@clawos-dev/clawd 0.2.85-beta.160.958069f → 0.2.86-beta.161.3250922

package/dist/cli.cjs

@@ -643,8 +643,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path44, errorMaps, issueData } = params;
-      const fullPath = [...path44, ...issueData.path || []];
+      const { data, path: path45, errorMaps, issueData } = params;
+      const fullPath = [...path45, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -955,11 +955,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path44, key) {
+      constructor(parent, value, path45, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path44;
+        this._path = path45;
         this._key = key;
       }
       get path() {
@@ -4343,13 +4343,13 @@ var init_zod = __esm({
 });
 
 // ../protocol/src/attachment-schemas.ts
-var TOKEN_ROLES, GROUP_FILE_SOURCES, GroupFileEntrySchema, AttachmentSignUrlArgs, AttachmentSignUrlResponseSchema, AttachmentGroupAddArgs, AttachmentGroupAddResponseSchema, AttachmentGroupRemoveArgs, AttachmentGroupRemoveResponseSchema, AttachmentGroupListArgs, AttachmentGroupListResponseSchema;
+var TOKEN_ROLES, GROUP_FILE_SOURCES, GroupFileEntrySchema, AttachmentSignUrlArgs, AttachmentSignUrlResponseSchema, AttachmentGroupAddArgs, AttachmentGroupAddResponseSchema, AttachmentGroupRemoveArgs, AttachmentGroupRemoveResponseSchema, AttachmentGroupListArgs, AttachmentGroupListResponseSchema, AttachmentUploadResponseSchema;
 var init_attachment_schemas = __esm({
   "../protocol/src/attachment-schemas.ts"() {
     "use strict";
     init_zod();
     TOKEN_ROLES = ["owner"];
-    GROUP_FILE_SOURCES = ["agent", "owner"];
+    GROUP_FILE_SOURCES = ["agent", "owner", "user-upload"];
     GroupFileEntrySchema = external_exports.object({
       /** daemon 派发的稳定 id（用于 RPC remove / UI key） */
       id: external_exports.string().min(1),
@@ -4404,6 +4404,16 @@ var init_attachment_schemas = __esm({
     AttachmentGroupListResponseSchema = external_exports.object({
       entries: external_exports.array(GroupFileEntrySchema)
     });
+    AttachmentUploadResponseSchema = external_exports.object({
+      /** sha256(bytes) 前 16 位，前端持有的稳定 ref */
+      attachmentId: external_exports.string().min(1),
+      /** 完整 tunnel signed URL，前端拼 marker / 直接送 Anthropic 都用它 */
+      url: external_exports.string().min(1),
+      /** 落在 session 目录下的相对路径（后续 group RPC / drawer 展示用） */
+      relPath: external_exports.string().min(1),
+      sizeBytes: external_exports.number().int().nonnegative(),
+      mimeType: external_exports.string().min(1)
+    });
   }
 });
 
@@ -5580,8 +5590,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path44 = req.path;
-        _req.url = typeof path44 === "string" ? path44 : req.url ? req.url.path || req.url : void 0;
+        const path45 = req.path;
+        _req.url = typeof path45 === "string" ? path45 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -5746,14 +5756,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path44) {
+    function parsePath(path45) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path44.length; i++) {
-        const char = path44[i];
+      for (let i = 0; i < path45.length; i++) {
+        const char = path45[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -5884,10 +5894,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path44 of paths) {
-        const parts = parsePath(path44);
+      for (const path45 of paths) {
+        const parts = parsePath(path45);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path44, remove);
+          redactWildcardPath(obj, parts, censor, path45, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -5972,8 +5982,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path44) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path44];
+            const wrappedCensor = typeof censor === "function" ? (value, path45) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path45];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -6008,8 +6018,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path44 of pathsToClone) {
-        const parts = parsePath(path44);
+      for (const path45 of pathsToClone) {
+        const parts = parsePath(path45);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -6061,24 +6071,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path44) {
-      if (typeof path44 !== "string") {
+    function validatePath(path45) {
+      if (typeof path45 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path44 === "") {
+      if (path45 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path44.includes("..")) {
-        throw new Error(`Invalid redaction path (${path44})`);
+      if (path45.includes("..")) {
+        throw new Error(`Invalid redaction path (${path45})`);
       }
-      if (path44.includes(",")) {
-        throw new Error(`Invalid redaction path (${path44})`);
+      if (path45.includes(",")) {
+        throw new Error(`Invalid redaction path (${path45})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path44.length; i++) {
-        const char = path44[i];
+      for (let i = 0; i < path45.length; i++) {
+        const char = path45[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -6092,20 +6102,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path44})`);
+            throw new Error(`Invalid redaction path (${path45})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path44})`);
+        throw new Error(`Invalid redaction path (${path45})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path44 of paths) {
-        validatePath(path44);
+      for (const path45 of paths) {
+        validatePath(path45);
       }
     }
     function slowRedact(options = {}) {
@@ -6273,8 +6283,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path44) => {
-            return censor(value, [k2, ...path44]);
+          const wrappedCensor = typeof censor === "function" ? (value, path45) => {
+            return censor(value, [k2, ...path45]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -6492,10 +6502,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs35 = require("fs");
+    var fs36 = require("fs");
     var EventEmitter2 = require("events");
     var inherits = require("util").inherits;
-    var path44 = require("path");
+    var path45 = require("path");
     var sleep = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -6549,20 +6559,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs35.mkdirSync(path44.dirname(file), { recursive: true });
-          const fd = fs35.openSync(file, flags, mode);
+          if (sonic.mkdir) fs36.mkdirSync(path45.dirname(file), { recursive: true });
+          const fd = fs36.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs35.mkdir(path44.dirname(file), { recursive: true }, (err) => {
+        fs36.mkdir(path45.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs35.open(file, flags, mode, fileOpened);
+          fs36.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs35.open(file, flags, mode, fileOpened);
+        fs36.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -6603,8 +6613,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs35.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs35.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs36.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs36.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -6613,15 +6623,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs35.writeSync(this.fd, this._writingBuf);
+            return fs36.writeSync(this.fd, this._writingBuf);
           }
-          return fs35.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs36.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs35.write(this.fd, this._writingBuf, this.release);
+            return fs36.write(this.fd, this._writingBuf, this.release);
           }
-          return fs35.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs36.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -6678,7 +6688,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs35.fsyncSync(this.fd);
+          fs36.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -6792,7 +6802,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs35.fsync(this.fd, (err) => {
+            fs36.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -6894,7 +6904,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs35.close(fd, (err) => {
+          fs36.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -6943,7 +6953,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs35.writeSync(this.fd, buf) : fs35.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs36.writeSync(this.fd, buf) : fs36.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -6959,7 +6969,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs35.fsyncSync(this.fd);
+        fs36.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -6980,7 +6990,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs35.writeSync(this.fd, buf);
+          const n = fs36.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -7008,13 +7018,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs35.writeSync(this.fd, this._writingBuf) : fs35.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs36.writeSync(this.fd, this._writingBuf) : fs36.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs35.write(this.fd, this._writingBuf, release);
+        fs36.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -7023,7 +7033,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs35.writeSync(this.fd, this._writingBuf);
+          const written = fs36.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -7032,7 +7042,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs35.write(this.fd, this._writingBuf, release);
+        fs36.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -7048,12 +7058,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs35.fsync(sonic.fd, closeWrapped);
+        fs36.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs35.close(sonic.fd, done);
+          fs36.close(sonic.fd, done);
         } else {
           done();
         }
@@ -7784,7 +7794,7 @@ var require_transport = __commonJS({
       stream.flushSync();
     }
     function transport(fullOptions) {
-      const { pipeline: pipeline2, targets, levels, dedupe, worker = {}, caller = getCallers(), sync = false } = fullOptions;
+      const { pipeline: pipeline3, targets, levels, dedupe, worker = {}, caller = getCallers(), sync = false } = fullOptions;
       const options = {
         ...fullOptions.options
       };
@@ -7812,9 +7822,9 @@ var require_transport = __commonJS({
             };
           });
         });
-      } else if (pipeline2) {
+      } else if (pipeline3) {
         target = bundlerOverrides["pino-worker"] || join11(__dirname, "worker.js");
-        options.pipelines = [pipeline2.map((dest) => {
+        options.pipelines = [pipeline3.map((dest) => {
           return {
             ...dest,
             target: fixTarget(dest.target)
@@ -9417,7 +9427,7 @@ var require_multistream = __commonJS({
 var require_pino = __commonJS({
   "../node_modules/.pnpm/pino@9.14.0/node_modules/pino/pino.js"(exports2, module2) {
     "use strict";
-    var os17 = require("os");
+    var os16 = require("os");
     var stdSerializers = require_pino_std_serializers();
     var caller = require_caller();
     var redaction = require_redaction();
@@ -9464,7 +9474,7 @@ var require_pino = __commonJS({
     } = symbols;
     var { epochTime, nullTime } = time;
     var { pid } = process;
-    var hostname = os17.hostname();
+    var hostname = os16.hostname();
     var defaultErrorSerializer = stdSerializers.err;
     var defaultOptions = {
       level: "info",
@@ -10188,11 +10198,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path44, added, removed, oldPosInc, options) {
-        var last = path44.lastComponent;
+      addToPath: function addToPath(path45, added, removed, oldPosInc, options) {
+        var last = path45.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path44.oldPos + oldPosInc,
+            oldPos: path45.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -10202,7 +10212,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path44.oldPos + oldPosInc,
+            oldPos: path45.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -10633,10 +10643,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path44 = typeof rec.path === "string" ? rec.path : null;
+      const path45 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path44 || content == null) return null;
-      const entry = { path: path44, content };
+      if (!path45 || content == null) return null;
+      const entry = { path: path45, content };
       if (typeof rec.mtimeMs === "number") entry.mtimeMs = rec.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -11462,10 +11472,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path44 = typeof rec.path === "string" ? rec.path : null;
+      const path45 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path44 || content == null) return null;
-      const out = { path: path44, content };
+      if (!path45 || content == null) return null;
+      const out = { path: path45, content };
       if (typeof rec.mtimeMs === "number") out.mtimeMs = rec.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -20380,7 +20390,7 @@ var require_websocket_server = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path30.default.dirname(opts.recordPath);
+  const dir = import_node_path31.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -20394,8 +20404,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs27.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs27.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs28.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs28.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -20420,12 +20430,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs27, import_node_path30;
+var import_node_fs28, import_node_path31;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs27 = __toESM(require("fs"), 1);
-    import_node_path30 = __toESM(require("path"), 1);
+    import_node_fs28 = __toESM(require("fs"), 1);
+    import_node_path31 = __toESM(require("path"), 1);
   }
 });
 
@@ -20468,7 +20478,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs28.mkdtempSync)(import_node_path31.default.join(import_node_os15.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs29.mkdtempSync)(import_node_path32.default.join(import_node_os14.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -20629,19 +20639,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs28.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs29.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs28, import_node_os15, import_node_path31;
+var import_node_fs29, import_node_os14, import_node_path32;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs28 = require("fs");
-    import_node_os15 = __toESM(require("os"), 1);
-    import_node_path31 = __toESM(require("path"), 1);
+    import_node_fs29 = require("fs");
+    import_node_os14 = __toESM(require("os"), 1);
+    import_node_path32 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -20873,8 +20883,8 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path29 = __toESM(require("path"), 1);
-var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_path30 = __toESM(require("path"), 1);
+var import_node_fs27 = __toESM(require("fs"), 1);
 
 // src/logger.ts
 var import_node_fs2 = __toESM(require("fs"), 1);
@@ -22609,6 +22619,18 @@ var SessionManager = class {
       (a, b2) => a.updatedAt > b2.updatedAt ? -1 : a.updatedAt < b2.updatedAt ? 1 : 0
     );
   }
+  /**
+   * 跨 scope 列出所有 owner 视角的 session（default + persona owner + persona guest），
+   * 附带派生的 SessionScope。attachment GC tick 用 —— 需要遍历所有活跃 session 的
+   * .attachments 目录 + 群文件清单求 liveSet。
+   */
+  listOwnedSessionScopes() {
+    return this.listAllOwned().map((file) => ({
+      scope: this.scopeForFile(file),
+      sessionId: file.sessionId,
+      cwd: file.cwd
+    }));
+  }
   // 写回 SessionFile，自动根据 ownerPersonaId / creatorPrincipalId 派生写入 scope.
   // 调用方原先都是 `deps.store.write(updated)`，全部走这里收口路由.
   writeOwned(file) {
@@ -25509,151 +25531,28 @@ var AgentsScanner = class {
 };
 
 // src/observer/session-observer.ts
-var import_node_fs13 = __toESM(require("fs"), 1);
-var import_node_os9 = __toESM(require("os"), 1);
-var import_node_path14 = __toESM(require("path"), 1);
-init_claude_history();
-
-// src/observer/subagent-meta-observer.ts
 var import_node_fs12 = __toESM(require("fs"), 1);
 var import_node_os8 = __toESM(require("os"), 1);
 var import_node_path13 = __toESM(require("path"), 1);
 init_claude_history();
-var META_RE = /^agent-([A-Za-z0-9_-]+)\.meta\.json$/;
-var SubagentMetaObserver = class {
-  constructor(opts) {
-    this.opts = opts;
-    this.home = opts.home ?? import_node_os8.default.homedir();
-  }
-  opts;
-  home;
-  watches = /* @__PURE__ */ new Map();
-  // public for spec only：测试直接拼路径写假 meta.json；生产 start() 内部自己解析
-  resolveSubagentDir(cwd, toolSessionId) {
-    return import_node_path13.default.join(
-      this.home,
-      ".claude",
-      "projects",
-      cwdToHashDir(cwd),
-      toolSessionId,
-      "subagents"
-    );
-  }
-  start(args) {
-    this.stop(args.sessionId);
-    const dirPath = this.resolveSubagentDir(args.cwd, args.toolSessionId);
-    const w2 = {
-      sessionId: args.sessionId,
-      dirPath,
-      watcher: null,
-      pollTimer: null,
-      emitted: /* @__PURE__ */ new Set()
-    };
-    this.watches.set(args.sessionId, w2);
-    this.scan(w2);
-    this.attachWatcher(w2);
-    w2.pollTimer = setInterval(() => this.scan(w2), 200);
-    return { dirPath };
-  }
-  // fs.watch 必须在目录存在后调用；首次启动时 subagents/ 通常不存在 —— attachWatcher
-  // 失败就交给 pollTimer 200ms 兜底，目录一出现就被下次 poll 捡起来，那时也尝试 attach
-  attachWatcher(w2) {
-    if (w2.watcher) return;
-    try {
-      w2.watcher = import_node_fs12.default.watch(w2.dirPath, { persistent: false }, (_evt, name) => {
-        if (!name) return;
-        const m2 = META_RE.exec(String(name));
-        if (!m2) return;
-        this.scanOne(w2, String(name));
-      });
-    } catch {
-    }
-  }
-  scan(w2) {
-    let entries;
-    try {
-      entries = import_node_fs12.default.readdirSync(w2.dirPath);
-    } catch {
-      return;
-    }
-    if (!w2.watcher) this.attachWatcher(w2);
-    for (const name of entries) {
-      this.scanOne(w2, name);
-    }
-  }
-  scanOne(w2, name) {
-    const m2 = META_RE.exec(name);
-    if (!m2) return;
-    const agentId = m2[1];
-    if (w2.emitted.has(agentId)) return;
-    const file = import_node_path13.default.join(w2.dirPath, name);
-    let raw;
-    try {
-      raw = import_node_fs12.default.readFileSync(file, "utf8");
-    } catch {
-      return;
-    }
-    let obj;
-    try {
-      obj = JSON.parse(raw);
-    } catch {
-      return;
-    }
-    const toolUseId = typeof obj.toolUseId === "string" ? obj.toolUseId : "";
-    if (!toolUseId) return;
-    w2.emitted.add(agentId);
-    const ev = {
-      kind: "subagent_progress",
-      toolUseId,
-      agentId,
-      status: "started"
-    };
-    if (typeof obj.description === "string" && obj.description) ev.description = obj.description;
-    this.opts.onEvent({ sessionId: w2.sessionId, events: [ev] });
-  }
-  isObserving(sessionId) {
-    return this.watches.has(sessionId);
-  }
-  stop(sessionId) {
-    const w2 = this.watches.get(sessionId);
-    if (!w2) return false;
-    try {
-      w2.watcher?.close();
-    } catch {
-    }
-    if (w2.pollTimer) clearInterval(w2.pollTimer);
-    this.watches.delete(sessionId);
-    return true;
-  }
-  stopAll() {
-    for (const id of [...this.watches.keys()]) this.stop(id);
-  }
-};
-
-// src/observer/session-observer.ts
 var SessionObserver = class {
   constructor(opts) {
     this.opts = opts;
-    this.home = opts.home ?? import_node_os9.default.homedir();
-    this.metaObserver = opts.enableSubagentMetaObserver ? new SubagentMetaObserver({ home: this.home, onEvent: opts.onEvent }) : null;
+    this.home = opts.home ?? import_node_os8.default.homedir();
   }
   opts;
   home;
   watches = /* @__PURE__ */ new Map();
-  // 子 observer：监听 <projectsRoot>/<hashDir>/<toolSessionId>/subagents/ 目录的 meta.json，
-  // 仅 TUI 模式启用——SDK 模式靠 `system.task_started` 帧（claude.ts:466）emit subagent_progress
-  // 已经能解锁 AgentCallLine 抽屉入口，再跑 meta watcher 会让 ring buffer 留双帧
-  metaObserver;
   resolveJsonlPath(cwd, toolSessionId, override) {
     if (override) return override;
-    return import_node_path14.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
+    return import_node_path13.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
   }
   start(args) {
     this.stop(args.sessionId);
     const filePath = this.resolveJsonlPath(args.cwd, args.toolSessionId, args.jsonlPath);
     let size = 0;
     try {
-      size = import_node_fs13.default.statSync(filePath).size;
+      size = import_node_fs12.default.statSync(filePath).size;
     } catch {
     }
     const w2 = {
@@ -25666,10 +25565,10 @@ var SessionObserver = class {
       adapter: args.adapter
     };
     try {
-      import_node_fs13.default.mkdirSync(import_node_path14.default.dirname(filePath), { recursive: true });
+      import_node_fs12.default.mkdirSync(import_node_path13.default.dirname(filePath), { recursive: true });
     } catch {
     }
-    w2.watcher = import_node_fs13.default.watch(import_node_path14.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
+    w2.watcher = import_node_fs12.default.watch(import_node_path13.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
       if (!changedName || !filePath.endsWith(changedName)) return;
       this.poll(w2);
     });
@@ -25678,11 +25577,6 @@ var SessionObserver = class {
     this.opts.onStatus?.(args.sessionId, "observing");
     this.hydrateMetaTail(w2);
     this.poll(w2);
-    this.metaObserver?.start({
-      sessionId: args.sessionId,
-      cwd: args.cwd,
-      toolSessionId: args.toolSessionId
-    });
     return { filePath };
   }
   // 读 JSONL 文件尾部 N 行，把每行的 meta_update 字段**合并成一个 patch** 喂给 reducer。
@@ -25692,7 +25586,7 @@ var SessionObserver = class {
   // 异常静默吞，不阻塞 watcher 启动
   hydrateMetaTail(w2, maxLines = 200) {
     try {
-      const raw = import_node_fs13.default.readFileSync(w2.filePath, "utf8");
+      const raw = import_node_fs12.default.readFileSync(w2.filePath, "utf8");
       if (!raw) return;
       const allLines = raw.split("\n").filter((l) => l.trim().length > 0);
       if (allLines.length === 0) return;
@@ -25716,7 +25610,7 @@ var SessionObserver = class {
   poll(w2) {
     let size = 0;
     try {
-      size = import_node_fs13.default.statSync(w2.filePath).size;
+      size = import_node_fs12.default.statSync(w2.filePath).size;
     } catch {
       return;
     }
@@ -25725,11 +25619,11 @@ var SessionObserver = class {
       w2.buf = "";
     }
     if (size === w2.lastSize) return;
-    const fd = import_node_fs13.default.openSync(w2.filePath, "r");
+    const fd = import_node_fs12.default.openSync(w2.filePath, "r");
     try {
       const len = size - w2.lastSize;
       const buf = Buffer.alloc(len);
-      import_node_fs13.default.readSync(fd, buf, 0, len, w2.lastSize);
+      import_node_fs12.default.readSync(fd, buf, 0, len, w2.lastSize);
       w2.lastSize = size;
       w2.buf += buf.toString("utf8");
       let newlineIndex;
@@ -25743,7 +25637,7 @@ var SessionObserver = class {
         }
       }
     } finally {
-      import_node_fs13.default.closeSync(fd);
+      import_node_fs12.default.closeSync(fd);
     }
   }
   // 解析 JSONL 单行：仅当是主链 user 文本行（非 sidechain / 非 sub-agent / message.role='user'
@@ -25796,13 +25690,11 @@ var SessionObserver = class {
     }
     if (w2.pollTimer) clearInterval(w2.pollTimer);
     this.watches.delete(sessionId);
-    this.metaObserver?.stop(sessionId);
     this.opts.onStatus?.(sessionId, "stopped");
     return true;
   }
   stopAll() {
     for (const id of [...this.watches.keys()]) this.stop(id);
-    this.metaObserver?.stopAll();
   }
 };
 
@@ -26403,14 +26295,14 @@ function authenticate(token, deps) {
 }
 
 // src/permission/capability-store.ts
-var fs16 = __toESM(require("fs"), 1);
-var path19 = __toESM(require("path"), 1);
+var fs15 = __toESM(require("fs"), 1);
+var path18 = __toESM(require("path"), 1);
 var CAPABILITIES_FILE_NAME = "capabilities.json";
 var FILE_VERSION = 1;
 var CapabilityStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs16.mkdirSync(dataDir, { recursive: true });
+    fs15.mkdirSync(dataDir, { recursive: true });
     this.cache = this.readFromDisk();
   }
   dataDir;
@@ -26434,13 +26326,13 @@ var CapabilityStore = class {
     this.flush();
   }
   filePath() {
-    return path19.join(this.dataDir, CAPABILITIES_FILE_NAME);
+    return path18.join(this.dataDir, CAPABILITIES_FILE_NAME);
   }
   readFromDisk() {
     const file = this.filePath();
     let raw;
     try {
-      raw = fs16.readFileSync(file, "utf8");
+      raw = fs15.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -26468,10 +26360,10 @@ var CapabilityStore = class {
   }
   atomicWrite(file, content) {
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
-    fs16.writeFileSync(tmp, content, { mode: 384 });
-    fs16.renameSync(tmp, file);
+    fs15.writeFileSync(tmp, content, { mode: 384 });
+    fs15.renameSync(tmp, file);
     try {
-      fs16.chmodSync(file, 384);
+      fs15.chmodSync(file, 384);
     } catch {
     }
   }
@@ -26564,14 +26456,14 @@ var CapabilityManager = class {
 };
 
 // src/permission/cleanup.ts
-var fs17 = __toESM(require("fs"), 1);
+var fs16 = __toESM(require("fs"), 1);
 function cleanupGuestSessionsForCapability(cap, factory) {
   const removed = [];
   for (const g2 of cap.grants) {
     if (g2.resource.type !== "persona") continue;
     const dir = factory.vmGuestRoot(g2.resource.id, cap.id);
     try {
-      fs17.rmSync(dir, { recursive: true, force: true });
+      fs16.rmSync(dir, { recursive: true, force: true });
       removed.push(dir);
     } catch {
     }
@@ -26580,13 +26472,13 @@ function cleanupGuestSessionsForCapability(cap, factory) {
 }
 
 // src/permission/personal-capability.ts
-var import_node_fs14 = __toESM(require("fs"), 1);
-var import_node_path15 = __toESM(require("path"), 1);
+var import_node_fs13 = __toESM(require("fs"), 1);
+var import_node_path14 = __toESM(require("path"), 1);
 var import_node_crypto4 = __toESM(require("crypto"), 1);
 var PERSONAL_CAP_FILE_NAME = "personal-capability.json";
 var PERSONAL_CAP_DISPLAY_NAME = "personal";
 function personalCapFilePath(dataDir) {
-  return import_node_path15.default.join(dataDir, PERSONAL_CAP_FILE_NAME);
+  return import_node_path14.default.join(dataDir, PERSONAL_CAP_FILE_NAME);
 }
 function loadOrCreatePersonalCapability(opts) {
   const file = personalCapFilePath(opts.dataDir);
@@ -26616,7 +26508,7 @@ function loadOrCreatePersonalCapability(opts) {
 function readFile(file) {
   let raw;
   try {
-    raw = import_node_fs14.default.readFileSync(file, "utf8");
+    raw = import_node_fs13.default.readFileSync(file, "utf8");
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") return null;
@@ -26637,10 +26529,10 @@ function readFile(file) {
   return { token: obj.token, capability: capParsed.data };
 }
 function writeFile(file, content) {
-  import_node_fs14.default.mkdirSync(import_node_path15.default.dirname(file), { recursive: true });
-  import_node_fs14.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs13.default.mkdirSync(import_node_path14.default.dirname(file), { recursive: true });
+  import_node_fs13.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs14.default.chmodSync(file, 384);
+    import_node_fs13.default.chmodSync(file, 384);
   } catch {
   }
 }
@@ -26655,13 +26547,13 @@ function sha256Hex2(s) {
 }
 
 // src/inbox/inbox-store.ts
-var fs19 = __toESM(require("fs"), 1);
-var path21 = __toESM(require("path"), 1);
+var fs18 = __toESM(require("fs"), 1);
+var path20 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs19.mkdirSync(this.dirPath(), { recursive: true });
+    fs18.mkdirSync(this.dirPath(), { recursive: true });
   }
   dataDir;
   /**
@@ -26673,7 +26565,7 @@ var InboxStore = class {
     const file = this.filePath(peerOwnerId);
     let raw;
     try {
-      raw = fs19.readFileSync(file, "utf8");
+      raw = fs18.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -26689,7 +26581,7 @@ var InboxStore = class {
     const dir = this.dirPath();
     let entries;
     try {
-      entries = fs19.readdirSync(dir);
+      entries = fs18.readdirSync(dir);
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -26705,9 +26597,9 @@ var InboxStore = class {
     if (existing.some((m2) => m2.id === message.id)) return;
     const file = this.filePath(message.peerOwnerId);
     const line = JSON.stringify(message) + "\n";
-    fs19.appendFileSync(file, line, { mode: 384 });
+    fs18.appendFileSync(file, line, { mode: 384 });
     try {
-      fs19.chmodSync(file, 384);
+      fs18.chmodSync(file, 384);
     } catch {
     }
   }
@@ -26737,7 +26629,7 @@ var InboxStore = class {
   removeByPeerOwnerId(peerOwnerId) {
     const file = this.filePath(peerOwnerId);
     try {
-      fs19.unlinkSync(file);
+      fs18.unlinkSync(file);
     } catch (err) {
       if (err?.code === "ENOENT") return;
     }
@@ -26746,18 +26638,18 @@ var InboxStore = class {
     const file = this.filePath(peerOwnerId);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     const content = messages.map((m2) => JSON.stringify(m2)).join("\n") + (messages.length > 0 ? "\n" : "");
-    fs19.writeFileSync(tmp, content, { mode: 384 });
-    fs19.renameSync(tmp, file);
+    fs18.writeFileSync(tmp, content, { mode: 384 });
+    fs18.renameSync(tmp, file);
     try {
-      fs19.chmodSync(file, 384);
+      fs18.chmodSync(file, 384);
     } catch {
     }
   }
   dirPath() {
-    return path21.join(this.dataDir, INBOX_SUBDIR);
+    return path20.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerOwnerId) {
-    return path21.join(this.dirPath(), `${peerOwnerId}.jsonl`);
+    return path20.join(this.dirPath(), `${peerOwnerId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -26844,8 +26736,8 @@ var InboxManager = class {
 };
 
 // src/state/received-capability-store.ts
-var fs20 = __toESM(require("fs"), 1);
-var path22 = __toESM(require("path"), 1);
+var fs19 = __toESM(require("fs"), 1);
+var path21 = __toESM(require("path"), 1);
 var FILE_NAME = "received-capabilities.json";
 var ReceivedCapabilityStore = class {
   constructor(dataDir) {
@@ -26855,10 +26747,10 @@ var ReceivedCapabilityStore = class {
   caps = /* @__PURE__ */ new Map();
   load() {
     this.caps.clear();
-    const file = path22.join(this.dataDir, FILE_NAME);
+    const file = path21.join(this.dataDir, FILE_NAME);
     let raw;
     try {
-      raw = fs20.readFileSync(file, "utf8");
+      raw = fs19.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code !== "ENOENT") this.renameBak(file);
       return;
@@ -26895,20 +26787,20 @@ var ReceivedCapabilityStore = class {
     this.flush();
   }
   flush() {
-    const file = path22.join(this.dataDir, FILE_NAME);
+    const file = path21.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
       { receivedCaps: Array.from(this.caps.values()) },
       null,
       2
     );
-    fs20.mkdirSync(this.dataDir, { recursive: true });
-    fs20.writeFileSync(tmp, content, { mode: 384 });
-    fs20.renameSync(tmp, file);
+    fs19.mkdirSync(this.dataDir, { recursive: true });
+    fs19.writeFileSync(tmp, content, { mode: 384 });
+    fs19.renameSync(tmp, file);
   }
   renameBak(file) {
     try {
-      fs20.renameSync(file, `${file}.bak`);
+      fs19.renameSync(file, `${file}.bak`);
     } catch {
     }
   }
@@ -27006,61 +26898,61 @@ async function connectRemote(args) {
 }
 
 // src/migrations/2026-05-20-flatten-sessions.ts
-var fs21 = __toESM(require("fs"), 1);
-var path23 = __toESM(require("path"), 1);
+var fs20 = __toESM(require("fs"), 1);
+var path22 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path23.join(dataDir, "sessions");
-  const flagPath = path23.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path22.join(dataDir, "sessions");
+  const flagPath = path22.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path23.join(sessionsDir, "default");
+  const defaultDir = path22.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path23.join(defaultDir, entry);
-      const dst = path23.join(sessionsDir, entry);
-      fs21.renameSync(src, dst);
+      const src = path22.join(defaultDir, entry);
+      const dst = path22.join(sessionsDir, entry);
+      fs20.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path23.join(sessionsDir, pid);
+    const personaDir = path22.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path23.join(personaDir, "owner");
+    const ownerSrc = path22.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path23.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs21.mkdirSync(ownerDst, { recursive: true });
+      const ownerDst = path22.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      fs20.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs21.renameSync(path23.join(ownerSrc, file), path23.join(ownerDst, file));
+        fs20.renameSync(path22.join(ownerSrc, file), path22.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path23.join(personaDir, "listener");
+    const listenerSrc = path22.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path23.join(dataDir, ".legacy", `listener-${pid}`);
-      fs21.mkdirSync(archiveDst, { recursive: true });
+      const archiveDst = path22.join(dataDir, ".legacy", `listener-${pid}`);
+      fs20.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs21.renameSync(path23.join(listenerSrc, file), path23.join(archiveDst, file));
+        fs20.renameSync(path22.join(listenerSrc, file), path22.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs21.mkdirSync(sessionsDir, { recursive: true });
-  fs21.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs20.mkdirSync(sessionsDir, { recursive: true });
+  fs20.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -27071,7 +26963,7 @@ function migrateFlattenSessions(opts) {
 }
 function existsSync3(p2) {
   try {
-    fs21.statSync(p2);
+    fs20.statSync(p2);
     return true;
   } catch {
     return false;
@@ -27079,21 +26971,21 @@ function existsSync3(p2) {
 }
 function isDir(p2) {
   try {
-    return fs21.statSync(p2).isDirectory();
+    return fs20.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p2) {
   try {
-    return fs21.readdirSync(p2);
+    return fs20.readdirSync(p2);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p2) {
   try {
-    fs21.rmdirSync(p2);
+    fs20.rmdirSync(p2);
   } catch {
   }
 }
@@ -27103,7 +26995,7 @@ var import_node_fs15 = __toESM(require("fs"), 1);
 var import_node_path17 = __toESM(require("path"), 1);
 
 // src/attachment/mime.ts
-var import_node_path16 = __toESM(require("path"), 1);
+var import_node_path15 = __toESM(require("path"), 1);
 var TEXT_PLAIN = "text/plain; charset=utf-8";
 var EXT_TO_NATIVE_MIME = {
   // 图片
@@ -27210,7 +27102,7 @@ var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
   ".mk"
 ]);
 function lookupMime(filePathOrName) {
-  const ext = import_node_path16.default.extname(filePathOrName).toLowerCase();
+  const ext = import_node_path15.default.extname(filePathOrName).toLowerCase();
   if (EXT_TO_NATIVE_MIME[ext]) return EXT_TO_NATIVE_MIME[ext];
   if (TEXT_EXTENSIONS.has(ext)) return TEXT_PLAIN;
   return "application/octet-stream";
@@ -27278,7 +27170,131 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
   return { ok: true, absPath };
 }
 
+// src/attachment/upload.ts
+var import_node_fs14 = __toESM(require("fs"), 1);
+var import_node_path16 = __toESM(require("path"), 1);
+var import_node_crypto6 = __toESM(require("crypto"), 1);
+var import_promises = require("stream/promises");
+var UploadError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "UploadError";
+  }
+  code;
+};
+function assertValidFileName(fileName) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path16.default.basename(fileName)) {
+    throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
+  }
+}
+var HASH_PREFIX_LEN = 16;
+async function writeUploadedAttachment(args) {
+  assertValidFileName(args.fileName);
+  const attachmentsRoot = import_node_path16.default.join(args.sessionDir, ".attachments");
+  try {
+    import_node_fs14.default.mkdirSync(attachmentsRoot, { recursive: true });
+  } catch (err) {
+    throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
+  }
+  const hasher = import_node_crypto6.default.createHash("sha256");
+  let actualSize = 0;
+  const tmpPath = import_node_path16.default.join(
+    attachmentsRoot,
+    `.upload-${process.pid}-${Date.now()}-${import_node_crypto6.default.randomBytes(4).toString("hex")}`
+  );
+  try {
+    await (0, import_promises.pipeline)(
+      args.body,
+      async function* (source) {
+        for await (const chunk of source) {
+          const buf = chunk;
+          actualSize += buf.length;
+          hasher.update(buf);
+          yield buf;
+        }
+      },
+      import_node_fs14.default.createWriteStream(tmpPath, { mode: 384 })
+    );
+  } catch (err) {
+    try {
+      import_node_fs14.default.unlinkSync(tmpPath);
+    } catch {
+    }
+    throw new UploadError("STORAGE_ERROR", `write failed: ${err.message}`);
+  }
+  if (actualSize !== args.contentLength) {
+    try {
+      import_node_fs14.default.unlinkSync(tmpPath);
+    } catch {
+    }
+    throw new UploadError(
+      "SIZE_MISMATCH",
+      `expected ${args.contentLength} bytes, got ${actualSize}`
+    );
+  }
+  const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
+  const hashDir = import_node_path16.default.join(attachmentsRoot, attachmentId);
+  let finalFileName;
+  let hashDirExists = false;
+  try {
+    hashDirExists = import_node_fs14.default.statSync(hashDir).isDirectory();
+  } catch {
+  }
+  if (hashDirExists) {
+    const existing = import_node_fs14.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
+    finalFileName = existing[0] ?? args.fileName;
+    try {
+      import_node_fs14.default.unlinkSync(tmpPath);
+    } catch {
+    }
+  } else {
+    try {
+      import_node_fs14.default.mkdirSync(hashDir, { recursive: true });
+      finalFileName = args.fileName;
+      import_node_fs14.default.renameSync(tmpPath, import_node_path16.default.join(hashDir, finalFileName));
+    } catch (err) {
+      try {
+        import_node_fs14.default.unlinkSync(tmpPath);
+      } catch {
+      }
+      throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
+    }
+  }
+  const absPath = import_node_path16.default.join(hashDir, finalFileName);
+  const relPath = import_node_path16.default.relative(args.sessionDir, absPath);
+  args.groupFileStore.upsert(args.scope, args.sessionId, {
+    relPath: absPath,
+    // 存绝对路径，与现有 agent 入清单的形态一致（attachment.ts:144 双形态兼容）
+    from: "user-upload",
+    label: args.fileName,
+    size: actualSize,
+    mime: args.mimeType
+  });
+  return { attachmentId, absPath, relPath, sizeBytes: actualSize, mimeType: args.mimeType };
+}
+
 // src/transport/http-router.ts
+var UPLOAD_MIME_ALLOW = /* @__PURE__ */ new Set([
+  "image/png",
+  "image/jpeg",
+  "image/gif",
+  "image/webp",
+  "application/pdf"
+]);
+var UPLOAD_MIME_ALLOW_PREFIX = ["text/"];
+var UPLOAD_MAX_BYTES = 25 * 1024 * 1024;
+function isUploadMimeAllowed(mime) {
+  if (UPLOAD_MIME_ALLOW.has(mime)) return true;
+  return UPLOAD_MIME_ALLOW_PREFIX.some((p2) => mime.startsWith(p2));
+}
+function isValidUploadFileName(fileName) {
+  if (fileName.length === 0) return false;
+  if (fileName === "." || fileName === "..") return false;
+  if (fileName.startsWith(".")) return false;
+  if (fileName.includes("/") || fileName.includes("\\")) return false;
+  return fileName === import_node_path17.default.basename(fileName);
+}
 function createHttpRouter(deps) {
   return async (req, res) => {
     const url = parseUrl(req.url);
@@ -27292,7 +27308,7 @@ function createHttpRouter(deps) {
       });
       return true;
     }
-    if (!url.pathname.startsWith("/session/") && !url.pathname.startsWith("/files/")) {
+    if (!url.pathname.startsWith("/session/") && !url.pathname.startsWith("/files/") && url.pathname !== "/attachments/upload") {
       return false;
     }
     if (url.pathname.startsWith("/files/") && req.method === "GET") {
@@ -27332,6 +27348,106 @@ function createHttpRouter(deps) {
       sendJson(res, 401, { code: "UNAUTHORIZED", message: "missing or invalid bearer token" });
       return true;
     }
+    if (url.pathname === "/attachments/upload" && req.method === "POST") {
+      if (ctx.role !== "owner") {
+        sendJson(res, 403, { code: "FORBIDDEN", message: "owner only" });
+        return true;
+      }
+      const up = deps.attachmentUpload;
+      if (!up) {
+        sendJson(res, 501, { code: "NOT_IMPLEMENTED", message: "attachment upload not wired" });
+        return true;
+      }
+      const sessionId = url.searchParams.get("sessionId");
+      const fileName = url.searchParams.get("fileName");
+      const mimeType = url.searchParams.get("mimeType");
+      const contentLengthRaw = req.headers["content-length"];
+      if (!sessionId || !fileName || !mimeType || !contentLengthRaw) {
+        sendJson(res, 400, {
+          code: "INVALID_PARAM",
+          message: "missing sessionId/fileName/mimeType/Content-Length"
+        });
+        return true;
+      }
+      if (!isValidUploadFileName(fileName)) {
+        sendJson(res, 400, {
+          code: "INVALID_FILENAME",
+          message: `fileName must be a plain basename (no path separators, no dotfiles): ${fileName}`
+        });
+        return true;
+      }
+      const contentLength = Number.parseInt(contentLengthRaw, 10);
+      if (!Number.isFinite(contentLength) || contentLength < 0) {
+        sendJson(res, 400, { code: "INVALID_PARAM", message: "malformed Content-Length" });
+        return true;
+      }
+      if (contentLength > UPLOAD_MAX_BYTES) {
+        sendJson(res, 413, {
+          code: "FILE_TOO_LARGE",
+          message: `max ${UPLOAD_MAX_BYTES} bytes`
+        });
+        return true;
+      }
+      if (!isUploadMimeAllowed(mimeType)) {
+        sendJson(res, 400, {
+          code: "UNSUPPORTED_MIME",
+          message: `mime ${mimeType} not allowed`
+        });
+        return true;
+      }
+      const sessionDir = up.getSessionDir(sessionId);
+      const scope = up.getSessionScope(sessionId);
+      if (!sessionDir || !scope) {
+        sendJson(res, 404, { code: "NOT_FOUND", message: `session ${sessionId} not found` });
+        return true;
+      }
+      const httpBaseUrl = up.getHttpBaseUrl();
+      if (!httpBaseUrl) {
+        sendJson(res, 503, {
+          code: "TUNNEL_NOT_READY",
+          message: "httpBaseUrl unavailable"
+        });
+        return true;
+      }
+      const secret = deps.getSignSecret?.();
+      if (!secret) {
+        sendJson(res, 501, {
+          code: "NOT_IMPLEMENTED",
+          message: "sign secret unavailable (noAuth?)"
+        });
+        return true;
+      }
+      try {
+        const result = await writeUploadedAttachment({
+          sessionDir,
+          sessionId,
+          scope,
+          fileName,
+          mimeType,
+          contentLength,
+          body: req,
+          groupFileStore: up.groupFileStore
+        });
+        const parts = signUrlParts(secret, result.absPath, null);
+        const fullUrl = buildSignedFileUrl(httpBaseUrl, parts);
+        sendJson(res, 200, {
+          attachmentId: result.attachmentId,
+          url: fullUrl,
+          relPath: result.relPath,
+          sizeBytes: result.sizeBytes,
+          mimeType: result.mimeType
+        });
+      } catch (err) {
+        if (err instanceof UploadError) {
+          const status = err.code === "SIZE_MISMATCH" ? 400 : 500;
+          sendJson(res, status, { code: err.code, message: err.message });
+        } else {
+          deps.logger?.warn("attachment upload failed", { err: err.message });
+          sendJson(res, 500, { code: "STORAGE_ERROR", message: err.message });
+        }
+      }
+      return true;
+    }
     const sessionFilesMatch = url.pathname.match(/^\/session\/([^/]+)\/files$/);
     if (sessionFilesMatch && req.method === "GET") {
       const sid = sessionFilesMatch[1];
@@ -27413,10 +27529,78 @@ function streamFile(res, absPath, logger) {
   stream.pipe(res);
 }
 
-// src/attachment/group.ts
+// src/attachment/gc.ts
 var import_node_fs16 = __toESM(require("fs"), 1);
 var import_node_path18 = __toESM(require("path"), 1);
-var import_node_crypto6 = __toESM(require("crypto"), 1);
+var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
+function runAttachmentGc(args) {
+  const now = (args.now ?? Date.now)();
+  const ttlMs = args.ttlMs ?? DEFAULT_TTL_MS;
+  const liveAbs = /* @__PURE__ */ new Set();
+  for (const { scope, sessionId } of args.sessionScopes) {
+    for (const entry of args.groupFileStore.list(scope, sessionId)) {
+      if (entry.stale) continue;
+      if (import_node_path18.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+    }
+  }
+  for (const { scope, sessionId } of args.sessionScopes) {
+    const sessionDir = args.getSessionCwd?.(sessionId) ?? import_node_path18.default.join(
+      args.dataDir,
+      "sessions",
+      ...scopeSubPath(scope).map(safeFileName),
+      safeFileName(sessionId)
+    );
+    const attRoot = import_node_path18.default.join(sessionDir, ".attachments");
+    let hashDirs;
+    try {
+      hashDirs = import_node_fs16.default.readdirSync(attRoot);
+    } catch (err) {
+      if (err.code === "ENOENT") continue;
+      args.logger?.warn("attachment gc: readdir failed", { attRoot, err: err.message });
+      continue;
+    }
+    for (const hashDir of hashDirs) {
+      const hashDirAbs = import_node_path18.default.join(attRoot, hashDir);
+      let files;
+      try {
+        files = import_node_fs16.default.readdirSync(hashDirAbs);
+      } catch {
+        continue;
+      }
+      for (const name of files) {
+        const file = import_node_path18.default.join(hashDirAbs, name);
+        let stat;
+        try {
+          stat = import_node_fs16.default.statSync(file);
+        } catch {
+          continue;
+        }
+        if (!stat.isFile()) continue;
+        const age = now - stat.mtimeMs;
+        if (age < ttlMs) continue;
+        if (liveAbs.has(file)) continue;
+        try {
+          import_node_fs16.default.unlinkSync(file);
+        } catch (err) {
+          args.logger?.warn("attachment gc: unlink failed", { file, err: err.message });
+        }
+      }
+      try {
+        if (import_node_fs16.default.readdirSync(hashDirAbs).length === 0) import_node_fs16.default.rmdirSync(hashDirAbs);
+      } catch {
+      }
+    }
+    try {
+      if (import_node_fs16.default.readdirSync(attRoot).length === 0) import_node_fs16.default.rmdirSync(attRoot);
+    } catch {
+    }
+  }
+}
+
+// src/attachment/group.ts
+var import_node_fs17 = __toESM(require("fs"), 1);
+var import_node_path19 = __toESM(require("path"), 1);
+var import_node_crypto7 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
   dataDir;
@@ -27427,11 +27611,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path18.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path19.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path18.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path19.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -27440,7 +27624,7 @@ var GroupFileStore = class {
   readFile(scope, sessionId) {
     const file = this.filePath(scope, sessionId);
     try {
-      const raw = import_node_fs16.default.readFileSync(file, "utf8");
+      const raw = import_node_fs17.default.readFileSync(file, "utf8");
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) {
         this.logger?.warn("GroupFileStore.readFile: not an array; resetting session entries", {
@@ -27466,10 +27650,10 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs16.default.mkdirSync(import_node_path18.default.dirname(file), { recursive: true });
+    import_node_fs17.default.mkdirSync(import_node_path19.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs16.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
-    import_node_fs16.default.renameSync(tmp, file);
+    import_node_fs17.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
+    import_node_fs17.default.renameSync(tmp, file);
   }
   /** 拉一份当前 session 的清单。读盘 → cache；之后调用复用 cache */
   list(scope, sessionId) {
@@ -27505,7 +27689,7 @@ var GroupFileStore = class {
       entries[idx] = next;
     } else {
       next = {
-        id: `gf-${import_node_crypto6.default.randomBytes(6).toString("base64url")}`,
+        id: `gf-${import_node_crypto7.default.randomBytes(6).toString("base64url")}`,
         relPath: input.relPath,
         from: input.from,
         label: input.label,
@@ -27555,10 +27739,10 @@ var GroupFileStore = class {
 };
 
 // src/discovery/state-file.ts
-var import_node_fs17 = __toESM(require("fs"), 1);
-var import_node_path19 = __toESM(require("path"), 1);
+var import_node_fs18 = __toESM(require("fs"), 1);
+var import_node_path20 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path19.default.join(dataDir, "state.json");
+  return import_node_path20.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -27580,7 +27764,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs17.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs18.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -27594,34 +27778,34 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs17.default.mkdirSync(import_node_path19.default.dirname(this.file), { recursive: true });
+    import_node_fs18.default.mkdirSync(import_node_path20.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs17.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs17.default.renameSync(tmp, this.file);
+    import_node_fs18.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs18.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs17.default.chmodSync(this.file, 384);
+        import_node_fs18.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs17.default.unlinkSync(this.file);
+      import_node_fs18.default.unlinkSync(this.file);
     } catch {
     }
   }
 };
 
 // src/tunnel/tunnel-manager.ts
-var import_node_fs21 = __toESM(require("fs"), 1);
-var import_node_path23 = __toESM(require("path"), 1);
-var import_node_crypto7 = __toESM(require("crypto"), 1);
+var import_node_fs22 = __toESM(require("fs"), 1);
+var import_node_path24 = __toESM(require("path"), 1);
+var import_node_crypto8 = __toESM(require("crypto"), 1);
 var import_node_child_process5 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
-var import_node_fs18 = __toESM(require("fs"), 1);
-var import_node_path20 = __toESM(require("path"), 1);
+var import_node_fs19 = __toESM(require("fs"), 1);
+var import_node_path21 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -27629,7 +27813,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs18.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs19.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -27640,22 +27824,22 @@ var TunnelStore = class {
     }
   }
   async set(v2) {
-    const dir = import_node_path20.default.dirname(this.filePath);
-    await import_node_fs18.default.promises.mkdir(dir, { recursive: true });
+    const dir = import_node_path21.default.dirname(this.filePath);
+    await import_node_fs19.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs18.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs19.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs18.default.promises.chmod(tmp, 384);
+        await import_node_fs19.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs18.default.promises.rename(tmp, this.filePath);
+    await import_node_fs19.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs18.default.promises.unlink(this.filePath);
+      await import_node_fs19.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -27750,12 +27934,12 @@ function escape(v2) {
 }
 
 // src/tunnel/frpc-binary.ts
-var import_node_fs19 = __toESM(require("fs"), 1);
-var import_node_os10 = __toESM(require("os"), 1);
-var import_node_path21 = __toESM(require("path"), 1);
+var import_node_fs20 = __toESM(require("fs"), 1);
+var import_node_os9 = __toESM(require("os"), 1);
+var import_node_path22 = __toESM(require("path"), 1);
 var import_node_child_process3 = require("child_process");
 var import_node_stream2 = require("stream");
-var import_promises = require("stream/promises");
+var import_promises2 = require("stream/promises");
 var FRPC_VERSION = "0.68.0";
 var UnsupportedPlatformError = class extends Error {
   constructor(platform, arch) {
@@ -27784,20 +27968,20 @@ function frpcDownloadUrl(version2, p2) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs19.default.existsSync(opts.override)) {
+    if (!import_node_fs20.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path21.default.join(opts.dataDir, "bin");
-  import_node_fs19.default.mkdirSync(binDir, { recursive: true });
+  const binDir = import_node_path22.default.join(opts.dataDir, "bin");
+  import_node_fs20.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path21.default.join(binDir, "frpc");
-  if (import_node_fs19.default.existsSync(stableBin)) return stableBin;
+  const stableBin = import_node_path22.default.join(binDir, "frpc");
+  if (import_node_fs20.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path21.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path22.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -27806,8 +27990,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs19.default.chmodSync(partialBin, 493);
-    import_node_fs19.default.renameSync(partialBin, stableBin);
+    import_node_fs20.default.chmodSync(partialBin, 493);
+    import_node_fs20.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -27817,15 +28001,15 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs19.default.readdirSync(binDir);
+    entries = import_node_fs20.default.readdirSync(binDir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path21.default.join(binDir, name);
+      const full = import_node_path22.default.join(binDir, name);
       try {
-        import_node_fs19.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs20.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -27833,7 +28017,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p2) {
   try {
-    import_node_fs19.default.unlinkSync(p2);
+    import_node_fs20.default.unlinkSync(p2);
   } catch {
   }
 }
@@ -27844,13 +28028,13 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs19.default.createWriteStream(dest);
+  const out = import_node_fs20.default.createWriteStream(dest);
   const nodeStream = import_node_stream2.Readable.fromWeb(res.body);
-  await (0, import_promises.pipeline)(nodeStream, out);
+  await (0, import_promises2.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path21.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs19.default.mkdirSync(work, { recursive: true });
+  const work = import_node_path22.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  import_node_fs20.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve6, reject) => {
       const proc = (0, import_node_child_process3.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
@@ -27858,32 +28042,32 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
       proc.on("exit", (code) => code === 0 ? resolve6() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path21.default.join(work, dirName, "frpc");
-    if (!import_node_fs19.default.existsSync(src)) {
+    const src = import_node_path22.default.join(work, dirName, "frpc");
+    if (!import_node_fs20.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs19.default.copyFileSync(src, destBin);
+    import_node_fs20.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs19.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs20.default.rmSync(work, { recursive: true, force: true });
   }
 }
 
 // src/tunnel/frpc-process.ts
-var import_node_fs20 = __toESM(require("fs"), 1);
-var import_node_path22 = __toESM(require("path"), 1);
+var import_node_fs21 = __toESM(require("fs"), 1);
+var import_node_path23 = __toESM(require("path"), 1);
 var import_node_child_process4 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path22.default.join(dataDir, "frpc.pid");
+  return import_node_path23.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
-    import_node_fs20.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
+    import_node_fs21.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearFrpcPid(dataDir) {
   try {
-    import_node_fs20.default.unlinkSync(frpcPidFilePath(dataDir));
+    import_node_fs21.default.unlinkSync(frpcPidFilePath(dataDir));
   } catch {
   }
 }
@@ -27899,7 +28083,7 @@ function defaultIsPidAlive(pid) {
 }
 function defaultReadPidFile(file) {
   try {
-    return import_node_fs20.default.readFileSync(file, "utf8");
+    return import_node_fs21.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -27915,7 +28099,7 @@ function defaultSleep(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path22.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path23.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -27939,7 +28123,7 @@ async function killStaleFrpc(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs20.default.unlinkSync(pidFile);
+      import_node_fs21.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -27950,7 +28134,7 @@ async function killStaleFrpc(deps) {
   }
   await sleep(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs20.default.unlinkSync(pidFile);
+    import_node_fs21.default.unlinkSync(pidFile);
   } catch {
   }
 }
@@ -27987,7 +28171,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path23.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path24.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -28114,8 +28298,8 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path23.default.join(this.deps.dataDir, "frpc.toml");
-      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto7.default.randomBytes(3).toString("hex")}`;
+      const tomlPath = import_node_path24.default.join(this.deps.dataDir, "frpc.toml");
+      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto8.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
         serverPort: t.frpsPort,
@@ -28125,12 +28309,12 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs21.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      await import_node_fs22.default.promises.writeFile(tomlPath, toml, { mode: 384 });
       const proc = (this.deps.spawnImpl ?? import_node_child_process5.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logFilePath = import_node_path23.default.join(this.deps.dataDir, "frpc.log");
-      const logStream = import_node_fs21.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logFilePath = import_node_path24.default.join(this.deps.dataDir, "frpc.log");
+      const logStream = import_node_fs22.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -28212,23 +28396,23 @@ async function waitForFrpcReady(proc, timeoutMs) {
 }
 
 // src/tunnel/device-key.ts
-var import_node_os11 = __toESM(require("os"), 1);
-var import_node_crypto8 = __toESM(require("crypto"), 1);
+var import_node_os10 = __toESM(require("os"), 1);
+var import_node_crypto9 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
-  const hostname = opts.hostname ?? import_node_os11.default.hostname();
-  const uid = opts.uid ?? (typeof import_node_os11.default.userInfo === "function" ? import_node_os11.default.userInfo().uid : 0);
+  const hostname = opts.hostname ?? import_node_os10.default.hostname();
+  const uid = opts.uid ?? (typeof import_node_os10.default.userInfo === "function" ? import_node_os10.default.userInfo().uid : 0);
   const input = `${hostname}::${uid}`;
-  return import_node_crypto8.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
+  return import_node_crypto9.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
-var import_node_fs22 = __toESM(require("fs"), 1);
-var import_node_path24 = __toESM(require("path"), 1);
-var import_node_crypto9 = __toESM(require("crypto"), 1);
+var import_node_fs23 = __toESM(require("fs"), 1);
+var import_node_path25 = __toESM(require("path"), 1);
+var import_node_crypto10 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path24.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path25.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -28253,14 +28437,14 @@ function loadOrCreateAuthFile(opts) {
   return next;
 }
 function defaultGenerateToken2() {
-  return import_node_crypto9.default.randomBytes(32).toString("base64url");
+  return import_node_crypto10.default.randomBytes(32).toString("base64url");
 }
 function defaultGenerateOwnerPrincipalId() {
-  return `owner-${import_node_crypto9.default.randomUUID()}`;
+  return `owner-${import_node_crypto10.default.randomUUID()}`;
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs22.default.readFileSync(file, "utf8");
+    const raw = import_node_fs23.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -28278,25 +28462,25 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs22.default.mkdirSync(import_node_path24.default.dirname(file), { recursive: true });
-  import_node_fs22.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs23.default.mkdirSync(import_node_path25.default.dirname(file), { recursive: true });
+  import_node_fs23.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs22.default.chmodSync(file, 384);
+    import_node_fs23.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs23 = __toESM(require("fs"), 1);
-var import_node_os12 = __toESM(require("os"), 1);
-var import_node_path25 = __toESM(require("path"), 1);
+var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_os11 = __toESM(require("os"), 1);
+var import_node_path26 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function loadOwnerDisplayName(dataDir) {
-  const fallback = import_node_os12.default.userInfo().username;
-  const profilePath = import_node_path25.default.join(dataDir, PROFILE_FILENAME);
+  const fallback = import_node_os11.default.userInfo().username;
+  const profilePath = import_node_path26.default.join(dataDir, PROFILE_FILENAME);
   let raw;
   try {
-    raw = import_node_fs23.default.readFileSync(profilePath, "utf8");
+    raw = import_node_fs24.default.readFileSync(profilePath, "utf8");
   } catch {
     return fallback;
   }
@@ -28325,12 +28509,12 @@ init_protocol();
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs24 = __toESM(require("fs"), 1);
-var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path26 = __toESM(require("path"), 1);
+var import_node_fs25 = __toESM(require("fs"), 1);
+var import_node_os12 = __toESM(require("os"), 1);
+var import_node_path27 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs24.default.readFileSync(file, "utf8");
+  const raw = import_node_fs25.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -28343,10 +28527,10 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path26.default.join(import_node_os13.default.homedir(), ".claude");
-  const projectDir = import_node_path26.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  const sourceFile = import_node_path26.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs24.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path27.default.join(import_node_os12.default.homedir(), ".claude");
+  const projectDir = import_node_path27.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  const sourceFile = import_node_path27.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs25.default.existsSync(sourceFile)) {
     throw new Error(`fork: source transcript not found: ${sourceFile}`);
   }
   const entries = readJsonlEntries(sourceFile);
@@ -28376,9 +28560,9 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const forkedFilePath = import_node_path26.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs24.default.mkdirSync(projectDir, { recursive: true });
-  import_node_fs24.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const forkedFilePath = import_node_path27.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs25.default.mkdirSync(projectDir, { recursive: true });
+  import_node_fs25.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
@@ -28710,7 +28894,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path36 = __toESM(require("path"), 1);
+var path37 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -28728,7 +28912,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path35 = __toESM(require("path"), 1);
+var path36 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -28741,26 +28925,26 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read") {
-  const root = path35.resolve(personaRoot);
-  const target = path35.resolve(absPath);
-  const sep3 = root.endsWith(path35.sep) ? "" : path35.sep;
+  const root = path36.resolve(personaRoot);
+  const target = path36.resolve(absPath);
+  const sep3 = root.endsWith(path36.sep) ? "" : path36.sep;
   if (!target.startsWith(root + sep3)) return false;
-  const rel = path35.relative(root, target);
+  const rel = path36.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId = rel.split(path35.sep)[0];
+  const personaId = rel.split(path36.sep)[0];
   if (!personaId) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path35.resolve(personaRoot);
-  const target = path35.resolve(absPath);
-  const sep3 = root.endsWith(path35.sep) ? "" : path35.sep;
+  const root = path36.resolve(personaRoot);
+  const target = path36.resolve(absPath);
+  const sep3 = root.endsWith(path36.sep) ? "" : path36.sep;
   if (!target.startsWith(root + sep3)) return null;
-  const rel = path35.relative(root, target);
+  const rel = path36.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path35.sep)[0];
+  const id = rel.split(path36.sep)[0];
   return id || null;
 }
 
@@ -28785,7 +28969,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path36.join(personaRoot, pid),
+          path37.join(personaRoot, pid),
           personaRoot,
           "read"
         );
@@ -28796,7 +28980,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path36.resolve(args.projectPath), personaRoot, "history:list");
+    assertGuestPath(ctx, path37.resolve(args.projectPath), personaRoot, "history:list");
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -28828,13 +29012,13 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path36.resolve(args.cwd), personaRoot, "history:subagents");
+    assertGuestPath(ctx, path37.resolve(args.cwd), personaRoot, "history:subagents");
     const subs = await history.listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path36.resolve(args.cwd), personaRoot, "history:subagent-read");
+    assertGuestPath(ctx, path37.resolve(args.cwd), personaRoot, "history:subagent-read");
     const res = await history.readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
   };
@@ -28842,7 +29026,7 @@ function buildHistoryHandlers(deps) {
     const dirs = listRecentDirs(store);
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path36.resolve(d.cwd), personaRoot, "read")
+        (d) => isGuestPathAllowed(ctx.grants, path37.resolve(d.cwd), personaRoot, "read")
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -28859,8 +29043,8 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path37 = __toESM(require("path"), 1);
-var os14 = __toESM(require("os"), 1);
+var path38 = __toESM(require("path"), 1);
+var os13 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
 function buildEnabledPluginNames(personaManager, personaId) {
@@ -28899,23 +29083,23 @@ function buildWorkspaceHandlers(deps) {
   const list = async (frame, _client, ctx) => {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
-    const fallbackCwd = isGuest && personaRoot ? personaRoot : os14.homedir();
-    const resolvedCwd = path37.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path37.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const fallbackCwd = isGuest && personaRoot ? personaRoot : os13.homedir();
+    const resolvedCwd = path38.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path38.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list");
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path37.isAbsolute(args.path) ? path37.resolve(args.path) : path37.resolve(args.cwd, args.path);
+    const target = path38.isAbsolute(args.path) ? path38.resolve(args.path) : path38.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read");
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path37.resolve(args.cwd);
+    const cwdAbs = path38.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list");
     const list2 = skills.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -28927,7 +29111,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path37.resolve(args.cwd);
+    const cwdAbs = path38.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list");
     const list2 = agents.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -28946,20 +29130,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path39 = __toESM(require("path"), 1);
+var path40 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process6 = require("child_process");
-var import_node_fs25 = __toESM(require("fs"), 1);
-var import_node_path27 = __toESM(require("path"), 1);
+var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_path28 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process6.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path27.default.resolve(p2);
+  const resolved = import_node_path28.default.resolve(p2);
   try {
-    return import_node_fs25.default.realpathSync(resolved);
+    return import_node_fs26.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -29032,7 +29216,7 @@ async function listGitBranches(cwd) {
 // src/handlers/git.ts
 function assertGuestCwd(ctx, cwd, personaRoot, method) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
-  if (!isGuestPathAllowed(ctx.grants, path39.resolve(cwd), personaRoot, "read")) {
+  if (!isGuestPathAllowed(ctx.grants, path40.resolve(cwd), personaRoot, "read")) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -29395,7 +29579,7 @@ function buildWhoamiHandler(deps) {
 }
 
 // src/handlers/meta.ts
-var import_node_os14 = __toESM(require("os"), 1);
+var import_node_os13 = __toESM(require("os"), 1);
 init_protocol();
 
 // src/version.ts
@@ -29425,7 +29609,7 @@ function buildReadyFrame(deps, client) {
   return {
     version,
     protocolVersion: PROTOCOL_VERSION,
-    hostname: import_node_os14.default.hostname(),
+    hostname: import_node_os13.default.hostname(),
     os: process.platform,
     tools,
     runningSessions: info.runningSessions,
@@ -29519,7 +29703,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path28 = __toESM(require("path"), 1);
+var import_node_path29 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -29573,12 +29757,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path28.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path28.default.isAbsolute(args.relPath) ? import_node_path28.default.resolve(args.relPath) : import_node_path28.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path29.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path29.default.isAbsolute(args.relPath) ? import_node_path29.default.resolve(args.relPath) : import_node_path29.default.resolve(cwdAbs, args.relPath);
     assertGuestAttachmentPath(ctx, candidateAbs, deps.personaRoot, "attachment.signUrl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path28.default.isAbsolute(e.relPath) ? import_node_path28.default.resolve(e.relPath) : import_node_path28.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path29.default.isAbsolute(e.relPath) ? import_node_path29.default.resolve(e.relPath) : import_node_path29.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -29602,7 +29786,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path28.default.resolve(f.cwd), deps.personaRoot, method);
+    assertGuestAttachmentPath(ctx, import_node_path29.default.resolve(f.cwd), deps.personaRoot, method);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -29643,7 +29827,7 @@ function buildAttachmentHandlers(deps) {
     }
     const entries = deps.groupFileStore.list(scope, parsed.data.sessionId);
     const target = entries.find((e) => e.relPath === parsed.data.relPath);
-    if (target?.from === "owner") {
+    if (target?.from === "owner" || target?.from === "user-upload") {
       deps.groupFileStore.remove(scope, parsed.data.sessionId, parsed.data.relPath);
     } else {
       deps.groupFileStore.markStale(scope, parsed.data.sessionId, parsed.data.relPath);
@@ -29839,7 +30023,7 @@ function computeGrantForFrame(method, frame) {
 async function startDaemon(config) {
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path29.default.join(config.dataDir, "clawd.log")
+    file: import_node_path30.default.join(config.dataDir, "clawd.log")
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const stateMgr = new StateFileManager({ dataDir: config.dataDir });
@@ -29926,7 +30110,7 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path29.default.join(config.dataDir, "personas"));
+  const personaStore = new PersonaStore(import_node_path30.default.join(config.dataDir, "personas"));
   const defaultsRoot = findDefaultsRoot();
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -29943,7 +30127,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path29.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path30.default.join(config.dataDir, "personas"),
     personaStore,
     ownerDisplayName,
     ownerPrincipalId,
@@ -29967,10 +30151,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path29.default.isAbsolute(input.relPath) ? input.relPath : import_node_path29.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path30.default.isAbsolute(input.relPath) ? input.relPath : import_node_path30.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs26.default.statSync(absPath).size;
+          size = import_node_fs27.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -29996,11 +30180,6 @@ async function startDaemon(config) {
     }
   });
   const observer = new SessionObserver({
-    // TUI 模式 pty 跑 CC 不发 SDK system.task_started 帧 → UI pending 期 progress.agentId
-    // 永远 undefined，子 agent 调用过程没有抽屉入口。开 meta observer 后从 subagents 目录
-    // 新出现的 agent-*.meta.json 派生 subagent_progress(started) 补这块缺口。SDK 模式仍走
-    // task_started 路径，避免双 emit 让 ring buffer 双帧。
-    enableSubagentMetaObserver: config.mode === "tui",
     onEvent: ({ sessionId, events }) => {
       manager.feedObserverEvents(sessionId, events);
     },
@@ -30088,10 +30267,10 @@ async function startDaemon(config) {
       // 'persona/<pid>/owner'，default 走 'default'。
       getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
       // guest path guard：candidate 必须在 personaRoot 子树下
-      personaRoot: import_node_path29.default.join(config.dataDir, "personas")
+      personaRoot: import_node_path30.default.join(config.dataDir, "personas")
     },
     // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-    personaRoot: import_node_path29.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path30.default.join(config.dataDir, "personas"),
     // capability:list / delete handler 依赖
     capabilityManager,
     // personal-cap:get 返回的 shareBaseUrl 用此 base URL：
@@ -30127,7 +30306,19 @@ async function startDaemon(config) {
     sessionStore: store,
     // /files HMAC verify 用 auth.json 的 signSecret 字段（与 attachment.signUrl 同源）。
     // --auth-token CLI 模式没 signSecret → 路由返 501，sign URL 功能整体禁用。
-    getSignSecret: () => authFile?.signSecret ?? null
+    getSignSecret: () => authFile?.signSecret ?? null,
+    // chatinput 附件上传（POST /attachments/upload，spec §6.1）。upload pipeline
+    // 在 session.cwd 下的 .attachments/ 落盘；signSecret 与 /files HMAC 同源；
+    // tunnel 未启时返 503 TUNNEL_NOT_READY 让前端显式提示。
+    attachmentUpload: {
+      groupFileStore,
+      getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
+      getSessionDir: (sid) => {
+        const f = manager.findOwnedSession(sid);
+        return f ? f.cwd : null;
+      },
+      getHttpBaseUrl: () => currentTunnelUrl ? getHttpBaseUrl() : null
+    }
   });
   wsServer = new LocalWsServer({
     host: config.host,
@@ -30292,8 +30483,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path29.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path29.default.join(config.dataDir, "frpc.log")}`
+        `Frpc config: ${import_node_path30.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path30.default.join(config.dataDir, "frpc.log")}`
       ];
       const width = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width + 4);
@@ -30306,8 +30497,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path29.default.join(config.dataDir, "connect.txt");
-        import_node_fs26.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path30.default.join(config.dataDir, "connect.txt");
+        import_node_fs27.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -30332,8 +30523,29 @@ ${bar}
       logger.warn("tunnel unavailable, degraded to local mode", { reason: tunnelError });
     }
   }
+  const tickAttachmentGc = () => {
+    try {
+      runAttachmentGc({
+        dataDir: config.dataDir,
+        groupFileStore,
+        sessionScopes: manager.listOwnedSessionScopes().map(({ scope, sessionId }) => ({
+          scope,
+          sessionId
+        })),
+        // 注入 cwd 让 GC 直接定位 .attachments 目录（与 upload 落盘点一致）
+        getSessionCwd: (sid) => manager.findOwnedSession(sid)?.cwd ?? null,
+        logger
+      });
+    } catch (err) {
+      logger.warn("attachment gc tick failed", { err: err.message });
+    }
+  };
+  setImmediate(tickAttachmentGc);
+  const attachmentGcInterval = setInterval(tickAttachmentGc, 24 * 3600 * 1e3);
+  attachmentGcInterval.unref();
   const shutdown = async () => {
     logger.info("stopping clawd");
+    clearInterval(attachmentGcInterval);
     observer.stopAll();
     manager.stopAll();
     if (tunnelMgr) {
@@ -30351,9 +30563,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path29.default.join(dataDir, "persons");
+  const dir = import_node_path30.default.join(dataDir, "persons");
   try {
-    import_node_fs26.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs27.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }