@clawos-dev/clawd 0.2.108-beta.205.1e8d4c5 → 0.2.108-beta.206.f2600cc

package/dist/cli.cjs

@@ -181,12 +181,16 @@ var init_methods = __esm({
       // 无 subscription 持久化：guest 端身份完全来自文件系统 + reconciled publishedExtensions.
       "extension.install-from-channel",
       "extension.update-from-channel",
-      // ---- auth:* 飞书统一身份 Phase 1 (spec 2026-06-01-feishu-identity-design) ----
-      // owner-only：daemon loopback 登录流程（auth:login:start 起 state → HTTP /auth/callback
-      // 回调落盘 → auth:login:done 事件）。中央字面量见 protocol/feishu-auth.ts FEISHU_AUTH_METHODS。
-      "auth:login:start",
-      "auth:getIdentity",
-      "auth:logout"
+      // ---- app-builder Project picker (spec 2026-06-01-app-builder-project-picker-design) ----
+      // persona-app-builder 多 project 管理；schemas: ProjectMetadataSchema + 4 个 args/result 对。
+      //   listProjects: readdir projects/，按目录读 .clawd-project.json
+      //   createProject: 校验名 + 从 6173-6182 段分配端口 + 写元数据 + 创建空目录
+      //   deleteProject: 停 dev server + rm -rf 目录 + 连带删该 project 名下所有 session
+      //   updateProjectPort: 校验新端口段内 + 未被别的 project 占 + 重启 dev server
+      "appBuilder:listProjects",
+      "appBuilder:createProject",
+      "appBuilder:deleteProject",
+      "appBuilder:updateProjectPort"
     ];
   }
 });
@@ -248,11 +252,7 @@ var init_errors = __esm({
       INTERNAL: "INTERNAL",
       UNAUTHORIZED: "UNAUTHORIZED",
       FORBIDDEN: "FORBIDDEN",
-      INVALID_PARAM: "INVALID_PARAM",
-      // 飞书统一身份（spec 2026-06-01 决策 #9）：People/远程体系强制飞书登录。
-      // daemon 进程身份未激活为飞书 unionId 时，FEISHU_GATED_METHODS 内的 RPC 一律返回此错误；
-      // UI 据此显示登录引导（区别于 UNAUTHORIZED 的越权语义）。
-      FEISHU_LOGIN_REQUIRED: "FEISHU_LOGIN_REQUIRED"
+      INVALID_PARAM: "INVALID_PARAM"
     };
     ClawdError = class extends Error {
       constructor(code, message) {
@@ -682,8 +682,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path60, errorMaps, issueData } = params;
-      const fullPath = [...path60, ...issueData.path || []];
+      const { data, path: path59, errorMaps, issueData } = params;
+      const fullPath = [...path59, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -994,11 +994,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path60, key) {
+      constructor(parent, value, path59, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path60;
+        this._path = path59;
         this._key = key;
       }
       get path() {
@@ -4532,7 +4532,7 @@ var init_persona_schemas = __esm({
 });
 
 // ../protocol/src/schemas.ts
-var SessionStatusSchema, UsageSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, ParsedEventSchema, SessionCreateArgs, SessionIdArgs, SessionUpdateArgs, SessionSendArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsArgs, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionSubscribeArgs, SessionPinArgs, PeerSessionUpsertArgs, PeerSessionUpsertResponseSchema, PeerSessionRemoveArgs, PeerSessionRemoveResponseSchema, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, HistoryRecentDirsArgs, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, AuthRequestFrameSchema, AuthOkFrameSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema;
+var SessionStatusSchema, UsageSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, ParsedEventSchema, SessionCreateArgs, SessionIdArgs, SessionUpdateArgs, SessionSendArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsArgs, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionSubscribeArgs, SessionPinArgs, PeerSessionUpsertArgs, PeerSessionUpsertResponseSchema, PeerSessionRemoveArgs, PeerSessionRemoveResponseSchema, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, HistoryRecentDirsArgs, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, AuthRequestFrameSchema, AuthOkFrameSchema, TunnelReadyEventSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema, PROJECT_PORT_MIN, PROJECT_PORT_MAX, projectNameRegex, ProjectMetadataSchema, ProjectWithStatusSchema, ListProjectsArgsSchema, ListProjectsResultSchema, CreateProjectArgsSchema, CreateProjectResultSchema, DeleteProjectArgsSchema, DeleteProjectResultSchema, UpdateProjectPortArgsSchema, UpdateProjectPortResultSchema;
 var init_schemas = __esm({
   "../protocol/src/schemas.ts"() {
     "use strict";
@@ -4629,6 +4629,10 @@ var init_schemas = __esm({
       // owner-mode persona session 身份标识；UI 用它在 SessionList 过滤 + jump，
       // daemon 用它做 idempotent dedupe + spawn 时派生 ctx.personaMode='owner'
       ownerPersonaId: external_exports.string().min(1).optional(),
+      // app-builder Project 反向索引（spec: superpowers/specs/2026-06-01-app-builder-project-picker-design.md）。
+      // 当此 session 绑定到某个 build 中的 project 时填写；name 与 projects/<name>/ 子目录同名，
+      // 受 projectNameSchema regex 约束。daemon session:resume 时校验该目录存在，不存在则拒。
+      appBuilderProject: external_exports.string().regex(/^[a-z][a-z0-9-]{0,39}$/).optional(),
       // listener-mode sub-session 的原始 chatId（owner-mode 不写；listener-scope 强制写入）。
       // 派生 sessionId 是单向 hash `${personaId}-${tokenHash12}-${chatHash8}`，必须保留原始 chatId
       // 才能让 alice 重连同一 sub-session（持久化在 alice localStorage 之外，由 daemon push 同步）。
@@ -4901,7 +4905,12 @@ var init_schemas = __esm({
       forkedFromSessionId: external_exports.string().min(1).optional(),
       // owner-mode persona session：传此字段时 daemon 自行派生 cwd 和启动参数，
       // 且按 ownerPersonaId 做 idempotent dedupe（每 persona 永远只有一个 owner session）
-      ownerPersonaId: external_exports.string().min(1).optional()
+      ownerPersonaId: external_exports.string().min(1).optional(),
+      // app-builder Project 绑定（spec 2026-06-01-app-builder-project-picker-design）。
+      // UI picker 上点 idle project / 新建 project 时传入；daemon 透传写入 SessionFile.appBuilderProject。
+      // 跟 ownerPersonaId 同层但不互斥（典型场景两者都传：ownerPersonaId='persona-app-builder' +
+      // appBuilderProject='<project-name>'）。
+      appBuilderProject: external_exports.string().regex(/^[a-z][a-z0-9-]{0,39}$/).optional()
     }).refine((args) => args.cwd != null || args.ownerPersonaId != null, {
       message: "cwd \u4E0E ownerPersonaId \u81F3\u5C11\u4F20\u4E00\u4E2A"
     });
@@ -5112,12 +5121,6 @@ var init_schemas = __esm({
        * 后调 capabilityManager.recordPeerHello(capId, ownerPrincipalId, displayName)
        * 把 cap.peerOwnerId / firstUsedByPeerAt 字段回写，让 owner 端 UI 在 People
        * tab 顶层 PeerOwner 视图 + Personas tab 二级分组拿到对端身份。
-       *
-       * 飞书统一身份 Phase 1 (2026-06-01)：取值升级为飞书 union_id（owner 已飞书登录时；
-       * 来自 whoami.owner.id → daemon ownerPrincipalId → owner-identity.json unionId）。
-       * 未登录 daemon 仍为 auth.json 的 owner-<uuid>。daemon 端不验证该身份真实性
-       * （Phase 1 信任模型，见 spec §9）。Phase 2 将以 connect token 替代（introspect
-       * 返回身份，删除自报字段，见 spec §10）。
        */
       selfPrincipalId: external_exports.string().min(1).optional(),
       /**
@@ -5132,6 +5135,11 @@ var init_schemas = __esm({
       version: external_exports.string().min(1).optional(),
       protocolVersion: external_exports.number().int().nonnegative().optional()
     });
+    TunnelReadyEventSchema = external_exports.object({
+      type: external_exports.literal("tunnel:ready"),
+      url: external_exports.string().min(1),
+      subdomain: external_exports.string().min(1)
+    });
     TunnelExitedEventSchema = external_exports.object({
       type: external_exports.literal("tunnel:exited"),
       code: external_exports.number().int().nullable(),
@@ -5173,6 +5181,41 @@ var init_schemas = __esm({
       /** file-sharing HTTP 路由的 Authorization: Bearer token；与 WS token 解耦，HTTP 401 仅触发 ReAuth 不强踢 WS（spec §11 第 4 条） */
       httpToken: external_exports.string().optional()
     });
+    PROJECT_PORT_MIN = 6173;
+    PROJECT_PORT_MAX = 6182;
+    projectNameRegex = /^[a-z][a-z0-9-]{0,39}$/;
+    ProjectMetadataSchema = external_exports.object({
+      name: external_exports.string().regex(projectNameRegex, {
+        message: "kebab-case, \u5C0F\u5199\u5B57\u6BCD\u5F00\u5934\uFF0C\u53EA\u5141\u8BB8\u5C0F\u5199\u5B57\u6BCD / \u6570\u5B57 / -\uFF0C\u6700\u957F 40 \u5B57\u7B26"
+      }),
+      port: external_exports.number().int().min(PROJECT_PORT_MIN).max(PROJECT_PORT_MAX),
+      createdAt: external_exports.string().datetime()
+    });
+    ProjectWithStatusSchema = ProjectMetadataSchema.extend({
+      isRunning: external_exports.boolean(),
+      boundSessionId: external_exports.string().nullable()
+    });
+    ListProjectsArgsSchema = external_exports.object({}).strict();
+    ListProjectsResultSchema = external_exports.object({
+      projects: external_exports.array(ProjectWithStatusSchema)
+    }).strict();
+    CreateProjectArgsSchema = external_exports.object({
+      name: external_exports.string()
+    }).strict();
+    CreateProjectResultSchema = external_exports.object({
+      project: ProjectMetadataSchema
+    }).strict();
+    DeleteProjectArgsSchema = external_exports.object({
+      name: external_exports.string()
+    }).strict();
+    DeleteProjectResultSchema = external_exports.object({}).strict();
+    UpdateProjectPortArgsSchema = external_exports.object({
+      name: external_exports.string(),
+      newPort: external_exports.number().int()
+    }).strict();
+    UpdateProjectPortResultSchema = external_exports.object({
+      project: ProjectMetadataSchema
+    }).strict();
   }
 });
 
@@ -5581,64 +5624,6 @@ var init_extension = __esm({
   }
 });
 
-// ../protocol/src/feishu-auth.ts
-var FEISHU_GATED_METHODS, FeishuIdentitySchema, AuthLoginStartResponseSchema, AuthGetIdentityResponseSchema, AuthLogoutResponseSchema, AuthLoginDoneEventSchema, AuthLoginFailedEventSchema;
-var init_feishu_auth = __esm({
-  "../protocol/src/feishu-auth.ts"() {
-    "use strict";
-    init_zod();
-    FEISHU_GATED_METHODS = [
-      // capability / 邀请码（生成添加码 = 把自己的身份分享出去）
-      "capability:list",
-      "capability:delete",
-      "personal-cap:get",
-      // 联系人（添加朋友 / 联系人列表 / 自动重连）
-      "received-capability:list",
-      "received-capability:add",
-      "received-capability:remove",
-      "received-capability:autoAttach",
-      // DM / 跨用户通知
-      "inbox:list",
-      "inbox:markRead",
-      "inbox:postMessage",
-      // mirror peer sessions（远端会话镜像）
-      "peerSession:upsert",
-      "peerSession:remove"
-    ];
-    FeishuIdentitySchema = external_exports.object({
-      /** 飞书 union_id（租户维度，跨应用稳定）。TTC user_info 接口 data.union_id */
-      unionId: external_exports.string().min(1),
-      /** 飞书姓名。TTC user_info 接口 data.name */
-      displayName: external_exports.string().min(1),
-      /** TTC user_info 接口 data.avatar_url，可缺省 */
-      avatarUrl: external_exports.string().optional()
-    });
-    AuthLoginStartResponseSchema = external_exports.object({
-      type: external_exports.literal("auth:login:start:ok"),
-      /** 完整 TTC 授权页 URL（含 callback_url + state + auto=1），UI 直接 window.open */
-      authUrl: external_exports.string().min(1),
-      /** 防 CSRF 的一次性 nonce；回调时 daemon 校验 */
-      state: external_exports.string().min(1)
-    });
-    AuthGetIdentityResponseSchema = external_exports.object({
-      type: external_exports.literal("auth:getIdentity:ok"),
-      /** null = 未登录 */
-      identity: FeishuIdentitySchema.nullable()
-    });
-    AuthLogoutResponseSchema = external_exports.object({
-      type: external_exports.literal("auth:logout:ok")
-    });
-    AuthLoginDoneEventSchema = external_exports.object({
-      type: external_exports.literal("auth:login:done"),
-      identity: FeishuIdentitySchema
-    });
-    AuthLoginFailedEventSchema = external_exports.object({
-      type: external_exports.literal("auth:login:failed"),
-      reason: external_exports.string()
-    });
-  }
-});
-
 // ../protocol/src/runtime.ts
 var init_runtime = __esm({
   "../protocol/src/runtime.ts"() {
@@ -5656,7 +5641,6 @@ var init_runtime = __esm({
     init_inbox();
     init_received_capability();
     init_extension();
-    init_feishu_auth();
   }
 });
 
@@ -5931,8 +5915,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path60 = req.path;
-        _req.url = typeof path60 === "string" ? path60 : req.url ? req.url.path || req.url : void 0;
+        const path59 = req.path;
+        _req.url = typeof path59 === "string" ? path59 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -6097,14 +6081,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path60) {
+    function parsePath(path59) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path60.length; i++) {
-        const char = path60[i];
+      for (let i = 0; i < path59.length; i++) {
+        const char = path59[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -6235,10 +6219,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path60 of paths) {
-        const parts = parsePath(path60);
+      for (const path59 of paths) {
+        const parts = parsePath(path59);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path60, remove);
+          redactWildcardPath(obj, parts, censor, path59, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -6323,8 +6307,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path60) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path60];
+            const wrappedCensor = typeof censor === "function" ? (value, path59) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path59];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -6359,8 +6343,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path60 of pathsToClone) {
-        const parts = parsePath(path60);
+      for (const path59 of pathsToClone) {
+        const parts = parsePath(path59);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -6412,24 +6396,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path60) {
-      if (typeof path60 !== "string") {
+    function validatePath(path59) {
+      if (typeof path59 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path60 === "") {
+      if (path59 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path60.includes("..")) {
-        throw new Error(`Invalid redaction path (${path60})`);
+      if (path59.includes("..")) {
+        throw new Error(`Invalid redaction path (${path59})`);
       }
-      if (path60.includes(",")) {
-        throw new Error(`Invalid redaction path (${path60})`);
+      if (path59.includes(",")) {
+        throw new Error(`Invalid redaction path (${path59})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path60.length; i++) {
-        const char = path60[i];
+      for (let i = 0; i < path59.length; i++) {
+        const char = path59[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -6443,20 +6427,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path60})`);
+            throw new Error(`Invalid redaction path (${path59})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path60})`);
+        throw new Error(`Invalid redaction path (${path59})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path60 of paths) {
-        validatePath(path60);
+      for (const path59 of paths) {
+        validatePath(path59);
       }
     }
     function slowRedact(options = {}) {
@@ -6624,8 +6608,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path60) => {
-            return censor(value, [k2, ...path60]);
+          const wrappedCensor = typeof censor === "function" ? (value, path59) => {
+            return censor(value, [k2, ...path59]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -6844,9 +6828,9 @@ var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
     var fs48 = require("fs");
-    var EventEmitter2 = require("events");
+    var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
-    var path60 = require("path");
+    var path59 = require("path");
     var sleep = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -6900,7 +6884,7 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs48.mkdirSync(path60.dirname(file), { recursive: true });
+          if (sonic.mkdir) fs48.mkdirSync(path59.dirname(file), { recursive: true });
           const fd = fs48.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
@@ -6908,7 +6892,7 @@ var require_sonic_boom = __commonJS({
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs48.mkdir(path60.dirname(file), { recursive: true }, (err) => {
+        fs48.mkdir(path59.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
           fs48.open(file, flags, mode, fileOpened);
         });
@@ -7081,7 +7065,7 @@ var require_sonic_boom = __commonJS({
       sonic._asyncDrainScheduled = false;
       sonic.emit("drain");
     }
-    inherits(SonicBoom, EventEmitter2);
+    inherits(SonicBoom, EventEmitter3);
     function mergeBuf(bufs, len) {
       if (bufs.length === 0) {
         return kEmptyBuffer;
@@ -7659,9 +7643,9 @@ var require_thread_stream = __commonJS({
   "../node_modules/.pnpm/thread-stream@3.1.0/node_modules/thread-stream/index.js"(exports2, module2) {
     "use strict";
     var { version: version2 } = require_package();
-    var { EventEmitter: EventEmitter2 } = require("events");
+    var { EventEmitter: EventEmitter3 } = require("events");
     var { Worker } = require("worker_threads");
-    var { join: join11 } = require("path");
+    var { join: join12 } = require("path");
     var { pathToFileURL } = require("url");
     var { wait } = require_wait();
     var {
@@ -7697,7 +7681,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join11(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join12(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         trackUnmanagedFds: false,
@@ -7815,7 +7799,7 @@ var require_thread_stream = __commonJS({
       stream.worker.off("exit", onWorkerExit);
       destroy(stream, code !== 0 ? new Error("the worker thread exited") : null);
     }
-    var ThreadStream = class extends EventEmitter2 {
+    var ThreadStream = class extends EventEmitter3 {
       constructor(opts = {}) {
         super();
         if (opts.bufferSize < 4) {
@@ -8083,7 +8067,7 @@ var require_transport = __commonJS({
     "use strict";
     var { createRequire } = require("module");
     var getCallers = require_caller();
-    var { join: join11, isAbsolute: isAbsolute2, sep: sep3 } = require("path");
+    var { join: join12, isAbsolute: isAbsolute2, sep: sep3 } = require("path");
     var sleep = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
     var ThreadStream = require_thread_stream();
@@ -8146,7 +8130,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join11(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join12(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -8164,7 +8148,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline3) {
-        target = bundlerOverrides["pino-worker"] || join11(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join12(__dirname, "worker.js");
         options.pipelines = [pipeline3.map((dest) => {
           return {
             ...dest,
@@ -8186,7 +8170,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join11(__dirname, "..", "file.js");
+          return join12(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -8773,7 +8757,7 @@ var require_meta = __commonJS({
 var require_proto = __commonJS({
   "../node_modules/.pnpm/pino@9.14.0/node_modules/pino/lib/proto.js"(exports2, module2) {
     "use strict";
-    var { EventEmitter: EventEmitter2 } = require("events");
+    var { EventEmitter: EventEmitter3 } = require("events");
     var {
       lsCacheSym,
       levelValSym,
@@ -8855,7 +8839,7 @@ var require_proto = __commonJS({
       [getLevelSym]: getLevel,
       [setLevelSym]: setLevel
     };
-    Object.setPrototypeOf(prototype, EventEmitter2.prototype);
+    Object.setPrototypeOf(prototype, EventEmitter3.prototype);
     module2.exports = function() {
       return Object.create(prototype);
     };
@@ -9176,7 +9160,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join11 = ",";
+            let join12 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -9190,7 +9174,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join11 = `,
+                join12 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -9198,13 +9182,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join11;
+                res += join12;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join11}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join12}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -9225,7 +9209,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join11 = `,
+              join12 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -9239,13 +9223,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join11;
+                separator = join12;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join11;
+              separator = join12;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -9286,7 +9270,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join11 = ",";
+            let join12 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -9299,7 +9283,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join11 = `,
+                join12 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -9307,13 +9291,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join11;
+                res += join12;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join11}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join12}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -9326,7 +9310,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join11 = `,
+              join12 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -9335,7 +9319,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join11;
+                separator = join12;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -9393,20 +9377,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join12 = `,
+              const join13 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join12;
+                res2 += join13;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join12}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join13}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -9422,16 +9406,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join11 = `,
+            const join12 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join11, maximumBreadth);
+              res += stringifyTypedArray(value, join12, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join11;
+              separator = join12;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -9442,13 +9426,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join11;
+                separator = join12;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join11;
+              separator = join12;
             }
             if (separator !== "") {
               res = `
@@ -10539,11 +10523,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path60, added, removed, oldPosInc, options) {
-        var last = path60.lastComponent;
+      addToPath: function addToPath(path59, added, removed, oldPosInc, options) {
+        var last = path59.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path60.oldPos + oldPosInc,
+            oldPos: path59.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -10553,7 +10537,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path60.oldPos + oldPosInc,
+            oldPos: path59.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -10999,10 +10983,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path60 = typeof rec.path === "string" ? rec.path : null;
+      const path59 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path60 || content == null) return null;
-      const entry = { path: path60, content };
+      if (!path59 || content == null) return null;
+      const entry = { path: path59, content };
       if (typeof rec.mtimeMs === "number") entry.mtimeMs = rec.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -11833,10 +11817,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path60 = typeof rec.path === "string" ? rec.path : null;
+      const path59 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path60 || content == null) return null;
-      const out = { path: path60, content };
+      if (!path59 || content == null) return null;
+      const out = { path: path59, content };
       if (typeof rec.mtimeMs === "number") out.mtimeMs = rec.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -19330,10 +19314,10 @@ var require_extension = __commonJS({
 var require_websocket = __commonJS({
   "../node_modules/.pnpm/ws@8.20.0/node_modules/ws/lib/websocket.js"(exports2, module2) {
     "use strict";
-    var EventEmitter2 = require("events");
+    var EventEmitter3 = require("events");
     var https = require("https");
-    var http2 = require("http");
-    var net2 = require("net");
+    var http3 = require("http");
+    var net3 = require("net");
     var tls = require("tls");
     var { randomBytes, createHash: createHash2 } = require("crypto");
     var { Duplex, Readable: Readable3 } = require("stream");
@@ -19362,7 +19346,7 @@ var require_websocket = __commonJS({
     var protocolVersions = [8, 13];
     var readyStates = ["CONNECTING", "OPEN", "CLOSING", "CLOSED"];
     var subprotocolRegex = /^[!#$%&'*+\-.0-9A-Z^_`|a-z~]+$/;
-    var WebSocket2 = class _WebSocket extends EventEmitter2 {
+    var WebSocket2 = class _WebSocket extends EventEmitter3 {
       /**
        * Create a new `WebSocket`.
        *
@@ -19866,7 +19850,7 @@ var require_websocket = __commonJS({
       }
       const defaultPort = isSecure ? 443 : 80;
       const key = randomBytes(16).toString("base64");
-      const request = isSecure ? https.request : http2.request;
+      const request = isSecure ? https.request : http3.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
       opts.createConnection = opts.createConnection || (isSecure ? tlsConnect : netConnect);
@@ -20067,12 +20051,12 @@ var require_websocket = __commonJS({
     }
     function netConnect(options) {
       options.path = options.socketPath;
-      return net2.connect(options);
+      return net3.connect(options);
     }
     function tlsConnect(options) {
       options.path = void 0;
       if (!options.servername && options.servername !== "") {
-        options.servername = net2.isIP(options.host) ? "" : options.host;
+        options.servername = net3.isIP(options.host) ? "" : options.host;
       }
       return tls.connect(options);
     }
@@ -20359,8 +20343,8 @@ var require_subprotocol = __commonJS({
 var require_websocket_server = __commonJS({
   "../node_modules/.pnpm/ws@8.20.0/node_modules/ws/lib/websocket-server.js"(exports2, module2) {
     "use strict";
-    var EventEmitter2 = require("events");
-    var http2 = require("http");
+    var EventEmitter3 = require("events");
+    var http3 = require("http");
     var { Duplex } = require("stream");
     var { createHash: createHash2 } = require("crypto");
     var extension2 = require_extension();
@@ -20372,7 +20356,7 @@ var require_websocket_server = __commonJS({
     var RUNNING = 0;
     var CLOSING = 1;
     var CLOSED = 2;
-    var WebSocketServer2 = class extends EventEmitter2 {
+    var WebSocketServer2 = class extends EventEmitter3 {
       /**
        * Create a `WebSocketServer` instance.
        *
@@ -20435,8 +20419,8 @@ var require_websocket_server = __commonJS({
           );
         }
         if (options.port != null) {
-          this._server = http2.createServer((req, res) => {
-            const body = http2.STATUS_CODES[426];
+          this._server = http3.createServer((req, res) => {
+            const body = http3.STATUS_CODES[426];
             res.writeHead(426, {
               "Content-Length": body.length,
               "Content-Type": "text/plain"
@@ -20723,7 +20707,7 @@ var require_websocket_server = __commonJS({
       this.destroy();
     }
     function abortHandshake(socket, code, message, headers) {
-      message = message || http2.STATUS_CODES[code];
+      message = message || http3.STATUS_CODES[code];
       headers = {
         Connection: "close",
         "Content-Type": "text/html",
@@ -20732,7 +20716,7 @@ var require_websocket_server = __commonJS({
       };
       socket.once("finish", socket.destroy);
       socket.end(
-        `HTTP/1.1 ${code} ${http2.STATUS_CODES[code]}\r
+        `HTTP/1.1 ${code} ${http3.STATUS_CODES[code]}\r
 ` + Object.keys(headers).map((h) => `${h}: ${headers[h]}`).join("\r\n") + "\r\n\r\n" + message
       );
     }
@@ -21035,7 +21019,7 @@ var require_BufferList = __commonJS({
         this.head = this.tail = null;
         this.length = 0;
       };
-      BufferList.prototype.join = function join11(s) {
+      BufferList.prototype.join = function join12(s) {
         if (this.length === 0) return "";
         var p2 = this.head;
         var ret = "" + p2.data;
@@ -23625,8 +23609,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path60) {
-      var parts = path60.split("/");
+    exports2.resolve = function(path59) {
+      var parts = path59.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -29479,18 +29463,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path60) {
-      if (path60.slice(-1) === "/") {
-        path60 = path60.substring(0, path60.length - 1);
+    var parentFolder = function(path59) {
+      if (path59.slice(-1) === "/") {
+        path59 = path59.substring(0, path59.length - 1);
       }
-      var lastSlash = path60.lastIndexOf("/");
-      return lastSlash > 0 ? path60.substring(0, lastSlash) : "";
+      var lastSlash = path59.lastIndexOf("/");
+      return lastSlash > 0 ? path59.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path60) {
-      if (path60.slice(-1) !== "/") {
-        path60 += "/";
+    var forceTrailingSlash = function(path59) {
+      if (path59.slice(-1) !== "/") {
+        path59 += "/";
       }
-      return path60;
+      return path59;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -30945,6 +30929,8 @@ function resolveConfig(opts) {
   const frpcBinary = env.CLAWD_FRPC_BIN ?? null;
   const rawMode = env.CLAWD_CC_MODE;
   const mode = DAEMON_MODE_VALUES.includes(rawMode ?? "") ? rawMode : "sdk";
+  const filePreviewPorts = Array.isArray(fileCfg.previewPorts) ? fileCfg.previewPorts.map((n) => Number(n)).filter((n) => Number.isInteger(n) && n > 0) : null;
+  const previewPorts = env.CLAWD_PREVIEW_PORTS ? env.CLAWD_PREVIEW_PORTS.split(",").map((s) => Number(s.trim())).filter((n) => Number.isInteger(n) && n > 0) : filePreviewPorts && filePreviewPorts.length > 0 ? filePreviewPorts : null;
   return {
     port,
     host,
@@ -30956,7 +30942,8 @@ function resolveConfig(opts) {
     authToken,
     noTunnelPersist,
     frpcBinary,
-    mode
+    mode,
+    previewPorts
   };
 }
 var HELP_TEXT = `clawd [options]
@@ -32995,6 +32982,7 @@ var SessionManager = class {
       iconKey: args.iconKey,
       forkedFromSessionId: args.forkedFromSessionId,
       ownerPersonaId: args.ownerPersonaId,
+      appBuilderProject: args.appBuilderProject,
       creatorPrincipalId,
       ...creatorOwnerPrincipalId ? { creatorOwnerPrincipalId } : {},
       createdAt: iso,
@@ -34631,6 +34619,15 @@ var DEFAULT_PERSONAS = [
     model: "opus",
     iconKey: "assist",
     public: false
+  },
+  {
+    // app-builder：全栈应用搭建师，绑 extension-kit 模板 + multi-project picker
+    // spec: superpowers/specs/2026-06-01-app-builder-project-picker-design.md
+    personaId: "persona-app-builder",
+    label: "App Builder",
+    model: "opus",
+    iconKey: "assist",
+    public: false
   }
 ];
 function findDefaultsRoot() {
@@ -36327,13 +36324,63 @@ var import_websocket_server = __toESM(require_websocket_server(), 1);
 var wrapper_default = import_websocket.default;
 
 // src/transport/local-ws-server.ts
+var import_node_http2 = __toESM(require("http"), 1);
+
+// src/transport/preview-proxy.ts
 var import_node_http = __toESM(require("http"), 1);
+var import_node_net = __toESM(require("net"), 1);
+var PREVIEW_RE = /^\/preview\/(\d+)(?:\/.*)?$/;
+function matchPreviewPort(pathname) {
+  const m2 = pathname.match(PREVIEW_RE);
+  return m2 ? Number(m2[1]) : null;
+}
+function isPreviewPortAllowed(port, cfg) {
+  return cfg.allowedPorts.includes(port);
+}
+function proxyPreviewHttp(req, res, port) {
+  return new Promise((resolve6) => {
+    const upstream = import_node_http.default.request(
+      { host: "localhost", port, method: req.method, path: req.url, headers: req.headers },
+      (upRes) => {
+        res.writeHead(upRes.statusCode || 502, upRes.headers);
+        upRes.pipe(res);
+        upRes.on("end", () => resolve6());
+      }
+    );
+    upstream.on("error", (e) => {
+      if (!res.headersSent) {
+        res.writeHead(502, { "content-type": "text/plain; charset=utf-8" });
+      }
+      res.end(`preview upstream error: ${e.message}`);
+      resolve6();
+    });
+    req.pipe(upstream);
+  });
+}
+function proxyPreviewUpgrade(req, socket, head, port) {
+  const upstream = import_node_net.default.connect(port, "localhost", () => {
+    let raw = `${req.method} ${req.url} HTTP/1.1\r
+`;
+    for (let i = 0; i < req.rawHeaders.length; i += 2) {
+      raw += `${req.rawHeaders[i]}: ${req.rawHeaders[i + 1]}\r
+`;
+    }
+    raw += "\r\n";
+    upstream.write(raw);
+    if (head && head.length) upstream.write(head);
+    upstream.pipe(socket);
+    socket.pipe(upstream);
+  });
+  upstream.on("error", () => socket.destroy());
+  socket.on("error", () => upstream.destroy());
+}
+
+// src/transport/local-ws-server.ts
 var LocalWsServer = class {
   constructor(opts) {
     this.opts = opts;
     this.logger = opts.logger;
     this.pingIntervalMs = opts.pingIntervalMs ?? 3e4;
-    this.currentOwnerPrincipalId = opts.ownerPrincipalId;
   }
   opts;
   wss = null;
@@ -36345,19 +36392,28 @@ var LocalWsServer = class {
   capabilityIdToClients = /* @__PURE__ */ new Map();
   logger;
   pingIntervalMs;
-  // 飞书热切换（spec 决策 #9，2026-06-01 拍板）：登录后实时更新，broadcastToPrincipal
-  // 路由用最新身份；初始值来自 opts.ownerPrincipalId
-  currentOwnerPrincipalId;
-  /** 飞书热切换：登录回调成功后由 daemon wiring 调用，更新 DM 路由身份 */
-  setOwnerPrincipalId(id) {
-    this.currentOwnerPrincipalId = id;
-  }
   async start() {
     const host = this.opts.host ?? "127.0.0.1";
     await new Promise((resolve6, reject) => {
-      const httpServer = import_node_http.default.createServer((req, res) => this.handleHttpRequest(req, res));
+      const httpServer = import_node_http2.default.createServer((req, res) => this.handleHttpRequest(req, res));
       const wss = new import_websocket_server.default({ noServer: true, clientTracking: true });
       httpServer.on("upgrade", (req, socket, head) => {
+        if (req.url?.startsWith("/preview/")) {
+          const pathname = (() => {
+            try {
+              return new URL(req.url, "http://localhost").pathname;
+            } catch {
+              return "/";
+            }
+          })();
+          const port = matchPreviewPort(pathname);
+          if (port != null && (this.opts.previewPorts ?? []).includes(port)) {
+            proxyPreviewUpgrade(req, socket, head, port);
+          } else {
+            socket.destroy();
+          }
+          return;
+        }
         wss.handleUpgrade(req, socket, head, (ws) => {
           this.routeConnection(ws, req);
         });
@@ -36471,7 +36527,7 @@ var LocalWsServer = class {
   //   principalId === 'cap_xxx'         → 该 capability 的所有 guest ws (多端 / 多 tab)
   // 用于 DM inbox:event 路由: from + to 两侧各播一次, 让双方 UI 实时看到 thread 更新.
   broadcastToPrincipal(principalId, frame) {
-    if (principalId === "owner" || principalId === this.currentOwnerPrincipalId) {
+    if (principalId === "owner" || principalId === this.opts.ownerPrincipalId) {
       this.broadcastToOwners(frame);
       return;
     }
@@ -36523,21 +36579,6 @@ var LocalWsServer = class {
   getClientContext(clientId) {
     return this.clients.get(clientId)?.ctx ?? null;
   }
-  // 飞书热切换（spec 决策 #9）：身份切换后踢掉所有连接强制重连——在线连接的 ctx
-  // （attachClientContext 时绑定）持有旧身份，重连后用新身份重建。
-  // close code 4408（非 4401！4401 = token 撤销，客户端会停止重连）：
-  // 客户端按普通断连处理 → 自动重连 → 新身份 ctx。
-  closeAllClients(code = 4408, reason = "IDENTITY_SWITCHED") {
-    const ids = [...this.clients.keys()];
-    for (const id of ids) {
-      const c = this.clients.get(id);
-      if (!c) continue;
-      try {
-        c.ws.close(code, reason);
-      } catch {
-      }
-    }
-  }
   // Task 1.10 撤销级联：关闭某 capability 的所有活跃 ws 连接。close code 4401
   // 让客户端识别 'capability revoked' 而非普通断连。
   closeConnectionsByCapability(capabilityId, code = 4401, reason = "TOKEN_REVOKED") {
@@ -38020,23 +38061,13 @@ function createHttpRouter(deps) {
       });
       return true;
     }
-    if (url.pathname === "/auth/callback") {
-      if (req.method !== "GET") {
-        sendJson(res, 404, { code: "NOT_FOUND", message: `no route for ${req.method} ${url.pathname}` });
+    if (url.pathname.startsWith("/preview/")) {
+      const port = matchPreviewPort(url.pathname);
+      if (port != null && isPreviewPortAllowed(port, { allowedPorts: deps.previewPorts ?? [] })) {
+        await proxyPreviewHttp(req, res, port);
         return true;
       }
-      if (!deps.feishuLogin) {
-        sendJson(res, 501, { code: "NOT_IMPLEMENTED", message: "feishu login not wired" });
-        return true;
-      }
-      const result = await deps.feishuLogin.handleLoginCallback({
-        token: url.searchParams.get("token") ?? "",
-        state: url.searchParams.get("state") ?? "",
-        expiresAt: url.searchParams.get("expires_at")
-      });
-      const html = result.ok ? `<!doctype html><meta charset="utf-8"><title>clawd</title><style>body{font-family:-apple-system,sans-serif;padding:48px;color:#222}</style><h2>\u767B\u5F55\u6210\u529F\uFF0C\u53EF\u5173\u95ED\u6B64\u9875\u3002</h2><p>\u8EAB\u4EFD\uFF1A${escapeHtml(result.identity.displayName)}</p><script>setTimeout(()=>window.close(),1500)</script>` : `<!doctype html><meta charset="utf-8"><title>clawd</title><style>body{font-family:-apple-system,sans-serif;padding:48px;color:#922}</style><h2>\u767B\u5F55\u5931\u8D25</h2><p>${escapeHtml(result.reason)}</p>`;
-      res.writeHead(result.ok ? 200 : 400, { "Content-Type": "text/html; charset=utf-8" });
-      res.end(html);
+      sendJson(res, 403, { code: "PREVIEW_PORT_FORBIDDEN", message: "preview port not allowed" });
       return true;
     }
     if (!url.pathname.startsWith("/session/") && !url.pathname.startsWith("/files/") && url.pathname !== "/attachments/upload" && url.pathname !== "/extensions/import") {
@@ -38274,9 +38305,6 @@ function parseUrl(rawUrl) {
     return null;
   }
 }
-function escapeHtml(s) {
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
-}
 function sendJson(res, status, body, extraHeaders) {
   res.writeHead(status, {
     "Content-Type": "application/json; charset=utf-8",
@@ -39299,160 +39327,6 @@ function loadOwnerDisplayName(dataDir) {
   return displayName;
 }
 
-// src/feishu-auth/owner-identity-store.ts
-var import_node_fs27 = __toESM(require("fs"), 1);
-var import_node_path31 = __toESM(require("path"), 1);
-var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
-var OwnerIdentityStore = class {
-  file;
-  constructor(dataDir) {
-    this.file = import_node_path31.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
-  }
-  read() {
-    let raw;
-    try {
-      raw = import_node_fs27.default.readFileSync(this.file, "utf8");
-    } catch {
-      return null;
-    }
-    let parsed;
-    try {
-      parsed = JSON.parse(raw);
-    } catch {
-      return null;
-    }
-    const r = parsed;
-    if (!r.identity || typeof r.identity.unionId !== "string" || r.identity.unionId.length === 0 || typeof r.identity.displayName !== "string" || r.identity.displayName.length === 0 || typeof r.ttcToken !== "string" || r.ttcToken.length === 0) {
-      return null;
-    }
-    return {
-      identity: {
-        unionId: r.identity.unionId,
-        displayName: r.identity.displayName,
-        ...typeof r.identity.avatarUrl === "string" ? { avatarUrl: r.identity.avatarUrl } : {}
-      },
-      ttcToken: r.ttcToken,
-      ttcTokenExpiresAt: typeof r.ttcTokenExpiresAt === "number" ? r.ttcTokenExpiresAt : null,
-      loginAt: typeof r.loginAt === "string" ? r.loginAt : (/* @__PURE__ */ new Date(0)).toISOString()
-    };
-  }
-  write(record) {
-    import_node_fs27.default.mkdirSync(import_node_path31.default.dirname(this.file), { recursive: true });
-    import_node_fs27.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
-    try {
-      import_node_fs27.default.chmodSync(this.file, 384);
-    } catch {
-    }
-  }
-  clear() {
-    try {
-      import_node_fs27.default.unlinkSync(this.file);
-    } catch (err) {
-      const code = err?.code;
-      if (code !== "ENOENT") throw err;
-    }
-  }
-};
-
-// src/feishu-auth/login-flow.ts
-var import_node_crypto11 = __toESM(require("crypto"), 1);
-var STATE_TTL_MS = 5 * 60 * 1e3;
-var LoginFlow = class {
-  constructor(deps) {
-    this.deps = deps;
-  }
-  deps;
-  pendingStates = /* @__PURE__ */ new Map();
-  start() {
-    const state = import_node_crypto11.default.randomBytes(16).toString("base64url");
-    const now = (this.deps.now ?? Date.now)();
-    this.pendingStates.set(state, now);
-    this.gcExpired(now);
-    const url = new URL("/auth/authorize", this.deps.ttcAuthBase);
-    url.searchParams.set("callback_url", this.deps.getCallbackUrl());
-    url.searchParams.set("state", state);
-    url.searchParams.set("auto", "1");
-    return { authUrl: url.toString(), state };
-  }
-  async handleCallback(params) {
-    const now = (this.deps.now ?? Date.now)();
-    const issuedAt = this.pendingStates.get(params.state);
-    if (issuedAt === void 0) {
-      return { ok: false, reason: "state mismatch" };
-    }
-    this.pendingStates.delete(params.state);
-    if (now - issuedAt > STATE_TTL_MS) {
-      return { ok: false, reason: "state expired" };
-    }
-    if (!params.token) {
-      return { ok: false, reason: "missing token" };
-    }
-    let identity;
-    try {
-      identity = await this.deps.fetchUserInfo(params.token);
-    } catch (err) {
-      return { ok: false, reason: `user_info failed: ${err.message}` };
-    }
-    const expiresAtNum = params.expiresAt ? Number.parseInt(params.expiresAt, 10) : NaN;
-    this.deps.store.write({
-      identity,
-      ttcToken: params.token,
-      ttcTokenExpiresAt: Number.isFinite(expiresAtNum) ? expiresAtNum : null,
-      loginAt: new Date(now).toISOString()
-    });
-    return { ok: true, identity };
-  }
-  gcExpired(now) {
-    for (const [state, issuedAt] of this.pendingStates) {
-      if (now - issuedAt > STATE_TTL_MS) this.pendingStates.delete(state);
-    }
-  }
-};
-
-// src/feishu-auth/ttc-client.ts
-var TTC_HOSTS = {
-  auth: "https://app.ttcadvisory.com",
-  api: "https://api.ttcadvisory.com"
-};
-var TtcUserInfoError = class extends Error {
-  constructor(code, message) {
-    super(message);
-    this.code = code;
-    this.name = "TtcUserInfoError";
-  }
-  code;
-};
-async function fetchTtcUserInfo(opts) {
-  const doFetch = opts.fetchImpl ?? fetch;
-  let res;
-  try {
-    res = await doFetch(`${opts.apiBase}/api/user_service/v1/login/user`, {
-      headers: { Authorization: `Bearer ${opts.token}` }
-    });
-  } catch (err) {
-    throw new TtcUserInfoError("NETWORK", `TTC user_info request failed: ${err.message}`);
-  }
-  if (!res.ok) {
-    if (res.status === 401) {
-      throw new TtcUserInfoError("UNAUTHORIZED", "TTC token invalid or expired");
-    }
-    throw new TtcUserInfoError("API_ERROR", `TTC user_info HTTP ${res.status}`);
-  }
-  const body = await res.json();
-  if (body.code !== 0) {
-    throw new TtcUserInfoError("API_ERROR", `TTC user_info code=${body.code}: ${body.message ?? ""}`);
-  }
-  const d = body.data;
-  if (!d || typeof d.union_id !== "string" || d.union_id.length === 0 || typeof d.name !== "string" || d.name.length === 0) {
-    throw new TtcUserInfoError("BAD_RESPONSE", "TTC user_info missing union_id or name");
-  }
-  return {
-    unionId: d.union_id,
-    displayName: d.name,
-    ...typeof d.avatar_url === "string" && d.avatar_url.length > 0 ? { avatarUrl: d.avatar_url } : {}
-  };
-}
-
 // src/index.ts
 init_protocol();
 
@@ -39460,12 +39334,12 @@ init_protocol();
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs28 = __toESM(require("fs"), 1);
+var import_node_fs27 = __toESM(require("fs"), 1);
 var import_node_os14 = __toESM(require("os"), 1);
-var import_node_path32 = __toESM(require("path"), 1);
+var import_node_path31 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs28.default.readFileSync(file, "utf8");
+  const raw = import_node_fs27.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -39478,10 +39352,10 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path32.default.join(import_node_os14.default.homedir(), ".claude");
-  const projectDir = import_node_path32.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  const sourceFile = import_node_path32.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs28.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path31.default.join(import_node_os14.default.homedir(), ".claude");
+  const projectDir = import_node_path31.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  const sourceFile = import_node_path31.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs27.default.existsSync(sourceFile)) {
     throw new Error(`fork: source transcript not found: ${sourceFile}`);
   }
   const entries = readJsonlEntries(sourceFile);
@@ -39511,9 +39385,9 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const forkedFilePath = import_node_path32.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs28.default.mkdirSync(projectDir, { recursive: true });
-  import_node_fs28.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const forkedFilePath = import_node_path31.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs27.default.mkdirSync(projectDir, { recursive: true });
+  import_node_fs27.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
@@ -39865,7 +39739,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path42 = __toESM(require("path"), 1);
+var path41 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -39883,7 +39757,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path41 = __toESM(require("path"), 1);
+var path40 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -39896,26 +39770,26 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read") {
-  const root = path41.resolve(personaRoot);
-  const target = path41.resolve(absPath);
-  const sep3 = root.endsWith(path41.sep) ? "" : path41.sep;
+  const root = path40.resolve(personaRoot);
+  const target = path40.resolve(absPath);
+  const sep3 = root.endsWith(path40.sep) ? "" : path40.sep;
   if (!target.startsWith(root + sep3)) return false;
-  const rel = path41.relative(root, target);
+  const rel = path40.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId = rel.split(path41.sep)[0];
+  const personaId = rel.split(path40.sep)[0];
   if (!personaId) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path41.resolve(personaRoot);
-  const target = path41.resolve(absPath);
-  const sep3 = root.endsWith(path41.sep) ? "" : path41.sep;
+  const root = path40.resolve(personaRoot);
+  const target = path40.resolve(absPath);
+  const sep3 = root.endsWith(path40.sep) ? "" : path40.sep;
   if (!target.startsWith(root + sep3)) return null;
-  const rel = path41.relative(root, target);
+  const rel = path40.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path41.sep)[0];
+  const id = rel.split(path40.sep)[0];
   return id || null;
 }
 
@@ -39940,7 +39814,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path42.join(personaRoot, pid),
+          path41.join(personaRoot, pid),
           personaRoot,
           "read"
         );
@@ -39951,7 +39825,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path42.resolve(args.projectPath), personaRoot, "history:list");
+    assertGuestPath(ctx, path41.resolve(args.projectPath), personaRoot, "history:list");
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -39983,13 +39857,13 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path42.resolve(args.cwd), personaRoot, "history:subagents");
+    assertGuestPath(ctx, path41.resolve(args.cwd), personaRoot, "history:subagents");
     const subs = await history.listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path42.resolve(args.cwd), personaRoot, "history:subagent-read");
+    assertGuestPath(ctx, path41.resolve(args.cwd), personaRoot, "history:subagent-read");
     const res = await history.readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
   };
@@ -39997,7 +39871,7 @@ function buildHistoryHandlers(deps) {
     const dirs = listRecentDirs(store);
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path42.resolve(d.cwd), personaRoot, "read")
+        (d) => isGuestPathAllowed(ctx.grants, path41.resolve(d.cwd), personaRoot, "read")
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -40014,7 +39888,7 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path43 = __toESM(require("path"), 1);
+var path42 = __toESM(require("path"), 1);
 var os15 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
@@ -40055,22 +39929,22 @@ function buildWorkspaceHandlers(deps) {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
     const fallbackCwd = isGuest && personaRoot ? personaRoot : os15.homedir();
-    const resolvedCwd = path43.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path43.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const resolvedCwd = path42.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path42.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list");
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path43.isAbsolute(args.path) ? path43.resolve(args.path) : path43.resolve(args.cwd, args.path);
+    const target = path42.isAbsolute(args.path) ? path42.resolve(args.path) : path42.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read");
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path43.resolve(args.cwd);
+    const cwdAbs = path42.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list");
     const list2 = skills.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -40082,7 +39956,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path43.resolve(args.cwd);
+    const cwdAbs = path42.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list");
     const list2 = agents.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -40101,20 +39975,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path45 = __toESM(require("path"), 1);
+var path44 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process6 = require("child_process");
-var import_node_fs29 = __toESM(require("fs"), 1);
-var import_node_path33 = __toESM(require("path"), 1);
+var import_node_fs28 = __toESM(require("fs"), 1);
+var import_node_path32 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process6.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path33.default.resolve(p2);
+  const resolved = import_node_path32.default.resolve(p2);
   try {
-    return import_node_fs29.default.realpathSync(resolved);
+    return import_node_fs28.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -40187,7 +40061,7 @@ async function listGitBranches(cwd) {
 // src/handlers/git.ts
 function assertGuestCwd(ctx, cwd, personaRoot, method) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
-  if (!isGuestPathAllowed(ctx.grants, path45.resolve(cwd), personaRoot, "read")) {
+  if (!isGuestPathAllowed(ctx.grants, path44.resolve(cwd), personaRoot, "read")) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -40549,36 +40423,6 @@ function buildWhoamiHandler(deps) {
   };
 }
 
-// src/handlers/feishu-auth.ts
-function buildFeishuAuthHandlers(deps) {
-  const loginStart = async () => {
-    const { authUrl, state } = deps.loginFlow.start();
-    return {
-      response: { type: "auth:login:start:ok", authUrl, state }
-    };
-  };
-  const getIdentity = async () => {
-    const record = deps.ownerIdentityStore.read();
-    return {
-      response: {
-        type: "auth:getIdentity:ok",
-        identity: record ? record.identity : null
-      }
-    };
-  };
-  const logout = async () => {
-    deps.ownerIdentityStore.clear();
-    return {
-      response: { type: "auth:logout:ok" }
-    };
-  };
-  return {
-    "auth:login:start": loginStart,
-    "auth:getIdentity": getIdentity,
-    "auth:logout": logout
-  };
-}
-
 // src/handlers/meta.ts
 var import_node_os15 = __toESM(require("os"), 1);
 init_protocol();
@@ -40706,7 +40550,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path34 = __toESM(require("path"), 1);
+var import_node_path33 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -40760,12 +40604,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path34.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path34.default.isAbsolute(args.relPath) ? import_node_path34.default.resolve(args.relPath) : import_node_path34.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path33.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path33.default.isAbsolute(args.relPath) ? import_node_path33.default.resolve(args.relPath) : import_node_path33.default.resolve(cwdAbs, args.relPath);
     assertGuestAttachmentPath(ctx, candidateAbs, deps.personaRoot, "attachment.signUrl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path34.default.isAbsolute(e.relPath) ? import_node_path34.default.resolve(e.relPath) : import_node_path34.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path33.default.isAbsolute(e.relPath) ? import_node_path33.default.resolve(e.relPath) : import_node_path33.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -40789,7 +40633,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path34.default.resolve(f.cwd), deps.personaRoot, method);
+    assertGuestAttachmentPath(ctx, import_node_path33.default.resolve(f.cwd), deps.personaRoot, method);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -40861,19 +40705,19 @@ function buildAttachmentHandlers(deps) {
 
 // src/handlers/extension.ts
 var import_promises7 = __toESM(require("fs/promises"), 1);
-var import_node_path39 = __toESM(require("path"), 1);
+var import_node_path38 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/extension/bundle-zip.ts
 var import_promises4 = __toESM(require("fs/promises"), 1);
-var import_node_path35 = __toESM(require("path"), 1);
-var import_node_crypto12 = __toESM(require("crypto"), 1);
+var import_node_path34 = __toESM(require("path"), 1);
+var import_node_crypto11 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
   const zip = new import_jszip2.default();
   for (const rel of entries) {
-    const abs = import_node_path35.default.join(dir, rel);
+    const abs = import_node_path34.default.join(dir, rel);
     const content = await import_promises4.default.readFile(abs);
     zip.file(rel, content, { date: FIXED_DATE });
   }
@@ -40882,7 +40726,7 @@ async function bundleExtensionDir(dir) {
     compression: "DEFLATE",
     compressionOptions: { level: 6 }
   });
-  const sha256 = import_node_crypto12.default.createHash("sha256").update(buffer).digest("hex");
+  const sha256 = import_node_crypto11.default.createHash("sha256").update(buffer).digest("hex");
   return { buffer, sha256 };
 }
 var FIXED_DATE = /* @__PURE__ */ new Date("2020-01-01T00:00:00.000Z");
@@ -40894,7 +40738,7 @@ async function listFilesSorted(rootDir) {
   return out;
 }
 async function walk(absRoot, relPrefix, out) {
-  const dirAbs = import_node_path35.default.join(absRoot, relPrefix);
+  const dirAbs = import_node_path34.default.join(absRoot, relPrefix);
   const entries = await import_promises4.default.readdir(dirAbs, { withFileTypes: true });
   for (const e of entries) {
     if (IGNORE_BASENAMES.has(e.name)) continue;
@@ -40948,25 +40792,25 @@ function computePublishCheck(args) {
 
 // src/extension/install-flow.ts
 var import_promises5 = __toESM(require("fs/promises"), 1);
-var import_node_path37 = __toESM(require("path"), 1);
+var import_node_path36 = __toESM(require("path"), 1);
 var import_node_os17 = __toESM(require("os"), 1);
-var import_node_crypto13 = __toESM(require("crypto"), 1);
+var import_node_crypto12 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
 var import_node_os16 = __toESM(require("os"), 1);
-var import_node_path36 = __toESM(require("path"), 1);
+var import_node_path35 = __toESM(require("path"), 1);
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path36.default.join(import_node_os16.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path35.default.join(import_node_os16.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
-  return import_node_path36.default.join(clawdHomeRoot(override), "extensions");
+  return import_node_path35.default.join(clawdHomeRoot(override), "extensions");
 }
 function publishedChannelsFile(override) {
-  return import_node_path36.default.join(clawdHomeRoot(override), "extensions-published.json");
+  return import_node_path35.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
 function bundleCacheRoot(override) {
-  return import_node_path36.default.join(clawdHomeRoot(override), "extension-bundles");
+  return import_node_path35.default.join(clawdHomeRoot(override), "extension-bundles");
 }
 
 // src/extension/install-flow.ts
@@ -40979,7 +40823,7 @@ var InstallError = class extends Error {
 };
 async function installFromChannel(args, deps) {
   const { channelRef, snapshotHash, bundleZip } = args;
-  const computed = import_node_crypto13.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto12.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new InstallError(
       "HASH_MISMATCH",
@@ -40993,7 +40837,7 @@ async function installFromChannel(args, deps) {
     throw new InstallError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path37.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path36.default.isAbsolute(name)) {
       throw new InstallError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -41025,7 +40869,7 @@ async function installFromChannel(args, deps) {
     );
   }
   const localExtId = namespacedExtId(ownerSlug, channelRef.ownerPrincipalId);
-  const destDir = import_node_path37.default.join(deps.extensionsRoot, localExtId);
+  const destDir = import_node_path36.default.join(deps.extensionsRoot, localExtId);
   let destExists = false;
   try {
     await import_promises5.default.access(destDir);
@@ -41039,16 +40883,16 @@ async function installFromChannel(args, deps) {
     );
   }
   const stage = await import_promises5.default.mkdtemp(
-    import_node_path37.default.join(import_node_os17.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+    import_node_path36.default.join(import_node_os17.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path37.default.join(stage, name);
+      const dest = import_node_path36.default.join(stage, name);
       if (entry.dir) {
         await import_promises5.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises5.default.mkdir(import_node_path37.default.dirname(dest), { recursive: true });
+      await import_promises5.default.mkdir(import_node_path36.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises5.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -41069,9 +40913,9 @@ async function installFromChannel(args, deps) {
 
 // src/extension/update-flow.ts
 var import_promises6 = __toESM(require("fs/promises"), 1);
-var import_node_path38 = __toESM(require("path"), 1);
+var import_node_path37 = __toESM(require("path"), 1);
 var import_node_os18 = __toESM(require("os"), 1);
-var import_node_crypto14 = __toESM(require("crypto"), 1);
+var import_node_crypto13 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
 var UpdateError = class extends Error {
   constructor(code, message) {
@@ -41086,11 +40930,11 @@ async function updateFromChannel(args, deps) {
     channelRef.extId,
     channelRef.ownerPrincipalId
   );
-  const liveDir = import_node_path38.default.join(deps.extensionsRoot, localExtId);
+  const liveDir = import_node_path37.default.join(deps.extensionsRoot, localExtId);
   const prevDir = `${liveDir}.prev`;
   let existingVersion;
   try {
-    const raw = await import_promises6.default.readFile(import_node_path38.default.join(liveDir, "manifest.json"), "utf8");
+    const raw = await import_promises6.default.readFile(import_node_path37.default.join(liveDir, "manifest.json"), "utf8");
     const parsed2 = ExtensionManifestSchema.safeParse(JSON.parse(raw));
     if (!parsed2.success) {
       throw new UpdateError(
@@ -41109,7 +40953,7 @@ async function updateFromChannel(args, deps) {
     if (e instanceof UpdateError) throw e;
     throw e;
   }
-  const computed = import_node_crypto14.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto13.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new UpdateError(
       "HASH_MISMATCH",
@@ -41123,7 +40967,7 @@ async function updateFromChannel(args, deps) {
     throw new UpdateError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path38.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path37.default.isAbsolute(name)) {
       throw new UpdateError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -41158,16 +41002,16 @@ async function updateFromChannel(args, deps) {
   await import_promises6.default.rm(prevDir, { recursive: true, force: true });
   await import_promises6.default.rename(liveDir, prevDir);
   const stage = await import_promises6.default.mkdtemp(
-    import_node_path38.default.join(import_node_os18.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+    import_node_path37.default.join(import_node_os18.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path38.default.join(stage, name);
+      const dest = import_node_path37.default.join(stage, name);
       if (entry.dir) {
         await import_promises6.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises6.default.mkdir(import_node_path38.default.dirname(dest), { recursive: true });
+      await import_promises6.default.mkdir(import_node_path37.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises6.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -41260,7 +41104,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
       );
     }
   }
-  const manifestPath = import_node_path39.default.join(root, extId, "manifest.json");
+  const manifestPath = import_node_path38.default.join(root, extId, "manifest.json");
   const manifest = await readManifest(root, extId);
   const next = { ...manifest, version: newVersion };
   const tmp = `${manifestPath}.tmp`;
@@ -41268,7 +41112,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
   await import_promises7.default.rename(tmp, manifestPath);
 }
 async function readManifest(root, extId) {
-  const file = import_node_path39.default.join(root, extId, "manifest.json");
+  const file = import_node_path38.default.join(root, extId, "manifest.json");
   let raw;
   try {
     raw = await import_promises7.default.readFile(file, "utf8");
@@ -41359,7 +41203,7 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256, buffer } = await bundleExtensionDir(import_node_path39.default.join(deps.root, extId));
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path38.default.join(deps.root, extId));
     return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
@@ -41539,9 +41383,64 @@ function buildExtensionHandlers(deps) {
   };
 }
 
+// src/handlers/app-builder.ts
+function buildAppBuilderHandlers(deps) {
+  const { store, deleteSessionsByProject, devServerLifecycle } = deps;
+  const listProjects = async () => {
+    const projects = await store.list();
+    return {
+      response: {
+        projects: projects.map((p2) => ({
+          ...p2,
+          isRunning: devServerLifecycle.isRunning(p2.name),
+          boundSessionId: devServerLifecycle.boundSessionId(p2.name)
+        }))
+      }
+    };
+  };
+  const createProject = async (frame) => {
+    const name = frame.name;
+    if (typeof name !== "string") throw new Error("createProject: name must be string");
+    const project = await store.create(name);
+    return { response: { project } };
+  };
+  const deleteProject = async (frame) => {
+    const name = frame.name;
+    if (typeof name !== "string") throw new Error("deleteProject: name must be string");
+    await devServerLifecycle.stopForProject(name);
+    await deleteSessionsByProject(name);
+    await store.delete(name);
+    return { response: {} };
+  };
+  const updateProjectPort = async (frame) => {
+    const f = frame;
+    if (typeof f.name !== "string") throw new Error("updateProjectPort: name must be string");
+    if (typeof f.newPort !== "number") throw new Error("updateProjectPort: newPort must be number");
+    const entry = devServerLifecycle.boundEntry(f.name);
+    await devServerLifecycle.stopForProject(f.name);
+    const project = await store.updatePort(f.name, f.newPort);
+    if (entry) {
+      await devServerLifecycle.restartForProjectAt({
+        projectName: f.name,
+        newPort: f.newPort,
+        sessionId: entry.sessionId,
+        cwd: entry.cwd,
+        tunnelHost: entry.tunnelHost
+      });
+    }
+    return { response: { project } };
+  };
+  return {
+    "appBuilder:listProjects": listProjects,
+    "appBuilder:createProject": createProject,
+    "appBuilder:deleteProject": deleteProject,
+    "appBuilder:updateProjectPort": updateProjectPort
+  };
+}
+
 // src/extension/registry.ts
 var import_promises8 = __toESM(require("fs/promises"), 1);
-var import_node_path40 = __toESM(require("path"), 1);
+var import_node_path39 = __toESM(require("path"), 1);
 async function loadAll(root) {
   let entries;
   try {
@@ -41554,13 +41453,13 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path40.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path39.default.join(root, ent.name), ent.name));
   }
   records.sort((a, b2) => a.extId < b2.extId ? -1 : a.extId > b2.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path40.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path39.default.join(dir, "manifest.json");
   let raw;
   try {
     raw = await import_promises8.default.readFile(manifestPath, "utf8");
@@ -41605,7 +41504,7 @@ async function loadOne(dir, dirName) {
 
 // src/extension/uninstall.ts
 var import_promises9 = __toESM(require("fs/promises"), 1);
-var import_node_path41 = __toESM(require("path"), 1);
+var import_node_path40 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -41614,7 +41513,7 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path41.default.join(deps.root, deps.extId);
+  const dir = import_node_path40.default.join(deps.root, deps.extId);
   try {
     await import_promises9.default.access(dir);
   } catch {
@@ -41660,7 +41559,6 @@ function buildMethodHandlers(deps) {
       personaStore: deps.personaStore,
       capabilityManager: deps.capabilityManager
     }),
-    ...buildFeishuAuthHandlers(deps.feishuAuth),
     ...deps.attachment ? buildAttachmentHandlers(deps.attachment) : {},
     ...buildExtensionHandlers({
       loadAll,
@@ -41669,10 +41567,186 @@ function buildMethodHandlers(deps) {
       root: extensionsRoot(),
       publishedChannelStore: deps.publishedChannelStore,
       bundleCache: deps.bundleCache
+    }),
+    ...buildAppBuilderHandlers({
+      store: deps.appBuilderStore,
+      deleteSessionsByProject: deps.deleteSessionsByProject,
+      devServerLifecycle: deps.devServerLifecycle
     })
   };
 }
 
+// src/app-builder/project-store.ts
+var import_node_fs29 = require("fs");
+var import_node_path41 = require("path");
+init_protocol();
+var PROJECTS_DIR = "projects";
+var META_FILE = ".clawd-project.json";
+var ProjectStore = class {
+  /** @param personaRoot persona 目录，例如 `~/.clawd/personas/persona-app-builder/` */
+  constructor(personaRoot) {
+    this.personaRoot = personaRoot;
+  }
+  personaRoot;
+  /** projects/<name>/.clawd-project.json 路径 */
+  metaPath(name) {
+    return (0, import_node_path41.join)(this.projectsRoot(), name, META_FILE);
+  }
+  /** projects/<name>/ 目录路径（cwd 用） */
+  projectDir(name) {
+    return (0, import_node_path41.join)(this.projectsRoot(), name);
+  }
+  projectsRoot() {
+    return (0, import_node_path41.join)(this.personaRoot, PROJECTS_DIR);
+  }
+  async list() {
+    let entries;
+    try {
+      entries = await import_node_fs29.promises.readdir(this.projectsRoot());
+    } catch (err) {
+      if (err.code === "ENOENT") return [];
+      throw err;
+    }
+    const out = [];
+    for (const name of entries) {
+      try {
+        const raw = await import_node_fs29.promises.readFile(this.metaPath(name), "utf8");
+        const parsed = ProjectMetadataSchema.safeParse(JSON.parse(raw));
+        if (parsed.success) out.push(parsed.data);
+      } catch {
+      }
+    }
+    return out.sort((a, b2) => a.name.localeCompare(b2.name));
+  }
+  async create(name) {
+    const existing = await this.list();
+    if (existing.some((p2) => p2.name === name)) {
+      throw new Error(`project "${name}" already exists / \u5DF2\u5B58\u5728`);
+    }
+    const usedPorts = new Set(existing.map((p2) => p2.port));
+    let port = -1;
+    for (let p2 = PROJECT_PORT_MIN; p2 <= PROJECT_PORT_MAX; p2++) {
+      if (!usedPorts.has(p2)) {
+        port = p2;
+        break;
+      }
+    }
+    if (port < 0) {
+      throw new Error(
+        `port pool exhausted / \u7AEF\u53E3\u6C60\u5DF2\u6EE1\uFF08${PROJECT_PORT_MIN}-${PROJECT_PORT_MAX}\uFF09\uFF0C\u5148\u5220\u4E00\u4E2A project \u91CA\u653E\u7AEF\u53E3`
+      );
+    }
+    const meta = {
+      name,
+      port,
+      createdAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    const validated = ProjectMetadataSchema.safeParse(meta);
+    if (!validated.success) {
+      throw new Error(`invalid name "${name}": ${validated.error.message}`);
+    }
+    const dir = this.projectDir(name);
+    await import_node_fs29.promises.mkdir(dir, { recursive: true });
+    await import_node_fs29.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
+    return meta;
+  }
+  async delete(name) {
+    const dir = this.projectDir(name);
+    await import_node_fs29.promises.rm(dir, { recursive: true, force: true });
+  }
+  async updatePort(name, newPort) {
+    if (newPort < PROJECT_PORT_MIN || newPort > PROJECT_PORT_MAX) {
+      throw new Error(
+        `port range invalid: must be ${PROJECT_PORT_MIN}-${PROJECT_PORT_MAX}, got ${newPort}`
+      );
+    }
+    const list = await this.list();
+    const target = list.find((p2) => p2.name === name);
+    if (!target) throw new Error(`project "${name}" not found / \u4E0D\u5B58\u5728`);
+    const conflict = list.find((p2) => p2.name !== name && p2.port === newPort);
+    if (conflict) {
+      throw new Error(`port ${newPort} already used / \u5DF2\u88AB project "${conflict.name}" \u5360\u7528`);
+    }
+    const updated = { ...target, port: newPort };
+    await import_node_fs29.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
+    return updated;
+  }
+};
+
+// src/app-builder/dev-server-supervisor.ts
+var import_node_child_process7 = require("child_process");
+var import_node_events2 = require("events");
+var DevServerSupervisor = class extends import_node_events2.EventEmitter {
+  running = /* @__PURE__ */ new Map();
+  // key: sessionId
+  startForSession(args) {
+    if (this.running.has(args.sessionId)) return;
+    const env = {
+      ...process.env,
+      CLAWD_TUNNEL_HOST: args.tunnelHost ?? "",
+      CLAWD_PREVIEW_PORT: String(args.port)
+    };
+    const child = (0, import_node_child_process7.spawn)("pnpm", ["dev"], { cwd: args.cwd, env, stdio: "pipe" });
+    const entry = { ...args, process: child };
+    this.running.set(args.sessionId, entry);
+    child.on("exit", (code) => {
+      this.running.delete(args.sessionId);
+      if (code !== 0 && code !== null) {
+        const ev = {
+          sessionId: args.sessionId,
+          projectName: args.projectName,
+          port: args.port,
+          exitCode: code
+        };
+        this.emit("devServer:failed", ev);
+      }
+    });
+  }
+  stopForSession(sessionId) {
+    const entry = this.running.get(sessionId);
+    if (!entry) return Promise.resolve();
+    return new Promise((resolve6) => {
+      entry.process.once("exit", () => {
+        this.running.delete(sessionId);
+        resolve6();
+      });
+      entry.process.kill("SIGTERM");
+    });
+  }
+  async stopForProject(projectName) {
+    const entry = [...this.running.values()].find((e) => e.projectName === projectName);
+    if (!entry) return;
+    await this.stopForSession(entry.sessionId);
+  }
+  async restartForProjectAt(args) {
+    await this.stopForSession(args.sessionId);
+    this.startForSession({
+      sessionId: args.sessionId,
+      projectName: args.projectName,
+      port: args.newPort,
+      cwd: args.cwd,
+      tunnelHost: args.tunnelHost
+    });
+  }
+  isRunning(projectName) {
+    return [...this.running.values()].some((e) => e.projectName === projectName);
+  }
+  boundSessionId(projectName) {
+    const entry = [...this.running.values()].find((e) => e.projectName === projectName);
+    return entry?.sessionId ?? null;
+  }
+  boundEntry(projectName) {
+    const entry = [...this.running.values()].find((e) => e.projectName === projectName);
+    if (!entry) return null;
+    return {
+      sessionId: entry.sessionId,
+      cwd: entry.cwd,
+      port: entry.port,
+      tunnelHost: entry.tunnelHost
+    };
+  }
+};
+
 // src/handlers/method-grants.ts
 var ADMIN_ANY = {
   kind: "fixed",
@@ -41803,11 +41877,14 @@ var METHOD_GRANT_MAP = {
   // guest-self：guest 在自己 daemon 上触发安装与更新（无持久化 subscription 概念）
   "extension.install-from-channel": ADMIN_ANY,
   "extension.update-from-channel": ADMIN_ANY,
-  // ---- auth:* 飞书统一身份 Phase 1（owner-only） ----
-  // 登录/登出/查身份都是 owner 本机操作，guest 不可调
-  "auth:login:start": ADMIN_ANY,
-  "auth:getIdentity": ADMIN_ANY,
-  "auth:logout": ADMIN_ANY
+  // ---- app-builder Project picker（spec 2026-06-01-app-builder-project-picker-design） ----
+  // owner-only：picker UI 给 owner 管理本机 build 中的 project（fs + 端口分配）。
+  // 即使 persona-app-builder 是 PreinstalledPersona，project 管理也属本机 owner 行为，
+  // 不暴露给 guest（远端接入者）。
+  "appBuilder:listProjects": ADMIN_ANY,
+  "appBuilder:createProject": ADMIN_ANY,
+  "appBuilder:deleteProject": ADMIN_ANY,
+  "appBuilder:updateProjectPort": ADMIN_ANY
 };
 function computeGrantForFrame(method, frame) {
   const rule = METHOD_GRANT_MAP[method];
@@ -41823,12 +41900,12 @@ function computeGrantForFrame(method, frame) {
 }
 
 // src/extension/runtime.ts
-var import_node_child_process7 = require("child_process");
+var import_node_child_process8 = require("child_process");
 var import_node_path42 = __toESM(require("path"), 1);
 var import_promises10 = require("timers/promises");
 
 // src/extension/port-allocator.ts
-var import_node_net = __toESM(require("net"), 1);
+var import_node_net2 = __toESM(require("net"), 1);
 var PortExhaustedError = class extends Error {
   constructor(min, max) {
     super(`no free port in [${min},${max}]`);
@@ -41841,7 +41918,7 @@ var PortExhaustedError = class extends Error {
 };
 function probe(port) {
   return new Promise((resolve6) => {
-    const srv = import_node_net.default.createServer();
+    const srv = import_node_net2.default.createServer();
     srv.once("error", () => resolve6(false));
     srv.once("listening", () => {
       srv.close(() => resolve6(true));
@@ -41931,7 +42008,7 @@ var Runtime = class {
       CLAWOS_EXT_PORT: String(port),
       CLAWOS_EXT_ID: extId
     };
-    const child = (0, import_node_child_process7.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process8.spawn)("sh", ["-c", cmd], {
       cwd: dir,
       env,
       stdio: ["ignore", "pipe", "pipe"],
@@ -42197,11 +42274,8 @@ async function startDaemon(config) {
   } else if (config.tunnel) {
     resolvedAuthToken = authFile.token;
   }
-  const ownerIdentityStore = new OwnerIdentityStore(config.dataDir);
-  const feishuIdentity = ownerIdentityStore.read();
-  let feishuActive = feishuIdentity !== null;
-  let ownerPrincipalId = feishuIdentity?.identity.unionId ?? authFile.ownerPrincipalId;
-  let ownerDisplayName = feishuIdentity?.identity.displayName ?? loadOwnerDisplayName(config.dataDir);
+  const ownerPrincipalId = authFile.ownerPrincipalId;
+  const ownerDisplayName = loadOwnerDisplayName(config.dataDir);
   const authMode = resolvedAuthToken == null ? "none" : "first-message";
   const inboxStore = new InboxStore(config.dataDir);
   const inboxManager = new InboxManager(inboxStore, (_peerOwnerId, frame) => {
@@ -42243,9 +42317,7 @@ async function startDaemon(config) {
         isOwnerToken: (x) => resolvedAuthToken != null && constantTimeEqual(x, resolvedAuthToken),
         ownerPrincipalId,
         ownerDisplayName,
-        // 飞书 gate（spec 决策 #9）：未激活飞书身份时不接受 guest（capability token）入站——
-        // 不传 registry 让 guest token 一律 BAD_TOKEN。owner 自己连接不受影响。
-        ...feishuActive ? { capabilityRegistry } : {},
+        capabilityRegistry,
         selfPrincipalId,
         selfDisplayName
       });
@@ -42402,13 +42474,13 @@ async function startDaemon(config) {
   const publishedChannelStore = new PublishedChannelStore(publishedChannelsFile());
   await publishedChannelStore.load();
   const bundleCache = new BundleCache(bundleCacheRoot());
-  const loginFlow = new LoginFlow({
-    store: ownerIdentityStore,
-    fetchUserInfo: (ttcToken) => fetchTtcUserInfo({ apiBase: TTC_HOSTS.api, token: ttcToken }),
-    ttcAuthBase: TTC_HOSTS.auth,
-    getCallbackUrl: () => `http://127.0.0.1:${config.port}/auth/callback`
-  });
-  const makeHandlers = () => buildMethodHandlers({
+  const appBuilderStore = new ProjectStore(
+    import_node_path45.default.join(config.dataDir, "personas/persona-app-builder")
+  );
+  const devServerSupervisor = new DevServerSupervisor();
+  const deleteSessionsByProject = async (_name) => {
+  };
+  const handlers = buildMethodHandlers({
     manager,
     workspace,
     skills,
@@ -42481,10 +42553,11 @@ async function startDaemon(config) {
     // extension sharing v1 — owner-side published-channels store.
     publishedChannelStore,
     bundleCache,
-    // 飞书统一身份 Phase 1：登录 RPC handlers（auth:login:start / getIdentity / logout）
-    feishuAuth: { loginFlow, ownerIdentityStore }
+    // app-builder
+    appBuilderStore,
+    deleteSessionsByProject,
+    devServerLifecycle: devServerSupervisor
   });
-  let handlers = makeHandlers();
   const authResolver = new AuthContextResolver({
     ownerToken: resolvedAuthToken
   });
@@ -42510,29 +42583,8 @@ async function startDaemon(config) {
     },
     // POST /extensions/import lands in ~/.clawd/extensions/<id>/
     extensionsRoot: () => extensionsRoot(),
-    // 飞书登录 loopback 回调（热切换，2026-06-01 拍板）：成功落盘后——
-    //   1. 进程内实时切换身份（let binding + 值快照持有者重建）
-    //   2. 广播 auth:login:done 给在线 owner 连接（UI 即时反馈）
-    //   3. 踢掉所有 ws 连接（在线连接的 ctx 是旧身份）→ UI 自动重连 → 新身份 ctx →
-    //      People 立即解锁，不需要重启 daemon
-    // 失败则广播 auth:login:failed。
-    feishuLogin: {
-      handleLoginCallback: async (params) => {
-        const result = await loginFlow.handleCallback(params);
-        if (result.ok) {
-          feishuActive = true;
-          ownerPrincipalId = result.identity.unionId;
-          ownerDisplayName = result.identity.displayName;
-          handlers = makeHandlers();
-          wsServer?.setOwnerPrincipalId(result.identity.unionId);
-          wsServer?.broadcastToOwners({ type: "auth:login:done", identity: result.identity });
-          setImmediate(() => wsServer?.closeAllClients());
-        } else {
-          wsServer?.broadcastToOwners({ type: "auth:login:failed", reason: result.reason });
-        }
-        return result;
-      }
-    }
+    // app-builder build 模式：/preview/<port>/ 反代 dev server 的端口白名单（见 spec §三.2）
+    previewPorts: config.previewPorts ?? void 0
   });
   wsServer = new LocalWsServer({
     host: config.host,
@@ -42571,6 +42623,8 @@ async function startDaemon(config) {
     },
     // file-sharing HTTP 路由复用 daemon 同端口（spec §5 第 3 条）；router 自己处理 auth + 404
     httpRequestHandler: httpRouter,
+    // app-builder build 模式：/preview/<port>/ HMR websocket upgrade 转发的端口白名单（同 http-router 配置）
+    previewPorts: config.previewPorts ?? void 0,
     // 订阅成功后给该 client 重放 in-flight pendingQuestions（plan: clawd-question-server-truth）。
     // daemon 是 pendingQuestions 的唯一 source of truth；新 client 接入 / 刷新页面时
     // 把当前所有未决 question 以 session:question 帧定向回放，让 UI 不再误显示 Ended。
@@ -42615,12 +42669,6 @@ async function startDaemon(config) {
     const requestId = typeof frame.requestId === "string" ? frame.requestId : void 0;
     const handler = handlers[type];
     if (!handler) throw new ClawdError(ERROR_CODES.METHOD_NOT_IMPLEMENTED, `not implemented: ${type}`);
-    if (!feishuActive && FEISHU_GATED_METHODS.includes(type)) {
-      throw new ClawdError(
-        ERROR_CODES.FEISHU_LOGIN_REQUIRED,
-        `${type} requires feishu login (People/remote identity)`
-      );
-    }
     const ctx = wsServer.getClientContext(client.id) ?? ownerContext(ownerPrincipalId, ownerDisplayName);
     const verdict = computeGrantForFrame(type, frame);
     if (verdict.kind === "check") {
@@ -42693,6 +42741,7 @@ async function startDaemon(config) {
       stateSnapshot = { ...stateSnapshot, tunnelUrl: r.url, tunnelError: void 0 };
       stateMgr.write(stateSnapshot);
       currentTunnelUrl = r.url;
+      wss.broadcastAll({ type: "tunnel:ready", url: r.url, subdomain: r.subdomain });
       const connectUrl = resolvedAuthToken ? `${r.url}#token=${resolvedAuthToken}` : r.url;
       const lines = [
         `Tunnel:      ${r.url}`,