@clawos-dev/clawd 0.2.602 → 0.2.604

package/dist/cli.cjs

@@ -62563,6 +62563,81 @@ var SubscriptionChannelStore = class {
   }
 };
 
+// src/tools/subscription-channels-apply.ts
+var import_node_fs36 = __toESM(require("fs"), 1);
+var import_node_os13 = __toESM(require("os"), 1);
+var import_node_path41 = __toESM(require("path"), 1);
+var TABLE_HEADER = /^\s*\[\[?\s*([A-Za-z0-9_.-]+)\s*\]\]?\s*(?:#.*)?$/;
+var KEY_LINE = /^\s*([A-Za-z0-9_.-]+)\s*=/;
+function stripCodexProvider(text) {
+  const out = [];
+  let inProviderSection = false;
+  for (const line of text.split("\n")) {
+    const headerMatch = TABLE_HEADER.exec(line);
+    if (headerMatch) {
+      const section = headerMatch[1].trim();
+      inProviderSection = section === "model_providers" || section.startsWith("model_providers.");
+      if (inProviderSection) continue;
+      out.push(line);
+      continue;
+    }
+    if (inProviderSection) continue;
+    const keyMatch = KEY_LINE.exec(line);
+    if (keyMatch) {
+      const key = keyMatch[1].trim();
+      if (key === "model_provider" || key.startsWith("model_providers.")) {
+        continue;
+      }
+    }
+    out.push(line);
+  }
+  return out.join("\n").trim();
+}
+function applyCodexSubscriptionChannel(opts) {
+  const codexHome = opts.codexHome || process.env.CODEX_HOME || import_node_path41.default.join(import_node_os13.default.homedir(), ".codex");
+  import_node_fs36.default.mkdirSync(codexHome, { recursive: true });
+  const configFile = import_node_path41.default.join(codexHome, "config.toml");
+  const original = import_node_fs36.default.existsSync(configFile) ? import_node_fs36.default.readFileSync(configFile, "utf8") : "";
+  const rest = stripCodexProvider(original);
+  let content;
+  if (opts.channel) {
+    const ch = opts.channel;
+    content = [
+      'model_provider = "cliproxyapi"',
+      ...rest ? ["", rest] : [],
+      "",
+      "[model_providers.cliproxyapi]",
+      'name = "cliproxyapi"',
+      `base_url = ${JSON.stringify(ch.baseUrl)}`,
+      'wire_api = "responses"',
+      `auth = { command = "echo", args = [${JSON.stringify(ch.apiKey)}] }`,
+      ""
+    ].join("\n");
+  } else {
+    content = [
+      'model_provider = "openai"',
+      ...rest ? ["", rest] : [],
+      ""
+    ].join("\n");
+  }
+  const tmpFile = `${configFile}.tmp.${Date.now()}`;
+  import_node_fs36.default.writeFileSync(tmpFile, content, { mode: 384 });
+  import_node_fs36.default.renameSync(tmpFile, configFile);
+}
+function applyPiSubscriptionChannel(opts) {
+  const agentDir = opts.agentDir || process.env.PI_CODING_AGENT_DIR || import_node_path41.default.join(import_node_os13.default.homedir(), ".pi", "agent");
+  if (!import_node_fs36.default.existsSync(agentDir)) return false;
+  const configFile = import_node_path41.default.join(agentDir, "cliproxyapi.json");
+  if (opts.channel) {
+    const data = { baseUrl: opts.channel.baseUrl, apiKey: opts.channel.apiKey };
+    const tmp = `${configFile}.tmp.${Date.now()}`;
+    import_node_fs36.default.writeFileSync(tmp, JSON.stringify(data, null, 2) + "\n", { mode: 384 });
+    import_node_fs36.default.renameSync(tmp, configFile);
+    return true;
+  }
+  return false;
+}
+
 // src/deploy/local-probe.ts
 function pickVersion(s2) {
   return /(\d+)\.(\d+)(?:\.(\d+))?/.exec(s2)?.[0];
@@ -62611,10 +62686,10 @@ async function probeLocalVersion(exec, pkg) {
 
 // src/tools/shell-path.ts
 var import_node_child_process10 = require("child_process");
-var import_node_os13 = __toESM(require("os"), 1);
+var import_node_os14 = __toESM(require("os"), 1);
 function refreshPathFromLoginShell() {
   if (process.platform === "win32") return;
-  const shell = process.env.SHELL ?? import_node_os13.default.userInfo().shell ?? "/bin/zsh";
+  const shell = process.env.SHELL ?? import_node_os14.default.userInfo().shell ?? "/bin/zsh";
   try {
     const out = (0, import_node_child_process10.execFileSync)(shell, ["-ilc", 'command echo -n "$PATH"'], {
       encoding: "utf8",
@@ -63160,15 +63235,15 @@ async function refreshTunnelUrlOnStartup(deps) {
 }
 
 // src/lark-bot-connector/binding-store.ts
-var import_node_fs36 = __toESM(require("fs"), 1);
-var import_node_path41 = __toESM(require("path"), 1);
+var import_node_fs37 = __toESM(require("fs"), 1);
+var import_node_path42 = __toESM(require("path"), 1);
 function createLarkBotBindingStore(personaRoot) {
-  const filePath = (personaId2) => import_node_path41.default.join(personaRoot, safeFileName(personaId2), ".clawd", "lark-bot.json");
+  const filePath = (personaId2) => import_node_path42.default.join(personaRoot, safeFileName(personaId2), ".clawd", "lark-bot.json");
   const read = (personaId2) => {
     const file = filePath(personaId2);
-    if (!import_node_fs36.default.existsSync(file)) return null;
+    if (!import_node_fs37.default.existsSync(file)) return null;
     try {
-      const raw = JSON.parse(import_node_fs36.default.readFileSync(file, "utf8"));
+      const raw = JSON.parse(import_node_fs37.default.readFileSync(file, "utf8"));
       if (typeof raw?.appId !== "string" || raw.appId.length === 0) return null;
       return raw;
     } catch {
@@ -63177,16 +63252,16 @@ function createLarkBotBindingStore(personaRoot) {
   };
   const write = (personaId2, meta) => {
     const file = filePath(personaId2);
-    import_node_fs36.default.mkdirSync(import_node_path41.default.dirname(file), { recursive: true });
+    import_node_fs37.default.mkdirSync(import_node_path42.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
-    import_node_fs36.default.writeFileSync(tmp, JSON.stringify(meta, null, 2), { mode: 384 });
-    import_node_fs36.default.renameSync(tmp, file);
+    import_node_fs37.default.writeFileSync(tmp, JSON.stringify(meta, null, 2), { mode: 384 });
+    import_node_fs37.default.renameSync(tmp, file);
   };
   return {
     read,
     write,
     remove(personaId2) {
-      import_node_fs36.default.rmSync(filePath(personaId2), { force: true });
+      import_node_fs37.default.rmSync(filePath(personaId2), { force: true });
     },
     addRemovedChat(personaId2, chatId) {
       const meta = read(personaId2);
@@ -63338,8 +63413,8 @@ function createLarkBotCloudClient(opts) {
 }
 
 // src/lark-bot-connector/chat-router.ts
-var import_node_fs37 = __toESM(require("fs"), 1);
-var import_node_path42 = __toESM(require("path"), 1);
+var import_node_fs38 = __toESM(require("fs"), 1);
+var import_node_path43 = __toESM(require("path"), 1);
 init_protocol();
 var ERROR_REPLY_TEXT = "\u5904\u7406\u51FA\u9519\u4E86\uFF0C\u8BF7\u91CD\u8BD5";
 var LOCAL_TURN_RETRIES = 2;
@@ -63417,9 +63492,9 @@ function createLarkChatRouter(deps) {
           continue;
         }
         const dir = deps.mediaRootFor(env.chatId);
-        import_node_fs37.default.mkdirSync(dir, { recursive: true });
-        const p3 = import_node_path42.default.join(dir, `${safeMediaName(ownerMessageId)}-${i2}.${ext}`);
-        import_node_fs37.default.writeFileSync(p3, r2.data);
+        import_node_fs38.default.mkdirSync(dir, { recursive: true });
+        const p3 = import_node_path43.default.join(dir, `${safeMediaName(ownerMessageId)}-${i2}.${ext}`);
+        import_node_fs38.default.writeFileSync(p3, r2.data);
         lines.push(`[\u56FE\u7247: ${p3}]\uFF08\u7528 Read \u5DE5\u5177\u67E5\u770B\uFF09`);
       } catch (err) {
         deps.logger?.warn(`larkBot image fetch failed ${key}: ${err.message}`);
@@ -63440,9 +63515,9 @@ function createLarkChatRouter(deps) {
           continue;
         }
         const dir = deps.mediaRootFor(env.chatId);
-        import_node_fs37.default.mkdirSync(dir, { recursive: true });
-        const p3 = import_node_path42.default.join(dir, `${safeMediaName(ownerMessageId)}-${i2}-${safeAttachmentName(f2.name)}`);
-        import_node_fs37.default.writeFileSync(p3, r2.data);
+        import_node_fs38.default.mkdirSync(dir, { recursive: true });
+        const p3 = import_node_path43.default.join(dir, `${safeMediaName(ownerMessageId)}-${i2}-${safeAttachmentName(f2.name)}`);
+        import_node_fs38.default.writeFileSync(p3, r2.data);
         lines.push(`[\u6587\u4EF6: ${p3}]\uFF08\u7528 Read \u5DE5\u5177\u67E5\u770B\uFF09`);
       } catch (err) {
         deps.logger?.warn(`larkBot file fetch failed ${f2.key}: ${err.message}`);
@@ -64276,6 +64351,8 @@ var GATEWAY_ROUTES = {
   session: (personaId2) => `/p/${encodeURIComponent(personaId2)}/session`,
   sessionSend: (personaId2, sessionId) => `/p/${encodeURIComponent(personaId2)}/session/${encodeURIComponent(sessionId)}`,
   sessionMirror: (personaId2, sessionId) => `/p/${encodeURIComponent(personaId2)}/session/${encodeURIComponent(sessionId)}/mirror`,
+  eventSession: (personaId2) => `/p/${encodeURIComponent(personaId2)}/session/events`,
+  eventSend: (personaId2, sessionId) => `/p/${encodeURIComponent(personaId2)}/session/events/${encodeURIComponent(sessionId)}`,
   // 调用方自己那块盘的用量（design 2026-09-19-cloud-volume-usage §3.3）：同样按人、不挂 persona
   volume: () => "/me/volume",
   // 云 persona 运行看板的数据（design 2026-09-23-cloud-persona-metrics §3.6）：只给发布者与管理员（gateway 问中心，design 2026-09-24-cloud-persona-conversations §3.2）
@@ -64396,6 +64473,22 @@ var CloudGatewayClient = class {
       logger: this.deps.logger
     });
   }
+  async openEventSession(personaId2, opts) {
+    const { apiKey, gatewayUrl } = await this.credentials();
+    return openHttpEventSession({
+      fetchImpl: this.fetchImpl,
+      gatewayUrl,
+      apiKey,
+      personaId: personaId2,
+      engineSessionId: opts.toolSessionId,
+      instructions: opts.instructions,
+      purpose: opts.purpose,
+      expectedEngine: opts.expectedEngine,
+      effort: opts.effort,
+      personaMode: opts.personaMode,
+      logger: this.deps.logger
+    });
+  }
   /**
    * 看板数据（design 2026-09-23-cloud-persona-metrics §3.8）：GET /metrics/<persona>?window&entry，**原样回**状态码与 body——
    * 形状真源在 gateway 的 cloud-persona-metrics，daemon 只是替浏览器拿本机 api key 转一跳。拿不到 key / 连不上 / 超时 → 抛（路由折成 502）。
@@ -64433,6 +64526,149 @@ var CloudGatewayClient = class {
     return CloudVolumeUsageSchema.parse(body.volume);
   }
 };
+function openHttpEventSession(opts) {
+  const { fetchImpl, gatewayUrl, apiKey, personaId: personaId2, engineSessionId, instructions, purpose, effort, personaMode, expectedEngine, logger } = opts;
+  const headers = { authorization: `Bearer ${apiKey}`, "content-type": "application/json" };
+  const abort = new AbortController();
+  const eventCbs = [];
+  const controlCbs = [];
+  const closeCbs = [];
+  const earlyEvents = [];
+  const earlyControls = [];
+  let closed = false;
+  let readyControl = null;
+  let errorControl = null;
+  let sessionId = null;
+  let resolveReady;
+  let rejectReady;
+  const ready = new Promise((resolve9, reject) => {
+    resolveReady = resolve9;
+    rejectReady = reject;
+  });
+  void ready.catch(() => {
+  });
+  let sendChain = Promise.resolve();
+  const emitControl = (control) => {
+    if (control.kind === "ready") readyControl = control;
+    if (control.kind === "error") errorControl = control;
+    if (!controlCbs.length) earlyControls.push(control);
+    for (const cb of controlCbs) cb(control);
+  };
+  const finish = (message) => {
+    if (closed) return;
+    if (message) emitControl({ kind: "error", message });
+    closed = true;
+    rejectReady(new Error(message ?? "event session closed"));
+    abort.abort();
+    for (const cb of closeCbs) cb();
+  };
+  void (async () => {
+    try {
+      const res = await fetchImpl(gatewayUrl + GATEWAY_ROUTES.eventSession(personaId2), {
+        method: "POST",
+        headers,
+        body: JSON.stringify({ expectedEngine, ...engineSessionId ? { engineSessionId } : {}, ...instructions ? { instructions } : {}, ...purpose ? { purpose } : {}, ...effort ? { effort } : {}, ...personaMode ? { personaMode } : {} }),
+        signal: abort.signal
+      });
+      if (!res.ok || !res.body) {
+        let message = `gateway \u56DE ${res.status}`;
+        try {
+          const body = await res.json();
+          if (typeof body.message === "string") message = body.message;
+          if (body.error === "SESSION_VERSION_EXPIRED" && !message.includes("SESSION_VERSION_EXPIRED")) message = `SESSION_VERSION_EXPIRED: ${message}`;
+        } catch {
+        }
+        finish(message);
+        return;
+      }
+      const reader = res.body.getReader();
+      const decoder = new TextDecoder();
+      let pending = "";
+      for (; ; ) {
+        const { value, done } = await reader.read();
+        if (done) break;
+        pending += decoder.decode(value, { stream: true });
+        const lines = pending.split("\n");
+        pending = lines.pop() ?? "";
+        for (const line of lines) {
+          if (!line.trim()) continue;
+          const data = JSON.parse(line);
+          if (data.clawd === "events") {
+            const events = ParsedEventSchema.array().parse(data.events);
+            if (!eventCbs.length) earlyEvents.push(events);
+            for (const cb of eventCbs) cb(events);
+            continue;
+          }
+          const control = parseControlLine(line);
+          if (!control) throw new Error("gateway event stream contains an unknown line");
+          if (control.kind === "ready") {
+            if (!control.session) throw new Error("gateway ready line has no session id");
+            if (control.engine !== expectedEngine) {
+              finish(control.engine ? `SESSION_VERSION_EXPIRED: \u5F53\u524D Pod \u662F ${control.engine}\uFF0C\u8FD9\u6761\u4F1A\u8BDD\u9700\u8981 ${expectedEngine}` : "gateway \u7684 ready \u63A7\u5236\u884C\u6CA1\u5E26 engine\uFF0Cgateway \u592A\u8001\uFF0C\u5148\u5347 gateway");
+              return;
+            }
+            sessionId = control.session;
+            resolveReady();
+          }
+          emitControl(control);
+          if (control.kind === "error") {
+            finish();
+            return;
+          }
+        }
+      }
+      finish();
+    } catch (e) {
+      if (!closed) {
+        logger?.warn("cloud event stream failed", { message: e.message });
+        finish(`\u4E91\u4E0A\u4E8B\u4EF6\u901A\u9053\u51FA\u9519\uFF1A${e.message}`);
+      }
+    }
+  })();
+  return {
+    send(command) {
+      const next = sendChain.then(async () => {
+        await ready;
+        if (closed || !sessionId) throw new Error("event session closed");
+        const res = await fetchImpl(gatewayUrl + GATEWAY_ROUTES.eventSend(personaId2, sessionId), { method: "POST", headers, body: JSON.stringify(command) });
+        if (!res.ok) {
+          let message = `gateway \u56DE ${res.status}`;
+          try {
+            const body = await res.json();
+            if (typeof body.message === "string") message = body.message;
+          } catch {
+          }
+          finish(message);
+          throw new Error(message);
+        }
+      });
+      sendChain = next.catch(() => {
+      });
+      return next;
+    },
+    onEvents(cb) {
+      const first = !eventCbs.length;
+      eventCbs.push(cb);
+      if (first) for (const events of earlyEvents.splice(0)) cb(events);
+    },
+    onControl(cb) {
+      const first = !controlCbs.length;
+      controlCbs.push(cb);
+      if (first) for (const control of earlyControls.splice(0)) cb(control);
+      else {
+        if (readyControl) cb(readyControl);
+        if (errorControl) cb(errorControl);
+      }
+    },
+    onClose(cb) {
+      closeCbs.push(cb);
+      if (closed) cb();
+    },
+    close() {
+      finish();
+    }
+  };
+}
 function parseControlLine(line) {
   let o2;
   try {
@@ -64652,55 +64888,27 @@ function openHttpLineStream(opts) {
 init_protocol();
 
 // src/tools/codex-cloud-session.ts
-var import_node_fs38 = __toESM(require("fs"), 1);
-function cloudThreadParams(ctx, paths) {
-  const { model: _model, ...base } = threadStartParams(ctx);
-  const developerInstructions = ctx.titleOnly ? "\u53EA\u6839\u636E\u7528\u6237\u6D88\u606F\u8FD4\u56DE\u7B80\u77ED\u6807\u9898\u3002\u4E0D\u8981\u8C03\u7528\u5DE5\u5177\u3001\u8BFB\u53D6\u6587\u4EF6\u3001\u8BBF\u95EE\u7F51\u7EDC\u6216\u4FEE\u6539\u4EFB\u4F55\u5185\u5BB9\u3002" : [ctx.extraSystemPrompt, workDirPrompt(paths.workDir, ctx.personaMode ?? "owner")].filter((x2) => Boolean(x2)).join("\n\n");
-  return { ...base, ...paths.model ? { model: paths.model } : {}, cwd: paths.personaDir, approvalPolicy: "never", sandbox: ctx.titleOnly ? "read-only" : "danger-full-access", developerInstructions };
-}
-function deferredLineStream() {
-  let target = null;
-  let closed = false;
-  const pending = [];
-  const lineCbs = [];
-  const closeCbs = [];
-  const finish = () => {
-    if (closed) return;
-    closed = true;
-    for (const cb of closeCbs) cb();
-  };
-  return {
-    attach(t2) {
-      if (closed) {
-        t2.close();
-        return;
-      }
-      target = t2;
-      t2.onLine((l2) => {
-        for (const cb of lineCbs) cb(l2);
-      });
-      t2.onClose(finish);
-      for (const line of pending.splice(0)) t2.write(line);
-    },
-    write(line) {
-      if (closed) return;
-      if (target) target.write(line);
-      else pending.push(line);
-    },
-    onLine(cb) {
-      lineCbs.push(cb);
-    },
-    onClose(cb) {
-      closeCbs.push(cb);
-      if (closed) cb();
-    },
-    close() {
-      if (closed) return;
-      target?.close();
-      finish();
-    }
-  };
+var import_node_fs39 = __toESM(require("fs"), 1);
+
+// src/tools/cloud-portable-input.ts
+async function portableCloudInput(text, resolvers) {
+  const markers = [...text.matchAll(/\[attachment:image:(https?:\/\/[^\]]+)\]/g)];
+  let result = text;
+  for (const match of markers) {
+    const url = match[1];
+    let dataUrl;
+    const codex = resolvers.resolveCodexImage?.(url);
+    if (codex?.type === "image" && codex.url.startsWith("data:")) dataUrl = codex.url;
+    if (!dataUrl && resolvers.fetchPiImage) {
+      const pi = await resolvers.fetchPiImage(url).catch(() => null);
+      if (pi) dataUrl = `data:${pi.mimeType};base64,${pi.data}`;
+    }
+    if (dataUrl) result = result.replace(match[0], `[attachment:image:${dataUrl}]`);
+  }
+  return result;
 }
+
+// src/tools/codex-cloud-session.ts
 function cloudImageInput(deps) {
   return (url) => {
     const secret = deps.getSignSecret?.();
@@ -64709,7 +64917,7 @@ function cloudImageInput(deps) {
     const mime = lookupMime(p3);
     if (!mime.startsWith("image/")) return null;
     try {
-      const bytes = (deps.readFile ?? import_node_fs38.default.readFileSync)(p3);
+      const bytes = (deps.readFile ?? import_node_fs39.default.readFileSync)(p3);
       return { type: "image", url: `data:${mime};base64,${bytes.toString("base64")}` };
     } catch (e) {
       deps.logger?.warn("cloud image attachment unreadable", { path: p3, message: e.message });
@@ -64719,73 +64927,84 @@ function cloudImageInput(deps) {
 }
 function createCloudCodexSession(ctx, sink, deps) {
   const personaId2 = personaIdFromCloudCwd(ctx.cwd);
-  const stream = deferredLineStream();
-  let resolvePaths;
-  let rejectPaths;
-  const paths = new Promise((resolve9, reject) => {
-    resolvePaths = resolve9;
-    rejectPaths = reject;
-  });
-  paths.catch(() => {
-  });
-  stream.onClose(() => rejectPaths(new Error("\u4E91\u4E0A\u901A\u9053\u5728 ready \u4E4B\u524D\u5173\u4E86\uFF0C\u62FF\u4E0D\u5230 Pod \u8DEF\u5F84")));
   let channel = null;
-  const driver = driveCodexThread({
-    ctx,
-    sink,
-    stream,
-    logger: deps.logger,
-    threadParams: async (client) => {
-      const p3 = await paths;
-      const params = cloudThreadParams(ctx, p3);
-      if (!ctx.toolSessionId || p3.model) return params;
-      const config = await client.request("config/read", {});
-      if (config?.config?.model) return { ...params, model: config.config.model };
-      const list = await client.request("model/list", {});
-      const selected = list?.data?.find((m3) => m3.isDefault);
-      const current = selected?.id || selected?.model;
-      if (!current) throw new Error("\u65E0\u6CD5\u786E\u5B9A\u5F53\u524D Codex \u9ED8\u8BA4\u6A21\u578B\uFF0C\u62D2\u7EDD\u6CBF\u7528\u65E7\u4F1A\u8BDD\u6A21\u578B");
-      return { ...params, model: current };
-    },
-    imageInput: cloudImageInput(deps),
-    // skills 在 Pod 里由 persona 目录自带，本机路径对它没意义
-    // 「让对端走人」= 断开下行流，gateway 收到就删 Job；信号对 Pod 没有意义
-    kill: () => stream.close(),
-    // 云 persona 运行看板（design 2026-09-23-cloud-persona-metrics §3.7）：提问那一行带「一轮开始」头，轮末镜像顺带报这一轮的结果
-    onTurnStarting: () => channel?.markNextLineTurnStart(),
-    // 轮末镜像带上这一轮的结果与首字节（design 2026-09-23-cloud-persona-metrics §3.7）
-    onTurnCompleted: (outcome, afterFirstByteMs) => {
-      if (!ctx.titleOnly) void channel?.mirror({ outcome, ...afterFirstByteMs !== void 0 ? { afterFirstByteMs } : {} });
-    },
-    now: deps.now
-  });
+  let closed = false;
+  let exited = false;
+  const exit = () => {
+    if (!exited) {
+      exited = true;
+      sink.onExit(null);
+    }
+  };
   if (!personaId2) {
     queueMicrotask(() => {
       sink.onError(`cloud session has no persona id (cwd=${ctx.cwd})`);
-      stream.close();
+      exit();
     });
-    return driver.session;
-  }
-  void deps.client.openSession(personaId2, { expectedEngine: "codex", ...ctx.titleOnly ? { purpose: "title" } : {} }).then(
-    (opened) => {
-      channel = opened;
+    return { startTurn() {
+    }, respondPermission() {
+    }, interrupt() {
+    }, async stop() {
+    } };
+  }
+  const opened = deps.client.openEventSession(personaId2, {
+    expectedEngine: "codex",
+    ...ctx.toolSessionId ? { toolSessionId: ctx.toolSessionId } : {},
+    ...ctx.extraSystemPrompt ? { instructions: ctx.extraSystemPrompt } : {},
+    ...ctx.effort ? { effort: ctx.effort } : {},
+    ...ctx.personaMode ? { personaMode: ctx.personaMode } : {},
+    ...ctx.titleOnly ? { purpose: "title" } : {}
+  }).then(
+    (opened2) => {
+      channel = opened2;
+      channel.onEvents((events) => sink.pushEvents(events));
       channel.onControl((c2) => {
-        if (c2.kind === "ready") {
-          resolvePaths({ personaDir: c2.personaDir, workDir: c2.workDir, model: c2.model });
-        } else if (c2.kind === "queued") {
+        if (c2.kind === "queued") {
           sink.pushEvents([{ kind: "meta-text", text: `\u4E91\u4E0A\u673A\u5668\u6709 ${c2.running} \u4E2A\u4EFB\u52A1\u5728\u8DD1\uFF0C\u7B49\u4E00\u4E2A\u7ED3\u675F\u5C31\u8F6E\u5230\u4F60` }]);
         } else if (c2.kind === "error") {
           sink.onError(`\u4E91\u4E0A persona \u8D77\u4E0D\u6765\uFF1A${c2.message}`);
         }
       });
-      stream.attach(channel);
+      channel.onClose(exit);
+      if (closed) channel.close();
+      return channel;
     },
     (e) => {
       sink.onError(e instanceof CloudApiKeyRequiredError ? e.message : `\u8FDE\u4E0D\u4E0A\u4E91 gateway\uFF1A${e.message}`);
-      stream.close();
+      exit();
+      throw e;
     }
   );
-  return driver.session;
+  void opened.catch(() => {
+  });
+  let sendChain = Promise.resolve();
+  const send2 = (command) => {
+    sendChain = sendChain.then(command).catch((e) => {
+      if (!closed && !exited) sink.onError(`\u4E91\u4E0A\u4F1A\u8BDD\u4E0A\u884C\u5931\u8D25\uFF1A${e.message}`);
+    });
+  };
+  return {
+    startTurn(text) {
+      send2(async () => {
+        const ch = await opened;
+        if (closed) return;
+        const portable = await portableCloudInput(text, { resolveCodexImage: cloudImageInput(deps) });
+        await ch.send({ command: "turn", text: portable });
+      });
+    },
+    respondPermission(requestId, allow) {
+      send2(async () => (await opened).send({ command: "permission", requestId, allow }));
+    },
+    interrupt() {
+      send2(async () => (await opened).send({ command: "interrupt" }));
+    },
+    async stop() {
+      closed = true;
+      const ch = await opened.catch(() => null);
+      ch?.close();
+      exit();
+    }
+  };
 }
 
 // src/tools/codex-cloud.ts
@@ -64856,7 +65075,7 @@ init_protocol();
 
 // src/tools/pi.ts
 var import_node_child_process12 = require("child_process");
-var import_node_fs40 = __toESM(require("fs"), 1);
+var import_node_fs41 = __toESM(require("fs"), 1);
 init_protocol();
 
 // src/tools/pi-rpc-client.ts
@@ -64957,8 +65176,8 @@ var PiRpcClient = class {
 // src/tools/pi-session.ts
 var import_node_child_process11 = require("child_process");
 var import_node_crypto12 = require("crypto");
-var import_node_fs39 = __toESM(require("fs"), 1);
-var import_node_path43 = __toESM(require("path"), 1);
+var import_node_fs40 = __toESM(require("fs"), 1);
+var import_node_path44 = __toESM(require("path"), 1);
 
 // src/tools/pi-events.ts
 init_protocol();
@@ -65230,8 +65449,8 @@ ${dirs.map((d2) => `- ${d2}`).join("\n")}`;
 function createPiSession(ctx, sink, deps = {}) {
   const cmd = process.env.PI_BIN ?? "pi";
   const sessionId = ctx.toolSessionId ?? (0, import_node_crypto12.randomUUID)();
-  const skillsDir = import_node_path43.default.join(ctx.cwd, ".claude", "skills");
-  const exists = deps.skillsDirExists ?? ((d2) => import_node_fs39.default.existsSync(d2));
+  const skillsDir = import_node_path44.default.join(ctx.cwd, ".claude", "skills");
+  const exists = deps.skillsDirExists ?? ((d2) => import_node_fs40.default.existsSync(d2));
   const args = buildPiArgs(ctx, {
     sessionId,
     skillsDir: exists(skillsDir) ? skillsDir : void 0,
@@ -65293,10 +65512,10 @@ var PI_DEFAULT_MODEL_ENTRY = {
 };
 var PI_FULL_ACCESS = { id: "never", label: "Full Access", description: "pi \u65E0\u5BA1\u6279\uFF1A\u4ECE\u4E0D\u8BE2\u95EE\uFF0C\u81EA\u4E3B\u6267\u884C" };
 async function probePi(env = process.env) {
-  if (env.PI_BIN && import_node_fs40.default.existsSync(env.PI_BIN)) return { available: true, path: env.PI_BIN };
+  if (env.PI_BIN && import_node_fs41.default.existsSync(env.PI_BIN)) return { available: true, path: env.PI_BIN };
   try {
     const out = (0, import_node_child_process12.execFileSync)("which", ["pi"], { encoding: "utf8" }).trim();
-    if (out && import_node_fs40.default.existsSync(out)) return { available: true, path: out };
+    if (out && import_node_fs41.default.existsSync(out)) return { available: true, path: out };
   } catch {
   }
   return { available: false };
@@ -65473,34 +65692,30 @@ function cloudPiInstructions(ctx) {
 function createCloudPiSession(ctx, sink, deps) {
   const personaId2 = personaIdFromCloudCwd(ctx.cwd);
   const sessionId = ctx.toolSessionId ?? (0, import_node_crypto13.randomUUID)();
-  const stream = deferredLineStream();
   let channel = null;
-  const driver = drivePiSession({
-    sink,
-    stream,
-    sessionId,
-    logger: deps.logger,
-    fetchImage: deps.fetchImage ?? makeImageFetcher(),
-    // 「让对端走人」= 断开下行流，gateway 收到就删 Pod；信号对 Pod 没有意义
-    kill: () => stream.close(),
-    // 云 persona 运行看板（design 2026-09-23-cloud-persona-metrics §3.7）：提问那一行带「一轮开始」头，轮末镜像顺带报这一轮的结果
-    onTurnStarting: () => channel?.markNextLineTurnStart(),
-    // 轮末镜像带上这一轮的结果与首字节（design 2026-09-23-cloud-persona-metrics §3.7）
-    onTurnCompleted: (outcome, afterFirstByteMs) => {
-      if (!ctx.titleOnly) void channel?.mirror({ outcome, ...afterFirstByteMs !== void 0 ? { afterFirstByteMs } : {} });
-    },
-    now: deps.now
-  });
+  let closed = false;
+  let exited = false;
+  const exit = () => {
+    if (!exited) {
+      exited = true;
+      sink.onExit(null);
+    }
+  };
   if (!personaId2) {
     queueMicrotask(() => {
       sink.onError(`cloud session has no persona id (cwd=${ctx.cwd})`);
-      stream.close();
+      exit();
     });
-    return driver.session;
-  }
-  void deps.client.openSession(personaId2, { toolSessionId: sessionId, instructions: ctx.titleOnly ? "" : cloudPiInstructions(ctx), expectedEngine: "pi", ...ctx.titleOnly ? { purpose: "title" } : {} }).then(
-    (opened) => {
-      channel = opened;
+    return { startTurn() {
+    }, respondPermission() {
+    }, interrupt() {
+    }, async stop() {
+    } };
+  }
+  const opened = deps.client.openEventSession(personaId2, { expectedEngine: "pi", toolSessionId: sessionId, instructions: ctx.titleOnly ? "" : cloudPiInstructions(ctx), ...ctx.titleOnly ? { purpose: "title" } : {} }).then(
+    (opened2) => {
+      channel = opened2;
+      channel.onEvents((events) => sink.pushEvents(events));
       channel.onControl((c2) => {
         if (c2.kind === "queued") {
           sink.pushEvents([{ kind: "meta-text", text: `\u4E91\u4E0A\u673A\u5668\u6709 ${c2.running} \u4E2A\u4EFB\u52A1\u5728\u8DD1\uFF0C\u7B49\u4E00\u4E2A\u7ED3\u675F\u5C31\u8F6E\u5230\u4F60` }]);
@@ -65508,14 +65723,46 @@ function createCloudPiSession(ctx, sink, deps) {
           sink.onError(`\u4E91\u4E0A persona \u8D77\u4E0D\u6765\uFF1A${c2.message}`);
         }
       });
-      stream.attach(channel);
+      channel.onClose(exit);
+      if (closed) channel.close();
+      return channel;
     },
     (e) => {
       sink.onError(e instanceof CloudApiKeyRequiredError ? e.message : `\u8FDE\u4E0D\u4E0A\u4E91 gateway\uFF1A${e.message}`);
-      stream.close();
+      exit();
+      throw e;
     }
   );
-  return driver.session;
+  void opened.catch(() => {
+  });
+  let sendChain = Promise.resolve();
+  const send2 = (command) => {
+    sendChain = sendChain.then(command).catch((e) => {
+      if (!closed && !exited) sink.onError(`\u4E91\u4E0A\u4F1A\u8BDD\u4E0A\u884C\u5931\u8D25\uFF1A${e.message}`);
+    });
+  };
+  return {
+    startTurn(text) {
+      send2(async () => {
+        const ch = await opened;
+        if (closed) return;
+        const portable = await portableCloudInput(text, { fetchPiImage: deps.fetchImage ?? makeImageFetcher() });
+        await ch.send({ command: "turn", text: portable });
+      });
+    },
+    respondPermission(requestId, allow) {
+      send2(async () => (await opened).send({ command: "permission", requestId, allow }));
+    },
+    interrupt() {
+      send2(async () => (await opened).send({ command: "interrupt" }));
+    },
+    async stop() {
+      closed = true;
+      const ch = await opened.catch(() => null);
+      ch?.close();
+      exit();
+    }
+  };
 }
 
 // src/tools/pi-cloud.ts
@@ -65585,7 +65832,7 @@ var CloudPiAdapter = class {
 init_protocol();
 
 // src/tools/codex-skills.ts
-var import_node_path44 = __toESM(require("path"), 1);
+var import_node_path45 = __toESM(require("path"), 1);
 function str4(v3) {
   return typeof v3 === "string" ? v3 : void 0;
 }
@@ -65622,7 +65869,7 @@ async function listCodexSkills(cwd, deps = {}) {
     // 先写 extraRoots 再写 list（stdio 按写入顺序处理，fire-and-forget 不 await 回包；
     // codex-session.ts ready 序列同款，两处保持一致）。失败不阻塞 list。
     beforeRequest: (client) => {
-      void client.request("skills/extraRoots/set", { extraRoots: [import_node_path44.default.join(cwd, ".claude", "skills")] }).catch(() => void 0);
+      void client.request("skills/extraRoots/set", { extraRoots: [import_node_path45.default.join(cwd, ".claude", "skills")] }).catch(() => void 0);
     }
   });
   return mapSkillsListResponse(res);
@@ -65696,23 +65943,23 @@ function rec4(v3) {
 }
 
 // src/workspace/browser.ts
-var import_node_fs41 = __toESM(require("fs"), 1);
-var import_node_os14 = __toESM(require("os"), 1);
-var import_node_path45 = __toESM(require("path"), 1);
+var import_node_fs42 = __toESM(require("fs"), 1);
+var import_node_os15 = __toESM(require("os"), 1);
+var import_node_path46 = __toESM(require("path"), 1);
 init_protocol();
 var MAX_FILE_BYTES2 = 2 * 1024 * 1024;
 function resolveInsideCwd(cwd, subpath) {
-  const absCwd = import_node_path45.default.resolve(cwd);
-  const joined = import_node_path45.default.resolve(absCwd, subpath ?? ".");
-  const rel = import_node_path45.default.relative(absCwd, joined);
-  if (rel.startsWith("..") || import_node_path45.default.isAbsolute(rel)) {
+  const absCwd = import_node_path46.default.resolve(cwd);
+  const joined = import_node_path46.default.resolve(absCwd, subpath ?? ".");
+  const rel = import_node_path46.default.relative(absCwd, joined);
+  if (rel.startsWith("..") || import_node_path46.default.isAbsolute(rel)) {
     throw new ClawdError(ERROR_CODES.INVALID_PATH, `path escapes cwd: ${subpath}`);
   }
   return joined;
 }
 function ensureCwd(cwd) {
   try {
-    const stat = import_node_fs41.default.statSync(cwd);
+    const stat = import_node_fs42.default.statSync(cwd);
     if (!stat.isDirectory()) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${cwd}`);
     }
@@ -65723,10 +65970,10 @@ function ensureCwd(cwd) {
 }
 var WorkspaceBrowser = class {
   list(args) {
-    const cwd = args.cwd && args.cwd.length > 0 ? args.cwd : import_node_os14.default.homedir();
+    const cwd = args.cwd && args.cwd.length > 0 ? args.cwd : import_node_os15.default.homedir();
     ensureCwd(cwd);
     const full = resolveInsideCwd(cwd, args.path);
-    const dirents = import_node_fs41.default.readdirSync(full, { withFileTypes: true });
+    const dirents = import_node_fs42.default.readdirSync(full, { withFileTypes: true });
     const entries = [];
     for (const d2 of dirents) {
       if (!args.showHidden && d2.name.startsWith(".")) continue;
@@ -65736,7 +65983,7 @@ var WorkspaceBrowser = class {
         mtime: ""
       };
       try {
-        const st2 = import_node_fs41.default.statSync(import_node_path45.default.join(full, d2.name));
+        const st2 = import_node_fs42.default.statSync(import_node_path46.default.join(full, d2.name));
         entry.mtime = new Date(st2.mtimeMs).toISOString();
         if (d2.isFile()) entry.size = st2.size;
       } catch {
@@ -65752,14 +65999,14 @@ var WorkspaceBrowser = class {
   read(args) {
     ensureCwd(args.cwd);
     const full = resolveInsideCwd(args.cwd, args.path);
-    const st2 = import_node_fs41.default.statSync(full);
+    const st2 = import_node_fs42.default.statSync(full);
     if (!st2.isFile()) {
       throw new ClawdError(ERROR_CODES.INVALID_PATH, `not a file: ${args.path}`);
     }
     if (st2.size > MAX_FILE_BYTES2) {
       throw new ClawdError(ERROR_CODES.FILE_TOO_LARGE, `file > ${MAX_FILE_BYTES2} bytes`);
     }
-    const buf = import_node_fs41.default.readFileSync(full);
+    const buf = import_node_fs42.default.readFileSync(full);
     const isBinary = buf.includes(0);
     if (isBinary) {
       return {
@@ -65781,20 +66028,20 @@ var WorkspaceBrowser = class {
 };
 
 // src/skills/agents-scanner.ts
-var import_node_fs42 = __toESM(require("fs"), 1);
-var import_node_os15 = __toESM(require("os"), 1);
-var import_node_path46 = __toESM(require("path"), 1);
+var import_node_fs43 = __toESM(require("fs"), 1);
+var import_node_os16 = __toESM(require("os"), 1);
+var import_node_path47 = __toESM(require("path"), 1);
 var DEFAULT_POLICY_DIR_DARWIN = "/Library/Application Support/ClaudeCode/.claude/agents";
 function isDirLikeSync2(p3) {
   try {
-    return import_node_fs42.default.statSync(p3).isDirectory();
+    return import_node_fs43.default.statSync(p3).isDirectory();
   } catch {
     return false;
   }
 }
 function fileExistsSync(p3) {
   try {
-    return import_node_fs42.default.statSync(p3).isFile();
+    return import_node_fs43.default.statSync(p3).isFile();
   } catch {
     return false;
   }
@@ -65802,7 +66049,7 @@ function fileExistsSync(p3) {
 function parseAgentFile(filePath) {
   let content;
   try {
-    content = import_node_fs42.default.readFileSync(filePath, "utf8");
+    content = import_node_fs43.default.readFileSync(filePath, "utf8");
   } catch {
     return {};
   }
@@ -65815,16 +66062,16 @@ function parseAgentFile(filePath) {
 function scanAgentsDir(dir, source, seen, out) {
   let entries;
   try {
-    entries = import_node_fs42.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs43.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
     if (!ent.name.endsWith(".md")) continue;
-    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path46.default.join(dir, ent.name)))) {
+    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path47.default.join(dir, ent.name)))) {
       continue;
     }
-    const filePath = import_node_path46.default.join(dir, ent.name);
+    const filePath = import_node_path47.default.join(dir, ent.name);
     const baseName = ent.name.replace(/\.md$/, "");
     if (seen.has(baseName)) continue;
     seen.add(baseName);
@@ -65842,12 +66089,12 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   function walk2(dir, namespaces) {
     let entries;
     try {
-      entries = import_node_fs42.default.readdirSync(dir, { withFileTypes: true });
+      entries = import_node_fs43.default.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const ent of entries) {
-      const childPath = import_node_path46.default.join(dir, ent.name);
+      const childPath = import_node_path47.default.join(dir, ent.name);
       if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync2(childPath)) {
         walk2(childPath, [...namespaces, ent.name]);
         continue;
@@ -65872,13 +66119,13 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   walk2(root, []);
 }
 function readInstalledPlugins2(home) {
-  const pluginsDir = import_node_path46.default.join(home, ".claude", "plugins");
-  const v22 = import_node_path46.default.join(pluginsDir, "installed_plugins_v2.json");
-  const v1 = import_node_path46.default.join(pluginsDir, "installed_plugins.json");
+  const pluginsDir = import_node_path47.default.join(home, ".claude", "plugins");
+  const v22 = import_node_path47.default.join(pluginsDir, "installed_plugins_v2.json");
+  const v1 = import_node_path47.default.join(pluginsDir, "installed_plugins.json");
   let raw = null;
   for (const candidate of [v22, v1]) {
     try {
-      raw = import_node_fs42.default.readFileSync(candidate, "utf8");
+      raw = import_node_fs43.default.readFileSync(candidate, "utf8");
       break;
     } catch {
     }
@@ -65903,19 +66150,19 @@ function readInstalledPlugins2(home) {
   return out;
 }
 function walkUpProjectAgentsDirs(startCwd, home, seen, out) {
-  let cur = import_node_path46.default.resolve(startCwd);
-  const fsRoot = import_node_path46.default.parse(cur).root;
+  let cur = import_node_path47.default.resolve(startCwd);
+  const fsRoot = import_node_path47.default.parse(cur).root;
   while (true) {
-    scanAgentsDir(import_node_path46.default.join(cur, ".claude", "agents"), "project", seen, out);
+    scanAgentsDir(import_node_path47.default.join(cur, ".claude", "agents"), "project", seen, out);
     let hasGit = false;
     try {
-      hasGit = import_node_fs42.default.existsSync(import_node_path46.default.join(cur, ".git"));
+      hasGit = import_node_fs43.default.existsSync(import_node_path47.default.join(cur, ".git"));
     } catch {
     }
     if (hasGit) return;
     if (cur === home) return;
     if (cur === fsRoot) return;
-    const parent = import_node_path46.default.dirname(cur);
+    const parent = import_node_path47.default.dirname(cur);
     if (parent === cur) return;
     cur = parent;
   }
@@ -65925,7 +66172,7 @@ var AgentsScanner = class {
   extraPluginRoots;
   policyDir;
   constructor(opts = {}) {
-    this.home = opts.home ?? process.env.CLAUDE_CONFIG_DIR ?? import_node_os15.default.homedir();
+    this.home = opts.home ?? process.env.CLAUDE_CONFIG_DIR ?? import_node_os16.default.homedir();
     this.extraPluginRoots = opts.extraPluginRoots ?? [];
     if (opts.policyDir !== void 0) {
       this.policyDir = opts.policyDir;
@@ -65950,7 +66197,7 @@ var AgentsScanner = class {
     }
     const fsBlock = [];
     scanAgentsDir(
-      import_node_path46.default.join(this.home, ".claude", "agents"),
+      import_node_path47.default.join(this.home, ".claude", "agents"),
       "global",
       seen,
       fsBlock
@@ -65964,7 +66211,7 @@ var AgentsScanner = class {
       ...this.extraPluginRoots
     ];
     for (const { name, root } of plugins) {
-      const agentsRoot = import_node_path46.default.join(root, "agents");
+      const agentsRoot = import_node_path47.default.join(root, "agents");
       scanPluginAgentsTree(agentsRoot, name, seen, fsBlock);
     }
     return [...builtinBlock, ...fsBlock];
@@ -65972,28 +66219,28 @@ var AgentsScanner = class {
 };
 
 // src/observer/session-observer.ts
-var import_node_fs44 = __toESM(require("fs"), 1);
-var import_node_os17 = __toESM(require("os"), 1);
-var import_node_path48 = __toESM(require("path"), 1);
+var import_node_fs45 = __toESM(require("fs"), 1);
+var import_node_os18 = __toESM(require("os"), 1);
+var import_node_path49 = __toESM(require("path"), 1);
 init_claude_history();
 
 // src/observer/subagent-meta-observer.ts
-var import_node_fs43 = __toESM(require("fs"), 1);
-var import_node_os16 = __toESM(require("os"), 1);
-var import_node_path47 = __toESM(require("path"), 1);
+var import_node_fs44 = __toESM(require("fs"), 1);
+var import_node_os17 = __toESM(require("os"), 1);
+var import_node_path48 = __toESM(require("path"), 1);
 init_claude_history();
 var META_RE = /^agent-([A-Za-z0-9_-]+)\.meta\.json$/;
 var SubagentMetaObserver = class {
   constructor(opts) {
     this.opts = opts;
-    this.home = opts.home ?? import_node_os16.default.homedir();
+    this.home = opts.home ?? import_node_os17.default.homedir();
   }
   opts;
   home;
   watches = /* @__PURE__ */ new Map();
   // public for spec only：测试直接拼路径写假 meta.json；生产 start() 内部自己解析
   resolveSubagentDir(cwd, toolSessionId) {
-    return import_node_path47.default.join(
+    return import_node_path48.default.join(
       this.home,
       ".claude",
       "projects",
@@ -66023,7 +66270,7 @@ var SubagentMetaObserver = class {
   attachWatcher(w3) {
     if (w3.watcher) return;
     try {
-      w3.watcher = import_node_fs43.default.watch(w3.dirPath, { persistent: false }, (_evt, name) => {
+      w3.watcher = import_node_fs44.default.watch(w3.dirPath, { persistent: false }, (_evt, name) => {
         if (!name) return;
         const m3 = META_RE.exec(String(name));
         if (!m3) return;
@@ -66035,7 +66282,7 @@ var SubagentMetaObserver = class {
   scan(w3) {
     let entries;
     try {
-      entries = import_node_fs43.default.readdirSync(w3.dirPath);
+      entries = import_node_fs44.default.readdirSync(w3.dirPath);
     } catch {
       return;
     }
@@ -66049,10 +66296,10 @@ var SubagentMetaObserver = class {
     if (!m3) return;
     const agentId = m3[1];
     if (w3.emitted.has(agentId)) return;
-    const file = import_node_path47.default.join(w3.dirPath, name);
+    const file = import_node_path48.default.join(w3.dirPath, name);
     let raw;
     try {
-      raw = import_node_fs43.default.readFileSync(file, "utf8");
+      raw = import_node_fs44.default.readFileSync(file, "utf8");
     } catch {
       return;
     }
@@ -66097,7 +66344,7 @@ var SubagentMetaObserver = class {
 var SessionObserver = class {
   constructor(opts) {
     this.opts = opts;
-    this.home = opts.home ?? import_node_os17.default.homedir();
+    this.home = opts.home ?? import_node_os18.default.homedir();
     this.metaObserver = opts.enableSubagentMetaObserver ? new SubagentMetaObserver({ home: this.home, onEvent: opts.onEvent }) : null;
   }
   opts;
@@ -66109,14 +66356,14 @@ var SessionObserver = class {
   metaObserver;
   resolveJsonlPath(cwd, toolSessionId, override) {
     if (override) return override;
-    return import_node_path48.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
+    return import_node_path49.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
   }
   start(args) {
     this.stop(args.sessionId);
     const filePath = this.resolveJsonlPath(args.cwd, args.toolSessionId, args.jsonlPath);
     let size = 0;
     try {
-      size = import_node_fs44.default.statSync(filePath).size;
+      size = import_node_fs45.default.statSync(filePath).size;
     } catch {
     }
     const w3 = {
@@ -66129,16 +66376,16 @@ var SessionObserver = class {
       adapter: args.adapter,
       prevIsRejectSentinel: false,
       toolSessionId: args.toolSessionId,
-      sawFile: import_node_fs44.default.existsSync(filePath),
+      sawFile: import_node_fs45.default.existsSync(filePath),
       lastRelocateScanMs: 0,
       pendingCwdDerive: false,
       lastDeriveMs: 0
     };
     try {
-      import_node_fs44.default.mkdirSync(import_node_path48.default.dirname(filePath), { recursive: true });
+      import_node_fs45.default.mkdirSync(import_node_path49.default.dirname(filePath), { recursive: true });
     } catch {
     }
-    w3.watcher = import_node_fs44.default.watch(import_node_path48.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
+    w3.watcher = import_node_fs45.default.watch(import_node_path49.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
       if (!changedName || !w3.filePath.endsWith(changedName)) return;
       this.poll(w3);
     });
@@ -66161,7 +66408,7 @@ var SessionObserver = class {
   // 异常静默吞，不阻塞 watcher 启动
   hydrateMetaTail(w3, maxLines = 200) {
     try {
-      const raw = import_node_fs44.default.readFileSync(w3.filePath, "utf8");
+      const raw = import_node_fs45.default.readFileSync(w3.filePath, "utf8");
       if (!raw) return;
       const allLines = raw.split("\n").filter((l2) => l2.trim().length > 0);
       if (allLines.length === 0) return;
@@ -66185,7 +66432,7 @@ var SessionObserver = class {
   poll(w3) {
     let size = 0;
     try {
-      size = import_node_fs44.default.statSync(w3.filePath).size;
+      size = import_node_fs45.default.statSync(w3.filePath).size;
     } catch {
       if (w3.sawFile) this.maybeRelocate(w3);
       return;
@@ -66196,11 +66443,11 @@ var SessionObserver = class {
       w3.buf = "";
     }
     if (size === w3.lastSize) return;
-    const fd = import_node_fs44.default.openSync(w3.filePath, "r");
+    const fd = import_node_fs45.default.openSync(w3.filePath, "r");
     try {
       const len = size - w3.lastSize;
       const buf = Buffer.alloc(len);
-      import_node_fs44.default.readSync(fd, buf, 0, len, w3.lastSize);
+      import_node_fs45.default.readSync(fd, buf, 0, len, w3.lastSize);
       w3.lastSize = size;
       w3.buf += buf.toString("utf8");
       let newlineIndex;
@@ -66223,7 +66470,7 @@ var SessionObserver = class {
         }
       }
     } finally {
-      import_node_fs44.default.closeSync(fd);
+      import_node_fs45.default.closeSync(fd);
     }
     if (w3.pendingCwdDerive) this.maybeDeriveCwd(w3);
   }
@@ -66235,7 +66482,7 @@ var SessionObserver = class {
     const now = Date.now();
     if (now - w3.lastRelocateScanMs < 1e3) return;
     w3.lastRelocateScanMs = now;
-    const projectsRoot = import_node_path48.default.join(this.home, ".claude", "projects");
+    const projectsRoot = import_node_path49.default.join(this.home, ".claude", "projects");
     const found = findTranscriptByToolSessionId(projectsRoot, w3.toolSessionId);
     if (!found || found === w3.filePath) return;
     try {
@@ -66244,7 +66491,7 @@ var SessionObserver = class {
     }
     w3.filePath = found;
     try {
-      w3.watcher = import_node_fs44.default.watch(import_node_path48.default.dirname(found), { persistent: false }, (_event, changedName) => {
+      w3.watcher = import_node_fs45.default.watch(import_node_path49.default.dirname(found), { persistent: false }, (_event, changedName) => {
         if (!changedName || !w3.filePath.endsWith(changedName)) return;
         this.poll(w3);
       });
@@ -66366,9 +66613,9 @@ function listRegistered() {
 // src/tools/title-generator.ts
 var import_node_child_process13 = require("child_process");
 init_protocol();
-var import_node_fs45 = __toESM(require("fs"), 1);
-var import_node_os18 = __toESM(require("os"), 1);
-var import_node_path49 = __toESM(require("path"), 1);
+var import_node_fs46 = __toESM(require("fs"), 1);
+var import_node_os19 = __toESM(require("os"), 1);
+var import_node_path50 = __toESM(require("path"), 1);
 var TITLE_GEN_DIR_PREFIX = "clawd-title-";
 var TITLE_INPUT_MAX_CHARS = 400;
 var DEFAULT_TITLE_GEN_TIMEOUT_MS = 45e3;
@@ -66459,21 +66706,21 @@ async function generateSessionTitle(file, firstMessage, deps = {}) {
   }
   let workDir;
   try {
-    workDir = import_node_fs45.default.mkdtempSync(import_node_path49.default.join(import_node_os18.default.tmpdir(), TITLE_GEN_DIR_PREFIX));
+    workDir = import_node_fs46.default.mkdtempSync(import_node_path50.default.join(import_node_os19.default.tmpdir(), TITLE_GEN_DIR_PREFIX));
   } catch {
     return null;
   }
   const cleanupWorkDir = () => {
     try {
-      import_node_fs45.default.rmSync(workDir, { recursive: true, force: true });
+      import_node_fs46.default.rmSync(workDir, { recursive: true, force: true });
     } catch {
     }
   };
-  const outFile = import_node_path49.default.join(workDir, `codex-title-${process.pid}-${++outFileSeq}-${Date.now()}.txt`);
-  const schemaFile = import_node_path49.default.join(workDir, "title-schema.json");
+  const outFile = import_node_path50.default.join(workDir, `codex-title-${process.pid}-${++outFileSeq}-${Date.now()}.txt`);
+  const schemaFile = import_node_path50.default.join(workDir, "title-schema.json");
   if (tool === "codex") {
     try {
-      import_node_fs45.default.writeFileSync(schemaFile, CODEX_TITLE_SCHEMA);
+      import_node_fs46.default.writeFileSync(schemaFile, CODEX_TITLE_SCHEMA);
     } catch {
       cleanupWorkDir();
       return null;
@@ -66528,7 +66775,7 @@ async function generateSessionTitle(file, firstMessage, deps = {}) {
       if (tool === "claude" || tool === "pi") return finish(parseTitleJson(stdout));
       let fileText = "";
       try {
-        fileText = import_node_fs45.default.readFileSync(outFile, "utf8");
+        fileText = import_node_fs46.default.readFileSync(outFile, "utf8");
       } catch {
         return finish(null);
       }
@@ -67224,8 +67471,8 @@ async function authenticate(token, deps) {
 }
 
 // src/legacy-cleanup.ts
-var fs56 = __toESM(require("fs/promises"), 1);
-var path57 = __toESM(require("path"), 1);
+var fs57 = __toESM(require("fs/promises"), 1);
+var path58 = __toESM(require("path"), 1);
 var LEGACY_FILES = [
   "personal-capability.json",
   "received-capabilities.json",
@@ -67234,9 +67481,9 @@ var LEGACY_FILES = [
 async function cleanupLegacyCapabilityFiles(dataDir, logger) {
   const removed = [];
   for (const name of LEGACY_FILES) {
-    const p3 = path57.join(dataDir, name);
+    const p3 = path58.join(dataDir, name);
     try {
-      await fs56.unlink(p3);
+      await fs57.unlink(p3);
       removed.push(name);
       logger.debug("legacy capability file removed", { file: name });
     } catch (err) {
@@ -67248,13 +67495,13 @@ async function cleanupLegacyCapabilityFiles(dataDir, logger) {
 }
 
 // src/inbox/inbox-store.ts
-var fs57 = __toESM(require("fs"), 1);
-var path58 = __toESM(require("path"), 1);
+var fs58 = __toESM(require("fs"), 1);
+var path59 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs57.mkdirSync(this.dirPath(), { recursive: true });
+    fs58.mkdirSync(this.dirPath(), { recursive: true });
   }
   dataDir;
   /**
@@ -67266,7 +67513,7 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     let raw;
     try {
-      raw = fs57.readFileSync(file, "utf8");
+      raw = fs58.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -67282,7 +67529,7 @@ var InboxStore = class {
     const dir = this.dirPath();
     let entries;
     try {
-      entries = fs57.readdirSync(dir);
+      entries = fs58.readdirSync(dir);
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -67298,9 +67545,9 @@ var InboxStore = class {
     if (existing.some((m3) => m3.id === message.id)) return;
     const file = this.filePath(message.peerDeviceId);
     const line = JSON.stringify(message) + "\n";
-    fs57.appendFileSync(file, line, { mode: 384 });
+    fs58.appendFileSync(file, line, { mode: 384 });
     try {
-      fs57.chmodSync(file, 384);
+      fs58.chmodSync(file, 384);
     } catch {
     }
   }
@@ -67330,7 +67577,7 @@ var InboxStore = class {
   removeByPeerDeviceId(peerDeviceId) {
     const file = this.filePath(peerDeviceId);
     try {
-      fs57.unlinkSync(file);
+      fs58.unlinkSync(file);
     } catch (err) {
       if (err?.code === "ENOENT") return;
     }
@@ -67339,18 +67586,18 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     const content = messages.map((m3) => JSON.stringify(m3)).join("\n") + (messages.length > 0 ? "\n" : "");
-    fs57.writeFileSync(tmp, content, { mode: 384 });
-    fs57.renameSync(tmp, file);
+    fs58.writeFileSync(tmp, content, { mode: 384 });
+    fs58.renameSync(tmp, file);
     try {
-      fs57.chmodSync(file, 384);
+      fs58.chmodSync(file, 384);
     } catch {
     }
   }
   dirPath() {
-    return path58.join(this.dataDir, INBOX_SUBDIR);
+    return path59.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerDeviceId) {
-    return path58.join(this.dirPath(), `${peerDeviceId}.jsonl`);
+    return path59.join(this.dirPath(), `${peerDeviceId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -67438,8 +67685,8 @@ var InboxManager = class {
 };
 
 // src/state/contact-store.ts
-var fs58 = __toESM(require("fs"), 1);
-var path59 = __toESM(require("path"), 1);
+var fs59 = __toESM(require("fs"), 1);
+var path60 = __toESM(require("path"), 1);
 var FILE_NAME = "contacts.json";
 var ContactStore = class {
   constructor(dataDir) {
@@ -67449,10 +67696,10 @@ var ContactStore = class {
   contacts = /* @__PURE__ */ new Map();
   load() {
     this.contacts.clear();
-    const file = path59.join(this.dataDir, FILE_NAME);
+    const file = path60.join(this.dataDir, FILE_NAME);
     let raw;
     try {
-      raw = fs58.readFileSync(file, "utf8");
+      raw = fs59.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code !== "ENOENT") this.renameBak(file);
       return;
@@ -67533,20 +67780,20 @@ var ContactStore = class {
     return true;
   }
   flush() {
-    const file = path59.join(this.dataDir, FILE_NAME);
+    const file = path60.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
       { contacts: Array.from(this.contacts.values()) },
       null,
       2
     );
-    fs58.mkdirSync(this.dataDir, { recursive: true });
-    fs58.writeFileSync(tmp, content, { mode: 384 });
-    fs58.renameSync(tmp, file);
+    fs59.mkdirSync(this.dataDir, { recursive: true });
+    fs59.writeFileSync(tmp, content, { mode: 384 });
+    fs59.renameSync(tmp, file);
   }
   renameBak(file) {
     try {
-      fs58.renameSync(file, `${file}.bak`);
+      fs59.renameSync(file, `${file}.bak`);
     } catch {
     }
   }
@@ -67654,61 +67901,61 @@ async function connectRemote(args) {
 }
 
 // src/migrations/2026-05-20-flatten-sessions.ts
-var fs59 = __toESM(require("fs"), 1);
-var path60 = __toESM(require("path"), 1);
+var fs60 = __toESM(require("fs"), 1);
+var path61 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path60.join(dataDir, "sessions");
-  const flagPath = path60.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path61.join(dataDir, "sessions");
+  const flagPath = path61.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path60.join(sessionsDir, "default");
+  const defaultDir = path61.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path60.join(defaultDir, entry);
-      const dst = path60.join(sessionsDir, entry);
-      fs59.renameSync(src, dst);
+      const src = path61.join(defaultDir, entry);
+      const dst = path61.join(sessionsDir, entry);
+      fs60.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path60.join(sessionsDir, pid);
+    const personaDir = path61.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path60.join(personaDir, "owner");
+    const ownerSrc = path61.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path60.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs59.mkdirSync(ownerDst, { recursive: true });
+      const ownerDst = path61.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      fs60.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs59.renameSync(path60.join(ownerSrc, file), path60.join(ownerDst, file));
+        fs60.renameSync(path61.join(ownerSrc, file), path61.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path60.join(personaDir, "listener");
+    const listenerSrc = path61.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path60.join(dataDir, ".legacy", `listener-${pid}`);
-      fs59.mkdirSync(archiveDst, { recursive: true });
+      const archiveDst = path61.join(dataDir, ".legacy", `listener-${pid}`);
+      fs60.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs59.renameSync(path60.join(listenerSrc, file), path60.join(archiveDst, file));
+        fs60.renameSync(path61.join(listenerSrc, file), path61.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs59.mkdirSync(sessionsDir, { recursive: true });
-  fs59.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs60.mkdirSync(sessionsDir, { recursive: true });
+  fs60.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -67719,7 +67966,7 @@ function migrateFlattenSessions(opts) {
 }
 function existsSync3(p3) {
   try {
-    fs59.statSync(p3);
+    fs60.statSync(p3);
     return true;
   } catch {
     return false;
@@ -67727,62 +67974,62 @@ function existsSync3(p3) {
 }
 function isDir(p3) {
   try {
-    return fs59.statSync(p3).isDirectory();
+    return fs60.statSync(p3).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p3) {
   try {
-    return fs59.readdirSync(p3);
+    return fs60.readdirSync(p3);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p3) {
   try {
-    fs59.rmdirSync(p3);
+    fs60.rmdirSync(p3);
   } catch {
   }
 }
 
 // src/migrations/2026-08-18-drop-seeded-projects.ts
-var fs60 = __toESM(require("fs"), 1);
-var path61 = __toESM(require("path"), 1);
+var fs61 = __toESM(require("fs"), 1);
+var path62 = __toESM(require("path"), 1);
 var DROP_SEEDED_PROJECTS_FLAG = ".projects-seed-dropped.v1.done";
 function dropSeededProjects(opts) {
-  fs60.mkdirSync(opts.dataDir, { recursive: true });
-  const flag = path61.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
-  if (fs60.existsSync(flag)) return { skipped: true, dropped: 0, backup: null };
-  const file = path61.join(opts.dataDir, "projects.json");
+  fs61.mkdirSync(opts.dataDir, { recursive: true });
+  const flag = path62.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
+  if (fs61.existsSync(flag)) return { skipped: true, dropped: 0, backup: null };
+  const file = path62.join(opts.dataDir, "projects.json");
   let raw = null;
   let dropped = 0;
   try {
-    raw = fs60.readFileSync(file, "utf8");
+    raw = fs61.readFileSync(file, "utf8");
     dropped = JSON.parse(raw).projects?.length ?? 0;
   } catch {
   }
   let backup = null;
   if (raw != null && dropped > 0) {
-    const dir = path61.join(opts.dataDir, "backups");
-    fs60.mkdirSync(dir, { recursive: true });
-    backup = path61.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
-    fs60.writeFileSync(backup, raw);
+    const dir = path62.join(opts.dataDir, "backups");
+    fs61.mkdirSync(dir, { recursive: true });
+    backup = path62.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
+    fs61.writeFileSync(backup, raw);
   }
   if (raw != null || dropped > 0) {
-    fs60.writeFileSync(file, JSON.stringify({ projects: [] }, null, 2));
+    fs61.writeFileSync(file, JSON.stringify({ projects: [] }, null, 2));
   }
-  fs60.writeFileSync(flag, (/* @__PURE__ */ new Date()).toISOString());
+  fs61.writeFileSync(flag, (/* @__PURE__ */ new Date()).toISOString());
   return { skipped: false, dropped, backup };
 }
 
 // src/transport/http-router.ts
-var import_node_fs47 = __toESM(require("fs"), 1);
-var import_node_path52 = __toESM(require("path"), 1);
+var import_node_fs48 = __toESM(require("fs"), 1);
+var import_node_path53 = __toESM(require("path"), 1);
 
 // src/attachment/upload.ts
-var import_node_fs46 = __toESM(require("fs"), 1);
-var import_node_path50 = __toESM(require("path"), 1);
+var import_node_fs47 = __toESM(require("fs"), 1);
+var import_node_path51 = __toESM(require("path"), 1);
 var import_node_crypto15 = __toESM(require("crypto"), 1);
 var import_promises8 = require("stream/promises");
 var UploadError = class extends Error {
@@ -67794,22 +68041,22 @@ var UploadError = class extends Error {
   code;
 };
 function assertValidFileName(fileName) {
-  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path50.default.basename(fileName)) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path51.default.basename(fileName)) {
     throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
   }
 }
 var HASH_PREFIX_LEN = 16;
 async function writeUploadedAttachment(args) {
   assertValidFileName(args.fileName);
-  const attachmentsRoot = import_node_path50.default.join(args.baseDir, ".attachments");
+  const attachmentsRoot = import_node_path51.default.join(args.baseDir, ".attachments");
   try {
-    import_node_fs46.default.mkdirSync(attachmentsRoot, { recursive: true });
+    import_node_fs47.default.mkdirSync(attachmentsRoot, { recursive: true });
   } catch (err) {
     throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
   }
   const hasher = import_node_crypto15.default.createHash("sha256");
   let actualSize = 0;
-  const tmpPath = import_node_path50.default.join(
+  const tmpPath = import_node_path51.default.join(
     attachmentsRoot,
     `.upload-${process.pid}-${Date.now()}-${import_node_crypto15.default.randomBytes(4).toString("hex")}`
   );
@@ -67824,18 +68071,18 @@ async function writeUploadedAttachment(args) {
           yield buf;
         }
       },
-      import_node_fs46.default.createWriteStream(tmpPath, { mode: 384 })
+      import_node_fs47.default.createWriteStream(tmpPath, { mode: 384 })
     );
   } catch (err) {
     try {
-      import_node_fs46.default.unlinkSync(tmpPath);
+      import_node_fs47.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError("STORAGE_ERROR", `write failed: ${err.message}`);
   }
   if (actualSize !== args.contentLength) {
     try {
-      import_node_fs46.default.unlinkSync(tmpPath);
+      import_node_fs47.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError(
@@ -67844,34 +68091,34 @@ async function writeUploadedAttachment(args) {
     );
   }
   const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
-  const hashDir = import_node_path50.default.join(attachmentsRoot, attachmentId);
+  const hashDir = import_node_path51.default.join(attachmentsRoot, attachmentId);
   let finalFileName;
   let hashDirExists = false;
   try {
-    hashDirExists = import_node_fs46.default.statSync(hashDir).isDirectory();
+    hashDirExists = import_node_fs47.default.statSync(hashDir).isDirectory();
   } catch {
   }
   if (hashDirExists) {
-    const existing = import_node_fs46.default.readdirSync(hashDir).filter((n2) => !n2.startsWith("."));
+    const existing = import_node_fs47.default.readdirSync(hashDir).filter((n2) => !n2.startsWith("."));
     finalFileName = existing[0] ?? args.fileName;
     try {
-      import_node_fs46.default.unlinkSync(tmpPath);
+      import_node_fs47.default.unlinkSync(tmpPath);
     } catch {
     }
   } else {
     try {
-      import_node_fs46.default.mkdirSync(hashDir, { recursive: true });
+      import_node_fs47.default.mkdirSync(hashDir, { recursive: true });
       finalFileName = args.fileName;
-      import_node_fs46.default.renameSync(tmpPath, import_node_path50.default.join(hashDir, finalFileName));
+      import_node_fs47.default.renameSync(tmpPath, import_node_path51.default.join(hashDir, finalFileName));
     } catch (err) {
       try {
-        import_node_fs46.default.unlinkSync(tmpPath);
+        import_node_fs47.default.unlinkSync(tmpPath);
       } catch {
       }
       throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
     }
   }
-  const absPath = import_node_path50.default.join(hashDir, finalFileName);
+  const absPath = import_node_path51.default.join(hashDir, finalFileName);
   const relPath = absPath;
   args.groupFileStore.upsert(args.scope, args.sessionId, {
     relPath: absPath,
@@ -67886,8 +68133,8 @@ async function writeUploadedAttachment(args) {
 
 // src/extension/import.ts
 var import_promises9 = __toESM(require("fs/promises"), 1);
-var import_node_path51 = __toESM(require("path"), 1);
-var import_node_os19 = __toESM(require("os"), 1);
+var import_node_path52 = __toESM(require("path"), 1);
+var import_node_os20 = __toESM(require("os"), 1);
 var import_jszip = __toESM(require_lib3(), 1);
 var ImportError = class extends Error {
   constructor(code, message) {
@@ -67904,7 +68151,7 @@ async function importZip(buf, root) {
     throw new ImportError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path51.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path52.default.isAbsolute(name)) {
       throw new ImportError("ZIP_INVALID", `unsafe zip entry path: ${name}`);
     }
   }
@@ -67937,7 +68184,7 @@ async function importZip(buf, root) {
       );
     }
   }
-  const destDir = import_node_path51.default.join(root, manifest.id);
+  const destDir = import_node_path52.default.join(root, manifest.id);
   let destExists = false;
   try {
     await import_promises9.default.access(destDir);
@@ -67947,15 +68194,15 @@ async function importZip(buf, root) {
   if (destExists) {
     throw new ImportError("ALREADY_EXISTS", `extension ${manifest.id} already installed`);
   }
-  const stage = await import_promises9.default.mkdtemp(import_node_path51.default.join(import_node_os19.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
+  const stage = await import_promises9.default.mkdtemp(import_node_path52.default.join(import_node_os20.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path51.default.join(stage, name);
+      const dest = import_node_path52.default.join(stage, name);
       if (entry.dir) {
         await import_promises9.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises9.default.mkdir(import_node_path51.default.dirname(dest), { recursive: true });
+      await import_promises9.default.mkdir(import_node_path52.default.dirname(dest), { recursive: true });
       const content = await entry.async("nodebuffer");
       await import_promises9.default.writeFile(dest, content);
     }
@@ -68009,7 +68256,7 @@ var SHARE_UI_ASSET_MIME = {
   ".wasm": "application/wasm"
 };
 function shareUiAssetMime(filePath) {
-  const ext = import_node_path52.default.extname(filePath).toLowerCase();
+  const ext = import_node_path53.default.extname(filePath).toLowerCase();
   return SHARE_UI_ASSET_MIME[ext] ?? lookupMime(filePath);
 }
 var AUTHED_RPC_ROUTE_PREFIX = "/rpc/";
@@ -68108,7 +68355,7 @@ function isValidUploadFileName(fileName) {
   if (fileName === "." || fileName === "..") return false;
   if (fileName.startsWith(".")) return false;
   if (fileName.includes("/") || fileName.includes("\\")) return false;
-  return fileName === import_node_path52.default.basename(fileName);
+  return fileName === import_node_path53.default.basename(fileName);
 }
 function createHttpRouter(deps) {
   return async (req, res) => {
@@ -68192,7 +68439,7 @@ function createHttpRouter(deps) {
       }
       let buf;
       try {
-        buf = await import_node_fs47.default.promises.readFile(abs);
+        buf = await import_node_fs48.default.promises.readFile(abs);
       } catch {
         sendJson2(res, 404, { code: "NOT_FOUND", message: "asset not found" });
         return true;
@@ -68338,7 +68585,7 @@ function createHttpRouter(deps) {
         sendHtml(res, statusByCode[r2.code], loader.renderErrorHtml(r2.code, msgByCode[r2.code]));
         return true;
       }
-      sendHtml(res, 200, loader.renderViewerHtml(import_node_path52.default.basename(r2.absPath)));
+      sendHtml(res, 200, loader.renderViewerHtml(import_node_path53.default.basename(r2.absPath)));
       return true;
     }
     const ctx = deps.authResolver.resolveFromHeader(
@@ -68459,7 +68706,7 @@ function createHttpRouter(deps) {
         return true;
       }
       let absPath;
-      if (import_node_path52.default.isAbsolute(pathParam)) {
+      if (import_node_path53.default.isAbsolute(pathParam)) {
         absPath = pathParam;
       } else if (deps.sessionStore) {
         const file = deps.sessionStore.read(sid);
@@ -68467,7 +68714,7 @@ function createHttpRouter(deps) {
           sendJson2(res, 404, { code: "NOT_FOUND", message: `session ${sid} not found` });
           return true;
         }
-        absPath = import_node_path52.default.join(file.cwd, pathParam);
+        absPath = import_node_path53.default.join(file.cwd, pathParam);
       } else {
         sendJson2(res, 501, withCtx(ctx, { code: "NOT_IMPLEMENTED", message: "sessionStore not wired" }));
         return true;
@@ -68551,7 +68798,7 @@ function withCtx(ctx, body) {
 function streamFile(res, absPath, logger) {
   let stat;
   try {
-    stat = import_node_fs47.default.statSync(absPath);
+    stat = import_node_fs48.default.statSync(absPath);
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") {
@@ -68566,7 +68813,7 @@ function streamFile(res, absPath, logger) {
     return;
   }
   const mime = lookupMime(absPath);
-  const basename2 = import_node_path52.default.basename(absPath);
+  const basename2 = import_node_path53.default.basename(absPath);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": String(stat.size),
@@ -68574,7 +68821,7 @@ function streamFile(res, absPath, logger) {
     // 防止浏览器把任意 mime 当 html 渲染
     "X-Content-Type-Options": "nosniff"
   });
-  const stream = import_node_fs47.default.createReadStream(absPath);
+  const stream = import_node_fs48.default.createReadStream(absPath);
   stream.on("error", (err) => {
     logger?.warn("streamFile read error", { absPath, err: err.message });
     res.destroy();
@@ -68583,8 +68830,8 @@ function streamFile(res, absPath, logger) {
 }
 
 // src/attachment/gc.ts
-var import_node_fs48 = __toESM(require("fs"), 1);
-var import_node_path53 = __toESM(require("path"), 1);
+var import_node_fs49 = __toESM(require("fs"), 1);
+var import_node_path54 = __toESM(require("path"), 1);
 var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
 function runAttachmentGc(args) {
   const now = (args.now ?? Date.now)();
@@ -68593,12 +68840,12 @@ function runAttachmentGc(args) {
   for (const { scope, sessionId } of args.sessionScopes) {
     for (const entry of args.groupFileStore.list(scope, sessionId)) {
       if (entry.stale) continue;
-      if (import_node_path53.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+      if (import_node_path54.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
     }
   }
   const visited = /* @__PURE__ */ new Set();
   for (const { scope, sessionId } of args.sessionScopes) {
-    const legacyDir = args.getSessionCwd?.(sessionId) ?? import_node_path53.default.join(
+    const legacyDir = args.getSessionCwd?.(sessionId) ?? import_node_path54.default.join(
       args.dataDir,
       "sessions",
       ...scopeSubPath(scope).map(safeFileName),
@@ -68611,28 +68858,28 @@ function runAttachmentGc(args) {
       return true;
     });
     for (const rootDir of roots) {
-      const attRoot = import_node_path53.default.join(rootDir, ".attachments");
+      const attRoot = import_node_path54.default.join(rootDir, ".attachments");
       let hashDirs;
       try {
-        hashDirs = import_node_fs48.default.readdirSync(attRoot);
+        hashDirs = import_node_fs49.default.readdirSync(attRoot);
       } catch (err) {
         if (err.code === "ENOENT") continue;
         args.logger?.warn("attachment gc: readdir failed", { attRoot, err: err.message });
         continue;
       }
       for (const hashDir of hashDirs) {
-        const hashDirAbs = import_node_path53.default.join(attRoot, hashDir);
+        const hashDirAbs = import_node_path54.default.join(attRoot, hashDir);
         let files;
         try {
-          files = import_node_fs48.default.readdirSync(hashDirAbs);
+          files = import_node_fs49.default.readdirSync(hashDirAbs);
         } catch {
           continue;
         }
         for (const name of files) {
-          const file = import_node_path53.default.join(hashDirAbs, name);
+          const file = import_node_path54.default.join(hashDirAbs, name);
           let stat;
           try {
-            stat = import_node_fs48.default.statSync(file);
+            stat = import_node_fs49.default.statSync(file);
           } catch {
             continue;
           }
@@ -68641,18 +68888,18 @@ function runAttachmentGc(args) {
           if (age < ttlMs) continue;
           if (liveAbs.has(file)) continue;
           try {
-            import_node_fs48.default.unlinkSync(file);
+            import_node_fs49.default.unlinkSync(file);
           } catch (err) {
             args.logger?.warn("attachment gc: unlink failed", { file, err: err.message });
           }
         }
         try {
-          if (import_node_fs48.default.readdirSync(hashDirAbs).length === 0) import_node_fs48.default.rmdirSync(hashDirAbs);
+          if (import_node_fs49.default.readdirSync(hashDirAbs).length === 0) import_node_fs49.default.rmdirSync(hashDirAbs);
         } catch {
         }
       }
       try {
-        if (import_node_fs48.default.readdirSync(attRoot).length === 0) import_node_fs48.default.rmdirSync(attRoot);
+        if (import_node_fs49.default.readdirSync(attRoot).length === 0) import_node_fs49.default.rmdirSync(attRoot);
       } catch {
       }
     }
@@ -68660,8 +68907,8 @@ function runAttachmentGc(args) {
 }
 
 // src/attachment/group.ts
-var import_node_fs49 = __toESM(require("fs"), 1);
-var import_node_path54 = __toESM(require("path"), 1);
+var import_node_fs50 = __toESM(require("fs"), 1);
+var import_node_path55 = __toESM(require("path"), 1);
 var import_node_crypto16 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
@@ -68673,11 +68920,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path54.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path55.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path54.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path55.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -68686,7 +68933,7 @@ var GroupFileStore = class {
   readFile(scope, sessionId) {
     const file = this.filePath(scope, sessionId);
     try {
-      const raw = import_node_fs49.default.readFileSync(file, "utf8");
+      const raw = import_node_fs50.default.readFileSync(file, "utf8");
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) {
         this.logger?.warn("GroupFileStore.readFile: not an array; resetting session entries", {
@@ -68712,10 +68959,10 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs49.default.mkdirSync(import_node_path54.default.dirname(file), { recursive: true });
+    import_node_fs50.default.mkdirSync(import_node_path55.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs49.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
-    import_node_fs49.default.renameSync(tmp, file);
+    import_node_fs50.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
+    import_node_fs50.default.renameSync(tmp, file);
   }
   /** 拉一份当前 session 的清单。读盘 → cache；之后调用复用 cache */
   list(scope, sessionId) {
@@ -68807,7 +69054,7 @@ var GroupFileStore = class {
    */
   deleteSession(scope, sessionId) {
     try {
-      import_node_fs49.default.unlinkSync(this.filePath(scope, sessionId));
+      import_node_fs50.default.unlinkSync(this.filePath(scope, sessionId));
     } catch (err) {
       if (err?.code !== "ENOENT") throw err;
     }
@@ -68820,7 +69067,7 @@ var GroupFileStore = class {
    * 不在 persona 目录里（见文件头的路径约定）。没树的 persona 是 noop。
    */
   deletePersona(personaId2) {
-    import_node_fs49.default.rmSync(import_node_path54.default.join(this.dataDir, "sessions", safeFileName(personaId2)), { recursive: true, force: true });
+    import_node_fs50.default.rmSync(import_node_path55.default.join(this.dataDir, "sessions", safeFileName(personaId2)), { recursive: true, force: true });
     const prefix = `persona:${personaId2}:`;
     for (const key of this.cache.keys()) {
       if (key.startsWith(prefix)) this.cache.delete(key);
@@ -68829,10 +69076,10 @@ var GroupFileStore = class {
 };
 
 // src/discovery/state-file.ts
-var import_node_fs50 = __toESM(require("fs"), 1);
-var import_node_path55 = __toESM(require("path"), 1);
+var import_node_fs51 = __toESM(require("fs"), 1);
+var import_node_path56 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path55.default.join(dataDir, "state.json");
+  return import_node_path56.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -68854,7 +69101,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs50.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs51.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -68868,20 +69115,20 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs50.default.mkdirSync(import_node_path55.default.dirname(this.file), { recursive: true });
+    import_node_fs51.default.mkdirSync(import_node_path56.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs50.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs50.default.renameSync(tmp, this.file);
+    import_node_fs51.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs51.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs50.default.chmodSync(this.file, 384);
+        import_node_fs51.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs50.default.unlinkSync(this.file);
+      import_node_fs51.default.unlinkSync(this.file);
     } catch {
     }
   }
@@ -68895,14 +69142,14 @@ function readSpawnedByDesktopFromEnv(env = process.env) {
 }
 
 // src/tunnel/tunnel-manager.ts
-var import_node_fs54 = __toESM(require("fs"), 1);
-var import_node_path59 = __toESM(require("path"), 1);
+var import_node_fs55 = __toESM(require("fs"), 1);
+var import_node_path60 = __toESM(require("path"), 1);
 var import_node_crypto17 = __toESM(require("crypto"), 1);
 var import_node_child_process16 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
-var import_node_fs51 = __toESM(require("fs"), 1);
-var import_node_path56 = __toESM(require("path"), 1);
+var import_node_fs52 = __toESM(require("fs"), 1);
+var import_node_path57 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -68910,7 +69157,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs51.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs52.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -68921,22 +69168,22 @@ var TunnelStore = class {
     }
   }
   async set(v3) {
-    const dir = import_node_path56.default.dirname(this.filePath);
-    await import_node_fs51.default.promises.mkdir(dir, { recursive: true });
+    const dir = import_node_path57.default.dirname(this.filePath);
+    await import_node_fs52.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v3, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs51.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs52.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs51.default.promises.chmod(tmp, 384);
+        await import_node_fs52.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs51.default.promises.rename(tmp, this.filePath);
+    await import_node_fs52.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs51.default.promises.unlink(this.filePath);
+      await import_node_fs52.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -69031,9 +69278,9 @@ function escape2(v3) {
 }
 
 // src/tunnel/frpc-binary.ts
-var import_node_fs52 = __toESM(require("fs"), 1);
-var import_node_os20 = __toESM(require("os"), 1);
-var import_node_path57 = __toESM(require("path"), 1);
+var import_node_fs53 = __toESM(require("fs"), 1);
+var import_node_os21 = __toESM(require("os"), 1);
+var import_node_path58 = __toESM(require("path"), 1);
 var import_node_child_process14 = require("child_process");
 var import_node_stream4 = require("stream");
 var import_promises10 = require("stream/promises");
@@ -69065,20 +69312,20 @@ function frpcDownloadUrl(version2, p3) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs52.default.existsSync(opts.override)) {
+    if (!import_node_fs53.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path57.default.join(opts.dataDir, "bin");
-  import_node_fs52.default.mkdirSync(binDir, { recursive: true });
+  const binDir = import_node_path58.default.join(opts.dataDir, "bin");
+  import_node_fs53.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path57.default.join(binDir, "frpc");
-  if (import_node_fs52.default.existsSync(stableBin)) return stableBin;
+  const stableBin = import_node_path58.default.join(binDir, "frpc");
+  if (import_node_fs53.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path57.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path58.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -69087,8 +69334,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs52.default.chmodSync(partialBin, 493);
-    import_node_fs52.default.renameSync(partialBin, stableBin);
+    import_node_fs53.default.chmodSync(partialBin, 493);
+    import_node_fs53.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -69098,15 +69345,15 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs52.default.readdirSync(binDir);
+    entries = import_node_fs53.default.readdirSync(binDir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path57.default.join(binDir, name);
+      const full = import_node_path58.default.join(binDir, name);
       try {
-        import_node_fs52.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs53.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -69114,7 +69361,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p3) {
   try {
-    import_node_fs52.default.unlinkSync(p3);
+    import_node_fs53.default.unlinkSync(p3);
   } catch {
   }
 }
@@ -69125,13 +69372,13 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs52.default.createWriteStream(dest);
+  const out = import_node_fs53.default.createWriteStream(dest);
   const nodeStream = import_node_stream4.Readable.fromWeb(res.body);
   await (0, import_promises10.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path57.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs52.default.mkdirSync(work, { recursive: true });
+  const work = import_node_path58.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  import_node_fs53.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve9, reject) => {
       const proc = (0, import_node_child_process14.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
@@ -69139,32 +69386,32 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
       proc.on("exit", (code) => code === 0 ? resolve9() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path57.default.join(work, dirName, "frpc");
-    if (!import_node_fs52.default.existsSync(src)) {
+    const src = import_node_path58.default.join(work, dirName, "frpc");
+    if (!import_node_fs53.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs52.default.copyFileSync(src, destBin);
+    import_node_fs53.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs52.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs53.default.rmSync(work, { recursive: true, force: true });
   }
 }
 
 // src/tunnel/frpc-process.ts
-var import_node_fs53 = __toESM(require("fs"), 1);
-var import_node_path58 = __toESM(require("path"), 1);
+var import_node_fs54 = __toESM(require("fs"), 1);
+var import_node_path59 = __toESM(require("path"), 1);
 var import_node_child_process15 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path58.default.join(dataDir, "frpc.pid");
+  return import_node_path59.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
-    import_node_fs53.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
+    import_node_fs54.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearFrpcPid(dataDir) {
   try {
-    import_node_fs53.default.unlinkSync(frpcPidFilePath(dataDir));
+    import_node_fs54.default.unlinkSync(frpcPidFilePath(dataDir));
   } catch {
   }
 }
@@ -69180,7 +69427,7 @@ function defaultIsPidAlive(pid) {
 }
 function defaultReadPidFile(file) {
   try {
-    return import_node_fs53.default.readFileSync(file, "utf8");
+    return import_node_fs54.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -69196,7 +69443,7 @@ function defaultSleep2(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path58.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path59.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -69220,7 +69467,7 @@ async function killStaleFrpc(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs53.default.unlinkSync(pidFile);
+      import_node_fs54.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -69231,7 +69478,7 @@ async function killStaleFrpc(deps) {
   }
   await sleep2(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs53.default.unlinkSync(pidFile);
+    import_node_fs54.default.unlinkSync(pidFile);
   } catch {
   }
 }
@@ -69268,7 +69515,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path59.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path60.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -69395,7 +69642,7 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path59.default.join(this.deps.dataDir, "frpc.toml");
+      const tomlPath = import_node_path60.default.join(this.deps.dataDir, "frpc.toml");
       const proxyName = `clawd-${t2.subdomain}-${localPort}-${import_node_crypto17.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t2.frpsHost,
@@ -69406,14 +69653,14 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs54.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      await import_node_fs55.default.promises.writeFile(tomlPath, toml, { mode: 384 });
       const proc = (this.deps.spawnImpl ?? import_node_child_process16.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logDir = import_node_path59.default.join(this.deps.dataDir, "log");
-      import_node_fs54.default.mkdirSync(logDir, { recursive: true });
-      const logFilePath = import_node_path59.default.join(logDir, "frpc.log");
-      const logStream = import_node_fs54.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logDir = import_node_path60.default.join(this.deps.dataDir, "log");
+      import_node_fs55.default.mkdirSync(logDir, { recursive: true });
+      const logFilePath = import_node_path60.default.join(logDir, "frpc.log");
+      const logStream = import_node_fs55.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -69495,28 +69742,28 @@ async function waitForFrpcReady(proc, timeoutMs) {
 }
 
 // src/tunnel/device-key.ts
-var import_node_os21 = __toESM(require("os"), 1);
-var import_node_path60 = __toESM(require("path"), 1);
+var import_node_os22 = __toESM(require("os"), 1);
+var import_node_path61 = __toESM(require("path"), 1);
 var import_node_crypto18 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
-  const hostname = opts.hostname ?? import_node_os21.default.hostname();
-  const uid = opts.uid ?? (typeof import_node_os21.default.userInfo === "function" ? import_node_os21.default.userInfo().uid : 0);
-  const home = opts.home ?? import_node_os21.default.homedir();
-  const defaultDataDir = import_node_path60.default.resolve(import_node_path60.default.join(home, ".clawd"));
-  const normalizedDataDir = opts.dataDir ? import_node_path60.default.resolve(opts.dataDir) : null;
+  const hostname = opts.hostname ?? import_node_os22.default.hostname();
+  const uid = opts.uid ?? (typeof import_node_os22.default.userInfo === "function" ? import_node_os22.default.userInfo().uid : 0);
+  const home = opts.home ?? import_node_os22.default.homedir();
+  const defaultDataDir = import_node_path61.default.resolve(import_node_path61.default.join(home, ".clawd"));
+  const normalizedDataDir = opts.dataDir ? import_node_path61.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
   return import_node_crypto18.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
-var import_node_fs55 = __toESM(require("fs"), 1);
-var import_node_path61 = __toESM(require("path"), 1);
+var import_node_fs56 = __toESM(require("fs"), 1);
+var import_node_path62 = __toESM(require("path"), 1);
 var import_node_crypto19 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path61.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path62.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -69557,7 +69804,7 @@ function defaultGenerateOwnerPrincipalId() {
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs55.default.readFileSync(file, "utf8");
+    const raw = import_node_fs56.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -69578,26 +69825,26 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs55.default.mkdirSync(import_node_path61.default.dirname(file), { recursive: true });
-  import_node_fs55.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs56.default.mkdirSync(import_node_path62.default.dirname(file), { recursive: true });
+  import_node_fs56.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs55.default.chmodSync(file, 384);
+    import_node_fs56.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs56 = __toESM(require("fs"), 1);
-var import_node_os22 = __toESM(require("os"), 1);
-var import_node_path62 = __toESM(require("path"), 1);
+var import_node_fs57 = __toESM(require("fs"), 1);
+var import_node_os23 = __toESM(require("os"), 1);
+var import_node_path63 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function profilePath(dataDir) {
-  return import_node_path62.default.join(dataDir, PROFILE_FILENAME);
+  return import_node_path63.default.join(dataDir, PROFILE_FILENAME);
 }
 function loadOwnerProfile(dataDir) {
   let raw;
   try {
-    raw = import_node_fs56.default.readFileSync(profilePath(dataDir), "utf8");
+    raw = import_node_fs57.default.readFileSync(profilePath(dataDir), "utf8");
   } catch {
     return {};
   }
@@ -69613,11 +69860,11 @@ function loadOwnerProfile(dataDir) {
 }
 function patchOwnerProfile(dataDir, patch) {
   const merged = { ...loadOwnerProfile(dataDir), ...patch };
-  import_node_fs56.default.writeFileSync(profilePath(dataDir), JSON.stringify(merged, null, 2), { encoding: "utf8", mode: 384 });
+  import_node_fs57.default.writeFileSync(profilePath(dataDir), JSON.stringify(merged, null, 2), { encoding: "utf8", mode: 384 });
   return merged;
 }
 function loadOwnerDisplayName(dataDir) {
-  const fallback = import_node_os22.default.userInfo().username;
+  const fallback = import_node_os23.default.userInfo().username;
   const displayName = loadOwnerProfile(dataDir).displayName;
   if (typeof displayName !== "string" || displayName.length === 0) {
     if (displayName !== void 0) {
@@ -69629,18 +69876,18 @@ function loadOwnerDisplayName(dataDir) {
 }
 
 // src/feishu-auth/owner-identity-store.ts
-var import_node_fs57 = __toESM(require("fs"), 1);
-var import_node_path63 = __toESM(require("path"), 1);
+var import_node_fs58 = __toESM(require("fs"), 1);
+var import_node_path64 = __toESM(require("path"), 1);
 var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
 var OwnerIdentityStore = class {
   file;
   constructor(dataDir) {
-    this.file = import_node_path63.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
+    this.file = import_node_path64.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
   }
   read() {
     let raw;
     try {
-      raw = import_node_fs57.default.readFileSync(this.file, "utf8");
+      raw = import_node_fs58.default.readFileSync(this.file, "utf8");
     } catch {
       return null;
     }
@@ -69667,16 +69914,16 @@ var OwnerIdentityStore = class {
     };
   }
   write(record4) {
-    import_node_fs57.default.mkdirSync(import_node_path63.default.dirname(this.file), { recursive: true });
-    import_node_fs57.default.writeFileSync(this.file, JSON.stringify(record4, null, 2), { mode: 384 });
+    import_node_fs58.default.mkdirSync(import_node_path64.default.dirname(this.file), { recursive: true });
+    import_node_fs58.default.writeFileSync(this.file, JSON.stringify(record4, null, 2), { mode: 384 });
     try {
-      import_node_fs57.default.chmodSync(this.file, 384);
+      import_node_fs58.default.chmodSync(this.file, 384);
     } catch {
     }
   }
   clear() {
     try {
-      import_node_fs57.default.unlinkSync(this.file);
+      import_node_fs58.default.unlinkSync(this.file);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -70172,8 +70419,8 @@ function verifyConnectToken(args) {
 }
 
 // src/feishu-auth/server-key.ts
-var fs74 = __toESM(require("fs"), 1);
-var path76 = __toESM(require("path"), 1);
+var fs75 = __toESM(require("fs"), 1);
+var path77 = __toESM(require("path"), 1);
 var FILE_NAME2 = "server-signing-key.json";
 var ServerKeyStore = class {
   constructor(dataDir) {
@@ -70181,12 +70428,12 @@ var ServerKeyStore = class {
   }
   dataDir;
   filePath() {
-    return path76.join(this.dataDir, FILE_NAME2);
+    return path77.join(this.dataDir, FILE_NAME2);
   }
   /** 读缓存的公钥；无缓存 / 损坏 → null（调用方决定是否触发拉取） */
   read() {
     try {
-      const raw = fs74.readFileSync(this.filePath(), "utf8");
+      const raw = fs75.readFileSync(this.filePath(), "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.publicKeyPem === "string" && parsed.publicKeyPem.includes("PUBLIC KEY")) {
         return parsed.publicKeyPem;
@@ -70201,12 +70448,12 @@ var ServerKeyStore = class {
       publicKeyPem,
       fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    fs74.mkdirSync(this.dataDir, { recursive: true });
-    fs74.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
+    fs75.mkdirSync(this.dataDir, { recursive: true });
+    fs75.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
   }
   clear() {
     try {
-      fs74.unlinkSync(this.filePath());
+      fs75.unlinkSync(this.filePath());
     } catch {
     }
   }
@@ -70222,13 +70469,13 @@ var import_node_path80 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs58 = __toESM(require("fs"), 1);
-var import_node_os23 = __toESM(require("os"), 1);
-var import_node_path64 = __toESM(require("path"), 1);
+var import_node_fs59 = __toESM(require("fs"), 1);
+var import_node_os24 = __toESM(require("os"), 1);
+var import_node_path65 = __toESM(require("path"), 1);
 var import_node_crypto21 = require("crypto");
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs58.default.readFileSync(file, "utf8");
+  const raw = import_node_fs59.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t2 = line.trim();
@@ -70241,19 +70488,19 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path64.default.join(import_node_os23.default.homedir(), ".claude");
-  let projectDir = import_node_path64.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  let sourceFile = import_node_path64.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs58.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path65.default.join(import_node_os24.default.homedir(), ".claude");
+  let projectDir = import_node_path65.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  let sourceFile = import_node_path65.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs59.default.existsSync(sourceFile)) {
     const found = findTranscriptByToolSessionId(
-      import_node_path64.default.join(baseDir, "projects"),
+      import_node_path65.default.join(baseDir, "projects"),
       input.toolSessionId
     );
     if (!found) {
       throw new Error(`fork: source transcript not found: ${sourceFile}`);
     }
     sourceFile = found;
-    projectDir = import_node_path64.default.dirname(found);
+    projectDir = import_node_path65.default.dirname(found);
   }
   const entries = readJsonlEntries(sourceFile);
   const mainEntries = entries.filter((e) => e.isSidechain !== true);
@@ -70282,17 +70529,17 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const outDir = input.targetCwd ? import_node_path64.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
-  const forkedFilePath = import_node_path64.default.join(outDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs58.default.mkdirSync(outDir, { recursive: true });
-  import_node_fs58.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const outDir = input.targetCwd ? import_node_path65.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
+  const forkedFilePath = import_node_path65.default.join(outDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs59.default.mkdirSync(outDir, { recursive: true });
+  import_node_fs59.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
 // src/tools/codex-fork.ts
 var import_node_child_process17 = require("child_process");
-var import_node_fs59 = __toESM(require("fs"), 1);
-var import_node_path65 = __toESM(require("path"), 1);
+var import_node_fs60 = __toESM(require("fs"), 1);
+var import_node_path66 = __toESM(require("path"), 1);
 function openCodexAppServer(home, cwd) {
   const proc = (0, import_node_child_process17.spawn)(process.env.CODEX_BIN ?? "codex", ["app-server", "--listen", "stdio://"], {
     cwd,
@@ -70312,7 +70559,7 @@ function openCodexAppServer(home, cwd) {
 async function forkCodexThread(input, deps = {}) {
   const source = locateCodexThread(input.roots, input.sourceThreadId);
   if (!source) throw new Error(`codex fork: source thread not found: ${input.sourceThreadId}`);
-  const rollout = parseCodexRollout(import_node_fs59.default.readFileSync(source.file, "utf8"));
+  const rollout = parseCodexRollout(import_node_fs60.default.readFileSync(source.file, "utf8"));
   if (rollout.meta?.threadId.toLowerCase() !== input.sourceThreadId.toLowerCase()) {
     throw new Error(`codex fork: source thread metadata does not match ${input.sourceThreadId}`);
   }
@@ -70342,7 +70589,7 @@ async function forkCodexThread(input, deps = {}) {
       if (typeof forkedToolSessionId !== "string" || !forkedToolSessionId) {
         throw new Error("codex fork: app-server returned no thread id");
       }
-      const forked = locateCodexThread([import_node_path65.default.join(source.home, "sessions")], forkedToolSessionId);
+      const forked = locateCodexThread([import_node_path66.default.join(source.home, "sessions")], forkedToolSessionId);
       if (!forked) throw new Error(`codex fork: rollout not found for forked thread ${forkedToolSessionId}`);
       return { forkedToolSessionId, forkedFilePath: forked.file };
     })()]);
@@ -70353,19 +70600,19 @@ async function forkCodexThread(input, deps = {}) {
 }
 
 // src/session/external-scan.ts
-var import_node_fs60 = __toESM(require("fs"), 1);
+var import_node_fs61 = __toESM(require("fs"), 1);
 var import_promises11 = __toESM(require("fs/promises"), 1);
-var import_node_os24 = __toESM(require("os"), 1);
-var import_node_path66 = __toESM(require("path"), 1);
+var import_node_os25 = __toESM(require("os"), 1);
+var import_node_path67 = __toESM(require("path"), 1);
 var import_node_module = require("module");
 var import_node_child_process18 = require("child_process");
 var import_meta7 = {};
 function defaultRoots() {
-  const home = import_node_os24.default.homedir();
+  const home = import_node_os25.default.homedir();
   return {
-    claudeProjectsDir: import_node_path66.default.join(home, ".claude", "projects"),
-    codexDir: import_node_path66.default.join(home, ".codex"),
-    clawdDir: import_node_path66.default.join(home, ".clawd")
+    claudeProjectsDir: import_node_path67.default.join(home, ".claude", "projects"),
+    codexDir: import_node_path67.default.join(home, ".codex"),
+    clawdDir: import_node_path67.default.join(home, ".clawd")
   };
 }
 function width(s2) {
@@ -70416,7 +70663,7 @@ function userText(msg) {
 }
 function isDir2(p3) {
   try {
-    return import_node_fs60.default.statSync(p3).isDirectory();
+    return import_node_fs61.default.statSync(p3).isDirectory();
   } catch {
     return false;
   }
@@ -70425,7 +70672,7 @@ async function scanClaude(roots) {
   const out = [];
   let dirs;
   try {
-    dirs = import_node_fs60.default.readdirSync(roots.claudeProjectsDir, { withFileTypes: true });
+    dirs = import_node_fs61.default.readdirSync(roots.claudeProjectsDir, { withFileTypes: true });
   } catch {
     return out;
   }
@@ -70433,16 +70680,16 @@ async function scanClaude(roots) {
     if (!d2.isDirectory()) continue;
     let files;
     try {
-      files = import_node_fs60.default.readdirSync(import_node_path66.default.join(roots.claudeProjectsDir, d2.name));
+      files = import_node_fs61.default.readdirSync(import_node_path67.default.join(roots.claudeProjectsDir, d2.name));
     } catch {
       continue;
     }
     for (const name of files) {
       if (!name.endsWith(".jsonl")) continue;
-      const file = import_node_path66.default.join(roots.claudeProjectsDir, d2.name, name);
+      const file = import_node_path67.default.join(roots.claudeProjectsDir, d2.name, name);
       let st2;
       try {
-        st2 = import_node_fs60.default.statSync(file);
+        st2 = import_node_fs61.default.statSync(file);
       } catch {
         continue;
       }
@@ -70495,7 +70742,7 @@ async function scanClaude(roots) {
   return out;
 }
 async function countCodexTurns(rolloutPath) {
-  if (!rolloutPath || !import_node_fs60.default.existsSync(rolloutPath)) return { turns: 0, first: "" };
+  if (!rolloutPath || !import_node_fs61.default.existsSync(rolloutPath)) return { turns: 0, first: "" };
   let turns = 0;
   let first = "";
   for await (const rec6 of jsonLines(rolloutPath)) {
@@ -70569,7 +70816,7 @@ async function codexFromRows(rows) {
 async function scanCodex(roots) {
   let dbs = [];
   try {
-    dbs = import_node_fs60.default.readdirSync(roots.codexDir).filter((n2) => /^state_.*\.sqlite$/.test(n2)).sort().map((n2) => import_node_path66.default.join(roots.codexDir, n2));
+    dbs = import_node_fs61.default.readdirSync(roots.codexDir).filter((n2) => /^state_.*\.sqlite$/.test(n2)).sort().map((n2) => import_node_path67.default.join(roots.codexDir, n2));
   } catch {
   }
   if (!dbs.length) return [];
@@ -70578,14 +70825,14 @@ async function scanCodex(roots) {
 }
 async function scanExternalSessions(rootsIn) {
   const roots = { ...defaultRoots(), ...rootsIn };
-  const personaRoot = import_node_path66.default.join(roots.clawdDir, "personas");
+  const personaRoot = import_node_path67.default.join(roots.clawdDir, "personas");
   const all = [...await scanClaude(roots), ...await scanCodex(roots)];
   const out = [];
   for (const c2 of all) {
     if (c2.skip) continue;
     if (c2.turns < 1) continue;
     if (!c2.cwd || !isDir2(c2.cwd)) continue;
-    if (c2.cwd === roots.clawdDir || c2.cwd === personaRoot || c2.cwd.startsWith(personaRoot + import_node_path66.default.sep) || c2.cwd.startsWith(roots.clawdDir + import_node_path66.default.sep)) {
+    if (c2.cwd === roots.clawdDir || c2.cwd === personaRoot || c2.cwd.startsWith(personaRoot + import_node_path67.default.sep) || c2.cwd.startsWith(roots.clawdDir + import_node_path67.default.sep)) {
       continue;
     }
     out.push({
@@ -70602,13 +70849,13 @@ async function scanExternalSessions(rootsIn) {
 }
 
 // src/session/import-ledger.ts
-var import_node_fs61 = __toESM(require("fs"), 1);
-var import_node_path67 = __toESM(require("path"), 1);
+var import_node_fs62 = __toESM(require("fs"), 1);
+var import_node_path68 = __toESM(require("path"), 1);
 var LEDGER_FILENAME = "session-import-ledger.json";
 function readImportLedger(dataDir) {
   try {
     const parsed = JSON.parse(
-      import_node_fs61.default.readFileSync(import_node_path67.default.join(dataDir, LEDGER_FILENAME), "utf8")
+      import_node_fs62.default.readFileSync(import_node_path68.default.join(dataDir, LEDGER_FILENAME), "utf8")
     );
     return Array.isArray(parsed) ? parsed : [];
   } catch {
@@ -70616,15 +70863,15 @@ function readImportLedger(dataDir) {
   }
 }
 function appendImportLedger(dataDir, entry) {
-  const file = import_node_path67.default.join(dataDir, LEDGER_FILENAME);
+  const file = import_node_path68.default.join(dataDir, LEDGER_FILENAME);
   const entries = readImportLedger(dataDir);
   entries.push(entry);
-  import_node_fs61.default.writeFileSync(file, JSON.stringify(entries, null, 2), { encoding: "utf8", mode: 384 });
+  import_node_fs62.default.writeFileSync(file, JSON.stringify(entries, null, 2), { encoding: "utf8", mode: 384 });
 }
 
 // src/handlers/session.ts
 init_protocol();
-var import_node_path68 = __toESM(require("path"), 1);
+var import_node_path69 = __toESM(require("path"), 1);
 function canReadSearchHit(ctx, file) {
   if (!ctx || ctx.principal.kind === "owner") return true;
   return canAccessPersona(ctx.grants, file.ownerPersonaId, "read") && file.creatorPrincipalId === ctx.principal.id;
@@ -70905,7 +71152,7 @@ ${attribution}` } : args;
           `principal guest:${ctx.principal.id} cannot fork tool session ${args.toolSessionId}`
         );
       }
-      if (source?.tool === "codex" && args.targetCwd && import_node_path68.default.resolve(args.targetCwd) !== import_node_path68.default.resolve(source.cwd)) {
+      if (source?.tool === "codex" && args.targetCwd && import_node_path69.default.resolve(args.targetCwd) !== import_node_path69.default.resolve(source.cwd)) {
         throw new ClawdError(ERROR_CODES.FORBIDDEN, "fork: guest targetCwd must match source cwd");
       }
     }
@@ -71182,7 +71429,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path83 = __toESM(require("path"), 1);
+var path84 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -71200,7 +71447,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path82 = __toESM(require("path"), 1);
+var path83 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g3 of grants) {
@@ -71213,42 +71460,42 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read", userWorkDir) {
-  const target = path82.resolve(absPath);
+  const target = path83.resolve(absPath);
   if (userWorkDir) {
-    const u2 = path82.resolve(userWorkDir);
-    const usep = u2.endsWith(path82.sep) ? "" : path82.sep;
+    const u2 = path83.resolve(userWorkDir);
+    const usep = u2.endsWith(path83.sep) ? "" : path83.sep;
     if (target === u2 || target.startsWith(u2 + usep)) return true;
   }
-  const root = path82.resolve(personaRoot);
-  const sep4 = root.endsWith(path82.sep) ? "" : path82.sep;
+  const root = path83.resolve(personaRoot);
+  const sep4 = root.endsWith(path83.sep) ? "" : path83.sep;
   if (!target.startsWith(root + sep4)) return false;
-  const rel = path82.relative(root, target);
+  const rel = path83.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId2 = rel.split(path82.sep)[0];
+  const personaId2 = rel.split(path83.sep)[0];
   if (!personaId2) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId2);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path82.resolve(personaRoot);
-  const target = path82.resolve(absPath);
-  const sep4 = root.endsWith(path82.sep) ? "" : path82.sep;
+  const root = path83.resolve(personaRoot);
+  const target = path83.resolve(absPath);
+  const sep4 = root.endsWith(path83.sep) ? "" : path83.sep;
   if (!target.startsWith(root + sep4)) return null;
-  const rel = path82.relative(root, target);
+  const rel = path83.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path82.sep)[0];
+  const id = rel.split(path83.sep)[0];
   return id || null;
 }
 function isPathWithin(dir, absPath) {
-  const d2 = path82.resolve(dir);
-  const t2 = path82.resolve(absPath);
-  const sep4 = d2.endsWith(path82.sep) ? "" : path82.sep;
+  const d2 = path83.resolve(dir);
+  const t2 = path83.resolve(absPath);
+  const sep4 = d2.endsWith(path83.sep) ? "" : path83.sep;
   return t2 === d2 || t2.startsWith(d2 + sep4);
 }
 function isPathInGuestBoundary(personaRoot, personaId2, userWorkDir, absPath) {
   if (userWorkDir && isPathWithin(userWorkDir, absPath)) return true;
-  return personaIdFromPath(path82.resolve(absPath), personaRoot) === personaId2;
+  return personaIdFromPath(path83.resolve(absPath), personaRoot) === personaId2;
 }
 
 // src/handlers/history.ts
@@ -71302,7 +71549,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path83.join(personaRoot, pid),
+          path84.join(personaRoot, pid),
           personaRoot,
           "read",
           userWorkDir
@@ -71314,7 +71561,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path83.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
+    assertGuestPath(ctx, path84.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -71362,14 +71609,14 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path83.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
+    assertGuestPath(ctx, path84.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagents");
     const subs = await historyReaderForToolSession(args.toolSessionId).listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path83.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
+    assertGuestPath(ctx, path84.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagent-read");
     const res = await historyReaderForToolSession(args.toolSessionId).readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
@@ -71379,7 +71626,7 @@ function buildHistoryHandlers(deps) {
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
       const filtered = dirs.filter(
-        (d2) => isGuestPathAllowed(ctx.grants, path83.resolve(d2.cwd), personaRoot, "read", userWorkDir)
+        (d2) => isGuestPathAllowed(ctx.grants, path84.resolve(d2.cwd), personaRoot, "read", userWorkDir)
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -71396,17 +71643,17 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/projects.ts
-var fs79 = __toESM(require("fs"), 1);
-var os26 = __toESM(require("os"), 1);
-var path84 = __toESM(require("path"), 1);
+var fs80 = __toESM(require("fs"), 1);
+var os27 = __toESM(require("os"), 1);
+var path85 = __toESM(require("path"), 1);
 var import_node_child_process19 = require("child_process");
 init_protocol();
-var DEFAULT_PROJECTS_ROOT = path84.join(os26.homedir(), "Documents", "ChatGPT");
+var DEFAULT_PROJECTS_ROOT = path85.join(os27.homedir(), "Documents", "ChatGPT");
 function allocateDir(root, name) {
-  let candidate = path84.join(root, name);
+  let candidate = path85.join(root, name);
   let n2 = 2;
-  while (fs79.existsSync(candidate)) {
-    candidate = path84.join(root, `${name} ${n2}`);
+  while (fs80.existsSync(candidate)) {
+    candidate = path85.join(root, `${name} ${n2}`);
     n2 += 1;
   }
   return candidate;
@@ -71434,7 +71681,7 @@ function buildProjectHandlers(deps) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, "project:reveal \u4EC5\u652F\u6301 macOS");
     }
     try {
-      if (!fs79.statSync(args.path).isDirectory()) throw new Error("not dir");
+      if (!fs80.statSync(args.path).isDirectory()) throw new Error("not dir");
     } catch {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${args.path}`);
     }
@@ -71450,7 +71697,7 @@ function buildProjectHandlers(deps) {
     let target;
     if (args.path) {
       try {
-        if (!fs79.statSync(args.path).isDirectory()) throw new Error("not dir");
+        if (!fs80.statSync(args.path).isDirectory()) throw new Error("not dir");
       } catch {
         throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${args.path}`);
       }
@@ -71458,15 +71705,15 @@ function buildProjectHandlers(deps) {
     } else {
       const name = args.name;
       try {
-        fs79.mkdirSync(root, { recursive: true });
+        fs80.mkdirSync(root, { recursive: true });
         target = allocateDir(root, name);
-        fs79.mkdirSync(target);
+        fs80.mkdirSync(target);
       } catch (err) {
         throw new ClawdError(ERROR_CODES.INVALID_CWD, `\u521B\u5EFA\u9879\u76EE\u76EE\u5F55\u5931\u8D25: ${String(err)}`);
       }
       const git2 = (0, import_node_child_process19.spawnSync)("git", ["init"], { cwd: target, stdio: "ignore" });
       if (git2.status !== 0) {
-        fs79.rmSync(target, { recursive: true, force: true });
+        fs80.rmSync(target, { recursive: true, force: true });
         throw new ClawdError(
           ERROR_CODES.INVALID_CWD,
           `git init \u5931\u8D25\uFF08${git2.error ? String(git2.error) : `exit ${git2.status}`}\uFF09: ${target}`
@@ -71491,9 +71738,9 @@ function buildProjectHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path85 = __toESM(require("path"), 1);
+var path86 = __toESM(require("path"), 1);
 init_protocol();
-var os27 = __toESM(require("os"), 1);
+var os28 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
 function buildEnabledPluginNames(personaManager, personaId2) {
@@ -71533,23 +71780,23 @@ function buildWorkspaceHandlers(deps) {
   const list = async (frame, _client, ctx) => {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
-    const fallbackCwd = isGuest && personaRoot ? personaRoot : os27.homedir();
-    const resolvedCwd = path85.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path85.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const fallbackCwd = isGuest && personaRoot ? personaRoot : os28.homedir();
+    const resolvedCwd = path86.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path86.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list", usersRoot);
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path85.isAbsolute(args.path) ? path85.resolve(args.path) : path85.resolve(args.cwd, args.path);
+    const target = path86.isAbsolute(args.path) ? path86.resolve(args.path) : path86.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read", usersRoot);
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path85.resolve(args.cwd);
+    const cwdAbs = path86.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list", usersRoot);
     const list2 = await getSkillsForTool(args.tool ?? "claude", cwdAbs);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -71561,7 +71808,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path85.resolve(args.cwd);
+    const cwdAbs = path86.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list", usersRoot);
     if (isCodexFamily(args.tool) || isPiFamily(args.tool)) {
       return { response: { type: "agents:list", agents: [] } };
@@ -71583,20 +71830,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path87 = __toESM(require("path"), 1);
+var path88 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process20 = require("child_process");
-var import_node_fs62 = __toESM(require("fs"), 1);
-var import_node_path69 = __toESM(require("path"), 1);
+var import_node_fs63 = __toESM(require("fs"), 1);
+var import_node_path70 = __toESM(require("path"), 1);
 var import_node_util2 = require("util");
 var pexec = (0, import_node_util2.promisify)(import_node_child_process20.execFile);
 function normalizePath(p3) {
-  const resolved = import_node_path69.default.resolve(p3);
+  const resolved = import_node_path70.default.resolve(p3);
   try {
-    return import_node_fs62.default.realpathSync(resolved);
+    return import_node_fs63.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -71670,7 +71917,7 @@ async function listGitBranches(cwd) {
 function assertGuestCwd(ctx, cwd, personaRoot, method, usersRoot) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
   const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
-  if (!isGuestPathAllowed(ctx.grants, path87.resolve(cwd), personaRoot, "read", userWorkDir)) {
+  if (!isGuestPathAllowed(ctx.grants, path88.resolve(cwd), personaRoot, "read", userWorkDir)) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -71927,12 +72174,12 @@ async function queryCodexAccount(deps = {}) {
 }
 
 // src/tools/pi-account.ts
-var import_node_fs63 = __toESM(require("fs"), 1);
-var import_node_path70 = __toESM(require("path"), 1);
+var import_node_fs64 = __toESM(require("fs"), 1);
+var import_node_path71 = __toESM(require("path"), 1);
 function readPiCredentials(agentDir) {
   let raw;
   try {
-    raw = JSON.parse(import_node_fs63.default.readFileSync(import_node_path70.default.join(agentDir, "auth.json"), "utf8"));
+    raw = JSON.parse(import_node_fs64.default.readFileSync(import_node_path71.default.join(agentDir, "auth.json"), "utf8"));
   } catch {
     return {};
   }
@@ -72015,81 +72262,6 @@ function buildEngineHandlers(deps, overrides = {}) {
   return { "engine:status": status, "engine:connectPool": connectPool };
 }
 
-// src/tools/subscription-channels-apply.ts
-var import_node_fs64 = __toESM(require("fs"), 1);
-var import_node_os25 = __toESM(require("os"), 1);
-var import_node_path71 = __toESM(require("path"), 1);
-var TABLE_HEADER = /^\s*\[\[?\s*([A-Za-z0-9_.-]+)\s*\]\]?\s*(?:#.*)?$/;
-var KEY_LINE = /^\s*([A-Za-z0-9_.-]+)\s*=/;
-function stripCodexProvider(text) {
-  const out = [];
-  let inProviderSection = false;
-  for (const line of text.split("\n")) {
-    const headerMatch = TABLE_HEADER.exec(line);
-    if (headerMatch) {
-      const section = headerMatch[1].trim();
-      inProviderSection = section === "model_providers" || section.startsWith("model_providers.");
-      if (inProviderSection) continue;
-      out.push(line);
-      continue;
-    }
-    if (inProviderSection) continue;
-    const keyMatch = KEY_LINE.exec(line);
-    if (keyMatch) {
-      const key = keyMatch[1].trim();
-      if (key === "model_provider" || key.startsWith("model_providers.")) {
-        continue;
-      }
-    }
-    out.push(line);
-  }
-  return out.join("\n").trim();
-}
-function applyCodexSubscriptionChannel(opts) {
-  const codexHome = opts.codexHome || process.env.CODEX_HOME || import_node_path71.default.join(import_node_os25.default.homedir(), ".codex");
-  import_node_fs64.default.mkdirSync(codexHome, { recursive: true });
-  const configFile = import_node_path71.default.join(codexHome, "config.toml");
-  const original = import_node_fs64.default.existsSync(configFile) ? import_node_fs64.default.readFileSync(configFile, "utf8") : "";
-  const rest = stripCodexProvider(original);
-  let content;
-  if (opts.channel) {
-    const ch = opts.channel;
-    content = [
-      'model_provider = "cliproxyapi"',
-      ...rest ? ["", rest] : [],
-      "",
-      "[model_providers.cliproxyapi]",
-      'name = "cliproxyapi"',
-      `base_url = ${JSON.stringify(ch.baseUrl)}`,
-      'wire_api = "responses"',
-      `auth = { command = "echo", args = [${JSON.stringify(ch.apiKey)}] }`,
-      ""
-    ].join("\n");
-  } else {
-    content = [
-      'model_provider = "openai"',
-      ...rest ? ["", rest] : [],
-      ""
-    ].join("\n");
-  }
-  const tmpFile = `${configFile}.tmp.${Date.now()}`;
-  import_node_fs64.default.writeFileSync(tmpFile, content, { mode: 384 });
-  import_node_fs64.default.renameSync(tmpFile, configFile);
-}
-function applyPiSubscriptionChannel(opts) {
-  const agentDir = opts.agentDir || process.env.PI_CODING_AGENT_DIR || import_node_path71.default.join(import_node_os25.default.homedir(), ".pi", "agent");
-  if (!import_node_fs64.default.existsSync(agentDir)) return false;
-  const configFile = import_node_path71.default.join(agentDir, "cliproxyapi.json");
-  if (opts.channel) {
-    const data = { baseUrl: opts.channel.baseUrl, apiKey: opts.channel.apiKey };
-    const tmp = `${configFile}.tmp.${Date.now()}`;
-    import_node_fs64.default.writeFileSync(tmp, JSON.stringify(data, null, 2) + "\n", { mode: 384 });
-    import_node_fs64.default.renameSync(tmp, configFile);
-    return true;
-  }
-  return false;
-}
-
 // src/handlers/channels.ts
 function buildChannelsHandlers(deps) {
   const get = async () => {
@@ -73092,7 +73264,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.602".length > 0 ? "0.2.602" : "dev";
+var version = "0.2.604".length > 0 ? "0.2.604" : "dev";
 
 // src/cli-probe/probe.ts
 var fs83 = __toESM(require("fs"), 1);
@@ -75720,6 +75892,8 @@ async function startDaemon(config) {
   let transport = null;
   const personaStore = new PersonaStore(import_node_path84.default.join(config.dataDir, "personas"));
   const subscriptionChannelStore = new SubscriptionChannelStore({ dataDir: config.dataDir });
+  const activeSubscriptionChannel = subscriptionChannelStore.getActive();
+  if (activeSubscriptionChannel) applyPiSubscriptionChannel({ channel: activeSubscriptionChannel });
   const usersRoot = import_node_path84.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {