feat: add standalone login renewal

test/distribution.test.ts

@@ -15,6 +15,7 @@ test("customer distribution is a generic single-login gateway bridge", () => {
   assert.doesNotMatch(installer, /--host|WorkBuddy|Codex|Claude/);
   assert.match(installer, /不会通过其他消息通道自动推送链接.*完整登录 URL.*当前回复/s);
   assert.match(installer, /读取返回的 `postInstall`.*不得等到用户第一次查询审批/s);
+  assert.match(installer, /登录链接过期.*绝不能重新安装.*approval_login.*loginCommand/s);
   assert.match(installer, /onboarding\.firstRun=true.*简短示例.*不要自动执行/s);
   assert.doesNotMatch(installer, /通过当前 Messenger/);
   assert.doesNotMatch(installer, /DWS_CLI_PATH|dingtalk-workspace-cli|APP_MODE=local/);
@@ -27,6 +28,7 @@ test("customer distribution is a generic single-login gateway bridge", () => {
   assert.match(skill, /does not send or push.*current user-facing reply/s);
   assert.match(skill, /handle the installer's `postInstall` result immediately.*waiting for the user's first approval request/s);
   assert.match(skill, /onboarding\.firstRun=true.*Do not execute an example automatically/s);
+  assert.match(skill, /expired login link.*approval_login.*never reinstall/s);
 
   const builder = readFileSync("scripts/build-release.mjs", "utf8");
   assert.match(builder, /schemaVersion: 3,\s+version,/s);