@clawos-dev/clawd 0.2.478 → 0.2.480

package/dist/app-builder-plugin/mcp-server.cjs

@@ -21344,12 +21344,9 @@ var EnvEvidenceSchema = external_exports.object({
 });
 
 // ../protocol/src/deploy-schemas.ts
-var FulfillmentSchema = external_exports.enum(["deployer", "user"]);
 var DeployFileSchema = external_exports.object({
   version: external_exports.literal(1),
-  manifest: EnvironmentManifestSchema,
-  /** secret name → 谁提供。缺席 = 还没定 */
-  fulfillment: external_exports.record(external_exports.string(), FulfillmentSchema).default({})
+  manifest: EnvironmentManifestSchema
 }).strict();
 var DeployScanStatusSchema = external_exports.enum(["scanning", "done", "failed"]);
 var DeployScanSchema = external_exports.object({
@@ -21400,7 +21397,6 @@ var DeployPersonaArgsSchema = external_exports.object({
 var DeployPatchArgsSchema = external_exports.object({
   personaId: external_exports.string().min(1),
   patch: external_exports.object({
-    fulfillment: external_exports.record(external_exports.string(), FulfillmentSchema).optional(),
     // 人工补依赖；整份替换 manifest
     manifest: EnvironmentManifestSchema.optional()
   }).strict()
@@ -21613,6 +21609,22 @@ var AuthGetIdentityResponseSchema = external_exports.object({
 var AuthLogoutResponseSchema = external_exports.object({
   type: external_exports.literal("auth:logout:ok")
 });
+var GatewayUrl = external_exports.string().nullable();
+var AuthApiKeyGetResponseSchema = external_exports.object({
+  type: external_exports.literal("auth:apiKey:get:ok"),
+  /** null = 还没发过。**发过就能一直看到** —— 中心存的是明文，设置页据此展示 */
+  apiKey: external_exports.string().nullable(),
+  /** ISO 时间；apiKey 为 null 时同为 null */
+  createdAt: external_exports.string().nullable(),
+  gatewayUrl: GatewayUrl
+});
+var AuthApiKeyRegenerateResponseSchema = external_exports.object({
+  type: external_exports.literal("auth:apiKey:regenerate:ok"),
+  /** 新发的那把。**旧的当场失效** —— 一人一把，按 union_id 覆盖 */
+  apiKey: external_exports.string().min(1),
+  createdAt: external_exports.string().min(1),
+  gatewayUrl: GatewayUrl
+});
 var AuthLoginDoneEventSchema = external_exports.object({
   type: external_exports.literal("auth:login:done"),
   identity: FeishuIdentitySchema
@@ -23884,7 +23896,7 @@ var METHOD_DOCS = {
   },
   // ---- deploy:*（persona 上云：persona 目录 = git 仓库工作树，发布 = 推送触发仓库流水线）----
   "deploy:start": {
-    summary: "\u5BF9\u67D0\u4E2A persona \u8D77\u4E00\u6B21\u4E0A\u4E91\u626B\u63CF\u3002**\u6CA1\u4ED3\u5E93\u5148\u5EFA\u4ED3**\uFF08gh repo create\uFF0C\u5EFA\u5728\u7EC4\u7EC7\u4E0B\u3001\u79C1\u6709\u3001\u63A8\u9996\u4E2A\u63D0\u4EA4\uFF09\uFF0C\u518D\u8D77 persona-butler \u7684\u626B\u63CF\u4F1A\u8BDD\uFF0C\u7ED3\u679C\u5199\u8FDB persona \u76EE\u5F55\u7684 .clawd/deploy.json \uFF08\u6E05\u5355 + \u5C65\u7EA6\uFF0C\u8FDB\u4ED3\u5E93\uFF09\u4E0E .clawd/deploy-scan.json\uFF08\u8BC1\u636E\uFF0C\u4E0D\u8FDB\u4ED3\u5E93\uFF09\u3002\u5DF2\u7ECF\u5728\u626B\u7684\u8BDD\u539F\u6837\u8FD4\u56DE\u3001\u4E0D\u8D77\u7B2C\u4E8C\u4E2A\u626B\u63CF\u4F1A\u8BDD\uFF1Bowner-only",
+    summary: "\u5BF9\u67D0\u4E2A persona \u8D77\u4E00\u6B21\u4E0A\u4E91\u626B\u63CF\u3002**\u6CA1\u4ED3\u5E93\u5148\u5EFA\u4ED3**\uFF08gh repo create\uFF0C\u5EFA\u5728\u7EC4\u7EC7\u4E0B\u3001\u79C1\u6709\u3001\u63A8\u9996\u4E2A\u63D0\u4EA4\uFF09\uFF0C\u518D\u8D77 persona-butler \u7684\u626B\u63CF\u4F1A\u8BDD\uFF0C\u7ED3\u679C\u5199\u8FDB persona \u76EE\u5F55\u7684 .clawd/deploy.json \uFF08\u73AF\u5883\u6E05\u5355\uFF0C\u8FDB\u4ED3\u5E93\uFF09\u4E0E .clawd/deploy-scan.json\uFF08\u8BC1\u636E\uFF0C\u4E0D\u8FDB\u4ED3\u5E93\uFF09\u3002\u5DF2\u7ECF\u5728\u626B\u7684\u8BDD\u539F\u6837\u8FD4\u56DE\u3001\u4E0D\u8D77\u7B2C\u4E8C\u4E2A\u626B\u63CF\u4F1A\u8BDD\uFF1Bowner-only",
     args: DeployPersonaArgsSchema
   },
   "deploy:get": {
@@ -23892,7 +23904,7 @@ var METHOD_DOCS = {
     args: DeployPersonaArgsSchema
   },
   "deploy:patch": {
-    summary: "\u7F16\u8F91\u90E8\u7F72\u6587\u4EF6\uFF1A\u9009\u5C65\u7EA6\uFF08\u8C01\u51FA\u8FD9\u6761\u51ED\u636E\uFF09/ \u624B\u5DE5\u8865\u4F9D\u8D56\u3002**\u4E0D\u80FD\u4ECE\u8FD9\u91CC\u4F20\u51ED\u636E\u7684\u503C**\uFF08\u503C\u8D70 deploy:putSecret\uFF09\uFF1B\u5C65\u7EA6\u540D\u5FC5\u987B\u662F\u6E05\u5355\u91CC\u58F0\u660E\u8FC7\u7684\u51ED\u636E\uFF1Bowner-only",
+    summary: "\u7F16\u8F91\u90E8\u7F72\u6587\u4EF6\uFF1A\u624B\u5DE5\u8865\u4F9D\u8D56\u3002**\u4E0D\u80FD\u4ECE\u8FD9\u91CC\u4F20\u51ED\u636E\u7684\u503C**\uFF08\u503C\u8D70 deploy:putSecret\uFF09\uFF1Bowner-only",
     args: DeployPatchArgsSchema
   },
   "deploy:putSecret": {
@@ -23908,7 +23920,7 @@ var METHOD_DOCS = {
     args: DeployFinishScanArgsSchema
   },
   "deploy:release": {
-    summary: "\u53D1\u5E03 = \u63D0\u4EA4\u5E76\u63A8\u9001\u5230\u4ED3\u5E93\uFF1A\u91CD\u5199 workflow \u6A21\u677F \u2192 git add -A \u2192 \u7A7A\u63D0\u4EA4\u4E5F\u5141\u8BB8 \u2192 push\u3002\u4ED3\u5E93\u91CC\u7684\u6D41\u6C34\u7EBF\u63A5\u7740\u6784\u955C\u50CF\u3001\u5728\u96C6\u7FA4\u4E0A\u771F\u8D77\u4E00\u6B21\u3001\u767B\u8BB0\u6210\u6B63\u5F0F\uFF0C\u8FDB\u5EA6\u5728 GitHub Actions \u770B\u3002\u524D\u7F6E\uFF1A\u5DF2\u7ED1\u5B9A\u4ED3\u5E93\u3001\u6709\u6E05\u5355\u3001\u6BCF\u6761\u51ED\u636E\u90FD\u5B9A\u4E86\u5C65\u7EA6\u3001\u6BCF\u4E2A\u53D8\u91CF\u540D\u90FD\u5728 Secrets \u91CC\uFF1Bowner-only",
+    summary: "\u53D1\u5E03 = \u63D0\u4EA4\u5E76\u63A8\u9001\u5230\u4ED3\u5E93\uFF1A\u91CD\u5199 workflow \u6A21\u677F \u2192 git add -A \u2192 \u7A7A\u63D0\u4EA4\u4E5F\u5141\u8BB8 \u2192 push\u3002\u4ED3\u5E93\u91CC\u7684\u6D41\u6C34\u7EBF\u63A5\u7740\u6784\u955C\u50CF\u3001\u5728\u96C6\u7FA4\u4E0A\u771F\u8D77\u4E00\u6B21\u3001\u767B\u8BB0\u6210\u6B63\u5F0F\uFF0C\u8FDB\u5EA6\u5728 GitHub Actions \u770B\u3002\u524D\u7F6E\uFF1A\u5DF2\u7ED1\u5B9A\u4ED3\u5E93\u3001\u6709\u6E05\u5355\u3001\u6BCF\u4E2A\u53D8\u91CF\u540D\u90FD\u5728 Secrets \u91CC\uFF1Bowner-only",
     args: DeployPersonaArgsSchema
   },
   "shift:list": {
@@ -24287,6 +24299,14 @@ var METHOD_DOCS = {
     summary: "\u767B\u51FA\u98DE\u4E66\u8EAB\u4EFD\uFF08\u6E05 owner-identity \u843D\u76D8\uFF09\u3002owner-only",
     args: NO_ARGS
   },
+  "auth:apiKey:get": {
+    summary: "\u8BFB\u56DE\u81EA\u5DF1\u90A3\u628A\u4E91 persona \u8C03\u7528 key\uFF08\u6CA1\u53D1\u8FC7 \u2192 apiKey:null\uFF09\u3002daemon \u62FF\u672C\u673A\u767B\u5F55\u51ED\u8BC1\u5411\u4E2D\u5FC3\u4EE3\u53D6\uFF0C\u51ED\u8BC1\u4E0D\u51FA ws\u3002owner-only",
+    args: NO_ARGS
+  },
+  "auth:apiKey:regenerate": {
+    summary: "\u6362\u4E00\u628A\u65B0\u7684\u4E91 persona \u8C03\u7528 key\uFF0C**\u65E7\u7684\u5F53\u573A\u5931\u6548**\uFF08\u4E00\u4EBA\u4E00\u628A\uFF0C\u4E2D\u5FC3\u6309 union_id \u8986\u76D6\uFF09\u3002owner-only",
+    args: NO_ARGS
+  },
   "device:list": {
     summary: "\u5217\u51FA\u516C\u5171\u8BBE\u5907\u76EE\u5F55\u91CC\u53EF\u8FDE\u63A5\u7684\u8BBE\u5907\uFF08daemon \u4EE3\u7406\u4E2D\u5FC3 server\uFF09\u3002owner-only",
     args: NO_ARGS

package/dist/cli.cjs

@@ -6025,18 +6025,15 @@ var init_environment_schemas = __esm({
 function repoSlug(url) {
   return url.trim().replace(/^git@[^:]+:/, "").replace(/^https?:\/\/[^/]+\//, "").replace(/\.git$/, "");
 }
-var FulfillmentSchema, DeployFileSchema, DeployScanStatusSchema, DeployScanSchema, DeployRepoSchema, DeploySecretPresenceSchema, DeployStateSchema, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
+var DeployFileSchema, DeployScanStatusSchema, DeployScanSchema, DeployRepoSchema, DeploySecretPresenceSchema, DeployStateSchema, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
 var init_deploy_schemas = __esm({
   "../protocol/src/deploy-schemas.ts"() {
     "use strict";
     init_zod();
     init_environment_schemas();
-    FulfillmentSchema = external_exports.enum(["deployer", "user"]);
     DeployFileSchema = external_exports.object({
       version: external_exports.literal(1),
-      manifest: EnvironmentManifestSchema,
-      /** secret name → 谁提供。缺席 = 还没定 */
-      fulfillment: external_exports.record(external_exports.string(), FulfillmentSchema).default({})
+      manifest: EnvironmentManifestSchema
     }).strict();
     DeployScanStatusSchema = external_exports.enum(["scanning", "done", "failed"]);
     DeployScanSchema = external_exports.object({
@@ -6087,7 +6084,6 @@ var init_deploy_schemas = __esm({
     DeployPatchArgsSchema = external_exports.object({
       personaId: external_exports.string().min(1),
       patch: external_exports.object({
-        fulfillment: external_exports.record(external_exports.string(), FulfillmentSchema).optional(),
         // 人工补依赖；整份替换 manifest
         manifest: EnvironmentManifestSchema.optional()
       }).strict()
@@ -6244,7 +6240,7 @@ var init_contact = __esm({
 });
 
 // ../protocol/src/feishu-auth.ts
-var FEISHU_GATED_METHODS, LOGIN_EXPIRED_ERROR_MARKER, DeviceEntrySchema, DeviceListResponseSchema, DeviceConnectArgsSchema, DeviceConnectResponseSchema, FeishuIdentitySchema, AuthLoginStartResponseSchema, AuthGetIdentityResponseSchema, AuthLogoutResponseSchema, AuthLoginDoneEventSchema, AuthLoginFailedEventSchema;
+var FEISHU_GATED_METHODS, LOGIN_EXPIRED_ERROR_MARKER, DeviceEntrySchema, DeviceListResponseSchema, DeviceConnectArgsSchema, DeviceConnectResponseSchema, FeishuIdentitySchema, AuthLoginStartResponseSchema, AuthGetIdentityResponseSchema, AuthLogoutResponseSchema, GatewayUrl, AuthApiKeyGetResponseSchema, AuthApiKeyRegenerateResponseSchema, AuthLoginDoneEventSchema, AuthLoginFailedEventSchema;
 var init_feishu_auth = __esm({
   "../protocol/src/feishu-auth.ts"() {
     "use strict";
@@ -6341,6 +6337,22 @@ var init_feishu_auth = __esm({
     AuthLogoutResponseSchema = external_exports.object({
       type: external_exports.literal("auth:logout:ok")
     });
+    GatewayUrl = external_exports.string().nullable();
+    AuthApiKeyGetResponseSchema = external_exports.object({
+      type: external_exports.literal("auth:apiKey:get:ok"),
+      /** null = 还没发过。**发过就能一直看到** —— 中心存的是明文，设置页据此展示 */
+      apiKey: external_exports.string().nullable(),
+      /** ISO 时间；apiKey 为 null 时同为 null */
+      createdAt: external_exports.string().nullable(),
+      gatewayUrl: GatewayUrl
+    });
+    AuthApiKeyRegenerateResponseSchema = external_exports.object({
+      type: external_exports.literal("auth:apiKey:regenerate:ok"),
+      /** 新发的那把。**旧的当场失效** —— 一人一把，按 union_id 覆盖 */
+      apiKey: external_exports.string().min(1),
+      createdAt: external_exports.string().min(1),
+      gatewayUrl: GatewayUrl
+    });
     AuthLoginDoneEventSchema = external_exports.object({
       type: external_exports.literal("auth:login:done"),
       identity: FeishuIdentitySchema
@@ -8836,7 +8848,7 @@ var init_methods = __esm({
       },
       // ---- deploy:*（persona 上云：persona 目录 = git 仓库工作树，发布 = 推送触发仓库流水线）----
       "deploy:start": {
-        summary: "\u5BF9\u67D0\u4E2A persona \u8D77\u4E00\u6B21\u4E0A\u4E91\u626B\u63CF\u3002**\u6CA1\u4ED3\u5E93\u5148\u5EFA\u4ED3**\uFF08gh repo create\uFF0C\u5EFA\u5728\u7EC4\u7EC7\u4E0B\u3001\u79C1\u6709\u3001\u63A8\u9996\u4E2A\u63D0\u4EA4\uFF09\uFF0C\u518D\u8D77 persona-butler \u7684\u626B\u63CF\u4F1A\u8BDD\uFF0C\u7ED3\u679C\u5199\u8FDB persona \u76EE\u5F55\u7684 .clawd/deploy.json \uFF08\u6E05\u5355 + \u5C65\u7EA6\uFF0C\u8FDB\u4ED3\u5E93\uFF09\u4E0E .clawd/deploy-scan.json\uFF08\u8BC1\u636E\uFF0C\u4E0D\u8FDB\u4ED3\u5E93\uFF09\u3002\u5DF2\u7ECF\u5728\u626B\u7684\u8BDD\u539F\u6837\u8FD4\u56DE\u3001\u4E0D\u8D77\u7B2C\u4E8C\u4E2A\u626B\u63CF\u4F1A\u8BDD\uFF1Bowner-only",
+        summary: "\u5BF9\u67D0\u4E2A persona \u8D77\u4E00\u6B21\u4E0A\u4E91\u626B\u63CF\u3002**\u6CA1\u4ED3\u5E93\u5148\u5EFA\u4ED3**\uFF08gh repo create\uFF0C\u5EFA\u5728\u7EC4\u7EC7\u4E0B\u3001\u79C1\u6709\u3001\u63A8\u9996\u4E2A\u63D0\u4EA4\uFF09\uFF0C\u518D\u8D77 persona-butler \u7684\u626B\u63CF\u4F1A\u8BDD\uFF0C\u7ED3\u679C\u5199\u8FDB persona \u76EE\u5F55\u7684 .clawd/deploy.json \uFF08\u73AF\u5883\u6E05\u5355\uFF0C\u8FDB\u4ED3\u5E93\uFF09\u4E0E .clawd/deploy-scan.json\uFF08\u8BC1\u636E\uFF0C\u4E0D\u8FDB\u4ED3\u5E93\uFF09\u3002\u5DF2\u7ECF\u5728\u626B\u7684\u8BDD\u539F\u6837\u8FD4\u56DE\u3001\u4E0D\u8D77\u7B2C\u4E8C\u4E2A\u626B\u63CF\u4F1A\u8BDD\uFF1Bowner-only",
         args: DeployPersonaArgsSchema
       },
       "deploy:get": {
@@ -8844,7 +8856,7 @@ var init_methods = __esm({
         args: DeployPersonaArgsSchema
       },
       "deploy:patch": {
-        summary: "\u7F16\u8F91\u90E8\u7F72\u6587\u4EF6\uFF1A\u9009\u5C65\u7EA6\uFF08\u8C01\u51FA\u8FD9\u6761\u51ED\u636E\uFF09/ \u624B\u5DE5\u8865\u4F9D\u8D56\u3002**\u4E0D\u80FD\u4ECE\u8FD9\u91CC\u4F20\u51ED\u636E\u7684\u503C**\uFF08\u503C\u8D70 deploy:putSecret\uFF09\uFF1B\u5C65\u7EA6\u540D\u5FC5\u987B\u662F\u6E05\u5355\u91CC\u58F0\u660E\u8FC7\u7684\u51ED\u636E\uFF1Bowner-only",
+        summary: "\u7F16\u8F91\u90E8\u7F72\u6587\u4EF6\uFF1A\u624B\u5DE5\u8865\u4F9D\u8D56\u3002**\u4E0D\u80FD\u4ECE\u8FD9\u91CC\u4F20\u51ED\u636E\u7684\u503C**\uFF08\u503C\u8D70 deploy:putSecret\uFF09\uFF1Bowner-only",
         args: DeployPatchArgsSchema
       },
       "deploy:putSecret": {
@@ -8860,7 +8872,7 @@ var init_methods = __esm({
         args: DeployFinishScanArgsSchema
       },
       "deploy:release": {
-        summary: "\u53D1\u5E03 = \u63D0\u4EA4\u5E76\u63A8\u9001\u5230\u4ED3\u5E93\uFF1A\u91CD\u5199 workflow \u6A21\u677F \u2192 git add -A \u2192 \u7A7A\u63D0\u4EA4\u4E5F\u5141\u8BB8 \u2192 push\u3002\u4ED3\u5E93\u91CC\u7684\u6D41\u6C34\u7EBF\u63A5\u7740\u6784\u955C\u50CF\u3001\u5728\u96C6\u7FA4\u4E0A\u771F\u8D77\u4E00\u6B21\u3001\u767B\u8BB0\u6210\u6B63\u5F0F\uFF0C\u8FDB\u5EA6\u5728 GitHub Actions \u770B\u3002\u524D\u7F6E\uFF1A\u5DF2\u7ED1\u5B9A\u4ED3\u5E93\u3001\u6709\u6E05\u5355\u3001\u6BCF\u6761\u51ED\u636E\u90FD\u5B9A\u4E86\u5C65\u7EA6\u3001\u6BCF\u4E2A\u53D8\u91CF\u540D\u90FD\u5728 Secrets \u91CC\uFF1Bowner-only",
+        summary: "\u53D1\u5E03 = \u63D0\u4EA4\u5E76\u63A8\u9001\u5230\u4ED3\u5E93\uFF1A\u91CD\u5199 workflow \u6A21\u677F \u2192 git add -A \u2192 \u7A7A\u63D0\u4EA4\u4E5F\u5141\u8BB8 \u2192 push\u3002\u4ED3\u5E93\u91CC\u7684\u6D41\u6C34\u7EBF\u63A5\u7740\u6784\u955C\u50CF\u3001\u5728\u96C6\u7FA4\u4E0A\u771F\u8D77\u4E00\u6B21\u3001\u767B\u8BB0\u6210\u6B63\u5F0F\uFF0C\u8FDB\u5EA6\u5728 GitHub Actions \u770B\u3002\u524D\u7F6E\uFF1A\u5DF2\u7ED1\u5B9A\u4ED3\u5E93\u3001\u6709\u6E05\u5355\u3001\u6BCF\u4E2A\u53D8\u91CF\u540D\u90FD\u5728 Secrets \u91CC\uFF1Bowner-only",
         args: DeployPersonaArgsSchema
       },
       "shift:list": {
@@ -9239,6 +9251,14 @@ var init_methods = __esm({
         summary: "\u767B\u51FA\u98DE\u4E66\u8EAB\u4EFD\uFF08\u6E05 owner-identity \u843D\u76D8\uFF09\u3002owner-only",
         args: NO_ARGS
       },
+      "auth:apiKey:get": {
+        summary: "\u8BFB\u56DE\u81EA\u5DF1\u90A3\u628A\u4E91 persona \u8C03\u7528 key\uFF08\u6CA1\u53D1\u8FC7 \u2192 apiKey:null\uFF09\u3002daemon \u62FF\u672C\u673A\u767B\u5F55\u51ED\u8BC1\u5411\u4E2D\u5FC3\u4EE3\u53D6\uFF0C\u51ED\u8BC1\u4E0D\u51FA ws\u3002owner-only",
+        args: NO_ARGS
+      },
+      "auth:apiKey:regenerate": {
+        summary: "\u6362\u4E00\u628A\u65B0\u7684\u4E91 persona \u8C03\u7528 key\uFF0C**\u65E7\u7684\u5F53\u573A\u5931\u6548**\uFF08\u4E00\u4EBA\u4E00\u628A\uFF0C\u4E2D\u5FC3\u6309 union_id \u8986\u76D6\uFF09\u3002owner-only",
+        args: NO_ARGS
+      },
       "device:list": {
         summary: "\u5217\u51FA\u516C\u5171\u8BBE\u5907\u76EE\u5F55\u91CC\u53EF\u8FDE\u63A5\u7684\u8BBE\u5907\uFF08daemon \u4EE3\u7406\u4E2D\u5FC3 server\uFF09\u3002owner-only",
         args: NO_ARGS
@@ -54676,7 +54696,7 @@ async function writeScan(dir, scan) {
   await writeJson(import_node_path30.default.join(dir, SCAN_FILE), DeployScanSchema.parse(scan));
 }
 function emptyDeployFile() {
-  return { version: 1, manifest: { version: 1, clis: [], secrets: [], assets: [] }, fulfillment: {} };
+  return { version: 1, manifest: { version: 1, clis: [], secrets: [], assets: [] } };
 }
 function parseFinding(kind, item) {
   const schema = kind === "cli" ? EnvCliSchema : kind === "secret" ? EnvSecretSchema : EnvAssetSchema;
@@ -54736,7 +54756,7 @@ var L = [
   "# \u6784\u5EFA\u5668 / \u6D41\u6C34\u7EBF\u811A\u672C / \u968F\u884C\u8D44\u4EA7\u5728 ottin4ttc/clawos \u4ED3\u5E93\u91CC\uFF0C\u8FD9\u91CC checkout \u4E00\u4EFD\u6765\u7528\u3002",
   "#",
   "# \u8981\u7684\u7EC4\u7EC7\u7EA7 Secrets\uFF1AALI_DOCKER_USERNAME / ALI_DOCKER_PASSWORD\uFF08\u63A8 ACR\uFF09\u3001CLAWOS_READ_TOKEN",
-  "#\uFF08\u8BFB clawos \u4ED3\u5E93\uFF09\u3001CLAWD_GATEWAY_ADMIN_KEY / CLAWD_GATEWAY_API_KEY\uFF1B\u7EC4\u7EC7\u7EA7 Variable\uFF1ACLAWD_GATEWAY_URL\u3002",
+  "#\uFF08\u8BFB clawos \u4ED3\u5E93\uFF09\u3001CLAWD_GATEWAY_ADMIN_KEY\uFF1B\u7EC4\u7EC7\u7EA7 Variable\uFF1ACLAWD_GATEWAY_URL\u3002",
   "# \u4ED3\u5E93\u7EA7\u540C\u540D\u914D\u7F6E\u4F1A\u76D6\u8FC7\u7EC4\u7EC7\u7EA7\u2014\u2014\u67D0\u4E2A persona \u8981\u6307\u5230\u53E6\u4E00\u53F0 gateway\uFF0C\u5728\u81EA\u5DF1\u4ED3\u5E93\u91CC\u914D\u5373\u53EF\u3002",
   "",
   "on:",
@@ -54768,8 +54788,6 @@ var L = [
   "      image: ${{ steps.plan.outputs.image }}",
   "      persona_id: ${{ steps.plan.outputs.persona_id }}",
   "      env_names: ${{ steps.plan.outputs.env_names }}",
-  "      deployer_env_names: ${{ steps.plan.outputs.deployer_env_names }}",
-  "      user_secrets: ${{ steps.plan.outputs.user_secrets }}",
   "    steps:",
   "      - name: Checkout persona",
   "        uses: actions/checkout@v4",
@@ -54884,7 +54902,6 @@ var L = [
   "        env:",
   "          CLAWD_GATEWAY_URL: ${{ vars.CLAWD_GATEWAY_URL }}",
   "          CLAWD_GATEWAY_ADMIN_KEY: ${{ secrets.CLAWD_GATEWAY_ADMIN_KEY }}",
-  "          CLAWD_GATEWAY_API_KEY: ${{ secrets.CLAWD_GATEWAY_API_KEY }}",
   "          CLAWD_SECRETS_JSON: ${{ toJSON(secrets) }}",
   "          CLAWD_ENV_NAMES: ${{ needs.build.outputs.env_names }}",
   "        run: |",
@@ -54914,8 +54931,7 @@ var L = [
   "          CLAWD_GATEWAY_URL: ${{ vars.CLAWD_GATEWAY_URL }}",
   "          CLAWD_GATEWAY_ADMIN_KEY: ${{ secrets.CLAWD_GATEWAY_ADMIN_KEY }}",
   "          CLAWD_SECRETS_JSON: ${{ toJSON(secrets) }}",
-  "          CLAWD_DEPLOYER_ENV_NAMES: ${{ needs.build.outputs.deployer_env_names }}",
-  "          CLAWD_USER_SECRETS: ${{ needs.build.outputs.user_secrets }}",
+  "          CLAWD_ENV_NAMES: ${{ needs.build.outputs.env_names }}",
   "        run: |",
   "          node clawos/cloud-host/pipeline/register.mjs \\",
   "            --image '${{ needs.build.outputs.image }}' \\",
@@ -55239,7 +55255,7 @@ function buildDeployHandlers(deps) {
       secretsCache.delete(personaId2);
     }
     const prev = await readDeployFile(dir).catch(() => void 0);
-    await writeDeployFile(dir, { ...emptyDeployFile(), fulfillment: prev?.fulfillment ?? {} });
+    await writeDeployFile(dir, emptyDeployFile());
     const startedAt = deps.now();
     await writeScan(dir, { status: "scanning", evidence: [], notes: [], scannedAssets: [], startedAt });
     const started = deps.startScan(personaId2);
@@ -55269,16 +55285,9 @@ function buildDeployHandlers(deps) {
     const args = parseArgs2(DeployPatchArgsSchema, frame, "deploy:patch");
     const dir = mustPersona(args.personaId);
     const file = await readDeployFile(dir) ?? emptyDeployFile();
-    if (args.patch.fulfillment) {
-      const declared = new Set((args.patch.manifest ?? file.manifest).secrets.map((s) => s.name));
-      for (const name of Object.keys(args.patch.fulfillment)) {
-        if (!declared.has(name)) throw invalid(`\u6E05\u5355\u91CC\u6CA1\u6709\u53EB\u300C${name}\u300D\u7684\u51ED\u636E`);
-      }
-    }
     const next = {
       ...file,
-      ...args.patch.manifest ? { manifest: args.patch.manifest } : {},
-      ...args.patch.fulfillment ? { fulfillment: { ...file.fulfillment, ...args.patch.fulfillment } } : {}
+      ...args.patch.manifest ? { manifest: args.patch.manifest } : {}
     };
     await writeDeployFile(dir, next);
     return view(args.personaId);
@@ -55355,8 +55364,6 @@ function buildDeployHandlers(deps) {
     if (scan?.status === "scanning") throw invalid("\u626B\u63CF\u8FD8\u6CA1\u7ED3\u675F");
     if (scan?.status !== "done") throw invalid(scan?.status === "failed" ? "\u4E0A\u6B21\u626B\u63CF\u5931\u8D25\u4E86\uFF0C\u5148\u91CD\u65B0\u626B\u63CF" : "\u8FD8\u6CA1\u626B\u63CF\u8FC7\uFF0C\u5148\u626B\u63CF");
     const blockers = [];
-    const undecided = file.manifest.secrets.filter((s) => !file.fulfillment[s.name]).map((s) => `\u300C${s.name}\u300D\u8FD8\u6CA1\u5B9A\u8C01\u51FA`);
-    blockers.push(...undecided);
     let present;
     try {
       present = new Set((await cachedSecrets(personaId2, dir, true)).filter((p2) => p2.setAt).map((p2) => p2.env));
@@ -61572,6 +61579,40 @@ async function centralPrincipalStatus(opts) {
   }
   return { active: body.active };
 }
+async function centralGetApiKey(opts) {
+  const body = await centralRequest(
+    opts,
+    `/api/persona-cloud/api-key?provider=${encodeURIComponent(opts.provider)}`,
+    { method: "GET", bearer: opts.ttcJwt }
+  );
+  if (body.apiKey !== null && typeof body.apiKey !== "string") {
+    throw new CentralClientError("BAD_RESPONSE", "api-key: apiKey must be string or null");
+  }
+  return {
+    apiKey: body.apiKey,
+    createdAt: typeof body.createdAt === "string" ? body.createdAt : null,
+    // 中心没配就是 null —— 不当成错误，key 本身照样有效
+    gatewayUrl: typeof body.gatewayUrl === "string" ? body.gatewayUrl : null
+  };
+}
+async function centralIssueApiKey(opts) {
+  const body = await centralRequest(opts, "/api/persona-cloud/api-key", {
+    method: "POST",
+    bearer: opts.ttcJwt,
+    body: { provider: opts.provider }
+  });
+  if (typeof body.apiKey !== "string" || body.apiKey.length === 0) {
+    throw new CentralClientError("BAD_RESPONSE", "api-key: missing apiKey");
+  }
+  if (typeof body.createdAt !== "string" || body.createdAt.length === 0) {
+    throw new CentralClientError("BAD_RESPONSE", "api-key: missing createdAt");
+  }
+  return {
+    apiKey: body.apiKey,
+    createdAt: body.createdAt,
+    gatewayUrl: typeof body.gatewayUrl === "string" ? body.gatewayUrl : null
+  };
+}
 async function centralListDevices(opts) {
   const body = await centralRequest(
     opts,
@@ -63982,6 +64023,7 @@ function buildWhoamiHandler(deps) {
 }
 
 // src/handlers/feishu-auth.ts
+init_protocol();
 function buildFeishuAuthHandlers(deps) {
   const loginStart = async () => {
     const { authUrl, state } = deps.loginFlow.start();
@@ -64010,10 +64052,34 @@ function buildFeishuAuthHandlers(deps) {
       response: { type: "auth:logout:ok" }
     };
   };
+  function requireLogin() {
+    const record3 = deps.ownerIdentityStore.read();
+    if (!record3) {
+      throw new ClawdError(
+        ERROR_CODES.FEISHU_LOGIN_REQUIRED,
+        "\u8FD8\u6CA1\u767B\u5F55\u98DE\u4E66\uFF0C\u62FF\u4E0D\u5230\u4E91 persona \u7684\u8C03\u7528 key"
+      );
+    }
+    return { ttcJwt: record3.ttcToken, provider: record3.identity.provider };
+  }
+  const apiKeyGet = async () => {
+    const { apiKey, createdAt, gatewayUrl } = await deps.apiKeyClient.get(requireLogin());
+    return {
+      response: { type: "auth:apiKey:get:ok", apiKey, createdAt, gatewayUrl }
+    };
+  };
+  const apiKeyRegenerate = async () => {
+    const { apiKey, createdAt, gatewayUrl } = await deps.apiKeyClient.issue(requireLogin());
+    return {
+      response: { type: "auth:apiKey:regenerate:ok", apiKey, createdAt, gatewayUrl }
+    };
+  };
   return {
     "auth:login:start": loginStart,
     "auth:getIdentity": getIdentity,
-    "auth:logout": logout
+    "auth:logout": logout,
+    "auth:apiKey:get": apiKeyGet,
+    "auth:apiKey:regenerate": apiKeyRegenerate
   };
 }
 
@@ -64063,7 +64129,7 @@ var METHOD_GRANT_MAP = {
   // ---- visitor:* (访客名单，owner-only) ----
   // owner 看完整访客名单（含没开会话的）；guest 不可调（handler 内再 assertOwner 兜底）。
   "visitor:list": ADMIN_ANY,
-  // deploy:*（persona 上云）：全部 owner-only。里面有履约决策、凭据录入口、建仓和推送，
+  // deploy:*（persona 上云）：全部 owner-only。里面有凭据录入口、建仓和推送，
   // guest 不该看见更不该动。
   "deploy:start": ADMIN_ANY,
   "deploy:get": ADMIN_ANY,
@@ -64254,6 +64320,9 @@ var METHOD_GRANT_MAP = {
   "auth:login:start": ADMIN_ANY,
   "auth:getIdentity": ADMIN_ANY,
   "auth:logout": ADMIN_ANY,
+  // 云 persona 调用 key：本机主人自己的东西，guest 一律够不着
+  "auth:apiKey:get": ADMIN_ANY,
+  "auth:apiKey:regenerate": ADMIN_ANY,
   // ---- device:* 设备目录 + 连接（决策 #15，owner-only） ----
   // 设备目录 / 连接都是 owner 本机操作（用 owner 的 ttcJwt 找中心 server），guest 不可调
   "device:list": ADMIN_ANY,
@@ -64317,7 +64386,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.478".length > 0 ? "0.2.478" : "dev";
+var version = "0.2.480".length > 0 ? "0.2.480" : "dev";
 
 // src/cli-probe/probe.ts
 var fs70 = __toESM(require("fs"), 1);
@@ -69318,6 +69387,12 @@ async function startDaemon(config) {
           ownerId = "";
           ownerProvider = "";
           ownerDisplayName = loadOwnerDisplayName(config.dataDir);
+        },
+        // 云 persona 调用 key（design 2026-09-08）：daemon 拿本机登录凭证向中心代取。
+        // 凭证不出 ws —— UI 只拿到 key 本身，跟 exchange / listDevices 同一条纪律。
+        apiKeyClient: {
+          get: (args) => centralGetApiKey({ api: config.clawosApi ?? DEFAULT_CLAWOS_API, ...args }),
+          issue: (args) => centralIssueApiKey({ api: config.clawosApi ?? DEFAULT_CLAWOS_API, ...args })
         }
       },
       // 设备目录 + 连接（决策 #15：daemon 代理中心 server）。

package/dist/dispatch/mcp-server.cjs

@@ -21337,12 +21337,9 @@ var EnvEvidenceSchema = external_exports.object({
 });
 
 // ../protocol/src/deploy-schemas.ts
-var FulfillmentSchema = external_exports.enum(["deployer", "user"]);
 var DeployFileSchema = external_exports.object({
   version: external_exports.literal(1),
-  manifest: EnvironmentManifestSchema,
-  /** secret name → 谁提供。缺席 = 还没定 */
-  fulfillment: external_exports.record(external_exports.string(), FulfillmentSchema).default({})
+  manifest: EnvironmentManifestSchema
 }).strict();
 var DeployScanStatusSchema = external_exports.enum(["scanning", "done", "failed"]);
 var DeployScanSchema = external_exports.object({
@@ -21393,7 +21390,6 @@ var DeployPersonaArgsSchema = external_exports.object({
 var DeployPatchArgsSchema = external_exports.object({
   personaId: external_exports.string().min(1),
   patch: external_exports.object({
-    fulfillment: external_exports.record(external_exports.string(), FulfillmentSchema).optional(),
     // 人工补依赖；整份替换 manifest
     manifest: EnvironmentManifestSchema.optional()
   }).strict()
@@ -21606,6 +21602,22 @@ var AuthGetIdentityResponseSchema = external_exports.object({
 var AuthLogoutResponseSchema = external_exports.object({
   type: external_exports.literal("auth:logout:ok")
 });
+var GatewayUrl = external_exports.string().nullable();
+var AuthApiKeyGetResponseSchema = external_exports.object({
+  type: external_exports.literal("auth:apiKey:get:ok"),
+  /** null = 还没发过。**发过就能一直看到** —— 中心存的是明文，设置页据此展示 */
+  apiKey: external_exports.string().nullable(),
+  /** ISO 时间；apiKey 为 null 时同为 null */
+  createdAt: external_exports.string().nullable(),
+  gatewayUrl: GatewayUrl
+});
+var AuthApiKeyRegenerateResponseSchema = external_exports.object({
+  type: external_exports.literal("auth:apiKey:regenerate:ok"),
+  /** 新发的那把。**旧的当场失效** —— 一人一把，按 union_id 覆盖 */
+  apiKey: external_exports.string().min(1),
+  createdAt: external_exports.string().min(1),
+  gatewayUrl: GatewayUrl
+});
 var AuthLoginDoneEventSchema = external_exports.object({
   type: external_exports.literal("auth:login:done"),
   identity: FeishuIdentitySchema
@@ -23876,7 +23888,7 @@ var METHOD_DOCS = {
   },
   // ---- deploy:*（persona 上云：persona 目录 = git 仓库工作树，发布 = 推送触发仓库流水线）----
   "deploy:start": {
-    summary: "\u5BF9\u67D0\u4E2A persona \u8D77\u4E00\u6B21\u4E0A\u4E91\u626B\u63CF\u3002**\u6CA1\u4ED3\u5E93\u5148\u5EFA\u4ED3**\uFF08gh repo create\uFF0C\u5EFA\u5728\u7EC4\u7EC7\u4E0B\u3001\u79C1\u6709\u3001\u63A8\u9996\u4E2A\u63D0\u4EA4\uFF09\uFF0C\u518D\u8D77 persona-butler \u7684\u626B\u63CF\u4F1A\u8BDD\uFF0C\u7ED3\u679C\u5199\u8FDB persona \u76EE\u5F55\u7684 .clawd/deploy.json \uFF08\u6E05\u5355 + \u5C65\u7EA6\uFF0C\u8FDB\u4ED3\u5E93\uFF09\u4E0E .clawd/deploy-scan.json\uFF08\u8BC1\u636E\uFF0C\u4E0D\u8FDB\u4ED3\u5E93\uFF09\u3002\u5DF2\u7ECF\u5728\u626B\u7684\u8BDD\u539F\u6837\u8FD4\u56DE\u3001\u4E0D\u8D77\u7B2C\u4E8C\u4E2A\u626B\u63CF\u4F1A\u8BDD\uFF1Bowner-only",
+    summary: "\u5BF9\u67D0\u4E2A persona \u8D77\u4E00\u6B21\u4E0A\u4E91\u626B\u63CF\u3002**\u6CA1\u4ED3\u5E93\u5148\u5EFA\u4ED3**\uFF08gh repo create\uFF0C\u5EFA\u5728\u7EC4\u7EC7\u4E0B\u3001\u79C1\u6709\u3001\u63A8\u9996\u4E2A\u63D0\u4EA4\uFF09\uFF0C\u518D\u8D77 persona-butler \u7684\u626B\u63CF\u4F1A\u8BDD\uFF0C\u7ED3\u679C\u5199\u8FDB persona \u76EE\u5F55\u7684 .clawd/deploy.json \uFF08\u73AF\u5883\u6E05\u5355\uFF0C\u8FDB\u4ED3\u5E93\uFF09\u4E0E .clawd/deploy-scan.json\uFF08\u8BC1\u636E\uFF0C\u4E0D\u8FDB\u4ED3\u5E93\uFF09\u3002\u5DF2\u7ECF\u5728\u626B\u7684\u8BDD\u539F\u6837\u8FD4\u56DE\u3001\u4E0D\u8D77\u7B2C\u4E8C\u4E2A\u626B\u63CF\u4F1A\u8BDD\uFF1Bowner-only",
     args: DeployPersonaArgsSchema
   },
   "deploy:get": {
@@ -23884,7 +23896,7 @@ var METHOD_DOCS = {
     args: DeployPersonaArgsSchema
   },
   "deploy:patch": {
-    summary: "\u7F16\u8F91\u90E8\u7F72\u6587\u4EF6\uFF1A\u9009\u5C65\u7EA6\uFF08\u8C01\u51FA\u8FD9\u6761\u51ED\u636E\uFF09/ \u624B\u5DE5\u8865\u4F9D\u8D56\u3002**\u4E0D\u80FD\u4ECE\u8FD9\u91CC\u4F20\u51ED\u636E\u7684\u503C**\uFF08\u503C\u8D70 deploy:putSecret\uFF09\uFF1B\u5C65\u7EA6\u540D\u5FC5\u987B\u662F\u6E05\u5355\u91CC\u58F0\u660E\u8FC7\u7684\u51ED\u636E\uFF1Bowner-only",
+    summary: "\u7F16\u8F91\u90E8\u7F72\u6587\u4EF6\uFF1A\u624B\u5DE5\u8865\u4F9D\u8D56\u3002**\u4E0D\u80FD\u4ECE\u8FD9\u91CC\u4F20\u51ED\u636E\u7684\u503C**\uFF08\u503C\u8D70 deploy:putSecret\uFF09\uFF1Bowner-only",
     args: DeployPatchArgsSchema
   },
   "deploy:putSecret": {
@@ -23900,7 +23912,7 @@ var METHOD_DOCS = {
     args: DeployFinishScanArgsSchema
   },
   "deploy:release": {
-    summary: "\u53D1\u5E03 = \u63D0\u4EA4\u5E76\u63A8\u9001\u5230\u4ED3\u5E93\uFF1A\u91CD\u5199 workflow \u6A21\u677F \u2192 git add -A \u2192 \u7A7A\u63D0\u4EA4\u4E5F\u5141\u8BB8 \u2192 push\u3002\u4ED3\u5E93\u91CC\u7684\u6D41\u6C34\u7EBF\u63A5\u7740\u6784\u955C\u50CF\u3001\u5728\u96C6\u7FA4\u4E0A\u771F\u8D77\u4E00\u6B21\u3001\u767B\u8BB0\u6210\u6B63\u5F0F\uFF0C\u8FDB\u5EA6\u5728 GitHub Actions \u770B\u3002\u524D\u7F6E\uFF1A\u5DF2\u7ED1\u5B9A\u4ED3\u5E93\u3001\u6709\u6E05\u5355\u3001\u6BCF\u6761\u51ED\u636E\u90FD\u5B9A\u4E86\u5C65\u7EA6\u3001\u6BCF\u4E2A\u53D8\u91CF\u540D\u90FD\u5728 Secrets \u91CC\uFF1Bowner-only",
+    summary: "\u53D1\u5E03 = \u63D0\u4EA4\u5E76\u63A8\u9001\u5230\u4ED3\u5E93\uFF1A\u91CD\u5199 workflow \u6A21\u677F \u2192 git add -A \u2192 \u7A7A\u63D0\u4EA4\u4E5F\u5141\u8BB8 \u2192 push\u3002\u4ED3\u5E93\u91CC\u7684\u6D41\u6C34\u7EBF\u63A5\u7740\u6784\u955C\u50CF\u3001\u5728\u96C6\u7FA4\u4E0A\u771F\u8D77\u4E00\u6B21\u3001\u767B\u8BB0\u6210\u6B63\u5F0F\uFF0C\u8FDB\u5EA6\u5728 GitHub Actions \u770B\u3002\u524D\u7F6E\uFF1A\u5DF2\u7ED1\u5B9A\u4ED3\u5E93\u3001\u6709\u6E05\u5355\u3001\u6BCF\u4E2A\u53D8\u91CF\u540D\u90FD\u5728 Secrets \u91CC\uFF1Bowner-only",
     args: DeployPersonaArgsSchema
   },
   "shift:list": {
@@ -24279,6 +24291,14 @@ var METHOD_DOCS = {
     summary: "\u767B\u51FA\u98DE\u4E66\u8EAB\u4EFD\uFF08\u6E05 owner-identity \u843D\u76D8\uFF09\u3002owner-only",
     args: NO_ARGS
   },
+  "auth:apiKey:get": {
+    summary: "\u8BFB\u56DE\u81EA\u5DF1\u90A3\u628A\u4E91 persona \u8C03\u7528 key\uFF08\u6CA1\u53D1\u8FC7 \u2192 apiKey:null\uFF09\u3002daemon \u62FF\u672C\u673A\u767B\u5F55\u51ED\u8BC1\u5411\u4E2D\u5FC3\u4EE3\u53D6\uFF0C\u51ED\u8BC1\u4E0D\u51FA ws\u3002owner-only",
+    args: NO_ARGS
+  },
+  "auth:apiKey:regenerate": {
+    summary: "\u6362\u4E00\u628A\u65B0\u7684\u4E91 persona \u8C03\u7528 key\uFF0C**\u65E7\u7684\u5F53\u573A\u5931\u6548**\uFF08\u4E00\u4EBA\u4E00\u628A\uFF0C\u4E2D\u5FC3\u6309 union_id \u8986\u76D6\uFF09\u3002owner-only",
+    args: NO_ARGS
+  },
   "device:list": {
     summary: "\u5217\u51FA\u516C\u5171\u8BBE\u5907\u76EE\u5F55\u91CC\u53EF\u8FDE\u63A5\u7684\u8BBE\u5907\uFF08daemon \u4EE3\u7406\u4E2D\u5FC3 server\uFF09\u3002owner-only",
     args: NO_ARGS

package/dist/persona-defaults/persona-clawd-butler/.claude/skills/scan-persona-for-deploy/SKILL.md

@@ -82,7 +82,7 @@ call({ method: "deploy:reportFinding", args: {
 - 一份凭据含多个字段就把多个环境变量都列进 `env`（AK 是 id+secret 两个，supabase 是四个）
 - **绝对不要把凭据的值写进来**，哪怕你在文件里看到了明文的 key。你只报告「这里需要一份
   supabase 凭据」，值由老板另外填进仓库的 GitHub Secrets。看到明文 key 也不要复述它的内容。
-- **不要判断这条凭据该谁出**（部署者出还是使用者自带）。那是老板的决定，不是你能扫出来的。
+- **不要判断这条凭据该谁出**。凭据全部由部署者提供，清单只说需要什么。
 
 ### kind: "asset" —— persona 目录之外的共享资产