@clawos-dev/clawd 0.2.71-beta.124.b09b0a0 → 0.2.71-beta.126.06f4cfa

package/dist/cli.cjs

@@ -121,6 +121,18 @@ var init_methods = __esm({
       "capability:issue",
       "capability:list",
       "capability:revoke",
+      // ---- inbox:* (capability platform Phase 3 跨用户通知 + Phase 4 DM) ----
+      // owner 接 guest 的 cross-principal 消息事件 + DM 双向私聊.
+      // inbox:list / markRead: admin-only (Phase 3); inbox:postMessage: DM 自带能力,
+      // 任何 principal (owner/guest) 可调 (Phase 4).
+      "inbox:list",
+      "inbox:markRead",
+      "inbox:postMessage",
+      // ---- remote-persona:* (Phase 4 远程 persona, v1 仅本地存储, 不接 outgoing WS) ----
+      // owner 添加 / 列出 / 删除远程 persona 入口. admin-only.
+      "remote-persona:add",
+      "remote-persona:list",
+      "remote-persona:remove",
       "info",
       "ping"
     ];
@@ -612,8 +624,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path35, errorMaps, issueData } = params;
-      const fullPath = [...path35, ...issueData.path || []];
+      const { data, path: path37, errorMaps, issueData } = params;
+      const fullPath = [...path37, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -924,11 +936,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path35, key) {
+      constructor(parent, value, path37, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path35;
+        this._path = path37;
         this._key = key;
       }
       get path() {
@@ -5112,6 +5124,79 @@ var init_capability = __esm({
   }
 });
 
+// ../protocol/src/inbox.ts
+var INBOX_EVENT_KIND_VALUES, InboxEventKindSchema, INBOX_PREVIEW_MAX_LENGTH, InboxEventSchema, InboxListArgsSchema, InboxMarkReadArgsSchema, InboxPostMessageArgsSchema;
+var init_inbox = __esm({
+  "../protocol/src/inbox.ts"() {
+    "use strict";
+    init_zod();
+    init_principal();
+    init_capability();
+    INBOX_EVENT_KIND_VALUES = ["persona-mention", "direct-message"];
+    InboxEventKindSchema = external_exports.enum(INBOX_EVENT_KIND_VALUES);
+    INBOX_PREVIEW_MAX_LENGTH = 140;
+    InboxEventSchema = external_exports.object({
+      id: external_exports.string().min(1),
+      kind: InboxEventKindSchema,
+      fromPrincipal: PrincipalSchema,
+      toPrincipal: PrincipalSchema,
+      // persona-mention 才有, direct-message 不带
+      resource: ResourceSchema.optional(),
+      preview: external_exports.string().max(INBOX_PREVIEW_MAX_LENGTH),
+      createdAt: external_exports.number().int().nonnegative(),
+      readAt: external_exports.number().int().positive().optional(),
+      // direct-message 才有, sha256 hex 64; 派生规则: sha256(min(A,B) + '/' + max(A,B))
+      threadId: external_exports.string().regex(/^[a-f0-9]{64}$/).optional()
+    }).strict();
+    InboxListArgsSchema = external_exports.object({
+      // false / 缺省 = 只返回未读; true = 含已读 (历史回溯用)
+      includeRead: external_exports.boolean().optional()
+    }).strict();
+    InboxMarkReadArgsSchema = external_exports.object({
+      eventId: external_exports.string().min(1)
+    }).strict();
+    InboxPostMessageArgsSchema = external_exports.object({
+      peerPrincipalId: external_exports.string().min(1),
+      text: external_exports.string().min(1).max(INBOX_PREVIEW_MAX_LENGTH)
+    }).strict();
+  }
+});
+
+// ../protocol/src/remote-persona.ts
+function stripRemotePersonaSecret(rp) {
+  const { capabilityToken: _t, ...wire } = rp;
+  return wire;
+}
+var RemotePersonaSchema, RemotePersonaWireSchema, RemotePersonaAddArgsSchema, RemotePersonaRemoveArgsSchema;
+var init_remote_persona = __esm({
+  "../protocol/src/remote-persona.ts"() {
+    "use strict";
+    init_zod();
+    RemotePersonaSchema = external_exports.object({
+      alias: external_exports.string().min(1),
+      remoteUrl: external_exports.string().min(1),
+      capabilityToken: external_exports.string().min(1),
+      remotePersonaId: external_exports.string().min(1),
+      remoteDisplayName: external_exports.string(),
+      ownerDisplayName: external_exports.string().optional(),
+      addedAt: external_exports.number().int().nonnegative(),
+      lastConnectedAt: external_exports.number().int().positive().optional()
+    }).strict();
+    RemotePersonaWireSchema = RemotePersonaSchema.omit({ capabilityToken: true });
+    RemotePersonaAddArgsSchema = external_exports.object({
+      alias: external_exports.string().min(1),
+      remoteUrl: external_exports.string().min(1),
+      capabilityToken: external_exports.string().min(1),
+      remotePersonaId: external_exports.string().min(1),
+      remoteDisplayName: external_exports.string(),
+      ownerDisplayName: external_exports.string().optional()
+    }).strict();
+    RemotePersonaRemoveArgsSchema = external_exports.object({
+      alias: external_exports.string().min(1)
+    }).strict();
+  }
+});
+
 // ../protocol/src/runtime.ts
 var init_runtime = __esm({
   "../protocol/src/runtime.ts"() {
@@ -5126,6 +5211,8 @@ var init_runtime = __esm({
     init_attachment_schemas();
     init_principal();
     init_capability();
+    init_inbox();
+    init_remote_persona();
   }
 });
 
@@ -5400,8 +5487,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path35 = req.path;
-        _req.url = typeof path35 === "string" ? path35 : req.url ? req.url.path || req.url : void 0;
+        const path37 = req.path;
+        _req.url = typeof path37 === "string" ? path37 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -5566,14 +5653,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path35) {
+    function parsePath(path37) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path35.length; i++) {
-        const char = path35[i];
+      for (let i = 0; i < path37.length; i++) {
+        const char = path37[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -5704,10 +5791,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path35 of paths) {
-        const parts = parsePath(path35);
+      for (const path37 of paths) {
+        const parts = parsePath(path37);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path35, remove);
+          redactWildcardPath(obj, parts, censor, path37, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -5792,8 +5879,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path35) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path35];
+            const wrappedCensor = typeof censor === "function" ? (value, path37) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path37];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -5828,8 +5915,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path35 of pathsToClone) {
-        const parts = parsePath(path35);
+      for (const path37 of pathsToClone) {
+        const parts = parsePath(path37);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -5881,24 +5968,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path35) {
-      if (typeof path35 !== "string") {
+    function validatePath(path37) {
+      if (typeof path37 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path35 === "") {
+      if (path37 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path35.includes("..")) {
-        throw new Error(`Invalid redaction path (${path35})`);
+      if (path37.includes("..")) {
+        throw new Error(`Invalid redaction path (${path37})`);
       }
-      if (path35.includes(",")) {
-        throw new Error(`Invalid redaction path (${path35})`);
+      if (path37.includes(",")) {
+        throw new Error(`Invalid redaction path (${path37})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path35.length; i++) {
-        const char = path35[i];
+      for (let i = 0; i < path37.length; i++) {
+        const char = path37[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -5912,20 +5999,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path35})`);
+            throw new Error(`Invalid redaction path (${path37})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path35})`);
+        throw new Error(`Invalid redaction path (${path37})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path35 of paths) {
-        validatePath(path35);
+      for (const path37 of paths) {
+        validatePath(path37);
       }
     }
     function slowRedact(options = {}) {
@@ -6093,8 +6180,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path35) => {
-            return censor(value, [k2, ...path35]);
+          const wrappedCensor = typeof censor === "function" ? (value, path37) => {
+            return censor(value, [k2, ...path37]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -6312,10 +6399,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs31 = require("fs");
+    var fs33 = require("fs");
     var EventEmitter2 = require("events");
     var inherits = require("util").inherits;
-    var path35 = require("path");
+    var path37 = require("path");
     var sleep = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -6369,20 +6456,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs31.mkdirSync(path35.dirname(file), { recursive: true });
-          const fd = fs31.openSync(file, flags, mode);
+          if (sonic.mkdir) fs33.mkdirSync(path37.dirname(file), { recursive: true });
+          const fd = fs33.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs31.mkdir(path35.dirname(file), { recursive: true }, (err) => {
+        fs33.mkdir(path37.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs31.open(file, flags, mode, fileOpened);
+          fs33.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs31.open(file, flags, mode, fileOpened);
+        fs33.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -6423,8 +6510,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs31.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs31.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs33.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs33.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -6433,15 +6520,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs31.writeSync(this.fd, this._writingBuf);
+            return fs33.writeSync(this.fd, this._writingBuf);
           }
-          return fs31.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs33.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs31.write(this.fd, this._writingBuf, this.release);
+            return fs33.write(this.fd, this._writingBuf, this.release);
           }
-          return fs31.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs33.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -6498,7 +6585,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs31.fsyncSync(this.fd);
+          fs33.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -6612,7 +6699,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs31.fsync(this.fd, (err) => {
+            fs33.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -6714,7 +6801,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs31.close(fd, (err) => {
+          fs33.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -6763,7 +6850,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs31.writeSync(this.fd, buf) : fs31.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs33.writeSync(this.fd, buf) : fs33.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -6779,7 +6866,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs31.fsyncSync(this.fd);
+        fs33.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -6800,7 +6887,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs31.writeSync(this.fd, buf);
+          const n = fs33.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -6828,13 +6915,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs31.writeSync(this.fd, this._writingBuf) : fs31.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs33.writeSync(this.fd, this._writingBuf) : fs33.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs31.write(this.fd, this._writingBuf, release);
+        fs33.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -6843,7 +6930,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs31.writeSync(this.fd, this._writingBuf);
+          const written = fs33.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -6852,7 +6939,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs31.write(this.fd, this._writingBuf, release);
+        fs33.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -6868,12 +6955,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs31.fsync(sonic.fd, closeWrapped);
+        fs33.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs31.close(sonic.fd, done);
+          fs33.close(sonic.fd, done);
         } else {
           done();
         }
@@ -7130,7 +7217,7 @@ var require_thread_stream = __commonJS({
     var { version: version2 } = require_package();
     var { EventEmitter: EventEmitter2 } = require("events");
     var { Worker } = require("worker_threads");
-    var { join: join8 } = require("path");
+    var { join: join10 } = require("path");
     var { pathToFileURL } = require("url");
     var { wait } = require_wait();
     var {
@@ -7166,7 +7253,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join8(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join10(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         trackUnmanagedFds: false,
@@ -7552,7 +7639,7 @@ var require_transport = __commonJS({
     "use strict";
     var { createRequire } = require("module");
     var getCallers = require_caller();
-    var { join: join8, isAbsolute, sep: sep2 } = require("path");
+    var { join: join10, isAbsolute, sep: sep2 } = require("path");
     var sleep = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
     var ThreadStream = require_thread_stream();
@@ -7615,7 +7702,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join8(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join10(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -7633,7 +7720,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline2) {
-        target = bundlerOverrides["pino-worker"] || join8(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join10(__dirname, "worker.js");
         options.pipelines = [pipeline2.map((dest) => {
           return {
             ...dest,
@@ -7655,7 +7742,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join8(__dirname, "..", "file.js");
+          return join10(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -8645,7 +8732,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join8 = ",";
+            let join10 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -8659,7 +8746,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join8 = `,
+                join10 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -8667,13 +8754,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join8;
+                res += join10;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join8}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join10}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -8694,7 +8781,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join8 = `,
+              join10 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -8708,13 +8795,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join8;
+                separator = join10;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join8;
+              separator = join10;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -8755,7 +8842,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join8 = ",";
+            let join10 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -8768,7 +8855,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join8 = `,
+                join10 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -8776,13 +8863,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join8;
+                res += join10;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join8}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join10}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -8795,7 +8882,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join8 = `,
+              join10 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -8804,7 +8891,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join8;
+                separator = join10;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -8862,20 +8949,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join9 = `,
+              const join11 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join9;
+                res2 += join11;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join9}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join11}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -8891,16 +8978,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join8 = `,
+            const join10 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join8, maximumBreadth);
+              res += stringifyTypedArray(value, join10, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join8;
+              separator = join10;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -8911,13 +8998,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join8;
+                separator = join10;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join8;
+              separator = join10;
             }
             if (separator !== "") {
               res = `
@@ -10008,11 +10095,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path35, added, removed, oldPosInc, options) {
-        var last = path35.lastComponent;
+      addToPath: function addToPath(path37, added, removed, oldPosInc, options) {
+        var last = path37.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path35.oldPos + oldPosInc,
+            oldPos: path37.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -10022,7 +10109,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path35.oldPos + oldPosInc,
+            oldPos: path37.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -10453,10 +10540,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path35 = typeof rec.path === "string" ? rec.path : null;
+      const path37 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path35 || content == null) return null;
-      const entry = { path: path35, content };
+      if (!path37 || content == null) return null;
+      const entry = { path: path37, content };
       if (typeof rec.mtimeMs === "number") entry.mtimeMs = rec.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -11282,10 +11369,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path35 = typeof rec.path === "string" ? rec.path : null;
+      const path37 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path35 || content == null) return null;
-      const out = { path: path35, content };
+      if (!path37 || content == null) return null;
+      const out = { path: path37, content };
       if (typeof rec.mtimeMs === "number") out.mtimeMs = rec.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -18784,7 +18871,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes2, createHash: createHash3 } = require("crypto");
+    var { randomBytes: randomBytes3, createHash: createHash4 } = require("crypto");
     var { Duplex, Readable: Readable3 } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -19314,7 +19401,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes2(16).toString("base64");
+      const key = randomBytes3(16).toString("base64");
       const request = isSecure ? https.request : http2.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -19444,7 +19531,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash3("sha1").update(key + GUID).digest("base64");
+        const digest = createHash4("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -19811,7 +19898,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter2 = require("events");
     var http2 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash3 } = require("crypto");
+    var { createHash: createHash4 } = require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -20112,7 +20199,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash3("sha1").update(key + GUID).digest("base64");
+        const digest = createHash4("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -25512,6 +25599,23 @@ var LocalWsServer = class {
       this.safeSend(c.ws, frame);
     }
   }
+  // Phase 4 capability platform DM: 广播到指定 principal 的所有活跃 ws.
+  //   principalId === 'owner'      → 同 broadcastToOwners (所有 owner ws)
+  //   principalId === 'cap_xxx'    → 该 capability 的所有 guest ws (多端 / 多 tab)
+  // 用于 DM inbox:event 路由: from + to 两侧各播一次, 让双方 UI 实时看到 thread 更新.
+  broadcastToPrincipal(principalId, frame) {
+    if (principalId === "owner") {
+      this.broadcastToOwners(frame);
+      return;
+    }
+    const set = this.capabilityIdToClients.get(principalId);
+    if (!set) return;
+    for (const id of set) {
+      const c = this.clients.get(id);
+      if (!c) continue;
+      this.safeSend(c.ws, frame);
+    }
+  }
   firstSubscriber(sessionId) {
     for (const c of this.clients.values()) {
       if (c.handle.subscribedSessions.has(sessionId)) return c.handle;
@@ -26112,62 +26216,323 @@ function cleanupGuestSessionsForCapability(cap, factory) {
   return { removed };
 }
 
-// src/migrations/2026-05-20-flatten-sessions.ts
+// src/inbox/inbox-store.ts
 var fs17 = __toESM(require("fs"), 1);
 var path19 = __toESM(require("path"), 1);
+var INBOX_FILE_NAME = "inbox.jsonl";
+var InboxStore = class {
+  constructor(dataDir) {
+    this.dataDir = dataDir;
+    fs17.mkdirSync(dataDir, { recursive: true });
+  }
+  dataDir;
+  list() {
+    const file = this.filePath();
+    let raw;
+    try {
+      raw = fs17.readFileSync(file, "utf8");
+    } catch (err) {
+      if (err?.code === "ENOENT") return [];
+      return [];
+    }
+    return parseAllLines(raw);
+  }
+  append(ev) {
+    const file = this.filePath();
+    const line = JSON.stringify(ev) + "\n";
+    fs17.appendFileSync(file, line, { mode: 384 });
+    try {
+      fs17.chmodSync(file, 384);
+    } catch {
+    }
+  }
+  /**
+   * 标记某条 event 为已读. 已有 readAt 时不覆盖 (idempotent: 第二次调用维持第一次时间).
+   * 未知 id 静默 no-op (不抛, 不写文件).
+   */
+  markRead(id, at) {
+    const events = this.list();
+    let changed = false;
+    const next = events.map((e) => {
+      if (e.id !== id) return e;
+      if (e.readAt !== void 0) return e;
+      changed = true;
+      return { ...e, readAt: at };
+    });
+    if (!changed) return;
+    this.rewrite(next);
+  }
+  rewrite(events) {
+    const file = this.filePath();
+    const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
+    const content = events.map((e) => JSON.stringify(e)).join("\n") + (events.length > 0 ? "\n" : "");
+    fs17.writeFileSync(tmp, content, { mode: 384 });
+    fs17.renameSync(tmp, file);
+    try {
+      fs17.chmodSync(file, 384);
+    } catch {
+    }
+  }
+  filePath() {
+    return path19.join(this.dataDir, INBOX_FILE_NAME);
+  }
+};
+function parseAllLines(raw) {
+  const out = [];
+  for (const line of raw.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed) continue;
+    let parsed;
+    try {
+      parsed = JSON.parse(trimmed);
+    } catch {
+      continue;
+    }
+    const r = InboxEventSchema.safeParse(parsed);
+    if (r.success) out.push(r.data);
+  }
+  return out;
+}
+
+// src/inbox/inbox-manager.ts
+var crypto7 = __toESM(require("crypto"), 1);
+
+// src/inbox/dm.ts
+var crypto6 = __toESM(require("crypto"), 1);
+function deriveDmThreadId(idA, idB) {
+  const [low, high] = idA < idB ? [idA, idB] : [idB, idA];
+  return crypto6.createHash("sha256").update(`${low}/${high}`).digest("hex");
+}
+
+// src/inbox/inbox-manager.ts
+var InboxManager = class {
+  constructor(store, broadcast, opts = {}) {
+    this.store = store;
+    this.broadcast = broadcast;
+    this.now = opts.now ?? Date.now;
+    this.genId = opts.genId ?? defaultGenId;
+  }
+  store;
+  broadcast;
+  now;
+  genId;
+  /**
+   * persona VM 内某 sender 给 CC 发消息 → 跨 principal 时记 inbox event.
+   * 返回 null = owner 自己 (no-op); 否则返回写入的 event (含派生 id / createdAt).
+   */
+  recordPersonaMention(args) {
+    if (args.sender.kind === "owner") return null;
+    const resource = { type: "persona", id: args.personaId };
+    const ev = {
+      id: this.genId(),
+      kind: "persona-mention",
+      fromPrincipal: args.sender,
+      toPrincipal: OWNER_PRINCIPAL,
+      resource,
+      preview: truncatePreview(args.preview),
+      createdAt: this.now()
+    };
+    this.store.append(ev);
+    this.broadcast({ type: "inbox:event", event: ev });
+    return ev;
+  }
+  /**
+   * Phase 4 Task 4.2: DM 私聊事件. 与 recordPersonaMention 区别:
+   *   - kind = 'direct-message' (不是 persona-mention)
+   *   - 不带 resource (DM 不挂某个 persona)
+   *   - threadId 由 from.id + to.id 派生 (sha256), 双向消息共享同一 thread
+   *   - 调用方 (handler) 已校验 sender = ctx.principal (防伪造)
+   *
+   * 返回值是 InboxEvent (含派生 threadId), daemon/index.ts 装配 broadcast 路由:
+   *   broadcastToPrincipal(from.id) + broadcastToPrincipal(to.id) (双侧 ws 都收).
+   */
+  recordDirectMessage(args) {
+    const ev = {
+      id: this.genId(),
+      kind: "direct-message",
+      fromPrincipal: args.from,
+      toPrincipal: args.to,
+      preview: truncatePreview(args.text),
+      createdAt: this.now(),
+      threadId: deriveDmThreadId(args.from.id, args.to.id)
+    };
+    this.store.append(ev);
+    this.broadcast({ type: "inbox:event", event: ev });
+    return ev;
+  }
+  list(opts = {}) {
+    const all = this.store.list();
+    if (opts.includeRead) return all;
+    return all.filter((e) => e.readAt === void 0);
+  }
+  markRead(eventId) {
+    this.store.markRead(eventId, this.now());
+  }
+};
+function truncatePreview(s) {
+  if (s.length <= INBOX_PREVIEW_MAX_LENGTH) return s;
+  return s.slice(0, INBOX_PREVIEW_MAX_LENGTH);
+}
+function defaultGenId() {
+  return "inb_" + crypto7.randomBytes(6).toString("base64url");
+}
+
+// src/remote-persona/store.ts
+var fs18 = __toESM(require("fs"), 1);
+var path20 = __toESM(require("path"), 1);
+var REMOTE_PERSONAS_DIR = "remote-personas";
+var RemotePersonaStore = class {
+  constructor(dataDir) {
+    this.dataDir = dataDir;
+    fs18.mkdirSync(this.rootDir(), { recursive: true });
+  }
+  dataDir;
+  list() {
+    let entries;
+    try {
+      entries = fs18.readdirSync(this.rootDir());
+    } catch (err) {
+      if (err?.code === "ENOENT") return [];
+      return [];
+    }
+    const out = [];
+    for (const name of entries) {
+      if (!name.endsWith(".json")) continue;
+      if (name.includes(".tmp-")) continue;
+      const file = path20.join(this.rootDir(), name);
+      let raw;
+      try {
+        raw = fs18.readFileSync(file, "utf8");
+      } catch {
+        continue;
+      }
+      let parsed;
+      try {
+        parsed = JSON.parse(raw);
+      } catch {
+        continue;
+      }
+      const r = RemotePersonaSchema.safeParse(parsed);
+      if (r.success) out.push(r.data);
+    }
+    return out.sort((a, b2) => a.addedAt > b2.addedAt ? -1 : a.addedAt < b2.addedAt ? 1 : 0);
+  }
+  get(alias) {
+    const file = this.filePath(alias);
+    let raw;
+    try {
+      raw = fs18.readFileSync(file, "utf8");
+    } catch {
+      return null;
+    }
+    try {
+      const parsed = JSON.parse(raw);
+      const r = RemotePersonaSchema.safeParse(parsed);
+      return r.success ? r.data : null;
+    } catch {
+      return null;
+    }
+  }
+  add(rp) {
+    const file = this.filePath(rp.alias);
+    if (fs18.existsSync(file)) {
+      throw new Error(`RemotePersonaStore.add: alias already exists: ${rp.alias}`);
+    }
+    this.atomicWrite(file, rp);
+  }
+  remove(alias) {
+    const file = this.filePath(alias);
+    try {
+      fs18.unlinkSync(file);
+      return true;
+    } catch (err) {
+      if (err?.code === "ENOENT") return false;
+      throw err;
+    }
+  }
+  /**
+   * patch lastConnectedAt (v2 outgoing client 连上时更新). 其他字段不动.
+   * 不存在 alias → no-op.
+   */
+  updateLastConnectedAt(alias, at) {
+    const cur = this.get(alias);
+    if (!cur) return;
+    this.atomicWrite(this.filePath(alias), { ...cur, lastConnectedAt: at });
+  }
+  rootDir() {
+    return path20.join(this.dataDir, REMOTE_PERSONAS_DIR);
+  }
+  filePath(alias) {
+    return path20.join(this.rootDir(), `${safeFileName(alias)}.json`);
+  }
+  atomicWrite(file, content) {
+    fs18.mkdirSync(this.rootDir(), { recursive: true });
+    const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
+    fs18.writeFileSync(tmp, JSON.stringify(content, null, 2), { mode: 384 });
+    fs18.renameSync(tmp, file);
+    try {
+      fs18.chmodSync(file, 384);
+    } catch {
+    }
+  }
+};
+
+// src/migrations/2026-05-20-flatten-sessions.ts
+var fs19 = __toESM(require("fs"), 1);
+var path21 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path19.join(dataDir, "sessions");
-  const flagPath = path19.join(sessionsDir, MIGRATION_FLAG_NAME);
-  if (existsSync3(flagPath)) {
+  const sessionsDir = path21.join(dataDir, "sessions");
+  const flagPath = path21.join(sessionsDir, MIGRATION_FLAG_NAME);
+  if (existsSync4(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path19.join(sessionsDir, "default");
-  if (existsSync3(defaultDir)) {
+  const defaultDir = path21.join(sessionsDir, "default");
+  if (existsSync4(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path19.join(defaultDir, entry);
-      const dst = path19.join(sessionsDir, entry);
-      fs17.renameSync(src, dst);
+      const src = path21.join(defaultDir, entry);
+      const dst = path21.join(sessionsDir, entry);
+      fs19.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path19.join(sessionsDir, pid);
+    const personaDir = path21.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path19.join(personaDir, "owner");
-    if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path19.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs17.mkdirSync(ownerDst, { recursive: true });
+    const ownerSrc = path21.join(personaDir, "owner");
+    if (existsSync4(ownerSrc) && isDir(ownerSrc)) {
+      const ownerDst = path21.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      fs19.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs17.renameSync(path19.join(ownerSrc, file), path19.join(ownerDst, file));
+        fs19.renameSync(path21.join(ownerSrc, file), path21.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path19.join(personaDir, "listener");
-    if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path19.join(dataDir, ".legacy", `listener-${pid}`);
-      fs17.mkdirSync(archiveDst, { recursive: true });
+    const listenerSrc = path21.join(personaDir, "listener");
+    if (existsSync4(listenerSrc) && isDir(listenerSrc)) {
+      const archiveDst = path21.join(dataDir, ".legacy", `listener-${pid}`);
+      fs19.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs17.renameSync(path19.join(listenerSrc, file), path19.join(archiveDst, file));
+        fs19.renameSync(path21.join(listenerSrc, file), path21.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs17.mkdirSync(sessionsDir, { recursive: true });
-  fs17.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs19.mkdirSync(sessionsDir, { recursive: true });
+  fs19.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -26176,9 +26541,9 @@ function migrateFlattenSessions(opts) {
     archivedListener
   };
 }
-function existsSync3(p2) {
+function existsSync4(p2) {
   try {
-    fs17.statSync(p2);
+    fs19.statSync(p2);
     return true;
   } catch {
     return false;
@@ -26186,21 +26551,21 @@ function existsSync3(p2) {
 }
 function isDir(p2) {
   try {
-    return fs17.statSync(p2).isDirectory();
+    return fs19.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p2) {
   try {
-    return fs17.readdirSync(p2);
+    return fs19.readdirSync(p2);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p2) {
   try {
-    fs17.rmdirSync(p2);
+    fs19.rmdirSync(p2);
   } catch {
   }
 }
@@ -28051,6 +28416,113 @@ function buildCapabilityHandlers(deps) {
   };
 }
 
+// src/handlers/inbox.ts
+init_protocol();
+function buildInboxHandlers(deps) {
+  const { manager, capabilityRegistry } = deps;
+  function resolvePeerPrincipal(peerId) {
+    if (peerId === "owner") {
+      return { id: "owner", kind: "owner", displayName: "owner" };
+    }
+    const cap = capabilityRegistry.findById(peerId);
+    if (!cap) {
+      throw new ClawdError(
+        ERROR_CODES.VALIDATION_ERROR,
+        `peer principal not found: ${peerId}`
+      );
+    }
+    return { id: cap.id, kind: "guest", displayName: cap.displayName };
+  }
+  const list = async (frame) => {
+    const { type: _t, requestId: _r, ...rest } = frame;
+    const args = InboxListArgsSchema.parse(rest);
+    const events = manager.list({ includeRead: args.includeRead ?? false });
+    return {
+      response: { type: "inbox:list", events }
+    };
+  };
+  const markRead = async (frame) => {
+    const { type: _t, requestId: _r, ...rest } = frame;
+    const args = InboxMarkReadArgsSchema.parse(rest);
+    manager.markRead(args.eventId);
+    return {
+      response: { type: "inbox:markRead:ok", eventId: args.eventId }
+    };
+  };
+  const postMessage = async (frame, _client, ctx) => {
+    const { type: _t, requestId: _r, ...rest } = frame;
+    const args = InboxPostMessageArgsSchema.parse(rest);
+    if (!ctx) {
+      throw new ClawdError(ERROR_CODES.INTERNAL, "inbox:postMessage: missing ConnectionContext");
+    }
+    const peer = resolvePeerPrincipal(args.peerPrincipalId);
+    const ev = manager.recordDirectMessage({
+      from: ctx.principal,
+      to: peer,
+      text: args.text
+    });
+    return {
+      response: { type: "inbox:postMessage:ok", event: ev }
+    };
+  };
+  return {
+    "inbox:list": list,
+    "inbox:markRead": markRead,
+    "inbox:postMessage": postMessage
+  };
+}
+
+// src/handlers/remote-persona.ts
+init_protocol();
+function buildRemotePersonaHandlers(deps) {
+  const { store } = deps;
+  const now = deps.now ?? Date.now;
+  const add = async (frame) => {
+    const { type: _t, requestId: _r, ...rest } = frame;
+    const args = RemotePersonaAddArgsSchema.parse(rest);
+    const rp = {
+      ...args,
+      addedAt: now()
+    };
+    try {
+      store.add(rp);
+    } catch (err) {
+      if (err.message?.includes("alias already exists")) {
+        throw new ClawdError(
+          ERROR_CODES.VALIDATION_ERROR,
+          `remote-persona alias already exists: ${args.alias}`
+        );
+      }
+      throw err;
+    }
+    return {
+      response: { type: "remote-persona:add:ok", remotePersona: stripRemotePersonaSecret(rp) }
+    };
+  };
+  const list = async () => {
+    const all = store.list();
+    return {
+      response: {
+        type: "remote-persona:list",
+        remotePersonas: all.map(stripRemotePersonaSecret)
+      }
+    };
+  };
+  const remove = async (frame) => {
+    const { type: _t, requestId: _r, ...rest } = frame;
+    const args = RemotePersonaRemoveArgsSchema.parse(rest);
+    const removed = store.remove(args.alias);
+    return {
+      response: { type: "remote-persona:remove:ok", alias: args.alias, removed }
+    };
+  };
+  return {
+    "remote-persona:add": add,
+    "remote-persona:list": list,
+    "remote-persona:remove": remove
+  };
+}
+
 // src/handlers/meta.ts
 var import_node_os13 = __toESM(require("os"), 1);
 init_protocol();
@@ -28303,6 +28775,11 @@ function buildMethodHandlers(deps) {
       personaRegistry: deps.personaRegistry
     }),
     ...buildCapabilityHandlers({ manager: deps.capabilityManager }),
+    ...buildInboxHandlers({
+      manager: deps.inboxManager,
+      capabilityRegistry: deps.capabilityRegistry
+    }),
+    ...buildRemotePersonaHandlers({ store: deps.remotePersonaStore }),
     ...deps.attachment ? buildAttachmentHandlers(deps.attachment) : {}
   };
 }
@@ -28321,6 +28798,16 @@ var METHOD_GRANT_MAP = {
   "capability:issue": ADMIN_ANY,
   "capability:list": ADMIN_ANY,
   "capability:revoke": ADMIN_ANY,
+  // ---- inbox 跨用户通知 (Phase 3 admin-only, owner 调; Phase 4 加 postMessage) ----
+  "inbox:list": ADMIN_ANY,
+  "inbox:markRead": ADMIN_ANY,
+  // Phase 4 Task 4.2: DM 是 capability 自带能力 (plan §2),
+  // 任何 principal (owner / guest) 可调, 不通过 grant 表达.
+  "inbox:postMessage": { kind: "public" },
+  // Phase 4 Task 4.3: 远程 persona 仅 owner 管理 (admin-only)
+  "remote-persona:add": ADMIN_ANY,
+  "remote-persona:list": ADMIN_ANY,
+  "remote-persona:remove": ADMIN_ANY,
   // ---- 业务方法：Phase 1 全 admin-only（owner 自动通过；guest 无法调用） ----
   "session:create": ADMIN_ANY,
   "session:list": ADMIN_ANY,
@@ -28451,6 +28938,18 @@ async function startDaemon(config) {
       }
     }
   });
+  const inboxStore = new InboxStore(config.dataDir);
+  const remotePersonaStore = new RemotePersonaStore(config.dataDir);
+  const inboxManager = new InboxManager(inboxStore, (frame) => {
+    if (frame.event.kind === "direct-message") {
+      const fromId = frame.event.fromPrincipal.id;
+      const toId = frame.event.toPrincipal.id;
+      wsServer?.broadcastToPrincipal(fromId, frame);
+      if (toId !== fromId) wsServer?.broadcastToPrincipal(toId, frame);
+      return;
+    }
+    wsServer?.broadcastToOwners(frame);
+  });
   let wsServer = null;
   const authGate = authMode === "first-message" ? new AuthGate({
     shouldEnforce: buildShouldEnforce({ tunnel: config.tunnel }),
@@ -28640,7 +29139,13 @@ async function startDaemon(config) {
       }
     },
     // Task 1.9: capability:issue/list/revoke handler 依赖
-    capabilityManager
+    capabilityManager,
+    // Phase 4 Task 4.2: inbox:postMessage 要查 capabilityRegistry 解析 peer Principal
+    capabilityRegistry,
+    // Phase 3 Task 3.4: inbox:list/markRead handler 依赖
+    inboxManager,
+    // Phase 4 Task 4.3: remote-persona:* handler 依赖 (本地存储, v1 不接 outgoing WS)
+    remotePersonaStore
   });
   const authResolver = new AuthContextResolver({
     ownerToken: resolvedAuthToken,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawos-dev/clawd",
-  "version": "0.2.71-beta.124.b09b0a0",
+  "version": "0.2.71-beta.126.06f4cfa",
   "description": "Standalone clawd daemon — Claude Code (and future Codex) session server over WebSocket",
   "type": "module",
   "license": "MIT",