@clawos-dev/clawd 0.2.227 → 0.2.229

package/dist/dispatch/mcp-server.cjs

@@ -3227,8 +3227,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path) {
-      let input = path;
+    function removeDotSegments(path2) {
+      let input = path2;
       const output = [];
       let nextSlash = -1;
       let len = 0;
@@ -3480,8 +3480,8 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path && path !== "/" ? path : void 0;
+        const [path2, query] = wsComponent.resourceName.split("?");
+        wsComponent.path = path2 && path2 !== "/" ? path2 : void 0;
         wsComponent.query = query;
         wsComponent.resourceName = void 0;
       }
@@ -6874,12 +6874,12 @@ var require_dist = __commonJS({
         throw new Error(`Unknown format "${name}"`);
       return f;
     };
-    function addFormats(ajv, list, fs2, exportName) {
+    function addFormats(ajv, list, fs4, exportName) {
       var _a;
       var _b;
       (_a = (_b = ajv.opts.code).formats) !== null && _a !== void 0 ? _a : _b.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f of list)
-        ajv.addFormat(f, fs2[f]);
+        ajv.addFormat(f, fs4[f]);
     }
     module2.exports = exports2 = formatsPlugin;
     Object.defineProperty(exports2, "__esModule", { value: true });
@@ -7690,14 +7690,14 @@ var require_util2 = __commonJS({
         }
         const port = url.port != null ? url.port : url.protocol === "https:" ? 443 : 80;
         let origin = url.origin != null ? url.origin : `${url.protocol || ""}//${url.hostname || ""}:${port}`;
-        let path = url.path != null ? url.path : `${url.pathname || ""}${url.search || ""}`;
+        let path2 = url.path != null ? url.path : `${url.pathname || ""}${url.search || ""}`;
         if (origin[origin.length - 1] === "/") {
           origin = origin.slice(0, origin.length - 1);
         }
-        if (path && path[0] !== "/") {
-          path = `/${path}`;
+        if (path2 && path2[0] !== "/") {
+          path2 = `/${path2}`;
         }
-        return new URL(`${origin}${path}`);
+        return new URL(`${origin}${path2}`);
       }
       if (!isHttpOrHttpsPrefixed(url.origin || url.protocol)) {
         throw new InvalidArgumentError("Invalid URL protocol: the URL must start with `http:` or `https:`.");
@@ -8148,39 +8148,39 @@ var require_diagnostics = __commonJS({
       });
       diagnosticsChannel.channel("undici:client:sendHeaders").subscribe((evt) => {
         const {
-          request: { method, path, origin }
+          request: { method, path: path2, origin }
         } = evt;
-        debuglog("sending request to %s %s/%s", method, origin, path);
+        debuglog("sending request to %s %s/%s", method, origin, path2);
       });
       diagnosticsChannel.channel("undici:request:headers").subscribe((evt) => {
         const {
-          request: { method, path, origin },
+          request: { method, path: path2, origin },
           response: { statusCode }
         } = evt;
         debuglog(
           "received response to %s %s/%s - HTTP %d",
           method,
           origin,
-          path,
+          path2,
           statusCode
         );
       });
       diagnosticsChannel.channel("undici:request:trailers").subscribe((evt) => {
         const {
-          request: { method, path, origin }
+          request: { method, path: path2, origin }
         } = evt;
-        debuglog("trailers received from %s %s/%s", method, origin, path);
+        debuglog("trailers received from %s %s/%s", method, origin, path2);
       });
       diagnosticsChannel.channel("undici:request:error").subscribe((evt) => {
         const {
-          request: { method, path, origin },
+          request: { method, path: path2, origin },
           error: error2
         } = evt;
         debuglog(
           "request to %s %s/%s errored - %s",
           method,
           origin,
-          path,
+          path2,
           error2.message
         );
       });
@@ -8229,9 +8229,9 @@ var require_diagnostics = __commonJS({
         });
         diagnosticsChannel.channel("undici:client:sendHeaders").subscribe((evt) => {
           const {
-            request: { method, path, origin }
+            request: { method, path: path2, origin }
           } = evt;
-          debuglog("sending request to %s %s/%s", method, origin, path);
+          debuglog("sending request to %s %s/%s", method, origin, path2);
         });
       }
       diagnosticsChannel.channel("undici:websocket:open").subscribe((evt) => {
@@ -8294,7 +8294,7 @@ var require_request = __commonJS({
     var kHandler = /* @__PURE__ */ Symbol("handler");
     var Request = class {
       constructor(origin, {
-        path,
+        path: path2,
         method,
         body,
         headers,
@@ -8309,11 +8309,11 @@ var require_request = __commonJS({
         expectContinue,
         servername
       }, handler) {
-        if (typeof path !== "string") {
+        if (typeof path2 !== "string") {
           throw new InvalidArgumentError("path must be a string");
-        } else if (path[0] !== "/" && !(path.startsWith("http://") || path.startsWith("https://")) && method !== "CONNECT") {
+        } else if (path2[0] !== "/" && !(path2.startsWith("http://") || path2.startsWith("https://")) && method !== "CONNECT") {
           throw new InvalidArgumentError("path must be an absolute URL or start with a slash");
-        } else if (invalidPathRegex.test(path)) {
+        } else if (invalidPathRegex.test(path2)) {
           throw new InvalidArgumentError("invalid request path");
         }
         if (typeof method !== "string") {
@@ -8379,7 +8379,7 @@ var require_request = __commonJS({
         this.completed = false;
         this.aborted = false;
         this.upgrade = upgrade || null;
-        this.path = query ? buildURL(path, query) : path;
+        this.path = query ? buildURL(path2, query) : path2;
         this.origin = origin;
         this.idempotent = idempotent == null ? method === "HEAD" || method === "GET" : idempotent;
         this.blocking = blocking == null ? false : blocking;
@@ -12943,7 +12943,7 @@ var require_client_h1 = __commonJS({
       return method !== "GET" && method !== "HEAD" && method !== "OPTIONS" && method !== "TRACE" && method !== "CONNECT";
     }
     function writeH1(client, request) {
-      const { method, path, host, upgrade, blocking, reset } = request;
+      const { method, path: path2, host, upgrade, blocking, reset } = request;
       let { body, headers, contentLength } = request;
       const expectsPayload = method === "PUT" || method === "POST" || method === "PATCH" || method === "QUERY" || method === "PROPFIND" || method === "PROPPATCH";
       if (util2.isFormDataLike(body)) {
@@ -13009,7 +13009,7 @@ var require_client_h1 = __commonJS({
       if (blocking) {
         socket[kBlocking] = true;
       }
-      let header = `${method} ${path} HTTP/1.1\r
+      let header = `${method} ${path2} HTTP/1.1\r
 `;
       if (typeof host === "string") {
         header += `host: ${host}\r
@@ -13535,7 +13535,7 @@ var require_client_h2 = __commonJS({
     }
     function writeH2(client, request) {
       const session = client[kHTTP2Session];
-      const { method, path, host, upgrade, expectContinue, signal, headers: reqHeaders } = request;
+      const { method, path: path2, host, upgrade, expectContinue, signal, headers: reqHeaders } = request;
       let { body } = request;
       if (upgrade) {
         util2.errorRequest(client, request, new Error("Upgrade not supported for H2"));
@@ -13602,7 +13602,7 @@ var require_client_h2 = __commonJS({
         });
         return true;
       }
-      headers[HTTP2_HEADER_PATH] = path;
+      headers[HTTP2_HEADER_PATH] = path2;
       headers[HTTP2_HEADER_SCHEME] = "https";
       const expectsPayload = method === "PUT" || method === "POST" || method === "PATCH";
       if (body && typeof body.read === "function") {
@@ -13955,9 +13955,9 @@ var require_redirect_handler = __commonJS({
           return this.handler.onHeaders(statusCode, headers, resume, statusText);
         }
         const { origin, pathname, search } = util2.parseURL(new URL(this.location, this.opts.origin && new URL(this.opts.path, this.opts.origin)));
-        const path = search ? `${pathname}${search}` : pathname;
+        const path2 = search ? `${pathname}${search}` : pathname;
         this.opts.headers = cleanRequestHeaders(this.opts.headers, statusCode === 303, this.opts.origin !== origin);
-        this.opts.path = path;
+        this.opts.path = path2;
         this.opts.origin = origin;
         this.opts.maxRedirections = 0;
         this.opts.query = null;
@@ -15193,10 +15193,10 @@ var require_proxy_agent = __commonJS({
         };
         const {
           origin,
-          path = "/",
+          path: path2 = "/",
           headers = {}
         } = opts;
-        opts.path = origin + path;
+        opts.path = origin + path2;
         if (!("host" in headers) && !("Host" in headers)) {
           const { host } = new URL2(origin);
           headers.host = host;
@@ -17119,20 +17119,20 @@ var require_mock_utils = __commonJS({
       }
       return true;
     }
-    function safeUrl(path) {
-      if (typeof path !== "string") {
-        return path;
+    function safeUrl(path2) {
+      if (typeof path2 !== "string") {
+        return path2;
       }
-      const pathSegments = path.split("?");
+      const pathSegments = path2.split("?");
       if (pathSegments.length !== 2) {
-        return path;
+        return path2;
       }
       const qp = new URLSearchParams(pathSegments.pop());
       qp.sort();
       return [...pathSegments, qp.toString()].join("?");
     }
-    function matchKey(mockDispatch2, { path, method, body, headers }) {
-      const pathMatch = matchValue(mockDispatch2.path, path);
+    function matchKey(mockDispatch2, { path: path2, method, body, headers }) {
+      const pathMatch = matchValue(mockDispatch2.path, path2);
       const methodMatch = matchValue(mockDispatch2.method, method);
       const bodyMatch = typeof mockDispatch2.body !== "undefined" ? matchValue(mockDispatch2.body, body) : true;
       const headersMatch = matchHeaders(mockDispatch2, headers);
@@ -17154,7 +17154,7 @@ var require_mock_utils = __commonJS({
     function getMockDispatch(mockDispatches, key) {
       const basePath = key.query ? buildURL(key.path, key.query) : key.path;
       const resolvedPath = typeof basePath === "string" ? safeUrl(basePath) : basePath;
-      let matchedMockDispatches = mockDispatches.filter(({ consumed }) => !consumed).filter(({ path }) => matchValue(safeUrl(path), resolvedPath));
+      let matchedMockDispatches = mockDispatches.filter(({ consumed }) => !consumed).filter(({ path: path2 }) => matchValue(safeUrl(path2), resolvedPath));
       if (matchedMockDispatches.length === 0) {
         throw new MockNotMatchedError(`Mock dispatch not matched for path '${resolvedPath}'`);
       }
@@ -17192,9 +17192,9 @@ var require_mock_utils = __commonJS({
       }
     }
     function buildKey(opts) {
-      const { path, method, body, headers, query } = opts;
+      const { path: path2, method, body, headers, query } = opts;
       return {
-        path,
+        path: path2,
         method,
         body,
         headers,
@@ -17657,10 +17657,10 @@ var require_pending_interceptors_formatter = __commonJS({
       }
       format(pendingInterceptors) {
         const withPrettyHeaders = pendingInterceptors.map(
-          ({ method, path, data: { statusCode }, persist, times, timesInvoked, origin }) => ({
+          ({ method, path: path2, data: { statusCode }, persist, times, timesInvoked, origin }) => ({
             Method: method,
             Origin: origin,
-            Path: path,
+            Path: path2,
             "Status code": statusCode,
             Persistent: persist ? PERSISTENT : NOT_PERSISTENT,
             Invocations: timesInvoked,
@@ -22541,9 +22541,9 @@ var require_util7 = __commonJS({
         }
       }
     }
-    function validateCookiePath(path) {
-      for (let i = 0; i < path.length; ++i) {
-        const code = path.charCodeAt(i);
+    function validateCookiePath(path2) {
+      for (let i = 0; i < path2.length; ++i) {
+        const code = path2.charCodeAt(i);
         if (code < 32 || // exclude CTLs (0-31)
         code === 127 || // DEL
         code === 59) {
@@ -25220,11 +25220,11 @@ var require_undici = __commonJS({
           if (typeof opts.path !== "string") {
             throw new InvalidArgumentError("invalid opts.path");
           }
-          let path = opts.path;
+          let path2 = opts.path;
           if (!opts.path.startsWith("/")) {
-            path = `/${path}`;
+            path2 = `/${path2}`;
           }
-          url = new URL(util2.parseOrigin(url).origin + path);
+          url = new URL(util2.parseOrigin(url).origin + path2);
         } else {
           if (!opts) {
             opts = typeof url === "object" ? url : {};
@@ -25304,7 +25304,7 @@ __export(mcp_server_exports, {
   handlePersonaDispatchToolCall: () => handlePersonaDispatchToolCall
 });
 module.exports = __toCommonJS(mcp_server_exports);
-var import_node_fs = __toESM(require("fs"), 1);
+var import_node_fs3 = __toESM(require("fs"), 1);
 
 // ../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
 var external_exports = {};
@@ -25784,8 +25784,8 @@ function getErrorMap() {
 
 // ../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path, errorMaps, issueData } = params;
-  const fullPath = [...path, ...issueData.path || []];
+  const { data, path: path2, errorMaps, issueData } = params;
+  const fullPath = [...path2, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -25901,11 +25901,11 @@ var errorUtil;
 
 // ../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path, key) {
+  constructor(parent, value, path2, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path;
+    this._path = path2;
     this._key = key;
   }
   get path() {
@@ -29542,10 +29542,10 @@ function assignProp(target, prop, value) {
     configurable: true
   });
 }
-function getElementAtPath(obj, path) {
-  if (!path)
+function getElementAtPath(obj, path2) {
+  if (!path2)
     return obj;
-  return path.reduce((acc, key) => acc?.[key], obj);
+  return path2.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -29865,11 +29865,11 @@ function aborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path, issues) {
+function prefixIssues(path2, issues) {
   return issues.map((iss) => {
     var _a;
     (_a = iss).path ?? (_a.path = []);
-    iss.path.unshift(path);
+    iss.path.unshift(path2);
     return iss;
   });
 }
@@ -39520,6 +39520,2210 @@ var StdioServerTransport = class {
 
 // src/dispatch/mcp-server.ts
 var import_undici = __toESM(require_undici(), 1);
+
+// src/tools/claude.ts
+var import_node_child_process = require("child_process");
+var import_node_child_process2 = require("child_process");
+var import_node_fs2 = __toESM(require("fs"), 1);
+
+// ../protocol/src/events.ts
+var SESSION_STATUS_VALUES = [
+  "idle",
+  "running",
+  "running-idle",
+  "stopped",
+  "error",
+  "observing"
+];
+var HISTORY_USER_META_VALUES = [
+  "task-notification",
+  "slash-command",
+  "local-command",
+  "system-reminder",
+  "skill-hint",
+  "meta-text",
+  "attachment-skills",
+  "attachment-deferred-tools"
+];
+var SKILL_SOURCE_VALUES = ["builtin", "global", "project", "plugin"];
+var AGENT_SOURCE_VALUES = [
+  "builtin",
+  "global",
+  "project",
+  "policy",
+  "plugin"
+];
+
+// ../protocol/src/attachment-schemas.ts
+var TOKEN_ROLES = ["owner"];
+var GROUP_FILE_SOURCES = ["agent", "owner", "user-upload"];
+var GroupFileEntrySchema = external_exports.object({
+  /** daemon 派发的稳定 id（用于 RPC remove / UI key） */
+  id: external_exports.string().min(1),
+  /** 相对 personaDir / sessionCwd 的路径 */
+  relPath: external_exports.string().min(1),
+  from: external_exports.enum(GROUP_FILE_SOURCES),
+  /** owner 手动加入时的可选备注 */
+  label: external_exports.string().optional(),
+  /** 文件字节数（stat 时拍） */
+  size: external_exports.number().int().nonnegative(),
+  mime: external_exports.string().min(1),
+  /** 加入清单时间戳（ms） */
+  addedAt: external_exports.number().int().nonnegative(),
+  /** 最近一次 agent Write/Edit 时间戳（agent 反复改同 path 时更新） */
+  lastEditedAt: external_exports.number().int().nonnegative().optional(),
+  /** agent rm / 文件不见了时打标；UI 灰显，不能再 share */
+  stale: external_exports.boolean().optional()
+});
+var AttachmentSignUrlArgs = external_exports.object({
+  /** 群文件所属的 session */
+  sessionId: external_exports.string().min(1),
+  /** 相对 session.cwd 的路径；允许传绝对路径，daemon 端会归一化（必须在 cwd 内） */
+  relPath: external_exports.string().min(1),
+  /** TTL 秒数；缺省 24h；null 走永久 URL（不带 exp 字段） */
+  ttlSeconds: external_exports.number().int().positive().nullable().optional(),
+  /** 视图模式：缺省 'raw' 返 /files/... 裸文件 URL；'md-rendered' 返
+   *  /share/md/... viewer URL（同一签名，daemon 端换前缀），外人浏览器打开就是
+   *  drawer 同款 ReactMarkdown 渲染。FilesDrawer 等不关心渲染的 caller 不传。 */
+  view: external_exports.enum(["raw", "md-rendered"]).optional()
+});
+var AttachmentSignUrlResponseSchema = external_exports.object({
+  /** 完整 URL（含 httpBaseUrl 前缀），UI 直接 window.open / 复制到剪贴板 */
+  url: external_exports.string().min(1),
+  /** 失效时间戳（ms）；null = 永久 */
+  expiresAt: external_exports.number().int().nonnegative().nullable()
+});
+var AttachmentGroupAddArgs = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  relPath: external_exports.string().min(1),
+  /** owner 手动加入时可选备注；agent 自动入清单不走此 RPC */
+  label: external_exports.string().optional()
+});
+var AttachmentGroupAddResponseSchema = external_exports.object({
+  entry: GroupFileEntrySchema
+});
+var AttachmentGroupRemoveArgs = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  relPath: external_exports.string().min(1)
+});
+var AttachmentGroupRemoveResponseSchema = external_exports.object({
+  removed: external_exports.literal(true)
+});
+var AttachmentGroupListArgs = external_exports.object({
+  sessionId: external_exports.string().min(1)
+});
+var AttachmentGroupListResponseSchema = external_exports.object({
+  entries: external_exports.array(GroupFileEntrySchema)
+});
+var AttachmentUploadResponseSchema = external_exports.object({
+  /** sha256(bytes) 前 16 位，前端持有的稳定 ref */
+  attachmentId: external_exports.string().min(1),
+  /** 完整 tunnel signed URL，前端拼 marker / 直接送 Anthropic 都用它 */
+  url: external_exports.string().min(1),
+  /** 落在 session 目录下的相对路径（后续 group RPC / drawer 展示用） */
+  relPath: external_exports.string().min(1),
+  sizeBytes: external_exports.number().int().nonnegative(),
+  mimeType: external_exports.string().min(1)
+});
+
+// ../protocol/src/principal.ts
+var PrincipalKindSchema = external_exports.enum(["owner", "guest"]);
+var PrincipalSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  kind: PrincipalKindSchema,
+  displayName: external_exports.string(),
+  /**
+   * 飞书 union_id。owner: 本机 daemon 已飞书登录时透传自 owner-identity.json；未登录 undefined。
+   * guest: v1 保持 undefined（connect token 当前不携带 unionId；未来若签名 payload 加字段可透传）。
+   * 消费方（如 ticket MCP / 未来别的飞书身份挂钩场景）按 undefined 决定是否降级；本层不做 fallback。
+   */
+  feishuUnionId: external_exports.string().optional()
+}).strict();
+var SenderInfoSchema = external_exports.object({
+  /** = principal.id = deviceId（决策 #16）。稳定路由 id */
+  did: external_exports.string().min(1),
+  displayName: external_exports.string(),
+  /** owner 未登录 / guest 无飞书身份时缺省。消费方各自决定是否降级 */
+  feishuUnionId: external_exports.string().optional(),
+  principal: PrincipalKindSchema
+}).strict();
+
+// ../protocol/src/persona-schemas.ts
+var PersonaFileSchema = external_exports.object({
+  personaId: external_exports.string(),
+  label: external_exports.string(),
+  model: external_exports.string().optional(),
+  public: external_exports.boolean(),
+  // 8-key set defined UI-side in `lib/session-icons.ts`; protocol stays plain string
+  // for forward compatibility, consumer fallbacks to default when key not found.
+  iconKey: external_exports.string().optional(),
+  // 绑定的 agent tool（'claude' / 'codex'）；缺省消费侧按 'claude' 兜底。
+  // 与 model 平行：persona 新建 session 的默认 tool，可平滑切换。
+  tool: external_exports.string().optional(),
+  createdAt: external_exports.number(),
+  updatedAt: external_exports.number()
+}).strict();
+var PersonaSkillSummarySchema = external_exports.object({
+  // 目录名作为 skill name（对齐 CC：frontmatter `name:` 仅作 displayName 用）
+  name: external_exports.string().min(1),
+  // SKILL.md frontmatter `description:`；缺省时省略字段
+  description: external_exports.string().optional()
+});
+var PersonaPluginSummarySchema = external_exports.object({
+  // settings.json 中 enabledPlugins 的 key，例如 'superpowers@claude-plugins-official'
+  id: external_exports.string().min(1)
+});
+var PersonaSandboxSettingsSchema = external_exports.object({
+  permissions: external_exports.object({
+    defaultMode: external_exports.string().optional(),
+    // CC 工具 allowlist（'Bash'/'Read'/...）。per-persona profile 在最严格 base 上追加放开。
+    allow: external_exports.array(external_exports.string()).optional(),
+    // deny 优先级最高；强制底座（persona 私密区）由 daemon compose 强制 union，owner 删不掉。
+    deny: external_exports.array(external_exports.string()).optional()
+  }).optional(),
+  sandbox: external_exports.object({
+    enabled: external_exports.boolean().optional(),
+    autoAllowBashIfSandboxed: external_exports.boolean().optional(),
+    allowUnsandboxedCommands: external_exports.boolean().optional(),
+    // 命令前缀白名单（CC `sandbox.excludedCommands`）：匹配的命令在沙箱外运行，
+    // 用于需逃出沙箱的工具（如 'docker *' / 'aliyun *' 要访问宿主 socket / 凭证）。
+    excludedCommands: external_exports.array(external_exports.string()).optional(),
+    filesystem: external_exports.object({
+      denyRead: external_exports.array(external_exports.string()).optional(),
+      allowRead: external_exports.array(external_exports.string()).optional(),
+      denyWrite: external_exports.array(external_exports.string()).optional(),
+      allowWrite: external_exports.array(external_exports.string()).optional()
+    }).optional(),
+    // 出站网络 + 本机端口。base 不放（空），profile 按需追加域名（app-builder = ['*']）。
+    network: external_exports.object({
+      allowedDomains: external_exports.array(external_exports.string()).optional(),
+      allowLocalBinding: external_exports.boolean().optional()
+    }).optional()
+  }).optional()
+});
+var PersonaInfoResponseSchema = PersonaFileSchema.extend({
+  personality: external_exports.string().optional(),
+  // 仅 'persona:get' 携带；null = 文件不存在 / parse 失败；undefined = 不在该响应类型上
+  skills: external_exports.array(PersonaSkillSummarySchema).optional(),
+  // 仅 'persona:get' 携带；空数组 = 没启用任何插件 / settings.json 不存在；undefined = 不在该响应类型上
+  plugins: external_exports.array(PersonaPluginSummarySchema).optional(),
+  sandboxSettings: PersonaSandboxSettingsSchema.nullable().optional()
+});
+var PersonaCreateArgsSchema = external_exports.object({
+  label: external_exports.string().min(1),
+  personality: external_exports.string(),
+  model: external_exports.string().optional(),
+  tool: external_exports.string().optional(),
+  public: external_exports.boolean().optional(),
+  iconKey: external_exports.string().optional()
+}).strict();
+var PersonaIdArgsSchema = external_exports.object({
+  personaId: external_exports.string().min(1)
+});
+var PersonaUpdateArgsSchema = external_exports.object({
+  personaId: external_exports.string().min(1),
+  patch: external_exports.object({
+    label: external_exports.string().min(1).optional(),
+    model: external_exports.string().optional(),
+    tool: external_exports.string().optional(),
+    personality: external_exports.string().optional(),
+    public: external_exports.boolean().optional(),
+    // pass `null` to clear; daemon strips the field from PersonaFile on null
+    iconKey: external_exports.string().nullable().optional()
+  }).strict()
+}).strict();
+var CodexSandboxSettingsSchema = external_exports.object({
+  // 额外可写的绝对路径或 ~ 路径（pnpm 工具链等）；workspace(cwd) 和 userWorkDir 由 daemon 自动加，不用列。
+  writableRoots: external_exports.array(external_exports.string()).optional(),
+  // 禁读 glob（相对 workspace root 或绝对），如 ".secrets/**"、"**/*.env"。
+  denyRead: external_exports.array(external_exports.string()).optional(),
+  // true → 网络全放(*)；缺省/false → 断网。
+  network: external_exports.boolean().optional()
+}).strict();
+
+// ../protocol/src/schemas.ts
+var SessionStatusSchema = external_exports.enum(SESSION_STATUS_VALUES);
+var UsageSchema = external_exports.object({
+  input_tokens: external_exports.number().int().nonnegative().optional(),
+  cache_read_input_tokens: external_exports.number().int().nonnegative().optional(),
+  cache_creation_input_tokens: external_exports.number().int().nonnegative().optional(),
+  output_tokens: external_exports.number().int().nonnegative().optional()
+});
+var ContextUsageSchema = external_exports.object({
+  inputTokens: external_exports.number().int().nonnegative(),
+  outputTokens: external_exports.number().int().nonnegative(),
+  cacheReadTokens: external_exports.number().int().nonnegative().optional(),
+  cacheCreateTokens: external_exports.number().int().nonnegative().optional()
+});
+var sessionMetaShape = {
+  gitBranch: external_exports.string().optional(),
+  resolvedModel: external_exports.string().optional(),
+  contextUsage: ContextUsageSchema.optional(),
+  contextWindowSize: external_exports.number().int().positive().optional()
+};
+var SessionMetaSchema = external_exports.object(sessionMetaShape);
+var ModelInfoSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  label: external_exports.string().min(1),
+  description: external_exports.string().optional(),
+  contextWindowSize: external_exports.number().int().positive(),
+  default: external_exports.boolean().optional()
+});
+var ModeInfoSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  label: external_exports.string().min(1),
+  description: external_exports.string().optional()
+});
+var ConfigFieldSchemaSchema = external_exports.object({
+  name: external_exports.string().min(1),
+  type: external_exports.enum(["string", "select", "toggle"]),
+  label: external_exports.string().min(1),
+  description: external_exports.string().optional(),
+  options: external_exports.array(
+    external_exports.object({
+      value: external_exports.string(),
+      label: external_exports.string(),
+      description: external_exports.string().optional()
+    })
+  ).optional(),
+  default: external_exports.unknown().optional(),
+  scope: external_exports.enum(["core", "tool-specific"])
+});
+var CapabilitiesGetArgs = external_exports.object({
+  tool: external_exports.string().min(1)
+});
+var ToolFeaturesSchema = external_exports.object({
+  rewind: external_exports.boolean(),
+  subagents: external_exports.boolean(),
+  tui: external_exports.boolean(),
+  observe: external_exports.boolean(),
+  fileSharing: external_exports.boolean(),
+  // fork：session:fork 走 forkSession（claude jsonl 专用，派生新 jsonl）。codex 无 claude jsonl
+  // → fork 不可用。UI 据此 gate assistant 消息上的 fork 按钮（codex 一轮多条消息会刷出一堆按钮且点了报错）。
+  fork: external_exports.boolean()
+});
+var CapabilitiesResponseSchema = external_exports.object({
+  tool: external_exports.string().min(1),
+  toolSessionIdLabel: external_exports.string().optional(),
+  models: external_exports.array(ModelInfoSchema),
+  permissionModes: external_exports.array(ModeInfoSchema),
+  configSchema: external_exports.array(ConfigFieldSchemaSchema),
+  features: ToolFeaturesSchema
+});
+var AllowRuleSchema = external_exports.object({
+  tool: external_exports.string().min(1),
+  pattern: external_exports.string().min(1),
+  createdAt: external_exports.string().min(1).optional()
+});
+var SessionFileSchema = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  cwd: external_exports.string().min(1),
+  tool: external_exports.literal("claude").or(external_exports.string().min(1)).default("claude"),
+  // 归一化 tool 侧 session id（CC = claude session uuid，Codex = codex 自己的 id）
+  toolSessionId: external_exports.string().optional(),
+  label: external_exports.string().optional(),
+  model: external_exports.string().optional(),
+  permissionMode: external_exports.string().optional(),
+  effort: external_exports.string().optional(),
+  // 归一化运行时观测字段（daemon 独立计算，session:update 不接受；meta_update 事件投递）
+  ...sessionMetaShape,
+  permissionRules: external_exports.array(AllowRuleSchema).optional(),
+  // Sidebar 置顶时间戳；null/undefined 表示未置顶
+  pinnedAt: external_exports.number().int().nonnegative().nullable().optional(),
+  // pinned 行手动拖拽顺序；越小越靠前。session:reorderPins 整体重写所有 pinned 的此字段。
+  // 缺失时 view-state 排序回退到 pinnedAt desc（旧数据兼容）
+  pinSortOrder: external_exports.number().int().nullable().optional(),
+  // 用户在 NewSessionDialog 或 Edit modal 选择的 icon 标识；UI 端做 enum 兜底
+  iconKey: external_exports.string().optional(),
+  // 由 session:fork 派生的 session 在 create 时记录源 session 的 sessionId（稳定 key，
+  // 不受 parent clear / re-spawn 影响）；sidebar 据此挂 fork 图标。非 fork session 该字段缺省。
+  // 旧字段 forkedFromToolSessionId 已弃用，daemon 启动时一次性迁移老数据
+  forkedFromSessionId: external_exports.string().min(1).optional(),
+  // 快速问答临时会话标记（spec 2026-06-23-fork-quick-ask）：true = 关闭抽屉即删、
+  // 不进 sidebar 树、daemon 启动清扫孤儿。普通会话缺省。
+  ephemeral: external_exports.boolean().optional(),
+  // owner-mode persona session 身份标识；UI 用它在 SessionList 过滤 + jump，
+  // daemon 用它做 idempotent dedupe + spawn 时派生 ctx.personaMode='owner'
+  ownerPersonaId: external_exports.string().min(1).optional(),
+  // app-builder Project 反向索引（spec: superpowers/specs/2026-06-01-app-builder-project-picker-design.md）。
+  // 当此 session 绑定到某个 build 中的 project 时填写；name 与 projects/<name>/ 子目录同名，
+  // 受 projectNameSchema regex 约束。daemon session:resume 时校验该目录存在，不存在则拒。
+  appBuilderProject: external_exports.string().regex(/^[a-z][a-z0-9-]{0,39}$/).optional(),
+  // listener-mode sub-session 的原始 chatId（owner-mode 不写；listener-scope 强制写入）。
+  // 派生 sessionId 是单向 hash `${personaId}-${tokenHash12}-${chatHash8}`，必须保留原始 chatId
+  // 才能让 alice 重连同一 sub-session（持久化在 alice localStorage 之外，由 daemon push 同步）。
+  // optional 是因为 owner-mode session 不带；只要写入就是 listener-mode 必填三元组。
+  chatId: external_exports.string().min(1).optional(),
+  /**
+   * 创建该 session 的设备 id（决策 #16：从 ctx.principal.id 派生 = deviceId）。
+   * UI 端 self 判定收敛为单一比较 `!creatorPrincipalId || creatorPrincipalId === 本机 deviceId`
+   * → 「我自己创建」vs「别的设备接入创建」。MyPersonas 二级分组按 creatorPrincipalId(设备)
+   * 分桶、按 contact(deviceId→ownerName) 反查显示名。
+   *
+   * 命名保留 creatorPrincipalId（命名债，语义已是 creatorDeviceId）；值由 connect token
+   * subDevice 背书（guest ctx）或本机 deviceId（owner ctx）。optional 兼容老 session。
+   *
+   * 决策 #16 删除了 creatorOwnerPrincipalId（personal token #735 遗留）——当年 guest 的
+   * principal.id 都是同张 cap.id 区分不了人才加它；现在 principal.id = 设备 deviceId、
+   * 归属人由 contact(deviceId→ownerId) 反查，该字段理由消失。
+   */
+  creatorPrincipalId: external_exports.string().min(1).optional(),
+  /**
+   * 创建该 session 的连接者飞书 displayName（一次性 stamp）。session:create handler
+   * 从 ctx.principal.displayName 传入；newRunner 时读这个字段派生 SubSessionMeta.callerDisplayName，
+   * 注入到 cc system prompt 引导自我介绍（见 connection-prompt.ts）。
+   * Optional 兼容老 SessionFile——newRunner 读不到时 fallback ContactStore 反查（guest）
+   * 或 deps.ownerDisplayName（owner）。
+   */
+  creatorDisplayName: external_exports.string().min(1).optional(),
+  /**
+   * Mirror peer sessions (2026-05-26): mirror 标识。**我在朋友 daemon 上创建的 session**，
+   * 远端是 source of truth，本机是持久化副本，方便 sidebar 跨设备聚合。
+   * 字段值 = 远端 daemon 的 deviceId（决策 #16：朋友设备标识，即我接入的那台机器）。
+   *
+   * 语义关键澄清：mirror **不是朋友创建给我的会话**——它是我自己的会话，只是在朋友
+   * 的机器上跑。sidebar chip 显示 `@<朋友>` 暗示「位置」，不是「来源」。
+   *
+   *   - undefined / 缺省 → 本机 native session（在我自己机器上跑）
+   *   - 非空 → 我的会话在该 deviceId 朋友的 daemon 上跑，本机为持久化副本
+   *
+   * 四类 session 取值矩阵（决策 #16 deviceId 版，creatorOwnerPrincipalId 列已删）：
+   *   | 形态                                | creatorPrincipalId(=设备) | originOwnerPrincipalId(=朋友设备) |
+   *   |-------------------------------------|--------------------------|----------------------------------|
+   *   | 本机 owner 自创                      | 本机 deviceId            | undefined                        |
+   *   | 本机被别的设备接入创建               | 接入者 deviceId(token 背书) | undefined                     |
+   *   | 我在朋友 daemon 上创建（mirror 回本机） | 我的 deviceId          | 朋友 deviceId                    |
+   *
+   * UI 用法：
+   *   - sidebar Active/Pinned/Recents 过滤：`origin 非空 → 一律视作 self`（绕过 #739 隔离）
+   *   - 行内显示 `@<朋友>` chip 暗示位置
+   *   - 进 ChatPanel 时按 origin 路由到 `pool.ensureRemoteForOwner(origin)` 走远端（按 deviceId）
+   *
+   * daemon 用法：
+   *   - `peerSession:upsert` / `peerSession:remove` 一族 RPC 专管 mirror 写删；
+   *     daemon dumb write/delete，**不广播任何 push 帧**，UI 是写入唯一源
+   *   - native `session:*` handler 完全不感知 mirror（UI 操作 mirror 不走 native 路径）
+   */
+  originOwnerPrincipalId: external_exports.string().min(1).optional(),
+  /**
+   * Dispatch 派生的 session 在 create 时记录源 session 的 sessionId（稳定 key）；
+   * sidebar 据此把 dispatch 出来的 sub-session 折叠在源 session 下。非 dispatch session 缺省。
+   * mirror SessionFile 上必须 strip（朋友 daemon 上的 sessionId 在本机无意义，会让本机
+   * 反查路径走错；按 #750 一族防线处理，跟 ownerPersonaId 同地点 strip）。
+   */
+  dispatchedFromSessionId: external_exports.string().min(1).optional(),
+  /**
+   * Shift fire 派生的 session 记录调 addShift 的 source cc session id（稳定 key）；
+   * sidebar 据此把 fire 出的 session 折叠在 source session 下，跟 dispatchedFromSessionId
+   * 平行但渲染不同 icon（AlarmClock 区别于 dispatch 的 CornerDownRight），让 owner 一眼
+   * 分清"派生于人为委派"还是"派生于定时唤起"。非 shift fire session 缺省。
+   * 跟 dispatchedFromSessionId / forkedFromSessionId 三者互斥（同一 session 不会兼任）。
+   * mirror SessionFile 同 dispatchedFromSessionId 处理（shift fire 本地概念，理论上不会
+   * mirror，留 strip 防御）。
+   */
+  shiftFiredFromSessionId: external_exports.string().min(1).optional(),
+  createdAt: external_exports.string().min(1),
+  updatedAt: external_exports.string().min(1)
+});
+var ParsedEventBase = {
+  seq: external_exports.number().int().nonnegative().optional(),
+  ts: external_exports.string().optional(),
+  // CC top-level uuid：同一逻辑帧从 stream-json stdout 和 JSONL 落地时携带相同值，
+  // reducer 用它做跨路径去重（managed stdout 和 observer JSONL 双写）。对齐 cc-direct cc-event-store
+  uuid: external_exports.string().optional()
+};
+var HistoryUserMetaSchema = external_exports.enum(HISTORY_USER_META_VALUES);
+var SubagentToolStatsSchema = external_exports.object({
+  readCount: external_exports.number().int().nonnegative().optional(),
+  searchCount: external_exports.number().int().nonnegative().optional(),
+  bashCount: external_exports.number().int().nonnegative().optional(),
+  editFileCount: external_exports.number().int().nonnegative().optional(),
+  linesAdded: external_exports.number().int().nonnegative().optional(),
+  linesRemoved: external_exports.number().int().nonnegative().optional(),
+  otherToolCount: external_exports.number().int().nonnegative().optional()
+});
+var StructuredPatchHunkSchema = external_exports.object({
+  oldStart: external_exports.number().int().nonnegative(),
+  oldLines: external_exports.number().int().nonnegative(),
+  newStart: external_exports.number().int().nonnegative(),
+  newLines: external_exports.number().int().nonnegative(),
+  // 每行以 '+' / '-' / ' ' 开头（diff npm 包的标准 hunk lines）
+  lines: external_exports.array(external_exports.string())
+});
+var ToolResultExtraSchema = external_exports.object({
+  agentId: external_exports.string().optional(),
+  agentType: external_exports.string().optional(),
+  status: external_exports.string().optional(),
+  prompt: external_exports.string().optional(),
+  // CC File*Tool 结果里的 filePath / structuredPatch：UI rewind 预览据此本地渲染 diff。
+  // 两者同时存在才有意义；缺任一则 UI 降级为仅显示"受影响文件"摘要
+  filePath: external_exports.string().optional(),
+  structuredPatch: external_exports.array(StructuredPatchHunkSchema).optional(),
+  stats: external_exports.object({
+    durationMs: external_exports.number().int().nonnegative().optional(),
+    tokens: external_exports.number().int().nonnegative().optional(),
+    toolUseCount: external_exports.number().int().nonnegative().optional(),
+    toolStats: SubagentToolStatsSchema.optional(),
+    usage: UsageSchema.optional()
+  }).optional()
+});
+var MemoryEntrySchema = external_exports.object({
+  path: external_exports.string(),
+  content: external_exports.string(),
+  mtimeMs: external_exports.number().optional()
+});
+var AskQuestionOptionSchema = external_exports.object({
+  label: external_exports.string().min(1),
+  description: external_exports.string().optional()
+});
+var AskQuestionItemSchema = external_exports.object({
+  question: external_exports.string().min(1),
+  // multiSelect 必填（boolean 不给默认值）：daemon emit 时必须显式传，避免 UI 端漂移
+  multiSelect: external_exports.boolean(),
+  options: external_exports.array(AskQuestionOptionSchema).min(1)
+});
+var ParsedEventSchema = external_exports.discriminatedUnion("kind", [
+  // session_init 仅携带 session 标识；resolvedModel 等元信息走 meta_update
+  external_exports.object({
+    ...ParsedEventBase,
+    kind: external_exports.literal("session_init"),
+    toolSessionId: external_exports.string().optional()
+  }),
+  external_exports.object({
+    ...ParsedEventBase,
+    kind: external_exports.literal("thinking"),
+    text: external_exports.string(),
+    // 同一思考块的多次 stream_event 增量带相同 partialId（= `${sessionId}-${blockIndex}`）；
+    // 不带表示是 assistant 帧的整段快照。UI 用 partialId 累积 / 用快照覆盖。
+    partialId: external_exports.string().optional()
+  }),
+  external_exports.object({
+    ...ParsedEventBase,
+    kind: external_exports.literal("text"),
+    text: external_exports.string(),
+    // 同一文本块的多次 stream_event 增量带相同 partialId；语义同 thinking
+    partialId: external_exports.string().optional()
+  }),
+  // 真实用户输入：daemon 通过 --replay-user-messages 拿到 stdin 回显，区分于 assistant text。
+  // meta 非空表示是 CC 注入的系统消息（task-notification / slash-command / system-reminder 等），
+  // UI 据此走低视觉权重渲染或子 agent 通知卡。
+  //
+  // sender（2026-07-08 spec §4.1）：daemon 'send' 命令 synth 的 user_text 携带发起人 SenderInfo；
+  // observer 回灌路径（cc jsonl）永远不带 —— cc 自己写盘不知道 daemon 层身份。
+  // UI 端 sender 缺省 → 不渲染 displayName label；有 → 气泡下方渲染。
+  external_exports.object({
+    ...ParsedEventBase,
+    kind: external_exports.literal("user_text"),
+    text: external_exports.string(),
+    meta: HistoryUserMetaSchema.optional(),
+    taskId: external_exports.string().optional(),
+    parentToolUseId: external_exports.string().optional(),
+    sender: SenderInfoSchema.optional()
+  }),
+  external_exports.object({
+    ...ParsedEventBase,
+    kind: external_exports.literal("tool_call"),
+    toolUseId: external_exports.string(),
+    tool: external_exports.string(),
+    // 等于 session.tool；UI 按 {toolKind, tool} 分派渲染。additive 可选，旧 adapter 不填也能解析
+    toolKind: external_exports.string().optional(),
+    input: external_exports.unknown()
+  }),
+  external_exports.object({
+    ...ParsedEventBase,
+    kind: external_exports.literal("tool_result"),
+    toolUseId: external_exports.string(),
+    output: external_exports.unknown().optional(),
+    error: external_exports.string().optional(),
+    // CC Agent / Task tool 完成后在 JSONL 顶层挂的 toolUseResult 元信息（非 content 字段）
+    // 老 CC 走 <task-notification> user 消息携带统计，新 CC 直接挂在这里——兼容期两者可能并存
+    toolResultExtra: ToolResultExtraSchema.optional(),
+    // 精确指向发起 tool 的 assistant 消息顶层 uuid；toolUseId 已够 UI 聚合，这个仅作调试辅助
+    sourceToolAssistantUUID: external_exports.string().optional(),
+    // AskUserQuestion 实时回放（plan: clawd-ask-user-question 任务 B 修复）：
+    //   CC 用户答完后把 answers 写在 user 帧顶层 toolUseResult.answers，daemon parser
+    //   抽到这里。UI eventsToLines 用 toolUseId 配对到 question-card line，把卡片转为
+    //   只读态显示用户的答案。仅 AskUserQuestion 配对的 tool_result 行携带；普通工具不带。
+    //   等价于 HistoryMessage.askQuestionAnswers（历史回放路径），两端字段名对齐。
+    askQuestionAnswers: external_exports.record(external_exports.string(), external_exports.string()).optional()
+  }),
+  // CC 命中项目记忆（`type:"attachment"`，`attachment.type:"memories"`）的独立事件；
+  // 其它 attachment 子类型（skills / hook_context / deferred_tools / hook_success / unknown）
+  // 视觉权重低，daemon 直接走 user_text + HistoryUserMeta 折叠，不另开 kind
+  external_exports.object({
+    ...ParsedEventBase,
+    kind: external_exports.literal("attachment_memories"),
+    memories: external_exports.array(MemoryEntrySchema)
+  }),
+  external_exports.object({
+    ...ParsedEventBase,
+    kind: external_exports.literal("permission_request"),
+    requestId: external_exports.string(),
+    tool: external_exports.string(),
+    input: external_exports.unknown(),
+    // CC `control_request.request.tool_use_id` 对应的 tool_use id；UI 用它把队列项与
+    // 后续 tool_result.toolUseId 关联做跨客户端 dequeue（plan permission-multi-pending-queue.md
+    // 选项 ii）。老 daemon / legacy CC 不发该字段时保持向后兼容（optional）。
+    toolUseId: external_exports.string().optional()
+  }),
+  // AskUserQuestion 工具调用的内联锚点（plan: clawd-ask-user-question 问题 1 修复）：
+  //   daemon parser 把 assistant tool_use AskUserQuestion 翻译成本 kind（不是 permission_request、
+  //   也不是 tool_call），让 UI 在事件流自然位置渲染问答卡（紧跟 assistant 消息 / 在后续消息之前），
+  //   而不是被强行挂在末尾。permission_request 帧仍正常下发驱动 pendingQuestions 状态机，
+  //   但只走 wire 帧不入 ring buffer——状态由 daemon pendingQuestions 持有，
+  //   渲染锚点由本 kind 的 ParsedEvent 提供。
+  // 历史回放：history-to-lines.ts 在 jsonl tool_use AskUserQuestion 处插入对应 'question-card' line，
+  //   配对的 tool_result 携带 toolUseResult.answers，已答完的展示只读态。
+  external_exports.object({
+    ...ParsedEventBase,
+    kind: external_exports.literal("ask_user_question"),
+    toolUseId: external_exports.string(),
+    questions: external_exports.array(AskQuestionItemSchema)
+  }),
+  // turn_end —— 一轮 AI 响应结束。消费者：reducer pushEventToBuffer 翻 turnOpen=false；
+  // UI useChatPanelState 收 "Claude is working" spinner（lastEventKind===turn_end）。
+  // 三个产生来源：
+  //   ① SDK 模式 stream-json `result` 帧（claude.ts）—— stdout 最后一帧，可靠
+  //   ② TUI 模式 observer 读 JSONL `system/turn_duration` 行（claude-tui.ts parseLine）
+  //      ⚠️ CC 写此行早于该轮尾段正文落盘，可能被尾随 text 覆盖 lastEventKind（③ 存在的原因）
+  //   ③ TUI 模式屏幕静止 AND observer 静止（observeScreenIdle + manager.observerIdleWaitMs 复合闸 →
+  //      dispatchTurnIdle inject）—— 兜 ② 的覆盖；等尾随 text 全部 poll 落盘后补，排在 buffer 末条
+  external_exports.object({
+    ...ParsedEventBase,
+    kind: external_exports.literal("turn_end")
+  }),
+  // SDK system 帧 task_started / task_progress / task_notification 的归一化产物：
+  // 子 agent 执行过程中实时上报 agentId / lastToolName / stats，UI pending 期就能开抽屉、看进度。
+  // toolUseId 对齐父 Agent 工具的 tool_use_id；status 由 SDK subtype 派生。
+  external_exports.object({
+    ...ParsedEventBase,
+    kind: external_exports.literal("subagent_progress"),
+    toolUseId: external_exports.string(),
+    agentId: external_exports.string(),
+    status: external_exports.enum(["started", "running", "completed", "failed"]),
+    description: external_exports.string().optional(),
+    lastToolName: external_exports.string().optional(),
+    prompt: external_exports.string().optional(),
+    stats: external_exports.object({
+      durationMs: external_exports.number().int().nonnegative().optional(),
+      tokens: external_exports.number().int().nonnegative().optional(),
+      toolUseCount: external_exports.number().int().nonnegative().optional()
+    }).optional()
+  }),
+  external_exports.object({
+    ...ParsedEventBase,
+    kind: external_exports.literal("error"),
+    message: external_exports.string()
+  }),
+  // 元信息投递：daemon adapter 从任意来源（stream-json / JSONL）抽出的 SessionMeta 子集
+  // reducer 做 patch merge + diff + persist + 广播 session:info；不入 ring buffer
+  external_exports.object({
+    ...ParsedEventBase,
+    kind: external_exports.literal("meta_update"),
+    patch: SessionMetaSchema
+  }),
+  // 系统消息（CC 自家系统提示 / 老板插话补充）；persona 场景下区分两类：
+  //   metaSource='cc'    → CC 注入的系统消息（默认低视觉权重渲染）
+  //   metaSource='owner' → 老板通过 persona:appendOwnerMessage 插入的话（蓝色气泡）
+  // 缺省视为 'cc'；现有非 persona 场景保持兼容（不需要 owner 时不下发该字段）
+  external_exports.object({
+    ...ParsedEventBase,
+    kind: external_exports.literal("meta-text"),
+    text: external_exports.string(),
+    metaSource: external_exports.enum(["cc", "owner"]).optional()
+  })
+]);
+var SessionCreateArgs = external_exports.object({
+  // 当 ownerPersonaId 存在时 cwd 由 daemon 派生，UI 可不传
+  cwd: external_exports.string().min(1).optional(),
+  tool: external_exports.string().optional(),
+  label: external_exports.string().optional(),
+  model: external_exports.string().optional(),
+  permissionMode: external_exports.string().optional(),
+  effort: external_exports.string().optional(),
+  // 用户在 NewSessionDialog 选择的 icon 标识；UI 端做 enum 兜底
+  iconKey: external_exports.string().optional(),
+  // session:fork 派生 session 时由 UI 传入源 sessionId，daemon 写到 SessionFile.forkedFromSessionId
+  forkedFromSessionId: external_exports.string().min(1).optional(),
+  // 快速问答：创建时打 ephemeral 标记，daemon 写到 SessionFile.ephemeral
+  ephemeral: external_exports.boolean().optional(),
+  // owner-mode persona session：传此字段时 daemon 自行派生 cwd 和启动参数，
+  // 且按 ownerPersonaId 做 idempotent dedupe（每 persona 永远只有一个 owner session）
+  ownerPersonaId: external_exports.string().min(1).optional()
+  // 单栏默认 refactor (spec 2026-06-02)：appBuilderProject 字段已从 SessionCreateArgs 砍掉。
+  // 绑定路径收敛到 appBuilder:createProject —— 先创建空 session（仅传 ownerPersonaId=persona-app-builder），
+  // 后通过 createProject RPC 创建 project 并 daemon 内部 mutate 写入 appBuilderProject。
+  // SessionFile schema 仍保留该字段供 daemon 内部 mutate（manager.update 内部调用通道）。
+}).refine((args) => args.cwd != null || args.ownerPersonaId != null, {
+  message: "cwd \u4E0E ownerPersonaId \u81F3\u5C11\u4F20\u4E00\u4E2A"
+});
+var SessionIdArgs = external_exports.object({ sessionId: external_exports.string().min(1) });
+var SessionUpdateArgs = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  patch: external_exports.object({
+    label: external_exports.string().optional(),
+    model: external_exports.string().optional(),
+    permissionMode: external_exports.string().optional(),
+    effort: external_exports.string().optional(),
+    cwd: external_exports.string().optional(),
+    // 用户在 Edit modal 选择的 icon 标识；UI 端做 enum 兜底
+    iconKey: external_exports.string().optional()
+    // 注意：appBuilderProject 字段已从 patch 中砍掉（spec 2026-06-02-app-builder-single-pane-default-design）。
+    // 绑定单向不可变 —— 由 appBuilder:createProject 在 daemon 内部一次写入；UI / assistant 不再
+    // 通过 sessionUpdate 修改这个字段。SessionFile 仍保留 appBuilderProject 字段供 daemon 内部 mutate。
+  })
+});
+var SessionSendArgs = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  text: external_exports.string()
+});
+var SessionRewindArgs = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  userMessageId: external_exports.string().min(1),
+  dryRun: external_exports.boolean().optional()
+});
+var SessionRewindResponseSchema = external_exports.object({
+  canRewind: external_exports.boolean(),
+  error: external_exports.string().optional(),
+  filesChanged: external_exports.array(external_exports.string()).optional(),
+  insertions: external_exports.number().int().nonnegative().optional(),
+  deletions: external_exports.number().int().nonnegative().optional()
+});
+var SessionRewindDiffArgs = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  userMessageId: external_exports.string().min(1)
+});
+var RewindDiffHunkSchema = external_exports.object({
+  oldStart: external_exports.number().int().nonnegative(),
+  oldLines: external_exports.number().int().nonnegative(),
+  newStart: external_exports.number().int().nonnegative(),
+  newLines: external_exports.number().int().nonnegative(),
+  lines: external_exports.array(external_exports.string())
+});
+var RewindDiffFileSchema = external_exports.object({
+  filePath: external_exports.string().min(1),
+  hunks: external_exports.array(RewindDiffHunkSchema),
+  insertions: external_exports.number().int().nonnegative(),
+  deletions: external_exports.number().int().nonnegative(),
+  status: external_exports.enum(["modified", "added", "deleted"]).optional()
+});
+var SessionRewindDiffResponseSchema = external_exports.object({
+  canRewind: external_exports.boolean(),
+  error: external_exports.string().optional(),
+  files: external_exports.array(RewindDiffFileSchema),
+  totalInsertions: external_exports.number().int().nonnegative(),
+  totalDeletions: external_exports.number().int().nonnegative()
+});
+var SessionRewindableMessageIdsResponseSchema = external_exports.object({
+  userMessageIds: external_exports.array(external_exports.string())
+});
+var SessionResumeArgs = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  toolSessionId: external_exports.string().min(1)
+});
+var SessionForkArgs = external_exports.object({
+  cwd: external_exports.string().min(1),
+  toolSessionId: external_exports.string().min(1),
+  messageUuid: external_exports.string().min(1)
+});
+var SessionForkResponseSchema = external_exports.object({
+  forkedToolSessionId: external_exports.string().min(1),
+  forkedFilePath: external_exports.string().min(1)
+});
+var SessionObserveArgs = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  toolSessionId: external_exports.string().min(1),
+  jsonlPath: external_exports.string().optional()
+});
+var SessionEventsArgs = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  // -1 表示"从头拉全量"（尚未见过任何事件）；seq 从 0 起，所以合法下界是 -1
+  afterSeq: external_exports.number().int().min(-1)
+});
+var PermissionRespondArgs = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  // 权限请求 id 用 `permissionRequestId`，**不能**叫 `requestId`：WS 传输层用帧顶层的
+  // `requestId` 做 RPC 请求/响应关联（daemon-client 发帧时 `{...args, type, requestId}`，
+  // 传输 id 在最后会覆盖 args 同名字段）。若沿用 `requestId`，权限 id 会被传输 id（如 "r61"）
+  // 覆盖，daemon 查 pendingPermissions 永远 miss → 点了允许一直卡住。
+  permissionRequestId: external_exports.string().min(1),
+  allow: external_exports.boolean(),
+  permanent: external_exports.boolean().optional(),
+  pattern: external_exports.string().optional()
+});
+var HistoryListArgs = external_exports.object({ projectPath: external_exports.string().min(1) });
+var HistoryReadArgs = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  limit: external_exports.number().int().positive().max(5e3).optional(),
+  /** 不传时走 tail 语义：daemon 返回最后 limit 条（offset = max(0, total - limit)） */
+  offset: external_exports.number().int().nonnegative().optional()
+});
+var HistorySubagentsArgs = external_exports.object({
+  cwd: external_exports.string().min(1),
+  toolSessionId: external_exports.string().min(1)
+});
+var HistorySubagentReadArgs = external_exports.object({
+  cwd: external_exports.string().min(1),
+  toolSessionId: external_exports.string().min(1),
+  subagentId: external_exports.string().min(1)
+});
+var WorkspaceListArgs = external_exports.object({
+  // cwd 缺省则 daemon 兜底 os.homedir()；UI 的 DirBrowser 首次浏览就走这条路径
+  cwd: external_exports.string().min(1).optional(),
+  path: external_exports.string().optional(),
+  showHidden: external_exports.boolean().optional()
+});
+var WorkspaceReadArgs = external_exports.object({
+  cwd: external_exports.string().min(1),
+  path: external_exports.string().min(1)
+});
+var SkillsListArgs = external_exports.object({ cwd: external_exports.string().min(1), tool: external_exports.string().optional() });
+var SkillEntrySchema = external_exports.object({
+  name: external_exports.string().min(1),
+  source: external_exports.enum(SKILL_SOURCE_VALUES),
+  path: external_exports.string().optional(),
+  description: external_exports.string().optional(),
+  plugin: external_exports.string().optional()
+});
+var AgentEntrySchema = external_exports.object({
+  name: external_exports.string().min(1),
+  source: external_exports.enum(AGENT_SOURCE_VALUES),
+  path: external_exports.string().optional(),
+  description: external_exports.string().optional(),
+  whenToUse: external_exports.string().optional(),
+  plugin: external_exports.string().optional()
+});
+var AgentsListArgs = external_exports.object({ cwd: external_exports.string().min(1), tool: external_exports.string().optional() });
+var AgentsListResponseSchema = external_exports.object({
+  agents: external_exports.array(AgentEntrySchema)
+});
+var SessionSubscribeArgs = external_exports.object({ sessionId: external_exports.string().min(1) });
+var SessionPinArgs = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  pinned: external_exports.boolean()
+});
+var PeerSessionUpsertResponseSchema = external_exports.object({
+  type: external_exports.literal("peerSession:upsert:ok")
+});
+var PeerSessionRemoveArgs = external_exports.object({ sessionId: external_exports.string().min(1) });
+var PeerSessionRemoveResponseSchema = external_exports.object({
+  type: external_exports.literal("peerSession:remove:ok")
+});
+var SessionReorderPinsArgs = external_exports.object({
+  orderedIds: external_exports.array(external_exports.string().min(1)).min(1)
+});
+var GitRootArgs = external_exports.object({ cwd: external_exports.string().min(1) });
+var GitRootResponseSchema = external_exports.object({
+  isGitRoot: external_exports.boolean(),
+  gitRoot: external_exports.string().nullable()
+});
+var GitBranchArgs = external_exports.object({ cwd: external_exports.string().min(1) });
+var GitBranchResponseSchema = external_exports.object({
+  branch: external_exports.string().nullable()
+});
+var GitBranchesArgs = external_exports.object({ cwd: external_exports.string().min(1) });
+var GitBranchesResponseSchema = external_exports.object({
+  branches: external_exports.array(external_exports.string()),
+  head: external_exports.string().nullable()
+});
+var HistoryRecentDirsArgs = external_exports.object({}).optional();
+var RecentDirEntrySchema = external_exports.object({
+  cwd: external_exports.string().min(1),
+  updatedAt: external_exports.string().min(1)
+});
+var HistoryRecentDirsResponseSchema = external_exports.object({
+  dirs: external_exports.array(RecentDirEntrySchema)
+});
+var SessionQuestionFrameSchema = external_exports.object({
+  type: external_exports.literal("session:question"),
+  sessionId: external_exports.string().min(1),
+  toolUseId: external_exports.string().min(1),
+  requestId: external_exports.string().min(1),
+  // UI 单卡承载多 question；空数组语义无效，schema 必拒
+  questions: external_exports.array(AskQuestionItemSchema).min(1)
+});
+var SessionQuestionClearedFrameSchema = external_exports.object({
+  type: external_exports.literal("session:question:cleared"),
+  sessionId: external_exports.string().min(1),
+  toolUseId: external_exports.string().min(1),
+  // record<string,string>：与 AnswerQuestionArgs.answers 同形状（question text → label）
+  answers: external_exports.record(external_exports.string(), external_exports.string()).optional()
+});
+var AnswerQuestionArgs = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  toolUseId: external_exports.string().min(1),
+  answers: external_exports.record(external_exports.string(), external_exports.string())
+});
+var AnswerQuestionResponseSchema = external_exports.object({ ok: external_exports.literal(true) });
+var CancelQuestionArgs = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  toolUseId: external_exports.string().min(1)
+});
+var CancelQuestionResponseSchema = external_exports.object({ ok: external_exports.literal(true) });
+var AuthRequestFrameSchema = external_exports.object({
+  type: external_exports.literal("auth"),
+  token: external_exports.string().min(1),
+  scheme: external_exports.literal("bearer").optional(),
+  /**
+   * 决策 #16：自报身份字段（selfPrincipalId / selfDisplayName / selfDeviceId）全部删除——
+   * guest 的设备 id / 人 id / 来源全部由 connect token 的 subDevice/subOwner/provider 签名背书
+   * （server 签、目标设备本地验签，不可伪造），不再接受任何自报身份。
+   *
+   * selfUrl 保留：它只是"可达地址"（auto-reverse 反向连接用），不是身份——填错只影响
+   * 反向连通性，不构成伪造风险，且 url 不在 token 里（token 只签身份不签地址）。
+   */
+  selfUrl: external_exports.string().min(1).optional()
+});
+var AuthOkFrameSchema = external_exports.object({
+  type: external_exports.literal("auth:ok"),
+  version: external_exports.string().min(1).optional(),
+  protocolVersion: external_exports.number().int().nonnegative().optional()
+});
+var TunnelReadyEventSchema = external_exports.object({
+  type: external_exports.literal("tunnel:ready"),
+  url: external_exports.string().min(1),
+  subdomain: external_exports.string().min(1)
+});
+var TunnelExitedEventSchema = external_exports.object({
+  type: external_exports.literal("tunnel:exited"),
+  code: external_exports.number().int().nullable(),
+  subdomain: external_exports.string().nullable(),
+  url: external_exports.string().nullable()
+});
+var TunnelUnavailableEventSchema = external_exports.object({
+  type: external_exports.literal("tunnel:unavailable"),
+  reason: external_exports.string().min(1),
+  failedAt: external_exports.string().min(1)
+});
+var InfoRunningSessionSchema = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  status: SessionStatusSchema,
+  freshSpawn: external_exports.boolean(),
+  pendingPermissionRequestIds: external_exports.array(external_exports.string().min(1)),
+  pendingQuestionToolUseIds: external_exports.array(external_exports.string().min(1))
+});
+var InfoResponseSchema = external_exports.object({
+  type: external_exports.literal("info"),
+  version: external_exports.string(),
+  protocolVersion: external_exports.number(),
+  hostname: external_exports.string(),
+  os: external_exports.string(),
+  tools: external_exports.array(external_exports.object({ id: external_exports.string(), available: external_exports.boolean() })),
+  runningSessions: external_exports.array(InfoRunningSessionSchema),
+  // ── file-sharing 会话身份回执（spec: superpowers/specs/2026-05-19-clawd-file-sharing-design.md §8） ──
+  // PR 1 阶段标 optional（daemon 还没下发，旧 daemon info 响应不带这五个字段）；
+  // PR 2 daemon 实现 single HTTP server + auth-context 后，daemon 必返这五个字段，
+  // 届时可考虑改成 required。spec §11 第 3 条："tokenRole 是协议字段，daemon 查 token
+  // 表后显式下发，UI 不自行推导"——所以 UI 一律读这里，禁止本地推导。
+  /** 'owner' = 拿到 owner-token 的连接（不限来源 IP）。来源 TOKEN_ROLES（spec §11 #1 中央真理源）。
+   *  历史 'personal' role（persona file-sharing token）在 2026-05-21 删除；tokenPersonaId 一同移除。 */
+  tokenRole: external_exports.enum(TOKEN_ROLES).optional(),
+  /** socket.remoteAddress 是否落在 127.0.0.1 / ::1；本期无 RPC 消费，保留协议槽位给未来 "Reveal in Finder" 等本机动作 */
+  isLoopback: external_exports.boolean().optional(),
+  /** UI 拼 file-sharing HTTP 路由的前缀（http(s)://host:port），不含尾斜杠；frpc 反代时返反代地址 */
+  httpBaseUrl: external_exports.string().optional(),
+  /** file-sharing HTTP 路由的 Authorization: Bearer token；与 WS token 解耦，HTTP 401 仅触发 ReAuth 不强踢 WS（spec §11 第 4 条） */
+  httpToken: external_exports.string().optional()
+});
+var PROJECT_PORT_MIN = 6173;
+var PROJECT_PORT_MAX = 6272;
+var projectNameRegex = /^[a-z][a-z0-9-]{0,39}$/;
+var ProjectMetadataSchema = external_exports.object({
+  name: external_exports.string().regex(projectNameRegex, {
+    message: "kebab-case, \u5C0F\u5199\u5B57\u6BCD\u5F00\u5934\uFF0C\u53EA\u5141\u8BB8\u5C0F\u5199\u5B57\u6BCD / \u6570\u5B57 / -\uFF0C\u6700\u957F 40 \u5B57\u7B26"
+  }),
+  port: external_exports.number().int().min(PROJECT_PORT_MIN).max(PROJECT_PORT_MAX),
+  createdAt: external_exports.string().datetime(),
+  /** dev server 启动命令（shell 字符串）；占位符 $CLAWD_PREVIEW_PORT 替换 + env 注入 */
+  devCommand: external_exports.string().min(1),
+  /**
+   * 发布上线后的公网 URL（spec 2026-06-02-app-builder-single-pane-default-design §5.6.1）。
+   * assistant 跑完 publish.sh 后调 appBuilder:setProdUrl 写入；UI 读这个字段切预览栏到线上 URL，
+   * 取代旧 `<builder-preview url=... label="prod" />` marker 机制。
+   * 老 project 元数据无此字段（optional 兼容）。
+   */
+  prodUrl: external_exports.string().url().optional(),
+  /**
+   * dev server 就绪 stdout regex（spec 2026-06-02-app-builder-explicit-dev-server-control §2）。
+   * supervisor spawn 后会监听子进程 stdout，命中此 regex 视为 dev server 真 ready；
+   * 仅当 await ready 后才把 stage 切到 'running'，避免 cold start race 导致 iframe 502。
+   * optional：缺省时 supervisor 用默认 /Local:\s+https?:\/\//（vite "Local: http://..." 输出）。
+   * 老板换非 vite 技术栈（Next.js "Ready in"、webpack "Compiled" 等）时自定义这个字段。
+   */
+  readyPattern: external_exports.string().optional(),
+  /**
+   * 发布上线脚手架化 (spec 2026-06-03-app-builder-publish-scaffold-design §5.1.4)：
+   * in-flight 发布 job 的元数据。仅承载"in-flight"或"中断残骸"两种状态：
+   *   - daemon spawn publish.sh + 收到第一个 ::stage::build marker 时写入
+   *   - 每次 stage 切换更新 stage 字段
+   *   - 成功 / 正常失败 / 用户 dismiss 时立即清掉
+   *   - 只有 daemon 崩才会留残骸（子进程随 daemon 一起死）
+   * status 字段在 ProjectWithStatus 派生而不在这里 —— 本 schema 是落盘形态，
+   * "in-flight vs interrupted" 区分由 daemon 响应时实时拼 registry 状态得出。
+   */
+  publishJob: external_exports.object({
+    jobId: external_exports.string().min(1),
+    stage: external_exports.enum(["build", "deploy", "verify"]),
+    startedAt: external_exports.number().int().nonnegative()
+  }).optional()
+});
+var PROJECT_STAGE_VALUES = [
+  "install-pending",
+  // createProject 刚返回，scaffold 已完成（daemon 同步内联跑），等 assistant pnpm install
+  "installing",
+  // assistant pnpm install 中
+  "starting-dev-server",
+  // startDevServer 已调，supervisor spawn 子进程中（await ready 期间也在此 stage）
+  "running",
+  // dev server 跑起来了（supervisor stdout 命中 readyPattern + 端口已监听）
+  "stopped",
+  // 用户显式点"收起预览"停掉 / daemon 重启后默认；UI 渲染折叠条 + "展开预览"按钮
+  "failed"
+  // 某个阶段失败（stageReason 字段携带原因，含 dev server cold start timeout）
+];
+var ProjectStageSchema = external_exports.enum(PROJECT_STAGE_VALUES);
+var ProjectWithStatusSchema = ProjectMetadataSchema.extend({
+  isRunning: external_exports.boolean(),
+  boundSessionId: external_exports.string().nullable(),
+  /**
+   * 单栏 refactor stage fix (spec 2026-06-02 §5.6.2)：daemon 内存维护的当前 stage。
+   * UI 据此切 PreviewPane spinner / iframe / error。
+   * optional 兼容启动后 daemon 还没有 stage 记录的 fresh project（按 isRunning 推断兜底）。
+   */
+  stage: ProjectStageSchema.optional(),
+  /** stage='failed' 时携带失败原因 */
+  stageReason: external_exports.string().optional(),
+  /**
+   * 发布上线脚手架化 (spec 2026-06-03-app-builder-publish-scaffold-design §5.1.3)：
+   * ProjectMetadata.publishJob 的 status 派生版。daemon 响应时按以下规则实时拼装：
+   *   - 落盘字段存在 + PublishJobRegistry 有匹配 jobId → 'in-flight'
+   *   - 落盘字段存在 + Registry 无匹配（jobId 对不上或 entry 缺失）→ 'interrupted'（daemon 崩残骸）
+   *   - 落盘字段不存在 → undefined（字段省略）
+   * UI 用 status 决定 PreviewPane 渲染分支（in-flight 三段 checklist / interrupted 恢复条）。
+   */
+  publishJob: external_exports.object({
+    jobId: external_exports.string().min(1),
+    stage: external_exports.enum(["build", "deploy", "verify"]),
+    startedAt: external_exports.number().int().nonnegative(),
+    status: external_exports.enum(["in-flight", "interrupted"])
+  }).optional()
+});
+var ListProjectsArgsSchema = external_exports.object({}).strict();
+var ListProjectsResultSchema = external_exports.object({
+  projects: external_exports.array(ProjectWithStatusSchema)
+}).strict();
+var GetProjectArgsSchema = external_exports.object({
+  sessionId: external_exports.string().min(1)
+}).strict();
+var GetProjectResultSchema = external_exports.object({
+  /** session 未绑 project / project 不存在时为 null（UI 走单栏 / 折叠） */
+  project: ProjectWithStatusSchema.nullable()
+}).strict();
+var CreateProjectArgsSchema = external_exports.object({
+  /** 必填：caller session，daemon 自动绑过去（spec 2026-06-02 §3 invariant 1 Session ↔ 1 Project） */
+  sessionId: external_exports.string().min(1),
+  name: external_exports.string()
+}).strict();
+var CreateProjectResultSchema = external_exports.object({
+  project: ProjectMetadataSchema
+}).strict();
+var DeleteProjectArgsSchema = external_exports.object({
+  name: external_exports.string()
+}).strict();
+var DeleteProjectResultSchema = external_exports.object({}).strict();
+var UpdateProjectPortArgsSchema = external_exports.object({
+  name: external_exports.string(),
+  newPort: external_exports.number().int()
+}).strict();
+var UpdateProjectPortResultSchema = external_exports.object({
+  project: ProjectMetadataSchema
+}).strict();
+var SetProdUrlArgsSchema = external_exports.object({
+  name: external_exports.string().regex(projectNameRegex),
+  url: external_exports.string().url()
+}).strict();
+var SetProdUrlResultSchema = external_exports.object({
+  project: ProjectMetadataSchema
+}).strict();
+var StartDevServerArgsSchema = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  force: external_exports.boolean().optional()
+}).strict();
+var StartDevServerResultSchema = external_exports.object({
+  project: ProjectMetadataSchema
+}).strict();
+var ASSISTANT_REPORTABLE_STAGES = [
+  "installing",
+  "failed"
+];
+var ReportStageArgsSchema = external_exports.object({
+  sessionId: external_exports.string().min(1),
+  stage: external_exports.enum(ASSISTANT_REPORTABLE_STAGES),
+  /** stage='failed' 时必填的原因（一句话），其它 stage optional */
+  reason: external_exports.string().optional()
+}).strict();
+var ReportStageResultSchema = external_exports.object({
+  ok: external_exports.literal(true)
+}).strict();
+var StopDevServerArgsSchema = external_exports.object({
+  sessionId: external_exports.string().min(1)
+}).strict();
+var StopDevServerResultSchema = external_exports.object({
+  ok: external_exports.literal(true)
+}).strict();
+var AppBuilderProjectUpdatedEventSchema = external_exports.object({
+  type: external_exports.literal("appBuilder:project-updated"),
+  project: ProjectWithStatusSchema,
+  stage: ProjectStageSchema,
+  /** stage='failed' 时的失败原因 */
+  stageReason: external_exports.string().optional()
+}).strict();
+var PublishArgsSchema = external_exports.object({
+  name: external_exports.string().regex(projectNameRegex)
+});
+var PublishResultSchema = external_exports.object({
+  jobId: external_exports.string().min(1),
+  status: external_exports.enum(["started", "already-publishing"])
+}).strict();
+var DismissPublishJobArgsSchema = external_exports.object({
+  name: external_exports.string().regex(projectNameRegex)
+});
+var DismissPublishJobResultSchema = external_exports.object({
+  ok: external_exports.literal(true)
+}).strict();
+var AppBuilderPublishProgressEventSchema = external_exports.object({
+  type: external_exports.literal("appBuilder:publish-progress"),
+  name: external_exports.string().regex(projectNameRegex),
+  jobId: external_exports.string().min(1),
+  stage: external_exports.enum(["build", "deploy", "verify"]),
+  status: external_exports.enum(["started", "completed"])
+}).strict();
+var AppBuilderPublishFailedEventSchema = external_exports.object({
+  type: external_exports.literal("appBuilder:publish-failed"),
+  name: external_exports.string().regex(projectNameRegex),
+  jobId: external_exports.string().min(1),
+  stage: external_exports.enum(["build", "deploy", "verify", "unknown"]),
+  errorSummary: external_exports.string()
+}).strict();
+
+// ../protocol/src/capability.ts
+var ResourceSchema2 = external_exports.discriminatedUnion("type", [
+  external_exports.object({ type: external_exports.literal("persona"), id: external_exports.string().min(1) }).strict(),
+  external_exports.object({ type: external_exports.literal("chat"), id: external_exports.string().min(1) }).strict(),
+  external_exports.object({ type: external_exports.literal("*") }).strict()
+]);
+var ActionSchema = external_exports.enum(["read", "send", "admin"]);
+var GrantSchema = external_exports.object({
+  resource: ResourceSchema2,
+  actions: external_exports.array(ActionSchema).min(1)
+}).strict();
+var CapabilitySchema = external_exports.object({
+  id: external_exports.string().min(1),
+  // sha256(token) hex 64
+  secretHash: external_exports.string().regex(/^[a-f0-9]{64}$/),
+  displayName: external_exports.string(),
+  // 空数组合法 = 纯访客（只能 DM）
+  grants: external_exports.array(GrantSchema),
+  issuedAt: external_exports.number().int().nonnegative(),
+  expiresAt: external_exports.number().int().positive().optional(),
+  maxUses: external_exports.number().int().positive().optional(),
+  usedCount: external_exports.number().int().nonnegative(),
+  /**
+   * guest 在 auth 帧捎带 selfPrincipalId 时由 AuthGate.authenticate 回写；
+   * 未被消费的 cap 此字段缺失。
+   */
+  peerOwnerId: external_exports.string().min(1).optional(),
+  /** 首次 client hello 时间戳（与 peerOwnerId 同步写入） */
+  firstUsedByPeerAt: external_exports.number().int().positive().optional(),
+  /**
+   * 对方 daemon owner 的 displayName，guest auth 帧 selfDisplayName 触发
+   * recordPeerHello 时同步回写。视角 B (2026-05-23) UI 派生联系人列表用此字段
+   * 显示对方名字（避免 fallback 到我颁 cap 时填的 displayName）。
+   */
+  peerDisplayName: external_exports.string().optional()
+}).strict();
+var CapabilityWireSchema = CapabilitySchema.omit({ secretHash: true });
+var CapabilityErrorCodeSchema = external_exports.enum([
+  "TOKEN_INVALID",
+  "TOKEN_REVOKED",
+  "TOKEN_EXPIRED",
+  "TOKEN_EXHAUSTED"
+]);
+var WhoamiResponseSchema = external_exports.object({
+  type: external_exports.literal("whoami:ok"),
+  owner: external_exports.object({
+    id: external_exports.string(),
+    kind: external_exports.enum(["owner", "guest"]),
+    displayName: external_exports.string(),
+    /** 归属人 id（决策 #16：TTC unique_id 等，落 contact.ownerId） */
+    ownerId: external_exports.string(),
+    /** 身份来源（决策 #16：'ttc'/'google'，落 contact.provider） */
+    provider: external_exports.string()
+  }).strict(),
+  capability: CapabilityWireSchema,
+  grantedPersonas: external_exports.array(
+    external_exports.object({
+      id: external_exports.string().min(1),
+      displayName: external_exports.string()
+    }).strict()
+  )
+}).strict();
+var PERSONAL_CAP_GRANTS = Object.freeze([
+  Object.freeze({
+    resource: Object.freeze({ type: "persona", id: "*" }),
+    actions: Object.freeze(["read", "send"])
+  })
+]);
+
+// ../protocol/src/inbox.ts
+var InboxMessageSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  peerDeviceId: external_exports.string().min(1),
+  senderDeviceId: external_exports.string().min(1),
+  text: external_exports.string().min(1),
+  createdAt: external_exports.number().int().nonnegative(),
+  readBy: external_exports.record(external_exports.string().min(1), external_exports.number().int().positive()).default({}),
+  // persona 代发署名（B 版设计）：非空 = 该消息由某 persona 代发，非真人手打。
+  // 缺省 = 真人。routing 身份仍看 senderDeviceId；origin 只用于末端 UI 渲染来源。
+  origin: external_exports.object({ kind: external_exports.literal("persona"), personaId: external_exports.string().min(1) }).optional()
+}).strict();
+var InboxPostMessageArgsSchema = external_exports.object({
+  peerDeviceId: external_exports.string().min(1).optional(),
+  id: external_exports.string().min(1),
+  text: external_exports.string().min(1),
+  createdAt: external_exports.number().int().nonnegative(),
+  // persona 代发署名（跨 daemon forward 时随远程腿透传；真人发缺省）。
+  origin: external_exports.object({ kind: external_exports.literal("persona"), personaId: external_exports.string().min(1) }).optional()
+}).strict();
+var InboxListArgsSchema = external_exports.object({
+  peerDeviceId: external_exports.string().min(1),
+  sinceCreatedAt: external_exports.number().int().nonnegative().optional()
+}).strict();
+var InboxMarkReadArgsSchema = external_exports.object({
+  peerDeviceId: external_exports.string().min(1),
+  upToCreatedAt: external_exports.number().int().nonnegative()
+}).strict();
+var InboxSendDmArgsSchema = external_exports.object({
+  peerDeviceId: external_exports.string().min(1).optional(),
+  text: external_exports.string().min(1)
+});
+
+// ../protocol/src/contact.ts
+var ContactSchema = external_exports.object({
+  /**
+   * 对方设备标识（主键）：对方 daemon 自己生成并持久化的标识（auth.json deviceId，
+   * 如 dev-<uuid>），provider 无关。同 deviceId 重复 upsert 覆盖。
+   */
+  deviceId: external_exports.string().min(1),
+  /**
+   * 归属人 id（决策 #16）：TTC unique_id 等，由 connect token subOwner 签名背书。
+   * 与 provider 一起唯一标识一个人。DM 不再按它路由（路由用 deviceId），仅显示/分组用。
+   */
+  ownerId: external_exports.string().min(1),
+  /** 身份来源（决策 #16）：'ttc'（飞书/手机/邮箱登入 TTC）| 'google' | ...，token 背书 */
+  provider: external_exports.string().min(1),
+  /** 联系人显示名 */
+  displayName: external_exports.string(),
+  /** 该设备可达的 ws/tunnel 地址 */
+  remoteUrl: external_exports.string().min(1),
+  // 自动反向建立联系人（spec 决策 #11）：被连接方本地验票成功后自动落 A 为
+  // 联系人，但它不持有 A 颁发的 token（A 从未给它换票）→ connectToken 为空串。
+  // device:connect 出站路径仍存中心 server 签发的真实 connect token（断线重连复用）。
+  // 不用 .min(1)：自动反向路径合法地存空串，禁止填假 token 占位（不造假数据）。
+  connectToken: external_exports.string(),
+  grants: external_exports.array(GrantSchema),
+  addedAt: external_exports.number().int().nonnegative(),
+  /**
+   * pin 时间戳（ms，Date.now() 语义）；null = 未 pin。sidebar 顶部固定区渲染由此驱动。
+   * 老 contacts.json 缺此字段 → zod default 补 null（无破坏性升级；不 orphan）。
+   * 对齐 SessionFile.pinnedAt 语义（daemon 侧持久化，contact:pin RPC 更新 → contact:pinned push）。
+   */
+  pinnedAt: external_exports.number().int().nullable().default(null),
+  /**
+   * SSH 反向访问授权（PR: contact-ssh-sandbox）。owner 视角：允许该 contact 通过 daemon
+   * 专用 sshd 反向 SSH 进本机。default=false 保证老 contacts.json 兼容（zod default 补齐）。
+   * 授权粒度 per-people (per-contact)：借用别人 persona 本来就带信任对方本人的前提；
+   * 极端场景（区别对方多个 persona）留 per-persona override 演进空间。
+   */
+  sshAllowed: external_exports.boolean().default(false),
+  /**
+   * 授权访问的目录白名单（绝对路径）。空数组 + sshAllowed=true 意味 SSH 通道能拨到但无处可读，
+   * jail 会拒绝 shell 启动。由 clawd-ssh-jail 运行时读，生成 sbpl / bwrap policy 白名单。
+   */
+  exposedDirs: external_exports.array(external_exports.string()).default([])
+}).strict();
+var ContactWireSchema = ContactSchema;
+var ContactRemoveArgsSchema = external_exports.object({
+  deviceId: external_exports.string().min(1)
+}).strict();
+var ContactRemoveOkSchema = external_exports.object({
+  type: external_exports.literal("contact:remove:ok"),
+  deviceId: external_exports.string().min(1)
+}).strict();
+var ContactListOkSchema = external_exports.object({
+  type: external_exports.literal("contact:list:ok"),
+  contacts: external_exports.array(ContactWireSchema)
+}).strict();
+var ContactAddedFrameSchema = external_exports.object({
+  type: external_exports.literal("contact:added"),
+  contact: ContactWireSchema
+}).strict();
+var ContactRemovedFrameSchema = external_exports.object({
+  type: external_exports.literal("contact:removed"),
+  deviceId: external_exports.string().min(1)
+}).strict();
+var ContactPinArgsSchema = external_exports.object({
+  deviceId: external_exports.string().min(1),
+  pinned: external_exports.boolean()
+}).strict();
+var ContactPinOkSchema = external_exports.object({
+  type: external_exports.literal("contact:pin:ok"),
+  deviceId: external_exports.string().min(1),
+  pinnedAt: external_exports.number().int().nullable()
+}).strict();
+var ContactPinnedFrameSchema = external_exports.object({
+  type: external_exports.literal("contact:pinned"),
+  deviceId: external_exports.string().min(1),
+  pinnedAt: external_exports.number().int().nullable()
+}).strict();
+
+// ../protocol/src/contact-ssh.ts
+var ContactSetSshAccessArgsSchema = external_exports.object({
+  deviceId: external_exports.string().min(1),
+  sshAllowed: external_exports.boolean(),
+  exposedDirs: external_exports.array(external_exports.string())
+}).strict();
+var ContactSetSshAccessOkSchema = external_exports.object({
+  type: external_exports.literal("contact:setSshAccess:ok"),
+  deviceId: external_exports.string().min(1),
+  sshAllowed: external_exports.boolean(),
+  exposedDirs: external_exports.array(external_exports.string())
+}).strict();
+var ContactSshKeyIssueArgsSchema = external_exports.object({
+  deviceId: external_exports.string().min(1)
+}).strict();
+var ContactSshKeyIssueOkSchema = external_exports.object({
+  type: external_exports.literal("contact:sshKey:issue:ok"),
+  privateKeyPem: external_exports.string().min(1),
+  publicKeyLine: external_exports.string().min(1)
+}).strict();
+var ContactSshAccessUpdatedFrameSchema = external_exports.object({
+  type: external_exports.literal("contact:ssh-access-updated"),
+  deviceId: external_exports.string().min(1),
+  sshAllowed: external_exports.boolean(),
+  exposedDirs: external_exports.array(external_exports.string())
+}).strict();
+
+// ../protocol/src/extension.ts
+var EXT_ID_REGEX = /^[a-z0-9][a-z0-9-]*$/;
+var ExtensionStateSchema = external_exports.enum([
+  "stopped",
+  "starting",
+  "running",
+  "crashed",
+  "invalid"
+]);
+var LOCALHOST_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1"]);
+function isAllowedHostedUrl(raw) {
+  let u;
+  try {
+    u = new URL(raw);
+  } catch {
+    return false;
+  }
+  if (u.protocol === "https:") return true;
+  if (u.protocol === "http:" && LOCALHOST_HOSTS.has(u.hostname)) return true;
+  return false;
+}
+var ExtensionManifestSchema = external_exports.object({
+  id: external_exports.string().regex(EXT_ID_REGEX),
+  name: external_exports.string().min(1),
+  version: external_exports.string().min(1),
+  apiVersion: external_exports.literal("1"),
+  runtime: external_exports.object({ startCommand: external_exports.string().min(1) }).passthrough().optional(),
+  entry: external_exports.object({
+    url: external_exports.string().url().refine(isAllowedHostedUrl, {
+      message: "INVALID_URL_SCHEME: only https or http://localhost is allowed"
+    })
+  }).strict().optional()
+}).passthrough().superRefine((m, ctx) => {
+  const hasRuntime = !!m.runtime;
+  const hasUrl = !!m.entry?.url;
+  if (hasRuntime && hasUrl) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "INVALID_MANIFEST: entry.url and runtime cannot coexist"
+    });
+  }
+  if (!hasRuntime && !hasUrl) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "INVALID_MANIFEST: must have either entry.url or runtime"
+    });
+  }
+});
+var ExtensionTargetSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({ kind: external_exports.literal("local"), port: external_exports.number().int().min(1).max(65535) }),
+  external_exports.object({ kind: external_exports.literal("hosted"), url: external_exports.string().url() })
+]);
+var ExtensionRecordSchema = external_exports.discriminatedUnion("state", [
+  external_exports.object({
+    extId: external_exports.string(),
+    manifest: ExtensionManifestSchema,
+    state: external_exports.literal("stopped")
+  }),
+  external_exports.object({
+    extId: external_exports.string(),
+    manifest: ExtensionManifestSchema,
+    state: external_exports.literal("starting")
+  }),
+  external_exports.object({
+    extId: external_exports.string(),
+    manifest: ExtensionManifestSchema,
+    state: external_exports.literal("running"),
+    target: ExtensionTargetSchema
+  }),
+  external_exports.object({
+    extId: external_exports.string(),
+    manifest: ExtensionManifestSchema,
+    state: external_exports.literal("crashed")
+  }),
+  external_exports.object({
+    extId: external_exports.string(),
+    manifest: external_exports.unknown().nullable(),
+    state: external_exports.literal("invalid"),
+    invalidReason: external_exports.string().min(1)
+  })
+]);
+var PublishedSnapshotSchema = external_exports.object({
+  snapshotHash: external_exports.string().min(1),
+  version: external_exports.string().min(1),
+  publishedAt: external_exports.number()
+});
+var ChannelRefSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("p2p-tunnel"),
+    ownerPrincipalId: external_exports.string().min(1),
+    extId: external_exports.string().min(1)
+  })
+]);
+var SourceRefSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("p2p-tunnel"),
+    ownerPrincipalId: external_exports.string().min(1),
+    extId: external_exports.string().min(1),
+    snapshotHash: external_exports.string().min(1)
+  })
+]);
+var PublishedExtensionRecordSchema = external_exports.object({
+  extId: external_exports.string().min(1),
+  name: external_exports.string().min(1),
+  version: external_exports.string().min(1),
+  contentHash: external_exports.string().min(1),
+  publishedAt: external_exports.number()
+});
+var PublishCheckSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({ kind: external_exports.literal("clean") }),
+  external_exports.object({
+    kind: external_exports.literal("ready-new-version"),
+    fromVersion: external_exports.string().min(1),
+    toVersion: external_exports.string().min(1)
+  }),
+  external_exports.object({
+    kind: external_exports.literal("error-same-hash"),
+    version: external_exports.string().min(1)
+  }),
+  external_exports.object({
+    kind: external_exports.literal("error-version-not-bumped"),
+    localVersion: external_exports.string().min(1),
+    publishedVersion: external_exports.string().min(1)
+  }),
+  external_exports.object({
+    kind: external_exports.literal("error-version-regression"),
+    localVersion: external_exports.string().min(1),
+    publishedVersion: external_exports.string().min(1)
+  })
+]);
+var PublishStatusResultSchema = external_exports.object({
+  localManifest: external_exports.object({
+    name: external_exports.string().min(1),
+    version: external_exports.string().min(1),
+    contentHash: external_exports.string().min(1)
+  }),
+  publishState: external_exports.discriminatedUnion("kind", [
+    external_exports.object({ kind: external_exports.literal("unpublished") }),
+    external_exports.object({
+      kind: external_exports.literal("published"),
+      version: external_exports.string().min(1),
+      contentHash: external_exports.string().min(1),
+      publishedAt: external_exports.number()
+    })
+  ]),
+  check: PublishCheckSchema
+});
+
+// ../protocol/src/feishu-auth.ts
+var DeviceEntrySchema = external_exports.object({
+  /**
+   * 设备标识（决策 #15：daemon 本地生成的 dev-<uuid>，与人的身份 unionId 无关）。
+   * 中心 server clawd_devices 注册表仅作服务发现（url 下发 + 目录），不在安全路径上。
+   */
+  deviceId: external_exports.string().min(1),
+  /** 显示名 */
+  name: external_exports.string().min(1),
+  /** ws/tunnel 地址 */
+  url: external_exports.string().min(1)
+});
+var DeviceListResponseSchema = external_exports.object({
+  type: external_exports.literal("device:list:ok"),
+  devices: external_exports.array(DeviceEntrySchema)
+});
+var DeviceConnectArgsSchema = external_exports.object({
+  /** 目标设备的 deviceId（对方 daemon 生成的 dev-<uuid>） */
+  deviceId: external_exports.string().min(1),
+  /**
+   * 目标设备的 ws/tunnel 地址（可选）：
+   *   - 公开目录点击：带 url（device:list 已下发，省一次 server 查询）
+   *   - 凭 deviceId 连接：缺省 url → daemon exchange 时由中心 server 下发该设备上报的 url
+   *   - 注册表不在安全路径上：知道对方 url 时显式传入即可连接（不依赖中心 server 服务发现）
+   */
+  url: external_exports.string().min(1).optional(),
+  /** 显示名（公共设备来自目录；缺省时连上后用 whoami 回填） */
+  name: external_exports.string().optional()
+});
+var DeviceConnectResponseSchema = external_exports.object({
+  type: external_exports.literal("device:connect:ok"),
+  /** 连接的目标设备标识（= 请求 args.deviceId） */
+  deviceId: external_exports.string(),
+  name: external_exports.string(),
+  url: external_exports.string()
+});
+var FeishuIdentitySchema = external_exports.object({
+  /** 归属人 id（决策 #16：TTC unique_id，取代飞书 union_id；跨登录方式稳定） */
+  ownerId: external_exports.string().min(1),
+  /** 身份来源：'ttc'（飞书/手机/邮箱登入 TTC）| 'google' | ...（决策 #16，拓展用） */
+  provider: external_exports.string().min(1),
+  /** 显示名。TTC user_info 接口 data.name */
+  displayName: external_exports.string().min(1),
+  /** TTC user_info 接口 data.avatar_url，可缺省 */
+  avatarUrl: external_exports.string().optional(),
+  /** TTC user_info 接口 data.union_id（飞书 union_id；dataclaw 可信入口 X-User-UnionId 用），可缺省 */
+  unionId: external_exports.string().optional()
+});
+var AuthLoginStartResponseSchema = external_exports.object({
+  type: external_exports.literal("auth:login:start:ok"),
+  /** 完整 TTC 授权页 URL（含 callback_url + state + auto=1），UI 直接 window.open */
+  authUrl: external_exports.string().min(1),
+  /** 防 CSRF 的一次性 nonce；回调时 daemon 校验 */
+  state: external_exports.string().min(1)
+});
+var AuthGetIdentityResponseSchema = external_exports.object({
+  type: external_exports.literal("auth:getIdentity:ok"),
+  /** null = 未登录 */
+  identity: FeishuIdentitySchema.nullable(),
+  /**
+   * 本机设备标识（决策 #15：daemon 生成并持久化在 auth.json，如 dev-<uuid>）。
+   * 设备属性，与登录态无关、登录登出不变。UI"我的设备标识"用它拼
+   * clawos://device/<deviceId>（替代旧的 unionId——不再向外暴露人的身份标识）。
+   */
+  deviceId: external_exports.string().min(1)
+});
+var AuthLogoutResponseSchema = external_exports.object({
+  type: external_exports.literal("auth:logout:ok")
+});
+var AuthLoginDoneEventSchema = external_exports.object({
+  type: external_exports.literal("auth:login:done"),
+  identity: FeishuIdentitySchema
+});
+var AuthLoginFailedEventSchema = external_exports.object({
+  type: external_exports.literal("auth:login:failed"),
+  reason: external_exports.string()
+});
+
+// ../protocol/src/dispatch.ts
+var DispatchOutcomeSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("success"),
+    text: external_exports.string(),
+    filePaths: external_exports.array(external_exports.string()).optional()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("failure"),
+    reason: external_exports.string()
+  })
+]);
+var DispatchRunArgsSchema = external_exports.object({
+  targetPersona: external_exports.string().min(1),
+  prompt: external_exports.string(),
+  // 跨设备 dispatch：非空 = A 角色，转发到该 contact deviceId 的 peer daemon；
+  // 省略 = 本地 dispatch / B 角色本地执行。A 转发给 B 时 body 不带此字段。
+  targetDeviceId: external_exports.string().min(1).optional(),
+  // 可选：override B session 使用的 claude 模型。缺省 = 用 persona 默认。
+  // 合法值集与 claude adapter capabilities.models[].id 一致（见 daemon
+  // tools/claude.ts CLAUDE_MODEL_IDS）；handler 层做二次校验，非法值 fail-fast。
+  // protocol 层保持 string 便于未来跨 tool 扩展（届时 union 收合法字面量）。
+  model: external_exports.string().min(1).optional()
+});
+var DispatchCompleteArgsSchema = external_exports.object({
+  dispatchId: external_exports.string().min(1),
+  outcome: DispatchOutcomeSchema
+});
+
+// ../protocol/src/log.ts
+var LOG_SOURCES = ["daemon", "main", "renderer"];
+var LogSourceSchema = external_exports.enum(LOG_SOURCES);
+var LOG_LEVELS = ["debug", "info", "warn", "error"];
+var LogLevelSchema = external_exports.enum(LOG_LEVELS);
+var LogRecordSchema = external_exports.object({
+  ts: external_exports.number().int(),
+  source: LogSourceSchema,
+  level: LogLevelSchema,
+  msg: external_exports.string(),
+  ownerPrincipalId: external_exports.string(),
+  deviceId: external_exports.string(),
+  appVersion: external_exports.string(),
+  daemonVersion: external_exports.string().optional(),
+  os: external_exports.string(),
+  meta_json: external_exports.string().optional(),
+  sessionId: external_exports.string().optional()
+});
+
+// ../protocol/src/visitor-schemas.ts
+var VisitorTokenPayloadSchema = external_exports.object({
+  v: external_exports.literal(1),
+  visitorId: external_exports.string().min(1),
+  displayName: external_exports.string(),
+  provider: external_exports.string(),
+  iat: external_exports.number(),
+  exp: external_exports.number()
+});
+var VisitorRecordSchema = external_exports.object({
+  visitorId: external_exports.string(),
+  displayName: external_exports.string(),
+  avatarUrl: external_exports.string().optional(),
+  provider: external_exports.string(),
+  firstSeen: external_exports.number(),
+  lastSeen: external_exports.number()
+});
+var VisitorListResultSchema = external_exports.object({ visitors: external_exports.array(VisitorRecordSchema) });
+
+// src/tools/claude-history.ts
+var import_node_fs = __toESM(require("fs"), 1);
+var import_node_os = __toESM(require("os"), 1);
+var import_node_path = __toESM(require("path"), 1);
+
+// ../node_modules/.pnpm/diff@7.0.0/node_modules/diff/lib/index.mjs
+function Diff() {
+}
+Diff.prototype = {
+  diff: function diff(oldString, newString) {
+    var _options$timeout;
+    var options = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : {};
+    var callback = options.callback;
+    if (typeof options === "function") {
+      callback = options;
+      options = {};
+    }
+    var self = this;
+    function done(value) {
+      value = self.postProcess(value, options);
+      if (callback) {
+        setTimeout(function() {
+          callback(value);
+        }, 0);
+        return true;
+      } else {
+        return value;
+      }
+    }
+    oldString = this.castInput(oldString, options);
+    newString = this.castInput(newString, options);
+    oldString = this.removeEmpty(this.tokenize(oldString, options));
+    newString = this.removeEmpty(this.tokenize(newString, options));
+    var newLen = newString.length, oldLen = oldString.length;
+    var editLength = 1;
+    var maxEditLength = newLen + oldLen;
+    if (options.maxEditLength != null) {
+      maxEditLength = Math.min(maxEditLength, options.maxEditLength);
+    }
+    var maxExecutionTime = (_options$timeout = options.timeout) !== null && _options$timeout !== void 0 ? _options$timeout : Infinity;
+    var abortAfterTimestamp = Date.now() + maxExecutionTime;
+    var bestPath = [{
+      oldPos: -1,
+      lastComponent: void 0
+    }];
+    var newPos = this.extractCommon(bestPath[0], newString, oldString, 0, options);
+    if (bestPath[0].oldPos + 1 >= oldLen && newPos + 1 >= newLen) {
+      return done(buildValues(self, bestPath[0].lastComponent, newString, oldString, self.useLongestToken));
+    }
+    var minDiagonalToConsider = -Infinity, maxDiagonalToConsider = Infinity;
+    function execEditLength() {
+      for (var diagonalPath = Math.max(minDiagonalToConsider, -editLength); diagonalPath <= Math.min(maxDiagonalToConsider, editLength); diagonalPath += 2) {
+        var basePath = void 0;
+        var removePath = bestPath[diagonalPath - 1], addPath = bestPath[diagonalPath + 1];
+        if (removePath) {
+          bestPath[diagonalPath - 1] = void 0;
+        }
+        var canAdd = false;
+        if (addPath) {
+          var addPathNewPos = addPath.oldPos - diagonalPath;
+          canAdd = addPath && 0 <= addPathNewPos && addPathNewPos < newLen;
+        }
+        var canRemove = removePath && removePath.oldPos + 1 < oldLen;
+        if (!canAdd && !canRemove) {
+          bestPath[diagonalPath] = void 0;
+          continue;
+        }
+        if (!canRemove || canAdd && removePath.oldPos < addPath.oldPos) {
+          basePath = self.addToPath(addPath, true, false, 0, options);
+        } else {
+          basePath = self.addToPath(removePath, false, true, 1, options);
+        }
+        newPos = self.extractCommon(basePath, newString, oldString, diagonalPath, options);
+        if (basePath.oldPos + 1 >= oldLen && newPos + 1 >= newLen) {
+          return done(buildValues(self, basePath.lastComponent, newString, oldString, self.useLongestToken));
+        } else {
+          bestPath[diagonalPath] = basePath;
+          if (basePath.oldPos + 1 >= oldLen) {
+            maxDiagonalToConsider = Math.min(maxDiagonalToConsider, diagonalPath - 1);
+          }
+          if (newPos + 1 >= newLen) {
+            minDiagonalToConsider = Math.max(minDiagonalToConsider, diagonalPath + 1);
+          }
+        }
+      }
+      editLength++;
+    }
+    if (callback) {
+      (function exec() {
+        setTimeout(function() {
+          if (editLength > maxEditLength || Date.now() > abortAfterTimestamp) {
+            return callback();
+          }
+          if (!execEditLength()) {
+            exec();
+          }
+        }, 0);
+      })();
+    } else {
+      while (editLength <= maxEditLength && Date.now() <= abortAfterTimestamp) {
+        var ret = execEditLength();
+        if (ret) {
+          return ret;
+        }
+      }
+    }
+  },
+  addToPath: function addToPath(path2, added, removed, oldPosInc, options) {
+    var last = path2.lastComponent;
+    if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
+      return {
+        oldPos: path2.oldPos + oldPosInc,
+        lastComponent: {
+          count: last.count + 1,
+          added,
+          removed,
+          previousComponent: last.previousComponent
+        }
+      };
+    } else {
+      return {
+        oldPos: path2.oldPos + oldPosInc,
+        lastComponent: {
+          count: 1,
+          added,
+          removed,
+          previousComponent: last
+        }
+      };
+    }
+  },
+  extractCommon: function extractCommon(basePath, newString, oldString, diagonalPath, options) {
+    var newLen = newString.length, oldLen = oldString.length, oldPos = basePath.oldPos, newPos = oldPos - diagonalPath, commonCount = 0;
+    while (newPos + 1 < newLen && oldPos + 1 < oldLen && this.equals(oldString[oldPos + 1], newString[newPos + 1], options)) {
+      newPos++;
+      oldPos++;
+      commonCount++;
+      if (options.oneChangePerToken) {
+        basePath.lastComponent = {
+          count: 1,
+          previousComponent: basePath.lastComponent,
+          added: false,
+          removed: false
+        };
+      }
+    }
+    if (commonCount && !options.oneChangePerToken) {
+      basePath.lastComponent = {
+        count: commonCount,
+        previousComponent: basePath.lastComponent,
+        added: false,
+        removed: false
+      };
+    }
+    basePath.oldPos = oldPos;
+    return newPos;
+  },
+  equals: function equals(left, right, options) {
+    if (options.comparator) {
+      return options.comparator(left, right);
+    } else {
+      return left === right || options.ignoreCase && left.toLowerCase() === right.toLowerCase();
+    }
+  },
+  removeEmpty: function removeEmpty(array2) {
+    var ret = [];
+    for (var i = 0; i < array2.length; i++) {
+      if (array2[i]) {
+        ret.push(array2[i]);
+      }
+    }
+    return ret;
+  },
+  castInput: function castInput(value) {
+    return value;
+  },
+  tokenize: function tokenize(value) {
+    return Array.from(value);
+  },
+  join: function join(chars) {
+    return chars.join("");
+  },
+  postProcess: function postProcess(changeObjects) {
+    return changeObjects;
+  }
+};
+function buildValues(diff2, lastComponent, newString, oldString, useLongestToken) {
+  var components = [];
+  var nextComponent;
+  while (lastComponent) {
+    components.push(lastComponent);
+    nextComponent = lastComponent.previousComponent;
+    delete lastComponent.previousComponent;
+    lastComponent = nextComponent;
+  }
+  components.reverse();
+  var componentPos = 0, componentLen = components.length, newPos = 0, oldPos = 0;
+  for (; componentPos < componentLen; componentPos++) {
+    var component = components[componentPos];
+    if (!component.removed) {
+      if (!component.added && useLongestToken) {
+        var value = newString.slice(newPos, newPos + component.count);
+        value = value.map(function(value2, i) {
+          var oldValue = oldString[oldPos + i];
+          return oldValue.length > value2.length ? oldValue : value2;
+        });
+        component.value = diff2.join(value);
+      } else {
+        component.value = diff2.join(newString.slice(newPos, newPos + component.count));
+      }
+      newPos += component.count;
+      if (!component.added) {
+        oldPos += component.count;
+      }
+    } else {
+      component.value = diff2.join(oldString.slice(oldPos, oldPos + component.count));
+      oldPos += component.count;
+    }
+  }
+  return components;
+}
+var characterDiff = new Diff();
+function longestCommonPrefix(str1, str2) {
+  var i;
+  for (i = 0; i < str1.length && i < str2.length; i++) {
+    if (str1[i] != str2[i]) {
+      return str1.slice(0, i);
+    }
+  }
+  return str1.slice(0, i);
+}
+function longestCommonSuffix(str1, str2) {
+  var i;
+  if (!str1 || !str2 || str1[str1.length - 1] != str2[str2.length - 1]) {
+    return "";
+  }
+  for (i = 0; i < str1.length && i < str2.length; i++) {
+    if (str1[str1.length - (i + 1)] != str2[str2.length - (i + 1)]) {
+      return str1.slice(-i);
+    }
+  }
+  return str1.slice(-i);
+}
+function replacePrefix(string3, oldPrefix, newPrefix) {
+  if (string3.slice(0, oldPrefix.length) != oldPrefix) {
+    throw Error("string ".concat(JSON.stringify(string3), " doesn't start with prefix ").concat(JSON.stringify(oldPrefix), "; this is a bug"));
+  }
+  return newPrefix + string3.slice(oldPrefix.length);
+}
+function replaceSuffix(string3, oldSuffix, newSuffix) {
+  if (!oldSuffix) {
+    return string3 + newSuffix;
+  }
+  if (string3.slice(-oldSuffix.length) != oldSuffix) {
+    throw Error("string ".concat(JSON.stringify(string3), " doesn't end with suffix ").concat(JSON.stringify(oldSuffix), "; this is a bug"));
+  }
+  return string3.slice(0, -oldSuffix.length) + newSuffix;
+}
+function removePrefix(string3, oldPrefix) {
+  return replacePrefix(string3, oldPrefix, "");
+}
+function removeSuffix(string3, oldSuffix) {
+  return replaceSuffix(string3, oldSuffix, "");
+}
+function maximumOverlap(string1, string22) {
+  return string22.slice(0, overlapCount(string1, string22));
+}
+function overlapCount(a, b) {
+  var startA = 0;
+  if (a.length > b.length) {
+    startA = a.length - b.length;
+  }
+  var endB = b.length;
+  if (a.length < b.length) {
+    endB = a.length;
+  }
+  var map = Array(endB);
+  var k = 0;
+  map[0] = 0;
+  for (var j = 1; j < endB; j++) {
+    if (b[j] == b[k]) {
+      map[j] = map[k];
+    } else {
+      map[j] = k;
+    }
+    while (k > 0 && b[j] != b[k]) {
+      k = map[k];
+    }
+    if (b[j] == b[k]) {
+      k++;
+    }
+  }
+  k = 0;
+  for (var i = startA; i < a.length; i++) {
+    while (k > 0 && a[i] != b[k]) {
+      k = map[k];
+    }
+    if (a[i] == b[k]) {
+      k++;
+    }
+  }
+  return k;
+}
+var extendedWordChars = "a-zA-Z0-9_\\u{C0}-\\u{FF}\\u{D8}-\\u{F6}\\u{F8}-\\u{2C6}\\u{2C8}-\\u{2D7}\\u{2DE}-\\u{2FF}\\u{1E00}-\\u{1EFF}";
+var tokenizeIncludingWhitespace = new RegExp("[".concat(extendedWordChars, "]+|\\s+|[^").concat(extendedWordChars, "]"), "ug");
+var wordDiff = new Diff();
+wordDiff.equals = function(left, right, options) {
+  if (options.ignoreCase) {
+    left = left.toLowerCase();
+    right = right.toLowerCase();
+  }
+  return left.trim() === right.trim();
+};
+wordDiff.tokenize = function(value) {
+  var options = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {};
+  var parts;
+  if (options.intlSegmenter) {
+    if (options.intlSegmenter.resolvedOptions().granularity != "word") {
+      throw new Error('The segmenter passed must have a granularity of "word"');
+    }
+    parts = Array.from(options.intlSegmenter.segment(value), function(segment) {
+      return segment.segment;
+    });
+  } else {
+    parts = value.match(tokenizeIncludingWhitespace) || [];
+  }
+  var tokens = [];
+  var prevPart = null;
+  parts.forEach(function(part) {
+    if (/\s/.test(part)) {
+      if (prevPart == null) {
+        tokens.push(part);
+      } else {
+        tokens.push(tokens.pop() + part);
+      }
+    } else if (/\s/.test(prevPart)) {
+      if (tokens[tokens.length - 1] == prevPart) {
+        tokens.push(tokens.pop() + part);
+      } else {
+        tokens.push(prevPart + part);
+      }
+    } else {
+      tokens.push(part);
+    }
+    prevPart = part;
+  });
+  return tokens;
+};
+wordDiff.join = function(tokens) {
+  return tokens.map(function(token, i) {
+    if (i == 0) {
+      return token;
+    } else {
+      return token.replace(/^\s+/, "");
+    }
+  }).join("");
+};
+wordDiff.postProcess = function(changes, options) {
+  if (!changes || options.oneChangePerToken) {
+    return changes;
+  }
+  var lastKeep = null;
+  var insertion = null;
+  var deletion = null;
+  changes.forEach(function(change) {
+    if (change.added) {
+      insertion = change;
+    } else if (change.removed) {
+      deletion = change;
+    } else {
+      if (insertion || deletion) {
+        dedupeWhitespaceInChangeObjects(lastKeep, deletion, insertion, change);
+      }
+      lastKeep = change;
+      insertion = null;
+      deletion = null;
+    }
+  });
+  if (insertion || deletion) {
+    dedupeWhitespaceInChangeObjects(lastKeep, deletion, insertion, null);
+  }
+  return changes;
+};
+function dedupeWhitespaceInChangeObjects(startKeep, deletion, insertion, endKeep) {
+  if (deletion && insertion) {
+    var oldWsPrefix = deletion.value.match(/^\s*/)[0];
+    var oldWsSuffix = deletion.value.match(/\s*$/)[0];
+    var newWsPrefix = insertion.value.match(/^\s*/)[0];
+    var newWsSuffix = insertion.value.match(/\s*$/)[0];
+    if (startKeep) {
+      var commonWsPrefix = longestCommonPrefix(oldWsPrefix, newWsPrefix);
+      startKeep.value = replaceSuffix(startKeep.value, newWsPrefix, commonWsPrefix);
+      deletion.value = removePrefix(deletion.value, commonWsPrefix);
+      insertion.value = removePrefix(insertion.value, commonWsPrefix);
+    }
+    if (endKeep) {
+      var commonWsSuffix = longestCommonSuffix(oldWsSuffix, newWsSuffix);
+      endKeep.value = replacePrefix(endKeep.value, newWsSuffix, commonWsSuffix);
+      deletion.value = removeSuffix(deletion.value, commonWsSuffix);
+      insertion.value = removeSuffix(insertion.value, commonWsSuffix);
+    }
+  } else if (insertion) {
+    if (startKeep) {
+      insertion.value = insertion.value.replace(/^\s*/, "");
+    }
+    if (endKeep) {
+      endKeep.value = endKeep.value.replace(/^\s*/, "");
+    }
+  } else if (startKeep && endKeep) {
+    var newWsFull = endKeep.value.match(/^\s*/)[0], delWsStart = deletion.value.match(/^\s*/)[0], delWsEnd = deletion.value.match(/\s*$/)[0];
+    var newWsStart = longestCommonPrefix(newWsFull, delWsStart);
+    deletion.value = removePrefix(deletion.value, newWsStart);
+    var newWsEnd = longestCommonSuffix(removePrefix(newWsFull, newWsStart), delWsEnd);
+    deletion.value = removeSuffix(deletion.value, newWsEnd);
+    endKeep.value = replacePrefix(endKeep.value, newWsFull, newWsEnd);
+    startKeep.value = replaceSuffix(startKeep.value, newWsFull, newWsFull.slice(0, newWsFull.length - newWsEnd.length));
+  } else if (endKeep) {
+    var endKeepWsPrefix = endKeep.value.match(/^\s*/)[0];
+    var deletionWsSuffix = deletion.value.match(/\s*$/)[0];
+    var overlap = maximumOverlap(deletionWsSuffix, endKeepWsPrefix);
+    deletion.value = removeSuffix(deletion.value, overlap);
+  } else if (startKeep) {
+    var startKeepWsSuffix = startKeep.value.match(/\s*$/)[0];
+    var deletionWsPrefix = deletion.value.match(/^\s*/)[0];
+    var _overlap = maximumOverlap(startKeepWsSuffix, deletionWsPrefix);
+    deletion.value = removePrefix(deletion.value, _overlap);
+  }
+}
+var wordWithSpaceDiff = new Diff();
+wordWithSpaceDiff.tokenize = function(value) {
+  var regex = new RegExp("(\\r?\\n)|[".concat(extendedWordChars, "]+|[^\\S\\n\\r]+|[^").concat(extendedWordChars, "]"), "ug");
+  return value.match(regex) || [];
+};
+var lineDiff = new Diff();
+lineDiff.tokenize = function(value, options) {
+  if (options.stripTrailingCr) {
+    value = value.replace(/\r\n/g, "\n");
+  }
+  var retLines = [], linesAndNewlines = value.split(/(\n|\r\n)/);
+  if (!linesAndNewlines[linesAndNewlines.length - 1]) {
+    linesAndNewlines.pop();
+  }
+  for (var i = 0; i < linesAndNewlines.length; i++) {
+    var line = linesAndNewlines[i];
+    if (i % 2 && !options.newlineIsToken) {
+      retLines[retLines.length - 1] += line;
+    } else {
+      retLines.push(line);
+    }
+  }
+  return retLines;
+};
+lineDiff.equals = function(left, right, options) {
+  if (options.ignoreWhitespace) {
+    if (!options.newlineIsToken || !left.includes("\n")) {
+      left = left.trim();
+    }
+    if (!options.newlineIsToken || !right.includes("\n")) {
+      right = right.trim();
+    }
+  } else if (options.ignoreNewlineAtEof && !options.newlineIsToken) {
+    if (left.endsWith("\n")) {
+      left = left.slice(0, -1);
+    }
+    if (right.endsWith("\n")) {
+      right = right.slice(0, -1);
+    }
+  }
+  return Diff.prototype.equals.call(this, left, right, options);
+};
+var sentenceDiff = new Diff();
+sentenceDiff.tokenize = function(value) {
+  return value.split(/(\S.+?[.!?])(?=\s+|$)/);
+};
+var cssDiff = new Diff();
+cssDiff.tokenize = function(value) {
+  return value.split(/([{}:;,]|\s+)/);
+};
+function _typeof(o) {
+  "@babel/helpers - typeof";
+  return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(o2) {
+    return typeof o2;
+  } : function(o2) {
+    return o2 && "function" == typeof Symbol && o2.constructor === Symbol && o2 !== Symbol.prototype ? "symbol" : typeof o2;
+  }, _typeof(o);
+}
+var jsonDiff = new Diff();
+jsonDiff.useLongestToken = true;
+jsonDiff.tokenize = lineDiff.tokenize;
+jsonDiff.castInput = function(value, options) {
+  var undefinedReplacement = options.undefinedReplacement, _options$stringifyRep = options.stringifyReplacer, stringifyReplacer = _options$stringifyRep === void 0 ? function(k, v) {
+    return typeof v === "undefined" ? undefinedReplacement : v;
+  } : _options$stringifyRep;
+  return typeof value === "string" ? value : JSON.stringify(canonicalize(value, null, null, stringifyReplacer), stringifyReplacer, "  ");
+};
+jsonDiff.equals = function(left, right, options) {
+  return Diff.prototype.equals.call(jsonDiff, left.replace(/,([\r\n])/g, "$1"), right.replace(/,([\r\n])/g, "$1"), options);
+};
+function canonicalize(obj, stack, replacementStack, replacer, key) {
+  stack = stack || [];
+  replacementStack = replacementStack || [];
+  if (replacer) {
+    obj = replacer(key, obj);
+  }
+  var i;
+  for (i = 0; i < stack.length; i += 1) {
+    if (stack[i] === obj) {
+      return replacementStack[i];
+    }
+  }
+  var canonicalizedObj;
+  if ("[object Array]" === Object.prototype.toString.call(obj)) {
+    stack.push(obj);
+    canonicalizedObj = new Array(obj.length);
+    replacementStack.push(canonicalizedObj);
+    for (i = 0; i < obj.length; i += 1) {
+      canonicalizedObj[i] = canonicalize(obj[i], stack, replacementStack, replacer, key);
+    }
+    stack.pop();
+    replacementStack.pop();
+    return canonicalizedObj;
+  }
+  if (obj && obj.toJSON) {
+    obj = obj.toJSON();
+  }
+  if (_typeof(obj) === "object" && obj !== null) {
+    stack.push(obj);
+    canonicalizedObj = {};
+    replacementStack.push(canonicalizedObj);
+    var sortedKeys = [], _key;
+    for (_key in obj) {
+      if (Object.prototype.hasOwnProperty.call(obj, _key)) {
+        sortedKeys.push(_key);
+      }
+    }
+    sortedKeys.sort();
+    for (i = 0; i < sortedKeys.length; i += 1) {
+      _key = sortedKeys[i];
+      canonicalizedObj[_key] = canonicalize(obj[_key], stack, replacementStack, replacer, _key);
+    }
+    stack.pop();
+    replacementStack.pop();
+  } else {
+    canonicalizedObj = obj;
+  }
+  return canonicalizedObj;
+}
+var arrayDiff = new Diff();
+arrayDiff.tokenize = function(value) {
+  return value.slice();
+};
+arrayDiff.join = arrayDiff.removeEmpty = function(value) {
+  return value;
+};
+
+// src/tools/claude.ts
+var CLAUDE_MODEL_IDS = ["opus", "fable", "sonnet", "haiku"];
+var CLAUDE_MODELS = [
+  { id: "", label: "Default", description: "CLI default model", contextWindowSize: 1e6, default: true },
+  { id: "opus", label: "Opus", description: "Most capable", contextWindowSize: 1e6 },
+  { id: "fable", label: "Fable", contextWindowSize: 1e6 },
+  { id: "sonnet", label: "Sonnet", description: "Fast, balanced", contextWindowSize: 1e6 },
+  { id: "haiku", label: "Haiku", description: "Fastest, lightest", contextWindowSize: 1e6 }
+];
+var _assertModelIdsAligned = CLAUDE_MODELS.filter(
+  (m) => m.id !== ""
+).map((m) => m.id);
+var CLAUDE_PERMISSION_MODES = [
+  { id: "", label: "Default", description: "Ask for every tool call" },
+  { id: "plan", label: "Plan", description: "Read-only, no code changes" },
+  { id: "bypassPermissions", label: "YOLO", description: "Skip all permission checks" }
+];
+var CLAUDE_CAPABILITIES = {
+  tool: "claude",
+  toolSessionIdLabel: "Claude Session ID",
+  models: CLAUDE_MODELS,
+  permissionModes: CLAUDE_PERMISSION_MODES,
+  features: { rewind: true, subagents: true, tui: true, observe: true, fileSharing: true, fork: true },
+  configSchema: [
+    {
+      name: "model",
+      type: "select",
+      label: "Model",
+      scope: "core",
+      options: CLAUDE_MODELS.map((m) => ({ value: m.id, label: m.label, description: m.description })),
+      default: ""
+    },
+    {
+      name: "permissionMode",
+      type: "select",
+      label: "Permission Mode",
+      scope: "core",
+      options: CLAUDE_PERMISSION_MODES.map((m) => ({ value: m.id, label: m.label, description: m.description })),
+      default: ""
+    },
+    {
+      name: "effort",
+      type: "select",
+      label: "Effort",
+      description: "Reasoning effort level",
+      scope: "tool-specific",
+      // CC `--effort` 值域（claude --help, 2.1.187）：low / medium / high / xhigh / max。
+      // '' = 不传 --effort，用 CLI 默认。
+      options: [
+        { value: "", label: "Default" },
+        { value: "low", label: "Low" },
+        { value: "medium", label: "Medium" },
+        { value: "high", label: "High" },
+        { value: "xhigh", label: "Extra high" },
+        { value: "max", label: "Max" }
+      ],
+      default: ""
+    }
+  ]
+};
+
+// src/dispatch/mcp-server.ts
 var LONG_WAIT_AGENT_OPTIONS = {
   headersTimeout: 0,
   bodyTimeout: 0,
@@ -39534,7 +41738,7 @@ function log(msg, info) {
 `;
   if (DISPATCH_LOG) {
     try {
-      import_node_fs.default.appendFileSync(DISPATCH_LOG, line);
+      import_node_fs3.default.appendFileSync(DISPATCH_LOG, line);
       return;
     } catch {
     }
@@ -39578,7 +41782,10 @@ async function handlePersonaDispatchToolCall(input, ctx) {
         targetPersona: input.targetPersona,
         prompt: input.prompt,
         // 跨设备：非空时透传，daemon run handler 据此走 A 角色转发分支。
-        ...input.targetDeviceId ? { targetDeviceId: input.targetDeviceId } : {}
+        ...input.targetDeviceId ? { targetDeviceId: input.targetDeviceId } : {},
+        // T-20: 可选 override B session 使用的 claude 模型；MCP tool 层已 enum 校验，
+        // daemon handler 层还会再校验一次（fail-fast）。
+        ...input.model ? { model: input.model } : {}
       })
     });
   } catch (err) {
@@ -39713,6 +41920,11 @@ async function main() {
         ),
         targetDeviceId: external_exports.string().optional().describe(
           "contact deviceId of the remote device when delegating cross-device (omit for a local persona)"
+        ),
+        // T-20: dispatch model override. Enum 走 MCP tool JSON schema 硬约束，
+        // caller LLM 只能从可选值挑，避免瞎填历史模型名。
+        model: external_exports.enum(CLAUDE_MODEL_IDS).optional().describe(
+          "override the target persona's default claude model. Omit to use the persona default. Allowed: " + CLAUDE_MODEL_IDS.join(" / ") + "."
         )
       }
     },