@clawos-dev/clawd 0.2.718 → 0.2.720

package/dist/cli.cjs

@@ -8258,7 +8258,7 @@ var init_schemas = __esm({
       id: external_exports.string().min(1),
       label: external_exports.string().min(1),
       description: external_exports.string().optional(),
-      contextWindowSize: external_exports.number().int().positive(),
+      contextWindowSize: external_exports.number().int().positive().optional(),
       default: external_exports.boolean().optional(),
       // Per-model efforts override the global effort options; absence uses the tool's global config field.
       efforts: external_exports.array(SelectOptionSchema).optional(),
@@ -16138,7 +16138,7 @@ function asRecord2(v3) {
 }
 function readAuthKey(codexHome) {
   try {
-    const raw = JSON.parse(import_node_fs22.default.readFileSync(import_node_path22.default.join(codexHome, "auth.json"), "utf8"));
+    const raw = JSON.parse(import_node_fs11.default.readFileSync(import_node_path10.default.join(codexHome, "auth.json"), "utf8"));
     const key = asRecord2(raw)?.OPENAI_API_KEY;
     return typeof key === "string" && key ? key : void 0;
   } catch {
@@ -16173,7 +16173,7 @@ async function resolveProviderEndpoint(rawConfig, deps = {}) {
   const baseUrl = entry.base_url;
   if (typeof baseUrl !== "string" || !baseUrl) return null;
   const env = deps.env ?? process.env;
-  const codexHome = deps.codexHome ?? env.CODEX_HOME ?? import_node_path22.default.join(import_node_os10.default.homedir(), ".codex");
+  const codexHome = deps.codexHome ?? env.CODEX_HOME ?? import_node_path10.default.join(import_node_os7.default.homedir(), ".codex");
   const envKey = typeof entry.env_key === "string" && entry.env_key ? entry.env_key : null;
   const inlineToken = typeof entry.experimental_bearer_token === "string" && entry.experimental_bearer_token ? entry.experimental_bearer_token : void 0;
   const auth = asRecord2(entry.auth);
@@ -16221,14 +16221,14 @@ async function fetchProviderModels(endpoint, deps = {}) {
     clearTimeout(timer);
   }
 }
-var import_node_child_process2, import_node_fs22, import_node_os10, import_node_path22, import_node_util, PROVIDER_FETCH_TIMEOUT_MS, defaultExecFile, AUTH_COMMAND_TIMEOUT_MS;
+var import_node_child_process2, import_node_fs11, import_node_os7, import_node_path10, import_node_util, PROVIDER_FETCH_TIMEOUT_MS, defaultExecFile, AUTH_COMMAND_TIMEOUT_MS;
 var init_codex_provider_models = __esm({
   "src/tools/codex-provider-models.ts"() {
     "use strict";
     import_node_child_process2 = require("child_process");
-    import_node_fs22 = __toESM(require("fs"), 1);
-    import_node_os10 = __toESM(require("os"), 1);
-    import_node_path22 = __toESM(require("path"), 1);
+    import_node_fs11 = __toESM(require("fs"), 1);
+    import_node_os7 = __toESM(require("os"), 1);
+    import_node_path10 = __toESM(require("path"), 1);
     import_node_util = require("util");
     PROVIDER_FETCH_TIMEOUT_MS = 1e4;
     defaultExecFile = (0, import_node_util.promisify)(import_node_child_process2.execFile);
@@ -16491,17 +16491,17 @@ function stripCodexProvider(text) {
   return out.join("\n").trim();
 }
 function writeFileAtomic(file, data) {
-  const target = import_node_fs23.default.existsSync(file) && import_node_fs23.default.lstatSync(file).isSymbolicLink() ? import_node_fs23.default.realpathSync(file) : file;
+  const target = import_node_fs12.default.existsSync(file) && import_node_fs12.default.lstatSync(file).isSymbolicLink() ? import_node_fs12.default.realpathSync(file) : file;
   const tmp = `${target}.tmp.${process.pid}.${Date.now()}`;
-  import_node_fs23.default.writeFileSync(tmp, data, { mode: 384 });
-  import_node_fs23.default.renameSync(tmp, target);
+  import_node_fs12.default.writeFileSync(tmp, data, { mode: 384 });
+  import_node_fs12.default.renameSync(tmp, target);
 }
 function snapshotFile(file) {
-  const original = import_node_fs23.default.existsSync(file) ? import_node_fs23.default.readFileSync(file) : null;
+  const original = import_node_fs12.default.existsSync(file) ? import_node_fs12.default.readFileSync(file) : null;
   return () => {
-    const current = import_node_fs23.default.existsSync(file) ? import_node_fs23.default.readFileSync(file) : null;
+    const current = import_node_fs12.default.existsSync(file) ? import_node_fs12.default.readFileSync(file) : null;
     if (original === null) {
-      if (current !== null) import_node_fs23.default.rmSync(file, { force: true });
+      if (current !== null) import_node_fs12.default.rmSync(file, { force: true });
       return;
     }
     if (current !== null && current.equals(original)) return;
@@ -16510,9 +16510,9 @@ function snapshotFile(file) {
 }
 function applyCodexSubscriptionChannel(opts) {
   const codexHome = resolveCodexHome2(opts.codexHome);
-  import_node_fs23.default.mkdirSync(codexHome, { recursive: true });
-  const configFile = import_node_path23.default.join(codexHome, "config.toml");
-  const original = import_node_fs23.default.existsSync(configFile) ? import_node_fs23.default.readFileSync(configFile, "utf8") : "";
+  import_node_fs12.default.mkdirSync(codexHome, { recursive: true });
+  const configFile = import_node_path11.default.join(codexHome, "config.toml");
+  const original = import_node_fs12.default.existsSync(configFile) ? import_node_fs12.default.readFileSync(configFile, "utf8") : "";
   const rest = stripCodexProvider(original);
   let content;
   if (opts.channel) {
@@ -16539,8 +16539,8 @@ function applyCodexSubscriptionChannel(opts) {
 }
 function applyPiSubscriptionChannel(opts) {
   const agentDir = resolvePiAgentDir(opts.agentDir);
-  if (!import_node_fs23.default.existsSync(agentDir)) return false;
-  const configFile = import_node_path23.default.join(agentDir, PI_SUBSCRIPTION_FILE);
+  if (!import_node_fs12.default.existsSync(agentDir)) return false;
+  const configFile = import_node_path11.default.join(agentDir, PI_SUBSCRIPTION_FILE);
   if (opts.channel) {
     const data = { baseUrl: opts.channel.baseUrl, apiKey: opts.channel.apiKey };
     writeFileAtomic(configFile, JSON.stringify(data, null, 2) + "\n");
@@ -16559,16 +16559,16 @@ function claudeSubscriptionEnv(channel) {
   };
 }
 function readSettings(file) {
-  if (!import_node_fs23.default.existsSync(file)) return {};
-  const value = JSON.parse(import_node_fs23.default.readFileSync(file, "utf8"));
+  if (!import_node_fs12.default.existsSync(file)) return {};
+  const value = JSON.parse(import_node_fs12.default.readFileSync(file, "utf8"));
   if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("Claude settings must be a JSON object");
   return value;
 }
 function applyClaudeSubscriptionChannel(opts) {
   const dir = resolveClaudeConfigDir(opts.configDir);
-  const file = import_node_path23.default.join(dir, "settings.json");
-  const backupFile = import_node_path23.default.join(dir, CLAUDE_SUBSCRIPTION_BACKUP);
-  if (!opts.channel && !import_node_fs23.default.existsSync(backupFile)) return;
+  const file = import_node_path11.default.join(dir, "settings.json");
+  const backupFile = import_node_path11.default.join(dir, CLAUDE_SUBSCRIPTION_BACKUP);
+  if (!opts.channel && !import_node_fs12.default.existsSync(backupFile)) return;
   const settings = readSettings(file);
   if (settings.env !== void 0 && (!settings.env || typeof settings.env !== "object" || Array.isArray(settings.env))) {
     throw new Error("Claude settings.env must be a JSON object");
@@ -16576,10 +16576,10 @@ function applyClaudeSubscriptionChannel(opts) {
   const env = { ...settings.env };
   if (opts.channel) {
     const connection = claudeSubscriptionEnv(opts.channel);
-    import_node_fs23.default.mkdirSync(dir, { recursive: true });
-    if (!import_node_fs23.default.existsSync(backupFile)) {
+    import_node_fs12.default.mkdirSync(dir, { recursive: true });
+    if (!import_node_fs12.default.existsSync(backupFile)) {
       writeFileAtomic(backupFile, JSON.stringify({
-        hadSettings: import_node_fs23.default.existsSync(file),
+        hadSettings: import_node_fs12.default.existsSync(file),
         hadEnv: settings.env !== void 0,
         env: Object.fromEntries(Object.keys(connection).filter((key) => key in env).map((key) => [key, env[key]]))
       }) + "\n");
@@ -16596,24 +16596,24 @@ function applyClaudeSubscriptionChannel(opts) {
   Object.assign(env, backup.env);
   if (Object.keys(env).length || backup.hadEnv) settings.env = env;
   else delete settings.env;
-  if (!backup.hadSettings && !Object.keys(settings).length) import_node_fs23.default.rmSync(file, { force: true });
+  if (!backup.hadSettings && !Object.keys(settings).length) import_node_fs12.default.rmSync(file, { force: true });
   else writeFileAtomic(file, JSON.stringify(settings, null, 2) + "\n");
-  import_node_fs23.default.unlinkSync(backupFile);
+  import_node_fs12.default.unlinkSync(backupFile);
 }
-var import_node_fs23, import_node_os11, import_node_path23, PROVIDER_ID, isOwnProvider, resolveCodexHome2, resolvePiAgentDir, PI_SUBSCRIPTION_FILE, resolveClaudeConfigDir, CLAUDE_SUBSCRIPTION_BACKUP, CLAUDE_CONNECTION_KEYS;
+var import_node_fs12, import_node_os8, import_node_path11, PROVIDER_ID, isOwnProvider, resolveCodexHome2, resolvePiAgentDir, PI_SUBSCRIPTION_FILE, resolveClaudeConfigDir, CLAUDE_SUBSCRIPTION_BACKUP, CLAUDE_CONNECTION_KEYS;
 var init_subscription_channels_apply = __esm({
   "src/tools/subscription-channels-apply.ts"() {
     "use strict";
-    import_node_fs23 = __toESM(require("fs"), 1);
-    import_node_os11 = __toESM(require("os"), 1);
-    import_node_path23 = __toESM(require("path"), 1);
+    import_node_fs12 = __toESM(require("fs"), 1);
+    import_node_os8 = __toESM(require("os"), 1);
+    import_node_path11 = __toESM(require("path"), 1);
     init_codex_config_toml();
     PROVIDER_ID = "cliproxyapi";
     isOwnProvider = (path113) => path113[0] === "model_providers" && path113[1] === PROVIDER_ID;
-    resolveCodexHome2 = (codexHome) => codexHome || process.env.CODEX_HOME || import_node_path23.default.join(import_node_os11.default.homedir(), ".codex");
-    resolvePiAgentDir = (agentDir) => agentDir || process.env.PI_CODING_AGENT_DIR || import_node_path23.default.join(import_node_os11.default.homedir(), ".pi", "agent");
+    resolveCodexHome2 = (codexHome) => codexHome || process.env.CODEX_HOME || import_node_path11.default.join(import_node_os8.default.homedir(), ".codex");
+    resolvePiAgentDir = (agentDir) => agentDir || process.env.PI_CODING_AGENT_DIR || import_node_path11.default.join(import_node_os8.default.homedir(), ".pi", "agent");
     PI_SUBSCRIPTION_FILE = "cliproxyapi.json";
-    resolveClaudeConfigDir = (configDir) => configDir || process.env.CLAUDE_CONFIG_DIR || import_node_path23.default.join(import_node_os11.default.homedir(), ".claude");
+    resolveClaudeConfigDir = (configDir) => configDir || process.env.CLAUDE_CONFIG_DIR || import_node_path11.default.join(import_node_os8.default.homedir(), ".claude");
     CLAUDE_SUBSCRIPTION_BACKUP = "clawd-subscription-backup.json";
     CLAUDE_CONNECTION_KEYS = ["ANTHROPIC_BASE_URL", "ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_API_KEY", "CLAUDE_CODE_USE_BEDROCK", "CLAUDE_CODE_USE_VERTEX", "CLAUDE_CODE_USE_FOUNDRY"];
   }
@@ -16623,13 +16623,13 @@ var init_subscription_channels_apply = __esm({
 function probeViaWhich() {
   try {
     const out = (0, import_node_child_process4.execFileSync)("which", ["claude"], { encoding: "utf8" }).trim();
-    if (out && import_node_fs24.default.existsSync(out)) return out;
+    if (out && import_node_fs13.default.existsSync(out)) return out;
   } catch {
   }
   return null;
 }
 async function probeClaude(env = process.env) {
-  if (env.CLAUDE_BIN && import_node_fs24.default.existsSync(env.CLAUDE_BIN)) {
+  if (env.CLAUDE_BIN && import_node_fs13.default.existsSync(env.CLAUDE_BIN)) {
     return { available: true, path: env.CLAUDE_BIN };
   }
   const w3 = probeViaWhich();
@@ -17095,27 +17095,13 @@ function encodeClaudeStdin(text) {
   };
   return JSON.stringify(frame) + "\n";
 }
-function resolveClaudeContextWindow(modelId) {
-  if (!modelId) return void 0;
-  const models = CLAUDE_CAPABILITIES.models;
-  const exact = models.find((m3) => m3.id === modelId);
-  if (exact) return exact.contextWindowSize;
-  const lower = modelId.toLowerCase();
-  const contains = models.find((m3) => m3.id && lower.includes(m3.id.toLowerCase()));
-  if (contains) {
-    if (contains.id === "opus" && /opus-4-[67]/i.test(modelId)) return 1e6;
-    return contains.contextWindowSize;
-  }
-  if (/\[1m\]/i.test(modelId)) return 1e6;
-  return void 0;
-}
-var import_node_child_process3, import_node_child_process4, import_node_fs24, ATTACHMENT_SILENT_SUBTYPES2, unknownTypeHandler, ATTACHMENT_RE, IMAGE_EXT_MIME, CLAUDE_MODEL_IDS, CLAUDE_MODELS, _assertModelIdsAligned, CLAUDE_PERMISSION_MODES, CLAUDE_CAPABILITIES, ClaudeAdapter;
+var import_node_child_process3, import_node_child_process4, import_node_fs13, ATTACHMENT_SILENT_SUBTYPES2, unknownTypeHandler, ATTACHMENT_RE, IMAGE_EXT_MIME, CLAUDE_MODEL_IDS, CLAUDE_MODELS, _assertModelIdsAligned, CLAUDE_PERMISSION_MODES, CLAUDE_CAPABILITIES, ClaudeAdapter;
 var init_claude = __esm({
   "src/tools/claude.ts"() {
     "use strict";
     import_node_child_process3 = require("child_process");
     import_node_child_process4 = require("child_process");
-    import_node_fs24 = __toESM(require("fs"), 1);
+    import_node_fs13 = __toESM(require("fs"), 1);
     init_protocol();
     init_codex_provider_models();
     init_subscription_channels_apply();
@@ -17139,10 +17125,10 @@ var init_claude = __esm({
     };
     CLAUDE_MODEL_IDS = ["opus", "fable", "sonnet", "haiku"];
     CLAUDE_MODELS = [
-      { id: "opus", label: "Opus", description: "Most capable", contextWindowSize: 1e6, default: true },
-      { id: "fable", label: "Fable", contextWindowSize: 1e6 },
-      { id: "sonnet", label: "Sonnet", description: "Fast, balanced", contextWindowSize: 1e6 },
-      { id: "haiku", label: "Haiku", description: "Fastest, lightest", contextWindowSize: 1e6 }
+      { id: "opus", label: "Opus", description: "Most capable", default: true },
+      { id: "fable", label: "Fable" },
+      { id: "sonnet", label: "Sonnet", description: "Fast, balanced" },
+      { id: "haiku", label: "Haiku", description: "Fastest, lightest" }
     ];
     _assertModelIdsAligned = CLAUDE_MODELS.map((m3) => m3.id);
     CLAUDE_PERMISSION_MODES = [
@@ -17239,7 +17225,7 @@ var init_claude = __esm({
           if (known.has(model.id)) continue;
           known.add(model.id);
           const native = CLAUDE_MODELS.find((entry) => entry.id === model.id);
-          merged.push(native ?? { id: model.id, label: model.id, contextWindowSize: resolveClaudeContextWindow(model.id) ?? 2e5 });
+          merged.push(native ?? { id: model.id, label: model.id });
         }
         merged.sort((a2, b3) => a2.id.localeCompare(b3.id));
         return {
@@ -17259,8 +17245,8 @@ var init_claude = __esm({
         }
         return buildSpawnEnv(env);
       }
-      resolveContextWindow(modelId) {
-        return resolveClaudeContextWindow(modelId);
+      resolveContextWindow(_modelId) {
+        return void 0;
       }
       spawn(ctx) {
         const args = buildSpawnArgs(ctx);
@@ -46853,7 +46839,7 @@ function requireEnvironmentIdentity(stores, environment) {
 var import_node_path90 = __toESM(require("path"), 1);
 var import_node_fs69 = __toESM(require("fs"), 1);
 var import_node_os33 = __toESM(require("os"), 1);
-var import_node_crypto33 = require("crypto");
+var import_node_crypto34 = require("crypto");
 var import_node_url6 = require("url");
 
 // src/logger.ts
@@ -47509,10 +47495,10 @@ var SessionStoreFactory = class {
 };
 
 // src/session/manager.ts
-var import_node_fs13 = __toESM(require("fs"), 1);
-var import_node_path14 = __toESM(require("path"), 1);
-var import_node_os8 = __toESM(require("os"), 1);
-var import_node_crypto5 = require("crypto");
+var import_node_fs16 = __toESM(require("fs"), 1);
+var import_node_path16 = __toESM(require("path"), 1);
+var import_node_os10 = __toESM(require("os"), 1);
+var import_node_crypto6 = require("crypto");
 init_protocol();
 
 // src/tools/guest-settings.ts
@@ -47770,9 +47756,9 @@ function extractLarkReplyText(events) {
 }
 
 // src/session/runner.ts
-var import_node_os7 = __toESM(require("os"), 1);
-var import_node_path13 = __toESM(require("path"), 1);
-var import_node_crypto4 = require("crypto");
+var import_node_os9 = __toESM(require("os"), 1);
+var import_node_path15 = __toESM(require("path"), 1);
+var import_node_crypto5 = require("crypto");
 
 // src/session/reducer.ts
 init_protocol();
@@ -49058,19 +49044,54 @@ init_permission_stdio();
 init_protocol();
 init_claude_history();
 
+// src/tools/claude-session-driver.ts
+var import_node_crypto4 = require("crypto");
+init_claude();
+
+// src/tools/first-byte.ts
+var VISIBLE = /* @__PURE__ */ new Set(["thinking", "tool_call", "text"]);
+function createFirstByteClock(now = Date.now) {
+  let at3 = null;
+  return {
+    reset() {
+      at3 = null;
+    },
+    see(events) {
+      if (at3 === null && events.some((e) => VISIBLE.has(e.kind))) at3 = now();
+    },
+    afterFirstByteMs() {
+      return at3 === null ? void 0 : Math.max(0, Math.round(now() - at3));
+    }
+  };
+}
+
+// src/tools/claude-session-driver.ts
+function claudeContextUsagePatch(raw) {
+  if (!raw || typeof raw !== "object") return null;
+  const usage = raw;
+  const total = usage.totalTokens;
+  const window2 = usage.rawMaxTokens;
+  if (typeof total !== "number" || !Number.isSafeInteger(total) || total < 0 || typeof window2 !== "number" || !Number.isSafeInteger(window2) || window2 <= 0) return null;
+  return {
+    ...typeof usage.model === "string" && usage.model ? { resolvedModel: usage.model } : {},
+    contextUsage: { inputTokens: total, outputTokens: 0 },
+    contextWindowSize: window2
+  };
+}
+
 // src/tools/spawn-error.ts
-var import_node_path10 = __toESM(require("path"), 1);
+var import_node_path12 = __toESM(require("path"), 1);
 function describeSpawnError(err, fallbackBin, cwd, pathEnv = process.env.PATH) {
   const message = err instanceof Error ? err.message : String(err);
   const e = err;
   if (e?.code !== "ENOENT") return message;
   const bin = typeof e.path === "string" && e.path ? e.path : fallbackBin;
-  return `\u8D77\u4E0D\u4E86 ${bin}\uFF1APATH \u91CC\u6CA1\u6709\u5B83\uFF0C\u6216\u5DE5\u4F5C\u76EE\u5F55\u4E0D\u5B58\u5728\u3002\u5DE5\u4F5C\u76EE\u5F55\uFF1A${cwd || "(\u672A\u77E5)"}\uFF5Cclawd \u770B\u5230\u7684 PATH\uFF1A${pathEnv || "(\u7A7A)"}` + (import_node_path10.default.basename(bin) === "codex" || fallbackBin === process.env.CODEX_BIN ? `\u3002${CODEX_INSTALL_HELP}` : "");
+  return `\u8D77\u4E0D\u4E86 ${bin}\uFF1APATH \u91CC\u6CA1\u6709\u5B83\uFF0C\u6216\u5DE5\u4F5C\u76EE\u5F55\u4E0D\u5B58\u5728\u3002\u5DE5\u4F5C\u76EE\u5F55\uFF1A${cwd || "(\u672A\u77E5)"}\uFF5Cclawd \u770B\u5230\u7684 PATH\uFF1A${pathEnv || "(\u7A7A)"}` + (import_node_path12.default.basename(bin) === "codex" || fallbackBin === process.env.CODEX_BIN ? `\u3002${CODEX_INSTALL_HELP}` : "");
 }
 
 // src/persona/mcp-secret-render.ts
-var import_node_fs11 = __toESM(require("fs"), 1);
-var import_node_path11 = __toESM(require("path"), 1);
+var import_node_fs14 = __toESM(require("fs"), 1);
+var import_node_path13 = __toESM(require("path"), 1);
 var PLACEHOLDER = /\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g;
 var PERSONA_SECRET_MCP_ID_PREFIX = "persona-secrets:";
 var PERSONA_DIR_PLACEHOLDER = "${CLAWD_PERSONA_DIR}";
@@ -49081,10 +49102,10 @@ function renderPersonaDir(v3, personaDir) {
   return v3.split(PERSONA_DIR_PLACEHOLDER).join(personaDir);
 }
 function renderPersonaMcpSecrets(args) {
-  const src = import_node_path11.default.join(args.personaDir, ".mcp.json");
+  const src = import_node_path13.default.join(args.personaDir, ".mcp.json");
   let parsed;
   try {
-    parsed = JSON.parse(import_node_fs11.default.readFileSync(src, "utf8"));
+    parsed = JSON.parse(import_node_fs14.default.readFileSync(src, "utf8"));
   } catch (e) {
     const code = e.code;
     if (code !== "ENOENT") {
@@ -49137,15 +49158,15 @@ function renderPersonaMcpSecrets(args) {
       vars: [...missing].sort()
     });
   }
-  const outPath = import_node_path11.default.join(args.outDir, `${safeFileName(args.personaId)}.mcp.json`);
-  import_node_fs11.default.mkdirSync(args.outDir, { recursive: true, mode: 448 });
+  const outPath = import_node_path13.default.join(args.outDir, `${safeFileName(args.personaId)}.mcp.json`);
+  import_node_fs14.default.mkdirSync(args.outDir, { recursive: true, mode: 448 });
   const content = {
     _comment: "daemon \u6BCF\u6B21 spawn \u73B0\u6E32\uFF1B\u6765\u6E90\u662F persona \u76EE\u5F55\u7684 .mcp.json\uFF08\u53EA\u6709\u58F0\u660E\uFF09+ \u51ED\u636E\u8868\uFF08\u53EA\u6709\u503C\uFF09+ persona \u76EE\u5F55\u8DEF\u5F84\uFF08args \u91CC\u7684 ${CLAWD_PERSONA_DIR}\uFF09\u3002\u540C\u540D server \u538B\u8FC7 persona \u76EE\u5F55\u90A3\u4EFD\uFF0C\u503C\u56E0\u6B64\u4E0D\u843D persona \u76EE\u5F55\u3001\u4E0D\u8FDB agent \u4E3B\u8FDB\u7A0B env\u3002\u624B\u6539\u65E0\u6548\u3002",
     mcpServers: rendered
   };
   const tmp = `${outPath}.tmp-${process.pid}-${Date.now()}`;
-  import_node_fs11.default.writeFileSync(tmp, JSON.stringify(content, null, 2), { encoding: "utf8", mode: 384 });
-  import_node_fs11.default.renameSync(tmp, outPath);
+  import_node_fs14.default.writeFileSync(tmp, JSON.stringify(content, null, 2), { encoding: "utf8", mode: 384 });
+  import_node_fs14.default.renameSync(tmp, outPath);
   return {
     id: `${PERSONA_SECRET_MCP_ID_PREFIX}${args.personaId}`,
     path: outPath
@@ -49159,8 +49180,8 @@ function attachPersonaSecretMcp(ctx, resolve9) {
 }
 
 // src/ipc-recorder.ts
-var import_node_fs12 = __toESM(require("fs"), 1);
-var import_node_path12 = __toESM(require("path"), 1);
+var import_node_fs15 = __toESM(require("fs"), 1);
+var import_node_path14 = __toESM(require("path"), 1);
 function tsForFilename(ms) {
   return new Date(ms).toISOString().replace(/[:.]/g, "-");
 }
@@ -49171,8 +49192,8 @@ function startRecorder(opts) {
     return null;
   }
   const now = opts.now ?? Date.now;
-  const dir = import_node_path12.default.join(opts.dataDir, "ipc-recordings", opts.sessionId);
-  const filePath = import_node_path12.default.join(dir, `${tsForFilename(now())}.jsonl`);
+  const dir = import_node_path14.default.join(opts.dataDir, "ipc-recordings", opts.sessionId);
+  const filePath = import_node_path14.default.join(dir, `${tsForFilename(now())}.jsonl`);
   let stream = null;
   let closedResolve;
   const closed = new Promise((resolve9) => {
@@ -49181,8 +49202,8 @@ function startRecorder(opts) {
   let exited = false;
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs12.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs12.default.createWriteStream(filePath, { flags: "a" });
+    import_node_fs15.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs15.default.createWriteStream(filePath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -49280,7 +49301,7 @@ var SessionRunner = class {
       bufferCap: this.hooks.bufferCap ?? 500,
       now: this.hooks.now ?? Date.now,
       resolveContextWindow: this.hooks.resolveContextWindow,
-      genUuid: this.hooks.genUuid ?? import_node_crypto4.randomUUID,
+      genUuid: this.hooks.genUuid ?? import_node_crypto5.randomUUID,
       ownerDisplayName: this.hooks.ownerDisplayName,
       ownerDeviceId: this.hooks.ownerDeviceId,
       ownerFeishuUnionId: this.hooks.ownerFeishuUnionId,
@@ -49424,15 +49445,8 @@ var SessionRunner = class {
     if (!proc || !this.state.procAlive || this.state.turnOpen || this.hooks.adapter.id !== "claude" || this.hooks.mode === "tui") return;
     const refresh = this.sendControlRequest("get_context_usage", { detail: "summary" }).then((raw) => {
       if (this.proc !== proc || this.contextRefresh !== refresh || this.state.turnOpen || !raw || typeof raw !== "object") return;
-      const usage = raw;
-      const total = usage.totalTokens;
-      const window2 = usage.rawMaxTokens;
-      if (typeof total !== "number" || !Number.isSafeInteger(total) || total < 0 || typeof window2 !== "number" || !Number.isSafeInteger(window2) || window2 <= 0) return;
-      this.feedObserverEvents([{ kind: "meta_update", patch: {
-        ...typeof usage.model === "string" && usage.model ? { resolvedModel: usage.model } : {},
-        contextUsage: { inputTokens: total, outputTokens: 0 },
-        contextWindowSize: window2
-      } }]);
+      const patch = claudeContextUsagePatch(raw);
+      if (patch) this.feedObserverEvents([{ kind: "meta_update", patch }]);
     }).catch((err) => {
       this.hooks.logger?.debug("claude context summary unavailable", { message: String(err) });
     });
@@ -49444,7 +49458,7 @@ var SessionRunner = class {
     if (!proc || !this.state.procAlive) {
       return Promise.reject(new Error("session not running"));
     }
-    const requestId = (this.hooks.genUuid ?? import_node_crypto4.randomUUID)();
+    const requestId = (this.hooks.genUuid ?? import_node_crypto5.randomUUID)();
     const frame = {
       type: "control_request",
       request_id: requestId,
@@ -49649,7 +49663,7 @@ var SessionRunner = class {
   isSubagentActive() {
     const toolSessionId = this.state.file.toolSessionId;
     if (!toolSessionId) return false;
-    const projectsRoot = import_node_path13.default.join(this.hooks.home ?? import_node_os7.default.homedir(), ".claude", "projects");
+    const projectsRoot = import_node_path15.default.join(this.hooks.home ?? import_node_os9.default.homedir(), ".claude", "projects");
     const mtime = newestSubagentMtimeMs(projectsRoot, this.state.file.cwd, toolSessionId);
     if (mtime === null) return false;
     const now = (this.hooks.now ?? Date.now)();
@@ -49682,7 +49696,7 @@ var SessionRunner = class {
       const session = this.hooks.adapter.createSession(ctx, {
         pushEvents: (events) => {
           if (!isCurrent() || events.length === 0) return;
-          const uuid = (this.hooks.genUuid ?? import_node_crypto4.randomUUID)();
+          const uuid = (this.hooks.genUuid ?? import_node_crypto5.randomUUID)();
           this.input({ kind: "inject-events", events: events.map((e) => e.uuid ? e : { ...e, uuid }) });
         },
         onExit: (code) => {
@@ -49838,7 +49852,7 @@ function nowIso2(deps) {
   return new Date((deps.now ?? Date.now)()).toISOString();
 }
 function newSessionId() {
-  return (0, import_node_crypto5.randomUUID)().replace(/-/g, "").slice(0, 16);
+  return (0, import_node_crypto6.randomUUID)().replace(/-/g, "").slice(0, 16);
 }
 function buildDispatchTaskPack(args) {
   return formatDispatchTaskEnvelope({
@@ -49876,7 +49890,7 @@ function derivePersonaSpawnCwd(file, personaRoot, cloud) {
       `derivePersonaSpawnCwd: personaRoot missing for owner session ${file.sessionId} (ownerPersonaId=${personaId2})`
     );
   }
-  return import_node_path14.default.join(personaRoot, safeFileName(personaId2));
+  return import_node_path16.default.join(personaRoot, safeFileName(personaId2));
 }
 function makeInitialState(file, subSessionMeta) {
   return {
@@ -49981,7 +49995,7 @@ var SessionManager = class {
   assertLocalCwd(cwd, tool) {
     if (this.deps.getAdapter(tool).remote) return;
     try {
-      if (!import_node_fs13.default.statSync(cwd).isDirectory()) throw new Error("not dir");
+      if (!import_node_fs16.default.statSync(cwd).isDirectory()) throw new Error("not dir");
     } catch {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `cwd not a directory: ${cwd}`);
     }
@@ -50029,10 +50043,10 @@ var SessionManager = class {
   // 枚举 persona：有 factory 时扫 personas/，兼容模式扫 sessions/（排除 default）。
   listPersonaIdsOnDisk() {
     if (!this.deps.dataDir) return [];
-    const root = this.deps.storeFactory ? import_node_path14.default.join(this.deps.dataDir, "personas") : import_node_path14.default.join(this.deps.dataDir, "sessions");
+    const root = this.deps.storeFactory ? import_node_path16.default.join(this.deps.dataDir, "personas") : import_node_path16.default.join(this.deps.dataDir, "sessions");
     let entries;
     try {
-      entries = import_node_fs13.default.readdirSync(root, { withFileTypes: true });
+      entries = import_node_fs16.default.readdirSync(root, { withFileTypes: true });
     } catch (err) {
       const code = err?.code;
       if (code === "ENOENT") return [];
@@ -50043,7 +50057,7 @@ var SessionManager = class {
   // 仅 factory 布局枚举 persona 的 guests/<capId>/。
   listGuestCapIdsForPersona(personaId2) {
     if (!this.deps.dataDir || !this.deps.storeFactory) return [];
-    const root = import_node_path14.default.join(
+    const root = import_node_path16.default.join(
       this.deps.dataDir,
       "personas",
       personaId2,
@@ -50053,7 +50067,7 @@ var SessionManager = class {
     );
     let entries;
     try {
-      entries = import_node_fs13.default.readdirSync(root, { withFileTypes: true });
+      entries = import_node_fs16.default.readdirSync(root, { withFileTypes: true });
     } catch (err) {
       const code = err?.code;
       if (code === "ENOENT") return [];
@@ -50145,7 +50159,7 @@ var SessionManager = class {
       { ownerIdleKillDelayMs: this.deps.ownerIdleKillDelayMs }
     );
     if (subSessionMeta?.userWorkDir) {
-      import_node_fs13.default.mkdirSync(subSessionMeta.userWorkDir, { recursive: true });
+      import_node_fs16.default.mkdirSync(subSessionMeta.userWorkDir, { recursive: true });
     }
     if (scope.kind === "persona" && scope.mode === "guest") {
       if ((file.tool ?? "claude") === PI_TOOL_ID) {
@@ -50161,7 +50175,7 @@ var SessionManager = class {
       if ((file.tool ?? "claude") === "claude") {
         const base = this.deps.personaStore?.readSandboxSettings(scope.personaId) ?? null;
         const sandboxSettings = composeGuestSandbox(base, subSessionMeta.userWorkDir, file.cwd);
-        const ownerCreds = readOwnerCredentials(import_node_os8.default.homedir(), this.deps.logger);
+        const ownerCreds = readOwnerCredentials(import_node_os10.default.homedir(), this.deps.logger);
         const merged = mergeOwnerCredentials(sandboxSettings, ownerCreds);
         if (ownerCreds) {
           this.deps.logger?.info("owner credentials injected into guest spawn", {
@@ -50172,8 +50186,8 @@ var SessionManager = class {
         }
         subSessionMeta.extraSettings = JSON.stringify(merged);
       }
-      const home = import_node_os8.default.homedir();
-      const expand = (p3) => p3 === "~" ? home : p3.startsWith("~/") ? import_node_path14.default.join(home, p3.slice(2)) : p3;
+      const home = import_node_os10.default.homedir();
+      const expand = (p3) => p3 === "~" ? home : p3.startsWith("~/") ? import_node_path16.default.join(home, p3.slice(2)) : p3;
       const codexCfg = this.deps.personaStore?.readCodexSandboxSettings(scope.personaId) ?? null;
       subSessionMeta.codexSandbox = {
         writableRoots: [
@@ -50219,7 +50233,7 @@ var SessionManager = class {
       mode: this.deps.mode
     });
     if (this.deps.mode === "tui" && (file.tool ?? "claude") === "claude" && !file.toolSessionId) {
-      const newTsid = (0, import_node_crypto5.randomUUID)();
+      const newTsid = (0, import_node_crypto6.randomUUID)();
       this.deps.logger?.debug("tui mode: backfilling missing toolSessionId", {
         sessionId: file.sessionId,
         newToolSessionId: newTsid
@@ -50352,7 +50366,7 @@ var SessionManager = class {
     this.assertLocalCwd(cwd, tool);
     const engineOverridden = tool !== (personaDefaults?.tool ?? "claude");
     const iso = nowIso2(this.deps);
-    const toolSessionId = this.deps.mode === "tui" && tool === "claude" ? (0, import_node_crypto5.randomUUID)() : void 0;
+    const toolSessionId = this.deps.mode === "tui" && tool === "claude" ? (0, import_node_crypto6.randomUUID)() : void 0;
     const file = {
       sessionId: args.cloudFork?.sessionId ?? newSessionId(),
       cwd,
@@ -51071,7 +51085,7 @@ var SessionManager = class {
       );
     this.titleGenPending.get(args.sessionId)?.abort();
     this.titleGenPending.delete(args.sessionId);
-    const nextToolSessionId = this.deps.mode === "tui" && (existingFile.tool ?? "claude") === "claude" ? (0, import_node_crypto5.randomUUID)() : void 0;
+    const nextToolSessionId = this.deps.mode === "tui" && (existingFile.tool ?? "claude") === "claude" ? (0, import_node_crypto6.randomUUID)() : void 0;
     this.clearPendingTurnEnd(args.sessionId);
     const runner = this.runners.get(args.sessionId);
     if (runner) {
@@ -51354,7 +51368,7 @@ var SessionManager = class {
     this.titleGenPending.get(args.sessionId)?.abort();
     this.titleGenPending.delete(args.sessionId);
     const runner = this.ensureRunnerForScope(file, args.scope);
-    const nextToolSessionId = this.deps.mode === "tui" && (file.tool ?? "claude") === "claude" ? (0, import_node_crypto5.randomUUID)() : void 0;
+    const nextToolSessionId = this.deps.mode === "tui" && (file.tool ?? "claude") === "claude" ? (0, import_node_crypto6.randomUUID)() : void 0;
     const { broadcast } = this.withCollector(() => {
       runner.input({
         kind: "command",
@@ -52079,24 +52093,24 @@ var SessionManager = class {
 };
 
 // src/projects/store.ts
-var fs15 = __toESM(require("fs"), 1);
-var os9 = __toESM(require("os"), 1);
-var path19 = __toESM(require("path"), 1);
+var fs18 = __toESM(require("fs"), 1);
+var os11 = __toESM(require("os"), 1);
+var path21 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/projects/codex-registry.ts
-var fs14 = __toESM(require("fs"), 1);
-var os8 = __toESM(require("os"), 1);
-var path18 = __toESM(require("path"), 1);
+var fs17 = __toESM(require("fs"), 1);
+var os10 = __toESM(require("os"), 1);
+var path20 = __toESM(require("path"), 1);
 function normalizeProjectPath(p3) {
-  const home = os8.homedir();
-  const expanded = p3 === "~" ? home : p3.startsWith("~/") ? path18.join(home, p3.slice(2)) : p3;
-  return path18.resolve(expanded);
+  const home = os10.homedir();
+  const expanded = p3 === "~" ? home : p3.startsWith("~/") ? path20.join(home, p3.slice(2)) : p3;
+  return path20.resolve(expanded);
 }
 function readCodexProjects(opts) {
   let raw;
   try {
-    raw = fs14.readFileSync(opts.stateFile, "utf8");
+    raw = fs17.readFileSync(opts.stateFile, "utf8");
   } catch {
     return [];
   }
@@ -52134,7 +52148,7 @@ var ProjectsStore = class {
   load() {
     let raw;
     try {
-      raw = fs15.readFileSync(this.opts.file, "utf8");
+      raw = fs18.readFileSync(this.opts.file, "utf8");
     } catch {
       return;
     }
@@ -52149,8 +52163,8 @@ var ProjectsStore = class {
     }
   }
   save() {
-    fs15.mkdirSync(path19.dirname(this.opts.file), { recursive: true });
-    fs15.writeFileSync(
+    fs18.mkdirSync(path21.dirname(this.opts.file), { recursive: true });
+    fs18.writeFileSync(
       this.opts.file,
       JSON.stringify({ projects: this.entries, annotations: this.annotations }, null, 2)
     );
@@ -52160,10 +52174,10 @@ var ProjectsStore = class {
   }
   isProjectablePath(p3) {
     const abs = this.normalize(p3);
-    const rel = path19.relative(path19.resolve(this.opts.clawdDir), abs);
-    const insideClawd = !(rel.startsWith("..") || path19.isAbsolute(rel));
+    const rel = path21.relative(path21.resolve(this.opts.clawdDir), abs);
+    const insideClawd = !(rel.startsWith("..") || path21.isAbsolute(rel));
     if (insideClawd) return false;
-    if (abs === path19.resolve(os9.homedir()) || abs === path19.parse(abs).root) return false;
+    if (abs === path21.resolve(os11.homedir()) || abs === path21.parse(abs).root) return false;
     return true;
   }
   list() {
@@ -52229,7 +52243,7 @@ var ProjectsStore = class {
     if (existing) return existing;
     const entry = {
       path: abs,
-      name: name ?? path19.basename(abs),
+      name: name ?? path21.basename(abs),
       createdAt: (this.opts.now ?? (() => (/* @__PURE__ */ new Date()).toISOString()))()
     };
     this.entries.push(entry);
@@ -52238,43 +52252,43 @@ var ProjectsStore = class {
 };
 
 // src/persona/store.ts
-var fs16 = __toESM(require("fs"), 1);
-var path20 = __toESM(require("path"), 1);
+var fs19 = __toESM(require("fs"), 1);
+var path22 = __toESM(require("path"), 1);
 init_protocol();
 var PersonaStore = class {
   constructor(root) {
     this.root = root;
-    fs16.mkdirSync(root, { recursive: true });
+    fs19.mkdirSync(root, { recursive: true });
   }
   root;
   personaDir(personaId2) {
-    return path20.join(this.root, safeFileName(personaId2));
+    return path22.join(this.root, safeFileName(personaId2));
   }
   metaPath(personaId2) {
-    return path20.join(this.personaDir(personaId2), ".clawd", "persona.json");
+    return path22.join(this.personaDir(personaId2), ".clawd", "persona.json");
   }
   claudeMdPath(personaId2) {
-    return path20.join(this.personaDir(personaId2), "CLAUDE.md");
+    return path22.join(this.personaDir(personaId2), "CLAUDE.md");
   }
   // codex 原生读 cwd 的 AGENTS.md。人格双写镜像：claude 读 CLAUDE.md、codex 读 AGENTS.md，
   // 两份内容恒一致，persona 切 tool 零迁移。
   agentsMdPath(personaId2) {
-    return path20.join(this.personaDir(personaId2), "AGENTS.md");
+    return path22.join(this.personaDir(personaId2), "AGENTS.md");
   }
   /**
    * guest sandbox base 放 .clawd/，避免 CC project settings 自动加载。
    * manager 读取后叠加强制底座和 userWorkDir，以 inline settings 注入会话。
    */
   sandboxSettingsPath(personaId2) {
-    return path20.join(this.personaDir(personaId2), ".clawd", "sandbox-settings.json");
+    return path22.join(this.personaDir(personaId2), ".clawd", "sandbox-settings.json");
   }
   /** 用户人格补充层：OTA 不覆盖，只经 extraSystemPrompt 注入，避免重复加载人格。 */
   personalityLocalPath(personaId2) {
-    return path20.join(this.personaDir(personaId2), ".clawd", "personality.local.md");
+    return path22.join(this.personaDir(personaId2), ".clawd", "personality.local.md");
   }
   write(persona, personality) {
     const dir = this.personaDir(persona.personaId);
-    fs16.mkdirSync(path20.join(dir, ".clawd"), { recursive: true });
+    fs19.mkdirSync(path22.join(dir, ".clawd"), { recursive: true });
     this.atomicWrite(this.claudeMdPath(persona.personaId), personality);
     this.atomicWrite(this.agentsMdPath(persona.personaId), personality);
     this.writeSandboxSettings(persona.personaId, buildGuestSettingsV1());
@@ -52287,26 +52301,26 @@ var PersonaStore = class {
   /** 读人格补充层正文；文件不存在返回 null（= 该 persona 没有补充，走内置人格）。 */
   readPersonalityLocal(personaId2) {
     const p3 = this.personalityLocalPath(personaId2);
-    if (!fs16.existsSync(p3)) return null;
-    return fs16.readFileSync(p3, "utf8");
+    if (!fs19.existsSync(p3)) return null;
+    return fs19.readFileSync(p3, "utf8");
   }
   /** 纯空白表示清空，删除文件；缺目录时创建 .clawd/。 */
   writePersonalityLocal(personaId2, body) {
     const p3 = this.personalityLocalPath(personaId2);
     if (!body.trim()) {
-      fs16.rmSync(p3, { force: true });
+      fs19.rmSync(p3, { force: true });
       return;
     }
-    fs16.mkdirSync(path20.dirname(p3), { recursive: true });
+    fs19.mkdirSync(path22.dirname(p3), { recursive: true });
     this.atomicWrite(p3, body);
   }
   /** 补缺失的 AGENTS.md 镜像；已有文件（含用户编辑）不覆盖，无 CLAUDE.md 则不生成。 */
   ensureAgentsMirror(personaId2) {
     const claudeMd = this.claudeMdPath(personaId2);
     const agentsMd = this.agentsMdPath(personaId2);
-    if (!fs16.existsSync(claudeMd)) return false;
-    if (fs16.existsSync(agentsMd)) return false;
-    this.atomicWrite(agentsMd, fs16.readFileSync(claudeMd, "utf8"));
+    if (!fs19.existsSync(claudeMd)) return false;
+    if (fs19.existsSync(agentsMd)) return false;
+    this.atomicWrite(agentsMd, fs19.readFileSync(claudeMd, "utf8"));
     return true;
   }
   /**
@@ -52349,22 +52363,22 @@ var PersonaStore = class {
     };
   }
   codexSandboxSettingsPath(personaId2) {
-    return path20.join(this.personaDir(personaId2), ".clawd", "codex-sandbox.json");
+    return path22.join(this.personaDir(personaId2), ".clawd", "codex-sandbox.json");
   }
   /** 读 codex-sandbox.json；不存在/损坏 → null。 */
   readCodexSandboxSettings(personaId2) {
     const p3 = this.codexSandboxSettingsPath(personaId2);
-    if (!fs16.existsSync(p3)) return null;
+    if (!fs19.existsSync(p3)) return null;
     try {
-      return CodexSandboxSettingsSchema.parse(JSON.parse(fs16.readFileSync(p3, "utf8")));
+      return CodexSandboxSettingsSchema.parse(JSON.parse(fs19.readFileSync(p3, "utf8")));
     } catch {
       return null;
     }
   }
   /** 覆盖写 codex-sandbox.json（seed/migrate 用）。 */
   writeCodexSandboxSettings(personaId2, settings) {
-    const dir = path20.join(this.personaDir(personaId2), ".clawd");
-    fs16.mkdirSync(dir, { recursive: true });
+    const dir = path22.join(this.personaDir(personaId2), ".clawd");
+    fs19.mkdirSync(dir, { recursive: true });
     this.atomicWrite(this.codexSandboxSettingsPath(personaId2), JSON.stringify(settings, null, 2));
   }
   writeMeta(persona) {
@@ -52372,8 +52386,8 @@ var PersonaStore = class {
   }
   read(personaId2) {
     const p3 = this.metaPath(personaId2);
-    if (!fs16.existsSync(p3)) return null;
-    const raw = JSON.parse(fs16.readFileSync(p3, "utf8"));
+    if (!fs19.existsSync(p3)) return null;
+    const raw = JSON.parse(fs19.readFileSync(p3, "utf8"));
     if (raw && typeof raw === "object" && "tokenMap" in raw) {
       delete raw.tokenMap;
       this.atomicWrite(p3, JSON.stringify(raw, null, 2));
@@ -52381,43 +52395,43 @@ var PersonaStore = class {
     return PersonaFileSchema.parse(raw);
   }
   has(personaId2) {
-    return fs16.existsSync(this.metaPath(personaId2));
+    return fs19.existsSync(this.metaPath(personaId2));
   }
   readPersonality(personaId2) {
     const claudeMd = this.claudeMdPath(personaId2);
-    if (fs16.existsSync(claudeMd)) return fs16.readFileSync(claudeMd, "utf8");
+    if (fs19.existsSync(claudeMd)) return fs19.readFileSync(claudeMd, "utf8");
     const agentsMd = this.agentsMdPath(personaId2);
-    if (fs16.existsSync(agentsMd)) return fs16.readFileSync(agentsMd, "utf8");
+    if (fs19.existsSync(agentsMd)) return fs19.readFileSync(agentsMd, "utf8");
     return null;
   }
   /** 缺失或读/解析失败返回 null；owner 手编的内容不强校验形状。 */
   readSandboxSettings(personaId2) {
     const p3 = this.sandboxSettingsPath(personaId2);
-    if (!fs16.existsSync(p3)) return null;
+    if (!fs19.existsSync(p3)) return null;
     try {
-      return JSON.parse(fs16.readFileSync(p3, "utf8"));
+      return JSON.parse(fs19.readFileSync(p3, "utf8"));
     } catch {
       return null;
     }
   }
   /** Persona 私有 skills 目录路径：<personaDir>/.claude/skills */
   skillsDir(personaId2) {
-    return path20.join(this.personaDir(personaId2), ".claude", "skills");
+    return path22.join(this.personaDir(personaId2), ".claude", "skills");
   }
   /**
    * Claude Code 项目级 settings 路径：`<personaDir>/.claude/settings.json`。
    * 这里只读 `enabledPlugins` 字段，由 owner 通过 CC `/plugin` 之类命令维护，daemon 不写。
    */
   claudeSettingsPath(personaId2) {
-    return path20.join(this.personaDir(personaId2), ".claude", "settings.json");
+    return path22.join(this.personaDir(personaId2), ".claude", "settings.json");
   }
   /** 取 enabledPlugins 中非空且 value === true 的 id；文件缺失、读/解析失败或字段非对象均返回 []。 */
   readEnabledPlugins(personaId2) {
     const p3 = this.claudeSettingsPath(personaId2);
-    if (!fs16.existsSync(p3)) return [];
+    if (!fs19.existsSync(p3)) return [];
     let raw;
     try {
-      raw = JSON.parse(fs16.readFileSync(p3, "utf8"));
+      raw = JSON.parse(fs19.readFileSync(p3, "utf8"));
     } catch {
       return [];
     }
@@ -52431,22 +52445,22 @@ var PersonaStore = class {
     return out;
   }
   list() {
-    if (!fs16.existsSync(this.root)) return [];
-    return fs16.readdirSync(this.root).filter((name) => {
-      return fs16.existsSync(path20.join(this.root, name, ".clawd", "persona.json"));
+    if (!fs19.existsSync(this.root)) return [];
+    return fs19.readdirSync(this.root).filter((name) => {
+      return fs19.existsSync(path22.join(this.root, name, ".clawd", "persona.json"));
     });
   }
   remove(personaId2) {
     const dir = this.personaDir(personaId2);
-    if (fs16.existsSync(dir)) fs16.rmSync(dir, { recursive: true, force: true });
+    if (fs19.existsSync(dir)) fs19.rmSync(dir, { recursive: true, force: true });
   }
   personaDirPath(personaId2) {
     return this.personaDir(personaId2);
   }
   atomicWrite(file, content) {
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
-    fs16.writeFileSync(tmp, content, { mode: 384 });
-    fs16.renameSync(tmp, file);
+    fs19.writeFileSync(tmp, content, { mode: 384 });
+    fs19.renameSync(tmp, file);
   }
 };
 
@@ -52496,8 +52510,8 @@ var PersonaRegistry = class {
 };
 
 // src/persona/seed.ts
-var fs17 = __toESM(require("fs"), 1);
-var path21 = __toESM(require("path"), 1);
+var fs20 = __toESM(require("fs"), 1);
+var path23 = __toESM(require("path"), 1);
 var import_node_url = require("url");
 init_protocol();
 var import_meta = {};
@@ -52664,24 +52678,24 @@ function bundleSiblingFromArgv(argv1, sibling) {
   if (!argv1) return null;
   let real = argv1;
   try {
-    real = fs17.realpathSync(argv1);
+    real = fs20.realpathSync(argv1);
   } catch {
   }
-  return path21.resolve(path21.dirname(real), sibling);
+  return path23.resolve(path23.dirname(real), sibling);
 }
 function findDefaultsRoot(logger) {
   const candidates = [];
   try {
-    const here = path21.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
-    candidates.push(path21.resolve(here, "defaults"));
-    candidates.push(path21.resolve(here, "persona-defaults"));
+    const here = path23.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
+    candidates.push(path23.resolve(here, "defaults"));
+    candidates.push(path23.resolve(here, "persona-defaults"));
   } catch {
   }
   const fromArgv = bundleSiblingFromArgv(process.argv[1], "persona-defaults");
   if (fromArgv) candidates.push(fromArgv);
   for (const c2 of candidates) {
     try {
-      if (fs17.statSync(c2).isDirectory()) {
+      if (fs20.statSync(c2).isDirectory()) {
         logger?.info("persona.defaults-root.resolved", { root: c2 });
         return c2;
       }
@@ -52698,8 +52712,8 @@ function seedDefaultPersonas(args) {
       args.logger.info("persona.seed.skip", { personaId: entry.personaId, reason: "exists" });
       continue;
     }
-    const bundleDir = path21.join(args.defaultsRoot, entry.personaId);
-    if (!fs17.existsSync(bundleDir)) {
+    const bundleDir = path23.join(args.defaultsRoot, entry.personaId);
+    if (!fs20.existsSync(bundleDir)) {
       args.logger.warn("persona.seed.skip", {
         personaId: entry.personaId,
         reason: "bundle-missing",
@@ -52707,8 +52721,8 @@ function seedDefaultPersonas(args) {
       });
       continue;
     }
-    const claudeMdPath = path21.join(bundleDir, "CLAUDE.md");
-    if (!fs17.existsSync(claudeMdPath)) {
+    const claudeMdPath = path23.join(bundleDir, "CLAUDE.md");
+    if (!fs20.existsSync(claudeMdPath)) {
       args.logger.warn("persona.seed.skip", {
         personaId: entry.personaId,
         reason: "no-CLAUDE.md",
@@ -52716,7 +52730,7 @@ function seedDefaultPersonas(args) {
       });
       continue;
     }
-    const personality = fs17.readFileSync(claudeMdPath, "utf8");
+    const personality = fs20.readFileSync(claudeMdPath, "utf8");
     const now = Date.now();
     const persona = {
       personaId: entry.personaId,
@@ -52743,51 +52757,51 @@ function seedDefaultPersonas(args) {
   }
 }
 function skipNodeModulesUnder(srcRoot) {
-  return (src) => !path21.relative(srcRoot, src).split(path21.sep).includes("node_modules");
+  return (src) => !path23.relative(srcRoot, src).split(path23.sep).includes("node_modules");
 }
 function copyBundleExtras(srcDir, dstDir) {
-  for (const entry of fs17.readdirSync(srcDir, { withFileTypes: true })) {
+  for (const entry of fs20.readdirSync(srcDir, { withFileTypes: true })) {
     if (entry.name === "CLAUDE.md" || entry.name === ".clawd") continue;
-    const srcPath = path21.join(srcDir, entry.name);
-    const dstPath = path21.join(dstDir, entry.name);
+    const srcPath = path23.join(srcDir, entry.name);
+    const dstPath = path23.join(dstDir, entry.name);
     if (entry.isDirectory()) {
-      fs17.cpSync(srcPath, dstPath, { recursive: true, dereference: true, filter: skipNodeModulesUnder(srcPath) });
+      fs20.cpSync(srcPath, dstPath, { recursive: true, dereference: true, filter: skipNodeModulesUnder(srcPath) });
     } else if (entry.isFile()) {
-      fs17.copyFileSync(srcPath, dstPath);
+      fs20.copyFileSync(srcPath, dstPath);
     }
   }
 }
 var DAEMON_MANAGED_PATHS = ["extension-kit", "CLAUDE.md", ".mcp.json", ".claude/skills", ".claude/agents", "mcp"];
 function replaceManagedPath(src, dst) {
-  if (!fs17.statSync(src).isDirectory()) {
-    fs17.mkdirSync(path21.dirname(dst), { recursive: true });
-    fs17.rmSync(dst, { recursive: true, force: true });
-    fs17.cpSync(src, dst, { dereference: true });
+  if (!fs20.statSync(src).isDirectory()) {
+    fs20.mkdirSync(path23.dirname(dst), { recursive: true });
+    fs20.rmSync(dst, { recursive: true, force: true });
+    fs20.cpSync(src, dst, { dereference: true });
     return;
   }
-  fs17.mkdirSync(dst, { recursive: true });
-  for (const e of fs17.readdirSync(src, { withFileTypes: true })) {
+  fs20.mkdirSync(dst, { recursive: true });
+  for (const e of fs20.readdirSync(src, { withFileTypes: true })) {
     if (e.name === "node_modules") continue;
-    const child = path21.join(dst, e.name);
-    fs17.rmSync(child, { recursive: true, force: true });
-    fs17.cpSync(path21.join(src, e.name), child, { recursive: true, dereference: true });
+    const child = path23.join(dst, e.name);
+    fs20.rmSync(child, { recursive: true, force: true });
+    fs20.cpSync(path23.join(src, e.name), child, { recursive: true, dereference: true });
   }
 }
 function refreshDaemonManagedDirs(args) {
   const entries = args.entries ?? DEFAULT_PERSONAS;
   for (const entry of entries) {
-    const bundleDir = path21.join(args.defaultsRoot, entry.personaId);
-    if (!fs17.existsSync(bundleDir)) continue;
+    const bundleDir = path23.join(args.defaultsRoot, entry.personaId);
+    if (!fs20.existsSync(bundleDir)) continue;
     const personaDir = args.store.personaDirPath(entry.personaId);
-    if (!fs17.existsSync(personaDir)) continue;
+    if (!fs20.existsSync(personaDir)) continue;
     for (const relPath of DAEMON_MANAGED_PATHS) {
-      const srcPath = path21.join(bundleDir, relPath);
-      if (!fs17.existsSync(srcPath)) continue;
-      const dstPath = path21.join(personaDir, relPath);
+      const srcPath = path23.join(bundleDir, relPath);
+      if (!fs20.existsSync(srcPath)) continue;
+      const dstPath = path23.join(personaDir, relPath);
       try {
         replaceManagedPath(srcPath, dstPath);
         if (relPath === "CLAUDE.md") {
-          replaceManagedPath(srcPath, path21.join(personaDir, "AGENTS.md"));
+          replaceManagedPath(srcPath, path23.join(personaDir, "AGENTS.md"));
         }
         args.logger.info("persona.refresh.synced", {
           personaId: entry.personaId,
@@ -52811,12 +52825,12 @@ function migratePersonalityOverlay(args) {
   for (const entry of entries) {
     const personaId2 = entry.personaId;
     try {
-      if (fs17.existsSync(args.store.personalityLocalPath(personaId2))) continue;
-      const bundleClaudeMd = path21.join(args.defaultsRoot, personaId2, "CLAUDE.md");
-      if (!fs17.existsSync(bundleClaudeMd)) continue;
+      if (fs20.existsSync(args.store.personalityLocalPath(personaId2))) continue;
+      const bundleClaudeMd = path23.join(args.defaultsRoot, personaId2, "CLAUDE.md");
+      if (!fs20.existsSync(bundleClaudeMd)) continue;
       const current = args.store.readPersonality(personaId2);
       if (current === null) continue;
-      const bundle = fs17.readFileSync(bundleClaudeMd, "utf8");
+      const bundle = fs20.readFileSync(bundleClaudeMd, "utf8");
       if (current === bundle) continue;
       if (!current.startsWith(bundle)) continue;
       const tail2 = current.slice(bundle.length).trim();
@@ -52915,7 +52929,7 @@ function migrateSandboxAllowRead(args) {
   for (const personaId2 of args.store.list()) {
     try {
       const readPath = tildePath(args.store.personaDirPath(personaId2));
-      if (!fs17.existsSync(args.store.sandboxSettingsPath(personaId2))) {
+      if (!fs20.existsSync(args.store.sandboxSettingsPath(personaId2))) {
         args.store.writeSandboxSettings(personaId2, buildGuestSettingsV1());
         n2++;
         continue;
@@ -52958,13 +52972,13 @@ var PERSONA_BUILDER_TOMBSTONE = `${PERSONA_BUILDER_TOMBSTONE_MARKER}
 function containsAnyFile(dir) {
   let entries;
   try {
-    entries = fs17.readdirSync(dir, { withFileTypes: true });
+    entries = fs20.readdirSync(dir, { withFileTypes: true });
   } catch {
     return false;
   }
   for (const e of entries) {
     if (e.isDirectory()) {
-      if (containsAnyFile(path21.join(dir, e.name))) return true;
+      if (containsAnyFile(path23.join(dir, e.name))) return true;
     } else {
       return true;
     }
@@ -52973,9 +52987,9 @@ function containsAnyFile(dir) {
 }
 function retirePersonaBuilder(args) {
   const dir = args.store.personaDirPath(PERSONA_BUILDER_ID);
-  if (!fs17.existsSync(dir)) return;
+  if (!fs20.existsSync(dir)) return;
   try {
-    const used = containsAnyFile(path21.join(dir, ".clawd", "sessions")) || containsAnyFile(path21.join(dir, ".claude", "skills")) || containsAnyFile(path21.join(dir, "projects"));
+    const used = containsAnyFile(path23.join(dir, ".clawd", "sessions")) || containsAnyFile(path23.join(dir, ".claude", "skills")) || containsAnyFile(path23.join(dir, "projects"));
     if (!used) {
       args.store.remove(PERSONA_BUILDER_ID);
       args.logger.info("persona.retire-builder.removed", { personaId: PERSONA_BUILDER_ID });
@@ -52983,10 +52997,10 @@ function retirePersonaBuilder(args) {
     }
     let wrote = false;
     for (const name of ["CLAUDE.md", "AGENTS.md"]) {
-      const p3 = path21.join(dir, name);
-      const cur = fs17.existsSync(p3) ? fs17.readFileSync(p3, "utf8") : null;
+      const p3 = path23.join(dir, name);
+      const cur = fs20.existsSync(p3) ? fs20.readFileSync(p3, "utf8") : null;
       if (cur?.startsWith(PERSONA_BUILDER_TOMBSTONE_MARKER)) continue;
-      fs17.writeFileSync(p3, PERSONA_BUILDER_TOMBSTONE);
+      fs20.writeFileSync(p3, PERSONA_BUILDER_TOMBSTONE);
       wrote = true;
     }
     if (wrote) args.logger.info("persona.retire-builder.tombstoned", { personaId: PERSONA_BUILDER_ID });
@@ -52999,9 +53013,9 @@ function retirePersonaBuilder(args) {
 }
 
 // src/skills/scanner.ts
-var import_node_fs14 = __toESM(require("fs"), 1);
-var import_node_os9 = __toESM(require("os"), 1);
-var import_node_path15 = __toESM(require("path"), 1);
+var import_node_fs17 = __toESM(require("fs"), 1);
+var import_node_os11 = __toESM(require("os"), 1);
+var import_node_path17 = __toESM(require("path"), 1);
 
 // src/skills/frontmatter.ts
 var STRIP_QUOTES = /^["']|["']$/g;
@@ -53110,7 +53124,7 @@ function parseDescription(content) {
 }
 function isDirLikeSync(p3) {
   try {
-    return import_node_fs14.default.statSync(p3).isDirectory();
+    return import_node_fs17.default.statSync(p3).isDirectory();
   } catch {
     return false;
   }
@@ -53118,19 +53132,19 @@ function isDirLikeSync(p3) {
 function scanSkillDir(dir, source, seen, out, pluginName) {
   let entries;
   try {
-    entries = import_node_fs14.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs17.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
-    const entryPath = import_node_path15.default.join(dir, ent.name);
+    const entryPath = import_node_path17.default.join(dir, ent.name);
     if (!ent.isDirectory() && !(ent.isSymbolicLink() && isDirLikeSync(entryPath))) continue;
     let content;
     try {
-      content = import_node_fs14.default.readFileSync(import_node_path15.default.join(entryPath, "SKILL.md"), "utf8");
+      content = import_node_fs17.default.readFileSync(import_node_path17.default.join(entryPath, "SKILL.md"), "utf8");
     } catch {
       try {
-        content = import_node_fs14.default.readFileSync(import_node_path15.default.join(entryPath, "skill.md"), "utf8");
+        content = import_node_fs17.default.readFileSync(import_node_path17.default.join(entryPath, "skill.md"), "utf8");
       } catch {
         continue;
       }
@@ -53154,26 +53168,26 @@ function listSkillsForDir(dir, source) {
 function scanCommandDir(dir, source, seen, out, pluginName) {
   let entries;
   try {
-    entries = import_node_fs14.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs17.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
-    const entryPath = import_node_path15.default.join(dir, ent.name);
+    const entryPath = import_node_path17.default.join(dir, ent.name);
     if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync(entryPath)) {
       const ns = ent.name;
       let subEntries;
       try {
-        subEntries = import_node_fs14.default.readdirSync(entryPath, { withFileTypes: true });
+        subEntries = import_node_fs17.default.readdirSync(entryPath, { withFileTypes: true });
       } catch {
         continue;
       }
       for (const se2 of subEntries) {
         if (!se2.name.endsWith(".md")) continue;
-        const sePath = import_node_path15.default.join(entryPath, se2.name);
+        const sePath = import_node_path17.default.join(entryPath, se2.name);
         let content;
         try {
-          content = import_node_fs14.default.readFileSync(sePath, "utf8");
+          content = import_node_fs17.default.readFileSync(sePath, "utf8");
         } catch {
           continue;
         }
@@ -53190,7 +53204,7 @@ function scanCommandDir(dir, source, seen, out, pluginName) {
     } else if (ent.name.endsWith(".md")) {
       let content;
       try {
-        content = import_node_fs14.default.readFileSync(entryPath, "utf8");
+        content = import_node_fs17.default.readFileSync(entryPath, "utf8");
       } catch {
         continue;
       }
@@ -53206,10 +53220,10 @@ function scanCommandDir(dir, source, seen, out, pluginName) {
   }
 }
 function readInstalledPlugins(home) {
-  const file = import_node_path15.default.join(home, ".claude", "plugins", "installed_plugins.json");
+  const file = import_node_path17.default.join(home, ".claude", "plugins", "installed_plugins.json");
   let raw;
   try {
-    raw = import_node_fs14.default.readFileSync(file, "utf8");
+    raw = import_node_fs17.default.readFileSync(file, "utf8");
   } catch {
     return [];
   }
@@ -53234,7 +53248,7 @@ var SkillsScanner = class {
   home;
   extraPluginRoots;
   constructor(opts = {}) {
-    this.home = opts.home ?? import_node_os9.default.homedir();
+    this.home = opts.home ?? import_node_os11.default.homedir();
     this.extraPluginRoots = opts.extraPluginRoots ?? [];
   }
   /** First-seen names win: builtins, global sources, project sources, then plugins. */
@@ -53251,14 +53265,14 @@ var SkillsScanner = class {
       });
     }
     const fsBlock = [];
-    scanSkillDir(import_node_path15.default.join(this.home, ".claude", "skills"), "global", seen, fsBlock);
-    scanCommandDir(import_node_path15.default.join(this.home, ".claude", "commands"), "global", seen, fsBlock);
-    scanSkillDir(import_node_path15.default.join(args.cwd, ".claude", "skills"), "project", seen, fsBlock);
-    scanCommandDir(import_node_path15.default.join(args.cwd, ".claude", "commands"), "project", seen, fsBlock);
+    scanSkillDir(import_node_path17.default.join(this.home, ".claude", "skills"), "global", seen, fsBlock);
+    scanCommandDir(import_node_path17.default.join(this.home, ".claude", "commands"), "global", seen, fsBlock);
+    scanSkillDir(import_node_path17.default.join(args.cwd, ".claude", "skills"), "project", seen, fsBlock);
+    scanCommandDir(import_node_path17.default.join(args.cwd, ".claude", "commands"), "project", seen, fsBlock);
     const plugins = [...readInstalledPlugins(this.home), ...this.extraPluginRoots];
     for (const { name, root } of plugins) {
-      scanSkillDir(import_node_path15.default.join(root, "skills"), "plugin", seen, fsBlock, name);
-      scanCommandDir(import_node_path15.default.join(root, "commands"), "plugin", seen, fsBlock, name);
+      scanSkillDir(import_node_path17.default.join(root, "skills"), "plugin", seen, fsBlock, name);
+      scanCommandDir(import_node_path17.default.join(root, "commands"), "plugin", seen, fsBlock, name);
     }
     fsBlock.sort((a2, b3) => a2.name < b3.name ? -1 : a2.name > b3.name ? 1 : 0);
     return [...builtinBlock, ...fsBlock];
@@ -53371,12 +53385,12 @@ var PersonaManager = class {
 };
 
 // src/share-md-viewer/load.ts
-var import_node_fs16 = __toESM(require("fs"), 1);
-var import_node_path16 = __toESM(require("path"), 1);
+var import_node_fs19 = __toESM(require("fs"), 1);
+var import_node_path18 = __toESM(require("path"), 1);
 var import_node_url2 = require("url");
 
 // src/share-md-viewer/asset-loader.ts
-var import_node_fs15 = __toESM(require("fs"), 1);
+var import_node_fs18 = __toESM(require("fs"), 1);
 function htmlEscape(s2) {
   return s2.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
 }
@@ -53384,12 +53398,12 @@ function createViewerAssetLoader(opts) {
   let viewerTemplate;
   let errorTemplate;
   try {
-    viewerTemplate = import_node_fs15.default.readFileSync(opts.viewerHtmlPath, "utf8");
+    viewerTemplate = import_node_fs18.default.readFileSync(opts.viewerHtmlPath, "utf8");
   } catch (err) {
     throw new Error(`viewer asset not found at ${opts.viewerHtmlPath}: ${err.message}`);
   }
   try {
-    errorTemplate = import_node_fs15.default.readFileSync(opts.errorHtmlPath, "utf8");
+    errorTemplate = import_node_fs18.default.readFileSync(opts.errorHtmlPath, "utf8");
   } catch (err) {
     throw new Error(`viewer error asset not found at ${opts.errorHtmlPath}: ${err.message}`);
   }
@@ -53408,25 +53422,25 @@ var import_meta2 = {};
 function tryLoadViewerAssets(logger) {
   const candidates = [];
   try {
-    const here = import_node_path16.default.dirname((0, import_node_url2.fileURLToPath)(import_meta2.url));
+    const here = import_node_path18.default.dirname((0, import_node_url2.fileURLToPath)(import_meta2.url));
     candidates.push(here);
-    candidates.push(import_node_path16.default.resolve(here, ".."));
-    candidates.push(import_node_path16.default.resolve(here, "..", "..", "dist"));
+    candidates.push(import_node_path18.default.resolve(here, ".."));
+    candidates.push(import_node_path18.default.resolve(here, "..", "..", "dist"));
   } catch {
   }
   if (process.argv[1]) {
     let real = process.argv[1];
     try {
-      real = import_node_fs16.default.realpathSync(process.argv[1]);
+      real = import_node_fs19.default.realpathSync(process.argv[1]);
     } catch {
     }
-    candidates.push(import_node_path16.default.dirname(real));
+    candidates.push(import_node_path18.default.dirname(real));
   }
   for (const root of candidates) {
-    const viewerHtmlPath = import_node_path16.default.join(root, "share-md-viewer.html");
-    const errorHtmlPath = import_node_path16.default.join(root, "share-md-viewer-error.html");
+    const viewerHtmlPath = import_node_path18.default.join(root, "share-md-viewer.html");
+    const errorHtmlPath = import_node_path18.default.join(root, "share-md-viewer-error.html");
     try {
-      if (import_node_fs16.default.statSync(viewerHtmlPath).isFile() && import_node_fs16.default.statSync(errorHtmlPath).isFile()) {
+      if (import_node_fs19.default.statSync(viewerHtmlPath).isFile() && import_node_fs19.default.statSync(errorHtmlPath).isFile()) {
         logger?.info("share-md-viewer.assets-root.resolved", { root });
         return createViewerAssetLoader({ viewerHtmlPath, errorHtmlPath });
       }
@@ -53441,25 +53455,25 @@ function tryLoadViewerAssets(logger) {
 }
 
 // src/dashboard/load.ts
-var import_node_fs17 = __toESM(require("fs"), 1);
-var import_node_path17 = __toESM(require("path"), 1);
+var import_node_fs20 = __toESM(require("fs"), 1);
+var import_node_path19 = __toESM(require("path"), 1);
 var import_node_url3 = require("url");
 init_protocol();
 var import_meta3 = {};
 function candidateRoots() {
   const roots = [];
   try {
-    const here = import_node_path17.default.dirname((0, import_node_url3.fileURLToPath)(import_meta3.url));
-    roots.push(here, import_node_path17.default.resolve(here, ".."), import_node_path17.default.resolve(here, "..", "..", "dist"));
+    const here = import_node_path19.default.dirname((0, import_node_url3.fileURLToPath)(import_meta3.url));
+    roots.push(here, import_node_path19.default.resolve(here, ".."), import_node_path19.default.resolve(here, "..", "..", "dist"));
   } catch {
   }
   if (process.argv[1]) {
     let real = process.argv[1];
     try {
-      real = import_node_fs17.default.realpathSync(process.argv[1]);
+      real = import_node_fs20.default.realpathSync(process.argv[1]);
     } catch {
     }
-    roots.push(import_node_path17.default.dirname(real));
+    roots.push(import_node_path19.default.dirname(real));
   }
   return roots;
 }
@@ -53467,10 +53481,10 @@ function loadDashboardPages(logger, roots = candidateRoots()) {
   const pages = /* @__PURE__ */ new Map();
   for (const page of DASHBOARD_PAGES) {
     for (const root of roots) {
-      const file = import_node_path17.default.join(root, `${page}.html`);
+      const file = import_node_path19.default.join(root, `${page}.html`);
       try {
-        if (import_node_fs17.default.statSync(file).isFile()) {
-          pages.set(page, import_node_fs17.default.readFileSync(file, "utf8"));
+        if (import_node_fs20.default.statSync(file).isFile()) {
+          pages.set(page, import_node_fs20.default.readFileSync(file, "utf8"));
           logger?.info("dashboard.page-asset.resolved", { page, root });
           break;
         }
@@ -53486,10 +53500,10 @@ function loadDashboardPages(logger, roots = candidateRoots()) {
 init_protocol();
 
 // src/dashboard/sign.ts
-var import_node_crypto7 = __toESM(require("crypto"), 1);
+var import_node_crypto8 = __toESM(require("crypto"), 1);
 
 // src/attachment/sign-url.ts
-var import_node_crypto6 = __toESM(require("crypto"), 1);
+var import_node_crypto7 = __toESM(require("crypto"), 1);
 var HMAC_ALGO = "sha256";
 function base64urlEncode(buf) {
   const b3 = typeof buf === "string" ? Buffer.from(buf, "utf8") : buf;
@@ -53507,7 +53521,7 @@ function decodeAbsPathFromUrl(encoded) {
 var DOMAIN_PREFIX = "clawd-attach-v1|";
 function computeSig(secret, absPath, e) {
   const msg = e === null ? `${DOMAIN_PREFIX}${absPath}` : `${DOMAIN_PREFIX}${absPath}|${e}`;
-  return import_node_crypto6.default.createHmac(HMAC_ALGO, secret).update(msg).digest();
+  return import_node_crypto7.default.createHmac(HMAC_ALGO, secret).update(msg).digest();
 }
 function signUrlParts(secret, absPath, ttlSeconds, now = Date.now) {
   const e = ttlSeconds === null ? null : Math.floor(now() / 1e3) + ttlSeconds;
@@ -53542,7 +53556,7 @@ function verifySignedUrl(secret, absPath, eRaw, s2, now = Date.now) {
   if (provided.length !== expected.length) {
     return { ok: false, code: "BAD_SIG" };
   }
-  if (!import_node_crypto6.default.timingSafeEqual(provided, expected)) {
+  if (!import_node_crypto7.default.timingSafeEqual(provided, expected)) {
     return { ok: false, code: "BAD_SIG" };
   }
   if (e !== null && now() / 1e3 > e) {
@@ -53570,7 +53584,7 @@ function resolveSignedFileUrl(secret, url, now = Date.now) {
 
 // src/dashboard/sign.ts
 var DOMAIN_PREFIX2 = "clawd-dashboard-v1|";
-var sigOf = (secret, page, e) => import_node_crypto7.default.createHmac("sha256", secret).update(`${DOMAIN_PREFIX2}${page}|${e}`).digest();
+var sigOf = (secret, page, e) => import_node_crypto8.default.createHmac("sha256", secret).update(`${DOMAIN_PREFIX2}${page}|${e}`).digest();
 function signDashboardLink(secret, page, ttlSeconds, now = Date.now) {
   const e = Math.floor(now() / 1e3) + ttlSeconds;
   return { e, s: base64urlEncode(sigOf(secret, page, e)) };
@@ -53584,7 +53598,7 @@ function verifyDashboardLink(secret, page, eRaw, s2, now = Date.now) {
   const e = Number(eRaw);
   const want = sigOf(secret, page, e);
   const got = base64urlDecodeBuf(s2);
-  if (got.length !== want.length || !import_node_crypto7.default.timingSafeEqual(got, want)) return { ok: false, code: "BAD_SIG" };
+  if (got.length !== want.length || !import_node_crypto8.default.timingSafeEqual(got, want)) return { ok: false, code: "BAD_SIG" };
   if (Math.floor(now() / 1e3) > e) return { ok: false, code: "EXPIRED" };
   return { ok: true };
 }
@@ -54056,30 +54070,30 @@ function createDashboardData(deps) {
 }
 
 // src/share-ui/load.ts
-var import_node_fs19 = __toESM(require("fs"), 1);
-var import_node_path19 = __toESM(require("path"), 1);
+var import_node_fs22 = __toESM(require("fs"), 1);
+var import_node_path21 = __toESM(require("path"), 1);
 var import_node_url4 = require("url");
 
 // src/share-ui/asset-loader.ts
-var import_node_fs18 = __toESM(require("fs"), 1);
-var import_node_path18 = __toESM(require("path"), 1);
+var import_node_fs21 = __toESM(require("fs"), 1);
+var import_node_path20 = __toESM(require("path"), 1);
 function createShareUiAssetLoader(opts) {
   let indexHtml;
   try {
-    indexHtml = import_node_fs18.default.readFileSync(opts.indexHtmlPath, "utf8");
+    indexHtml = import_node_fs21.default.readFileSync(opts.indexHtmlPath, "utf8");
   } catch (err) {
     throw new Error(`share-ui index.html not found at ${opts.indexHtmlPath}: ${err.message}`);
   }
-  const assetsDir = import_node_path18.default.resolve(opts.assetsDir);
+  const assetsDir = import_node_path20.default.resolve(opts.assetsDir);
   return {
     renderIndexHtml() {
       return indexHtml;
     },
     resolveAssetPath(rel) {
-      const resolved = import_node_path18.default.resolve(assetsDir, rel);
-      if (resolved !== assetsDir && !resolved.startsWith(assetsDir + import_node_path18.default.sep)) return null;
+      const resolved = import_node_path20.default.resolve(assetsDir, rel);
+      if (resolved !== assetsDir && !resolved.startsWith(assetsDir + import_node_path20.default.sep)) return null;
       try {
-        if (import_node_fs18.default.statSync(resolved).isFile()) return resolved;
+        if (import_node_fs21.default.statSync(resolved).isFile()) return resolved;
       } catch {
       }
       return null;
@@ -54093,10 +54107,10 @@ function bundleDirFromArgv(argv1) {
   if (!argv1) return null;
   let real = argv1;
   try {
-    real = import_node_fs19.default.realpathSync(argv1);
+    real = import_node_fs22.default.realpathSync(argv1);
   } catch {
   }
-  return import_node_path19.default.dirname(real);
+  return import_node_path21.default.dirname(real);
 }
 function tryLoadShareUi(logger) {
   return tryLoadUi("share-ui", "guest.html", logger);
@@ -54104,20 +54118,20 @@ function tryLoadShareUi(logger) {
 function tryLoadUi(directory, entry, logger) {
   const candidates = [];
   try {
-    const here = import_node_path19.default.dirname((0, import_node_url4.fileURLToPath)(import_meta4.url));
+    const here = import_node_path21.default.dirname((0, import_node_url4.fileURLToPath)(import_meta4.url));
     candidates.push(here);
-    candidates.push(import_node_path19.default.resolve(here, ".."));
-    candidates.push(import_node_path19.default.resolve(here, "..", "..", "dist"));
+    candidates.push(import_node_path21.default.resolve(here, ".."));
+    candidates.push(import_node_path21.default.resolve(here, "..", "..", "dist"));
   } catch {
   }
   const argvDir = bundleDirFromArgv(process.argv[1]);
   if (argvDir) candidates.push(argvDir);
   for (const root of candidates) {
-    const uiDir = import_node_path19.default.join(root, directory);
-    const indexHtmlPath = import_node_path19.default.join(uiDir, entry);
-    const assetsDir = import_node_path19.default.join(uiDir, "assets");
+    const uiDir = import_node_path21.default.join(root, directory);
+    const indexHtmlPath = import_node_path21.default.join(uiDir, entry);
+    const assetsDir = import_node_path21.default.join(uiDir, "assets");
     try {
-      if (import_node_fs19.default.statSync(indexHtmlPath).isFile() && import_node_fs19.default.statSync(assetsDir).isDirectory()) {
+      if (import_node_fs22.default.statSync(indexHtmlPath).isFile() && import_node_fs22.default.statSync(assetsDir).isDirectory()) {
         logger?.info(`${directory}.assets-root.resolved`, { root: uiDir });
         return createShareUiAssetLoader({ indexHtmlPath, assetsDir });
       }
@@ -54137,21 +54151,21 @@ function tryLoadOwnerUi(logger) {
 }
 
 // src/owner-web/session-store.ts
-var import_node_crypto8 = require("crypto");
-var import_node_fs20 = __toESM(require("fs"), 1);
-var import_node_path20 = __toESM(require("path"), 1);
+var import_node_crypto9 = require("crypto");
+var import_node_fs23 = __toESM(require("fs"), 1);
+var import_node_path22 = __toESM(require("path"), 1);
 var WEB_SESSION_FILE = "web-sessions.json";
 var WEB_TOKEN_PREFIX = "cw_";
 var TICKET_TTL_MS = 6e4;
 var SESSION_TTL_MS = 7 * 24 * 36e5;
 var MAX_OUTSTANDING_TICKETS = 32;
 function digest(secret) {
-  return (0, import_node_crypto8.createHash)("sha256").update(secret).digest("hex");
+  return (0, import_node_crypto9.createHash)("sha256").update(secret).digest("hex");
 }
 function createWebSessionStore(opts) {
   const now = opts.now ?? Date.now;
-  const random = opts.randomToken ?? ((bytes) => (0, import_node_crypto8.randomBytes)(bytes).toString("base64url"));
-  const file = import_node_path20.default.join(opts.dataDir, WEB_SESSION_FILE);
+  const random = opts.randomToken ?? ((bytes) => (0, import_node_crypto9.randomBytes)(bytes).toString("base64url"));
+  const file = import_node_path22.default.join(opts.dataDir, WEB_SESSION_FILE);
   const tickets = /* @__PURE__ */ new Map();
   let sessions = /* @__PURE__ */ new Map();
   const live = (m3) => {
@@ -54159,7 +54173,7 @@ function createWebSessionStore(opts) {
     return new Map([...m3].filter(([, r2]) => r2.expiresAt > t2));
   };
   try {
-    const parsed = JSON.parse(import_node_fs20.default.readFileSync(file, "utf8"));
+    const parsed = JSON.parse(import_node_fs23.default.readFileSync(file, "utf8"));
     const entries = Object.entries(parsed.sessions ?? {}).filter(
       ([, r2]) => typeof r2?.origin === "string" && typeof r2?.expiresAt === "number"
     );
@@ -54167,14 +54181,14 @@ function createWebSessionStore(opts) {
   } catch {
   }
   const persist = (next) => {
-    import_node_fs20.default.mkdirSync(opts.dataDir, { recursive: true });
+    import_node_fs23.default.mkdirSync(opts.dataDir, { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
     try {
-      import_node_fs20.default.writeFileSync(tmp, JSON.stringify({ sessions: Object.fromEntries(next) }), { mode: 384 });
-      import_node_fs20.default.chmodSync(tmp, 384);
-      import_node_fs20.default.renameSync(tmp, file);
+      import_node_fs23.default.writeFileSync(tmp, JSON.stringify({ sessions: Object.fromEntries(next) }), { mode: 384 });
+      import_node_fs23.default.chmodSync(tmp, 384);
+      import_node_fs23.default.renameSync(tmp, file);
     } catch (err) {
-      import_node_fs20.default.rmSync(tmp, { force: true });
+      import_node_fs23.default.rmSync(tmp, { force: true });
       throw new Error(`web session persist failed: ${err.code ?? "unknown"}`);
     }
   };
@@ -54223,7 +54237,7 @@ function buildLaunchUrl(origin, issued) {
 }
 
 // src/visitor/visitor-token.ts
-var import_node_crypto9 = __toESM(require("crypto"), 1);
+var import_node_crypto10 = __toESM(require("crypto"), 1);
 
 // ../protocol/src/index.ts
 init_runtime();
@@ -54231,7 +54245,7 @@ init_runtime();
 // src/visitor/visitor-token.ts
 var DOMAIN_PREFIX3 = "clawd-visitor-v1|";
 function hmac(secret, body) {
-  return import_node_crypto9.default.createHmac("sha256", secret).update(`${DOMAIN_PREFIX3}${body}`).digest("base64url");
+  return import_node_crypto10.default.createHmac("sha256", secret).update(`${DOMAIN_PREFIX3}${body}`).digest("base64url");
 }
 function signVisitorToken(secret, payload) {
   const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
@@ -54244,7 +54258,7 @@ function verifyVisitorToken(secret, token, now) {
   const sig = token.slice(dot + 1);
   const expected = hmac(secret, body);
   if (sig.length !== expected.length) return { ok: false, reason: "BAD_SIGNATURE" };
-  if (!import_node_crypto9.default.timingSafeEqual(Buffer.from(sig), Buffer.from(expected))) {
+  if (!import_node_crypto10.default.timingSafeEqual(Buffer.from(sig), Buffer.from(expected))) {
     return { ok: false, reason: "BAD_SIGNATURE" };
   }
   let payload;
@@ -54291,20 +54305,20 @@ function buildVisitorLogin(deps) {
 }
 
 // src/visitor/visitor-store.ts
-var import_node_fs21 = __toESM(require("fs"), 1);
-var import_node_path21 = __toESM(require("path"), 1);
+var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_path23 = __toESM(require("path"), 1);
 function createVisitorStore(opts) {
-  const file = import_node_path21.default.join(opts.dir, "visitors.json");
+  const file = import_node_path23.default.join(opts.dir, "visitors.json");
   const read = () => {
     try {
-      return JSON.parse(import_node_fs21.default.readFileSync(file, "utf8"));
+      return JSON.parse(import_node_fs24.default.readFileSync(file, "utf8"));
     } catch {
       return [];
     }
   };
   const write = (rows) => {
-    import_node_fs21.default.mkdirSync(opts.dir, { recursive: true });
-    import_node_fs21.default.writeFileSync(file, JSON.stringify(rows, null, 2));
+    import_node_fs24.default.mkdirSync(opts.dir, { recursive: true });
+    import_node_fs24.default.writeFileSync(file, JSON.stringify(rows, null, 2));
   };
   return {
     upsert(r2) {
@@ -54676,23 +54690,6 @@ function stringValue(value) {
   return typeof value === "string" && value.length > 0 ? value : void 0;
 }
 
-// src/tools/first-byte.ts
-var VISIBLE = /* @__PURE__ */ new Set(["thinking", "tool_call", "text"]);
-function createFirstByteClock(now = Date.now) {
-  let at3 = null;
-  return {
-    reset() {
-      at3 = null;
-    },
-    see(events) {
-      if (at3 === null && events.some((e) => VISIBLE.has(e.kind))) at3 = now();
-    },
-    afterFirstByteMs() {
-      return at3 === null ? void 0 : Math.max(0, Math.round(now() - at3));
-    }
-  };
-}
-
 // src/tools/codex-app-server-params.ts
 init_protocol();
 function resolveApprovalPolicy(ctx) {
@@ -55620,7 +55617,7 @@ var CodexAdapter = class {
 };
 
 // src/tools/claude-tui.ts
-var import_node_crypto10 = require("crypto");
+var import_node_crypto11 = require("crypto");
 var import_node_fs28 = __toESM(require("fs"), 1);
 var import_node_os13 = __toESM(require("os"), 1);
 var import_node_path29 = __toESM(require("path"), 1);
@@ -56508,7 +56505,7 @@ function observeScreenIdle(surface, opts) {
   };
 }
 function shortHash(s2) {
-  return (0, import_node_crypto10.createHash)("sha1").update(s2).digest("hex").slice(0, 8);
+  return (0, import_node_crypto11.createHash)("sha1").update(s2).digest("hex").slice(0, 8);
 }
 function firstLineDiff(prev, next) {
   const p3 = prev.split("\n");
@@ -57600,7 +57597,7 @@ function resolveSourceJsonlPath(sourceFile, home) {
 // src/shift/store.ts
 var import_promises3 = __toESM(require("fs/promises"), 1);
 var import_node_path40 = __toESM(require("path"), 1);
-var import_node_crypto11 = require("crypto");
+var import_node_crypto12 = require("crypto");
 
 // src/shift/schedule.ts
 var import_cron_parser = __toESM(require_dist(), 1);
@@ -57704,7 +57701,7 @@ function createShiftStore(deps) {
     const shift = {
       ...input,
       schedule,
-      id: (0, import_node_crypto11.randomUUID)(),
+      id: (0, import_node_crypto12.randomUUID)(),
       createdAtMs: now,
       updatedAtMs: now,
       state: { nextRunAtMs },
@@ -58157,7 +58154,7 @@ function buildShiftInternalHandlers(deps) {
 }
 
 // src/handlers/deploy.ts
-var import_node_crypto15 = require("crypto");
+var import_node_crypto16 = require("crypto");
 var import_node_perf_hooks = require("perf_hooks");
 
 // src/deploy/persona-test.ts
@@ -58203,7 +58200,7 @@ function discoverPublisherTest(dir) {
 }
 
 // src/deploy/verified-release.ts
-var import_node_crypto13 = require("crypto");
+var import_node_crypto14 = require("crypto");
 
 // src/deploy/release-archive.ts
 var import_jszip = __toESM(require_lib3(), 1);
@@ -58681,7 +58678,7 @@ init_protocol();
 // src/deploy/deploy-file.ts
 var import_promises4 = __toESM(require("fs/promises"), 1);
 var import_node_path43 = __toESM(require("path"), 1);
-var import_node_crypto12 = require("crypto");
+var import_node_crypto13 = require("crypto");
 init_zod();
 init_protocol();
 
@@ -58926,7 +58923,7 @@ async function restoreDeployFileRaw(dir, raw) {
 }
 var emptyScanFile = () => ({ version: 4, scans: [], releases: [], promotions: [] });
 var LEGACY_SCAN_ID = "legacy";
-var newScanId = () => (0, import_node_crypto12.randomBytes)(4).toString("hex");
+var newScanId = () => (0, import_node_crypto13.randomBytes)(4).toString("hex");
 var z1 = DeployScanSchema.omit({ id: true, manifest: true }).extend({ releasedHead: DeployScanSchema.shape.head }).strict();
 function migrateV1(v1, manifest) {
   const { releasedHead, ...rest } = v1;
@@ -63286,6 +63283,26 @@ async function networkGit(exec, dir, auth, args, what) {
 async function gitPush(exec, dir, auth, refspec = "HEAD:refs/heads/integration") {
   await networkGit(exec, dir, auth, ["push", "-u", "origin", refspec], "\u63A8\u9001");
 }
+var REMOTE_INTEGRATION = "refs/remotes/origin/integration";
+async function fetchRemoteIntegration(exec, dir, auth) {
+  const origin = await git(exec, dir, ["remote", "get-url", "origin"]);
+  if (origin.spawnError || origin.code !== 0) return false;
+  const listed = await networkGit(exec, dir, auth, ["ls-remote", "--heads", "origin", "refs/heads/integration"], "\u68C0\u67E5\u8FDC\u7AEF\u6D4B\u8BD5\u5206\u652F");
+  if (!listed.trim()) return false;
+  await networkGit(exec, dir, auth, ["fetch", "origin", `+refs/heads/integration:${REMOTE_INTEGRATION}`], "\u8BFB\u53D6\u8FDC\u7AEF\u6D4B\u8BD5\u5206\u652F");
+  return true;
+}
+async function mergeRemoteIntegration(exec, dir) {
+  const before = await mustGit(exec, dir, ["rev-parse", "HEAD"], "\u8BFB\u53D6\u5185\u5BB9\u7248\u672C");
+  const identity = await identityArgs(exec, dir);
+  const merged = await git(exec, dir, [...identity, "merge", "--ff", "--no-edit", "-m", "clawd: \u5408\u5E76\u8FDC\u7AEF integration", REMOTE_INTEGRATION]);
+  if (merged.spawnError) throw new RepoError(`\u672C\u673A\u8DD1\u4E0D\u4E86 git\uFF1A${merged.spawnError}`);
+  if (merged.code === 0) return await mustGit(exec, dir, ["rev-parse", "HEAD"], "\u8BFB\u53D6\u5185\u5BB9\u7248\u672C") !== before;
+  const conflicts = (await git(exec, dir, ["diff", "--name-only", "--diff-filter=U"])).stdout.trim().split("\n").filter(Boolean);
+  await git(exec, dir, ["merge", "--abort"]);
+  if (conflicts.length) throw new RepoError(`\u672C\u5730\u4FEE\u6539\u548C\u8FDC\u7AEF integration \u6709\u51B2\u7A81\uFF08${conflicts.join("\u3001")}\uFF09\uFF0C\u5904\u7406\u540E\u518D\u8BD5\uFF1B\u672C\u5730\u5185\u5BB9\u5DF2\u9000\u56DE\u5408\u5E76\u524D`);
+  throw new RepoError(`\u5408\u5E76\u8FDC\u7AEF integration \u6CA1\u6210\uFF08git \u9000\u51FA\u7801 ${merged.code}\uFF09\uFF1A${tail(merged.stderr) || tail(merged.stdout)}`);
+}
 async function prepareIntegration(exec, dir, auth) {
   const branch = await mustGit(exec, dir, ["branch", "--show-current"], "\u8BFB\u53D6\u53D1\u5E03\u5206\u652F");
   if (branch !== "main" && branch !== "integration") throw new RepoError("\u5F53\u524D\u4E0D\u662F main \u6216 integration \u5206\u652F\uFF0C\u8BF7\u5148\u6574\u7406\u5230\u53D1\u5E03\u5206\u652F");
@@ -63301,24 +63318,21 @@ async function prepareIntegration(exec, dir, auth) {
   await mustGit(exec, dir, ["status", "--porcelain"], "\u68C0\u67E5\u5B8C\u6574\u5DE5\u4F5C\u533A");
   await writeGitignore(dir);
   await commitAll(exec, { dir, message: "clawd: \u4FDD\u5B58\u6D4B\u8BD5\u53D1\u5E03\u524D\u7684\u4FEE\u6539" });
-  if (branch === "integration") return;
-  const current = await mustGit(exec, dir, ["rev-parse", "HEAD"], "\u8BFB\u53D6\u5185\u5BB9\u7248\u672C");
-  const origin = await git(exec, dir, ["remote", "get-url", "origin"]);
-  if (origin.code === 0) {
-    const remote2 = await networkGit(exec, dir, auth, ["ls-remote", "--heads", "origin", "refs/heads/integration"], "\u68C0\u67E5\u8FDC\u7AEF\u6D4B\u8BD5\u5206\u652F");
-    if (remote2.trim()) await networkGit(exec, dir, auth, ["fetch", "origin", "refs/heads/integration:refs/remotes/origin/integration"], "\u8BFB\u53D6\u8FDC\u7AEF\u6D4B\u8BD5\u5206\u652F");
-  }
-  const local = await git(exec, dir, ["rev-parse", "--verify", "refs/heads/integration"]);
-  const remote = await git(exec, dir, ["rev-parse", "--verify", "refs/remotes/origin/integration"]);
-  const candidate = local.code === 0 ? local.stdout.trim() : remote.code === 0 ? remote.stdout.trim() : void 0;
-  if (!candidate) {
-    await mustGit(exec, dir, ["switch", "-c", "integration"], "\u5EFA\u7ACB\u6D4B\u8BD5\u5206\u652F");
-    return;
+  const hasRemote = await fetchRemoteIntegration(exec, dir, auth);
+  if (branch !== "integration") {
+    const current = await mustGit(exec, dir, ["rev-parse", "HEAD"], "\u8BFB\u53D6\u5185\u5BB9\u7248\u672C");
+    const local = await git(exec, dir, ["rev-parse", "--verify", "refs/heads/integration"]);
+    const remote = await git(exec, dir, ["rev-parse", "--verify", REMOTE_INTEGRATION]);
+    const candidate = local.code === 0 ? local.stdout.trim() : remote.code === 0 ? remote.stdout.trim() : void 0;
+    if (!candidate) await mustGit(exec, dir, ["switch", "-c", "integration"], "\u5EFA\u7ACB\u6D4B\u8BD5\u5206\u652F");
+    else {
+      const forward = await git(exec, dir, ["merge-base", "--is-ancestor", current, candidate]);
+      if (forward.code !== 0) throw new RepoError("\u5DF2\u6709 integration \u4E0E\u5F53\u524D main \u5185\u5BB9\u4E0D\u4E00\u81F4\uFF0C\u8BF7\u5148\u6574\u7406\u5206\u652F\uFF1B\u4E0D\u4F1A\u81EA\u52A8\u5408\u5E76\u6216\u4E22\u5F03\u4FEE\u6539");
+      if (local.code !== 0) await mustGit(exec, dir, ["branch", "integration", candidate], "\u5EFA\u7ACB\u672C\u5730\u6D4B\u8BD5\u5206\u652F");
+      await mustGit(exec, dir, ["switch", "integration"], "\u5207\u6362\u6D4B\u8BD5\u5206\u652F");
+    }
   }
-  const forward = await git(exec, dir, ["merge-base", "--is-ancestor", current, candidate]);
-  if (forward.code !== 0) throw new RepoError("\u5DF2\u6709 integration \u4E0E\u5F53\u524D main \u5185\u5BB9\u4E0D\u4E00\u81F4\uFF0C\u8BF7\u5148\u6574\u7406\u5206\u652F\uFF1B\u4E0D\u4F1A\u81EA\u52A8\u5408\u5E76\u6216\u4E22\u5F03\u4FEE\u6539");
-  if (local.code !== 0) await mustGit(exec, dir, ["branch", "integration", candidate], "\u5EFA\u7ACB\u672C\u5730\u6D4B\u8BD5\u5206\u652F");
-  await mustGit(exec, dir, ["switch", "integration"], "\u5207\u6362\u6D4B\u8BD5\u5206\u652F");
+  return hasRemote && await mergeRemoteIntegration(exec, dir);
 }
 async function pushRelease(exec, dir, auth, head) {
   if (!/^[a-f0-9]{40}$/.test(head)) throw new RepoError("\u53D1\u5E03\u63D0\u4EA4\u5FC5\u987B\u662F\u5B8C\u6574 SHA");
@@ -63527,7 +63541,7 @@ async function release(exec, api, args) {
   const info = await repoInfo(exec, args.dir);
   if (!info) throw new RepoError("\u8FD8\u6CA1\u6709\u4ED3\u5E93\uFF0C\u5148\u70B9\u4E00\u6B21\u300C\u53D1\u5E03\u5230\u4E91\u4E0A\u300D\u5EFA\u4ED3");
   const base = await readCurrentBase(api);
-  await prepareIntegration(exec, args.dir, args.auth);
+  if (await prepareIntegration(exec, args.dir, args.auth) && args.rescanOnRemoteChange) throw new RepoError("\u8FDC\u7AEF integration \u6709\u65B0\u63D0\u4EA4\uFF0C\u5DF2\u5408\u5230\u672C\u5730\u2014\u2014\u91CD\u65B0\u626B\u63CF\u540E\u518D\u53D1\u5E03");
   const before = await readDeployFileRaw(args.dir);
   let committed = false;
   try {
@@ -63557,7 +63571,7 @@ init_protocol();
 function validatePersonaRelease(raw, expected) {
   const record4 = VerifiedPersonaReleaseSchema.parse(raw);
   if (record4.repository !== expected.repository || record4.commit !== expected.commit || new URL(record4.verification.endpoint).origin !== expected.endpoint) throw new Error("\u5236\u54C1\u4E0E\u672C\u6B21\u6D4B\u8BD5\u4ED3\u5E93\u3001\u63D0\u4EA4\u6216\u73AF\u5883\u4E0D\u4E00\u81F4");
-  const fingerprint = (0, import_node_crypto13.createHash)("sha256").update(JSON.stringify({
+  const fingerprint = (0, import_node_crypto14.createHash)("sha256").update(JSON.stringify({
     component: record4.component,
     image: record4.image,
     commit: record4.commit,
@@ -63682,7 +63696,7 @@ async function resumePromotion(deps, original, options = {}) {
 init_protocol();
 
 // src/deploy/artifact.ts
-var import_node_crypto14 = require("crypto");
+var import_node_crypto15 = require("crypto");
 var import_node_fs38 = __toESM(require("fs"), 1);
 var import_node_os14 = __toESM(require("os"), 1);
 var import_node_path45 = __toESM(require("path"), 1);
@@ -63744,7 +63758,7 @@ async function downloadOnce(exec, url, { listEntries }) {
   if (declared > ARTIFACT_MAX_BYTES) throw new Error(`\u8D44\u4EA7 ${declared} \u5B57\u8282\uFF0C\u8D85\u8FC7\u4E0A\u9650 ${ARTIFACT_MAX_BYTES}\uFF1A${url}`);
   const dir = await import_node_fs38.default.promises.mkdtemp(import_node_path45.default.join(import_node_os14.default.tmpdir(), "clawd-artifact-"));
   const file = import_node_path45.default.join(dir, "pkg");
-  const hash = (0, import_node_crypto14.createHash)("sha256");
+  const hash = (0, import_node_crypto15.createHash)("sha256");
   let size = 0;
   const meter = new import_node_stream3.Transform({
     transform(chunk, _enc, cb) {
@@ -64851,10 +64865,10 @@ function buildDeployHandlers(deps) {
       checkPublisherTest();
     }
     if (await deps.claimPublisher(cloudPersonaIdOf(repo2.url), "integration") === "taken") throw invalid("\u6D4B\u8BD5\u73AF\u5883\u91CC\u7684\u8FD9\u4E2A\u540D\u5B57\u5DF2\u7531\u522B\u4EBA\u53D1\u5E03");
-    const releaseId = (0, import_node_crypto15.randomUUID)();
-    armUndo(void 0);
+    const releaseId = (0, import_node_crypto16.randomUUID)();
     try {
-      const result = await release(deps.exec, api, { dir, now: deps.now, auth, manifest, onPrepared: async (head) => {
+      const result = await release(deps.exec, api, { dir, now: deps.now, auth, manifest, rescanOnRemoteChange: !rollback2, onPrepared: async (head) => {
+        armUndo(void 0);
         const latest2 = await readHistory(dir);
         await writeScanFile(dir, { ...latest2, releases: [...latest2.releases, { id: releaseId, environment: "integration", head, contentHead: entry.head, scanId: entry.id, at: deps.now(), pushed: false, config: configOfPersona(deps.personaEngine(personaId2) ?? {}), workflowVersion: DEPLOY_WORKFLOW_VERSION }] });
       } });
@@ -65008,7 +65022,7 @@ function buildDeployHandlers(deps) {
       const latest = await readHistory(mustPersona(personaId2));
       await writeScanFile(mustPersona(personaId2), { ...latest, promotions: latest.promotions.map((p3) => p3.id === old.id ? { ...p3, phase: "failed", error: "\u51C6\u5907\u9636\u6BB5\u6D4B\u8BD5\u7248\u672C\u5DF2\u53D8\u5316\uFF0C\u5DF2\u7531\u91CD\u65B0\u786E\u8BA4\u7684\u65B0\u4EFB\u52A1\u66FF\u4EE3" } : p3) });
     }
-    const promotion = await continuePromotion(personaId2, record4, reuse2 ? { ...old, verified: snapshot ?? record4.verified } : { id: (0, import_node_crypto15.randomUUID)(), releaseId, at: deps.now(), phase: "prepared", verified: record4.verified }, true);
+    const promotion = await continuePromotion(personaId2, record4, reuse2 ? { ...old, verified: snapshot ?? record4.verified } : { id: (0, import_node_crypto16.randomUUID)(), releaseId, at: deps.now(), phase: "prepared", verified: record4.verified }, true);
     return { response: { type: "deploy:promote", promotion } };
   };
   const applyConfig = async (frame, _client, ctx) => {
@@ -65042,7 +65056,7 @@ function buildDeployHandlers(deps) {
     const keys = changedConfigKeys(config, await testedConfigOf(dir, source));
     if (!retryAfterFailure && keys?.length === 0) throw invalid("\u914D\u7F6E\u548C\u6D4B\u8BD5\u73AF\u5883\u91CC\u7684\u4E00\u81F4\uFF0C\u6CA1\u6709\u9700\u8981\u5E94\u7528\u7684");
     if (latest.workflowVersion < (keys ? workflowVersionForConfigKeys(keys) : DEPLOY_WORKFLOW_VERSION)) throw invalid("\u8FD9\u4E2A\u4ED3\u5E93\u7684\u53D1\u5E03\u6D41\u6C34\u7EBF\u662F\u65E7\u7248\u672C\uFF0C\u4E0D\u8BA4\u4FDD\u5E95 Pod \u6570\u2014\u2014\u8BF7\u5148\u5B8C\u6574\u91CD\u65B0\u53D1\u5E03\u4E00\u6B21\uFF08\u4F1A\u91CD\u65B0\u6784\u5EFA\uFF09");
-    const id = (0, import_node_crypto15.randomUUID)();
+    const id = (0, import_node_crypto16.randomUUID)();
     try {
       await api.dispatchWorkflow(slug, DEPLOY_WORKFLOW_FILE, "integration", { environment: "integration", release_json: JSON.stringify(source.verified), config_json: JSON.stringify(config), config_id: id });
     } catch (err) {
@@ -65063,7 +65077,7 @@ function buildDeployHandlers(deps) {
   };
   function startTrace(personaId2, event) {
     const started = import_node_perf_hooks.performance.now();
-    const traceId = (0, import_node_crypto15.randomUUID)();
+    const traceId = (0, import_node_crypto16.randomUUID)();
     const log = (phase, meta) => {
       try {
         deps.logger?.info(`${event}.${phase}`, { personaId: personaId2, traceId, ...meta });
@@ -66667,7 +66681,7 @@ ${formatLarkSpeakerReminder(speaker)}`
 }
 
 // src/lark-bot-connector/envelope.ts
-var import_node_crypto16 = require("crypto");
+var import_node_crypto17 = require("crypto");
 var LARK_ENVELOPE_PREFIX = "clawdlbe1";
 function verifyLarkEventEnvelope(args) {
   const { token, publicKeyPem } = args;
@@ -66686,7 +66700,7 @@ function verifyLarkEventEnvelope(args) {
   const data = Buffer.from(`${prefix}.${payloadB64}`, "utf8");
   let sigOk = false;
   try {
-    sigOk = (0, import_node_crypto16.verify)(null, data, publicKeyPem, Buffer.from(sigB64, "base64url"));
+    sigOk = (0, import_node_crypto17.verify)(null, data, publicKeyPem, Buffer.from(sigB64, "base64url"));
   } catch {
     sigOk = false;
   }
@@ -67308,7 +67322,7 @@ async function portableCloudInput(text, resolvers) {
 }
 
 // src/tools/cloud-turn-session.ts
-var import_node_crypto17 = require("crypto");
+var import_node_crypto18 = require("crypto");
 function withBranchIntent(text, branch) {
   return `${text}
 
@@ -67335,7 +67349,7 @@ function createCloudTurnSession(args) {
     void client.commandTurn(personaId2, conversationId, turnId, command).catch((e) => sink.onError(`\u4E91\u4E0A\u547D\u4EE4\u5931\u8D25\uFF1A${e.message}`));
   };
   return {
-    startTurn(text, commandId = (0, import_node_crypto17.randomUUID)(), prepared = false) {
+    startTurn(text, commandId = (0, import_node_crypto18.randomUUID)(), prepared = false) {
       if (closed || live.has(commandId)) return;
       conversationId ??= commandId;
       live.add(commandId);
@@ -67654,7 +67668,7 @@ var PiRpcClient = class {
 
 // src/tools/pi-session.ts
 var import_node_child_process12 = require("child_process");
-var import_node_crypto18 = require("crypto");
+var import_node_crypto19 = require("crypto");
 var import_node_fs43 = __toESM(require("fs"), 1);
 var import_node_path49 = __toESM(require("path"), 1);
 
@@ -67936,7 +67950,7 @@ ${dirs.map((d2) => `- ${d2}`).join("\n")}`;
 }
 function createPiSession(ctx, sink, deps = {}) {
   const cmd = process.env.PI_BIN ?? "pi";
-  const sessionId = ctx.toolSessionId ?? (0, import_node_crypto18.randomUUID)();
+  const sessionId = ctx.toolSessionId ?? (0, import_node_crypto19.randomUUID)();
   const skillsDir = import_node_path49.default.join(ctx.cwd, ".claude", "skills");
   const exists = deps.skillsDirExists ?? ((d2) => import_node_fs43.default.existsSync(d2));
   const args = buildPiArgs(ctx, {
@@ -68181,7 +68195,7 @@ var PiAdapter = class {
     }
     if (models.length === 0 && opts.strict) throw new Error("Pi model refresh returned no models");
     if (models.length === 0) models = [PI_DEFAULT_MODEL_ENTRY];
-    for (const m3 of models) if (m3.id) this.windows.set(m3.id, m3.contextWindowSize);
+    for (const m3 of models) if (m3.id && m3.contextWindowSize) this.windows.set(m3.id, m3.contextWindowSize);
     return buildPiCapabilities(models);
   }
   // 纯函数无 IO：查 capabilities 加载时填好的表；未加载 / 未知 → undefined（运行时 get_state 的 meta_update 会补）
@@ -68294,7 +68308,6 @@ var CloudPiAdapter = class {
 
 // src/tools/claude-cloud.ts
 init_protocol();
-init_claude();
 
 // src/tools/claude-cloud-session.ts
 function createCloudClaudeSession(ctx, sink, deps) {
@@ -68368,12 +68381,8 @@ var CloudClaudeAdapter = class {
   async capabilities() {
     return CLOUD_CLAUDE_CAPABILITIES;
   }
-  // 号池里的模型 id 不限 Anthropic：带 [1m] = 1M（CC 的写法），认得的 Claude 型号按本机的表；
-  // 别的 CC 不知道它的窗口、按 200K 算（官方 model-config：认不出的 id 不带 [1m] 就是 200K），这里报同一个数，部署页让用户自己选要不要 1M
-  resolveContextWindow(modelId) {
-    if (!modelId) return void 0;
-    if (/\[1m\]$/i.test(modelId)) return 1e6;
-    return resolveClaudeContextWindow(modelId) ?? 2e5;
+  resolveContextWindow(_modelId) {
+    return void 0;
   }
   createSession(ctx, sink) {
     return createCloudClaudeSession(ctx, sink, { client: this.clientForEnvironment?.(ctx.cloudEnvironment) ?? this.client, logger: this.logger });
@@ -69398,7 +69407,7 @@ var wrapper_default = import_websocket.default;
 
 // src/transport/local-ws-server.ts
 var import_node_http = __toESM(require("http"), 1);
-var import_node_crypto19 = require("crypto");
+var import_node_crypto20 = require("crypto");
 var LocalWsServer = class {
   constructor(opts) {
     this.opts = opts;
@@ -69610,7 +69619,7 @@ var LocalWsServer = class {
     }
   }
   onConnection(socket, remoteAddress, origin) {
-    const id = (0, import_node_crypto19.randomUUID)();
+    const id = (0, import_node_crypto20.randomUUID)();
     const subscribedSessions = /* @__PURE__ */ new Map();
     const handle = {
       id,
@@ -70549,7 +70558,7 @@ var import_node_path58 = __toESM(require("path"), 1);
 // src/attachment/upload.ts
 var import_node_fs50 = __toESM(require("fs"), 1);
 var import_node_path56 = __toESM(require("path"), 1);
-var import_node_crypto20 = __toESM(require("crypto"), 1);
+var import_node_crypto21 = __toESM(require("crypto"), 1);
 var import_promises8 = require("stream/promises");
 var UploadError = class extends Error {
   constructor(code, message) {
@@ -70573,11 +70582,11 @@ async function writeUploadedAttachment(args) {
   } catch (err) {
     throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
   }
-  const hasher = import_node_crypto20.default.createHash("sha256");
+  const hasher = import_node_crypto21.default.createHash("sha256");
   let actualSize = 0;
   const tmpPath = import_node_path56.default.join(
     attachmentsRoot,
-    `.upload-${process.pid}-${Date.now()}-${import_node_crypto20.default.randomBytes(4).toString("hex")}`
+    `.upload-${process.pid}-${Date.now()}-${import_node_crypto21.default.randomBytes(4).toString("hex")}`
   );
   try {
     await (0, import_promises8.pipeline)(
@@ -71509,7 +71518,7 @@ function runAttachmentGc(args) {
 // src/attachment/group.ts
 var import_node_fs53 = __toESM(require("fs"), 1);
 var import_node_path60 = __toESM(require("path"), 1);
-var import_node_crypto21 = __toESM(require("crypto"), 1);
+var import_node_crypto22 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
   dataDir;
@@ -71587,7 +71596,7 @@ var GroupFileStore = class {
       entries[idx] = next;
     } else {
       next = {
-        id: `gf-${import_node_crypto21.default.randomBytes(6).toString("base64url")}`,
+        id: `gf-${import_node_crypto22.default.randomBytes(6).toString("base64url")}`,
         relPath: input.relPath,
         from: input.from,
         label: input.label,
@@ -71709,7 +71718,7 @@ function readSpawnedByDesktopFromEnv(env = process.env) {
 // src/tunnel/tunnel-manager.ts
 var import_node_fs58 = __toESM(require("fs"), 1);
 var import_node_path65 = __toESM(require("path"), 1);
-var import_node_crypto22 = __toESM(require("crypto"), 1);
+var import_node_crypto23 = __toESM(require("crypto"), 1);
 var import_node_child_process17 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
@@ -72206,7 +72215,7 @@ var TunnelManager = class {
         override: this.deps.frpcBinaryOverride ?? void 0
       });
       const tomlPath = import_node_path65.default.join(this.deps.dataDir, "frpc.toml");
-      const proxyName = `clawd-${t2.subdomain}-${localPort}-${import_node_crypto22.default.randomBytes(3).toString("hex")}`;
+      const proxyName = `clawd-${t2.subdomain}-${localPort}-${import_node_crypto23.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t2.frpsHost,
         serverPort: t2.frpsPort,
@@ -72307,7 +72316,7 @@ async function waitForFrpcReady(proc, timeoutMs) {
 // src/tunnel/device-key.ts
 var import_node_os24 = __toESM(require("os"), 1);
 var import_node_path66 = __toESM(require("path"), 1);
-var import_node_crypto23 = __toESM(require("crypto"), 1);
+var import_node_crypto24 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os24.default.hostname();
@@ -72317,13 +72326,13 @@ function deriveStableDeviceKey(opts = {}) {
   const normalizedDataDir = opts.dataDir ? import_node_path66.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
-  return import_node_crypto23.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
+  return import_node_crypto24.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
 var import_node_fs59 = __toESM(require("fs"), 1);
 var import_node_path67 = __toESM(require("path"), 1);
-var import_node_crypto24 = __toESM(require("crypto"), 1);
+var import_node_crypto25 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
   return import_node_path67.default.join(dataDir, AUTH_FILE_NAME);
@@ -72360,10 +72369,10 @@ function loadOrCreateTunnelDeviceKey(opts) {
   return tunnelDeviceKey;
 }
 function defaultGenerateToken() {
-  return import_node_crypto24.default.randomBytes(32).toString("base64url");
+  return import_node_crypto25.default.randomBytes(32).toString("base64url");
 }
 function defaultGenerateOwnerPrincipalId() {
-  return `owner-${import_node_crypto24.default.randomUUID()}`;
+  return `owner-${import_node_crypto25.default.randomUUID()}`;
 }
 function readAuthFile(file) {
   try {
@@ -72495,7 +72504,7 @@ var OwnerIdentityStore = class {
 };
 
 // src/feishu-auth/login-flow.ts
-var import_node_crypto25 = __toESM(require("crypto"), 1);
+var import_node_crypto26 = __toESM(require("crypto"), 1);
 var STATE_TTL_MS = 5 * 60 * 1e3;
 var LoginFlow = class {
   constructor(deps) {
@@ -72505,7 +72514,7 @@ var LoginFlow = class {
   pendingStates = /* @__PURE__ */ new Map();
   generation = 0;
   start() {
-    const state = import_node_crypto25.default.randomBytes(16).toString("base64url");
+    const state = import_node_crypto26.default.randomBytes(16).toString("base64url");
     const now = (this.deps.now ?? Date.now)();
     this.pendingStates.set(state, { issuedAt: now, owner: this.deps.expectedUnionId?.() });
     this.gcExpired(now);
@@ -73039,7 +73048,7 @@ init_protocol();
 var import_node_fs62 = __toESM(require("fs"), 1);
 var import_node_os26 = __toESM(require("os"), 1);
 var import_node_path70 = __toESM(require("path"), 1);
-var import_node_crypto26 = require("crypto");
+var import_node_crypto27 = require("crypto");
 init_claude_history();
 
 // src/session/fork-transcript.ts
@@ -73102,7 +73111,7 @@ function forkSession(input) {
     sourceFile = found;
     projectDir = import_node_path70.default.dirname(found);
   }
-  const forkedToolSessionId = (0, import_node_crypto26.randomUUID)();
+  const forkedToolSessionId = (0, import_node_crypto27.randomUUID)();
   const forkedLines = forkTranscriptEntries(readJsonlEntries(sourceFile), {
     messageUuid: input.messageUuid,
     sessionId: forkedToolSessionId,
@@ -73457,7 +73466,7 @@ function appendImportLedger(dataDir, entry) {
 
 // src/handlers/session.ts
 init_protocol();
-var import_node_crypto27 = require("crypto");
+var import_node_crypto28 = require("crypto");
 var import_node_path74 = __toESM(require("path"), 1);
 function canReadSearchHit(ctx, file) {
   if (!ctx || ctx.principal.kind === "owner") return true;
@@ -73526,7 +73535,7 @@ function buildSessionHandlers(deps) {
     if (!source.toolSessionId || !sourceConversationId) throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "fork: \u6E90\u4F1A\u8BDD\u8FD8\u6CA1\u6709\u4E91\u7AEF\u5386\u53F2");
     if (source.cloudPendingTurns?.length) throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "fork: \u8BF7\u7B49\u5F85\u6E90\u4F1A\u8BDD\u5F53\u524D\u4EFB\u52A1\u5B8C\u6210");
     const sessionId = newSessionId();
-    const threadId = (0, import_node_crypto27.randomUUID)();
+    const threadId = (0, import_node_crypto28.randomUUID)();
     const result = await deps.cloudFork(source, {
       engine,
       source: {
@@ -75663,7 +75672,7 @@ function buildCloudConnectorsHandlers(deps) {
 
 // src/handlers/cloud-workspace.ts
 init_protocol();
-var import_node_crypto28 = require("crypto");
+var import_node_crypto29 = require("crypto");
 function buildCloudWorkspaceHandlers(deps) {
   return {
     "cloud:workspace": async (frame, _client, ctx) => {
@@ -75691,7 +75700,7 @@ function buildCloudWorkspaceHandlers(deps) {
       ) || file.cloudPendingTurns?.length))
         throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "\u8BF7\u7B49\u5F85\u5F53\u524D\u4EFB\u52A1\u5B8C\u6210");
       const conversationId = file.cloudConversationId ?? file.cloudExecutionId ?? file.sessionId;
-      const traceId = typeof frame.requestId === "string" && /^[A-Za-z0-9:_-]{1,128}$/.test(frame.requestId) ? frame.requestId : (0, import_node_crypto28.randomUUID)();
+      const traceId = typeof frame.requestId === "string" && /^[A-Za-z0-9:_-]{1,128}$/.test(frame.requestId) ? frame.requestId : (0, import_node_crypto29.randomUUID)();
       const started = performance.now();
       const meta = { traceId, sessionId: args.sessionId, action: args.action };
       const log = (event, detail) => {
@@ -76051,7 +76060,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.718".length > 0 ? "0.2.718" : "dev";
+var version = "0.2.720".length > 0 ? "0.2.720" : "dev";
 
 // src/cli-probe/probe.ts
 var fs87 = __toESM(require("fs"), 1);
@@ -76449,7 +76458,7 @@ init_protocol();
 // src/extension/bundle-zip.ts
 var import_promises12 = __toESM(require("fs/promises"), 1);
 var import_node_path79 = __toESM(require("path"), 1);
-var import_node_crypto29 = __toESM(require("crypto"), 1);
+var import_node_crypto30 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
@@ -76464,7 +76473,7 @@ async function bundleExtensionDir(dir) {
     compression: "DEFLATE",
     compressionOptions: { level: 6 }
   });
-  const sha256 = import_node_crypto29.default.createHash("sha256").update(buffer).digest("hex");
+  const sha256 = import_node_crypto30.default.createHash("sha256").update(buffer).digest("hex");
   return { buffer, sha256 };
 }
 var FIXED_DATE = /* @__PURE__ */ new Date("2020-01-01T00:00:00.000Z");
@@ -76532,7 +76541,7 @@ function computePublishCheck(args) {
 var import_promises13 = __toESM(require("fs/promises"), 1);
 var import_node_path81 = __toESM(require("path"), 1);
 var import_node_os30 = __toESM(require("os"), 1);
-var import_node_crypto30 = __toESM(require("crypto"), 1);
+var import_node_crypto31 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
@@ -76561,7 +76570,7 @@ var InstallError = class extends Error {
 };
 async function installFromChannel(args, deps) {
   const { channelRef, snapshotHash, bundleZip } = args;
-  const computed = import_node_crypto30.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto31.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new InstallError(
       "HASH_MISMATCH",
@@ -76653,7 +76662,7 @@ async function installFromChannel(args, deps) {
 var import_promises14 = __toESM(require("fs/promises"), 1);
 var import_node_path82 = __toESM(require("path"), 1);
 var import_node_os31 = __toESM(require("os"), 1);
-var import_node_crypto31 = __toESM(require("crypto"), 1);
+var import_node_crypto32 = __toESM(require("crypto"), 1);
 var import_jszip5 = __toESM(require_lib3(), 1);
 var UpdateError = class extends Error {
   constructor(code, message) {
@@ -76691,7 +76700,7 @@ async function updateFromChannel(args, deps) {
     if (e instanceof UpdateError) throw e;
     throw e;
   }
-  const computed = import_node_crypto31.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto32.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new UpdateError(
       "HASH_MISMATCH",
@@ -77846,7 +77855,7 @@ async function uninstall(deps) {
 }
 
 // src/handlers/index.ts
-var import_node_crypto32 = require("crypto");
+var import_node_crypto33 = require("crypto");
 
 // src/handlers/peer-exec.ts
 init_protocol();
@@ -78003,7 +78012,7 @@ function buildMethodHandlers(deps) {
           const c2 = deps.contactStore.get(deviceId);
           return c2 ? { deviceId: c2.deviceId, remoteUrl: c2.remoteUrl, connectToken: c2.connectToken } : null;
         },
-        genId: () => (0, import_node_crypto32.randomUUID)(),
+        genId: () => (0, import_node_crypto33.randomUUID)(),
         now: () => Date.now(),
         forwardInboxPostToPeer,
         logger: deps.logger
@@ -78737,7 +78746,7 @@ async function startDaemon(config) {
   const channelStore = createChannelStore({
     filePath: import_node_path90.default.join(config.dataDir, "channels.json"),
     now: () => Date.now(),
-    genId: () => `ch-${(0, import_node_crypto33.randomUUID)().slice(0, 8)}`,
+    genId: () => `ch-${(0, import_node_crypto34.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("channel store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
     })
@@ -78746,7 +78755,7 @@ async function startDaemon(config) {
   const topicStore = createTopicStore({
     filePath: import_node_path90.default.join(config.dataDir, "topics.json"),
     now: () => Date.now(),
-    genId: () => `tp-${(0, import_node_crypto33.randomUUID)().slice(0, 8)}`,
+    genId: () => `tp-${(0, import_node_crypto34.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("topic store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
     })
@@ -78754,7 +78763,7 @@ async function startDaemon(config) {
   await topicStore.load();
   let deliverPendingRef;
   const personaDispatchManager = new PersonaDispatchManager({
-    genId: () => (0, import_node_crypto33.randomUUID)(),
+    genId: () => (0, import_node_crypto34.randomUUID)(),
     store: dispatchStore,
     now: () => Date.now(),
     onCompleted: (sid) => deliverPendingRef?.(sid),
@@ -78778,7 +78787,7 @@ async function startDaemon(config) {
   const readSecrets = () => readSecretTable({ bundleRoot: secretsBundleRoot, overrideDir: localSecretsDir, logger });
   const githubTokenFile = import_node_path90.default.join(localSecretsDir, GITHUB_TOKEN_FILE);
   const managedGithubVar = "CLAWD_GITHUB_MANAGED_TOKEN_SHA256";
-  const githubFingerprint = (token) => (0, import_node_crypto33.createHash)("sha256").update(token).digest("hex");
+  const githubFingerprint = (token) => (0, import_node_crypto34.createHash)("sha256").update(token).digest("hex");
   const githubIdentity = createGithubIdentity({
     isManaged: (token) => readEnvFileVar(githubTokenFile, managedGithubVar) === githubFingerprint(token),
     markManaged: (token) => {