@clawos-dev/clawd 0.2.261 → 0.2.263

package/dist/cli.cjs

@@ -4149,346 +4149,6 @@ var init_zod = __esm({
   }
 });
 
-// ../protocol/src/methods.ts
-var METHOD_NAMES, RPC_METHOD_STATUSES, RpcMethodStatusSchema, RpcMethodInfoSchema, MetaMethodsResultSchema;
-var init_methods = __esm({
-  "../protocol/src/methods.ts"() {
-    "use strict";
-    init_zod();
-    METHOD_NAMES = [
-      "session:create",
-      "session:list",
-      "session:get",
-      "session:update",
-      "session:delete",
-      "session:send",
-      // per-turn sender 2026-07-08 spec §4.6：MCP servers (ticket / inbox ...) 走 HTTP RPC
-      // /rpc/session:currentTurnSender（Bearer）拉当前 turn caller；WS handler 同名
-      "session:currentTurnSender",
-      "session:stop",
-      // 温柔中断当前轮次，不杀进程（走 CC IPC control_request.subtype=interrupt）
-      "session:interrupt",
-      // 回滚到指定 user message，并撤销其后 CC 的文件编辑（走 CC IPC control_request.subtype=rewind_files）
-      "session:rewind",
-      // Rewind 预览：daemon 读 ~/.claude/file-history 快照 + 磁盘现状算真实 diff，不依赖 CC 进程
-      "session:rewind-diff",
-      // 打开 session 时一次性拿到"有真实 diff"的 user message id 集合，UI heuristic 据此过滤按钮显示
-      "session:rewindable-message-ids",
-      // 从指定 message uuid 处 fork 出新 transcript（截断 + 重写 sessionId/parentUuid + forkedFrom）
-      // daemon 只生成新 jsonl 文件并返回新 toolSessionId；UI 自行决定是否走 session:create 拉起 resume
-      "session:fork",
-      "session:new",
-      "session:resume",
-      "session:observe",
-      "session:events",
-      "session:subscribe",
-      "session:unsubscribe",
-      "session:pin",
-      // 清共享未读标记（SessionFile.unreadAt → null）+ 广播 session:info；幂等
-      "session:markRead",
-      "session:reorderPins",
-      // mirror peer sessions (2026-05-26): owner-only RPC，写/删本机 mirror SessionFile —
-      // mirror 是「**我**在朋友 daemon 上自己创建的 session」的本机持久化副本（不是朋友的会话），
-      // 方便 sidebar 跨设备聚合。daemon dumb 写删，**不广播任何 push 帧** (不发 session:info /
-      // session:deleted)；UI 是写入唯一源，双写完成后通过 cache.setData('sessions', ...) 同步
-      // 本地 sidebar state。native session:* handler 完全不感知 mirror (UI 操作 mirror 不复用
-      // native 路径)。
-      "peerSession:upsert",
-      "peerSession:remove",
-      "permission:respond",
-      // AskUserQuestion 表单回写：UI 答完所有 question 后调用，daemon 把答案合并进 updated_input
-      // 写一条 control_response 到 CC stdin（详见 events.ts session:question JSDoc）
-      "session:answerQuestion",
-      // AskUserQuestion 用户跳过：daemon 向 CC 回 allow + answers={} 让 tool 走空答案路径，
-      // 同时广播 cleared 帧（无 answers）让所有客户端 UI 卡片转 Ended
-      "session:cancelQuestion",
-      "history:projects",
-      "history:list",
-      "history:read",
-      "history:subagents",
-      "history:subagent-read",
-      "history:recentDirs",
-      "workspace:list",
-      "workspace:read",
-      "shift:list",
-      // ---- shift-internal:* (cc 内 shift MCP server 管理 owner 排班，spec 2026-06-24-clawd-shift) ----
-      // 统一 RPC 鉴权（spec 2026-07-28）后经 /rpc + Bearer owner token 调；personaId 归因
-      // 从 body 来（env CLAWD_PERSONA_ID），handler 内 createdByPersona 自检防跨 persona 误操作。
-      "shift-internal:add",
-      "shift-internal:list",
-      "shift-internal:cancel",
-      "shift-internal:update",
-      "shift-internal:history",
-      "skills:list",
-      "agents:list",
-      "git:root",
-      "git:branch",
-      "git:branches",
-      "capabilities:get",
-      // ---- persona:* (persona 管理) ----
-      // persona:list 响应 shape 不分流（统一返 PersonaFile[]），但 daemon handler 按
-      // ConnectionContext 投影不同子集：
-      //   owner ctx → 返全量 personas（含 private）
-      //   guest ctx → persona.public === true ∧ assertGrant(ctx.grants, {persona,p.id}, 'read')
-      // method-grants.ts: persona:list 是 CAPABILITY_SCOPED；其它 persona:* 仍 ADMIN_ANY。
-      "persona:create",
-      "persona:list",
-      "persona:get",
-      "persona:update",
-      "persona:delete",
-      // ---- personaDispatch:* (dispatch 全家，spec 2026-07-28-unify-rpc-auth 统一登记) ----
-      // run：本地 MCP server 经 /rpc（Bearer owner token）；跨设备 A 的 peer daemon 经 /rpc
-      //（Bearer connect token）。capability-scoped（handler 自检 persona.public + assertGrant(send)）。
-      // complete / list：B / A 本机 MCP server 调（owner token → ADMIN_ANY）。
-      // get：跨设备轮询——A 端 daemon 凭 connect token 查 B 台账终态；handler 校验行归属。
-      "personaDispatch:run",
-      "personaDispatch:complete",
-      "personaDispatch:list",
-      "personaDispatch:get",
-      // ---- peerExec:run (跨设备 exec，spec 2026-07-16-cross-device-exec-mcp) ----
-      // A 侧本机 MCP server 经 /rpc（Bearer owner token）带 peerDeviceId → daemon forward；
-      // B 侧对端经 /rpc（Bearer connect token）无 peerDeviceId → 本地 spawn。METHOD_GRANT_MAP
-      // 设 public，handler 内判 remoteAccessAllowed（跟 inbox:postMessage 同款）。
-      "peerExec:run",
-      // ---- session:pty 双向透传（仅 CLAWD_CC_MODE=tui 才生效，对应 session:pty push 帧的上行） ----
-      // session:pty:input — UI 把用户键盘字节（base64 UTF-8）发给 daemon，daemon 直写 pty stdin。
-      //   高频帧（每次按键 1 帧），不入 reducer / 不广播。response 是 fire-and-forget 风格 ack。
-      // session:pty:resize — UI 端 xterm 尺寸（cols/rows）变化时同步给 daemon 调 pty resize；
-      //   触发频率低（仅 window resize），response 也是 ack。
-      "session:pty:input",
-      "session:pty:resize",
-      // session:pty:snapshot — UI XtermPanel 重新挂载（切 session 回来 / 刷新）时主动拉一次当前
-      //   屏幕全量快照，再开始消费 incremental session:pty。daemon 调 manager.getPtyReplay(sessionId)
-      //   先 drain detector parse queue 再 serialize，保证 atSeq 与 buffer 内容严格对齐。
-      //   response 字段：
-      //     - data：当前屏幕 + scrollback 的 ANSI 字节串（base64-utf8），与 session:pty push 帧同格式
-      //     - atSeq：此 snapshot 覆盖到的最后一帧 session:pty 的 seq（即 detector 已 parse 完成的最大 seq）
-      //             UI 端 flush 时丢弃 pending 中 seq ≤ atSeq 的帧
-      //     - popupKind：当前 detector 检测到的 popup 类型（null = 无 popup）
-      //   session 不存在 / 非 tui / pty 已 exit 时 data=null, atSeq=0。
-      "session:pty:snapshot",
-      // ---- attachment.* file-sharing（详见 attachment-schemas.ts） ----
-      // 命名警告：这里的 `attachment.*` RPC 与 CC v2.x 上行 `type:"attachment"` 系统行
-      // （attachment-skills / attachment-deferred-tools / attachment_memories）是不同概念。
-      // 全部管理类 RPC dispatcher grant 限 owner（capability admin-only）；
-      // 实际文件传输走 HTTP 路由（GET /files?p=&e=&s=，HMAC 签名自包含，不在白名单内）。
-      "attachment.signUrl",
-      "attachment.groupAdd",
-      "attachment.groupRemove",
-      "attachment.groupList",
-      // ---- inbox:* (capability platform Phase 3 跨用户通知 + Phase 4 DM) ----
-      // owner 接 guest 的 cross-principal 消息事件 + DM 双向私聊.
-      // inbox:list / markRead: admin-only (Phase 3); inbox:postMessage: DM 自带能力,
-      // 任何 principal (owner/guest) 可调 (Phase 4).
-      "inbox:list",
-      "inbox:markRead",
-      "inbox:postMessage",
-      // inbox:sendDm——persona 代发 DM 编排（inbox MCP server 经 /rpc + Bearer owner token 调）。
-      // sender/mode 由 handler 按 body.sessionId 反查 session scope 归因（业务逻辑非鉴权）。
-      "inbox:sendDm",
-      // ---- contact:* (联系人列表) ----
-      // 飞书统一身份 Phase 3 (决策 #14): received-capability:* 正名为 contact:*——Phase 2 后
-      // 联系人身份由中心 server introspect 背书，不再是"对方颁发的 capability"。
-      // 写入路径：device:connect 落 store + 自动反向（决策 #11）；list / remove 作联系人列表读删。
-      "contact:list",
-      "contact:pin",
-      "contact:remove",
-      // ---- contact:setRemoteAccess (远程访问授权，spec 2026-07-16) ----
-      // owner UI 授权 contact 反向操作我的设备（跨设备 exec 开关 remoteAccessAllowed）。
-      // 详见 protocol/src/contact-remote-access.ts.
-      "contact:setRemoteAccess",
-      // ---- contact:handshake (双向确认建联握手, spec 2026-07-22) ----
-      // device:connect 临时连接调用；被调方同步落库+broadcast 后回 ok（携带身份载荷）。
-      // 替代旧 whoami+auto-reverse 组合；whoami 对 connect-token guest 已封（旧客户端拦截）。
-      "contact:handshake",
-      // ---- visitor:* (web 访客 · persona web 分享，spec 2026-06-24-persona-web-share-design) ----
-      // owner-only：列出登录访问过本机 public persona 的 web 访客（零安装、飞书登录、daemon 自签
-      // visitor token）。存储 ~/.clawd/visitors.json（VisitorStore），登录(exchange)即 upsert；
-      // 访客身份用 TTC unique_id，会话按 creatorPrincipalId='visitor-<id>' 进现有会话用户分组。
-      // 访客换 token 走 HTTP-only 公开路由 POST /share/exchange（非 WS method）。
-      "visitor:list",
-      // ---- whoami (v2 capability platform) ----
-      // 任何 authed connection 都能调；返回 owner 显示名 + 当前 capability wire 形态 +
-      // grants 对应的 persona 元数据 (id + displayName)。UI 端 AddRemotePersonaDialog
-      // 的 preview 一次性临时 client 用它判定身份和可用 persona。
-      "whoami",
-      "info",
-      "ping",
-      // ---- meta:methods (RPC 自省) ----
-      // 任何 authed connection 都能调（同 whoami）：返回 METHOD_NAMES 全集 + **对本连接**
-      // 的可调用性三态。agent 侧 clawd-rpc 的 list tool 是唯一消费方——统一鉴权删掉白名单后
-      // agent 面前是 104 个 method，没有自省就只能靠试错。
-      "meta:methods",
-      // ---- extension runtime (v1: local mode only, no host-bridge —
-      // see clawd/superpowers/specs/2026-05-27-clawd-extensions-v1-design.md) ----
-      "extension.list",
-      "extension.open",
-      "extension.close",
-      "extension.uninstall",
-      // ---- extension sharing v1 (spec 2026-05-28-clawd-extension-sharing-design) ----
-      // owner-side: 公开 / 撤回 / 查 publish 状态（owner-only ADMIN_ANY）
-      "extension.publish",
-      "extension.unpublish",
-      "extension.publish:status",
-      // cross-tunnel: guest 从 owner 拉 published list + bundle（CAPABILITY_SCOPED）
-      "extension.list-published",
-      "extension.fetchBundle",
-      // guest-self: guest 在自己 daemon 上做安装与更新（ADMIN_ANY，guest 是 owner of self daemon）.
-      // 无 subscription 持久化：guest 端身份完全来自文件系统 + reconciled publishedExtensions.
-      "extension.install-from-channel",
-      "extension.update-from-channel",
-      // ---- auth:* 飞书统一身份 Phase 1 (spec 2026-06-01-feishu-identity-design) ----
-      // owner-only：daemon loopback 登录流程（auth:login:start 起 state → HTTP /auth/callback
-      // 回调落盘 → auth:login:done 事件）。中央字面量见 protocol/feishu-auth.ts FEISHU_AUTH_METHODS。
-      "auth:login:start",
-      "auth:getIdentity",
-      "auth:logout",
-      // ---- device:* 设备目录 + 连接（决策 #15：deviceId + 自包含 token） ----
-      // owner-only：公共设备目录 + audience 绑定设备的签名 token 连接（daemon 代理中心 server）。
-      // 中央字面量见 protocol/feishu-auth.ts DEVICE_METHODS。
-      "device:list",
-      "device:connect",
-      // ---- app-builder Project (spec 2026-06-01 picker → 2026-06-02 单栏默认 refactor) ----
-      // persona-app-builder Project 管理；schemas: ProjectMetadataSchema + 5 个 args/result 对。
-      //   listProjects: readdir projects/，按目录读 .clawd-project.json
-      //   createProject: 校验 personaId/未绑 + 校验名 + 从 6173-6182 段分配端口 + 写元数据 + 创建空目录
-      //                  + daemon 内部 mutate session.appBuilderProject + 起 dev server（单栏 refactor 后唯一绑定入口）
-      //   deleteProject: 停 dev server + rm -rf 目录（绑定 session 由 session:delete 联动 / 不在这里删）
-      //   updateProjectPort: 校验新端口段内 + 未被别的 project 占 + 重启 dev server
-      //   setProdUrl: 发布上线后 assistant 调一次写入 .clawd-project.json.prodUrl（取代 prod marker）
-      "appBuilder:listProjects",
-      // getProject：按 sessionId 取单个绑定 project（含 status）。people/mirror 跨 daemon 场景：
-      // 本机 owner 在远端是 guest，listProjects 被 per-user 隔离拿不到别人的 project；getProject
-      // 按 session 可见性授权（ensureSessionAccess read）放行。本地也复用（省掉拉全量再 find）。
-      "appBuilder:getProject",
-      "appBuilder:createProject",
-      "appBuilder:deleteProject",
-      "appBuilder:updateProjectPort",
-      "appBuilder:setProdUrl",
-      // 单栏 refactor stage fix (spec 2026-06-02-app-builder-single-pane-default-design §5.6.2)：
-      // createProject 时不再立即起 dev server（fresh 目录必崩）。assistant scaffold + pnpm install
-      // 完成后调 startDevServer 显式触发 supervisor spawn；中间用 reportStage 上报进度（scaffolding
-      // / installing 等），daemon broadcast appBuilder:project-updated 帧让 UI PreviewPane 切阶段。
-      "appBuilder:startDevServer",
-      "appBuilder:reportStage",
-      // 显式控制 fix (spec 2026-06-02-app-builder-explicit-dev-server-control)：用户点"收起预览"按钮触发，
-      // 对称 startDevServer。砍掉了 setActiveSession（dev server 不再跟用户 focus 走），切 session 不动 dev server。
-      "appBuilder:stopDevServer",
-      // 发布上线脚手架化 (spec 2026-06-03-app-builder-publish-scaffold-design)：
-      //   publish：PreviewPane「发布上线」按钮 onClick 调本 RPC，daemon 内串行化 + spawn publish.sh +
-      //            广播阶段进度帧 (appBuilder:publish-progress / publish-failed)。同 project 已有 in-flight job
-      //            返回 already-publishing + 既有 jobId（UI 不报错继续订阅）。失败时 daemon 调 manager.send()
-      //            注入 user_text 到 chat，由 assistant 接管完成部署。
-      //   dismissPublishJob：取消 in-flight publish（SIGTERM 子进程 + 清字段）或清掉 daemon 崩溃留下的
-      //            中断残骸 publishJob 字段。UI 端 [取消] / [interrupted 取消] 都走这个 RPC。
-      "appBuilder:publish",
-      "appBuilder:dismissPublishJob"
-    ];
-    RPC_METHOD_STATUSES = ["allowed", "conditional", "denied"];
-    RpcMethodStatusSchema = external_exports.enum(RPC_METHOD_STATUSES);
-    RpcMethodInfoSchema = external_exports.object({
-      /** canonical method 名，直接可作为 clawd-rpc call 的 method 参数 */
-      name: external_exports.string().min(1),
-      status: RpcMethodStatusSchema,
-      /**
-       * `denied` 必带：daemon error code（`UNAUTHORIZED` / `FEISHU_LOGIN_REQUIRED` /
-       * `METHOD_NOT_IMPLEMENTED`）。`conditional` 必带：谁来做二次校验。
-       * `allowed` 恒无。
-       */
-      reason: external_exports.string().optional()
-    });
-    MetaMethodsResultSchema = external_exports.object({
-      type: external_exports.literal("meta:methods"),
-      /** METHOD_NAMES 全集，顺序与之一致 */
-      methods: external_exports.array(RpcMethodInfoSchema)
-    });
-  }
-});
-
-// ../protocol/src/events.ts
-var DAEMON_MODE_VALUES, SESSION_STATUS_VALUES, HISTORY_USER_META_VALUES, SKILL_SOURCE_VALUES, AGENT_SOURCE_VALUES, ASK_USER_QUESTION_TOOL_NAME;
-var init_events = __esm({
-  "../protocol/src/events.ts"() {
-    "use strict";
-    DAEMON_MODE_VALUES = ["sdk", "tui"];
-    SESSION_STATUS_VALUES = [
-      "idle",
-      "running",
-      "running-idle",
-      "stopped",
-      "error",
-      "observing"
-    ];
-    HISTORY_USER_META_VALUES = [
-      "task-notification",
-      "slash-command",
-      "local-command",
-      "system-reminder",
-      "skill-hint",
-      "meta-text",
-      "attachment-skills",
-      "attachment-deferred-tools"
-    ];
-    SKILL_SOURCE_VALUES = ["builtin", "global", "project", "plugin"];
-    AGENT_SOURCE_VALUES = [
-      "builtin",
-      "global",
-      "project",
-      "policy",
-      "plugin"
-    ];
-    ASK_USER_QUESTION_TOOL_NAME = "AskUserQuestion";
-  }
-});
-
-// ../protocol/src/errors.ts
-var ERROR_CODES, ClawdError;
-var init_errors2 = __esm({
-  "../protocol/src/errors.ts"() {
-    "use strict";
-    ERROR_CODES = {
-      SESSION_NOT_FOUND: "SESSION_NOT_FOUND",
-      SESSION_BUSY: "SESSION_BUSY",
-      INVALID_CWD: "INVALID_CWD",
-      INVALID_PATH: "INVALID_PATH",
-      TOOL_NOT_SUPPORTED: "TOOL_NOT_SUPPORTED",
-      CLAUDE_NOT_FOUND: "CLAUDE_NOT_FOUND",
-      SPAWN_FAILED: "SPAWN_FAILED",
-      INVALID_PERMISSION_MODE: "INVALID_PERMISSION_MODE",
-      METHOD_NOT_IMPLEMENTED: "METHOD_NOT_IMPLEMENTED",
-      METHOD_NOT_ALLOWED: "METHOD_NOT_ALLOWED",
-      VALIDATION_ERROR: "VALIDATION_ERROR",
-      PERMISSION_REQUEST_STALE: "PERMISSION_REQUEST_STALE",
-      FILE_TOO_LARGE: "FILE_TOO_LARGE",
-      INTERNAL: "INTERNAL",
-      UNAUTHORIZED: "UNAUTHORIZED",
-      FORBIDDEN: "FORBIDDEN",
-      INVALID_PARAM: "INVALID_PARAM",
-      // 飞书统一身份（spec 2026-06-01 决策 #9）：People/远程体系强制飞书登录。
-      // daemon 进程身份未激活为飞书 unionId 时，FEISHU_GATED_METHODS 内的 RPC 一律返回此错误；
-      // UI 据此显示登录引导（区别于 UNAUTHORIZED 的越权语义）。
-      FEISHU_LOGIN_REQUIRED: "FEISHU_LOGIN_REQUIRED",
-      // app-builder 单栏默认 refactor (spec 2026-06-02-app-builder-single-pane-default-design)：
-      // appBuilder:createProject 加 personaId + session 未绑校验后抛的两个错码。
-      WRONG_PERSONA: "WRONG_PERSONA",
-      SESSION_ALREADY_BOUND: "SESSION_ALREADY_BOUND",
-      // 2026-07-02 unified people sidebar: contact:pin 时 deviceId 不在 store（可能被别处删了）
-      CONTACT_NOT_FOUND: "CONTACT_NOT_FOUND",
-      // 统一 RPC 鉴权（spec 2026-07-28）：personaDispatch:get 查不到台账行，或 guest ctx
-      // 查非自己发起的行（越权与未知 id 同码，不泄露存在性）。A 端轮询遇此码立即判失败。
-      DISPATCH_NOT_FOUND: "DISPATCH_NOT_FOUND"
-    };
-    ClawdError = class extends Error {
-      constructor(code, message) {
-        super(message);
-        this.code = code;
-        this.name = "ClawdError";
-      }
-      code;
-    };
-  }
-});
-
 // ../protocol/src/attachment-schemas.ts
 var TOKEN_ROLES, GROUP_FILE_SOURCES, GroupFileEntrySchema, AttachmentSignUrlArgs, AttachmentSignUrlResponseSchema, AttachmentGroupAddArgs, AttachmentGroupAddResponseSchema, AttachmentGroupRemoveArgs, AttachmentGroupRemoveResponseSchema, AttachmentGroupListArgs, AttachmentGroupListResponseSchema, AttachmentUploadResponseSchema;
 var init_attachment_schemas = __esm({
@@ -4573,59 +4233,736 @@ var init_attachment_schemas = __esm({
   }
 });
 
-// ../protocol/src/principal.ts
-function makeOwnerPrincipal(id, displayName, feishuUnionId) {
-  return PrincipalSchema.parse({
-    id,
-    kind: "owner",
-    displayName,
-    ...feishuUnionId ? { feishuUnionId } : {}
-  });
-}
-function principalToSender(p2) {
-  return {
-    did: p2.id,
-    displayName: p2.displayName,
-    principal: p2.kind,
-    ...p2.feishuUnionId ? { feishuUnionId: p2.feishuUnionId } : {}
-  };
-}
-function makeGuestSender(did, displayName, feishuUnionId) {
-  return SenderInfoSchema.parse({
-    did,
-    displayName,
-    principal: "guest",
-    ...feishuUnionId ? { feishuUnionId } : {}
-  });
-}
-var PrincipalKindSchema, PrincipalSchema, SenderInfoSchema;
-var init_principal = __esm({
-  "../protocol/src/principal.ts"() {
+// ../protocol/src/capability.ts
+var ResourceSchema, ActionSchema, GrantSchema, CapabilitySchema, CapabilityWireSchema, WhoamiResponseSchema, PERSONAL_CAP_GRANTS;
+var init_capability = __esm({
+  "../protocol/src/capability.ts"() {
     "use strict";
     init_zod();
-    PrincipalKindSchema = external_exports.enum(["owner", "guest"]);
-    PrincipalSchema = external_exports.object({
+    ResourceSchema = external_exports.discriminatedUnion("type", [
+      external_exports.object({ type: external_exports.literal("persona"), id: external_exports.string().min(1) }).strict(),
+      external_exports.object({ type: external_exports.literal("chat"), id: external_exports.string().min(1) }).strict(),
+      external_exports.object({ type: external_exports.literal("*") }).strict()
+    ]);
+    ActionSchema = external_exports.enum(["read", "send", "admin"]);
+    GrantSchema = external_exports.object({
+      resource: ResourceSchema,
+      actions: external_exports.array(ActionSchema).min(1)
+    }).strict();
+    CapabilitySchema = external_exports.object({
       id: external_exports.string().min(1),
-      kind: PrincipalKindSchema,
+      // sha256(token) hex 64
+      secretHash: external_exports.string().regex(/^[a-f0-9]{64}$/),
       displayName: external_exports.string(),
+      // 空数组合法 = 纯访客（只能 DM）
+      grants: external_exports.array(GrantSchema),
+      issuedAt: external_exports.number().int().nonnegative(),
+      expiresAt: external_exports.number().int().positive().optional(),
+      maxUses: external_exports.number().int().positive().optional(),
+      usedCount: external_exports.number().int().nonnegative(),
       /**
-       * 飞书 union_id。owner: 本机 daemon 已飞书登录时透传自 owner-identity.json；未登录 undefined。
-       * guest: v1 保持 undefined（connect token 当前不携带 unionId；未来若签名 payload 加字段可透传）。
-       * 消费方（如 ticket MCP / 未来别的飞书身份挂钩场景）按 undefined 决定是否降级；本层不做 fallback。
+       * guest 在 auth 帧捎带 selfPrincipalId 时由 AuthGate.authenticate 回写；
+       * 未被消费的 cap 此字段缺失。
        */
-      feishuUnionId: external_exports.string().optional()
+      peerOwnerId: external_exports.string().min(1).optional(),
+      /** 首次 client hello 时间戳（与 peerOwnerId 同步写入） */
+      firstUsedByPeerAt: external_exports.number().int().positive().optional(),
+      /**
+       * 对方 daemon owner 的 displayName，guest auth 帧 selfDisplayName 触发
+       * recordPeerHello 时同步回写。视角 B (2026-05-23) UI 派生联系人列表用此字段
+       * 显示对方名字（避免 fallback 到我颁 cap 时填的 displayName）。
+       */
+      peerDisplayName: external_exports.string().optional()
     }).strict();
-    SenderInfoSchema = external_exports.object({
-      /** = principal.id = deviceId（决策 #16）。稳定路由 id */
-      did: external_exports.string().min(1),
+    CapabilityWireSchema = CapabilitySchema.omit({ secretHash: true });
+    WhoamiResponseSchema = external_exports.object({
+      type: external_exports.literal("whoami:ok"),
+      owner: external_exports.object({
+        id: external_exports.string(),
+        kind: external_exports.enum(["owner", "guest"]),
+        displayName: external_exports.string(),
+        /** 归属人 id（决策 #16：TTC unique_id 等，落 contact.ownerId） */
+        ownerId: external_exports.string(),
+        /** 身份来源（决策 #16：'ttc'/'google'，落 contact.provider） */
+        provider: external_exports.string()
+      }).strict(),
+      capability: CapabilityWireSchema,
+      grantedPersonas: external_exports.array(
+        external_exports.object({
+          id: external_exports.string().min(1),
+          displayName: external_exports.string()
+        }).strict()
+      )
+    }).strict();
+    PERSONAL_CAP_GRANTS = Object.freeze([
+      Object.freeze({
+        resource: Object.freeze({ type: "persona", id: "*" }),
+        actions: Object.freeze(["read", "send"])
+      })
+    ]);
+  }
+});
+
+// ../protocol/src/contact-handshake.ts
+var ContactHandshakeArgsSchema, ContactHandshakeOkSchema;
+var init_contact_handshake = __esm({
+  "../protocol/src/contact-handshake.ts"() {
+    "use strict";
+    init_zod();
+    init_capability();
+    ContactHandshakeArgsSchema = external_exports.object({
+      selfUrl: external_exports.string().min(1)
+    });
+    ContactHandshakeOkSchema = external_exports.object({
+      type: external_exports.literal("contact:handshake:ok"),
+      owner: external_exports.object({
+        /** 被调方 deviceId（路由主键；调用方落 Contact 的主键用自己请求的 args.deviceId，此值供校验/展示） */
+        id: external_exports.string(),
+        /** 归属人（落 Contact.ownerId / provider，显示分组用） */
+        ownerId: external_exports.string(),
+        provider: external_exports.string(),
+        displayName: external_exports.string()
+      }),
+      /** 被调方授调用方的 grants（落 Contact.grants） */
+      grants: external_exports.array(GrantSchema)
+    });
+  }
+});
+
+// ../protocol/src/contact-remote-access.ts
+var ContactSetRemoteAccessArgsSchema, ContactSetRemoteAccessOkSchema, ContactRemoteAccessUpdatedFrameSchema;
+var init_contact_remote_access = __esm({
+  "../protocol/src/contact-remote-access.ts"() {
+    "use strict";
+    init_zod();
+    ContactSetRemoteAccessArgsSchema = external_exports.object({
+      deviceId: external_exports.string().min(1),
+      remoteAccessAllowed: external_exports.boolean()
+    }).strict();
+    ContactSetRemoteAccessOkSchema = external_exports.object({
+      type: external_exports.literal("contact:setRemoteAccess:ok"),
+      deviceId: external_exports.string().min(1),
+      remoteAccessAllowed: external_exports.boolean()
+    }).strict();
+    ContactRemoteAccessUpdatedFrameSchema = external_exports.object({
+      type: external_exports.literal("contact:remote-access-updated"),
+      deviceId: external_exports.string().min(1),
+      remoteAccessAllowed: external_exports.boolean()
+    }).strict();
+  }
+});
+
+// ../protocol/src/contact.ts
+var ContactSchema, ContactWireSchema, ContactRemoveArgsSchema, ContactRemoveOkSchema, ContactListOkSchema, ContactAddedFrameSchema, ContactRemovedFrameSchema, ContactPinArgsSchema, ContactPinOkSchema, ContactPinnedFrameSchema;
+var init_contact = __esm({
+  "../protocol/src/contact.ts"() {
+    "use strict";
+    init_zod();
+    init_capability();
+    ContactSchema = external_exports.object({
+      /**
+       * 对方设备标识（主键）：对方 daemon 自己生成并持久化的标识（auth.json deviceId，
+       * 如 dev-<uuid>），provider 无关。同 deviceId 重复 upsert 覆盖。
+       */
+      deviceId: external_exports.string().min(1),
+      /**
+       * 归属人 id（决策 #16）：TTC unique_id 等，由 connect token subOwner 签名背书。
+       * 与 provider 一起唯一标识一个人。DM 不再按它路由（路由用 deviceId），仅显示/分组用。
+       */
+      ownerId: external_exports.string().min(1),
+      /** 身份来源（决策 #16）：'ttc'（飞书/手机/邮箱登入 TTC）| 'google' | ...，token 背书 */
+      provider: external_exports.string().min(1),
+      /** 联系人显示名 */
       displayName: external_exports.string(),
-      /** owner 未登录 / guest 无飞书身份时缺省。消费方各自决定是否降级 */
-      feishuUnionId: external_exports.string().optional(),
-      principal: PrincipalKindSchema
+      /** 该设备可达的 ws/tunnel 地址 */
+      remoteUrl: external_exports.string().min(1),
+      // 自动反向建立联系人（spec 决策 #11）：被连接方本地验票成功后自动落 A 为
+      // 联系人，但它不持有 A 颁发的 token（A 从未给它换票）→ connectToken 为空串。
+      // device:connect 出站路径仍存中心 server 签发的真实 connect token（断线重连复用）。
+      // 不用 .min(1)：自动反向路径合法地存空串，禁止填假 token 占位（不造假数据）。
+      connectToken: external_exports.string(),
+      grants: external_exports.array(GrantSchema),
+      addedAt: external_exports.number().int().nonnegative(),
+      /**
+       * pin 时间戳（ms，Date.now() 语义）；null = 未 pin。sidebar 顶部固定区渲染由此驱动。
+       * 老 contacts.json 缺此字段 → zod default 补 null（无破坏性升级；不 orphan）。
+       * 对齐 SessionFile.pinnedAt 语义（daemon 侧持久化，contact:pin RPC 更新 → contact:pinned push）。
+       */
+      pinnedAt: external_exports.number().int().nullable().default(null),
+      /**
+       * 远程访问授权（spec 2026-07-16）。owner 视角：允许该 contact 反向操作我的设备——
+       * 跨设备 exec 的总开关（peerExec:run handler 运行时判它）。default=false，owner 显式开。
+       * 授权粒度 per-people (per-contact)：借用别人 persona 本来就带信任对方本人的前提。
+       */
+      remoteAccessAllowed: external_exports.boolean().default(false)
+    }).strict();
+    ContactWireSchema = ContactSchema;
+    ContactRemoveArgsSchema = external_exports.object({
+      deviceId: external_exports.string().min(1)
+    }).strict();
+    ContactRemoveOkSchema = external_exports.object({
+      type: external_exports.literal("contact:remove:ok"),
+      deviceId: external_exports.string().min(1)
+    }).strict();
+    ContactListOkSchema = external_exports.object({
+      type: external_exports.literal("contact:list:ok"),
+      contacts: external_exports.array(ContactWireSchema)
+    }).strict();
+    ContactAddedFrameSchema = external_exports.object({
+      type: external_exports.literal("contact:added"),
+      contact: ContactWireSchema
+    }).strict();
+    ContactRemovedFrameSchema = external_exports.object({
+      type: external_exports.literal("contact:removed"),
+      deviceId: external_exports.string().min(1)
+    }).strict();
+    ContactPinArgsSchema = external_exports.object({
+      deviceId: external_exports.string().min(1),
+      pinned: external_exports.boolean()
+    }).strict();
+    ContactPinOkSchema = external_exports.object({
+      type: external_exports.literal("contact:pin:ok"),
+      deviceId: external_exports.string().min(1),
+      pinnedAt: external_exports.number().int().nullable()
+    }).strict();
+    ContactPinnedFrameSchema = external_exports.object({
+      type: external_exports.literal("contact:pinned"),
+      deviceId: external_exports.string().min(1),
+      pinnedAt: external_exports.number().int().nullable()
     }).strict();
   }
 });
 
+// ../protocol/src/feishu-auth.ts
+var FEISHU_GATED_METHODS, DeviceEntrySchema, DeviceListResponseSchema, DeviceConnectArgsSchema, DeviceConnectResponseSchema, FeishuIdentitySchema, AuthLoginStartResponseSchema, AuthGetIdentityResponseSchema, AuthLogoutResponseSchema, AuthLoginDoneEventSchema, AuthLoginFailedEventSchema;
+var init_feishu_auth = __esm({
+  "../protocol/src/feishu-auth.ts"() {
+    "use strict";
+    init_zod();
+    FEISHU_GATED_METHODS = [
+      // 联系人列表（device:connect 落同一 store；list 读 / remove 删）
+      "contact:list",
+      "contact:remove",
+      // DM / 跨用户通知
+      "inbox:list",
+      "inbox:markRead",
+      "inbox:postMessage",
+      // mirror peer sessions（远端会话镜像）
+      "peerSession:upsert",
+      "peerSession:remove",
+      // 设备目录 + 连接（决策 #15：daemon 代理中心 server，需要 owner 的 ttcJwt）
+      "device:list",
+      "device:connect"
+    ];
+    DeviceEntrySchema = external_exports.object({
+      /**
+       * 设备标识（决策 #15：daemon 本地生成的 dev-<uuid>，与人的身份 unionId 无关）。
+       * 中心 server clawd_devices 注册表仅作服务发现（url 下发 + 目录），不在安全路径上。
+       */
+      deviceId: external_exports.string().min(1),
+      /** 显示名 */
+      name: external_exports.string().min(1),
+      /** ws/tunnel 地址 */
+      url: external_exports.string().min(1)
+    });
+    DeviceListResponseSchema = external_exports.object({
+      type: external_exports.literal("device:list:ok"),
+      devices: external_exports.array(DeviceEntrySchema)
+    });
+    DeviceConnectArgsSchema = external_exports.object({
+      /** 目标设备的 deviceId（对方 daemon 生成的 dev-<uuid>） */
+      deviceId: external_exports.string().min(1),
+      /**
+       * 目标设备的 ws/tunnel 地址（可选）：
+       *   - 公开目录点击：带 url（device:list 已下发，省一次 server 查询）
+       *   - 凭 deviceId 连接：缺省 url → daemon exchange 时由中心 server 下发该设备上报的 url
+       *   - 注册表不在安全路径上：知道对方 url 时显式传入即可连接（不依赖中心 server 服务发现）
+       */
+      url: external_exports.string().min(1).optional(),
+      /** 显示名（公共设备来自目录；缺省时连上后用 whoami 回填） */
+      name: external_exports.string().optional()
+    });
+    DeviceConnectResponseSchema = external_exports.object({
+      type: external_exports.literal("device:connect:ok"),
+      /** 连接的目标设备标识（= 请求 args.deviceId） */
+      deviceId: external_exports.string(),
+      name: external_exports.string(),
+      url: external_exports.string()
+    });
+    FeishuIdentitySchema = external_exports.object({
+      /** 归属人 id（决策 #16：TTC unique_id，取代飞书 union_id；跨登录方式稳定） */
+      ownerId: external_exports.string().min(1),
+      /** 身份来源：'ttc'（飞书/手机/邮箱登入 TTC）| 'google' | ...（决策 #16，拓展用） */
+      provider: external_exports.string().min(1),
+      /** 显示名。TTC user_info 接口 data.name */
+      displayName: external_exports.string().min(1),
+      /** TTC user_info 接口 data.avatar_url，可缺省 */
+      avatarUrl: external_exports.string().optional(),
+      /** TTC user_info 接口 data.union_id（飞书 union_id；dataclaw 可信入口 X-User-UnionId 用），可缺省 */
+      unionId: external_exports.string().optional()
+    });
+    AuthLoginStartResponseSchema = external_exports.object({
+      type: external_exports.literal("auth:login:start:ok"),
+      /** 完整 TTC 授权页 URL（含 callback_url + state + auto=1），UI 直接 window.open */
+      authUrl: external_exports.string().min(1),
+      /** 防 CSRF 的一次性 nonce；回调时 daemon 校验 */
+      state: external_exports.string().min(1)
+    });
+    AuthGetIdentityResponseSchema = external_exports.object({
+      type: external_exports.literal("auth:getIdentity:ok"),
+      /** null = 未登录 */
+      identity: FeishuIdentitySchema.nullable(),
+      /**
+       * 本机设备标识（决策 #15：daemon 生成并持久化在 auth.json，如 dev-<uuid>）。
+       * 设备属性，与登录态无关、登录登出不变。UI"我的设备标识"用它拼
+       * clawos://device/<deviceId>（替代旧的 unionId——不再向外暴露人的身份标识）。
+       */
+      deviceId: external_exports.string().min(1)
+    });
+    AuthLogoutResponseSchema = external_exports.object({
+      type: external_exports.literal("auth:logout:ok")
+    });
+    AuthLoginDoneEventSchema = external_exports.object({
+      type: external_exports.literal("auth:login:done"),
+      identity: FeishuIdentitySchema
+    });
+    AuthLoginFailedEventSchema = external_exports.object({
+      type: external_exports.literal("auth:login:failed"),
+      reason: external_exports.string()
+    });
+  }
+});
+
+// ../protocol/src/dispatch.ts
+var DispatchOutcomeSchema, DispatchRunArgsSchema, DispatchCompleteArgsSchema, DISPATCH_STATUSES, DispatchStatusSchema, DispatchRecordSchema, DispatchListArgsSchema, DispatchListResultSchema, DispatchGetArgsSchema, DispatchGetOkSchema;
+var init_dispatch = __esm({
+  "../protocol/src/dispatch.ts"() {
+    "use strict";
+    init_zod();
+    DispatchOutcomeSchema = external_exports.discriminatedUnion("kind", [
+      external_exports.object({
+        kind: external_exports.literal("success"),
+        text: external_exports.string(),
+        filePaths: external_exports.array(external_exports.string()).optional()
+      }),
+      external_exports.object({
+        kind: external_exports.literal("failure"),
+        reason: external_exports.string()
+      })
+    ]);
+    DispatchRunArgsSchema = external_exports.object({
+      // 新开必填；续派（dispatchId 非空）时可省略——targetPersonaId 从台账行取。
+      targetPersona: external_exports.string().min(1).optional(),
+      // 续派（spec 2026-07-21，单 dispatchId 语义：一件事一行一 id）：非空 = 把 prompt
+      // 作为新 turn 打进该 dispatch 的原 worker session 接着干（台账行复位 running）。
+      // 省略 = 新开一件事，daemon 铸新 id。
+      dispatchId: external_exports.string().min(1).optional(),
+      prompt: external_exports.string(),
+      // 跨设备 dispatch：非空 = A 角色，转发到该 contact deviceId 的 peer daemon；
+      // 省略 = 本地 dispatch / B 角色本地执行。A 转发给 B 时 body 不带此字段。
+      targetDeviceId: external_exports.string().min(1).optional(),
+      // 可选：override B session 使用的 claude 模型。缺省 = 用 persona 默认。
+      // 合法值集与 claude adapter capabilities.models[].id 一致（见 daemon
+      // tools/claude.ts CLAUDE_MODEL_IDS）；handler 层做二次校验，非法值 fail-fast。
+      // protocol 层保持 string 便于未来跨 tool 扩展（届时 union 收合法字面量）。
+      model: external_exports.string().min(1).optional(),
+      // 可选：给新 worker session 起 label（写入 SessionFile.label，sidebar 显示）。
+      // 仅在**新开 dispatch**（dispatchId 缺席）时生效；续派（dispatchId 非空）
+      // 时 daemon 层静默丢弃（避免半途改 label 造成 sidebar 抖动）。
+      // 上限 60 字符——sidebar 显示 tolerance，卡在 dispatch 入口即可。
+      // 协议层不硬拒 sessionLabel + dispatchId 同传，保留 forward-compat。
+      sessionLabel: external_exports.string().min(1).max(60).optional()
+    }).refine((v2) => v2.targetPersona !== void 0 || v2.dispatchId !== void 0, {
+      message: "either targetPersona (new dispatch) or dispatchId (follow-up) is required"
+    }).refine((v2) => !(v2.dispatchId !== void 0 && v2.targetDeviceId !== void 0), {
+      message: "cross-device dispatch cannot be continued (dispatchId + targetDeviceId are mutually exclusive)"
+    });
+    DispatchCompleteArgsSchema = external_exports.object({
+      dispatchId: external_exports.string().min(1),
+      outcome: DispatchOutcomeSchema
+    });
+    DISPATCH_STATUSES = ["running", "completed", "failed"];
+    DispatchStatusSchema = external_exports.enum(DISPATCH_STATUSES);
+    DispatchRecordSchema = external_exports.object({
+      dispatchId: external_exports.string().min(1),
+      sourceSessionId: external_exports.string().min(1),
+      sourcePersonaId: external_exports.string().min(1).optional(),
+      targetPersonaId: external_exports.string().min(1),
+      /** B 的 sessionId；registerBSession 后回填 */
+      workerSessionId: external_exports.string().min(1).optional(),
+      /** 任务摘要；截断（≤500 字符）在 daemon store.add 处保证 */
+      taskText: external_exports.string(),
+      status: DispatchStatusSchema,
+      outcome: DispatchOutcomeSchema.optional(),
+      /** 上层消费者语义（如司礼监的口谕/验收状态），daemon 不解释 */
+      meta: external_exports.record(external_exports.unknown()).optional(),
+      createdAt: external_exports.string().min(1),
+      completedAt: external_exports.string().min(1).optional(),
+      /** 结果注入 source session 成功时戳，兼当投递 dedup 标记 */
+      deliveredAt: external_exports.string().min(1).optional()
+    });
+    DispatchListArgsSchema = external_exports.object({
+      sourceSessionId: external_exports.string().min(1).optional()
+    });
+    DispatchListResultSchema = external_exports.object({
+      records: external_exports.array(DispatchRecordSchema)
+    });
+    DispatchGetArgsSchema = external_exports.object({
+      dispatchId: external_exports.string().min(1)
+    });
+    DispatchGetOkSchema = external_exports.object({
+      type: external_exports.literal("personaDispatch:get:ok"),
+      status: DispatchStatusSchema,
+      outcome: DispatchOutcomeSchema.optional()
+    });
+  }
+});
+
+// ../protocol/src/extension.ts
+function isAllowedHostedUrl(raw) {
+  let u;
+  try {
+    u = new URL(raw);
+  } catch {
+    return false;
+  }
+  if (u.protocol === "https:") return true;
+  if (u.protocol === "http:" && LOCALHOST_HOSTS.has(u.hostname)) return true;
+  return false;
+}
+function manifestMode(m2) {
+  return m2.entry?.url ? "hosted" : "local";
+}
+function ownerNamespace(ownerPrincipalId) {
+  let h = 2166136261;
+  for (let i = 0; i < ownerPrincipalId.length; i++) {
+    h ^= ownerPrincipalId.charCodeAt(i);
+    h = Math.imul(h, 16777619) >>> 0;
+  }
+  return (h >>> 0).toString(16).padStart(8, "0");
+}
+function namespacedExtId(slug, ownerPrincipalId) {
+  return `${slug}-${ownerNamespace(ownerPrincipalId)}`;
+}
+function validateSimpleSemver(v2) {
+  if (typeof v2 !== "string") {
+    return { ok: false, reason: "version must be a string" };
+  }
+  const parts = v2.split(".");
+  if (parts.length !== 3) {
+    return { ok: false, reason: `"${v2}" \u2014 only MAJOR.MINOR.PATCH allowed` };
+  }
+  for (const p2 of parts) {
+    if (!/^\d+$/.test(p2)) {
+      return { ok: false, reason: `"${v2}" \u2014 only numeric segments allowed` };
+    }
+  }
+  return { ok: true };
+}
+function compareSimpleSemver(a, b2) {
+  const pa = parseOrThrow(a);
+  const pb = parseOrThrow(b2);
+  for (let i = 0; i < 3; i++) {
+    if (pa[i] < pb[i]) return -1;
+    if (pa[i] > pb[i]) return 1;
+  }
+  return 0;
+}
+function parseOrThrow(v2) {
+  const r = validateSimpleSemver(v2);
+  if (!r.ok) throw new Error(r.reason);
+  const [a, b2, c] = v2.split(".").map((p2) => parseInt(p2, 10));
+  return [a, b2, c];
+}
+var EXT_ID_REGEX, ExtensionStateSchema, LOCALHOST_HOSTS, ExtensionManifestSchema, ExtensionTargetSchema, ExtensionRecordSchema, PublishedSnapshotSchema, ChannelRefSchema, SourceRefSchema, PublishedExtensionRecordSchema, PublishCheckSchema, PublishStatusResultSchema, ExtensionPublishArgs, ExtensionIdArgs, ExtensionFetchBundleArgs, ExtensionFromChannelArgs;
+var init_extension = __esm({
+  "../protocol/src/extension.ts"() {
+    "use strict";
+    init_zod();
+    EXT_ID_REGEX = /^[a-z0-9][a-z0-9-]*$/;
+    ExtensionStateSchema = external_exports.enum([
+      "stopped",
+      "starting",
+      "running",
+      "crashed",
+      "invalid"
+    ]);
+    LOCALHOST_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1"]);
+    ExtensionManifestSchema = external_exports.object({
+      id: external_exports.string().regex(EXT_ID_REGEX),
+      name: external_exports.string().min(1),
+      version: external_exports.string().min(1),
+      apiVersion: external_exports.literal("1"),
+      runtime: external_exports.object({ startCommand: external_exports.string().min(1) }).passthrough().optional(),
+      entry: external_exports.object({
+        url: external_exports.string().url().refine(isAllowedHostedUrl, {
+          message: "INVALID_URL_SCHEME: only https or http://localhost is allowed"
+        })
+      }).strict().optional()
+    }).passthrough().superRefine((m2, ctx) => {
+      const hasRuntime = !!m2.runtime;
+      const hasUrl = !!m2.entry?.url;
+      if (hasRuntime && hasUrl) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          message: "INVALID_MANIFEST: entry.url and runtime cannot coexist"
+        });
+      }
+      if (!hasRuntime && !hasUrl) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          message: "INVALID_MANIFEST: must have either entry.url or runtime"
+        });
+      }
+    });
+    ExtensionTargetSchema = external_exports.discriminatedUnion("kind", [
+      external_exports.object({ kind: external_exports.literal("local"), port: external_exports.number().int().min(1).max(65535) }),
+      external_exports.object({ kind: external_exports.literal("hosted"), url: external_exports.string().url() })
+    ]);
+    ExtensionRecordSchema = external_exports.discriminatedUnion("state", [
+      external_exports.object({
+        extId: external_exports.string(),
+        manifest: ExtensionManifestSchema,
+        state: external_exports.literal("stopped")
+      }),
+      external_exports.object({
+        extId: external_exports.string(),
+        manifest: ExtensionManifestSchema,
+        state: external_exports.literal("starting")
+      }),
+      external_exports.object({
+        extId: external_exports.string(),
+        manifest: ExtensionManifestSchema,
+        state: external_exports.literal("running"),
+        target: ExtensionTargetSchema
+      }),
+      external_exports.object({
+        extId: external_exports.string(),
+        manifest: ExtensionManifestSchema,
+        state: external_exports.literal("crashed")
+      }),
+      external_exports.object({
+        extId: external_exports.string(),
+        manifest: external_exports.unknown().nullable(),
+        state: external_exports.literal("invalid"),
+        invalidReason: external_exports.string().min(1)
+      })
+    ]);
+    PublishedSnapshotSchema = external_exports.object({
+      snapshotHash: external_exports.string().min(1),
+      version: external_exports.string().min(1),
+      publishedAt: external_exports.number()
+    });
+    ChannelRefSchema = external_exports.discriminatedUnion("kind", [
+      external_exports.object({
+        kind: external_exports.literal("p2p-tunnel"),
+        ownerPrincipalId: external_exports.string().min(1),
+        extId: external_exports.string().min(1)
+      })
+    ]);
+    SourceRefSchema = external_exports.discriminatedUnion("kind", [
+      external_exports.object({
+        kind: external_exports.literal("p2p-tunnel"),
+        ownerPrincipalId: external_exports.string().min(1),
+        extId: external_exports.string().min(1),
+        snapshotHash: external_exports.string().min(1)
+      })
+    ]);
+    PublishedExtensionRecordSchema = external_exports.object({
+      extId: external_exports.string().min(1),
+      name: external_exports.string().min(1),
+      version: external_exports.string().min(1),
+      contentHash: external_exports.string().min(1),
+      publishedAt: external_exports.number()
+    });
+    PublishCheckSchema = external_exports.discriminatedUnion("kind", [
+      external_exports.object({ kind: external_exports.literal("clean") }),
+      external_exports.object({
+        kind: external_exports.literal("ready-new-version"),
+        fromVersion: external_exports.string().min(1),
+        toVersion: external_exports.string().min(1)
+      }),
+      external_exports.object({
+        kind: external_exports.literal("error-same-hash"),
+        version: external_exports.string().min(1)
+      }),
+      external_exports.object({
+        kind: external_exports.literal("error-version-not-bumped"),
+        localVersion: external_exports.string().min(1),
+        publishedVersion: external_exports.string().min(1)
+      }),
+      external_exports.object({
+        kind: external_exports.literal("error-version-regression"),
+        localVersion: external_exports.string().min(1),
+        publishedVersion: external_exports.string().min(1)
+      })
+    ]);
+    PublishStatusResultSchema = external_exports.object({
+      localManifest: external_exports.object({
+        name: external_exports.string().min(1),
+        version: external_exports.string().min(1),
+        contentHash: external_exports.string().min(1)
+      }),
+      publishState: external_exports.discriminatedUnion("kind", [
+        external_exports.object({ kind: external_exports.literal("unpublished") }),
+        external_exports.object({
+          kind: external_exports.literal("published"),
+          version: external_exports.string().min(1),
+          contentHash: external_exports.string().min(1),
+          publishedAt: external_exports.number()
+        })
+      ]),
+      check: PublishCheckSchema
+    });
+    ExtensionPublishArgs = external_exports.object({
+      extId: external_exports.string().min(1),
+      /**
+       * 可选版本号：给了就在 publish-check 之前重写 manifest.json 的 version。
+       * nullish 而非 optional —— 改造前的 pickOptionalString 显式把 null 当「没给」处理，
+       * 换成纯 optional 会让 `newVersion: null` 从「不 bump」变成 INVALID_PARAM。
+       */
+      newVersion: external_exports.string().min(1).nullish()
+    });
+    ExtensionIdArgs = external_exports.object({
+      extId: external_exports.string().min(1)
+    });
+    ExtensionFetchBundleArgs = external_exports.object({
+      extId: external_exports.string().min(1),
+      snapshotHash: external_exports.string().min(1)
+    });
+    ExtensionFromChannelArgs = external_exports.object({
+      channelRef: ChannelRefSchema,
+      snapshotHash: external_exports.string().min(1),
+      zipBase64: external_exports.string().min(1)
+    });
+  }
+});
+
+// ../protocol/src/inbox.ts
+var InboxMessageSchema, InboxPostMessageArgsSchema, InboxListArgsSchema, InboxMarkReadArgsSchema, InboxSendDmArgsSchema;
+var init_inbox = __esm({
+  "../protocol/src/inbox.ts"() {
+    "use strict";
+    init_zod();
+    InboxMessageSchema = external_exports.object({
+      id: external_exports.string().min(1),
+      peerDeviceId: external_exports.string().min(1),
+      senderDeviceId: external_exports.string().min(1),
+      text: external_exports.string().min(1),
+      createdAt: external_exports.number().int().nonnegative(),
+      readBy: external_exports.record(external_exports.string().min(1), external_exports.number().int().positive()).default({}),
+      // persona 代发署名（B 版设计）：非空 = 该消息由某 persona 代发，非真人手打。
+      // 缺省 = 真人。routing 身份仍看 senderDeviceId；origin 只用于末端 UI 渲染来源。
+      origin: external_exports.object({ kind: external_exports.literal("persona"), personaId: external_exports.string().min(1) }).optional()
+    }).strict();
+    InboxPostMessageArgsSchema = external_exports.object({
+      peerDeviceId: external_exports.string().min(1).optional(),
+      id: external_exports.string().min(1),
+      text: external_exports.string().min(1),
+      createdAt: external_exports.number().int().nonnegative(),
+      // persona 代发署名（跨 daemon forward 时随远程腿透传；真人发缺省）。
+      origin: external_exports.object({ kind: external_exports.literal("persona"), personaId: external_exports.string().min(1) }).optional()
+    }).strict();
+    InboxListArgsSchema = external_exports.object({
+      peerDeviceId: external_exports.string().min(1),
+      sinceCreatedAt: external_exports.number().int().nonnegative().optional()
+    }).strict();
+    InboxMarkReadArgsSchema = external_exports.object({
+      peerDeviceId: external_exports.string().min(1),
+      upToCreatedAt: external_exports.number().int().nonnegative()
+    }).strict();
+    InboxSendDmArgsSchema = external_exports.object({
+      peerDeviceId: external_exports.string().min(1).optional(),
+      text: external_exports.string().min(1)
+    });
+  }
+});
+
+// ../protocol/src/peer-exec.ts
+var PeerExecRunArgsSchema, PeerExecRunOkSchema;
+var init_peer_exec = __esm({
+  "../protocol/src/peer-exec.ts"() {
+    "use strict";
+    init_zod();
+    PeerExecRunArgsSchema = external_exports.object({
+      /** A 侧发起时带：目标设备 deviceId。peer-forward 转发前 strip 掉，B 侧本地执行时无此字段。 */
+      peerDeviceId: external_exports.string().min(1).optional(),
+      /** 交给对端 `bash -c` 的命令；cc 自拼完整路径（一发一收，无跨命令会话状态）。 */
+      command: external_exports.string().min(1),
+      /** 超时上限（ms）；缺省用 handler 默认 30_000，clamp 300_000。 */
+      timeoutMs: external_exports.number().int().positive().optional()
+    }).strict();
+    PeerExecRunOkSchema = external_exports.object({
+      type: external_exports.literal("peerExec:run:ok"),
+      stdout: external_exports.string(),
+      stderr: external_exports.string(),
+      /** 进程退出码；被超时 kill 时 null。 */
+      exitCode: external_exports.number().int().nullable(),
+      timedOut: external_exports.boolean(),
+      stdoutTruncated: external_exports.boolean(),
+      stderrTruncated: external_exports.boolean()
+    }).strict();
+  }
+});
+
+// ../protocol/src/shift-internal.ts
+var ShiftScheduleSchema, personaId, ShiftInternalAddArgs, ShiftInternalListArgs, ShiftInternalCancelArgs, ShiftPatchSchema, ShiftInternalUpdateArgs, ShiftInternalHistoryArgs;
+var init_shift_internal = __esm({
+  "../protocol/src/shift-internal.ts"() {
+    "use strict";
+    init_zod();
+    ShiftScheduleSchema = external_exports.discriminatedUnion("kind", [
+      /** ISO-8601 时间点；时区随字符串自带 */
+      external_exports.object({ kind: external_exports.literal("at"), at: external_exports.string().min(1) }),
+      /** 固定间隔；anchorMs 缺省 = 从登记时刻起算 */
+      external_exports.object({
+        kind: external_exports.literal("every"),
+        everyMs: external_exports.number().int().positive(),
+        anchorMs: external_exports.number().int().nonnegative().optional()
+      }),
+      /** 5 字段 cron 表达式；tz 缺省 = 系统本地时区 */
+      external_exports.object({ kind: external_exports.literal("cron"), expr: external_exports.string().min(1), tz: external_exports.string().min(1).optional() })
+    ]);
+    personaId = external_exports.string().trim().min(1);
+    ShiftInternalAddArgs = external_exports.object({
+      personaId,
+      name: external_exports.string().min(1),
+      schedule: ShiftScheduleSchema,
+      prompt: external_exports.string().min(1),
+      /** 缺省 = 派给调用方自己 */
+      targetPersona: external_exports.string().min(1).optional(),
+      timeoutMs: external_exports.number().int().positive().optional()
+    });
+    ShiftInternalListArgs = external_exports.object({
+      personaId,
+      /** 缺省 true —— 只列本 persona 建的 */
+      onlyMine: external_exports.boolean().optional()
+    });
+    ShiftInternalCancelArgs = external_exports.object({
+      personaId,
+      shiftId: external_exports.string().min(1)
+    });
+    ShiftPatchSchema = external_exports.object({
+      name: external_exports.string().min(1).optional(),
+      schedule: ShiftScheduleSchema.optional(),
+      prompt: external_exports.string().min(1).optional(),
+      targetPersona: external_exports.string().min(1).optional(),
+      timeoutMs: external_exports.number().int().positive().optional(),
+      enabled: external_exports.boolean().optional()
+    });
+    ShiftInternalUpdateArgs = external_exports.object({
+      personaId,
+      shiftId: external_exports.string().min(1),
+      patch: ShiftPatchSchema
+    });
+    ShiftInternalHistoryArgs = external_exports.object({
+      personaId,
+      shiftId: external_exports.string().min(1),
+      limit: external_exports.number().int().positive().optional()
+    });
+  }
+});
+
 // ../protocol/src/persona-schemas.ts
 var PersonaFileSchema, PersonaSkillSummarySchema, PersonaPluginSummarySchema, PersonaSandboxSettingsSchema, PersonaInfoResponseSchema, PersonaCreateArgsSchema, PersonaIdArgsSchema, PersonaUpdateArgsSchema, CodexSandboxSettingsSchema;
 var init_persona_schemas = __esm({
@@ -4726,8 +5063,97 @@ var init_persona_schemas = __esm({
   }
 });
 
+// ../protocol/src/events.ts
+var DAEMON_MODE_VALUES, SESSION_STATUS_VALUES, HISTORY_USER_META_VALUES, SKILL_SOURCE_VALUES, AGENT_SOURCE_VALUES, ASK_USER_QUESTION_TOOL_NAME;
+var init_events = __esm({
+  "../protocol/src/events.ts"() {
+    "use strict";
+    DAEMON_MODE_VALUES = ["sdk", "tui"];
+    SESSION_STATUS_VALUES = [
+      "idle",
+      "running",
+      "running-idle",
+      "stopped",
+      "error",
+      "observing"
+    ];
+    HISTORY_USER_META_VALUES = [
+      "task-notification",
+      "slash-command",
+      "local-command",
+      "system-reminder",
+      "skill-hint",
+      "meta-text",
+      "attachment-skills",
+      "attachment-deferred-tools"
+    ];
+    SKILL_SOURCE_VALUES = ["builtin", "global", "project", "plugin"];
+    AGENT_SOURCE_VALUES = [
+      "builtin",
+      "global",
+      "project",
+      "policy",
+      "plugin"
+    ];
+    ASK_USER_QUESTION_TOOL_NAME = "AskUserQuestion";
+  }
+});
+
+// ../protocol/src/principal.ts
+function makeOwnerPrincipal(id, displayName, feishuUnionId) {
+  return PrincipalSchema.parse({
+    id,
+    kind: "owner",
+    displayName,
+    ...feishuUnionId ? { feishuUnionId } : {}
+  });
+}
+function principalToSender(p2) {
+  return {
+    did: p2.id,
+    displayName: p2.displayName,
+    principal: p2.kind,
+    ...p2.feishuUnionId ? { feishuUnionId: p2.feishuUnionId } : {}
+  };
+}
+function makeGuestSender(did, displayName, feishuUnionId) {
+  return SenderInfoSchema.parse({
+    did,
+    displayName,
+    principal: "guest",
+    ...feishuUnionId ? { feishuUnionId } : {}
+  });
+}
+var PrincipalKindSchema, PrincipalSchema, SenderInfoSchema;
+var init_principal = __esm({
+  "../protocol/src/principal.ts"() {
+    "use strict";
+    init_zod();
+    PrincipalKindSchema = external_exports.enum(["owner", "guest"]);
+    PrincipalSchema = external_exports.object({
+      id: external_exports.string().min(1),
+      kind: PrincipalKindSchema,
+      displayName: external_exports.string(),
+      /**
+       * 飞书 union_id。owner: 本机 daemon 已飞书登录时透传自 owner-identity.json；未登录 undefined。
+       * guest: v1 保持 undefined（connect token 当前不携带 unionId；未来若签名 payload 加字段可透传）。
+       * 消费方（如 ticket MCP / 未来别的飞书身份挂钩场景）按 undefined 决定是否降级；本层不做 fallback。
+       */
+      feishuUnionId: external_exports.string().optional()
+    }).strict();
+    SenderInfoSchema = external_exports.object({
+      /** = principal.id = deviceId（决策 #16）。稳定路由 id */
+      did: external_exports.string().min(1),
+      displayName: external_exports.string(),
+      /** owner 未登录 / guest 无飞书身份时缺省。消费方各自决定是否降级 */
+      feishuUnionId: external_exports.string().optional(),
+      principal: PrincipalKindSchema
+    }).strict();
+  }
+});
+
 // ../protocol/src/schemas.ts
-var SessionStatusSchema, UsageSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, ToolFeaturesSchema, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, ParsedEventSchema, SessionCreateArgs, SessionListArgs, SessionIdArgs, SessionUpdateArgs, SessionSendArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsArgs, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionSubscribeArgs, SessionPinArgs, PeerSessionUpsertArgs, PeerSessionUpsertResponseSchema, PeerSessionRemoveArgs, PeerSessionRemoveResponseSchema, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, HistoryRecentDirsArgs, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, AuthRequestFrameSchema, AuthOkFrameSchema, TunnelReadyEventSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema, PROJECT_PORT_MIN, PROJECT_PORT_MAX, projectNameRegex, DEFAULT_DEV_COMMAND, ProjectMetadataSchema, PROJECT_STAGE_VALUES, ProjectStageSchema, ProjectWithStatusSchema, ListProjectsArgsSchema, ListProjectsResultSchema, GetProjectArgsSchema, GetProjectResultSchema, CreateProjectArgsSchema, CreateProjectResultSchema, DeleteProjectArgsSchema, DeleteProjectResultSchema, UpdateProjectPortArgsSchema, UpdateProjectPortResultSchema, SetProdUrlArgsSchema, SetProdUrlResultSchema, StartDevServerArgsSchema, StartDevServerResultSchema, ASSISTANT_REPORTABLE_STAGES, ReportStageArgsSchema, ReportStageResultSchema, StopDevServerArgsSchema, StopDevServerResultSchema, AppBuilderProjectUpdatedEventSchema, PublishArgsSchema, PublishResultSchema, DismissPublishJobArgsSchema, DismissPublishJobResultSchema, AppBuilderPublishProgressEventSchema, AppBuilderPublishFailedEventSchema;
+var SessionStatusSchema, UsageSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, ToolFeaturesSchema, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, ParsedEventSchema, SessionCreateArgs, SessionListArgs, SessionIdArgs, SessionUpdateArgs, SessionSendArgs, SessionInterruptArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsArgs, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionCurrentTurnSenderArgs, SessionSubscribeArgs, SessionPinArgs, PeerSessionUpsertArgs, PeerSessionUpsertResponseSchema, PeerSessionRemoveArgs, PeerSessionRemoveResponseSchema, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, HistoryRecentDirsArgs, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, AuthRequestFrameSchema, AuthOkFrameSchema, TunnelReadyEventSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema, PROJECT_PORT_MIN, PROJECT_PORT_MAX, projectNameRegex, DEFAULT_DEV_COMMAND, ProjectMetadataSchema, PROJECT_STAGE_VALUES, ProjectStageSchema, ProjectWithStatusSchema, ListProjectsArgsSchema, ListProjectsResultSchema, GetProjectArgsSchema, GetProjectResultSchema, CreateProjectArgsSchema, CreateProjectResultSchema, DeleteProjectArgsSchema, DeleteProjectResultSchema, UpdateProjectPortArgsSchema, UpdateProjectPortResultSchema, SetProdUrlArgsSchema, SetProdUrlResultSchema, StartDevServerArgsSchema, StartDevServerResultSchema, ASSISTANT_REPORTABLE_STAGES, ReportStageArgsSchema, ReportStageResultSchema, StopDevServerArgsSchema, StopDevServerResultSchema, AppBuilderProjectUpdatedEventSchema, PublishArgsSchema, PublishResultSchema, DismissPublishJobArgsSchema, DismissPublishJobResultSchema, AppBuilderPublishProgressEventSchema, AppBuilderPublishFailedEventSchema;
 var init_schemas = __esm({
   "../protocol/src/schemas.ts"() {
     "use strict";
@@ -5214,6 +5640,7 @@ var init_schemas = __esm({
       sessionId: external_exports.string().min(1),
       text: external_exports.string()
     });
+    SessionInterruptArgs = SessionIdArgs;
     SessionRewindArgs = external_exports.object({
       sessionId: external_exports.string().min(1),
       userMessageId: external_exports.string().min(1),
@@ -5344,7 +5771,12 @@ var init_schemas = __esm({
     AgentsListResponseSchema = external_exports.object({
       agents: external_exports.array(AgentEntrySchema)
     });
-    SessionSubscribeArgs = external_exports.object({ sessionId: external_exports.string().min(1) });
+    SessionCurrentTurnSenderArgs = external_exports.object({
+      // 刻意不加 .min(1)：空串是被依赖的软路径（handler 见空即返 sender:null，
+      // session-current-turn-sender.spec 有用例守着）。加了 min 会把它变成硬报错。
+      sessionId: external_exports.string().optional()
+    });
+    SessionSubscribeArgs = external_exports.object({ sessionId: external_exports.string().min(1).optional() });
     SessionPinArgs = external_exports.object({
       sessionId: external_exports.string().min(1),
       pinned: external_exports.boolean()
@@ -5583,7 +6015,9 @@ var init_schemas = __esm({
     CreateProjectArgsSchema = external_exports.object({
       /** 必填：caller session，daemon 自动绑过去（spec 2026-06-02 §3 invariant 1 Session ↔ 1 Project） */
       sessionId: external_exports.string().min(1),
-      name: external_exports.string()
+      // .min(1)：改造前手写校验是 `!f.name` 明确拒空串；空 name 会让 projectDir('')
+      // 落到 projects 根目录，scaffold 往根上铺模板。
+      name: external_exports.string().min(1)
     }).strict();
     CreateProjectResultSchema = external_exports.object({
       project: ProjectMetadataSchema
@@ -5607,733 +6041,607 @@ var init_schemas = __esm({
       project: ProjectMetadataSchema
     }).strict();
     StartDevServerArgsSchema = external_exports.object({
-      sessionId: external_exports.string().min(1),
-      force: external_exports.boolean().optional()
-    }).strict();
-    StartDevServerResultSchema = external_exports.object({
-      project: ProjectMetadataSchema
-    }).strict();
-    ASSISTANT_REPORTABLE_STAGES = [
-      "installing",
-      "failed"
-    ];
-    ReportStageArgsSchema = external_exports.object({
-      sessionId: external_exports.string().min(1),
-      stage: external_exports.enum(ASSISTANT_REPORTABLE_STAGES),
-      /** stage='failed' 时必填的原因（一句话），其它 stage optional */
-      reason: external_exports.string().optional()
-    }).strict();
-    ReportStageResultSchema = external_exports.object({
-      ok: external_exports.literal(true)
-    }).strict();
-    StopDevServerArgsSchema = external_exports.object({
-      sessionId: external_exports.string().min(1)
-    }).strict();
-    StopDevServerResultSchema = external_exports.object({
-      ok: external_exports.literal(true)
-    }).strict();
-    AppBuilderProjectUpdatedEventSchema = external_exports.object({
-      type: external_exports.literal("appBuilder:project-updated"),
-      project: ProjectWithStatusSchema,
-      stage: ProjectStageSchema,
-      /** stage='failed' 时的失败原因 */
-      stageReason: external_exports.string().optional()
-    }).strict();
-    PublishArgsSchema = external_exports.object({
-      name: external_exports.string().regex(projectNameRegex)
-    });
-    PublishResultSchema = external_exports.object({
-      jobId: external_exports.string().min(1),
-      status: external_exports.enum(["started", "already-publishing"])
-    }).strict();
-    DismissPublishJobArgsSchema = external_exports.object({
-      name: external_exports.string().regex(projectNameRegex)
-    });
-    DismissPublishJobResultSchema = external_exports.object({
-      ok: external_exports.literal(true)
-    }).strict();
-    AppBuilderPublishProgressEventSchema = external_exports.object({
-      type: external_exports.literal("appBuilder:publish-progress"),
-      name: external_exports.string().regex(projectNameRegex),
-      jobId: external_exports.string().min(1),
-      stage: external_exports.enum(["build", "deploy", "verify"]),
-      status: external_exports.enum(["started", "completed"])
-    }).strict();
-    AppBuilderPublishFailedEventSchema = external_exports.object({
-      type: external_exports.literal("appBuilder:publish-failed"),
-      name: external_exports.string().regex(projectNameRegex),
-      jobId: external_exports.string().min(1),
-      stage: external_exports.enum(["build", "deploy", "verify", "unknown"]),
-      errorSummary: external_exports.string()
-    }).strict();
-  }
-});
-
-// ../protocol/src/frames.ts
-var PROTOCOL_VERSION, DISPATCH_MCP_ID;
-var init_frames = __esm({
-  "../protocol/src/frames.ts"() {
-    "use strict";
-    PROTOCOL_VERSION = 1;
-    DISPATCH_MCP_ID = "dispatch";
-  }
-});
-
-// ../protocol/src/persona-mode.ts
-var init_persona_mode = __esm({
-  "../protocol/src/persona-mode.ts"() {
-    "use strict";
-  }
-});
-
-// ../protocol/src/capability.ts
-var ResourceSchema, ActionSchema, GrantSchema, CapabilitySchema, CapabilityWireSchema, WhoamiResponseSchema, PERSONAL_CAP_GRANTS;
-var init_capability = __esm({
-  "../protocol/src/capability.ts"() {
-    "use strict";
-    init_zod();
-    ResourceSchema = external_exports.discriminatedUnion("type", [
-      external_exports.object({ type: external_exports.literal("persona"), id: external_exports.string().min(1) }).strict(),
-      external_exports.object({ type: external_exports.literal("chat"), id: external_exports.string().min(1) }).strict(),
-      external_exports.object({ type: external_exports.literal("*") }).strict()
-    ]);
-    ActionSchema = external_exports.enum(["read", "send", "admin"]);
-    GrantSchema = external_exports.object({
-      resource: ResourceSchema,
-      actions: external_exports.array(ActionSchema).min(1)
-    }).strict();
-    CapabilitySchema = external_exports.object({
-      id: external_exports.string().min(1),
-      // sha256(token) hex 64
-      secretHash: external_exports.string().regex(/^[a-f0-9]{64}$/),
-      displayName: external_exports.string(),
-      // 空数组合法 = 纯访客（只能 DM）
-      grants: external_exports.array(GrantSchema),
-      issuedAt: external_exports.number().int().nonnegative(),
-      expiresAt: external_exports.number().int().positive().optional(),
-      maxUses: external_exports.number().int().positive().optional(),
-      usedCount: external_exports.number().int().nonnegative(),
-      /**
-       * guest 在 auth 帧捎带 selfPrincipalId 时由 AuthGate.authenticate 回写；
-       * 未被消费的 cap 此字段缺失。
-       */
-      peerOwnerId: external_exports.string().min(1).optional(),
-      /** 首次 client hello 时间戳（与 peerOwnerId 同步写入） */
-      firstUsedByPeerAt: external_exports.number().int().positive().optional(),
-      /**
-       * 对方 daemon owner 的 displayName，guest auth 帧 selfDisplayName 触发
-       * recordPeerHello 时同步回写。视角 B (2026-05-23) UI 派生联系人列表用此字段
-       * 显示对方名字（避免 fallback 到我颁 cap 时填的 displayName）。
-       */
-      peerDisplayName: external_exports.string().optional()
-    }).strict();
-    CapabilityWireSchema = CapabilitySchema.omit({ secretHash: true });
-    WhoamiResponseSchema = external_exports.object({
-      type: external_exports.literal("whoami:ok"),
-      owner: external_exports.object({
-        id: external_exports.string(),
-        kind: external_exports.enum(["owner", "guest"]),
-        displayName: external_exports.string(),
-        /** 归属人 id（决策 #16：TTC unique_id 等，落 contact.ownerId） */
-        ownerId: external_exports.string(),
-        /** 身份来源（决策 #16：'ttc'/'google'，落 contact.provider） */
-        provider: external_exports.string()
-      }).strict(),
-      capability: CapabilityWireSchema,
-      grantedPersonas: external_exports.array(
-        external_exports.object({
-          id: external_exports.string().min(1),
-          displayName: external_exports.string()
-        }).strict()
-      )
-    }).strict();
-    PERSONAL_CAP_GRANTS = Object.freeze([
-      Object.freeze({
-        resource: Object.freeze({ type: "persona", id: "*" }),
-        actions: Object.freeze(["read", "send"])
-      })
-    ]);
-  }
-});
-
-// ../protocol/src/inbox.ts
-var InboxMessageSchema, InboxPostMessageArgsSchema, InboxListArgsSchema, InboxMarkReadArgsSchema, InboxSendDmArgsSchema;
-var init_inbox = __esm({
-  "../protocol/src/inbox.ts"() {
-    "use strict";
-    init_zod();
-    InboxMessageSchema = external_exports.object({
-      id: external_exports.string().min(1),
-      peerDeviceId: external_exports.string().min(1),
-      senderDeviceId: external_exports.string().min(1),
-      text: external_exports.string().min(1),
-      createdAt: external_exports.number().int().nonnegative(),
-      readBy: external_exports.record(external_exports.string().min(1), external_exports.number().int().positive()).default({}),
-      // persona 代发署名（B 版设计）：非空 = 该消息由某 persona 代发，非真人手打。
-      // 缺省 = 真人。routing 身份仍看 senderDeviceId；origin 只用于末端 UI 渲染来源。
-      origin: external_exports.object({ kind: external_exports.literal("persona"), personaId: external_exports.string().min(1) }).optional()
-    }).strict();
-    InboxPostMessageArgsSchema = external_exports.object({
-      peerDeviceId: external_exports.string().min(1).optional(),
-      id: external_exports.string().min(1),
-      text: external_exports.string().min(1),
-      createdAt: external_exports.number().int().nonnegative(),
-      // persona 代发署名（跨 daemon forward 时随远程腿透传；真人发缺省）。
-      origin: external_exports.object({ kind: external_exports.literal("persona"), personaId: external_exports.string().min(1) }).optional()
-    }).strict();
-    InboxListArgsSchema = external_exports.object({
-      peerDeviceId: external_exports.string().min(1),
-      sinceCreatedAt: external_exports.number().int().nonnegative().optional()
-    }).strict();
-    InboxMarkReadArgsSchema = external_exports.object({
-      peerDeviceId: external_exports.string().min(1),
-      upToCreatedAt: external_exports.number().int().nonnegative()
-    }).strict();
-    InboxSendDmArgsSchema = external_exports.object({
-      peerDeviceId: external_exports.string().min(1).optional(),
-      text: external_exports.string().min(1)
-    });
-  }
-});
-
-// ../protocol/src/contact.ts
-var ContactSchema, ContactWireSchema, ContactRemoveArgsSchema, ContactRemoveOkSchema, ContactListOkSchema, ContactAddedFrameSchema, ContactRemovedFrameSchema, ContactPinArgsSchema, ContactPinOkSchema, ContactPinnedFrameSchema;
-var init_contact = __esm({
-  "../protocol/src/contact.ts"() {
-    "use strict";
-    init_zod();
-    init_capability();
-    ContactSchema = external_exports.object({
-      /**
-       * 对方设备标识（主键）：对方 daemon 自己生成并持久化的标识（auth.json deviceId，
-       * 如 dev-<uuid>），provider 无关。同 deviceId 重复 upsert 覆盖。
-       */
-      deviceId: external_exports.string().min(1),
-      /**
-       * 归属人 id（决策 #16）：TTC unique_id 等，由 connect token subOwner 签名背书。
-       * 与 provider 一起唯一标识一个人。DM 不再按它路由（路由用 deviceId），仅显示/分组用。
-       */
-      ownerId: external_exports.string().min(1),
-      /** 身份来源（决策 #16）：'ttc'（飞书/手机/邮箱登入 TTC）| 'google' | ...，token 背书 */
-      provider: external_exports.string().min(1),
-      /** 联系人显示名 */
-      displayName: external_exports.string(),
-      /** 该设备可达的 ws/tunnel 地址 */
-      remoteUrl: external_exports.string().min(1),
-      // 自动反向建立联系人（spec 决策 #11）：被连接方本地验票成功后自动落 A 为
-      // 联系人，但它不持有 A 颁发的 token（A 从未给它换票）→ connectToken 为空串。
-      // device:connect 出站路径仍存中心 server 签发的真实 connect token（断线重连复用）。
-      // 不用 .min(1)：自动反向路径合法地存空串，禁止填假 token 占位（不造假数据）。
-      connectToken: external_exports.string(),
-      grants: external_exports.array(GrantSchema),
-      addedAt: external_exports.number().int().nonnegative(),
-      /**
-       * pin 时间戳（ms，Date.now() 语义）；null = 未 pin。sidebar 顶部固定区渲染由此驱动。
-       * 老 contacts.json 缺此字段 → zod default 补 null（无破坏性升级；不 orphan）。
-       * 对齐 SessionFile.pinnedAt 语义（daemon 侧持久化，contact:pin RPC 更新 → contact:pinned push）。
-       */
-      pinnedAt: external_exports.number().int().nullable().default(null),
-      /**
-       * 远程访问授权（spec 2026-07-16）。owner 视角：允许该 contact 反向操作我的设备——
-       * 跨设备 exec 的总开关（peerExec:run handler 运行时判它）。default=false，owner 显式开。
-       * 授权粒度 per-people (per-contact)：借用别人 persona 本来就带信任对方本人的前提。
-       */
-      remoteAccessAllowed: external_exports.boolean().default(false)
-    }).strict();
-    ContactWireSchema = ContactSchema;
-    ContactRemoveArgsSchema = external_exports.object({
-      deviceId: external_exports.string().min(1)
-    }).strict();
-    ContactRemoveOkSchema = external_exports.object({
-      type: external_exports.literal("contact:remove:ok"),
-      deviceId: external_exports.string().min(1)
-    }).strict();
-    ContactListOkSchema = external_exports.object({
-      type: external_exports.literal("contact:list:ok"),
-      contacts: external_exports.array(ContactWireSchema)
-    }).strict();
-    ContactAddedFrameSchema = external_exports.object({
-      type: external_exports.literal("contact:added"),
-      contact: ContactWireSchema
-    }).strict();
-    ContactRemovedFrameSchema = external_exports.object({
-      type: external_exports.literal("contact:removed"),
-      deviceId: external_exports.string().min(1)
-    }).strict();
-    ContactPinArgsSchema = external_exports.object({
-      deviceId: external_exports.string().min(1),
-      pinned: external_exports.boolean()
-    }).strict();
-    ContactPinOkSchema = external_exports.object({
-      type: external_exports.literal("contact:pin:ok"),
-      deviceId: external_exports.string().min(1),
-      pinnedAt: external_exports.number().int().nullable()
-    }).strict();
-    ContactPinnedFrameSchema = external_exports.object({
-      type: external_exports.literal("contact:pinned"),
-      deviceId: external_exports.string().min(1),
-      pinnedAt: external_exports.number().int().nullable()
-    }).strict();
-  }
-});
-
-// ../protocol/src/contact-handshake.ts
-var ContactHandshakeArgsSchema, ContactHandshakeOkSchema;
-var init_contact_handshake = __esm({
-  "../protocol/src/contact-handshake.ts"() {
-    "use strict";
-    init_zod();
-    init_capability();
-    ContactHandshakeArgsSchema = external_exports.object({
-      selfUrl: external_exports.string().min(1)
-    });
-    ContactHandshakeOkSchema = external_exports.object({
-      type: external_exports.literal("contact:handshake:ok"),
-      owner: external_exports.object({
-        /** 被调方 deviceId（路由主键；调用方落 Contact 的主键用自己请求的 args.deviceId，此值供校验/展示） */
-        id: external_exports.string(),
-        /** 归属人（落 Contact.ownerId / provider，显示分组用） */
-        ownerId: external_exports.string(),
-        provider: external_exports.string(),
-        displayName: external_exports.string()
-      }),
-      /** 被调方授调用方的 grants（落 Contact.grants） */
-      grants: external_exports.array(GrantSchema)
-    });
-  }
-});
-
-// ../protocol/src/contact-remote-access.ts
-var ContactSetRemoteAccessArgsSchema, ContactSetRemoteAccessOkSchema, ContactRemoteAccessUpdatedFrameSchema;
-var init_contact_remote_access = __esm({
-  "../protocol/src/contact-remote-access.ts"() {
-    "use strict";
-    init_zod();
-    ContactSetRemoteAccessArgsSchema = external_exports.object({
-      deviceId: external_exports.string().min(1),
-      remoteAccessAllowed: external_exports.boolean()
-    }).strict();
-    ContactSetRemoteAccessOkSchema = external_exports.object({
-      type: external_exports.literal("contact:setRemoteAccess:ok"),
-      deviceId: external_exports.string().min(1),
-      remoteAccessAllowed: external_exports.boolean()
-    }).strict();
-    ContactRemoteAccessUpdatedFrameSchema = external_exports.object({
-      type: external_exports.literal("contact:remote-access-updated"),
-      deviceId: external_exports.string().min(1),
-      remoteAccessAllowed: external_exports.boolean()
-    }).strict();
-  }
-});
-
-// ../protocol/src/peer-exec.ts
-var PeerExecRunArgsSchema, PeerExecRunOkSchema;
-var init_peer_exec = __esm({
-  "../protocol/src/peer-exec.ts"() {
-    "use strict";
-    init_zod();
-    PeerExecRunArgsSchema = external_exports.object({
-      /** A 侧发起时带：目标设备 deviceId。peer-forward 转发前 strip 掉，B 侧本地执行时无此字段。 */
-      peerDeviceId: external_exports.string().min(1).optional(),
-      /** 交给对端 `bash -c` 的命令；cc 自拼完整路径（一发一收，无跨命令会话状态）。 */
-      command: external_exports.string().min(1),
-      /** 超时上限（ms）；缺省用 handler 默认 30_000，clamp 300_000。 */
-      timeoutMs: external_exports.number().int().positive().optional()
-    }).strict();
-    PeerExecRunOkSchema = external_exports.object({
-      type: external_exports.literal("peerExec:run:ok"),
-      stdout: external_exports.string(),
-      stderr: external_exports.string(),
-      /** 进程退出码；被超时 kill 时 null。 */
-      exitCode: external_exports.number().int().nullable(),
-      timedOut: external_exports.boolean(),
-      stdoutTruncated: external_exports.boolean(),
-      stderrTruncated: external_exports.boolean()
-    }).strict();
-  }
-});
-
-// ../protocol/src/extension.ts
-function isAllowedHostedUrl(raw) {
-  let u;
-  try {
-    u = new URL(raw);
-  } catch {
-    return false;
-  }
-  if (u.protocol === "https:") return true;
-  if (u.protocol === "http:" && LOCALHOST_HOSTS.has(u.hostname)) return true;
-  return false;
-}
-function manifestMode(m2) {
-  return m2.entry?.url ? "hosted" : "local";
-}
-function ownerNamespace(ownerPrincipalId) {
-  let h = 2166136261;
-  for (let i = 0; i < ownerPrincipalId.length; i++) {
-    h ^= ownerPrincipalId.charCodeAt(i);
-    h = Math.imul(h, 16777619) >>> 0;
-  }
-  return (h >>> 0).toString(16).padStart(8, "0");
-}
-function namespacedExtId(slug, ownerPrincipalId) {
-  return `${slug}-${ownerNamespace(ownerPrincipalId)}`;
-}
-function validateSimpleSemver(v2) {
-  if (typeof v2 !== "string") {
-    return { ok: false, reason: "version must be a string" };
-  }
-  const parts = v2.split(".");
-  if (parts.length !== 3) {
-    return { ok: false, reason: `"${v2}" \u2014 only MAJOR.MINOR.PATCH allowed` };
-  }
-  for (const p2 of parts) {
-    if (!/^\d+$/.test(p2)) {
-      return { ok: false, reason: `"${v2}" \u2014 only numeric segments allowed` };
-    }
-  }
-  return { ok: true };
-}
-function compareSimpleSemver(a, b2) {
-  const pa = parseOrThrow(a);
-  const pb = parseOrThrow(b2);
-  for (let i = 0; i < 3; i++) {
-    if (pa[i] < pb[i]) return -1;
-    if (pa[i] > pb[i]) return 1;
-  }
-  return 0;
-}
-function parseOrThrow(v2) {
-  const r = validateSimpleSemver(v2);
-  if (!r.ok) throw new Error(r.reason);
-  const [a, b2, c] = v2.split(".").map((p2) => parseInt(p2, 10));
-  return [a, b2, c];
-}
-var EXT_ID_REGEX, ExtensionStateSchema, LOCALHOST_HOSTS, ExtensionManifestSchema, ExtensionTargetSchema, ExtensionRecordSchema, PublishedSnapshotSchema, ChannelRefSchema, SourceRefSchema, PublishedExtensionRecordSchema, PublishCheckSchema, PublishStatusResultSchema;
-var init_extension = __esm({
-  "../protocol/src/extension.ts"() {
-    "use strict";
-    init_zod();
-    EXT_ID_REGEX = /^[a-z0-9][a-z0-9-]*$/;
-    ExtensionStateSchema = external_exports.enum([
-      "stopped",
-      "starting",
-      "running",
-      "crashed",
-      "invalid"
-    ]);
-    LOCALHOST_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1"]);
-    ExtensionManifestSchema = external_exports.object({
-      id: external_exports.string().regex(EXT_ID_REGEX),
-      name: external_exports.string().min(1),
-      version: external_exports.string().min(1),
-      apiVersion: external_exports.literal("1"),
-      runtime: external_exports.object({ startCommand: external_exports.string().min(1) }).passthrough().optional(),
-      entry: external_exports.object({
-        url: external_exports.string().url().refine(isAllowedHostedUrl, {
-          message: "INVALID_URL_SCHEME: only https or http://localhost is allowed"
-        })
-      }).strict().optional()
-    }).passthrough().superRefine((m2, ctx) => {
-      const hasRuntime = !!m2.runtime;
-      const hasUrl = !!m2.entry?.url;
-      if (hasRuntime && hasUrl) {
-        ctx.addIssue({
-          code: external_exports.ZodIssueCode.custom,
-          message: "INVALID_MANIFEST: entry.url and runtime cannot coexist"
-        });
-      }
-      if (!hasRuntime && !hasUrl) {
-        ctx.addIssue({
-          code: external_exports.ZodIssueCode.custom,
-          message: "INVALID_MANIFEST: must have either entry.url or runtime"
-        });
-      }
-    });
-    ExtensionTargetSchema = external_exports.discriminatedUnion("kind", [
-      external_exports.object({ kind: external_exports.literal("local"), port: external_exports.number().int().min(1).max(65535) }),
-      external_exports.object({ kind: external_exports.literal("hosted"), url: external_exports.string().url() })
-    ]);
-    ExtensionRecordSchema = external_exports.discriminatedUnion("state", [
-      external_exports.object({
-        extId: external_exports.string(),
-        manifest: ExtensionManifestSchema,
-        state: external_exports.literal("stopped")
-      }),
-      external_exports.object({
-        extId: external_exports.string(),
-        manifest: ExtensionManifestSchema,
-        state: external_exports.literal("starting")
-      }),
-      external_exports.object({
-        extId: external_exports.string(),
-        manifest: ExtensionManifestSchema,
-        state: external_exports.literal("running"),
-        target: ExtensionTargetSchema
-      }),
-      external_exports.object({
-        extId: external_exports.string(),
-        manifest: ExtensionManifestSchema,
-        state: external_exports.literal("crashed")
-      }),
-      external_exports.object({
-        extId: external_exports.string(),
-        manifest: external_exports.unknown().nullable(),
-        state: external_exports.literal("invalid"),
-        invalidReason: external_exports.string().min(1)
-      })
-    ]);
-    PublishedSnapshotSchema = external_exports.object({
-      snapshotHash: external_exports.string().min(1),
-      version: external_exports.string().min(1),
-      publishedAt: external_exports.number()
-    });
-    ChannelRefSchema = external_exports.discriminatedUnion("kind", [
-      external_exports.object({
-        kind: external_exports.literal("p2p-tunnel"),
-        ownerPrincipalId: external_exports.string().min(1),
-        extId: external_exports.string().min(1)
-      })
-    ]);
-    SourceRefSchema = external_exports.discriminatedUnion("kind", [
-      external_exports.object({
-        kind: external_exports.literal("p2p-tunnel"),
-        ownerPrincipalId: external_exports.string().min(1),
-        extId: external_exports.string().min(1),
-        snapshotHash: external_exports.string().min(1)
-      })
-    ]);
-    PublishedExtensionRecordSchema = external_exports.object({
-      extId: external_exports.string().min(1),
-      name: external_exports.string().min(1),
-      version: external_exports.string().min(1),
-      contentHash: external_exports.string().min(1),
-      publishedAt: external_exports.number()
+      sessionId: external_exports.string().min(1),
+      force: external_exports.boolean().optional()
+    }).strict();
+    StartDevServerResultSchema = external_exports.object({
+      project: ProjectMetadataSchema
+    }).strict();
+    ASSISTANT_REPORTABLE_STAGES = [
+      "installing",
+      "failed"
+    ];
+    ReportStageArgsSchema = external_exports.object({
+      sessionId: external_exports.string().min(1),
+      stage: external_exports.enum(ASSISTANT_REPORTABLE_STAGES),
+      /** stage='failed' 时必填的原因（一句话），其它 stage optional */
+      reason: external_exports.string().optional()
+    }).strict();
+    ReportStageResultSchema = external_exports.object({
+      ok: external_exports.literal(true)
+    }).strict();
+    StopDevServerArgsSchema = external_exports.object({
+      sessionId: external_exports.string().min(1)
+    }).strict();
+    StopDevServerResultSchema = external_exports.object({
+      ok: external_exports.literal(true)
+    }).strict();
+    AppBuilderProjectUpdatedEventSchema = external_exports.object({
+      type: external_exports.literal("appBuilder:project-updated"),
+      project: ProjectWithStatusSchema,
+      stage: ProjectStageSchema,
+      /** stage='failed' 时的失败原因 */
+      stageReason: external_exports.string().optional()
+    }).strict();
+    PublishArgsSchema = external_exports.object({
+      name: external_exports.string().regex(projectNameRegex)
     });
-    PublishCheckSchema = external_exports.discriminatedUnion("kind", [
-      external_exports.object({ kind: external_exports.literal("clean") }),
-      external_exports.object({
-        kind: external_exports.literal("ready-new-version"),
-        fromVersion: external_exports.string().min(1),
-        toVersion: external_exports.string().min(1)
-      }),
-      external_exports.object({
-        kind: external_exports.literal("error-same-hash"),
-        version: external_exports.string().min(1)
-      }),
-      external_exports.object({
-        kind: external_exports.literal("error-version-not-bumped"),
-        localVersion: external_exports.string().min(1),
-        publishedVersion: external_exports.string().min(1)
-      }),
-      external_exports.object({
-        kind: external_exports.literal("error-version-regression"),
-        localVersion: external_exports.string().min(1),
-        publishedVersion: external_exports.string().min(1)
-      })
-    ]);
-    PublishStatusResultSchema = external_exports.object({
-      localManifest: external_exports.object({
-        name: external_exports.string().min(1),
-        version: external_exports.string().min(1),
-        contentHash: external_exports.string().min(1)
-      }),
-      publishState: external_exports.discriminatedUnion("kind", [
-        external_exports.object({ kind: external_exports.literal("unpublished") }),
-        external_exports.object({
-          kind: external_exports.literal("published"),
-          version: external_exports.string().min(1),
-          contentHash: external_exports.string().min(1),
-          publishedAt: external_exports.number()
-        })
-      ]),
-      check: PublishCheckSchema
+    PublishResultSchema = external_exports.object({
+      jobId: external_exports.string().min(1),
+      status: external_exports.enum(["started", "already-publishing"])
+    }).strict();
+    DismissPublishJobArgsSchema = external_exports.object({
+      name: external_exports.string().regex(projectNameRegex)
     });
+    DismissPublishJobResultSchema = external_exports.object({
+      ok: external_exports.literal(true)
+    }).strict();
+    AppBuilderPublishProgressEventSchema = external_exports.object({
+      type: external_exports.literal("appBuilder:publish-progress"),
+      name: external_exports.string().regex(projectNameRegex),
+      jobId: external_exports.string().min(1),
+      stage: external_exports.enum(["build", "deploy", "verify"]),
+      status: external_exports.enum(["started", "completed"])
+    }).strict();
+    AppBuilderPublishFailedEventSchema = external_exports.object({
+      type: external_exports.literal("appBuilder:publish-failed"),
+      name: external_exports.string().regex(projectNameRegex),
+      jobId: external_exports.string().min(1),
+      stage: external_exports.enum(["build", "deploy", "verify", "unknown"]),
+      errorSummary: external_exports.string()
+    }).strict();
   }
 });
 
-// ../protocol/src/feishu-auth.ts
-var FEISHU_GATED_METHODS, DeviceEntrySchema, DeviceListResponseSchema, DeviceConnectArgsSchema, DeviceConnectResponseSchema, FeishuIdentitySchema, AuthLoginStartResponseSchema, AuthGetIdentityResponseSchema, AuthLogoutResponseSchema, AuthLoginDoneEventSchema, AuthLoginFailedEventSchema;
-var init_feishu_auth = __esm({
-  "../protocol/src/feishu-auth.ts"() {
+// ../protocol/src/methods.ts
+function methodArgFields(method) {
+  let schema = METHOD_DOCS[method].args;
+  if (!schema) return null;
+  for (let i = 0; i < 5 && schema && !schema.shape; i += 1) {
+    schema = schema._def?.schema;
+  }
+  const shape = schema?.shape;
+  if (!shape) return null;
+  return Object.entries(shape).map(([name, def]) => ({ name, required: !def.isOptional() }));
+}
+var NO_ARGS, METHOD_DOCS, METHOD_NAMES, RPC_METHOD_STATUSES, RpcMethodStatusSchema, RpcMethodInfoSchema, MetaMethodsResultSchema;
+var init_methods = __esm({
+  "../protocol/src/methods.ts"() {
     "use strict";
     init_zod();
-    FEISHU_GATED_METHODS = [
-      // 联系人列表（device:connect 落同一 store；list 读 / remove 删）
-      "contact:list",
-      "contact:remove",
-      // DM / 跨用户通知
-      "inbox:list",
-      "inbox:markRead",
-      "inbox:postMessage",
-      // mirror peer sessions（远端会话镜像）
-      "peerSession:upsert",
-      "peerSession:remove",
-      // 设备目录 + 连接（决策 #15：daemon 代理中心 server，需要 owner 的 ttcJwt）
-      "device:list",
-      "device:connect"
-    ];
-    DeviceEntrySchema = external_exports.object({
-      /**
-       * 设备标识（决策 #15：daemon 本地生成的 dev-<uuid>，与人的身份 unionId 无关）。
-       * 中心 server clawd_devices 注册表仅作服务发现（url 下发 + 目录），不在安全路径上。
-       */
-      deviceId: external_exports.string().min(1),
-      /** 显示名 */
+    init_attachment_schemas();
+    init_contact_handshake();
+    init_contact_remote_access();
+    init_contact();
+    init_feishu_auth();
+    init_dispatch();
+    init_extension();
+    init_inbox();
+    init_peer_exec();
+    init_shift_internal();
+    init_persona_schemas();
+    init_schemas();
+    NO_ARGS = external_exports.object({});
+    METHOD_DOCS = {
+      "session:create": {
+        summary: "\u65B0\u5EFA\u4F1A\u8BDD\u5E76\u62C9\u8D77 tool \u8FDB\u7A0B\uFF08claude / codex\uFF09\u3002**cwd \u4E0E ownerPersonaId \u81F3\u5C11\u4F20\u4E00\u4E2A**\uFF08\u5E26 ownerPersonaId \u65F6 cwd \u7531 daemon \u6D3E\u751F\uFF09\u2014\u2014\u8FD9\u6761\u4E92\u65A5\u7EA6\u675F\u662F schema \u7684 refine\uFF0C\u53CD\u5C04\u4E0D\u51FA\u6765",
+        args: SessionCreateArgs
+      },
+      "session:list": {
+        summary: "\u5217\u51FA\u5F53\u524D\u8EAB\u4EFD\u53EF\u89C1\u7684\u4F1A\u8BDD\uFF08owner \u5168\u91CF\uFF1Bguest \u9650\u88AB\u6388\u6743 persona\uFF09",
+        args: SessionListArgs
+      },
+      "session:get": {
+        summary: "\u53D6\u5355\u4E2A\u4F1A\u8BDD\u7684\u5B8C\u6574 SessionFile\uFF08\u5143\u6570\u636E + \u72B6\u6001\uFF09",
+        args: SessionIdArgs
+      },
+      "session:update": {
+        summary: "\u6539\u4F1A\u8BDD\u5143\u6570\u636E\uFF0C\u4E0D\u5F71\u54CD\u8FDB\u7A0B\u3002patch \u5141\u8BB8\u7684\u952E\uFF1Alabel / model / permissionMode / effort / cwd / iconKey\u2014\u2014**\u4F20\u522B\u7684\u952E\u4F1A\u88AB\u9759\u9ED8\u4E22\u5F03**\uFF08zod strip\uFF09\uFF0Chandler \u7167\u6837\u8FD4 ok",
+        args: SessionUpdateArgs
+      },
+      "session:delete": {
+        summary: "\u5220\u4F1A\u8BDD\uFF1A\u505C\u8FDB\u7A0B + \u5220 SessionFile\uFF0C\u5E76\u8054\u52A8\u6E05\u7406\u7ED1\u5B9A\u7684 app-builder project",
+        args: SessionIdArgs
+      },
+      "session:send": {
+        summary: "\u5411\u4F1A\u8BDD\u53D1\u4E00\u6761\u7528\u6237\u6D88\u606F\uFF08\u89E6\u53D1\u65B0\u4E00\u8F6E turn\uFF09",
+        args: SessionSendArgs
+      },
+      "session:currentTurnSender": {
+        summary: "\u67E5\u5F53\u524D turn \u7684\u9A71\u52A8\u8005\uFF08owner / guest \u7684 SenderInfo\uFF09\u3002\u7701\u7565 sessionId \u6216\u4F20\u7A7A\u4E32 \u2192 \u76F4\u63A5\u8FD4 sender:null\uFF0C\u4E0D\u62A5\u9519",
+        args: SessionCurrentTurnSenderArgs
+      },
+      "session:stop": {
+        summary: "\u505C\u6389\u4F1A\u8BDD\u7684 tool \u8FDB\u7A0B\uFF08\u6740\u8FDB\u7A0B\uFF0C\u4F1A\u8BDD\u672C\u8EAB\u4FDD\u7559\uFF09",
+        args: SessionIdArgs
+      },
+      "session:interrupt": {
+        summary: "\u6E29\u67D4\u4E2D\u65AD\u5F53\u524D\u8F6E\u6B21\uFF0C\u4E0D\u6740\u8FDB\u7A0B\uFF08\u8D70 CC IPC control_request.subtype=interrupt\uFF09",
+        args: SessionInterruptArgs
+      },
+      "session:rewind": {
+        summary: "\u56DE\u6EDA\u5230\u6307\u5B9A user message\uFF0C\u5E76\u64A4\u9500\u5176\u540E CC \u505A\u7684\u6587\u4EF6\u7F16\u8F91",
+        args: SessionRewindArgs
+      },
+      "session:rewind-diff": {
+        summary: "\u56DE\u6EDA\u9884\u89C8\uFF1A\u8BFB ~/.claude/file-history \u5FEB\u7167 + \u78C1\u76D8\u73B0\u72B6\u7B97\u771F\u5B9E diff\uFF0C\u4E0D\u4F9D\u8D56 CC \u8FDB\u7A0B",
+        args: SessionRewindDiffArgs
+      },
+      "session:rewindable-message-ids": {
+        summary: "\u4E00\u6B21\u6027\u62FF\u5230\u300C\u6709\u771F\u5B9E diff\u300D\u7684 user message id \u96C6\u5408\uFF0CUI \u636E\u6B64\u51B3\u5B9A\u54EA\u4E9B\u6D88\u606F\u663E\u793A\u56DE\u6EDA\u6309\u94AE",
+        args: SessionRewindableMessageIdsArgs
+      },
+      "session:fork": {
+        summary: "\u4ECE\u6307\u5B9A message \u5904 fork \u51FA\u65B0 transcript\uFF08\u622A\u65AD + \u91CD\u5199 sessionId/parentUuid\uFF09\uFF0C\u8FD4\u56DE\u65B0 toolSessionId\uFF1B\u4E0D\u81EA\u52A8\u62C9\u8D77\u8FDB\u7A0B",
+        args: SessionForkArgs
+      },
+      "session:new": {
+        summary: "\u5728**\u5DF2\u6709**\u4F1A\u8BDD\u4E0A\u6E05\u7A7A\u4E0A\u4E0B\u6587\u5F00\u65B0\u4E00\u8F6E\uFF0C\u76F8\u5F53\u4E8E CC \u7684 /clear\uFF08\u4E0D\u662F\u5EFA\u65B0\u4F1A\u8BDD\u2014\u2014\u5EFA\u65B0\u4F1A\u8BDD\u7528 session:create\uFF09",
+        args: SessionIdArgs
+      },
+      "session:resume": {
+        summary: "\u628A\u4F1A\u8BDD\u6062\u590D\u5230\u6307\u5B9A\u7684 tool \u4F1A\u8BDD\uFF08CC transcript\uFF09\u4E0A\u7EE7\u7EED",
+        args: SessionResumeArgs
+      },
+      "session:observe": {
+        summary: "\u6302 observer \u76D1\u542C\u8BE5\u4F1A\u8BDD\u7684 CC jsonl\uFF0C\u628A daemon \u4E4B\u5916\u542F\u52A8\u7684 CC \u6D3B\u52A8\u56DE\u704C\u8FDB\u6765\uFF08\u591A\u7AEF\u5171\u4EAB / \u63A5\u7BA1\u5916\u90E8\u4F1A\u8BDD\uFF09\u3002\u4EC5 claude \u652F\u6301",
+        args: SessionObserveArgs
+      },
+      "session:events": {
+        summary: "\u62C9\u53D6\u4F1A\u8BDD\u7684\u5386\u53F2\u4E8B\u4EF6\uFF08\u6309 seq \u589E\u91CF\uFF09\uFF0C\u7528\u4E8E\u65AD\u7EBF\u91CD\u8FDE\u8865\u5E27",
+        args: SessionEventsArgs
+      },
+      "session:subscribe": {
+        summary: "\u8BA2\u9605\u8BE5\u4F1A\u8BDD\u7684 push \u5E27\uFF08\u672C\u8FDE\u63A5\u751F\u6548\uFF0CrefCount \u8BA1\u6570\uFF09\u3002**\u7701\u7565 sessionId = \u4E0D\u5EFA\u7ACB\u4EFB\u4F55\u8BA2\u9605**\uFF0C\u4F46\u7167\u6837\u8FD4 subscribed \u2014\u2014 \u4E0D\u662F\u300C\u8BA2\u9605\u5168\u90E8\u300D",
+        args: SessionSubscribeArgs
+      },
+      "session:unsubscribe": {
+        summary: "\u53D6\u6D88\u8BA2\u9605\u8BE5\u4F1A\u8BDD\u7684 push \u5E27\u3002\u7701\u7565 sessionId \u65F6\u4E0D\u53D6\u6D88\u4EFB\u4F55\u8BA2\u9605\uFF0C\u7167\u6837\u8FD4 ok",
+        args: SessionSubscribeArgs
+      },
+      "session:pin": {
+        summary: "\u7F6E\u9876 / \u53D6\u6D88\u7F6E\u9876\u4F1A\u8BDD",
+        args: SessionPinArgs
+      },
+      "session:markRead": {
+        summary: "\u6E05\u6389\u4F1A\u8BDD\u7684\u5171\u4EAB\u672A\u8BFB\u6807\u8BB0\u5E76\u5E7F\u64AD session:info\uFF1B\u5E42\u7B49",
+        args: SessionIdArgs
+      },
+      "session:reorderPins": {
+        summary: "\u6574\u4F53\u91CD\u5199\u6240\u6709\u7F6E\u9876\u4F1A\u8BDD\u7684\u6392\u5E8F\uFF08sidebar \u62D6\u62FD\u5B8C\u6210\u65F6\u8C03\uFF09",
+        args: SessionReorderPinsArgs
+      },
+      "peerSession:upsert": {
+        summary: "\u5199\u5165 / \u66F4\u65B0\u4E00\u6761 mirror SessionFile \u2014\u2014 \u300C\u6211\u5728\u670B\u53CB daemon \u4E0A\u521B\u5EFA\u7684\u4F1A\u8BDD\u300D\u5728\u672C\u673A\u7684\u526F\u672C\uFF0C\u4EC5\u4F9B sidebar \u8DE8\u8BBE\u5907\u805A\u5408\uFF1Bdaemon \u53EA dumb \u5199\uFF0C\u4E0D\u5E7F\u64AD\u4EFB\u4F55 push \u5E27",
+        args: PeerSessionUpsertArgs
+      },
+      "peerSession:remove": {
+        summary: "\u5220\u9664\u4E00\u6761 mirror SessionFile\uFF08\u540C\u6837\u4E0D\u5E7F\u64AD\uFF09",
+        args: PeerSessionRemoveArgs
+      },
+      "permission:respond": {
+        summary: "\u56DE\u5E94 CC \u7684\u6743\u9650\u8BF7\u6C42\uFF08\u5141\u8BB8 / \u62D2\u7EDD / \u8BB0\u4F4F\u89C4\u5219\uFF09",
+        args: PermissionRespondArgs
+      },
+      "session:answerQuestion": {
+        summary: "\u56DE\u586B AskUserQuestion \u8868\u5355\u7B54\u6848\uFF0Cdaemon \u5408\u5E76\u8FDB updated_input \u5199 control_response \u7ED9 CC",
+        args: AnswerQuestionArgs
+      },
+      "session:cancelQuestion": {
+        summary: "\u7528\u6237\u8DF3\u8FC7 AskUserQuestion\uFF1Adaemon \u56DE allow + \u7A7A\u7B54\u6848\u8BA9 tool \u8D70\u7A7A\u8DEF\u5F84\uFF0C\u5E76\u5E7F\u64AD cleared \u5E27",
+        args: CancelQuestionArgs
+      },
+      "history:projects": {
+        summary: "\u5217\u51FA CC \u5386\u53F2\u91CC\u7684\u5168\u90E8\u9879\u76EE\uFF08\u6309 projectPath \u805A\u5408\uFF09\uFF1Bguest \u53EA\u770B\u5230\u81EA\u5DF1\u88AB\u6388\u6743 persona \u5B50\u6811\u4E0B\u7684",
+        args: NO_ARGS
+      },
+      "history:list": {
+        summary: "\u5217\u51FA\u67D0\u4E2A\u9879\u76EE\u4E0B\u7684\u5386\u53F2\u4F1A\u8BDD",
+        args: HistoryListArgs
+      },
+      "history:read": {
+        summary: "\u8BFB\u4E00\u6761\u5386\u53F2\u4F1A\u8BDD\u7684\u5B8C\u6574\u6D88\u606F\uFF08\u89E3\u6790 CC jsonl\uFF09",
+        args: HistoryReadArgs
+      },
+      "history:subagents": {
+        summary: "\u5217\u51FA\u67D0\u6B21\u4F1A\u8BDD\u91CC\u7684 subagent \u8FD0\u884C\u8BB0\u5F55",
+        args: HistorySubagentsArgs
+      },
+      "history:subagent-read": {
+        summary: "\u8BFB\u4E00\u6761 subagent \u7684\u5B8C\u6574\u8BB0\u5F55",
+        args: HistorySubagentReadArgs
+      },
+      "history:recentDirs": {
+        summary: "\u6700\u8FD1\u7528\u8FC7\u7684\u5DE5\u4F5C\u76EE\u5F55\u5217\u8868\uFF08\u6309 cwd \u53BB\u91CD\u3001\u53D6\u6700\u65B0 updatedAt\uFF09\u3002\u65E0\u53C2\u6570",
+        args: NO_ARGS
+      },
+      "workspace:list": {
+        summary: "\u5217\u76EE\u5F55\u5185\u5BB9\uFF08\u6587\u4EF6\u6D4F\u89C8\uFF09\uFF1Bguest \u88AB\u9650\u5236\u5728\u88AB\u6388\u6743 persona \u5B50\u6811\u5185",
+        args: WorkspaceListArgs
+      },
+      "workspace:read": {
+        summary: "\u8BFB\u6587\u4EF6\u5185\u5BB9\uFF1Bguest \u8DEF\u5F84\u8FB9\u754C\u4E0E workspace:list \u540C",
+        args: WorkspaceReadArgs
+      },
+      "shift:list": {
+        summary: "\u5217\u51FA owner \u7684\u5168\u90E8 shift\uFF08\u6392\u73ED\uFF09\uFF0C\u7ED9 UI \u65E5\u5386\u6E32\u67D3\u7528\uFF1Bowner-only",
+        args: NO_ARGS
+      },
+      "shift-internal:add": {
+        summary: "\u6392\u4E00\u4E2A shift\uFF08\u5230\u70B9\u81EA\u52A8\u62C9\u8D77 persona \u5E72\u6D3B\uFF09\u3002\u7701\u7565 targetPersona = \u6D3E\u7ED9\u8C03\u7528\u65B9\u81EA\u5DF1",
+        args: ShiftInternalAddArgs
+      },
+      "shift-internal:list": {
+        summary: "\u5217 shift\u3002\u7701\u7565 onlyMine \u9ED8\u8BA4 true \u2014\u2014 \u53EA\u5217\u672C persona \u5EFA\u7684",
+        args: ShiftInternalListArgs
+      },
+      "shift-internal:cancel": {
+        summary: "\u53D6\u6D88 shift\uFF08\u4EC5\u521B\u5EFA\u5B83\u7684 persona \u53EF\u64CD\u4F5C\uFF09",
+        args: ShiftInternalCancelArgs
+      },
+      "shift-internal:update": {
+        summary: "\u4FEE\u6539 shift \u5B57\u6BB5\uFF08\u4EC5\u521B\u5EFA\u8005\uFF09\u3002patch \u5141\u8BB8\u7684\u952E\uFF1Aname / schedule / prompt / targetPersona / timeoutMs / enabled\uFF1Bschedule \u53D8\u4E86 store \u81EA\u52A8\u91CD\u7B97 nextRunAtMs",
+        args: ShiftInternalUpdateArgs
+      },
+      "shift-internal:history": {
+        summary: "\u67E5 shift \u7684\u6267\u884C\u5386\u53F2\uFF08\u4EC5\u521B\u5EFA\u8005\uFF09",
+        args: ShiftInternalHistoryArgs
+      },
+      "skills:list": {
+        summary: "\u626B\u63CF\u5E76\u5217\u51FA\u8BE5\u76EE\u5F55\u53EF\u7528\u7684 skill",
+        args: SkillsListArgs
+      },
+      "agents:list": {
+        summary: "\u626B\u63CF\u5E76\u5217\u51FA\u8BE5\u76EE\u5F55\u53EF\u7528\u7684 subagent \u5B9A\u4E49",
+        args: AgentsListArgs
+      },
+      "git:root": {
+        summary: "\u53D6\u8BE5\u8DEF\u5F84\u6240\u5C5E git \u4ED3\u5E93\u7684\u6839\u76EE\u5F55\uFF08\u4E0D\u5728\u4ED3\u5E93\u91CC\u8FD4 null\uFF09",
+        args: GitRootArgs
+      },
+      "git:branch": {
+        summary: "\u53D6\u5F53\u524D\u5206\u652F\u540D",
+        args: GitBranchArgs
+      },
+      "git:branches": {
+        summary: "\u5217\u51FA\u672C\u5730\u5206\u652F",
+        args: GitBranchesArgs
+      },
+      "capabilities:get": {
+        summary: "\u53D6\u67D0\u4E2A tool \u7684\u80FD\u529B\u96C6\uFF1A\u53EF\u7528\u6A21\u578B\u5217\u8868 / permissionModes / configSchema",
+        args: CapabilitiesGetArgs
+      },
+      "persona:create": {
+        summary: "\u65B0\u5EFA persona\uFF08\u5199 PersonaFile + CLAUDE.md \u9AA8\u67B6\uFF09\u3002owner-only",
+        args: PersonaCreateArgsSchema
+      },
+      "persona:list": {
+        summary: "\u5217\u51FA persona \u5143\u6570\u636E\uFF08\u4E0D\u542B CLAUDE.md \u6B63\u6587\uFF09\u3002owner \u8FD4\u5168\u91CF\u542B private\uFF1Bguest \u53EA\u8FD4 public \u4E14\u88AB\u6388\u6743\u7684",
+        args: NO_ARGS
+      },
+      "persona:get": {
+        summary: "\u53D6\u5355\u4E2A persona \u8BE6\u60C5\uFF0C**\u542B personality\uFF08CLAUDE.md \u6B63\u6587\uFF09**\u2014\u2014\u552F\u4E00\u643A\u5E26\u6B63\u6587\u7684 method",
+        args: PersonaIdArgsSchema
+      },
+      "persona:update": {
+        summary: "\u6539 persona\uFF08label / model / public / CLAUDE.md \u7B49\uFF09\u3002owner-only",
+        args: PersonaUpdateArgsSchema
+      },
+      "persona:delete": {
+        summary: "\u5220 persona\u3002owner-only",
+        args: PersonaIdArgsSchema
+      },
+      "personaDispatch:run": {
+        summary: "\u628A\u4EFB\u52A1\u59D4\u6D3E\u7ED9\u53E6\u4E00\u4E2A persona\uFF08\u53EF\u8DE8\u8BBE\u5907\uFF09\uFF0C\u5F02\u6B65\u79D2\u56DE { dispatchId }\u3002targetPersona \u4E0E dispatchId **\u81F3\u5C11\u7ED9\u4E00\u4E2A**\uFF08\u524D\u8005\u65B0\u5F00\u3001\u540E\u8005\u7EED\u6D3E\uFF09\uFF1BdispatchId \u4E0E targetDeviceId **\u4E92\u65A5**",
+        args: DispatchRunArgsSchema
+      },
+      "personaDispatch:complete": {
+        summary: '\u88AB\u59D4\u6D3E\u65B9\u56DE\u62A5\u7ED3\u679C\uFF1A\u5199\u53F0\u8D26\u5E76\u628A\u7ED3\u679C\u6295\u9012\u56DE\u53D1\u8D77\u65B9\u4F1A\u8BDD\u3002outcome \u662F { kind:"success", text, filePaths? } \u6216 { kind:"failure", reason } \u4E8C\u9009\u4E00',
+        args: DispatchCompleteArgsSchema
+      },
+      "personaDispatch:list": {
+        summary: "\u67E5 dispatch \u53F0\u8D26\uFF08\u72B6\u6001 / \u7ED3\u679C / \u65F6\u95F4\u6233\uFF09\u3002\u7701\u7565 sourceSessionId = \u8FD4\u5168\u91CF",
+        args: DispatchListArgsSchema
+      },
+      "personaDispatch:get": {
+        summary: "\u67E5\u5355\u6761 dispatch \u53F0\u8D26\u7EC8\u6001\uFF1B\u8DE8\u8BBE\u5907\u65F6 A \u7AEF\u51ED connect token \u8F6E\u8BE2 B \u7AEF\u7528",
+        args: DispatchGetArgsSchema
+      },
+      "peerExec:run": {
+        summary: "\u5728\u8054\u7CFB\u4EBA\u8BBE\u5907\u4E0A\u8DD1\u4E00\u6761 bash \u547D\u4EE4\uFF08\u4E00\u53D1\u4E00\u6536\uFF0C\u65E0\u8DE8\u547D\u4EE4\u4F1A\u8BDD\u72B6\u6001\uFF09\u3002**\u672C\u673A\u53D1\u8D77\u5FC5\u586B peerDeviceId**\u2014\u2014\u7701\u7565\u4EC5\u7528\u4E8E\u5BF9\u7AEF guest \u53CD\u5411\u5165\u53E3\uFF0Cowner ctx \u7701\u7565\u4F1A\u88AB\u62D2\uFF1B\u9700\u5BF9\u65B9\u5F00\u4E86 remoteAccess",
+        args: PeerExecRunArgsSchema
+      },
+      "session:pty:input": {
+        summary: "\u628A\u7528\u6237\u952E\u76D8\u5B57\u8282\u5199\u8FDB pty stdin\uFF08\u4EC5 CLAWD_CC_MODE=tui\uFF09\u3002\u9AD8\u9891\u5E27\uFF0C\u4E0D\u5165 reducer\u3002body: { sessionId, data\uFF08base64-utf8\uFF09 }"
+      },
+      "session:pty:resize": {
+        summary: "\u540C\u6B65\u7EC8\u7AEF\u5C3A\u5BF8\u7ED9 pty\uFF08\u4EC5 tui \u6A21\u5F0F\uFF09\u3002body: { sessionId, cols, rows }"
+      },
+      "session:pty:snapshot": {
+        summary: "\u62C9\u5F53\u524D pty \u5C4F\u5E55\u5168\u91CF\u5FEB\u7167\uFF08\u5207\u56DE\u4F1A\u8BDD / \u5237\u65B0\u65F6\u7528\uFF09\uFF0C\u8FD4\u56DE { data, atSeq, popupKind }\uFF1B\u975E tui \u6216\u5DF2\u9000\u51FA\u65F6 data=null\u3002body: { sessionId }"
+      },
+      "attachment.signUrl": {
+        summary: "\u7ED9\u5DF2\u5165\u7FA4\u7684\u6587\u4EF6\u7B7E\u53D1 HMAC \u4E0B\u8F7D URL\uFF08\u8DE8\u8BBE\u5907\u53EF\u76F4\u63A5\u6253\u5F00\uFF09",
+        args: AttachmentSignUrlArgs
+      },
+      "attachment.groupAdd": {
+        summary: "\u628A\u6587\u4EF6\u767B\u8BB0\u8FDB\u672C\u4F1A\u8BDD\u7684\u5171\u4EAB\u6E05\u5355\uFF08\u7B7E URL \u524D\u5FC5\u987B\u5148\u5165\u7FA4\uFF09",
+        args: AttachmentGroupAddArgs
+      },
+      "attachment.groupRemove": {
+        summary: "\u628A\u6587\u4EF6\u79FB\u51FA\u5171\u4EAB\u6E05\u5355",
+        args: AttachmentGroupRemoveArgs
+      },
+      "attachment.groupList": {
+        summary: "\u5217\u51FA\u672C\u4F1A\u8BDD\u5171\u4EAB\u6E05\u5355\u91CC\u7684\u6587\u4EF6",
+        args: AttachmentGroupListArgs
+      },
+      "inbox:list": {
+        summary: "\u62C9\u67D0\u4E2A peer \u7684 DM / \u901A\u77E5\u961F\u5217",
+        args: InboxListArgsSchema
+      },
+      "inbox:markRead": {
+        summary: "\u628A\u67D0 peer \u961F\u5217\u6807\u8BB0\u4E3A\u5DF2\u8BFB\u5230\u67D0\u65F6\u95F4\u70B9",
+        args: InboxMarkReadArgsSchema
+      },
+      "inbox:postMessage": {
+        summary: "\u6295\u9012\u4E00\u6761 P2P IM \u6D88\u606F\uFF08\u53CC\u6295\uFF1A\u672C\u673A\u843D\u5E93 + \u8F6C\u53D1\u5BF9\u7AEF\uFF09\u3002**owner \u8C03\u7528\u5FC5\u586B peerDeviceId**\uFF0C\u4EC5 guest \u53EF\u7701\uFF08\u4ECE ctx \u63A8\uFF09",
+        args: InboxPostMessageArgsSchema
+      },
+      "inbox:sendDm": {
+        summary: "\u4EE5\u5F53\u524D\u4F1A\u8BDD\u7684\u8EAB\u4EFD\u53D1\u4E00\u6761 DM\uFF08\u53D1\u4FE1\u4EBA\u7531 session scope \u5F52\u56E0\uFF0C\u4E0D\u53EF\u4F2A\u9020\uFF09\u3002**owner \u9A71\u52A8\u7684\u4F1A\u8BDD\u5FC5\u586B peerDeviceId**\uFF0Cguest \u9A71\u52A8\u7684\u53EF\u7701",
+        args: InboxSendDmArgsSchema
+      },
+      "contact:list": {
+        summary: "\u5217\u51FA\u8054\u7CFB\u4EBA\uFF08\u5DF2\u5EFA\u8054\u7684\u8BBE\u5907\uFF09\u3002owner-only",
+        args: NO_ARGS
+      },
+      "contact:pin": {
+        summary: "\u7F6E\u9876 / \u53D6\u6D88\u7F6E\u9876\u8054\u7CFB\u4EBA",
+        args: ContactPinArgsSchema
+      },
+      "contact:remove": {
+        summary: "\u5220\u9664\u8054\u7CFB\u4EBA\u5E76\u6E05\u6389\u5BF9\u5E94\u7684 inbox \u961F\u5217",
+        args: ContactRemoveArgsSchema
+      },
+      "contact:setRemoteAccess": {
+        summary: "\u5F00\u5173\u67D0\u8054\u7CFB\u4EBA\u7684\u8FDC\u7A0B\u8BBF\u95EE\u6388\u6743\uFF08\u63A7\u5236\u5B83\u80FD\u5426\u53CD\u5411 peerExec \u6211\u7684\u8BBE\u5907\uFF09",
+        args: ContactSetRemoteAccessArgsSchema
+      },
+      "contact:handshake": {
+        summary: "\u53CC\u5411\u786E\u8BA4\u5EFA\u8054\u63E1\u624B\uFF1A\u8FDE\u63A5\u65B9\u81EA\u62A5 selfUrl\uFF0C\u88AB\u8FDE\u65B9\u843D\u5E93 + \u5E7F\u64AD\u540E\u56DE\u8EAB\u4EFD\u8F7D\u8377\u3002\u7531 device:connect \u7684\u4E34\u65F6\u8FDE\u63A5\u8C03\u7528",
+        args: ContactHandshakeArgsSchema
+      },
+      "visitor:list": {
+        summary: "\u5217\u51FA\u767B\u5F55\u8BBF\u95EE\u8FC7\u672C\u673A public persona \u7684 web \u8BBF\u5BA2\u3002owner-only",
+        args: NO_ARGS
+      },
+      "whoami": {
+        summary: "\u8FD4\u56DE\u672C\u8FDE\u63A5\u7684\u8EAB\u4EFD\uFF1Aowner \u663E\u793A\u540D + capability wire \u5F62\u6001 + \u88AB\u6388\u6743\u7684 persona \u5217\u8868\u3002\u4EFB\u4F55 authed \u8FDE\u63A5\u53EF\u8C03",
+        args: NO_ARGS
+      },
+      "info": {
+        summary: "daemon \u8FD0\u884C\u65F6\u4FE1\u606F\uFF1A\u7248\u672C / \u534F\u8BAE\u7248\u672C / \u4E3B\u673A / \u53EF\u7528 tool / \u5728\u8DD1\u7684\u4F1A\u8BDD / tunnel URL \u7B49",
+        args: NO_ARGS
+      },
+      "ping": {
+        summary: "\u5B58\u6D3B\u63A2\u6D4B\uFF0C\u56DE pong",
+        args: NO_ARGS
+      },
+      "meta:methods": {
+        summary: "RPC \u81EA\u7701\uFF1A\u8FD4\u56DE METHOD_NAMES \u5168\u96C6 + **\u5BF9\u672C\u8FDE\u63A5**\u7684\u53EF\u8C03\u7528\u6027\u4E09\u6001\uFF08allowed / conditional / denied\uFF09+ \u6BCF\u6761\u7684\u8BF4\u660E\u3002agent \u4FA7 clawd-rpc \u7684 list tool \u662F\u552F\u4E00\u6D88\u8D39\u65B9",
+        args: NO_ARGS
+      },
+      "extension.list": {
+        summary: "\u5217\u51FA\u5DF2\u5B89\u88C5\u7684 extension",
+        args: NO_ARGS
+      },
+      "extension.open": {
+        summary: "\u62C9\u8D77\u67D0\u4E2A extension\uFF08local-spawn \u8D77\u8FDB\u7A0B\u5E76\u7B49 healthz\uFF09",
+        args: ExtensionIdArgs
+      },
+      "extension.close": {
+        summary: "\u5173\u6389\u67D0\u4E2A\u6B63\u5728\u8DD1\u7684 extension",
+        args: ExtensionIdArgs
+      },
+      "extension.uninstall": {
+        summary: "\u5378\u8F7D extension\uFF08\u5220\u5B89\u88C5\u76EE\u5F55\uFF09",
+        args: ExtensionIdArgs
+      },
+      "extension.publish": {
+        summary: "\u628A\u672C\u673A extension \u516C\u5F00\u5230\u5206\u4EAB\u9891\u9053\uFF0C\u4F9B\u8054\u7CFB\u4EBA\u62C9\u53D6\u3002owner-only",
+        args: ExtensionPublishArgs
+      },
+      "extension.unpublish": {
+        summary: "\u64A4\u56DE\u5DF2\u516C\u5F00\u7684 extension\u3002owner-only",
+        args: ExtensionIdArgs
+      },
+      "extension.publish:status": {
+        summary: "\u67E5\u67D0\u4E2A extension \u7684\u516C\u5F00\u72B6\u6001\u3002owner-only",
+        args: ExtensionIdArgs
+      },
+      "extension.list-published": {
+        summary: "\uFF08\u8DE8\u8BBE\u5907\uFF09\u4ECE\u5BF9\u7AEF owner \u62C9\u5B83\u516C\u5F00\u7684 extension \u6E05\u5355",
+        args: NO_ARGS
+      },
+      "extension.fetchBundle": {
+        summary: "\uFF08\u8DE8\u8BBE\u5907\uFF09\u4ECE\u5BF9\u7AEF owner \u4E0B\u8F7D extension bundle \u5B57\u8282\u3002extId \u5FC5\u4F20\u4F46\u4E0D\u53C2\u4E0E\u7D22\u5F15\u2014\u2014\u771F\u6B63\u7684\u952E\u662F snapshotHash\uFF08publish \u90A3\u523B\u51BB\u7ED3\u7684\u90A3\u4EFD\uFF0C\u4E0E owner \u5DE5\u4F5C\u76EE\u5F55\u540E\u7EED\u53D8\u5316\u89E3\u8026\uFF09",
+        args: ExtensionFetchBundleArgs
+      },
+      "extension.install-from-channel": {
+        summary: "\u5728\u81EA\u5DF1 daemon \u4E0A\u4ECE\u5206\u4EAB\u9891\u9053\u5B89\u88C5 extension",
+        args: ExtensionFromChannelArgs
+      },
+      "extension.update-from-channel": {
+        summary: "\u5728\u81EA\u5DF1 daemon \u4E0A\u628A\u5DF2\u88C5 extension \u66F4\u65B0\u5230\u9891\u9053\u6700\u65B0\u7248",
+        args: ExtensionFromChannelArgs
+      },
+      "auth:login:start": {
+        summary: "\u8D77\u98DE\u4E66\u767B\u5F55\u6D41\u7A0B\uFF1A\u751F\u6210 state \u5E76\u8FD4\u56DE\u6388\u6743 URL\uFF0C\u56DE\u8C03\u8D70 HTTP /auth/callback \u843D\u76D8\u3002owner-only",
+        args: NO_ARGS
+      },
+      "auth:getIdentity": {
+        summary: "\u53D6\u672C\u673A owner \u7684\u98DE\u4E66\u8EAB\u4EFD\uFF08ownerId / provider / displayName / unionId\uFF09+ **\u672C\u673A deviceId**\uFF08\u8BBE\u5907\u5C5E\u6027\uFF0C\u4E0E\u767B\u5F55\u6001\u65E0\u5173\uFF1Bdevice:connect / contact:* / inbox:* \u7684\u4E3B\u952E\u90FD\u662F\u5B83\uFF09\uFF1B\u7EDD\u4E0D\u8FD4\u56DE ttcToken",
+        args: NO_ARGS
+      },
+      "auth:logout": {
+        summary: "\u767B\u51FA\u98DE\u4E66\u8EAB\u4EFD\uFF08\u6E05 owner-identity \u843D\u76D8\uFF09\u3002owner-only",
+        args: NO_ARGS
+      },
+      "device:list": {
+        summary: "\u5217\u51FA\u516C\u5171\u8BBE\u5907\u76EE\u5F55\u91CC\u53EF\u8FDE\u63A5\u7684\u8BBE\u5907\uFF08daemon \u4EE3\u7406\u4E2D\u5FC3 server\uFF09\u3002owner-only",
+        args: NO_ARGS
+      },
+      "device:connect": {
+        summary: "\u8FDE\u63A5\u76EE\u6807\u8BBE\u5907\uFF1A\u6362 aud \u7ED1\u5B9A\u7684\u7B7E\u540D token \u5E76\u8D70 contact:handshake \u5EFA\u8054\u3002owner-only",
+        args: DeviceConnectArgsSchema
+      },
+      "appBuilder:listProjects": {
+        summary: "\u5217\u51FA app-builder project\uFF08\u542B dev server \u72B6\u6001\uFF09",
+        args: ListProjectsArgsSchema
+      },
+      "appBuilder:getProject": {
+        summary: "\u6309 sessionId \u53D6\u5355\u4E2A\u7ED1\u5B9A\u7684 project\uFF08\u542B status\uFF09",
+        args: GetProjectArgsSchema
+      },
+      "appBuilder:createProject": {
+        summary: "\u7ED9\u4F1A\u8BDD\u7ED1\u5B9A\u65B0 project\uFF1A\u6821\u9A8C\u540D + \u4ECE 6173-6182 \u6BB5\u5206\u914D\u7AEF\u53E3 + \u5EFA\u76EE\u5F55\u5199\u5143\u6570\u636E",
+        args: CreateProjectArgsSchema
+      },
+      "appBuilder:deleteProject": {
+        summary: "\u505C dev server + \u5220 project \u76EE\u5F55\uFF08\u7ED1\u5B9A\u7684\u4F1A\u8BDD\u4E0D\u5728\u8FD9\u91CC\u5220\uFF09",
+        args: DeleteProjectArgsSchema
+      },
+      "appBuilder:updateProjectPort": {
+        summary: "\u6539 dev server \u7AEF\u53E3\uFF08\u6821\u9A8C\u6BB5\u5185 + \u4E0D\u649E\u8F66\uFF09\u5E76\u91CD\u542F",
+        args: UpdateProjectPortArgsSchema
+      },
+      "appBuilder:setProdUrl": {
+        summary: "\u53D1\u5E03\u4E0A\u7EBF\u540E\u56DE\u586B\u7EBF\u4E0A\u5730\u5740\u5230 .clawd-project.json",
+        args: SetProdUrlArgsSchema
+      },
+      "appBuilder:startDevServer": {
+        summary: "scaffold + \u4F9D\u8D56\u5B89\u88C5\u5B8C\u6210\u540E\u663E\u5F0F\u62C9\u8D77 dev server\uFF08createProject \u4E0D\u518D\u81EA\u52A8\u8D77\uFF09",
+        args: StartDevServerArgsSchema
+      },
+      "appBuilder:reportStage": {
+        summary: "\u4E0A\u62A5\u811A\u624B\u67B6\u9636\u6BB5\uFF08scaffolding / installing / failed \u7B49\uFF09\uFF0Cdaemon \u5E7F\u64AD\u5E27\u8BA9 UI \u5207 PreviewPane",
+        args: ReportStageArgsSchema
+      },
+      "appBuilder:stopDevServer": {
+        summary: "\u6536\u8D77\u9884\u89C8\uFF1A\u505C\u6389 dev server\uFF08\u5BF9\u79F0 startDevServer\uFF09",
+        args: StopDevServerArgsSchema
+      },
+      "appBuilder:publish": {
+        summary: "\u53D1\u5E03\u4E0A\u7EBF\uFF1A\u4E32\u884C\u5316 spawn publish.sh \u5E76\u5E7F\u64AD\u9636\u6BB5\u8FDB\u5EA6\u5E27\uFF1B\u540C project \u5DF2\u6709 in-flight job \u65F6\u8FD4\u56DE already-publishing",
+        args: PublishArgsSchema
+      },
+      "appBuilder:dismissPublishJob": {
+        summary: "\u53D6\u6D88 in-flight publish\uFF08SIGTERM \u5B50\u8FDB\u7A0B\uFF09\u6216\u6E05\u6389 daemon \u5D29\u6E83\u7559\u4E0B\u7684\u6B8B\u9AB8 publishJob \u5B57\u6BB5",
+        args: DismissPublishJobArgsSchema
+      }
+    };
+    METHOD_NAMES = Object.keys(METHOD_DOCS);
+    RPC_METHOD_STATUSES = ["allowed", "conditional", "denied"];
+    RpcMethodStatusSchema = external_exports.enum(RPC_METHOD_STATUSES);
+    RpcMethodInfoSchema = external_exports.object({
+      /** canonical method 名，直接可作为 clawd-rpc call 的 method 参数 */
       name: external_exports.string().min(1),
-      /** ws/tunnel 地址 */
-      url: external_exports.string().min(1)
-    });
-    DeviceListResponseSchema = external_exports.object({
-      type: external_exports.literal("device:list:ok"),
-      devices: external_exports.array(DeviceEntrySchema)
-    });
-    DeviceConnectArgsSchema = external_exports.object({
-      /** 目标设备的 deviceId（对方 daemon 生成的 dev-<uuid>） */
-      deviceId: external_exports.string().min(1),
+      status: RpcMethodStatusSchema,
+      /** 该 method 干什么，取自 {@link METHOD_DOCS} 的 summary */
+      description: external_exports.string().min(1),
       /**
-       * 目标设备的 ws/tunnel 地址（可选）：
-       *   - 公开目录点击：带 url（device:list 已下发，省一次 server 查询）
-       *   - 凭 deviceId 连接：缺省 url → daemon exchange 时由中心 server 下发该设备上报的 url
-       *   - 注册表不在安全路径上：知道对方 url 时显式传入即可连接（不依赖中心 server 服务发现）
+       * 参数字段，从 {@link METHOD_DOCS} 的 args schema **反射**得来（不手写）。
+       * `null` = 该 method 还没有中央 zod schema（欠账，见 RpcMethodDoc），调用方需自行试探。
        */
-      url: external_exports.string().min(1).optional(),
-      /** 显示名（公共设备来自目录；缺省时连上后用 whoami 回填） */
-      name: external_exports.string().optional()
-    });
-    DeviceConnectResponseSchema = external_exports.object({
-      type: external_exports.literal("device:connect:ok"),
-      /** 连接的目标设备标识（= 请求 args.deviceId） */
-      deviceId: external_exports.string(),
-      name: external_exports.string(),
-      url: external_exports.string()
-    });
-    FeishuIdentitySchema = external_exports.object({
-      /** 归属人 id（决策 #16：TTC unique_id，取代飞书 union_id；跨登录方式稳定） */
-      ownerId: external_exports.string().min(1),
-      /** 身份来源：'ttc'（飞书/手机/邮箱登入 TTC）| 'google' | ...（决策 #16，拓展用） */
-      provider: external_exports.string().min(1),
-      /** 显示名。TTC user_info 接口 data.name */
-      displayName: external_exports.string().min(1),
-      /** TTC user_info 接口 data.avatar_url，可缺省 */
-      avatarUrl: external_exports.string().optional(),
-      /** TTC user_info 接口 data.union_id（飞书 union_id；dataclaw 可信入口 X-User-UnionId 用），可缺省 */
-      unionId: external_exports.string().optional()
-    });
-    AuthLoginStartResponseSchema = external_exports.object({
-      type: external_exports.literal("auth:login:start:ok"),
-      /** 完整 TTC 授权页 URL（含 callback_url + state + auto=1），UI 直接 window.open */
-      authUrl: external_exports.string().min(1),
-      /** 防 CSRF 的一次性 nonce；回调时 daemon 校验 */
-      state: external_exports.string().min(1)
-    });
-    AuthGetIdentityResponseSchema = external_exports.object({
-      type: external_exports.literal("auth:getIdentity:ok"),
-      /** null = 未登录 */
-      identity: FeishuIdentitySchema.nullable(),
+      args: external_exports.array(external_exports.object({ name: external_exports.string(), required: external_exports.boolean() })).nullable(),
       /**
-       * 本机设备标识（决策 #15：daemon 生成并持久化在 auth.json，如 dev-<uuid>）。
-       * 设备属性，与登录态无关、登录登出不变。UI"我的设备标识"用它拼
-       * clawos://device/<deviceId>（替代旧的 unionId——不再向外暴露人的身份标识）。
+       * `denied` 必带：daemon error code（`UNAUTHORIZED` / `FEISHU_LOGIN_REQUIRED` /
+       * `METHOD_NOT_IMPLEMENTED`）。`conditional` 必带：谁来做二次校验。
+       * `allowed` 恒无。
        */
-      deviceId: external_exports.string().min(1)
-    });
-    AuthLogoutResponseSchema = external_exports.object({
-      type: external_exports.literal("auth:logout:ok")
-    });
-    AuthLoginDoneEventSchema = external_exports.object({
-      type: external_exports.literal("auth:login:done"),
-      identity: FeishuIdentitySchema
+      reason: external_exports.string().optional()
     });
-    AuthLoginFailedEventSchema = external_exports.object({
-      type: external_exports.literal("auth:login:failed"),
-      reason: external_exports.string()
+    MetaMethodsResultSchema = external_exports.object({
+      type: external_exports.literal("meta:methods"),
+      /** METHOD_NAMES 全集，顺序与之一致 */
+      methods: external_exports.array(RpcMethodInfoSchema)
     });
   }
 });
 
-// ../protocol/src/dispatch.ts
-var DispatchOutcomeSchema, DispatchRunArgsSchema, DispatchCompleteArgsSchema, DISPATCH_STATUSES, DispatchStatusSchema, DispatchRecordSchema, DispatchListArgsSchema, DispatchListResultSchema, DispatchGetArgsSchema, DispatchGetOkSchema;
-var init_dispatch = __esm({
-  "../protocol/src/dispatch.ts"() {
+// ../protocol/src/errors.ts
+var ERROR_CODES, ClawdError;
+var init_errors2 = __esm({
+  "../protocol/src/errors.ts"() {
+    "use strict";
+    ERROR_CODES = {
+      SESSION_NOT_FOUND: "SESSION_NOT_FOUND",
+      SESSION_BUSY: "SESSION_BUSY",
+      INVALID_CWD: "INVALID_CWD",
+      INVALID_PATH: "INVALID_PATH",
+      TOOL_NOT_SUPPORTED: "TOOL_NOT_SUPPORTED",
+      CLAUDE_NOT_FOUND: "CLAUDE_NOT_FOUND",
+      SPAWN_FAILED: "SPAWN_FAILED",
+      INVALID_PERMISSION_MODE: "INVALID_PERMISSION_MODE",
+      METHOD_NOT_IMPLEMENTED: "METHOD_NOT_IMPLEMENTED",
+      METHOD_NOT_ALLOWED: "METHOD_NOT_ALLOWED",
+      VALIDATION_ERROR: "VALIDATION_ERROR",
+      PERMISSION_REQUEST_STALE: "PERMISSION_REQUEST_STALE",
+      FILE_TOO_LARGE: "FILE_TOO_LARGE",
+      INTERNAL: "INTERNAL",
+      UNAUTHORIZED: "UNAUTHORIZED",
+      FORBIDDEN: "FORBIDDEN",
+      INVALID_PARAM: "INVALID_PARAM",
+      // 飞书统一身份（spec 2026-06-01 决策 #9）：People/远程体系强制飞书登录。
+      // daemon 进程身份未激活为飞书 unionId 时，FEISHU_GATED_METHODS 内的 RPC 一律返回此错误；
+      // UI 据此显示登录引导（区别于 UNAUTHORIZED 的越权语义）。
+      FEISHU_LOGIN_REQUIRED: "FEISHU_LOGIN_REQUIRED",
+      // app-builder 单栏默认 refactor (spec 2026-06-02-app-builder-single-pane-default-design)：
+      // appBuilder:createProject 加 personaId + session 未绑校验后抛的两个错码。
+      WRONG_PERSONA: "WRONG_PERSONA",
+      SESSION_ALREADY_BOUND: "SESSION_ALREADY_BOUND",
+      // 2026-07-02 unified people sidebar: contact:pin 时 deviceId 不在 store（可能被别处删了）
+      CONTACT_NOT_FOUND: "CONTACT_NOT_FOUND",
+      // 统一 RPC 鉴权（spec 2026-07-28）：personaDispatch:get 查不到台账行，或 guest ctx
+      // 查非自己发起的行（越权与未知 id 同码，不泄露存在性）。A 端轮询遇此码立即判失败。
+      DISPATCH_NOT_FOUND: "DISPATCH_NOT_FOUND"
+    };
+    ClawdError = class extends Error {
+      constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "ClawdError";
+      }
+      code;
+    };
+  }
+});
+
+// ../protocol/src/frames.ts
+var PROTOCOL_VERSION, DISPATCH_MCP_ID;
+var init_frames = __esm({
+  "../protocol/src/frames.ts"() {
+    "use strict";
+    PROTOCOL_VERSION = 1;
+    DISPATCH_MCP_ID = "dispatch";
+  }
+});
+
+// ../protocol/src/persona-mode.ts
+var init_persona_mode = __esm({
+  "../protocol/src/persona-mode.ts"() {
     "use strict";
-    init_zod();
-    DispatchOutcomeSchema = external_exports.discriminatedUnion("kind", [
-      external_exports.object({
-        kind: external_exports.literal("success"),
-        text: external_exports.string(),
-        filePaths: external_exports.array(external_exports.string()).optional()
-      }),
-      external_exports.object({
-        kind: external_exports.literal("failure"),
-        reason: external_exports.string()
-      })
-    ]);
-    DispatchRunArgsSchema = external_exports.object({
-      // 新开必填；续派（dispatchId 非空）时可省略——targetPersonaId 从台账行取。
-      targetPersona: external_exports.string().min(1).optional(),
-      // 续派（spec 2026-07-21，单 dispatchId 语义：一件事一行一 id）：非空 = 把 prompt
-      // 作为新 turn 打进该 dispatch 的原 worker session 接着干（台账行复位 running）。
-      // 省略 = 新开一件事，daemon 铸新 id。
-      dispatchId: external_exports.string().min(1).optional(),
-      prompt: external_exports.string(),
-      // 跨设备 dispatch：非空 = A 角色，转发到该 contact deviceId 的 peer daemon；
-      // 省略 = 本地 dispatch / B 角色本地执行。A 转发给 B 时 body 不带此字段。
-      targetDeviceId: external_exports.string().min(1).optional(),
-      // 可选：override B session 使用的 claude 模型。缺省 = 用 persona 默认。
-      // 合法值集与 claude adapter capabilities.models[].id 一致（见 daemon
-      // tools/claude.ts CLAUDE_MODEL_IDS）；handler 层做二次校验，非法值 fail-fast。
-      // protocol 层保持 string 便于未来跨 tool 扩展（届时 union 收合法字面量）。
-      model: external_exports.string().min(1).optional(),
-      // 可选：给新 worker session 起 label（写入 SessionFile.label，sidebar 显示）。
-      // 仅在**新开 dispatch**（dispatchId 缺席）时生效；续派（dispatchId 非空）
-      // 时 daemon 层静默丢弃（避免半途改 label 造成 sidebar 抖动）。
-      // 上限 60 字符——sidebar 显示 tolerance，卡在 dispatch 入口即可。
-      // 协议层不硬拒 sessionLabel + dispatchId 同传，保留 forward-compat。
-      sessionLabel: external_exports.string().min(1).max(60).optional()
-    }).refine((v2) => v2.targetPersona !== void 0 || v2.dispatchId !== void 0, {
-      message: "either targetPersona (new dispatch) or dispatchId (follow-up) is required"
-    }).refine((v2) => !(v2.dispatchId !== void 0 && v2.targetDeviceId !== void 0), {
-      message: "cross-device dispatch cannot be continued (dispatchId + targetDeviceId are mutually exclusive)"
-    });
-    DispatchCompleteArgsSchema = external_exports.object({
-      dispatchId: external_exports.string().min(1),
-      outcome: DispatchOutcomeSchema
-    });
-    DISPATCH_STATUSES = ["running", "completed", "failed"];
-    DispatchStatusSchema = external_exports.enum(DISPATCH_STATUSES);
-    DispatchRecordSchema = external_exports.object({
-      dispatchId: external_exports.string().min(1),
-      sourceSessionId: external_exports.string().min(1),
-      sourcePersonaId: external_exports.string().min(1).optional(),
-      targetPersonaId: external_exports.string().min(1),
-      /** B 的 sessionId；registerBSession 后回填 */
-      workerSessionId: external_exports.string().min(1).optional(),
-      /** 任务摘要；截断（≤500 字符）在 daemon store.add 处保证 */
-      taskText: external_exports.string(),
-      status: DispatchStatusSchema,
-      outcome: DispatchOutcomeSchema.optional(),
-      /** 上层消费者语义（如司礼监的口谕/验收状态），daemon 不解释 */
-      meta: external_exports.record(external_exports.unknown()).optional(),
-      createdAt: external_exports.string().min(1),
-      completedAt: external_exports.string().min(1).optional(),
-      /** 结果注入 source session 成功时戳，兼当投递 dedup 标记 */
-      deliveredAt: external_exports.string().min(1).optional()
-    });
-    DispatchListArgsSchema = external_exports.object({
-      sourceSessionId: external_exports.string().min(1).optional()
-    });
-    DispatchListResultSchema = external_exports.object({
-      records: external_exports.array(DispatchRecordSchema)
-    });
-    DispatchGetArgsSchema = external_exports.object({
-      dispatchId: external_exports.string().min(1)
-    });
-    DispatchGetOkSchema = external_exports.object({
-      type: external_exports.literal("personaDispatch:get:ok"),
-      status: DispatchStatusSchema,
-      outcome: DispatchOutcomeSchema.optional()
-    });
   }
 });
 
@@ -6413,6 +6721,7 @@ var init_runtime = __esm({
     init_dispatch();
     init_log();
     init_visitor_schemas();
+    init_shift_internal();
   }
 });
 
@@ -41624,21 +41933,21 @@ var SessionStoreFactory = class {
   bareRoot() {
     return path5.join(this.dataDir, "sessions");
   }
-  vmOwnerRoot(personaId) {
+  vmOwnerRoot(personaId2) {
     return path5.join(
       this.dataDir,
       "personas",
-      safeFileName(personaId),
+      safeFileName(personaId2),
       ".clawd",
       "sessions",
       "owner"
     );
   }
-  vmGuestRoot(personaId, capId) {
+  vmGuestRoot(personaId2, capId) {
     return path5.join(
       this.dataDir,
       "personas",
-      safeFileName(personaId),
+      safeFileName(personaId2),
       ".clawd",
       "sessions",
       "guests",
@@ -41652,19 +41961,19 @@ var SessionStoreFactory = class {
     }
     return this.bareStore;
   }
-  forVmOwner(personaId) {
-    const key = personaId;
+  forVmOwner(personaId2) {
+    const key = personaId2;
     const cached = this.vmOwnerStores.get(key);
     if (cached) return cached;
-    const st = new SessionStore({ root: this.vmOwnerRoot(personaId) });
+    const st = new SessionStore({ root: this.vmOwnerRoot(personaId2) });
     this.vmOwnerStores.set(key, st);
     return st;
   }
-  forVmGuest(personaId, capId) {
-    const key = `${personaId}::${capId}`;
+  forVmGuest(personaId2, capId) {
+    const key = `${personaId2}::${capId}`;
     const cached = this.vmGuestStores.get(key);
     if (cached) return cached;
-    const st = new SessionStore({ root: this.vmGuestRoot(personaId, capId) });
+    const st = new SessionStore({ root: this.vmGuestRoot(personaId2, capId) });
     this.vmGuestStores.set(key, st);
     return st;
   }
@@ -41712,7 +42021,7 @@ function buildGuestSettingsV1() {
         denyWrite: [],
         // **不放 '~/'**（写是白名单制，home 自动不可写）；persona(cwd) 由 compose 强制 deny
         allowRead: [],
-        // 不放 cwd(persona)；userWorkDir 由 compose 注入，profile 加工具链精确路径
+        // userWorkDir + persona cwd 由 compose 强制注入，profile 加工具链精确路径
         allowWrite: []
       }
     }
@@ -41750,7 +42059,7 @@ function composeGuestSandbox(base, userWorkDir, spawnCwd) {
   s.sandbox.allowUnsandboxedCommands = false;
   fsv.denyRead = unionArr(fsv.denyRead, FORCED_DENY_READ);
   fsv.denyWrite = unionArr((fsv.denyWrite ?? []).filter((p2) => p2 !== "~/"), [spawnCwd]);
-  fsv.allowRead = unionArr(fsv.allowRead, [userWorkDir]);
+  fsv.allowRead = unionArr(fsv.allowRead, [userWorkDir, spawnCwd]);
   fsv.allowWrite = unionArr(fsv.allowWrite, [userWorkDir]);
   return s;
 }
@@ -42146,8 +42455,8 @@ function buildSpawnContext(state, deps) {
   if (clawosApi) env.CLAWOS_API = clawosApi;
   const dispatchId = deps.lookupDispatchByBSessionId?.(file.sessionId);
   if (dispatchId) env.CLAWD_DISPATCH_ID = dispatchId;
-  const personaId = file.ownerPersonaId;
-  if (personaId) env.CLAWD_PERSONA_ID = personaId;
+  const personaId2 = file.ownerPersonaId;
+  if (personaId2) env.CLAWD_PERSONA_ID = personaId2;
   const mcpConfigs = deps.getMcpConfigs?.() ?? [];
   const ctx = {
     cwd: file.cwd,
@@ -42162,7 +42471,7 @@ function buildSpawnContext(state, deps) {
     ...mcpConfigs.length > 0 ? { mcpConfigs } : {},
     // shift v1：把 SessionFile.ownerPersonaId 透传到 SpawnContext；buildSpawnArgs 等下游
     // 不直接读这个字段（只读 env），但保留显式字段方便 daemon 内部诊断/日志。
-    personaId
+    personaId: personaId2
   };
   const meta = state.subSessionMeta;
   if (meta?.personaMode) {
@@ -43456,14 +43765,14 @@ When done, call the \`personaDispatchComplete\` tool from the \`clawd-dispatch\`
 dispatchId for this task: ${args.dispatchId}`;
 }
 function derivePersonaSpawnCwd(file, personaRoot) {
-  const personaId = file.ownerPersonaId;
-  if (!personaId) return file.cwd;
+  const personaId2 = file.ownerPersonaId;
+  if (!personaId2) return file.cwd;
   if (!personaRoot) {
     throw new Error(
-      `derivePersonaSpawnCwd: personaRoot missing for owner session ${file.sessionId} (ownerPersonaId=${personaId})`
+      `derivePersonaSpawnCwd: personaRoot missing for owner session ${file.sessionId} (ownerPersonaId=${personaId2})`
     );
   }
-  return import_node_path9.default.join(personaRoot, safeFileName(personaId));
+  return import_node_path9.default.join(personaRoot, safeFileName(personaId2));
 }
 function makeInitialState(file, subSessionMeta) {
   return {
@@ -43613,12 +43922,12 @@ var SessionManager = class {
   // 扫某 persona 下 guests/ 子目录, 拿所有 capId.
   // 路径: <dataDir>/personas/<pid>/.clawd/sessions/guests/<capId>/
   // 只在 storeFactory 注入 (新布局) 下生效, 老布局无 guest 目录.
-  listGuestCapIdsForPersona(personaId) {
+  listGuestCapIdsForPersona(personaId2) {
     if (!this.deps.dataDir || !this.deps.storeFactory) return [];
     const root = import_node_path9.default.join(
       this.deps.dataDir,
       "personas",
-      personaId,
+      personaId2,
       ".clawd",
       "sessions",
       "guests"
@@ -43650,12 +43959,12 @@ var SessionManager = class {
     if (runner) return runner.getState().file;
     const dflt = this.deps.store.read(sessionId);
     if (dflt) return dflt;
-    for (const personaId of this.listPersonaIdsOnDisk()) {
-      const ownerStore = this.storeFor({ kind: "persona", personaId, mode: "owner" });
+    for (const personaId2 of this.listPersonaIdsOnDisk()) {
+      const ownerStore = this.storeFor({ kind: "persona", personaId: personaId2, mode: "owner" });
       const found = ownerStore.read(sessionId);
       if (found) return found;
-      for (const capId of this.listGuestCapIdsForPersona(personaId)) {
-        const guestStore = this.storeFor({ kind: "persona", personaId, mode: "guest", capId });
+      for (const capId of this.listGuestCapIdsForPersona(personaId2)) {
+        const guestStore = this.storeFor({ kind: "persona", personaId: personaId2, mode: "guest", capId });
         const g2 = guestStore.read(sessionId);
         if (g2) return g2;
       }
@@ -43684,11 +43993,11 @@ var SessionManager = class {
   listAllOwned() {
     const out = [];
     out.push(...this.deps.store.list());
-    for (const personaId of this.listPersonaIdsOnDisk()) {
-      const ownerStore = this.storeFor({ kind: "persona", personaId, mode: "owner" });
+    for (const personaId2 of this.listPersonaIdsOnDisk()) {
+      const ownerStore = this.storeFor({ kind: "persona", personaId: personaId2, mode: "owner" });
       out.push(...ownerStore.list());
-      for (const capId of this.listGuestCapIdsForPersona(personaId)) {
-        const guestStore = this.storeFor({ kind: "persona", personaId, mode: "guest", capId });
+      for (const capId of this.listGuestCapIdsForPersona(personaId2)) {
+        const guestStore = this.storeFor({ kind: "persona", personaId: personaId2, mode: "guest", capId });
         out.push(...guestStore.list());
       }
     }
@@ -43716,11 +44025,11 @@ var SessionManager = class {
   // 删除 owned SessionFile（default / persona owner / persona guest），与 findOwnedSession 对称扫盘.
   deleteOwned(sessionId) {
     if (this.deps.store.delete(sessionId)) return true;
-    for (const personaId of this.listPersonaIdsOnDisk()) {
-      const ownerStore = this.storeFor({ kind: "persona", personaId, mode: "owner" });
+    for (const personaId2 of this.listPersonaIdsOnDisk()) {
+      const ownerStore = this.storeFor({ kind: "persona", personaId: personaId2, mode: "owner" });
       if (ownerStore.delete(sessionId)) return true;
-      for (const capId of this.listGuestCapIdsForPersona(personaId)) {
-        const guestStore = this.storeFor({ kind: "persona", personaId, mode: "guest", capId });
+      for (const capId of this.listGuestCapIdsForPersona(personaId2)) {
+        const guestStore = this.storeFor({ kind: "persona", personaId: personaId2, mode: "guest", capId });
         if (guestStore.delete(sessionId)) return true;
       }
     }
@@ -45418,19 +45727,19 @@ var PersonaStore = class {
     fs10.mkdirSync(root, { recursive: true });
   }
   root;
-  personaDir(personaId) {
-    return path12.join(this.root, safeFileName(personaId));
+  personaDir(personaId2) {
+    return path12.join(this.root, safeFileName(personaId2));
   }
-  metaPath(personaId) {
-    return path12.join(this.personaDir(personaId), ".clawd", "persona.json");
+  metaPath(personaId2) {
+    return path12.join(this.personaDir(personaId2), ".clawd", "persona.json");
   }
-  claudeMdPath(personaId) {
-    return path12.join(this.personaDir(personaId), "CLAUDE.md");
+  claudeMdPath(personaId2) {
+    return path12.join(this.personaDir(personaId2), "CLAUDE.md");
   }
   // codex 原生读 cwd 的 AGENTS.md。人格双写镜像：claude 读 CLAUDE.md、codex 读 AGENTS.md，
   // 两份内容恒一致，persona 切 tool 零迁移。
-  agentsMdPath(personaId) {
-    return path12.join(this.personaDir(personaId), "AGENTS.md");
+  agentsMdPath(personaId2) {
+    return path12.join(this.personaDir(personaId2), "AGENTS.md");
   }
   /**
    * persona 级 sandbox base 落盘路径 —— 故意放 `.clawd/` 而非 `.claude/`，让 CC 的 project
@@ -45438,8 +45747,8 @@ var PersonaStore = class {
    * 这份是 guest 沙箱的 **base 真源**（manager compose 读它当 base）；guest 实际加载的是 manager
    * spawn 前 per-guest 动态拼到各自 session 目录的那份（base + 强制底座 + 本 guest userWorkDir carve）。
    */
-  sandboxSettingsPath(personaId) {
-    return path12.join(this.personaDir(personaId), ".clawd", "sandbox-settings.json");
+  sandboxSettingsPath(personaId2) {
+    return path12.join(this.personaDir(personaId2), ".clawd", "sandbox-settings.json");
   }
   write(persona, personality) {
     const dir = this.personaDir(persona.personaId);
@@ -45449,9 +45758,9 @@ var PersonaStore = class {
     this.writeSandboxSettings(persona.personaId, buildGuestSettingsV1());
     this.atomicWrite(this.metaPath(persona.personaId), JSON.stringify(persona, null, 2));
   }
-  writePersonality(personaId, personality) {
-    this.atomicWrite(this.claudeMdPath(personaId), personality);
-    this.atomicWrite(this.agentsMdPath(personaId), personality);
+  writePersonality(personaId2, personality) {
+    this.atomicWrite(this.claudeMdPath(personaId2), personality);
+    this.atomicWrite(this.agentsMdPath(personaId2), personality);
   }
   /**
    * 历史 persona 补 AGENTS.md：人格双写镜像是 codex 适配后才加的，更早落盘的 persona 只有
@@ -45459,9 +45768,9 @@ var PersonaStore = class {
    * migrate（见 seed.migrateAgentsMirror）。幂等：已有 AGENTS.md（含用户手改的）不覆盖；
    * 无 CLAUDE.md 不凭空造。返回是否实际补写。
    */
-  ensureAgentsMirror(personaId) {
-    const claudeMd = this.claudeMdPath(personaId);
-    const agentsMd = this.agentsMdPath(personaId);
+  ensureAgentsMirror(personaId2) {
+    const claudeMd = this.claudeMdPath(personaId2);
+    const agentsMd = this.agentsMdPath(personaId2);
     if (!fs10.existsSync(claudeMd)) return false;
     if (fs10.existsSync(agentsMd)) return false;
     this.atomicWrite(agentsMd, fs10.readFileSync(claudeMd, "utf8"));
@@ -45474,25 +45783,25 @@ var PersonaStore = class {
    * 写入时强制注入本 persona 的 Edit-deny（'~/<persona>/**' 按实际 persona dir 算）+ 剥掉历史相对 'Edit(./**)'，
    * 让落盘 base 就是 source of truth（compose 不再运行时替换 permission deny）。
    */
-  writeSandboxSettings(personaId, settings) {
+  writeSandboxSettings(personaId2, settings) {
     this.atomicWrite(
-      this.sandboxSettingsPath(personaId),
-      JSON.stringify(this.injectPersonaEditDeny(personaId, settings), null, 2)
+      this.sandboxSettingsPath(personaId2),
+      JSON.stringify(this.injectPersonaEditDeny(personaId2, settings), null, 2)
     );
   }
   /** 把 persona Edit-deny（绝对 '~/<persona>/**'）并进 settings.permissions.deny，剥掉历史相对 'Edit(./**)'。 */
-  injectPersonaEditDeny(personaId, settings) {
+  injectPersonaEditDeny(personaId2, settings) {
     const s = settings;
-    const rule = personaEditDeny(this.personaDir(personaId));
+    const rule = personaEditDeny(this.personaDir(personaId2));
     const prev = (s.permissions?.deny ?? []).filter((r) => r !== "Edit(./**)" && r !== rule);
     return { ...s, permissions: { ...s.permissions ?? {}, deny: [...prev, rule] } };
   }
-  codexSandboxSettingsPath(personaId) {
-    return path12.join(this.personaDir(personaId), ".clawd", "codex-sandbox.json");
+  codexSandboxSettingsPath(personaId2) {
+    return path12.join(this.personaDir(personaId2), ".clawd", "codex-sandbox.json");
   }
   /** 读 codex-sandbox.json；不存在/损坏 → null。 */
-  readCodexSandboxSettings(personaId) {
-    const p2 = this.codexSandboxSettingsPath(personaId);
+  readCodexSandboxSettings(personaId2) {
+    const p2 = this.codexSandboxSettingsPath(personaId2);
     if (!fs10.existsSync(p2)) return null;
     try {
       return CodexSandboxSettingsSchema.parse(JSON.parse(fs10.readFileSync(p2, "utf8")));
@@ -45501,16 +45810,16 @@ var PersonaStore = class {
     }
   }
   /** 覆盖写 codex-sandbox.json（seed/migrate 用）。 */
-  writeCodexSandboxSettings(personaId, settings) {
-    const dir = path12.join(this.personaDir(personaId), ".clawd");
+  writeCodexSandboxSettings(personaId2, settings) {
+    const dir = path12.join(this.personaDir(personaId2), ".clawd");
     fs10.mkdirSync(dir, { recursive: true });
-    this.atomicWrite(this.codexSandboxSettingsPath(personaId), JSON.stringify(settings, null, 2));
+    this.atomicWrite(this.codexSandboxSettingsPath(personaId2), JSON.stringify(settings, null, 2));
   }
   writeMeta(persona) {
     this.atomicWrite(this.metaPath(persona.personaId), JSON.stringify(persona, null, 2));
   }
-  read(personaId) {
-    const p2 = this.metaPath(personaId);
+  read(personaId2) {
+    const p2 = this.metaPath(personaId2);
     if (!fs10.existsSync(p2)) return null;
     const raw = JSON.parse(fs10.readFileSync(p2, "utf8"));
     if (raw && typeof raw === "object" && "tokenMap" in raw) {
@@ -45519,13 +45828,13 @@ var PersonaStore = class {
     }
     return PersonaFileSchema.parse(raw);
   }
-  has(personaId) {
-    return fs10.existsSync(this.metaPath(personaId));
+  has(personaId2) {
+    return fs10.existsSync(this.metaPath(personaId2));
   }
-  readPersonality(personaId) {
-    const claudeMd = this.claudeMdPath(personaId);
+  readPersonality(personaId2) {
+    const claudeMd = this.claudeMdPath(personaId2);
     if (fs10.existsSync(claudeMd)) return fs10.readFileSync(claudeMd, "utf8");
-    const agentsMd = this.agentsMdPath(personaId);
+    const agentsMd = this.agentsMdPath(personaId2);
     if (fs10.existsSync(agentsMd)) return fs10.readFileSync(agentsMd, "utf8");
     return null;
   }
@@ -45533,8 +45842,8 @@ var PersonaStore = class {
    * 读 sandbox-settings.json 当前内容；文件不存在 / JSON 解析失败均返回 null。
    * owner 手改文件可能写出非法形状，daemon 不强校验，UI 拿到 null → 显示空状态。
    */
-  readSandboxSettings(personaId) {
-    const p2 = this.sandboxSettingsPath(personaId);
+  readSandboxSettings(personaId2) {
+    const p2 = this.sandboxSettingsPath(personaId2);
     if (!fs10.existsSync(p2)) return null;
     try {
       return JSON.parse(fs10.readFileSync(p2, "utf8"));
@@ -45543,15 +45852,15 @@ var PersonaStore = class {
     }
   }
   /** Persona 私有 skills 目录路径：<personaDir>/.claude/skills */
-  skillsDir(personaId) {
-    return path12.join(this.personaDir(personaId), ".claude", "skills");
+  skillsDir(personaId2) {
+    return path12.join(this.personaDir(personaId2), ".claude", "skills");
   }
   /**
    * Claude Code 项目级 settings 路径：`<personaDir>/.claude/settings.json`。
    * 这里只读 `enabledPlugins` 字段，由 owner 通过 CC `/plugin` 之类命令维护，daemon 不写。
    */
-  claudeSettingsPath(personaId) {
-    return path12.join(this.personaDir(personaId), ".claude", "settings.json");
+  claudeSettingsPath(personaId2) {
+    return path12.join(this.personaDir(personaId2), ".claude", "settings.json");
   }
   /**
    * 读取 persona 的 `.claude/settings.json` 中 `enabledPlugins` map，把 value === true
@@ -45564,8 +45873,8 @@ var PersonaStore = class {
    *   - 单 value 非 boolean → 跳过该 entry
    * 其他错误（fs 权限等）原样抛出，由上层 handler 转 ws error 帧。
    */
-  readEnabledPlugins(personaId) {
-    const p2 = this.claudeSettingsPath(personaId);
+  readEnabledPlugins(personaId2) {
+    const p2 = this.claudeSettingsPath(personaId2);
     if (!fs10.existsSync(p2)) return [];
     let raw;
     try {
@@ -45588,12 +45897,12 @@ var PersonaStore = class {
       return fs10.existsSync(path12.join(this.root, name, ".clawd", "persona.json"));
     });
   }
-  remove(personaId) {
-    const dir = this.personaDir(personaId);
+  remove(personaId2) {
+    const dir = this.personaDir(personaId2);
     if (fs10.existsSync(dir)) fs10.rmSync(dir, { recursive: true, force: true });
   }
-  personaDirPath(personaId) {
-    return this.personaDir(personaId);
+  personaDirPath(personaId2) {
+    return this.personaDir(personaId2);
   }
   atomicWrite(file, content) {
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
@@ -45625,15 +45934,15 @@ var PersonaRegistry = class {
       }
     }
   }
-  get(personaId) {
-    return this.cache.get(personaId);
+  get(personaId2) {
+    return this.cache.get(personaId2);
   }
   /** PersonaManager 写盘后同步 cache；不主动写盘 */
   set(file) {
     this.cache.set(file.personaId, file);
   }
-  remove(personaId) {
-    this.cache.delete(personaId);
+  remove(personaId2) {
+    this.cache.delete(personaId2);
   }
   list() {
     return Array.from(this.cache.values());
@@ -45923,10 +46232,10 @@ var PersonaManager = class {
   }
   deps;
   create(args) {
-    const personaId = this.generatePersonaId(args.label);
+    const personaId2 = this.generatePersonaId(args.label);
     const now = Date.now();
     const persona = {
-      personaId,
+      personaId: personaId2,
       label: args.label,
       model: args.model,
       tool: args.tool,
@@ -45939,9 +46248,9 @@ var PersonaManager = class {
     this.deps.registry.set(persona);
     return persona;
   }
-  update(personaId, patch, personality) {
-    const existing = this.deps.registry.get(personaId);
-    if (!existing) throw new Error(`persona not found: ${personaId}`);
+  update(personaId2, patch, personality) {
+    const existing = this.deps.registry.get(personaId2);
+    if (!existing) throw new Error(`persona not found: ${personaId2}`);
     const { iconKey: iconKeyPatch, ...restPatch } = patch;
     const updated = {
       ...existing,
@@ -45954,30 +46263,30 @@ var PersonaManager = class {
       updated.iconKey = iconKeyPatch;
     }
     if (personality !== void 0) {
-      this.deps.store.writePersonality(personaId, personality);
+      this.deps.store.writePersonality(personaId2, personality);
     }
     this.deps.store.writeMeta(updated);
     this.deps.registry.set(updated);
     return updated;
   }
   /** 读取 CLAUDE.md 内容；persona 目录或文件不存在时返回 null。透传给 handler 拼响应。 */
-  readPersonality(personaId) {
-    return this.deps.store.readPersonality(personaId);
+  readPersonality(personaId2) {
+    return this.deps.store.readPersonality(personaId2);
   }
   /** 扫 persona 私有 skills 目录；目录不存在返回空数组。供 persona:get handler 拼响应。 */
-  listSkills(personaId) {
-    return listSkillsForDir(this.deps.store.skillsDir(personaId), "project");
+  listSkills(personaId2) {
+    return listSkillsForDir(this.deps.store.skillsDir(personaId2), "project");
   }
   /**
    * 读取 persona `.claude/settings.json` 中已启用的插件列表（value === true 的 key）。
    * 文件不存在 / 解析失败 / 字段缺失 → 空数组。供 persona:get handler 拼响应。
    */
-  listEnabledPlugins(personaId) {
-    return this.deps.store.readEnabledPlugins(personaId);
+  listEnabledPlugins(personaId2) {
+    return this.deps.store.readEnabledPlugins(personaId2);
   }
   /** 读 sandbox-settings.json；不存在 / 损坏返回 null。供 persona:get handler 拼响应。 */
-  readSandboxSettings(personaId) {
-    return this.deps.store.readSandboxSettings(personaId);
+  readSandboxSettings(personaId2) {
+    return this.deps.store.readSandboxSettings(personaId2);
   }
   /**
    * 删除 persona。
@@ -45985,9 +46294,9 @@ var PersonaManager = class {
    * （含 .clawd/sessions/owner/ 和 .clawd/sessions/guests/<capId>/），rmSync
    * recursive force 一锅清。
    */
-  delete(personaId) {
-    this.deps.store.remove(personaId);
-    this.deps.registry.remove(personaId);
+  delete(personaId2) {
+    this.deps.store.remove(personaId2);
+    this.deps.registry.remove(personaId2);
   }
   /**
    * label 转 4-16 char slug。优先用 `persona-<slug>`；若 slug 已被占用，追加 4 char
@@ -46317,15 +46626,15 @@ function refreshSandboxSettings(args) {
 }
 function migrateAgentsMirror(args) {
   let mirrored = 0;
-  for (const personaId of args.store.list()) {
+  for (const personaId2 of args.store.list()) {
     try {
-      if (args.store.ensureAgentsMirror(personaId)) {
+      if (args.store.ensureAgentsMirror(personaId2)) {
         mirrored++;
-        args.logger.info("persona.agents-mirror.synced", { personaId });
+        args.logger.info("persona.agents-mirror.synced", { personaId: personaId2 });
       }
     } catch (err) {
       args.logger.warn("persona.agents-mirror.failed", {
-        personaId,
+        personaId: personaId2,
         error: err instanceof Error ? err.message : String(err)
       });
     }
@@ -46335,15 +46644,15 @@ function migrateAgentsMirror(args) {
 function migrateCodexSandbox(args) {
   const entries = args.entries ?? DEFAULT_PERSONAS;
   let n = 0;
-  for (const personaId of args.store.list()) {
-    if (args.store.readCodexSandboxSettings(personaId)) continue;
+  for (const personaId2 of args.store.list()) {
+    if (args.store.readCodexSandboxSettings(personaId2)) continue;
     try {
-      const def = entries.find((e) => e.personaId === personaId)?.codexSandbox ?? { writableRoots: [], denyRead: [], network: false };
-      args.store.writeCodexSandboxSettings(personaId, def);
+      const def = entries.find((e) => e.personaId === personaId2)?.codexSandbox ?? { writableRoots: [], denyRead: [], network: false };
+      args.store.writeCodexSandboxSettings(personaId2, def);
       n++;
-      args.logger.info("persona.codex-sandbox.synced", { personaId });
+      args.logger.info("persona.codex-sandbox.synced", { personaId: personaId2 });
     } catch (err) {
-      args.logger.warn("persona.codex-sandbox.failed", { personaId, error: err instanceof Error ? err.message : String(err) });
+      args.logger.warn("persona.codex-sandbox.failed", { personaId: personaId2, error: err instanceof Error ? err.message : String(err) });
     }
   }
   if (n > 0) args.logger.info("persona.codex-sandbox.done", { migrated: n });
@@ -49193,16 +49502,17 @@ function createShiftSpawnFn(deps) {
   };
 }
 
-// src/handlers/shift-internal.ts
-function readPersonaId(frame) {
-  const raw = frame.personaId;
-  if (typeof raw !== "string" || raw.trim() === "") {
-    throw new Error(
-      "shift-internal: missing personaId (mcp-server should set CLAWD_PERSONA_ID env)"
-    );
-  }
-  return raw;
+// src/handlers/types.ts
+init_protocol();
+function parseArgs2(schema, frame, what, code = ERROR_CODES.VALIDATION_ERROR) {
+  const effective = typeof schema.strip === "function" ? schema.strip() : schema;
+  const r = effective.safeParse(frame);
+  if (!r.success) throw new ClawdError(code, `${what}: ${r.error.message}`);
+  return r.data;
 }
+
+// src/handlers/shift-internal.ts
+init_protocol();
 function validateSchedule(schedule) {
   const next = computeNextRunAtMs(schedule, Date.now());
   if (next === null) {
@@ -49213,10 +49523,9 @@ function validateSchedule(schedule) {
 }
 function buildShiftInternalHandlers(deps) {
   const add = async (frame) => {
-    const persona = readPersonaId(frame);
     const callerSessionId = typeof frame.sessionId === "string" ? frame.sessionId : void 0;
-    const { type: _t, requestId: _r, personaId: _p, sessionId: _s, ...rest } = frame;
-    const args = rest;
+    const args = parseArgs2(ShiftInternalAddArgs, frame, "shift-internal:add");
+    const persona = args.personaId;
     validateSchedule(args.schedule);
     const shift = deps.store.add({
       ownerId: deps.ownerIdProvider(),
@@ -49234,17 +49543,15 @@ function buildShiftInternalHandlers(deps) {
     };
   };
   const list = async (frame) => {
-    const persona = readPersonaId(frame);
-    const { type: _t, requestId: _r, personaId: _p, sessionId: _s, ...rest } = frame;
-    const args = rest;
+    const args = parseArgs2(ShiftInternalListArgs, frame, "shift-internal:list");
+    const persona = args.personaId;
     const onlyMine = args.onlyMine !== false;
     const filter = onlyMine ? { ownerId: deps.ownerIdProvider(), createdByPersona: persona } : { ownerId: deps.ownerIdProvider() };
     return { response: { shifts: deps.store.list(filter) } };
   };
   const cancel = async (frame) => {
-    const persona = readPersonaId(frame);
-    const { type: _t, requestId: _r, personaId: _p, sessionId: _s, ...rest } = frame;
-    const args = rest;
+    const args = parseArgs2(ShiftInternalCancelArgs, frame, "shift-internal:cancel");
+    const persona = args.personaId;
     const shift = deps.store.get(args.shiftId);
     if (!shift) {
       throw new Error(`shift-internal:cancel: shift not found: ${args.shiftId}`);
@@ -49258,9 +49565,8 @@ function buildShiftInternalHandlers(deps) {
     return { response: { ok: true } };
   };
   const update = async (frame) => {
-    const persona = readPersonaId(frame);
-    const { type: _t, requestId: _r, personaId: _p, sessionId: _s, ...rest } = frame;
-    const args = rest;
+    const args = parseArgs2(ShiftInternalUpdateArgs, frame, "shift-internal:update");
+    const persona = args.personaId;
     const shift = deps.store.get(args.shiftId);
     if (!shift) {
       throw new Error(`shift-internal:update: shift not found: ${args.shiftId}`);
@@ -49280,9 +49586,8 @@ function buildShiftInternalHandlers(deps) {
     };
   };
   const history = async (frame) => {
-    const persona = readPersonaId(frame);
-    const { type: _t, requestId: _r, personaId: _p, sessionId: _s, ...rest } = frame;
-    const args = rest;
+    const args = parseArgs2(ShiftInternalHistoryArgs, frame, "shift-internal:history");
+    const persona = args.personaId;
     const shift = deps.store.get(args.shiftId);
     if (!shift) {
       throw new Error(`shift-internal:history: shift not found: ${args.shiftId}`);
@@ -49338,9 +49643,9 @@ function canAccessSession(ctx, sessionId, action, deps) {
   if (!file) return true;
   return canAccessPersona(ctx.grants, file.ownerPersonaId, action);
 }
-function canAccessPersona(grants, personaId, action) {
-  if (!personaId) return false;
-  const resource = { type: "persona", id: personaId };
+function canAccessPersona(grants, personaId2, action) {
+  if (!personaId2) return false;
+  const resource = { type: "persona", id: personaId2 };
   return assertGrant(grants, resource, action);
 }
 
@@ -50685,7 +50990,7 @@ function listRegistered() {
 
 // ../node_modules/.pnpm/ws@8.20.0/node_modules/ws/wrapper.mjs
 var import_stream = __toESM(require_stream(), 1);
-var import_extension = __toESM(require_extension(), 1);
+var import_extension2 = __toESM(require_extension(), 1);
 var import_permessage_deflate = __toESM(require_permessage_deflate(), 1);
 var import_receiver = __toESM(require_receiver(), 1);
 var import_sender = __toESM(require_sender(), 1);
@@ -54287,14 +54592,14 @@ function buildSessionHandlers(deps) {
       );
     }
   };
-  const ensurePersonaAccess = (ctx, personaId, action) => {
+  const ensurePersonaAccess = (ctx, personaId2, action) => {
     if (!ctx) return;
     if (ctx.principal.kind === "owner") return;
-    const ok = canAccessPersona(ctx.grants, personaId, action);
+    const ok = canAccessPersona(ctx.grants, personaId2, action);
     if (!ok) {
       throw new ClawdError(
         ERROR_CODES.UNAUTHORIZED,
-        `principal ${ctx.principal.kind}:${ctx.principal.id} cannot ${action} on persona:${personaId ?? "<none>"}`
+        `principal ${ctx.principal.kind}:${ctx.principal.id} cannot ${action} on persona:${personaId2 ?? "<none>"}`
       );
     }
   };
@@ -54405,7 +54710,7 @@ function buildSessionHandlers(deps) {
     return { response: { type: "session:send", ok: true }, broadcast };
   };
   const currentTurnSender = async (frame, _client, ctx) => {
-    const sid = typeof frame === "object" && frame != null && "sessionId" in frame ? String(frame.sessionId) : "";
+    const sid = SessionCurrentTurnSenderArgs.parse(frame).sessionId ?? "";
     if (!sid) {
       return { response: { type: "session:currentTurnSender", sender: null } };
     }
@@ -54510,19 +54815,20 @@ function buildSessionHandlers(deps) {
     return { response: { type: "session:events", ...response } };
   };
   const subscribe = async (frame, client, ctx) => {
-    if (typeof frame.sessionId === "string") {
-      ensureSessionAccess(ctx, frame.sessionId, "read");
-      addSubscription(client, frame.sessionId);
+    const args = SessionSubscribeArgs.parse(frame);
+    if (args.sessionId !== void 0) {
+      ensureSessionAccess(ctx, args.sessionId, "read");
+      addSubscription(client, args.sessionId);
     }
     return {
-      response: { type: "subscribed", sessionId: frame.sessionId }
+      response: { type: "subscribed", sessionId: args.sessionId }
     };
   };
   const unsubscribe = async (frame, client) => {
-    if (typeof frame.sessionId === "string")
-      removeSubscription(client, frame.sessionId);
+    const args = SessionSubscribeArgs.parse(frame);
+    if (args.sessionId !== void 0) removeSubscription(client, args.sessionId);
     return {
-      response: { type: "unsubscribed", sessionId: frame.sessionId }
+      response: { type: "unsubscribed", sessionId: args.sessionId }
     };
   };
   const pin = async (frame, _client, ctx) => {
@@ -54721,11 +55027,11 @@ function isGuestPathAllowed(grants, absPath, personaRoot, action = "read", userW
   if (!target.startsWith(root + sep3)) return false;
   const rel = path56.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId = rel.split(path56.sep)[0];
-  if (!personaId) return false;
+  const personaId2 = rel.split(path56.sep)[0];
+  if (!personaId2) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
-  return allowed.has(personaId);
+  return allowed.has(personaId2);
 }
 function personaIdFromPath(absPath, personaRoot) {
   const root = path56.resolve(personaRoot);
@@ -54743,9 +55049,9 @@ function isPathWithin(dir, absPath) {
   const sep3 = d.endsWith(path56.sep) ? "" : path56.sep;
   return t === d || t.startsWith(d + sep3);
 }
-function isPathInGuestBoundary(personaRoot, personaId, userWorkDir, absPath) {
+function isPathInGuestBoundary(personaRoot, personaId2, userWorkDir, absPath) {
   if (userWorkDir && isPathWithin(userWorkDir, absPath)) return true;
-  return personaIdFromPath(path56.resolve(absPath), personaRoot) === personaId;
+  return personaIdFromPath(path56.resolve(absPath), personaRoot) === personaId2;
 }
 
 // src/handlers/history.ts
@@ -54878,9 +55184,9 @@ var path58 = __toESM(require("path"), 1);
 var os16 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
-function buildEnabledPluginNames(personaManager, personaId) {
+function buildEnabledPluginNames(personaManager, personaId2) {
   const out = /* @__PURE__ */ new Set();
-  for (const p2 of personaManager.listEnabledPlugins(personaId)) {
+  for (const p2 of personaManager.listEnabledPlugins(personaId2)) {
     const name = p2.id.includes("@") ? p2.id.slice(0, p2.id.indexOf("@")) : p2.id;
     if (name) out.add(name);
   }
@@ -54935,8 +55241,8 @@ function buildWorkspaceHandlers(deps) {
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list", usersRoot);
     const list2 = await getSkillsForTool(args.tool ?? "claude", cwdAbs);
     if (ctx?.principal.kind === "guest" && personaRoot) {
-      const personaId = personaIdFromPath(cwdAbs, personaRoot);
-      const enabled = personaId ? buildEnabledPluginNames(personaManager, personaId) : /* @__PURE__ */ new Set();
+      const personaId2 = personaIdFromPath(cwdAbs, personaRoot);
+      const enabled = personaId2 ? buildEnabledPluginNames(personaManager, personaId2) : /* @__PURE__ */ new Set();
       return { response: { type: "skills:list", skills: filterGuestSkills(list2, enabled) } };
     }
     return { response: { type: "skills:list", skills: list2 } };
@@ -54950,8 +55256,8 @@ function buildWorkspaceHandlers(deps) {
     }
     const list2 = agents.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
-      const personaId = personaIdFromPath(cwdAbs, personaRoot);
-      const enabled = personaId ? buildEnabledPluginNames(personaManager, personaId) : /* @__PURE__ */ new Set();
+      const personaId2 = personaIdFromPath(cwdAbs, personaRoot);
+      const enabled = personaId2 ? buildEnabledPluginNames(personaManager, personaId2) : /* @__PURE__ */ new Set();
       return { response: { type: "agents:list", agents: filterGuestAgents(list2, enabled) } };
     }
     return { response: { type: "agents:list", agents: list2 } };
@@ -55124,8 +55430,7 @@ function resolvePeerDeviceId(ctx, argsPeerDeviceId) {
 function buildInboxHandlers(deps) {
   const { manager } = deps;
   const postMessage = async (frame, _client, ctx) => {
-    const { type: _t, requestId: _r, ...rest } = frame;
-    const args = InboxPostMessageArgsSchema.parse(rest);
+    const args = parseArgs2(InboxPostMessageArgsSchema, frame, "inbox:postMessage");
     if (!ctx) {
       throw new ClawdError(ERROR_CODES.INTERNAL, "inbox:postMessage: missing ConnectionContext");
     }
@@ -55143,8 +55448,7 @@ function buildInboxHandlers(deps) {
     };
   };
   const list = async (frame, _client, ctx) => {
-    const { type: _t, requestId: _r, ...rest } = frame;
-    const args = InboxListArgsSchema.parse(rest);
+    const args = parseArgs2(InboxListArgsSchema, frame, "inbox:list");
     if (!ctx) {
       throw new ClawdError(ERROR_CODES.INTERNAL, "inbox:list: missing ConnectionContext");
     }
@@ -55155,8 +55459,7 @@ function buildInboxHandlers(deps) {
     };
   };
   const markRead = async (frame, _client, ctx) => {
-    const { type: _t, requestId: _r, ...rest } = frame;
-    const args = InboxMarkReadArgsSchema.parse(rest);
+    const args = parseArgs2(InboxMarkReadArgsSchema, frame, "inbox:markRead");
     if (!ctx) {
       throw new ClawdError(ERROR_CODES.INTERNAL, "inbox:markRead: missing ConnectionContext");
     }
@@ -55178,7 +55481,7 @@ function buildInboxHandlers(deps) {
   const sendDm = async (frame) => {
     const { type: _t, requestId: _r, ...rest } = frame;
     const sessionId = typeof rest.sessionId === "string" ? rest.sessionId : void 0;
-    const args = InboxSendDmArgsSchema.parse(rest);
+    const args = parseArgs2(InboxSendDmArgsSchema, frame, "inbox:sendDm");
     const d = deps.sendDmDeps;
     if (!d) throw new ClawdError(ERROR_CODES.INTERNAL, "inbox:sendDm not wired");
     if (!sessionId) {
@@ -55339,8 +55642,7 @@ function buildContactHandlers(deps) {
   };
   const pin = async (frame, _client, ctx) => {
     ensureOwner(ctx);
-    const { type: _t, requestId: _r, ...rest } = frame;
-    const args = ContactPinArgsSchema.parse(rest);
+    const args = parseArgs2(ContactPinArgsSchema, frame, "contact:pin");
     const pinnedAt = args.pinned ? deps.now() : null;
     const hit = deps.store.setPin(args.deviceId, pinnedAt);
     if (!hit) {
@@ -55364,8 +55666,7 @@ function buildContactHandlers(deps) {
   };
   const remove = async (frame, _client, ctx) => {
     ensureOwner(ctx);
-    const { type: _t, requestId: _r, ...rest } = frame;
-    const args = ContactRemoveArgsSchema.parse(rest);
+    const args = parseArgs2(ContactRemoveArgsSchema, frame, "contact:remove");
     deps.store.removeByDeviceId(args.deviceId);
     deps.broadcast({
       type: "contact:removed",
@@ -55385,8 +55686,7 @@ function buildContactHandlers(deps) {
         "contact:handshake \u4EC5\u63A5\u53D7 connect-token \u8FDE\u63A5\uFF08\u8BBE\u5907\u4E92\u8FDE\u63E1\u624B\u4E13\u7528\uFF09"
       );
     }
-    const { type: _t, requestId: _r, ...rest } = frame;
-    const args = ContactHandshakeArgsSchema.parse(rest);
+    const args = parseArgs2(ContactHandshakeArgsSchema, frame, "contact:handshake");
     const contact = upsertPeerContact({
       store: deps.store,
       broadcast: deps.broadcast,
@@ -55437,8 +55737,7 @@ function ensureOwner2(ctx) {
 function buildContactRemoteAccessHandlers(deps) {
   const setRemoteAccess = async (frame, _client, ctx) => {
     ensureOwner2(ctx);
-    const { type: _t, requestId: _r, ...rest } = frame;
-    const args = ContactSetRemoteAccessArgsSchema.parse(rest);
+    const args = parseArgs2(ContactSetRemoteAccessArgsSchema, frame, "contact:setRemoteAccess");
     const hit = deps.store.setRemoteAccess(args.deviceId, {
       remoteAccessAllowed: args.remoteAccessAllowed
     });
@@ -55880,24 +56179,28 @@ function computeGrant(method) {
 }
 function computeMethodAccess(args) {
   const { method, grants, feishuActive, isImplemented } = args;
+  const description = METHOD_DOCS[method].summary;
+  const argFields = methodArgFields(method);
   if (!isImplemented(method)) {
-    return { name: method, status: "denied", reason: "METHOD_NOT_IMPLEMENTED" };
+    return { name: method, description, args: argFields, status: "denied", reason: "METHOD_NOT_IMPLEMENTED" };
   }
   if (!feishuActive && FEISHU_GATED_METHODS.includes(method)) {
-    return { name: method, status: "denied", reason: "FEISHU_LOGIN_REQUIRED" };
+    return { name: method, description, args: argFields, status: "denied", reason: "FEISHU_LOGIN_REQUIRED" };
   }
   if (METHOD_GRANT_MAP[method]?.kind === "capability-scoped") {
     return {
       name: method,
+      description,
+      args: argFields,
       status: "conditional",
       reason: "handler checks your grants for the target resource"
     };
   }
   const verdict = computeGrant(method);
   if (verdict.kind === "check" && !assertGrant(grants, verdict.resource, verdict.action)) {
-    return { name: method, status: "denied", reason: "UNAUTHORIZED" };
+    return { name: method, description, args: argFields, status: "denied", reason: "UNAUTHORIZED" };
   }
-  return { name: method, status: "allowed" };
+  return { name: method, description, args: argFields, status: "allowed" };
 }
 
 // src/version.ts
@@ -55973,7 +56276,7 @@ function buildPersonaHandlers(deps) {
   const { personaManager, personaRegistry } = deps;
   const create = async (frame) => {
     const { type: _type, requestId: _requestId, ...rest } = frame;
-    const args = PersonaCreateArgsSchema.parse(rest);
+    const args = parseArgs2(PersonaCreateArgsSchema, frame, "persona:create");
     const persona = personaManager.create(args);
     return { response: { type: "persona:info", ...persona } };
   };
@@ -55989,7 +56292,7 @@ function buildPersonaHandlers(deps) {
     };
   };
   const get = async (frame, _client, ctx) => {
-    const args = PersonaIdArgsSchema.parse(frame);
+    const args = parseArgs2(PersonaIdArgsSchema, frame, "persona:get");
     const persona = personaRegistry.get(args.personaId) ?? null;
     if (!persona) {
       return { response: { type: "persona:info", persona: null } };
@@ -56018,13 +56321,13 @@ function buildPersonaHandlers(deps) {
   };
   const update = async (frame) => {
     const { type: _type, requestId: _requestId, ...rest } = frame;
-    const args = PersonaUpdateArgsSchema.parse(rest);
+    const args = parseArgs2(PersonaUpdateArgsSchema, frame, "persona:update");
     const { personality, ...metaPatch } = args.patch;
     const persona = personaManager.update(args.personaId, metaPatch, personality);
     return { response: { type: "persona:info", ...persona } };
   };
   const del = async (frame) => {
-    const args = PersonaIdArgsSchema.parse(frame);
+    const args = parseArgs2(PersonaIdArgsSchema, frame, "persona:get");
     personaManager.delete(args.personaId);
     return {
       response: { type: "persona:deleted", personaId: args.personaId }
@@ -56582,32 +56885,6 @@ async function rollback(deps, localExtId, liveDir, prevDir) {
 }
 
 // src/handlers/extension.ts
-function pickChannelRef(frame) {
-  const ref = frame.channelRef;
-  const parsed = ChannelRefSchema.safeParse(ref);
-  if (!parsed.success) {
-    throw new ClawdError(
-      ERROR_CODES.INVALID_PARAM,
-      `channelRef invalid: ${parsed.error.issues.map((i) => i.message).join("; ")}`
-    );
-  }
-  return parsed.data;
-}
-function pickStringField(frame, name) {
-  const v2 = frame[name];
-  if (typeof v2 !== "string" || v2.length === 0) {
-    throw new ClawdError(ERROR_CODES.INVALID_PARAM, `${name} required`);
-  }
-  return v2;
-}
-function pickOptionalString(frame, name) {
-  const v2 = frame[name];
-  if (v2 === void 0 || v2 === null) return null;
-  if (typeof v2 !== "string") {
-    throw new ClawdError(ERROR_CODES.INVALID_PARAM, `${name} must be string`);
-  }
-  return v2;
-}
 async function rewriteManifestVersion(root, extId, newVersion, previousPublishedVersion) {
   const v2 = validateSimpleSemver(newVersion);
   if (!v2.ok) {
@@ -56665,13 +56942,6 @@ function assertOwner(ctx) {
     throw new ClawdError(ERROR_CODES.FORBIDDEN, "owner only");
   }
 }
-function pickExtId(frame) {
-  const extId = frame.extId;
-  if (typeof extId !== "string") {
-    throw new ClawdError(ERROR_CODES.INVALID_PARAM, "extId required");
-  }
-  return extId;
-}
 function composeState(rec3, running, crashed, getPort) {
   if (rec3.state === "invalid") return rec3;
   if (manifestMode(rec3.manifest) === "hosted") {
@@ -56705,19 +56975,19 @@ function buildExtensionHandlers(deps) {
   };
   const open = async (frame, _client, ctx) => {
     assertOwner(ctx);
-    const extId = pickExtId(frame);
+    const { extId } = parseArgs2(ExtensionIdArgs, frame, "extension", ERROR_CODES.INVALID_PARAM);
     const target = await deps.runtime.open(extId);
     return { response: target };
   };
   const close = async (frame, _client, ctx) => {
     assertOwner(ctx);
-    const extId = pickExtId(frame);
+    const { extId } = parseArgs2(ExtensionIdArgs, frame, "extension", ERROR_CODES.INVALID_PARAM);
     await deps.runtime.close(extId);
     return { response: { ok: true } };
   };
   const uninstall2 = async (frame, _client, ctx) => {
     assertOwner(ctx);
-    const extId = pickExtId(frame);
+    const { extId } = parseArgs2(ExtensionIdArgs, frame, "extension", ERROR_CODES.INVALID_PARAM);
     await deps.uninstall({ root: deps.root, extId, runtime: deps.runtime });
     return { response: { ok: true } };
   };
@@ -56728,9 +56998,8 @@ function buildExtensionHandlers(deps) {
   }
   const publish = async (frame, _client, ctx) => {
     assertOwner(ctx);
-    const extId = pickExtId(frame);
-    const newVersion = pickOptionalString(frame, "newVersion");
-    if (newVersion !== null) {
+    const { extId, newVersion } = parseArgs2(ExtensionPublishArgs, frame, "publish", ERROR_CODES.INVALID_PARAM);
+    if (newVersion != null) {
       await rewriteManifestVersion(deps.root, extId, newVersion, deps.publishedChannelStore.get(extId)?.version);
     }
     const { manifest, contentHash, buffer } = await buildSnapshotMeta(extId);
@@ -56774,7 +57043,7 @@ function buildExtensionHandlers(deps) {
   };
   const unpublish = async (frame, _client, ctx) => {
     assertOwner(ctx);
-    const extId = pickExtId(frame);
+    const { extId } = parseArgs2(ExtensionIdArgs, frame, "extension", ERROR_CODES.INVALID_PARAM);
     const head = deps.publishedChannelStore.get(extId);
     await deps.publishedChannelStore.delete(extId);
     if (head) {
@@ -56784,7 +57053,7 @@ function buildExtensionHandlers(deps) {
   };
   const publishStatus = async (frame, _client, ctx) => {
     assertOwner(ctx);
-    const extId = pickExtId(frame);
+    const { extId } = parseArgs2(ExtensionIdArgs, frame, "extension", ERROR_CODES.INVALID_PARAM);
     const { manifest, contentHash } = await buildSnapshotMeta(extId);
     const head = deps.publishedChannelStore.get(extId);
     const check = computePublishCheck({
@@ -56833,8 +57102,7 @@ function buildExtensionHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest") {
       throw new ClawdError(ERROR_CODES.FORBIDDEN, "guest only");
     }
-    pickExtId(frame);
-    const expectedHash = pickStringField(frame, "snapshotHash");
+    const { snapshotHash: expectedHash } = parseArgs2(ExtensionFetchBundleArgs, frame, "fetchBundle", ERROR_CODES.INVALID_PARAM);
     const cached = await deps.bundleCache.read(expectedHash);
     if (cached === null) {
       throw new ClawdError(
@@ -56846,9 +57114,7 @@ function buildExtensionHandlers(deps) {
   };
   const installFromChannelHandler = async (frame, _client, ctx) => {
     assertOwner(ctx);
-    const channelRef = pickChannelRef(frame);
-    const snapshotHash = pickStringField(frame, "snapshotHash");
-    const zipBase64 = pickStringField(frame, "zipBase64");
+    const { channelRef, snapshotHash, zipBase64 } = parseArgs2(ExtensionFromChannelArgs, frame, "fromChannel", ERROR_CODES.INVALID_PARAM);
     const bundleZip = Buffer.from(zipBase64, "base64");
     try {
       const { extId, installedVersion } = await installFromChannel(
@@ -56868,9 +57134,7 @@ function buildExtensionHandlers(deps) {
   };
   const updateFromChannelHandler = async (frame, _client, ctx) => {
     assertOwner(ctx);
-    const channelRef = pickChannelRef(frame);
-    const snapshotHash = pickStringField(frame, "snapshotHash");
-    const zipBase64 = pickStringField(frame, "zipBase64");
+    const { channelRef, snapshotHash, zipBase64 } = parseArgs2(ExtensionFromChannelArgs, frame, "fromChannel", ERROR_CODES.INVALID_PARAM);
     const bundleZip = Buffer.from(zipBase64, "base64");
     try {
       const result = await updateFromChannel(
@@ -57635,10 +57899,7 @@ function buildAppBuilderHandlers(deps) {
     return { response: { projects: metas.map(toProjectWithStatus) } };
   };
   const getProject = async (frame, _client, ctx) => {
-    const f = frame;
-    if (typeof f.sessionId !== "string" || !f.sessionId) {
-      throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "getProject: sessionId required");
-    }
+    const f = parseArgs2(GetProjectArgsSchema, frame, "getProject");
     if (ctx && !canAccessSession(ctx, f.sessionId, "read", {
       readSession: (sid) => sessionManager.findOwnedSession(sid) ?? null
     })) {
@@ -57653,13 +57914,7 @@ function buildAppBuilderHandlers(deps) {
     return { response: { project: meta ? toProjectWithStatus(meta) : null } };
   };
   const createProject = async (frame, _client, ctx) => {
-    const f = frame;
-    if (typeof f.sessionId !== "string" || !f.sessionId) {
-      throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "createProject: sessionId required");
-    }
-    if (typeof f.name !== "string" || !f.name) {
-      throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "createProject: name required");
-    }
+    const f = parseArgs2(CreateProjectArgsSchema, frame, "createProject");
     const session = sessionManager.findOwnedSession(f.sessionId);
     if (!session) {
       throw new ClawdError(ERROR_CODES.SESSION_NOT_FOUND, `session ${f.sessionId} not found`);
@@ -57713,8 +57968,7 @@ function buildAppBuilderHandlers(deps) {
     return { response: { project, projectDir: userStore.projectDir(project.name) }, broadcast };
   };
   const deleteProject = async (frame, _client, ctx) => {
-    const name = frame.name;
-    if (typeof name !== "string") throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "deleteProject: name required");
+    const { name } = parseArgs2(DeleteProjectArgsSchema, frame, "deleteProject");
     const userStore = resolveStore({ ctx, projectName: name });
     await devServerLifecycle.stopForProject(name);
     await userStore.delete(name);
@@ -57722,9 +57976,7 @@ function buildAppBuilderHandlers(deps) {
     return { response: {} };
   };
   const updateProjectPort = async (frame, _client, ctx) => {
-    const f = frame;
-    if (typeof f.name !== "string") throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "updateProjectPort: name required");
-    if (typeof f.newPort !== "number") throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "updateProjectPort: newPort required");
+    const f = parseArgs2(UpdateProjectPortArgsSchema, frame, "updateProjectPort");
     const userStore = resolveStore({ ctx, projectName: f.name });
     await devServerLifecycle.stopForProject(f.name);
     const project = await userStore.updatePort(f.name, f.newPort);
@@ -57732,9 +57984,7 @@ function buildAppBuilderHandlers(deps) {
     return { response: { project } };
   };
   const setProdUrl = async (frame, _client, ctx) => {
-    const f = frame;
-    if (typeof f.name !== "string") throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "setProdUrl: name required");
-    if (typeof f.url !== "string") throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "setProdUrl: url required");
+    const f = parseArgs2(SetProdUrlArgsSchema, frame, "setProdUrl");
     ensureProjectWriteAccess(ctx, { projectName: f.name });
     const userStore = resolveStore({ ctx, projectName: f.name });
     const project = await userStore.setProdUrl(f.name, f.url);
@@ -57743,10 +57993,7 @@ function buildAppBuilderHandlers(deps) {
     return { response: { project } };
   };
   const startDevServer = async (frame, _client, ctx) => {
-    const f = frame;
-    if (typeof f.sessionId !== "string" || !f.sessionId) {
-      throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "startDevServer: sessionId required");
-    }
+    const f = parseArgs2(StartDevServerArgsSchema, frame, "startDevServer");
     const force = f.force === true;
     ensureProjectWriteAccess(ctx, { sessionId: f.sessionId });
     const session = sessionManager.findOwnedSession(f.sessionId);
@@ -57805,13 +58052,7 @@ function buildAppBuilderHandlers(deps) {
     return { response: { project: meta } };
   };
   const reportStage = async (frame, _client, ctx) => {
-    const f = frame;
-    if (typeof f.sessionId !== "string" || !f.sessionId) {
-      throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "reportStage: sessionId required");
-    }
-    if (typeof f.stage !== "string") {
-      throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "reportStage: stage required");
-    }
+    const f = parseArgs2(ReportStageArgsSchema, frame, "reportStage");
     if (!ASSISTANT_REPORTABLE_STAGES.includes(f.stage)) {
       throw new ClawdError(
         ERROR_CODES.VALIDATION_ERROR,
@@ -57839,10 +58080,7 @@ function buildAppBuilderHandlers(deps) {
     return { response: { ok: true } };
   };
   const stopDevServer = async (frame, _client, ctx) => {
-    const f = frame;
-    if (typeof f.sessionId !== "string" || !f.sessionId) {
-      throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, "stopDevServer: sessionId required");
-    }
+    const f = parseArgs2(StopDevServerArgsSchema, frame, "stopDevServer");
     ensureProjectWriteAccess(ctx, { sessionId: f.sessionId });
     const session = sessionManager.findOwnedSession(f.sessionId);
     if (!session) {
@@ -58652,6 +58890,7 @@ var DevServerSupervisor = class extends import_node_events2.EventEmitter {
 };
 
 // src/handlers/dispatch-rpc.ts
+init_zod();
 init_protocol();
 async function dispatchRpc(method, frame, client, ctx, deps) {
   if (!METHOD_NAMES.includes(method)) {
@@ -58675,7 +58914,14 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
       );
     }
   }
-  return handler(frame, client, ctx);
+  try {
+    return await handler(frame, client, ctx);
+  } catch (err) {
+    if (err instanceof ZodError) {
+      throw new ClawdError(ERROR_CODES.VALIDATION_ERROR, err.message);
+    }
+    throw err;
+  }
 }
 
 // src/extension/runtime.ts
@@ -59383,7 +59629,7 @@ async function startDaemon(config) {
     personaRoot: import_node_path62.default.join(config.dataDir, "personas"),
     // dispatch / shift 自动化 spawn 按 persona 绑定 tool 起 B session（codex persona 用 codex）。
     // personaRegistry 声明在 manager 之后（同作用域 const，调用时机在启动完成后，无 TDZ 风险）。
-    getPersonaTool: (personaId) => personaRegistry.get(personaId)?.tool,
+    getPersonaTool: (personaId2) => personaRegistry.get(personaId2)?.tool,
     usersRoot,
     personaStore,
     ownerDisplayName,
@@ -59805,7 +60051,7 @@ async function startDaemon(config) {
     // 共享 deploy-kit 根：scaffold/publish 脚本骨架 + 阿里云凭证单一真源。
     deployKitRoot: import_node_path62.default.join(config.dataDir, "deploy-kit"),
     // scaffold/publish 按当前 session 的 persona 解析其安装根，让每个 persona 用自己的模板/注入配置。
-    resolvePersonaRoot: (personaId) => import_node_path62.default.join(config.dataDir, "personas", personaId),
+    resolvePersonaRoot: (personaId2) => import_node_path62.default.join(config.dataDir, "personas", personaId2),
     // 发布上线脚手架化 (spec 2026-06-03 §5.2.2):
     // 复用 SessionManagerDeps.broadcastFrame 同款 dispatch 逻辑 —— runner 调 manager.send
     // 取回 broadcast 帧后逐帧 push 到 transport，跟 manager 自身的 deps 一致。
@@ -59899,9 +60145,9 @@ async function startDaemon(config) {
       });
     },
     // B 角色：判断 targetPersona 是否 public（跨设备授权边界，private 拒）。
-    getPersonaPublic: (personaId) => personaRegistry.get(personaId)?.public ?? false,
+    getPersonaPublic: (personaId2) => personaRegistry.get(personaId2)?.public ?? false,
     // model 校验按 target persona 绑定 tool 选表（claude / codex 模型集不同）
-    getPersonaTool: (personaId) => personaRegistry.get(personaId)?.tool
+    getPersonaTool: (personaId2) => personaRegistry.get(personaId2)?.tool
   });
   handlers = { ...handlers, ...dispatchHandlers };
   const shiftHandlers = buildShiftInternalHandlers({