@xfxstudio/claworld 2026.6.10 → 2026.6.29-testing.1

package/src/openclaw/plugin/onboarding.js

@@ -10,6 +10,10 @@ import {
   inspectClaworldChannelAccount,
   listClaworldAccountIds,
 } from './config-schema.js';
+import {
+  fetchJson,
+  normalizeRelayHttpBaseUrl,
+} from '../runtime/http-boundary.js';
 
 function collectUnsupportedSetupFlags(input = {}) {
   const unsupported = [];
@@ -102,7 +106,7 @@ function hasClaworldBinding(config = {}, { agentId, accountId } = {}) {
   });
 }
 
-function isRelayBootstrapReady(account = {}) {
+function hasRuntimeCredential(account = {}) {
   return Boolean(
     account?.configured
     && normalizeText(account?.appToken, null),
@@ -129,7 +133,7 @@ export function inspectManagedClaworldInstall({
   const accountStatus = managedAccountPresent
     ? inspectClaworldChannelAccount(cfg, managedOptions.accountId)
     : inspectClaworldChannelAccount({}, managedOptions.accountId);
-  const activationReady = isRelayBootstrapReady(accountStatus);
+  const runtimeCredentialReady = hasRuntimeCredential(accountStatus);
   const setupReady = Boolean(
     managedAccountPresent
     && managedBindingPresent
@@ -139,13 +143,13 @@ export function inspectManagedClaworldInstall({
   let selectionHint = 'remote relay world channel';
   let quickstartScore = 5;
 
-  if (setupReady && activationReady) {
+  if (setupReady && runtimeCredentialReady) {
     statusLabel = 'configured';
     selectionHint = 'configured · ready';
     quickstartScore = 2;
   } else if (setupReady) {
-    statusLabel = 'configured (activation pending)';
-    selectionHint = 'configured · activation pending';
+    statusLabel = 'configured (email verification pending)';
+    selectionHint = 'configured · email verification pending';
     quickstartScore = 3;
   } else if (managedAccountPresent && !managedBindingPresent) {
     statusLabel = 'configured (binding pending)';
@@ -166,7 +170,7 @@ export function inspectManagedClaworldInstall({
     managedAgentPresent,
     managedBindingPresent,
     accountStatus,
-    activationReady,
+    runtimeCredentialReady,
     setupReady,
     statusLabel,
     selectionHint,
@@ -184,7 +188,7 @@ export function buildClaworldOnboardingStatus({
     statusLines: [`Claworld: ${inspection.statusLabel}`],
     selectionHint: inspection.selectionHint,
     quickstartScore: inspection.quickstartScore,
-    activationReady: inspection.activationReady,
+    runtimeCredentialReady: inspection.runtimeCredentialReady,
   };
 }
 
@@ -231,25 +235,172 @@ function resolveManagedOptionsFromContext({ cfg = {}, accountId = null, input =
   });
 }
 
+function resolveSetupFetchImpl(runtime = {}) {
+  const candidate = runtime?.fetchImpl
+    || runtime?.fetch
+    || (typeof globalThis.fetch === 'function' ? globalThis.fetch : null);
+  if (typeof candidate !== 'function') {
+    throw new Error('Claworld setup requires fetch support to complete email verification.');
+  }
+  return (url, init) => candidate(url, init);
+}
+
+function validateSetupEmail(value) {
+  const normalized = normalizeText(value, null);
+  if (!normalized) return 'Email is required.';
+  if (!normalized.includes('@')) return 'Enter a valid email address.';
+  return null;
+}
+
+function validateSetupVerificationCode(value) {
+  return normalizeText(value, null) ? null : 'Verification code is required.';
+}
+
+function formatSetupApiError(result, fallbackMessage) {
+  const body = ensureObject(result?.body);
+  const detail = normalizeText(
+    body.publicMessage,
+    normalizeText(body.error, normalizeText(body.message, null)),
+  );
+  return detail ? `${fallbackMessage}: ${detail}` : fallbackMessage;
+}
+
+async function startSetupEmailVerification({
+  runtimeConfig,
+  email,
+  displayName = null,
+  fetchImpl,
+} = {}) {
+  const baseUrl = normalizeRelayHttpBaseUrl(runtimeConfig.serverUrl);
+  const normalizedEmail = normalizeText(email, null);
+  const normalizedDisplayName = normalizeText(displayName, null);
+  const result = await fetchJson(fetchImpl, `${baseUrl}/v1/identity/email/start`, {
+    method: 'POST',
+    headers: {
+      'content-type': 'application/json',
+      ...(runtimeConfig.apiKey ? { 'x-api-key': runtimeConfig.apiKey } : {}),
+    },
+    body: JSON.stringify({
+      email: normalizedEmail,
+      ...(normalizedDisplayName ? { displayName: normalizedDisplayName } : {}),
+    }),
+  });
+  if (!result.ok) {
+    throw new Error(formatSetupApiError(result, 'Failed to start Claworld email verification'));
+  }
+  return ensureObject(result.body);
+}
+
+async function completeSetupEmailVerification({
+  runtimeConfig,
+  email,
+  code,
+  fetchImpl,
+} = {}) {
+  const baseUrl = normalizeRelayHttpBaseUrl(runtimeConfig.serverUrl);
+  const result = await fetchJson(fetchImpl, `${baseUrl}/v1/identity/email/verify`, {
+    method: 'POST',
+    headers: {
+      'content-type': 'application/json',
+      ...(runtimeConfig.apiKey ? { 'x-api-key': runtimeConfig.apiKey } : {}),
+    },
+    body: JSON.stringify({
+      email: normalizeText(email, null),
+      code: normalizeText(code, null),
+    }),
+  });
+  if (!result.ok) {
+    throw new Error(formatSetupApiError(result, 'Failed to complete Claworld email verification'));
+  }
+  return ensureObject(result.body);
+}
+
+async function resolveSetupCredential({
+  managedOptions,
+  prompter,
+  runtime = {},
+  input = {},
+} = {}) {
+  if (managedOptions.appToken) return null;
+
+  const fetchImpl = resolveSetupFetchImpl(runtime);
+  const email = normalizeText(await prompter.text({
+    message: 'Claworld account email',
+    placeholder: 'you@example.com',
+    validate: validateSetupEmail,
+  }), null);
+
+  await startSetupEmailVerification({
+    runtimeConfig: managedOptions,
+    email,
+    displayName: normalizeText(input?.name, null),
+    fetchImpl,
+  });
+
+  const code = normalizeText(await prompter.text({
+    message: `Verification code sent to ${email}`,
+    placeholder: '123456',
+    validate: validateSetupVerificationCode,
+  }), null);
+
+  const verification = await completeSetupEmailVerification({
+    runtimeConfig: managedOptions,
+    email,
+    code,
+    fetchImpl,
+  });
+  const appToken = normalizeText(verification.appToken, null);
+  const relayAgentId = normalizeText(verification.agentId, null);
+  if (!appToken || !relayAgentId) {
+    throw new Error('Claworld email verification did not return appToken and agentId.');
+  }
+  return {
+    email,
+    appToken,
+    relayAgentId,
+    created: verification.created === true,
+    recovered: verification.recovered === true,
+  };
+}
+
 async function applyManagedOnboardingConfig({
   cfg = {},
+  runtime = {},
   prompter,
   accountId = null,
   phase = 'setup',
   input = {},
 } = {}) {
-  const managedOptions = resolveManagedOptionsFromContext({ cfg, accountId, input });
+  const initialManagedOptions = resolveManagedOptionsFromContext({ cfg, accountId, input });
+  const setupCredential = await resolveSetupCredential({
+    managedOptions: initialManagedOptions,
+    prompter,
+    runtime,
+    input,
+  });
+  const managedOptions = setupCredential
+    ? {
+        ...initialManagedOptions,
+        appToken: setupCredential.appToken,
+        relayAgentId: setupCredential.relayAgentId,
+      }
+    : initialManagedOptions;
   const next = applyClaworldManagedRuntimeConfig(cfg, managedOptions);
 
   const noteLines = [
     `Bound local agent/account: ${managedOptions.agentId}`,
     `Remote backend: ${managedOptions.serverUrl}`,
-    managedOptions.appToken
-      ? 'Activation state: ready via configured appToken'
-      : 'Activation state: pending until claworld_manage_account(action=activate_account) runs',
+    setupCredential
+      ? `Email verification: completed for ${setupCredential.email}; runtime credential saved to OpenClaw config`
+      : managedOptions.appToken
+      ? 'Runtime credential: configured appToken is present'
+      : 'Email verification: pending until claworld_manage_account(action=start_email_verification|complete_email_verification) runs',
+    managedOptions.relayAgentId
+      ? `Remote agent identity: ${managedOptions.relayAgentId}`
+      : 'Remote agent identity: pending',
     'Workspace memory: runtime prompt bootstrap maintains .claworld/ in the active host workspace',
     'This flow refreshes plugin-side config and binds claworld onto the selected local agent.',
-    'Setup lifecycle: OpenClaw host-native setup.',
+    'Setup lifecycle: OpenClaw host-native setup; channel reload is handled by config reload.',
   ];
   await prompter.note(
     noteLines.join('\n'),
@@ -294,17 +445,19 @@ export const claworldOnboardingAdapter = {
       }),
     };
   },
-  configure: async ({ cfg, prompter, accountOverrides }) =>
+  configure: async ({ cfg, runtime, prompter, accountOverrides }) =>
     applyManagedOnboardingConfig({
       cfg,
+      runtime,
       prompter,
       accountId: accountOverrides?.claworld,
       phase: 'setup',
       input: {},
     }),
-  configureWhenConfigured: async ({ cfg, prompter, accountOverrides }) =>
+  configureWhenConfigured: async ({ cfg, runtime, prompter, accountOverrides }) =>
     applyManagedOnboardingConfig({
       cfg,
+      runtime,
       prompter,
       accountId: accountOverrides?.claworld,
       phase: 'refresh',

package/src/openclaw/plugin/register-tooling.js

@@ -548,11 +548,12 @@ function projectToolShareCard(payload = null) {
   const imageUrl = normalizeText(payload?.imageUrl, null);
   const downloadUrl = normalizeText(payload?.downloadUrl, imageUrl);
   const templateId = normalizeText(payload?.templateId, null);
+  const variant = normalizeText(payload?.variant, null);
   const imageFormat = normalizeText(payload?.imageFormat, null);
   const mimeType = normalizeText(payload?.mimeType, null);
   const expiresAt = normalizeText(payload?.expiresAt, null);
   const description = normalizeText(payload?.description, null);
-  if (!imageUrl && !downloadUrl && !templateId && !imageFormat && !mimeType && !expiresAt && !description) {
+  if (!imageUrl && !downloadUrl && !templateId && !variant && !imageFormat && !mimeType && !expiresAt && !description) {
     return {
       status: normalizeText(payload?.status, 'unavailable'),
       reason: normalizeText(payload?.reason, null),
@@ -564,6 +565,7 @@ function projectToolShareCard(payload = null) {
     imageUrl,
     downloadUrl,
     templateId,
+    variant,
     imageFormat,
     mimeType,
     expiresAt,
@@ -686,20 +688,29 @@ export function projectToolAccountViewResponse({
 } = {}) {
   const publicIdentityState = projectToolAccountIdentityFields(identityPayload);
   const accountProfile = projectToolAccountProfileState(identityPayload);
-  const identityReady = identityPayload?.ready === true;
+  const publicIdentityReady = identityPayload?.ready === true;
   const accountProfileReady = accountProfile.ready === true;
-  const activationReady = pairingPayload?.status === 'paired';
+  const emailVerified = pairingPayload?.emailVerified === true;
+  const runtimePaired = pairingPayload?.status === 'paired';
   const bindingReady = typeof pairingPayload?.bindingReady === 'boolean'
     ? pairingPayload.bindingReady
-    : activationReady;
+    : runtimePaired;
   const bindingStatus = normalizeText(
     pairingPayload?.bindingStatus,
-    activationReady
+    runtimePaired
       ? (bindingReady ? 'bound' : 'identity_unresolved')
-      : 'unactivated',
+      : 'unbound',
   );
-  const ready = activationReady && identityReady && accountProfileReady;
-  const blockedAction = !identityReady
+  const ready = emailVerified && publicIdentityReady && accountProfileReady;
+  const blockedAction = !emailVerified
+    ? {
+        requiredAction: 'start_email_verification',
+        nextAction: 'start_email_verification',
+        nextTool: 'claworld_manage_account',
+        missingFields: [{ fieldId: 'email', label: 'Identity Email', description: 'Email-based identity verification is required before using other account features.' }],
+        reason: 'email_verification_required',
+      }
+    : !publicIdentityReady
     ? {
         requiredAction: publicIdentityState.requiredAction,
         nextAction: publicIdentityState.nextAction,
@@ -731,22 +742,28 @@ export function projectToolAccountViewResponse({
     action: 'view',
     status: ready ? 'ready' : 'pending',
     ready,
-    readiness: pairingPayload?.status === 'paired'
-      ? (identityReady
-          ? (accountProfileReady ? 'paired_and_ready' : 'paired_but_account_profile_incomplete')
-          : 'paired_but_identity_pending')
-      : 'installed_unactivated',
+    readiness: !emailVerified
+      ? 'email_verification_required'
+      : !publicIdentityReady
+        ? 'public_identity_incomplete'
+        : accountProfileReady
+          ? 'ready'
+          : 'account_profile_incomplete',
     accountId: normalizeText(pairingPayload?.runtimeConfig?.accountId, normalizeText(accountId, null)),
-    reason: normalizeText(pairingPayload?.reason, blockedAction.reason),
+    reason: blockedAction.reason,
+    bindingReason: normalizeText(pairingPayload?.reason, null),
     bindingSource: normalizeText(pairingPayload?.bindingSource, null),
-    activation: {
-      status: activationReady ? 'ready' : 'pending',
+    emailVerification: {
+      status: emailVerified ? 'verified' : 'pending',
+      email: normalizeText(pairingPayload?.email, null),
+      verifiedAt: normalizeText(pairingPayload?.verifiedAt, null),
     },
     diagnostics: {
       toolReachable: true,
+      emailVerified,
       bindingReady,
       bindingStatus,
-      publicIdentityReady: identityReady,
+      publicIdentityReady,
       accountProfileReady,
       relayPresenceResolved: relayResolved,
       relayOnline,
@@ -781,7 +798,7 @@ export function projectToolAccountMutationResponse({
   accountId = null,
   identityPayload = null,
   shareCard = undefined,
-  runtimeActivation = null,
+  runtimeIdentity = null,
 } = {}) {
   const publicIdentityState = projectToolAccountIdentityFields(identityPayload);
   const accountProfile = projectToolAccountProfileState(identityPayload);
@@ -790,10 +807,21 @@ export function projectToolAccountMutationResponse({
     : (identityPayload && Object.prototype.hasOwnProperty.call(identityPayload, 'shareCard')
         ? projectToolShareCard(identityPayload.shareCard)
         : undefined);
-  const identityReady = identityPayload?.ready === true;
+  const publicIdentityReady = identityPayload?.ready === true;
   const accountProfileReady = accountProfile.ready === true;
-  const ready = identityReady && accountProfileReady;
-  const blockedAction = !identityReady
+  const emailVerificationPayload = normalizeObject(identityPayload?.emailVerification, null);
+  const emailVerified = identityPayload?.emailVerified === true
+    || normalizeText(emailVerificationPayload?.status, null) === 'verified';
+  const ready = emailVerified && publicIdentityReady && accountProfileReady;
+  const blockedAction = !emailVerified
+    ? {
+        requiredAction: 'start_email_verification',
+        nextAction: 'start_email_verification',
+        nextTool: 'claworld_manage_account',
+        missingFields: [{ fieldId: 'email', label: 'Identity Email', description: 'Email-based identity verification is required before using other account features.' }],
+        reason: 'email_verification_required',
+      }
+    : !publicIdentityReady
     ? {
         requiredAction: publicIdentityState.requiredAction,
         nextAction: publicIdentityState.nextAction,
@@ -820,10 +848,24 @@ export function projectToolAccountMutationResponse({
     action,
     status: ready ? 'ready' : 'pending',
     ready,
-    readiness: identityReady
-      ? (accountProfileReady ? 'ready' : 'account_profile_incomplete')
-      : 'public_identity_incomplete',
+    readiness: !emailVerified
+      ? 'email_verification_required'
+      : !publicIdentityReady
+        ? 'public_identity_incomplete'
+        : accountProfileReady
+          ? 'ready'
+          : 'account_profile_incomplete',
     accountId: normalizeText(accountId, null),
+    emailVerification: {
+      status: emailVerified ? 'verified' : 'pending',
+      email: normalizeText(emailVerificationPayload?.email, null),
+      verifiedAt: normalizeText(emailVerificationPayload?.verifiedAt, null),
+    },
+    diagnostics: {
+      emailVerified,
+      publicIdentityReady,
+      accountProfileReady,
+    },
     profile: accountProfile.profile,
     ...publicIdentityState,
     accountProfile,
@@ -835,7 +877,7 @@ export function projectToolAccountMutationResponse({
     pluginVersionStatus: projectToolPluginVersionStatus(identityPayload?.pluginVersionStatus),
     chatRequestApprovalPolicy: projectToolChatRequestApprovalPolicy(identityPayload?.chatRequestApprovalPolicy),
     ...(resolvedShareCard !== undefined ? { shareCard: resolvedShareCard } : {}),
-    ...(runtimeActivation ? { runtimeActivation } : {}),
+    ...(runtimeIdentity ? { runtimeIdentity } : {}),
     ...(action === 'update_identity'
       ? {
           updated: resolvedShareCard && resolvedShareCard.status === 'ready'

package/src/openclaw/plugin/register.js

@@ -181,7 +181,6 @@ const TERMINAL_CONVERSATION_ACTIONS = PUBLIC_TOOL_ACTION_CATALOG.claworld_manage
 
 const ACCOUNT_IMPLEMENTATION_ACTIONS = Object.freeze({
   view_account: 'view',
-  activate_account: 'update_identity',
 });
 
 const WORLD_IMPLEMENTATION_ACTIONS = Object.freeze({
@@ -429,6 +428,11 @@ function createTerminalToolAdapters(api, plugin, internalTools) {
     minLength: 1,
     examples: ['claworld'],
   });
+  const shareCardVariantProperty = stringParam({
+    description: 'Optional share-card version. Choose from the user\'s usual communication language or sharing context: zh for Chinese, en for languages outside Chinese.',
+    enumValues: ['en', 'zh'],
+    examples: ['en', 'zh'],
+  });
   const worldIdProperty = stringParam({
     description: 'Canonical world id.',
     minLength: 1,
@@ -444,12 +448,13 @@ function createTerminalToolAdapters(api, plugin, internalTools) {
     {
       name: accountTool,
       label: 'Claworld Manage Account',
-      description: 'Terminal account surface for readiness, public identity, global profile, share-card generation, and account-level chat policy.',
+      description: 'Terminal account surface for readiness, public identity, global profile, share-card generation, account-level chat policy, and email-based identity verification.',
       metadata: buildToolMetadata({
         category: 'account',
         usageNotes: [
-          'Use this owner-facing account surface for activation, profile, policy, and subscription decisions.',
+          'Use this human-facing account surface for identity verification, profile, policy, and subscription decisions.',
           'Use action=view_account for readiness; update_display_name, update_agent_profile, or set_chat_policy for common account mutations.',
+          'Use start_email_verification with email + optional displayName to start email-based identity verification, then complete_email_verification with email + code to finish.',
           'Use subscribe_person or unsubscribe_person when a search/profile result exposes a person subscription target.',
         ],
       }),
@@ -461,10 +466,10 @@ function createTerminalToolAdapters(api, plugin, internalTools) {
           action: stringParam({
             description: 'Account action.',
             enumValues: TERMINAL_ACCOUNT_ACTIONS,
-            examples: ['view_account', 'update_display_name', 'set_chat_policy'],
+            examples: ['view_account', 'start_email_verification', 'update_display_name', 'set_chat_policy'],
           }),
           displayName: stringParam({
-            description: 'Public-facing display name for activate_account or update_display_name.',
+            description: 'Public-facing display name for update_display_name or start_email_verification.',
             minLength: 1,
             examples: ['Moza', '小发发'],
           }),
@@ -473,7 +478,7 @@ function createTerminalToolAdapters(api, plugin, internalTools) {
             examples: ['喜欢慢节奏介绍，也愿意先让 agent 做初步认识。🙂'],
           }),
           humanProfile: stringParam({
-            description: 'Owner-facing human profile text for update_human_profile.',
+            description: 'Human-facing profile text for update_human_profile.',
             examples: ['周末在上海，喜欢网球和安静咖啡馆。'],
           }),
           agentProfile: stringParam({
@@ -507,11 +512,22 @@ function createTerminalToolAdapters(api, plugin, internalTools) {
           generateShareCard: booleanParam({
             description: 'When true, include a temporary public identity card when supported.',
           }),
+          shareCardVariant: shareCardVariantProperty,
           expiresInSeconds: integerParam({
             description: 'Optional temporary share-card TTL in seconds.',
             minimum: 1,
             examples: [7200],
           }),
+          email: stringParam({
+            description: 'Email address for start_email_verification or complete_email_verification.',
+            minLength: 1,
+            examples: ['agent@example.com'],
+          }),
+          code: stringParam({
+            description: 'Verification code from email for complete_email_verification.',
+            minLength: 1,
+            examples: ['123456'],
+          }),
         },
       }),
       async execute(toolCallId, params = {}) {
@@ -542,6 +558,34 @@ function createTerminalToolAdapters(api, plugin, internalTools) {
           return buildTerminalActionResult({ tool: accountTool, action, payload });
         }
 
+        if (action === 'start_email_verification') {
+          const email = normalizeText(params.email, null);
+          if (!email) requireManageWorldField('email', 'email is required for action=start_email_verification');
+          const context = await resolveToolContext(api, plugin, params, { bindRuntime: false });
+          const payload = await plugin.runtime.productShell.identity.startEmailVerification({
+            ...context,
+            runtime: api?.runtime || null,
+            email,
+            displayName: params.displayName || null,
+          });
+          return buildTerminalActionResult({ tool: accountTool, action, payload });
+        }
+
+        if (action === 'complete_email_verification') {
+          const email = normalizeText(params.email, null);
+          const code = normalizeText(params.code, null);
+          if (!email) requireManageWorldField('email', 'email is required for action=complete_email_verification');
+          if (!code) requireManageWorldField('code', 'code is required for action=complete_email_verification');
+          const context = await resolveToolContext(api, plugin, params, { bindRuntime: false });
+          const payload = await plugin.runtime.productShell.identity.completeEmailVerification({
+            ...context,
+            runtime: api?.runtime || null,
+            email,
+            code,
+          });
+          return buildTerminalActionResult({ tool: accountTool, action, payload });
+        }
+
         const implementationAction = ACCOUNT_IMPLEMENTATION_ACTIONS[action] || null;
         if (implementationAction) {
           const implementationParams = {
@@ -563,7 +607,7 @@ function createTerminalToolAdapters(api, plugin, internalTools) {
           requireManageWorldField('action', `action=${action} requires the account management runtime adapter`);
         }
         const context = await resolveToolContext(api, plugin, params, {
-          requiredPublicIdentityCapability: action === 'activate_account' ? null : 'manage account',
+          requiredPublicIdentityCapability: action === 'view_account' ? null : 'manage account',
         });
         const generateShareCard = typeof params.generateShareCard === 'boolean'
           ? params.generateShareCard
@@ -580,6 +624,7 @@ function createTerminalToolAdapters(api, plugin, internalTools) {
           chatRequestApprovalPolicy: params.chatRequestApprovalPolicy || null,
           proactivitySettings: params.proactivitySettings,
           generateShareCard,
+          shareCardVariant: params.shareCardVariant ?? null,
           expiresInSeconds: params.expiresInSeconds ?? null,
         });
         return buildTerminalActionResult({ tool: accountTool, action, payload });
@@ -740,14 +785,6 @@ function createTerminalToolAdapters(api, plugin, internalTools) {
             minLength: 1,
             examples: ['Runtime Peer'],
           }),
-          generateShareCard: booleanParam({
-            description: 'When true, include the current account share-card when available.',
-          }),
-          expiresInSeconds: integerParam({
-            description: 'Optional temporary share-card TTL in seconds.',
-            minimum: 1,
-            examples: [7200],
-          }),
         },
       }),
       async execute(toolCallId, params = {}) {
@@ -1112,6 +1149,11 @@ function buildRegisteredTools(api, plugin) {
     minLength: 1,
     examples: ['claworld'],
   });
+  const shareCardVariantProperty = stringParam({
+    description: 'Optional share-card version. Choose from the user\'s usual communication language or sharing context: zh for Chinese, en for languages outside Chinese.',
+    enumValues: ['en', 'zh'],
+    examples: ['en', 'zh'],
+  });
   const chatRequestApprovalPolicyProperty = objectParam({
     description: 'Backend-managed inbound chat-request policy for this account.',
     required: ['mode'],
@@ -1963,6 +2005,7 @@ function buildRegisteredTools(api, plugin) {
           generateShareCard: booleanParam({
             description: 'When true, return a temporary public identity card URL. Defaults to false for view and true for update_identity.',
           }),
+          shareCardVariant: shareCardVariantProperty,
           expiresInSeconds: integerParam({
             description: 'Optional temporary share-card TTL in seconds.',
             minimum: 1,
@@ -1979,6 +2022,7 @@ function buildRegisteredTools(api, plugin) {
             action: 'update_identity',
             displayName: '小发发',
             generateShareCard: true,
+            shareCardVariant: 'zh',
           },
           {
             accountId: 'claworld',
@@ -2010,13 +2054,14 @@ function buildRegisteredTools(api, plugin) {
             ...context,
             displayName,
             generateShareCard,
+            shareCardVariant: params.shareCardVariant ?? null,
             expiresInSeconds: params.expiresInSeconds ?? null,
           });
           return buildToolResult(projectToolAccountMutationResponse({
             action,
             accountId: context.accountId,
             identityPayload: payload,
-            runtimeActivation: payload?.runtimeActivation || null,
+            runtimeIdentity: payload?.runtimeIdentity || null,
           }));
         }
 
@@ -2067,6 +2112,7 @@ function buildRegisteredTools(api, plugin) {
           runtimeConfig,
           agentId: context.agentId || runtimeConfig.relay?.agentId || null,
           generateShareCard,
+          shareCardVariant: params.shareCardVariant ?? null,
           expiresInSeconds: params.expiresInSeconds ?? null,
         });
         const pairedAgentId = identityPayload?.agentId || runtimeConfig.relay?.agentId || null;
@@ -2100,11 +2146,19 @@ function buildRegisteredTools(api, plugin) {
           || runtimeConfig.relay?.appToken
           || runtimeConfig.relay?.credentialToken,
         );
-        const activationReady = hasConfiguredAppToken;
-        const bindingReady = activationReady && Boolean(pairedAgentId);
-        const bindingStatus = activationReady
+        const identityStatus = pairedAgentId && typeof plugin.runtime?.productShell?.identity?.getIdentityStatus === 'function'
+          ? await plugin.runtime.productShell.identity.getIdentityStatus({
+            cfg,
+            accountId,
+            runtimeConfig: pairedRuntimeConfig,
+            agentId: pairedAgentId,
+          })
+          : null;
+        const emailVerified = identityStatus?.emailVerified === true;
+        const bindingReady = hasConfiguredAppToken && Boolean(pairedAgentId);
+        const bindingStatus = hasConfiguredAppToken
           ? (bindingReady ? 'bound' : 'identity_unresolved')
-          : 'unactivated';
+          : 'unbound';
         let relayAgent = relayAgentFallback;
         if (hasConfiguredAppToken && pairedAgentId && typeof plugin.helpers?.pairing?.resolveAgentIdentity === 'function') {
           const resolvedRelayAgent = await plugin.helpers.pairing.resolveAgentIdentity({
@@ -2123,13 +2177,16 @@ function buildRegisteredTools(api, plugin) {
           }
         }
         const pairingPayload = {
-          status: activationReady ? 'paired' : 'unpaired',
+          status: hasConfiguredAppToken ? 'paired' : 'unpaired',
           bindingReady,
           bindingStatus,
-          reason: activationReady
+          emailVerified,
+          email: identityStatus?.email || null,
+          verifiedAt: identityStatus?.verifiedAt || null,
+          reason: hasConfiguredAppToken
             ? (pairedAgentId ? null : 'missing_agent_id')
             : 'missing_app_token',
-          bindingSource: activationReady
+          bindingSource: hasConfiguredAppToken
             ? 'configured_app_token'
             : (runtimeConfig.registration?.enabled === true ? 'registration_pending' : 'unbound'),
           runtimeConfig: pairedRuntimeConfig,

package/src/product-shell/contracts/search-item.js

@@ -32,7 +32,8 @@ export const PUBLIC_TOOL_ACTION_CATALOG = Object.freeze({
   ]),
   claworld_manage_account: Object.freeze([
     'view_account',
-    'activate_account',
+    'start_email_verification',
+    'complete_email_verification',
     'update_display_name',
     'update_human_profile',
     'update_agent_profile',