@clawos-dev/clawd 0.2.217-beta.428.894efa9 → 0.2.218-beta.429.c31b635

package/dist/cli.cjs

@@ -54191,6 +54191,22 @@ var LoginFlow = class {
     } catch (err) {
       return { ok: false, reason: `user_info failed: ${err.message}` };
     }
+    if (!identity.unionId) {
+      return { ok: false, reason: "union_id missing from TTC user_info" };
+    }
+    try {
+      await this.deps.upsertBinding({
+        deviceId: this.deps.getDeviceId(),
+        unionId: identity.unionId,
+        displayName: identity.displayName,
+        avatarUrl: identity.avatarUrl ?? null
+      });
+    } catch (err) {
+      return {
+        ok: false,
+        reason: `device_binding upsert failed: ${err.message}`
+      };
+    }
     const expiresAtNum = params.expiresAt ? Number.parseInt(params.expiresAt, 10) : NaN;
     this.deps.store.write({
       identity,
@@ -54359,6 +54375,57 @@ async function centralListDevices(opts) {
   return out;
 }
 
+// src/feishu-auth/device-binding-client.ts
+var DeviceBindingClientError = class extends Error {
+  constructor(code, message, cause) {
+    super(message);
+    this.code = code;
+    this.cause = cause;
+    this.name = "DeviceBindingClientError";
+  }
+  code;
+  cause;
+};
+var DEFAULT_TIMEOUT_MS4 = 8e3;
+async function upsertDeviceBinding(opts) {
+  const doFetch = opts.fetchImpl ?? fetch;
+  const ac = new AbortController();
+  const timer = setTimeout(() => ac.abort(), opts.timeoutMs ?? DEFAULT_TIMEOUT_MS4);
+  const body = { unionId: opts.unionId };
+  if (opts.avatarUrl != null) body.avatarUrl = opts.avatarUrl;
+  let res;
+  try {
+    res = await doFetch(`${opts.apiUrl}/api/device-bindings/self`, {
+      method: "PUT",
+      signal: ac.signal,
+      headers: {
+        authorization: `Bearer ${opts.apiKey}`,
+        "x-did": encodeURIComponent(opts.deviceId),
+        "x-name": encodeURIComponent(opts.displayName),
+        "content-type": "application/json"
+      },
+      body: JSON.stringify(body)
+    });
+  } catch (err) {
+    clearTimeout(timer);
+    throw new DeviceBindingClientError(
+      "NETWORK",
+      `network error: ${err.message}`,
+      err
+    );
+  } finally {
+    clearTimeout(timer);
+  }
+  if (!res.ok) {
+    let detail = "";
+    try {
+      detail = JSON.stringify(await res.json());
+    } catch {
+    }
+    throw new DeviceBindingClientError("API_ERROR", `HTTP ${res.status}: ${detail}`);
+  }
+}
+
 // src/feishu-auth/verify-token.ts
 var crypto14 = __toESM(require("crypto"), 1);
 var CONNECT_TOKEN_PREFIX = "clawdtk1";
@@ -59528,7 +59595,16 @@ async function startDaemon(config) {
     store: ownerIdentityStore,
     fetchUserInfo: (ttcToken) => fetchTtcUserInfo({ apiBase: TTC_HOSTS.api, token: ttcToken }),
     ttcAuthBase: TTC_HOSTS.auth,
-    getCallbackUrl: () => `http://127.0.0.1:${config.port}/auth/callback`
+    getCallbackUrl: () => `http://127.0.0.1:${config.port}/auth/callback`,
+    // device_bindings upsert（did ↔ 飞书 unionId 映射）：
+    // deviceId 从 auth.json 稳定读；apiUrl 走同一份 clawosApi；apiKey 复用 CLAWD_TICKETS_API_KEY。
+    // 失败即登录失败（fail-hard，login-flow.spec §upsert 失败）。
+    getDeviceId: () => authFile.deviceId,
+    upsertBinding: (opts) => upsertDeviceBinding({
+      apiUrl: config.clawosApi ?? DEFAULT_CLAWOS_API,
+      apiKey: resolveClawdTicketsApiKey(),
+      ...opts
+    })
   });
   const visitorStore = createVisitorStore({ dir: config.dataDir });
   const exchangeVisitorToken = buildVisitorLogin({