  return { tool: name, input: args };
-}
-function parseCodexRollout(text) {
-  const out = { meta: null, messages: [], subagents: [], turns: [] };
-  const collabCallIds = /* @__PURE__ */ new Set();
-  for (const line of text.split("\n")) {
-    const obj = parseLine(line);
-    if (!obj) continue;
-    const ts = str2(obj.timestamp);
-    const p3 = rec2(obj.payload);
-    if (!p3) continue;
-    if (obj.type === "session_meta") {
-      if (!out.meta) out.meta = metaFrom(obj);
-      continue;
-    }
-    if (obj.type === "event_msg") {
-      switch (p3.type) {
-        case "user_message": {
-          const t2 = str2(p3.message);
-          if (t2) out.messages.push({ kind: "user-text", text: t2, raw: obj, ...ts ? { ts } : {} });
-          break;
-        }
-        case "agent_message": {
-          const t2 = str2(p3.message);
-          if (t2) out.messages.push({ kind: "assistant-text", text: t2, raw: obj, ...ts ? { ts } : {} });
-          break;
-        }
-        case "sub_agent_activity": {
-          if (p3.kind !== "started") break;
-          const toolUseId = str2(p3.event_id);
-          const agentId = str2(p3.agent_thread_id);
-          const agentPath = str2(p3.agent_path);
-          if (!toolUseId || !agentId || !agentPath) break;
-          const segments = agentPath.split("/").filter(Boolean);
-          const description = segments[segments.length - 1] ?? agentId;
-          out.subagents.push({ toolUseId, agentId, agentPath, description });
-          out.messages.push({
-            kind: "tool_call",
-            tool: "Agent",
-            toolUseId,
-            input: { agentId, description, agentPath },
-            raw: obj,
-            ...ts ? { ts } : {}
-          });
-          break;
-        }
-        case "task_complete":
-        case "turn_aborted": {
-          const durationMs = num2(p3.duration_ms);
-          const turnId = str2(p3.turn_id);
-          const reason = str2(p3.reason);
-          out.turns.push({
-            status: p3.type === "task_complete" ? "completed" : "interrupted",
-            ...turnId ? { turnId } : {},
-            ...durationMs !== void 0 ? { durationMs } : {},
-            ...reason ? { reason } : {}
-          });
-          out.messages.push({
-            kind: "turn-end",
-            raw: obj,
-            ...ts ? { ts } : {},
-            ...durationMs !== void 0 ? { durationMs } : {}
-          });
-          break;
-        }
-        default:
-          break;
-      }
-      continue;
-    }
-    if (obj.type === "response_item") {
-      switch (p3.type) {
-        case "function_call": {
-          const callId = str2(p3.call_id);
-          const name = str2(p3.name);
-          if (!callId || !name) break;
-          if (p3.namespace === "collaboration") {
-            collabCallIds.add(callId);
-            break;
-          }
-          const { tool, input } = functionCallInput(name, p3.arguments);
-          out.messages.push({ kind: "tool_call", tool, toolUseId: callId, input, raw: obj, ...ts ? { ts } : {} });
-          break;
-        }
-        case "custom_tool_call": {
-          const callId = str2(p3.call_id);
-          const name = str2(p3.name);
-          if (!callId || !name) break;
-          out.messages.push({
-            kind: "tool_call",
-            tool: name,
-            toolUseId: callId,
-            input: { input: str2(p3.input) ?? "" },
-            raw: obj,
-            ...ts ? { ts } : {}
-          });
-          break;
-        }
-        case "function_call_output":
-        case "custom_tool_call_output": {
-          const callId = str2(p3.call_id);
-          if (!callId || collabCallIds.has(callId)) break;
-          out.messages.push({
-            kind: "tool_result",
-            toolUseId: callId,
-            output: outputText(p3.output),
-            raw: obj,
-            ...ts ? { ts } : {}
-          });
-          break;
-        }
-        default:
-          break;
-      }
-      continue;
-    }
-  }
-  return out;
-}
-function subagentTerminalResult(started, child) {
-  const first = child.turns[0];
-  if (!first) return void 0;
-  if (first.status === "completed") return { kind: "tool_result", toolUseId: started.toolUseId };
-  return { kind: "tool_result", toolUseId: started.toolUseId, error: first.reason ?? "Codex subagent interrupted" };
-}
-
-// src/tools/codex-history.ts
-var CODEX_LIST_SESSIONS_LIMIT = 100;
-var CODEX_LIST_SESSIONS_SCAN_CAP = 4e3;
-var PEEK_BYTES = 8 * 1024;
-var TITLE_BYTES = 256 * 1024;
-function readHead(file, bytes) {
-  let fd;
-  try {
-    fd = import_node_fs35.default.openSync(file, "r");
-  } catch {
-    return null;
-  }
-  try {
-    const buf = Buffer.alloc(bytes);
-    const n2 = import_node_fs35.default.readSync(fd, buf, 0, bytes, 0);
-    return buf.subarray(0, n2).toString("utf8");
-  } catch {
-    return null;
-  } finally {
-    import_node_fs35.default.closeSync(fd);
-  }
-}
-function peekSessionCwd(head) {
-  if (!head.includes('"session_meta"')) return null;
-  const m3 = /"cwd":"((?:[^"\\]|\\.)*)"/.exec(head);
-  if (!m3) return null;
-  try {
-    return JSON.parse(`"${m3[1]}"`);
-  } catch {
-    return null;
-  }
+
+// src/dispatch/peer-forward.ts
+init_protocol();
+function wsUrlToHttp(url) {
+  if (url.startsWith("wss://")) return "https://" + url.slice("wss://".length);
+  if (url.startsWith("ws://")) return "http://" + url.slice("ws://".length);
+  return url;
 }
-function readFirstLine(file, max = 512 * 1024) {
-  let fd;
+var DISPATCH_POLL_INTERVAL_MS = 5e3;
+var DISPATCH_POLL_UNREACHABLE_MS = 6e5;
+var DISPATCH_POLL_TOTAL_MS = 864e5;
+var defaultSleep = (ms) => new Promise((r2) => setTimeout(r2, ms));
+async function forwardDispatchToPeer(args) {
+  const f2 = args.fetchImpl ?? fetch;
+  const sleep2 = args.sleepImpl ?? defaultSleep;
+  const base = wsUrlToHttp(args.contact.remoteUrl).replace(/\/+$/, "");
+  const url = `${base}/rpc/personaDispatch:run`;
+  let res;
   try {
-    fd = import_node_fs35.default.openSync(file, "r");
-  } catch {
-    return null;
+    res = await f2(url, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        authorization: `Bearer ${args.contact.connectToken}`
+      },
+      // 注意：不带 targetDeviceId —— B 端据此判定为本地执行（B 角色）。
+      body: JSON.stringify({
+        targetPersona: args.targetPersona,
+        prompt: args.prompt,
+        // T-20: 条件展开防 undefined 污染 JSON。远端 daemon handler 会再校验一次 model 合法性。
+        ...args.model ? { model: args.model } : {}
+      })
+    });
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return { kind: "failure", reason: `forward to peer failed: ${msg}` };
   }
+  let json;
   try {
-    const chunk = Buffer.alloc(64 * 1024);
-    const parts = [];
-    let total = 0;
-    while (total < max) {
-      const n2 = import_node_fs35.default.readSync(fd, chunk, 0, chunk.length, total);
-      if (n2 <= 0) break;
-      const nl = chunk.subarray(0, n2).indexOf(10);
-      if (nl >= 0) {
-        parts.push(Buffer.from(chunk.subarray(0, nl)));
-        return Buffer.concat(parts).toString("utf8");
-      }
-      parts.push(Buffer.from(chunk.subarray(0, n2)));
-      total += n2;
-    }
-    return total < max && parts.length > 0 ? Buffer.concat(parts).toString("utf8") : null;
+    json = await res.json();
   } catch {
-    return null;
-  } finally {
-    import_node_fs35.default.closeSync(fd);
+    return {
+      kind: "failure",
+      reason: `peer returned non-JSON response (HTTP ${res.status})`
+    };
   }
-}
-function readThreadNames(sharedHome) {
-  const names = /* @__PURE__ */ new Map();
-  if (!sharedHome) return names;
-  let raw;
-  try {
-    raw = import_node_fs35.default.readFileSync(import_node_path40.default.join(sharedHome, "session_index.jsonl"), "utf8");
-  } catch {
-    return names;
+  if (json.ok === false) {
+    return { kind: "failure", reason: `peer rejected: ${json.error}: ${json.message}` };
   }
-  for (const line of raw.split("\n")) {
-    if (!line.trim()) continue;
+  if ("outcome" in json.result) return json.result.outcome;
+  const dispatchId = json.result.dispatchId;
+  let elapsed = 0;
+  let unreachableFor = 0;
+  while (elapsed < DISPATCH_POLL_TOTAL_MS) {
+    await sleep2(DISPATCH_POLL_INTERVAL_MS);
+    elapsed += DISPATCH_POLL_INTERVAL_MS;
+    const markUnreachable = () => {
+      unreachableFor += DISPATCH_POLL_INTERVAL_MS;
+      return unreachableFor >= DISPATCH_POLL_UNREACHABLE_MS ? {
+        kind: "failure",
+        reason: "peer unreachable while polling dispatch outcome (TARGET_UNREACHABLE)"
+      } : null;
+    };
+    let getRes;
     try {
-      const o2 = JSON.parse(line);
-      if (typeof o2.id === "string" && typeof o2.thread_name === "string" && o2.thread_name) {
-        names.set(o2.id.toLowerCase(), o2.thread_name);
-      }
+      getRes = await f2(`${base}/rpc/personaDispatch:get`, {
+        method: "POST",
+        headers: {
+          "content-type": "application/json",
+          authorization: `Bearer ${args.contact.connectToken}`
+        },
+        body: JSON.stringify({ dispatchId })
+      });
     } catch {
+      const dead = markUnreachable();
+      if (dead) return dead;
+      continue;
     }
-  }
-  return names;
-}
-function walkRollouts(dir, visit) {
-  let entries;
-  try {
-    entries = import_node_fs35.default.readdirSync(dir, { withFileTypes: true });
-  } catch {
-    return true;
-  }
-  entries.sort((a2, b3) => a2.name < b3.name ? 1 : a2.name > b3.name ? -1 : 0);
-  for (const entry of entries) {
-    const full = import_node_path40.default.join(dir, entry.name);
-    if (entry.isDirectory()) {
-      if (!walkRollouts(full, visit)) return false;
-    } else if (ROLLOUT_NAME_RE.test(entry.name)) {
-      if (visit(full) === false) return false;
-    }
-  }
-  return true;
-}
-async function withSubagentResults(parent, parentThreadId, loadChild, logger) {
-  const messages = [];
-  const started = new Map(parent.subagents.map((s2) => [s2.toolUseId, s2]));
-  for (const m3 of parent.messages) {
-    messages.push(m3);
-    const sub = m3.kind === "tool_call" && m3.toolUseId ? started.get(m3.toolUseId) : void 0;
-    if (!sub) continue;
-    let text;
+    let getJson;
     try {
-      text = await loadChild(sub.agentId);
-    } catch (error) {
-      logger?.warn("codex subagent rollout unreadable", { childThreadId: sub.agentId, message: error.message });
+      getJson = await getRes.json();
+    } catch {
+      const dead = markUnreachable();
+      if (dead) return dead;
       continue;
     }
-    if (text === null) {
-      logger?.warn("codex subagent rollout not found", { parentThreadId, childThreadId: sub.agentId });
+    if (getJson.ok === false) {
+      if (getJson.error === ERROR_CODES.DISPATCH_NOT_FOUND) {
+        return { kind: "failure", reason: `peer lost dispatch ${dispatchId} (daemon restarted?)` };
+      }
+      const dead = markUnreachable();
+      if (dead) return dead;
       continue;
     }
-    const child = parseCodexRollout(text);
-    if (child.meta?.parentThreadId !== parentThreadId) {
-      logger?.warn("codex subagent rollout does not belong to parent", {
-        parentThreadId,
-        childThreadId: sub.agentId,
-        actualParent: child.meta?.parentThreadId ?? null
-      });
-      continue;
+    unreachableFor = 0;
+    const { status, outcome } = getJson.result;
+    if (status === "completed" || status === "failed") {
+      return outcome ?? { kind: "failure", reason: "peer returned terminal status without outcome" };
     }
-    const result = subagentTerminalResult(sub, child);
-    if (result) messages.push(result);
-  }
-  return messages;
-}
-function pageMessages(messages, args) {
-  const total = messages.length;
-  const limit = args.limit ?? total;
-  const offset = typeof args.offset === "number" ? Math.min(Math.max(0, args.offset), total) : Math.max(0, total - limit);
-  return { messages: messages.slice(offset, offset + limit), total, offset };
-}
-function subagentSummaries(parent) {
-  const seen = /* @__PURE__ */ new Set();
-  const out = [];
-  for (const s2 of parent.subagents) {
-    if (seen.has(s2.agentId)) continue;
-    seen.add(s2.agentId);
-    out.push({ subagentId: s2.agentId, summary: s2.description, messageCount: 0 });
   }
-  return out;
+  return { kind: "failure", reason: "dispatch polling exceeded 24h (TIMEOUT)" };
 }
-var CodexHistoryReader = class {
-  deps;
-  constructor(deps) {
-    this.deps = deps;
-  }
-  // 仍返回 []：projects/list 非 session-scoped、不知 tool，跨-tool 项目浏览器合并排后续。
-  // codex 旧会话仍能经 clawd 活跃列表(session:list, tool-agnostic) + read 打开。
-  async listProjects() {
-    return [];
-  }
-  async listSessions(args) {
-    const want = import_node_path40.default.resolve(args.projectPath);
-    const names = readThreadNames(this.deps.sharedHome);
-    const found = [];
-    let scanned = 0;
-    for (const root of this.deps.roots) {
-      const goOn = walkRollouts(root, (file) => {
-        if (++scanned > CODEX_LIST_SESSIONS_SCAN_CAP) return false;
-        const head = readHead(file, PEEK_BYTES);
-        const cwd = head === null ? null : peekSessionCwd(head);
-        if (!cwd || import_node_path40.default.resolve(cwd) !== want) return;
-        const first = readFirstLine(file);
-        const meta = first === null ? null : parseCodexRolloutMeta(first);
-        if (!meta) return;
-        let mtimeMs;
-        try {
-          mtimeMs = import_node_fs35.default.statSync(file).mtimeMs;
-        } catch {
-          return;
-        }
-        found.push({ file, threadId: meta.threadId, mtimeMs });
-      });
-      if (!goOn) break;
-    }
-    found.sort((a2, b3) => b3.mtimeMs - a2.mtimeMs);
-    return found.slice(0, CODEX_LIST_SESSIONS_LIMIT).map((f2) => {
-      let summary = names.get(f2.threadId.toLowerCase());
-      if (!summary) {
-        const head = readHead(f2.file, TITLE_BYTES);
-        summary = head === null ? void 0 : firstUserMessageText(head);
-      }
-      return {
-        toolSessionId: f2.threadId,
-        summary: summary || "(\u7A7A\u4F1A\u8BDD)",
-        messageCount: 0,
-        // 与此前 thread/list 一致：列表不数条数
-        updatedAt: new Date(f2.mtimeMs).toISOString()
-      };
-    });
-  }
-  async read(args) {
-    const locate = createCodexRolloutLocator(this.deps.roots);
-    const parent = this.parseThread(locate, args.toolSessionId);
-    const messages = await withSubagentResults(
-      parent,
-      args.toolSessionId,
-      async (agentId) => {
-        const file = locate(agentId);
-        return file ? import_node_fs35.default.readFileSync(file, "utf8") : null;
-      },
-      this.deps.logger
-    );
-    return pageMessages(messages, args);
-  }
-  async listSubagents(args) {
-    return subagentSummaries(this.parseThread(createCodexRolloutLocator(this.deps.roots), args.toolSessionId));
-  }
-  async readSubagent(args) {
-    const child = this.parseThread(createCodexRolloutLocator(this.deps.roots), args.subagentId);
-    if (child.meta?.threadId !== args.subagentId || child.meta.parentThreadId !== args.toolSessionId) {
-      throw new Error(
-        `Codex subagent thread ${args.subagentId} does not belong to parent thread ${args.toolSessionId}`
-      );
-    }
-    return { messages: child.messages };
-  }
-  computeRewindDiff() {
-    return { canRewind: false, files: [], totalInsertions: 0, totalDeletions: 0 };
-  }
-  listRewindableUserMessageIds() {
-    return [];
-  }
-  parseThread(locate, threadId) {
-    const file = locate(threadId);
-    if (!file) throw new Error(`Codex rollout not found for thread ${threadId}`);
-    return parseCodexRollout(import_node_fs35.default.readFileSync(file, "utf8"));
-  }
-};
-
-// src/cloud/gateway-client.ts
-init_protocol();
-init_protocol();
-
-// src/feishu-auth/central-client.ts
-var CentralClientError = class extends Error {
-  constructor(code, message, cause) {
-    super(message);
-    this.code = code;
-    this.cause = cause;
-    this.name = "CentralClientError";
-  }
-  code;
-  cause;
-};
-async function centralRequest(opts, path102, init) {
-  const f2 = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}${path102}`;
-  const ctrl = new AbortController();
-  const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
+async function forwardInboxPostToPeer(args) {
+  const f2 = args.fetchImpl ?? fetch;
+  const base = wsUrlToHttp(args.contact.remoteUrl).replace(/\/+$/, "");
+  const url = `${base}/rpc/inbox:postMessage`;
   let res;
   try {
     res = await f2(url, {
-      method: init.method,
+      method: "POST",
       headers: {
         "content-type": "application/json",
-        ...init.bearer ? { authorization: `Bearer ${init.bearer}` } : {}
+        authorization: `Bearer ${args.contact.connectToken}`
       },
-      ...init.body !== void 0 ? { body: JSON.stringify(init.body) } : {},
-      signal: ctrl.signal
+      body: JSON.stringify({
+        id: args.id,
+        text: args.text,
+        createdAt: args.createdAt,
+        ...args.origin ? { origin: args.origin } : {}
+      })
     });
   } catch (err) {
-    clearTimeout(timer);
-    throw new CentralClientError("NETWORK", `central server request failed: ${err.message}`, err);
-  }
-  clearTimeout(timer);
-  if (res.status === 401) {
-    throw new CentralClientError("UNAUTHORIZED", "login pass rejected by center");
-  }
-  if (!res.ok) {
-    let detail = "";
-    try {
-      const body = await res.json();
-      if (typeof body?.message === "string" && body.message) detail = `: ${body.message}`;
-    } catch {
-    }
-    throw new CentralClientError("API_ERROR", `central server HTTP ${res.status}${detail}`);
+    return { ok: false, error: err instanceof Error ? err.message : String(err) };
   }
+  let json = null;
   try {
-    return await res.json();
-  } catch (err) {
-    throw new CentralClientError("BAD_RESPONSE", "central server: invalid json response", err);
-  }
-}
-async function centralExchange(opts) {
-  const body = await centralRequest(opts, "/api/clawd-identity/exchange", {
-    method: "POST",
-    bearer: opts.loginPass,
-    body: { deviceId: opts.deviceId }
-  });
-  if (typeof body.token !== "string" || body.token.length === 0 || typeof body.ownerId !== "string" || typeof body.provider !== "string" || typeof body.displayName !== "string") {
-    throw new CentralClientError("BAD_RESPONSE", "exchange: missing token/ownerId/provider/displayName");
-  }
-  const deviceUrl = typeof body.deviceUrl === "string" && body.deviceUrl.length > 0 ? body.deviceUrl : null;
-  return { token: body.token, ownerId: body.ownerId, provider: body.provider, displayName: body.displayName, deviceUrl };
-}
-async function centralGetPublicKey(opts) {
-  const body = await centralRequest(opts, "/api/clawd-identity/public-key", {
-    method: "GET"
-  });
-  if (typeof body.publicKeyPem !== "string" || !body.publicKeyPem.includes("PUBLIC KEY")) {
-    throw new CentralClientError("BAD_RESPONSE", "public-key: missing or malformed publicKeyPem");
+    json = await res.json();
+  } catch {
+    return { ok: false, error: `peer non-JSON (HTTP ${res.status})` };
   }
-  return { publicKeyPem: body.publicKeyPem };
-}
-async function centralUpsertDevice(opts) {
-  const body = await centralRequest(opts, "/api/clawd-identity/devices/self", {
-    method: "PUT",
-    bearer: opts.loginPass,
-    body: {
-      ...opts.url ? { url: opts.url } : {},
-      ...opts.name ? { name: opts.name } : {}
-    }
-  });
-  if (body.ok !== true) {
-    throw new CentralClientError("BAD_RESPONSE", "upsertDevice: server did not ack ok");
+  if (res.status < 200 || res.status >= 300 || json?.ok === false) {
+    return { ok: false, error: json?.error ?? `HTTP ${res.status}` };
   }
   return { ok: true };
 }
-async function centralPrincipalStatus(opts) {
-  const query = `provider=${encodeURIComponent(opts.provider)}&ownerId=${encodeURIComponent(opts.ownerId)}`;
-  const body = await centralRequest(opts, `/api/clawd-identity/principal-status?${query}`, {
-    method: "GET"
-  });
-  if (typeof body.active !== "boolean") {
-    throw new CentralClientError("BAD_RESPONSE", "principal-status: missing active flag");
-  }
-  return { active: body.active };
-}
-async function centralGetApiKey(opts) {
-  const body = await centralRequest(opts, "/api/persona-cloud/api-key", {
-    method: "GET",
-    bearer: opts.loginPass
+async function forwardPeerExecToPeer(args) {
+  const f2 = args.fetchImpl ?? fetch;
+  const base = wsUrlToHttp(args.contact.remoteUrl).replace(/\/+$/, "");
+  const url = `${base}/rpc/peerExec:run`;
+  const tunnelFail = (msg) => ({
+    type: "peerExec:run:ok",
+    stdout: "",
+    stderr: msg,
+    exitCode: null,
+    timedOut: false,
+    stdoutTruncated: false,
+    stderrTruncated: false
   });
-  if (body.apiKey !== null && typeof body.apiKey !== "string") {
-    throw new CentralClientError("BAD_RESPONSE", "api-key: apiKey must be string or null");
-  }
-  return {
-    apiKey: body.apiKey,
-    createdAt: typeof body.createdAt === "string" ? body.createdAt : null,
-    // 中心没配就是 null —— 不当成错误，key 本身照样有效
-    gatewayUrl: typeof body.gatewayUrl === "string" ? body.gatewayUrl : null
-  };
-}
-async function centralGetThread(opts) {
-  const f2 = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}/api/persona-cloud/threads/${encodeURIComponent(opts.threadId)}`;
-  const ctrl = new AbortController();
-  const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
   let res;
   try {
-    res = await f2(url, { method: "GET", headers: { authorization: `Bearer ${opts.loginPass}` }, signal: ctrl.signal });
+    res = await f2(url, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        authorization: `Bearer ${args.contact.connectToken}`
+      },
+      body: JSON.stringify({ command: args.command, ...args.timeoutMs ? { timeoutMs: args.timeoutMs } : {} })
+    });
   } catch (err) {
-    clearTimeout(timer);
-    throw new CentralClientError("NETWORK", `central server request failed: ${err.message}`, err);
-  }
-  clearTimeout(timer);
-  if (res.status === 404) return null;
-  if (res.status === 401) throw new CentralClientError("UNAUTHORIZED", "login pass rejected by center");
-  if (!res.ok) {
-    let detail = "";
-    try {
-      const body = await res.json();
-      if (typeof body?.message === "string" && body.message) detail = `: ${body.message}`;
-    } catch {
-    }
-    throw new CentralClientError("API_ERROR", `central server HTTP ${res.status}${detail}`);
-  }
-  return await res.text();
-}
-async function centralIssueApiKey(opts) {
-  const body = await centralRequest(opts, "/api/persona-cloud/api-key", {
-    method: "POST",
-    bearer: opts.loginPass
-  });
-  if (typeof body.apiKey !== "string" || body.apiKey.length === 0) {
-    throw new CentralClientError("BAD_RESPONSE", "api-key: missing apiKey");
-  }
-  if (typeof body.createdAt !== "string" || body.createdAt.length === 0) {
-    throw new CentralClientError("BAD_RESPONSE", "api-key: missing createdAt");
-  }
-  return {
-    apiKey: body.apiKey,
-    createdAt: body.createdAt,
-    gatewayUrl: typeof body.gatewayUrl === "string" ? body.gatewayUrl : null
-  };
-}
-async function centralRevokeApiKey(opts) {
-  const body = await centralRequest(opts, "/api/persona-cloud/api-key", {
-    method: "DELETE",
-    bearer: opts.loginPass
-  });
-  if (typeof body.revoked !== "boolean") {
-    throw new CentralClientError("BAD_RESPONSE", "api-key: revoked must be boolean");
+    return tunnelFail(`forward to peer failed: ${err instanceof Error ? err.message : String(err)}`);
   }
-  return { revoked: body.revoked };
-}
-async function centralListDevices(opts) {
-  const body = await centralRequest(opts, "/api/clawd-identity/devices", {
-    method: "GET",
-    bearer: opts.loginPass
-  });
-  if (!Array.isArray(body.devices)) {
-    throw new CentralClientError("BAD_RESPONSE", "devices: missing devices array");
+  let json;
+  try {
+    json = await res.json();
+  } catch {
+    return tunnelFail(`peer returned non-JSON response (HTTP ${res.status})`);
   }
-  const out = [];
-  for (const raw of body.devices) {
-    const d2 = raw;
-    if (typeof d2.deviceId !== "string" || typeof d2.name !== "string" || typeof d2.url !== "string") {
-      throw new CentralClientError("BAD_RESPONSE", "devices: malformed device entry");
-    }
-    out.push({ deviceId: d2.deviceId, name: d2.name, url: d2.url });
+  if (json.ok === false) {
+    throw new ClawdError(json.error || ERROR_CODES.INTERNAL, json.message || json.error);
   }
-  return out;
-}
-async function centralConnectorsMine(opts) {
-  const body = await centralRequest(opts, "/api/persona-cloud/connectors/mine", {
-    method: "POST",
-    bearer: opts.loginPass,
-    body: { personaId: opts.personaId, connectors: opts.connectors }
-  });
-  if (!Array.isArray(body.connectors)) throw new CentralClientError("BAD_RESPONSE", "connectors/mine: missing connectors array");
-  return { connectors: body.connectors };
-}
-async function centralConnectorFill(opts) {
-  const body = await centralRequest(opts, "/api/persona-cloud/connectors/fields", {
-    method: "PUT",
-    bearer: opts.loginPass,
-    body: { connector: opts.connector, values: opts.values }
-  });
-  if (body.ok !== true) throw new CentralClientError("BAD_RESPONSE", "connectors/fields: server did not ack ok");
-}
-async function centralGithubAuthOauthStart(opts) {
-  const body = await centralRequest(opts, "/api/persona-cloud/github/oauth/start", {
-    method: "POST",
-    bearer: opts.loginPass,
-    body: { ...opts.returnTo ? { returnTo: opts.returnTo } : {} }
-  });
-  if (typeof body.authUrl !== "string" || !body.authUrl) throw new CentralClientError("BAD_RESPONSE", "github/oauth/start: missing authUrl");
-  return { authUrl: body.authUrl };
-}
-async function centralGithubAuthToken(opts) {
-  const body = await centralRequest(opts, "/api/persona-cloud/github/oauth/token", {
-    method: "POST",
-    bearer: opts.loginPass,
-    body: {}
-  });
-  if (body.token === null || body.token === void 0) return void 0;
-  if (typeof body.token !== "string" || !body.token) throw new CentralClientError("BAD_RESPONSE", "github/oauth/token: malformed token");
-  return { token: body.token, login: typeof body.login === "string" ? body.login : "" };
+  return json.result;
 }
 
 // src/cloud/gateway-client.ts
+init_protocol();
+init_protocol();
 var CLOUD_WORKSPACE_SLOT = "{{WORKSPACE}}";
 var CLOUD_TURN_HEADER = "x-clawd-turn";
 var CLOUD_TURN_HEADER_START = "start";
@@ -63154,7 +63776,7 @@ var GATEWAY_ROUTES = {
   sessionMirror: (personaId2, sessionId) => `/p/${encodeURIComponent(personaId2)}/session/${encodeURIComponent(sessionId)}/mirror`,
   // 调用方自己那块盘的用量（design 2026-09-19-cloud-volume-usage §3.3）：同样按人、不挂 persona
   volume: () => "/me/volume",
-  // 云 persona 运行看板的数据（design 2026-09-23-cloud-persona-metrics §3.6）：任何有效 key 都能看（C1）
+  // 云 persona 运行看板的数据（design 2026-09-23-cloud-persona-metrics §3.6）：只给发布者与管理员（gateway 问中心，design 2026-09-24-cloud-persona-conversations §3.2）
   metrics: (personaId2) => `/metrics/${encodeURIComponent(personaId2)}`
 };
 var METRICS_TIMEOUT_MS = 3e4;
@@ -63205,13 +63827,17 @@ var CloudGatewayClient = class {
     if (!apiKey) throw new CloudApiKeyRequiredError();
     return { apiKey, gatewayUrl };
   }
-  async listPersonas() {
+  /**
+   * `healthzTimeoutMs`：只给 /healthz 那一趟定上限，**问到地址之后才开始计**（上云页的线上状态用；design 2026-09-24-deploy-unpublish）。
+   * 中心那一跳（locate）有它自己的上限，不归这里管。不给 = 同以前，不设
+   */
+  async listPersonas(opts = {}) {
     const { gatewayUrl } = await this.locate();
-    return this.fetchDeployments(gatewayUrl);
+    return this.fetchDeployments(gatewayUrl, opts.healthzTimeoutMs ? AbortSignal.timeout(opts.healthzTimeoutMs) : void 0);
   }
   /** /healthz 的登记表 → official 行。gatewayUrl 由调用方定：listPersonas 从中心拿，personaConnectors 用 persona 文件里的 */
-  async fetchDeployments(gatewayUrl) {
-    const res = await this.fetchImpl(gatewayUrl + GATEWAY_ROUTES.healthz());
+  async fetchDeployments(gatewayUrl, signal) {
+    const res = await this.fetchImpl(gatewayUrl + GATEWAY_ROUTES.healthz(), ...signal ? [{ signal }] : []);
     if (!res.ok) throw new Error(`gateway /healthz \u56DE ${res.status}`);
     const body = await res.json();
     const rows = Array.isArray(body.deployments) ? body.deployments : [];
@@ -63510,68 +64136,7 @@ function openHttpLineStream(opts) {
 init_protocol();
 
 // src/tools/codex-cloud-session.ts
-var import_node_fs36 = __toESM(require("fs"), 1);
-
-// src/tools/codex-cloud-history.ts
-function personaIdFromCloudCwd(cwd) {
-  const m3 = /\/p\/([^/?#]+)(?:[/?#]|$)/.exec(cwd);
-  if (!m3) return void 0;
-  try {
-    return decodeURIComponent(m3[1]);
-  } catch {
-    return void 0;
-  }
-}
-var CloudCodexHistoryReader = class {
-  constructor(client, logger) {
-    this.client = client;
-    this.logger = logger;
-  }
-  client;
-  logger;
-  async listProjects() {
-    return [];
-  }
-  /** 云 persona 没有「关联已有 thread」的动线：会话列表就是本机的会话记录 */
-  async listSessions() {
-    return [];
-  }
-  async read(args) {
-    const parent = await this.fetchThread(args.toolSessionId);
-    const messages = await withSubagentResults(
-      parent,
-      args.toolSessionId,
-      (agentId) => this.client.fetchRollout(agentId),
-      this.logger
-    );
-    return pageMessages(messages, args);
-  }
-  async listSubagents(args) {
-    return subagentSummaries(await this.fetchThread(args.toolSessionId));
-  }
-  async readSubagent(args) {
-    const child = await this.fetchThread(args.subagentId);
-    if (child.meta?.threadId !== args.subagentId || child.meta.parentThreadId !== args.toolSessionId) {
-      throw new Error(
-        `Codex subagent thread ${args.subagentId} does not belong to parent thread ${args.toolSessionId}`
-      );
-    }
-    return { messages: child.messages };
-  }
-  computeRewindDiff() {
-    return { canRewind: false, files: [], totalInsertions: 0, totalDeletions: 0 };
-  }
-  listRewindableUserMessageIds() {
-    return [];
-  }
-  async fetchThread(threadId) {
-    const text = await this.client.fetchRollout(threadId);
-    if (text === null) throw new Error(`Codex rollout not found for thread ${threadId}`);
-    return parseCodexRollout(text);
-  }
-};
-
-// src/tools/codex-cloud-session.ts
+var import_node_fs37 = __toESM(require("fs"), 1);
 function cloudThreadParams(ctx, paths) {
   const { model: _model, ...base } = threadStartParams(ctx);
   const developerInstructions = [ctx.extraSystemPrompt, workDirPrompt(paths.workDir, ctx.personaMode ?? "owner")].filter((x2) => Boolean(x2)).join("\n\n");
@@ -63628,7 +64193,7 @@ function cloudImageInput(deps) {
     const mime = lookupMime(p3);
     if (!mime.startsWith("image/")) return null;
     try {
-      const bytes = (deps.readFile ?? import_node_fs36.default.readFileSync)(p3);
+      const bytes = (deps.readFile ?? import_node_fs37.default.readFileSync)(p3);
       return { type: "image", url: `data:${mime};base64,${bytes.toString("base64")}` };
     } catch (e) {
       deps.logger?.warn("cloud image attachment unreadable", { path: p3, message: e.message });
@@ -63861,37 +64426,11 @@ var PiRpcClient = class {
 // src/tools/pi-session.ts
 var import_node_child_process11 = require("child_process");
 var import_node_crypto12 = require("crypto");
-var import_node_fs37 = __toESM(require("fs"), 1);
-var import_node_path41 = __toESM(require("path"), 1);
+var import_node_fs38 = __toESM(require("fs"), 1);
+var import_node_path42 = __toESM(require("path"), 1);
 
 // src/tools/pi-events.ts
 init_protocol();
-
-// src/tools/pi-json.ts
-function rec3(v3) {
-  return typeof v3 === "object" && v3 !== null && !Array.isArray(v3) ? v3 : void 0;
-}
-function str3(v3) {
-  return typeof v3 === "string" ? v3 : void 0;
-}
-function num3(v3) {
-  return typeof v3 === "number" && Number.isFinite(v3) ? v3 : void 0;
-}
-function arr(v3) {
-  return Array.isArray(v3) ? v3 : [];
-}
-function contentText(v3, imagePlaceholder = "") {
-  if (typeof v3 === "string") return v3;
-  return arr(v3).map((b3) => {
-    const r2 = rec3(b3);
-    if (!r2) return "";
-    if (r2.type === "text") return str3(r2.text) ?? "";
-    if (r2.type === "image") return imagePlaceholder;
-    return "";
-  }).filter(Boolean).join("\n");
-}
-
-// src/tools/pi-events.ts
 function createPiTranslatorState() {
   return { assistantSeq: 0, aborted: false };
 }
@@ -63902,23 +64441,23 @@ function translatePiEvent(ev, st2) {
       return [];
     }
     case "message_start": {
-      if (rec3(ev.message)?.role === "assistant") st2.assistantSeq += 1;
+      if (rec2(ev.message)?.role === "assistant") st2.assistantSeq += 1;
       return [];
     }
     case "message_update":
-      return messageUpdate(rec3(ev.assistantMessageEvent), st2);
+      return messageUpdate(rec2(ev.assistantMessageEvent), st2);
     case "message_end":
-      return messageEnd(rec3(ev.message), st2);
+      return messageEnd(rec2(ev.message), st2);
     case "tool_execution_start": {
-      const toolUseId = str3(ev.toolCallId);
-      const tool = str3(ev.toolName);
+      const toolUseId = str2(ev.toolCallId);
+      const tool = str2(ev.toolName);
       if (!toolUseId || !tool) return [];
       return [{ kind: "tool_call", toolUseId, tool, toolKind: PI_TOOL_ID, input: ev.args ?? {} }];
     }
     case "tool_execution_end": {
-      const toolUseId = str3(ev.toolCallId);
+      const toolUseId = str2(ev.toolCallId);
       if (!toolUseId) return [];
-      const text = contentText(rec3(ev.result)?.content);
+      const text = contentText(rec2(ev.result)?.content);
       const out = { kind: "tool_result", toolUseId, output: text };
       if (ev.isError === true) out.error = text || "tool failed";
       return [out];
@@ -63934,9 +64473,9 @@ function translatePiEvent(ev, st2) {
 }
 function messageUpdate(e, st2) {
   if (!e) return [];
-  const delta = str3(e.delta);
+  const delta = str2(e.delta);
   if (!delta) return [];
-  const partialId = `${st2.assistantSeq}-${num3(e.contentIndex) ?? 0}`;
+  const partialId = `${st2.assistantSeq}-${num2(e.contentIndex) ?? 0}`;
   if (e.type === "text_delta") return [{ kind: "text", text: delta, partialId }];
   if (e.type === "thinking_delta") return [{ kind: "thinking", text: delta, partialId }];
   return [];
@@ -63945,32 +64484,32 @@ function messageEnd(m3, st2) {
   if (!m3 || m3.role !== "assistant") return [];
   const out = [];
   for (const b3 of arr(m3.content)) {
-    const block = rec3(b3);
+    const block = rec2(b3);
     if (!block) continue;
     if (block.type === "thinking") {
-      const t2 = str3(block.thinking);
+      const t2 = str2(block.thinking);
       if (t2) out.push({ kind: "thinking", text: t2 });
     } else if (block.type === "text") {
-      const t2 = str3(block.text);
+      const t2 = str2(block.text);
       if (t2) out.push({ kind: "text", text: t2 });
     }
   }
   const patch = {};
-  const model = str3(m3.model);
-  const provider = str3(m3.provider);
+  const model = str2(m3.model);
+  const provider = str2(m3.provider);
   if (model) patch.resolvedModel = provider ? `${provider}/${model}` : model;
-  const u2 = rec3(m3.usage);
-  if (u2 && (num3(u2.totalTokens) ?? 0) > 0) {
+  const u2 = rec2(m3.usage);
+  if (u2 && (num2(u2.totalTokens) ?? 0) > 0) {
     patch.contextUsage = {
-      inputTokens: num3(u2.input) ?? 0,
-      outputTokens: num3(u2.output) ?? 0,
-      ...num3(u2.cacheRead) !== void 0 ? { cacheReadTokens: num3(u2.cacheRead) } : {},
-      ...num3(u2.cacheWrite) !== void 0 ? { cacheCreateTokens: num3(u2.cacheWrite) } : {}
+      inputTokens: num2(u2.input) ?? 0,
+      outputTokens: num2(u2.output) ?? 0,
+      ...num2(u2.cacheRead) !== void 0 ? { cacheReadTokens: num2(u2.cacheRead) } : {},
+      ...num2(u2.cacheWrite) !== void 0 ? { cacheCreateTokens: num2(u2.cacheWrite) } : {}
     };
   }
   if (patch.resolvedModel || patch.contextUsage) out.push({ kind: "meta_update", patch });
-  const stop = str3(m3.stopReason);
-  const err = str3(m3.errorMessage);
+  const stop = str2(m3.stopReason);
+  const err = str2(m3.errorMessage);
   if (stop === "aborted") {
     st2.aborted = true;
   } else if (stop === "error" || err) {
@@ -64038,8 +64577,8 @@ function drivePiSession(opts) {
     opts.onTurnCompleted?.("failure");
   };
   const handleUiRequest = (ev) => {
-    const method = str3(ev.method);
-    const id = str3(ev.id);
+    const method = str2(ev.method);
+    const id = str2(ev.id);
     logger?.warn("pi extension_ui_request unexpected in clawd session", { method });
     if (id && (method === "select" || method === "confirm" || method === "input" || method === "editor")) {
       client.send({ type: "extension_ui_response", id, cancelled: true });
@@ -64054,7 +64593,7 @@ function drivePiSession(opts) {
       }
       if (ev.type === "agent_settled") busy = false;
       if (ev.type === "response") {
-        logger?.warn("pi response without pending id", { command: str3(ev.command), error: str3(ev.error) });
+        logger?.warn("pi response without pending id", { command: str2(ev.command), error: str2(ev.error) });
         return;
       }
       if (ev.type === "extension_ui_request") {
@@ -64076,15 +64615,15 @@ function drivePiSession(opts) {
   });
   const ready = client.request({ type: "get_state" }).then((r2) => {
     if (!r2.success) throw new Error(r2.error ?? "get_state failed");
-    const data = rec3(r2.data);
-    const sid = str3(data?.sessionId) ?? sessionId;
+    const data = rec2(r2.data);
+    const sid = str2(data?.sessionId) ?? sessionId;
     if (sid !== sessionId) logger?.error("pi sessionId mismatch", { expected: sessionId, actual: sid });
-    const model = rec3(data?.model);
+    const model = rec2(data?.model);
     const patch = {};
-    const mid = str3(model?.id);
-    const prov = str3(model?.provider);
+    const mid = str2(model?.id);
+    const prov = str2(model?.provider);
     if (mid && mid !== "unknown") patch.resolvedModel = prov ? `${prov}/${mid}` : mid;
-    const cw = num3(model?.contextWindow);
+    const cw = num2(model?.contextWindow);
     if (cw && cw > 0) patch.contextWindowSize = cw;
     const events = [{ kind: "session_init", toolSessionId: sid }];
     if (patch.resolvedModel || patch.contextWindowSize) events.push({ kind: "meta_update", patch });
@@ -64155,8 +64694,8 @@ ${dirs.map((d2) => `- ${d2}`).join("\n")}`;
 function createPiSession(ctx, sink, deps = {}) {
   const cmd = process.env.PI_BIN ?? "pi";
   const sessionId = ctx.toolSessionId ?? (0, import_node_crypto12.randomUUID)();
-  const skillsDir = import_node_path41.default.join(ctx.cwd, ".claude", "skills");
-  const exists = deps.skillsDirExists ?? ((d2) => import_node_fs37.default.existsSync(d2));
+  const skillsDir = import_node_path42.default.join(ctx.cwd, ".claude", "skills");
+  const exists = deps.skillsDirExists ?? ((d2) => import_node_fs38.default.existsSync(d2));
   const args = buildPiArgs(ctx, {
     sessionId,
     skillsDir: exists(skillsDir) ? skillsDir : void 0,
@@ -64199,201 +64738,6 @@ function createPiSession(ctx, sink, deps = {}) {
   return driver.session;
 }
 
-// src/tools/pi-history.ts
-var import_node_fs38 = __toESM(require("fs"), 1);
-var import_node_os12 = __toESM(require("os"), 1);
-var import_node_path42 = __toESM(require("path"), 1);
-var PI_LIST_SESSIONS_LIMIT = 100;
-var PI_LIST_SESSIONS_SCAN_CAP = 4e3;
-function piAgentDir(env = process.env) {
-  return env.PI_CODING_AGENT_DIR || import_node_path42.default.join(import_node_os12.default.homedir(), ".pi", "agent");
-}
-function piSessionsRoot(env = process.env) {
-  return import_node_path42.default.join(piAgentDir(env), "sessions");
-}
-function encodePiCwd(cwd) {
-  return `--${cwd.replace(/^[\\/]+/, "").replace(/[\\/:]/g, "-")}--`;
-}
-function piProjectSessionDir(sessionsRoot, cwd) {
-  return import_node_path42.default.join(sessionsRoot, encodePiCwd(cwd));
-}
-function findInDir(dir, toolSessionId) {
-  let names;
-  try {
-    names = import_node_fs38.default.readdirSync(dir);
-  } catch {
-    return null;
-  }
-  const suffix = `_${toolSessionId}.jsonl`;
-  const hit = names.filter((n2) => n2.endsWith(suffix)).sort().at(-1);
-  return hit ? import_node_path42.default.join(dir, hit) : null;
-}
-function locatePiSessionFile(sessionsRoot, cwd, toolSessionId) {
-  const direct = findInDir(piProjectSessionDir(sessionsRoot, cwd), toolSessionId);
-  if (direct) return direct;
-  let dirs;
-  try {
-    dirs = import_node_fs38.default.readdirSync(sessionsRoot, { withFileTypes: true }).filter((d2) => d2.isDirectory()).map((d2) => d2.name);
-  } catch {
-    return null;
-  }
-  for (const d2 of dirs) {
-    const hit = findInDir(import_node_path42.default.join(sessionsRoot, d2), toolSessionId);
-    if (hit) return hit;
-  }
-  return null;
-}
-function parseLine2(line) {
-  const t2 = line.trim();
-  if (!t2) return null;
-  try {
-    return rec3(JSON.parse(t2)) ?? null;
-  } catch {
-    return null;
-  }
-}
-function parsePiSession(text) {
-  let meta = null;
-  const entries = /* @__PURE__ */ new Map();
-  let last = null;
-  for (const line of text.split("\n")) {
-    const o2 = parseLine2(line);
-    if (!o2) continue;
-    if (o2.type === "session") {
-      if (!meta) {
-        const timestamp = str3(o2.timestamp);
-        meta = { id: str3(o2.id) ?? "", cwd: str3(o2.cwd) ?? "", ...timestamp ? { timestamp } : {} };
-      }
-      continue;
-    }
-    const id = str3(o2.id);
-    if (!id) continue;
-    entries.set(id, o2);
-    last = o2;
-  }
-  const chain = [];
-  const seen = /* @__PURE__ */ new Set();
-  let cur = last;
-  while (cur) {
-    const id = str3(cur.id);
-    if (seen.has(id)) break;
-    seen.add(id);
-    chain.push(cur);
-    const pid = str3(cur.parentId);
-    cur = pid ? entries.get(pid) ?? null : null;
-  }
-  chain.reverse();
-  const messages = [];
-  for (const e of chain) {
-    if (e.type !== "message") continue;
-    const m3 = rec3(e.message);
-    if (!m3) continue;
-    const ts = str3(e.timestamp);
-    const base = { raw: e, uuid: str3(e.id), ...ts ? { ts } : {} };
-    switch (m3.role) {
-      case "user": {
-        const t2 = contentText(m3.content, "[image]");
-        if (t2) messages.push({ kind: "user-text", text: t2, ...base });
-        break;
-      }
-      case "assistant": {
-        for (const b3 of arr(m3.content)) {
-          const block = rec3(b3);
-          if (!block) continue;
-          if (block.type === "text") {
-            const t2 = str3(block.text);
-            if (t2) messages.push({ kind: "assistant-text", text: t2, ...base });
-          } else if (block.type === "toolCall") {
-            const toolUseId = str3(block.id);
-            const tool = str3(block.name);
-            if (toolUseId && tool) messages.push({ kind: "tool_call", tool, toolUseId, input: block.arguments ?? {}, ...base });
-          }
-        }
-        if (str3(m3.stopReason) !== "toolUse") messages.push({ kind: "turn-end", ...base });
-        break;
-      }
-      case "toolResult": {
-        const toolUseId = str3(m3.toolCallId);
-        if (!toolUseId) break;
-        const t2 = contentText(m3.content);
-        const msg = { kind: "tool_result", toolUseId, output: t2, ...base };
-        if (m3.isError === true) msg.error = t2 || "tool failed";
-        messages.push(msg);
-        break;
-      }
-      default:
-        break;
-    }
-  }
-  return { meta, messages };
-}
-var PiHistoryReader = class {
-  constructor(deps) {
-    this.deps = deps;
-  }
-  deps;
-  // projects/list 非 session-scoped、不知 tool（同 codex 的取舍）
-  async listProjects() {
-    return [];
-  }
-  async listSessions(args) {
-    const want = import_node_path42.default.resolve(args.projectPath);
-    const dir = piProjectSessionDir(this.deps.sessionsRoot, want);
-    let names;
-    try {
-      names = import_node_fs38.default.readdirSync(dir).filter((n2) => n2.endsWith(".jsonl"));
-    } catch {
-      return [];
-    }
-    const found = [];
-    let scanned = 0;
-    for (const n2 of names) {
-      if (++scanned > PI_LIST_SESSIONS_SCAN_CAP) break;
-      const file = import_node_path42.default.join(dir, n2);
-      const head = parseLine2(readFirstLine(file) ?? "");
-      if (!head || head.type !== "session") continue;
-      const cwd = str3(head.cwd);
-      const id = str3(head.id);
-      if (!cwd || !id || import_node_path42.default.resolve(cwd) !== want) continue;
-      let mtimeMs;
-      try {
-        mtimeMs = import_node_fs38.default.statSync(file).mtimeMs;
-      } catch {
-        continue;
-      }
-      found.push({ file, id, mtimeMs });
-    }
-    found.sort((a2, b3) => b3.mtimeMs - a2.mtimeMs);
-    return found.slice(0, PI_LIST_SESSIONS_LIMIT).map((f2) => {
-      const parsed = parsePiSession(import_node_fs38.default.readFileSync(f2.file, "utf8"));
-      const firstUser = parsed.messages.find((m3) => m3.kind === "user-text");
-      return {
-        toolSessionId: f2.id,
-        summary: firstUser?.text?.slice(0, 80) || "(\u7A7A\u4F1A\u8BDD)",
-        messageCount: parsed.messages.length,
-        updatedAt: new Date(f2.mtimeMs).toISOString()
-      };
-    });
-  }
-  async read(args) {
-    const file = locatePiSessionFile(this.deps.sessionsRoot, args.cwd, args.toolSessionId);
-    if (!file) throw new Error(`pi session not found for ${args.toolSessionId}`);
-    return pageMessages(parsePiSession(import_node_fs38.default.readFileSync(file, "utf8")).messages, args);
-  }
-  async listSubagents(_args) {
-    return [];
-  }
-  async readSubagent(args) {
-    throw new Error(`pi has no subagent threads (${args.subagentId})`);
-  }
-  computeRewindDiff() {
-    return { canRewind: false, files: [], totalInsertions: 0, totalDeletions: 0 };
-  }
-  listRewindableUserMessageIds() {
-    return [];
-  }
-};
-
 // src/tools/pi.ts
 var PI_DEFAULT_CONTEXT_WINDOW = 128e3;
 var PI_THINKING_EFFORTS = [
@@ -64422,20 +64766,20 @@ async function probePi(env = process.env) {
   return { available: false };
 }
 function mapPiModels(raw) {
-  const models = arr(rec3(raw)?.models).map(rec3).filter((m3) => m3 !== void 0);
-  const providers = new Set(models.map((m3) => str3(m3.provider)).filter(Boolean));
+  const models = arr(rec2(raw)?.models).map(rec2).filter((m3) => m3 !== void 0);
+  const providers = new Set(models.map((m3) => str2(m3.provider)).filter(Boolean));
   const out = [];
   for (const m3 of models) {
-    const id = str3(m3.id);
-    const provider = str3(m3.provider);
+    const id = str2(m3.id);
+    const provider = str2(m3.provider);
     if (!id || !provider) continue;
-    const cw = num3(m3.contextWindow);
+    const cw = num2(m3.contextWindow);
     const levels = arr(m3.thinkingLevels).filter((v3) => typeof v3 === "string");
     const efforts = levels.length ? levels.map((v3) => PI_THINKING_EFFORTS.find((e) => e.value === v3) ?? { value: v3, label: v3 }) : m3.reasoning === true ? PI_THINKING_EFFORTS : [PI_THINKING_EFFORTS[0]];
     out.push({
       id: `${provider}/${id}`,
       // 与 --model 同一串
-      label: str3(m3.name) || id,
+      label: str2(m3.name) || id,
       contextWindowSize: cw && cw > 0 ? cw : PI_DEFAULT_CONTEXT_WINDOW,
       efforts,
       // 分组按 provider；只有一个 provider 时不分组（一个横跨全表的标题没信息量，同 codex）
@@ -64501,18 +64845,18 @@ async function queryPiModels(deps = {}) {
   try {
     const r2 = await race(client.request({ type: "get_available_models" }));
     if (!r2.success) throw new Error(r2.error ?? "get_available_models failed");
-    const models = arr(rec3(r2.data)?.models).map(rec3).filter((m3) => m3 !== void 0);
+    const models = arr(rec2(r2.data)?.models).map(rec2).filter((m3) => m3 !== void 0);
     const enriched = [];
     for (const m3 of models) {
-      const provider = str3(m3.provider);
-      const id = str3(m3.id);
+      const provider = str2(m3.provider);
+      const id = str2(m3.id);
       let thinkingLevels;
       if (provider && id && !timedOut) {
         try {
           const set = await race(client.request({ type: "set_model", provider, modelId: id }));
           if (set.success) {
             const lv = await race(client.request({ type: "get_available_thinking_levels" }));
-            const levels = arr(rec3(lv.data)?.levels).filter((v3) => typeof v3 === "string");
+            const levels = arr(rec2(lv.data)?.levels).filter((v3) => typeof v3 === "string");
             if (lv.success && levels.length > 0) thinkingLevels = levels;
           }
         } catch {
@@ -64634,42 +64978,6 @@ function createCloudPiSession(ctx, sink, deps) {
   return driver.session;
 }
 
-// src/tools/pi-cloud-history.ts
-var CloudPiHistoryReader = class {
-  constructor(client, logger) {
-    this.client = client;
-    this.logger = logger;
-  }
-  client;
-  logger;
-  async listProjects() {
-    return [];
-  }
-  /** 云 persona 没有「关联已有会话」的动线：会话列表就是本机的会话记录 */
-  async listSessions() {
-    return [];
-  }
-  async read(args) {
-    const text = await this.client.fetchRollout(args.toolSessionId);
-    if (text === null) throw new Error(`pi session not found for ${args.toolSessionId}`);
-    const parsed = parsePiSession(text);
-    if (!parsed.meta) this.logger?.warn("cloud pi session has no header line", { toolSessionId: args.toolSessionId });
-    return pageMessages(parsed.messages, args);
-  }
-  async listSubagents(_args) {
-    return [];
-  }
-  async readSubagent(args) {
-    throw new Error(`pi has no subagent threads (${args.subagentId})`);
-  }
-  computeRewindDiff() {
-    return { canRewind: false, files: [], totalInsertions: 0, totalDeletions: 0 };
-  }
-  listRewindableUserMessageIds() {
-    return [];
-  }
-};
-
 // src/tools/pi-cloud.ts
 var CLOUD_APPROVAL2 = { id: "never", label: "Full Access", description: "\u4E91\u4E0A\u65E0\u4EBA\u503C\u5B88\uFF1A\u4ECE\u4E0D\u8BE2\u95EE\uFF0C\u81EA\u4E3B\u6267\u884C" };
 var CLOUD_PI_CAPABILITIES = {
@@ -71686,6 +71994,7 @@ var METHOD_GRANT_MAP = {
   "deploy:finishScan": ADMIN_ANY,
   "deploy:release": ADMIN_ANY,
   "deploy:rerunJob": ADMIN_ANY,
+  "deploy:unpublish": ADMIN_ANY,
   // cloud:connectors:*（云 persona 卡片上的连接器；design 2026-09-11-mcp-connector）：
   // 拿本机登录凭证向中心代查 / 代填使用者本人的凭据，guest 一律够不着
   "cloud:connectors:list": ADMIN_ANY,
@@ -71899,6 +72208,7 @@ var HUMAN_ONLY_METHODS = [
   "deploy:release",
   "deploy:putSecret",
   "deploy:rerunJob",
+  "deploy:unpublish",
   "githubAuth:oauthStart",
   "githubAuth:authorize"
 ];
@@ -71943,7 +72253,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.581".length > 0 ? "0.2.581" : "dev";
+var version = "0.2.583".length > 0 ? "0.2.583" : "dev";
 
 // src/cli-probe/probe.ts
 var fs80 = __toESM(require("fs"), 1);
@@ -75624,8 +75934,27 @@ async function startDaemon(config) {
     githubIdentity,
     githubApi: (token) => createGithubApi({ token }),
     org: PERSONA_REPO_ORG,
+    // 发布者认领（design 2026-09-24-cloud-persona-conversations §3.1）：身份由中心从登录票里取；409 = 名字是别人的
+    claimPublisher: async (personaId2) => {
+      const loginPass = ownerIdentityStore.read()?.loginPass;
+      if (!loginPass) throw new Error("\u8FD8\u6CA1\u767B\u5F55 clawd\uFF1A\u5148\u5728\u8BBE\u7F6E\u91CC\u767B\u5F55\u98DE\u4E66\uFF0C\u518D\u53D1\u5E03");
+      try {
+        await centralClaimPublisher({ api: config.clawosApi ?? DEFAULT_CLAWOS_API, loginPass, personaId: personaId2 });
+        return "ok";
+      } catch (err) {
+        if (err instanceof CentralClientError && err.status === 409) return "taken";
+        throw new Error(`\u5411\u4E2D\u5FC3\u767B\u8BB0\u53D1\u5E03\u8005\u5931\u8D25\uFF1A${err.message}`);
+      }
+    },
     now: () => Date.now(),
     warn: (msg, meta) => logger.warn(msg, meta),
+    // 在不在线上 = gateway 正式登记表里有没有它（design 2026-09-24-deploy-unpublish §3.3）：跟 persona 列表的云卡片同一个来源。
+    // 拉不到（没登录飞书 / gateway 不通 / healthz 5s 没回）→ undefined，页面不给下线按钮也不撤「线上」标。
+    // 失败上界：中心那一跳自带 15s，healthz 这一趟 5s——deploy:get 要保证页面打得开，gateway 接了连接不回时不能挂到 undici 默认的 300s
+    cloudOnline: (personaId2) => cloudGateway.listPersonas({ healthzTimeoutMs: 5e3 }).then(
+      (list) => list.some((p3) => p3.personaId === personaId2),
+      () => void 0
+    ),
     startScan: (personaId2, scanBase, scanId) => {
       const baseLines = scanBase.base ? [
         `\u672C\u6B21\u662F**${SCAN_BASE_LABEL[scanBase.kind]}**\uFF1A\u53EA\u770B\u8DDF\u7EBF\u4E0A\u6B63\u8DD1\u90A3\u7248\u7684\u5DEE\u522B\uFF0C`,
@@ -75757,13 +76086,19 @@ async function startDaemon(config) {
   const viewerAssetLoader = tryLoadViewerAssets(logger);
   const shareUiAssetLoader = tryLoadShareUi(logger);
   const dashboardPages = loadDashboardPages(logger);
+  const dashboardApi = () => config.clawosApi ?? DEFAULT_CLAWOS_API;
   const dashboardRoutes = createDashboardRoutes({
     getSecret: () => authFile.token,
     loadPageHtml: (page) => dashboardPages.get(page) ?? null,
-    gateway: {
-      personas: async () => (await cloudGateway.listPersonas()).map((p3) => p3.personaId),
-      metrics: (q3) => cloudGateway.fetchMetrics(q3)
-    }
+    data: createDashboardData({
+      loginPass: () => ownerIdentityStore.read()?.loginPass ?? null,
+      registeredPersonas: async () => (await cloudGateway.listPersonas()).map((p3) => p3.personaId),
+      visiblePersonas: (loginPass) => centralVisiblePersonas({ api: dashboardApi(), loginPass }),
+      metrics: (q3) => cloudGateway.fetchMetrics(q3),
+      threads: (loginPass, q3) => centralPersonaThreads({ api: dashboardApi(), loginPass, ...q3 }),
+      thread: (loginPass, q3) => centralPersonaThread({ api: dashboardApi(), loginPass, ...q3 }),
+      logger
+    })
   });
   const httpRouter = createHttpRouter({
     authResolver,