@clawos-dev/clawd 0.2.612 → 0.2.613

package/dist/cli.cjs

@@ -450,8 +450,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path106, errorMaps, issueData } = params;
-      const fullPath = [...path106, ...issueData.path || []];
+      const { data, path: path107, errorMaps, issueData } = params;
+      const fullPath = [...path107, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -762,11 +762,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path106, key) {
+      constructor(parent, value, path107, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path106;
+        this._path = path107;
         this._key = key;
       }
       get path() {
@@ -7968,11 +7968,12 @@ var init_persona_schemas = __esm({
 });
 
 // ../protocol/src/events.ts
-var DAEMON_MODE_VALUES, SESSION_STATUS_VALUES, HISTORY_USER_META_VALUES, SKILL_SOURCE_VALUES, AGENT_SOURCE_VALUES, ASK_USER_QUESTION_TOOL_NAME;
+var DAEMON_MODE_VALUES, CLOUD_HISTORY_REFRESH_KIND, SESSION_STATUS_VALUES, HISTORY_USER_META_VALUES, SKILL_SOURCE_VALUES, AGENT_SOURCE_VALUES, ASK_USER_QUESTION_TOOL_NAME;
 var init_events = __esm({
   "../protocol/src/events.ts"() {
     "use strict";
     DAEMON_MODE_VALUES = ["sdk", "tui"];
+    CLOUD_HISTORY_REFRESH_KIND = "cloud_history_refresh";
     SESSION_STATUS_VALUES = [
       "idle",
       "running",
@@ -8165,6 +8166,12 @@ var init_schemas = __esm({
     });
     SessionFileSchema = external_exports.object({
       sessionId: external_exports.string().min(1),
+      /** New gateway execution identity after session:new; defaults to sessionId for the first execution. */
+      cloudExecutionId: external_exports.string().min(1).optional(),
+      /** Owner gateway session observed in ready; proves the remote Pod was opened. */
+      cloudGatewaySessionId: external_exports.string().min(1).optional(),
+      /** Persisted before sending so daemon restart can retry the same gateway command ID. */
+      cloudPendingCommand: external_exports.object({ id: external_exports.string().min(1), text: external_exports.string(), prepared: external_exports.boolean().optional() }).optional(),
       cwd: external_exports.string().min(1),
       tool: external_exports.literal("claude").or(external_exports.string().min(1)).default("claude"),
       // 归一化 tool 侧 session id（CC = claude session uuid，Codex = codex 自己的 id）
@@ -10345,8 +10352,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path106 = req.path;
-        _req.url = typeof path106 === "string" ? path106 : req.url ? req.url.path || req.url : void 0;
+        const path107 = req.path;
+        _req.url = typeof path107 === "string" ? path107 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -10511,14 +10518,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path106) {
+    function parsePath(path107) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i2 = 0; i2 < path106.length; i2++) {
-        const char = path106[i2];
+      for (let i2 = 0; i2 < path107.length; i2++) {
+        const char = path107[i2];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -10649,10 +10656,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path106 of paths) {
-        const parts = parsePath(path106);
+      for (const path107 of paths) {
+        const parts = parsePath(path107);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path106, remove);
+          redactWildcardPath(obj, parts, censor, path107, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -10737,8 +10744,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path106) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path106];
+            const wrappedCensor = typeof censor === "function" ? (value, path107) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path107];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -10773,8 +10780,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path106 of pathsToClone) {
-        const parts = parsePath(path106);
+      for (const path107 of pathsToClone) {
+        const parts = parsePath(path107);
         let current = pathStructure;
         for (let i2 = 0; i2 < parts.length; i2++) {
           const part = parts[i2];
@@ -10826,24 +10833,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path106) {
-      if (typeof path106 !== "string") {
+    function validatePath(path107) {
+      if (typeof path107 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path106 === "") {
+      if (path107 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path106.includes("..")) {
-        throw new Error(`Invalid redaction path (${path106})`);
+      if (path107.includes("..")) {
+        throw new Error(`Invalid redaction path (${path107})`);
       }
-      if (path106.includes(",")) {
-        throw new Error(`Invalid redaction path (${path106})`);
+      if (path107.includes(",")) {
+        throw new Error(`Invalid redaction path (${path107})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i2 = 0; i2 < path106.length; i2++) {
-        const char = path106[i2];
+      for (let i2 = 0; i2 < path107.length; i2++) {
+        const char = path107[i2];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -10857,20 +10864,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path106})`);
+            throw new Error(`Invalid redaction path (${path107})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path106})`);
+        throw new Error(`Invalid redaction path (${path107})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path106 of paths) {
-        validatePath(path106);
+      for (const path107 of paths) {
+        validatePath(path107);
       }
     }
     function slowRedact(options = {}) {
@@ -11038,8 +11045,8 @@ var require_redaction = __commonJS({
         if (shape[k3] === null) {
           o2[k3] = (value) => topCensor(value, [k3]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path106) => {
-            return censor(value, [k3, ...path106]);
+          const wrappedCensor = typeof censor === "function" ? (value, path107) => {
+            return censor(value, [k3, ...path107]);
           } : censor;
           o2[k3] = Redact({
             paths: shape[k3],
@@ -11257,10 +11264,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs95 = require("fs");
+    var fs96 = require("fs");
     var EventEmitter2 = require("events");
     var inherits = require("util").inherits;
-    var path106 = require("path");
+    var path107 = require("path");
     var sleep2 = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -11314,20 +11321,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs95.mkdirSync(path106.dirname(file), { recursive: true });
-          const fd = fs95.openSync(file, flags, mode);
+          if (sonic.mkdir) fs96.mkdirSync(path107.dirname(file), { recursive: true });
+          const fd = fs96.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs95.mkdir(path106.dirname(file), { recursive: true }, (err) => {
+        fs96.mkdir(path107.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs95.open(file, flags, mode, fileOpened);
+          fs96.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs95.open(file, flags, mode, fileOpened);
+        fs96.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -11368,8 +11375,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs95.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs95.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs96.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs96.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -11378,15 +11385,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs95.writeSync(this.fd, this._writingBuf);
+            return fs96.writeSync(this.fd, this._writingBuf);
           }
-          return fs95.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs96.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs95.write(this.fd, this._writingBuf, this.release);
+            return fs96.write(this.fd, this._writingBuf, this.release);
           }
-          return fs95.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs96.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -11443,7 +11450,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs95.fsyncSync(this.fd);
+          fs96.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -11557,7 +11564,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs95.fsync(this.fd, (err) => {
+            fs96.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -11659,7 +11666,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs95.close(fd, (err) => {
+          fs96.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -11708,7 +11715,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n2 = Buffer.isBuffer(buf) ? fs95.writeSync(this.fd, buf) : fs95.writeSync(this.fd, buf, "utf8");
+          const n2 = Buffer.isBuffer(buf) ? fs96.writeSync(this.fd, buf) : fs96.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n2);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -11724,7 +11731,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs95.fsyncSync(this.fd);
+        fs96.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -11745,7 +11752,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n2 = fs95.writeSync(this.fd, buf);
+          const n2 = fs96.writeSync(this.fd, buf);
           buf = buf.subarray(n2);
           this._len = Math.max(this._len - n2, 0);
           if (buf.length <= 0) {
@@ -11773,13 +11780,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs95.writeSync(this.fd, this._writingBuf) : fs95.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs96.writeSync(this.fd, this._writingBuf) : fs96.writeSync(this.fd, this._writingBuf, "utf8");
           release2(null, written);
         } catch (err) {
           release2(err);
         }
       } else {
-        fs95.write(this.fd, this._writingBuf, release2);
+        fs96.write(this.fd, this._writingBuf, release2);
       }
     }
     function actualWriteBuffer() {
@@ -11788,7 +11795,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs95.writeSync(this.fd, this._writingBuf);
+          const written = fs96.writeSync(this.fd, this._writingBuf);
           release2(null, written);
         } catch (err) {
           release2(err);
@@ -11797,7 +11804,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs95.write(this.fd, this._writingBuf, release2);
+        fs96.write(this.fd, this._writingBuf, release2);
       }
     }
     function actualClose(sonic) {
@@ -11813,12 +11820,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs95.fsync(sonic.fd, closeWrapped);
+        fs96.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs95.close(sonic.fd, done);
+          fs96.close(sonic.fd, done);
         } else {
           done();
         }
@@ -14953,11 +14960,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path106, added, removed, oldPosInc, options) {
-        var last = path106.lastComponent;
+      addToPath: function addToPath(path107, added, removed, oldPosInc, options) {
+        var last = path107.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path106.oldPos + oldPosInc,
+            oldPos: path107.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -14967,7 +14974,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path106.oldPos + oldPosInc,
+            oldPos: path107.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -15549,10 +15556,10 @@ function attachmentToHistoryMessage(o2, ts) {
     const memories = raw.map((m3) => {
       if (!m3 || typeof m3 !== "object") return null;
       const rec6 = m3;
-      const path106 = typeof rec6.path === "string" ? rec6.path : null;
+      const path107 = typeof rec6.path === "string" ? rec6.path : null;
       const content = typeof rec6.content === "string" ? rec6.content : null;
-      if (!path106 || content == null) return null;
-      const entry = { path: path106, content };
+      if (!path107 || content == null) return null;
+      const entry = { path: path107, content };
       if (typeof rec6.mtimeMs === "number") entry.mtimeMs = rec6.mtimeMs;
       return entry;
     }).filter((m3) => m3 !== null);
@@ -16418,10 +16425,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m3) => {
       if (!m3 || typeof m3 !== "object") return null;
       const rec6 = m3;
-      const path106 = typeof rec6.path === "string" ? rec6.path : null;
+      const path107 = typeof rec6.path === "string" ? rec6.path : null;
       const content = typeof rec6.content === "string" ? rec6.content : null;
-      if (!path106 || content == null) return null;
-      const out = { path: path106, content };
+      if (!path107 || content == null) return null;
+      const out = { path: path107, content };
       if (typeof rec6.mtimeMs === "number") out.mtimeMs = rec6.mtimeMs;
       return out;
     }).filter((m3) => m3 !== null);
@@ -37395,8 +37402,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path106) {
-      var parts = path106.split("/");
+    exports2.resolve = function(path107) {
+      var parts = path107.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -43249,18 +43256,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o2);
       this.files[name] = object;
     };
-    var parentFolder = function(path106) {
-      if (path106.slice(-1) === "/") {
-        path106 = path106.substring(0, path106.length - 1);
+    var parentFolder = function(path107) {
+      if (path107.slice(-1) === "/") {
+        path107 = path107.substring(0, path107.length - 1);
       }
-      var lastSlash = path106.lastIndexOf("/");
-      return lastSlash > 0 ? path106.substring(0, lastSlash) : "";
+      var lastSlash = path107.lastIndexOf("/");
+      return lastSlash > 0 ? path107.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path106) {
-      if (path106.slice(-1) !== "/") {
-        path106 += "/";
+    var forceTrailingSlash = function(path107) {
+      if (path107.slice(-1) !== "/") {
+        path107 += "/";
       }
-      return path106;
+      return path107;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -44262,7 +44269,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path85.default.dirname(opts.recordPath);
+  const dir = import_node_path86.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -44276,8 +44283,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs66.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs66.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs67.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs67.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -44302,12 +44309,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs66, import_node_path85;
+var import_node_fs67, import_node_path86;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs66 = __toESM(require("fs"), 1);
-    import_node_path85 = __toESM(require("path"), 1);
+    import_node_fs67 = __toESM(require("fs"), 1);
+    import_node_path86 = __toESM(require("path"), 1);
   }
 });
 
@@ -44350,7 +44357,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs67.mkdtempSync)(import_node_path86.default.join(import_node_os32.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs68.mkdtempSync)(import_node_path87.default.join(import_node_os32.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -44511,19 +44518,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs67.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs68.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs67, import_node_os32, import_node_path86;
+var import_node_fs68, import_node_os32, import_node_path87;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs67 = require("fs");
+    import_node_fs68 = require("fs");
     import_node_os32 = __toESM(require("os"), 1);
-    import_node_path86 = __toESM(require("path"), 1);
+    import_node_path87 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -44795,10 +44802,10 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path84 = __toESM(require("path"), 1);
-var import_node_fs65 = __toESM(require("fs"), 1);
+var import_node_path85 = __toESM(require("path"), 1);
+var import_node_fs66 = __toESM(require("fs"), 1);
 var import_node_os31 = __toESM(require("os"), 1);
-var import_node_crypto27 = require("crypto");
+var import_node_crypto28 = require("crypto");
 var import_node_url6 = require("url");
 
 // src/logger.ts
@@ -45951,9 +45958,8 @@ function cloneState(s2) {
     currentTurnSender: s2.currentTurnSender
   };
 }
-var CLOUD_IDLE_KILL_DELAY_MS = 5 * 6e4;
 function idleKillDelayOf(state) {
-  if (isCloudTool(state.file.tool)) return CLOUD_IDLE_KILL_DELAY_MS;
+  if (isCloudTool(state.file.tool)) return void 0;
   const ms = state.subSessionMeta?.idleKillDelayMs;
   return ms !== void 0 && ms > 0 ? ms : void 0;
 }
@@ -46113,6 +46119,8 @@ function buildSpawnContext(state, deps) {
   const mcpConfigs = deps.getMcpConfigs?.() ?? [];
   const ctx = {
     cwd: file.cwd,
+    cloudExecutionId: file.cloudExecutionId,
+    cloudGatewaySessionId: file.cloudGatewaySessionId,
     toolSessionId: file.toolSessionId,
     model: file.model,
     permissionMode: file.permissionMode,
@@ -46367,7 +46375,11 @@ function pushEventToBufferInPlace(next, event, deps) {
     }
   }
   if (isUserText || isTurnEnd) {
-    next.file = { ...next.file, updatedAt: nowIso(deps) };
+    next.file = {
+      ...next.file,
+      updatedAt: nowIso(deps),
+      ...isCloudTool(next.file.tool) && next.status !== "error" && !(withSeq.kind === "turn_end" && withSeq.reason === "interrupted") ? { cloudPendingCommand: withSeq.kind === "user_text" ? { id: withSeq.uuid ?? `${next.file.sessionId}-${seq}`, text: withSeq.text } : void 0 } : {}
+    };
     effects.push({ kind: "persist-file", file: next.file });
     effects.push(sessionInfoFrame(next.file));
   }
@@ -46483,6 +46495,10 @@ function applyCommand(state, command, deps) {
       return { state: next, effects };
     }
     case "stop": {
+      if (isCloudTool(next.file.tool) && next.file.cloudPendingCommand) {
+        next.file = { ...next.file, cloudPendingCommand: void 0 };
+        effects.push({ kind: "persist-file", file: next.file }, sessionInfoFrame(next.file));
+      }
       for (const toolUseId of Object.keys(state.pendingQuestions ?? {})) {
         effects.push({
           kind: "emit-frame",
@@ -46616,6 +46632,8 @@ function applyCommand(state, command, deps) {
     case "new": {
       const {
         toolSessionId: _drop,
+        cloudPendingCommand: _cloudPendingCommand,
+        cloudGatewaySessionId: _cloudGatewaySessionId,
         contextUsage: _ctx,
         contextWindowSize: _win,
         gitBranch: _branch,
@@ -46626,6 +46644,8 @@ function applyCommand(state, command, deps) {
         ...rest
       } = next.file;
       void _drop;
+      void _cloudPendingCommand;
+      void _cloudGatewaySessionId;
       void _ctx;
       void _win;
       void _branch;
@@ -46634,6 +46654,7 @@ function applyCommand(state, command, deps) {
       void _titleGeneratedAt;
       const nextFile = {
         ...rest,
+        ...command.nextCloudExecutionId ? { cloudExecutionId: command.nextCloudExecutionId } : {},
         ...command.nextToolSessionId ? { toolSessionId: command.nextToolSessionId } : {},
         updatedAt: nowIso(deps)
       };
@@ -46696,9 +46717,31 @@ function reduceSessionInner(state, input, deps) {
     case "inject-events": {
       return applyEventBatch(state, input.events, deps);
     }
+    case "cloud-recovery-absent": {
+      if (!state.file.cloudPendingCommand) return { state, effects: [] };
+      const next = cloneState(state);
+      next.file = { ...next.file, cloudPendingCommand: void 0, cloudGatewaySessionId: void 0 };
+      return { state: next, effects: [{ kind: "persist-file", file: next.file }, sessionInfoFrame(next.file)] };
+    }
+    case "cloud-gateway-ready": {
+      if (state.file.cloudGatewaySessionId === input.gatewaySessionId) return { state, effects: [] };
+      const next = cloneState(state);
+      next.file = { ...next.file, cloudGatewaySessionId: input.gatewaySessionId };
+      return { state: next, effects: [{ kind: "persist-file", file: next.file }] };
+    }
+    case "cloud-command-prepared": {
+      const pending = state.file.cloudPendingCommand;
+      if (!pending || pending.id !== input.commandId) return { state, effects: [] };
+      const next = cloneState(state);
+      next.file = { ...next.file, cloudPendingCommand: { id: pending.id, text: input.text, prepared: true } };
+      return { state: next, effects: [{ kind: "persist-file", file: next.file }] };
+    }
     case "proc-exit": {
       const next = cloneState(state);
       next.procAlive = false;
+      if (isCloudTool(next.file.tool) && !next.file.cloudPendingCommand && next.file.cloudGatewaySessionId) {
+        next.file = { ...next.file, cloudGatewaySessionId: void 0 };
+      }
       next.status = "stopped";
       next.stdinClosed = false;
       next.pendingBgTasks = [];
@@ -46721,6 +46764,7 @@ function reduceSessionInner(state, input, deps) {
       return {
         state: next,
         effects: [
+          ...isCloudTool(state.file.tool) && state.file.cloudGatewaySessionId && !next.file.cloudGatewaySessionId ? [{ kind: "persist-file", file: next.file }] : [],
           ...interruptEffects,
           {
             kind: "emit-frame",
@@ -46867,6 +46911,7 @@ function reduceSessionInner(state, input, deps) {
       };
     }
     case "idle-kill-fired": {
+      if (isCloudTool(state.file.tool)) return { state, effects: [] };
       if (state.status !== "running-idle") {
         return { state, effects: [] };
       }
@@ -46939,6 +46984,7 @@ function reduceSessionInner(state, input, deps) {
 // src/session/runner.ts
 init_stdout_splitter();
 init_permission_stdio();
+init_protocol();
 init_claude_history();
 
 // src/tools/spawn-error.ts
@@ -47116,6 +47162,7 @@ var SessionRunner = class {
     this.state = initial;
   }
   hooks;
+  recoveringCloud = false;
   state;
   proc = null;
   // JSON-RPC 类 agent(codex app-server) 的 per-session 驱动器；非 null 时 runner 不用 spawn()/ChildProcess，
@@ -47189,6 +47236,17 @@ var SessionRunner = class {
       for (const w3 of waiters) w3();
     }
   }
+  recoverCloud() {
+    if (this.state.procAlive) return;
+    this.recoveringCloud = true;
+    try {
+      this.input({ kind: "command", command: { kind: "spawn-if-needed" } });
+      const pending = this.state.file.cloudPendingCommand;
+      if (pending) this.session?.startTurn(pending.text, pending.id, pending.prepared === true);
+    } finally {
+      this.recoveringCloud = false;
+    }
+  }
   // 等子进程退出（procAlive=false）。manager.stop 在发完 SIGTERM 后调它确保
   // 真停下来再 ack 给前端，从而避免"删 worktree 时 CC 还活着持有文件锁"的 race。
   // 已经停止则立即 resolve；超时（默认 3000ms）抛错由上层透传成 RPC error
@@ -47239,6 +47297,15 @@ var SessionRunner = class {
     }
     await this.sendControlRequest("interrupt");
   }
+  /** Daemon shutdown releases only the local cloud subscription. */
+  detachCloud() {
+    this.session?.detach?.();
+  }
+  /** Explicit cancellation has been acknowledged; close the local runner state. */
+  confirmCloudCancelled() {
+    this.detachCloud();
+    if (this.state.procAlive) this.input({ kind: "proc-exit", code: null });
+  }
   /**
    * file-sharing tool_use ↔ tool_result 配对（spec §6 PR 3）。
    *
@@ -47359,7 +47426,7 @@ var SessionRunner = class {
   applyEffect(effect) {
     switch (effect.kind) {
       case "spawn":
-        this.doSpawn(effect.ctx);
+        this.doSpawn(this.recoveringCloud && effect.ctx.cloudGatewaySessionId ? { ...effect.ctx, cloudAttachOnly: true } : effect.ctx);
         break;
       case "kill":
         if (this.session) {
@@ -47373,7 +47440,7 @@ var SessionRunner = class {
         break;
       case "write-stdin":
         if (this.session) {
-          this.session.startTurn(effect.payload);
+          this.session.startTurn(effect.payload, this.state.file.cloudPendingCommand?.id);
           break;
         }
         this.hooks.logger?.debug("[RG] write-stdin", {
@@ -47501,7 +47568,31 @@ var SessionRunner = class {
           this.clearIdleKillTimers();
           this.input({ kind: "proc-exit", code });
         },
-        onError: (message) => this.input({ kind: "proc-error", message })
+        onError: (message) => this.input({ kind: "proc-error", message }),
+        onHistoryGap: (synchronized) => this.hooks.broadcastFrame({
+          type: "session:control",
+          sessionId: this.state.file.sessionId,
+          kind: CLOUD_HISTORY_REFRESH_KIND,
+          synchronized
+        }, "broadcast"),
+        onRecoveryAbsent: () => {
+          this.input({ kind: "cloud-recovery-absent" });
+          this.hooks.broadcastFrame({ type: "session:control", sessionId: this.state.file.sessionId, kind: CLOUD_HISTORY_REFRESH_KIND, synchronized: true }, "broadcast");
+        },
+        onGatewayReady: (gatewaySessionId) => {
+          if (this.state.file.cloudGatewaySessionId === gatewaySessionId) return;
+          this.hooks.store.write({ ...this.state.file, cloudGatewaySessionId: gatewaySessionId });
+          this.input({ kind: "cloud-gateway-ready", gatewaySessionId });
+        },
+        onCommandPrepared: (commandId, text, prepared) => {
+          const pending = this.state.file.cloudPendingCommand;
+          if (!pending || pending.id !== commandId || prepared && pending.text !== text) return false;
+          if (!prepared) {
+            this.hooks.store.write({ ...this.state.file, cloudPendingCommand: { id: commandId, text, prepared: true } });
+            this.input({ kind: "cloud-command-prepared", commandId, text });
+          }
+          return true;
+        }
       });
       return;
     }
@@ -47695,6 +47786,10 @@ var SessionManager = class {
     this.deps = deps;
   }
   deps;
+  cloudCancel = null;
+  setCloudCanceller(cancel) {
+    this.cloudCancel = cancel;
+  }
   // sessionId → SessionRunner；在 send / ensureSession 时按需创建
   runners = /* @__PURE__ */ new Map();
   // 标题生成 in-flight 防重（进程内）；跨重启防重靠 SessionFile.aiLabelGeneratedAt
@@ -48562,6 +48657,19 @@ var SessionManager = class {
       ]
     };
   }
+  async deleteWithCloudCancel(args) {
+    const file = this.findOwnedSession(args.sessionId);
+    if (!file) throw new ClawdError(ERROR_CODES.SESSION_NOT_FOUND, args.sessionId);
+    const runner = this.runners.get(args.sessionId) ?? null;
+    if (isCloudTool(file.tool)) {
+      if (!file.cloudGatewaySessionId) runner?.confirmCloudCancelled();
+      else if (file.cloudPendingCommand || runner?.getState().procAlive) {
+        if (!this.cloudCancel) throw new Error("cloud canceller is not configured");
+        await this.cloudCancel(file, runner);
+      }
+    }
+    return this.delete(args);
+  }
   send(args, senderPrincipal) {
     const existing = this.getFile(args.sessionId);
     let runner = this.runners.get(args.sessionId);
@@ -48725,8 +48833,19 @@ var SessionManager = class {
   // 极端 OS 异常时才会用上。这样修掉了"前端 sessionStop 还没等 CC 退就去删 worktree
   // 撞文件锁"的 race，同时也覆盖 CC streaming hang / 幽灵进程这类 SIGTERM 杀不动的 case
   async stop(args) {
+    const file = this.findOwnedSession(args.sessionId);
     const runner = this.runners.get(args.sessionId);
-    if (!runner) return { response: { ok: true }, broadcast: [] };
+    if (file && isCloudTool(file.tool)) {
+      if (!file.cloudGatewaySessionId) runner?.confirmCloudCancelled();
+      else if (file.cloudPendingCommand || runner?.getState().procAlive) {
+        if (!this.cloudCancel) throw new Error("cloud canceller is not configured");
+        await this.cloudCancel(file, runner ?? null);
+      }
+    }
+    if (!runner) {
+      if (file && isCloudTool(file.tool) && file.cloudPendingCommand) this.writeOwned({ ...file, cloudPendingCommand: void 0 });
+      return { response: { ok: true }, broadcast: [] };
+    }
     this.clearPendingTurnEnd(args.sessionId);
     const { broadcast } = this.withCollector(() => {
       runner.input({ kind: "command", command: { kind: "stop" } });
@@ -48868,7 +48987,7 @@ var SessionManager = class {
     }
     return { response: normalized, broadcast };
   }
-  newSession(args) {
+  newSession(args, nextCloudExecutionId) {
     const existingFile = this.getFile(args.sessionId);
     this.titleGenPending.get(args.sessionId)?.abort();
     this.titleGenPending.delete(args.sessionId);
@@ -48879,7 +48998,7 @@ var SessionManager = class {
       const { value, broadcast } = this.withCollector(() => {
         runner.input({
           kind: "command",
-          command: { kind: "new", ...nextToolSessionId ? { nextToolSessionId } : {} }
+          command: { kind: "new", ...nextToolSessionId ? { nextToolSessionId } : {}, ...nextCloudExecutionId ? { nextCloudExecutionId } : {} }
         });
         return runner.getState().file;
       });
@@ -48888,6 +49007,8 @@ var SessionManager = class {
     const existing = this.findOwnedSession(args.sessionId);
     const {
       toolSessionId: _drop,
+      cloudPendingCommand: _cloudPendingCommand,
+      cloudGatewaySessionId: _cloudGatewaySessionId,
       contextUsage: _ctx,
       contextWindowSize: _win,
       gitBranch: _branch,
@@ -48897,6 +49018,8 @@ var SessionManager = class {
       ...rest
     } = existing;
     void _drop;
+    void _cloudPendingCommand;
+    void _cloudGatewaySessionId;
     void _ctx;
     void _win;
     void _branch;
@@ -48905,11 +49028,25 @@ var SessionManager = class {
     void _titleGeneratedAt;
     const updated = {
       ...rest,
+      ...nextCloudExecutionId ? { cloudExecutionId: nextCloudExecutionId } : {},
       ...nextToolSessionId ? { toolSessionId: nextToolSessionId } : {},
       updatedAt: nowIso2(this.deps)
     };
     return { response: this.writeOwned(updated), broadcast: [] };
   }
+  async newSessionWithCloudCancel(args) {
+    const file = this.getFile(args.sessionId);
+    if (isCloudTool(file.tool)) {
+      const runner = this.runners.get(args.sessionId) ?? null;
+      if (!file.cloudGatewaySessionId) runner?.confirmCloudCancelled();
+      else if (file.cloudPendingCommand || runner?.getState().procAlive) {
+        if (!this.cloudCancel) throw new Error("cloud canceller is not configured");
+        await this.cloudCancel(file, runner);
+      }
+      return this.newSession(args, (0, import_node_crypto3.randomUUID)());
+    }
+    return this.newSession(args);
+  }
   resume(args) {
     this.getFile(args.sessionId);
     const runner = this.runners.get(args.sessionId);
@@ -48974,11 +49111,20 @@ var SessionManager = class {
     }
     return { runningSessions: running };
   }
+  /** Reattach only to executions whose last turn lacks a durable end marker. */
+  recoverCloudSessions() {
+    for (const file of this.listAllOwned()) {
+      if (!isCloudTool(file.tool) || !file.cloudPendingCommand) continue;
+      const runner = this.ensureSession(file);
+      runner.recoverCloud();
+    }
+  }
   stopAll() {
     for (const controller of this.titleGenPending.values()) controller.abort();
     this.titleGenPending.clear();
     for (const r2 of this.runners.values()) {
-      r2.input({ kind: "command", command: { kind: "stop" } });
+      if (isCloudTool(r2.getState().file.tool)) r2.detachCloud();
+      else r2.input({ kind: "command", command: { kind: "stop" } });
     }
     this.pendingTurnDurationSignals.clear();
   }
@@ -52752,9 +52898,9 @@ var CentralClientError = class extends Error {
   cause;
   status;
 };
-async function centralRequest(opts, path106, init) {
+async function centralRequest(opts, path107, init) {
   const f2 = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}${path106}`;
+  const url = `${opts.api.replace(/\/+$/, "")}${path107}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
   let res;
@@ -53790,8 +53936,8 @@ function turnStartInput(text, resolveImage) {
   const items = [];
   let leftover = text;
   for (const m3 of text.matchAll(SKILL_RE)) {
-    const [marker, name, path106] = m3;
-    items.push({ type: "skill", name, path: path106 });
+    const [marker, name, path107] = m3;
+    items.push({ type: "skill", name, path: path107 });
     leftover = leftover.replace(marker, "");
   }
   for (const m3 of text.matchAll(ATTACHMENT_RE2)) {
@@ -61166,10 +61312,10 @@ function createGithubApi(args) {
   const doFetch = args.fetch ?? fetch;
   const seal = args.seal ?? sealWithSodium;
   const timeoutMs = args.timeoutMs ?? TIMEOUT_MS;
-  async function request(method, path106, body) {
+  async function request(method, path107, body) {
     let res;
     try {
-      res = await doFetch(`${API}${path106}`, {
+      res = await doFetch(`${API}${path107}`, {
         method,
         headers: {
           Authorization: `Bearer ${args.token}`,
@@ -61194,8 +61340,8 @@ function createGithubApi(args) {
     }
     return { status: res.status, json };
   }
-  async function must(method, path106, what, body) {
-    const r2 = await request(method, path106, body);
+  async function must(method, path107, what, body) {
+    const r2 = await request(method, path107, body);
     if (r2.status < 200 || r2.status >= 300) throw new GithubApiError(r2.status, explain(r2.status, what, r2.json));
     return r2.json;
   }
@@ -61240,9 +61386,9 @@ function createGithubApi(args) {
         return { env: x2.name, ...Number.isFinite(at3) ? { setAt: at3 } : {} };
       });
     },
-    async getJson(path106) {
+    async getJson(path107) {
       try {
-        const r2 = await request("GET", path106);
+        const r2 = await request("GET", path107);
         return r2.status >= 200 && r2.status < 300 ? r2.json : void 0;
       } catch {
         return void 0;
@@ -62794,8 +62940,8 @@ function refreshPathFromLoginShell() {
       timeout: 3e3,
       stdio: ["ignore", "pipe", "ignore"]
     });
-    const path106 = out.trim();
-    if (path106) process.env.PATH = path106;
+    const path107 = out.trim();
+    if (path107) process.env.PATH = path107;
   } catch {
   }
 }
@@ -63597,10 +63743,10 @@ function createCloudPersonaBotClient(opts) {
   const f2 = opts.fetchImpl ?? fetch;
   const base = opts.api.replace(/\/+$/, "");
   const route = (personaId2) => `/api/lark-bot/cloud/${encodeURIComponent(personaId2)}`;
-  async function request(method, path106, body) {
+  async function request(method, path107, body) {
     const pass = opts.getLoginPass();
     if (!pass) throw new LarkBotCloudError("\u98DE\u4E66\u767B\u5F55\u540E\u624D\u80FD\u7BA1\u7406\u4E91 Persona \u7684 Bot", 401);
-    const response = await f2(base + path106, {
+    const response = await f2(base + path107, {
       method,
       headers: { authorization: `Bearer ${pass}`, "content-type": "application/json" },
       ...body ? { body: JSON.stringify(body) } : {},
@@ -63609,7 +63755,7 @@ function createCloudPersonaBotClient(opts) {
     const json = await response.json().catch(() => ({}));
     if (!response.ok) {
       const detail = typeof json.message === "string" ? json.message : `HTTP ${response.status}`;
-      throw new LarkBotCloudError(`cloud bot ${method} ${path106}: ${detail}`, response.status);
+      throw new LarkBotCloudError(`cloud bot ${method} ${path107}: ${detail}`, response.status);
     }
     return json;
   }
@@ -64603,6 +64749,7 @@ var GATEWAY_ROUTES = {
   sessionSend: (personaId2, sessionId) => `/p/${encodeURIComponent(personaId2)}/session/${encodeURIComponent(sessionId)}`,
   sessionMirror: (personaId2, sessionId) => `/p/${encodeURIComponent(personaId2)}/session/${encodeURIComponent(sessionId)}/mirror`,
   eventSession: (personaId2) => `/p/${encodeURIComponent(personaId2)}/session/events`,
+  eventCancel: (personaId2) => `/p/${encodeURIComponent(personaId2)}/session/events:cancel`,
   eventSend: (personaId2, sessionId) => `/p/${encodeURIComponent(personaId2)}/session/events/${encodeURIComponent(sessionId)}`,
   // 调用方自己那块盘的用量（design 2026-09-19-cloud-volume-usage §3.3）：同样按人、不挂 persona
   volume: () => "/me/volume",
@@ -64726,20 +64873,42 @@ var CloudGatewayClient = class {
   }
   async openEventSession(personaId2, opts) {
     const { apiKey, gatewayUrl } = await this.credentials();
+    const health = await this.fetchImpl(gatewayUrl + GATEWAY_ROUTES.healthz());
+    if (!health.ok || (await health.json()).sessionProtocolVersion !== 2) throw new Error("\u4E91 gateway \u7684\u4F1A\u8BDD\u534F\u8BAE\u7248\u672C\u4E0D\u5339\u914D\uFF0C\u8BF7\u5148\u5347\u7EA7 gateway");
     return openHttpEventSession({
       fetchImpl: this.fetchImpl,
       gatewayUrl,
       apiKey,
       personaId: personaId2,
+      clientSessionId: opts.clientSessionId,
+      gatewaySessionId: opts.gatewaySessionId,
       engineSessionId: opts.toolSessionId,
       instructions: opts.instructions,
       purpose: opts.purpose,
       expectedEngine: opts.expectedEngine,
       effort: opts.effort,
       personaMode: opts.personaMode,
+      attachOnly: opts.attachOnly,
       logger: this.deps.logger
     });
   }
+  async cancelEventSession(personaId2, clientSessionId, gatewaySessionId) {
+    const { apiKey, gatewayUrl } = await this.credentials();
+    const res = await this.fetchImpl(gatewayUrl + GATEWAY_ROUTES.eventCancel(personaId2), {
+      method: "POST",
+      headers: { authorization: `Bearer ${apiKey}`, "content-type": "application/json" },
+      body: JSON.stringify({ protocolVersion: 2, clientSessionId, gatewaySessionId })
+    });
+    if (!res.ok) {
+      let message = `gateway \u56DE ${res.status}`;
+      try {
+        const body = await res.json();
+        if (typeof body.message === "string") message = body.message;
+      } catch {
+      }
+      throw new Error(message);
+    }
+  }
   /**
    * 看板数据（design 2026-09-23-cloud-persona-metrics §3.8）：GET /metrics/<persona>?window&entry，**原样回**状态码与 body——
    * 形状真源在 gateway 的 cloud-persona-metrics，daemon 只是替浏览器拿本机 api key 转一跳。拿不到 key / 连不上 / 超时 → 抛（路由折成 502）。
@@ -64796,9 +64965,9 @@ var CloudGatewayClient = class {
   }
 };
 function openHttpEventSession(opts) {
-  const { fetchImpl, gatewayUrl, apiKey, personaId: personaId2, engineSessionId, instructions, purpose, effort, personaMode, expectedEngine, logger } = opts;
+  const { fetchImpl, gatewayUrl, apiKey, personaId: personaId2, clientSessionId, gatewaySessionId, engineSessionId, instructions, purpose, effort, personaMode, attachOnly, expectedEngine, logger } = opts;
   const headers = { authorization: `Bearer ${apiKey}`, "content-type": "application/json" };
-  const abort = new AbortController();
+  let abort = new AbortController();
   const eventCbs = [];
   const controlCbs = [];
   const closeCbs = [];
@@ -64807,7 +64976,11 @@ function openHttpEventSession(opts) {
   let closed = false;
   let readyControl = null;
   let errorControl = null;
-  let sessionId = null;
+  let sessionId = gatewaySessionId ?? null;
+  let lastSeq = 0;
+  let everReady = false;
+  let connected = false;
+  const attachWaiters = [];
   let resolveReady;
   let rejectReady;
   const ready = new Promise((resolve9, reject) => {
@@ -64829,87 +65002,146 @@ function openHttpEventSession(opts) {
     closed = true;
     rejectReady(new Error(message ?? "event session closed"));
     abort.abort();
+    for (const resolve9 of attachWaiters.splice(0)) resolve9();
     for (const cb of closeCbs) cb();
   };
+  const waitForAttach = () => connected ? Promise.resolve() : new Promise((resolve9) => {
+    attachWaiters.push(resolve9);
+  });
+  const retryWait = () => new Promise((resolve9) => {
+    const timer = setTimeout(resolve9, 250);
+    timer.unref?.();
+    abort.signal.addEventListener("abort", () => {
+      clearTimeout(timer);
+      resolve9();
+    }, { once: true });
+  });
   void (async () => {
-    try {
-      const res = await fetchImpl(gatewayUrl + GATEWAY_ROUTES.eventSession(personaId2), {
-        method: "POST",
-        headers,
-        body: JSON.stringify({ expectedEngine, ...engineSessionId ? { engineSessionId } : {}, ...instructions ? { instructions } : {}, ...purpose ? { purpose } : {}, ...effort ? { effort } : {}, ...personaMode ? { personaMode } : {} }),
-        signal: abort.signal
-      });
-      if (!res.ok || !res.body) {
-        let message = `gateway \u56DE ${res.status}`;
-        try {
-          const body = await res.json();
-          if (typeof body.message === "string") message = body.message;
-          if (body.error === "SESSION_VERSION_EXPIRED" && !message.includes("SESSION_VERSION_EXPIRED")) message = `SESSION_VERSION_EXPIRED: ${message}`;
-        } catch {
-        }
-        finish(message);
-        return;
-      }
-      const reader = res.body.getReader();
-      const decoder = new TextDecoder();
-      let pending = "";
-      for (; ; ) {
-        const { value, done } = await reader.read();
-        if (done) break;
-        pending += decoder.decode(value, { stream: true });
-        const lines = pending.split("\n");
-        pending = lines.pop() ?? "";
-        for (const line of lines) {
-          if (!line.trim()) continue;
-          const data = JSON.parse(line);
-          if (data.clawd === "events") {
-            const events = ParsedEventSchema.array().parse(data.events);
-            if (!eventCbs.length) earlyEvents.push(events);
-            for (const cb of eventCbs) cb(events);
-            continue;
+    while (!closed) {
+      abort = new AbortController();
+      let fatal = false;
+      try {
+        const res = await fetchImpl(gatewayUrl + GATEWAY_ROUTES.eventSession(personaId2), {
+          method: "POST",
+          headers,
+          body: JSON.stringify({ protocolVersion: 2, clientSessionId, afterSeq: lastSeq, ...sessionId ? { gatewaySessionId: sessionId } : {}, expectedEngine, ...engineSessionId ? { engineSessionId } : {}, ...instructions ? { instructions } : {}, ...purpose ? { purpose } : {}, ...effort ? { effort } : {}, ...personaMode ? { personaMode } : {}, ...attachOnly ? { attachOnly: true } : {} }),
+          signal: abort.signal
+        });
+        if (!res.ok || !res.body) {
+          let message = `gateway \u56DE ${res.status}`;
+          let code;
+          try {
+            const body = await res.json();
+            if (typeof body.message === "string") message = body.message;
+            code = body.error;
+            if (body.error === "SESSION_VERSION_EXPIRED" && !message.includes("SESSION_VERSION_EXPIRED")) message = `SESSION_VERSION_EXPIRED: ${message}`;
+          } catch {
           }
-          const control = parseControlLine(line);
-          if (!control) throw new Error("gateway event stream contains an unknown line");
-          if (control.kind === "ready") {
-            if (!control.session) throw new Error("gateway ready line has no session id");
-            if (control.engine !== expectedEngine) {
-              finish(control.engine ? `SESSION_VERSION_EXPIRED: \u5F53\u524D Pod \u662F ${control.engine}\uFF0C\u8FD9\u6761\u4F1A\u8BDD\u9700\u8981 ${expectedEngine}` : "gateway \u7684 ready \u63A7\u5236\u884C\u6CA1\u5E26 engine\uFF0Cgateway \u592A\u8001\uFF0C\u5148\u5347 gateway");
+          if ((attachOnly || sessionId) && res.status === 404 && code === "SESSION_NOT_FOUND") {
+            emitControl({ kind: "closed", reason: "not-found" });
+            finish();
+            return;
+          }
+          if (res.status === 426 || res.status === 400 || res.status === 401 || res.status === 403 || res.status === 409 || res.status === 410 || code === "CLIENT_UPGRADE_REQUIRED") {
+            fatal = true;
+            finish(message);
+            return;
+          }
+          throw new Error(message);
+        }
+        connected = true;
+        for (const resolve9 of attachWaiters.splice(0)) resolve9();
+        const reader = res.body.getReader();
+        const decoder = new TextDecoder();
+        let pending = "";
+        for (; ; ) {
+          const { value, done } = await reader.read();
+          if (done) break;
+          pending += decoder.decode(value, { stream: true });
+          const lines = pending.split("\n");
+          pending = lines.pop() ?? "";
+          for (const line of lines) {
+            if (!line.trim()) continue;
+            const data = JSON.parse(line);
+            if (data.clawd === "events") {
+              if (typeof data.seq === "number") {
+                if (data.seq <= lastSeq) continue;
+                lastSeq = data.seq;
+              }
+              const events = ParsedEventSchema.array().parse(data.events);
+              if (!eventCbs.length) earlyEvents.push(events);
+              for (const cb of eventCbs) cb(events);
+              continue;
+            }
+            const control = parseControlLine(line);
+            if (!control) throw new Error("gateway event stream contains an unknown line");
+            if (control.kind === "ready") {
+              if (!control.session) throw new Error("gateway ready line has no session id");
+              if (control.engine !== expectedEngine) {
+                finish(control.engine ? `SESSION_VERSION_EXPIRED: \u5F53\u524D Pod \u662F ${control.engine}\uFF0C\u8FD9\u6761\u4F1A\u8BDD\u9700\u8981 ${expectedEngine}` : "gateway \u7684 ready \u63A7\u5236\u884C\u6CA1\u5E26 engine\uFF0Cgateway \u592A\u8001\uFF0C\u5148\u5347 gateway");
+                return;
+              }
+              sessionId = control.session;
+              everReady = true;
+              resolveReady();
+            }
+            emitControl(control);
+            if (control.kind === "error") {
+              finish();
+              return;
+            }
+            if (control.kind === "closed") {
+              finish();
               return;
             }
-            sessionId = control.session;
-            resolveReady();
           }
-          emitControl(control);
-          if (control.kind === "error") {
-            finish();
+        }
+        connected = false;
+      } catch (e) {
+        if (!closed) {
+          if (e instanceof SyntaxError || e.name === "ZodError") {
+            finish("gateway event stream contains invalid data");
             return;
           }
+          connected = false;
+          logger?.warn("cloud event stream failed; reconnecting", { code: e.code, name: e.name, ready: everReady });
         }
       }
-      finish();
-    } catch (e) {
-      if (!closed) {
-        logger?.warn("cloud event stream failed", { message: e.message });
-        finish(`\u4E91\u4E0A\u4E8B\u4EF6\u901A\u9053\u51FA\u9519\uFF1A${e.message}`);
-      }
+      if (!closed && !fatal) await retryWait();
     }
   })();
   return {
     send(command) {
       const next = sendChain.then(async () => {
         await ready;
-        if (closed || !sessionId) throw new Error("event session closed");
-        const res = await fetchImpl(gatewayUrl + GATEWAY_ROUTES.eventSend(personaId2, sessionId), { method: "POST", headers, body: JSON.stringify(command) });
-        if (!res.ok) {
+        while (!closed) {
+          await waitForAttach();
+          if (!sessionId) continue;
+          let res;
+          try {
+            res = await fetchImpl(gatewayUrl + GATEWAY_ROUTES.eventSend(personaId2, sessionId), { method: "POST", headers, body: JSON.stringify(command) });
+          } catch {
+            connected = false;
+            abort.abort();
+            await retryWait();
+            continue;
+          }
+          if (res.ok) return;
+          if (res.status === 404 || res.status >= 500) {
+            connected = false;
+            abort.abort();
+            await retryWait();
+            continue;
+          }
           let message = `gateway \u56DE ${res.status}`;
           try {
             const body = await res.json();
             if (typeof body.message === "string") message = body.message;
           } catch {
           }
-          finish(message);
           throw new Error(message);
         }
+        throw new Error("event session closed");
       });
       sendChain = next.catch(() => {
       });
@@ -64957,10 +65189,17 @@ function parseControlLine(line) {
         personaDir: typeof r2.personaDir === "string" ? r2.personaDir : "",
         workDir: typeof r2.workDir === "string" ? r2.workDir : "",
         ...typeof r2.model === "string" ? { model: r2.model } : {},
-        ...typeof r2.engine === "string" ? { engine: r2.engine } : {}
+        ...typeof r2.engine === "string" ? { engine: r2.engine } : {},
+        ...typeof r2.replayGap === "boolean" ? { replayGap: r2.replayGap } : {},
+        ...typeof r2.historySynchronized === "boolean" ? { historySynchronized: r2.historySynchronized } : {},
+        ...typeof r2.activeTurn === "boolean" ? { activeTurn: r2.activeTurn } : {}
       };
     case "error":
       return { kind: "error", message: typeof r2.message === "string" ? r2.message : "gateway error" };
+    case "closed":
+      return { kind: "closed", reason: typeof r2.reason === "string" ? r2.reason : "unknown" };
+    case "history":
+      return { kind: "history", synchronized: r2.synchronized === true };
     default:
       return { kind: "ping" };
   }
@@ -65153,11 +65392,97 @@ function openHttpLineStream(opts) {
   };
 }
 
+// src/cloud/cancel-outbox.ts
+var import_node_fs39 = __toESM(require("fs"), 1);
+var import_node_path44 = __toESM(require("path"), 1);
+var CloudCancelOutbox = class {
+  constructor(dir, send2, logger) {
+    this.dir = dir;
+    this.send = send2;
+    this.logger = logger;
+  }
+  dir;
+  send;
+  logger;
+  timer = null;
+  inFlight = /* @__PURE__ */ new Set();
+  record(clientSessionId, personaId2, gatewaySessionId) {
+    if (!clientSessionId || !personaId2 || !gatewaySessionId) throw new Error("cloud cancel requires client, gateway and persona IDs");
+    import_node_fs39.default.mkdirSync(this.dir, { recursive: true, mode: 448 });
+    const target = this.pathFor(clientSessionId);
+    const temporary = `${target}.tmp-${process.pid}-${Date.now()}`;
+    import_node_fs39.default.writeFileSync(temporary, JSON.stringify({ clientSessionId, personaId: personaId2, gatewaySessionId }), { mode: 384 });
+    import_node_fs39.default.renameSync(temporary, target);
+    this.inFlight.add(clientSessionId);
+  }
+  confirm(clientSessionId) {
+    import_node_fs39.default.rmSync(this.pathFor(clientSessionId), { force: true });
+    this.inFlight.delete(clientSessionId);
+  }
+  release(clientSessionId) {
+    this.inFlight.delete(clientSessionId);
+  }
+  async request(clientSessionId, personaId2, gatewaySessionId) {
+    this.record(clientSessionId, personaId2, gatewaySessionId);
+    try {
+      await this.send(personaId2, clientSessionId, gatewaySessionId);
+      this.confirm(clientSessionId);
+    } catch (e) {
+      this.release(clientSessionId);
+      throw e;
+    }
+  }
+  async flush() {
+    let names;
+    try {
+      names = import_node_fs39.default.readdirSync(this.dir).filter((name) => name.endsWith(".json"));
+    } catch (e) {
+      if (e.code === "ENOENT") return;
+      throw e;
+    }
+    for (const name of names) {
+      const target = import_node_path44.default.join(this.dir, name);
+      let pending;
+      try {
+        pending = JSON.parse(import_node_fs39.default.readFileSync(target, "utf8"));
+      } catch {
+        continue;
+      }
+      if (!pending.clientSessionId || !pending.personaId || !pending.gatewaySessionId || this.pathFor(pending.clientSessionId) !== target) continue;
+      if (this.inFlight.has(pending.clientSessionId)) continue;
+      this.inFlight.add(pending.clientSessionId);
+      try {
+        await this.send(pending.personaId, pending.clientSessionId, pending.gatewaySessionId);
+        import_node_fs39.default.rmSync(target, { force: true });
+      } catch (e) {
+        this.logger?.warn("cloud cancel pending", { sessionId: pending.clientSessionId, error: e.message });
+      } finally {
+        this.inFlight.delete(pending.clientSessionId);
+      }
+    }
+  }
+  start() {
+    if (this.timer) return;
+    const retry = () => void this.flush().catch((e) => this.logger?.warn("cloud cancel outbox flush failed", { error: e.message }));
+    retry();
+    this.timer = setInterval(retry, 3e4);
+    this.timer.unref?.();
+  }
+  stop() {
+    if (this.timer) clearInterval(this.timer);
+    this.timer = null;
+  }
+  pathFor(clientSessionId) {
+    return import_node_path44.default.join(this.dir, `${safeFileName(clientSessionId)}.json`);
+  }
+};
+
 // src/tools/codex-cloud.ts
 init_protocol();
 
 // src/tools/codex-cloud-session.ts
-var import_node_fs39 = __toESM(require("fs"), 1);
+var import_node_fs40 = __toESM(require("fs"), 1);
+var import_node_crypto13 = require("crypto");
 
 // src/tools/cloud-portable-input.ts
 async function portableCloudInput(text, resolvers) {
@@ -65186,7 +65511,7 @@ function cloudImageInput(deps) {
     const mime = lookupMime(p3);
     if (!mime.startsWith("image/")) return null;
     try {
-      const bytes = (deps.readFile ?? import_node_fs39.default.readFileSync)(p3);
+      const bytes = (deps.readFile ?? import_node_fs40.default.readFileSync)(p3);
       return { type: "image", url: `data:${mime};base64,${bytes.toString("base64")}` };
     } catch (e) {
       deps.logger?.warn("cloud image attachment unreadable", { path: p3, message: e.message });
@@ -65196,18 +65521,22 @@ function cloudImageInput(deps) {
 }
 function createCloudCodexSession(ctx, sink, deps) {
   const personaId2 = personaIdFromCloudCwd(ctx.cwd);
+  const clientSessionId = ctx.titleOnly ? (0, import_node_crypto13.randomUUID)() : ctx.cloudExecutionId ?? ctx.env?.CLAWD_SESSION_ID;
   let channel = null;
   let closed = false;
+  let detached = false;
+  let stopping = null;
   let exited = false;
+  let ready = false;
   const exit = () => {
     if (!exited) {
       exited = true;
       sink.onExit(null);
     }
   };
-  if (!personaId2) {
+  if (!personaId2 || !clientSessionId) {
     queueMicrotask(() => {
-      sink.onError(`cloud session has no persona id (cwd=${ctx.cwd})`);
+      sink.onError(`cloud session is missing ${personaId2 ? "CLAWD_SESSION_ID" : "persona id"}`);
       exit();
     });
     return { startTurn() {
@@ -65218,23 +65547,36 @@ function createCloudCodexSession(ctx, sink, deps) {
   }
   const opened = deps.client.openEventSession(personaId2, {
     expectedEngine: "codex",
+    clientSessionId,
+    ...ctx.cloudGatewaySessionId ? { gatewaySessionId: ctx.cloudGatewaySessionId } : {},
     ...ctx.toolSessionId ? { toolSessionId: ctx.toolSessionId } : {},
     ...ctx.extraSystemPrompt ? { instructions: ctx.extraSystemPrompt } : {},
     ...ctx.effort ? { effort: ctx.effort } : {},
     ...ctx.personaMode ? { personaMode: ctx.personaMode } : {},
-    ...ctx.titleOnly ? { purpose: "title" } : {}
+    ...ctx.titleOnly ? { purpose: "title" } : {},
+    ...ctx.cloudAttachOnly ? { attachOnly: true } : {}
   }).then(
     (opened2) => {
       channel = opened2;
       channel.onEvents((events) => sink.pushEvents(events));
       channel.onControl((c2) => {
-        if (c2.kind === "queued") {
+        if (c2.kind === "ready") {
+          ready = true;
+          sink.onGatewayReady?.(c2.session);
+          if (c2.replayGap || c2.historySynchronized === false) sink.onHistoryGap?.(c2.historySynchronized === true);
+        } else if (c2.kind === "queued") {
           sink.pushEvents([{ kind: "meta-text", text: `\u4E91\u4E0A\u673A\u5668\u6709 ${c2.running} \u4E2A\u4EFB\u52A1\u5728\u8DD1\uFF0C\u7B49\u4E00\u4E2A\u7ED3\u675F\u5C31\u8F6E\u5230\u4F60` }]);
+        } else if (c2.kind === "history") {
+          sink.onHistoryGap?.(c2.synchronized);
         } else if (c2.kind === "error") {
-          sink.onError(`\u4E91\u4E0A persona \u8D77\u4E0D\u6765\uFF1A${c2.message}`);
+          sink.onError(`${ready ? "\u4E91\u4E0A\u6267\u884C\u5931\u8D25" : "\u4E91\u4E0A persona \u8D77\u4E0D\u6765"}\uFF1A${c2.message}`);
+        } else if (c2.kind === "closed" && c2.reason === "not-found") {
+          sink.onRecoveryAbsent?.();
         }
       });
-      channel.onClose(exit);
+      channel.onClose(() => {
+        if (!detached) exit();
+      });
       if (closed) channel.close();
       return channel;
     },
@@ -65253,12 +65595,13 @@ function createCloudCodexSession(ctx, sink, deps) {
     });
   };
   return {
-    startTurn(text) {
+    startTurn(text, commandId = (0, import_node_crypto13.randomUUID)(), prepared = false) {
       send2(async () => {
         const ch = await opened;
         if (closed) return;
-        const portable = await portableCloudInput(text, { resolveCodexImage: cloudImageInput(deps) });
-        await ch.send({ command: "turn", text: portable });
+        const portable = prepared ? text : await portableCloudInput(text, { resolveCodexImage: cloudImageInput(deps) });
+        if (sink.onCommandPrepared?.(commandId, portable, prepared) === false) return;
+        await ch.send({ command: "turn", text: portable, commandId });
       });
     },
     respondPermission(requestId, allow) {
@@ -65267,11 +65610,23 @@ function createCloudCodexSession(ctx, sink, deps) {
     interrupt() {
       send2(async () => (await opened).send({ command: "interrupt" }));
     },
-    async stop() {
+    detach() {
+      detached = true;
       closed = true;
-      const ch = await opened.catch(() => null);
-      ch?.close();
-      exit();
+      channel?.close();
+    },
+    stop() {
+      if (stopping) return stopping;
+      closed = true;
+      stopping = (async () => {
+        const ch = await opened.catch(() => null);
+        if (ch) {
+          await ch.send({ command: "cancel" });
+          ch.close();
+        }
+        exit();
+      })();
+      return stopping;
     }
   };
 }
@@ -65344,7 +65699,7 @@ init_protocol();
 
 // src/tools/pi.ts
 var import_node_child_process12 = require("child_process");
-var import_node_fs41 = __toESM(require("fs"), 1);
+var import_node_fs42 = __toESM(require("fs"), 1);
 init_protocol();
 
 // src/tools/pi-rpc-client.ts
@@ -65444,9 +65799,9 @@ var PiRpcClient = class {
 
 // src/tools/pi-session.ts
 var import_node_child_process11 = require("child_process");
-var import_node_crypto13 = require("crypto");
-var import_node_fs40 = __toESM(require("fs"), 1);
-var import_node_path44 = __toESM(require("path"), 1);
+var import_node_crypto14 = require("crypto");
+var import_node_fs41 = __toESM(require("fs"), 1);
+var import_node_path45 = __toESM(require("path"), 1);
 
 // src/tools/pi-events.ts
 init_protocol();
@@ -65717,9 +66072,9 @@ ${dirs.map((d2) => `- ${d2}`).join("\n")}`;
 }
 function createPiSession(ctx, sink, deps = {}) {
   const cmd = process.env.PI_BIN ?? "pi";
-  const sessionId = ctx.toolSessionId ?? (0, import_node_crypto13.randomUUID)();
-  const skillsDir = import_node_path44.default.join(ctx.cwd, ".claude", "skills");
-  const exists = deps.skillsDirExists ?? ((d2) => import_node_fs40.default.existsSync(d2));
+  const sessionId = ctx.toolSessionId ?? (0, import_node_crypto14.randomUUID)();
+  const skillsDir = import_node_path45.default.join(ctx.cwd, ".claude", "skills");
+  const exists = deps.skillsDirExists ?? ((d2) => import_node_fs41.default.existsSync(d2));
   const args = buildPiArgs(ctx, {
     sessionId,
     skillsDir: exists(skillsDir) ? skillsDir : void 0,
@@ -65781,10 +66136,10 @@ var PI_DEFAULT_MODEL_ENTRY = {
 };
 var PI_FULL_ACCESS = { id: "never", label: "Full Access", description: "pi \u65E0\u5BA1\u6279\uFF1A\u4ECE\u4E0D\u8BE2\u95EE\uFF0C\u81EA\u4E3B\u6267\u884C" };
 async function probePi(env = process.env) {
-  if (env.PI_BIN && import_node_fs41.default.existsSync(env.PI_BIN)) return { available: true, path: env.PI_BIN };
+  if (env.PI_BIN && import_node_fs42.default.existsSync(env.PI_BIN)) return { available: true, path: env.PI_BIN };
   try {
     const out = (0, import_node_child_process12.execFileSync)("which", ["pi"], { encoding: "utf8" }).trim();
-    if (out && import_node_fs41.default.existsSync(out)) return { available: true, path: out };
+    if (out && import_node_fs42.default.existsSync(out)) return { available: true, path: out };
   } catch {
   }
   return { available: false };
@@ -65954,25 +66309,29 @@ var PiAdapter = class {
 };
 
 // src/tools/pi-cloud-session.ts
-var import_node_crypto14 = require("crypto");
+var import_node_crypto15 = require("crypto");
 function cloudPiInstructions(ctx) {
   return [ctx.extraSystemPrompt, workDirPrompt(CLOUD_WORKSPACE_SLOT, ctx.personaMode ?? "owner")].filter((x2) => Boolean(x2)).join("\n\n");
 }
 function createCloudPiSession(ctx, sink, deps) {
   const personaId2 = personaIdFromCloudCwd(ctx.cwd);
-  const sessionId = ctx.toolSessionId ?? (0, import_node_crypto14.randomUUID)();
+  const clientSessionId = ctx.titleOnly ? (0, import_node_crypto15.randomUUID)() : ctx.cloudExecutionId ?? ctx.env?.CLAWD_SESSION_ID;
+  const sessionId = ctx.toolSessionId ?? (0, import_node_crypto15.randomUUID)();
   let channel = null;
   let closed = false;
+  let detached = false;
+  let stopping = null;
   let exited = false;
+  let ready = false;
   const exit = () => {
     if (!exited) {
       exited = true;
       sink.onExit(null);
     }
   };
-  if (!personaId2) {
+  if (!personaId2 || !clientSessionId) {
     queueMicrotask(() => {
-      sink.onError(`cloud session has no persona id (cwd=${ctx.cwd})`);
+      sink.onError(`cloud session is missing ${personaId2 ? "CLAWD_SESSION_ID" : "persona id"}`);
       exit();
     });
     return { startTurn() {
@@ -65981,18 +66340,28 @@ function createCloudPiSession(ctx, sink, deps) {
     }, async stop() {
     } };
   }
-  const opened = deps.client.openEventSession(personaId2, { expectedEngine: "pi", toolSessionId: sessionId, instructions: ctx.titleOnly ? "" : cloudPiInstructions(ctx), ...ctx.titleOnly ? { purpose: "title" } : {} }).then(
+  const opened = deps.client.openEventSession(personaId2, { expectedEngine: "pi", clientSessionId, ...ctx.cloudGatewaySessionId ? { gatewaySessionId: ctx.cloudGatewaySessionId } : {}, toolSessionId: sessionId, instructions: ctx.titleOnly ? "" : cloudPiInstructions(ctx), ...ctx.titleOnly ? { purpose: "title" } : {}, ...ctx.cloudAttachOnly ? { attachOnly: true } : {} }).then(
     (opened2) => {
       channel = opened2;
       channel.onEvents((events) => sink.pushEvents(events));
       channel.onControl((c2) => {
-        if (c2.kind === "queued") {
+        if (c2.kind === "ready") {
+          ready = true;
+          sink.onGatewayReady?.(c2.session);
+          if (c2.replayGap || c2.historySynchronized === false) sink.onHistoryGap?.(c2.historySynchronized === true);
+        } else if (c2.kind === "queued") {
           sink.pushEvents([{ kind: "meta-text", text: `\u4E91\u4E0A\u673A\u5668\u6709 ${c2.running} \u4E2A\u4EFB\u52A1\u5728\u8DD1\uFF0C\u7B49\u4E00\u4E2A\u7ED3\u675F\u5C31\u8F6E\u5230\u4F60` }]);
+        } else if (c2.kind === "history") {
+          sink.onHistoryGap?.(c2.synchronized);
         } else if (c2.kind === "error") {
-          sink.onError(`\u4E91\u4E0A persona \u8D77\u4E0D\u6765\uFF1A${c2.message}`);
+          sink.onError(`${ready ? "\u4E91\u4E0A\u6267\u884C\u5931\u8D25" : "\u4E91\u4E0A persona \u8D77\u4E0D\u6765"}\uFF1A${c2.message}`);
+        } else if (c2.kind === "closed" && c2.reason === "not-found") {
+          sink.onRecoveryAbsent?.();
         }
       });
-      channel.onClose(exit);
+      channel.onClose(() => {
+        if (!detached) exit();
+      });
       if (closed) channel.close();
       return channel;
     },
@@ -66011,12 +66380,13 @@ function createCloudPiSession(ctx, sink, deps) {
     });
   };
   return {
-    startTurn(text) {
+    startTurn(text, commandId = (0, import_node_crypto15.randomUUID)(), prepared = false) {
       send2(async () => {
         const ch = await opened;
         if (closed) return;
-        const portable = await portableCloudInput(text, { fetchPiImage: deps.fetchImage ?? makeImageFetcher() });
-        await ch.send({ command: "turn", text: portable });
+        const portable = prepared ? text : await portableCloudInput(text, { fetchPiImage: deps.fetchImage ?? makeImageFetcher() });
+        if (sink.onCommandPrepared?.(commandId, portable, prepared) === false) return;
+        await ch.send({ command: "turn", text: portable, commandId });
       });
     },
     respondPermission(requestId, allow) {
@@ -66025,11 +66395,23 @@ function createCloudPiSession(ctx, sink, deps) {
     interrupt() {
       send2(async () => (await opened).send({ command: "interrupt" }));
     },
-    async stop() {
+    detach() {
+      detached = true;
       closed = true;
-      const ch = await opened.catch(() => null);
-      ch?.close();
-      exit();
+      channel?.close();
+    },
+    stop() {
+      if (stopping) return stopping;
+      closed = true;
+      stopping = (async () => {
+        const ch = await opened.catch(() => null);
+        if (ch) {
+          await ch.send({ command: "cancel" });
+          ch.close();
+        }
+        exit();
+      })();
+      return stopping;
     }
   };
 }
@@ -66101,7 +66483,7 @@ var CloudPiAdapter = class {
 init_protocol();
 
 // src/tools/codex-skills.ts
-var import_node_path45 = __toESM(require("path"), 1);
+var import_node_path46 = __toESM(require("path"), 1);
 function str4(v3) {
   return typeof v3 === "string" ? v3 : void 0;
 }
@@ -66116,13 +66498,13 @@ function mapSkillsListResponse(res) {
       const r2 = s2 ?? {};
       const name = str4(r2.name);
       if (!name) continue;
-      const path106 = str4(r2.path);
+      const path107 = str4(r2.path);
       const description = str4(r2.description);
       const isPlugin = name.includes(":");
       out.push({
         name,
         source: isPlugin ? "plugin" : "project",
-        ...path106 ? { path: path106 } : {},
+        ...path107 ? { path: path107 } : {},
         ...description ? { description } : {},
         ...isPlugin ? { plugin: name.split(":")[0] } : {}
       });
@@ -66138,7 +66520,7 @@ async function listCodexSkills(cwd, deps = {}) {
     // 先写 extraRoots 再写 list（stdio 按写入顺序处理，fire-and-forget 不 await 回包；
     // codex-session.ts ready 序列同款，两处保持一致）。失败不阻塞 list。
     beforeRequest: (client) => {
-      void client.request("skills/extraRoots/set", { extraRoots: [import_node_path45.default.join(cwd, ".claude", "skills")] }).catch(() => void 0);
+      void client.request("skills/extraRoots/set", { extraRoots: [import_node_path46.default.join(cwd, ".claude", "skills")] }).catch(() => void 0);
     }
   });
   return mapSkillsListResponse(res);
@@ -66212,23 +66594,23 @@ function rec4(v3) {
 }
 
 // src/workspace/browser.ts
-var import_node_fs42 = __toESM(require("fs"), 1);
+var import_node_fs43 = __toESM(require("fs"), 1);
 var import_node_os15 = __toESM(require("os"), 1);
-var import_node_path46 = __toESM(require("path"), 1);
+var import_node_path47 = __toESM(require("path"), 1);
 init_protocol();
 var MAX_FILE_BYTES2 = 2 * 1024 * 1024;
 function resolveInsideCwd(cwd, subpath) {
-  const absCwd = import_node_path46.default.resolve(cwd);
-  const joined = import_node_path46.default.resolve(absCwd, subpath ?? ".");
-  const rel = import_node_path46.default.relative(absCwd, joined);
-  if (rel.startsWith("..") || import_node_path46.default.isAbsolute(rel)) {
+  const absCwd = import_node_path47.default.resolve(cwd);
+  const joined = import_node_path47.default.resolve(absCwd, subpath ?? ".");
+  const rel = import_node_path47.default.relative(absCwd, joined);
+  if (rel.startsWith("..") || import_node_path47.default.isAbsolute(rel)) {
     throw new ClawdError(ERROR_CODES.INVALID_PATH, `path escapes cwd: ${subpath}`);
   }
   return joined;
 }
 function ensureCwd(cwd) {
   try {
-    const stat = import_node_fs42.default.statSync(cwd);
+    const stat = import_node_fs43.default.statSync(cwd);
     if (!stat.isDirectory()) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${cwd}`);
     }
@@ -66242,7 +66624,7 @@ var WorkspaceBrowser = class {
     const cwd = args.cwd && args.cwd.length > 0 ? args.cwd : import_node_os15.default.homedir();
     ensureCwd(cwd);
     const full = resolveInsideCwd(cwd, args.path);
-    const dirents = import_node_fs42.default.readdirSync(full, { withFileTypes: true });
+    const dirents = import_node_fs43.default.readdirSync(full, { withFileTypes: true });
     const entries = [];
     for (const d2 of dirents) {
       if (!args.showHidden && d2.name.startsWith(".")) continue;
@@ -66252,7 +66634,7 @@ var WorkspaceBrowser = class {
         mtime: ""
       };
       try {
-        const st2 = import_node_fs42.default.statSync(import_node_path46.default.join(full, d2.name));
+        const st2 = import_node_fs43.default.statSync(import_node_path47.default.join(full, d2.name));
         entry.mtime = new Date(st2.mtimeMs).toISOString();
         if (d2.isFile()) entry.size = st2.size;
       } catch {
@@ -66268,14 +66650,14 @@ var WorkspaceBrowser = class {
   read(args) {
     ensureCwd(args.cwd);
     const full = resolveInsideCwd(args.cwd, args.path);
-    const st2 = import_node_fs42.default.statSync(full);
+    const st2 = import_node_fs43.default.statSync(full);
     if (!st2.isFile()) {
       throw new ClawdError(ERROR_CODES.INVALID_PATH, `not a file: ${args.path}`);
     }
     if (st2.size > MAX_FILE_BYTES2) {
       throw new ClawdError(ERROR_CODES.FILE_TOO_LARGE, `file > ${MAX_FILE_BYTES2} bytes`);
     }
-    const buf = import_node_fs42.default.readFileSync(full);
+    const buf = import_node_fs43.default.readFileSync(full);
     const isBinary = buf.includes(0);
     if (isBinary) {
       return {
@@ -66297,20 +66679,20 @@ var WorkspaceBrowser = class {
 };
 
 // src/skills/agents-scanner.ts
-var import_node_fs43 = __toESM(require("fs"), 1);
+var import_node_fs44 = __toESM(require("fs"), 1);
 var import_node_os16 = __toESM(require("os"), 1);
-var import_node_path47 = __toESM(require("path"), 1);
+var import_node_path48 = __toESM(require("path"), 1);
 var DEFAULT_POLICY_DIR_DARWIN = "/Library/Application Support/ClaudeCode/.claude/agents";
 function isDirLikeSync2(p3) {
   try {
-    return import_node_fs43.default.statSync(p3).isDirectory();
+    return import_node_fs44.default.statSync(p3).isDirectory();
   } catch {
     return false;
   }
 }
 function fileExistsSync(p3) {
   try {
-    return import_node_fs43.default.statSync(p3).isFile();
+    return import_node_fs44.default.statSync(p3).isFile();
   } catch {
     return false;
   }
@@ -66318,7 +66700,7 @@ function fileExistsSync(p3) {
 function parseAgentFile(filePath) {
   let content;
   try {
-    content = import_node_fs43.default.readFileSync(filePath, "utf8");
+    content = import_node_fs44.default.readFileSync(filePath, "utf8");
   } catch {
     return {};
   }
@@ -66331,16 +66713,16 @@ function parseAgentFile(filePath) {
 function scanAgentsDir(dir, source, seen, out) {
   let entries;
   try {
-    entries = import_node_fs43.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs44.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
     if (!ent.name.endsWith(".md")) continue;
-    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path47.default.join(dir, ent.name)))) {
+    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path48.default.join(dir, ent.name)))) {
       continue;
     }
-    const filePath = import_node_path47.default.join(dir, ent.name);
+    const filePath = import_node_path48.default.join(dir, ent.name);
     const baseName = ent.name.replace(/\.md$/, "");
     if (seen.has(baseName)) continue;
     seen.add(baseName);
@@ -66358,12 +66740,12 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   function walk2(dir, namespaces) {
     let entries;
     try {
-      entries = import_node_fs43.default.readdirSync(dir, { withFileTypes: true });
+      entries = import_node_fs44.default.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const ent of entries) {
-      const childPath = import_node_path47.default.join(dir, ent.name);
+      const childPath = import_node_path48.default.join(dir, ent.name);
       if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync2(childPath)) {
         walk2(childPath, [...namespaces, ent.name]);
         continue;
@@ -66388,13 +66770,13 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   walk2(root, []);
 }
 function readInstalledPlugins2(home) {
-  const pluginsDir = import_node_path47.default.join(home, ".claude", "plugins");
-  const v22 = import_node_path47.default.join(pluginsDir, "installed_plugins_v2.json");
-  const v1 = import_node_path47.default.join(pluginsDir, "installed_plugins.json");
+  const pluginsDir = import_node_path48.default.join(home, ".claude", "plugins");
+  const v22 = import_node_path48.default.join(pluginsDir, "installed_plugins_v2.json");
+  const v1 = import_node_path48.default.join(pluginsDir, "installed_plugins.json");
   let raw = null;
   for (const candidate of [v22, v1]) {
     try {
-      raw = import_node_fs43.default.readFileSync(candidate, "utf8");
+      raw = import_node_fs44.default.readFileSync(candidate, "utf8");
       break;
     } catch {
     }
@@ -66419,19 +66801,19 @@ function readInstalledPlugins2(home) {
   return out;
 }
 function walkUpProjectAgentsDirs(startCwd, home, seen, out) {
-  let cur = import_node_path47.default.resolve(startCwd);
-  const fsRoot = import_node_path47.default.parse(cur).root;
+  let cur = import_node_path48.default.resolve(startCwd);
+  const fsRoot = import_node_path48.default.parse(cur).root;
   while (true) {
-    scanAgentsDir(import_node_path47.default.join(cur, ".claude", "agents"), "project", seen, out);
+    scanAgentsDir(import_node_path48.default.join(cur, ".claude", "agents"), "project", seen, out);
     let hasGit = false;
     try {
-      hasGit = import_node_fs43.default.existsSync(import_node_path47.default.join(cur, ".git"));
+      hasGit = import_node_fs44.default.existsSync(import_node_path48.default.join(cur, ".git"));
     } catch {
     }
     if (hasGit) return;
     if (cur === home) return;
     if (cur === fsRoot) return;
-    const parent = import_node_path47.default.dirname(cur);
+    const parent = import_node_path48.default.dirname(cur);
     if (parent === cur) return;
     cur = parent;
   }
@@ -66466,7 +66848,7 @@ var AgentsScanner = class {
     }
     const fsBlock = [];
     scanAgentsDir(
-      import_node_path47.default.join(this.home, ".claude", "agents"),
+      import_node_path48.default.join(this.home, ".claude", "agents"),
       "global",
       seen,
       fsBlock
@@ -66480,7 +66862,7 @@ var AgentsScanner = class {
       ...this.extraPluginRoots
     ];
     for (const { name, root } of plugins) {
-      const agentsRoot = import_node_path47.default.join(root, "agents");
+      const agentsRoot = import_node_path48.default.join(root, "agents");
       scanPluginAgentsTree(agentsRoot, name, seen, fsBlock);
     }
     return [...builtinBlock, ...fsBlock];
@@ -66488,15 +66870,15 @@ var AgentsScanner = class {
 };
 
 // src/observer/session-observer.ts
-var import_node_fs45 = __toESM(require("fs"), 1);
+var import_node_fs46 = __toESM(require("fs"), 1);
 var import_node_os18 = __toESM(require("os"), 1);
-var import_node_path49 = __toESM(require("path"), 1);
+var import_node_path50 = __toESM(require("path"), 1);
 init_claude_history();
 
 // src/observer/subagent-meta-observer.ts
-var import_node_fs44 = __toESM(require("fs"), 1);
+var import_node_fs45 = __toESM(require("fs"), 1);
 var import_node_os17 = __toESM(require("os"), 1);
-var import_node_path48 = __toESM(require("path"), 1);
+var import_node_path49 = __toESM(require("path"), 1);
 init_claude_history();
 var META_RE = /^agent-([A-Za-z0-9_-]+)\.meta\.json$/;
 var SubagentMetaObserver = class {
@@ -66509,7 +66891,7 @@ var SubagentMetaObserver = class {
   watches = /* @__PURE__ */ new Map();
   // public for spec only：测试直接拼路径写假 meta.json；生产 start() 内部自己解析
   resolveSubagentDir(cwd, toolSessionId) {
-    return import_node_path48.default.join(
+    return import_node_path49.default.join(
       this.home,
       ".claude",
       "projects",
@@ -66539,7 +66921,7 @@ var SubagentMetaObserver = class {
   attachWatcher(w3) {
     if (w3.watcher) return;
     try {
-      w3.watcher = import_node_fs44.default.watch(w3.dirPath, { persistent: false }, (_evt, name) => {
+      w3.watcher = import_node_fs45.default.watch(w3.dirPath, { persistent: false }, (_evt, name) => {
         if (!name) return;
         const m3 = META_RE.exec(String(name));
         if (!m3) return;
@@ -66551,7 +66933,7 @@ var SubagentMetaObserver = class {
   scan(w3) {
     let entries;
     try {
-      entries = import_node_fs44.default.readdirSync(w3.dirPath);
+      entries = import_node_fs45.default.readdirSync(w3.dirPath);
     } catch {
       return;
     }
@@ -66565,10 +66947,10 @@ var SubagentMetaObserver = class {
     if (!m3) return;
     const agentId = m3[1];
     if (w3.emitted.has(agentId)) return;
-    const file = import_node_path48.default.join(w3.dirPath, name);
+    const file = import_node_path49.default.join(w3.dirPath, name);
     let raw;
     try {
-      raw = import_node_fs44.default.readFileSync(file, "utf8");
+      raw = import_node_fs45.default.readFileSync(file, "utf8");
     } catch {
       return;
     }
@@ -66625,14 +67007,14 @@ var SessionObserver = class {
   metaObserver;
   resolveJsonlPath(cwd, toolSessionId, override) {
     if (override) return override;
-    return import_node_path49.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
+    return import_node_path50.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
   }
   start(args) {
     this.stop(args.sessionId);
     const filePath = this.resolveJsonlPath(args.cwd, args.toolSessionId, args.jsonlPath);
     let size = 0;
     try {
-      size = import_node_fs45.default.statSync(filePath).size;
+      size = import_node_fs46.default.statSync(filePath).size;
     } catch {
     }
     const w3 = {
@@ -66645,16 +67027,16 @@ var SessionObserver = class {
       adapter: args.adapter,
       prevIsRejectSentinel: false,
       toolSessionId: args.toolSessionId,
-      sawFile: import_node_fs45.default.existsSync(filePath),
+      sawFile: import_node_fs46.default.existsSync(filePath),
       lastRelocateScanMs: 0,
       pendingCwdDerive: false,
       lastDeriveMs: 0
     };
     try {
-      import_node_fs45.default.mkdirSync(import_node_path49.default.dirname(filePath), { recursive: true });
+      import_node_fs46.default.mkdirSync(import_node_path50.default.dirname(filePath), { recursive: true });
     } catch {
     }
-    w3.watcher = import_node_fs45.default.watch(import_node_path49.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
+    w3.watcher = import_node_fs46.default.watch(import_node_path50.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
       if (!changedName || !w3.filePath.endsWith(changedName)) return;
       this.poll(w3);
     });
@@ -66677,7 +67059,7 @@ var SessionObserver = class {
   // 异常静默吞，不阻塞 watcher 启动
   hydrateMetaTail(w3, maxLines = 200) {
     try {
-      const raw = import_node_fs45.default.readFileSync(w3.filePath, "utf8");
+      const raw = import_node_fs46.default.readFileSync(w3.filePath, "utf8");
       if (!raw) return;
       const allLines = raw.split("\n").filter((l2) => l2.trim().length > 0);
       if (allLines.length === 0) return;
@@ -66701,7 +67083,7 @@ var SessionObserver = class {
   poll(w3) {
     let size = 0;
     try {
-      size = import_node_fs45.default.statSync(w3.filePath).size;
+      size = import_node_fs46.default.statSync(w3.filePath).size;
     } catch {
       if (w3.sawFile) this.maybeRelocate(w3);
       return;
@@ -66712,11 +67094,11 @@ var SessionObserver = class {
       w3.buf = "";
     }
     if (size === w3.lastSize) return;
-    const fd = import_node_fs45.default.openSync(w3.filePath, "r");
+    const fd = import_node_fs46.default.openSync(w3.filePath, "r");
     try {
       const len = size - w3.lastSize;
       const buf = Buffer.alloc(len);
-      import_node_fs45.default.readSync(fd, buf, 0, len, w3.lastSize);
+      import_node_fs46.default.readSync(fd, buf, 0, len, w3.lastSize);
       w3.lastSize = size;
       w3.buf += buf.toString("utf8");
       let newlineIndex;
@@ -66739,7 +67121,7 @@ var SessionObserver = class {
         }
       }
     } finally {
-      import_node_fs45.default.closeSync(fd);
+      import_node_fs46.default.closeSync(fd);
     }
     if (w3.pendingCwdDerive) this.maybeDeriveCwd(w3);
   }
@@ -66751,7 +67133,7 @@ var SessionObserver = class {
     const now = Date.now();
     if (now - w3.lastRelocateScanMs < 1e3) return;
     w3.lastRelocateScanMs = now;
-    const projectsRoot = import_node_path49.default.join(this.home, ".claude", "projects");
+    const projectsRoot = import_node_path50.default.join(this.home, ".claude", "projects");
     const found = findTranscriptByToolSessionId(projectsRoot, w3.toolSessionId);
     if (!found || found === w3.filePath) return;
     try {
@@ -66760,7 +67142,7 @@ var SessionObserver = class {
     }
     w3.filePath = found;
     try {
-      w3.watcher = import_node_fs45.default.watch(import_node_path49.default.dirname(found), { persistent: false }, (_event, changedName) => {
+      w3.watcher = import_node_fs46.default.watch(import_node_path50.default.dirname(found), { persistent: false }, (_event, changedName) => {
         if (!changedName || !w3.filePath.endsWith(changedName)) return;
         this.poll(w3);
       });
@@ -66882,9 +67264,9 @@ function listRegistered() {
 // src/tools/title-generator.ts
 var import_node_child_process13 = require("child_process");
 init_protocol();
-var import_node_fs46 = __toESM(require("fs"), 1);
+var import_node_fs47 = __toESM(require("fs"), 1);
 var import_node_os19 = __toESM(require("os"), 1);
-var import_node_path50 = __toESM(require("path"), 1);
+var import_node_path51 = __toESM(require("path"), 1);
 var TITLE_GEN_DIR_PREFIX = "clawd-title-";
 var TITLE_INPUT_MAX_CHARS = 400;
 var DEFAULT_TITLE_GEN_TIMEOUT_MS = 45e3;
@@ -66975,21 +67357,21 @@ async function generateSessionTitle(file, firstMessage, deps = {}) {
   }
   let workDir;
   try {
-    workDir = import_node_fs46.default.mkdtempSync(import_node_path50.default.join(import_node_os19.default.tmpdir(), TITLE_GEN_DIR_PREFIX));
+    workDir = import_node_fs47.default.mkdtempSync(import_node_path51.default.join(import_node_os19.default.tmpdir(), TITLE_GEN_DIR_PREFIX));
   } catch {
     return null;
   }
   const cleanupWorkDir = () => {
     try {
-      import_node_fs46.default.rmSync(workDir, { recursive: true, force: true });
+      import_node_fs47.default.rmSync(workDir, { recursive: true, force: true });
     } catch {
     }
   };
-  const outFile = import_node_path50.default.join(workDir, `codex-title-${process.pid}-${++outFileSeq}-${Date.now()}.txt`);
-  const schemaFile = import_node_path50.default.join(workDir, "title-schema.json");
+  const outFile = import_node_path51.default.join(workDir, `codex-title-${process.pid}-${++outFileSeq}-${Date.now()}.txt`);
+  const schemaFile = import_node_path51.default.join(workDir, "title-schema.json");
   if (tool === "codex") {
     try {
-      import_node_fs46.default.writeFileSync(schemaFile, CODEX_TITLE_SCHEMA);
+      import_node_fs47.default.writeFileSync(schemaFile, CODEX_TITLE_SCHEMA);
     } catch {
       cleanupWorkDir();
       return null;
@@ -67044,7 +67426,7 @@ async function generateSessionTitle(file, firstMessage, deps = {}) {
       if (tool === "claude" || tool === "pi") return finish(parseTitleJson(stdout));
       let fileText = "";
       try {
-        fileText = import_node_fs46.default.readFileSync(outFile, "utf8");
+        fileText = import_node_fs47.default.readFileSync(outFile, "utf8");
       } catch {
         return finish(null);
       }
@@ -67117,7 +67499,7 @@ var wrapper_default = import_websocket.default;
 
 // src/transport/local-ws-server.ts
 var import_node_http = __toESM(require("http"), 1);
-var import_node_crypto15 = require("crypto");
+var import_node_crypto16 = require("crypto");
 var LocalWsServer = class {
   constructor(opts) {
     this.opts = opts;
@@ -67334,7 +67716,7 @@ var LocalWsServer = class {
     }
   }
   onConnection(socket, remoteAddress) {
-    const id = (0, import_node_crypto15.randomUUID)();
+    const id = (0, import_node_crypto16.randomUUID)();
     const subscribedSessions = /* @__PURE__ */ new Map();
     const handle = {
       id,
@@ -67740,8 +68122,8 @@ async function authenticate(token, deps) {
 }
 
 // src/legacy-cleanup.ts
-var fs57 = __toESM(require("fs/promises"), 1);
-var path58 = __toESM(require("path"), 1);
+var fs58 = __toESM(require("fs/promises"), 1);
+var path59 = __toESM(require("path"), 1);
 var LEGACY_FILES = [
   "personal-capability.json",
   "received-capabilities.json",
@@ -67750,9 +68132,9 @@ var LEGACY_FILES = [
 async function cleanupLegacyCapabilityFiles(dataDir, logger) {
   const removed = [];
   for (const name of LEGACY_FILES) {
-    const p3 = path58.join(dataDir, name);
+    const p3 = path59.join(dataDir, name);
     try {
-      await fs57.unlink(p3);
+      await fs58.unlink(p3);
       removed.push(name);
       logger.debug("legacy capability file removed", { file: name });
     } catch (err) {
@@ -67764,13 +68146,13 @@ async function cleanupLegacyCapabilityFiles(dataDir, logger) {
 }
 
 // src/inbox/inbox-store.ts
-var fs58 = __toESM(require("fs"), 1);
-var path59 = __toESM(require("path"), 1);
+var fs59 = __toESM(require("fs"), 1);
+var path60 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs58.mkdirSync(this.dirPath(), { recursive: true });
+    fs59.mkdirSync(this.dirPath(), { recursive: true });
   }
   dataDir;
   /**
@@ -67782,7 +68164,7 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     let raw;
     try {
-      raw = fs58.readFileSync(file, "utf8");
+      raw = fs59.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -67798,7 +68180,7 @@ var InboxStore = class {
     const dir = this.dirPath();
     let entries;
     try {
-      entries = fs58.readdirSync(dir);
+      entries = fs59.readdirSync(dir);
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -67814,9 +68196,9 @@ var InboxStore = class {
     if (existing.some((m3) => m3.id === message.id)) return;
     const file = this.filePath(message.peerDeviceId);
     const line = JSON.stringify(message) + "\n";
-    fs58.appendFileSync(file, line, { mode: 384 });
+    fs59.appendFileSync(file, line, { mode: 384 });
     try {
-      fs58.chmodSync(file, 384);
+      fs59.chmodSync(file, 384);
     } catch {
     }
   }
@@ -67846,7 +68228,7 @@ var InboxStore = class {
   removeByPeerDeviceId(peerDeviceId) {
     const file = this.filePath(peerDeviceId);
     try {
-      fs58.unlinkSync(file);
+      fs59.unlinkSync(file);
     } catch (err) {
       if (err?.code === "ENOENT") return;
     }
@@ -67855,18 +68237,18 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     const content = messages.map((m3) => JSON.stringify(m3)).join("\n") + (messages.length > 0 ? "\n" : "");
-    fs58.writeFileSync(tmp, content, { mode: 384 });
-    fs58.renameSync(tmp, file);
+    fs59.writeFileSync(tmp, content, { mode: 384 });
+    fs59.renameSync(tmp, file);
     try {
-      fs58.chmodSync(file, 384);
+      fs59.chmodSync(file, 384);
     } catch {
     }
   }
   dirPath() {
-    return path59.join(this.dataDir, INBOX_SUBDIR);
+    return path60.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerDeviceId) {
-    return path59.join(this.dirPath(), `${peerDeviceId}.jsonl`);
+    return path60.join(this.dirPath(), `${peerDeviceId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -67954,8 +68336,8 @@ var InboxManager = class {
 };
 
 // src/state/contact-store.ts
-var fs59 = __toESM(require("fs"), 1);
-var path60 = __toESM(require("path"), 1);
+var fs60 = __toESM(require("fs"), 1);
+var path61 = __toESM(require("path"), 1);
 var FILE_NAME = "contacts.json";
 var ContactStore = class {
   constructor(dataDir) {
@@ -67965,10 +68347,10 @@ var ContactStore = class {
   contacts = /* @__PURE__ */ new Map();
   load() {
     this.contacts.clear();
-    const file = path60.join(this.dataDir, FILE_NAME);
+    const file = path61.join(this.dataDir, FILE_NAME);
     let raw;
     try {
-      raw = fs59.readFileSync(file, "utf8");
+      raw = fs60.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code !== "ENOENT") this.renameBak(file);
       return;
@@ -68049,20 +68431,20 @@ var ContactStore = class {
     return true;
   }
   flush() {
-    const file = path60.join(this.dataDir, FILE_NAME);
+    const file = path61.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
       { contacts: Array.from(this.contacts.values()) },
       null,
       2
     );
-    fs59.mkdirSync(this.dataDir, { recursive: true });
-    fs59.writeFileSync(tmp, content, { mode: 384 });
-    fs59.renameSync(tmp, file);
+    fs60.mkdirSync(this.dataDir, { recursive: true });
+    fs60.writeFileSync(tmp, content, { mode: 384 });
+    fs60.renameSync(tmp, file);
   }
   renameBak(file) {
     try {
-      fs59.renameSync(file, `${file}.bak`);
+      fs60.renameSync(file, `${file}.bak`);
     } catch {
     }
   }
@@ -68170,61 +68552,61 @@ async function connectRemote(args) {
 }
 
 // src/migrations/2026-05-20-flatten-sessions.ts
-var fs60 = __toESM(require("fs"), 1);
-var path61 = __toESM(require("path"), 1);
+var fs61 = __toESM(require("fs"), 1);
+var path62 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path61.join(dataDir, "sessions");
-  const flagPath = path61.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path62.join(dataDir, "sessions");
+  const flagPath = path62.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path61.join(sessionsDir, "default");
+  const defaultDir = path62.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path61.join(defaultDir, entry);
-      const dst = path61.join(sessionsDir, entry);
-      fs60.renameSync(src, dst);
+      const src = path62.join(defaultDir, entry);
+      const dst = path62.join(sessionsDir, entry);
+      fs61.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path61.join(sessionsDir, pid);
+    const personaDir = path62.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path61.join(personaDir, "owner");
+    const ownerSrc = path62.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path61.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs60.mkdirSync(ownerDst, { recursive: true });
+      const ownerDst = path62.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      fs61.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs60.renameSync(path61.join(ownerSrc, file), path61.join(ownerDst, file));
+        fs61.renameSync(path62.join(ownerSrc, file), path62.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path61.join(personaDir, "listener");
+    const listenerSrc = path62.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path61.join(dataDir, ".legacy", `listener-${pid}`);
-      fs60.mkdirSync(archiveDst, { recursive: true });
+      const archiveDst = path62.join(dataDir, ".legacy", `listener-${pid}`);
+      fs61.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs60.renameSync(path61.join(listenerSrc, file), path61.join(archiveDst, file));
+        fs61.renameSync(path62.join(listenerSrc, file), path62.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs60.mkdirSync(sessionsDir, { recursive: true });
-  fs60.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs61.mkdirSync(sessionsDir, { recursive: true });
+  fs61.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -68235,7 +68617,7 @@ function migrateFlattenSessions(opts) {
 }
 function existsSync3(p3) {
   try {
-    fs60.statSync(p3);
+    fs61.statSync(p3);
     return true;
   } catch {
     return false;
@@ -68243,63 +68625,63 @@ function existsSync3(p3) {
 }
 function isDir(p3) {
   try {
-    return fs60.statSync(p3).isDirectory();
+    return fs61.statSync(p3).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p3) {
   try {
-    return fs60.readdirSync(p3);
+    return fs61.readdirSync(p3);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p3) {
   try {
-    fs60.rmdirSync(p3);
+    fs61.rmdirSync(p3);
   } catch {
   }
 }
 
 // src/migrations/2026-08-18-drop-seeded-projects.ts
-var fs61 = __toESM(require("fs"), 1);
-var path62 = __toESM(require("path"), 1);
+var fs62 = __toESM(require("fs"), 1);
+var path63 = __toESM(require("path"), 1);
 var DROP_SEEDED_PROJECTS_FLAG = ".projects-seed-dropped.v1.done";
 function dropSeededProjects(opts) {
-  fs61.mkdirSync(opts.dataDir, { recursive: true });
-  const flag = path62.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
-  if (fs61.existsSync(flag)) return { skipped: true, dropped: 0, backup: null };
-  const file = path62.join(opts.dataDir, "projects.json");
+  fs62.mkdirSync(opts.dataDir, { recursive: true });
+  const flag = path63.join(opts.dataDir, DROP_SEEDED_PROJECTS_FLAG);
+  if (fs62.existsSync(flag)) return { skipped: true, dropped: 0, backup: null };
+  const file = path63.join(opts.dataDir, "projects.json");
   let raw = null;
   let dropped = 0;
   try {
-    raw = fs61.readFileSync(file, "utf8");
+    raw = fs62.readFileSync(file, "utf8");
     dropped = JSON.parse(raw).projects?.length ?? 0;
   } catch {
   }
   let backup = null;
   if (raw != null && dropped > 0) {
-    const dir = path62.join(opts.dataDir, "backups");
-    fs61.mkdirSync(dir, { recursive: true });
-    backup = path62.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
-    fs61.writeFileSync(backup, raw);
+    const dir = path63.join(opts.dataDir, "backups");
+    fs62.mkdirSync(dir, { recursive: true });
+    backup = path63.join(dir, `projects.seed-dropped.${(opts.now ?? Date.now)()}.json`);
+    fs62.writeFileSync(backup, raw);
   }
   if (raw != null || dropped > 0) {
-    fs61.writeFileSync(file, JSON.stringify({ projects: [] }, null, 2));
+    fs62.writeFileSync(file, JSON.stringify({ projects: [] }, null, 2));
   }
-  fs61.writeFileSync(flag, (/* @__PURE__ */ new Date()).toISOString());
+  fs62.writeFileSync(flag, (/* @__PURE__ */ new Date()).toISOString());
   return { skipped: false, dropped, backup };
 }
 
 // src/transport/http-router.ts
-var import_node_fs48 = __toESM(require("fs"), 1);
-var import_node_path53 = __toESM(require("path"), 1);
+var import_node_fs49 = __toESM(require("fs"), 1);
+var import_node_path54 = __toESM(require("path"), 1);
 
 // src/attachment/upload.ts
-var import_node_fs47 = __toESM(require("fs"), 1);
-var import_node_path51 = __toESM(require("path"), 1);
-var import_node_crypto16 = __toESM(require("crypto"), 1);
+var import_node_fs48 = __toESM(require("fs"), 1);
+var import_node_path52 = __toESM(require("path"), 1);
+var import_node_crypto17 = __toESM(require("crypto"), 1);
 var import_promises8 = require("stream/promises");
 var UploadError = class extends Error {
   constructor(code, message) {
@@ -68310,24 +68692,24 @@ var UploadError = class extends Error {
   code;
 };
 function assertValidFileName(fileName) {
-  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path51.default.basename(fileName)) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path52.default.basename(fileName)) {
     throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
   }
 }
 var HASH_PREFIX_LEN = 16;
 async function writeUploadedAttachment(args) {
   assertValidFileName(args.fileName);
-  const attachmentsRoot = import_node_path51.default.join(args.baseDir, ".attachments");
+  const attachmentsRoot = import_node_path52.default.join(args.baseDir, ".attachments");
   try {
-    import_node_fs47.default.mkdirSync(attachmentsRoot, { recursive: true });
+    import_node_fs48.default.mkdirSync(attachmentsRoot, { recursive: true });
   } catch (err) {
     throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
   }
-  const hasher = import_node_crypto16.default.createHash("sha256");
+  const hasher = import_node_crypto17.default.createHash("sha256");
   let actualSize = 0;
-  const tmpPath = import_node_path51.default.join(
+  const tmpPath = import_node_path52.default.join(
     attachmentsRoot,
-    `.upload-${process.pid}-${Date.now()}-${import_node_crypto16.default.randomBytes(4).toString("hex")}`
+    `.upload-${process.pid}-${Date.now()}-${import_node_crypto17.default.randomBytes(4).toString("hex")}`
   );
   try {
     await (0, import_promises8.pipeline)(
@@ -68340,18 +68722,18 @@ async function writeUploadedAttachment(args) {
           yield buf;
         }
       },
-      import_node_fs47.default.createWriteStream(tmpPath, { mode: 384 })
+      import_node_fs48.default.createWriteStream(tmpPath, { mode: 384 })
     );
   } catch (err) {
     try {
-      import_node_fs47.default.unlinkSync(tmpPath);
+      import_node_fs48.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError("STORAGE_ERROR", `write failed: ${err.message}`);
   }
   if (actualSize !== args.contentLength) {
     try {
-      import_node_fs47.default.unlinkSync(tmpPath);
+      import_node_fs48.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError(
@@ -68360,34 +68742,34 @@ async function writeUploadedAttachment(args) {
     );
   }
   const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
-  const hashDir = import_node_path51.default.join(attachmentsRoot, attachmentId);
+  const hashDir = import_node_path52.default.join(attachmentsRoot, attachmentId);
   let finalFileName;
   let hashDirExists = false;
   try {
-    hashDirExists = import_node_fs47.default.statSync(hashDir).isDirectory();
+    hashDirExists = import_node_fs48.default.statSync(hashDir).isDirectory();
   } catch {
   }
   if (hashDirExists) {
-    const existing = import_node_fs47.default.readdirSync(hashDir).filter((n2) => !n2.startsWith("."));
+    const existing = import_node_fs48.default.readdirSync(hashDir).filter((n2) => !n2.startsWith("."));
     finalFileName = existing[0] ?? args.fileName;
     try {
-      import_node_fs47.default.unlinkSync(tmpPath);
+      import_node_fs48.default.unlinkSync(tmpPath);
     } catch {
     }
   } else {
     try {
-      import_node_fs47.default.mkdirSync(hashDir, { recursive: true });
+      import_node_fs48.default.mkdirSync(hashDir, { recursive: true });
       finalFileName = args.fileName;
-      import_node_fs47.default.renameSync(tmpPath, import_node_path51.default.join(hashDir, finalFileName));
+      import_node_fs48.default.renameSync(tmpPath, import_node_path52.default.join(hashDir, finalFileName));
     } catch (err) {
       try {
-        import_node_fs47.default.unlinkSync(tmpPath);
+        import_node_fs48.default.unlinkSync(tmpPath);
       } catch {
       }
       throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
     }
   }
-  const absPath = import_node_path51.default.join(hashDir, finalFileName);
+  const absPath = import_node_path52.default.join(hashDir, finalFileName);
   const relPath = absPath;
   args.groupFileStore.upsert(args.scope, args.sessionId, {
     relPath: absPath,
@@ -68402,7 +68784,7 @@ async function writeUploadedAttachment(args) {
 
 // src/extension/import.ts
 var import_promises9 = __toESM(require("fs/promises"), 1);
-var import_node_path52 = __toESM(require("path"), 1);
+var import_node_path53 = __toESM(require("path"), 1);
 var import_node_os20 = __toESM(require("os"), 1);
 var import_jszip = __toESM(require_lib3(), 1);
 var ImportError = class extends Error {
@@ -68420,7 +68802,7 @@ async function importZip(buf, root) {
     throw new ImportError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path52.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path53.default.isAbsolute(name)) {
       throw new ImportError("ZIP_INVALID", `unsafe zip entry path: ${name}`);
     }
   }
@@ -68453,7 +68835,7 @@ async function importZip(buf, root) {
       );
     }
   }
-  const destDir = import_node_path52.default.join(root, manifest.id);
+  const destDir = import_node_path53.default.join(root, manifest.id);
   let destExists = false;
   try {
     await import_promises9.default.access(destDir);
@@ -68463,15 +68845,15 @@ async function importZip(buf, root) {
   if (destExists) {
     throw new ImportError("ALREADY_EXISTS", `extension ${manifest.id} already installed`);
   }
-  const stage = await import_promises9.default.mkdtemp(import_node_path52.default.join(import_node_os20.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
+  const stage = await import_promises9.default.mkdtemp(import_node_path53.default.join(import_node_os20.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path52.default.join(stage, name);
+      const dest = import_node_path53.default.join(stage, name);
       if (entry.dir) {
         await import_promises9.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises9.default.mkdir(import_node_path52.default.dirname(dest), { recursive: true });
+      await import_promises9.default.mkdir(import_node_path53.default.dirname(dest), { recursive: true });
       const content = await entry.async("nodebuffer");
       await import_promises9.default.writeFile(dest, content);
     }
@@ -68525,7 +68907,7 @@ var SHARE_UI_ASSET_MIME = {
   ".wasm": "application/wasm"
 };
 function shareUiAssetMime(filePath) {
-  const ext = import_node_path53.default.extname(filePath).toLowerCase();
+  const ext = import_node_path54.default.extname(filePath).toLowerCase();
   return SHARE_UI_ASSET_MIME[ext] ?? lookupMime(filePath);
 }
 var AUTHED_RPC_ROUTE_PREFIX = "/rpc/";
@@ -68624,7 +69006,7 @@ function isValidUploadFileName(fileName) {
   if (fileName === "." || fileName === "..") return false;
   if (fileName.startsWith(".")) return false;
   if (fileName.includes("/") || fileName.includes("\\")) return false;
-  return fileName === import_node_path53.default.basename(fileName);
+  return fileName === import_node_path54.default.basename(fileName);
 }
 function createHttpRouter(deps) {
   return async (req, res) => {
@@ -68708,7 +69090,7 @@ function createHttpRouter(deps) {
       }
       let buf;
       try {
-        buf = await import_node_fs48.default.promises.readFile(abs);
+        buf = await import_node_fs49.default.promises.readFile(abs);
       } catch {
         sendJson2(res, 404, { code: "NOT_FOUND", message: "asset not found" });
         return true;
@@ -68854,7 +69236,7 @@ function createHttpRouter(deps) {
         sendHtml(res, statusByCode[r2.code], loader.renderErrorHtml(r2.code, msgByCode[r2.code]));
         return true;
       }
-      sendHtml(res, 200, loader.renderViewerHtml(import_node_path53.default.basename(r2.absPath)));
+      sendHtml(res, 200, loader.renderViewerHtml(import_node_path54.default.basename(r2.absPath)));
       return true;
     }
     const ctx = deps.authResolver.resolveFromHeader(
@@ -68975,7 +69357,7 @@ function createHttpRouter(deps) {
         return true;
       }
       let absPath;
-      if (import_node_path53.default.isAbsolute(pathParam)) {
+      if (import_node_path54.default.isAbsolute(pathParam)) {
         absPath = pathParam;
       } else if (deps.sessionStore) {
         const file = deps.sessionStore.read(sid);
@@ -68983,7 +69365,7 @@ function createHttpRouter(deps) {
           sendJson2(res, 404, { code: "NOT_FOUND", message: `session ${sid} not found` });
           return true;
         }
-        absPath = import_node_path53.default.join(file.cwd, pathParam);
+        absPath = import_node_path54.default.join(file.cwd, pathParam);
       } else {
         sendJson2(res, 501, withCtx(ctx, { code: "NOT_IMPLEMENTED", message: "sessionStore not wired" }));
         return true;
@@ -69067,7 +69449,7 @@ function withCtx(ctx, body) {
 function streamFile(res, absPath, logger) {
   let stat;
   try {
-    stat = import_node_fs48.default.statSync(absPath);
+    stat = import_node_fs49.default.statSync(absPath);
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") {
@@ -69082,7 +69464,7 @@ function streamFile(res, absPath, logger) {
     return;
   }
   const mime = lookupMime(absPath);
-  const basename2 = import_node_path53.default.basename(absPath);
+  const basename2 = import_node_path54.default.basename(absPath);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": String(stat.size),
@@ -69090,7 +69472,7 @@ function streamFile(res, absPath, logger) {
     // 防止浏览器把任意 mime 当 html 渲染
     "X-Content-Type-Options": "nosniff"
   });
-  const stream = import_node_fs48.default.createReadStream(absPath);
+  const stream = import_node_fs49.default.createReadStream(absPath);
   stream.on("error", (err) => {
     logger?.warn("streamFile read error", { absPath, err: err.message });
     res.destroy();
@@ -69099,8 +69481,8 @@ function streamFile(res, absPath, logger) {
 }
 
 // src/attachment/gc.ts
-var import_node_fs49 = __toESM(require("fs"), 1);
-var import_node_path54 = __toESM(require("path"), 1);
+var import_node_fs50 = __toESM(require("fs"), 1);
+var import_node_path55 = __toESM(require("path"), 1);
 var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
 function runAttachmentGc(args) {
   const now = (args.now ?? Date.now)();
@@ -69109,12 +69491,12 @@ function runAttachmentGc(args) {
   for (const { scope, sessionId } of args.sessionScopes) {
     for (const entry of args.groupFileStore.list(scope, sessionId)) {
       if (entry.stale) continue;
-      if (import_node_path54.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+      if (import_node_path55.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
     }
   }
   const visited = /* @__PURE__ */ new Set();
   for (const { scope, sessionId } of args.sessionScopes) {
-    const legacyDir = args.getSessionCwd?.(sessionId) ?? import_node_path54.default.join(
+    const legacyDir = args.getSessionCwd?.(sessionId) ?? import_node_path55.default.join(
       args.dataDir,
       "sessions",
       ...scopeSubPath(scope).map(safeFileName),
@@ -69127,28 +69509,28 @@ function runAttachmentGc(args) {
       return true;
     });
     for (const rootDir of roots) {
-      const attRoot = import_node_path54.default.join(rootDir, ".attachments");
+      const attRoot = import_node_path55.default.join(rootDir, ".attachments");
       let hashDirs;
       try {
-        hashDirs = import_node_fs49.default.readdirSync(attRoot);
+        hashDirs = import_node_fs50.default.readdirSync(attRoot);
       } catch (err) {
         if (err.code === "ENOENT") continue;
         args.logger?.warn("attachment gc: readdir failed", { attRoot, err: err.message });
         continue;
       }
       for (const hashDir of hashDirs) {
-        const hashDirAbs = import_node_path54.default.join(attRoot, hashDir);
+        const hashDirAbs = import_node_path55.default.join(attRoot, hashDir);
         let files;
         try {
-          files = import_node_fs49.default.readdirSync(hashDirAbs);
+          files = import_node_fs50.default.readdirSync(hashDirAbs);
         } catch {
           continue;
         }
         for (const name of files) {
-          const file = import_node_path54.default.join(hashDirAbs, name);
+          const file = import_node_path55.default.join(hashDirAbs, name);
           let stat;
           try {
-            stat = import_node_fs49.default.statSync(file);
+            stat = import_node_fs50.default.statSync(file);
           } catch {
             continue;
           }
@@ -69157,18 +69539,18 @@ function runAttachmentGc(args) {
           if (age < ttlMs) continue;
           if (liveAbs.has(file)) continue;
           try {
-            import_node_fs49.default.unlinkSync(file);
+            import_node_fs50.default.unlinkSync(file);
           } catch (err) {
             args.logger?.warn("attachment gc: unlink failed", { file, err: err.message });
           }
         }
         try {
-          if (import_node_fs49.default.readdirSync(hashDirAbs).length === 0) import_node_fs49.default.rmdirSync(hashDirAbs);
+          if (import_node_fs50.default.readdirSync(hashDirAbs).length === 0) import_node_fs50.default.rmdirSync(hashDirAbs);
         } catch {
         }
       }
       try {
-        if (import_node_fs49.default.readdirSync(attRoot).length === 0) import_node_fs49.default.rmdirSync(attRoot);
+        if (import_node_fs50.default.readdirSync(attRoot).length === 0) import_node_fs50.default.rmdirSync(attRoot);
       } catch {
       }
     }
@@ -69176,9 +69558,9 @@ function runAttachmentGc(args) {
 }
 
 // src/attachment/group.ts
-var import_node_fs50 = __toESM(require("fs"), 1);
-var import_node_path55 = __toESM(require("path"), 1);
-var import_node_crypto17 = __toESM(require("crypto"), 1);
+var import_node_fs51 = __toESM(require("fs"), 1);
+var import_node_path56 = __toESM(require("path"), 1);
+var import_node_crypto18 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
   dataDir;
@@ -69189,11 +69571,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path55.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path56.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path55.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path56.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -69202,7 +69584,7 @@ var GroupFileStore = class {
   readFile(scope, sessionId) {
     const file = this.filePath(scope, sessionId);
     try {
-      const raw = import_node_fs50.default.readFileSync(file, "utf8");
+      const raw = import_node_fs51.default.readFileSync(file, "utf8");
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) {
         this.logger?.warn("GroupFileStore.readFile: not an array; resetting session entries", {
@@ -69228,10 +69610,10 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs50.default.mkdirSync(import_node_path55.default.dirname(file), { recursive: true });
+    import_node_fs51.default.mkdirSync(import_node_path56.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs50.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
-    import_node_fs50.default.renameSync(tmp, file);
+    import_node_fs51.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
+    import_node_fs51.default.renameSync(tmp, file);
   }
   /** 拉一份当前 session 的清单。读盘 → cache；之后调用复用 cache */
   list(scope, sessionId) {
@@ -69267,7 +69649,7 @@ var GroupFileStore = class {
       entries[idx] = next;
     } else {
       next = {
-        id: `gf-${import_node_crypto17.default.randomBytes(6).toString("base64url")}`,
+        id: `gf-${import_node_crypto18.default.randomBytes(6).toString("base64url")}`,
         relPath: input.relPath,
         from: input.from,
         label: input.label,
@@ -69323,7 +69705,7 @@ var GroupFileStore = class {
    */
   deleteSession(scope, sessionId) {
     try {
-      import_node_fs50.default.unlinkSync(this.filePath(scope, sessionId));
+      import_node_fs51.default.unlinkSync(this.filePath(scope, sessionId));
     } catch (err) {
       if (err?.code !== "ENOENT") throw err;
     }
@@ -69336,7 +69718,7 @@ var GroupFileStore = class {
    * 不在 persona 目录里（见文件头的路径约定）。没树的 persona 是 noop。
    */
   deletePersona(personaId2) {
-    import_node_fs50.default.rmSync(import_node_path55.default.join(this.dataDir, "sessions", safeFileName(personaId2)), { recursive: true, force: true });
+    import_node_fs51.default.rmSync(import_node_path56.default.join(this.dataDir, "sessions", safeFileName(personaId2)), { recursive: true, force: true });
     const prefix = `persona:${personaId2}:`;
     for (const key of this.cache.keys()) {
       if (key.startsWith(prefix)) this.cache.delete(key);
@@ -69345,10 +69727,10 @@ var GroupFileStore = class {
 };
 
 // src/discovery/state-file.ts
-var import_node_fs51 = __toESM(require("fs"), 1);
-var import_node_path56 = __toESM(require("path"), 1);
+var import_node_fs52 = __toESM(require("fs"), 1);
+var import_node_path57 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path56.default.join(dataDir, "state.json");
+  return import_node_path57.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -69370,7 +69752,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs51.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs52.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -69384,20 +69766,20 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs51.default.mkdirSync(import_node_path56.default.dirname(this.file), { recursive: true });
+    import_node_fs52.default.mkdirSync(import_node_path57.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs51.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs51.default.renameSync(tmp, this.file);
+    import_node_fs52.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs52.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs51.default.chmodSync(this.file, 384);
+        import_node_fs52.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs51.default.unlinkSync(this.file);
+      import_node_fs52.default.unlinkSync(this.file);
     } catch {
     }
   }
@@ -69411,14 +69793,14 @@ function readSpawnedByDesktopFromEnv(env = process.env) {
 }
 
 // src/tunnel/tunnel-manager.ts
-var import_node_fs55 = __toESM(require("fs"), 1);
-var import_node_path60 = __toESM(require("path"), 1);
-var import_node_crypto18 = __toESM(require("crypto"), 1);
+var import_node_fs56 = __toESM(require("fs"), 1);
+var import_node_path61 = __toESM(require("path"), 1);
+var import_node_crypto19 = __toESM(require("crypto"), 1);
 var import_node_child_process16 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
-var import_node_fs52 = __toESM(require("fs"), 1);
-var import_node_path57 = __toESM(require("path"), 1);
+var import_node_fs53 = __toESM(require("fs"), 1);
+var import_node_path58 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -69426,7 +69808,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs52.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs53.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -69437,22 +69819,22 @@ var TunnelStore = class {
     }
   }
   async set(v3) {
-    const dir = import_node_path57.default.dirname(this.filePath);
-    await import_node_fs52.default.promises.mkdir(dir, { recursive: true });
+    const dir = import_node_path58.default.dirname(this.filePath);
+    await import_node_fs53.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v3, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs52.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs53.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs52.default.promises.chmod(tmp, 384);
+        await import_node_fs53.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs52.default.promises.rename(tmp, this.filePath);
+    await import_node_fs53.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs52.default.promises.unlink(this.filePath);
+      await import_node_fs53.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -69547,9 +69929,9 @@ function escape2(v3) {
 }
 
 // src/tunnel/frpc-binary.ts
-var import_node_fs53 = __toESM(require("fs"), 1);
+var import_node_fs54 = __toESM(require("fs"), 1);
 var import_node_os21 = __toESM(require("os"), 1);
-var import_node_path58 = __toESM(require("path"), 1);
+var import_node_path59 = __toESM(require("path"), 1);
 var import_node_child_process14 = require("child_process");
 var import_node_stream4 = require("stream");
 var import_promises10 = require("stream/promises");
@@ -69581,20 +69963,20 @@ function frpcDownloadUrl(version2, p3) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs53.default.existsSync(opts.override)) {
+    if (!import_node_fs54.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path58.default.join(opts.dataDir, "bin");
-  import_node_fs53.default.mkdirSync(binDir, { recursive: true });
+  const binDir = import_node_path59.default.join(opts.dataDir, "bin");
+  import_node_fs54.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path58.default.join(binDir, "frpc");
-  if (import_node_fs53.default.existsSync(stableBin)) return stableBin;
+  const stableBin = import_node_path59.default.join(binDir, "frpc");
+  if (import_node_fs54.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path58.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path59.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -69603,8 +69985,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs53.default.chmodSync(partialBin, 493);
-    import_node_fs53.default.renameSync(partialBin, stableBin);
+    import_node_fs54.default.chmodSync(partialBin, 493);
+    import_node_fs54.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -69614,15 +69996,15 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs53.default.readdirSync(binDir);
+    entries = import_node_fs54.default.readdirSync(binDir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path58.default.join(binDir, name);
+      const full = import_node_path59.default.join(binDir, name);
       try {
-        import_node_fs53.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs54.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -69630,7 +70012,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p3) {
   try {
-    import_node_fs53.default.unlinkSync(p3);
+    import_node_fs54.default.unlinkSync(p3);
   } catch {
   }
 }
@@ -69641,13 +70023,13 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs53.default.createWriteStream(dest);
+  const out = import_node_fs54.default.createWriteStream(dest);
   const nodeStream = import_node_stream4.Readable.fromWeb(res.body);
   await (0, import_promises10.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path58.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs53.default.mkdirSync(work, { recursive: true });
+  const work = import_node_path59.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  import_node_fs54.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve9, reject) => {
       const proc = (0, import_node_child_process14.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
@@ -69655,32 +70037,32 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
       proc.on("exit", (code) => code === 0 ? resolve9() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path58.default.join(work, dirName, "frpc");
-    if (!import_node_fs53.default.existsSync(src)) {
+    const src = import_node_path59.default.join(work, dirName, "frpc");
+    if (!import_node_fs54.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs53.default.copyFileSync(src, destBin);
+    import_node_fs54.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs53.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs54.default.rmSync(work, { recursive: true, force: true });
   }
 }
 
 // src/tunnel/frpc-process.ts
-var import_node_fs54 = __toESM(require("fs"), 1);
-var import_node_path59 = __toESM(require("path"), 1);
+var import_node_fs55 = __toESM(require("fs"), 1);
+var import_node_path60 = __toESM(require("path"), 1);
 var import_node_child_process15 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path59.default.join(dataDir, "frpc.pid");
+  return import_node_path60.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
-    import_node_fs54.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
+    import_node_fs55.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearFrpcPid(dataDir) {
   try {
-    import_node_fs54.default.unlinkSync(frpcPidFilePath(dataDir));
+    import_node_fs55.default.unlinkSync(frpcPidFilePath(dataDir));
   } catch {
   }
 }
@@ -69696,7 +70078,7 @@ function defaultIsPidAlive(pid) {
 }
 function defaultReadPidFile(file) {
   try {
-    return import_node_fs54.default.readFileSync(file, "utf8");
+    return import_node_fs55.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -69712,7 +70094,7 @@ function defaultSleep2(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path59.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path60.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -69736,7 +70118,7 @@ async function killStaleFrpc(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs54.default.unlinkSync(pidFile);
+      import_node_fs55.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -69747,7 +70129,7 @@ async function killStaleFrpc(deps) {
   }
   await sleep2(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs54.default.unlinkSync(pidFile);
+    import_node_fs55.default.unlinkSync(pidFile);
   } catch {
   }
 }
@@ -69784,7 +70166,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path60.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path61.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -69911,8 +70293,8 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path60.default.join(this.deps.dataDir, "frpc.toml");
-      const proxyName = `clawd-${t2.subdomain}-${localPort}-${import_node_crypto18.default.randomBytes(3).toString("hex")}`;
+      const tomlPath = import_node_path61.default.join(this.deps.dataDir, "frpc.toml");
+      const proxyName = `clawd-${t2.subdomain}-${localPort}-${import_node_crypto19.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t2.frpsHost,
         serverPort: t2.frpsPort,
@@ -69922,14 +70304,14 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs55.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      await import_node_fs56.default.promises.writeFile(tomlPath, toml, { mode: 384 });
       const proc = (this.deps.spawnImpl ?? import_node_child_process16.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logDir = import_node_path60.default.join(this.deps.dataDir, "log");
-      import_node_fs55.default.mkdirSync(logDir, { recursive: true });
-      const logFilePath = import_node_path60.default.join(logDir, "frpc.log");
-      const logStream = import_node_fs55.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logDir = import_node_path61.default.join(this.deps.dataDir, "log");
+      import_node_fs56.default.mkdirSync(logDir, { recursive: true });
+      const logFilePath = import_node_path61.default.join(logDir, "frpc.log");
+      const logStream = import_node_fs56.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -70012,27 +70394,27 @@ async function waitForFrpcReady(proc, timeoutMs) {
 
 // src/tunnel/device-key.ts
 var import_node_os22 = __toESM(require("os"), 1);
-var import_node_path61 = __toESM(require("path"), 1);
-var import_node_crypto19 = __toESM(require("crypto"), 1);
+var import_node_path62 = __toESM(require("path"), 1);
+var import_node_crypto20 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os22.default.hostname();
   const uid = opts.uid ?? (typeof import_node_os22.default.userInfo === "function" ? import_node_os22.default.userInfo().uid : 0);
   const home = opts.home ?? import_node_os22.default.homedir();
-  const defaultDataDir = import_node_path61.default.resolve(import_node_path61.default.join(home, ".clawd"));
-  const normalizedDataDir = opts.dataDir ? import_node_path61.default.resolve(opts.dataDir) : null;
+  const defaultDataDir = import_node_path62.default.resolve(import_node_path62.default.join(home, ".clawd"));
+  const normalizedDataDir = opts.dataDir ? import_node_path62.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
-  return import_node_crypto19.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
+  return import_node_crypto20.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
-var import_node_fs56 = __toESM(require("fs"), 1);
-var import_node_path62 = __toESM(require("path"), 1);
-var import_node_crypto20 = __toESM(require("crypto"), 1);
+var import_node_fs57 = __toESM(require("fs"), 1);
+var import_node_path63 = __toESM(require("path"), 1);
+var import_node_crypto21 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path62.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path63.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -70066,14 +70448,14 @@ function loadOrCreateTunnelDeviceKey(opts) {
   return tunnelDeviceKey;
 }
 function defaultGenerateToken() {
-  return import_node_crypto20.default.randomBytes(32).toString("base64url");
+  return import_node_crypto21.default.randomBytes(32).toString("base64url");
 }
 function defaultGenerateOwnerPrincipalId() {
-  return `owner-${import_node_crypto20.default.randomUUID()}`;
+  return `owner-${import_node_crypto21.default.randomUUID()}`;
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs56.default.readFileSync(file, "utf8");
+    const raw = import_node_fs57.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -70094,26 +70476,26 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs56.default.mkdirSync(import_node_path62.default.dirname(file), { recursive: true });
-  import_node_fs56.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs57.default.mkdirSync(import_node_path63.default.dirname(file), { recursive: true });
+  import_node_fs57.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs56.default.chmodSync(file, 384);
+    import_node_fs57.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs57 = __toESM(require("fs"), 1);
+var import_node_fs58 = __toESM(require("fs"), 1);
 var import_node_os23 = __toESM(require("os"), 1);
-var import_node_path63 = __toESM(require("path"), 1);
+var import_node_path64 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function profilePath(dataDir) {
-  return import_node_path63.default.join(dataDir, PROFILE_FILENAME);
+  return import_node_path64.default.join(dataDir, PROFILE_FILENAME);
 }
 function loadOwnerProfile(dataDir) {
   let raw;
   try {
-    raw = import_node_fs57.default.readFileSync(profilePath(dataDir), "utf8");
+    raw = import_node_fs58.default.readFileSync(profilePath(dataDir), "utf8");
   } catch {
     return {};
   }
@@ -70129,7 +70511,7 @@ function loadOwnerProfile(dataDir) {
 }
 function patchOwnerProfile(dataDir, patch) {
   const merged = { ...loadOwnerProfile(dataDir), ...patch };
-  import_node_fs57.default.writeFileSync(profilePath(dataDir), JSON.stringify(merged, null, 2), { encoding: "utf8", mode: 384 });
+  import_node_fs58.default.writeFileSync(profilePath(dataDir), JSON.stringify(merged, null, 2), { encoding: "utf8", mode: 384 });
   return merged;
 }
 function loadOwnerDisplayName(dataDir) {
@@ -70145,18 +70527,18 @@ function loadOwnerDisplayName(dataDir) {
 }
 
 // src/feishu-auth/owner-identity-store.ts
-var import_node_fs58 = __toESM(require("fs"), 1);
-var import_node_path64 = __toESM(require("path"), 1);
+var import_node_fs59 = __toESM(require("fs"), 1);
+var import_node_path65 = __toESM(require("path"), 1);
 var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
 var OwnerIdentityStore = class {
   file;
   constructor(dataDir) {
-    this.file = import_node_path64.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
+    this.file = import_node_path65.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
   }
   read() {
     let raw;
     try {
-      raw = import_node_fs58.default.readFileSync(this.file, "utf8");
+      raw = import_node_fs59.default.readFileSync(this.file, "utf8");
     } catch {
       return null;
     }
@@ -70183,16 +70565,16 @@ var OwnerIdentityStore = class {
     };
   }
   write(record4) {
-    import_node_fs58.default.mkdirSync(import_node_path64.default.dirname(this.file), { recursive: true });
-    import_node_fs58.default.writeFileSync(this.file, JSON.stringify(record4, null, 2), { mode: 384 });
+    import_node_fs59.default.mkdirSync(import_node_path65.default.dirname(this.file), { recursive: true });
+    import_node_fs59.default.writeFileSync(this.file, JSON.stringify(record4, null, 2), { mode: 384 });
     try {
-      import_node_fs58.default.chmodSync(this.file, 384);
+      import_node_fs59.default.chmodSync(this.file, 384);
     } catch {
     }
   }
   clear() {
     try {
-      import_node_fs58.default.unlinkSync(this.file);
+      import_node_fs59.default.unlinkSync(this.file);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -70201,7 +70583,7 @@ var OwnerIdentityStore = class {
 };
 
 // src/feishu-auth/login-flow.ts
-var import_node_crypto21 = __toESM(require("crypto"), 1);
+var import_node_crypto22 = __toESM(require("crypto"), 1);
 var STATE_TTL_MS = 5 * 60 * 1e3;
 var LoginFlow = class {
   constructor(deps) {
@@ -70210,7 +70592,7 @@ var LoginFlow = class {
   deps;
   pendingStates = /* @__PURE__ */ new Map();
   start() {
-    const state = import_node_crypto21.default.randomBytes(16).toString("base64url");
+    const state = import_node_crypto22.default.randomBytes(16).toString("base64url");
     const now = (this.deps.now ?? Date.now)();
     this.pendingStates.set(state, now);
     this.gcExpired(now);
@@ -70688,8 +71070,8 @@ function verifyConnectToken(args) {
 }
 
 // src/feishu-auth/server-key.ts
-var fs75 = __toESM(require("fs"), 1);
-var path77 = __toESM(require("path"), 1);
+var fs76 = __toESM(require("fs"), 1);
+var path78 = __toESM(require("path"), 1);
 var FILE_NAME2 = "server-signing-key.json";
 var ServerKeyStore = class {
   constructor(dataDir) {
@@ -70697,12 +71079,12 @@ var ServerKeyStore = class {
   }
   dataDir;
   filePath() {
-    return path77.join(this.dataDir, FILE_NAME2);
+    return path78.join(this.dataDir, FILE_NAME2);
   }
   /** 读缓存的公钥；无缓存 / 损坏 → null（调用方决定是否触发拉取） */
   read() {
     try {
-      const raw = fs75.readFileSync(this.filePath(), "utf8");
+      const raw = fs76.readFileSync(this.filePath(), "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.publicKeyPem === "string" && parsed.publicKeyPem.includes("PUBLIC KEY")) {
         return parsed.publicKeyPem;
@@ -70717,12 +71099,12 @@ var ServerKeyStore = class {
       publicKeyPem,
       fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    fs75.mkdirSync(this.dataDir, { recursive: true });
-    fs75.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
+    fs76.mkdirSync(this.dataDir, { recursive: true });
+    fs76.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
   }
   clear() {
     try {
-      fs75.unlinkSync(this.filePath());
+      fs76.unlinkSync(this.filePath());
     } catch {
     }
   }
@@ -70732,19 +71114,19 @@ var ServerKeyStore = class {
 init_protocol();
 
 // src/handlers/index.ts
-var import_node_path80 = __toESM(require("path"), 1);
+var import_node_path81 = __toESM(require("path"), 1);
 
 // src/handlers/session.ts
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs59 = __toESM(require("fs"), 1);
+var import_node_fs60 = __toESM(require("fs"), 1);
 var import_node_os24 = __toESM(require("os"), 1);
-var import_node_path65 = __toESM(require("path"), 1);
-var import_node_crypto22 = require("crypto");
+var import_node_path66 = __toESM(require("path"), 1);
+var import_node_crypto23 = require("crypto");
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs59.default.readFileSync(file, "utf8");
+  const raw = import_node_fs60.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t2 = line.trim();
@@ -70757,19 +71139,19 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path65.default.join(import_node_os24.default.homedir(), ".claude");
-  let projectDir = import_node_path65.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  let sourceFile = import_node_path65.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs59.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path66.default.join(import_node_os24.default.homedir(), ".claude");
+  let projectDir = import_node_path66.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  let sourceFile = import_node_path66.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs60.default.existsSync(sourceFile)) {
     const found = findTranscriptByToolSessionId(
-      import_node_path65.default.join(baseDir, "projects"),
+      import_node_path66.default.join(baseDir, "projects"),
       input.toolSessionId
     );
     if (!found) {
       throw new Error(`fork: source transcript not found: ${sourceFile}`);
     }
     sourceFile = found;
-    projectDir = import_node_path65.default.dirname(found);
+    projectDir = import_node_path66.default.dirname(found);
   }
   const entries = readJsonlEntries(sourceFile);
   const mainEntries = entries.filter((e) => e.isSidechain !== true);
@@ -70778,7 +71160,7 @@ function forkSession(input) {
     throw new Error(`fork: messageUuid not found in transcript: ${input.messageUuid}`);
   }
   const sliced = mainEntries.slice(0, targetIdx + 1);
-  const forkedToolSessionId = (0, import_node_crypto22.randomUUID)();
+  const forkedToolSessionId = (0, import_node_crypto23.randomUUID)();
   let parentUuid = null;
   const forkedLines = [];
   for (const entry of sliced) {
@@ -70798,17 +71180,17 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const outDir = input.targetCwd ? import_node_path65.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
-  const forkedFilePath = import_node_path65.default.join(outDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs59.default.mkdirSync(outDir, { recursive: true });
-  import_node_fs59.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const outDir = input.targetCwd ? import_node_path66.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
+  const forkedFilePath = import_node_path66.default.join(outDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs60.default.mkdirSync(outDir, { recursive: true });
+  import_node_fs60.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
 // src/tools/codex-fork.ts
 var import_node_child_process17 = require("child_process");
-var import_node_fs60 = __toESM(require("fs"), 1);
-var import_node_path66 = __toESM(require("path"), 1);
+var import_node_fs61 = __toESM(require("fs"), 1);
+var import_node_path67 = __toESM(require("path"), 1);
 function openCodexAppServer(home, cwd) {
   const proc = (0, import_node_child_process17.spawn)(process.env.CODEX_BIN ?? "codex", ["app-server", "--listen", "stdio://"], {
     cwd,
@@ -70828,7 +71210,7 @@ function openCodexAppServer(home, cwd) {
 async function forkCodexThread(input, deps = {}) {
   const source = locateCodexThread(input.roots, input.sourceThreadId);
   if (!source) throw new Error(`codex fork: source thread not found: ${input.sourceThreadId}`);
-  const rollout = parseCodexRollout(import_node_fs60.default.readFileSync(source.file, "utf8"));
+  const rollout = parseCodexRollout(import_node_fs61.default.readFileSync(source.file, "utf8"));
   if (rollout.meta?.threadId.toLowerCase() !== input.sourceThreadId.toLowerCase()) {
     throw new Error(`codex fork: source thread metadata does not match ${input.sourceThreadId}`);
   }
@@ -70858,7 +71240,7 @@ async function forkCodexThread(input, deps = {}) {
       if (typeof forkedToolSessionId !== "string" || !forkedToolSessionId) {
         throw new Error("codex fork: app-server returned no thread id");
       }
-      const forked = locateCodexThread([import_node_path66.default.join(source.home, "sessions")], forkedToolSessionId);
+      const forked = locateCodexThread([import_node_path67.default.join(source.home, "sessions")], forkedToolSessionId);
       if (!forked) throw new Error(`codex fork: rollout not found for forked thread ${forkedToolSessionId}`);
       return { forkedToolSessionId, forkedFilePath: forked.file };
     })()]);
@@ -70869,19 +71251,19 @@ async function forkCodexThread(input, deps = {}) {
 }
 
 // src/session/external-scan.ts
-var import_node_fs61 = __toESM(require("fs"), 1);
+var import_node_fs62 = __toESM(require("fs"), 1);
 var import_promises11 = __toESM(require("fs/promises"), 1);
 var import_node_os25 = __toESM(require("os"), 1);
-var import_node_path67 = __toESM(require("path"), 1);
+var import_node_path68 = __toESM(require("path"), 1);
 var import_node_module = require("module");
 var import_node_child_process18 = require("child_process");
 var import_meta7 = {};
 function defaultRoots() {
   const home = import_node_os25.default.homedir();
   return {
-    claudeProjectsDir: import_node_path67.default.join(home, ".claude", "projects"),
-    codexDir: import_node_path67.default.join(home, ".codex"),
-    clawdDir: import_node_path67.default.join(home, ".clawd")
+    claudeProjectsDir: import_node_path68.default.join(home, ".claude", "projects"),
+    codexDir: import_node_path68.default.join(home, ".codex"),
+    clawdDir: import_node_path68.default.join(home, ".clawd")
   };
 }
 function width(s2) {
@@ -70932,7 +71314,7 @@ function userText(msg) {
 }
 function isDir2(p3) {
   try {
-    return import_node_fs61.default.statSync(p3).isDirectory();
+    return import_node_fs62.default.statSync(p3).isDirectory();
   } catch {
     return false;
   }
@@ -70941,7 +71323,7 @@ async function scanClaude(roots) {
   const out = [];
   let dirs;
   try {
-    dirs = import_node_fs61.default.readdirSync(roots.claudeProjectsDir, { withFileTypes: true });
+    dirs = import_node_fs62.default.readdirSync(roots.claudeProjectsDir, { withFileTypes: true });
   } catch {
     return out;
   }
@@ -70949,16 +71331,16 @@ async function scanClaude(roots) {
     if (!d2.isDirectory()) continue;
     let files;
     try {
-      files = import_node_fs61.default.readdirSync(import_node_path67.default.join(roots.claudeProjectsDir, d2.name));
+      files = import_node_fs62.default.readdirSync(import_node_path68.default.join(roots.claudeProjectsDir, d2.name));
     } catch {
       continue;
     }
     for (const name of files) {
       if (!name.endsWith(".jsonl")) continue;
-      const file = import_node_path67.default.join(roots.claudeProjectsDir, d2.name, name);
+      const file = import_node_path68.default.join(roots.claudeProjectsDir, d2.name, name);
       let st2;
       try {
-        st2 = import_node_fs61.default.statSync(file);
+        st2 = import_node_fs62.default.statSync(file);
       } catch {
         continue;
       }
@@ -71011,7 +71393,7 @@ async function scanClaude(roots) {
   return out;
 }
 async function countCodexTurns(rolloutPath) {
-  if (!rolloutPath || !import_node_fs61.default.existsSync(rolloutPath)) return { turns: 0, first: "" };
+  if (!rolloutPath || !import_node_fs62.default.existsSync(rolloutPath)) return { turns: 0, first: "" };
   let turns = 0;
   let first = "";
   for await (const rec6 of jsonLines(rolloutPath)) {
@@ -71085,7 +71467,7 @@ async function codexFromRows(rows) {
 async function scanCodex(roots) {
   let dbs = [];
   try {
-    dbs = import_node_fs61.default.readdirSync(roots.codexDir).filter((n2) => /^state_.*\.sqlite$/.test(n2)).sort().map((n2) => import_node_path67.default.join(roots.codexDir, n2));
+    dbs = import_node_fs62.default.readdirSync(roots.codexDir).filter((n2) => /^state_.*\.sqlite$/.test(n2)).sort().map((n2) => import_node_path68.default.join(roots.codexDir, n2));
   } catch {
   }
   if (!dbs.length) return [];
@@ -71094,14 +71476,14 @@ async function scanCodex(roots) {
 }
 async function scanExternalSessions(rootsIn) {
   const roots = { ...defaultRoots(), ...rootsIn };
-  const personaRoot = import_node_path67.default.join(roots.clawdDir, "personas");
+  const personaRoot = import_node_path68.default.join(roots.clawdDir, "personas");
   const all = [...await scanClaude(roots), ...await scanCodex(roots)];
   const out = [];
   for (const c2 of all) {
     if (c2.skip) continue;
     if (c2.turns < 1) continue;
     if (!c2.cwd || !isDir2(c2.cwd)) continue;
-    if (c2.cwd === roots.clawdDir || c2.cwd === personaRoot || c2.cwd.startsWith(personaRoot + import_node_path67.default.sep) || c2.cwd.startsWith(roots.clawdDir + import_node_path67.default.sep)) {
+    if (c2.cwd === roots.clawdDir || c2.cwd === personaRoot || c2.cwd.startsWith(personaRoot + import_node_path68.default.sep) || c2.cwd.startsWith(roots.clawdDir + import_node_path68.default.sep)) {
       continue;
     }
     out.push({
@@ -71118,13 +71500,13 @@ async function scanExternalSessions(rootsIn) {
 }
 
 // src/session/import-ledger.ts
-var import_node_fs62 = __toESM(require("fs"), 1);
-var import_node_path68 = __toESM(require("path"), 1);
+var import_node_fs63 = __toESM(require("fs"), 1);
+var import_node_path69 = __toESM(require("path"), 1);
 var LEDGER_FILENAME = "session-import-ledger.json";
 function readImportLedger(dataDir) {
   try {
     const parsed = JSON.parse(
-      import_node_fs62.default.readFileSync(import_node_path68.default.join(dataDir, LEDGER_FILENAME), "utf8")
+      import_node_fs63.default.readFileSync(import_node_path69.default.join(dataDir, LEDGER_FILENAME), "utf8")
     );
     return Array.isArray(parsed) ? parsed : [];
   } catch {
@@ -71132,15 +71514,15 @@ function readImportLedger(dataDir) {
   }
 }
 function appendImportLedger(dataDir, entry) {
-  const file = import_node_path68.default.join(dataDir, LEDGER_FILENAME);
+  const file = import_node_path69.default.join(dataDir, LEDGER_FILENAME);
   const entries = readImportLedger(dataDir);
   entries.push(entry);
-  import_node_fs62.default.writeFileSync(file, JSON.stringify(entries, null, 2), { encoding: "utf8", mode: 384 });
+  import_node_fs63.default.writeFileSync(file, JSON.stringify(entries, null, 2), { encoding: "utf8", mode: 384 });
 }
 
 // src/handlers/session.ts
 init_protocol();
-var import_node_path69 = __toESM(require("path"), 1);
+var import_node_path70 = __toESM(require("path"), 1);
 function canReadSearchHit(ctx, file) {
   if (!ctx || ctx.principal.kind === "owner") return true;
   return canAccessPersona(ctx.grants, file.ownerPersonaId, "read") && file.creatorPrincipalId === ctx.principal.id;
@@ -71316,7 +71698,7 @@ function buildSessionHandlers(deps) {
   const del = async (frame, _client, ctx) => {
     const args = SessionIdArgs.parse(frame);
     ensureSessionAccess(ctx, args.sessionId, "send");
-    const { broadcast } = manager.delete(args);
+    const { broadcast } = await manager.deleteWithCloudCancel(args);
     return {
       response: { type: "session:deleted", sessionId: args.sessionId },
       broadcast
@@ -71421,7 +71803,7 @@ ${attribution}` } : args;
           `principal guest:${ctx.principal.id} cannot fork tool session ${args.toolSessionId}`
         );
       }
-      if (source?.tool === "codex" && args.targetCwd && import_node_path69.default.resolve(args.targetCwd) !== import_node_path69.default.resolve(source.cwd)) {
+      if (source?.tool === "codex" && args.targetCwd && import_node_path70.default.resolve(args.targetCwd) !== import_node_path70.default.resolve(source.cwd)) {
         throw new ClawdError(ERROR_CODES.FORBIDDEN, "fork: guest targetCwd must match source cwd");
       }
     }
@@ -71460,7 +71842,7 @@ ${attribution}` } : args;
     const args = SessionIdArgs.parse(frame);
     ensureSessionAccess(ctx, args.sessionId, "send");
     observer.stop(args.sessionId);
-    const { response, broadcast } = manager.newSession(args);
+    const { response, broadcast } = await manager.newSessionWithCloudCancel(args);
     return { response: { type: "session:info", ...response }, broadcast };
   };
   const resume = async (frame, _client, ctx) => {
@@ -71698,7 +72080,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path84 = __toESM(require("path"), 1);
+var path85 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -71716,7 +72098,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path83 = __toESM(require("path"), 1);
+var path84 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g3 of grants) {
@@ -71729,42 +72111,42 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read", userWorkDir) {
-  const target = path83.resolve(absPath);
+  const target = path84.resolve(absPath);
   if (userWorkDir) {
-    const u2 = path83.resolve(userWorkDir);
-    const usep = u2.endsWith(path83.sep) ? "" : path83.sep;
+    const u2 = path84.resolve(userWorkDir);
+    const usep = u2.endsWith(path84.sep) ? "" : path84.sep;
     if (target === u2 || target.startsWith(u2 + usep)) return true;
   }
-  const root = path83.resolve(personaRoot);
-  const sep4 = root.endsWith(path83.sep) ? "" : path83.sep;
+  const root = path84.resolve(personaRoot);
+  const sep4 = root.endsWith(path84.sep) ? "" : path84.sep;
   if (!target.startsWith(root + sep4)) return false;
-  const rel = path83.relative(root, target);
+  const rel = path84.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId2 = rel.split(path83.sep)[0];
+  const personaId2 = rel.split(path84.sep)[0];
   if (!personaId2) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId2);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path83.resolve(personaRoot);
-  const target = path83.resolve(absPath);
-  const sep4 = root.endsWith(path83.sep) ? "" : path83.sep;
+  const root = path84.resolve(personaRoot);
+  const target = path84.resolve(absPath);
+  const sep4 = root.endsWith(path84.sep) ? "" : path84.sep;
   if (!target.startsWith(root + sep4)) return null;
-  const rel = path83.relative(root, target);
+  const rel = path84.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path83.sep)[0];
+  const id = rel.split(path84.sep)[0];
   return id || null;
 }
 function isPathWithin(dir, absPath) {
-  const d2 = path83.resolve(dir);
-  const t2 = path83.resolve(absPath);
-  const sep4 = d2.endsWith(path83.sep) ? "" : path83.sep;
+  const d2 = path84.resolve(dir);
+  const t2 = path84.resolve(absPath);
+  const sep4 = d2.endsWith(path84.sep) ? "" : path84.sep;
   return t2 === d2 || t2.startsWith(d2 + sep4);
 }
 function isPathInGuestBoundary(personaRoot, personaId2, userWorkDir, absPath) {
   if (userWorkDir && isPathWithin(userWorkDir, absPath)) return true;
-  return personaIdFromPath(path83.resolve(absPath), personaRoot) === personaId2;
+  return personaIdFromPath(path84.resolve(absPath), personaRoot) === personaId2;
 }
 
 // src/handlers/history.ts
@@ -71818,7 +72200,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path84.join(personaRoot, pid),
+          path85.join(personaRoot, pid),
           personaRoot,
           "read",
           userWorkDir
@@ -71830,7 +72212,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path84.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
+    assertGuestPath(ctx, path85.resolve(args.projectPath), personaRoot, "history:list", usersRoot);
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -71905,14 +72287,14 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path84.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
+    assertGuestPath(ctx, path85.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagents");
     const subs = await historyReaderForToolSession(args.toolSessionId).listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path84.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
+    assertGuestPath(ctx, path85.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
     assertGuestOwnsToolSession(ctx, args.toolSessionId, "history:subagent-read");
     const res = await historyReaderForToolSession(args.toolSessionId).readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
@@ -71922,7 +72304,7 @@ function buildHistoryHandlers(deps) {
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
       const filtered = dirs.filter(
-        (d2) => isGuestPathAllowed(ctx.grants, path84.resolve(d2.cwd), personaRoot, "read", userWorkDir)
+        (d2) => isGuestPathAllowed(ctx.grants, path85.resolve(d2.cwd), personaRoot, "read", userWorkDir)
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -71939,17 +72321,17 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/projects.ts
-var fs80 = __toESM(require("fs"), 1);
+var fs81 = __toESM(require("fs"), 1);
 var os27 = __toESM(require("os"), 1);
-var path85 = __toESM(require("path"), 1);
+var path86 = __toESM(require("path"), 1);
 var import_node_child_process19 = require("child_process");
 init_protocol();
-var DEFAULT_PROJECTS_ROOT = path85.join(os27.homedir(), "Documents", "ChatGPT");
+var DEFAULT_PROJECTS_ROOT = path86.join(os27.homedir(), "Documents", "ChatGPT");
 function allocateDir(root, name) {
-  let candidate = path85.join(root, name);
+  let candidate = path86.join(root, name);
   let n2 = 2;
-  while (fs80.existsSync(candidate)) {
-    candidate = path85.join(root, `${name} ${n2}`);
+  while (fs81.existsSync(candidate)) {
+    candidate = path86.join(root, `${name} ${n2}`);
     n2 += 1;
   }
   return candidate;
@@ -71977,7 +72359,7 @@ function buildProjectHandlers(deps) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, "project:reveal \u4EC5\u652F\u6301 macOS");
     }
     try {
-      if (!fs80.statSync(args.path).isDirectory()) throw new Error("not dir");
+      if (!fs81.statSync(args.path).isDirectory()) throw new Error("not dir");
     } catch {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${args.path}`);
     }
@@ -71993,7 +72375,7 @@ function buildProjectHandlers(deps) {
     let target;
     if (args.path) {
       try {
-        if (!fs80.statSync(args.path).isDirectory()) throw new Error("not dir");
+        if (!fs81.statSync(args.path).isDirectory()) throw new Error("not dir");
       } catch {
         throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${args.path}`);
       }
@@ -72001,15 +72383,15 @@ function buildProjectHandlers(deps) {
     } else {
       const name = args.name;
       try {
-        fs80.mkdirSync(root, { recursive: true });
+        fs81.mkdirSync(root, { recursive: true });
         target = allocateDir(root, name);
-        fs80.mkdirSync(target);
+        fs81.mkdirSync(target);
       } catch (err) {
         throw new ClawdError(ERROR_CODES.INVALID_CWD, `\u521B\u5EFA\u9879\u76EE\u76EE\u5F55\u5931\u8D25: ${String(err)}`);
       }
       const git2 = (0, import_node_child_process19.spawnSync)("git", ["init"], { cwd: target, stdio: "ignore" });
       if (git2.status !== 0) {
-        fs80.rmSync(target, { recursive: true, force: true });
+        fs81.rmSync(target, { recursive: true, force: true });
         throw new ClawdError(
           ERROR_CODES.INVALID_CWD,
           `git init \u5931\u8D25\uFF08${git2.error ? String(git2.error) : `exit ${git2.status}`}\uFF09: ${target}`
@@ -72034,7 +72416,7 @@ function buildProjectHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path86 = __toESM(require("path"), 1);
+var path87 = __toESM(require("path"), 1);
 init_protocol();
 var os28 = __toESM(require("os"), 1);
 init_protocol();
@@ -72077,22 +72459,22 @@ function buildWorkspaceHandlers(deps) {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
     const fallbackCwd = isGuest && personaRoot ? personaRoot : os28.homedir();
-    const resolvedCwd = path86.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path86.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const resolvedCwd = path87.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path87.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list", usersRoot);
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path86.isAbsolute(args.path) ? path86.resolve(args.path) : path86.resolve(args.cwd, args.path);
+    const target = path87.isAbsolute(args.path) ? path87.resolve(args.path) : path87.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read", usersRoot);
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path86.resolve(args.cwd);
+    const cwdAbs = path87.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list", usersRoot);
     const list2 = await getSkillsForTool(args.tool ?? "claude", cwdAbs);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -72104,7 +72486,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path86.resolve(args.cwd);
+    const cwdAbs = path87.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list", usersRoot);
     if (isCodexFamily(args.tool) || isPiFamily(args.tool)) {
       return { response: { type: "agents:list", agents: [] } };
@@ -72126,20 +72508,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path88 = __toESM(require("path"), 1);
+var path89 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process20 = require("child_process");
-var import_node_fs63 = __toESM(require("fs"), 1);
-var import_node_path70 = __toESM(require("path"), 1);
+var import_node_fs64 = __toESM(require("fs"), 1);
+var import_node_path71 = __toESM(require("path"), 1);
 var import_node_util2 = require("util");
 var pexec = (0, import_node_util2.promisify)(import_node_child_process20.execFile);
 function normalizePath(p3) {
-  const resolved = import_node_path70.default.resolve(p3);
+  const resolved = import_node_path71.default.resolve(p3);
   try {
-    return import_node_fs63.default.realpathSync(resolved);
+    return import_node_fs64.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -72213,7 +72595,7 @@ async function listGitBranches(cwd) {
 function assertGuestCwd(ctx, cwd, personaRoot, method, usersRoot) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
   const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
-  if (!isGuestPathAllowed(ctx.grants, path88.resolve(cwd), personaRoot, "read", userWorkDir)) {
+  if (!isGuestPathAllowed(ctx.grants, path89.resolve(cwd), personaRoot, "read", userWorkDir)) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -72470,12 +72852,12 @@ async function queryCodexAccount(deps = {}) {
 }
 
 // src/tools/pi-account.ts
-var import_node_fs64 = __toESM(require("fs"), 1);
-var import_node_path71 = __toESM(require("path"), 1);
+var import_node_fs65 = __toESM(require("fs"), 1);
+var import_node_path72 = __toESM(require("path"), 1);
 function readPiCredentials(agentDir) {
   let raw;
   try {
-    raw = JSON.parse(import_node_fs64.default.readFileSync(import_node_path71.default.join(agentDir, "auth.json"), "utf8"));
+    raw = JSON.parse(import_node_fs65.default.readFileSync(import_node_path72.default.join(agentDir, "auth.json"), "utf8"));
   } catch {
     return {};
   }
@@ -73566,21 +73948,21 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.612".length > 0 ? "0.2.612" : "dev";
+var version = "0.2.613".length > 0 ? "0.2.613" : "dev";
 
 // src/cli-probe/probe.ts
-var fs83 = __toESM(require("fs"), 1);
-var path90 = __toESM(require("path"), 1);
+var fs84 = __toESM(require("fs"), 1);
+var path91 = __toESM(require("path"), 1);
 var PKG_NAME = "@clawos-dev/clawd";
 var BIN_NAME = "clawd";
 var MAX_PARENT_HOPS = 5;
 function probeGlobalCli(pathEnv) {
   if (!pathEnv) return null;
-  for (const dir of pathEnv.split(path90.delimiter)) {
+  for (const dir of pathEnv.split(path91.delimiter)) {
     if (!dir) continue;
     let real;
     try {
-      real = fs83.realpathSync(path90.join(dir, BIN_NAME));
+      real = fs84.realpathSync(path91.join(dir, BIN_NAME));
     } catch {
       continue;
     }
@@ -73590,15 +73972,15 @@ function probeGlobalCli(pathEnv) {
   return null;
 }
 function readOwnPackageVersion(entryPath) {
-  let dir = path90.dirname(entryPath);
+  let dir = path91.dirname(entryPath);
   for (let i2 = 0; i2 < MAX_PARENT_HOPS; i2++) {
     try {
-      const raw = fs83.readFileSync(path90.join(dir, "package.json"), "utf8");
+      const raw = fs84.readFileSync(path91.join(dir, "package.json"), "utf8");
       const pkg = JSON.parse(raw);
       if (pkg.name !== PKG_NAME) return null;
       return typeof pkg.version === "string" && pkg.version ? pkg.version : null;
     } catch {
-      const parent = path90.dirname(dir);
+      const parent = path91.dirname(dir);
       if (parent === dir) return null;
       dir = parent;
     }
@@ -73774,7 +74156,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path72 = __toESM(require("path"), 1);
+var import_node_path73 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 function assertGuestAttachmentPath(ctx, absPath, personaRoot, method, usersRoot) {
@@ -73853,12 +74235,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path72.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path72.default.isAbsolute(args.relPath) ? import_node_path72.default.resolve(args.relPath) : import_node_path72.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path73.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path73.default.isAbsolute(args.relPath) ? import_node_path73.default.resolve(args.relPath) : import_node_path73.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.signUrl", "group-acl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path72.default.isAbsolute(e.relPath) ? import_node_path72.default.resolve(e.relPath) : import_node_path72.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path73.default.isAbsolute(e.relPath) ? import_node_path73.default.resolve(e.relPath) : import_node_path73.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -73882,7 +74264,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f2 = deps.sessionStore.read(sessionId);
     if (!f2) return;
-    assertGuestAttachmentPath(ctx, import_node_path72.default.resolve(f2.cwd), deps.personaRoot, method, deps.usersRoot);
+    assertGuestAttachmentPath(ctx, import_node_path73.default.resolve(f2.cwd), deps.personaRoot, method, deps.usersRoot);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -73897,8 +74279,8 @@ function buildAttachmentHandlers(deps) {
     if (!scope) {
       throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, `session ${args.sessionId} not found`);
     }
-    const cwdAbs = import_node_path72.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
-    const candidateAbs = import_node_path72.default.isAbsolute(args.relPath) ? import_node_path72.default.resolve(args.relPath) : import_node_path72.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path73.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
+    const candidateAbs = import_node_path73.default.isAbsolute(args.relPath) ? import_node_path73.default.resolve(args.relPath) : import_node_path73.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.groupAdd", "cwd-subtree");
     const from = args.origin === "agent" ? "agent" : ctx?.principal.kind === "owner" ? "owner" : "agent";
     const size = 0;
@@ -73957,19 +74339,19 @@ function buildAttachmentHandlers(deps) {
 
 // src/handlers/extension.ts
 var import_promises15 = __toESM(require("fs/promises"), 1);
-var import_node_path77 = __toESM(require("path"), 1);
+var import_node_path78 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/extension/bundle-zip.ts
 var import_promises12 = __toESM(require("fs/promises"), 1);
-var import_node_path73 = __toESM(require("path"), 1);
-var import_node_crypto23 = __toESM(require("crypto"), 1);
+var import_node_path74 = __toESM(require("path"), 1);
+var import_node_crypto24 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
   const zip = new import_jszip2.default();
   for (const rel of entries) {
-    const abs = import_node_path73.default.join(dir, rel);
+    const abs = import_node_path74.default.join(dir, rel);
     const content = await import_promises12.default.readFile(abs);
     zip.file(rel, content, { date: FIXED_DATE });
   }
@@ -73978,7 +74360,7 @@ async function bundleExtensionDir(dir) {
     compression: "DEFLATE",
     compressionOptions: { level: 6 }
   });
-  const sha256 = import_node_crypto23.default.createHash("sha256").update(buffer).digest("hex");
+  const sha256 = import_node_crypto24.default.createHash("sha256").update(buffer).digest("hex");
   return { buffer, sha256 };
 }
 var FIXED_DATE = /* @__PURE__ */ new Date("2020-01-01T00:00:00.000Z");
@@ -73990,7 +74372,7 @@ async function listFilesSorted(rootDir) {
   return out;
 }
 async function walk(absRoot, relPrefix, out) {
-  const dirAbs = import_node_path73.default.join(absRoot, relPrefix);
+  const dirAbs = import_node_path74.default.join(absRoot, relPrefix);
   const entries = await import_promises12.default.readdir(dirAbs, { withFileTypes: true });
   for (const e of entries) {
     if (IGNORE_BASENAMES.has(e.name)) continue;
@@ -74044,25 +74426,25 @@ function computePublishCheck(args) {
 
 // src/extension/install-flow.ts
 var import_promises13 = __toESM(require("fs/promises"), 1);
-var import_node_path75 = __toESM(require("path"), 1);
+var import_node_path76 = __toESM(require("path"), 1);
 var import_node_os28 = __toESM(require("os"), 1);
-var import_node_crypto24 = __toESM(require("crypto"), 1);
+var import_node_crypto25 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
 var import_node_os27 = __toESM(require("os"), 1);
-var import_node_path74 = __toESM(require("path"), 1);
+var import_node_path75 = __toESM(require("path"), 1);
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path74.default.join(import_node_os27.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path75.default.join(import_node_os27.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
-  return import_node_path74.default.join(clawdHomeRoot(override), "extensions");
+  return import_node_path75.default.join(clawdHomeRoot(override), "extensions");
 }
 function publishedChannelsFile(override) {
-  return import_node_path74.default.join(clawdHomeRoot(override), "extensions-published.json");
+  return import_node_path75.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
 function bundleCacheRoot(override) {
-  return import_node_path74.default.join(clawdHomeRoot(override), "extension-bundles");
+  return import_node_path75.default.join(clawdHomeRoot(override), "extension-bundles");
 }
 
 // src/extension/install-flow.ts
@@ -74075,7 +74457,7 @@ var InstallError = class extends Error {
 };
 async function installFromChannel(args, deps) {
   const { channelRef, snapshotHash, bundleZip } = args;
-  const computed = import_node_crypto24.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto25.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new InstallError(
       "HASH_MISMATCH",
@@ -74089,7 +74471,7 @@ async function installFromChannel(args, deps) {
     throw new InstallError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path75.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path76.default.isAbsolute(name)) {
       throw new InstallError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -74121,7 +74503,7 @@ async function installFromChannel(args, deps) {
     );
   }
   const localExtId = namespacedExtId(ownerSlug, channelRef.ownerPrincipalId);
-  const destDir = import_node_path75.default.join(deps.extensionsRoot, localExtId);
+  const destDir = import_node_path76.default.join(deps.extensionsRoot, localExtId);
   let destExists = false;
   try {
     await import_promises13.default.access(destDir);
@@ -74135,16 +74517,16 @@ async function installFromChannel(args, deps) {
     );
   }
   const stage = await import_promises13.default.mkdtemp(
-    import_node_path75.default.join(import_node_os28.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+    import_node_path76.default.join(import_node_os28.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path75.default.join(stage, name);
+      const dest = import_node_path76.default.join(stage, name);
       if (entry.dir) {
         await import_promises13.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises13.default.mkdir(import_node_path75.default.dirname(dest), { recursive: true });
+      await import_promises13.default.mkdir(import_node_path76.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises13.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -74165,9 +74547,9 @@ async function installFromChannel(args, deps) {
 
 // src/extension/update-flow.ts
 var import_promises14 = __toESM(require("fs/promises"), 1);
-var import_node_path76 = __toESM(require("path"), 1);
+var import_node_path77 = __toESM(require("path"), 1);
 var import_node_os29 = __toESM(require("os"), 1);
-var import_node_crypto25 = __toESM(require("crypto"), 1);
+var import_node_crypto26 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
 var UpdateError = class extends Error {
   constructor(code, message) {
@@ -74182,11 +74564,11 @@ async function updateFromChannel(args, deps) {
     channelRef.extId,
     channelRef.ownerPrincipalId
   );
-  const liveDir = import_node_path76.default.join(deps.extensionsRoot, localExtId);
+  const liveDir = import_node_path77.default.join(deps.extensionsRoot, localExtId);
   const prevDir = `${liveDir}.prev`;
   let existingVersion;
   try {
-    const raw = await import_promises14.default.readFile(import_node_path76.default.join(liveDir, "manifest.json"), "utf8");
+    const raw = await import_promises14.default.readFile(import_node_path77.default.join(liveDir, "manifest.json"), "utf8");
     const parsed2 = ExtensionManifestSchema.safeParse(JSON.parse(raw));
     if (!parsed2.success) {
       throw new UpdateError(
@@ -74205,7 +74587,7 @@ async function updateFromChannel(args, deps) {
     if (e instanceof UpdateError) throw e;
     throw e;
   }
-  const computed = import_node_crypto25.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto26.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new UpdateError(
       "HASH_MISMATCH",
@@ -74219,7 +74601,7 @@ async function updateFromChannel(args, deps) {
     throw new UpdateError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path76.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path77.default.isAbsolute(name)) {
       throw new UpdateError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -74254,16 +74636,16 @@ async function updateFromChannel(args, deps) {
   await import_promises14.default.rm(prevDir, { recursive: true, force: true });
   await import_promises14.default.rename(liveDir, prevDir);
   const stage = await import_promises14.default.mkdtemp(
-    import_node_path76.default.join(import_node_os29.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+    import_node_path77.default.join(import_node_os29.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path76.default.join(stage, name);
+      const dest = import_node_path77.default.join(stage, name);
       if (entry.dir) {
         await import_promises14.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises14.default.mkdir(import_node_path76.default.dirname(dest), { recursive: true });
+      await import_promises14.default.mkdir(import_node_path77.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises14.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -74330,7 +74712,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
       );
     }
   }
-  const manifestPath = import_node_path77.default.join(root, extId, "manifest.json");
+  const manifestPath = import_node_path78.default.join(root, extId, "manifest.json");
   const manifest = await readManifest(root, extId);
   const next = { ...manifest, version: newVersion };
   const tmp = `${manifestPath}.tmp`;
@@ -74338,7 +74720,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
   await import_promises15.default.rename(tmp, manifestPath);
 }
 async function readManifest(root, extId) {
-  const file = import_node_path77.default.join(root, extId, "manifest.json");
+  const file = import_node_path78.default.join(root, extId, "manifest.json");
   let raw;
   try {
     raw = await import_promises15.default.readFile(file, "utf8");
@@ -74422,7 +74804,7 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256, buffer } = await bundleExtensionDir(import_node_path77.default.join(deps.root, extId));
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path78.default.join(deps.root, extId));
     return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
@@ -74893,12 +75275,12 @@ function buildTopicHandlers(deps) {
     "topic:delete": async (frame) => {
       const { topicId } = TopicDeleteArgsSchema.parse(frame);
       const topic = mustGet(topicId);
-      const { removed, broadcast } = deps.deleteSession(topic.masterSessionId);
+      const { removed, broadcast } = await deps.deleteSession(topic.masterSessionId);
       const removedWorkerSessionIds = [];
       const allBroadcast = [...broadcast];
       for (const sessionId of workerSessionIdsOf(topic.masterSessionId)) {
         try {
-          const w3 = deps.deleteSession(sessionId);
+          const w3 = await deps.deleteSession(sessionId);
           allBroadcast.push(...w3.broadcast);
           if (w3.removed) removedWorkerSessionIds.push(sessionId);
         } catch (err) {
@@ -75250,7 +75632,7 @@ function buildVisitorHandlers(deps) {
 
 // src/extension/registry.ts
 var import_promises17 = __toESM(require("fs/promises"), 1);
-var import_node_path78 = __toESM(require("path"), 1);
+var import_node_path79 = __toESM(require("path"), 1);
 async function loadAll(root) {
   let entries;
   try {
@@ -75263,13 +75645,13 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path78.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path79.default.join(root, ent.name), ent.name));
   }
   records.sort((a2, b3) => a2.extId < b3.extId ? -1 : a2.extId > b3.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path78.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path79.default.join(dir, "manifest.json");
   let raw;
   try {
     raw = await import_promises17.default.readFile(manifestPath, "utf8");
@@ -75314,7 +75696,7 @@ async function loadOne(dir, dirName) {
 
 // src/extension/uninstall.ts
 var import_promises18 = __toESM(require("fs/promises"), 1);
-var import_node_path79 = __toESM(require("path"), 1);
+var import_node_path80 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -75323,7 +75705,7 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path79.default.join(deps.root, deps.extId);
+  const dir = import_node_path80.default.join(deps.root, deps.extId);
   try {
     await import_promises18.default.access(dir);
   } catch {
@@ -75334,7 +75716,7 @@ async function uninstall(deps) {
 }
 
 // src/handlers/index.ts
-var import_node_crypto26 = require("crypto");
+var import_node_crypto27 = require("crypto");
 
 // src/handlers/peer-exec.ts
 init_protocol();
@@ -75491,7 +75873,7 @@ function buildMethodHandlers(deps) {
           const c2 = deps.contactStore.get(deviceId);
           return c2 ? { deviceId: c2.deviceId, remoteUrl: c2.remoteUrl, connectToken: c2.connectToken } : null;
         },
-        genId: () => (0, import_node_crypto26.randomUUID)(),
+        genId: () => (0, import_node_crypto27.randomUUID)(),
         now: () => Date.now(),
         forwardInboxPostToPeer,
         logger: deps.logger
@@ -75541,7 +75923,7 @@ function buildMethodHandlers(deps) {
       broadcast: deps.broadcastToOwners
     }),
     ...buildMasterHandlers({
-      authorityTablePath: import_node_path80.default.join(deps.masterDataDir, "master-authority.json")
+      authorityTablePath: import_node_path81.default.join(deps.masterDataDir, "master-authority.json")
     }),
     ...buildTopicHandlers({
       topicStore: deps.topicStore,
@@ -75684,7 +76066,7 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 
 // src/extension/runtime.ts
 var import_node_child_process25 = require("child_process");
-var import_node_path81 = __toESM(require("path"), 1);
+var import_node_path82 = __toESM(require("path"), 1);
 var import_promises19 = require("timers/promises");
 
 // src/extension/port-allocator.ts
@@ -75785,7 +76167,7 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path81.default.join(this.root, extId);
+    const dir = import_node_path82.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
@@ -75897,7 +76279,7 @@ ${handle.stderrTail}`
 
 // src/extension/published-channels.ts
 var import_promises20 = __toESM(require("fs/promises"), 1);
-var import_node_path82 = __toESM(require("path"), 1);
+var import_node_path83 = __toESM(require("path"), 1);
 init_zod();
 var PublishedChannelsError = class extends Error {
   constructor(code, message) {
@@ -75996,7 +76378,7 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises20.default.mkdir(import_node_path82.default.dirname(this.filePath), { recursive: true });
+    await import_promises20.default.mkdir(import_node_path83.default.dirname(this.filePath), { recursive: true });
     await import_promises20.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
     await import_promises20.default.rename(tmp, this.filePath);
   }
@@ -76004,7 +76386,7 @@ var PublishedChannelStore = class {
 
 // src/extension/bundle-cache.ts
 var import_promises21 = __toESM(require("fs/promises"), 1);
-var import_node_path83 = __toESM(require("path"), 1);
+var import_node_path84 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -76013,14 +76395,14 @@ var BundleCache = class {
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
     await import_promises21.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path83.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path84.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
     await import_promises21.default.writeFile(tmp, buffer, { mode: 384 });
     await import_promises21.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path83.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path84.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
       return await import_promises21.default.readFile(file);
     } catch (e) {
@@ -76030,7 +76412,7 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path83.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path84.default.join(this.rootDir, `${snapshotHash}.zip`);
     await import_promises21.default.rm(file, { force: true });
   }
 };
@@ -76053,24 +76435,24 @@ async function startDaemon(config) {
     sampling: logShippingCfg.sampling,
     homeDir: import_node_os31.default.homedir()
   });
-  const logDir = import_node_path84.default.join(config.dataDir, "log");
-  import_node_fs65.default.mkdirSync(logDir, { recursive: true });
+  const logDir = import_node_path85.default.join(config.dataDir, "log");
+  import_node_fs66.default.mkdirSync(logDir, { recursive: true });
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path84.default.join(logDir, "clawd.log"),
+    file: import_node_path85.default.join(logDir, "clawd.log"),
     logClient
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const screenIdleProbeLogger = createFileOnlyLogger({
-    file: import_node_path84.default.join(logDir, "screen-idle-probe.log"),
+    file: import_node_path85.default.join(logDir, "screen-idle-probe.log"),
     level: "debug"
   });
   logger.info("screen-idle probe logger enabled", {
-    file: import_node_path84.default.join(logDir, "screen-idle-probe.log")
+    file: import_node_path85.default.join(logDir, "screen-idle-probe.log")
   });
   const CAP_TARGETS = [
-    import_node_path84.default.join(logDir, "clawd.log"),
-    import_node_path84.default.join(logDir, "screen-idle-probe.log")
+    import_node_path85.default.join(logDir, "clawd.log"),
+    import_node_path85.default.join(logDir, "screen-idle-probe.log")
   ];
   const LOG_CAP_MAX_BYTES = 10 * 1024 * 1024;
   const LOG_CAP_KEEP_BYTES = 5 * 1024 * 1024;
@@ -76192,11 +76574,11 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path84.default.join(config.dataDir, "personas"));
+  const personaStore = new PersonaStore(import_node_path85.default.join(config.dataDir, "personas"));
   const subscriptionChannelStore = new SubscriptionChannelStore({ dataDir: config.dataDir });
   const activeSubscriptionChannel = subscriptionChannelStore.getActive();
   if (activeSubscriptionChannel) applyPiSubscriptionChannel({ channel: activeSubscriptionChannel });
-  const usersRoot = import_node_path84.default.join(config.dataDir, "users");
+  const usersRoot = import_node_path85.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -76213,7 +76595,7 @@ async function startDaemon(config) {
   retirePersonaBuilder({ store: personaStore, logger });
   const groupFileStore = new GroupFileStore({ dataDir: config.dataDir, logger });
   const dispatchStore = createDispatchStore({
-    filePath: import_node_path84.default.join(config.dataDir, "dispatch.json"),
+    filePath: import_node_path85.default.join(config.dataDir, "dispatch.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("dispatch store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
@@ -76222,18 +76604,18 @@ async function startDaemon(config) {
   await dispatchStore.load();
   dispatchStore.markInterruptedAsFailed((/* @__PURE__ */ new Date()).toISOString());
   const channelStore = createChannelStore({
-    filePath: import_node_path84.default.join(config.dataDir, "channels.json"),
+    filePath: import_node_path85.default.join(config.dataDir, "channels.json"),
     now: () => Date.now(),
-    genId: () => `ch-${(0, import_node_crypto27.randomUUID)().slice(0, 8)}`,
+    genId: () => `ch-${(0, import_node_crypto28.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("channel store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
     })
   });
   await channelStore.load();
   const topicStore = createTopicStore({
-    filePath: import_node_path84.default.join(config.dataDir, "topics.json"),
+    filePath: import_node_path85.default.join(config.dataDir, "topics.json"),
     now: () => Date.now(),
-    genId: () => `tp-${(0, import_node_crypto27.randomUUID)().slice(0, 8)}`,
+    genId: () => `tp-${(0, import_node_crypto28.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("topic store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
     })
@@ -76241,7 +76623,7 @@ async function startDaemon(config) {
   await topicStore.load();
   let deliverPendingRef;
   const personaDispatchManager = new PersonaDispatchManager({
-    genId: () => (0, import_node_crypto27.randomUUID)(),
+    genId: () => (0, import_node_crypto28.randomUUID)(),
     store: dispatchStore,
     now: () => Date.now(),
     onCompleted: (sid) => deliverPendingRef?.(sid),
@@ -76258,12 +76640,12 @@ async function startDaemon(config) {
       });
     }
   });
-  const here = typeof __dirname === "string" ? __dirname : import_node_path84.default.dirname((0, import_node_url6.fileURLToPath)(import_meta10.url));
+  const here = typeof __dirname === "string" ? __dirname : import_node_path85.default.dirname((0, import_node_url6.fileURLToPath)(import_meta10.url));
   const mcpConfigs = [];
   const secretsBundleRoot = findSecretsBundleRoot(logger);
-  const localSecretsDir = import_node_path84.default.join(config.dataDir, LOCAL_SECRETS_DIRNAME);
+  const localSecretsDir = import_node_path85.default.join(config.dataDir, LOCAL_SECRETS_DIRNAME);
   const readSecrets = () => readSecretTable({ bundleRoot: secretsBundleRoot, overrideDir: localSecretsDir, logger });
-  const githubTokenFile = import_node_path84.default.join(localSecretsDir, GITHUB_TOKEN_FILE);
+  const githubTokenFile = import_node_path85.default.join(localSecretsDir, GITHUB_TOKEN_FILE);
   const githubIdentity = createGithubIdentity({
     resolve: () => resolveGithubAuth({ exec: runCommand, fileToken: () => readEnvFileVar(githubTokenFile, GITHUB_TOKEN_VAR) }),
     store: (token) => storeGithubAuth({
@@ -76301,22 +76683,22 @@ async function startDaemon(config) {
     void githubIdentity.refresh();
     return renderPersonaMcpSecrets({
       personaId: personaId2,
-      personaDir: import_node_path84.default.join(config.dataDir, "personas", personaId2),
+      personaDir: import_node_path85.default.join(config.dataDir, "personas", personaId2),
       secrets,
-      outDir: import_node_path84.default.join(config.dataDir, "persona-mcp"),
+      outDir: import_node_path85.default.join(config.dataDir, "persona-mcp"),
       logger
     });
   };
   const mcpDaemonUrl = `http://127.0.0.1:${config.port}`;
   const dispatchServerCandidates = [
-    import_node_path84.default.join(here, "dispatch", "mcp-server.cjs"),
+    import_node_path85.default.join(here, "dispatch", "mcp-server.cjs"),
     // 生产 dist/index → dist/dispatch/mcp-server.cjs
-    import_node_path84.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
+    import_node_path85.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
-  const dispatchServerScriptPath = dispatchServerCandidates.find((p3) => import_node_fs65.default.existsSync(p3));
+  const dispatchServerScriptPath = dispatchServerCandidates.find((p3) => import_node_fs66.default.existsSync(p3));
   if (dispatchServerScriptPath) {
-    const dispatchLogPath = import_node_path84.default.join(logDir, "dispatch-mcp-server.log");
+    const dispatchLogPath = import_node_path85.default.join(logDir, "dispatch-mcp-server.log");
     const dispatchCfgPath = writeDispatchMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: dispatchServerScriptPath,
@@ -76336,12 +76718,12 @@ async function startDaemon(config) {
     });
   }
   const ticketServerCandidates = [
-    import_node_path84.default.join(here, "ticket", "mcp-server.cjs"),
-    import_node_path84.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
+    import_node_path85.default.join(here, "ticket", "mcp-server.cjs"),
+    import_node_path85.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
-  const ticketServerScriptPath = ticketServerCandidates.find((p3) => import_node_fs65.default.existsSync(p3));
+  const ticketServerScriptPath = ticketServerCandidates.find((p3) => import_node_fs66.default.existsSync(p3));
   if (ticketServerScriptPath) {
-    const ticketLogPath = import_node_path84.default.join(logDir, "ticket-mcp-server.log");
+    const ticketLogPath = import_node_path85.default.join(logDir, "ticket-mcp-server.log");
     const ticketCfgPath = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
@@ -76363,12 +76745,12 @@ async function startDaemon(config) {
     });
   }
   const shiftServerCandidates = [
-    import_node_path84.default.join(here, "shift", "mcp-server.cjs"),
-    import_node_path84.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
+    import_node_path85.default.join(here, "shift", "mcp-server.cjs"),
+    import_node_path85.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
-  const shiftServerScriptPath = shiftServerCandidates.find((p3) => import_node_fs65.default.existsSync(p3));
+  const shiftServerScriptPath = shiftServerCandidates.find((p3) => import_node_fs66.default.existsSync(p3));
   if (shiftServerScriptPath) {
-    const shiftLogPath = import_node_path84.default.join(logDir, "shift-mcp-server.log");
+    const shiftLogPath = import_node_path85.default.join(logDir, "shift-mcp-server.log");
     const shiftCfgPath = await writeShiftMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: shiftServerScriptPath,
@@ -76389,12 +76771,12 @@ async function startDaemon(config) {
     );
   }
   const inboxServerCandidates = [
-    import_node_path84.default.join(here, "inbox", "mcp-server.cjs"),
-    import_node_path84.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
+    import_node_path85.default.join(here, "inbox", "mcp-server.cjs"),
+    import_node_path85.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
   ];
-  const inboxServerScriptPath = inboxServerCandidates.find((p3) => import_node_fs65.default.existsSync(p3));
+  const inboxServerScriptPath = inboxServerCandidates.find((p3) => import_node_fs66.default.existsSync(p3));
   if (inboxServerScriptPath) {
-    const inboxLogPath = import_node_path84.default.join(logDir, "inbox-mcp-server.log");
+    const inboxLogPath = import_node_path85.default.join(logDir, "inbox-mcp-server.log");
     const inboxCfgPath = await writeInboxMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: inboxServerScriptPath,
@@ -76415,10 +76797,10 @@ async function startDaemon(config) {
     );
   }
   const peerOpsServerCandidates = [
-    import_node_path84.default.join(here, "peer-ops", "mcp-server.cjs"),
-    import_node_path84.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
+    import_node_path85.default.join(here, "peer-ops", "mcp-server.cjs"),
+    import_node_path85.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
   ];
-  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p3) => import_node_fs65.default.existsSync(p3));
+  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p3) => import_node_fs66.default.existsSync(p3));
   if (peerOpsServerScriptPath) {
     const peerOpsCfgPath = writePeerOpsMcpConfig({
       dataDir: config.dataDir,
@@ -76438,12 +76820,12 @@ async function startDaemon(config) {
     );
   }
   const rpcToolServerCandidates = [
-    import_node_path84.default.join(here, "rpc-tool", "mcp-server.cjs"),
-    import_node_path84.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
+    import_node_path85.default.join(here, "rpc-tool", "mcp-server.cjs"),
+    import_node_path85.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
   ];
-  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p3) => import_node_fs65.default.existsSync(p3));
+  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p3) => import_node_fs66.default.existsSync(p3));
   if (rpcToolServerScriptPath) {
-    const rpcToolLogPath = import_node_path84.default.join(logDir, "rpc-tool-mcp-server.log");
+    const rpcToolLogPath = import_node_path85.default.join(logDir, "rpc-tool-mcp-server.log");
     const rpcToolCfgPath = writeRpcToolMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: rpcToolServerScriptPath,
@@ -76464,7 +76846,7 @@ async function startDaemon(config) {
     );
   }
   const shiftStore = createShiftStore({
-    filePath: import_node_path84.default.join(config.dataDir, "shift.json"),
+    filePath: import_node_path85.default.join(config.dataDir, "shift.json"),
     ownerIdProvider: () => ownerPrincipalId,
     now: () => Date.now()
   });
@@ -76486,7 +76868,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path84.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path85.default.join(config.dataDir, "personas"),
     // dispatch / shift 自动化 spawn 按 persona 绑定 tool 起 B session（codex persona 用 codex）。
     // personaRegistry 声明在 manager 之后（同作用域 const，调用时机在启动完成后，无 TDZ 风险）。
     getPersonaDefaults: (personaId2) => personaRegistry.get(personaId2),
@@ -76547,10 +76929,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path84.default.isAbsolute(input.relPath) ? input.relPath : import_node_path84.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path85.default.isAbsolute(input.relPath) ? input.relPath : import_node_path85.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs65.default.statSync(absPath).size;
+          size = import_node_fs66.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -76591,9 +76973,9 @@ async function startDaemon(config) {
     logger.info("projects.seed-dropped", { dropped: droppedSeed.dropped, backup: droppedSeed.backup });
   }
   const projectsStore = new ProjectsStore({
-    file: import_node_path84.default.join(config.dataDir, "projects.json"),
+    file: import_node_path85.default.join(config.dataDir, "projects.json"),
     clawdDir: config.dataDir,
-    codexStateFile: import_node_path84.default.join(import_node_os31.default.homedir(), ".codex", ".codex-global-state.json"),
+    codexStateFile: import_node_path85.default.join(import_node_os31.default.homedir(), ".codex", ".codex-global-state.json"),
     logger
   });
   const observer = new SessionObserver({
@@ -76657,14 +77039,35 @@ async function startDaemon(config) {
     centralApi: config.clawosApi ?? DEFAULT_CLAWOS_API,
     logger
   });
+  const cloudCancelOutbox = new CloudCancelOutbox(
+    import_node_path85.default.join(config.dataDir, "cloud-cancel-outbox"),
+    (personaId2, clientSessionId, gatewaySessionId) => cloudGateway.cancelEventSession(personaId2, clientSessionId, gatewaySessionId),
+    logger
+  );
+  manager.setCloudCanceller(async (file, runner) => {
+    const personaId2 = personaIdFromCloudCwd(file.cwd);
+    if (!personaId2) throw new Error(`\u4E91\u4F1A\u8BDD ${file.sessionId} \u7F3A\u5C11 gateway persona ID`);
+    const executionId = file.cloudExecutionId ?? file.sessionId;
+    if (!file.cloudGatewaySessionId) throw new Error(`\u4E91\u4F1A\u8BDD ${file.sessionId} \u5C1A\u672A\u6536\u5230 gateway ready`);
+    cloudCancelOutbox.record(executionId, personaId2, file.cloudGatewaySessionId);
+    try {
+      await cloudGateway.cancelEventSession(personaId2, executionId, file.cloudGatewaySessionId);
+      cloudCancelOutbox.confirm(executionId);
+      runner?.confirmCloudCancelled();
+    } catch (e) {
+      cloudCancelOutbox.release(executionId);
+      throw e;
+    }
+  });
+  cloudCancelOutbox.start();
   registerAdapter("claude", claudeAdapter);
-  const codexIsolatedHome = import_node_path84.default.join(config.dataDir, "codex-home");
+  const codexIsolatedHome = import_node_path85.default.join(config.dataDir, "codex-home");
   try {
-    import_node_fs65.default.mkdirSync(codexIsolatedHome, { recursive: true });
+    import_node_fs66.default.mkdirSync(codexIsolatedHome, { recursive: true });
     for (const f2 of ["auth.json", "config.toml"]) {
-      const link = import_node_path84.default.join(codexIsolatedHome, f2);
-      const target = import_node_path84.default.join(import_node_os31.default.homedir(), ".codex", f2);
-      if (!import_node_fs65.default.existsSync(link) && import_node_fs65.default.existsSync(target)) import_node_fs65.default.symlinkSync(target, link);
+      const link = import_node_path85.default.join(codexIsolatedHome, f2);
+      const target = import_node_path85.default.join(import_node_os31.default.homedir(), ".codex", f2);
+      if (!import_node_fs66.default.existsSync(link) && import_node_fs66.default.existsSync(target)) import_node_fs66.default.symlinkSync(target, link);
     }
   } catch (err) {
     logger.warn("codex isolated home setup failed", { err: String(err) });
@@ -76675,17 +77078,17 @@ async function startDaemon(config) {
       logger,
       historyReader: new CodexHistoryReader({
         roots: codexRolloutRoots(config.dataDir),
-        sharedHome: import_node_path84.default.join(import_node_os31.default.homedir(), ".codex"),
+        sharedHome: import_node_path85.default.join(import_node_os31.default.homedir(), ".codex"),
         logger
       }),
       // projectPaths 每次调用现取 —— 用户新建 project 后立即生效，不用重启 daemon
       codexHomeFor: (cwd) => resolveCodexHome({
         cwd,
-        personaRoot: import_node_path84.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path85.default.join(config.dataDir, "personas"),
         // 必须用 listMerged（Codex registry ∪ 叠加层）：只用本地 list() 的话，用户在
         // Codex 里建的 project 不在表里，在它下面开的会话会被误判成隔离 → Codex 侧看不到
         projectPaths: projectsStore.listMerged().map((x2) => x2.path),
-        sharedHome: import_node_path84.default.join(import_node_os31.default.homedir(), ".codex"),
+        sharedHome: import_node_path85.default.join(import_node_os31.default.homedir(), ".codex"),
         isolatedHome: codexIsolatedHome
       }),
       codexHomeForThread: (threadId) => locateCodexThread(codexRolloutRoots(config.dataDir), threadId)?.home,
@@ -76711,10 +77114,10 @@ async function startDaemon(config) {
   );
   registerAdapter(PI_CLOUD_TOOL_ID, new CloudPiAdapter({ client: cloudGateway, history: cloudHistorySource, logger }));
   const piMcpBridgeCandidates = [
-    import_node_path84.default.join(here, "pi-mcp-bridge", "extension.cjs"),
-    import_node_path84.default.join(here, "..", "dist", "pi-mcp-bridge", "extension.cjs")
+    import_node_path85.default.join(here, "pi-mcp-bridge", "extension.cjs"),
+    import_node_path85.default.join(here, "..", "dist", "pi-mcp-bridge", "extension.cjs")
   ];
-  const piMcpBridgePath = piMcpBridgeCandidates.find((p3) => import_node_fs65.default.existsSync(p3));
+  const piMcpBridgePath = piMcpBridgeCandidates.find((p3) => import_node_fs66.default.existsSync(p3));
   if (piMcpBridgePath) {
     logger.info("pi-mcp-bridge extension resolved", { path: piMcpBridgePath });
   } else {
@@ -76959,9 +77362,9 @@ async function startDaemon(config) {
       // 删话题连带删这个话题名下的全部会话（Master + 它派出去的 worker），逐条走这里。
       // 会话已经不在本机了不算失败——话题仍要删得掉，所以 SESSION_NOT_FOUND 吞掉并回
       // removed:false，其余错误照抛（别把真故障说成成功）。
-      deleteSession: (sessionId) => {
+      deleteSession: async (sessionId) => {
         try {
-          const { broadcast } = manager.delete({ sessionId });
+          const { broadcast } = await manager.deleteWithCloudCancel({ sessionId });
           return { removed: true, broadcast };
         } catch (err) {
           if (err instanceof ClawdError && err.code === ERROR_CODES.SESSION_NOT_FOUND) {
@@ -77020,11 +77423,11 @@ async function startDaemon(config) {
         // 'persona/<pid>/owner'，default 走 'default'。
         getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
         // guest path guard：candidate 必须在 personaRoot 子树或调用者自己的 user-dir 下
-        personaRoot: import_node_path84.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path85.default.join(config.dataDir, "personas"),
         usersRoot
       },
       // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-      personaRoot: import_node_path84.default.join(config.dataDir, "personas"),
+      personaRoot: import_node_path85.default.join(config.dataDir, "personas"),
       // v2 多人 persona 隔离：handler 派生 guest user-dir 放行
       usersRoot,
       // v2 Phase 6: whoami handler 装在 owner principal.displayName + persona 解析
@@ -77330,7 +77733,7 @@ async function startDaemon(config) {
   });
   shiftScheduler.start();
   logger.info("shift scheduler started", { shiftCount: shiftStore.list().length });
-  const larkBotStore = createLarkBotBindingStore(import_node_path84.default.join(config.dataDir, "personas"));
+  const larkBotStore = createLarkBotBindingStore(import_node_path85.default.join(config.dataDir, "personas"));
   const larkBotCloud = createLarkBotCloudClient({
     api: config.clawosApi ?? DEFAULT_CLAWOS_API,
     getLoginPass: () => ownerIdentityStore.read()?.loginPass ?? null
@@ -77342,7 +77745,7 @@ async function startDaemon(config) {
     store: larkBotStore,
     fetchResource: (appId, messageId, fileKey, maxBytes, type) => larkBotCloud.fetchResource(appId, messageId, fileKey, maxBytes, type),
     // 图片落 guest userWorkDir 下（capId = lark-<chat_id>）：CC 经 --add-dir + allowRead carve 可 Read
-    mediaRootFor: (chatId) => import_node_path84.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
+    mediaRootFor: (chatId) => import_node_path85.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
     isShuttingDown: () => larkDraining,
     logger: {
       warn: (msg) => logger.warn(msg),
@@ -77599,6 +78002,9 @@ async function startDaemon(config) {
     fanOutBroadcast(result.broadcast);
   });
   manager.sweepEphemeralOnStartup();
+  manager.recoverCloudSessions();
+  const cloudRecoveryInterval = setInterval(() => manager.recoverCloudSessions(), 3e4);
+  cloudRecoveryInterval.unref();
   await wss.start();
   const url = `ws://${config.host}:${config.port}`;
   let stateSnapshot = {
@@ -77652,8 +78058,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r2.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path84.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path84.default.join(logDir, "frpc.log")}`
+        `Frpc config: ${import_node_path85.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path85.default.join(logDir, "frpc.log")}`
       ];
       const width2 = Math.max(...lines.map((l2) => l2.length));
       const bar = "\u2550".repeat(width2 + 4);
@@ -77666,8 +78072,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path84.default.join(config.dataDir, "connect.txt");
-        import_node_fs65.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path85.default.join(config.dataDir, "connect.txt");
+        import_node_fs66.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -77735,6 +78141,8 @@ ${bar}
     logger.info("stopping clawd");
     larkDraining = true;
     clearInterval(attachmentGcInterval);
+    clearInterval(cloudRecoveryInterval);
+    cloudCancelOutbox.stop();
     observer.stopAll();
     manager.stopAll();
     await extensionRuntime.stopAll();
@@ -77765,9 +78173,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path84.default.join(dataDir, "persons");
+  const dir = import_node_path85.default.join(dataDir, "persons");
   try {
-    import_node_fs65.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs66.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }