@clawos-dev/clawd 0.2.112-beta.213.6cb11a8 → 0.2.112-beta.215.872b507

package/dist/cli.cjs

@@ -181,16 +181,17 @@ var init_methods = __esm({
       // 无 subscription 持久化：guest 端身份完全来自文件系统 + reconciled publishedExtensions.
       "extension.install-from-channel",
       "extension.update-from-channel",
-      // ---- app-builder Project picker (spec 2026-06-01-app-builder-project-picker-design) ----
-      // persona-app-builder 多 project 管理；schemas: ProjectMetadataSchema + 4 个 args/result 对。
-      //   listProjects: readdir projects/，按目录读 .clawd-project.json
-      //   createProject: 校验名 + 从 6173-6182 段分配端口 + 写元数据 + 创建空目录
-      //   deleteProject: 停 dev server + rm -rf 目录 + 连带删该 project 名下所有 session
-      //   updateProjectPort: 校验新端口段内 + 未被别的 project 占 + 重启 dev server
-      "appBuilder:listProjects",
-      "appBuilder:createProject",
-      "appBuilder:deleteProject",
-      "appBuilder:updateProjectPort"
+      // ---- auth:* 飞书统一身份 Phase 1 (spec 2026-06-01-feishu-identity-design) ----
+      // owner-only：daemon loopback 登录流程（auth:login:start 起 state → HTTP /auth/callback
+      // 回调落盘 → auth:login:done 事件）。中央字面量见 protocol/feishu-auth.ts FEISHU_AUTH_METHODS。
+      "auth:login:start",
+      "auth:getIdentity",
+      "auth:logout",
+      // ---- hub:* 飞书统一身份 Phase 2 (spec §10.2) ----
+      // owner-only：公共 hub 目录 + per-hub connect token 连接（daemon 代理中心 server）。
+      // 中央字面量见 protocol/feishu-auth.ts HUB_METHODS。
+      "hub:list",
+      "hub:connect"
     ];
   }
 });
@@ -252,7 +253,11 @@ var init_errors = __esm({
       INTERNAL: "INTERNAL",
       UNAUTHORIZED: "UNAUTHORIZED",
       FORBIDDEN: "FORBIDDEN",
-      INVALID_PARAM: "INVALID_PARAM"
+      INVALID_PARAM: "INVALID_PARAM",
+      // 飞书统一身份（spec 2026-06-01 决策 #9）：People/远程体系强制飞书登录。
+      // daemon 进程身份未激活为飞书 unionId 时，FEISHU_GATED_METHODS 内的 RPC 一律返回此错误；
+      // UI 据此显示登录引导（区别于 UNAUTHORIZED 的越权语义）。
+      FEISHU_LOGIN_REQUIRED: "FEISHU_LOGIN_REQUIRED"
     };
     ClawdError = class extends Error {
       constructor(code, message) {
@@ -682,8 +687,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path59, errorMaps, issueData } = params;
-      const fullPath = [...path59, ...issueData.path || []];
+      const { data, path: path60, errorMaps, issueData } = params;
+      const fullPath = [...path60, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -994,11 +999,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path59, key) {
+      constructor(parent, value, path60, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path59;
+        this._path = path60;
         this._key = key;
       }
       get path() {
@@ -4491,6 +4496,11 @@ var init_persona_schemas = __esm({
         enabled: external_exports.boolean().optional(),
         autoAllowBashIfSandboxed: external_exports.boolean().optional(),
         allowUnsandboxedCommands: external_exports.boolean().optional(),
+        // 开发型 persona 的网络域名白名单：CC 沙箱代理按 hostname 放行（spec 实测 D2）。
+        // 缺省 = 无网络（沙箱代理对所有域名回 403 blocked-by-allowlist）
+        network: external_exports.object({
+          allowedDomains: external_exports.array(external_exports.string()).optional()
+        }).optional(),
         filesystem: external_exports.object({
           denyRead: external_exports.array(external_exports.string()).optional(),
           allowRead: external_exports.array(external_exports.string()).optional(),
@@ -4525,14 +4535,17 @@ var init_persona_schemas = __esm({
         personality: external_exports.string().optional(),
         public: external_exports.boolean().optional(),
         // pass `null` to clear; daemon strips the field from PersonaFile on null
-        iconKey: external_exports.string().nullable().optional()
+        iconKey: external_exports.string().nullable().optional(),
+        // 整体替换 sandbox-settings.json 的 sandbox.network.allowedDomains（不是 merge 数组）。
+        // 窄接口设计：daemon 做 read-modify-write，owner 手改的其他 sandbox 字段不被 UI 覆盖
+        networkAllowedDomains: external_exports.array(external_exports.string()).optional()
       }).strict()
     }).strict();
   }
 });
 
 // ../protocol/src/schemas.ts
-var SessionStatusSchema, UsageSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, ParsedEventSchema, SessionCreateArgs, SessionIdArgs, SessionUpdateArgs, SessionSendArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsArgs, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionSubscribeArgs, SessionPinArgs, PeerSessionUpsertArgs, PeerSessionUpsertResponseSchema, PeerSessionRemoveArgs, PeerSessionRemoveResponseSchema, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, HistoryRecentDirsArgs, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, AuthRequestFrameSchema, AuthOkFrameSchema, TunnelReadyEventSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema, PROJECT_PORT_MIN, PROJECT_PORT_MAX, projectNameRegex, ProjectMetadataSchema, ProjectWithStatusSchema, ListProjectsArgsSchema, ListProjectsResultSchema, CreateProjectArgsSchema, CreateProjectResultSchema, DeleteProjectArgsSchema, DeleteProjectResultSchema, UpdateProjectPortArgsSchema, UpdateProjectPortResultSchema;
+var SessionStatusSchema, UsageSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, ParsedEventSchema, SessionCreateArgs, SessionIdArgs, SessionUpdateArgs, SessionSendArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsArgs, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionSubscribeArgs, SessionPinArgs, PeerSessionUpsertArgs, PeerSessionUpsertResponseSchema, PeerSessionRemoveArgs, PeerSessionRemoveResponseSchema, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, HistoryRecentDirsArgs, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, AuthRequestFrameSchema, AuthOkFrameSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema;
 var init_schemas = __esm({
   "../protocol/src/schemas.ts"() {
     "use strict";
@@ -4629,10 +4642,6 @@ var init_schemas = __esm({
       // owner-mode persona session 身份标识；UI 用它在 SessionList 过滤 + jump，
       // daemon 用它做 idempotent dedupe + spawn 时派生 ctx.personaMode='owner'
       ownerPersonaId: external_exports.string().min(1).optional(),
-      // app-builder Project 反向索引（spec: superpowers/specs/2026-06-01-app-builder-project-picker-design.md）。
-      // 当此 session 绑定到某个 build 中的 project 时填写；name 与 projects/<name>/ 子目录同名，
-      // 受 projectNameSchema regex 约束。daemon session:resume 时校验该目录存在，不存在则拒。
-      appBuilderProject: external_exports.string().regex(/^[a-z][a-z0-9-]{0,39}$/).optional(),
       // listener-mode sub-session 的原始 chatId（owner-mode 不写；listener-scope 强制写入）。
       // 派生 sessionId 是单向 hash `${personaId}-${tokenHash12}-${chatHash8}`，必须保留原始 chatId
       // 才能让 alice 重连同一 sub-session（持久化在 alice localStorage 之外，由 daemon push 同步）。
@@ -4905,12 +4914,7 @@ var init_schemas = __esm({
       forkedFromSessionId: external_exports.string().min(1).optional(),
       // owner-mode persona session：传此字段时 daemon 自行派生 cwd 和启动参数，
       // 且按 ownerPersonaId 做 idempotent dedupe（每 persona 永远只有一个 owner session）
-      ownerPersonaId: external_exports.string().min(1).optional(),
-      // app-builder Project 绑定（spec 2026-06-01-app-builder-project-picker-design）。
-      // UI picker 上点 idle project / 新建 project 时传入；daemon 透传写入 SessionFile.appBuilderProject。
-      // 跟 ownerPersonaId 同层但不互斥（典型场景两者都传：ownerPersonaId='persona-app-builder' +
-      // appBuilderProject='<project-name>'）。
-      appBuilderProject: external_exports.string().regex(/^[a-z][a-z0-9-]{0,39}$/).optional()
+      ownerPersonaId: external_exports.string().min(1).optional()
     }).refine((args) => args.cwd != null || args.ownerPersonaId != null, {
       message: "cwd \u4E0E ownerPersonaId \u81F3\u5C11\u4F20\u4E00\u4E2A"
     });
@@ -4924,11 +4928,7 @@ var init_schemas = __esm({
         effort: external_exports.string().optional(),
         cwd: external_exports.string().optional(),
         // 用户在 Edit modal 选择的 icon 标识；UI 端做 enum 兜底
-        iconKey: external_exports.string().optional(),
-        // app-builder picker 在当前 session 内切 project 时写入（spec 2026-06-01-app-builder-project-picker-design）。
-        // daemon session:update handler 检测此字段变化时停旧 project dev server + 起新 project dev server。
-        // 设为空字符串 '' 表示解绑（picker 不暴露解绑入口，但 schema 允许）。
-        appBuilderProject: external_exports.string().regex(/^[a-z][a-z0-9-]{0,39}$/).or(external_exports.literal("")).optional()
+        iconKey: external_exports.string().optional()
       })
     });
     SessionSendArgs = external_exports.object({
@@ -5125,6 +5125,12 @@ var init_schemas = __esm({
        * 后调 capabilityManager.recordPeerHello(capId, ownerPrincipalId, displayName)
        * 把 cap.peerOwnerId / firstUsedByPeerAt 字段回写，让 owner 端 UI 在 People
        * tab 顶层 PeerOwner 视图 + Personas tab 二级分组拿到对端身份。
+       *
+       * 飞书统一身份 Phase 1 (2026-06-01)：取值升级为飞书 union_id（owner 已飞书登录时；
+       * 来自 whoami.owner.id → daemon ownerPrincipalId → owner-identity.json unionId）。
+       * 未登录 daemon 仍为 auth.json 的 owner-<uuid>。daemon 端不验证该身份真实性
+       * （Phase 1 信任模型，见 spec §9）。Phase 2 将以 connect token 替代（introspect
+       * 返回身份，删除自报字段，见 spec §10）。
        */
       selfPrincipalId: external_exports.string().min(1).optional(),
       /**
@@ -5139,11 +5145,6 @@ var init_schemas = __esm({
       version: external_exports.string().min(1).optional(),
       protocolVersion: external_exports.number().int().nonnegative().optional()
     });
-    TunnelReadyEventSchema = external_exports.object({
-      type: external_exports.literal("tunnel:ready"),
-      url: external_exports.string().min(1),
-      subdomain: external_exports.string().min(1)
-    });
     TunnelExitedEventSchema = external_exports.object({
       type: external_exports.literal("tunnel:exited"),
       code: external_exports.number().int().nullable(),
@@ -5185,41 +5186,6 @@ var init_schemas = __esm({
       /** file-sharing HTTP 路由的 Authorization: Bearer token；与 WS token 解耦，HTTP 401 仅触发 ReAuth 不强踢 WS（spec §11 第 4 条） */
       httpToken: external_exports.string().optional()
     });
-    PROJECT_PORT_MIN = 6173;
-    PROJECT_PORT_MAX = 6182;
-    projectNameRegex = /^[a-z][a-z0-9-]{0,39}$/;
-    ProjectMetadataSchema = external_exports.object({
-      name: external_exports.string().regex(projectNameRegex, {
-        message: "kebab-case, \u5C0F\u5199\u5B57\u6BCD\u5F00\u5934\uFF0C\u53EA\u5141\u8BB8\u5C0F\u5199\u5B57\u6BCD / \u6570\u5B57 / -\uFF0C\u6700\u957F 40 \u5B57\u7B26"
-      }),
-      port: external_exports.number().int().min(PROJECT_PORT_MIN).max(PROJECT_PORT_MAX),
-      createdAt: external_exports.string().datetime()
-    });
-    ProjectWithStatusSchema = ProjectMetadataSchema.extend({
-      isRunning: external_exports.boolean(),
-      boundSessionId: external_exports.string().nullable()
-    });
-    ListProjectsArgsSchema = external_exports.object({}).strict();
-    ListProjectsResultSchema = external_exports.object({
-      projects: external_exports.array(ProjectWithStatusSchema)
-    }).strict();
-    CreateProjectArgsSchema = external_exports.object({
-      name: external_exports.string()
-    }).strict();
-    CreateProjectResultSchema = external_exports.object({
-      project: ProjectMetadataSchema
-    }).strict();
-    DeleteProjectArgsSchema = external_exports.object({
-      name: external_exports.string()
-    }).strict();
-    DeleteProjectResultSchema = external_exports.object({}).strict();
-    UpdateProjectPortArgsSchema = external_exports.object({
-      name: external_exports.string(),
-      newPort: external_exports.number().int()
-    }).strict();
-    UpdateProjectPortResultSchema = external_exports.object({
-      project: ProjectMetadataSchema
-    }).strict();
   }
 });
 
@@ -5628,6 +5594,93 @@ var init_extension = __esm({
   }
 });
 
+// ../protocol/src/feishu-auth.ts
+var FEISHU_GATED_METHODS, HubEntrySchema, HubListResponseSchema, HubConnectArgsSchema, HubConnectResponseSchema, FeishuIdentitySchema, AuthLoginStartResponseSchema, AuthGetIdentityResponseSchema, AuthLogoutResponseSchema, AuthLoginDoneEventSchema, AuthLoginFailedEventSchema;
+var init_feishu_auth = __esm({
+  "../protocol/src/feishu-auth.ts"() {
+    "use strict";
+    init_zod();
+    FEISHU_GATED_METHODS = [
+      // capability / 邀请码（生成添加码 = 把自己的身份分享出去）
+      "capability:list",
+      "capability:delete",
+      "personal-cap:get",
+      // 联系人（添加朋友 / 联系人列表 / 自动重连）
+      "received-capability:list",
+      "received-capability:add",
+      "received-capability:remove",
+      "received-capability:autoAttach",
+      // DM / 跨用户通知
+      "inbox:list",
+      "inbox:markRead",
+      "inbox:postMessage",
+      // mirror peer sessions（远端会话镜像）
+      "peerSession:upsert",
+      "peerSession:remove",
+      // Phase 2: hub 目录 + 连接（中心 server 代理，需要 owner 的 ttcJwt）
+      "hub:list",
+      "hub:connect"
+    ];
+    HubEntrySchema = external_exports.object({
+      /** hub owner 的飞书 union_id */
+      hubId: external_exports.string().min(1),
+      /** 显示名 */
+      name: external_exports.string().min(1),
+      /** ws/tunnel 地址 */
+      url: external_exports.string().min(1)
+    });
+    HubListResponseSchema = external_exports.object({
+      type: external_exports.literal("hub:list:ok"),
+      hubs: external_exports.array(HubEntrySchema)
+    });
+    HubConnectArgsSchema = external_exports.object({
+      /** 目标 hub 的 hubId（= hub owner unionId） */
+      hubId: external_exports.string().min(1),
+      /** 目标 hub 的 ws/tunnel 地址 */
+      url: external_exports.string().min(1),
+      /** 显示名（公共 hub 来自目录；个人 hub 链接可缺省，连上后用 whoami 回填） */
+      name: external_exports.string().optional()
+    });
+    HubConnectResponseSchema = external_exports.object({
+      type: external_exports.literal("hub:connect:ok"),
+      hubId: external_exports.string(),
+      name: external_exports.string(),
+      url: external_exports.string()
+    });
+    FeishuIdentitySchema = external_exports.object({
+      /** 飞书 union_id（租户维度，跨应用稳定）。TTC user_info 接口 data.union_id */
+      unionId: external_exports.string().min(1),
+      /** 飞书姓名。TTC user_info 接口 data.name */
+      displayName: external_exports.string().min(1),
+      /** TTC user_info 接口 data.avatar_url，可缺省 */
+      avatarUrl: external_exports.string().optional()
+    });
+    AuthLoginStartResponseSchema = external_exports.object({
+      type: external_exports.literal("auth:login:start:ok"),
+      /** 完整 TTC 授权页 URL（含 callback_url + state + auto=1），UI 直接 window.open */
+      authUrl: external_exports.string().min(1),
+      /** 防 CSRF 的一次性 nonce；回调时 daemon 校验 */
+      state: external_exports.string().min(1)
+    });
+    AuthGetIdentityResponseSchema = external_exports.object({
+      type: external_exports.literal("auth:getIdentity:ok"),
+      /** null = 未登录 */
+      identity: FeishuIdentitySchema.nullable()
+    });
+    AuthLogoutResponseSchema = external_exports.object({
+      type: external_exports.literal("auth:logout:ok")
+    });
+    AuthLoginDoneEventSchema = external_exports.object({
+      type: external_exports.literal("auth:login:done"),
+      identity: FeishuIdentitySchema
+    });
+    AuthLoginFailedEventSchema = external_exports.object({
+      type: external_exports.literal("auth:login:failed"),
+      reason: external_exports.string()
+    });
+  }
+});
+
 // ../protocol/src/runtime.ts
 var init_runtime = __esm({
   "../protocol/src/runtime.ts"() {
@@ -5645,6 +5698,7 @@ var init_runtime = __esm({
     init_inbox();
     init_received_capability();
     init_extension();
+    init_feishu_auth();
   }
 });
 
@@ -5919,8 +5973,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path59 = req.path;
-        _req.url = typeof path59 === "string" ? path59 : req.url ? req.url.path || req.url : void 0;
+        const path60 = req.path;
+        _req.url = typeof path60 === "string" ? path60 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -6085,14 +6139,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path59) {
+    function parsePath(path60) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path59.length; i++) {
-        const char = path59[i];
+      for (let i = 0; i < path60.length; i++) {
+        const char = path60[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -6223,10 +6277,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path59 of paths) {
-        const parts = parsePath(path59);
+      for (const path60 of paths) {
+        const parts = parsePath(path60);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path59, remove);
+          redactWildcardPath(obj, parts, censor, path60, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -6311,8 +6365,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path59) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path59];
+            const wrappedCensor = typeof censor === "function" ? (value, path60) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path60];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -6347,8 +6401,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path59 of pathsToClone) {
-        const parts = parsePath(path59);
+      for (const path60 of pathsToClone) {
+        const parts = parsePath(path60);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -6400,24 +6454,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path59) {
-      if (typeof path59 !== "string") {
+    function validatePath(path60) {
+      if (typeof path60 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path59 === "") {
+      if (path60 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path59.includes("..")) {
-        throw new Error(`Invalid redaction path (${path59})`);
+      if (path60.includes("..")) {
+        throw new Error(`Invalid redaction path (${path60})`);
       }
-      if (path59.includes(",")) {
-        throw new Error(`Invalid redaction path (${path59})`);
+      if (path60.includes(",")) {
+        throw new Error(`Invalid redaction path (${path60})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path59.length; i++) {
-        const char = path59[i];
+      for (let i = 0; i < path60.length; i++) {
+        const char = path60[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -6431,20 +6485,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path59})`);
+            throw new Error(`Invalid redaction path (${path60})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path59})`);
+        throw new Error(`Invalid redaction path (${path60})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path59 of paths) {
-        validatePath(path59);
+      for (const path60 of paths) {
+        validatePath(path60);
       }
     }
     function slowRedact(options = {}) {
@@ -6612,8 +6666,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path59) => {
-            return censor(value, [k2, ...path59]);
+          const wrappedCensor = typeof censor === "function" ? (value, path60) => {
+            return censor(value, [k2, ...path60]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -6832,9 +6886,9 @@ var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
     var fs48 = require("fs");
-    var EventEmitter3 = require("events");
+    var EventEmitter2 = require("events");
     var inherits = require("util").inherits;
-    var path59 = require("path");
+    var path60 = require("path");
     var sleep = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -6888,7 +6942,7 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs48.mkdirSync(path59.dirname(file), { recursive: true });
+          if (sonic.mkdir) fs48.mkdirSync(path60.dirname(file), { recursive: true });
           const fd = fs48.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
@@ -6896,7 +6950,7 @@ var require_sonic_boom = __commonJS({
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs48.mkdir(path59.dirname(file), { recursive: true }, (err) => {
+        fs48.mkdir(path60.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
           fs48.open(file, flags, mode, fileOpened);
         });
@@ -7069,7 +7123,7 @@ var require_sonic_boom = __commonJS({
       sonic._asyncDrainScheduled = false;
       sonic.emit("drain");
     }
-    inherits(SonicBoom, EventEmitter3);
+    inherits(SonicBoom, EventEmitter2);
     function mergeBuf(bufs, len) {
       if (bufs.length === 0) {
         return kEmptyBuffer;
@@ -7647,9 +7701,9 @@ var require_thread_stream = __commonJS({
   "../node_modules/.pnpm/thread-stream@3.1.0/node_modules/thread-stream/index.js"(exports2, module2) {
     "use strict";
     var { version: version2 } = require_package();
-    var { EventEmitter: EventEmitter3 } = require("events");
+    var { EventEmitter: EventEmitter2 } = require("events");
     var { Worker } = require("worker_threads");
-    var { join: join12 } = require("path");
+    var { join: join11 } = require("path");
     var { pathToFileURL } = require("url");
     var { wait } = require_wait();
     var {
@@ -7685,7 +7739,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join12(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join11(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         trackUnmanagedFds: false,
@@ -7803,7 +7857,7 @@ var require_thread_stream = __commonJS({
       stream.worker.off("exit", onWorkerExit);
       destroy(stream, code !== 0 ? new Error("the worker thread exited") : null);
     }
-    var ThreadStream = class extends EventEmitter3 {
+    var ThreadStream = class extends EventEmitter2 {
       constructor(opts = {}) {
         super();
         if (opts.bufferSize < 4) {
@@ -8071,7 +8125,7 @@ var require_transport = __commonJS({
     "use strict";
     var { createRequire } = require("module");
     var getCallers = require_caller();
-    var { join: join12, isAbsolute: isAbsolute2, sep: sep3 } = require("path");
+    var { join: join11, isAbsolute: isAbsolute2, sep: sep3 } = require("path");
     var sleep = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
     var ThreadStream = require_thread_stream();
@@ -8134,7 +8188,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join12(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join11(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -8152,7 +8206,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline3) {
-        target = bundlerOverrides["pino-worker"] || join12(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join11(__dirname, "worker.js");
         options.pipelines = [pipeline3.map((dest) => {
           return {
             ...dest,
@@ -8174,7 +8228,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join12(__dirname, "..", "file.js");
+          return join11(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -8761,7 +8815,7 @@ var require_meta = __commonJS({
 var require_proto = __commonJS({
   "../node_modules/.pnpm/pino@9.14.0/node_modules/pino/lib/proto.js"(exports2, module2) {
     "use strict";
-    var { EventEmitter: EventEmitter3 } = require("events");
+    var { EventEmitter: EventEmitter2 } = require("events");
     var {
       lsCacheSym,
       levelValSym,
@@ -8843,7 +8897,7 @@ var require_proto = __commonJS({
       [getLevelSym]: getLevel,
       [setLevelSym]: setLevel
     };
-    Object.setPrototypeOf(prototype, EventEmitter3.prototype);
+    Object.setPrototypeOf(prototype, EventEmitter2.prototype);
     module2.exports = function() {
       return Object.create(prototype);
     };
@@ -9164,7 +9218,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join12 = ",";
+            let join11 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -9178,7 +9232,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join12 = `,
+                join11 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -9186,13 +9240,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join12;
+                res += join11;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join12}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join11}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -9213,7 +9267,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join12 = `,
+              join11 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -9227,13 +9281,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join12;
+                separator = join11;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join12;
+              separator = join11;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -9274,7 +9328,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join12 = ",";
+            let join11 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -9287,7 +9341,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join12 = `,
+                join11 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -9295,13 +9349,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join12;
+                res += join11;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join12}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join11}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -9314,7 +9368,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join12 = `,
+              join11 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -9323,7 +9377,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join12;
+                separator = join11;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -9381,20 +9435,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join13 = `,
+              const join12 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join13;
+                res2 += join12;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join13}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join12}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -9410,16 +9464,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join12 = `,
+            const join11 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join12, maximumBreadth);
+              res += stringifyTypedArray(value, join11, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join12;
+              separator = join11;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -9430,13 +9484,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join12;
+                separator = join11;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join12;
+              separator = join11;
             }
             if (separator !== "") {
               res = `
@@ -10527,11 +10581,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path59, added, removed, oldPosInc, options) {
-        var last = path59.lastComponent;
+      addToPath: function addToPath(path60, added, removed, oldPosInc, options) {
+        var last = path60.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path59.oldPos + oldPosInc,
+            oldPos: path60.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -10541,7 +10595,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path59.oldPos + oldPosInc,
+            oldPos: path60.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -10987,10 +11041,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path59 = typeof rec.path === "string" ? rec.path : null;
+      const path60 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path59 || content == null) return null;
-      const entry = { path: path59, content };
+      if (!path60 || content == null) return null;
+      const entry = { path: path60, content };
       if (typeof rec.mtimeMs === "number") entry.mtimeMs = rec.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -11821,10 +11875,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path59 = typeof rec.path === "string" ? rec.path : null;
+      const path60 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path59 || content == null) return null;
-      const out = { path: path59, content };
+      if (!path60 || content == null) return null;
+      const out = { path: path60, content };
       if (typeof rec.mtimeMs === "number") out.mtimeMs = rec.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -19318,10 +19372,10 @@ var require_extension = __commonJS({
 var require_websocket = __commonJS({
   "../node_modules/.pnpm/ws@8.20.0/node_modules/ws/lib/websocket.js"(exports2, module2) {
     "use strict";
-    var EventEmitter3 = require("events");
+    var EventEmitter2 = require("events");
     var https = require("https");
-    var http3 = require("http");
-    var net3 = require("net");
+    var http2 = require("http");
+    var net2 = require("net");
     var tls = require("tls");
     var { randomBytes, createHash: createHash2 } = require("crypto");
     var { Duplex, Readable: Readable3 } = require("stream");
@@ -19350,7 +19404,7 @@ var require_websocket = __commonJS({
     var protocolVersions = [8, 13];
     var readyStates = ["CONNECTING", "OPEN", "CLOSING", "CLOSED"];
     var subprotocolRegex = /^[!#$%&'*+\-.0-9A-Z^_`|a-z~]+$/;
-    var WebSocket2 = class _WebSocket extends EventEmitter3 {
+    var WebSocket2 = class _WebSocket extends EventEmitter2 {
       /**
        * Create a new `WebSocket`.
        *
@@ -19854,7 +19908,7 @@ var require_websocket = __commonJS({
       }
       const defaultPort = isSecure ? 443 : 80;
       const key = randomBytes(16).toString("base64");
-      const request = isSecure ? https.request : http3.request;
+      const request = isSecure ? https.request : http2.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
       opts.createConnection = opts.createConnection || (isSecure ? tlsConnect : netConnect);
@@ -20055,12 +20109,12 @@ var require_websocket = __commonJS({
     }
     function netConnect(options) {
       options.path = options.socketPath;
-      return net3.connect(options);
+      return net2.connect(options);
     }
     function tlsConnect(options) {
       options.path = void 0;
       if (!options.servername && options.servername !== "") {
-        options.servername = net3.isIP(options.host) ? "" : options.host;
+        options.servername = net2.isIP(options.host) ? "" : options.host;
       }
       return tls.connect(options);
     }
@@ -20347,8 +20401,8 @@ var require_subprotocol = __commonJS({
 var require_websocket_server = __commonJS({
   "../node_modules/.pnpm/ws@8.20.0/node_modules/ws/lib/websocket-server.js"(exports2, module2) {
     "use strict";
-    var EventEmitter3 = require("events");
-    var http3 = require("http");
+    var EventEmitter2 = require("events");
+    var http2 = require("http");
     var { Duplex } = require("stream");
     var { createHash: createHash2 } = require("crypto");
     var extension2 = require_extension();
@@ -20360,7 +20414,7 @@ var require_websocket_server = __commonJS({
     var RUNNING = 0;
     var CLOSING = 1;
     var CLOSED = 2;
-    var WebSocketServer2 = class extends EventEmitter3 {
+    var WebSocketServer2 = class extends EventEmitter2 {
       /**
        * Create a `WebSocketServer` instance.
        *
@@ -20423,8 +20477,8 @@ var require_websocket_server = __commonJS({
           );
         }
         if (options.port != null) {
-          this._server = http3.createServer((req, res) => {
-            const body = http3.STATUS_CODES[426];
+          this._server = http2.createServer((req, res) => {
+            const body = http2.STATUS_CODES[426];
             res.writeHead(426, {
               "Content-Length": body.length,
               "Content-Type": "text/plain"
@@ -20711,7 +20765,7 @@ var require_websocket_server = __commonJS({
       this.destroy();
     }
     function abortHandshake(socket, code, message, headers) {
-      message = message || http3.STATUS_CODES[code];
+      message = message || http2.STATUS_CODES[code];
       headers = {
         Connection: "close",
         "Content-Type": "text/html",
@@ -20720,7 +20774,7 @@ var require_websocket_server = __commonJS({
       };
       socket.once("finish", socket.destroy);
       socket.end(
-        `HTTP/1.1 ${code} ${http3.STATUS_CODES[code]}\r
+        `HTTP/1.1 ${code} ${http2.STATUS_CODES[code]}\r
 ` + Object.keys(headers).map((h) => `${h}: ${headers[h]}`).join("\r\n") + "\r\n\r\n" + message
       );
     }
@@ -21023,7 +21077,7 @@ var require_BufferList = __commonJS({
         this.head = this.tail = null;
         this.length = 0;
       };
-      BufferList.prototype.join = function join12(s) {
+      BufferList.prototype.join = function join11(s) {
         if (this.length === 0) return "";
         var p2 = this.head;
         var ret = "" + p2.data;
@@ -23613,8 +23667,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path59) {
-      var parts = path59.split("/");
+    exports2.resolve = function(path60) {
+      var parts = path60.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -29467,18 +29521,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path59) {
-      if (path59.slice(-1) === "/") {
-        path59 = path59.substring(0, path59.length - 1);
+    var parentFolder = function(path60) {
+      if (path60.slice(-1) === "/") {
+        path60 = path60.substring(0, path60.length - 1);
       }
-      var lastSlash = path59.lastIndexOf("/");
-      return lastSlash > 0 ? path59.substring(0, lastSlash) : "";
+      var lastSlash = path60.lastIndexOf("/");
+      return lastSlash > 0 ? path60.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path59) {
-      if (path59.slice(-1) !== "/") {
-        path59 += "/";
+    var forceTrailingSlash = function(path60) {
+      if (path60.slice(-1) !== "/") {
+        path60 += "/";
       }
-      return path59;
+      return path60;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -30933,8 +30987,6 @@ function resolveConfig(opts) {
   const frpcBinary = env.CLAWD_FRPC_BIN ?? null;
   const rawMode = env.CLAWD_CC_MODE;
   const mode = DAEMON_MODE_VALUES.includes(rawMode ?? "") ? rawMode : "sdk";
-  const filePreviewPorts = Array.isArray(fileCfg.previewPorts) ? fileCfg.previewPorts.map((n) => Number(n)).filter((n) => Number.isInteger(n) && n > 0) : null;
-  const previewPorts = env.CLAWD_PREVIEW_PORTS ? env.CLAWD_PREVIEW_PORTS.split(",").map((s) => Number(s.trim())).filter((n) => Number.isInteger(n) && n > 0) : filePreviewPorts && filePreviewPorts.length > 0 ? filePreviewPorts : null;
   return {
     port,
     host,
@@ -30946,8 +30998,7 @@ function resolveConfig(opts) {
     authToken,
     noTunnelPersist,
     frpcBinary,
-    mode,
-    previewPorts
+    mode
   };
 }
 var HELP_TEXT = `clawd [options]
@@ -32587,6 +32638,14 @@ function derivePersonaSpawnCwd(file, personaRoot) {
   }
   return import_node_path7.default.join(personaRoot, safeFileName(personaId));
 }
+function deriveGuestWorkspaceCwd(personaId, capId, personaRoot) {
+  if (!personaRoot) {
+    throw new Error(
+      `deriveGuestWorkspaceCwd: personaRoot missing (personaId=${personaId}, capId=${capId})`
+    );
+  }
+  return import_node_path7.default.join(personaRoot, safeFileName(personaId), "workspaces", safeFileName(capId));
+}
 function makeInitialState(file, subSessionMeta) {
   return {
     file,
@@ -32948,17 +33007,38 @@ var SessionManager = class {
   create(args, creatorPrincipalId, creatorOwnerPrincipalId) {
     let cwd;
     if (args.ownerPersonaId) {
-      cwd = derivePersonaSpawnCwd(
+      const probeScope = scopeForFile(
         {
           sessionId: "",
           cwd: args.cwd ?? "",
           tool: "claude",
           ownerPersonaId: args.ownerPersonaId,
+          creatorPrincipalId,
           createdAt: "",
           updatedAt: ""
         },
-        this.deps.personaRoot
+        this.deps.ownerPrincipalId
       );
+      if (probeScope.kind === "persona" && probeScope.mode === "guest") {
+        cwd = deriveGuestWorkspaceCwd(
+          args.ownerPersonaId,
+          probeScope.capId,
+          this.deps.personaRoot
+        );
+        import_node_fs6.default.mkdirSync(cwd, { recursive: true });
+      } else {
+        cwd = derivePersonaSpawnCwd(
+          {
+            sessionId: "",
+            cwd: args.cwd ?? "",
+            tool: "claude",
+            ownerPersonaId: args.ownerPersonaId,
+            createdAt: "",
+            updatedAt: ""
+          },
+          this.deps.personaRoot
+        );
+      }
     } else if (args.cwd) {
       cwd = args.cwd;
     } else {
@@ -32986,7 +33066,6 @@ var SessionManager = class {
       iconKey: args.iconKey,
       forkedFromSessionId: args.forkedFromSessionId,
       ownerPersonaId: args.ownerPersonaId,
-      appBuilderProject: args.appBuilderProject,
       creatorPrincipalId,
       ...creatorOwnerPrincipalId ? { creatorOwnerPrincipalId } : {},
       createdAt: iso,
@@ -34106,6 +34185,35 @@ var PersonaStore = class {
     if (!fs7.existsSync(p2)) return null;
     return fs7.readFileSync(p2, "utf8");
   }
+  /**
+   * Read-modify-write 更新 sandbox.network.allowedDomains（开发型 persona 网络白名单）。
+   *
+   * 只动 network.allowedDomains 一个字段：sandbox-settings.json 是 owner 可手改文件
+   * （manager.spec.ts 锁定 "updating personality does NOT overwrite a customized
+   * sandbox-settings.json"），整文件覆盖会丢手改内容。
+   *
+   * 文件不存在 / JSON 损坏 → 以 DEFAULT_SETTINGS 为底重建。
+   * （损坏文件无法做 merge，与其让 RPC 失败不如重建——读路径 readSandboxSettings
+   * 对损坏返回 null 不修复，写路径必须产出合法文件，两者职责不同。）
+   */
+  updateNetworkAllowedDomains(personaId, domains) {
+    const p2 = this.sandboxSettingsPath(personaId);
+    let current;
+    try {
+      current = JSON.parse(fs7.readFileSync(p2, "utf8"));
+      if (!current || typeof current !== "object" || Array.isArray(current)) {
+        current = structuredClone(DEFAULT_SETTINGS);
+      }
+    } catch {
+      current = structuredClone(DEFAULT_SETTINGS);
+    }
+    const sandboxRaw = current.sandbox;
+    const sandbox = sandboxRaw && typeof sandboxRaw === "object" && !Array.isArray(sandboxRaw) ? sandboxRaw : current.sandbox = {};
+    const networkRaw = sandbox.network;
+    const network = networkRaw && typeof networkRaw === "object" && !Array.isArray(networkRaw) ? networkRaw : sandbox.network = {};
+    network.allowedDomains = domains;
+    this.atomicWrite(p2, JSON.stringify(current, null, 2));
+  }
   /**
    * 读 sandbox-settings.json 当前内容；文件不存在 / JSON 解析失败均返回 null。
    * owner 手改文件可能写出非法形状，daemon 不强校验，UI 拿到 null → 显示空状态。
@@ -34536,6 +34644,20 @@ var PersonaManager = class {
     this.deps.registry.set(updated);
     return updated;
   }
+  /**
+   * 更新开发型 persona 的网络域名白名单（sandbox.network.allowedDomains）。
+   * store 层做 read-modify-write（保留 owner 手改字段）；这里只负责存在性校验 +
+   * touch updatedAt + registry 同步，与 update() 的元数据维护行为一致。
+   */
+  updateNetworkAllowedDomains(personaId, domains) {
+    const existing = this.deps.registry.get(personaId);
+    if (!existing) throw new Error(`persona not found: ${personaId}`);
+    this.deps.store.updateNetworkAllowedDomains(personaId, domains);
+    const updated = { ...existing, updatedAt: Date.now() };
+    this.deps.store.writeMeta(updated);
+    this.deps.registry.set(updated);
+    return updated;
+  }
   /** 读取 CLAUDE.md 内容；persona 目录或文件不存在时返回 null。透传给 handler 拼响应。 */
   readPersonality(personaId) {
     return this.deps.store.readPersonality(personaId);
@@ -34623,15 +34745,6 @@ var DEFAULT_PERSONAS = [
     model: "opus",
     iconKey: "assist",
     public: false
-  },
-  {
-    // app-builder：全栈应用搭建师，绑 extension-kit 模板 + multi-project picker
-    // spec: superpowers/specs/2026-06-01-app-builder-project-picker-design.md
-    personaId: "persona-app-builder",
-    label: "App Builder",
-    model: "opus",
-    iconKey: "assist",
-    public: false
   }
 ];
 function findDefaultsRoot() {
@@ -36328,63 +36441,13 @@ var import_websocket_server = __toESM(require_websocket_server(), 1);
 var wrapper_default = import_websocket.default;
 
 // src/transport/local-ws-server.ts
-var import_node_http2 = __toESM(require("http"), 1);
-
-// src/transport/preview-proxy.ts
 var import_node_http = __toESM(require("http"), 1);
-var import_node_net = __toESM(require("net"), 1);
-var PREVIEW_RE = /^\/preview\/(\d+)(?:\/.*)?$/;
-function matchPreviewPort(pathname) {
-  const m2 = pathname.match(PREVIEW_RE);
-  return m2 ? Number(m2[1]) : null;
-}
-function isPreviewPortAllowed(port, cfg) {
-  return cfg.allowedPorts.includes(port);
-}
-function proxyPreviewHttp(req, res, port) {
-  return new Promise((resolve6) => {
-    const upstream = import_node_http.default.request(
-      { host: "localhost", port, method: req.method, path: req.url, headers: req.headers },
-      (upRes) => {
-        res.writeHead(upRes.statusCode || 502, upRes.headers);
-        upRes.pipe(res);
-        upRes.on("end", () => resolve6());
-      }
-    );
-    upstream.on("error", (e) => {
-      if (!res.headersSent) {
-        res.writeHead(502, { "content-type": "text/plain; charset=utf-8" });
-      }
-      res.end(`preview upstream error: ${e.message}`);
-      resolve6();
-    });
-    req.pipe(upstream);
-  });
-}
-function proxyPreviewUpgrade(req, socket, head, port) {
-  const upstream = import_node_net.default.connect(port, "localhost", () => {
-    let raw = `${req.method} ${req.url} HTTP/1.1\r
-`;
-    for (let i = 0; i < req.rawHeaders.length; i += 2) {
-      raw += `${req.rawHeaders[i]}: ${req.rawHeaders[i + 1]}\r
-`;
-    }
-    raw += "\r\n";
-    upstream.write(raw);
-    if (head && head.length) upstream.write(head);
-    upstream.pipe(socket);
-    socket.pipe(upstream);
-  });
-  upstream.on("error", () => socket.destroy());
-  socket.on("error", () => upstream.destroy());
-}
-
-// src/transport/local-ws-server.ts
 var LocalWsServer = class {
   constructor(opts) {
     this.opts = opts;
     this.logger = opts.logger;
     this.pingIntervalMs = opts.pingIntervalMs ?? 3e4;
+    this.currentOwnerPrincipalId = opts.ownerPrincipalId;
   }
   opts;
   wss = null;
@@ -36396,28 +36459,19 @@ var LocalWsServer = class {
   capabilityIdToClients = /* @__PURE__ */ new Map();
   logger;
   pingIntervalMs;
+  // 飞书热切换（spec 决策 #9，2026-06-01 拍板）：登录后实时更新，broadcastToPrincipal
+  // 路由用最新身份；初始值来自 opts.ownerPrincipalId
+  currentOwnerPrincipalId;
+  /** 飞书热切换：登录回调成功后由 daemon wiring 调用，更新 DM 路由身份 */
+  setOwnerPrincipalId(id) {
+    this.currentOwnerPrincipalId = id;
+  }
   async start() {
     const host = this.opts.host ?? "127.0.0.1";
     await new Promise((resolve6, reject) => {
-      const httpServer = import_node_http2.default.createServer((req, res) => this.handleHttpRequest(req, res));
+      const httpServer = import_node_http.default.createServer((req, res) => this.handleHttpRequest(req, res));
       const wss = new import_websocket_server.default({ noServer: true, clientTracking: true });
       httpServer.on("upgrade", (req, socket, head) => {
-        if (req.url?.startsWith("/preview/")) {
-          const pathname = (() => {
-            try {
-              return new URL(req.url, "http://localhost").pathname;
-            } catch {
-              return "/";
-            }
-          })();
-          const port = matchPreviewPort(pathname);
-          if (port != null && (this.opts.previewPorts ?? []).includes(port)) {
-            proxyPreviewUpgrade(req, socket, head, port);
-          } else {
-            socket.destroy();
-          }
-          return;
-        }
         wss.handleUpgrade(req, socket, head, (ws) => {
           this.routeConnection(ws, req);
         });
@@ -36531,7 +36585,7 @@ var LocalWsServer = class {
   //   principalId === 'cap_xxx'         → 该 capability 的所有 guest ws (多端 / 多 tab)
   // 用于 DM inbox:event 路由: from + to 两侧各播一次, 让双方 UI 实时看到 thread 更新.
   broadcastToPrincipal(principalId, frame) {
-    if (principalId === "owner" || principalId === this.opts.ownerPrincipalId) {
+    if (principalId === "owner" || principalId === this.currentOwnerPrincipalId) {
       this.broadcastToOwners(frame);
       return;
     }
@@ -36583,6 +36637,21 @@ var LocalWsServer = class {
   getClientContext(clientId) {
     return this.clients.get(clientId)?.ctx ?? null;
   }
+  // 飞书热切换（spec 决策 #9）：身份切换后踢掉所有连接强制重连——在线连接的 ctx
+  // （attachClientContext 时绑定）持有旧身份，重连后用新身份重建。
+  // close code 4408（非 4401！4401 = token 撤销，客户端会停止重连）：
+  // 客户端按普通断连处理 → 自动重连 → 新身份 ctx。
+  closeAllClients(code = 4408, reason = "IDENTITY_SWITCHED") {
+    const ids = [...this.clients.keys()];
+    for (const id of ids) {
+      const c = this.clients.get(id);
+      if (!c) continue;
+      try {
+        c.ws.close(code, reason);
+      } catch {
+      }
+    }
+  }
   // Task 1.10 撤销级联：关闭某 capability 的所有活跃 ws 连接。close code 4401
   // 让客户端识别 'capability revoked' 而非普通断连。
   closeConnectionsByCapability(capabilityId, code = 4401, reason = "TOKEN_REVOKED") {
@@ -38065,13 +38134,23 @@ function createHttpRouter(deps) {
       });
       return true;
     }
-    if (url.pathname.startsWith("/preview/")) {
-      const port = matchPreviewPort(url.pathname);
-      if (port != null && isPreviewPortAllowed(port, { allowedPorts: deps.previewPorts ?? [] })) {
-        await proxyPreviewHttp(req, res, port);
+    if (url.pathname === "/auth/callback") {
+      if (req.method !== "GET") {
+        sendJson(res, 404, { code: "NOT_FOUND", message: `no route for ${req.method} ${url.pathname}` });
         return true;
       }
-      sendJson(res, 403, { code: "PREVIEW_PORT_FORBIDDEN", message: "preview port not allowed" });
+      if (!deps.feishuLogin) {
+        sendJson(res, 501, { code: "NOT_IMPLEMENTED", message: "feishu login not wired" });
+        return true;
+      }
+      const result = await deps.feishuLogin.handleLoginCallback({
+        token: url.searchParams.get("token") ?? "",
+        state: url.searchParams.get("state") ?? "",
+        expiresAt: url.searchParams.get("expires_at")
+      });
+      const html = result.ok ? `<!doctype html><meta charset="utf-8"><title>clawd</title><style>body{font-family:-apple-system,sans-serif;padding:48px;color:#222}</style><h2>\u767B\u5F55\u6210\u529F\uFF0C\u53EF\u5173\u95ED\u6B64\u9875\u3002</h2><p>\u8EAB\u4EFD\uFF1A${escapeHtml(result.identity.displayName)}</p><script>setTimeout(()=>window.close(),1500)</script>` : `<!doctype html><meta charset="utf-8"><title>clawd</title><style>body{font-family:-apple-system,sans-serif;padding:48px;color:#922}</style><h2>\u767B\u5F55\u5931\u8D25</h2><p>${escapeHtml(result.reason)}</p>`;
+      res.writeHead(result.ok ? 200 : 400, { "Content-Type": "text/html; charset=utf-8" });
+      res.end(html);
       return true;
     }
     if (!url.pathname.startsWith("/session/") && !url.pathname.startsWith("/files/") && url.pathname !== "/attachments/upload" && url.pathname !== "/extensions/import") {
@@ -38309,6 +38388,9 @@ function parseUrl(rawUrl) {
     return null;
   }
 }
+function escapeHtml(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
 function sendJson(res, status, body, extraHeaders) {
   res.writeHead(status, {
     "Content-Type": "application/json; charset=utf-8",
@@ -39331,6 +39413,160 @@ function loadOwnerDisplayName(dataDir) {
   return displayName;
 }
 
+// src/feishu-auth/owner-identity-store.ts
+var import_node_fs27 = __toESM(require("fs"), 1);
+var import_node_path31 = __toESM(require("path"), 1);
+var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
+var OwnerIdentityStore = class {
+  file;
+  constructor(dataDir) {
+    this.file = import_node_path31.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
+  }
+  read() {
+    let raw;
+    try {
+      raw = import_node_fs27.default.readFileSync(this.file, "utf8");
+    } catch {
+      return null;
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(raw);
+    } catch {
+      return null;
+    }
+    const r = parsed;
+    if (!r.identity || typeof r.identity.unionId !== "string" || r.identity.unionId.length === 0 || typeof r.identity.displayName !== "string" || r.identity.displayName.length === 0 || typeof r.ttcToken !== "string" || r.ttcToken.length === 0) {
+      return null;
+    }
+    return {
+      identity: {
+        unionId: r.identity.unionId,
+        displayName: r.identity.displayName,
+        ...typeof r.identity.avatarUrl === "string" ? { avatarUrl: r.identity.avatarUrl } : {}
+      },
+      ttcToken: r.ttcToken,
+      ttcTokenExpiresAt: typeof r.ttcTokenExpiresAt === "number" ? r.ttcTokenExpiresAt : null,
+      loginAt: typeof r.loginAt === "string" ? r.loginAt : (/* @__PURE__ */ new Date(0)).toISOString()
+    };
+  }
+  write(record) {
+    import_node_fs27.default.mkdirSync(import_node_path31.default.dirname(this.file), { recursive: true });
+    import_node_fs27.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
+    try {
+      import_node_fs27.default.chmodSync(this.file, 384);
+    } catch {
+    }
+  }
+  clear() {
+    try {
+      import_node_fs27.default.unlinkSync(this.file);
+    } catch (err) {
+      const code = err?.code;
+      if (code !== "ENOENT") throw err;
+    }
+  }
+};
+
+// src/feishu-auth/login-flow.ts
+var import_node_crypto11 = __toESM(require("crypto"), 1);
+var STATE_TTL_MS = 5 * 60 * 1e3;
+var LoginFlow = class {
+  constructor(deps) {
+    this.deps = deps;
+  }
+  deps;
+  pendingStates = /* @__PURE__ */ new Map();
+  start() {
+    const state = import_node_crypto11.default.randomBytes(16).toString("base64url");
+    const now = (this.deps.now ?? Date.now)();
+    this.pendingStates.set(state, now);
+    this.gcExpired(now);
+    const url = new URL("/auth/authorize", this.deps.ttcAuthBase);
+    url.searchParams.set("callback_url", this.deps.getCallbackUrl());
+    url.searchParams.set("state", state);
+    url.searchParams.set("auto", "1");
+    return { authUrl: url.toString(), state };
+  }
+  async handleCallback(params) {
+    const now = (this.deps.now ?? Date.now)();
+    const issuedAt = this.pendingStates.get(params.state);
+    if (issuedAt === void 0) {
+      return { ok: false, reason: "state mismatch" };
+    }
+    this.pendingStates.delete(params.state);
+    if (now - issuedAt > STATE_TTL_MS) {
+      return { ok: false, reason: "state expired" };
+    }
+    if (!params.token) {
+      return { ok: false, reason: "missing token" };
+    }
+    let identity;
+    try {
+      identity = await this.deps.fetchUserInfo(params.token);
+    } catch (err) {
+      return { ok: false, reason: `user_info failed: ${err.message}` };
+    }
+    const expiresAtNum = params.expiresAt ? Number.parseInt(params.expiresAt, 10) : NaN;
+    this.deps.store.write({
+      identity,
+      ttcToken: params.token,
+      ttcTokenExpiresAt: Number.isFinite(expiresAtNum) ? expiresAtNum : null,
+      loginAt: new Date(now).toISOString()
+    });
+    return { ok: true, identity };
+  }
+  gcExpired(now) {
+    for (const [state, issuedAt] of this.pendingStates) {
+      if (now - issuedAt > STATE_TTL_MS) this.pendingStates.delete(state);
+    }
+  }
+};
+
+// src/feishu-auth/ttc-client.ts
+var TTC_HOSTS = {
+  auth: "https://app.ttcadvisory.com",
+  api: "https://api.ttcadvisory.com"
+};
+var TtcUserInfoError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "TtcUserInfoError";
+  }
+  code;
+};
+async function fetchTtcUserInfo(opts) {
+  const doFetch = opts.fetchImpl ?? fetch;
+  let res;
+  try {
+    res = await doFetch(`${opts.apiBase}/api/user_service/v1/login/user`, {
+      headers: { Authorization: `Bearer ${opts.token}` }
+    });
+  } catch (err) {
+    throw new TtcUserInfoError("NETWORK", `TTC user_info request failed: ${err.message}`);
+  }
+  if (!res.ok) {
+    if (res.status === 401) {
+      throw new TtcUserInfoError("UNAUTHORIZED", "TTC token invalid or expired");
+    }
+    throw new TtcUserInfoError("API_ERROR", `TTC user_info HTTP ${res.status}`);
+  }
+  const body = await res.json();
+  if (body.code !== 0) {
+    throw new TtcUserInfoError("API_ERROR", `TTC user_info code=${body.code}: ${body.message ?? ""}`);
+  }
+  const d = body.data;
+  if (!d || typeof d.union_id !== "string" || d.union_id.length === 0 || typeof d.name !== "string" || d.name.length === 0) {
+    throw new TtcUserInfoError("BAD_RESPONSE", "TTC user_info missing union_id or name");
+  }
+  return {
+    unionId: d.union_id,
+    displayName: d.name,
+    ...typeof d.avatar_url === "string" && d.avatar_url.length > 0 ? { avatarUrl: d.avatar_url } : {}
+  };
+}
+
 // src/index.ts
 init_protocol();
 
@@ -39338,12 +39574,12 @@ init_protocol();
 init_protocol();
 
 // src/session/fork.ts
-var import_node_fs27 = __toESM(require("fs"), 1);
+var import_node_fs28 = __toESM(require("fs"), 1);
 var import_node_os14 = __toESM(require("os"), 1);
-var import_node_path31 = __toESM(require("path"), 1);
+var import_node_path32 = __toESM(require("path"), 1);
 init_claude_history();
 function readJsonlEntries(file) {
-  const raw = import_node_fs27.default.readFileSync(file, "utf8");
+  const raw = import_node_fs28.default.readFileSync(file, "utf8");
   const out = [];
   for (const line of raw.split("\n")) {
     const t = line.trim();
@@ -39356,10 +39592,10 @@ function readJsonlEntries(file) {
   return out;
 }
 function forkSession(input) {
-  const baseDir = input.baseDir ?? import_node_path31.default.join(import_node_os14.default.homedir(), ".claude");
-  const projectDir = import_node_path31.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
-  const sourceFile = import_node_path31.default.join(projectDir, `${input.toolSessionId}.jsonl`);
-  if (!import_node_fs27.default.existsSync(sourceFile)) {
+  const baseDir = input.baseDir ?? import_node_path32.default.join(import_node_os14.default.homedir(), ".claude");
+  const projectDir = import_node_path32.default.join(baseDir, "projects", cwdToHashDir(input.cwd));
+  const sourceFile = import_node_path32.default.join(projectDir, `${input.toolSessionId}.jsonl`);
+  if (!import_node_fs28.default.existsSync(sourceFile)) {
     throw new Error(`fork: source transcript not found: ${sourceFile}`);
   }
   const entries = readJsonlEntries(sourceFile);
@@ -39389,9 +39625,9 @@ function forkSession(input) {
     }
     forkedLines.push(JSON.stringify(forked));
   }
-  const forkedFilePath = import_node_path31.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
-  import_node_fs27.default.mkdirSync(projectDir, { recursive: true });
-  import_node_fs27.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
+  const forkedFilePath = import_node_path32.default.join(projectDir, `${forkedToolSessionId}.jsonl`);
+  import_node_fs28.default.mkdirSync(projectDir, { recursive: true });
+  import_node_fs28.default.writeFileSync(forkedFilePath, forkedLines.join("\n") + "\n", { mode: 384 });
   return { forkedToolSessionId, forkedFilePath };
 }
 
@@ -39491,67 +39727,7 @@ function buildSessionHandlers(deps) {
   const update = async (frame, _client, ctx) => {
     const args = SessionUpdateArgs.parse(frame);
     ensureSessionAccess(ctx, args.sessionId, "send");
-    const prevFile = manager.findOwnedSession(args.sessionId);
-    const prevProject = prevFile?.appBuilderProject ?? null;
-    const nextProject = args.patch.appBuilderProject ?? prevProject;
     const { response, broadcast } = manager.update(args);
-    if (args.patch.appBuilderProject !== void 0) {
-      deps.logger?.info("session-update.appBuilderProject", {
-        sessionId: args.sessionId,
-        prevProject,
-        nextProject,
-        hasLifecycle: !!deps.devServerLifecycle,
-        hasStore: !!deps.appBuilderStore
-      });
-    }
-    if (deps.devServerLifecycle && deps.appBuilderStore && args.patch.appBuilderProject !== void 0) {
-      const lifecycle = deps.devServerLifecycle;
-      const projectStore = deps.appBuilderStore;
-      const tunnelUrl = deps.getTunnelUrl?.() ?? null;
-      try {
-        if (prevProject && prevProject !== nextProject) {
-          await lifecycle.stopForSession(args.sessionId);
-        }
-        if (nextProject && nextProject !== "") {
-          const occupantSessionId = lifecycle.boundSessionId(nextProject);
-          const alreadyRunningForThisSession = lifecycle.isRunning(nextProject) && occupantSessionId === args.sessionId;
-          deps.logger?.info("session-update.maybe-start-dev-server", {
-            sessionId: args.sessionId,
-            projectName: nextProject,
-            occupantSessionId,
-            alreadyRunningForThisSession
-          });
-          if (!alreadyRunningForThisSession) {
-            if (occupantSessionId && occupantSessionId !== args.sessionId) {
-              await lifecycle.stopForSession(occupantSessionId);
-            }
-            const projects = await projectStore.list();
-            const target = projects.find((p2) => p2.name === nextProject);
-            deps.logger?.info("session-update.start-dev-server", {
-              sessionId: args.sessionId,
-              projectName: nextProject,
-              targetFound: !!target,
-              projectCwd: target ? projectStore.projectDir(nextProject) : null,
-              tunnelUrl
-            });
-            if (target) {
-              lifecycle.startForSession({
-                sessionId: args.sessionId,
-                projectName: nextProject,
-                cwd: projectStore.projectDir(nextProject),
-                port: target.port,
-                tunnelHost: tunnelUrl ? new URL(tunnelUrl.replace(/^wss?:\/\//i, "https://")).host : null
-              });
-            }
-          }
-        }
-      } catch (err) {
-        deps.logger?.warn("session-update.lifecycle-failed", {
-          sessionId: args.sessionId,
-          error: err instanceof Error ? err.message : String(err)
-        });
-      }
-    }
     return { response: { type: "session:info", ...response }, broadcast };
   };
   const del = async (frame, _client, ctx) => {
@@ -39803,7 +39979,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path41 = __toESM(require("path"), 1);
+var path42 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -39821,7 +39997,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path40 = __toESM(require("path"), 1);
+var path41 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -39834,26 +40010,26 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read") {
-  const root = path40.resolve(personaRoot);
-  const target = path40.resolve(absPath);
-  const sep3 = root.endsWith(path40.sep) ? "" : path40.sep;
+  const root = path41.resolve(personaRoot);
+  const target = path41.resolve(absPath);
+  const sep3 = root.endsWith(path41.sep) ? "" : path41.sep;
   if (!target.startsWith(root + sep3)) return false;
-  const rel = path40.relative(root, target);
+  const rel = path41.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId = rel.split(path40.sep)[0];
+  const personaId = rel.split(path41.sep)[0];
   if (!personaId) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path40.resolve(personaRoot);
-  const target = path40.resolve(absPath);
-  const sep3 = root.endsWith(path40.sep) ? "" : path40.sep;
+  const root = path41.resolve(personaRoot);
+  const target = path41.resolve(absPath);
+  const sep3 = root.endsWith(path41.sep) ? "" : path41.sep;
   if (!target.startsWith(root + sep3)) return null;
-  const rel = path40.relative(root, target);
+  const rel = path41.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path40.sep)[0];
+  const id = rel.split(path41.sep)[0];
   return id || null;
 }
 
@@ -39878,7 +40054,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path41.join(personaRoot, pid),
+          path42.join(personaRoot, pid),
           personaRoot,
           "read"
         );
@@ -39889,7 +40065,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path41.resolve(args.projectPath), personaRoot, "history:list");
+    assertGuestPath(ctx, path42.resolve(args.projectPath), personaRoot, "history:list");
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -39921,13 +40097,13 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path41.resolve(args.cwd), personaRoot, "history:subagents");
+    assertGuestPath(ctx, path42.resolve(args.cwd), personaRoot, "history:subagents");
     const subs = await history.listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path41.resolve(args.cwd), personaRoot, "history:subagent-read");
+    assertGuestPath(ctx, path42.resolve(args.cwd), personaRoot, "history:subagent-read");
     const res = await history.readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
   };
@@ -39935,7 +40111,7 @@ function buildHistoryHandlers(deps) {
     const dirs = listRecentDirs(store);
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path41.resolve(d.cwd), personaRoot, "read")
+        (d) => isGuestPathAllowed(ctx.grants, path42.resolve(d.cwd), personaRoot, "read")
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -39952,7 +40128,7 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path42 = __toESM(require("path"), 1);
+var path43 = __toESM(require("path"), 1);
 var os15 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
@@ -39993,22 +40169,22 @@ function buildWorkspaceHandlers(deps) {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
     const fallbackCwd = isGuest && personaRoot ? personaRoot : os15.homedir();
-    const resolvedCwd = path42.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path42.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const resolvedCwd = path43.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path43.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list");
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path42.isAbsolute(args.path) ? path42.resolve(args.path) : path42.resolve(args.cwd, args.path);
+    const target = path43.isAbsolute(args.path) ? path43.resolve(args.path) : path43.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read");
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path42.resolve(args.cwd);
+    const cwdAbs = path43.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list");
     const list2 = skills.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -40020,7 +40196,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path42.resolve(args.cwd);
+    const cwdAbs = path43.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list");
     const list2 = agents.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -40039,20 +40215,20 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path44 = __toESM(require("path"), 1);
+var path45 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
 var import_node_child_process6 = require("child_process");
-var import_node_fs28 = __toESM(require("fs"), 1);
-var import_node_path32 = __toESM(require("path"), 1);
+var import_node_fs29 = __toESM(require("fs"), 1);
+var import_node_path33 = __toESM(require("path"), 1);
 var import_node_util = require("util");
 var pexec = (0, import_node_util.promisify)(import_node_child_process6.execFile);
 function normalizePath(p2) {
-  const resolved = import_node_path32.default.resolve(p2);
+  const resolved = import_node_path33.default.resolve(p2);
   try {
-    return import_node_fs28.default.realpathSync(resolved);
+    return import_node_fs29.default.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -40125,7 +40301,7 @@ async function listGitBranches(cwd) {
 // src/handlers/git.ts
 function assertGuestCwd(ctx, cwd, personaRoot, method) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
-  if (!isGuestPathAllowed(ctx.grants, path44.resolve(cwd), personaRoot, "read")) {
+  if (!isGuestPathAllowed(ctx.grants, path45.resolve(cwd), personaRoot, "read")) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -40487,6 +40663,36 @@ function buildWhoamiHandler(deps) {
   };
 }
 
+// src/handlers/feishu-auth.ts
+function buildFeishuAuthHandlers(deps) {
+  const loginStart = async () => {
+    const { authUrl, state } = deps.loginFlow.start();
+    return {
+      response: { type: "auth:login:start:ok", authUrl, state }
+    };
+  };
+  const getIdentity = async () => {
+    const record = deps.ownerIdentityStore.read();
+    return {
+      response: {
+        type: "auth:getIdentity:ok",
+        identity: record ? record.identity : null
+      }
+    };
+  };
+  const logout = async () => {
+    deps.ownerIdentityStore.clear();
+    return {
+      response: { type: "auth:logout:ok" }
+    };
+  };
+  return {
+    "auth:login:start": loginStart,
+    "auth:getIdentity": getIdentity,
+    "auth:logout": logout
+  };
+}
+
 // src/handlers/meta.ts
 var import_node_os15 = __toESM(require("os"), 1);
 init_protocol();
@@ -40593,8 +40799,14 @@ function buildPersonaHandlers(deps) {
   const update = async (frame) => {
     const { type: _type, requestId: _requestId, ...rest } = frame;
     const args = PersonaUpdateArgsSchema.parse(rest);
-    const { personality, ...metaPatch } = args.patch;
-    const persona = personaManager.update(args.personaId, metaPatch, personality);
+    const { personality, networkAllowedDomains, ...metaPatch } = args.patch;
+    let persona = personaManager.update(args.personaId, metaPatch, personality);
+    if (networkAllowedDomains !== void 0) {
+      persona = personaManager.updateNetworkAllowedDomains(
+        args.personaId,
+        networkAllowedDomains
+      );
+    }
     return { response: { type: "persona:info", ...persona } };
   };
   const del = async (frame) => {
@@ -40614,7 +40826,7 @@ function buildPersonaHandlers(deps) {
 }
 
 // src/handlers/attachment.ts
-var import_node_path33 = __toESM(require("path"), 1);
+var import_node_path34 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 var DEFAULT_TTL_SECONDS = 24 * 3600;
@@ -40668,12 +40880,12 @@ function buildAttachmentHandlers(deps) {
         `session ${args.sessionId} scope unresolved`
       );
     }
-    const cwdAbs = import_node_path33.default.resolve(sessionFile.cwd);
-    const candidateAbs = import_node_path33.default.isAbsolute(args.relPath) ? import_node_path33.default.resolve(args.relPath) : import_node_path33.default.resolve(cwdAbs, args.relPath);
+    const cwdAbs = import_node_path34.default.resolve(sessionFile.cwd);
+    const candidateAbs = import_node_path34.default.isAbsolute(args.relPath) ? import_node_path34.default.resolve(args.relPath) : import_node_path34.default.resolve(cwdAbs, args.relPath);
     assertGuestAttachmentPath(ctx, candidateAbs, deps.personaRoot, "attachment.signUrl");
     const entries = deps.groupFileStore.list(scope, args.sessionId);
     const entry = entries.find((e) => {
-      const storedAbs = import_node_path33.default.isAbsolute(e.relPath) ? import_node_path33.default.resolve(e.relPath) : import_node_path33.default.resolve(cwdAbs, e.relPath);
+      const storedAbs = import_node_path34.default.isAbsolute(e.relPath) ? import_node_path34.default.resolve(e.relPath) : import_node_path34.default.resolve(cwdAbs, e.relPath);
       return storedAbs === candidateAbs && !e.stale;
     });
     if (!entry) {
@@ -40697,7 +40909,7 @@ function buildAttachmentHandlers(deps) {
     if (!ctx || ctx.principal.kind !== "guest" || !deps.personaRoot || !deps.sessionStore) return;
     const f = deps.sessionStore.read(sessionId);
     if (!f) return;
-    assertGuestAttachmentPath(ctx, import_node_path33.default.resolve(f.cwd), deps.personaRoot, method);
+    assertGuestAttachmentPath(ctx, import_node_path34.default.resolve(f.cwd), deps.personaRoot, method);
   }
   const groupAdd = async (frame, _client, ctx) => {
     if (!deps.groupFileStore || !deps.getSessionScope) {
@@ -40769,19 +40981,19 @@ function buildAttachmentHandlers(deps) {
 
 // src/handlers/extension.ts
 var import_promises7 = __toESM(require("fs/promises"), 1);
-var import_node_path38 = __toESM(require("path"), 1);
+var import_node_path39 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/extension/bundle-zip.ts
 var import_promises4 = __toESM(require("fs/promises"), 1);
-var import_node_path34 = __toESM(require("path"), 1);
-var import_node_crypto11 = __toESM(require("crypto"), 1);
+var import_node_path35 = __toESM(require("path"), 1);
+var import_node_crypto12 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
   const zip = new import_jszip2.default();
   for (const rel of entries) {
-    const abs = import_node_path34.default.join(dir, rel);
+    const abs = import_node_path35.default.join(dir, rel);
     const content = await import_promises4.default.readFile(abs);
     zip.file(rel, content, { date: FIXED_DATE });
   }
@@ -40790,7 +41002,7 @@ async function bundleExtensionDir(dir) {
     compression: "DEFLATE",
     compressionOptions: { level: 6 }
   });
-  const sha256 = import_node_crypto11.default.createHash("sha256").update(buffer).digest("hex");
+  const sha256 = import_node_crypto12.default.createHash("sha256").update(buffer).digest("hex");
   return { buffer, sha256 };
 }
 var FIXED_DATE = /* @__PURE__ */ new Date("2020-01-01T00:00:00.000Z");
@@ -40802,7 +41014,7 @@ async function listFilesSorted(rootDir) {
   return out;
 }
 async function walk(absRoot, relPrefix, out) {
-  const dirAbs = import_node_path34.default.join(absRoot, relPrefix);
+  const dirAbs = import_node_path35.default.join(absRoot, relPrefix);
   const entries = await import_promises4.default.readdir(dirAbs, { withFileTypes: true });
   for (const e of entries) {
     if (IGNORE_BASENAMES.has(e.name)) continue;
@@ -40856,25 +41068,25 @@ function computePublishCheck(args) {
 
 // src/extension/install-flow.ts
 var import_promises5 = __toESM(require("fs/promises"), 1);
-var import_node_path36 = __toESM(require("path"), 1);
+var import_node_path37 = __toESM(require("path"), 1);
 var import_node_os17 = __toESM(require("os"), 1);
-var import_node_crypto12 = __toESM(require("crypto"), 1);
+var import_node_crypto13 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
 var import_node_os16 = __toESM(require("os"), 1);
-var import_node_path35 = __toESM(require("path"), 1);
+var import_node_path36 = __toESM(require("path"), 1);
 function clawdHomeRoot(override) {
-  return override ?? process.env.CLAWD_HOME ?? import_node_path35.default.join(import_node_os16.default.homedir(), ".clawd");
+  return override ?? process.env.CLAWD_HOME ?? import_node_path36.default.join(import_node_os16.default.homedir(), ".clawd");
 }
 function extensionsRoot(override) {
-  return import_node_path35.default.join(clawdHomeRoot(override), "extensions");
+  return import_node_path36.default.join(clawdHomeRoot(override), "extensions");
 }
 function publishedChannelsFile(override) {
-  return import_node_path35.default.join(clawdHomeRoot(override), "extensions-published.json");
+  return import_node_path36.default.join(clawdHomeRoot(override), "extensions-published.json");
 }
 function bundleCacheRoot(override) {
-  return import_node_path35.default.join(clawdHomeRoot(override), "extension-bundles");
+  return import_node_path36.default.join(clawdHomeRoot(override), "extension-bundles");
 }
 
 // src/extension/install-flow.ts
@@ -40887,7 +41099,7 @@ var InstallError = class extends Error {
 };
 async function installFromChannel(args, deps) {
   const { channelRef, snapshotHash, bundleZip } = args;
-  const computed = import_node_crypto12.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto13.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new InstallError(
       "HASH_MISMATCH",
@@ -40901,7 +41113,7 @@ async function installFromChannel(args, deps) {
     throw new InstallError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path36.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path37.default.isAbsolute(name)) {
       throw new InstallError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -40933,7 +41145,7 @@ async function installFromChannel(args, deps) {
     );
   }
   const localExtId = namespacedExtId(ownerSlug, channelRef.ownerPrincipalId);
-  const destDir = import_node_path36.default.join(deps.extensionsRoot, localExtId);
+  const destDir = import_node_path37.default.join(deps.extensionsRoot, localExtId);
   let destExists = false;
   try {
     await import_promises5.default.access(destDir);
@@ -40947,16 +41159,16 @@ async function installFromChannel(args, deps) {
     );
   }
   const stage = await import_promises5.default.mkdtemp(
-    import_node_path36.default.join(import_node_os17.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
+    import_node_path37.default.join(import_node_os17.default.tmpdir(), `clawd-ext-install-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path36.default.join(stage, name);
+      const dest = import_node_path37.default.join(stage, name);
       if (entry.dir) {
         await import_promises5.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises5.default.mkdir(import_node_path36.default.dirname(dest), { recursive: true });
+      await import_promises5.default.mkdir(import_node_path37.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises5.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -40977,9 +41189,9 @@ async function installFromChannel(args, deps) {
 
 // src/extension/update-flow.ts
 var import_promises6 = __toESM(require("fs/promises"), 1);
-var import_node_path37 = __toESM(require("path"), 1);
+var import_node_path38 = __toESM(require("path"), 1);
 var import_node_os18 = __toESM(require("os"), 1);
-var import_node_crypto13 = __toESM(require("crypto"), 1);
+var import_node_crypto14 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
 var UpdateError = class extends Error {
   constructor(code, message) {
@@ -40994,11 +41206,11 @@ async function updateFromChannel(args, deps) {
     channelRef.extId,
     channelRef.ownerPrincipalId
   );
-  const liveDir = import_node_path37.default.join(deps.extensionsRoot, localExtId);
+  const liveDir = import_node_path38.default.join(deps.extensionsRoot, localExtId);
   const prevDir = `${liveDir}.prev`;
   let existingVersion;
   try {
-    const raw = await import_promises6.default.readFile(import_node_path37.default.join(liveDir, "manifest.json"), "utf8");
+    const raw = await import_promises6.default.readFile(import_node_path38.default.join(liveDir, "manifest.json"), "utf8");
     const parsed2 = ExtensionManifestSchema.safeParse(JSON.parse(raw));
     if (!parsed2.success) {
       throw new UpdateError(
@@ -41017,7 +41229,7 @@ async function updateFromChannel(args, deps) {
     if (e instanceof UpdateError) throw e;
     throw e;
   }
-  const computed = import_node_crypto13.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto14.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new UpdateError(
       "HASH_MISMATCH",
@@ -41031,7 +41243,7 @@ async function updateFromChannel(args, deps) {
     throw new UpdateError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path37.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path38.default.isAbsolute(name)) {
       throw new UpdateError("ZIP_INVALID", `unsafe zip entry: ${name}`);
     }
   }
@@ -41066,16 +41278,16 @@ async function updateFromChannel(args, deps) {
   await import_promises6.default.rm(prevDir, { recursive: true, force: true });
   await import_promises6.default.rename(liveDir, prevDir);
   const stage = await import_promises6.default.mkdtemp(
-    import_node_path37.default.join(import_node_os18.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
+    import_node_path38.default.join(import_node_os18.default.tmpdir(), `clawd-ext-update-${localExtId}-`)
   );
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path37.default.join(stage, name);
+      const dest = import_node_path38.default.join(stage, name);
       if (entry.dir) {
         await import_promises6.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises6.default.mkdir(import_node_path37.default.dirname(dest), { recursive: true });
+      await import_promises6.default.mkdir(import_node_path38.default.dirname(dest), { recursive: true });
       if (name === "manifest.json") {
         const rewritten = { ...parsed.data, id: localExtId };
         await import_promises6.default.writeFile(dest, JSON.stringify(rewritten, null, 2));
@@ -41168,7 +41380,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
       );
     }
   }
-  const manifestPath = import_node_path38.default.join(root, extId, "manifest.json");
+  const manifestPath = import_node_path39.default.join(root, extId, "manifest.json");
   const manifest = await readManifest(root, extId);
   const next = { ...manifest, version: newVersion };
   const tmp = `${manifestPath}.tmp`;
@@ -41176,7 +41388,7 @@ async function rewriteManifestVersion(root, extId, newVersion, previousPublished
   await import_promises7.default.rename(tmp, manifestPath);
 }
 async function readManifest(root, extId) {
-  const file = import_node_path38.default.join(root, extId, "manifest.json");
+  const file = import_node_path39.default.join(root, extId, "manifest.json");
   let raw;
   try {
     raw = await import_promises7.default.readFile(file, "utf8");
@@ -41267,7 +41479,7 @@ function buildExtensionHandlers(deps) {
   };
   async function buildSnapshotMeta(extId) {
     const manifest = await readManifest(deps.root, extId);
-    const { sha256, buffer } = await bundleExtensionDir(import_node_path38.default.join(deps.root, extId));
+    const { sha256, buffer } = await bundleExtensionDir(import_node_path39.default.join(deps.root, extId));
     return { manifest, contentHash: sha256, buffer };
   }
   const publish = async (frame, _client, ctx) => {
@@ -41447,64 +41659,9 @@ function buildExtensionHandlers(deps) {
   };
 }
 
-// src/handlers/app-builder.ts
-function buildAppBuilderHandlers(deps) {
-  const { store, deleteSessionsByProject, devServerLifecycle } = deps;
-  const listProjects = async () => {
-    const projects = await store.list();
-    return {
-      response: {
-        projects: projects.map((p2) => ({
-          ...p2,
-          isRunning: devServerLifecycle.isRunning(p2.name),
-          boundSessionId: devServerLifecycle.boundSessionId(p2.name)
-        }))
-      }
-    };
-  };
-  const createProject = async (frame) => {
-    const name = frame.name;
-    if (typeof name !== "string") throw new Error("createProject: name must be string");
-    const project = await store.create(name);
-    return { response: { project } };
-  };
-  const deleteProject = async (frame) => {
-    const name = frame.name;
-    if (typeof name !== "string") throw new Error("deleteProject: name must be string");
-    await devServerLifecycle.stopForProject(name);
-    await deleteSessionsByProject(name);
-    await store.delete(name);
-    return { response: {} };
-  };
-  const updateProjectPort = async (frame) => {
-    const f = frame;
-    if (typeof f.name !== "string") throw new Error("updateProjectPort: name must be string");
-    if (typeof f.newPort !== "number") throw new Error("updateProjectPort: newPort must be number");
-    const entry = devServerLifecycle.boundEntry(f.name);
-    await devServerLifecycle.stopForProject(f.name);
-    const project = await store.updatePort(f.name, f.newPort);
-    if (entry) {
-      await devServerLifecycle.restartForProjectAt({
-        projectName: f.name,
-        newPort: f.newPort,
-        sessionId: entry.sessionId,
-        cwd: entry.cwd,
-        tunnelHost: entry.tunnelHost
-      });
-    }
-    return { response: { project } };
-  };
-  return {
-    "appBuilder:listProjects": listProjects,
-    "appBuilder:createProject": createProject,
-    "appBuilder:deleteProject": deleteProject,
-    "appBuilder:updateProjectPort": updateProjectPort
-  };
-}
-
 // src/extension/registry.ts
 var import_promises8 = __toESM(require("fs/promises"), 1);
-var import_node_path39 = __toESM(require("path"), 1);
+var import_node_path40 = __toESM(require("path"), 1);
 async function loadAll(root) {
   let entries;
   try {
@@ -41517,13 +41674,13 @@ async function loadAll(root) {
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
     if (ent.name.startsWith(".")) continue;
-    records.push(await loadOne(import_node_path39.default.join(root, ent.name), ent.name));
+    records.push(await loadOne(import_node_path40.default.join(root, ent.name), ent.name));
   }
   records.sort((a, b2) => a.extId < b2.extId ? -1 : a.extId > b2.extId ? 1 : 0);
   return records;
 }
 async function loadOne(dir, dirName) {
-  const manifestPath = import_node_path39.default.join(dir, "manifest.json");
+  const manifestPath = import_node_path40.default.join(dir, "manifest.json");
   let raw;
   try {
     raw = await import_promises8.default.readFile(manifestPath, "utf8");
@@ -41568,7 +41725,7 @@ async function loadOne(dir, dirName) {
 
 // src/extension/uninstall.ts
 var import_promises9 = __toESM(require("fs/promises"), 1);
-var import_node_path40 = __toESM(require("path"), 1);
+var import_node_path41 = __toESM(require("path"), 1);
 var UninstallError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -41577,7 +41734,7 @@ var UninstallError = class extends Error {
   code;
 };
 async function uninstall(deps) {
-  const dir = import_node_path40.default.join(deps.root, deps.extId);
+  const dir = import_node_path41.default.join(deps.root, deps.extId);
   try {
     await import_promises9.default.access(dir);
   } catch {
@@ -41590,13 +41747,7 @@ async function uninstall(deps) {
 // src/handlers/index.ts
 function buildMethodHandlers(deps) {
   return {
-    ...buildSessionHandlers({
-      ...deps,
-      devServerLifecycle: deps.devServerLifecycle,
-      appBuilderStore: deps.appBuilderStore,
-      getTunnelUrl: deps.getTunnelUrl,
-      logger: deps.logger
-    }),
+    ...buildSessionHandlers(deps),
     ...buildPermissionHandlers(deps),
     ...buildHistoryHandlers(deps),
     ...buildWorkspaceHandlers(deps),
@@ -41629,6 +41780,7 @@ function buildMethodHandlers(deps) {
       personaStore: deps.personaStore,
       capabilityManager: deps.capabilityManager
     }),
+    ...buildFeishuAuthHandlers(deps.feishuAuth),
     ...deps.attachment ? buildAttachmentHandlers(deps.attachment) : {},
     ...buildExtensionHandlers({
       loadAll,
@@ -41637,237 +41789,10 @@ function buildMethodHandlers(deps) {
       root: extensionsRoot(),
       publishedChannelStore: deps.publishedChannelStore,
       bundleCache: deps.bundleCache
-    }),
-    ...buildAppBuilderHandlers({
-      store: deps.appBuilderStore,
-      deleteSessionsByProject: deps.deleteSessionsByProject,
-      devServerLifecycle: deps.devServerLifecycle
     })
   };
 }
 
-// src/app-builder/project-store.ts
-var import_node_fs29 = require("fs");
-var import_node_path41 = require("path");
-init_protocol();
-var PROJECTS_DIR = "projects";
-var META_FILE = ".clawd-project.json";
-var ProjectStore = class {
-  /** @param personaRoot persona 目录，例如 `~/.clawd/personas/persona-app-builder/` */
-  constructor(personaRoot) {
-    this.personaRoot = personaRoot;
-  }
-  personaRoot;
-  /** projects/<name>/.clawd-project.json 路径 */
-  metaPath(name) {
-    return (0, import_node_path41.join)(this.projectsRoot(), name, META_FILE);
-  }
-  /** projects/<name>/ 目录路径（cwd 用） */
-  projectDir(name) {
-    return (0, import_node_path41.join)(this.projectsRoot(), name);
-  }
-  projectsRoot() {
-    return (0, import_node_path41.join)(this.personaRoot, PROJECTS_DIR);
-  }
-  async list() {
-    let entries;
-    try {
-      entries = await import_node_fs29.promises.readdir(this.projectsRoot());
-    } catch (err) {
-      if (err.code === "ENOENT") return [];
-      throw err;
-    }
-    const out = [];
-    for (const name of entries) {
-      try {
-        const raw = await import_node_fs29.promises.readFile(this.metaPath(name), "utf8");
-        const parsed = ProjectMetadataSchema.safeParse(JSON.parse(raw));
-        if (parsed.success) out.push(parsed.data);
-      } catch {
-      }
-    }
-    return out.sort((a, b2) => a.name.localeCompare(b2.name));
-  }
-  async create(name) {
-    const existing = await this.list();
-    if (existing.some((p2) => p2.name === name)) {
-      throw new Error(`project "${name}" already exists / \u5DF2\u5B58\u5728`);
-    }
-    const usedPorts = new Set(existing.map((p2) => p2.port));
-    let port = -1;
-    for (let p2 = PROJECT_PORT_MIN; p2 <= PROJECT_PORT_MAX; p2++) {
-      if (!usedPorts.has(p2)) {
-        port = p2;
-        break;
-      }
-    }
-    if (port < 0) {
-      throw new Error(
-        `port pool exhausted / \u7AEF\u53E3\u6C60\u5DF2\u6EE1\uFF08${PROJECT_PORT_MIN}-${PROJECT_PORT_MAX}\uFF09\uFF0C\u5148\u5220\u4E00\u4E2A project \u91CA\u653E\u7AEF\u53E3`
-      );
-    }
-    const meta = {
-      name,
-      port,
-      createdAt: (/* @__PURE__ */ new Date()).toISOString()
-    };
-    const validated = ProjectMetadataSchema.safeParse(meta);
-    if (!validated.success) {
-      throw new Error(`invalid name "${name}": ${validated.error.message}`);
-    }
-    const dir = this.projectDir(name);
-    await import_node_fs29.promises.mkdir(dir, { recursive: true });
-    await import_node_fs29.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
-    return meta;
-  }
-  async delete(name) {
-    const dir = this.projectDir(name);
-    await import_node_fs29.promises.rm(dir, { recursive: true, force: true });
-  }
-  async updatePort(name, newPort) {
-    if (newPort < PROJECT_PORT_MIN || newPort > PROJECT_PORT_MAX) {
-      throw new Error(
-        `port range invalid: must be ${PROJECT_PORT_MIN}-${PROJECT_PORT_MAX}, got ${newPort}`
-      );
-    }
-    const list = await this.list();
-    const target = list.find((p2) => p2.name === name);
-    if (!target) throw new Error(`project "${name}" not found / \u4E0D\u5B58\u5728`);
-    const conflict = list.find((p2) => p2.name !== name && p2.port === newPort);
-    if (conflict) {
-      throw new Error(`port ${newPort} already used / \u5DF2\u88AB project "${conflict.name}" \u5360\u7528`);
-    }
-    const updated = { ...target, port: newPort };
-    await import_node_fs29.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
-    return updated;
-  }
-};
-
-// src/app-builder/dev-server-supervisor.ts
-var import_node_child_process7 = require("child_process");
-var import_node_events2 = require("events");
-var DevServerSupervisor = class extends import_node_events2.EventEmitter {
-  running = /* @__PURE__ */ new Map();
-  // key: sessionId
-  logger = { warn: () => {
-  }, info: () => {
-  } };
-  /** daemon entry 启动后注入 logger，让 child 输出走 clawd.log */
-  setLogger(logger) {
-    this.logger = logger;
-  }
-  startForSession(args) {
-    if (this.running.has(args.sessionId)) return;
-    const augmentedPath = [
-      process.env.PATH ?? "",
-      "/opt/homebrew/bin",
-      "/usr/local/bin",
-      `${process.env.HOME}/.nvm/versions/node`,
-      `${process.env.HOME}/.local/share/pnpm`
-    ].filter(Boolean).join(":");
-    const env = {
-      ...process.env,
-      PATH: augmentedPath,
-      CLAWD_TUNNEL_HOST: args.tunnelHost ?? "",
-      CLAWD_PREVIEW_PORT: String(args.port)
-    };
-    this.logger.info("dev-server.start", {
-      projectName: args.projectName,
-      port: args.port,
-      cwd: args.cwd,
-      sessionId: args.sessionId,
-      tunnelHost: args.tunnelHost
-    });
-    const child = (0, import_node_child_process7.spawn)("pnpm", ["dev"], { cwd: args.cwd, env, stdio: "pipe", shell: true });
-    const entry = { ...args, process: child };
-    this.running.set(args.sessionId, entry);
-    child.stdout?.on("data", (chunk) => {
-      this.logger.info("dev-server.stdout", {
-        projectName: args.projectName,
-        port: args.port,
-        chunk: chunk.toString().trimEnd()
-      });
-    });
-    child.stderr?.on("data", (chunk) => {
-      this.logger.warn("dev-server.stderr", {
-        projectName: args.projectName,
-        port: args.port,
-        chunk: chunk.toString().trimEnd()
-      });
-    });
-    child.on("error", (err) => {
-      this.running.delete(args.sessionId);
-      this.logger.warn("dev-server.spawn-failed", {
-        projectName: args.projectName,
-        port: args.port,
-        error: err.message,
-        code: err.code
-      });
-      this.emit("devServer:failed", {
-        sessionId: args.sessionId,
-        projectName: args.projectName,
-        port: args.port,
-        exitCode: null
-      });
-    });
-    child.on("exit", (code) => {
-      this.running.delete(args.sessionId);
-      this.logger.info("dev-server.exit", { projectName: args.projectName, port: args.port, code });
-      if (code !== 0 && code !== null) {
-        this.emit("devServer:failed", {
-          sessionId: args.sessionId,
-          projectName: args.projectName,
-          port: args.port,
-          exitCode: code
-        });
-      }
-    });
-  }
-  stopForSession(sessionId) {
-    const entry = this.running.get(sessionId);
-    if (!entry) return Promise.resolve();
-    return new Promise((resolve6) => {
-      entry.process.once("exit", () => {
-        this.running.delete(sessionId);
-        resolve6();
-      });
-      entry.process.kill("SIGTERM");
-    });
-  }
-  async stopForProject(projectName) {
-    const entry = [...this.running.values()].find((e) => e.projectName === projectName);
-    if (!entry) return;
-    await this.stopForSession(entry.sessionId);
-  }
-  async restartForProjectAt(args) {
-    await this.stopForSession(args.sessionId);
-    this.startForSession({
-      sessionId: args.sessionId,
-      projectName: args.projectName,
-      port: args.newPort,
-      cwd: args.cwd,
-      tunnelHost: args.tunnelHost
-    });
-  }
-  isRunning(projectName) {
-    return [...this.running.values()].some((e) => e.projectName === projectName);
-  }
-  boundSessionId(projectName) {
-    const entry = [...this.running.values()].find((e) => e.projectName === projectName);
-    return entry?.sessionId ?? null;
-  }
-  boundEntry(projectName) {
-    const entry = [...this.running.values()].find((e) => e.projectName === projectName);
-    if (!entry) return null;
-    return {
-      sessionId: entry.sessionId,
-      cwd: entry.cwd,
-      port: entry.port,
-      tunnelHost: entry.tunnelHost
-    };
-  }
-};
-
 // src/handlers/method-grants.ts
 var ADMIN_ANY = {
   kind: "fixed",
@@ -41998,14 +41923,15 @@ var METHOD_GRANT_MAP = {
   // guest-self：guest 在自己 daemon 上触发安装与更新（无持久化 subscription 概念）
   "extension.install-from-channel": ADMIN_ANY,
   "extension.update-from-channel": ADMIN_ANY,
-  // ---- app-builder Project picker（spec 2026-06-01-app-builder-project-picker-design） ----
-  // owner-only：picker UI 给 owner 管理本机 build 中的 project（fs + 端口分配）。
-  // 即使 persona-app-builder 是 PreinstalledPersona，project 管理也属本机 owner 行为，
-  // 不暴露给 guest（远端接入者）。
-  "appBuilder:listProjects": ADMIN_ANY,
-  "appBuilder:createProject": ADMIN_ANY,
-  "appBuilder:deleteProject": ADMIN_ANY,
-  "appBuilder:updateProjectPort": ADMIN_ANY
+  // ---- auth:* 飞书统一身份 Phase 1（owner-only） ----
+  // 登录/登出/查身份都是 owner 本机操作，guest 不可调
+  "auth:login:start": ADMIN_ANY,
+  "auth:getIdentity": ADMIN_ANY,
+  "auth:logout": ADMIN_ANY,
+  // ---- hub:* 飞书统一身份 Phase 2（owner-only） ----
+  // hub 目录 / 连接都是 owner 本机操作（用 owner 的 ttcJwt 找中心 server），guest 不可调
+  "hub:list": ADMIN_ANY,
+  "hub:connect": ADMIN_ANY
 };
 function computeGrantForFrame(method, frame) {
   const rule = METHOD_GRANT_MAP[method];
@@ -42021,12 +41947,12 @@ function computeGrantForFrame(method, frame) {
 }
 
 // src/extension/runtime.ts
-var import_node_child_process8 = require("child_process");
+var import_node_child_process7 = require("child_process");
 var import_node_path42 = __toESM(require("path"), 1);
 var import_promises10 = require("timers/promises");
 
 // src/extension/port-allocator.ts
-var import_node_net2 = __toESM(require("net"), 1);
+var import_node_net = __toESM(require("net"), 1);
 var PortExhaustedError = class extends Error {
   constructor(min, max) {
     super(`no free port in [${min},${max}]`);
@@ -42039,7 +41965,7 @@ var PortExhaustedError = class extends Error {
 };
 function probe(port) {
   return new Promise((resolve6) => {
-    const srv = import_node_net2.default.createServer();
+    const srv = import_node_net.default.createServer();
     srv.once("error", () => resolve6(false));
     srv.once("listening", () => {
       srv.close(() => resolve6(true));
@@ -42129,7 +42055,7 @@ var Runtime = class {
       CLAWOS_EXT_PORT: String(port),
       CLAWOS_EXT_ID: extId
     };
-    const child = (0, import_node_child_process8.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process7.spawn)("sh", ["-c", cmd], {
       cwd: dir,
       env,
       stdio: ["ignore", "pipe", "pipe"],
@@ -42395,8 +42321,11 @@ async function startDaemon(config) {
   } else if (config.tunnel) {
     resolvedAuthToken = authFile.token;
   }
-  const ownerPrincipalId = authFile.ownerPrincipalId;
-  const ownerDisplayName = loadOwnerDisplayName(config.dataDir);
+  const ownerIdentityStore = new OwnerIdentityStore(config.dataDir);
+  const feishuIdentity = ownerIdentityStore.read();
+  let feishuActive = feishuIdentity !== null;
+  let ownerPrincipalId = feishuIdentity?.identity.unionId ?? authFile.ownerPrincipalId;
+  let ownerDisplayName = feishuIdentity?.identity.displayName ?? loadOwnerDisplayName(config.dataDir);
   const authMode = resolvedAuthToken == null ? "none" : "first-message";
   const inboxStore = new InboxStore(config.dataDir);
   const inboxManager = new InboxManager(inboxStore, (_peerOwnerId, frame) => {
@@ -42438,7 +42367,9 @@ async function startDaemon(config) {
         isOwnerToken: (x) => resolvedAuthToken != null && constantTimeEqual(x, resolvedAuthToken),
         ownerPrincipalId,
         ownerDisplayName,
-        capabilityRegistry,
+        // 飞书 gate（spec 决策 #9）：未激活飞书身份时不接受 guest（capability token）入站——
+        // 不传 registry 让 guest token 一律 BAD_TOKEN。owner 自己连接不受影响。
+        ...feishuActive ? { capabilityRegistry } : {},
         selfPrincipalId,
         selfDisplayName
       });
@@ -42595,19 +42526,13 @@ async function startDaemon(config) {
   const publishedChannelStore = new PublishedChannelStore(publishedChannelsFile());
   await publishedChannelStore.load();
   const bundleCache = new BundleCache(bundleCacheRoot());
-  const appBuilderStore = new ProjectStore(
-    import_node_path45.default.join(config.dataDir, "personas/persona-app-builder")
-  );
-  const devServerSupervisor = new DevServerSupervisor();
-  devServerSupervisor.setLogger(logger);
-  const appBuilderPortRange = [];
-  for (let p2 = PROJECT_PORT_MIN; p2 <= PROJECT_PORT_MAX; p2++) appBuilderPortRange.push(p2);
-  const effectivePreviewPorts = Array.from(
-    /* @__PURE__ */ new Set([...config.previewPorts ?? [], ...appBuilderPortRange])
-  );
-  const deleteSessionsByProject = async (_name) => {
-  };
-  const handlers = buildMethodHandlers({
+  const loginFlow = new LoginFlow({
+    store: ownerIdentityStore,
+    fetchUserInfo: (ttcToken) => fetchTtcUserInfo({ apiBase: TTC_HOSTS.api, token: ttcToken }),
+    ttcAuthBase: TTC_HOSTS.auth,
+    getCallbackUrl: () => `http://127.0.0.1:${config.port}/auth/callback`
+  });
+  const makeHandlers = () => buildMethodHandlers({
     manager,
     workspace,
     skills,
@@ -42680,12 +42605,10 @@ async function startDaemon(config) {
     // extension sharing v1 — owner-side published-channels store.
     publishedChannelStore,
     bundleCache,
-    // app-builder
-    appBuilderStore,
-    deleteSessionsByProject,
-    devServerLifecycle: devServerSupervisor,
-    logger
+    // 飞书统一身份 Phase 1：登录 RPC handlers（auth:login:start / getIdentity / logout）
+    feishuAuth: { loginFlow, ownerIdentityStore }
   });
+  let handlers = makeHandlers();
   const authResolver = new AuthContextResolver({
     ownerToken: resolvedAuthToken
   });
@@ -42711,8 +42634,29 @@ async function startDaemon(config) {
     },
     // POST /extensions/import lands in ~/.clawd/extensions/<id>/
     extensionsRoot: () => extensionsRoot(),
-    // app-builder build 模式：/preview/<port>/ 反代 dev server 的端口白名单（见 spec §三.2）
-    previewPorts: effectivePreviewPorts
+    // 飞书登录 loopback 回调（热切换，2026-06-01 拍板）：成功落盘后——
+    //   1. 进程内实时切换身份（let binding + 值快照持有者重建）
+    //   2. 广播 auth:login:done 给在线 owner 连接（UI 即时反馈）
+    //   3. 踢掉所有 ws 连接（在线连接的 ctx 是旧身份）→ UI 自动重连 → 新身份 ctx →
+    //      People 立即解锁，不需要重启 daemon
+    // 失败则广播 auth:login:failed。
+    feishuLogin: {
+      handleLoginCallback: async (params) => {
+        const result = await loginFlow.handleCallback(params);
+        if (result.ok) {
+          feishuActive = true;
+          ownerPrincipalId = result.identity.unionId;
+          ownerDisplayName = result.identity.displayName;
+          handlers = makeHandlers();
+          wsServer?.setOwnerPrincipalId(result.identity.unionId);
+          wsServer?.broadcastToOwners({ type: "auth:login:done", identity: result.identity });
+          setImmediate(() => wsServer?.closeAllClients());
+        } else {
+          wsServer?.broadcastToOwners({ type: "auth:login:failed", reason: result.reason });
+        }
+        return result;
+      }
+    }
   });
   wsServer = new LocalWsServer({
     host: config.host,
@@ -42751,8 +42695,6 @@ async function startDaemon(config) {
     },
     // file-sharing HTTP 路由复用 daemon 同端口（spec §5 第 3 条）；router 自己处理 auth + 404
     httpRequestHandler: httpRouter,
-    // app-builder build 模式：/preview/<port>/ HMR websocket upgrade 转发的端口白名单（同 http-router 配置）
-    previewPorts: effectivePreviewPorts,
     // 订阅成功后给该 client 重放 in-flight pendingQuestions（plan: clawd-question-server-truth）。
     // daemon 是 pendingQuestions 的唯一 source of truth；新 client 接入 / 刷新页面时
     // 把当前所有未决 question 以 session:question 帧定向回放，让 UI 不再误显示 Ended。
@@ -42797,6 +42739,12 @@ async function startDaemon(config) {
     const requestId = typeof frame.requestId === "string" ? frame.requestId : void 0;
     const handler = handlers[type];
     if (!handler) throw new ClawdError(ERROR_CODES.METHOD_NOT_IMPLEMENTED, `not implemented: ${type}`);
+    if (!feishuActive && FEISHU_GATED_METHODS.includes(type)) {
+      throw new ClawdError(
+        ERROR_CODES.FEISHU_LOGIN_REQUIRED,
+        `${type} requires feishu login (People/remote identity)`
+      );
+    }
     const ctx = wsServer.getClientContext(client.id) ?? ownerContext(ownerPrincipalId, ownerDisplayName);
     const verdict = computeGrantForFrame(type, frame);
     if (verdict.kind === "check") {
@@ -42869,7 +42817,6 @@ async function startDaemon(config) {
       stateSnapshot = { ...stateSnapshot, tunnelUrl: r.url, tunnelError: void 0 };
       stateMgr.write(stateSnapshot);
       currentTunnelUrl = r.url;
-      wss.broadcastAll({ type: "tunnel:ready", url: r.url, subdomain: r.subdomain });
       const connectUrl = resolvedAuthToken ? `${r.url}#token=${resolvedAuthToken}` : r.url;
       const lines = [
         `Tunnel:      ${r.url}`,