@clawos-dev/clawd 0.2.71-beta.124.b09b0a0 → 0.2.71-beta.125.4951782

package/dist/cli.cjs

@@ -121,6 +121,11 @@ var init_methods = __esm({
       "capability:issue",
       "capability:list",
       "capability:revoke",
+      // ---- inbox:* (capability platform Phase 3 跨用户通知) ----
+      // owner 接 guest 的 cross-principal 消息事件. 当前 Phase 3 仅 owner 调 (admin-only),
+      // Phase 4 DM 真接通后 guest 也能调 inbox:postMessage 等 (本批次不加 postMessage).
+      "inbox:list",
+      "inbox:markRead",
       "info",
       "ping"
     ];
@@ -612,8 +617,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path35, errorMaps, issueData } = params;
-      const fullPath = [...path35, ...issueData.path || []];
+      const { data, path: path36, errorMaps, issueData } = params;
+      const fullPath = [...path36, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -924,11 +929,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path35, key) {
+      constructor(parent, value, path36, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path35;
+        this._path = path36;
         this._key = key;
       }
       get path() {
@@ -5112,6 +5117,40 @@ var init_capability = __esm({
   }
 });
 
+// ../protocol/src/inbox.ts
+var INBOX_EVENT_KIND_VALUES, InboxEventKindSchema, INBOX_PREVIEW_MAX_LENGTH, InboxEventSchema, InboxListArgsSchema, InboxMarkReadArgsSchema;
+var init_inbox = __esm({
+  "../protocol/src/inbox.ts"() {
+    "use strict";
+    init_zod();
+    init_principal();
+    init_capability();
+    INBOX_EVENT_KIND_VALUES = ["persona-mention", "direct-message"];
+    InboxEventKindSchema = external_exports.enum(INBOX_EVENT_KIND_VALUES);
+    INBOX_PREVIEW_MAX_LENGTH = 140;
+    InboxEventSchema = external_exports.object({
+      id: external_exports.string().min(1),
+      kind: InboxEventKindSchema,
+      fromPrincipal: PrincipalSchema,
+      toPrincipal: PrincipalSchema,
+      // persona-mention 才有, direct-message 不带
+      resource: ResourceSchema.optional(),
+      preview: external_exports.string().max(INBOX_PREVIEW_MAX_LENGTH),
+      createdAt: external_exports.number().int().nonnegative(),
+      readAt: external_exports.number().int().positive().optional(),
+      // direct-message 才有, sha256 hex 64; 派生规则: sha256(min(A,B) + '/' + max(A,B))
+      threadId: external_exports.string().regex(/^[a-f0-9]{64}$/).optional()
+    }).strict();
+    InboxListArgsSchema = external_exports.object({
+      // false / 缺省 = 只返回未读; true = 含已读 (历史回溯用)
+      includeRead: external_exports.boolean().optional()
+    }).strict();
+    InboxMarkReadArgsSchema = external_exports.object({
+      eventId: external_exports.string().min(1)
+    }).strict();
+  }
+});
+
 // ../protocol/src/runtime.ts
 var init_runtime = __esm({
   "../protocol/src/runtime.ts"() {
@@ -5126,6 +5165,7 @@ var init_runtime = __esm({
     init_attachment_schemas();
     init_principal();
     init_capability();
+    init_inbox();
   }
 });
 
@@ -5400,8 +5440,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path35 = req.path;
-        _req.url = typeof path35 === "string" ? path35 : req.url ? req.url.path || req.url : void 0;
+        const path36 = req.path;
+        _req.url = typeof path36 === "string" ? path36 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -5566,14 +5606,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path35) {
+    function parsePath(path36) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path35.length; i++) {
-        const char = path35[i];
+      for (let i = 0; i < path36.length; i++) {
+        const char = path36[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -5704,10 +5744,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path35 of paths) {
-        const parts = parsePath(path35);
+      for (const path36 of paths) {
+        const parts = parsePath(path36);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path35, remove);
+          redactWildcardPath(obj, parts, censor, path36, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -5792,8 +5832,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path35) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path35];
+            const wrappedCensor = typeof censor === "function" ? (value, path36) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path36];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -5828,8 +5868,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path35 of pathsToClone) {
-        const parts = parsePath(path35);
+      for (const path36 of pathsToClone) {
+        const parts = parsePath(path36);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -5881,24 +5921,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path35) {
-      if (typeof path35 !== "string") {
+    function validatePath(path36) {
+      if (typeof path36 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path35 === "") {
+      if (path36 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path35.includes("..")) {
-        throw new Error(`Invalid redaction path (${path35})`);
+      if (path36.includes("..")) {
+        throw new Error(`Invalid redaction path (${path36})`);
       }
-      if (path35.includes(",")) {
-        throw new Error(`Invalid redaction path (${path35})`);
+      if (path36.includes(",")) {
+        throw new Error(`Invalid redaction path (${path36})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path35.length; i++) {
-        const char = path35[i];
+      for (let i = 0; i < path36.length; i++) {
+        const char = path36[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -5912,20 +5952,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path35})`);
+            throw new Error(`Invalid redaction path (${path36})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path35})`);
+        throw new Error(`Invalid redaction path (${path36})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path35 of paths) {
-        validatePath(path35);
+      for (const path36 of paths) {
+        validatePath(path36);
       }
     }
     function slowRedact(options = {}) {
@@ -6093,8 +6133,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path35) => {
-            return censor(value, [k2, ...path35]);
+          const wrappedCensor = typeof censor === "function" ? (value, path36) => {
+            return censor(value, [k2, ...path36]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -6312,10 +6352,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs31 = require("fs");
+    var fs32 = require("fs");
     var EventEmitter2 = require("events");
     var inherits = require("util").inherits;
-    var path35 = require("path");
+    var path36 = require("path");
     var sleep = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -6369,20 +6409,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs31.mkdirSync(path35.dirname(file), { recursive: true });
-          const fd = fs31.openSync(file, flags, mode);
+          if (sonic.mkdir) fs32.mkdirSync(path36.dirname(file), { recursive: true });
+          const fd = fs32.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs31.mkdir(path35.dirname(file), { recursive: true }, (err) => {
+        fs32.mkdir(path36.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs31.open(file, flags, mode, fileOpened);
+          fs32.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs31.open(file, flags, mode, fileOpened);
+        fs32.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -6423,8 +6463,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs31.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs31.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs32.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs32.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -6433,15 +6473,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs31.writeSync(this.fd, this._writingBuf);
+            return fs32.writeSync(this.fd, this._writingBuf);
           }
-          return fs31.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs32.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs31.write(this.fd, this._writingBuf, this.release);
+            return fs32.write(this.fd, this._writingBuf, this.release);
           }
-          return fs31.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs32.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -6498,7 +6538,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs31.fsyncSync(this.fd);
+          fs32.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -6612,7 +6652,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs31.fsync(this.fd, (err) => {
+            fs32.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -6714,7 +6754,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs31.close(fd, (err) => {
+          fs32.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -6763,7 +6803,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs31.writeSync(this.fd, buf) : fs31.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs32.writeSync(this.fd, buf) : fs32.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -6779,7 +6819,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs31.fsyncSync(this.fd);
+        fs32.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -6800,7 +6840,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs31.writeSync(this.fd, buf);
+          const n = fs32.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -6828,13 +6868,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs31.writeSync(this.fd, this._writingBuf) : fs31.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs32.writeSync(this.fd, this._writingBuf) : fs32.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs31.write(this.fd, this._writingBuf, release);
+        fs32.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -6843,7 +6883,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs31.writeSync(this.fd, this._writingBuf);
+          const written = fs32.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -6852,7 +6892,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs31.write(this.fd, this._writingBuf, release);
+        fs32.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -6868,12 +6908,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs31.fsync(sonic.fd, closeWrapped);
+        fs32.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs31.close(sonic.fd, done);
+          fs32.close(sonic.fd, done);
         } else {
           done();
         }
@@ -7130,7 +7170,7 @@ var require_thread_stream = __commonJS({
     var { version: version2 } = require_package();
     var { EventEmitter: EventEmitter2 } = require("events");
     var { Worker } = require("worker_threads");
-    var { join: join8 } = require("path");
+    var { join: join9 } = require("path");
     var { pathToFileURL } = require("url");
     var { wait } = require_wait();
     var {
@@ -7166,7 +7206,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join8(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join9(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         trackUnmanagedFds: false,
@@ -7552,7 +7592,7 @@ var require_transport = __commonJS({
     "use strict";
     var { createRequire } = require("module");
     var getCallers = require_caller();
-    var { join: join8, isAbsolute, sep: sep2 } = require("path");
+    var { join: join9, isAbsolute, sep: sep2 } = require("path");
     var sleep = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
     var ThreadStream = require_thread_stream();
@@ -7615,7 +7655,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join8(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join9(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -7633,7 +7673,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline2) {
-        target = bundlerOverrides["pino-worker"] || join8(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join9(__dirname, "worker.js");
         options.pipelines = [pipeline2.map((dest) => {
           return {
             ...dest,
@@ -7655,7 +7695,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join8(__dirname, "..", "file.js");
+          return join9(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -8645,7 +8685,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join8 = ",";
+            let join9 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -8659,7 +8699,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join8 = `,
+                join9 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -8667,13 +8707,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join8;
+                res += join9;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join8}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join9}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -8694,7 +8734,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join8 = `,
+              join9 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -8708,13 +8748,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join8;
+                separator = join9;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join8;
+              separator = join9;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -8755,7 +8795,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join8 = ",";
+            let join9 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -8768,7 +8808,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join8 = `,
+                join9 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -8776,13 +8816,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join8;
+                res += join9;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join8}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join9}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -8795,7 +8835,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join8 = `,
+              join9 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -8804,7 +8844,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join8;
+                separator = join9;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -8862,20 +8902,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join9 = `,
+              const join10 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join9;
+                res2 += join10;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join9}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join10}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -8891,16 +8931,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join8 = `,
+            const join9 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join8, maximumBreadth);
+              res += stringifyTypedArray(value, join9, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join8;
+              separator = join9;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -8911,13 +8951,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join8;
+                separator = join9;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join8;
+              separator = join9;
             }
             if (separator !== "") {
               res = `
@@ -10008,11 +10048,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path35, added, removed, oldPosInc, options) {
-        var last = path35.lastComponent;
+      addToPath: function addToPath(path36, added, removed, oldPosInc, options) {
+        var last = path36.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path35.oldPos + oldPosInc,
+            oldPos: path36.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -10022,7 +10062,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path35.oldPos + oldPosInc,
+            oldPos: path36.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -10453,10 +10493,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path35 = typeof rec.path === "string" ? rec.path : null;
+      const path36 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path35 || content == null) return null;
-      const entry = { path: path35, content };
+      if (!path36 || content == null) return null;
+      const entry = { path: path36, content };
       if (typeof rec.mtimeMs === "number") entry.mtimeMs = rec.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -11282,10 +11322,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path35 = typeof rec.path === "string" ? rec.path : null;
+      const path36 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path35 || content == null) return null;
-      const out = { path: path35, content };
+      if (!path36 || content == null) return null;
+      const out = { path: path36, content };
       if (typeof rec.mtimeMs === "number") out.mtimeMs = rec.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -18784,7 +18824,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes2, createHash: createHash3 } = require("crypto");
+    var { randomBytes: randomBytes3, createHash: createHash3 } = require("crypto");
     var { Duplex, Readable: Readable3 } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -19314,7 +19354,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes2(16).toString("base64");
+      const key = randomBytes3(16).toString("base64");
       const request = isSecure ? https.request : http2.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -26112,62 +26152,190 @@ function cleanupGuestSessionsForCapability(cap, factory) {
   return { removed };
 }
 
-// src/migrations/2026-05-20-flatten-sessions.ts
+// src/inbox/inbox-store.ts
 var fs17 = __toESM(require("fs"), 1);
 var path19 = __toESM(require("path"), 1);
+var INBOX_FILE_NAME = "inbox.jsonl";
+var InboxStore = class {
+  constructor(dataDir) {
+    this.dataDir = dataDir;
+    fs17.mkdirSync(dataDir, { recursive: true });
+  }
+  dataDir;
+  list() {
+    const file = this.filePath();
+    let raw;
+    try {
+      raw = fs17.readFileSync(file, "utf8");
+    } catch (err) {
+      if (err?.code === "ENOENT") return [];
+      return [];
+    }
+    return parseAllLines(raw);
+  }
+  append(ev) {
+    const file = this.filePath();
+    const line = JSON.stringify(ev) + "\n";
+    fs17.appendFileSync(file, line, { mode: 384 });
+    try {
+      fs17.chmodSync(file, 384);
+    } catch {
+    }
+  }
+  /**
+   * 标记某条 event 为已读. 已有 readAt 时不覆盖 (idempotent: 第二次调用维持第一次时间).
+   * 未知 id 静默 no-op (不抛, 不写文件).
+   */
+  markRead(id, at) {
+    const events = this.list();
+    let changed = false;
+    const next = events.map((e) => {
+      if (e.id !== id) return e;
+      if (e.readAt !== void 0) return e;
+      changed = true;
+      return { ...e, readAt: at };
+    });
+    if (!changed) return;
+    this.rewrite(next);
+  }
+  rewrite(events) {
+    const file = this.filePath();
+    const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
+    const content = events.map((e) => JSON.stringify(e)).join("\n") + (events.length > 0 ? "\n" : "");
+    fs17.writeFileSync(tmp, content, { mode: 384 });
+    fs17.renameSync(tmp, file);
+    try {
+      fs17.chmodSync(file, 384);
+    } catch {
+    }
+  }
+  filePath() {
+    return path19.join(this.dataDir, INBOX_FILE_NAME);
+  }
+};
+function parseAllLines(raw) {
+  const out = [];
+  for (const line of raw.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed) continue;
+    let parsed;
+    try {
+      parsed = JSON.parse(trimmed);
+    } catch {
+      continue;
+    }
+    const r = InboxEventSchema.safeParse(parsed);
+    if (r.success) out.push(r.data);
+  }
+  return out;
+}
+
+// src/inbox/inbox-manager.ts
+var crypto6 = __toESM(require("crypto"), 1);
+var InboxManager = class {
+  constructor(store, broadcast, opts = {}) {
+    this.store = store;
+    this.broadcast = broadcast;
+    this.now = opts.now ?? Date.now;
+    this.genId = opts.genId ?? defaultGenId;
+  }
+  store;
+  broadcast;
+  now;
+  genId;
+  /**
+   * persona VM 内某 sender 给 CC 发消息 → 跨 principal 时记 inbox event.
+   * 返回 null = owner 自己 (no-op); 否则返回写入的 event (含派生 id / createdAt).
+   */
+  recordPersonaMention(args) {
+    if (args.sender.kind === "owner") return null;
+    const resource = { type: "persona", id: args.personaId };
+    const ev = {
+      id: this.genId(),
+      kind: "persona-mention",
+      fromPrincipal: args.sender,
+      toPrincipal: OWNER_PRINCIPAL,
+      resource,
+      preview: truncatePreview(args.preview),
+      createdAt: this.now()
+    };
+    this.store.append(ev);
+    this.broadcast({ type: "inbox:event", event: ev });
+    return ev;
+  }
+  list(opts = {}) {
+    const all = this.store.list();
+    if (opts.includeRead) return all;
+    return all.filter((e) => e.readAt === void 0);
+  }
+  markRead(eventId) {
+    this.store.markRead(eventId, this.now());
+  }
+};
+function truncatePreview(s) {
+  if (s.length <= INBOX_PREVIEW_MAX_LENGTH) return s;
+  return s.slice(0, INBOX_PREVIEW_MAX_LENGTH);
+}
+function defaultGenId() {
+  return "inb_" + crypto6.randomBytes(6).toString("base64url");
+}
+
+// src/migrations/2026-05-20-flatten-sessions.ts
+var fs18 = __toESM(require("fs"), 1);
+var path20 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path19.join(dataDir, "sessions");
-  const flagPath = path19.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path20.join(dataDir, "sessions");
+  const flagPath = path20.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path19.join(sessionsDir, "default");
+  const defaultDir = path20.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path19.join(defaultDir, entry);
-      const dst = path19.join(sessionsDir, entry);
-      fs17.renameSync(src, dst);
+      const src = path20.join(defaultDir, entry);
+      const dst = path20.join(sessionsDir, entry);
+      fs18.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path19.join(sessionsDir, pid);
+    const personaDir = path20.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path19.join(personaDir, "owner");
+    const ownerSrc = path20.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path19.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs17.mkdirSync(ownerDst, { recursive: true });
+      const ownerDst = path20.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      fs18.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs17.renameSync(path19.join(ownerSrc, file), path19.join(ownerDst, file));
+        fs18.renameSync(path20.join(ownerSrc, file), path20.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path19.join(personaDir, "listener");
+    const listenerSrc = path20.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path19.join(dataDir, ".legacy", `listener-${pid}`);
-      fs17.mkdirSync(archiveDst, { recursive: true });
+      const archiveDst = path20.join(dataDir, ".legacy", `listener-${pid}`);
+      fs18.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs17.renameSync(path19.join(listenerSrc, file), path19.join(archiveDst, file));
+        fs18.renameSync(path20.join(listenerSrc, file), path20.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs17.mkdirSync(sessionsDir, { recursive: true });
-  fs17.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs18.mkdirSync(sessionsDir, { recursive: true });
+  fs18.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -26178,7 +26346,7 @@ function migrateFlattenSessions(opts) {
 }
 function existsSync3(p2) {
   try {
-    fs17.statSync(p2);
+    fs18.statSync(p2);
     return true;
   } catch {
     return false;
@@ -26186,21 +26354,21 @@ function existsSync3(p2) {
 }
 function isDir(p2) {
   try {
-    return fs17.statSync(p2).isDirectory();
+    return fs18.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p2) {
   try {
-    return fs17.readdirSync(p2);
+    return fs18.readdirSync(p2);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p2) {
   try {
-    fs17.rmdirSync(p2);
+    fs18.rmdirSync(p2);
   } catch {
   }
 }
@@ -28051,6 +28219,31 @@ function buildCapabilityHandlers(deps) {
   };
 }
 
+// src/handlers/inbox.ts
+function buildInboxHandlers(deps) {
+  const { manager } = deps;
+  const list = async (frame) => {
+    const { type: _t, requestId: _r, ...rest } = frame;
+    const args = InboxListArgsSchema.parse(rest);
+    const events = manager.list({ includeRead: args.includeRead ?? false });
+    return {
+      response: { type: "inbox:list", events }
+    };
+  };
+  const markRead = async (frame) => {
+    const { type: _t, requestId: _r, ...rest } = frame;
+    const args = InboxMarkReadArgsSchema.parse(rest);
+    manager.markRead(args.eventId);
+    return {
+      response: { type: "inbox:markRead:ok", eventId: args.eventId }
+    };
+  };
+  return {
+    "inbox:list": list,
+    "inbox:markRead": markRead
+  };
+}
+
 // src/handlers/meta.ts
 var import_node_os13 = __toESM(require("os"), 1);
 init_protocol();
@@ -28303,6 +28496,7 @@ function buildMethodHandlers(deps) {
       personaRegistry: deps.personaRegistry
     }),
     ...buildCapabilityHandlers({ manager: deps.capabilityManager }),
+    ...buildInboxHandlers({ manager: deps.inboxManager }),
     ...deps.attachment ? buildAttachmentHandlers(deps.attachment) : {}
   };
 }
@@ -28321,6 +28515,9 @@ var METHOD_GRANT_MAP = {
   "capability:issue": ADMIN_ANY,
   "capability:list": ADMIN_ANY,
   "capability:revoke": ADMIN_ANY,
+  // ---- inbox 跨用户通知 (Phase 3 admin-only, owner 调; Phase 4 加 postMessage) ----
+  "inbox:list": ADMIN_ANY,
+  "inbox:markRead": ADMIN_ANY,
   // ---- 业务方法：Phase 1 全 admin-only（owner 自动通过；guest 无法调用） ----
   "session:create": ADMIN_ANY,
   "session:list": ADMIN_ANY,
@@ -28451,6 +28648,10 @@ async function startDaemon(config) {
       }
     }
   });
+  const inboxStore = new InboxStore(config.dataDir);
+  const inboxManager = new InboxManager(inboxStore, (frame) => {
+    wsServer?.broadcastToOwners(frame);
+  });
   let wsServer = null;
   const authGate = authMode === "first-message" ? new AuthGate({
     shouldEnforce: buildShouldEnforce({ tunnel: config.tunnel }),
@@ -28640,7 +28841,9 @@ async function startDaemon(config) {
       }
     },
     // Task 1.9: capability:issue/list/revoke handler 依赖
-    capabilityManager
+    capabilityManager,
+    // Phase 3 Task 3.4: inbox:list/markRead handler 依赖
+    inboxManager
   });
   const authResolver = new AuthContextResolver({
     ownerToken: resolvedAuthToken,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawos-dev/clawd",
-  "version": "0.2.71-beta.124.b09b0a0",
+  "version": "0.2.71-beta.125.4951782",
   "description": "Standalone clawd daemon — Claude Code (and future Codex) session server over WebSocket",
   "type": "module",
   "license": "MIT",