@clawos-dev/clawd 0.2.482 → 0.2.483

package/dist/app-builder-plugin/mcp-server.cjs

@@ -21374,6 +21374,29 @@ var DeploySecretPresenceSchema = external_exports.object({
   env: external_exports.string().min(1),
   setAt: external_exports.number().optional()
 }).strict();
+var DEPLOY_STAGE_STATUSES = ["pending", "running", "done", "failed", "waiting", "skipped"];
+var DeployStageStatusSchema = external_exports.enum(DEPLOY_STAGE_STATUSES);
+var DEPLOY_STAGE_KEYS = ["build", "smoke", "deploy"];
+var DeployStageKeySchema = external_exports.enum(DEPLOY_STAGE_KEYS);
+var DeployJobSchema = external_exports.object({
+  key: DeployStageKeySchema,
+  status: DeployStageStatusSchema,
+  /** 这个 job 在 GitHub 上的页面。还没跑起来的段没有 */
+  url: external_exports.string().optional(),
+  /** GitHub 的 job databaseId，`gh run rerun --job` 要用。还没跑起来的段没有 */
+  jobId: external_exports.number().optional(),
+  startedAt: external_exports.number().optional(),
+  completedAt: external_exports.number().optional()
+}).strict();
+var DeployRunSchema = external_exports.object({
+  runId: external_exports.number(),
+  headSha: external_exports.string().min(1),
+  /** run 整体只有三态。**别跟 job 的六态混用**：run 没有「跳过」也没有「等审批」 */
+  status: external_exports.enum(["queued", "running", "completed"]),
+  htmlUrl: external_exports.string().min(1),
+  /** run 刚入队时可能一条都还没有 */
+  jobs: external_exports.array(DeployJobSchema)
+}).strict();
 var DeployStateSchema = external_exports.object({
   personaId: external_exports.string().min(1),
   repo: DeployRepoSchema.optional(),
@@ -21381,6 +21404,11 @@ var DeployStateSchema = external_exports.object({
   scan: DeployScanSchema.optional(),
   /** 没仓库时缺席（查不了） */
   secrets: external_exports.array(DeploySecretPresenceSchema).optional(),
+  /**
+   * 最新那次流水线走到哪了。**缺席是常态**：没推过、gh 查不到、仓库还没有 run，
+   * 都不该让整页打不开——同 `secrets` 的处理。
+   */
+  run: DeployRunSchema.optional(),
   /**
    * `.clawd/deploy.json` 读不出来（人手改坏了）时的人话。有它就没有 `file`。
    * 页面据此给一条能走的路（重新扫描会整份重写），而不是白屏。
@@ -21408,6 +21436,11 @@ var DeployPutSecretArgsSchema = external_exports.object({
   // 环境变量名 → 值。key 必须是该 secret 声明过的 env 之一，handler 校验。
   values: external_exports.record(external_exports.string(), external_exports.string())
 }).strict();
+var DeployRerunJobArgsSchema = external_exports.object({
+  personaId: external_exports.string().min(1),
+  /** GitHub 的 job databaseId。**是数字**——字符串会在拼命令时静默出错 */
+  jobId: external_exports.number()
+}).strict();
 var DeployReportFindingArgsSchema = external_exports.object({
   personaId: external_exports.string().min(1),
   kind: external_exports.enum(["cli", "secret", "asset"]),
@@ -23923,6 +23956,10 @@ var METHOD_DOCS = {
     summary: "\u53D1\u5E03 = \u63D0\u4EA4\u5E76\u63A8\u9001\u5230\u4ED3\u5E93\uFF1A\u91CD\u5199 workflow \u6A21\u677F \u2192 git add -A \u2192 \u7A7A\u63D0\u4EA4\u4E5F\u5141\u8BB8 \u2192 push\u3002\u4ED3\u5E93\u91CC\u7684\u6D41\u6C34\u7EBF\u63A5\u7740\u6784\u955C\u50CF\u3001\u5728\u96C6\u7FA4\u4E0A\u771F\u8D77\u4E00\u6B21\u3001\u767B\u8BB0\u6210\u6B63\u5F0F\uFF0C\u8FDB\u5EA6\u5728 GitHub Actions \u770B\u3002\u524D\u7F6E\uFF1A\u5DF2\u7ED1\u5B9A\u4ED3\u5E93\u3001\u6709\u6E05\u5355\u3001\u6BCF\u4E2A\u53D8\u91CF\u540D\u90FD\u5728 Secrets \u91CC\uFF1Bowner-only",
     args: DeployPersonaArgsSchema
   },
+  "deploy:rerunJob": {
+    summary: "\u539F\u6837\u91CD\u8DD1\u6700\u65B0\u90A3\u6761\u6D41\u6C34\u7EBF\u91CC\u5931\u8D25\u7684\u67D0\u4E00\u6BB5\uFF08gh run rerun --job\uFF09\u3002**\u540C\u4E00\u4E2A commit\u3001\u540C\u4E00\u4EFD\u8F93\u5165**\uFF0C\u4E0D\u4EA7\u751F\u65B0\u63D0\u4EA4\u2014\u2014\u6539\u4E86 persona \u5185\u5BB9\u6216\u51ED\u636E\u8981\u8D70 deploy:release\u3002jobId \u5FC5\u987B\u5C5E\u4E8E\u6700\u65B0\u90A3\u6761 run\uFF1Bowner-only",
+    args: DeployRerunJobArgsSchema
+  },
   "shift:list": {
     summary: "\u5217\u51FA owner \u7684\u5168\u90E8 shift\uFF08\u6392\u73ED\uFF09\uFF0C\u7ED9 UI \u65E5\u5386\u6E32\u67D3\u7528\uFF1Bowner-only",
     args: NO_ARGS

package/dist/cli.cjs

@@ -6025,7 +6025,7 @@ var init_environment_schemas = __esm({
 function repoSlug(url) {
   return url.trim().replace(/^git@[^:]+:/, "").replace(/^https?:\/\/[^/]+\//, "").replace(/\.git$/, "");
 }
-var DeployFileSchema, DeployScanStatusSchema, DeployScanSchema, DeployRepoSchema, DeploySecretPresenceSchema, DeployStateSchema, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
+var DeployFileSchema, DeployScanStatusSchema, DeployScanSchema, DeployRepoSchema, DeploySecretPresenceSchema, DEPLOY_STAGE_STATUSES, DeployStageStatusSchema, DEPLOY_STAGE_KEYS, DeployStageKeySchema, DeployJobSchema, DeployRunSchema, DeployStateSchema, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeployRerunJobArgsSchema, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
 var init_deploy_schemas = __esm({
   "../protocol/src/deploy-schemas.ts"() {
     "use strict";
@@ -6061,6 +6061,29 @@ var init_deploy_schemas = __esm({
       env: external_exports.string().min(1),
       setAt: external_exports.number().optional()
     }).strict();
+    DEPLOY_STAGE_STATUSES = ["pending", "running", "done", "failed", "waiting", "skipped"];
+    DeployStageStatusSchema = external_exports.enum(DEPLOY_STAGE_STATUSES);
+    DEPLOY_STAGE_KEYS = ["build", "smoke", "deploy"];
+    DeployStageKeySchema = external_exports.enum(DEPLOY_STAGE_KEYS);
+    DeployJobSchema = external_exports.object({
+      key: DeployStageKeySchema,
+      status: DeployStageStatusSchema,
+      /** 这个 job 在 GitHub 上的页面。还没跑起来的段没有 */
+      url: external_exports.string().optional(),
+      /** GitHub 的 job databaseId，`gh run rerun --job` 要用。还没跑起来的段没有 */
+      jobId: external_exports.number().optional(),
+      startedAt: external_exports.number().optional(),
+      completedAt: external_exports.number().optional()
+    }).strict();
+    DeployRunSchema = external_exports.object({
+      runId: external_exports.number(),
+      headSha: external_exports.string().min(1),
+      /** run 整体只有三态。**别跟 job 的六态混用**：run 没有「跳过」也没有「等审批」 */
+      status: external_exports.enum(["queued", "running", "completed"]),
+      htmlUrl: external_exports.string().min(1),
+      /** run 刚入队时可能一条都还没有 */
+      jobs: external_exports.array(DeployJobSchema)
+    }).strict();
     DeployStateSchema = external_exports.object({
       personaId: external_exports.string().min(1),
       repo: DeployRepoSchema.optional(),
@@ -6068,6 +6091,11 @@ var init_deploy_schemas = __esm({
       scan: DeployScanSchema.optional(),
       /** 没仓库时缺席（查不了） */
       secrets: external_exports.array(DeploySecretPresenceSchema).optional(),
+      /**
+       * 最新那次流水线走到哪了。**缺席是常态**：没推过、gh 查不到、仓库还没有 run，
+       * 都不该让整页打不开——同 `secrets` 的处理。
+       */
+      run: DeployRunSchema.optional(),
       /**
        * `.clawd/deploy.json` 读不出来（人手改坏了）时的人话。有它就没有 `file`。
        * 页面据此给一条能走的路（重新扫描会整份重写），而不是白屏。
@@ -6095,6 +6123,11 @@ var init_deploy_schemas = __esm({
       // 环境变量名 → 值。key 必须是该 secret 声明过的 env 之一，handler 校验。
       values: external_exports.record(external_exports.string(), external_exports.string())
     }).strict();
+    DeployRerunJobArgsSchema = external_exports.object({
+      personaId: external_exports.string().min(1),
+      /** GitHub 的 job databaseId。**是数字**——字符串会在拼命令时静默出错 */
+      jobId: external_exports.number()
+    }).strict();
     DeployReportFindingArgsSchema = external_exports.object({
       personaId: external_exports.string().min(1),
       kind: external_exports.enum(["cli", "secret", "asset"]),
@@ -8875,6 +8908,10 @@ var init_methods = __esm({
         summary: "\u53D1\u5E03 = \u63D0\u4EA4\u5E76\u63A8\u9001\u5230\u4ED3\u5E93\uFF1A\u91CD\u5199 workflow \u6A21\u677F \u2192 git add -A \u2192 \u7A7A\u63D0\u4EA4\u4E5F\u5141\u8BB8 \u2192 push\u3002\u4ED3\u5E93\u91CC\u7684\u6D41\u6C34\u7EBF\u63A5\u7740\u6784\u955C\u50CF\u3001\u5728\u96C6\u7FA4\u4E0A\u771F\u8D77\u4E00\u6B21\u3001\u767B\u8BB0\u6210\u6B63\u5F0F\uFF0C\u8FDB\u5EA6\u5728 GitHub Actions \u770B\u3002\u524D\u7F6E\uFF1A\u5DF2\u7ED1\u5B9A\u4ED3\u5E93\u3001\u6709\u6E05\u5355\u3001\u6BCF\u4E2A\u53D8\u91CF\u540D\u90FD\u5728 Secrets \u91CC\uFF1Bowner-only",
         args: DeployPersonaArgsSchema
       },
+      "deploy:rerunJob": {
+        summary: "\u539F\u6837\u91CD\u8DD1\u6700\u65B0\u90A3\u6761\u6D41\u6C34\u7EBF\u91CC\u5931\u8D25\u7684\u67D0\u4E00\u6BB5\uFF08gh run rerun --job\uFF09\u3002**\u540C\u4E00\u4E2A commit\u3001\u540C\u4E00\u4EFD\u8F93\u5165**\uFF0C\u4E0D\u4EA7\u751F\u65B0\u63D0\u4EA4\u2014\u2014\u6539\u4E86 persona \u5185\u5BB9\u6216\u51ED\u636E\u8981\u8D70 deploy:release\u3002jobId \u5FC5\u987B\u5C5E\u4E8E\u6700\u65B0\u90A3\u6761 run\uFF1Bowner-only",
+        args: DeployRerunJobArgsSchema
+      },
       "shift:list": {
         summary: "\u5217\u51FA owner \u7684\u5168\u90E8 shift\uFF08\u6392\u73ED\uFF09\uFF0C\u7ED9 UI \u65E5\u5386\u6E32\u67D3\u7528\uFF1Bowner-only",
         args: NO_ARGS
@@ -54780,7 +54817,9 @@ var L = [
   "",
   "jobs:",
   "  build:",
-  "    name: build \u2014 \u6784 persona \u5C42\u955C\u50CF",
+  // name 就是段 key：daemon 按 jobs API 回的 name 认段（那接口不返回 job 的 key）。
+  // 中文说明归 clawd 的上云页面，这里保持机器好认。
+  "    name: build",
   "    runs-on: ubuntu-latest",
   "    timeout-minutes: 30",
   "    outputs:",
@@ -54886,7 +54925,7 @@ var L = [
   '        run: docker push "$REGISTRY/$IMAGE_NAME:${{ steps.plan.outputs.tag }}"',
   "",
   "  smoke:",
-  "    name: smoke \u2014 \u96C6\u7FA4\u4E0A\u771F\u8D77\u4E00\u6B21",
+  "    name: smoke",
   "    needs: build",
   "    runs-on: ubuntu-latest",
   "    timeout-minutes: 20",
@@ -54917,7 +54956,7 @@ var L = [
   "            --run-number '${{ github.run_number }}'",
   "",
   "  deploy:",
-  "    name: deploy \u2014 \u767B\u8BB0\u6210\u6B63\u5F0F",
+  "    name: deploy",
   "    needs: [build, smoke]",
   "    runs-on: ubuntu-latest",
   "    # \u4ED3\u5E93\u914D\u4E86 production \u73AF\u5883\u7684\u300C\u987B\u5BA1\u6838\u4EBA\u6279\u51C6\u300D\uFF0Cjob \u5C31\u505C\u5728\u8FD9\u91CC\u7B49\u4EBA\u70B9\uFF1B\u6CA1\u914D\u5C31\u76F4\u63A5\u8FC7\u3002",
@@ -55110,8 +55149,8 @@ async function listSecrets(exec, dir) {
     throw new RepoError(`gh secret list \u56DE\u7684\u4E0D\u662F JSON\uFF1A${tail(r.stdout, 200)}`);
   }
   return rows.filter((x) => typeof x.name === "string" && x.name.length > 0).map((x) => {
-    const at = x.updatedAt ? Date.parse(x.updatedAt) : Number.NaN;
-    return { env: x.name, ...Number.isFinite(at) ? { setAt: at } : {} };
+    const at2 = x.updatedAt ? Date.parse(x.updatedAt) : Number.NaN;
+    return { env: x.name, ...Number.isFinite(at2) ? { setAt: at2 } : {} };
   });
 }
 async function release(exec, args) {
@@ -55127,6 +55166,83 @@ async function release(exec, args) {
   return { sha, actionsUrl: `https://github.com/${repoSlug(info.url)}/actions` };
 }
 
+// src/deploy/run-status.ts
+init_protocol();
+var TIMEOUT_MS = 8e3;
+var pipelineJobKey = (name) => DEPLOY_STAGE_KEYS.find((k2) => name === k2 || name.startsWith(`${k2} `));
+function stageStatusOf(status, conclusion) {
+  if (status === "queued" || status === "requested" || status === "pending") return "pending";
+  if (status === "waiting") return "waiting";
+  if (status === "in_progress") return "running";
+  if (conclusion === "success") return "done";
+  if (conclusion === "skipped") return "skipped";
+  return "failed";
+}
+function runStatusOf(status) {
+  if (status === "completed") return "completed";
+  if (status === "queued" || status === "waiting" || status === "requested" || status === "pending") return "queued";
+  return "running";
+}
+async function ghJson(exec, path97) {
+  const r = await exec("gh", ["api", path97], { timeoutMs: TIMEOUT_MS });
+  if (r.spawnError || r.code !== 0) return void 0;
+  try {
+    return JSON.parse(r.stdout);
+  } catch {
+    return void 0;
+  }
+}
+function at(iso) {
+  if (typeof iso !== "string") return void 0;
+  const ms = Date.parse(iso);
+  return Number.isNaN(ms) ? void 0 : ms;
+}
+function toJob(raw) {
+  const name = typeof raw.name === "string" ? raw.name : "";
+  const key = pipelineJobKey(name);
+  if (key === void 0) return void 0;
+  const startedAt = at(raw.started_at);
+  const completedAt = at(raw.completed_at);
+  return {
+    key,
+    status: stageStatusOf(String(raw.status ?? ""), typeof raw.conclusion === "string" ? raw.conclusion : null),
+    ...typeof raw.html_url === "string" ? { url: raw.html_url } : {},
+    ...typeof raw.id === "number" ? { jobId: raw.id } : {},
+    ...startedAt !== void 0 ? { startedAt } : {},
+    ...completedAt !== void 0 ? { completedAt } : {}
+  };
+}
+async function latestRun(exec, slug) {
+  const listed = await ghJson(exec, `/repos/${slug}/actions/runs?per_page=1`);
+  const raw = listed?.workflow_runs?.[0];
+  if (!raw || typeof raw.id !== "number" || typeof raw.head_sha !== "string" || typeof raw.html_url !== "string") {
+    return void 0;
+  }
+  const runId = raw.id;
+  const listedJobs = await ghJson(exec, `/repos/${slug}/actions/runs/${runId}/jobs`);
+  const rawJobs = listedJobs?.jobs ?? [];
+  const byKey = /* @__PURE__ */ new Map();
+  for (const rawJob of rawJobs) {
+    const job = toJob(rawJob);
+    if (job) byKey.set(job.key, job);
+  }
+  return {
+    runId,
+    headSha: raw.head_sha,
+    status: runStatusOf(String(raw.status ?? "")),
+    htmlUrl: raw.html_url,
+    // 按流水线的顺序排，不跟着 GitHub 返回的顺序走
+    jobs: DEPLOY_STAGE_KEYS.map((k2) => byKey.get(k2)).filter((j) => j !== void 0)
+  };
+}
+async function rerunJob(exec, slug, runId, jobId) {
+  const r = await exec("gh", ["run", "rerun", String(runId), "--job", String(jobId), "--repo", slug], {
+    timeoutMs: TIMEOUT_MS
+  });
+  if (r.spawnError) throw new Error(`\u672C\u673A\u8DD1\u4E0D\u4E86 gh\uFF1A${r.spawnError}`);
+  if (r.code !== 0) throw new Error((r.stderr || r.stdout).trim().slice(-400) || `gh \u9000\u51FA\u7801 ${r.code}`);
+}
+
 // src/deploy/scan-task.ts
 var import_node_path32 = __toESM(require("path"), 1);
 var BUTLER_PERSONA_ID = "persona-clawd-butler";
@@ -55177,6 +55293,7 @@ function reconcileInterruptedScans(deps) {
 
 // src/handlers/deploy.ts
 var SECRETS_CACHE_MS = 2e4;
+var RUN_CACHE_MS = 4e3;
 function ensureOwner(ctx) {
   if (!ctx || ctx.principal.kind !== "owner") {
     throw new ClawdError(ERROR_CODES.UNAUTHORIZED, "UNAUTHORIZED: deploy:* requires owner ctx");
@@ -55197,6 +55314,7 @@ function mustBeScanning(scan, method) {
 function buildDeployHandlers(deps) {
   const cacheMs = deps.secretsCacheMs ?? SECRETS_CACHE_MS;
   const secretsCache = /* @__PURE__ */ new Map();
+  const runCache = /* @__PURE__ */ new Map();
   function mustPersona(personaId2) {
     if (!deps.hasPersona(personaId2)) {
       throw new ClawdError(ERROR_CODES.PERSONA_NOT_FOUND, `PERSONA_NOT_FOUND: \u6CA1\u6709\u8FD9\u4E2A persona\uFF08${personaId2}\uFF09`);
@@ -55227,12 +55345,20 @@ function buildDeployHandlers(deps) {
       scan = { ...scan, notes: stale ? [...kept, stale] : kept };
     }
     let secrets;
+    let run;
     if (repo2) {
       try {
         secrets = await cachedSecrets(personaId2, dir);
       } catch {
         secrets = void 0;
       }
+      const hit = runCache.get(personaId2);
+      if (hit && deps.now() - hit.at < RUN_CACHE_MS) {
+        run = hit.run;
+      } else {
+        run = await latestRun(deps.exec, repoSlug(repo2.url));
+        runCache.set(personaId2, { at: deps.now(), run });
+      }
     }
     return {
       personaId: personaId2,
@@ -55240,6 +55366,7 @@ function buildDeployHandlers(deps) {
       ...file ? { file } : {},
       ...scan ? { scan } : {},
       ...secrets ? { secrets } : {},
+      ...run ? { run } : {},
       ...fileError ? { fileError } : {}
     };
   }
@@ -55390,11 +55517,32 @@ function buildDeployHandlers(deps) {
     if (blockers.length > 0) throw invalid(`\u8FD8\u5DEE\uFF1A${blockers.join("\uFF1B")}`);
     try {
       const result = await release(deps.exec, { dir, now: deps.now });
+      runCache.delete(personaId2);
       return { response: { type: "deploy:release", ...result } };
     } catch (err) {
       throw toClawdError(err);
     }
   };
+  const rerunJobHandler = async (frame, _client, ctx) => {
+    ensureOwner(ctx);
+    const { personaId: personaId2, jobId } = parseArgs2(DeployRerunJobArgsSchema, frame, "deploy:rerunJob");
+    const dir = mustPersona(personaId2);
+    const repo2 = await repoInfo(deps.exec, dir);
+    if (!repo2) throw invalid("\u8FD8\u6CA1\u6709\u4ED3\u5E93\uFF0C\u5148\u70B9\u4E00\u6B21\u300C\u53D1\u5E03\u5230\u4E91\u4E0A\u300D\u5EFA\u4ED3");
+    const slug = repoSlug(repo2.url);
+    const run = await latestRun(deps.exec, slug);
+    if (!run) throw invalid("\u67E5\u4E0D\u5230\u8FD9\u4E2A\u4ED3\u5E93\u4E0A\u7684\u6D41\u6C34\u7EBF\uFF08gh \u6CA1\u54CD\u5E94\uFF0C\u6216\u8005\u8FD8\u6CA1\u8DD1\u8FC7\uFF09");
+    if (!run.jobs.some((j) => j.jobId === jobId)) {
+      throw invalid("\u8FD9\u4E00\u6BB5\u4E0D\u5728\u6700\u65B0\u90A3\u6761\u6D41\u6C34\u7EBF\u91CC\u4E86\uFF0C\u5237\u65B0\u4E00\u4E0B\u518D\u91CD\u8BD5");
+    }
+    try {
+      await rerunJob(deps.exec, slug, run.runId, jobId);
+      runCache.delete(personaId2);
+    } catch (err) {
+      throw new ClawdError(ERROR_CODES.INTERNAL, err instanceof Error ? err.message : String(err));
+    }
+    return view(personaId2);
+  };
   return {
     "deploy:start": start,
     "deploy:get": get,
@@ -55402,7 +55550,8 @@ function buildDeployHandlers(deps) {
     "deploy:putSecret": putSecret,
     "deploy:reportFinding": reportFinding,
     "deploy:finishScan": finishScan,
-    "deploy:release": releaseHandler
+    "deploy:release": releaseHandler,
+    "deploy:rerunJob": rerunJobHandler
   };
 }
 
@@ -62418,9 +62567,9 @@ function lineToSearchableText(raw) {
 function escapeRegExp(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function makeSnippet(text, at, needleLength) {
-  const from = Math.max(0, at - SNIPPET_PAD);
-  const to = Math.min(text.length, at + needleLength + SNIPPET_PAD);
+function makeSnippet(text, at2, needleLength) {
+  const from = Math.max(0, at2 - SNIPPET_PAD);
+  const to = Math.min(text.length, at2 + needleLength + SNIPPET_PAD);
   const body = text.slice(from, to).replace(/\s+/g, " ").trim();
   return `${from > 0 ? "\u2026 " : ""}${body}${to < text.length ? " \u2026" : ""}`;
 }
@@ -62448,9 +62597,9 @@ function searchTranscriptFile(file, query) {
     }
     const text = lineToSearchableText(parsed);
     if (text === null) continue;
-    const at = text.toLowerCase().indexOf(query.toLowerCase());
-    if (at < 0) continue;
-    return makeSnippet(text, at, query.length);
+    const at2 = text.toLowerCase().indexOf(query.toLowerCase());
+    if (at2 < 0) continue;
+    return makeSnippet(text, at2, query.length);
   }
   return null;
 }
@@ -64153,6 +64302,7 @@ var METHOD_GRANT_MAP = {
   "deploy:reportFinding": ADMIN_ANY,
   "deploy:finishScan": ADMIN_ANY,
   "deploy:release": ADMIN_ANY,
+  "deploy:rerunJob": ADMIN_ANY,
   // ---- session:* / chat:* 业务方法（v2 Phase 8 两层模型）----
   // dispatcher 不验资源，handler 内按 ctx + frame.args 反查 ownerPersonaId 调 assertGrant。
   // owner 自动通过（ctx 自带 '*':'admin' grant 一切 match）；guest 在被授权 persona 内可调。
@@ -64401,7 +64551,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.482".length > 0 ? "0.2.482" : "dev";
+var version = "0.2.483".length > 0 ? "0.2.483" : "dev";
 
 // src/cli-probe/probe.ts
 var fs70 = __toESM(require("fs"), 1);

package/dist/dispatch/mcp-server.cjs

@@ -21367,6 +21367,29 @@ var DeploySecretPresenceSchema = external_exports.object({
   env: external_exports.string().min(1),
   setAt: external_exports.number().optional()
 }).strict();
+var DEPLOY_STAGE_STATUSES = ["pending", "running", "done", "failed", "waiting", "skipped"];
+var DeployStageStatusSchema = external_exports.enum(DEPLOY_STAGE_STATUSES);
+var DEPLOY_STAGE_KEYS = ["build", "smoke", "deploy"];
+var DeployStageKeySchema = external_exports.enum(DEPLOY_STAGE_KEYS);
+var DeployJobSchema = external_exports.object({
+  key: DeployStageKeySchema,
+  status: DeployStageStatusSchema,
+  /** 这个 job 在 GitHub 上的页面。还没跑起来的段没有 */
+  url: external_exports.string().optional(),
+  /** GitHub 的 job databaseId，`gh run rerun --job` 要用。还没跑起来的段没有 */
+  jobId: external_exports.number().optional(),
+  startedAt: external_exports.number().optional(),
+  completedAt: external_exports.number().optional()
+}).strict();
+var DeployRunSchema = external_exports.object({
+  runId: external_exports.number(),
+  headSha: external_exports.string().min(1),
+  /** run 整体只有三态。**别跟 job 的六态混用**：run 没有「跳过」也没有「等审批」 */
+  status: external_exports.enum(["queued", "running", "completed"]),
+  htmlUrl: external_exports.string().min(1),
+  /** run 刚入队时可能一条都还没有 */
+  jobs: external_exports.array(DeployJobSchema)
+}).strict();
 var DeployStateSchema = external_exports.object({
   personaId: external_exports.string().min(1),
   repo: DeployRepoSchema.optional(),
@@ -21374,6 +21397,11 @@ var DeployStateSchema = external_exports.object({
   scan: DeployScanSchema.optional(),
   /** 没仓库时缺席（查不了） */
   secrets: external_exports.array(DeploySecretPresenceSchema).optional(),
+  /**
+   * 最新那次流水线走到哪了。**缺席是常态**：没推过、gh 查不到、仓库还没有 run，
+   * 都不该让整页打不开——同 `secrets` 的处理。
+   */
+  run: DeployRunSchema.optional(),
   /**
    * `.clawd/deploy.json` 读不出来（人手改坏了）时的人话。有它就没有 `file`。
    * 页面据此给一条能走的路（重新扫描会整份重写），而不是白屏。
@@ -21401,6 +21429,11 @@ var DeployPutSecretArgsSchema = external_exports.object({
   // 环境变量名 → 值。key 必须是该 secret 声明过的 env 之一，handler 校验。
   values: external_exports.record(external_exports.string(), external_exports.string())
 }).strict();
+var DeployRerunJobArgsSchema = external_exports.object({
+  personaId: external_exports.string().min(1),
+  /** GitHub 的 job databaseId。**是数字**——字符串会在拼命令时静默出错 */
+  jobId: external_exports.number()
+}).strict();
 var DeployReportFindingArgsSchema = external_exports.object({
   personaId: external_exports.string().min(1),
   kind: external_exports.enum(["cli", "secret", "asset"]),
@@ -23915,6 +23948,10 @@ var METHOD_DOCS = {
     summary: "\u53D1\u5E03 = \u63D0\u4EA4\u5E76\u63A8\u9001\u5230\u4ED3\u5E93\uFF1A\u91CD\u5199 workflow \u6A21\u677F \u2192 git add -A \u2192 \u7A7A\u63D0\u4EA4\u4E5F\u5141\u8BB8 \u2192 push\u3002\u4ED3\u5E93\u91CC\u7684\u6D41\u6C34\u7EBF\u63A5\u7740\u6784\u955C\u50CF\u3001\u5728\u96C6\u7FA4\u4E0A\u771F\u8D77\u4E00\u6B21\u3001\u767B\u8BB0\u6210\u6B63\u5F0F\uFF0C\u8FDB\u5EA6\u5728 GitHub Actions \u770B\u3002\u524D\u7F6E\uFF1A\u5DF2\u7ED1\u5B9A\u4ED3\u5E93\u3001\u6709\u6E05\u5355\u3001\u6BCF\u4E2A\u53D8\u91CF\u540D\u90FD\u5728 Secrets \u91CC\uFF1Bowner-only",
     args: DeployPersonaArgsSchema
   },
+  "deploy:rerunJob": {
+    summary: "\u539F\u6837\u91CD\u8DD1\u6700\u65B0\u90A3\u6761\u6D41\u6C34\u7EBF\u91CC\u5931\u8D25\u7684\u67D0\u4E00\u6BB5\uFF08gh run rerun --job\uFF09\u3002**\u540C\u4E00\u4E2A commit\u3001\u540C\u4E00\u4EFD\u8F93\u5165**\uFF0C\u4E0D\u4EA7\u751F\u65B0\u63D0\u4EA4\u2014\u2014\u6539\u4E86 persona \u5185\u5BB9\u6216\u51ED\u636E\u8981\u8D70 deploy:release\u3002jobId \u5FC5\u987B\u5C5E\u4E8E\u6700\u65B0\u90A3\u6761 run\uFF1Bowner-only",
+    args: DeployRerunJobArgsSchema
+  },
   "shift:list": {
     summary: "\u5217\u51FA owner \u7684\u5168\u90E8 shift\uFF08\u6392\u73ED\uFF09\uFF0C\u7ED9 UI \u65E5\u5386\u6E32\u67D3\u7528\uFF1Bowner-only",
     args: NO_ARGS