@clawos-dev/clawd 0.2.126-beta.253.542a917 → 0.2.127

package/dist/cli.cjs

@@ -132,15 +132,11 @@ var init_methods = __esm({
       "attachment.groupRemove",
       "attachment.groupList",
       // ---- capability:* (capability platform 鉴权底座) ----
-      // global personal token 模型 (2026-05-25): UI 不再调 capability:issue —— daemon 启动时
-      // loadOrCreatePersonalCapability 自动创建 1 张 fixed-grants 的 personal capability,
-      // 所有联系人共用 personal token。capability:list / capability:delete 保留 (供调试 /
-      // 老板手动清旧 cap)；capability:issue / capability:bindPeer 已下线。
+      // 飞书统一身份 Phase 2 (2026-06-01, spec 决策 #12): personal token / 邀请码全链路删除——
+      // device:connect 已完整替代（中心 server 签发自包含 connect token）。capability:list / capability:delete
+      // 保留：调试 + whoami 反查 + 撤销级联 + 清旧 per-peer cap。personal-cap:get 已下线。
       "capability:list",
       "capability:delete",
-      // global personal token (2026-05-25): UI invite/accept dialog 挂载即调，拿 personal
-      // token + capability + shareBaseUrl 用于拼 inviteUrl / autoAttach 反向推。owner-only。
-      "personal-cap:get",
       // ---- inbox:* (capability platform Phase 3 跨用户通知 + Phase 4 DM) ----
       // owner 接 guest 的 cross-principal 消息事件 + DM 双向私聊.
       // inbox:list / markRead: admin-only (Phase 3); inbox:postMessage: DM 自带能力,
@@ -148,14 +144,12 @@ var init_methods = __esm({
       "inbox:list",
       "inbox:markRead",
       "inbox:postMessage",
-      // ---- received-capability:* (对方颁给我的 cap, 视角 B 双向授权模型, 2026-05-23) ----
-      // owner 入口: list / add / remove
-      // guest 端: autoAttach (B 接 A 的 token 后通过 cap channel ws 推 cap 给 A)
-      // 详见 received-capability.ts JSDoc + spec 2026-05-23-bidirectional-cap-design.md
-      "received-capability:list",
-      "received-capability:add",
-      "received-capability:remove",
-      "received-capability:autoAttach",
+      // ---- contact:* (联系人列表) ----
+      // 飞书统一身份 Phase 3 (决策 #14): received-capability:* 正名为 contact:*——Phase 2 后
+      // 联系人身份由中心 server introspect 背书，不再是"对方颁发的 capability"。
+      // 写入路径：device:connect 落 store + 自动反向（决策 #11）；list / remove 作联系人列表读删。
+      "contact:list",
+      "contact:remove",
       // ---- whoami (v2 capability platform) ----
       // 任何 authed connection 都能调；返回 owner 显示名 + 当前 capability wire 形态 +
       // grants 对应的 persona 元数据 (id + displayName)。UI 端 AddRemotePersonaDialog
@@ -181,6 +175,17 @@ var init_methods = __esm({
       // 无 subscription 持久化：guest 端身份完全来自文件系统 + reconciled publishedExtensions.
       "extension.install-from-channel",
       "extension.update-from-channel",
+      // ---- auth:* 飞书统一身份 Phase 1 (spec 2026-06-01-feishu-identity-design) ----
+      // owner-only：daemon loopback 登录流程（auth:login:start 起 state → HTTP /auth/callback
+      // 回调落盘 → auth:login:done 事件）。中央字面量见 protocol/feishu-auth.ts FEISHU_AUTH_METHODS。
+      "auth:login:start",
+      "auth:getIdentity",
+      "auth:logout",
+      // ---- device:* 设备目录 + 连接（决策 #15：deviceId + 自包含 token） ----
+      // owner-only：公共设备目录 + audience 绑定设备的签名 token 连接（daemon 代理中心 server）。
+      // 中央字面量见 protocol/feishu-auth.ts DEVICE_METHODS。
+      "device:list",
+      "device:connect",
       // ---- app-builder Project (spec 2026-06-01 picker → 2026-06-02 单栏默认 refactor) ----
       // persona-app-builder Project 管理；schemas: ProjectMetadataSchema + 5 个 args/result 对。
       //   listProjects: readdir projects/，按目录读 .clawd-project.json
@@ -274,6 +279,10 @@ var init_errors = __esm({
       UNAUTHORIZED: "UNAUTHORIZED",
       FORBIDDEN: "FORBIDDEN",
       INVALID_PARAM: "INVALID_PARAM",
+      // 飞书统一身份（spec 2026-06-01 决策 #9）：People/远程体系强制飞书登录。
+      // daemon 进程身份未激活为飞书 unionId 时，FEISHU_GATED_METHODS 内的 RPC 一律返回此错误；
+      // UI 据此显示登录引导（区别于 UNAUTHORIZED 的越权语义）。
+      FEISHU_LOGIN_REQUIRED: "FEISHU_LOGIN_REQUIRED",
       // app-builder 单栏默认 refactor (spec 2026-06-02-app-builder-single-pane-default-design)：
       // appBuilder:createProject 加 personaId + session 未绑校验后抛的两个错码。
       WRONG_PERSONA: "WRONG_PERSONA",
@@ -707,8 +716,8 @@ var init_parseUtil = __esm({
     init_errors2();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path59, errorMaps, issueData } = params;
-      const fullPath = [...path59, ...issueData.path || []];
+      const { data, path: path60, errorMaps, issueData } = params;
+      const fullPath = [...path60, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -1019,11 +1028,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path59, key) {
+      constructor(parent, value, path60, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path59;
+        this._path = path60;
         this._key = key;
       }
       get path() {
@@ -4664,53 +4673,41 @@ var init_schemas = __esm({
       // optional 是因为 owner-mode session 不带；只要写入就是 listener-mode 必填三元组。
       chatId: external_exports.string().min(1).optional(),
       /**
-       * 创建该 session 的 principal id（owner uuid 或 guest cap.id），从 session:create handler
-       * 的 ctx.principal.id 派生。Person identity Q2「按对端人聚合 sessions」需要它：
-       * UI 端按 `creatorPrincipalId === ownerPrincipalId` 区分「我自己」vs「别人接入」，
-       * 后者再通过 PersonAlias 表反查 personId 二级分组。
+       * 创建该 session 的设备 id（决策 #16：从 ctx.principal.id 派生 = deviceId）。
+       * UI 端 self 判定收敛为单一比较 `!creatorPrincipalId || creatorPrincipalId === 本机 deviceId`
+       * → 「我自己创建」vs「别的设备接入创建」。MyPersonas 二级分组按 creatorPrincipalId(设备)
+       * 分桶、按 contact(deviceId→ownerName) 反查显示名。
        *
-       * optional：兼容 2026-05-21 之前的老 session 数据，新建一定有值。
-       */
-      creatorPrincipalId: external_exports.string().min(1).optional(),
-      /**
-       * 创建该 session 的接入者 owner identity（auth 帧 selfPrincipalId）。global personal token
-       * (#735) 后 creatorPrincipalId 在 guest ctx 永远是同一张 personal cap.id，UI 端无法区分
-       * 接入者；这个字段把"是哪个人"的信息固定下来。
+       * 命名保留 creatorPrincipalId（命名债，语义已是 creatorDeviceId）；值由 connect token
+       * subDevice 背书（guest ctx）或本机 deviceId（owner ctx）。optional 兼容老 session。
        *
-       * 派生规则：
-       *   - owner ctx 创建：= 本机 ownerPrincipalId
-       *   - guest ctx + auth 帧带 selfPrincipalId：= ctx.peerOwnerPrincipalId
-       *   - 旧 per-peer cap 路径 / 老 session：undefined（UI 视作 self 兼容）
-       *
-       * UI 用法：
-       *   - Recents/Active/Pinned 过滤：`!creatorOwnerPrincipalId || === ownerPrincipalId` 才显示
-       *   - MyPersonas 二级分组：non-self → 按 contacts 反查 displayName 分桶
-       *
-       * 当前为 caller 自报，daemon 不密码学验证真伪；强身份验签是独立工作（B 方案）。
+       * 决策 #16 删除了 creatorOwnerPrincipalId（personal token #735 遗留）——当年 guest 的
+       * principal.id 都是同张 cap.id 区分不了人才加它；现在 principal.id = 设备 deviceId、
+       * 归属人由 contact(deviceId→ownerId) 反查，该字段理由消失。
        */
-      creatorOwnerPrincipalId: external_exports.string().min(1).optional(),
+      creatorPrincipalId: external_exports.string().min(1).optional(),
       /**
-       * Mirror peer sessions (2026-05-26): mirror 标识。**我在朋友 daemon 上以 guest ctx
-       * 创建的 session**，远端是 source of truth，本机是该 session 的持久化副本，方便
-       * sidebar 跨设备聚合。字段值是远端 daemon 的 ownerPrincipalId（即我接入的那位朋友）。
+       * Mirror peer sessions (2026-05-26): mirror 标识。**我在朋友 daemon 上创建的 session**，
+       * 远端是 source of truth，本机是持久化副本，方便 sidebar 跨设备聚合。
+       * 字段值 = 远端 daemon 的 deviceId（决策 #16：朋友设备标识，即我接入的那台机器）。
        *
        * 语义关键澄清：mirror **不是朋友创建给我的会话**——它是我自己的会话，只是在朋友
        * 的机器上跑。sidebar chip 显示 `@<朋友>` 暗示「位置」，不是「来源」。
        *
        *   - undefined / 缺省 → 本机 native session（在我自己机器上跑）
-       *   - 非空 → 我的会话在该 ownerPrincipalId 朋友的 daemon 上跑，本机为持久化副本
+       *   - 非空 → 我的会话在该 deviceId 朋友的 daemon 上跑，本机为持久化副本
        *
-       * 与 `creatorPrincipalId` / `creatorOwnerPrincipalId` 在四类 session 下取值矩阵：
-       *   | 形态                                | creatorPrincipalId       | creatorOwnerPrincipalId | originOwnerPrincipalId |
-       *   |-------------------------------------|--------------------------|-------------------------|------------------------|
-       *   | 本机 owner 自创                      | 本机 ownerPrincipalId    | 本机 ownerPrincipalId   | undefined              |
-       *   | 本机被别人通过 personal token 接入创建 | 远端接入者 cap.id        | 远端接入者 ownerPrincipalId | undefined          |
-       *   | 我在朋友 daemon 上以 guest ctx 创建（mirror 回本机） | 朋友 daemon personal cap.id | 我自己 ownerPrincipalId | 朋友 ownerPrincipalId |
+       * 四类 session 取值矩阵（决策 #16 deviceId 版，creatorOwnerPrincipalId 列已删）：
+       *   | 形态                                | creatorPrincipalId(=设备) | originOwnerPrincipalId(=朋友设备) |
+       *   |-------------------------------------|--------------------------|----------------------------------|
+       *   | 本机 owner 自创                      | 本机 deviceId            | undefined                        |
+       *   | 本机被别的设备接入创建               | 接入者 deviceId(token 背书) | undefined                     |
+       *   | 我在朋友 daemon 上创建（mirror 回本机） | 我的 deviceId          | 朋友 deviceId                    |
        *
        * UI 用法：
        *   - sidebar Active/Pinned/Recents 过滤：`origin 非空 → 一律视作 self`（绕过 #739 隔离）
        *   - 行内显示 `@<朋友>` chip 暗示位置
-       *   - 进 ChatPanel 时按 origin 路由到 `pool.ensureRemoteForOwner(origin)` 走远端
+       *   - 进 ChatPanel 时按 origin 路由到 `pool.ensureRemoteForOwner(origin)` 走远端（按 deviceId）
        *
        * daemon 用法：
        *   - `peerSession:upsert` / `peerSession:remove` 一族 RPC 专管 mirror 写删；
@@ -5144,18 +5141,14 @@ var init_schemas = __esm({
       token: external_exports.string().min(1),
       scheme: external_exports.literal("bearer").optional(),
       /**
-       * guest 端 ws 接入时自报对端稳定 ownerPrincipalId。AuthGate.authenticate 收到
-       * 后调 capabilityManager.recordPeerHello(capId, ownerPrincipalId, displayName)
-       * 把 cap.peerOwnerId / firstUsedByPeerAt 字段回写，让 owner 端 UI 在 People
-       * tab 顶层 PeerOwner 视图 + Personas tab 二级分组拿到对端身份。
-       */
-      selfPrincipalId: external_exports.string().min(1).optional(),
-      /**
-       * 同 selfPrincipalId：自报 owner displayName（人类可读），让对端 daemon 把
-       * 显示名写入 cap.peerOwnerDisplayName（cap.displayName 本来就是 owner 颁时填
-       * 的"颁给谁/用途"，hello 收到的 displayName 是辅助）。
+       * 决策 #16：自报身份字段（selfPrincipalId / selfDisplayName / selfDeviceId）全部删除——
+       * guest 的设备 id / 人 id / 来源全部由 connect token 的 subDevice/subOwner/provider 签名背书
+       * （server 签、目标设备本地验签，不可伪造），不再接受任何自报身份。
+       *
+       * selfUrl 保留：它只是"可达地址"（auto-reverse 反向连接用），不是身份——填错只影响
+       * 反向连通性，不构成伪造风险，且 url 不在 token 里（token 只签身份不签地址）。
        */
-      selfDisplayName: external_exports.string().optional()
+      selfUrl: external_exports.string().min(1).optional()
     });
     AuthOkFrameSchema = external_exports.object({
       type: external_exports.literal("auth:ok"),
@@ -5424,7 +5417,7 @@ function stripSecretHash(cap) {
   const { secretHash: _hash, ...wire } = cap;
   return wire;
 }
-var ResourceSchema, ActionSchema, GrantSchema, CapabilitySchema, CapabilityWireSchema, CapabilityErrorCodeSchema, WhoamiResponseSchema, PERSONAL_CAP_GRANTS, PersonalCapGetResponseSchema;
+var ResourceSchema, ActionSchema, GrantSchema, CapabilitySchema, CapabilityWireSchema, CapabilityErrorCodeSchema, WhoamiResponseSchema, PERSONAL_CAP_GRANTS;
 var init_capability = __esm({
   "../protocol/src/capability.ts"() {
     "use strict";
@@ -5476,7 +5469,11 @@ var init_capability = __esm({
       owner: external_exports.object({
         id: external_exports.string(),
         kind: external_exports.enum(["owner", "guest"]),
-        displayName: external_exports.string()
+        displayName: external_exports.string(),
+        /** 归属人 id（决策 #16：TTC unique_id 等，落 contact.ownerId） */
+        ownerId: external_exports.string(),
+        /** 身份来源（决策 #16：'ttc'/'google'，落 contact.provider） */
+        provider: external_exports.string()
       }).strict(),
       capability: CapabilityWireSchema,
       grantedPersonas: external_exports.array(
@@ -5492,13 +5489,6 @@ var init_capability = __esm({
         actions: Object.freeze(["read", "send"])
       })
     ]);
-    PersonalCapGetResponseSchema = external_exports.object({
-      type: external_exports.literal("personal-cap:get:ok"),
-      token: external_exports.string().min(1),
-      capability: CapabilityWireSchema,
-      /** ws/wss base URL，UI deriveInviteBase 用来拼 inviteUrl（tunnel 优先 / 否则本机 ws） */
-      shareBaseUrl: external_exports.string().min(1)
-    }).strict();
   }
 });
 
@@ -5510,83 +5500,80 @@ var init_inbox = __esm({
     init_zod();
     InboxMessageSchema = external_exports.object({
       id: external_exports.string().min(1),
-      peerOwnerId: external_exports.string().min(1),
-      senderPrincipalId: external_exports.string().min(1),
+      peerDeviceId: external_exports.string().min(1),
+      senderDeviceId: external_exports.string().min(1),
       text: external_exports.string().min(1),
       createdAt: external_exports.number().int().nonnegative(),
       readBy: external_exports.record(external_exports.string().min(1), external_exports.number().int().positive()).default({})
     }).strict();
     InboxPostMessageArgsSchema = external_exports.object({
-      peerOwnerId: external_exports.string().min(1).optional(),
+      peerDeviceId: external_exports.string().min(1).optional(),
       id: external_exports.string().min(1),
       text: external_exports.string().min(1),
       createdAt: external_exports.number().int().nonnegative()
     }).strict();
     InboxListArgsSchema = external_exports.object({
-      peerOwnerId: external_exports.string().min(1),
+      peerDeviceId: external_exports.string().min(1),
       sinceCreatedAt: external_exports.number().int().nonnegative().optional()
     }).strict();
     InboxMarkReadArgsSchema = external_exports.object({
-      peerOwnerId: external_exports.string().min(1),
+      peerDeviceId: external_exports.string().min(1),
       upToCreatedAt: external_exports.number().int().nonnegative()
     }).strict();
   }
 });
 
-// ../protocol/src/received-capability.ts
-var ReceivedCapabilitySchema, ReceivedCapabilityWireSchema, ReceivedCapabilityAddArgsSchema, ReceivedCapabilityAddOkSchema, ReceivedCapabilityRemoveArgsSchema, ReceivedCapabilityRemoveOkSchema, ReceivedCapabilityListOkSchema, ReceivedCapabilityAutoAttachArgsSchema, ReceivedCapabilityAutoAttachOkSchema, ReceivedCapabilityAddedFrameSchema, ReceivedCapabilityRemovedFrameSchema;
-var init_received_capability = __esm({
-  "../protocol/src/received-capability.ts"() {
+// ../protocol/src/contact.ts
+var ContactSchema, ContactWireSchema, ContactRemoveArgsSchema, ContactRemoveOkSchema, ContactListOkSchema, ContactAddedFrameSchema, ContactRemovedFrameSchema;
+var init_contact = __esm({
+  "../protocol/src/contact.ts"() {
     "use strict";
     init_zod();
     init_capability();
-    ReceivedCapabilitySchema = external_exports.object({
-      ownerPrincipalId: external_exports.string().min(1),
-      ownerDisplayName: external_exports.string(),
+    ContactSchema = external_exports.object({
+      /**
+       * 对方设备标识（主键）：对方 daemon 自己生成并持久化的标识（auth.json deviceId，
+       * 如 dev-<uuid>），provider 无关。同 deviceId 重复 upsert 覆盖。
+       */
+      deviceId: external_exports.string().min(1),
+      /**
+       * 归属人 id（决策 #16）：TTC unique_id 等，由 connect token subOwner 签名背书。
+       * 与 provider 一起唯一标识一个人。DM 不再按它路由（路由用 deviceId），仅显示/分组用。
+       */
+      ownerId: external_exports.string().min(1),
+      /** 身份来源（决策 #16）：'ttc'（飞书/手机/邮箱登入 TTC）| 'google' | ...，token 背书 */
+      provider: external_exports.string().min(1),
+      /** 联系人显示名 */
+      displayName: external_exports.string(),
+      /** 该设备可达的 ws/tunnel 地址 */
       remoteUrl: external_exports.string().min(1),
-      capabilityId: external_exports.string().min(1),
-      capabilityToken: external_exports.string().min(1),
+      // 自动反向建立联系人（spec 决策 #11）：被连接方本地验票成功后自动落 A 为
+      // 联系人，但它不持有 A 颁发的 token（A 从未给它换票）→ connectToken 为空串。
+      // device:connect 出站路径仍存中心 server 签发的真实 connect token（断线重连复用）。
+      // 不用 .min(1)：自动反向路径合法地存空串，禁止填假 token 占位（不造假数据）。
+      connectToken: external_exports.string(),
       grants: external_exports.array(GrantSchema),
-      receivedAt: external_exports.number().int().nonnegative()
-    }).strict();
-    ReceivedCapabilityWireSchema = ReceivedCapabilitySchema;
-    ReceivedCapabilityAddArgsSchema = external_exports.object({
-      remoteUrl: external_exports.string().min(1),
-      token: external_exports.string().min(1)
-    }).strict();
-    ReceivedCapabilityAddOkSchema = external_exports.object({
-      type: external_exports.literal("received-capability:add:ok"),
-      receivedCap: ReceivedCapabilityWireSchema
+      addedAt: external_exports.number().int().nonnegative()
     }).strict();
-    ReceivedCapabilityRemoveArgsSchema = external_exports.object({
-      ownerPrincipalId: external_exports.string().min(1)
+    ContactWireSchema = ContactSchema;
+    ContactRemoveArgsSchema = external_exports.object({
+      deviceId: external_exports.string().min(1)
     }).strict();
-    ReceivedCapabilityRemoveOkSchema = external_exports.object({
-      type: external_exports.literal("received-capability:remove:ok"),
-      ownerPrincipalId: external_exports.string().min(1)
-    }).strict();
-    ReceivedCapabilityListOkSchema = external_exports.object({
-      type: external_exports.literal("received-capability:list:ok"),
-      receivedCaps: external_exports.array(ReceivedCapabilityWireSchema)
-    }).strict();
-    ReceivedCapabilityAutoAttachArgsSchema = external_exports.object({
-      ownerPrincipalId: external_exports.string().min(1),
-      ownerDisplayName: external_exports.string(),
-      remoteUrl: external_exports.string().min(1),
-      capabilityId: external_exports.string().min(1),
-      token: external_exports.string().min(1),
-      grants: external_exports.array(GrantSchema)
+    ContactRemoveOkSchema = external_exports.object({
+      type: external_exports.literal("contact:remove:ok"),
+      deviceId: external_exports.string().min(1)
     }).strict();
-    ReceivedCapabilityAutoAttachOkSchema = external_exports.object({
-      type: external_exports.literal("received-capability:autoAttach:ok")
+    ContactListOkSchema = external_exports.object({
+      type: external_exports.literal("contact:list:ok"),
+      contacts: external_exports.array(ContactWireSchema)
     }).strict();
-    ReceivedCapabilityAddedFrameSchema = external_exports.object({
-      type: external_exports.literal("received-capability:added"),
-      receivedCap: ReceivedCapabilityWireSchema
+    ContactAddedFrameSchema = external_exports.object({
+      type: external_exports.literal("contact:added"),
+      contact: ContactWireSchema
     }).strict();
-    ReceivedCapabilityRemovedFrameSchema = external_exports.object({
-      type: external_exports.literal("received-capability:removed"),
-      ownerPrincipalId: external_exports.string().min(1)
+    ContactRemovedFrameSchema = external_exports.object({
+      type: external_exports.literal("contact:removed"),
+      deviceId: external_exports.string().min(1)
     }).strict();
   }
 });
@@ -5790,6 +5777,107 @@ var init_extension = __esm({
   }
 });
 
+// ../protocol/src/feishu-auth.ts
+var FEISHU_GATED_METHODS, DeviceEntrySchema, DeviceListResponseSchema, DeviceConnectArgsSchema, DeviceConnectResponseSchema, FeishuIdentitySchema, AuthLoginStartResponseSchema, AuthGetIdentityResponseSchema, AuthLogoutResponseSchema, AuthLoginDoneEventSchema, AuthLoginFailedEventSchema;
+var init_feishu_auth = __esm({
+  "../protocol/src/feishu-auth.ts"() {
+    "use strict";
+    init_zod();
+    FEISHU_GATED_METHODS = [
+      // capability（调试 / 撤销，仍属远程身份体系）
+      "capability:list",
+      "capability:delete",
+      // 联系人列表（device:connect 落同一 store；list 读 / remove 删）
+      "contact:list",
+      "contact:remove",
+      // DM / 跨用户通知
+      "inbox:list",
+      "inbox:markRead",
+      "inbox:postMessage",
+      // mirror peer sessions（远端会话镜像）
+      "peerSession:upsert",
+      "peerSession:remove",
+      // 设备目录 + 连接（决策 #15：daemon 代理中心 server，需要 owner 的 ttcJwt）
+      "device:list",
+      "device:connect"
+    ];
+    DeviceEntrySchema = external_exports.object({
+      /**
+       * 设备标识（决策 #15：daemon 本地生成的 dev-<uuid>，与人的身份 unionId 无关）。
+       * 中心 server clawd_devices 注册表仅作服务发现（url 下发 + 目录），不在安全路径上。
+       */
+      deviceId: external_exports.string().min(1),
+      /** 显示名 */
+      name: external_exports.string().min(1),
+      /** ws/tunnel 地址 */
+      url: external_exports.string().min(1)
+    });
+    DeviceListResponseSchema = external_exports.object({
+      type: external_exports.literal("device:list:ok"),
+      devices: external_exports.array(DeviceEntrySchema)
+    });
+    DeviceConnectArgsSchema = external_exports.object({
+      /** 目标设备的 deviceId（对方 daemon 生成的 dev-<uuid>） */
+      deviceId: external_exports.string().min(1),
+      /**
+       * 目标设备的 ws/tunnel 地址（可选）：
+       *   - 公开目录点击：带 url（device:list 已下发，省一次 server 查询）
+       *   - 凭 deviceId 连接：缺省 url → daemon exchange 时由中心 server 下发该设备上报的 url
+       *   - 注册表不在安全路径上：知道对方 url 时显式传入即可连接（不依赖中心 server 服务发现）
+       */
+      url: external_exports.string().min(1).optional(),
+      /** 显示名（公共设备来自目录；缺省时连上后用 whoami 回填） */
+      name: external_exports.string().optional()
+    });
+    DeviceConnectResponseSchema = external_exports.object({
+      type: external_exports.literal("device:connect:ok"),
+      /** 连接的目标设备标识（= 请求 args.deviceId） */
+      deviceId: external_exports.string(),
+      name: external_exports.string(),
+      url: external_exports.string()
+    });
+    FeishuIdentitySchema = external_exports.object({
+      /** 归属人 id（决策 #16：TTC unique_id，取代飞书 union_id；跨登录方式稳定） */
+      ownerId: external_exports.string().min(1),
+      /** 身份来源：'ttc'（飞书/手机/邮箱登入 TTC）| 'google' | ...（决策 #16，拓展用） */
+      provider: external_exports.string().min(1),
+      /** 显示名。TTC user_info 接口 data.name */
+      displayName: external_exports.string().min(1),
+      /** TTC user_info 接口 data.avatar_url，可缺省 */
+      avatarUrl: external_exports.string().optional()
+    });
+    AuthLoginStartResponseSchema = external_exports.object({
+      type: external_exports.literal("auth:login:start:ok"),
+      /** 完整 TTC 授权页 URL（含 callback_url + state + auto=1），UI 直接 window.open */
+      authUrl: external_exports.string().min(1),
+      /** 防 CSRF 的一次性 nonce；回调时 daemon 校验 */
+      state: external_exports.string().min(1)
+    });
+    AuthGetIdentityResponseSchema = external_exports.object({
+      type: external_exports.literal("auth:getIdentity:ok"),
+      /** null = 未登录 */
+      identity: FeishuIdentitySchema.nullable(),
+      /**
+       * 本机设备标识（决策 #15：daemon 生成并持久化在 auth.json，如 dev-<uuid>）。
+       * 设备属性，与登录态无关、登录登出不变。UI"我的设备标识"用它拼
+       * clawos://device/<deviceId>（替代旧的 unionId——不再向外暴露人的身份标识）。
+       */
+      deviceId: external_exports.string().min(1)
+    });
+    AuthLogoutResponseSchema = external_exports.object({
+      type: external_exports.literal("auth:logout:ok")
+    });
+    AuthLoginDoneEventSchema = external_exports.object({
+      type: external_exports.literal("auth:login:done"),
+      identity: FeishuIdentitySchema
+    });
+    AuthLoginFailedEventSchema = external_exports.object({
+      type: external_exports.literal("auth:login:failed"),
+      reason: external_exports.string()
+    });
+  }
+});
+
 // ../protocol/src/runtime.ts
 var init_runtime = __esm({
   "../protocol/src/runtime.ts"() {
@@ -5805,8 +5893,9 @@ var init_runtime = __esm({
     init_principal();
     init_capability();
     init_inbox();
-    init_received_capability();
+    init_contact();
     init_extension();
+    init_feishu_auth();
   }
 });
 
@@ -6081,8 +6170,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path59 = req.path;
-        _req.url = typeof path59 === "string" ? path59 : req.url ? req.url.path || req.url : void 0;
+        const path60 = req.path;
+        _req.url = typeof path60 === "string" ? path60 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -6247,14 +6336,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path59) {
+    function parsePath(path60) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path59.length; i++) {
-        const char = path59[i];
+      for (let i = 0; i < path60.length; i++) {
+        const char = path60[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -6385,10 +6474,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path59 of paths) {
-        const parts = parsePath(path59);
+      for (const path60 of paths) {
+        const parts = parsePath(path60);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path59, remove);
+          redactWildcardPath(obj, parts, censor, path60, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -6473,8 +6562,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path59) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path59];
+            const wrappedCensor = typeof censor === "function" ? (value, path60) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path60];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -6509,8 +6598,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path59 of pathsToClone) {
-        const parts = parsePath(path59);
+      for (const path60 of pathsToClone) {
+        const parts = parsePath(path60);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -6562,24 +6651,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path59) {
-      if (typeof path59 !== "string") {
+    function validatePath(path60) {
+      if (typeof path60 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path59 === "") {
+      if (path60 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path59.includes("..")) {
-        throw new Error(`Invalid redaction path (${path59})`);
+      if (path60.includes("..")) {
+        throw new Error(`Invalid redaction path (${path60})`);
       }
-      if (path59.includes(",")) {
-        throw new Error(`Invalid redaction path (${path59})`);
+      if (path60.includes(",")) {
+        throw new Error(`Invalid redaction path (${path60})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path59.length; i++) {
-        const char = path59[i];
+      for (let i = 0; i < path60.length; i++) {
+        const char = path60[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -6593,20 +6682,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path59})`);
+            throw new Error(`Invalid redaction path (${path60})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path59})`);
+        throw new Error(`Invalid redaction path (${path60})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path59 of paths) {
-        validatePath(path59);
+      for (const path60 of paths) {
+        validatePath(path60);
       }
     }
     function slowRedact(options = {}) {
@@ -6774,8 +6863,8 @@ var require_redaction = __commonJS({
         if (shape[k2] === null) {
           o[k2] = (value) => topCensor(value, [k2]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path59) => {
-            return censor(value, [k2, ...path59]);
+          const wrappedCensor = typeof censor === "function" ? (value, path60) => {
+            return censor(value, [k2, ...path60]);
           } : censor;
           o[k2] = Redact({
             paths: shape[k2],
@@ -6993,10 +7082,10 @@ var require_atomic_sleep = __commonJS({
 var require_sonic_boom = __commonJS({
   "../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js"(exports2, module2) {
     "use strict";
-    var fs48 = require("fs");
+    var fs49 = require("fs");
     var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
-    var path59 = require("path");
+    var path60 = require("path");
     var sleep = require_atomic_sleep();
     var assert = require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -7050,20 +7139,20 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs48.mkdirSync(path59.dirname(file), { recursive: true });
-          const fd = fs48.openSync(file, flags, mode);
+          if (sonic.mkdir) fs49.mkdirSync(path60.dirname(file), { recursive: true });
+          const fd = fs49.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
           fileOpened(err);
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs48.mkdir(path59.dirname(file), { recursive: true }, (err) => {
+        fs49.mkdir(path60.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
-          fs48.open(file, flags, mode, fileOpened);
+          fs49.open(file, flags, mode, fileOpened);
         });
       } else {
-        fs48.open(file, flags, mode, fileOpened);
+        fs49.open(file, flags, mode, fileOpened);
       }
     }
     function SonicBoom(opts) {
@@ -7104,8 +7193,8 @@ var require_sonic_boom = __commonJS({
         this.flush = flushBuffer;
         this.flushSync = flushBufferSync;
         this._actualWrite = actualWriteBuffer;
-        fsWriteSync = () => fs48.writeSync(this.fd, this._writingBuf);
-        fsWrite = () => fs48.write(this.fd, this._writingBuf, this.release);
+        fsWriteSync = () => fs49.writeSync(this.fd, this._writingBuf);
+        fsWrite = () => fs49.write(this.fd, this._writingBuf, this.release);
       } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
         this._writingBuf = "";
         this.write = write;
@@ -7114,15 +7203,15 @@ var require_sonic_boom = __commonJS({
         this._actualWrite = actualWrite;
         fsWriteSync = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs48.writeSync(this.fd, this._writingBuf);
+            return fs49.writeSync(this.fd, this._writingBuf);
           }
-          return fs48.writeSync(this.fd, this._writingBuf, "utf8");
+          return fs49.writeSync(this.fd, this._writingBuf, "utf8");
         };
         fsWrite = () => {
           if (Buffer.isBuffer(this._writingBuf)) {
-            return fs48.write(this.fd, this._writingBuf, this.release);
+            return fs49.write(this.fd, this._writingBuf, this.release);
           }
-          return fs48.write(this.fd, this._writingBuf, "utf8", this.release);
+          return fs49.write(this.fd, this._writingBuf, "utf8", this.release);
         };
       } else {
         throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
@@ -7179,7 +7268,7 @@ var require_sonic_boom = __commonJS({
           }
         }
         if (this._fsync) {
-          fs48.fsyncSync(this.fd);
+          fs49.fsyncSync(this.fd);
         }
         const len = this._len;
         if (this._reopening) {
@@ -7293,7 +7382,7 @@ var require_sonic_boom = __commonJS({
       const onDrain = () => {
         if (!this._fsync) {
           try {
-            fs48.fsync(this.fd, (err) => {
+            fs49.fsync(this.fd, (err) => {
               this._flushPending = false;
               cb(err);
             });
@@ -7395,7 +7484,7 @@ var require_sonic_boom = __commonJS({
       const fd = this.fd;
       this.once("ready", () => {
         if (fd !== this.fd) {
-          fs48.close(fd, (err) => {
+          fs49.close(fd, (err) => {
             if (err) {
               return this.emit("error", err);
             }
@@ -7444,7 +7533,7 @@ var require_sonic_boom = __commonJS({
           buf = this._bufs[0];
         }
         try {
-          const n = Buffer.isBuffer(buf) ? fs48.writeSync(this.fd, buf) : fs48.writeSync(this.fd, buf, "utf8");
+          const n = Buffer.isBuffer(buf) ? fs49.writeSync(this.fd, buf) : fs49.writeSync(this.fd, buf, "utf8");
           const releasedBufObj = releaseWritingBuf(buf, this._len, n);
           buf = releasedBufObj.writingBuf;
           this._len = releasedBufObj.len;
@@ -7460,7 +7549,7 @@ var require_sonic_boom = __commonJS({
         }
       }
       try {
-        fs48.fsyncSync(this.fd);
+        fs49.fsyncSync(this.fd);
       } catch {
       }
     }
@@ -7481,7 +7570,7 @@ var require_sonic_boom = __commonJS({
           buf = mergeBuf(this._bufs[0], this._lens[0]);
         }
         try {
-          const n = fs48.writeSync(this.fd, buf);
+          const n = fs49.writeSync(this.fd, buf);
           buf = buf.subarray(n);
           this._len = Math.max(this._len - n, 0);
           if (buf.length <= 0) {
@@ -7509,13 +7598,13 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
       if (this.sync) {
         try {
-          const written = Buffer.isBuffer(this._writingBuf) ? fs48.writeSync(this.fd, this._writingBuf) : fs48.writeSync(this.fd, this._writingBuf, "utf8");
+          const written = Buffer.isBuffer(this._writingBuf) ? fs49.writeSync(this.fd, this._writingBuf) : fs49.writeSync(this.fd, this._writingBuf, "utf8");
           release(null, written);
         } catch (err) {
           release(err);
         }
       } else {
-        fs48.write(this.fd, this._writingBuf, release);
+        fs49.write(this.fd, this._writingBuf, release);
       }
     }
     function actualWriteBuffer() {
@@ -7524,7 +7613,7 @@ var require_sonic_boom = __commonJS({
       this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
       if (this.sync) {
         try {
-          const written = fs48.writeSync(this.fd, this._writingBuf);
+          const written = fs49.writeSync(this.fd, this._writingBuf);
           release(null, written);
         } catch (err) {
           release(err);
@@ -7533,7 +7622,7 @@ var require_sonic_boom = __commonJS({
         if (kCopyBuffer) {
           this._writingBuf = Buffer.from(this._writingBuf);
         }
-        fs48.write(this.fd, this._writingBuf, release);
+        fs49.write(this.fd, this._writingBuf, release);
       }
     }
     function actualClose(sonic) {
@@ -7549,12 +7638,12 @@ var require_sonic_boom = __commonJS({
       sonic._lens = [];
       assert(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
       try {
-        fs48.fsync(sonic.fd, closeWrapped);
+        fs49.fsync(sonic.fd, closeWrapped);
       } catch {
       }
       function closeWrapped() {
         if (sonic.fd !== 1 && sonic.fd !== 2) {
-          fs48.close(sonic.fd, done);
+          fs49.close(sonic.fd, done);
         } else {
           done();
         }
@@ -7811,7 +7900,7 @@ var require_thread_stream = __commonJS({
     var { version: version2 } = require_package();
     var { EventEmitter: EventEmitter3 } = require("events");
     var { Worker } = require("worker_threads");
-    var { join: join14 } = require("path");
+    var { join: join15 } = require("path");
     var { pathToFileURL } = require("url");
     var { wait } = require_wait();
     var {
@@ -7847,7 +7936,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join14(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join15(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         trackUnmanagedFds: false,
@@ -8233,7 +8322,7 @@ var require_transport = __commonJS({
     "use strict";
     var { createRequire } = require("module");
     var getCallers = require_caller();
-    var { join: join14, isAbsolute: isAbsolute2, sep: sep3 } = require("path");
+    var { join: join15, isAbsolute: isAbsolute2, sep: sep3 } = require("path");
     var sleep = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
     var ThreadStream = require_thread_stream();
@@ -8296,7 +8385,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join14(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join15(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -8314,7 +8403,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline3) {
-        target = bundlerOverrides["pino-worker"] || join14(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join15(__dirname, "worker.js");
         options.pipelines = [pipeline3.map((dest) => {
           return {
             ...dest,
@@ -8336,7 +8425,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join14(__dirname, "..", "file.js");
+          return join15(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -9326,7 +9415,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join14 = ",";
+            let join15 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -9340,7 +9429,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join14 = `,
+                join15 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -9348,13 +9437,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join14;
+                res += join15;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join14}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join15}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -9375,7 +9464,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join14 = `,
+              join15 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -9389,13 +9478,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join14;
+                separator = join15;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join14;
+              separator = join15;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -9436,7 +9525,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join14 = ",";
+            let join15 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -9449,7 +9538,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join14 = `,
+                join15 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -9457,13 +9546,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join14;
+                res += join15;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join14}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join15}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -9476,7 +9565,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join14 = `,
+              join15 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -9485,7 +9574,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join14;
+                separator = join15;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -9543,20 +9632,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join15 = `,
+              const join16 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join15;
+                res2 += join16;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join15}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join16}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -9572,16 +9661,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join14 = `,
+            const join15 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join14, maximumBreadth);
+              res += stringifyTypedArray(value, join15, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join14;
+              separator = join15;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -9592,13 +9681,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join14;
+                separator = join15;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join14;
+              separator = join15;
             }
             if (separator !== "") {
               res = `
@@ -10689,11 +10778,11 @@ var init_lib = __esm({
           }
         }
       },
-      addToPath: function addToPath(path59, added, removed, oldPosInc, options) {
-        var last = path59.lastComponent;
+      addToPath: function addToPath(path60, added, removed, oldPosInc, options) {
+        var last = path60.lastComponent;
         if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
           return {
-            oldPos: path59.oldPos + oldPosInc,
+            oldPos: path60.oldPos + oldPosInc,
             lastComponent: {
               count: last.count + 1,
               added,
@@ -10703,7 +10792,7 @@ var init_lib = __esm({
           };
         } else {
           return {
-            oldPos: path59.oldPos + oldPosInc,
+            oldPos: path60.oldPos + oldPosInc,
             lastComponent: {
               count: 1,
               added,
@@ -11149,10 +11238,10 @@ function attachmentToHistoryMessage(o, ts) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path59 = typeof rec.path === "string" ? rec.path : null;
+      const path60 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path59 || content == null) return null;
-      const entry = { path: path59, content };
+      if (!path60 || content == null) return null;
+      const entry = { path: path60, content };
       if (typeof rec.mtimeMs === "number") entry.mtimeMs = rec.mtimeMs;
       return entry;
     }).filter((m2) => m2 !== null);
@@ -11983,10 +12072,10 @@ function parseAttachment(obj) {
     const memories = raw.map((m2) => {
       if (!m2 || typeof m2 !== "object") return null;
       const rec = m2;
-      const path59 = typeof rec.path === "string" ? rec.path : null;
+      const path60 = typeof rec.path === "string" ? rec.path : null;
       const content = typeof rec.content === "string" ? rec.content : null;
-      if (!path59 || content == null) return null;
-      const out = { path: path59, content };
+      if (!path60 || content == null) return null;
+      const out = { path: path60, content };
       if (typeof rec.mtimeMs === "number") out.mtimeMs = rec.mtimeMs;
       return out;
     }).filter((m2) => m2 !== null);
@@ -21185,7 +21274,7 @@ var require_BufferList = __commonJS({
         this.head = this.tail = null;
         this.length = 0;
       };
-      BufferList.prototype.join = function join14(s) {
+      BufferList.prototype.join = function join15(s) {
         if (this.length === 0) return "";
         var p2 = this.head;
         var ret = "" + p2.data;
@@ -23775,8 +23864,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path59) {
-      var parts = path59.split("/");
+    exports2.resolve = function(path60) {
+      var parts = path60.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -29629,18 +29718,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path59) {
-      if (path59.slice(-1) === "/") {
-        path59 = path59.substring(0, path59.length - 1);
+    var parentFolder = function(path60) {
+      if (path60.slice(-1) === "/") {
+        path60 = path60.substring(0, path60.length - 1);
       }
-      var lastSlash = path59.lastIndexOf("/");
-      return lastSlash > 0 ? path59.substring(0, lastSlash) : "";
+      var lastSlash = path60.lastIndexOf("/");
+      return lastSlash > 0 ? path60.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path59) {
-      if (path59.slice(-1) !== "/") {
-        path59 += "/";
+    var forceTrailingSlash = function(path60) {
+      if (path60.slice(-1) !== "/") {
+        path60 += "/";
       }
-      return path59;
+      return path60;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -33126,7 +33215,7 @@ var SessionManager = class {
     }
   }
   // ---- 命令方法：均返回 { response, broadcast[] }，由 dispatcher 聚合 ----
-  create(args, creatorPrincipalId, creatorOwnerPrincipalId) {
+  create(args, creatorPrincipalId) {
     let cwd;
     if (args.ownerPersonaId) {
       cwd = derivePersonaSpawnCwd(
@@ -33169,7 +33258,6 @@ var SessionManager = class {
       ownerPersonaId: args.ownerPersonaId,
       appBuilderProject: args.appBuilderProject,
       creatorPrincipalId,
-      ...creatorOwnerPrincipalId ? { creatorOwnerPrincipalId } : {},
       createdAt: iso,
       updatedAt: iso
     };
@@ -36638,9 +36726,10 @@ var LocalWsServer = class {
   httpServer = null;
   frameHandler = null;
   clients = /* @__PURE__ */ new Map();
-  // Task 1.7 capability platform：capId → Set<clientId>，撤销时 O(1) 找到该 cap 的
-  // 所有活跃连接做关闭级联（Task 1.10）。同一 cap 可能多端同时连（多设备 / 多 tab）。
-  capabilityIdToClients = /* @__PURE__ */ new Map();
+  // guest principal id → Set<clientId>，撤销时 O(1) 找到该 guest 的所有活跃连接做关闭级联。
+  // 同一 guest 可能多端同时连（多设备 / 多 tab）。
+  // Phase 3 (决策 #14): 索引键从 ctx.capabilityId 改为 guest principal.id（两者恒等，纯正名）。
+  guestIdToClients = /* @__PURE__ */ new Map();
   logger;
   pingIntervalMs;
   async start() {
@@ -36758,38 +36847,6 @@ var LocalWsServer = class {
       this.safeSend(c.ws, frame);
     }
   }
-  // capability platform v3 inbox 重写: 推给某条 cap channel 的两端 ws.
-  //   - 所有 owner ws (owner 看自家所有 channel)
-  //   - 该 capabilityId 的所有 guest ws (该 cap 持有人的多端/多 tab)
-  // 一次调用同时推两端, inbox:event push 帧由此走.
-  broadcastToCapabilityChannel(capabilityId, frame) {
-    this.broadcastToOwners(frame);
-    const set = this.capabilityIdToClients.get(capabilityId);
-    if (!set) return;
-    for (const id of set) {
-      const c = this.clients.get(id);
-      if (!c) continue;
-      this.safeSend(c.ws, frame);
-    }
-  }
-  // Phase 4 capability platform DM: 广播到指定 principal 的所有活跃 ws.
-  //   principalId === ownerPrincipalId  → 同 broadcastToOwners (所有 owner ws)
-  //   principalId === 'owner' sentinel  → 同上（向后兼容遗留 caller / 协议层 sentinel）
-  //   principalId === 'cap_xxx'         → 该 capability 的所有 guest ws (多端 / 多 tab)
-  // 用于 DM inbox:event 路由: from + to 两侧各播一次, 让双方 UI 实时看到 thread 更新.
-  broadcastToPrincipal(principalId, frame) {
-    if (principalId === "owner" || principalId === this.opts.ownerPrincipalId) {
-      this.broadcastToOwners(frame);
-      return;
-    }
-    const set = this.capabilityIdToClients.get(principalId);
-    if (!set) return;
-    for (const id of set) {
-      const c = this.clients.get(id);
-      if (!c) continue;
-      this.safeSend(c.ws, frame);
-    }
-  }
   firstSubscriber(sessionId) {
     for (const c of this.clients.values()) {
       if (c.handle.subscribedSessions.has(sessionId)) return c.handle;
@@ -36812,16 +36869,16 @@ var LocalWsServer = class {
     this.safeSend(c.ws, frame);
   }
   // Task 1.7 capability platform：AuthGate.onAuthed 回调里调本方法，把 ConnectionContext
-  // 绑到 client；guest 连接同时进 capId 索引（Task 1.10 撤销级联用）。
+  // 绑到 client；guest 连接同时进 guest 索引（撤销级联用）。
   attachClientContext(clientId, ctx) {
     const c = this.clients.get(clientId);
     if (!c) return;
     c.ctx = ctx;
-    if (ctx.capabilityId) {
-      let set = this.capabilityIdToClients.get(ctx.capabilityId);
+    if (ctx.principal.kind === "guest") {
+      let set = this.guestIdToClients.get(ctx.principal.id);
       if (!set) {
         set = /* @__PURE__ */ new Set();
-        this.capabilityIdToClients.set(ctx.capabilityId, set);
+        this.guestIdToClients.set(ctx.principal.id, set);
       }
       set.add(clientId);
     }
@@ -36830,10 +36887,27 @@ var LocalWsServer = class {
   getClientContext(clientId) {
     return this.clients.get(clientId)?.ctx ?? null;
   }
-  // Task 1.10 撤销级联：关闭某 capability 的所有活跃 ws 连接。close code 4401
+  // 飞书热切换（spec 决策 #9）：身份切换后踢掉所有连接强制重连——在线连接的 ctx
+  // （attachClientContext 时绑定）持有旧身份，重连后用新身份重建。
+  // close code 4408（非 4401！4401 = token 撤销，客户端会停止重连）：
+  // 客户端按普通断连处理 → 自动重连 → 新身份 ctx。
+  closeAllClients(code = 4408, reason = "IDENTITY_SWITCHED") {
+    const ids = [...this.clients.keys()];
+    for (const id of ids) {
+      const c = this.clients.get(id);
+      if (!c) continue;
+      try {
+        c.ws.close(code, reason);
+      } catch {
+      }
+    }
+  }
+  // Task 1.10 撤销级联：关闭某 guest principal 的所有活跃 ws 连接。close code 4401
   // 让客户端识别 'capability revoked' 而非普通断连。
-  closeConnectionsByCapability(capabilityId, code = 4401, reason = "TOKEN_REVOKED") {
-    const set = this.capabilityIdToClients.get(capabilityId);
+  // capability:delete 级联用 cap.id 调本方法——noAuth 旧 per-peer cap guest 的
+  // principal.id ≡ cap.id，级联语义不变（Phase 3 决策 #14 正名）。
+  closeConnectionsByGuestId(guestPrincipalId, code = 4401, reason = "TOKEN_REVOKED") {
+    const set = this.guestIdToClients.get(guestPrincipalId);
     if (!set) return;
     const ids = [...set];
     for (const id of ids) {
@@ -36898,16 +36972,18 @@ var LocalWsServer = class {
       this.logger?.warn("ready frame build failed", { err: err.message });
     }
     socket.on("message", (data) => {
-      this.onMessage(handle, data, remoteAddress);
+      void this.onMessage(handle, data, remoteAddress).catch((err) => {
+        this.logger?.warn("onMessage failed", { err: err.message });
+      });
     });
     socket.on("close", () => {
       const c = this.clients.get(id);
       if (c?.pingTimer) clearInterval(c.pingTimer);
-      const capId = c?.ctx?.capabilityId;
-      if (capId) {
-        const set = this.capabilityIdToClients.get(capId);
+      const guestId = c?.ctx?.principal.kind === "guest" ? c.ctx.principal.id : void 0;
+      if (guestId) {
+        const set = this.guestIdToClients.get(guestId);
         set?.delete(id);
-        if (set && set.size === 0) this.capabilityIdToClients.delete(capId);
+        if (set && set.size === 0) this.guestIdToClients.delete(guestId);
       }
       this.clients.delete(id);
       authGate?.unregister(id);
@@ -36917,7 +36993,7 @@ var LocalWsServer = class {
       this.logger?.warn("client socket error", { clientId: id, err: err.message });
     });
   }
-  onMessage(client, data, remoteAddress) {
+  async onMessage(client, data, remoteAddress) {
     let frame;
     try {
       frame = JSON.parse(data.toString());
@@ -36928,7 +37004,7 @@ var LocalWsServer = class {
     const authGate = this.opts.authGate;
     if (authGate) {
       const wasAuthed = authGate.isAuthed(client.id);
-      const verdict = authGate.handleFrame({ id: client.id, remoteAddress }, frame);
+      const verdict = await authGate.handleFrame({ id: client.id, remoteAddress }, frame);
       if (verdict !== "pass") {
         if (!wasAuthed && authGate.isAuthed(client.id)) {
           try {
@@ -36943,14 +37019,8 @@ var LocalWsServer = class {
       }
     } else if (frame.type === "auth") {
       const token = typeof frame.token === "string" ? frame.token ?? "" : "";
-      const selfPrincipalId = typeof frame.selfPrincipalId === "string" ? frame.selfPrincipalId ?? "" : "";
-      const selfDisplayName = typeof frame.selfDisplayName === "string" ? frame.selfDisplayName ?? "" : "";
       if (token && this.opts.tryVerifyCapabilityToken) {
-        const guestCtx = this.opts.tryVerifyCapabilityToken(
-          token,
-          selfPrincipalId || void 0,
-          selfDisplayName || void 0
-        );
+        const guestCtx = this.opts.tryVerifyCapabilityToken(token);
         if (guestCtx) this.attachClientContext(client.id, guestCtx);
       }
       this.safeSend(this.clients.get(client.id).ws, { type: "auth:ok" });
@@ -37031,7 +37101,7 @@ var AuthGate = class {
   registerConnection(handle) {
     const enforce = this.opts.shouldEnforce(handle.remoteAddress);
     if (!enforce) {
-      this.states.set(handle.id, { authed: true, enforce: false, timer: null });
+      this.states.set(handle.id, { authed: true, enforce: false, timer: null, pending: false });
       return true;
     }
     const setT = this.opts.setTimer ?? ((cb, ms) => setTimeout(cb, ms));
@@ -37040,7 +37110,7 @@ var AuthGate = class {
       if (!st || st.authed) return;
       this.opts.closeConnection(handle, 1008, "auth timeout");
     }, this.opts.timeoutMs);
-    this.states.set(handle.id, { authed: false, enforce: true, timer });
+    this.states.set(handle.id, { authed: false, enforce: true, timer, pending: false });
     return false;
   }
   unregister(handleId) {
@@ -37056,12 +37126,15 @@ var AuthGate = class {
   }
   // 收到一帧时调；返回 'consumed' / 'reject' / 'pass'
   // - consumed：这一帧是 auth 帧（成功或失败），调用方不要再走业务路由
-  // - reject：未通过 auth 但帧不是 auth 帧，调用方应放弃此帧（gate 已关连接）
+  // - reject：未通过 auth 但帧不是 auth 帧，调用方应放弃此帧（gate 已关连接 / 验证进行中）
   // - pass：已 authed，调用方继续走业务路由
-  handleFrame(handle, frame) {
+  //
+  // Phase 2：async（authenticate 注入路径走中心 server introspect HTTP 调用）。
+  async handleFrame(handle, frame) {
     const st = this.states.get(handle.id);
     if (!st) return "reject";
     if (st.authed) return "pass";
+    if (st.pending) return "reject";
     const parsed = AuthRequestFrameSchema.safeParse(frame);
     if (!parsed.success) {
       const reason = frame.type === "auth" ? "auth failed" : "auth required";
@@ -37071,11 +37144,14 @@ var AuthGate = class {
     }
     let ctx = null;
     if (this.opts.authenticate) {
-      const r = this.opts.authenticate(
-        parsed.data.token,
-        parsed.data.selfPrincipalId,
-        parsed.data.selfDisplayName
-      );
+      st.pending = true;
+      let r;
+      try {
+        r = await this.opts.authenticate(parsed.data.token, parsed.data.selfUrl);
+      } finally {
+        st.pending = false;
+      }
+      if (!this.states.has(handle.id)) return "reject";
       if (!r.ok) {
         this.opts.closeConnection(handle, 4401, r.code);
         this.markFailed(handle.id);
@@ -37178,26 +37254,33 @@ function ownerContext(ownerPrincipalId, displayName) {
     grants: [{ resource: { type: "*" }, actions: ["admin"] }]
   };
 }
-function guestContext(cap, peerOwnerPrincipalId) {
+function connectGuestContext(subDevice, subOwner, provider, displayName) {
   return {
-    principal: { id: cap.id, kind: "guest", displayName: cap.displayName },
-    grants: cap.grants,
-    capabilityId: cap.id,
-    ...peerOwnerPrincipalId ? { peerOwnerPrincipalId } : {}
+    principal: { id: subDevice, kind: "guest", displayName },
+    grants: PERSONAL_CAP_GRANTS.map((g2) => ({
+      resource: { ...g2.resource },
+      actions: [...g2.actions]
+    })),
+    ownerId: subOwner,
+    provider
   };
 }
-function authenticate(token, deps) {
+async function authenticate(token, deps) {
   if (!token) return { ok: false, code: "NO_TOKEN" };
   if (deps.isOwnerToken(token)) {
     return { ok: true, context: ownerContext(deps.ownerPrincipalId, deps.ownerDisplayName) };
   }
-  if (!deps.capabilityRegistry) return { ok: false, code: "BAD_TOKEN" };
-  const v2 = deps.capabilityRegistry.verifyToken(token);
-  if (!v2.ok) {
-    if (v2.code === "TOKEN_INVALID") return { ok: false, code: "BAD_TOKEN" };
-    return { ok: false, code: v2.code };
+  if (!deps.verifyConnectToken) return { ok: false, code: "BAD_TOKEN" };
+  const result = deps.verifyConnectToken(token);
+  if (!result.ok) {
+    if (result.reason === "EXPIRED") return { ok: false, code: "TOKEN_EXPIRED" };
+    if (result.reason === "WRONG_AUDIENCE") return { ok: false, code: "TOKEN_REVOKED" };
+    return { ok: false, code: "BAD_TOKEN" };
   }
-  return { ok: true, context: guestContext(v2.capability, deps.selfPrincipalId) };
+  return {
+    ok: true,
+    context: connectGuestContext(result.subDevice, result.subOwner, result.provider, result.displayName)
+  };
 }
 
 // src/permission/capability-store.ts
@@ -37343,8 +37426,8 @@ var CapabilityManager = class {
   list() {
     return this.registry.list();
   }
-  // whoami handler 用：根据 capabilityId 反查 caller 的 capability 实体。
-  // 返回 Capability 持久化形态；handler 调 stripSecretHash 后再上 wire。
+  // 调试 / 旧 per-peer cap 反查用（Phase 3 决策 #14 后无生产调用方，保留属三件套范围）。
+  // 返回 Capability 持久化形态；调用方需 stripSecretHash 后再上 wire。
   findById(id) {
     return this.registry.findById(id);
   }
@@ -37377,89 +37460,14 @@ function cleanupGuestSessionsForCapability(cap, factory) {
   return { removed };
 }
 
-// src/permission/personal-capability.ts
-var import_node_fs15 = __toESM(require("fs"), 1);
-var import_node_path16 = __toESM(require("path"), 1);
-var import_node_crypto4 = __toESM(require("crypto"), 1);
-var PERSONAL_CAP_FILE_NAME = "personal-capability.json";
-var PERSONAL_CAP_DISPLAY_NAME = "personal";
-function personalCapFilePath(dataDir) {
-  return import_node_path16.default.join(dataDir, PERSONAL_CAP_FILE_NAME);
-}
-function loadOrCreatePersonalCapability(opts) {
-  const file = personalCapFilePath(opts.dataDir);
-  const generateToken = opts.generateToken ?? defaultGenerateToken;
-  const generateId = opts.generateId ?? defaultGenerateId;
-  const now = opts.now ?? Date.now;
-  const existing = readFile(file);
-  if (existing) return existing;
-  const token = generateToken();
-  const id = generateId();
-  const capability = {
-    id,
-    secretHash: sha256Hex2(token),
-    displayName: PERSONAL_CAP_DISPLAY_NAME,
-    // CapabilitySchema 期待 mutable Grant[]，protocol 常量是 readonly，落盘前拷一份
-    grants: PERSONAL_CAP_GRANTS.map((g2) => ({
-      resource: { ...g2.resource },
-      actions: [...g2.actions]
-    })),
-    issuedAt: now(),
-    usedCount: 0
-  };
-  const content = { token, capability };
-  writeFile(file, content);
-  return content;
-}
-function readFile(file) {
-  let raw;
-  try {
-    raw = import_node_fs15.default.readFileSync(file, "utf8");
-  } catch (err) {
-    const code = err?.code;
-    if (code === "ENOENT") return null;
-    return null;
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    return null;
-  }
-  if (!parsed || typeof parsed !== "object") return null;
-  const obj = parsed;
-  if (typeof obj.token !== "string" || obj.token.length === 0) return null;
-  const capParsed = CapabilitySchema.safeParse(obj.capability);
-  if (!capParsed.success) return null;
-  if (sha256Hex2(obj.token) !== capParsed.data.secretHash) return null;
-  return { token: obj.token, capability: capParsed.data };
-}
-function writeFile(file, content) {
-  import_node_fs15.default.mkdirSync(import_node_path16.default.dirname(file), { recursive: true });
-  import_node_fs15.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
-  try {
-    import_node_fs15.default.chmodSync(file, 384);
-  } catch {
-  }
-}
-function defaultGenerateToken() {
-  return import_node_crypto4.default.randomBytes(24).toString("base64url");
-}
-function defaultGenerateId() {
-  return "personal_" + import_node_crypto4.default.randomBytes(6).toString("base64url");
-}
-function sha256Hex2(s) {
-  return import_node_crypto4.default.createHash("sha256").update(s).digest("hex");
-}
-
 // src/inbox/inbox-store.ts
-var fs20 = __toESM(require("fs"), 1);
-var path22 = __toESM(require("path"), 1);
+var fs19 = __toESM(require("fs"), 1);
+var path21 = __toESM(require("path"), 1);
 var INBOX_SUBDIR = "inbox";
 var InboxStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
-    fs20.mkdirSync(this.dirPath(), { recursive: true });
+    fs19.mkdirSync(this.dirPath(), { recursive: true });
   }
   dataDir;
   /**
@@ -37467,11 +37475,11 @@ var InboxStore = class {
    * sinceCreatedAt 缺省时返回全量; 提供时仅返回 createdAt > sinceCreatedAt 的增量.
    * 文件不存在时返回 [] (不抛, 不创建).
    */
-  list(peerOwnerId, sinceCreatedAt) {
-    const file = this.filePath(peerOwnerId);
+  list(peerDeviceId, sinceCreatedAt) {
+    const file = this.filePath(peerDeviceId);
     let raw;
     try {
-      raw = fs20.readFileSync(file, "utf8");
+      raw = fs19.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -37481,13 +37489,13 @@ var InboxStore = class {
     return all.filter((m2) => m2.createdAt > sinceCreatedAt);
   }
   /**
-   * 列出所有 peer 的 peerOwnerId (扫目录所有 *.jsonl 文件名).
+   * 列出所有 peer 的 peerDeviceId (扫目录所有 *.jsonl 文件名).
    */
-  listAllPeerOwnerIds() {
+  listAllPeerDeviceIds() {
     const dir = this.dirPath();
     let entries;
     try {
-      entries = fs20.readdirSync(dir);
+      entries = fs19.readdirSync(dir);
     } catch (err) {
       if (err?.code === "ENOENT") return [];
       return [];
@@ -37499,63 +37507,63 @@ var InboxStore = class {
    * 双投 + 重试场景下保护 — 同 id 已存在则 no-op，不重写不覆盖。
    */
   append(message) {
-    const existing = this.list(message.peerOwnerId);
+    const existing = this.list(message.peerDeviceId);
     if (existing.some((m2) => m2.id === message.id)) return;
-    const file = this.filePath(message.peerOwnerId);
+    const file = this.filePath(message.peerDeviceId);
     const line = JSON.stringify(message) + "\n";
-    fs20.appendFileSync(file, line, { mode: 384 });
+    fs19.appendFileSync(file, line, { mode: 384 });
     try {
-      fs20.chmodSync(file, 384);
+      fs19.chmodSync(file, 384);
     } catch {
     }
   }
   /**
-   * 把该 peer 所有 createdAt<=upToCreatedAt 且 sender!=principalId 的消息
-   * readBy[principalId] 写成 upToCreatedAt. O(N) rewrite 整个文件.
+   * 把该 peer 所有 createdAt<=upToCreatedAt 且 sender!=readerDeviceId 的消息
+   * readBy[readerDeviceId] 写成 upToCreatedAt. O(N) rewrite 整个文件.
    * 返写入了几条.
    */
-  markRead(peerOwnerId, principalId, upToCreatedAt) {
-    const messages = this.list(peerOwnerId);
+  markRead(peerDeviceId, readerDeviceId, upToCreatedAt) {
+    const messages = this.list(peerDeviceId);
     let changed = 0;
     const next = messages.map((m2) => {
-      if (m2.senderPrincipalId === principalId) return m2;
+      if (m2.senderDeviceId === readerDeviceId) return m2;
       if (m2.createdAt > upToCreatedAt) return m2;
-      const cur = m2.readBy[principalId];
+      const cur = m2.readBy[readerDeviceId];
       if (cur !== void 0 && cur >= upToCreatedAt) return m2;
       changed++;
-      return { ...m2, readBy: { ...m2.readBy, [principalId]: upToCreatedAt } };
+      return { ...m2, readBy: { ...m2.readBy, [readerDeviceId]: upToCreatedAt } };
     });
     if (changed === 0) return 0;
-    this.rewriteFile(peerOwnerId, next);
+    this.rewriteFile(peerDeviceId, next);
     return changed;
   }
   /**
    * 删整个 peer 的 jsonl (peer:remove cascade). 不存在 no-op.
    */
-  removeByPeerOwnerId(peerOwnerId) {
-    const file = this.filePath(peerOwnerId);
+  removeByPeerDeviceId(peerDeviceId) {
+    const file = this.filePath(peerDeviceId);
     try {
-      fs20.unlinkSync(file);
+      fs19.unlinkSync(file);
     } catch (err) {
       if (err?.code === "ENOENT") return;
     }
   }
-  rewriteFile(peerOwnerId, messages) {
-    const file = this.filePath(peerOwnerId);
+  rewriteFile(peerDeviceId, messages) {
+    const file = this.filePath(peerDeviceId);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
     const content = messages.map((m2) => JSON.stringify(m2)).join("\n") + (messages.length > 0 ? "\n" : "");
-    fs20.writeFileSync(tmp, content, { mode: 384 });
-    fs20.renameSync(tmp, file);
+    fs19.writeFileSync(tmp, content, { mode: 384 });
+    fs19.renameSync(tmp, file);
     try {
-      fs20.chmodSync(file, 384);
+      fs19.chmodSync(file, 384);
     } catch {
     }
   }
   dirPath() {
-    return path22.join(this.dataDir, INBOX_SUBDIR);
+    return path21.join(this.dataDir, INBOX_SUBDIR);
   }
-  filePath(peerOwnerId) {
-    return path22.join(this.dirPath(), `${peerOwnerId}.jsonl`);
+  filePath(peerDeviceId) {
+    return path21.join(this.dirPath(), `${peerDeviceId}.jsonl`);
   }
 };
 function parseAllLines(raw) {
@@ -37591,72 +37599,72 @@ var InboxManager = class {
    * （owner ctx 必填 args.peerOwnerId；guest ctx 由 handler 反查 peer-store）。
    */
   postMessage(args) {
-    const beforeLen = this.store.list(args.peerOwnerId).length;
+    const beforeLen = this.store.list(args.peerDeviceId).length;
     const msg = {
       id: args.id,
-      peerOwnerId: args.peerOwnerId,
-      senderPrincipalId: args.senderPrincipalId,
+      peerDeviceId: args.peerDeviceId,
+      senderDeviceId: args.senderDeviceId,
       text: args.text,
       createdAt: args.createdAt,
       readBy: {}
     };
     this.store.append(msg);
-    const afterLen = this.store.list(args.peerOwnerId).length;
+    const afterLen = this.store.list(args.peerDeviceId).length;
     if (afterLen === beforeLen) return msg;
-    this.broadcast(args.peerOwnerId, {
+    this.broadcast(args.peerDeviceId, {
       type: "inbox:event",
-      peerOwnerId: args.peerOwnerId,
+      peerDeviceId: args.peerDeviceId,
       message: msg
     });
     return msg;
   }
-  list(peerOwnerId, sinceCreatedAt) {
-    return this.store.list(peerOwnerId, sinceCreatedAt);
+  list(peerDeviceId, sinceCreatedAt) {
+    return this.store.list(peerDeviceId, sinceCreatedAt);
   }
   /**
    * 标已读. 返写入了几条 (sender !== self 且 createdAt <= upToCreatedAt 的消息).
    * broadcast 已更新 readBy 的每条消息 (单帧一消息, 复用 inbox:event 通道).
    */
   markRead(args) {
-    const before = this.store.list(args.peerOwnerId);
-    const changed = this.store.markRead(args.peerOwnerId, args.principalId, args.upToCreatedAt);
+    const before = this.store.list(args.peerDeviceId);
+    const changed = this.store.markRead(args.peerDeviceId, args.readerDeviceId, args.upToCreatedAt);
     if (changed === 0) return 0;
-    const after = this.store.list(args.peerOwnerId);
+    const after = this.store.list(args.peerDeviceId);
     const beforeById = new Map(before.map((m2) => [m2.id, m2]));
     for (const m2 of after) {
       const prev = beforeById.get(m2.id);
       if (!prev) continue;
-      if (prev.readBy[args.principalId] === m2.readBy[args.principalId]) continue;
-      this.broadcast(args.peerOwnerId, {
+      if (prev.readBy[args.readerDeviceId] === m2.readBy[args.readerDeviceId]) continue;
+      this.broadcast(args.peerDeviceId, {
         type: "inbox:event",
-        peerOwnerId: args.peerOwnerId,
+        peerDeviceId: args.peerDeviceId,
         message: m2
       });
     }
     return changed;
   }
   /** peer:remove cascade. 删整个 peer 的 jsonl. */
-  removeChannel(peerOwnerId) {
-    this.store.removeByPeerOwnerId(peerOwnerId);
+  removeChannel(peerDeviceId) {
+    this.store.removeByPeerDeviceId(peerDeviceId);
   }
 };
 
-// src/state/received-capability-store.ts
-var fs21 = __toESM(require("fs"), 1);
-var path23 = __toESM(require("path"), 1);
-var FILE_NAME = "received-capabilities.json";
-var ReceivedCapabilityStore = class {
+// src/state/contact-store.ts
+var fs20 = __toESM(require("fs"), 1);
+var path22 = __toESM(require("path"), 1);
+var FILE_NAME = "contacts.json";
+var ContactStore = class {
   constructor(dataDir) {
     this.dataDir = dataDir;
   }
   dataDir;
-  caps = /* @__PURE__ */ new Map();
+  contacts = /* @__PURE__ */ new Map();
   load() {
-    this.caps.clear();
-    const file = path23.join(this.dataDir, FILE_NAME);
+    this.contacts.clear();
+    const file = path22.join(this.dataDir, FILE_NAME);
     let raw;
     try {
-      raw = fs21.readFileSync(file, "utf8");
+      raw = fs20.readFileSync(file, "utf8");
     } catch (err) {
       if (err?.code !== "ENOENT") this.renameBak(file);
       return;
@@ -37668,52 +37676,58 @@ var ReceivedCapabilityStore = class {
       this.renameBak(file);
       return;
     }
-    const arr = parsed?.receivedCaps;
+    const arr = parsed?.contacts;
     if (!Array.isArray(arr)) return;
     for (const entry of arr) {
-      const r = ReceivedCapabilitySchema.safeParse(entry);
-      if (r.success) this.caps.set(r.data.ownerPrincipalId, r.data);
+      const r = ContactSchema.safeParse(entry);
+      if (r.success) this.contacts.set(r.data.deviceId, r.data);
     }
   }
   list() {
-    return Array.from(this.caps.values());
+    return Array.from(this.contacts.values());
   }
-  get(ownerPrincipalId) {
-    return this.caps.get(ownerPrincipalId) ?? null;
+  get(deviceId) {
+    return this.contacts.get(deviceId) ?? null;
   }
-  hasOwner(ownerPrincipalId) {
-    return this.caps.has(ownerPrincipalId);
+  has(deviceId) {
+    return this.contacts.has(deviceId);
   }
-  upsert(cap) {
-    this.caps.set(cap.ownerPrincipalId, cap);
-    this.flush();
+  /** 某个人（ownerId, provider）的所有设备记录——人级视图（显示/分组用，不参与路由） */
+  findByOwner(ownerId, provider) {
+    return this.list().filter((c) => c.ownerId === ownerId && c.provider === provider);
   }
-  remove(ownerPrincipalId) {
-    if (!this.caps.delete(ownerPrincipalId)) return;
+  upsert(contact) {
+    this.contacts.set(contact.deviceId, contact);
     this.flush();
   }
+  /** 删单台设备（contact:remove 语义，决策 #16）：删该 deviceId 一条，返回是否删到 */
+  removeByDeviceId(deviceId) {
+    const existed = this.contacts.delete(deviceId);
+    if (existed) this.flush();
+    return existed;
+  }
   flush() {
-    const file = path23.join(this.dataDir, FILE_NAME);
+    const file = path22.join(this.dataDir, FILE_NAME);
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
     const content = JSON.stringify(
-      { receivedCaps: Array.from(this.caps.values()) },
+      { contacts: Array.from(this.contacts.values()) },
       null,
       2
     );
-    fs21.mkdirSync(this.dataDir, { recursive: true });
-    fs21.writeFileSync(tmp, content, { mode: 384 });
-    fs21.renameSync(tmp, file);
+    fs20.mkdirSync(this.dataDir, { recursive: true });
+    fs20.writeFileSync(tmp, content, { mode: 384 });
+    fs20.renameSync(tmp, file);
   }
   renameBak(file) {
     try {
-      fs21.renameSync(file, `${file}.bak`);
+      fs20.renameSync(file, `${file}.bak`);
     } catch {
     }
   }
 };
 
-// src/received-capability/connect-remote.ts
-var crypto6 = __toESM(require("crypto"), 1);
+// src/contact/connect-remote.ts
+var crypto5 = __toESM(require("crypto"), 1);
 var HANDSHAKE_TIMEOUT_MS = 5e3;
 var RPC_TIMEOUT_MS = 5e3;
 async function connectRemote(args) {
@@ -37730,8 +37744,11 @@ async function connectRemote(args) {
     JSON.stringify({
       type: "auth",
       token: args.token,
-      selfPrincipalId: args.selfPrincipalId,
-      selfDisplayName: args.selfDisplayName
+      // 自动反向（spec 决策 #11）：带本机可达地址时对方反向建联系人；
+      // 缺省时省略字段（不发空串），对方 schema selfUrl 是 .min(1).optional()。
+      // 决策 #16：身份字段（selfPrincipalId/selfDisplayName/selfDeviceId）已删——
+      // 对方从 connect token 签名背书取 deviceId/ownerId/provider，不信自报。
+      ...args.selfUrl ? { selfUrl: args.selfUrl } : {}
     })
   );
   await new Promise((resolve6, reject) => {
@@ -37742,7 +37759,7 @@ async function connectRemote(args) {
       } catch {
         return;
       }
-      if (f.type === "auth:ok" || f.type === "ready") {
+      if (f.type === "auth:ok") {
         ws.off("message", onMessage);
         resolve6();
         return;
@@ -37759,7 +37776,7 @@ async function connectRemote(args) {
     }, HANDSHAKE_TIMEOUT_MS);
   });
   function call(method, payload) {
-    const requestId = crypto6.randomUUID();
+    const requestId = crypto5.randomUUID();
     return new Promise((resolve6, reject) => {
       const onMessage = (raw) => {
         let f;
@@ -37788,9 +37805,9 @@ async function connectRemote(args) {
     whoami: async () => {
       const f = await call("whoami", {});
       return {
-        ownerId: f.owner.id,
+        ownerId: f.owner.ownerId,
+        provider: f.owner.provider,
         displayName: f.owner.displayName,
-        capabilityId: f.capability.id,
         grants: f.capability.grants
       };
     },
@@ -37803,62 +37820,96 @@ async function connectRemote(args) {
   };
 }
 
+// src/contact/auto-reverse.ts
+init_protocol();
+async function autoReverseContact(args) {
+  if (!args.selfUrl) return;
+  const now = args.now ?? Date.now;
+  const grants = PERSONAL_CAP_GRANTS.map((g2) => ({
+    resource: { ...g2.resource },
+    actions: [...g2.actions]
+  }));
+  const base = {
+    deviceId: args.deviceId,
+    ownerId: args.ownerId,
+    provider: args.provider,
+    displayName: args.displayName,
+    remoteUrl: args.selfUrl,
+    connectToken: "",
+    grants,
+    addedAt: now()
+  };
+  args.store.upsert(base);
+  args.broadcast({ type: "contact:added", contact: base });
+  if (!args.exchangeToken) return;
+  let token;
+  try {
+    token = await args.exchangeToken(args.deviceId);
+  } catch {
+    return;
+  }
+  if (!token) return;
+  const upgraded = { ...base, connectToken: token };
+  args.store.upsert(upgraded);
+  args.broadcast({ type: "contact:added", contact: upgraded });
+}
+
 // src/migrations/2026-05-20-flatten-sessions.ts
-var fs22 = __toESM(require("fs"), 1);
-var path24 = __toESM(require("path"), 1);
+var fs21 = __toESM(require("fs"), 1);
+var path23 = __toESM(require("path"), 1);
 var MIGRATION_FLAG_NAME = ".migration.v1.done";
 function migrateFlattenSessions(opts) {
   const dataDir = opts.dataDir;
   const now = opts.now ?? Date.now;
-  const sessionsDir = path24.join(dataDir, "sessions");
-  const flagPath = path24.join(sessionsDir, MIGRATION_FLAG_NAME);
+  const sessionsDir = path23.join(dataDir, "sessions");
+  const flagPath = path23.join(sessionsDir, MIGRATION_FLAG_NAME);
   if (existsSync3(flagPath)) {
     return { skipped: true, flagWritten: false, movedBare: 0, movedVmOwner: 0, archivedListener: 0 };
   }
   let movedBare = 0;
   let movedVmOwner = 0;
   let archivedListener = 0;
-  const defaultDir = path24.join(sessionsDir, "default");
+  const defaultDir = path23.join(sessionsDir, "default");
   if (existsSync3(defaultDir)) {
     for (const entry of readdirSafe(defaultDir)) {
       if (!entry.endsWith(".json")) continue;
-      const src = path24.join(defaultDir, entry);
-      const dst = path24.join(sessionsDir, entry);
-      fs22.renameSync(src, dst);
+      const src = path23.join(defaultDir, entry);
+      const dst = path23.join(sessionsDir, entry);
+      fs21.renameSync(src, dst);
       movedBare += 1;
     }
     rmdirIfEmpty(defaultDir);
   }
   for (const pid of readdirSafe(sessionsDir)) {
-    const personaDir = path24.join(sessionsDir, pid);
+    const personaDir = path23.join(sessionsDir, pid);
     if (!isDir(personaDir)) continue;
     if (pid === "default") continue;
-    const ownerSrc = path24.join(personaDir, "owner");
+    const ownerSrc = path23.join(personaDir, "owner");
     if (existsSync3(ownerSrc) && isDir(ownerSrc)) {
-      const ownerDst = path24.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
-      fs22.mkdirSync(ownerDst, { recursive: true });
+      const ownerDst = path23.join(dataDir, "personas", pid, ".clawd", "sessions", "owner");
+      fs21.mkdirSync(ownerDst, { recursive: true });
       for (const file of readdirSafe(ownerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs22.renameSync(path24.join(ownerSrc, file), path24.join(ownerDst, file));
+        fs21.renameSync(path23.join(ownerSrc, file), path23.join(ownerDst, file));
         movedVmOwner += 1;
       }
       rmdirIfEmpty(ownerSrc);
     }
-    const listenerSrc = path24.join(personaDir, "listener");
+    const listenerSrc = path23.join(personaDir, "listener");
     if (existsSync3(listenerSrc) && isDir(listenerSrc)) {
-      const archiveDst = path24.join(dataDir, ".legacy", `listener-${pid}`);
-      fs22.mkdirSync(archiveDst, { recursive: true });
+      const archiveDst = path23.join(dataDir, ".legacy", `listener-${pid}`);
+      fs21.mkdirSync(archiveDst, { recursive: true });
       for (const file of readdirSafe(listenerSrc)) {
         if (!file.endsWith(".json")) continue;
-        fs22.renameSync(path24.join(listenerSrc, file), path24.join(archiveDst, file));
+        fs21.renameSync(path23.join(listenerSrc, file), path23.join(archiveDst, file));
         archivedListener += 1;
       }
       rmdirIfEmpty(listenerSrc);
     }
     rmdirIfEmpty(personaDir);
   }
-  fs22.mkdirSync(sessionsDir, { recursive: true });
-  fs22.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
+  fs21.mkdirSync(sessionsDir, { recursive: true });
+  fs21.writeFileSync(flagPath, JSON.stringify({ migratedAt: now() }, null, 2));
   return {
     skipped: false,
     flagWritten: true,
@@ -37869,7 +37920,7 @@ function migrateFlattenSessions(opts) {
 }
 function existsSync3(p2) {
   try {
-    fs22.statSync(p2);
+    fs21.statSync(p2);
     return true;
   } catch {
     return false;
@@ -37877,31 +37928,31 @@ function existsSync3(p2) {
 }
 function isDir(p2) {
   try {
-    return fs22.statSync(p2).isDirectory();
+    return fs21.statSync(p2).isDirectory();
   } catch {
     return false;
   }
 }
 function readdirSafe(p2) {
   try {
-    return fs22.readdirSync(p2);
+    return fs21.readdirSync(p2);
   } catch {
     return [];
   }
 }
 function rmdirIfEmpty(p2) {
   try {
-    fs22.rmdirSync(p2);
+    fs21.rmdirSync(p2);
   } catch {
   }
 }
 
 // src/transport/http-router.ts
-var import_node_fs17 = __toESM(require("fs"), 1);
-var import_node_path20 = __toESM(require("path"), 1);
+var import_node_fs16 = __toESM(require("fs"), 1);
+var import_node_path19 = __toESM(require("path"), 1);
 
 // src/attachment/mime.ts
-var import_node_path17 = __toESM(require("path"), 1);
+var import_node_path16 = __toESM(require("path"), 1);
 var TEXT_PLAIN = "text/plain; charset=utf-8";
 var EXT_TO_NATIVE_MIME = {
   // 图片
@@ -38008,14 +38059,14 @@ var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
   ".mk"
 ]);
 function lookupMime(filePathOrName) {
-  const ext = import_node_path17.default.extname(filePathOrName).toLowerCase();
+  const ext = import_node_path16.default.extname(filePathOrName).toLowerCase();
   if (EXT_TO_NATIVE_MIME[ext]) return EXT_TO_NATIVE_MIME[ext];
   if (TEXT_EXTENSIONS.has(ext)) return TEXT_PLAIN;
   return "application/octet-stream";
 }
 
 // src/attachment/sign-url.ts
-var import_node_crypto5 = __toESM(require("crypto"), 1);
+var import_node_crypto4 = __toESM(require("crypto"), 1);
 var HMAC_ALGO = "sha256";
 function base64urlEncode(buf) {
   const b2 = typeof buf === "string" ? Buffer.from(buf, "utf8") : buf;
@@ -38032,7 +38083,7 @@ function decodeAbsPathFromUrl(encoded) {
 }
 function computeSig(secret, absPath, e) {
   const msg = e === null ? absPath : `${absPath}|${e}`;
-  return import_node_crypto5.default.createHmac(HMAC_ALGO, secret).update(msg).digest();
+  return import_node_crypto4.default.createHmac(HMAC_ALGO, secret).update(msg).digest();
 }
 function signUrlParts(secret, absPath, ttlSeconds, now = Date.now) {
   const e = ttlSeconds === null ? null : Math.floor(now() / 1e3) + ttlSeconds;
@@ -38067,7 +38118,7 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
   if (provided.length !== expected.length) {
     return { ok: false, code: "BAD_SIG" };
   }
-  if (!import_node_crypto5.default.timingSafeEqual(provided, expected)) {
+  if (!import_node_crypto4.default.timingSafeEqual(provided, expected)) {
     return { ok: false, code: "BAD_SIG" };
   }
   if (e !== null && now() / 1e3 > e) {
@@ -38077,9 +38128,9 @@ function verifySignedUrl(secret, absPath, eRaw, s, now = Date.now) {
 }
 
 // src/attachment/upload.ts
-var import_node_fs16 = __toESM(require("fs"), 1);
-var import_node_path18 = __toESM(require("path"), 1);
-var import_node_crypto6 = __toESM(require("crypto"), 1);
+var import_node_fs15 = __toESM(require("fs"), 1);
+var import_node_path17 = __toESM(require("path"), 1);
+var import_node_crypto5 = __toESM(require("crypto"), 1);
 var import_promises = require("stream/promises");
 var UploadError = class extends Error {
   constructor(code, message) {
@@ -38090,24 +38141,24 @@ var UploadError = class extends Error {
   code;
 };
 function assertValidFileName(fileName) {
-  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path18.default.basename(fileName)) {
+  if (fileName.length === 0 || fileName === "." || fileName === ".." || fileName.startsWith(".") || fileName.includes("/") || fileName.includes("\\") || fileName !== import_node_path17.default.basename(fileName)) {
     throw new UploadError("INVALID_FILENAME", `fileName must be a plain basename, got: ${fileName}`);
   }
 }
 var HASH_PREFIX_LEN = 16;
 async function writeUploadedAttachment(args) {
   assertValidFileName(args.fileName);
-  const attachmentsRoot = import_node_path18.default.join(args.sessionDir, ".attachments");
+  const attachmentsRoot = import_node_path17.default.join(args.sessionDir, ".attachments");
   try {
-    import_node_fs16.default.mkdirSync(attachmentsRoot, { recursive: true });
+    import_node_fs15.default.mkdirSync(attachmentsRoot, { recursive: true });
   } catch (err) {
     throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
   }
-  const hasher = import_node_crypto6.default.createHash("sha256");
+  const hasher = import_node_crypto5.default.createHash("sha256");
   let actualSize = 0;
-  const tmpPath = import_node_path18.default.join(
+  const tmpPath = import_node_path17.default.join(
     attachmentsRoot,
-    `.upload-${process.pid}-${Date.now()}-${import_node_crypto6.default.randomBytes(4).toString("hex")}`
+    `.upload-${process.pid}-${Date.now()}-${import_node_crypto5.default.randomBytes(4).toString("hex")}`
   );
   try {
     await (0, import_promises.pipeline)(
@@ -38120,18 +38171,18 @@ async function writeUploadedAttachment(args) {
           yield buf;
         }
       },
-      import_node_fs16.default.createWriteStream(tmpPath, { mode: 384 })
+      import_node_fs15.default.createWriteStream(tmpPath, { mode: 384 })
     );
   } catch (err) {
     try {
-      import_node_fs16.default.unlinkSync(tmpPath);
+      import_node_fs15.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError("STORAGE_ERROR", `write failed: ${err.message}`);
   }
   if (actualSize !== args.contentLength) {
     try {
-      import_node_fs16.default.unlinkSync(tmpPath);
+      import_node_fs15.default.unlinkSync(tmpPath);
     } catch {
     }
     throw new UploadError(
@@ -38140,35 +38191,35 @@ async function writeUploadedAttachment(args) {
     );
   }
   const attachmentId = hasher.digest("hex").slice(0, HASH_PREFIX_LEN);
-  const hashDir = import_node_path18.default.join(attachmentsRoot, attachmentId);
+  const hashDir = import_node_path17.default.join(attachmentsRoot, attachmentId);
   let finalFileName;
   let hashDirExists = false;
   try {
-    hashDirExists = import_node_fs16.default.statSync(hashDir).isDirectory();
+    hashDirExists = import_node_fs15.default.statSync(hashDir).isDirectory();
   } catch {
   }
   if (hashDirExists) {
-    const existing = import_node_fs16.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
+    const existing = import_node_fs15.default.readdirSync(hashDir).filter((n) => !n.startsWith("."));
     finalFileName = existing[0] ?? args.fileName;
     try {
-      import_node_fs16.default.unlinkSync(tmpPath);
+      import_node_fs15.default.unlinkSync(tmpPath);
     } catch {
     }
   } else {
     try {
-      import_node_fs16.default.mkdirSync(hashDir, { recursive: true });
+      import_node_fs15.default.mkdirSync(hashDir, { recursive: true });
       finalFileName = args.fileName;
-      import_node_fs16.default.renameSync(tmpPath, import_node_path18.default.join(hashDir, finalFileName));
+      import_node_fs15.default.renameSync(tmpPath, import_node_path17.default.join(hashDir, finalFileName));
     } catch (err) {
       try {
-        import_node_fs16.default.unlinkSync(tmpPath);
+        import_node_fs15.default.unlinkSync(tmpPath);
       } catch {
       }
       throw new UploadError("STORAGE_ERROR", `rename failed: ${err.message}`);
     }
   }
-  const absPath = import_node_path18.default.join(hashDir, finalFileName);
-  const relPath = import_node_path18.default.relative(args.sessionDir, absPath);
+  const absPath = import_node_path17.default.join(hashDir, finalFileName);
+  const relPath = import_node_path17.default.relative(args.sessionDir, absPath);
   args.groupFileStore.upsert(args.scope, args.sessionId, {
     relPath: absPath,
     // 存绝对路径，与现有 agent 入清单的形态一致（attachment.ts:144 双形态兼容）
@@ -38182,7 +38233,7 @@ async function writeUploadedAttachment(args) {
 
 // src/extension/import.ts
 var import_promises2 = __toESM(require("fs/promises"), 1);
-var import_node_path19 = __toESM(require("path"), 1);
+var import_node_path18 = __toESM(require("path"), 1);
 var import_node_os10 = __toESM(require("os"), 1);
 var import_jszip = __toESM(require_lib3(), 1);
 var ImportError = class extends Error {
@@ -38200,7 +38251,7 @@ async function importZip(buf, root) {
     throw new ImportError("ZIP_INVALID", `failed to load zip: ${e.message}`);
   }
   for (const name of Object.keys(zip.files)) {
-    if (name.includes("..") || name.startsWith("/") || import_node_path19.default.isAbsolute(name)) {
+    if (name.includes("..") || name.startsWith("/") || import_node_path18.default.isAbsolute(name)) {
       throw new ImportError("ZIP_INVALID", `unsafe zip entry path: ${name}`);
     }
   }
@@ -38233,7 +38284,7 @@ async function importZip(buf, root) {
       );
     }
   }
-  const destDir = import_node_path19.default.join(root, manifest.id);
+  const destDir = import_node_path18.default.join(root, manifest.id);
   let destExists = false;
   try {
     await import_promises2.default.access(destDir);
@@ -38243,15 +38294,15 @@ async function importZip(buf, root) {
   if (destExists) {
     throw new ImportError("ALREADY_EXISTS", `extension ${manifest.id} already installed`);
   }
-  const stage = await import_promises2.default.mkdtemp(import_node_path19.default.join(import_node_os10.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
+  const stage = await import_promises2.default.mkdtemp(import_node_path18.default.join(import_node_os10.default.tmpdir(), `clawd-ext-stage-${manifest.id}-`));
   try {
     for (const [name, entry] of Object.entries(zip.files)) {
-      const dest = import_node_path19.default.join(stage, name);
+      const dest = import_node_path18.default.join(stage, name);
       if (entry.dir) {
         await import_promises2.default.mkdir(dest, { recursive: true });
         continue;
       }
-      await import_promises2.default.mkdir(import_node_path19.default.dirname(dest), { recursive: true });
+      await import_promises2.default.mkdir(import_node_path18.default.dirname(dest), { recursive: true });
       const content = await entry.async("nodebuffer");
       await import_promises2.default.writeFile(dest, content);
     }
@@ -38365,7 +38416,7 @@ function isValidUploadFileName(fileName) {
   if (fileName === "." || fileName === "..") return false;
   if (fileName.startsWith(".")) return false;
   if (fileName.includes("/") || fileName.includes("\\")) return false;
-  return fileName === import_node_path20.default.basename(fileName);
+  return fileName === import_node_path19.default.basename(fileName);
 }
 function createHttpRouter(deps) {
   return async (req, res) => {
@@ -38380,6 +38431,25 @@ function createHttpRouter(deps) {
       });
       return true;
     }
+    if (url.pathname === "/auth/callback") {
+      if (req.method !== "GET") {
+        sendJson(res, 404, { code: "NOT_FOUND", message: `no route for ${req.method} ${url.pathname}` });
+        return true;
+      }
+      if (!deps.feishuLogin) {
+        sendJson(res, 501, { code: "NOT_IMPLEMENTED", message: "feishu login not wired" });
+        return true;
+      }
+      const result = await deps.feishuLogin.handleLoginCallback({
+        token: url.searchParams.get("token") ?? "",
+        state: url.searchParams.get("state") ?? "",
+        expiresAt: url.searchParams.get("expires_at")
+      });
+      const html = result.ok ? `<!doctype html><meta charset="utf-8"><title>clawd</title><style>body{font-family:-apple-system,sans-serif;padding:48px;color:#222}</style><h2>\u767B\u5F55\u6210\u529F\uFF0C\u53EF\u5173\u95ED\u6B64\u9875\u3002</h2><p>\u8EAB\u4EFD\uFF1A${escapeHtml(result.identity.displayName)}</p><script>setTimeout(()=>window.close(),1500)</script>` : `<!doctype html><meta charset="utf-8"><title>clawd</title><style>body{font-family:-apple-system,sans-serif;padding:48px;color:#922}</style><h2>\u767B\u5F55\u5931\u8D25</h2><p>${escapeHtml(result.reason)}</p>`;
+      res.writeHead(result.ok ? 200 : 400, { "Content-Type": "text/html; charset=utf-8" });
+      res.end(html);
+      return true;
+    }
     if (url.pathname.startsWith(RPC_ROUTE_PREFIX)) {
       if (!deps.rpcDispatcher) {
         sendJson(res, 501, { code: "NOT_IMPLEMENTED", message: "HTTP RPC adapter not wired" });
@@ -38575,7 +38645,7 @@ function createHttpRouter(deps) {
         return true;
       }
       let absPath;
-      if (import_node_path20.default.isAbsolute(pathParam)) {
+      if (import_node_path19.default.isAbsolute(pathParam)) {
         absPath = pathParam;
       } else if (deps.sessionStore) {
         const file = deps.sessionStore.read(sid);
@@ -38583,7 +38653,7 @@ function createHttpRouter(deps) {
           sendJson(res, 404, { code: "NOT_FOUND", message: `session ${sid} not found` });
           return true;
         }
-        absPath = import_node_path20.default.join(file.cwd, pathParam);
+        absPath = import_node_path19.default.join(file.cwd, pathParam);
       } else {
         sendJson(res, 501, withCtx(ctx, { code: "NOT_IMPLEMENTED", message: "sessionStore not wired" }));
         return true;
@@ -38650,6 +38720,9 @@ function parseUrl(rawUrl) {
     return null;
   }
 }
+function escapeHtml(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
 function sendJson(res, status, body, extraHeaders) {
   res.writeHead(status, {
     "Content-Type": "application/json; charset=utf-8",
@@ -38663,7 +38736,7 @@ function withCtx(ctx, body) {
 function streamFile(res, absPath, logger) {
   let stat;
   try {
-    stat = import_node_fs17.default.statSync(absPath);
+    stat = import_node_fs16.default.statSync(absPath);
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT") {
@@ -38678,7 +38751,7 @@ function streamFile(res, absPath, logger) {
     return;
   }
   const mime = lookupMime(absPath);
-  const basename = import_node_path20.default.basename(absPath);
+  const basename = import_node_path19.default.basename(absPath);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": String(stat.size),
@@ -38686,7 +38759,7 @@ function streamFile(res, absPath, logger) {
     // 防止浏览器把任意 mime 当 html 渲染
     "X-Content-Type-Options": "nosniff"
   });
-  const stream = import_node_fs17.default.createReadStream(absPath);
+  const stream = import_node_fs16.default.createReadStream(absPath);
   stream.on("error", (err) => {
     logger?.warn("streamFile read error", { absPath, err: err.message });
     res.destroy();
@@ -38695,8 +38768,8 @@ function streamFile(res, absPath, logger) {
 }
 
 // src/attachment/gc.ts
-var import_node_fs18 = __toESM(require("fs"), 1);
-var import_node_path21 = __toESM(require("path"), 1);
+var import_node_fs17 = __toESM(require("fs"), 1);
+var import_node_path20 = __toESM(require("path"), 1);
 var DEFAULT_TTL_MS = 30 * 24 * 3600 * 1e3;
 function runAttachmentGc(args) {
   const now = (args.now ?? Date.now)();
@@ -38705,38 +38778,38 @@ function runAttachmentGc(args) {
   for (const { scope, sessionId } of args.sessionScopes) {
     for (const entry of args.groupFileStore.list(scope, sessionId)) {
       if (entry.stale) continue;
-      if (import_node_path21.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
+      if (import_node_path20.default.isAbsolute(entry.relPath)) liveAbs.add(entry.relPath);
     }
   }
   for (const { scope, sessionId } of args.sessionScopes) {
-    const sessionDir = args.getSessionCwd?.(sessionId) ?? import_node_path21.default.join(
+    const sessionDir = args.getSessionCwd?.(sessionId) ?? import_node_path20.default.join(
       args.dataDir,
       "sessions",
       ...scopeSubPath(scope).map(safeFileName),
       safeFileName(sessionId)
     );
-    const attRoot = import_node_path21.default.join(sessionDir, ".attachments");
+    const attRoot = import_node_path20.default.join(sessionDir, ".attachments");
     let hashDirs;
     try {
-      hashDirs = import_node_fs18.default.readdirSync(attRoot);
+      hashDirs = import_node_fs17.default.readdirSync(attRoot);
     } catch (err) {
       if (err.code === "ENOENT") continue;
       args.logger?.warn("attachment gc: readdir failed", { attRoot, err: err.message });
       continue;
     }
     for (const hashDir of hashDirs) {
-      const hashDirAbs = import_node_path21.default.join(attRoot, hashDir);
+      const hashDirAbs = import_node_path20.default.join(attRoot, hashDir);
       let files;
       try {
-        files = import_node_fs18.default.readdirSync(hashDirAbs);
+        files = import_node_fs17.default.readdirSync(hashDirAbs);
       } catch {
         continue;
       }
       for (const name of files) {
-        const file = import_node_path21.default.join(hashDirAbs, name);
+        const file = import_node_path20.default.join(hashDirAbs, name);
         let stat;
         try {
-          stat = import_node_fs18.default.statSync(file);
+          stat = import_node_fs17.default.statSync(file);
         } catch {
           continue;
         }
@@ -38745,27 +38818,27 @@ function runAttachmentGc(args) {
         if (age < ttlMs) continue;
         if (liveAbs.has(file)) continue;
         try {
-          import_node_fs18.default.unlinkSync(file);
+          import_node_fs17.default.unlinkSync(file);
         } catch (err) {
           args.logger?.warn("attachment gc: unlink failed", { file, err: err.message });
         }
       }
       try {
-        if (import_node_fs18.default.readdirSync(hashDirAbs).length === 0) import_node_fs18.default.rmdirSync(hashDirAbs);
+        if (import_node_fs17.default.readdirSync(hashDirAbs).length === 0) import_node_fs17.default.rmdirSync(hashDirAbs);
       } catch {
       }
     }
     try {
-      if (import_node_fs18.default.readdirSync(attRoot).length === 0) import_node_fs18.default.rmdirSync(attRoot);
+      if (import_node_fs17.default.readdirSync(attRoot).length === 0) import_node_fs17.default.rmdirSync(attRoot);
     } catch {
     }
   }
 }
 
 // src/attachment/group.ts
-var import_node_fs19 = __toESM(require("fs"), 1);
-var import_node_path22 = __toESM(require("path"), 1);
-var import_node_crypto7 = __toESM(require("crypto"), 1);
+var import_node_fs18 = __toESM(require("fs"), 1);
+var import_node_path21 = __toESM(require("path"), 1);
+var import_node_crypto6 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
   dataDir;
@@ -38776,11 +38849,11 @@ var GroupFileStore = class {
     this.logger = opts.logger;
   }
   rootForScope(scope) {
-    return import_node_path22.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
+    return import_node_path21.default.join(this.dataDir, "sessions", ...scopeSubPath(scope).map(safeFileName));
   }
   /** 与 SessionStore.filePath 平级，扩展名 .group-files.json */
   filePath(scope, sessionId) {
-    return import_node_path22.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
+    return import_node_path21.default.join(this.rootForScope(scope), `${safeFileName(sessionId)}.group-files.json`);
   }
   cacheKey(scope, sessionId) {
     return scope.kind === "default" ? `default::${sessionId}` : `persona:${scope.personaId}:${scope.mode}::${sessionId}`;
@@ -38789,7 +38862,7 @@ var GroupFileStore = class {
   readFile(scope, sessionId) {
     const file = this.filePath(scope, sessionId);
     try {
-      const raw = import_node_fs19.default.readFileSync(file, "utf8");
+      const raw = import_node_fs18.default.readFileSync(file, "utf8");
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) {
         this.logger?.warn("GroupFileStore.readFile: not an array; resetting session entries", {
@@ -38815,10 +38888,10 @@ var GroupFileStore = class {
   }
   writeFile(scope, sessionId, entries) {
     const file = this.filePath(scope, sessionId);
-    import_node_fs19.default.mkdirSync(import_node_path22.default.dirname(file), { recursive: true });
+    import_node_fs18.default.mkdirSync(import_node_path21.default.dirname(file), { recursive: true });
     const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-    import_node_fs19.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
-    import_node_fs19.default.renameSync(tmp, file);
+    import_node_fs18.default.writeFileSync(tmp, JSON.stringify(entries, null, 2), { mode: 384 });
+    import_node_fs18.default.renameSync(tmp, file);
   }
   /** 拉一份当前 session 的清单。读盘 → cache；之后调用复用 cache */
   list(scope, sessionId) {
@@ -38854,7 +38927,7 @@ var GroupFileStore = class {
       entries[idx] = next;
     } else {
       next = {
-        id: `gf-${import_node_crypto7.default.randomBytes(6).toString("base64url")}`,
+        id: `gf-${import_node_crypto6.default.randomBytes(6).toString("base64url")}`,
         relPath: input.relPath,
         from: input.from,
         label: input.label,
@@ -38904,10 +38977,10 @@ var GroupFileStore = class {
 };
 
 // src/discovery/state-file.ts
-var import_node_fs20 = __toESM(require("fs"), 1);
-var import_node_path23 = __toESM(require("path"), 1);
+var import_node_fs19 = __toESM(require("fs"), 1);
+var import_node_path22 = __toESM(require("path"), 1);
 function defaultStateFilePath(dataDir) {
-  return import_node_path23.default.join(dataDir, "state.json");
+  return import_node_path22.default.join(dataDir, "state.json");
 }
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
@@ -38929,7 +39002,7 @@ var StateFileManager = class {
   }
   read() {
     try {
-      const raw = import_node_fs20.default.readFileSync(this.file, "utf8");
+      const raw = import_node_fs19.default.readFileSync(this.file, "utf8");
       const parsed = JSON.parse(raw);
       return parsed;
     } catch {
@@ -38943,34 +39016,34 @@ var StateFileManager = class {
     return { status: "stale", existing };
   }
   write(state) {
-    import_node_fs20.default.mkdirSync(import_node_path23.default.dirname(this.file), { recursive: true });
+    import_node_fs19.default.mkdirSync(import_node_path22.default.dirname(this.file), { recursive: true });
     const tmp = `${this.file}.tmp.${process.pid}.${Date.now()}`;
-    import_node_fs20.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
-    import_node_fs20.default.renameSync(tmp, this.file);
+    import_node_fs19.default.writeFileSync(tmp, JSON.stringify(state, null, 2), { mode: 384 });
+    import_node_fs19.default.renameSync(tmp, this.file);
     if (process.platform !== "win32") {
       try {
-        import_node_fs20.default.chmodSync(this.file, 384);
+        import_node_fs19.default.chmodSync(this.file, 384);
       } catch {
       }
     }
   }
   delete() {
     try {
-      import_node_fs20.default.unlinkSync(this.file);
+      import_node_fs19.default.unlinkSync(this.file);
     } catch {
     }
   }
 };
 
 // src/tunnel/tunnel-manager.ts
-var import_node_fs24 = __toESM(require("fs"), 1);
-var import_node_path27 = __toESM(require("path"), 1);
-var import_node_crypto8 = __toESM(require("crypto"), 1);
+var import_node_fs23 = __toESM(require("fs"), 1);
+var import_node_path26 = __toESM(require("path"), 1);
+var import_node_crypto7 = __toESM(require("crypto"), 1);
 var import_node_child_process5 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
-var import_node_fs21 = __toESM(require("fs"), 1);
-var import_node_path24 = __toESM(require("path"), 1);
+var import_node_fs20 = __toESM(require("fs"), 1);
+var import_node_path23 = __toESM(require("path"), 1);
 var TunnelStore = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -38978,7 +39051,7 @@ var TunnelStore = class {
   filePath;
   async get() {
     try {
-      const raw = await import_node_fs21.default.promises.readFile(this.filePath, "utf8");
+      const raw = await import_node_fs20.default.promises.readFile(this.filePath, "utf8");
       const obj = JSON.parse(raw);
       if (!isPersistedTunnel(obj)) return null;
       return obj;
@@ -38989,22 +39062,22 @@ var TunnelStore = class {
     }
   }
   async set(v2) {
-    const dir = import_node_path24.default.dirname(this.filePath);
-    await import_node_fs21.default.promises.mkdir(dir, { recursive: true });
+    const dir = import_node_path23.default.dirname(this.filePath);
+    await import_node_fs20.default.promises.mkdir(dir, { recursive: true });
     const data = JSON.stringify(v2, null, 2);
     const tmp = `${this.filePath}.tmp.${process.pid}.${Date.now()}`;
-    await import_node_fs21.default.promises.writeFile(tmp, data, { mode: 384 });
+    await import_node_fs20.default.promises.writeFile(tmp, data, { mode: 384 });
     if (process.platform !== "win32") {
       try {
-        await import_node_fs21.default.promises.chmod(tmp, 384);
+        await import_node_fs20.default.promises.chmod(tmp, 384);
       } catch {
       }
     }
-    await import_node_fs21.default.promises.rename(tmp, this.filePath);
+    await import_node_fs20.default.promises.rename(tmp, this.filePath);
   }
   async clear() {
     try {
-      await import_node_fs21.default.promises.unlink(this.filePath);
+      await import_node_fs20.default.promises.unlink(this.filePath);
     } catch (err) {
       const code = err?.code;
       if (code !== "ENOENT") throw err;
@@ -39099,9 +39172,9 @@ function escape(v2) {
 }
 
 // src/tunnel/frpc-binary.ts
-var import_node_fs22 = __toESM(require("fs"), 1);
+var import_node_fs21 = __toESM(require("fs"), 1);
 var import_node_os11 = __toESM(require("os"), 1);
-var import_node_path25 = __toESM(require("path"), 1);
+var import_node_path24 = __toESM(require("path"), 1);
 var import_node_child_process3 = require("child_process");
 var import_node_stream2 = require("stream");
 var import_promises3 = require("stream/promises");
@@ -39133,20 +39206,20 @@ function frpcDownloadUrl(version2, p2) {
 }
 async function ensureFrpcBinary(opts) {
   if (opts.override) {
-    if (!import_node_fs22.default.existsSync(opts.override)) {
+    if (!import_node_fs21.default.existsSync(opts.override)) {
       throw new Error(`frpc binary not found at override path: ${opts.override}`);
     }
     return opts.override;
   }
   const version2 = opts.version ?? FRPC_VERSION;
   const platform = opts.platform ?? detectPlatform();
-  const binDir = import_node_path25.default.join(opts.dataDir, "bin");
-  import_node_fs22.default.mkdirSync(binDir, { recursive: true });
+  const binDir = import_node_path24.default.join(opts.dataDir, "bin");
+  import_node_fs21.default.mkdirSync(binDir, { recursive: true });
   cleanupStaleArtifacts(binDir);
-  const stableBin = import_node_path25.default.join(binDir, "frpc");
-  if (import_node_fs22.default.existsSync(stableBin)) return stableBin;
+  const stableBin = import_node_path24.default.join(binDir, "frpc");
+  if (import_node_fs21.default.existsSync(stableBin)) return stableBin;
   const partialBin = `${stableBin}.partial`;
-  const tarballPath = import_node_path25.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
+  const tarballPath = import_node_path24.default.join(binDir, `frp_${version2}_${platform.os}_${platform.arch}.tar.gz.partial`);
   try {
     const url = frpcDownloadUrl(version2, platform);
     await downloadToFile(url, tarballPath, opts.fetchImpl);
@@ -39155,8 +39228,8 @@ async function ensureFrpcBinary(opts) {
     } else {
       await extractFrpcFromTarball(tarballPath, binDir, version2, platform, partialBin);
     }
-    import_node_fs22.default.chmodSync(partialBin, 493);
-    import_node_fs22.default.renameSync(partialBin, stableBin);
+    import_node_fs21.default.chmodSync(partialBin, 493);
+    import_node_fs21.default.renameSync(partialBin, stableBin);
   } finally {
     safeUnlink(tarballPath);
     safeUnlink(partialBin);
@@ -39166,15 +39239,15 @@ async function ensureFrpcBinary(opts) {
 function cleanupStaleArtifacts(binDir) {
   let entries;
   try {
-    entries = import_node_fs22.default.readdirSync(binDir);
+    entries = import_node_fs21.default.readdirSync(binDir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name.endsWith(".partial") || name.startsWith("extract-")) {
-      const full = import_node_path25.default.join(binDir, name);
+      const full = import_node_path24.default.join(binDir, name);
       try {
-        import_node_fs22.default.rmSync(full, { recursive: true, force: true });
+        import_node_fs21.default.rmSync(full, { recursive: true, force: true });
       } catch {
       }
     }
@@ -39182,7 +39255,7 @@ function cleanupStaleArtifacts(binDir) {
 }
 function safeUnlink(p2) {
   try {
-    import_node_fs22.default.unlinkSync(p2);
+    import_node_fs21.default.unlinkSync(p2);
   } catch {
   }
 }
@@ -39193,13 +39266,13 @@ async function downloadToFile(url, dest, fetchImpl) {
   if (!res.ok || !res.body) {
     throw new Error(`download failed: ${res.status} ${res.statusText}`);
   }
-  const out = import_node_fs22.default.createWriteStream(dest);
+  const out = import_node_fs21.default.createWriteStream(dest);
   const nodeStream = import_node_stream2.Readable.fromWeb(res.body);
   await (0, import_promises3.pipeline)(nodeStream, out);
 }
 async function extractFrpcFromTarball(tarball, binDir, version2, platform, destBin) {
-  const work = import_node_path25.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
-  import_node_fs22.default.mkdirSync(work, { recursive: true });
+  const work = import_node_path24.default.join(binDir, `extract-${process.pid}-${Date.now()}`);
+  import_node_fs21.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve6, reject) => {
       const proc = (0, import_node_child_process3.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
@@ -39207,32 +39280,32 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
       proc.on("exit", (code) => code === 0 ? resolve6() : reject(new Error(`tar exited ${code}`)));
     });
     const dirName = `frp_${version2}_${platform.os}_${platform.arch}`;
-    const src = import_node_path25.default.join(work, dirName, "frpc");
-    if (!import_node_fs22.default.existsSync(src)) {
+    const src = import_node_path24.default.join(work, dirName, "frpc");
+    if (!import_node_fs21.default.existsSync(src)) {
       throw new Error(`frpc not found inside tarball at ${src}`);
     }
-    import_node_fs22.default.copyFileSync(src, destBin);
+    import_node_fs21.default.copyFileSync(src, destBin);
   } finally {
-    import_node_fs22.default.rmSync(work, { recursive: true, force: true });
+    import_node_fs21.default.rmSync(work, { recursive: true, force: true });
   }
 }
 
 // src/tunnel/frpc-process.ts
-var import_node_fs23 = __toESM(require("fs"), 1);
-var import_node_path26 = __toESM(require("path"), 1);
+var import_node_fs22 = __toESM(require("fs"), 1);
+var import_node_path25 = __toESM(require("path"), 1);
 var import_node_child_process4 = require("child_process");
 function frpcPidFilePath(dataDir) {
-  return import_node_path26.default.join(dataDir, "frpc.pid");
+  return import_node_path25.default.join(dataDir, "frpc.pid");
 }
 function writeFrpcPid(dataDir, pid) {
   try {
-    import_node_fs23.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
+    import_node_fs22.default.writeFileSync(frpcPidFilePath(dataDir), String(pid), { mode: 384 });
   } catch {
   }
 }
 function clearFrpcPid(dataDir) {
   try {
-    import_node_fs23.default.unlinkSync(frpcPidFilePath(dataDir));
+    import_node_fs22.default.unlinkSync(frpcPidFilePath(dataDir));
   } catch {
   }
 }
@@ -39248,7 +39321,7 @@ function defaultIsPidAlive(pid) {
 }
 function defaultReadPidFile(file) {
   try {
-    return import_node_fs23.default.readFileSync(file, "utf8");
+    return import_node_fs22.default.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -39264,7 +39337,7 @@ function defaultSleep(ms) {
 }
 async function killStaleFrpc(deps) {
   const pidFile = frpcPidFilePath(deps.dataDir);
-  const tomlPath = import_node_path26.default.join(deps.dataDir, "frpc.toml");
+  const tomlPath = import_node_path25.default.join(deps.dataDir, "frpc.toml");
   const readPidFile = deps.readPidFileImpl ?? defaultReadPidFile;
   const isAlive = deps.isPidAliveImpl ?? defaultIsPidAlive;
   const killPid = deps.killPidImpl ?? defaultKillPid;
@@ -39288,7 +39361,7 @@ async function killStaleFrpc(deps) {
   }
   if (victims.size === 0) {
     try {
-      import_node_fs23.default.unlinkSync(pidFile);
+      import_node_fs22.default.unlinkSync(pidFile);
     } catch {
     }
     return;
@@ -39299,7 +39372,7 @@ async function killStaleFrpc(deps) {
   }
   await sleep(deps.reapWaitMs ?? 300);
   try {
-    import_node_fs23.default.unlinkSync(pidFile);
+    import_node_fs22.default.unlinkSync(pidFile);
   } catch {
   }
 }
@@ -39336,7 +39409,7 @@ var DEFAULT_TUNNEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var TunnelManager = class {
   constructor(deps) {
     this.deps = deps;
-    this.store = deps.store ?? new TunnelStore(import_node_path27.default.join(deps.dataDir, "tunnel.json"));
+    this.store = deps.store ?? new TunnelStore(import_node_path26.default.join(deps.dataDir, "tunnel.json"));
     this.ttlMs = deps.ttlMs ?? DEFAULT_TUNNEL_TTL_MS;
     this.startupTimeoutMs = deps.startupTimeoutMs ?? 15e3;
   }
@@ -39463,8 +39536,8 @@ var TunnelManager = class {
         dataDir: this.deps.dataDir,
         override: this.deps.frpcBinaryOverride ?? void 0
       });
-      const tomlPath = import_node_path27.default.join(this.deps.dataDir, "frpc.toml");
-      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto8.default.randomBytes(3).toString("hex")}`;
+      const tomlPath = import_node_path26.default.join(this.deps.dataDir, "frpc.toml");
+      const proxyName = `clawd-${t.subdomain}-${localPort}-${import_node_crypto7.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t.frpsHost,
         serverPort: t.frpsPort,
@@ -39474,12 +39547,12 @@ var TunnelManager = class {
         localPort,
         logLevel: "info"
       });
-      await import_node_fs24.default.promises.writeFile(tomlPath, toml, { mode: 384 });
+      await import_node_fs23.default.promises.writeFile(tomlPath, toml, { mode: 384 });
       const proc = (this.deps.spawnImpl ?? import_node_child_process5.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
-      const logFilePath = import_node_path27.default.join(this.deps.dataDir, "frpc.log");
-      const logStream = import_node_fs24.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
+      const logFilePath = import_node_path26.default.join(this.deps.dataDir, "frpc.log");
+      const logStream = import_node_fs23.default.createWriteStream(logFilePath, { flags: "a", mode: 384 });
       logStream.on("error", () => {
       });
       const tee = (chunk) => {
@@ -39562,59 +39635,61 @@ async function waitForFrpcReady(proc, timeoutMs) {
 
 // src/tunnel/device-key.ts
 var import_node_os12 = __toESM(require("os"), 1);
-var import_node_path28 = __toESM(require("path"), 1);
-var import_node_crypto9 = __toESM(require("crypto"), 1);
+var import_node_path27 = __toESM(require("path"), 1);
+var import_node_crypto8 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os12.default.hostname();
   const uid = opts.uid ?? (typeof import_node_os12.default.userInfo === "function" ? import_node_os12.default.userInfo().uid : 0);
   const home = opts.home ?? import_node_os12.default.homedir();
-  const defaultDataDir = import_node_path28.default.resolve(import_node_path28.default.join(home, ".clawd"));
-  const normalizedDataDir = opts.dataDir ? import_node_path28.default.resolve(opts.dataDir) : null;
+  const defaultDataDir = import_node_path27.default.resolve(import_node_path27.default.join(home, ".clawd"));
+  const normalizedDataDir = opts.dataDir ? import_node_path27.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
-  return import_node_crypto9.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
+  return import_node_crypto8.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
-var import_node_fs25 = __toESM(require("fs"), 1);
-var import_node_path29 = __toESM(require("path"), 1);
-var import_node_crypto10 = __toESM(require("crypto"), 1);
+var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_path28 = __toESM(require("path"), 1);
+var import_node_crypto9 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
-  return import_node_path29.default.join(dataDir, AUTH_FILE_NAME);
+  return import_node_path28.default.join(dataDir, AUTH_FILE_NAME);
 }
 function loadOrCreateAuthFile(opts) {
   const file = authFilePath(opts.dataDir);
-  const generate = opts.generate ?? defaultGenerateToken2;
+  const generate = opts.generate ?? defaultGenerateToken;
   const genId = opts.genOwnerPrincipalId ?? defaultGenerateOwnerPrincipalId;
   const now = opts.now ?? (() => /* @__PURE__ */ new Date());
   const existing = readAuthFile(file);
-  if (existing && existing.token && existing.signSecret && existing.ownerPrincipalId) {
+  if (existing && existing.token && existing.signSecret && existing.ownerPrincipalId && existing.deviceId && existing.deviceId === existing.ownerPrincipalId) {
     return {
       token: existing.token,
       signSecret: existing.signSecret,
       ownerPrincipalId: existing.ownerPrincipalId,
+      deviceId: existing.deviceId,
       createdAt: existing.createdAt ?? (/* @__PURE__ */ new Date(0)).toISOString()
     };
   }
   const token = existing?.token || generate();
   const signSecret = existing?.signSecret || generate();
   const ownerPrincipalId = existing?.ownerPrincipalId || genId();
+  const deviceId = ownerPrincipalId;
   const createdAt = existing?.createdAt || now().toISOString();
-  const next = { token, signSecret, ownerPrincipalId, createdAt };
+  const next = { token, signSecret, ownerPrincipalId, deviceId, createdAt };
   writeAuthFile(file, next);
   return next;
 }
-function defaultGenerateToken2() {
-  return import_node_crypto10.default.randomBytes(32).toString("base64url");
+function defaultGenerateToken() {
+  return import_node_crypto9.default.randomBytes(32).toString("base64url");
 }
 function defaultGenerateOwnerPrincipalId() {
-  return `owner-${import_node_crypto10.default.randomUUID()}`;
+  return `owner-${import_node_crypto9.default.randomUUID()}`;
 }
 function readAuthFile(file) {
   try {
-    const raw = import_node_fs25.default.readFileSync(file, "utf8");
+    const raw = import_node_fs24.default.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.token !== "string" || parsed.token.length === 0) {
       return null;
@@ -39623,6 +39698,7 @@ function readAuthFile(file) {
       token: parsed.token,
       signSecret: typeof parsed.signSecret === "string" && parsed.signSecret.length > 0 ? parsed.signSecret : void 0,
       ownerPrincipalId: typeof parsed.ownerPrincipalId === "string" && parsed.ownerPrincipalId.length > 0 ? parsed.ownerPrincipalId : void 0,
+      deviceId: typeof parsed.deviceId === "string" && parsed.deviceId.length > 0 ? parsed.deviceId : void 0,
       createdAt: typeof parsed.createdAt === "string" ? parsed.createdAt : void 0
     };
   } catch (err) {
@@ -39632,25 +39708,25 @@ function readAuthFile(file) {
   }
 }
 function writeAuthFile(file, content) {
-  import_node_fs25.default.mkdirSync(import_node_path29.default.dirname(file), { recursive: true });
-  import_node_fs25.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
+  import_node_fs24.default.mkdirSync(import_node_path28.default.dirname(file), { recursive: true });
+  import_node_fs24.default.writeFileSync(file, JSON.stringify(content, null, 2), { mode: 384 });
   try {
-    import_node_fs25.default.chmodSync(file, 384);
+    import_node_fs24.default.chmodSync(file, 384);
   } catch {
   }
 }
 
 // src/owner-profile.ts
-var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_fs25 = __toESM(require("fs"), 1);
 var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path30 = __toESM(require("path"), 1);
+var import_node_path29 = __toESM(require("path"), 1);
 var PROFILE_FILENAME = "profile.json";
 function loadOwnerDisplayName(dataDir) {
   const fallback = import_node_os13.default.userInfo().username;
-  const profilePath = import_node_path30.default.join(dataDir, PROFILE_FILENAME);
+  const profilePath = import_node_path29.default.join(dataDir, PROFILE_FILENAME);
   let raw;
   try {
-    raw = import_node_fs26.default.readFileSync(profilePath, "utf8");
+    raw = import_node_fs25.default.readFileSync(profilePath, "utf8");
   } catch {
     return fallback;
   }
@@ -39672,6 +39748,357 @@ function loadOwnerDisplayName(dataDir) {
   return displayName;
 }
 
+// src/feishu-auth/owner-identity-store.ts
+var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_path30 = __toESM(require("path"), 1);
+var OWNER_IDENTITY_FILE_NAME = "owner-identity.json";
+var OwnerIdentityStore = class {
+  file;
+  constructor(dataDir) {
+    this.file = import_node_path30.default.join(dataDir, OWNER_IDENTITY_FILE_NAME);
+  }
+  read() {
+    let raw;
+    try {
+      raw = import_node_fs26.default.readFileSync(this.file, "utf8");
+    } catch {
+      return null;
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(raw);
+    } catch {
+      return null;
+    }
+    const r = parsed;
+    if (!r.identity || typeof r.identity.ownerId !== "string" || r.identity.ownerId.length === 0 || typeof r.identity.provider !== "string" || r.identity.provider.length === 0 || typeof r.identity.displayName !== "string" || r.identity.displayName.length === 0 || typeof r.ttcToken !== "string" || r.ttcToken.length === 0) {
+      return null;
+    }
+    return {
+      identity: {
+        ownerId: r.identity.ownerId,
+        provider: r.identity.provider,
+        displayName: r.identity.displayName,
+        ...typeof r.identity.avatarUrl === "string" ? { avatarUrl: r.identity.avatarUrl } : {}
+      },
+      ttcToken: r.ttcToken,
+      ttcTokenExpiresAt: typeof r.ttcTokenExpiresAt === "number" ? r.ttcTokenExpiresAt : null,
+      loginAt: typeof r.loginAt === "string" ? r.loginAt : (/* @__PURE__ */ new Date(0)).toISOString()
+    };
+  }
+  write(record) {
+    import_node_fs26.default.mkdirSync(import_node_path30.default.dirname(this.file), { recursive: true });
+    import_node_fs26.default.writeFileSync(this.file, JSON.stringify(record, null, 2), { mode: 384 });
+    try {
+      import_node_fs26.default.chmodSync(this.file, 384);
+    } catch {
+    }
+  }
+  clear() {
+    try {
+      import_node_fs26.default.unlinkSync(this.file);
+    } catch (err) {
+      const code = err?.code;
+      if (code !== "ENOENT") throw err;
+    }
+  }
+};
+
+// src/feishu-auth/login-flow.ts
+var import_node_crypto10 = __toESM(require("crypto"), 1);
+var STATE_TTL_MS = 5 * 60 * 1e3;
+var LoginFlow = class {
+  constructor(deps) {
+    this.deps = deps;
+  }
+  deps;
+  pendingStates = /* @__PURE__ */ new Map();
+  start() {
+    const state = import_node_crypto10.default.randomBytes(16).toString("base64url");
+    const now = (this.deps.now ?? Date.now)();
+    this.pendingStates.set(state, now);
+    this.gcExpired(now);
+    const url = new URL("/auth/authorize", this.deps.ttcAuthBase);
+    url.searchParams.set("callback_url", this.deps.getCallbackUrl());
+    url.searchParams.set("state", state);
+    url.searchParams.set("auto", "1");
+    return { authUrl: url.toString(), state };
+  }
+  async handleCallback(params) {
+    const now = (this.deps.now ?? Date.now)();
+    const issuedAt = this.pendingStates.get(params.state);
+    if (issuedAt === void 0) {
+      return { ok: false, reason: "state mismatch" };
+    }
+    this.pendingStates.delete(params.state);
+    if (now - issuedAt > STATE_TTL_MS) {
+      return { ok: false, reason: "state expired" };
+    }
+    if (!params.token) {
+      return { ok: false, reason: "missing token" };
+    }
+    let identity;
+    try {
+      identity = await this.deps.fetchUserInfo(params.token);
+    } catch (err) {
+      return { ok: false, reason: `user_info failed: ${err.message}` };
+    }
+    const expiresAtNum = params.expiresAt ? Number.parseInt(params.expiresAt, 10) : NaN;
+    this.deps.store.write({
+      identity,
+      ttcToken: params.token,
+      ttcTokenExpiresAt: Number.isFinite(expiresAtNum) ? expiresAtNum : null,
+      loginAt: new Date(now).toISOString()
+    });
+    return { ok: true, identity };
+  }
+  gcExpired(now) {
+    for (const [state, issuedAt] of this.pendingStates) {
+      if (now - issuedAt > STATE_TTL_MS) this.pendingStates.delete(state);
+    }
+  }
+};
+
+// src/feishu-auth/ttc-client.ts
+var TTC_HOSTS = {
+  auth: "https://app.ttcadvisory.com",
+  api: "https://api.ttcadvisory.com"
+};
+var TtcUserInfoError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "TtcUserInfoError";
+  }
+  code;
+};
+async function fetchTtcUserInfo(opts) {
+  const doFetch = opts.fetchImpl ?? fetch;
+  let res;
+  try {
+    res = await doFetch(`${opts.apiBase}/api/user_service/v1/login/user`, {
+      headers: { Authorization: `Bearer ${opts.token}` }
+    });
+  } catch (err) {
+    throw new TtcUserInfoError("NETWORK", `TTC user_info request failed: ${err.message}`);
+  }
+  if (!res.ok) {
+    if (res.status === 401) {
+      throw new TtcUserInfoError("UNAUTHORIZED", "TTC token invalid or expired");
+    }
+    throw new TtcUserInfoError("API_ERROR", `TTC user_info HTTP ${res.status}`);
+  }
+  const body = await res.json();
+  if (body.code !== 0) {
+    throw new TtcUserInfoError("API_ERROR", `TTC user_info code=${body.code}: ${body.message ?? ""}`);
+  }
+  const d = body.data;
+  if (!d || typeof d.unique_id !== "string" || d.unique_id.length === 0 || typeof d.name !== "string" || d.name.length === 0) {
+    throw new TtcUserInfoError("BAD_RESPONSE", "TTC user_info missing unique_id or name");
+  }
+  return {
+    ownerId: d.unique_id,
+    provider: "ttc",
+    displayName: d.name,
+    ...typeof d.avatar_url === "string" && d.avatar_url.length > 0 ? { avatarUrl: d.avatar_url } : {}
+  };
+}
+
+// src/feishu-auth/central-client.ts
+var CentralClientError = class extends Error {
+  constructor(code, message, cause) {
+    super(message);
+    this.code = code;
+    this.cause = cause;
+    this.name = "CentralClientError";
+  }
+  code;
+  cause;
+};
+async function centralRequest(opts, path60, init) {
+  const f = opts.fetchImpl ?? globalThis.fetch;
+  const url = `${opts.api.replace(/\/+$/, "")}${path60}`;
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
+  let res;
+  try {
+    res = await f(url, {
+      method: init.method,
+      headers: {
+        "content-type": "application/json",
+        ...init.bearer ? { authorization: `Bearer ${init.bearer}` } : {}
+      },
+      ...init.body !== void 0 ? { body: JSON.stringify(init.body) } : {},
+      signal: ctrl.signal
+    });
+  } catch (err) {
+    clearTimeout(timer);
+    throw new CentralClientError("NETWORK", `central server request failed: ${err.message}`, err);
+  }
+  clearTimeout(timer);
+  if (res.status === 401) {
+    throw new CentralClientError("UNAUTHORIZED", "TTC JWT invalid or expired");
+  }
+  if (!res.ok) {
+    throw new CentralClientError("API_ERROR", `central server HTTP ${res.status}`);
+  }
+  try {
+    return await res.json();
+  } catch (err) {
+    throw new CentralClientError("BAD_RESPONSE", "central server: invalid json response", err);
+  }
+}
+async function centralExchange(opts) {
+  const body = await centralRequest(opts, "/api/clawd-identity/exchange", {
+    method: "POST",
+    body: {
+      jwt: opts.jwt,
+      provider: opts.provider,
+      deviceId: opts.deviceId,
+      selfDeviceId: opts.selfDeviceId
+    }
+  });
+  if (typeof body.token !== "string" || body.token.length === 0 || typeof body.ownerId !== "string" || typeof body.provider !== "string" || typeof body.displayName !== "string") {
+    throw new CentralClientError("BAD_RESPONSE", "exchange: missing token/ownerId/provider/displayName");
+  }
+  const deviceUrl = typeof body.deviceUrl === "string" && body.deviceUrl.length > 0 ? body.deviceUrl : null;
+  return { token: body.token, ownerId: body.ownerId, provider: body.provider, displayName: body.displayName, deviceUrl };
+}
+async function centralGetPublicKey(opts) {
+  const body = await centralRequest(opts, "/api/clawd-identity/public-key", {
+    method: "GET"
+  });
+  if (typeof body.publicKeyPem !== "string" || !body.publicKeyPem.includes("PUBLIC KEY")) {
+    throw new CentralClientError("BAD_RESPONSE", "public-key: missing or malformed publicKeyPem");
+  }
+  return { publicKeyPem: body.publicKeyPem };
+}
+async function centralUpsertDevice(opts) {
+  const body = await centralRequest(opts, "/api/clawd-identity/devices/self", {
+    method: "PUT",
+    bearer: opts.ttcJwt,
+    body: {
+      deviceId: opts.deviceId,
+      provider: opts.provider,
+      ...opts.url ? { url: opts.url } : {},
+      ...opts.name ? { name: opts.name } : {}
+    }
+  });
+  if (body.ok !== true) {
+    throw new CentralClientError("BAD_RESPONSE", "upsertDevice: server did not ack ok");
+  }
+  return { ok: true };
+}
+async function centralListDevices(opts) {
+  const body = await centralRequest(
+    opts,
+    `/api/clawd-identity/devices?provider=${encodeURIComponent(opts.provider)}`,
+    { method: "GET", bearer: opts.ttcJwt }
+  );
+  if (!Array.isArray(body.devices)) {
+    throw new CentralClientError("BAD_RESPONSE", "devices: missing devices array");
+  }
+  const out = [];
+  for (const raw of body.devices) {
+    const d = raw;
+    if (typeof d.deviceId !== "string" || typeof d.name !== "string" || typeof d.url !== "string") {
+      throw new CentralClientError("BAD_RESPONSE", "devices: malformed device entry");
+    }
+    out.push({ deviceId: d.deviceId, name: d.name, url: d.url });
+  }
+  return out;
+}
+
+// src/feishu-auth/verify-token.ts
+var crypto13 = __toESM(require("crypto"), 1);
+var CONNECT_TOKEN_PREFIX = "clawdtk1";
+function verifyConnectToken(args) {
+  const now = args.nowSeconds ?? Math.floor(Date.now() / 1e3);
+  const parts = args.token.split(".");
+  if (parts.length !== 3 || parts[0] !== CONNECT_TOKEN_PREFIX) {
+    return { ok: false, reason: "BAD_FORMAT" };
+  }
+  const [prefix, payloadB64, sigB64] = parts;
+  const data = `${prefix}.${payloadB64}`;
+  let signatureValid = false;
+  try {
+    signatureValid = crypto13.verify(
+      null,
+      Buffer.from(data, "utf8"),
+      args.publicKeyPem,
+      Buffer.from(sigB64, "base64url")
+    );
+  } catch {
+    return { ok: false, reason: "BAD_SIGNATURE" };
+  }
+  if (!signatureValid) {
+    return { ok: false, reason: "BAD_SIGNATURE" };
+  }
+  let payload;
+  try {
+    payload = JSON.parse(Buffer.from(payloadB64, "base64url").toString("utf8"));
+  } catch {
+    return { ok: false, reason: "BAD_FORMAT" };
+  }
+  if (typeof payload.aud !== "string" || typeof payload.subDevice !== "string" || payload.subDevice.length === 0 || typeof payload.subOwner !== "string" || payload.subOwner.length === 0 || typeof payload.provider !== "string" || payload.provider.length === 0 || typeof payload.name !== "string" || typeof payload.exp !== "number") {
+    return { ok: false, reason: "BAD_FORMAT" };
+  }
+  if (payload.aud !== args.expectedDeviceId) {
+    return { ok: false, reason: "WRONG_AUDIENCE" };
+  }
+  if (payload.exp <= now) {
+    return { ok: false, reason: "EXPIRED" };
+  }
+  return {
+    ok: true,
+    subDevice: payload.subDevice,
+    subOwner: payload.subOwner,
+    provider: payload.provider,
+    displayName: payload.name
+  };
+}
+
+// src/feishu-auth/server-key.ts
+var fs35 = __toESM(require("fs"), 1);
+var path39 = __toESM(require("path"), 1);
+var FILE_NAME2 = "server-signing-key.json";
+var ServerKeyStore = class {
+  constructor(dataDir) {
+    this.dataDir = dataDir;
+  }
+  dataDir;
+  filePath() {
+    return path39.join(this.dataDir, FILE_NAME2);
+  }
+  /** 读缓存的公钥；无缓存 / 损坏 → null（调用方决定是否触发拉取） */
+  read() {
+    try {
+      const raw = fs35.readFileSync(this.filePath(), "utf8");
+      const parsed = JSON.parse(raw);
+      if (typeof parsed.publicKeyPem === "string" && parsed.publicKeyPem.includes("PUBLIC KEY")) {
+        return parsed.publicKeyPem;
+      }
+      return null;
+    } catch {
+      return null;
+    }
+  }
+  write(publicKeyPem) {
+    const content = {
+      publicKeyPem,
+      fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    fs35.mkdirSync(this.dataDir, { recursive: true });
+    fs35.writeFileSync(this.filePath(), JSON.stringify(content, null, 2), { mode: 384 });
+  }
+  clear() {
+    try {
+      fs35.unlinkSync(this.filePath());
+    } catch {
+    }
+  }
+};
+
 // src/index.ts
 init_protocol();
 
@@ -39802,23 +40229,15 @@ function buildSessionHandlers(deps) {
     }
     ensurePersonaAccess(ctx, args.ownerPersonaId, "send");
     const creatorPrincipalId = ctx?.principal.id ?? ownerPrincipalId;
-    const creatorOwnerPrincipalId = ctx?.principal.kind === "guest" ? ctx.peerOwnerPrincipalId : ownerPrincipalId;
-    const { response, broadcast } = manager.create(
-      args,
-      creatorPrincipalId,
-      creatorOwnerPrincipalId
-    );
+    const { response, broadcast } = manager.create(args, creatorPrincipalId);
     return { response: { type: "session:info", ...response }, broadcast };
   };
   const list = async (_frame, _client, ctx) => {
     const { response } = manager.list();
     if (ctx && ctx.principal.kind === "guest") {
       const sessions = response.sessions ?? [];
-      const peerOwnerId = ctx.peerOwnerPrincipalId;
-      const capId = ctx.capabilityId;
-      const filtered = sessions.filter((s) => canAccessPersona(ctx.grants, s.ownerPersonaId, "read")).filter(
-        (s) => peerOwnerId ? s.creatorOwnerPrincipalId === peerOwnerId : s.creatorPrincipalId === capId
-      );
+      const guestDeviceId = ctx.principal.id;
+      const filtered = sessions.filter((s) => canAccessPersona(ctx.grants, s.ownerPersonaId, "read")).filter((s) => s.creatorPrincipalId === guestDeviceId);
       return { response: { type: "session:list", sessions: filtered } };
     }
     return { response: { type: "session:list", ...response } };
@@ -40106,7 +40525,7 @@ function buildPermissionHandlers(deps) {
 }
 
 // src/handlers/history.ts
-var path41 = __toESM(require("path"), 1);
+var path42 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/session/recent-dirs.ts
@@ -40124,7 +40543,7 @@ function listRecentDirs(store, limit = 50) {
 }
 
 // src/permission/persona-paths.ts
-var path40 = __toESM(require("path"), 1);
+var path41 = __toESM(require("path"), 1);
 function getAllowedPersonaIds(grants, action) {
   const ids = /* @__PURE__ */ new Set();
   for (const g2 of grants) {
@@ -40137,26 +40556,26 @@ function getAllowedPersonaIds(grants, action) {
   return ids;
 }
 function isGuestPathAllowed(grants, absPath, personaRoot, action = "read") {
-  const root = path40.resolve(personaRoot);
-  const target = path40.resolve(absPath);
-  const sep3 = root.endsWith(path40.sep) ? "" : path40.sep;
+  const root = path41.resolve(personaRoot);
+  const target = path41.resolve(absPath);
+  const sep3 = root.endsWith(path41.sep) ? "" : path41.sep;
   if (!target.startsWith(root + sep3)) return false;
-  const rel = path40.relative(root, target);
+  const rel = path41.relative(root, target);
   if (!rel || rel.startsWith("..")) return false;
-  const personaId = rel.split(path40.sep)[0];
+  const personaId = rel.split(path41.sep)[0];
   if (!personaId) return false;
   const allowed = getAllowedPersonaIds(grants, action);
   if (allowed === "*") return true;
   return allowed.has(personaId);
 }
 function personaIdFromPath(absPath, personaRoot) {
-  const root = path40.resolve(personaRoot);
-  const target = path40.resolve(absPath);
-  const sep3 = root.endsWith(path40.sep) ? "" : path40.sep;
+  const root = path41.resolve(personaRoot);
+  const target = path41.resolve(absPath);
+  const sep3 = root.endsWith(path41.sep) ? "" : path41.sep;
   if (!target.startsWith(root + sep3)) return null;
-  const rel = path40.relative(root, target);
+  const rel = path41.relative(root, target);
   if (!rel || rel.startsWith("..")) return null;
-  const id = rel.split(path40.sep)[0];
+  const id = rel.split(path41.sep)[0];
   return id || null;
 }
 
@@ -40181,7 +40600,7 @@ function buildHistoryHandlers(deps) {
         if (!pid) return false;
         return isGuestPathAllowed(
           ctx.grants,
-          path41.join(personaRoot, pid),
+          path42.join(personaRoot, pid),
           personaRoot,
           "read"
         );
@@ -40192,7 +40611,7 @@ function buildHistoryHandlers(deps) {
   };
   const list = async (frame, _client, ctx) => {
     const args = HistoryListArgs.parse(frame);
-    assertGuestPath(ctx, path41.resolve(args.projectPath), personaRoot, "history:list");
+    assertGuestPath(ctx, path42.resolve(args.projectPath), personaRoot, "history:list");
     const sessions = await history.listSessions(args);
     return { response: { type: "history:list", sessions } };
   };
@@ -40201,7 +40620,7 @@ function buildHistoryHandlers(deps) {
     const { response: file } = manager.get({ sessionId: args.sessionId });
     const f = file;
     if (ctx && ctx.principal.kind === "guest") {
-      const ok = canAccessPersona(ctx.grants, f.ownerPersonaId, "read") && f.creatorPrincipalId === ctx.capabilityId;
+      const ok = canAccessPersona(ctx.grants, f.ownerPersonaId, "read") && f.creatorPrincipalId === ctx.principal.id;
       if (!ok) {
         throw new ClawdError(
           ERROR_CODES.UNAUTHORIZED,
@@ -40224,13 +40643,13 @@ function buildHistoryHandlers(deps) {
   };
   const subagents = async (frame, _client, ctx) => {
     const args = HistorySubagentsArgs.parse(frame);
-    assertGuestPath(ctx, path41.resolve(args.cwd), personaRoot, "history:subagents");
+    assertGuestPath(ctx, path42.resolve(args.cwd), personaRoot, "history:subagents");
     const subs = await history.listSubagents(args);
     return { response: { type: "history:subagents", subagents: subs } };
   };
   const subagentRead = async (frame, _client, ctx) => {
     const args = HistorySubagentReadArgs.parse(frame);
-    assertGuestPath(ctx, path41.resolve(args.cwd), personaRoot, "history:subagent-read");
+    assertGuestPath(ctx, path42.resolve(args.cwd), personaRoot, "history:subagent-read");
     const res = await history.readSubagent(args);
     return { response: { type: "history:subagent-read", ...res } };
   };
@@ -40238,7 +40657,7 @@ function buildHistoryHandlers(deps) {
     const dirs = listRecentDirs(store);
     if (ctx?.principal.kind === "guest" && personaRoot) {
       const filtered = dirs.filter(
-        (d) => isGuestPathAllowed(ctx.grants, path41.resolve(d.cwd), personaRoot, "read")
+        (d) => isGuestPathAllowed(ctx.grants, path42.resolve(d.cwd), personaRoot, "read")
       );
       return { response: { type: "history:recentDirs", dirs: filtered } };
     }
@@ -40255,7 +40674,7 @@ function buildHistoryHandlers(deps) {
 }
 
 // src/handlers/workspace.ts
-var path42 = __toESM(require("path"), 1);
+var path43 = __toESM(require("path"), 1);
 var os15 = __toESM(require("os"), 1);
 init_protocol();
 init_protocol();
@@ -40296,22 +40715,22 @@ function buildWorkspaceHandlers(deps) {
     const args = WorkspaceListArgs.parse(frame);
     const isGuest = ctx?.principal.kind === "guest";
     const fallbackCwd = isGuest && personaRoot ? personaRoot : os15.homedir();
-    const resolvedCwd = path42.resolve(args.cwd ?? fallbackCwd);
-    const target = args.path ? path42.resolve(resolvedCwd, args.path) : resolvedCwd;
+    const resolvedCwd = path43.resolve(args.cwd ?? fallbackCwd);
+    const target = args.path ? path43.resolve(resolvedCwd, args.path) : resolvedCwd;
     assertGuestPath2(ctx, target, personaRoot, "workspace:list");
     const res = workspace.list({ ...args, cwd: resolvedCwd });
     return { response: { type: "workspace:list", ...res } };
   };
   const read = async (frame, _client, ctx) => {
     const args = WorkspaceReadArgs.parse(frame);
-    const target = path42.isAbsolute(args.path) ? path42.resolve(args.path) : path42.resolve(args.cwd, args.path);
+    const target = path43.isAbsolute(args.path) ? path43.resolve(args.path) : path43.resolve(args.cwd, args.path);
     assertGuestPath2(ctx, target, personaRoot, "workspace:read");
     const res = workspace.read(args);
     return { response: { type: "workspace:read", ...res } };
   };
   const skillsList = async (frame, _client, ctx) => {
     const args = SkillsListArgs.parse(frame);
-    const cwdAbs = path42.resolve(args.cwd);
+    const cwdAbs = path43.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "skills:list");
     const list2 = skills.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -40323,7 +40742,7 @@ function buildWorkspaceHandlers(deps) {
   };
   const agentsList = async (frame, _client, ctx) => {
     const args = AgentsListArgs.parse(frame);
-    const cwdAbs = path42.resolve(args.cwd);
+    const cwdAbs = path43.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list");
     const list2 = agents.list(args);
     if (ctx?.principal.kind === "guest" && personaRoot) {
@@ -40342,7 +40761,7 @@ function buildWorkspaceHandlers(deps) {
 }
 
 // src/handlers/git.ts
-var path44 = __toESM(require("path"), 1);
+var path45 = __toESM(require("path"), 1);
 init_protocol();
 init_protocol();
 
@@ -40428,7 +40847,7 @@ async function listGitBranches(cwd) {
 // src/handlers/git.ts
 function assertGuestCwd(ctx, cwd, personaRoot, method) {
   if (!ctx || ctx.principal.kind !== "guest" || !personaRoot) return;
-  if (!isGuestPathAllowed(ctx.grants, path44.resolve(cwd), personaRoot, "read")) {
+  if (!isGuestPathAllowed(ctx.grants, path45.resolve(cwd), personaRoot, "read")) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
       `guest ${ctx.principal.id} cannot ${method} cwd ${cwd}`
@@ -40483,7 +40902,7 @@ var DeleteArgsSchema = external_exports.object({
   capabilityId: external_exports.string().min(1)
 }).strict();
 function buildCapabilityHandlers(deps) {
-  const { manager, getShareBaseUrl, getPersonalCapability } = deps;
+  const { manager } = deps;
   const list = async () => {
     return {
       response: {
@@ -40509,70 +40928,45 @@ function buildCapabilityHandlers(deps) {
       }
     };
   };
-  const personalCapGet = async () => {
-    const { token, capability } = getPersonalCapability();
-    return {
-      response: {
-        type: "personal-cap:get:ok",
-        token,
-        capability: stripSecretHash(capability),
-        shareBaseUrl: getShareBaseUrl()
-      }
-    };
-  };
   return {
     "capability:list": list,
-    "capability:delete": del,
-    "personal-cap:get": personalCapGet
+    "capability:delete": del
   };
 }
 
 // src/handlers/inbox.ts
 init_protocol();
-function resolvePeerOwnerId(ctx, argsPeerOwnerId, capManager) {
+function resolvePeerDeviceId(ctx, argsPeerDeviceId) {
   if (ctx.principal.kind === "owner") {
-    if (!argsPeerOwnerId) {
+    if (!argsPeerDeviceId) {
       throw new ClawdError(
         ERROR_CODES.VALIDATION_ERROR,
-        "inbox: owner ctx requires peerOwnerId"
+        "inbox: owner ctx requires peerDeviceId"
       );
     }
-    return argsPeerOwnerId;
-  }
-  if (!ctx.capabilityId) {
-    throw new ClawdError(ERROR_CODES.UNAUTHORIZED, "inbox: guest ctx missing capabilityId");
-  }
-  let resolved = ctx.peerOwnerPrincipalId;
-  if (!resolved) {
-    const cap = capManager.findById(ctx.capabilityId);
-    resolved = cap?.peerOwnerId;
-  }
-  if (!resolved) {
-    throw new ClawdError(
-      ERROR_CODES.UNAUTHORIZED,
-      `inbox: guest cap ${ctx.capabilityId} has no peerOwnerPrincipalId (auth frame missing selfPrincipalId)`
-    );
+    return argsPeerDeviceId;
   }
-  if (argsPeerOwnerId && argsPeerOwnerId !== resolved) {
+  const resolved = ctx.principal.id;
+  if (argsPeerDeviceId && argsPeerDeviceId !== resolved) {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
-      `inbox: guest args.peerOwnerId mismatch (resolved=${resolved}, args=${argsPeerOwnerId})`
+      `inbox: guest args.peerDeviceId mismatch (resolved=${resolved}, args=${argsPeerDeviceId})`
     );
   }
   return resolved;
 }
 function buildInboxHandlers(deps) {
-  const { manager, capManager } = deps;
+  const { manager } = deps;
   const postMessage = async (frame, _client, ctx) => {
     const { type: _t, requestId: _r, ...rest } = frame;
     const args = InboxPostMessageArgsSchema.parse(rest);
     if (!ctx) {
       throw new ClawdError(ERROR_CODES.INTERNAL, "inbox:postMessage: missing ConnectionContext");
     }
-    const peerOwnerId = resolvePeerOwnerId(ctx, args.peerOwnerId, capManager);
+    const peerDeviceId = resolvePeerDeviceId(ctx, args.peerDeviceId);
     const message = manager.postMessage({
-      peerOwnerId,
-      senderPrincipalId: ctx.principal.id,
+      peerDeviceId,
+      senderDeviceId: ctx.principal.id,
       text: args.text,
       id: args.id,
       createdAt: args.createdAt
@@ -40587,10 +40981,10 @@ function buildInboxHandlers(deps) {
     if (!ctx) {
       throw new ClawdError(ERROR_CODES.INTERNAL, "inbox:list: missing ConnectionContext");
     }
-    const peerOwnerId = resolvePeerOwnerId(ctx, args.peerOwnerId, capManager);
-    const messages = manager.list(peerOwnerId, args.sinceCreatedAt);
+    const peerDeviceId = resolvePeerDeviceId(ctx, args.peerDeviceId);
+    const messages = manager.list(peerDeviceId, args.sinceCreatedAt);
     return {
-      response: { type: "inbox:list:ok", peerOwnerId, messages }
+      response: { type: "inbox:list:ok", peerDeviceId, messages }
     };
   };
   const markRead = async (frame, _client, ctx) => {
@@ -40599,16 +40993,16 @@ function buildInboxHandlers(deps) {
     if (!ctx) {
       throw new ClawdError(ERROR_CODES.INTERNAL, "inbox:markRead: missing ConnectionContext");
     }
-    const peerOwnerId = resolvePeerOwnerId(ctx, args.peerOwnerId, capManager);
+    const peerDeviceId = resolvePeerDeviceId(ctx, args.peerDeviceId);
     const updated = manager.markRead({
-      peerOwnerId,
-      principalId: ctx.principal.id,
+      peerDeviceId,
+      readerDeviceId: ctx.principal.id,
       upToCreatedAt: args.upToCreatedAt
     });
     return {
       response: {
         type: "inbox:markRead:ok",
-        peerOwnerId,
+        peerDeviceId,
         upToCreatedAt: args.upToCreatedAt,
         updated
       }
@@ -40621,116 +41015,45 @@ function buildInboxHandlers(deps) {
   };
 }
 
-// src/handlers/received-capability.ts
+// src/handlers/contact.ts
 init_protocol();
 function ensureOwner(ctx) {
   if (!ctx || ctx.principal.kind !== "owner") {
     throw new ClawdError(
       ERROR_CODES.UNAUTHORIZED,
-      "UNAUTHORIZED: received-capability:* requires owner ctx"
-    );
-  }
-}
-function ensureGuestCtx(ctx) {
-  if (!ctx || ctx.principal.kind !== "guest" || !ctx.capabilityId) {
-    throw new ClawdError(
-      ERROR_CODES.UNAUTHORIZED,
-      "UNAUTHORIZED: received-capability:autoAttach requires guest cap ctx"
+      "UNAUTHORIZED: contact:* requires owner ctx"
     );
   }
 }
-function buildReceivedCapabilityHandlers(deps) {
-  const now = deps.now ?? Date.now;
+function buildContactHandlers(deps) {
   const list = async (_frame, _client, ctx) => {
     ensureOwner(ctx);
     return {
       response: {
-        type: "received-capability:list:ok",
-        receivedCaps: deps.store.list()
+        type: "contact:list:ok",
+        contacts: deps.store.list()
       }
     };
   };
-  const add = async (frame, _client, ctx) => {
-    ensureOwner(ctx);
-    const { type: _t, requestId: _r, ...rest } = frame;
-    const args = ReceivedCapabilityAddArgsSchema.parse(rest);
-    let conn;
-    try {
-      conn = await deps.connectRemote({
-        url: args.remoteUrl,
-        token: args.token,
-        selfPrincipalId: deps.selfPrincipalId(),
-        selfDisplayName: deps.selfDisplayName()
-      });
-    } catch (e) {
-      throw new ClawdError(
-        ERROR_CODES.VALIDATION_ERROR,
-        `INVITE_REMOTE_UNREACHABLE: ${e.message}`
-      );
-    }
-    try {
-      const wh = await conn.whoami();
-      const rc = {
-        ownerPrincipalId: wh.ownerId,
-        ownerDisplayName: wh.displayName,
-        remoteUrl: args.remoteUrl,
-        capabilityId: wh.capabilityId,
-        capabilityToken: args.token,
-        grants: wh.grants,
-        receivedAt: now()
-      };
-      deps.store.upsert(rc);
-      deps.broadcast({ type: "received-capability:added", receivedCap: rc });
-      return {
-        response: { type: "received-capability:add:ok", receivedCap: rc }
-      };
-    } finally {
-      try {
-        conn.close();
-      } catch {
-      }
-    }
-  };
   const remove = async (frame, _client, ctx) => {
     ensureOwner(ctx);
     const { type: _t, requestId: _r, ...rest } = frame;
-    const args = ReceivedCapabilityRemoveArgsSchema.parse(rest);
-    deps.store.remove(args.ownerPrincipalId);
+    const args = ContactRemoveArgsSchema.parse(rest);
+    deps.store.removeByDeviceId(args.deviceId);
     deps.broadcast({
-      type: "received-capability:removed",
-      ownerPrincipalId: args.ownerPrincipalId
+      type: "contact:removed",
+      deviceId: args.deviceId
     });
     return {
       response: {
-        type: "received-capability:remove:ok",
-        ownerPrincipalId: args.ownerPrincipalId
+        type: "contact:remove:ok",
+        deviceId: args.deviceId
       }
     };
   };
-  const autoAttach = async (frame, _client, ctx) => {
-    ensureGuestCtx(ctx);
-    const { type: _t, requestId: _r, ...rest } = frame;
-    const args = ReceivedCapabilityAutoAttachArgsSchema.parse(rest);
-    const rc = {
-      ownerPrincipalId: args.ownerPrincipalId,
-      ownerDisplayName: args.ownerDisplayName,
-      remoteUrl: args.remoteUrl,
-      capabilityId: args.capabilityId,
-      capabilityToken: args.token,
-      grants: args.grants,
-      receivedAt: now()
-    };
-    deps.store.upsert(rc);
-    deps.broadcast({ type: "received-capability:added", receivedCap: rc });
-    return {
-      response: { type: "received-capability:autoAttach:ok" }
-    };
-  };
   return {
-    "received-capability:list": list,
-    "received-capability:add": add,
-    "received-capability:remove": remove,
-    "received-capability:autoAttach": autoAttach
+    "contact:list": list,
+    "contact:remove": remove
   };
 }
 
@@ -40741,7 +41064,11 @@ function buildWhoamiHandler(deps) {
     if (!ctx) {
       throw new ClawdError(ERROR_CODES.INTERNAL, "whoami: missing ConnectionContext");
     }
-    const owner = makeOwnerPrincipal(deps.ownerPrincipalId, deps.ownerDisplayName);
+    const owner = {
+      ...makeOwnerPrincipal(deps.ownerPrincipalId, deps.ownerDisplayName),
+      ownerId: deps.ownerId,
+      provider: deps.ownerProvider
+    };
     let capability;
     if (ctx.principal.kind === "owner") {
       capability = {
@@ -40752,14 +41079,13 @@ function buildWhoamiHandler(deps) {
         usedCount: 0
       };
     } else {
-      if (!ctx.capabilityId) {
-        throw new ClawdError(ERROR_CODES.UNAUTHORIZED, "whoami: guest ctx without capabilityId");
-      }
-      const cap = deps.capabilityManager.findById(ctx.capabilityId);
-      if (!cap) {
-        throw new ClawdError(ERROR_CODES.UNAUTHORIZED, `whoami: capability not found: ${ctx.capabilityId}`);
-      }
-      capability = stripSecretHash(cap);
+      capability = {
+        id: ctx.principal.id,
+        displayName: ctx.principal.displayName ?? "guest",
+        grants: ctx.grants,
+        issuedAt: 0,
+        usedCount: 0
+      };
     }
     const grantedPersonas = [];
     const isGuest = ctx.principal.kind === "guest";
@@ -40790,6 +41116,123 @@ function buildWhoamiHandler(deps) {
   };
 }
 
+// src/handlers/feishu-auth.ts
+function buildFeishuAuthHandlers(deps) {
+  const loginStart = async () => {
+    const { authUrl, state } = deps.loginFlow.start();
+    return {
+      response: { type: "auth:login:start:ok", authUrl, state }
+    };
+  };
+  const getIdentity = async () => {
+    const record = deps.ownerIdentityStore.read();
+    return {
+      response: {
+        type: "auth:getIdentity:ok",
+        identity: record ? record.identity : null,
+        // 决策 #15：设备属性，与登录态无关——UI"分享我的 Hub 标识"用
+        deviceId: deps.deviceId
+      }
+    };
+  };
+  const logout = async () => {
+    deps.ownerIdentityStore.clear();
+    return {
+      response: { type: "auth:logout:ok" }
+    };
+  };
+  return {
+    "auth:login:start": loginStart,
+    "auth:getIdentity": getIdentity,
+    "auth:logout": logout
+  };
+}
+
+// src/handlers/device.ts
+init_protocol();
+function ensureOwner2(ctx) {
+  if (!ctx || ctx.principal.kind !== "owner") {
+    throw new ClawdError(ERROR_CODES.UNAUTHORIZED, "UNAUTHORIZED: device:* requires owner ctx");
+  }
+}
+function buildDeviceHandlers(deps) {
+  const now = deps.now ?? Date.now;
+  const list = async (_frame, _client, ctx) => {
+    ensureOwner2(ctx);
+    const devices = await deps.listDevices();
+    return {
+      response: { type: "device:list:ok", devices }
+    };
+  };
+  const connect = async (frame, _client, ctx) => {
+    ensureOwner2(ctx);
+    const { type: _t, requestId: _r, ...rest } = frame;
+    const args = DeviceConnectArgsSchema.parse(rest);
+    const exchanged = await deps.exchange(args.deviceId);
+    const url = args.url ?? exchanged.deviceUrl;
+    if (!url) {
+      throw new ClawdError(
+        ERROR_CODES.VALIDATION_ERROR,
+        "DEVICE_URL_UNKNOWN: \u5BF9\u65B9\u8BBE\u5907\u672A\u4E0A\u62A5\u5730\u5740\uFF08\u672A\u767B\u5F55\u6216\u672A\u5F00 tunnel\uFF09\uFF0C\u8BF7\u663E\u5F0F\u63D0\u4F9B url \u6216\u7B49\u5BF9\u65B9\u4E0A\u7EBF"
+      );
+    }
+    let conn;
+    try {
+      conn = await deps.connectRemote({
+        url,
+        token: exchanged.token,
+        // 自动反向（spec 决策 #11）：自报本机可达地址，让对方反向加我为联系人；
+        // 本机无 tunnel → null → connectRemote 省略 selfUrl 字段（不造假数据）。
+        // 身份不自报：对方从 token 签名背书取我的 deviceId/ownerId/provider（决策 #16）。
+        selfUrl: deps.selfUrl() ?? void 0
+      });
+    } catch (e) {
+      throw new ClawdError(
+        ERROR_CODES.VALIDATION_ERROR,
+        `DEVICE_UNREACHABLE: ${e.message}`
+      );
+    }
+    try {
+      const wh = await conn.whoami();
+      const contact = {
+        deviceId: args.deviceId,
+        ownerId: wh.ownerId,
+        provider: wh.provider,
+        // 显示名优先用调用方传的 name：公共目录点击连接带 clawd_devices.name（对外展示名，
+        // 如"公共1"）；"输入标识"连接不带 name → 回落 whoami 报的对方 owner 真名。
+        // 归属人身份不丢（ownerId/provider 仍来自 whoami 背书）。
+        displayName: args.name || wh.displayName || args.deviceId,
+        remoteUrl: url,
+        // connectToken 存自包含签名 token（断线重连复用，30 天有效；
+        // 过期后对方拒 TOKEN_EXPIRED → 重新 device:connect 换新票）
+        connectToken: exchanged.token,
+        grants: wh.grants,
+        addedAt: now()
+      };
+      deps.store.upsert(contact);
+      deps.broadcast({ type: "contact:added", contact });
+      return {
+        response: {
+          type: "device:connect:ok",
+          // 返回连接的设备标识（= 请求的 args.deviceId）
+          deviceId: args.deviceId,
+          name: contact.displayName,
+          url
+        }
+      };
+    } finally {
+      try {
+        conn.close();
+      } catch {
+      }
+    }
+  };
+  return {
+    "device:list": list,
+    "device:connect": connect
+  };
+}
+
 // src/handlers/meta.ts
 var import_node_os15 = __toESM(require("os"), 1);
 init_protocol();
@@ -42665,27 +43108,25 @@ function buildMethodHandlers(deps) {
       personaRegistry: deps.personaRegistry
     }),
     ...buildCapabilityHandlers({
-      manager: deps.capabilityManager,
-      getShareBaseUrl: deps.getShareBaseUrl,
-      getPersonalCapability: deps.getPersonalCapability
+      manager: deps.capabilityManager
     }),
     ...buildInboxHandlers({
-      manager: deps.inboxManager,
-      capManager: deps.capabilityManager
+      manager: deps.inboxManager
     }),
-    ...buildReceivedCapabilityHandlers({
-      store: deps.receivedCapabilityStore,
-      connectRemote: deps.connectRemote,
-      broadcast: deps.broadcastToOwners,
-      selfPrincipalId: () => deps.ownerPrincipalId,
-      selfDisplayName: () => deps.ownerDisplayName
+    ...buildContactHandlers({
+      store: deps.contactStore,
+      broadcast: deps.broadcastToOwners
     }),
     whoami: buildWhoamiHandler({
       ownerDisplayName: deps.ownerDisplayName,
       ownerPrincipalId: deps.ownerPrincipalId,
+      ownerId: deps.ownerId,
+      ownerProvider: deps.ownerProvider,
       personaStore: deps.personaStore,
       capabilityManager: deps.capabilityManager
     }),
+    ...buildFeishuAuthHandlers(deps.feishuAuth),
+    ...buildDeviceHandlers(deps.feishuDevice),
     ...deps.attachment ? buildAttachmentHandlers(deps.attachment) : {},
     ...buildExtensionHandlers({
       loadAll,
@@ -43187,23 +43628,22 @@ var METHOD_GRANT_MAP = {
   // "查 capabilityManager 拿 caller 的 guest capability"。
   "whoami": { kind: "public" },
   // ---- capability platform（admin-only） ----
-  // global personal token (2026-05-25): capability:issue / bindPeer 已下线；
-  // personal capability 由 daemon 启动时自动创建，personal-cap:get 是 owner-only 拿 token + shareBaseUrl
+  // 飞书统一身份 Phase 2 (2026-06-01, spec 决策 #12): personal-cap:get / capability:issue /
+  // bindPeer 已下线（personal token / 邀请码全链路删除）。capability:list / delete 保留供调试 +
+  // 撤销级联 + 清旧 per-peer cap。
   "capability:list": ADMIN_ANY,
   "capability:delete": ADMIN_ANY,
-  "personal-cap:get": ADMIN_ANY,
-  // ---- inbox: channel-based IM (capability platform v3) ----
-  // 三条都 'public' — capability 本身就是授权凭证. handler 内额外校验
-  // guest ctx.capabilityId === args.capabilityId, 防 guest 越权操作别的 channel.
+  // ---- inbox: 双投 P2P IM ----
+  // 三条都 'public' — 能连上 = 已通过本地验票. handler 内额外校验 guest 的
+  // args.peerDeviceId 与 ctx.principal.id(=deviceId) 一致, 防 guest 越权操作别的 DM 桶.
   "inbox:list": { kind: "public" },
   "inbox:markRead": { kind: "public" },
   "inbox:postMessage": { kind: "public" },
-  // ---- received-capability:* (bidirectional cap 视角 B 2026-05-23) ----
-  // owner-only: list / add / remove；guest-only: autoAttach (capability 本身是凭证)
-  "received-capability:list": ADMIN_ANY,
-  "received-capability:add": ADMIN_ANY,
-  "received-capability:remove": ADMIN_ANY,
-  "received-capability:autoAttach": { kind: "public" },
+  // ---- contact:* (联系人列表) ----
+  // 飞书统一身份 Phase 3 (决策 #14): received-capability:* 正名 contact:*。
+  // 写入路径在 device:connect / 自动反向；list / remove 作联系人读 / 删，owner-only。
+  "contact:list": ADMIN_ANY,
+  "contact:remove": ADMIN_ANY,
   // ---- session:* / chat:* 业务方法（v2 Phase 8 两层模型）----
   // dispatcher 不验资源，handler 内按 ctx + frame.args 反查 ownerPersonaId 调 assertGrant。
   // owner 自动通过（ctx 自带 '*':'admin' grant 一切 match）；guest 在被授权 persona 内可调。
@@ -43244,7 +43684,7 @@ var METHOD_GRANT_MAP = {
   "history:list": CAPABILITY_SCOPED,
   // history:read 取一条 session 的 CC JSONL 历史。guest 进 persona VM 后必须能读自己
   // 创建的 session 历史（chat view 加载历史消息走这条），所以下沉到 capability-scoped；
-  // handler 内按 ctx.capabilityId === file.creatorPrincipalId 拦越权。
+  // handler 内按 ctx.principal.id === file.creatorPrincipalId 拦越权。
   "history:read": CAPABILITY_SCOPED,
   "history:subagents": CAPABILITY_SCOPED,
   "history:subagent-read": CAPABILITY_SCOPED,
@@ -43301,6 +43741,15 @@ var METHOD_GRANT_MAP = {
   // guest-self：guest 在自己 daemon 上触发安装与更新（无持久化 subscription 概念）
   "extension.install-from-channel": ADMIN_ANY,
   "extension.update-from-channel": ADMIN_ANY,
+  // ---- auth:* 飞书统一身份 Phase 1（owner-only） ----
+  // 登录/登出/查身份都是 owner 本机操作，guest 不可调
+  "auth:login:start": ADMIN_ANY,
+  "auth:getIdentity": ADMIN_ANY,
+  "auth:logout": ADMIN_ANY,
+  // ---- device:* 设备目录 + 连接（决策 #15，owner-only） ----
+  // 设备目录 / 连接都是 owner 本机操作（用 owner 的 ttcJwt 找中心 server），guest 不可调
+  "device:list": ADMIN_ANY,
+  "device:connect": ADMIN_ANY,
   // ---- app-builder Project picker（spec 2026-06-01-app-builder-project-picker-design） ----
   // owner-only：picker UI 给 owner 管理本机 build 中的 project（fs + 端口分配）。
   // 即使 persona-app-builder 是 PreinstalledPersona，project 管理也属本机 owner 行为，
@@ -43711,19 +44160,23 @@ async function startDaemon(config) {
   } else if (config.tunnel) {
     resolvedAuthToken = authFile.token;
   }
-  const ownerPrincipalId = authFile.ownerPrincipalId;
-  const ownerDisplayName = loadOwnerDisplayName(config.dataDir);
+  const ownerIdentityStore = new OwnerIdentityStore(config.dataDir);
+  const feishuIdentity = ownerIdentityStore.read();
+  let feishuActive = feishuIdentity !== null;
+  const ownerPrincipalId = authFile.deviceId;
+  let ownerId = feishuIdentity?.identity.ownerId ?? "";
+  let ownerProvider = feishuIdentity?.identity.provider ?? "";
+  let ownerDisplayName = feishuIdentity?.identity.displayName ?? loadOwnerDisplayName(config.dataDir);
   const authMode = resolvedAuthToken == null ? "none" : "first-message";
   const inboxStore = new InboxStore(config.dataDir);
-  const inboxManager = new InboxManager(inboxStore, (_peerOwnerId, frame) => {
+  const inboxManager = new InboxManager(inboxStore, (_peerDeviceId, frame) => {
     wsServer?.broadcastToOwners(frame);
   });
-  const receivedCapabilityStore = new ReceivedCapabilityStore(config.dataDir);
-  receivedCapabilityStore.load();
+  const contactStore = new ContactStore(config.dataDir);
+  contactStore.load();
+  const serverKeyStore = new ServerKeyStore(config.dataDir);
   const capabilityStore = new CapabilityStore(config.dataDir);
   const capabilityRegistry = new CapabilityRegistry(capabilityStore);
-  const personalCapability = loadOrCreatePersonalCapability({ dataDir: config.dataDir });
-  capabilityRegistry.upsertCapability(personalCapability.capability);
   const capabilityManager = new CapabilityManager(capabilityRegistry, {
     onDeleted: (cap) => {
       const deletedAt = Date.now();
@@ -43732,7 +44185,7 @@ async function startDaemon(config) {
         capabilityId: cap.id,
         deletedAt
       });
-      wsServer?.closeConnectionsByCapability(cap.id);
+      wsServer?.closeConnectionsByGuestId(cap.id);
       const cleanup = cleanupGuestSessionsForCapability(cap, sessionStoreFactory);
       if (cleanup.removed.length > 0) {
         logger.info("capability delete cascade: guest sessions removed", {
@@ -43749,15 +44202,60 @@ async function startDaemon(config) {
     // Task 1.7：authenticate 注入路径替代 expectedToken 单 token 比对。
     // owner 路径 constantTimeEqual 防侧信道；guest 路径走 capabilityRegistry.
     expectedToken: resolvedAuthToken,
-    authenticate: (t, selfPrincipalId, selfDisplayName) => {
-      return authenticate(t, {
+    authenticate: async (t, selfUrl) => {
+      const result = await authenticate(t, {
         isOwnerToken: (x) => resolvedAuthToken != null && constantTimeEqual(x, resolvedAuthToken),
         ownerPrincipalId,
         ownerDisplayName,
-        capabilityRegistry,
-        selfPrincipalId,
-        selfDisplayName
+        // 飞书 gate（spec 决策 #9）：未激活飞书身份时不接受 guest 入站（不注入验签函数
+        // → 一律 BAD_TOKEN）。已激活时用缓存的 server 公钥本地验签；
+        // 公钥缓存缺失（登录后拉取失败）→ fail-closed 拒绝 guest。
+        ...feishuActive ? {
+          verifyConnectToken: (token) => {
+            const publicKeyPem = serverKeyStore.read();
+            if (!publicKeyPem) return { ok: false, reason: "BAD_SIGNATURE" };
+            return verifyConnectToken({
+              token,
+              publicKeyPem,
+              expectedDeviceId: authFile.deviceId
+            });
+          }
+        } : {}
       });
+      if (result.ok && result.context.principal.kind === "guest") {
+        void autoReverseContact({
+          store: contactStore,
+          broadcast: (frame) => wsServer?.broadcastToOwners(frame),
+          deviceId: result.context.principal.id,
+          ownerId: result.context.ownerId ?? "",
+          provider: result.context.provider ?? "",
+          displayName: result.context.principal.displayName ?? result.context.principal.id,
+          selfUrl,
+          // 决策 #16 换票补全：用 owner 当前 jwt 换 aud=对方设备 的票（本机主动连对方用）。
+          // 现读 ownerIdentityStore（热切换后用新身份）；失败 → null → 保持空票。
+          exchangeToken: async (targetDeviceId) => {
+            const record = ownerIdentityStore.read();
+            if (!record) return null;
+            try {
+              const r = await centralExchange({
+                api: config.clawosApi ?? DEFAULT_CLAWOS_API,
+                jwt: record.ttcToken,
+                provider: record.identity.provider,
+                deviceId: targetDeviceId,
+                selfDeviceId: authFile.deviceId
+              });
+              return r.token;
+            } catch (e) {
+              logger.warn("auto-reverse exchange token failed", {
+                targetDeviceId,
+                err: e.message
+              });
+              return null;
+            }
+          }
+        });
+      }
+      return result;
     },
     onAuthed: (h, ctx) => wsServer?.attachClientContext(h.id, ctx),
     buildOwnerContext: () => ownerContext(ownerPrincipalId, ownerDisplayName),
@@ -43913,10 +44411,52 @@ async function startDaemon(config) {
     }
     return `http://${config.host}:${config.port}`;
   };
+  const reportDevice = async () => {
+    if (!feishuActive) return;
+    const record = ownerIdentityStore.read();
+    if (!record) return;
+    try {
+      await centralUpsertDevice({
+        api: config.clawosApi ?? DEFAULT_CLAWOS_API,
+        ttcJwt: record.ttcToken,
+        provider: record.identity.provider,
+        deviceId: authFile.deviceId,
+        url: currentTunnelUrl ?? void 0,
+        name: ownerDisplayName
+      });
+      logger.info("device registered to central server", {
+        deviceId: authFile.deviceId,
+        url: currentTunnelUrl ?? "(none)"
+      });
+    } catch (err) {
+      logger.warn("device register failed (best-effort)", { err: err.message });
+    }
+  };
+  const fetchServerKey = async () => {
+    if (!feishuActive) return;
+    if (serverKeyStore.read()) return;
+    try {
+      const { publicKeyPem } = await centralGetPublicKey({
+        api: config.clawosApi ?? DEFAULT_CLAWOS_API
+      });
+      serverKeyStore.write(publicKeyPem);
+      logger.info("server signing key cached");
+    } catch (err) {
+      logger.warn("server signing key fetch failed (guest \u5165\u7AD9\u5C06\u88AB\u62D2\u7EDD)", {
+        err: err.message
+      });
+    }
+  };
   const extensionRuntime = new Runtime({ root: extensionsRoot() });
   const publishedChannelStore = new PublishedChannelStore(publishedChannelsFile());
   await publishedChannelStore.load();
   const bundleCache = new BundleCache(bundleCacheRoot());
+  const loginFlow = new LoginFlow({
+    store: ownerIdentityStore,
+    fetchUserInfo: (ttcToken) => fetchTtcUserInfo({ apiBase: TTC_HOSTS.api, token: ttcToken }),
+    ttcAuthBase: TTC_HOSTS.auth,
+    getCallbackUrl: () => `http://127.0.0.1:${config.port}/auth/callback`
+  });
   const appBuilderStore = new ProjectStore(
     import_node_path47.default.join(config.dataDir, "personas/persona-app-builder")
   );
@@ -43932,7 +44472,7 @@ async function startDaemon(config) {
   const effectivePreviewPorts = Array.from(
     /* @__PURE__ */ new Set([...config.previewPorts ?? [], ...appBuilderPortRange])
   );
-  const handlers = buildMethodHandlers({
+  const makeHandlers = () => buildMethodHandlers({
     manager,
     workspace,
     skills,
@@ -43977,15 +44517,12 @@ async function startDaemon(config) {
     personaRoot: import_node_path47.default.join(config.dataDir, "personas"),
     // capability:list / delete handler 依赖
     capabilityManager,
-    // personal-cap:get 返回的 shareBaseUrl 用此 base URL：
-    // tunnel 拉起后切到反代 wss://... 地址；否则本机 ws://host:port。
-    getShareBaseUrl: () => currentTunnelUrl ?? `ws://${config.host}:${config.port}`,
-    // global personal token (2026-05-25): personal-cap:get handler 直接返回此 token + cap
-    getPersonalCapability: () => personalCapability,
     // v2 Phase 6: whoami handler 装在 owner principal.displayName + persona 解析
     ownerDisplayName,
-    // owner-id stabilization: whoami 用稳定 ownerPrincipalId 替代 'owner' 字面量
+    // 决策 #16: whoami owner.id = 本机 deviceId（路由主键）+ ownerId/provider 归属人
     ownerPrincipalId,
+    ownerId,
+    ownerProvider,
     personaStore,
     // capability handler 也用 (capability:issue 走 registry / capability:list)
     capabilityRegistry,
@@ -43993,18 +44530,56 @@ async function startDaemon(config) {
     // cascade 接 store (list 统计 deletedInboxEvents).
     inboxManager,
     inboxStore,
-    // bidirectional cap 视角 B: 对方颁给我的 cap 走这个 store
-    receivedCapabilityStore,
-    // received-capability:added / removed broadcast；复用 capability:tokenIssued 同款通路
+    // 联系人列表 store（device:connect / 自动反向落同一 store）
+    contactStore,
+    // contact:removed broadcast；复用 capability:tokenIssued 同款通路
     broadcastToOwners: (frame) => wsServer?.broadcastToOwners(frame),
-    // received-capability:add 临时 ws 连远端跑 whoami — 直连 ws (不走 transport listener)
-    connectRemote,
     // extension runtime (v1: local-mode only). Instance owned by daemon top
     // level so stopAll() runs in the shutdown hook below.
     extensionRuntime,
     // extension sharing v1 — owner-side published-channels store.
     publishedChannelStore,
     bundleCache,
+    // 飞书统一身份 Phase 1：登录 RPC handlers（auth:login:start / getIdentity / logout）
+    // deviceId（决策 #15）：getIdentity 返回给 UI 拼"我的设备标识"
+    feishuAuth: { loginFlow, ownerIdentityStore, deviceId: authFile.deviceId },
+    // 设备目录 + 连接（决策 #15：daemon 代理中心 server）。
+    // exchange/listDevices 包掉 owner ttcJwt（每次现读 store——热切换后立即用新身份）；
+    // dispatcher 的 FEISHU_GATED_METHODS gate 已保证未登录时这些 RPC 到不了 handler，
+    // 这里的 FEISHU_LOGIN_REQUIRED 抛错只是防御纵深。
+    feishuDevice: {
+      store: contactStore,
+      exchange: async (deviceId) => {
+        const record = ownerIdentityStore.read();
+        if (!record) {
+          throw new ClawdError(ERROR_CODES.FEISHU_LOGIN_REQUIRED, "device:connect requires feishu login");
+        }
+        return centralExchange({
+          api: config.clawosApi ?? DEFAULT_CLAWOS_API,
+          jwt: record.ttcToken,
+          provider: record.identity.provider,
+          deviceId,
+          selfDeviceId: authFile.deviceId
+        });
+      },
+      listDevices: async () => {
+        const record = ownerIdentityStore.read();
+        if (!record) {
+          throw new ClawdError(ERROR_CODES.FEISHU_LOGIN_REQUIRED, "device:list requires feishu login");
+        }
+        return centralListDevices({
+          api: config.clawosApi ?? DEFAULT_CLAWOS_API,
+          ttcJwt: record.ttcToken,
+          provider: record.identity.provider
+        });
+      },
+      connectRemote,
+      broadcast: (frame) => wsServer?.broadcastToOwners(frame),
+      // 自动反向（spec 决策 #11）：本机可达地址 = tunnel URL（公网），出站连接时
+      // 透传让对方反向加我为联系人。无 tunnel（仅本机 ws）→ null，对方不自动反向（不造假数据）。
+      // 决策 #16：身份不自报——本机 deviceId/ownerId/provider 由 exchange 签进 token 背书。
+      selfUrl: () => currentTunnelUrl
+    },
     // app-builder
     appBuilderStore,
     devServerLifecycle: devServerSupervisor,
@@ -44034,6 +44609,7 @@ async function startDaemon(config) {
     },
     logger
   });
+  let handlers = makeHandlers();
   const authResolver = new AuthContextResolver({
     ownerToken: resolvedAuthToken
   });
@@ -44071,6 +44647,31 @@ async function startDaemon(config) {
     },
     // POST /extensions/import lands in ~/.clawd/extensions/<id>/
     extensionsRoot: () => extensionsRoot(),
+    // 飞书登录 loopback 回调（热切换，2026-06-01 拍板）：成功落盘后——
+    //   1. 进程内实时切换身份（let binding + 值快照持有者重建）
+    //   2. 广播 auth:login:done 给在线 owner 连接（UI 即时反馈）
+    //   3. 踢掉所有 ws 连接（在线连接的 ctx 是旧身份）→ UI 自动重连 → 新身份 ctx →
+    //      People 立即解锁，不需要重启 daemon
+    // 失败则广播 auth:login:failed。
+    feishuLogin: {
+      handleLoginCallback: async (params) => {
+        const result = await loginFlow.handleCallback(params);
+        if (result.ok) {
+          feishuActive = true;
+          ownerId = result.identity.ownerId;
+          ownerProvider = result.identity.provider;
+          ownerDisplayName = result.identity.displayName;
+          handlers = makeHandlers();
+          wsServer?.broadcastToOwners({ type: "auth:login:done", identity: result.identity });
+          setImmediate(() => wsServer?.closeAllClients());
+          void reportDevice();
+          void fetchServerKey();
+        } else {
+          wsServer?.broadcastToOwners({ type: "auth:login:failed", reason: result.reason });
+        }
+        return result;
+      }
+    },
     // app-builder build 模式：/preview/<port>/ 反代 dev server 的端口白名单（见 spec §三.2）
     previewPorts: effectivePreviewPorts
   });
@@ -44078,8 +44679,6 @@ async function startDaemon(config) {
     host: config.host,
     port: config.port,
     logger,
-    // broadcastToPrincipal 用此 id 路由 owner-targeted 帧（替代字面量 'owner' sentinel）
-    ownerPrincipalId,
     readyFrameBuilder: (ctx) => buildReadyFrame(
       {
         manager,
@@ -44099,14 +44698,12 @@ async function startDaemon(config) {
     // 用 cap token 连 noAuth daemon 时若无此 hook 会 fallback owner ctx, whoami 错返
     // capability.id = ownerPrincipalId, 导致 myCapabilityId 写错 → inbox channel 写错.
     // 命中 cap → attach guest ctx; 空 token / 未命中 → 保持 noAuth 行为 (handler fallback owner).
-    tryVerifyCapabilityToken: (token, selfPrincipalId, _selfDisplayName) => {
+    tryVerifyCapabilityToken: (token) => {
       const v2 = capabilityRegistry.verifyToken(token);
       if (!v2.ok) return null;
       return {
         principal: { id: v2.capability.id, kind: "guest", displayName: v2.capability.displayName },
-        grants: v2.capability.grants,
-        capabilityId: v2.capability.id,
-        ...selfPrincipalId ? { peerOwnerPrincipalId: selfPrincipalId } : {}
+        grants: v2.capability.grants
       };
     },
     // file-sharing HTTP 路由复用 daemon 同端口（spec §5 第 3 条）；router 自己处理 auth + 404
@@ -44157,6 +44754,12 @@ async function startDaemon(config) {
     const requestId = typeof frame.requestId === "string" ? frame.requestId : void 0;
     const handler = handlers[type];
     if (!handler) throw new ClawdError(ERROR_CODES.METHOD_NOT_IMPLEMENTED, `not implemented: ${type}`);
+    if (!feishuActive && FEISHU_GATED_METHODS.includes(type)) {
+      throw new ClawdError(
+        ERROR_CODES.FEISHU_LOGIN_REQUIRED,
+        `${type} requires feishu login (People/remote identity)`
+      );
+    }
     const ctx = wsServer.getClientContext(client.id) ?? ownerContext(ownerPrincipalId, ownerDisplayName);
     const verdict = computeGrantForFrame(type, frame);
     if (verdict.kind === "check") {
@@ -44274,6 +44877,8 @@ ${bar}
       logger.warn("tunnel unavailable, degraded to local mode", { reason: tunnelError });
     }
   }
+  void reportDevice();
+  void fetchServerKey();
   const tickAttachmentGc = () => {
     try {
       runAttachmentGc({