@clawos-dev/clawd 0.2.495 → 0.2.497

package/dist/app-builder-plugin/mcp-server.cjs

@@ -24513,8 +24513,11 @@ var RpcMethodInfoSchema = external_exports.object({
   argsSchema: external_exports.record(external_exports.unknown()).optional(),
   /**
    * `denied` 必带：daemon error code（`UNAUTHORIZED` / `FEISHU_LOGIN_REQUIRED` /
-   * `METHOD_NOT_IMPLEMENTED`）。`conditional` 必带：谁来做二次校验。
-   * `allowed` 恒无。
+   * `METHOD_NOT_IMPLEMENTED`），外加一个不是 error code 的 `HUMAN_ONLY`——
+   * 「这条只认人手，去界面上点」（daemon `HUMAN_ONLY_METHODS`）。
+   * 它**故意**不复用 `UNAUTHORIZED`：这个字段是给 agent 看的，报 UNAUTHORIZED 它会去找
+   * 「我缺哪个授权」，而正确的反应是「让人来点」，两者该分得开。
+   * `conditional` 必带：谁来做二次校验。`allowed` 恒无。
    */
   reason: external_exports.string().optional()
 });

package/dist/cli.cjs

@@ -9473,8 +9473,11 @@ var init_methods = __esm({
       argsSchema: external_exports.record(external_exports.unknown()).optional(),
       /**
        * `denied` 必带：daemon error code（`UNAUTHORIZED` / `FEISHU_LOGIN_REQUIRED` /
-       * `METHOD_NOT_IMPLEMENTED`）。`conditional` 必带：谁来做二次校验。
-       * `allowed` 恒无。
+       * `METHOD_NOT_IMPLEMENTED`），外加一个不是 error code 的 `HUMAN_ONLY`——
+       * 「这条只认人手，去界面上点」（daemon `HUMAN_ONLY_METHODS`）。
+       * 它**故意**不复用 `UNAUTHORIZED`：这个字段是给 agent 看的，报 UNAUTHORIZED 它会去找
+       * 「我缺哪个授权」，而正确的反应是「让人来点」，两者该分得开。
+       * `conditional` 必带：谁来做二次校验。`allowed` 恒无。
        */
       reason: external_exports.string().optional()
     });
@@ -55469,9 +55472,17 @@ async function ensureRepo(exec, args) {
     }
     throw new RepoError(`\u5EFA\u4ED3\u5E93\u6CA1\u6210\uFF08gh repo create \u9000\u51FA\u7801 ${r.code}\uFF09\uFF1A${err}`);
   }
+  await enableActions(exec, slug);
   const info = await repoInfo(exec, dir);
   return { created: true, url: info?.url ?? `https://github.com/${slug}` };
 }
+async function enableActions(exec, slug) {
+  await exec(
+    "gh",
+    ["api", "--method", "PUT", `repos/${slug}/actions/permissions`, "-F", "enabled=true", "-f", "allowed_actions=all"],
+    { timeoutMs: 3e4 }
+  );
+}
 async function setSecret(exec, args) {
   const info = await repoInfo(exec, args.dir);
   if (!info) throw new RepoError("\u8FD8\u6CA1\u6709\u4ED3\u5E93\uFF0CSecrets \u6CA1\u5730\u65B9\u5199");
@@ -55521,6 +55532,7 @@ async function commitAndPush(exec, args) {
 async function release(exec, args) {
   const info = await repoInfo(exec, args.dir);
   if (!info) throw new RepoError("\u8FD8\u6CA1\u6709\u4ED3\u5E93\uFF0C\u5148\u70B9\u4E00\u6B21\u300C\u53D1\u5E03\u5230\u4E91\u4E0A\u300D\u5EFA\u4ED3");
+  await enableActions(exec, repoSlug(info.url));
   await writeTemplates(args.dir);
   const identity = await identityArgs(exec, args.dir);
   await mustGit(exec, args.dir, ["add", "-A"], "\u6682\u5B58\u6587\u4EF6");
@@ -59873,6 +59885,8 @@ var LocalWsServer = class {
     const subscribedSessions = /* @__PURE__ */ new Map();
     const handle = {
       id,
+      // 界面（桌面 UI / 安卓 / iOS）都从这里进来——人手入口
+      transport: "ws",
       subscribedSessions,
       send: (frame) => this.safeSend(socket, frame),
       close: (reason) => socket.close(1e3, reason ?? "closed")
@@ -65577,6 +65591,16 @@ var METHOD_GRANT_MAP = {
   "appBuilder:publish": CAPABILITY_SCOPED,
   "appBuilder:dismissPublishJob": CAPABILITY_SCOPED
 };
+var HUMAN_ONLY_METHODS = [
+  "deploy:start",
+  "deploy:release",
+  "deploy:putSecret",
+  "deploy:rerunJob"
+];
+var HUMAN_ONLY = new Set(HUMAN_ONLY_METHODS);
+function isHumanOnlyDenied(method, transport) {
+  return transport === "http" && HUMAN_ONLY.has(method);
+}
 function computeGrant(method) {
   const rule = METHOD_GRANT_MAP[method];
   if (!rule) return { kind: "public" };
@@ -65585,7 +65609,7 @@ function computeGrant(method) {
   return { kind: "check", resource: rule.resource, action: rule.action };
 }
 function computeMethodAccess(args) {
-  const { method, grants, feishuActive, isImplemented } = args;
+  const { method, grants, feishuActive, isImplemented, transport } = args;
   const description = METHOD_DOCS[method].summary;
   const argFields = methodArgFields(method);
   if (!isImplemented(method)) {
@@ -65594,6 +65618,9 @@ function computeMethodAccess(args) {
   if (!feishuActive && FEISHU_GATED_METHODS.includes(method)) {
     return { name: method, description, args: argFields, status: "denied", reason: "FEISHU_LOGIN_REQUIRED" };
   }
+  if (isHumanOnlyDenied(method, transport)) {
+    return { name: method, description, args: argFields, status: "denied", reason: "HUMAN_ONLY" };
+  }
   if (METHOD_GRANT_MAP[method]?.kind === "capability-scoped") {
     return {
       name: method,
@@ -65611,7 +65638,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.495".length > 0 ? "0.2.495" : "dev";
+var version = "0.2.497".length > 0 ? "0.2.497" : "dev";
 
 // src/cli-probe/probe.ts
 var fs72 = __toESM(require("fs"), 1);
@@ -65708,14 +65735,17 @@ function buildMetaHandlers(deps) {
   };
 }
 function buildMetaMethodsHandler(deps) {
-  return async (frame, _client, ctx) => {
+  return async (frame, client, ctx) => {
     const grants = ctx?.grants ?? [];
     const { method } = MetaMethodsArgs.parse(frame);
     const compute = (m2) => computeMethodAccess({
       method: m2,
       grants,
       feishuActive: deps.feishuActive(),
-      isImplemented: deps.isImplemented
+      isImplemented: deps.isImplemented,
+      // 只认人手的 method 对程序调用方报 denied（HUMAN_ONLY）——`list` tool 唯一的消费场景
+      // 就是 agent，让它一开始就看不见，省掉「先发现再撞墙」那一轮。
+      transport: client.transport
     });
     if (method !== void 0) {
       if (!isMethodName(method)) {
@@ -69261,6 +69291,12 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
       `${method} requires feishu login (People/remote identity)`
     );
   }
+  if (isHumanOnlyDenied(method, client.transport)) {
+    throw new ClawdError(
+      ERROR_CODES.UNAUTHORIZED,
+      `${method} \u53EA\u80FD\u4ECE\u754C\u9762\u4E0A\u70B9\u2014\u2014\u5B83\u4F1A\u5728\u7EC4\u7EC7\u91CC\u5EFA\u4ED3\u5E93 / \u628A\u955C\u50CF\u63A8\u4E0A\u7EBF / \u5199\u51ED\u636E\uFF0C\u4E0D\u63A5\u53D7\u7A0B\u5E8F\u8C03\u7528`
+    );
+  }
   const verdict = computeGrant(method);
   if (verdict.kind === "check") {
     const ok = assertGrant(ctx.grants, verdict.resource, verdict.action);
@@ -70960,6 +70996,8 @@ async function startDaemon(config) {
     dispatch: (method, body, ctx) => {
       const client = {
         id: "http-rpc",
+        // 本机 MCP server / 跨设备 peer / web 应用都从这条进来——程序入口，不是人手
+        transport: "http",
         subscribedSessions: /* @__PURE__ */ new Map(),
         send() {
         },

package/dist/dispatch/mcp-server.cjs

@@ -24505,8 +24505,11 @@ var RpcMethodInfoSchema = external_exports.object({
   argsSchema: external_exports.record(external_exports.unknown()).optional(),
   /**
    * `denied` 必带：daemon error code（`UNAUTHORIZED` / `FEISHU_LOGIN_REQUIRED` /
-   * `METHOD_NOT_IMPLEMENTED`）。`conditional` 必带：谁来做二次校验。
-   * `allowed` 恒无。
+   * `METHOD_NOT_IMPLEMENTED`），外加一个不是 error code 的 `HUMAN_ONLY`——
+   * 「这条只认人手，去界面上点」（daemon `HUMAN_ONLY_METHODS`）。
+   * 它**故意**不复用 `UNAUTHORIZED`：这个字段是给 agent 看的，报 UNAUTHORIZED 它会去找
+   * 「我缺哪个授权」，而正确的反应是「让人来点」，两者该分得开。
+   * `conditional` 必带：谁来做二次校验。`allowed` 恒无。
    */
   reason: external_exports.string().optional()
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawos-dev/clawd",
-  "version": "0.2.495",
+  "version": "0.2.497",
   "description": "Standalone clawd daemon — Claude Code (and future Codex) session server over WebSocket",
   "type": "module",
   "license": "MIT",