@clawos-dev/clawd 0.2.455 → 0.2.457

package/dist/app-builder-plugin/mcp-server.cjs

@@ -22062,6 +22062,28 @@ var ChannelDeleteResultSchema = external_exports.object({
 
 // ../protocol/src/topic.ts
 var nonBlank2 = external_exports.string().trim().min(1);
+var TOPIC_DECISION_TYPES = ["master-confirmed", "owner-needed"];
+var TOPIC_DECISION_STATUSES = ["open", "resolved"];
+var TOPIC_DECISION_TYPE_MASTER_CONFIRMED = TOPIC_DECISION_TYPES[0];
+var TOPIC_DECISION_TYPE_OWNER_NEEDED = TOPIC_DECISION_TYPES[1];
+var TOPIC_DECISION_STATUS_OPEN = TOPIC_DECISION_STATUSES[0];
+var TOPIC_DECISION_STATUS_RESOLVED = TOPIC_DECISION_STATUSES[1];
+var TopicDecisionTypeSchema = external_exports.enum(TOPIC_DECISION_TYPES);
+var TopicDecisionStatusSchema = external_exports.enum(TOPIC_DECISION_STATUSES);
+var TopicDecisionSchema = external_exports.object({
+  type: TopicDecisionTypeSchema,
+  status: TopicDecisionStatusSchema,
+  question: nonBlank2,
+  recommendation: nonBlank2
+}).superRefine((decision, ctx) => {
+  if (decision.type === TOPIC_DECISION_TYPE_MASTER_CONFIRMED && decision.status !== TOPIC_DECISION_STATUS_RESOLVED) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["status"],
+      message: "master-confirmed decisions must be resolved"
+    });
+  }
+});
 var TOPIC_STATES = ["planning", "running", "done"];
 var TopicStateSchema = external_exports.enum(TOPIC_STATES);
 var TopicActivityEntrySchema = external_exports.object({
@@ -22071,7 +22093,12 @@ var TopicActivityEntrySchema = external_exports.object({
   target: external_exports.string().optional(),
   reason: external_exports.string().min(1),
   /** 该动作确认的产出物（watcher 返回的 artifacts）；影响面视图的唯一数据源 */
-  artifacts: external_exports.array(nonBlank2).optional()
+  artifacts: external_exports.array(nonBlank2).optional(),
+  /**
+   * Optional decision projection; legacy activity entries omit this field. `open` means the
+   * owner still needs to answer; `resolved` records the conclusion without deleting the question.
+   */
+  decision: TopicDecisionSchema.optional()
 });
 var TopicLineMetaSchema = external_exports.object({
   rejectCount: external_exports.number().int().min(0),
@@ -22178,7 +22205,8 @@ var TopicAppendArgsSchema = external_exports.object({
   target: nonBlank2.optional(),
   reason: nonBlank2,
   /** 该动作确认的产出物；影响面视图只吃这个字段 */
-  artifacts: external_exports.array(nonBlank2).optional()
+  artifacts: external_exports.array(nonBlank2).optional(),
+  decision: TopicActivityEntrySchema.shape.decision
 });
 var TopicRejectArgsSchema = external_exports.object({
   topicId: external_exports.string().min(1),
@@ -23932,7 +23960,7 @@ var METHOD_DOCS = {
     args: TopicSetPlanArgsSchema
   },
   "topic:append": {
-    summary: '\u5F80\u8BDD\u9898\u6D41\u6C34\u8FFD\u52A0\u4E00\u6761\uFF1Breason \u5FC5\u586B\uFF08\u8001\u677F\u4E8B\u540E\u770B\u7684\u662F"\u51ED\u4EC0\u4E48\u8FD9\u4E48\u5224\u65AD"\uFF09',
+    summary: "\u5F80\u8BDD\u9898\u6D41\u6C34\u8FFD\u52A0\u4E00\u6761\uFF1Breason \u5FC5\u586B\u3002Master \u505A\u4EE3\u8001\u677F\u786E\u8BA4\u6216\u5347\u7EA7\u8001\u677F\u51B3\u7B56\u65F6\uFF0C\u5FC5\u987B\u9644 decision\uFF08type/status/question/recommendation\uFF09",
     args: TopicAppendArgsSchema
   },
   "topic:reject": {

package/dist/cli.cjs

@@ -6876,13 +6876,35 @@ var init_channel = __esm({
 });
 
 // ../protocol/src/topic.ts
-var nonBlank2, TOPIC_STATES, TopicStateSchema, TopicActivityEntrySchema, TopicLineMetaSchema, TopicSchema, TopicLineViewSchema, TopicListArgsSchema, TopicGetArgsSchema, TopicCreateArgsSchema, TopicSetPlanArgsSchema, TopicAppendArgsSchema, TopicRejectArgsSchema, TopicAcceptArgsSchema, TopicCloseArgsSchema, TopicRenameArgsSchema, TopicDeleteArgsSchema, TopicListItemSchema, TopicListResultSchema, TopicGetResultSchema, TopicCreateResultSchema, TopicRejectResultSchema, TopicAcceptResultSchema, TopicResultSchema, TopicDeleteResultSchema;
+var nonBlank2, TOPIC_DECISION_TYPES, TOPIC_DECISION_STATUSES, TOPIC_DECISION_TYPE_MASTER_CONFIRMED, TOPIC_DECISION_TYPE_OWNER_NEEDED, TOPIC_DECISION_STATUS_OPEN, TOPIC_DECISION_STATUS_RESOLVED, TopicDecisionTypeSchema, TopicDecisionStatusSchema, TopicDecisionSchema, TOPIC_STATES, TopicStateSchema, TopicActivityEntrySchema, TopicLineMetaSchema, TopicSchema, TopicLineViewSchema, TopicListArgsSchema, TopicGetArgsSchema, TopicCreateArgsSchema, TopicSetPlanArgsSchema, TopicAppendArgsSchema, TopicRejectArgsSchema, TopicAcceptArgsSchema, TopicCloseArgsSchema, TopicRenameArgsSchema, TopicDeleteArgsSchema, TopicListItemSchema, TopicListResultSchema, TopicGetResultSchema, TopicCreateResultSchema, TopicRejectResultSchema, TopicAcceptResultSchema, TopicResultSchema, TopicDeleteResultSchema;
 var init_topic = __esm({
   "../protocol/src/topic.ts"() {
     "use strict";
     init_zod();
     init_dispatch();
     nonBlank2 = external_exports.string().trim().min(1);
+    TOPIC_DECISION_TYPES = ["master-confirmed", "owner-needed"];
+    TOPIC_DECISION_STATUSES = ["open", "resolved"];
+    TOPIC_DECISION_TYPE_MASTER_CONFIRMED = TOPIC_DECISION_TYPES[0];
+    TOPIC_DECISION_TYPE_OWNER_NEEDED = TOPIC_DECISION_TYPES[1];
+    TOPIC_DECISION_STATUS_OPEN = TOPIC_DECISION_STATUSES[0];
+    TOPIC_DECISION_STATUS_RESOLVED = TOPIC_DECISION_STATUSES[1];
+    TopicDecisionTypeSchema = external_exports.enum(TOPIC_DECISION_TYPES);
+    TopicDecisionStatusSchema = external_exports.enum(TOPIC_DECISION_STATUSES);
+    TopicDecisionSchema = external_exports.object({
+      type: TopicDecisionTypeSchema,
+      status: TopicDecisionStatusSchema,
+      question: nonBlank2,
+      recommendation: nonBlank2
+    }).superRefine((decision, ctx) => {
+      if (decision.type === TOPIC_DECISION_TYPE_MASTER_CONFIRMED && decision.status !== TOPIC_DECISION_STATUS_RESOLVED) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: ["status"],
+          message: "master-confirmed decisions must be resolved"
+        });
+      }
+    });
     TOPIC_STATES = ["planning", "running", "done"];
     TopicStateSchema = external_exports.enum(TOPIC_STATES);
     TopicActivityEntrySchema = external_exports.object({
@@ -6892,7 +6914,12 @@ var init_topic = __esm({
       target: external_exports.string().optional(),
       reason: external_exports.string().min(1),
       /** 该动作确认的产出物（watcher 返回的 artifacts）；影响面视图的唯一数据源 */
-      artifacts: external_exports.array(nonBlank2).optional()
+      artifacts: external_exports.array(nonBlank2).optional(),
+      /**
+       * Optional decision projection; legacy activity entries omit this field. `open` means the
+       * owner still needs to answer; `resolved` records the conclusion without deleting the question.
+       */
+      decision: TopicDecisionSchema.optional()
     });
     TopicLineMetaSchema = external_exports.object({
       rejectCount: external_exports.number().int().min(0),
@@ -6999,7 +7026,8 @@ var init_topic = __esm({
       target: nonBlank2.optional(),
       reason: nonBlank2,
       /** 该动作确认的产出物；影响面视图只吃这个字段 */
-      artifacts: external_exports.array(nonBlank2).optional()
+      artifacts: external_exports.array(nonBlank2).optional(),
+      decision: TopicActivityEntrySchema.shape.decision
     });
     TopicRejectArgsSchema = external_exports.object({
       topicId: external_exports.string().min(1),
@@ -8881,7 +8909,7 @@ var init_methods = __esm({
         args: TopicSetPlanArgsSchema
       },
       "topic:append": {
-        summary: '\u5F80\u8BDD\u9898\u6D41\u6C34\u8FFD\u52A0\u4E00\u6761\uFF1Breason \u5FC5\u586B\uFF08\u8001\u677F\u4E8B\u540E\u770B\u7684\u662F"\u51ED\u4EC0\u4E48\u8FD9\u4E48\u5224\u65AD"\uFF09',
+        summary: "\u5F80\u8BDD\u9898\u6D41\u6C34\u8FFD\u52A0\u4E00\u6761\uFF1Breason \u5FC5\u586B\u3002Master \u505A\u4EE3\u8001\u677F\u786E\u8BA4\u6216\u5347\u7EA7\u8001\u677F\u51B3\u7B56\u65F6\uFF0C\u5FC5\u987B\u9644 decision\uFF08type/status/question/recommendation\uFF09",
         args: TopicAppendArgsSchema
       },
       "topic:reject": {
@@ -63880,7 +63908,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.455".length > 0 ? "0.2.455" : "dev";
+var version = "0.2.457".length > 0 ? "0.2.457" : "dev";
 
 // src/cli-probe/probe.ts
 var fs70 = __toESM(require("fs"), 1);
@@ -65632,7 +65660,8 @@ function buildTopicHandlers(deps) {
         action: args.action,
         ...args.target ? { target: args.target } : {},
         reason: args.reason,
-        ...args.artifacts ? { artifacts: args.artifacts } : {}
+        ...args.artifacts ? { artifacts: args.artifacts } : {},
+        ...args.decision ? { decision: args.decision } : {}
       });
       announceChanged(topic);
       return { response: { ok: true } };

package/dist/deploy-kit/scripts/ensure-credentials.sh

@@ -19,17 +19,27 @@
 S_ACCESS_ALIAS=clawd-fc
 
 # 分层加载阿里云 AK 进 env：shared demo（OTA 每次启动覆盖）→ 本机 .local override（永不被覆盖）。
+#
+# 两种来源，**文件优先、env 兜底**：
+#   - 本机：`$KIT_DIR/.secrets/aliyun.env`（+ 可选 .local），OTA 刷新；
+#   - 云上容器：没有 `.secrets/`（`cloud-host/provision/build-image.mjs` 刻意把它剔出镜像层
+#     ——镜像要分发，凭据进层就洗不掉了），AK 由 gateway 经 **MCP server 的 per-server env**
+#     交到调用本脚本的那个进程里（M1b Step 9）。这条分支不落盘是有意的：写成文件的话
+#     agent 一个 `cat` 就看见了，而 env 只有这个子进程有。
 ensure_aliyun_env() {
   local kit="${KIT_DIR:?ensure_aliyun_env 需要调用方先设 KIT_DIR}"
-  [ -f "$kit/.secrets/aliyun.env" ] || {
-    echo "❌ 缺 $kit/.secrets/aliyun.env（clawd ship 的共享 demo 凭证，OTA 自动刷新）。参考 .secrets/aliyun.env.example 填写。" >&2
+  if [ -f "$kit/.secrets/aliyun.env" ]; then
+    set -a; . "$kit/.secrets/aliyun.env"; set +a
+    # aliyun.env.local: 本机个人 override（永远不被 OTA 覆盖，见 refreshDeployKit）。有就后 source 覆盖 env。
+    # 写成 if 而不是 `[ -f ] && { }`：后者在函数末尾会把「文件不存在」变成函数返回 1，调用方 set -e 直接中止。
+    if [ -f "$kit/.secrets/aliyun.env.local" ]; then
+      set -a; . "$kit/.secrets/aliyun.env.local"; set +a
+    fi
+  elif [ -n "${ALIBABA_CLOUD_ACCESS_KEY_ID:-}" ] && [ -n "${ALIBABA_CLOUD_ACCESS_KEY_SECRET:-}" ]; then
+    : # 云上：值已经在本进程 env 里，不落文件
+  else
+    echo "❌ 缺 $kit/.secrets/aliyun.env（clawd ship 的共享 demo 凭证，OTA 自动刷新），env 里也没有 ALIBABA_CLOUD_ACCESS_KEY_ID/_SECRET。参考 .secrets/aliyun.env.example 填写。" >&2
     return 1
-  }
-  set -a; . "$kit/.secrets/aliyun.env"; set +a
-  # aliyun.env.local: 本机个人 override（永远不被 OTA 覆盖，见 refreshDeployKit）。有就后 source 覆盖 env。
-  # 写成 if 而不是 `[ -f ] && { }`：后者在函数末尾会把「文件不存在」变成函数返回 1，调用方 set -e 直接中止。
-  if [ -f "$kit/.secrets/aliyun.env.local" ]; then
-    set -a; . "$kit/.secrets/aliyun.env.local"; set +a
   fi
   export ALIBABA_CLOUD_REGION_ID="${REGION:?config.env 缺 REGION}"
 }

package/dist/deploy-kit/scripts/ensure-credentials.spec.ts

@@ -182,11 +182,70 @@ describe('ensure_credentials', () => {
     expect(kitAccessYaml()).toContain("AccountID: '5566778899001122'")
   })
 
-  it('缺共享凭证文件时 fail-loud', () => {
+  it('缺共享凭证文件、env 里也没有 AK 时 fail-loud', () => {
     rmSync(join(box.kit, '.secrets', 'aliyun.env'))
     expect(() => runInKit('ensure_credentials')).toThrow()
     expect(existsSync(join(box.kit, '.s-home', '.s', 'access.yaml'))).toBe(false)
   })
+
+  // 云上分支（persona 上云 M1b Step 9）：容器里没有 `.secrets/`——`build-image.mjs` 刻意把它
+  // 剔出镜像层（镜像要分发，凭据进层洗不掉）。AK 由 gateway 经 **MCP server 的 per-server env**
+  // 交到调用本脚本的那个子进程里，不落文件：写成文件的话 agent 一个 `cat` 就看见了。
+  it('没有 .secrets/aliyun.env 但 env 里有 AK 时用 env（云上容器那条路）', () => {
+    rmSync(join(box.kit, '.secrets', 'aliyun.env'))
+    const out = execFileSync(
+      'bash',
+      [
+        '-c',
+        `set -euo pipefail
+KIT_DIR="${box.kit}"
+REGION=cn-hangzhou
+source "$KIT_DIR/scripts/ensure-credentials.sh"
+ensure_credentials
+printf 'ok %s\\n' "$ALIBABA_CLOUD_ACCESS_KEY_ID"`,
+      ],
+      {
+        env: {
+          ...process.env,
+          HOME: box.home,
+          PATH: `${box.bin}:${process.env.PATH}`,
+          ALIBABA_CLOUD_ACCESS_KEY_ID: 'LTAI-FROM-ENV',
+          ALIBABA_CLOUD_ACCESS_KEY_SECRET: 'secret-from-env',
+        },
+        encoding: 'utf8',
+      },
+    )
+    expect(out).toContain('ok LTAI-FROM-ENV')
+    // 走 env 分支照样把凭证落进 kit 私有 s-home（publish 用的是那份 profile），仍不碰用户全局
+    expect(kitAccessYaml()).toContain('LTAI-FROM-ENV')
+    expect(userAccessYaml()).toContain('LTAI-USER-OWN-KEY')
+  })
+
+  it('文件在就优先用文件（云上那条只是兜底，不能反过来盖掉本机 shared 凭证）', () => {
+    const out = execFileSync(
+      'bash',
+      [
+        '-c',
+        `set -euo pipefail
+KIT_DIR="${box.kit}"
+REGION=cn-hangzhou
+source "$KIT_DIR/scripts/ensure-credentials.sh"
+ensure_aliyun_env
+printf 'id=%s\\n' "$ALIBABA_CLOUD_ACCESS_KEY_ID"`,
+      ],
+      {
+        env: {
+          ...process.env,
+          HOME: box.home,
+          PATH: `${box.bin}:${process.env.PATH}`,
+          ALIBABA_CLOUD_ACCESS_KEY_ID: 'LTAI-FROM-ENV',
+          ALIBABA_CLOUD_ACCESS_KEY_SECRET: 'secret-from-env',
+        },
+        encoding: 'utf8',
+      },
+    )
+    expect(out).not.toContain('LTAI-FROM-ENV')
+  })
 })
 
 describe('publish.sh', () => {

package/dist/dispatch/mcp-server.cjs

@@ -22056,6 +22056,28 @@ var ChannelDeleteResultSchema = external_exports.object({
 
 // ../protocol/src/topic.ts
 var nonBlank2 = external_exports.string().trim().min(1);
+var TOPIC_DECISION_TYPES = ["master-confirmed", "owner-needed"];
+var TOPIC_DECISION_STATUSES = ["open", "resolved"];
+var TOPIC_DECISION_TYPE_MASTER_CONFIRMED = TOPIC_DECISION_TYPES[0];
+var TOPIC_DECISION_TYPE_OWNER_NEEDED = TOPIC_DECISION_TYPES[1];
+var TOPIC_DECISION_STATUS_OPEN = TOPIC_DECISION_STATUSES[0];
+var TOPIC_DECISION_STATUS_RESOLVED = TOPIC_DECISION_STATUSES[1];
+var TopicDecisionTypeSchema = external_exports.enum(TOPIC_DECISION_TYPES);
+var TopicDecisionStatusSchema = external_exports.enum(TOPIC_DECISION_STATUSES);
+var TopicDecisionSchema = external_exports.object({
+  type: TopicDecisionTypeSchema,
+  status: TopicDecisionStatusSchema,
+  question: nonBlank2,
+  recommendation: nonBlank2
+}).superRefine((decision, ctx) => {
+  if (decision.type === TOPIC_DECISION_TYPE_MASTER_CONFIRMED && decision.status !== TOPIC_DECISION_STATUS_RESOLVED) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["status"],
+      message: "master-confirmed decisions must be resolved"
+    });
+  }
+});
 var TOPIC_STATES = ["planning", "running", "done"];
 var TopicStateSchema = external_exports.enum(TOPIC_STATES);
 var TopicActivityEntrySchema = external_exports.object({
@@ -22065,7 +22087,12 @@ var TopicActivityEntrySchema = external_exports.object({
   target: external_exports.string().optional(),
   reason: external_exports.string().min(1),
   /** 该动作确认的产出物（watcher 返回的 artifacts）；影响面视图的唯一数据源 */
-  artifacts: external_exports.array(nonBlank2).optional()
+  artifacts: external_exports.array(nonBlank2).optional(),
+  /**
+   * Optional decision projection; legacy activity entries omit this field. `open` means the
+   * owner still needs to answer; `resolved` records the conclusion without deleting the question.
+   */
+  decision: TopicDecisionSchema.optional()
 });
 var TopicLineMetaSchema = external_exports.object({
   rejectCount: external_exports.number().int().min(0),
@@ -22172,7 +22199,8 @@ var TopicAppendArgsSchema = external_exports.object({
   target: nonBlank2.optional(),
   reason: nonBlank2,
   /** 该动作确认的产出物；影响面视图只吃这个字段 */
-  artifacts: external_exports.array(nonBlank2).optional()
+  artifacts: external_exports.array(nonBlank2).optional(),
+  decision: TopicActivityEntrySchema.shape.decision
 });
 var TopicRejectArgsSchema = external_exports.object({
   topicId: external_exports.string().min(1),
@@ -23925,7 +23953,7 @@ var METHOD_DOCS = {
     args: TopicSetPlanArgsSchema
   },
   "topic:append": {
-    summary: '\u5F80\u8BDD\u9898\u6D41\u6C34\u8FFD\u52A0\u4E00\u6761\uFF1Breason \u5FC5\u586B\uFF08\u8001\u677F\u4E8B\u540E\u770B\u7684\u662F"\u51ED\u4EC0\u4E48\u8FD9\u4E48\u5224\u65AD"\uFF09',
+    summary: "\u5F80\u8BDD\u9898\u6D41\u6C34\u8FFD\u52A0\u4E00\u6761\uFF1Breason \u5FC5\u586B\u3002Master \u505A\u4EE3\u8001\u677F\u786E\u8BA4\u6216\u5347\u7EA7\u8001\u677F\u51B3\u7B56\u65F6\uFF0C\u5FC5\u987B\u9644 decision\uFF08type/status/question/recommendation\uFF09",
     args: TopicAppendArgsSchema
   },
   "topic:reject": {

package/dist/persona-defaults/persona-master/CLAUDE.md

@@ -154,6 +154,74 @@ worker 干到一半上报「答不了的问题」（它会以回报形式带出
 先自己判断——你是任务源头，多数问题你能答，答了就续派回注。答不了 → 停下上报老板拍板。
 **不许用未经确认的假设擅自解锁一条挂起的线**——除非该假设来自设定里的预授权或老板临场拍板。
 
+### 6.1 决策留痕：代老板确认与向老板升级（硬性）
+
+worker 的问题不能只在对话里一闪而过。你每次替老板作出判断，或因为判断不了而停线，
+都必须在**作出动作的当下**用 `topic:append` 记录一条决策；普通的派活、收结果、进度更新
+仍按下面「落账纪律」记录，**不要给每条普通流水都加 `decision`**。
+
+#### 你能独立判断时：记录 `master-confirmed`
+
+只有设定中已有预授权、或问题完全落在本话题已确认的目标/边界/验收标准内，才可以代老板
+确认。先落账并确认 RPC 成功，再把决定回注给对应 worker；落账失败就停下并上报，不能无痕继续：
+
+    mcp__clawd-rpc__call({ method: 'topic:append', args: {
+      topicId, action: '代老板确认：采用方案 A', target: '<lineId>',
+      reason: '方案 A 符合已确认的边界 <边界>，不会触碰 <风险>；因此无需打扰老板',
+      decision: {
+        type: 'master-confirmed', status: 'resolved',
+        question: 'worker 提出的问题原文', recommendation: '最终采用的决定',
+      },
+    }})
+
+`target` 必须指向提出问题的 worker lane；`question` 保留问题原文，`recommendation` 写实际
+采取的决定。`reason` 不能只写「符合预授权」，要指出对应哪条边界/标准以及排除了什么风险。
+
+#### 你不能独立判断时：记录 `owner-needed` 并停线
+
+遇到设定没有覆盖、目标或边界有两种合理解释、会造成不可逆外部影响，或你判断「可能判断错」
+时，**禁止猜测后继续**。先停止给对应 lane 续派；如果 worker 仍在运行，先按下面的方式温柔中断，
+再落账。任何 RPC 失败都要保持暂停并把失败原因一并上报：
+
+    mcp__clawd-rpc__call({ method: 'session:interrupt', args: {
+      sessionId: '<该线的 workerSessionId>',
+    }})
+
+`session:interrupt` 只结束当前 worker turn，不杀会话、不丢上下文；恢复时仍复用原
+`dispatchId`。如果该调用失败，不能假定 worker 已停下；仍要追加下面的 `owner-needed`
+记录，并在 `reason` 里写明中断失败，继续保持不续派。
+
+    mcp__clawd-rpc__call({ method: 'topic:append', args: {
+      topicId, action: '需要老板拍板：<一句话问题>', target: '<lineId>',
+      reason: '现有设定同时允许 <A> 与 <B>，继续执行可能导致 <具体后果>，我无法安全代判',
+      decision: {
+        type: 'owner-needed', status: 'open',
+        question: '请老板在 <选项 A> / <选项 B> 中选择（附必要上下文）',
+        recommendation: '如无额外偏好，我建议 <选项>，因为 <理由>',
+      },
+    }})
+
+然后向老板报告这条待决策项，并等待明确答复；不要用普通 `topic:append` 假装已经解决。
+如果 worker 已经 idle，则不需要额外 RPC；只是不再给该 `dispatchId` 续派，等老板答复。
+老板答复后，先把答复原样记录成同一 `target` 的已解决决策，再用**同一个 `dispatchId`**
+续派可执行指令；不要新建第二条线。`session:interrupt` 失败时不能当作已经停住。
+记录已解决决策的调用仍走 `topic:append`：
+
+    mcp__clawd-rpc__call({ method: 'topic:append', args: {
+      topicId, action: '按老板决定：<一句话结论>', target: '<lineId>',
+      reason: '老板明确选择了 <选项>，因此按该选择恢复这条线',
+      decision: {
+        type: 'owner-needed', status: 'resolved',
+        question: '<原待决策问题>', recommendation: '老板最终选择：<选项>',
+      },
+    }})
+
+随后才用原 `dispatchId` 续派。决策记录落账失败就不要继续派活，先上报失败原因。
+决策 tab 会据此保留完整的「提出问题 → 得到结论」轨迹。
+
+这两类记录是老板在话题「决策」tab 里唯一关注的内容：没有 `decision` 的旧流水不会出现在
+该 tab，但仍保存在话题外部大脑中，供你用 `topic:get` 重建现场。
+
 ### 7. 收敛与上报
 
 `topic:accept` 返回 `allAccepted: true` → 合并 → 自己先验一遍 → 交付。