@clawos-dev/clawd 0.2.700 → 0.2.702

package/dist/app-builder-plugin/mcp-server.cjs

@@ -31133,6 +31133,11 @@ var CloudWorkspaceResultSchema = external_exports.object({
     notStored: external_exports.boolean().optional()
   }).optional()
 });
+var CloudForkResultSchema = external_exports.object({
+  threadId: external_exports.string().min(1),
+  conversationId: external_exports.string().min(1),
+  workspace: WorkspaceBindingSchema.optional()
+});
 
 // ../protocol/src/subscription-channel.ts
 var SubscriptionChannelSchema = external_exports.object({
@@ -33349,6 +33354,11 @@ var SessionCreateArgs = external_exports.object({
   serviceTier: CodexServiceTierSchema.optional(),
   iconKey: external_exports.string().optional(),
   forkedFromSessionId: external_exports.string().min(1).optional(),
+  /** Cloud fork point (with forkedFromSessionId of a cloud session): Claude cuts at a message, Codex at a completed turn. */
+  forkAt: external_exports.union([
+    external_exports.object({ messageUuid: external_exports.string().min(1) }).strict(),
+    external_exports.object({ turnId: external_exports.string().min(1) }).strict()
+  ]).optional(),
   ephemeral: external_exports.boolean().optional(),
   // Persona context derives cwd and spawn defaults; missing cwd is allowed when persona identity determines it.
   ownerPersonaId: external_exports.string().min(1).optional(),

package/dist/cli.cjs

@@ -4150,7 +4150,7 @@ var init_zod = __esm({
 });
 
 // ../protocol/src/cloud-workspace-schemas.ts
-var WORKSPACE_COMPARISON_VALUES, Id, RepoId, Part, WorkspaceBranchSchema, FilePath, WorkspaceBindingSchema, WorkspaceRepoSchema, WorkspaceStatusSchema, Session, CloudWorkspaceArgsSchema, CloudWorkspaceResultSchema;
+var WORKSPACE_COMPARISON_VALUES, Id, RepoId, Part, WorkspaceBranchSchema, FilePath, WorkspaceBindingSchema, WorkspaceRepoSchema, WorkspaceStatusSchema, Session, CloudWorkspaceArgsSchema, CloudWorkspaceResultSchema, CloudForkResultSchema;
 var init_cloud_workspace_schemas = __esm({
   "../protocol/src/cloud-workspace-schemas.ts"() {
     "use strict";
@@ -4251,6 +4251,11 @@ var init_cloud_workspace_schemas = __esm({
         notStored: external_exports.boolean().optional()
       }).optional()
     });
+    CloudForkResultSchema = external_exports.object({
+      threadId: external_exports.string().min(1),
+      conversationId: external_exports.string().min(1),
+      workspace: WorkspaceBindingSchema.optional()
+    });
   }
 });
 
@@ -8558,6 +8563,11 @@ var init_schemas = __esm({
       serviceTier: CodexServiceTierSchema.optional(),
       iconKey: external_exports.string().optional(),
       forkedFromSessionId: external_exports.string().min(1).optional(),
+      /** Cloud fork point (with forkedFromSessionId of a cloud session): Claude cuts at a message, Codex at a completed turn. */
+      forkAt: external_exports.union([
+        external_exports.object({ messageUuid: external_exports.string().min(1) }).strict(),
+        external_exports.object({ turnId: external_exports.string().min(1) }).strict()
+      ]).optional(),
       ephemeral: external_exports.boolean().optional(),
       // Persona context derives cwd and spawn defaults; missing cwd is allowed when persona identity determines it.
       ownerPersonaId: external_exports.string().min(1).optional(),
@@ -46811,7 +46821,7 @@ function requireEnvironmentIdentity(stores, environment) {
 var import_node_path90 = __toESM(require("path"), 1);
 var import_node_fs69 = __toESM(require("fs"), 1);
 var import_node_os33 = __toESM(require("os"), 1);
-var import_node_crypto32 = require("crypto");
+var import_node_crypto33 = require("crypto");
 var import_node_url6 = require("url");
 
 // src/logger.ts
@@ -50287,10 +50297,14 @@ var SessionManager = class {
     const iso = nowIso2(this.deps);
     const toolSessionId = this.deps.mode === "tui" && tool === "claude" ? (0, import_node_crypto5.randomUUID)() : void 0;
     const file = {
-      sessionId: newSessionId(),
+      sessionId: args.cloudFork?.sessionId ?? newSessionId(),
       cwd,
       tool,
-      toolSessionId,
+      toolSessionId: args.cloudFork?.toolSessionId ?? toolSessionId,
+      ...args.cloudFork ? {
+        cloudConversationId: args.cloudFork.cloudConversationId,
+        ...args.cloudFork.cloudWorkspace ? { cloudWorkspace: args.cloudFork.cloudWorkspace } : {}
+      } : {},
       label: args.label,
       aiLabel: args.aiLabel,
       ...personaDefaultFields(engineOverridden ? void 0 : personaDefaults, {
@@ -58091,6 +58105,7 @@ async function readReleaseArchive(bytes) {
 init_protocol();
 init_protocol();
 var CLOUD_WORKSPACE_SLOT = "{{WORKSPACE}}";
+var CLOUD_ENGINE_HOME_SLOT = "{{ENGINE_HOME}}";
 var GATEWAY_ROUTES = {
   healthz: () => "/healthz",
   turn: (personaId2) => `/p/${encodeURIComponent(personaId2)}/v1/chat/completions`,
@@ -58098,6 +58113,7 @@ var GATEWAY_ROUTES = {
   conversationCancel: (personaId2, conversationId) => `/p/${encodeURIComponent(personaId2)}/conversations/${encodeURIComponent(conversationId)}:cancel`,
   volume: () => "/me/volume",
   workspace: (personaId2) => `/p/${encodeURIComponent(personaId2)}/workspace`,
+  fork: (personaId2) => `/p/${encodeURIComponent(personaId2)}/fork`,
   metrics: (personaId2) => `/metrics/${encodeURIComponent(personaId2)}`
 };
 var METRICS_TIMEOUT_MS = 3e4;
@@ -58236,6 +58252,21 @@ var CloudGatewayClient = class {
       log("finished", { outcome, statusCode, durationMs: Math.round(performance.now() - started) });
     }
   }
+  /** Copy a cloud conversation under the child's ids (design 2026-10-20-cloud-session-fork §4.2); nothing is written locally here. */
+  async fork(personaId2, body) {
+    const { apiKey, gatewayUrl } = await this.credentials();
+    const res = await this.fetchImpl(gatewayUrl + GATEWAY_ROUTES.fork(personaId2), {
+      method: "POST",
+      headers: { authorization: "Bearer " + apiKey, "content-type": "application/json" },
+      body: JSON.stringify(body),
+      signal: AbortSignal.timeout(3e5)
+    });
+    const result = await res.json().catch(() => ({}));
+    if (res.status === 404 && !result.error?.code) throw new Error("\u4E91\u7AEF\u6682\u4E0D\u652F\u6301 fork");
+    if (res.status === 409 && result.error?.code === "FORK_POINT_NOT_SYNCED") throw new Error("\u8FD9\u6761\u6D88\u606F\u8FD8\u6CA1\u540C\u6B65\u5230\u4E91\u7AEF\uFF0C\u7A0D\u540E\u518D\u8BD5");
+    if (!res.ok) throw new Error("\u5206\u53C9\u5931\u8D25\uFF1A" + (result.error?.message ?? `gateway \u56DE ${res.status}`));
+    return CloudForkResultSchema.parse(result);
+  }
   async openTurn(personaId2, opts) {
     const { apiKey, gatewayUrl } = await this.credentials();
     const health = await this.fetchImpl(gatewayUrl + GATEWAY_ROUTES.healthz());
@@ -67065,6 +67096,24 @@ async function forwardPeerExecToPeer(args) {
 // src/tools/codex-cloud.ts
 init_protocol();
 
+// src/tools/cloud-instructions.ts
+function skillSection(engine) {
+  const wrongHome = engine === "claude" ? "`~/.claude/skills` or `$HOME/.claude/skills`" : "`~/.codex/skills` or `<cwd>/.agents/skills`";
+  return [
+    "## Creating skills",
+    "",
+    `When the user asks you to create a skill, write it to \`${CLOUD_ENGINE_HOME_SLOT}/skills/<name>/SKILL.md\` (the user-level skills directory; it is kept across the user's later sessions with this persona). Do not write skills to ${wrongHome}: those paths are not read here and are lost.`,
+    "Skills under `<cwd>/.claude/skills/` belong to the persona itself and are discarded when this session ends; only write there if the user explicitly asks for a skill that is part of the persona."
+  ].join("\n");
+}
+function cloudInstructions(ctx, engine) {
+  return [
+    ctx.extraSystemPrompt,
+    workDirPrompt(CLOUD_WORKSPACE_SLOT, ctx.personaMode ?? "owner"),
+    engine === "pi" ? void 0 : skillSection(engine)
+  ].filter((x2) => Boolean(x2)).join("\n\n");
+}
+
 // src/tools/codex-cloud-session.ts
 var import_node_fs42 = __toESM(require("fs"), 1);
 
@@ -67258,7 +67307,7 @@ function createCloudCodexSession(ctx, sink, deps) {
     client: deps.client,
     personaId: personaId2,
     engine: "codex",
-    instructions: ctx.titleOnly ? void 0 : ctx.extraSystemPrompt,
+    instructions: ctx.titleOnly ? void 0 : cloudInstructions(ctx, "codex"),
     prepare: (text) => portableCloudInput(text, { resolveCodexImage: cloudImageInput(deps) })
   });
 }
@@ -67270,7 +67319,7 @@ var CLOUD_CODEX_CAPABILITIES = {
   toolSessionIdLabel: "Codex Thread ID",
   models: [],
   permissionModes: [CLOUD_APPROVAL],
-  features: { rewind: false, subagents: true, tui: false, observe: false, fileSharing: false, fork: false },
+  features: { rewind: false, subagents: true, tui: false, observe: false, fileSharing: false, fork: true },
   configSchema: [
     {
       name: "permissionMode",
@@ -67982,9 +68031,6 @@ var PiAdapter = class {
 };
 
 // src/tools/pi-cloud-session.ts
-function cloudPiInstructions(ctx) {
-  return [ctx.extraSystemPrompt, workDirPrompt(CLOUD_WORKSPACE_SLOT, ctx.personaMode ?? "owner")].filter((x2) => Boolean(x2)).join("\n\n");
-}
 function createCloudPiSession(ctx, sink, deps) {
   const personaId2 = personaIdFromCloudCwd(ctx.cwd);
   if (!personaId2 || ctx.cloudGatewaySessionId || ctx.cloudLegacyPendingCommand) {
@@ -68005,7 +68051,7 @@ function createCloudPiSession(ctx, sink, deps) {
     personaId: personaId2,
     engine: "pi",
     engineSessionId: ctx.toolSessionId,
-    instructions: ctx.titleOnly ? void 0 : cloudPiInstructions(ctx),
+    instructions: ctx.titleOnly ? void 0 : cloudInstructions(ctx, "pi"),
     prepare: (text) => portableCloudInput(text, { fetchPiImage: deps.fetchImage ?? makeImageFetcher() })
   });
 }
@@ -68099,7 +68145,7 @@ function createCloudClaudeSession(ctx, sink, deps) {
     personaId: personaId2,
     engine: "claude",
     engineSessionId: ctx.toolSessionId,
-    instructions: ctx.titleOnly ? void 0 : cloudPiInstructions(ctx),
+    instructions: ctx.titleOnly ? void 0 : cloudInstructions(ctx, "claude"),
     prepare: (text) => portableCloudInput(text, { fetchPiImage: deps.fetchImage ?? makeImageFetcher() })
   });
 }
@@ -68111,7 +68157,7 @@ var CLOUD_CLAUDE_CAPABILITIES = {
   toolSessionIdLabel: "Claude Session ID",
   models: [],
   permissionModes: [CLOUD_APPROVAL3],
-  features: { rewind: false, subagents: false, tui: false, observe: false, fileSharing: false, fork: false },
+  features: { rewind: false, subagents: false, tui: false, observe: false, fileSharing: false, fork: true },
   configSchema: [
     {
       name: "permissionMode",
@@ -72823,6 +72869,45 @@ var import_node_os26 = __toESM(require("os"), 1);
 var import_node_path70 = __toESM(require("path"), 1);
 var import_node_crypto26 = require("crypto");
 init_claude_history();
+
+// src/session/fork-transcript.ts
+var ForkPointNotFoundError = class extends Error {
+  code = "FORK_POINT_NOT_FOUND";
+};
+function forkTranscriptEntries(entries, opts) {
+  const mainEntries = entries.filter((e) => e.isSidechain !== true);
+  const targetIdx = mainEntries.findIndex((e) => e.uuid === opts.messageUuid);
+  if (targetIdx === -1) {
+    throw new ForkPointNotFoundError(`fork: messageUuid not found in transcript: ${opts.messageUuid}`);
+  }
+  const moveCwd = (cwd) => {
+    const from = opts.cwd.from;
+    if (cwd === from) return opts.cwd.to;
+    return cwd.startsWith(`${from}/`) ? opts.cwd.to + cwd.slice(from.length) : cwd;
+  };
+  let parentUuid = null;
+  const out = [];
+  for (const entry of mainEntries.slice(0, targetIdx + 1)) {
+    const originalUuid = entry.uuid;
+    const forked = {
+      ...entry,
+      sessionId: opts.sessionId,
+      parentUuid,
+      isSidechain: false
+    };
+    if (opts.cwd && typeof entry.cwd === "string") forked.cwd = moveCwd(entry.cwd);
+    if (originalUuid) {
+      forked.forkedFrom = { sessionId: entry.sessionId ?? opts.sourceSessionId, messageUuid: originalUuid };
+    }
+    if (entry.type !== "progress" && originalUuid) {
+      parentUuid = originalUuid;
+    }
+    out.push(forked);
+  }
+  return out;
+}
+
+// src/session/fork.ts
 function readJsonlEntries(file) {
   const raw = import_node_fs62.default.readFileSync(file, "utf8");
   const out = [];
@@ -72851,33 +72936,12 @@ function forkSession(input) {
     sourceFile = found;
     projectDir = import_node_path70.default.dirname(found);
   }
-  const entries = readJsonlEntries(sourceFile);
-  const mainEntries = entries.filter((e) => e.isSidechain !== true);
-  const targetIdx = mainEntries.findIndex((e) => e.uuid === input.messageUuid);
-  if (targetIdx === -1) {
-    throw new Error(`fork: messageUuid not found in transcript: ${input.messageUuid}`);
-  }
-  const sliced = mainEntries.slice(0, targetIdx + 1);
   const forkedToolSessionId = (0, import_node_crypto26.randomUUID)();
-  let parentUuid = null;
-  const forkedLines = [];
-  for (const entry of sliced) {
-    const originalSessionId = entry.sessionId ?? input.toolSessionId;
-    const originalUuid = entry.uuid;
-    const forked = {
-      ...entry,
-      sessionId: forkedToolSessionId,
-      parentUuid,
-      isSidechain: false
-    };
-    if (originalUuid) {
-      forked.forkedFrom = { sessionId: originalSessionId, messageUuid: originalUuid };
-    }
-    if (entry.type !== "progress" && originalUuid) {
-      parentUuid = originalUuid;
-    }
-    forkedLines.push(JSON.stringify(forked));
-  }
+  const forkedLines = forkTranscriptEntries(readJsonlEntries(sourceFile), {
+    messageUuid: input.messageUuid,
+    sessionId: forkedToolSessionId,
+    sourceSessionId: input.toolSessionId
+  }).map((entry) => JSON.stringify(entry));
   const outDir = input.targetCwd ? import_node_path70.default.join(baseDir, "projects", cwdToHashDir(input.targetCwd)) : projectDir;
   const forkedFilePath = import_node_path70.default.join(outDir, `${forkedToolSessionId}.jsonl`);
   import_node_fs62.default.mkdirSync(outDir, { recursive: true });
@@ -73227,6 +73291,7 @@ function appendImportLedger(dataDir, entry) {
 
 // src/handlers/session.ts
 init_protocol();
+var import_node_crypto27 = require("crypto");
 var import_node_path74 = __toESM(require("path"), 1);
 function canReadSearchHit(ctx, file) {
   if (!ctx || ctx.principal.kind === "owner") return true;
@@ -73277,6 +73342,45 @@ function buildSessionHandlers(deps) {
       `${MASTER_PERSONA_ID} \u7684\u4F1A\u8BDD\u7531\u8BDD\u9898\u521B\u5EFA\uFF0C\u4E0D\u80FD\u76F4\u63A5\u5EFA\uFF1A\u8BF7\u5728\u9891\u9053\u91CC\u65B0\u5EFA\u8BDD\u9898`
     );
   };
+  const forkCloudSession = async (args, forkAt, tool, ctx) => {
+    if (!args.forkedFromSessionId) throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "fork: forkAt requires forkedFromSessionId");
+    const source = manager.get({ sessionId: args.forkedFromSessionId }).response;
+    if (!canReadSearchHit(ctx, source)) {
+      throw new ClawdError(ERROR_CODES.UNAUTHORIZED, `principal ${ctx?.principal.kind}:${ctx?.principal.id} cannot fork session ${source.sessionId}`);
+    }
+    const engine = source.tool === CLAUDE_CLOUD_TOOL_ID ? "claude" : source.tool === CODEX_CLOUD_TOOL_ID ? "codex" : null;
+    if (!engine || !deps.cloudFork) throw new ClawdError(ERROR_CODES.TOOL_NOT_SUPPORTED, `tool ${source.tool} does not support cloud fork`);
+    if (tool !== source.tool || args.ownerPersonaId !== source.ownerPersonaId) {
+      throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "fork: cloud fork must stay on the source persona and engine");
+    }
+    if (engine === "claude" ? !("messageUuid" in forkAt) : !("turnId" in forkAt)) {
+      throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, `fork: ${source.tool} needs ${engine === "claude" ? "messageUuid" : "turnId"}`);
+    }
+    const sourceConversationId = source.cloudConversationId ?? source.cloudExecutionId;
+    if (!source.toolSessionId || !sourceConversationId) throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "fork: \u6E90\u4F1A\u8BDD\u8FD8\u6CA1\u6709\u4E91\u7AEF\u5386\u53F2");
+    if (source.cloudPendingTurns?.length) throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "fork: \u8BF7\u7B49\u5F85\u6E90\u4F1A\u8BDD\u5F53\u524D\u4EFB\u52A1\u5B8C\u6210");
+    const sessionId = newSessionId();
+    const threadId = (0, import_node_crypto27.randomUUID)();
+    const result = await deps.cloudFork(source, {
+      engine,
+      source: {
+        conversationId: sourceConversationId,
+        threadId: source.toolSessionId,
+        ...source.cloudWorkspace ? { workspaceId: source.cloudWorkspace.workspaceId } : {}
+      },
+      at: forkAt,
+      child: { conversationId: sessionId, threadId, ...source.cloudWorkspace ? { workspaceId: sessionId } : {} }
+    });
+    if (result.threadId !== threadId || result.conversationId !== sessionId || Boolean(result.workspace) !== Boolean(source.cloudWorkspace)) {
+      throw new Error("\u5206\u53C9\u5931\u8D25\uFF1Agateway \u8FD4\u56DE\u7684\u5B50\u4F1A\u8BDD\u4E0E\u8BF7\u6C42\u4E0D\u4E00\u81F4");
+    }
+    return {
+      sessionId,
+      toolSessionId: threadId,
+      cloudConversationId: sessionId,
+      ...result.workspace ? { cloudWorkspace: result.workspace } : {}
+    };
+  };
   const create = async (frame, _client, ctx) => {
     const args = SessionCreateArgs.parse(frame);
     assertNotMasterPersona(args.ownerPersonaId, args.ephemeral);
@@ -73303,8 +73407,10 @@ function buildSessionHandlers(deps) {
     const creatorPrincipalId = ctx?.principal.id ?? ownerPrincipalId;
     const creatorDisplayName = ctx?.principal.displayName ?? "Owner";
     const creatorFeishuUnionId = ctx?.principal.feishuUnionId;
+    const { forkAt, ...createArgs } = args;
+    const cloudFork = forkAt ? await forkCloudSession(args, forkAt, tool, ctx) : void 0;
     const { response, broadcast } = manager.create(
-      { ...args, tool, model, effort },
+      { ...createArgs, tool, model, effort, ...cloudFork ? { cloudFork } : {} },
       creatorPrincipalId,
       creatorDisplayName,
       creatorFeishuUnionId
@@ -75391,7 +75497,7 @@ function buildCloudConnectorsHandlers(deps) {
 
 // src/handlers/cloud-workspace.ts
 init_protocol();
-var import_node_crypto27 = require("crypto");
+var import_node_crypto28 = require("crypto");
 function buildCloudWorkspaceHandlers(deps) {
   return {
     "cloud:workspace": async (frame, _client, ctx) => {
@@ -75419,7 +75525,7 @@ function buildCloudWorkspaceHandlers(deps) {
       ) || file.cloudPendingTurns?.length))
         throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "\u8BF7\u7B49\u5F85\u5F53\u524D\u4EFB\u52A1\u5B8C\u6210");
       const conversationId = file.cloudConversationId ?? file.cloudExecutionId ?? file.sessionId;
-      const traceId = typeof frame.requestId === "string" && /^[A-Za-z0-9:_-]{1,128}$/.test(frame.requestId) ? frame.requestId : (0, import_node_crypto27.randomUUID)();
+      const traceId = typeof frame.requestId === "string" && /^[A-Za-z0-9:_-]{1,128}$/.test(frame.requestId) ? frame.requestId : (0, import_node_crypto28.randomUUID)();
       const started = performance.now();
       const meta = { traceId, sessionId: args.sessionId, action: args.action };
       const log = (event, detail) => {
@@ -75778,7 +75884,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.700".length > 0 ? "0.2.700" : "dev";
+var version = "0.2.702".length > 0 ? "0.2.702" : "dev";
 
 // src/cli-probe/probe.ts
 var fs87 = __toESM(require("fs"), 1);
@@ -76176,7 +76282,7 @@ init_protocol();
 // src/extension/bundle-zip.ts
 var import_promises12 = __toESM(require("fs/promises"), 1);
 var import_node_path79 = __toESM(require("path"), 1);
-var import_node_crypto28 = __toESM(require("crypto"), 1);
+var import_node_crypto29 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
@@ -76191,7 +76297,7 @@ async function bundleExtensionDir(dir) {
     compression: "DEFLATE",
     compressionOptions: { level: 6 }
   });
-  const sha256 = import_node_crypto28.default.createHash("sha256").update(buffer).digest("hex");
+  const sha256 = import_node_crypto29.default.createHash("sha256").update(buffer).digest("hex");
   return { buffer, sha256 };
 }
 var FIXED_DATE = /* @__PURE__ */ new Date("2020-01-01T00:00:00.000Z");
@@ -76259,7 +76365,7 @@ function computePublishCheck(args) {
 var import_promises13 = __toESM(require("fs/promises"), 1);
 var import_node_path81 = __toESM(require("path"), 1);
 var import_node_os30 = __toESM(require("os"), 1);
-var import_node_crypto29 = __toESM(require("crypto"), 1);
+var import_node_crypto30 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
@@ -76288,7 +76394,7 @@ var InstallError = class extends Error {
 };
 async function installFromChannel(args, deps) {
   const { channelRef, snapshotHash, bundleZip } = args;
-  const computed = import_node_crypto29.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto30.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new InstallError(
       "HASH_MISMATCH",
@@ -76380,7 +76486,7 @@ async function installFromChannel(args, deps) {
 var import_promises14 = __toESM(require("fs/promises"), 1);
 var import_node_path82 = __toESM(require("path"), 1);
 var import_node_os31 = __toESM(require("os"), 1);
-var import_node_crypto30 = __toESM(require("crypto"), 1);
+var import_node_crypto31 = __toESM(require("crypto"), 1);
 var import_jszip5 = __toESM(require_lib3(), 1);
 var UpdateError = class extends Error {
   constructor(code, message) {
@@ -76418,7 +76524,7 @@ async function updateFromChannel(args, deps) {
     if (e instanceof UpdateError) throw e;
     throw e;
   }
-  const computed = import_node_crypto30.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto31.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new UpdateError(
       "HASH_MISMATCH",
@@ -77562,7 +77668,7 @@ async function uninstall(deps) {
 }
 
 // src/handlers/index.ts
-var import_node_crypto31 = require("crypto");
+var import_node_crypto32 = require("crypto");
 
 // src/handlers/peer-exec.ts
 init_protocol();
@@ -77719,7 +77825,7 @@ function buildMethodHandlers(deps) {
           const c2 = deps.contactStore.get(deviceId);
           return c2 ? { deviceId: c2.deviceId, remoteUrl: c2.remoteUrl, connectToken: c2.connectToken } : null;
         },
-        genId: () => (0, import_node_crypto31.randomUUID)(),
+        genId: () => (0, import_node_crypto32.randomUUID)(),
         now: () => Date.now(),
         forwardInboxPostToPeer,
         logger: deps.logger
@@ -78453,7 +78559,7 @@ async function startDaemon(config) {
   const channelStore = createChannelStore({
     filePath: import_node_path90.default.join(config.dataDir, "channels.json"),
     now: () => Date.now(),
-    genId: () => `ch-${(0, import_node_crypto32.randomUUID)().slice(0, 8)}`,
+    genId: () => `ch-${(0, import_node_crypto33.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("channel store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
     })
@@ -78462,7 +78568,7 @@ async function startDaemon(config) {
   const topicStore = createTopicStore({
     filePath: import_node_path90.default.join(config.dataDir, "topics.json"),
     now: () => Date.now(),
-    genId: () => `tp-${(0, import_node_crypto32.randomUUID)().slice(0, 8)}`,
+    genId: () => `tp-${(0, import_node_crypto33.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("topic store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
     })
@@ -78470,7 +78576,7 @@ async function startDaemon(config) {
   await topicStore.load();
   let deliverPendingRef;
   const personaDispatchManager = new PersonaDispatchManager({
-    genId: () => (0, import_node_crypto32.randomUUID)(),
+    genId: () => (0, import_node_crypto33.randomUUID)(),
     store: dispatchStore,
     now: () => Date.now(),
     onCompleted: (sid) => deliverPendingRef?.(sid),
@@ -78494,7 +78600,7 @@ async function startDaemon(config) {
   const readSecrets = () => readSecretTable({ bundleRoot: secretsBundleRoot, overrideDir: localSecretsDir, logger });
   const githubTokenFile = import_node_path90.default.join(localSecretsDir, GITHUB_TOKEN_FILE);
   const managedGithubVar = "CLAWD_GITHUB_MANAGED_TOKEN_SHA256";
-  const githubFingerprint = (token) => (0, import_node_crypto32.createHash)("sha256").update(token).digest("hex");
+  const githubFingerprint = (token) => (0, import_node_crypto33.createHash)("sha256").update(token).digest("hex");
   const githubIdentity = createGithubIdentity({
     isManaged: (token) => readEnvFileVar(githubTokenFile, managedGithubVar) === githubFingerprint(token),
     markManaged: (token) => {
@@ -79333,6 +79439,11 @@ async function startDaemon(config) {
           fill: (args) => centralConnectorFill({ api: config.clawosApi ?? DEFAULT_CLAWOS_API, ...args })
         }
       },
+      cloudFork: (file, body) => {
+        const personaId2 = personaIdFromCloudCwd(file.cwd);
+        if (!personaId2) throw new Error(`\u4E91\u4F1A\u8BDD ${file.sessionId} \u7F3A\u5C11 gateway persona ID`);
+        return gatewayForEnvironment(file.cloudEnvironment).fork(personaId2, body);
+      },
       cloudWorkspace: {
         logger,
         getFile: (id) => manager.get({ sessionId: id }).response,