@clawos-dev/clawd 0.2.616 → 0.2.618

package/dist/cli.cjs

@@ -450,8 +450,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path106, errorMaps, issueData } = params;
-      const fullPath = [...path106, ...issueData.path || []];
+      const { data, path: path107, errorMaps, issueData } = params;
+      const fullPath = [...path107, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -762,11 +762,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path106, key) {
+      constructor(parent, value, path107, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path106;
+        this._path = path107;
         this._key = key;
       }
       get path() {
@@ -10356,8 +10356,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path106 = req.path;
-        _req.url = typeof path106 === "string" ? path106 : req.url ? req.url.path || req.url : void 0;
+        const path107 = req.path;
+        _req.url = typeof path107 === "string" ? path107 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -10522,14 +10522,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path106) {
+    function parsePath(path107) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i2 = 0; i2 < path106.length; i2++) {
-        const char = path106[i2];
+      for (let i2 = 0; i2 < path107.length; i2++) {
+        const char = path107[i2];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -10660,10 +10660,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path106 of paths) {
-        const parts = parsePath(path106);
+      for (const path107 of paths) {
+        const parts = parsePath(path107);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path106, remove);
+          redactWildcardPath(obj, parts, censor, path107, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -10748,8 +10748,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path106) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path106];
+            const wrappedCensor = typeof censor === "function" ? (value, path107) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path107];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -10784,8 +10784,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path106 of pathsToClone) {
-        const parts = parsePath(path106);
+      for (const path107 of pathsToClone) {
+        const parts = parsePath(path107);
         let current = pathStructure;
         for (let i2 = 0; i2 < parts.length; i2++) {
           const part = parts[i2];
@@ -10837,24 +10837,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path106) {
-      if (typeof path106 !== "string") {
+    function validatePath(path107) {
+      if (typeof path107 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path106 === "") {
+      if (path107 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path106.includes("..")) {
-        throw new Error(`Invalid redaction path (${path106})`);
+      if (path107.includes("..")) {
+        throw new Error(`Invalid redaction path (${path107})`);
       }
-      if (path106.includes(",")) {
-        throw new Error(`Invalid redaction path (${path106})`);
+      if (path107.includes(",")) {
+        throw new Error(`Invalid redaction path (${path107})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i2 = 0; i2 < path106.length; i2++) {
-        const char = path106[i2];
+      for (let i2 = 0; i2 < path107.length; i2++) {
+        const char = path107[i2];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -10868,20 +10868,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path106})`);
+            throw new Error(`Invalid redaction path (${path107})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path106})`);
+        throw new Error(`Invalid redaction path (${path107})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path106 of paths) {
-        validatePath(path106);
+      for (const path107 of paths) {
+        validatePath(path107);
       }
     }
     function slowRedact(options = {}) {
@@ -11049,8 +11049,8 @@ var require_redaction = __commonJS({
         if (shape[k3] === null) {
           o2[k3] = (value) => topCensor(value, [k3]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path106) => {
-            return censor(value, [k3, ...path106]);
+          const wrappedCensor = typeof censor === "function" ? (value, path107) => {
+            return censor(value, [k3, ...path107]);
           } : censor;
           o2[k3] = Redact({
             paths: shape[k3],
@@ -11268,10 +11268,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs95 = require("fs");
+    var fs96 = require("fs");
     var EventEmitter2 = require("events");
     var inherits = require("util").inherits;
-    var path106 = require("path");
+    var path107 = require("path");
     var sleep2 = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -11325,20 +11325,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs95.mkdirSync(path106.dirname(file), { recursive: true });
-          const fd = fs95.openSync(file, flags, mode);
+          if (sonic.mkdir) fs96.mkdirSync(path107.dirname(file), { recursive: true });
+          const fd = fs96.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs95.mkdir(path106.dirname(file), { recursive: true }, (err) => {
+        fs96.mkdir(path107.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs95.open(file, flags, mode, fileOpened);
+          fs96.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs95.open(file, flags, mode, fileOpened);
+        fs96.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -11379,8 +11379,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs95.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs95.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs96.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs96.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -11389,15 +11389,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs95.writeSync(this.fd, this._writingBuf);
+            return fs96.writeSync(this.fd, this._writingBuf);
           }
-          return fs95.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs96.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs95.write(this.fd, this._writingBuf, this.release);
+            return fs96.write(this.fd, this._writingBuf, this.release);
           }
-          return fs95.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs96.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -11454,7 +11454,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs95.fsyncSync(this.fd);
+          fs96.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -11568,7 +11568,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs95.fsync(this.fd, (err) => {
+            fs96.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -11670,7 +11670,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs95.close(fd, (err) => {
+          fs96.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -11719,7 +11719,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n2 = Buffer.isBuffer(buf) ? fs95.writeSync(this.fd, buf) : fs95.writeSync(this.fd, buf, "utf8");
+          const n2 = Buffer.isBuffer(buf) ? fs96.writeSync(this.fd, buf) : fs96.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n2);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -11735,7 +11735,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs95.fsyncSync(this.fd);
+        fs96.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -11756,7 +11756,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n2 = fs95.writeSync(this.fd, buf);
+          const n2 = fs96.writeSync(this.fd, buf);
           buf = buf.subarray(n2);
           this._len = Math.max(this._len - n2, 0);
           if (buf.length <= 0) {
@@ -11784,13 +11784,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs95.writeSync(this.fd, this._writingBuf) : fs95.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs96.writeSync(this.fd, this._writingBuf) : fs96.writeSync(this.fd, this._writingBuf, "utf8");
           release2(null, written);
         } catch (err) {
           release2(err);
         }
       } else {
-        fs95.write(this.fd, this._writingBuf, release2);
+        fs96.write(this.fd, this._writingBuf, release2);
       }
     }
     function actualWriteBuffer() {
@@ -11799,7 +11799,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs95.writeSync(this.fd, this._writingBuf);
+          const written = fs96.writeSync(this.fd, this._writingBuf);
           release2(null, written);
         } catch (err) {
           release2(err);
@@ -11808,7 +11808,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs95.write(this.fd, this._writingBuf, release2);
+        fs96.write(this.fd, this._writingBuf, release2);
       }
     }
     function actualClose(sonic) {
@@ -11824,12 +11824,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs95.fsync(sonic.fd, closeWrapped);
+        fs96.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs95.close(sonic.fd, done);
+          fs96.close(sonic.fd, done);
         } else {
           done();
         }
@@ -14964,11 +14964,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path106, added, removed, oldPosInc, options) {
-        var last = path106.lastComponent;
+      addToPath: function addToPath(path107, added, removed, oldPosInc, options) {
+        var last = path107.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path106.oldPos + oldPosInc,
+            oldPos: path107.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -14978,7 +14978,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path106.oldPos + oldPosInc,
+            oldPos: path107.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -15560,10 +15560,10 @@ function attachmentToHistoryMessage(o2, ts) {
     const memories = raw.map((m3) => {
       if (!m3 || typeof m3 !== "object") return null;
       const rec6 = m3;
-      const path106 = typeof rec6.path === "string" ? rec6.path : null;
+      const path107 = typeof rec6.path === "string" ? rec6.path : null;
       const content = typeof rec6.content === "string" ? rec6.content : null;
-      if (!path106 || content == null) return null;
-      const entry = { path: path106, content };
+      if (!path107 || content == null) return null;
+      const entry = { path: path107, content };
       if (typeof rec6.mtimeMs === "number") entry.mtimeMs = rec6.mtimeMs;
       return entry;
     }).filter((m3) => m3 !== null);
@@ -16429,10 +16429,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m3) => {
       if (!m3 || typeof m3 !== "object") return null;
       const rec6 = m3;
-      const path106 = typeof rec6.path === "string" ? rec6.path : null;
+      const path107 = typeof rec6.path === "string" ? rec6.path : null;
       const content = typeof rec6.content === "string" ? rec6.content : null;
-      if (!path106 || content == null) return null;
-      const out = { path: path106, content };
+      if (!path107 || content == null) return null;
+      const out = { path: path107, content };
       if (typeof rec6.mtimeMs === "number") out.mtimeMs = rec6.mtimeMs;
       return out;
     }).filter((m3) => m3 !== null);
@@ -37406,8 +37406,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path106) {
-      var parts = path106.split("/");
+    exports2.resolve = function(path107) {
+      var parts = path107.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -43260,18 +43260,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o2);
       this.files[name] = object;
     };
-    var parentFolder = function(path106) {
-      if (path106.slice(-1) === "/") {
-        path106 = path106.substring(0, path106.length - 1);
+    var parentFolder = function(path107) {
+      if (path107.slice(-1) === "/") {
+        path107 = path107.substring(0, path107.length - 1);
       }
-      var lastSlash = path106.lastIndexOf("/");
-      return lastSlash > 0 ? path106.substring(0, lastSlash) : "";
+      var lastSlash = path107.lastIndexOf("/");
+      return lastSlash > 0 ? path107.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path106) {
-      if (path106.slice(-1) !== "/") {
-        path106 += "/";
+    var forceTrailingSlash = function(path107) {
+      if (path107.slice(-1) !== "/") {
+        path107 += "/";
       }
-      return path106;
+      return path107;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -44273,7 +44273,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path85.default.dirname(opts.recordPath);
+  const dir = import_node_path86.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -44287,8 +44287,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs66.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs66.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs67.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs67.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -44313,12 +44313,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs66, import_node_path85;
+var import_node_fs67, import_node_path86;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs66 = __toESM(require("fs"), 1);
-    import_node_path85 = __toESM(require("path"), 1);
+    import_node_fs67 = __toESM(require("fs"), 1);
+    import_node_path86 = __toESM(require("path"), 1);
   }
 });
 
@@ -44361,7 +44361,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs67.mkdtempSync)(import_node_path86.default.join(import_node_os32.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs68.mkdtempSync)(import_node_path87.default.join(import_node_os32.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -44522,19 +44522,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs67.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs68.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs67, import_node_os32, import_node_path86;
+var import_node_fs68, import_node_os32, import_node_path87;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs67 = require("fs");
+    import_node_fs68 = require("fs");
     import_node_os32 = __toESM(require("os"), 1);
-    import_node_path86 = __toESM(require("path"), 1);
+    import_node_path87 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -44806,8 +44806,8 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path84 = __toESM(require("path"), 1);
-var import_node_fs65 = __toESM(require("fs"), 1);
+var import_node_path85 = __toESM(require("path"), 1);
+var import_node_fs66 = __toESM(require("fs"), 1);
 var import_node_os31 = __toESM(require("os"), 1);
 var import_node_crypto27 = require("crypto");
 var import_node_url6 = require("url");
@@ -52906,9 +52906,9 @@ var CentralClientError = class extends Error {
   cause;
   status;
 };
-async function centralRequest(opts, path106, init) {
+async function centralRequest(opts, path107, init) {
   const f2 = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}${path106}`;
+  const url = `${opts.api.replace(/\/+$/, "")}${path107}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
   let res;
@@ -53944,8 +53944,8 @@ function turnStartInput(text, resolveImage) {
   const items = [];
   let leftover = text;
   for (const m3 of text.matchAll(SKILL_RE)) {
-    const [marker, name, path106] = m3;
-    items.push({ type: "skill", name, path: path106 });
+    const [marker, name, path107] = m3;
+    items.push({ type: "skill", name, path: path107 });
     leftover = leftover.replace(marker, "");
   }
   for (const m3 of text.matchAll(ATTACHMENT_RE2)) {
@@ -61320,10 +61320,10 @@ function createGithubApi(args) {
   const doFetch = args.fetch ?? fetch;
   const seal = args.seal ?? sealWithSodium;
   const timeoutMs = args.timeoutMs ?? TIMEOUT_MS;
-  async function request(method, path106, body) {
+  async function request(method, path107, body) {
     let res;
     try {
-      res = await doFetch(`${API}${path106}`, {
+      res = await doFetch(`${API}${path107}`, {
         method,
         headers: {
           Authorization: `Bearer ${args.token}`,
@@ -61348,8 +61348,8 @@ function createGithubApi(args) {
     }
     return { status: res.status, json };
   }
-  async function must(method, path106, what, body) {
-    const r2 = await request(method, path106, body);
+  async function must(method, path107, what, body) {
+    const r2 = await request(method, path107, body);
     if (r2.status < 200 || r2.status >= 300) throw new GithubApiError(r2.status, explain(r2.status, what, r2.json));
     return r2.json;
   }
@@ -61394,9 +61394,9 @@ function createGithubApi(args) {
         return { env: x2.name, ...Number.isFinite(at3) ? { setAt: at3 } : {} };
       });
     },
-    async getJson(path106) {
+    async getJson(path107) {
       try {
-        const r2 = await request("GET", path106);
+        const r2 = await request("GET", path107);
         return r2.status >= 200 && r2.status < 300 ? r2.json : void 0;
       } catch {
         return void 0;
@@ -62654,16 +62654,364 @@ function buildDeployHandlers(deps) {
 }
 
 // src/tools/subscription-channels-store.ts
+var import_node_fs36 = __toESM(require("fs"), 1);
+var import_node_os13 = __toESM(require("os"), 1);
+var import_node_path41 = __toESM(require("path"), 1);
+
+// src/tools/subscription-channels-apply.ts
 var import_node_fs35 = __toESM(require("fs"), 1);
 var import_node_os12 = __toESM(require("os"), 1);
 var import_node_path40 = __toESM(require("path"), 1);
+
+// src/tools/codex-config-toml.ts
+function parseKey(src, start) {
+  const parts = [];
+  let i2 = start;
+  for (; ; ) {
+    while (src[i2] === " " || src[i2] === "	") i2++;
+    let part;
+    if (src[i2] === '"') {
+      let j2 = i2 + 1;
+      while (j2 < src.length && src[j2] !== '"') j2 += src[j2] === "\\" ? 2 : 1;
+      if (j2 >= src.length) return null;
+      try {
+        part = JSON.parse(src.slice(i2, j2 + 1));
+      } catch {
+        part = src.slice(i2 + 1, j2);
+      }
+      i2 = j2 + 1;
+    } else if (src[i2] === "'") {
+      const j2 = src.indexOf("'", i2 + 1);
+      if (j2 < 0) return null;
+      part = src.slice(i2 + 1, j2);
+      i2 = j2 + 1;
+    } else {
+      const bare = /^[A-Za-z0-9_-]+/.exec(src.slice(i2));
+      if (!bare) return null;
+      part = bare[0];
+      i2 += part.length;
+    }
+    parts.push(part);
+    while (src[i2] === " " || src[i2] === "	") i2++;
+    if (src[i2] !== ".") return { parts, end: i2 };
+    i2++;
+  }
+}
+function tableHeader(line) {
+  const open = /^\s*(\[\[?)/.exec(line);
+  if (!open) return null;
+  const key = parseKey(line, open[0].length);
+  if (!key) return null;
+  const close = open[1] === "[[" ? "]]" : "]";
+  if (!line.startsWith(close, key.end)) return null;
+  return /^\s*(?:#.*)?$/.test(line.slice(key.end + close.length)) ? key.parts : null;
+}
+function keyLine(line) {
+  const lead = /^\s*/.exec(line)[0].length;
+  if (line[lead] === "[" || line[lead] === "#") return null;
+  const key = parseKey(line, lead);
+  return key && line[key.end] === "=" ? { parts: key.parts, valueStart: key.end + 1 } : null;
+}
+function scanValue(s2, start, st2) {
+  let i2 = start;
+  while (i2 < s2.length) {
+    if (st2.ml) {
+      if (st2.ml === '"""' && s2[i2] === "\\") {
+        i2 += 2;
+        continue;
+      }
+      if (s2.startsWith(st2.ml, i2)) {
+        let j2 = i2 + 3;
+        while (j2 < s2.length && j2 < i2 + 5 && s2[j2] === st2.ml[0]) j2++;
+        st2.ml = null;
+        i2 = j2;
+        continue;
+      }
+      i2++;
+      continue;
+    }
+    const c2 = s2[i2];
+    if (c2 === "#") return;
+    if (s2.startsWith('"""', i2) || s2.startsWith("'''", i2)) {
+      st2.ml = s2.slice(i2, i2 + 3);
+      i2 += 3;
+      continue;
+    }
+    if (c2 === '"') {
+      i2++;
+      while (i2 < s2.length && s2[i2] !== '"') i2 += s2[i2] === "\\" ? 2 : 1;
+      i2++;
+      continue;
+    }
+    if (c2 === "'") {
+      const j2 = s2.indexOf("'", i2 + 1);
+      i2 = j2 < 0 ? s2.length : j2 + 1;
+      continue;
+    }
+    if (c2 === "[" || c2 === "{") st2.depth++;
+    else if ((c2 === "]" || c2 === "}") && st2.depth > 0) st2.depth--;
+    i2++;
+  }
+}
+function scanToml(text) {
+  const out = [];
+  const st2 = { ml: null, depth: 0 };
+  let table = [];
+  for (const line of text.split("\n")) {
+    if (st2.ml || st2.depth > 0) {
+      scanValue(line, 0, st2);
+      out.push({ text: line, kind: "continuation", table });
+      continue;
+    }
+    const header = tableHeader(line);
+    if (header) {
+      table = header;
+      out.push({ text: line, kind: "header", table, key: header });
+      continue;
+    }
+    const key = keyLine(line);
+    if (key) {
+      scanValue(line, key.valueStart, st2);
+      out.push({ text: line, kind: "key", table, key: key.parts, value: line.slice(key.valueStart) });
+      continue;
+    }
+    out.push({ text: line, kind: "other", table });
+  }
+  return out;
+}
+var UNREADABLE = /* @__PURE__ */ Symbol("unreadable TOML value");
+function parseTomlValue(raw) {
+  const parsed = parseValueAt(raw, 0);
+  if (!parsed) return void 0;
+  return /^\s*(?:#[^\n]*)?\s*$/.test(raw.slice(parsed.end)) ? parsed.value : void 0;
+}
+function skipSeparators(s2, start) {
+  let i2 = start;
+  for (; ; ) {
+    while (i2 < s2.length && " 	\r\n,".includes(s2[i2])) i2++;
+    if (s2[i2] !== "#") return i2;
+    const newline = s2.indexOf("\n", i2);
+    i2 = newline < 0 ? s2.length : newline;
+  }
+}
+function parseValueAt(s2, start) {
+  let i2 = start;
+  while (s2[i2] === " " || s2[i2] === "	") i2++;
+  const c2 = s2[i2];
+  if (c2 === '"') {
+    if (s2.startsWith('"""', i2)) return null;
+    let j2 = i2 + 1;
+    while (j2 < s2.length && s2[j2] !== '"') j2 += s2[j2] === "\\" ? 2 : 1;
+    if (j2 >= s2.length) return null;
+    try {
+      return { value: JSON.parse(s2.slice(i2, j2 + 1)), end: j2 + 1 };
+    } catch {
+      return null;
+    }
+  }
+  if (c2 === "'") {
+    if (s2.startsWith("'''", i2)) return null;
+    const j2 = s2.indexOf("'", i2 + 1);
+    return j2 < 0 ? null : { value: s2.slice(i2 + 1, j2), end: j2 + 1 };
+  }
+  if (c2 === "[") {
+    const items = [];
+    i2++;
+    for (; ; ) {
+      i2 = skipSeparators(s2, i2);
+      if (s2[i2] === "]") return { value: items, end: i2 + 1 };
+      const item = parseValueAt(s2, i2);
+      if (!item) return null;
+      items.push(item.value);
+      i2 = item.end;
+    }
+  }
+  if (c2 === "{") {
+    const table = {};
+    i2++;
+    for (; ; ) {
+      i2 = skipSeparators(s2, i2);
+      if (s2[i2] === "}") return { value: table, end: i2 + 1 };
+      const key = parseKey(s2, i2);
+      if (!key || s2[key.end] !== "=") return null;
+      const item = parseValueAt(s2, key.end + 1);
+      if (!item) return null;
+      setPath(table, key.parts, item.value);
+      i2 = item.end;
+    }
+  }
+  const bare = /^[^\s,\]}#]+/.exec(s2.slice(i2));
+  return bare ? { value: bare[0], end: i2 + bare[0].length } : null;
+}
+function setPath(target, path107, value) {
+  let node = target;
+  for (const part of path107.slice(0, -1)) {
+    const next = node[part];
+    if (!next || typeof next !== "object" || Array.isArray(next)) node[part] = {};
+    node = node[part];
+  }
+  const last = path107[path107.length - 1];
+  const existing = node[last];
+  if (existing && typeof existing === "object" && !Array.isArray(existing) && value && typeof value === "object" && !Array.isArray(value)) {
+    Object.assign(existing, value);
+  } else node[last] = value;
+}
+function readTomlTable(text, path107) {
+  const result = {};
+  let found = false;
+  const within = (full) => full.length >= path107.length && path107.every((part, i2) => full[i2] === part);
+  const lines = scanToml(text);
+  for (let index = 0; index < lines.length; index++) {
+    const line = lines[index];
+    if (line.kind === "header" && within(line.key)) {
+      found = true;
+      if (line.key.length > path107.length) setPath(result, line.key.slice(path107.length), {});
+      continue;
+    }
+    if (line.kind !== "key") continue;
+    const full = [...line.table, ...line.key];
+    if (!within(full)) continue;
+    let raw = line.value;
+    while (lines[index + 1]?.kind === "continuation") raw += `
+${lines[++index].text}`;
+    const parsed = parseTomlValue(raw);
+    const value = parsed === void 0 ? UNREADABLE : parsed;
+    found = true;
+    if (full.length === path107.length) {
+      if (value && typeof value === "object" && !Array.isArray(value)) Object.assign(result, value);
+    } else setPath(result, full.slice(path107.length), value);
+  }
+  return found ? result : null;
+}
+
+// src/tools/subscription-channels-apply.ts
+var PROVIDER_ID = "cliproxyapi";
+var isOwnProvider = (path107) => path107[0] === "model_providers" && path107[1] === PROVIDER_ID;
+function stripCodexProvider(text) {
+  const out = [];
+  let dropping = false;
+  let droppingValue = false;
+  for (const line of scanToml(text)) {
+    if (line.kind === "header") {
+      dropping = isOwnProvider(line.key);
+      droppingValue = false;
+      if (!dropping) out.push(line.text);
+      continue;
+    }
+    if (line.kind === "continuation") {
+      if (!dropping && !droppingValue) out.push(line.text);
+      continue;
+    }
+    if (dropping) continue;
+    if (line.kind === "key") {
+      const full = [...line.table, ...line.key];
+      droppingValue = full.length === 1 && full[0] === "model_provider" || isOwnProvider(full);
+      if (!droppingValue) out.push(line.text);
+      continue;
+    }
+    out.push(line.text);
+  }
+  return out.join("\n").trim();
+}
+function writeFileAtomic(file, data) {
+  const target = import_node_fs35.default.existsSync(file) && import_node_fs35.default.lstatSync(file).isSymbolicLink() ? import_node_fs35.default.realpathSync(file) : file;
+  const tmp = `${target}.tmp.${process.pid}.${Date.now()}`;
+  import_node_fs35.default.writeFileSync(tmp, data, { mode: 384 });
+  import_node_fs35.default.renameSync(tmp, target);
+}
+function snapshotFile(file) {
+  const original = import_node_fs35.default.existsSync(file) ? import_node_fs35.default.readFileSync(file) : null;
+  return () => {
+    const current = import_node_fs35.default.existsSync(file) ? import_node_fs35.default.readFileSync(file) : null;
+    if (original === null) {
+      if (current !== null) import_node_fs35.default.rmSync(file, { force: true });
+      return;
+    }
+    if (current !== null && current.equals(original)) return;
+    writeFileAtomic(file, original);
+  };
+}
+var resolveCodexHome2 = (codexHome) => codexHome || process.env.CODEX_HOME || import_node_path40.default.join(import_node_os12.default.homedir(), ".codex");
+var resolvePiAgentDir = (agentDir) => agentDir || process.env.PI_CODING_AGENT_DIR || import_node_path40.default.join(import_node_os12.default.homedir(), ".pi", "agent");
+var PI_SUBSCRIPTION_FILE = "cliproxyapi.json";
+function applyCodexSubscriptionChannel(opts) {
+  const codexHome = resolveCodexHome2(opts.codexHome);
+  import_node_fs35.default.mkdirSync(codexHome, { recursive: true });
+  const configFile = import_node_path40.default.join(codexHome, "config.toml");
+  const original = import_node_fs35.default.existsSync(configFile) ? import_node_fs35.default.readFileSync(configFile, "utf8") : "";
+  const rest = stripCodexProvider(original);
+  let content;
+  if (opts.channel) {
+    const ch = opts.channel;
+    content = [
+      `model_provider = "${PROVIDER_ID}"`,
+      ...rest ? ["", rest] : [],
+      "",
+      `[model_providers.${PROVIDER_ID}]`,
+      `name = "${PROVIDER_ID}"`,
+      `base_url = ${JSON.stringify(ch.baseUrl)}`,
+      'wire_api = "responses"',
+      `auth = { command = "echo", args = [${JSON.stringify(ch.apiKey)}] }`,
+      ""
+    ].join("\n");
+  } else {
+    content = [
+      'model_provider = "openai"',
+      ...rest ? ["", rest] : [],
+      ""
+    ].join("\n");
+  }
+  writeFileAtomic(configFile, content);
+}
+function applyPiSubscriptionChannel(opts) {
+  const agentDir = resolvePiAgentDir(opts.agentDir);
+  if (!import_node_fs35.default.existsSync(agentDir)) return false;
+  const configFile = import_node_path40.default.join(agentDir, PI_SUBSCRIPTION_FILE);
+  if (opts.channel) {
+    const data = { baseUrl: opts.channel.baseUrl, apiKey: opts.channel.apiKey };
+    writeFileAtomic(configFile, JSON.stringify(data, null, 2) + "\n");
+    return true;
+  }
+  return false;
+}
+
+// src/tools/subscription-channels-store.ts
 var CHANNELS_FILE_NAME = "subscription-channels.json";
+function providerKey(provider, codexHome) {
+  if ([provider.env_key, provider.experimental_bearer_token, provider.auth].includes(UNREADABLE)) return null;
+  const envKey = typeof provider.env_key === "string" && provider.env_key ? provider.env_key : null;
+  if (envKey) return process.env[envKey] || null;
+  const inline = provider.experimental_bearer_token;
+  if (typeof inline === "string" && inline) return inline;
+  if (provider.auth !== void 0) {
+    const auth = provider.auth;
+    const args = auth?.args;
+    if (auth?.command !== "echo" || !Array.isArray(args) || args.length !== 1) return null;
+    const [arg] = args;
+    if (typeof arg !== "string" || /^-[neE]+$/.test(arg)) return null;
+    return arg.trim() || null;
+  }
+  return readAuthKey2(codexHome);
+}
+function readAuthKey2(codexHome) {
+  try {
+    const key = JSON.parse(import_node_fs36.default.readFileSync(import_node_path41.default.join(codexHome, "auth.json"), "utf8")).OPENAI_API_KEY;
+    return typeof key === "string" && key ? key : null;
+  } catch {
+    return null;
+  }
+}
 var SubscriptionChannelStore = class {
   filePath;
   codexHome;
   constructor(options) {
-    this.filePath = import_node_path40.default.join(options.dataDir, CHANNELS_FILE_NAME);
-    this.codexHome = options.codexHome || process.env.CODEX_HOME || import_node_path40.default.join(import_node_os12.default.homedir(), ".codex");
+    this.filePath = import_node_path41.default.join(options.dataDir, CHANNELS_FILE_NAME);
+    this.codexHome = options.codexHome || process.env.CODEX_HOME || import_node_path41.default.join(import_node_os13.default.homedir(), ".codex");
+  }
+  /** 存储文件的快照（首次初始化 / 迁移先落盘）；返回的函数把它恢复成此刻的样子，通道切换失败时回滚用 */
+  snapshot() {
+    this.readOrCreate();
+    return snapshotFile(this.filePath);
   }
   /** 获取列表与激活通道 ID（Key 经脱敏掩码） */
   list() {
@@ -62758,9 +63106,9 @@ var SubscriptionChannelStore = class {
     return target;
   }
   readOrCreate() {
-    if (import_node_fs35.default.existsSync(this.filePath)) {
+    if (import_node_fs36.default.existsSync(this.filePath)) {
       try {
-        const raw = JSON.parse(import_node_fs35.default.readFileSync(this.filePath, "utf8"));
+        const raw = JSON.parse(import_node_fs36.default.readFileSync(this.filePath, "utf8"));
         if (raw && Array.isArray(raw.channels)) {
           return {
             activeChannelId: typeof raw.activeChannelId === "string" ? raw.activeChannelId : null,
@@ -62780,19 +63128,21 @@ var SubscriptionChannelStore = class {
   }
   tryMigrateFromCodexConfig() {
     try {
-      const configPath = import_node_path40.default.join(this.codexHome, "config.toml");
-      if (!import_node_fs35.default.existsSync(configPath)) return null;
-      const content = import_node_fs35.default.readFileSync(configPath, "utf8");
-      if (!content.includes('model_provider = "cliproxyapi"')) return null;
-      const urlMatch = /base_url\s*=\s*["']([^"']+)["']/.exec(content);
-      const keyMatch = /args\s*=\s*\[\s*["']([^"']+)["']\s*\]/.exec(content) || /experimental_bearer_token\s*=\s*["']([^"']+)["']/.exec(content);
-      if (urlMatch && keyMatch) {
+      const configPath = import_node_path41.default.join(this.codexHome, "config.toml");
+      if (!import_node_fs36.default.existsSync(configPath)) return null;
+      const content = import_node_fs36.default.readFileSync(configPath, "utf8");
+      if (readTomlTable(content, [])?.model_provider !== "cliproxyapi") return null;
+      const provider = readTomlTable(content, ["model_providers", "cliproxyapi"]);
+      if (!provider) return null;
+      const baseUrl = typeof provider.base_url === "string" && provider.base_url ? provider.base_url : null;
+      const key = providerKey(provider, this.codexHome);
+      if (baseUrl && key) {
         const id = "default-pool";
         const channel = {
           id,
           name: "\u9ED8\u8BA4\u56E2\u961F\u53F7\u6C60",
-          baseUrl: normalizeEngineBaseUrl(urlMatch[1]),
-          apiKey: keyMatch[1],
+          baseUrl: normalizeEngineBaseUrl(baseUrl),
+          apiKey: key,
           remark: "\u4ECE\u672C\u673A\u5DF2\u63A5\u5165\u7684\u53F7\u6C60\u914D\u7F6E\u81EA\u52A8\u8FC1\u79FB",
           createdAt: Date.now(),
           updatedAt: Date.now()
@@ -62807,89 +63157,12 @@ var SubscriptionChannelStore = class {
     return null;
   }
   write(data) {
-    const dir = import_node_path40.default.dirname(this.filePath);
-    import_node_fs35.default.mkdirSync(dir, { recursive: true });
-    const tmp = `${this.filePath}.tmp.${Date.now()}`;
-    import_node_fs35.default.writeFileSync(tmp, JSON.stringify(data, null, 2) + "\n", { mode: 384 });
-    import_node_fs35.default.renameSync(tmp, this.filePath);
+    const dir = import_node_path41.default.dirname(this.filePath);
+    import_node_fs36.default.mkdirSync(dir, { recursive: true });
+    writeFileAtomic(this.filePath, JSON.stringify(data, null, 2) + "\n");
   }
 };
 
-// src/tools/subscription-channels-apply.ts
-var import_node_fs36 = __toESM(require("fs"), 1);
-var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path41 = __toESM(require("path"), 1);
-var TABLE_HEADER = /^\s*\[\[?\s*([A-Za-z0-9_.-]+)\s*\]\]?\s*(?:#.*)?$/;
-var KEY_LINE = /^\s*([A-Za-z0-9_.-]+)\s*=/;
-function stripCodexProvider(text) {
-  const out = [];
-  let inProviderSection = false;
-  for (const line of text.split("\n")) {
-    const headerMatch = TABLE_HEADER.exec(line);
-    if (headerMatch) {
-      const section = headerMatch[1].trim();
-      inProviderSection = section === "model_providers" || section.startsWith("model_providers.");
-      if (inProviderSection) continue;
-      out.push(line);
-      continue;
-    }
-    if (inProviderSection) continue;
-    const keyMatch = KEY_LINE.exec(line);
-    if (keyMatch) {
-      const key = keyMatch[1].trim();
-      if (key === "model_provider" || key.startsWith("model_providers.")) {
-        continue;
-      }
-    }
-    out.push(line);
-  }
-  return out.join("\n").trim();
-}
-function applyCodexSubscriptionChannel(opts) {
-  const codexHome = opts.codexHome || process.env.CODEX_HOME || import_node_path41.default.join(import_node_os13.default.homedir(), ".codex");
-  import_node_fs36.default.mkdirSync(codexHome, { recursive: true });
-  const configFile = import_node_path41.default.join(codexHome, "config.toml");
-  const original = import_node_fs36.default.existsSync(configFile) ? import_node_fs36.default.readFileSync(configFile, "utf8") : "";
-  const rest = stripCodexProvider(original);
-  let content;
-  if (opts.channel) {
-    const ch = opts.channel;
-    content = [
-      'model_provider = "cliproxyapi"',
-      ...rest ? ["", rest] : [],
-      "",
-      "[model_providers.cliproxyapi]",
-      'name = "cliproxyapi"',
-      `base_url = ${JSON.stringify(ch.baseUrl)}`,
-      'wire_api = "responses"',
-      `auth = { command = "echo", args = [${JSON.stringify(ch.apiKey)}] }`,
-      ""
-    ].join("\n");
-  } else {
-    content = [
-      'model_provider = "openai"',
-      ...rest ? ["", rest] : [],
-      ""
-    ].join("\n");
-  }
-  const tmpFile = `${configFile}.tmp.${Date.now()}`;
-  import_node_fs36.default.writeFileSync(tmpFile, content, { mode: 384 });
-  import_node_fs36.default.renameSync(tmpFile, configFile);
-}
-function applyPiSubscriptionChannel(opts) {
-  const agentDir = opts.agentDir || process.env.PI_CODING_AGENT_DIR || import_node_path41.default.join(import_node_os13.default.homedir(), ".pi", "agent");
-  if (!import_node_fs36.default.existsSync(agentDir)) return false;
-  const configFile = import_node_path41.default.join(agentDir, "cliproxyapi.json");
-  if (opts.channel) {
-    const data = { baseUrl: opts.channel.baseUrl, apiKey: opts.channel.apiKey };
-    const tmp = `${configFile}.tmp.${Date.now()}`;
-    import_node_fs36.default.writeFileSync(tmp, JSON.stringify(data, null, 2) + "\n", { mode: 384 });
-    import_node_fs36.default.renameSync(tmp, configFile);
-    return true;
-  }
-  return false;
-}
-
 // src/deploy/local-probe.ts
 function pickVersion(s2) {
   return /(\d+)\.(\d+)(?:\.(\d+))?/.exec(s2)?.[0];
@@ -62948,8 +63221,8 @@ function refreshPathFromLoginShell() {
       timeout: 3e3,
       stdio: ["ignore", "pipe", "ignore"]
     });
-    const path106 = out.trim();
-    if (path106) process.env.PATH = path106;
+    const path107 = out.trim();
+    if (path107) process.env.PATH = path107;
   } catch {
   }
 }
@@ -63751,10 +64024,10 @@ function createCloudPersonaBotClient(opts) {
   const f2 = opts.fetchImpl ?? fetch;
   const base = opts.api.replace(/\/+$/, "");
   const route = (personaId2) => `/api/lark-bot/cloud/${encodeURIComponent(personaId2)}`;
-  async function request(method, path106, body) {
+  async function request(method, path107, body) {
     const pass = opts.getLoginPass();
     if (!pass) throw new LarkBotCloudError("\u98DE\u4E66\u767B\u5F55\u540E\u624D\u80FD\u7BA1\u7406\u4E91 Persona \u7684 Bot", 401);
-    const response = await f2(base + path106, {
+    const response = await f2(base + path107, {
       method,
       headers: { authorization: `Bearer ${pass}`, "content-type": "application/json" },
       ...body ? { body: JSON.stringify(body) } : {},
@@ -63763,7 +64036,7 @@ function createCloudPersonaBotClient(opts) {
     const json = await response.json().catch(() => ({}));
     if (!response.ok) {
       const detail = typeof json.message === "string" ? json.message : `HTTP ${response.status}`;
-      throw new LarkBotCloudError(`cloud bot ${method} ${path106}: ${detail}`, response.status);
+      throw new LarkBotCloudError(`cloud bot ${method} ${path107}: ${detail}`, response.status);
     }
     return json;
   }
@@ -65159,15 +65432,28 @@ function createCloudTurnSession(args) {
           const accepted = new Promise((resolve9) => {
             resolveAccepted = resolve9;
           });
-          stream.onEvents((events) => sink.pushEvents(events));
-          stream.onHistoryGap(() => sink.onHistoryGap?.(false));
+          let turnOpen = true;
+          let gap = false;
+          stream.onEvents((events) => {
+            for (const event of events) {
+              if (event.kind === "turn_end") turnOpen = false;
+              else if (event.kind !== "subagent_progress" && event.kind !== "session_init") turnOpen = true;
+            }
+            sink.pushEvents(events);
+          });
+          stream.onHistoryGap(() => {
+            gap = true;
+            sink.onHistoryGap?.(false);
+          });
           stream.onState((state) => {
             resolveAccepted();
             if (state.status === "inqueue") sink.pushEvents([{ kind: "meta-text", text: "\u5DF2\u6392\u961F\uFF0C\u4E0A\u4E00\u8F6E\u7ED3\u675F\u540E\u6267\u884C" }]);
             if (state.status === "completed" || state.status === "failed" || state.status === "cancelled") {
               live.delete(commandId);
               streams.delete(commandId);
+              if (state.status === "completed" && turnOpen) sink.pushEvents([{ kind: "turn_end", reason: "completed" }]);
               if (state.status === "completed" && state.threadId) sink.pushEvents([{ kind: "session_init", toolSessionId: state.threadId }]);
+              if (state.status === "completed" && gap) sink.onHistoryGap?.(true);
               if (state.status === "failed") sink.pushEvents([{ kind: "error", message: `\u4E91\u4E0A\u6267\u884C\u5931\u8D25\uFF1A${state.errorCode ?? "TURN_FAILED"}` }]);
               if (state.status === "failed" || state.status === "cancelled") sink.pushEvents([{ kind: "turn_end", reason: "interrupted" }]);
               sink.onCloudTurnTerminal?.(commandId);
@@ -65565,6 +65851,7 @@ function drivePiSession(opts) {
   let turnOpen = false;
   const firstByte = createFirstByteClock(opts.now);
   let handshakeFailed = false;
+  let interrupts = 0;
   let exited = false;
   const finish = (code) => {
     if (exited) return;
@@ -65639,12 +65926,20 @@ function drivePiSession(opts) {
   const session = {
     startTurn(text) {
       let opened = false;
+      const askedAt = interrupts;
       void ready.then(async () => {
         if (handshakeFailed) {
           fail("pi session not ready (get_state failed)", false);
           return;
         }
         const input = await piPromptInput(text, { fetchImage: opts.fetchImage });
+        if (interrupts !== askedAt) {
+          if (!turnOpen) {
+            sink.pushEvents([{ kind: "turn_end", reason: "interrupted" }]);
+            opts.onTurnCompleted?.("interrupted");
+          }
+          return;
+        }
         opened = !turnOpen;
         if (opened) {
           turnOpen = true;
@@ -65664,6 +65959,7 @@ function drivePiSession(opts) {
       logger?.warn("pi respondPermission ignored: pi has no approvals", { requestId });
     },
     interrupt() {
+      interrupts++;
       st2.aborted = true;
       void client.request({ type: "abort" }).catch(() => {
       });
@@ -65835,7 +66131,18 @@ async function queryPiModels(deps = {}) {
   const proc = deps.spawnOverride ? deps.spawnOverride(cmd, args) : (0, import_node_child_process12.spawn)(cmd, args, { stdio: ["pipe", "pipe", "pipe"] });
   proc.stdin?.on("error", () => {
   });
-  const client = new PiRpcClient(piStdioLineStream(proc));
+  let refreshingCliproxy = false;
+  let refreshError;
+  let cliproxyRefreshedCount;
+  const client = new PiRpcClient(piStdioLineStream(proc), {
+    onEvent: (event) => {
+      if (!refreshingCliproxy || event.type !== "extension_ui_request" || event.method !== "notify") return;
+      const message = str2(event.message);
+      if (event.notifyType === "error" && message?.startsWith("Failed to refresh CLIProxyAPI models:")) refreshError = message;
+      const count = /^Refreshed (\d+) CLIProxyAPI models from /.exec(message ?? "");
+      if (count) cliproxyRefreshedCount = Number(count[1]);
+    }
+  });
   const timeoutMs = deps.timeoutMs ?? 15e3;
   let timer;
   let timedOut = false;
@@ -65848,6 +66155,19 @@ async function queryPiModels(deps = {}) {
   const spawnError = new Promise((_3, reject) => proc.on("error", reject));
   const race = (p3) => Promise.race([p3, timeout, spawnError]);
   try {
+    if (deps.refresh) {
+      const commands = await race(client.request({ type: "get_commands" }));
+      if (!commands.success) throw new Error(commands.error ?? "get_commands failed");
+      const hasCliproxyRefresh = arr(rec2(commands.data)?.commands).some((command) => str2(rec2(command)?.name) === "cliproxyapi-refresh");
+      if (hasCliproxyRefresh) {
+        refreshingCliproxy = true;
+        const refreshed = await race(client.request({ type: "prompt", message: "/cliproxyapi-refresh" }));
+        if (!refreshed.success) throw new Error(refreshed.error ?? "cliproxyapi-refresh failed");
+        if (refreshError) throw new Error(refreshError);
+        if (cliproxyRefreshedCount === 0) throw new Error("CLIProxyAPI model refresh returned no models");
+        refreshingCliproxy = false;
+      }
+    }
     const r2 = await race(client.request({ type: "get_available_models" }));
     if (!r2.success) throw new Error(r2.error ?? "get_available_models failed");
     const models = arr(rec2(r2.data)?.models).map(rec2).filter((m3) => m3 !== void 0);
@@ -65897,21 +66217,22 @@ var PiAdapter = class {
   }
   async capabilities(opts) {
     if (opts?.refresh) {
-      const fresh = await this.loadCapabilities({ strict: true });
+      const fresh = await this.loadCapabilities({ strict: true, refresh: true });
       this.capsPromise = Promise.resolve(fresh);
       return fresh;
     }
-    if (!this.capsPromise) this.capsPromise = this.loadCapabilities({ strict: false });
+    if (!this.capsPromise) this.capsPromise = this.loadCapabilities({ strict: false, refresh: false });
     return this.capsPromise;
   }
   async loadCapabilities(opts) {
     let models = [];
     try {
-      models = mapPiModels(this.opts.queryOverride ? await this.opts.queryOverride() : await queryPiModels());
+      models = mapPiModels(this.opts.queryOverride ? await this.opts.queryOverride({ refresh: opts.refresh }) : await queryPiModels({ refresh: opts.refresh }));
     } catch (err) {
       if (opts.strict) throw err;
       this.opts.logger?.warn?.(`pi get_available_models failed: ${err.message}`);
     }
+    if (models.length === 0 && opts.strict) throw new Error("Pi model refresh returned no models");
     if (models.length === 0) models = [PI_DEFAULT_MODEL_ENTRY];
     for (const m3 of models) if (m3.id) this.windows.set(m3.id, m3.contextWindowSize);
     return buildPiCapabilities(models);
@@ -66045,13 +66366,13 @@ function mapSkillsListResponse(res) {
       const r2 = s2 ?? {};
       const name = str4(r2.name);
       if (!name) continue;
-      const path106 = str4(r2.path);
+      const path107 = str4(r2.path);
       const description = str4(r2.description);
       const isPlugin = name.includes(":");
       out.push({
         name,
         source: isPlugin ? "plugin" : "project",
-        ...path106 ? { path: path106 } : {},
+        ...path107 ? { path: path107 } : {},
         ...description ? { description } : {},
         ...isPlugin ? { plugin: name.split(":")[0] } : {}
       });
@@ -70661,7 +70982,7 @@ var ServerKeyStore = class {
 init_protocol();
 
 // src/handlers/index.ts
-var import_node_path80 = __toESM(require("path"), 1);
+var import_node_path81 = __toESM(require("path"), 1);
 
 // src/handlers/session.ts
 init_protocol();
@@ -72488,45 +72809,65 @@ function buildEngineHandlers(deps, overrides = {}) {
 }
 
 // src/handlers/channels.ts
+var import_node_fs65 = __toESM(require("fs"), 1);
+var import_node_path72 = __toESM(require("path"), 1);
 function buildChannelsHandlers(deps) {
+  let queue = Promise.resolve();
+  const serialized = (fn) => (frame, context) => {
+    const run = queue.then(() => fn(frame, context));
+    queue = run.then(() => {
+    }, () => {
+    });
+    return run;
+  };
+  async function transact(mutate) {
+    const codexHome = resolveCodexHome2(deps.codexHome);
+    const agentDir = resolvePiAgentDir(deps.agentDir);
+    const restoreStore = deps.store.snapshot();
+    const restoreCodex = snapshotFile(import_node_path72.default.join(codexHome, "config.toml"));
+    const restorePi = import_node_fs65.default.existsSync(agentDir) ? snapshotFile(import_node_path72.default.join(agentDir, PI_SUBSCRIPTION_FILE)) : null;
+    let next;
+    try {
+      next = mutate();
+      if (next === void 0) return;
+      applyCodexSubscriptionChannel({ codexHome, channel: next });
+      applyPiSubscriptionChannel({ agentDir, channel: next });
+      if (next) await deps.manager.getCapabilities("codex", { refresh: true });
+    } catch (err) {
+      restoreStore();
+      restoreCodex();
+      restorePi?.();
+      if (next?.id === "default-pool" && err instanceof Error && /HTTP 401/.test(err.message)) {
+        throw new Error("\u9ED8\u8BA4\u53F7\u6C60\u8BA4\u8BC1\u5931\u8D25\uFF08HTTP 401\uFF09\uFF1A\u8BF7\u7F16\u8F91\u300C\u9ED8\u8BA4\u56E2\u961F\u53F7\u6C60\u300D\u5E76\u91CD\u65B0\u586B\u5199\u53F7\u6C60 API Key\uFF0C\u518D\u8BBE\u4E3A\u5F53\u524D\u3002");
+      }
+      throw err;
+    }
+  }
   const get = async () => {
     return { response: deps.store.list() };
   };
-  const save = async (frame) => {
+  const save = serialized(async (frame) => {
     const args = parseArgs2(SubscriptionChannelSaveArgsSchema, frame, "subscriptionChannel:save");
-    const channel = deps.store.save(args);
-    const state = deps.store.list();
-    if (state.activeChannelId === channel.id) {
-      applyCodexSubscriptionChannel({ codexHome: deps.codexHome, channel });
-      applyPiSubscriptionChannel({ agentDir: deps.agentDir, channel });
-      await deps.manager.getCapabilities("codex", { refresh: true });
-    }
+    await transact(() => {
+      const channel = deps.store.save(args);
+      return deps.store.list().activeChannelId === channel.id ? channel : void 0;
+    });
     return { response: deps.store.list() };
-  };
-  const del = async (frame) => {
+  });
+  const del = serialized(async (frame) => {
     const args = parseArgs2(SubscriptionChannelDeleteArgsSchema, frame, "subscriptionChannel:delete");
-    const wasActive = deps.store.list().activeChannelId === args.id;
-    deps.store.delete(args.id);
-    if (wasActive) {
-      const newActive = deps.store.getActive();
-      applyCodexSubscriptionChannel({ codexHome: deps.codexHome, channel: newActive });
-      applyPiSubscriptionChannel({ agentDir: deps.agentDir, channel: newActive });
-      if (newActive) {
-        await deps.manager.getCapabilities("codex", { refresh: true });
-      }
-    }
+    await transact(() => {
+      const wasActive = deps.store.list().activeChannelId === args.id;
+      deps.store.delete(args.id);
+      return wasActive ? deps.store.getActive() : void 0;
+    });
     return { response: { ok: true } };
-  };
-  const activate = async (frame) => {
+  });
+  const activate = serialized(async (frame) => {
     const args = parseArgs2(SubscriptionChannelActivateArgsSchema, frame, "subscriptionChannel:activate");
-    const channel = deps.store.setActive(args.id);
-    applyCodexSubscriptionChannel({ codexHome: deps.codexHome, channel });
-    applyPiSubscriptionChannel({ agentDir: deps.agentDir, channel });
-    if (channel) {
-      await deps.manager.getCapabilities("codex", { refresh: true });
-    }
+    await transact(() => deps.store.setActive(args.id));
     return { response: { ok: true } };
-  };
+  });
   return {
     "subscriptionChannel:get": get,
     "subscriptionChannel:save": save,
@@ -73495,21 +73836,21 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.616".length > 0 ? "0.2.616" : "dev";
+var version = "0.2.618".length > 0 ? "0.2.618" : "dev";
 
 // src/cli-probe/probe.ts
-var fs83 = __toESM(require("fs"), 1);
-var path90 = __toESM(require("path"), 1);
+var fs84 = __toESM(require("fs"), 1);
+var path91 = __toESM(require("path"), 1);
 var PKG_NAME = "@clawos-dev/clawd";
 var BIN_NAME = "clawd";
 var MAX_PARENT_HOPS = 5;
 function probeGlobalCli(pathEnv) {
   if (!pathEnv) return null;
-  for (const dir of pathEnv.split(path90.delimiter)) {
+  for (const dir of pathEnv.split(path91.delimiter)) {
     if (!dir) continue;
     let real;
     try {
-      real = fs83.realpathSync(path90.join(dir, BIN_NAME));
+      real = fs84.realpathSync(path91.join(dir, BIN_NAME));
     } catch {
       continue;
     }
@@ -73519,15 +73860,15 @@ function probeGlobalCli(pathEnv) {
   return null;
 }
 function readOwnPackageVersion(entryPath) {
-  let dir = path90.dirname(entryPath);
+  let dir = path91.dirname(entryPath);
   for (let i2 = 0; i2 < MAX_PARENT_HOPS; i2++) {
     try {
-      const raw = fs83.readFileSync(path90.join(dir, "package.json"), "utf8");
+      const raw = fs84.readFileSync(path91.join(dir, "package.json"), "utf8");
       const pkg = JSON.parse(raw);
       if (pkg.name !== PKG_NAME) return null;
       return typeof pkg.version === "string" && pkg.version ? pkg.version : null;
     } catch {
-      const parent = path90.dirname(dir);
+      const parent = path91.dirname(dir);
       if (parent === dir) return null;
       dir = parent;
     }
@@ -73703,7 +74044,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path72 = __toESM(require("path"), 1);
+var import_node_path73 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 function assertGuestAttachmentPath(ctx, absPath, personaRoot, method, usersRoot) {
@@ -73782,12 +74123,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path72.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path72.default.isAbsolute(args.relPath) ? import_node_path72.default.resolve(args.relPath) : import_node_path72.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path73.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path73.default.isAbsolute(args.relPath) ? import_node_path73.default.resolve(args.relPath) : import_node_path73.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.signUrl", "group-acl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path72.default.isAbsolute(e.relPath) ? import_node_path72.default.resolve(e.relPath) : import_node_path72.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path73.default.isAbsolute(e.relPath) ? import_node_path73.default.resolve(e.relPath) : import_node_path73.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -73811,7 +74152,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f2 = deps.sessionStore.read(sessionId);
     if (!f2) return;
-    assertGuestAttachmentPath(ctx, import_node_path72.default.resolve(f2.cwd), deps.personaRoot, method, deps.usersRoot);
+    assertGuestAttachmentPath(ctx, import_node_path73.default.resolve(f2.cwd), deps.personaRoot, method, deps.usersRoot);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -73826,8 +74167,8 @@ function buildAttachmentHandlers(deps) {
     if (!scope) {
       throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, `session ${args.sessionId} not found`);
     }
-    const cwdAbs = import_node_path72.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
-    const candidateAbs = import_node_path72.default.isAbsolute(args.relPath) ? import_node_path72.default.resolve(args.relPath) : import_node_path72.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path73.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
+    const candidateAbs = import_node_path73.default.isAbsolute(args.relPath) ? import_node_path73.default.resolve(args.relPath) : import_node_path73.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.groupAdd", "cwd-subtree");
     const from = args.origin === "agent" ? "agent" : ctx?.principal.kind === "owner" ? "owner" : "agent";
     const size = 0;
@@ -73886,19 +74227,19 @@ function buildAttachmentHandlers(deps) {
 
 // src/handlers/extension.ts
 var import_promises15 = __toESM(require("fs/promises"), 1);
-var import_node_path77 = __toESM(require("path"), 1);
+var import_node_path78 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/extension/bundle-zip.ts
 var import_promises12 = __toESM(require("fs/promises"), 1);
-var import_node_path73 = __toESM(require("path"), 1);
+var import_node_path74 = __toESM(require("path"), 1);
 var import_node_crypto23 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
   const zip = new import_jszip2.default();
   for (const rel of entries) {
-    const abs = import_node_path73.default.join(dir, rel);
+    const abs = import_node_path74.default.join(dir, rel);
     const content = await import_promises12.default.readFile(abs);
     zip.file(rel, content, { date: FIXED_DATE });
   }
@@ -73919,7 +74260,7 @@ async function listFilesSorted(rootDir) {
   return out;
 }
 async function walk(absRoot, relPrefix, out) {
-  const dirAbs = import_node_path73.default.join(absRoot, relPrefix);
+  const dirAbs = import_node_path74.default.join(absRoot, relPrefix);
   const entries = await import_promises12.default.readdir(dirAbs, { withFileTypes: true });
   for (const e of entries) {
     if (IGNORE_BASENAMES.has(e.name)) continue;
@@ -73973,25 +74314,25 @@ function computePublishCheck(args) {
 
 // src/extension/install-flow.ts
 var import_promises13 = __toESM(require("fs/promises"), 1);
-var import_node_path75 = __toESM(require("path"), 1);
+var import_node_path76 = __toESM(require("path"), 1);
 var import_node_os28 = __toESM(require("os"), 1);
 var import_node_crypto24 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
 var import_node_os27 = __toESM(require("os"), 1);
-var import_node_path74 = __toESM(require("path"), 1);
+var import_node_path75 = __toESM(require("path"), 1);
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path74.default.join(import_node_os27.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path75.default.join(import_node_os27.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
-  return import_node_path74.default.join(clawdHomeRoot(override), "extensions");
+  return import_node_path75.default.join(clawdHomeRoot(override), "extensions");
 }
 function publishedChannelsFile(override) {
-  return import_node_path74.default.join(clawdHomeRoot(override), "extensions-published.json");
+  return import_node_path75.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
 function bundleCacheRoot(override) {
-  return import_node_path74.default.join(clawdHomeRoot(override), "extension-bundles");
+  return import_node_path75.default.join(clawdHomeRoot(override), "extension-bundles");
 }
 
 // src/extension/install-flow.ts
@@ -74018,7 +74359,7 @@ async function installFromChannel(args, deps) {
     throw new InstallError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path75.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path76.default.isAbsolute(name)) {
       throw new InstallError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -74050,7 +74391,7 @@ async function installFromChannel(args, deps) {
     );
   }
   const localExtId = namespacedExtId(ownerSlug, channelRef.ownerPrincipalId);
-  const destDir = import_node_path75.default.join(deps.extensionsRoot, localExtId);
+  const destDir = import_node_path76.default.join(deps.extensionsRoot, localExtId);
   let destExists = false;
   try {
     await import_promises13.default.access(destDir);
@@ -74064,16 +74405,16 @@ async function installFromChannel(args, deps) {
     );
   }
   const stage = await import_promises13.default.mkdtemp(
-    import_node_path75.default.join(import_node_os28.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+    import_node_path76.default.join(import_node_os28.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path75.default.join(stage, name);
+      const dest = import_node_path76.default.join(stage, name);
       if (entry.dir) {
         await import_promises13.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises13.default.mkdir(import_node_path75.default.dirname(dest), { recursive: true });
+      await import_promises13.default.mkdir(import_node_path76.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises13.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -74094,7 +74435,7 @@ async function installFromChannel(args, deps) {
 
 // src/extension/update-flow.ts
 var import_promises14 = __toESM(require("fs/promises"), 1);
-var import_node_path76 = __toESM(require("path"), 1);
+var import_node_path77 = __toESM(require("path"), 1);
 var import_node_os29 = __toESM(require("os"), 1);
 var import_node_crypto25 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
@@ -74111,11 +74452,11 @@ async function updateFromChannel(args, deps) {
     channelRef.extId,
     channelRef.ownerPrincipalId
   );
-  const liveDir = import_node_path76.default.join(deps.extensionsRoot, localExtId);
+  const liveDir = import_node_path77.default.join(deps.extensionsRoot, localExtId);
   const prevDir = `${liveDir}.prev`;
   let existingVersion;
   try {
-    const raw = await import_promises14.default.readFile(import_node_path76.default.join(liveDir, "manifest.json"), "utf8");
+    const raw = await import_promises14.default.readFile(import_node_path77.default.join(liveDir, "manifest.json"), "utf8");
     const parsed2 = ExtensionManifestSchema.safeParse(JSON.parse(raw));
     if (!parsed2.success) {
       throw new UpdateError(
@@ -74148,7 +74489,7 @@ async function updateFromChannel(args, deps) {
     throw new UpdateError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path76.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path77.default.isAbsolute(name)) {
       throw new UpdateError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -74183,16 +74524,16 @@ async function updateFromChannel(args, deps) {
   await import_promises14.default.rm(prevDir, { recursive: true, force: true });
   await import_promises14.default.rename(liveDir, prevDir);
   const stage = await import_promises14.default.mkdtemp(
-    import_node_path76.default.join(import_node_os29.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+    import_node_path77.default.join(import_node_os29.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path76.default.join(stage, name);
+      const dest = import_node_path77.default.join(stage, name);
       if (entry.dir) {
         await import_promises14.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises14.default.mkdir(import_node_path76.default.dirname(dest), { recursive: true });
+      await import_promises14.default.mkdir(import_node_path77.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises14.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -74259,7 +74600,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
       );
     }
   }
-  const manifestPath = import_node_path77.default.join(root, extId, "manifest.json");
+  const manifestPath = import_node_path78.default.join(root, extId, "manifest.json");
   const manifest = await readManifest(root, extId);
   const next = { ...manifest, version: newVersion };
   const tmp = `${manifestPath}.tmp`;
@@ -74267,7 +74608,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
   await import_promises15.default.rename(tmp, manifestPath);
 }
 async function readManifest(root, extId) {
-  const file = import_node_path77.default.join(root, extId, "manifest.json");
+  const file = import_node_path78.default.join(root, extId, "manifest.json");
   let raw;
   try {
     raw = await import_promises15.default.readFile(file, "utf8");
@@ -74351,7 +74692,7 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256, buffer } = await bundleExtensionDir(import_node_path77.default.join(deps.root, extId));
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path78.default.join(deps.root, extId));
     return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
@@ -75179,7 +75520,7 @@ function buildVisitorHandlers(deps) {
 
 // src/extension/registry.ts
 var import_promises17 = __toESM(require("fs/promises"), 1);
-var import_node_path78 = __toESM(require("path"), 1);
+var import_node_path79 = __toESM(require("path"), 1);
 async function loadAll(root) {
   let entries;
   try {
@@ -75192,13 +75533,13 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path78.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path79.default.join(root, ent.name), ent.name));
   }
   records.sort((a2, b3) => a2.extId < b3.extId ? -1 : a2.extId > b3.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path78.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path79.default.join(dir, "manifest.json");
   let raw;
   try {
     raw = await import_promises17.default.readFile(manifestPath, "utf8");
@@ -75243,7 +75584,7 @@ async function loadOne(dir, dirName) {
 
 // src/extension/uninstall.ts
 var import_promises18 = __toESM(require("fs/promises"), 1);
-var import_node_path79 = __toESM(require("path"), 1);
+var import_node_path80 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -75252,7 +75593,7 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path79.default.join(deps.root, deps.extId);
+  const dir = import_node_path80.default.join(deps.root, deps.extId);
   try {
     await import_promises18.default.access(dir);
   } catch {
@@ -75470,7 +75811,7 @@ function buildMethodHandlers(deps) {
       broadcast: deps.broadcastToOwners
     }),
     ...buildMasterHandlers({
-      authorityTablePath: import_node_path80.default.join(deps.masterDataDir, "master-authority.json")
+      authorityTablePath: import_node_path81.default.join(deps.masterDataDir, "master-authority.json")
     }),
     ...buildTopicHandlers({
       topicStore: deps.topicStore,
@@ -75613,7 +75954,7 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 
 // src/extension/runtime.ts
 var import_node_child_process25 = require("child_process");
-var import_node_path81 = __toESM(require("path"), 1);
+var import_node_path82 = __toESM(require("path"), 1);
 var import_promises19 = require("timers/promises");
 
 // src/extension/port-allocator.ts
@@ -75714,7 +76055,7 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path81.default.join(this.root, extId);
+    const dir = import_node_path82.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
@@ -75826,7 +76167,7 @@ ${handle.stderrTail}`
 
 // src/extension/published-channels.ts
 var import_promises20 = __toESM(require("fs/promises"), 1);
-var import_node_path82 = __toESM(require("path"), 1);
+var import_node_path83 = __toESM(require("path"), 1);
 init_zod();
 var PublishedChannelsError = class extends Error {
   constructor(code, message) {
@@ -75925,7 +76266,7 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises20.default.mkdir(import_node_path82.default.dirname(this.filePath), { recursive: true });
+    await import_promises20.default.mkdir(import_node_path83.default.dirname(this.filePath), { recursive: true });
     await import_promises20.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
     await import_promises20.default.rename(tmp, this.filePath);
   }
@@ -75933,7 +76274,7 @@ var PublishedChannelStore = class {
 
 // src/extension/bundle-cache.ts
 var import_promises21 = __toESM(require("fs/promises"), 1);
-var import_node_path83 = __toESM(require("path"), 1);
+var import_node_path84 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -75942,14 +76283,14 @@ var BundleCache = class {
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
     await import_promises21.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path83.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path84.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
     await import_promises21.default.writeFile(tmp, buffer, { mode: 384 });
     await import_promises21.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path83.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path84.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
       return await import_promises21.default.readFile(file);
     } catch (e) {
@@ -75959,7 +76300,7 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path83.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path84.default.join(this.rootDir, `${snapshotHash}.zip`);
     await import_promises21.default.rm(file, { force: true });
   }
 };
@@ -75982,24 +76323,24 @@ async function startDaemon(config) {
     sampling: logShippingCfg.sampling,
     homeDir: import_node_os31.default.homedir()
   });
-  const logDir = import_node_path84.default.join(config.dataDir, "log");
-  import_node_fs65.default.mkdirSync(logDir, { recursive: true });
+  const logDir = import_node_path85.default.join(config.dataDir, "log");
+  import_node_fs66.default.mkdirSync(logDir, { recursive: true });
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path84.default.join(logDir, "clawd.log"),
+    file: import_node_path85.default.join(logDir, "clawd.log"),
     logClient
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const screenIdleProbeLogger = createFileOnlyLogger({
-    file: import_node_path84.default.join(logDir, "screen-idle-probe.log"),
+    file: import_node_path85.default.join(logDir, "screen-idle-probe.log"),
     level: "debug"
   });
   logger.info("screen-idle probe logger enabled", {
-    file: import_node_path84.default.join(logDir, "screen-idle-probe.log")
+    file: import_node_path85.default.join(logDir, "screen-idle-probe.log")
   });
   const CAP_TARGETS = [
-    import_node_path84.default.join(logDir, "clawd.log"),
-    import_node_path84.default.join(logDir, "screen-idle-probe.log")
+    import_node_path85.default.join(logDir, "clawd.log"),
+    import_node_path85.default.join(logDir, "screen-idle-probe.log")
   ];
   const LOG_CAP_MAX_BYTES = 10 * 1024 * 1024;
   const LOG_CAP_KEEP_BYTES = 5 * 1024 * 1024;
@@ -76121,11 +76462,11 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path84.default.join(config.dataDir, "personas"));
+  const personaStore = new PersonaStore(import_node_path85.default.join(config.dataDir, "personas"));
   const subscriptionChannelStore = new SubscriptionChannelStore({ dataDir: config.dataDir });
   const activeSubscriptionChannel = subscriptionChannelStore.getActive();
   if (activeSubscriptionChannel) applyPiSubscriptionChannel({ channel: activeSubscriptionChannel });
-  const usersRoot = import_node_path84.default.join(config.dataDir, "users");
+  const usersRoot = import_node_path85.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -76142,7 +76483,7 @@ async function startDaemon(config) {
   retirePersonaBuilder({ store: personaStore, logger });
   const groupFileStore = new GroupFileStore({ dataDir: config.dataDir, logger });
   const dispatchStore = createDispatchStore({
-    filePath: import_node_path84.default.join(config.dataDir, "dispatch.json"),
+    filePath: import_node_path85.default.join(config.dataDir, "dispatch.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("dispatch store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
@@ -76151,7 +76492,7 @@ async function startDaemon(config) {
   await dispatchStore.load();
   dispatchStore.markInterruptedAsFailed((/* @__PURE__ */ new Date()).toISOString());
   const channelStore = createChannelStore({
-    filePath: import_node_path84.default.join(config.dataDir, "channels.json"),
+    filePath: import_node_path85.default.join(config.dataDir, "channels.json"),
     now: () => Date.now(),
     genId: () => `ch-${(0, import_node_crypto27.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("channel store flush failed", {
@@ -76160,7 +76501,7 @@ async function startDaemon(config) {
   });
   await channelStore.load();
   const topicStore = createTopicStore({
-    filePath: import_node_path84.default.join(config.dataDir, "topics.json"),
+    filePath: import_node_path85.default.join(config.dataDir, "topics.json"),
     now: () => Date.now(),
     genId: () => `tp-${(0, import_node_crypto27.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("topic store flush failed", {
@@ -76187,12 +76528,12 @@ async function startDaemon(config) {
       });
     }
   });
-  const here = typeof __dirname === "string" ? __dirname : import_node_path84.default.dirname((0, import_node_url6.fileURLToPath)(import_meta10.url));
+  const here = typeof __dirname === "string" ? __dirname : import_node_path85.default.dirname((0, import_node_url6.fileURLToPath)(import_meta10.url));
   const mcpConfigs = [];
   const secretsBundleRoot = findSecretsBundleRoot(logger);
-  const localSecretsDir = import_node_path84.default.join(config.dataDir, LOCAL_SECRETS_DIRNAME);
+  const localSecretsDir = import_node_path85.default.join(config.dataDir, LOCAL_SECRETS_DIRNAME);
   const readSecrets = () => readSecretTable({ bundleRoot: secretsBundleRoot, overrideDir: localSecretsDir, logger });
-  const githubTokenFile = import_node_path84.default.join(localSecretsDir, GITHUB_TOKEN_FILE);
+  const githubTokenFile = import_node_path85.default.join(localSecretsDir, GITHUB_TOKEN_FILE);
   const githubIdentity = createGithubIdentity({
     resolve: () => resolveGithubAuth({ exec: runCommand, fileToken: () => readEnvFileVar(githubTokenFile, GITHUB_TOKEN_VAR) }),
     store: (token) => storeGithubAuth({
@@ -76230,22 +76571,22 @@ async function startDaemon(config) {
     void githubIdentity.refresh();
     return renderPersonaMcpSecrets({
       personaId: personaId2,
-      personaDir: import_node_path84.default.join(config.dataDir, "personas", personaId2),
+      personaDir: import_node_path85.default.join(config.dataDir, "personas", personaId2),
       secrets,
-      outDir: import_node_path84.default.join(config.dataDir, "persona-mcp"),
+      outDir: import_node_path85.default.join(config.dataDir, "persona-mcp"),
       logger
     });
   };
   const mcpDaemonUrl = `http://127.0.0.1:${config.port}`;
   const dispatchServerCandidates = [
-    import_node_path84.default.join(here, "dispatch", "mcp-server.cjs"),
+    import_node_path85.default.join(here, "dispatch", "mcp-server.cjs"),
     // 生产 dist/index → dist/dispatch/mcp-server.cjs
-    import_node_path84.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
+    import_node_path85.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
-  const dispatchServerScriptPath = dispatchServerCandidates.find((p3) => import_node_fs65.default.existsSync(p3));
+  const dispatchServerScriptPath = dispatchServerCandidates.find((p3) => import_node_fs66.default.existsSync(p3));
   if (dispatchServerScriptPath) {
-    const dispatchLogPath = import_node_path84.default.join(logDir, "dispatch-mcp-server.log");
+    const dispatchLogPath = import_node_path85.default.join(logDir, "dispatch-mcp-server.log");
     const dispatchCfgPath = writeDispatchMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: dispatchServerScriptPath,
@@ -76265,12 +76606,12 @@ async function startDaemon(config) {
     });
   }
   const ticketServerCandidates = [
-    import_node_path84.default.join(here, "ticket", "mcp-server.cjs"),
-    import_node_path84.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
+    import_node_path85.default.join(here, "ticket", "mcp-server.cjs"),
+    import_node_path85.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
-  const ticketServerScriptPath = ticketServerCandidates.find((p3) => import_node_fs65.default.existsSync(p3));
+  const ticketServerScriptPath = ticketServerCandidates.find((p3) => import_node_fs66.default.existsSync(p3));
   if (ticketServerScriptPath) {
-    const ticketLogPath = import_node_path84.default.join(logDir, "ticket-mcp-server.log");
+    const ticketLogPath = import_node_path85.default.join(logDir, "ticket-mcp-server.log");
     const ticketCfgPath = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
@@ -76292,12 +76633,12 @@ async function startDaemon(config) {
     });
   }
   const shiftServerCandidates = [
-    import_node_path84.default.join(here, "shift", "mcp-server.cjs"),
-    import_node_path84.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
+    import_node_path85.default.join(here, "shift", "mcp-server.cjs"),
+    import_node_path85.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
-  const shiftServerScriptPath = shiftServerCandidates.find((p3) => import_node_fs65.default.existsSync(p3));
+  const shiftServerScriptPath = shiftServerCandidates.find((p3) => import_node_fs66.default.existsSync(p3));
   if (shiftServerScriptPath) {
-    const shiftLogPath = import_node_path84.default.join(logDir, "shift-mcp-server.log");
+    const shiftLogPath = import_node_path85.default.join(logDir, "shift-mcp-server.log");
     const shiftCfgPath = await writeShiftMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: shiftServerScriptPath,
@@ -76318,12 +76659,12 @@ async function startDaemon(config) {
     );
   }
   const inboxServerCandidates = [
-    import_node_path84.default.join(here, "inbox", "mcp-server.cjs"),
-    import_node_path84.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
+    import_node_path85.default.join(here, "inbox", "mcp-server.cjs"),
+    import_node_path85.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
   ];
-  const inboxServerScriptPath = inboxServerCandidates.find((p3) => import_node_fs65.default.existsSync(p3));
+  const inboxServerScriptPath = inboxServerCandidates.find((p3) => import_node_fs66.default.existsSync(p3));
   if (inboxServerScriptPath) {
-    const inboxLogPath = import_node_path84.default.join(logDir, "inbox-mcp-server.log");
+    const inboxLogPath = import_node_path85.default.join(logDir, "inbox-mcp-server.log");
     const inboxCfgPath = await writeInboxMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: inboxServerScriptPath,
@@ -76344,10 +76685,10 @@ async function startDaemon(config) {
     );
   }
   const peerOpsServerCandidates = [
-    import_node_path84.default.join(here, "peer-ops", "mcp-server.cjs"),
-    import_node_path84.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
+    import_node_path85.default.join(here, "peer-ops", "mcp-server.cjs"),
+    import_node_path85.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
   ];
-  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p3) => import_node_fs65.default.existsSync(p3));
+  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p3) => import_node_fs66.default.existsSync(p3));
   if (peerOpsServerScriptPath) {
     const peerOpsCfgPath = writePeerOpsMcpConfig({
       dataDir: config.dataDir,
@@ -76367,12 +76708,12 @@ async function startDaemon(config) {
     );
   }
   const rpcToolServerCandidates = [
-    import_node_path84.default.join(here, "rpc-tool", "mcp-server.cjs"),
-    import_node_path84.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
+    import_node_path85.default.join(here, "rpc-tool", "mcp-server.cjs"),
+    import_node_path85.default.join(here, "..", "dist", "rpc-tool", "mcp-server.cjs")
   ];
-  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p3) => import_node_fs65.default.existsSync(p3));
+  const rpcToolServerScriptPath = rpcToolServerCandidates.find((p3) => import_node_fs66.default.existsSync(p3));
   if (rpcToolServerScriptPath) {
-    const rpcToolLogPath = import_node_path84.default.join(logDir, "rpc-tool-mcp-server.log");
+    const rpcToolLogPath = import_node_path85.default.join(logDir, "rpc-tool-mcp-server.log");
     const rpcToolCfgPath = writeRpcToolMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: rpcToolServerScriptPath,
@@ -76393,7 +76734,7 @@ async function startDaemon(config) {
     );
   }
   const shiftStore = createShiftStore({
-    filePath: import_node_path84.default.join(config.dataDir, "shift.json"),
+    filePath: import_node_path85.default.join(config.dataDir, "shift.json"),
     ownerIdProvider: () => ownerPrincipalId,
     now: () => Date.now()
   });
@@ -76415,7 +76756,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path84.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path85.default.join(config.dataDir, "personas"),
     // dispatch / shift 自动化 spawn 按 persona 绑定 tool 起 B session（codex persona 用 codex）。
     // personaRegistry 声明在 manager 之后（同作用域 const，调用时机在启动完成后，无 TDZ 风险）。
     getPersonaDefaults: (personaId2) => personaRegistry.get(personaId2),
@@ -76476,10 +76817,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path84.default.isAbsolute(input.relPath) ? input.relPath : import_node_path84.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path85.default.isAbsolute(input.relPath) ? input.relPath : import_node_path85.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs65.default.statSync(absPath).size;
+          size = import_node_fs66.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -76520,9 +76861,9 @@ async function startDaemon(config) {
     logger.info("projects.seed-dropped", { dropped: droppedSeed.dropped, backup: droppedSeed.backup });
   }
   const projectsStore = new ProjectsStore({
-    file: import_node_path84.default.join(config.dataDir, "projects.json"),
+    file: import_node_path85.default.join(config.dataDir, "projects.json"),
     clawdDir: config.dataDir,
-    codexStateFile: import_node_path84.default.join(import_node_os31.default.homedir(), ".codex", ".codex-global-state.json"),
+    codexStateFile: import_node_path85.default.join(import_node_os31.default.homedir(), ".codex", ".codex-global-state.json"),
     logger
   });
   const observer = new SessionObserver({
@@ -76597,13 +76938,13 @@ async function startDaemon(config) {
     runner?.confirmCloudCancelled();
   });
   registerAdapter("claude", claudeAdapter);
-  const codexIsolatedHome = import_node_path84.default.join(config.dataDir, "codex-home");
+  const codexIsolatedHome = import_node_path85.default.join(config.dataDir, "codex-home");
   try {
-    import_node_fs65.default.mkdirSync(codexIsolatedHome, { recursive: true });
+    import_node_fs66.default.mkdirSync(codexIsolatedHome, { recursive: true });
     for (const f2 of ["auth.json", "config.toml"]) {
-      const link = import_node_path84.default.join(codexIsolatedHome, f2);
-      const target = import_node_path84.default.join(import_node_os31.default.homedir(), ".codex", f2);
-      if (!import_node_fs65.default.existsSync(link) && import_node_fs65.default.existsSync(target)) import_node_fs65.default.symlinkSync(target, link);
+      const link = import_node_path85.default.join(codexIsolatedHome, f2);
+      const target = import_node_path85.default.join(import_node_os31.default.homedir(), ".codex", f2);
+      if (!import_node_fs66.default.existsSync(link) && import_node_fs66.default.existsSync(target)) import_node_fs66.default.symlinkSync(target, link);
     }
   } catch (err) {
     logger.warn("codex isolated home setup failed", { err: String(err) });
@@ -76614,17 +76955,17 @@ async function startDaemon(config) {
       logger,
       historyReader: new CodexHistoryReader({
         roots: codexRolloutRoots(config.dataDir),
-        sharedHome: import_node_path84.default.join(import_node_os31.default.homedir(), ".codex"),
+        sharedHome: import_node_path85.default.join(import_node_os31.default.homedir(), ".codex"),
         logger
       }),
       // projectPaths 每次调用现取 —— 用户新建 project 后立即生效，不用重启 daemon
       codexHomeFor: (cwd) => resolveCodexHome({
         cwd,
-        personaRoot: import_node_path84.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path85.default.join(config.dataDir, "personas"),
         // 必须用 listMerged（Codex registry ∪ 叠加层）：只用本地 list() 的话，用户在
         // Codex 里建的 project 不在表里，在它下面开的会话会被误判成隔离 → Codex 侧看不到
         projectPaths: projectsStore.listMerged().map((x2) => x2.path),
-        sharedHome: import_node_path84.default.join(import_node_os31.default.homedir(), ".codex"),
+        sharedHome: import_node_path85.default.join(import_node_os31.default.homedir(), ".codex"),
         isolatedHome: codexIsolatedHome
       }),
       codexHomeForThread: (threadId) => locateCodexThread(codexRolloutRoots(config.dataDir), threadId)?.home,
@@ -76650,10 +76991,10 @@ async function startDaemon(config) {
   );
   registerAdapter(PI_CLOUD_TOOL_ID, new CloudPiAdapter({ client: cloudGateway, history: cloudHistorySource, logger }));
   const piMcpBridgeCandidates = [
-    import_node_path84.default.join(here, "pi-mcp-bridge", "extension.cjs"),
-    import_node_path84.default.join(here, "..", "dist", "pi-mcp-bridge", "extension.cjs")
+    import_node_path85.default.join(here, "pi-mcp-bridge", "extension.cjs"),
+    import_node_path85.default.join(here, "..", "dist", "pi-mcp-bridge", "extension.cjs")
   ];
-  const piMcpBridgePath = piMcpBridgeCandidates.find((p3) => import_node_fs65.default.existsSync(p3));
+  const piMcpBridgePath = piMcpBridgeCandidates.find((p3) => import_node_fs66.default.existsSync(p3));
   if (piMcpBridgePath) {
     logger.info("pi-mcp-bridge extension resolved", { path: piMcpBridgePath });
   } else {
@@ -76959,11 +77300,11 @@ async function startDaemon(config) {
         // 'persona/<pid>/owner'，default 走 'default'。
         getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
         // guest path guard：candidate 必须在 personaRoot 子树或调用者自己的 user-dir 下
-        personaRoot: import_node_path84.default.join(config.dataDir, "personas"),
+        personaRoot: import_node_path85.default.join(config.dataDir, "personas"),
         usersRoot
       },
       // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-      personaRoot: import_node_path84.default.join(config.dataDir, "personas"),
+      personaRoot: import_node_path85.default.join(config.dataDir, "personas"),
       // v2 多人 persona 隔离：handler 派生 guest user-dir 放行
       usersRoot,
       // v2 Phase 6: whoami handler 装在 owner principal.displayName + persona 解析
@@ -77269,7 +77610,7 @@ async function startDaemon(config) {
   });
   shiftScheduler.start();
   logger.info("shift scheduler started", { shiftCount: shiftStore.list().length });
-  const larkBotStore = createLarkBotBindingStore(import_node_path84.default.join(config.dataDir, "personas"));
+  const larkBotStore = createLarkBotBindingStore(import_node_path85.default.join(config.dataDir, "personas"));
   const larkBotCloud = createLarkBotCloudClient({
     api: config.clawosApi ?? DEFAULT_CLAWOS_API,
     getLoginPass: () => ownerIdentityStore.read()?.loginPass ?? null
@@ -77281,7 +77622,7 @@ async function startDaemon(config) {
     store: larkBotStore,
     fetchResource: (appId, messageId, fileKey, maxBytes, type) => larkBotCloud.fetchResource(appId, messageId, fileKey, maxBytes, type),
     // 图片落 guest userWorkDir 下（capId = lark-<chat_id>）：CC 经 --add-dir + allowRead carve 可 Read
-    mediaRootFor: (chatId) => import_node_path84.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
+    mediaRootFor: (chatId) => import_node_path85.default.join(deriveUserWorkDir(`lark-${chatId}`, usersRoot), "lark-media"),
     isShuttingDown: () => larkDraining,
     logger: {
       warn: (msg) => logger.warn(msg),
@@ -77594,8 +77935,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r2.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path84.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path84.default.join(logDir, "frpc.log")}`
+        `Frpc config: ${import_node_path85.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path85.default.join(logDir, "frpc.log")}`
       ];
       const width2 = Math.max(...lines.map((l2) => l2.length));
       const bar = "\u2550".repeat(width2 + 4);
@@ -77608,8 +77949,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path84.default.join(config.dataDir, "connect.txt");
-        import_node_fs65.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path85.default.join(config.dataDir, "connect.txt");
+        import_node_fs66.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -77708,9 +78049,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path84.default.join(dataDir, "persons");
+  const dir = import_node_path85.default.join(dataDir, "persons");
   try {
-    import_node_fs65.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs66.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }