@clawos-dev/clawd 0.2.89-beta.165.fab5549 → 0.2.89-beta.166.ca76654

package/dist/cli.cjs

@@ -651,8 +651,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path44, errorMaps, issueData } = params;
-      const fullPath = [...path44, ...issueData.path || []];
+      const { data, path: path46, errorMaps, issueData } = params;
+      const fullPath = [...path46, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -963,11 +963,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path44, key) {
+      constructor(parent, value, path46, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path44;
+        this._path = path46;
         this._key = key;
       }
       get path() {
@@ -4351,13 +4351,13 @@ var init_zod = __esm({
 });
 
 // ../protocol/src/attachment-schemas.ts
-var TOKEN_ROLES, GROUP_FILE_SOURCES, GroupFileEntrySchema, AttachmentSignUrlArgs, AttachmentSignUrlResponseSchema, AttachmentGroupAddArgs, AttachmentGroupAddResponseSchema, AttachmentGroupRemoveArgs, AttachmentGroupRemoveResponseSchema, AttachmentGroupListArgs, AttachmentGroupListResponseSchema;
+var TOKEN_ROLES, GROUP_FILE_SOURCES, GroupFileEntrySchema, AttachmentSignUrlArgs, AttachmentSignUrlResponseSchema, AttachmentGroupAddArgs, AttachmentGroupAddResponseSchema, AttachmentGroupRemoveArgs, AttachmentGroupRemoveResponseSchema, AttachmentGroupListArgs, AttachmentGroupListResponseSchema, AttachmentUploadResponseSchema;
 var init_attachment_schemas = __esm({
   "../protocol/src/attachment-schemas.ts"() {
     "use strict";
     init_zod();
     TOKEN_ROLES = ["owner"];
-    GROUP_FILE_SOURCES = ["agent", "owner"];
+    GROUP_FILE_SOURCES = ["agent", "owner", "user-upload"];
     GroupFileEntrySchema = external_exports.object({
       /** daemon 派发的稳定 id（用于 RPC remove / UI key） */
       id: external_exports.string().min(1),
@@ -4412,6 +4412,16 @@ var init_attachment_schemas = __esm({
     AttachmentGroupListResponseSchema = external_exports.object({
       entries: external_exports.array(GroupFileEntrySchema)
     });
+    AttachmentUploadResponseSchema = external_exports.object({
+      /** sha256(bytes) 前 16 位，前端持有的稳定 ref */
+      attachmentId: external_exports.string().min(1),
+      /** 完整 tunnel signed URL，前端拼 marker / 直接送 Anthropic 都用它 */
+      url: external_exports.string().min(1),
+      /** 落在 session 目录下的相对路径（后续 group RPC / drawer 展示用） */
+      relPath: external_exports.string().min(1),
+      sizeBytes: external_exports.number().int().nonnegative(),
+      mimeType: external_exports.string().min(1)
+    });
   }
 });
 
@@ -5625,8 +5635,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path44 = req.path;
-        _req.url = typeof path44 === "string" ? path44 : req.url ? req.url.path || req.url : void 0;
+        const path46 = req.path;
+        _req.url = typeof path46 === "string" ? path46 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -5791,14 +5801,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path44) {
+    function parsePath(path46) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path44.length; i++) {
-        const char = path44[i];
+      for (let i = 0; i < path46.length; i++) {
+        const char = path46[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -5929,10 +5939,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path44 of paths) {
-        const parts = parsePath(path44);
+      for (const path46 of paths) {
+        const parts = parsePath(path46);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path44, remove);
+          redactWildcardPath(obj, parts, censor, path46, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -6017,8 +6027,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path44) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path44];
+            const wrappedCensor = typeof censor === "function" ? (value, path46) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path46];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -6053,8 +6063,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path44 of pathsToClone) {
-        const parts = parsePath(path44);
+      for (const path46 of pathsToClone) {
+        const parts = parsePath(path46);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -6106,24 +6116,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path44) {
-      if (typeof path44 !== "string") {
+    function validatePath(path46) {
+      if (typeof path46 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path44 === "") {
+      if (path46 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path44.includes("..")) {
-        throw new Error(`Invalid redaction path (${path44})`);
+      if (path46.includes("..")) {
+        throw new Error(`Invalid redaction path (${path46})`);
       }
-      if (path44.includes(",")) {
-        throw new Error(`Invalid redaction path (${path44})`);
+      if (path46.includes(",")) {
+        throw new Error(`Invalid redaction path (${path46})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path44.length; i++) {
-        const char = path44[i];
+      for (let i = 0; i < path46.length; i++) {
+        const char = path46[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -6137,20 +6147,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path44})`);
+            throw new Error(`Invalid redaction path (${path46})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path44})`);
+        throw new Error(`Invalid redaction path (${path46})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path44 of paths) {
-        validatePath(path44);
+      for (const path46 of paths) {
+        validatePath(path46);
       }
     }
     function slowRedact(options = {}) {
@@ -6318,8 +6328,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path44) => {
-            return censor(value, [k2, ...path44]);
+          const wrappedCensor = typeof censor === "function" ? (value, path46) => {
+            return censor(value, [k2, ...path46]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -6537,10 +6547,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs35 = require("fs");
+    var fs37 = require("fs");
     var EventEmitter2 = require("events");
     var inherits = require("util").inherits;
-    var path44 = require("path");
+    var path46 = require("path");
     var sleep = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -6594,20 +6604,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs35.mkdirSync(path44.dirname(file), { recursive: true });
-          const fd = fs35.openSync(file, flags, mode);
+          if (sonic.mkdir) fs37.mkdirSync(path46.dirname(file), { recursive: true });
+          const fd = fs37.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs35.mkdir(path44.dirname(file), { recursive: true }, (err) => {
+        fs37.mkdir(path46.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs35.open(file, flags, mode, fileOpened);
+          fs37.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs35.open(file, flags, mode, fileOpened);
+        fs37.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -6648,8 +6658,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs35.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs35.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs37.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs37.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -6658,15 +6668,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs35.writeSync(this.fd, this._writingBuf);
+            return fs37.writeSync(this.fd, this._writingBuf);
           }
-          return fs35.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs37.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs35.write(this.fd, this._writingBuf, this.release);
+            return fs37.write(this.fd, this._writingBuf, this.release);
           }
-          return fs35.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs37.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -6723,7 +6733,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs35.fsyncSync(this.fd);
+          fs37.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -6837,7 +6847,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs35.fsync(this.fd, (err) => {
+            fs37.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -6939,7 +6949,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs35.close(fd, (err) => {
+          fs37.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -6988,7 +6998,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs35.writeSync(this.fd, buf) : fs35.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs37.writeSync(this.fd, buf) : fs37.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -7004,7 +7014,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs35.fsyncSync(this.fd);
+        fs37.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -7025,7 +7035,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs35.writeSync(this.fd, buf);
+          const n = fs37.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -7053,13 +7063,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs35.writeSync(this.fd, this._writingBuf) : fs35.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs37.writeSync(this.fd, this._writingBuf) : fs37.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs35.write(this.fd, this._writingBuf, release);
+        fs37.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -7068,7 +7078,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs35.writeSync(this.fd, this._writingBuf);
+          const written = fs37.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -7077,7 +7087,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs35.write(this.fd, this._writingBuf, release);
+        fs37.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -7093,12 +7103,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs35.fsync(sonic.fd, closeWrapped);
+        fs37.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs35.close(sonic.fd, done);
+          fs37.close(sonic.fd, done);
         } else {
           done();
         }
@@ -7829,7 +7839,7 @@ var require_transport = __commonJS({
       stream.flushSync();
     }
     function transport(fullOptions) {
-      const { pipeline: pipeline2, targets, levels, dedupe, worker = {}, caller = getCallers(), sync = false } = fullOptions;
+      const { pipeline: pipeline3, targets, levels, dedupe, worker = {}, caller = getCallers(), sync = false } = fullOptions;
       const options = {
         ...fullOptions.options
       };
@@ -7857,9 +7867,9 @@ var require_transport = __commonJS({
             };
           });
         });
-      } else if (pipeline2) {
+      } else if (pipeline3) {
         target = bundlerOverrides["pino-worker"] || join11(__dirname, "worker.js");
-        options.pipelines = [pipeline2.map((dest) => {
+        options.pipelines = [pipeline3.map((dest) => {
           return {
             ...dest,
             target: fixTarget(dest.target)
@@ -10233,11 +10243,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path44, added, removed, oldPosInc, options) {
-        var last = path44.lastComponent;
+      addToPath: function addToPath(path46, added, removed, oldPosInc, options) {
+        var last = path46.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path44.oldPos + oldPosInc,
+            oldPos: path46.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -10247,7 +10257,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path44.oldPos + oldPosInc,
+            oldPos: path46.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -10678,10 +10688,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path44 = typeof rec.path === "string" ? rec.path : null;
+      const path46 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path44 || content == null) return null;
-      const entry = { path: path44, content };
+      if (!path46 || content == null) return null;
+      const entry = { path: path46, content };
       if (typeof rec.mtimeMs === "number") entry.mtimeMs = rec.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -11507,10 +11517,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path44 = typeof rec.path === "string" ? rec.path : null;
+      const path46 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path44 || content == null) return null;
-      const out = { path: path44, content };
+      if (!path46 || content == null) return null;
+      const out = { path: path46, content };
       if (typeof rec.mtimeMs === "number") out.mtimeMs = rec.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -20425,7 +20435,7 @@ var require_websocket_server = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path30.default.dirname(opts.recordPath);
+  const dir = import_node_path32.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -20439,8 +20449,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs27.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs27.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs29.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs29.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -20465,12 +20475,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs27, import_node_path30;
+var import_node_fs29, import_node_path32;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs27 = __toESM(require("fs"), 1);
-    import_node_path30 = __toESM(require("path"), 1);
+    import_node_fs29 = __toESM(require("fs"), 1);
+    import_node_path32 = __toESM(require("path"), 1);
   }
 });
 
@@ -20513,7 +20523,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs28.mkdtempSync)(import_node_path31.default.join(import_node_os15.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs30.mkdtempSync)(import_node_path33.default.join(import_node_os15.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -20674,19 +20684,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs28.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs30.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs28, import_node_os15, import_node_path31;
+var import_node_fs30, import_node_os15, import_node_path33;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs28 = require("fs");
+    import_node_fs30 = require("fs");
     import_node_os15 = __toESM(require("os"), 1);
-    import_node_path31 = __toESM(require("path"), 1);
+    import_node_path33 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -20918,8 +20928,8 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path29 = __toESM(require("path"), 1);
-var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_path31 = __toESM(require("path"), 1);
+var import_node_fs28 = __toESM(require("fs"), 1);
 
 // src/logger.ts
 var import_node_fs2 = __toESM(require("fs"), 1);
@@ -22654,6 +22664,18 @@ var SessionManager = class {
       (a, b2) => a.updatedAt > b2.updatedAt ? -1 : a.updatedAt < b2.updatedAt ? 1 : 0
     );
   }
+  /**
+   * 跨 scope 列出所有 owner 视角的 session（default + persona owner + persona guest），
+   * 附带派生的 SessionScope。attachment GC tick 用 —— 需要遍历所有活跃 session 的
+   * .attachments 目录 + 群文件清单求 liveSet。
+   */
+  listOwnedSessionScopes() {
+    return this.listAllOwned().map((file) => ({
+      scope: this.scopeForFile(file),
+      sessionId: file.sessionId,
+      cwd: file.cwd
+    }));
+  }
   // 写回 SessionFile，自动根据 ownerPersonaId / creatorPrincipalId 派生写入 scope.
   // 调用方原先都是 `deps.store.write(updated)`，全部走这里收口路由.
   writeOwned(file) {
@@ -27170,8 +27192,8 @@ function rmdirIfEmpty(p2) {
 }
 
 // src/transport/http-router.ts
-var import_node_fs15 = __toESM(require("fs"), 1);
-var import_node_path17 = __toESM(require("path"), 1);
+var import_node_fs16 = __toESM(require("fs"), 1);
+var import_node_path18 = __toESM(require("path"), 1);
 
 // src/attachment/mime.ts
 var import_node_path16 = __toESM(require("path"), 1);
@@ -27349,7 +27371,137 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
   return { ok: true, absPath };
 }
 
+// src/attachment/upload.ts
+var import_node_fs15 = __toESM(require("fs"), 1);
+var import_node_path17 = __toESM(require("path"), 1);
+var import_node_crypto6 = __toESM(require("crypto"), 1);
+var import_promises = require("stream/promises");
+var UploadError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "UploadError";
+  }
+  code;
+};
+function assertValidFileName(fileName) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path17.default.basename(fileName)) {
+    throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
+  }
+}
+var HASH_PREFIX_LEN = 16;
+async function writeUploadedAttachment(args) {
+  assertValidFileName(args.fileName);
+  const attachmentsRoot = import_node_path17.default.join(args.sessionDir, ".attachments");
+  try {
+    import_node_fs15.default.mkdirSync(attachmentsRoot, { recursive: true });
+  } catch (err) {
+    throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
+  }
+  const hasher = import_node_crypto6.default.createHash("sha256");
+  let actualSize = 0;
+  const tmpPath = import_node_path17.default.join(
+    attachmentsRoot,
+    `.upload-${process.pid}-${Date.now()}-${import_node_crypto6.default.randomBytes(4).toString("hex")}`
+  );
+  try {
+    await (0, import_promises.pipeline)(
+      args.body,
+      async function* (source) {
+        for await (const chunk of source) {
+          const buf = chunk;
+          actualSize += buf.length;
+          hasher.update(buf);
+          yield buf;
+        }
+      },
+      import_node_fs15.default.createWriteStream(tmpPath, { mode: 384 })
+    );
+  } catch (err) {
+    try {
+      import_node_fs15.default.unlinkSync(tmpPath);
+    } catch {
+    }
+    throw new UploadError("STORAGE_ERROR", `write failed: ${err.message}`);
+  }
+  if (actualSize !== args.contentLength) {
+    try {
+      import_node_fs15.default.unlinkSync(tmpPath);
+    } catch {
+    }
+    throw new UploadError(
+      "SIZE_MISMATCH",
+      `expected ${args.contentLength} bytes, got ${actualSize}`
+    );
+  }
+  const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
+  const hashDir = import_node_path17.default.join(attachmentsRoot, attachmentId);
+  let finalFileName;
+  let hashDirExists = false;
+  try {
+    hashDirExists = import_node_fs15.default.statSync(hashDir).isDirectory();
+  } catch {
+  }
+  if (hashDirExists) {
+    const existing = import_node_fs15.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
+    finalFileName = existing[0] ?? args.fileName;
+    try {
+      import_node_fs15.default.unlinkSync(tmpPath);
+    } catch {
+    }
+  } else {
+    try {
+      import_node_fs15.default.mkdirSync(hashDir, { recursive: true });
+      finalFileName = args.fileName;
+      import_node_fs15.default.renameSync(tmpPath, import_node_path17.default.join(hashDir, finalFileName));
+    } catch (err) {
+      try {
+        import_node_fs15.default.unlinkSync(tmpPath);
+      } catch {
+      }
+      throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
+    }
+  }
+  const absPath = import_node_path17.default.join(hashDir, finalFileName);
+  const relPath = import_node_path17.default.relative(args.sessionDir, absPath);
+  args.groupFileStore.upsert(args.scope, args.sessionId, {
+    relPath: absPath,
+    // 存绝对路径，与现有 agent 入清单的形态一致（attachment.ts:144 双形态兼容）
+    from: "user-upload",
+    label: args.fileName,
+    size: actualSize,
+    mime: args.mimeType
+  });
+  return { attachmentId, absPath, relPath, sizeBytes: actualSize, mimeType: args.mimeType };
+}
+
 // src/transport/http-router.ts
+var UPLOAD_MIME_ALLOW = /* @__PURE__ */ new Set([
+  "image/png",
+  "image/jpeg",
+  "image/gif",
+  "image/webp",
+  "application/pdf"
+]);
+var UPLOAD_MIME_ALLOW_PREFIX = ["text/"];
+var UPLOAD_MAX_BYTES = 25 * 1024 * 1024;
+var UPLOAD_CORS_HEADERS = {
+  "Access-Control-Allow-Origin": "*",
+  "Access-Control-Allow-Methods": "POST, OPTIONS",
+  "Access-Control-Allow-Headers": "Authorization, Content-Type",
+  "Access-Control-Max-Age": "86400"
+};
+function isUploadMimeAllowed(mime) {
+  if (UPLOAD_MIME_ALLOW.has(mime)) return true;
+  return UPLOAD_MIME_ALLOW_PREFIX.some((p2) => mime.startsWith(p2));
+}
+function isValidUploadFileName(fileName) {
+  if (fileName.length === 0) return false;
+  if (fileName === "." || fileName === "..") return false;
+  if (fileName.startsWith(".")) return false;
+  if (fileName.includes("/") || fileName.includes("\\")) return false;
+  return fileName === import_node_path18.default.basename(fileName);
+}
 function createHttpRouter(deps) {
   return async (req, res) => {
     const url = parseUrl(req.url);
@@ -27363,9 +27515,14 @@ function createHttpRouter(deps) {
       });
       return true;
     }
-    if (!url.pathname.startsWith("/session/") && !url.pathname.startsWith("/files/")) {
+    if (!url.pathname.startsWith("/session/") && !url.pathname.startsWith("/files/") && url.pathname !== "/attachments/upload") {
       return false;
     }
+    if (url.pathname === "/attachments/upload" && req.method === "OPTIONS") {
+      res.writeHead(204, UPLOAD_CORS_HEADERS);
+      res.end();
+      return true;
+    }
     if (url.pathname.startsWith("/files/") && req.method === "GET") {
       const secret = deps.getSignSecret?.();
       if (!secret) {
@@ -27403,6 +27560,107 @@ function createHttpRouter(deps) {
       sendJson(res, 401, { code: "UNAUTHORIZED", message: "missing or invalid bearer token" });
       return true;
     }
+    if (url.pathname === "/attachments/upload" && req.method === "POST") {
+      const sendUploadJson = (status, body) => sendJson(res, status, body, UPLOAD_CORS_HEADERS);
+      if (ctx.role !== "owner") {
+        sendUploadJson(403, { code: "FORBIDDEN", message: "owner only" });
+        return true;
+      }
+      const up = deps.attachmentUpload;
+      if (!up) {
+        sendUploadJson(501, { code: "NOT_IMPLEMENTED", message: "attachment upload not wired" });
+        return true;
+      }
+      const sessionId = url.searchParams.get("sessionId");
+      const fileName = url.searchParams.get("fileName");
+      const mimeType = url.searchParams.get("mimeType");
+      const contentLengthRaw = req.headers["content-length"];
+      if (!sessionId || !fileName || !mimeType || !contentLengthRaw) {
+        sendUploadJson(400, {
+          code: "INVALID_PARAM",
+          message: "missing sessionId/fileName/mimeType/Content-Length"
+        });
+        return true;
+      }
+      if (!isValidUploadFileName(fileName)) {
+        sendUploadJson(400, {
+          code: "INVALID_FILENAME",
+          message: `fileName must be a plain basename (no path separators, no dotfiles): ${fileName}`
+        });
+        return true;
+      }
+      const contentLength = Number.parseInt(contentLengthRaw, 10);
+      if (!Number.isFinite(contentLength) || contentLength < 0) {
+        sendUploadJson(400, { code: "INVALID_PARAM", message: "malformed Content-Length" });
+        return true;
+      }
+      if (contentLength > UPLOAD_MAX_BYTES) {
+        sendUploadJson(413, {
+          code: "FILE_TOO_LARGE",
+          message: `max ${UPLOAD_MAX_BYTES} bytes`
+        });
+        return true;
+      }
+      if (!isUploadMimeAllowed(mimeType)) {
+        sendUploadJson(400, {
+          code: "UNSUPPORTED_MIME",
+          message: `mime ${mimeType} not allowed`
+        });
+        return true;
+      }
+      const sessionDir = up.getSessionDir(sessionId);
+      const scope = up.getSessionScope(sessionId);
+      if (!sessionDir || !scope) {
+        sendUploadJson(404, { code: "NOT_FOUND", message: `session ${sessionId} not found` });
+        return true;
+      }
+      const httpBaseUrl = up.getHttpBaseUrl();
+      if (!httpBaseUrl) {
+        sendUploadJson(503, {
+          code: "TUNNEL_NOT_READY",
+          message: "httpBaseUrl unavailable"
+        });
+        return true;
+      }
+      const secret = deps.getSignSecret?.();
+      if (!secret) {
+        sendUploadJson(501, {
+          code: "NOT_IMPLEMENTED",
+          message: "sign secret unavailable (noAuth?)"
+        });
+        return true;
+      }
+      try {
+        const result = await writeUploadedAttachment({
+          sessionDir,
+          sessionId,
+          scope,
+          fileName,
+          mimeType,
+          contentLength,
+          body: req,
+          groupFileStore: up.groupFileStore
+        });
+        const parts = signUrlParts(secret, result.absPath, null);
+        const fullUrl = buildSignedFileUrl(httpBaseUrl, parts);
+        sendUploadJson(200, {
+          attachmentId: result.attachmentId,
+          url: fullUrl,
+          relPath: result.relPath,
+          sizeBytes: result.sizeBytes,
+          mimeType: result.mimeType
+        });
+      } catch (err) {
+        if (err instanceof UploadError) {
+          const status = err.code === "SIZE_MISMATCH" ? 400 : 500;
+          sendUploadJson(status, { code: err.code, message: err.message });
+        } else {
+          deps.logger?.warn("attachment upload failed", { err: err.message });
+          sendUploadJson(500, { code: "STORAGE_ERROR", message: err.message });
+        }
+      }
+      return true;
+    }
     const sessionFilesMatch = url.pathname.match(/^\/session\/([^/]+)\/files$/);
     if (sessionFilesMatch && req.method === "GET") {
       const sid = sessionFilesMatch[1];
@@ -27412,7 +27670,7 @@ function createHttpRouter(deps) {
         return true;
       }
       let absPath;
-      if (import_node_path17.default.isAbsolute(pathParam)) {
+      if (import_node_path18.default.isAbsolute(pathParam)) {
         absPath = pathParam;
       } else if (deps.sessionStore) {
         const file = deps.sessionStore.read(sid);
@@ -27420,7 +27678,7 @@ function createHttpRouter(deps) {
           sendJson(res, 404, { code: "NOT_FOUND", message: `session ${sid} not found` });
           return true;
         }
-        absPath = import_node_path17.default.join(file.cwd, pathParam);
+        absPath = import_node_path18.default.join(file.cwd, pathParam);
       } else {
         sendJson(res, 501, withCtx(ctx, { code: "NOT_IMPLEMENTED", message: "sessionStore not wired" }));
         return true;
@@ -27453,7 +27711,7 @@ function withCtx(ctx, body) {
 function streamFile(res, absPath, logger) {
   let stat;
   try {
-    stat = import_node_fs15.default.statSync(absPath);
+    stat = import_node_fs16.default.statSync(absPath);
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") {
@@ -27468,7 +27726,7 @@ function streamFile(res, absPath, logger) {
     return;
   }
   const mime = lookupMime(absPath);
-  const basename = import_node_path17.default.basename(absPath);
+  const basename = import_node_path18.default.basename(absPath);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": String(stat.size),
@@ -27476,7 +27734,7 @@ function streamFile(res, absPath, logger) {
     // 防止浏览器把任意 mime 当 html 渲染
     "X-Content-Type-Options": "nosniff"
   });
-  const stream = import_node_fs15.default.createReadStream(absPath);
+  const stream = import_node_fs16.default.createReadStream(absPath);
   stream.on("error", (err) => {
     logger?.warn("streamFile read error", { absPath, err: err.message });
     res.destroy();
@@ -27484,10 +27742,78 @@ function streamFile(res, absPath, logger) {
   stream.pipe(res);
 }
 
+// src/attachment/gc.ts
+var import_node_fs17 = __toESM(require("fs"), 1);
+var import_node_path19 = __toESM(require("path"), 1);
+var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
+function runAttachmentGc(args) {
+  const now = (args.now ?? Date.now)();
+  const ttlMs = args.ttlMs ?? DEFAULT_TTL_MS;
+  const liveAbs = /* @__PURE__ */ new Set();
+  for (const { scope, sessionId } of args.sessionScopes) {
+    for (const entry of args.groupFileStore.list(scope, sessionId)) {
+      if (entry.stale) continue;
+      if (import_node_path19.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+    }
+  }
+  for (const { scope, sessionId } of args.sessionScopes) {
+    const sessionDir = args.getSessionCwd?.(sessionId) ?? import_node_path19.default.join(
+      args.dataDir,
+      "sessions",
+      ...scopeSubPath(scope).map(safeFileName),
+      safeFileName(sessionId)
+    );
+    const attRoot = import_node_path19.default.join(sessionDir, ".attachments");
+    let hashDirs;
+    try {
+      hashDirs = import_node_fs17.default.readdirSync(attRoot);
+    } catch (err) {
+      if (err.code === "ENOENT") continue;
+      args.logger?.warn("attachment gc: readdir failed", { attRoot, err: err.message });
+      continue;
+    }
+    for (const hashDir of hashDirs) {
+      const hashDirAbs = import_node_path19.default.join(attRoot, hashDir);
+      let files;
+      try {
+        files = import_node_fs17.default.readdirSync(hashDirAbs);
+      } catch {
+        continue;
+      }
+      for (const name of files) {
+        const file = import_node_path19.default.join(hashDirAbs, name);
+        let stat;
+        try {
+          stat = import_node_fs17.default.statSync(file);
+        } catch {
+          continue;
+        }
+        if (!stat.isFile()) continue;
+        const age = now - stat.mtimeMs;
+        if (age < ttlMs) continue;
+        if (liveAbs.has(file)) continue;
+        try {
+          import_node_fs17.default.unlinkSync(file);
+        } catch (err) {
+          args.logger?.warn("attachment gc: unlink failed", { file, err: err.message });
+        }
+      }
+      try {
+        if (import_node_fs17.default.readdirSync(hashDirAbs).length === 0) import_node_fs17.default.rmdirSync(hashDirAbs);
+      } catch {
+      }
+    }
+    try {
+      if (import_node_fs17.default.readdirSync(attRoot).length === 0) import_node_fs17.default.rmdirSync(attRoot);
+    } catch {
+    }
+  }
+}
+
 // src/attachment/group.ts
-var import_node_fs16 = __toESM(require("fs"), 1);
-var import_node_path18 = __toESM(require("path"), 1);
-var import_node_crypto6 = __toESM(require("crypto"), 1);
+var import_node_fs18 = __toESM(require("fs"), 1);
+var import_node_path20 = __toESM(require("path"), 1);
+var import_node_crypto7 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
   dataDir;
@@ -27498,11 +27824,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path18.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path20.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path18.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path20.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -27511,7 +27837,7 @@ var GroupFileStore = class {
   readFile(scope, sessionId) {
     const file = this.filePath(scope, sessionId);
     try {
-      const raw = import_node_fs16.default.readFileSync(file, "utf8");
+      const raw = import_node_fs18.default.readFileSync(file, "utf8");
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) {
         this.logger?.warn("GroupFileStore.readFile: not an array; resetting session entries", {
@@ -27537,10 +27863,10 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs16.default.mkdirSync(import_node_path18.default.dirname(file), { recursive: true });
+    import_node_fs18.default.mkdirSync(import_node_path20.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs16.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
-    import_node_fs16.default.renameSync(tmp, file);
+    import_node_fs18.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
+    import_node_fs18.default.renameSync(tmp, file);
   }
   /** 拉一份当前 session 的清单。读盘 → cache；之后调用复用 cache */
   list(scope, sessionId) {
@@ -27576,7 +27902,7 @@ var GroupFileStore = class {
       entries[idx] = next;
     } else {
       next = {
-        id: `gf-${import_node_crypto6.default.randomBytes(6).toString("base64url")}`,
+        id: `gf-${import_node_crypto7.default.randomBytes(6).toString("base64url")}`,
         relPath: input.relPath,
         from: input.from,
         label: input.label,
@@ -27626,10 +27952,10 @@ var GroupFileStore = class {
 };
 
 // src/discovery/state-file.ts
-var import_node_fs17 = __toESM(require("fs"), 1);
-var import_node_path19 = __toESM(require("path"), 1);
+var import_node_fs19 = __toESM(require("fs"), 1);
+var import_node_path21 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path19.default.join(dataDir, "state.json");
+  return import_node_path21.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -27651,7 +27977,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs17.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs19.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -27665,34 +27991,34 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs17.default.mkdirSync(import_node_path19.default.dirname(this.file), { recursive: true });
+    import_node_fs19.default.mkdirSync(import_node_path21.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs17.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs17.default.renameSync(tmp, this.file);
+    import_node_fs19.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs19.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs17.default.chmodSync(this.file, 384);
+        import_node_fs19.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs17.default.unlinkSync(this.file);
+      import_node_fs19.default.unlinkSync(this.file);
     } catch {
     }
   }
 };
 
 // src/tunnel/tunnel-manager.ts
-var import_node_fs21 = __toESM(require("fs"), 1);
-var import_node_path23 = __toESM(require("path"), 1);
-var import_node_crypto7 = __toESM(require("crypto"), 1);
+var import_node_fs23 = __toESM(require("fs"), 1);
+var import_node_path25 = __toESM(require("path"), 1);
+var import_node_crypto8 = __toESM(require("crypto"), 1);
 var import_node_child_process5 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
-var import_node_fs18 = __toESM(require("fs"), 1);
-var import_node_path20 = __toESM(require("path"), 1);
+var import_node_fs20 = __toESM(require("fs"), 1);
+var import_node_path22 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -27700,7 +28026,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs18.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs20.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -27711,22 +28037,22 @@ var TunnelStore = class {
     }
   }
   async set(v2) {
-    const dir = import_node_path20.default.dirname(this.filePath);
-    await import_node_fs18.default.promises.mkdir(dir, { recursive: true });
+    const dir = import_node_path22.default.dirname(this.filePath);
+    await import_node_fs20.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs18.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs20.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs18.default.promises.chmod(tmp, 384);
+        await import_node_fs20.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs18.default.promises.rename(tmp, this.filePath);
+    await import_node_fs20.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs18.default.promises.unlink(this.filePath);
+      await import_node_fs20.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -27821,12 +28147,12 @@ function escape(v2) {
 }
 
 // src/tunnel/frpc-binary.ts
-var import_node_fs19 = __toESM(require("fs"), 1);
+var import_node_fs21 = __toESM(require("fs"), 1);
 var import_node_os10 = __toESM(require("os"), 1);
-var import_node_path21 = __toESM(require("path"), 1);
+var import_node_path23 = __toESM(require("path"), 1);
 var import_node_child_process3 = require("child_process");
 var import_node_stream2 = require("stream");
-var import_promises = require("stream/promises");
+var import_promises2 = require("stream/promises");
 var FRPC_VERSION = "0.68.0";
 var UnsupportedPlatformError = class extends Error {
   constructor(platform, arch) {
@@ -27855,20 +28181,20 @@ function frpcDownloadUrl(version2, p2) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs19.default.existsSync(opts.override)) {
+    if (!import_node_fs21.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path21.default.join(opts.dataDir, "bin");
-  import_node_fs19.default.mkdirSync(binDir, { recursive: true });
+  const binDir = import_node_path23.default.join(opts.dataDir, "bin");
+  import_node_fs21.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path21.default.join(binDir, "frpc");
-  if (import_node_fs19.default.existsSync(stableBin)) return stableBin;
+  const stableBin = import_node_path23.default.join(binDir, "frpc");
+  if (import_node_fs21.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path21.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path23.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -27877,8 +28203,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs19.default.chmodSync(partialBin, 493);
-    import_node_fs19.default.renameSync(partialBin, stableBin);
+    import_node_fs21.default.chmodSync(partialBin, 493);
+    import_node_fs21.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -27888,15 +28214,15 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs19.default.readdirSync(binDir);
+    entries = import_node_fs21.default.readdirSync(binDir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path21.default.join(binDir, name);
+      const full = import_node_path23.default.join(binDir, name);
       try {
-        import_node_fs19.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs21.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -27904,7 +28230,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p2) {
   try {
-    import_node_fs19.default.unlinkSync(p2);
+    import_node_fs21.default.unlinkSync(p2);
   } catch {
   }
 }
@@ -27915,13 +28241,13 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs19.default.createWriteStream(dest);
+  const out = import_node_fs21.default.createWriteStream(dest);
   const nodeStream = import_node_stream2.Readable.fromWeb(res.body);
-  await (0, import_promises.pipeline)(nodeStream, out);
+  await (0, import_promises2.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path21.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs19.default.mkdirSync(work, { recursive: true });
+  const work = import_node_path23.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  import_node_fs21.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve6, reject) => {
       const proc = (0, import_node_child_process3.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
@@ -27929,32 +28255,32 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
       proc.on("exit", (code) => code === 0 ? resolve6() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path21.default.join(work, dirName, "frpc");
-    if (!import_node_fs19.default.existsSync(src)) {
+    const src = import_node_path23.default.join(work, dirName, "frpc");
+    if (!import_node_fs21.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs19.default.copyFileSync(src, destBin);
+    import_node_fs21.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs19.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs21.default.rmSync(work, { recursive: true, force: true });
   }
 }
 
 // src/tunnel/frpc-process.ts
-var import_node_fs20 = __toESM(require("fs"), 1);
-var import_node_path22 = __toESM(require("path"), 1);
+var import_node_fs22 = __toESM(require("fs"), 1);
+var import_node_path24 = __toESM(require("path"), 1);
 var import_node_child_process4 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path22.default.join(dataDir, "frpc.pid");
+  return import_node_path24.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
-    import_node_fs20.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
+    import_node_fs22.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearFrpcPid(dataDir) {
   try {
-    import_node_fs20.default.unlinkSync(frpcPidFilePath(dataDir));
+    import_node_fs22.default.unlinkSync(frpcPidFilePath(dataDir));
   } catch {
   }
 }
@@ -27970,7 +28296,7 @@ function defaultIsPidAlive(pid) {
 }
 function defaultReadPidFile(file) {
   try {
-    return import_node_fs20.default.readFileSync(file, "utf8");
+    return import_node_fs22.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -27986,7 +28312,7 @@ function defaultSleep(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path22.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path24.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -28010,7 +28336,7 @@ async function killStaleFrpc(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs20.default.unlinkSync(pidFile);
+      import_node_fs22.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -28021,7 +28347,7 @@ async function killStaleFrpc(deps) {
   }
   await sleep(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs20.default.unlinkSync(pidFile);
+    import_node_fs22.default.unlinkSync(pidFile);
   } catch {
   }
 }
@@ -28058,7 +28384,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path23.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path25.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -28185,8 +28511,8 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path23.default.join(this.deps.dataDir, "frpc.toml");
-      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto7.default.randomBytes(3).toString("hex")}`;
+      const tomlPath = import_node_path25.default.join(this.deps.dataDir, "frpc.toml");
+      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto8.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
         serverPort: t.frpsPort,
@@ -28196,12 +28522,12 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs21.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      await import_node_fs23.default.promises.writeFile(tomlPath, toml, { mode: 384 });
       const proc = (this.deps.spawnImpl ?? import_node_child_process5.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logFilePath = import_node_path23.default.join(this.deps.dataDir, "frpc.log");
-      const logStream = import_node_fs21.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logFilePath = import_node_path25.default.join(this.deps.dataDir, "frpc.log");
+      const logStream = import_node_fs23.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -28284,22 +28610,22 @@ async function waitForFrpcReady(proc, timeoutMs) {
 
 // src/tunnel/device-key.ts
 var import_node_os11 = __toESM(require("os"), 1);
-var import_node_crypto8 = __toESM(require("crypto"), 1);
+var import_node_crypto9 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os11.default.hostname();
   const uid = opts.uid ?? (typeof import_node_os11.default.userInfo === "function" ? import_node_os11.default.userInfo().uid : 0);
   const input = `${hostname}::${uid}`;
-  return import_node_crypto8.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
+  return import_node_crypto9.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
-var import_node_fs22 = __toESM(require("fs"), 1);
-var import_node_path24 = __toESM(require("path"), 1);
-var import_node_crypto9 = __toESM(require("crypto"), 1);
+var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_path26 = __toESM(require("path"), 1);
+var import_node_crypto10 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path24.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path26.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -28324,14 +28650,14 @@ function loadOrCreateAuthFile(opts) {
   return next;
 }
 function defaultGenerateToken2() {
-  return import_node_crypto9.default.randomBytes(32).toString("base64url");
+  return import_node_crypto10.default.randomBytes(32).toString("base64url");
 }
 function defaultGenerateOwnerPrincipalId() {
-  return `owner-${import_node_crypto9.default.randomUUID()}`;
+  return `owner-${import_node_crypto10.default.randomUUID()}`;
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs22.default.readFileSync(file, "utf8");
+    const raw = import_node_fs24.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -28349,25 +28675,25 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs22.default.mkdirSync(import_node_path24.default.dirname(file), { recursive: true });
-  import_node_fs22.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs24.default.mkdirSync(import_node_path26.default.dirname(file), { recursive: true });
+  import_node_fs24.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs22.default.chmodSync(file, 384);
+    import_node_fs24.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs23 = __toESM(require("fs"), 1);
+var import_node_fs25 = __toESM(require("fs"), 1);
 var import_node_os12 = __toESM(require("os"), 1);
-var import_node_path25 = __toESM(require("path"), 1);
+var import_node_path27 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function loadOwnerDisplayName(dataDir) {
   const fallback = import_node_os12.default.userInfo().username;
-  const profilePath = import_node_path25.default.join(dataDir, PROFILE_FILENAME);
+  const profilePath = import_node_path27.default.join(dataDir, PROFILE_FILENAME);
   let raw;
   try {
-    raw = import_node_fs23.default.readFileSync(profilePath, "utf8");
+    raw = import_node_fs25.default.readFileSync(profilePath, "utf8");
   } catch {
     return fallback;
   }
@@ -28396,12 +28722,12 @@ init_protocol();
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_fs26 = __toESM(require("fs"), 1);
 var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path26 = __toESM(require("path"), 1);
+var import_node_path28 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs24.default.readFileSync(file, "utf8");
+  const raw = import_node_fs26.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -28414,10 +28740,10 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path26.default.join(import_node_os13.default.homedir(), ".claude");
-  const projectDir = import_node_path26.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  const sourceFile = import_node_path26.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs24.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path28.default.join(import_node_os13.default.homedir(), ".claude");
+  const projectDir = import_node_path28.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  const sourceFile = import_node_path28.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs26.default.existsSync(sourceFile)) {
     throw new Error(`fork: source transcript not found: ${sourceFile}`);
   }
   const entries = readJsonlEntries(sourceFile);
@@ -28447,9 +28773,9 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const forkedFilePath = import_node_path26.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs24.default.mkdirSync(projectDir, { recursive: true });
-  import_node_fs24.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const forkedFilePath = import_node_path28.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs26.default.mkdirSync(projectDir, { recursive: true });
+  import_node_fs26.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
@@ -28805,7 +29131,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path36 = __toESM(require("path"), 1);
+var path38 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -28823,7 +29149,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path35 = __toESM(require("path"), 1);
+var path37 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -28836,26 +29162,26 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read") {
-  const root = path35.resolve(personaRoot);
-  const target = path35.resolve(absPath);
-  const sep3 = root.endsWith(path35.sep) ? "" : path35.sep;
+  const root = path37.resolve(personaRoot);
+  const target = path37.resolve(absPath);
+  const sep3 = root.endsWith(path37.sep) ? "" : path37.sep;
   if (!target.startsWith(root + sep3)) return false;
-  const rel = path35.relative(root, target);
+  const rel = path37.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId = rel.split(path35.sep)[0];
+  const personaId = rel.split(path37.sep)[0];
   if (!personaId) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path35.resolve(personaRoot);
-  const target = path35.resolve(absPath);
-  const sep3 = root.endsWith(path35.sep) ? "" : path35.sep;
+  const root = path37.resolve(personaRoot);
+  const target = path37.resolve(absPath);
+  const sep3 = root.endsWith(path37.sep) ? "" : path37.sep;
   if (!target.startsWith(root + sep3)) return null;
-  const rel = path35.relative(root, target);
+  const rel = path37.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path35.sep)[0];
+  const id = rel.split(path37.sep)[0];
   return id || null;
 }
 
@@ -28880,7 +29206,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path36.join(personaRoot, pid),
+          path38.join(personaRoot, pid),
           personaRoot,
           "read"
         );
@@ -28891,7 +29217,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path36.resolve(args.projectPath), personaRoot, "history:list");
+    assertGuestPath(ctx, path38.resolve(args.projectPath), personaRoot, "history:list");
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -28923,13 +29249,13 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path36.resolve(args.cwd), personaRoot, "history:subagents");
+    assertGuestPath(ctx, path38.resolve(args.cwd), personaRoot, "history:subagents");
     const subs = await history.listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path36.resolve(args.cwd), personaRoot, "history:subagent-read");
+    assertGuestPath(ctx, path38.resolve(args.cwd), personaRoot, "history:subagent-read");
     const res = await history.readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
   };
@@ -28937,7 +29263,7 @@ function buildHistoryHandlers(deps) {
     const dirs = listRecentDirs(store);
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path36.resolve(d.cwd), personaRoot, "read")
+        (d) => isGuestPathAllowed(ctx.grants, path38.resolve(d.cwd), personaRoot, "read")
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -28954,7 +29280,7 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path37 = __toESM(require("path"), 1);
+var path39 = __toESM(require("path"), 1);
 var os14 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
@@ -28995,22 +29321,22 @@ function buildWorkspaceHandlers(deps) {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
     const fallbackCwd = isGuest && personaRoot ? personaRoot : os14.homedir();
-    const resolvedCwd = path37.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path37.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const resolvedCwd = path39.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path39.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list");
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path37.isAbsolute(args.path) ? path37.resolve(args.path) : path37.resolve(args.cwd, args.path);
+    const target = path39.isAbsolute(args.path) ? path39.resolve(args.path) : path39.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read");
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path37.resolve(args.cwd);
+    const cwdAbs = path39.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list");
     const list2 = skills.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -29022,7 +29348,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path37.resolve(args.cwd);
+    const cwdAbs = path39.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list");
     const list2 = agents.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -29041,20 +29367,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path39 = __toESM(require("path"), 1);
+var path41 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process6 = require("child_process");
-var import_node_fs25 = __toESM(require("fs"), 1);
-var import_node_path27 = __toESM(require("path"), 1);
+var import_node_fs27 = __toESM(require("fs"), 1);
+var import_node_path29 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process6.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path27.default.resolve(p2);
+  const resolved = import_node_path29.default.resolve(p2);
   try {
-    return import_node_fs25.default.realpathSync(resolved);
+    return import_node_fs27.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -29127,7 +29453,7 @@ async function listGitBranches(cwd) {
 // src/handlers/git.ts
 function assertGuestCwd(ctx, cwd, personaRoot, method) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
-  if (!isGuestPathAllowed(ctx.grants, path39.resolve(cwd), personaRoot, "read")) {
+  if (!isGuestPathAllowed(ctx.grants, path41.resolve(cwd), personaRoot, "read")) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -29614,7 +29940,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path28 = __toESM(require("path"), 1);
+var import_node_path30 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -29668,12 +29994,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path28.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path28.default.isAbsolute(args.relPath) ? import_node_path28.default.resolve(args.relPath) : import_node_path28.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path30.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path30.default.isAbsolute(args.relPath) ? import_node_path30.default.resolve(args.relPath) : import_node_path30.default.resolve(cwdAbs, args.relPath);
     assertGuestAttachmentPath(ctx, candidateAbs, deps.personaRoot, "attachment.signUrl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path28.default.isAbsolute(e.relPath) ? import_node_path28.default.resolve(e.relPath) : import_node_path28.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path30.default.isAbsolute(e.relPath) ? import_node_path30.default.resolve(e.relPath) : import_node_path30.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -29697,7 +30023,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path28.default.resolve(f.cwd), deps.personaRoot, method);
+    assertGuestAttachmentPath(ctx, import_node_path30.default.resolve(f.cwd), deps.personaRoot, method);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -29738,7 +30064,7 @@ function buildAttachmentHandlers(deps) {
     }
     const entries = deps.groupFileStore.list(scope, parsed.data.sessionId);
     const target = entries.find((e) => e.relPath === parsed.data.relPath);
-    if (target?.from === "owner") {
+    if (target?.from === "owner" || target?.from === "user-upload") {
       deps.groupFileStore.remove(scope, parsed.data.sessionId, parsed.data.relPath);
     } else {
       deps.groupFileStore.markStale(scope, parsed.data.sessionId, parsed.data.relPath);
@@ -29939,7 +30265,7 @@ function computeGrantForFrame(method, frame) {
 async function startDaemon(config) {
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path29.default.join(config.dataDir, "clawd.log")
+    file: import_node_path31.default.join(config.dataDir, "clawd.log")
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const stateMgr = new StateFileManager({ dataDir: config.dataDir });
@@ -30026,7 +30352,7 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path29.default.join(config.dataDir, "personas"));
+  const personaStore = new PersonaStore(import_node_path31.default.join(config.dataDir, "personas"));
   const defaultsRoot = findDefaultsRoot();
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -30043,7 +30369,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path29.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path31.default.join(config.dataDir, "personas"),
     personaStore,
     ownerDisplayName,
     ownerPrincipalId,
@@ -30067,10 +30393,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path29.default.isAbsolute(input.relPath) ? input.relPath : import_node_path29.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path31.default.isAbsolute(input.relPath) ? input.relPath : import_node_path31.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs26.default.statSync(absPath).size;
+          size = import_node_fs28.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -30188,10 +30514,10 @@ async function startDaemon(config) {
       // 'persona/<pid>/owner'，default 走 'default'。
       getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
       // guest path guard：candidate 必须在 personaRoot 子树下
-      personaRoot: import_node_path29.default.join(config.dataDir, "personas")
+      personaRoot: import_node_path31.default.join(config.dataDir, "personas")
     },
     // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-    personaRoot: import_node_path29.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path31.default.join(config.dataDir, "personas"),
     // capability:list / delete handler 依赖
     capabilityManager,
     // personal-cap:get 返回的 shareBaseUrl 用此 base URL：
@@ -30227,7 +30553,19 @@ async function startDaemon(config) {
     sessionStore: store,
     // /files HMAC verify 用 auth.json 的 signSecret 字段（与 attachment.signUrl 同源）。
     // --auth-token CLI 模式没 signSecret → 路由返 501，sign URL 功能整体禁用。
-    getSignSecret: () => authFile?.signSecret ?? null
+    getSignSecret: () => authFile?.signSecret ?? null,
+    // chatinput 附件上传（POST /attachments/upload，spec §6.1）。upload pipeline
+    // 在 session.cwd 下的 .attachments/ 落盘；signSecret 与 /files HMAC 同源；
+    // tunnel 未启时返 503 TUNNEL_NOT_READY 让前端显式提示。
+    attachmentUpload: {
+      groupFileStore,
+      getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
+      getSessionDir: (sid) => {
+        const f = manager.findOwnedSession(sid);
+        return f ? f.cwd : null;
+      },
+      getHttpBaseUrl: () => currentTunnelUrl ? getHttpBaseUrl() : null
+    }
   });
   wsServer = new LocalWsServer({
     host: config.host,
@@ -30392,8 +30730,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path29.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path29.default.join(config.dataDir, "frpc.log")}`
+        `Frpc config: ${import_node_path31.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path31.default.join(config.dataDir, "frpc.log")}`
       ];
       const width = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width + 4);
@@ -30406,8 +30744,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path29.default.join(config.dataDir, "connect.txt");
-        import_node_fs26.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path31.default.join(config.dataDir, "connect.txt");
+        import_node_fs28.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -30432,8 +30770,29 @@ ${bar}
       logger.warn("tunnel unavailable, degraded to local mode", { reason: tunnelError });
     }
   }
+  const tickAttachmentGc = () => {
+    try {
+      runAttachmentGc({
+        dataDir: config.dataDir,
+        groupFileStore,
+        sessionScopes: manager.listOwnedSessionScopes().map(({ scope, sessionId }) => ({
+          scope,
+          sessionId
+        })),
+        // 注入 cwd 让 GC 直接定位 .attachments 目录（与 upload 落盘点一致）
+        getSessionCwd: (sid) => manager.findOwnedSession(sid)?.cwd ?? null,
+        logger
+      });
+    } catch (err) {
+      logger.warn("attachment gc tick failed", { err: err.message });
+    }
+  };
+  setImmediate(tickAttachmentGc);
+  const attachmentGcInterval = setInterval(tickAttachmentGc, 24 * 3600 * 1e3);
+  attachmentGcInterval.unref();
   const shutdown = async () => {
     logger.info("stopping clawd");
+    clearInterval(attachmentGcInterval);
     observer.stopAll();
     manager.stopAll();
     if (tunnelMgr) {
@@ -30451,9 +30810,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path29.default.join(dataDir, "persons");
+  const dir = import_node_path31.default.join(dataDir, "persons");
   try {
-    import_node_fs26.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs28.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }