@clawos-dev/clawd 0.2.577 → 0.2.579

package/dist/app-builder-plugin/mcp-server.cjs

@@ -21749,8 +21749,16 @@ var DeployPatchArgsSchema = external_exports.object({
   /** 改的是历史里哪次扫描的清单。扫描期 butler 删条目也走这条（scanId 在它的任务提示里） */
   scanId: external_exports.string().min(1),
   patch: external_exports.object({
-    // 人工补依赖；整份替换 manifest
-    manifest: EnvironmentManifestSchema.optional()
+    /**
+     * 整份替换 manifest（butler 扫描期删条目走这条）。daemon 写的字段（package 的 version / localVersion / artifact / aptVersion /
+     * aptMissing、连接器上点过的 credentialSource / auth）快照里缺了会从记录里补回——旧快照冲不掉它们。
+     */
+    manifest: EnvironmentManifestSchema.optional(),
+    /**
+     * 只换清单里**同名那一条**连接器（上云页连接器卡片上的点选走这条）。不带整份清单：页面手里的清单可能是旧快照，
+     * 整份写回会把 daemon 之后写进去的东西冲掉（2026-09-23 persona-log-tracer 的 hbi 资产就是这么丢的）。同名的不在 → 拒
+     */
+    connector: EnvConnectorSchema.optional()
   }).strict()
 }).strict();
 var DeployPutSecretArgsSchema = external_exports.object({
@@ -24232,7 +24240,7 @@ var METHOD_DOCS = {
     args: DeployScanArgsSchema
   },
   "deploy:patch": {
-    summary: "\u7F16\u8F91\u5386\u53F2\u91CC\u67D0\u6B21\u626B\u63CF\u7684\u6E05\u5355\uFF08scanId \u6307\u540D\uFF09\uFF1A\u624B\u5DE5\u8865 / \u5220\u4F9D\u8D56\uFF0C\u626B\u63CF\u671F butler \u5220\u6761\u76EE\u4E5F\u8D70\u8FD9\u6761\u3002**\u4E0D\u80FD\u4ECE\u8FD9\u91CC\u4F20\u51ED\u636E\u7684\u503C**\uFF08\u503C\u8D70 deploy:putSecret\uFF09\uFF1Bowner-only",
+    summary: "\u7F16\u8F91\u5386\u53F2\u91CC\u67D0\u6B21\u626B\u63CF\u7684\u6E05\u5355\uFF08scanId \u6307\u540D\uFF09\u3002patch.connector = \u53EA\u6362\u540C\u540D\u90A3\u4E00\u6761\u8FDE\u63A5\u5668\uFF08\u4E0A\u4E91\u9875\u70B9\u9009\u8D70\u8FD9\u6761\uFF0C\u4E0D\u5728\u5C31\u62D2\uFF09\uFF1Bpatch.manifest = \u6574\u4EFD\u66FF\u6362\uFF08\u624B\u5DE5\u8865 / \u5220\u4F9D\u8D56\uFF0C\u626B\u63CF\u671F butler \u5220\u6761\u76EE\u4E5F\u8D70\u8FD9\u6761\uFF09\uFF0C\u4F46 daemon \u5199\u7684\u5B57\u6BB5\uFF08\u5305\u7684 version / localVersion / artifact / aptVersion / aptMissing\u3001\u8FDE\u63A5\u5668\u70B9\u8FC7\u7684 credentialSource / auth\uFF09\u5FEB\u7167\u91CC\u7F3A\u4E86\u4F1A\u4ECE\u8BB0\u5F55\u8865\u56DE\uFF0C\u6E05\u4E0D\u6389\u3002**\u4E0D\u80FD\u4ECE\u8FD9\u91CC\u4F20\u51ED\u636E\u7684\u503C**\uFF08\u503C\u8D70 deploy:putSecret\uFF09\uFF1Bowner-only",
     args: DeployPatchArgsSchema
   },
   "deploy:putSecret": {

package/dist/cli.cjs

@@ -6320,8 +6320,16 @@ var init_deploy_schemas = __esm({
       /** 改的是历史里哪次扫描的清单。扫描期 butler 删条目也走这条（scanId 在它的任务提示里） */
       scanId: external_exports.string().min(1),
       patch: external_exports.object({
-        // 人工补依赖；整份替换 manifest
-        manifest: EnvironmentManifestSchema.optional()
+        /**
+         * 整份替换 manifest（butler 扫描期删条目走这条）。daemon 写的字段（package 的 version / localVersion / artifact / aptVersion /
+         * aptMissing、连接器上点过的 credentialSource / auth）快照里缺了会从记录里补回——旧快照冲不掉它们。
+         */
+        manifest: EnvironmentManifestSchema.optional(),
+        /**
+         * 只换清单里**同名那一条**连接器（上云页连接器卡片上的点选走这条）。不带整份清单：页面手里的清单可能是旧快照，
+         * 整份写回会把 daemon 之后写进去的东西冲掉（2026-09-23 persona-log-tracer 的 hbi 资产就是这么丢的）。同名的不在 → 拒
+         */
+        connector: EnvConnectorSchema.optional()
       }).strict()
     }).strict();
     DeployPutSecretArgsSchema = external_exports.object({
@@ -9088,7 +9096,7 @@ var init_methods = __esm({
         args: DeployScanArgsSchema
       },
       "deploy:patch": {
-        summary: "\u7F16\u8F91\u5386\u53F2\u91CC\u67D0\u6B21\u626B\u63CF\u7684\u6E05\u5355\uFF08scanId \u6307\u540D\uFF09\uFF1A\u624B\u5DE5\u8865 / \u5220\u4F9D\u8D56\uFF0C\u626B\u63CF\u671F butler \u5220\u6761\u76EE\u4E5F\u8D70\u8FD9\u6761\u3002**\u4E0D\u80FD\u4ECE\u8FD9\u91CC\u4F20\u51ED\u636E\u7684\u503C**\uFF08\u503C\u8D70 deploy:putSecret\uFF09\uFF1Bowner-only",
+        summary: "\u7F16\u8F91\u5386\u53F2\u91CC\u67D0\u6B21\u626B\u63CF\u7684\u6E05\u5355\uFF08scanId \u6307\u540D\uFF09\u3002patch.connector = \u53EA\u6362\u540C\u540D\u90A3\u4E00\u6761\u8FDE\u63A5\u5668\uFF08\u4E0A\u4E91\u9875\u70B9\u9009\u8D70\u8FD9\u6761\uFF0C\u4E0D\u5728\u5C31\u62D2\uFF09\uFF1Bpatch.manifest = \u6574\u4EFD\u66FF\u6362\uFF08\u624B\u5DE5\u8865 / \u5220\u4F9D\u8D56\uFF0C\u626B\u63CF\u671F butler \u5220\u6761\u76EE\u4E5F\u8D70\u8FD9\u6761\uFF09\uFF0C\u4F46 daemon \u5199\u7684\u5B57\u6BB5\uFF08\u5305\u7684 version / localVersion / artifact / aptVersion / aptMissing\u3001\u8FDE\u63A5\u5668\u70B9\u8FC7\u7684 credentialSource / auth\uFF09\u5FEB\u7167\u91CC\u7F3A\u4E86\u4F1A\u4ECE\u8BB0\u5F55\u8865\u56DE\uFF0C\u6E05\u4E0D\u6389\u3002**\u4E0D\u80FD\u4ECE\u8FD9\u91CC\u4F20\u51ED\u636E\u7684\u503C**\uFF08\u503C\u8D70 deploy:putSecret\uFF09\uFF1Bowner-only",
         args: DeployPatchArgsSchema
       },
       "deploy:putSecret": {
@@ -55709,6 +55717,38 @@ function parseFinding(kind, item) {
   }
   return parsed.data;
 }
+function keepDaemonFields(existing, incoming) {
+  const oldPkg = new Map(existing.packages.map((p3) => [p3.name, p3]));
+  const packages = incoming.packages.map((p3) => {
+    const o2 = oldPkg.get(p3.name);
+    if (!o2 || o2.from !== p3.from) return p3;
+    const version2 = p3.version ?? (p3.min === o2.min ? o2.version : void 0);
+    const aptFromSnapshot = p3.aptVersion !== void 0 || p3.aptMissing !== void 0;
+    return {
+      ...p3,
+      ...version2 !== void 0 ? { version: version2 } : {},
+      ...p3.localVersion === void 0 && o2.localVersion !== void 0 ? { localVersion: o2.localVersion } : {},
+      ...!aptFromSnapshot && o2.aptVersion !== void 0 ? { aptVersion: o2.aptVersion } : {},
+      ...!aptFromSnapshot && o2.aptMissing !== void 0 ? { aptMissing: o2.aptMissing } : {},
+      ...p3.artifact === void 0 && o2.artifact !== void 0 && o2.version === version2 ? { artifact: o2.artifact } : {}
+    };
+  });
+  const oldConn = new Map(existing.connectors.map((c2) => [c2.name, c2]));
+  const connectors = incoming.connectors.map((c2) => {
+    const o2 = oldConn.get(c2.name);
+    if (!o2) return c2;
+    return {
+      ...c2,
+      ...c2.credentialSource === void 0 && o2.credentialSource !== void 0 ? { credentialSource: o2.credentialSource } : {},
+      ...c2.auth === void 0 && o2.auth !== void 0 ? { auth: o2.auth } : {}
+    };
+  });
+  return { ...incoming, packages, connectors };
+}
+function replaceConnector(manifest, connector) {
+  if (!manifest.connectors.some((c2) => c2.name === connector.name)) throw new Error(`\u6E05\u5355\u91CC\u6CA1\u6709\u8FDE\u63A5\u5668 ${connector.name}`);
+  return { ...manifest, connectors: manifest.connectors.map((c2) => c2.name === connector.name ? connector : c2) };
+}
 function upsertFinding(manifest, kind, item) {
   if (kind === "connector") {
     const incoming = item;
@@ -60217,7 +60257,16 @@ function buildDeployHandlers(deps) {
     if (entry.status === "scanning" && mustBeLiveScan(args.personaId, file, "deploy:patch").id !== entry.id) {
       throw invalid("deploy:patch \u6307\u540D\u7684\u4E0D\u662F\u6B63\u5728\u8DD1\u7684\u90A3\u6B21\u626B\u63CF");
     }
-    if (args.patch.manifest) await writeScanFile(dir, replaceScan(file, { ...entry, manifest: args.patch.manifest }));
+    let manifest = entry.manifest;
+    if (args.patch.manifest) manifest = keepDaemonFields(manifest, args.patch.manifest);
+    if (args.patch.connector) {
+      try {
+        manifest = replaceConnector(manifest, args.patch.connector);
+      } catch (err) {
+        throw invalid(err instanceof Error ? err.message : String(err));
+      }
+    }
+    if (manifest !== entry.manifest) await writeScanFile(dir, replaceScan(file, { ...entry, manifest }));
     return view(args.personaId);
   };
   const putSecret = async (frame, _client, ctx) => {
@@ -71609,7 +71658,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.577".length > 0 ? "0.2.577" : "dev";
+var version = "0.2.579".length > 0 ? "0.2.579" : "dev";
 
 // src/cli-probe/probe.ts
 var fs79 = __toESM(require("fs"), 1);

package/dist/dispatch/mcp-server.cjs

@@ -21563,8 +21563,16 @@ var DeployPatchArgsSchema = external_exports.object({
   /** 改的是历史里哪次扫描的清单。扫描期 butler 删条目也走这条（scanId 在它的任务提示里） */
   scanId: external_exports.string().min(1),
   patch: external_exports.object({
-    // 人工补依赖；整份替换 manifest
-    manifest: EnvironmentManifestSchema.optional()
+    /**
+     * 整份替换 manifest（butler 扫描期删条目走这条）。daemon 写的字段（package 的 version / localVersion / artifact / aptVersion /
+     * aptMissing、连接器上点过的 credentialSource / auth）快照里缺了会从记录里补回——旧快照冲不掉它们。
+     */
+    manifest: EnvironmentManifestSchema.optional(),
+    /**
+     * 只换清单里**同名那一条**连接器（上云页连接器卡片上的点选走这条）。不带整份清单：页面手里的清单可能是旧快照，
+     * 整份写回会把 daemon 之后写进去的东西冲掉（2026-09-23 persona-log-tracer 的 hbi 资产就是这么丢的）。同名的不在 → 拒
+     */
+    connector: EnvConnectorSchema.optional()
   }).strict()
 }).strict();
 var DeployPutSecretArgsSchema = external_exports.object({
@@ -24046,7 +24054,7 @@ var METHOD_DOCS = {
     args: DeployScanArgsSchema
   },
   "deploy:patch": {
-    summary: "\u7F16\u8F91\u5386\u53F2\u91CC\u67D0\u6B21\u626B\u63CF\u7684\u6E05\u5355\uFF08scanId \u6307\u540D\uFF09\uFF1A\u624B\u5DE5\u8865 / \u5220\u4F9D\u8D56\uFF0C\u626B\u63CF\u671F butler \u5220\u6761\u76EE\u4E5F\u8D70\u8FD9\u6761\u3002**\u4E0D\u80FD\u4ECE\u8FD9\u91CC\u4F20\u51ED\u636E\u7684\u503C**\uFF08\u503C\u8D70 deploy:putSecret\uFF09\uFF1Bowner-only",
+    summary: "\u7F16\u8F91\u5386\u53F2\u91CC\u67D0\u6B21\u626B\u63CF\u7684\u6E05\u5355\uFF08scanId \u6307\u540D\uFF09\u3002patch.connector = \u53EA\u6362\u540C\u540D\u90A3\u4E00\u6761\u8FDE\u63A5\u5668\uFF08\u4E0A\u4E91\u9875\u70B9\u9009\u8D70\u8FD9\u6761\uFF0C\u4E0D\u5728\u5C31\u62D2\uFF09\uFF1Bpatch.manifest = \u6574\u4EFD\u66FF\u6362\uFF08\u624B\u5DE5\u8865 / \u5220\u4F9D\u8D56\uFF0C\u626B\u63CF\u671F butler \u5220\u6761\u76EE\u4E5F\u8D70\u8FD9\u6761\uFF09\uFF0C\u4F46 daemon \u5199\u7684\u5B57\u6BB5\uFF08\u5305\u7684 version / localVersion / artifact / aptVersion / aptMissing\u3001\u8FDE\u63A5\u5668\u70B9\u8FC7\u7684 credentialSource / auth\uFF09\u5FEB\u7167\u91CC\u7F3A\u4E86\u4F1A\u4ECE\u8BB0\u5F55\u8865\u56DE\uFF0C\u6E05\u4E0D\u6389\u3002**\u4E0D\u80FD\u4ECE\u8FD9\u91CC\u4F20\u51ED\u636E\u7684\u503C**\uFF08\u503C\u8D70 deploy:putSecret\uFF09\uFF1Bowner-only",
     args: DeployPatchArgsSchema
   },
   "deploy:putSecret": {

package/dist/persona-defaults/persona-app-builder/mcp/clawd-app-builder/mcp-server.cjs

@@ -21749,8 +21749,16 @@ var DeployPatchArgsSchema = external_exports.object({
   /** 改的是历史里哪次扫描的清单。扫描期 butler 删条目也走这条（scanId 在它的任务提示里） */
   scanId: external_exports.string().min(1),
   patch: external_exports.object({
-    // 人工补依赖；整份替换 manifest
-    manifest: EnvironmentManifestSchema.optional()
+    /**
+     * 整份替换 manifest（butler 扫描期删条目走这条）。daemon 写的字段（package 的 version / localVersion / artifact / aptVersion /
+     * aptMissing、连接器上点过的 credentialSource / auth）快照里缺了会从记录里补回——旧快照冲不掉它们。
+     */
+    manifest: EnvironmentManifestSchema.optional(),
+    /**
+     * 只换清单里**同名那一条**连接器（上云页连接器卡片上的点选走这条）。不带整份清单：页面手里的清单可能是旧快照，
+     * 整份写回会把 daemon 之后写进去的东西冲掉（2026-09-23 persona-log-tracer 的 hbi 资产就是这么丢的）。同名的不在 → 拒
+     */
+    connector: EnvConnectorSchema.optional()
   }).strict()
 }).strict();
 var DeployPutSecretArgsSchema = external_exports.object({
@@ -24232,7 +24240,7 @@ var METHOD_DOCS = {
     args: DeployScanArgsSchema
   },
   "deploy:patch": {
-    summary: "\u7F16\u8F91\u5386\u53F2\u91CC\u67D0\u6B21\u626B\u63CF\u7684\u6E05\u5355\uFF08scanId \u6307\u540D\uFF09\uFF1A\u624B\u5DE5\u8865 / \u5220\u4F9D\u8D56\uFF0C\u626B\u63CF\u671F butler \u5220\u6761\u76EE\u4E5F\u8D70\u8FD9\u6761\u3002**\u4E0D\u80FD\u4ECE\u8FD9\u91CC\u4F20\u51ED\u636E\u7684\u503C**\uFF08\u503C\u8D70 deploy:putSecret\uFF09\uFF1Bowner-only",
+    summary: "\u7F16\u8F91\u5386\u53F2\u91CC\u67D0\u6B21\u626B\u63CF\u7684\u6E05\u5355\uFF08scanId \u6307\u540D\uFF09\u3002patch.connector = \u53EA\u6362\u540C\u540D\u90A3\u4E00\u6761\u8FDE\u63A5\u5668\uFF08\u4E0A\u4E91\u9875\u70B9\u9009\u8D70\u8FD9\u6761\uFF0C\u4E0D\u5728\u5C31\u62D2\uFF09\uFF1Bpatch.manifest = \u6574\u4EFD\u66FF\u6362\uFF08\u624B\u5DE5\u8865 / \u5220\u4F9D\u8D56\uFF0C\u626B\u63CF\u671F butler \u5220\u6761\u76EE\u4E5F\u8D70\u8FD9\u6761\uFF09\uFF0C\u4F46 daemon \u5199\u7684\u5B57\u6BB5\uFF08\u5305\u7684 version / localVersion / artifact / aptVersion / aptMissing\u3001\u8FDE\u63A5\u5668\u70B9\u8FC7\u7684 credentialSource / auth\uFF09\u5FEB\u7167\u91CC\u7F3A\u4E86\u4F1A\u4ECE\u8BB0\u5F55\u8865\u56DE\uFF0C\u6E05\u4E0D\u6389\u3002**\u4E0D\u80FD\u4ECE\u8FD9\u91CC\u4F20\u51ED\u636E\u7684\u503C**\uFF08\u503C\u8D70 deploy:putSecret\uFF09\uFF1Bowner-only",
     args: DeployPatchArgsSchema
   },
   "deploy:putSecret": {

package/dist/persona-defaults/persona-dataclaw-builder/mcp/clawd-app-builder/mcp-server.cjs

@@ -21749,8 +21749,16 @@ var DeployPatchArgsSchema = external_exports.object({
   /** 改的是历史里哪次扫描的清单。扫描期 butler 删条目也走这条（scanId 在它的任务提示里） */
   scanId: external_exports.string().min(1),
   patch: external_exports.object({
-    // 人工补依赖；整份替换 manifest
-    manifest: EnvironmentManifestSchema.optional()
+    /**
+     * 整份替换 manifest（butler 扫描期删条目走这条）。daemon 写的字段（package 的 version / localVersion / artifact / aptVersion /
+     * aptMissing、连接器上点过的 credentialSource / auth）快照里缺了会从记录里补回——旧快照冲不掉它们。
+     */
+    manifest: EnvironmentManifestSchema.optional(),
+    /**
+     * 只换清单里**同名那一条**连接器（上云页连接器卡片上的点选走这条）。不带整份清单：页面手里的清单可能是旧快照，
+     * 整份写回会把 daemon 之后写进去的东西冲掉（2026-09-23 persona-log-tracer 的 hbi 资产就是这么丢的）。同名的不在 → 拒
+     */
+    connector: EnvConnectorSchema.optional()
   }).strict()
 }).strict();
 var DeployPutSecretArgsSchema = external_exports.object({
@@ -24232,7 +24240,7 @@ var METHOD_DOCS = {
     args: DeployScanArgsSchema
   },
   "deploy:patch": {
-    summary: "\u7F16\u8F91\u5386\u53F2\u91CC\u67D0\u6B21\u626B\u63CF\u7684\u6E05\u5355\uFF08scanId \u6307\u540D\uFF09\uFF1A\u624B\u5DE5\u8865 / \u5220\u4F9D\u8D56\uFF0C\u626B\u63CF\u671F butler \u5220\u6761\u76EE\u4E5F\u8D70\u8FD9\u6761\u3002**\u4E0D\u80FD\u4ECE\u8FD9\u91CC\u4F20\u51ED\u636E\u7684\u503C**\uFF08\u503C\u8D70 deploy:putSecret\uFF09\uFF1Bowner-only",
+    summary: "\u7F16\u8F91\u5386\u53F2\u91CC\u67D0\u6B21\u626B\u63CF\u7684\u6E05\u5355\uFF08scanId \u6307\u540D\uFF09\u3002patch.connector = \u53EA\u6362\u540C\u540D\u90A3\u4E00\u6761\u8FDE\u63A5\u5668\uFF08\u4E0A\u4E91\u9875\u70B9\u9009\u8D70\u8FD9\u6761\uFF0C\u4E0D\u5728\u5C31\u62D2\uFF09\uFF1Bpatch.manifest = \u6574\u4EFD\u66FF\u6362\uFF08\u624B\u5DE5\u8865 / \u5220\u4F9D\u8D56\uFF0C\u626B\u63CF\u671F butler \u5220\u6761\u76EE\u4E5F\u8D70\u8FD9\u6761\uFF09\uFF0C\u4F46 daemon \u5199\u7684\u5B57\u6BB5\uFF08\u5305\u7684 version / localVersion / artifact / aptVersion / aptMissing\u3001\u8FDE\u63A5\u5668\u70B9\u8FC7\u7684 credentialSource / auth\uFF09\u5FEB\u7167\u91CC\u7F3A\u4E86\u4F1A\u4ECE\u8BB0\u5F55\u8865\u56DE\uFF0C\u6E05\u4E0D\u6389\u3002**\u4E0D\u80FD\u4ECE\u8FD9\u91CC\u4F20\u51ED\u636E\u7684\u503C**\uFF08\u503C\u8D70 deploy:putSecret\uFF09\uFF1Bowner-only",
     args: DeployPatchArgsSchema
   },
   "deploy:putSecret": {