@clawos-dev/clawd 0.2.494 → 0.2.496

package/dist/app-builder-plugin/mcp-server.cjs

@@ -21409,7 +21409,14 @@ var DeployRepoSchema = external_exports.object({
   url: external_exports.string().min(1),
   branch: external_exports.string().min(1),
   head: external_exports.string().min(1),
-  /** 工作区有没有未提交的改动 */
+  /**
+   * persona 的**内容**有没有未提交的改动。
+   *
+   * **`.clawd/deploy.json` 不算**（daemon 侧 `repoInfo` 把它排出了 pathspec）：那个文件是
+   * 对 persona 的**断言**——扫描在写、页面上编辑清单也在写。算进来的话每扫一次就把自己
+   * 弄脏一次，`isScanFresh` 永远为假、发布再也点不亮。排除的只有这一个文件，
+   * `.clawd/` 下别的（persona.json 等）照旧算。
+   */
   dirty: external_exports.boolean(),
   /** 本地领先远端几个提交 */
   ahead: external_exports.number()

package/dist/cli.cjs

@@ -6104,7 +6104,14 @@ var init_deploy_schemas = __esm({
       url: external_exports.string().min(1),
       branch: external_exports.string().min(1),
       head: external_exports.string().min(1),
-      /** 工作区有没有未提交的改动 */
+      /**
+       * persona 的**内容**有没有未提交的改动。
+       *
+       * **`.clawd/deploy.json` 不算**（daemon 侧 `repoInfo` 把它排出了 pathspec）：那个文件是
+       * 对 persona 的**断言**——扫描在写、页面上编辑清单也在写。算进来的话每扫一次就把自己
+       * 弄脏一次，`isScanFresh` 永远为假、发布再也点不亮。排除的只有这一个文件，
+       * `.clawd/` 下别的（persona.json 等）照旧算。
+       */
       dirty: external_exports.boolean(),
       /** 本地领先远端几个提交 */
       ahead: external_exports.number()
@@ -55330,6 +55337,7 @@ var L = [
 var WORKFLOW_TEMPLATE = L.join("\n");
 
 // src/deploy/repo.ts
+var DEPLOY_FILE_REL = DEPLOY_FILE.split(import_node_path32.default.sep).join("/");
 var DEFAULT_TIMEOUT_MS3 = 6e4;
 var runCommand = (cmd, args, opts = {}) => new Promise((resolve9) => {
   const child = (0, import_node_child_process8.spawn)(cmd, args, {
@@ -55408,8 +55416,8 @@ async function repoInfo(exec, dir) {
   const url = origin.stdout.trim();
   const branch = (await git(exec, dir, ["rev-parse", "--abbrev-ref", "HEAD"])).stdout.trim() || "main";
   const head = (await git(exec, dir, ["rev-parse", "HEAD"])).stdout.trim() || "(\u8FD8\u6CA1\u6709\u63D0\u4EA4)";
-  const status = await git(exec, dir, ["status", "--porcelain"]);
-  const dirty = status.stdout.trim().length > 0;
+  const status = await git(exec, dir, ["status", "--porcelain", "--", ".", `:(exclude)${DEPLOY_FILE_REL}`]);
+  const dirty = status.spawnError !== void 0 || status.code !== 0 || status.stdout.trim().length > 0;
   const aheadRaw = await git(exec, dir, ["rev-list", "--count", "@{u}..HEAD"]);
   const ahead = aheadRaw.code === 0 ? Number(aheadRaw.stdout.trim()) || 0 : 0;
   return { url, branch, head, dirty, ahead };
@@ -55461,9 +55469,17 @@ async function ensureRepo(exec, args) {
     }
     throw new RepoError(`\u5EFA\u4ED3\u5E93\u6CA1\u6210\uFF08gh repo create \u9000\u51FA\u7801 ${r.code}\uFF09\uFF1A${err}`);
   }
+  await enableActions(exec, slug);
   const info = await repoInfo(exec, dir);
   return { created: true, url: info?.url ?? `https://github.com/${slug}` };
 }
+async function enableActions(exec, slug) {
+  await exec(
+    "gh",
+    ["api", "--method", "PUT", `repos/${slug}/actions/permissions`, "-F", "enabled=true", "-f", "allowed_actions=all"],
+    { timeoutMs: 3e4 }
+  );
+}
 async function setSecret(exec, args) {
   const info = await repoInfo(exec, args.dir);
   if (!info) throw new RepoError("\u8FD8\u6CA1\u6709\u4ED3\u5E93\uFF0CSecrets \u6CA1\u5730\u65B9\u5199");
@@ -55513,6 +55529,7 @@ async function commitAndPush(exec, args) {
 async function release(exec, args) {
   const info = await repoInfo(exec, args.dir);
   if (!info) throw new RepoError("\u8FD8\u6CA1\u6709\u4ED3\u5E93\uFF0C\u5148\u70B9\u4E00\u6B21\u300C\u53D1\u5E03\u5230\u4E91\u4E0A\u300D\u5EFA\u4ED3");
+  await enableActions(exec, repoSlug(info.url));
   await writeTemplates(args.dir);
   const identity = await identityArgs(exec, args.dir);
   await mustGit(exec, args.dir, ["add", "-A"], "\u6682\u5B58\u6587\u4EF6");
@@ -55777,7 +55794,6 @@ function buildDeployHandlers(deps) {
       hasUsableManifest: prevManifest !== void 0 && current?.status === "done",
       releasedHead: await hasCommit(deps.exec, dir, current?.releasedHead) ? current?.releasedHead : void 0
     });
-    if (scanBase.kind === "hard") await writeDeployFile(dir, emptyDeployFile());
     const startedAt = deps.now();
     const base = {
       evidence: scanBase.kind === "hard" ? [] : current?.evidence ?? [],
@@ -55797,6 +55813,7 @@ function buildDeployHandlers(deps) {
       ...scanBase.base ? { base: scanBase.base } : {}
     };
     await writeScan(dir, { status: "scanning", ...base });
+    if (scanBase.kind === "hard") await writeDeployFile(dir, emptyDeployFile());
     const started = deps.startScan(personaId2, scanBase);
     if ("sessionId" in started) {
       await writeScan(dir, { status: "scanning", scanSessionId: started.sessionId, ...base });
@@ -65603,7 +65620,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.494".length > 0 ? "0.2.494" : "dev";
+var version = "0.2.496".length > 0 ? "0.2.496" : "dev";
 
 // src/cli-probe/probe.ts
 var fs72 = __toESM(require("fs"), 1);

package/dist/dispatch/mcp-server.cjs

@@ -21402,7 +21402,14 @@ var DeployRepoSchema = external_exports.object({
   url: external_exports.string().min(1),
   branch: external_exports.string().min(1),
   head: external_exports.string().min(1),
-  /** 工作区有没有未提交的改动 */
+  /**
+   * persona 的**内容**有没有未提交的改动。
+   *
+   * **`.clawd/deploy.json` 不算**（daemon 侧 `repoInfo` 把它排出了 pathspec）：那个文件是
+   * 对 persona 的**断言**——扫描在写、页面上编辑清单也在写。算进来的话每扫一次就把自己
+   * 弄脏一次，`isScanFresh` 永远为假、发布再也点不亮。排除的只有这一个文件，
+   * `.clawd/` 下别的（persona.json 等）照旧算。
+   */
   dirty: external_exports.boolean(),
   /** 本地领先远端几个提交 */
   ahead: external_exports.number()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawos-dev/clawd",
-  "version": "0.2.494",
+  "version": "0.2.496",
   "description": "Standalone clawd daemon — Claude Code (and future Codex) session server over WebSocket",
   "type": "module",
   "license": "MIT",