@clawos-dev/clawd 0.2.621 → 0.2.623

package/dist/dispatch/mcp-server.cjs

@@ -21412,6 +21412,46 @@ var EnvEvidenceSchema = external_exports.object({
   quote: external_exports.string().min(1)
 });
 
+// ../protocol/src/release-schemas.ts
+var DEPLOY_ENVIRONMENTS = ["integration", "production"];
+var DeployEnvironmentSchema = external_exports.enum(DEPLOY_ENVIRONMENTS);
+var ImageDigestSchema = external_exports.string().regex(/^[a-z0-9.-]+(?::[0-9]+)?\/[a-z0-9._/-]+@sha256:[a-f0-9]{64}$/);
+var SourceCommitSchema = external_exports.string().regex(/^[a-f0-9]{40}$/);
+var IntegrationEndpointSchema = external_exports.string().refine((value) => {
+  try {
+    const url = new URL(value);
+    return url.protocol === "https:" && !url.username && !url.password && !url.search && !url.hash && url.pathname === "/" && /(^|[.-])int([.-]|$)/.test(url.hostname);
+  } catch {
+    return false;
+  }
+}, "\u6D4B\u8BD5\u9A8C\u8BC1\u5730\u5740\u5FC5\u987B\u660E\u786E\u6307\u5411 int HTTPS \u73AF\u5883");
+var VerificationSchema = external_exports.object({
+  status: external_exports.literal("passed"),
+  fingerprint: external_exports.string().regex(/^[a-f0-9]{64}$/),
+  checks: external_exports.array(external_exports.string().regex(/^[a-z0-9-]+$/)),
+  endpoint: IntegrationEndpointSchema,
+  verifiedAt: external_exports.string().refine((s) => Number.isFinite(Date.parse(s)))
+}).strict();
+var VerifiedPersonaReleaseSchema = external_exports.object({
+  version: external_exports.literal(1),
+  environment: external_exports.literal("integration"),
+  component: external_exports.literal("persona"),
+  image: ImageDigestSchema,
+  commit: SourceCommitSchema,
+  baseImage: ImageDigestSchema,
+  pipelineCommit: SourceCommitSchema,
+  repository: external_exports.string().regex(/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/),
+  verification: VerificationSchema.refine((v) => v.checks.includes("persona-smoke"))
+}).strict();
+var VerifiedBaseReleaseSchema = external_exports.object({
+  version: external_exports.literal(1),
+  environment: external_exports.literal("integration"),
+  component: external_exports.literal("base"),
+  image: ImageDigestSchema,
+  commit: SourceCommitSchema,
+  verification: VerificationSchema.refine((v) => v.checks.includes("base-smoke"))
+}).strict();
+
 // ../protocol/src/deploy-schemas.ts
 var DeployFileSchema = external_exports.object({
   version: external_exports.literal(1),
@@ -21440,15 +21480,44 @@ var DeployScanSchema = external_exports.object({
   error: external_exports.string().optional()
 }).strict();
 var DeployReleasedSchema = external_exports.object({
+  /** Legacy wire records can omit these; file migration always materializes them. */
+  id: external_exports.string().min(1).optional(),
+  environment: DeployEnvironmentSchema.optional(),
+  legacy: external_exports.boolean().optional(),
   head: external_exports.string().min(1),
   contentHead: external_exports.string().min(1),
   scanId: external_exports.string().min(1),
-  at: external_exports.number()
+  at: external_exports.number(),
+  pushed: external_exports.boolean().optional(),
+  runId: external_exports.number().int().positive().optional(),
+  runAttempt: external_exports.number().int().positive().optional(),
+  artifactId: external_exports.number().int().positive().optional(),
+  verified: VerifiedPersonaReleaseSchema.optional(),
+  confirmation: external_exports.object({
+    fingerprint: external_exports.string().regex(/^[a-f0-9]{64}$/),
+    runId: external_exports.number().int().positive(),
+    runAttempt: external_exports.number().int().positive(),
+    at: external_exports.number()
+  }).strict().optional()
+}).strict();
+var DEPLOY_PROMOTION_PHASES = ["prepared", "main-pushed", "dispatching", "dispatched", "completed", "failed"];
+var DeployPromotionSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  releaseId: external_exports.string().min(1),
+  at: external_exports.number(),
+  /** Artifact fixed when the user authorizes this action; int reruns cannot replace it. */
+  verified: VerifiedPersonaReleaseSchema.optional(),
+  phase: external_exports.enum(DEPLOY_PROMOTION_PHASES),
+  expectedMain: external_exports.string().optional(),
+  runId: external_exports.number().int().positive().optional(),
+  runAttempt: external_exports.number().int().positive().optional(),
+  error: external_exports.string().optional()
 }).strict();
 var DeployScanFileSchema = external_exports.object({
-  version: external_exports.literal(3),
+  version: external_exports.literal(4),
   scans: external_exports.array(DeployScanSchema),
-  releases: external_exports.array(DeployReleasedSchema)
+  releases: external_exports.array(DeployReleasedSchema),
+  promotions: external_exports.array(DeployPromotionSchema).default([])
 }).strict();
 var DeployRepoSchema = external_exports.object({
   url: external_exports.string().min(1),
@@ -21482,7 +21551,13 @@ var DeployRunSchema = external_exports.object({
   status: external_exports.enum(["queued", "running", "completed"]),
   htmlUrl: external_exports.string().min(1),
   /** run 刚入队时可能一条都还没有 */
-  jobs: external_exports.array(DeployJobSchema)
+  jobs: external_exports.array(DeployJobSchema),
+  environment: DeployEnvironmentSchema.optional(),
+  branch: external_exports.string().optional(),
+  event: external_exports.string().optional(),
+  runAttempt: external_exports.number().int().positive().optional(),
+  conclusion: external_exports.enum(["success", "failure"]).optional(),
+  promotionId: external_exports.string().optional()
 }).strict();
 var DeployUnpublishRunSchema = external_exports.object({
   runId: external_exports.number(),
@@ -21497,6 +21572,23 @@ var DeployStateSchema = external_exports.object({
   repo: DeployRepoSchema.optional(),
   scans: external_exports.array(DeployScanSchema).default([]),
   releases: external_exports.array(DeployReleasedSchema).default([]),
+  promotions: external_exports.array(DeployPromotionSchema).optional(),
+  targets: external_exports.object({
+    integration: external_exports.object({
+      run: DeployRunSchema.optional(),
+      secrets: external_exports.array(DeploySecretPresenceSchema).optional(),
+      online: external_exports.boolean().optional(),
+      image: ImageDigestSchema.optional(),
+      unpublish: DeployUnpublishRunSchema.optional()
+    }).strict().optional(),
+    production: external_exports.object({
+      run: DeployRunSchema.optional(),
+      secrets: external_exports.array(DeploySecretPresenceSchema).optional(),
+      online: external_exports.boolean().optional(),
+      image: ImageDigestSchema.optional(),
+      unpublish: DeployUnpublishRunSchema.optional()
+    }).strict().optional()
+  }).strict().optional(),
   /** 没仓库时缺席（查不了） */
   secrets: external_exports.array(DeploySecretPresenceSchema).optional(),
   /**
@@ -21523,13 +21615,16 @@ var DeployUnpublishResultSchema = external_exports.object({
 var DeployPatchResultSchema = DeployStateSchema.pick({ scans: true });
 var DeployReleaseResultSchema = external_exports.object({
   sha: external_exports.string().min(1),
-  actionsUrl: external_exports.string().min(1)
+  actionsUrl: external_exports.string().min(1),
+  releaseId: external_exports.string().optional()
 }).strict();
 var DeployPersonaArgsSchema = external_exports.object({
   personaId: external_exports.string().min(1)
 }).strict();
 var DeployGetArgsSchema = DeployPersonaArgsSchema.extend({
-  releaseHead: external_exports.string().min(1).optional()
+  releaseHead: external_exports.string().min(1).optional(),
+  releaseId: external_exports.string().min(1).optional(),
+  environment: DeployEnvironmentSchema.optional()
 }).strict();
 var DeployScanArgsSchema = DeployPersonaArgsSchema.extend({
   scanBase: ScanBaseKindSchema.optional()
@@ -21537,6 +21632,13 @@ var DeployScanArgsSchema = DeployPersonaArgsSchema.extend({
 var DeployReleaseArgsSchema = DeployPersonaArgsSchema.extend({
   scanId: external_exports.string().min(1)
 }).strict();
+var DeployConfirmTestArgsSchema = DeployPersonaArgsSchema.extend({ releaseId: external_exports.string().min(1) }).strict();
+var DeployPromoteArgsSchema = DeployConfirmTestArgsSchema;
+var DeployOpenTestArgsSchema = DeployConfirmTestArgsSchema;
+var DeployEnvironmentArgsSchema = DeployPersonaArgsSchema.extend({ environment: DeployEnvironmentSchema.default("production") }).strict();
+var DeployConfirmTestResultSchema = external_exports.object({ confirmation: DeployReleasedSchema.shape.confirmation.unwrap() }).strict();
+var DeployPromoteResultSchema = external_exports.object({ promotion: DeployPromotionSchema }).strict();
+var DeployOpenTestResultSchema = external_exports.object({ personaId: external_exports.string().min(1), expectedImage: ImageDigestSchema }).strict();
 var DeployPatchArgsSchema = external_exports.object({
   personaId: external_exports.string().min(1),
   scanId: external_exports.string().min(1),
@@ -21552,6 +21654,7 @@ var DeployPatchArgsSchema = external_exports.object({
 }).strict();
 var DeployPutSecretArgsSchema = external_exports.object({
   personaId: external_exports.string().min(1),
+  environment: DeployEnvironmentSchema.default("production"),
   /** 按哪次扫描的清单校验凭据名 / env 名。值本身是仓库级的（GitHub Secrets），跟扫描无关 */
   scanId: external_exports.string().min(1),
   name: external_exports.string().min(1),
@@ -21560,6 +21663,7 @@ var DeployPutSecretArgsSchema = external_exports.object({
 }).strict();
 var DeploySetEngineAuthArgsSchema = external_exports.object({
   personaId: external_exports.string().min(1),
+  environment: DeployEnvironmentSchema.default("production"),
   channelId: external_exports.string().min(1).optional(),
   auth: external_exports.object({ baseUrl: external_exports.string(), apiKey: external_exports.string() }).strict().nullable().optional()
 }).strict().refine((data) => data.channelId !== void 0 || data.auth !== void 0, {
@@ -21567,6 +21671,8 @@ var DeploySetEngineAuthArgsSchema = external_exports.object({
 });
 var DeployRerunJobArgsSchema = external_exports.object({
   personaId: external_exports.string().min(1),
+  environment: DeployEnvironmentSchema.default("production"),
+  releaseId: external_exports.string().optional(),
   jobId: external_exports.number()
 }).strict();
 var DeployReportFindingArgsSchema = external_exports.object({
@@ -21588,6 +21694,99 @@ var DeployFinishScanArgsSchema = external_exports.object({
   notes: external_exports.array(external_exports.string()).default([])
 }).strict();
 
+// ../protocol/src/feishu-auth.ts
+var AuthEnvironmentArgsSchema = external_exports.object({ environment: DeployEnvironmentSchema.default("production") }).strict();
+var DeviceEntrySchema = external_exports.object({
+  /**
+   * 设备标识（决策 #15：daemon 本地生成的 dev-<uuid>，与人的身份 unionId 无关）。
+   * 中心 server clawd_devices 注册表仅作服务发现（url 下发 + 目录），不在安全路径上。
+   */
+  deviceId: external_exports.string().min(1),
+  name: external_exports.string().min(1),
+  url: external_exports.string().min(1)
+});
+var DeviceListResponseSchema = external_exports.object({
+  type: external_exports.literal("device:list:ok"),
+  devices: external_exports.array(DeviceEntrySchema)
+});
+var DeviceConnectArgsSchema = external_exports.object({
+  deviceId: external_exports.string().min(1),
+  /**
+   * 目标设备的 ws/tunnel 地址（可选）：
+   *   - 公开目录点击：带 url（device:list 已下发，省一次 server 查询）
+   *   - 凭 deviceId 连接：缺省 url → daemon exchange 时由中心 server 下发该设备上报的 url
+   *   - 注册表不在安全路径上：知道对方 url 时显式传入即可连接（不依赖中心 server 服务发现）
+   */
+  url: external_exports.string().min(1).optional(),
+  /** Optional display name; otherwise populate it from the handshake acknowledgement. */
+  name: external_exports.string().optional()
+});
+var DeviceConnectResponseSchema = external_exports.object({
+  type: external_exports.literal("device:connect:ok"),
+  deviceId: external_exports.string(),
+  name: external_exports.string(),
+  url: external_exports.string()
+});
+var FeishuIdentitySchema = external_exports.object({
+  /** 归属人 id（决策 #16：TTC unique_id，取代飞书 union_id；跨登录方式稳定） */
+  ownerId: external_exports.string().min(1),
+  /** 身份来源：'ttc'（飞书/手机/邮箱登入 TTC）| 'google' | ...（决策 #16，拓展用） */
+  provider: external_exports.string().min(1),
+  displayName: external_exports.string().min(1),
+  /** TTC user_info 接口 data.avatar_url，可缺省 */
+  avatarUrl: external_exports.string().optional(),
+  /** TTC user_info 接口 data.union_id（飞书 union_id；dataclaw 可信入口 X-User-UnionId 用），可缺省 */
+  unionId: external_exports.string().optional()
+});
+var AuthLoginStartResponseSchema = external_exports.object({
+  type: external_exports.literal("auth:login:start:ok"),
+  environment: DeployEnvironmentSchema.optional(),
+  authUrl: external_exports.string().min(1),
+  /** 防 CSRF 的一次性 nonce；回调时 daemon 校验 */
+  state: external_exports.string().min(1)
+});
+var AuthGetIdentityResponseSchema = external_exports.object({
+  type: external_exports.literal("auth:getIdentity:ok"),
+  /** null = 未登录 */
+  identity: FeishuIdentitySchema.nullable(),
+  /** Stable device identifier independent of login, used for the shareable device link. */
+  deviceId: external_exports.string().min(1)
+});
+var AuthLogoutResponseSchema = external_exports.object({
+  type: external_exports.literal("auth:logout:ok")
+});
+var GatewayUrl = external_exports.string().nullable();
+var AuthApiKeyGetResponseSchema = external_exports.object({
+  type: external_exports.literal("auth:apiKey:get:ok"),
+  /** null = 还没发过。**发过就能一直看到** —— 中心存的是明文，设置页据此展示 */
+  apiKey: external_exports.string().nullable(),
+  /** ISO 时间；apiKey 为 null 时同为 null */
+  createdAt: external_exports.string().nullable(),
+  gatewayUrl: GatewayUrl
+});
+var AuthApiKeyRegenerateResponseSchema = external_exports.object({
+  type: external_exports.literal("auth:apiKey:regenerate:ok"),
+  /** 新发的那把。**旧的当场失效** —— 一人一把，按 union_id 覆盖 */
+  apiKey: external_exports.string().min(1),
+  createdAt: external_exports.string().min(1),
+  gatewayUrl: GatewayUrl
+});
+var AuthApiKeyRevokeResponseSchema = external_exports.object({
+  type: external_exports.literal("auth:apiKey:revoke:ok"),
+  /** 之前有没有那把——没发过也算成功（幂等） */
+  revoked: external_exports.boolean()
+});
+var AuthLoginDoneEventSchema = external_exports.object({
+  type: external_exports.literal("auth:login:done"),
+  environment: DeployEnvironmentSchema.optional(),
+  identity: FeishuIdentitySchema
+});
+var AuthLoginFailedEventSchema = external_exports.object({
+  type: external_exports.literal("auth:login:failed"),
+  environment: DeployEnvironmentSchema.optional(),
+  reason: external_exports.string()
+});
+
 // ../protocol/src/contact-remote-access.ts
 var ContactSetRemoteAccessArgsSchema = external_exports.object({
   deviceId: external_exports.string().min(1),
@@ -21705,95 +21904,6 @@ var ContactPinnedFrameSchema = external_exports.object({
   pinnedAt: external_exports.number().int().nullable()
 }).strict();
 
-// ../protocol/src/feishu-auth.ts
-var DeviceEntrySchema = external_exports.object({
-  /**
-   * 设备标识（决策 #15：daemon 本地生成的 dev-<uuid>，与人的身份 unionId 无关）。
-   * 中心 server clawd_devices 注册表仅作服务发现（url 下发 + 目录），不在安全路径上。
-   */
-  deviceId: external_exports.string().min(1),
-  name: external_exports.string().min(1),
-  url: external_exports.string().min(1)
-});
-var DeviceListResponseSchema = external_exports.object({
-  type: external_exports.literal("device:list:ok"),
-  devices: external_exports.array(DeviceEntrySchema)
-});
-var DeviceConnectArgsSchema = external_exports.object({
-  deviceId: external_exports.string().min(1),
-  /**
-   * 目标设备的 ws/tunnel 地址（可选）：
-   *   - 公开目录点击：带 url（device:list 已下发，省一次 server 查询）
-   *   - 凭 deviceId 连接：缺省 url → daemon exchange 时由中心 server 下发该设备上报的 url
-   *   - 注册表不在安全路径上：知道对方 url 时显式传入即可连接（不依赖中心 server 服务发现）
-   */
-  url: external_exports.string().min(1).optional(),
-  /** Optional display name; otherwise populate it from the handshake acknowledgement. */
-  name: external_exports.string().optional()
-});
-var DeviceConnectResponseSchema = external_exports.object({
-  type: external_exports.literal("device:connect:ok"),
-  deviceId: external_exports.string(),
-  name: external_exports.string(),
-  url: external_exports.string()
-});
-var FeishuIdentitySchema = external_exports.object({
-  /** 归属人 id（决策 #16：TTC unique_id，取代飞书 union_id；跨登录方式稳定） */
-  ownerId: external_exports.string().min(1),
-  /** 身份来源：'ttc'（飞书/手机/邮箱登入 TTC）| 'google' | ...（决策 #16，拓展用） */
-  provider: external_exports.string().min(1),
-  displayName: external_exports.string().min(1),
-  /** TTC user_info 接口 data.avatar_url，可缺省 */
-  avatarUrl: external_exports.string().optional(),
-  /** TTC user_info 接口 data.union_id（飞书 union_id；dataclaw 可信入口 X-User-UnionId 用），可缺省 */
-  unionId: external_exports.string().optional()
-});
-var AuthLoginStartResponseSchema = external_exports.object({
-  type: external_exports.literal("auth:login:start:ok"),
-  authUrl: external_exports.string().min(1),
-  /** 防 CSRF 的一次性 nonce；回调时 daemon 校验 */
-  state: external_exports.string().min(1)
-});
-var AuthGetIdentityResponseSchema = external_exports.object({
-  type: external_exports.literal("auth:getIdentity:ok"),
-  /** null = 未登录 */
-  identity: FeishuIdentitySchema.nullable(),
-  /** Stable device identifier independent of login, used for the shareable device link. */
-  deviceId: external_exports.string().min(1)
-});
-var AuthLogoutResponseSchema = external_exports.object({
-  type: external_exports.literal("auth:logout:ok")
-});
-var GatewayUrl = external_exports.string().nullable();
-var AuthApiKeyGetResponseSchema = external_exports.object({
-  type: external_exports.literal("auth:apiKey:get:ok"),
-  /** null = 还没发过。**发过就能一直看到** —— 中心存的是明文，设置页据此展示 */
-  apiKey: external_exports.string().nullable(),
-  /** ISO 时间；apiKey 为 null 时同为 null */
-  createdAt: external_exports.string().nullable(),
-  gatewayUrl: GatewayUrl
-});
-var AuthApiKeyRegenerateResponseSchema = external_exports.object({
-  type: external_exports.literal("auth:apiKey:regenerate:ok"),
-  /** 新发的那把。**旧的当场失效** —— 一人一把，按 union_id 覆盖 */
-  apiKey: external_exports.string().min(1),
-  createdAt: external_exports.string().min(1),
-  gatewayUrl: GatewayUrl
-});
-var AuthApiKeyRevokeResponseSchema = external_exports.object({
-  type: external_exports.literal("auth:apiKey:revoke:ok"),
-  /** 之前有没有那把——没发过也算成功（幂等） */
-  revoked: external_exports.boolean()
-});
-var AuthLoginDoneEventSchema = external_exports.object({
-  type: external_exports.literal("auth:login:done"),
-  identity: FeishuIdentitySchema
-});
-var AuthLoginFailedEventSchema = external_exports.object({
-  type: external_exports.literal("auth:login:failed"),
-  reason: external_exports.string()
-});
-
 // ../protocol/src/dispatch.ts
 var DispatchOutcomeSchema = external_exports.discriminatedUnion("kind", [
   external_exports.object({
@@ -22597,7 +22707,14 @@ var PersonaFileSchema = external_exports.object({
   createdAt: external_exports.number(),
   updatedAt: external_exports.number(),
   /** Registry-only cloud entry, with no local persona directory. Local key adds -cloud; gateway paths use cloud.personaId and the registered engine determines the cloud tool id. */
-  cloud: external_exports.object({ gatewayUrl: external_exports.string().min(1), personaId: external_exports.string().min(1), publishedByMe: external_exports.boolean().optional() }).strict().optional()
+  cloud: external_exports.object({
+    gatewayUrl: external_exports.string().min(1),
+    personaId: external_exports.string().min(1),
+    publishedByMe: external_exports.boolean().optional(),
+    environment: DeployEnvironmentSchema.optional(),
+    expectedImage: ImageDigestSchema.optional(),
+    testReleaseId: external_exports.string().optional()
+  }).strict().optional()
 }).strict();
 var PersonaSkillSummarySchema = external_exports.object({
   // 目录名作为 skill name（对齐 CC：frontmatter `name:` 仅作 displayName 用）
@@ -22831,6 +22948,9 @@ var AllowRuleSchema = external_exports.object({
   createdAt: external_exports.string().min(1).optional()
 });
 var SessionFileSchema = external_exports.object({
+  cloudEnvironment: DeployEnvironmentSchema.optional(),
+  cloudExpectedImage: ImageDigestSchema.optional(),
+  testReleaseId: external_exports.string().optional(),
   sessionId: external_exports.string().min(1),
   /** New gateway execution identity after session:new; defaults to sessionId for the first execution. */
   cloudExecutionId: external_exports.string().min(1).optional(),
@@ -23707,9 +23827,21 @@ var METHOD_DOCS = {
     summary: "\u539F\u6837\u91CD\u8DD1\u6700\u65B0\u90A3\u6761\u6D41\u6C34\u7EBF\u91CC\u5931\u8D25\u7684\u67D0\u4E00\u6BB5\uFF08GitHub REST rerun job\uFF09\u3002**\u540C\u4E00\u4E2A commit\u3001\u540C\u4E00\u4EFD\u8F93\u5165**\uFF0C\u4E0D\u4EA7\u751F\u65B0\u63D0\u4EA4\u2014\u2014\u6539\u4E86 persona \u5185\u5BB9\u8981 deploy:scan \u518D deploy:release\u3002jobId \u5FC5\u987B\u5C5E\u4E8E\u6700\u65B0\u90A3\u6761 run\uFF1Bowner-only",
     args: DeployRerunJobArgsSchema
   },
+  "deploy:confirmTest": {
+    summary: "\u786E\u8BA4\u6240\u9009\u6D4B\u8BD5\u7248\u901A\u8FC7\u5B9E\u9645\u8BD5\u7528\uFF1B\u6309\u5DF2\u4FDD\u5B58\u5236\u54C1\u548C\u6D4B\u8BD5\u767B\u8BB0\u6821\u9A8C\uFF0Cowner-only\u3001human-only",
+    args: DeployConfirmTestArgsSchema
+  },
+  "deploy:promote": {
+    summary: "\u5C06\u5DF2\u786E\u8BA4\u6D4B\u8BD5\u7248\u7684\u63D0\u4EA4\u63A8\u8FDB main \u5E76\u4E0A\u7EBF\u76F8\u540C\u955C\u50CF\uFF1B\u6062\u590D\u4E2D\u65AD\u7684\u540C\u4E00\u6B21\u664B\u7EA7\uFF0Cowner-only\u3001human-only",
+    args: DeployPromoteArgsSchema
+  },
+  "deploy:openTest": {
+    summary: "\u51C6\u5907\u5F53\u524D\u6D4B\u8BD5\u7248\u7684\u4E91 Persona \u4F1A\u8BDD\u5165\u53E3\uFF0C\u9501\u5B9A\u73AF\u5883\u548C\u5DF2\u6D4B\u955C\u50CF\uFF0Cowner-only\u3001human-only",
+    args: DeployOpenTestArgsSchema
+  },
   "deploy:unpublish": {
     summary: "\u4E0B\u7EBF\uFF1A\u89E6\u53D1 persona \u4ED3\u5E93\u91CC\u7684 clawd-unpublish.yml\uFF08workflow_dispatch\uFF09\uFF0C\u7531\u6D41\u6C34\u7EBF\u5728 gateway \u64A4\u6389\u6B63\u5F0F\u767B\u8BB0\u2014\u2014\u522B\u4EBA\u770B\u4E0D\u5230\u3001\u7528\u4E0D\u4E86\uFF1B\u4ED3\u5E93 / \u955C\u50CF / \u672C\u673A\u4E0A\u4E91\u8BB0\u5F55\u90FD\u4E0D\u52A8\uFF0C\u91CD\u65B0\u53D1\u5E03\u5C31\u56DE\u6765\u3002\u6700\u540E\u4E00\u6B21\u53D1\u5E03\u7684 commit \u91CC\u6CA1\u6709\u8FD9\u4EFD workflow\uFF08\u65E7\u6A21\u677F\uFF09\u65F6\u62D2\uFF0C\u8981\u5148\u91CD\u65B0\u53D1\u5E03\u4E00\u6B21\u3002\u56DE { before }\uFF1A\u89E6\u53D1\u4E4B\u524D\u73B0\u67E5\u7684\u6700\u65B0\u4E0B\u7EBF run id\uFF08\u6CA1\u4E0B\u7EBF\u8FC7 = null\uFF09\uFF0C\u9875\u9762\u62FF\u5B83\u8BA4\u65B0 run\uFF1Bowner-only\u3001human-only",
-    args: DeployPersonaArgsSchema
+    args: DeployEnvironmentArgsSchema
   },
   "githubAuth:get": {
     summary: "\u672C\u673A\u7684 GitHub \u8EAB\u4EFD\uFF1Aauthorized\uFF08@login\uFF0C\u6765\u81EA git \u51ED\u636E\u5B58\u50A8 / \u672C\u673A\u51ED\u636E\u8868\uFF09/ missing / invalid\uFF08GitHub \u4E0D\u8BA4\uFF09/ pending\uFF08\u7B49 GitHub \u8DF3\u56DE\u4E2D\u5FC3\uFF09\u3002\u8BBE\u7F6E\u9875\u300C\u8D26\u53F7\u300D\u3001\u4E0A\u4E91\u9875\u9876\u4E0A\u90A3\u5F20\u5361\u3001PR \u6536\u4EF6\u7BB1\u90FD\u770B\u5B83\uFF1Bpending \u671F\u9875\u9762\u6BCF 2 \u79D2\u8F6E\u8BE2\uFF0Cdaemon \u987A\u624B\u5411\u4E2D\u5FC3\u9886 token\u3002\u65E0\u53C2\u6570",
@@ -24131,7 +24263,7 @@ var METHOD_DOCS = {
   },
   "auth:login:start": {
     summary: "\u8D77\u98DE\u4E66\u767B\u5F55\u6D41\u7A0B\uFF1A\u751F\u6210 state \u5E76\u8FD4\u56DE\u6388\u6743 URL\uFF0C\u56DE\u8C03\u8D70 HTTP /auth/callback \u843D\u76D8\u3002owner-only",
-    args: NO_ARGS
+    args: AuthEnvironmentArgsSchema
   },
   "auth:getIdentity": {
     summary: "\u53D6\u672C\u673A owner \u7684\u98DE\u4E66\u8EAB\u4EFD\uFF08ownerId / provider / displayName / unionId\uFF09+ **\u672C\u673A deviceId**\uFF08\u8BBE\u5907\u5C5E\u6027\uFF0C\u4E0E\u767B\u5F55\u6001\u65E0\u5173\uFF1Bdevice:connect / contact:* / inbox:* \u7684\u4E3B\u952E\u90FD\u662F\u5B83\uFF09\uFF1B\u7EDD\u4E0D\u8FD4\u56DE\u767B\u5F55\u7968",
@@ -24143,15 +24275,15 @@ var METHOD_DOCS = {
   },
   "auth:apiKey:get": {
     summary: "\u8BFB\u56DE\u81EA\u5DF1\u90A3\u628A\u4E91 persona \u8C03\u7528 key\uFF08\u6CA1\u53D1\u8FC7 \u2192 apiKey:null\uFF09\u3002daemon \u62FF\u672C\u673A\u767B\u5F55\u51ED\u8BC1\u5411\u4E2D\u5FC3\u4EE3\u53D6\uFF0C\u51ED\u8BC1\u4E0D\u51FA ws\u3002owner-only",
-    args: NO_ARGS
+    args: AuthEnvironmentArgsSchema
   },
   "auth:apiKey:regenerate": {
     summary: "\u6362\u4E00\u628A\u65B0\u7684\u4E91 persona \u8C03\u7528 key\uFF0C**\u65E7\u7684\u5F53\u573A\u5931\u6548**\uFF08\u4E00\u4EBA\u4E00\u628A\uFF0C\u4E2D\u5FC3\u6309 union_id \u8986\u76D6\uFF09\u3002owner-only",
-    args: NO_ARGS
+    args: AuthEnvironmentArgsSchema
   },
   "auth:apiKey:revoke": {
     summary: "\u64A4\u9500\u81EA\u5DF1\u7684\u4E91 persona \u8C03\u7528 key\uFF1A\u4E2D\u5FC3\u5220\u6389\u90A3\u4E00\u884C\u3001**\u4E0D\u53D1\u65B0\u7684**\u3002gateway \u53EA\u5728\u5F00\u4F1A\u8BDD\u548C\u6BCF\u6B21\u4E0A\u884C\u65F6\u9A8C key\uFF0C\u6240\u4EE5\u5F00\u7740\u7684\u4E91\u4F1A\u8BDD\u4E0B\u4E00\u6761\u6D88\u606F\u624D\u53D1\u4E0D\u51FA\u53BB\u3001\u6B63\u5728\u8DD1\u7684\u90A3\u4E00\u8F6E\u4F1A\u8DD1\u5B8C\u3002\u6CA1\u53D1\u8FC7\u4E5F\u56DE ok\uFF08revoked:false\uFF09\u3002owner-only",
-    args: NO_ARGS
+    args: AuthEnvironmentArgsSchema
   },
   "device:list": {
     summary: "\u5217\u51FA\u516C\u5171\u8BBE\u5907\u76EE\u5F55\u91CC\u53EF\u8FDE\u63A5\u7684\u8BBE\u5907\uFF08daemon \u4EE3\u7406\u4E2D\u5FC3 server\uFF09\u3002owner-only",