@clawos-dev/clawd 0.2.81-beta.152.ab64214 → 0.2.82-beta.153.5114ee6

package/dist/cli.cjs

@@ -119,18 +119,15 @@ var init_methods = __esm({
       "attachment.groupRemove",
       "attachment.groupList",
       // ---- capability:* (capability platform 鉴权底座) ----
-      // owner 颁发 / 列出 / 删除给 guest 的 capability。三者均需 admin 权限（METHOD_GRANT_MAP
-      // 在 daemon 端固定为 `{ resource: '*', action: 'admin' }`，owner 自动满足）。
-      // 颁发后 daemon 推 'capability:tokenIssued' 帧；删除推 'capability:tokenDeleted' 帧。
-      // 删除是 hard delete：CapabilityStore 物理移除 + 关该 cap 的所有活跃 ws + rm
-      // personas/<pid>/.clawd/sessions/guests/<capId>/ guest sessions 目录。
-      "capability:issue",
+      // global personal token 模型 (2026-05-25): UI 不再调 capability:issue —— daemon 启动时
+      // loadOrCreatePersonalCapability 自动创建 1 张 fixed-grants 的 personal capability,
+      // 所有联系人共用 personal token。capability:list / capability:delete 保留 (供调试 /
+      // 老板手动清旧 cap)；capability:issue / capability:bindPeer 已下线。
       "capability:list",
       "capability:delete",
-      // bidirectional cap 视角 B 2026-05-23: owner 主动告诉 daemon "我颁的某 cap 给了谁"
-      // (UI 在 accept dialog 4 步流程里调; 等价于 recordPeerHello 但不经 ws auth path).
-      // 否则 B 端颁回的 cap 因为 A 不连 B → peerOwnerId 永不回写 → useContacts 派生 pending.
-      "capability:bindPeer",
+      // global personal token (2026-05-25): UI invite/accept dialog 挂载即调，拿 personal
+      // token + capability + shareBaseUrl 用于拼 inviteUrl / autoAttach 反向推。owner-only。
+      "personal-cap:get",
       // ---- inbox:* (capability platform Phase 3 跨用户通知 + Phase 4 DM) ----
       // owner 接 guest 的 cross-principal 消息事件 + DM 双向私聊.
       // inbox:list / markRead: admin-only (Phase 3); inbox:postMessage: DM 自带能力,
@@ -646,8 +643,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path42, errorMaps, issueData } = params;
-      const fullPath = [...path42, ...issueData.path || []];
+      const { data, path: path43, errorMaps, issueData } = params;
+      const fullPath = [...path43, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -958,11 +955,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path42, key) {
+      constructor(parent, value, path43, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path42;
+        this._path = path43;
         this._key = key;
       }
       get path() {
@@ -5109,7 +5106,7 @@ function stripSecretHash(cap) {
   const { secretHash: _hash, ...wire } = cap;
   return wire;
 }
-var ResourceSchema, ActionSchema, GrantSchema, CapabilitySchema, CapabilityWireSchema, CapabilityErrorCodeSchema, WhoamiResponseSchema, CapabilityIssueArgsSchema, CapabilityBindPeerArgsSchema;
+var ResourceSchema, ActionSchema, GrantSchema, CapabilitySchema, CapabilityWireSchema, CapabilityErrorCodeSchema, WhoamiResponseSchema, PERSONAL_CAP_GRANTS, PersonalCapGetResponseSchema;
 var init_capability = __esm({
   "../protocol/src/capability.ts"() {
     "use strict";
@@ -5171,16 +5168,18 @@ var init_capability = __esm({
         }).strict()
       )
     }).strict();
-    CapabilityIssueArgsSchema = external_exports.object({
-      displayName: external_exports.string().min(1),
-      grants: external_exports.array(GrantSchema),
-      expiresAt: external_exports.number().int().positive().optional(),
-      maxUses: external_exports.number().int().positive().optional()
-    }).strict();
-    CapabilityBindPeerArgsSchema = external_exports.object({
-      capabilityId: external_exports.string().min(1),
-      peerOwnerId: external_exports.string().min(1),
-      peerDisplayName: external_exports.string()
+    PERSONAL_CAP_GRANTS = Object.freeze([
+      Object.freeze({
+        resource: Object.freeze({ type: "persona", id: "*" }),
+        actions: Object.freeze(["read", "send"])
+      })
+    ]);
+    PersonalCapGetResponseSchema = external_exports.object({
+      type: external_exports.literal("personal-cap:get:ok"),
+      token: external_exports.string().min(1),
+      capability: CapabilityWireSchema,
+      /** ws/wss base URL，UI deriveInviteBase 用来拼 inviteUrl（tunnel 优先 / 否则本机 ws） */
+      shareBaseUrl: external_exports.string().min(1)
     }).strict();
   }
 });
@@ -5564,8 +5563,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path42 = req.path;
-        _req.url = typeof path42 === "string" ? path42 : req.url ? req.url.path || req.url : void 0;
+        const path43 = req.path;
+        _req.url = typeof path43 === "string" ? path43 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -5730,14 +5729,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path42) {
+    function parsePath(path43) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path42.length; i++) {
-        const char = path42[i];
+      for (let i = 0; i < path43.length; i++) {
+        const char = path43[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -5868,10 +5867,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path42 of paths) {
-        const parts = parsePath(path42);
+      for (const path43 of paths) {
+        const parts = parsePath(path43);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path42, remove);
+          redactWildcardPath(obj, parts, censor, path43, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -5956,8 +5955,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path42) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path42];
+            const wrappedCensor = typeof censor === "function" ? (value, path43) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path43];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -5992,8 +5991,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path42 of pathsToClone) {
-        const parts = parsePath(path42);
+      for (const path43 of pathsToClone) {
+        const parts = parsePath(path43);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -6045,24 +6044,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path42) {
-      if (typeof path42 !== "string") {
+    function validatePath(path43) {
+      if (typeof path43 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path42 === "") {
+      if (path43 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path42.includes("..")) {
-        throw new Error(`Invalid redaction path (${path42})`);
+      if (path43.includes("..")) {
+        throw new Error(`Invalid redaction path (${path43})`);
       }
-      if (path42.includes(",")) {
-        throw new Error(`Invalid redaction path (${path42})`);
+      if (path43.includes(",")) {
+        throw new Error(`Invalid redaction path (${path43})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path42.length; i++) {
-        const char = path42[i];
+      for (let i = 0; i < path43.length; i++) {
+        const char = path43[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -6076,20 +6075,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path42})`);
+            throw new Error(`Invalid redaction path (${path43})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path42})`);
+        throw new Error(`Invalid redaction path (${path43})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path42 of paths) {
-        validatePath(path42);
+      for (const path43 of paths) {
+        validatePath(path43);
       }
     }
     function slowRedact(options = {}) {
@@ -6257,8 +6256,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path42) => {
-            return censor(value, [k2, ...path42]);
+          const wrappedCensor = typeof censor === "function" ? (value, path43) => {
+            return censor(value, [k2, ...path43]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -6476,10 +6475,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs33 = require("fs");
+    var fs34 = require("fs");
     var EventEmitter2 = require("events");
     var inherits = require("util").inherits;
-    var path42 = require("path");
+    var path43 = require("path");
     var sleep = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -6533,20 +6532,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs33.mkdirSync(path42.dirname(file), { recursive: true });
-          const fd = fs33.openSync(file, flags, mode);
+          if (sonic.mkdir) fs34.mkdirSync(path43.dirname(file), { recursive: true });
+          const fd = fs34.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs33.mkdir(path42.dirname(file), { recursive: true }, (err) => {
+        fs34.mkdir(path43.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs33.open(file, flags, mode, fileOpened);
+          fs34.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs33.open(file, flags, mode, fileOpened);
+        fs34.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -6587,8 +6586,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs33.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs33.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs34.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs34.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -6597,15 +6596,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs33.writeSync(this.fd, this._writingBuf);
+            return fs34.writeSync(this.fd, this._writingBuf);
           }
-          return fs33.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs34.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs33.write(this.fd, this._writingBuf, this.release);
+            return fs34.write(this.fd, this._writingBuf, this.release);
           }
-          return fs33.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs34.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -6662,7 +6661,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs33.fsyncSync(this.fd);
+          fs34.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -6776,7 +6775,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs33.fsync(this.fd, (err) => {
+            fs34.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -6878,7 +6877,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs33.close(fd, (err) => {
+          fs34.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -6927,7 +6926,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs33.writeSync(this.fd, buf) : fs33.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs34.writeSync(this.fd, buf) : fs34.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -6943,7 +6942,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs33.fsyncSync(this.fd);
+        fs34.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -6964,7 +6963,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs33.writeSync(this.fd, buf);
+          const n = fs34.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -6992,13 +6991,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs33.writeSync(this.fd, this._writingBuf) : fs33.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs34.writeSync(this.fd, this._writingBuf) : fs34.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs33.write(this.fd, this._writingBuf, release);
+        fs34.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -7007,7 +7006,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs33.writeSync(this.fd, this._writingBuf);
+          const written = fs34.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -7016,7 +7015,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs33.write(this.fd, this._writingBuf, release);
+        fs34.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -7032,12 +7031,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs33.fsync(sonic.fd, closeWrapped);
+        fs34.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs33.close(sonic.fd, done);
+          fs34.close(sonic.fd, done);
         } else {
           done();
         }
@@ -10172,11 +10171,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path42, added, removed, oldPosInc, options) {
-        var last = path42.lastComponent;
+      addToPath: function addToPath(path43, added, removed, oldPosInc, options) {
+        var last = path43.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path42.oldPos + oldPosInc,
+            oldPos: path43.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -10186,7 +10185,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path42.oldPos + oldPosInc,
+            oldPos: path43.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -10617,10 +10616,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path42 = typeof rec.path === "string" ? rec.path : null;
+      const path43 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path42 || content == null) return null;
-      const entry = { path: path42, content };
+      if (!path43 || content == null) return null;
+      const entry = { path: path43, content };
       if (typeof rec.mtimeMs === "number") entry.mtimeMs = rec.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -11446,10 +11445,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path42 = typeof rec.path === "string" ? rec.path : null;
+      const path43 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path42 || content == null) return null;
-      const out = { path: path42, content };
+      if (!path43 || content == null) return null;
+      const out = { path: path43, content };
       if (typeof rec.mtimeMs === "number") out.mtimeMs = rec.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -18948,7 +18947,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes2, createHash: createHash3 } = require("crypto");
+    var { randomBytes, createHash: createHash2 } = require("crypto");
     var { Duplex, Readable: Readable3 } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -19478,7 +19477,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes2(16).toString("base64");
+      const key = randomBytes(16).toString("base64");
       const request = isSecure ? https.request : http2.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -19608,7 +19607,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash3("sha1").update(key + GUID).digest("base64");
+        const digest = createHash2("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -19975,7 +19974,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter2 = require("events");
     var http2 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash3 } = require("crypto");
+    var { createHash: createHash2 } = require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -20276,7 +20275,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash3("sha1").update(key + GUID).digest("base64");
+        const digest = createHash2("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -20364,7 +20363,7 @@ var require_websocket_server = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path28.default.dirname(opts.recordPath);
+  const dir = import_node_path29.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -20378,8 +20377,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs25.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs25.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs26.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs26.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -20404,12 +20403,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs25, import_node_path28;
+var import_node_fs26, import_node_path29;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs25 = __toESM(require("fs"), 1);
-    import_node_path28 = __toESM(require("path"), 1);
+    import_node_fs26 = __toESM(require("fs"), 1);
+    import_node_path29 = __toESM(require("path"), 1);
   }
 });
 
@@ -20452,7 +20451,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs26.mkdtempSync)(import_node_path29.default.join(import_node_os14.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs27.mkdtempSync)(import_node_path30.default.join(import_node_os14.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -20613,19 +20612,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs26.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs27.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs26, import_node_os14, import_node_path29;
+var import_node_fs27, import_node_os14, import_node_path30;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs26 = require("fs");
+    import_node_fs27 = require("fs");
     import_node_os14 = __toESM(require("os"), 1);
-    import_node_path29 = __toESM(require("path"), 1);
+    import_node_path30 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -20857,8 +20856,8 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path27 = __toESM(require("path"), 1);
-var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_path28 = __toESM(require("path"), 1);
+var import_node_fs25 = __toESM(require("fs"), 1);
 
 // src/logger.ts
 var import_node_fs2 = __toESM(require("fs"), 1);
@@ -26233,11 +26232,12 @@ function ownerContext(ownerPrincipalId, displayName) {
     grants: [{ resource: { type: "*" }, actions: ["admin"] }]
   };
 }
-function guestContext(cap) {
+function guestContext(cap, peerOwnerPrincipalId) {
   return {
     principal: { id: cap.id, kind: "guest", displayName: cap.displayName },
     grants: cap.grants,
-    capabilityId: cap.id
+    capabilityId: cap.id,
+    ...peerOwnerPrincipalId ? { peerOwnerPrincipalId } : {}
   };
 }
 function authenticate(token, deps) {
@@ -26251,17 +26251,7 @@ function authenticate(token, deps) {
     if (v2.code === "TOKEN_INVALID") return { ok: false, code: "BAD_TOKEN" };
     return { ok: false, code: v2.code };
   }
-  if (deps.selfPrincipalId && deps.selfDisplayName && deps.onGuestHello) {
-    try {
-      deps.onGuestHello(v2.capability.id, deps.selfPrincipalId, deps.selfDisplayName);
-    } catch (e) {
-      if (e.message === "TOKEN_SHARED_LEAK") {
-        return { ok: false, code: "TOKEN_REVOKED" };
-      }
-      throw e;
-    }
-  }
-  return { ok: true, context: guestContext(v2.capability) };
+  return { ok: true, context: guestContext(v2.capability, deps.selfPrincipalId) };
 }
 
 // src/permission/capability-store.ts
@@ -26397,7 +26387,6 @@ function sha256Hex(s) {
 }
 
 // src/permission/capability-manager.ts
-var crypto5 = __toESM(require("crypto"), 1);
 var CapabilityManager = class {
   constructor(registry2, hooks = {}) {
     this.registry = registry2;
@@ -26413,54 +26402,6 @@ var CapabilityManager = class {
   findById(id) {
     return this.registry.findById(id);
   }
-  issue(args) {
-    if (!args.displayName.trim()) {
-      throw new Error("CapabilityManager.issue: displayName must be non-empty");
-    }
-    const token = (this.hooks.generateToken ?? defaultGenerateToken)();
-    const id = (this.hooks.generateId ?? defaultGenerateId)();
-    const now = (this.hooks.now ?? Date.now)();
-    const cap = {
-      id,
-      secretHash: sha256Hex2(token),
-      displayName: args.displayName,
-      grants: args.grants,
-      issuedAt: now,
-      usedCount: 0,
-      ...args.expiresAt !== void 0 ? { expiresAt: args.expiresAt } : {},
-      ...args.maxUses !== void 0 ? { maxUses: args.maxUses } : {}
-    };
-    this.registry.upsertCapability(cap);
-    this.hooks.onIssued?.(cap, token);
-    return { token, capability: cap };
-  }
-  /**
-   * guest 端 auth 帧捎带 selfPrincipalId/selfDisplayName 时，AuthGate.authenticate
-   * 校验 cap token 通过后调本方法把 peer 字段写回 cap：
-   *   - 首次（cap.firstUsedByPeerAt 未设）→ 写盘 + 触发 onIssued 复用 push 频道
-   *     让 owner UI 通过 capability:updated 实时拿到 peer 字段
-   *   - 重复（同 peerOwnerId）→ noop
-   *   - 冲突（不同 peerOwnerId）→ throw TOKEN_SHARED_LEAK，AuthGate 转 close 4401
-   */
-  recordPeerHello(capId, args) {
-    const cap = this.registry.findById(capId);
-    if (!cap) return { changed: false };
-    if (cap.firstUsedByPeerAt != null) {
-      if (cap.peerOwnerId !== args.ownerPrincipalId) {
-        throw new Error("TOKEN_SHARED_LEAK");
-      }
-      return { changed: false };
-    }
-    const updated = {
-      ...cap,
-      peerOwnerId: args.ownerPrincipalId,
-      firstUsedByPeerAt: args.now,
-      peerDisplayName: args.displayName
-    };
-    this.registry.upsertCapability(updated);
-    this.hooks.onIssued?.(updated, "__peer_hello__");
-    return { changed: true };
-  }
   /**
    * Hard delete：从 registry / store 物理移除 capability。
    * idempotent：不存在 → null（handler 翻译成 VALIDATION_ERROR）
@@ -26473,15 +26414,6 @@ var CapabilityManager = class {
     return { capability: removed };
   }
 };
-function defaultGenerateToken() {
-  return crypto5.randomBytes(24).toString("base64url");
-}
-function defaultGenerateId() {
-  return "cap_" + crypto5.randomBytes(6).toString("base64url");
-}
-function sha256Hex2(s) {
-  return crypto5.createHash("sha256").update(s).digest("hex");
-}
 
 // src/permission/cleanup.ts
 var fs16 = __toESM(require("fs"), 1);
@@ -26499,14 +26431,89 @@ function cleanupGuestSessionsForCapability(cap, factory) {
   return { removed };
 }
 
+// src/permission/personal-capability.ts
+var import_node_fs13 = __toESM(require("fs"), 1);
+var import_node_path14 = __toESM(require("path"), 1);
+var import_node_crypto4 = __toESM(require("crypto"), 1);
+var PERSONAL_CAP_FILE_NAME = "personal-capability.json";
+var PERSONAL_CAP_DISPLAY_NAME = "personal";
+function personalCapFilePath(dataDir) {
+  return import_node_path14.default.join(dataDir, PERSONAL_CAP_FILE_NAME);
+}
+function loadOrCreatePersonalCapability(opts) {
+  const file = personalCapFilePath(opts.dataDir);
+  const generateToken = opts.generateToken ?? defaultGenerateToken;
+  const generateId = opts.generateId ?? defaultGenerateId;
+  const now = opts.now ?? Date.now;
+  const existing = readFile(file);
+  if (existing) return existing;
+  const token = generateToken();
+  const id = generateId();
+  const capability = {
+    id,
+    secretHash: sha256Hex2(token),
+    displayName: PERSONAL_CAP_DISPLAY_NAME,
+    // CapabilitySchema 期待 mutable Grant[]，protocol 常量是 readonly，落盘前拷一份
+    grants: PERSONAL_CAP_GRANTS.map((g2) => ({
+      resource: { ...g2.resource },
+      actions: [...g2.actions]
+    })),
+    issuedAt: now(),
+    usedCount: 0
+  };
+  const content = { token, capability };
+  writeFile(file, content);
+  return content;
+}
+function readFile(file) {
+  let raw;
+  try {
+    raw = import_node_fs13.default.readFileSync(file, "utf8");
+  } catch (err) {
+    const code = err?.code;
+    if (code === "ENOENT") return null;
+    return null;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (!parsed || typeof parsed !== "object") return null;
+  const obj = parsed;
+  if (typeof obj.token !== "string" || obj.token.length === 0) return null;
+  const capParsed = CapabilitySchema.safeParse(obj.capability);
+  if (!capParsed.success) return null;
+  if (sha256Hex2(obj.token) !== capParsed.data.secretHash) return null;
+  return { token: obj.token, capability: capParsed.data };
+}
+function writeFile(file, content) {
+  import_node_fs13.default.mkdirSync(import_node_path14.default.dirname(file), { recursive: true });
+  import_node_fs13.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  try {
+    import_node_fs13.default.chmodSync(file, 384);
+  } catch {
+  }
+}
+function defaultGenerateToken() {
+  return import_node_crypto4.default.randomBytes(24).toString("base64url");
+}
+function defaultGenerateId() {
+  return "personal_" + import_node_crypto4.default.randomBytes(6).toString("base64url");
+}
+function sha256Hex2(s) {
+  return import_node_crypto4.default.createHash("sha256").update(s).digest("hex");
+}
+
 // src/inbox/inbox-store.ts
-var fs17 = __toESM(require("fs"), 1);
-var path19 = __toESM(require("path"), 1);
+var fs18 = __toESM(require("fs"), 1);
+var path20 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs17.mkdirSync(this.dirPath(), { recursive: true });
+    fs18.mkdirSync(this.dirPath(), { recursive: true });
   }
   dataDir;
   /**
@@ -26518,7 +26525,7 @@ var InboxStore = class {
     const file = this.filePath(peerOwnerId);
     let raw;
     try {
-      raw = fs17.readFileSync(file, "utf8");
+      raw = fs18.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -26534,7 +26541,7 @@ var InboxStore = class {
     const dir = this.dirPath();
     let entries;
     try {
-      entries = fs17.readdirSync(dir);
+      entries = fs18.readdirSync(dir);
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -26550,9 +26557,9 @@ var InboxStore = class {
     if (existing.some((m2) => m2.id === message.id)) return;
     const file = this.filePath(message.peerOwnerId);
     const line = JSON.stringify(message) + "\n";
-    fs17.appendFileSync(file, line, { mode: 384 });
+    fs18.appendFileSync(file, line, { mode: 384 });
     try {
-      fs17.chmodSync(file, 384);
+      fs18.chmodSync(file, 384);
     } catch {
     }
   }
@@ -26582,7 +26589,7 @@ var InboxStore = class {
   removeByPeerOwnerId(peerOwnerId) {
     const file = this.filePath(peerOwnerId);
     try {
-      fs17.unlinkSync(file);
+      fs18.unlinkSync(file);
     } catch (err) {
       if (err?.code === "ENOENT") return;
     }
@@ -26591,18 +26598,18 @@ var InboxStore = class {
     const file = this.filePath(peerOwnerId);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     const content = messages.map((m2) => JSON.stringify(m2)).join("\n") + (messages.length > 0 ? "\n" : "");
-    fs17.writeFileSync(tmp, content, { mode: 384 });
-    fs17.renameSync(tmp, file);
+    fs18.writeFileSync(tmp, content, { mode: 384 });
+    fs18.renameSync(tmp, file);
     try {
-      fs17.chmodSync(file, 384);
+      fs18.chmodSync(file, 384);
     } catch {
     }
   }
   dirPath() {
-    return path19.join(this.dataDir, INBOX_SUBDIR);
+    return path20.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerOwnerId) {
-    return path19.join(this.dirPath(), `${peerOwnerId}.jsonl`);
+    return path20.join(this.dirPath(), `${peerOwnerId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -26689,8 +26696,8 @@ var InboxManager = class {
 };
 
 // src/state/received-capability-store.ts
-var fs18 = __toESM(require("fs"), 1);
-var path20 = __toESM(require("path"), 1);
+var fs19 = __toESM(require("fs"), 1);
+var path21 = __toESM(require("path"), 1);
 var FILE_NAME = "received-capabilities.json";
 var ReceivedCapabilityStore = class {
   constructor(dataDir) {
@@ -26700,10 +26707,10 @@ var ReceivedCapabilityStore = class {
   caps = /* @__PURE__ */ new Map();
   load() {
     this.caps.clear();
-    const file = path20.join(this.dataDir, FILE_NAME);
+    const file = path21.join(this.dataDir, FILE_NAME);
     let raw;
     try {
-      raw = fs18.readFileSync(file, "utf8");
+      raw = fs19.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code !== "ENOENT") this.renameBak(file);
       return;
@@ -26740,20 +26747,20 @@ var ReceivedCapabilityStore = class {
     this.flush();
   }
   flush() {
-    const file = path20.join(this.dataDir, FILE_NAME);
+    const file = path21.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
       { receivedCaps: Array.from(this.caps.values()) },
       null,
       2
     );
-    fs18.mkdirSync(this.dataDir, { recursive: true });
-    fs18.writeFileSync(tmp, content, { mode: 384 });
-    fs18.renameSync(tmp, file);
+    fs19.mkdirSync(this.dataDir, { recursive: true });
+    fs19.writeFileSync(tmp, content, { mode: 384 });
+    fs19.renameSync(tmp, file);
   }
   renameBak(file) {
     try {
-      fs18.renameSync(file, `${file}.bak`);
+      fs19.renameSync(file, `${file}.bak`);
     } catch {
     }
   }
@@ -26851,61 +26858,61 @@ async function connectRemote(args) {
 }
 
 // src/migrations/2026-05-20-flatten-sessions.ts
-var fs19 = __toESM(require("fs"), 1);
-var path21 = __toESM(require("path"), 1);
+var fs20 = __toESM(require("fs"), 1);
+var path22 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path21.join(dataDir, "sessions");
-  const flagPath = path21.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path22.join(dataDir, "sessions");
+  const flagPath = path22.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path21.join(sessionsDir, "default");
+  const defaultDir = path22.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path21.join(defaultDir, entry);
-      const dst = path21.join(sessionsDir, entry);
-      fs19.renameSync(src, dst);
+      const src = path22.join(defaultDir, entry);
+      const dst = path22.join(sessionsDir, entry);
+      fs20.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path21.join(sessionsDir, pid);
+    const personaDir = path22.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path21.join(personaDir, "owner");
+    const ownerSrc = path22.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path21.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs19.mkdirSync(ownerDst, { recursive: true });
+      const ownerDst = path22.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      fs20.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs19.renameSync(path21.join(ownerSrc, file), path21.join(ownerDst, file));
+        fs20.renameSync(path22.join(ownerSrc, file), path22.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path21.join(personaDir, "listener");
+    const listenerSrc = path22.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path21.join(dataDir, ".legacy", `listener-${pid}`);
-      fs19.mkdirSync(archiveDst, { recursive: true });
+      const archiveDst = path22.join(dataDir, ".legacy", `listener-${pid}`);
+      fs20.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs19.renameSync(path21.join(listenerSrc, file), path21.join(archiveDst, file));
+        fs20.renameSync(path22.join(listenerSrc, file), path22.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs19.mkdirSync(sessionsDir, { recursive: true });
-  fs19.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs20.mkdirSync(sessionsDir, { recursive: true });
+  fs20.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -26916,7 +26923,7 @@ function migrateFlattenSessions(opts) {
 }
 function existsSync3(p2) {
   try {
-    fs19.statSync(p2);
+    fs20.statSync(p2);
     return true;
   } catch {
     return false;
@@ -26924,31 +26931,31 @@ function existsSync3(p2) {
 }
 function isDir(p2) {
   try {
-    return fs19.statSync(p2).isDirectory();
+    return fs20.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p2) {
   try {
-    return fs19.readdirSync(p2);
+    return fs20.readdirSync(p2);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p2) {
   try {
-    fs19.rmdirSync(p2);
+    fs20.rmdirSync(p2);
   } catch {
   }
 }
 
 // src/transport/http-router.ts
-var import_node_fs13 = __toESM(require("fs"), 1);
-var import_node_path15 = __toESM(require("path"), 1);
+var import_node_fs14 = __toESM(require("fs"), 1);
+var import_node_path16 = __toESM(require("path"), 1);
 
 // src/attachment/mime.ts
-var import_node_path14 = __toESM(require("path"), 1);
+var import_node_path15 = __toESM(require("path"), 1);
 var TEXT_PLAIN = "text/plain; charset=utf-8";
 var EXT_TO_NATIVE_MIME = {
   // 图片
@@ -27055,14 +27062,14 @@ var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
   ".mk"
 ]);
 function lookupMime(filePathOrName) {
-  const ext = import_node_path14.default.extname(filePathOrName).toLowerCase();
+  const ext = import_node_path15.default.extname(filePathOrName).toLowerCase();
   if (EXT_TO_NATIVE_MIME[ext]) return EXT_TO_NATIVE_MIME[ext];
   if (TEXT_EXTENSIONS.has(ext)) return TEXT_PLAIN;
   return "application/octet-stream";
 }
 
 // src/attachment/sign-url.ts
-var import_node_crypto4 = __toESM(require("crypto"), 1);
+var import_node_crypto5 = __toESM(require("crypto"), 1);
 var HMAC_ALGO = "sha256";
 function base64urlEncode(buf) {
   const b2 = typeof buf === "string" ? Buffer.from(buf, "utf8") : buf;
@@ -27079,7 +27086,7 @@ function decodeAbsPathFromUrl(encoded) {
 }
 function computeSig(secret, absPath, e) {
   const msg = e === null ? absPath : `${absPath}|${e}`;
-  return import_node_crypto4.default.createHmac(HMAC_ALGO, secret).update(msg).digest();
+  return import_node_crypto5.default.createHmac(HMAC_ALGO, secret).update(msg).digest();
 }
 function signUrlParts(secret, absPath, ttlSeconds, now = Date.now) {
   const e = ttlSeconds === null ? null : Math.floor(now() / 1e3) + ttlSeconds;
@@ -27114,7 +27121,7 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
   if (provided.length !== expected.length) {
     return { ok: false, code: "BAD_SIG" };
   }
-  if (!import_node_crypto4.default.timingSafeEqual(provided, expected)) {
+  if (!import_node_crypto5.default.timingSafeEqual(provided, expected)) {
     return { ok: false, code: "BAD_SIG" };
   }
   if (e !== null && now() / 1e3 > e) {
@@ -27132,9 +27139,7 @@ function createHttpRouter(deps) {
       return true;
     }
     if (url.pathname === "/healthz" && req.method === "GET") {
-      sendJson(res, 200, { ok: true, version: deps.daemonVersion }, {
-        "Access-Control-Allow-Origin": "*"
-      });
+      sendJson(res, 200, { ok: true, version: deps.daemonVersion });
       return true;
     }
     if (!url.pathname.startsWith("/session/") && !url.pathname.startsWith("/files/")) {
@@ -27186,7 +27191,7 @@ function createHttpRouter(deps) {
         return true;
       }
       let absPath;
-      if (import_node_path15.default.isAbsolute(pathParam)) {
+      if (import_node_path16.default.isAbsolute(pathParam)) {
         absPath = pathParam;
       } else if (deps.sessionStore) {
         const file = deps.sessionStore.read(sid);
@@ -27194,7 +27199,7 @@ function createHttpRouter(deps) {
           sendJson(res, 404, { code: "NOT_FOUND", message: `session ${sid} not found` });
           return true;
         }
-        absPath = import_node_path15.default.join(file.cwd, pathParam);
+        absPath = import_node_path16.default.join(file.cwd, pathParam);
       } else {
         sendJson(res, 501, withCtx(ctx, { code: "NOT_IMPLEMENTED", message: "sessionStore not wired" }));
         return true;
@@ -27214,11 +27219,8 @@ function parseUrl(rawUrl) {
     return null;
   }
 }
-function sendJson(res, status, body, extraHeaders) {
-  res.writeHead(status, {
-    "Content-Type": "application/json; charset=utf-8",
-    ...extraHeaders ?? {}
-  });
+function sendJson(res, status, body) {
+  res.writeHead(status, { "Content-Type": "application/json; charset=utf-8" });
   res.end(JSON.stringify(body));
 }
 function withCtx(ctx, body) {
@@ -27227,7 +27229,7 @@ function withCtx(ctx, body) {
 function streamFile(res, absPath, logger) {
   let stat;
   try {
-    stat = import_node_fs13.default.statSync(absPath);
+    stat = import_node_fs14.default.statSync(absPath);
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") {
@@ -27242,7 +27244,7 @@ function streamFile(res, absPath, logger) {
     return;
   }
   const mime = lookupMime(absPath);
-  const basename = import_node_path15.default.basename(absPath);
+  const basename = import_node_path16.default.basename(absPath);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": String(stat.size),
@@ -27250,7 +27252,7 @@ function streamFile(res, absPath, logger) {
     // 防止浏览器把任意 mime 当 html 渲染
     "X-Content-Type-Options": "nosniff"
   });
-  const stream = import_node_fs13.default.createReadStream(absPath);
+  const stream = import_node_fs14.default.createReadStream(absPath);
   stream.on("error", (err) => {
     logger?.warn("streamFile read error", { absPath, err: err.message });
     res.destroy();
@@ -27259,9 +27261,9 @@ function streamFile(res, absPath, logger) {
 }
 
 // src/attachment/group.ts
-var import_node_fs14 = __toESM(require("fs"), 1);
-var import_node_path16 = __toESM(require("path"), 1);
-var import_node_crypto5 = __toESM(require("crypto"), 1);
+var import_node_fs15 = __toESM(require("fs"), 1);
+var import_node_path17 = __toESM(require("path"), 1);
+var import_node_crypto6 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
   dataDir;
@@ -27272,11 +27274,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path16.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path17.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path16.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path17.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -27285,7 +27287,7 @@ var GroupFileStore = class {
   readFile(scope, sessionId) {
     const file = this.filePath(scope, sessionId);
     try {
-      const raw = import_node_fs14.default.readFileSync(file, "utf8");
+      const raw = import_node_fs15.default.readFileSync(file, "utf8");
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) {
         this.logger?.warn("GroupFileStore.readFile: not an array; resetting session entries", {
@@ -27311,10 +27313,10 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs14.default.mkdirSync(import_node_path16.default.dirname(file), { recursive: true });
+    import_node_fs15.default.mkdirSync(import_node_path17.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs14.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
-    import_node_fs14.default.renameSync(tmp, file);
+    import_node_fs15.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
+    import_node_fs15.default.renameSync(tmp, file);
   }
   /** 拉一份当前 session 的清单。读盘 → cache；之后调用复用 cache */
   list(scope, sessionId) {
@@ -27350,7 +27352,7 @@ var GroupFileStore = class {
       entries[idx] = next;
     } else {
       next = {
-        id: `gf-${import_node_crypto5.default.randomBytes(6).toString("base64url")}`,
+        id: `gf-${import_node_crypto6.default.randomBytes(6).toString("base64url")}`,
         relPath: input.relPath,
         from: input.from,
         label: input.label,
@@ -27400,10 +27402,10 @@ var GroupFileStore = class {
 };
 
 // src/discovery/state-file.ts
-var import_node_fs15 = __toESM(require("fs"), 1);
-var import_node_path17 = __toESM(require("path"), 1);
+var import_node_fs16 = __toESM(require("fs"), 1);
+var import_node_path18 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path17.default.join(dataDir, "state.json");
+  return import_node_path18.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -27425,7 +27427,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs15.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs16.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -27439,34 +27441,34 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs15.default.mkdirSync(import_node_path17.default.dirname(this.file), { recursive: true });
+    import_node_fs16.default.mkdirSync(import_node_path18.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs15.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs15.default.renameSync(tmp, this.file);
+    import_node_fs16.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs16.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs15.default.chmodSync(this.file, 384);
+        import_node_fs16.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs15.default.unlinkSync(this.file);
+      import_node_fs16.default.unlinkSync(this.file);
     } catch {
     }
   }
 };
 
 // src/tunnel/tunnel-manager.ts
-var import_node_fs19 = __toESM(require("fs"), 1);
-var import_node_path21 = __toESM(require("path"), 1);
-var import_node_crypto6 = __toESM(require("crypto"), 1);
+var import_node_fs20 = __toESM(require("fs"), 1);
+var import_node_path22 = __toESM(require("path"), 1);
+var import_node_crypto7 = __toESM(require("crypto"), 1);
 var import_node_child_process5 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
-var import_node_fs16 = __toESM(require("fs"), 1);
-var import_node_path18 = __toESM(require("path"), 1);
+var import_node_fs17 = __toESM(require("fs"), 1);
+var import_node_path19 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -27474,7 +27476,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs16.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs17.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -27485,22 +27487,22 @@ var TunnelStore = class {
     }
   }
   async set(v2) {
-    const dir = import_node_path18.default.dirname(this.filePath);
-    await import_node_fs16.default.promises.mkdir(dir, { recursive: true });
+    const dir = import_node_path19.default.dirname(this.filePath);
+    await import_node_fs17.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs16.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs17.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs16.default.promises.chmod(tmp, 384);
+        await import_node_fs17.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs16.default.promises.rename(tmp, this.filePath);
+    await import_node_fs17.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs16.default.promises.unlink(this.filePath);
+      await import_node_fs17.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -27595,9 +27597,9 @@ function escape(v2) {
 }
 
 // src/tunnel/frpc-binary.ts
-var import_node_fs17 = __toESM(require("fs"), 1);
+var import_node_fs18 = __toESM(require("fs"), 1);
 var import_node_os9 = __toESM(require("os"), 1);
-var import_node_path19 = __toESM(require("path"), 1);
+var import_node_path20 = __toESM(require("path"), 1);
 var import_node_child_process3 = require("child_process");
 var import_node_stream2 = require("stream");
 var import_promises = require("stream/promises");
@@ -27629,20 +27631,20 @@ function frpcDownloadUrl(version2, p2) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs17.default.existsSync(opts.override)) {
+    if (!import_node_fs18.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path19.default.join(opts.dataDir, "bin");
-  import_node_fs17.default.mkdirSync(binDir, { recursive: true });
+  const binDir = import_node_path20.default.join(opts.dataDir, "bin");
+  import_node_fs18.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path19.default.join(binDir, "frpc");
-  if (import_node_fs17.default.existsSync(stableBin)) return stableBin;
+  const stableBin = import_node_path20.default.join(binDir, "frpc");
+  if (import_node_fs18.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path19.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path20.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -27651,8 +27653,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs17.default.chmodSync(partialBin, 493);
-    import_node_fs17.default.renameSync(partialBin, stableBin);
+    import_node_fs18.default.chmodSync(partialBin, 493);
+    import_node_fs18.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -27662,15 +27664,15 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs17.default.readdirSync(binDir);
+    entries = import_node_fs18.default.readdirSync(binDir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path19.default.join(binDir, name);
+      const full = import_node_path20.default.join(binDir, name);
       try {
-        import_node_fs17.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs18.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -27678,7 +27680,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p2) {
   try {
-    import_node_fs17.default.unlinkSync(p2);
+    import_node_fs18.default.unlinkSync(p2);
   } catch {
   }
 }
@@ -27689,13 +27691,13 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs17.default.createWriteStream(dest);
+  const out = import_node_fs18.default.createWriteStream(dest);
   const nodeStream = import_node_stream2.Readable.fromWeb(res.body);
   await (0, import_promises.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path19.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs17.default.mkdirSync(work, { recursive: true });
+  const work = import_node_path20.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  import_node_fs18.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve6, reject) => {
       const proc = (0, import_node_child_process3.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
@@ -27703,32 +27705,32 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
       proc.on("exit", (code) => code === 0 ? resolve6() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path19.default.join(work, dirName, "frpc");
-    if (!import_node_fs17.default.existsSync(src)) {
+    const src = import_node_path20.default.join(work, dirName, "frpc");
+    if (!import_node_fs18.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs17.default.copyFileSync(src, destBin);
+    import_node_fs18.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs17.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs18.default.rmSync(work, { recursive: true, force: true });
   }
 }
 
 // src/tunnel/frpc-process.ts
-var import_node_fs18 = __toESM(require("fs"), 1);
-var import_node_path20 = __toESM(require("path"), 1);
+var import_node_fs19 = __toESM(require("fs"), 1);
+var import_node_path21 = __toESM(require("path"), 1);
 var import_node_child_process4 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path20.default.join(dataDir, "frpc.pid");
+  return import_node_path21.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
-    import_node_fs18.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
+    import_node_fs19.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearFrpcPid(dataDir) {
   try {
-    import_node_fs18.default.unlinkSync(frpcPidFilePath(dataDir));
+    import_node_fs19.default.unlinkSync(frpcPidFilePath(dataDir));
   } catch {
   }
 }
@@ -27744,7 +27746,7 @@ function defaultIsPidAlive(pid) {
 }
 function defaultReadPidFile(file) {
   try {
-    return import_node_fs18.default.readFileSync(file, "utf8");
+    return import_node_fs19.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -27760,7 +27762,7 @@ function defaultSleep(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path20.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path21.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -27784,7 +27786,7 @@ async function killStaleFrpc(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs18.default.unlinkSync(pidFile);
+      import_node_fs19.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -27795,7 +27797,7 @@ async function killStaleFrpc(deps) {
   }
   await sleep(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs18.default.unlinkSync(pidFile);
+    import_node_fs19.default.unlinkSync(pidFile);
   } catch {
   }
 }
@@ -27832,7 +27834,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path21.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path22.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -27959,8 +27961,8 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path21.default.join(this.deps.dataDir, "frpc.toml");
-      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto6.default.randomBytes(3).toString("hex")}`;
+      const tomlPath = import_node_path22.default.join(this.deps.dataDir, "frpc.toml");
+      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto7.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
         serverPort: t.frpsPort,
@@ -27970,12 +27972,12 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs19.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      await import_node_fs20.default.promises.writeFile(tomlPath, toml, { mode: 384 });
       const proc = (this.deps.spawnImpl ?? import_node_child_process5.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logFilePath = import_node_path21.default.join(this.deps.dataDir, "frpc.log");
-      const logStream = import_node_fs19.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logFilePath = import_node_path22.default.join(this.deps.dataDir, "frpc.log");
+      const logStream = import_node_fs20.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -28058,22 +28060,22 @@ async function waitForFrpcReady(proc, timeoutMs) {
 
 // src/tunnel/device-key.ts
 var import_node_os10 = __toESM(require("os"), 1);
-var import_node_crypto7 = __toESM(require("crypto"), 1);
+var import_node_crypto8 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os10.default.hostname();
   const uid = opts.uid ?? (typeof import_node_os10.default.userInfo === "function" ? import_node_os10.default.userInfo().uid : 0);
   const input = `${hostname}::${uid}`;
-  return import_node_crypto7.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
+  return import_node_crypto8.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
-var import_node_fs20 = __toESM(require("fs"), 1);
-var import_node_path22 = __toESM(require("path"), 1);
-var import_node_crypto8 = __toESM(require("crypto"), 1);
+var import_node_fs21 = __toESM(require("fs"), 1);
+var import_node_path23 = __toESM(require("path"), 1);
+var import_node_crypto9 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path22.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path23.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
@@ -28098,14 +28100,14 @@ function loadOrCreateAuthFile(opts) {
   return next;
 }
 function defaultGenerateToken2() {
-  return import_node_crypto8.default.randomBytes(32).toString("base64url");
+  return import_node_crypto9.default.randomBytes(32).toString("base64url");
 }
 function defaultGenerateOwnerPrincipalId() {
-  return `owner-${import_node_crypto8.default.randomUUID()}`;
+  return `owner-${import_node_crypto9.default.randomUUID()}`;
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs20.default.readFileSync(file, "utf8");
+    const raw = import_node_fs21.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -28123,25 +28125,25 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs20.default.mkdirSync(import_node_path22.default.dirname(file), { recursive: true });
-  import_node_fs20.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs21.default.mkdirSync(import_node_path23.default.dirname(file), { recursive: true });
+  import_node_fs21.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs20.default.chmodSync(file, 384);
+    import_node_fs21.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs21 = __toESM(require("fs"), 1);
+var import_node_fs22 = __toESM(require("fs"), 1);
 var import_node_os11 = __toESM(require("os"), 1);
-var import_node_path23 = __toESM(require("path"), 1);
+var import_node_path24 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function loadOwnerDisplayName(dataDir) {
   const fallback = import_node_os11.default.userInfo().username;
-  const profilePath = import_node_path23.default.join(dataDir, PROFILE_FILENAME);
+  const profilePath = import_node_path24.default.join(dataDir, PROFILE_FILENAME);
   let raw;
   try {
-    raw = import_node_fs21.default.readFileSync(profilePath, "utf8");
+    raw = import_node_fs22.default.readFileSync(profilePath, "utf8");
   } catch {
     return fallback;
   }
@@ -28170,12 +28172,12 @@ init_protocol();
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs22 = __toESM(require("fs"), 1);
+var import_node_fs23 = __toESM(require("fs"), 1);
 var import_node_os12 = __toESM(require("os"), 1);
-var import_node_path24 = __toESM(require("path"), 1);
+var import_node_path25 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs22.default.readFileSync(file, "utf8");
+  const raw = import_node_fs23.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -28188,10 +28190,10 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path24.default.join(import_node_os12.default.homedir(), ".claude");
-  const projectDir = import_node_path24.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  const sourceFile = import_node_path24.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs22.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path25.default.join(import_node_os12.default.homedir(), ".claude");
+  const projectDir = import_node_path25.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  const sourceFile = import_node_path25.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs23.default.existsSync(sourceFile)) {
     throw new Error(`fork: source transcript not found: ${sourceFile}`);
   }
   const entries = readJsonlEntries(sourceFile);
@@ -28221,9 +28223,9 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const forkedFilePath = import_node_path24.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs22.default.mkdirSync(projectDir, { recursive: true });
-  import_node_fs22.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const forkedFilePath = import_node_path25.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs23.default.mkdirSync(projectDir, { recursive: true });
+  import_node_fs23.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
@@ -28544,7 +28546,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path34 = __toESM(require("path"), 1);
+var path35 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -28562,7 +28564,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path33 = __toESM(require("path"), 1);
+var path34 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -28575,26 +28577,26 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read") {
-  const root = path33.resolve(personaRoot);
-  const target = path33.resolve(absPath);
-  const sep3 = root.endsWith(path33.sep) ? "" : path33.sep;
+  const root = path34.resolve(personaRoot);
+  const target = path34.resolve(absPath);
+  const sep3 = root.endsWith(path34.sep) ? "" : path34.sep;
   if (!target.startsWith(root + sep3)) return false;
-  const rel = path33.relative(root, target);
+  const rel = path34.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId = rel.split(path33.sep)[0];
+  const personaId = rel.split(path34.sep)[0];
   if (!personaId) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path33.resolve(personaRoot);
-  const target = path33.resolve(absPath);
-  const sep3 = root.endsWith(path33.sep) ? "" : path33.sep;
+  const root = path34.resolve(personaRoot);
+  const target = path34.resolve(absPath);
+  const sep3 = root.endsWith(path34.sep) ? "" : path34.sep;
   if (!target.startsWith(root + sep3)) return null;
-  const rel = path33.relative(root, target);
+  const rel = path34.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path33.sep)[0];
+  const id = rel.split(path34.sep)[0];
   return id || null;
 }
 
@@ -28619,7 +28621,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path34.join(personaRoot, pid),
+          path35.join(personaRoot, pid),
           personaRoot,
           "read"
         );
@@ -28630,7 +28632,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path34.resolve(args.projectPath), personaRoot, "history:list");
+    assertGuestPath(ctx, path35.resolve(args.projectPath), personaRoot, "history:list");
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -28662,13 +28664,13 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path34.resolve(args.cwd), personaRoot, "history:subagents");
+    assertGuestPath(ctx, path35.resolve(args.cwd), personaRoot, "history:subagents");
     const subs = await history.listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path34.resolve(args.cwd), personaRoot, "history:subagent-read");
+    assertGuestPath(ctx, path35.resolve(args.cwd), personaRoot, "history:subagent-read");
     const res = await history.readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
   };
@@ -28676,7 +28678,7 @@ function buildHistoryHandlers(deps) {
     const dirs = listRecentDirs(store);
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path34.resolve(d.cwd), personaRoot, "read")
+        (d) => isGuestPathAllowed(ctx.grants, path35.resolve(d.cwd), personaRoot, "read")
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -28693,7 +28695,7 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path35 = __toESM(require("path"), 1);
+var path36 = __toESM(require("path"), 1);
 var os13 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
@@ -28734,22 +28736,22 @@ function buildWorkspaceHandlers(deps) {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
     const fallbackCwd = isGuest && personaRoot ? personaRoot : os13.homedir();
-    const resolvedCwd = path35.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path35.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const resolvedCwd = path36.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path36.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list");
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path35.isAbsolute(args.path) ? path35.resolve(args.path) : path35.resolve(args.cwd, args.path);
+    const target = path36.isAbsolute(args.path) ? path36.resolve(args.path) : path36.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read");
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path35.resolve(args.cwd);
+    const cwdAbs = path36.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list");
     const list2 = skills.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -28761,7 +28763,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path35.resolve(args.cwd);
+    const cwdAbs = path36.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list");
     const list2 = agents.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -28780,20 +28782,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path37 = __toESM(require("path"), 1);
+var path38 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process6 = require("child_process");
-var import_node_fs23 = __toESM(require("fs"), 1);
-var import_node_path25 = __toESM(require("path"), 1);
+var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_path26 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process6.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path25.default.resolve(p2);
+  const resolved = import_node_path26.default.resolve(p2);
   try {
-    return import_node_fs23.default.realpathSync(resolved);
+    return import_node_fs24.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -28866,7 +28868,7 @@ async function listGitBranches(cwd) {
 // src/handlers/git.ts
 function assertGuestCwd(ctx, cwd, personaRoot, method) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
-  if (!isGuestPathAllowed(ctx.grants, path37.resolve(cwd), personaRoot, "read")) {
+  if (!isGuestPathAllowed(ctx.grants, path38.resolve(cwd), personaRoot, "read")) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -28921,27 +28923,7 @@ var DeleteArgsSchema = external_exports.object({
   capabilityId: external_exports.string().min(1)
 }).strict();
 function buildCapabilityHandlers(deps) {
-  const { manager, getShareBaseUrl } = deps;
-  const issue = async (frame) => {
-    const { type: _type, requestId: _requestId, ...rest } = frame;
-    const args = CapabilityIssueArgsSchema.parse(rest);
-    const { token, capability } = manager.issue({
-      displayName: args.displayName,
-      grants: args.grants,
-      ...args.expiresAt !== void 0 ? { expiresAt: args.expiresAt } : {},
-      ...args.maxUses !== void 0 ? { maxUses: args.maxUses } : {}
-    });
-    const base = getShareBaseUrl().replace(/\/$/, "");
-    const shareUrl = `${base}/?token=${encodeURIComponent(token)}`;
-    return {
-      response: {
-        type: "capability:issued",
-        token,
-        shareUrl,
-        capability: stripSecretHash(capability)
-      }
-    };
-  };
+  const { manager, getShareBaseUrl, getPersonalCapability } = deps;
   const list = async () => {
     return {
       response: {
@@ -28967,30 +28949,21 @@ function buildCapabilityHandlers(deps) {
       }
     };
   };
-  const bindPeer = async (frame) => {
-    const { type: _type, requestId: _requestId, ...rest } = frame;
-    const args = CapabilityBindPeerArgsSchema.parse(rest);
-    try {
-      manager.recordPeerHello(args.capabilityId, {
-        ownerPrincipalId: args.peerOwnerId,
-        displayName: args.peerDisplayName,
-        now: Date.now()
-      });
-    } catch (e) {
-      throw new ClawdError(
-        ERROR_CODES.VALIDATION_ERROR,
-        `capability:bindPeer: ${e.message}`
-      );
-    }
+  const personalCapGet = async () => {
+    const { token, capability } = getPersonalCapability();
     return {
-      response: { type: "capability:bindPeer:ok", capabilityId: args.capabilityId }
+      response: {
+        type: "personal-cap:get:ok",
+        token,
+        capability: stripSecretHash(capability),
+        shareBaseUrl: getShareBaseUrl()
+      }
     };
   };
   return {
-    "capability:issue": issue,
     "capability:list": list,
     "capability:delete": del,
-    "capability:bindPeer": bindPeer
+    "personal-cap:get": personalCapGet
   };
 }
 
@@ -29009,20 +28982,24 @@ function resolvePeerOwnerId(ctx, argsPeerOwnerId, capManager) {
   if (!ctx.capabilityId) {
     throw new ClawdError(ERROR_CODES.UNAUTHORIZED, "inbox: guest ctx missing capabilityId");
   }
-  const cap = capManager.findById(ctx.capabilityId);
-  if (!cap?.peerOwnerId) {
+  let resolved = ctx.peerOwnerPrincipalId;
+  if (!resolved) {
+    const cap = capManager.findById(ctx.capabilityId);
+    resolved = cap?.peerOwnerId;
+  }
+  if (!resolved) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
-      `inbox: guest cap ${ctx.capabilityId} has no peerOwnerId (recordPeerHello not yet)`
+      `inbox: guest cap ${ctx.capabilityId} has no peerOwnerPrincipalId (auth frame missing selfPrincipalId)`
     );
   }
-  if (argsPeerOwnerId && argsPeerOwnerId !== cap.peerOwnerId) {
+  if (argsPeerOwnerId && argsPeerOwnerId !== resolved) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
-      `inbox: guest args.peerOwnerId mismatch (cap.peerOwnerId=${cap.peerOwnerId}, args=${argsPeerOwnerId})`
+      `inbox: guest args.peerOwnerId mismatch (resolved=${resolved}, args=${argsPeerOwnerId})`
     );
   }
-  return cap.peerOwnerId;
+  return resolved;
 }
 function buildInboxHandlers(deps) {
   const { manager, capManager } = deps;
@@ -29378,7 +29355,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path26 = __toESM(require("path"), 1);
+var import_node_path27 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -29432,12 +29409,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path26.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path26.default.isAbsolute(args.relPath) ? import_node_path26.default.resolve(args.relPath) : import_node_path26.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path27.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path27.default.isAbsolute(args.relPath) ? import_node_path27.default.resolve(args.relPath) : import_node_path27.default.resolve(cwdAbs, args.relPath);
     assertGuestAttachmentPath(ctx, candidateAbs, deps.personaRoot, "attachment.signUrl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path26.default.isAbsolute(e.relPath) ? import_node_path26.default.resolve(e.relPath) : import_node_path26.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path27.default.isAbsolute(e.relPath) ? import_node_path27.default.resolve(e.relPath) : import_node_path27.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -29461,7 +29438,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path26.default.resolve(f.cwd), deps.personaRoot, method);
+    assertGuestAttachmentPath(ctx, import_node_path27.default.resolve(f.cwd), deps.personaRoot, method);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -29547,7 +29524,8 @@ function buildMethodHandlers(deps) {
     }),
     ...buildCapabilityHandlers({
       manager: deps.capabilityManager,
-      getShareBaseUrl: deps.getShareBaseUrl
+      getShareBaseUrl: deps.getShareBaseUrl,
+      getPersonalCapability: deps.getPersonalCapability
     }),
     ...buildInboxHandlers({
       manager: deps.inboxManager,
@@ -29585,11 +29563,12 @@ var METHOD_GRANT_MAP = {
   // handler 内部按 ctx.principal.kind 决定返回 "合成 owner self capability" 还是
   // "查 capabilityManager 拿 caller 的 guest capability"。
   "whoami": { kind: "public" },
-  // ---- capability platform（admin-only，本 PR 新增） ----
-  "capability:issue": ADMIN_ANY,
+  // ---- capability platform（admin-only） ----
+  // global personal token (2026-05-25): capability:issue / bindPeer 已下线；
+  // personal capability 由 daemon 启动时自动创建，personal-cap:get 是 owner-only 拿 token + shareBaseUrl
   "capability:list": ADMIN_ANY,
   "capability:delete": ADMIN_ANY,
-  "capability:bindPeer": ADMIN_ANY,
+  "personal-cap:get": ADMIN_ANY,
   // ---- inbox: channel-based IM (capability platform v3) ----
   // 三条都 'public' — capability 本身就是授权凭证. handler 内额外校验
   // guest ctx.capabilityId === args.capabilityId, 防 guest 越权操作别的 channel.
@@ -29690,7 +29669,7 @@ function computeGrantForFrame(method, frame) {
 async function startDaemon(config) {
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path27.default.join(config.dataDir, "clawd.log")
+    file: import_node_path28.default.join(config.dataDir, "clawd.log")
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const stateMgr = new StateFileManager({ dataDir: config.dataDir });
@@ -29719,14 +29698,9 @@ async function startDaemon(config) {
   receivedCapabilityStore.load();
   const capabilityStore = new CapabilityStore(config.dataDir);
   const capabilityRegistry = new CapabilityRegistry(capabilityStore);
+  const personalCapability = loadOrCreatePersonalCapability({ dataDir: config.dataDir });
+  capabilityRegistry.upsertCapability(personalCapability.capability);
   const capabilityManager = new CapabilityManager(capabilityRegistry, {
-    onIssued: (cap, token) => {
-      wsServer?.broadcastToOwners({
-        type: "capability:tokenIssued",
-        capability: stripSecretHash(cap),
-        token
-      });
-    },
     onDeleted: (cap) => {
       const deletedAt = Date.now();
       wsServer?.broadcastToOwners({
@@ -29758,14 +29732,7 @@ async function startDaemon(config) {
         ownerDisplayName,
         capabilityRegistry,
         selfPrincipalId,
-        selfDisplayName,
-        onGuestHello: (capId, ownerId, name) => {
-          capabilityManager.recordPeerHello(capId, {
-            ownerPrincipalId: ownerId,
-            displayName: name,
-            now: Date.now()
-          });
-        }
+        selfDisplayName
       });
     },
     onAuthed: (h, ctx) => wsServer?.attachClientContext(h.id, ctx),
@@ -29789,7 +29756,7 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path27.default.join(config.dataDir, "personas"));
+  const personaStore = new PersonaStore(import_node_path28.default.join(config.dataDir, "personas"));
   const defaultsRoot = findDefaultsRoot();
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -29806,7 +29773,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path27.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path28.default.join(config.dataDir, "personas"),
     personaStore,
     ownerDisplayName,
     ownerPrincipalId,
@@ -29830,10 +29797,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path27.default.isAbsolute(input.relPath) ? input.relPath : import_node_path27.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path28.default.isAbsolute(input.relPath) ? input.relPath : import_node_path28.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs24.default.statSync(absPath).size;
+          size = import_node_fs25.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -29946,15 +29913,17 @@ async function startDaemon(config) {
       // 'persona/<pid>/owner'，default 走 'default'。
       getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
       // guest path guard：candidate 必须在 personaRoot 子树下
-      personaRoot: import_node_path27.default.join(config.dataDir, "personas")
+      personaRoot: import_node_path28.default.join(config.dataDir, "personas")
     },
     // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-    personaRoot: import_node_path27.default.join(config.dataDir, "personas"),
-    // Task 1.9: capability:issue/list/revoke handler 依赖
+    personaRoot: import_node_path28.default.join(config.dataDir, "personas"),
+    // capability:list / delete handler 依赖
     capabilityManager,
-    // v2 Phase 5: capability:issue 返回的 shareUrl 用此 base URL 拼接。
+    // personal-cap:get 返回的 shareBaseUrl 用此 base URL：
     // tunnel 拉起后切到反代 wss://... 地址；否则本机 ws://host:port。
     getShareBaseUrl: () => currentTunnelUrl ?? `ws://${config.host}:${config.port}`,
+    // global personal token (2026-05-25): personal-cap:get handler 直接返回此 token + cap
+    getPersonalCapability: () => personalCapability,
     // v2 Phase 6: whoami handler 装在 owner principal.displayName + persona 解析
     ownerDisplayName,
     // owner-id stabilization: whoami 用稳定 ownerPrincipalId 替代 'owner' 字面量
@@ -30010,23 +29979,14 @@ async function startDaemon(config) {
     // 用 cap token 连 noAuth daemon 时若无此 hook 会 fallback owner ctx, whoami 错返
     // capability.id = ownerPrincipalId, 导致 myCapabilityId 写错 → inbox channel 写错.
     // 命中 cap → attach guest ctx; 空 token / 未命中 → 保持 noAuth 行为 (handler fallback owner).
-    tryVerifyCapabilityToken: (token, selfPrincipalId, selfDisplayName) => {
+    tryVerifyCapabilityToken: (token, selfPrincipalId, _selfDisplayName) => {
       const v2 = capabilityRegistry.verifyToken(token);
       if (!v2.ok) return null;
-      if (selfPrincipalId && selfDisplayName) {
-        try {
-          capabilityManager.recordPeerHello(v2.capability.id, {
-            ownerPrincipalId: selfPrincipalId,
-            displayName: selfDisplayName,
-            now: Date.now()
-          });
-        } catch {
-        }
-      }
       return {
         principal: { id: v2.capability.id, kind: "guest", displayName: v2.capability.displayName },
         grants: v2.capability.grants,
-        capabilityId: v2.capability.id
+        capabilityId: v2.capability.id,
+        ...selfPrincipalId ? { peerOwnerPrincipalId: selfPrincipalId } : {}
       };
     },
     // file-sharing HTTP 路由复用 daemon 同端口（spec §5 第 3 条）；router 自己处理 auth + 404
@@ -30157,8 +30117,8 @@ async function startDaemon(config) {
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path27.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path27.default.join(config.dataDir, "frpc.log")}`
+        `Frpc config: ${import_node_path28.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path28.default.join(config.dataDir, "frpc.log")}`
       ];
       const width = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width + 4);
@@ -30171,8 +30131,8 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path27.default.join(config.dataDir, "connect.txt");
-        import_node_fs24.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path28.default.join(config.dataDir, "connect.txt");
+        import_node_fs25.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
     } catch (err) {
@@ -30216,9 +30176,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path27.default.join(dataDir, "persons");
+  const dir = import_node_path28.default.join(dataDir, "persons");
   try {
-    import_node_fs24.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs25.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }