@clawos-dev/clawd 0.2.190-beta.380.a359b26 → 0.2.191-beta.381.2ccc9ac

package/dist/cli.cjs

@@ -5599,7 +5599,7 @@ var init_capability = __esm({
 });
 
 // ../protocol/src/inbox.ts
-var InboxMessageSchema, InboxPostMessageArgsSchema, InboxListArgsSchema, InboxMarkReadArgsSchema;
+var InboxMessageSchema, InboxPostMessageArgsSchema, InboxListArgsSchema, InboxMarkReadArgsSchema, InboxSendDmArgsSchema;
 var init_inbox = __esm({
   "../protocol/src/inbox.ts"() {
     "use strict";
@@ -5610,13 +5610,18 @@ var init_inbox = __esm({
       senderDeviceId: external_exports.string().min(1),
       text: external_exports.string().min(1),
       createdAt: external_exports.number().int().nonnegative(),
-      readBy: external_exports.record(external_exports.string().min(1), external_exports.number().int().positive()).default({})
+      readBy: external_exports.record(external_exports.string().min(1), external_exports.number().int().positive()).default({}),
+      // persona 代发署名（B 版设计）：非空 = 该消息由某 persona 代发，非真人手打。
+      // 缺省 = 真人。routing 身份仍看 senderDeviceId；origin 只用于末端 UI 渲染来源。
+      origin: external_exports.object({ kind: external_exports.literal("persona"), personaId: external_exports.string().min(1) }).optional()
     }).strict();
     InboxPostMessageArgsSchema = external_exports.object({
       peerDeviceId: external_exports.string().min(1).optional(),
       id: external_exports.string().min(1),
       text: external_exports.string().min(1),
-      createdAt: external_exports.number().int().nonnegative()
+      createdAt: external_exports.number().int().nonnegative(),
+      // persona 代发署名（跨 daemon forward 时随远程腿透传；真人发缺省）。
+      origin: external_exports.object({ kind: external_exports.literal("persona"), personaId: external_exports.string().min(1) }).optional()
     }).strict();
     InboxListArgsSchema = external_exports.object({
       peerDeviceId: external_exports.string().min(1),
@@ -5626,6 +5631,10 @@ var init_inbox = __esm({
       peerDeviceId: external_exports.string().min(1),
       upToCreatedAt: external_exports.number().int().nonnegative()
     }).strict();
+    InboxSendDmArgsSchema = external_exports.object({
+      peerDeviceId: external_exports.string().min(1).optional(),
+      text: external_exports.string().min(1)
+    });
   }
 });
 
@@ -7276,7 +7285,7 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs60 = require("fs");
+    var fs61 = require("fs");
     var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
     var path67 = require("path");
@@ -7333,20 +7342,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs60.mkdirSync(path67.dirname(file), { recursive: true });
-          const fd = fs60.openSync(file, flags, mode);
+          if (sonic.mkdir) fs61.mkdirSync(path67.dirname(file), { recursive: true });
+          const fd = fs61.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs60.mkdir(path67.dirname(file), { recursive: true }, (err) => {
+        fs61.mkdir(path67.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs60.open(file, flags, mode, fileOpened);
+          fs61.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs60.open(file, flags, mode, fileOpened);
+        fs61.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -7387,8 +7396,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs60.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs60.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs61.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs61.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -7397,15 +7406,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs60.writeSync(this.fd, this._writingBuf);
+            return fs61.writeSync(this.fd, this._writingBuf);
           }
-          return fs60.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs61.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs60.write(this.fd, this._writingBuf, this.release);
+            return fs61.write(this.fd, this._writingBuf, this.release);
           }
-          return fs60.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs61.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -7462,7 +7471,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs60.fsyncSync(this.fd);
+          fs61.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -7576,7 +7585,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs60.fsync(this.fd, (err) => {
+            fs61.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -7678,7 +7687,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs60.close(fd, (err) => {
+          fs61.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -7727,7 +7736,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs60.writeSync(this.fd, buf) : fs60.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs61.writeSync(this.fd, buf) : fs61.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -7743,7 +7752,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs60.fsyncSync(this.fd);
+        fs61.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -7764,7 +7773,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs60.writeSync(this.fd, buf);
+          const n = fs61.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -7792,13 +7801,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs60.writeSync(this.fd, this._writingBuf) : fs60.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs61.writeSync(this.fd, this._writingBuf) : fs61.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs60.write(this.fd, this._writingBuf, release);
+        fs61.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -7807,7 +7816,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs60.writeSync(this.fd, this._writingBuf);
+          const written = fs61.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -7816,7 +7825,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs60.write(this.fd, this._writingBuf, release);
+        fs61.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -7832,12 +7841,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs60.fsync(sonic.fd, closeWrapped);
+        fs61.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs60.close(sonic.fd, done);
+          fs61.close(sonic.fd, done);
         } else {
           done();
         }
@@ -10201,7 +10210,7 @@ var require_multistream = __commonJS({
 var require_pino = __commonJS({
   "../node_modules/.pnpm/pino@9.14.0/node_modules/pino/pino.js"(exports2, module2) {
     "use strict";
-    var os23 = require("os");
+    var os22 = require("os");
     var stdSerializers = require_pino_std_serializers();
     var caller = require_caller();
     var redaction = require_redaction();
@@ -10248,7 +10257,7 @@ var require_pino = __commonJS({
     } = symbols;
     var { epochTime, nullTime } = time;
     var { pid } = process;
-    var hostname = os23.hostname();
+    var hostname = os22.hostname();
     var defaultErrorSerializer = stdSerializers.err;
     var defaultOptions = {
       level: "info",
@@ -11044,7 +11053,7 @@ var init_lib = __esm({
       tokenize: function tokenize(value) {
         return Array.from(value);
       },
-      join: function join3(chars) {
+      join: function join5(chars) {
         return chars.join("");
       },
       postProcess: function postProcess(changeObjects) {
@@ -11226,33 +11235,13 @@ var init_tool_result_extra = __esm({
 function cwdToHashDir(cwd) {
   return cwd.replace(/[^a-zA-Z0-9]/g, "-");
 }
-function newestSubagentMtimeMs(projectsRoot, cwd, toolSessionId) {
-  const dir = import_node_path4.default.join(projectsRoot, cwdToHashDir(cwd), toolSessionId, "subagents");
-  let entries;
-  try {
-    entries = import_node_fs4.default.readdirSync(dir, { withFileTypes: true });
-  } catch {
-    return null;
-  }
-  let newest = null;
-  for (const e of entries) {
-    if (!e.isFile()) continue;
-    if (!e.name.startsWith("agent-") || !e.name.endsWith(".jsonl")) continue;
-    try {
-      const m2 = import_node_fs4.default.statSync(import_node_path4.default.join(dir, e.name)).mtimeMs;
-      if (newest === null || m2 > newest) newest = m2;
-    } catch {
-    }
-  }
-  return newest;
-}
 function hashDirToCwd(hash) {
   const body = hash.startsWith("-") ? hash.slice(1) : hash;
   return "/" + body.replace(/-/g, "/");
 }
 function safeStatMtime(p2) {
   try {
-    return import_node_fs4.default.statSync(p2).mtimeMs;
+    return import_node_fs13.default.statSync(p2).mtimeMs;
   } catch {
     return 0;
   }
@@ -11260,7 +11249,7 @@ function safeStatMtime(p2) {
 function readJsonlLines(file) {
   let raw;
   try {
-    raw = import_node_fs4.default.readFileSync(file, "utf8");
+    raw = import_node_fs13.default.readFileSync(file, "utf8");
   } catch (err) {
     if (err.code === "ENOENT") return [];
     throw err;
@@ -11491,8 +11480,8 @@ function attachmentDeferredToolsText(a) {
 function readBackupContent(fileHistoryRoot, toolSessionId, backupFileName) {
   if (backupFileName === null) return null;
   try {
-    return import_node_fs4.default.readFileSync(
-      import_node_path4.default.join(fileHistoryRoot, toolSessionId, backupFileName),
+    return import_node_fs13.default.readFileSync(
+      import_node_path12.default.join(fileHistoryRoot, toolSessionId, backupFileName),
       "utf8"
     );
   } catch {
@@ -11501,19 +11490,19 @@ function readBackupContent(fileHistoryRoot, toolSessionId, backupFileName) {
 }
 function readCurrentContent(filePath) {
   try {
-    return import_node_fs4.default.readFileSync(filePath, "utf8");
+    return import_node_fs13.default.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code === "ENOENT") return null;
     return null;
   }
 }
-var import_node_fs4, import_node_os3, import_node_path4, TASK_NOTIFICATION_RE, TASK_ID_RE, TOOL_USE_ID_RE, SLASH_COMMAND_RE, LOCAL_COMMAND_RE, SYSTEM_REMINDER_RE, OPENSPEC_BLOCK_RE, SKILL_HINT_RE, ATTACHMENT_SILENT_SUBTYPES, ClaudeHistoryReader;
+var import_node_fs13, import_node_os5, import_node_path12, TASK_NOTIFICATION_RE, TASK_ID_RE, TOOL_USE_ID_RE, SLASH_COMMAND_RE, LOCAL_COMMAND_RE, SYSTEM_REMINDER_RE, OPENSPEC_BLOCK_RE, SKILL_HINT_RE, ATTACHMENT_SILENT_SUBTYPES, ClaudeHistoryReader;
 var init_claude_history = __esm({
   "src/tools/claude-history.ts"() {
     "use strict";
-    import_node_fs4 = __toESM(require("fs"), 1);
-    import_node_os3 = __toESM(require("os"), 1);
-    import_node_path4 = __toESM(require("path"), 1);
+    import_node_fs13 = __toESM(require("fs"), 1);
+    import_node_os5 = __toESM(require("os"), 1);
+    import_node_path12 = __toESM(require("path"), 1);
     init_lib();
     init_tool_result_extra();
     TASK_NOTIFICATION_RE = /<task-notification\b[\s\S]*?<\/task-notification>/i;
@@ -11537,14 +11526,14 @@ var init_claude_history = __esm({
       // 每次 user 提交前 trackEdit 拷一份，作为 rewind 回退目标
       fileHistoryRoot;
       constructor(opts = {}) {
-        const base = opts.baseDir ?? import_node_path4.default.join(import_node_os3.default.homedir(), ".claude");
-        this.projectsRoot = import_node_path4.default.join(base, "projects");
-        this.fileHistoryRoot = import_node_path4.default.join(base, "file-history");
+        const base = opts.baseDir ?? import_node_path12.default.join(import_node_os5.default.homedir(), ".claude");
+        this.projectsRoot = import_node_path12.default.join(base, "projects");
+        this.fileHistoryRoot = import_node_path12.default.join(base, "file-history");
       }
       async listProjects() {
         let entries;
         try {
-          entries = import_node_fs4.default.readdirSync(this.projectsRoot, { withFileTypes: true });
+          entries = import_node_fs13.default.readdirSync(this.projectsRoot, { withFileTypes: true });
         } catch (err) {
           if (err.code === "ENOENT") return [];
           throw err;
@@ -11552,9 +11541,9 @@ var init_claude_history = __esm({
         const out = [];
         for (const ent of entries) {
           if (!ent.isDirectory()) continue;
-          const dir = import_node_path4.default.join(this.projectsRoot, ent.name);
-          const files = import_node_fs4.default.readdirSync(dir).filter((f) => f.endsWith(".jsonl"));
-          const updatedAtMs = files.reduce((m2, f) => Math.max(m2, safeStatMtime(import_node_path4.default.join(dir, f))), 0);
+          const dir = import_node_path12.default.join(this.projectsRoot, ent.name);
+          const files = import_node_fs13.default.readdirSync(dir).filter((f) => f.endsWith(".jsonl"));
+          const updatedAtMs = files.reduce((m2, f) => Math.max(m2, safeStatMtime(import_node_path12.default.join(dir, f))), 0);
           out.push({
             projectPath: hashDirToCwd(ent.name),
             hashDir: ent.name,
@@ -11566,17 +11555,17 @@ var init_claude_history = __esm({
         return out;
       }
       async listSessions(args) {
-        const dir = import_node_path4.default.join(this.projectsRoot, cwdToHashDir(args.projectPath));
+        const dir = import_node_path12.default.join(this.projectsRoot, cwdToHashDir(args.projectPath));
         let files;
         try {
-          files = import_node_fs4.default.readdirSync(dir).filter((f) => f.endsWith(".jsonl"));
+          files = import_node_fs13.default.readdirSync(dir).filter((f) => f.endsWith(".jsonl"));
         } catch (err) {
           if (err.code === "ENOENT") return [];
           throw err;
         }
         const out = [];
         for (const f of files) {
-          const full = import_node_path4.default.join(dir, f);
+          const full = import_node_path12.default.join(dir, f);
           const toolSessionId = f.slice(0, -".jsonl".length);
           const lines = readJsonlLines(full);
           let summary = "";
@@ -11631,7 +11620,7 @@ var init_claude_history = __esm({
         return out;
       }
       async read(args) {
-        const file = import_node_path4.default.join(
+        const file = import_node_path12.default.join(
           this.projectsRoot,
           cwdToHashDir(args.cwd),
           `${args.toolSessionId}.jsonl`
@@ -11668,7 +11657,7 @@ var init_claude_history = __esm({
       // 独立目录路径：<projectsRoot>/<cwdHash>/<toolSessionId>/subagents/*.jsonl
       // 返回 null 表示目录不存在（调用方回退旧实现）；返回空数组表示目录存在但无 jsonl
       listSubagentsFromDirectory(cwd, toolSessionId) {
-        const dir = import_node_path4.default.join(
+        const dir = import_node_path12.default.join(
           this.projectsRoot,
           cwdToHashDir(cwd),
           toolSessionId,
@@ -11676,7 +11665,7 @@ var init_claude_history = __esm({
         );
         let entries;
         try {
-          entries = import_node_fs4.default.readdirSync(dir, { withFileTypes: true });
+          entries = import_node_fs13.default.readdirSync(dir, { withFileTypes: true });
         } catch (err) {
           if (err.code === "ENOENT") return null;
           return null;
@@ -11686,7 +11675,7 @@ var init_claude_history = __esm({
           if (!e.isFile()) continue;
           if (!e.name.startsWith("agent-") || !e.name.endsWith(".jsonl")) continue;
           const subagentId = e.name.slice("agent-".length, -".jsonl".length);
-          const filePath = import_node_path4.default.join(dir, e.name);
+          const filePath = import_node_path12.default.join(dir, e.name);
           const lines = readJsonlLines(filePath);
           let firstText = "";
           let messageCount = 0;
@@ -11703,7 +11692,7 @@ var init_claude_history = __esm({
         return out;
       }
       listSubagentsFromMainJsonl(cwd, toolSessionId) {
-        const file = import_node_path4.default.join(
+        const file = import_node_path12.default.join(
           this.projectsRoot,
           cwdToHashDir(cwd),
           `${toolSessionId}.jsonl`
@@ -11738,7 +11727,7 @@ var init_claude_history = __esm({
       }
       // 独立文件路径：agent-<subagentId>.jsonl；文件不存在返回 null 让调用方回退旧实现
       readSubagentFromFile(cwd, toolSessionId, subagentId) {
-        const file = import_node_path4.default.join(
+        const file = import_node_path12.default.join(
           this.projectsRoot,
           cwdToHashDir(cwd),
           toolSessionId,
@@ -11747,7 +11736,7 @@ var init_claude_history = __esm({
         );
         let exists = false;
         try {
-          exists = import_node_fs4.default.statSync(file).isFile();
+          exists = import_node_fs13.default.statSync(file).isFile();
         } catch {
           return null;
         }
@@ -11766,7 +11755,7 @@ var init_claude_history = __esm({
        * "那一刻每个 tracked 文件对应的 backup 文件名"
        */
       readFileHistorySnapshots(args) {
-        const file = import_node_path4.default.join(
+        const file = import_node_path12.default.join(
           this.projectsRoot,
           cwdToHashDir(args.cwd),
           `${args.toolSessionId}.jsonl`
@@ -11811,7 +11800,7 @@ var init_claude_history = __esm({
         for (const [anchorId, target] of snapshots) {
           let hasAny = false;
           for (const [rawPath, backup] of Object.entries(target)) {
-            const absPath = import_node_path4.default.isAbsolute(rawPath) ? rawPath : import_node_path4.default.join(args.cwd, rawPath);
+            const absPath = import_node_path12.default.isAbsolute(rawPath) ? rawPath : import_node_path12.default.join(args.cwd, rawPath);
             const backupContent = readBackupContent(
               this.fileHistoryRoot,
               args.toolSessionId,
@@ -11851,7 +11840,7 @@ var init_claude_history = __esm({
         let totalInsertions = 0;
         let totalDeletions = 0;
         for (const [rawPath, backup] of Object.entries(target)) {
-          const absPath = import_node_path4.default.isAbsolute(rawPath) ? rawPath : import_node_path4.default.join(args.cwd, rawPath);
+          const absPath = import_node_path12.default.isAbsolute(rawPath) ? rawPath : import_node_path12.default.join(args.cwd, rawPath);
           const backupContent = readBackupContent(
             this.fileHistoryRoot,
             args.toolSessionId,
@@ -11898,7 +11887,7 @@ var init_claude_history = __esm({
         };
       }
       readSubagentFromMainJsonl(cwd, toolSessionId, subagentId) {
-        const file = import_node_path4.default.join(
+        const file = import_node_path12.default.join(
           this.projectsRoot,
           cwdToHashDir(cwd),
           `${toolSessionId}.jsonl`
@@ -11984,6 +11973,9 @@ function buildSpawnArgs(ctx) {
   if (ctx.shiftMcpConfigPath) {
     args.push("--mcp-config", ctx.shiftMcpConfigPath);
   }
+  if (ctx.inboxMcpConfigPath) {
+    args.push("--mcp-config", ctx.inboxMcpConfigPath);
+  }
   args.push("--disallowed-tools", "CronCreate,CronDelete,CronList,ScheduleWakeup,RemoteTrigger");
   if (ctx.effort) args.push("--effort", ctx.effort);
   if (ctx.toolSessionId) args.push("--resume", ctx.toolSessionId);
@@ -40112,8 +40104,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs42.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs42.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs43.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs43.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -40138,11 +40130,11 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs42, import_node_path55;
+var import_node_fs43, import_node_path55;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs42 = __toESM(require("fs"), 1);
+    import_node_fs43 = __toESM(require("fs"), 1);
     import_node_path55 = __toESM(require("path"), 1);
   }
 });
@@ -40186,7 +40178,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs43.mkdtempSync)(import_node_path56.default.join(import_node_os22.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs44.mkdtempSync)(import_node_path56.default.join(import_node_os21.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -40347,18 +40339,18 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs43.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs44.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs43, import_node_os22, import_node_path56;
+var import_node_fs44, import_node_os21, import_node_path56;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs43 = require("fs");
-    import_node_os22 = __toESM(require("os"), 1);
+    import_node_fs44 = require("fs");
+    import_node_os21 = __toESM(require("os"), 1);
     import_node_path56 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
@@ -40622,8 +40614,8 @@ Env (advanced):
 
 // src/index.ts
 var import_node_path54 = __toESM(require("path"), 1);
-var import_node_fs41 = __toESM(require("fs"), 1);
-var import_node_os21 = __toESM(require("os"), 1);
+var import_node_fs42 = __toESM(require("fs"), 1);
+var import_node_os20 = __toESM(require("os"), 1);
 
 // ../node_modules/.pnpm/uuid@10.0.0/node_modules/uuid/dist/esm-node/stringify.js
 var byteToHex = [];
@@ -41240,9 +41232,9 @@ var SessionStoreFactory = class {
 };
 
 // src/session/manager.ts
-var import_node_fs7 = __toESM(require("fs"), 1);
-var import_node_path8 = __toESM(require("path"), 1);
-var import_node_os5 = __toESM(require("os"), 1);
+var import_node_fs6 = __toESM(require("fs"), 1);
+var import_node_path6 = __toESM(require("path"), 1);
+var import_node_os3 = __toESM(require("os"), 1);
 init_protocol();
 
 // src/tools/guest-settings.ts
@@ -41340,10 +41332,6 @@ function escapeAttr(v2) {
   return v2.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
 
-// src/session/runner.ts
-var import_node_os4 = __toESM(require("os"), 1);
-var import_node_path6 = __toESM(require("path"), 1);
-
 // src/session/reducer.ts
 init_runtime();
 
@@ -41430,7 +41418,7 @@ var ATTACHMENT_SHARING_HINT = `## \u628A\u4EA7\u51FA\u6587\u4EF6\u5206\u4EAB\u7E
 // src/dispatch/system-prompt.ts
 var DISPATCH_SYSTEM_PROMPT_HINT = `## \u59D4\u6D3E\u7ED9\u53E6\u4E00\u4E2A persona\uFF08dispatch\uFF09
 
-\u5F53\u7528\u6237\u6D88\u606F\u91CC\u542B \`@persona/<id>\`\uFF08\u5982 \`@persona/persona-app-builder\`\uFF09\u65F6\uFF0C**\u4F60\u5FC5\u987B**\u7ACB\u5373\u8C03 MCP tool \`mcp__clawd-dispatch__personaDispatch\` \u59D4\u6D3E\uFF0C\u4E0D\u8981\u5C1D\u8BD5\u81EA\u5DF1\u6267\u884C\uFF1A
+\u5F53\u7528\u6237\u6D88\u606F\u91CC\u542B \`@persona/<id>\`\uFF08\u5982 \`@persona/persona-bug-fixer\`\uFF09\u65F6\uFF0C**\u4F60\u5FC5\u987B**\u7ACB\u5373\u8C03 MCP tool \`mcp__clawd-dispatch__personaDispatch\` \u59D4\u6D3E\uFF0C\u4E0D\u8981\u5C1D\u8BD5\u81EA\u5DF1\u6267\u884C\uFF1A
 
 - \`targetPersona = <id>\`\uFF08@ token \u91CC\u7684 persona id\uFF09
 - \`prompt = \u53BB\u6389 @persona/<id> token \u7684\u7528\u6237\u539F\u6587\`
@@ -41482,7 +41470,7 @@ function cloneState(s) {
     pendingSend: s.pendingSend.slice()
   };
 }
-var IDLE_KILL_DELAY_MS = 6e5;
+var IDLE_KILL_DELAY_MS = 6e4;
 function tryFlushPending(state, deps) {
   if (!state.readyForSend || state.pendingSend.length === 0) return [];
   const text = state.pendingSend.shift();
@@ -41547,6 +41535,7 @@ function buildSpawnContext(state, deps) {
   const ticketMcpConfigPathRaw = deps.getTicketMcpConfigPath?.() ?? null;
   const ticketMcpConfigPath2 = ticketMcpConfigPathRaw && file.ownerPersonaId === "persona-ticket-manager" ? ticketMcpConfigPathRaw : null;
   const shiftMcpConfigPath2 = deps.getShiftMcpConfigPath?.() ?? null;
+  const inboxMcpConfigPath2 = deps.getInboxMcpConfigPath?.() ?? null;
   const ctx = {
     cwd: file.cwd,
     toolSessionId: file.toolSessionId,
@@ -41562,6 +41551,7 @@ function buildSpawnContext(state, deps) {
     dispatchMcpConfigPath: dispatchMcpConfigPath2 ?? void 0,
     ticketMcpConfigPath: ticketMcpConfigPath2 ?? void 0,
     shiftMcpConfigPath: shiftMcpConfigPath2 ?? void 0,
+    inboxMcpConfigPath: inboxMcpConfigPath2 ?? void 0,
     // shift v1：把 SessionFile.ownerPersonaId 透传到 SpawnContext；buildSpawnArgs 等下游
     // 不直接读这个字段（只读 env），但保留显式字段方便 daemon 内部诊断/日志。
     personaId
@@ -42151,18 +42141,6 @@ function reduceSession(state, input, deps) {
       if (state.status !== "running-idle") {
         return { state, effects: [] };
       }
-      if (input.subagentActive) {
-        return {
-          state,
-          effects: [
-            {
-              kind: "schedule-idle-kill",
-              sessionId: state.file.sessionId,
-              ms: IDLE_KILL_DELAY_MS
-            }
-          ]
-        };
-      }
       const next = cloneState(state);
       next.status = "stopping";
       return {
@@ -42219,11 +42197,10 @@ function reduceSession(state, input, deps) {
 // src/session/runner.ts
 init_stdout_splitter();
 init_permission_stdio();
-init_claude_history();
 
 // src/ipc-recorder.ts
-var import_node_fs5 = __toESM(require("fs"), 1);
-var import_node_path5 = __toESM(require("path"), 1);
+var import_node_fs4 = __toESM(require("fs"), 1);
+var import_node_path4 = __toESM(require("path"), 1);
 function tsForFilename(ms) {
   return new Date(ms).toISOString().replace(/[:.]/g, "-");
 }
@@ -42234,8 +42211,8 @@ function startRecorder(opts) {
     return null;
   }
   const now = opts.now ?? Date.now;
-  const dir = import_node_path5.default.join(opts.dataDir, "ipc-recordings", opts.sessionId);
-  const filePath = import_node_path5.default.join(dir, `${tsForFilename(now())}.jsonl`);
+  const dir = import_node_path4.default.join(opts.dataDir, "ipc-recordings", opts.sessionId);
+  const filePath = import_node_path4.default.join(dir, `${tsForFilename(now())}.jsonl`);
   let stream = null;
   let closedResolve;
   const closed = new Promise((resolve6) => {
@@ -42244,8 +42221,8 @@ function startRecorder(opts) {
   let exited = false;
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs5.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs5.default.createWriteStream(filePath, { flags: "a" });
+    import_node_fs4.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs4.default.createWriteStream(filePath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -42290,7 +42267,6 @@ function encodeAllowWithInputControlResponse(requestId, updatedInput) {
   return JSON.stringify(payload) + "\n";
 }
 var DEFAULT_WAIT_STOP_TIMEOUT_MS = 3e3;
-var SUBAGENT_ACTIVE_WINDOW_MS = 3e5;
 var SessionRunner = class {
   constructor(initial, hooks) {
     this.hooks = hooks;
@@ -42348,6 +42324,7 @@ var SessionRunner = class {
       // 见 reducer.buildSpawnContext 注 CLAWD_DISPATCH_ID env / 派生 SpawnContext.dispatchMcpConfigPath
       getDispatchMcpConfigPath: this.hooks.getDispatchMcpConfigPath,
       getShiftMcpConfigPath: this.hooks.getShiftMcpConfigPath,
+      getInboxMcpConfigPath: this.hooks.getInboxMcpConfigPath,
       // Ticket MCP：透传 ticket.mcp.json 路径闭包（reducer 内做 persona-ticket-manager gating）
       getTicketMcpConfigPath: this.hooks.getTicketMcpConfigPath,
       lookupDispatchByBSessionId: this.hooks.lookupDispatchByBSessionId,
@@ -42602,7 +42579,7 @@ var SessionRunner = class {
         if (existing) clearTimeout(existing);
         const timer = setTimeout(() => {
           this.idleKillTimers.delete(effect.sessionId);
-          this.input({ kind: "idle-kill-fired", subagentActive: this.isSubagentActive() });
+          this.input({ kind: "idle-kill-fired" });
         }, effect.ms);
         timer.unref?.();
         this.idleKillTimers.set(effect.sessionId, timer);
@@ -42618,18 +42595,6 @@ var SessionRunner = class {
       }
     }
   }
-  // idle-kill 到点判定：本 session 的 subagents/ 里是否还有 agent-*.jsonl 在近期写盘。
-  // 新鲜（近 SUBAGENT_ACTIVE_WINDOW_MS 内有写）= 后台 subagent 还在干活 → 不该杀。
-  // 没有 toolSessionId（SDK 模式 CC 内生 id）/ 无目录 / 无 agent 文件 → false（照常回收）。
-  isSubagentActive() {
-    const toolSessionId = this.state.file.toolSessionId;
-    if (!toolSessionId) return false;
-    const projectsRoot = import_node_path6.default.join(this.hooks.home ?? import_node_os4.default.homedir(), ".claude", "projects");
-    const mtime = newestSubagentMtimeMs(projectsRoot, this.state.file.cwd, toolSessionId);
-    if (mtime === null) return false;
-    const now = (this.hooks.now ?? Date.now)();
-    return now - mtime < SUBAGENT_ACTIVE_WINDOW_MS;
-  }
   // 清空所有 idle-kill timer（runner dispose / proc 永久退出时调用）。
   // 不喂 idle-kill-fired —— dispose 路径不再翻 reducer 状态
   clearIdleKillTimers() {
@@ -42712,15 +42677,15 @@ function extractEditPath(input) {
 }
 
 // src/debug/pty-probe.ts
-var import_node_fs6 = __toESM(require("fs"), 1);
-var import_node_path7 = __toESM(require("path"), 1);
+var import_node_fs5 = __toESM(require("fs"), 1);
+var import_node_path5 = __toESM(require("path"), 1);
 var PROBE_DIR = "/tmp/clawd-probe";
-var EVENTS_FILE = import_node_path7.default.join(PROBE_DIR, "events.jsonl");
+var EVENTS_FILE = import_node_path5.default.join(PROBE_DIR, "events.jsonl");
 var inited = false;
 function ensureDir() {
   if (inited) return true;
   try {
-    import_node_fs6.default.mkdirSync(PROBE_DIR, { recursive: true });
+    import_node_fs5.default.mkdirSync(PROBE_DIR, { recursive: true });
     inited = true;
     return true;
   } catch {
@@ -42731,15 +42696,15 @@ function probeEvent(event, data = {}) {
   try {
     if (!ensureDir()) return;
     const line = JSON.stringify({ ts: Date.now(), event, ...data }) + "\n";
-    import_node_fs6.default.appendFileSync(EVENTS_FILE, line);
+    import_node_fs5.default.appendFileSync(EVENTS_FILE, line);
   } catch {
   }
 }
 function probeDumpReplay(sessionId, payload) {
   try {
     if (!ensureDir()) return "";
-    const file = import_node_path7.default.join(PROBE_DIR, `replay-${sessionId}-${Date.now()}.ans`);
-    import_node_fs6.default.writeFileSync(file, payload, "utf8");
+    const file = import_node_path5.default.join(PROBE_DIR, `replay-${sessionId}-${Date.now()}.ans`);
+    import_node_fs5.default.writeFileSync(file, payload, "utf8");
     return file;
   } catch {
     return "";
@@ -42846,7 +42811,7 @@ function derivePersonaSpawnCwd(file, personaRoot) {
       `derivePersonaSpawnCwd: personaRoot missing for owner session ${file.sessionId} (ownerPersonaId=${personaId})`
     );
   }
-  return import_node_path8.default.join(personaRoot, safeFileName(personaId));
+  return import_node_path6.default.join(personaRoot, safeFileName(personaId));
 }
 function makeInitialState(file, subSessionMeta) {
   return {
@@ -42971,10 +42936,10 @@ var SessionManager = class {
   // <dataDir>/sessions/ 列子目录 (排除 'default').
   listPersonaIdsOnDisk() {
     if (!this.deps.dataDir) return [];
-    const root = this.deps.storeFactory ? import_node_path8.default.join(this.deps.dataDir, "personas") : import_node_path8.default.join(this.deps.dataDir, "sessions");
+    const root = this.deps.storeFactory ? import_node_path6.default.join(this.deps.dataDir, "personas") : import_node_path6.default.join(this.deps.dataDir, "sessions");
     let entries;
     try {
-      entries = import_node_fs7.default.readdirSync(root, { withFileTypes: true });
+      entries = import_node_fs6.default.readdirSync(root, { withFileTypes: true });
     } catch (err) {
       const code = err?.code;
       if (code === "ENOENT") return [];
@@ -42987,7 +42952,7 @@ var SessionManager = class {
   // 只在 storeFactory 注入 (新布局) 下生效, 老布局无 guest 目录.
   listGuestCapIdsForPersona(personaId) {
     if (!this.deps.dataDir || !this.deps.storeFactory) return [];
-    const root = import_node_path8.default.join(
+    const root = import_node_path6.default.join(
       this.deps.dataDir,
       "personas",
       personaId,
@@ -42997,7 +42962,7 @@ var SessionManager = class {
     );
     let entries;
     try {
-      entries = import_node_fs7.default.readdirSync(root, { withFileTypes: true });
+      entries = import_node_fs6.default.readdirSync(root, { withFileTypes: true });
     } catch (err) {
       const code = err?.code;
       if (code === "ENOENT") return [];
@@ -43116,7 +43081,7 @@ var SessionManager = class {
       callerDisplayName
     );
     if (subSessionMeta?.userWorkDir) {
-      import_node_fs7.default.mkdirSync(subSessionMeta.userWorkDir, { recursive: true });
+      import_node_fs6.default.mkdirSync(subSessionMeta.userWorkDir, { recursive: true });
     }
     if (scope.kind === "persona" && scope.mode === "guest") {
       if (!this.deps.personaRoot || !subSessionMeta?.userWorkDir) {
@@ -43127,8 +43092,8 @@ var SessionManager = class {
       const base = this.deps.personaStore?.readSandboxSettings(scope.personaId) ?? null;
       const settings = composeGuestSandbox(base, subSessionMeta.userWorkDir, file.cwd);
       subSessionMeta.extraSettings = JSON.stringify(settings);
-      const home = import_node_os5.default.homedir();
-      const expand = (p2) => p2 === "~" ? home : p2.startsWith("~/") ? import_node_path8.default.join(home, p2.slice(2)) : p2;
+      const home = import_node_os3.default.homedir();
+      const expand = (p2) => p2 === "~" ? home : p2.startsWith("~/") ? import_node_path6.default.join(home, p2.slice(2)) : p2;
       const codexCfg = this.deps.personaStore?.readCodexSandboxSettings(scope.personaId) ?? null;
       subSessionMeta.codexSandbox = {
         writableRoots: [subSessionMeta.userWorkDir, ...(codexCfg?.writableRoots ?? []).map(expand)],
@@ -43162,6 +43127,7 @@ var SessionManager = class {
       getDispatchMcpConfigPath: this.deps.dispatchMcpConfigPath ? () => this.deps.dispatchMcpConfigPath ?? null : void 0,
       getTicketMcpConfigPath: this.deps.ticketMcpConfigPath ? () => this.deps.ticketMcpConfigPath ?? null : void 0,
       getShiftMcpConfigPath: this.deps.shiftMcpConfigPath ? () => this.deps.shiftMcpConfigPath ?? null : void 0,
+      getInboxMcpConfigPath: this.deps.inboxMcpConfigPath ? () => this.deps.inboxMcpConfigPath ?? null : void 0,
       lookupDispatchByBSessionId: this.deps.personaDispatchManager ? (bSid) => this.deps.personaDispatchManager?.lookupDispatchByBSessionId(bSid) : void 0,
       // file-sharing (spec §6 PR 3)：闭包 scope + sessionId，runner 只暴露 tool/relPath/cwd
       onFileEdit: attachmentGroup ? (input) => attachmentGroup.onFileEdit({
@@ -43280,7 +43246,7 @@ var SessionManager = class {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, "cwd required when ownerPersonaId is absent");
     }
     try {
-      const stat = import_node_fs7.default.statSync(cwd);
+      const stat = import_node_fs6.default.statSync(cwd);
       if (!stat.isDirectory()) throw new Error("not dir");
     } catch {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `cwd not a directory: ${cwd}`);
@@ -43811,7 +43777,7 @@ var SessionManager = class {
    */
   createForScope(args) {
     try {
-      const stat = import_node_fs7.default.statSync(args.cwd);
+      const stat = import_node_fs6.default.statSync(args.cwd);
       if (!stat.isDirectory()) throw new Error("not dir");
     } catch {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `cwd not a directory: ${args.cwd}`);
@@ -44027,7 +43993,7 @@ var SessionManager = class {
       personaId: args.targetPersona,
       mode: "owner"
     };
-    const cwd = import_node_path8.default.join(this.deps.personaRoot, safeFileName(args.targetPersona));
+    const cwd = import_node_path6.default.join(this.deps.personaRoot, safeFileName(args.targetPersona));
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const file = {
       sessionId,
@@ -44092,7 +44058,7 @@ var SessionManager = class {
       personaId: args.targetPersona,
       mode: "owner"
     };
-    const cwd = import_node_path8.default.join(this.deps.personaRoot, safeFileName(args.targetPersona));
+    const cwd = import_node_path6.default.join(this.deps.personaRoot, safeFileName(args.targetPersona));
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const file = {
       sessionId,
@@ -44574,28 +44540,28 @@ var SessionManager = class {
 };
 
 // src/persona/store.ts
-var fs8 = __toESM(require("fs"), 1);
-var path11 = __toESM(require("path"), 1);
+var fs7 = __toESM(require("fs"), 1);
+var path9 = __toESM(require("path"), 1);
 init_protocol();
 var PersonaStore = class {
   constructor(root) {
     this.root = root;
-    fs8.mkdirSync(root, { recursive: true });
+    fs7.mkdirSync(root, { recursive: true });
   }
   root;
   personaDir(personaId) {
-    return path11.join(this.root, safeFileName(personaId));
+    return path9.join(this.root, safeFileName(personaId));
   }
   metaPath(personaId) {
-    return path11.join(this.personaDir(personaId), ".clawd", "persona.json");
+    return path9.join(this.personaDir(personaId), ".clawd", "persona.json");
   }
   claudeMdPath(personaId) {
-    return path11.join(this.personaDir(personaId), "CLAUDE.md");
+    return path9.join(this.personaDir(personaId), "CLAUDE.md");
   }
   // codex 原生读 cwd 的 AGENTS.md。人格双写镜像：claude 读 CLAUDE.md、codex 读 AGENTS.md，
   // 两份内容恒一致，persona 切 tool 零迁移。
   agentsMdPath(personaId) {
-    return path11.join(this.personaDir(personaId), "AGENTS.md");
+    return path9.join(this.personaDir(personaId), "AGENTS.md");
   }
   /**
    * persona 级 sandbox base 落盘路径 —— 故意放 `.clawd/` 而非 `.claude/`，让 CC 的 project
@@ -44604,11 +44570,11 @@ var PersonaStore = class {
    * spawn 前 per-guest 动态拼到各自 session 目录的那份（base + 强制底座 + 本 guest userWorkDir carve）。
    */
   sandboxSettingsPath(personaId) {
-    return path11.join(this.personaDir(personaId), ".clawd", "sandbox-settings.json");
+    return path9.join(this.personaDir(personaId), ".clawd", "sandbox-settings.json");
   }
   write(persona, personality) {
     const dir = this.personaDir(persona.personaId);
-    fs8.mkdirSync(path11.join(dir, ".clawd"), { recursive: true });
+    fs7.mkdirSync(path9.join(dir, ".clawd"), { recursive: true });
     this.atomicWrite(this.claudeMdPath(persona.personaId), personality);
     this.atomicWrite(this.agentsMdPath(persona.personaId), personality);
     this.writeSandboxSettings(persona.personaId, buildGuestSettingsV1());
@@ -44627,9 +44593,9 @@ var PersonaStore = class {
   ensureAgentsMirror(personaId) {
     const claudeMd = this.claudeMdPath(personaId);
     const agentsMd = this.agentsMdPath(personaId);
-    if (!fs8.existsSync(claudeMd)) return false;
-    if (fs8.existsSync(agentsMd)) return false;
-    this.atomicWrite(agentsMd, fs8.readFileSync(claudeMd, "utf8"));
+    if (!fs7.existsSync(claudeMd)) return false;
+    if (fs7.existsSync(agentsMd)) return false;
+    this.atomicWrite(agentsMd, fs7.readFileSync(claudeMd, "utf8"));
     return true;
   }
   /**
@@ -44653,22 +44619,22 @@ var PersonaStore = class {
     return { ...s, permissions: { ...s.permissions ?? {}, deny: [...prev, rule] } };
   }
   codexSandboxSettingsPath(personaId) {
-    return path11.join(this.personaDir(personaId), ".clawd", "codex-sandbox.json");
+    return path9.join(this.personaDir(personaId), ".clawd", "codex-sandbox.json");
   }
   /** 读 codex-sandbox.json；不存在/损坏 → null。 */
   readCodexSandboxSettings(personaId) {
     const p2 = this.codexSandboxSettingsPath(personaId);
-    if (!fs8.existsSync(p2)) return null;
+    if (!fs7.existsSync(p2)) return null;
     try {
-      return CodexSandboxSettingsSchema.parse(JSON.parse(fs8.readFileSync(p2, "utf8")));
+      return CodexSandboxSettingsSchema.parse(JSON.parse(fs7.readFileSync(p2, "utf8")));
     } catch {
       return null;
     }
   }
   /** 覆盖写 codex-sandbox.json（seed/migrate 用）。 */
   writeCodexSandboxSettings(personaId, settings) {
-    const dir = path11.join(this.personaDir(personaId), ".clawd");
-    fs8.mkdirSync(dir, { recursive: true });
+    const dir = path9.join(this.personaDir(personaId), ".clawd");
+    fs7.mkdirSync(dir, { recursive: true });
     this.atomicWrite(this.codexSandboxSettingsPath(personaId), JSON.stringify(settings, null, 2));
   }
   writeMeta(persona) {
@@ -44676,8 +44642,8 @@ var PersonaStore = class {
   }
   read(personaId) {
     const p2 = this.metaPath(personaId);
-    if (!fs8.existsSync(p2)) return null;
-    const raw = JSON.parse(fs8.readFileSync(p2, "utf8"));
+    if (!fs7.existsSync(p2)) return null;
+    const raw = JSON.parse(fs7.readFileSync(p2, "utf8"));
     if (raw && typeof raw === "object" && "tokenMap" in raw) {
       delete raw.tokenMap;
       this.atomicWrite(p2, JSON.stringify(raw, null, 2));
@@ -44685,13 +44651,13 @@ var PersonaStore = class {
     return PersonaFileSchema.parse(raw);
   }
   has(personaId) {
-    return fs8.existsSync(this.metaPath(personaId));
+    return fs7.existsSync(this.metaPath(personaId));
   }
   readPersonality(personaId) {
     const claudeMd = this.claudeMdPath(personaId);
-    if (fs8.existsSync(claudeMd)) return fs8.readFileSync(claudeMd, "utf8");
+    if (fs7.existsSync(claudeMd)) return fs7.readFileSync(claudeMd, "utf8");
     const agentsMd = this.agentsMdPath(personaId);
-    if (fs8.existsSync(agentsMd)) return fs8.readFileSync(agentsMd, "utf8");
+    if (fs7.existsSync(agentsMd)) return fs7.readFileSync(agentsMd, "utf8");
     return null;
   }
   /**
@@ -44700,23 +44666,23 @@ var PersonaStore = class {
    */
   readSandboxSettings(personaId) {
     const p2 = this.sandboxSettingsPath(personaId);
-    if (!fs8.existsSync(p2)) return null;
+    if (!fs7.existsSync(p2)) return null;
     try {
-      return JSON.parse(fs8.readFileSync(p2, "utf8"));
+      return JSON.parse(fs7.readFileSync(p2, "utf8"));
     } catch {
       return null;
     }
   }
   /** Persona 私有 skills 目录路径：<personaDir>/.claude/skills */
   skillsDir(personaId) {
-    return path11.join(this.personaDir(personaId), ".claude", "skills");
+    return path9.join(this.personaDir(personaId), ".claude", "skills");
   }
   /**
    * Claude Code 项目级 settings 路径：`<personaDir>/.claude/settings.json`。
    * 这里只读 `enabledPlugins` 字段，由 owner 通过 CC `/plugin` 之类命令维护，daemon 不写。
    */
   claudeSettingsPath(personaId) {
-    return path11.join(this.personaDir(personaId), ".claude", "settings.json");
+    return path9.join(this.personaDir(personaId), ".claude", "settings.json");
   }
   /**
    * 读取 persona 的 `.claude/settings.json` 中 `enabledPlugins` map，把 value === true
@@ -44731,10 +44697,10 @@ var PersonaStore = class {
    */
   readEnabledPlugins(personaId) {
     const p2 = this.claudeSettingsPath(personaId);
-    if (!fs8.existsSync(p2)) return [];
+    if (!fs7.existsSync(p2)) return [];
     let raw;
     try {
-      raw = JSON.parse(fs8.readFileSync(p2, "utf8"));
+      raw = JSON.parse(fs7.readFileSync(p2, "utf8"));
     } catch {
       return [];
     }
@@ -44748,22 +44714,22 @@ var PersonaStore = class {
     return out;
   }
   list() {
-    if (!fs8.existsSync(this.root)) return [];
-    return fs8.readdirSync(this.root).filter((name) => {
-      return fs8.existsSync(path11.join(this.root, name, ".clawd", "persona.json"));
+    if (!fs7.existsSync(this.root)) return [];
+    return fs7.readdirSync(this.root).filter((name) => {
+      return fs7.existsSync(path9.join(this.root, name, ".clawd", "persona.json"));
     });
   }
   remove(personaId) {
     const dir = this.personaDir(personaId);
-    if (fs8.existsSync(dir)) fs8.rmSync(dir, { recursive: true, force: true });
+    if (fs7.existsSync(dir)) fs7.rmSync(dir, { recursive: true, force: true });
   }
   personaDirPath(personaId) {
     return this.personaDir(personaId);
   }
   atomicWrite(file, content) {
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
-    fs8.writeFileSync(tmp, content, { mode: 384 });
-    fs8.renameSync(tmp, file);
+    fs7.writeFileSync(tmp, content, { mode: 384 });
+    fs7.renameSync(tmp, file);
   }
 };
 
@@ -44809,9 +44775,9 @@ var PersonaRegistry = class {
 var import_node_crypto3 = __toESM(require("crypto"), 1);
 
 // src/skills/scanner.ts
-var import_node_fs8 = __toESM(require("fs"), 1);
-var import_node_os6 = __toESM(require("os"), 1);
-var import_node_path9 = __toESM(require("path"), 1);
+var import_node_fs7 = __toESM(require("fs"), 1);
+var import_node_os4 = __toESM(require("os"), 1);
+var import_node_path7 = __toESM(require("path"), 1);
 
 // src/skills/frontmatter.ts
 var STRIP_QUOTES = /^["']|["']$/g;
@@ -44920,7 +44886,7 @@ function parseDescription(content) {
 }
 function isDirLikeSync(p2) {
   try {
-    return import_node_fs8.default.statSync(p2).isDirectory();
+    return import_node_fs7.default.statSync(p2).isDirectory();
   } catch {
     return false;
   }
@@ -44928,19 +44894,19 @@ function isDirLikeSync(p2) {
 function scanSkillDir(dir, source, seen, out, pluginName) {
   let entries;
   try {
-    entries = import_node_fs8.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs7.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
-    const entryPath = import_node_path9.default.join(dir, ent.name);
+    const entryPath = import_node_path7.default.join(dir, ent.name);
     if (!ent.isDirectory() && !(ent.isSymbolicLink() && isDirLikeSync(entryPath))) continue;
     let content;
     try {
-      content = import_node_fs8.default.readFileSync(import_node_path9.default.join(entryPath, "SKILL.md"), "utf8");
+      content = import_node_fs7.default.readFileSync(import_node_path7.default.join(entryPath, "SKILL.md"), "utf8");
     } catch {
       try {
-        content = import_node_fs8.default.readFileSync(import_node_path9.default.join(entryPath, "skill.md"), "utf8");
+        content = import_node_fs7.default.readFileSync(import_node_path7.default.join(entryPath, "skill.md"), "utf8");
       } catch {
         continue;
       }
@@ -44964,26 +44930,26 @@ function listSkillsForDir(dir, source) {
 function scanCommandDir(dir, source, seen, out, pluginName) {
   let entries;
   try {
-    entries = import_node_fs8.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs7.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
-    const entryPath = import_node_path9.default.join(dir, ent.name);
+    const entryPath = import_node_path7.default.join(dir, ent.name);
     if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync(entryPath)) {
       const ns = ent.name;
       let subEntries;
       try {
-        subEntries = import_node_fs8.default.readdirSync(entryPath, { withFileTypes: true });
+        subEntries = import_node_fs7.default.readdirSync(entryPath, { withFileTypes: true });
       } catch {
         continue;
       }
       for (const se of subEntries) {
         if (!se.name.endsWith(".md")) continue;
-        const sePath = import_node_path9.default.join(entryPath, se.name);
+        const sePath = import_node_path7.default.join(entryPath, se.name);
         let content;
         try {
-          content = import_node_fs8.default.readFileSync(sePath, "utf8");
+          content = import_node_fs7.default.readFileSync(sePath, "utf8");
         } catch {
           continue;
         }
@@ -45000,7 +44966,7 @@ function scanCommandDir(dir, source, seen, out, pluginName) {
     } else if (ent.name.endsWith(".md")) {
       let content;
       try {
-        content = import_node_fs8.default.readFileSync(entryPath, "utf8");
+        content = import_node_fs7.default.readFileSync(entryPath, "utf8");
       } catch {
         continue;
       }
@@ -45016,10 +44982,10 @@ function scanCommandDir(dir, source, seen, out, pluginName) {
   }
 }
 function readInstalledPlugins(home) {
-  const file = import_node_path9.default.join(home, ".claude", "plugins", "installed_plugins.json");
+  const file = import_node_path7.default.join(home, ".claude", "plugins", "installed_plugins.json");
   let raw;
   try {
-    raw = import_node_fs8.default.readFileSync(file, "utf8");
+    raw = import_node_fs7.default.readFileSync(file, "utf8");
   } catch {
     return [];
   }
@@ -45044,7 +45010,7 @@ var SkillsScanner = class {
   home;
   extraPluginRoots;
   constructor(opts = {}) {
-    this.home = opts.home ?? import_node_os6.default.homedir();
+    this.home = opts.home ?? import_node_os4.default.homedir();
     this.extraPluginRoots = opts.extraPluginRoots ?? [];
   }
   /**
@@ -45067,14 +45033,14 @@ var SkillsScanner = class {
       });
     }
     const fsBlock = [];
-    scanSkillDir(import_node_path9.default.join(this.home, ".claude", "skills"), "global", seen, fsBlock);
-    scanCommandDir(import_node_path9.default.join(this.home, ".claude", "commands"), "global", seen, fsBlock);
-    scanSkillDir(import_node_path9.default.join(args.cwd, ".claude", "skills"), "project", seen, fsBlock);
-    scanCommandDir(import_node_path9.default.join(args.cwd, ".claude", "commands"), "project", seen, fsBlock);
+    scanSkillDir(import_node_path7.default.join(this.home, ".claude", "skills"), "global", seen, fsBlock);
+    scanCommandDir(import_node_path7.default.join(this.home, ".claude", "commands"), "global", seen, fsBlock);
+    scanSkillDir(import_node_path7.default.join(args.cwd, ".claude", "skills"), "project", seen, fsBlock);
+    scanCommandDir(import_node_path7.default.join(args.cwd, ".claude", "commands"), "project", seen, fsBlock);
     const plugins = [...readInstalledPlugins(this.home), ...this.extraPluginRoots];
     for (const { name, root } of plugins) {
-      scanSkillDir(import_node_path9.default.join(root, "skills"), "plugin", seen, fsBlock, name);
-      scanCommandDir(import_node_path9.default.join(root, "commands"), "plugin", seen, fsBlock, name);
+      scanSkillDir(import_node_path7.default.join(root, "skills"), "plugin", seen, fsBlock, name);
+      scanCommandDir(import_node_path7.default.join(root, "commands"), "plugin", seen, fsBlock, name);
     }
     fsBlock.sort((a, b2) => a.name < b2.name ? -1 : a.name > b2.name ? 1 : 0);
     return [...builtinBlock, ...fsBlock];
@@ -45180,8 +45146,8 @@ var PersonaManager = class {
 };
 
 // src/persona/seed.ts
-var fs10 = __toESM(require("fs"), 1);
-var path13 = __toESM(require("path"), 1);
+var fs9 = __toESM(require("fs"), 1);
+var path11 = __toESM(require("path"), 1);
 var import_node_url = require("url");
 var import_meta = {};
 var DEFAULT_BYPASS_PROFILE = {
@@ -45212,6 +45178,16 @@ var DEFAULT_PERSONAS = [
     public: false,
     sandboxProfile: DEFAULT_BYPASS_PROFILE
   },
+  {
+    // 工单管理员：纯操作员，按指令调 clawd-ticket MCP 增删改查 ticket。MCP 由 daemon 全局
+    // 注入（index.ts ticket-mcp wiring），persona 端不需要单独 .mcp.json。
+    personaId: "persona-ticket-manager",
+    label: "\u5DE5\u5355\u7BA1\u7406\u5458",
+    model: "opus",
+    iconKey: "assist",
+    public: false,
+    sandboxProfile: DEFAULT_BYPASS_PROFILE
+  },
   {
     personaId: "persona-feishu-assistant",
     label: "\u98DE\u4E66\u52A9\u7406",
@@ -45305,6 +45281,14 @@ var DEFAULT_PERSONAS = [
     public: false,
     sandboxProfile: DEFAULT_BYPASS_PROFILE
   },
+  {
+    personaId: "persona-bug-fixer",
+    label: "Bug \u4FEE\u590D\u5E08",
+    model: "opus",
+    iconKey: "debug",
+    public: false,
+    sandboxProfile: DEFAULT_BYPASS_PROFILE
+  },
   {
     // HTML PPT 制作师：把想法/文字/旧 PPT 转成单文件 HTML 演示稿
     // bundle 含 frontend-slides skill（MIT，Zara Zhang），daemon ship 进 .claude/skills/
@@ -45351,24 +45335,24 @@ function bundleSiblingFromArgv(argv1, sibling) {
   if (!argv1) return null;
   let real = argv1;
   try {
-    real = fs10.realpathSync(argv1);
+    real = fs9.realpathSync(argv1);
   } catch {
   }
-  return path13.resolve(path13.dirname(real), sibling);
+  return path11.resolve(path11.dirname(real), sibling);
 }
 function findDefaultsRoot(logger) {
   const candidates = [];
   try {
-    const here = path13.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
-    candidates.push(path13.resolve(here, "defaults"));
-    candidates.push(path13.resolve(here, "persona-defaults"));
+    const here = path11.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
+    candidates.push(path11.resolve(here, "defaults"));
+    candidates.push(path11.resolve(here, "persona-defaults"));
   } catch {
   }
   const fromArgv = bundleSiblingFromArgv(process.argv[1], "persona-defaults");
   if (fromArgv) candidates.push(fromArgv);
   for (const c of candidates) {
     try {
-      if (fs10.statSync(c).isDirectory()) {
+      if (fs9.statSync(c).isDirectory()) {
         logger?.info("persona.defaults-root.resolved", { root: c });
         return c;
       }
@@ -45385,8 +45369,8 @@ function seedDefaultPersonas(args) {
       args.logger.info("persona.seed.skip", { personaId: entry.personaId, reason: "exists" });
       continue;
     }
-    const bundleDir = path13.join(args.defaultsRoot, entry.personaId);
-    if (!fs10.existsSync(bundleDir)) {
+    const bundleDir = path11.join(args.defaultsRoot, entry.personaId);
+    if (!fs9.existsSync(bundleDir)) {
       args.logger.warn("persona.seed.skip", {
         personaId: entry.personaId,
         reason: "bundle-missing",
@@ -45394,8 +45378,8 @@ function seedDefaultPersonas(args) {
       });
       continue;
     }
-    const claudeMdPath = path13.join(bundleDir, "CLAUDE.md");
-    if (!fs10.existsSync(claudeMdPath)) {
+    const claudeMdPath = path11.join(bundleDir, "CLAUDE.md");
+    if (!fs9.existsSync(claudeMdPath)) {
       args.logger.warn("persona.seed.skip", {
         personaId: entry.personaId,
         reason: "no-CLAUDE.md",
@@ -45403,7 +45387,7 @@ function seedDefaultPersonas(args) {
       });
       continue;
     }
-    const personality = fs10.readFileSync(claudeMdPath, "utf8");
+    const personality = fs9.readFileSync(claudeMdPath, "utf8");
     const now = Date.now();
     const persona = {
       personaId: entry.personaId,
@@ -45429,17 +45413,17 @@ function seedDefaultPersonas(args) {
   }
 }
 function skipNodeModulesUnder(srcRoot) {
-  return (src) => !path13.relative(srcRoot, src).split(path13.sep).includes("node_modules");
+  return (src) => !path11.relative(srcRoot, src).split(path11.sep).includes("node_modules");
 }
 function copyBundleExtras(srcDir, dstDir) {
-  for (const entry of fs10.readdirSync(srcDir, { withFileTypes: true })) {
+  for (const entry of fs9.readdirSync(srcDir, { withFileTypes: true })) {
     if (entry.name === "CLAUDE.md" || entry.name === ".clawd") continue;
-    const srcPath = path13.join(srcDir, entry.name);
-    const dstPath = path13.join(dstDir, entry.name);
+    const srcPath = path11.join(srcDir, entry.name);
+    const dstPath = path11.join(dstDir, entry.name);
     if (entry.isDirectory()) {
-      fs10.cpSync(srcPath, dstPath, { recursive: true, dereference: true, filter: skipNodeModulesUnder(srcPath) });
+      fs9.cpSync(srcPath, dstPath, { recursive: true, dereference: true, filter: skipNodeModulesUnder(srcPath) });
     } else if (entry.isFile()) {
-      fs10.copyFileSync(srcPath, dstPath);
+      fs9.copyFileSync(srcPath, dstPath);
     }
   }
 }
@@ -45447,16 +45431,16 @@ var DAEMON_MANAGED_PATHS = ["extension-kit", "CLAUDE.md", ".mcp.json"];
 function refreshDaemonManagedDirs(args) {
   const entries = args.entries ?? DEFAULT_PERSONAS;
   for (const entry of entries) {
-    const bundleDir = path13.join(args.defaultsRoot, entry.personaId);
-    if (!fs10.existsSync(bundleDir)) continue;
+    const bundleDir = path11.join(args.defaultsRoot, entry.personaId);
+    if (!fs9.existsSync(bundleDir)) continue;
     const personaDir = args.store.personaDirPath(entry.personaId);
-    if (!fs10.existsSync(personaDir)) continue;
+    if (!fs9.existsSync(personaDir)) continue;
     for (const relPath of DAEMON_MANAGED_PATHS) {
-      const srcPath = path13.join(bundleDir, relPath);
-      if (!fs10.existsSync(srcPath)) continue;
-      const dstPath = path13.join(personaDir, relPath);
+      const srcPath = path11.join(bundleDir, relPath);
+      if (!fs9.existsSync(srcPath)) continue;
+      const dstPath = path11.join(personaDir, relPath);
       try {
-        fs10.cpSync(srcPath, dstPath, { recursive: true, force: true, dereference: true, filter: skipNodeModulesUnder(srcPath) });
+        fs9.cpSync(srcPath, dstPath, { recursive: true, force: true, dereference: true, filter: skipNodeModulesUnder(srcPath) });
         args.logger.info("persona.refresh.synced", {
           personaId: entry.personaId,
           path: relPath
@@ -45516,15 +45500,15 @@ function migrateCodexSandbox(args) {
 function findDeployKitRoot(logger) {
   const candidates = [];
   try {
-    const here = path13.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
-    candidates.push(path13.resolve(here, "..", "deploy-kit"));
+    const here = path11.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
+    candidates.push(path11.resolve(here, "..", "deploy-kit"));
   } catch {
   }
   const fromArgv = bundleSiblingFromArgv(process.argv[1], "deploy-kit");
   if (fromArgv) candidates.push(fromArgv);
   for (const c of candidates) {
     try {
-      if (fs10.statSync(c).isDirectory()) {
+      if (fs9.statSync(c).isDirectory()) {
         logger?.info("persona.deploy-kit-root.resolved", { root: c });
         return c;
       }
@@ -45535,8 +45519,8 @@ function findDeployKitRoot(logger) {
   return null;
 }
 function seedDeployKit(args) {
-  const dst = path13.join(args.dataDir, "deploy-kit");
-  fs10.cpSync(args.deployKitBundleRoot, dst, {
+  const dst = path11.join(args.dataDir, "deploy-kit");
+  fs9.cpSync(args.deployKitBundleRoot, dst, {
     recursive: true,
     dereference: true,
     force: false,
@@ -45545,35 +45529,35 @@ function seedDeployKit(args) {
   args.logger.info("deploy-kit.seed.done", { dst });
 }
 function refreshDeployKit(args) {
-  const dst = path13.join(args.dataDir, "deploy-kit");
-  if (!fs10.existsSync(dst)) {
+  const dst = path11.join(args.dataDir, "deploy-kit");
+  if (!fs9.existsSync(dst)) {
     seedDeployKit(args);
     return;
   }
   for (const sub of ["scripts", "contract"]) {
-    const s = path13.join(args.deployKitBundleRoot, sub);
-    if (fs10.existsSync(s)) {
-      fs10.cpSync(s, path13.join(dst, sub), { recursive: true, force: true, dereference: true });
+    const s = path11.join(args.deployKitBundleRoot, sub);
+    if (fs9.existsSync(s)) {
+      fs9.cpSync(s, path11.join(dst, sub), { recursive: true, force: true, dereference: true });
     }
   }
-  const secretsSrc = path13.join(args.deployKitBundleRoot, ".secrets");
-  if (fs10.existsSync(secretsSrc)) {
-    fs10.mkdirSync(path13.join(dst, ".secrets"), { recursive: true });
-    for (const f of fs10.readdirSync(secretsSrc)) {
+  const secretsSrc = path11.join(args.deployKitBundleRoot, ".secrets");
+  if (fs9.existsSync(secretsSrc)) {
+    fs9.mkdirSync(path11.join(dst, ".secrets"), { recursive: true });
+    for (const f of fs9.readdirSync(secretsSrc)) {
       if (!f.endsWith(".example")) continue;
-      fs10.copyFileSync(path13.join(secretsSrc, f), path13.join(dst, ".secrets", f));
+      fs9.copyFileSync(path11.join(secretsSrc, f), path11.join(dst, ".secrets", f));
     }
   }
   args.logger.info("deploy-kit.refresh.done", { dst });
 }
 
 // src/share-md-viewer/load.ts
-var import_node_fs10 = __toESM(require("fs"), 1);
-var import_node_path10 = __toESM(require("path"), 1);
+var import_node_fs9 = __toESM(require("fs"), 1);
+var import_node_path8 = __toESM(require("path"), 1);
 var import_node_url2 = require("url");
 
 // src/share-md-viewer/asset-loader.ts
-var import_node_fs9 = __toESM(require("fs"), 1);
+var import_node_fs8 = __toESM(require("fs"), 1);
 function htmlEscape(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
 }
@@ -45581,12 +45565,12 @@ function createViewerAssetLoader(opts) {
   let viewerTemplate;
   let errorTemplate;
   try {
-    viewerTemplate = import_node_fs9.default.readFileSync(opts.viewerHtmlPath, "utf8");
+    viewerTemplate = import_node_fs8.default.readFileSync(opts.viewerHtmlPath, "utf8");
   } catch (err) {
     throw new Error(`viewer asset not found at ${opts.viewerHtmlPath}: ${err.message}`);
   }
   try {
-    errorTemplate = import_node_fs9.default.readFileSync(opts.errorHtmlPath, "utf8");
+    errorTemplate = import_node_fs8.default.readFileSync(opts.errorHtmlPath, "utf8");
   } catch (err) {
     throw new Error(`viewer error asset not found at ${opts.errorHtmlPath}: ${err.message}`);
   }
@@ -45605,25 +45589,25 @@ var import_meta2 = {};
 function tryLoadViewerAssets(logger) {
   const candidates = [];
   try {
-    const here = import_node_path10.default.dirname((0, import_node_url2.fileURLToPath)(import_meta2.url));
+    const here = import_node_path8.default.dirname((0, import_node_url2.fileURLToPath)(import_meta2.url));
     candidates.push(here);
-    candidates.push(import_node_path10.default.resolve(here, ".."));
-    candidates.push(import_node_path10.default.resolve(here, "..", "..", "dist"));
+    candidates.push(import_node_path8.default.resolve(here, ".."));
+    candidates.push(import_node_path8.default.resolve(here, "..", "..", "dist"));
   } catch {
   }
   if (process.argv[1]) {
     let real = process.argv[1];
     try {
-      real = import_node_fs10.default.realpathSync(process.argv[1]);
+      real = import_node_fs9.default.realpathSync(process.argv[1]);
     } catch {
     }
-    candidates.push(import_node_path10.default.dirname(real));
+    candidates.push(import_node_path8.default.dirname(real));
   }
   for (const root of candidates) {
-    const viewerHtmlPath = import_node_path10.default.join(root, "share-md-viewer.html");
-    const errorHtmlPath = import_node_path10.default.join(root, "share-md-viewer-error.html");
+    const viewerHtmlPath = import_node_path8.default.join(root, "share-md-viewer.html");
+    const errorHtmlPath = import_node_path8.default.join(root, "share-md-viewer-error.html");
     try {
-      if (import_node_fs10.default.statSync(viewerHtmlPath).isFile() && import_node_fs10.default.statSync(errorHtmlPath).isFile()) {
+      if (import_node_fs9.default.statSync(viewerHtmlPath).isFile() && import_node_fs9.default.statSync(errorHtmlPath).isFile()) {
         logger?.info("share-md-viewer.assets-root.resolved", { root });
         return createViewerAssetLoader({ viewerHtmlPath, errorHtmlPath });
       }
@@ -45638,30 +45622,30 @@ function tryLoadViewerAssets(logger) {
 }
 
 // src/share-ui/load.ts
-var import_node_fs12 = __toESM(require("fs"), 1);
-var import_node_path12 = __toESM(require("path"), 1);
+var import_node_fs11 = __toESM(require("fs"), 1);
+var import_node_path10 = __toESM(require("path"), 1);
 var import_node_url3 = require("url");
 
 // src/share-ui/asset-loader.ts
-var import_node_fs11 = __toESM(require("fs"), 1);
-var import_node_path11 = __toESM(require("path"), 1);
+var import_node_fs10 = __toESM(require("fs"), 1);
+var import_node_path9 = __toESM(require("path"), 1);
 function createShareUiAssetLoader(opts) {
   let indexHtml;
   try {
-    indexHtml = import_node_fs11.default.readFileSync(opts.indexHtmlPath, "utf8");
+    indexHtml = import_node_fs10.default.readFileSync(opts.indexHtmlPath, "utf8");
   } catch (err) {
     throw new Error(`share-ui index.html not found at ${opts.indexHtmlPath}: ${err.message}`);
   }
-  const assetsDir = import_node_path11.default.resolve(opts.assetsDir);
+  const assetsDir = import_node_path9.default.resolve(opts.assetsDir);
   return {
     renderIndexHtml() {
       return indexHtml;
     },
     resolveAssetPath(rel) {
-      const resolved = import_node_path11.default.resolve(assetsDir, rel);
-      if (resolved !== assetsDir && !resolved.startsWith(assetsDir + import_node_path11.default.sep)) return null;
+      const resolved = import_node_path9.default.resolve(assetsDir, rel);
+      if (resolved !== assetsDir && !resolved.startsWith(assetsDir + import_node_path9.default.sep)) return null;
       try {
-        if (import_node_fs11.default.statSync(resolved).isFile()) return resolved;
+        if (import_node_fs10.default.statSync(resolved).isFile()) return resolved;
       } catch {
       }
       return null;
@@ -45675,28 +45659,28 @@ function bundleDirFromArgv(argv1) {
   if (!argv1) return null;
   let real = argv1;
   try {
-    real = import_node_fs12.default.realpathSync(argv1);
+    real = import_node_fs11.default.realpathSync(argv1);
   } catch {
   }
-  return import_node_path12.default.dirname(real);
+  return import_node_path10.default.dirname(real);
 }
 function tryLoadShareUi(logger) {
   const candidates = [];
   try {
-    const here = import_node_path12.default.dirname((0, import_node_url3.fileURLToPath)(import_meta3.url));
+    const here = import_node_path10.default.dirname((0, import_node_url3.fileURLToPath)(import_meta3.url));
     candidates.push(here);
-    candidates.push(import_node_path12.default.resolve(here, ".."));
-    candidates.push(import_node_path12.default.resolve(here, "..", "..", "dist"));
+    candidates.push(import_node_path10.default.resolve(here, ".."));
+    candidates.push(import_node_path10.default.resolve(here, "..", "..", "dist"));
   } catch {
   }
   const argvDir = bundleDirFromArgv(process.argv[1]);
   if (argvDir) candidates.push(argvDir);
   for (const root of candidates) {
-    const shareUiDir = import_node_path12.default.join(root, "share-ui");
-    const indexHtmlPath = import_node_path12.default.join(shareUiDir, "guest.html");
-    const assetsDir = import_node_path12.default.join(shareUiDir, "assets");
+    const shareUiDir = import_node_path10.default.join(root, "share-ui");
+    const indexHtmlPath = import_node_path10.default.join(shareUiDir, "guest.html");
+    const assetsDir = import_node_path10.default.join(shareUiDir, "assets");
     try {
-      if (import_node_fs12.default.statSync(indexHtmlPath).isFile() && import_node_fs12.default.statSync(assetsDir).isDirectory()) {
+      if (import_node_fs11.default.statSync(indexHtmlPath).isFile() && import_node_fs11.default.statSync(assetsDir).isDirectory()) {
         logger?.info("share-ui.assets-root.resolved", { root: shareUiDir });
         return createShareUiAssetLoader({ indexHtmlPath, assetsDir });
       }
@@ -45778,20 +45762,20 @@ function buildVisitorLogin(deps) {
 }
 
 // src/visitor/visitor-store.ts
-var import_node_fs13 = __toESM(require("fs"), 1);
-var import_node_path13 = __toESM(require("path"), 1);
+var import_node_fs12 = __toESM(require("fs"), 1);
+var import_node_path11 = __toESM(require("path"), 1);
 function createVisitorStore(opts) {
-  const file = import_node_path13.default.join(opts.dir, "visitors.json");
+  const file = import_node_path11.default.join(opts.dir, "visitors.json");
   const read = () => {
     try {
-      return JSON.parse(import_node_fs13.default.readFileSync(file, "utf8"));
+      return JSON.parse(import_node_fs12.default.readFileSync(file, "utf8"));
     } catch {
       return [];
     }
   };
   const write = (rows) => {
-    import_node_fs13.default.mkdirSync(opts.dir, { recursive: true });
-    import_node_fs13.default.writeFileSync(file, JSON.stringify(rows, null, 2));
+    import_node_fs12.default.mkdirSync(opts.dir, { recursive: true });
+    import_node_fs12.default.writeFileSync(file, JSON.stringify(rows, null, 2));
   };
   return {
     upsert(r) {
@@ -46307,8 +46291,8 @@ var CodexAdapter = class {
 
 // src/tools/claude-tui.ts
 var import_node_fs16 = __toESM(require("fs"), 1);
-var import_node_os7 = __toESM(require("os"), 1);
-var import_node_path14 = __toESM(require("path"), 1);
+var import_node_os6 = __toESM(require("os"), 1);
+var import_node_path13 = __toESM(require("path"), 1);
 var import_headless = __toESM(require_xterm_headless(), 1);
 
 // ../node_modules/.pnpm/@xterm+addon-serialize@0.14.0/node_modules/@xterm/addon-serialize/lib/addon-serialize.mjs
@@ -47435,14 +47419,17 @@ function buildTuiSpawnArgs(ctx, isResume = false) {
   if (ctx.shiftMcpConfigPath) {
     args.push("--mcp-config", ctx.shiftMcpConfigPath);
   }
+  if (ctx.inboxMcpConfigPath) {
+    args.push("--mcp-config", ctx.inboxMcpConfigPath);
+  }
   args.push("--disallowed-tools", "CronCreate,CronDelete,CronList,ScheduleWakeup,RemoteTrigger");
   if (ctx.effort) args.push("--effort", ctx.effort);
   return args;
 }
 function jsonlExistsForCtx(ctx) {
   if (!ctx.toolSessionId) return false;
-  const home = import_node_os7.default.homedir();
-  const file = import_node_path14.default.join(home, ".claude", "projects", cwdToHashDir(ctx.cwd), `${ctx.toolSessionId}.jsonl`);
+  const home = import_node_os6.default.homedir();
+  const file = import_node_path13.default.join(home, ".claude", "projects", cwdToHashDir(ctx.cwd), `${ctx.toolSessionId}.jsonl`);
   try {
     return import_node_fs16.default.statSync(file).isFile();
   } catch {
@@ -47514,9 +47501,9 @@ var PersonaDispatchManager = class {
 
 // src/dispatch/mcp-config.ts
 var import_node_fs17 = __toESM(require("fs"), 1);
-var import_node_path15 = __toESM(require("path"), 1);
+var import_node_path14 = __toESM(require("path"), 1);
 function dispatchMcpConfigPath(dataDir) {
-  return import_node_path15.default.join(dataDir, "dispatch.mcp.json");
+  return import_node_path14.default.join(dataDir, "dispatch.mcp.json");
 }
 function writeDispatchMcpConfig(args) {
   const cfgPath = dispatchMcpConfigPath(args.dataDir);
@@ -47538,9 +47525,9 @@ function writeDispatchMcpConfig(args) {
 
 // src/ticket/mcp-config.ts
 var import_node_fs18 = __toESM(require("fs"), 1);
-var import_node_path16 = __toESM(require("path"), 1);
+var import_node_path15 = __toESM(require("path"), 1);
 function ticketMcpConfigPath(dataDir) {
-  return import_node_path16.default.join(dataDir, "ticket.mcp.json");
+  return import_node_path15.default.join(dataDir, "ticket.mcp.json");
 }
 function writeTicketMcpConfig(args) {
   const cfgPath = ticketMcpConfigPath(args.dataDir);
@@ -47568,9 +47555,9 @@ function writeTicketMcpConfig(args) {
 
 // src/shift/mcp-config.ts
 var import_node_fs19 = __toESM(require("fs"), 1);
-var import_node_path17 = __toESM(require("path"), 1);
+var import_node_path16 = __toESM(require("path"), 1);
 function shiftMcpConfigPath(dataDir) {
-  return import_node_path17.default.join(dataDir, "shift.mcp.json");
+  return import_node_path16.default.join(dataDir, "shift.mcp.json");
 }
 async function writeShiftMcpConfig(args) {
   const cfgPath = shiftMcpConfigPath(args.dataDir);
@@ -47590,6 +47577,29 @@ async function writeShiftMcpConfig(args) {
   return cfgPath;
 }
 
+// src/inbox/mcp-config.ts
+var import_node_fs20 = __toESM(require("fs"), 1);
+var import_node_path17 = __toESM(require("path"), 1);
+function inboxMcpConfigPath(dataDir) {
+  return import_node_path17.default.join(dataDir, "inbox.mcp.json");
+}
+async function writeInboxMcpConfig(args) {
+  const cfgPath = inboxMcpConfigPath(args.dataDir);
+  const content = {
+    _comment: "daemon \u542F\u52A8\u65F6\u81EA\u52A8\u751F\u6210\uFF1Bcc spawn \u901A\u8FC7 --mcp-config \u6CE8\u5165\u3002inbox/mcp-server.cjs \u662F daemon \u81EA\u5E26\u7684 stdio MCP server\uFF0C\u66B4\u9732 sendDm tool\uFF08persona \u53D7\u63A7\u53D1 P2P IM DM\uFF09\u3002",
+    mcpServers: {
+      "clawd-inbox": {
+        type: "stdio",
+        command: "node",
+        args: [args.serverScriptPath]
+      }
+    }
+  };
+  await import_node_fs20.default.promises.mkdir(args.dataDir, { recursive: true });
+  await import_node_fs20.default.promises.writeFile(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  return cfgPath;
+}
+
 // src/shift/store.ts
 var import_promises = __toESM(require("fs/promises"), 1);
 var import_node_path18 = __toESM(require("path"), 1);
@@ -48245,6 +48255,39 @@ async function forwardDispatchToPeer(args) {
   }
   return json.result.outcome;
 }
+async function forwardInboxPostToPeer(args) {
+  const f = args.fetchImpl ?? fetch;
+  const base = wsUrlToHttp(args.contact.remoteUrl).replace(/\/+$/, "");
+  const url = `${base}/rpc/inbox:postMessage`;
+  let res;
+  try {
+    res = await f(url, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        authorization: `Bearer ${args.contact.connectToken}`
+      },
+      body: JSON.stringify({
+        id: args.id,
+        text: args.text,
+        createdAt: args.createdAt,
+        ...args.origin ? { origin: args.origin } : {}
+      })
+    });
+  } catch (err) {
+    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+  }
+  let json = null;
+  try {
+    json = await res.json();
+  } catch {
+    return { ok: false, error: `peer non-JSON (HTTP ${res.status})` };
+  }
+  if (res.status < 200 || res.status >= 300 || json?.ok === false) {
+    return { ok: false, error: json?.error ?? `HTTP ${res.status}` };
+  }
+  return { ok: true };
+}
 
 // src/tools/codex-history.ts
 var import_node_child_process5 = require("child_process");
@@ -48477,8 +48520,8 @@ async function listCodexSkills(cwd, deps = {}) {
 }
 
 // src/workspace/browser.ts
-var import_node_fs20 = __toESM(require("fs"), 1);
-var import_node_os8 = __toESM(require("os"), 1);
+var import_node_fs21 = __toESM(require("fs"), 1);
+var import_node_os7 = __toESM(require("os"), 1);
 var import_node_path19 = __toESM(require("path"), 1);
 init_protocol();
 var MAX_FILE_BYTES = 2 * 1024 * 1024;
@@ -48493,7 +48536,7 @@ function resolveInsideCwd(cwd, subpath) {
 }
 function ensureCwd(cwd) {
   try {
-    const stat = import_node_fs20.default.statSync(cwd);
+    const stat = import_node_fs21.default.statSync(cwd);
     if (!stat.isDirectory()) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${cwd}`);
     }
@@ -48504,10 +48547,10 @@ function ensureCwd(cwd) {
 }
 var WorkspaceBrowser = class {
   list(args) {
-    const cwd = args.cwd && args.cwd.length > 0 ? args.cwd : import_node_os8.default.homedir();
+    const cwd = args.cwd && args.cwd.length > 0 ? args.cwd : import_node_os7.default.homedir();
     ensureCwd(cwd);
     const full = resolveInsideCwd(cwd, args.path);
-    const dirents = import_node_fs20.default.readdirSync(full, { withFileTypes: true });
+    const dirents = import_node_fs21.default.readdirSync(full, { withFileTypes: true });
     const entries = [];
     for (const d of dirents) {
       if (!args.showHidden && d.name.startsWith(".")) continue;
@@ -48517,7 +48560,7 @@ var WorkspaceBrowser = class {
         mtime: ""
       };
       try {
-        const st = import_node_fs20.default.statSync(import_node_path19.default.join(full, d.name));
+        const st = import_node_fs21.default.statSync(import_node_path19.default.join(full, d.name));
         entry.mtime = new Date(st.mtimeMs).toISOString();
         if (d.isFile()) entry.size = st.size;
       } catch {
@@ -48533,14 +48576,14 @@ var WorkspaceBrowser = class {
   read(args) {
     ensureCwd(args.cwd);
     const full = resolveInsideCwd(args.cwd, args.path);
-    const st = import_node_fs20.default.statSync(full);
+    const st = import_node_fs21.default.statSync(full);
     if (!st.isFile()) {
       throw new ClawdError(ERROR_CODES.INVALID_PATH, `not a file: ${args.path}`);
     }
     if (st.size > MAX_FILE_BYTES) {
       throw new ClawdError(ERROR_CODES.FILE_TOO_LARGE, `file > ${MAX_FILE_BYTES} bytes`);
     }
-    const buf = import_node_fs20.default.readFileSync(full);
+    const buf = import_node_fs21.default.readFileSync(full);
     const isBinary = buf.includes(0);
     if (isBinary) {
       return {
@@ -48562,20 +48605,20 @@ var WorkspaceBrowser = class {
 };
 
 // src/skills/agents-scanner.ts
-var import_node_fs21 = __toESM(require("fs"), 1);
-var import_node_os9 = __toESM(require("os"), 1);
+var import_node_fs22 = __toESM(require("fs"), 1);
+var import_node_os8 = __toESM(require("os"), 1);
 var import_node_path20 = __toESM(require("path"), 1);
 var DEFAULT_POLICY_DIR_DARWIN = "/Library/Application Support/ClaudeCode/.claude/agents";
 function isDirLikeSync2(p2) {
   try {
-    return import_node_fs21.default.statSync(p2).isDirectory();
+    return import_node_fs22.default.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function fileExistsSync(p2) {
   try {
-    return import_node_fs21.default.statSync(p2).isFile();
+    return import_node_fs22.default.statSync(p2).isFile();
   } catch {
     return false;
   }
@@ -48583,7 +48626,7 @@ function fileExistsSync(p2) {
 function parseAgentFile(filePath) {
   let content;
   try {
-    content = import_node_fs21.default.readFileSync(filePath, "utf8");
+    content = import_node_fs22.default.readFileSync(filePath, "utf8");
   } catch {
     return {};
   }
@@ -48596,7 +48639,7 @@ function parseAgentFile(filePath) {
 function scanAgentsDir(dir, source, seen, out) {
   let entries;
   try {
-    entries = import_node_fs21.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs22.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
@@ -48623,7 +48666,7 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   function walk2(dir, namespaces) {
     let entries;
     try {
-      entries = import_node_fs21.default.readdirSync(dir, { withFileTypes: true });
+      entries = import_node_fs22.default.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -48659,7 +48702,7 @@ function readInstalledPlugins2(home) {
   let raw = null;
   for (const candidate of [v2, v1]) {
     try {
-      raw = import_node_fs21.default.readFileSync(candidate, "utf8");
+      raw = import_node_fs22.default.readFileSync(candidate, "utf8");
       break;
     } catch {
     }
@@ -48690,7 +48733,7 @@ function walkUpProjectAgentsDirs(startCwd, home, seen, out) {
     scanAgentsDir(import_node_path20.default.join(cur, ".claude", "agents"), "project", seen, out);
     let hasGit = false;
     try {
-      hasGit = import_node_fs21.default.existsSync(import_node_path20.default.join(cur, ".git"));
+      hasGit = import_node_fs22.default.existsSync(import_node_path20.default.join(cur, ".git"));
     } catch {
     }
     if (hasGit) return;
@@ -48706,7 +48749,7 @@ var AgentsScanner = class {
   extraPluginRoots;
   policyDir;
   constructor(opts = {}) {
-    this.home = opts.home ?? process.env.CLAUDE_CONFIG_DIR ?? import_node_os9.default.homedir();
+    this.home = opts.home ?? process.env.CLAUDE_CONFIG_DIR ?? import_node_os8.default.homedir();
     this.extraPluginRoots = opts.extraPluginRoots ?? [];
     if (opts.policyDir !== void 0) {
       this.policyDir = opts.policyDir;
@@ -48753,21 +48796,21 @@ var AgentsScanner = class {
 };
 
 // src/observer/session-observer.ts
-var import_node_fs23 = __toESM(require("fs"), 1);
-var import_node_os11 = __toESM(require("os"), 1);
+var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_os10 = __toESM(require("os"), 1);
 var import_node_path22 = __toESM(require("path"), 1);
 init_claude_history();
 
 // src/observer/subagent-meta-observer.ts
-var import_node_fs22 = __toESM(require("fs"), 1);
-var import_node_os10 = __toESM(require("os"), 1);
+var import_node_fs23 = __toESM(require("fs"), 1);
+var import_node_os9 = __toESM(require("os"), 1);
 var import_node_path21 = __toESM(require("path"), 1);
 init_claude_history();
 var META_RE = /^agent-([A-Za-z0-9_-]+)\.meta\.json$/;
 var SubagentMetaObserver = class {
   constructor(opts) {
     this.opts = opts;
-    this.home = opts.home ?? import_node_os10.default.homedir();
+    this.home = opts.home ?? import_node_os9.default.homedir();
   }
   opts;
   home;
@@ -48804,7 +48847,7 @@ var SubagentMetaObserver = class {
   attachWatcher(w2) {
     if (w2.watcher) return;
     try {
-      w2.watcher = import_node_fs22.default.watch(w2.dirPath, { persistent: false }, (_evt, name) => {
+      w2.watcher = import_node_fs23.default.watch(w2.dirPath, { persistent: false }, (_evt, name) => {
         if (!name) return;
         const m2 = META_RE.exec(String(name));
         if (!m2) return;
@@ -48816,7 +48859,7 @@ var SubagentMetaObserver = class {
   scan(w2) {
     let entries;
     try {
-      entries = import_node_fs22.default.readdirSync(w2.dirPath);
+      entries = import_node_fs23.default.readdirSync(w2.dirPath);
     } catch {
       return;
     }
@@ -48833,7 +48876,7 @@ var SubagentMetaObserver = class {
     const file = import_node_path21.default.join(w2.dirPath, name);
     let raw;
     try {
-      raw = import_node_fs22.default.readFileSync(file, "utf8");
+      raw = import_node_fs23.default.readFileSync(file, "utf8");
     } catch {
       return;
     }
@@ -48878,7 +48921,7 @@ var SubagentMetaObserver = class {
 var SessionObserver = class {
   constructor(opts) {
     this.opts = opts;
-    this.home = opts.home ?? import_node_os11.default.homedir();
+    this.home = opts.home ?? import_node_os10.default.homedir();
     this.metaObserver = opts.enableSubagentMetaObserver ? new SubagentMetaObserver({ home: this.home, onEvent: opts.onEvent }) : null;
   }
   opts;
@@ -48897,7 +48940,7 @@ var SessionObserver = class {
     const filePath = this.resolveJsonlPath(args.cwd, args.toolSessionId, args.jsonlPath);
     let size = 0;
     try {
-      size = import_node_fs23.default.statSync(filePath).size;
+      size = import_node_fs24.default.statSync(filePath).size;
     } catch {
     }
     const w2 = {
@@ -48911,10 +48954,10 @@ var SessionObserver = class {
       prevIsRejectSentinel: false
     };
     try {
-      import_node_fs23.default.mkdirSync(import_node_path22.default.dirname(filePath), { recursive: true });
+      import_node_fs24.default.mkdirSync(import_node_path22.default.dirname(filePath), { recursive: true });
     } catch {
     }
-    w2.watcher = import_node_fs23.default.watch(import_node_path22.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
+    w2.watcher = import_node_fs24.default.watch(import_node_path22.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
       if (!changedName || !filePath.endsWith(changedName)) return;
       this.poll(w2);
     });
@@ -48937,7 +48980,7 @@ var SessionObserver = class {
   // 异常静默吞，不阻塞 watcher 启动
   hydrateMetaTail(w2, maxLines = 200) {
     try {
-      const raw = import_node_fs23.default.readFileSync(w2.filePath, "utf8");
+      const raw = import_node_fs24.default.readFileSync(w2.filePath, "utf8");
       if (!raw) return;
       const allLines = raw.split("\n").filter((l) => l.trim().length > 0);
       if (allLines.length === 0) return;
@@ -48961,7 +49004,7 @@ var SessionObserver = class {
   poll(w2) {
     let size = 0;
     try {
-      size = import_node_fs23.default.statSync(w2.filePath).size;
+      size = import_node_fs24.default.statSync(w2.filePath).size;
     } catch {
       return;
     }
@@ -48970,11 +49013,11 @@ var SessionObserver = class {
       w2.buf = "";
     }
     if (size === w2.lastSize) return;
-    const fd = import_node_fs23.default.openSync(w2.filePath, "r");
+    const fd = import_node_fs24.default.openSync(w2.filePath, "r");
     try {
       const len = size - w2.lastSize;
       const buf = Buffer.alloc(len);
-      import_node_fs23.default.readSync(fd, buf, 0, len, w2.lastSize);
+      import_node_fs24.default.readSync(fd, buf, 0, len, w2.lastSize);
       w2.lastSize = size;
       w2.buf += buf.toString("utf8");
       let newlineIndex;
@@ -48997,7 +49040,7 @@ var SessionObserver = class {
         }
       }
     } finally {
-      import_node_fs23.default.closeSync(fd);
+      import_node_fs24.default.closeSync(fd);
     }
   }
   // 解析 JSONL 单行：仅当是主链 user 文本行（非 sidechain / 非 sub-agent / message.role='user'
@@ -49557,7 +49600,9 @@ var EXPOSED_RPC_METHODS = [
   // file-sharing：persona guest agent 把自己工作目录内的产物入群+签名分享。
   // 路径越界由 handlers/attachment.ts guardAttachmentPath（scope-based）拦截。
   "attachment.groupAdd",
-  "attachment.signUrl"
+  "attachment.signUrl",
+  // persona 受控发 P2P IM DM（sender 由 session scope 推，driver 分级授权见 handlers/inbox.ts）
+  "inbox.sendDm"
 ];
 async function handleRpcRequest(input) {
   const { method, body, sessionId, dispatcher } = input;
@@ -49793,14 +49838,14 @@ async function authenticate(token, deps) {
 }
 
 // src/permission/capability-store.ts
-var fs27 = __toESM(require("fs"), 1);
+var fs28 = __toESM(require("fs"), 1);
 var path27 = __toESM(require("path"), 1);
 var CAPABILITIES_FILE_NAME = "capabilities.json";
 var FILE_VERSION = 1;
 var CapabilityStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs27.mkdirSync(dataDir, { recursive: true });
+    fs28.mkdirSync(dataDir, { recursive: true });
     this.cache = this.readFromDisk();
   }
   dataDir;
@@ -49830,7 +49875,7 @@ var CapabilityStore = class {
     const file = this.filePath();
     let raw;
     try {
-      raw = fs27.readFileSync(file, "utf8");
+      raw = fs28.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -49858,10 +49903,10 @@ var CapabilityStore = class {
   }
   atomicWrite(file, content) {
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
-    fs27.writeFileSync(tmp, content, { mode: 384 });
-    fs27.renameSync(tmp, file);
+    fs28.writeFileSync(tmp, content, { mode: 384 });
+    fs28.renameSync(tmp, file);
     try {
-      fs27.chmodSync(file, 384);
+      fs28.chmodSync(file, 384);
     } catch {
     }
   }
@@ -49954,14 +49999,14 @@ var CapabilityManager = class {
 };
 
 // src/permission/cleanup.ts
-var fs28 = __toESM(require("fs"), 1);
+var fs29 = __toESM(require("fs"), 1);
 function cleanupGuestSessionsForCapability(cap, factory) {
   const removed = [];
   for (const g2 of cap.grants) {
     if (g2.resource.type !== "persona") continue;
     const dir = factory.vmGuestRoot(g2.resource.id, cap.id);
     try {
-      fs28.rmSync(dir, { recursive: true, force: true });
+      fs29.rmSync(dir, { recursive: true, force: true });
       removed.push(dir);
     } catch {
     }
@@ -49970,13 +50015,13 @@ function cleanupGuestSessionsForCapability(cap, factory) {
 }
 
 // src/inbox/inbox-store.ts
-var fs29 = __toESM(require("fs"), 1);
+var fs30 = __toESM(require("fs"), 1);
 var path28 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs29.mkdirSync(this.dirPath(), { recursive: true });
+    fs30.mkdirSync(this.dirPath(), { recursive: true });
   }
   dataDir;
   /**
@@ -49988,7 +50033,7 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     let raw;
     try {
-      raw = fs29.readFileSync(file, "utf8");
+      raw = fs30.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -50004,7 +50049,7 @@ var InboxStore = class {
     const dir = this.dirPath();
     let entries;
     try {
-      entries = fs29.readdirSync(dir);
+      entries = fs30.readdirSync(dir);
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -50020,9 +50065,9 @@ var InboxStore = class {
     if (existing.some((m2) => m2.id === message.id)) return;
     const file = this.filePath(message.peerDeviceId);
     const line = JSON.stringify(message) + "\n";
-    fs29.appendFileSync(file, line, { mode: 384 });
+    fs30.appendFileSync(file, line, { mode: 384 });
     try {
-      fs29.chmodSync(file, 384);
+      fs30.chmodSync(file, 384);
     } catch {
     }
   }
@@ -50052,7 +50097,7 @@ var InboxStore = class {
   removeByPeerDeviceId(peerDeviceId) {
     const file = this.filePath(peerDeviceId);
     try {
-      fs29.unlinkSync(file);
+      fs30.unlinkSync(file);
     } catch (err) {
       if (err?.code === "ENOENT") return;
     }
@@ -50061,10 +50106,10 @@ var InboxStore = class {
     const file = this.filePath(peerDeviceId);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     const content = messages.map((m2) => JSON.stringify(m2)).join("\n") + (messages.length > 0 ? "\n" : "");
-    fs29.writeFileSync(tmp, content, { mode: 384 });
-    fs29.renameSync(tmp, file);
+    fs30.writeFileSync(tmp, content, { mode: 384 });
+    fs30.renameSync(tmp, file);
     try {
-      fs29.chmodSync(file, 384);
+      fs30.chmodSync(file, 384);
     } catch {
     }
   }
@@ -50115,7 +50160,8 @@ var InboxManager = class {
       senderDeviceId: args.senderDeviceId,
       text: args.text,
       createdAt: args.createdAt,
-      readBy: {}
+      readBy: {},
+      ...args.origin ? { origin: args.origin } : {}
     };
     this.store.append(msg);
     const afterLen = this.store.list(args.peerDeviceId).length;
@@ -50159,7 +50205,7 @@ var InboxManager = class {
 };
 
 // src/state/contact-store.ts
-var fs30 = __toESM(require("fs"), 1);
+var fs31 = __toESM(require("fs"), 1);
 var path29 = __toESM(require("path"), 1);
 var FILE_NAME = "contacts.json";
 var ContactStore = class {
@@ -50173,7 +50219,7 @@ var ContactStore = class {
     const file = path29.join(this.dataDir, FILE_NAME);
     let raw;
     try {
-      raw = fs30.readFileSync(file, "utf8");
+      raw = fs31.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code !== "ENOENT") this.renameBak(file);
       return;
@@ -50223,13 +50269,13 @@ var ContactStore = class {
       null,
       2
     );
-    fs30.mkdirSync(this.dataDir, { recursive: true });
-    fs30.writeFileSync(tmp, content, { mode: 384 });
-    fs30.renameSync(tmp, file);
+    fs31.mkdirSync(this.dataDir, { recursive: true });
+    fs31.writeFileSync(tmp, content, { mode: 384 });
+    fs31.renameSync(tmp, file);
   }
   renameBak(file) {
     try {
-      fs30.renameSync(file, `${file}.bak`);
+      fs31.renameSync(file, `${file}.bak`);
     } catch {
     }
   }
@@ -50379,7 +50425,7 @@ async function autoReverseContact(args) {
 }
 
 // src/migrations/2026-05-20-flatten-sessions.ts
-var fs31 = __toESM(require("fs"), 1);
+var fs32 = __toESM(require("fs"), 1);
 var path30 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
@@ -50399,7 +50445,7 @@ function migrateFlattenSessions(opts) {
       if (!entry.endsWith(".json")) continue;
       const src = path30.join(defaultDir, entry);
       const dst = path30.join(sessionsDir, entry);
-      fs31.renameSync(src, dst);
+      fs32.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
@@ -50411,10 +50457,10 @@ function migrateFlattenSessions(opts) {
     const ownerSrc = path30.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
       const ownerDst = path30.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs31.mkdirSync(ownerDst, { recursive: true });
+      fs32.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs31.renameSync(path30.join(ownerSrc, file), path30.join(ownerDst, file));
+        fs32.renameSync(path30.join(ownerSrc, file), path30.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
@@ -50422,18 +50468,18 @@ function migrateFlattenSessions(opts) {
     const listenerSrc = path30.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
       const archiveDst = path30.join(dataDir, ".legacy", `listener-${pid}`);
-      fs31.mkdirSync(archiveDst, { recursive: true });
+      fs32.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs31.renameSync(path30.join(listenerSrc, file), path30.join(archiveDst, file));
+        fs32.renameSync(path30.join(listenerSrc, file), path30.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs31.mkdirSync(sessionsDir, { recursive: true });
-  fs31.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs32.mkdirSync(sessionsDir, { recursive: true });
+  fs32.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -50444,7 +50490,7 @@ function migrateFlattenSessions(opts) {
 }
 function existsSync3(p2) {
   try {
-    fs31.statSync(p2);
+    fs32.statSync(p2);
     return true;
   } catch {
     return false;
@@ -50452,27 +50498,27 @@ function existsSync3(p2) {
 }
 function isDir(p2) {
   try {
-    return fs31.statSync(p2).isDirectory();
+    return fs32.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p2) {
   try {
-    return fs31.readdirSync(p2);
+    return fs32.readdirSync(p2);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p2) {
   try {
-    fs31.rmdirSync(p2);
+    fs32.rmdirSync(p2);
   } catch {
   }
 }
 
 // src/transport/http-router.ts
-var import_node_fs25 = __toESM(require("fs"), 1);
+var import_node_fs26 = __toESM(require("fs"), 1);
 var import_node_path26 = __toESM(require("path"), 1);
 
 // src/attachment/mime.ts
@@ -50652,7 +50698,7 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
 }
 
 // src/attachment/upload.ts
-var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_fs25 = __toESM(require("fs"), 1);
 var import_node_path24 = __toESM(require("path"), 1);
 var import_node_crypto7 = __toESM(require("crypto"), 1);
 var import_promises2 = require("stream/promises");
@@ -50674,7 +50720,7 @@ async function writeUploadedAttachment(args) {
   assertValidFileName(args.fileName);
   const attachmentsRoot = import_node_path24.default.join(args.sessionDir, ".attachments");
   try {
-    import_node_fs24.default.mkdirSync(attachmentsRoot, { recursive: true });
+    import_node_fs25.default.mkdirSync(attachmentsRoot, { recursive: true });
   } catch (err) {
     throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
   }
@@ -50695,18 +50741,18 @@ async function writeUploadedAttachment(args) {
           yield buf;
         }
       },
-      import_node_fs24.default.createWriteStream(tmpPath, { mode: 384 })
+      import_node_fs25.default.createWriteStream(tmpPath, { mode: 384 })
     );
   } catch (err) {
     try {
-      import_node_fs24.default.unlinkSync(tmpPath);
+      import_node_fs25.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError("STORAGE_ERROR", `write failed: ${err.message}`);
   }
   if (actualSize !== args.contentLength) {
     try {
-      import_node_fs24.default.unlinkSync(tmpPath);
+      import_node_fs25.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError(
@@ -50719,24 +50765,24 @@ async function writeUploadedAttachment(args) {
   let finalFileName;
   let hashDirExists = false;
   try {
-    hashDirExists = import_node_fs24.default.statSync(hashDir).isDirectory();
+    hashDirExists = import_node_fs25.default.statSync(hashDir).isDirectory();
   } catch {
   }
   if (hashDirExists) {
-    const existing = import_node_fs24.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
+    const existing = import_node_fs25.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
     finalFileName = existing[0] ?? args.fileName;
     try {
-      import_node_fs24.default.unlinkSync(tmpPath);
+      import_node_fs25.default.unlinkSync(tmpPath);
     } catch {
     }
   } else {
     try {
-      import_node_fs24.default.mkdirSync(hashDir, { recursive: true });
+      import_node_fs25.default.mkdirSync(hashDir, { recursive: true });
       finalFileName = args.fileName;
-      import_node_fs24.default.renameSync(tmpPath, import_node_path24.default.join(hashDir, finalFileName));
+      import_node_fs25.default.renameSync(tmpPath, import_node_path24.default.join(hashDir, finalFileName));
     } catch (err) {
       try {
-        import_node_fs24.default.unlinkSync(tmpPath);
+        import_node_fs25.default.unlinkSync(tmpPath);
       } catch {
       }
       throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
@@ -50758,7 +50804,7 @@ async function writeUploadedAttachment(args) {
 // src/extension/import.ts
 var import_promises3 = __toESM(require("fs/promises"), 1);
 var import_node_path25 = __toESM(require("path"), 1);
-var import_node_os12 = __toESM(require("os"), 1);
+var import_node_os11 = __toESM(require("os"), 1);
 var import_jszip = __toESM(require_lib3(), 1);
 var ImportError = class extends Error {
   constructor(code, message) {
@@ -50818,7 +50864,7 @@ async function importZip(buf, root) {
   if (destExists) {
     throw new ImportError("ALREADY_EXISTS", `extension ${manifest.id} already installed`);
   }
-  const stage = await import_promises3.default.mkdtemp(import_node_path25.default.join(import_node_os12.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
+  const stage = await import_promises3.default.mkdtemp(import_node_path25.default.join(import_node_os11.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
       const dest = import_node_path25.default.join(stage, name);
@@ -51016,7 +51062,7 @@ function createHttpRouter(deps) {
       }
       let buf;
       try {
-        buf = await import_node_fs25.default.promises.readFile(abs);
+        buf = await import_node_fs26.default.promises.readFile(abs);
       } catch {
         sendJson(res, 404, { code: "NOT_FOUND", message: "asset not found" });
         return true;
@@ -51456,7 +51502,7 @@ function withCtx(ctx, body) {
 function streamFile(res, absPath, logger) {
   let stat;
   try {
-    stat = import_node_fs25.default.statSync(absPath);
+    stat = import_node_fs26.default.statSync(absPath);
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") {
@@ -51479,7 +51525,7 @@ function streamFile(res, absPath, logger) {
     // 防止浏览器把任意 mime 当 html 渲染
     "X-Content-Type-Options": "nosniff"
   });
-  const stream = import_node_fs25.default.createReadStream(absPath);
+  const stream = import_node_fs26.default.createReadStream(absPath);
   stream.on("error", (err) => {
     logger?.warn("streamFile read error", { absPath, err: err.message });
     res.destroy();
@@ -51488,7 +51534,7 @@ function streamFile(res, absPath, logger) {
 }
 
 // src/attachment/gc.ts
-var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_fs27 = __toESM(require("fs"), 1);
 var import_node_path27 = __toESM(require("path"), 1);
 var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
 function runAttachmentGc(args) {
@@ -51511,7 +51557,7 @@ function runAttachmentGc(args) {
     const attRoot = import_node_path27.default.join(sessionDir, ".attachments");
     let hashDirs;
     try {
-      hashDirs = import_node_fs26.default.readdirSync(attRoot);
+      hashDirs = import_node_fs27.default.readdirSync(attRoot);
     } catch (err) {
       if (err.code === "ENOENT") continue;
       args.logger?.warn("attachment gc: readdir failed", { attRoot, err: err.message });
@@ -51521,7 +51567,7 @@ function runAttachmentGc(args) {
       const hashDirAbs = import_node_path27.default.join(attRoot, hashDir);
       let files;
       try {
-        files = import_node_fs26.default.readdirSync(hashDirAbs);
+        files = import_node_fs27.default.readdirSync(hashDirAbs);
       } catch {
         continue;
       }
@@ -51529,7 +51575,7 @@ function runAttachmentGc(args) {
         const file = import_node_path27.default.join(hashDirAbs, name);
         let stat;
         try {
-          stat = import_node_fs26.default.statSync(file);
+          stat = import_node_fs27.default.statSync(file);
         } catch {
           continue;
         }
@@ -51538,25 +51584,25 @@ function runAttachmentGc(args) {
         if (age < ttlMs) continue;
         if (liveAbs.has(file)) continue;
         try {
-          import_node_fs26.default.unlinkSync(file);
+          import_node_fs27.default.unlinkSync(file);
         } catch (err) {
           args.logger?.warn("attachment gc: unlink failed", { file, err: err.message });
         }
       }
       try {
-        if (import_node_fs26.default.readdirSync(hashDirAbs).length === 0) import_node_fs26.default.rmdirSync(hashDirAbs);
+        if (import_node_fs27.default.readdirSync(hashDirAbs).length === 0) import_node_fs27.default.rmdirSync(hashDirAbs);
       } catch {
       }
     }
     try {
-      if (import_node_fs26.default.readdirSync(attRoot).length === 0) import_node_fs26.default.rmdirSync(attRoot);
+      if (import_node_fs27.default.readdirSync(attRoot).length === 0) import_node_fs27.default.rmdirSync(attRoot);
     } catch {
     }
   }
 }
 
 // src/attachment/group.ts
-var import_node_fs27 = __toESM(require("fs"), 1);
+var import_node_fs28 = __toESM(require("fs"), 1);
 var import_node_path28 = __toESM(require("path"), 1);
 var import_node_crypto8 = __toESM(require("crypto"), 1);
 init_protocol();
@@ -51582,7 +51628,7 @@ var GroupFileStore = class {
   readFile(scope, sessionId) {
     const file = this.filePath(scope, sessionId);
     try {
-      const raw = import_node_fs27.default.readFileSync(file, "utf8");
+      const raw = import_node_fs28.default.readFileSync(file, "utf8");
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) {
         this.logger?.warn("GroupFileStore.readFile: not an array; resetting session entries", {
@@ -51608,10 +51654,10 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs27.default.mkdirSync(import_node_path28.default.dirname(file), { recursive: true });
+    import_node_fs28.default.mkdirSync(import_node_path28.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs27.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
-    import_node_fs27.default.renameSync(tmp, file);
+    import_node_fs28.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
+    import_node_fs28.default.renameSync(tmp, file);
   }
   /** 拉一份当前 session 的清单。读盘 → cache；之后调用复用 cache */
   list(scope, sessionId) {
@@ -51697,7 +51743,7 @@ var GroupFileStore = class {
 };
 
 // src/discovery/state-file.ts
-var import_node_fs28 = __toESM(require("fs"), 1);
+var import_node_fs29 = __toESM(require("fs"), 1);
 var import_node_path29 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
   return import_node_path29.default.join(dataDir, "state.json");
@@ -51722,7 +51768,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs28.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs29.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -51736,20 +51782,20 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs28.default.mkdirSync(import_node_path29.default.dirname(this.file), { recursive: true });
+    import_node_fs29.default.mkdirSync(import_node_path29.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs28.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs28.default.renameSync(tmp, this.file);
+    import_node_fs29.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs29.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs28.default.chmodSync(this.file, 384);
+        import_node_fs29.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs28.default.unlinkSync(this.file);
+      import_node_fs29.default.unlinkSync(this.file);
     } catch {
     }
   }
@@ -51764,13 +51810,13 @@ function readDaemonSourceFromEnv(env = process.env) {
 }
 
 // src/tunnel/tunnel-manager.ts
-var import_node_fs32 = __toESM(require("fs"), 1);
+var import_node_fs33 = __toESM(require("fs"), 1);
 var import_node_path33 = __toESM(require("path"), 1);
 var import_node_crypto9 = __toESM(require("crypto"), 1);
 var import_node_child_process9 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
-var import_node_fs29 = __toESM(require("fs"), 1);
+var import_node_fs30 = __toESM(require("fs"), 1);
 var import_node_path30 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
@@ -51779,7 +51825,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs29.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs30.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -51791,21 +51837,21 @@ var TunnelStore = class {
   }
   async set(v2) {
     const dir = import_node_path30.default.dirname(this.filePath);
-    await import_node_fs29.default.promises.mkdir(dir, { recursive: true });
+    await import_node_fs30.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs29.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs30.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs29.default.promises.chmod(tmp, 384);
+        await import_node_fs30.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs29.default.promises.rename(tmp, this.filePath);
+    await import_node_fs30.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs29.default.promises.unlink(this.filePath);
+      await import_node_fs30.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -51900,8 +51946,8 @@ function escape(v2) {
 }
 
 // src/tunnel/frpc-binary.ts
-var import_node_fs30 = __toESM(require("fs"), 1);
-var import_node_os13 = __toESM(require("os"), 1);
+var import_node_fs31 = __toESM(require("fs"), 1);
+var import_node_os12 = __toESM(require("os"), 1);
 var import_node_path31 = __toESM(require("path"), 1);
 var import_node_child_process7 = require("child_process");
 var import_node_stream3 = require("stream");
@@ -51934,7 +51980,7 @@ function frpcDownloadUrl(version2, p2) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs30.default.existsSync(opts.override)) {
+    if (!import_node_fs31.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
@@ -51942,10 +51988,10 @@ async function ensureFrpcBinary(opts) {
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
   const binDir = import_node_path31.default.join(opts.dataDir, "bin");
-  import_node_fs30.default.mkdirSync(binDir, { recursive: true });
+  import_node_fs31.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
   const stableBin = import_node_path31.default.join(binDir, "frpc");
-  if (import_node_fs30.default.existsSync(stableBin)) return stableBin;
+  if (import_node_fs31.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
   const tarballPath = import_node_path31.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
@@ -51956,8 +52002,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs30.default.chmodSync(partialBin, 493);
-    import_node_fs30.default.renameSync(partialBin, stableBin);
+    import_node_fs31.default.chmodSync(partialBin, 493);
+    import_node_fs31.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -51967,7 +52013,7 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs30.default.readdirSync(binDir);
+    entries = import_node_fs31.default.readdirSync(binDir);
   } catch {
     return;
   }
@@ -51975,7 +52021,7 @@ function cleanupStaleArtifacts(binDir) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
       const full = import_node_path31.default.join(binDir, name);
       try {
-        import_node_fs30.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs31.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -51983,7 +52029,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p2) {
   try {
-    import_node_fs30.default.unlinkSync(p2);
+    import_node_fs31.default.unlinkSync(p2);
   } catch {
   }
 }
@@ -51994,13 +52040,13 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs30.default.createWriteStream(dest);
+  const out = import_node_fs31.default.createWriteStream(dest);
   const nodeStream = import_node_stream3.Readable.fromWeb(res.body);
   await (0, import_promises4.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
   const work = import_node_path31.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs30.default.mkdirSync(work, { recursive: true });
+  import_node_fs31.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve6, reject) => {
       const proc = (0, import_node_child_process7.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
@@ -52009,17 +52055,17 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
     const src = import_node_path31.default.join(work, dirName, "frpc");
-    if (!import_node_fs30.default.existsSync(src)) {
+    if (!import_node_fs31.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs30.default.copyFileSync(src, destBin);
+    import_node_fs31.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs30.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs31.default.rmSync(work, { recursive: true, force: true });
   }
 }
 
 // src/tunnel/frpc-process.ts
-var import_node_fs31 = __toESM(require("fs"), 1);
+var import_node_fs32 = __toESM(require("fs"), 1);
 var import_node_path32 = __toESM(require("path"), 1);
 var import_node_child_process8 = require("child_process");
 function frpcPidFilePath(dataDir) {
@@ -52027,13 +52073,13 @@ function frpcPidFilePath(dataDir) {
 }
 function writeFrpcPid(dataDir, pid) {
   try {
-    import_node_fs31.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
+    import_node_fs32.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearFrpcPid(dataDir) {
   try {
-    import_node_fs31.default.unlinkSync(frpcPidFilePath(dataDir));
+    import_node_fs32.default.unlinkSync(frpcPidFilePath(dataDir));
   } catch {
   }
 }
@@ -52049,7 +52095,7 @@ function defaultIsPidAlive(pid) {
 }
 function defaultReadPidFile(file) {
   try {
-    return import_node_fs31.default.readFileSync(file, "utf8");
+    return import_node_fs32.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -52089,7 +52135,7 @@ async function killStaleFrpc(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs31.default.unlinkSync(pidFile);
+      import_node_fs32.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -52100,7 +52146,7 @@ async function killStaleFrpc(deps) {
   }
   await sleep2(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs31.default.unlinkSync(pidFile);
+    import_node_fs32.default.unlinkSync(pidFile);
   } catch {
   }
 }
@@ -52275,12 +52321,12 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs32.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      await import_node_fs33.default.promises.writeFile(tomlPath, toml, { mode: 384 });
       const proc = (this.deps.spawnImpl ?? import_node_child_process9.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
       const logFilePath = import_node_path33.default.join(this.deps.dataDir, "frpc.log");
-      const logStream = import_node_fs32.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logStream = import_node_fs33.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -52362,14 +52408,14 @@ async function waitForFrpcReady(proc, timeoutMs) {
 }
 
 // src/tunnel/device-key.ts
-var import_node_os14 = __toESM(require("os"), 1);
+var import_node_os13 = __toESM(require("os"), 1);
 var import_node_path34 = __toESM(require("path"), 1);
 var import_node_crypto10 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
-  const hostname = opts.hostname ?? import_node_os14.default.hostname();
-  const uid = opts.uid ?? (typeof import_node_os14.default.userInfo === "function" ? import_node_os14.default.userInfo().uid : 0);
-  const home = opts.home ?? import_node_os14.default.homedir();
+  const hostname = opts.hostname ?? import_node_os13.default.hostname();
+  const uid = opts.uid ?? (typeof import_node_os13.default.userInfo === "function" ? import_node_os13.default.userInfo().uid : 0);
+  const home = opts.home ?? import_node_os13.default.homedir();
   const defaultDataDir = import_node_path34.default.resolve(import_node_path34.default.join(home, ".clawd"));
   const normalizedDataDir = opts.dataDir ? import_node_path34.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
@@ -52378,7 +52424,7 @@ function deriveStableDeviceKey(opts = {}) {
 }
 
 // src/auth-store.ts
-var import_node_fs33 = __toESM(require("fs"), 1);
+var import_node_fs34 = __toESM(require("fs"), 1);
 var import_node_path35 = __toESM(require("path"), 1);
 var import_node_crypto11 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
@@ -52419,7 +52465,7 @@ function defaultGenerateOwnerPrincipalId() {
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs33.default.readFileSync(file, "utf8");
+    const raw = import_node_fs34.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -52439,25 +52485,25 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs33.default.mkdirSync(import_node_path35.default.dirname(file), { recursive: true });
-  import_node_fs33.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs34.default.mkdirSync(import_node_path35.default.dirname(file), { recursive: true });
+  import_node_fs34.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs33.default.chmodSync(file, 384);
+    import_node_fs34.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs34 = __toESM(require("fs"), 1);
-var import_node_os15 = __toESM(require("os"), 1);
+var import_node_fs35 = __toESM(require("fs"), 1);
+var import_node_os14 = __toESM(require("os"), 1);
 var import_node_path36 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function loadOwnerDisplayName(dataDir) {
-  const fallback = import_node_os15.default.userInfo().username;
+  const fallback = import_node_os14.default.userInfo().username;
   const profilePath = import_node_path36.default.join(dataDir, PROFILE_FILENAME);
   let raw;
   try {
-    raw = import_node_fs34.default.readFileSync(profilePath, "utf8");
+    raw = import_node_fs35.default.readFileSync(profilePath, "utf8");
   } catch {
     return fallback;
   }
@@ -52480,7 +52526,7 @@ function loadOwnerDisplayName(dataDir) {
 }
 
 // src/feishu-auth/owner-identity-store.ts
-var import_node_fs35 = __toESM(require("fs"), 1);
+var import_node_fs36 = __toESM(require("fs"), 1);
 var import_node_path37 = __toESM(require("path"), 1);
 var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
 var OwnerIdentityStore = class {
@@ -52491,7 +52537,7 @@ var OwnerIdentityStore = class {
   read() {
     let raw;
     try {
-      raw = import_node_fs35.default.readFileSync(this.file, "utf8");
+      raw = import_node_fs36.default.readFileSync(this.file, "utf8");
     } catch {
       return null;
     }
@@ -52519,16 +52565,16 @@ var OwnerIdentityStore = class {
     };
   }
   write(record) {
-    import_node_fs35.default.mkdirSync(import_node_path37.default.dirname(this.file), { recursive: true });
-    import_node_fs35.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
+    import_node_fs36.default.mkdirSync(import_node_path37.default.dirname(this.file), { recursive: true });
+    import_node_fs36.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
     try {
-      import_node_fs35.default.chmodSync(this.file, 384);
+      import_node_fs36.default.chmodSync(this.file, 384);
     } catch {
     }
   }
   clear() {
     try {
-      import_node_fs35.default.unlinkSync(this.file);
+      import_node_fs36.default.unlinkSync(this.file);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -52793,7 +52839,7 @@ function verifyConnectToken(args) {
 }
 
 // src/feishu-auth/server-key.ts
-var fs45 = __toESM(require("fs"), 1);
+var fs46 = __toESM(require("fs"), 1);
 var path46 = __toESM(require("path"), 1);
 var FILE_NAME2 = "server-signing-key.json";
 var ServerKeyStore = class {
@@ -52807,7 +52853,7 @@ var ServerKeyStore = class {
   /** 读缓存的公钥；无缓存 / 损坏 → null（调用方决定是否触发拉取） */
   read() {
     try {
-      const raw = fs45.readFileSync(this.filePath(), "utf8");
+      const raw = fs46.readFileSync(this.filePath(), "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.publicKeyPem === "string" && parsed.publicKeyPem.includes("PUBLIC KEY")) {
         return parsed.publicKeyPem;
@@ -52822,12 +52868,12 @@ var ServerKeyStore = class {
       publicKeyPem,
       fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    fs45.mkdirSync(this.dataDir, { recursive: true });
-    fs45.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
+    fs46.mkdirSync(this.dataDir, { recursive: true });
+    fs46.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
   }
   clear() {
     try {
-      fs45.unlinkSync(this.filePath());
+      fs46.unlinkSync(this.filePath());
     } catch {
     }
   }
@@ -52840,12 +52886,12 @@ init_protocol();
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs36 = __toESM(require("fs"), 1);
-var import_node_os16 = __toESM(require("os"), 1);
+var import_node_fs37 = __toESM(require("fs"), 1);
+var import_node_os15 = __toESM(require("os"), 1);
 var import_node_path38 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs36.default.readFileSync(file, "utf8");
+  const raw = import_node_fs37.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -52858,10 +52904,10 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path38.default.join(import_node_os16.default.homedir(), ".claude");
+  const baseDir = input.baseDir ?? import_node_path38.default.join(import_node_os15.default.homedir(), ".claude");
   const projectDir = import_node_path38.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
   const sourceFile = import_node_path38.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs36.default.existsSync(sourceFile)) {
+  if (!import_node_fs37.default.existsSync(sourceFile)) {
     throw new Error(`fork: source transcript not found: ${sourceFile}`);
   }
   const entries = readJsonlEntries(sourceFile);
@@ -52892,8 +52938,8 @@ function forkSession(input) {
     forkedLines.push(JSON.stringify(forked));
   }
   const forkedFilePath = import_node_path38.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs36.default.mkdirSync(projectDir, { recursive: true });
-  import_node_fs36.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  import_node_fs37.default.mkdirSync(projectDir, { recursive: true });
+  import_node_fs37.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
@@ -53414,7 +53460,7 @@ function buildHistoryHandlers(deps) {
 
 // src/handlers/workspace.ts
 var path50 = __toESM(require("path"), 1);
-var os16 = __toESM(require("os"), 1);
+var os15 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
 function buildEnabledPluginNames(personaManager, personaId) {
@@ -53454,7 +53500,7 @@ function buildWorkspaceHandlers(deps) {
   const list = async (frame, _client, ctx) => {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
-    const fallbackCwd = isGuest && personaRoot ? personaRoot : os16.homedir();
+    const fallbackCwd = isGuest && personaRoot ? personaRoot : os15.homedir();
     const resolvedCwd = path50.resolve(args.cwd ?? fallbackCwd);
     const target = args.path ? path50.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list", usersRoot);
@@ -53510,14 +53556,14 @@ init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process10 = require("child_process");
-var import_node_fs37 = __toESM(require("fs"), 1);
+var import_node_fs38 = __toESM(require("fs"), 1);
 var import_node_path39 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process10.execFile);
 function normalizePath(p2) {
   const resolved = import_node_path39.default.resolve(p2);
   try {
-    return import_node_fs37.default.realpathSync(resolved);
+    return import_node_fs38.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -53713,7 +53759,8 @@ function buildInboxHandlers(deps) {
       senderDeviceId: ctx.principal.id,
       text: args.text,
       id: args.id,
-      createdAt: args.createdAt
+      createdAt: args.createdAt,
+      origin: args.origin
     });
     return {
       response: { type: "inbox:postMessage:ok", message }
@@ -53752,8 +53799,66 @@ function buildInboxHandlers(deps) {
       }
     };
   };
+  const sendDm = async (frame) => {
+    const { type: _t, requestId: _r, ...rest } = frame;
+    const sessionId = typeof rest.sessionId === "string" ? rest.sessionId : void 0;
+    const args = InboxSendDmArgsSchema.parse(rest);
+    const d = deps.sendDmDeps;
+    if (!d) throw new ClawdError(ERROR_CODES.INTERNAL, "inbox:sendDm not wired");
+    if (!sessionId) {
+      throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "inbox:sendDm requires sessionId");
+    }
+    const scope = d.getSessionScope(sessionId);
+    if (!scope || scope.kind !== "persona") {
+      throw new ClawdError(ERROR_CODES.UNAUTHORIZED, "inbox:sendDm requires a persona session");
+    }
+    const origin = { kind: "persona", personaId: scope.personaId };
+    const id = d.genId();
+    const createdAt = d.now();
+    if (scope.mode === "guest") {
+      if (args.peerDeviceId && args.peerDeviceId !== d.ownerPrincipalId) {
+        throw new ClawdError(ERROR_CODES.UNAUTHORIZED, "guest-driven persona may only DM the owner");
+      }
+      const message2 = manager.postMessage({
+        peerDeviceId: scope.capId,
+        senderDeviceId: scope.capId,
+        text: args.text,
+        id,
+        createdAt,
+        origin
+      });
+      return { response: { type: "inbox:sendDm:ok", message: message2 } };
+    }
+    if (!args.peerDeviceId) {
+      throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "owner-driven sendDm requires peerDeviceId");
+    }
+    const contact = d.getContact(args.peerDeviceId);
+    if (!contact) {
+      throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, `unknown contact: ${args.peerDeviceId}`);
+    }
+    const fwd = await d.forwardInboxPostToPeer({
+      contact: { remoteUrl: contact.remoteUrl, connectToken: contact.connectToken },
+      id,
+      text: args.text,
+      createdAt,
+      origin
+    });
+    if (!fwd.ok) {
+      throw new ClawdError(ERROR_CODES.INTERNAL, `deliver to peer failed: ${fwd.error ?? "unknown"}`);
+    }
+    const message = manager.postMessage({
+      peerDeviceId: args.peerDeviceId,
+      senderDeviceId: d.ownerPrincipalId,
+      text: args.text,
+      id,
+      createdAt,
+      origin
+    });
+    return { response: { type: "inbox:sendDm:ok", message } };
+  };
   return {
     "inbox:postMessage": postMessage,
+    "inbox:sendDm": sendDm,
     "inbox:list": list,
     "inbox:markRead": markRead
   };
@@ -53980,7 +54085,7 @@ function buildDeviceHandlers(deps) {
 }
 
 // src/handlers/meta.ts
-var import_node_os17 = __toESM(require("os"), 1);
+var import_node_os16 = __toESM(require("os"), 1);
 init_protocol();
 
 // src/version.ts
@@ -54012,7 +54117,7 @@ function buildReadyFrame(deps, client) {
   return {
     version,
     protocolVersion: PROTOCOL_VERSION,
-    hostname: import_node_os17.default.hostname(),
+    hostname: import_node_os16.default.hostname(),
     os: process.platform,
     tools,
     runningSessions: info.runningSessions,
@@ -54382,15 +54487,15 @@ function computePublishCheck(args) {
 // src/extension/install-flow.ts
 var import_promises6 = __toESM(require("fs/promises"), 1);
 var import_node_path43 = __toESM(require("path"), 1);
-var import_node_os19 = __toESM(require("os"), 1);
+var import_node_os18 = __toESM(require("os"), 1);
 var import_node_crypto14 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
-var import_node_os18 = __toESM(require("os"), 1);
+var import_node_os17 = __toESM(require("os"), 1);
 var import_node_path42 = __toESM(require("path"), 1);
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path42.default.join(import_node_os18.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path42.default.join(import_node_os17.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
   return import_node_path42.default.join(clawdHomeRoot(override), "extensions");
@@ -54472,7 +54577,7 @@ async function installFromChannel(args, deps) {
     );
   }
   const stage = await import_promises6.default.mkdtemp(
-    import_node_path43.default.join(import_node_os19.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+    import_node_path43.default.join(import_node_os18.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
@@ -54503,7 +54608,7 @@ async function installFromChannel(args, deps) {
 // src/extension/update-flow.ts
 var import_promises7 = __toESM(require("fs/promises"), 1);
 var import_node_path44 = __toESM(require("path"), 1);
-var import_node_os20 = __toESM(require("os"), 1);
+var import_node_os19 = __toESM(require("os"), 1);
 var import_node_crypto15 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
 var UpdateError = class extends Error {
@@ -54591,7 +54696,7 @@ async function updateFromChannel(args, deps) {
   await import_promises7.default.rm(prevDir, { recursive: true, force: true });
   await import_promises7.default.rename(liveDir, prevDir);
   const stage = await import_promises7.default.mkdtemp(
-    import_node_path44.default.join(import_node_os20.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+    import_node_path44.default.join(import_node_os19.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
@@ -54973,7 +55078,7 @@ function buildExtensionHandlers(deps) {
 }
 
 // src/app-builder/project-store.ts
-var import_node_fs38 = require("fs");
+var import_node_fs39 = require("fs");
 var import_node_child_process11 = require("child_process");
 var import_node_path46 = require("path");
 init_protocol();
@@ -55001,7 +55106,7 @@ var ProjectStore = class {
   async list() {
     let entries;
     try {
-      entries = await import_node_fs38.promises.readdir(this.projectsRoot());
+      entries = await import_node_fs39.promises.readdir(this.projectsRoot());
     } catch (err) {
       if (err.code === "ENOENT") return [];
       throw err;
@@ -55009,7 +55114,7 @@ var ProjectStore = class {
     const out = [];
     for (const name of entries) {
       try {
-        const raw = await import_node_fs38.promises.readFile(this.metaPath(name), "utf8");
+        const raw = await import_node_fs39.promises.readFile(this.metaPath(name), "utf8");
         const json = JSON.parse(raw);
         let migrated = false;
         if (typeof json.devCommand !== "string" || json.devCommand.length === 0) {
@@ -55020,7 +55125,7 @@ var ProjectStore = class {
         if (parsed.success) {
           out.push(parsed.data);
           if (migrated) {
-            void import_node_fs38.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
+            void import_node_fs39.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
             });
           }
         }
@@ -55064,8 +55169,8 @@ var ProjectStore = class {
       throw new Error(`invalid name "${name}": ${validated.error.message}`);
     }
     const dir = this.projectDir(name);
-    await import_node_fs38.promises.mkdir(dir, { recursive: true });
-    await import_node_fs38.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
+    await import_node_fs39.promises.mkdir(dir, { recursive: true });
+    await import_node_fs39.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
     return meta;
   }
   /**
@@ -55108,7 +55213,7 @@ var ProjectStore = class {
   }
   async delete(name) {
     const dir = this.projectDir(name);
-    await import_node_fs38.promises.rm(dir, { recursive: true, force: true });
+    await import_node_fs39.promises.rm(dir, { recursive: true, force: true });
   }
   async updatePort(name, newPort) {
     if (newPort < PROJECT_PORT_MIN || newPort > PROJECT_PORT_MAX) {
@@ -55124,7 +55229,7 @@ var ProjectStore = class {
       throw new Error(`port ${newPort} already used / \u5DF2\u88AB project "${conflict.name}" \u5360\u7528`);
     }
     const updated = { ...target, port: newPort };
-    await import_node_fs38.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
+    await import_node_fs39.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
     return updated;
   }
   /**
@@ -55141,7 +55246,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`invalid prodUrl "${url}": ${validated.error.message}`);
     }
-    await import_node_fs38.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs39.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
   /**
@@ -55162,7 +55267,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`invalid publishJob: ${validated.error.message}`);
     }
-    await import_node_fs38.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs39.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
   /** 清掉 .clawd-project.json.publishJob 字段。其他字段保持原样。 */
@@ -55177,7 +55282,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`failed to clear publishJob: ${validated.error.message}`);
     }
-    await import_node_fs38.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs39.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
 };
@@ -55298,7 +55403,7 @@ var PublishJobRegistry = class {
 
 // src/app-builder/publish-job-runner.ts
 var import_node_child_process13 = require("child_process");
-var import_node_fs39 = require("fs");
+var import_node_fs40 = require("fs");
 var import_node_path47 = require("path");
 
 // src/app-builder/publish-stage-parser.ts
@@ -55334,7 +55439,7 @@ async function startPublishJob(deps, args) {
   const logPath = (0, import_node_path47.join)(projDir, ".publish.log");
   let logStream = null;
   try {
-    logStream = (0, import_node_fs39.createWriteStream)(logPath, { flags: "w" });
+    logStream = (0, import_node_fs40.createWriteStream)(logPath, { flags: "w" });
   } catch {
     logStream = null;
   }
@@ -55592,7 +55697,7 @@ async function recoverInterruptedJobs(deps) {
 // src/handlers/app-builder.ts
 init_protocol();
 var import_node_path48 = require("path");
-var import_node_fs40 = require("fs");
+var import_node_fs41 = require("fs");
 var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
 var DEV_SERVER_READY_TIMEOUT_MS = 3e4;
 async function recoverInterruptedPublishJobs(store, logger) {
@@ -55673,7 +55778,7 @@ function buildAppBuilderHandlers(deps) {
   async function listAllUsersProjects() {
     if (!deps.usersRoot || !deps.getStore) return [];
     const getStore = deps.getStore;
-    const userIds = await import_node_fs40.promises.readdir(deps.usersRoot).catch(() => []);
+    const userIds = await import_node_fs41.promises.readdir(deps.usersRoot).catch(() => []);
     const perUser = await Promise.all(
       userIds.map((uid) => getStore(uid).list().catch(() => []))
     );
@@ -56224,6 +56329,7 @@ async function uninstall(deps) {
 }
 
 // src/handlers/index.ts
+var import_node_crypto17 = require("crypto");
 function buildMethodHandlers(deps) {
   return {
     ...buildSessionHandlers({
@@ -56248,7 +56354,18 @@ function buildMethodHandlers(deps) {
       manager: deps.capabilityManager
     }),
     ...buildInboxHandlers({
-      manager: deps.inboxManager
+      manager: deps.inboxManager,
+      sendDmDeps: {
+        ownerPrincipalId: deps.ownerPrincipalId,
+        getSessionScope: deps.getSessionScope,
+        getContact: (deviceId) => {
+          const c = deps.contactStore.get(deviceId);
+          return c ? { deviceId: c.deviceId, remoteUrl: c.remoteUrl, connectToken: c.connectToken } : null;
+        },
+        genId: () => (0, import_node_crypto17.randomUUID)(),
+        now: () => Date.now(),
+        forwardInboxPostToPeer
+      }
     }),
     ...buildContactHandlers({
       store: deps.contactStore,
@@ -57136,7 +57253,7 @@ async function startDaemon(config) {
     },
     source: "daemon",
     sampling: logShippingCfg.sampling,
-    homeDir: import_node_os21.default.homedir()
+    homeDir: import_node_os20.default.homedir()
   });
   const logger = createLogger({
     level: config.logLevel,
@@ -57308,7 +57425,7 @@ async function startDaemon(config) {
     import_node_path54.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
-  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs41.default.existsSync(p2));
+  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs42.default.existsSync(p2));
   let dispatchMcpConfigPath2;
   if (dispatchServerScriptPath) {
     const dispatchLogPath = import_node_path54.default.join(config.dataDir, "dispatch-mcp-server.log");
@@ -57331,7 +57448,7 @@ async function startDaemon(config) {
     import_node_path54.default.join(here, "ticket", "mcp-server.cjs"),
     import_node_path54.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
-  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs41.default.existsSync(p2));
+  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs42.default.existsSync(p2));
   const ticketOwnerUnionId = feishuIdentity?.identity.unionId ?? "";
   const ticketOwnerName = feishuIdentity?.identity.displayName ?? "";
   let ticketMcpConfigPath2;
@@ -57360,7 +57477,7 @@ async function startDaemon(config) {
     import_node_path54.default.join(here, "shift", "mcp-server.cjs"),
     import_node_path54.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
-  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs41.default.existsSync(p2));
+  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs42.default.existsSync(p2));
   let shiftMcpConfigPath2;
   if (shiftServerScriptPath) {
     const shiftLogPath = import_node_path54.default.join(config.dataDir, "shift-mcp-server.log");
@@ -57380,6 +57497,27 @@ async function startDaemon(config) {
       { tried: shiftServerCandidates }
     );
   }
+  const inboxServerCandidates = [
+    import_node_path54.default.join(here, "inbox", "mcp-server.cjs"),
+    import_node_path54.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
+  ];
+  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs42.default.existsSync(p2));
+  let inboxMcpConfigPath2;
+  if (inboxServerScriptPath) {
+    inboxMcpConfigPath2 = await writeInboxMcpConfig({
+      dataDir: config.dataDir,
+      serverScriptPath: inboxServerScriptPath
+    });
+    logger.info("inbox.mcp.json written", {
+      path: inboxMcpConfigPath2,
+      server: inboxServerScriptPath
+    });
+  } else {
+    logger.warn(
+      "inbox-mcp-server.cjs not found; sendDm MCP tool disabled (dev tsx \u6A21\u5F0F\u4E0B\u9700\u5148\u8DD1\u8FC7 build)",
+      { tried: inboxServerCandidates }
+    );
+  }
   const shiftStore = createShiftStore({
     filePath: import_node_path54.default.join(config.dataDir, "shift.json"),
     ownerIdProvider: () => ownerPrincipalId,
@@ -57421,6 +57559,8 @@ async function startDaemon(config) {
     // shift v1：所有 persona session 都挂 shift.mcp.json（不做 persona gating）。
     // 缺省 = shift-mcp-server.cjs 没 build 出来，cc 看不到 shift tool 但 scheduler 仍跑。
     shiftMcpConfigPath: shiftMcpConfigPath2,
+    // sendDm MCP tool：所有 persona session 都挂 inbox.mcp.json（无 gating）。
+    inboxMcpConfigPath: inboxMcpConfigPath2,
     broadcastFrame: (frame, target) => {
       if (target === "all") {
         transport?.broadcastAll(frame);
@@ -57443,7 +57583,7 @@ async function startDaemon(config) {
         const absPath = import_node_path54.default.isAbsolute(input.relPath) ? input.relPath : import_node_path54.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs41.default.statSync(absPath).size;
+          size = import_node_fs42.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -57665,6 +57805,8 @@ async function startDaemon(config) {
     inboxStore,
     // 联系人列表 store（device:connect / 自动反向落同一 store）
     contactStore,
+    // inbox:sendDm 用：sessionId → session 出身（复用 attachment 同款 findOwnedSessionScope）
+    getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
     // contact:removed broadcast；复用 capability:tokenIssued 同款通路
     broadcastToOwners: (frame) => wsServer?.broadcastToOwners(frame),
     // extension runtime (v1: local-mode only). Instance owned by daemon top
@@ -57800,7 +57942,7 @@ async function startDaemon(config) {
       let sourceJsonlPath = "(no transcript yet \u2014 operate from the task description alone)";
       if (sourceFile && sourceFile.toolSessionId) {
         sourceJsonlPath = import_node_path54.default.join(
-          import_node_os21.default.homedir(),
+          import_node_os20.default.homedir(),
           ".claude",
           "projects",
           cwdToHashDir(sourceFile.cwd),
@@ -58114,7 +58256,7 @@ ${bar}
 `);
       try {
         const connectPath = import_node_path54.default.join(config.dataDir, "connect.txt");
-        import_node_fs41.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        import_node_fs42.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -58188,7 +58330,7 @@ ${bar}
 function migrateDropPersonsDir(dataDir) {
   const dir = import_node_path54.default.join(dataDir, "persons");
   try {
-    import_node_fs41.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs42.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }