@clawos-dev/clawd 0.2.562 → 0.2.564

package/dist/app-builder-plugin/mcp-server.cjs

@@ -21498,7 +21498,12 @@ var EnvPackageSchema = external_exports.object({
   version: external_exports.string().optional(),
   // 版本下限（'20.6' 这种）。与 version 的区别：version 是「就要这个」，min 是「不低于」。
   // 两者都缺省即完全不约束。
-  min: external_exports.string().optional()
+  min: external_exports.string().optional(),
+  /**
+   * 没有可执行、只是个包（引擎扩展这类：pi 底座里的 cliproxyapi 扩展）。构建器只断言它装上了（npm ls），不查 PATH 上有没有 `name` 这条命令。
+   * 只有引擎底座清单（cloud-host/engines/<e>/manifest.json）用得到；扫描器不产它。
+   */
+  library: external_exports.boolean().optional()
 });
 var EnvSecretSchema = external_exports.object({
   // 凭据的命名引用（'aliyun-ak' / 'supabase-shared'）。部署时按这个名字去解析实际的值。
@@ -24954,7 +24959,7 @@ var L = [
   "        # \u767B\u8BB0\u6B63\u5F0F\u53EA\u662F\u5F80 gateway \u5199\u4E00\u884C\uFF0Cgateway \u4E0D\u78B0\u955C\u50CF\uFF1B\u96C6\u7FA4\u62C9\u955C\u50CF\u53D1\u751F\u5728\u7B2C\u4E00\u4E2A\u4EFB\u52A1\u5230\u6765\u65F6\u3002",
   "        # \u6CA1\u6709\u8FD9\u4E00\u6B65\uFF0C\u6D41\u6C34\u7EBF\u7EFF\u4E86\u53EA\u4EE3\u8868\u300C\u767B\u8BB0\u4E86\u300D\u3002",
   // 模型 / 档位 / 连接器 smoke 也要：试跑那次要跟正式那次拿到同一份，否则验的不是将要上线的东西。
-  // 名字形状 deploy-file.mjs 已卡死（persona_id [a-z0-9-]、model / effort [A-Za-z0-9._-]、size 三档枚举、task_concurrency 正整数、connectors 无单引号
+  // 名字形状 deploy-file.mjs 已卡死（persona_id [a-z0-9-]、model / effort [A-Za-z0-9._/-]（`/` 是 pi 的 provider/id，不是元字符）、size 四档枚举、task_concurrency 正整数、connectors 无单引号
   // 无换行），所以单引号包住直接拼进命令行是安全的。
   "        env:",
   "          CLAWD_GATEWAY_URL: ${{ vars.CLAWD_GATEWAY_URL }}",

package/dist/cli.cjs

@@ -6019,7 +6019,12 @@ var init_environment_schemas = __esm({
       version: external_exports.string().optional(),
       // 版本下限（'20.6' 这种）。与 version 的区别：version 是「就要这个」，min 是「不低于」。
       // 两者都缺省即完全不约束。
-      min: external_exports.string().optional()
+      min: external_exports.string().optional(),
+      /**
+       * 没有可执行、只是个包（引擎扩展这类：pi 底座里的 cliproxyapi 扩展）。构建器只断言它装上了（npm ls），不查 PATH 上有没有 `name` 这条命令。
+       * 只有引擎底座清单（cloud-host/engines/<e>/manifest.json）用得到；扫描器不产它。
+       */
+      library: external_exports.boolean().optional()
     });
     EnvSecretSchema = external_exports.object({
       // 凭据的命名引用（'aliyun-ak' / 'supabase-shared'）。部署时按这个名字去解析实际的值。
@@ -6106,12 +6111,12 @@ function isScanFresh(scan, repo2, released) {
   return scan.head === contentHeadOf(repo2, released) && !repo2.dirty;
 }
 function cloudEngineOk(tool) {
-  return (tool || "claude") === "codex";
+  return CLOUD_ENGINES.includes(tool || "claude");
 }
 function repoSlug(url) {
   return url.trim().replace(/^git@[^:]+:/, "").replace(/^https?:\/\/[^/]+\//, "").replace(/\.git$/, "");
 }
-var DeployFileSchema, SCAN_BASE_KINDS, ScanBaseKindSchema, DeployScanStatusSchema, DeployScanSchema, DeployReleasedSchema, DeployScanFileSchema, DeployRepoSchema, DeploySecretPresenceSchema, DEPLOY_STAGE_STATUSES, DeployStageStatusSchema, DEPLOY_STAGE_KEYS, DeployStageKeySchema, DeployJobSchema, DeployRunSchema, DeployStateSchema, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployScanArgsSchema, DeployReleaseArgsSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeployRerunJobArgsSchema, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
+var DeployFileSchema, SCAN_BASE_KINDS, ScanBaseKindSchema, DeployScanStatusSchema, DeployScanSchema, DeployReleasedSchema, DeployScanFileSchema, DeployRepoSchema, DeploySecretPresenceSchema, DEPLOY_STAGE_STATUSES, DeployStageStatusSchema, DEPLOY_STAGE_KEYS, DeployStageKeySchema, DeployJobSchema, DeployRunSchema, CLOUD_ENGINES, DeployStateSchema, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployScanArgsSchema, DeployReleaseArgsSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeployRerunJobArgsSchema, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
 var init_deploy_schemas = __esm({
   "../protocol/src/deploy-schemas.ts"() {
     "use strict";
@@ -6218,6 +6223,7 @@ var init_deploy_schemas = __esm({
       /** run 刚入队时可能一条都还没有 */
       jobs: external_exports.array(DeployJobSchema)
     }).strict();
+    CLOUD_ENGINES = ["codex", "pi"];
     DeployStateSchema = external_exports.object({
       personaId: external_exports.string().min(1),
       /** 本机 GitHub 身份（机器级，githubAuth:* 的同一份；上云页顶上那张卡用）。老 daemon 不给（可选只为兼容），UI 缺席时按未知处理 */
@@ -44537,7 +44543,7 @@ Env (advanced):
 var import_node_path78 = __toESM(require("path"), 1);
 var import_node_fs60 = __toESM(require("fs"), 1);
 var import_node_os28 = __toESM(require("os"), 1);
-var import_node_crypto23 = require("crypto");
+var import_node_crypto24 = require("crypto");
 var import_node_url5 = require("url");
 
 // src/logger.ts
@@ -59451,7 +59457,7 @@ var L2 = [
   "        # \u767B\u8BB0\u6B63\u5F0F\u53EA\u662F\u5F80 gateway \u5199\u4E00\u884C\uFF0Cgateway \u4E0D\u78B0\u955C\u50CF\uFF1B\u96C6\u7FA4\u62C9\u955C\u50CF\u53D1\u751F\u5728\u7B2C\u4E00\u4E2A\u4EFB\u52A1\u5230\u6765\u65F6\u3002",
   "        # \u6CA1\u6709\u8FD9\u4E00\u6B65\uFF0C\u6D41\u6C34\u7EBF\u7EFF\u4E86\u53EA\u4EE3\u8868\u300C\u767B\u8BB0\u4E86\u300D\u3002",
   // 模型 / 档位 / 连接器 smoke 也要：试跑那次要跟正式那次拿到同一份，否则验的不是将要上线的东西。
-  // 名字形状 deploy-file.mjs 已卡死（persona_id [a-z0-9-]、model / effort [A-Za-z0-9._-]、size 三档枚举、task_concurrency 正整数、connectors 无单引号
+  // 名字形状 deploy-file.mjs 已卡死（persona_id [a-z0-9-]、model / effort [A-Za-z0-9._/-]（`/` 是 pi 的 provider/id，不是元字符）、size 四档枚举、task_concurrency 正整数、connectors 无单引号
   // 无换行），所以单引号包住直接拼进命令行是安全的。
   "        env:",
   "          CLAWD_GATEWAY_URL: ${{ vars.CLAWD_GATEWAY_URL }}",
@@ -59819,7 +59825,7 @@ function ensureOwner(ctx) {
 }
 var invalid = (msg) => new ClawdError(ERROR_CODES.VALIDATION_ERROR, `VALIDATION_ERROR: ${msg}`);
 function wrongEngine(tool) {
-  return cloudEngineOk(tool) ? void 0 : `\u5F15\u64CE\u662F ${tool || "claude"}\uFF0C\u4E91\u4E0A\u53EA\u8DD1 Codex\u2014\u2014\u53BB persona \u8BBE\u7F6E\u91CC\u628A\u5F15\u64CE\u5207\u6210 Codex\uFF0C\u518D\u9009\u4E2A\u6A21\u578B`;
+  return cloudEngineOk(tool) ? void 0 : `\u5F15\u64CE\u662F ${tool || "claude"}\uFF0C\u4E91\u4E0A\u53EA\u8DD1 Codex \u6216 pi\u2014\u2014\u53BB persona \u8BBE\u7F6E\u91CC\u628A\u5F15\u64CE\u5207\u6210 Codex \u6216 pi\uFF0C\u518D\u9009\u4E2A\u6A21\u578B`;
 }
 var NO_GITHUB_AUTH = "\u8FD8\u6CA1\u5173\u8054 GitHub\uFF1A\u5728\u8BBE\u7F6E \u2192 \u8D26\u53F7\uFF08\u6216\u4E0A\u4E91\u9875\u9876\u4E0A\u90A3\u5F20\u5361\uFF09\u91CC\u70B9\u300C\u5173\u8054 GitHub\u300D";
 function toClawdError(err) {
@@ -62594,6 +62600,7 @@ async function centralGithubAuthToken(opts) {
 }
 
 // src/cloud/gateway-client.ts
+var CLOUD_WORKSPACE_SLOT = "{{WORKSPACE}}";
 var GATEWAY_ROUTES = {
   healthz: () => "/healthz",
   session: (personaId2) => `/p/${encodeURIComponent(personaId2)}/session`,
@@ -62694,7 +62701,8 @@ var CloudGatewayClient = class {
    * 会话通道。返回的行流在 Pod 就绪前就能 write：写入先攒着，收到 `ready` 控制行后按序 POST 出去——
    * 编排那头一构造就发 initialize，不用知道 Pod 还在起。
    * `toolSessionId`：调用方预分配的引擎会话 id（pi 的 --session-id；codex 的 thread id 是协议内的、不传），进 open 的 body `engineSessionId`
-   * （契约 2026-09-18 §3.2）。
+   * （契约 2026-09-18 §3.2）。`instructions`：会话级指令（pi-cloud 的连接 intro，工作目录写 CLOUD_WORKSPACE_SLOT），进 body `instructions`，
+   * gateway 落成 Pod 里的 /run/agent/instructions.md（契约 §3.1）；codex-cloud 不发（走协议内 developerInstructions）。
    */
   async openSession(personaId2, opts = {}) {
     const { apiKey, gatewayUrl } = await this.credentials();
@@ -62704,6 +62712,7 @@ var CloudGatewayClient = class {
       apiKey,
       personaId: personaId2,
       ...opts.toolSessionId ? { engineSessionId: opts.toolSessionId } : {},
+      ...opts.instructions ? { instructions: opts.instructions } : {},
       logger: this.deps.logger
     });
   }
@@ -62748,7 +62757,7 @@ function parseControlLine(line) {
   }
 }
 function openHttpLineStream(opts) {
-  const { fetchImpl, gatewayUrl, apiKey, personaId: personaId2, engineSessionId, logger } = opts;
+  const { fetchImpl, gatewayUrl, apiKey, personaId: personaId2, engineSessionId, instructions, logger } = opts;
   const headers = { authorization: `Bearer ${apiKey}`, "content-type": "application/json" };
   const ac = new AbortController();
   const lineCbs = [];
@@ -62805,7 +62814,7 @@ function openHttpLineStream(opts) {
       res = await fetchImpl(gatewayUrl + GATEWAY_ROUTES.session(personaId2), {
         method: "POST",
         headers,
-        body: JSON.stringify(engineSessionId ? { engineSessionId } : {}),
+        body: JSON.stringify({ ...engineSessionId ? { engineSessionId } : {}, ...instructions ? { instructions } : {} }),
         signal: ac.signal
       });
     } catch (e) {
@@ -63162,6 +63171,9 @@ var CloudCodexAdapter = class {
   }
 };
 
+// src/tools/pi-cloud.ts
+init_protocol();
+
 // src/tools/pi.ts
 var import_node_child_process11 = require("child_process");
 var import_node_fs37 = __toESM(require("fs"), 1);
@@ -63964,6 +63976,152 @@ var PiAdapter = class {
   }
 };
 
+// src/tools/pi-cloud-session.ts
+var import_node_crypto11 = require("crypto");
+function cloudPiInstructions(ctx) {
+  return [ctx.extraSystemPrompt, workDirPrompt(CLOUD_WORKSPACE_SLOT, ctx.personaMode ?? "owner")].filter((x2) => Boolean(x2)).join("\n\n");
+}
+function createCloudPiSession(ctx, sink, deps) {
+  const personaId2 = personaIdFromCloudCwd(ctx.cwd);
+  const sessionId = ctx.toolSessionId ?? (0, import_node_crypto11.randomUUID)();
+  const stream = deferredLineStream();
+  let channel = null;
+  const driver = drivePiSession({
+    sink,
+    stream,
+    sessionId,
+    logger: deps.logger,
+    fetchImage: deps.fetchImage ?? makeImageFetcher(),
+    // 「让对端走人」= 断开下行流，gateway 收到就删 Pod；信号对 Pod 没有意义
+    kill: () => stream.close(),
+    onTurnCompleted: () => void channel?.mirror()
+  });
+  if (!personaId2) {
+    queueMicrotask(() => {
+      sink.onError(`cloud session has no persona id (cwd=${ctx.cwd})`);
+      stream.close();
+    });
+    return driver.session;
+  }
+  void deps.client.openSession(personaId2, { toolSessionId: sessionId, instructions: cloudPiInstructions(ctx) }).then(
+    (opened) => {
+      channel = opened;
+      channel.onControl((c2) => {
+        if (c2.kind === "queued") {
+          sink.pushEvents([{ kind: "meta-text", text: `\u4E91\u4E0A\u673A\u5668\u6709 ${c2.running} \u4E2A\u4EFB\u52A1\u5728\u8DD1\uFF0C\u7B49\u4E00\u4E2A\u7ED3\u675F\u5C31\u8F6E\u5230\u4F60` }]);
+        } else if (c2.kind === "error") {
+          sink.onError(`\u4E91\u4E0A persona \u8D77\u4E0D\u6765\uFF1A${c2.message}`);
+        }
+      });
+      stream.attach(channel);
+    },
+    (e) => {
+      sink.onError(e instanceof CloudApiKeyRequiredError ? e.message : `\u8FDE\u4E0D\u4E0A\u4E91 gateway\uFF1A${e.message}`);
+      stream.close();
+    }
+  );
+  return driver.session;
+}
+
+// src/tools/pi-cloud-history.ts
+var CloudPiHistoryReader = class {
+  constructor(client, logger) {
+    this.client = client;
+    this.logger = logger;
+  }
+  client;
+  logger;
+  async listProjects() {
+    return [];
+  }
+  /** 云 persona 没有「关联已有会话」的动线：会话列表就是本机的会话记录 */
+  async listSessions() {
+    return [];
+  }
+  async read(args) {
+    const text = await this.client.fetchRollout(args.toolSessionId);
+    if (text === null) throw new Error(`pi session not found for ${args.toolSessionId}`);
+    const parsed = parsePiSession(text);
+    if (!parsed.meta) this.logger?.warn("cloud pi session has no header line", { toolSessionId: args.toolSessionId });
+    return pageMessages(parsed.messages, args);
+  }
+  async listSubagents(_args) {
+    return [];
+  }
+  async readSubagent(args) {
+    throw new Error(`pi has no subagent threads (${args.subagentId})`);
+  }
+  computeRewindDiff() {
+    return { canRewind: false, files: [], totalInsertions: 0, totalDeletions: 0 };
+  }
+  listRewindableUserMessageIds() {
+    return [];
+  }
+};
+
+// src/tools/pi-cloud.ts
+var CLOUD_APPROVAL2 = { id: "never", label: "Full Access", description: "\u4E91\u4E0A\u65E0\u4EBA\u503C\u5B88\uFF1A\u4ECE\u4E0D\u8BE2\u95EE\uFF0C\u81EA\u4E3B\u6267\u884C" };
+var CLOUD_PI_CAPABILITIES = {
+  tool: PI_CLOUD_TOOL_ID,
+  toolSessionIdLabel: "pi Session ID",
+  models: [],
+  permissionModes: [CLOUD_APPROVAL2],
+  // 无 rewind / 无子 agent（pi 核心没有）/ 无 pty / observer 是 CC jsonl 解析器 / 无文件分享 / fork 是 claude jsonl 专用
+  features: { rewind: false, subagents: false, tui: false, observe: false, fileSharing: false, fork: false },
+  configSchema: [
+    {
+      name: "permissionMode",
+      type: "select",
+      label: "Approval",
+      scope: "core",
+      options: [{ value: CLOUD_APPROVAL2.id, label: CLOUD_APPROVAL2.label, description: CLOUD_APPROVAL2.description }],
+      default: "never"
+    }
+  ]
+};
+var CloudPiAdapter = class {
+  id = PI_CLOUD_TOOL_ID;
+  /** manager 据此跳过「cwd 是本机目录」的校验（cwd 是 gateway 上的地址） */
+  remote = true;
+  historyReader;
+  client;
+  logger;
+  constructor(opts) {
+    this.client = opts.client;
+    this.logger = opts.logger;
+    this.historyReader = new CloudPiHistoryReader(opts.history, opts.logger);
+  }
+  /** 可用 = 能拿到凭据（登了飞书、生成过 key、中心配了 gateway），与本机装没装 pi 无关 */
+  async probe() {
+    try {
+      const { gatewayUrl } = await this.client.credentials();
+      return { available: true, path: gatewayUrl };
+    } catch (err) {
+      this.logger?.debug?.("pi-cloud probe: unavailable", { reason: err.message });
+      return { available: false };
+    }
+  }
+  async capabilities() {
+    return CLOUD_PI_CAPABILITIES;
+  }
+  // 模型由登记行定、本机不知道它的窗口：给 pi 的缺省，运行时 get_state 的 meta_update 会补真值
+  resolveContextWindow(_modelId) {
+    return PI_DEFAULT_CONTEXT_WINDOW;
+  }
+  createSession(ctx, sink) {
+    return createCloudPiSession(ctx, sink, { client: this.client, logger: this.logger });
+  }
+  spawn(_ctx) {
+    throw new Error("CloudPiAdapter uses createSession, not spawn");
+  }
+  parseLine(_line) {
+    return [];
+  }
+  encodeStdin(text, _ctx) {
+    return text;
+  }
+};
+
 // src/index.ts
 init_protocol();
 
@@ -64908,7 +65066,7 @@ var wrapper_default = import_websocket.default;
 
 // src/transport/local-ws-server.ts
 var import_node_http = __toESM(require("http"), 1);
-var import_node_crypto11 = require("crypto");
+var import_node_crypto12 = require("crypto");
 var LocalWsServer = class {
   constructor(opts) {
     this.opts = opts;
@@ -65125,7 +65283,7 @@ var LocalWsServer = class {
     }
   }
   onConnection(socket, remoteAddress) {
-    const id = (0, import_node_crypto11.randomUUID)();
+    const id = (0, import_node_crypto12.randomUUID)();
     const subscribedSessions = /* @__PURE__ */ new Map();
     const handle = {
       id,
@@ -66090,7 +66248,7 @@ var import_node_path49 = __toESM(require("path"), 1);
 // src/attachment/upload.ts
 var import_node_fs43 = __toESM(require("fs"), 1);
 var import_node_path47 = __toESM(require("path"), 1);
-var import_node_crypto12 = __toESM(require("crypto"), 1);
+var import_node_crypto13 = __toESM(require("crypto"), 1);
 var import_promises7 = require("stream/promises");
 var UploadError = class extends Error {
   constructor(code, message) {
@@ -66114,11 +66272,11 @@ async function writeUploadedAttachment(args) {
   } catch (err) {
     throw new UploadError("STORAGE_ERROR", `mkdir failed: ${err.message}`);
   }
-  const hasher = import_node_crypto12.default.createHash("sha256");
+  const hasher = import_node_crypto13.default.createHash("sha256");
   let actualSize = 0;
   const tmpPath = import_node_path47.default.join(
     attachmentsRoot,
-    `.upload-${process.pid}-${Date.now()}-${import_node_crypto12.default.randomBytes(4).toString("hex")}`
+    `.upload-${process.pid}-${Date.now()}-${import_node_crypto13.default.randomBytes(4).toString("hex")}`
   );
   try {
     await (0, import_promises7.pipeline)(
@@ -66962,7 +67120,7 @@ function runAttachmentGc(args) {
 // src/attachment/group.ts
 var import_node_fs46 = __toESM(require("fs"), 1);
 var import_node_path51 = __toESM(require("path"), 1);
-var import_node_crypto13 = __toESM(require("crypto"), 1);
+var import_node_crypto14 = __toESM(require("crypto"), 1);
 init_protocol();
 var GroupFileStore = class {
   dataDir;
@@ -67051,7 +67209,7 @@ var GroupFileStore = class {
       entries[idx] = next;
     } else {
       next = {
-        id: `gf-${import_node_crypto13.default.randomBytes(6).toString("base64url")}`,
+        id: `gf-${import_node_crypto14.default.randomBytes(6).toString("base64url")}`,
         relPath: input.relPath,
         from: input.from,
         label: input.label,
@@ -67197,7 +67355,7 @@ function readSpawnedByDesktopFromEnv(env = process.env) {
 // src/tunnel/tunnel-manager.ts
 var import_node_fs51 = __toESM(require("fs"), 1);
 var import_node_path56 = __toESM(require("path"), 1);
-var import_node_crypto14 = __toESM(require("crypto"), 1);
+var import_node_crypto15 = __toESM(require("crypto"), 1);
 var import_node_child_process15 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
@@ -67696,7 +67854,7 @@ var TunnelManager = class {
         override: this.deps.frpcBinaryOverride ?? void 0
       });
       const tomlPath = import_node_path56.default.join(this.deps.dataDir, "frpc.toml");
-      const proxyName = `clawd-${t2.subdomain}-${localPort}-${import_node_crypto14.default.randomBytes(3).toString("hex")}`;
+      const proxyName = `clawd-${t2.subdomain}-${localPort}-${import_node_crypto15.default.randomBytes(3).toString("hex")}`;
       const toml = buildFrpcToml({
         serverAddr: t2.frpsHost,
         serverPort: t2.frpsPort,
@@ -67797,7 +67955,7 @@ async function waitForFrpcReady(proc, timeoutMs) {
 // src/tunnel/device-key.ts
 var import_node_os18 = __toESM(require("os"), 1);
 var import_node_path57 = __toESM(require("path"), 1);
-var import_node_crypto15 = __toESM(require("crypto"), 1);
+var import_node_crypto16 = __toESM(require("crypto"), 1);
 var DERIVE_SALT = "clawd-tunnel-device-v1";
 function deriveStableDeviceKey(opts = {}) {
   const hostname = opts.hostname ?? import_node_os18.default.hostname();
@@ -67807,13 +67965,13 @@ function deriveStableDeviceKey(opts = {}) {
   const normalizedDataDir = opts.dataDir ? import_node_path57.default.resolve(opts.dataDir) : null;
   const isDefaultDir = normalizedDataDir == null || normalizedDataDir === defaultDataDir;
   const input = isDefaultDir ? `${hostname}::${uid}` : `${hostname}::${uid}::${normalizedDataDir}`;
-  return import_node_crypto15.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
+  return import_node_crypto16.default.createHmac("sha256", DERIVE_SALT).update(input).digest("hex").slice(0, 32);
 }
 
 // src/auth-store.ts
 var import_node_fs52 = __toESM(require("fs"), 1);
 var import_node_path58 = __toESM(require("path"), 1);
-var import_node_crypto16 = __toESM(require("crypto"), 1);
+var import_node_crypto17 = __toESM(require("crypto"), 1);
 var AUTH_FILE_NAME = "auth.json";
 function authFilePath(dataDir) {
   return import_node_path58.default.join(dataDir, AUTH_FILE_NAME);
@@ -67850,10 +68008,10 @@ function loadOrCreateTunnelDeviceKey(opts) {
   return tunnelDeviceKey;
 }
 function defaultGenerateToken() {
-  return import_node_crypto16.default.randomBytes(32).toString("base64url");
+  return import_node_crypto17.default.randomBytes(32).toString("base64url");
 }
 function defaultGenerateOwnerPrincipalId() {
-  return `owner-${import_node_crypto16.default.randomUUID()}`;
+  return `owner-${import_node_crypto17.default.randomUUID()}`;
 }
 function readAuthFile(file) {
   try {
@@ -67985,7 +68143,7 @@ var OwnerIdentityStore = class {
 };
 
 // src/feishu-auth/login-flow.ts
-var import_node_crypto17 = __toESM(require("crypto"), 1);
+var import_node_crypto18 = __toESM(require("crypto"), 1);
 var STATE_TTL_MS = 5 * 60 * 1e3;
 var LoginFlow = class {
   constructor(deps) {
@@ -67994,7 +68152,7 @@ var LoginFlow = class {
   deps;
   pendingStates = /* @__PURE__ */ new Map();
   start() {
-    const state = import_node_crypto17.default.randomBytes(16).toString("base64url");
+    const state = import_node_crypto18.default.randomBytes(16).toString("base64url");
     const now = (this.deps.now ?? Date.now)();
     this.pendingStates.set(state, now);
     this.gcExpired(now);
@@ -68525,7 +68683,7 @@ init_protocol();
 var import_node_fs55 = __toESM(require("fs"), 1);
 var import_node_os20 = __toESM(require("os"), 1);
 var import_node_path61 = __toESM(require("path"), 1);
-var import_node_crypto18 = require("crypto");
+var import_node_crypto19 = require("crypto");
 init_claude_history();
 function readJsonlEntries(file) {
   const raw = import_node_fs55.default.readFileSync(file, "utf8");
@@ -68562,7 +68720,7 @@ function forkSession(input) {
     throw new Error(`fork: messageUuid not found in transcript: ${input.messageUuid}`);
   }
   const sliced = mainEntries.slice(0, targetIdx + 1);
-  const forkedToolSessionId = (0, import_node_crypto18.randomUUID)();
+  const forkedToolSessionId = (0, import_node_crypto19.randomUUID)();
   let parentUuid = null;
   const forkedLines = [];
   for (const entry of sliced) {
@@ -69769,7 +69927,7 @@ function buildWorkspaceHandlers(deps) {
     const args = AgentsListArgs.parse(frame);
     const cwdAbs = path80.resolve(args.cwd);
     assertGuestPath2(ctx, cwdAbs, personaRoot, "agents:list", usersRoot);
-    if (isCodexFamily(args.tool) || args.tool === PI_TOOL_ID) {
+    if (isCodexFamily(args.tool) || isPiFamily(args.tool)) {
       return { response: { type: "agents:list", agents: [] } };
     }
     const list2 = agents.list(args);
@@ -71150,7 +71308,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.562".length > 0 ? "0.2.562" : "dev";
+var version = "0.2.564".length > 0 ? "0.2.564" : "dev";
 
 // src/cli-probe/probe.ts
 var fs78 = __toESM(require("fs"), 1);
@@ -71547,7 +71705,7 @@ init_protocol();
 // src/extension/bundle-zip.ts
 var import_promises11 = __toESM(require("fs/promises"), 1);
 var import_node_path67 = __toESM(require("path"), 1);
-var import_node_crypto19 = __toESM(require("crypto"), 1);
+var import_node_crypto20 = __toESM(require("crypto"), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 async function bundleExtensionDir(dir) {
   const entries = await listFilesSorted(dir);
@@ -71562,7 +71720,7 @@ async function bundleExtensionDir(dir) {
     compression: "DEFLATE",
     compressionOptions: { level: 6 }
   });
-  const sha256 = import_node_crypto19.default.createHash("sha256").update(buffer).digest("hex");
+  const sha256 = import_node_crypto20.default.createHash("sha256").update(buffer).digest("hex");
   return { buffer, sha256 };
 }
 var FIXED_DATE = /* @__PURE__ */ new Date("2020-01-01T00:00:00.000Z");
@@ -71630,7 +71788,7 @@ function computePublishCheck(args) {
 var import_promises12 = __toESM(require("fs/promises"), 1);
 var import_node_path69 = __toESM(require("path"), 1);
 var import_node_os25 = __toESM(require("os"), 1);
-var import_node_crypto20 = __toESM(require("crypto"), 1);
+var import_node_crypto21 = __toESM(require("crypto"), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
 
 // src/extension/paths.ts
@@ -71659,7 +71817,7 @@ var InstallError = class extends Error {
 };
 async function installFromChannel(args, deps) {
   const { channelRef, snapshotHash, bundleZip } = args;
-  const computed = import_node_crypto20.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto21.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new InstallError(
       "HASH_MISMATCH",
@@ -71751,7 +71909,7 @@ async function installFromChannel(args, deps) {
 var import_promises13 = __toESM(require("fs/promises"), 1);
 var import_node_path70 = __toESM(require("path"), 1);
 var import_node_os26 = __toESM(require("os"), 1);
-var import_node_crypto21 = __toESM(require("crypto"), 1);
+var import_node_crypto22 = __toESM(require("crypto"), 1);
 var import_jszip4 = __toESM(require_lib3(), 1);
 var UpdateError = class extends Error {
   constructor(code, message) {
@@ -71789,7 +71947,7 @@ async function updateFromChannel(args, deps) {
     if (e instanceof UpdateError) throw e;
     throw e;
   }
-  const computed = import_node_crypto21.default.createHash("sha256").update(bundleZip).digest("hex");
+  const computed = import_node_crypto22.default.createHash("sha256").update(bundleZip).digest("hex");
   if (computed !== snapshotHash) {
     throw new UpdateError(
       "HASH_MISMATCH",
@@ -72918,7 +73076,7 @@ async function uninstall(deps) {
 }
 
 // src/handlers/index.ts
-var import_node_crypto22 = require("crypto");
+var import_node_crypto23 = require("crypto");
 
 // src/handlers/peer-exec.ts
 init_protocol();
@@ -73073,7 +73231,7 @@ function buildMethodHandlers(deps) {
           const c2 = deps.contactStore.get(deviceId);
           return c2 ? { deviceId: c2.deviceId, remoteUrl: c2.remoteUrl, connectToken: c2.connectToken } : null;
         },
-        genId: () => (0, import_node_crypto22.randomUUID)(),
+        genId: () => (0, import_node_crypto23.randomUUID)(),
         now: () => Date.now(),
         forwardInboxPostToPeer,
         logger: deps.logger
@@ -73802,7 +73960,7 @@ async function startDaemon(config) {
   const channelStore = createChannelStore({
     filePath: import_node_path78.default.join(config.dataDir, "channels.json"),
     now: () => Date.now(),
-    genId: () => `ch-${(0, import_node_crypto23.randomUUID)().slice(0, 8)}`,
+    genId: () => `ch-${(0, import_node_crypto24.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("channel store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
     })
@@ -73811,7 +73969,7 @@ async function startDaemon(config) {
   const topicStore = createTopicStore({
     filePath: import_node_path78.default.join(config.dataDir, "topics.json"),
     now: () => Date.now(),
-    genId: () => `tp-${(0, import_node_crypto23.randomUUID)().slice(0, 8)}`,
+    genId: () => `tp-${(0, import_node_crypto24.randomUUID)().slice(0, 8)}`,
     onFlushError: (err) => logger.error("topic store flush failed", {
       reason: err instanceof Error ? err.message : String(err)
     })
@@ -73819,7 +73977,7 @@ async function startDaemon(config) {
   await topicStore.load();
   let deliverPendingRef;
   const personaDispatchManager = new PersonaDispatchManager({
-    genId: () => (0, import_node_crypto23.randomUUID)(),
+    genId: () => (0, import_node_crypto24.randomUUID)(),
     store: dispatchStore,
     now: () => Date.now(),
     onCompleted: (sid) => deliverPendingRef?.(sid),
@@ -74266,22 +74424,23 @@ async function startDaemon(config) {
       getSignSecret: () => authFile.token
     })
   );
+  const cloudHistorySource = {
+    fetchRollout: (threadId) => {
+      const loginPass = ownerIdentityStore.read()?.loginPass;
+      if (!loginPass) return Promise.resolve(null);
+      return centralGetThread({ api: config.clawosApi ?? DEFAULT_CLAWOS_API, loginPass, threadId });
+    }
+  };
   registerAdapter(
     CODEX_CLOUD_TOOL_ID,
     new CloudCodexAdapter({
       client: cloudGateway,
-      // 历史副本从中心拉（design 2026-09-19-cloud-session-oss §3.4）：没登录就没有历史，不抛
-      history: {
-        fetchRollout: (threadId) => {
-          const loginPass = ownerIdentityStore.read()?.loginPass;
-          if (!loginPass) return Promise.resolve(null);
-          return centralGetThread({ api: config.clawosApi ?? DEFAULT_CLAWOS_API, loginPass, threadId });
-        }
-      },
+      history: cloudHistorySource,
       logger,
       getSignSecret: () => authFile.token
     })
   );
+  registerAdapter(PI_CLOUD_TOOL_ID, new CloudPiAdapter({ client: cloudGateway, history: cloudHistorySource, logger }));
   const piMcpBridgeCandidates = [
     import_node_path78.default.join(here, "pi-mcp-bridge", "extension.cjs"),
     import_node_path78.default.join(here, "..", "dist", "pi-mcp-bridge", "extension.cjs")
@@ -74802,7 +74961,7 @@ async function startDaemon(config) {
   const deployHandlers = buildDeployHandlers({
     hasPersona: (personaId2) => personaStore.has(personaId2),
     personaDir: (personaId2) => personaStore.personaDirPath(personaId2),
-    // 发布前落闸要看它现在配的引擎和模型（云上只跑 codex，且模型跟着这次发布走）
+    // 发布前落闸要看它现在配的引擎和模型（云上只跑 codex / pi，且模型跟着这次发布走）
     personaEngine: (personaId2) => {
       const p3 = personaRegistry.get(personaId2);
       return p3 ? { ...p3.tool ? { tool: p3.tool } : {}, ...p3.model ? { model: p3.model } : {} } : void 0;

package/dist/dispatch/mcp-server.cjs

@@ -21312,7 +21312,12 @@ var EnvPackageSchema = external_exports.object({
   version: external_exports.string().optional(),
   // 版本下限（'20.6' 这种）。与 version 的区别：version 是「就要这个」，min 是「不低于」。
   // 两者都缺省即完全不约束。
-  min: external_exports.string().optional()
+  min: external_exports.string().optional(),
+  /**
+   * 没有可执行、只是个包（引擎扩展这类：pi 底座里的 cliproxyapi 扩展）。构建器只断言它装上了（npm ls），不查 PATH 上有没有 `name` 这条命令。
+   * 只有引擎底座清单（cloud-host/engines/<e>/manifest.json）用得到；扫描器不产它。
+   */
+  library: external_exports.boolean().optional()
 });
 var EnvSecretSchema = external_exports.object({
   // 凭据的命名引用（'aliyun-ak' / 'supabase-shared'）。部署时按这个名字去解析实际的值。

package/dist/persona-defaults/persona-app-builder/mcp/clawd-app-builder/mcp-server.cjs

@@ -21498,7 +21498,12 @@ var EnvPackageSchema = external_exports.object({
   version: external_exports.string().optional(),
   // 版本下限（'20.6' 这种）。与 version 的区别：version 是「就要这个」，min 是「不低于」。
   // 两者都缺省即完全不约束。
-  min: external_exports.string().optional()
+  min: external_exports.string().optional(),
+  /**
+   * 没有可执行、只是个包（引擎扩展这类：pi 底座里的 cliproxyapi 扩展）。构建器只断言它装上了（npm ls），不查 PATH 上有没有 `name` 这条命令。
+   * 只有引擎底座清单（cloud-host/engines/<e>/manifest.json）用得到；扫描器不产它。
+   */
+  library: external_exports.boolean().optional()
 });
 var EnvSecretSchema = external_exports.object({
   // 凭据的命名引用（'aliyun-ak' / 'supabase-shared'）。部署时按这个名字去解析实际的值。
@@ -24954,7 +24959,7 @@ var L = [
   "        # \u767B\u8BB0\u6B63\u5F0F\u53EA\u662F\u5F80 gateway \u5199\u4E00\u884C\uFF0Cgateway \u4E0D\u78B0\u955C\u50CF\uFF1B\u96C6\u7FA4\u62C9\u955C\u50CF\u53D1\u751F\u5728\u7B2C\u4E00\u4E2A\u4EFB\u52A1\u5230\u6765\u65F6\u3002",
   "        # \u6CA1\u6709\u8FD9\u4E00\u6B65\uFF0C\u6D41\u6C34\u7EBF\u7EFF\u4E86\u53EA\u4EE3\u8868\u300C\u767B\u8BB0\u4E86\u300D\u3002",
   // 模型 / 档位 / 连接器 smoke 也要：试跑那次要跟正式那次拿到同一份，否则验的不是将要上线的东西。
-  // 名字形状 deploy-file.mjs 已卡死（persona_id [a-z0-9-]、model / effort [A-Za-z0-9._-]、size 三档枚举、task_concurrency 正整数、connectors 无单引号
+  // 名字形状 deploy-file.mjs 已卡死（persona_id [a-z0-9-]、model / effort [A-Za-z0-9._/-]（`/` 是 pi 的 provider/id，不是元字符）、size 四档枚举、task_concurrency 正整数、connectors 无单引号
   // 无换行），所以单引号包住直接拼进命令行是安全的。
   "        env:",
   "          CLAWD_GATEWAY_URL: ${{ vars.CLAWD_GATEWAY_URL }}",

package/dist/persona-defaults/persona-dataclaw-builder/mcp/clawd-app-builder/mcp-server.cjs

@@ -21498,7 +21498,12 @@ var EnvPackageSchema = external_exports.object({
   version: external_exports.string().optional(),
   // 版本下限（'20.6' 这种）。与 version 的区别：version 是「就要这个」，min 是「不低于」。
   // 两者都缺省即完全不约束。
-  min: external_exports.string().optional()
+  min: external_exports.string().optional(),
+  /**
+   * 没有可执行、只是个包（引擎扩展这类：pi 底座里的 cliproxyapi 扩展）。构建器只断言它装上了（npm ls），不查 PATH 上有没有 `name` 这条命令。
+   * 只有引擎底座清单（cloud-host/engines/<e>/manifest.json）用得到；扫描器不产它。
+   */
+  library: external_exports.boolean().optional()
 });
 var EnvSecretSchema = external_exports.object({
   // 凭据的命名引用（'aliyun-ak' / 'supabase-shared'）。部署时按这个名字去解析实际的值。
@@ -24954,7 +24959,7 @@ var L = [
   "        # \u767B\u8BB0\u6B63\u5F0F\u53EA\u662F\u5F80 gateway \u5199\u4E00\u884C\uFF0Cgateway \u4E0D\u78B0\u955C\u50CF\uFF1B\u96C6\u7FA4\u62C9\u955C\u50CF\u53D1\u751F\u5728\u7B2C\u4E00\u4E2A\u4EFB\u52A1\u5230\u6765\u65F6\u3002",
   "        # \u6CA1\u6709\u8FD9\u4E00\u6B65\uFF0C\u6D41\u6C34\u7EBF\u7EFF\u4E86\u53EA\u4EE3\u8868\u300C\u767B\u8BB0\u4E86\u300D\u3002",
   // 模型 / 档位 / 连接器 smoke 也要：试跑那次要跟正式那次拿到同一份，否则验的不是将要上线的东西。
-  // 名字形状 deploy-file.mjs 已卡死（persona_id [a-z0-9-]、model / effort [A-Za-z0-9._-]、size 三档枚举、task_concurrency 正整数、connectors 无单引号
+  // 名字形状 deploy-file.mjs 已卡死（persona_id [a-z0-9-]、model / effort [A-Za-z0-9._/-]（`/` 是 pi 的 provider/id，不是元字符）、size 四档枚举、task_concurrency 正整数、connectors 无单引号
   // 无换行），所以单引号包住直接拼进命令行是安全的。
   "        env:",
   "          CLAWD_GATEWAY_URL: ${{ vars.CLAWD_GATEWAY_URL }}",