@clawos-dev/clawd 0.2.86-beta.162.77b3c16 → 0.2.87-beta.163.de7e74a

package/dist/cli.cjs

@@ -65,14 +65,6 @@ var init_methods = __esm({
       "session:unsubscribe",
       "session:pin",
       "session:reorderPins",
-      // mirror peer sessions (2026-05-26): owner-only RPC，写/删本机 mirror SessionFile —
-      // mirror 是「**我**在朋友 daemon 上自己创建的 session」的本机持久化副本（不是朋友的会话），
-      // 方便 sidebar 跨设备聚合。daemon dumb 写删，**不广播任何 push 帧** (不发 session:info /
-      // session:deleted)；UI 是写入唯一源，双写完成后通过 cache.setData('sessions', ...) 同步
-      // 本地 sidebar state。native session:* handler 完全不感知 mirror (UI 操作 mirror 不复用
-      // native 路径)。
-      "peerSession:upsert",
-      "peerSession:remove",
       "permission:respond",
       // AskUserQuestion 表单回写：UI 答完所有 question 后调用，daemon 把答案合并进 updated_input
       // 写一条 control_response 到 CC stdin（详见 events.ts session:question JSDoc）
@@ -651,8 +643,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path44, errorMaps, issueData } = params;
-      const fullPath = [...path44, ...issueData.path || []];
+      const { data, path: path45, errorMaps, issueData } = params;
+      const fullPath = [...path45, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -963,11 +955,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path44, key) {
+      constructor(parent, value, path45, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path44;
+        this._path = path45;
         this._key = key;
       }
       get path() {
@@ -4351,13 +4343,13 @@ var init_zod = __esm({
 });
 
 // ../protocol/src/attachment-schemas.ts
-var TOKEN_ROLES, GROUP_FILE_SOURCES, GroupFileEntrySchema, AttachmentSignUrlArgs, AttachmentSignUrlResponseSchema, AttachmentGroupAddArgs, AttachmentGroupAddResponseSchema, AttachmentGroupRemoveArgs, AttachmentGroupRemoveResponseSchema, AttachmentGroupListArgs, AttachmentGroupListResponseSchema;
+var TOKEN_ROLES, GROUP_FILE_SOURCES, GroupFileEntrySchema, AttachmentSignUrlArgs, AttachmentSignUrlResponseSchema, AttachmentGroupAddArgs, AttachmentGroupAddResponseSchema, AttachmentGroupRemoveArgs, AttachmentGroupRemoveResponseSchema, AttachmentGroupListArgs, AttachmentGroupListResponseSchema, AttachmentUploadResponseSchema;
 var init_attachment_schemas = __esm({
   "../protocol/src/attachment-schemas.ts"() {
     "use strict";
     init_zod();
     TOKEN_ROLES = ["owner"];
-    GROUP_FILE_SOURCES = ["agent", "owner"];
+    GROUP_FILE_SOURCES = ["agent", "owner", "user-upload"];
     GroupFileEntrySchema = external_exports.object({
       /** daemon 派发的稳定 id（用于 RPC remove / UI key） */
       id: external_exports.string().min(1),
@@ -4412,6 +4404,16 @@ var init_attachment_schemas = __esm({
     AttachmentGroupListResponseSchema = external_exports.object({
       entries: external_exports.array(GroupFileEntrySchema)
     });
+    AttachmentUploadResponseSchema = external_exports.object({
+      /** sha256(bytes) 前 16 位，前端持有的稳定 ref */
+      attachmentId: external_exports.string().min(1),
+      /** 完整 tunnel signed URL，前端拼 marker / 直接送 Anthropic 都用它 */
+      url: external_exports.string().min(1),
+      /** 落在 session 目录下的相对路径（后续 group RPC / drawer 展示用） */
+      relPath: external_exports.string().min(1),
+      sizeBytes: external_exports.number().int().nonnegative(),
+      mimeType: external_exports.string().min(1)
+    });
   }
 });
 
@@ -4491,7 +4493,7 @@ var init_persona_schemas = __esm({
 });
 
 // ../protocol/src/schemas.ts
-var SessionStatusSchema, UsageSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, ParsedEventSchema, SessionCreateArgs, SessionIdArgs, SessionUpdateArgs, SessionSendArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsArgs, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionSubscribeArgs, SessionPinArgs, PeerSessionUpsertArgs, PeerSessionUpsertResponseSchema, PeerSessionRemoveArgs, PeerSessionRemoveResponseSchema, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, HistoryRecentDirsArgs, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, AuthRequestFrameSchema, AuthOkFrameSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema;
+var SessionStatusSchema, UsageSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, ParsedEventSchema, SessionCreateArgs, SessionIdArgs, SessionUpdateArgs, SessionSendArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsArgs, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionSubscribeArgs, SessionPinArgs, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, HistoryRecentDirsArgs, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, AuthRequestFrameSchema, AuthOkFrameSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema;
 var init_schemas = __esm({
   "../protocol/src/schemas.ts"() {
     "use strict";
@@ -4619,35 +4621,6 @@ var init_schemas = __esm({
        * 当前为 caller 自报，daemon 不密码学验证真伪；强身份验签是独立工作（B 方案）。
        */
       creatorOwnerPrincipalId: external_exports.string().min(1).optional(),
-      /**
-       * Mirror peer sessions (2026-05-26): mirror 标识。**我在朋友 daemon 上以 guest ctx
-       * 创建的 session**，远端是 source of truth，本机是该 session 的持久化副本，方便
-       * sidebar 跨设备聚合。字段值是远端 daemon 的 ownerPrincipalId（即我接入的那位朋友）。
-       *
-       * 语义关键澄清：mirror **不是朋友创建给我的会话**——它是我自己的会话，只是在朋友
-       * 的机器上跑。sidebar chip 显示 `@<朋友>` 暗示「位置」，不是「来源」。
-       *
-       *   - undefined / 缺省 → 本机 native session（在我自己机器上跑）
-       *   - 非空 → 我的会话在该 ownerPrincipalId 朋友的 daemon 上跑，本机为持久化副本
-       *
-       * 与 `creatorPrincipalId` / `creatorOwnerPrincipalId` 在四类 session 下取值矩阵：
-       *   | 形态                                | creatorPrincipalId       | creatorOwnerPrincipalId | originOwnerPrincipalId |
-       *   |-------------------------------------|--------------------------|-------------------------|------------------------|
-       *   | 本机 owner 自创                      | 本机 ownerPrincipalId    | 本机 ownerPrincipalId   | undefined              |
-       *   | 本机被别人通过 personal token 接入创建 | 远端接入者 cap.id        | 远端接入者 ownerPrincipalId | undefined          |
-       *   | 我在朋友 daemon 上以 guest ctx 创建（mirror 回本机） | 朋友 daemon personal cap.id | 我自己 ownerPrincipalId | 朋友 ownerPrincipalId |
-       *
-       * UI 用法：
-       *   - sidebar Active/Pinned/Recents 过滤：`origin 非空 → 一律视作 self`（绕过 #739 隔离）
-       *   - 行内显示 `@<朋友>` chip 暗示位置
-       *   - 进 ChatPanel 时按 origin 路由到 `pool.ensureRemoteForOwner(origin)` 走远端
-       *
-       * daemon 用法：
-       *   - `peerSession:upsert` / `peerSession:remove` 一族 RPC 专管 mirror 写删；
-       *     daemon dumb write/delete，**不广播任何 push 帧**，UI 是写入唯一源
-       *   - native `session:*` handler 完全不感知 mirror（UI 操作 mirror 不走 native 路径）
-       */
-      originOwnerPrincipalId: external_exports.string().min(1).optional(),
       createdAt: external_exports.string().min(1),
       updatedAt: external_exports.string().min(1)
     });
@@ -5003,14 +4976,6 @@ var init_schemas = __esm({
       sessionId: external_exports.string().min(1),
       pinned: external_exports.boolean()
     });
-    PeerSessionUpsertArgs = SessionFileSchema;
-    PeerSessionUpsertResponseSchema = external_exports.object({
-      type: external_exports.literal("peerSession:upsert:ok")
-    });
-    PeerSessionRemoveArgs = external_exports.object({ sessionId: external_exports.string().min(1) });
-    PeerSessionRemoveResponseSchema = external_exports.object({
-      type: external_exports.literal("peerSession:remove:ok")
-    });
     SessionReorderPinsArgs = external_exports.object({
       orderedIds: external_exports.array(external_exports.string().min(1)).min(1)
     });
@@ -5625,8 +5590,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path44 = req.path;
-        _req.url = typeof path44 === "string" ? path44 : req.url ? req.url.path || req.url : void 0;
+        const path45 = req.path;
+        _req.url = typeof path45 === "string" ? path45 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -5791,14 +5756,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path44) {
+    function parsePath(path45) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path44.length; i++) {
-        const char = path44[i];
+      for (let i = 0; i < path45.length; i++) {
+        const char = path45[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -5929,10 +5894,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path44 of paths) {
-        const parts = parsePath(path44);
+      for (const path45 of paths) {
+        const parts = parsePath(path45);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path44, remove);
+          redactWildcardPath(obj, parts, censor, path45, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -6017,8 +5982,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path44) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path44];
+            const wrappedCensor = typeof censor === "function" ? (value, path45) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path45];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -6053,8 +6018,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path44 of pathsToClone) {
-        const parts = parsePath(path44);
+      for (const path45 of pathsToClone) {
+        const parts = parsePath(path45);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -6106,24 +6071,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path44) {
-      if (typeof path44 !== "string") {
+    function validatePath(path45) {
+      if (typeof path45 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path44 === "") {
+      if (path45 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path44.includes("..")) {
-        throw new Error(`Invalid redaction path (${path44})`);
+      if (path45.includes("..")) {
+        throw new Error(`Invalid redaction path (${path45})`);
       }
-      if (path44.includes(",")) {
-        throw new Error(`Invalid redaction path (${path44})`);
+      if (path45.includes(",")) {
+        throw new Error(`Invalid redaction path (${path45})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path44.length; i++) {
-        const char = path44[i];
+      for (let i = 0; i < path45.length; i++) {
+        const char = path45[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -6137,20 +6102,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path44})`);
+            throw new Error(`Invalid redaction path (${path45})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path44})`);
+        throw new Error(`Invalid redaction path (${path45})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path44 of paths) {
-        validatePath(path44);
+      for (const path45 of paths) {
+        validatePath(path45);
       }
     }
     function slowRedact(options = {}) {
@@ -6318,8 +6283,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path44) => {
-            return censor(value, [k2, ...path44]);
+          const wrappedCensor = typeof censor === "function" ? (value, path45) => {
+            return censor(value, [k2, ...path45]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -6537,10 +6502,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs35 = require("fs");
+    var fs36 = require("fs");
     var EventEmitter2 = require("events");
     var inherits = require("util").inherits;
-    var path44 = require("path");
+    var path45 = require("path");
     var sleep = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -6594,20 +6559,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs35.mkdirSync(path44.dirname(file), { recursive: true });
-          const fd = fs35.openSync(file, flags, mode);
+          if (sonic.mkdir) fs36.mkdirSync(path45.dirname(file), { recursive: true });
+          const fd = fs36.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs35.mkdir(path44.dirname(file), { recursive: true }, (err) => {
+        fs36.mkdir(path45.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs35.open(file, flags, mode, fileOpened);
+          fs36.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs35.open(file, flags, mode, fileOpened);
+        fs36.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -6648,8 +6613,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs35.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs35.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs36.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs36.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -6658,15 +6623,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs35.writeSync(this.fd, this._writingBuf);
+            return fs36.writeSync(this.fd, this._writingBuf);
           }
-          return fs35.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs36.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs35.write(this.fd, this._writingBuf, this.release);
+            return fs36.write(this.fd, this._writingBuf, this.release);
           }
-          return fs35.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs36.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -6723,7 +6688,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs35.fsyncSync(this.fd);
+          fs36.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -6837,7 +6802,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs35.fsync(this.fd, (err) => {
+            fs36.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -6939,7 +6904,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs35.close(fd, (err) => {
+          fs36.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -6988,7 +6953,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs35.writeSync(this.fd, buf) : fs35.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs36.writeSync(this.fd, buf) : fs36.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -7004,7 +6969,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs35.fsyncSync(this.fd);
+        fs36.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -7025,7 +6990,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs35.writeSync(this.fd, buf);
+          const n = fs36.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -7053,13 +7018,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs35.writeSync(this.fd, this._writingBuf) : fs35.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs36.writeSync(this.fd, this._writingBuf) : fs36.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs35.write(this.fd, this._writingBuf, release);
+        fs36.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -7068,7 +7033,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs35.writeSync(this.fd, this._writingBuf);
+          const written = fs36.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -7077,7 +7042,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs35.write(this.fd, this._writingBuf, release);
+        fs36.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -7093,12 +7058,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs35.fsync(sonic.fd, closeWrapped);
+        fs36.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs35.close(sonic.fd, done);
+          fs36.close(sonic.fd, done);
         } else {
           done();
         }
@@ -7829,7 +7794,7 @@ var require_transport = __commonJS({
       stream.flushSync();
     }
     function transport(fullOptions) {
-      const { pipeline: pipeline2, targets, levels, dedupe, worker = {}, caller = getCallers(), sync = false } = fullOptions;
+      const { pipeline: pipeline3, targets, levels, dedupe, worker = {}, caller = getCallers(), sync = false } = fullOptions;
       const options = {
         ...fullOptions.options
       };
@@ -7857,9 +7822,9 @@ var require_transport = __commonJS({
             };
           });
         });
-      } else if (pipeline2) {
+      } else if (pipeline3) {
         target = bundlerOverrides["pino-worker"] || join11(__dirname, "worker.js");
-        options.pipelines = [pipeline2.map((dest) => {
+        options.pipelines = [pipeline3.map((dest) => {
           return {
             ...dest,
             target: fixTarget(dest.target)
@@ -9462,7 +9427,7 @@ var require_multistream = __commonJS({
 var require_pino = __commonJS({
   "../node_modules/.pnpm/pino@9.14.0/node_modules/pino/pino.js"(exports2, module2) {
     "use strict";
-    var os17 = require("os");
+    var os16 = require("os");
     var stdSerializers = require_pino_std_serializers();
     var caller = require_caller();
     var redaction = require_redaction();
@@ -9509,7 +9474,7 @@ var require_pino = __commonJS({
     } = symbols;
     var { epochTime, nullTime } = time;
     var { pid } = process;
-    var hostname = os17.hostname();
+    var hostname = os16.hostname();
     var defaultErrorSerializer = stdSerializers.err;
     var defaultOptions = {
       level: "info",
@@ -10233,11 +10198,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path44, added, removed, oldPosInc, options) {
-        var last = path44.lastComponent;
+      addToPath: function addToPath(path45, added, removed, oldPosInc, options) {
+        var last = path45.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path44.oldPos + oldPosInc,
+            oldPos: path45.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -10247,7 +10212,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path44.oldPos + oldPosInc,
+            oldPos: path45.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -10678,10 +10643,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path44 = typeof rec.path === "string" ? rec.path : null;
+      const path45 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path44 || content == null) return null;
-      const entry = { path: path44, content };
+      if (!path45 || content == null) return null;
+      const entry = { path: path45, content };
       if (typeof rec.mtimeMs === "number") entry.mtimeMs = rec.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -11507,10 +11472,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path44 = typeof rec.path === "string" ? rec.path : null;
+      const path45 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path44 || content == null) return null;
-      const out = { path: path44, content };
+      if (!path45 || content == null) return null;
+      const out = { path: path45, content };
       if (typeof rec.mtimeMs === "number") out.mtimeMs = rec.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -20425,7 +20390,7 @@ var require_websocket_server = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path30.default.dirname(opts.recordPath);
+  const dir = import_node_path31.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -20439,8 +20404,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs27.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs27.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs28.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs28.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -20465,12 +20430,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs27, import_node_path30;
+var import_node_fs28, import_node_path31;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs27 = __toESM(require("fs"), 1);
-    import_node_path30 = __toESM(require("path"), 1);
+    import_node_fs28 = __toESM(require("fs"), 1);
+    import_node_path31 = __toESM(require("path"), 1);
   }
 });
 
@@ -20513,7 +20478,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs28.mkdtempSync)(import_node_path31.default.join(import_node_os15.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs29.mkdtempSync)(import_node_path32.default.join(import_node_os14.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -20674,19 +20639,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs28.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs29.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs28, import_node_os15, import_node_path31;
+var import_node_fs29, import_node_os14, import_node_path32;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs28 = require("fs");
-    import_node_os15 = __toESM(require("os"), 1);
-    import_node_path31 = __toESM(require("path"), 1);
+    import_node_fs29 = require("fs");
+    import_node_os14 = __toESM(require("os"), 1);
+    import_node_path32 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -20918,8 +20883,8 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path29 = __toESM(require("path"), 1);
-var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_path30 = __toESM(require("path"), 1);
+var import_node_fs27 = __toESM(require("fs"), 1);
 
 // src/logger.ts
 var import_node_fs2 = __toESM(require("fs"), 1);
@@ -22654,6 +22619,18 @@ var SessionManager = class {
       (a, b2) => a.updatedAt > b2.updatedAt ? -1 : a.updatedAt < b2.updatedAt ? 1 : 0
     );
   }
+  /**
+   * 跨 scope 列出所有 owner 视角的 session（default + persona owner + persona guest），
+   * 附带派生的 SessionScope。attachment GC tick 用 —— 需要遍历所有活跃 session 的
+   * .attachments 目录 + 群文件清单求 liveSet。
+   */
+  listOwnedSessionScopes() {
+    return this.listAllOwned().map((file) => ({
+      scope: this.scopeForFile(file),
+      sessionId: file.sessionId,
+      cwd: file.cwd
+    }));
+  }
   // 写回 SessionFile，自动根据 ownerPersonaId / creatorPrincipalId 派生写入 scope.
   // 调用方原先都是 `deps.store.write(updated)`，全部走这里收口路由.
   writeOwned(file) {
@@ -22907,25 +22884,6 @@ var SessionManager = class {
     const file = this.getFile(args.sessionId);
     return { response: file, broadcast: [] };
   }
-  // mirror peer sessions (2026-05-26)：把来自朋友 daemon 的 SessionFile（originOwnerPrincipalId
-  // 非空）持久化到本机 default store。dumb write，**不广播 push 帧**——UI 是写入唯一源，
-  // 双写完成后通过 cache.setData 同步 sidebar 本地 state。
-  //
-  // 强制走 deps.store（即 default scope），不走 scopeForFile：即使 mirror SessionFile 带
-  // 远端 ownerPersonaId（远端 persona session），本机也落 default，不创建本机 persona 目录。
-  // 远端 creator / origin 字段原值保留（不被本机 ctx 派生覆写）。
-  //
-  // 与 manager.create / manager.update 区别：
-  //   - 不走 newRunner / attachObserver / cwd 校验（mirror 是纯 metadata 层）
-  //   - 不发 session:info 帧（manager.create / .update 通过 reducer/wireCollector 发 push）
-  mirrorUpsert(file) {
-    return this.deps.store.write(file);
-  }
-  // mirror peer sessions：删本机 mirror SessionFile。强制 default store。
-  // idempotent：找不到不 throw（UI 反复点删容错）。**不广播 session:deleted**。
-  mirrorRemove(sessionId) {
-    this.deps.store.delete(sessionId);
-  }
   // observer 上报"jsonl 写入了一条 user 行"时调用：在 buffer 里找到与之对应的、
   // 还没建立映射的最早一条 synth user_text，记下 synth → real 映射。
   // 找不到匹配的 synth（runner 不存在 / buffer 已被 /clear 清空 / 真 uuid 来自纯 history
@@ -25573,151 +25531,28 @@ var AgentsScanner = class {
 };
 
 // src/observer/session-observer.ts
-var import_node_fs13 = __toESM(require("fs"), 1);
-var import_node_os9 = __toESM(require("os"), 1);
-var import_node_path14 = __toESM(require("path"), 1);
-init_claude_history();
-
-// src/observer/subagent-meta-observer.ts
 var import_node_fs12 = __toESM(require("fs"), 1);
 var import_node_os8 = __toESM(require("os"), 1);
 var import_node_path13 = __toESM(require("path"), 1);
 init_claude_history();
-var META_RE = /^agent-([A-Za-z0-9_-]+)\.meta\.json$/;
-var SubagentMetaObserver = class {
-  constructor(opts) {
-    this.opts = opts;
-    this.home = opts.home ?? import_node_os8.default.homedir();
-  }
-  opts;
-  home;
-  watches = /* @__PURE__ */ new Map();
-  // public for spec only：测试直接拼路径写假 meta.json；生产 start() 内部自己解析
-  resolveSubagentDir(cwd, toolSessionId) {
-    return import_node_path13.default.join(
-      this.home,
-      ".claude",
-      "projects",
-      cwdToHashDir(cwd),
-      toolSessionId,
-      "subagents"
-    );
-  }
-  start(args) {
-    this.stop(args.sessionId);
-    const dirPath = this.resolveSubagentDir(args.cwd, args.toolSessionId);
-    const w2 = {
-      sessionId: args.sessionId,
-      dirPath,
-      watcher: null,
-      pollTimer: null,
-      emitted: /* @__PURE__ */ new Set()
-    };
-    this.watches.set(args.sessionId, w2);
-    this.scan(w2);
-    this.attachWatcher(w2);
-    w2.pollTimer = setInterval(() => this.scan(w2), 200);
-    return { dirPath };
-  }
-  // fs.watch 必须在目录存在后调用；首次启动时 subagents/ 通常不存在 —— attachWatcher
-  // 失败就交给 pollTimer 200ms 兜底，目录一出现就被下次 poll 捡起来，那时也尝试 attach
-  attachWatcher(w2) {
-    if (w2.watcher) return;
-    try {
-      w2.watcher = import_node_fs12.default.watch(w2.dirPath, { persistent: false }, (_evt, name) => {
-        if (!name) return;
-        const m2 = META_RE.exec(String(name));
-        if (!m2) return;
-        this.scanOne(w2, String(name));
-      });
-    } catch {
-    }
-  }
-  scan(w2) {
-    let entries;
-    try {
-      entries = import_node_fs12.default.readdirSync(w2.dirPath);
-    } catch {
-      return;
-    }
-    if (!w2.watcher) this.attachWatcher(w2);
-    for (const name of entries) {
-      this.scanOne(w2, name);
-    }
-  }
-  scanOne(w2, name) {
-    const m2 = META_RE.exec(name);
-    if (!m2) return;
-    const agentId = m2[1];
-    if (w2.emitted.has(agentId)) return;
-    const file = import_node_path13.default.join(w2.dirPath, name);
-    let raw;
-    try {
-      raw = import_node_fs12.default.readFileSync(file, "utf8");
-    } catch {
-      return;
-    }
-    let obj;
-    try {
-      obj = JSON.parse(raw);
-    } catch {
-      return;
-    }
-    const toolUseId = typeof obj.toolUseId === "string" ? obj.toolUseId : "";
-    if (!toolUseId) return;
-    w2.emitted.add(agentId);
-    const ev = {
-      kind: "subagent_progress",
-      toolUseId,
-      agentId,
-      status: "started"
-    };
-    if (typeof obj.description === "string" && obj.description) ev.description = obj.description;
-    this.opts.onEvent({ sessionId: w2.sessionId, events: [ev] });
-  }
-  isObserving(sessionId) {
-    return this.watches.has(sessionId);
-  }
-  stop(sessionId) {
-    const w2 = this.watches.get(sessionId);
-    if (!w2) return false;
-    try {
-      w2.watcher?.close();
-    } catch {
-    }
-    if (w2.pollTimer) clearInterval(w2.pollTimer);
-    this.watches.delete(sessionId);
-    return true;
-  }
-  stopAll() {
-    for (const id of [...this.watches.keys()]) this.stop(id);
-  }
-};
-
-// src/observer/session-observer.ts
 var SessionObserver = class {
   constructor(opts) {
     this.opts = opts;
-    this.home = opts.home ?? import_node_os9.default.homedir();
-    this.metaObserver = opts.enableSubagentMetaObserver ? new SubagentMetaObserver({ home: this.home, onEvent: opts.onEvent }) : null;
+    this.home = opts.home ?? import_node_os8.default.homedir();
   }
   opts;
   home;
   watches = /* @__PURE__ */ new Map();
-  // 子 observer：监听 <projectsRoot>/<hashDir>/<toolSessionId>/subagents/ 目录的 meta.json，
-  // 仅 TUI 模式启用——SDK 模式靠 `system.task_started` 帧（claude.ts:466）emit subagent_progress
-  // 已经能解锁 AgentCallLine 抽屉入口，再跑 meta watcher 会让 ring buffer 留双帧
-  metaObserver;
   resolveJsonlPath(cwd, toolSessionId, override) {
     if (override) return override;
-    return import_node_path14.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
+    return import_node_path13.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
   }
   start(args) {
     this.stop(args.sessionId);
     const filePath = this.resolveJsonlPath(args.cwd, args.toolSessionId, args.jsonlPath);
     let size = 0;
     try {
-      size = import_node_fs13.default.statSync(filePath).size;
+      size = import_node_fs12.default.statSync(filePath).size;
     } catch {
     }
     const w2 = {
@@ -25730,10 +25565,10 @@ var SessionObserver = class {
       adapter: args.adapter
     };
     try {
-      import_node_fs13.default.mkdirSync(import_node_path14.default.dirname(filePath), { recursive: true });
+      import_node_fs12.default.mkdirSync(import_node_path13.default.dirname(filePath), { recursive: true });
     } catch {
     }
-    w2.watcher = import_node_fs13.default.watch(import_node_path14.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
+    w2.watcher = import_node_fs12.default.watch(import_node_path13.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
       if (!changedName || !filePath.endsWith(changedName)) return;
       this.poll(w2);
     });
@@ -25742,11 +25577,6 @@ var SessionObserver = class {
     this.opts.onStatus?.(args.sessionId, "observing");
     this.hydrateMetaTail(w2);
     this.poll(w2);
-    this.metaObserver?.start({
-      sessionId: args.sessionId,
-      cwd: args.cwd,
-      toolSessionId: args.toolSessionId
-    });
     return { filePath };
   }
   // 读 JSONL 文件尾部 N 行，把每行的 meta_update 字段**合并成一个 patch** 喂给 reducer。
@@ -25756,7 +25586,7 @@ var SessionObserver = class {
   // 异常静默吞，不阻塞 watcher 启动
   hydrateMetaTail(w2, maxLines = 200) {
     try {
-      const raw = import_node_fs13.default.readFileSync(w2.filePath, "utf8");
+      const raw = import_node_fs12.default.readFileSync(w2.filePath, "utf8");
       if (!raw) return;
       const allLines = raw.split("\n").filter((l) => l.trim().length > 0);
       if (allLines.length === 0) return;
@@ -25780,7 +25610,7 @@ var SessionObserver = class {
   poll(w2) {
     let size = 0;
     try {
-      size = import_node_fs13.default.statSync(w2.filePath).size;
+      size = import_node_fs12.default.statSync(w2.filePath).size;
     } catch {
       return;
     }
@@ -25789,11 +25619,11 @@ var SessionObserver = class {
       w2.buf = "";
     }
     if (size === w2.lastSize) return;
-    const fd = import_node_fs13.default.openSync(w2.filePath, "r");
+    const fd = import_node_fs12.default.openSync(w2.filePath, "r");
     try {
       const len = size - w2.lastSize;
       const buf = Buffer.alloc(len);
-      import_node_fs13.default.readSync(fd, buf, 0, len, w2.lastSize);
+      import_node_fs12.default.readSync(fd, buf, 0, len, w2.lastSize);
       w2.lastSize = size;
       w2.buf += buf.toString("utf8");
       let newlineIndex;
@@ -25807,7 +25637,7 @@ var SessionObserver = class {
         }
       }
     } finally {
-      import_node_fs13.default.closeSync(fd);
+      import_node_fs12.default.closeSync(fd);
     }
   }
   // 解析 JSONL 单行：仅当是主链 user 文本行（非 sidechain / 非 sub-agent / message.role='user'
@@ -25860,13 +25690,11 @@ var SessionObserver = class {
     }
     if (w2.pollTimer) clearInterval(w2.pollTimer);
     this.watches.delete(sessionId);
-    this.metaObserver?.stop(sessionId);
     this.opts.onStatus?.(sessionId, "stopped");
     return true;
   }
   stopAll() {
     for (const id of [...this.watches.keys()]) this.stop(id);
-    this.metaObserver?.stopAll();
   }
 };
 
@@ -26467,14 +26295,14 @@ function authenticate(token, deps) {
 }
 
 // src/permission/capability-store.ts
-var fs16 = __toESM(require("fs"), 1);
-var path19 = __toESM(require("path"), 1);
+var fs15 = __toESM(require("fs"), 1);
+var path18 = __toESM(require("path"), 1);
 var CAPABILITIES_FILE_NAME = "capabilities.json";
 var FILE_VERSION = 1;
 var CapabilityStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs16.mkdirSync(dataDir, { recursive: true });
+    fs15.mkdirSync(dataDir, { recursive: true });
     this.cache = this.readFromDisk();
   }
   dataDir;
@@ -26498,13 +26326,13 @@ var CapabilityStore = class {
     this.flush();
   }
   filePath() {
-    return path19.join(this.dataDir, CAPABILITIES_FILE_NAME);
+    return path18.join(this.dataDir, CAPABILITIES_FILE_NAME);
   }
   readFromDisk() {
     const file = this.filePath();
     let raw;
     try {
-      raw = fs16.readFileSync(file, "utf8");
+      raw = fs15.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -26532,10 +26360,10 @@ var CapabilityStore = class {
   }
   atomicWrite(file, content) {
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
-    fs16.writeFileSync(tmp, content, { mode: 384 });
-    fs16.renameSync(tmp, file);
+    fs15.writeFileSync(tmp, content, { mode: 384 });
+    fs15.renameSync(tmp, file);
     try {
-      fs16.chmodSync(file, 384);
+      fs15.chmodSync(file, 384);
     } catch {
     }
   }
@@ -26628,14 +26456,14 @@ var CapabilityManager = class {
 };
 
 // src/permission/cleanup.ts
-var fs17 = __toESM(require("fs"), 1);
+var fs16 = __toESM(require("fs"), 1);
 function cleanupGuestSessionsForCapability(cap, factory) {
   const removed = [];
   for (const g2 of cap.grants) {
     if (g2.resource.type !== "persona") continue;
     const dir = factory.vmGuestRoot(g2.resource.id, cap.id);
     try {
-      fs17.rmSync(dir, { recursive: true, force: true });
+      fs16.rmSync(dir, { recursive: true, force: true });
       removed.push(dir);
     } catch {
     }
@@ -26644,13 +26472,13 @@ function cleanupGuestSessionsForCapability(cap, factory) {
 }
 
 // src/permission/personal-capability.ts
-var import_node_fs14 = __toESM(require("fs"), 1);
-var import_node_path15 = __toESM(require("path"), 1);
+var import_node_fs13 = __toESM(require("fs"), 1);
+var import_node_path14 = __toESM(require("path"), 1);
 var import_node_crypto4 = __toESM(require("crypto"), 1);
 var PERSONAL_CAP_FILE_NAME = "personal-capability.json";
 var PERSONAL_CAP_DISPLAY_NAME = "personal";
 function personalCapFilePath(dataDir) {
-  return import_node_path15.default.join(dataDir, PERSONAL_CAP_FILE_NAME);
+  return import_node_path14.default.join(dataDir, PERSONAL_CAP_FILE_NAME);
 }
 function loadOrCreatePersonalCapability(opts) {
   const file = personalCapFilePath(opts.dataDir);
@@ -26680,7 +26508,7 @@ function loadOrCreatePersonalCapability(opts) {
 function readFile(file) {
   let raw;
   try {
-    raw = import_node_fs14.default.readFileSync(file, "utf8");
+    raw = import_node_fs13.default.readFileSync(file, "utf8");
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") return null;
@@ -26701,10 +26529,10 @@ function readFile(file) {
   return { token: obj.token, capability: capParsed.data };
 }
 function writeFile(file, content) {
-  import_node_fs14.default.mkdirSync(import_node_path15.default.dirname(file), { recursive: true });
-  import_node_fs14.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs13.default.mkdirSync(import_node_path14.default.dirname(file), { recursive: true });
+  import_node_fs13.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs14.default.chmodSync(file, 384);
+    import_node_fs13.default.chmodSync(file, 384);
   } catch {
   }
 }
@@ -26719,13 +26547,13 @@ function sha256Hex2(s) {
 }
 
 // src/inbox/inbox-store.ts
-var fs19 = __toESM(require("fs"), 1);
-var path21 = __toESM(require("path"), 1);
+var fs18 = __toESM(require("fs"), 1);
+var path20 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs19.mkdirSync(this.dirPath(), { recursive: true });
+    fs18.mkdirSync(this.dirPath(), { recursive: true });
   }
   dataDir;
   /**
@@ -26737,7 +26565,7 @@ var InboxStore = class {
     const file = this.filePath(peerOwnerId);
     let raw;
     try {
-      raw = fs19.readFileSync(file, "utf8");
+      raw = fs18.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -26753,7 +26581,7 @@ var InboxStore = class {
     const dir = this.dirPath();
     let entries;
     try {
-      entries = fs19.readdirSync(dir);
+      entries = fs18.readdirSync(dir);
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -26769,9 +26597,9 @@ var InboxStore = class {
     if (existing.some((m2) => m2.id === message.id)) return;
     const file = this.filePath(message.peerOwnerId);
     const line = JSON.stringify(message) + "\n";
-    fs19.appendFileSync(file, line, { mode: 384 });
+    fs18.appendFileSync(file, line, { mode: 384 });
     try {
-      fs19.chmodSync(file, 384);
+      fs18.chmodSync(file, 384);
     } catch {
     }
   }
@@ -26801,7 +26629,7 @@ var InboxStore = class {
   removeByPeerOwnerId(peerOwnerId) {
     const file = this.filePath(peerOwnerId);
     try {
-      fs19.unlinkSync(file);
+      fs18.unlinkSync(file);
     } catch (err) {
       if (err?.code === "ENOENT") return;
     }
@@ -26810,18 +26638,18 @@ var InboxStore = class {
     const file = this.filePath(peerOwnerId);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     const content = messages.map((m2) => JSON.stringify(m2)).join("\n") + (messages.length > 0 ? "\n" : "");
-    fs19.writeFileSync(tmp, content, { mode: 384 });
-    fs19.renameSync(tmp, file);
+    fs18.writeFileSync(tmp, content, { mode: 384 });
+    fs18.renameSync(tmp, file);
     try {
-      fs19.chmodSync(file, 384);
+      fs18.chmodSync(file, 384);
     } catch {
     }
   }
   dirPath() {
-    return path21.join(this.dataDir, INBOX_SUBDIR);
+    return path20.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerOwnerId) {
-    return path21.join(this.dirPath(), `${peerOwnerId}.jsonl`);
+    return path20.join(this.dirPath(), `${peerOwnerId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -26908,8 +26736,8 @@ var InboxManager = class {
 };
 
 // src/state/received-capability-store.ts
-var fs20 = __toESM(require("fs"), 1);
-var path22 = __toESM(require("path"), 1);
+var fs19 = __toESM(require("fs"), 1);
+var path21 = __toESM(require("path"), 1);
 var FILE_NAME = "received-capabilities.json";
 var ReceivedCapabilityStore = class {
   constructor(dataDir) {
@@ -26919,10 +26747,10 @@ var ReceivedCapabilityStore = class {
   caps = /* @__PURE__ */ new Map();
   load() {
     this.caps.clear();
-    const file = path22.join(this.dataDir, FILE_NAME);
+    const file = path21.join(this.dataDir, FILE_NAME);
     let raw;
     try {
-      raw = fs20.readFileSync(file, "utf8");
+      raw = fs19.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code !== "ENOENT") this.renameBak(file);
       return;
@@ -26959,20 +26787,20 @@ var ReceivedCapabilityStore = class {
     this.flush();
   }
   flush() {
-    const file = path22.join(this.dataDir, FILE_NAME);
+    const file = path21.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
       { receivedCaps: Array.from(this.caps.values()) },
       null,
       2
     );
-    fs20.mkdirSync(this.dataDir, { recursive: true });
-    fs20.writeFileSync(tmp, content, { mode: 384 });
-    fs20.renameSync(tmp, file);
+    fs19.mkdirSync(this.dataDir, { recursive: true });
+    fs19.writeFileSync(tmp, content, { mode: 384 });
+    fs19.renameSync(tmp, file);
   }
   renameBak(file) {
     try {
-      fs20.renameSync(file, `${file}.bak`);
+      fs19.renameSync(file, `${file}.bak`);
     } catch {
     }
   }
@@ -27070,61 +26898,61 @@ async function connectRemote(args) {
 }
 
 // src/migrations/2026-05-20-flatten-sessions.ts
-var fs21 = __toESM(require("fs"), 1);
-var path23 = __toESM(require("path"), 1);
+var fs20 = __toESM(require("fs"), 1);
+var path22 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path23.join(dataDir, "sessions");
-  const flagPath = path23.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path22.join(dataDir, "sessions");
+  const flagPath = path22.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path23.join(sessionsDir, "default");
+  const defaultDir = path22.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path23.join(defaultDir, entry);
-      const dst = path23.join(sessionsDir, entry);
-      fs21.renameSync(src, dst);
+      const src = path22.join(defaultDir, entry);
+      const dst = path22.join(sessionsDir, entry);
+      fs20.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path23.join(sessionsDir, pid);
+    const personaDir = path22.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path23.join(personaDir, "owner");
+    const ownerSrc = path22.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path23.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs21.mkdirSync(ownerDst, { recursive: true });
+      const ownerDst = path22.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      fs20.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs21.renameSync(path23.join(ownerSrc, file), path23.join(ownerDst, file));
+        fs20.renameSync(path22.join(ownerSrc, file), path22.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path23.join(personaDir, "listener");
+    const listenerSrc = path22.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path23.join(dataDir, ".legacy", `listener-${pid}`);
-      fs21.mkdirSync(archiveDst, { recursive: true });
+      const archiveDst = path22.join(dataDir, ".legacy", `listener-${pid}`);
+      fs20.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs21.renameSync(path23.join(listenerSrc, file), path23.join(archiveDst, file));
+        fs20.renameSync(path22.join(listenerSrc, file), path22.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs21.mkdirSync(sessionsDir, { recursive: true });
-  fs21.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs20.mkdirSync(sessionsDir, { recursive: true });
+  fs20.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -27135,7 +26963,7 @@ function migrateFlattenSessions(opts) {
 }
 function existsSync3(p2) {
   try {
-    fs21.statSync(p2);
+    fs20.statSync(p2);
     return true;
   } catch {
     return false;
@@ -27143,21 +26971,21 @@ function existsSync3(p2) {
 }
 function isDir(p2) {
   try {
-    return fs21.statSync(p2).isDirectory();
+    return fs20.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p2) {
   try {
-    return fs21.readdirSync(p2);
+    return fs20.readdirSync(p2);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p2) {
   try {
-    fs21.rmdirSync(p2);
+    fs20.rmdirSync(p2);
   } catch {
   }
 }
@@ -27167,7 +26995,7 @@ var import_node_fs15 = __toESM(require("fs"), 1);
 var import_node_path17 = __toESM(require("path"), 1);
 
 // src/attachment/mime.ts
-var import_node_path16 = __toESM(require("path"), 1);
+var import_node_path15 = __toESM(require("path"), 1);
 var TEXT_PLAIN = "text/plain; charset=utf-8";
 var EXT_TO_NATIVE_MIME = {
   // 图片
@@ -27274,7 +27102,7 @@ var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
   ".mk"
 ]);
 function lookupMime(filePathOrName) {
-  const ext = import_node_path16.default.extname(filePathOrName).toLowerCase();
+  const ext = import_node_path15.default.extname(filePathOrName).toLowerCase();
   if (EXT_TO_NATIVE_MIME[ext]) return EXT_TO_NATIVE_MIME[ext];
   if (TEXT_EXTENSIONS.has(ext)) return TEXT_PLAIN;
   return "application/octet-stream";
@@ -27342,7 +27170,137 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
   return { ok: true, absPath };
 }
 
+// src/attachment/upload.ts
+var import_node_fs14 = __toESM(require("fs"), 1);
+var import_node_path16 = __toESM(require("path"), 1);
+var import_node_crypto6 = __toESM(require("crypto"), 1);
+var import_promises = require("stream/promises");
+var UploadError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "UploadError";
+  }
+  code;
+};
+function assertValidFileName(fileName) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path16.default.basename(fileName)) {
+    throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
+  }
+}
+var HASH_PREFIX_LEN = 16;
+async function writeUploadedAttachment(args) {
+  assertValidFileName(args.fileName);
+  const attachmentsRoot = import_node_path16.default.join(args.sessionDir, ".attachments");
+  try {
+    import_node_fs14.default.mkdirSync(attachmentsRoot, { recursive: true });
+  } catch (err) {
+    throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
+  }
+  const hasher = import_node_crypto6.default.createHash("sha256");
+  let actualSize = 0;
+  const tmpPath = import_node_path16.default.join(
+    attachmentsRoot,
+    `.upload-${process.pid}-${Date.now()}-${import_node_crypto6.default.randomBytes(4).toString("hex")}`
+  );
+  try {
+    await (0, import_promises.pipeline)(
+      args.body,
+      async function* (source) {
+        for await (const chunk of source) {
+          const buf = chunk;
+          actualSize += buf.length;
+          hasher.update(buf);
+          yield buf;
+        }
+      },
+      import_node_fs14.default.createWriteStream(tmpPath, { mode: 384 })
+    );
+  } catch (err) {
+    try {
+      import_node_fs14.default.unlinkSync(tmpPath);
+    } catch {
+    }
+    throw new UploadError("STORAGE_ERROR", `write failed: ${err.message}`);
+  }
+  if (actualSize !== args.contentLength) {
+    try {
+      import_node_fs14.default.unlinkSync(tmpPath);
+    } catch {
+    }
+    throw new UploadError(
+      "SIZE_MISMATCH",
+      `expected ${args.contentLength} bytes, got ${actualSize}`
+    );
+  }
+  const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
+  const hashDir = import_node_path16.default.join(attachmentsRoot, attachmentId);
+  let finalFileName;
+  let hashDirExists = false;
+  try {
+    hashDirExists = import_node_fs14.default.statSync(hashDir).isDirectory();
+  } catch {
+  }
+  if (hashDirExists) {
+    const existing = import_node_fs14.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
+    finalFileName = existing[0] ?? args.fileName;
+    try {
+      import_node_fs14.default.unlinkSync(tmpPath);
+    } catch {
+    }
+  } else {
+    try {
+      import_node_fs14.default.mkdirSync(hashDir, { recursive: true });
+      finalFileName = args.fileName;
+      import_node_fs14.default.renameSync(tmpPath, import_node_path16.default.join(hashDir, finalFileName));
+    } catch (err) {
+      try {
+        import_node_fs14.default.unlinkSync(tmpPath);
+      } catch {
+      }
+      throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
+    }
+  }
+  const absPath = import_node_path16.default.join(hashDir, finalFileName);
+  const relPath = import_node_path16.default.relative(args.sessionDir, absPath);
+  args.groupFileStore.upsert(args.scope, args.sessionId, {
+    relPath: absPath,
+    // 存绝对路径，与现有 agent 入清单的形态一致（attachment.ts:144 双形态兼容）
+    from: "user-upload",
+    label: args.fileName,
+    size: actualSize,
+    mime: args.mimeType
+  });
+  return { attachmentId, absPath, relPath, sizeBytes: actualSize, mimeType: args.mimeType };
+}
+
 // src/transport/http-router.ts
+var UPLOAD_MIME_ALLOW = /* @__PURE__ */ new Set([
+  "image/png",
+  "image/jpeg",
+  "image/gif",
+  "image/webp",
+  "application/pdf"
+]);
+var UPLOAD_MIME_ALLOW_PREFIX = ["text/"];
+var UPLOAD_MAX_BYTES = 25 * 1024 * 1024;
+var UPLOAD_CORS_HEADERS = {
+  "Access-Control-Allow-Origin": "*",
+  "Access-Control-Allow-Methods": "POST, OPTIONS",
+  "Access-Control-Allow-Headers": "Authorization, Content-Type",
+  "Access-Control-Max-Age": "86400"
+};
+function isUploadMimeAllowed(mime) {
+  if (UPLOAD_MIME_ALLOW.has(mime)) return true;
+  return UPLOAD_MIME_ALLOW_PREFIX.some((p2) => mime.startsWith(p2));
+}
+function isValidUploadFileName(fileName) {
+  if (fileName.length === 0) return false;
+  if (fileName === "." || fileName === "..") return false;
+  if (fileName.startsWith(".")) return false;
+  if (fileName.includes("/") || fileName.includes("\\")) return false;
+  return fileName === import_node_path17.default.basename(fileName);
+}
 function createHttpRouter(deps) {
   return async (req, res) => {
     const url = parseUrl(req.url);
@@ -27356,9 +27314,14 @@ function createHttpRouter(deps) {
       });
       return true;
     }
-    if (!url.pathname.startsWith("/session/") && !url.pathname.startsWith("/files/")) {
+    if (!url.pathname.startsWith("/session/") && !url.pathname.startsWith("/files/") && url.pathname !== "/attachments/upload") {
       return false;
     }
+    if (url.pathname === "/attachments/upload" && req.method === "OPTIONS") {
+      res.writeHead(204, UPLOAD_CORS_HEADERS);
+      res.end();
+      return true;
+    }
     if (url.pathname.startsWith("/files/") && req.method === "GET") {
       const secret = deps.getSignSecret?.();
       if (!secret) {
@@ -27396,6 +27359,107 @@ function createHttpRouter(deps) {
       sendJson(res, 401, { code: "UNAUTHORIZED", message: "missing or invalid bearer token" });
       return true;
     }
+    if (url.pathname === "/attachments/upload" && req.method === "POST") {
+      const sendUploadJson = (status, body) => sendJson(res, status, body, UPLOAD_CORS_HEADERS);
+      if (ctx.role !== "owner") {
+        sendUploadJson(403, { code: "FORBIDDEN", message: "owner only" });
+        return true;
+      }
+      const up = deps.attachmentUpload;
+      if (!up) {
+        sendUploadJson(501, { code: "NOT_IMPLEMENTED", message: "attachment upload not wired" });
+        return true;
+      }
+      const sessionId = url.searchParams.get("sessionId");
+      const fileName = url.searchParams.get("fileName");
+      const mimeType = url.searchParams.get("mimeType");
+      const contentLengthRaw = req.headers["content-length"];
+      if (!sessionId || !fileName || !mimeType || !contentLengthRaw) {
+        sendUploadJson(400, {
+          code: "INVALID_PARAM",
+          message: "missing sessionId/fileName/mimeType/Content-Length"
+        });
+        return true;
+      }
+      if (!isValidUploadFileName(fileName)) {
+        sendUploadJson(400, {
+          code: "INVALID_FILENAME",
+          message: `fileName must be a plain basename (no path separators, no dotfiles): ${fileName}`
+        });
+        return true;
+      }
+      const contentLength = Number.parseInt(contentLengthRaw, 10);
+      if (!Number.isFinite(contentLength) || contentLength < 0) {
+        sendUploadJson(400, { code: "INVALID_PARAM", message: "malformed Content-Length" });
+        return true;
+      }
+      if (contentLength > UPLOAD_MAX_BYTES) {
+        sendUploadJson(413, {
+          code: "FILE_TOO_LARGE",
+          message: `max ${UPLOAD_MAX_BYTES} bytes`
+        });
+        return true;
+      }
+      if (!isUploadMimeAllowed(mimeType)) {
+        sendUploadJson(400, {
+          code: "UNSUPPORTED_MIME",
+          message: `mime ${mimeType} not allowed`
+        });
+        return true;
+      }
+      const sessionDir = up.getSessionDir(sessionId);
+      const scope = up.getSessionScope(sessionId);
+      if (!sessionDir || !scope) {
+        sendUploadJson(404, { code: "NOT_FOUND", message: `session ${sessionId} not found` });
+        return true;
+      }
+      const httpBaseUrl = up.getHttpBaseUrl();
+      if (!httpBaseUrl) {
+        sendUploadJson(503, {
+          code: "TUNNEL_NOT_READY",
+          message: "httpBaseUrl unavailable"
+        });
+        return true;
+      }
+      const secret = deps.getSignSecret?.();
+      if (!secret) {
+        sendUploadJson(501, {
+          code: "NOT_IMPLEMENTED",
+          message: "sign secret unavailable (noAuth?)"
+        });
+        return true;
+      }
+      try {
+        const result = await writeUploadedAttachment({
+          sessionDir,
+          sessionId,
+          scope,
+          fileName,
+          mimeType,
+          contentLength,
+          body: req,
+          groupFileStore: up.groupFileStore
+        });
+        const parts = signUrlParts(secret, result.absPath, null);
+        const fullUrl = buildSignedFileUrl(httpBaseUrl, parts);
+        sendUploadJson(200, {
+          attachmentId: result.attachmentId,
+          url: fullUrl,
+          relPath: result.relPath,
+          sizeBytes: result.sizeBytes,
+          mimeType: result.mimeType
+        });
+      } catch (err) {
+        if (err instanceof UploadError) {
+          const status = err.code === "SIZE_MISMATCH" ? 400 : 500;
+          sendUploadJson(status, { code: err.code, message: err.message });
+        } else {
+          deps.logger?.warn("attachment upload failed", { err: err.message });
+          sendUploadJson(500, { code: "STORAGE_ERROR", message: err.message });
+        }
+      }
+      return true;
+    }
     const sessionFilesMatch = url.pathname.match(/^\/session\/([^/]+)\/files$/);
     if (sessionFilesMatch && req.method === "GET") {
       const sid = sessionFilesMatch[1];
@@ -27477,10 +27541,78 @@ function streamFile(res, absPath, logger) {
   stream.pipe(res);
 }
 
-// src/attachment/group.ts
+// src/attachment/gc.ts
 var import_node_fs16 = __toESM(require("fs"), 1);
 var import_node_path18 = __toESM(require("path"), 1);
-var import_node_crypto6 = __toESM(require("crypto"), 1);
+var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
+function runAttachmentGc(args) {
+  const now = (args.now ?? Date.now)();
+  const ttlMs = args.ttlMs ?? DEFAULT_TTL_MS;
+  const liveAbs = /* @__PURE__ */ new Set();
+  for (const { scope, sessionId } of args.sessionScopes) {
+    for (const entry of args.groupFileStore.list(scope, sessionId)) {
+      if (entry.stale) continue;
+      if (import_node_path18.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+    }
+  }
+  for (const { scope, sessionId } of args.sessionScopes) {
+    const sessionDir = args.getSessionCwd?.(sessionId) ?? import_node_path18.default.join(
+      args.dataDir,
+      "sessions",
+      ...scopeSubPath(scope).map(safeFileName),
+      safeFileName(sessionId)
+    );
+    const attRoot = import_node_path18.default.join(sessionDir, ".attachments");
+    let hashDirs;
+    try {
+      hashDirs = import_node_fs16.default.readdirSync(attRoot);
+    } catch (err) {
+      if (err.code === "ENOENT") continue;
+      args.logger?.warn("attachment gc: readdir failed", { attRoot, err: err.message });
+      continue;
+    }
+    for (const hashDir of hashDirs) {
+      const hashDirAbs = import_node_path18.default.join(attRoot, hashDir);
+      let files;
+      try {
+        files = import_node_fs16.default.readdirSync(hashDirAbs);
+      } catch {
+        continue;
+      }
+      for (const name of files) {
+        const file = import_node_path18.default.join(hashDirAbs, name);
+        let stat;
+        try {
+          stat = import_node_fs16.default.statSync(file);
+        } catch {
+          continue;
+        }
+        if (!stat.isFile()) continue;
+        const age = now - stat.mtimeMs;
+        if (age < ttlMs) continue;
+        if (liveAbs.has(file)) continue;
+        try {
+          import_node_fs16.default.unlinkSync(file);
+        } catch (err) {
+          args.logger?.warn("attachment gc: unlink failed", { file, err: err.message });
+        }
+      }
+      try {
+        if (import_node_fs16.default.readdirSync(hashDirAbs).length === 0) import_node_fs16.default.rmdirSync(hashDirAbs);
+      } catch {
+      }
+    }
+    try {
+      if (import_node_fs16.default.readdirSync(attRoot).length === 0) import_node_fs16.default.rmdirSync(attRoot);
+    } catch {
+    }
+  }
+}
+
+// src/attachment/group.ts
+var import_node_fs17 = __toESM(require("fs"), 1);
+var import_node_path19 = __toESM(require("path"), 1);
+var import_node_crypto7 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
   dataDir;
@@ -27491,11 +27623,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path18.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path19.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path18.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path19.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -27504,7 +27636,7 @@ var GroupFileStore = class {
   readFile(scope, sessionId) {
     const file = this.filePath(scope, sessionId);
     try {
-      const raw = import_node_fs16.default.readFileSync(file, "utf8");
+      const raw = import_node_fs17.default.readFileSync(file, "utf8");
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) {
         this.logger?.warn("GroupFileStore.readFile: not an array; resetting session entries", {
@@ -27530,10 +27662,10 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs16.default.mkdirSync(import_node_path18.default.dirname(file), { recursive: true });
+    import_node_fs17.default.mkdirSync(import_node_path19.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs16.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
-    import_node_fs16.default.renameSync(tmp, file);
+    import_node_fs17.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
+    import_node_fs17.default.renameSync(tmp, file);
   }
   /** 拉一份当前 session 的清单。读盘 → cache；之后调用复用 cache */
   list(scope, sessionId) {
@@ -27569,7 +27701,7 @@ var GroupFileStore = class {
       entries[idx] = next;
     } else {
       next = {
-        id: `gf-${import_node_crypto6.default.randomBytes(6).toString("base64url")}`,
+        id: `gf-${import_node_crypto7.default.randomBytes(6).toString("base64url")}`,
         relPath: input.relPath,
         from: input.from,
         label: input.label,
@@ -27619,10 +27751,10 @@ var GroupFileStore = class {
 };
 
 // src/discovery/state-file.ts
-var import_node_fs17 = __toESM(require("fs"), 1);
-var import_node_path19 = __toESM(require("path"), 1);
+var import_node_fs18 = __toESM(require("fs"), 1);
+var import_node_path20 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path19.default.join(dataDir, "state.json");
+  return import_node_path20.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -27644,7 +27776,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs17.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs18.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -27658,34 +27790,34 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs17.default.mkdirSync(import_node_path19.default.dirname(this.file), { recursive: true });
+    import_node_fs18.default.mkdirSync(import_node_path20.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs17.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs17.default.renameSync(tmp, this.file);
+    import_node_fs18.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs18.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs17.default.chmodSync(this.file, 384);
+        import_node_fs18.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs17.default.unlinkSync(this.file);
+      import_node_fs18.default.unlinkSync(this.file);
     } catch {
     }
   }
 };
 
 // src/tunnel/tunnel-manager.ts
-var import_node_fs21 = __toESM(require("fs"), 1);
-var import_node_path23 = __toESM(require("path"), 1);
-var import_node_crypto7 = __toESM(require("crypto"), 1);
+var import_node_fs22 = __toESM(require("fs"), 1);
+var import_node_path24 = __toESM(require("path"), 1);
+var import_node_crypto8 = __toESM(require("crypto"), 1);
 var import_node_child_process5 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
-var import_node_fs18 = __toESM(require("fs"), 1);
-var import_node_path20 = __toESM(require("path"), 1);
+var import_node_fs19 = __toESM(require("fs"), 1);
+var import_node_path21 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -27693,7 +27825,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs18.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs19.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -27704,22 +27836,22 @@ var TunnelStore = class {
     }
   }
   async set(v2) {
-    const dir = import_node_path20.default.dirname(this.filePath);
-    await import_node_fs18.default.promises.mkdir(dir, { recursive: true });
+    const dir = import_node_path21.default.dirname(this.filePath);
+    await import_node_fs19.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs18.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs19.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs18.default.promises.chmod(tmp, 384);
+        await import_node_fs19.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs18.default.promises.rename(tmp, this.filePath);
+    await import_node_fs19.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs18.default.promises.unlink(this.filePath);
+      await import_node_fs19.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -27814,12 +27946,12 @@ function escape(v2) {
 }
 
 // src/tunnel/frpc-binary.ts
-var import_node_fs19 = __toESM(require("fs"), 1);
-var import_node_os10 = __toESM(require("os"), 1);
-var import_node_path21 = __toESM(require("path"), 1);
+var import_node_fs20 = __toESM(require("fs"), 1);
+var import_node_os9 = __toESM(require("os"), 1);
+var import_node_path22 = __toESM(require("path"), 1);
 var import_node_child_process3 = require("child_process");
 var import_node_stream2 = require("stream");
-var import_promises = require("stream/promises");
+var import_promises2 = require("stream/promises");
 var FRPC_VERSION = "0.68.0";
 var UnsupportedPlatformError = class extends Error {
   constructor(platform, arch) {
@@ -27848,20 +27980,20 @@ function frpcDownloadUrl(version2, p2) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs19.default.existsSync(opts.override)) {
+    if (!import_node_fs20.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path21.default.join(opts.dataDir, "bin");
-  import_node_fs19.default.mkdirSync(binDir, { recursive: true });
+  const binDir = import_node_path22.default.join(opts.dataDir, "bin");
+  import_node_fs20.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path21.default.join(binDir, "frpc");
-  if (import_node_fs19.default.existsSync(stableBin)) return stableBin;
+  const stableBin = import_node_path22.default.join(binDir, "frpc");
+  if (import_node_fs20.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path21.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path22.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -27870,8 +28002,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs19.default.chmodSync(partialBin, 493);
-    import_node_fs19.default.renameSync(partialBin, stableBin);
+    import_node_fs20.default.chmodSync(partialBin, 493);
+    import_node_fs20.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -27881,15 +28013,15 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs19.default.readdirSync(binDir);
+    entries = import_node_fs20.default.readdirSync(binDir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path21.default.join(binDir, name);
+      const full = import_node_path22.default.join(binDir, name);
       try {
-        import_node_fs19.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs20.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -27897,7 +28029,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p2) {
   try {
-    import_node_fs19.default.unlinkSync(p2);
+    import_node_fs20.default.unlinkSync(p2);
   } catch {
   }
 }
@@ -27908,13 +28040,13 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs19.default.createWriteStream(dest);
+  const out = import_node_fs20.default.createWriteStream(dest);
   const nodeStream = import_node_stream2.Readable.fromWeb(res.body);
-  await (0, import_promises.pipeline)(nodeStream, out);
+  await (0, import_promises2.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path21.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs19.default.mkdirSync(work, { recursive: true });
+  const work = import_node_path22.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  import_node_fs20.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve6, reject) => {
       const proc = (0, import_node_child_process3.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
@@ -27922,32 +28054,32 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
       proc.on("exit", (code) => code === 0 ? resolve6() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path21.default.join(work, dirName, "frpc");
-    if (!import_node_fs19.default.existsSync(src)) {
+    const src = import_node_path22.default.join(work, dirName, "frpc");
+    if (!import_node_fs20.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs19.default.copyFileSync(src, destBin);
+    import_node_fs20.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs19.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs20.default.rmSync(work, { recursive: true, force: true });
   }
 }
 
 // src/tunnel/frpc-process.ts
-var import_node_fs20 = __toESM(require("fs"), 1);
-var import_node_path22 = __toESM(require("path"), 1);
+var import_node_fs21 = __toESM(require("fs"), 1);
+var import_node_path23 = __toESM(require("path"), 1);
 var import_node_child_process4 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path22.default.join(dataDir, "frpc.pid");
+  return import_node_path23.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
-    import_node_fs20.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
+    import_node_fs21.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearFrpcPid(dataDir) {
   try {
-    import_node_fs20.default.unlinkSync(frpcPidFilePath(dataDir));
+    import_node_fs21.default.unlinkSync(frpcPidFilePath(dataDir));
   } catch {
   }
 }
@@ -27963,7 +28095,7 @@ function defaultIsPidAlive(pid) {
 }
 function defaultReadPidFile(file) {
   try {
-    return import_node_fs20.default.readFileSync(file, "utf8");
+    return import_node_fs21.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -27979,7 +28111,7 @@ function defaultSleep(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path22.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path23.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -28003,7 +28135,7 @@ async function killStaleFrpc(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs20.default.unlinkSync(pidFile);
+      import_node_fs21.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -28014,7 +28146,7 @@ async function killStaleFrpc(deps) {
   }
   await sleep(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs20.default.unlinkSync(pidFile);
+    import_node_fs21.default.unlinkSync(pidFile);
   } catch {
   }
 }
@@ -28051,7 +28183,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path23.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path24.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -28178,8 +28310,8 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path23.default.join(this.deps.dataDir, "frpc.toml");
-      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto7.default.randomBytes(3).toString("hex")}`;
+      const tomlPath = import_node_path24.default.join(this.deps.dataDir, "frpc.toml");
+      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto8.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
         serverPort: t.frpsPort,
@@ -28189,12 +28321,12 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs21.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      await import_node_fs22.default.promises.writeFile(tomlPath, toml, { mode: 384 });
       const proc = (this.deps.spawnImpl ?? import_node_child_process5.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logFilePath = import_node_path23.default.join(this.deps.dataDir, "frpc.log");
-      const logStream = import_node_fs21.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logFilePath = import_node_path24.default.join(this.deps.dataDir, "frpc.log");
+      const logStream = import_node_fs22.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -28276,23 +28408,23 @@ async function waitForFrpcReady(proc, timeoutMs) {
 }
 
 // src/tunnel/device-key.ts
-var import_node_os11 = __toESM(require("os"), 1);
-var import_node_crypto8 = __toESM(require("crypto"), 1);
+var import_node_os10 = __toESM(require("os"), 1);
+var import_node_crypto9 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
-  const hostname = opts.hostname ?? import_node_os11.default.hostname();
-  const uid = opts.uid ?? (typeof import_node_os11.default.userInfo === "function" ? import_node_os11.default.userInfo().uid : 0);
+  const hostname = opts.hostname ?? import_node_os10.default.hostname();
+  const uid = opts.uid ?? (typeof import_node_os10.default.userInfo === "function" ? import_node_os10.default.userInfo().uid : 0);
   const input = `${hostname}::${uid}`;
-  return import_node_crypto8.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
+  return import_node_crypto9.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
-var import_node_fs22 = __toESM(require("fs"), 1);
-var import_node_path24 = __toESM(require("path"), 1);
-var import_node_crypto9 = __toESM(require("crypto"), 1);
+var import_node_fs23 = __toESM(require("fs"), 1);
+var import_node_path25 = __toESM(require("path"), 1);
+var import_node_crypto10 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path24.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path25.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -28317,14 +28449,14 @@ function loadOrCreateAuthFile(opts) {
   return next;
 }
 function defaultGenerateToken2() {
-  return import_node_crypto9.default.randomBytes(32).toString("base64url");
+  return import_node_crypto10.default.randomBytes(32).toString("base64url");
 }
 function defaultGenerateOwnerPrincipalId() {
-  return `owner-${import_node_crypto9.default.randomUUID()}`;
+  return `owner-${import_node_crypto10.default.randomUUID()}`;
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs22.default.readFileSync(file, "utf8");
+    const raw = import_node_fs23.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -28342,25 +28474,25 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs22.default.mkdirSync(import_node_path24.default.dirname(file), { recursive: true });
-  import_node_fs22.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs23.default.mkdirSync(import_node_path25.default.dirname(file), { recursive: true });
+  import_node_fs23.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs22.default.chmodSync(file, 384);
+    import_node_fs23.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs23 = __toESM(require("fs"), 1);
-var import_node_os12 = __toESM(require("os"), 1);
-var import_node_path25 = __toESM(require("path"), 1);
+var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_os11 = __toESM(require("os"), 1);
+var import_node_path26 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function loadOwnerDisplayName(dataDir) {
-  const fallback = import_node_os12.default.userInfo().username;
-  const profilePath = import_node_path25.default.join(dataDir, PROFILE_FILENAME);
+  const fallback = import_node_os11.default.userInfo().username;
+  const profilePath = import_node_path26.default.join(dataDir, PROFILE_FILENAME);
   let raw;
   try {
-    raw = import_node_fs23.default.readFileSync(profilePath, "utf8");
+    raw = import_node_fs24.default.readFileSync(profilePath, "utf8");
   } catch {
     return fallback;
   }
@@ -28389,12 +28521,12 @@ init_protocol();
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs24 = __toESM(require("fs"), 1);
-var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path26 = __toESM(require("path"), 1);
+var import_node_fs25 = __toESM(require("fs"), 1);
+var import_node_os12 = __toESM(require("os"), 1);
+var import_node_path27 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs24.default.readFileSync(file, "utf8");
+  const raw = import_node_fs25.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -28407,10 +28539,10 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path26.default.join(import_node_os13.default.homedir(), ".claude");
-  const projectDir = import_node_path26.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  const sourceFile = import_node_path26.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs24.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path27.default.join(import_node_os12.default.homedir(), ".claude");
+  const projectDir = import_node_path27.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  const sourceFile = import_node_path27.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs25.default.existsSync(sourceFile)) {
     throw new Error(`fork: source transcript not found: ${sourceFile}`);
   }
   const entries = readJsonlEntries(sourceFile);
@@ -28440,9 +28572,9 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const forkedFilePath = import_node_path26.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs24.default.mkdirSync(projectDir, { recursive: true });
-  import_node_fs24.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const forkedFilePath = import_node_path27.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs25.default.mkdirSync(projectDir, { recursive: true });
+  import_node_fs25.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
@@ -28730,28 +28862,6 @@ function buildSessionHandlers(deps) {
       }
     };
   };
-  const peerSessionUpsert = async (frame, _client, ctx) => {
-    if (ctx && ctx.principal.kind !== "owner") {
-      throw new ClawdError(
-        ERROR_CODES.UNAUTHORIZED,
-        `principal ${ctx.principal.kind}:${ctx.principal.id} cannot peerSession:upsert`
-      );
-    }
-    const file = PeerSessionUpsertArgs.parse(frame);
-    manager.mirrorUpsert(file);
-    return { response: { type: "peerSession:upsert:ok" }, broadcast: [] };
-  };
-  const peerSessionRemove = async (frame, _client, ctx) => {
-    if (ctx && ctx.principal.kind !== "owner") {
-      throw new ClawdError(
-        ERROR_CODES.UNAUTHORIZED,
-        `principal ${ctx.principal.kind}:${ctx.principal.id} cannot peerSession:remove`
-      );
-    }
-    const args = PeerSessionRemoveArgs.parse(frame);
-    manager.mirrorRemove(args.sessionId);
-    return { response: { type: "peerSession:remove:ok" }, broadcast: [] };
-  };
   return {
     "session:create": create,
     "session:list": list,
@@ -28777,9 +28887,7 @@ function buildSessionHandlers(deps) {
     "session:cancelQuestion": cancelQuestion,
     "session:pty:input": ptyInput,
     "session:pty:resize": ptyResize,
-    "session:pty:snapshot": ptySnapshot,
-    "peerSession:upsert": peerSessionUpsert,
-    "peerSession:remove": peerSessionRemove
+    "session:pty:snapshot": ptySnapshot
   };
 }
 
@@ -28798,7 +28906,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path36 = __toESM(require("path"), 1);
+var path37 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -28816,7 +28924,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path35 = __toESM(require("path"), 1);
+var path36 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -28829,26 +28937,26 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read") {
-  const root = path35.resolve(personaRoot);
-  const target = path35.resolve(absPath);
-  const sep3 = root.endsWith(path35.sep) ? "" : path35.sep;
+  const root = path36.resolve(personaRoot);
+  const target = path36.resolve(absPath);
+  const sep3 = root.endsWith(path36.sep) ? "" : path36.sep;
   if (!target.startsWith(root + sep3)) return false;
-  const rel = path35.relative(root, target);
+  const rel = path36.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId = rel.split(path35.sep)[0];
+  const personaId = rel.split(path36.sep)[0];
   if (!personaId) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path35.resolve(personaRoot);
-  const target = path35.resolve(absPath);
-  const sep3 = root.endsWith(path35.sep) ? "" : path35.sep;
+  const root = path36.resolve(personaRoot);
+  const target = path36.resolve(absPath);
+  const sep3 = root.endsWith(path36.sep) ? "" : path36.sep;
   if (!target.startsWith(root + sep3)) return null;
-  const rel = path35.relative(root, target);
+  const rel = path36.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path35.sep)[0];
+  const id = rel.split(path36.sep)[0];
   return id || null;
 }
 
@@ -28873,7 +28981,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path36.join(personaRoot, pid),
+          path37.join(personaRoot, pid),
           personaRoot,
           "read"
         );
@@ -28884,7 +28992,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path36.resolve(args.projectPath), personaRoot, "history:list");
+    assertGuestPath(ctx, path37.resolve(args.projectPath), personaRoot, "history:list");
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -28916,13 +29024,13 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path36.resolve(args.cwd), personaRoot, "history:subagents");
+    assertGuestPath(ctx, path37.resolve(args.cwd), personaRoot, "history:subagents");
     const subs = await history.listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path36.resolve(args.cwd), personaRoot, "history:subagent-read");
+    assertGuestPath(ctx, path37.resolve(args.cwd), personaRoot, "history:subagent-read");
     const res = await history.readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
   };
@@ -28930,7 +29038,7 @@ function buildHistoryHandlers(deps) {
     const dirs = listRecentDirs(store);
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path36.resolve(d.cwd), personaRoot, "read")
+        (d) => isGuestPathAllowed(ctx.grants, path37.resolve(d.cwd), personaRoot, "read")
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -28947,8 +29055,8 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path37 = __toESM(require("path"), 1);
-var os14 = __toESM(require("os"), 1);
+var path38 = __toESM(require("path"), 1);
+var os13 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
 function buildEnabledPluginNames(personaManager, personaId) {
@@ -28987,23 +29095,23 @@ function buildWorkspaceHandlers(deps) {
   const list = async (frame, _client, ctx) => {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
-    const fallbackCwd = isGuest && personaRoot ? personaRoot : os14.homedir();
-    const resolvedCwd = path37.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path37.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const fallbackCwd = isGuest && personaRoot ? personaRoot : os13.homedir();
+    const resolvedCwd = path38.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path38.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list");
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path37.isAbsolute(args.path) ? path37.resolve(args.path) : path37.resolve(args.cwd, args.path);
+    const target = path38.isAbsolute(args.path) ? path38.resolve(args.path) : path38.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read");
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path37.resolve(args.cwd);
+    const cwdAbs = path38.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list");
     const list2 = skills.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -29015,7 +29123,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path37.resolve(args.cwd);
+    const cwdAbs = path38.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list");
     const list2 = agents.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -29034,20 +29142,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path39 = __toESM(require("path"), 1);
+var path40 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process6 = require("child_process");
-var import_node_fs25 = __toESM(require("fs"), 1);
-var import_node_path27 = __toESM(require("path"), 1);
+var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_path28 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process6.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path27.default.resolve(p2);
+  const resolved = import_node_path28.default.resolve(p2);
   try {
-    return import_node_fs25.default.realpathSync(resolved);
+    return import_node_fs26.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -29120,7 +29228,7 @@ async function listGitBranches(cwd) {
 // src/handlers/git.ts
 function assertGuestCwd(ctx, cwd, personaRoot, method) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
-  if (!isGuestPathAllowed(ctx.grants, path39.resolve(cwd), personaRoot, "read")) {
+  if (!isGuestPathAllowed(ctx.grants, path40.resolve(cwd), personaRoot, "read")) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -29483,7 +29591,7 @@ function buildWhoamiHandler(deps) {
 }
 
 // src/handlers/meta.ts
-var import_node_os14 = __toESM(require("os"), 1);
+var import_node_os13 = __toESM(require("os"), 1);
 init_protocol();
 
 // src/version.ts
@@ -29513,7 +29621,7 @@ function buildReadyFrame(deps, client) {
   return {
     version,
     protocolVersion: PROTOCOL_VERSION,
-    hostname: import_node_os14.default.hostname(),
+    hostname: import_node_os13.default.hostname(),
     os: process.platform,
     tools,
     runningSessions: info.runningSessions,
@@ -29607,7 +29715,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path28 = __toESM(require("path"), 1);
+var import_node_path29 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -29661,12 +29769,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path28.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path28.default.isAbsolute(args.relPath) ? import_node_path28.default.resolve(args.relPath) : import_node_path28.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path29.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path29.default.isAbsolute(args.relPath) ? import_node_path29.default.resolve(args.relPath) : import_node_path29.default.resolve(cwdAbs, args.relPath);
     assertGuestAttachmentPath(ctx, candidateAbs, deps.personaRoot, "attachment.signUrl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path28.default.isAbsolute(e.relPath) ? import_node_path28.default.resolve(e.relPath) : import_node_path28.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path29.default.isAbsolute(e.relPath) ? import_node_path29.default.resolve(e.relPath) : import_node_path29.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -29690,7 +29798,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path28.default.resolve(f.cwd), deps.personaRoot, method);
+    assertGuestAttachmentPath(ctx, import_node_path29.default.resolve(f.cwd), deps.personaRoot, method);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -29731,7 +29839,7 @@ function buildAttachmentHandlers(deps) {
     }
     const entries = deps.groupFileStore.list(scope, parsed.data.sessionId);
     const target = entries.find((e) => e.relPath === parsed.data.relPath);
-    if (target?.from === "owner") {
+    if (target?.from === "owner" || target?.from === "user-upload") {
       deps.groupFileStore.remove(scope, parsed.data.sessionId, parsed.data.relPath);
     } else {
       deps.groupFileStore.markStale(scope, parsed.data.sessionId, parsed.data.relPath);
@@ -29857,11 +29965,6 @@ var METHOD_GRANT_MAP = {
   "session:pin": CAPABILITY_SCOPED,
   "session:reorderPins": ADMIN_ANY,
   // owner 全局操作，无 personaId 维度
-  // mirror peer sessions (2026-05-26)：owner-only — guest 不应能写/删本机 mirror SessionFile
-  // (会绕过 #739 隔离规则把伪造身份的 SessionFile 写进 default store)。handler 端内部 ctx
-  // 校验，dispatcher 层一刀切 admin 也兜底。
-  "peerSession:upsert": ADMIN_ANY,
-  "peerSession:remove": ADMIN_ANY,
   "permission:respond": CAPABILITY_SCOPED,
   "session:answerQuestion": CAPABILITY_SCOPED,
   "session:cancelQuestion": CAPABILITY_SCOPED,
@@ -29932,7 +30035,7 @@ function computeGrantForFrame(method, frame) {
 async function startDaemon(config) {
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path29.default.join(config.dataDir, "clawd.log")
+    file: import_node_path30.default.join(config.dataDir, "clawd.log")
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const stateMgr = new StateFileManager({ dataDir: config.dataDir });
@@ -30019,7 +30122,7 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path29.default.join(config.dataDir, "personas"));
+  const personaStore = new PersonaStore(import_node_path30.default.join(config.dataDir, "personas"));
   const defaultsRoot = findDefaultsRoot();
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -30036,7 +30139,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path29.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path30.default.join(config.dataDir, "personas"),
     personaStore,
     ownerDisplayName,
     ownerPrincipalId,
@@ -30060,10 +30163,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path29.default.isAbsolute(input.relPath) ? input.relPath : import_node_path29.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path30.default.isAbsolute(input.relPath) ? input.relPath : import_node_path30.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs26.default.statSync(absPath).size;
+          size = import_node_fs27.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -30089,11 +30192,6 @@ async function startDaemon(config) {
     }
   });
   const observer = new SessionObserver({
-    // TUI 模式 pty 跑 CC 不发 SDK system.task_started 帧 → UI pending 期 progress.agentId
-    // 永远 undefined，子 agent 调用过程没有抽屉入口。开 meta observer 后从 subagents 目录
-    // 新出现的 agent-*.meta.json 派生 subagent_progress(started) 补这块缺口。SDK 模式仍走
-    // task_started 路径，避免双 emit 让 ring buffer 双帧。
-    enableSubagentMetaObserver: config.mode === "tui",
     onEvent: ({ sessionId, events }) => {
       manager.feedObserverEvents(sessionId, events);
     },
@@ -30181,10 +30279,10 @@ async function startDaemon(config) {
       // 'persona/<pid>/owner'，default 走 'default'。
       getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
       // guest path guard：candidate 必须在 personaRoot 子树下
-      personaRoot: import_node_path29.default.join(config.dataDir, "personas")
+      personaRoot: import_node_path30.default.join(config.dataDir, "personas")
     },
     // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-    personaRoot: import_node_path29.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path30.default.join(config.dataDir, "personas"),
     // capability:list / delete handler 依赖
     capabilityManager,
     // personal-cap:get 返回的 shareBaseUrl 用此 base URL：
@@ -30220,7 +30318,19 @@ async function startDaemon(config) {
     sessionStore: store,
     // /files HMAC verify 用 auth.json 的 signSecret 字段（与 attachment.signUrl 同源）。
     // --auth-token CLI 模式没 signSecret → 路由返 501，sign URL 功能整体禁用。
-    getSignSecret: () => authFile?.signSecret ?? null
+    getSignSecret: () => authFile?.signSecret ?? null,
+    // chatinput 附件上传（POST /attachments/upload，spec §6.1）。upload pipeline
+    // 在 session.cwd 下的 .attachments/ 落盘；signSecret 与 /files HMAC 同源；
+    // tunnel 未启时返 503 TUNNEL_NOT_READY 让前端显式提示。
+    attachmentUpload: {
+      groupFileStore,
+      getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
+      getSessionDir: (sid) => {
+        const f = manager.findOwnedSession(sid);
+        return f ? f.cwd : null;
+      },
+      getHttpBaseUrl: () => currentTunnelUrl ? getHttpBaseUrl() : null
+    }
   });
   wsServer = new LocalWsServer({
     host: config.host,
@@ -30385,8 +30495,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path29.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path29.default.join(config.dataDir, "frpc.log")}`
+        `Frpc config: ${import_node_path30.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path30.default.join(config.dataDir, "frpc.log")}`
       ];
       const width = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width + 4);
@@ -30399,8 +30509,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path29.default.join(config.dataDir, "connect.txt");
-        import_node_fs26.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path30.default.join(config.dataDir, "connect.txt");
+        import_node_fs27.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -30425,8 +30535,29 @@ ${bar}
       logger.warn("tunnel unavailable, degraded to local mode", { reason: tunnelError });
     }
   }
+  const tickAttachmentGc = () => {
+    try {
+      runAttachmentGc({
+        dataDir: config.dataDir,
+        groupFileStore,
+        sessionScopes: manager.listOwnedSessionScopes().map(({ scope, sessionId }) => ({
+          scope,
+          sessionId
+        })),
+        // 注入 cwd 让 GC 直接定位 .attachments 目录（与 upload 落盘点一致）
+        getSessionCwd: (sid) => manager.findOwnedSession(sid)?.cwd ?? null,
+        logger
+      });
+    } catch (err) {
+      logger.warn("attachment gc tick failed", { err: err.message });
+    }
+  };
+  setImmediate(tickAttachmentGc);
+  const attachmentGcInterval = setInterval(tickAttachmentGc, 24 * 3600 * 1e3);
+  attachmentGcInterval.unref();
   const shutdown = async () => {
     logger.info("stopping clawd");
+    clearInterval(attachmentGcInterval);
     observer.stopAll();
     manager.stopAll();
     if (tunnelMgr) {
@@ -30444,9 +30575,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path29.default.join(dataDir, "persons");
+  const dir = import_node_path30.default.join(dataDir, "persons");
   try {
-    import_node_fs26.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs27.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }