npm - @clawos-dev/clawd - Versions diffs - 0.2.112-beta.215.872b507 → 0.2.112-beta.216.545c7ca - Mend

@clawos-dev/clawd 0.2.112-beta.215.872b507 → 0.2.112-beta.216.545c7ca

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2) hide show

package/dist/cli.cjs +779 -758
package/package.json +1 -1

package/dist/cli.cjs CHANGED Viewed

@@ -132,15 +132,11 @@ var init_methods = __esm({
       "attachment.groupRemove",
       "attachment.groupList",
       // ---- capability:* (capability platform 鉴权底座) ----
-      // global personal token 模型 (2026-05-25): UI 不再调 capability:issue —— daemon 启动时
-      // loadOrCreatePersonalCapability 自动创建 1 张 fixed-grants 的 personal capability,
-      // 所有联系人共用 personal token。capability:list / capability:delete 保留 (供调试 /
-      // 老板手动清旧 cap)；capability:issue / capability:bindPeer 已下线。
+      // 飞书统一身份 Phase 2 (2026-06-01, spec 决策 #12): personal token / 邀请码全链路删除——
+      // hub 已完整替代（中心 server 签发 per-hub connect token）。capability:list / capability:delete
+      // 保留：调试 + whoami 反查 + 撤销级联 + 清旧 per-peer cap。personal-cap:get 已下线。
       "capability:list",
       "capability:delete",
-      // global personal token (2026-05-25): UI invite/accept dialog 挂载即调，拿 personal
-      // token + capability + shareBaseUrl 用于拼 inviteUrl / autoAttach 反向推。owner-only。
-      "personal-cap:get",
       // ---- inbox:* (capability platform Phase 3 跨用户通知 + Phase 4 DM) ----
       // owner 接 guest 的 cross-principal 消息事件 + DM 双向私聊.
       // inbox:list / markRead: admin-only (Phase 3); inbox:postMessage: DM 自带能力,
@@ -148,14 +144,11 @@ var init_methods = __esm({
       "inbox:list",
       "inbox:markRead",
       "inbox:postMessage",
-      // ---- received-capability:* (对方颁给我的 cap, 视角 B 双向授权模型, 2026-05-23) ----
-      // owner 入口: list / add / remove
-      // guest 端: autoAttach (B 接 A 的 token 后通过 cap channel ws 推 cap 给 A)
-      // 详见 received-capability.ts JSDoc + spec 2026-05-23-bidirectional-cap-design.md
+      // ---- received-capability:* (联系人列表, 视角 B 双向授权模型 2026-05-23) ----
+      // 飞书统一身份 Phase 2 (2026-06-01, spec 决策 #12): 邀请码 add / autoAttach 已删除——
+      // hub:connect 落同一 store + 自动反向（决策 #11）替代。list / remove 保留作联系人列表读删。
       "received-capability:list",
-      "received-capability:add",
       "received-capability:remove",
-      "received-capability:autoAttach",
       // ---- whoami (v2 capability platform) ----
       // 任何 authed connection 都能调；返回 owner 显示名 + 当前 capability wire 形态 +
       // grants 对应的 persona 元数据 (id + displayName)。UI 端 AddRemotePersonaDialog
@@ -687,8 +680,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path60, errorMaps, issueData } = params;
-      const fullPath = [...path60, ...issueData.path || []];
+      const { data, path: path59, errorMaps, issueData } = params;
+      const fullPath = [...path59, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -999,11 +992,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path60, key) {
+      constructor(parent, value, path59, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path60;
+        this._path = path59;
         this._key = key;
       }
       get path() {
@@ -4496,11 +4489,6 @@ var init_persona_schemas = __esm({
         enabled: external_exports.boolean().optional(),
         autoAllowBashIfSandboxed: external_exports.boolean().optional(),
         allowUnsandboxedCommands: external_exports.boolean().optional(),
-        // 开发型 persona 的网络域名白名单：CC 沙箱代理按 hostname 放行（spec 实测 D2）。
-        // 缺省 = 无网络（沙箱代理对所有域名回 403 blocked-by-allowlist）
-        network: external_exports.object({
-          allowedDomains: external_exports.array(external_exports.string()).optional()
-        }).optional(),
         filesystem: external_exports.object({
           denyRead: external_exports.array(external_exports.string()).optional(),
           allowRead: external_exports.array(external_exports.string()).optional(),
@@ -4535,10 +4523,7 @@ var init_persona_schemas = __esm({
         personality: external_exports.string().optional(),
         public: external_exports.boolean().optional(),
         // pass `null` to clear; daemon strips the field from PersonaFile on null
-        iconKey: external_exports.string().nullable().optional(),
-        // 整体替换 sandbox-settings.json 的 sandbox.network.allowedDomains（不是 merge 数组）。
-        // 窄接口设计：daemon 做 read-modify-write，owner 手改的其他 sandbox 字段不被 UI 覆盖
-        networkAllowedDomains: external_exports.array(external_exports.string()).optional()
+        iconKey: external_exports.string().nullable().optional()
       }).strict()
     }).strict();
   }
@@ -5138,7 +5123,17 @@ var init_schemas = __esm({
        * 显示名写入 cap.peerOwnerDisplayName（cap.displayName 本来就是 owner 颁时填
        * 的"颁给谁/用途"，hello 收到的 displayName 是辅助）。
        */
-      selfDisplayName: external_exports.string().optional()
+      selfDisplayName: external_exports.string().optional(),
+      /**
+       * 飞书统一身份 Phase 2（spec 决策 #11，自动反向建立联系人）：guest 自报自己可达的
+       * ws 地址（tunnel 地址优先）。hub introspect 验票成功后，若 guest 带 selfUrl，hub 自动
+       * 把 guest 落入本机 ReceivedCapabilityStore（remoteUrl = selfUrl）+ 广播 received-capability:added，
+       * 让 hub 的 People 立即出现该 guest——双向互为联系人，身份由 introspect 背书不可伪造。
+       *
+       * 缺省（A 无公网地址）→ hub 反向连不上 A，**不**自动建 cap；双向 IM 仅在 A 在线连接
+       * 期间通过该连接收发（spec 决策 #11 限制）。不填假地址（不造假数据）。
+       */
+      selfUrl: external_exports.string().min(1).optional()
     });
     AuthOkFrameSchema = external_exports.object({
       type: external_exports.literal("auth:ok"),
@@ -5228,7 +5223,7 @@ function stripSecretHash(cap) {
   const { secretHash: _hash, ...wire } = cap;
   return wire;
 }
-var ResourceSchema, ActionSchema, GrantSchema, CapabilitySchema, CapabilityWireSchema, CapabilityErrorCodeSchema, WhoamiResponseSchema, PERSONAL_CAP_GRANTS, PersonalCapGetResponseSchema;
+var ResourceSchema, ActionSchema, GrantSchema, CapabilitySchema, CapabilityWireSchema, CapabilityErrorCodeSchema, WhoamiResponseSchema, PERSONAL_CAP_GRANTS;
 var init_capability = __esm({
   "../protocol/src/capability.ts"() {
     "use strict";
@@ -5296,13 +5291,6 @@ var init_capability = __esm({
         actions: Object.freeze(["read", "send"])
       })
     ]);
-    PersonalCapGetResponseSchema = external_exports.object({
-      type: external_exports.literal("personal-cap:get:ok"),
-      token: external_exports.string().min(1),
-      capability: CapabilityWireSchema,
-      /** ws/wss base URL，UI deriveInviteBase 用来拼 inviteUrl（tunnel 优先 / 否则本机 ws） */
-      shareBaseUrl: external_exports.string().min(1)
-    }).strict();
   }
 });
@@ -5338,7 +5326,7 @@ var init_inbox = __esm({
 });
 // ../protocol/src/received-capability.ts
-var ReceivedCapabilitySchema, ReceivedCapabilityWireSchema, ReceivedCapabilityAddArgsSchema, ReceivedCapabilityAddOkSchema, ReceivedCapabilityRemoveArgsSchema, ReceivedCapabilityRemoveOkSchema, ReceivedCapabilityListOkSchema, ReceivedCapabilityAutoAttachArgsSchema, ReceivedCapabilityAutoAttachOkSchema, ReceivedCapabilityAddedFrameSchema, ReceivedCapabilityRemovedFrameSchema;
+var ReceivedCapabilitySchema, ReceivedCapabilityWireSchema, ReceivedCapabilityRemoveArgsSchema, ReceivedCapabilityRemoveOkSchema, ReceivedCapabilityListOkSchema, ReceivedCapabilityAddedFrameSchema, ReceivedCapabilityRemovedFrameSchema;
 var init_received_capability = __esm({
   "../protocol/src/received-capability.ts"() {
     "use strict";
@@ -5349,19 +5337,15 @@ var init_received_capability = __esm({
       ownerDisplayName: external_exports.string(),
       remoteUrl: external_exports.string().min(1),
       capabilityId: external_exports.string().min(1),
-      capabilityToken: external_exports.string().min(1),
+      // Phase 2 自动反向建立联系人（spec 决策 #11）：hub introspect 验票成功后自动落 A 的
+      // received cap，但 hub 不持有 A 颁发的 token（A 从未给 hub 换票）→ connectToken 为空串。
+      // hub:connect 出站路径仍存中心 server 签发的真实 connect token（断线重连复用）。
+      // 不用 .min(1)：自动反向路径合法地存空串，禁止填假 token 占位（不造假数据）。
+      connectToken: external_exports.string(),
       grants: external_exports.array(GrantSchema),
       receivedAt: external_exports.number().int().nonnegative()
     }).strict();
     ReceivedCapabilityWireSchema = ReceivedCapabilitySchema;
-    ReceivedCapabilityAddArgsSchema = external_exports.object({
-      remoteUrl: external_exports.string().min(1),
-      token: external_exports.string().min(1)
-    }).strict();
-    ReceivedCapabilityAddOkSchema = external_exports.object({
-      type: external_exports.literal("received-capability:add:ok"),
-      receivedCap: ReceivedCapabilityWireSchema
-    }).strict();
     ReceivedCapabilityRemoveArgsSchema = external_exports.object({
       ownerPrincipalId: external_exports.string().min(1)
     }).strict();
@@ -5373,17 +5357,6 @@ var init_received_capability = __esm({
       type: external_exports.literal("received-capability:list:ok"),
       receivedCaps: external_exports.array(ReceivedCapabilityWireSchema)
     }).strict();
-    ReceivedCapabilityAutoAttachArgsSchema = external_exports.object({
-      ownerPrincipalId: external_exports.string().min(1),
-      ownerDisplayName: external_exports.string(),
-      remoteUrl: external_exports.string().min(1),
-      capabilityId: external_exports.string().min(1),
-      token: external_exports.string().min(1),
-      grants: external_exports.array(GrantSchema)
-    }).strict();
-    ReceivedCapabilityAutoAttachOkSchema = external_exports.object({
-      type: external_exports.literal("received-capability:autoAttach:ok")
-    }).strict();
     ReceivedCapabilityAddedFrameSchema = external_exports.object({
       type: external_exports.literal("received-capability:added"),
       receivedCap: ReceivedCapabilityWireSchema
@@ -5601,15 +5574,12 @@ var init_feishu_auth = __esm({
     "use strict";
     init_zod();
     FEISHU_GATED_METHODS = [
-      // capability / 邀请码（生成添加码 = 把自己的身份分享出去）
+      // capability（调试 / 撤销，仍属远程身份体系）
       "capability:list",
       "capability:delete",
-      "personal-cap:get",
-      // 联系人（添加朋友 / 联系人列表 / 自动重连）
+      // 联系人列表（hub:connect 落同一 store；list 读 / remove 删）
       "received-capability:list",
-      "received-capability:add",
       "received-capability:remove",
-      "received-capability:autoAttach",
       // DM / 跨用户通知
       "inbox:list",
       "inbox:markRead",
@@ -5636,9 +5606,13 @@ var init_feishu_auth = __esm({
     HubConnectArgsSchema = external_exports.object({
       /** 目标 hub 的 hubId（= hub owner unionId） */
       hubId: external_exports.string().min(1),
-      /** 目标 hub 的 ws/tunnel 地址 */
-      url: external_exports.string().min(1),
-      /** 显示名（公共 hub 来自目录；个人 hub 链接可缺省，连上后用 whoami 回填） */
+      /**
+       * 目标 hub 的 ws/tunnel 地址（决策 #13 统一注册表后改为可选）：
+       *   - 公开目录点击：带 url（hub:list 已下发，省一次 server 查询）
+       *   - 私有 hub 仅凭 hubId 连接：缺省 url → daemon exchange 时由中心 server 下发该 hub 上报的 url
+       */
+      url: external_exports.string().min(1).optional(),
+      /** 显示名（公共 hub 来自目录；私有 hub 缺省，连上后用 whoami 回填） */
       name: external_exports.string().optional()
     });
     HubConnectResponseSchema = external_exports.object({
@@ -5973,8 +5947,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path60 = req.path;
-        _req.url = typeof path60 === "string" ? path60 : req.url ? req.url.path || req.url : void 0;
+        const path59 = req.path;
+        _req.url = typeof path59 === "string" ? path59 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -6139,14 +6113,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path60) {
+    function parsePath(path59) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path60.length; i++) {
-        const char = path60[i];
+      for (let i = 0; i < path59.length; i++) {
+        const char = path59[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -6277,10 +6251,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path60 of paths) {
-        const parts = parsePath(path60);
+      for (const path59 of paths) {
+        const parts = parsePath(path59);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path60, remove);
+          redactWildcardPath(obj, parts, censor, path59, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -6365,8 +6339,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path60) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path60];
+            const wrappedCensor = typeof censor === "function" ? (value, path59) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path59];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -6401,8 +6375,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path60 of pathsToClone) {
-        const parts = parsePath(path60);
+      for (const path59 of pathsToClone) {
+        const parts = parsePath(path59);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -6454,24 +6428,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path60) {
-      if (typeof path60 !== "string") {
+    function validatePath(path59) {
+      if (typeof path59 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path60 === "") {
+      if (path59 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path60.includes("..")) {
-        throw new Error(`Invalid redaction path (${path60})`);
+      if (path59.includes("..")) {
+        throw new Error(`Invalid redaction path (${path59})`);
       }
-      if (path60.includes(",")) {
-        throw new Error(`Invalid redaction path (${path60})`);
+      if (path59.includes(",")) {
+        throw new Error(`Invalid redaction path (${path59})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path60.length; i++) {
-        const char = path60[i];
+      for (let i = 0; i < path59.length; i++) {
+        const char = path59[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -6485,20 +6459,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path60})`);
+            throw new Error(`Invalid redaction path (${path59})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path60})`);
+        throw new Error(`Invalid redaction path (${path59})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path60 of paths) {
-        validatePath(path60);
+      for (const path59 of paths) {
+        validatePath(path59);
       }
     }
     function slowRedact(options = {}) {
@@ -6666,8 +6640,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path60) => {
-            return censor(value, [k2, ...path60]);
+          const wrappedCensor = typeof censor === "function" ? (value, path59) => {
+            return censor(value, [k2, ...path59]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -6885,10 +6859,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs48 = require("fs");
+    var fs47 = require("fs");
     var EventEmitter2 = require("events");
     var inherits = require("util").inherits;
-    var path60 = require("path");
+    var path59 = require("path");
     var sleep = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -6942,20 +6916,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs48.mkdirSync(path60.dirname(file), { recursive: true });
-          const fd = fs48.openSync(file, flags, mode);
+          if (sonic.mkdir) fs47.mkdirSync(path59.dirname(file), { recursive: true });
+          const fd = fs47.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs48.mkdir(path60.dirname(file), { recursive: true }, (err) => {
+        fs47.mkdir(path59.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs48.open(file, flags, mode, fileOpened);
+          fs47.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs48.open(file, flags, mode, fileOpened);
+        fs47.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -6996,8 +6970,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs48.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs48.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs47.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs47.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -7006,15 +6980,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs48.writeSync(this.fd, this._writingBuf);
+            return fs47.writeSync(this.fd, this._writingBuf);
           }
-          return fs48.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs47.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs48.write(this.fd, this._writingBuf, this.release);
+            return fs47.write(this.fd, this._writingBuf, this.release);
           }
-          return fs48.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs47.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -7071,7 +7045,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs48.fsyncSync(this.fd);
+          fs47.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -7185,7 +7159,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs48.fsync(this.fd, (err) => {
+            fs47.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -7287,7 +7261,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs48.close(fd, (err) => {
+          fs47.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -7336,7 +7310,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs48.writeSync(this.fd, buf) : fs48.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs47.writeSync(this.fd, buf) : fs47.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -7352,7 +7326,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs48.fsyncSync(this.fd);
+        fs47.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -7373,7 +7347,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs48.writeSync(this.fd, buf);
+          const n = fs47.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -7401,13 +7375,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs48.writeSync(this.fd, this._writingBuf) : fs48.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs47.writeSync(this.fd, this._writingBuf) : fs47.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs48.write(this.fd, this._writingBuf, release);
+        fs47.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -7416,7 +7390,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs48.writeSync(this.fd, this._writingBuf);
+          const written = fs47.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -7425,7 +7399,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs48.write(this.fd, this._writingBuf, release);
+        fs47.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -7441,12 +7415,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs48.fsync(sonic.fd, closeWrapped);
+        fs47.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs48.close(sonic.fd, done);
+          fs47.close(sonic.fd, done);
         } else {
           done();
         }
@@ -10581,11 +10555,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path60, added, removed, oldPosInc, options) {
-        var last = path60.lastComponent;
+      addToPath: function addToPath(path59, added, removed, oldPosInc, options) {
+        var last = path59.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path60.oldPos + oldPosInc,
+            oldPos: path59.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -10595,7 +10569,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path60.oldPos + oldPosInc,
+            oldPos: path59.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -11041,10 +11015,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path60 = typeof rec.path === "string" ? rec.path : null;
+      const path59 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path60 || content == null) return null;
-      const entry = { path: path60, content };
+      if (!path59 || content == null) return null;
+      const entry = { path: path59, content };
       if (typeof rec.mtimeMs === "number") entry.mtimeMs = rec.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -11875,10 +11849,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path60 = typeof rec.path === "string" ? rec.path : null;
+      const path59 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path60 || content == null) return null;
-      const out = { path: path60, content };
+      if (!path59 || content == null) return null;
+      const out = { path: path59, content };
       if (typeof rec.mtimeMs === "number") out.mtimeMs = rec.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -23667,8 +23641,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path60) {
-      var parts = path60.split("/");
+    exports2.resolve = function(path59) {
+      var parts = path59.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -29521,18 +29495,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path60) {
-      if (path60.slice(-1) === "/") {
-        path60 = path60.substring(0, path60.length - 1);
+    var parentFolder = function(path59) {
+      if (path59.slice(-1) === "/") {
+        path59 = path59.substring(0, path59.length - 1);
       }
-      var lastSlash = path60.lastIndexOf("/");
-      return lastSlash > 0 ? path60.substring(0, lastSlash) : "";
+      var lastSlash = path59.lastIndexOf("/");
+      return lastSlash > 0 ? path59.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path60) {
-      if (path60.slice(-1) !== "/") {
-        path60 += "/";
+    var forceTrailingSlash = function(path59) {
+      if (path59.slice(-1) !== "/") {
+        path59 += "/";
       }
-      return path60;
+      return path59;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -30534,7 +30508,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path46.default.dirname(opts.recordPath);
+  const dir = import_node_path45.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -30548,8 +30522,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs31.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs31.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs30.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs30.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -30574,12 +30548,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs31, import_node_path46;
+var import_node_fs30, import_node_path45;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs31 = __toESM(require("fs"), 1);
-    import_node_path46 = __toESM(require("path"), 1);
+    import_node_fs30 = __toESM(require("fs"), 1);
+    import_node_path45 = __toESM(require("path"), 1);
   }
 });
@@ -30622,7 +30596,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs32.mkdtempSync)(import_node_path47.default.join(import_node_os19.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs31.mkdtempSync)(import_node_path46.default.join(import_node_os19.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -30783,19 +30757,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs32.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs31.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs32, import_node_os19, import_node_path47;
+var import_node_fs31, import_node_os19, import_node_path46;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs32 = require("fs");
+    import_node_fs31 = require("fs");
     import_node_os19 = __toESM(require("os"), 1);
-    import_node_path47 = __toESM(require("path"), 1);
+    import_node_path46 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -31027,8 +31001,8 @@ Env (advanced):
 `;
 // src/index.ts
-var import_node_path45 = __toESM(require("path"), 1);
-var import_node_fs30 = __toESM(require("fs"), 1);
+var import_node_path44 = __toESM(require("path"), 1);
+var import_node_fs29 = __toESM(require("fs"), 1);
 // src/logger.ts
 var import_node_fs2 = __toESM(require("fs"), 1);
@@ -32638,14 +32612,6 @@ function derivePersonaSpawnCwd(file, personaRoot) {
   }
   return import_node_path7.default.join(personaRoot, safeFileName(personaId));
 }
-function deriveGuestWorkspaceCwd(personaId, capId, personaRoot) {
-  if (!personaRoot) {
-    throw new Error(
-      `deriveGuestWorkspaceCwd: personaRoot missing (personaId=${personaId}, capId=${capId})`
-    );
-  }
-  return import_node_path7.default.join(personaRoot, safeFileName(personaId), "workspaces", safeFileName(capId));
-}
 function makeInitialState(file, subSessionMeta) {
   return {
     file,
@@ -33007,38 +32973,17 @@ var SessionManager = class {
   create(args, creatorPrincipalId, creatorOwnerPrincipalId) {
     let cwd;
     if (args.ownerPersonaId) {
-      const probeScope = scopeForFile(
+      cwd = derivePersonaSpawnCwd(
         {
           sessionId: "",
           cwd: args.cwd ?? "",
           tool: "claude",
           ownerPersonaId: args.ownerPersonaId,
-          creatorPrincipalId,
           createdAt: "",
           updatedAt: ""
         },
-        this.deps.ownerPrincipalId
+        this.deps.personaRoot
       );
-      if (probeScope.kind === "persona" && probeScope.mode === "guest") {
-        cwd = deriveGuestWorkspaceCwd(
-          args.ownerPersonaId,
-          probeScope.capId,
-          this.deps.personaRoot
-        );
-        import_node_fs6.default.mkdirSync(cwd, { recursive: true });
-      } else {
-        cwd = derivePersonaSpawnCwd(
-          {
-            sessionId: "",
-            cwd: args.cwd ?? "",
-            tool: "claude",
-            ownerPersonaId: args.ownerPersonaId,
-            createdAt: "",
-            updatedAt: ""
-          },
-          this.deps.personaRoot
-        );
-      }
     } else if (args.cwd) {
       cwd = args.cwd;
     } else {
@@ -34185,35 +34130,6 @@ var PersonaStore = class {
     if (!fs7.existsSync(p2)) return null;
     return fs7.readFileSync(p2, "utf8");
   }
-  /**
-   * Read-modify-write 更新 sandbox.network.allowedDomains（开发型 persona 网络白名单）。
-   *
-   * 只动 network.allowedDomains 一个字段：sandbox-settings.json 是 owner 可手改文件
-   * （manager.spec.ts 锁定 "updating personality does NOT overwrite a customized
-   * sandbox-settings.json"），整文件覆盖会丢手改内容。
-   *
-   * 文件不存在 / JSON 损坏 → 以 DEFAULT_SETTINGS 为底重建。
-   * （损坏文件无法做 merge，与其让 RPC 失败不如重建——读路径 readSandboxSettings
-   * 对损坏返回 null 不修复，写路径必须产出合法文件，两者职责不同。）
-   */
-  updateNetworkAllowedDomains(personaId, domains) {
-    const p2 = this.sandboxSettingsPath(personaId);
-    let current;
-    try {
-      current = JSON.parse(fs7.readFileSync(p2, "utf8"));
-      if (!current || typeof current !== "object" || Array.isArray(current)) {
-        current = structuredClone(DEFAULT_SETTINGS);
-      }
-    } catch {
-      current = structuredClone(DEFAULT_SETTINGS);
-    }
-    const sandboxRaw = current.sandbox;
-    const sandbox = sandboxRaw && typeof sandboxRaw === "object" && !Array.isArray(sandboxRaw) ? sandboxRaw : current.sandbox = {};
-    const networkRaw = sandbox.network;
-    const network = networkRaw && typeof networkRaw === "object" && !Array.isArray(networkRaw) ? networkRaw : sandbox.network = {};
-    network.allowedDomains = domains;
-    this.atomicWrite(p2, JSON.stringify(current, null, 2));
-  }
   /**
    * 读 sandbox-settings.json 当前内容；文件不存在 / JSON 解析失败均返回 null。
    * owner 手改文件可能写出非法形状，daemon 不强校验，UI 拿到 null → 显示空状态。
@@ -34644,20 +34560,6 @@ var PersonaManager = class {
     this.deps.registry.set(updated);
     return updated;
   }
-  /**
-   * 更新开发型 persona 的网络域名白名单（sandbox.network.allowedDomains）。
-   * store 层做 read-modify-write（保留 owner 手改字段）；这里只负责存在性校验 +
-   * touch updatedAt + registry 同步，与 update() 的元数据维护行为一致。
-   */
-  updateNetworkAllowedDomains(personaId, domains) {
-    const existing = this.deps.registry.get(personaId);
-    if (!existing) throw new Error(`persona not found: ${personaId}`);
-    this.deps.store.updateNetworkAllowedDomains(personaId, domains);
-    const updated = { ...existing, updatedAt: Date.now() };
-    this.deps.store.writeMeta(updated);
-    this.deps.registry.set(updated);
-    return updated;
-  }
   /** 读取 CLAUDE.md 内容；persona 目录或文件不存在时返回 null。透传给 handler 拼响应。 */
   readPersonality(personaId) {
     return this.deps.store.readPersonality(personaId);
@@ -36720,7 +36622,9 @@ var LocalWsServer = class {
       this.logger?.warn("ready frame build failed", { err: err.message });
     }
     socket.on("message", (data) => {
-      this.onMessage(handle, data, remoteAddress);
+      void this.onMessage(handle, data, remoteAddress).catch((err) => {
+        this.logger?.warn("onMessage failed", { err: err.message });
+      });
     });
     socket.on("close", () => {
       const c = this.clients.get(id);
@@ -36739,7 +36643,7 @@ var LocalWsServer = class {
       this.logger?.warn("client socket error", { clientId: id, err: err.message });
     });
   }
-  onMessage(client, data, remoteAddress) {
+  async onMessage(client, data, remoteAddress) {
     let frame;
     try {
       frame = JSON.parse(data.toString());
@@ -36750,7 +36654,7 @@ var LocalWsServer = class {
     const authGate = this.opts.authGate;
     if (authGate) {
       const wasAuthed = authGate.isAuthed(client.id);
-      const verdict = authGate.handleFrame({ id: client.id, remoteAddress }, frame);
+      const verdict = await authGate.handleFrame({ id: client.id, remoteAddress }, frame);
       if (verdict !== "pass") {
         if (!wasAuthed && authGate.isAuthed(client.id)) {
           try {
@@ -36853,7 +36757,7 @@ var AuthGate = class {
   registerConnection(handle) {
     const enforce = this.opts.shouldEnforce(handle.remoteAddress);
     if (!enforce) {
-      this.states.set(handle.id, { authed: true, enforce: false, timer: null });
+      this.states.set(handle.id, { authed: true, enforce: false, timer: null, pending: false });
       return true;
     }
     const setT = this.opts.setTimer ?? ((cb, ms) => setTimeout(cb, ms));
@@ -36862,7 +36766,7 @@ var AuthGate = class {
       if (!st || st.authed) return;
       this.opts.closeConnection(handle, 1008, "auth timeout");
     }, this.opts.timeoutMs);
-    this.states.set(handle.id, { authed: false, enforce: true, timer });
+    this.states.set(handle.id, { authed: false, enforce: true, timer, pending: false });
     return false;
   }
   unregister(handleId) {
@@ -36878,12 +36782,15 @@ var AuthGate = class {
   }
   // 收到一帧时调；返回 'consumed' / 'reject' / 'pass'
   // - consumed：这一帧是 auth 帧（成功或失败），调用方不要再走业务路由
-  // - reject：未通过 auth 但帧不是 auth 帧，调用方应放弃此帧（gate 已关连接）
+  // - reject：未通过 auth 但帧不是 auth 帧，调用方应放弃此帧（gate 已关连接 / 验证进行中）
   // - pass：已 authed，调用方继续走业务路由
-  handleFrame(handle, frame) {
+  //
+  // Phase 2：async（authenticate 注入路径走中心 server introspect HTTP 调用）。
+  async handleFrame(handle, frame) {
     const st = this.states.get(handle.id);
     if (!st) return "reject";
     if (st.authed) return "pass";
+    if (st.pending) return "reject";
     const parsed = AuthRequestFrameSchema.safeParse(frame);
     if (!parsed.success) {
       const reason = frame.type === "auth" ? "auth failed" : "auth required";
@@ -36893,11 +36800,19 @@ var AuthGate = class {
     }
     let ctx = null;
     if (this.opts.authenticate) {
-      const r = this.opts.authenticate(
-        parsed.data.token,
-        parsed.data.selfPrincipalId,
-        parsed.data.selfDisplayName
-      );
+      st.pending = true;
+      let r;
+      try {
+        r = await this.opts.authenticate(
+          parsed.data.token,
+          parsed.data.selfPrincipalId,
+          parsed.data.selfDisplayName,
+          parsed.data.selfUrl
+        );
+      } finally {
+        st.pending = false;
+      }
+      if (!this.states.has(handle.id)) return "reject";
       if (!r.ok) {
         this.opts.closeConnection(handle, 4401, r.code);
         this.markFailed(handle.id);
@@ -37000,26 +36915,33 @@ function ownerContext(ownerPrincipalId, displayName) {
     grants: [{ resource: { type: "*" }, actions: ["admin"] }]
   };
 }
-function guestContext(cap, peerOwnerPrincipalId) {
+function connectGuestContext(unionId, displayName) {
   return {
-    principal: { id: cap.id, kind: "guest", displayName: cap.displayName },
-    grants: cap.grants,
-    capabilityId: cap.id,
-    ...peerOwnerPrincipalId ? { peerOwnerPrincipalId } : {}
+    principal: { id: unionId, kind: "guest", displayName },
+    grants: PERSONAL_CAP_GRANTS.map((g2) => ({
+      resource: { ...g2.resource },
+      actions: [...g2.actions]
+    })),
+    capabilityId: unionId,
+    peerOwnerPrincipalId: unionId
   };
 }
-function authenticate(token, deps) {
+async function authenticate(token, deps) {
   if (!token) return { ok: false, code: "NO_TOKEN" };
   if (deps.isOwnerToken(token)) {
     return { ok: true, context: ownerContext(deps.ownerPrincipalId, deps.ownerDisplayName) };
   }
-  if (!deps.capabilityRegistry) return { ok: false, code: "BAD_TOKEN" };
-  const v2 = deps.capabilityRegistry.verifyToken(token);
-  if (!v2.ok) {
-    if (v2.code === "TOKEN_INVALID") return { ok: false, code: "BAD_TOKEN" };
-    return { ok: false, code: v2.code };
+  if (!deps.introspectConnectToken) return { ok: false, code: "BAD_TOKEN" };
+  let result;
+  try {
+    result = await deps.introspectConnectToken(token);
+  } catch {
+    return { ok: false, code: "BAD_TOKEN" };
+  }
+  if (!result.active) {
+    return { ok: false, code: "TOKEN_REVOKED" };
   }
-  return { ok: true, context: guestContext(v2.capability, deps.selfPrincipalId) };
+  return { ok: true, context: connectGuestContext(result.unionId, result.displayName) };
 }
 // src/permission/capability-store.ts
@@ -37199,89 +37121,14 @@ function cleanupGuestSessionsForCapability(cap, factory) {
   return { removed };
 }
-// src/permission/personal-capability.ts
-var import_node_fs15 = __toESM(require("fs"), 1);
-var import_node_path16 = __toESM(require("path"), 1);
-var import_node_crypto4 = __toESM(require("crypto"), 1);
-var PERSONAL_CAP_FILE_NAME = "personal-capability.json";
-var PERSONAL_CAP_DISPLAY_NAME = "personal";
-function personalCapFilePath(dataDir) {
-  return import_node_path16.default.join(dataDir, PERSONAL_CAP_FILE_NAME);
-}
-function loadOrCreatePersonalCapability(opts) {
-  const file = personalCapFilePath(opts.dataDir);
-  const generateToken = opts.generateToken ?? defaultGenerateToken;
-  const generateId = opts.generateId ?? defaultGenerateId;
-  const now = opts.now ?? Date.now;
-  const existing = readFile(file);
-  if (existing) return existing;
-  const token = generateToken();
-  const id = generateId();
-  const capability = {
-    id,
-    secretHash: sha256Hex2(token),
-    displayName: PERSONAL_CAP_DISPLAY_NAME,
-    // CapabilitySchema 期待 mutable Grant[]，protocol 常量是 readonly，落盘前拷一份
-    grants: PERSONAL_CAP_GRANTS.map((g2) => ({
-      resource: { ...g2.resource },
-      actions: [...g2.actions]
-    })),
-    issuedAt: now(),
-    usedCount: 0
-  };
-  const content = { token, capability };
-  writeFile(file, content);
-  return content;
-}
-function readFile(file) {
-  let raw;
-  try {
-    raw = import_node_fs15.default.readFileSync(file, "utf8");
-  } catch (err) {
-    const code = err?.code;
-    if (code === "ENOENT") return null;
-    return null;
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    return null;
-  }
-  if (!parsed || typeof parsed !== "object") return null;
-  const obj = parsed;
-  if (typeof obj.token !== "string" || obj.token.length === 0) return null;
-  const capParsed = CapabilitySchema.safeParse(obj.capability);
-  if (!capParsed.success) return null;
-  if (sha256Hex2(obj.token) !== capParsed.data.secretHash) return null;
-  return { token: obj.token, capability: capParsed.data };
-}
-function writeFile(file, content) {
-  import_node_fs15.default.mkdirSync(import_node_path16.default.dirname(file), { recursive: true });
-  import_node_fs15.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
-  try {
-    import_node_fs15.default.chmodSync(file, 384);
-  } catch {
-  }
-}
-function defaultGenerateToken() {
-  return import_node_crypto4.default.randomBytes(24).toString("base64url");
-}
-function defaultGenerateId() {
-  return "personal_" + import_node_crypto4.default.randomBytes(6).toString("base64url");
-}
-function sha256Hex2(s) {
-  return import_node_crypto4.default.createHash("sha256").update(s).digest("hex");
-}
 // src/inbox/inbox-store.ts
-var fs20 = __toESM(require("fs"), 1);
-var path22 = __toESM(require("path"), 1);
+var fs19 = __toESM(require("fs"), 1);
+var path21 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs20.mkdirSync(this.dirPath(), { recursive: true });
+    fs19.mkdirSync(this.dirPath(), { recursive: true });
   }
   dataDir;
   /**
@@ -37293,7 +37140,7 @@ var InboxStore = class {
     const file = this.filePath(peerOwnerId);
     let raw;
     try {
-      raw = fs20.readFileSync(file, "utf8");
+      raw = fs19.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -37309,7 +37156,7 @@ var InboxStore = class {
     const dir = this.dirPath();
     let entries;
     try {
-      entries = fs20.readdirSync(dir);
+      entries = fs19.readdirSync(dir);
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -37325,9 +37172,9 @@ var InboxStore = class {
     if (existing.some((m2) => m2.id === message.id)) return;
     const file = this.filePath(message.peerOwnerId);
     const line = JSON.stringify(message) + "\n";
-    fs20.appendFileSync(file, line, { mode: 384 });
+    fs19.appendFileSync(file, line, { mode: 384 });
     try {
-      fs20.chmodSync(file, 384);
+      fs19.chmodSync(file, 384);
     } catch {
     }
   }
@@ -37357,7 +37204,7 @@ var InboxStore = class {
   removeByPeerOwnerId(peerOwnerId) {
     const file = this.filePath(peerOwnerId);
     try {
-      fs20.unlinkSync(file);
+      fs19.unlinkSync(file);
     } catch (err) {
       if (err?.code === "ENOENT") return;
     }
@@ -37366,18 +37213,18 @@ var InboxStore = class {
     const file = this.filePath(peerOwnerId);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     const content = messages.map((m2) => JSON.stringify(m2)).join("\n") + (messages.length > 0 ? "\n" : "");
-    fs20.writeFileSync(tmp, content, { mode: 384 });
-    fs20.renameSync(tmp, file);
+    fs19.writeFileSync(tmp, content, { mode: 384 });
+    fs19.renameSync(tmp, file);
     try {
-      fs20.chmodSync(file, 384);
+      fs19.chmodSync(file, 384);
     } catch {
     }
   }
   dirPath() {
-    return path22.join(this.dataDir, INBOX_SUBDIR);
+    return path21.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerOwnerId) {
-    return path22.join(this.dirPath(), `${peerOwnerId}.jsonl`);
+    return path21.join(this.dirPath(), `${peerOwnerId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -37464,8 +37311,8 @@ var InboxManager = class {
 };
 // src/state/received-capability-store.ts
-var fs21 = __toESM(require("fs"), 1);
-var path23 = __toESM(require("path"), 1);
+var fs20 = __toESM(require("fs"), 1);
+var path22 = __toESM(require("path"), 1);
 var FILE_NAME = "received-capabilities.json";
 var ReceivedCapabilityStore = class {
   constructor(dataDir) {
@@ -37475,10 +37322,10 @@ var ReceivedCapabilityStore = class {
   caps = /* @__PURE__ */ new Map();
   load() {
     this.caps.clear();
-    const file = path23.join(this.dataDir, FILE_NAME);
+    const file = path22.join(this.dataDir, FILE_NAME);
     let raw;
     try {
-      raw = fs21.readFileSync(file, "utf8");
+      raw = fs20.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code !== "ENOENT") this.renameBak(file);
       return;
@@ -37515,27 +37362,27 @@ var ReceivedCapabilityStore = class {
     this.flush();
   }
   flush() {
-    const file = path23.join(this.dataDir, FILE_NAME);
+    const file = path22.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
       { receivedCaps: Array.from(this.caps.values()) },
       null,
       2
     );
-    fs21.mkdirSync(this.dataDir, { recursive: true });
-    fs21.writeFileSync(tmp, content, { mode: 384 });
-    fs21.renameSync(tmp, file);
+    fs20.mkdirSync(this.dataDir, { recursive: true });
+    fs20.writeFileSync(tmp, content, { mode: 384 });
+    fs20.renameSync(tmp, file);
   }
   renameBak(file) {
     try {
-      fs21.renameSync(file, `${file}.bak`);
+      fs20.renameSync(file, `${file}.bak`);
     } catch {
     }
   }
 };
 // src/received-capability/connect-remote.ts
-var crypto6 = __toESM(require("crypto"), 1);
+var crypto5 = __toESM(require("crypto"), 1);
 var HANDSHAKE_TIMEOUT_MS = 5e3;
 var RPC_TIMEOUT_MS = 5e3;
 async function connectRemote(args) {
@@ -37553,7 +37400,10 @@ async function connectRemote(args) {
       type: "auth",
       token: args.token,
       selfPrincipalId: args.selfPrincipalId,
-      selfDisplayName: args.selfDisplayName
+      selfDisplayName: args.selfDisplayName,
+      // Phase 2 自动反向（spec 决策 #11）：带本机可达地址时 hub 反向建联系人；
+      // 缺省时省略字段（不发空串），hub 端 schema selfUrl 是 .min(1).optional()
+      ...args.selfUrl ? { selfUrl: args.selfUrl } : {}
     })
   );
   await new Promise((resolve6, reject) => {
@@ -37581,7 +37431,7 @@ async function connectRemote(args) {
     }, HANDSHAKE_TIMEOUT_MS);
   });
   function call(method, payload) {
-    const requestId = crypto6.randomUUID();
+    const requestId = crypto5.randomUUID();
     return new Promise((resolve6, reject) => {
       const onMessage = (raw) => {
         let f;
@@ -37625,62 +37475,85 @@ async function connectRemote(args) {
   };
 }
+// src/received-capability/auto-reverse.ts
+init_protocol();
+function autoReverseContact(args) {
+  if (!args.selfUrl) return;
+  const now = args.now ?? Date.now;
+  const rc = {
+    ownerPrincipalId: args.unionId,
+    ownerDisplayName: args.displayName,
+    remoteUrl: args.selfUrl,
+    // capabilityId 复用 unionId（与 connectGuestContext 的 guest channel 索引键一致）
+    capabilityId: args.unionId,
+    // B 不持有 A 颁的 token：空串。schema 已放宽允许空（不造假数据）。
+    connectToken: "",
+    grants: PERSONAL_CAP_GRANTS.map((g2) => ({
+      resource: { ...g2.resource },
+      actions: [...g2.actions]
+    })),
+    receivedAt: now()
+  };
+  args.store.upsert(rc);
+  args.broadcast({ type: "received-capability:added", receivedCap: rc });
+}
 // src/migrations/2026-05-20-flatten-sessions.ts
-var fs22 = __toESM(require("fs"), 1);
-var path24 = __toESM(require("path"), 1);
+var fs21 = __toESM(require("fs"), 1);
+var path23 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path24.join(dataDir, "sessions");
-  const flagPath = path24.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path23.join(dataDir, "sessions");
+  const flagPath = path23.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path24.join(sessionsDir, "default");
+  const defaultDir = path23.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path24.join(defaultDir, entry);
-      const dst = path24.join(sessionsDir, entry);
-      fs22.renameSync(src, dst);
+      const src = path23.join(defaultDir, entry);
+      const dst = path23.join(sessionsDir, entry);
+      fs21.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path24.join(sessionsDir, pid);
+    const personaDir = path23.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path24.join(personaDir, "owner");
+    const ownerSrc = path23.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path24.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs22.mkdirSync(ownerDst, { recursive: true });
+      const ownerDst = path23.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      fs21.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs22.renameSync(path24.join(ownerSrc, file), path24.join(ownerDst, file));
+        fs21.renameSync(path23.join(ownerSrc, file), path23.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path24.join(personaDir, "listener");
+    const listenerSrc = path23.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path24.join(dataDir, ".legacy", `listener-${pid}`);
-      fs22.mkdirSync(archiveDst, { recursive: true });
+      const archiveDst = path23.join(dataDir, ".legacy", `listener-${pid}`);
+      fs21.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs22.renameSync(path24.join(listenerSrc, file), path24.join(archiveDst, file));
+        fs21.renameSync(path23.join(listenerSrc, file), path23.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs22.mkdirSync(sessionsDir, { recursive: true });
-  fs22.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs21.mkdirSync(sessionsDir, { recursive: true });
+  fs21.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -37691,7 +37564,7 @@ function migrateFlattenSessions(opts) {
 }
 function existsSync3(p2) {
   try {
-    fs22.statSync(p2);
+    fs21.statSync(p2);
     return true;
   } catch {
     return false;
@@ -37699,31 +37572,31 @@ function existsSync3(p2) {
 }
 function isDir(p2) {
   try {
-    return fs22.statSync(p2).isDirectory();
+    return fs21.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p2) {
   try {
-    return fs22.readdirSync(p2);
+    return fs21.readdirSync(p2);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p2) {
   try {
-    fs22.rmdirSync(p2);
+    fs21.rmdirSync(p2);
   } catch {
   }
 }
 // src/transport/http-router.ts
-var import_node_fs17 = __toESM(require("fs"), 1);
-var import_node_path20 = __toESM(require("path"), 1);
+var import_node_fs16 = __toESM(require("fs"), 1);
+var import_node_path19 = __toESM(require("path"), 1);
 // src/attachment/mime.ts
-var import_node_path17 = __toESM(require("path"), 1);
+var import_node_path16 = __toESM(require("path"), 1);
 var TEXT_PLAIN = "text/plain; charset=utf-8";
 var EXT_TO_NATIVE_MIME = {
   // 图片
@@ -37830,14 +37703,14 @@ var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
   ".mk"
 ]);
 function lookupMime(filePathOrName) {
-  const ext = import_node_path17.default.extname(filePathOrName).toLowerCase();
+  const ext = import_node_path16.default.extname(filePathOrName).toLowerCase();
   if (EXT_TO_NATIVE_MIME[ext]) return EXT_TO_NATIVE_MIME[ext];
   if (TEXT_EXTENSIONS.has(ext)) return TEXT_PLAIN;
   return "application/octet-stream";
 }
 // src/attachment/sign-url.ts
-var import_node_crypto5 = __toESM(require("crypto"), 1);
+var import_node_crypto4 = __toESM(require("crypto"), 1);
 var HMAC_ALGO = "sha256";
 function base64urlEncode(buf) {
   const b2 = typeof buf === "string" ? Buffer.from(buf, "utf8") : buf;
@@ -37854,7 +37727,7 @@ function decodeAbsPathFromUrl(encoded) {
 }
 function computeSig(secret, absPath, e) {
   const msg = e === null ? absPath : `${absPath}|${e}`;
-  return import_node_crypto5.default.createHmac(HMAC_ALGO, secret).update(msg).digest();
+  return import_node_crypto4.default.createHmac(HMAC_ALGO, secret).update(msg).digest();
 }
 function signUrlParts(secret, absPath, ttlSeconds, now = Date.now) {
   const e = ttlSeconds === null ? null : Math.floor(now() / 1e3) + ttlSeconds;
@@ -37889,7 +37762,7 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
   if (provided.length !== expected.length) {
     return { ok: false, code: "BAD_SIG" };
   }
-  if (!import_node_crypto5.default.timingSafeEqual(provided, expected)) {
+  if (!import_node_crypto4.default.timingSafeEqual(provided, expected)) {
     return { ok: false, code: "BAD_SIG" };
   }
   if (e !== null && now() / 1e3 > e) {
@@ -37899,9 +37772,9 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
 }
 // src/attachment/upload.ts
-var import_node_fs16 = __toESM(require("fs"), 1);
-var import_node_path18 = __toESM(require("path"), 1);
-var import_node_crypto6 = __toESM(require("crypto"), 1);
+var import_node_fs15 = __toESM(require("fs"), 1);
+var import_node_path17 = __toESM(require("path"), 1);
+var import_node_crypto5 = __toESM(require("crypto"), 1);
 var import_promises = require("stream/promises");
 var UploadError = class extends Error {
   constructor(code, message) {
@@ -37912,24 +37785,24 @@ var UploadError = class extends Error {
   code;
 };
 function assertValidFileName(fileName) {
-  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path18.default.basename(fileName)) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path17.default.basename(fileName)) {
     throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
   }
 }
 var HASH_PREFIX_LEN = 16;
 async function writeUploadedAttachment(args) {
   assertValidFileName(args.fileName);
-  const attachmentsRoot = import_node_path18.default.join(args.sessionDir, ".attachments");
+  const attachmentsRoot = import_node_path17.default.join(args.sessionDir, ".attachments");
   try {
-    import_node_fs16.default.mkdirSync(attachmentsRoot, { recursive: true });
+    import_node_fs15.default.mkdirSync(attachmentsRoot, { recursive: true });
   } catch (err) {
     throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
   }
-  const hasher = import_node_crypto6.default.createHash("sha256");
+  const hasher = import_node_crypto5.default.createHash("sha256");
   let actualSize = 0;
-  const tmpPath = import_node_path18.default.join(
+  const tmpPath = import_node_path17.default.join(
     attachmentsRoot,
-    `.upload-${process.pid}-${Date.now()}-${import_node_crypto6.default.randomBytes(4).toString("hex")}`
+    `.upload-${process.pid}-${Date.now()}-${import_node_crypto5.default.randomBytes(4).toString("hex")}`
   );
   try {
     await (0, import_promises.pipeline)(
@@ -37942,18 +37815,18 @@ async function writeUploadedAttachment(args) {
           yield buf;
         }
       },
-      import_node_fs16.default.createWriteStream(tmpPath, { mode: 384 })
+      import_node_fs15.default.createWriteStream(tmpPath, { mode: 384 })
     );
   } catch (err) {
     try {
-      import_node_fs16.default.unlinkSync(tmpPath);
+      import_node_fs15.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError("STORAGE_ERROR", `write failed: ${err.message}`);
   }
   if (actualSize !== args.contentLength) {
     try {
-      import_node_fs16.default.unlinkSync(tmpPath);
+      import_node_fs15.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError(
@@ -37962,35 +37835,35 @@ async function writeUploadedAttachment(args) {
     );
   }
   const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
-  const hashDir = import_node_path18.default.join(attachmentsRoot, attachmentId);
+  const hashDir = import_node_path17.default.join(attachmentsRoot, attachmentId);
   let finalFileName;
   let hashDirExists = false;
   try {
-    hashDirExists = import_node_fs16.default.statSync(hashDir).isDirectory();
+    hashDirExists = import_node_fs15.default.statSync(hashDir).isDirectory();
   } catch {
   }
   if (hashDirExists) {
-    const existing = import_node_fs16.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
+    const existing = import_node_fs15.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
     finalFileName = existing[0] ?? args.fileName;
     try {
-      import_node_fs16.default.unlinkSync(tmpPath);
+      import_node_fs15.default.unlinkSync(tmpPath);
     } catch {
     }
   } else {
     try {
-      import_node_fs16.default.mkdirSync(hashDir, { recursive: true });
+      import_node_fs15.default.mkdirSync(hashDir, { recursive: true });
       finalFileName = args.fileName;
-      import_node_fs16.default.renameSync(tmpPath, import_node_path18.default.join(hashDir, finalFileName));
+      import_node_fs15.default.renameSync(tmpPath, import_node_path17.default.join(hashDir, finalFileName));
     } catch (err) {
       try {
-        import_node_fs16.default.unlinkSync(tmpPath);
+        import_node_fs15.default.unlinkSync(tmpPath);
       } catch {
       }
       throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
     }
   }
-  const absPath = import_node_path18.default.join(hashDir, finalFileName);
-  const relPath = import_node_path18.default.relative(args.sessionDir, absPath);
+  const absPath = import_node_path17.default.join(hashDir, finalFileName);
+  const relPath = import_node_path17.default.relative(args.sessionDir, absPath);
   args.groupFileStore.upsert(args.scope, args.sessionId, {
     relPath: absPath,
     // 存绝对路径，与现有 agent 入清单的形态一致（attachment.ts:144 双形态兼容）
@@ -38004,7 +37877,7 @@ async function writeUploadedAttachment(args) {
 // src/extension/import.ts
 var import_promises2 = __toESM(require("fs/promises"), 1);
-var import_node_path19 = __toESM(require("path"), 1);
+var import_node_path18 = __toESM(require("path"), 1);
 var import_node_os10 = __toESM(require("os"), 1);
 var import_jszip = __toESM(require_lib3(), 1);
 var ImportError = class extends Error {
@@ -38022,7 +37895,7 @@ async function importZip(buf, root) {
     throw new ImportError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path19.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path18.default.isAbsolute(name)) {
       throw new ImportError("ZIP_INVALID", `unsafe zip entry path: ${name}`);
     }
   }
@@ -38055,7 +37928,7 @@ async function importZip(buf, root) {
       );
     }
   }
-  const destDir = import_node_path19.default.join(root, manifest.id);
+  const destDir = import_node_path18.default.join(root, manifest.id);
   let destExists = false;
   try {
     await import_promises2.default.access(destDir);
@@ -38065,15 +37938,15 @@ async function importZip(buf, root) {
   if (destExists) {
     throw new ImportError("ALREADY_EXISTS", `extension ${manifest.id} already installed`);
   }
-  const stage = await import_promises2.default.mkdtemp(import_node_path19.default.join(import_node_os10.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
+  const stage = await import_promises2.default.mkdtemp(import_node_path18.default.join(import_node_os10.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path19.default.join(stage, name);
+      const dest = import_node_path18.default.join(stage, name);
       if (entry.dir) {
         await import_promises2.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises2.default.mkdir(import_node_path19.default.dirname(dest), { recursive: true });
+      await import_promises2.default.mkdir(import_node_path18.default.dirname(dest), { recursive: true });
       const content = await entry.async("nodebuffer");
       await import_promises2.default.writeFile(dest, content);
     }
@@ -38119,7 +37992,7 @@ function isValidUploadFileName(fileName) {
   if (fileName === "." || fileName === "..") return false;
   if (fileName.startsWith(".")) return false;
   if (fileName.includes("/") || fileName.includes("\\")) return false;
-  return fileName === import_node_path20.default.basename(fileName);
+  return fileName === import_node_path19.default.basename(fileName);
 }
 function createHttpRouter(deps) {
   return async (req, res) => {
@@ -38313,7 +38186,7 @@ function createHttpRouter(deps) {
         return true;
       }
       let absPath;
-      if (import_node_path20.default.isAbsolute(pathParam)) {
+      if (import_node_path19.default.isAbsolute(pathParam)) {
         absPath = pathParam;
       } else if (deps.sessionStore) {
         const file = deps.sessionStore.read(sid);
@@ -38321,7 +38194,7 @@ function createHttpRouter(deps) {
           sendJson(res, 404, { code: "NOT_FOUND", message: `session ${sid} not found` });
           return true;
         }
-        absPath = import_node_path20.default.join(file.cwd, pathParam);
+        absPath = import_node_path19.default.join(file.cwd, pathParam);
       } else {
         sendJson(res, 501, withCtx(ctx, { code: "NOT_IMPLEMENTED", message: "sessionStore not wired" }));
         return true;
@@ -38404,7 +38277,7 @@ function withCtx(ctx, body) {
 function streamFile(res, absPath, logger) {
   let stat;
   try {
-    stat = import_node_fs17.default.statSync(absPath);
+    stat = import_node_fs16.default.statSync(absPath);
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") {
@@ -38419,7 +38292,7 @@ function streamFile(res, absPath, logger) {
     return;
   }
   const mime = lookupMime(absPath);
-  const basename = import_node_path20.default.basename(absPath);
+  const basename = import_node_path19.default.basename(absPath);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": String(stat.size),
@@ -38427,7 +38300,7 @@ function streamFile(res, absPath, logger) {
     // 防止浏览器把任意 mime 当 html 渲染
     "X-Content-Type-Options": "nosniff"
   });
-  const stream = import_node_fs17.default.createReadStream(absPath);
+  const stream = import_node_fs16.default.createReadStream(absPath);
   stream.on("error", (err) => {
     logger?.warn("streamFile read error", { absPath, err: err.message });
     res.destroy();
@@ -38436,8 +38309,8 @@ function streamFile(res, absPath, logger) {
 }
 // src/attachment/gc.ts
-var import_node_fs18 = __toESM(require("fs"), 1);
-var import_node_path21 = __toESM(require("path"), 1);
+var import_node_fs17 = __toESM(require("fs"), 1);
+var import_node_path20 = __toESM(require("path"), 1);
 var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
 function runAttachmentGc(args) {
   const now = (args.now ?? Date.now)();
@@ -38446,38 +38319,38 @@ function runAttachmentGc(args) {
   for (const { scope, sessionId } of args.sessionScopes) {
     for (const entry of args.groupFileStore.list(scope, sessionId)) {
       if (entry.stale) continue;
-      if (import_node_path21.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+      if (import_node_path20.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
     }
   }
   for (const { scope, sessionId } of args.sessionScopes) {
-    const sessionDir = args.getSessionCwd?.(sessionId) ?? import_node_path21.default.join(
+    const sessionDir = args.getSessionCwd?.(sessionId) ?? import_node_path20.default.join(
       args.dataDir,
       "sessions",
       ...scopeSubPath(scope).map(safeFileName),
       safeFileName(sessionId)
     );
-    const attRoot = import_node_path21.default.join(sessionDir, ".attachments");
+    const attRoot = import_node_path20.default.join(sessionDir, ".attachments");
     let hashDirs;
     try {
-      hashDirs = import_node_fs18.default.readdirSync(attRoot);
+      hashDirs = import_node_fs17.default.readdirSync(attRoot);
     } catch (err) {
       if (err.code === "ENOENT") continue;
       args.logger?.warn("attachment gc: readdir failed", { attRoot, err: err.message });
       continue;
     }
     for (const hashDir of hashDirs) {
-      const hashDirAbs = import_node_path21.default.join(attRoot, hashDir);
+      const hashDirAbs = import_node_path20.default.join(attRoot, hashDir);
       let files;
       try {
-        files = import_node_fs18.default.readdirSync(hashDirAbs);
+        files = import_node_fs17.default.readdirSync(hashDirAbs);
       } catch {
         continue;
       }
       for (const name of files) {
-        const file = import_node_path21.default.join(hashDirAbs, name);
+        const file = import_node_path20.default.join(hashDirAbs, name);
         let stat;
         try {
-          stat = import_node_fs18.default.statSync(file);
+          stat = import_node_fs17.default.statSync(file);
         } catch {
           continue;
         }
@@ -38486,27 +38359,27 @@ function runAttachmentGc(args) {
         if (age < ttlMs) continue;
         if (liveAbs.has(file)) continue;
         try {
-          import_node_fs18.default.unlinkSync(file);
+          import_node_fs17.default.unlinkSync(file);
         } catch (err) {
           args.logger?.warn("attachment gc: unlink failed", { file, err: err.message });
         }
       }
       try {
-        if (import_node_fs18.default.readdirSync(hashDirAbs).length === 0) import_node_fs18.default.rmdirSync(hashDirAbs);
+        if (import_node_fs17.default.readdirSync(hashDirAbs).length === 0) import_node_fs17.default.rmdirSync(hashDirAbs);
       } catch {
       }
     }
     try {
-      if (import_node_fs18.default.readdirSync(attRoot).length === 0) import_node_fs18.default.rmdirSync(attRoot);
+      if (import_node_fs17.default.readdirSync(attRoot).length === 0) import_node_fs17.default.rmdirSync(attRoot);
     } catch {
     }
   }
 }
 // src/attachment/group.ts
-var import_node_fs19 = __toESM(require("fs"), 1);
-var import_node_path22 = __toESM(require("path"), 1);
-var import_node_crypto7 = __toESM(require("crypto"), 1);
+var import_node_fs18 = __toESM(require("fs"), 1);
+var import_node_path21 = __toESM(require("path"), 1);
+var import_node_crypto6 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
   dataDir;
@@ -38517,11 +38390,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path22.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path21.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path22.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path21.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -38530,7 +38403,7 @@ var GroupFileStore = class {
   readFile(scope, sessionId) {
     const file = this.filePath(scope, sessionId);
     try {
-      const raw = import_node_fs19.default.readFileSync(file, "utf8");
+      const raw = import_node_fs18.default.readFileSync(file, "utf8");
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) {
         this.logger?.warn("GroupFileStore.readFile: not an array; resetting session entries", {
@@ -38556,10 +38429,10 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs19.default.mkdirSync(import_node_path22.default.dirname(file), { recursive: true });
+    import_node_fs18.default.mkdirSync(import_node_path21.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs19.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
-    import_node_fs19.default.renameSync(tmp, file);
+    import_node_fs18.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
+    import_node_fs18.default.renameSync(tmp, file);
   }
   /** 拉一份当前 session 的清单。读盘 → cache；之后调用复用 cache */
   list(scope, sessionId) {
@@ -38595,7 +38468,7 @@ var GroupFileStore = class {
       entries[idx] = next;
     } else {
       next = {
-        id: `gf-${import_node_crypto7.default.randomBytes(6).toString("base64url")}`,
+        id: `gf-${import_node_crypto6.default.randomBytes(6).toString("base64url")}`,
         relPath: input.relPath,
         from: input.from,
         label: input.label,
@@ -38645,10 +38518,10 @@ var GroupFileStore = class {
 };
 // src/discovery/state-file.ts
-var import_node_fs20 = __toESM(require("fs"), 1);
-var import_node_path23 = __toESM(require("path"), 1);
+var import_node_fs19 = __toESM(require("fs"), 1);
+var import_node_path22 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path23.default.join(dataDir, "state.json");
+  return import_node_path22.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -38670,7 +38543,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs20.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs19.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -38684,34 +38557,34 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs20.default.mkdirSync(import_node_path23.default.dirname(this.file), { recursive: true });
+    import_node_fs19.default.mkdirSync(import_node_path22.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs20.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs20.default.renameSync(tmp, this.file);
+    import_node_fs19.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs19.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs20.default.chmodSync(this.file, 384);
+        import_node_fs19.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs20.default.unlinkSync(this.file);
+      import_node_fs19.default.unlinkSync(this.file);
     } catch {
     }
   }
 };
 // src/tunnel/tunnel-manager.ts
-var import_node_fs24 = __toESM(require("fs"), 1);
-var import_node_path27 = __toESM(require("path"), 1);
-var import_node_crypto8 = __toESM(require("crypto"), 1);
+var import_node_fs23 = __toESM(require("fs"), 1);
+var import_node_path26 = __toESM(require("path"), 1);
+var import_node_crypto7 = __toESM(require("crypto"), 1);
 var import_node_child_process5 = require("child_process");
 // src/tunnel/tunnel-store.ts
-var import_node_fs21 = __toESM(require("fs"), 1);
-var import_node_path24 = __toESM(require("path"), 1);
+var import_node_fs20 = __toESM(require("fs"), 1);
+var import_node_path23 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -38719,7 +38592,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs21.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs20.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -38730,22 +38603,22 @@ var TunnelStore = class {
     }
   }
   async set(v2) {
-    const dir = import_node_path24.default.dirname(this.filePath);
-    await import_node_fs21.default.promises.mkdir(dir, { recursive: true });
+    const dir = import_node_path23.default.dirname(this.filePath);
+    await import_node_fs20.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs21.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs20.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs21.default.promises.chmod(tmp, 384);
+        await import_node_fs20.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs21.default.promises.rename(tmp, this.filePath);
+    await import_node_fs20.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs21.default.promises.unlink(this.filePath);
+      await import_node_fs20.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -38840,9 +38713,9 @@ function escape(v2) {
 }
 // src/tunnel/frpc-binary.ts
-var import_node_fs22 = __toESM(require("fs"), 1);
+var import_node_fs21 = __toESM(require("fs"), 1);
 var import_node_os11 = __toESM(require("os"), 1);
-var import_node_path25 = __toESM(require("path"), 1);
+var import_node_path24 = __toESM(require("path"), 1);
 var import_node_child_process3 = require("child_process");
 var import_node_stream2 = require("stream");
 var import_promises3 = require("stream/promises");
@@ -38874,20 +38747,20 @@ function frpcDownloadUrl(version2, p2) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs22.default.existsSync(opts.override)) {
+    if (!import_node_fs21.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path25.default.join(opts.dataDir, "bin");
-  import_node_fs22.default.mkdirSync(binDir, { recursive: true });
+  const binDir = import_node_path24.default.join(opts.dataDir, "bin");
+  import_node_fs21.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path25.default.join(binDir, "frpc");
-  if (import_node_fs22.default.existsSync(stableBin)) return stableBin;
+  const stableBin = import_node_path24.default.join(binDir, "frpc");
+  if (import_node_fs21.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path25.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path24.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -38896,8 +38769,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs22.default.chmodSync(partialBin, 493);
-    import_node_fs22.default.renameSync(partialBin, stableBin);
+    import_node_fs21.default.chmodSync(partialBin, 493);
+    import_node_fs21.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -38907,15 +38780,15 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs22.default.readdirSync(binDir);
+    entries = import_node_fs21.default.readdirSync(binDir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path25.default.join(binDir, name);
+      const full = import_node_path24.default.join(binDir, name);
       try {
-        import_node_fs22.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs21.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -38923,7 +38796,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p2) {
   try {
-    import_node_fs22.default.unlinkSync(p2);
+    import_node_fs21.default.unlinkSync(p2);
   } catch {
   }
 }
@@ -38934,13 +38807,13 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs22.default.createWriteStream(dest);
+  const out = import_node_fs21.default.createWriteStream(dest);
   const nodeStream = import_node_stream2.Readable.fromWeb(res.body);
   await (0, import_promises3.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path25.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs22.default.mkdirSync(work, { recursive: true });
+  const work = import_node_path24.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  import_node_fs21.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve6, reject) => {
       const proc = (0, import_node_child_process3.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
@@ -38948,32 +38821,32 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
       proc.on("exit", (code) => code === 0 ? resolve6() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path25.default.join(work, dirName, "frpc");
-    if (!import_node_fs22.default.existsSync(src)) {
+    const src = import_node_path24.default.join(work, dirName, "frpc");
+    if (!import_node_fs21.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs22.default.copyFileSync(src, destBin);
+    import_node_fs21.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs22.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs21.default.rmSync(work, { recursive: true, force: true });
   }
 }
 // src/tunnel/frpc-process.ts
-var import_node_fs23 = __toESM(require("fs"), 1);
-var import_node_path26 = __toESM(require("path"), 1);
+var import_node_fs22 = __toESM(require("fs"), 1);
+var import_node_path25 = __toESM(require("path"), 1);
 var import_node_child_process4 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path26.default.join(dataDir, "frpc.pid");
+  return import_node_path25.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
-    import_node_fs23.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
+    import_node_fs22.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearFrpcPid(dataDir) {
   try {
-    import_node_fs23.default.unlinkSync(frpcPidFilePath(dataDir));
+    import_node_fs22.default.unlinkSync(frpcPidFilePath(dataDir));
   } catch {
   }
 }
@@ -38989,7 +38862,7 @@ function defaultIsPidAlive(pid) {
 }
 function defaultReadPidFile(file) {
   try {
-    return import_node_fs23.default.readFileSync(file, "utf8");
+    return import_node_fs22.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -39005,7 +38878,7 @@ function defaultSleep(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path26.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path25.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -39029,7 +38902,7 @@ async function killStaleFrpc(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs23.default.unlinkSync(pidFile);
+      import_node_fs22.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -39040,7 +38913,7 @@ async function killStaleFrpc(deps) {
   }
   await sleep(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs23.default.unlinkSync(pidFile);
+    import_node_fs22.default.unlinkSync(pidFile);
   } catch {
   }
 }
@@ -39077,7 +38950,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path27.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path26.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -39204,8 +39077,8 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path27.default.join(this.deps.dataDir, "frpc.toml");
-      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto8.default.randomBytes(3).toString("hex")}`;
+      const tomlPath = import_node_path26.default.join(this.deps.dataDir, "frpc.toml");
+      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto7.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
         serverPort: t.frpsPort,
@@ -39215,12 +39088,12 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs24.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      await import_node_fs23.default.promises.writeFile(tomlPath, toml, { mode: 384 });
       const proc = (this.deps.spawnImpl ?? import_node_child_process5.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logFilePath = import_node_path27.default.join(this.deps.dataDir, "frpc.log");
-      const logStream = import_node_fs24.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logFilePath = import_node_path26.default.join(this.deps.dataDir, "frpc.log");
+      const logStream = import_node_fs23.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -39303,31 +39176,31 @@ async function waitForFrpcReady(proc, timeoutMs) {
 // src/tunnel/device-key.ts
 var import_node_os12 = __toESM(require("os"), 1);
-var import_node_path28 = __toESM(require("path"), 1);
-var import_node_crypto9 = __toESM(require("crypto"), 1);
+var import_node_path27 = __toESM(require("path"), 1);
+var import_node_crypto8 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os12.default.hostname();
   const uid = opts.uid ?? (typeof import_node_os12.default.userInfo === "function" ? import_node_os12.default.userInfo().uid : 0);
   const home = opts.home ?? import_node_os12.default.homedir();
-  const defaultDataDir = import_node_path28.default.resolve(import_node_path28.default.join(home, ".clawd"));
-  const normalizedDataDir = opts.dataDir ? import_node_path28.default.resolve(opts.dataDir) : null;
+  const defaultDataDir = import_node_path27.default.resolve(import_node_path27.default.join(home, ".clawd"));
+  const normalizedDataDir = opts.dataDir ? import_node_path27.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
-  return import_node_crypto9.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
+  return import_node_crypto8.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 // src/auth-store.ts
-var import_node_fs25 = __toESM(require("fs"), 1);
-var import_node_path29 = __toESM(require("path"), 1);
-var import_node_crypto10 = __toESM(require("crypto"), 1);
+var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_path28 = __toESM(require("path"), 1);
+var import_node_crypto9 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path29.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path28.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
-  const generate = opts.generate ?? defaultGenerateToken2;
+  const generate = opts.generate ?? defaultGenerateToken;
   const genId = opts.genOwnerPrincipalId ?? defaultGenerateOwnerPrincipalId;
   const now = opts.now ?? (() => /* @__PURE__ */ new Date());
   const existing = readAuthFile(file);
@@ -39347,15 +39220,15 @@ function loadOrCreateAuthFile(opts) {
   writeAuthFile(file, next);
   return next;
 }
-function defaultGenerateToken2() {
-  return import_node_crypto10.default.randomBytes(32).toString("base64url");
+function defaultGenerateToken() {
+  return import_node_crypto9.default.randomBytes(32).toString("base64url");
 }
 function defaultGenerateOwnerPrincipalId() {
-  return `owner-${import_node_crypto10.default.randomUUID()}`;
+  return `owner-${import_node_crypto9.default.randomUUID()}`;
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs25.default.readFileSync(file, "utf8");
+    const raw = import_node_fs24.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -39373,25 +39246,25 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs25.default.mkdirSync(import_node_path29.default.dirname(file), { recursive: true });
-  import_node_fs25.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs24.default.mkdirSync(import_node_path28.default.dirname(file), { recursive: true });
+  import_node_fs24.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs25.default.chmodSync(file, 384);
+    import_node_fs24.default.chmodSync(file, 384);
   } catch {
   }
 }
 // src/owner-profile.ts
-var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_fs25 = __toESM(require("fs"), 1);
 var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path30 = __toESM(require("path"), 1);
+var import_node_path29 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function loadOwnerDisplayName(dataDir) {
   const fallback = import_node_os13.default.userInfo().username;
-  const profilePath = import_node_path30.default.join(dataDir, PROFILE_FILENAME);
+  const profilePath = import_node_path29.default.join(dataDir, PROFILE_FILENAME);
   let raw;
   try {
-    raw = import_node_fs26.default.readFileSync(profilePath, "utf8");
+    raw = import_node_fs25.default.readFileSync(profilePath, "utf8");
   } catch {
     return fallback;
   }
@@ -39414,18 +39287,18 @@ function loadOwnerDisplayName(dataDir) {
 }
 // src/feishu-auth/owner-identity-store.ts
-var import_node_fs27 = __toESM(require("fs"), 1);
-var import_node_path31 = __toESM(require("path"), 1);
+var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_path30 = __toESM(require("path"), 1);
 var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
 var OwnerIdentityStore = class {
   file;
   constructor(dataDir) {
-    this.file = import_node_path31.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
+    this.file = import_node_path30.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
   }
   read() {
     let raw;
     try {
-      raw = import_node_fs27.default.readFileSync(this.file, "utf8");
+      raw = import_node_fs26.default.readFileSync(this.file, "utf8");
     } catch {
       return null;
     }
@@ -39451,16 +39324,16 @@ var OwnerIdentityStore = class {
     };
   }
   write(record) {
-    import_node_fs27.default.mkdirSync(import_node_path31.default.dirname(this.file), { recursive: true });
-    import_node_fs27.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
+    import_node_fs26.default.mkdirSync(import_node_path30.default.dirname(this.file), { recursive: true });
+    import_node_fs26.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
     try {
-      import_node_fs27.default.chmodSync(this.file, 384);
+      import_node_fs26.default.chmodSync(this.file, 384);
     } catch {
     }
   }
   clear() {
     try {
-      import_node_fs27.default.unlinkSync(this.file);
+      import_node_fs26.default.unlinkSync(this.file);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -39469,7 +39342,7 @@ var OwnerIdentityStore = class {
 };
 // src/feishu-auth/login-flow.ts
-var import_node_crypto11 = __toESM(require("crypto"), 1);
+var import_node_crypto10 = __toESM(require("crypto"), 1);
 var STATE_TTL_MS = 5 * 60 * 1e3;
 var LoginFlow = class {
   constructor(deps) {
@@ -39478,7 +39351,7 @@ var LoginFlow = class {
   deps;
   pendingStates = /* @__PURE__ */ new Map();
   start() {
-    const state = import_node_crypto11.default.randomBytes(16).toString("base64url");
+    const state = import_node_crypto10.default.randomBytes(16).toString("base64url");
     const now = (this.deps.now ?? Date.now)();
     this.pendingStates.set(state, now);
     this.gcExpired(now);
@@ -39567,6 +39440,105 @@ async function fetchTtcUserInfo(opts) {
   };
 }
+// src/feishu-auth/central-client.ts
+var CentralClientError = class extends Error {
+  constructor(code, message, cause) {
+    super(message);
+    this.code = code;
+    this.cause = cause;
+    this.name = "CentralClientError";
+  }
+  code;
+  cause;
+};
+async function centralRequest(opts, path59, init) {
+  const f = opts.fetchImpl ?? globalThis.fetch;
+  const url = `${opts.api.replace(/\/+$/, "")}${path59}`;
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
+  let res;
+  try {
+    res = await f(url, {
+      method: init.method,
+      headers: {
+        "content-type": "application/json",
+        ...init.bearer ? { authorization: `Bearer ${init.bearer}` } : {}
+      },
+      ...init.body !== void 0 ? { body: JSON.stringify(init.body) } : {},
+      signal: ctrl.signal
+    });
+  } catch (err) {
+    clearTimeout(timer);
+    throw new CentralClientError("NETWORK", `central server request failed: ${err.message}`, err);
+  }
+  clearTimeout(timer);
+  if (res.status === 401) {
+    throw new CentralClientError("UNAUTHORIZED", "TTC JWT invalid or expired");
+  }
+  if (!res.ok) {
+    throw new CentralClientError("API_ERROR", `central server HTTP ${res.status}`);
+  }
+  try {
+    return await res.json();
+  } catch (err) {
+    throw new CentralClientError("BAD_RESPONSE", "central server: invalid json response", err);
+  }
+}
+async function centralExchange(opts) {
+  const body = await centralRequest(opts, "/api/clawd-identity/exchange", {
+    method: "POST",
+    body: { ttcJwt: opts.ttcJwt, hubId: opts.hubId }
+  });
+  if (typeof body.token !== "string" || body.token.length === 0 || typeof body.unionId !== "string" || typeof body.displayName !== "string") {
+    throw new CentralClientError("BAD_RESPONSE", "exchange: missing token/unionId/displayName");
+  }
+  const hubUrl = typeof body.hubUrl === "string" && body.hubUrl.length > 0 ? body.hubUrl : null;
+  return { token: body.token, unionId: body.unionId, displayName: body.displayName, hubUrl };
+}
+async function centralUpsertHub(opts) {
+  const body = await centralRequest(opts, "/api/clawd-identity/hubs/self", {
+    method: "PUT",
+    bearer: opts.ttcJwt,
+    body: { url: opts.url, ...opts.name ? { name: opts.name } : {} }
+  });
+  if (body.ok !== true) {
+    throw new CentralClientError("BAD_RESPONSE", "upsertHub: server did not ack ok");
+  }
+  return { ok: true };
+}
+async function centralIntrospect(opts) {
+  const body = await centralRequest(opts, "/api/clawd-identity/introspect", {
+    method: "POST",
+    bearer: opts.hubTtcJwt,
+    body: { token: opts.token }
+  });
+  if (body.active !== true) {
+    return { active: false };
+  }
+  if (typeof body.unionId !== "string" || typeof body.displayName !== "string") {
+    throw new CentralClientError("BAD_RESPONSE", "introspect: active but missing identity");
+  }
+  return { active: true, unionId: body.unionId, displayName: body.displayName };
+}
+async function centralListHubs(opts) {
+  const body = await centralRequest(opts, "/api/clawd-identity/hubs", {
+    method: "GET",
+    bearer: opts.ttcJwt
+  });
+  if (!Array.isArray(body.hubs)) {
+    throw new CentralClientError("BAD_RESPONSE", "hubs: missing hubs array");
+  }
+  const out = [];
+  for (const raw of body.hubs) {
+    const h = raw;
+    if (typeof h.hubId !== "string" || typeof h.name !== "string" || typeof h.url !== "string") {
+      throw new CentralClientError("BAD_RESPONSE", "hubs: malformed hub entry");
+    }
+    out.push({ hubId: h.hubId, name: h.name, url: h.url });
+  }
+  return out;
+}
 // src/index.ts
 init_protocol();
@@ -39574,12 +39546,12 @@ init_protocol();
 init_protocol();
 // src/session/fork.ts
-var import_node_fs28 = __toESM(require("fs"), 1);
+var import_node_fs27 = __toESM(require("fs"), 1);
 var import_node_os14 = __toESM(require("os"), 1);
-var import_node_path32 = __toESM(require("path"), 1);
+var import_node_path31 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs28.default.readFileSync(file, "utf8");
+  const raw = import_node_fs27.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -39592,10 +39564,10 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path32.default.join(import_node_os14.default.homedir(), ".claude");
-  const projectDir = import_node_path32.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  const sourceFile = import_node_path32.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs28.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path31.default.join(import_node_os14.default.homedir(), ".claude");
+  const projectDir = import_node_path31.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  const sourceFile = import_node_path31.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs27.default.existsSync(sourceFile)) {
     throw new Error(`fork: source transcript not found: ${sourceFile}`);
   }
   const entries = readJsonlEntries(sourceFile);
@@ -39625,9 +39597,9 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const forkedFilePath = import_node_path32.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs28.default.mkdirSync(projectDir, { recursive: true });
-  import_node_fs28.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const forkedFilePath = import_node_path31.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs27.default.mkdirSync(projectDir, { recursive: true });
+  import_node_fs27.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
@@ -39979,7 +39951,7 @@ function buildPermissionHandlers(deps) {
 }
 // src/handlers/history.ts
-var path42 = __toESM(require("path"), 1);
+var path41 = __toESM(require("path"), 1);
 init_protocol();
 // src/session/recent-dirs.ts
@@ -39997,7 +39969,7 @@ function listRecentDirs(store, limit = 50) {
 }
 // src/permission/persona-paths.ts
-var path41 = __toESM(require("path"), 1);
+var path40 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -40010,26 +39982,26 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read") {
-  const root = path41.resolve(personaRoot);
-  const target = path41.resolve(absPath);
-  const sep3 = root.endsWith(path41.sep) ? "" : path41.sep;
+  const root = path40.resolve(personaRoot);
+  const target = path40.resolve(absPath);
+  const sep3 = root.endsWith(path40.sep) ? "" : path40.sep;
   if (!target.startsWith(root + sep3)) return false;
-  const rel = path41.relative(root, target);
+  const rel = path40.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId = rel.split(path41.sep)[0];
+  const personaId = rel.split(path40.sep)[0];
   if (!personaId) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path41.resolve(personaRoot);
-  const target = path41.resolve(absPath);
-  const sep3 = root.endsWith(path41.sep) ? "" : path41.sep;
+  const root = path40.resolve(personaRoot);
+  const target = path40.resolve(absPath);
+  const sep3 = root.endsWith(path40.sep) ? "" : path40.sep;
   if (!target.startsWith(root + sep3)) return null;
-  const rel = path41.relative(root, target);
+  const rel = path40.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path41.sep)[0];
+  const id = rel.split(path40.sep)[0];
   return id || null;
 }
@@ -40054,7 +40026,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path42.join(personaRoot, pid),
+          path41.join(personaRoot, pid),
           personaRoot,
           "read"
         );
@@ -40065,7 +40037,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path42.resolve(args.projectPath), personaRoot, "history:list");
+    assertGuestPath(ctx, path41.resolve(args.projectPath), personaRoot, "history:list");
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -40097,13 +40069,13 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path42.resolve(args.cwd), personaRoot, "history:subagents");
+    assertGuestPath(ctx, path41.resolve(args.cwd), personaRoot, "history:subagents");
     const subs = await history.listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path42.resolve(args.cwd), personaRoot, "history:subagent-read");
+    assertGuestPath(ctx, path41.resolve(args.cwd), personaRoot, "history:subagent-read");
     const res = await history.readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
   };
@@ -40111,7 +40083,7 @@ function buildHistoryHandlers(deps) {
     const dirs = listRecentDirs(store);
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path42.resolve(d.cwd), personaRoot, "read")
+        (d) => isGuestPathAllowed(ctx.grants, path41.resolve(d.cwd), personaRoot, "read")
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -40128,7 +40100,7 @@ function buildHistoryHandlers(deps) {
 }
 // src/handlers/workspace.ts
-var path43 = __toESM(require("path"), 1);
+var path42 = __toESM(require("path"), 1);
 var os15 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
@@ -40169,22 +40141,22 @@ function buildWorkspaceHandlers(deps) {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
     const fallbackCwd = isGuest && personaRoot ? personaRoot : os15.homedir();
-    const resolvedCwd = path43.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path43.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const resolvedCwd = path42.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path42.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list");
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path43.isAbsolute(args.path) ? path43.resolve(args.path) : path43.resolve(args.cwd, args.path);
+    const target = path42.isAbsolute(args.path) ? path42.resolve(args.path) : path42.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read");
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path43.resolve(args.cwd);
+    const cwdAbs = path42.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list");
     const list2 = skills.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -40196,7 +40168,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path43.resolve(args.cwd);
+    const cwdAbs = path42.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list");
     const list2 = agents.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -40215,20 +40187,20 @@ function buildWorkspaceHandlers(deps) {
 }
 // src/handlers/git.ts
-var path45 = __toESM(require("path"), 1);
+var path44 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 // src/workspace/git.ts
 var import_node_child_process6 = require("child_process");
-var import_node_fs29 = __toESM(require("fs"), 1);
-var import_node_path33 = __toESM(require("path"), 1);
+var import_node_fs28 = __toESM(require("fs"), 1);
+var import_node_path32 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process6.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path33.default.resolve(p2);
+  const resolved = import_node_path32.default.resolve(p2);
   try {
-    return import_node_fs29.default.realpathSync(resolved);
+    return import_node_fs28.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -40301,7 +40273,7 @@ async function listGitBranches(cwd) {
 // src/handlers/git.ts
 function assertGuestCwd(ctx, cwd, personaRoot, method) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
-  if (!isGuestPathAllowed(ctx.grants, path45.resolve(cwd), personaRoot, "read")) {
+  if (!isGuestPathAllowed(ctx.grants, path44.resolve(cwd), personaRoot, "read")) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -40356,7 +40328,7 @@ var DeleteArgsSchema = external_exports.object({
   capabilityId: external_exports.string().min(1)
 }).strict();
 function buildCapabilityHandlers(deps) {
-  const { manager, getShareBaseUrl, getPersonalCapability } = deps;
+  const { manager } = deps;
   const list = async () => {
     return {
       response: {
@@ -40382,21 +40354,9 @@ function buildCapabilityHandlers(deps) {
       }
     };
   };
-  const personalCapGet = async () => {
-    const { token, capability } = getPersonalCapability();
-    return {
-      response: {
-        type: "personal-cap:get:ok",
-        token,
-        capability: stripSecretHash(capability),
-        shareBaseUrl: getShareBaseUrl()
-      }
-    };
-  };
   return {
     "capability:list": list,
-    "capability:delete": del,
-    "personal-cap:get": personalCapGet
+    "capability:delete": del
   };
 }
@@ -40504,16 +40464,7 @@ function ensureOwner(ctx) {
     );
   }
 }
-function ensureGuestCtx(ctx) {
-  if (!ctx || ctx.principal.kind !== "guest" || !ctx.capabilityId) {
-    throw new ClawdError(
-      ERROR_CODES.UNAUTHORIZED,
-      "UNAUTHORIZED: received-capability:autoAttach requires guest cap ctx"
-    );
-  }
-}
 function buildReceivedCapabilityHandlers(deps) {
-  const now = deps.now ?? Date.now;
   const list = async (_frame, _client, ctx) => {
     ensureOwner(ctx);
     return {
@@ -40523,47 +40474,6 @@ function buildReceivedCapabilityHandlers(deps) {
       }
     };
   };
-  const add = async (frame, _client, ctx) => {
-    ensureOwner(ctx);
-    const { type: _t, requestId: _r, ...rest } = frame;
-    const args = ReceivedCapabilityAddArgsSchema.parse(rest);
-    let conn;
-    try {
-      conn = await deps.connectRemote({
-        url: args.remoteUrl,
-        token: args.token,
-        selfPrincipalId: deps.selfPrincipalId(),
-        selfDisplayName: deps.selfDisplayName()
-      });
-    } catch (e) {
-      throw new ClawdError(
-        ERROR_CODES.VALIDATION_ERROR,
-        `INVITE_REMOTE_UNREACHABLE: ${e.message}`
-      );
-    }
-    try {
-      const wh = await conn.whoami();
-      const rc = {
-        ownerPrincipalId: wh.ownerId,
-        ownerDisplayName: wh.displayName,
-        remoteUrl: args.remoteUrl,
-        capabilityId: wh.capabilityId,
-        capabilityToken: args.token,
-        grants: wh.grants,
-        receivedAt: now()
-      };
-      deps.store.upsert(rc);
-      deps.broadcast({ type: "received-capability:added", receivedCap: rc });
-      return {
-        response: { type: "received-capability:add:ok", receivedCap: rc }
-      };
-    } finally {
-      try {
-        conn.close();
-      } catch {
-      }
-    }
-  };
   const remove = async (frame, _client, ctx) => {
     ensureOwner(ctx);
     const { type: _t, requestId: _r, ...rest } = frame;
@@ -40580,30 +40490,9 @@ function buildReceivedCapabilityHandlers(deps) {
       }
     };
   };
-  const autoAttach = async (frame, _client, ctx) => {
-    ensureGuestCtx(ctx);
-    const { type: _t, requestId: _r, ...rest } = frame;
-    const args = ReceivedCapabilityAutoAttachArgsSchema.parse(rest);
-    const rc = {
-      ownerPrincipalId: args.ownerPrincipalId,
-      ownerDisplayName: args.ownerDisplayName,
-      remoteUrl: args.remoteUrl,
-      capabilityId: args.capabilityId,
-      capabilityToken: args.token,
-      grants: args.grants,
-      receivedAt: now()
-    };
-    deps.store.upsert(rc);
-    deps.broadcast({ type: "received-capability:added", receivedCap: rc });
-    return {
-      response: { type: "received-capability:autoAttach:ok" }
-    };
-  };
   return {
     "received-capability:list": list,
-    "received-capability:add": add,
-    "received-capability:remove": remove,
-    "received-capability:autoAttach": autoAttach
+    "received-capability:remove": remove
   };
 }
@@ -40625,14 +40514,13 @@ function buildWhoamiHandler(deps) {
         usedCount: 0
       };
     } else {
-      if (!ctx.capabilityId) {
-        throw new ClawdError(ERROR_CODES.UNAUTHORIZED, "whoami: guest ctx without capabilityId");
-      }
-      const cap = deps.capabilityManager.findById(ctx.capabilityId);
-      if (!cap) {
-        throw new ClawdError(ERROR_CODES.UNAUTHORIZED, `whoami: capability not found: ${ctx.capabilityId}`);
-      }
-      capability = stripSecretHash(cap);
+      capability = {
+        id: ctx.principal.id,
+        displayName: ctx.principal.displayName ?? "guest",
+        grants: ctx.grants,
+        issuedAt: 0,
+        usedCount: 0
+      };
     }
     const grantedPersonas = [];
     const isGuest = ctx.principal.kind === "guest";
@@ -40693,6 +40581,87 @@ function buildFeishuAuthHandlers(deps) {
   };
 }
+// src/handlers/hub.ts
+init_protocol();
+function ensureOwner2(ctx) {
+  if (!ctx || ctx.principal.kind !== "owner") {
+    throw new ClawdError(ERROR_CODES.UNAUTHORIZED, "UNAUTHORIZED: hub:* requires owner ctx");
+  }
+}
+function buildHubHandlers(deps) {
+  const now = deps.now ?? Date.now;
+  const list = async (_frame, _client, ctx) => {
+    ensureOwner2(ctx);
+    const hubs = await deps.listHubs();
+    return {
+      response: { type: "hub:list:ok", hubs }
+    };
+  };
+  const connect = async (frame, _client, ctx) => {
+    ensureOwner2(ctx);
+    const { type: _t, requestId: _r, ...rest } = frame;
+    const args = HubConnectArgsSchema.parse(rest);
+    const exchanged = await deps.exchange(args.hubId);
+    const url = args.url ?? exchanged.hubUrl;
+    if (!url) {
+      throw new ClawdError(
+        ERROR_CODES.VALIDATION_ERROR,
+        "HUB_URL_UNKNOWN: hub \u672A\u4E0A\u62A5\u5730\u5740\uFF08\u5BF9\u65B9 daemon \u672A\u767B\u5F55\u6216\u672A\u5F00 tunnel\uFF09\uFF0C\u65E0\u6CD5\u8FDE\u63A5"
+      );
+    }
+    let conn;
+    try {
+      conn = await deps.connectRemote({
+        url,
+        token: exchanged.token,
+        selfPrincipalId: deps.selfPrincipalId(),
+        selfDisplayName: deps.selfDisplayName(),
+        // Phase 2 自动反向（spec 决策 #11）：自报本机可达地址，让 hub 反向加我为联系人；
+        // 本机无 tunnel → null → connectRemote 省略 selfUrl 字段（不造假数据）
+        selfUrl: deps.selfUrl() ?? void 0
+      });
+    } catch (e) {
+      throw new ClawdError(
+        ERROR_CODES.VALIDATION_ERROR,
+        `HUB_UNREACHABLE: ${e.message}`
+      );
+    }
+    try {
+      const wh = await conn.whoami();
+      const rc = {
+        ownerPrincipalId: wh.ownerId,
+        ownerDisplayName: wh.displayName || args.name || args.hubId,
+        remoteUrl: url,
+        capabilityId: wh.capabilityId,
+        // Phase 2：connectToken 存中心 server 签发的 connect token（断线重连复用，
+        // 不需要重新换票——token 长期有效，撤销由中心 server introspect 兜底）
+        connectToken: exchanged.token,
+        grants: wh.grants,
+        receivedAt: now()
+      };
+      deps.store.upsert(rc);
+      deps.broadcast({ type: "received-capability:added", receivedCap: rc });
+      return {
+        response: {
+          type: "hub:connect:ok",
+          hubId: wh.ownerId,
+          name: rc.ownerDisplayName,
+          url
+        }
+      };
+    } finally {
+      try {
+        conn.close();
+      } catch {
+      }
+    }
+  };
+  return {
+    "hub:list": list,
+    "hub:connect": connect
+  };
+}
 // src/handlers/meta.ts
 var import_node_os15 = __toESM(require("os"), 1);
 init_protocol();
@@ -40799,14 +40768,8 @@ function buildPersonaHandlers(deps) {
   const update = async (frame) => {
     const { type: _type, requestId: _requestId, ...rest } = frame;
     const args = PersonaUpdateArgsSchema.parse(rest);
-    const { personality, networkAllowedDomains, ...metaPatch } = args.patch;
-    let persona = personaManager.update(args.personaId, metaPatch, personality);
-    if (networkAllowedDomains !== void 0) {
-      persona = personaManager.updateNetworkAllowedDomains(
-        args.personaId,
-        networkAllowedDomains
-      );
-    }
+    const { personality, ...metaPatch } = args.patch;
+    const persona = personaManager.update(args.personaId, metaPatch, personality);
     return { response: { type: "persona:info", ...persona } };
   };
   const del = async (frame) => {
@@ -40826,7 +40789,7 @@ function buildPersonaHandlers(deps) {
 }
 // src/handlers/attachment.ts
-var import_node_path34 = __toESM(require("path"), 1);
+var import_node_path33 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -40880,12 +40843,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path34.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path34.default.isAbsolute(args.relPath) ? import_node_path34.default.resolve(args.relPath) : import_node_path34.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path33.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path33.default.isAbsolute(args.relPath) ? import_node_path33.default.resolve(args.relPath) : import_node_path33.default.resolve(cwdAbs, args.relPath);
     assertGuestAttachmentPath(ctx, candidateAbs, deps.personaRoot, "attachment.signUrl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path34.default.isAbsolute(e.relPath) ? import_node_path34.default.resolve(e.relPath) : import_node_path34.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path33.default.isAbsolute(e.relPath) ? import_node_path33.default.resolve(e.relPath) : import_node_path33.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -40909,7 +40872,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path34.default.resolve(f.cwd), deps.personaRoot, method);
+    assertGuestAttachmentPath(ctx, import_node_path33.default.resolve(f.cwd), deps.personaRoot, method);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -40981,19 +40944,19 @@ function buildAttachmentHandlers(deps) {
 // src/handlers/extension.ts
 var import_promises7 = __toESM(require("fs/promises"), 1);
-var import_node_path39 = __toESM(require("path"), 1);
+var import_node_path38 = __toESM(require("path"), 1);
 init_protocol();
 // src/extension/bundle-zip.ts
 var import_promises4 = __toESM(require("fs/promises"), 1);
-var import_node_path35 = __toESM(require("path"), 1);
-var import_node_crypto12 = __toESM(require("crypto"), 1);
+var import_node_path34 = __toESM(require("path"), 1);
+var import_node_crypto11 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
   const zip = new import_jszip2.default();
   for (const rel of entries) {
-    const abs = import_node_path35.default.join(dir, rel);
+    const abs = import_node_path34.default.join(dir, rel);
     const content = await import_promises4.default.readFile(abs);
     zip.file(rel, content, { date: FIXED_DATE });
   }
@@ -41002,7 +40965,7 @@ async function bundleExtensionDir(dir) {
     compression: "DEFLATE",
     compressionOptions: { level: 6 }
   });
-  const sha256 = import_node_crypto12.default.createHash("sha256").update(buffer).digest("hex");
+  const sha256 = import_node_crypto11.default.createHash("sha256").update(buffer).digest("hex");
   return { buffer, sha256 };
 }
 var FIXED_DATE = /* @__PURE__ */ new Date("2020-01-01T00:00:00.000Z");
@@ -41014,7 +40977,7 @@ async function listFilesSorted(rootDir) {
   return out;
 }
 async function walk(absRoot, relPrefix, out) {
-  const dirAbs = import_node_path35.default.join(absRoot, relPrefix);
+  const dirAbs = import_node_path34.default.join(absRoot, relPrefix);
   const entries = await import_promises4.default.readdir(dirAbs, { withFileTypes: true });
   for (const e of entries) {
     if (IGNORE_BASENAMES.has(e.name)) continue;
@@ -41068,25 +41031,25 @@ function computePublishCheck(args) {
 // src/extension/install-flow.ts
 var import_promises5 = __toESM(require("fs/promises"), 1);
-var import_node_path37 = __toESM(require("path"), 1);
+var import_node_path36 = __toESM(require("path"), 1);
 var import_node_os17 = __toESM(require("os"), 1);
-var import_node_crypto13 = __toESM(require("crypto"), 1);
+var import_node_crypto12 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 // src/extension/paths.ts
 var import_node_os16 = __toESM(require("os"), 1);
-var import_node_path36 = __toESM(require("path"), 1);
+var import_node_path35 = __toESM(require("path"), 1);
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path36.default.join(import_node_os16.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path35.default.join(import_node_os16.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
-  return import_node_path36.default.join(clawdHomeRoot(override), "extensions");
+  return import_node_path35.default.join(clawdHomeRoot(override), "extensions");
 }
 function publishedChannelsFile(override) {
-  return import_node_path36.default.join(clawdHomeRoot(override), "extensions-published.json");
+  return import_node_path35.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
 function bundleCacheRoot(override) {
-  return import_node_path36.default.join(clawdHomeRoot(override), "extension-bundles");
+  return import_node_path35.default.join(clawdHomeRoot(override), "extension-bundles");
 }
 // src/extension/install-flow.ts
@@ -41099,7 +41062,7 @@ var InstallError = class extends Error {
 };
 async function installFromChannel(args, deps) {
   const { channelRef, snapshotHash, bundleZip } = args;
-  const computed = import_node_crypto13.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto12.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new InstallError(
       "HASH_MISMATCH",
@@ -41113,7 +41076,7 @@ async function installFromChannel(args, deps) {
     throw new InstallError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path37.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path36.default.isAbsolute(name)) {
       throw new InstallError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -41145,7 +41108,7 @@ async function installFromChannel(args, deps) {
     );
   }
   const localExtId = namespacedExtId(ownerSlug, channelRef.ownerPrincipalId);
-  const destDir = import_node_path37.default.join(deps.extensionsRoot, localExtId);
+  const destDir = import_node_path36.default.join(deps.extensionsRoot, localExtId);
   let destExists = false;
   try {
     await import_promises5.default.access(destDir);
@@ -41159,16 +41122,16 @@ async function installFromChannel(args, deps) {
     );
   }
   const stage = await import_promises5.default.mkdtemp(
-    import_node_path37.default.join(import_node_os17.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+    import_node_path36.default.join(import_node_os17.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path37.default.join(stage, name);
+      const dest = import_node_path36.default.join(stage, name);
       if (entry.dir) {
         await import_promises5.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises5.default.mkdir(import_node_path37.default.dirname(dest), { recursive: true });
+      await import_promises5.default.mkdir(import_node_path36.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises5.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -41189,9 +41152,9 @@ async function installFromChannel(args, deps) {
 // src/extension/update-flow.ts
 var import_promises6 = __toESM(require("fs/promises"), 1);
-var import_node_path38 = __toESM(require("path"), 1);
+var import_node_path37 = __toESM(require("path"), 1);
 var import_node_os18 = __toESM(require("os"), 1);
-var import_node_crypto14 = __toESM(require("crypto"), 1);
+var import_node_crypto13 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
 var UpdateError = class extends Error {
   constructor(code, message) {
@@ -41206,11 +41169,11 @@ async function updateFromChannel(args, deps) {
     channelRef.extId,
     channelRef.ownerPrincipalId
   );
-  const liveDir = import_node_path38.default.join(deps.extensionsRoot, localExtId);
+  const liveDir = import_node_path37.default.join(deps.extensionsRoot, localExtId);
   const prevDir = `${liveDir}.prev`;
   let existingVersion;
   try {
-    const raw = await import_promises6.default.readFile(import_node_path38.default.join(liveDir, "manifest.json"), "utf8");
+    const raw = await import_promises6.default.readFile(import_node_path37.default.join(liveDir, "manifest.json"), "utf8");
     const parsed2 = ExtensionManifestSchema.safeParse(JSON.parse(raw));
     if (!parsed2.success) {
       throw new UpdateError(
@@ -41229,7 +41192,7 @@ async function updateFromChannel(args, deps) {
     if (e instanceof UpdateError) throw e;
     throw e;
   }
-  const computed = import_node_crypto14.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto13.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new UpdateError(
       "HASH_MISMATCH",
@@ -41243,7 +41206,7 @@ async function updateFromChannel(args, deps) {
     throw new UpdateError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path38.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path37.default.isAbsolute(name)) {
       throw new UpdateError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -41278,16 +41241,16 @@ async function updateFromChannel(args, deps) {
   await import_promises6.default.rm(prevDir, { recursive: true, force: true });
   await import_promises6.default.rename(liveDir, prevDir);
   const stage = await import_promises6.default.mkdtemp(
-    import_node_path38.default.join(import_node_os18.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+    import_node_path37.default.join(import_node_os18.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path38.default.join(stage, name);
+      const dest = import_node_path37.default.join(stage, name);
       if (entry.dir) {
         await import_promises6.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises6.default.mkdir(import_node_path38.default.dirname(dest), { recursive: true });
+      await import_promises6.default.mkdir(import_node_path37.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises6.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -41380,7 +41343,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
       );
     }
   }
-  const manifestPath = import_node_path39.default.join(root, extId, "manifest.json");
+  const manifestPath = import_node_path38.default.join(root, extId, "manifest.json");
   const manifest = await readManifest(root, extId);
   const next = { ...manifest, version: newVersion };
   const tmp = `${manifestPath}.tmp`;
@@ -41388,7 +41351,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
   await import_promises7.default.rename(tmp, manifestPath);
 }
 async function readManifest(root, extId) {
-  const file = import_node_path39.default.join(root, extId, "manifest.json");
+  const file = import_node_path38.default.join(root, extId, "manifest.json");
   let raw;
   try {
     raw = await import_promises7.default.readFile(file, "utf8");
@@ -41479,7 +41442,7 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256, buffer } = await bundleExtensionDir(import_node_path39.default.join(deps.root, extId));
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path38.default.join(deps.root, extId));
     return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
@@ -41661,7 +41624,7 @@ function buildExtensionHandlers(deps) {
 // src/extension/registry.ts
 var import_promises8 = __toESM(require("fs/promises"), 1);
-var import_node_path40 = __toESM(require("path"), 1);
+var import_node_path39 = __toESM(require("path"), 1);
 async function loadAll(root) {
   let entries;
   try {
@@ -41674,13 +41637,13 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path40.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path39.default.join(root, ent.name), ent.name));
   }
   records.sort((a, b2) => a.extId < b2.extId ? -1 : a.extId > b2.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path40.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path39.default.join(dir, "manifest.json");
   let raw;
   try {
     raw = await import_promises8.default.readFile(manifestPath, "utf8");
@@ -41725,7 +41688,7 @@ async function loadOne(dir, dirName) {
 // src/extension/uninstall.ts
 var import_promises9 = __toESM(require("fs/promises"), 1);
-var import_node_path41 = __toESM(require("path"), 1);
+var import_node_path40 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -41734,7 +41697,7 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path41.default.join(deps.root, deps.extId);
+  const dir = import_node_path40.default.join(deps.root, deps.extId);
   try {
     await import_promises9.default.access(dir);
   } catch {
@@ -41759,9 +41722,7 @@ function buildMethodHandlers(deps) {
       personaRegistry: deps.personaRegistry
     }),
     ...buildCapabilityHandlers({
-      manager: deps.capabilityManager,
-      getShareBaseUrl: deps.getShareBaseUrl,
-      getPersonalCapability: deps.getPersonalCapability
+      manager: deps.capabilityManager
     }),
     ...buildInboxHandlers({
       manager: deps.inboxManager,
@@ -41769,10 +41730,7 @@ function buildMethodHandlers(deps) {
     }),
     ...buildReceivedCapabilityHandlers({
       store: deps.receivedCapabilityStore,
-      connectRemote: deps.connectRemote,
-      broadcast: deps.broadcastToOwners,
-      selfPrincipalId: () => deps.ownerPrincipalId,
-      selfDisplayName: () => deps.ownerDisplayName
+      broadcast: deps.broadcastToOwners
     }),
     whoami: buildWhoamiHandler({
       ownerDisplayName: deps.ownerDisplayName,
@@ -41781,6 +41739,7 @@ function buildMethodHandlers(deps) {
       capabilityManager: deps.capabilityManager
     }),
     ...buildFeishuAuthHandlers(deps.feishuAuth),
+    ...buildHubHandlers(deps.feishuHub),
     ...deps.attachment ? buildAttachmentHandlers(deps.attachment) : {},
     ...buildExtensionHandlers({
       loadAll,
@@ -41809,23 +41768,22 @@ var METHOD_GRANT_MAP = {
   // "查 capabilityManager 拿 caller 的 guest capability"。
   "whoami": { kind: "public" },
   // ---- capability platform（admin-only） ----
-  // global personal token (2026-05-25): capability:issue / bindPeer 已下线；
-  // personal capability 由 daemon 启动时自动创建，personal-cap:get 是 owner-only 拿 token + shareBaseUrl
+  // 飞书统一身份 Phase 2 (2026-06-01, spec 决策 #12): personal-cap:get / capability:issue /
+  // bindPeer 已下线（personal token / 邀请码全链路删除）。capability:list / delete 保留供调试 +
+  // 撤销级联 + 清旧 per-peer cap。
   "capability:list": ADMIN_ANY,
   "capability:delete": ADMIN_ANY,
-  "personal-cap:get": ADMIN_ANY,
   // ---- inbox: channel-based IM (capability platform v3) ----
   // 三条都 'public' — capability 本身就是授权凭证. handler 内额外校验
   // guest ctx.capabilityId === args.capabilityId, 防 guest 越权操作别的 channel.
   "inbox:list": { kind: "public" },
   "inbox:markRead": { kind: "public" },
   "inbox:postMessage": { kind: "public" },
-  // ---- received-capability:* (bidirectional cap 视角 B 2026-05-23) ----
-  // owner-only: list / add / remove；guest-only: autoAttach (capability 本身是凭证)
+  // ---- received-capability:* (联系人列表，视角 B 双向授权模型) ----
+  // 飞书统一身份 Phase 2 (spec 决策 #12): owner-only add / guest-only autoAttach 已删除
+  // （hub:connect 落同一 store + 自动反向替代）。list / remove 保留作联系人读 / 删。
   "received-capability:list": ADMIN_ANY,
-  "received-capability:add": ADMIN_ANY,
   "received-capability:remove": ADMIN_ANY,
-  "received-capability:autoAttach": { kind: "public" },
   // ---- session:* / chat:* 业务方法（v2 Phase 8 两层模型）----
   // dispatcher 不验资源，handler 内按 ctx + frame.args 反查 ownerPersonaId 调 assertGrant。
   // owner 自动通过（ctx 自带 '*':'admin' grant 一切 match）；guest 在被授权 persona 内可调。
@@ -41948,7 +41906,7 @@ function computeGrantForFrame(method, frame) {
 // src/extension/runtime.ts
 var import_node_child_process7 = require("child_process");
-var import_node_path42 = __toESM(require("path"), 1);
+var import_node_path41 = __toESM(require("path"), 1);
 var import_promises10 = require("timers/promises");
 // src/extension/port-allocator.ts
@@ -42049,7 +42007,7 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path42.default.join(this.root, extId);
+    const dir = import_node_path41.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
@@ -42161,7 +42119,7 @@ ${handle.stderrTail}`
 // src/extension/published-channels.ts
 var import_promises11 = __toESM(require("fs/promises"), 1);
-var import_node_path43 = __toESM(require("path"), 1);
+var import_node_path42 = __toESM(require("path"), 1);
 init_zod();
 var PublishedChannelsError = class extends Error {
   constructor(code, message) {
@@ -42260,7 +42218,7 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises11.default.mkdir(import_node_path43.default.dirname(this.filePath), { recursive: true });
+    await import_promises11.default.mkdir(import_node_path42.default.dirname(this.filePath), { recursive: true });
     await import_promises11.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
     await import_promises11.default.rename(tmp, this.filePath);
   }
@@ -42268,7 +42226,7 @@ var PublishedChannelStore = class {
 // src/extension/bundle-cache.ts
 var import_promises12 = __toESM(require("fs/promises"), 1);
-var import_node_path44 = __toESM(require("path"), 1);
+var import_node_path43 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -42277,14 +42235,14 @@ var BundleCache = class {
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
     await import_promises12.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path44.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path43.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
     await import_promises12.default.writeFile(tmp, buffer, { mode: 384 });
     await import_promises12.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path44.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path43.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
       return await import_promises12.default.readFile(file);
     } catch (e) {
@@ -42294,7 +42252,7 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path44.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path43.default.join(this.rootDir, `${snapshotHash}.zip`);
     await import_promises12.default.rm(file, { force: true });
   }
 };
@@ -42303,7 +42261,7 @@ var BundleCache = class {
 async function startDaemon(config) {
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path45.default.join(config.dataDir, "clawd.log")
+    file: import_node_path44.default.join(config.dataDir, "clawd.log")
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const stateMgr = new StateFileManager({ dataDir: config.dataDir });
@@ -42335,8 +42293,6 @@ async function startDaemon(config) {
   receivedCapabilityStore.load();
   const capabilityStore = new CapabilityStore(config.dataDir);
   const capabilityRegistry = new CapabilityRegistry(capabilityStore);
-  const personalCapability = loadOrCreatePersonalCapability({ dataDir: config.dataDir });
-  capabilityRegistry.upsertCapability(personalCapability.capability);
   const capabilityManager = new CapabilityManager(capabilityRegistry, {
     onDeleted: (cap) => {
       const deletedAt = Date.now();
@@ -42362,17 +42318,36 @@ async function startDaemon(config) {
     // Task 1.7：authenticate 注入路径替代 expectedToken 单 token 比对。
     // owner 路径 constantTimeEqual 防侧信道；guest 路径走 capabilityRegistry.
     expectedToken: resolvedAuthToken,
-    authenticate: (t, selfPrincipalId, selfDisplayName) => {
-      return authenticate(t, {
+    authenticate: async (t, _selfPrincipalId, _selfDisplayName, selfUrl) => {
+      const result = await authenticate(t, {
         isOwnerToken: (x) => resolvedAuthToken != null && constantTimeEqual(x, resolvedAuthToken),
         ownerPrincipalId,
         ownerDisplayName,
-        // 飞书 gate（spec 决策 #9）：未激活飞书身份时不接受 guest（capability token）入站——
-        // 不传 registry 让 guest token 一律 BAD_TOKEN。owner 自己连接不受影响。
-        ...feishuActive ? { capabilityRegistry } : {},
-        selfPrincipalId,
-        selfDisplayName
+        // 飞书 gate（spec 决策 #9）：未激活飞书身份时不接受 guest 入站（不注入 introspect
+        // → 一律 BAD_TOKEN）。已激活时 hub 用自己的 ttcJwt 做验票方认证；
+        // ttcJwt 每次验票时从 store 现读（热切换后立即用新身份）。
+        ...feishuActive ? {
+          introspectConnectToken: async (token) => {
+            const record = ownerIdentityStore.read();
+            if (!record) return { active: false };
+            return centralIntrospect({
+              api: config.clawosApi ?? DEFAULT_CLAWOS_API,
+              hubTtcJwt: record.ttcToken,
+              token
+            });
+          }
+        } : {}
       });
+      if (result.ok && result.context.principal.kind === "guest") {
+        autoReverseContact({
+          store: receivedCapabilityStore,
+          broadcast: (frame) => wsServer?.broadcastToOwners(frame),
+          unionId: result.context.principal.id,
+          displayName: result.context.principal.displayName ?? result.context.principal.id,
+          selfUrl
+        });
+      }
+      return result;
     },
     onAuthed: (h, ctx) => wsServer?.attachClientContext(h.id, ctx),
     buildOwnerContext: () => ownerContext(ownerPrincipalId, ownerDisplayName),
@@ -42395,7 +42370,7 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path45.default.join(config.dataDir, "personas"));
+  const personaStore = new PersonaStore(import_node_path44.default.join(config.dataDir, "personas"));
   const defaultsRoot = findDefaultsRoot();
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -42412,7 +42387,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path45.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path44.default.join(config.dataDir, "personas"),
     personaStore,
     ownerDisplayName,
     ownerPrincipalId,
@@ -42436,10 +42411,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path45.default.isAbsolute(input.relPath) ? input.relPath : import_node_path45.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path44.default.isAbsolute(input.relPath) ? input.relPath : import_node_path44.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs30.default.statSync(absPath).size;
+          size = import_node_fs29.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -42522,6 +42497,22 @@ async function startDaemon(config) {
     }
     return `http://${config.host}:${config.port}`;
   };
+  const reportHubUrl = async () => {
+    if (!feishuActive || !currentTunnelUrl) return;
+    const record = ownerIdentityStore.read();
+    if (!record) return;
+    try {
+      await centralUpsertHub({
+        api: config.clawosApi ?? DEFAULT_CLAWOS_API,
+        ttcJwt: record.ttcToken,
+        url: currentTunnelUrl,
+        name: ownerDisplayName
+      });
+      logger.info("hub url reported to central server", { url: currentTunnelUrl });
+    } catch (err) {
+      logger.warn("hub url report failed (best-effort)", { err: err.message });
+    }
+  };
   const extensionRuntime = new Runtime({ root: extensionsRoot() });
   const publishedChannelStore = new PublishedChannelStore(publishedChannelsFile());
   await publishedChannelStore.load();
@@ -42571,17 +42562,12 @@ async function startDaemon(config) {
       // 'persona/<pid>/owner'，default 走 'default'。
       getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
       // guest path guard：candidate 必须在 personaRoot 子树下
-      personaRoot: import_node_path45.default.join(config.dataDir, "personas")
+      personaRoot: import_node_path44.default.join(config.dataDir, "personas")
     },
     // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-    personaRoot: import_node_path45.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path44.default.join(config.dataDir, "personas"),
     // capability:list / delete handler 依赖
     capabilityManager,
-    // personal-cap:get 返回的 shareBaseUrl 用此 base URL：
-    // tunnel 拉起后切到反代 wss://... 地址；否则本机 ws://host:port。
-    getShareBaseUrl: () => currentTunnelUrl ?? `ws://${config.host}:${config.port}`,
-    // global personal token (2026-05-25): personal-cap:get handler 直接返回此 token + cap
-    getPersonalCapability: () => personalCapability,
     // v2 Phase 6: whoami handler 装在 owner principal.displayName + persona 解析
     ownerDisplayName,
     // owner-id stabilization: whoami 用稳定 ownerPrincipalId 替代 'owner' 字面量
@@ -42593,12 +42579,10 @@ async function startDaemon(config) {
     // cascade 接 store (list 统计 deletedInboxEvents).
     inboxManager,
     inboxStore,
-    // bidirectional cap 视角 B: 对方颁给我的 cap 走这个 store
+    // 联系人列表 store（hub:connect 落同一 store；视角 B 双向授权模型）
     receivedCapabilityStore,
-    // received-capability:added / removed broadcast；复用 capability:tokenIssued 同款通路
+    // received-capability:removed broadcast；复用 capability:tokenIssued 同款通路
     broadcastToOwners: (frame) => wsServer?.broadcastToOwners(frame),
-    // received-capability:add 临时 ws 连远端跑 whoami — 直连 ws (不走 transport listener)
-    connectRemote,
     // extension runtime (v1: local-mode only). Instance owned by daemon top
     // level so stopAll() runs in the shutdown hook below.
     extensionRuntime,
@@ -42606,7 +42590,42 @@ async function startDaemon(config) {
     publishedChannelStore,
     bundleCache,
     // 飞书统一身份 Phase 1：登录 RPC handlers（auth:login:start / getIdentity / logout）
-    feishuAuth: { loginFlow, ownerIdentityStore }
+    feishuAuth: { loginFlow, ownerIdentityStore },
+    // 飞书统一身份 Phase 2：hub 目录 + 连接（中心 server 代理）。
+    // exchange/listHubs 包掉 owner ttcJwt（每次现读 store——热切换后立即用新身份）；
+    // dispatcher 的 FEISHU_GATED_METHODS gate 已保证未登录时这些 RPC 到不了 handler，
+    // 这里的 FEISHU_LOGIN_REQUIRED 抛错只是防御纵深。
+    feishuHub: {
+      store: receivedCapabilityStore,
+      exchange: async (hubId) => {
+        const record = ownerIdentityStore.read();
+        if (!record) {
+          throw new ClawdError(ERROR_CODES.FEISHU_LOGIN_REQUIRED, "hub:connect requires feishu login");
+        }
+        return centralExchange({
+          api: config.clawosApi ?? DEFAULT_CLAWOS_API,
+          ttcJwt: record.ttcToken,
+          hubId
+        });
+      },
+      listHubs: async () => {
+        const record = ownerIdentityStore.read();
+        if (!record) {
+          throw new ClawdError(ERROR_CODES.FEISHU_LOGIN_REQUIRED, "hub:list requires feishu login");
+        }
+        return centralListHubs({
+          api: config.clawosApi ?? DEFAULT_CLAWOS_API,
+          ttcJwt: record.ttcToken
+        });
+      },
+      connectRemote,
+      broadcast: (frame) => wsServer?.broadcastToOwners(frame),
+      selfPrincipalId: () => ownerPrincipalId,
+      selfDisplayName: () => ownerDisplayName,
+      // Phase 2 自动反向（spec 决策 #11）：本机可达地址 = tunnel URL（公网），出站连 hub 时
+      // 透传让 hub 反向加我为联系人。无 tunnel（仅本机 ws）→ null，hub 不自动反向（不造假数据）。
+      selfUrl: () => currentTunnelUrl
+    }
   });
   let handlers = makeHandlers();
   const authResolver = new AuthContextResolver({
@@ -42651,6 +42670,7 @@ async function startDaemon(config) {
           wsServer?.setOwnerPrincipalId(result.identity.unionId);
           wsServer?.broadcastToOwners({ type: "auth:login:done", identity: result.identity });
           setImmediate(() => wsServer?.closeAllClients());
+          void reportHubUrl();
         } else {
           wsServer?.broadcastToOwners({ type: "auth:login:failed", reason: result.reason });
         }
@@ -42821,8 +42841,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path45.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path45.default.join(config.dataDir, "frpc.log")}`
+        `Frpc config: ${import_node_path44.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path44.default.join(config.dataDir, "frpc.log")}`
       ];
       const width = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width + 4);
@@ -42835,10 +42855,11 @@ ${bar}
 `);
       try {
-        const connectPath = import_node_path45.default.join(config.dataDir, "connect.txt");
-        import_node_fs30.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path44.default.join(config.dataDir, "connect.txt");
+        import_node_fs29.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
+      void reportHubUrl();
     } catch (err) {
       const tunnelError = err?.message ?? String(err);
       try {
@@ -42902,9 +42923,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path45.default.join(dataDir, "persons");
+  const dir = import_node_path44.default.join(dataDir, "persons");
   try {
-    import_node_fs30.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs29.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }