@clawos-dev/clawd 0.2.250 → 0.2.252

package/dist/cli.cjs

@@ -148,12 +148,6 @@ var init_methods = __esm({
       "attachment.groupAdd",
       "attachment.groupRemove",
       "attachment.groupList",
-      // ---- capability:* (capability platform 鉴权底座) ----
-      // 飞书统一身份 Phase 2 (2026-06-01, spec 决策 #12): personal token / 邀请码全链路删除——
-      // device:connect 已完整替代（中心 server 签发自包含 connect token）。capability:list / capability:delete
-      // 保留：调试 + whoami 反查 + 撤销级联 + 清旧 per-peer cap。personal-cap:get 已下线。
-      "capability:list",
-      "capability:delete",
       // ---- inbox:* (capability platform Phase 3 跨用户通知 + Phase 4 DM) ----
       // owner 接 guest 的 cross-principal 消息事件 + DM 双向私聊.
       // inbox:list / markRead: admin-only (Phase 3); inbox:postMessage: DM 自带能力,
@@ -751,8 +745,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path71, errorMaps, issueData } = params;
-      const fullPath = [...path71, ...issueData.path || []];
+      const { data, path: path74, errorMaps, issueData } = params;
+      const fullPath = [...path74, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -1063,11 +1057,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path71, key) {
+      constructor(parent, value, path74, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path71;
+        this._path = path74;
         this._key = key;
       }
       get path() {
@@ -5643,11 +5637,7 @@ var init_persona_mode = __esm({
 });
 
 // ../protocol/src/capability.ts
-function stripSecretHash(cap) {
-  const { secretHash: _hash, ...wire } = cap;
-  return wire;
-}
-var ResourceSchema, ActionSchema, GrantSchema, CapabilitySchema, CapabilityWireSchema, CapabilityErrorCodeSchema, WhoamiResponseSchema, PERSONAL_CAP_GRANTS;
+var ResourceSchema, ActionSchema, GrantSchema, CapabilitySchema, CapabilityWireSchema, WhoamiResponseSchema, PERSONAL_CAP_GRANTS;
 var init_capability = __esm({
   "../protocol/src/capability.ts"() {
     "use strict";
@@ -5688,12 +5678,6 @@ var init_capability = __esm({
       peerDisplayName: external_exports.string().optional()
     }).strict();
     CapabilityWireSchema = CapabilitySchema.omit({ secretHash: true });
-    CapabilityErrorCodeSchema = external_exports.enum([
-      "TOKEN_INVALID",
-      "TOKEN_REVOKED",
-      "TOKEN_EXPIRED",
-      "TOKEN_EXHAUSTED"
-    ]);
     WhoamiResponseSchema = external_exports.object({
       type: external_exports.literal("whoami:ok"),
       owner: external_exports.object({
@@ -6099,9 +6083,6 @@ var init_feishu_auth = __esm({
     "use strict";
     init_zod();
     FEISHU_GATED_METHODS = [
-      // capability（调试 / 撤销，仍属远程身份体系）
-      "capability:list",
-      "capability:delete",
       // 联系人列表（device:connect 落同一 store；list 读 / remove 删）
       "contact:list",
       "contact:remove",
@@ -6615,8 +6596,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path71 = req.path;
-        _req.url = typeof path71 === "string" ? path71 : req.url ? req.url.path || req.url : void 0;
+        const path74 = req.path;
+        _req.url = typeof path74 === "string" ? path74 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -6781,14 +6762,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path71) {
+    function parsePath(path74) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path71.length; i++) {
-        const char = path71[i];
+      for (let i = 0; i < path74.length; i++) {
+        const char = path74[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -6919,10 +6900,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path71 of paths) {
-        const parts = parsePath(path71);
+      for (const path74 of paths) {
+        const parts = parsePath(path74);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path71, remove);
+          redactWildcardPath(obj, parts, censor, path74, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -7007,8 +6988,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path71) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path71];
+            const wrappedCensor = typeof censor === "function" ? (value, path74) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path74];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -7043,8 +7024,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path71 of pathsToClone) {
-        const parts = parsePath(path71);
+      for (const path74 of pathsToClone) {
+        const parts = parsePath(path74);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -7096,24 +7077,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path71) {
-      if (typeof path71 !== "string") {
+    function validatePath(path74) {
+      if (typeof path74 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path71 === "") {
+      if (path74 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path71.includes("..")) {
-        throw new Error(`Invalid redaction path (${path71})`);
+      if (path74.includes("..")) {
+        throw new Error(`Invalid redaction path (${path74})`);
       }
-      if (path71.includes(",")) {
-        throw new Error(`Invalid redaction path (${path71})`);
+      if (path74.includes(",")) {
+        throw new Error(`Invalid redaction path (${path74})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path71.length; i++) {
-        const char = path71[i];
+      for (let i = 0; i < path74.length; i++) {
+        const char = path74[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -7127,20 +7108,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path71})`);
+            throw new Error(`Invalid redaction path (${path74})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path71})`);
+        throw new Error(`Invalid redaction path (${path74})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path71 of paths) {
-        validatePath(path71);
+      for (const path74 of paths) {
+        validatePath(path74);
       }
     }
     function slowRedact(options = {}) {
@@ -7308,8 +7289,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path71) => {
-            return censor(value, [k2, ...path71]);
+          const wrappedCensor = typeof censor === "function" ? (value, path74) => {
+            return censor(value, [k2, ...path74]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -7530,7 +7511,7 @@ var require_sonic_boom = __commonJS({
     var fs65 = require("fs");
     var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
-    var path71 = require("path");
+    var path74 = require("path");
     var sleep2 = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -7584,7 +7565,7 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs65.mkdirSync(path71.dirname(file), { recursive: true });
+          if (sonic.mkdir) fs65.mkdirSync(path74.dirname(file), { recursive: true });
           const fd = fs65.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
@@ -7592,7 +7573,7 @@ var require_sonic_boom = __commonJS({
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs65.mkdir(path71.dirname(file), { recursive: true }, (err) => {
+        fs65.mkdir(path74.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
           fs65.open(file, flags, mode, fileOpened);
         });
@@ -11223,11 +11204,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path71, added, removed, oldPosInc, options) {
-        var last = path71.lastComponent;
+      addToPath: function addToPath(path74, added, removed, oldPosInc, options) {
+        var last = path74.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path71.oldPos + oldPosInc,
+            oldPos: path74.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -11237,7 +11218,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path71.oldPos + oldPosInc,
+            oldPos: path74.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -11746,10 +11727,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec3 = m2;
-      const path71 = typeof rec3.path === "string" ? rec3.path : null;
+      const path74 = typeof rec3.path === "string" ? rec3.path : null;
       const content = typeof rec3.content === "string" ? rec3.content : null;
-      if (!path71 || content == null) return null;
-      const entry = { path: path71, content };
+      if (!path74 || content == null) return null;
+      const entry = { path: path74, content };
       if (typeof rec3.mtimeMs === "number") entry.mtimeMs = rec3.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -12552,10 +12533,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec3 = m2;
-      const path71 = typeof rec3.path === "string" ? rec3.path : null;
+      const path74 = typeof rec3.path === "string" ? rec3.path : null;
       const content = typeof rec3.content === "string" ? rec3.content : null;
-      if (!path71 || content == null) return null;
-      const out = { path: path71, content };
+      if (!path74 || content == null) return null;
+      const out = { path: path74, content };
       if (typeof rec3.mtimeMs === "number") out.mtimeMs = rec3.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -26932,8 +26913,8 @@ var require_CronFileParser = __commonJS({
        * @throws If file cannot be read
        */
       static parseFileSync(filePath) {
-        const { readFileSync: readFileSync7 } = require("fs");
-        const data = readFileSync7(filePath, "utf8");
+        const { readFileSync: readFileSync6 } = require("fs");
+        const data = readFileSync6(filePath, "utf8");
         return _CronFileParser.#parseContent(data);
       }
       /**
@@ -29234,7 +29215,7 @@ var require_websocket = __commonJS({
     var http3 = require("http");
     var net3 = require("net");
     var tls = require("tls");
-    var { randomBytes, createHash: createHash3 } = require("crypto");
+    var { randomBytes, createHash: createHash2 } = require("crypto");
     var { Duplex, Readable: Readable3 } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -29894,7 +29875,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash3("sha1").update(key + GUID).digest("base64");
+        const digest = createHash2("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -30261,7 +30242,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter3 = require("events");
     var http3 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash3 } = require("crypto");
+    var { createHash: createHash2 } = require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -30562,7 +30543,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash3("sha1").update(key + GUID).digest("base64");
+        const digest = createHash2("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -33524,8 +33505,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path71) {
-      var parts = path71.split("/");
+    exports2.resolve = function(path74) {
+      var parts = path74.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -39378,18 +39359,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path71) {
-      if (path71.slice(-1) === "/") {
-        path71 = path71.substring(0, path71.length - 1);
+    var parentFolder = function(path74) {
+      if (path74.slice(-1) === "/") {
+        path74 = path74.substring(0, path74.length - 1);
       }
-      var lastSlash = path71.lastIndexOf("/");
-      return lastSlash > 0 ? path71.substring(0, lastSlash) : "";
+      var lastSlash = path74.lastIndexOf("/");
+      return lastSlash > 0 ? path74.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path71) {
-      if (path71.slice(-1) !== "/") {
-        path71 += "/";
+    var forceTrailingSlash = function(path74) {
+      if (path74.slice(-1) !== "/") {
+        path74 += "/";
       }
-      return path71;
+      return path74;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -40391,7 +40372,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path59.default.dirname(opts.recordPath);
+  const dir = import_node_path62.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -40405,8 +40386,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs46.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs46.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs47.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs47.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -40431,12 +40412,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs46, import_node_path59;
+var import_node_fs47, import_node_path62;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs46 = __toESM(require("fs"), 1);
-    import_node_path59 = __toESM(require("path"), 1);
+    import_node_fs47 = __toESM(require("fs"), 1);
+    import_node_path62 = __toESM(require("path"), 1);
   }
 });
 
@@ -40479,7 +40460,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs47.mkdtempSync)(import_node_path60.default.join(import_node_os23.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs48.mkdtempSync)(import_node_path63.default.join(import_node_os23.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -40640,19 +40621,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs47.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs48.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs47, import_node_os23, import_node_path60;
+var import_node_fs48, import_node_os23, import_node_path63;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs47 = require("fs");
+    import_node_fs48 = require("fs");
     import_node_os23 = __toESM(require("os"), 1);
-    import_node_path60 = __toESM(require("path"), 1);
+    import_node_path63 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -40914,8 +40895,8 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path58 = __toESM(require("path"), 1);
-var import_node_fs45 = __toESM(require("fs"), 1);
+var import_node_path61 = __toESM(require("path"), 1);
+var import_node_fs46 = __toESM(require("fs"), 1);
 var import_node_os22 = __toESM(require("os"), 1);
 
 // ../node_modules/.pnpm/uuid@10.0.0/node_modules/uuid/dist/esm-node/stringify.js
@@ -41918,17 +41899,17 @@ var ATTACHMENT_SHARING_HINT = `## \u628A\u4EA7\u51FA\u6587\u4EF6\u5206\u4EAB\u7E
 
 - \`relPath\` \u5FC5\u987B\u4F20**\u7EDD\u5BF9\u8DEF\u5F84**\uFF08\u4F60\u4EA7\u51FA\u6587\u4EF6\u7684\u771F\u5B9E\u8DEF\u5F84\uFF09\uFF0C\u4E0D\u8981\u4F20\u76F8\u5BF9\u8DEF\u5F84\u3002
 - \u53EA\u80FD\u5206\u4EAB\u4F60\u81EA\u5DF1\u5DE5\u4F5C\u76EE\u5F55\u5185\u7684\u6587\u4EF6\uFF0C\u8D8A\u754C\u4F1A\u88AB\u62D2\u3002
-- \u88AB dispatch \u63A5\u5230\u4EFB\u52A1\u3001\u8981\u56DE\u4F20\u4EA7\u7269\u65F6\uFF1A\u628A\u7B7E\u540D URL \u5199\u8FDB \`personaDispatchComplete\` \u7684 \`text\` \u91CC\uFF08\`filePaths\` \u53EA\u662F\u4F60\u672C\u673A\u7684\u7EDD\u5BF9\u8DEF\u5F84\uFF0C\u8DE8\u8BBE\u5907\u5BF9\u65B9\u6253\u4E0D\u5F00\uFF0CURL \u624D\u80FD\u6253\u5F00\uFF09\u3002`;
+- \u88AB dispatch \u63A5\u5230\u4EFB\u52A1\u3001\u8981\u56DE\u4F20\u4EA7\u7269\u65F6\uFF1A\u628A\u7B7E\u540D URL \u5199\u8FDB \`personaDispatchComplete\` tool\uFF08\`clawd-dispatch\` MCP\uFF09\u7684 \`text\` \u91CC\uFF08\`filePaths\` \u53EA\u662F\u4F60\u672C\u673A\u7684\u7EDD\u5BF9\u8DEF\u5F84\uFF0C\u8DE8\u8BBE\u5907\u5BF9\u65B9\u6253\u4E0D\u5F00\uFF0CURL \u624D\u80FD\u6253\u5F00\uFF09\u3002`;
 
 // src/dispatch/system-prompt.ts
 var DISPATCH_SYSTEM_PROMPT_HINT = `## \u59D4\u6D3E\u7ED9\u53E6\u4E00\u4E2A persona\uFF08dispatch\uFF09
 
-\u5F53\u7528\u6237\u6D88\u606F\u91CC\u542B \`@persona/<id>\`\uFF08\u5982 \`@persona/persona-app-builder\`\uFF09\u65F6\uFF0C**\u4F60\u5FC5\u987B**\u7ACB\u5373\u8C03 MCP tool \`mcp__clawd-dispatch__personaDispatch\` \u59D4\u6D3E\uFF0C\u4E0D\u8981\u5C1D\u8BD5\u81EA\u5DF1\u6267\u884C\uFF1A
+\u5F53\u7528\u6237\u6D88\u606F\u91CC\u542B \`@persona/<id>\`\uFF08\u5982 \`@persona/persona-app-builder\`\uFF09\u65F6\uFF0C**\u4F60\u5FC5\u987B**\u7ACB\u5373\u8C03 \`clawd-dispatch\` MCP server \u7684 \`personaDispatch\` tool \u59D4\u6D3E\uFF08\u5404 agent \u5BF9 MCP tool \u7684\u5C55\u793A\u540D\u4E0D\u540C\uFF0C\u5982 claude \u663E\u793A\u4E3A \`mcp__clawd-dispatch__personaDispatch\`\uFF1B\u6309\u4F60\u73AF\u5883\u91CC\u5B9E\u9645\u5217\u51FA\u7684\u540D\u5B57\u8C03\u7528\uFF09\uFF0C\u4E0D\u8981\u5C1D\u8BD5\u81EA\u5DF1\u6267\u884C\uFF1A
 
 - \`targetPersona = <id>\`\uFF08@ token \u91CC\u7684 persona id\uFF09
 - \`prompt = \u53BB\u6389 @persona/<id> token \u7684\u7528\u6237\u539F\u6587\`
 
-tool \u4F1A**\u7ACB\u5373\u8FD4\u56DE** dispatchId\uFF08\u5F02\u6B65\u59D4\u6D3E\uFF09\uFF0C\u5BF9\u65B9\u4EBA\u683C\u5728\u540E\u53F0\u5E72\u6D3B\u3002\u4F60\u544A\u8BC9\u7528\u6237"\u4EFB\u52A1\u5DF2\u4EA4\u529E"\u5373\u53EF\u7ED3\u675F\u672C\u8F6E\u2014\u2014**\u4E0D\u8981\u7B49\u5F85\u3001\u4E0D\u8981\u8F6E\u8BE2**\u3002\u5BF9\u65B9\u5E72\u5B8C\u540E\uFF0C\u7ED3\u679C\u4F1A\u4F5C\u4E3A\u4E00\u6761\u65B0\u6D88\u606F\u81EA\u52A8\u6CE8\u5165\u56DE\u4F60\u7684 session\uFF0C\u4F60\u5C4A\u65F6\u518D\u7EFC\u5408\u8F6C\u8FBE\u7ED9\u7528\u6237\u3002\u60F3\u67E5\u8FDB\u5C55\u65F6\uFF08\u7528\u6237\u95EE\u8D77\uFF09\u8C03 \`mcp__clawd-dispatch__personaDispatchList\`\u3002
+tool \u4F1A**\u7ACB\u5373\u8FD4\u56DE** dispatchId\uFF08\u5F02\u6B65\u59D4\u6D3E\uFF09\uFF0C\u5BF9\u65B9\u4EBA\u683C\u5728\u540E\u53F0\u5E72\u6D3B\u3002\u4F60\u544A\u8BC9\u7528\u6237"\u4EFB\u52A1\u5DF2\u4EA4\u529E"\u5373\u53EF\u7ED3\u675F\u672C\u8F6E\u2014\u2014**\u4E0D\u8981\u7B49\u5F85\u3001\u4E0D\u8981\u8F6E\u8BE2**\u3002\u5BF9\u65B9\u5E72\u5B8C\u540E\uFF0C\u7ED3\u679C\u4F1A\u4F5C\u4E3A\u4E00\u6761\u65B0\u6D88\u606F\u81EA\u52A8\u6CE8\u5165\u56DE\u4F60\u7684 session\uFF0C\u4F60\u5C4A\u65F6\u518D\u7EFC\u5408\u8F6C\u8FBE\u7ED9\u7528\u6237\u3002\u60F3\u67E5\u8FDB\u5C55\u65F6\uFF08\u7528\u6237\u95EE\u8D77\uFF09\u8C03\u540C\u4E00 MCP \u7684 \`personaDispatchList\`\u3002
 
 - **\u4E0D\u8981**\u5C1D\u8BD5\u81EA\u5DF1\u6267\u884C\uFF08\u4F60\u4E0D\u662F\u90A3\u4E2A persona\uFF09
 - **\u4E0D\u8981** in-place \u6A21\u4EFF\u5BF9\u65B9\u4EBA\u683C \u2014\u2014 dispatch \u662F\u771F\u5207\u5230\u53E6\u4E00\u4E2A\u72EC\u7ACB session
@@ -41953,7 +41934,7 @@ deviceId \u76F4\u63A5\u53D6\u81EA token\uFF0C\u4E0D\u8981\u6539\u5199\u6216\u731
 
 - \u4EFB\u52A1\u5728 \`Task:\` \u6BB5
 - \u539F\u4F1A\u8BDD\u7684\u5BF9\u8BDD\u5386\u53F2\u5728 \`Source conversation\` \u6BB5\u7ED9\u7684 jsonl \u8DEF\u5F84\u4E0B\uFF1B\u6309\u9700 Read \u5B83\u4E86\u89E3\u4E0A\u4E0B\u6587\uFF08\u4E0D\u5FC5\u8BFB\u5B8C\uFF09
-- \u5E72\u5B8C\u540E**\u5FC5\u987B**\u8C03 \`mcp__clawd-dispatch__personaDispatchComplete\` \u62A5\u544A\u7ED3\u679C\uFF1A
+- \u5E72\u5B8C\u540E**\u5FC5\u987B**\u8C03 \`clawd-dispatch\` MCP \u7684 \`personaDispatchComplete\` tool \u62A5\u544A\u7ED3\u679C\uFF1A
   - \u6210\u529F\uFF1A\`{ text: "\u603B\u7ED3/\u7ED3\u8BBA", filePaths?: ["\u4F60\u4EA7\u51FA/\u6539\u7684\u6587\u4EF6\u7EDD\u5BF9\u8DEF\u5F84"] }\`
   - \u5931\u8D25\uFF1A\`{ isFailure: true, reason: "..." }\`
 - \u62A5\u544A\u5B8C\u540E\u4F60\u7684 session \u5C31\u7ED3\u675F\u4E86\uFF0C\u4E0D\u8981\u7EE7\u7EED\u8F93\u51FA`;
@@ -43353,7 +43334,8 @@ Source conversation (jsonl, CC stream-json format, one message per line):
   ${args.sourceJsonlPath}
 You may read this file with your Read tool to understand context. You do not have to read it all.
 
-When done, call the MCP tool \`mcp__clawd-dispatch__personaDispatchComplete\` with your result:
+When done, call the \`personaDispatchComplete\` tool from the \`clawd-dispatch\` MCP server with your result
+(tool display name varies by agent, e.g. \`mcp__clawd-dispatch__personaDispatchComplete\` in claude):
   - Success: { text: "...", filePaths?: ["abs/path", ...] }
   - Failure: { isFailure: true, reason: "..." }
 
@@ -43658,18 +43640,20 @@ var SessionManager = class {
           `newRunner: guest session ${file.sessionId} \u7F3A personaRoot/userWorkDir\uFF0C\u65E0\u6CD5\u7269\u5316 OS \u6C99\u7BB1\uFF08\u62D2\u7EDD\u521B\u5EFA\u65E0\u6C99\u7BB1 guest\uFF09`
         );
       }
-      const base = this.deps.personaStore?.readSandboxSettings(scope.personaId) ?? null;
-      const sandboxSettings = composeGuestSandbox(base, subSessionMeta.userWorkDir, file.cwd);
-      const ownerCreds = readOwnerCredentials(import_node_os5.default.homedir(), this.deps.logger);
-      const merged = mergeOwnerCredentials(sandboxSettings, ownerCreds);
-      if (ownerCreds) {
-        this.deps.logger?.info("owner credentials injected into guest spawn", {
-          sessionId: file.sessionId,
-          envKeys: ownerCreds.env ? Object.keys(ownerCreds.env) : [],
-          apiKeyHelper: ownerCreds.apiKeyHelper ? "present" : "absent"
-        });
+      if ((file.tool ?? "claude") === "claude") {
+        const base = this.deps.personaStore?.readSandboxSettings(scope.personaId) ?? null;
+        const sandboxSettings = composeGuestSandbox(base, subSessionMeta.userWorkDir, file.cwd);
+        const ownerCreds = readOwnerCredentials(import_node_os5.default.homedir(), this.deps.logger);
+        const merged = mergeOwnerCredentials(sandboxSettings, ownerCreds);
+        if (ownerCreds) {
+          this.deps.logger?.info("owner credentials injected into guest spawn", {
+            sessionId: file.sessionId,
+            envKeys: ownerCreds.env ? Object.keys(ownerCreds.env) : [],
+            apiKeyHelper: ownerCreds.apiKeyHelper ? "present" : "absent"
+          });
+        }
+        subSessionMeta.extraSettings = JSON.stringify(merged);
       }
-      subSessionMeta.extraSettings = JSON.stringify(merged);
       const home = import_node_os5.default.homedir();
       const expand = (p2) => p2 === "~" ? home : p2.startsWith("~/") ? import_node_path9.default.join(home, p2.slice(2)) : p2;
       const codexCfg = this.deps.personaStore?.readCodexSandboxSettings(scope.personaId) ?? null;
@@ -44719,7 +44703,9 @@ var SessionManager = class {
     const file = {
       sessionId,
       cwd,
-      tool: "claude",
+      // dispatch B session 跟随 persona 绑定的 tool（codex persona 用 codex spawn），
+      // 与 UI 手建路径（handlers/session.ts create 的 persona.tool 优先）同语义
+      tool: this.deps.getPersonaTool?.(args.targetPersona) ?? "claude",
       ownerPersonaId: args.targetPersona,
       dispatchedFromSessionId: args.sourceSessionId,
       // 跨设备显示关键（spec §8）：creatorPrincipalId = A 的 deviceId，让 A 的
@@ -44809,7 +44795,8 @@ var SessionManager = class {
     const file = {
       sessionId,
       cwd,
-      tool: "claude",
+      // shift 定时 spawn 同样跟随 persona 绑定 tool（对齐 dispatch B session）
+      tool: this.deps.getPersonaTool?.(args.targetPersona) ?? "claude",
       ownerPersonaId: args.targetPersona,
       ...args.sourceSessionId ? { shiftFiredFromSessionId: args.sourceSessionId } : {},
       createdAt: now,
@@ -45874,17 +45861,9 @@ var PersonaManager = class {
   }
   /**
    * 删除 persona。
-   * PersonaStore.remove(personaId) 已级联删除整个 <personaRoot>/<personaId>/ 目录,
-   * Phase 2 capability platform 新布局下含 .clawd/sessions/owner/ +
-   * .clawd/sessions/guests/<capId>/, rmSync recursive force 一锅清.
-   *
-   * ⚠️ TODO (Phase 3+ design gap, reviewer P1 flagged):
-   * ~/.clawd/capabilities.json 里若有 cap.grants 含本 personaId, grant 会变成
-   * 悬空引用 (guest 仍能持 token 接入, 但调依赖该 persona 的 RPC 会 fail).
-   * 选项: (A) 这里扫所有 cap 过滤掉该 personaId 的 grant; (B) revoke 所有 grant
-   * 含该 personaId 的 cap. 当前因 cleanupGuestSessionsForCapability 用 rmSync
-   * force=true 吞 ENOENT 不会 crash, 但 UI CapabilityManagerDrawer 会展示
-   * "无效的 persona" grant. Phase 3 加 cross-reference 矩阵后正式实现.
+   * PersonaStore.remove(personaId) 级联删整个 <personaRoot>/<personaId>/ 目录
+   * （含 .clawd/sessions/owner/ 和 .clawd/sessions/guests/<capId>/），rmSync
+   * recursive force 一锅清。
    */
   delete(personaId) {
     this.deps.store.remove(personaId);
@@ -46185,6 +46164,9 @@ function refreshDaemonManagedDirs(args) {
       const dstPath = path14.join(personaDir, relPath);
       try {
         fs12.cpSync(srcPath, dstPath, { recursive: true, force: true, dereference: true, filter: skipNodeModulesUnder(srcPath) });
+        if (relPath === "CLAUDE.md") {
+          fs12.cpSync(srcPath, path14.join(personaDir, "AGENTS.md"), { force: true, dereference: true });
+        }
         args.logger.info("persona.refresh.synced", {
           personaId: entry.personaId,
           path: relPath
@@ -46552,11 +46534,12 @@ function createVisitorStore(opts) {
 init_claude();
 
 // src/tools/codex.ts
-var import_node_child_process4 = require("child_process");
-var import_node_fs17 = __toESM(require("fs"), 1);
+var import_node_child_process5 = require("child_process");
+var import_node_fs18 = __toESM(require("fs"), 1);
 
 // src/tools/codex-session.ts
-var import_node_child_process3 = require("child_process");
+var import_node_child_process4 = require("child_process");
+var import_node_path16 = __toESM(require("path"), 1);
 
 // src/tools/codex-app-server-client.ts
 var import_node_readline = require("readline");
@@ -46739,7 +46722,7 @@ function resolveApprovalPolicy(ctx) {
   if (m2 === "untrusted" || m2 === "on-failure" || m2 === "on-request" || m2 === "never") return m2;
   return "on-request";
 }
-function buildCodexGuestConfig(cs) {
+function buildCodexGuestConfig(cs, opts = {}) {
   const filesystem = {};
   for (const w2 of cs.writableRoots ?? []) filesystem[w2] = "write";
   const deny = cs.denyRead ?? [];
@@ -46754,7 +46737,7 @@ function buildCodexGuestConfig(cs) {
       clawos_guest: {
         extends: ":workspace",
         filesystem,
-        network: cs.network ? { enabled: true, domains: { "*": "allow" } } : { enabled: false }
+        network: cs.network ? { enabled: true, domains: { "*": "allow" } } : opts.loopbackDaemonAccess ? { enabled: true, allowed_domains: [], allow_local_binding: true } : { enabled: false }
       }
     }
   };
@@ -46768,15 +46751,32 @@ function tomlValue(v2) {
   }
   return JSON.stringify(v2);
 }
-function codexGuestCliArgs(cs) {
-  const cfg = buildCodexGuestConfig(cs);
+function codexGuestCliArgs(cs, opts = {}) {
+  const cfg = buildCodexGuestConfig(cs, opts);
   const profile = cfg.permissions.clawos_guest;
-  return [
+  const args = [
     "-c",
     `default_permissions=${tomlValue("clawos_guest")}`,
     "-c",
     `permissions.clawos_guest=${tomlValue(profile)}`
   ];
+  if (!cs.network && opts.loopbackDaemonAccess) {
+    args.push("-c", "features.network_proxy=true");
+  }
+  return args;
+}
+function codexMcpCliArgs(defs) {
+  const out = [];
+  for (const d of defs) {
+    const cfg = {
+      command: d.command,
+      ...d.args && d.args.length > 0 ? { args: d.args } : {},
+      ...d.env && Object.keys(d.env).length > 0 ? { env: d.env } : {}
+    };
+    const key = /^[A-Za-z0-9_-]+$/.test(d.name) ? d.name : JSON.stringify(d.name);
+    out.push("-c", `mcp_servers.${key}=${tomlValue(cfg)}`);
+  }
+  return out;
 }
 function threadStartParams(ctx) {
   const params = {
@@ -46801,8 +46801,8 @@ function turnStartInput(text) {
   const items = [];
   let leftover = text;
   for (const m2 of text.matchAll(SKILL_RE)) {
-    const [marker, name, path71] = m2;
-    items.push({ type: "skill", name, path: path71 });
+    const [marker, name, path74] = m2;
+    items.push({ type: "skill", name, path: path74 });
     leftover = leftover.replace(marker, "");
   }
   for (const m2 of text.matchAll(ATTACHMENT_RE2)) {
@@ -46817,15 +46817,122 @@ function turnStartInput(text) {
   return items;
 }
 
+// src/tools/codex-mcp-config.ts
+var import_node_fs17 = __toESM(require("fs"), 1);
+var import_node_path15 = __toESM(require("path"), 1);
+function loadCodexMcpServerDefs(args) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  const sources = [...args.mcpConfigPaths, import_node_path15.default.join(args.cwd, ".mcp.json")];
+  for (const file of sources) {
+    let parsed;
+    try {
+      parsed = JSON.parse(import_node_fs17.default.readFileSync(file, "utf8"));
+    } catch (e) {
+      const code = e.code;
+      if (code !== "ENOENT") {
+        args.logger?.warn("codex mcp config unreadable, skipped", { file, code: code ?? "parse-error" });
+      }
+      continue;
+    }
+    const servers = parsed?.mcpServers;
+    if (!servers || typeof servers !== "object") continue;
+    for (const [name, raw] of Object.entries(servers)) {
+      const def = raw ?? {};
+      const type = typeof def.type === "string" ? def.type : "stdio";
+      if (type !== "stdio") {
+        args.logger?.warn("codex mcp server type unsupported, skipped", { file, name, type });
+        continue;
+      }
+      if (typeof def.command !== "string" || !def.command) {
+        args.logger?.warn("codex mcp server missing command, skipped", { file, name });
+        continue;
+      }
+      if (seen.has(name)) {
+        args.logger?.warn("codex mcp server name collision, first-wins", { file, name });
+        continue;
+      }
+      seen.add(name);
+      const fileEnv = def.env && typeof def.env === "object" ? Object.fromEntries(
+        Object.entries(def.env).filter(
+          (kv) => typeof kv[1] === "string"
+        )
+      ) : {};
+      const env = { ...args.baseEnv ?? {}, ...fileEnv };
+      out.push({
+        name,
+        command: def.command,
+        ...Array.isArray(def.args) && def.args.every((a) => typeof a === "string") ? { args: def.args } : {},
+        ...Object.keys(env).length > 0 ? { env } : {}
+      });
+    }
+  }
+  return out;
+}
+
+// src/tools/codex-features.ts
+var import_node_child_process3 = require("child_process");
+var cachedNetworkProxy;
+function hasNetworkProxyFeature(deps = {}) {
+  if (cachedNetworkProxy !== void 0) return cachedNetworkProxy;
+  try {
+    const out = deps.execOverride ? deps.execOverride() : (0, import_node_child_process3.execFileSync)(process.env.CODEX_BIN ?? "codex", ["features", "list"], {
+      encoding: "utf8",
+      timeout: 3e3
+    });
+    const m2 = /^network_proxy\s+(.+?)\s+(?:true|false)\s*$/m.exec(out);
+    cachedNetworkProxy = m2 !== null && m2[1].trim() !== "removed";
+  } catch {
+    cachedNetworkProxy = false;
+  }
+  return cachedNetworkProxy;
+}
+var warming = false;
+function warmCodexFeatureCache() {
+  if (cachedNetworkProxy !== void 0 || warming) return;
+  warming = true;
+  (0, import_node_child_process3.execFile)(
+    process.env.CODEX_BIN ?? "codex",
+    ["features", "list"],
+    { encoding: "utf8", timeout: 3e3 },
+    (err, stdout) => {
+      warming = false;
+      if (cachedNetworkProxy !== void 0) return;
+      if (err) {
+        cachedNetworkProxy = false;
+        return;
+      }
+      const m2 = /^network_proxy\s+(.+?)\s+(?:true|false)\s*$/m.exec(stdout);
+      cachedNetworkProxy = m2 !== null && m2[1].trim() !== "removed";
+    }
+  );
+}
+
 // src/tools/codex-session.ts
 function createCodexSession(ctx, sink, deps = {}) {
   const cmd = process.env.CODEX_BIN ?? "codex";
   const args = ["app-server", "--listen", "stdio://"];
   if (ctx.personaMode === "guest" && ctx.codexSandbox) {
-    args.push(...codexGuestCliArgs(ctx.codexSandbox));
+    const loopbackDaemonAccess = deps.hasNetworkProxyOverride ? deps.hasNetworkProxyOverride() : hasNetworkProxyFeature();
+    args.push(...codexGuestCliArgs(ctx.codexSandbox, { loopbackDaemonAccess }));
   }
+  const clawdEnv = Object.fromEntries(
+    Object.entries(ctx.env ?? {}).filter(
+      (kv) => kv[0].startsWith("CLAWD_") && typeof kv[1] === "string"
+    )
+  );
+  args.push(
+    ...codexMcpCliArgs(
+      loadCodexMcpServerDefs({
+        mcpConfigPaths: (ctx.mcpConfigs ?? []).map((m2) => m2.path),
+        cwd: ctx.cwd,
+        baseEnv: clawdEnv,
+        logger: deps.logger
+      })
+    )
+  );
   const env = { ...process.env, ...ctx.env };
-  const proc = deps.spawnOverride ? deps.spawnOverride(cmd, args, ctx.cwd, env) : (0, import_node_child_process3.spawn)(cmd, args, { cwd: ctx.cwd, env, stdio: ["pipe", "pipe", "pipe"] });
+  const proc = deps.spawnOverride ? deps.spawnOverride(cmd, args, ctx.cwd, env) : (0, import_node_child_process4.spawn)(cmd, args, { cwd: ctx.cwd, env, stdio: ["pipe", "pipe", "pipe"] });
   let threadId = ctx.toolSessionId;
   let turnId;
   const approvalIds = /* @__PURE__ */ new Map();
@@ -46882,6 +46989,7 @@ function createCodexSession(ctx, sink, deps = {}) {
       capabilities: null
     });
     client.notify("initialized", {});
+    void client.request("skills/extraRoots/set", { extraRoots: [import_node_path16.default.join(ctx.cwd, ".claude", "skills")] }).catch((e) => deps.logger?.warn("codex skills/extraRoots/set failed", { message: e.message }));
     if (threadId) {
       await client.request("thread/resume", { threadId, ...threadStartParams(ctx) });
     } else {
@@ -46928,6 +47036,7 @@ function createCodexSession(ctx, sink, deps = {}) {
 }
 
 // src/tools/codex.ts
+var CODEX_MODEL_IDS = ["gpt-5.5", "gpt-5.4", "gpt-5.4-mini"];
 var CODEX_MODELS = [
   { id: "", label: "Default", description: "codex config.toml \u9ED8\u8BA4", contextWindowSize: 258400, default: true },
   { id: "gpt-5.5", label: "GPT-5.5", description: "Frontier model for complex coding", contextWindowSize: 258400 },
@@ -46986,10 +47095,10 @@ function sanitizeCodexModel(model) {
   return CODEX_MODELS.some((m2) => m2.id === model) ? model : void 0;
 }
 async function probeCodex(env = process.env) {
-  if (env.CODEX_BIN && import_node_fs17.default.existsSync(env.CODEX_BIN)) return { available: true, path: env.CODEX_BIN };
+  if (env.CODEX_BIN && import_node_fs18.default.existsSync(env.CODEX_BIN)) return { available: true, path: env.CODEX_BIN };
   try {
-    const out = (0, import_node_child_process4.execFileSync)("which", ["codex"], { encoding: "utf8" }).trim();
-    if (out && import_node_fs17.default.existsSync(out)) return { available: true, path: out };
+    const out = (0, import_node_child_process5.execFileSync)("which", ["codex"], { encoding: "utf8" }).trim();
+    if (out && import_node_fs18.default.existsSync(out)) return { available: true, path: out };
   } catch {
   }
   return { available: false };
@@ -47035,9 +47144,9 @@ var CodexAdapter = class {
 
 // src/tools/claude-tui.ts
 var import_node_crypto5 = require("crypto");
-var import_node_fs18 = __toESM(require("fs"), 1);
+var import_node_fs19 = __toESM(require("fs"), 1);
 var import_node_os7 = __toESM(require("os"), 1);
-var import_node_path15 = __toESM(require("path"), 1);
+var import_node_path17 = __toESM(require("path"), 1);
 var import_headless = __toESM(require_xterm_headless(), 1);
 
 // ../node_modules/.pnpm/@xterm+addon-serialize@0.14.0/node_modules/@xterm/addon-serialize/lib/addon-serialize.mjs
@@ -48270,9 +48379,9 @@ function buildTuiSpawnArgs(ctx, isResume = false) {
 function jsonlExistsForCtx(ctx) {
   if (!ctx.toolSessionId) return false;
   const home = import_node_os7.default.homedir();
-  const file = import_node_path15.default.join(home, ".claude", "projects", cwdToHashDir(ctx.cwd), `${ctx.toolSessionId}.jsonl`);
+  const file = import_node_path17.default.join(home, ".claude", "projects", cwdToHashDir(ctx.cwd), `${ctx.toolSessionId}.jsonl`);
   try {
-    return import_node_fs18.default.statSync(file).isFile();
+    return import_node_fs19.default.statSync(file).isFile();
   } catch {
     return false;
   }
@@ -48382,7 +48491,7 @@ var PersonaDispatchManager = class {
 
 // src/dispatch/store.ts
 var import_promises = __toESM(require("fs/promises"), 1);
-var import_node_path16 = __toESM(require("path"), 1);
+var import_node_path18 = __toESM(require("path"), 1);
 
 // src/shift/constants.ts
 var MAX_RUNS_PER_SHIFT = 30;
@@ -48420,7 +48529,7 @@ function createDispatchStore(deps) {
       flushTimer = null;
     }
     const content = { version: 1, records };
-    await import_promises.default.mkdir(import_node_path16.default.dirname(deps.filePath), { recursive: true });
+    await import_promises.default.mkdir(import_node_path18.default.dirname(deps.filePath), { recursive: true });
     const tmp = `${deps.filePath}.tmp-${deps.now()}-${Math.floor(Math.random() * 1e6)}`;
     await import_promises.default.writeFile(tmp, JSON.stringify(content, null, 2), "utf8");
     await import_promises.default.rename(tmp, deps.filePath);
@@ -48482,10 +48591,10 @@ function createDispatchStore(deps) {
 }
 
 // src/dispatch/mcp-config.ts
-var import_node_fs19 = __toESM(require("fs"), 1);
-var import_node_path17 = __toESM(require("path"), 1);
+var import_node_fs20 = __toESM(require("fs"), 1);
+var import_node_path19 = __toESM(require("path"), 1);
 function dispatchMcpConfigPath(dataDir) {
-  return import_node_path17.default.join(dataDir, "dispatch.mcp.json");
+  return import_node_path19.default.join(dataDir, "dispatch.mcp.json");
 }
 function writeDispatchMcpConfig(args) {
   const cfgPath = dispatchMcpConfigPath(args.dataDir);
@@ -48500,16 +48609,16 @@ function writeDispatchMcpConfig(args) {
       }
     }
   };
-  import_node_fs19.default.mkdirSync(args.dataDir, { recursive: true });
-  import_node_fs19.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  import_node_fs20.default.mkdirSync(args.dataDir, { recursive: true });
+  import_node_fs20.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/ticket/mcp-config.ts
-var import_node_fs20 = __toESM(require("fs"), 1);
-var import_node_path18 = __toESM(require("path"), 1);
+var import_node_fs21 = __toESM(require("fs"), 1);
+var import_node_path20 = __toESM(require("path"), 1);
 function ticketMcpConfigPath(dataDir) {
-  return import_node_path18.default.join(dataDir, "ticket.mcp.json");
+  return import_node_path20.default.join(dataDir, "ticket.mcp.json");
 }
 function writeTicketMcpConfig(args) {
   const cfgPath = ticketMcpConfigPath(args.dataDir);
@@ -48529,16 +48638,16 @@ function writeTicketMcpConfig(args) {
       }
     }
   };
-  import_node_fs20.default.mkdirSync(args.dataDir, { recursive: true });
-  import_node_fs20.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  import_node_fs21.default.mkdirSync(args.dataDir, { recursive: true });
+  import_node_fs21.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/shift/mcp-config.ts
-var import_node_fs21 = __toESM(require("fs"), 1);
-var import_node_path19 = __toESM(require("path"), 1);
+var import_node_fs22 = __toESM(require("fs"), 1);
+var import_node_path21 = __toESM(require("path"), 1);
 function shiftMcpConfigPath(dataDir) {
-  return import_node_path19.default.join(dataDir, "shift.mcp.json");
+  return import_node_path21.default.join(dataDir, "shift.mcp.json");
 }
 async function writeShiftMcpConfig(args) {
   const cfgPath = shiftMcpConfigPath(args.dataDir);
@@ -48553,16 +48662,16 @@ async function writeShiftMcpConfig(args) {
       }
     }
   };
-  await import_node_fs21.default.promises.mkdir(args.dataDir, { recursive: true });
-  await import_node_fs21.default.promises.writeFile(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  await import_node_fs22.default.promises.mkdir(args.dataDir, { recursive: true });
+  await import_node_fs22.default.promises.writeFile(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/inbox/mcp-config.ts
-var import_node_fs22 = __toESM(require("fs"), 1);
-var import_node_path20 = __toESM(require("path"), 1);
+var import_node_fs23 = __toESM(require("fs"), 1);
+var import_node_path22 = __toESM(require("path"), 1);
 function inboxMcpConfigPath(dataDir) {
-  return import_node_path20.default.join(dataDir, "inbox.mcp.json");
+  return import_node_path22.default.join(dataDir, "inbox.mcp.json");
 }
 async function writeInboxMcpConfig(args) {
   const cfgPath = inboxMcpConfigPath(args.dataDir);
@@ -48577,16 +48686,16 @@ async function writeInboxMcpConfig(args) {
       }
     }
   };
-  await import_node_fs22.default.promises.mkdir(args.dataDir, { recursive: true });
-  await import_node_fs22.default.promises.writeFile(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  await import_node_fs23.default.promises.mkdir(args.dataDir, { recursive: true });
+  await import_node_fs23.default.promises.writeFile(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/peer-ops/mcp-config.ts
-var import_node_fs23 = __toESM(require("fs"), 1);
-var import_node_path21 = __toESM(require("path"), 1);
+var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_path23 = __toESM(require("path"), 1);
 function peerOpsMcpConfigPath(dataDir) {
-  return import_node_path21.default.join(dataDir, "peer-ops.mcp.json");
+  return import_node_path23.default.join(dataDir, "peer-ops.mcp.json");
 }
 function writePeerOpsMcpConfig(args) {
   const cfgPath = peerOpsMcpConfigPath(args.dataDir);
@@ -48599,14 +48708,14 @@ function writePeerOpsMcpConfig(args) {
       }
     }
   };
-  import_node_fs23.default.mkdirSync(args.dataDir, { recursive: true });
-  import_node_fs23.default.writeFileSync(cfgPath, JSON.stringify(cfg, null, 2));
+  import_node_fs24.default.mkdirSync(args.dataDir, { recursive: true });
+  import_node_fs24.default.writeFileSync(cfgPath, JSON.stringify(cfg, null, 2));
   return cfgPath;
 }
 
 // src/shift/store.ts
 var import_promises2 = __toESM(require("fs/promises"), 1);
-var import_node_path22 = __toESM(require("path"), 1);
+var import_node_path24 = __toESM(require("path"), 1);
 var import_node_crypto6 = require("crypto");
 
 // src/shift/schedule.ts
@@ -48681,7 +48790,7 @@ function createShiftStore(deps) {
       flushTimer = null;
     }
     const content = { version: 1, shifts };
-    await import_promises2.default.mkdir(import_node_path22.default.dirname(deps.filePath), { recursive: true });
+    await import_promises2.default.mkdir(import_node_path24.default.dirname(deps.filePath), { recursive: true });
     const tmp = `${deps.filePath}.tmp-${deps.now()}-${Math.floor(Math.random() * 1e6)}`;
     await import_promises2.default.writeFile(tmp, JSON.stringify(content, null, 2), "utf8");
     await import_promises2.default.rename(tmp, deps.filePath);
@@ -49114,11 +49223,16 @@ function buildPersonaDispatchHandlers(deps) {
     const { type: _t, requestId: _r, ...rest } = frame;
     const sourceSessionId = typeof rest.sessionId === "string" ? rest.sessionId : void 0;
     const args = DispatchRunArgsSchema.parse(rest);
-    if (args.model !== void 0 && !CLAUDE_MODEL_IDS.includes(args.model)) {
-      throw new ClawdError(
-        ERROR_CODES.INVALID_PARAM,
-        `model '${args.model}' not supported; allowed: ${CLAUDE_MODEL_IDS.join(", ")}`
-      );
+    if (args.model !== void 0) {
+      const targetPersona2 = args.targetPersona ?? (args.dispatchId ? deps.store.get(args.dispatchId)?.targetPersonaId : void 0);
+      const targetTool = (targetPersona2 ? deps.getPersonaTool?.(targetPersona2) : void 0) ?? "claude";
+      const allowed = targetTool === "codex" ? CODEX_MODEL_IDS : CLAUDE_MODEL_IDS;
+      if (!allowed.includes(args.model)) {
+        throw new ClawdError(
+          ERROR_CODES.INVALID_PARAM,
+          `model '${args.model}' not supported for tool '${targetTool}'; allowed: ${allowed.join(", ")}`
+        );
+      }
     }
     if (args.dispatchId) {
       if (ctx?.principal.kind === "guest") {
@@ -49453,7 +49567,7 @@ async function forwardPeerExecToPeer(args) {
 }
 
 // src/tools/codex-history.ts
-var import_node_child_process5 = require("child_process");
+var import_node_child_process6 = require("child_process");
 var DEFAULT_TIMEOUT_MS2 = 8e3;
 function rec2(v2) {
   return v2 && typeof v2 === "object" && !Array.isArray(v2) ? v2 : void 0;
@@ -49516,7 +49630,7 @@ function threadItemToHistoryMessages(item) {
 async function queryCodexAppServer(cwd, method, params, deps) {
   const cmd = process.env.CODEX_BIN ?? "codex";
   const args = ["app-server", "--listen", "stdio://"];
-  const proc = deps.spawnOverride ? deps.spawnOverride(cmd, args, cwd) : (0, import_node_child_process5.spawn)(cmd, args, { cwd, env: process.env, stdio: ["pipe", "pipe", "pipe"] });
+  const proc = deps.spawnOverride ? deps.spawnOverride(cmd, args, cwd) : (0, import_node_child_process6.spawn)(cmd, args, { cwd, env: process.env, stdio: ["pipe", "pipe", "pipe"] });
   const client = new CodexAppServerClient(proc, {});
   const timeoutMs = deps.timeoutMs ?? DEFAULT_TIMEOUT_MS2;
   let timer;
@@ -49622,7 +49736,8 @@ var CodexHistoryReader = class {
 };
 
 // src/tools/codex-skills.ts
-var import_node_child_process6 = require("child_process");
+var import_node_child_process7 = require("child_process");
+var import_node_path25 = __toESM(require("path"), 1);
 var DEFAULT_TIMEOUT_MS3 = 8e3;
 function str3(v2) {
   return typeof v2 === "string" ? v2 : void 0;
@@ -49638,13 +49753,13 @@ function mapSkillsListResponse(res) {
       const r = s ?? {};
       const name = str3(r.name);
       if (!name) continue;
-      const path71 = str3(r.path);
+      const path74 = str3(r.path);
       const description = str3(r.description);
       const isPlugin = name.includes(":");
       out.push({
         name,
         source: isPlugin ? "plugin" : "project",
-        ...path71 ? { path: path71 } : {},
+        ...path74 ? { path: path74 } : {},
         ...description ? { description } : {},
         ...isPlugin ? { plugin: name.split(":")[0] } : {}
       });
@@ -49655,7 +49770,7 @@ function mapSkillsListResponse(res) {
 async function listCodexSkills(cwd, deps = {}) {
   const cmd = process.env.CODEX_BIN ?? "codex";
   const args = ["app-server", "--listen", "stdio://"];
-  const proc = deps.spawnOverride ? deps.spawnOverride(cmd, args, cwd) : (0, import_node_child_process6.spawn)(cmd, args, { cwd, env: process.env, stdio: ["pipe", "pipe", "pipe"] });
+  const proc = deps.spawnOverride ? deps.spawnOverride(cmd, args, cwd) : (0, import_node_child_process7.spawn)(cmd, args, { cwd, env: process.env, stdio: ["pipe", "pipe", "pipe"] });
   const client = new CodexAppServerClient(proc, {});
   const timeoutMs = deps.timeoutMs ?? DEFAULT_TIMEOUT_MS3;
   let timer;
@@ -49674,6 +49789,7 @@ async function listCodexSkills(cwd, deps = {}) {
       })(),
       timeout
     ]);
+    void client.request("skills/extraRoots/set", { extraRoots: [import_node_path25.default.join(cwd, ".claude", "skills")] }).catch(() => void 0);
     const res = await Promise.race([client.request("skills/list", { cwds: [cwd] }), timeout]);
     return mapSkillsListResponse(res);
   } finally {
@@ -49683,23 +49799,23 @@ async function listCodexSkills(cwd, deps = {}) {
 }
 
 // src/workspace/browser.ts
-var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_fs25 = __toESM(require("fs"), 1);
 var import_node_os8 = __toESM(require("os"), 1);
-var import_node_path23 = __toESM(require("path"), 1);
+var import_node_path26 = __toESM(require("path"), 1);
 init_protocol();
 var MAX_FILE_BYTES = 2 * 1024 * 1024;
 function resolveInsideCwd(cwd, subpath) {
-  const absCwd = import_node_path23.default.resolve(cwd);
-  const joined = import_node_path23.default.resolve(absCwd, subpath ?? ".");
-  const rel = import_node_path23.default.relative(absCwd, joined);
-  if (rel.startsWith("..") || import_node_path23.default.isAbsolute(rel)) {
+  const absCwd = import_node_path26.default.resolve(cwd);
+  const joined = import_node_path26.default.resolve(absCwd, subpath ?? ".");
+  const rel = import_node_path26.default.relative(absCwd, joined);
+  if (rel.startsWith("..") || import_node_path26.default.isAbsolute(rel)) {
     throw new ClawdError(ERROR_CODES.INVALID_PATH, `path escapes cwd: ${subpath}`);
   }
   return joined;
 }
 function ensureCwd(cwd) {
   try {
-    const stat = import_node_fs24.default.statSync(cwd);
+    const stat = import_node_fs25.default.statSync(cwd);
     if (!stat.isDirectory()) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${cwd}`);
     }
@@ -49713,7 +49829,7 @@ var WorkspaceBrowser = class {
     const cwd = args.cwd && args.cwd.length > 0 ? args.cwd : import_node_os8.default.homedir();
     ensureCwd(cwd);
     const full = resolveInsideCwd(cwd, args.path);
-    const dirents = import_node_fs24.default.readdirSync(full, { withFileTypes: true });
+    const dirents = import_node_fs25.default.readdirSync(full, { withFileTypes: true });
     const entries = [];
     for (const d of dirents) {
       if (!args.showHidden && d.name.startsWith(".")) continue;
@@ -49723,7 +49839,7 @@ var WorkspaceBrowser = class {
         mtime: ""
       };
       try {
-        const st = import_node_fs24.default.statSync(import_node_path23.default.join(full, d.name));
+        const st = import_node_fs25.default.statSync(import_node_path26.default.join(full, d.name));
         entry.mtime = new Date(st.mtimeMs).toISOString();
         if (d.isFile()) entry.size = st.size;
       } catch {
@@ -49739,14 +49855,14 @@ var WorkspaceBrowser = class {
   read(args) {
     ensureCwd(args.cwd);
     const full = resolveInsideCwd(args.cwd, args.path);
-    const st = import_node_fs24.default.statSync(full);
+    const st = import_node_fs25.default.statSync(full);
     if (!st.isFile()) {
       throw new ClawdError(ERROR_CODES.INVALID_PATH, `not a file: ${args.path}`);
     }
     if (st.size > MAX_FILE_BYTES) {
       throw new ClawdError(ERROR_CODES.FILE_TOO_LARGE, `file > ${MAX_FILE_BYTES} bytes`);
     }
-    const buf = import_node_fs24.default.readFileSync(full);
+    const buf = import_node_fs25.default.readFileSync(full);
     const isBinary = buf.includes(0);
     if (isBinary) {
       return {
@@ -49768,20 +49884,20 @@ var WorkspaceBrowser = class {
 };
 
 // src/skills/agents-scanner.ts
-var import_node_fs25 = __toESM(require("fs"), 1);
+var import_node_fs26 = __toESM(require("fs"), 1);
 var import_node_os9 = __toESM(require("os"), 1);
-var import_node_path24 = __toESM(require("path"), 1);
+var import_node_path27 = __toESM(require("path"), 1);
 var DEFAULT_POLICY_DIR_DARWIN = "/Library/Application Support/ClaudeCode/.claude/agents";
 function isDirLikeSync2(p2) {
   try {
-    return import_node_fs25.default.statSync(p2).isDirectory();
+    return import_node_fs26.default.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function fileExistsSync(p2) {
   try {
-    return import_node_fs25.default.statSync(p2).isFile();
+    return import_node_fs26.default.statSync(p2).isFile();
   } catch {
     return false;
   }
@@ -49789,7 +49905,7 @@ function fileExistsSync(p2) {
 function parseAgentFile(filePath) {
   let content;
   try {
-    content = import_node_fs25.default.readFileSync(filePath, "utf8");
+    content = import_node_fs26.default.readFileSync(filePath, "utf8");
   } catch {
     return {};
   }
@@ -49802,16 +49918,16 @@ function parseAgentFile(filePath) {
 function scanAgentsDir(dir, source, seen, out) {
   let entries;
   try {
-    entries = import_node_fs25.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs26.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
     if (!ent.name.endsWith(".md")) continue;
-    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path24.default.join(dir, ent.name)))) {
+    if (!ent.isFile() && !(ent.isSymbolicLink() && fileExistsSync(import_node_path27.default.join(dir, ent.name)))) {
       continue;
     }
-    const filePath = import_node_path24.default.join(dir, ent.name);
+    const filePath = import_node_path27.default.join(dir, ent.name);
     const baseName = ent.name.replace(/\.md$/, "");
     if (seen.has(baseName)) continue;
     seen.add(baseName);
@@ -49829,12 +49945,12 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   function walk2(dir, namespaces) {
     let entries;
     try {
-      entries = import_node_fs25.default.readdirSync(dir, { withFileTypes: true });
+      entries = import_node_fs26.default.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const ent of entries) {
-      const childPath = import_node_path24.default.join(dir, ent.name);
+      const childPath = import_node_path27.default.join(dir, ent.name);
       if (ent.isDirectory() || ent.isSymbolicLink() && isDirLikeSync2(childPath)) {
         walk2(childPath, [...namespaces, ent.name]);
         continue;
@@ -49859,13 +49975,13 @@ function scanPluginAgentsTree(root, pluginName, seen, out) {
   walk2(root, []);
 }
 function readInstalledPlugins2(home) {
-  const pluginsDir = import_node_path24.default.join(home, ".claude", "plugins");
-  const v2 = import_node_path24.default.join(pluginsDir, "installed_plugins_v2.json");
-  const v1 = import_node_path24.default.join(pluginsDir, "installed_plugins.json");
+  const pluginsDir = import_node_path27.default.join(home, ".claude", "plugins");
+  const v2 = import_node_path27.default.join(pluginsDir, "installed_plugins_v2.json");
+  const v1 = import_node_path27.default.join(pluginsDir, "installed_plugins.json");
   let raw = null;
   for (const candidate of [v2, v1]) {
     try {
-      raw = import_node_fs25.default.readFileSync(candidate, "utf8");
+      raw = import_node_fs26.default.readFileSync(candidate, "utf8");
       break;
     } catch {
     }
@@ -49890,19 +50006,19 @@ function readInstalledPlugins2(home) {
   return out;
 }
 function walkUpProjectAgentsDirs(startCwd, home, seen, out) {
-  let cur = import_node_path24.default.resolve(startCwd);
-  const fsRoot = import_node_path24.default.parse(cur).root;
+  let cur = import_node_path27.default.resolve(startCwd);
+  const fsRoot = import_node_path27.default.parse(cur).root;
   while (true) {
-    scanAgentsDir(import_node_path24.default.join(cur, ".claude", "agents"), "project", seen, out);
+    scanAgentsDir(import_node_path27.default.join(cur, ".claude", "agents"), "project", seen, out);
     let hasGit = false;
     try {
-      hasGit = import_node_fs25.default.existsSync(import_node_path24.default.join(cur, ".git"));
+      hasGit = import_node_fs26.default.existsSync(import_node_path27.default.join(cur, ".git"));
     } catch {
     }
     if (hasGit) return;
     if (cur === home) return;
     if (cur === fsRoot) return;
-    const parent = import_node_path24.default.dirname(cur);
+    const parent = import_node_path27.default.dirname(cur);
     if (parent === cur) return;
     cur = parent;
   }
@@ -49937,7 +50053,7 @@ var AgentsScanner = class {
     }
     const fsBlock = [];
     scanAgentsDir(
-      import_node_path24.default.join(this.home, ".claude", "agents"),
+      import_node_path27.default.join(this.home, ".claude", "agents"),
       "global",
       seen,
       fsBlock
@@ -49951,7 +50067,7 @@ var AgentsScanner = class {
       ...this.extraPluginRoots
     ];
     for (const { name, root } of plugins) {
-      const agentsRoot = import_node_path24.default.join(root, "agents");
+      const agentsRoot = import_node_path27.default.join(root, "agents");
       scanPluginAgentsTree(agentsRoot, name, seen, fsBlock);
     }
     return [...builtinBlock, ...fsBlock];
@@ -49959,15 +50075,15 @@ var AgentsScanner = class {
 };
 
 // src/observer/session-observer.ts
-var import_node_fs27 = __toESM(require("fs"), 1);
+var import_node_fs28 = __toESM(require("fs"), 1);
 var import_node_os11 = __toESM(require("os"), 1);
-var import_node_path26 = __toESM(require("path"), 1);
+var import_node_path29 = __toESM(require("path"), 1);
 init_claude_history();
 
 // src/observer/subagent-meta-observer.ts
-var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_fs27 = __toESM(require("fs"), 1);
 var import_node_os10 = __toESM(require("os"), 1);
-var import_node_path25 = __toESM(require("path"), 1);
+var import_node_path28 = __toESM(require("path"), 1);
 init_claude_history();
 var META_RE = /^agent-([A-Za-z0-9_-]+)\.meta\.json$/;
 var SubagentMetaObserver = class {
@@ -49980,7 +50096,7 @@ var SubagentMetaObserver = class {
   watches = /* @__PURE__ */ new Map();
   // public for spec only：测试直接拼路径写假 meta.json；生产 start() 内部自己解析
   resolveSubagentDir(cwd, toolSessionId) {
-    return import_node_path25.default.join(
+    return import_node_path28.default.join(
       this.home,
       ".claude",
       "projects",
@@ -50010,7 +50126,7 @@ var SubagentMetaObserver = class {
   attachWatcher(w2) {
     if (w2.watcher) return;
     try {
-      w2.watcher = import_node_fs26.default.watch(w2.dirPath, { persistent: false }, (_evt, name) => {
+      w2.watcher = import_node_fs27.default.watch(w2.dirPath, { persistent: false }, (_evt, name) => {
         if (!name) return;
         const m2 = META_RE.exec(String(name));
         if (!m2) return;
@@ -50022,7 +50138,7 @@ var SubagentMetaObserver = class {
   scan(w2) {
     let entries;
     try {
-      entries = import_node_fs26.default.readdirSync(w2.dirPath);
+      entries = import_node_fs27.default.readdirSync(w2.dirPath);
     } catch {
       return;
     }
@@ -50036,10 +50152,10 @@ var SubagentMetaObserver = class {
     if (!m2) return;
     const agentId = m2[1];
     if (w2.emitted.has(agentId)) return;
-    const file = import_node_path25.default.join(w2.dirPath, name);
+    const file = import_node_path28.default.join(w2.dirPath, name);
     let raw;
     try {
-      raw = import_node_fs26.default.readFileSync(file, "utf8");
+      raw = import_node_fs27.default.readFileSync(file, "utf8");
     } catch {
       return;
     }
@@ -50096,14 +50212,14 @@ var SessionObserver = class {
   metaObserver;
   resolveJsonlPath(cwd, toolSessionId, override) {
     if (override) return override;
-    return import_node_path26.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
+    return import_node_path29.default.join(this.home, ".claude", "projects", cwdToHashDir(cwd), `${toolSessionId}.jsonl`);
   }
   start(args) {
     this.stop(args.sessionId);
     const filePath = this.resolveJsonlPath(args.cwd, args.toolSessionId, args.jsonlPath);
     let size = 0;
     try {
-      size = import_node_fs27.default.statSync(filePath).size;
+      size = import_node_fs28.default.statSync(filePath).size;
     } catch {
     }
     const w2 = {
@@ -50116,16 +50232,16 @@ var SessionObserver = class {
       adapter: args.adapter,
       prevIsRejectSentinel: false,
       toolSessionId: args.toolSessionId,
-      sawFile: import_node_fs27.default.existsSync(filePath),
+      sawFile: import_node_fs28.default.existsSync(filePath),
       lastRelocateScanMs: 0,
       pendingCwdDerive: false,
       lastDeriveMs: 0
     };
     try {
-      import_node_fs27.default.mkdirSync(import_node_path26.default.dirname(filePath), { recursive: true });
+      import_node_fs28.default.mkdirSync(import_node_path29.default.dirname(filePath), { recursive: true });
     } catch {
     }
-    w2.watcher = import_node_fs27.default.watch(import_node_path26.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
+    w2.watcher = import_node_fs28.default.watch(import_node_path29.default.dirname(filePath), { persistent: false }, (_event, changedName) => {
       if (!changedName || !w2.filePath.endsWith(changedName)) return;
       this.poll(w2);
     });
@@ -50148,7 +50264,7 @@ var SessionObserver = class {
   // 异常静默吞，不阻塞 watcher 启动
   hydrateMetaTail(w2, maxLines = 200) {
     try {
-      const raw = import_node_fs27.default.readFileSync(w2.filePath, "utf8");
+      const raw = import_node_fs28.default.readFileSync(w2.filePath, "utf8");
       if (!raw) return;
       const allLines = raw.split("\n").filter((l) => l.trim().length > 0);
       if (allLines.length === 0) return;
@@ -50172,7 +50288,7 @@ var SessionObserver = class {
   poll(w2) {
     let size = 0;
     try {
-      size = import_node_fs27.default.statSync(w2.filePath).size;
+      size = import_node_fs28.default.statSync(w2.filePath).size;
     } catch {
       if (w2.sawFile) this.maybeRelocate(w2);
       return;
@@ -50183,11 +50299,11 @@ var SessionObserver = class {
       w2.buf = "";
     }
     if (size === w2.lastSize) return;
-    const fd = import_node_fs27.default.openSync(w2.filePath, "r");
+    const fd = import_node_fs28.default.openSync(w2.filePath, "r");
     try {
       const len = size - w2.lastSize;
       const buf = Buffer.alloc(len);
-      import_node_fs27.default.readSync(fd, buf, 0, len, w2.lastSize);
+      import_node_fs28.default.readSync(fd, buf, 0, len, w2.lastSize);
       w2.lastSize = size;
       w2.buf += buf.toString("utf8");
       let newlineIndex;
@@ -50210,7 +50326,7 @@ var SessionObserver = class {
         }
       }
     } finally {
-      import_node_fs27.default.closeSync(fd);
+      import_node_fs28.default.closeSync(fd);
     }
     if (w2.pendingCwdDerive) this.maybeDeriveCwd(w2);
   }
@@ -50222,7 +50338,7 @@ var SessionObserver = class {
     const now = Date.now();
     if (now - w2.lastRelocateScanMs < 1e3) return;
     w2.lastRelocateScanMs = now;
-    const projectsRoot = import_node_path26.default.join(this.home, ".claude", "projects");
+    const projectsRoot = import_node_path29.default.join(this.home, ".claude", "projects");
     const found = findTranscriptByToolSessionId(projectsRoot, w2.toolSessionId);
     if (!found || found === w2.filePath) return;
     try {
@@ -50231,7 +50347,7 @@ var SessionObserver = class {
     }
     w2.filePath = found;
     try {
-      w2.watcher = import_node_fs27.default.watch(import_node_path26.default.dirname(found), { persistent: false }, (_event, changedName) => {
+      w2.watcher = import_node_fs28.default.watch(import_node_path29.default.dirname(found), { persistent: false }, (_event, changedName) => {
         if (!changedName || !w2.filePath.endsWith(changedName)) return;
         this.poll(w2);
       });
@@ -50535,9 +50651,9 @@ var LocalWsServer = class {
       this.safeSend(c.ws, frame);
     }
   }
-  // Task 1.9 capability platform：仅广播给 owner 连接（跳过 guest ws）。
-  // 用于 capability:tokenIssued / capability:tokenDeleted 等 owner-only push frame——
-  // guest 没必要也无法消费这类管理帧。noAuth localhost ws 没有 ctx, 视作 owner.
+  // 仅广播给 owner 连接（跳过 guest ws）。用于 contact:added / contact:removed /
+  // contact:pinned / friend:reverseTokenOffered / appBuilder:project-updated 等
+  // owner-only push frame——guest 无需消费。noAuth localhost ws 无 ctx，视作 owner。
   broadcastToOwners(frame) {
     const gate = this.opts.authGate;
     for (const c of this.clients.values()) {
@@ -50611,10 +50727,8 @@ var LocalWsServer = class {
       }
     }
   }
-  // Task 1.10 撤销级联：关闭某 guest principal 的所有活跃 ws 连接。close code 4401
-  // 让客户端识别 'capability revoked' 而非普通断连。
-  // capability:delete 级联用 cap.id 调本方法——noAuth 旧 per-peer cap guest 的
-  // principal.id ≡ cap.id，级联语义不变（Phase 3 决策 #14 正名）。
+  // 关闭某 guest principal 的所有活跃 ws 连接。close code 4401 让客户端识别
+  // 'TOKEN_REVOKED' 而非普通断连；调用方按需触发（如 contact:remove 后要断对方现有连接）。
   closeConnectionsByGuestId(guestPrincipalId, code = 4401, reason = "TOKEN_REVOKED") {
     const set = this.guestIdToClients.get(guestPrincipalId);
     if (!set) return;
@@ -51088,178 +51202,25 @@ async function authenticate(token, deps) {
   };
 }
 
-// src/permission/capability-store.ts
-var fs32 = __toESM(require("fs"), 1);
-var path31 = __toESM(require("path"), 1);
-var CAPABILITIES_FILE_NAME = "capabilities.json";
-var FILE_VERSION = 1;
-var CapabilityStore = class {
-  constructor(dataDir) {
-    this.dataDir = dataDir;
-    fs32.mkdirSync(dataDir, { recursive: true });
-    this.cache = this.readFromDisk();
-  }
-  dataDir;
-  cache;
-  list() {
-    return [...this.cache];
-  }
-  upsert(cap) {
-    const idx = this.cache.findIndex((c) => c.id === cap.id);
-    if (idx >= 0) {
-      this.cache[idx] = cap;
-    } else {
-      this.cache.push(cap);
-    }
-    this.flush();
-  }
-  remove(id) {
-    const next = this.cache.filter((c) => c.id !== id);
-    if (next.length === this.cache.length) return;
-    this.cache = next;
-    this.flush();
-  }
-  filePath() {
-    return path31.join(this.dataDir, CAPABILITIES_FILE_NAME);
-  }
-  readFromDisk() {
-    const file = this.filePath();
-    let raw;
-    try {
-      raw = fs32.readFileSync(file, "utf8");
-    } catch (err) {
-      if (err?.code === "ENOENT") return [];
-      return [];
-    }
-    if (!raw.trim()) return [];
-    let parsed;
-    try {
-      parsed = JSON.parse(raw);
-    } catch {
-      return [];
-    }
-    if (!parsed || typeof parsed !== "object") return [];
-    const arr = parsed.capabilities;
-    if (!Array.isArray(arr)) return [];
-    const out = [];
-    for (const item of arr) {
-      const r = CapabilitySchema.safeParse(item);
-      if (r.success) out.push(r.data);
-    }
-    return out;
-  }
-  flush() {
-    const content = { version: FILE_VERSION, capabilities: this.cache };
-    this.atomicWrite(this.filePath(), JSON.stringify(content, null, 2));
-  }
-  atomicWrite(file, content) {
-    const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
-    fs32.writeFileSync(tmp, content, { mode: 384 });
-    fs32.renameSync(tmp, file);
-    try {
-      fs32.chmodSync(file, 384);
-    } catch {
-    }
-  }
-};
-
-// src/permission/capability-registry.ts
-var crypto5 = __toESM(require("crypto"), 1);
-var CapabilityRegistry = class {
-  constructor(store, now = () => Date.now()) {
-    this.store = store;
-    this.now = now;
-    for (const cap of store.list()) {
-      this.bySecretHash.set(cap.secretHash, cap);
-    }
-  }
-  store;
-  now;
-  // sha256(token) → Capability
-  bySecretHash = /* @__PURE__ */ new Map();
-  list() {
-    return this.store.list();
-  }
-  verifyToken(token) {
-    if (!token) return { ok: false, code: "TOKEN_INVALID" };
-    const hash = sha256Hex(token);
-    const cap = this.bySecretHash.get(hash);
-    if (!cap) return { ok: false, code: "TOKEN_INVALID" };
-    if (cap.expiresAt && this.now() >= cap.expiresAt) {
-      return { ok: false, code: "TOKEN_EXPIRED" };
-    }
-    if (cap.maxUses && cap.usedCount >= cap.maxUses) {
-      return { ok: false, code: "TOKEN_EXHAUSTED" };
-    }
-    const updated = { ...cap, usedCount: cap.usedCount + 1 };
-    this.bySecretHash.set(hash, updated);
-    this.store.upsert(updated);
-    return { ok: true, capability: updated };
-  }
-  upsertCapability(cap) {
-    this.bySecretHash.set(cap.secretHash, cap);
-    this.store.upsert(cap);
-  }
-  /**
-   * Hard delete：从 store 物理移除 + 从 Map 清掉 secretHash 索引。
-   * 后续 verifyToken 该 token 走 'TOKEN_INVALID' 分支（secretHash 已不在 Map）。
-   * idempotent：不存在 → null。
-   */
-  delete(id) {
-    const current = this.store.list().find((c) => c.id === id);
-    if (!current) return null;
-    this.bySecretHash.delete(current.secretHash);
-    this.store.remove(id);
-    return current;
-  }
-  findById(id) {
-    return this.store.list().find((c) => c.id === id) ?? null;
-  }
-};
-function sha256Hex(s) {
-  return crypto5.createHash("sha256").update(s).digest("hex");
-}
-
-// src/permission/capability-manager.ts
-var CapabilityManager = class {
-  constructor(registry2, hooks = {}) {
-    this.registry = registry2;
-    this.hooks = hooks;
-  }
-  registry;
-  hooks;
-  list() {
-    return this.registry.list();
-  }
-  // 调试 / 旧 per-peer cap 反查用（Phase 3 决策 #14 后无生产调用方，保留属三件套范围）。
-  // 返回 Capability 持久化形态；调用方需 stripSecretHash 后再上 wire。
-  findById(id) {
-    return this.registry.findById(id);
-  }
-  /**
-   * Hard delete：从 registry / store 物理移除 capability。
-   * idempotent：不存在 → null（handler 翻译成 VALIDATION_ERROR）
-   * onDeleted hook 在 daemon/index.ts wire 负责 close 连接 + cleanup 文件 + 广播
-   */
-  delete(id) {
-    const removed = this.registry.delete(id);
-    if (!removed) return null;
-    this.hooks.onDeleted?.(removed);
-    return { capability: removed };
-  }
-};
-
-// src/permission/cleanup.ts
-var fs33 = __toESM(require("fs"), 1);
-function cleanupGuestSessionsForCapability(cap, factory) {
+// src/legacy-cleanup.ts
+var fs33 = __toESM(require("fs/promises"), 1);
+var path34 = __toESM(require("path"), 1);
+var LEGACY_FILES = [
+  "personal-capability.json",
+  "received-capabilities.json",
+  "capabilities.json"
+];
+async function cleanupLegacyCapabilityFiles(dataDir, logger) {
   const removed = [];
-  for (const g2 of cap.grants) {
-    if (g2.resource.type !== "persona") continue;
-    const dir = factory.vmGuestRoot(g2.resource.id, cap.id);
+  for (const name of LEGACY_FILES) {
+    const p2 = path34.join(dataDir, name);
     try {
-      fs33.rmSync(dir, { recursive: true, force: true });
-      removed.push(dir);
-    } catch {
+      await fs33.unlink(p2);
+      removed.push(name);
+      logger.debug("legacy capability file removed", { file: name });
+    } catch (err) {
+      if (err?.code === "ENOENT") continue;
+      throw err;
     }
   }
   return { removed };
@@ -51267,7 +51228,7 @@ function cleanupGuestSessionsForCapability(cap, factory) {
 
 // src/inbox/inbox-store.ts
 var fs34 = __toESM(require("fs"), 1);
-var path32 = __toESM(require("path"), 1);
+var path35 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
@@ -51365,10 +51326,10 @@ var InboxStore = class {
     }
   }
   dirPath() {
-    return path32.join(this.dataDir, INBOX_SUBDIR);
+    return path35.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerDeviceId) {
-    return path32.join(this.dirPath(), `${peerDeviceId}.jsonl`);
+    return path35.join(this.dirPath(), `${peerDeviceId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -51457,7 +51418,7 @@ var InboxManager = class {
 
 // src/state/contact-store.ts
 var fs35 = __toESM(require("fs"), 1);
-var path33 = __toESM(require("path"), 1);
+var path36 = __toESM(require("path"), 1);
 var FILE_NAME = "contacts.json";
 var ContactStore = class {
   constructor(dataDir) {
@@ -51467,7 +51428,7 @@ var ContactStore = class {
   contacts = /* @__PURE__ */ new Map();
   load() {
     this.contacts.clear();
-    const file = path33.join(this.dataDir, FILE_NAME);
+    const file = path36.join(this.dataDir, FILE_NAME);
     let raw;
     try {
       raw = fs35.readFileSync(file, "utf8");
@@ -51539,7 +51500,7 @@ var ContactStore = class {
     return true;
   }
   flush() {
-    const file = path33.join(this.dataDir, FILE_NAME);
+    const file = path36.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
       { contacts: Array.from(this.contacts.values()) },
@@ -51559,7 +51520,7 @@ var ContactStore = class {
 };
 
 // src/contact/connect-remote.ts
-var crypto6 = __toESM(require("crypto"), 1);
+var crypto5 = __toESM(require("crypto"), 1);
 var HANDSHAKE_TIMEOUT_MS = 5e3;
 var RPC_TIMEOUT_MS = 5e3;
 async function connectRemote(args) {
@@ -51623,7 +51584,7 @@ async function connectRemote(args) {
     ws.once("close", onClose);
   });
   function call(method, payload) {
-    const requestId = crypto6.randomUUID();
+    const requestId = crypto5.randomUUID();
     return new Promise((resolve6, reject) => {
       const onMessage = (raw) => {
         let f;
@@ -51706,52 +51667,52 @@ async function autoReverseContact(args) {
 
 // src/migrations/2026-05-20-flatten-sessions.ts
 var fs36 = __toESM(require("fs"), 1);
-var path34 = __toESM(require("path"), 1);
+var path37 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path34.join(dataDir, "sessions");
-  const flagPath = path34.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path37.join(dataDir, "sessions");
+  const flagPath = path37.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path34.join(sessionsDir, "default");
+  const defaultDir = path37.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path34.join(defaultDir, entry);
-      const dst = path34.join(sessionsDir, entry);
+      const src = path37.join(defaultDir, entry);
+      const dst = path37.join(sessionsDir, entry);
       fs36.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path34.join(sessionsDir, pid);
+    const personaDir = path37.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path34.join(personaDir, "owner");
+    const ownerSrc = path37.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path34.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      const ownerDst = path37.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
       fs36.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs36.renameSync(path34.join(ownerSrc, file), path34.join(ownerDst, file));
+        fs36.renameSync(path37.join(ownerSrc, file), path37.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path34.join(personaDir, "listener");
+    const listenerSrc = path37.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path34.join(dataDir, ".legacy", `listener-${pid}`);
+      const archiveDst = path37.join(dataDir, ".legacy", `listener-${pid}`);
       fs36.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs36.renameSync(path34.join(listenerSrc, file), path34.join(archiveDst, file));
+        fs36.renameSync(path37.join(listenerSrc, file), path37.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
@@ -51798,11 +51759,11 @@ function rmdirIfEmpty(p2) {
 }
 
 // src/transport/http-router.ts
-var import_node_fs29 = __toESM(require("fs"), 1);
-var import_node_path30 = __toESM(require("path"), 1);
+var import_node_fs30 = __toESM(require("fs"), 1);
+var import_node_path33 = __toESM(require("path"), 1);
 
 // src/attachment/mime.ts
-var import_node_path27 = __toESM(require("path"), 1);
+var import_node_path30 = __toESM(require("path"), 1);
 var TEXT_PLAIN = "text/plain; charset=utf-8";
 var EXT_TO_NATIVE_MIME = {
   // 图片
@@ -51909,7 +51870,7 @@ var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
   ".mk"
 ]);
 function lookupMime(filePathOrName) {
-  const ext = import_node_path27.default.extname(filePathOrName).toLowerCase();
+  const ext = import_node_path30.default.extname(filePathOrName).toLowerCase();
   if (EXT_TO_NATIVE_MIME[ext]) return EXT_TO_NATIVE_MIME[ext];
   if (TEXT_EXTENSIONS.has(ext)) return TEXT_PLAIN;
   return "application/octet-stream";
@@ -51978,8 +51939,8 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
 }
 
 // src/attachment/upload.ts
-var import_node_fs28 = __toESM(require("fs"), 1);
-var import_node_path28 = __toESM(require("path"), 1);
+var import_node_fs29 = __toESM(require("fs"), 1);
+var import_node_path31 = __toESM(require("path"), 1);
 var import_node_crypto8 = __toESM(require("crypto"), 1);
 var import_promises3 = require("stream/promises");
 var UploadError = class extends Error {
@@ -51991,22 +51952,22 @@ var UploadError = class extends Error {
   code;
 };
 function assertValidFileName(fileName) {
-  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path28.default.basename(fileName)) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path31.default.basename(fileName)) {
     throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
   }
 }
 var HASH_PREFIX_LEN = 16;
 async function writeUploadedAttachment(args) {
   assertValidFileName(args.fileName);
-  const attachmentsRoot = import_node_path28.default.join(args.sessionDir, ".attachments");
+  const attachmentsRoot = import_node_path31.default.join(args.sessionDir, ".attachments");
   try {
-    import_node_fs28.default.mkdirSync(attachmentsRoot, { recursive: true });
+    import_node_fs29.default.mkdirSync(attachmentsRoot, { recursive: true });
   } catch (err) {
     throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
   }
   const hasher = import_node_crypto8.default.createHash("sha256");
   let actualSize = 0;
-  const tmpPath = import_node_path28.default.join(
+  const tmpPath = import_node_path31.default.join(
     attachmentsRoot,
     `.upload-${process.pid}-${Date.now()}-${import_node_crypto8.default.randomBytes(4).toString("hex")}`
   );
@@ -52021,18 +51982,18 @@ async function writeUploadedAttachment(args) {
           yield buf;
         }
       },
-      import_node_fs28.default.createWriteStream(tmpPath, { mode: 384 })
+      import_node_fs29.default.createWriteStream(tmpPath, { mode: 384 })
     );
   } catch (err) {
     try {
-      import_node_fs28.default.unlinkSync(tmpPath);
+      import_node_fs29.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError("STORAGE_ERROR", `write failed: ${err.message}`);
   }
   if (actualSize !== args.contentLength) {
     try {
-      import_node_fs28.default.unlinkSync(tmpPath);
+      import_node_fs29.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError(
@@ -52041,35 +52002,35 @@ async function writeUploadedAttachment(args) {
     );
   }
   const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
-  const hashDir = import_node_path28.default.join(attachmentsRoot, attachmentId);
+  const hashDir = import_node_path31.default.join(attachmentsRoot, attachmentId);
   let finalFileName;
   let hashDirExists = false;
   try {
-    hashDirExists = import_node_fs28.default.statSync(hashDir).isDirectory();
+    hashDirExists = import_node_fs29.default.statSync(hashDir).isDirectory();
   } catch {
   }
   if (hashDirExists) {
-    const existing = import_node_fs28.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
+    const existing = import_node_fs29.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
     finalFileName = existing[0] ?? args.fileName;
     try {
-      import_node_fs28.default.unlinkSync(tmpPath);
+      import_node_fs29.default.unlinkSync(tmpPath);
     } catch {
     }
   } else {
     try {
-      import_node_fs28.default.mkdirSync(hashDir, { recursive: true });
+      import_node_fs29.default.mkdirSync(hashDir, { recursive: true });
       finalFileName = args.fileName;
-      import_node_fs28.default.renameSync(tmpPath, import_node_path28.default.join(hashDir, finalFileName));
+      import_node_fs29.default.renameSync(tmpPath, import_node_path31.default.join(hashDir, finalFileName));
     } catch (err) {
       try {
-        import_node_fs28.default.unlinkSync(tmpPath);
+        import_node_fs29.default.unlinkSync(tmpPath);
       } catch {
       }
       throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
     }
   }
-  const absPath = import_node_path28.default.join(hashDir, finalFileName);
-  const relPath = import_node_path28.default.relative(args.sessionDir, absPath);
+  const absPath = import_node_path31.default.join(hashDir, finalFileName);
+  const relPath = import_node_path31.default.relative(args.sessionDir, absPath);
   args.groupFileStore.upsert(args.scope, args.sessionId, {
     relPath: absPath,
     // 存绝对路径，与现有 agent 入清单的形态一致（attachment.ts:144 双形态兼容）
@@ -52083,7 +52044,7 @@ async function writeUploadedAttachment(args) {
 
 // src/extension/import.ts
 var import_promises4 = __toESM(require("fs/promises"), 1);
-var import_node_path29 = __toESM(require("path"), 1);
+var import_node_path32 = __toESM(require("path"), 1);
 var import_node_os12 = __toESM(require("os"), 1);
 var import_jszip = __toESM(require_lib3(), 1);
 var ImportError = class extends Error {
@@ -52101,7 +52062,7 @@ async function importZip(buf, root) {
     throw new ImportError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path29.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path32.default.isAbsolute(name)) {
       throw new ImportError("ZIP_INVALID", `unsafe zip entry path: ${name}`);
     }
   }
@@ -52134,7 +52095,7 @@ async function importZip(buf, root) {
       );
     }
   }
-  const destDir = import_node_path29.default.join(root, manifest.id);
+  const destDir = import_node_path32.default.join(root, manifest.id);
   let destExists = false;
   try {
     await import_promises4.default.access(destDir);
@@ -52144,15 +52105,15 @@ async function importZip(buf, root) {
   if (destExists) {
     throw new ImportError("ALREADY_EXISTS", `extension ${manifest.id} already installed`);
   }
-  const stage = await import_promises4.default.mkdtemp(import_node_path29.default.join(import_node_os12.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
+  const stage = await import_promises4.default.mkdtemp(import_node_path32.default.join(import_node_os12.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path29.default.join(stage, name);
+      const dest = import_node_path32.default.join(stage, name);
       if (entry.dir) {
         await import_promises4.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises4.default.mkdir(import_node_path29.default.dirname(dest), { recursive: true });
+      await import_promises4.default.mkdir(import_node_path32.default.dirname(dest), { recursive: true });
       const content = await entry.async("nodebuffer");
       await import_promises4.default.writeFile(dest, content);
     }
@@ -52183,7 +52144,7 @@ var SHARE_UI_ASSET_MIME = {
   ".wasm": "application/wasm"
 };
 function shareUiAssetMime(filePath) {
-  const ext = import_node_path30.default.extname(filePath).toLowerCase();
+  const ext = import_node_path33.default.extname(filePath).toLowerCase();
   return SHARE_UI_ASSET_MIME[ext] ?? lookupMime(filePath);
 }
 var DISPATCH_HEARTBEAT_MS = 25e3;
@@ -52270,7 +52231,7 @@ function isValidUploadFileName(fileName) {
   if (fileName === "." || fileName === "..") return false;
   if (fileName.startsWith(".")) return false;
   if (fileName.includes("/") || fileName.includes("\\")) return false;
-  return fileName === import_node_path30.default.basename(fileName);
+  return fileName === import_node_path33.default.basename(fileName);
 }
 function createHttpRouter(deps) {
   return async (req, res) => {
@@ -52342,7 +52303,7 @@ function createHttpRouter(deps) {
       }
       let buf;
       try {
-        buf = await import_node_fs29.default.promises.readFile(abs);
+        buf = await import_node_fs30.default.promises.readFile(abs);
       } catch {
         sendJson(res, 404, { code: "NOT_FOUND", message: "asset not found" });
         return true;
@@ -52566,7 +52527,7 @@ function createHttpRouter(deps) {
         sendHtml(res, statusByCode[r.code], loader.renderErrorHtml(r.code, msgByCode[r.code]));
         return true;
       }
-      sendHtml(res, 200, loader.renderViewerHtml(import_node_path30.default.basename(r.absPath)));
+      sendHtml(res, 200, loader.renderViewerHtml(import_node_path33.default.basename(r.absPath)));
       return true;
     }
     const ctx = deps.authResolver.resolveFromHeader(
@@ -52687,7 +52648,7 @@ function createHttpRouter(deps) {
         return true;
       }
       let absPath;
-      if (import_node_path30.default.isAbsolute(pathParam)) {
+      if (import_node_path33.default.isAbsolute(pathParam)) {
         absPath = pathParam;
       } else if (deps.sessionStore) {
         const file = deps.sessionStore.read(sid);
@@ -52695,7 +52656,7 @@ function createHttpRouter(deps) {
           sendJson(res, 404, { code: "NOT_FOUND", message: `session ${sid} not found` });
           return true;
         }
-        absPath = import_node_path30.default.join(file.cwd, pathParam);
+        absPath = import_node_path33.default.join(file.cwd, pathParam);
       } else {
         sendJson(res, 501, withCtx(ctx, { code: "NOT_IMPLEMENTED", message: "sessionStore not wired" }));
         return true;
@@ -52782,7 +52743,7 @@ function withCtx(ctx, body) {
 function streamFile(res, absPath, logger) {
   let stat;
   try {
-    stat = import_node_fs29.default.statSync(absPath);
+    stat = import_node_fs30.default.statSync(absPath);
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") {
@@ -52797,7 +52758,7 @@ function streamFile(res, absPath, logger) {
     return;
   }
   const mime = lookupMime(absPath);
-  const basename = import_node_path30.default.basename(absPath);
+  const basename = import_node_path33.default.basename(absPath);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": String(stat.size),
@@ -52805,7 +52766,7 @@ function streamFile(res, absPath, logger) {
     // 防止浏览器把任意 mime 当 html 渲染
     "X-Content-Type-Options": "nosniff"
   });
-  const stream = import_node_fs29.default.createReadStream(absPath);
+  const stream = import_node_fs30.default.createReadStream(absPath);
   stream.on("error", (err) => {
     logger?.warn("streamFile read error", { absPath, err: err.message });
     res.destroy();
@@ -52814,8 +52775,8 @@ function streamFile(res, absPath, logger) {
 }
 
 // src/attachment/gc.ts
-var import_node_fs30 = __toESM(require("fs"), 1);
-var import_node_path31 = __toESM(require("path"), 1);
+var import_node_fs31 = __toESM(require("fs"), 1);
+var import_node_path34 = __toESM(require("path"), 1);
 var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
 function runAttachmentGc(args) {
   const now = (args.now ?? Date.now)();
@@ -52824,38 +52785,38 @@ function runAttachmentGc(args) {
   for (const { scope, sessionId } of args.sessionScopes) {
     for (const entry of args.groupFileStore.list(scope, sessionId)) {
       if (entry.stale) continue;
-      if (import_node_path31.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+      if (import_node_path34.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
     }
   }
   for (const { scope, sessionId } of args.sessionScopes) {
-    const sessionDir = args.getSessionCwd?.(sessionId) ?? import_node_path31.default.join(
+    const sessionDir = args.getSessionCwd?.(sessionId) ?? import_node_path34.default.join(
       args.dataDir,
       "sessions",
       ...scopeSubPath(scope).map(safeFileName),
       safeFileName(sessionId)
     );
-    const attRoot = import_node_path31.default.join(sessionDir, ".attachments");
+    const attRoot = import_node_path34.default.join(sessionDir, ".attachments");
     let hashDirs;
     try {
-      hashDirs = import_node_fs30.default.readdirSync(attRoot);
+      hashDirs = import_node_fs31.default.readdirSync(attRoot);
     } catch (err) {
       if (err.code === "ENOENT") continue;
       args.logger?.warn("attachment gc: readdir failed", { attRoot, err: err.message });
       continue;
     }
     for (const hashDir of hashDirs) {
-      const hashDirAbs = import_node_path31.default.join(attRoot, hashDir);
+      const hashDirAbs = import_node_path34.default.join(attRoot, hashDir);
       let files;
       try {
-        files = import_node_fs30.default.readdirSync(hashDirAbs);
+        files = import_node_fs31.default.readdirSync(hashDirAbs);
       } catch {
         continue;
       }
       for (const name of files) {
-        const file = import_node_path31.default.join(hashDirAbs, name);
+        const file = import_node_path34.default.join(hashDirAbs, name);
         let stat;
         try {
-          stat = import_node_fs30.default.statSync(file);
+          stat = import_node_fs31.default.statSync(file);
         } catch {
           continue;
         }
@@ -52864,26 +52825,26 @@ function runAttachmentGc(args) {
         if (age < ttlMs) continue;
         if (liveAbs.has(file)) continue;
         try {
-          import_node_fs30.default.unlinkSync(file);
+          import_node_fs31.default.unlinkSync(file);
         } catch (err) {
           args.logger?.warn("attachment gc: unlink failed", { file, err: err.message });
         }
       }
       try {
-        if (import_node_fs30.default.readdirSync(hashDirAbs).length === 0) import_node_fs30.default.rmdirSync(hashDirAbs);
+        if (import_node_fs31.default.readdirSync(hashDirAbs).length === 0) import_node_fs31.default.rmdirSync(hashDirAbs);
       } catch {
       }
     }
     try {
-      if (import_node_fs30.default.readdirSync(attRoot).length === 0) import_node_fs30.default.rmdirSync(attRoot);
+      if (import_node_fs31.default.readdirSync(attRoot).length === 0) import_node_fs31.default.rmdirSync(attRoot);
     } catch {
     }
   }
 }
 
 // src/attachment/group.ts
-var import_node_fs31 = __toESM(require("fs"), 1);
-var import_node_path32 = __toESM(require("path"), 1);
+var import_node_fs32 = __toESM(require("fs"), 1);
+var import_node_path35 = __toESM(require("path"), 1);
 var import_node_crypto9 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
@@ -52895,11 +52856,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path32.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path35.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path32.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path35.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -52908,7 +52869,7 @@ var GroupFileStore = class {
   readFile(scope, sessionId) {
     const file = this.filePath(scope, sessionId);
     try {
-      const raw = import_node_fs31.default.readFileSync(file, "utf8");
+      const raw = import_node_fs32.default.readFileSync(file, "utf8");
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) {
         this.logger?.warn("GroupFileStore.readFile: not an array; resetting session entries", {
@@ -52934,10 +52895,10 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs31.default.mkdirSync(import_node_path32.default.dirname(file), { recursive: true });
+    import_node_fs32.default.mkdirSync(import_node_path35.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs31.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
-    import_node_fs31.default.renameSync(tmp, file);
+    import_node_fs32.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
+    import_node_fs32.default.renameSync(tmp, file);
   }
   /** 拉一份当前 session 的清单。读盘 → cache；之后调用复用 cache */
   list(scope, sessionId) {
@@ -53023,10 +52984,10 @@ var GroupFileStore = class {
 };
 
 // src/discovery/state-file.ts
-var import_node_fs32 = __toESM(require("fs"), 1);
-var import_node_path33 = __toESM(require("path"), 1);
+var import_node_fs33 = __toESM(require("fs"), 1);
+var import_node_path36 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path33.default.join(dataDir, "state.json");
+  return import_node_path36.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -53048,7 +53009,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs32.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs33.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -53062,20 +53023,20 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs32.default.mkdirSync(import_node_path33.default.dirname(this.file), { recursive: true });
+    import_node_fs33.default.mkdirSync(import_node_path36.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs32.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs32.default.renameSync(tmp, this.file);
+    import_node_fs33.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs33.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs32.default.chmodSync(this.file, 384);
+        import_node_fs33.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs32.default.unlinkSync(this.file);
+      import_node_fs33.default.unlinkSync(this.file);
     } catch {
     }
   }
@@ -53089,14 +53050,14 @@ function readSpawnedByDesktopFromEnv(env = process.env) {
 }
 
 // src/tunnel/tunnel-manager.ts
-var import_node_fs36 = __toESM(require("fs"), 1);
-var import_node_path37 = __toESM(require("path"), 1);
+var import_node_fs37 = __toESM(require("fs"), 1);
+var import_node_path40 = __toESM(require("path"), 1);
 var import_node_crypto10 = __toESM(require("crypto"), 1);
-var import_node_child_process9 = require("child_process");
+var import_node_child_process10 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
-var import_node_fs33 = __toESM(require("fs"), 1);
-var import_node_path34 = __toESM(require("path"), 1);
+var import_node_fs34 = __toESM(require("fs"), 1);
+var import_node_path37 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -53104,7 +53065,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs33.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs34.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -53115,22 +53076,22 @@ var TunnelStore = class {
     }
   }
   async set(v2) {
-    const dir = import_node_path34.default.dirname(this.filePath);
-    await import_node_fs33.default.promises.mkdir(dir, { recursive: true });
+    const dir = import_node_path37.default.dirname(this.filePath);
+    await import_node_fs34.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs33.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs34.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs33.default.promises.chmod(tmp, 384);
+        await import_node_fs34.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs33.default.promises.rename(tmp, this.filePath);
+    await import_node_fs34.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs33.default.promises.unlink(this.filePath);
+      await import_node_fs34.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -53225,10 +53186,10 @@ function escape(v2) {
 }
 
 // src/tunnel/frpc-binary.ts
-var import_node_fs34 = __toESM(require("fs"), 1);
+var import_node_fs35 = __toESM(require("fs"), 1);
 var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path35 = __toESM(require("path"), 1);
-var import_node_child_process7 = require("child_process");
+var import_node_path38 = __toESM(require("path"), 1);
+var import_node_child_process8 = require("child_process");
 var import_node_stream3 = require("stream");
 var import_promises5 = require("stream/promises");
 var FRPC_VERSION = "0.68.0";
@@ -53259,20 +53220,20 @@ function frpcDownloadUrl(version2, p2) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs34.default.existsSync(opts.override)) {
+    if (!import_node_fs35.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path35.default.join(opts.dataDir, "bin");
-  import_node_fs34.default.mkdirSync(binDir, { recursive: true });
+  const binDir = import_node_path38.default.join(opts.dataDir, "bin");
+  import_node_fs35.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path35.default.join(binDir, "frpc");
-  if (import_node_fs34.default.existsSync(stableBin)) return stableBin;
+  const stableBin = import_node_path38.default.join(binDir, "frpc");
+  if (import_node_fs35.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path35.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path38.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -53281,8 +53242,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs34.default.chmodSync(partialBin, 493);
-    import_node_fs34.default.renameSync(partialBin, stableBin);
+    import_node_fs35.default.chmodSync(partialBin, 493);
+    import_node_fs35.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -53292,15 +53253,15 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs34.default.readdirSync(binDir);
+    entries = import_node_fs35.default.readdirSync(binDir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path35.default.join(binDir, name);
+      const full = import_node_path38.default.join(binDir, name);
       try {
-        import_node_fs34.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs35.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -53308,7 +53269,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p2) {
   try {
-    import_node_fs34.default.unlinkSync(p2);
+    import_node_fs35.default.unlinkSync(p2);
   } catch {
   }
 }
@@ -53319,46 +53280,46 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs34.default.createWriteStream(dest);
+  const out = import_node_fs35.default.createWriteStream(dest);
   const nodeStream = import_node_stream3.Readable.fromWeb(res.body);
   await (0, import_promises5.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path35.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs34.default.mkdirSync(work, { recursive: true });
+  const work = import_node_path38.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  import_node_fs35.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve6, reject) => {
-      const proc = (0, import_node_child_process7.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
+      const proc = (0, import_node_child_process8.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
       proc.on("error", reject);
       proc.on("exit", (code) => code === 0 ? resolve6() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path35.default.join(work, dirName, "frpc");
-    if (!import_node_fs34.default.existsSync(src)) {
+    const src = import_node_path38.default.join(work, dirName, "frpc");
+    if (!import_node_fs35.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs34.default.copyFileSync(src, destBin);
+    import_node_fs35.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs34.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs35.default.rmSync(work, { recursive: true, force: true });
   }
 }
 
 // src/tunnel/frpc-process.ts
-var import_node_fs35 = __toESM(require("fs"), 1);
-var import_node_path36 = __toESM(require("path"), 1);
-var import_node_child_process8 = require("child_process");
+var import_node_fs36 = __toESM(require("fs"), 1);
+var import_node_path39 = __toESM(require("path"), 1);
+var import_node_child_process9 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path36.default.join(dataDir, "frpc.pid");
+  return import_node_path39.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
-    import_node_fs35.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
+    import_node_fs36.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearFrpcPid(dataDir) {
   try {
-    import_node_fs35.default.unlinkSync(frpcPidFilePath(dataDir));
+    import_node_fs36.default.unlinkSync(frpcPidFilePath(dataDir));
   } catch {
   }
 }
@@ -53374,7 +53335,7 @@ function defaultIsPidAlive(pid) {
 }
 function defaultReadPidFile(file) {
   try {
-    return import_node_fs35.default.readFileSync(file, "utf8");
+    return import_node_fs36.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -53390,7 +53351,7 @@ function defaultSleep(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path36.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path39.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -53414,7 +53375,7 @@ async function killStaleFrpc(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs35.default.unlinkSync(pidFile);
+      import_node_fs36.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -53425,14 +53386,14 @@ async function killStaleFrpc(deps) {
   }
   await sleep2(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs35.default.unlinkSync(pidFile);
+    import_node_fs36.default.unlinkSync(pidFile);
   } catch {
   }
 }
 async function defaultScanFrpcPidsByCmdline(tomlPath, logger) {
   if (process.platform === "win32") return [];
   return new Promise((resolve6) => {
-    const ps = (0, import_node_child_process8.spawn)("ps", ["-axo", "pid=,command="], { stdio: ["ignore", "pipe", "ignore"] });
+    const ps = (0, import_node_child_process9.spawn)("ps", ["-axo", "pid=,command="], { stdio: ["ignore", "pipe", "ignore"] });
     let buf = "";
     ps.stdout.on("data", (c) => {
       buf += c.toString();
@@ -53462,7 +53423,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path37.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path40.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -53589,7 +53550,7 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path37.default.join(this.deps.dataDir, "frpc.toml");
+      const tomlPath = import_node_path40.default.join(this.deps.dataDir, "frpc.toml");
       const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto10.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
@@ -53600,14 +53561,14 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs36.default.promises.writeFile(tomlPath, toml, { mode: 384 });
-      const proc = (this.deps.spawnImpl ?? import_node_child_process9.spawn)(frpcBin, ["-c", tomlPath], {
+      await import_node_fs37.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      const proc = (this.deps.spawnImpl ?? import_node_child_process10.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logDir = import_node_path37.default.join(this.deps.dataDir, "log");
-      import_node_fs36.default.mkdirSync(logDir, { recursive: true });
-      const logFilePath = import_node_path37.default.join(logDir, "frpc.log");
-      const logStream = import_node_fs36.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logDir = import_node_path40.default.join(this.deps.dataDir, "log");
+      import_node_fs37.default.mkdirSync(logDir, { recursive: true });
+      const logFilePath = import_node_path40.default.join(logDir, "frpc.log");
+      const logStream = import_node_fs37.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -53690,27 +53651,27 @@ async function waitForFrpcReady(proc, timeoutMs) {
 
 // src/tunnel/device-key.ts
 var import_node_os14 = __toESM(require("os"), 1);
-var import_node_path38 = __toESM(require("path"), 1);
+var import_node_path41 = __toESM(require("path"), 1);
 var import_node_crypto11 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os14.default.hostname();
   const uid = opts.uid ?? (typeof import_node_os14.default.userInfo === "function" ? import_node_os14.default.userInfo().uid : 0);
   const home = opts.home ?? import_node_os14.default.homedir();
-  const defaultDataDir = import_node_path38.default.resolve(import_node_path38.default.join(home, ".clawd"));
-  const normalizedDataDir = opts.dataDir ? import_node_path38.default.resolve(opts.dataDir) : null;
+  const defaultDataDir = import_node_path41.default.resolve(import_node_path41.default.join(home, ".clawd"));
+  const normalizedDataDir = opts.dataDir ? import_node_path41.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
   return import_node_crypto11.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
-var import_node_fs37 = __toESM(require("fs"), 1);
-var import_node_path39 = __toESM(require("path"), 1);
+var import_node_fs38 = __toESM(require("fs"), 1);
+var import_node_path42 = __toESM(require("path"), 1);
 var import_node_crypto12 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path39.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path42.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -53746,7 +53707,7 @@ function defaultGenerateOwnerPrincipalId() {
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs37.default.readFileSync(file, "utf8");
+    const raw = import_node_fs38.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -53766,25 +53727,25 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs37.default.mkdirSync(import_node_path39.default.dirname(file), { recursive: true });
-  import_node_fs37.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs38.default.mkdirSync(import_node_path42.default.dirname(file), { recursive: true });
+  import_node_fs38.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs37.default.chmodSync(file, 384);
+    import_node_fs38.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs38 = __toESM(require("fs"), 1);
+var import_node_fs39 = __toESM(require("fs"), 1);
 var import_node_os15 = __toESM(require("os"), 1);
-var import_node_path40 = __toESM(require("path"), 1);
+var import_node_path43 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function loadOwnerDisplayName(dataDir) {
   const fallback = import_node_os15.default.userInfo().username;
-  const profilePath = import_node_path40.default.join(dataDir, PROFILE_FILENAME);
+  const profilePath = import_node_path43.default.join(dataDir, PROFILE_FILENAME);
   let raw;
   try {
-    raw = import_node_fs38.default.readFileSync(profilePath, "utf8");
+    raw = import_node_fs39.default.readFileSync(profilePath, "utf8");
   } catch {
     return fallback;
   }
@@ -53807,18 +53768,18 @@ function loadOwnerDisplayName(dataDir) {
 }
 
 // src/feishu-auth/owner-identity-store.ts
-var import_node_fs39 = __toESM(require("fs"), 1);
-var import_node_path41 = __toESM(require("path"), 1);
+var import_node_fs40 = __toESM(require("fs"), 1);
+var import_node_path44 = __toESM(require("path"), 1);
 var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
 var OwnerIdentityStore = class {
   file;
   constructor(dataDir) {
-    this.file = import_node_path41.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
+    this.file = import_node_path44.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
   }
   read() {
     let raw;
     try {
-      raw = import_node_fs39.default.readFileSync(this.file, "utf8");
+      raw = import_node_fs40.default.readFileSync(this.file, "utf8");
     } catch {
       return null;
     }
@@ -53846,16 +53807,16 @@ var OwnerIdentityStore = class {
     };
   }
   write(record) {
-    import_node_fs39.default.mkdirSync(import_node_path41.default.dirname(this.file), { recursive: true });
-    import_node_fs39.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
+    import_node_fs40.default.mkdirSync(import_node_path44.default.dirname(this.file), { recursive: true });
+    import_node_fs40.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
     try {
-      import_node_fs39.default.chmodSync(this.file, 384);
+      import_node_fs40.default.chmodSync(this.file, 384);
     } catch {
     }
   }
   clear() {
     try {
-      import_node_fs39.default.unlinkSync(this.file);
+      import_node_fs40.default.unlinkSync(this.file);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -53992,9 +53953,9 @@ var CentralClientError = class extends Error {
   code;
   cause;
 };
-async function centralRequest(opts, path71, init) {
+async function centralRequest(opts, path74, init) {
   const f = opts.fetchImpl ?? globalThis.fetch;
-  const url = `${opts.api.replace(/\/+$/, "")}${path71}`;
+  const url = `${opts.api.replace(/\/+$/, "")}${path74}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
   let res;
@@ -54139,7 +54100,7 @@ async function upsertDeviceBinding(opts) {
 }
 
 // src/feishu-auth/verify-token.ts
-var crypto14 = __toESM(require("crypto"), 1);
+var crypto13 = __toESM(require("crypto"), 1);
 var CONNECT_TOKEN_PREFIX = "clawdtk1";
 function verifyConnectToken(args) {
   const now = args.nowSeconds ?? Math.floor(Date.now() / 1e3);
@@ -54151,7 +54112,7 @@ function verifyConnectToken(args) {
   const data = `${prefix}.${payloadB64}`;
   let signatureValid = false;
   try {
-    signatureValid = crypto14.verify(
+    signatureValid = crypto13.verify(
       null,
       Buffer.from(data, "utf8"),
       args.publicKeyPem,
@@ -54189,7 +54150,7 @@ function verifyConnectToken(args) {
 
 // src/feishu-auth/server-key.ts
 var fs50 = __toESM(require("fs"), 1);
-var path50 = __toESM(require("path"), 1);
+var path53 = __toESM(require("path"), 1);
 var FILE_NAME2 = "server-signing-key.json";
 var ServerKeyStore = class {
   constructor(dataDir) {
@@ -54197,7 +54158,7 @@ var ServerKeyStore = class {
   }
   dataDir;
   filePath() {
-    return path50.join(this.dataDir, FILE_NAME2);
+    return path53.join(this.dataDir, FILE_NAME2);
   }
   /** 读缓存的公钥；无缓存 / 损坏 → null（调用方决定是否触发拉取） */
   read() {
@@ -54235,12 +54196,12 @@ init_protocol();
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs40 = __toESM(require("fs"), 1);
+var import_node_fs41 = __toESM(require("fs"), 1);
 var import_node_os16 = __toESM(require("os"), 1);
-var import_node_path42 = __toESM(require("path"), 1);
+var import_node_path45 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs40.default.readFileSync(file, "utf8");
+  const raw = import_node_fs41.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -54253,19 +54214,19 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path42.default.join(import_node_os16.default.homedir(), ".claude");
-  let projectDir = import_node_path42.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  let sourceFile = import_node_path42.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs40.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path45.default.join(import_node_os16.default.homedir(), ".claude");
+  let projectDir = import_node_path45.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  let sourceFile = import_node_path45.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs41.default.existsSync(sourceFile)) {
     const found = findTranscriptByToolSessionId(
-      import_node_path42.default.join(baseDir, "projects"),
+      import_node_path45.default.join(baseDir, "projects"),
       input.toolSessionId
     );
     if (!found) {
       throw new Error(`fork: source transcript not found: ${sourceFile}`);
     }
     sourceFile = found;
-    projectDir = import_node_path42.default.dirname(found);
+    projectDir = import_node_path45.default.dirname(found);
   }
   const entries = readJsonlEntries(sourceFile);
   const mainEntries = entries.filter((e) => e.isSidechain !== true);
@@ -54294,9 +54255,9 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const forkedFilePath = import_node_path42.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs40.default.mkdirSync(projectDir, { recursive: true });
-  import_node_fs40.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const forkedFilePath = import_node_path45.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs41.default.mkdirSync(projectDir, { recursive: true });
+  import_node_fs41.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
@@ -54458,21 +54419,34 @@ function buildSessionHandlers(deps) {
     const { broadcast } = await manager.interrupt(args);
     return { response: { type: "session:interrupt", ok: true }, broadcast };
   };
+  const ensureRewindSupported = async (sessionId) => {
+    const file = manager.get({ sessionId }).response;
+    const caps = await getAdapter2(file.tool ?? "claude").capabilities();
+    if (caps.features.rewind === false) {
+      throw new ClawdError(
+        ERROR_CODES.TOOL_NOT_SUPPORTED,
+        `tool ${file.tool ?? "claude"} does not support rewind`
+      );
+    }
+  };
   const rewind = async (frame, _client, ctx) => {
     const args = SessionRewindArgs.parse(frame);
     ensureSessionAccess(ctx, args.sessionId, "send");
+    await ensureRewindSupported(args.sessionId);
     const { response, broadcast } = await manager.rewind(args);
     return { response: { type: "session:rewind", ...response }, broadcast };
   };
   const rewindDiff = async (frame, _client, ctx) => {
     const args = SessionRewindDiffArgs.parse(frame);
     ensureSessionAccess(ctx, args.sessionId, "read");
+    await ensureRewindSupported(args.sessionId);
     const { response } = await manager.rewindDiff(args);
     return { response: { type: "session:rewind-diff", ...response } };
   };
   const rewindableMessageIds = async (frame, _client, ctx) => {
     const args = SessionRewindableMessageIdsArgs.parse(frame);
     ensureSessionAccess(ctx, args.sessionId, "read");
+    await ensureRewindSupported(args.sessionId);
     const { response } = manager.rewindableMessageIds(args);
     return {
       response: { type: "session:rewindable-message-ids", ...response }
@@ -54695,7 +54669,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path53 = __toESM(require("path"), 1);
+var path56 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -54713,7 +54687,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path52 = __toESM(require("path"), 1);
+var path55 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -54726,42 +54700,42 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read", userWorkDir) {
-  const target = path52.resolve(absPath);
+  const target = path55.resolve(absPath);
   if (userWorkDir) {
-    const u = path52.resolve(userWorkDir);
-    const usep = u.endsWith(path52.sep) ? "" : path52.sep;
+    const u = path55.resolve(userWorkDir);
+    const usep = u.endsWith(path55.sep) ? "" : path55.sep;
     if (target === u || target.startsWith(u + usep)) return true;
   }
-  const root = path52.resolve(personaRoot);
-  const sep3 = root.endsWith(path52.sep) ? "" : path52.sep;
+  const root = path55.resolve(personaRoot);
+  const sep3 = root.endsWith(path55.sep) ? "" : path55.sep;
   if (!target.startsWith(root + sep3)) return false;
-  const rel = path52.relative(root, target);
+  const rel = path55.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId = rel.split(path52.sep)[0];
+  const personaId = rel.split(path55.sep)[0];
   if (!personaId) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path52.resolve(personaRoot);
-  const target = path52.resolve(absPath);
-  const sep3 = root.endsWith(path52.sep) ? "" : path52.sep;
+  const root = path55.resolve(personaRoot);
+  const target = path55.resolve(absPath);
+  const sep3 = root.endsWith(path55.sep) ? "" : path55.sep;
   if (!target.startsWith(root + sep3)) return null;
-  const rel = path52.relative(root, target);
+  const rel = path55.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path52.sep)[0];
+  const id = rel.split(path55.sep)[0];
   return id || null;
 }
 function isPathWithin(dir, absPath) {
-  const d = path52.resolve(dir);
-  const t = path52.resolve(absPath);
-  const sep3 = d.endsWith(path52.sep) ? "" : path52.sep;
+  const d = path55.resolve(dir);
+  const t = path55.resolve(absPath);
+  const sep3 = d.endsWith(path55.sep) ? "" : path55.sep;
   return t === d || t.startsWith(d + sep3);
 }
 function isPathInGuestBoundary(personaRoot, personaId, userWorkDir, absPath) {
   if (userWorkDir && isPathWithin(userWorkDir, absPath)) return true;
-  return personaIdFromPath(path52.resolve(absPath), personaRoot) === personaId;
+  return personaIdFromPath(path55.resolve(absPath), personaRoot) === personaId;
 }
 
 // src/handlers/history.ts
@@ -54813,7 +54787,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path53.join(personaRoot, pid),
+          path56.join(personaRoot, pid),
           personaRoot,
           "read",
           userWorkDir
@@ -54825,7 +54799,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path53.resolve(args.projectPath), personaRoot, "history:list");
+    assertGuestPath(ctx, path56.resolve(args.projectPath), personaRoot, "history:list");
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -54858,13 +54832,13 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path53.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
+    assertGuestPath(ctx, path56.resolve(args.cwd), personaRoot, "history:subagents", usersRoot);
     const subs = await history.listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path53.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
+    assertGuestPath(ctx, path56.resolve(args.cwd), personaRoot, "history:subagent-read", usersRoot);
     const res = await history.readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
   };
@@ -54873,7 +54847,7 @@ function buildHistoryHandlers(deps) {
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path53.resolve(d.cwd), personaRoot, "read", userWorkDir)
+        (d) => isGuestPathAllowed(ctx.grants, path56.resolve(d.cwd), personaRoot, "read", userWorkDir)
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -54890,7 +54864,7 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path54 = __toESM(require("path"), 1);
+var path57 = __toESM(require("path"), 1);
 var os16 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
@@ -54932,22 +54906,22 @@ function buildWorkspaceHandlers(deps) {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
     const fallbackCwd = isGuest && personaRoot ? personaRoot : os16.homedir();
-    const resolvedCwd = path54.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path54.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const resolvedCwd = path57.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path57.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list", usersRoot);
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path54.isAbsolute(args.path) ? path54.resolve(args.path) : path54.resolve(args.cwd, args.path);
+    const target = path57.isAbsolute(args.path) ? path57.resolve(args.path) : path57.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read", usersRoot);
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path54.resolve(args.cwd);
+    const cwdAbs = path57.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list", usersRoot);
     const list2 = await getSkillsForTool(args.tool ?? "claude", cwdAbs);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -54959,7 +54933,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path54.resolve(args.cwd);
+    const cwdAbs = path57.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list", usersRoot);
     if (args.tool === "codex") {
       return { response: { type: "agents:list", agents: [] } };
@@ -54981,20 +54955,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path56 = __toESM(require("path"), 1);
+var path59 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
-var import_node_child_process10 = require("child_process");
-var import_node_fs41 = __toESM(require("fs"), 1);
-var import_node_path43 = __toESM(require("path"), 1);
+var import_node_child_process11 = require("child_process");
+var import_node_fs42 = __toESM(require("fs"), 1);
+var import_node_path46 = __toESM(require("path"), 1);
 var import_node_util = require("util");
-var pexec = (0, import_node_util.promisify)(import_node_child_process10.execFile);
+var pexec = (0, import_node_util.promisify)(import_node_child_process11.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path43.default.resolve(p2);
+  const resolved = import_node_path46.default.resolve(p2);
   try {
-    return import_node_fs41.default.realpathSync(resolved);
+    return import_node_fs42.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -55068,7 +55042,7 @@ async function listGitBranches(cwd) {
 function assertGuestCwd(ctx, cwd, personaRoot, method, usersRoot) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
   const userWorkDir = usersRoot ? deriveUserWorkDir(ctx.principal.id, usersRoot) : void 0;
-  if (!isGuestPathAllowed(ctx.grants, path56.resolve(cwd), personaRoot, "read", userWorkDir)) {
+  if (!isGuestPathAllowed(ctx.grants, path59.resolve(cwd), personaRoot, "read", userWorkDir)) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -55116,45 +55090,6 @@ function buildCapabilitiesHandlers(deps) {
   };
 }
 
-// src/handlers/capability.ts
-init_zod();
-init_protocol();
-var DeleteArgsSchema = external_exports.object({
-  capabilityId: external_exports.string().min(1)
-}).strict();
-function buildCapabilityHandlers(deps) {
-  const { manager } = deps;
-  const list = async () => {
-    return {
-      response: {
-        type: "capability:list",
-        capabilities: manager.list().map(stripSecretHash)
-      }
-    };
-  };
-  const del = async (frame) => {
-    const { type: _type, requestId: _requestId, ...rest } = frame;
-    const args = DeleteArgsSchema.parse(rest);
-    const result = manager.delete(args.capabilityId);
-    if (!result) {
-      throw new ClawdError(
-        ERROR_CODES.VALIDATION_ERROR,
-        `capability not found: ${args.capabilityId}`
-      );
-    }
-    return {
-      response: {
-        type: "capability:deleted",
-        capabilityId: args.capabilityId
-      }
-    };
-  };
-  return {
-    "capability:list": list,
-    "capability:delete": del
-  };
-}
-
 // src/handlers/inbox.ts
 init_protocol();
 function resolvePeerDeviceId(ctx, argsPeerDeviceId) {
@@ -55754,7 +55689,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path44 = __toESM(require("path"), 1);
+var import_node_path47 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -55834,12 +55769,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path44.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path44.default.isAbsolute(args.relPath) ? import_node_path44.default.resolve(args.relPath) : import_node_path44.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path47.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path47.default.isAbsolute(args.relPath) ? import_node_path47.default.resolve(args.relPath) : import_node_path47.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.signUrl", "group-acl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path44.default.isAbsolute(e.relPath) ? import_node_path44.default.resolve(e.relPath) : import_node_path44.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path47.default.isAbsolute(e.relPath) ? import_node_path47.default.resolve(e.relPath) : import_node_path47.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -55864,7 +55799,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path44.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
+    assertGuestAttachmentPath(ctx, import_node_path47.default.resolve(f.cwd), deps.personaRoot, method, deps.usersRoot);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -55879,8 +55814,8 @@ function buildAttachmentHandlers(deps) {
     if (!scope) {
       throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, `session ${args.sessionId} not found`);
     }
-    const cwdAbs = import_node_path44.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
-    const candidateAbs = import_node_path44.default.isAbsolute(args.relPath) ? import_node_path44.default.resolve(args.relPath) : import_node_path44.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path47.default.resolve(deps.sessionStore?.read(args.sessionId)?.cwd ?? ".");
+    const candidateAbs = import_node_path47.default.isAbsolute(args.relPath) ? import_node_path47.default.resolve(args.relPath) : import_node_path47.default.resolve(cwdAbs, args.relPath);
     guardAttachmentPath(ctx, args.sessionId, candidateAbs, "attachment.groupAdd", "cwd-subtree");
     const from = ctx?.principal.kind === "owner" ? "owner" : "agent";
     const size = 0;
@@ -55939,19 +55874,19 @@ function buildAttachmentHandlers(deps) {
 
 // src/handlers/extension.ts
 var import_promises9 = __toESM(require("fs/promises"), 1);
-var import_node_path49 = __toESM(require("path"), 1);
+var import_node_path52 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/extension/bundle-zip.ts
 var import_promises6 = __toESM(require("fs/promises"), 1);
-var import_node_path45 = __toESM(require("path"), 1);
+var import_node_path48 = __toESM(require("path"), 1);
 var import_node_crypto14 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
   const zip = new import_jszip2.default();
   for (const rel of entries) {
-    const abs = import_node_path45.default.join(dir, rel);
+    const abs = import_node_path48.default.join(dir, rel);
     const content = await import_promises6.default.readFile(abs);
     zip.file(rel, content, { date: FIXED_DATE });
   }
@@ -55972,7 +55907,7 @@ async function listFilesSorted(rootDir) {
   return out;
 }
 async function walk(absRoot, relPrefix, out) {
-  const dirAbs = import_node_path45.default.join(absRoot, relPrefix);
+  const dirAbs = import_node_path48.default.join(absRoot, relPrefix);
   const entries = await import_promises6.default.readdir(dirAbs, { withFileTypes: true });
   for (const e of entries) {
     if (IGNORE_BASENAMES.has(e.name)) continue;
@@ -56026,25 +55961,25 @@ function computePublishCheck(args) {
 
 // src/extension/install-flow.ts
 var import_promises7 = __toESM(require("fs/promises"), 1);
-var import_node_path47 = __toESM(require("path"), 1);
+var import_node_path50 = __toESM(require("path"), 1);
 var import_node_os19 = __toESM(require("os"), 1);
 var import_node_crypto15 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
 var import_node_os18 = __toESM(require("os"), 1);
-var import_node_path46 = __toESM(require("path"), 1);
+var import_node_path49 = __toESM(require("path"), 1);
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path46.default.join(import_node_os18.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path49.default.join(import_node_os18.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
-  return import_node_path46.default.join(clawdHomeRoot(override), "extensions");
+  return import_node_path49.default.join(clawdHomeRoot(override), "extensions");
 }
 function publishedChannelsFile(override) {
-  return import_node_path46.default.join(clawdHomeRoot(override), "extensions-published.json");
+  return import_node_path49.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
 function bundleCacheRoot(override) {
-  return import_node_path46.default.join(clawdHomeRoot(override), "extension-bundles");
+  return import_node_path49.default.join(clawdHomeRoot(override), "extension-bundles");
 }
 
 // src/extension/install-flow.ts
@@ -56071,7 +56006,7 @@ async function installFromChannel(args, deps) {
     throw new InstallError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path47.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path50.default.isAbsolute(name)) {
       throw new InstallError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -56103,7 +56038,7 @@ async function installFromChannel(args, deps) {
     );
   }
   const localExtId = namespacedExtId(ownerSlug, channelRef.ownerPrincipalId);
-  const destDir = import_node_path47.default.join(deps.extensionsRoot, localExtId);
+  const destDir = import_node_path50.default.join(deps.extensionsRoot, localExtId);
   let destExists = false;
   try {
     await import_promises7.default.access(destDir);
@@ -56117,16 +56052,16 @@ async function installFromChannel(args, deps) {
     );
   }
   const stage = await import_promises7.default.mkdtemp(
-    import_node_path47.default.join(import_node_os19.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+    import_node_path50.default.join(import_node_os19.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path47.default.join(stage, name);
+      const dest = import_node_path50.default.join(stage, name);
       if (entry.dir) {
         await import_promises7.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises7.default.mkdir(import_node_path47.default.dirname(dest), { recursive: true });
+      await import_promises7.default.mkdir(import_node_path50.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises7.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -56147,7 +56082,7 @@ async function installFromChannel(args, deps) {
 
 // src/extension/update-flow.ts
 var import_promises8 = __toESM(require("fs/promises"), 1);
-var import_node_path48 = __toESM(require("path"), 1);
+var import_node_path51 = __toESM(require("path"), 1);
 var import_node_os20 = __toESM(require("os"), 1);
 var import_node_crypto16 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
@@ -56164,11 +56099,11 @@ async function updateFromChannel(args, deps) {
     channelRef.extId,
     channelRef.ownerPrincipalId
   );
-  const liveDir = import_node_path48.default.join(deps.extensionsRoot, localExtId);
+  const liveDir = import_node_path51.default.join(deps.extensionsRoot, localExtId);
   const prevDir = `${liveDir}.prev`;
   let existingVersion;
   try {
-    const raw = await import_promises8.default.readFile(import_node_path48.default.join(liveDir, "manifest.json"), "utf8");
+    const raw = await import_promises8.default.readFile(import_node_path51.default.join(liveDir, "manifest.json"), "utf8");
     const parsed2 = ExtensionManifestSchema.safeParse(JSON.parse(raw));
     if (!parsed2.success) {
       throw new UpdateError(
@@ -56201,7 +56136,7 @@ async function updateFromChannel(args, deps) {
     throw new UpdateError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path48.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path51.default.isAbsolute(name)) {
       throw new UpdateError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -56236,16 +56171,16 @@ async function updateFromChannel(args, deps) {
   await import_promises8.default.rm(prevDir, { recursive: true, force: true });
   await import_promises8.default.rename(liveDir, prevDir);
   const stage = await import_promises8.default.mkdtemp(
-    import_node_path48.default.join(import_node_os20.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+    import_node_path51.default.join(import_node_os20.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path48.default.join(stage, name);
+      const dest = import_node_path51.default.join(stage, name);
       if (entry.dir) {
         await import_promises8.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises8.default.mkdir(import_node_path48.default.dirname(dest), { recursive: true });
+      await import_promises8.default.mkdir(import_node_path51.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises8.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -56338,7 +56273,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
       );
     }
   }
-  const manifestPath = import_node_path49.default.join(root, extId, "manifest.json");
+  const manifestPath = import_node_path52.default.join(root, extId, "manifest.json");
   const manifest = await readManifest(root, extId);
   const next = { ...manifest, version: newVersion };
   const tmp = `${manifestPath}.tmp`;
@@ -56346,7 +56281,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
   await import_promises9.default.rename(tmp, manifestPath);
 }
 async function readManifest(root, extId) {
-  const file = import_node_path49.default.join(root, extId, "manifest.json");
+  const file = import_node_path52.default.join(root, extId, "manifest.json");
   let raw;
   try {
     raw = await import_promises9.default.readFile(file, "utf8");
@@ -56437,7 +56372,7 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256, buffer } = await bundleExtensionDir(import_node_path49.default.join(deps.root, extId));
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path52.default.join(deps.root, extId));
     return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
@@ -56618,9 +56553,9 @@ function buildExtensionHandlers(deps) {
 }
 
 // src/app-builder/project-store.ts
-var import_node_fs42 = require("fs");
-var import_node_child_process11 = require("child_process");
-var import_node_path50 = require("path");
+var import_node_fs43 = require("fs");
+var import_node_child_process12 = require("child_process");
+var import_node_path53 = require("path");
 init_protocol();
 var PROJECTS_DIR = "projects";
 var META_FILE = ".clawd-project.json";
@@ -56634,19 +56569,19 @@ var ProjectStore = class {
   root;
   /** projects/<name>/.clawd-project.json 路径 */
   metaPath(name) {
-    return (0, import_node_path50.join)(this.projectsRoot(), name, META_FILE);
+    return (0, import_node_path53.join)(this.projectsRoot(), name, META_FILE);
   }
   /** projects/<name>/ 目录路径（cwd 用） */
   projectDir(name) {
-    return (0, import_node_path50.join)(this.projectsRoot(), name);
+    return (0, import_node_path53.join)(this.projectsRoot(), name);
   }
   projectsRoot() {
-    return (0, import_node_path50.join)(this.root, PROJECTS_DIR);
+    return (0, import_node_path53.join)(this.root, PROJECTS_DIR);
   }
   async list() {
     let entries;
     try {
-      entries = await import_node_fs42.promises.readdir(this.projectsRoot());
+      entries = await import_node_fs43.promises.readdir(this.projectsRoot());
     } catch (err) {
       if (err.code === "ENOENT") return [];
       throw err;
@@ -56654,7 +56589,7 @@ var ProjectStore = class {
     const out = [];
     for (const name of entries) {
       try {
-        const raw = await import_node_fs42.promises.readFile(this.metaPath(name), "utf8");
+        const raw = await import_node_fs43.promises.readFile(this.metaPath(name), "utf8");
         const json = JSON.parse(raw);
         let migrated = false;
         if (typeof json.devCommand !== "string" || json.devCommand.length === 0) {
@@ -56665,7 +56600,7 @@ var ProjectStore = class {
         if (parsed.success) {
           out.push(parsed.data);
           if (migrated) {
-            void import_node_fs42.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
+            void import_node_fs43.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
             });
           }
         }
@@ -56709,8 +56644,8 @@ var ProjectStore = class {
       throw new Error(`invalid name "${name}": ${validated.error.message}`);
     }
     const dir = this.projectDir(name);
-    await import_node_fs42.promises.mkdir(dir, { recursive: true });
-    await import_node_fs42.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
+    await import_node_fs43.promises.mkdir(dir, { recursive: true });
+    await import_node_fs43.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
     return meta;
   }
   /**
@@ -56724,7 +56659,7 @@ var ProjectStore = class {
   async scaffold(name, templateSrcDir, scaffoldScriptPath) {
     const destDir = this.projectDir(name);
     return await new Promise((resolve6, reject) => {
-      const child = (0, import_node_child_process11.spawn)("bash", [scaffoldScriptPath, name, templateSrcDir, destDir], {
+      const child = (0, import_node_child_process12.spawn)("bash", [scaffoldScriptPath, name, templateSrcDir, destDir], {
         env: { ...process.env, PATH: process.env.PATH ?? "" },
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -56753,7 +56688,7 @@ var ProjectStore = class {
   }
   async delete(name) {
     const dir = this.projectDir(name);
-    await import_node_fs42.promises.rm(dir, { recursive: true, force: true });
+    await import_node_fs43.promises.rm(dir, { recursive: true, force: true });
   }
   async updatePort(name, newPort) {
     if (newPort < PROJECT_PORT_MIN || newPort > PROJECT_PORT_MAX) {
@@ -56769,7 +56704,7 @@ var ProjectStore = class {
       throw new Error(`port ${newPort} already used / \u5DF2\u88AB project "${conflict.name}" \u5360\u7528`);
     }
     const updated = { ...target, port: newPort };
-    await import_node_fs42.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
+    await import_node_fs43.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
     return updated;
   }
   /**
@@ -56786,7 +56721,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`invalid prodUrl "${url}": ${validated.error.message}`);
     }
-    await import_node_fs42.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs43.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
   /**
@@ -56807,7 +56742,7 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`invalid publishJob: ${validated.error.message}`);
     }
-    await import_node_fs42.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs43.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
   /** 清掉 .clawd-project.json.publishJob 字段。其他字段保持原样。 */
@@ -56822,13 +56757,13 @@ var ProjectStore = class {
     if (!validated.success) {
       throw new Error(`failed to clear publishJob: ${validated.error.message}`);
     }
-    await import_node_fs42.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
+    await import_node_fs43.promises.writeFile(this.metaPath(name), JSON.stringify(validated.data, null, 2) + "\n", "utf8");
     return validated.data;
   }
 };
 
 // src/app-builder/kill-port.ts
-var import_node_child_process12 = require("child_process");
+var import_node_child_process13 = require("child_process");
 async function killPortOccupants(port, ownedPids, logger) {
   let pids;
   try {
@@ -56870,7 +56805,7 @@ async function killPortOccupants(port, ownedPids, logger) {
 }
 function listPidsOnPort(port) {
   return new Promise((resolve6, reject) => {
-    (0, import_node_child_process12.execFile)(
+    (0, import_node_child_process13.execFile)(
       "lsof",
       ["-ti", `:${port}`],
       { timeout: 3e3 },
@@ -56942,9 +56877,9 @@ var PublishJobRegistry = class {
 };
 
 // src/app-builder/publish-job-runner.ts
-var import_node_child_process13 = require("child_process");
-var import_node_fs43 = require("fs");
-var import_node_path51 = require("path");
+var import_node_child_process14 = require("child_process");
+var import_node_fs44 = require("fs");
+var import_node_path54 = require("path");
 
 // src/app-builder/publish-stage-parser.ts
 var STAGE_RE = /^\s*::stage::(build|deploy|verify)\s*$/;
@@ -56971,15 +56906,15 @@ function tailStderrLines(buf, n) {
 // src/app-builder/publish-job-runner.ts
 async function startPublishJob(deps, args) {
   const { registry: registry2, projectDir } = deps;
-  const spawn13 = deps.spawnImpl ?? import_node_child_process13.spawn;
+  const spawn13 = deps.spawnImpl ?? import_node_child_process14.spawn;
   if (registry2.has(args.name)) {
     return { jobId: registry2.get(args.name).jobId, status: "already-publishing" };
   }
   const projDir = projectDir(args.name);
-  const logPath = (0, import_node_path51.join)(projDir, ".publish.log");
+  const logPath = (0, import_node_path54.join)(projDir, ".publish.log");
   let logStream = null;
   try {
-    logStream = (0, import_node_fs43.createWriteStream)(logPath, { flags: "w" });
+    logStream = (0, import_node_fs44.createWriteStream)(logPath, { flags: "w" });
   } catch {
     logStream = null;
   }
@@ -57236,8 +57171,8 @@ async function recoverInterruptedJobs(deps) {
 
 // src/handlers/app-builder.ts
 init_protocol();
-var import_node_path52 = require("path");
-var import_node_fs44 = require("fs");
+var import_node_path55 = require("path");
+var import_node_fs45 = require("fs");
 var APP_BUILDER_PERSONAS = ["persona-app-builder", "persona-dataclaw-builder"];
 var DEV_SERVER_READY_TIMEOUT_MS = 3e4;
 async function recoverInterruptedPublishJobs(store, logger) {
@@ -57318,7 +57253,7 @@ function buildAppBuilderHandlers(deps) {
   async function listAllUsersProjects() {
     if (!deps.usersRoot || !deps.getStore) return [];
     const getStore = deps.getStore;
-    const userIds = await import_node_fs44.promises.readdir(deps.usersRoot).catch(() => []);
+    const userIds = await import_node_fs45.promises.readdir(deps.usersRoot).catch(() => []);
     const perUser = await Promise.all(
       userIds.map((uid) => getStore(uid).list().catch(() => []))
     );
@@ -57394,8 +57329,8 @@ function buildAppBuilderHandlers(deps) {
     const project = await userStore.create(f.name, reservedPorts);
     try {
       const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(session.ownerPersonaId ?? "") : deps.personaRoot;
-      const templateSrcDir = (0, import_node_path52.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE);
-      const scaffoldScript = (0, import_node_path52.join)(deps.deployKitRoot, "scripts", "new-extension.sh");
+      const templateSrcDir = (0, import_node_path55.join)(personaRoot, "extension-kit", "examples", DEFAULT_TEMPLATE);
+      const scaffoldScript = (0, import_node_path55.join)(deps.deployKitRoot, "scripts", "new-extension.sh");
       const scaffoldResult = await userStore.scaffold(project.name, templateSrcDir, scaffoldScript);
       deps.logger?.info("app-builder.scaffold.done", {
         name: project.name,
@@ -57616,7 +57551,7 @@ function buildAppBuilderHandlers(deps) {
       await userStore.clearPublishJob(args.name);
     }
     const personaRoot = deps.resolvePersonaRoot ? deps.resolvePersonaRoot(boundSession.ownerPersonaId ?? "") : deps.personaRoot;
-    const scriptPath = (0, import_node_path52.join)(deps.deployKitRoot, "scripts", "publish.sh");
+    const scriptPath = (0, import_node_path55.join)(deps.deployKitRoot, "scripts", "publish.sh");
     deps.logger?.info("app-builder.publish.start", {
       name: args.name,
       sessionId: boundSession.sessionId,
@@ -57792,7 +57727,7 @@ function buildVisitorHandlers(deps) {
 
 // src/extension/registry.ts
 var import_promises10 = __toESM(require("fs/promises"), 1);
-var import_node_path53 = __toESM(require("path"), 1);
+var import_node_path56 = __toESM(require("path"), 1);
 async function loadAll(root) {
   let entries;
   try {
@@ -57805,13 +57740,13 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path53.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path56.default.join(root, ent.name), ent.name));
   }
   records.sort((a, b2) => a.extId < b2.extId ? -1 : a.extId > b2.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path53.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path56.default.join(dir, "manifest.json");
   let raw;
   try {
     raw = await import_promises10.default.readFile(manifestPath, "utf8");
@@ -57856,7 +57791,7 @@ async function loadOne(dir, dirName) {
 
 // src/extension/uninstall.ts
 var import_promises11 = __toESM(require("fs/promises"), 1);
-var import_node_path54 = __toESM(require("path"), 1);
+var import_node_path57 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -57865,7 +57800,7 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path54.default.join(deps.root, deps.extId);
+  const dir = import_node_path57.default.join(deps.root, deps.extId);
   try {
     await import_promises11.default.access(dir);
   } catch {
@@ -57882,7 +57817,7 @@ var import_node_crypto18 = require("crypto");
 init_protocol();
 
 // src/peer-ops/run-command.ts
-var import_node_child_process14 = require("child_process");
+var import_node_child_process15 = require("child_process");
 var import_node_os21 = __toESM(require("os"), 1);
 var DEFAULT_TIMEOUT_MS5 = 3e4;
 var MAX_TIMEOUT_MS = 3e5;
@@ -57890,7 +57825,7 @@ var MAX_OUTPUT_BYTES = 1048576;
 function runCommand(command, opts = {}) {
   const timeoutMs = Math.min(opts.timeoutMs ?? DEFAULT_TIMEOUT_MS5, MAX_TIMEOUT_MS);
   return new Promise((resolve6) => {
-    const child = (0, import_node_child_process14.spawn)("bash", ["-c", command], { cwd: import_node_os21.default.homedir() });
+    const child = (0, import_node_child_process15.spawn)("bash", ["-c", command], { cwd: import_node_os21.default.homedir() });
     const out = [];
     const err = [];
     let outBytes = 0;
@@ -58022,9 +57957,6 @@ function buildMethodHandlers(deps) {
       personaManager: deps.personaManager,
       personaRegistry: deps.personaRegistry
     }),
-    ...buildCapabilityHandlers({
-      manager: deps.capabilityManager
-    }),
     ...buildInboxHandlers({
       manager: deps.inboxManager,
       sendDmDeps: {
@@ -58060,8 +57992,7 @@ function buildMethodHandlers(deps) {
       ownerPrincipalId: deps.ownerPrincipalId,
       ownerId: deps.ownerId,
       ownerProvider: deps.ownerProvider,
-      personaStore: deps.personaStore,
-      capabilityManager: deps.capabilityManager
+      personaStore: deps.personaStore
     }),
     ...buildFeishuAuthHandlers(deps.feishuAuth),
     ...buildDeviceHandlers(deps.feishuDevice),
@@ -58104,7 +58035,7 @@ function buildMethodHandlers(deps) {
 }
 
 // src/app-builder/dev-server-supervisor.ts
-var import_node_child_process15 = require("child_process");
+var import_node_child_process16 = require("child_process");
 var import_node_events2 = require("events");
 var DEFAULT_READY_PATTERN = /Local:\s+https?:\/\/|Nest application successfully started|server listening on/i;
 var DevServerSupervisor = class extends import_node_events2.EventEmitter {
@@ -58141,7 +58072,7 @@ var DevServerSupervisor = class extends import_node_events2.EventEmitter {
       tunnelHost: args.tunnelHost,
       devCommand: cmd
     });
-    const child = (0, import_node_child_process15.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process16.spawn)("sh", ["-c", cmd], {
       cwd: args.cwd,
       env,
       stdio: "pipe",
@@ -58375,12 +58306,6 @@ var METHOD_GRANT_MAP = {
   // handler 内部按 ctx.principal.kind 决定返回 "合成 owner self capability" 还是
   // "查 capabilityManager 拿 caller 的 guest capability"。
   "whoami": { kind: "public" },
-  // ---- capability platform（admin-only） ----
-  // 飞书统一身份 Phase 2 (2026-06-01, spec 决策 #12): personal-cap:get / capability:issue /
-  // bindPeer 已下线（personal token / 邀请码全链路删除）。capability:list / delete 保留供调试 +
-  // 撤销级联 + 清旧 per-peer cap。
-  "capability:list": ADMIN_ANY,
-  "capability:delete": ADMIN_ANY,
   // ---- inbox: 双投 P2P IM ----
   // 三条都 'public' — 能连上 = 已通过本地验票. handler 内额外校验 guest 的
   // args.peerDeviceId 与 ctx.principal.id(=deviceId) 一致, 防 guest 越权操作别的 DM 桶.
@@ -58584,8 +58509,8 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 }
 
 // src/extension/runtime.ts
-var import_node_child_process16 = require("child_process");
-var import_node_path55 = __toESM(require("path"), 1);
+var import_node_child_process17 = require("child_process");
+var import_node_path58 = __toESM(require("path"), 1);
 var import_promises12 = require("timers/promises");
 
 // src/extension/port-allocator.ts
@@ -58686,13 +58611,13 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path55.default.join(this.root, extId);
+    const dir = import_node_path58.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
       CLAWOS_EXT_ID: extId
     };
-    const child = (0, import_node_child_process16.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process17.spawn)("sh", ["-c", cmd], {
       cwd: dir,
       env,
       stdio: ["ignore", "pipe", "pipe"],
@@ -58798,7 +58723,7 @@ ${handle.stderrTail}`
 
 // src/extension/published-channels.ts
 var import_promises13 = __toESM(require("fs/promises"), 1);
-var import_node_path56 = __toESM(require("path"), 1);
+var import_node_path59 = __toESM(require("path"), 1);
 init_zod();
 var PublishedChannelsError = class extends Error {
   constructor(code, message) {
@@ -58897,7 +58822,7 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises13.default.mkdir(import_node_path56.default.dirname(this.filePath), { recursive: true });
+    await import_promises13.default.mkdir(import_node_path59.default.dirname(this.filePath), { recursive: true });
     await import_promises13.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
     await import_promises13.default.rename(tmp, this.filePath);
   }
@@ -58905,7 +58830,7 @@ var PublishedChannelStore = class {
 
 // src/extension/bundle-cache.ts
 var import_promises14 = __toESM(require("fs/promises"), 1);
-var import_node_path57 = __toESM(require("path"), 1);
+var import_node_path60 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -58914,14 +58839,14 @@ var BundleCache = class {
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
     await import_promises14.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path57.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path60.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
     await import_promises14.default.writeFile(tmp, buffer, { mode: 384 });
     await import_promises14.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path57.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path60.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
       return await import_promises14.default.readFile(file);
     } catch (e) {
@@ -58931,7 +58856,7 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path57.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path60.default.join(this.rootDir, `${snapshotHash}.zip`);
     await import_promises14.default.rm(file, { force: true });
   }
 };
@@ -58954,24 +58879,24 @@ async function startDaemon(config) {
     sampling: logShippingCfg.sampling,
     homeDir: import_node_os22.default.homedir()
   });
-  const logDir = import_node_path58.default.join(config.dataDir, "log");
-  import_node_fs45.default.mkdirSync(logDir, { recursive: true });
+  const logDir = import_node_path61.default.join(config.dataDir, "log");
+  import_node_fs46.default.mkdirSync(logDir, { recursive: true });
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path58.default.join(logDir, "clawd.log"),
+    file: import_node_path61.default.join(logDir, "clawd.log"),
     logClient
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const screenIdleProbeLogger = createFileOnlyLogger({
-    file: import_node_path58.default.join(logDir, "screen-idle-probe.log"),
+    file: import_node_path61.default.join(logDir, "screen-idle-probe.log"),
     level: "debug"
   });
   logger.info("screen-idle probe logger enabled", {
-    file: import_node_path58.default.join(logDir, "screen-idle-probe.log")
+    file: import_node_path61.default.join(logDir, "screen-idle-probe.log")
   });
   const CAP_TARGETS = [
-    import_node_path58.default.join(logDir, "clawd.log"),
-    import_node_path58.default.join(logDir, "screen-idle-probe.log")
+    import_node_path61.default.join(logDir, "clawd.log"),
+    import_node_path61.default.join(logDir, "screen-idle-probe.log")
   ];
   const LOG_CAP_MAX_BYTES = 10 * 1024 * 1024;
   const LOG_CAP_KEEP_BYTES = 5 * 1024 * 1024;
@@ -59040,32 +58965,13 @@ async function startDaemon(config) {
       }
     } : {}
   });
-  const capabilityStore = new CapabilityStore(config.dataDir);
-  const capabilityRegistry = new CapabilityRegistry(capabilityStore);
-  const capabilityManager = new CapabilityManager(capabilityRegistry, {
-    onDeleted: (cap) => {
-      const deletedAt = Date.now();
-      wsServer?.broadcastToOwners({
-        type: "capability:tokenDeleted",
-        capabilityId: cap.id,
-        deletedAt
-      });
-      wsServer?.closeConnectionsByGuestId(cap.id);
-      const cleanup = cleanupGuestSessionsForCapability(cap, sessionStoreFactory);
-      if (cleanup.removed.length > 0) {
-        logger.info("capability delete cascade: guest sessions removed", {
-          capabilityId: cap.id,
-          removedDirs: cleanup.removed
-        });
-      }
-    }
-  });
+  await cleanupLegacyCapabilityFiles(config.dataDir, logger);
   migrateDropPersonsDir(config.dataDir);
   let wsServer = null;
   const authGate = authMode === "first-message" ? new AuthGate({
     shouldEnforce: buildShouldEnforce({ tunnel: config.tunnel }),
     // Task 1.7：authenticate 注入路径替代 expectedToken 单 token 比对。
-    // owner 路径 constantTimeEqual 防侧信道；guest 路径走 capabilityRegistry.
+    // owner 路径 constantTimeEqual 防侧信道；guest 路径走 verifyConnectToken (Ed25519).
     expectedToken: resolvedAuthToken,
     authenticate: async (t, selfUrl) => {
       const result = await authenticate(t, buildConnectAuthDeps());
@@ -59125,8 +59031,8 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path58.default.join(config.dataDir, "personas"));
-  const usersRoot = import_node_path58.default.join(config.dataDir, "users");
+  const personaStore = new PersonaStore(import_node_path61.default.join(config.dataDir, "personas"));
+  const usersRoot = import_node_path61.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -59146,7 +59052,7 @@ async function startDaemon(config) {
   migrateCodexSandbox({ store: personaStore, logger });
   const groupFileStore = new GroupFileStore({ dataDir: config.dataDir, logger });
   const dispatchStore = createDispatchStore({
-    filePath: import_node_path58.default.join(config.dataDir, "dispatch.json"),
+    filePath: import_node_path61.default.join(config.dataDir, "dispatch.json"),
     now: () => Date.now(),
     onFlushError: (err) => logger.error("dispatch store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
@@ -59161,17 +59067,17 @@ async function startDaemon(config) {
     now: () => Date.now(),
     onCompleted: (sid) => deliverPendingRef?.(sid)
   });
-  const here = typeof __dirname === "string" ? __dirname : import_node_path58.default.dirname((0, import_node_url4.fileURLToPath)(import_meta6.url));
+  const here = typeof __dirname === "string" ? __dirname : import_node_path61.default.dirname((0, import_node_url4.fileURLToPath)(import_meta6.url));
   const mcpConfigs = [];
   const dispatchServerCandidates = [
-    import_node_path58.default.join(here, "dispatch", "mcp-server.cjs"),
+    import_node_path61.default.join(here, "dispatch", "mcp-server.cjs"),
     // 生产 dist/index → dist/dispatch/mcp-server.cjs
-    import_node_path58.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
+    import_node_path61.default.join(here, "..", "dist", "dispatch", "mcp-server.cjs")
     // dev tsx src/index → ../dist/dispatch/mcp-server.cjs
   ];
-  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs45.default.existsSync(p2));
+  const dispatchServerScriptPath = dispatchServerCandidates.find((p2) => import_node_fs46.default.existsSync(p2));
   if (dispatchServerScriptPath) {
-    const dispatchLogPath = import_node_path58.default.join(logDir, "dispatch-mcp-server.log");
+    const dispatchLogPath = import_node_path61.default.join(logDir, "dispatch-mcp-server.log");
     const dispatchCfgPath = writeDispatchMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: dispatchServerScriptPath,
@@ -59189,12 +59095,12 @@ async function startDaemon(config) {
     });
   }
   const ticketServerCandidates = [
-    import_node_path58.default.join(here, "ticket", "mcp-server.cjs"),
-    import_node_path58.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
+    import_node_path61.default.join(here, "ticket", "mcp-server.cjs"),
+    import_node_path61.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
-  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs45.default.existsSync(p2));
+  const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs46.default.existsSync(p2));
   if (ticketServerScriptPath) {
-    const ticketLogPath = import_node_path58.default.join(logDir, "ticket-mcp-server.log");
+    const ticketLogPath = import_node_path61.default.join(logDir, "ticket-mcp-server.log");
     const ticketCfgPath = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
@@ -59214,12 +59120,12 @@ async function startDaemon(config) {
     });
   }
   const shiftServerCandidates = [
-    import_node_path58.default.join(here, "shift", "mcp-server.cjs"),
-    import_node_path58.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
+    import_node_path61.default.join(here, "shift", "mcp-server.cjs"),
+    import_node_path61.default.join(here, "..", "dist", "shift", "mcp-server.cjs")
   ];
-  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs45.default.existsSync(p2));
+  const shiftServerScriptPath = shiftServerCandidates.find((p2) => import_node_fs46.default.existsSync(p2));
   if (shiftServerScriptPath) {
-    const shiftLogPath = import_node_path58.default.join(logDir, "shift-mcp-server.log");
+    const shiftLogPath = import_node_path61.default.join(logDir, "shift-mcp-server.log");
     const shiftCfgPath = await writeShiftMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: shiftServerScriptPath,
@@ -59238,12 +59144,12 @@ async function startDaemon(config) {
     );
   }
   const inboxServerCandidates = [
-    import_node_path58.default.join(here, "inbox", "mcp-server.cjs"),
-    import_node_path58.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
+    import_node_path61.default.join(here, "inbox", "mcp-server.cjs"),
+    import_node_path61.default.join(here, "..", "dist", "inbox", "mcp-server.cjs")
   ];
-  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs45.default.existsSync(p2));
+  const inboxServerScriptPath = inboxServerCandidates.find((p2) => import_node_fs46.default.existsSync(p2));
   if (inboxServerScriptPath) {
-    const inboxLogPath = import_node_path58.default.join(logDir, "inbox-mcp-server.log");
+    const inboxLogPath = import_node_path61.default.join(logDir, "inbox-mcp-server.log");
     const inboxCfgPath = await writeInboxMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: inboxServerScriptPath,
@@ -59262,10 +59168,10 @@ async function startDaemon(config) {
     );
   }
   const peerOpsServerCandidates = [
-    import_node_path58.default.join(here, "peer-ops", "mcp-server.cjs"),
-    import_node_path58.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
+    import_node_path61.default.join(here, "peer-ops", "mcp-server.cjs"),
+    import_node_path61.default.join(here, "..", "dist", "peer-ops", "mcp-server.cjs")
   ];
-  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs45.default.existsSync(p2));
+  const peerOpsServerScriptPath = peerOpsServerCandidates.find((p2) => import_node_fs46.default.existsSync(p2));
   if (peerOpsServerScriptPath) {
     const peerOpsCfgPath = writePeerOpsMcpConfig({
       dataDir: config.dataDir,
@@ -59283,7 +59189,7 @@ async function startDaemon(config) {
     );
   }
   const shiftStore = createShiftStore({
-    filePath: import_node_path58.default.join(config.dataDir, "shift.json"),
+    filePath: import_node_path61.default.join(config.dataDir, "shift.json"),
     ownerIdProvider: () => ownerPrincipalId,
     now: () => Date.now()
   });
@@ -59305,7 +59211,10 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path58.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path61.default.join(config.dataDir, "personas"),
+    // dispatch / shift 自动化 spawn 按 persona 绑定 tool 起 B session（codex persona 用 codex）。
+    // personaRegistry 声明在 manager 之后（同作用域 const，调用时机在启动完成后，无 TDZ 风险）。
+    getPersonaTool: (personaId) => personaRegistry.get(personaId)?.tool,
     usersRoot,
     personaStore,
     ownerDisplayName,
@@ -59345,10 +59254,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path58.default.isAbsolute(input.relPath) ? input.relPath : import_node_path58.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path61.default.isAbsolute(input.relPath) ? input.relPath : import_node_path61.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs45.default.statSync(absPath).size;
+          size = import_node_fs46.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -59431,6 +59340,7 @@ async function startDaemon(config) {
   }) : new ClaudeAdapter({ logger, historyReader: new ClaudeHistoryReader() });
   registerAdapter("claude", claudeAdapter);
   registerAdapter("codex", new CodexAdapter({ logger, historyReader: new CodexHistoryReader() }));
+  warmCodexFeatureCache();
   const personaRegistry = new PersonaRegistry(personaStore);
   const personaManager = new PersonaManager({
     store: personaStore,
@@ -59578,15 +59488,13 @@ async function startDaemon(config) {
       // 'persona/<pid>/owner'，default 走 'default'。
       getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
       // guest path guard：candidate 必须在 personaRoot 子树或调用者自己的 user-dir 下
-      personaRoot: import_node_path58.default.join(config.dataDir, "personas"),
+      personaRoot: import_node_path61.default.join(config.dataDir, "personas"),
       usersRoot
     },
     // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-    personaRoot: import_node_path58.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path61.default.join(config.dataDir, "personas"),
     // v2 多人 persona 隔离：handler 派生 guest user-dir 放行
     usersRoot,
-    // capability:list / delete handler 依赖
-    capabilityManager,
     // v2 Phase 6: whoami handler 装在 owner principal.displayName + persona 解析
     ownerDisplayName,
     // 决策 #16: whoami owner.id = 本机 deviceId（路由主键）+ ownerId/provider 归属人
@@ -59596,8 +59504,6 @@ async function startDaemon(config) {
     ownerId,
     ownerProvider,
     personaStore,
-    // capability handler 也用 (capability:issue 走 registry / capability:list)
-    capabilityRegistry,
     // capability platform v3 inbox: handler 接 manager (post/list/markRead),
     // cascade 接 store (list 统计 deletedInboxEvents).
     inboxManager,
@@ -59693,11 +59599,11 @@ async function startDaemon(config) {
     // 发布上线脚手架化 (spec 2026-06-03 §5.2):
     // appBuilderPersonaRoot 用于拼 publish.sh 绝对路径（persona-app-builder 安装在
     // dataDir/personas/persona-app-builder 之下，extension-kit/scripts/publish.sh 是相对路径）。
-    appBuilderPersonaRoot: import_node_path58.default.join(config.dataDir, "personas", "persona-app-builder"),
+    appBuilderPersonaRoot: import_node_path61.default.join(config.dataDir, "personas", "persona-app-builder"),
     // 共享 deploy-kit 根：scaffold/publish 脚本骨架 + 阿里云凭证单一真源。
-    deployKitRoot: import_node_path58.default.join(config.dataDir, "deploy-kit"),
+    deployKitRoot: import_node_path61.default.join(config.dataDir, "deploy-kit"),
     // scaffold/publish 按当前 session 的 persona 解析其安装根，让每个 persona 用自己的模板/注入配置。
-    resolvePersonaRoot: (personaId) => import_node_path58.default.join(config.dataDir, "personas", personaId),
+    resolvePersonaRoot: (personaId) => import_node_path61.default.join(config.dataDir, "personas", personaId),
     // 发布上线脚手架化 (spec 2026-06-03 §5.2.2):
     // 复用 SessionManagerDeps.broadcastFrame 同款 dispatch 逻辑 —— runner 调 manager.send
     // 取回 broadcast 帧后逐帧 push 到 transport，跟 manager 自身的 deps 一致。
@@ -59743,7 +59649,7 @@ async function startDaemon(config) {
       }
       let sourceJsonlPath = "(no transcript yet \u2014 operate from the task description alone)";
       if (sourceFile && sourceFile.toolSessionId) {
-        sourceJsonlPath = import_node_path58.default.join(
+        sourceJsonlPath = import_node_path61.default.join(
           import_node_os22.default.homedir(),
           ".claude",
           "projects",
@@ -59789,7 +59695,9 @@ async function startDaemon(config) {
       });
     },
     // B 角色：判断 targetPersona 是否 public（跨设备授权边界，private 拒）。
-    getPersonaPublic: (personaId) => personaRegistry.get(personaId)?.public ?? false
+    getPersonaPublic: (personaId) => personaRegistry.get(personaId)?.public ?? false,
+    // model 校验按 target persona 绑定 tool 选表（claude / codex 模型集不同）
+    getPersonaTool: (personaId) => personaRegistry.get(personaId)?.tool
   });
   handlers = { ...handlers, ...dispatchHandlers };
   const shiftHandlers = buildShiftInternalHandlers({
@@ -59930,18 +59838,11 @@ async function startDaemon(config) {
     ),
     protocolVersion: PROTOCOL_VERSION,
     authGate: authGate ?? void 0,
-    // noAuth 模式下仍验 capability token: 修 capability platform 漏洞 — 远端 client
-    // 用 cap token 连 noAuth daemon 时若无此 hook 会 fallback owner ctx, whoami 错返
-    // capability.id = ownerPrincipalId, 导致 myCapabilityId 写错 → inbox channel 写错.
-    // 命中 cap → attach guest ctx; 空 token / 未命中 → 保持 noAuth 行为 (handler fallback owner).
+    // T-35: capability path retired；本 hook 只剩 persona web 分享 visitor token 分支：
+    // noAuth localhost daemon 上访客 token 若命中 → attach guest ctx，否则 fallback owner
+    // （非 persona-web 场景静默 return null；tunnel 模式走 AuthGate 不经此路）。参数名
+    // tryVerifyCapabilityToken 不再准确，跨 local-ws-server 改名属 followup 清理。
     tryVerifyCapabilityToken: (token) => {
-      const v2 = capabilityRegistry.verifyToken(token);
-      if (v2.ok) {
-        return {
-          principal: { id: v2.capability.id, kind: "guest", displayName: v2.capability.displayName },
-          grants: v2.capability.grants
-        };
-      }
       const vis = verifyVisitorToken(authFile.visitorTokenSecret, token, Math.floor(Date.now() / 1e3));
       if (vis.ok) return visitorGuestContext(vis.payload);
       return null;
@@ -60061,8 +59962,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path58.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path58.default.join(logDir, "frpc.log")}`
+        `Frpc config: ${import_node_path61.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path61.default.join(logDir, "frpc.log")}`
       ];
       const width = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width + 4);
@@ -60075,8 +59976,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path58.default.join(config.dataDir, "connect.txt");
-        import_node_fs45.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path61.default.join(config.dataDir, "connect.txt");
+        import_node_fs46.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -60148,9 +60049,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path58.default.join(dataDir, "persons");
+  const dir = import_node_path61.default.join(dataDir, "persons");
   try {
-    import_node_fs45.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs46.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }