@clawos-dev/clawd 0.2.89 → 0.2.90-beta.169.a6af395

package/dist/cli.cjs

@@ -65,14 +65,6 @@ var init_methods = __esm({
       "session:unsubscribe",
       "session:pin",
       "session:reorderPins",
-      // mirror peer sessions (2026-05-26): owner-only RPC，写/删本机 mirror SessionFile —
-      // mirror 是「**我**在朋友 daemon 上自己创建的 session」的本机持久化副本（不是朋友的会话），
-      // 方便 sidebar 跨设备聚合。daemon dumb 写删，**不广播任何 push 帧** (不发 session:info /
-      // session:deleted)；UI 是写入唯一源，双写完成后通过 cache.setData('sessions', ...) 同步
-      // 本地 sidebar state。native session:* handler 完全不感知 mirror (UI 操作 mirror 不复用
-      // native 路径)。
-      "peerSession:upsert",
-      "peerSession:remove",
       "permission:respond",
       // AskUserQuestion 表单回写：UI 答完所有 question 后调用，daemon 把答案合并进 updated_input
       // 写一条 control_response 到 CC stdin（详见 events.ts session:question JSDoc）
@@ -651,8 +643,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path46, errorMaps, issueData } = params;
-      const fullPath = [...path46, ...issueData.path || []];
+      const { data, path: path47, errorMaps, issueData } = params;
+      const fullPath = [...path47, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -963,11 +955,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path46, key) {
+      constructor(parent, value, path47, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path46;
+        this._path = path47;
         this._key = key;
       }
       get path() {
@@ -4501,7 +4493,7 @@ var init_persona_schemas = __esm({
 });
 
 // ../protocol/src/schemas.ts
-var SessionStatusSchema, UsageSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, ParsedEventSchema, SessionCreateArgs, SessionIdArgs, SessionUpdateArgs, SessionSendArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsArgs, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionSubscribeArgs, SessionPinArgs, PeerSessionUpsertArgs, PeerSessionUpsertResponseSchema, PeerSessionRemoveArgs, PeerSessionRemoveResponseSchema, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, HistoryRecentDirsArgs, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, AuthRequestFrameSchema, AuthOkFrameSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema;
+var SessionStatusSchema, UsageSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, ParsedEventSchema, SessionCreateArgs, SessionIdArgs, SessionUpdateArgs, SessionSendArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsArgs, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionSubscribeArgs, SessionPinArgs, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, HistoryRecentDirsArgs, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, AuthRequestFrameSchema, AuthOkFrameSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema;
 var init_schemas = __esm({
   "../protocol/src/schemas.ts"() {
     "use strict";
@@ -4629,35 +4621,6 @@ var init_schemas = __esm({
        * 当前为 caller 自报，daemon 不密码学验证真伪；强身份验签是独立工作（B 方案）。
        */
       creatorOwnerPrincipalId: external_exports.string().min(1).optional(),
-      /**
-       * Mirror peer sessions (2026-05-26): mirror 标识。**我在朋友 daemon 上以 guest ctx
-       * 创建的 session**，远端是 source of truth，本机是该 session 的持久化副本，方便
-       * sidebar 跨设备聚合。字段值是远端 daemon 的 ownerPrincipalId（即我接入的那位朋友）。
-       *
-       * 语义关键澄清：mirror **不是朋友创建给我的会话**——它是我自己的会话，只是在朋友
-       * 的机器上跑。sidebar chip 显示 `@<朋友>` 暗示「位置」，不是「来源」。
-       *
-       *   - undefined / 缺省 → 本机 native session（在我自己机器上跑）
-       *   - 非空 → 我的会话在该 ownerPrincipalId 朋友的 daemon 上跑，本机为持久化副本
-       *
-       * 与 `creatorPrincipalId` / `creatorOwnerPrincipalId` 在四类 session 下取值矩阵：
-       *   | 形态                                | creatorPrincipalId       | creatorOwnerPrincipalId | originOwnerPrincipalId |
-       *   |-------------------------------------|--------------------------|-------------------------|------------------------|
-       *   | 本机 owner 自创                      | 本机 ownerPrincipalId    | 本机 ownerPrincipalId   | undefined              |
-       *   | 本机被别人通过 personal token 接入创建 | 远端接入者 cap.id        | 远端接入者 ownerPrincipalId | undefined          |
-       *   | 我在朋友 daemon 上以 guest ctx 创建（mirror 回本机） | 朋友 daemon personal cap.id | 我自己 ownerPrincipalId | 朋友 ownerPrincipalId |
-       *
-       * UI 用法：
-       *   - sidebar Active/Pinned/Recents 过滤：`origin 非空 → 一律视作 self`（绕过 #739 隔离）
-       *   - 行内显示 `@<朋友>` chip 暗示位置
-       *   - 进 ChatPanel 时按 origin 路由到 `pool.ensureRemoteForOwner(origin)` 走远端
-       *
-       * daemon 用法：
-       *   - `peerSession:upsert` / `peerSession:remove` 一族 RPC 专管 mirror 写删；
-       *     daemon dumb write/delete，**不广播任何 push 帧**，UI 是写入唯一源
-       *   - native `session:*` handler 完全不感知 mirror（UI 操作 mirror 不走 native 路径）
-       */
-      originOwnerPrincipalId: external_exports.string().min(1).optional(),
       createdAt: external_exports.string().min(1),
       updatedAt: external_exports.string().min(1)
     });
@@ -5013,14 +4976,6 @@ var init_schemas = __esm({
       sessionId: external_exports.string().min(1),
       pinned: external_exports.boolean()
     });
-    PeerSessionUpsertArgs = SessionFileSchema;
-    PeerSessionUpsertResponseSchema = external_exports.object({
-      type: external_exports.literal("peerSession:upsert:ok")
-    });
-    PeerSessionRemoveArgs = external_exports.object({ sessionId: external_exports.string().min(1) });
-    PeerSessionRemoveResponseSchema = external_exports.object({
-      type: external_exports.literal("peerSession:remove:ok")
-    });
     SessionReorderPinsArgs = external_exports.object({
       orderedIds: external_exports.array(external_exports.string().min(1)).min(1)
     });
@@ -5635,8 +5590,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path46 = req.path;
-        _req.url = typeof path46 === "string" ? path46 : req.url ? req.url.path || req.url : void 0;
+        const path47 = req.path;
+        _req.url = typeof path47 === "string" ? path47 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -5801,14 +5756,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path46) {
+    function parsePath(path47) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path46.length; i++) {
-        const char = path46[i];
+      for (let i = 0; i < path47.length; i++) {
+        const char = path47[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -5939,10 +5894,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path46 of paths) {
-        const parts = parsePath(path46);
+      for (const path47 of paths) {
+        const parts = parsePath(path47);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path46, remove);
+          redactWildcardPath(obj, parts, censor, path47, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -6027,8 +5982,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path46) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path46];
+            const wrappedCensor = typeof censor === "function" ? (value, path47) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path47];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -6063,8 +6018,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path46 of pathsToClone) {
-        const parts = parsePath(path46);
+      for (const path47 of pathsToClone) {
+        const parts = parsePath(path47);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -6116,24 +6071,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path46) {
-      if (typeof path46 !== "string") {
+    function validatePath(path47) {
+      if (typeof path47 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path46 === "") {
+      if (path47 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path46.includes("..")) {
-        throw new Error(`Invalid redaction path (${path46})`);
+      if (path47.includes("..")) {
+        throw new Error(`Invalid redaction path (${path47})`);
       }
-      if (path46.includes(",")) {
-        throw new Error(`Invalid redaction path (${path46})`);
+      if (path47.includes(",")) {
+        throw new Error(`Invalid redaction path (${path47})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path46.length; i++) {
-        const char = path46[i];
+      for (let i = 0; i < path47.length; i++) {
+        const char = path47[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -6147,20 +6102,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path46})`);
+            throw new Error(`Invalid redaction path (${path47})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path46})`);
+        throw new Error(`Invalid redaction path (${path47})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path46 of paths) {
-        validatePath(path46);
+      for (const path47 of paths) {
+        validatePath(path47);
       }
     }
     function slowRedact(options = {}) {
@@ -6328,8 +6283,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path46) => {
-            return censor(value, [k2, ...path46]);
+          const wrappedCensor = typeof censor === "function" ? (value, path47) => {
+            return censor(value, [k2, ...path47]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -6547,10 +6502,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs37 = require("fs");
+    var fs38 = require("fs");
     var EventEmitter2 = require("events");
     var inherits = require("util").inherits;
-    var path46 = require("path");
+    var path47 = require("path");
     var sleep = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -6604,20 +6559,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs37.mkdirSync(path46.dirname(file), { recursive: true });
-          const fd = fs37.openSync(file, flags, mode);
+          if (sonic.mkdir) fs38.mkdirSync(path47.dirname(file), { recursive: true });
+          const fd = fs38.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs37.mkdir(path46.dirname(file), { recursive: true }, (err) => {
+        fs38.mkdir(path47.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs37.open(file, flags, mode, fileOpened);
+          fs38.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs37.open(file, flags, mode, fileOpened);
+        fs38.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -6658,8 +6613,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs37.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs37.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs38.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs38.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -6668,15 +6623,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs37.writeSync(this.fd, this._writingBuf);
+            return fs38.writeSync(this.fd, this._writingBuf);
           }
-          return fs37.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs38.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs37.write(this.fd, this._writingBuf, this.release);
+            return fs38.write(this.fd, this._writingBuf, this.release);
           }
-          return fs37.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs38.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -6733,7 +6688,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs37.fsyncSync(this.fd);
+          fs38.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -6847,7 +6802,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs37.fsync(this.fd, (err) => {
+            fs38.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -6949,7 +6904,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs37.close(fd, (err) => {
+          fs38.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -6998,7 +6953,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs37.writeSync(this.fd, buf) : fs37.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs38.writeSync(this.fd, buf) : fs38.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -7014,7 +6969,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs37.fsyncSync(this.fd);
+        fs38.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -7035,7 +6990,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs37.writeSync(this.fd, buf);
+          const n = fs38.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -7063,13 +7018,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs37.writeSync(this.fd, this._writingBuf) : fs37.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs38.writeSync(this.fd, this._writingBuf) : fs38.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs37.write(this.fd, this._writingBuf, release);
+        fs38.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -7078,7 +7033,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs37.writeSync(this.fd, this._writingBuf);
+          const written = fs38.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -7087,7 +7042,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs37.write(this.fd, this._writingBuf, release);
+        fs38.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -7103,12 +7058,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs37.fsync(sonic.fd, closeWrapped);
+        fs38.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs37.close(sonic.fd, done);
+          fs38.close(sonic.fd, done);
         } else {
           done();
         }
@@ -10243,11 +10198,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path46, added, removed, oldPosInc, options) {
-        var last = path46.lastComponent;
+      addToPath: function addToPath(path47, added, removed, oldPosInc, options) {
+        var last = path47.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path46.oldPos + oldPosInc,
+            oldPos: path47.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -10257,7 +10212,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path46.oldPos + oldPosInc,
+            oldPos: path47.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -10503,7 +10458,7 @@ function hashDirToCwd(hash) {
 }
 function safeStatMtime(p2) {
   try {
-    return import_node_fs7.default.statSync(p2).mtimeMs;
+    return import_node_fs8.default.statSync(p2).mtimeMs;
   } catch {
     return 0;
   }
@@ -10511,7 +10466,7 @@ function safeStatMtime(p2) {
 function readJsonlLines(file) {
   let raw;
   try {
-    raw = import_node_fs7.default.readFileSync(file, "utf8");
+    raw = import_node_fs8.default.readFileSync(file, "utf8");
   } catch (err) {
     if (err.code === "ENOENT") return [];
     throw err;
@@ -10688,10 +10643,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path46 = typeof rec.path === "string" ? rec.path : null;
+      const path47 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path46 || content == null) return null;
-      const entry = { path: path46, content };
+      if (!path47 || content == null) return null;
+      const entry = { path: path47, content };
       if (typeof rec.mtimeMs === "number") entry.mtimeMs = rec.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -10727,8 +10682,8 @@ function attachmentDeferredToolsText(a) {
 function readBackupContent(fileHistoryRoot, toolSessionId, backupFileName) {
   if (backupFileName === null) return null;
   try {
-    return import_node_fs7.default.readFileSync(
-      import_node_path8.default.join(fileHistoryRoot, toolSessionId, backupFileName),
+    return import_node_fs8.default.readFileSync(
+      import_node_path9.default.join(fileHistoryRoot, toolSessionId, backupFileName),
       "utf8"
     );
   } catch {
@@ -10737,19 +10692,19 @@ function readBackupContent(fileHistoryRoot, toolSessionId, backupFileName) {
 }
 function readCurrentContent(filePath) {
   try {
-    return import_node_fs7.default.readFileSync(filePath, "utf8");
+    return import_node_fs8.default.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code === "ENOENT") return null;
     return null;
   }
 }
-var import_node_fs7, import_node_os3, import_node_path8, TASK_NOTIFICATION_RE, TASK_ID_RE, TOOL_USE_ID_RE, SLASH_COMMAND_RE, LOCAL_COMMAND_RE, SYSTEM_REMINDER_RE, OPENSPEC_BLOCK_RE, SKILL_HINT_RE, ATTACHMENT_SILENT_SUBTYPES, ClaudeHistoryReader;
+var import_node_fs8, import_node_os3, import_node_path9, TASK_NOTIFICATION_RE, TASK_ID_RE, TOOL_USE_ID_RE, SLASH_COMMAND_RE, LOCAL_COMMAND_RE, SYSTEM_REMINDER_RE, OPENSPEC_BLOCK_RE, SKILL_HINT_RE, ATTACHMENT_SILENT_SUBTYPES, ClaudeHistoryReader;
 var init_claude_history = __esm({
   "src/tools/claude-history.ts"() {
     "use strict";
-    import_node_fs7 = __toESM(require("fs"), 1);
+    import_node_fs8 = __toESM(require("fs"), 1);
     import_node_os3 = __toESM(require("os"), 1);
-    import_node_path8 = __toESM(require("path"), 1);
+    import_node_path9 = __toESM(require("path"), 1);
     init_lib();
     init_tool_result_extra();
     TASK_NOTIFICATION_RE = /<task-notification\b[\s\S]*?<\/task-notification>/i;
@@ -10773,14 +10728,14 @@ var init_claude_history = __esm({
       // 每次 user 提交前 trackEdit 拷一份，作为 rewind 回退目标
       fileHistoryRoot;
       constructor(opts = {}) {
-        const base = opts.baseDir ?? import_node_path8.default.join(import_node_os3.default.homedir(), ".claude");
-        this.projectsRoot = import_node_path8.default.join(base, "projects");
-        this.fileHistoryRoot = import_node_path8.default.join(base, "file-history");
+        const base = opts.baseDir ?? import_node_path9.default.join(import_node_os3.default.homedir(), ".claude");
+        this.projectsRoot = import_node_path9.default.join(base, "projects");
+        this.fileHistoryRoot = import_node_path9.default.join(base, "file-history");
       }
       async listProjects() {
         let entries;
         try {
-          entries = import_node_fs7.default.readdirSync(this.projectsRoot, { withFileTypes: true });
+          entries = import_node_fs8.default.readdirSync(this.projectsRoot, { withFileTypes: true });
         } catch (err) {
           if (err.code === "ENOENT") return [];
           throw err;
@@ -10788,9 +10743,9 @@ var init_claude_history = __esm({
         const out = [];
         for (const ent of entries) {
           if (!ent.isDirectory()) continue;
-          const dir = import_node_path8.default.join(this.projectsRoot, ent.name);
-          const files = import_node_fs7.default.readdirSync(dir).filter((f) => f.endsWith(".jsonl"));
-          const updatedAtMs = files.reduce((m2, f) => Math.max(m2, safeStatMtime(import_node_path8.default.join(dir, f))), 0);
+          const dir = import_node_path9.default.join(this.projectsRoot, ent.name);
+          const files = import_node_fs8.default.readdirSync(dir).filter((f) => f.endsWith(".jsonl"));
+          const updatedAtMs = files.reduce((m2, f) => Math.max(m2, safeStatMtime(import_node_path9.default.join(dir, f))), 0);
           out.push({
             projectPath: hashDirToCwd(ent.name),
             hashDir: ent.name,
@@ -10802,17 +10757,17 @@ var init_claude_history = __esm({
         return out;
       }
       async listSessions(args) {
-        const dir = import_node_path8.default.join(this.projectsRoot, cwdToHashDir(args.projectPath));
+        const dir = import_node_path9.default.join(this.projectsRoot, cwdToHashDir(args.projectPath));
         let files;
         try {
-          files = import_node_fs7.default.readdirSync(dir).filter((f) => f.endsWith(".jsonl"));
+          files = import_node_fs8.default.readdirSync(dir).filter((f) => f.endsWith(".jsonl"));
         } catch (err) {
           if (err.code === "ENOENT") return [];
           throw err;
         }
         const out = [];
         for (const f of files) {
-          const full = import_node_path8.default.join(dir, f);
+          const full = import_node_path9.default.join(dir, f);
           const toolSessionId = f.slice(0, -".jsonl".length);
           const lines = readJsonlLines(full);
           let summary = "";
@@ -10867,7 +10822,7 @@ var init_claude_history = __esm({
         return out;
       }
       async read(args) {
-        const file = import_node_path8.default.join(
+        const file = import_node_path9.default.join(
           this.projectsRoot,
           cwdToHashDir(args.cwd),
           `${args.toolSessionId}.jsonl`
@@ -10900,7 +10855,7 @@ var init_claude_history = __esm({
       // 独立目录路径：<projectsRoot>/<cwdHash>/<toolSessionId>/subagents/*.jsonl
       // 返回 null 表示目录不存在（调用方回退旧实现）；返回空数组表示目录存在但无 jsonl
       listSubagentsFromDirectory(cwd, toolSessionId) {
-        const dir = import_node_path8.default.join(
+        const dir = import_node_path9.default.join(
           this.projectsRoot,
           cwdToHashDir(cwd),
           toolSessionId,
@@ -10908,7 +10863,7 @@ var init_claude_history = __esm({
         );
         let entries;
         try {
-          entries = import_node_fs7.default.readdirSync(dir, { withFileTypes: true });
+          entries = import_node_fs8.default.readdirSync(dir, { withFileTypes: true });
         } catch (err) {
           if (err.code === "ENOENT") return null;
           return null;
@@ -10918,7 +10873,7 @@ var init_claude_history = __esm({
           if (!e.isFile()) continue;
           if (!e.name.startsWith("agent-") || !e.name.endsWith(".jsonl")) continue;
           const subagentId = e.name.slice("agent-".length, -".jsonl".length);
-          const filePath = import_node_path8.default.join(dir, e.name);
+          const filePath = import_node_path9.default.join(dir, e.name);
           const lines = readJsonlLines(filePath);
           let firstText = "";
           let messageCount = 0;
@@ -10935,7 +10890,7 @@ var init_claude_history = __esm({
         return out;
       }
       listSubagentsFromMainJsonl(cwd, toolSessionId) {
-        const file = import_node_path8.default.join(
+        const file = import_node_path9.default.join(
           this.projectsRoot,
           cwdToHashDir(cwd),
           `${toolSessionId}.jsonl`
@@ -10970,7 +10925,7 @@ var init_claude_history = __esm({
       }
       // 独立文件路径：agent-<subagentId>.jsonl；文件不存在返回 null 让调用方回退旧实现
       readSubagentFromFile(cwd, toolSessionId, subagentId) {
-        const file = import_node_path8.default.join(
+        const file = import_node_path9.default.join(
           this.projectsRoot,
           cwdToHashDir(cwd),
           toolSessionId,
@@ -10979,7 +10934,7 @@ var init_claude_history = __esm({
         );
         let exists = false;
         try {
-          exists = import_node_fs7.default.statSync(file).isFile();
+          exists = import_node_fs8.default.statSync(file).isFile();
         } catch {
           return null;
         }
@@ -10998,7 +10953,7 @@ var init_claude_history = __esm({
        * "那一刻每个 tracked 文件对应的 backup 文件名"
        */
       readFileHistorySnapshots(args) {
-        const file = import_node_path8.default.join(
+        const file = import_node_path9.default.join(
           this.projectsRoot,
           cwdToHashDir(args.cwd),
           `${args.toolSessionId}.jsonl`
@@ -11043,7 +10998,7 @@ var init_claude_history = __esm({
         for (const [anchorId, target] of snapshots) {
           let hasAny = false;
           for (const [rawPath, backup] of Object.entries(target)) {
-            const absPath = import_node_path8.default.isAbsolute(rawPath) ? rawPath : import_node_path8.default.join(args.cwd, rawPath);
+            const absPath = import_node_path9.default.isAbsolute(rawPath) ? rawPath : import_node_path9.default.join(args.cwd, rawPath);
             const backupContent = readBackupContent(
               this.fileHistoryRoot,
               args.toolSessionId,
@@ -11083,7 +11038,7 @@ var init_claude_history = __esm({
         let totalInsertions = 0;
         let totalDeletions = 0;
         for (const [rawPath, backup] of Object.entries(target)) {
-          const absPath = import_node_path8.default.isAbsolute(rawPath) ? rawPath : import_node_path8.default.join(args.cwd, rawPath);
+          const absPath = import_node_path9.default.isAbsolute(rawPath) ? rawPath : import_node_path9.default.join(args.cwd, rawPath);
           const backupContent = readBackupContent(
             this.fileHistoryRoot,
             args.toolSessionId,
@@ -11130,7 +11085,7 @@ var init_claude_history = __esm({
         };
       }
       readSubagentFromMainJsonl(cwd, toolSessionId, subagentId) {
-        const file = import_node_path8.default.join(
+        const file = import_node_path9.default.join(
           this.projectsRoot,
           cwdToHashDir(cwd),
           `${toolSessionId}.jsonl`
@@ -11154,48 +11109,48 @@ var init_claude_history = __esm({
 // src/tools/sandbox.ts
 function shouldSandbox(cwd, personaRoot) {
   if (!personaRoot) return false;
-  const sep3 = personaRoot.endsWith(path12.sep) ? "" : path12.sep;
+  const sep3 = personaRoot.endsWith(path13.sep) ? "" : path13.sep;
   return cwd.startsWith(personaRoot + sep3) && cwd !== personaRoot;
 }
 function inferSandboxSettingsPath(cwd, personaRoot) {
   if (!shouldSandbox(cwd, personaRoot)) return null;
-  const rel = path12.relative(personaRoot, cwd);
-  const personaId = rel.split(path12.sep)[0];
+  const rel = path13.relative(personaRoot, cwd);
+  const personaId = rel.split(path13.sep)[0];
   if (!personaId) return null;
-  return path12.join(personaRoot, personaId, ".clawd", "sandbox-settings.json");
+  return path13.join(personaRoot, personaId, ".clawd", "sandbox-settings.json");
 }
-var path12;
+var path13;
 var init_sandbox = __esm({
   "src/tools/sandbox.ts"() {
     "use strict";
-    path12 = __toESM(require("path"), 1);
+    path13 = __toESM(require("path"), 1);
   }
 });
 
 // src/tools/claude.ts
 function macOSDesktopCandidates(home) {
   return [
-    import_node_path9.default.join(home, "Applications", "Claude.app", "Contents", "Resources", "app.asar.unpacked", "node_modules", "@anthropic-ai", "claude-code", "cli.js"),
+    import_node_path10.default.join(home, "Applications", "Claude.app", "Contents", "Resources", "app.asar.unpacked", "node_modules", "@anthropic-ai", "claude-code", "cli.js"),
     "/Applications/Claude.app/Contents/Resources/app.asar.unpacked/node_modules/@anthropic-ai/claude-code/cli.js"
   ];
 }
 function probeViaWhich() {
   try {
     const out = (0, import_node_child_process2.execFileSync)("which", ["claude"], { encoding: "utf8" }).trim();
-    if (out && import_node_fs8.default.existsSync(out)) return out;
+    if (out && import_node_fs9.default.existsSync(out)) return out;
   } catch {
   }
   return null;
 }
 async function probeClaude(env = process.env, home = import_node_os4.default.homedir()) {
-  if (env.CLAUDE_BIN && import_node_fs8.default.existsSync(env.CLAUDE_BIN)) {
+  if (env.CLAUDE_BIN && import_node_fs9.default.existsSync(env.CLAUDE_BIN)) {
     return { available: true, path: env.CLAUDE_BIN };
   }
   const w2 = probeViaWhich();
   if (w2) return { available: true, path: w2 };
   if (process.platform === "darwin") {
     for (const candidate of macOSDesktopCandidates(home)) {
-      if (import_node_fs8.default.existsSync(candidate)) {
+      if (import_node_fs9.default.existsSync(candidate)) {
         return { available: true, path: candidate };
       }
     }
@@ -11517,10 +11472,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path46 = typeof rec.path === "string" ? rec.path : null;
+      const path47 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path46 || content == null) return null;
-      const out = { path: path46, content };
+      if (!path47 || content == null) return null;
+      const out = { path: path47, content };
       if (typeof rec.mtimeMs === "number") out.mtimeMs = rec.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -11624,15 +11579,15 @@ function encodeClaudeStdin(text) {
   };
   return JSON.stringify(frame) + "\n";
 }
-var import_node_child_process, import_node_child_process2, import_node_fs8, import_node_os4, import_node_path9, ATTACHMENT_SILENT_SUBTYPES2, unknownTypeHandler, ATTACHMENT_RE, IMAGE_EXT_MIME, CLAUDE_MODELS, CLAUDE_PERMISSION_MODES, CLAUDE_CAPABILITIES, ClaudeAdapter;
+var import_node_child_process, import_node_child_process2, import_node_fs9, import_node_os4, import_node_path10, ATTACHMENT_SILENT_SUBTYPES2, unknownTypeHandler, ATTACHMENT_RE, IMAGE_EXT_MIME, CLAUDE_MODELS, CLAUDE_PERMISSION_MODES, CLAUDE_CAPABILITIES, ClaudeAdapter;
 var init_claude = __esm({
   "src/tools/claude.ts"() {
     "use strict";
     import_node_child_process = require("child_process");
     import_node_child_process2 = require("child_process");
-    import_node_fs8 = __toESM(require("fs"), 1);
+    import_node_fs9 = __toESM(require("fs"), 1);
     import_node_os4 = __toESM(require("os"), 1);
-    import_node_path9 = __toESM(require("path"), 1);
+    import_node_path10 = __toESM(require("path"), 1);
     init_protocol();
     init_claude_history();
     init_tool_result_extra();
@@ -20435,7 +20390,7 @@ var require_websocket_server = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path32.default.dirname(opts.recordPath);
+  const dir = import_node_path33.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -20449,8 +20404,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs29.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs29.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs30.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs30.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -20475,12 +20430,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs29, import_node_path32;
+var import_node_fs30, import_node_path33;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs29 = __toESM(require("fs"), 1);
-    import_node_path32 = __toESM(require("path"), 1);
+    import_node_fs30 = __toESM(require("fs"), 1);
+    import_node_path33 = __toESM(require("path"), 1);
   }
 });
 
@@ -20523,7 +20478,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs30.mkdtempSync)(import_node_path33.default.join(import_node_os15.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs31.mkdtempSync)(import_node_path34.default.join(import_node_os15.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -20684,19 +20639,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs30.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs31.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs30, import_node_os15, import_node_path33;
+var import_node_fs31, import_node_os15, import_node_path34;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs30 = require("fs");
+    import_node_fs31 = require("fs");
     import_node_os15 = __toESM(require("os"), 1);
-    import_node_path33 = __toESM(require("path"), 1);
+    import_node_path34 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -20928,8 +20883,8 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path31 = __toESM(require("path"), 1);
-var import_node_fs28 = __toESM(require("fs"), 1);
+var import_node_path32 = __toESM(require("path"), 1);
+var import_node_fs29 = __toESM(require("fs"), 1);
 
 // src/logger.ts
 var import_node_fs2 = __toESM(require("fs"), 1);
@@ -21153,8 +21108,8 @@ var SessionStoreFactory = class {
 };
 
 // src/session/manager.ts
-var import_node_fs5 = __toESM(require("fs"), 1);
-var import_node_path6 = __toESM(require("path"), 1);
+var import_node_fs6 = __toESM(require("fs"), 1);
+var import_node_path7 = __toESM(require("path"), 1);
 
 // ../node_modules/.pnpm/uuid@10.0.0/node_modules/uuid/dist/esm-node/stringify.js
 var byteToHex = [];
@@ -22398,6 +22353,62 @@ function extractEditPath(input) {
   return candidate || null;
 }
 
+// src/debug/pty-probe.ts
+var import_node_fs5 = __toESM(require("fs"), 1);
+var import_node_path6 = __toESM(require("path"), 1);
+var PROBE_DIR = "/tmp/clawd-probe";
+var EVENTS_FILE = import_node_path6.default.join(PROBE_DIR, "events.jsonl");
+var inited = false;
+function ensureDir() {
+  if (inited) return true;
+  try {
+    import_node_fs5.default.mkdirSync(PROBE_DIR, { recursive: true });
+    inited = true;
+    return true;
+  } catch {
+    return false;
+  }
+}
+function probeEvent(event, data = {}) {
+  try {
+    if (!ensureDir()) return;
+    const line = JSON.stringify({ ts: Date.now(), event, ...data }) + "\n";
+    import_node_fs5.default.appendFileSync(EVENTS_FILE, line);
+  } catch {
+  }
+}
+function probeDumpReplay(sessionId, payload) {
+  try {
+    if (!ensureDir()) return "";
+    const file = import_node_path6.default.join(PROBE_DIR, `replay-${sessionId}-${Date.now()}.ans`);
+    import_node_fs5.default.writeFileSync(file, payload, "utf8");
+    return file;
+  } catch {
+    return "";
+  }
+}
+var _throttle = /* @__PURE__ */ new Map();
+function probePtyDataThrottled(tsid, len, tail) {
+  const now = Date.now();
+  let s = _throttle.get(tsid);
+  if (!s) {
+    s = { last: 0, bytes: 0, chunks: 0 };
+    _throttle.set(tsid, s);
+  }
+  s.bytes += len;
+  s.chunks += 1;
+  if (now - s.last >= 1e3) {
+    probeEvent("pty.data", {
+      tsid,
+      chunks: s.chunks,
+      accumBytes: s.bytes,
+      lastChunkLen: len,
+      tailHex: tail.subarray(Math.max(0, tail.length - 32)).toString("hex")
+    });
+    s.last = now;
+  }
+}
+
 // src/session/manager.ts
 function compressFrameForWire(frame) {
   if (frame.type !== "session:status") return frame;
@@ -22461,7 +22472,7 @@ function derivePersonaSpawnCwd(file, personaRoot) {
       `derivePersonaSpawnCwd: personaRoot missing for owner session ${file.sessionId} (ownerPersonaId=${personaId})`
     );
   }
-  return import_node_path6.default.join(personaRoot, safeFileName(personaId));
+  return import_node_path7.default.join(personaRoot, safeFileName(personaId));
 }
 function makeInitialState(file, subSessionMeta) {
   return {
@@ -22575,10 +22586,10 @@ var SessionManager = class {
   // <dataDir>/sessions/ 列子目录 (排除 'default').
   listPersonaIdsOnDisk() {
     if (!this.deps.dataDir) return [];
-    const root = this.deps.storeFactory ? import_node_path6.default.join(this.deps.dataDir, "personas") : import_node_path6.default.join(this.deps.dataDir, "sessions");
+    const root = this.deps.storeFactory ? import_node_path7.default.join(this.deps.dataDir, "personas") : import_node_path7.default.join(this.deps.dataDir, "sessions");
     let entries;
     try {
-      entries = import_node_fs5.default.readdirSync(root, { withFileTypes: true });
+      entries = import_node_fs6.default.readdirSync(root, { withFileTypes: true });
     } catch (err) {
       const code = err?.code;
       if (code === "ENOENT") return [];
@@ -22591,7 +22602,7 @@ var SessionManager = class {
   // 只在 storeFactory 注入 (新布局) 下生效, 老布局无 guest 目录.
   listGuestCapIdsForPersona(personaId) {
     if (!this.deps.dataDir || !this.deps.storeFactory) return [];
-    const root = import_node_path6.default.join(
+    const root = import_node_path7.default.join(
       this.deps.dataDir,
       "personas",
       personaId,
@@ -22601,7 +22612,7 @@ var SessionManager = class {
     );
     let entries;
     try {
-      entries = import_node_fs5.default.readdirSync(root, { withFileTypes: true });
+      entries = import_node_fs6.default.readdirSync(root, { withFileTypes: true });
     } catch (err) {
       const code = err?.code;
       if (code === "ENOENT") return [];
@@ -22838,7 +22849,7 @@ var SessionManager = class {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, "cwd required when ownerPersonaId is absent");
     }
     try {
-      const stat = import_node_fs5.default.statSync(cwd);
+      const stat = import_node_fs6.default.statSync(cwd);
       if (!stat.isDirectory()) throw new Error("not dir");
     } catch {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `cwd not a directory: ${cwd}`);
@@ -22929,30 +22940,6 @@ var SessionManager = class {
     const file = this.getFile(args.sessionId);
     return { response: file, broadcast: [] };
   }
-  // mirror peer sessions (2026-05-26)：把来自朋友 daemon 的 SessionFile（originOwnerPrincipalId
-  // 非空）持久化到本机 default store。dumb write，**不广播 push 帧**——UI 是写入唯一源，
-  // 双写完成后通过 cache.setData 同步 sidebar 本地 state。
-  //
-  // 强制走 deps.store（即 default scope），不走 scopeForFile：mirror 物理落 default 即可。
-  // 远端 creator / origin 字段原值保留（不被本机 ctx 派生覆写）。
-  //
-  // strip 远端 personaId：mirror SessionFile 上的 ownerPersonaId 是朋友 daemon 的 persona
-  // 目录 id，本机不持有对应 persona。留着会让按 ownerPersonaId 反查的本机消费者
-  // （MyPersonasSection 等）把 mirror 误聚到同 id persona 下。写入前清掉。
-  //
-  // 与 manager.create / manager.update 区别：
-  //   - 不走 newRunner / attachObserver / cwd 校验（mirror 是纯 metadata 层）
-  //   - 不发 session:info 帧（manager.create / .update 通过 reducer/wireCollector 发 push）
-  mirrorUpsert(file) {
-    const { ownerPersonaId: _stripped, ...rest } = file;
-    return this.deps.store.write(rest);
-  }
-  // mirror peer sessions：删本机 mirror SessionFile。mirror 一律落 default（mirrorUpsert
-  // 强制走 deps.store + strip ownerPersonaId），删也只删 default。idempotent：找不到
-  // 不 throw（store.delete 内部 ENOENT 兜底返 false 不 throw）。**不广播 session:deleted**。
-  mirrorRemove(sessionId) {
-    this.deps.store.delete(sessionId);
-  }
   // observer 上报"jsonl 写入了一条 user 行"时调用：在 buffer 里找到与之对应的、
   // 还没建立映射的最早一条 synth user_text，记下 synth → real 映射。
   // 找不到匹配的 synth（runner 不存在 / buffer 已被 /clear 清空 / 真 uuid 来自纯 history
@@ -23374,7 +23361,7 @@ var SessionManager = class {
    */
   createForScope(args) {
     try {
-      const stat = import_node_fs5.default.statSync(args.cwd);
+      const stat = import_node_fs6.default.statSync(args.cwd);
       if (!stat.isDirectory()) throw new Error("not dir");
     } catch {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `cwd not a directory: ${args.cwd}`);
@@ -23709,15 +23696,27 @@ var SessionManager = class {
   }
   /** spawn 进程 exit 时调用，清理映射防止后续 input 写到已死 pty + 释放 replay 闭包 */
   unregisterPty(toolSessionId) {
+    const hadReplay = this.ptyReplaysByToolSid.has(toolSessionId);
     this.ptyTransports.delete(toolSessionId);
     this.ptyReplaysByToolSid.delete(toolSessionId);
+    probeEvent("pty.unregister", {
+      tsid: toolSessionId,
+      hadReplay,
+      replayMapKeys: Array.from(this.ptyReplaysByToolSid.keys())
+    });
   }
   /**
    * ClaudeTuiAdapter.spawn 创建 detector 后调用，注册当前屏幕快照闭包。
    * 同一 toolSessionId 重 spawn 会覆盖；unregisterPty 时一并删除。
    */
   registerPtyReplay(toolSessionId, replay) {
+    const overwrite = this.ptyReplaysByToolSid.has(toolSessionId);
     this.ptyReplaysByToolSid.set(toolSessionId, replay);
+    probeEvent("pty.register", {
+      tsid: toolSessionId,
+      overwrite,
+      replayMapKeys: Array.from(this.ptyReplaysByToolSid.keys())
+    });
   }
   /**
    * 新 client subscribe 时拉当前屏幕快照。返回 null 表示无可重放数据：
@@ -23726,14 +23725,47 @@ var SessionManager = class {
    * 调用方（onSubscribe hook）按返回值非空时构造 session:pty + session:control 帧定向回放
    */
   getPtyReplay(sessionId) {
-    if (this.deps.mode !== "tui") return null;
+    if (this.deps.mode !== "tui") {
+      probeEvent("replay.request", { sid: sessionId, result: "not-tui-mode" });
+      return null;
+    }
     const runner = this.runners.get(sessionId);
-    if (!runner) return null;
+    if (!runner) {
+      probeEvent("replay.request", {
+        sid: sessionId,
+        result: "no-runner",
+        runnerKeys: Array.from(this.runners.keys())
+      });
+      return null;
+    }
     const tsid = runner.getState().file.toolSessionId;
-    if (!tsid) return null;
+    if (!tsid) {
+      probeEvent("replay.request", { sid: sessionId, result: "no-tsid" });
+      return null;
+    }
     const replay = this.ptyReplaysByToolSid.get(tsid);
-    if (!replay) return null;
-    return replay();
+    if (!replay) {
+      probeEvent("replay.request", {
+        sid: sessionId,
+        tsid,
+        result: "no-replay-closure",
+        replayMapKeys: Array.from(this.ptyReplaysByToolSid.keys())
+      });
+      return null;
+    }
+    const snap = replay();
+    const dumpFile = probeDumpReplay(sessionId, snap.data);
+    probeEvent("replay.dump", {
+      sid: sessionId,
+      tsid,
+      bytes: snap.data.length,
+      popupKind: snap.popupKind,
+      headHex: Buffer.from(snap.data, "utf8").subarray(0, 32).toString("hex"),
+      dumpFile,
+      runnerKeys: Array.from(this.runners.keys()),
+      replayMapKeys: Array.from(this.ptyReplaysByToolSid.keys())
+    });
+    return snap;
   }
   /**
    * handler tui:pty:input / tui:pty:resize 入口：传 wire 层 sessionId（16 字符），
@@ -23796,8 +23828,8 @@ var SessionManager = class {
 };
 
 // src/persona/store.ts
-var fs6 = __toESM(require("fs"), 1);
-var path8 = __toESM(require("path"), 1);
+var fs7 = __toESM(require("fs"), 1);
+var path9 = __toESM(require("path"), 1);
 init_protocol();
 var DEFAULT_SETTINGS = {
   permissions: {
@@ -23822,17 +23854,17 @@ var DEFAULT_SETTINGS = {
 var PersonaStore = class {
   constructor(root) {
     this.root = root;
-    fs6.mkdirSync(root, { recursive: true });
+    fs7.mkdirSync(root, { recursive: true });
   }
   root;
   personaDir(personaId) {
-    return path8.join(this.root, safeFileName(personaId));
+    return path9.join(this.root, safeFileName(personaId));
   }
   metaPath(personaId) {
-    return path8.join(this.personaDir(personaId), ".clawd", "persona.json");
+    return path9.join(this.personaDir(personaId), ".clawd", "persona.json");
   }
   claudeMdPath(personaId) {
-    return path8.join(this.personaDir(personaId), "CLAUDE.md");
+    return path9.join(this.personaDir(personaId), "CLAUDE.md");
   }
   /**
    * Sandbox settings 落盘路径 —— 故意放在 `.clawd/` 而不是 `.claude/`，让 CC 的
@@ -23842,11 +23874,11 @@ var PersonaStore = class {
    * 加载 persona 人格，只有 listener 多一层 OS sandbox。
    */
   sandboxSettingsPath(personaId) {
-    return path8.join(this.personaDir(personaId), ".clawd", "sandbox-settings.json");
+    return path9.join(this.personaDir(personaId), ".clawd", "sandbox-settings.json");
   }
   write(persona, personality) {
     const dir = this.personaDir(persona.personaId);
-    fs6.mkdirSync(path8.join(dir, ".clawd"), { recursive: true });
+    fs7.mkdirSync(path9.join(dir, ".clawd"), { recursive: true });
     this.atomicWrite(this.claudeMdPath(persona.personaId), personality);
     this.atomicWrite(
       this.sandboxSettingsPath(persona.personaId),
@@ -23862,8 +23894,8 @@ var PersonaStore = class {
   }
   read(personaId) {
     const p2 = this.metaPath(personaId);
-    if (!fs6.existsSync(p2)) return null;
-    const raw = JSON.parse(fs6.readFileSync(p2, "utf8"));
+    if (!fs7.existsSync(p2)) return null;
+    const raw = JSON.parse(fs7.readFileSync(p2, "utf8"));
     if (raw && typeof raw === "object" && "tokenMap" in raw) {
       delete raw.tokenMap;
       this.atomicWrite(p2, JSON.stringify(raw, null, 2));
@@ -23871,12 +23903,12 @@ var PersonaStore = class {
     return PersonaFileSchema.parse(raw);
   }
   has(personaId) {
-    return fs6.existsSync(this.metaPath(personaId));
+    return fs7.existsSync(this.metaPath(personaId));
   }
   readPersonality(personaId) {
     const p2 = this.claudeMdPath(personaId);
-    if (!fs6.existsSync(p2)) return null;
-    return fs6.readFileSync(p2, "utf8");
+    if (!fs7.existsSync(p2)) return null;
+    return fs7.readFileSync(p2, "utf8");
   }
   /**
    * 读 sandbox-settings.json 当前内容；文件不存在 / JSON 解析失败均返回 null。
@@ -23884,23 +23916,23 @@ var PersonaStore = class {
    */
   readSandboxSettings(personaId) {
     const p2 = this.sandboxSettingsPath(personaId);
-    if (!fs6.existsSync(p2)) return null;
+    if (!fs7.existsSync(p2)) return null;
     try {
-      return JSON.parse(fs6.readFileSync(p2, "utf8"));
+      return JSON.parse(fs7.readFileSync(p2, "utf8"));
     } catch {
       return null;
     }
   }
   /** Persona 私有 skills 目录路径：<personaDir>/.claude/skills */
   skillsDir(personaId) {
-    return path8.join(this.personaDir(personaId), ".claude", "skills");
+    return path9.join(this.personaDir(personaId), ".claude", "skills");
   }
   /**
    * Claude Code 项目级 settings 路径：`<personaDir>/.claude/settings.json`。
    * 这里只读 `enabledPlugins` 字段，由 owner 通过 CC `/plugin` 之类命令维护，daemon 不写。
    */
   claudeSettingsPath(personaId) {
-    return path8.join(this.personaDir(personaId), ".claude", "settings.json");
+    return path9.join(this.personaDir(personaId), ".claude", "settings.json");
   }
   /**
    * 读取 persona 的 `.claude/settings.json` 中 `enabledPlugins` map，把 value === true
@@ -23915,10 +23947,10 @@ var PersonaStore = class {
    */
   readEnabledPlugins(personaId) {
     const p2 = this.claudeSettingsPath(personaId);
-    if (!fs6.existsSync(p2)) return [];
+    if (!fs7.existsSync(p2)) return [];
     let raw;
     try {
-      raw = JSON.parse(fs6.readFileSync(p2, "utf8"));
+      raw = JSON.parse(fs7.readFileSync(p2, "utf8"));
     } catch {
       return [];
     }
@@ -23932,22 +23964,22 @@ var PersonaStore = class {
     return out;
   }
   list() {
-    if (!fs6.existsSync(this.root)) return [];
-    return fs6.readdirSync(this.root).filter((name) => {
-      return fs6.existsSync(path8.join(this.root, name, ".clawd", "persona.json"));
+    if (!fs7.existsSync(this.root)) return [];
+    return fs7.readdirSync(this.root).filter((name) => {
+      return fs7.existsSync(path9.join(this.root, name, ".clawd", "persona.json"));
     });
   }
   remove(personaId) {
     const dir = this.personaDir(personaId);
-    if (fs6.existsSync(dir)) fs6.rmSync(dir, { recursive: true, force: true });
+    if (fs7.existsSync(dir)) fs7.rmSync(dir, { recursive: true, force: true });
   }
   personaDirPath(personaId) {
     return this.personaDir(personaId);
   }
   atomicWrite(file, content) {
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
-    fs6.writeFileSync(tmp, content, { mode: 384 });
-    fs6.renameSync(tmp, file);
+    fs7.writeFileSync(tmp, content, { mode: 384 });
+    fs7.renameSync(tmp, file);
   }
 };
 
@@ -23993,9 +24025,9 @@ var PersonaRegistry = class {
 var import_node_crypto3 = __toESM(require("crypto"), 1);
 
 // src/skills/scanner.ts
-var import_node_fs6 = __toESM(require("fs"), 1);
+var import_node_fs7 = __toESM(require("fs"), 1);
 var import_node_os2 = __toESM(require("os"), 1);
-var import_node_path7 = __toESM(require("path"), 1);
+var import_node_path8 = __toESM(require("path"), 1);
 
 // src/skills/frontmatter.ts
 var STRIP_QUOTES = /^["']|["']$/g;
@@ -24104,7 +24136,7 @@ function parseDescription(content) {
 }
 function isDirLikeSync(p2) {
   try {
-    return import_node_fs6.default.statSync(p2).isDirectory();
+    return import_node_fs7.default.statSync(p2).isDirectory();
   } catch {
     return false;
   }
@@ -24112,19 +24144,19 @@ function isDirLikeSync(p2) {
 function scanSkillDir(dir, source, seen, out, pluginName) {
   let entries;
   try {
-    entries = import_node_fs6.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs7.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
-    const entryPath = import_node_path7.default.join(dir, ent.name);
+    const entryPath = import_node_path8.default.join(dir, ent.name);
     if (!ent.isDirectory() && !(ent.isSymbolicLink() && isDirLikeSync(entryPath))) continue;
     let content;
     try {
-      content = import_node_fs6.default.readFileSync(import_node_path7.default.join(entryPath, "SKILL.md"), "utf8");
+      content = import_node_fs7.default.readFileSync(import_node_path8.default.join(entryPath, "SKILL.md"), "utf8");
     } catch {
       try {
-        content = import_node_fs6.default.readFileSync(import_node_path7.default.join(entryPath, "skill.md"), "utf8");
+        content = import_node_fs7.default.readFileSync(import_node_path8.default.join(entryPath, "skill.md"), "utf8");
       } catch {
         continue;
       }
@@ -24148,26 +24180,26 @@ function listSkillsForDir(dir, source) {
 function scanCommandDir(dir, source, seen, out, pluginName) {
   let entries;
   try {
-    entries = import_node_fs6.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs7.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
-    const entryPath = import_node_path7.default.join(dir, ent.name);
+    const entryPath = import_node_path8.default.join(dir, ent.name);
     if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync(entryPath)) {
       const ns = ent.name;
       let subEntries;
       try {
-        subEntries = import_node_fs6.default.readdirSync(entryPath, { withFileTypes: true });
+        subEntries = import_node_fs7.default.readdirSync(entryPath, { withFileTypes: true });
       } catch {
         continue;
       }
       for (const se of subEntries) {
         if (!se.name.endsWith(".md")) continue;
-        const sePath = import_node_path7.default.join(entryPath, se.name);
+        const sePath = import_node_path8.default.join(entryPath, se.name);
         let content;
         try {
-          content = import_node_fs6.default.readFileSync(sePath, "utf8");
+          content = import_node_fs7.default.readFileSync(sePath, "utf8");
         } catch {
           continue;
         }
@@ -24184,7 +24216,7 @@ function scanCommandDir(dir, source, seen, out, pluginName) {
     } else if (ent.name.endsWith(".md")) {
       let content;
       try {
-        content = import_node_fs6.default.readFileSync(entryPath, "utf8");
+        content = import_node_fs7.default.readFileSync(entryPath, "utf8");
       } catch {
         continue;
       }
@@ -24200,10 +24232,10 @@ function scanCommandDir(dir, source, seen, out, pluginName) {
   }
 }
 function readInstalledPlugins(home) {
-  const file = import_node_path7.default.join(home, ".claude", "plugins", "installed_plugins.json");
+  const file = import_node_path8.default.join(home, ".claude", "plugins", "installed_plugins.json");
   let raw;
   try {
-    raw = import_node_fs6.default.readFileSync(file, "utf8");
+    raw = import_node_fs7.default.readFileSync(file, "utf8");
   } catch {
     return [];
   }
@@ -24251,14 +24283,14 @@ var SkillsScanner = class {
       });
     }
     const fsBlock = [];
-    scanSkillDir(import_node_path7.default.join(this.home, ".claude", "skills"), "global", seen, fsBlock);
-    scanCommandDir(import_node_path7.default.join(this.home, ".claude", "commands"), "global", seen, fsBlock);
-    scanSkillDir(import_node_path7.default.join(args.cwd, ".claude", "skills"), "project", seen, fsBlock);
-    scanCommandDir(import_node_path7.default.join(args.cwd, ".claude", "commands"), "project", seen, fsBlock);
+    scanSkillDir(import_node_path8.default.join(this.home, ".claude", "skills"), "global", seen, fsBlock);
+    scanCommandDir(import_node_path8.default.join(this.home, ".claude", "commands"), "global", seen, fsBlock);
+    scanSkillDir(import_node_path8.default.join(args.cwd, ".claude", "skills"), "project", seen, fsBlock);
+    scanCommandDir(import_node_path8.default.join(args.cwd, ".claude", "commands"), "project", seen, fsBlock);
     const plugins = [...readInstalledPlugins(this.home), ...this.extraPluginRoots];
     for (const { name, root } of plugins) {
-      scanSkillDir(import_node_path7.default.join(root, "skills"), "plugin", seen, fsBlock, name);
-      scanCommandDir(import_node_path7.default.join(root, "commands"), "plugin", seen, fsBlock, name);
+      scanSkillDir(import_node_path8.default.join(root, "skills"), "plugin", seen, fsBlock, name);
+      scanCommandDir(import_node_path8.default.join(root, "commands"), "plugin", seen, fsBlock, name);
     }
     fsBlock.sort((a, b2) => a.name < b2.name ? -1 : a.name > b2.name ? 1 : 0);
     return [...builtinBlock, ...fsBlock];
@@ -24363,8 +24395,8 @@ var PersonaManager = class {
 };
 
 // src/persona/seed.ts
-var fs8 = __toESM(require("fs"), 1);
-var path10 = __toESM(require("path"), 1);
+var fs9 = __toESM(require("fs"), 1);
+var path11 = __toESM(require("path"), 1);
 var import_node_url = require("url");
 var import_meta = {};
 var DEFAULT_PERSONAS = [
@@ -24400,18 +24432,18 @@ var DEFAULT_PERSONAS = [
 function findDefaultsRoot() {
   const candidates = [];
   try {
-    const here = path10.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
-    candidates.push(path10.resolve(here, "defaults"));
-    candidates.push(path10.resolve(here, "persona-defaults"));
+    const here = path11.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
+    candidates.push(path11.resolve(here, "defaults"));
+    candidates.push(path11.resolve(here, "persona-defaults"));
   } catch {
   }
   if (process.argv[1]) {
-    const argvDir = path10.dirname(process.argv[1]);
-    candidates.push(path10.resolve(argvDir, "persona-defaults"));
+    const argvDir = path11.dirname(process.argv[1]);
+    candidates.push(path11.resolve(argvDir, "persona-defaults"));
   }
   for (const c of candidates) {
     try {
-      if (fs8.statSync(c).isDirectory()) return c;
+      if (fs9.statSync(c).isDirectory()) return c;
     } catch {
     }
   }
@@ -24424,8 +24456,8 @@ function seedDefaultPersonas(args) {
       args.logger.info("persona.seed.skip", { personaId: entry.personaId, reason: "exists" });
       continue;
     }
-    const bundleDir = path10.join(args.defaultsRoot, entry.personaId);
-    if (!fs8.existsSync(bundleDir)) {
+    const bundleDir = path11.join(args.defaultsRoot, entry.personaId);
+    if (!fs9.existsSync(bundleDir)) {
       args.logger.warn("persona.seed.skip", {
         personaId: entry.personaId,
         reason: "bundle-missing",
@@ -24433,8 +24465,8 @@ function seedDefaultPersonas(args) {
       });
       continue;
     }
-    const claudeMdPath = path10.join(bundleDir, "CLAUDE.md");
-    if (!fs8.existsSync(claudeMdPath)) {
+    const claudeMdPath = path11.join(bundleDir, "CLAUDE.md");
+    if (!fs9.existsSync(claudeMdPath)) {
       args.logger.warn("persona.seed.skip", {
         personaId: entry.personaId,
         reason: "no-CLAUDE.md",
@@ -24442,7 +24474,7 @@ function seedDefaultPersonas(args) {
       });
       continue;
     }
-    const personality = fs8.readFileSync(claudeMdPath, "utf8");
+    const personality = fs9.readFileSync(claudeMdPath, "utf8");
     const now = Date.now();
     const persona = {
       personaId: entry.personaId,
@@ -24459,14 +24491,14 @@ function seedDefaultPersonas(args) {
   }
 }
 function copyBundleExtras(srcDir, dstDir) {
-  for (const entry of fs8.readdirSync(srcDir, { withFileTypes: true })) {
+  for (const entry of fs9.readdirSync(srcDir, { withFileTypes: true })) {
     if (entry.name === "CLAUDE.md" || entry.name === ".clawd") continue;
-    const srcPath = path10.join(srcDir, entry.name);
-    const dstPath = path10.join(dstDir, entry.name);
+    const srcPath = path11.join(srcDir, entry.name);
+    const dstPath = path11.join(dstDir, entry.name);
     if (entry.isDirectory()) {
-      fs8.cpSync(srcPath, dstPath, { recursive: true, dereference: true });
+      fs9.cpSync(srcPath, dstPath, { recursive: true, dereference: true });
     } else if (entry.isFile()) {
-      fs8.copyFileSync(srcPath, dstPath);
+      fs9.copyFileSync(srcPath, dstPath);
     }
   }
 }
@@ -24475,9 +24507,9 @@ function copyBundleExtras(srcDir, dstDir) {
 init_claude();
 
 // src/tools/claude-tui.ts
-var import_node_fs9 = __toESM(require("fs"), 1);
+var import_node_fs10 = __toESM(require("fs"), 1);
 var import_node_os5 = __toESM(require("os"), 1);
-var import_node_path10 = __toESM(require("path"), 1);
+var import_node_path11 = __toESM(require("path"), 1);
 var import_headless = __toESM(require_xterm_headless(), 1);
 
 // ../node_modules/.pnpm/@xterm+addon-serialize@0.14.0/node_modules/@xterm/addon-serialize/lib/addon-serialize.mjs
@@ -25197,6 +25229,11 @@ var ClaudeTuiAdapter = class extends ClaudeAdapter {
       cwd: ctx.cwd,
       toolSessionId: ctx.toolSessionId
     });
+    probeEvent("pty.spawn", {
+      tsid: ctx.toolSessionId,
+      isResume: jsonlExistsForCtx(ctx),
+      cwd: ctx.cwd
+    });
     const pty = spawnPty({
       command: cmd,
       args,
@@ -25238,8 +25275,12 @@ var ClaudeTuiAdapter = class extends ClaudeAdapter {
         this.tuiOpts.onPtyData(ctx.toolSessionId, data.toString("base64"));
       }
       void detector.writeBytes(data.toString("utf8"));
+      if (ctx.toolSessionId) {
+        probePtyDataThrottled(ctx.toolSessionId, data.length, data);
+      }
     });
     ptyChild.on("exit", () => {
+      probeEvent("pty.exit", { tsid: ctx.toolSessionId });
       if (ctx.toolSessionId && this.tuiOpts.onPtyUnregister) {
         this.tuiOpts.onPtyUnregister(ctx.toolSessionId);
       }
@@ -25312,9 +25353,9 @@ function buildTuiSpawnArgs(ctx, isResume = false) {
 function jsonlExistsForCtx(ctx) {
   if (!ctx.toolSessionId) return false;
   const home = import_node_os5.default.homedir();
-  const file = import_node_path10.default.join(home, ".claude", "projects", cwdToHashDir(ctx.cwd), `${ctx.toolSessionId}.jsonl`);
+  const file = import_node_path11.default.join(home, ".claude", "projects", cwdToHashDir(ctx.cwd), `${ctx.toolSessionId}.jsonl`);
   try {
-    return import_node_fs9.default.statSync(file).isFile();
+    return import_node_fs10.default.statSync(file).isFile();
   } catch {
     return false;
   }
@@ -25324,23 +25365,23 @@ function jsonlExistsForCtx(ctx) {
 init_claude_history();
 
 // src/workspace/browser.ts
-var import_node_fs10 = __toESM(require("fs"), 1);
+var import_node_fs11 = __toESM(require("fs"), 1);
 var import_node_os6 = __toESM(require("os"), 1);
-var import_node_path11 = __toESM(require("path"), 1);
+var import_node_path12 = __toESM(require("path"), 1);
 init_protocol();
 var MAX_FILE_BYTES = 2 * 1024 * 1024;
 function resolveInsideCwd(cwd, subpath) {
-  const absCwd = import_node_path11.default.resolve(cwd);
-  const joined = import_node_path11.default.resolve(absCwd, subpath ?? ".");
-  const rel = import_node_path11.default.relative(absCwd, joined);
-  if (rel.startsWith("..") || import_node_path11.default.isAbsolute(rel)) {
+  const absCwd = import_node_path12.default.resolve(cwd);
+  const joined = import_node_path12.default.resolve(absCwd, subpath ?? ".");
+  const rel = import_node_path12.default.relative(absCwd, joined);
+  if (rel.startsWith("..") || import_node_path12.default.isAbsolute(rel)) {
     throw new ClawdError(ERROR_CODES.INVALID_PATH, `path escapes cwd: ${subpath}`);
   }
   return joined;
 }
 function ensureCwd(cwd) {
   try {
-    const stat = import_node_fs10.default.statSync(cwd);
+    const stat = import_node_fs11.default.statSync(cwd);
     if (!stat.isDirectory()) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${cwd}`);
     }
@@ -25354,7 +25395,7 @@ var WorkspaceBrowser = class {
     const cwd = args.cwd && args.cwd.length > 0 ? args.cwd : import_node_os6.default.homedir();
     ensureCwd(cwd);
     const full = resolveInsideCwd(cwd, args.path);
-    const dirents = import_node_fs10.default.readdirSync(full, { withFileTypes: true });
+    const dirents = import_node_fs11.default.readdirSync(full, { withFileTypes: true });
     const entries = [];
     for (const d of dirents) {
       if (!args.showHidden && d.name.startsWith(".")) continue;
@@ -25364,7 +25405,7 @@ var WorkspaceBrowser = class {
         mtime: ""
       };
       try {
-        const st = import_node_fs10.default.statSync(import_node_path11.default.join(full, d.name));
+        const st = import_node_fs11.default.statSync(import_node_path12.default.join(full, d.name));
         entry.mtime = new Date(st.mtimeMs).toISOString();
         if (d.isFile()) entry.size = st.size;
       } catch {
@@ -25380,14 +25421,14 @@ var WorkspaceBrowser = class {
   read(args) {
     ensureCwd(args.cwd);
     const full = resolveInsideCwd(args.cwd, args.path);
-    const st = import_node_fs10.default.statSync(full);
+    const st = import_node_fs11.default.statSync(full);
     if (!st.isFile()) {
       throw new ClawdError(ERROR_CODES.INVALID_PATH, `not a file: ${args.path}`);
     }
     if (st.size > MAX_FILE_BYTES) {
       throw new ClawdError(ERROR_CODES.FILE_TOO_LARGE, `file > ${MAX_FILE_BYTES} bytes`);
     }
-    const buf = import_node_fs10.default.readFileSync(full);
+    const buf = import_node_fs11.default.readFileSync(full);
     const isBinary = buf.includes(0);
     if (isBinary) {
       return {
@@ -25409,20 +25450,20 @@ var WorkspaceBrowser = class {
 };
 
 // src/skills/agents-scanner.ts
-var import_node_fs11 = __toESM(require("fs"), 1);
+var import_node_fs12 = __toESM(require("fs"), 1);
 var import_node_os7 = __toESM(require("os"), 1);
-var import_node_path12 = __toESM(require("path"), 1);
+var import_node_path13 = __toESM(require("path"), 1);
 var DEFAULT_POLICY_DIR_DARWIN = "/Library/Application Support/ClaudeCode/.claude/agents";
 function isDirLikeSync2(p2) {
   try {
-    return import_node_fs11.default.statSync(p2).isDirectory();
+    return import_node_fs12.default.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function fileExistsSync(p2) {
   try {
-    return import_node_fs11.default.statSync(p2).isFile();
+    return import_node_fs12.default.statSync(p2).isFile();
   } catch {
     return false;
   }
@@ -25430,7 +25471,7 @@ function fileExistsSync(p2) {
 function parseAgentFile(filePath) {
   let content;
   try {
-    content = import_node_fs11.default.readFileSync(filePath, "utf8");
+    content = import_node_fs12.default.readFileSync(filePath, "utf8");
   } catch {
     return {};
   }
@@ -25443,16 +25484,16 @@ function parseAgentFile(filePath) {
 function scanAgentsDir(dir, source, seen, out) {
   let entries;
   try {
-    entries = import_node_fs11.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs12.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
     if (!ent.name.endsWith(".md")) continue;
-    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path12.default.join(dir, ent.name)))) {
+    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path13.default.join(dir, ent.name)))) {
       continue;
     }
-    const filePath = import_node_path12.default.join(dir, ent.name);
+    const filePath = import_node_path13.default.join(dir, ent.name);
     const baseName = ent.name.replace(/\.md$/, "");
     if (seen.has(baseName)) continue;
     seen.add(baseName);
@@ -25470,12 +25511,12 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   function walk(dir, namespaces) {
     let entries;
     try {
-      entries = import_node_fs11.default.readdirSync(dir, { withFileTypes: true });
+      entries = import_node_fs12.default.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const ent of entries) {
-      const childPath = import_node_path12.default.join(dir, ent.name);
+      const childPath = import_node_path13.default.join(dir, ent.name);
       if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync2(childPath)) {
         walk(childPath, [...namespaces, ent.name]);
         continue;
@@ -25500,13 +25541,13 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   walk(root, []);
 }
 function readInstalledPlugins2(home) {
-  const pluginsDir = import_node_path12.default.join(home, ".claude", "plugins");
-  const v2 = import_node_path12.default.join(pluginsDir, "installed_plugins_v2.json");
-  const v1 = import_node_path12.default.join(pluginsDir, "installed_plugins.json");
+  const pluginsDir = import_node_path13.default.join(home, ".claude", "plugins");
+  const v2 = import_node_path13.default.join(pluginsDir, "installed_plugins_v2.json");
+  const v1 = import_node_path13.default.join(pluginsDir, "installed_plugins.json");
   let raw = null;
   for (const candidate of [v2, v1]) {
     try {
-      raw = import_node_fs11.default.readFileSync(candidate, "utf8");
+      raw = import_node_fs12.default.readFileSync(candidate, "utf8");
       break;
     } catch {
     }
@@ -25531,19 +25572,19 @@ function readInstalledPlugins2(home) {
   return out;
 }
 function walkUpProjectAgentsDirs(startCwd, home, seen, out) {
-  let cur = import_node_path12.default.resolve(startCwd);
-  const fsRoot = import_node_path12.default.parse(cur).root;
+  let cur = import_node_path13.default.resolve(startCwd);
+  const fsRoot = import_node_path13.default.parse(cur).root;
   while (true) {
-    scanAgentsDir(import_node_path12.default.join(cur, ".claude", "agents"), "project", seen, out);
+    scanAgentsDir(import_node_path13.default.join(cur, ".claude", "agents"), "project", seen, out);
     let hasGit = false;
     try {
-      hasGit = import_node_fs11.default.existsSync(import_node_path12.default.join(cur, ".git"));
+      hasGit = import_node_fs12.default.existsSync(import_node_path13.default.join(cur, ".git"));
     } catch {
     }
     if (hasGit) return;
     if (cur === home) return;
     if (cur === fsRoot) return;
-    const parent = import_node_path12.default.dirname(cur);
+    const parent = import_node_path13.default.dirname(cur);
     if (parent === cur) return;
     cur = parent;
   }
@@ -25578,7 +25619,7 @@ var AgentsScanner = class {
     }
     const fsBlock = [];
     scanAgentsDir(
-      import_node_path12.default.join(this.home, ".claude", "agents"),
+      import_node_path13.default.join(this.home, ".claude", "agents"),
       "global",
       seen,
       fsBlock
@@ -25592,7 +25633,7 @@ var AgentsScanner = class {
       ...this.extraPluginRoots
     ];
     for (const { name, root } of plugins) {
-      const agentsRoot = import_node_path12.default.join(root, "agents");
+      const agentsRoot = import_node_path13.default.join(root, "agents");
       scanPluginAgentsTree(agentsRoot, name, seen, fsBlock);
     }
     return [...builtinBlock, ...fsBlock];
@@ -25600,15 +25641,15 @@ var AgentsScanner = class {
 };
 
 // src/observer/session-observer.ts
-var import_node_fs13 = __toESM(require("fs"), 1);
+var import_node_fs14 = __toESM(require("fs"), 1);
 var import_node_os9 = __toESM(require("os"), 1);
-var import_node_path14 = __toESM(require("path"), 1);
+var import_node_path15 = __toESM(require("path"), 1);
 init_claude_history();
 
 // src/observer/subagent-meta-observer.ts
-var import_node_fs12 = __toESM(require("fs"), 1);
+var import_node_fs13 = __toESM(require("fs"), 1);
 var import_node_os8 = __toESM(require("os"), 1);
-var import_node_path13 = __toESM(require("path"), 1);
+var import_node_path14 = __toESM(require("path"), 1);
 init_claude_history();
 var META_RE = /^agent-([A-Za-z0-9_-]+)\.meta\.json$/;
 var SubagentMetaObserver = class {
@@ -25621,7 +25662,7 @@ var SubagentMetaObserver = class {
   watches = /* @__PURE__ */ new Map();
   // public for spec only：测试直接拼路径写假 meta.json；生产 start() 内部自己解析
   resolveSubagentDir(cwd, toolSessionId) {
-    return import_node_path13.default.join(
+    return import_node_path14.default.join(
       this.home,
       ".claude",
       "projects",
@@ -25651,7 +25692,7 @@ var SubagentMetaObserver = class {
   attachWatcher(w2) {
     if (w2.watcher) return;
     try {
-      w2.watcher = import_node_fs12.default.watch(w2.dirPath, { persistent: false }, (_evt, name) => {
+      w2.watcher = import_node_fs13.default.watch(w2.dirPath, { persistent: false }, (_evt, name) => {
         if (!name) return;
         const m2 = META_RE.exec(String(name));
         if (!m2) return;
@@ -25663,7 +25704,7 @@ var SubagentMetaObserver = class {
   scan(w2) {
     let entries;
     try {
-      entries = import_node_fs12.default.readdirSync(w2.dirPath);
+      entries = import_node_fs13.default.readdirSync(w2.dirPath);
     } catch {
       return;
     }
@@ -25677,10 +25718,10 @@ var SubagentMetaObserver = class {
     if (!m2) return;
     const agentId = m2[1];
     if (w2.emitted.has(agentId)) return;
-    const file = import_node_path13.default.join(w2.dirPath, name);
+    const file = import_node_path14.default.join(w2.dirPath, name);
     let raw;
     try {
-      raw = import_node_fs12.default.readFileSync(file, "utf8");
+      raw = import_node_fs13.default.readFileSync(file, "utf8");
     } catch {
       return;
     }
@@ -25737,14 +25778,14 @@ var SessionObserver = class {
   metaObserver;
   resolveJsonlPath(cwd, toolSessionId, override) {
     if (override) return override;
-    return import_node_path14.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
+    return import_node_path15.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
   }
   start(args) {
     this.stop(args.sessionId);
     const filePath = this.resolveJsonlPath(args.cwd, args.toolSessionId, args.jsonlPath);
     let size = 0;
     try {
-      size = import_node_fs13.default.statSync(filePath).size;
+      size = import_node_fs14.default.statSync(filePath).size;
     } catch {
     }
     const w2 = {
@@ -25757,10 +25798,10 @@ var SessionObserver = class {
       adapter: args.adapter
     };
     try {
-      import_node_fs13.default.mkdirSync(import_node_path14.default.dirname(filePath), { recursive: true });
+      import_node_fs14.default.mkdirSync(import_node_path15.default.dirname(filePath), { recursive: true });
     } catch {
     }
-    w2.watcher = import_node_fs13.default.watch(import_node_path14.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
+    w2.watcher = import_node_fs14.default.watch(import_node_path15.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
       if (!changedName || !filePath.endsWith(changedName)) return;
       this.poll(w2);
     });
@@ -25783,7 +25824,7 @@ var SessionObserver = class {
   // 异常静默吞，不阻塞 watcher 启动
   hydrateMetaTail(w2, maxLines = 200) {
     try {
-      const raw = import_node_fs13.default.readFileSync(w2.filePath, "utf8");
+      const raw = import_node_fs14.default.readFileSync(w2.filePath, "utf8");
       if (!raw) return;
       const allLines = raw.split("\n").filter((l) => l.trim().length > 0);
       if (allLines.length === 0) return;
@@ -25807,7 +25848,7 @@ var SessionObserver = class {
   poll(w2) {
     let size = 0;
     try {
-      size = import_node_fs13.default.statSync(w2.filePath).size;
+      size = import_node_fs14.default.statSync(w2.filePath).size;
     } catch {
       return;
     }
@@ -25816,11 +25857,11 @@ var SessionObserver = class {
       w2.buf = "";
     }
     if (size === w2.lastSize) return;
-    const fd = import_node_fs13.default.openSync(w2.filePath, "r");
+    const fd = import_node_fs14.default.openSync(w2.filePath, "r");
     try {
       const len = size - w2.lastSize;
       const buf = Buffer.alloc(len);
-      import_node_fs13.default.readSync(fd, buf, 0, len, w2.lastSize);
+      import_node_fs14.default.readSync(fd, buf, 0, len, w2.lastSize);
       w2.lastSize = size;
       w2.buf += buf.toString("utf8");
       let newlineIndex;
@@ -25834,7 +25875,7 @@ var SessionObserver = class {
         }
       }
     } finally {
-      import_node_fs13.default.closeSync(fd);
+      import_node_fs14.default.closeSync(fd);
     }
   }
   // 解析 JSONL 单行：仅当是主链 user 文本行（非 sidechain / 非 sub-agent / message.role='user'
@@ -26494,14 +26535,14 @@ function authenticate(token, deps) {
 }
 
 // src/permission/capability-store.ts
-var fs16 = __toESM(require("fs"), 1);
-var path19 = __toESM(require("path"), 1);
+var fs17 = __toESM(require("fs"), 1);
+var path20 = __toESM(require("path"), 1);
 var CAPABILITIES_FILE_NAME = "capabilities.json";
 var FILE_VERSION = 1;
 var CapabilityStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs16.mkdirSync(dataDir, { recursive: true });
+    fs17.mkdirSync(dataDir, { recursive: true });
     this.cache = this.readFromDisk();
   }
   dataDir;
@@ -26525,13 +26566,13 @@ var CapabilityStore = class {
     this.flush();
   }
   filePath() {
-    return path19.join(this.dataDir, CAPABILITIES_FILE_NAME);
+    return path20.join(this.dataDir, CAPABILITIES_FILE_NAME);
   }
   readFromDisk() {
     const file = this.filePath();
     let raw;
     try {
-      raw = fs16.readFileSync(file, "utf8");
+      raw = fs17.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -26559,10 +26600,10 @@ var CapabilityStore = class {
   }
   atomicWrite(file, content) {
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
-    fs16.writeFileSync(tmp, content, { mode: 384 });
-    fs16.renameSync(tmp, file);
+    fs17.writeFileSync(tmp, content, { mode: 384 });
+    fs17.renameSync(tmp, file);
     try {
-      fs16.chmodSync(file, 384);
+      fs17.chmodSync(file, 384);
     } catch {
     }
   }
@@ -26655,14 +26696,14 @@ var CapabilityManager = class {
 };
 
 // src/permission/cleanup.ts
-var fs17 = __toESM(require("fs"), 1);
+var fs18 = __toESM(require("fs"), 1);
 function cleanupGuestSessionsForCapability(cap, factory) {
   const removed = [];
   for (const g2 of cap.grants) {
     if (g2.resource.type !== "persona") continue;
     const dir = factory.vmGuestRoot(g2.resource.id, cap.id);
     try {
-      fs17.rmSync(dir, { recursive: true, force: true });
+      fs18.rmSync(dir, { recursive: true, force: true });
       removed.push(dir);
     } catch {
     }
@@ -26671,13 +26712,13 @@ function cleanupGuestSessionsForCapability(cap, factory) {
 }
 
 // src/permission/personal-capability.ts
-var import_node_fs14 = __toESM(require("fs"), 1);
-var import_node_path15 = __toESM(require("path"), 1);
+var import_node_fs15 = __toESM(require("fs"), 1);
+var import_node_path16 = __toESM(require("path"), 1);
 var import_node_crypto4 = __toESM(require("crypto"), 1);
 var PERSONAL_CAP_FILE_NAME = "personal-capability.json";
 var PERSONAL_CAP_DISPLAY_NAME = "personal";
 function personalCapFilePath(dataDir) {
-  return import_node_path15.default.join(dataDir, PERSONAL_CAP_FILE_NAME);
+  return import_node_path16.default.join(dataDir, PERSONAL_CAP_FILE_NAME);
 }
 function loadOrCreatePersonalCapability(opts) {
   const file = personalCapFilePath(opts.dataDir);
@@ -26707,7 +26748,7 @@ function loadOrCreatePersonalCapability(opts) {
 function readFile(file) {
   let raw;
   try {
-    raw = import_node_fs14.default.readFileSync(file, "utf8");
+    raw = import_node_fs15.default.readFileSync(file, "utf8");
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") return null;
@@ -26728,10 +26769,10 @@ function readFile(file) {
   return { token: obj.token, capability: capParsed.data };
 }
 function writeFile(file, content) {
-  import_node_fs14.default.mkdirSync(import_node_path15.default.dirname(file), { recursive: true });
-  import_node_fs14.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs15.default.mkdirSync(import_node_path16.default.dirname(file), { recursive: true });
+  import_node_fs15.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs14.default.chmodSync(file, 384);
+    import_node_fs15.default.chmodSync(file, 384);
   } catch {
   }
 }
@@ -26746,13 +26787,13 @@ function sha256Hex2(s) {
 }
 
 // src/inbox/inbox-store.ts
-var fs19 = __toESM(require("fs"), 1);
-var path21 = __toESM(require("path"), 1);
+var fs20 = __toESM(require("fs"), 1);
+var path22 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs19.mkdirSync(this.dirPath(), { recursive: true });
+    fs20.mkdirSync(this.dirPath(), { recursive: true });
   }
   dataDir;
   /**
@@ -26764,7 +26805,7 @@ var InboxStore = class {
     const file = this.filePath(peerOwnerId);
     let raw;
     try {
-      raw = fs19.readFileSync(file, "utf8");
+      raw = fs20.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -26780,7 +26821,7 @@ var InboxStore = class {
     const dir = this.dirPath();
     let entries;
     try {
-      entries = fs19.readdirSync(dir);
+      entries = fs20.readdirSync(dir);
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -26796,9 +26837,9 @@ var InboxStore = class {
     if (existing.some((m2) => m2.id === message.id)) return;
     const file = this.filePath(message.peerOwnerId);
     const line = JSON.stringify(message) + "\n";
-    fs19.appendFileSync(file, line, { mode: 384 });
+    fs20.appendFileSync(file, line, { mode: 384 });
     try {
-      fs19.chmodSync(file, 384);
+      fs20.chmodSync(file, 384);
     } catch {
     }
   }
@@ -26828,7 +26869,7 @@ var InboxStore = class {
   removeByPeerOwnerId(peerOwnerId) {
     const file = this.filePath(peerOwnerId);
     try {
-      fs19.unlinkSync(file);
+      fs20.unlinkSync(file);
     } catch (err) {
       if (err?.code === "ENOENT") return;
     }
@@ -26837,18 +26878,18 @@ var InboxStore = class {
     const file = this.filePath(peerOwnerId);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     const content = messages.map((m2) => JSON.stringify(m2)).join("\n") + (messages.length > 0 ? "\n" : "");
-    fs19.writeFileSync(tmp, content, { mode: 384 });
-    fs19.renameSync(tmp, file);
+    fs20.writeFileSync(tmp, content, { mode: 384 });
+    fs20.renameSync(tmp, file);
     try {
-      fs19.chmodSync(file, 384);
+      fs20.chmodSync(file, 384);
     } catch {
     }
   }
   dirPath() {
-    return path21.join(this.dataDir, INBOX_SUBDIR);
+    return path22.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerOwnerId) {
-    return path21.join(this.dirPath(), `${peerOwnerId}.jsonl`);
+    return path22.join(this.dirPath(), `${peerOwnerId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -26935,8 +26976,8 @@ var InboxManager = class {
 };
 
 // src/state/received-capability-store.ts
-var fs20 = __toESM(require("fs"), 1);
-var path22 = __toESM(require("path"), 1);
+var fs21 = __toESM(require("fs"), 1);
+var path23 = __toESM(require("path"), 1);
 var FILE_NAME = "received-capabilities.json";
 var ReceivedCapabilityStore = class {
   constructor(dataDir) {
@@ -26946,10 +26987,10 @@ var ReceivedCapabilityStore = class {
   caps = /* @__PURE__ */ new Map();
   load() {
     this.caps.clear();
-    const file = path22.join(this.dataDir, FILE_NAME);
+    const file = path23.join(this.dataDir, FILE_NAME);
     let raw;
     try {
-      raw = fs20.readFileSync(file, "utf8");
+      raw = fs21.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code !== "ENOENT") this.renameBak(file);
       return;
@@ -26986,20 +27027,20 @@ var ReceivedCapabilityStore = class {
     this.flush();
   }
   flush() {
-    const file = path22.join(this.dataDir, FILE_NAME);
+    const file = path23.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
       { receivedCaps: Array.from(this.caps.values()) },
       null,
       2
     );
-    fs20.mkdirSync(this.dataDir, { recursive: true });
-    fs20.writeFileSync(tmp, content, { mode: 384 });
-    fs20.renameSync(tmp, file);
+    fs21.mkdirSync(this.dataDir, { recursive: true });
+    fs21.writeFileSync(tmp, content, { mode: 384 });
+    fs21.renameSync(tmp, file);
   }
   renameBak(file) {
     try {
-      fs20.renameSync(file, `${file}.bak`);
+      fs21.renameSync(file, `${file}.bak`);
     } catch {
     }
   }
@@ -27097,61 +27138,61 @@ async function connectRemote(args) {
 }
 
 // src/migrations/2026-05-20-flatten-sessions.ts
-var fs21 = __toESM(require("fs"), 1);
-var path23 = __toESM(require("path"), 1);
+var fs22 = __toESM(require("fs"), 1);
+var path24 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path23.join(dataDir, "sessions");
-  const flagPath = path23.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path24.join(dataDir, "sessions");
+  const flagPath = path24.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path23.join(sessionsDir, "default");
+  const defaultDir = path24.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path23.join(defaultDir, entry);
-      const dst = path23.join(sessionsDir, entry);
-      fs21.renameSync(src, dst);
+      const src = path24.join(defaultDir, entry);
+      const dst = path24.join(sessionsDir, entry);
+      fs22.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path23.join(sessionsDir, pid);
+    const personaDir = path24.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path23.join(personaDir, "owner");
+    const ownerSrc = path24.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path23.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs21.mkdirSync(ownerDst, { recursive: true });
+      const ownerDst = path24.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      fs22.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs21.renameSync(path23.join(ownerSrc, file), path23.join(ownerDst, file));
+        fs22.renameSync(path24.join(ownerSrc, file), path24.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path23.join(personaDir, "listener");
+    const listenerSrc = path24.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path23.join(dataDir, ".legacy", `listener-${pid}`);
-      fs21.mkdirSync(archiveDst, { recursive: true });
+      const archiveDst = path24.join(dataDir, ".legacy", `listener-${pid}`);
+      fs22.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs21.renameSync(path23.join(listenerSrc, file), path23.join(archiveDst, file));
+        fs22.renameSync(path24.join(listenerSrc, file), path24.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs21.mkdirSync(sessionsDir, { recursive: true });
-  fs21.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs22.mkdirSync(sessionsDir, { recursive: true });
+  fs22.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -27162,7 +27203,7 @@ function migrateFlattenSessions(opts) {
 }
 function existsSync3(p2) {
   try {
-    fs21.statSync(p2);
+    fs22.statSync(p2);
     return true;
   } catch {
     return false;
@@ -27170,31 +27211,31 @@ function existsSync3(p2) {
 }
 function isDir(p2) {
   try {
-    return fs21.statSync(p2).isDirectory();
+    return fs22.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p2) {
   try {
-    return fs21.readdirSync(p2);
+    return fs22.readdirSync(p2);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p2) {
   try {
-    fs21.rmdirSync(p2);
+    fs22.rmdirSync(p2);
   } catch {
   }
 }
 
 // src/transport/http-router.ts
-var import_node_fs16 = __toESM(require("fs"), 1);
-var import_node_path18 = __toESM(require("path"), 1);
+var import_node_fs17 = __toESM(require("fs"), 1);
+var import_node_path19 = __toESM(require("path"), 1);
 
 // src/attachment/mime.ts
-var import_node_path16 = __toESM(require("path"), 1);
+var import_node_path17 = __toESM(require("path"), 1);
 var TEXT_PLAIN = "text/plain; charset=utf-8";
 var EXT_TO_NATIVE_MIME = {
   // 图片
@@ -27301,7 +27342,7 @@ var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
   ".mk"
 ]);
 function lookupMime(filePathOrName) {
-  const ext = import_node_path16.default.extname(filePathOrName).toLowerCase();
+  const ext = import_node_path17.default.extname(filePathOrName).toLowerCase();
   if (EXT_TO_NATIVE_MIME[ext]) return EXT_TO_NATIVE_MIME[ext];
   if (TEXT_EXTENSIONS.has(ext)) return TEXT_PLAIN;
   return "application/octet-stream";
@@ -27370,8 +27411,8 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
 }
 
 // src/attachment/upload.ts
-var import_node_fs15 = __toESM(require("fs"), 1);
-var import_node_path17 = __toESM(require("path"), 1);
+var import_node_fs16 = __toESM(require("fs"), 1);
+var import_node_path18 = __toESM(require("path"), 1);
 var import_node_crypto6 = __toESM(require("crypto"), 1);
 var import_promises = require("stream/promises");
 var UploadError = class extends Error {
@@ -27383,22 +27424,22 @@ var UploadError = class extends Error {
   code;
 };
 function assertValidFileName(fileName) {
-  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path17.default.basename(fileName)) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path18.default.basename(fileName)) {
     throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
   }
 }
 var HASH_PREFIX_LEN = 16;
 async function writeUploadedAttachment(args) {
   assertValidFileName(args.fileName);
-  const attachmentsRoot = import_node_path17.default.join(args.sessionDir, ".attachments");
+  const attachmentsRoot = import_node_path18.default.join(args.sessionDir, ".attachments");
   try {
-    import_node_fs15.default.mkdirSync(attachmentsRoot, { recursive: true });
+    import_node_fs16.default.mkdirSync(attachmentsRoot, { recursive: true });
   } catch (err) {
     throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
   }
   const hasher = import_node_crypto6.default.createHash("sha256");
   let actualSize = 0;
-  const tmpPath = import_node_path17.default.join(
+  const tmpPath = import_node_path18.default.join(
     attachmentsRoot,
     `.upload-${process.pid}-${Date.now()}-${import_node_crypto6.default.randomBytes(4).toString("hex")}`
   );
@@ -27413,18 +27454,18 @@ async function writeUploadedAttachment(args) {
           yield buf;
         }
       },
-      import_node_fs15.default.createWriteStream(tmpPath, { mode: 384 })
+      import_node_fs16.default.createWriteStream(tmpPath, { mode: 384 })
     );
   } catch (err) {
     try {
-      import_node_fs15.default.unlinkSync(tmpPath);
+      import_node_fs16.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError("STORAGE_ERROR", `write failed: ${err.message}`);
   }
   if (actualSize !== args.contentLength) {
     try {
-      import_node_fs15.default.unlinkSync(tmpPath);
+      import_node_fs16.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError(
@@ -27433,35 +27474,35 @@ async function writeUploadedAttachment(args) {
     );
   }
   const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
-  const hashDir = import_node_path17.default.join(attachmentsRoot, attachmentId);
+  const hashDir = import_node_path18.default.join(attachmentsRoot, attachmentId);
   let finalFileName;
   let hashDirExists = false;
   try {
-    hashDirExists = import_node_fs15.default.statSync(hashDir).isDirectory();
+    hashDirExists = import_node_fs16.default.statSync(hashDir).isDirectory();
   } catch {
   }
   if (hashDirExists) {
-    const existing = import_node_fs15.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
+    const existing = import_node_fs16.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
     finalFileName = existing[0] ?? args.fileName;
     try {
-      import_node_fs15.default.unlinkSync(tmpPath);
+      import_node_fs16.default.unlinkSync(tmpPath);
     } catch {
     }
   } else {
     try {
-      import_node_fs15.default.mkdirSync(hashDir, { recursive: true });
+      import_node_fs16.default.mkdirSync(hashDir, { recursive: true });
       finalFileName = args.fileName;
-      import_node_fs15.default.renameSync(tmpPath, import_node_path17.default.join(hashDir, finalFileName));
+      import_node_fs16.default.renameSync(tmpPath, import_node_path18.default.join(hashDir, finalFileName));
     } catch (err) {
       try {
-        import_node_fs15.default.unlinkSync(tmpPath);
+        import_node_fs16.default.unlinkSync(tmpPath);
       } catch {
       }
       throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
     }
   }
-  const absPath = import_node_path17.default.join(hashDir, finalFileName);
-  const relPath = import_node_path17.default.relative(args.sessionDir, absPath);
+  const absPath = import_node_path18.default.join(hashDir, finalFileName);
+  const relPath = import_node_path18.default.relative(args.sessionDir, absPath);
   args.groupFileStore.upsert(args.scope, args.sessionId, {
     relPath: absPath,
     // 存绝对路径，与现有 agent 入清单的形态一致（attachment.ts:144 双形态兼容）
@@ -27498,7 +27539,7 @@ function isValidUploadFileName(fileName) {
   if (fileName === "." || fileName === "..") return false;
   if (fileName.startsWith(".")) return false;
   if (fileName.includes("/") || fileName.includes("\\")) return false;
-  return fileName === import_node_path18.default.basename(fileName);
+  return fileName === import_node_path19.default.basename(fileName);
 }
 function createHttpRouter(deps) {
   return async (req, res) => {
@@ -27668,7 +27709,7 @@ function createHttpRouter(deps) {
         return true;
       }
       let absPath;
-      if (import_node_path18.default.isAbsolute(pathParam)) {
+      if (import_node_path19.default.isAbsolute(pathParam)) {
         absPath = pathParam;
       } else if (deps.sessionStore) {
         const file = deps.sessionStore.read(sid);
@@ -27676,7 +27717,7 @@ function createHttpRouter(deps) {
           sendJson(res, 404, { code: "NOT_FOUND", message: `session ${sid} not found` });
           return true;
         }
-        absPath = import_node_path18.default.join(file.cwd, pathParam);
+        absPath = import_node_path19.default.join(file.cwd, pathParam);
       } else {
         sendJson(res, 501, withCtx(ctx, { code: "NOT_IMPLEMENTED", message: "sessionStore not wired" }));
         return true;
@@ -27709,7 +27750,7 @@ function withCtx(ctx, body) {
 function streamFile(res, absPath, logger) {
   let stat;
   try {
-    stat = import_node_fs16.default.statSync(absPath);
+    stat = import_node_fs17.default.statSync(absPath);
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") {
@@ -27724,7 +27765,7 @@ function streamFile(res, absPath, logger) {
     return;
   }
   const mime = lookupMime(absPath);
-  const basename = import_node_path18.default.basename(absPath);
+  const basename = import_node_path19.default.basename(absPath);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": String(stat.size),
@@ -27732,7 +27773,7 @@ function streamFile(res, absPath, logger) {
     // 防止浏览器把任意 mime 当 html 渲染
     "X-Content-Type-Options": "nosniff"
   });
-  const stream = import_node_fs16.default.createReadStream(absPath);
+  const stream = import_node_fs17.default.createReadStream(absPath);
   stream.on("error", (err) => {
     logger?.warn("streamFile read error", { absPath, err: err.message });
     res.destroy();
@@ -27741,8 +27782,8 @@ function streamFile(res, absPath, logger) {
 }
 
 // src/attachment/gc.ts
-var import_node_fs17 = __toESM(require("fs"), 1);
-var import_node_path19 = __toESM(require("path"), 1);
+var import_node_fs18 = __toESM(require("fs"), 1);
+var import_node_path20 = __toESM(require("path"), 1);
 var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
 function runAttachmentGc(args) {
   const now = (args.now ?? Date.now)();
@@ -27751,38 +27792,38 @@ function runAttachmentGc(args) {
   for (const { scope, sessionId } of args.sessionScopes) {
     for (const entry of args.groupFileStore.list(scope, sessionId)) {
       if (entry.stale) continue;
-      if (import_node_path19.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+      if (import_node_path20.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
     }
   }
   for (const { scope, sessionId } of args.sessionScopes) {
-    const sessionDir = args.getSessionCwd?.(sessionId) ?? import_node_path19.default.join(
+    const sessionDir = args.getSessionCwd?.(sessionId) ?? import_node_path20.default.join(
       args.dataDir,
       "sessions",
       ...scopeSubPath(scope).map(safeFileName),
       safeFileName(sessionId)
     );
-    const attRoot = import_node_path19.default.join(sessionDir, ".attachments");
+    const attRoot = import_node_path20.default.join(sessionDir, ".attachments");
     let hashDirs;
     try {
-      hashDirs = import_node_fs17.default.readdirSync(attRoot);
+      hashDirs = import_node_fs18.default.readdirSync(attRoot);
     } catch (err) {
       if (err.code === "ENOENT") continue;
       args.logger?.warn("attachment gc: readdir failed", { attRoot, err: err.message });
       continue;
     }
     for (const hashDir of hashDirs) {
-      const hashDirAbs = import_node_path19.default.join(attRoot, hashDir);
+      const hashDirAbs = import_node_path20.default.join(attRoot, hashDir);
       let files;
       try {
-        files = import_node_fs17.default.readdirSync(hashDirAbs);
+        files = import_node_fs18.default.readdirSync(hashDirAbs);
       } catch {
         continue;
       }
       for (const name of files) {
-        const file = import_node_path19.default.join(hashDirAbs, name);
+        const file = import_node_path20.default.join(hashDirAbs, name);
         let stat;
         try {
-          stat = import_node_fs17.default.statSync(file);
+          stat = import_node_fs18.default.statSync(file);
         } catch {
           continue;
         }
@@ -27791,26 +27832,26 @@ function runAttachmentGc(args) {
         if (age < ttlMs) continue;
         if (liveAbs.has(file)) continue;
         try {
-          import_node_fs17.default.unlinkSync(file);
+          import_node_fs18.default.unlinkSync(file);
         } catch (err) {
           args.logger?.warn("attachment gc: unlink failed", { file, err: err.message });
         }
       }
       try {
-        if (import_node_fs17.default.readdirSync(hashDirAbs).length === 0) import_node_fs17.default.rmdirSync(hashDirAbs);
+        if (import_node_fs18.default.readdirSync(hashDirAbs).length === 0) import_node_fs18.default.rmdirSync(hashDirAbs);
       } catch {
       }
     }
     try {
-      if (import_node_fs17.default.readdirSync(attRoot).length === 0) import_node_fs17.default.rmdirSync(attRoot);
+      if (import_node_fs18.default.readdirSync(attRoot).length === 0) import_node_fs18.default.rmdirSync(attRoot);
     } catch {
     }
   }
 }
 
 // src/attachment/group.ts
-var import_node_fs18 = __toESM(require("fs"), 1);
-var import_node_path20 = __toESM(require("path"), 1);
+var import_node_fs19 = __toESM(require("fs"), 1);
+var import_node_path21 = __toESM(require("path"), 1);
 var import_node_crypto7 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
@@ -27822,11 +27863,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path20.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path21.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path20.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path21.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -27835,7 +27876,7 @@ var GroupFileStore = class {
   readFile(scope, sessionId) {
     const file = this.filePath(scope, sessionId);
     try {
-      const raw = import_node_fs18.default.readFileSync(file, "utf8");
+      const raw = import_node_fs19.default.readFileSync(file, "utf8");
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) {
         this.logger?.warn("GroupFileStore.readFile: not an array; resetting session entries", {
@@ -27861,10 +27902,10 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs18.default.mkdirSync(import_node_path20.default.dirname(file), { recursive: true });
+    import_node_fs19.default.mkdirSync(import_node_path21.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs18.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
-    import_node_fs18.default.renameSync(tmp, file);
+    import_node_fs19.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
+    import_node_fs19.default.renameSync(tmp, file);
   }
   /** 拉一份当前 session 的清单。读盘 → cache；之后调用复用 cache */
   list(scope, sessionId) {
@@ -27950,10 +27991,10 @@ var GroupFileStore = class {
 };
 
 // src/discovery/state-file.ts
-var import_node_fs19 = __toESM(require("fs"), 1);
-var import_node_path21 = __toESM(require("path"), 1);
+var import_node_fs20 = __toESM(require("fs"), 1);
+var import_node_path22 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path21.default.join(dataDir, "state.json");
+  return import_node_path22.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -27975,7 +28016,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs19.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs20.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -27989,34 +28030,34 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs19.default.mkdirSync(import_node_path21.default.dirname(this.file), { recursive: true });
+    import_node_fs20.default.mkdirSync(import_node_path22.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs19.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs19.default.renameSync(tmp, this.file);
+    import_node_fs20.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs20.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs19.default.chmodSync(this.file, 384);
+        import_node_fs20.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs19.default.unlinkSync(this.file);
+      import_node_fs20.default.unlinkSync(this.file);
     } catch {
     }
   }
 };
 
 // src/tunnel/tunnel-manager.ts
-var import_node_fs23 = __toESM(require("fs"), 1);
-var import_node_path25 = __toESM(require("path"), 1);
+var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_path26 = __toESM(require("path"), 1);
 var import_node_crypto8 = __toESM(require("crypto"), 1);
 var import_node_child_process5 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
-var import_node_fs20 = __toESM(require("fs"), 1);
-var import_node_path22 = __toESM(require("path"), 1);
+var import_node_fs21 = __toESM(require("fs"), 1);
+var import_node_path23 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -28024,7 +28065,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs20.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs21.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -28035,22 +28076,22 @@ var TunnelStore = class {
     }
   }
   async set(v2) {
-    const dir = import_node_path22.default.dirname(this.filePath);
-    await import_node_fs20.default.promises.mkdir(dir, { recursive: true });
+    const dir = import_node_path23.default.dirname(this.filePath);
+    await import_node_fs21.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs20.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs21.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs20.default.promises.chmod(tmp, 384);
+        await import_node_fs21.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs20.default.promises.rename(tmp, this.filePath);
+    await import_node_fs21.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs20.default.promises.unlink(this.filePath);
+      await import_node_fs21.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -28145,9 +28186,9 @@ function escape(v2) {
 }
 
 // src/tunnel/frpc-binary.ts
-var import_node_fs21 = __toESM(require("fs"), 1);
+var import_node_fs22 = __toESM(require("fs"), 1);
 var import_node_os10 = __toESM(require("os"), 1);
-var import_node_path23 = __toESM(require("path"), 1);
+var import_node_path24 = __toESM(require("path"), 1);
 var import_node_child_process3 = require("child_process");
 var import_node_stream2 = require("stream");
 var import_promises2 = require("stream/promises");
@@ -28179,20 +28220,20 @@ function frpcDownloadUrl(version2, p2) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs21.default.existsSync(opts.override)) {
+    if (!import_node_fs22.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path23.default.join(opts.dataDir, "bin");
-  import_node_fs21.default.mkdirSync(binDir, { recursive: true });
+  const binDir = import_node_path24.default.join(opts.dataDir, "bin");
+  import_node_fs22.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path23.default.join(binDir, "frpc");
-  if (import_node_fs21.default.existsSync(stableBin)) return stableBin;
+  const stableBin = import_node_path24.default.join(binDir, "frpc");
+  if (import_node_fs22.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path23.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path24.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -28201,8 +28242,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs21.default.chmodSync(partialBin, 493);
-    import_node_fs21.default.renameSync(partialBin, stableBin);
+    import_node_fs22.default.chmodSync(partialBin, 493);
+    import_node_fs22.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -28212,15 +28253,15 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs21.default.readdirSync(binDir);
+    entries = import_node_fs22.default.readdirSync(binDir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path23.default.join(binDir, name);
+      const full = import_node_path24.default.join(binDir, name);
       try {
-        import_node_fs21.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs22.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -28228,7 +28269,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p2) {
   try {
-    import_node_fs21.default.unlinkSync(p2);
+    import_node_fs22.default.unlinkSync(p2);
   } catch {
   }
 }
@@ -28239,13 +28280,13 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs21.default.createWriteStream(dest);
+  const out = import_node_fs22.default.createWriteStream(dest);
   const nodeStream = import_node_stream2.Readable.fromWeb(res.body);
   await (0, import_promises2.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path23.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs21.default.mkdirSync(work, { recursive: true });
+  const work = import_node_path24.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  import_node_fs22.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve6, reject) => {
       const proc = (0, import_node_child_process3.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
@@ -28253,32 +28294,32 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
       proc.on("exit", (code) => code === 0 ? resolve6() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path23.default.join(work, dirName, "frpc");
-    if (!import_node_fs21.default.existsSync(src)) {
+    const src = import_node_path24.default.join(work, dirName, "frpc");
+    if (!import_node_fs22.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs21.default.copyFileSync(src, destBin);
+    import_node_fs22.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs21.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs22.default.rmSync(work, { recursive: true, force: true });
   }
 }
 
 // src/tunnel/frpc-process.ts
-var import_node_fs22 = __toESM(require("fs"), 1);
-var import_node_path24 = __toESM(require("path"), 1);
+var import_node_fs23 = __toESM(require("fs"), 1);
+var import_node_path25 = __toESM(require("path"), 1);
 var import_node_child_process4 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path24.default.join(dataDir, "frpc.pid");
+  return import_node_path25.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
-    import_node_fs22.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
+    import_node_fs23.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearFrpcPid(dataDir) {
   try {
-    import_node_fs22.default.unlinkSync(frpcPidFilePath(dataDir));
+    import_node_fs23.default.unlinkSync(frpcPidFilePath(dataDir));
   } catch {
   }
 }
@@ -28294,7 +28335,7 @@ function defaultIsPidAlive(pid) {
 }
 function defaultReadPidFile(file) {
   try {
-    return import_node_fs22.default.readFileSync(file, "utf8");
+    return import_node_fs23.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -28310,7 +28351,7 @@ function defaultSleep(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path24.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path25.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -28334,7 +28375,7 @@ async function killStaleFrpc(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs22.default.unlinkSync(pidFile);
+      import_node_fs23.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -28345,7 +28386,7 @@ async function killStaleFrpc(deps) {
   }
   await sleep(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs22.default.unlinkSync(pidFile);
+    import_node_fs23.default.unlinkSync(pidFile);
   } catch {
   }
 }
@@ -28382,7 +28423,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path25.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path26.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -28509,7 +28550,7 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path25.default.join(this.deps.dataDir, "frpc.toml");
+      const tomlPath = import_node_path26.default.join(this.deps.dataDir, "frpc.toml");
       const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto8.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
@@ -28520,12 +28561,12 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs23.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      await import_node_fs24.default.promises.writeFile(tomlPath, toml, { mode: 384 });
       const proc = (this.deps.spawnImpl ?? import_node_child_process5.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logFilePath = import_node_path25.default.join(this.deps.dataDir, "frpc.log");
-      const logStream = import_node_fs23.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logFilePath = import_node_path26.default.join(this.deps.dataDir, "frpc.log");
+      const logStream = import_node_fs24.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -28618,12 +28659,12 @@ function deriveStableDeviceKey(opts = {}) {
 }
 
 // src/auth-store.ts
-var import_node_fs24 = __toESM(require("fs"), 1);
-var import_node_path26 = __toESM(require("path"), 1);
+var import_node_fs25 = __toESM(require("fs"), 1);
+var import_node_path27 = __toESM(require("path"), 1);
 var import_node_crypto10 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path26.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path27.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -28655,7 +28696,7 @@ function defaultGenerateOwnerPrincipalId() {
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs24.default.readFileSync(file, "utf8");
+    const raw = import_node_fs25.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -28673,25 +28714,25 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs24.default.mkdirSync(import_node_path26.default.dirname(file), { recursive: true });
-  import_node_fs24.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs25.default.mkdirSync(import_node_path27.default.dirname(file), { recursive: true });
+  import_node_fs25.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs24.default.chmodSync(file, 384);
+    import_node_fs25.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs25 = __toESM(require("fs"), 1);
+var import_node_fs26 = __toESM(require("fs"), 1);
 var import_node_os12 = __toESM(require("os"), 1);
-var import_node_path27 = __toESM(require("path"), 1);
+var import_node_path28 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function loadOwnerDisplayName(dataDir) {
   const fallback = import_node_os12.default.userInfo().username;
-  const profilePath = import_node_path27.default.join(dataDir, PROFILE_FILENAME);
+  const profilePath = import_node_path28.default.join(dataDir, PROFILE_FILENAME);
   let raw;
   try {
-    raw = import_node_fs25.default.readFileSync(profilePath, "utf8");
+    raw = import_node_fs26.default.readFileSync(profilePath, "utf8");
   } catch {
     return fallback;
   }
@@ -28720,12 +28761,12 @@ init_protocol();
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_fs27 = __toESM(require("fs"), 1);
 var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path28 = __toESM(require("path"), 1);
+var import_node_path29 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs26.default.readFileSync(file, "utf8");
+  const raw = import_node_fs27.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -28738,10 +28779,10 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path28.default.join(import_node_os13.default.homedir(), ".claude");
-  const projectDir = import_node_path28.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  const sourceFile = import_node_path28.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs26.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path29.default.join(import_node_os13.default.homedir(), ".claude");
+  const projectDir = import_node_path29.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  const sourceFile = import_node_path29.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs27.default.existsSync(sourceFile)) {
     throw new Error(`fork: source transcript not found: ${sourceFile}`);
   }
   const entries = readJsonlEntries(sourceFile);
@@ -28771,9 +28812,9 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const forkedFilePath = import_node_path28.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs26.default.mkdirSync(projectDir, { recursive: true });
-  import_node_fs26.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const forkedFilePath = import_node_path29.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs27.default.mkdirSync(projectDir, { recursive: true });
+  import_node_fs27.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
@@ -29061,28 +29102,6 @@ function buildSessionHandlers(deps) {
       }
     };
   };
-  const peerSessionUpsert = async (frame, _client, ctx) => {
-    if (ctx && ctx.principal.kind !== "owner") {
-      throw new ClawdError(
-        ERROR_CODES.UNAUTHORIZED,
-        `principal ${ctx.principal.kind}:${ctx.principal.id} cannot peerSession:upsert`
-      );
-    }
-    const file = PeerSessionUpsertArgs.parse(frame);
-    manager.mirrorUpsert(file);
-    return { response: { type: "peerSession:upsert:ok" }, broadcast: [] };
-  };
-  const peerSessionRemove = async (frame, _client, ctx) => {
-    if (ctx && ctx.principal.kind !== "owner") {
-      throw new ClawdError(
-        ERROR_CODES.UNAUTHORIZED,
-        `principal ${ctx.principal.kind}:${ctx.principal.id} cannot peerSession:remove`
-      );
-    }
-    const args = PeerSessionRemoveArgs.parse(frame);
-    manager.mirrorRemove(args.sessionId);
-    return { response: { type: "peerSession:remove:ok" }, broadcast: [] };
-  };
   return {
     "session:create": create,
     "session:list": list,
@@ -29108,9 +29127,7 @@ function buildSessionHandlers(deps) {
     "session:cancelQuestion": cancelQuestion,
     "session:pty:input": ptyInput,
     "session:pty:resize": ptyResize,
-    "session:pty:snapshot": ptySnapshot,
-    "peerSession:upsert": peerSessionUpsert,
-    "peerSession:remove": peerSessionRemove
+    "session:pty:snapshot": ptySnapshot
   };
 }
 
@@ -29129,7 +29146,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path38 = __toESM(require("path"), 1);
+var path39 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -29147,7 +29164,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path37 = __toESM(require("path"), 1);
+var path38 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -29160,26 +29177,26 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read") {
-  const root = path37.resolve(personaRoot);
-  const target = path37.resolve(absPath);
-  const sep3 = root.endsWith(path37.sep) ? "" : path37.sep;
+  const root = path38.resolve(personaRoot);
+  const target = path38.resolve(absPath);
+  const sep3 = root.endsWith(path38.sep) ? "" : path38.sep;
   if (!target.startsWith(root + sep3)) return false;
-  const rel = path37.relative(root, target);
+  const rel = path38.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId = rel.split(path37.sep)[0];
+  const personaId = rel.split(path38.sep)[0];
   if (!personaId) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path37.resolve(personaRoot);
-  const target = path37.resolve(absPath);
-  const sep3 = root.endsWith(path37.sep) ? "" : path37.sep;
+  const root = path38.resolve(personaRoot);
+  const target = path38.resolve(absPath);
+  const sep3 = root.endsWith(path38.sep) ? "" : path38.sep;
   if (!target.startsWith(root + sep3)) return null;
-  const rel = path37.relative(root, target);
+  const rel = path38.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path37.sep)[0];
+  const id = rel.split(path38.sep)[0];
   return id || null;
 }
 
@@ -29204,7 +29221,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path38.join(personaRoot, pid),
+          path39.join(personaRoot, pid),
           personaRoot,
           "read"
         );
@@ -29215,7 +29232,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path38.resolve(args.projectPath), personaRoot, "history:list");
+    assertGuestPath(ctx, path39.resolve(args.projectPath), personaRoot, "history:list");
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -29247,13 +29264,13 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path38.resolve(args.cwd), personaRoot, "history:subagents");
+    assertGuestPath(ctx, path39.resolve(args.cwd), personaRoot, "history:subagents");
     const subs = await history.listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path38.resolve(args.cwd), personaRoot, "history:subagent-read");
+    assertGuestPath(ctx, path39.resolve(args.cwd), personaRoot, "history:subagent-read");
     const res = await history.readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
   };
@@ -29261,7 +29278,7 @@ function buildHistoryHandlers(deps) {
     const dirs = listRecentDirs(store);
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path38.resolve(d.cwd), personaRoot, "read")
+        (d) => isGuestPathAllowed(ctx.grants, path39.resolve(d.cwd), personaRoot, "read")
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -29278,7 +29295,7 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path39 = __toESM(require("path"), 1);
+var path40 = __toESM(require("path"), 1);
 var os14 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
@@ -29319,22 +29336,22 @@ function buildWorkspaceHandlers(deps) {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
     const fallbackCwd = isGuest && personaRoot ? personaRoot : os14.homedir();
-    const resolvedCwd = path39.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path39.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const resolvedCwd = path40.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path40.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list");
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path39.isAbsolute(args.path) ? path39.resolve(args.path) : path39.resolve(args.cwd, args.path);
+    const target = path40.isAbsolute(args.path) ? path40.resolve(args.path) : path40.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read");
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path39.resolve(args.cwd);
+    const cwdAbs = path40.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list");
     const list2 = skills.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -29346,7 +29363,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path39.resolve(args.cwd);
+    const cwdAbs = path40.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list");
     const list2 = agents.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -29365,20 +29382,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path41 = __toESM(require("path"), 1);
+var path42 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process6 = require("child_process");
-var import_node_fs27 = __toESM(require("fs"), 1);
-var import_node_path29 = __toESM(require("path"), 1);
+var import_node_fs28 = __toESM(require("fs"), 1);
+var import_node_path30 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process6.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path29.default.resolve(p2);
+  const resolved = import_node_path30.default.resolve(p2);
   try {
-    return import_node_fs27.default.realpathSync(resolved);
+    return import_node_fs28.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -29451,7 +29468,7 @@ async function listGitBranches(cwd) {
 // src/handlers/git.ts
 function assertGuestCwd(ctx, cwd, personaRoot, method) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
-  if (!isGuestPathAllowed(ctx.grants, path41.resolve(cwd), personaRoot, "read")) {
+  if (!isGuestPathAllowed(ctx.grants, path42.resolve(cwd), personaRoot, "read")) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -29938,7 +29955,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path30 = __toESM(require("path"), 1);
+var import_node_path31 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -29992,12 +30009,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path30.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path30.default.isAbsolute(args.relPath) ? import_node_path30.default.resolve(args.relPath) : import_node_path30.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path31.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path31.default.isAbsolute(args.relPath) ? import_node_path31.default.resolve(args.relPath) : import_node_path31.default.resolve(cwdAbs, args.relPath);
     assertGuestAttachmentPath(ctx, candidateAbs, deps.personaRoot, "attachment.signUrl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path30.default.isAbsolute(e.relPath) ? import_node_path30.default.resolve(e.relPath) : import_node_path30.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path31.default.isAbsolute(e.relPath) ? import_node_path31.default.resolve(e.relPath) : import_node_path31.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -30021,7 +30038,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path30.default.resolve(f.cwd), deps.personaRoot, method);
+    assertGuestAttachmentPath(ctx, import_node_path31.default.resolve(f.cwd), deps.personaRoot, method);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -30188,11 +30205,6 @@ var METHOD_GRANT_MAP = {
   "session:pin": CAPABILITY_SCOPED,
   "session:reorderPins": ADMIN_ANY,
   // owner 全局操作，无 personaId 维度
-  // mirror peer sessions (2026-05-26)：owner-only — guest 不应能写/删本机 mirror SessionFile
-  // (会绕过 #739 隔离规则把伪造身份的 SessionFile 写进 default store)。handler 端内部 ctx
-  // 校验，dispatcher 层一刀切 admin 也兜底。
-  "peerSession:upsert": ADMIN_ANY,
-  "peerSession:remove": ADMIN_ANY,
   "permission:respond": CAPABILITY_SCOPED,
   "session:answerQuestion": CAPABILITY_SCOPED,
   "session:cancelQuestion": CAPABILITY_SCOPED,
@@ -30263,7 +30275,7 @@ function computeGrantForFrame(method, frame) {
 async function startDaemon(config) {
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path31.default.join(config.dataDir, "clawd.log")
+    file: import_node_path32.default.join(config.dataDir, "clawd.log")
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const stateMgr = new StateFileManager({ dataDir: config.dataDir });
@@ -30350,7 +30362,7 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path31.default.join(config.dataDir, "personas"));
+  const personaStore = new PersonaStore(import_node_path32.default.join(config.dataDir, "personas"));
   const defaultsRoot = findDefaultsRoot();
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -30367,7 +30379,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path31.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path32.default.join(config.dataDir, "personas"),
     personaStore,
     ownerDisplayName,
     ownerPrincipalId,
@@ -30391,10 +30403,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path31.default.isAbsolute(input.relPath) ? input.relPath : import_node_path31.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path32.default.isAbsolute(input.relPath) ? input.relPath : import_node_path32.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs28.default.statSync(absPath).size;
+          size = import_node_fs29.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -30512,10 +30524,10 @@ async function startDaemon(config) {
       // 'persona/<pid>/owner'，default 走 'default'。
       getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
       // guest path guard：candidate 必须在 personaRoot 子树下
-      personaRoot: import_node_path31.default.join(config.dataDir, "personas")
+      personaRoot: import_node_path32.default.join(config.dataDir, "personas")
     },
     // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-    personaRoot: import_node_path31.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path32.default.join(config.dataDir, "personas"),
     // capability:list / delete handler 依赖
     capabilityManager,
     // personal-cap:get 返回的 shareBaseUrl 用此 base URL：
@@ -30608,6 +30620,7 @@ async function startDaemon(config) {
     // 形状与 reducer permission_request 分支构造的 session:question 帧一致；UI 不区分
     // 首播 vs 重放（last-write-wins，详见 protocol/events.ts JSDoc）。
     onSubscribe: (client, sessionId) => {
+      probeEvent("subscribe", { sid: sessionId });
       const runner = manager.getActive(sessionId);
       if (!runner) return;
       const pendingQuestions = runner.getState().pendingQuestions ?? {};
@@ -30728,8 +30741,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path31.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path31.default.join(config.dataDir, "frpc.log")}`
+        `Frpc config: ${import_node_path32.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path32.default.join(config.dataDir, "frpc.log")}`
       ];
       const width = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width + 4);
@@ -30742,8 +30755,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path31.default.join(config.dataDir, "connect.txt");
-        import_node_fs28.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path32.default.join(config.dataDir, "connect.txt");
+        import_node_fs29.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -30808,9 +30821,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path31.default.join(dataDir, "persons");
+  const dir = import_node_path32.default.join(dataDir, "persons");
   try {
-    import_node_fs28.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs29.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }