@clawos-dev/clawd 0.2.86-beta.162.77b3c16 → 0.2.86

package/dist/cli.cjs

@@ -65,14 +65,6 @@ var init_methods = __esm({
       "session:unsubscribe",
       "session:pin",
       "session:reorderPins",
-      // mirror peer sessions (2026-05-26): owner-only RPC，写/删本机 mirror SessionFile —
-      // mirror 是「**我**在朋友 daemon 上自己创建的 session」的本机持久化副本（不是朋友的会话），
-      // 方便 sidebar 跨设备聚合。daemon dumb 写删，**不广播任何 push 帧** (不发 session:info /
-      // session:deleted)；UI 是写入唯一源，双写完成后通过 cache.setData('sessions', ...) 同步
-      // 本地 sidebar state。native session:* handler 完全不感知 mirror (UI 操作 mirror 不复用
-      // native 路径)。
-      "peerSession:upsert",
-      "peerSession:remove",
       "permission:respond",
       // AskUserQuestion 表单回写：UI 答完所有 question 后调用，daemon 把答案合并进 updated_input
       // 写一条 control_response 到 CC stdin（详见 events.ts session:question JSDoc）
@@ -651,8 +643,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path44, errorMaps, issueData } = params;
-      const fullPath = [...path44, ...issueData.path || []];
+      const { data, path: path46, errorMaps, issueData } = params;
+      const fullPath = [...path46, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -963,11 +955,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path44, key) {
+      constructor(parent, value, path46, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path44;
+        this._path = path46;
         this._key = key;
       }
       get path() {
@@ -4351,13 +4343,13 @@ var init_zod = __esm({
 });
 
 // ../protocol/src/attachment-schemas.ts
-var TOKEN_ROLES, GROUP_FILE_SOURCES, GroupFileEntrySchema, AttachmentSignUrlArgs, AttachmentSignUrlResponseSchema, AttachmentGroupAddArgs, AttachmentGroupAddResponseSchema, AttachmentGroupRemoveArgs, AttachmentGroupRemoveResponseSchema, AttachmentGroupListArgs, AttachmentGroupListResponseSchema;
+var TOKEN_ROLES, GROUP_FILE_SOURCES, GroupFileEntrySchema, AttachmentSignUrlArgs, AttachmentSignUrlResponseSchema, AttachmentGroupAddArgs, AttachmentGroupAddResponseSchema, AttachmentGroupRemoveArgs, AttachmentGroupRemoveResponseSchema, AttachmentGroupListArgs, AttachmentGroupListResponseSchema, AttachmentUploadResponseSchema;
 var init_attachment_schemas = __esm({
   "../protocol/src/attachment-schemas.ts"() {
     "use strict";
     init_zod();
     TOKEN_ROLES = ["owner"];
-    GROUP_FILE_SOURCES = ["agent", "owner"];
+    GROUP_FILE_SOURCES = ["agent", "owner", "user-upload"];
     GroupFileEntrySchema = external_exports.object({
       /** daemon 派发的稳定 id（用于 RPC remove / UI key） */
       id: external_exports.string().min(1),
@@ -4412,6 +4404,16 @@ var init_attachment_schemas = __esm({
     AttachmentGroupListResponseSchema = external_exports.object({
       entries: external_exports.array(GroupFileEntrySchema)
     });
+    AttachmentUploadResponseSchema = external_exports.object({
+      /** sha256(bytes) 前 16 位，前端持有的稳定 ref */
+      attachmentId: external_exports.string().min(1),
+      /** 完整 tunnel signed URL，前端拼 marker / 直接送 Anthropic 都用它 */
+      url: external_exports.string().min(1),
+      /** 落在 session 目录下的相对路径（后续 group RPC / drawer 展示用） */
+      relPath: external_exports.string().min(1),
+      sizeBytes: external_exports.number().int().nonnegative(),
+      mimeType: external_exports.string().min(1)
+    });
   }
 });
 
@@ -4491,7 +4493,7 @@ var init_persona_schemas = __esm({
 });
 
 // ../protocol/src/schemas.ts
-var SessionStatusSchema, UsageSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, ParsedEventSchema, SessionCreateArgs, SessionIdArgs, SessionUpdateArgs, SessionSendArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsArgs, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionSubscribeArgs, SessionPinArgs, PeerSessionUpsertArgs, PeerSessionUpsertResponseSchema, PeerSessionRemoveArgs, PeerSessionRemoveResponseSchema, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, HistoryRecentDirsArgs, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, AuthRequestFrameSchema, AuthOkFrameSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema;
+var SessionStatusSchema, UsageSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, ParsedEventSchema, SessionCreateArgs, SessionIdArgs, SessionUpdateArgs, SessionSendArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsArgs, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionSubscribeArgs, SessionPinArgs, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, HistoryRecentDirsArgs, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, AuthRequestFrameSchema, AuthOkFrameSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema;
 var init_schemas = __esm({
   "../protocol/src/schemas.ts"() {
     "use strict";
@@ -4619,35 +4621,6 @@ var init_schemas = __esm({
        * 当前为 caller 自报，daemon 不密码学验证真伪；强身份验签是独立工作（B 方案）。
        */
       creatorOwnerPrincipalId: external_exports.string().min(1).optional(),
-      /**
-       * Mirror peer sessions (2026-05-26): mirror 标识。**我在朋友 daemon 上以 guest ctx
-       * 创建的 session**，远端是 source of truth，本机是该 session 的持久化副本，方便
-       * sidebar 跨设备聚合。字段值是远端 daemon 的 ownerPrincipalId（即我接入的那位朋友）。
-       *
-       * 语义关键澄清：mirror **不是朋友创建给我的会话**——它是我自己的会话，只是在朋友
-       * 的机器上跑。sidebar chip 显示 `@<朋友>` 暗示「位置」，不是「来源」。
-       *
-       *   - undefined / 缺省 → 本机 native session（在我自己机器上跑）
-       *   - 非空 → 我的会话在该 ownerPrincipalId 朋友的 daemon 上跑，本机为持久化副本
-       *
-       * 与 `creatorPrincipalId` / `creatorOwnerPrincipalId` 在四类 session 下取值矩阵：
-       *   | 形态                                | creatorPrincipalId       | creatorOwnerPrincipalId | originOwnerPrincipalId |
-       *   |-------------------------------------|--------------------------|-------------------------|------------------------|
-       *   | 本机 owner 自创                      | 本机 ownerPrincipalId    | 本机 ownerPrincipalId   | undefined              |
-       *   | 本机被别人通过 personal token 接入创建 | 远端接入者 cap.id        | 远端接入者 ownerPrincipalId | undefined          |
-       *   | 我在朋友 daemon 上以 guest ctx 创建（mirror 回本机） | 朋友 daemon personal cap.id | 我自己 ownerPrincipalId | 朋友 ownerPrincipalId |
-       *
-       * UI 用法：
-       *   - sidebar Active/Pinned/Recents 过滤：`origin 非空 → 一律视作 self`（绕过 #739 隔离）
-       *   - 行内显示 `@<朋友>` chip 暗示位置
-       *   - 进 ChatPanel 时按 origin 路由到 `pool.ensureRemoteForOwner(origin)` 走远端
-       *
-       * daemon 用法：
-       *   - `peerSession:upsert` / `peerSession:remove` 一族 RPC 专管 mirror 写删；
-       *     daemon dumb write/delete，**不广播任何 push 帧**，UI 是写入唯一源
-       *   - native `session:*` handler 完全不感知 mirror（UI 操作 mirror 不走 native 路径）
-       */
-      originOwnerPrincipalId: external_exports.string().min(1).optional(),
       createdAt: external_exports.string().min(1),
       updatedAt: external_exports.string().min(1)
     });
@@ -5003,14 +4976,6 @@ var init_schemas = __esm({
       sessionId: external_exports.string().min(1),
       pinned: external_exports.boolean()
     });
-    PeerSessionUpsertArgs = SessionFileSchema;
-    PeerSessionUpsertResponseSchema = external_exports.object({
-      type: external_exports.literal("peerSession:upsert:ok")
-    });
-    PeerSessionRemoveArgs = external_exports.object({ sessionId: external_exports.string().min(1) });
-    PeerSessionRemoveResponseSchema = external_exports.object({
-      type: external_exports.literal("peerSession:remove:ok")
-    });
     SessionReorderPinsArgs = external_exports.object({
       orderedIds: external_exports.array(external_exports.string().min(1)).min(1)
     });
@@ -5625,8 +5590,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path44 = req.path;
-        _req.url = typeof path44 === "string" ? path44 : req.url ? req.url.path || req.url : void 0;
+        const path46 = req.path;
+        _req.url = typeof path46 === "string" ? path46 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -5791,14 +5756,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path44) {
+    function parsePath(path46) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path44.length; i++) {
-        const char = path44[i];
+      for (let i = 0; i < path46.length; i++) {
+        const char = path46[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -5929,10 +5894,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path44 of paths) {
-        const parts = parsePath(path44);
+      for (const path46 of paths) {
+        const parts = parsePath(path46);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path44, remove);
+          redactWildcardPath(obj, parts, censor, path46, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -6017,8 +5982,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path44) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path44];
+            const wrappedCensor = typeof censor === "function" ? (value, path46) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path46];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -6053,8 +6018,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path44 of pathsToClone) {
-        const parts = parsePath(path44);
+      for (const path46 of pathsToClone) {
+        const parts = parsePath(path46);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -6106,24 +6071,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path44) {
-      if (typeof path44 !== "string") {
+    function validatePath(path46) {
+      if (typeof path46 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path44 === "") {
+      if (path46 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path44.includes("..")) {
-        throw new Error(`Invalid redaction path (${path44})`);
+      if (path46.includes("..")) {
+        throw new Error(`Invalid redaction path (${path46})`);
       }
-      if (path44.includes(",")) {
-        throw new Error(`Invalid redaction path (${path44})`);
+      if (path46.includes(",")) {
+        throw new Error(`Invalid redaction path (${path46})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path44.length; i++) {
-        const char = path44[i];
+      for (let i = 0; i < path46.length; i++) {
+        const char = path46[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -6137,20 +6102,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path44})`);
+            throw new Error(`Invalid redaction path (${path46})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path44})`);
+        throw new Error(`Invalid redaction path (${path46})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path44 of paths) {
-        validatePath(path44);
+      for (const path46 of paths) {
+        validatePath(path46);
       }
     }
     function slowRedact(options = {}) {
@@ -6318,8 +6283,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path44) => {
-            return censor(value, [k2, ...path44]);
+          const wrappedCensor = typeof censor === "function" ? (value, path46) => {
+            return censor(value, [k2, ...path46]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -6537,10 +6502,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs35 = require("fs");
+    var fs37 = require("fs");
     var EventEmitter2 = require("events");
     var inherits = require("util").inherits;
-    var path44 = require("path");
+    var path46 = require("path");
     var sleep = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -6594,20 +6559,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs35.mkdirSync(path44.dirname(file), { recursive: true });
-          const fd = fs35.openSync(file, flags, mode);
+          if (sonic.mkdir) fs37.mkdirSync(path46.dirname(file), { recursive: true });
+          const fd = fs37.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs35.mkdir(path44.dirname(file), { recursive: true }, (err) => {
+        fs37.mkdir(path46.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs35.open(file, flags, mode, fileOpened);
+          fs37.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs35.open(file, flags, mode, fileOpened);
+        fs37.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -6648,8 +6613,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs35.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs35.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs37.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs37.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -6658,15 +6623,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs35.writeSync(this.fd, this._writingBuf);
+            return fs37.writeSync(this.fd, this._writingBuf);
           }
-          return fs35.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs37.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs35.write(this.fd, this._writingBuf, this.release);
+            return fs37.write(this.fd, this._writingBuf, this.release);
           }
-          return fs35.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs37.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -6723,7 +6688,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs35.fsyncSync(this.fd);
+          fs37.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -6837,7 +6802,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs35.fsync(this.fd, (err) => {
+            fs37.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -6939,7 +6904,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs35.close(fd, (err) => {
+          fs37.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -6988,7 +6953,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs35.writeSync(this.fd, buf) : fs35.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs37.writeSync(this.fd, buf) : fs37.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -7004,7 +6969,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs35.fsyncSync(this.fd);
+        fs37.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -7025,7 +6990,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs35.writeSync(this.fd, buf);
+          const n = fs37.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -7053,13 +7018,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs35.writeSync(this.fd, this._writingBuf) : fs35.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs37.writeSync(this.fd, this._writingBuf) : fs37.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs35.write(this.fd, this._writingBuf, release);
+        fs37.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -7068,7 +7033,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs35.writeSync(this.fd, this._writingBuf);
+          const written = fs37.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -7077,7 +7042,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs35.write(this.fd, this._writingBuf, release);
+        fs37.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -7093,12 +7058,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs35.fsync(sonic.fd, closeWrapped);
+        fs37.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs35.close(sonic.fd, done);
+          fs37.close(sonic.fd, done);
         } else {
           done();
         }
@@ -7829,7 +7794,7 @@ var require_transport = __commonJS({
       stream.flushSync();
     }
     function transport(fullOptions) {
-      const { pipeline: pipeline2, targets, levels, dedupe, worker = {}, caller = getCallers(), sync = false } = fullOptions;
+      const { pipeline: pipeline3, targets, levels, dedupe, worker = {}, caller = getCallers(), sync = false } = fullOptions;
       const options = {
         ...fullOptions.options
       };
@@ -7857,9 +7822,9 @@ var require_transport = __commonJS({
             };
           });
         });
-      } else if (pipeline2) {
+      } else if (pipeline3) {
         target = bundlerOverrides["pino-worker"] || join11(__dirname, "worker.js");
-        options.pipelines = [pipeline2.map((dest) => {
+        options.pipelines = [pipeline3.map((dest) => {
           return {
             ...dest,
             target: fixTarget(dest.target)
@@ -10233,11 +10198,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path44, added, removed, oldPosInc, options) {
-        var last = path44.lastComponent;
+      addToPath: function addToPath(path46, added, removed, oldPosInc, options) {
+        var last = path46.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path44.oldPos + oldPosInc,
+            oldPos: path46.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -10247,7 +10212,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path44.oldPos + oldPosInc,
+            oldPos: path46.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -10678,10 +10643,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path44 = typeof rec.path === "string" ? rec.path : null;
+      const path46 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path44 || content == null) return null;
-      const entry = { path: path44, content };
+      if (!path46 || content == null) return null;
+      const entry = { path: path46, content };
       if (typeof rec.mtimeMs === "number") entry.mtimeMs = rec.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -11507,10 +11472,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path44 = typeof rec.path === "string" ? rec.path : null;
+      const path46 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path44 || content == null) return null;
-      const out = { path: path44, content };
+      if (!path46 || content == null) return null;
+      const out = { path: path46, content };
       if (typeof rec.mtimeMs === "number") out.mtimeMs = rec.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -20425,7 +20390,7 @@ var require_websocket_server = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path30.default.dirname(opts.recordPath);
+  const dir = import_node_path32.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -20439,8 +20404,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs27.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs27.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs29.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs29.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -20465,12 +20430,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs27, import_node_path30;
+var import_node_fs29, import_node_path32;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs27 = __toESM(require("fs"), 1);
-    import_node_path30 = __toESM(require("path"), 1);
+    import_node_fs29 = __toESM(require("fs"), 1);
+    import_node_path32 = __toESM(require("path"), 1);
   }
 });
 
@@ -20513,7 +20478,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs28.mkdtempSync)(import_node_path31.default.join(import_node_os15.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs30.mkdtempSync)(import_node_path33.default.join(import_node_os15.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -20674,19 +20639,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs28.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs30.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs28, import_node_os15, import_node_path31;
+var import_node_fs30, import_node_os15, import_node_path33;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs28 = require("fs");
+    import_node_fs30 = require("fs");
     import_node_os15 = __toESM(require("os"), 1);
-    import_node_path31 = __toESM(require("path"), 1);
+    import_node_path33 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -20918,8 +20883,8 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path29 = __toESM(require("path"), 1);
-var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_path31 = __toESM(require("path"), 1);
+var import_node_fs28 = __toESM(require("fs"), 1);
 
 // src/logger.ts
 var import_node_fs2 = __toESM(require("fs"), 1);
@@ -22654,6 +22619,18 @@ var SessionManager = class {
       (a, b2) => a.updatedAt > b2.updatedAt ? -1 : a.updatedAt < b2.updatedAt ? 1 : 0
     );
   }
+  /**
+   * 跨 scope 列出所有 owner 视角的 session（default + persona owner + persona guest），
+   * 附带派生的 SessionScope。attachment GC tick 用 —— 需要遍历所有活跃 session 的
+   * .attachments 目录 + 群文件清单求 liveSet。
+   */
+  listOwnedSessionScopes() {
+    return this.listAllOwned().map((file) => ({
+      scope: this.scopeForFile(file),
+      sessionId: file.sessionId,
+      cwd: file.cwd
+    }));
+  }
   // 写回 SessionFile，自动根据 ownerPersonaId / creatorPrincipalId 派生写入 scope.
   // 调用方原先都是 `deps.store.write(updated)`，全部走这里收口路由.
   writeOwned(file) {
@@ -22907,25 +22884,6 @@ var SessionManager = class {
     const file = this.getFile(args.sessionId);
     return { response: file, broadcast: [] };
   }
-  // mirror peer sessions (2026-05-26)：把来自朋友 daemon 的 SessionFile（originOwnerPrincipalId
-  // 非空）持久化到本机 default store。dumb write，**不广播 push 帧**——UI 是写入唯一源，
-  // 双写完成后通过 cache.setData 同步 sidebar 本地 state。
-  //
-  // 强制走 deps.store（即 default scope），不走 scopeForFile：即使 mirror SessionFile 带
-  // 远端 ownerPersonaId（远端 persona session），本机也落 default，不创建本机 persona 目录。
-  // 远端 creator / origin 字段原值保留（不被本机 ctx 派生覆写）。
-  //
-  // 与 manager.create / manager.update 区别：
-  //   - 不走 newRunner / attachObserver / cwd 校验（mirror 是纯 metadata 层）
-  //   - 不发 session:info 帧（manager.create / .update 通过 reducer/wireCollector 发 push）
-  mirrorUpsert(file) {
-    return this.deps.store.write(file);
-  }
-  // mirror peer sessions：删本机 mirror SessionFile。强制 default store。
-  // idempotent：找不到不 throw（UI 反复点删容错）。**不广播 session:deleted**。
-  mirrorRemove(sessionId) {
-    this.deps.store.delete(sessionId);
-  }
   // observer 上报"jsonl 写入了一条 user 行"时调用：在 buffer 里找到与之对应的、
   // 还没建立映射的最早一条 synth user_text，记下 synth → real 映射。
   // 找不到匹配的 synth（runner 不存在 / buffer 已被 /clear 清空 / 真 uuid 来自纯 history
@@ -27163,8 +27121,8 @@ function rmdirIfEmpty(p2) {
 }
 
 // src/transport/http-router.ts
-var import_node_fs15 = __toESM(require("fs"), 1);
-var import_node_path17 = __toESM(require("path"), 1);
+var import_node_fs16 = __toESM(require("fs"), 1);
+var import_node_path18 = __toESM(require("path"), 1);
 
 // src/attachment/mime.ts
 var import_node_path16 = __toESM(require("path"), 1);
@@ -27342,7 +27300,131 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
   return { ok: true, absPath };
 }
 
+// src/attachment/upload.ts
+var import_node_fs15 = __toESM(require("fs"), 1);
+var import_node_path17 = __toESM(require("path"), 1);
+var import_node_crypto6 = __toESM(require("crypto"), 1);
+var import_promises = require("stream/promises");
+var UploadError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "UploadError";
+  }
+  code;
+};
+function assertValidFileName(fileName) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path17.default.basename(fileName)) {
+    throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
+  }
+}
+var HASH_PREFIX_LEN = 16;
+async function writeUploadedAttachment(args) {
+  assertValidFileName(args.fileName);
+  const attachmentsRoot = import_node_path17.default.join(args.sessionDir, ".attachments");
+  try {
+    import_node_fs15.default.mkdirSync(attachmentsRoot, { recursive: true });
+  } catch (err) {
+    throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
+  }
+  const hasher = import_node_crypto6.default.createHash("sha256");
+  let actualSize = 0;
+  const tmpPath = import_node_path17.default.join(
+    attachmentsRoot,
+    `.upload-${process.pid}-${Date.now()}-${import_node_crypto6.default.randomBytes(4).toString("hex")}`
+  );
+  try {
+    await (0, import_promises.pipeline)(
+      args.body,
+      async function* (source) {
+        for await (const chunk of source) {
+          const buf = chunk;
+          actualSize += buf.length;
+          hasher.update(buf);
+          yield buf;
+        }
+      },
+      import_node_fs15.default.createWriteStream(tmpPath, { mode: 384 })
+    );
+  } catch (err) {
+    try {
+      import_node_fs15.default.unlinkSync(tmpPath);
+    } catch {
+    }
+    throw new UploadError("STORAGE_ERROR", `write failed: ${err.message}`);
+  }
+  if (actualSize !== args.contentLength) {
+    try {
+      import_node_fs15.default.unlinkSync(tmpPath);
+    } catch {
+    }
+    throw new UploadError(
+      "SIZE_MISMATCH",
+      `expected ${args.contentLength} bytes, got ${actualSize}`
+    );
+  }
+  const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
+  const hashDir = import_node_path17.default.join(attachmentsRoot, attachmentId);
+  let finalFileName;
+  let hashDirExists = false;
+  try {
+    hashDirExists = import_node_fs15.default.statSync(hashDir).isDirectory();
+  } catch {
+  }
+  if (hashDirExists) {
+    const existing = import_node_fs15.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
+    finalFileName = existing[0] ?? args.fileName;
+    try {
+      import_node_fs15.default.unlinkSync(tmpPath);
+    } catch {
+    }
+  } else {
+    try {
+      import_node_fs15.default.mkdirSync(hashDir, { recursive: true });
+      finalFileName = args.fileName;
+      import_node_fs15.default.renameSync(tmpPath, import_node_path17.default.join(hashDir, finalFileName));
+    } catch (err) {
+      try {
+        import_node_fs15.default.unlinkSync(tmpPath);
+      } catch {
+      }
+      throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
+    }
+  }
+  const absPath = import_node_path17.default.join(hashDir, finalFileName);
+  const relPath = import_node_path17.default.relative(args.sessionDir, absPath);
+  args.groupFileStore.upsert(args.scope, args.sessionId, {
+    relPath: absPath,
+    // 存绝对路径，与现有 agent 入清单的形态一致（attachment.ts:144 双形态兼容）
+    from: "user-upload",
+    label: args.fileName,
+    size: actualSize,
+    mime: args.mimeType
+  });
+  return { attachmentId, absPath, relPath, sizeBytes: actualSize, mimeType: args.mimeType };
+}
+
 // src/transport/http-router.ts
+var UPLOAD_MIME_ALLOW = /* @__PURE__ */ new Set([
+  "image/png",
+  "image/jpeg",
+  "image/gif",
+  "image/webp",
+  "application/pdf"
+]);
+var UPLOAD_MIME_ALLOW_PREFIX = ["text/"];
+var UPLOAD_MAX_BYTES = 25 * 1024 * 1024;
+function isUploadMimeAllowed(mime) {
+  if (UPLOAD_MIME_ALLOW.has(mime)) return true;
+  return UPLOAD_MIME_ALLOW_PREFIX.some((p2) => mime.startsWith(p2));
+}
+function isValidUploadFileName(fileName) {
+  if (fileName.length === 0) return false;
+  if (fileName === "." || fileName === "..") return false;
+  if (fileName.startsWith(".")) return false;
+  if (fileName.includes("/") || fileName.includes("\\")) return false;
+  return fileName === import_node_path18.default.basename(fileName);
+}
 function createHttpRouter(deps) {
   return async (req, res) => {
     const url = parseUrl(req.url);
@@ -27356,7 +27438,7 @@ function createHttpRouter(deps) {
       });
       return true;
     }
-    if (!url.pathname.startsWith("/session/") && !url.pathname.startsWith("/files/")) {
+    if (!url.pathname.startsWith("/session/") && !url.pathname.startsWith("/files/") && url.pathname !== "/attachments/upload") {
       return false;
     }
     if (url.pathname.startsWith("/files/") && req.method === "GET") {
@@ -27396,6 +27478,106 @@ function createHttpRouter(deps) {
       sendJson(res, 401, { code: "UNAUTHORIZED", message: "missing or invalid bearer token" });
       return true;
     }
+    if (url.pathname === "/attachments/upload" && req.method === "POST") {
+      if (ctx.role !== "owner") {
+        sendJson(res, 403, { code: "FORBIDDEN", message: "owner only" });
+        return true;
+      }
+      const up = deps.attachmentUpload;
+      if (!up) {
+        sendJson(res, 501, { code: "NOT_IMPLEMENTED", message: "attachment upload not wired" });
+        return true;
+      }
+      const sessionId = url.searchParams.get("sessionId");
+      const fileName = url.searchParams.get("fileName");
+      const mimeType = url.searchParams.get("mimeType");
+      const contentLengthRaw = req.headers["content-length"];
+      if (!sessionId || !fileName || !mimeType || !contentLengthRaw) {
+        sendJson(res, 400, {
+          code: "INVALID_PARAM",
+          message: "missing sessionId/fileName/mimeType/Content-Length"
+        });
+        return true;
+      }
+      if (!isValidUploadFileName(fileName)) {
+        sendJson(res, 400, {
+          code: "INVALID_FILENAME",
+          message: `fileName must be a plain basename (no path separators, no dotfiles): ${fileName}`
+        });
+        return true;
+      }
+      const contentLength = Number.parseInt(contentLengthRaw, 10);
+      if (!Number.isFinite(contentLength) || contentLength < 0) {
+        sendJson(res, 400, { code: "INVALID_PARAM", message: "malformed Content-Length" });
+        return true;
+      }
+      if (contentLength > UPLOAD_MAX_BYTES) {
+        sendJson(res, 413, {
+          code: "FILE_TOO_LARGE",
+          message: `max ${UPLOAD_MAX_BYTES} bytes`
+        });
+        return true;
+      }
+      if (!isUploadMimeAllowed(mimeType)) {
+        sendJson(res, 400, {
+          code: "UNSUPPORTED_MIME",
+          message: `mime ${mimeType} not allowed`
+        });
+        return true;
+      }
+      const sessionDir = up.getSessionDir(sessionId);
+      const scope = up.getSessionScope(sessionId);
+      if (!sessionDir || !scope) {
+        sendJson(res, 404, { code: "NOT_FOUND", message: `session ${sessionId} not found` });
+        return true;
+      }
+      const httpBaseUrl = up.getHttpBaseUrl();
+      if (!httpBaseUrl) {
+        sendJson(res, 503, {
+          code: "TUNNEL_NOT_READY",
+          message: "httpBaseUrl unavailable"
+        });
+        return true;
+      }
+      const secret = deps.getSignSecret?.();
+      if (!secret) {
+        sendJson(res, 501, {
+          code: "NOT_IMPLEMENTED",
+          message: "sign secret unavailable (noAuth?)"
+        });
+        return true;
+      }
+      try {
+        const result = await writeUploadedAttachment({
+          sessionDir,
+          sessionId,
+          scope,
+          fileName,
+          mimeType,
+          contentLength,
+          body: req,
+          groupFileStore: up.groupFileStore
+        });
+        const parts = signUrlParts(secret, result.absPath, null);
+        const fullUrl = buildSignedFileUrl(httpBaseUrl, parts);
+        sendJson(res, 200, {
+          attachmentId: result.attachmentId,
+          url: fullUrl,
+          relPath: result.relPath,
+          sizeBytes: result.sizeBytes,
+          mimeType: result.mimeType
+        });
+      } catch (err) {
+        if (err instanceof UploadError) {
+          const status = err.code === "SIZE_MISMATCH" ? 400 : 500;
+          sendJson(res, status, { code: err.code, message: err.message });
+        } else {
+          deps.logger?.warn("attachment upload failed", { err: err.message });
+          sendJson(res, 500, { code: "STORAGE_ERROR", message: err.message });
+        }
+      }
+      return true;
+    }
     const sessionFilesMatch = url.pathname.match(/^\/session\/([^/]+)\/files$/);
     if (sessionFilesMatch && req.method === "GET") {
       const sid = sessionFilesMatch[1];
@@ -27405,7 +27587,7 @@ function createHttpRouter(deps) {
         return true;
       }
       let absPath;
-      if (import_node_path17.default.isAbsolute(pathParam)) {
+      if (import_node_path18.default.isAbsolute(pathParam)) {
         absPath = pathParam;
       } else if (deps.sessionStore) {
         const file = deps.sessionStore.read(sid);
@@ -27413,7 +27595,7 @@ function createHttpRouter(deps) {
           sendJson(res, 404, { code: "NOT_FOUND", message: `session ${sid} not found` });
           return true;
         }
-        absPath = import_node_path17.default.join(file.cwd, pathParam);
+        absPath = import_node_path18.default.join(file.cwd, pathParam);
       } else {
         sendJson(res, 501, withCtx(ctx, { code: "NOT_IMPLEMENTED", message: "sessionStore not wired" }));
         return true;
@@ -27446,7 +27628,7 @@ function withCtx(ctx, body) {
 function streamFile(res, absPath, logger) {
   let stat;
   try {
-    stat = import_node_fs15.default.statSync(absPath);
+    stat = import_node_fs16.default.statSync(absPath);
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") {
@@ -27461,7 +27643,7 @@ function streamFile(res, absPath, logger) {
     return;
   }
   const mime = lookupMime(absPath);
-  const basename = import_node_path17.default.basename(absPath);
+  const basename = import_node_path18.default.basename(absPath);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": String(stat.size),
@@ -27469,7 +27651,7 @@ function streamFile(res, absPath, logger) {
     // 防止浏览器把任意 mime 当 html 渲染
     "X-Content-Type-Options": "nosniff"
   });
-  const stream = import_node_fs15.default.createReadStream(absPath);
+  const stream = import_node_fs16.default.createReadStream(absPath);
   stream.on("error", (err) => {
     logger?.warn("streamFile read error", { absPath, err: err.message });
     res.destroy();
@@ -27477,10 +27659,78 @@ function streamFile(res, absPath, logger) {
   stream.pipe(res);
 }
 
+// src/attachment/gc.ts
+var import_node_fs17 = __toESM(require("fs"), 1);
+var import_node_path19 = __toESM(require("path"), 1);
+var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
+function runAttachmentGc(args) {
+  const now = (args.now ?? Date.now)();
+  const ttlMs = args.ttlMs ?? DEFAULT_TTL_MS;
+  const liveAbs = /* @__PURE__ */ new Set();
+  for (const { scope, sessionId } of args.sessionScopes) {
+    for (const entry of args.groupFileStore.list(scope, sessionId)) {
+      if (entry.stale) continue;
+      if (import_node_path19.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+    }
+  }
+  for (const { scope, sessionId } of args.sessionScopes) {
+    const sessionDir = args.getSessionCwd?.(sessionId) ?? import_node_path19.default.join(
+      args.dataDir,
+      "sessions",
+      ...scopeSubPath(scope).map(safeFileName),
+      safeFileName(sessionId)
+    );
+    const attRoot = import_node_path19.default.join(sessionDir, ".attachments");
+    let hashDirs;
+    try {
+      hashDirs = import_node_fs17.default.readdirSync(attRoot);
+    } catch (err) {
+      if (err.code === "ENOENT") continue;
+      args.logger?.warn("attachment gc: readdir failed", { attRoot, err: err.message });
+      continue;
+    }
+    for (const hashDir of hashDirs) {
+      const hashDirAbs = import_node_path19.default.join(attRoot, hashDir);
+      let files;
+      try {
+        files = import_node_fs17.default.readdirSync(hashDirAbs);
+      } catch {
+        continue;
+      }
+      for (const name of files) {
+        const file = import_node_path19.default.join(hashDirAbs, name);
+        let stat;
+        try {
+          stat = import_node_fs17.default.statSync(file);
+        } catch {
+          continue;
+        }
+        if (!stat.isFile()) continue;
+        const age = now - stat.mtimeMs;
+        if (age < ttlMs) continue;
+        if (liveAbs.has(file)) continue;
+        try {
+          import_node_fs17.default.unlinkSync(file);
+        } catch (err) {
+          args.logger?.warn("attachment gc: unlink failed", { file, err: err.message });
+        }
+      }
+      try {
+        if (import_node_fs17.default.readdirSync(hashDirAbs).length === 0) import_node_fs17.default.rmdirSync(hashDirAbs);
+      } catch {
+      }
+    }
+    try {
+      if (import_node_fs17.default.readdirSync(attRoot).length === 0) import_node_fs17.default.rmdirSync(attRoot);
+    } catch {
+    }
+  }
+}
+
 // src/attachment/group.ts
-var import_node_fs16 = __toESM(require("fs"), 1);
-var import_node_path18 = __toESM(require("path"), 1);
-var import_node_crypto6 = __toESM(require("crypto"), 1);
+var import_node_fs18 = __toESM(require("fs"), 1);
+var import_node_path20 = __toESM(require("path"), 1);
+var import_node_crypto7 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
   dataDir;
@@ -27491,11 +27741,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path18.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path20.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path18.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path20.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -27504,7 +27754,7 @@ var GroupFileStore = class {
   readFile(scope, sessionId) {
     const file = this.filePath(scope, sessionId);
     try {
-      const raw = import_node_fs16.default.readFileSync(file, "utf8");
+      const raw = import_node_fs18.default.readFileSync(file, "utf8");
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) {
         this.logger?.warn("GroupFileStore.readFile: not an array; resetting session entries", {
@@ -27530,10 +27780,10 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs16.default.mkdirSync(import_node_path18.default.dirname(file), { recursive: true });
+    import_node_fs18.default.mkdirSync(import_node_path20.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs16.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
-    import_node_fs16.default.renameSync(tmp, file);
+    import_node_fs18.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
+    import_node_fs18.default.renameSync(tmp, file);
   }
   /** 拉一份当前 session 的清单。读盘 → cache；之后调用复用 cache */
   list(scope, sessionId) {
@@ -27569,7 +27819,7 @@ var GroupFileStore = class {
       entries[idx] = next;
     } else {
       next = {
-        id: `gf-${import_node_crypto6.default.randomBytes(6).toString("base64url")}`,
+        id: `gf-${import_node_crypto7.default.randomBytes(6).toString("base64url")}`,
         relPath: input.relPath,
         from: input.from,
         label: input.label,
@@ -27619,10 +27869,10 @@ var GroupFileStore = class {
 };
 
 // src/discovery/state-file.ts
-var import_node_fs17 = __toESM(require("fs"), 1);
-var import_node_path19 = __toESM(require("path"), 1);
+var import_node_fs19 = __toESM(require("fs"), 1);
+var import_node_path21 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path19.default.join(dataDir, "state.json");
+  return import_node_path21.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -27644,7 +27894,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs17.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs19.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -27658,34 +27908,34 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs17.default.mkdirSync(import_node_path19.default.dirname(this.file), { recursive: true });
+    import_node_fs19.default.mkdirSync(import_node_path21.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs17.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs17.default.renameSync(tmp, this.file);
+    import_node_fs19.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs19.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs17.default.chmodSync(this.file, 384);
+        import_node_fs19.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs17.default.unlinkSync(this.file);
+      import_node_fs19.default.unlinkSync(this.file);
     } catch {
     }
   }
 };
 
 // src/tunnel/tunnel-manager.ts
-var import_node_fs21 = __toESM(require("fs"), 1);
-var import_node_path23 = __toESM(require("path"), 1);
-var import_node_crypto7 = __toESM(require("crypto"), 1);
+var import_node_fs23 = __toESM(require("fs"), 1);
+var import_node_path25 = __toESM(require("path"), 1);
+var import_node_crypto8 = __toESM(require("crypto"), 1);
 var import_node_child_process5 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
-var import_node_fs18 = __toESM(require("fs"), 1);
-var import_node_path20 = __toESM(require("path"), 1);
+var import_node_fs20 = __toESM(require("fs"), 1);
+var import_node_path22 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -27693,7 +27943,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs18.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs20.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -27704,22 +27954,22 @@ var TunnelStore = class {
     }
   }
   async set(v2) {
-    const dir = import_node_path20.default.dirname(this.filePath);
-    await import_node_fs18.default.promises.mkdir(dir, { recursive: true });
+    const dir = import_node_path22.default.dirname(this.filePath);
+    await import_node_fs20.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs18.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs20.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs18.default.promises.chmod(tmp, 384);
+        await import_node_fs20.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs18.default.promises.rename(tmp, this.filePath);
+    await import_node_fs20.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs18.default.promises.unlink(this.filePath);
+      await import_node_fs20.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -27814,12 +28064,12 @@ function escape(v2) {
 }
 
 // src/tunnel/frpc-binary.ts
-var import_node_fs19 = __toESM(require("fs"), 1);
+var import_node_fs21 = __toESM(require("fs"), 1);
 var import_node_os10 = __toESM(require("os"), 1);
-var import_node_path21 = __toESM(require("path"), 1);
+var import_node_path23 = __toESM(require("path"), 1);
 var import_node_child_process3 = require("child_process");
 var import_node_stream2 = require("stream");
-var import_promises = require("stream/promises");
+var import_promises2 = require("stream/promises");
 var FRPC_VERSION = "0.68.0";
 var UnsupportedPlatformError = class extends Error {
   constructor(platform, arch) {
@@ -27848,20 +28098,20 @@ function frpcDownloadUrl(version2, p2) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs19.default.existsSync(opts.override)) {
+    if (!import_node_fs21.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path21.default.join(opts.dataDir, "bin");
-  import_node_fs19.default.mkdirSync(binDir, { recursive: true });
+  const binDir = import_node_path23.default.join(opts.dataDir, "bin");
+  import_node_fs21.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path21.default.join(binDir, "frpc");
-  if (import_node_fs19.default.existsSync(stableBin)) return stableBin;
+  const stableBin = import_node_path23.default.join(binDir, "frpc");
+  if (import_node_fs21.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path21.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path23.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -27870,8 +28120,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs19.default.chmodSync(partialBin, 493);
-    import_node_fs19.default.renameSync(partialBin, stableBin);
+    import_node_fs21.default.chmodSync(partialBin, 493);
+    import_node_fs21.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -27881,15 +28131,15 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs19.default.readdirSync(binDir);
+    entries = import_node_fs21.default.readdirSync(binDir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path21.default.join(binDir, name);
+      const full = import_node_path23.default.join(binDir, name);
       try {
-        import_node_fs19.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs21.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -27897,7 +28147,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p2) {
   try {
-    import_node_fs19.default.unlinkSync(p2);
+    import_node_fs21.default.unlinkSync(p2);
   } catch {
   }
 }
@@ -27908,13 +28158,13 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs19.default.createWriteStream(dest);
+  const out = import_node_fs21.default.createWriteStream(dest);
   const nodeStream = import_node_stream2.Readable.fromWeb(res.body);
-  await (0, import_promises.pipeline)(nodeStream, out);
+  await (0, import_promises2.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path21.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs19.default.mkdirSync(work, { recursive: true });
+  const work = import_node_path23.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  import_node_fs21.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve6, reject) => {
       const proc = (0, import_node_child_process3.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
@@ -27922,32 +28172,32 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
       proc.on("exit", (code) => code === 0 ? resolve6() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path21.default.join(work, dirName, "frpc");
-    if (!import_node_fs19.default.existsSync(src)) {
+    const src = import_node_path23.default.join(work, dirName, "frpc");
+    if (!import_node_fs21.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs19.default.copyFileSync(src, destBin);
+    import_node_fs21.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs19.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs21.default.rmSync(work, { recursive: true, force: true });
   }
 }
 
 // src/tunnel/frpc-process.ts
-var import_node_fs20 = __toESM(require("fs"), 1);
-var import_node_path22 = __toESM(require("path"), 1);
+var import_node_fs22 = __toESM(require("fs"), 1);
+var import_node_path24 = __toESM(require("path"), 1);
 var import_node_child_process4 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path22.default.join(dataDir, "frpc.pid");
+  return import_node_path24.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
-    import_node_fs20.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
+    import_node_fs22.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearFrpcPid(dataDir) {
   try {
-    import_node_fs20.default.unlinkSync(frpcPidFilePath(dataDir));
+    import_node_fs22.default.unlinkSync(frpcPidFilePath(dataDir));
   } catch {
   }
 }
@@ -27963,7 +28213,7 @@ function defaultIsPidAlive(pid) {
 }
 function defaultReadPidFile(file) {
   try {
-    return import_node_fs20.default.readFileSync(file, "utf8");
+    return import_node_fs22.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -27979,7 +28229,7 @@ function defaultSleep(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path22.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path24.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -28003,7 +28253,7 @@ async function killStaleFrpc(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs20.default.unlinkSync(pidFile);
+      import_node_fs22.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -28014,7 +28264,7 @@ async function killStaleFrpc(deps) {
   }
   await sleep(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs20.default.unlinkSync(pidFile);
+    import_node_fs22.default.unlinkSync(pidFile);
   } catch {
   }
 }
@@ -28051,7 +28301,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path23.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path25.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -28178,8 +28428,8 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path23.default.join(this.deps.dataDir, "frpc.toml");
-      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto7.default.randomBytes(3).toString("hex")}`;
+      const tomlPath = import_node_path25.default.join(this.deps.dataDir, "frpc.toml");
+      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto8.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
         serverPort: t.frpsPort,
@@ -28189,12 +28439,12 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs21.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      await import_node_fs23.default.promises.writeFile(tomlPath, toml, { mode: 384 });
       const proc = (this.deps.spawnImpl ?? import_node_child_process5.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logFilePath = import_node_path23.default.join(this.deps.dataDir, "frpc.log");
-      const logStream = import_node_fs21.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logFilePath = import_node_path25.default.join(this.deps.dataDir, "frpc.log");
+      const logStream = import_node_fs23.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -28277,22 +28527,22 @@ async function waitForFrpcReady(proc, timeoutMs) {
 
 // src/tunnel/device-key.ts
 var import_node_os11 = __toESM(require("os"), 1);
-var import_node_crypto8 = __toESM(require("crypto"), 1);
+var import_node_crypto9 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os11.default.hostname();
   const uid = opts.uid ?? (typeof import_node_os11.default.userInfo === "function" ? import_node_os11.default.userInfo().uid : 0);
   const input = `${hostname}::${uid}`;
-  return import_node_crypto8.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
+  return import_node_crypto9.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
-var import_node_fs22 = __toESM(require("fs"), 1);
-var import_node_path24 = __toESM(require("path"), 1);
-var import_node_crypto9 = __toESM(require("crypto"), 1);
+var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_path26 = __toESM(require("path"), 1);
+var import_node_crypto10 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path24.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path26.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -28317,14 +28567,14 @@ function loadOrCreateAuthFile(opts) {
   return next;
 }
 function defaultGenerateToken2() {
-  return import_node_crypto9.default.randomBytes(32).toString("base64url");
+  return import_node_crypto10.default.randomBytes(32).toString("base64url");
 }
 function defaultGenerateOwnerPrincipalId() {
-  return `owner-${import_node_crypto9.default.randomUUID()}`;
+  return `owner-${import_node_crypto10.default.randomUUID()}`;
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs22.default.readFileSync(file, "utf8");
+    const raw = import_node_fs24.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -28342,25 +28592,25 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs22.default.mkdirSync(import_node_path24.default.dirname(file), { recursive: true });
-  import_node_fs22.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs24.default.mkdirSync(import_node_path26.default.dirname(file), { recursive: true });
+  import_node_fs24.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs22.default.chmodSync(file, 384);
+    import_node_fs24.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs23 = __toESM(require("fs"), 1);
+var import_node_fs25 = __toESM(require("fs"), 1);
 var import_node_os12 = __toESM(require("os"), 1);
-var import_node_path25 = __toESM(require("path"), 1);
+var import_node_path27 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function loadOwnerDisplayName(dataDir) {
   const fallback = import_node_os12.default.userInfo().username;
-  const profilePath = import_node_path25.default.join(dataDir, PROFILE_FILENAME);
+  const profilePath = import_node_path27.default.join(dataDir, PROFILE_FILENAME);
   let raw;
   try {
-    raw = import_node_fs23.default.readFileSync(profilePath, "utf8");
+    raw = import_node_fs25.default.readFileSync(profilePath, "utf8");
   } catch {
     return fallback;
   }
@@ -28389,12 +28639,12 @@ init_protocol();
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_fs26 = __toESM(require("fs"), 1);
 var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path26 = __toESM(require("path"), 1);
+var import_node_path28 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs24.default.readFileSync(file, "utf8");
+  const raw = import_node_fs26.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -28407,10 +28657,10 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path26.default.join(import_node_os13.default.homedir(), ".claude");
-  const projectDir = import_node_path26.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  const sourceFile = import_node_path26.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs24.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path28.default.join(import_node_os13.default.homedir(), ".claude");
+  const projectDir = import_node_path28.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  const sourceFile = import_node_path28.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs26.default.existsSync(sourceFile)) {
     throw new Error(`fork: source transcript not found: ${sourceFile}`);
   }
   const entries = readJsonlEntries(sourceFile);
@@ -28440,9 +28690,9 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const forkedFilePath = import_node_path26.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs24.default.mkdirSync(projectDir, { recursive: true });
-  import_node_fs24.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const forkedFilePath = import_node_path28.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs26.default.mkdirSync(projectDir, { recursive: true });
+  import_node_fs26.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
@@ -28730,28 +28980,6 @@ function buildSessionHandlers(deps) {
       }
     };
   };
-  const peerSessionUpsert = async (frame, _client, ctx) => {
-    if (ctx && ctx.principal.kind !== "owner") {
-      throw new ClawdError(
-        ERROR_CODES.UNAUTHORIZED,
-        `principal ${ctx.principal.kind}:${ctx.principal.id} cannot peerSession:upsert`
-      );
-    }
-    const file = PeerSessionUpsertArgs.parse(frame);
-    manager.mirrorUpsert(file);
-    return { response: { type: "peerSession:upsert:ok" }, broadcast: [] };
-  };
-  const peerSessionRemove = async (frame, _client, ctx) => {
-    if (ctx && ctx.principal.kind !== "owner") {
-      throw new ClawdError(
-        ERROR_CODES.UNAUTHORIZED,
-        `principal ${ctx.principal.kind}:${ctx.principal.id} cannot peerSession:remove`
-      );
-    }
-    const args = PeerSessionRemoveArgs.parse(frame);
-    manager.mirrorRemove(args.sessionId);
-    return { response: { type: "peerSession:remove:ok" }, broadcast: [] };
-  };
   return {
     "session:create": create,
     "session:list": list,
@@ -28777,9 +29005,7 @@ function buildSessionHandlers(deps) {
     "session:cancelQuestion": cancelQuestion,
     "session:pty:input": ptyInput,
     "session:pty:resize": ptyResize,
-    "session:pty:snapshot": ptySnapshot,
-    "peerSession:upsert": peerSessionUpsert,
-    "peerSession:remove": peerSessionRemove
+    "session:pty:snapshot": ptySnapshot
   };
 }
 
@@ -28798,7 +29024,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path36 = __toESM(require("path"), 1);
+var path38 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -28816,7 +29042,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path35 = __toESM(require("path"), 1);
+var path37 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -28829,26 +29055,26 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read") {
-  const root = path35.resolve(personaRoot);
-  const target = path35.resolve(absPath);
-  const sep3 = root.endsWith(path35.sep) ? "" : path35.sep;
+  const root = path37.resolve(personaRoot);
+  const target = path37.resolve(absPath);
+  const sep3 = root.endsWith(path37.sep) ? "" : path37.sep;
   if (!target.startsWith(root + sep3)) return false;
-  const rel = path35.relative(root, target);
+  const rel = path37.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId = rel.split(path35.sep)[0];
+  const personaId = rel.split(path37.sep)[0];
   if (!personaId) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path35.resolve(personaRoot);
-  const target = path35.resolve(absPath);
-  const sep3 = root.endsWith(path35.sep) ? "" : path35.sep;
+  const root = path37.resolve(personaRoot);
+  const target = path37.resolve(absPath);
+  const sep3 = root.endsWith(path37.sep) ? "" : path37.sep;
   if (!target.startsWith(root + sep3)) return null;
-  const rel = path35.relative(root, target);
+  const rel = path37.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path35.sep)[0];
+  const id = rel.split(path37.sep)[0];
   return id || null;
 }
 
@@ -28873,7 +29099,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path36.join(personaRoot, pid),
+          path38.join(personaRoot, pid),
           personaRoot,
           "read"
         );
@@ -28884,7 +29110,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path36.resolve(args.projectPath), personaRoot, "history:list");
+    assertGuestPath(ctx, path38.resolve(args.projectPath), personaRoot, "history:list");
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -28916,13 +29142,13 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path36.resolve(args.cwd), personaRoot, "history:subagents");
+    assertGuestPath(ctx, path38.resolve(args.cwd), personaRoot, "history:subagents");
     const subs = await history.listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path36.resolve(args.cwd), personaRoot, "history:subagent-read");
+    assertGuestPath(ctx, path38.resolve(args.cwd), personaRoot, "history:subagent-read");
     const res = await history.readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
   };
@@ -28930,7 +29156,7 @@ function buildHistoryHandlers(deps) {
     const dirs = listRecentDirs(store);
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path36.resolve(d.cwd), personaRoot, "read")
+        (d) => isGuestPathAllowed(ctx.grants, path38.resolve(d.cwd), personaRoot, "read")
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -28947,7 +29173,7 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path37 = __toESM(require("path"), 1);
+var path39 = __toESM(require("path"), 1);
 var os14 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
@@ -28988,22 +29214,22 @@ function buildWorkspaceHandlers(deps) {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
     const fallbackCwd = isGuest && personaRoot ? personaRoot : os14.homedir();
-    const resolvedCwd = path37.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path37.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const resolvedCwd = path39.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path39.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list");
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path37.isAbsolute(args.path) ? path37.resolve(args.path) : path37.resolve(args.cwd, args.path);
+    const target = path39.isAbsolute(args.path) ? path39.resolve(args.path) : path39.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read");
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path37.resolve(args.cwd);
+    const cwdAbs = path39.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list");
     const list2 = skills.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -29015,7 +29241,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path37.resolve(args.cwd);
+    const cwdAbs = path39.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list");
     const list2 = agents.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -29034,20 +29260,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path39 = __toESM(require("path"), 1);
+var path41 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process6 = require("child_process");
-var import_node_fs25 = __toESM(require("fs"), 1);
-var import_node_path27 = __toESM(require("path"), 1);
+var import_node_fs27 = __toESM(require("fs"), 1);
+var import_node_path29 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process6.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path27.default.resolve(p2);
+  const resolved = import_node_path29.default.resolve(p2);
   try {
-    return import_node_fs25.default.realpathSync(resolved);
+    return import_node_fs27.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -29120,7 +29346,7 @@ async function listGitBranches(cwd) {
 // src/handlers/git.ts
 function assertGuestCwd(ctx, cwd, personaRoot, method) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
-  if (!isGuestPathAllowed(ctx.grants, path39.resolve(cwd), personaRoot, "read")) {
+  if (!isGuestPathAllowed(ctx.grants, path41.resolve(cwd), personaRoot, "read")) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -29607,7 +29833,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path28 = __toESM(require("path"), 1);
+var import_node_path30 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -29661,12 +29887,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path28.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path28.default.isAbsolute(args.relPath) ? import_node_path28.default.resolve(args.relPath) : import_node_path28.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path30.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path30.default.isAbsolute(args.relPath) ? import_node_path30.default.resolve(args.relPath) : import_node_path30.default.resolve(cwdAbs, args.relPath);
     assertGuestAttachmentPath(ctx, candidateAbs, deps.personaRoot, "attachment.signUrl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path28.default.isAbsolute(e.relPath) ? import_node_path28.default.resolve(e.relPath) : import_node_path28.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path30.default.isAbsolute(e.relPath) ? import_node_path30.default.resolve(e.relPath) : import_node_path30.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -29690,7 +29916,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path28.default.resolve(f.cwd), deps.personaRoot, method);
+    assertGuestAttachmentPath(ctx, import_node_path30.default.resolve(f.cwd), deps.personaRoot, method);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -29731,7 +29957,7 @@ function buildAttachmentHandlers(deps) {
     }
     const entries = deps.groupFileStore.list(scope, parsed.data.sessionId);
     const target = entries.find((e) => e.relPath === parsed.data.relPath);
-    if (target?.from === "owner") {
+    if (target?.from === "owner" || target?.from === "user-upload") {
       deps.groupFileStore.remove(scope, parsed.data.sessionId, parsed.data.relPath);
     } else {
       deps.groupFileStore.markStale(scope, parsed.data.sessionId, parsed.data.relPath);
@@ -29857,11 +30083,6 @@ var METHOD_GRANT_MAP = {
   "session:pin": CAPABILITY_SCOPED,
   "session:reorderPins": ADMIN_ANY,
   // owner 全局操作，无 personaId 维度
-  // mirror peer sessions (2026-05-26)：owner-only — guest 不应能写/删本机 mirror SessionFile
-  // (会绕过 #739 隔离规则把伪造身份的 SessionFile 写进 default store)。handler 端内部 ctx
-  // 校验，dispatcher 层一刀切 admin 也兜底。
-  "peerSession:upsert": ADMIN_ANY,
-  "peerSession:remove": ADMIN_ANY,
   "permission:respond": CAPABILITY_SCOPED,
   "session:answerQuestion": CAPABILITY_SCOPED,
   "session:cancelQuestion": CAPABILITY_SCOPED,
@@ -29932,7 +30153,7 @@ function computeGrantForFrame(method, frame) {
 async function startDaemon(config) {
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path29.default.join(config.dataDir, "clawd.log")
+    file: import_node_path31.default.join(config.dataDir, "clawd.log")
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const stateMgr = new StateFileManager({ dataDir: config.dataDir });
@@ -30019,7 +30240,7 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path29.default.join(config.dataDir, "personas"));
+  const personaStore = new PersonaStore(import_node_path31.default.join(config.dataDir, "personas"));
   const defaultsRoot = findDefaultsRoot();
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -30036,7 +30257,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path29.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path31.default.join(config.dataDir, "personas"),
     personaStore,
     ownerDisplayName,
     ownerPrincipalId,
@@ -30060,10 +30281,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path29.default.isAbsolute(input.relPath) ? input.relPath : import_node_path29.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path31.default.isAbsolute(input.relPath) ? input.relPath : import_node_path31.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs26.default.statSync(absPath).size;
+          size = import_node_fs28.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -30181,10 +30402,10 @@ async function startDaemon(config) {
       // 'persona/<pid>/owner'，default 走 'default'。
       getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
       // guest path guard：candidate 必须在 personaRoot 子树下
-      personaRoot: import_node_path29.default.join(config.dataDir, "personas")
+      personaRoot: import_node_path31.default.join(config.dataDir, "personas")
     },
     // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-    personaRoot: import_node_path29.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path31.default.join(config.dataDir, "personas"),
     // capability:list / delete handler 依赖
     capabilityManager,
     // personal-cap:get 返回的 shareBaseUrl 用此 base URL：
@@ -30220,7 +30441,19 @@ async function startDaemon(config) {
     sessionStore: store,
     // /files HMAC verify 用 auth.json 的 signSecret 字段（与 attachment.signUrl 同源）。
     // --auth-token CLI 模式没 signSecret → 路由返 501，sign URL 功能整体禁用。
-    getSignSecret: () => authFile?.signSecret ?? null
+    getSignSecret: () => authFile?.signSecret ?? null,
+    // chatinput 附件上传（POST /attachments/upload，spec §6.1）。upload pipeline
+    // 在 session.cwd 下的 .attachments/ 落盘；signSecret 与 /files HMAC 同源；
+    // tunnel 未启时返 503 TUNNEL_NOT_READY 让前端显式提示。
+    attachmentUpload: {
+      groupFileStore,
+      getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
+      getSessionDir: (sid) => {
+        const f = manager.findOwnedSession(sid);
+        return f ? f.cwd : null;
+      },
+      getHttpBaseUrl: () => currentTunnelUrl ? getHttpBaseUrl() : null
+    }
   });
   wsServer = new LocalWsServer({
     host: config.host,
@@ -30385,8 +30618,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path29.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path29.default.join(config.dataDir, "frpc.log")}`
+        `Frpc config: ${import_node_path31.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path31.default.join(config.dataDir, "frpc.log")}`
       ];
       const width = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width + 4);
@@ -30399,8 +30632,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path29.default.join(config.dataDir, "connect.txt");
-        import_node_fs26.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path31.default.join(config.dataDir, "connect.txt");
+        import_node_fs28.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -30425,8 +30658,29 @@ ${bar}
       logger.warn("tunnel unavailable, degraded to local mode", { reason: tunnelError });
     }
   }
+  const tickAttachmentGc = () => {
+    try {
+      runAttachmentGc({
+        dataDir: config.dataDir,
+        groupFileStore,
+        sessionScopes: manager.listOwnedSessionScopes().map(({ scope, sessionId }) => ({
+          scope,
+          sessionId
+        })),
+        // 注入 cwd 让 GC 直接定位 .attachments 目录（与 upload 落盘点一致）
+        getSessionCwd: (sid) => manager.findOwnedSession(sid)?.cwd ?? null,
+        logger
+      });
+    } catch (err) {
+      logger.warn("attachment gc tick failed", { err: err.message });
+    }
+  };
+  setImmediate(tickAttachmentGc);
+  const attachmentGcInterval = setInterval(tickAttachmentGc, 24 * 3600 * 1e3);
+  attachmentGcInterval.unref();
   const shutdown = async () => {
     logger.info("stopping clawd");
+    clearInterval(attachmentGcInterval);
     observer.stopAll();
     manager.stopAll();
     if (tunnelMgr) {
@@ -30444,9 +30698,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path29.default.join(dataDir, "persons");
+  const dir = import_node_path31.default.join(dataDir, "persons");
   try {
-    import_node_fs26.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs28.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }