@clawos-dev/clawd 0.2.112-beta.220.a78f1c0 → 0.2.112-beta.222.19584a4

package/dist/cli.cjs

@@ -132,15 +132,11 @@ var init_methods = __esm({
       "attachment.groupRemove",
       "attachment.groupList",
       // ---- capability:* (capability platform 鉴权底座) ----
-      // global personal token 模型 (2026-05-25): UI 不再调 capability:issue —— daemon 启动时
-      // loadOrCreatePersonalCapability 自动创建 1 张 fixed-grants 的 personal capability,
-      // 所有联系人共用 personal token。capability:list / capability:delete 保留 (供调试 /
-      // 老板手动清旧 cap)；capability:issue / capability:bindPeer 已下线。
+      // 飞书统一身份 Phase 2 (2026-06-01, spec 决策 #12): personal token / 邀请码全链路删除——
+      // hub 已完整替代（中心 server 签发 per-hub connect token）。capability:list / capability:delete
+      // 保留：调试 + whoami 反查 + 撤销级联 + 清旧 per-peer cap。personal-cap:get 已下线。
       "capability:list",
       "capability:delete",
-      // global personal token (2026-05-25): UI invite/accept dialog 挂载即调，拿 personal
-      // token + capability + shareBaseUrl 用于拼 inviteUrl / autoAttach 反向推。owner-only。
-      "personal-cap:get",
       // ---- inbox:* (capability platform Phase 3 跨用户通知 + Phase 4 DM) ----
       // owner 接 guest 的 cross-principal 消息事件 + DM 双向私聊.
       // inbox:list / markRead: admin-only (Phase 3); inbox:postMessage: DM 自带能力,
@@ -148,14 +144,12 @@ var init_methods = __esm({
       "inbox:list",
       "inbox:markRead",
       "inbox:postMessage",
-      // ---- received-capability:* (对方颁给我的 cap, 视角 B 双向授权模型, 2026-05-23) ----
-      // owner 入口: list / add / remove
-      // guest 端: autoAttach (B 接 A 的 token 后通过 cap channel ws 推 cap 给 A)
-      // 详见 received-capability.ts JSDoc + spec 2026-05-23-bidirectional-cap-design.md
-      "received-capability:list",
-      "received-capability:add",
-      "received-capability:remove",
-      "received-capability:autoAttach",
+      // ---- contact:* (联系人列表) ----
+      // 飞书统一身份 Phase 3 (决策 #14): received-capability:* 正名为 contact:*——Phase 2 后
+      // 联系人身份由中心 server introspect 背书，不再是"对方颁发的 capability"。
+      // 写入路径：hub:connect 落 store + 自动反向（决策 #11）；list / remove 作联系人列表读删。
+      "contact:list",
+      "contact:remove",
       // ---- whoami (v2 capability platform) ----
       // 任何 authed connection 都能调；返回 owner 显示名 + 当前 capability wire 形态 +
       // grants 对应的 persona 元数据 (id + displayName)。UI 端 AddRemotePersonaDialog
@@ -181,16 +175,17 @@ var init_methods = __esm({
       // 无 subscription 持久化：guest 端身份完全来自文件系统 + reconciled publishedExtensions.
       "extension.install-from-channel",
       "extension.update-from-channel",
-      // ---- app-builder Project picker (spec 2026-06-01-app-builder-project-picker-design) ----
-      // persona-app-builder 多 project 管理；schemas: ProjectMetadataSchema + 4 个 args/result 对。
-      //   listProjects: readdir projects/，按目录读 .clawd-project.json
-      //   createProject: 校验名 + 从 6173-6182 段分配端口 + 写元数据 + 创建空目录
-      //   deleteProject: 停 dev server + rm -rf 目录 + 连带删该 project 名下所有 session
-      //   updateProjectPort: 校验新端口段内 + 未被别的 project 占 + 重启 dev server
-      "appBuilder:listProjects",
-      "appBuilder:createProject",
-      "appBuilder:deleteProject",
-      "appBuilder:updateProjectPort"
+      // ---- auth:* 飞书统一身份 Phase 1 (spec 2026-06-01-feishu-identity-design) ----
+      // owner-only：daemon loopback 登录流程（auth:login:start 起 state → HTTP /auth/callback
+      // 回调落盘 → auth:login:done 事件）。中央字面量见 protocol/feishu-auth.ts FEISHU_AUTH_METHODS。
+      "auth:login:start",
+      "auth:getIdentity",
+      "auth:logout",
+      // ---- hub:* 飞书统一身份 Phase 2 (spec §10.2) ----
+      // owner-only：公共 hub 目录 + per-hub connect token 连接（daemon 代理中心 server）。
+      // 中央字面量见 protocol/feishu-auth.ts HUB_METHODS。
+      "hub:list",
+      "hub:connect"
     ];
   }
 });
@@ -252,7 +247,11 @@ var init_errors = __esm({
       INTERNAL: "INTERNAL",
       UNAUTHORIZED: "UNAUTHORIZED",
       FORBIDDEN: "FORBIDDEN",
-      INVALID_PARAM: "INVALID_PARAM"
+      INVALID_PARAM: "INVALID_PARAM",
+      // 飞书统一身份（spec 2026-06-01 决策 #9）：People/远程体系强制飞书登录。
+      // daemon 进程身份未激活为飞书 unionId 时，FEISHU_GATED_METHODS 内的 RPC 一律返回此错误；
+      // UI 据此显示登录引导（区别于 UNAUTHORIZED 的越权语义）。
+      FEISHU_LOGIN_REQUIRED: "FEISHU_LOGIN_REQUIRED"
     };
     ClawdError = class extends Error {
       constructor(code, message) {
@@ -4532,7 +4531,7 @@ var init_persona_schemas = __esm({
 });
 
 // ../protocol/src/schemas.ts
-var SessionStatusSchema, UsageSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, ParsedEventSchema, SessionCreateArgs, SessionIdArgs, SessionUpdateArgs, SessionSendArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsArgs, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionSubscribeArgs, SessionPinArgs, PeerSessionUpsertArgs, PeerSessionUpsertResponseSchema, PeerSessionRemoveArgs, PeerSessionRemoveResponseSchema, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, HistoryRecentDirsArgs, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, AuthRequestFrameSchema, AuthOkFrameSchema, TunnelReadyEventSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema, PROJECT_PORT_MIN, PROJECT_PORT_MAX, projectNameRegex, DEFAULT_DEV_COMMAND, ProjectMetadataSchema, ProjectWithStatusSchema, ListProjectsArgsSchema, ListProjectsResultSchema, CreateProjectArgsSchema, CreateProjectResultSchema, DeleteProjectArgsSchema, DeleteProjectResultSchema, UpdateProjectPortArgsSchema, UpdateProjectPortResultSchema;
+var SessionStatusSchema, UsageSchema, ContextUsageSchema, sessionMetaShape, SessionMetaSchema, ModelInfoSchema, ModeInfoSchema, ConfigFieldSchemaSchema, CapabilitiesGetArgs, CapabilitiesResponseSchema, AllowRuleSchema, SessionFileSchema, ParsedEventBase, HistoryUserMetaSchema, SubagentToolStatsSchema, StructuredPatchHunkSchema, ToolResultExtraSchema, MemoryEntrySchema, AskQuestionOptionSchema, AskQuestionItemSchema, ParsedEventSchema, SessionCreateArgs, SessionIdArgs, SessionUpdateArgs, SessionSendArgs, SessionRewindArgs, SessionRewindResponseSchema, SessionRewindDiffArgs, RewindDiffHunkSchema, RewindDiffFileSchema, SessionRewindDiffResponseSchema, SessionRewindableMessageIdsArgs, SessionRewindableMessageIdsResponseSchema, SessionResumeArgs, SessionForkArgs, SessionForkResponseSchema, SessionObserveArgs, SessionEventsArgs, PermissionRespondArgs, HistoryListArgs, HistoryReadArgs, HistorySubagentsArgs, HistorySubagentReadArgs, WorkspaceListArgs, WorkspaceReadArgs, SkillsListArgs, SkillEntrySchema, AgentEntrySchema, AgentsListArgs, AgentsListResponseSchema, SessionSubscribeArgs, SessionPinArgs, PeerSessionUpsertArgs, PeerSessionUpsertResponseSchema, PeerSessionRemoveArgs, PeerSessionRemoveResponseSchema, SessionReorderPinsArgs, GitRootArgs, GitRootResponseSchema, GitBranchArgs, GitBranchResponseSchema, GitBranchesArgs, GitBranchesResponseSchema, HistoryRecentDirsArgs, RecentDirEntrySchema, HistoryRecentDirsResponseSchema, SessionQuestionFrameSchema, SessionQuestionClearedFrameSchema, AnswerQuestionArgs, AnswerQuestionResponseSchema, CancelQuestionArgs, CancelQuestionResponseSchema, AuthRequestFrameSchema, AuthOkFrameSchema, TunnelExitedEventSchema, TunnelUnavailableEventSchema, InfoRunningSessionSchema, InfoResponseSchema;
 var init_schemas = __esm({
   "../protocol/src/schemas.ts"() {
     "use strict";
@@ -4629,10 +4628,6 @@ var init_schemas = __esm({
       // owner-mode persona session 身份标识；UI 用它在 SessionList 过滤 + jump，
       // daemon 用它做 idempotent dedupe + spawn 时派生 ctx.personaMode='owner'
       ownerPersonaId: external_exports.string().min(1).optional(),
-      // app-builder Project 反向索引（spec: superpowers/specs/2026-06-01-app-builder-project-picker-design.md）。
-      // 当此 session 绑定到某个 build 中的 project 时填写；name 与 projects/<name>/ 子目录同名，
-      // 受 projectNameSchema regex 约束。daemon session:resume 时校验该目录存在，不存在则拒。
-      appBuilderProject: external_exports.string().regex(/^[a-z][a-z0-9-]{0,39}$/).optional(),
       // listener-mode sub-session 的原始 chatId（owner-mode 不写；listener-scope 强制写入）。
       // 派生 sessionId 是单向 hash `${personaId}-${tokenHash12}-${chatHash8}`，必须保留原始 chatId
       // 才能让 alice 重连同一 sub-session（持久化在 alice localStorage 之外，由 daemon push 同步）。
@@ -4905,12 +4900,7 @@ var init_schemas = __esm({
       forkedFromSessionId: external_exports.string().min(1).optional(),
       // owner-mode persona session：传此字段时 daemon 自行派生 cwd 和启动参数，
       // 且按 ownerPersonaId 做 idempotent dedupe（每 persona 永远只有一个 owner session）
-      ownerPersonaId: external_exports.string().min(1).optional(),
-      // app-builder Project 绑定（spec 2026-06-01-app-builder-project-picker-design）。
-      // UI picker 上点 idle project / 新建 project 时传入；daemon 透传写入 SessionFile.appBuilderProject。
-      // 跟 ownerPersonaId 同层但不互斥（典型场景两者都传：ownerPersonaId='persona-app-builder' +
-      // appBuilderProject='<project-name>'）。
-      appBuilderProject: external_exports.string().regex(/^[a-z][a-z0-9-]{0,39}$/).optional()
+      ownerPersonaId: external_exports.string().min(1).optional()
     }).refine((args) => args.cwd != null || args.ownerPersonaId != null, {
       message: "cwd \u4E0E ownerPersonaId \u81F3\u5C11\u4F20\u4E00\u4E2A"
     });
@@ -4924,11 +4914,7 @@ var init_schemas = __esm({
         effort: external_exports.string().optional(),
         cwd: external_exports.string().optional(),
         // 用户在 Edit modal 选择的 icon 标识；UI 端做 enum 兜底
-        iconKey: external_exports.string().optional(),
-        // app-builder picker 在当前 session 内切 project 时写入（spec 2026-06-01-app-builder-project-picker-design）。
-        // daemon session:update handler 检测此字段变化时停旧 project dev server + 起新 project dev server。
-        // 设为空字符串 '' 表示解绑（picker 不暴露解绑入口，但 schema 允许）。
-        appBuilderProject: external_exports.string().regex(/^[a-z][a-z0-9-]{0,39}$/).or(external_exports.literal("")).optional()
+        iconKey: external_exports.string().optional()
       })
     });
     SessionSendArgs = external_exports.object({
@@ -5125,6 +5111,12 @@ var init_schemas = __esm({
        * 后调 capabilityManager.recordPeerHello(capId, ownerPrincipalId, displayName)
        * 把 cap.peerOwnerId / firstUsedByPeerAt 字段回写，让 owner 端 UI 在 People
        * tab 顶层 PeerOwner 视图 + Personas tab 二级分组拿到对端身份。
+       *
+       * 飞书统一身份 Phase 1 (2026-06-01)：取值升级为飞书 union_id（owner 已飞书登录时；
+       * 来自 whoami.owner.id → daemon ownerPrincipalId → owner-identity.json unionId）。
+       * 未登录 daemon 仍为 auth.json 的 owner-<uuid>。daemon 端不验证该身份真实性
+       * （Phase 1 信任模型，见 spec §9）。Phase 2 将以 connect token 替代（introspect
+       * 返回身份，删除自报字段，见 spec §10）。
        */
       selfPrincipalId: external_exports.string().min(1).optional(),
       /**
@@ -5132,18 +5124,23 @@ var init_schemas = __esm({
        * 显示名写入 cap.peerOwnerDisplayName（cap.displayName 本来就是 owner 颁时填
        * 的"颁给谁/用途"，hello 收到的 displayName 是辅助）。
        */
-      selfDisplayName: external_exports.string().optional()
+      selfDisplayName: external_exports.string().optional(),
+      /**
+       * 飞书统一身份 Phase 2（spec 决策 #11，自动反向建立联系人）：guest 自报自己可达的
+       * ws 地址（tunnel 地址优先）。hub introspect 验票成功后，若 guest 带 selfUrl，hub 自动
+       * 把 guest 落入本机 ContactStore（remoteUrl = selfUrl）+ 广播 contact:added，
+       * 让 hub 的 People 立即出现该 guest——双向互为联系人，身份由 introspect 背书不可伪造。
+       *
+       * 缺省（A 无公网地址）→ hub 反向连不上 A，**不**自动建 cap；双向 IM 仅在 A 在线连接
+       * 期间通过该连接收发（spec 决策 #11 限制）。不填假地址（不造假数据）。
+       */
+      selfUrl: external_exports.string().min(1).optional()
     });
     AuthOkFrameSchema = external_exports.object({
       type: external_exports.literal("auth:ok"),
       version: external_exports.string().min(1).optional(),
       protocolVersion: external_exports.number().int().nonnegative().optional()
     });
-    TunnelReadyEventSchema = external_exports.object({
-      type: external_exports.literal("tunnel:ready"),
-      url: external_exports.string().min(1),
-      subdomain: external_exports.string().min(1)
-    });
     TunnelExitedEventSchema = external_exports.object({
       type: external_exports.literal("tunnel:exited"),
       code: external_exports.number().int().nullable(),
@@ -5185,44 +5182,6 @@ var init_schemas = __esm({
       /** file-sharing HTTP 路由的 Authorization: Bearer token；与 WS token 解耦，HTTP 401 仅触发 ReAuth 不强踢 WS（spec §11 第 4 条） */
       httpToken: external_exports.string().optional()
     });
-    PROJECT_PORT_MIN = 6173;
-    PROJECT_PORT_MAX = 6182;
-    projectNameRegex = /^[a-z][a-z0-9-]{0,39}$/;
-    DEFAULT_DEV_COMMAND = "cd server && pnpm dev";
-    ProjectMetadataSchema = external_exports.object({
-      name: external_exports.string().regex(projectNameRegex, {
-        message: "kebab-case, \u5C0F\u5199\u5B57\u6BCD\u5F00\u5934\uFF0C\u53EA\u5141\u8BB8\u5C0F\u5199\u5B57\u6BCD / \u6570\u5B57 / -\uFF0C\u6700\u957F 40 \u5B57\u7B26"
-      }),
-      port: external_exports.number().int().min(PROJECT_PORT_MIN).max(PROJECT_PORT_MAX),
-      createdAt: external_exports.string().datetime(),
-      /** dev server 启动命令（shell 字符串）；占位符 $CLAWD_PREVIEW_PORT 替换 + env 注入 */
-      devCommand: external_exports.string().min(1)
-    });
-    ProjectWithStatusSchema = ProjectMetadataSchema.extend({
-      isRunning: external_exports.boolean(),
-      boundSessionId: external_exports.string().nullable()
-    });
-    ListProjectsArgsSchema = external_exports.object({}).strict();
-    ListProjectsResultSchema = external_exports.object({
-      projects: external_exports.array(ProjectWithStatusSchema)
-    }).strict();
-    CreateProjectArgsSchema = external_exports.object({
-      name: external_exports.string()
-    }).strict();
-    CreateProjectResultSchema = external_exports.object({
-      project: ProjectMetadataSchema
-    }).strict();
-    DeleteProjectArgsSchema = external_exports.object({
-      name: external_exports.string()
-    }).strict();
-    DeleteProjectResultSchema = external_exports.object({}).strict();
-    UpdateProjectPortArgsSchema = external_exports.object({
-      name: external_exports.string(),
-      newPort: external_exports.number().int()
-    }).strict();
-    UpdateProjectPortResultSchema = external_exports.object({
-      project: ProjectMetadataSchema
-    }).strict();
   }
 });
 
@@ -5265,7 +5224,7 @@ function stripSecretHash(cap) {
   const { secretHash: _hash, ...wire } = cap;
   return wire;
 }
-var ResourceSchema, ActionSchema, GrantSchema, CapabilitySchema, CapabilityWireSchema, CapabilityErrorCodeSchema, WhoamiResponseSchema, PERSONAL_CAP_GRANTS, PersonalCapGetResponseSchema;
+var ResourceSchema, ActionSchema, GrantSchema, CapabilitySchema, CapabilityWireSchema, CapabilityErrorCodeSchema, WhoamiResponseSchema, PERSONAL_CAP_GRANTS;
 var init_capability = __esm({
   "../protocol/src/capability.ts"() {
     "use strict";
@@ -5333,13 +5292,6 @@ var init_capability = __esm({
         actions: Object.freeze(["read", "send"])
       })
     ]);
-    PersonalCapGetResponseSchema = external_exports.object({
-      type: external_exports.literal("personal-cap:get:ok"),
-      token: external_exports.string().min(1),
-      capability: CapabilityWireSchema,
-      /** ws/wss base URL，UI deriveInviteBase 用来拼 inviteUrl（tunnel 优先 / 否则本机 ws） */
-      shareBaseUrl: external_exports.string().min(1)
-    }).strict();
   }
 });
 
@@ -5374,60 +5326,46 @@ var init_inbox = __esm({
   }
 });
 
-// ../protocol/src/received-capability.ts
-var ReceivedCapabilitySchema, ReceivedCapabilityWireSchema, ReceivedCapabilityAddArgsSchema, ReceivedCapabilityAddOkSchema, ReceivedCapabilityRemoveArgsSchema, ReceivedCapabilityRemoveOkSchema, ReceivedCapabilityListOkSchema, ReceivedCapabilityAutoAttachArgsSchema, ReceivedCapabilityAutoAttachOkSchema, ReceivedCapabilityAddedFrameSchema, ReceivedCapabilityRemovedFrameSchema;
-var init_received_capability = __esm({
-  "../protocol/src/received-capability.ts"() {
+// ../protocol/src/contact.ts
+var ContactSchema, ContactWireSchema, ContactRemoveArgsSchema, ContactRemoveOkSchema, ContactListOkSchema, ContactAddedFrameSchema, ContactRemovedFrameSchema;
+var init_contact = __esm({
+  "../protocol/src/contact.ts"() {
     "use strict";
     init_zod();
     init_capability();
-    ReceivedCapabilitySchema = external_exports.object({
-      ownerPrincipalId: external_exports.string().min(1),
-      ownerDisplayName: external_exports.string(),
+    ContactSchema = external_exports.object({
+      /** 联系人（对方 daemon owner）的飞书 union_id */
+      principalId: external_exports.string().min(1),
+      /** 联系人飞书姓名 */
+      displayName: external_exports.string(),
       remoteUrl: external_exports.string().min(1),
-      capabilityId: external_exports.string().min(1),
-      capabilityToken: external_exports.string().min(1),
+      // Phase 2 自动反向建立联系人（spec 决策 #11）：hub introspect 验票成功后自动落 A 为
+      // 联系人，但 hub 不持有 A 颁发的 token（A 从未给 hub 换票）→ connectToken 为空串。
+      // hub:connect 出站路径仍存中心 server 签发的真实 connect token（断线重连复用）。
+      // 不用 .min(1)：自动反向路径合法地存空串，禁止填假 token 占位（不造假数据）。
+      connectToken: external_exports.string(),
       grants: external_exports.array(GrantSchema),
-      receivedAt: external_exports.number().int().nonnegative()
-    }).strict();
-    ReceivedCapabilityWireSchema = ReceivedCapabilitySchema;
-    ReceivedCapabilityAddArgsSchema = external_exports.object({
-      remoteUrl: external_exports.string().min(1),
-      token: external_exports.string().min(1)
-    }).strict();
-    ReceivedCapabilityAddOkSchema = external_exports.object({
-      type: external_exports.literal("received-capability:add:ok"),
-      receivedCap: ReceivedCapabilityWireSchema
-    }).strict();
-    ReceivedCapabilityRemoveArgsSchema = external_exports.object({
-      ownerPrincipalId: external_exports.string().min(1)
+      addedAt: external_exports.number().int().nonnegative()
     }).strict();
-    ReceivedCapabilityRemoveOkSchema = external_exports.object({
-      type: external_exports.literal("received-capability:remove:ok"),
-      ownerPrincipalId: external_exports.string().min(1)
+    ContactWireSchema = ContactSchema;
+    ContactRemoveArgsSchema = external_exports.object({
+      principalId: external_exports.string().min(1)
     }).strict();
-    ReceivedCapabilityListOkSchema = external_exports.object({
-      type: external_exports.literal("received-capability:list:ok"),
-      receivedCaps: external_exports.array(ReceivedCapabilityWireSchema)
+    ContactRemoveOkSchema = external_exports.object({
+      type: external_exports.literal("contact:remove:ok"),
+      principalId: external_exports.string().min(1)
     }).strict();
-    ReceivedCapabilityAutoAttachArgsSchema = external_exports.object({
-      ownerPrincipalId: external_exports.string().min(1),
-      ownerDisplayName: external_exports.string(),
-      remoteUrl: external_exports.string().min(1),
-      capabilityId: external_exports.string().min(1),
-      token: external_exports.string().min(1),
-      grants: external_exports.array(GrantSchema)
-    }).strict();
-    ReceivedCapabilityAutoAttachOkSchema = external_exports.object({
-      type: external_exports.literal("received-capability:autoAttach:ok")
+    ContactListOkSchema = external_exports.object({
+      type: external_exports.literal("contact:list:ok"),
+      contacts: external_exports.array(ContactWireSchema)
     }).strict();
-    ReceivedCapabilityAddedFrameSchema = external_exports.object({
-      type: external_exports.literal("received-capability:added"),
-      receivedCap: ReceivedCapabilityWireSchema
+    ContactAddedFrameSchema = external_exports.object({
+      type: external_exports.literal("contact:added"),
+      contact: ContactWireSchema
     }).strict();
-    ReceivedCapabilityRemovedFrameSchema = external_exports.object({
-      type: external_exports.literal("received-capability:removed"),
-      ownerPrincipalId: external_exports.string().min(1)
+    ContactRemovedFrameSchema = external_exports.object({
+      type: external_exports.literal("contact:removed"),
+      principalId: external_exports.string().min(1)
     }).strict();
   }
 });
@@ -5631,6 +5569,94 @@ var init_extension = __esm({
   }
 });
 
+// ../protocol/src/feishu-auth.ts
+var FEISHU_GATED_METHODS, HubEntrySchema, HubListResponseSchema, HubConnectArgsSchema, HubConnectResponseSchema, FeishuIdentitySchema, AuthLoginStartResponseSchema, AuthGetIdentityResponseSchema, AuthLogoutResponseSchema, AuthLoginDoneEventSchema, AuthLoginFailedEventSchema;
+var init_feishu_auth = __esm({
+  "../protocol/src/feishu-auth.ts"() {
+    "use strict";
+    init_zod();
+    FEISHU_GATED_METHODS = [
+      // capability（调试 / 撤销，仍属远程身份体系）
+      "capability:list",
+      "capability:delete",
+      // 联系人列表（hub:connect 落同一 store；list 读 / remove 删）
+      "contact:list",
+      "contact:remove",
+      // DM / 跨用户通知
+      "inbox:list",
+      "inbox:markRead",
+      "inbox:postMessage",
+      // mirror peer sessions（远端会话镜像）
+      "peerSession:upsert",
+      "peerSession:remove",
+      // Phase 2: hub 目录 + 连接（中心 server 代理，需要 owner 的 ttcJwt）
+      "hub:list",
+      "hub:connect"
+    ];
+    HubEntrySchema = external_exports.object({
+      /** hub owner 的飞书 union_id */
+      hubId: external_exports.string().min(1),
+      /** 显示名 */
+      name: external_exports.string().min(1),
+      /** ws/tunnel 地址 */
+      url: external_exports.string().min(1)
+    });
+    HubListResponseSchema = external_exports.object({
+      type: external_exports.literal("hub:list:ok"),
+      hubs: external_exports.array(HubEntrySchema)
+    });
+    HubConnectArgsSchema = external_exports.object({
+      /** 目标 hub 的 hubId（= hub owner unionId） */
+      hubId: external_exports.string().min(1),
+      /**
+       * 目标 hub 的 ws/tunnel 地址（决策 #13 统一注册表后改为可选）：
+       *   - 公开目录点击：带 url（hub:list 已下发，省一次 server 查询）
+       *   - 私有 hub 仅凭 hubId 连接：缺省 url → daemon exchange 时由中心 server 下发该 hub 上报的 url
+       */
+      url: external_exports.string().min(1).optional(),
+      /** 显示名（公共 hub 来自目录；私有 hub 缺省，连上后用 whoami 回填） */
+      name: external_exports.string().optional()
+    });
+    HubConnectResponseSchema = external_exports.object({
+      type: external_exports.literal("hub:connect:ok"),
+      hubId: external_exports.string(),
+      name: external_exports.string(),
+      url: external_exports.string()
+    });
+    FeishuIdentitySchema = external_exports.object({
+      /** 飞书 union_id（租户维度，跨应用稳定）。TTC user_info 接口 data.union_id */
+      unionId: external_exports.string().min(1),
+      /** 飞书姓名。TTC user_info 接口 data.name */
+      displayName: external_exports.string().min(1),
+      /** TTC user_info 接口 data.avatar_url，可缺省 */
+      avatarUrl: external_exports.string().optional()
+    });
+    AuthLoginStartResponseSchema = external_exports.object({
+      type: external_exports.literal("auth:login:start:ok"),
+      /** 完整 TTC 授权页 URL（含 callback_url + state + auto=1），UI 直接 window.open */
+      authUrl: external_exports.string().min(1),
+      /** 防 CSRF 的一次性 nonce；回调时 daemon 校验 */
+      state: external_exports.string().min(1)
+    });
+    AuthGetIdentityResponseSchema = external_exports.object({
+      type: external_exports.literal("auth:getIdentity:ok"),
+      /** null = 未登录 */
+      identity: FeishuIdentitySchema.nullable()
+    });
+    AuthLogoutResponseSchema = external_exports.object({
+      type: external_exports.literal("auth:logout:ok")
+    });
+    AuthLoginDoneEventSchema = external_exports.object({
+      type: external_exports.literal("auth:login:done"),
+      identity: FeishuIdentitySchema
+    });
+    AuthLoginFailedEventSchema = external_exports.object({
+      type: external_exports.literal("auth:login:failed"),
+      reason: external_exports.string()
+    });
+  }
+});
+
 // ../protocol/src/runtime.ts
 var init_runtime = __esm({
   "../protocol/src/runtime.ts"() {
@@ -5646,8 +5672,9 @@ var init_runtime = __esm({
     init_principal();
     init_capability();
     init_inbox();
-    init_received_capability();
+    init_contact();
     init_extension();
+    init_feishu_auth();
   }
 });
 
@@ -6834,8 +6861,8 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs48 = require("fs");
-    var EventEmitter3 = require("events");
+    var fs47 = require("fs");
+    var EventEmitter2 = require("events");
     var inherits = require("util").inherits;
     var path59 = require("path");
     var sleep = require_atomic_sleep();
@@ -6891,20 +6918,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs48.mkdirSync(path59.dirname(file), { recursive: true });
-          const fd = fs48.openSync(file, flags, mode);
+          if (sonic.mkdir) fs47.mkdirSync(path59.dirname(file), { recursive: true });
+          const fd = fs47.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs48.mkdir(path59.dirname(file), { recursive: true }, (err) => {
+        fs47.mkdir(path59.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs48.open(file, flags, mode, fileOpened);
+          fs47.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs48.open(file, flags, mode, fileOpened);
+        fs47.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -6945,8 +6972,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs48.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs48.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs47.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs47.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -6955,15 +6982,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs48.writeSync(this.fd, this._writingBuf);
+            return fs47.writeSync(this.fd, this._writingBuf);
           }
-          return fs48.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs47.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs48.write(this.fd, this._writingBuf, this.release);
+            return fs47.write(this.fd, this._writingBuf, this.release);
           }
-          return fs48.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs47.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -7020,7 +7047,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs48.fsyncSync(this.fd);
+          fs47.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -7072,7 +7099,7 @@ var require_sonic_boom = __commonJS({
       sonic._asyncDrainScheduled = false;
       sonic.emit("drain");
     }
-    inherits(SonicBoom, EventEmitter3);
+    inherits(SonicBoom, EventEmitter2);
     function mergeBuf(bufs, len) {
       if (bufs.length === 0) {
         return kEmptyBuffer;
@@ -7134,7 +7161,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs48.fsync(this.fd, (err) => {
+            fs47.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -7236,7 +7263,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs48.close(fd, (err) => {
+          fs47.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -7285,7 +7312,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs48.writeSync(this.fd, buf) : fs48.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs47.writeSync(this.fd, buf) : fs47.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -7301,7 +7328,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs48.fsyncSync(this.fd);
+        fs47.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -7322,7 +7349,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs48.writeSync(this.fd, buf);
+          const n = fs47.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -7350,13 +7377,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs48.writeSync(this.fd, this._writingBuf) : fs48.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs47.writeSync(this.fd, this._writingBuf) : fs47.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs48.write(this.fd, this._writingBuf, release);
+        fs47.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -7365,7 +7392,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs48.writeSync(this.fd, this._writingBuf);
+          const written = fs47.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -7374,7 +7401,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs48.write(this.fd, this._writingBuf, release);
+        fs47.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -7390,12 +7417,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs48.fsync(sonic.fd, closeWrapped);
+        fs47.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs48.close(sonic.fd, done);
+          fs47.close(sonic.fd, done);
         } else {
           done();
         }
@@ -7650,9 +7677,9 @@ var require_thread_stream = __commonJS({
   "../node_modules/.pnpm/thread-stream@3.1.0/node_modules/thread-stream/index.js"(exports2, module2) {
     "use strict";
     var { version: version2 } = require_package();
-    var { EventEmitter: EventEmitter3 } = require("events");
+    var { EventEmitter: EventEmitter2 } = require("events");
     var { Worker } = require("worker_threads");
-    var { join: join12 } = require("path");
+    var { join: join11 } = require("path");
     var { pathToFileURL } = require("url");
     var { wait } = require_wait();
     var {
@@ -7688,7 +7715,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join12(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join11(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         trackUnmanagedFds: false,
@@ -7806,7 +7833,7 @@ var require_thread_stream = __commonJS({
       stream.worker.off("exit", onWorkerExit);
       destroy(stream, code !== 0 ? new Error("the worker thread exited") : null);
     }
-    var ThreadStream = class extends EventEmitter3 {
+    var ThreadStream = class extends EventEmitter2 {
       constructor(opts = {}) {
         super();
         if (opts.bufferSize < 4) {
@@ -8074,7 +8101,7 @@ var require_transport = __commonJS({
     "use strict";
     var { createRequire } = require("module");
     var getCallers = require_caller();
-    var { join: join12, isAbsolute: isAbsolute2, sep: sep3 } = require("path");
+    var { join: join11, isAbsolute: isAbsolute2, sep: sep3 } = require("path");
     var sleep = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
     var ThreadStream = require_thread_stream();
@@ -8137,7 +8164,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join12(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join11(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -8155,7 +8182,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline3) {
-        target = bundlerOverrides["pino-worker"] || join12(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join11(__dirname, "worker.js");
         options.pipelines = [pipeline3.map((dest) => {
           return {
             ...dest,
@@ -8177,7 +8204,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join12(__dirname, "..", "file.js");
+          return join11(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -8764,7 +8791,7 @@ var require_meta = __commonJS({
 var require_proto = __commonJS({
   "../node_modules/.pnpm/pino@9.14.0/node_modules/pino/lib/proto.js"(exports2, module2) {
     "use strict";
-    var { EventEmitter: EventEmitter3 } = require("events");
+    var { EventEmitter: EventEmitter2 } = require("events");
     var {
       lsCacheSym,
       levelValSym,
@@ -8846,7 +8873,7 @@ var require_proto = __commonJS({
       [getLevelSym]: getLevel,
       [setLevelSym]: setLevel
     };
-    Object.setPrototypeOf(prototype, EventEmitter3.prototype);
+    Object.setPrototypeOf(prototype, EventEmitter2.prototype);
     module2.exports = function() {
       return Object.create(prototype);
     };
@@ -9167,7 +9194,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join12 = ",";
+            let join11 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -9181,7 +9208,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join12 = `,
+                join11 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -9189,13 +9216,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join12;
+                res += join11;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join12}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join11}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -9216,7 +9243,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join12 = `,
+              join11 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -9230,13 +9257,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join12;
+                separator = join11;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join12;
+              separator = join11;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -9277,7 +9304,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join12 = ",";
+            let join11 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -9290,7 +9317,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join12 = `,
+                join11 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -9298,13 +9325,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join12;
+                res += join11;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join12}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join11}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -9317,7 +9344,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join12 = `,
+              join11 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -9326,7 +9353,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join12;
+                separator = join11;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -9384,20 +9411,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join13 = `,
+              const join12 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join13;
+                res2 += join12;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join13}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join12}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -9413,16 +9440,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join12 = `,
+            const join11 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join12, maximumBreadth);
+              res += stringifyTypedArray(value, join11, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join12;
+              separator = join11;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -9433,13 +9460,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join12;
+                separator = join11;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join12;
+              separator = join11;
             }
             if (separator !== "") {
               res = `
@@ -19321,10 +19348,10 @@ var require_extension = __commonJS({
 var require_websocket = __commonJS({
   "../node_modules/.pnpm/ws@8.20.0/node_modules/ws/lib/websocket.js"(exports2, module2) {
     "use strict";
-    var EventEmitter3 = require("events");
+    var EventEmitter2 = require("events");
     var https = require("https");
-    var http3 = require("http");
-    var net3 = require("net");
+    var http2 = require("http");
+    var net2 = require("net");
     var tls = require("tls");
     var { randomBytes, createHash: createHash2 } = require("crypto");
     var { Duplex, Readable: Readable3 } = require("stream");
@@ -19353,7 +19380,7 @@ var require_websocket = __commonJS({
     var protocolVersions = [8, 13];
     var readyStates = ["CONNECTING", "OPEN", "CLOSING", "CLOSED"];
     var subprotocolRegex = /^[!#$%&'*+\-.0-9A-Z^_`|a-z~]+$/;
-    var WebSocket2 = class _WebSocket extends EventEmitter3 {
+    var WebSocket2 = class _WebSocket extends EventEmitter2 {
       /**
        * Create a new `WebSocket`.
        *
@@ -19857,7 +19884,7 @@ var require_websocket = __commonJS({
       }
       const defaultPort = isSecure ? 443 : 80;
       const key = randomBytes(16).toString("base64");
-      const request = isSecure ? https.request : http3.request;
+      const request = isSecure ? https.request : http2.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
       opts.createConnection = opts.createConnection || (isSecure ? tlsConnect : netConnect);
@@ -20058,12 +20085,12 @@ var require_websocket = __commonJS({
     }
     function netConnect(options) {
       options.path = options.socketPath;
-      return net3.connect(options);
+      return net2.connect(options);
     }
     function tlsConnect(options) {
       options.path = void 0;
       if (!options.servername && options.servername !== "") {
-        options.servername = net3.isIP(options.host) ? "" : options.host;
+        options.servername = net2.isIP(options.host) ? "" : options.host;
       }
       return tls.connect(options);
     }
@@ -20350,8 +20377,8 @@ var require_subprotocol = __commonJS({
 var require_websocket_server = __commonJS({
   "../node_modules/.pnpm/ws@8.20.0/node_modules/ws/lib/websocket-server.js"(exports2, module2) {
     "use strict";
-    var EventEmitter3 = require("events");
-    var http3 = require("http");
+    var EventEmitter2 = require("events");
+    var http2 = require("http");
     var { Duplex } = require("stream");
     var { createHash: createHash2 } = require("crypto");
     var extension2 = require_extension();
@@ -20363,7 +20390,7 @@ var require_websocket_server = __commonJS({
     var RUNNING = 0;
     var CLOSING = 1;
     var CLOSED = 2;
-    var WebSocketServer2 = class extends EventEmitter3 {
+    var WebSocketServer2 = class extends EventEmitter2 {
       /**
        * Create a `WebSocketServer` instance.
        *
@@ -20426,8 +20453,8 @@ var require_websocket_server = __commonJS({
           );
         }
         if (options.port != null) {
-          this._server = http3.createServer((req, res) => {
-            const body = http3.STATUS_CODES[426];
+          this._server = http2.createServer((req, res) => {
+            const body = http2.STATUS_CODES[426];
             res.writeHead(426, {
               "Content-Length": body.length,
               "Content-Type": "text/plain"
@@ -20714,7 +20741,7 @@ var require_websocket_server = __commonJS({
       this.destroy();
     }
     function abortHandshake(socket, code, message, headers) {
-      message = message || http3.STATUS_CODES[code];
+      message = message || http2.STATUS_CODES[code];
       headers = {
         Connection: "close",
         "Content-Type": "text/html",
@@ -20723,7 +20750,7 @@ var require_websocket_server = __commonJS({
       };
       socket.once("finish", socket.destroy);
       socket.end(
-        `HTTP/1.1 ${code} ${http3.STATUS_CODES[code]}\r
+        `HTTP/1.1 ${code} ${http2.STATUS_CODES[code]}\r
 ` + Object.keys(headers).map((h) => `${h}: ${headers[h]}`).join("\r\n") + "\r\n\r\n" + message
       );
     }
@@ -21026,7 +21053,7 @@ var require_BufferList = __commonJS({
         this.head = this.tail = null;
         this.length = 0;
       };
-      BufferList.prototype.join = function join12(s) {
+      BufferList.prototype.join = function join11(s) {
         if (this.length === 0) return "";
         var p2 = this.head;
         var ret = "" + p2.data;
@@ -30483,7 +30510,7 @@ var require_lib3 = __commonJS({
 // src/run-case/recorder.ts
 function startRunCaseRecorder(opts) {
   const now = opts.now ?? Date.now;
-  const dir = import_node_path46.default.dirname(opts.recordPath);
+  const dir = import_node_path45.default.dirname(opts.recordPath);
   let stream = null;
   let closing = false;
   let closedSettled = false;
@@ -30497,8 +30524,8 @@ function startRunCaseRecorder(opts) {
   });
   const ensureStream = () => {
     if (stream) return stream;
-    import_node_fs31.default.mkdirSync(dir, { recursive: true });
-    stream = import_node_fs31.default.createWriteStream(opts.recordPath, { flags: "a" });
+    import_node_fs30.default.mkdirSync(dir, { recursive: true });
+    stream = import_node_fs30.default.createWriteStream(opts.recordPath, { flags: "a" });
     stream.on("close", () => closedResolve());
     return stream;
   };
@@ -30523,12 +30550,12 @@ function startRunCaseRecorder(opts) {
   };
   return { tap, close, closed };
 }
-var import_node_fs31, import_node_path46;
+var import_node_fs30, import_node_path45;
 var init_recorder = __esm({
   "src/run-case/recorder.ts"() {
     "use strict";
-    import_node_fs31 = __toESM(require("fs"), 1);
-    import_node_path46 = __toESM(require("path"), 1);
+    import_node_fs30 = __toESM(require("fs"), 1);
+    import_node_path45 = __toESM(require("path"), 1);
   }
 });
 
@@ -30571,7 +30598,7 @@ var init_wire = __esm({
 // src/run-case/controller.ts
 async function runController(opts) {
   const now = opts.now ?? Date.now;
-  const cwd = opts.cwd ?? (0, import_node_fs32.mkdtempSync)(import_node_path47.default.join(import_node_os19.default.tmpdir(), "clawd-runcase-"));
+  const cwd = opts.cwd ?? (0, import_node_fs31.mkdtempSync)(import_node_path46.default.join(import_node_os19.default.tmpdir(), "clawd-runcase-"));
   const ownsCwd = opts.cwd === void 0;
   const recorder = startRunCaseRecorder({ recordPath: opts.record, now });
   const spawnCtx = { cwd };
@@ -30732,19 +30759,19 @@ async function runController(opts) {
   if (sigintHandler) process.off("SIGINT", sigintHandler);
   if (ownsCwd) {
     try {
-      (0, import_node_fs32.rmSync)(cwd, { recursive: true, force: true });
+      (0, import_node_fs31.rmSync)(cwd, { recursive: true, force: true });
     } catch {
     }
   }
   return exitCode ?? 0;
 }
-var import_node_fs32, import_node_os19, import_node_path47;
+var import_node_fs31, import_node_os19, import_node_path46;
 var init_controller = __esm({
   "src/run-case/controller.ts"() {
     "use strict";
-    import_node_fs32 = require("fs");
+    import_node_fs31 = require("fs");
     import_node_os19 = __toESM(require("os"), 1);
-    import_node_path47 = __toESM(require("path"), 1);
+    import_node_path46 = __toESM(require("path"), 1);
     init_claude();
     init_stdout_splitter();
     init_permission_stdio();
@@ -30936,8 +30963,6 @@ function resolveConfig(opts) {
   const frpcBinary = env.CLAWD_FRPC_BIN ?? null;
   const rawMode = env.CLAWD_CC_MODE;
   const mode = DAEMON_MODE_VALUES.includes(rawMode ?? "") ? rawMode : "sdk";
-  const filePreviewPorts = Array.isArray(fileCfg.previewPorts) ? fileCfg.previewPorts.map((n) => Number(n)).filter((n) => Number.isInteger(n) && n > 0) : null;
-  const previewPorts = env.CLAWD_PREVIEW_PORTS ? env.CLAWD_PREVIEW_PORTS.split(",").map((s) => Number(s.trim())).filter((n) => Number.isInteger(n) && n > 0) : filePreviewPorts && filePreviewPorts.length > 0 ? filePreviewPorts : null;
   return {
     port,
     host,
@@ -30949,8 +30974,7 @@ function resolveConfig(opts) {
     authToken,
     noTunnelPersist,
     frpcBinary,
-    mode,
-    previewPorts
+    mode
   };
 }
 var HELP_TEXT = `clawd [options]
@@ -30979,8 +31003,8 @@ Env (advanced):
 `;
 
 // src/index.ts
-var import_node_path45 = __toESM(require("path"), 1);
-var import_node_fs30 = __toESM(require("fs"), 1);
+var import_node_path44 = __toESM(require("path"), 1);
+var import_node_fs29 = __toESM(require("fs"), 1);
 
 // src/logger.ts
 var import_node_fs2 = __toESM(require("fs"), 1);
@@ -32989,7 +33013,6 @@ var SessionManager = class {
       iconKey: args.iconKey,
       forkedFromSessionId: args.forkedFromSessionId,
       ownerPersonaId: args.ownerPersonaId,
-      appBuilderProject: args.appBuilderProject,
       creatorPrincipalId,
       ...creatorOwnerPrincipalId ? { creatorOwnerPrincipalId } : {},
       createdAt: iso,
@@ -34626,15 +34649,6 @@ var DEFAULT_PERSONAS = [
     model: "opus",
     iconKey: "assist",
     public: false
-  },
-  {
-    // app-builder：全栈应用搭建师，绑 extension-kit 模板 + multi-project picker
-    // spec: superpowers/specs/2026-06-01-app-builder-project-picker-design.md
-    personaId: "persona-app-builder",
-    label: "App Builder",
-    model: "opus",
-    iconKey: "assist",
-    public: false
   }
 ];
 function findDefaultsRoot() {
@@ -36331,58 +36345,7 @@ var import_websocket_server = __toESM(require_websocket_server(), 1);
 var wrapper_default = import_websocket.default;
 
 // src/transport/local-ws-server.ts
-var import_node_http2 = __toESM(require("http"), 1);
-
-// src/transport/preview-proxy.ts
 var import_node_http = __toESM(require("http"), 1);
-var import_node_net = __toESM(require("net"), 1);
-var PREVIEW_RE = /^\/preview\/(\d+)(?:\/.*)?$/;
-function matchPreviewPort(pathname) {
-  const m2 = pathname.match(PREVIEW_RE);
-  return m2 ? Number(m2[1]) : null;
-}
-function isPreviewPortAllowed(port, cfg) {
-  return cfg.allowedPorts.includes(port);
-}
-function proxyPreviewHttp(req, res, port) {
-  return new Promise((resolve6) => {
-    const upstream = import_node_http.default.request(
-      { host: "localhost", port, method: req.method, path: req.url, headers: req.headers },
-      (upRes) => {
-        res.writeHead(upRes.statusCode || 502, upRes.headers);
-        upRes.pipe(res);
-        upRes.on("end", () => resolve6());
-      }
-    );
-    upstream.on("error", (e) => {
-      if (!res.headersSent) {
-        res.writeHead(502, { "content-type": "text/plain; charset=utf-8" });
-      }
-      res.end(`preview upstream error: ${e.message}`);
-      resolve6();
-    });
-    req.pipe(upstream);
-  });
-}
-function proxyPreviewUpgrade(req, socket, head, port) {
-  const upstream = import_node_net.default.connect(port, "localhost", () => {
-    let raw = `${req.method} ${req.url} HTTP/1.1\r
-`;
-    for (let i = 0; i < req.rawHeaders.length; i += 2) {
-      raw += `${req.rawHeaders[i]}: ${req.rawHeaders[i + 1]}\r
-`;
-    }
-    raw += "\r\n";
-    upstream.write(raw);
-    if (head && head.length) upstream.write(head);
-    upstream.pipe(socket);
-    socket.pipe(upstream);
-  });
-  upstream.on("error", () => socket.destroy());
-  socket.on("error", () => upstream.destroy());
-}
-
-// src/transport/local-ws-server.ts
 var LocalWsServer = class {
   constructor(opts) {
     this.opts = opts;
@@ -36394,33 +36357,18 @@ var LocalWsServer = class {
   httpServer = null;
   frameHandler = null;
   clients = /* @__PURE__ */ new Map();
-  // Task 1.7 capability platform：capId → Set<clientId>，撤销时 O(1) 找到该 cap 的
-  // 所有活跃连接做关闭级联（Task 1.10）。同一 cap 可能多端同时连（多设备 / 多 tab）。
-  capabilityIdToClients = /* @__PURE__ */ new Map();
+  // guest principal id → Set<clientId>，撤销时 O(1) 找到该 guest 的所有活跃连接做关闭级联。
+  // 同一 guest 可能多端同时连（多设备 / 多 tab）。
+  // Phase 3 (决策 #14): 索引键从 ctx.capabilityId 改为 guest principal.id（两者恒等，纯正名）。
+  guestIdToClients = /* @__PURE__ */ new Map();
   logger;
   pingIntervalMs;
   async start() {
     const host = this.opts.host ?? "127.0.0.1";
     await new Promise((resolve6, reject) => {
-      const httpServer = import_node_http2.default.createServer((req, res) => this.handleHttpRequest(req, res));
+      const httpServer = import_node_http.default.createServer((req, res) => this.handleHttpRequest(req, res));
       const wss = new import_websocket_server.default({ noServer: true, clientTracking: true });
       httpServer.on("upgrade", (req, socket, head) => {
-        if (req.url?.startsWith("/preview/")) {
-          const pathname = (() => {
-            try {
-              return new URL(req.url, "http://localhost").pathname;
-            } catch {
-              return "/";
-            }
-          })();
-          const port = matchPreviewPort(pathname);
-          if (port != null && (this.opts.previewPorts ?? []).includes(port)) {
-            proxyPreviewUpgrade(req, socket, head, port);
-          } else {
-            socket.destroy();
-          }
-          return;
-        }
         wss.handleUpgrade(req, socket, head, (ws) => {
           this.routeConnection(ws, req);
         });
@@ -36514,38 +36462,6 @@ var LocalWsServer = class {
       this.safeSend(c.ws, frame);
     }
   }
-  // capability platform v3 inbox 重写: 推给某条 cap channel 的两端 ws.
-  //   - 所有 owner ws (owner 看自家所有 channel)
-  //   - 该 capabilityId 的所有 guest ws (该 cap 持有人的多端/多 tab)
-  // 一次调用同时推两端, inbox:event push 帧由此走.
-  broadcastToCapabilityChannel(capabilityId, frame) {
-    this.broadcastToOwners(frame);
-    const set = this.capabilityIdToClients.get(capabilityId);
-    if (!set) return;
-    for (const id of set) {
-      const c = this.clients.get(id);
-      if (!c) continue;
-      this.safeSend(c.ws, frame);
-    }
-  }
-  // Phase 4 capability platform DM: 广播到指定 principal 的所有活跃 ws.
-  //   principalId === ownerPrincipalId  → 同 broadcastToOwners (所有 owner ws)
-  //   principalId === 'owner' sentinel  → 同上（向后兼容遗留 caller / 协议层 sentinel）
-  //   principalId === 'cap_xxx'         → 该 capability 的所有 guest ws (多端 / 多 tab)
-  // 用于 DM inbox:event 路由: from + to 两侧各播一次, 让双方 UI 实时看到 thread 更新.
-  broadcastToPrincipal(principalId, frame) {
-    if (principalId === "owner" || principalId === this.opts.ownerPrincipalId) {
-      this.broadcastToOwners(frame);
-      return;
-    }
-    const set = this.capabilityIdToClients.get(principalId);
-    if (!set) return;
-    for (const id of set) {
-      const c = this.clients.get(id);
-      if (!c) continue;
-      this.safeSend(c.ws, frame);
-    }
-  }
   firstSubscriber(sessionId) {
     for (const c of this.clients.values()) {
       if (c.handle.subscribedSessions.has(sessionId)) return c.handle;
@@ -36568,16 +36484,16 @@ var LocalWsServer = class {
     this.safeSend(c.ws, frame);
   }
   // Task 1.7 capability platform：AuthGate.onAuthed 回调里调本方法，把 ConnectionContext
-  // 绑到 client；guest 连接同时进 capId 索引（Task 1.10 撤销级联用）。
+  // 绑到 client；guest 连接同时进 guest 索引（撤销级联用）。
   attachClientContext(clientId, ctx) {
     const c = this.clients.get(clientId);
     if (!c) return;
     c.ctx = ctx;
-    if (ctx.capabilityId) {
-      let set = this.capabilityIdToClients.get(ctx.capabilityId);
+    if (ctx.principal.kind === "guest") {
+      let set = this.guestIdToClients.get(ctx.principal.id);
       if (!set) {
         set = /* @__PURE__ */ new Set();
-        this.capabilityIdToClients.set(ctx.capabilityId, set);
+        this.guestIdToClients.set(ctx.principal.id, set);
       }
       set.add(clientId);
     }
@@ -36586,10 +36502,27 @@ var LocalWsServer = class {
   getClientContext(clientId) {
     return this.clients.get(clientId)?.ctx ?? null;
   }
-  // Task 1.10 撤销级联：关闭某 capability 的所有活跃 ws 连接。close code 4401
+  // 飞书热切换（spec 决策 #9）：身份切换后踢掉所有连接强制重连——在线连接的 ctx
+  // （attachClientContext 时绑定）持有旧身份，重连后用新身份重建。
+  // close code 4408（非 4401！4401 = token 撤销，客户端会停止重连）：
+  // 客户端按普通断连处理 → 自动重连 → 新身份 ctx。
+  closeAllClients(code = 4408, reason = "IDENTITY_SWITCHED") {
+    const ids = [...this.clients.keys()];
+    for (const id of ids) {
+      const c = this.clients.get(id);
+      if (!c) continue;
+      try {
+        c.ws.close(code, reason);
+      } catch {
+      }
+    }
+  }
+  // Task 1.10 撤销级联：关闭某 guest principal 的所有活跃 ws 连接。close code 4401
   // 让客户端识别 'capability revoked' 而非普通断连。
-  closeConnectionsByCapability(capabilityId, code = 4401, reason = "TOKEN_REVOKED") {
-    const set = this.capabilityIdToClients.get(capabilityId);
+  // capability:delete 级联用 cap.id 调本方法——noAuth 旧 per-peer cap guest 的
+  // principal.id ≡ cap.id，级联语义不变（Phase 3 决策 #14 正名）。
+  closeConnectionsByGuestId(guestPrincipalId, code = 4401, reason = "TOKEN_REVOKED") {
+    const set = this.guestIdToClients.get(guestPrincipalId);
     if (!set) return;
     const ids = [...set];
     for (const id of ids) {
@@ -36654,16 +36587,18 @@ var LocalWsServer = class {
       this.logger?.warn("ready frame build failed", { err: err.message });
     }
     socket.on("message", (data) => {
-      this.onMessage(handle, data, remoteAddress);
+      void this.onMessage(handle, data, remoteAddress).catch((err) => {
+        this.logger?.warn("onMessage failed", { err: err.message });
+      });
     });
     socket.on("close", () => {
       const c = this.clients.get(id);
       if (c?.pingTimer) clearInterval(c.pingTimer);
-      const capId = c?.ctx?.capabilityId;
-      if (capId) {
-        const set = this.capabilityIdToClients.get(capId);
+      const guestId = c?.ctx?.principal.kind === "guest" ? c.ctx.principal.id : void 0;
+      if (guestId) {
+        const set = this.guestIdToClients.get(guestId);
         set?.delete(id);
-        if (set && set.size === 0) this.capabilityIdToClients.delete(capId);
+        if (set && set.size === 0) this.guestIdToClients.delete(guestId);
       }
       this.clients.delete(id);
       authGate?.unregister(id);
@@ -36673,7 +36608,7 @@ var LocalWsServer = class {
       this.logger?.warn("client socket error", { clientId: id, err: err.message });
     });
   }
-  onMessage(client, data, remoteAddress) {
+  async onMessage(client, data, remoteAddress) {
     let frame;
     try {
       frame = JSON.parse(data.toString());
@@ -36684,7 +36619,7 @@ var LocalWsServer = class {
     const authGate = this.opts.authGate;
     if (authGate) {
       const wasAuthed = authGate.isAuthed(client.id);
-      const verdict = authGate.handleFrame({ id: client.id, remoteAddress }, frame);
+      const verdict = await authGate.handleFrame({ id: client.id, remoteAddress }, frame);
       if (verdict !== "pass") {
         if (!wasAuthed && authGate.isAuthed(client.id)) {
           try {
@@ -36787,7 +36722,7 @@ var AuthGate = class {
   registerConnection(handle) {
     const enforce = this.opts.shouldEnforce(handle.remoteAddress);
     if (!enforce) {
-      this.states.set(handle.id, { authed: true, enforce: false, timer: null });
+      this.states.set(handle.id, { authed: true, enforce: false, timer: null, pending: false });
       return true;
     }
     const setT = this.opts.setTimer ?? ((cb, ms) => setTimeout(cb, ms));
@@ -36796,7 +36731,7 @@ var AuthGate = class {
       if (!st || st.authed) return;
       this.opts.closeConnection(handle, 1008, "auth timeout");
     }, this.opts.timeoutMs);
-    this.states.set(handle.id, { authed: false, enforce: true, timer });
+    this.states.set(handle.id, { authed: false, enforce: true, timer, pending: false });
     return false;
   }
   unregister(handleId) {
@@ -36812,12 +36747,15 @@ var AuthGate = class {
   }
   // 收到一帧时调；返回 'consumed' / 'reject' / 'pass'
   // - consumed：这一帧是 auth 帧（成功或失败），调用方不要再走业务路由
-  // - reject：未通过 auth 但帧不是 auth 帧，调用方应放弃此帧（gate 已关连接）
+  // - reject：未通过 auth 但帧不是 auth 帧，调用方应放弃此帧（gate 已关连接 / 验证进行中）
   // - pass：已 authed，调用方继续走业务路由
-  handleFrame(handle, frame) {
+  //
+  // Phase 2：async（authenticate 注入路径走中心 server introspect HTTP 调用）。
+  async handleFrame(handle, frame) {
     const st = this.states.get(handle.id);
     if (!st) return "reject";
     if (st.authed) return "pass";
+    if (st.pending) return "reject";
     const parsed = AuthRequestFrameSchema.safeParse(frame);
     if (!parsed.success) {
       const reason = frame.type === "auth" ? "auth failed" : "auth required";
@@ -36827,11 +36765,19 @@ var AuthGate = class {
     }
     let ctx = null;
     if (this.opts.authenticate) {
-      const r = this.opts.authenticate(
-        parsed.data.token,
-        parsed.data.selfPrincipalId,
-        parsed.data.selfDisplayName
-      );
+      st.pending = true;
+      let r;
+      try {
+        r = await this.opts.authenticate(
+          parsed.data.token,
+          parsed.data.selfPrincipalId,
+          parsed.data.selfDisplayName,
+          parsed.data.selfUrl
+        );
+      } finally {
+        st.pending = false;
+      }
+      if (!this.states.has(handle.id)) return "reject";
       if (!r.ok) {
         this.opts.closeConnection(handle, 4401, r.code);
         this.markFailed(handle.id);
@@ -36934,26 +36880,32 @@ function ownerContext(ownerPrincipalId, displayName) {
     grants: [{ resource: { type: "*" }, actions: ["admin"] }]
   };
 }
-function guestContext(cap, peerOwnerPrincipalId) {
+function connectGuestContext(unionId, displayName) {
   return {
-    principal: { id: cap.id, kind: "guest", displayName: cap.displayName },
-    grants: cap.grants,
-    capabilityId: cap.id,
-    ...peerOwnerPrincipalId ? { peerOwnerPrincipalId } : {}
+    principal: { id: unionId, kind: "guest", displayName },
+    grants: PERSONAL_CAP_GRANTS.map((g2) => ({
+      resource: { ...g2.resource },
+      actions: [...g2.actions]
+    })),
+    peerOwnerPrincipalId: unionId
   };
 }
-function authenticate(token, deps) {
+async function authenticate(token, deps) {
   if (!token) return { ok: false, code: "NO_TOKEN" };
   if (deps.isOwnerToken(token)) {
     return { ok: true, context: ownerContext(deps.ownerPrincipalId, deps.ownerDisplayName) };
   }
-  if (!deps.capabilityRegistry) return { ok: false, code: "BAD_TOKEN" };
-  const v2 = deps.capabilityRegistry.verifyToken(token);
-  if (!v2.ok) {
-    if (v2.code === "TOKEN_INVALID") return { ok: false, code: "BAD_TOKEN" };
-    return { ok: false, code: v2.code };
+  if (!deps.introspectConnectToken) return { ok: false, code: "BAD_TOKEN" };
+  let result;
+  try {
+    result = await deps.introspectConnectToken(token);
+  } catch {
+    return { ok: false, code: "BAD_TOKEN" };
   }
-  return { ok: true, context: guestContext(v2.capability, deps.selfPrincipalId) };
+  if (!result.active) {
+    return { ok: false, code: "TOKEN_REVOKED" };
+  }
+  return { ok: true, context: connectGuestContext(result.unionId, result.displayName) };
 }
 
 // src/permission/capability-store.ts
@@ -37099,8 +37051,8 @@ var CapabilityManager = class {
   list() {
     return this.registry.list();
   }
-  // whoami handler 用：根据 capabilityId 反查 caller 的 capability 实体。
-  // 返回 Capability 持久化形态；handler 调 stripSecretHash 后再上 wire。
+  // 调试 / 旧 per-peer cap 反查用（Phase 3 决策 #14 后无生产调用方，保留属三件套范围）。
+  // 返回 Capability 持久化形态；调用方需 stripSecretHash 后再上 wire。
   findById(id) {
     return this.registry.findById(id);
   }
@@ -37133,89 +37085,14 @@ function cleanupGuestSessionsForCapability(cap, factory) {
   return { removed };
 }
 
-// src/permission/personal-capability.ts
-var import_node_fs15 = __toESM(require("fs"), 1);
-var import_node_path16 = __toESM(require("path"), 1);
-var import_node_crypto4 = __toESM(require("crypto"), 1);
-var PERSONAL_CAP_FILE_NAME = "personal-capability.json";
-var PERSONAL_CAP_DISPLAY_NAME = "personal";
-function personalCapFilePath(dataDir) {
-  return import_node_path16.default.join(dataDir, PERSONAL_CAP_FILE_NAME);
-}
-function loadOrCreatePersonalCapability(opts) {
-  const file = personalCapFilePath(opts.dataDir);
-  const generateToken = opts.generateToken ?? defaultGenerateToken;
-  const generateId = opts.generateId ?? defaultGenerateId;
-  const now = opts.now ?? Date.now;
-  const existing = readFile(file);
-  if (existing) return existing;
-  const token = generateToken();
-  const id = generateId();
-  const capability = {
-    id,
-    secretHash: sha256Hex2(token),
-    displayName: PERSONAL_CAP_DISPLAY_NAME,
-    // CapabilitySchema 期待 mutable Grant[]，protocol 常量是 readonly，落盘前拷一份
-    grants: PERSONAL_CAP_GRANTS.map((g2) => ({
-      resource: { ...g2.resource },
-      actions: [...g2.actions]
-    })),
-    issuedAt: now(),
-    usedCount: 0
-  };
-  const content = { token, capability };
-  writeFile(file, content);
-  return content;
-}
-function readFile(file) {
-  let raw;
-  try {
-    raw = import_node_fs15.default.readFileSync(file, "utf8");
-  } catch (err) {
-    const code = err?.code;
-    if (code === "ENOENT") return null;
-    return null;
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    return null;
-  }
-  if (!parsed || typeof parsed !== "object") return null;
-  const obj = parsed;
-  if (typeof obj.token !== "string" || obj.token.length === 0) return null;
-  const capParsed = CapabilitySchema.safeParse(obj.capability);
-  if (!capParsed.success) return null;
-  if (sha256Hex2(obj.token) !== capParsed.data.secretHash) return null;
-  return { token: obj.token, capability: capParsed.data };
-}
-function writeFile(file, content) {
-  import_node_fs15.default.mkdirSync(import_node_path16.default.dirname(file), { recursive: true });
-  import_node_fs15.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
-  try {
-    import_node_fs15.default.chmodSync(file, 384);
-  } catch {
-  }
-}
-function defaultGenerateToken() {
-  return import_node_crypto4.default.randomBytes(24).toString("base64url");
-}
-function defaultGenerateId() {
-  return "personal_" + import_node_crypto4.default.randomBytes(6).toString("base64url");
-}
-function sha256Hex2(s) {
-  return import_node_crypto4.default.createHash("sha256").update(s).digest("hex");
-}
-
 // src/inbox/inbox-store.ts
-var fs20 = __toESM(require("fs"), 1);
-var path22 = __toESM(require("path"), 1);
+var fs19 = __toESM(require("fs"), 1);
+var path21 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs20.mkdirSync(this.dirPath(), { recursive: true });
+    fs19.mkdirSync(this.dirPath(), { recursive: true });
   }
   dataDir;
   /**
@@ -37227,7 +37104,7 @@ var InboxStore = class {
     const file = this.filePath(peerOwnerId);
     let raw;
     try {
-      raw = fs20.readFileSync(file, "utf8");
+      raw = fs19.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -37243,7 +37120,7 @@ var InboxStore = class {
     const dir = this.dirPath();
     let entries;
     try {
-      entries = fs20.readdirSync(dir);
+      entries = fs19.readdirSync(dir);
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -37259,9 +37136,9 @@ var InboxStore = class {
     if (existing.some((m2) => m2.id === message.id)) return;
     const file = this.filePath(message.peerOwnerId);
     const line = JSON.stringify(message) + "\n";
-    fs20.appendFileSync(file, line, { mode: 384 });
+    fs19.appendFileSync(file, line, { mode: 384 });
     try {
-      fs20.chmodSync(file, 384);
+      fs19.chmodSync(file, 384);
     } catch {
     }
   }
@@ -37291,7 +37168,7 @@ var InboxStore = class {
   removeByPeerOwnerId(peerOwnerId) {
     const file = this.filePath(peerOwnerId);
     try {
-      fs20.unlinkSync(file);
+      fs19.unlinkSync(file);
     } catch (err) {
       if (err?.code === "ENOENT") return;
     }
@@ -37300,18 +37177,18 @@ var InboxStore = class {
     const file = this.filePath(peerOwnerId);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     const content = messages.map((m2) => JSON.stringify(m2)).join("\n") + (messages.length > 0 ? "\n" : "");
-    fs20.writeFileSync(tmp, content, { mode: 384 });
-    fs20.renameSync(tmp, file);
+    fs19.writeFileSync(tmp, content, { mode: 384 });
+    fs19.renameSync(tmp, file);
     try {
-      fs20.chmodSync(file, 384);
+      fs19.chmodSync(file, 384);
     } catch {
     }
   }
   dirPath() {
-    return path22.join(this.dataDir, INBOX_SUBDIR);
+    return path21.join(this.dataDir, INBOX_SUBDIR);
   }
   filePath(peerOwnerId) {
-    return path22.join(this.dirPath(), `${peerOwnerId}.jsonl`);
+    return path21.join(this.dirPath(), `${peerOwnerId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -37397,22 +37274,22 @@ var InboxManager = class {
   }
 };
 
-// src/state/received-capability-store.ts
-var fs21 = __toESM(require("fs"), 1);
-var path23 = __toESM(require("path"), 1);
-var FILE_NAME = "received-capabilities.json";
-var ReceivedCapabilityStore = class {
+// src/state/contact-store.ts
+var fs20 = __toESM(require("fs"), 1);
+var path22 = __toESM(require("path"), 1);
+var FILE_NAME = "contacts.json";
+var ContactStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
   }
   dataDir;
-  caps = /* @__PURE__ */ new Map();
+  contacts = /* @__PURE__ */ new Map();
   load() {
-    this.caps.clear();
-    const file = path23.join(this.dataDir, FILE_NAME);
+    this.contacts.clear();
+    const file = path22.join(this.dataDir, FILE_NAME);
     let raw;
     try {
-      raw = fs21.readFileSync(file, "utf8");
+      raw = fs20.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code !== "ENOENT") this.renameBak(file);
       return;
@@ -37424,52 +37301,52 @@ var ReceivedCapabilityStore = class {
       this.renameBak(file);
       return;
     }
-    const arr = parsed?.receivedCaps;
+    const arr = parsed?.contacts;
     if (!Array.isArray(arr)) return;
     for (const entry of arr) {
-      const r = ReceivedCapabilitySchema.safeParse(entry);
-      if (r.success) this.caps.set(r.data.ownerPrincipalId, r.data);
+      const r = ContactSchema.safeParse(entry);
+      if (r.success) this.contacts.set(r.data.principalId, r.data);
     }
   }
   list() {
-    return Array.from(this.caps.values());
+    return Array.from(this.contacts.values());
   }
-  get(ownerPrincipalId) {
-    return this.caps.get(ownerPrincipalId) ?? null;
+  get(principalId) {
+    return this.contacts.get(principalId) ?? null;
   }
-  hasOwner(ownerPrincipalId) {
-    return this.caps.has(ownerPrincipalId);
+  has(principalId) {
+    return this.contacts.has(principalId);
   }
-  upsert(cap) {
-    this.caps.set(cap.ownerPrincipalId, cap);
+  upsert(contact) {
+    this.contacts.set(contact.principalId, contact);
     this.flush();
   }
-  remove(ownerPrincipalId) {
-    if (!this.caps.delete(ownerPrincipalId)) return;
+  remove(principalId) {
+    if (!this.contacts.delete(principalId)) return;
     this.flush();
   }
   flush() {
-    const file = path23.join(this.dataDir, FILE_NAME);
+    const file = path22.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
-      { receivedCaps: Array.from(this.caps.values()) },
+      { contacts: Array.from(this.contacts.values()) },
       null,
       2
     );
-    fs21.mkdirSync(this.dataDir, { recursive: true });
-    fs21.writeFileSync(tmp, content, { mode: 384 });
-    fs21.renameSync(tmp, file);
+    fs20.mkdirSync(this.dataDir, { recursive: true });
+    fs20.writeFileSync(tmp, content, { mode: 384 });
+    fs20.renameSync(tmp, file);
   }
   renameBak(file) {
     try {
-      fs21.renameSync(file, `${file}.bak`);
+      fs20.renameSync(file, `${file}.bak`);
     } catch {
     }
   }
 };
 
-// src/received-capability/connect-remote.ts
-var crypto6 = __toESM(require("crypto"), 1);
+// src/contact/connect-remote.ts
+var crypto5 = __toESM(require("crypto"), 1);
 var HANDSHAKE_TIMEOUT_MS = 5e3;
 var RPC_TIMEOUT_MS = 5e3;
 async function connectRemote(args) {
@@ -37487,7 +37364,10 @@ async function connectRemote(args) {
       type: "auth",
       token: args.token,
       selfPrincipalId: args.selfPrincipalId,
-      selfDisplayName: args.selfDisplayName
+      selfDisplayName: args.selfDisplayName,
+      // Phase 2 自动反向（spec 决策 #11）：带本机可达地址时 hub 反向建联系人；
+      // 缺省时省略字段（不发空串），hub 端 schema selfUrl 是 .min(1).optional()
+      ...args.selfUrl ? { selfUrl: args.selfUrl } : {}
     })
   );
   await new Promise((resolve6, reject) => {
@@ -37515,7 +37395,7 @@ async function connectRemote(args) {
     }, HANDSHAKE_TIMEOUT_MS);
   });
   function call(method, payload) {
-    const requestId = crypto6.randomUUID();
+    const requestId = crypto5.randomUUID();
     return new Promise((resolve6, reject) => {
       const onMessage = (raw) => {
         let f;
@@ -37546,7 +37426,6 @@ async function connectRemote(args) {
       return {
         ownerId: f.owner.id,
         displayName: f.owner.displayName,
-        capabilityId: f.capability.id,
         grants: f.capability.grants
       };
     },
@@ -37559,62 +37438,83 @@ async function connectRemote(args) {
   };
 }
 
+// src/contact/auto-reverse.ts
+init_protocol();
+function autoReverseContact(args) {
+  if (!args.selfUrl) return;
+  const now = args.now ?? Date.now;
+  const contact = {
+    principalId: args.unionId,
+    displayName: args.displayName,
+    remoteUrl: args.selfUrl,
+    // B 不持有 A 颁的 token：空串。schema 已放宽允许空（不造假数据）。
+    connectToken: "",
+    grants: PERSONAL_CAP_GRANTS.map((g2) => ({
+      resource: { ...g2.resource },
+      actions: [...g2.actions]
+    })),
+    addedAt: now()
+  };
+  args.store.upsert(contact);
+  args.broadcast({ type: "contact:added", contact });
+}
+
 // src/migrations/2026-05-20-flatten-sessions.ts
-var fs22 = __toESM(require("fs"), 1);
-var path24 = __toESM(require("path"), 1);
+var fs21 = __toESM(require("fs"), 1);
+var path23 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path24.join(dataDir, "sessions");
-  const flagPath = path24.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path23.join(dataDir, "sessions");
+  const flagPath = path23.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path24.join(sessionsDir, "default");
+  const defaultDir = path23.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path24.join(defaultDir, entry);
-      const dst = path24.join(sessionsDir, entry);
-      fs22.renameSync(src, dst);
+      const src = path23.join(defaultDir, entry);
+      const dst = path23.join(sessionsDir, entry);
+      fs21.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path24.join(sessionsDir, pid);
+    const personaDir = path23.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path24.join(personaDir, "owner");
+    const ownerSrc = path23.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path24.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs22.mkdirSync(ownerDst, { recursive: true });
+      const ownerDst = path23.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      fs21.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs22.renameSync(path24.join(ownerSrc, file), path24.join(ownerDst, file));
+        fs21.renameSync(path23.join(ownerSrc, file), path23.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path24.join(personaDir, "listener");
+    const listenerSrc = path23.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path24.join(dataDir, ".legacy", `listener-${pid}`);
-      fs22.mkdirSync(archiveDst, { recursive: true });
+      const archiveDst = path23.join(dataDir, ".legacy", `listener-${pid}`);
+      fs21.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs22.renameSync(path24.join(listenerSrc, file), path24.join(archiveDst, file));
+        fs21.renameSync(path23.join(listenerSrc, file), path23.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs22.mkdirSync(sessionsDir, { recursive: true });
-  fs22.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs21.mkdirSync(sessionsDir, { recursive: true });
+  fs21.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -37625,7 +37525,7 @@ function migrateFlattenSessions(opts) {
 }
 function existsSync3(p2) {
   try {
-    fs22.statSync(p2);
+    fs21.statSync(p2);
     return true;
   } catch {
     return false;
@@ -37633,31 +37533,31 @@ function existsSync3(p2) {
 }
 function isDir(p2) {
   try {
-    return fs22.statSync(p2).isDirectory();
+    return fs21.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p2) {
   try {
-    return fs22.readdirSync(p2);
+    return fs21.readdirSync(p2);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p2) {
   try {
-    fs22.rmdirSync(p2);
+    fs21.rmdirSync(p2);
   } catch {
   }
 }
 
 // src/transport/http-router.ts
-var import_node_fs17 = __toESM(require("fs"), 1);
-var import_node_path20 = __toESM(require("path"), 1);
+var import_node_fs16 = __toESM(require("fs"), 1);
+var import_node_path19 = __toESM(require("path"), 1);
 
 // src/attachment/mime.ts
-var import_node_path17 = __toESM(require("path"), 1);
+var import_node_path16 = __toESM(require("path"), 1);
 var TEXT_PLAIN = "text/plain; charset=utf-8";
 var EXT_TO_NATIVE_MIME = {
   // 图片
@@ -37764,14 +37664,14 @@ var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
   ".mk"
 ]);
 function lookupMime(filePathOrName) {
-  const ext = import_node_path17.default.extname(filePathOrName).toLowerCase();
+  const ext = import_node_path16.default.extname(filePathOrName).toLowerCase();
   if (EXT_TO_NATIVE_MIME[ext]) return EXT_TO_NATIVE_MIME[ext];
   if (TEXT_EXTENSIONS.has(ext)) return TEXT_PLAIN;
   return "application/octet-stream";
 }
 
 // src/attachment/sign-url.ts
-var import_node_crypto5 = __toESM(require("crypto"), 1);
+var import_node_crypto4 = __toESM(require("crypto"), 1);
 var HMAC_ALGO = "sha256";
 function base64urlEncode(buf) {
   const b2 = typeof buf === "string" ? Buffer.from(buf, "utf8") : buf;
@@ -37788,7 +37688,7 @@ function decodeAbsPathFromUrl(encoded) {
 }
 function computeSig(secret, absPath, e) {
   const msg = e === null ? absPath : `${absPath}|${e}`;
-  return import_node_crypto5.default.createHmac(HMAC_ALGO, secret).update(msg).digest();
+  return import_node_crypto4.default.createHmac(HMAC_ALGO, secret).update(msg).digest();
 }
 function signUrlParts(secret, absPath, ttlSeconds, now = Date.now) {
   const e = ttlSeconds === null ? null : Math.floor(now() / 1e3) + ttlSeconds;
@@ -37823,7 +37723,7 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
   if (provided.length !== expected.length) {
     return { ok: false, code: "BAD_SIG" };
   }
-  if (!import_node_crypto5.default.timingSafeEqual(provided, expected)) {
+  if (!import_node_crypto4.default.timingSafeEqual(provided, expected)) {
     return { ok: false, code: "BAD_SIG" };
   }
   if (e !== null && now() / 1e3 > e) {
@@ -37833,9 +37733,9 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
 }
 
 // src/attachment/upload.ts
-var import_node_fs16 = __toESM(require("fs"), 1);
-var import_node_path18 = __toESM(require("path"), 1);
-var import_node_crypto6 = __toESM(require("crypto"), 1);
+var import_node_fs15 = __toESM(require("fs"), 1);
+var import_node_path17 = __toESM(require("path"), 1);
+var import_node_crypto5 = __toESM(require("crypto"), 1);
 var import_promises = require("stream/promises");
 var UploadError = class extends Error {
   constructor(code, message) {
@@ -37846,24 +37746,24 @@ var UploadError = class extends Error {
   code;
 };
 function assertValidFileName(fileName) {
-  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path18.default.basename(fileName)) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path17.default.basename(fileName)) {
     throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
   }
 }
 var HASH_PREFIX_LEN = 16;
 async function writeUploadedAttachment(args) {
   assertValidFileName(args.fileName);
-  const attachmentsRoot = import_node_path18.default.join(args.sessionDir, ".attachments");
+  const attachmentsRoot = import_node_path17.default.join(args.sessionDir, ".attachments");
   try {
-    import_node_fs16.default.mkdirSync(attachmentsRoot, { recursive: true });
+    import_node_fs15.default.mkdirSync(attachmentsRoot, { recursive: true });
   } catch (err) {
     throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
   }
-  const hasher = import_node_crypto6.default.createHash("sha256");
+  const hasher = import_node_crypto5.default.createHash("sha256");
   let actualSize = 0;
-  const tmpPath = import_node_path18.default.join(
+  const tmpPath = import_node_path17.default.join(
     attachmentsRoot,
-    `.upload-${process.pid}-${Date.now()}-${import_node_crypto6.default.randomBytes(4).toString("hex")}`
+    `.upload-${process.pid}-${Date.now()}-${import_node_crypto5.default.randomBytes(4).toString("hex")}`
   );
   try {
     await (0, import_promises.pipeline)(
@@ -37876,18 +37776,18 @@ async function writeUploadedAttachment(args) {
           yield buf;
         }
       },
-      import_node_fs16.default.createWriteStream(tmpPath, { mode: 384 })
+      import_node_fs15.default.createWriteStream(tmpPath, { mode: 384 })
     );
   } catch (err) {
     try {
-      import_node_fs16.default.unlinkSync(tmpPath);
+      import_node_fs15.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError("STORAGE_ERROR", `write failed: ${err.message}`);
   }
   if (actualSize !== args.contentLength) {
     try {
-      import_node_fs16.default.unlinkSync(tmpPath);
+      import_node_fs15.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError(
@@ -37896,35 +37796,35 @@ async function writeUploadedAttachment(args) {
     );
   }
   const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
-  const hashDir = import_node_path18.default.join(attachmentsRoot, attachmentId);
+  const hashDir = import_node_path17.default.join(attachmentsRoot, attachmentId);
   let finalFileName;
   let hashDirExists = false;
   try {
-    hashDirExists = import_node_fs16.default.statSync(hashDir).isDirectory();
+    hashDirExists = import_node_fs15.default.statSync(hashDir).isDirectory();
   } catch {
   }
   if (hashDirExists) {
-    const existing = import_node_fs16.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
+    const existing = import_node_fs15.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
     finalFileName = existing[0] ?? args.fileName;
     try {
-      import_node_fs16.default.unlinkSync(tmpPath);
+      import_node_fs15.default.unlinkSync(tmpPath);
     } catch {
     }
   } else {
     try {
-      import_node_fs16.default.mkdirSync(hashDir, { recursive: true });
+      import_node_fs15.default.mkdirSync(hashDir, { recursive: true });
       finalFileName = args.fileName;
-      import_node_fs16.default.renameSync(tmpPath, import_node_path18.default.join(hashDir, finalFileName));
+      import_node_fs15.default.renameSync(tmpPath, import_node_path17.default.join(hashDir, finalFileName));
     } catch (err) {
       try {
-        import_node_fs16.default.unlinkSync(tmpPath);
+        import_node_fs15.default.unlinkSync(tmpPath);
       } catch {
       }
       throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
     }
   }
-  const absPath = import_node_path18.default.join(hashDir, finalFileName);
-  const relPath = import_node_path18.default.relative(args.sessionDir, absPath);
+  const absPath = import_node_path17.default.join(hashDir, finalFileName);
+  const relPath = import_node_path17.default.relative(args.sessionDir, absPath);
   args.groupFileStore.upsert(args.scope, args.sessionId, {
     relPath: absPath,
     // 存绝对路径，与现有 agent 入清单的形态一致（attachment.ts:144 双形态兼容）
@@ -37938,7 +37838,7 @@ async function writeUploadedAttachment(args) {
 
 // src/extension/import.ts
 var import_promises2 = __toESM(require("fs/promises"), 1);
-var import_node_path19 = __toESM(require("path"), 1);
+var import_node_path18 = __toESM(require("path"), 1);
 var import_node_os10 = __toESM(require("os"), 1);
 var import_jszip = __toESM(require_lib3(), 1);
 var ImportError = class extends Error {
@@ -37956,7 +37856,7 @@ async function importZip(buf, root) {
     throw new ImportError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path19.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path18.default.isAbsolute(name)) {
       throw new ImportError("ZIP_INVALID", `unsafe zip entry path: ${name}`);
     }
   }
@@ -37989,7 +37889,7 @@ async function importZip(buf, root) {
       );
     }
   }
-  const destDir = import_node_path19.default.join(root, manifest.id);
+  const destDir = import_node_path18.default.join(root, manifest.id);
   let destExists = false;
   try {
     await import_promises2.default.access(destDir);
@@ -37999,15 +37899,15 @@ async function importZip(buf, root) {
   if (destExists) {
     throw new ImportError("ALREADY_EXISTS", `extension ${manifest.id} already installed`);
   }
-  const stage = await import_promises2.default.mkdtemp(import_node_path19.default.join(import_node_os10.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
+  const stage = await import_promises2.default.mkdtemp(import_node_path18.default.join(import_node_os10.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path19.default.join(stage, name);
+      const dest = import_node_path18.default.join(stage, name);
       if (entry.dir) {
         await import_promises2.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises2.default.mkdir(import_node_path19.default.dirname(dest), { recursive: true });
+      await import_promises2.default.mkdir(import_node_path18.default.dirname(dest), { recursive: true });
       const content = await entry.async("nodebuffer");
       await import_promises2.default.writeFile(dest, content);
     }
@@ -38053,7 +37953,7 @@ function isValidUploadFileName(fileName) {
   if (fileName === "." || fileName === "..") return false;
   if (fileName.startsWith(".")) return false;
   if (fileName.includes("/") || fileName.includes("\\")) return false;
-  return fileName === import_node_path20.default.basename(fileName);
+  return fileName === import_node_path19.default.basename(fileName);
 }
 function createHttpRouter(deps) {
   return async (req, res) => {
@@ -38068,13 +37968,23 @@ function createHttpRouter(deps) {
       });
       return true;
     }
-    if (url.pathname.startsWith("/preview/")) {
-      const port = matchPreviewPort(url.pathname);
-      if (port != null && isPreviewPortAllowed(port, { allowedPorts: deps.previewPorts ?? [] })) {
-        await proxyPreviewHttp(req, res, port);
+    if (url.pathname === "/auth/callback") {
+      if (req.method !== "GET") {
+        sendJson(res, 404, { code: "NOT_FOUND", message: `no route for ${req.method} ${url.pathname}` });
         return true;
       }
-      sendJson(res, 403, { code: "PREVIEW_PORT_FORBIDDEN", message: "preview port not allowed" });
+      if (!deps.feishuLogin) {
+        sendJson(res, 501, { code: "NOT_IMPLEMENTED", message: "feishu login not wired" });
+        return true;
+      }
+      const result = await deps.feishuLogin.handleLoginCallback({
+        token: url.searchParams.get("token") ?? "",
+        state: url.searchParams.get("state") ?? "",
+        expiresAt: url.searchParams.get("expires_at")
+      });
+      const html = result.ok ? `<!doctype html><meta charset="utf-8"><title>clawd</title><style>body{font-family:-apple-system,sans-serif;padding:48px;color:#222}</style><h2>\u767B\u5F55\u6210\u529F\uFF0C\u53EF\u5173\u95ED\u6B64\u9875\u3002</h2><p>\u8EAB\u4EFD\uFF1A${escapeHtml(result.identity.displayName)}</p><script>setTimeout(()=>window.close(),1500)</script>` : `<!doctype html><meta charset="utf-8"><title>clawd</title><style>body{font-family:-apple-system,sans-serif;padding:48px;color:#922}</style><h2>\u767B\u5F55\u5931\u8D25</h2><p>${escapeHtml(result.reason)}</p>`;
+      res.writeHead(result.ok ? 200 : 400, { "Content-Type": "text/html; charset=utf-8" });
+      res.end(html);
       return true;
     }
     if (!url.pathname.startsWith("/session/") && !url.pathname.startsWith("/files/") && url.pathname !== "/attachments/upload" && url.pathname !== "/extensions/import") {
@@ -38237,7 +38147,7 @@ function createHttpRouter(deps) {
         return true;
       }
       let absPath;
-      if (import_node_path20.default.isAbsolute(pathParam)) {
+      if (import_node_path19.default.isAbsolute(pathParam)) {
         absPath = pathParam;
       } else if (deps.sessionStore) {
         const file = deps.sessionStore.read(sid);
@@ -38245,7 +38155,7 @@ function createHttpRouter(deps) {
           sendJson(res, 404, { code: "NOT_FOUND", message: `session ${sid} not found` });
           return true;
         }
-        absPath = import_node_path20.default.join(file.cwd, pathParam);
+        absPath = import_node_path19.default.join(file.cwd, pathParam);
       } else {
         sendJson(res, 501, withCtx(ctx, { code: "NOT_IMPLEMENTED", message: "sessionStore not wired" }));
         return true;
@@ -38312,6 +38222,9 @@ function parseUrl(rawUrl) {
     return null;
   }
 }
+function escapeHtml(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
 function sendJson(res, status, body, extraHeaders) {
   res.writeHead(status, {
     "Content-Type": "application/json; charset=utf-8",
@@ -38325,7 +38238,7 @@ function withCtx(ctx, body) {
 function streamFile(res, absPath, logger) {
   let stat;
   try {
-    stat = import_node_fs17.default.statSync(absPath);
+    stat = import_node_fs16.default.statSync(absPath);
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") {
@@ -38340,7 +38253,7 @@ function streamFile(res, absPath, logger) {
     return;
   }
   const mime = lookupMime(absPath);
-  const basename = import_node_path20.default.basename(absPath);
+  const basename = import_node_path19.default.basename(absPath);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": String(stat.size),
@@ -38348,7 +38261,7 @@ function streamFile(res, absPath, logger) {
     // 防止浏览器把任意 mime 当 html 渲染
     "X-Content-Type-Options": "nosniff"
   });
-  const stream = import_node_fs17.default.createReadStream(absPath);
+  const stream = import_node_fs16.default.createReadStream(absPath);
   stream.on("error", (err) => {
     logger?.warn("streamFile read error", { absPath, err: err.message });
     res.destroy();
@@ -38357,8 +38270,8 @@ function streamFile(res, absPath, logger) {
 }
 
 // src/attachment/gc.ts
-var import_node_fs18 = __toESM(require("fs"), 1);
-var import_node_path21 = __toESM(require("path"), 1);
+var import_node_fs17 = __toESM(require("fs"), 1);
+var import_node_path20 = __toESM(require("path"), 1);
 var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
 function runAttachmentGc(args) {
   const now = (args.now ?? Date.now)();
@@ -38367,38 +38280,38 @@ function runAttachmentGc(args) {
   for (const { scope, sessionId } of args.sessionScopes) {
     for (const entry of args.groupFileStore.list(scope, sessionId)) {
       if (entry.stale) continue;
-      if (import_node_path21.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+      if (import_node_path20.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
     }
   }
   for (const { scope, sessionId } of args.sessionScopes) {
-    const sessionDir = args.getSessionCwd?.(sessionId) ?? import_node_path21.default.join(
+    const sessionDir = args.getSessionCwd?.(sessionId) ?? import_node_path20.default.join(
       args.dataDir,
       "sessions",
       ...scopeSubPath(scope).map(safeFileName),
       safeFileName(sessionId)
     );
-    const attRoot = import_node_path21.default.join(sessionDir, ".attachments");
+    const attRoot = import_node_path20.default.join(sessionDir, ".attachments");
     let hashDirs;
     try {
-      hashDirs = import_node_fs18.default.readdirSync(attRoot);
+      hashDirs = import_node_fs17.default.readdirSync(attRoot);
     } catch (err) {
       if (err.code === "ENOENT") continue;
       args.logger?.warn("attachment gc: readdir failed", { attRoot, err: err.message });
       continue;
     }
     for (const hashDir of hashDirs) {
-      const hashDirAbs = import_node_path21.default.join(attRoot, hashDir);
+      const hashDirAbs = import_node_path20.default.join(attRoot, hashDir);
       let files;
       try {
-        files = import_node_fs18.default.readdirSync(hashDirAbs);
+        files = import_node_fs17.default.readdirSync(hashDirAbs);
       } catch {
         continue;
       }
       for (const name of files) {
-        const file = import_node_path21.default.join(hashDirAbs, name);
+        const file = import_node_path20.default.join(hashDirAbs, name);
         let stat;
         try {
-          stat = import_node_fs18.default.statSync(file);
+          stat = import_node_fs17.default.statSync(file);
         } catch {
           continue;
         }
@@ -38407,27 +38320,27 @@ function runAttachmentGc(args) {
         if (age < ttlMs) continue;
         if (liveAbs.has(file)) continue;
         try {
-          import_node_fs18.default.unlinkSync(file);
+          import_node_fs17.default.unlinkSync(file);
         } catch (err) {
           args.logger?.warn("attachment gc: unlink failed", { file, err: err.message });
         }
       }
       try {
-        if (import_node_fs18.default.readdirSync(hashDirAbs).length === 0) import_node_fs18.default.rmdirSync(hashDirAbs);
+        if (import_node_fs17.default.readdirSync(hashDirAbs).length === 0) import_node_fs17.default.rmdirSync(hashDirAbs);
       } catch {
       }
     }
     try {
-      if (import_node_fs18.default.readdirSync(attRoot).length === 0) import_node_fs18.default.rmdirSync(attRoot);
+      if (import_node_fs17.default.readdirSync(attRoot).length === 0) import_node_fs17.default.rmdirSync(attRoot);
     } catch {
     }
   }
 }
 
 // src/attachment/group.ts
-var import_node_fs19 = __toESM(require("fs"), 1);
-var import_node_path22 = __toESM(require("path"), 1);
-var import_node_crypto7 = __toESM(require("crypto"), 1);
+var import_node_fs18 = __toESM(require("fs"), 1);
+var import_node_path21 = __toESM(require("path"), 1);
+var import_node_crypto6 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
   dataDir;
@@ -38438,11 +38351,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path22.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path21.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path22.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path21.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -38451,7 +38364,7 @@ var GroupFileStore = class {
   readFile(scope, sessionId) {
     const file = this.filePath(scope, sessionId);
     try {
-      const raw = import_node_fs19.default.readFileSync(file, "utf8");
+      const raw = import_node_fs18.default.readFileSync(file, "utf8");
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) {
         this.logger?.warn("GroupFileStore.readFile: not an array; resetting session entries", {
@@ -38477,10 +38390,10 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs19.default.mkdirSync(import_node_path22.default.dirname(file), { recursive: true });
+    import_node_fs18.default.mkdirSync(import_node_path21.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs19.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
-    import_node_fs19.default.renameSync(tmp, file);
+    import_node_fs18.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
+    import_node_fs18.default.renameSync(tmp, file);
   }
   /** 拉一份当前 session 的清单。读盘 → cache；之后调用复用 cache */
   list(scope, sessionId) {
@@ -38516,7 +38429,7 @@ var GroupFileStore = class {
       entries[idx] = next;
     } else {
       next = {
-        id: `gf-${import_node_crypto7.default.randomBytes(6).toString("base64url")}`,
+        id: `gf-${import_node_crypto6.default.randomBytes(6).toString("base64url")}`,
         relPath: input.relPath,
         from: input.from,
         label: input.label,
@@ -38566,10 +38479,10 @@ var GroupFileStore = class {
 };
 
 // src/discovery/state-file.ts
-var import_node_fs20 = __toESM(require("fs"), 1);
-var import_node_path23 = __toESM(require("path"), 1);
+var import_node_fs19 = __toESM(require("fs"), 1);
+var import_node_path22 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path23.default.join(dataDir, "state.json");
+  return import_node_path22.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -38591,7 +38504,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs20.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs19.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -38605,34 +38518,34 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs20.default.mkdirSync(import_node_path23.default.dirname(this.file), { recursive: true });
+    import_node_fs19.default.mkdirSync(import_node_path22.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs20.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs20.default.renameSync(tmp, this.file);
+    import_node_fs19.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs19.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs20.default.chmodSync(this.file, 384);
+        import_node_fs19.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs20.default.unlinkSync(this.file);
+      import_node_fs19.default.unlinkSync(this.file);
     } catch {
     }
   }
 };
 
 // src/tunnel/tunnel-manager.ts
-var import_node_fs24 = __toESM(require("fs"), 1);
-var import_node_path27 = __toESM(require("path"), 1);
-var import_node_crypto8 = __toESM(require("crypto"), 1);
+var import_node_fs23 = __toESM(require("fs"), 1);
+var import_node_path26 = __toESM(require("path"), 1);
+var import_node_crypto7 = __toESM(require("crypto"), 1);
 var import_node_child_process5 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
-var import_node_fs21 = __toESM(require("fs"), 1);
-var import_node_path24 = __toESM(require("path"), 1);
+var import_node_fs20 = __toESM(require("fs"), 1);
+var import_node_path23 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -38640,7 +38553,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs21.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs20.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -38651,22 +38564,22 @@ var TunnelStore = class {
     }
   }
   async set(v2) {
-    const dir = import_node_path24.default.dirname(this.filePath);
-    await import_node_fs21.default.promises.mkdir(dir, { recursive: true });
+    const dir = import_node_path23.default.dirname(this.filePath);
+    await import_node_fs20.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs21.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs20.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs21.default.promises.chmod(tmp, 384);
+        await import_node_fs20.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs21.default.promises.rename(tmp, this.filePath);
+    await import_node_fs20.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs21.default.promises.unlink(this.filePath);
+      await import_node_fs20.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -38761,9 +38674,9 @@ function escape(v2) {
 }
 
 // src/tunnel/frpc-binary.ts
-var import_node_fs22 = __toESM(require("fs"), 1);
+var import_node_fs21 = __toESM(require("fs"), 1);
 var import_node_os11 = __toESM(require("os"), 1);
-var import_node_path25 = __toESM(require("path"), 1);
+var import_node_path24 = __toESM(require("path"), 1);
 var import_node_child_process3 = require("child_process");
 var import_node_stream2 = require("stream");
 var import_promises3 = require("stream/promises");
@@ -38795,20 +38708,20 @@ function frpcDownloadUrl(version2, p2) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs22.default.existsSync(opts.override)) {
+    if (!import_node_fs21.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path25.default.join(opts.dataDir, "bin");
-  import_node_fs22.default.mkdirSync(binDir, { recursive: true });
+  const binDir = import_node_path24.default.join(opts.dataDir, "bin");
+  import_node_fs21.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path25.default.join(binDir, "frpc");
-  if (import_node_fs22.default.existsSync(stableBin)) return stableBin;
+  const stableBin = import_node_path24.default.join(binDir, "frpc");
+  if (import_node_fs21.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path25.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path24.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -38817,8 +38730,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs22.default.chmodSync(partialBin, 493);
-    import_node_fs22.default.renameSync(partialBin, stableBin);
+    import_node_fs21.default.chmodSync(partialBin, 493);
+    import_node_fs21.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -38828,15 +38741,15 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs22.default.readdirSync(binDir);
+    entries = import_node_fs21.default.readdirSync(binDir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path25.default.join(binDir, name);
+      const full = import_node_path24.default.join(binDir, name);
       try {
-        import_node_fs22.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs21.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -38844,7 +38757,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p2) {
   try {
-    import_node_fs22.default.unlinkSync(p2);
+    import_node_fs21.default.unlinkSync(p2);
   } catch {
   }
 }
@@ -38855,13 +38768,13 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs22.default.createWriteStream(dest);
+  const out = import_node_fs21.default.createWriteStream(dest);
   const nodeStream = import_node_stream2.Readable.fromWeb(res.body);
   await (0, import_promises3.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path25.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs22.default.mkdirSync(work, { recursive: true });
+  const work = import_node_path24.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  import_node_fs21.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve6, reject) => {
       const proc = (0, import_node_child_process3.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
@@ -38869,32 +38782,32 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
       proc.on("exit", (code) => code === 0 ? resolve6() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path25.default.join(work, dirName, "frpc");
-    if (!import_node_fs22.default.existsSync(src)) {
+    const src = import_node_path24.default.join(work, dirName, "frpc");
+    if (!import_node_fs21.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs22.default.copyFileSync(src, destBin);
+    import_node_fs21.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs22.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs21.default.rmSync(work, { recursive: true, force: true });
   }
 }
 
 // src/tunnel/frpc-process.ts
-var import_node_fs23 = __toESM(require("fs"), 1);
-var import_node_path26 = __toESM(require("path"), 1);
+var import_node_fs22 = __toESM(require("fs"), 1);
+var import_node_path25 = __toESM(require("path"), 1);
 var import_node_child_process4 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path26.default.join(dataDir, "frpc.pid");
+  return import_node_path25.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
-    import_node_fs23.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
+    import_node_fs22.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearFrpcPid(dataDir) {
   try {
-    import_node_fs23.default.unlinkSync(frpcPidFilePath(dataDir));
+    import_node_fs22.default.unlinkSync(frpcPidFilePath(dataDir));
   } catch {
   }
 }
@@ -38910,7 +38823,7 @@ function defaultIsPidAlive(pid) {
 }
 function defaultReadPidFile(file) {
   try {
-    return import_node_fs23.default.readFileSync(file, "utf8");
+    return import_node_fs22.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -38926,7 +38839,7 @@ function defaultSleep(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path26.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path25.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -38950,7 +38863,7 @@ async function killStaleFrpc(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs23.default.unlinkSync(pidFile);
+      import_node_fs22.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -38961,7 +38874,7 @@ async function killStaleFrpc(deps) {
   }
   await sleep(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs23.default.unlinkSync(pidFile);
+    import_node_fs22.default.unlinkSync(pidFile);
   } catch {
   }
 }
@@ -38998,7 +38911,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path27.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path26.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -39125,8 +39038,8 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path27.default.join(this.deps.dataDir, "frpc.toml");
-      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto8.default.randomBytes(3).toString("hex")}`;
+      const tomlPath = import_node_path26.default.join(this.deps.dataDir, "frpc.toml");
+      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto7.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
         serverPort: t.frpsPort,
@@ -39136,12 +39049,12 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs24.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      await import_node_fs23.default.promises.writeFile(tomlPath, toml, { mode: 384 });
       const proc = (this.deps.spawnImpl ?? import_node_child_process5.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logFilePath = import_node_path27.default.join(this.deps.dataDir, "frpc.log");
-      const logStream = import_node_fs24.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logFilePath = import_node_path26.default.join(this.deps.dataDir, "frpc.log");
+      const logStream = import_node_fs23.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -39224,31 +39137,31 @@ async function waitForFrpcReady(proc, timeoutMs) {
 
 // src/tunnel/device-key.ts
 var import_node_os12 = __toESM(require("os"), 1);
-var import_node_path28 = __toESM(require("path"), 1);
-var import_node_crypto9 = __toESM(require("crypto"), 1);
+var import_node_path27 = __toESM(require("path"), 1);
+var import_node_crypto8 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os12.default.hostname();
   const uid = opts.uid ?? (typeof import_node_os12.default.userInfo === "function" ? import_node_os12.default.userInfo().uid : 0);
   const home = opts.home ?? import_node_os12.default.homedir();
-  const defaultDataDir = import_node_path28.default.resolve(import_node_path28.default.join(home, ".clawd"));
-  const normalizedDataDir = opts.dataDir ? import_node_path28.default.resolve(opts.dataDir) : null;
+  const defaultDataDir = import_node_path27.default.resolve(import_node_path27.default.join(home, ".clawd"));
+  const normalizedDataDir = opts.dataDir ? import_node_path27.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
-  return import_node_crypto9.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
+  return import_node_crypto8.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
-var import_node_fs25 = __toESM(require("fs"), 1);
-var import_node_path29 = __toESM(require("path"), 1);
-var import_node_crypto10 = __toESM(require("crypto"), 1);
+var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_path28 = __toESM(require("path"), 1);
+var import_node_crypto9 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path29.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path28.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
-  const generate = opts.generate ?? defaultGenerateToken2;
+  const generate = opts.generate ?? defaultGenerateToken;
   const genId = opts.genOwnerPrincipalId ?? defaultGenerateOwnerPrincipalId;
   const now = opts.now ?? (() => /* @__PURE__ */ new Date());
   const existing = readAuthFile(file);
@@ -39268,15 +39181,15 @@ function loadOrCreateAuthFile(opts) {
   writeAuthFile(file, next);
   return next;
 }
-function defaultGenerateToken2() {
-  return import_node_crypto10.default.randomBytes(32).toString("base64url");
+function defaultGenerateToken() {
+  return import_node_crypto9.default.randomBytes(32).toString("base64url");
 }
 function defaultGenerateOwnerPrincipalId() {
-  return `owner-${import_node_crypto10.default.randomUUID()}`;
+  return `owner-${import_node_crypto9.default.randomUUID()}`;
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs25.default.readFileSync(file, "utf8");
+    const raw = import_node_fs24.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -39294,25 +39207,25 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs25.default.mkdirSync(import_node_path29.default.dirname(file), { recursive: true });
-  import_node_fs25.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs24.default.mkdirSync(import_node_path28.default.dirname(file), { recursive: true });
+  import_node_fs24.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs25.default.chmodSync(file, 384);
+    import_node_fs24.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_fs25 = __toESM(require("fs"), 1);
 var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path30 = __toESM(require("path"), 1);
+var import_node_path29 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function loadOwnerDisplayName(dataDir) {
   const fallback = import_node_os13.default.userInfo().username;
-  const profilePath = import_node_path30.default.join(dataDir, PROFILE_FILENAME);
+  const profilePath = import_node_path29.default.join(dataDir, PROFILE_FILENAME);
   let raw;
   try {
-    raw = import_node_fs26.default.readFileSync(profilePath, "utf8");
+    raw = import_node_fs25.default.readFileSync(profilePath, "utf8");
   } catch {
     return fallback;
   }
@@ -39334,6 +39247,259 @@ function loadOwnerDisplayName(dataDir) {
   return displayName;
 }
 
+// src/feishu-auth/owner-identity-store.ts
+var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_path30 = __toESM(require("path"), 1);
+var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
+var OwnerIdentityStore = class {
+  file;
+  constructor(dataDir) {
+    this.file = import_node_path30.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
+  }
+  read() {
+    let raw;
+    try {
+      raw = import_node_fs26.default.readFileSync(this.file, "utf8");
+    } catch {
+      return null;
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(raw);
+    } catch {
+      return null;
+    }
+    const r = parsed;
+    if (!r.identity || typeof r.identity.unionId !== "string" || r.identity.unionId.length === 0 || typeof r.identity.displayName !== "string" || r.identity.displayName.length === 0 || typeof r.ttcToken !== "string" || r.ttcToken.length === 0) {
+      return null;
+    }
+    return {
+      identity: {
+        unionId: r.identity.unionId,
+        displayName: r.identity.displayName,
+        ...typeof r.identity.avatarUrl === "string" ? { avatarUrl: r.identity.avatarUrl } : {}
+      },
+      ttcToken: r.ttcToken,
+      ttcTokenExpiresAt: typeof r.ttcTokenExpiresAt === "number" ? r.ttcTokenExpiresAt : null,
+      loginAt: typeof r.loginAt === "string" ? r.loginAt : (/* @__PURE__ */ new Date(0)).toISOString()
+    };
+  }
+  write(record) {
+    import_node_fs26.default.mkdirSync(import_node_path30.default.dirname(this.file), { recursive: true });
+    import_node_fs26.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
+    try {
+      import_node_fs26.default.chmodSync(this.file, 384);
+    } catch {
+    }
+  }
+  clear() {
+    try {
+      import_node_fs26.default.unlinkSync(this.file);
+    } catch (err) {
+      const code = err?.code;
+      if (code !== "ENOENT") throw err;
+    }
+  }
+};
+
+// src/feishu-auth/login-flow.ts
+var import_node_crypto10 = __toESM(require("crypto"), 1);
+var STATE_TTL_MS = 5 * 60 * 1e3;
+var LoginFlow = class {
+  constructor(deps) {
+    this.deps = deps;
+  }
+  deps;
+  pendingStates = /* @__PURE__ */ new Map();
+  start() {
+    const state = import_node_crypto10.default.randomBytes(16).toString("base64url");
+    const now = (this.deps.now ?? Date.now)();
+    this.pendingStates.set(state, now);
+    this.gcExpired(now);
+    const url = new URL("/auth/authorize", this.deps.ttcAuthBase);
+    url.searchParams.set("callback_url", this.deps.getCallbackUrl());
+    url.searchParams.set("state", state);
+    url.searchParams.set("auto", "1");
+    return { authUrl: url.toString(), state };
+  }
+  async handleCallback(params) {
+    const now = (this.deps.now ?? Date.now)();
+    const issuedAt = this.pendingStates.get(params.state);
+    if (issuedAt === void 0) {
+      return { ok: false, reason: "state mismatch" };
+    }
+    this.pendingStates.delete(params.state);
+    if (now - issuedAt > STATE_TTL_MS) {
+      return { ok: false, reason: "state expired" };
+    }
+    if (!params.token) {
+      return { ok: false, reason: "missing token" };
+    }
+    let identity;
+    try {
+      identity = await this.deps.fetchUserInfo(params.token);
+    } catch (err) {
+      return { ok: false, reason: `user_info failed: ${err.message}` };
+    }
+    const expiresAtNum = params.expiresAt ? Number.parseInt(params.expiresAt, 10) : NaN;
+    this.deps.store.write({
+      identity,
+      ttcToken: params.token,
+      ttcTokenExpiresAt: Number.isFinite(expiresAtNum) ? expiresAtNum : null,
+      loginAt: new Date(now).toISOString()
+    });
+    return { ok: true, identity };
+  }
+  gcExpired(now) {
+    for (const [state, issuedAt] of this.pendingStates) {
+      if (now - issuedAt > STATE_TTL_MS) this.pendingStates.delete(state);
+    }
+  }
+};
+
+// src/feishu-auth/ttc-client.ts
+var TTC_HOSTS = {
+  auth: "https://app.ttcadvisory.com",
+  api: "https://api.ttcadvisory.com"
+};
+var TtcUserInfoError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "TtcUserInfoError";
+  }
+  code;
+};
+async function fetchTtcUserInfo(opts) {
+  const doFetch = opts.fetchImpl ?? fetch;
+  let res;
+  try {
+    res = await doFetch(`${opts.apiBase}/api/user_service/v1/login/user`, {
+      headers: { Authorization: `Bearer ${opts.token}` }
+    });
+  } catch (err) {
+    throw new TtcUserInfoError("NETWORK", `TTC user_info request failed: ${err.message}`);
+  }
+  if (!res.ok) {
+    if (res.status === 401) {
+      throw new TtcUserInfoError("UNAUTHORIZED", "TTC token invalid or expired");
+    }
+    throw new TtcUserInfoError("API_ERROR", `TTC user_info HTTP ${res.status}`);
+  }
+  const body = await res.json();
+  if (body.code !== 0) {
+    throw new TtcUserInfoError("API_ERROR", `TTC user_info code=${body.code}: ${body.message ?? ""}`);
+  }
+  const d = body.data;
+  if (!d || typeof d.union_id !== "string" || d.union_id.length === 0 || typeof d.name !== "string" || d.name.length === 0) {
+    throw new TtcUserInfoError("BAD_RESPONSE", "TTC user_info missing union_id or name");
+  }
+  return {
+    unionId: d.union_id,
+    displayName: d.name,
+    ...typeof d.avatar_url === "string" && d.avatar_url.length > 0 ? { avatarUrl: d.avatar_url } : {}
+  };
+}
+
+// src/feishu-auth/central-client.ts
+var CentralClientError = class extends Error {
+  constructor(code, message, cause) {
+    super(message);
+    this.code = code;
+    this.cause = cause;
+    this.name = "CentralClientError";
+  }
+  code;
+  cause;
+};
+async function centralRequest(opts, path59, init) {
+  const f = opts.fetchImpl ?? globalThis.fetch;
+  const url = `${opts.api.replace(/\/+$/, "")}${path59}`;
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
+  let res;
+  try {
+    res = await f(url, {
+      method: init.method,
+      headers: {
+        "content-type": "application/json",
+        ...init.bearer ? { authorization: `Bearer ${init.bearer}` } : {}
+      },
+      ...init.body !== void 0 ? { body: JSON.stringify(init.body) } : {},
+      signal: ctrl.signal
+    });
+  } catch (err) {
+    clearTimeout(timer);
+    throw new CentralClientError("NETWORK", `central server request failed: ${err.message}`, err);
+  }
+  clearTimeout(timer);
+  if (res.status === 401) {
+    throw new CentralClientError("UNAUTHORIZED", "TTC JWT invalid or expired");
+  }
+  if (!res.ok) {
+    throw new CentralClientError("API_ERROR", `central server HTTP ${res.status}`);
+  }
+  try {
+    return await res.json();
+  } catch (err) {
+    throw new CentralClientError("BAD_RESPONSE", "central server: invalid json response", err);
+  }
+}
+async function centralExchange(opts) {
+  const body = await centralRequest(opts, "/api/clawd-identity/exchange", {
+    method: "POST",
+    body: { ttcJwt: opts.ttcJwt, hubId: opts.hubId }
+  });
+  if (typeof body.token !== "string" || body.token.length === 0 || typeof body.unionId !== "string" || typeof body.displayName !== "string") {
+    throw new CentralClientError("BAD_RESPONSE", "exchange: missing token/unionId/displayName");
+  }
+  const hubUrl = typeof body.hubUrl === "string" && body.hubUrl.length > 0 ? body.hubUrl : null;
+  return { token: body.token, unionId: body.unionId, displayName: body.displayName, hubUrl };
+}
+async function centralUpsertHub(opts) {
+  const body = await centralRequest(opts, "/api/clawd-identity/hubs/self", {
+    method: "PUT",
+    bearer: opts.ttcJwt,
+    body: { url: opts.url, ...opts.name ? { name: opts.name } : {} }
+  });
+  if (body.ok !== true) {
+    throw new CentralClientError("BAD_RESPONSE", "upsertHub: server did not ack ok");
+  }
+  return { ok: true };
+}
+async function centralIntrospect(opts) {
+  const body = await centralRequest(opts, "/api/clawd-identity/introspect", {
+    method: "POST",
+    bearer: opts.hubTtcJwt,
+    body: { token: opts.token }
+  });
+  if (body.active !== true) {
+    return { active: false };
+  }
+  if (typeof body.unionId !== "string" || typeof body.displayName !== "string") {
+    throw new CentralClientError("BAD_RESPONSE", "introspect: active but missing identity");
+  }
+  return { active: true, unionId: body.unionId, displayName: body.displayName };
+}
+async function centralListHubs(opts) {
+  const body = await centralRequest(opts, "/api/clawd-identity/hubs", {
+    method: "GET",
+    bearer: opts.ttcJwt
+  });
+  if (!Array.isArray(body.hubs)) {
+    throw new CentralClientError("BAD_RESPONSE", "hubs: missing hubs array");
+  }
+  const out = [];
+  for (const raw of body.hubs) {
+    const h = raw;
+    if (typeof h.hubId !== "string" || typeof h.name !== "string" || typeof h.url !== "string") {
+      throw new CentralClientError("BAD_RESPONSE", "hubs: malformed hub entry");
+    }
+    out.push({ hubId: h.hubId, name: h.name, url: h.url });
+  }
+  return out;
+}
+
 // src/index.ts
 init_protocol();
 
@@ -39477,9 +39643,9 @@ function buildSessionHandlers(deps) {
     if (ctx && ctx.principal.kind === "guest") {
       const sessions = response.sessions ?? [];
       const peerOwnerId = ctx.peerOwnerPrincipalId;
-      const capId = ctx.capabilityId;
+      const guestId = ctx.principal.id;
       const filtered = sessions.filter((s) => canAccessPersona(ctx.grants, s.ownerPersonaId, "read")).filter(
-        (s) => peerOwnerId ? s.creatorOwnerPrincipalId === peerOwnerId : s.creatorPrincipalId === capId
+        (s) => peerOwnerId ? s.creatorOwnerPrincipalId === peerOwnerId : s.creatorPrincipalId === guestId
       );
       return { response: { type: "session:list", sessions: filtered } };
     }
@@ -39494,69 +39660,7 @@ function buildSessionHandlers(deps) {
   const update = async (frame, _client, ctx) => {
     const args = SessionUpdateArgs.parse(frame);
     ensureSessionAccess(ctx, args.sessionId, "send");
-    const prevFile = manager.findOwnedSession(args.sessionId);
-    const prevProject = prevFile?.appBuilderProject ?? null;
-    const nextProject = args.patch.appBuilderProject ?? prevProject;
     const { response, broadcast } = manager.update(args);
-    if (args.patch.appBuilderProject !== void 0) {
-      deps.logger?.info("session-update.appBuilderProject", {
-        sessionId: args.sessionId,
-        prevProject,
-        nextProject,
-        hasLifecycle: !!deps.devServerLifecycle,
-        hasStore: !!deps.appBuilderStore
-      });
-    }
-    if (deps.devServerLifecycle && deps.appBuilderStore && args.patch.appBuilderProject !== void 0) {
-      const lifecycle = deps.devServerLifecycle;
-      const projectStore = deps.appBuilderStore;
-      const tunnelUrl = deps.getTunnelUrl?.() ?? null;
-      try {
-        if (prevProject && prevProject !== nextProject) {
-          await lifecycle.stopForSession(args.sessionId);
-        }
-        if (nextProject && nextProject !== "") {
-          const occupantSessionId = lifecycle.boundSessionId(nextProject);
-          const alreadyRunningForThisSession = lifecycle.isRunning(nextProject) && occupantSessionId === args.sessionId;
-          deps.logger?.info("session-update.maybe-start-dev-server", {
-            sessionId: args.sessionId,
-            projectName: nextProject,
-            occupantSessionId,
-            alreadyRunningForThisSession
-          });
-          if (!alreadyRunningForThisSession) {
-            if (occupantSessionId && occupantSessionId !== args.sessionId) {
-              await lifecycle.stopForProject(nextProject);
-            }
-            const projects = await projectStore.list();
-            const target = projects.find((p2) => p2.name === nextProject);
-            deps.logger?.info("session-update.start-dev-server", {
-              sessionId: args.sessionId,
-              projectName: nextProject,
-              targetFound: !!target,
-              projectCwd: target ? projectStore.projectDir(nextProject) : null,
-              devCommand: target?.devCommand,
-              tunnelUrl
-            });
-            if (target) {
-              lifecycle.startForSession({
-                sessionId: args.sessionId,
-                projectName: nextProject,
-                cwd: projectStore.projectDir(nextProject),
-                port: target.port,
-                tunnelHost: tunnelUrl ? new URL(tunnelUrl.replace(/^wss?:\/\//i, "https://")).host : null,
-                devCommand: target.devCommand
-              });
-            }
-          }
-        }
-      } catch (err) {
-        deps.logger?.warn("session-update.lifecycle-failed", {
-          sessionId: args.sessionId,
-          error: err instanceof Error ? err.message : String(err)
-        });
-      }
-    }
     return { response: { type: "session:info", ...response }, broadcast };
   };
   const del = async (frame, _client, ctx) => {
@@ -39903,7 +40007,7 @@ function buildHistoryHandlers(deps) {
     const { response: file } = manager.get({ sessionId: args.sessionId });
     const f = file;
     if (ctx && ctx.principal.kind === "guest") {
-      const ok = canAccessPersona(ctx.grants, f.ownerPersonaId, "read") && f.creatorPrincipalId === ctx.capabilityId;
+      const ok = canAccessPersona(ctx.grants, f.ownerPersonaId, "read") && f.creatorPrincipalId === ctx.principal.id;
       if (!ok) {
         throw new ClawdError(
           ERROR_CODES.UNAUTHORIZED,
@@ -40185,7 +40289,7 @@ var DeleteArgsSchema = external_exports.object({
   capabilityId: external_exports.string().min(1)
 }).strict();
 function buildCapabilityHandlers(deps) {
-  const { manager, getShareBaseUrl, getPersonalCapability } = deps;
+  const { manager } = deps;
   const list = async () => {
     return {
       response: {
@@ -40211,27 +40315,15 @@ function buildCapabilityHandlers(deps) {
       }
     };
   };
-  const personalCapGet = async () => {
-    const { token, capability } = getPersonalCapability();
-    return {
-      response: {
-        type: "personal-cap:get:ok",
-        token,
-        capability: stripSecretHash(capability),
-        shareBaseUrl: getShareBaseUrl()
-      }
-    };
-  };
   return {
     "capability:list": list,
-    "capability:delete": del,
-    "personal-cap:get": personalCapGet
+    "capability:delete": del
   };
 }
 
 // src/handlers/inbox.ts
 init_protocol();
-function resolvePeerOwnerId(ctx, argsPeerOwnerId, capManager) {
+function resolvePeerOwnerId(ctx, argsPeerOwnerId) {
   if (ctx.principal.kind === "owner") {
     if (!argsPeerOwnerId) {
       throw new ClawdError(
@@ -40241,18 +40333,11 @@ function resolvePeerOwnerId(ctx, argsPeerOwnerId, capManager) {
     }
     return argsPeerOwnerId;
   }
-  if (!ctx.capabilityId) {
-    throw new ClawdError(ERROR_CODES.UNAUTHORIZED, "inbox: guest ctx missing capabilityId");
-  }
-  let resolved = ctx.peerOwnerPrincipalId;
-  if (!resolved) {
-    const cap = capManager.findById(ctx.capabilityId);
-    resolved = cap?.peerOwnerId;
-  }
+  const resolved = ctx.peerOwnerPrincipalId;
   if (!resolved) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
-      `inbox: guest cap ${ctx.capabilityId} has no peerOwnerPrincipalId (auth frame missing selfPrincipalId)`
+      `inbox: guest ${ctx.principal.id} has no peerOwnerPrincipalId (auth frame missing selfPrincipalId)`
     );
   }
   if (argsPeerOwnerId && argsPeerOwnerId !== resolved) {
@@ -40264,14 +40349,14 @@ function resolvePeerOwnerId(ctx, argsPeerOwnerId, capManager) {
   return resolved;
 }
 function buildInboxHandlers(deps) {
-  const { manager, capManager } = deps;
+  const { manager } = deps;
   const postMessage = async (frame, _client, ctx) => {
     const { type: _t, requestId: _r, ...rest } = frame;
     const args = InboxPostMessageArgsSchema.parse(rest);
     if (!ctx) {
       throw new ClawdError(ERROR_CODES.INTERNAL, "inbox:postMessage: missing ConnectionContext");
     }
-    const peerOwnerId = resolvePeerOwnerId(ctx, args.peerOwnerId, capManager);
+    const peerOwnerId = resolvePeerOwnerId(ctx, args.peerOwnerId);
     const message = manager.postMessage({
       peerOwnerId,
       senderPrincipalId: ctx.principal.id,
@@ -40289,7 +40374,7 @@ function buildInboxHandlers(deps) {
     if (!ctx) {
       throw new ClawdError(ERROR_CODES.INTERNAL, "inbox:list: missing ConnectionContext");
     }
-    const peerOwnerId = resolvePeerOwnerId(ctx, args.peerOwnerId, capManager);
+    const peerOwnerId = resolvePeerOwnerId(ctx, args.peerOwnerId);
     const messages = manager.list(peerOwnerId, args.sinceCreatedAt);
     return {
       response: { type: "inbox:list:ok", peerOwnerId, messages }
@@ -40301,7 +40386,7 @@ function buildInboxHandlers(deps) {
     if (!ctx) {
       throw new ClawdError(ERROR_CODES.INTERNAL, "inbox:markRead: missing ConnectionContext");
     }
-    const peerOwnerId = resolvePeerOwnerId(ctx, args.peerOwnerId, capManager);
+    const peerOwnerId = resolvePeerOwnerId(ctx, args.peerOwnerId);
     const updated = manager.markRead({
       peerOwnerId,
       principalId: ctx.principal.id,
@@ -40323,116 +40408,45 @@ function buildInboxHandlers(deps) {
   };
 }
 
-// src/handlers/received-capability.ts
+// src/handlers/contact.ts
 init_protocol();
 function ensureOwner(ctx) {
   if (!ctx || ctx.principal.kind !== "owner") {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
-      "UNAUTHORIZED: received-capability:* requires owner ctx"
-    );
-  }
-}
-function ensureGuestCtx(ctx) {
-  if (!ctx || ctx.principal.kind !== "guest" || !ctx.capabilityId) {
-    throw new ClawdError(
-      ERROR_CODES.UNAUTHORIZED,
-      "UNAUTHORIZED: received-capability:autoAttach requires guest cap ctx"
+      "UNAUTHORIZED: contact:* requires owner ctx"
     );
   }
 }
-function buildReceivedCapabilityHandlers(deps) {
-  const now = deps.now ?? Date.now;
+function buildContactHandlers(deps) {
   const list = async (_frame, _client, ctx) => {
     ensureOwner(ctx);
     return {
       response: {
-        type: "received-capability:list:ok",
-        receivedCaps: deps.store.list()
+        type: "contact:list:ok",
+        contacts: deps.store.list()
       }
     };
   };
-  const add = async (frame, _client, ctx) => {
-    ensureOwner(ctx);
-    const { type: _t, requestId: _r, ...rest } = frame;
-    const args = ReceivedCapabilityAddArgsSchema.parse(rest);
-    let conn;
-    try {
-      conn = await deps.connectRemote({
-        url: args.remoteUrl,
-        token: args.token,
-        selfPrincipalId: deps.selfPrincipalId(),
-        selfDisplayName: deps.selfDisplayName()
-      });
-    } catch (e) {
-      throw new ClawdError(
-        ERROR_CODES.VALIDATION_ERROR,
-        `INVITE_REMOTE_UNREACHABLE: ${e.message}`
-      );
-    }
-    try {
-      const wh = await conn.whoami();
-      const rc = {
-        ownerPrincipalId: wh.ownerId,
-        ownerDisplayName: wh.displayName,
-        remoteUrl: args.remoteUrl,
-        capabilityId: wh.capabilityId,
-        capabilityToken: args.token,
-        grants: wh.grants,
-        receivedAt: now()
-      };
-      deps.store.upsert(rc);
-      deps.broadcast({ type: "received-capability:added", receivedCap: rc });
-      return {
-        response: { type: "received-capability:add:ok", receivedCap: rc }
-      };
-    } finally {
-      try {
-        conn.close();
-      } catch {
-      }
-    }
-  };
   const remove = async (frame, _client, ctx) => {
     ensureOwner(ctx);
     const { type: _t, requestId: _r, ...rest } = frame;
-    const args = ReceivedCapabilityRemoveArgsSchema.parse(rest);
-    deps.store.remove(args.ownerPrincipalId);
+    const args = ContactRemoveArgsSchema.parse(rest);
+    deps.store.remove(args.principalId);
     deps.broadcast({
-      type: "received-capability:removed",
-      ownerPrincipalId: args.ownerPrincipalId
+      type: "contact:removed",
+      principalId: args.principalId
     });
     return {
       response: {
-        type: "received-capability:remove:ok",
-        ownerPrincipalId: args.ownerPrincipalId
+        type: "contact:remove:ok",
+        principalId: args.principalId
       }
     };
   };
-  const autoAttach = async (frame, _client, ctx) => {
-    ensureGuestCtx(ctx);
-    const { type: _t, requestId: _r, ...rest } = frame;
-    const args = ReceivedCapabilityAutoAttachArgsSchema.parse(rest);
-    const rc = {
-      ownerPrincipalId: args.ownerPrincipalId,
-      ownerDisplayName: args.ownerDisplayName,
-      remoteUrl: args.remoteUrl,
-      capabilityId: args.capabilityId,
-      capabilityToken: args.token,
-      grants: args.grants,
-      receivedAt: now()
-    };
-    deps.store.upsert(rc);
-    deps.broadcast({ type: "received-capability:added", receivedCap: rc });
-    return {
-      response: { type: "received-capability:autoAttach:ok" }
-    };
-  };
   return {
-    "received-capability:list": list,
-    "received-capability:add": add,
-    "received-capability:remove": remove,
-    "received-capability:autoAttach": autoAttach
+    "contact:list": list,
+    "contact:remove": remove
   };
 }
 
@@ -40454,14 +40468,13 @@ function buildWhoamiHandler(deps) {
         usedCount: 0
       };
     } else {
-      if (!ctx.capabilityId) {
-        throw new ClawdError(ERROR_CODES.UNAUTHORIZED, "whoami: guest ctx without capabilityId");
-      }
-      const cap = deps.capabilityManager.findById(ctx.capabilityId);
-      if (!cap) {
-        throw new ClawdError(ERROR_CODES.UNAUTHORIZED, `whoami: capability not found: ${ctx.capabilityId}`);
-      }
-      capability = stripSecretHash(cap);
+      capability = {
+        id: ctx.principal.id,
+        displayName: ctx.principal.displayName ?? "guest",
+        grants: ctx.grants,
+        issuedAt: 0,
+        usedCount: 0
+      };
     }
     const grantedPersonas = [];
     const isGuest = ctx.principal.kind === "guest";
@@ -40492,6 +40505,116 @@ function buildWhoamiHandler(deps) {
   };
 }
 
+// src/handlers/feishu-auth.ts
+function buildFeishuAuthHandlers(deps) {
+  const loginStart = async () => {
+    const { authUrl, state } = deps.loginFlow.start();
+    return {
+      response: { type: "auth:login:start:ok", authUrl, state }
+    };
+  };
+  const getIdentity = async () => {
+    const record = deps.ownerIdentityStore.read();
+    return {
+      response: {
+        type: "auth:getIdentity:ok",
+        identity: record ? record.identity : null
+      }
+    };
+  };
+  const logout = async () => {
+    deps.ownerIdentityStore.clear();
+    return {
+      response: { type: "auth:logout:ok" }
+    };
+  };
+  return {
+    "auth:login:start": loginStart,
+    "auth:getIdentity": getIdentity,
+    "auth:logout": logout
+  };
+}
+
+// src/handlers/hub.ts
+init_protocol();
+function ensureOwner2(ctx) {
+  if (!ctx || ctx.principal.kind !== "owner") {
+    throw new ClawdError(ERROR_CODES.UNAUTHORIZED, "UNAUTHORIZED: hub:* requires owner ctx");
+  }
+}
+function buildHubHandlers(deps) {
+  const now = deps.now ?? Date.now;
+  const list = async (_frame, _client, ctx) => {
+    ensureOwner2(ctx);
+    const hubs = await deps.listHubs();
+    return {
+      response: { type: "hub:list:ok", hubs }
+    };
+  };
+  const connect = async (frame, _client, ctx) => {
+    ensureOwner2(ctx);
+    const { type: _t, requestId: _r, ...rest } = frame;
+    const args = HubConnectArgsSchema.parse(rest);
+    const exchanged = await deps.exchange(args.hubId);
+    const url = args.url ?? exchanged.hubUrl;
+    if (!url) {
+      throw new ClawdError(
+        ERROR_CODES.VALIDATION_ERROR,
+        "HUB_URL_UNKNOWN: hub \u672A\u4E0A\u62A5\u5730\u5740\uFF08\u5BF9\u65B9 daemon \u672A\u767B\u5F55\u6216\u672A\u5F00 tunnel\uFF09\uFF0C\u65E0\u6CD5\u8FDE\u63A5"
+      );
+    }
+    let conn;
+    try {
+      conn = await deps.connectRemote({
+        url,
+        token: exchanged.token,
+        selfPrincipalId: deps.selfPrincipalId(),
+        selfDisplayName: deps.selfDisplayName(),
+        // Phase 2 自动反向（spec 决策 #11）：自报本机可达地址，让 hub 反向加我为联系人；
+        // 本机无 tunnel → null → connectRemote 省略 selfUrl 字段（不造假数据）
+        selfUrl: deps.selfUrl() ?? void 0
+      });
+    } catch (e) {
+      throw new ClawdError(
+        ERROR_CODES.VALIDATION_ERROR,
+        `HUB_UNREACHABLE: ${e.message}`
+      );
+    }
+    try {
+      const wh = await conn.whoami();
+      const contact = {
+        principalId: wh.ownerId,
+        displayName: wh.displayName || args.name || args.hubId,
+        remoteUrl: url,
+        // Phase 2：connectToken 存中心 server 签发的 connect token（断线重连复用，
+        // 不需要重新换票——token 长期有效，撤销由中心 server introspect 兜底）
+        connectToken: exchanged.token,
+        grants: wh.grants,
+        addedAt: now()
+      };
+      deps.store.upsert(contact);
+      deps.broadcast({ type: "contact:added", contact });
+      return {
+        response: {
+          type: "hub:connect:ok",
+          hubId: wh.ownerId,
+          name: contact.displayName,
+          url
+        }
+      };
+    } finally {
+      try {
+        conn.close();
+      } catch {
+      }
+    }
+  };
+  return {
+    "hub:list": list,
+    "hub:connect": connect
+  };
+}
+
 // src/handlers/meta.ts
 var import_node_os15 = __toESM(require("os"), 1);
 init_protocol();
@@ -41452,62 +41575,6 @@ function buildExtensionHandlers(deps) {
   };
 }
 
-// src/handlers/app-builder.ts
-function buildAppBuilderHandlers(deps) {
-  const { store, deleteSessionsByProject, devServerLifecycle } = deps;
-  const listProjects = async () => {
-    const projects = await store.list();
-    return {
-      response: {
-        projects: projects.map((p2) => ({
-          ...p2,
-          isRunning: devServerLifecycle.isRunning(p2.name),
-          boundSessionId: devServerLifecycle.boundSessionId(p2.name)
-        }))
-      }
-    };
-  };
-  const createProject = async (frame) => {
-    const name = frame.name;
-    if (typeof name !== "string") throw new Error("createProject: name must be string");
-    const project = await store.create(name);
-    return { response: { project } };
-  };
-  const deleteProject = async (frame) => {
-    const name = frame.name;
-    if (typeof name !== "string") throw new Error("deleteProject: name must be string");
-    await devServerLifecycle.stopForProject(name);
-    await deleteSessionsByProject(name);
-    await store.delete(name);
-    return { response: {} };
-  };
-  const updateProjectPort = async (frame) => {
-    const f = frame;
-    if (typeof f.name !== "string") throw new Error("updateProjectPort: name must be string");
-    if (typeof f.newPort !== "number") throw new Error("updateProjectPort: newPort must be number");
-    const entry = devServerLifecycle.boundEntry(f.name);
-    await devServerLifecycle.stopForProject(f.name);
-    const project = await store.updatePort(f.name, f.newPort);
-    if (entry) {
-      await devServerLifecycle.restartForProjectAt({
-        projectName: f.name,
-        newPort: f.newPort,
-        sessionId: entry.sessionId,
-        cwd: entry.cwd,
-        tunnelHost: entry.tunnelHost,
-        devCommand: entry.devCommand
-      });
-    }
-    return { response: { project } };
-  };
-  return {
-    "appBuilder:listProjects": listProjects,
-    "appBuilder:createProject": createProject,
-    "appBuilder:deleteProject": deleteProject,
-    "appBuilder:updateProjectPort": updateProjectPort
-  };
-}
-
 // src/extension/registry.ts
 var import_promises8 = __toESM(require("fs/promises"), 1);
 var import_node_path39 = __toESM(require("path"), 1);
@@ -41596,13 +41663,7 @@ async function uninstall(deps) {
 // src/handlers/index.ts
 function buildMethodHandlers(deps) {
   return {
-    ...buildSessionHandlers({
-      ...deps,
-      devServerLifecycle: deps.devServerLifecycle,
-      appBuilderStore: deps.appBuilderStore,
-      getTunnelUrl: deps.getTunnelUrl,
-      logger: deps.logger
-    }),
+    ...buildSessionHandlers(deps),
     ...buildPermissionHandlers(deps),
     ...buildHistoryHandlers(deps),
     ...buildWorkspaceHandlers(deps),
@@ -41614,20 +41675,14 @@ function buildMethodHandlers(deps) {
       personaRegistry: deps.personaRegistry
     }),
     ...buildCapabilityHandlers({
-      manager: deps.capabilityManager,
-      getShareBaseUrl: deps.getShareBaseUrl,
-      getPersonalCapability: deps.getPersonalCapability
+      manager: deps.capabilityManager
     }),
     ...buildInboxHandlers({
-      manager: deps.inboxManager,
-      capManager: deps.capabilityManager
+      manager: deps.inboxManager
     }),
-    ...buildReceivedCapabilityHandlers({
-      store: deps.receivedCapabilityStore,
-      connectRemote: deps.connectRemote,
-      broadcast: deps.broadcastToOwners,
-      selfPrincipalId: () => deps.ownerPrincipalId,
-      selfDisplayName: () => deps.ownerDisplayName
+    ...buildContactHandlers({
+      store: deps.contactStore,
+      broadcast: deps.broadcastToOwners
     }),
     whoami: buildWhoamiHandler({
       ownerDisplayName: deps.ownerDisplayName,
@@ -41635,6 +41690,8 @@ function buildMethodHandlers(deps) {
       personaStore: deps.personaStore,
       capabilityManager: deps.capabilityManager
     }),
+    ...buildFeishuAuthHandlers(deps.feishuAuth),
+    ...buildHubHandlers(deps.feishuHub),
     ...deps.attachment ? buildAttachmentHandlers(deps.attachment) : {},
     ...buildExtensionHandlers({
       loadAll,
@@ -41643,254 +41700,10 @@ function buildMethodHandlers(deps) {
       root: extensionsRoot(),
       publishedChannelStore: deps.publishedChannelStore,
       bundleCache: deps.bundleCache
-    }),
-    ...buildAppBuilderHandlers({
-      store: deps.appBuilderStore,
-      deleteSessionsByProject: deps.deleteSessionsByProject,
-      devServerLifecycle: deps.devServerLifecycle
     })
   };
 }
 
-// src/app-builder/project-store.ts
-var import_node_fs29 = require("fs");
-var import_node_path41 = require("path");
-init_protocol();
-var PROJECTS_DIR = "projects";
-var META_FILE = ".clawd-project.json";
-var ProjectStore = class {
-  /** @param personaRoot persona 目录，例如 `~/.clawd/personas/persona-app-builder/` */
-  constructor(personaRoot) {
-    this.personaRoot = personaRoot;
-  }
-  personaRoot;
-  /** projects/<name>/.clawd-project.json 路径 */
-  metaPath(name) {
-    return (0, import_node_path41.join)(this.projectsRoot(), name, META_FILE);
-  }
-  /** projects/<name>/ 目录路径（cwd 用） */
-  projectDir(name) {
-    return (0, import_node_path41.join)(this.projectsRoot(), name);
-  }
-  projectsRoot() {
-    return (0, import_node_path41.join)(this.personaRoot, PROJECTS_DIR);
-  }
-  async list() {
-    let entries;
-    try {
-      entries = await import_node_fs29.promises.readdir(this.projectsRoot());
-    } catch (err) {
-      if (err.code === "ENOENT") return [];
-      throw err;
-    }
-    const out = [];
-    for (const name of entries) {
-      try {
-        const raw = await import_node_fs29.promises.readFile(this.metaPath(name), "utf8");
-        const json = JSON.parse(raw);
-        let migrated = false;
-        if (typeof json.devCommand !== "string" || json.devCommand.length === 0) {
-          json.devCommand = DEFAULT_DEV_COMMAND;
-          migrated = true;
-        }
-        const parsed = ProjectMetadataSchema.safeParse(json);
-        if (parsed.success) {
-          out.push(parsed.data);
-          if (migrated) {
-            void import_node_fs29.promises.writeFile(this.metaPath(name), JSON.stringify(parsed.data, null, 2) + "\n", "utf8").catch(() => {
-            });
-          }
-        }
-      } catch {
-      }
-    }
-    return out.sort((a, b2) => a.name.localeCompare(b2.name));
-  }
-  async create(name) {
-    const existing = await this.list();
-    if (existing.some((p2) => p2.name === name)) {
-      throw new Error(`project "${name}" already exists / \u5DF2\u5B58\u5728`);
-    }
-    const usedPorts = new Set(existing.map((p2) => p2.port));
-    let port = -1;
-    for (let p2 = PROJECT_PORT_MIN; p2 <= PROJECT_PORT_MAX; p2++) {
-      if (!usedPorts.has(p2)) {
-        port = p2;
-        break;
-      }
-    }
-    if (port < 0) {
-      throw new Error(
-        `port pool exhausted / \u7AEF\u53E3\u6C60\u5DF2\u6EE1\uFF08${PROJECT_PORT_MIN}-${PROJECT_PORT_MAX}\uFF09\uFF0C\u5148\u5220\u4E00\u4E2A project \u91CA\u653E\u7AEF\u53E3`
-      );
-    }
-    const meta = {
-      name,
-      port,
-      createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-      devCommand: DEFAULT_DEV_COMMAND
-    };
-    const validated = ProjectMetadataSchema.safeParse(meta);
-    if (!validated.success) {
-      throw new Error(`invalid name "${name}": ${validated.error.message}`);
-    }
-    const dir = this.projectDir(name);
-    await import_node_fs29.promises.mkdir(dir, { recursive: true });
-    await import_node_fs29.promises.writeFile(this.metaPath(name), JSON.stringify(meta, null, 2) + "\n", "utf8");
-    return meta;
-  }
-  async delete(name) {
-    const dir = this.projectDir(name);
-    await import_node_fs29.promises.rm(dir, { recursive: true, force: true });
-  }
-  async updatePort(name, newPort) {
-    if (newPort < PROJECT_PORT_MIN || newPort > PROJECT_PORT_MAX) {
-      throw new Error(
-        `port range invalid: must be ${PROJECT_PORT_MIN}-${PROJECT_PORT_MAX}, got ${newPort}`
-      );
-    }
-    const list = await this.list();
-    const target = list.find((p2) => p2.name === name);
-    if (!target) throw new Error(`project "${name}" not found / \u4E0D\u5B58\u5728`);
-    const conflict = list.find((p2) => p2.name !== name && p2.port === newPort);
-    if (conflict) {
-      throw new Error(`port ${newPort} already used / \u5DF2\u88AB project "${conflict.name}" \u5360\u7528`);
-    }
-    const updated = { ...target, port: newPort };
-    await import_node_fs29.promises.writeFile(this.metaPath(name), JSON.stringify(updated, null, 2) + "\n", "utf8");
-    return updated;
-  }
-};
-
-// src/app-builder/dev-server-supervisor.ts
-var import_node_child_process7 = require("child_process");
-var import_node_events2 = require("events");
-var DevServerSupervisor = class extends import_node_events2.EventEmitter {
-  running = /* @__PURE__ */ new Map();
-  // key: sessionId
-  logger = { warn: () => {
-  }, info: () => {
-  } };
-  /** daemon entry 启动后注入 logger，让 child 输出走 clawd.log */
-  setLogger(logger) {
-    this.logger = logger;
-  }
-  startForSession(args) {
-    if (this.running.has(args.sessionId)) return;
-    const augmentedPath = [
-      process.env.PATH ?? "",
-      "/opt/homebrew/bin",
-      "/usr/local/bin",
-      `${process.env.HOME}/.nvm/versions/node`,
-      `${process.env.HOME}/.local/share/pnpm`
-    ].filter(Boolean).join(":");
-    const env = {
-      ...process.env,
-      PATH: augmentedPath,
-      CLAWD_TUNNEL_HOST: args.tunnelHost ?? "",
-      CLAWD_PREVIEW_PORT: String(args.port)
-    };
-    const cmd = args.devCommand.replace(/\$CLAWD_PREVIEW_PORT/g, String(args.port));
-    this.logger.info("dev-server.start", {
-      projectName: args.projectName,
-      port: args.port,
-      cwd: args.cwd,
-      sessionId: args.sessionId,
-      tunnelHost: args.tunnelHost,
-      devCommand: cmd
-    });
-    const child = (0, import_node_child_process7.spawn)("sh", ["-c", cmd], { cwd: args.cwd, env, stdio: "pipe" });
-    const entry = { ...args, process: child };
-    this.running.set(args.sessionId, entry);
-    child.stdout?.on("data", (chunk) => {
-      this.logger.info("dev-server.stdout", {
-        projectName: args.projectName,
-        port: args.port,
-        chunk: chunk.toString().trimEnd()
-      });
-    });
-    child.stderr?.on("data", (chunk) => {
-      this.logger.warn("dev-server.stderr", {
-        projectName: args.projectName,
-        port: args.port,
-        chunk: chunk.toString().trimEnd()
-      });
-    });
-    child.on("error", (err) => {
-      this.running.delete(args.sessionId);
-      this.logger.warn("dev-server.spawn-failed", {
-        projectName: args.projectName,
-        port: args.port,
-        error: err.message,
-        code: err.code
-      });
-      this.emit("devServer:failed", {
-        sessionId: args.sessionId,
-        projectName: args.projectName,
-        port: args.port,
-        exitCode: null
-      });
-    });
-    child.on("exit", (code) => {
-      this.running.delete(args.sessionId);
-      this.logger.info("dev-server.exit", { projectName: args.projectName, port: args.port, code });
-      if (code !== 0 && code !== null) {
-        this.emit("devServer:failed", {
-          sessionId: args.sessionId,
-          projectName: args.projectName,
-          port: args.port,
-          exitCode: code
-        });
-      }
-    });
-  }
-  stopForSession(sessionId) {
-    const entry = this.running.get(sessionId);
-    if (!entry) return Promise.resolve();
-    return new Promise((resolve6) => {
-      entry.process.once("exit", () => {
-        this.running.delete(sessionId);
-        resolve6();
-      });
-      entry.process.kill("SIGTERM");
-    });
-  }
-  async stopForProject(projectName) {
-    const entry = [...this.running.values()].find((e) => e.projectName === projectName);
-    if (!entry) return;
-    await this.stopForSession(entry.sessionId);
-  }
-  async restartForProjectAt(args) {
-    await this.stopForSession(args.sessionId);
-    this.startForSession({
-      sessionId: args.sessionId,
-      projectName: args.projectName,
-      port: args.newPort,
-      cwd: args.cwd,
-      tunnelHost: args.tunnelHost,
-      devCommand: args.devCommand
-    });
-  }
-  isRunning(projectName) {
-    return [...this.running.values()].some((e) => e.projectName === projectName);
-  }
-  boundSessionId(projectName) {
-    const entry = [...this.running.values()].find((e) => e.projectName === projectName);
-    return entry?.sessionId ?? null;
-  }
-  boundEntry(projectName) {
-    const entry = [...this.running.values()].find((e) => e.projectName === projectName);
-    if (!entry) return null;
-    return {
-      sessionId: entry.sessionId,
-      cwd: entry.cwd,
-      port: entry.port,
-      tunnelHost: entry.tunnelHost,
-      devCommand: entry.devCommand
-    };
-  }
-};
-
 // src/handlers/method-grants.ts
 var ADMIN_ANY = {
   kind: "fixed",
@@ -41907,23 +41720,22 @@ var METHOD_GRANT_MAP = {
   // "查 capabilityManager 拿 caller 的 guest capability"。
   "whoami": { kind: "public" },
   // ---- capability platform（admin-only） ----
-  // global personal token (2026-05-25): capability:issue / bindPeer 已下线；
-  // personal capability 由 daemon 启动时自动创建，personal-cap:get 是 owner-only 拿 token + shareBaseUrl
+  // 飞书统一身份 Phase 2 (2026-06-01, spec 决策 #12): personal-cap:get / capability:issue /
+  // bindPeer 已下线（personal token / 邀请码全链路删除）。capability:list / delete 保留供调试 +
+  // 撤销级联 + 清旧 per-peer cap。
   "capability:list": ADMIN_ANY,
   "capability:delete": ADMIN_ANY,
-  "personal-cap:get": ADMIN_ANY,
-  // ---- inbox: channel-based IM (capability platform v3) ----
-  // 三条都 'public' — capability 本身就是授权凭证. handler 内额外校验
-  // guest ctx.capabilityId === args.capabilityId, 防 guest 越权操作别的 channel.
+  // ---- inbox: 双投 P2P IM ----
+  // 三条都 'public' — 能连上 = 已通过 introspect 验票. handler 内额外校验
+  // guest peerOwnerId 与 ctx.peerOwnerPrincipalId 一致, 防 guest 越权操作别的 DM 桶.
   "inbox:list": { kind: "public" },
   "inbox:markRead": { kind: "public" },
   "inbox:postMessage": { kind: "public" },
-  // ---- received-capability:* (bidirectional cap 视角 B 2026-05-23) ----
-  // owner-only: list / add / remove；guest-only: autoAttach (capability 本身是凭证)
-  "received-capability:list": ADMIN_ANY,
-  "received-capability:add": ADMIN_ANY,
-  "received-capability:remove": ADMIN_ANY,
-  "received-capability:autoAttach": { kind: "public" },
+  // ---- contact:* (联系人列表) ----
+  // 飞书统一身份 Phase 3 (决策 #14): received-capability:* 正名 contact:*。
+  // 写入路径在 hub:connect / 自动反向；list / remove 作联系人读 / 删，owner-only。
+  "contact:list": ADMIN_ANY,
+  "contact:remove": ADMIN_ANY,
   // ---- session:* / chat:* 业务方法（v2 Phase 8 两层模型）----
   // dispatcher 不验资源，handler 内按 ctx + frame.args 反查 ownerPersonaId 调 assertGrant。
   // owner 自动通过（ctx 自带 '*':'admin' grant 一切 match）；guest 在被授权 persona 内可调。
@@ -41964,7 +41776,7 @@ var METHOD_GRANT_MAP = {
   "history:list": CAPABILITY_SCOPED,
   // history:read 取一条 session 的 CC JSONL 历史。guest 进 persona VM 后必须能读自己
   // 创建的 session 历史（chat view 加载历史消息走这条），所以下沉到 capability-scoped；
-  // handler 内按 ctx.capabilityId === file.creatorPrincipalId 拦越权。
+  // handler 内按 ctx.principal.id === file.creatorPrincipalId 拦越权。
   "history:read": CAPABILITY_SCOPED,
   "history:subagents": CAPABILITY_SCOPED,
   "history:subagent-read": CAPABILITY_SCOPED,
@@ -42021,14 +41833,15 @@ var METHOD_GRANT_MAP = {
   // guest-self：guest 在自己 daemon 上触发安装与更新（无持久化 subscription 概念）
   "extension.install-from-channel": ADMIN_ANY,
   "extension.update-from-channel": ADMIN_ANY,
-  // ---- app-builder Project picker（spec 2026-06-01-app-builder-project-picker-design） ----
-  // owner-only：picker UI 给 owner 管理本机 build 中的 project（fs + 端口分配）。
-  // 即使 persona-app-builder 是 PreinstalledPersona，project 管理也属本机 owner 行为，
-  // 不暴露给 guest（远端接入者）。
-  "appBuilder:listProjects": ADMIN_ANY,
-  "appBuilder:createProject": ADMIN_ANY,
-  "appBuilder:deleteProject": ADMIN_ANY,
-  "appBuilder:updateProjectPort": ADMIN_ANY
+  // ---- auth:* 飞书统一身份 Phase 1（owner-only） ----
+  // 登录/登出/查身份都是 owner 本机操作，guest 不可调
+  "auth:login:start": ADMIN_ANY,
+  "auth:getIdentity": ADMIN_ANY,
+  "auth:logout": ADMIN_ANY,
+  // ---- hub:* 飞书统一身份 Phase 2（owner-only） ----
+  // hub 目录 / 连接都是 owner 本机操作（用 owner 的 ttcJwt 找中心 server），guest 不可调
+  "hub:list": ADMIN_ANY,
+  "hub:connect": ADMIN_ANY
 };
 function computeGrantForFrame(method, frame) {
   const rule = METHOD_GRANT_MAP[method];
@@ -42044,12 +41857,12 @@ function computeGrantForFrame(method, frame) {
 }
 
 // src/extension/runtime.ts
-var import_node_child_process8 = require("child_process");
-var import_node_path42 = __toESM(require("path"), 1);
+var import_node_child_process7 = require("child_process");
+var import_node_path41 = __toESM(require("path"), 1);
 var import_promises10 = require("timers/promises");
 
 // src/extension/port-allocator.ts
-var import_node_net2 = __toESM(require("net"), 1);
+var import_node_net = __toESM(require("net"), 1);
 var PortExhaustedError = class extends Error {
   constructor(min, max) {
     super(`no free port in [${min},${max}]`);
@@ -42062,7 +41875,7 @@ var PortExhaustedError = class extends Error {
 };
 function probe(port) {
   return new Promise((resolve6) => {
-    const srv = import_node_net2.default.createServer();
+    const srv = import_node_net.default.createServer();
     srv.once("error", () => resolve6(false));
     srv.once("listening", () => {
       srv.close(() => resolve6(true));
@@ -42146,13 +41959,13 @@ var Runtime = class {
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
-    const dir = import_node_path42.default.join(this.root, extId);
+    const dir = import_node_path41.default.join(this.root, extId);
     const env = {
       ...process.env,
       CLAWOS_EXT_PORT: String(port),
       CLAWOS_EXT_ID: extId
     };
-    const child = (0, import_node_child_process8.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process7.spawn)("sh", ["-c", cmd], {
       cwd: dir,
       env,
       stdio: ["ignore", "pipe", "pipe"],
@@ -42258,7 +42071,7 @@ ${handle.stderrTail}`
 
 // src/extension/published-channels.ts
 var import_promises11 = __toESM(require("fs/promises"), 1);
-var import_node_path43 = __toESM(require("path"), 1);
+var import_node_path42 = __toESM(require("path"), 1);
 init_zod();
 var PublishedChannelsError = class extends Error {
   constructor(code, message) {
@@ -42357,7 +42170,7 @@ var PublishedChannelStore = class {
       )
     };
     const tmp = `${this.filePath}.tmp`;
-    await import_promises11.default.mkdir(import_node_path43.default.dirname(this.filePath), { recursive: true });
+    await import_promises11.default.mkdir(import_node_path42.default.dirname(this.filePath), { recursive: true });
     await import_promises11.default.writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
     await import_promises11.default.rename(tmp, this.filePath);
   }
@@ -42365,7 +42178,7 @@ var PublishedChannelStore = class {
 
 // src/extension/bundle-cache.ts
 var import_promises12 = __toESM(require("fs/promises"), 1);
-var import_node_path44 = __toESM(require("path"), 1);
+var import_node_path43 = __toESM(require("path"), 1);
 var BundleCache = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
@@ -42374,14 +42187,14 @@ var BundleCache = class {
   /** Atomic write: stage tmp → rename. Caller passes the hex sha256. */
   async write(snapshotHash, buffer) {
     await import_promises12.default.mkdir(this.rootDir, { recursive: true });
-    const file = import_node_path44.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path43.default.join(this.rootDir, `${snapshotHash}.zip`);
     const tmp = `${file}.tmp`;
     await import_promises12.default.writeFile(tmp, buffer, { mode: 384 });
     await import_promises12.default.rename(tmp, file);
   }
   /** Returns the bundle bytes, or null when the file doesn't exist. */
   async read(snapshotHash) {
-    const file = import_node_path44.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path43.default.join(this.rootDir, `${snapshotHash}.zip`);
     try {
       return await import_promises12.default.readFile(file);
     } catch (e) {
@@ -42391,7 +42204,7 @@ var BundleCache = class {
   }
   /** Idempotent — missing file is not an error. */
   async delete(snapshotHash) {
-    const file = import_node_path44.default.join(this.rootDir, `${snapshotHash}.zip`);
+    const file = import_node_path43.default.join(this.rootDir, `${snapshotHash}.zip`);
     await import_promises12.default.rm(file, { force: true });
   }
 };
@@ -42400,7 +42213,7 @@ var BundleCache = class {
 async function startDaemon(config) {
   const logger = createLogger({
     level: config.logLevel,
-    file: import_node_path45.default.join(config.dataDir, "clawd.log")
+    file: import_node_path44.default.join(config.dataDir, "clawd.log")
   });
   logger.info("starting clawd", { version, config: { port: config.port, host: config.host, dataDir: config.dataDir } });
   const stateMgr = new StateFileManager({ dataDir: config.dataDir });
@@ -42418,19 +42231,20 @@ async function startDaemon(config) {
   } else if (config.tunnel) {
     resolvedAuthToken = authFile.token;
   }
-  const ownerPrincipalId = authFile.ownerPrincipalId;
-  const ownerDisplayName = loadOwnerDisplayName(config.dataDir);
+  const ownerIdentityStore = new OwnerIdentityStore(config.dataDir);
+  const feishuIdentity = ownerIdentityStore.read();
+  let feishuActive = feishuIdentity !== null;
+  let ownerPrincipalId = feishuIdentity?.identity.unionId ?? authFile.ownerPrincipalId;
+  let ownerDisplayName = feishuIdentity?.identity.displayName ?? loadOwnerDisplayName(config.dataDir);
   const authMode = resolvedAuthToken == null ? "none" : "first-message";
   const inboxStore = new InboxStore(config.dataDir);
   const inboxManager = new InboxManager(inboxStore, (_peerOwnerId, frame) => {
     wsServer?.broadcastToOwners(frame);
   });
-  const receivedCapabilityStore = new ReceivedCapabilityStore(config.dataDir);
-  receivedCapabilityStore.load();
+  const contactStore = new ContactStore(config.dataDir);
+  contactStore.load();
   const capabilityStore = new CapabilityStore(config.dataDir);
   const capabilityRegistry = new CapabilityRegistry(capabilityStore);
-  const personalCapability = loadOrCreatePersonalCapability({ dataDir: config.dataDir });
-  capabilityRegistry.upsertCapability(personalCapability.capability);
   const capabilityManager = new CapabilityManager(capabilityRegistry, {
     onDeleted: (cap) => {
       const deletedAt = Date.now();
@@ -42439,7 +42253,7 @@ async function startDaemon(config) {
         capabilityId: cap.id,
         deletedAt
       });
-      wsServer?.closeConnectionsByCapability(cap.id);
+      wsServer?.closeConnectionsByGuestId(cap.id);
       const cleanup = cleanupGuestSessionsForCapability(cap, sessionStoreFactory);
       if (cleanup.removed.length > 0) {
         logger.info("capability delete cascade: guest sessions removed", {
@@ -42456,15 +42270,36 @@ async function startDaemon(config) {
     // Task 1.7：authenticate 注入路径替代 expectedToken 单 token 比对。
     // owner 路径 constantTimeEqual 防侧信道；guest 路径走 capabilityRegistry.
     expectedToken: resolvedAuthToken,
-    authenticate: (t, selfPrincipalId, selfDisplayName) => {
-      return authenticate(t, {
+    authenticate: async (t, _selfPrincipalId, _selfDisplayName, selfUrl) => {
+      const result = await authenticate(t, {
         isOwnerToken: (x) => resolvedAuthToken != null && constantTimeEqual(x, resolvedAuthToken),
         ownerPrincipalId,
         ownerDisplayName,
-        capabilityRegistry,
-        selfPrincipalId,
-        selfDisplayName
+        // 飞书 gate（spec 决策 #9）：未激活飞书身份时不接受 guest 入站（不注入 introspect
+        // → 一律 BAD_TOKEN）。已激活时 hub 用自己的 ttcJwt 做验票方认证；
+        // ttcJwt 每次验票时从 store 现读（热切换后立即用新身份）。
+        ...feishuActive ? {
+          introspectConnectToken: async (token) => {
+            const record = ownerIdentityStore.read();
+            if (!record) return { active: false };
+            return centralIntrospect({
+              api: config.clawosApi ?? DEFAULT_CLAWOS_API,
+              hubTtcJwt: record.ttcToken,
+              token
+            });
+          }
+        } : {}
       });
+      if (result.ok && result.context.principal.kind === "guest") {
+        autoReverseContact({
+          store: contactStore,
+          broadcast: (frame) => wsServer?.broadcastToOwners(frame),
+          unionId: result.context.principal.id,
+          displayName: result.context.principal.displayName ?? result.context.principal.id,
+          selfUrl
+        });
+      }
+      return result;
     },
     onAuthed: (h, ctx) => wsServer?.attachClientContext(h.id, ctx),
     buildOwnerContext: () => ownerContext(ownerPrincipalId, ownerDisplayName),
@@ -42487,7 +42322,7 @@ async function startDaemon(config) {
   const agents = new AgentsScanner();
   const history = new ClaudeHistoryReader();
   let transport = null;
-  const personaStore = new PersonaStore(import_node_path45.default.join(config.dataDir, "personas"));
+  const personaStore = new PersonaStore(import_node_path44.default.join(config.dataDir, "personas"));
   const defaultsRoot = findDefaultsRoot();
   if (defaultsRoot) {
     seedDefaultPersonas({ store: personaStore, defaultsRoot, logger });
@@ -42504,7 +42339,7 @@ async function startDaemon(config) {
     getAdapter,
     historyReader: history,
     dataDir: config.dataDir,
-    personaRoot: import_node_path45.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path44.default.join(config.dataDir, "personas"),
     personaStore,
     ownerDisplayName,
     ownerPrincipalId,
@@ -42528,10 +42363,10 @@ async function startDaemon(config) {
     // 文件可能 agent 写完又被自己删（罕见），用 size=0 / fallback mime 兜底。
     attachmentGroup: {
       onFileEdit: (input) => {
-        const absPath = import_node_path45.default.isAbsolute(input.relPath) ? input.relPath : import_node_path45.default.join(input.cwd, input.relPath);
+        const absPath = import_node_path44.default.isAbsolute(input.relPath) ? input.relPath : import_node_path44.default.join(input.cwd, input.relPath);
         let size = 0;
         try {
-          size = import_node_fs30.default.statSync(absPath).size;
+          size = import_node_fs29.default.statSync(absPath).size;
         } catch (err) {
           logger.warn("attachment.onFileEdit stat failed", {
             sessionId: input.sessionId,
@@ -42614,23 +42449,33 @@ async function startDaemon(config) {
     }
     return `http://${config.host}:${config.port}`;
   };
+  const reportHubUrl = async () => {
+    if (!feishuActive || !currentTunnelUrl) return;
+    const record = ownerIdentityStore.read();
+    if (!record) return;
+    try {
+      await centralUpsertHub({
+        api: config.clawosApi ?? DEFAULT_CLAWOS_API,
+        ttcJwt: record.ttcToken,
+        url: currentTunnelUrl,
+        name: ownerDisplayName
+      });
+      logger.info("hub url reported to central server", { url: currentTunnelUrl });
+    } catch (err) {
+      logger.warn("hub url report failed (best-effort)", { err: err.message });
+    }
+  };
   const extensionRuntime = new Runtime({ root: extensionsRoot() });
   const publishedChannelStore = new PublishedChannelStore(publishedChannelsFile());
   await publishedChannelStore.load();
   const bundleCache = new BundleCache(bundleCacheRoot());
-  const appBuilderStore = new ProjectStore(
-    import_node_path45.default.join(config.dataDir, "personas/persona-app-builder")
-  );
-  const devServerSupervisor = new DevServerSupervisor();
-  devServerSupervisor.setLogger(logger);
-  const appBuilderPortRange = [];
-  for (let p2 = PROJECT_PORT_MIN; p2 <= PROJECT_PORT_MAX; p2++) appBuilderPortRange.push(p2);
-  const effectivePreviewPorts = Array.from(
-    /* @__PURE__ */ new Set([...config.previewPorts ?? [], ...appBuilderPortRange])
-  );
-  const deleteSessionsByProject = async (_name) => {
-  };
-  const handlers = buildMethodHandlers({
+  const loginFlow = new LoginFlow({
+    store: ownerIdentityStore,
+    fetchUserInfo: (ttcToken) => fetchTtcUserInfo({ apiBase: TTC_HOSTS.api, token: ttcToken }),
+    ttcAuthBase: TTC_HOSTS.auth,
+    getCallbackUrl: () => `http://127.0.0.1:${config.port}/auth/callback`
+  });
+  const makeHandlers = () => buildMethodHandlers({
     manager,
     workspace,
     skills,
@@ -42669,17 +42514,12 @@ async function startDaemon(config) {
       // 'persona/<pid>/owner'，default 走 'default'。
       getSessionScope: (sid) => manager.findOwnedSessionScope(sid),
       // guest path guard：candidate 必须在 personaRoot 子树下
-      personaRoot: import_node_path45.default.join(config.dataDir, "personas")
+      personaRoot: import_node_path44.default.join(config.dataDir, "personas")
     },
     // workspace/git/history/skills/agents handler 共用的 guest path guard 锚点
-    personaRoot: import_node_path45.default.join(config.dataDir, "personas"),
+    personaRoot: import_node_path44.default.join(config.dataDir, "personas"),
     // capability:list / delete handler 依赖
     capabilityManager,
-    // personal-cap:get 返回的 shareBaseUrl 用此 base URL：
-    // tunnel 拉起后切到反代 wss://... 地址；否则本机 ws://host:port。
-    getShareBaseUrl: () => currentTunnelUrl ?? `ws://${config.host}:${config.port}`,
-    // global personal token (2026-05-25): personal-cap:get handler 直接返回此 token + cap
-    getPersonalCapability: () => personalCapability,
     // v2 Phase 6: whoami handler 装在 owner principal.displayName + persona 解析
     ownerDisplayName,
     // owner-id stabilization: whoami 用稳定 ownerPrincipalId 替代 'owner' 字面量
@@ -42691,24 +42531,55 @@ async function startDaemon(config) {
     // cascade 接 store (list 统计 deletedInboxEvents).
     inboxManager,
     inboxStore,
-    // bidirectional cap 视角 B: 对方颁给我的 cap 走这个 store
-    receivedCapabilityStore,
-    // received-capability:added / removed broadcast；复用 capability:tokenIssued 同款通路
+    // 联系人列表 store（hub:connect / 自动反向落同一 store）
+    contactStore,
+    // contact:removed broadcast；复用 capability:tokenIssued 同款通路
     broadcastToOwners: (frame) => wsServer?.broadcastToOwners(frame),
-    // received-capability:add 临时 ws 连远端跑 whoami — 直连 ws (不走 transport listener)
-    connectRemote,
     // extension runtime (v1: local-mode only). Instance owned by daemon top
     // level so stopAll() runs in the shutdown hook below.
     extensionRuntime,
     // extension sharing v1 — owner-side published-channels store.
     publishedChannelStore,
     bundleCache,
-    // app-builder
-    appBuilderStore,
-    deleteSessionsByProject,
-    devServerLifecycle: devServerSupervisor,
-    logger
+    // 飞书统一身份 Phase 1：登录 RPC handlers（auth:login:start / getIdentity / logout）
+    feishuAuth: { loginFlow, ownerIdentityStore },
+    // 飞书统一身份 Phase 2：hub 目录 + 连接（中心 server 代理）。
+    // exchange/listHubs 包掉 owner ttcJwt（每次现读 store——热切换后立即用新身份）；
+    // dispatcher 的 FEISHU_GATED_METHODS gate 已保证未登录时这些 RPC 到不了 handler，
+    // 这里的 FEISHU_LOGIN_REQUIRED 抛错只是防御纵深。
+    feishuHub: {
+      store: contactStore,
+      exchange: async (hubId) => {
+        const record = ownerIdentityStore.read();
+        if (!record) {
+          throw new ClawdError(ERROR_CODES.FEISHU_LOGIN_REQUIRED, "hub:connect requires feishu login");
+        }
+        return centralExchange({
+          api: config.clawosApi ?? DEFAULT_CLAWOS_API,
+          ttcJwt: record.ttcToken,
+          hubId
+        });
+      },
+      listHubs: async () => {
+        const record = ownerIdentityStore.read();
+        if (!record) {
+          throw new ClawdError(ERROR_CODES.FEISHU_LOGIN_REQUIRED, "hub:list requires feishu login");
+        }
+        return centralListHubs({
+          api: config.clawosApi ?? DEFAULT_CLAWOS_API,
+          ttcJwt: record.ttcToken
+        });
+      },
+      connectRemote,
+      broadcast: (frame) => wsServer?.broadcastToOwners(frame),
+      selfPrincipalId: () => ownerPrincipalId,
+      selfDisplayName: () => ownerDisplayName,
+      // Phase 2 自动反向（spec 决策 #11）：本机可达地址 = tunnel URL（公网），出站连 hub 时
+      // 透传让 hub 反向加我为联系人。无 tunnel（仅本机 ws）→ null，hub 不自动反向（不造假数据）。
+      selfUrl: () => currentTunnelUrl
+    }
   });
+  let handlers = makeHandlers();
   const authResolver = new AuthContextResolver({
     ownerToken: resolvedAuthToken
   });
@@ -42734,15 +42605,34 @@ async function startDaemon(config) {
     },
     // POST /extensions/import lands in ~/.clawd/extensions/<id>/
     extensionsRoot: () => extensionsRoot(),
-    // app-builder build 模式：/preview/<port>/ 反代 dev server 的端口白名单（见 spec §三.2）
-    previewPorts: effectivePreviewPorts
+    // 飞书登录 loopback 回调（热切换，2026-06-01 拍板）：成功落盘后——
+    //   1. 进程内实时切换身份（let binding + 值快照持有者重建）
+    //   2. 广播 auth:login:done 给在线 owner 连接（UI 即时反馈）
+    //   3. 踢掉所有 ws 连接（在线连接的 ctx 是旧身份）→ UI 自动重连 → 新身份 ctx →
+    //      People 立即解锁，不需要重启 daemon
+    // 失败则广播 auth:login:failed。
+    feishuLogin: {
+      handleLoginCallback: async (params) => {
+        const result = await loginFlow.handleCallback(params);
+        if (result.ok) {
+          feishuActive = true;
+          ownerPrincipalId = result.identity.unionId;
+          ownerDisplayName = result.identity.displayName;
+          handlers = makeHandlers();
+          wsServer?.broadcastToOwners({ type: "auth:login:done", identity: result.identity });
+          setImmediate(() => wsServer?.closeAllClients());
+          void reportHubUrl();
+        } else {
+          wsServer?.broadcastToOwners({ type: "auth:login:failed", reason: result.reason });
+        }
+        return result;
+      }
+    }
   });
   wsServer = new LocalWsServer({
     host: config.host,
     port: config.port,
     logger,
-    // broadcastToPrincipal 用此 id 路由 owner-targeted 帧（替代字面量 'owner' sentinel）
-    ownerPrincipalId,
     readyFrameBuilder: (ctx) => buildReadyFrame(
       {
         manager,
@@ -42768,14 +42658,11 @@ async function startDaemon(config) {
       return {
         principal: { id: v2.capability.id, kind: "guest", displayName: v2.capability.displayName },
         grants: v2.capability.grants,
-        capabilityId: v2.capability.id,
         ...selfPrincipalId ? { peerOwnerPrincipalId: selfPrincipalId } : {}
       };
     },
     // file-sharing HTTP 路由复用 daemon 同端口（spec §5 第 3 条）；router 自己处理 auth + 404
     httpRequestHandler: httpRouter,
-    // app-builder build 模式：/preview/<port>/ HMR websocket upgrade 转发的端口白名单（同 http-router 配置）
-    previewPorts: effectivePreviewPorts,
     // 订阅成功后给该 client 重放 in-flight pendingQuestions（plan: clawd-question-server-truth）。
     // daemon 是 pendingQuestions 的唯一 source of truth；新 client 接入 / 刷新页面时
     // 把当前所有未决 question 以 session:question 帧定向回放，让 UI 不再误显示 Ended。
@@ -42820,6 +42707,12 @@ async function startDaemon(config) {
     const requestId = typeof frame.requestId === "string" ? frame.requestId : void 0;
     const handler = handlers[type];
     if (!handler) throw new ClawdError(ERROR_CODES.METHOD_NOT_IMPLEMENTED, `not implemented: ${type}`);
+    if (!feishuActive && FEISHU_GATED_METHODS.includes(type)) {
+      throw new ClawdError(
+        ERROR_CODES.FEISHU_LOGIN_REQUIRED,
+        `${type} requires feishu login (People/remote identity)`
+      );
+    }
     const ctx = wsServer.getClientContext(client.id) ?? ownerContext(ownerPrincipalId, ownerDisplayName);
     const verdict = computeGrantForFrame(type, frame);
     if (verdict.kind === "check") {
@@ -42892,13 +42785,12 @@ async function startDaemon(config) {
       stateSnapshot = { ...stateSnapshot, tunnelUrl: r.url, tunnelError: void 0 };
       stateMgr.write(stateSnapshot);
       currentTunnelUrl = r.url;
-      wss.broadcastAll({ type: "tunnel:ready", url: r.url, subdomain: r.subdomain });
       const connectUrl = resolvedAuthToken ? `${r.url}#token=${resolvedAuthToken}` : r.url;
       const lines = [
         `Tunnel:      ${r.url}`,
         ...resolvedAuthToken ? [`Connect:     ${connectUrl}`] : [],
-        `Frpc config: ${import_node_path45.default.join(config.dataDir, "frpc.toml")}`,
-        `Frpc log:    ${import_node_path45.default.join(config.dataDir, "frpc.log")}`
+        `Frpc config: ${import_node_path44.default.join(config.dataDir, "frpc.toml")}`,
+        `Frpc log:    ${import_node_path44.default.join(config.dataDir, "frpc.log")}`
       ];
       const width = Math.max(...lines.map((l) => l.length));
       const bar = "\u2550".repeat(width + 4);
@@ -42911,10 +42803,11 @@ ${bar}
 
 `);
       try {
-        const connectPath = import_node_path45.default.join(config.dataDir, "connect.txt");
-        import_node_fs30.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
+        const connectPath = import_node_path44.default.join(config.dataDir, "connect.txt");
+        import_node_fs29.default.writeFileSync(connectPath, lines.join("\n") + "\n", { mode: 384 });
       } catch {
       }
+      void reportHubUrl();
     } catch (err) {
       const tunnelError = err?.message ?? String(err);
       try {
@@ -42978,9 +42871,9 @@ ${bar}
   };
 }
 function migrateDropPersonsDir(dataDir) {
-  const dir = import_node_path45.default.join(dataDir, "persons");
+  const dir = import_node_path44.default.join(dataDir, "persons");
   try {
-    import_node_fs30.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs29.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }