@clawos-dev/clawd 0.2.537 → 0.2.539

package/dist/app-builder-plugin/mcp-server.cjs

@@ -22835,6 +22835,13 @@ var EngineStatusResponseSchema = external_exports.object({
   /** daemon 手里这份模型表是什么时候查的（ms）；还没查过时缺席 */
   modelsLoadedAt: external_exports.number().optional()
 }).strict();
+var EngineConnectPoolArgs = external_exports.object({
+  /** 自助台发的个人 key（sk-…）。只进 daemon 子进程 env，不落日志、不回显 */
+  apiKey: external_exports.string().min(1)
+}).strict();
+var EngineConnectPoolResponseSchema = external_exports.object({
+  ok: external_exports.literal(true)
+}).strict();
 
 // ../protocol/src/persona-schemas.ts
 var PersonaFileSchema = external_exports.object({
@@ -24379,6 +24386,10 @@ var METHOD_DOCS = {
     summary: "\u67D0\u4E2A\u5F15\u64CE\uFF08claude / codex / pi\uFF09\u7684\u5B89\u88C5\u72B6\u6001 + \u8BA2\u9605 / \u767B\u5F55\u60C5\u51B5\uFF08claude auth status\u3001codex account/read + rateLimits\u3001pi auth.json \u51ED\u636E\u7C7B\u578B\uFF09+ \u6A21\u578B\u8868\u52A0\u8F7D\u65F6\u95F4\u3002\u4E00\u5F8B\u4E0D\u5E26 key / token \u503C\u3002owner-only",
     args: EngineStatusArgs
   },
+  "engine:connectPool": {
+    summary: "\u63A5\u5165\u53F7\u6C60\uFF1A\u62FF\u81EA\u52A9\u53F0\u53D1\u7684\u4E2A\u4EBA key\uFF0C\u62C9\u53F7\u6C60 setup.sh \u8DD1\u4E00\u904D\uFF08\u5199 ~/.codex/config.toml \u6307\u5411 CLIProxyAPI \u4EE3\u7406\uFF09\uFF0C\u518D\u5237 codex \u6A21\u578B\u8868\u9A8C\u8BC1\u3002\u6210\u529F\u56DE { ok:true }\uFF1B\u62FF\u4E0D\u5230\u811A\u672C / \u811A\u672C\u62A5\u9519 / \u8D85\u65F6 / 401 \u4E00\u5F8B reject \u5E26\u4EBA\u8BDD\u3002\u53EA\u7BA1 codex\uFF1B\u672C\u673A\u6CA1\u88C5 codex \u62A5 INVALID_PARAM\u3002owner-only",
+    args: EngineConnectPoolArgs
+  },
   "persona:create": {
     summary: "\u65B0\u5EFA persona\uFF08\u5199 PersonaFile + CLAUDE.md \u9AA8\u67B6\uFF09\u3002owner-only\u3002slug \u53EA\u6536\u5C0F\u5199\u5B57\u6BCD\u6570\u5B57\u4E0E\u5355\u8FDE\u5B57\u7B26\uFF08^[a-z0-9]+(-[a-z0-9]+)*$\uFF0C\u226432\uFF09\uFF0Cdaemon \u62FC\u6210 personaId=persona-<slug>\uFF1B\u8BE5 id \u5DF2\u5B58\u5728\u5219\u62A5\u9519\uFF0C\u4E0D\u81EA\u52A8\u6539\u540D\u3002label \u662F\u663E\u793A\u540D\uFF0C\u4E0D\u53C2\u4E0E id \u63A8\u5BFC\uFF0C\u53EF\u7528\u4E2D\u6587",
     args: PersonaCreateArgsSchema

package/dist/cli.cjs

@@ -7486,7 +7486,7 @@ var init_onboarding_schemas = __esm({
 });
 
 // ../protocol/src/engine-schemas.ts
-var EngineStatusArgs, RateLimitWindowSchema, EngineAccountSchema, EngineStatusResponseSchema;
+var EngineStatusArgs, RateLimitWindowSchema, EngineAccountSchema, EngineStatusResponseSchema, POOL_PORTAL_URL, EngineConnectPoolArgs, EngineConnectPoolResponseSchema;
 var init_engine_schemas = __esm({
   "../protocol/src/engine-schemas.ts"() {
     "use strict";
@@ -7558,6 +7558,14 @@ var init_engine_schemas = __esm({
       /** daemon 手里这份模型表是什么时候查的（ms）；还没查过时缺席 */
       modelsLoadedAt: external_exports.number().optional()
     }).strict();
+    POOL_PORTAL_URL = "https://cpa-portal-d417.app.clawos.chat";
+    EngineConnectPoolArgs = external_exports.object({
+      /** 自助台发的个人 key（sk-…）。只进 daemon 子进程 env，不落日志、不回显 */
+      apiKey: external_exports.string().min(1)
+    }).strict();
+    EngineConnectPoolResponseSchema = external_exports.object({
+      ok: external_exports.literal(true)
+    }).strict();
   }
 });
 
@@ -9205,6 +9213,10 @@ var init_methods = __esm({
         summary: "\u67D0\u4E2A\u5F15\u64CE\uFF08claude / codex / pi\uFF09\u7684\u5B89\u88C5\u72B6\u6001 + \u8BA2\u9605 / \u767B\u5F55\u60C5\u51B5\uFF08claude auth status\u3001codex account/read + rateLimits\u3001pi auth.json \u51ED\u636E\u7C7B\u578B\uFF09+ \u6A21\u578B\u8868\u52A0\u8F7D\u65F6\u95F4\u3002\u4E00\u5F8B\u4E0D\u5E26 key / token \u503C\u3002owner-only",
         args: EngineStatusArgs
       },
+      "engine:connectPool": {
+        summary: "\u63A5\u5165\u53F7\u6C60\uFF1A\u62FF\u81EA\u52A9\u53F0\u53D1\u7684\u4E2A\u4EBA key\uFF0C\u62C9\u53F7\u6C60 setup.sh \u8DD1\u4E00\u904D\uFF08\u5199 ~/.codex/config.toml \u6307\u5411 CLIProxyAPI \u4EE3\u7406\uFF09\uFF0C\u518D\u5237 codex \u6A21\u578B\u8868\u9A8C\u8BC1\u3002\u6210\u529F\u56DE { ok:true }\uFF1B\u62FF\u4E0D\u5230\u811A\u672C / \u811A\u672C\u62A5\u9519 / \u8D85\u65F6 / 401 \u4E00\u5F8B reject \u5E26\u4EBA\u8BDD\u3002\u53EA\u7BA1 codex\uFF1B\u672C\u673A\u6CA1\u88C5 codex \u62A5 INVALID_PARAM\u3002owner-only",
+        args: EngineConnectPoolArgs
+      },
       "persona:create": {
         summary: "\u65B0\u5EFA persona\uFF08\u5199 PersonaFile + CLAUDE.md \u9AA8\u67B6\uFF09\u3002owner-only\u3002slug \u53EA\u6536\u5C0F\u5199\u5B57\u6BCD\u6570\u5B57\u4E0E\u5355\u8FDE\u5B57\u7B26\uFF08^[a-z0-9]+(-[a-z0-9]+)*$\uFF0C\u226432\uFF09\uFF0Cdaemon \u62FC\u6210 personaId=persona-<slug>\uFF1B\u8BE5 id \u5DF2\u5B58\u5728\u5219\u62A5\u9519\uFF0C\u4E0D\u81EA\u52A8\u6539\u540D\u3002label \u662F\u663E\u793A\u540D\uFF0C\u4E0D\u53C2\u4E0E id \u63A8\u5BFC\uFF0C\u53EF\u7528\u4E2D\u6587",
         args: PersonaCreateArgsSchema
@@ -51285,7 +51297,7 @@ function createVisitorStore(opts) {
 init_claude();
 
 // src/tools/codex.ts
-var import_node_child_process6 = require("child_process");
+var import_node_child_process7 = require("child_process");
 var import_node_fs20 = __toESM(require("fs"), 1);
 
 // src/tools/codex-session.ts
@@ -52457,9 +52469,11 @@ function mergeProviderModels(native, provider) {
 }
 
 // src/tools/codex-provider-models.ts
+var import_node_child_process6 = require("child_process");
 var import_node_fs19 = __toESM(require("fs"), 1);
 var import_node_os8 = __toESM(require("os"), 1);
 var import_node_path19 = __toESM(require("path"), 1);
+var import_node_util = require("util");
 var PROVIDER_FETCH_TIMEOUT_MS = 3e3;
 function asRecord(v3) {
   return v3 && typeof v3 === "object" && !Array.isArray(v3) ? v3 : null;
@@ -52473,7 +52487,27 @@ function readAuthKey(codexHome) {
     return void 0;
   }
 }
-function resolveProviderEndpoint(rawConfig, deps = {}) {
+var defaultExecFile = (0, import_node_util.promisify)(import_node_child_process6.execFile);
+var AUTH_COMMAND_TIMEOUT_MS = 5e3;
+async function runAuthCommand(name, auth, deps) {
+  const command = typeof auth.command === "string" && auth.command ? auth.command : void 0;
+  if (!command) return void 0;
+  const args = Array.isArray(auth.args) ? auth.args.filter((a2) => typeof a2 === "string") : [];
+  const timeout = typeof auth.timeout_ms === "number" && auth.timeout_ms > 0 ? Math.min(auth.timeout_ms, AUTH_COMMAND_TIMEOUT_MS) : AUTH_COMMAND_TIMEOUT_MS;
+  const cwd = typeof auth.cwd === "string" && auth.cwd ? auth.cwd : void 0;
+  try {
+    const { stdout } = await deps.execFileImpl(command, args, { ...cwd ? { cwd } : {}, timeout });
+    const token = String(stdout).trim();
+    if (token) return token;
+    deps.logger?.warn?.(`provider "${name}": auth command \`${command}\` produced an empty token, sending unauthenticated`);
+  } catch (err) {
+    const e = err;
+    const why = e.killed ? `killed by ${e.signal ?? "signal"} (timeout ${timeout}ms)` : e.code !== void 0 ? `exit/code ${e.code}` : "failed";
+    deps.logger?.warn?.(`provider "${name}": auth command \`${command}\` ${why}, sending unauthenticated`);
+  }
+  return void 0;
+}
+async function resolveProviderEndpoint(rawConfig, deps = {}) {
   const config = asRecord(asRecord(rawConfig)?.config);
   if (!config) return null;
   const name = config.model_provider;
@@ -52485,8 +52519,15 @@ function resolveProviderEndpoint(rawConfig, deps = {}) {
   const env = deps.env ?? process.env;
   const codexHome = deps.codexHome ?? env.CODEX_HOME ?? import_node_path19.default.join(import_node_os8.default.homedir(), ".codex");
   const envKey = typeof entry.env_key === "string" && entry.env_key ? entry.env_key : null;
-  const token = envKey ? env[envKey] : readAuthKey(codexHome);
-  if (!token) {
+  const inlineToken = typeof entry.experimental_bearer_token === "string" && entry.experimental_bearer_token ? entry.experimental_bearer_token : void 0;
+  const auth = asRecord(entry.auth);
+  let token;
+  if (envKey) token = env[envKey];
+  else if (inlineToken) token = inlineToken;
+  else if (auth && typeof auth.command === "string" && auth.command) {
+    token = await runAuthCommand(name, auth, { execFileImpl: deps.execFileImpl ?? defaultExecFile, ...deps.logger ? { logger: deps.logger } : {} });
+  } else token = readAuthKey(codexHome);
+  if (!token && !(auth && typeof auth.command === "string" && auth.command)) {
     deps.logger?.warn?.(
       envKey ? `provider "${name}": env_key ${envKey} is not set in the daemon process, sending unauthenticated` : `provider "${name}": no OPENAI_API_KEY in ${codexHome}/auth.json, sending unauthenticated`
     );
@@ -52593,7 +52634,7 @@ function sanitizeCodexModel(model) {
 async function probeCodex(env = process.env) {
   if (env.CODEX_BIN && import_node_fs20.default.existsSync(env.CODEX_BIN)) return { available: true, path: env.CODEX_BIN };
   try {
-    const out = (0, import_node_child_process6.execFileSync)("which", ["codex"], { encoding: "utf8" }).trim();
+    const out = (0, import_node_child_process7.execFileSync)("which", ["codex"], { encoding: "utf8" }).trim();
     if (out && import_node_fs20.default.existsSync(out)) return { available: true, path: out };
   } catch {
   }
@@ -52671,7 +52712,7 @@ var CodexAdapter = class {
       const raw = this.configQueryOverride ? await this.configQueryOverride() : await queryCodexAppServer(process.cwd(), "config/read", {}, {
         timeoutMs: PROVIDER_FETCH_TIMEOUT_MS
       });
-      const endpoint = resolveProviderEndpoint(raw, {
+      const endpoint = await resolveProviderEndpoint(raw, {
         ...this.logger ? { logger: this.logger } : {}
       });
       if (!endpoint) return [];
@@ -54927,7 +54968,7 @@ function createShiftStore(deps) {
 }
 
 // src/github/gh.ts
-var import_node_child_process7 = require("child_process");
+var import_node_child_process8 = require("child_process");
 var GhError = class extends Error {
   constructor(kind, message, stderr) {
     super(message);
@@ -54942,12 +54983,12 @@ var DEFAULT_TIMEOUT_MS2 = 15e3;
 var MAX_BUFFER = 4 * 1024 * 1024;
 function createGhRunner(defaults) {
   const baseTimeoutMs = defaults?.timeoutMs ?? DEFAULT_TIMEOUT_MS2;
-  const spawn14 = defaults?.execFile ?? import_node_child_process7.execFile;
+  const spawn15 = defaults?.execFile ?? import_node_child_process8.execFile;
   return {
     run(args, opts) {
       const token = defaults?.token?.();
       return new Promise((resolve9, reject) => {
-        spawn14(
+        spawn15(
           "gh",
           args,
           {
@@ -59377,10 +59418,10 @@ var L2 = [
 var WORKFLOW_TEMPLATE = L2.join("\n");
 
 // src/deploy/exec.ts
-var import_node_child_process8 = require("child_process");
+var import_node_child_process9 = require("child_process");
 var DEFAULT_TIMEOUT_MS3 = 6e4;
 var runCommand = (cmd, args, opts = {}) => new Promise((resolve9) => {
-  const child = (0, import_node_child_process8.spawn)(cmd, args, {
+  const child = (0, import_node_child_process9.spawn)(cmd, args, {
     cwd: opts.cwd,
     ...opts.env ? { env: { ...process.env, ...opts.env } } : {},
     stdio: [opts.stdin === void 0 ? "ignore" : "pipe", "pipe", "pipe"]
@@ -62420,7 +62461,7 @@ var GATEWAY_ROUTES = {
   healthz: () => "/healthz",
   session: (personaId2) => `/p/${encodeURIComponent(personaId2)}/session`,
   sessionSend: (personaId2, sessionId) => `/p/${encodeURIComponent(personaId2)}/session/${encodeURIComponent(sessionId)}`,
-  // 历史文件不挂在 persona 下：使用者的 codex-home 卷跨 persona 共用（design 2026-09-14-codex-native-memories §3.2f）
+  // 历史文件不挂在 persona 下：使用者卷跨 persona 共用（design 2026-09-14-codex-native-memories §3.2f）
   thread: (threadId) => `/threads/${encodeURIComponent(threadId)}`
 };
 var trimSlash = (u2) => u2.replace(/\/+$/, "");
@@ -62951,7 +62992,7 @@ var CloudCodexAdapter = class {
 };
 
 // src/tools/pi.ts
-var import_node_child_process10 = require("child_process");
+var import_node_child_process11 = require("child_process");
 var import_node_fs37 = __toESM(require("fs"), 1);
 init_protocol();
 
@@ -63029,7 +63070,7 @@ var PiRpcClient = class {
 };
 
 // src/tools/pi-session.ts
-var import_node_child_process9 = require("child_process");
+var import_node_child_process10 = require("child_process");
 var import_node_crypto9 = require("crypto");
 var import_node_fs35 = __toESM(require("fs"), 1);
 var import_node_path40 = __toESM(require("path"), 1);
@@ -63221,7 +63262,7 @@ function createPiSession(ctx, sink, deps = {}) {
     ...ctx.env,
     ...deps.mcpBridgePath ? { [PI_MCP_CONFIGS_ENV]: JSON.stringify((ctx.mcpConfigs ?? []).map((m3) => m3.path)) } : {}
   };
-  const proc = deps.spawnOverride ? deps.spawnOverride(cmd, args, ctx.cwd, env) : (0, import_node_child_process9.spawn)(cmd, args, { cwd: ctx.cwd, env, stdio: ["pipe", "pipe", "pipe"] });
+  const proc = deps.spawnOverride ? deps.spawnOverride(cmd, args, ctx.cwd, env) : (0, import_node_child_process10.spawn)(cmd, args, { cwd: ctx.cwd, env, stdio: ["pipe", "pipe", "pipe"] });
   const alive = () => proc.exitCode === null && proc.signalCode === null;
   const st2 = createPiTranslatorState();
   let busy = false;
@@ -63541,7 +63582,7 @@ var PI_FULL_ACCESS = { id: "never", label: "Full Access", description: "pi \u65E
 async function probePi(env = process.env) {
   if (env.PI_BIN && import_node_fs37.default.existsSync(env.PI_BIN)) return { available: true, path: env.PI_BIN };
   try {
-    const out = (0, import_node_child_process10.execFileSync)("which", ["pi"], { encoding: "utf8" }).trim();
+    const out = (0, import_node_child_process11.execFileSync)("which", ["pi"], { encoding: "utf8" }).trim();
     if (out && import_node_fs37.default.existsSync(out)) return { available: true, path: out };
   } catch {
   }
@@ -63609,7 +63650,7 @@ function buildPiCapabilities(models) {
 async function queryPiModels(deps = {}) {
   const cmd = process.env.PI_BIN ?? "pi";
   const args = ["--mode", "rpc", "--no-session", "--no-skills", "--no-context-files"];
-  const proc = deps.spawnOverride ? deps.spawnOverride(cmd, args) : (0, import_node_child_process10.spawn)(cmd, args, { stdio: ["pipe", "pipe", "pipe"] });
+  const proc = deps.spawnOverride ? deps.spawnOverride(cmd, args) : (0, import_node_child_process11.spawn)(cmd, args, { stdio: ["pipe", "pipe", "pipe"] });
   proc.stdin?.on("error", () => {
   });
   const client = new PiRpcClient(proc);
@@ -64494,7 +64535,7 @@ function listRegistered() {
 }
 
 // src/tools/title-generator.ts
-var import_node_child_process11 = require("child_process");
+var import_node_child_process12 = require("child_process");
 init_protocol();
 var import_node_fs42 = __toESM(require("fs"), 1);
 var import_node_os15 = __toESM(require("os"), 1);
@@ -64591,7 +64632,7 @@ async function generateSessionTitle(tool, firstMessage, deps = {}) {
   }
   const cmd = tool === "claude" ? process.env.CLAUDE_BIN ?? "claude" : process.env.CODEX_BIN ?? "codex";
   const args = tool === "claude" ? buildClaudeTitleArgs(buildClaudeTitlePrompt(text)) : buildCodexTitleArgs(buildTitlePrompt(text), outFile, schemaFile);
-  const doSpawn = deps.spawnOverride ?? ((c2, a2, o2) => (0, import_node_child_process11.spawn)(c2, a2, { ...o2, stdio: ["ignore", "pipe", "pipe"] }));
+  const doSpawn = deps.spawnOverride ?? ((c2, a2, o2) => (0, import_node_child_process12.spawn)(c2, a2, { ...o2, stdio: ["ignore", "pipe", "pipe"] }));
   const timeoutMs = deps.timeoutMs ?? DEFAULT_TITLE_GEN_TIMEOUT_MS;
   return await new Promise((resolve9) => {
     let proc;
@@ -66945,7 +66986,7 @@ function readSpawnedByDesktopFromEnv(env = process.env) {
 var import_node_fs51 = __toESM(require("fs"), 1);
 var import_node_path57 = __toESM(require("path"), 1);
 var import_node_crypto13 = __toESM(require("crypto"), 1);
-var import_node_child_process14 = require("child_process");
+var import_node_child_process15 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
 var import_node_fs48 = __toESM(require("fs"), 1);
@@ -67081,7 +67122,7 @@ function escape2(v3) {
 var import_node_fs49 = __toESM(require("fs"), 1);
 var import_node_os17 = __toESM(require("os"), 1);
 var import_node_path55 = __toESM(require("path"), 1);
-var import_node_child_process12 = require("child_process");
+var import_node_child_process13 = require("child_process");
 var import_node_stream3 = require("stream");
 var import_promises9 = require("stream/promises");
 var FRPC_VERSION = "0.68.0";
@@ -67181,7 +67222,7 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
   import_node_fs49.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve9, reject) => {
-      const proc = (0, import_node_child_process12.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
+      const proc = (0, import_node_child_process13.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
       proc.on("error", reject);
       proc.on("exit", (code) => code === 0 ? resolve9() : reject(new Error(`tar exited ${code}`)));
     });
@@ -67199,7 +67240,7 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
 // src/tunnel/frpc-process.ts
 var import_node_fs50 = __toESM(require("fs"), 1);
 var import_node_path56 = __toESM(require("path"), 1);
-var import_node_child_process13 = require("child_process");
+var import_node_child_process14 = require("child_process");
 function frpcPidFilePath(dataDir) {
   return import_node_path56.default.join(dataDir, "frpc.pid");
 }
@@ -67285,7 +67326,7 @@ async function killStaleFrpc(deps) {
 async function defaultScanFrpcPidsByCmdline(tomlPath, logger) {
   if (process.platform === "win32") return [];
   return new Promise((resolve9) => {
-    const ps = (0, import_node_child_process13.spawn)("ps", ["-axo", "pid=,command="], { stdio: ["ignore", "pipe", "ignore"] });
+    const ps = (0, import_node_child_process14.spawn)("ps", ["-axo", "pid=,command="], { stdio: ["ignore", "pipe", "ignore"] });
     let buf = "";
     ps.stdout.on("data", (c2) => {
       buf += c2.toString();
@@ -67454,7 +67495,7 @@ var TunnelManager = class {
         logLevel: "info"
       });
       await import_node_fs51.default.promises.writeFile(tomlPath, toml, { mode: 384 });
-      const proc = (this.deps.spawnImpl ?? import_node_child_process14.spawn)(frpcBin, ["-c", tomlPath], {
+      const proc = (this.deps.spawnImpl ?? import_node_child_process15.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
       const logDir = import_node_path57.default.join(this.deps.dataDir, "log");
@@ -68342,7 +68383,7 @@ var import_promises10 = __toESM(require("fs/promises"), 1);
 var import_node_os21 = __toESM(require("os"), 1);
 var import_node_path63 = __toESM(require("path"), 1);
 var import_node_module = require("module");
-var import_node_child_process15 = require("child_process");
+var import_node_child_process16 = require("child_process");
 var import_meta6 = {};
 function defaultRoots() {
   const home = import_node_os21.default.homedir();
@@ -68510,14 +68551,14 @@ function readCodexThreads(db) {
   } catch {
   }
   try {
-    const info = (0, import_node_child_process15.spawnSync)("sqlite3", [db, "PRAGMA table_info(threads);"], { encoding: "utf8" });
+    const info = (0, import_node_child_process16.spawnSync)("sqlite3", [db, "PRAGMA table_info(threads);"], { encoding: "utf8" });
     if (info.status !== 0) return null;
     const have = new Set(
       info.stdout.split("\n").map((l2) => l2.split("|")[1]).filter(Boolean)
     );
     if (!["id", "cwd", "updated_at", "thread_source"].every((c2) => have.has(c2))) return null;
     const sel = COLS.map((c2) => have.has(c2) ? c2 : `NULL AS ${c2}`).join(", ");
-    const res = (0, import_node_child_process15.spawnSync)("sqlite3", ["-json", db, `SELECT ${sel} FROM threads;`], {
+    const res = (0, import_node_child_process16.spawnSync)("sqlite3", ["-json", db, `SELECT ${sel} FROM threads;`], {
       encoding: "utf8",
       maxBuffer: 64 * 1024 * 1024
     });
@@ -69352,7 +69393,7 @@ function buildHistoryHandlers(deps) {
 var fs75 = __toESM(require("fs"), 1);
 var os23 = __toESM(require("os"), 1);
 var path80 = __toESM(require("path"), 1);
-var import_node_child_process16 = require("child_process");
+var import_node_child_process17 = require("child_process");
 init_protocol();
 var DEFAULT_PROJECTS_ROOT = path80.join(os23.homedir(), "Documents", "ChatGPT");
 function allocateDir(root, name) {
@@ -69391,7 +69432,7 @@ function buildProjectHandlers(deps) {
     } catch {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `not a directory: ${args.path}`);
     }
-    const r2 = (0, import_node_child_process16.spawnSync)("open", ["-R", args.path], { stdio: "ignore" });
+    const r2 = (0, import_node_child_process17.spawnSync)("open", ["-R", args.path], { stdio: "ignore" });
     if (r2.status !== 0) {
       throw new ClawdError(ERROR_CODES.INVALID_CWD, `open -R \u5931\u8D25: exit ${r2.status}`);
     }
@@ -69417,7 +69458,7 @@ function buildProjectHandlers(deps) {
       } catch (err) {
         throw new ClawdError(ERROR_CODES.INVALID_CWD, `\u521B\u5EFA\u9879\u76EE\u76EE\u5F55\u5931\u8D25: ${String(err)}`);
       }
-      const git2 = (0, import_node_child_process16.spawnSync)("git", ["init"], { cwd: target, stdio: "ignore" });
+      const git2 = (0, import_node_child_process17.spawnSync)("git", ["init"], { cwd: target, stdio: "ignore" });
       if (git2.status !== 0) {
         fs75.rmSync(target, { recursive: true, force: true });
         throw new ClawdError(
@@ -69541,11 +69582,11 @@ init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
-var import_node_child_process17 = require("child_process");
+var import_node_child_process18 = require("child_process");
 var import_node_fs58 = __toESM(require("fs"), 1);
 var import_node_path65 = __toESM(require("path"), 1);
-var import_node_util = require("util");
-var pexec = (0, import_node_util.promisify)(import_node_child_process17.execFile);
+var import_node_util2 = require("util");
+var pexec = (0, import_node_util2.promisify)(import_node_child_process18.execFile);
 function normalizePath(p3) {
   const resolved = import_node_path65.default.resolve(p3);
   try {
@@ -69675,18 +69716,18 @@ function buildCapabilitiesHandlers(deps) {
 init_protocol();
 
 // src/tools/version-probe.ts
-var import_node_child_process19 = require("child_process");
+var import_node_child_process20 = require("child_process");
 init_claude();
 init_protocol();
 
 // src/tools/shell-path.ts
-var import_node_child_process18 = require("child_process");
+var import_node_child_process19 = require("child_process");
 var import_node_os22 = __toESM(require("os"), 1);
 function refreshPathFromLoginShell() {
   if (process.platform === "win32") return;
   const shell = process.env.SHELL ?? import_node_os22.default.userInfo().shell ?? "/bin/zsh";
   try {
-    const out = (0, import_node_child_process18.execFileSync)(shell, ["-ilc", 'command echo -n "$PATH"'], {
+    const out = (0, import_node_child_process19.execFileSync)(shell, ["-ilc", 'command echo -n "$PATH"'], {
       encoding: "utf8",
       timeout: 3e3,
       stdio: ["ignore", "pipe", "ignore"]
@@ -69703,7 +69744,7 @@ function parseVersionOutput(out) {
 }
 function execVersion(bin) {
   return new Promise((resolve9, reject) => {
-    (0, import_node_child_process19.execFile)(bin, ["--version"], { timeout: 5e3 }, (err, stdout) => {
+    (0, import_node_child_process20.execFile)(bin, ["--version"], { timeout: 5e3 }, (err, stdout) => {
       if (err) reject(err);
       else resolve9(String(stdout));
     });
@@ -69735,8 +69776,79 @@ async function probeToolVersions(opts = {}) {
   return out;
 }
 
+// src/tools/pool-connect.ts
+var import_node_child_process21 = require("child_process");
+init_protocol();
+var POOL_SETUP_SCRIPT_PATH = "/api/setup.sh";
+var POOL_SCRIPT_FETCH_TIMEOUT_MS = 5e3;
+var POOL_SCRIPT_RUN_TIMEOUT_MS = 1e4;
+async function runPoolSetupScript(opts, deps = {}) {
+  const script = await fetchScript(deps);
+  return runScript(script, opts.apiKey, deps);
+}
+async function fetchScript(deps) {
+  const fetchImpl = deps.fetchImpl ?? fetch;
+  const url = `${POOL_PORTAL_URL}${POOL_SETUP_SCRIPT_PATH}`;
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), deps.fetchTimeoutMs ?? POOL_SCRIPT_FETCH_TIMEOUT_MS);
+  try {
+    const res = await fetchImpl(url, { signal: controller.signal });
+    if (!res.ok) throw new Error(`HTTP ${res.status}`);
+    return await res.text();
+  } catch (err) {
+    throw new Error(`\u62FF\u4E0D\u5230\u53F7\u6C60\u811A\u672C\uFF1A${err.message} (${url})`);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function runScript(script, apiKey, deps) {
+  return new Promise((resolve9, reject) => {
+    const proc = (0, import_node_child_process21.spawn)("bash", ["-s"], {
+      env: { ...deps.env ?? process.env, CPA_KEY: apiKey, CPA_MODE: "api" },
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+    let stdout = "";
+    let stderr = "";
+    let settled = false;
+    const timeoutMs = deps.scriptTimeoutMs ?? POOL_SCRIPT_RUN_TIMEOUT_MS;
+    const timer = setTimeout(() => {
+      if (settled) return;
+      settled = true;
+      proc.kill("SIGTERM");
+      reject(new Error(`\u53F7\u6C60\u811A\u672C\u8D85\u65F6\uFF08${Math.round(timeoutMs / 1e3)}s \u6CA1\u8DD1\u5B8C\uFF09`));
+    }, timeoutMs);
+    const redact = (s2) => s2.split(apiKey).join("***");
+    proc.stdout.on("data", (d2) => {
+      stdout += d2.toString();
+    });
+    proc.stderr.on("data", (d2) => {
+      stderr += d2.toString();
+    });
+    proc.on("error", (err) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      reject(new Error(`\u8D77\u4E0D\u6765 bash\uFF1A${err.message}`));
+    });
+    proc.on("close", (code) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      if (code === 0) {
+        resolve9({ stdout: redact(stdout) });
+        return;
+      }
+      const lastLine = stderr.trim().split("\n").filter(Boolean).pop();
+      reject(new Error(lastLine ? redact(lastLine) : `\u53F7\u6C60\u811A\u672C\u5931\u8D25\uFF08\u9000\u51FA\u7801 ${code}\uFF09`));
+    });
+    proc.stdin.on("error", () => {
+    });
+    proc.stdin.end(script);
+  });
+}
+
 // src/tools/claude-auth-status.ts
-var import_node_child_process20 = require("child_process");
+var import_node_child_process22 = require("child_process");
 var str5 = (v3) => typeof v3 === "string" && v3 ? v3 : void 0;
 function mapClaudeAuthStatus(raw) {
   if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
@@ -69759,7 +69871,7 @@ function mapClaudeAuthStatus(raw) {
   };
 }
 async function queryClaudeAuthStatus(deps = {}) {
-  const run = deps.execFileImpl ?? import_node_child_process20.execFile;
+  const run = deps.execFileImpl ?? import_node_child_process22.execFile;
   const env = deps.env ?? process.env;
   const bin = env.CLAUDE_BIN ?? "claude";
   const stdout = await new Promise((resolve9, reject) => {
@@ -69881,6 +69993,7 @@ function buildEngineHandlers(deps, overrides = {}) {
     ...overrides.probes
   };
   const probeTools = overrides.probeTools ?? probeToolVersions;
+  const runScript2 = overrides.runScript ?? runPoolSetupScript;
   const status = async (frame) => {
     const { tool } = parseArgs2(EngineStatusArgs, frame, "engine:status");
     const probed = (await probeTools()).find((t2) => t2.id === tool);
@@ -69903,7 +70016,17 @@ function buildEngineHandlers(deps, overrides = {}) {
       return { response: { ...withLoadedAt(), error: err.message } };
     }
   };
-  return { "engine:status": status };
+  const connectPool = async (frame) => {
+    const { apiKey } = parseArgs2(EngineConnectPoolArgs, frame, "engine:connectPool");
+    const codex = (await probeTools()).find((t2) => t2.id === "codex");
+    if (!codex?.available) {
+      throw new ClawdError(ERROR_CODES.INVALID_PARAM, "\u672C\u673A\u6CA1\u88C5 Codex\uFF0C\u53F7\u6C60\u53EA\u670D\u52A1 Codex");
+    }
+    await runScript2({ apiKey });
+    await deps.manager.getCapabilities("codex", { refresh: true });
+    return { response: { ok: true } };
+  };
+  return { "engine:status": status, "engine:connectPool": connectPool };
 }
 
 // src/handlers/inbox.ts
@@ -70671,6 +70794,8 @@ var METHOD_GRANT_MAP = {
   "capabilities:get": ADMIN_ANY,
   // engine:status（设置 → 账号「引擎」，spec 2026-09-17-engine-status）：回账号邮箱 / 订阅档，与 githubAuth:get 同档，guest 够不着
   "engine:status": ADMIN_ANY,
+  // engine:connectPool（接入号池，spec 2026-09-17-onboarding-pool-key）：改本机 ~/.codex/config.toml，owner-only
+  "engine:connectPool": ADMIN_ANY,
   "persona:create": ADMIN_ANY,
   // persona:list / persona:get 下沉到 CAPABILITY_SCOPED：guest 调用合法
   // （list 用于 People 面板展开对方分享的 personas；get 用于 guest 视角下
@@ -70785,7 +70910,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.537".length > 0 ? "0.2.537" : "dev";
+var version = "0.2.539".length > 0 ? "0.2.539" : "dev";
 
 // src/cli-probe/probe.ts
 var fs78 = __toESM(require("fs"), 1);
@@ -72559,7 +72684,7 @@ var import_node_crypto21 = require("crypto");
 init_protocol();
 
 // src/peer-ops/run-command.ts
-var import_node_child_process21 = require("child_process");
+var import_node_child_process23 = require("child_process");
 var import_node_os27 = __toESM(require("os"), 1);
 var DEFAULT_TIMEOUT_MS6 = 3e4;
 var MAX_TIMEOUT_MS = 3e5;
@@ -72567,7 +72692,7 @@ var MAX_OUTPUT_BYTES = 1048576;
 function runCommand2(command, opts = {}) {
   const timeoutMs = Math.min(opts.timeoutMs ?? DEFAULT_TIMEOUT_MS6, MAX_TIMEOUT_MS);
   return new Promise((resolve9) => {
-    const child = (0, import_node_child_process21.spawn)("bash", ["-c", command], { cwd: import_node_os27.default.homedir() });
+    const child = (0, import_node_child_process23.spawn)("bash", ["-c", command], { cwd: import_node_os27.default.homedir() });
     const out = [];
     const err = [];
     let outBytes = 0;
@@ -72937,7 +73062,7 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 }
 
 // src/extension/runtime.ts
-var import_node_child_process22 = require("child_process");
+var import_node_child_process24 = require("child_process");
 var import_node_path77 = __toESM(require("path"), 1);
 var import_promises18 = require("timers/promises");
 
@@ -73045,7 +73170,7 @@ var Runtime = class {
       CLAWOS_EXT_PORT: String(port),
       CLAWOS_EXT_ID: extId
     };
-    const child = (0, import_node_child_process22.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process24.spawn)("sh", ["-c", cmd], {
       cwd: dir,
       env,
       stdio: ["ignore", "pipe", "pipe"],

package/dist/dispatch/mcp-server.cjs

@@ -22650,6 +22650,13 @@ var EngineStatusResponseSchema = external_exports.object({
   /** daemon 手里这份模型表是什么时候查的（ms）；还没查过时缺席 */
   modelsLoadedAt: external_exports.number().optional()
 }).strict();
+var EngineConnectPoolArgs = external_exports.object({
+  /** 自助台发的个人 key（sk-…）。只进 daemon 子进程 env，不落日志、不回显 */
+  apiKey: external_exports.string().min(1)
+}).strict();
+var EngineConnectPoolResponseSchema = external_exports.object({
+  ok: external_exports.literal(true)
+}).strict();
 
 // ../protocol/src/persona-schemas.ts
 var PersonaFileSchema = external_exports.object({
@@ -24194,6 +24201,10 @@ var METHOD_DOCS = {
     summary: "\u67D0\u4E2A\u5F15\u64CE\uFF08claude / codex / pi\uFF09\u7684\u5B89\u88C5\u72B6\u6001 + \u8BA2\u9605 / \u767B\u5F55\u60C5\u51B5\uFF08claude auth status\u3001codex account/read + rateLimits\u3001pi auth.json \u51ED\u636E\u7C7B\u578B\uFF09+ \u6A21\u578B\u8868\u52A0\u8F7D\u65F6\u95F4\u3002\u4E00\u5F8B\u4E0D\u5E26 key / token \u503C\u3002owner-only",
     args: EngineStatusArgs
   },
+  "engine:connectPool": {
+    summary: "\u63A5\u5165\u53F7\u6C60\uFF1A\u62FF\u81EA\u52A9\u53F0\u53D1\u7684\u4E2A\u4EBA key\uFF0C\u62C9\u53F7\u6C60 setup.sh \u8DD1\u4E00\u904D\uFF08\u5199 ~/.codex/config.toml \u6307\u5411 CLIProxyAPI \u4EE3\u7406\uFF09\uFF0C\u518D\u5237 codex \u6A21\u578B\u8868\u9A8C\u8BC1\u3002\u6210\u529F\u56DE { ok:true }\uFF1B\u62FF\u4E0D\u5230\u811A\u672C / \u811A\u672C\u62A5\u9519 / \u8D85\u65F6 / 401 \u4E00\u5F8B reject \u5E26\u4EBA\u8BDD\u3002\u53EA\u7BA1 codex\uFF1B\u672C\u673A\u6CA1\u88C5 codex \u62A5 INVALID_PARAM\u3002owner-only",
+    args: EngineConnectPoolArgs
+  },
   "persona:create": {
     summary: "\u65B0\u5EFA persona\uFF08\u5199 PersonaFile + CLAUDE.md \u9AA8\u67B6\uFF09\u3002owner-only\u3002slug \u53EA\u6536\u5C0F\u5199\u5B57\u6BCD\u6570\u5B57\u4E0E\u5355\u8FDE\u5B57\u7B26\uFF08^[a-z0-9]+(-[a-z0-9]+)*$\uFF0C\u226432\uFF09\uFF0Cdaemon \u62FC\u6210 personaId=persona-<slug>\uFF1B\u8BE5 id \u5DF2\u5B58\u5728\u5219\u62A5\u9519\uFF0C\u4E0D\u81EA\u52A8\u6539\u540D\u3002label \u662F\u663E\u793A\u540D\uFF0C\u4E0D\u53C2\u4E0E id \u63A8\u5BFC\uFF0C\u53EF\u7528\u4E2D\u6587",
     args: PersonaCreateArgsSchema