@clawos-dev/clawd 0.2.221-beta.434.45d5a69 → 0.2.221

package/dist/cli.cjs

@@ -45,6 +45,9 @@ var init_methods = __esm({
       "session:update",
       "session:delete",
       "session:send",
+      // per-turn sender 2026-07-08 spec §4.6：MCP servers (ticket / inbox ...) 走 HTTP RPC
+      // /api/rpc/session.currentTurnSender 拉当前 turn caller；WS handler 同名（loopback path 复用）
+      "session:currentTurnSender",
       "session:stop",
       // 温柔中断当前轮次，不杀进程（走 CC IPC control_request.subtype=interrupt）
       "session:interrupt",
@@ -4520,6 +4523,59 @@ var init_attachment_schemas = __esm({
   }
 });
 
+// ../protocol/src/principal.ts
+function makeOwnerPrincipal(id, displayName, feishuUnionId) {
+  return PrincipalSchema.parse({
+    id,
+    kind: "owner",
+    displayName,
+    ...feishuUnionId ? { feishuUnionId } : {}
+  });
+}
+function principalToSender(p2) {
+  return {
+    did: p2.id,
+    displayName: p2.displayName,
+    principal: p2.kind,
+    ...p2.feishuUnionId ? { feishuUnionId: p2.feishuUnionId } : {}
+  };
+}
+function makeGuestSender(did, displayName, feishuUnionId) {
+  return SenderInfoSchema.parse({
+    did,
+    displayName,
+    principal: "guest",
+    ...feishuUnionId ? { feishuUnionId } : {}
+  });
+}
+var PrincipalKindSchema, PrincipalSchema, SenderInfoSchema;
+var init_principal = __esm({
+  "../protocol/src/principal.ts"() {
+    "use strict";
+    init_zod();
+    PrincipalKindSchema = external_exports.enum(["owner", "guest"]);
+    PrincipalSchema = external_exports.object({
+      id: external_exports.string().min(1),
+      kind: PrincipalKindSchema,
+      displayName: external_exports.string(),
+      /**
+       * 飞书 union_id。owner: 本机 daemon 已飞书登录时透传自 owner-identity.json；未登录 undefined。
+       * guest: v1 保持 undefined（connect token 当前不携带 unionId；未来若签名 payload 加字段可透传）。
+       * 消费方（如 ticket MCP / 未来别的飞书身份挂钩场景）按 undefined 决定是否降级；本层不做 fallback。
+       */
+      feishuUnionId: external_exports.string().optional()
+    }).strict();
+    SenderInfoSchema = external_exports.object({
+      /** = principal.id = deviceId（决策 #16）。稳定路由 id */
+      did: external_exports.string().min(1),
+      displayName: external_exports.string(),
+      /** owner 未登录 / guest 无飞书身份时缺省。消费方各自决定是否降级 */
+      feishuUnionId: external_exports.string().optional(),
+      principal: PrincipalKindSchema
+    }).strict();
+  }
+});
+
 // ../protocol/src/persona-schemas.ts
 var PersonaFileSchema, PersonaSkillSummarySchema, PersonaPluginSummarySchema, PersonaSandboxSettingsSchema, PersonaInfoResponseSchema, PersonaCreateArgsSchema, PersonaIdArgsSchema, PersonaUpdateArgsSchema, CodexSandboxSettingsSchema;
 var init_persona_schemas = __esm({
@@ -4628,6 +4684,7 @@ var init_schemas = __esm({
     init_zod();
     init_events();
     init_attachment_schemas();
+    init_principal();
     init_persona_schemas();
     SessionStatusSchema = external_exports.enum(SESSION_STATUS_VALUES);
     UsageSchema = external_exports.object({
@@ -4894,13 +4951,18 @@ var init_schemas = __esm({
       // 真实用户输入：daemon 通过 --replay-user-messages 拿到 stdin 回显，区分于 assistant text。
       // meta 非空表示是 CC 注入的系统消息（task-notification / slash-command / system-reminder 等），
       // UI 据此走低视觉权重渲染或子 agent 通知卡。
+      //
+      // sender（2026-07-08 spec §4.1）：daemon 'send' 命令 synth 的 user_text 携带发起人 SenderInfo；
+      // observer 回灌路径（cc jsonl）永远不带 —— cc 自己写盘不知道 daemon 层身份。
+      // UI 端 sender 缺省 → 不渲染 displayName label；有 → 气泡下方渲染。
       external_exports.object({
         ...ParsedEventBase,
         kind: external_exports.literal("user_text"),
         text: external_exports.string(),
         meta: HistoryUserMetaSchema.optional(),
         taskId: external_exports.string().optional(),
-        parentToolUseId: external_exports.string().optional()
+        parentToolUseId: external_exports.string().optional(),
+        sender: SenderInfoSchema.optional()
       }),
       external_exports.object({
         ...ParsedEventBase,
@@ -5509,24 +5571,6 @@ var init_persona_mode = __esm({
   }
 });
 
-// ../protocol/src/principal.ts
-function makeOwnerPrincipal(id, displayName) {
-  return PrincipalSchema.parse({ id, kind: "owner", displayName });
-}
-var PrincipalKindSchema, PrincipalSchema;
-var init_principal = __esm({
-  "../protocol/src/principal.ts"() {
-    "use strict";
-    init_zod();
-    PrincipalKindSchema = external_exports.enum(["owner", "guest"]);
-    PrincipalSchema = external_exports.object({
-      id: external_exports.string().min(1),
-      kind: PrincipalKindSchema,
-      displayName: external_exports.string()
-    }).strict();
-  }
-});
-
 // ../protocol/src/capability.ts
 function stripSecretHash(cap) {
   const { secretHash: _hash, ...wire } = cap;
@@ -41651,6 +41695,47 @@ function escapeAttr(v2) {
   return v2.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
 
+// src/shift/end-frame-handler.ts
+function makeEndFrameHandler(sessionId, onEnd) {
+  return (frame) => {
+    if (!frame || typeof frame !== "object") return;
+    const f = frame;
+    if (f.type !== "session:status") return;
+    if (f.sessionId !== sessionId) return;
+    if (f.status === "running-idle") {
+      onEnd({ kind: "idle" });
+      return;
+    }
+    if (f.status === "stopped") {
+      onEnd({ kind: "stopped" });
+      return;
+    }
+    if (f.status === "error") {
+      onEnd({ kind: "error", message: f.message ?? "cc proc error" });
+      return;
+    }
+  };
+}
+
+// src/shift/end-dispatcher.ts
+function dispatchShiftEnd(info, settle, killImpl) {
+  if (info.kind === "idle") {
+    settle({ ok: true });
+    killImpl();
+    return;
+  }
+  if (info.kind === "stopped") {
+    settle({ error: "cc exited before turn completed" });
+    return;
+  }
+  if (info.kind === "error") {
+    settle({ error: info.message });
+    return;
+  }
+  const _exhaustive = info;
+  throw new Error(`dispatchShiftEnd: unhandled kind ${JSON.stringify(_exhaustive)}`);
+}
+
 // src/session/runner.ts
 var import_node_os4 = __toESM(require("os"), 1);
 var import_node_path7 = __toESM(require("path"), 1);
@@ -41817,7 +41902,9 @@ function cloneState(s) {
     // ReadyGate v2：readyForSend 是基础类型直接复制；pendingSend 必须浅拷贝防止
     // reduce 内 push/shift 在调用方原 state 上副作用（reducer 纯函数契约）
     readyForSend: s.readyForSend,
-    pendingSend: s.pendingSend.slice()
+    pendingSend: s.pendingSend.slice(),
+    // per-turn sender (spec §4.3)：SenderInfo 只在 case 'send' 覆盖，其它 kind 直接复用引用
+    currentTurnSender: s.currentTurnSender
   };
 }
 var IDLE_KILL_DELAY_MS = 6e5;
@@ -41882,8 +41969,7 @@ function buildSpawnContext(state, deps) {
   const personaId = file.ownerPersonaId;
   if (personaId) env.CLAWD_PERSONA_ID = personaId;
   const dispatchMcpConfigPath2 = deps.getDispatchMcpConfigPath?.() ?? null;
-  const ticketMcpConfigPathRaw = deps.getTicketMcpConfigPath?.() ?? null;
-  const ticketMcpConfigPath2 = ticketMcpConfigPathRaw && file.ownerPersonaId === "persona-ticket-manager" ? ticketMcpConfigPathRaw : null;
+  const ticketMcpConfigPath2 = deps.getTicketMcpConfigPath?.() ?? null;
   const shiftMcpConfigPath2 = deps.getShiftMcpConfigPath?.() ?? null;
   const inboxMcpConfigPath2 = deps.getInboxMcpConfigPath?.() ?? null;
   const ctx = {
@@ -42157,10 +42243,12 @@ function applyCommand(state, command, deps) {
           }
         });
       }
+      next.currentTurnSender = command.senderPrincipal;
       const userEvent = {
         kind: "user_text",
         text: command.text,
-        uuid: deps.genUuid?.()
+        uuid: deps.genUuid?.(),
+        sender: command.senderPrincipal
       };
       const pushed = pushEventToBuffer(next, userEvent, deps);
       effects.push(...pushed.effects);
@@ -42708,7 +42796,7 @@ var SessionRunner = class {
       getDispatchMcpConfigPath: this.hooks.getDispatchMcpConfigPath,
       getShiftMcpConfigPath: this.hooks.getShiftMcpConfigPath,
       getInboxMcpConfigPath: this.hooks.getInboxMcpConfigPath,
-      // Ticket MCP：透传 ticket.mcp.json 路径闭包（reducer 内做 persona-ticket-manager gating）
+      // Ticket MCP：透传 ticket.mcp.json 路径闭包（所有 persona session 都挂，无 gating）
       getTicketMcpConfigPath: this.hooks.getTicketMcpConfigPath,
       lookupDispatchByBSessionId: this.hooks.lookupDispatchByBSessionId,
       // ReadyGate v2：透传 mode 让 reducer send / ready-detected 分支决定走暂存队列还是直写
@@ -43227,7 +43315,9 @@ function makeInitialState(file, subSessionMeta) {
     // ReadyGate v2：默认值兼容 SDK happy path（直写 stdin，不走队列）。
     // TUI 模式由 reducer send 分支按 deps.mode='tui' 主动翻 readyForSend=false
     readyForSend: true,
-    pendingSend: []
+    pendingSend: [],
+    // per-turn sender 2026-07-08 spec §4.3：初始 null；case 'send' 首次覆盖
+    currentTurnSender: null
   };
 }
 var SessionManager = class {
@@ -43900,7 +43990,7 @@ var SessionManager = class {
       ]
     };
   }
-  send(args) {
+  send(args, senderPrincipal) {
     const existing = this.getFile(args.sessionId);
     let runner = this.runners.get(args.sessionId);
     if (!runner) {
@@ -43908,10 +43998,22 @@ var SessionManager = class {
       this.runners.set(args.sessionId, runner);
     }
     const { broadcast } = this.withCollector(() => {
-      runner.input({ kind: "command", command: { kind: "send", text: args.text } });
+      runner.input({
+        kind: "command",
+        command: { kind: "send", text: args.text, senderPrincipal }
+      });
     });
     return { response: { ok: true }, broadcast };
   }
+  /**
+   * 只读拿 SessionState；session 不存在返 null（不 throw）。
+   * handlers/session.ts:currentTurnSender 用（loopback HTTP RPC 绝对不能因不存在的 sid 崩）。
+   * 2026-07-08 spec §4.6。
+   */
+  tryGetState(sessionId) {
+    const runner = this.runners.get(sessionId);
+    return runner?.getState() ?? null;
+  }
   // 等子进程真退出再 ack。reducer 推 SIGKILL effect（见 reducer.ts），内核立即回收子进程，
   // proc.on('exit') 几乎瞬时触发；waitUntilStopped 的 3s 超时只在子进程已是 zombie 或
   // 极端 OS 异常时才会用上。这样修掉了"前端 sessionStop 还没等 CC 退就去删 worktree
@@ -44311,7 +44413,10 @@ var SessionManager = class {
     }
     const runner = this.ensureRunnerForScope(file, args.scope);
     const { broadcast } = this.withCollector(() => {
-      runner.input({ kind: "command", command: { kind: "send", text: args.text } });
+      runner.input({
+        kind: "command",
+        command: { kind: "send", text: args.text, senderPrincipal: args.senderPrincipal }
+      });
     });
     return { response: { ok: true }, broadcast };
   }
@@ -44455,7 +44560,27 @@ var SessionManager = class {
       sourceJsonlPath: args.sourceJsonlPath,
       dispatchId: args.dispatchId
     });
-    runner.input({ kind: "command", command: { kind: "send", text: taskPack } });
+    let dispatchSender;
+    if (args.guestPrincipalId) {
+      dispatchSender = makeGuestSender(args.guestPrincipalId, args.guestDisplayName ?? args.guestPrincipalId);
+    } else {
+      if (!this.deps.ownerPrincipalId) {
+        throw new Error(
+          "createDispatchedSession requires ManagerDeps.ownerPrincipalId to build owner sender"
+        );
+      }
+      dispatchSender = principalToSender(
+        makeOwnerPrincipal(
+          this.deps.ownerPrincipalId,
+          this.deps.ownerDisplayName ?? "Owner",
+          this.deps.ownerFeishuUnionId
+        )
+      );
+    }
+    runner.input({
+      kind: "command",
+      command: { kind: "send", text: taskPack, senderPrincipal: dispatchSender }
+    });
     this.deps.logger?.info("dispatch.createDispatchedSession.task-pack-sent", {
       dispatchId: args.dispatchId,
       bSessionId: sessionId
@@ -44470,8 +44595,9 @@ var SessionManager = class {
    * 跟 createDispatchedSession 的差异：
    *   - 不带 dispatchId / source / task pack；prompt 直接当第一条 user message
    *   - 不调 personaDispatchManager.registerBSession
-   *   - 多返一个 ended Promise，监听 session:status (stopped/error) 帧通过现有
-   *     subscribe() 入口（白名单已含 session:status）
+   *   - 多返一个 ended Promise，监听 session:status 帧翻译成 shift 业务终态 union
+   *     （ShiftSessionEnded：{ok:true} | {error:string}），不经 exit code 中转
+   *   - turn-idle 到达即视为业务完成 → settle {ok:true} + fire-and-forget kill cc
    *   - kill 通过 runner.input({command:{kind:'stop'}}) 触发 SIGKILL → proc-exit
    */
   createShiftSession(args) {
@@ -44515,18 +44641,32 @@ var SessionManager = class {
       unsubscribe();
       resolveEnded(info);
     };
-    unsubscribe = this.subscribe(sessionId, scope, (frame) => {
-      if (frame.type !== "session:status") return;
-      const f = frame;
-      if (f.sessionId !== sessionId) return;
-      if (f.status === "stopped") {
-        settle({ exitCode: f.exitCode ?? null });
-      } else if (f.status === "error") {
-        settle({ exitCode: null, error: f.message ?? "cc proc error" });
-      }
-    });
+    const killImpl = () => {
+      const r = this.runners.get(sessionId);
+      if (!r) return;
+      r.input({ kind: "command", command: { kind: "stop" } });
+    };
+    unsubscribe = this.subscribe(
+      sessionId,
+      scope,
+      makeEndFrameHandler(sessionId, (info) => {
+        dispatchShiftEnd(info, settle, killImpl);
+      })
+    );
     const runner = this.ensureRunnerForScope(file, scope);
     this.deps.logger?.info("shift.createShiftSession.runner-ready", { sessionId });
+    if (!this.deps.ownerPrincipalId) {
+      throw new Error(
+        "createShiftSession requires ManagerDeps.ownerPrincipalId to build owner sender"
+      );
+    }
+    const shiftSender = principalToSender(
+      makeOwnerPrincipal(
+        this.deps.ownerPrincipalId,
+        this.deps.ownerDisplayName ?? "Owner",
+        this.deps.ownerFeishuUnionId
+      )
+    );
     runner.input({
       kind: "command",
       command: {
@@ -44534,15 +44674,11 @@ var SessionManager = class {
         text: wrapShiftFirePrompt({
           prompt: args.prompt,
           targetPersona: args.targetPersona
-        })
+        }),
+        senderPrincipal: shiftSender
       }
     });
-    const kill = () => {
-      const r = this.runners.get(sessionId);
-      if (!r) return;
-      r.input({ kind: "command", command: { kind: "stop" } });
-    };
-    return { sessionId, ended, kill };
+    return { sessionId, ended, kill: killImpl };
   }
   /**
    * 老板插话：把 'inject-owner-text' input 喂给对应 runner，
@@ -48052,7 +48188,7 @@ function ticketMcpConfigPath(dataDir) {
 function writeTicketMcpConfig(args) {
   const cfgPath = ticketMcpConfigPath(args.dataDir);
   const content = {
-    _comment: "daemon \u542F\u52A8\u65F6\u81EA\u52A8\u751F\u6210\uFF1Bcc spawn \u901A\u8FC7 --mcp-config \u6CE8\u5165\u3002ticket-mcp-server.cjs \u662F daemon \u81EA\u5E26\u7684 stdio MCP server\uFF0CHTTP client \u8C03 clawos api /api/tickets/*\u3002env \u542B api url\u3001\u5199\u6B7B API key\u3001caller did/name/scene\uFF1BCLAWD_TICKET_LOG \u6307 server \u5199\u65E5\u5FD7\u7684 append \u6587\u4EF6\u8DEF\u5F84\u3002cc \u573A\u666F scene \u56FA\u5B9A persona\u3002",
+    _comment: "daemon \u542F\u52A8\u65F6\u81EA\u52A8\u751F\u6210\uFF1Bcc spawn \u901A\u8FC7 --mcp-config \u6CE8\u5165\u3002ticket-mcp-server.cjs \u662F daemon \u81EA\u5E26\u7684 stdio MCP server\uFF0CHTTP client \u8C03 clawos api /api/tickets/*\u3002env \u542B api url\u3001\u5199\u6B7B API key\u3001scene\uFF1Bdid/name \u6BCF\u6B21 tool call \u8D70 CLAWD_DAEMON_URL + CLAWD_SESSION_ID (cc \u5DF2\u6CE8) fetch /api/rpc/session.currentTurnSender \u62FF\u5F53\u524D turn caller (2026-07-08 spec \xA74.7)\u3002CLAWD_TICKET_LOG \u6307 server \u5199\u65E5\u5FD7\u7684 append \u6587\u4EF6\u8DEF\u5F84\u3002cc \u573A\u666F scene \u56FA\u5B9A persona\u3002",
     mcpServers: {
       "clawd-ticket": {
         type: "stdio",
@@ -48061,8 +48197,6 @@ function writeTicketMcpConfig(args) {
         env: {
           CLAWD_TICKET_API_URL: args.apiBaseUrl,
           CLAWD_TICKET_API_KEY: args.apiKey,
-          CLAWD_TICKET_DID: args.did,
-          CLAWD_TICKET_NAME: args.name,
           CLAWD_TICKET_SCENE: "persona",
           ...args.logPath ? { CLAWD_TICKET_LOG: args.logPath } : {}
         }
@@ -48447,15 +48581,11 @@ function createShiftSpawnFn(deps) {
     void created.ended.then((info) => {
       clearTimeout(timer);
       if (settled) return;
-      if (info.error) {
-        settle({ kind: "error", error: info.error });
-        return;
-      }
-      if (info.exitCode === 0) {
+      if ("ok" in info) {
         settle({ kind: "ok" });
         return;
       }
-      settle({ kind: "error", error: `cc exited with code ${info.exitCode}` });
+      settle({ kind: "error", error: info.error });
     });
     return { sessionId: created.sessionId, ended };
   };
@@ -50177,7 +50307,12 @@ var EXPOSED_RPC_METHODS = [
   "attachment.groupAdd",
   "attachment.signUrl",
   // persona 受控发 P2P IM DM（sender 由 session scope 推，driver 分级授权见 handlers/inbox.ts）
-  "inbox.sendDm"
+  "inbox.sendDm",
+  // per-turn sender 2026-07-08 spec §4.1：MCP servers (ticket / inbox / ...) 每 tool call
+  // 查当前 turn caller —— cc 长驻 + owner/guest 交替驱动同一 session 时不能靠启动时 env
+  // 写死身份，必须运行时 fetch。header X-Clawd-Session-Id 作 session 定位，handler 内查
+  // manager.tryGetState(sid).currentTurnSender 返 SenderInfo | null。
+  "session.currentTurnSender"
 ];
 async function handleRpcRequest(input) {
   const { method, body, sessionId, dispatcher } = input;
@@ -50362,9 +50497,9 @@ function constantTimeEqual2(a, b2) {
 }
 
 // src/transport/connection-context.ts
-function ownerContext(ownerPrincipalId, displayName) {
+function ownerContext(ownerPrincipalId, displayName, feishuUnionId) {
   return {
-    principal: makeOwnerPrincipal(ownerPrincipalId, displayName),
+    principal: makeOwnerPrincipal(ownerPrincipalId, displayName, feishuUnionId),
     grants: [{ resource: { type: "*" }, actions: ["admin"] }]
   };
 }
@@ -50393,7 +50528,10 @@ function visitorGuestContext(p2) {
 async function authenticate(token, deps) {
   if (!token) return { ok: false, code: "NO_TOKEN" };
   if (deps.isOwnerToken(token)) {
-    return { ok: true, context: ownerContext(deps.ownerPrincipalId, deps.ownerDisplayName) };
+    return {
+      ok: true,
+      context: ownerContext(deps.ownerPrincipalId, deps.ownerDisplayName, deps.ownerFeishuUnionId)
+    };
   }
   if (deps.verifyVisitorToken) {
     const vr = deps.verifyVisitorToken(token);
@@ -54192,6 +54330,22 @@ var LoginFlow = class {
     } catch (err) {
       return { ok: false, reason: `user_info failed: ${err.message}` };
     }
+    if (!identity.unionId) {
+      return { ok: false, reason: "union_id missing from TTC user_info" };
+    }
+    try {
+      await this.deps.upsertBinding({
+        deviceId: this.deps.getDeviceId(),
+        unionId: identity.unionId,
+        displayName: identity.displayName,
+        avatarUrl: identity.avatarUrl ?? null
+      });
+    } catch (err) {
+      return {
+        ok: false,
+        reason: `device_binding upsert failed: ${err.message}`
+      };
+    }
     const expiresAtNum = params.expiresAt ? Number.parseInt(params.expiresAt, 10) : NaN;
     this.deps.store.write({
       identity,
@@ -54360,6 +54514,58 @@ async function centralListDevices(opts) {
   return out;
 }
 
+// src/feishu-auth/device-binding-client.ts
+var DeviceBindingClientError = class extends Error {
+  constructor(code, message, cause) {
+    super(message);
+    this.code = code;
+    this.cause = cause;
+    this.name = "DeviceBindingClientError";
+  }
+  code;
+  cause;
+};
+var DEFAULT_TIMEOUT_MS4 = 8e3;
+async function upsertDeviceBinding(opts) {
+  const doFetch = opts.fetchImpl ?? fetch;
+  const ac = new AbortController();
+  const timer = setTimeout(() => ac.abort(), opts.timeoutMs ?? DEFAULT_TIMEOUT_MS4);
+  const body = { unionId: opts.unionId };
+  if (opts.avatarUrl != null) body.avatarUrl = opts.avatarUrl;
+  let res;
+  try {
+    res = await doFetch(`${opts.apiUrl}/api/device-bindings/self`, {
+      method: "PUT",
+      signal: ac.signal,
+      headers: {
+        authorization: `Bearer ${opts.apiKey}`,
+        "x-did": encodeURIComponent(opts.deviceId),
+        "x-name": encodeURIComponent(opts.displayName),
+        "x-scene": "daemon",
+        "content-type": "application/json"
+      },
+      body: JSON.stringify(body)
+    });
+  } catch (err) {
+    clearTimeout(timer);
+    throw new DeviceBindingClientError(
+      "NETWORK",
+      `network error: ${err.message}`,
+      err
+    );
+  } finally {
+    clearTimeout(timer);
+  }
+  if (!res.ok) {
+    let detail = "";
+    try {
+      detail = JSON.stringify(await res.json());
+    } catch {
+    }
+    throw new DeviceBindingClientError("API_ERROR", `HTTP ${res.status}: ${detail}`);
+  }
+}
+
 // src/feishu-auth/verify-token.ts
 var crypto14 = __toESM(require("crypto"), 1);
 var CONNECT_TOKEN_PREFIX = "clawdtk1";
@@ -54618,9 +54824,25 @@ function buildSessionHandlers(deps) {
   const send = async (frame, _client, ctx) => {
     const args = SessionSendArgs.parse(frame);
     ensureSessionAccess(ctx, args.sessionId, "send");
-    const { broadcast } = manager.send(args);
+    const sender = ctx ? principalToSender(ctx.principal) : principalToSender(
+      makeOwnerPrincipal(ownerPrincipalId, deps.ownerDisplayName, deps.ownerFeishuUnionId)
+    );
+    const { broadcast } = manager.send(args, sender);
     return { response: { type: "session:send", ok: true }, broadcast };
   };
+  const currentTurnSender = async (frame, _client, ctx) => {
+    const sid = typeof frame === "object" && frame != null && "sessionId" in frame ? String(frame.sessionId) : "";
+    if (!sid) {
+      return { response: { type: "session:currentTurnSender", sender: null } };
+    }
+    if (ctx && "principal" in ctx) {
+      ensureSessionAccess(ctx, sid, "read");
+    }
+    const state = manager.tryGetState(sid);
+    return {
+      response: { type: "session:currentTurnSender", sender: state?.currentTurnSender ?? null }
+    };
+  };
   const stop = async (frame, _client, ctx) => {
     const args = SessionIdArgs.parse(frame);
     ensureSessionAccess(ctx, args.sessionId, "send");
@@ -54823,6 +55045,7 @@ function buildSessionHandlers(deps) {
     "session:update": update,
     "session:delete": del,
     "session:send": send,
+    "session:currentTurnSender": currentTurnSender,
     "session:stop": stop,
     "session:interrupt": interrupt,
     "session:rewind": rewind,
@@ -57891,7 +58114,14 @@ function buildAppBuilderHandlers(deps) {
           broadcastProjectUpdated(f);
         },
         injectUserText: async (sessionId, text) => {
-          const { broadcast } = sessionManager.send({ sessionId, text });
+          const ownerSender = principalToSender(
+            makeOwnerPrincipal(
+              deps.ownerPrincipalId,
+              deps.ownerDisplayName ?? "Owner",
+              deps.ownerFeishuUnionId
+            )
+          );
+          const { broadcast } = sessionManager.send({ sessionId, text }, ownerSender);
           for (const entry of broadcast) {
             deps.broadcastSessionFrame(entry.frame, entry.target);
           }
@@ -58190,6 +58420,9 @@ function buildMethodHandlers(deps) {
       usersRoot: deps.usersRoot,
       devServerLifecycle: deps.devServerLifecycle,
       sessionManager: deps.manager,
+      ownerPrincipalId: deps.ownerPrincipalId,
+      ownerDisplayName: deps.ownerDisplayName,
+      ownerFeishuUnionId: deps.ownerFeishuUnionId,
       getTunnelUrl: deps.getTunnelUrl,
       broadcastProjectUpdated: deps.broadcastProjectUpdated,
       logger: deps.logger,
@@ -58518,6 +58751,10 @@ var METHOD_GRANT_MAP = {
   "session:update": CAPABILITY_SCOPED,
   "session:delete": CAPABILITY_SCOPED,
   "session:send": CAPABILITY_SCOPED,
+  // per-turn sender 2026-07-08 spec §4.6：dispatcher 层走 'public'（HTTP RPC path 需 dispatcher 放行）；
+  // WS path 的隐私边界（防 guest 猜 sid 枚举 owner feishuUnionId）由 handler 内 ensureSessionAccess
+  // 显式兜底——见 handlers/session.ts:currentTurnSender。dispatcher 'public' ≠ handler 免检。
+  "session:currentTurnSender": { kind: "public" },
   "session:stop": CAPABILITY_SCOPED,
   "session:interrupt": CAPABILITY_SCOPED,
   "session:rewind": CAPABILITY_SCOPED,
@@ -59090,6 +59327,7 @@ async function startDaemon(config) {
   let ownerId = feishuIdentity?.identity.ownerId ?? "";
   let ownerProvider = feishuIdentity?.identity.provider ?? "";
   let ownerDisplayName = feishuIdentity?.identity.displayName ?? loadOwnerDisplayName(config.dataDir);
+  let ownerFeishuUnionId = feishuIdentity?.identity.unionId;
   const authMode = resolvedAuthToken == null ? "none" : "first-message";
   const inboxStore = new InboxStore(config.dataDir);
   const inboxManager = new InboxManager(inboxStore, (_peerDeviceId, frame) => {
@@ -59102,6 +59340,7 @@ async function startDaemon(config) {
     isOwnerToken: (x) => resolvedAuthToken != null && constantTimeEqual(x, resolvedAuthToken),
     ownerPrincipalId,
     ownerDisplayName,
+    ownerFeishuUnionId,
     // persona web 分享：访客 visitor token = daemon 自签 HMAC（无 aud），独立于飞书 connect token
     // 基建——secret 恒存在（auth-store backfill），故无条件注入。验签 ok → guest ctx（persona wildcard）。
     verifyVisitorToken: (t) => {
@@ -59185,7 +59424,7 @@ async function startDaemon(config) {
       return result;
     },
     onAuthed: (h, ctx) => wsServer?.attachClientContext(h.id, ctx),
-    buildOwnerContext: () => ownerContext(ownerPrincipalId, ownerDisplayName),
+    buildOwnerContext: () => ownerContext(ownerPrincipalId, ownerDisplayName, ownerFeishuUnionId),
     closeConnection: (h, code, reason) => wsServer?.closeClient(h.id, code, reason),
     sendOk: (h, payload) => wsServer?.sendToClient(h.id, payload)
   }) : null;
@@ -59257,18 +59496,14 @@ async function startDaemon(config) {
     import_node_path64.default.join(here, "..", "dist", "ticket", "mcp-server.cjs")
   ];
   const ticketServerScriptPath = ticketServerCandidates.find((p2) => import_node_fs51.default.existsSync(p2));
-  const ticketCallerDid = feishuIdentity?.identity.unionId ?? "";
-  const ticketCallerName = feishuIdentity?.identity.displayName ?? "";
   let ticketMcpConfigPath2;
-  if (ticketServerScriptPath && ticketCallerDid) {
+  if (ticketServerScriptPath) {
     const ticketLogPath = import_node_path64.default.join(config.dataDir, "ticket-mcp-server.log");
     ticketMcpConfigPath2 = writeTicketMcpConfig({
       dataDir: config.dataDir,
       serverScriptPath: ticketServerScriptPath,
       apiBaseUrl: config.clawosApi ?? DEFAULT_CLAWOS_API,
       apiKey: resolveClawdTicketsApiKey(),
-      did: ticketCallerDid,
-      name: ticketCallerName,
       logPath: ticketLogPath
     });
     logger.info("ticket.mcp.json written", {
@@ -59278,7 +59513,7 @@ async function startDaemon(config) {
     });
   } else {
     logger.warn("ticket-mcp skipped", {
-      reason: !ticketCallerDid ? "caller did missing (login required)" : "ticket-mcp-server.cjs not found (need build)"
+      reason: "ticket-mcp-server.cjs not found (need build)"
     });
   }
   const shiftServerCandidates = [
@@ -59357,6 +59592,7 @@ async function startDaemon(config) {
     personaStore,
     ownerDisplayName,
     ownerPrincipalId,
+    ownerFeishuUnionId,
     contactStore,
     mode: config.mode,
     // 单栏 refactor (spec 2026-06-02 §5.1)：cc 子进程 env CLAWD_DAEMON_URL 闭包来源。
@@ -59529,7 +59765,16 @@ async function startDaemon(config) {
     store: ownerIdentityStore,
     fetchUserInfo: (ttcToken) => fetchTtcUserInfo({ apiBase: TTC_HOSTS.api, token: ttcToken }),
     ttcAuthBase: TTC_HOSTS.auth,
-    getCallbackUrl: () => `http://127.0.0.1:${config.port}/auth/callback`
+    getCallbackUrl: () => `http://127.0.0.1:${config.port}/auth/callback`,
+    // device_bindings upsert（did ↔ 飞书 unionId 映射）：
+    // deviceId 从 auth.json 稳定读；apiUrl 走同一份 clawosApi；apiKey 复用 CLAWD_TICKETS_API_KEY。
+    // 失败即登录失败（fail-hard，login-flow.spec §upsert 失败）。
+    getDeviceId: () => authFile.deviceId,
+    upsertBinding: (opts) => upsertDeviceBinding({
+      apiUrl: config.clawosApi ?? DEFAULT_CLAWOS_API,
+      apiKey: resolveClawdTicketsApiKey(),
+      ...opts
+    })
   });
   const visitorStore = createVisitorStore({ dir: config.dataDir });
   const exchangeVisitorToken = buildVisitorLogin({
@@ -59610,6 +59855,8 @@ async function startDaemon(config) {
     ownerDisplayName,
     // 决策 #16: whoami owner.id = 本机 deviceId（路由主键）+ ownerId/provider 归属人
     ownerPrincipalId,
+    // per-turn sender §4.6：send handler 无 ctx 兜底 + AppBuilder publish injectUserText 需要
+    ownerFeishuUnionId,
     ownerId,
     ownerProvider,
     personaStore,
@@ -59893,6 +60140,7 @@ async function startDaemon(config) {
           ownerId = result.identity.ownerId;
           ownerProvider = result.identity.provider;
           ownerDisplayName = result.identity.displayName;
+          ownerFeishuUnionId = result.identity.unionId;
           handlers = makeHandlers();
           wsServer?.broadcastToOwners({ type: "auth:login:done", identity: result.identity });
           setImmediate(() => wsServer?.closeAllClients());
@@ -60031,7 +60279,7 @@ async function startDaemon(config) {
   wss.onFrame(async (client, frame) => {
     const type = frame.type;
     const requestId = typeof frame.requestId === "string" ? frame.requestId : void 0;
-    const ctx = wsServer.getClientContext(client.id) ?? ownerContext(ownerPrincipalId, ownerDisplayName);
+    const ctx = wsServer.getClientContext(client.id) ?? ownerContext(ownerPrincipalId, ownerDisplayName, ownerFeishuUnionId);
     const result = await dispatchRpc(type, frame, client, ctx, {
       handlers,
       feishuActive: () => feishuActive