@clawos-dev/clawd 0.2.221-beta.432.4424967 → 0.2.221-beta.433.d7a6891

package/dist/cli.cjs

@@ -45,9 +45,6 @@ var init_methods = __esm({
       "session:update",
       "session:delete",
       "session:send",
-      // per-turn sender 2026-07-08 spec §4.6：MCP servers (ticket / inbox ...) 走 HTTP RPC
-      // /api/rpc/session.currentTurnSender 拉当前 turn caller；WS handler 同名（loopback path 复用）
-      "session:currentTurnSender",
       "session:stop",
       // 温柔中断当前轮次，不杀进程（走 CC IPC control_request.subtype=interrupt）
       "session:interrupt",
@@ -4523,59 +4520,6 @@ var init_attachment_schemas = __esm({
   }
 });
 
-// ../protocol/src/principal.ts
-function makeOwnerPrincipal(id, displayName, feishuUnionId) {
-  return PrincipalSchema.parse({
-    id,
-    kind: "owner",
-    displayName,
-    ...feishuUnionId ? { feishuUnionId } : {}
-  });
-}
-function principalToSender(p2) {
-  return {
-    did: p2.id,
-    displayName: p2.displayName,
-    principal: p2.kind,
-    ...p2.feishuUnionId ? { feishuUnionId: p2.feishuUnionId } : {}
-  };
-}
-function makeGuestSender(did, displayName, feishuUnionId) {
-  return SenderInfoSchema.parse({
-    did,
-    displayName,
-    principal: "guest",
-    ...feishuUnionId ? { feishuUnionId } : {}
-  });
-}
-var PrincipalKindSchema, PrincipalSchema, SenderInfoSchema;
-var init_principal = __esm({
-  "../protocol/src/principal.ts"() {
-    "use strict";
-    init_zod();
-    PrincipalKindSchema = external_exports.enum(["owner", "guest"]);
-    PrincipalSchema = external_exports.object({
-      id: external_exports.string().min(1),
-      kind: PrincipalKindSchema,
-      displayName: external_exports.string(),
-      /**
-       * 飞书 union_id。owner: 本机 daemon 已飞书登录时透传自 owner-identity.json；未登录 undefined。
-       * guest: v1 保持 undefined（connect token 当前不携带 unionId；未来若签名 payload 加字段可透传）。
-       * 消费方（如 ticket MCP / 未来别的飞书身份挂钩场景）按 undefined 决定是否降级；本层不做 fallback。
-       */
-      feishuUnionId: external_exports.string().optional()
-    }).strict();
-    SenderInfoSchema = external_exports.object({
-      /** = principal.id = deviceId（决策 #16）。稳定路由 id */
-      did: external_exports.string().min(1),
-      displayName: external_exports.string(),
-      /** owner 未登录 / guest 无飞书身份时缺省。消费方各自决定是否降级 */
-      feishuUnionId: external_exports.string().optional(),
-      principal: PrincipalKindSchema
-    }).strict();
-  }
-});
-
 // ../protocol/src/persona-schemas.ts
 var PersonaFileSchema, PersonaSkillSummarySchema, PersonaPluginSummarySchema, PersonaSandboxSettingsSchema, PersonaInfoResponseSchema, PersonaCreateArgsSchema, PersonaIdArgsSchema, PersonaUpdateArgsSchema, CodexSandboxSettingsSchema;
 var init_persona_schemas = __esm({
@@ -4684,7 +4628,6 @@ var init_schemas = __esm({
     init_zod();
     init_events();
     init_attachment_schemas();
-    init_principal();
     init_persona_schemas();
     SessionStatusSchema = external_exports.enum(SESSION_STATUS_VALUES);
     UsageSchema = external_exports.object({
@@ -4951,18 +4894,13 @@ var init_schemas = __esm({
       // 真实用户输入：daemon 通过 --replay-user-messages 拿到 stdin 回显，区分于 assistant text。
       // meta 非空表示是 CC 注入的系统消息（task-notification / slash-command / system-reminder 等），
       // UI 据此走低视觉权重渲染或子 agent 通知卡。
-      //
-      // sender（2026-07-08 spec §4.1）：daemon 'send' 命令 synth 的 user_text 携带发起人 SenderInfo；
-      // observer 回灌路径（cc jsonl）永远不带 —— cc 自己写盘不知道 daemon 层身份。
-      // UI 端 sender 缺省 → 不渲染 displayName label；有 → 气泡下方渲染。
       external_exports.object({
         ...ParsedEventBase,
         kind: external_exports.literal("user_text"),
         text: external_exports.string(),
         meta: HistoryUserMetaSchema.optional(),
         taskId: external_exports.string().optional(),
-        parentToolUseId: external_exports.string().optional(),
-        sender: SenderInfoSchema.optional()
+        parentToolUseId: external_exports.string().optional()
       }),
       external_exports.object({
         ...ParsedEventBase,
@@ -5571,6 +5509,24 @@ var init_persona_mode = __esm({
   }
 });
 
+// ../protocol/src/principal.ts
+function makeOwnerPrincipal(id, displayName) {
+  return PrincipalSchema.parse({ id, kind: "owner", displayName });
+}
+var PrincipalKindSchema, PrincipalSchema;
+var init_principal = __esm({
+  "../protocol/src/principal.ts"() {
+    "use strict";
+    init_zod();
+    PrincipalKindSchema = external_exports.enum(["owner", "guest"]);
+    PrincipalSchema = external_exports.object({
+      id: external_exports.string().min(1),
+      kind: PrincipalKindSchema,
+      displayName: external_exports.string()
+    }).strict();
+  }
+});
+
 // ../protocol/src/capability.ts
 function stripSecretHash(cap) {
   const { secretHash: _hash, ...wire } = cap;
@@ -41695,47 +41651,6 @@ function escapeAttr(v2) {
   return v2.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
 
-// src/shift/end-frame-handler.ts
-function makeEndFrameHandler(sessionId, onEnd) {
-  return (frame) => {
-    if (!frame || typeof frame !== "object") return;
-    const f = frame;
-    if (f.type !== "session:status") return;
-    if (f.sessionId !== sessionId) return;
-    if (f.status === "running-idle") {
-      onEnd({ kind: "idle" });
-      return;
-    }
-    if (f.status === "stopped") {
-      onEnd({ kind: "stopped" });
-      return;
-    }
-    if (f.status === "error") {
-      onEnd({ kind: "error", message: f.message ?? "cc proc error" });
-      return;
-    }
-  };
-}
-
-// src/shift/end-dispatcher.ts
-function dispatchShiftEnd(info, settle, killImpl) {
-  if (info.kind === "idle") {
-    settle({ ok: true });
-    killImpl();
-    return;
-  }
-  if (info.kind === "stopped") {
-    settle({ error: "cc exited before turn completed" });
-    return;
-  }
-  if (info.kind === "error") {
-    settle({ error: info.message });
-    return;
-  }
-  const _exhaustive = info;
-  throw new Error(`dispatchShiftEnd: unhandled kind ${JSON.stringify(_exhaustive)}`);
-}
-
 // src/session/runner.ts
 var import_node_os4 = __toESM(require("os"), 1);
 var import_node_path7 = __toESM(require("path"), 1);
@@ -41902,9 +41817,7 @@ function cloneState(s) {
     // ReadyGate v2：readyForSend 是基础类型直接复制；pendingSend 必须浅拷贝防止
     // reduce 内 push/shift 在调用方原 state 上副作用（reducer 纯函数契约）
     readyForSend: s.readyForSend,
-    pendingSend: s.pendingSend.slice(),
-    // per-turn sender (spec §4.3)：SenderInfo 只在 case 'send' 覆盖，其它 kind 直接复用引用
-    currentTurnSender: s.currentTurnSender
+    pendingSend: s.pendingSend.slice()
   };
 }
 var IDLE_KILL_DELAY_MS = 6e5;
@@ -41969,7 +41882,8 @@ function buildSpawnContext(state, deps) {
   const personaId = file.ownerPersonaId;
   if (personaId) env.CLAWD_PERSONA_ID = personaId;
   const dispatchMcpConfigPath2 = deps.getDispatchMcpConfigPath?.() ?? null;
-  const ticketMcpConfigPath2 = deps.getTicketMcpConfigPath?.() ?? null;
+  const ticketMcpConfigPathRaw = deps.getTicketMcpConfigPath?.() ?? null;
+  const ticketMcpConfigPath2 = ticketMcpConfigPathRaw && file.ownerPersonaId === "persona-ticket-manager" ? ticketMcpConfigPathRaw : null;
   const shiftMcpConfigPath2 = deps.getShiftMcpConfigPath?.() ?? null;
   const inboxMcpConfigPath2 = deps.getInboxMcpConfigPath?.() ?? null;
   const ctx = {
@@ -42243,12 +42157,10 @@ function applyCommand(state, command, deps) {
           }
         });
       }
-      next.currentTurnSender = command.senderPrincipal;
       const userEvent = {
         kind: "user_text",
         text: command.text,
-        uuid: deps.genUuid?.(),
-        sender: command.senderPrincipal
+        uuid: deps.genUuid?.()
       };
       const pushed = pushEventToBuffer(next, userEvent, deps);
       effects.push(...pushed.effects);
@@ -42796,7 +42708,7 @@ var SessionRunner = class {
       getDispatchMcpConfigPath: this.hooks.getDispatchMcpConfigPath,
       getShiftMcpConfigPath: this.hooks.getShiftMcpConfigPath,
       getInboxMcpConfigPath: this.hooks.getInboxMcpConfigPath,
-      // Ticket MCP：透传 ticket.mcp.json 路径闭包（所有 persona session 都挂，无 gating）
+      // Ticket MCP：透传 ticket.mcp.json 路径闭包（reducer 内做 persona-ticket-manager gating）
       getTicketMcpConfigPath: this.hooks.getTicketMcpConfigPath,
       lookupDispatchByBSessionId: this.hooks.lookupDispatchByBSessionId,
       // ReadyGate v2：透传 mode 让 reducer send / ready-detected 分支决定走暂存队列还是直写
@@ -43315,9 +43227,7 @@ function makeInitialState(file, subSessionMeta) {
     // ReadyGate v2：默认值兼容 SDK happy path（直写 stdin，不走队列）。
     // TUI 模式由 reducer send 分支按 deps.mode='tui' 主动翻 readyForSend=false
     readyForSend: true,
-    pendingSend: [],
-    // per-turn sender 2026-07-08 spec §4.3：初始 null；case 'send' 首次覆盖
-    currentTurnSender: null
+    pendingSend: []
   };
 }
 var SessionManager = class {
@@ -43990,7 +43900,7 @@ var SessionManager = class {
       ]
     };
   }
-  send(args, senderPrincipal) {
+  send(args) {
     const existing = this.getFile(args.sessionId);
     let runner = this.runners.get(args.sessionId);
     if (!runner) {
@@ -43998,22 +43908,10 @@ var SessionManager = class {
       this.runners.set(args.sessionId, runner);
     }
     const { broadcast } = this.withCollector(() => {
-      runner.input({
-        kind: "command",
-        command: { kind: "send", text: args.text, senderPrincipal }
-      });
+      runner.input({ kind: "command", command: { kind: "send", text: args.text } });
     });
     return { response: { ok: true }, broadcast };
   }
-  /**
-   * 只读拿 SessionState；session 不存在返 null（不 throw）。
-   * handlers/session.ts:currentTurnSender 用（loopback HTTP RPC 绝对不能因不存在的 sid 崩）。
-   * 2026-07-08 spec §4.6。
-   */
-  tryGetState(sessionId) {
-    const runner = this.runners.get(sessionId);
-    return runner?.getState() ?? null;
-  }
   // 等子进程真退出再 ack。reducer 推 SIGKILL effect（见 reducer.ts），内核立即回收子进程，
   // proc.on('exit') 几乎瞬时触发；waitUntilStopped 的 3s 超时只在子进程已是 zombie 或
   // 极端 OS 异常时才会用上。这样修掉了"前端 sessionStop 还没等 CC 退就去删 worktree
@@ -44413,10 +44311,7 @@ var SessionManager = class {
     }
     const runner = this.ensureRunnerForScope(file, args.scope);
     const { broadcast } = this.withCollector(() => {
-      runner.input({
-        kind: "command",
-        command: { kind: "send", text: args.text, senderPrincipal: args.senderPrincipal }
-      });
+      runner.input({ kind: "command", command: { kind: "send", text: args.text } });
     });
     return { response: { ok: true }, broadcast };
   }
@@ -44560,27 +44455,7 @@ var SessionManager = class {
       sourceJsonlPath: args.sourceJsonlPath,
       dispatchId: args.dispatchId
     });
-    let dispatchSender;
-    if (args.guestPrincipalId) {
-      dispatchSender = makeGuestSender(args.guestPrincipalId, args.guestDisplayName ?? args.guestPrincipalId);
-    } else {
-      if (!this.deps.ownerPrincipalId) {
-        throw new Error(
-          "createDispatchedSession requires ManagerDeps.ownerPrincipalId to build owner sender"
-        );
-      }
-      dispatchSender = principalToSender(
-        makeOwnerPrincipal(
-          this.deps.ownerPrincipalId,
-          this.deps.ownerDisplayName ?? "Owner",
-          this.deps.ownerFeishuUnionId
-        )
-      );
-    }
-    runner.input({
-      kind: "command",
-      command: { kind: "send", text: taskPack, senderPrincipal: dispatchSender }
-    });
+    runner.input({ kind: "command", command: { kind: "send", text: taskPack } });
     this.deps.logger?.info("dispatch.createDispatchedSession.task-pack-sent", {
       dispatchId: args.dispatchId,
       bSessionId: sessionId
@@ -44595,9 +44470,8 @@ var SessionManager = class {
    * 跟 createDispatchedSession 的差异：
    *   - 不带 dispatchId / source / task pack；prompt 直接当第一条 user message
    *   - 不调 personaDispatchManager.registerBSession
-   *   - 多返一个 ended Promise，监听 session:status 帧翻译成 shift 业务终态 union
-   *     （ShiftSessionEnded：{ok:true} | {error:string}），不经 exit code 中转
-   *   - turn-idle 到达即视为业务完成 → settle {ok:true} + fire-and-forget kill cc
+   *   - 多返一个 ended Promise，监听 session:status (stopped/error) 帧通过现有
+   *     subscribe() 入口（白名单已含 session:status）
    *   - kill 通过 runner.input({command:{kind:'stop'}}) 触发 SIGKILL → proc-exit
    */
   createShiftSession(args) {
@@ -44641,32 +44515,18 @@ var SessionManager = class {
       unsubscribe();
       resolveEnded(info);
     };
-    const killImpl = () => {
-      const r = this.runners.get(sessionId);
-      if (!r) return;
-      r.input({ kind: "command", command: { kind: "stop" } });
-    };
-    unsubscribe = this.subscribe(
-      sessionId,
-      scope,
-      makeEndFrameHandler(sessionId, (info) => {
-        dispatchShiftEnd(info, settle, killImpl);
-      })
-    );
+    unsubscribe = this.subscribe(sessionId, scope, (frame) => {
+      if (frame.type !== "session:status") return;
+      const f = frame;
+      if (f.sessionId !== sessionId) return;
+      if (f.status === "stopped") {
+        settle({ exitCode: f.exitCode ?? null });
+      } else if (f.status === "error") {
+        settle({ exitCode: null, error: f.message ?? "cc proc error" });
+      }
+    });
     const runner = this.ensureRunnerForScope(file, scope);
     this.deps.logger?.info("shift.createShiftSession.runner-ready", { sessionId });
-    if (!this.deps.ownerPrincipalId) {
-      throw new Error(
-        "createShiftSession requires ManagerDeps.ownerPrincipalId to build owner sender"
-      );
-    }
-    const shiftSender = principalToSender(
-      makeOwnerPrincipal(
-        this.deps.ownerPrincipalId,
-        this.deps.ownerDisplayName ?? "Owner",
-        this.deps.ownerFeishuUnionId
-      )
-    );
     runner.input({
       kind: "command",
       command: {
@@ -44674,11 +44534,15 @@ var SessionManager = class {
         text: wrapShiftFirePrompt({
           prompt: args.prompt,
           targetPersona: args.targetPersona
-        }),
-        senderPrincipal: shiftSender
+        })
       }
     });
-    return { sessionId, ended, kill: killImpl };
+    const kill = () => {
+      const r = this.runners.get(sessionId);
+      if (!r) return;
+      r.input({ kind: "command", command: { kind: "stop" } });
+    };
+    return { sessionId, ended, kill };
   }
   /**
    * 老板插话：把 'inject-owner-text' input 喂给对应 runner，
@@ -48188,7 +48052,7 @@ function ticketMcpConfigPath(dataDir) {
 function writeTicketMcpConfig(args) {
   const cfgPath = ticketMcpConfigPath(args.dataDir);
   const content = {
-    _comment: "daemon \u542F\u52A8\u65F6\u81EA\u52A8\u751F\u6210\uFF1Bcc spawn \u901A\u8FC7 --mcp-config \u6CE8\u5165\u3002ticket-mcp-server.cjs \u662F daemon \u81EA\u5E26\u7684 stdio MCP server\uFF0CHTTP client \u8C03 clawos api /api/tickets/*\u3002env \u542B api url\u3001\u5199\u6B7B API key\u3001scene\uFF1Bdid/name \u6BCF\u6B21 tool call \u8D70 CLAWD_DAEMON_URL + CLAWD_SESSION_ID (cc \u5DF2\u6CE8) fetch /api/rpc/session.currentTurnSender \u62FF\u5F53\u524D turn caller (2026-07-08 spec \xA74.7)\u3002CLAWD_TICKET_LOG \u6307 server \u5199\u65E5\u5FD7\u7684 append \u6587\u4EF6\u8DEF\u5F84\u3002cc \u573A\u666F scene \u56FA\u5B9A persona\u3002",
+    _comment: "daemon \u542F\u52A8\u65F6\u81EA\u52A8\u751F\u6210\uFF1Bcc spawn \u901A\u8FC7 --mcp-config \u6CE8\u5165\u3002ticket-mcp-server.cjs \u662F daemon \u81EA\u5E26\u7684 stdio MCP server\uFF0CHTTP client \u8C03 clawos api /api/tickets/*\u3002env \u542B api url\u3001\u5199\u6B7B API key\u3001caller did/name/scene\uFF1BCLAWD_TICKET_LOG \u6307 server \u5199\u65E5\u5FD7\u7684 append \u6587\u4EF6\u8DEF\u5F84\u3002cc \u573A\u666F scene \u56FA\u5B9A persona\u3002",
     mcpServers: {
       "clawd-ticket": {
         type: "stdio",
@@ -48197,6 +48061,8 @@ function writeTicketMcpConfig(args) {
         env: {
           CLAWD_TICKET_API_URL: args.apiBaseUrl,
           CLAWD_TICKET_API_KEY: args.apiKey,
+          CLAWD_TICKET_DID: args.did,
+          CLAWD_TICKET_NAME: args.name,
           CLAWD_TICKET_SCENE: "persona",
           ...args.logPath ? { CLAWD_TICKET_LOG: args.logPath } : {}
         }
@@ -48581,11 +48447,15 @@ function createShiftSpawnFn(deps) {
     void created.ended.then((info) => {
       clearTimeout(timer);
       if (settled) return;
-      if ("ok" in info) {
+      if (info.error) {
+        settle({ kind: "error", error: info.error });
+        return;
+      }
+      if (info.exitCode === 0) {
         settle({ kind: "ok" });
         return;
       }
-      settle({ kind: "error", error: info.error });
+      settle({ kind: "error", error: `cc exited with code ${info.exitCode}` });
     });
     return { sessionId: created.sessionId, ended };
   };
@@ -50307,12 +50177,7 @@ var EXPOSED_RPC_METHODS = [
   "attachment.groupAdd",
   "attachment.signUrl",
   // persona 受控发 P2P IM DM（sender 由 session scope 推，driver 分级授权见 handlers/inbox.ts）
-  "inbox.sendDm",
-  // per-turn sender 2026-07-08 spec §4.1：MCP servers (ticket / inbox / ...) 每 tool call
-  // 查当前 turn caller —— cc 长驻 + owner/guest 交替驱动同一 session 时不能靠启动时 env
-  // 写死身份，必须运行时 fetch。header X-Clawd-Session-Id 作 session 定位，handler 内查
-  // manager.tryGetState(sid).currentTurnSender 返 SenderInfo | null。
-  "session.currentTurnSender"
+  "inbox.sendDm"
 ];
 async function handleRpcRequest(input) {
   const { method, body, sessionId, dispatcher } = input;
@@ -50497,9 +50362,9 @@ function constantTimeEqual2(a, b2) {
 }
 
 // src/transport/connection-context.ts
-function ownerContext(ownerPrincipalId, displayName, feishuUnionId) {
+function ownerContext(ownerPrincipalId, displayName) {
   return {
-    principal: makeOwnerPrincipal(ownerPrincipalId, displayName, feishuUnionId),
+    principal: makeOwnerPrincipal(ownerPrincipalId, displayName),
     grants: [{ resource: { type: "*" }, actions: ["admin"] }]
   };
 }
@@ -50528,10 +50393,7 @@ function visitorGuestContext(p2) {
 async function authenticate(token, deps) {
   if (!token) return { ok: false, code: "NO_TOKEN" };
   if (deps.isOwnerToken(token)) {
-    return {
-      ok: true,
-      context: ownerContext(deps.ownerPrincipalId, deps.ownerDisplayName, deps.ownerFeishuUnionId)
-    };
+    return { ok: true, context: ownerContext(deps.ownerPrincipalId, deps.ownerDisplayName) };
   }
   if (deps.verifyVisitorToken) {
     const vr = deps.verifyVisitorToken(token);
@@ -54330,22 +54192,6 @@ var LoginFlow = class {
     } catch (err) {
       return { ok: false, reason: `user_info failed: ${err.message}` };
     }
-    if (!identity.unionId) {
-      return { ok: false, reason: "union_id missing from TTC user_info" };
-    }
-    try {
-      await this.deps.upsertBinding({
-        deviceId: this.deps.getDeviceId(),
-        unionId: identity.unionId,
-        displayName: identity.displayName,
-        avatarUrl: identity.avatarUrl ?? null
-      });
-    } catch (err) {
-      return {
-        ok: false,
-        reason: `device_binding upsert failed: ${err.message}`
-      };
-    }
     const expiresAtNum = params.expiresAt ? Number.parseInt(params.expiresAt, 10) : NaN;
     this.deps.store.write({
       identity,
@@ -54514,58 +54360,6 @@ async function centralListDevices(opts) {
   return out;
 }
 
-// src/feishu-auth/device-binding-client.ts
-var DeviceBindingClientError = class extends Error {
-  constructor(code, message, cause) {
-    super(message);
-    this.code = code;
-    this.cause = cause;
-    this.name = "DeviceBindingClientError";
-  }
-  code;
-  cause;
-};
-var DEFAULT_TIMEOUT_MS4 = 8e3;
-async function upsertDeviceBinding(opts) {
-  const doFetch = opts.fetchImpl ?? fetch;
-  const ac = new AbortController();
-  const timer = setTimeout(() => ac.abort(), opts.timeoutMs ?? DEFAULT_TIMEOUT_MS4);
-  const body = { unionId: opts.unionId };
-  if (opts.avatarUrl != null) body.avatarUrl = opts.avatarUrl;
-  let res;
-  try {
-    res = await doFetch(`${opts.apiUrl}/api/device-bindings/self`, {
-      method: "PUT",
-      signal: ac.signal,
-      headers: {
-        authorization: `Bearer ${opts.apiKey}`,
-        "x-did": encodeURIComponent(opts.deviceId),
-        "x-name": encodeURIComponent(opts.displayName),
-        "x-scene": "daemon",
-        "content-type": "application/json"
-      },
-      body: JSON.stringify(body)
-    });
-  } catch (err) {
-    clearTimeout(timer);
-    throw new DeviceBindingClientError(
-      "NETWORK",
-      `network error: ${err.message}`,
-      err
-    );
-  } finally {
-    clearTimeout(timer);
-  }
-  if (!res.ok) {
-    let detail = "";
-    try {
-      detail = JSON.stringify(await res.json());
-    } catch {
-    }
-    throw new DeviceBindingClientError("API_ERROR", `HTTP ${res.status}: ${detail}`);
-  }
-}
-
 // src/feishu-auth/verify-token.ts
 var crypto14 = __toESM(require("crypto"), 1);
 var CONNECT_TOKEN_PREFIX = "clawdtk1";
@@ -54824,25 +54618,9 @@ function buildSessionHandlers(deps) {
   const send = async (frame, _client, ctx) => {
     const args = SessionSendArgs.parse(frame);
     ensureSessionAccess(ctx, args.sessionId, "send");
-    const sender = ctx ? principalToSender(ctx.principal) : principalToSender(
-      makeOwnerPrincipal(ownerPrincipalId, deps.ownerDisplayName, deps.ownerFeishuUnionId)
-    );
-    const { broadcast } = manager.send(args, sender);
+    const { broadcast } = manager.send(args);
     return { response: { type: "session:send", ok: true }, broadcast };
   };
-  const currentTurnSender = async (frame, _client, ctx) => {
-    const sid = typeof frame === "object" && frame != null && "sessionId" in frame ? String(frame.sessionId) : "";
-    if (!sid) {
-      return { response: { type: "session:currentTurnSender", sender: null } };
-    }
-    if (ctx && "principal" in ctx) {
-      ensureSessionAccess(ctx, sid, "read");
-    }
-    const state = manager.tryGetState(sid);
-    return {
-      response: { type: "session:currentTurnSender", sender: state?.currentTurnSender ?? null }
-    };
-  };
   const stop = async (frame, _client, ctx) => {
     const args = SessionIdArgs.parse(frame);
     ensureSessionAccess(ctx, args.sessionId, "send");
@@ -55045,7 +54823,6 @@ function buildSessionHandlers(deps) {
     "session:update": update,
     "session:delete": del,
     "session:send": send,
-    "session:currentTurnSender": currentTurnSender,
     "session:stop": stop,
     "session:interrupt": interrupt,
     "session:rewind": rewind,
@@ -58114,14 +57891,7 @@ function buildAppBuilderHandlers(deps) {
           broadcastProjectUpdated(f);
         },
         injectUserText: async (sessionId, text) => {
-          const ownerSender = principalToSender(
-            makeOwnerPrincipal(
-              deps.ownerPrincipalId,
-              deps.ownerDisplayName ?? "Owner",
-              deps.ownerFeishuUnionId
-            )
-          );
-          const { broadcast } = sessionManager.send({ sessionId, text }, ownerSender);
+          const { broadcast } = sessionManager.send({ sessionId, text });
           for (const entry of broadcast) {
             deps.broadcastSessionFrame(entry.frame, entry.target);
           }
@@ -58420,9 +58190,6 @@ function buildMethodHandlers(deps) {
       usersRoot: deps.usersRoot,
       devServerLifecycle: deps.devServerLifecycle,
       sessionManager: deps.manager,
-      ownerPrincipalId: deps.ownerPrincipalId,
-      ownerDisplayName: deps.ownerDisplayName,
-      ownerFeishuUnionId: deps.ownerFeishuUnionId,
       getTunnelUrl: deps.getTunnelUrl,
       broadcastProjectUpdated: deps.broadcastProjectUpdated,
       logger: deps.logger,
@@ -58751,10 +58518,6 @@ var METHOD_GRANT_MAP = {
   "session:update": CAPABILITY_SCOPED,
   "session:delete": CAPABILITY_SCOPED,
   "session:send": CAPABILITY_SCOPED,
-  // per-turn sender 2026-07-08 spec §4.6：dispatcher 层走 'public'（HTTP RPC path 需 dispatcher 放行）；
-  // WS path 的隐私边界（防 guest 猜 sid 枚举 owner feishuUnionId）由 handler 内 ensureSessionAccess
-  // 显式兜底——见 handlers/session.ts:currentTurnSender。dispatcher 'public' ≠ handler 免检。
-  "session:currentTurnSender": { kind: "public" },
   "session:stop": CAPABILITY_SCOPED,
   "session:interrupt": CAPABILITY_SCOPED,
   "session:rewind": CAPABILITY_SCOPED,
@@ -59327,7 +59090,6 @@ async function startDaemon(config) {
   let ownerId = feishuIdentity?.identity.ownerId ?? "";
   let ownerProvider = feishuIdentity?.identity.provider ?? "";
   let ownerDisplayName = feishuIdentity?.identity.displayName ?? loadOwnerDisplayName(config.dataDir);
-  let ownerFeishuUnionId = feishuIdentity?.identity.unionId;
   const authMode = resolvedAuthToken == null ? "none" : "first-message";
   const inboxStore = new InboxStore(config.dataDir);
   const inboxManager = new InboxManager(inboxStore, (_peerDeviceId, frame) => {
@@ -59340,7 +59102,6 @@ async function startDaemon(config) {
     isOwnerToken: (x) => resolvedAuthToken != null && constantTimeEqual(x, resolvedAuthToken),
     ownerPrincipalId,
     ownerDisplayName,
-    ownerFeishuUnionId,
     // persona web 分享：访客 visitor token = daemon 自签 HMAC（无 aud），独立于飞书 connect token
     // 基建——secret 恒存在（auth-store backfill），故无条件注入。验签 ok → guest ctx（persona wildcard）。
     verifyVisitorToken: (t) => {
@@ -59424,7 +59185,7 @@ async function startDaemon(config) {
       return result;
     },
     onAuthed: (h, ctx) => wsServer?.attachClientContext(h.id, ctx),
-    buildOwnerContext: () => ownerContext(ownerPrincipalId, ownerDisplayName, ownerFeishuUnionId),
+    buildOwnerContext: () => ownerContext(ownerPrincipalId, ownerDisplayName),
     closeConnection: (h, code, reason) => wsServer?.closeClient(h.id, code, reason),
     sendOk: (h, payload) => wsServer?.sendToClient(h.id, payload)
   }) : null;
@@ -59496,14 +59257,18 @@ async function startDaemon(config) {
     import_node_path64.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
   const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
+  const ticketCallerDid = feishuIdentity?.identity.unionId ?? "";
+  const ticketCallerName = feishuIdentity?.identity.displayName ?? "";
   let ticketMcpConfigPath2;
-  if (ticketServerScriptPath) {
+  if (ticketServerScriptPath && ticketCallerDid) {
     const ticketLogPath = import_node_path64.default.join(config.dataDir, "ticket-mcp-server.log");
     ticketMcpConfigPath2 = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
       apiBaseUrl: config.clawosApi ?? DEFAULT_CLAWOS_API,
       apiKey: resolveClawdTicketsApiKey(),
+      did: ticketCallerDid,
+      name: ticketCallerName,
       logPath: ticketLogPath
     });
     logger.info("ticket.mcp.json written", {
@@ -59513,7 +59278,7 @@ async function startDaemon(config) {
     });
   } else {
     logger.warn("ticket-mcp skipped", {
-      reason: "ticket-mcp-server.cjs not found (need build)"
+      reason: !ticketCallerDid ? "caller did missing (login required)" : "ticket-mcp-server.cjs not found (need build)"
     });
   }
   const shiftServerCandidates = [
@@ -59592,7 +59357,6 @@ async function startDaemon(config) {
     personaStore,
     ownerDisplayName,
     ownerPrincipalId,
-    ownerFeishuUnionId,
     contactStore,
     mode: config.mode,
     // 单栏 refactor (spec 2026-06-02 §5.1)：cc 子进程 env CLAWD_DAEMON_URL 闭包来源。
@@ -59765,16 +59529,7 @@ async function startDaemon(config) {
     store: ownerIdentityStore,
     fetchUserInfo: (ttcToken) => fetchTtcUserInfo({ apiBase: TTC_HOSTS.api, token: ttcToken }),
     ttcAuthBase: TTC_HOSTS.auth,
-    getCallbackUrl: () => `http://127.0.0.1:${config.port}/auth/callback`,
-    // device_bindings upsert（did ↔ 飞书 unionId 映射）：
-    // deviceId 从 auth.json 稳定读；apiUrl 走同一份 clawosApi；apiKey 复用 CLAWD_TICKETS_API_KEY。
-    // 失败即登录失败（fail-hard，login-flow.spec §upsert 失败）。
-    getDeviceId: () => authFile.deviceId,
-    upsertBinding: (opts) => upsertDeviceBinding({
-      apiUrl: config.clawosApi ?? DEFAULT_CLAWOS_API,
-      apiKey: resolveClawdTicketsApiKey(),
-      ...opts
-    })
+    getCallbackUrl: () => `http://127.0.0.1:${config.port}/auth/callback`
   });
   const visitorStore = createVisitorStore({ dir: config.dataDir });
   const exchangeVisitorToken = buildVisitorLogin({
@@ -59855,8 +59610,6 @@ async function startDaemon(config) {
     ownerDisplayName,
     // 决策 #16: whoami owner.id = 本机 deviceId（路由主键）+ ownerId/provider 归属人
     ownerPrincipalId,
-    // per-turn sender §4.6：send handler 无 ctx 兜底 + AppBuilder publish injectUserText 需要
-    ownerFeishuUnionId,
     ownerId,
     ownerProvider,
     personaStore,
@@ -60140,7 +59893,6 @@ async function startDaemon(config) {
           ownerId = result.identity.ownerId;
           ownerProvider = result.identity.provider;
           ownerDisplayName = result.identity.displayName;
-          ownerFeishuUnionId = result.identity.unionId;
           handlers = makeHandlers();
           wsServer?.broadcastToOwners({ type: "auth:login:done", identity: result.identity });
           setImmediate(() => wsServer?.closeAllClients());
@@ -60279,7 +60031,7 @@ async function startDaemon(config) {
   wss.onFrame(async (client, frame) => {
     const type = frame.type;
     const requestId = typeof frame.requestId === "string" ? frame.requestId : void 0;
-    const ctx = wsServer.getClientContext(client.id) ?? ownerContext(ownerPrincipalId, ownerDisplayName, ownerFeishuUnionId);
+    const ctx = wsServer.getClientContext(client.id) ?? ownerContext(ownerPrincipalId, ownerDisplayName);
     const result = await dispatchRpc(type, frame, client, ctx, {
       handlers,
       feishuActive: () => feishuActive