@clawos-dev/clawd 0.2.657 → 0.2.659

package/dist/cli.cjs

@@ -5830,7 +5830,11 @@ var init_subscription_channel = __esm({
     SubscriptionChannelActivateArgsSchema = external_exports.object({
       id: external_exports.string().min(1).nullable()
     }).strict();
-    SubscriptionChannelModelsArgsSchema = external_exports.object({}).strict();
+    SubscriptionChannelModelsArgsSchema = external_exports.object({
+      channelId: external_exports.string().min(1).optional(),
+      /** Reject discovery when the saved cloud credential source has since been edited. */
+      updatedAt: external_exports.number().optional()
+    }).strict().refine((args) => args.updatedAt === void 0 || args.channelId !== void 0, { message: "updatedAt requires channelId" });
     SubscriptionChannelModelsResultSchema = external_exports.object({
       /** 没有激活通道 = null（models 为空） */
       channelId: external_exports.string().nullable(),
@@ -6313,7 +6317,7 @@ function cloudEngineSettings(p3) {
 function repoSlug(url) {
   return url.trim().replace(/^git@[^:]+:/, "").replace(/^https?:\/\/[^/]+\//, "").replace(/\.git$/, "");
 }
-var DeployFileSchema, SCAN_BASE_KINDS, ScanBaseKindSchema, DeployScanStatusSchema, DeployScanSchema, DeployReleasedSchema, DEPLOY_PROMOTION_PHASES, DeployPromotionSchema, DeployScanFileSchema, DeployRepoSchema, DeploySecretPresenceSchema, ENGINE_AUTH_SECRETS, ENGINE_AUTH_PARTIAL_BLOCKER, DEPLOY_STAGE_STATUSES, DeployStageStatusSchema, DEPLOY_VERIFY_STAGE, DEPLOY_STAGE_KEYS, DeployStageKeySchema, DeployJobSchema, DeployRunSchema, CLOUD_ENGINES, DeployUnpublishRunSchema, DeployStateSchema, DeployUnpublishResultSchema, DeployPatchResultSchema, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployGetArgsSchema, DeployScanArgsSchema, DeployReleaseArgsSchema, DeployConfirmTestArgsSchema, DeployPromoteArgsSchema, DeployOpenTestArgsSchema, DeployEnvironmentArgsSchema, DeployConfirmTestResultSchema, DeployPromoteResultSchema, DeployOpenTestResultSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeploySetEngineAuthArgsSchema, DeployRerunJobArgsSchema, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
+var DeployFileSchema, SCAN_BASE_KINDS, ScanBaseKindSchema, DeployScanStatusSchema, DeployScanSchema, DeployReleasedSchema, DEPLOY_PROMOTION_PHASES, DeployPromotionSchema, DeployEngineChannelSchema, DeployEngineChannelsSchema, DeployScanFileSchema, DeployRepoSchema, DeploySecretPresenceSchema, ENGINE_AUTH_SECRETS, ENGINE_AUTH_PARTIAL_BLOCKER, DEPLOY_STAGE_STATUSES, DeployStageStatusSchema, DEPLOY_VERIFY_STAGE, DEPLOY_STAGE_KEYS, DeployStageKeySchema, DeployJobSchema, DeployRunSchema, CLOUD_ENGINES, DeployUnpublishRunSchema, DeployStateSchema, DeployUnpublishResultSchema, DeployPatchResultSchema, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployGetArgsSchema, DeployScanArgsSchema, DeployReleaseArgsSchema, DeployConfirmTestArgsSchema, DeployPromoteArgsSchema, DeployOpenTestArgsSchema, DeployEnvironmentArgsSchema, DeployConfirmTestResultSchema, DeployPromoteResultSchema, DeployOpenTestResultSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeploySetEngineAuthArgsSchema, DeployRerunJobArgsSchema, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
 var init_deploy_schemas = __esm({
   "../protocol/src/deploy-schemas.ts"() {
     "use strict";
@@ -6381,8 +6385,14 @@ var init_deploy_schemas = __esm({
       runAttempt: external_exports.number().int().positive().optional(),
       error: external_exports.string().optional()
     }).strict();
+    DeployEngineChannelSchema = external_exports.object({ channelId: external_exports.string().min(1), updatedAt: external_exports.number() }).strict();
+    DeployEngineChannelsSchema = external_exports.object({
+      integration: DeployEngineChannelSchema.nullable().optional(),
+      production: DeployEngineChannelSchema.nullable().optional()
+    }).strict();
     DeployScanFileSchema = external_exports.object({
       version: external_exports.literal(4),
+      engineChannels: DeployEngineChannelsSchema.optional(),
       scans: external_exports.array(DeployScanSchema),
       releases: external_exports.array(DeployReleasedSchema),
       promotions: external_exports.array(DeployPromotionSchema).default([])
@@ -6439,6 +6449,7 @@ var init_deploy_schemas = __esm({
     }).strict();
     DeployStateSchema = external_exports.object({
       personaId: external_exports.string().min(1),
+      engineChannels: DeployEngineChannelsSchema.optional(),
       /** 本机 GitHub 身份（机器级，githubAuth:* 的同一份；上云页顶上那张卡用）。老 daemon 不给（可选只为兼容），UI 缺席时按未知处理 */
       github: GithubAuthStatusSchema.optional(),
       /** Current publisher's Feishu tool grant, including authorization links before first release. */
@@ -9332,8 +9343,9 @@ var init_methods = __esm({
         args: SubscriptionChannelActivateArgsSchema
       },
       "subscriptionChannel:models": {
-        summary: "\u5217\u51FA\u5F53\u524D\u6FC0\u6D3B\u8BA2\u9605\u901A\u9053\uFF08\u53F7\u6C60\uFF09GET {baseUrl}/models \u7684\u6A21\u578B id\u3002\u4E0A\u4E91\u9875 Claude \u5F15\u64CE\u7684\u6A21\u578B\u5019\u9009\u3002\u6CA1\u6709\u6FC0\u6D3B\u901A\u9053\u56DE\u7A7A\u8868\uFF1B\u53F7\u6C60\u8BF7\u6C42\u5931\u8D25 reject\u3002owner-only",
-        args: SubscriptionChannelModelsArgsSchema
+        summary: "\u5217\u51FA\u6307\u5B9A\u8BA2\u9605\u901A\u9053\u7684\u6A21\u578B ID\uFF0C\u4E0D\u6FC0\u6D3B\u672C\u673A\u901A\u9053\uFF1B\u7701\u7565 channelId \u65F6\u67E5\u672C\u673A\u6FC0\u6D3B\u901A\u9053\u3002updatedAt \u6821\u9A8C\u4E91\u7AEF\u4FDD\u5B58\u540E\u901A\u9053\u662F\u5426\u53D8\u66F4\u3002\u6CA1\u6709\u672C\u673A\u6FC0\u6D3B\u901A\u9053\u56DE\u7A7A\u8868\uFF1B\u6307\u5B9A\u901A\u9053\u4E0D\u5B58\u5728\u3001\u5DF2\u53D8\u66F4\u6216\u8BF7\u6C42\u5931\u8D25 reject\u3002owner-only",
+        args: SubscriptionChannelModelsArgsSchema,
+        argsConstraints: { dependentRequired: { updatedAt: ["channelId"] } }
       },
       "engine:connectPool": {
         summary: "\u63A5\u5165\u53F7\u6C60\uFF1A\u62FF\u81EA\u52A9\u53F0\u53D1\u7684\u4E2A\u4EBA key\uFF0C\u62C9\u53F7\u6C60 setup.sh \u8DD1\u4E00\u904D\uFF08\u5199 ~/.codex/config.toml \u6307\u5411 CLIProxyAPI \u4EE3\u7406\uFF09\uFF0C\u518D\u5237 codex \u6A21\u578B\u8868\u9A8C\u8BC1\u3002\u6210\u529F\u56DE { ok:true }\uFF1B\u62FF\u4E0D\u5230\u811A\u672C / \u811A\u672C\u62A5\u9519 / \u8D85\u65F6 / 401 \u4E00\u5F8B reject \u5E26\u4EBA\u8BDD\u3002\u53EA\u7BA1 codex\uFF1B\u672C\u673A\u6CA1\u88C5 codex \u62A5 INVALID_PARAM\u3002owner-only",
@@ -15876,17 +15888,504 @@ var init_permission_stdio = __esm({
   }
 });
 
+// src/tools/codex-provider-models.ts
+function asRecord2(v3) {
+  return v3 && typeof v3 === "object" && !Array.isArray(v3) ? v3 : null;
+}
+function readAuthKey(codexHome) {
+  try {
+    const raw = JSON.parse(import_node_fs21.default.readFileSync(import_node_path21.default.join(codexHome, "auth.json"), "utf8"));
+    const key = asRecord2(raw)?.OPENAI_API_KEY;
+    return typeof key === "string" && key ? key : void 0;
+  } catch {
+    return void 0;
+  }
+}
+async function runAuthCommand(name, auth, deps) {
+  const command = typeof auth.command === "string" && auth.command ? auth.command : void 0;
+  if (!command) return void 0;
+  const args = Array.isArray(auth.args) ? auth.args.filter((a2) => typeof a2 === "string") : [];
+  const timeout = typeof auth.timeout_ms === "number" && auth.timeout_ms > 0 ? Math.min(auth.timeout_ms, AUTH_COMMAND_TIMEOUT_MS) : AUTH_COMMAND_TIMEOUT_MS;
+  const cwd = typeof auth.cwd === "string" && auth.cwd ? auth.cwd : void 0;
+  try {
+    const { stdout } = await deps.execFileImpl(command, args, { ...cwd ? { cwd } : {}, timeout });
+    const token = String(stdout).trim();
+    if (token) return token;
+    deps.logger?.warn?.(`provider "${name}": auth command \`${command}\` produced an empty token, sending unauthenticated`);
+  } catch (err) {
+    const e = err;
+    const why = e.killed ? `killed by ${e.signal ?? "signal"} (timeout ${timeout}ms)` : e.code !== void 0 ? `exit/code ${e.code}` : "failed";
+    deps.logger?.warn?.(`provider "${name}": auth command \`${command}\` ${why}, sending unauthenticated`);
+  }
+  return void 0;
+}
+async function resolveProviderEndpoint(rawConfig, deps = {}) {
+  const config = asRecord2(asRecord2(rawConfig)?.config);
+  if (!config) return null;
+  const name = config.model_provider;
+  if (typeof name !== "string" || !name) return null;
+  const entry = asRecord2(asRecord2(config.model_providers)?.[name]);
+  if (!entry) return null;
+  const baseUrl = entry.base_url;
+  if (typeof baseUrl !== "string" || !baseUrl) return null;
+  const env = deps.env ?? process.env;
+  const codexHome = deps.codexHome ?? env.CODEX_HOME ?? import_node_path21.default.join(import_node_os10.default.homedir(), ".codex");
+  const envKey = typeof entry.env_key === "string" && entry.env_key ? entry.env_key : null;
+  const inlineToken = typeof entry.experimental_bearer_token === "string" && entry.experimental_bearer_token ? entry.experimental_bearer_token : void 0;
+  const auth = asRecord2(entry.auth);
+  let token;
+  if (envKey) token = env[envKey];
+  else if (inlineToken) token = inlineToken;
+  else if (auth && typeof auth.command === "string" && auth.command) {
+    token = await runAuthCommand(name, auth, { execFileImpl: deps.execFileImpl ?? defaultExecFile, ...deps.logger ? { logger: deps.logger } : {} });
+  } else token = readAuthKey(codexHome);
+  if (!token && !(auth && typeof auth.command === "string" && auth.command)) {
+    deps.logger?.warn?.(
+      envKey ? `provider "${name}": env_key ${envKey} is not set in the daemon process, sending unauthenticated` : `provider "${name}": no OPENAI_API_KEY in ${codexHome}/auth.json, sending unauthenticated`
+    );
+  }
+  return {
+    baseUrl,
+    headers: {
+      Accept: "application/json",
+      ...token ? { Authorization: `Bearer ${token}` } : {}
+    }
+  };
+}
+async function fetchProviderModels(endpoint, deps = {}) {
+  const fetchImpl = deps.fetchImpl ?? fetch;
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), deps.timeoutMs ?? PROVIDER_FETCH_TIMEOUT_MS);
+  const url = `${endpoint.baseUrl.replace(/\/$/, "")}/models`;
+  try {
+    const res = await fetchImpl(url, { headers: endpoint.headers, signal: controller.signal });
+    if (!res.ok) throw new Error(`provider model list failed: HTTP ${res.status} from ${url}`);
+    const data = asRecord2(await res.json())?.data;
+    if (!Array.isArray(data)) throw new Error(`provider model list: \`data\` is not an array (${url})`);
+    const out = [];
+    for (const item of data) {
+      const e = asRecord2(item);
+      if (!e || typeof e.id !== "string" || !e.id) continue;
+      out.push({ id: e.id, ...typeof e.owned_by === "string" ? { ownedBy: e.owned_by } : {} });
+    }
+    return out;
+  } catch (err) {
+    if (deps.throwOnFailure) throw err;
+    deps.logger?.warn?.(`provider model list failed: ${err.message}`);
+    return [];
+  } finally {
+    clearTimeout(timer);
+  }
+}
+var import_node_child_process2, import_node_fs21, import_node_os10, import_node_path21, import_node_util, PROVIDER_FETCH_TIMEOUT_MS, defaultExecFile, AUTH_COMMAND_TIMEOUT_MS;
+var init_codex_provider_models = __esm({
+  "src/tools/codex-provider-models.ts"() {
+    "use strict";
+    import_node_child_process2 = require("child_process");
+    import_node_fs21 = __toESM(require("fs"), 1);
+    import_node_os10 = __toESM(require("os"), 1);
+    import_node_path21 = __toESM(require("path"), 1);
+    import_node_util = require("util");
+    PROVIDER_FETCH_TIMEOUT_MS = 3e3;
+    defaultExecFile = (0, import_node_util.promisify)(import_node_child_process2.execFile);
+    AUTH_COMMAND_TIMEOUT_MS = 5e3;
+  }
+});
+
+// src/tools/codex-config-toml.ts
+function parseKey(src, start) {
+  const parts = [];
+  let i2 = start;
+  for (; ; ) {
+    while (src[i2] === " " || src[i2] === "	") i2++;
+    let part;
+    if (src[i2] === '"') {
+      let j2 = i2 + 1;
+      while (j2 < src.length && src[j2] !== '"') j2 += src[j2] === "\\" ? 2 : 1;
+      if (j2 >= src.length) return null;
+      try {
+        part = JSON.parse(src.slice(i2, j2 + 1));
+      } catch {
+        part = src.slice(i2 + 1, j2);
+      }
+      i2 = j2 + 1;
+    } else if (src[i2] === "'") {
+      const j2 = src.indexOf("'", i2 + 1);
+      if (j2 < 0) return null;
+      part = src.slice(i2 + 1, j2);
+      i2 = j2 + 1;
+    } else {
+      const bare = /^[A-Za-z0-9_-]+/.exec(src.slice(i2));
+      if (!bare) return null;
+      part = bare[0];
+      i2 += part.length;
+    }
+    parts.push(part);
+    while (src[i2] === " " || src[i2] === "	") i2++;
+    if (src[i2] !== ".") return { parts, end: i2 };
+    i2++;
+  }
+}
+function tableHeader(line) {
+  const open = /^\s*(\[\[?)/.exec(line);
+  if (!open) return null;
+  const key = parseKey(line, open[0].length);
+  if (!key) return null;
+  const close = open[1] === "[[" ? "]]" : "]";
+  if (!line.startsWith(close, key.end)) return null;
+  return /^\s*(?:#.*)?$/.test(line.slice(key.end + close.length)) ? key.parts : null;
+}
+function keyLine(line) {
+  const lead = /^\s*/.exec(line)[0].length;
+  if (line[lead] === "[" || line[lead] === "#") return null;
+  const key = parseKey(line, lead);
+  return key && line[key.end] === "=" ? { parts: key.parts, valueStart: key.end + 1 } : null;
+}
+function scanValue(s2, start, st2) {
+  let i2 = start;
+  while (i2 < s2.length) {
+    if (st2.ml) {
+      if (st2.ml === '"""' && s2[i2] === "\\") {
+        i2 += 2;
+        continue;
+      }
+      if (s2.startsWith(st2.ml, i2)) {
+        let j2 = i2 + 3;
+        while (j2 < s2.length && j2 < i2 + 5 && s2[j2] === st2.ml[0]) j2++;
+        st2.ml = null;
+        i2 = j2;
+        continue;
+      }
+      i2++;
+      continue;
+    }
+    const c2 = s2[i2];
+    if (c2 === "#") return;
+    if (s2.startsWith('"""', i2) || s2.startsWith("'''", i2)) {
+      st2.ml = s2.slice(i2, i2 + 3);
+      i2 += 3;
+      continue;
+    }
+    if (c2 === '"') {
+      i2++;
+      while (i2 < s2.length && s2[i2] !== '"') i2 += s2[i2] === "\\" ? 2 : 1;
+      i2++;
+      continue;
+    }
+    if (c2 === "'") {
+      const j2 = s2.indexOf("'", i2 + 1);
+      i2 = j2 < 0 ? s2.length : j2 + 1;
+      continue;
+    }
+    if (c2 === "[" || c2 === "{") st2.depth++;
+    else if ((c2 === "]" || c2 === "}") && st2.depth > 0) st2.depth--;
+    i2++;
+  }
+}
+function scanToml(text) {
+  const out = [];
+  const st2 = { ml: null, depth: 0 };
+  let table = [];
+  for (const line of text.split("\n")) {
+    if (st2.ml || st2.depth > 0) {
+      scanValue(line, 0, st2);
+      out.push({ text: line, kind: "continuation", table });
+      continue;
+    }
+    const header = tableHeader(line);
+    if (header) {
+      table = header;
+      out.push({ text: line, kind: "header", table, key: header });
+      continue;
+    }
+    const key = keyLine(line);
+    if (key) {
+      scanValue(line, key.valueStart, st2);
+      out.push({ text: line, kind: "key", table, key: key.parts, value: line.slice(key.valueStart) });
+      continue;
+    }
+    out.push({ text: line, kind: "other", table });
+  }
+  return out;
+}
+function parseTomlValue(raw) {
+  const parsed = parseValueAt(raw, 0);
+  if (!parsed) return void 0;
+  return /^\s*(?:#[^\n]*)?\s*$/.test(raw.slice(parsed.end)) ? parsed.value : void 0;
+}
+function skipSeparators(s2, start) {
+  let i2 = start;
+  for (; ; ) {
+    while (i2 < s2.length && " 	\r\n,".includes(s2[i2])) i2++;
+    if (s2[i2] !== "#") return i2;
+    const newline = s2.indexOf("\n", i2);
+    i2 = newline < 0 ? s2.length : newline;
+  }
+}
+function parseValueAt(s2, start) {
+  let i2 = start;
+  while (s2[i2] === " " || s2[i2] === "	") i2++;
+  const c2 = s2[i2];
+  if (c2 === '"') {
+    if (s2.startsWith('"""', i2)) return null;
+    let j2 = i2 + 1;
+    while (j2 < s2.length && s2[j2] !== '"') j2 += s2[j2] === "\\" ? 2 : 1;
+    if (j2 >= s2.length) return null;
+    try {
+      return { value: JSON.parse(s2.slice(i2, j2 + 1)), end: j2 + 1 };
+    } catch {
+      return null;
+    }
+  }
+  if (c2 === "'") {
+    if (s2.startsWith("'''", i2)) return null;
+    const j2 = s2.indexOf("'", i2 + 1);
+    return j2 < 0 ? null : { value: s2.slice(i2 + 1, j2), end: j2 + 1 };
+  }
+  if (c2 === "[") {
+    const items = [];
+    i2++;
+    for (; ; ) {
+      i2 = skipSeparators(s2, i2);
+      if (s2[i2] === "]") return { value: items, end: i2 + 1 };
+      const item = parseValueAt(s2, i2);
+      if (!item) return null;
+      items.push(item.value);
+      i2 = item.end;
+    }
+  }
+  if (c2 === "{") {
+    const table = {};
+    i2++;
+    for (; ; ) {
+      i2 = skipSeparators(s2, i2);
+      if (s2[i2] === "}") return { value: table, end: i2 + 1 };
+      const key = parseKey(s2, i2);
+      if (!key || s2[key.end] !== "=") return null;
+      const item = parseValueAt(s2, key.end + 1);
+      if (!item) return null;
+      setPath(table, key.parts, item.value);
+      i2 = item.end;
+    }
+  }
+  const bare = /^[^\s,\]}#]+/.exec(s2.slice(i2));
+  return bare ? { value: bare[0], end: i2 + bare[0].length } : null;
+}
+function setPath(target, path110, value) {
+  let node = target;
+  for (const part of path110.slice(0, -1)) {
+    const next = node[part];
+    if (!next || typeof next !== "object" || Array.isArray(next)) node[part] = {};
+    node = node[part];
+  }
+  const last = path110[path110.length - 1];
+  const existing = node[last];
+  if (existing && typeof existing === "object" && !Array.isArray(existing) && value && typeof value === "object" && !Array.isArray(value)) {
+    Object.assign(existing, value);
+  } else node[last] = value;
+}
+function readTomlTable(text, path110) {
+  const result = {};
+  let found = false;
+  const within = (full) => full.length >= path110.length && path110.every((part, i2) => full[i2] === part);
+  const lines = scanToml(text);
+  for (let index = 0; index < lines.length; index++) {
+    const line = lines[index];
+    if (line.kind === "header" && within(line.key)) {
+      found = true;
+      if (line.key.length > path110.length) setPath(result, line.key.slice(path110.length), {});
+      continue;
+    }
+    if (line.kind !== "key") continue;
+    const full = [...line.table, ...line.key];
+    if (!within(full)) continue;
+    let raw = line.value;
+    while (lines[index + 1]?.kind === "continuation") raw += `
+${lines[++index].text}`;
+    const parsed = parseTomlValue(raw);
+    const value = parsed === void 0 ? UNREADABLE : parsed;
+    found = true;
+    if (full.length === path110.length) {
+      if (value && typeof value === "object" && !Array.isArray(value)) Object.assign(result, value);
+    } else setPath(result, full.slice(path110.length), value);
+  }
+  return found ? result : null;
+}
+var UNREADABLE;
+var init_codex_config_toml = __esm({
+  "src/tools/codex-config-toml.ts"() {
+    "use strict";
+    UNREADABLE = /* @__PURE__ */ Symbol("unreadable TOML value");
+  }
+});
+
+// src/tools/subscription-channels-apply.ts
+function stripCodexProvider(text) {
+  const out = [];
+  let dropping = false;
+  let droppingValue = false;
+  for (const line of scanToml(text)) {
+    if (line.kind === "header") {
+      dropping = isOwnProvider(line.key);
+      droppingValue = false;
+      if (!dropping) out.push(line.text);
+      continue;
+    }
+    if (line.kind === "continuation") {
+      if (!dropping && !droppingValue) out.push(line.text);
+      continue;
+    }
+    if (dropping) continue;
+    if (line.kind === "key") {
+      const full = [...line.table, ...line.key];
+      droppingValue = full.length === 1 && full[0] === "model_provider" || isOwnProvider(full);
+      if (!droppingValue) out.push(line.text);
+      continue;
+    }
+    out.push(line.text);
+  }
+  return out.join("\n").trim();
+}
+function writeFileAtomic(file, data) {
+  const target = import_node_fs22.default.existsSync(file) && import_node_fs22.default.lstatSync(file).isSymbolicLink() ? import_node_fs22.default.realpathSync(file) : file;
+  const tmp = `${target}.tmp.${process.pid}.${Date.now()}`;
+  import_node_fs22.default.writeFileSync(tmp, data, { mode: 384 });
+  import_node_fs22.default.renameSync(tmp, target);
+}
+function snapshotFile(file) {
+  const original = import_node_fs22.default.existsSync(file) ? import_node_fs22.default.readFileSync(file) : null;
+  return () => {
+    const current = import_node_fs22.default.existsSync(file) ? import_node_fs22.default.readFileSync(file) : null;
+    if (original === null) {
+      if (current !== null) import_node_fs22.default.rmSync(file, { force: true });
+      return;
+    }
+    if (current !== null && current.equals(original)) return;
+    writeFileAtomic(file, original);
+  };
+}
+function applyCodexSubscriptionChannel(opts) {
+  const codexHome = resolveCodexHome2(opts.codexHome);
+  import_node_fs22.default.mkdirSync(codexHome, { recursive: true });
+  const configFile = import_node_path22.default.join(codexHome, "config.toml");
+  const original = import_node_fs22.default.existsSync(configFile) ? import_node_fs22.default.readFileSync(configFile, "utf8") : "";
+  const rest = stripCodexProvider(original);
+  let content;
+  if (opts.channel) {
+    const ch = opts.channel;
+    content = [
+      `model_provider = "${PROVIDER_ID}"`,
+      ...rest ? ["", rest] : [],
+      "",
+      `[model_providers.${PROVIDER_ID}]`,
+      `name = "${PROVIDER_ID}"`,
+      `base_url = ${JSON.stringify(ch.baseUrl)}`,
+      'wire_api = "responses"',
+      `auth = { command = "echo", args = [${JSON.stringify(ch.apiKey)}] }`,
+      ""
+    ].join("\n");
+  } else {
+    content = [
+      'model_provider = "openai"',
+      ...rest ? ["", rest] : [],
+      ""
+    ].join("\n");
+  }
+  writeFileAtomic(configFile, content);
+}
+function applyPiSubscriptionChannel(opts) {
+  const agentDir = resolvePiAgentDir(opts.agentDir);
+  if (!import_node_fs22.default.existsSync(agentDir)) return false;
+  const configFile = import_node_path22.default.join(agentDir, PI_SUBSCRIPTION_FILE);
+  if (opts.channel) {
+    const data = { baseUrl: opts.channel.baseUrl, apiKey: opts.channel.apiKey };
+    writeFileAtomic(configFile, JSON.stringify(data, null, 2) + "\n");
+    return true;
+  }
+  return false;
+}
+function claudeSubscriptionEnv(channel) {
+  return {
+    ANTHROPIC_BASE_URL: channel.baseUrl.replace(/\/+$/, "").replace(/\/v1$/, ""),
+    ANTHROPIC_AUTH_TOKEN: channel.apiKey,
+    ANTHROPIC_API_KEY: "",
+    CLAUDE_CODE_USE_BEDROCK: "0",
+    CLAUDE_CODE_USE_VERTEX: "0",
+    CLAUDE_CODE_USE_FOUNDRY: "0"
+  };
+}
+function readSettings(file) {
+  if (!import_node_fs22.default.existsSync(file)) return {};
+  const value = JSON.parse(import_node_fs22.default.readFileSync(file, "utf8"));
+  if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("Claude settings must be a JSON object");
+  return value;
+}
+function applyClaudeSubscriptionChannel(opts) {
+  const dir = resolveClaudeConfigDir(opts.configDir);
+  const file = import_node_path22.default.join(dir, "settings.json");
+  const backupFile = import_node_path22.default.join(dir, CLAUDE_SUBSCRIPTION_BACKUP);
+  if (!opts.channel && !import_node_fs22.default.existsSync(backupFile)) return;
+  const settings = readSettings(file);
+  if (settings.env !== void 0 && (!settings.env || typeof settings.env !== "object" || Array.isArray(settings.env))) {
+    throw new Error("Claude settings.env must be a JSON object");
+  }
+  const env = { ...settings.env };
+  if (opts.channel) {
+    const connection = claudeSubscriptionEnv(opts.channel);
+    import_node_fs22.default.mkdirSync(dir, { recursive: true });
+    if (!import_node_fs22.default.existsSync(backupFile)) {
+      writeFileAtomic(backupFile, JSON.stringify({
+        hadSettings: import_node_fs22.default.existsSync(file),
+        hadEnv: settings.env !== void 0,
+        env: Object.fromEntries(Object.keys(connection).filter((key) => key in env).map((key) => [key, env[key]]))
+      }) + "\n");
+    }
+    settings.env = { ...env, ...connection };
+    writeFileAtomic(file, JSON.stringify(settings, null, 2) + "\n");
+    return;
+  }
+  const backup = readSettings(backupFile);
+  if (typeof backup.hadSettings !== "boolean" || typeof backup.hadEnv !== "boolean" || !backup.env || typeof backup.env !== "object" || Array.isArray(backup.env)) {
+    throw new Error("Claude subscription backup is invalid; native configuration was not changed");
+  }
+  for (const key of CLAUDE_CONNECTION_KEYS) delete env[key];
+  Object.assign(env, backup.env);
+  if (Object.keys(env).length || backup.hadEnv) settings.env = env;
+  else delete settings.env;
+  if (!backup.hadSettings && !Object.keys(settings).length) import_node_fs22.default.rmSync(file, { force: true });
+  else writeFileAtomic(file, JSON.stringify(settings, null, 2) + "\n");
+  import_node_fs22.default.unlinkSync(backupFile);
+}
+var import_node_fs22, import_node_os11, import_node_path22, PROVIDER_ID, isOwnProvider, resolveCodexHome2, resolvePiAgentDir, PI_SUBSCRIPTION_FILE, resolveClaudeConfigDir, CLAUDE_SUBSCRIPTION_BACKUP, CLAUDE_CONNECTION_KEYS;
+var init_subscription_channels_apply = __esm({
+  "src/tools/subscription-channels-apply.ts"() {
+    "use strict";
+    import_node_fs22 = __toESM(require("fs"), 1);
+    import_node_os11 = __toESM(require("os"), 1);
+    import_node_path22 = __toESM(require("path"), 1);
+    init_codex_config_toml();
+    PROVIDER_ID = "cliproxyapi";
+    isOwnProvider = (path110) => path110[0] === "model_providers" && path110[1] === PROVIDER_ID;
+    resolveCodexHome2 = (codexHome) => codexHome || process.env.CODEX_HOME || import_node_path22.default.join(import_node_os11.default.homedir(), ".codex");
+    resolvePiAgentDir = (agentDir) => agentDir || process.env.PI_CODING_AGENT_DIR || import_node_path22.default.join(import_node_os11.default.homedir(), ".pi", "agent");
+    PI_SUBSCRIPTION_FILE = "cliproxyapi.json";
+    resolveClaudeConfigDir = (configDir) => configDir || process.env.CLAUDE_CONFIG_DIR || import_node_path22.default.join(import_node_os11.default.homedir(), ".claude");
+    CLAUDE_SUBSCRIPTION_BACKUP = "clawd-subscription-backup.json";
+    CLAUDE_CONNECTION_KEYS = ["ANTHROPIC_BASE_URL", "ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_API_KEY", "CLAUDE_CODE_USE_BEDROCK", "CLAUDE_CODE_USE_VERTEX", "CLAUDE_CODE_USE_FOUNDRY"];
+  }
+});
+
 // src/tools/claude.ts
 function probeViaWhich() {
   try {
-    const out = (0, import_node_child_process3.execFileSync)("which", ["claude"], { encoding: "utf8" }).trim();
-    if (out && import_node_fs21.default.existsSync(out)) return out;
+    const out = (0, import_node_child_process4.execFileSync)("which", ["claude"], { encoding: "utf8" }).trim();
+    if (out && import_node_fs23.default.existsSync(out)) return out;
   } catch {
   }
   return null;
 }
 async function probeClaude(env = process.env) {
-  if (env.CLAUDE_BIN && import_node_fs21.default.existsSync(env.CLAUDE_BIN)) {
+  if (env.CLAUDE_BIN && import_node_fs23.default.existsSync(env.CLAUDE_BIN)) {
     return { available: true, path: env.CLAUDE_BIN };
   }
   const w3 = probeViaWhich();
@@ -16366,14 +16865,16 @@ function resolveClaudeContextWindow(modelId) {
   if (/\[1m\]/i.test(modelId)) return 1e6;
   return void 0;
 }
-var import_node_child_process2, import_node_child_process3, import_node_fs21, ATTACHMENT_SILENT_SUBTYPES2, unknownTypeHandler, ATTACHMENT_RE, IMAGE_EXT_MIME, CLAUDE_MODEL_IDS, CLAUDE_MODELS, _assertModelIdsAligned, CLAUDE_PERMISSION_MODES, CLAUDE_CAPABILITIES, ClaudeAdapter;
+var import_node_child_process3, import_node_child_process4, import_node_fs23, ATTACHMENT_SILENT_SUBTYPES2, unknownTypeHandler, ATTACHMENT_RE, IMAGE_EXT_MIME, CLAUDE_MODEL_IDS, CLAUDE_MODELS, _assertModelIdsAligned, CLAUDE_PERMISSION_MODES, CLAUDE_CAPABILITIES, ClaudeAdapter;
 var init_claude = __esm({
   "src/tools/claude.ts"() {
     "use strict";
-    import_node_child_process2 = require("child_process");
     import_node_child_process3 = require("child_process");
-    import_node_fs21 = __toESM(require("fs"), 1);
+    import_node_child_process4 = require("child_process");
+    import_node_fs23 = __toESM(require("fs"), 1);
     init_protocol();
+    init_codex_provider_models();
+    init_subscription_channels_apply();
     init_claude_history();
     init_tool_result_extra();
     ATTACHMENT_SILENT_SUBTYPES2 = /* @__PURE__ */ new Set([
@@ -16454,7 +16955,11 @@ var init_claude = __esm({
       logger;
       historyReader;
       probeOverride;
+      getSubscriptionChannel;
+      fetchImpl;
       constructor(opts = {}) {
+        this.getSubscriptionChannel = opts.getSubscriptionChannel;
+        this.fetchImpl = opts.fetchImpl;
         this.logger = opts.logger;
         this.historyReader = opts.historyReader;
         this.probeOverride = opts.probeOverride;
@@ -16477,8 +16982,38 @@ var init_claude = __esm({
       appendTurnDurationRow(args) {
         appendTurnDurationRowToJsonl(args);
       }
-      async capabilities() {
-        return CLAUDE_CAPABILITIES;
+      async capabilities(opts) {
+        const channel = this.getSubscriptionChannel?.();
+        if (!channel) return CLAUDE_CAPABILITIES;
+        const provider = await fetchProviderModels(
+          { baseUrl: channel.baseUrl, headers: { Accept: "application/json", Authorization: "Bearer " + channel.apiKey } },
+          { fetchImpl: this.fetchImpl, logger: this.logger, throwOnFailure: opts?.refresh }
+        );
+        const known = /* @__PURE__ */ new Set();
+        const merged = [];
+        for (const model of provider) {
+          if (known.has(model.id)) continue;
+          known.add(model.id);
+          const native = CLAUDE_MODELS.find((entry) => entry.id === model.id);
+          merged.push(native ?? { id: model.id, label: model.id, contextWindowSize: resolveClaudeContextWindow(model.id) ?? 2e5 });
+        }
+        merged.sort((a2, b3) => a2.id.localeCompare(b3.id));
+        return {
+          ...CLAUDE_CAPABILITIES,
+          models: merged,
+          configSchema: CLAUDE_CAPABILITIES.configSchema.map((field) => field.name === "model" ? { ...field, default: merged[0]?.id ?? "", options: merged.map((m3) => ({ value: m3.id, label: m3.label, description: m3.description })) } : field)
+        };
+      }
+      /** Global settings serve terminal CLI; inject the same connection for guest sessions that exclude user settings. */
+      spawnEnv(ctx) {
+        const channel = this.getSubscriptionChannel?.();
+        if (!channel) return buildSpawnEnv(ctx.env);
+        const env = { ...ctx.env, ...claudeSubscriptionEnv(channel) };
+        if (ctx.model && !CLAUDE_MODEL_IDS.includes(ctx.model)) {
+          for (const alias of CLAUDE_MODEL_IDS) env["ANTHROPIC_DEFAULT_" + alias.toUpperCase() + "_MODEL"] = ctx.model;
+          env.CLAUDE_CODE_SUBAGENT_MODEL = ctx.model;
+        }
+        return buildSpawnEnv(env);
       }
       resolveContextWindow(modelId) {
         return resolveClaudeContextWindow(modelId);
@@ -16486,9 +17021,9 @@ var init_claude = __esm({
       spawn(ctx) {
         const args = buildSpawnArgs(ctx);
         const cmd = process.env.CLAUDE_BIN ?? "claude";
-        const child = (0, import_node_child_process2.spawn)(cmd, args, {
+        const child = (0, import_node_child_process3.spawn)(cmd, args, {
           cwd: ctx.cwd,
-          env: buildSpawnEnv(ctx.env),
+          env: this.spawnEnv(ctx),
           stdio: ["pipe", "pipe", "pipe"]
         });
         this.logger?.info("claude spawn", { cmd, args, cwd: ctx.cwd });
@@ -49138,9 +49673,8 @@ var SessionManager = class {
     const adapter = this.deps.getAdapter(tool);
     const revision = this.capabilitiesRevision.get(tool);
     const caps = await adapter.capabilities(opts);
-    if (revision === this.capabilitiesRevision.get(tool)) {
-      this.capabilitiesCache.set(tool, { caps, loadedAt: Date.now() });
-    }
+    if (revision !== this.capabilitiesRevision.get(tool)) return this.getCapabilities(tool, opts);
+    this.capabilitiesCache.set(tool, { caps, loadedAt: Date.now() });
     return caps;
   }
   invalidateCapabilities(tool) {
@@ -53273,8 +53807,8 @@ function createVisitorStore(opts) {
 init_claude();
 
 // src/tools/codex-session.ts
-var import_node_child_process5 = require("child_process");
-var import_node_path24 = __toESM(require("path"), 1);
+var import_node_child_process6 = require("child_process");
+var import_node_path26 = __toESM(require("path"), 1);
 
 // src/tools/codex-app-server-events.ts
 function translateNotification(method, params) {
@@ -53897,17 +54431,17 @@ function stringValue2(value) {
 }
 
 // src/tools/mcp-server-defs.ts
-var import_node_fs22 = __toESM(require("fs"), 1);
-var import_node_path21 = __toESM(require("path"), 1);
+var import_node_fs24 = __toESM(require("fs"), 1);
+var import_node_path23 = __toESM(require("path"), 1);
 var HTTP_TYPES = /* @__PURE__ */ new Set(["http", "sse", "streamable_http", "streamable-http"]);
 function loadMcpServerDefs(args) {
   const out = [];
   const seen = /* @__PURE__ */ new Set();
-  const sources = [...args.mcpConfigPaths, import_node_path21.default.join(args.cwd, ".mcp.json")];
+  const sources = [...args.mcpConfigPaths, import_node_path23.default.join(args.cwd, ".mcp.json")];
   for (const file of sources) {
     let parsed;
     try {
-      parsed = JSON.parse(import_node_fs22.default.readFileSync(file, "utf8"));
+      parsed = JSON.parse(import_node_fs24.default.readFileSync(file, "utf8"));
     } catch (e) {
       const code = e.code;
       if (code !== "ENOENT") {
@@ -53971,18 +54505,18 @@ function loadMcpServerDefs(args) {
 }
 
 // src/tools/codex-agents-config.ts
-var import_node_fs23 = __toESM(require("fs"), 1);
-var import_node_path22 = __toESM(require("path"), 1);
+var import_node_fs25 = __toESM(require("fs"), 1);
+var import_node_path24 = __toESM(require("path"), 1);
 var AGENTS_SECTION = /^\[agents\][^\n]*\n([\s\S]*?)(?=^\[|$(?![\s\S]))/m;
 function readKey(section, key) {
   const m3 = new RegExp(`^[ \\t]*${key}[ \\t]*=[ \\t]*(["'])(.*?)\\1`, "m").exec(section);
   return m3?.[2].trim() || void 0;
 }
 function loadCodexAgentsConfig(args) {
-  const file = import_node_path22.default.join(args.cwd, ".codex", "config.toml");
+  const file = import_node_path24.default.join(args.cwd, ".codex", "config.toml");
   let text;
   try {
-    text = import_node_fs23.default.readFileSync(file, "utf8");
+    text = import_node_fs25.default.readFileSync(file, "utf8");
   } catch (e) {
     const code = e.code;
     if (code !== "ENOENT") {
@@ -54000,13 +54534,13 @@ function loadCodexAgentsConfig(args) {
 }
 
 // src/tools/codex-features.ts
-var import_node_child_process4 = require("child_process");
+var import_node_child_process5 = require("child_process");
 var cachedNetworkProxy;
 function hasNetworkProxyFeature(deps = {}) {
   if (cachedNetworkProxy !== void 0) return cachedNetworkProxy;
   try {
     const cmd = codexCommand();
-    const out = deps.execOverride ? deps.execOverride() : (0, import_node_child_process4.execFileSync)(cmd, ["features", "list"], {
+    const out = deps.execOverride ? deps.execOverride() : (0, import_node_child_process5.execFileSync)(cmd, ["features", "list"], {
       env: codexEnvironment(cmd),
       encoding: "utf8",
       timeout: 3e3
@@ -54023,7 +54557,7 @@ function warmCodexFeatureCache() {
   if (cachedNetworkProxy !== void 0 || warming) return;
   warming = true;
   const cmd = codexCommand();
-  (0, import_node_child_process4.execFile)(
+  (0, import_node_child_process5.execFile)(
     cmd,
     ["features", "list"],
     { encoding: "utf8", timeout: 3e3, env: codexEnvironment(cmd) },
@@ -54041,7 +54575,7 @@ function warmCodexFeatureCache() {
 }
 
 // src/attachment/mime.ts
-var import_node_path23 = __toESM(require("path"), 1);
+var import_node_path25 = __toESM(require("path"), 1);
 var TEXT_PLAIN = "text/plain; charset=utf-8";
 var EXT_TO_NATIVE_MIME = {
   ".png": "image/png",
@@ -54140,7 +54674,7 @@ var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
   ".mk"
 ]);
 function lookupMime(filePathOrName) {
-  const ext = import_node_path23.default.extname(filePathOrName).toLowerCase();
+  const ext = import_node_path25.default.extname(filePathOrName).toLowerCase();
   if (EXT_TO_NATIVE_MIME[ext]) return EXT_TO_NATIVE_MIME[ext];
   if (TEXT_EXTENSIONS.has(ext)) return TEXT_PLAIN;
   return "application/octet-stream";
@@ -54177,7 +54711,7 @@ function createCodexSession(ctx, sink, deps = {}) {
     ...resolvedCodexHome ? { CODEX_HOME: resolvedCodexHome } : {},
     ...ctx.env
   });
-  const proc = deps.spawnOverride ? deps.spawnOverride(cmd, args, ctx.cwd, env) : (0, import_node_child_process5.spawn)(cmd, args, { cwd: ctx.cwd, env, stdio: ["pipe", "pipe", "pipe"] });
+  const proc = deps.spawnOverride ? deps.spawnOverride(cmd, args, ctx.cwd, env) : (0, import_node_child_process6.spawn)(cmd, args, { cwd: ctx.cwd, env, stdio: ["pipe", "pipe", "pipe"] });
   const alive = () => proc.exitCode === null && proc.signalCode === null;
   const driver = driveCodexThread({
     ctx,
@@ -54187,7 +54721,7 @@ function createCodexSession(ctx, sink, deps = {}) {
     threadParams: threadStartParams(ctx),
     // persona 惯例装在 <cwd>/.claude/skills/，经 extraRoots 注入 discovery
     // （skills:list RPC 侧 codex-skills.ts 同款注入，两处保持一致）。
-    skillsExtraRoots: [import_node_path24.default.join(ctx.cwd, ".claude", "skills")],
+    skillsExtraRoots: [import_node_path26.default.join(ctx.cwd, ".claude", "skills")],
     // 附件图片：验签认出本机 absPath → localImage，codex 自己读文件（TUI 拖图 / SDK local_image 同一条路）。
     // 0.145 起 http(s) URL 在 turn/start 入口被拒，不能再按 url 传（codex-app-server-params.ts 头注释）。
     // 与云上 cloudImageInput 同一道 mime 门：非图片（签过的 .md 之类）留文本，别让 codex 读到一半才炸。
@@ -54216,12 +54750,12 @@ function createCodexSession(ctx, sink, deps = {}) {
 }
 
 // src/tools/codex-app-server-query.ts
-var import_node_child_process6 = require("child_process");
+var import_node_child_process7 = require("child_process");
 var DEFAULT_CODEX_QUERY_TIMEOUT_MS = 8e3;
 async function withCodexAppServerClient(cwd, operation, run, deps = {}) {
   const cmd = codexCommand();
   const args = ["app-server", "--listen", "stdio://"];
-  const proc = deps.spawnOverride ? deps.spawnOverride(cmd, args, cwd) : (0, import_node_child_process6.spawn)(cmd, args, { cwd, env: codexEnvironment(cmd), stdio: ["pipe", "pipe", "pipe"] });
+  const proc = deps.spawnOverride ? deps.spawnOverride(cmd, args, cwd) : (0, import_node_child_process7.spawn)(cmd, args, { cwd, env: codexEnvironment(cmd), stdio: ["pipe", "pipe", "pipe"] });
   const client = new CodexAppServerClient(stdioLineStream(proc), {});
   const timeoutMs = deps.timeoutMs ?? DEFAULT_CODEX_QUERY_TIMEOUT_MS;
   let timer;
@@ -54336,105 +54870,8 @@ function mergeProviderModels(native, provider) {
   return sorted.map((m3) => ({ ...m3, group: modelFamily(m3.id) }));
 }
 
-// src/tools/codex-provider-models.ts
-var import_node_child_process7 = require("child_process");
-var import_node_fs24 = __toESM(require("fs"), 1);
-var import_node_os10 = __toESM(require("os"), 1);
-var import_node_path25 = __toESM(require("path"), 1);
-var import_node_util = require("util");
-var PROVIDER_FETCH_TIMEOUT_MS = 3e3;
-function asRecord2(v3) {
-  return v3 && typeof v3 === "object" && !Array.isArray(v3) ? v3 : null;
-}
-function readAuthKey(codexHome) {
-  try {
-    const raw = JSON.parse(import_node_fs24.default.readFileSync(import_node_path25.default.join(codexHome, "auth.json"), "utf8"));
-    const key = asRecord2(raw)?.OPENAI_API_KEY;
-    return typeof key === "string" && key ? key : void 0;
-  } catch {
-    return void 0;
-  }
-}
-var defaultExecFile = (0, import_node_util.promisify)(import_node_child_process7.execFile);
-var AUTH_COMMAND_TIMEOUT_MS = 5e3;
-async function runAuthCommand(name, auth, deps) {
-  const command = typeof auth.command === "string" && auth.command ? auth.command : void 0;
-  if (!command) return void 0;
-  const args = Array.isArray(auth.args) ? auth.args.filter((a2) => typeof a2 === "string") : [];
-  const timeout = typeof auth.timeout_ms === "number" && auth.timeout_ms > 0 ? Math.min(auth.timeout_ms, AUTH_COMMAND_TIMEOUT_MS) : AUTH_COMMAND_TIMEOUT_MS;
-  const cwd = typeof auth.cwd === "string" && auth.cwd ? auth.cwd : void 0;
-  try {
-    const { stdout } = await deps.execFileImpl(command, args, { ...cwd ? { cwd } : {}, timeout });
-    const token = String(stdout).trim();
-    if (token) return token;
-    deps.logger?.warn?.(`provider "${name}": auth command \`${command}\` produced an empty token, sending unauthenticated`);
-  } catch (err) {
-    const e = err;
-    const why = e.killed ? `killed by ${e.signal ?? "signal"} (timeout ${timeout}ms)` : e.code !== void 0 ? `exit/code ${e.code}` : "failed";
-    deps.logger?.warn?.(`provider "${name}": auth command \`${command}\` ${why}, sending unauthenticated`);
-  }
-  return void 0;
-}
-async function resolveProviderEndpoint(rawConfig, deps = {}) {
-  const config = asRecord2(asRecord2(rawConfig)?.config);
-  if (!config) return null;
-  const name = config.model_provider;
-  if (typeof name !== "string" || !name) return null;
-  const entry = asRecord2(asRecord2(config.model_providers)?.[name]);
-  if (!entry) return null;
-  const baseUrl = entry.base_url;
-  if (typeof baseUrl !== "string" || !baseUrl) return null;
-  const env = deps.env ?? process.env;
-  const codexHome = deps.codexHome ?? env.CODEX_HOME ?? import_node_path25.default.join(import_node_os10.default.homedir(), ".codex");
-  const envKey = typeof entry.env_key === "string" && entry.env_key ? entry.env_key : null;
-  const inlineToken = typeof entry.experimental_bearer_token === "string" && entry.experimental_bearer_token ? entry.experimental_bearer_token : void 0;
-  const auth = asRecord2(entry.auth);
-  let token;
-  if (envKey) token = env[envKey];
-  else if (inlineToken) token = inlineToken;
-  else if (auth && typeof auth.command === "string" && auth.command) {
-    token = await runAuthCommand(name, auth, { execFileImpl: deps.execFileImpl ?? defaultExecFile, ...deps.logger ? { logger: deps.logger } : {} });
-  } else token = readAuthKey(codexHome);
-  if (!token && !(auth && typeof auth.command === "string" && auth.command)) {
-    deps.logger?.warn?.(
-      envKey ? `provider "${name}": env_key ${envKey} is not set in the daemon process, sending unauthenticated` : `provider "${name}": no OPENAI_API_KEY in ${codexHome}/auth.json, sending unauthenticated`
-    );
-  }
-  return {
-    baseUrl,
-    headers: {
-      Accept: "application/json",
-      ...token ? { Authorization: `Bearer ${token}` } : {}
-    }
-  };
-}
-async function fetchProviderModels(endpoint, deps = {}) {
-  const fetchImpl = deps.fetchImpl ?? fetch;
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), deps.timeoutMs ?? PROVIDER_FETCH_TIMEOUT_MS);
-  const url = `${endpoint.baseUrl.replace(/\/$/, "")}/models`;
-  try {
-    const res = await fetchImpl(url, { headers: endpoint.headers, signal: controller.signal });
-    if (!res.ok) throw new Error(`provider model list failed: HTTP ${res.status} from ${url}`);
-    const data = asRecord2(await res.json())?.data;
-    if (!Array.isArray(data)) throw new Error(`provider model list: \`data\` is not an array (${url})`);
-    const out = [];
-    for (const item of data) {
-      const e = asRecord2(item);
-      if (!e || typeof e.id !== "string" || !e.id) continue;
-      out.push({ id: e.id, ...typeof e.owned_by === "string" ? { ownedBy: e.owned_by } : {} });
-    }
-    return out;
-  } catch (err) {
-    if (deps.throwOnFailure) throw err;
-    deps.logger?.warn?.(`provider model list failed: ${err.message}`);
-    return [];
-  } finally {
-    clearTimeout(timer);
-  }
-}
-
 // src/tools/codex.ts
+init_codex_provider_models();
 init_claude();
 var CODEX_EFFORTS = [
   { value: "low", label: "Low", description: "Fast responses with lighter reasoning" },
@@ -54620,9 +55057,9 @@ var CodexAdapter = class {
 
 // src/tools/claude-tui.ts
 var import_node_crypto9 = require("crypto");
-var import_node_fs25 = __toESM(require("fs"), 1);
-var import_node_os11 = __toESM(require("os"), 1);
-var import_node_path26 = __toESM(require("path"), 1);
+var import_node_fs26 = __toESM(require("fs"), 1);
+var import_node_os12 = __toESM(require("os"), 1);
+var import_node_path27 = __toESM(require("path"), 1);
 var import_headless = __toESM(require_xterm_headless(), 1);
 
 // ../node_modules/.pnpm/@xterm+addon-serialize@0.14.0/node_modules/@xterm/addon-serialize/lib/addon-serialize.mjs
@@ -55645,7 +56082,7 @@ var ClaudeTuiAdapter = class extends ClaudeAdapter {
       command: cmd,
       args,
       cwd: ctx.cwd,
-      env: buildSpawnEnv(ctx.env)
+      env: this.spawnEnv(ctx)
     });
     if (ctx.toolSessionId && this.tuiOpts.onPtyRegister) {
       this.tuiOpts.onPtyRegister(ctx.toolSessionId, pty);
@@ -55830,10 +56267,10 @@ function buildTuiSpawnArgs(ctx, isResume = false) {
 }
 function jsonlExistsForCtx(ctx) {
   if (!ctx.toolSessionId) return false;
-  const home = import_node_os11.default.homedir();
-  const file = import_node_path26.default.join(home, ".claude", "projects", cwdToHashDir(ctx.cwd), `${ctx.toolSessionId}.jsonl`);
+  const home = import_node_os12.default.homedir();
+  const file = import_node_path27.default.join(home, ".claude", "projects", cwdToHashDir(ctx.cwd), `${ctx.toolSessionId}.jsonl`);
   try {
-    return import_node_fs25.default.statSync(file).isFile();
+    return import_node_fs26.default.statSync(file).isFile();
   } catch {
     return false;
   }
@@ -55916,7 +56353,7 @@ var PersonaDispatchManager = class {
 
 // src/dispatch/store.ts
 var import_promises = __toESM(require("fs/promises"), 1);
-var import_node_path27 = __toESM(require("path"), 1);
+var import_node_path28 = __toESM(require("path"), 1);
 
 // src/shift/constants.ts
 var MAX_RUNS_PER_SHIFT = 30;
@@ -55954,7 +56391,7 @@ function createDispatchStore(deps) {
       flushTimer = null;
     }
     const content = { version: 1, records };
-    await import_promises.default.mkdir(import_node_path27.default.dirname(deps.filePath), { recursive: true });
+    await import_promises.default.mkdir(import_node_path28.default.dirname(deps.filePath), { recursive: true });
     const tmp = `${deps.filePath}.tmp-${deps.now()}-${Math.floor(Math.random() * 1e6)}`;
     await import_promises.default.writeFile(tmp, JSON.stringify(content, null, 2), "utf8");
     await import_promises.default.rename(tmp, deps.filePath);
@@ -56023,7 +56460,7 @@ function createDispatchStore(deps) {
 
 // src/channel/json-store.ts
 var import_promises2 = __toESM(require("fs/promises"), 1);
-var import_node_path28 = __toESM(require("path"), 1);
+var import_node_path29 = __toESM(require("path"), 1);
 function createJsonStore(deps) {
   let items = [];
   let flushTimer = null;
@@ -56034,7 +56471,7 @@ function createJsonStore(deps) {
       flushTimer = null;
     }
     const content = { version: version2, [deps.key]: items };
-    await import_promises2.default.mkdir(import_node_path28.default.dirname(deps.filePath), { recursive: true });
+    await import_promises2.default.mkdir(import_node_path29.default.dirname(deps.filePath), { recursive: true });
     const tmp = `${deps.filePath}.tmp-${deps.now()}-${Math.floor(Math.random() * 1e6)}`;
     await import_promises2.default.writeFile(tmp, JSON.stringify(content, null, 2), "utf8");
     await import_promises2.default.rename(tmp, deps.filePath);
@@ -56305,10 +56742,10 @@ function createTopicStore(deps) {
 }
 
 // src/dispatch/mcp-config.ts
-var import_node_fs26 = __toESM(require("fs"), 1);
-var import_node_path29 = __toESM(require("path"), 1);
+var import_node_fs27 = __toESM(require("fs"), 1);
+var import_node_path30 = __toESM(require("path"), 1);
 function dispatchMcpConfigPath(dataDir) {
-  return import_node_path29.default.join(dataDir, "dispatch.mcp.json");
+  return import_node_path30.default.join(dataDir, "dispatch.mcp.json");
 }
 function writeDispatchMcpConfig(args) {
   const cfgPath = dispatchMcpConfigPath(args.dataDir);
@@ -56327,16 +56764,16 @@ function writeDispatchMcpConfig(args) {
       }
     }
   };
-  import_node_fs26.default.mkdirSync(args.dataDir, { recursive: true });
-  import_node_fs26.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  import_node_fs27.default.mkdirSync(args.dataDir, { recursive: true });
+  import_node_fs27.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/ticket/mcp-config.ts
-var import_node_fs27 = __toESM(require("fs"), 1);
-var import_node_path30 = __toESM(require("path"), 1);
+var import_node_fs28 = __toESM(require("fs"), 1);
+var import_node_path31 = __toESM(require("path"), 1);
 function ticketMcpConfigPath(dataDir) {
-  return import_node_path30.default.join(dataDir, "ticket.mcp.json");
+  return import_node_path31.default.join(dataDir, "ticket.mcp.json");
 }
 function writeTicketMcpConfig(args) {
   const cfgPath = ticketMcpConfigPath(args.dataDir);
@@ -56358,16 +56795,16 @@ function writeTicketMcpConfig(args) {
       }
     }
   };
-  import_node_fs27.default.mkdirSync(args.dataDir, { recursive: true });
-  import_node_fs27.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  import_node_fs28.default.mkdirSync(args.dataDir, { recursive: true });
+  import_node_fs28.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/shift/mcp-config.ts
-var import_node_fs28 = __toESM(require("fs"), 1);
-var import_node_path31 = __toESM(require("path"), 1);
+var import_node_fs29 = __toESM(require("fs"), 1);
+var import_node_path32 = __toESM(require("path"), 1);
 function shiftMcpConfigPath(dataDir) {
-  return import_node_path31.default.join(dataDir, "shift.mcp.json");
+  return import_node_path32.default.join(dataDir, "shift.mcp.json");
 }
 async function writeShiftMcpConfig(args) {
   const cfgPath = shiftMcpConfigPath(args.dataDir);
@@ -56386,16 +56823,16 @@ async function writeShiftMcpConfig(args) {
       }
     }
   };
-  await import_node_fs28.default.promises.mkdir(args.dataDir, { recursive: true });
-  await import_node_fs28.default.promises.writeFile(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  await import_node_fs29.default.promises.mkdir(args.dataDir, { recursive: true });
+  await import_node_fs29.default.promises.writeFile(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/inbox/mcp-config.ts
-var import_node_fs29 = __toESM(require("fs"), 1);
-var import_node_path32 = __toESM(require("path"), 1);
+var import_node_fs30 = __toESM(require("fs"), 1);
+var import_node_path33 = __toESM(require("path"), 1);
 function inboxMcpConfigPath(dataDir) {
-  return import_node_path32.default.join(dataDir, "inbox.mcp.json");
+  return import_node_path33.default.join(dataDir, "inbox.mcp.json");
 }
 async function writeInboxMcpConfig(args) {
   const cfgPath = inboxMcpConfigPath(args.dataDir);
@@ -56414,16 +56851,16 @@ async function writeInboxMcpConfig(args) {
       }
     }
   };
-  await import_node_fs29.default.promises.mkdir(args.dataDir, { recursive: true });
-  await import_node_fs29.default.promises.writeFile(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  await import_node_fs30.default.promises.mkdir(args.dataDir, { recursive: true });
+  await import_node_fs30.default.promises.writeFile(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/peer-ops/mcp-config.ts
-var import_node_fs30 = __toESM(require("fs"), 1);
-var import_node_path33 = __toESM(require("path"), 1);
+var import_node_fs31 = __toESM(require("fs"), 1);
+var import_node_path34 = __toESM(require("path"), 1);
 function peerOpsMcpConfigPath(dataDir) {
-  return import_node_path33.default.join(dataDir, "peer-ops.mcp.json");
+  return import_node_path34.default.join(dataDir, "peer-ops.mcp.json");
 }
 function writePeerOpsMcpConfig(args) {
   const cfgPath = peerOpsMcpConfigPath(args.dataDir);
@@ -56440,16 +56877,16 @@ function writePeerOpsMcpConfig(args) {
       }
     }
   };
-  import_node_fs30.default.mkdirSync(args.dataDir, { recursive: true });
-  import_node_fs30.default.writeFileSync(cfgPath, JSON.stringify(cfg, null, 2));
+  import_node_fs31.default.mkdirSync(args.dataDir, { recursive: true });
+  import_node_fs31.default.writeFileSync(cfgPath, JSON.stringify(cfg, null, 2));
   return cfgPath;
 }
 
 // src/rpc-tool/mcp-config.ts
-var import_node_fs31 = __toESM(require("fs"), 1);
-var import_node_path34 = __toESM(require("path"), 1);
+var import_node_fs32 = __toESM(require("fs"), 1);
+var import_node_path35 = __toESM(require("path"), 1);
 function rpcToolMcpConfigPath(dataDir) {
-  return import_node_path34.default.join(dataDir, "rpc-tool.mcp.json");
+  return import_node_path35.default.join(dataDir, "rpc-tool.mcp.json");
 }
 function writeRpcToolMcpConfig(args) {
   const cfgPath = rpcToolMcpConfigPath(args.dataDir);
@@ -56468,29 +56905,29 @@ function writeRpcToolMcpConfig(args) {
       }
     }
   };
-  import_node_fs31.default.mkdirSync(args.dataDir, { recursive: true });
-  import_node_fs31.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
+  import_node_fs32.default.mkdirSync(args.dataDir, { recursive: true });
+  import_node_fs32.default.writeFileSync(cfgPath, JSON.stringify(content, null, 2), "utf8");
   return cfgPath;
 }
 
 // src/deploy/secret-table.ts
-var import_node_fs32 = __toESM(require("fs"), 1);
-var import_node_path35 = __toESM(require("path"), 1);
+var import_node_fs33 = __toESM(require("fs"), 1);
+var import_node_path36 = __toESM(require("path"), 1);
 var import_node_url5 = require("url");
 var import_meta5 = {};
 var LOCAL_SECRETS_DIRNAME = "secrets";
 function findSecretsBundleRoot(logger) {
   const candidates = [];
   try {
-    const here = import_node_path35.default.dirname((0, import_node_url5.fileURLToPath)(import_meta5.url));
-    candidates.push(import_node_path35.default.resolve(here, "..", "secrets"));
+    const here = import_node_path36.default.dirname((0, import_node_url5.fileURLToPath)(import_meta5.url));
+    candidates.push(import_node_path36.default.resolve(here, "..", "secrets"));
   } catch {
   }
   const fromArgv = bundleSiblingFromArgv(process.argv[1], "secrets");
   if (fromArgv) candidates.push(fromArgv);
   for (const c2 of candidates) {
     try {
-      if (import_node_fs32.default.statSync(c2).isDirectory()) return c2;
+      if (import_node_fs33.default.statSync(c2).isDirectory()) return c2;
     } catch {
     }
   }
@@ -56516,7 +56953,7 @@ function readDir(dir, logger) {
   const out = {};
   let files;
   try {
-    files = import_node_fs32.default.readdirSync(dir).filter((f2) => f2.endsWith(".env")).sort();
+    files = import_node_fs33.default.readdirSync(dir).filter((f2) => f2.endsWith(".env")).sort();
   } catch (e) {
     const code = e.code;
     if (code !== "ENOENT") logger?.warn("secrets.dir-unreadable", { dir, code: code ?? "unknown" });
@@ -56524,19 +56961,19 @@ function readDir(dir, logger) {
   }
   for (const f2 of files) {
     try {
-      Object.assign(out, parseEnvFile(import_node_fs32.default.readFileSync(import_node_path35.default.join(dir, f2), "utf8")));
+      Object.assign(out, parseEnvFile(import_node_fs33.default.readFileSync(import_node_path36.default.join(dir, f2), "utf8")));
     } catch (e) {
-      logger?.warn("secrets.file-unreadable", { file: import_node_path35.default.join(dir, f2), error: e.message });
+      logger?.warn("secrets.file-unreadable", { file: import_node_path36.default.join(dir, f2), error: e.message });
     }
   }
   return out;
 }
 function upsertEnvFileVar(file, key, value) {
   if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) throw new Error(`invalid env name: ${key}`);
-  import_node_fs32.default.mkdirSync(import_node_path35.default.dirname(file), { recursive: true, mode: 448 });
+  import_node_fs33.default.mkdirSync(import_node_path36.default.dirname(file), { recursive: true, mode: 448 });
   let lines = [];
   try {
-    lines = import_node_fs32.default.readFileSync(file, "utf8").split("\n");
+    lines = import_node_fs33.default.readFileSync(file, "utf8").split("\n");
     if (lines[lines.length - 1] === "") lines.pop();
   } catch {
   }
@@ -56544,12 +56981,12 @@ function upsertEnvFileVar(file, key, value) {
   let replaced = false;
   const out = lines.map((l2) => re2.test(l2) ? (replaced = true, `${key}=${value}`) : l2);
   if (!replaced) out.push(`${key}=${value}`);
-  import_node_fs32.default.writeFileSync(file, `${out.join("\n")}
+  import_node_fs33.default.writeFileSync(file, `${out.join("\n")}
 `, { encoding: "utf8", mode: 384 });
 }
 function readEnvFileVar(file, key) {
   try {
-    return parseEnvFile(import_node_fs32.default.readFileSync(file, "utf8"))[key];
+    return parseEnvFile(import_node_fs33.default.readFileSync(file, "utf8"))[key];
   } catch {
     return void 0;
   }
@@ -56558,7 +56995,7 @@ function removeEnvFileVar(file, key) {
   if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) throw new Error(`invalid env name: ${key}`);
   let lines;
   try {
-    lines = import_node_fs32.default.readFileSync(file, "utf8").split("\n");
+    lines = import_node_fs33.default.readFileSync(file, "utf8").split("\n");
   } catch {
     return;
   }
@@ -56567,10 +57004,10 @@ function removeEnvFileVar(file, key) {
   const out = lines.filter((l2) => !re2.test(l2));
   if (out.length === lines.length) return;
   if (out.every((l2) => l2.trim() === "" || l2.trim().startsWith("#"))) {
-    import_node_fs32.default.rmSync(file, { force: true });
+    import_node_fs33.default.rmSync(file, { force: true });
     return;
   }
-  import_node_fs32.default.writeFileSync(file, `${out.join("\n")}
+  import_node_fs33.default.writeFileSync(file, `${out.join("\n")}
 `, { encoding: "utf8", mode: 384 });
 }
 function readSecretTable(args) {
@@ -56581,12 +57018,12 @@ function readSecretTable(args) {
 }
 
 // src/dispatch/source-transcript.ts
-var import_node_path36 = __toESM(require("path"), 1);
+var import_node_path37 = __toESM(require("path"), 1);
 init_claude_history();
 var NO_SOURCE_TRANSCRIPT = "(no transcript yet \u2014 operate from the task description alone)";
 function resolveSourceJsonlPath(sourceFile, home) {
   if (!sourceFile?.toolSessionId) return NO_SOURCE_TRANSCRIPT;
-  return import_node_path36.default.join(
+  return import_node_path37.default.join(
     home,
     ".claude",
     "projects",
@@ -56597,7 +57034,7 @@ function resolveSourceJsonlPath(sourceFile, home) {
 
 // src/shift/store.ts
 var import_promises3 = __toESM(require("fs/promises"), 1);
-var import_node_path37 = __toESM(require("path"), 1);
+var import_node_path38 = __toESM(require("path"), 1);
 var import_node_crypto10 = require("crypto");
 
 // src/shift/schedule.ts
@@ -56672,7 +57109,7 @@ function createShiftStore(deps) {
       flushTimer = null;
     }
     const content = { version: 1, shifts };
-    await import_promises3.default.mkdir(import_node_path37.default.dirname(deps.filePath), { recursive: true });
+    await import_promises3.default.mkdir(import_node_path38.default.dirname(deps.filePath), { recursive: true });
     const tmp = `${deps.filePath}.tmp-${deps.now()}-${Math.floor(Math.random() * 1e6)}`;
     await import_promises3.default.writeFile(tmp, JSON.stringify(content, null, 2), "utf8");
     await import_promises3.default.rename(tmp, deps.filePath);
@@ -57096,40 +57533,40 @@ var import_node_crypto14 = require("crypto");
 var import_node_perf_hooks = require("perf_hooks");
 
 // src/deploy/persona-test.ts
-var import_node_fs33 = __toESM(require("fs"), 1);
-var import_node_path38 = __toESM(require("path"), 1);
+var import_node_fs34 = __toESM(require("fs"), 1);
+var import_node_path39 = __toESM(require("path"), 1);
 init_protocol();
 var TEST_SCAN_NOTE_PREFIX = PUBLISHER_TEST_NOTE_PREFIX;
 function regularFile(root, relative5) {
   let current = root;
   for (const segment of relative5.split("/")) {
-    current = import_node_path38.default.join(current, segment);
-    if (import_node_fs33.default.lstatSync(current).isSymbolicLink()) throw new Error("symlink");
+    current = import_node_path39.default.join(current, segment);
+    if (import_node_fs34.default.lstatSync(current).isSymbolicLink()) throw new Error("symlink");
   }
-  if (!import_node_fs33.default.statSync(current).isFile()) throw new Error("not a file");
-  const resolved = import_node_fs33.default.realpathSync(current);
-  if (!resolved.startsWith(root + import_node_path38.default.sep)) throw new Error("outside root");
+  if (!import_node_fs34.default.statSync(current).isFile()) throw new Error("not a file");
+  const resolved = import_node_fs34.default.realpathSync(current);
+  if (!resolved.startsWith(root + import_node_path39.default.sep)) throw new Error("outside root");
   return resolved;
 }
 function discoverPublisherTest(dir) {
   try {
-    const root = import_node_fs33.default.realpathSync(dir);
+    const root = import_node_fs34.default.realpathSync(dir);
     try {
-      import_node_fs33.default.lstatSync(import_node_path38.default.join(root, ".clawd"));
+      import_node_fs34.default.lstatSync(import_node_path39.default.join(root, ".clawd"));
     } catch (error) {
       if (error.code === "ENOENT") return { problems: [] };
       throw error;
     }
-    if (import_node_fs33.default.lstatSync(import_node_path38.default.join(root, ".clawd")).isSymbolicLink()) throw new Error("symlink");
+    if (import_node_fs34.default.lstatSync(import_node_path39.default.join(root, ".clawd")).isSymbolicLink()) throw new Error("symlink");
     try {
-      import_node_fs33.default.lstatSync(import_node_path38.default.join(root, ".clawd/test.json"));
+      import_node_fs34.default.lstatSync(import_node_path39.default.join(root, ".clawd/test.json"));
     } catch (error) {
       if (error.code === "ENOENT") return { problems: [] };
       throw error;
     }
     const file = regularFile(root, ".clawd/test.json");
-    if (import_node_fs33.default.statSync(file).size > 64 * 1024) throw new Error("oversized");
-    const test = PublisherTestSchema.parse(JSON.parse(import_node_fs33.default.readFileSync(file, "utf8")));
+    if (import_node_fs34.default.statSync(file).size > 64 * 1024) throw new Error("oversized");
+    const test = PublisherTestSchema.parse(JSON.parse(import_node_fs34.default.readFileSync(file, "utf8")));
     regularFile(root, test.entry);
     return { test, problems: [] };
   } catch {
@@ -57530,19 +57967,19 @@ function openHttpTurn(opts) {
 
 // src/deploy/repo.ts
 var import_promises5 = __toESM(require("fs/promises"), 1);
-var import_node_path41 = __toESM(require("path"), 1);
+var import_node_path42 = __toESM(require("path"), 1);
 init_protocol();
 
 // src/deploy/deploy-file.ts
 var import_promises4 = __toESM(require("fs/promises"), 1);
-var import_node_path40 = __toESM(require("path"), 1);
+var import_node_path41 = __toESM(require("path"), 1);
 var import_node_crypto11 = require("crypto");
 init_zod();
 init_protocol();
 
 // src/deploy/connectors.ts
-var import_node_fs34 = __toESM(require("fs"), 1);
-var import_node_path39 = __toESM(require("path"), 1);
+var import_node_fs35 = __toESM(require("fs"), 1);
+var import_node_path40 = __toESM(require("path"), 1);
 init_zod();
 init_protocol();
 
@@ -57630,11 +58067,11 @@ var PACKAGE_RUNNERS = /* @__PURE__ */ new Set(["npx", "uvx", "pnpx", "bunx"]);
 var SCRIPT_RUNNERS = /* @__PURE__ */ new Set(["node", "bun", "deno", "python", "python3"]);
 var HOST_ARG_PLACEHOLDER = "CLAWD_PERSONA_DIR";
 function scanMcpConnectors(personaDir) {
-  const file = import_node_path39.default.join(personaDir, ".mcp.json");
+  const file = import_node_path40.default.join(personaDir, ".mcp.json");
   const out = { readable: true, connectors: [], evidence: [], warnings: [] };
   let parsed;
   try {
-    parsed = JSON.parse(import_node_fs34.default.readFileSync(file, "utf8"));
+    parsed = JSON.parse(import_node_fs35.default.readFileSync(file, "utf8"));
   } catch (e) {
     if (e.code === "ENOENT") return out;
     out.readable = false;
@@ -57730,8 +58167,8 @@ function mergeScannedConnectors(existing, scanned) {
 }
 
 // src/deploy/deploy-file.ts
-var DEPLOY_FILE = import_node_path40.default.join(".clawd", "deploy.json");
-var SCAN_FILE = import_node_path40.default.join(".clawd", "deploy-scan.json");
+var DEPLOY_FILE = import_node_path41.default.join(".clawd", "deploy.json");
+var SCAN_FILE = import_node_path41.default.join(".clawd", "deploy-scan.json");
 async function readJson(file) {
   let raw;
   try {
@@ -57747,14 +58184,14 @@ async function readJson(file) {
   }
 }
 async function writeJson(file, value) {
-  await import_promises4.default.mkdir(import_node_path40.default.dirname(file), { recursive: true });
+  await import_promises4.default.mkdir(import_node_path41.default.dirname(file), { recursive: true });
   const tmp = `${file}.tmp-${process.pid}`;
   await import_promises4.default.writeFile(tmp, `${JSON.stringify(value, null, 2)}
 `);
   await import_promises4.default.rename(tmp, file);
 }
 async function readDeployFile(dir) {
-  const raw = await readJson(import_node_path40.default.join(dir, DEPLOY_FILE));
+  const raw = await readJson(import_node_path41.default.join(dir, DEPLOY_FILE));
   if (raw === void 0) return void 0;
   const parsed = DeployFileSchema.safeParse(raw);
   if (!parsed.success) {
@@ -57764,18 +58201,18 @@ async function readDeployFile(dir) {
   return parsed.data;
 }
 async function writeDeployFile(dir, file) {
-  await writeJson(import_node_path40.default.join(dir, DEPLOY_FILE), DeployFileSchema.parse(file));
+  await writeJson(import_node_path41.default.join(dir, DEPLOY_FILE), DeployFileSchema.parse(file));
 }
 async function readDeployFileRaw(dir) {
   try {
-    return await import_promises4.default.readFile(import_node_path40.default.join(dir, DEPLOY_FILE), "utf8");
+    return await import_promises4.default.readFile(import_node_path41.default.join(dir, DEPLOY_FILE), "utf8");
   } catch (err) {
     if (err.code === "ENOENT") return void 0;
     throw err;
   }
 }
 async function restoreDeployFileRaw(dir, raw) {
-  const file = import_node_path40.default.join(dir, DEPLOY_FILE);
+  const file = import_node_path41.default.join(dir, DEPLOY_FILE);
   if (raw === void 0) await import_promises4.default.rm(file, { force: true });
   else await import_promises4.default.writeFile(file, raw);
 }
@@ -57826,7 +58263,7 @@ function normalizeLegacyScan(raw) {
   return fix(raw);
 }
 async function readScanFile(dir) {
-  const raw = normalizeLegacyScan(await readJson(import_node_path40.default.join(dir, SCAN_FILE)));
+  const raw = normalizeLegacyScan(await readJson(import_node_path41.default.join(dir, SCAN_FILE)));
   if (raw === void 0) return void 0;
   const badShape = (issues) => {
     const first = issues[0];
@@ -57852,7 +58289,7 @@ async function readScanFile(dir) {
   return parsed.data;
 }
 async function writeScanFile(dir, file) {
-  await writeJson(import_node_path40.default.join(dir, SCAN_FILE), DeployScanFileSchema.parse(file));
+  await writeJson(import_node_path41.default.join(dir, SCAN_FILE), DeployScanFileSchema.parse(file));
 }
 function replaceScan(file, entry) {
   const idx = file.scans.findIndex((s2) => s2.id === entry.id);
@@ -61614,7 +62051,6 @@ async function storeGithubAuth(args) {
 init_zod();
 var SLUG = "ottin4ttc/clawos";
 var WORKFLOW = ".github/workflows/base-image-acr.yml";
-var DOCKERFILE = "cloud-host/Dockerfile.base";
 var SHA = external_exports.string().regex(/^[a-f0-9]{40}$/);
 var SourceSchema = external_exports.object({ cloudHost: SHA, workflow: SHA });
 var BaseSchema = external_exports.object({
@@ -61627,10 +62063,10 @@ var BaseSchema = external_exports.object({
   workflowCommit: SHA,
   buildId: external_exports.string().min(1)
 });
-async function currentSource(api) {
-  const head = await api.getJsonStrict(`/repos/${SLUG}/commits/release`);
-  if (!SHA.safeParse(head?.sha).success || !SHA.safeParse(head?.commit?.tree?.sha).success) throw new Error("\u8BFB\u4E0D\u5230\u53EF\u4FE1\u7684 release \u5E95\u5EA7\u6E90\u7801\u7248\u672C");
-  const commit = SHA.parse(head?.sha), tree = SHA.parse(head?.commit?.tree?.sha);
+async function buildSource(api, commit) {
+  const head = await api.getJsonStrict(`/repos/${SLUG}/commits/${commit}`);
+  if (head?.sha !== commit || !SHA.safeParse(head?.commit?.tree?.sha).success) throw new Error("\u8BFB\u4E0D\u5230\u53EF\u4FE1\u7684\u5E95\u5EA7\u6784\u5EFA\u6E90\u7801\u7248\u672C");
+  const tree = SHA.parse(head?.commit?.tree?.sha);
   const [root, workflow] = await Promise.all([
     api.getJsonStrict(`/repos/${SLUG}/git/trees/${tree}`),
     api.getJsonStrict(`/repos/${SLUG}/contents/${WORKFLOW}?ref=${commit}`)
@@ -61638,33 +62074,13 @@ async function currentSource(api) {
   if (root?.truncated || workflow?.type !== "file") throw new Error("\u8BFB\u4E0D\u5230\u5B8C\u6574\u5E95\u5EA7\u6E90\u7801\u7248\u672C");
   const source = SourceSchema.safeParse({ cloudHost: root?.tree?.find((e) => e.path === "cloud-host" && e.type === "tree")?.sha, workflow: workflow.sha });
   if (!source.success) throw new Error("\u5E95\u5EA7\u6E90\u7801\u7248\u672C\u8BB0\u5F55\u4E0D\u5B8C\u6574\uFF0C\u8BF7\u5237\u65B0\u540E\u518D\u53D1\u5E03");
-  return { commit, source: source.data };
-}
-function dockerfileInputs(text) {
-  if (!/^\s*FROM\s+/im.test(text)) throw new Error("\u8BFB\u4E0D\u5230\u53EF\u4FE1\u7684\u5E95\u5EA7\u6784\u5EFA\u914D\u65B9");
-  const logical = text.replace(/\\\r?\n/g, " ");
-  if (/^\s*RUN\b.*--mount=/im.test(logical)) throw new Error("\u5E95\u5EA7\u6302\u8F7D\u8F93\u5165\u65E0\u6CD5\u5B8C\u6574\u6BD4\u8F83\uFF0C\u8BF7\u91CD\u65B0\u6784\u5EFA");
-  const inputs = /* @__PURE__ */ new Set([DOCKERFILE, "cloud-host/.dockerignore", "cloud-host/Dockerfile.base.dockerignore"]);
-  for (const line of logical.split("\n")) {
-    const instruction = /^\s*(?:COPY|ADD)\s+(.+)$/i.exec(line)?.[1];
-    if (!instruction || /^--from=\S+\s/.test(instruction)) continue;
-    const tokens = instruction.startsWith("[") ? JSON.parse(instruction) : instruction.trim().split(/\s+/);
-    if (!Array.isArray(tokens) || tokens.length < 2) throw new Error("\u5E95\u5EA7 COPY \u8F93\u5165\u4E0D\u5B8C\u6574\uFF0C\u8BF7\u91CD\u65B0\u6784\u5EFA");
-    for (const source of tokens.slice(0, -1)) {
-      if (typeof source !== "string" || !/^[A-Za-z0-9_-][A-Za-z0-9_./-]*$/.test(source) || source.split("/").some((segment) => !segment || segment === "." || segment === "..")) {
-        throw new Error("\u5E95\u5EA7 COPY \u8F93\u5165\u65E0\u6CD5\u5B8C\u6574\u6BD4\u8F83\uFF0C\u8BF7\u91CD\u65B0\u6784\u5EFA");
-      }
-      inputs.add("cloud-host/" + source.replace(/\/$/, ""));
-    }
-  }
-  return inputs;
+  return source.data;
 }
 async function readCurrentBase(api) {
-  const current = await currentSource(api);
-  const listed = await api.getJsonStrict(`/repos/${SLUG}/actions/workflows/base-image-acr.yml/runs?branch=release&per_page=1`);
+  const listed = await api.getJsonStrict(`/repos/${SLUG}/actions/workflows/base-image-acr.yml/runs?branch=release&status=success&per_page=1`);
   const run = listed?.workflow_runs?.[0];
-  if (!run || !Number.isSafeInteger(run.id) || run.id <= 0 || !Number.isSafeInteger(run.run_attempt) || run.run_attempt <= 0 || run.head_branch !== "release" || run.path !== WORKFLOW || run.head_repository?.full_name !== SLUG || !["push", "workflow_dispatch"].includes(run.event)) throw new Error("\u6CA1\u6709\u53EF\u4FE1\u7684 release \u5E95\u5EA7\u6784\u5EFA\uFF0C\u8BF7\u8FD0\u884C\u5E95\u5EA7\u6D41\u6C34\u7EBF\u540E\u518D\u53D1\u5E03");
-  if (run.status !== "completed" || run.conclusion !== "success") throw new Error("\u6700\u65B0\u5E95\u5EA7\u6784\u5EFA\u5C1A\u672A\u6210\u529F\uFF0C\u8BF7\u67E5\u770B clawos \u5E95\u5EA7 Actions \u540E\u518D\u53D1\u5E03");
+  if (!run || !Number.isSafeInteger(run.id) || run.id <= 0 || !Number.isSafeInteger(run.run_attempt) || run.run_attempt <= 0 || run.head_branch !== "release" || run.path !== WORKFLOW || run.head_repository?.full_name !== SLUG || !["push", "workflow_dispatch"].includes(run.event)) throw new Error("\u6CA1\u6709\u53EF\u4FE1\u7684\u6210\u529F\u5E95\u5EA7\u6784\u5EFA\uFF0C\u8BF7\u8FD0\u884C\u5E95\u5EA7\u6D41\u6C34\u7EBF\u540E\u518D\u53D1\u5E03");
+  if (run.status !== "completed" || run.conclusion !== "success") throw new Error("\u5E95\u5EA7\u6784\u5EFA\u5C1A\u672A\u6210\u529F\uFF0C\u8BF7\u67E5\u770B clawos \u5E95\u5EA7 Actions \u540E\u518D\u53D1\u5E03");
   SHA.parse(run.head_sha);
   let artifact;
   for (let page = 1; page <= 30; page++) {
@@ -61680,23 +62096,9 @@ async function readCurrentBase(api) {
   const parsed = BaseSchema.safeParse(await readReleaseArchive(await api.downloadArtifact(SLUG, artifact.id)));
   if (!parsed.success) throw new Error("\u5E95\u5EA7\u5236\u54C1\u7248\u672C\u8BB0\u5F55\u65E0\u6548\uFF0C\u8BF7\u91CD\u65B0\u8FD0\u884C\u5E95\u5EA7\u6784\u5EFA");
   const release2 = parsed.data;
-  const matches = async (candidate) => {
-    if (release2.source.workflow !== candidate.source.workflow) return false;
-    if (release2.source.cloudHost === candidate.source.cloudHost) return true;
-    if (release2.commit === candidate.commit) return false;
-    const comparison = await api.getJsonStrict(`/repos/${SLUG}/compare/${release2.commit}...${candidate.commit}`);
-    if (comparison.status !== "ahead" || !Array.isArray(comparison.files) || comparison.files.length >= 300 || comparison.files.some((file) => typeof file.filename !== "string" || !file.filename)) {
-      throw new Error("\u65E0\u6CD5\u5B8C\u6574\u6BD4\u8F83\u5E95\u5EA7\u8F93\u5165\uFF0C\u8BF7\u91CD\u65B0\u8FD0\u884C\u5E95\u5EA7\u6D41\u6C34\u7EBF");
-    }
-    if (comparison.files.some((file) => file.filename === DOCKERFILE || file.previous_filename === DOCKERFILE)) return false;
-    const recipe = await api.getJsonStrict(`/repos/${SLUG}/contents/${DOCKERFILE}?ref=${candidate.commit}`);
-    if (recipe.type !== "file" || recipe.encoding !== "base64" || typeof recipe.content !== "string") throw new Error("\u8BFB\u4E0D\u5230\u5E95\u5EA7\u6784\u5EFA\u914D\u65B9");
-    const inputs = dockerfileInputs(Buffer.from(recipe.content, "base64").toString("utf8"));
-    return comparison.files.every((file) => ![file.filename, file.previous_filename].some((filename) => filename && [...inputs].some((input) => filename === input || filename.startsWith(input + "/"))));
-  };
-  if (release2.commit !== run.head_sha || release2.workflowCommit !== run.head_sha || !await matches(current)) throw new Error("\u5E95\u5EA7\u5C1A\u672A\u6784\u5EFA\u5F53\u524D release \u6E90\u7801\uFF0C\u8BF7\u7B49\u5F85\u6216\u91CD\u65B0\u8FD0\u884C\u5E95\u5EA7\u6D41\u6C34\u7EBF");
-  const after = await currentSource(api);
-  if ((after.source.cloudHost !== current.source.cloudHost || after.source.workflow !== current.source.workflow) && !await matches(after)) throw new Error("\u5E95\u5EA7\u6E90\u7801\u5728\u53D1\u5E03\u51C6\u5907\u671F\u95F4\u53D8\u5316\uFF0C\u8BF7\u7B49\u65B0\u6784\u5EFA\u6210\u529F\u540E\u518D\u53D1\u5E03");
+  if (release2.commit !== run.head_sha || release2.workflowCommit !== run.head_sha) throw new Error("\u5E95\u5EA7\u5236\u54C1\u4E0E\u6784\u5EFA\u63D0\u4EA4\u4E0D\u5339\u914D\uFF0C\u8BF7\u91CD\u65B0\u8FD0\u884C\u5E95\u5EA7\u6D41\u6C34\u7EBF");
+  const source = await buildSource(api, run.head_sha);
+  if (release2.source.cloudHost !== source.cloudHost || release2.source.workflow !== source.workflow) throw new Error("\u5E95\u5EA7\u5236\u54C1\u6E90\u7801\u7248\u672C\u4E0E\u6784\u5EFA\u63D0\u4EA4\u4E0D\u5339\u914D\uFF0C\u8BF7\u91CD\u65B0\u8FD0\u884C\u5E95\u5EA7\u6D41\u6C34\u7EBF");
   return release2;
 }
 
@@ -62117,7 +62519,7 @@ var runCommand = (cmd, args, opts = {}) => new Promise((resolve9) => {
 });
 
 // src/deploy/repo.ts
-var DEPLOY_FILE_REL = DEPLOY_FILE.split(import_node_path41.default.sep).join("/");
+var DEPLOY_FILE_REL = DEPLOY_FILE.split(import_node_path42.default.sep).join("/");
 var PERSONA_FILE_REL = ".clawd/persona.json";
 var DIRTY_IGNORED = [DEPLOY_FILE_REL, PERSONA_FILE_REL];
 var RepoError = class extends Error {
@@ -62150,7 +62552,7 @@ async function prepareIntegration(exec, dir, auth) {
   for (const name of ["MERGE_HEAD", "CHERRY_PICK_HEAD", "REVERT_HEAD", "rebase-merge", "rebase-apply"]) {
     const rel = await mustGit(exec, dir, ["rev-parse", "--git-path", name], "\u68C0\u67E5 Git \u64CD\u4F5C");
     try {
-      await import_promises5.default.stat(import_node_path41.default.resolve(dir, rel));
+      await import_promises5.default.stat(import_node_path42.default.resolve(dir, rel));
       throw new RepoError("Git \u5408\u5E76\u6216\u53D8\u57FA\u8FD8\u672A\u5B8C\u6210\uFF0C\u5148\u5904\u7406\u518D\u53D1\u5E03");
     } catch (err) {
       if (err.code !== "ENOENT") throw err;
@@ -62211,7 +62613,7 @@ async function samePath(a2, b3) {
     try {
       return await import_promises5.default.realpath(x2);
     } catch {
-      return import_node_path41.default.resolve(x2);
+      return import_node_path42.default.resolve(x2);
     }
   };
   return await real(a2) === await real(b3);
@@ -62237,7 +62639,7 @@ async function identityArgs(exec, dir) {
   return ["-c", "user.name=clawd", "-c", "user.email=clawd@clawos.local"];
 }
 async function writeGitignore(dir) {
-  const gi = import_node_path41.default.join(dir, ".gitignore");
+  const gi = import_node_path42.default.join(dir, ".gitignore");
   let existing;
   try {
     existing = await import_promises5.default.readFile(gi, "utf8");
@@ -62248,18 +62650,18 @@ async function writeGitignore(dir) {
 }
 async function writeWorkflow(dir) {
   for (const [rel, body] of [[WORKFLOW_PATH, WORKFLOW_TEMPLATE], [UNPUBLISH_WORKFLOW_PATH, UNPUBLISH_WORKFLOW_TEMPLATE]]) {
-    const wf = import_node_path41.default.join(dir, rel);
-    await import_promises5.default.mkdir(import_node_path41.default.dirname(wf), { recursive: true });
+    const wf = import_node_path42.default.join(dir, rel);
+    await import_promises5.default.mkdir(import_node_path42.default.dirname(wf), { recursive: true });
     await import_promises5.default.writeFile(wf, body);
   }
 }
 async function writeDockerfile(dir, personaId2, image) {
   const baseImage = image.replace("registry-vpc.cn-hangzhou.aliyuncs.com/", "registry.cn-hangzhou.aliyuncs.com/");
-  await import_promises5.default.mkdir(import_node_path41.default.join(dir, ".clawd"), { recursive: true });
-  await import_promises5.default.writeFile(import_node_path41.default.join(dir, ".clawd", "base-image.txt"), `${baseImage}
+  await import_promises5.default.mkdir(import_node_path42.default.join(dir, ".clawd"), { recursive: true });
+  await import_promises5.default.writeFile(import_node_path42.default.join(dir, ".clawd", "base-image.txt"), `${baseImage}
 `);
-  await import_promises5.default.writeFile(import_node_path41.default.join(dir, DOCKERFILE_PATH), renderDockerfile(personaId2, baseImage));
-  await import_promises5.default.writeFile(import_node_path41.default.join(dir, DOCKERIGNORE_PATH), DOCKERIGNORE_TEMPLATE);
+  await import_promises5.default.writeFile(import_node_path42.default.join(dir, DOCKERFILE_PATH), renderDockerfile(personaId2, baseImage));
+  await import_promises5.default.writeFile(import_node_path42.default.join(dir, DOCKERIGNORE_PATH), DOCKERIGNORE_TEMPLATE);
 }
 var RepoAlreadyExistsError = class extends RepoError {
   constructor(slug) {
@@ -62298,7 +62700,7 @@ async function ensureRepo(exec, api, args) {
   const existing = await repoInfo(exec, dir);
   if (existing) return { created: false, url: existing.url };
   await writeGitignore(dir);
-  await import_promises5.default.rm(import_node_path41.default.join(dir, WORKFLOW_PATH), { force: true });
+  await import_promises5.default.rm(import_node_path42.default.join(dir, WORKFLOW_PATH), { force: true });
   let created;
   try {
     created = await createOrgRepo(exec, api, { dir, org, repoName: personaId2, message: "clawd: \u4E0A\u4E91", auth: args.auth });
@@ -62516,9 +62918,9 @@ init_protocol();
 
 // src/deploy/artifact.ts
 var import_node_crypto13 = require("crypto");
-var import_node_fs35 = __toESM(require("fs"), 1);
-var import_node_os12 = __toESM(require("os"), 1);
-var import_node_path42 = __toESM(require("path"), 1);
+var import_node_fs36 = __toESM(require("fs"), 1);
+var import_node_os13 = __toESM(require("os"), 1);
+var import_node_path43 = __toESM(require("path"), 1);
 var import_node_stream3 = require("stream");
 var import_promises6 = require("stream/promises");
 var ARTIFACT_MAX_BYTES = 200 * 1024 * 1024;
@@ -62552,8 +62954,8 @@ function downloadArtifact(exec) {
     if (!res.ok || !res.body) throw new Error(`\u4E0B\u8F7D\u5931\u8D25 HTTP ${res.status}\uFF1A${url}`);
     const declared = Number(res.headers.get("content-length") ?? 0);
     if (declared > ARTIFACT_MAX_BYTES) throw new Error(`\u8D44\u4EA7 ${declared} \u5B57\u8282\uFF0C\u8D85\u8FC7\u4E0A\u9650 ${ARTIFACT_MAX_BYTES}\uFF1A${url}`);
-    const dir = await import_node_fs35.default.promises.mkdtemp(import_node_path42.default.join(import_node_os12.default.tmpdir(), "clawd-artifact-"));
-    const file = import_node_path42.default.join(dir, "pkg");
+    const dir = await import_node_fs36.default.promises.mkdtemp(import_node_path43.default.join(import_node_os13.default.tmpdir(), "clawd-artifact-"));
+    const file = import_node_path43.default.join(dir, "pkg");
     const hash = (0, import_node_crypto13.createHash)("sha256");
     let size = 0;
     const meter = new import_node_stream3.Transform({
@@ -62565,7 +62967,7 @@ function downloadArtifact(exec) {
       }
     });
     try {
-      await (0, import_promises6.pipeline)(import_node_stream3.Readable.fromWeb(res.body), meter, import_node_fs35.default.createWriteStream(file));
+      await (0, import_promises6.pipeline)(import_node_stream3.Readable.fromWeb(res.body), meter, import_node_fs36.default.createWriteStream(file));
       let entries;
       if (listEntries) {
         const r2 = await exec("tar", ["-tzf", file], { timeoutMs: 3e4 });
@@ -62574,7 +62976,7 @@ function downloadArtifact(exec) {
       }
       return { sha256: hash.digest("hex"), size, ...entries ? { entries } : {} };
     } finally {
-      await import_node_fs35.default.promises.rm(dir, { recursive: true, force: true });
+      await import_node_fs36.default.promises.rm(dir, { recursive: true, force: true });
     }
   };
 }
@@ -63136,6 +63538,7 @@ function buildDeployHandlers(deps) {
       ...publisherFeishuAuth ? { publisherFeishuAuth } : {},
       targets,
       promotions: file.promotions,
+      ...file.engineChannels ? { engineChannels: file.engineChannels } : {},
       ...repo2 ? { repo: repo2 } : {},
       scans,
       releases: file.releases,
@@ -63257,10 +63660,12 @@ function buildDeployHandlers(deps) {
     const args = parseArgs2(DeploySetEngineAuthArgsSchema, frame, "deploy:setEngineAuth");
     const dir = mustPersona(args.personaId);
     let auth = args.auth;
+    let channelSource = null;
     if (args.channelId) {
       const channel = deps.channelStore?.get(args.channelId);
       if (!channel) throw invalid(`\u672A\u627E\u5230 ID \u4E3A ${args.channelId} \u7684\u8BA2\u9605\u901A\u9053`);
       auth = { baseUrl: channel.baseUrl, apiKey: channel.apiKey };
+      channelSource = { channelId: channel.id, updatedAt: channel.updatedAt };
     }
     let writes;
     if (auth) {
@@ -63276,6 +63681,8 @@ function buildDeployHandlers(deps) {
       writes = [[ENGINE_AUTH_SECRETS.apiKey, apiKey], [ENGINE_AUTH_SECRETS.baseUrl, baseUrl]];
     }
     const { api } = await requireGithub();
+    const before = await readHistory(dir);
+    await writeScanFile(dir, { ...before, engineChannels: { ...before.engineChannels, [args.environment]: null } });
     try {
       if (args.environment === "production") {
         for (const env of [ENGINE_AUTH_SECRETS.baseUrl, ENGINE_AUTH_SECRETS.apiKey]) {
@@ -63286,6 +63693,8 @@ function buildDeployHandlers(deps) {
         await deleteSecret(deps.exec, api, { dir, env: args.environment === "integration" ? "CLAWD_INT_" + ENGINE_AUTH_SECRETS.baseUrl : ENGINE_AUTH_SECRETS.baseUrl, environment: args.environment });
         for (const [env, value] of writes) await setSecret(deps.exec, api, { dir, env: args.environment === "integration" ? "CLAWD_INT_" + env : env, value, environment: args.environment });
       } else for (const env of [ENGINE_AUTH_SECRETS.apiKey, ENGINE_AUTH_SECRETS.baseUrl]) await deleteSecret(deps.exec, api, { dir, env: args.environment === "integration" ? "CLAWD_INT_" + env : env, environment: args.environment });
+      const latest = await readHistory(dir);
+      await writeScanFile(dir, { ...latest, engineChannels: { ...latest.engineChannels, [args.environment]: channelSource } });
     } catch (err) {
       throw toClawdError(err);
     } finally {
@@ -63724,325 +64133,8 @@ function buildDeployHandlers(deps) {
 var import_node_fs37 = __toESM(require("fs"), 1);
 var import_node_os14 = __toESM(require("os"), 1);
 var import_node_path44 = __toESM(require("path"), 1);
-
-// src/tools/subscription-channels-apply.ts
-var import_node_fs36 = __toESM(require("fs"), 1);
-var import_node_os13 = __toESM(require("os"), 1);
-var import_node_path43 = __toESM(require("path"), 1);
-
-// src/tools/codex-config-toml.ts
-function parseKey(src, start) {
-  const parts = [];
-  let i2 = start;
-  for (; ; ) {
-    while (src[i2] === " " || src[i2] === "	") i2++;
-    let part;
-    if (src[i2] === '"') {
-      let j2 = i2 + 1;
-      while (j2 < src.length && src[j2] !== '"') j2 += src[j2] === "\\" ? 2 : 1;
-      if (j2 >= src.length) return null;
-      try {
-        part = JSON.parse(src.slice(i2, j2 + 1));
-      } catch {
-        part = src.slice(i2 + 1, j2);
-      }
-      i2 = j2 + 1;
-    } else if (src[i2] === "'") {
-      const j2 = src.indexOf("'", i2 + 1);
-      if (j2 < 0) return null;
-      part = src.slice(i2 + 1, j2);
-      i2 = j2 + 1;
-    } else {
-      const bare = /^[A-Za-z0-9_-]+/.exec(src.slice(i2));
-      if (!bare) return null;
-      part = bare[0];
-      i2 += part.length;
-    }
-    parts.push(part);
-    while (src[i2] === " " || src[i2] === "	") i2++;
-    if (src[i2] !== ".") return { parts, end: i2 };
-    i2++;
-  }
-}
-function tableHeader(line) {
-  const open = /^\s*(\[\[?)/.exec(line);
-  if (!open) return null;
-  const key = parseKey(line, open[0].length);
-  if (!key) return null;
-  const close = open[1] === "[[" ? "]]" : "]";
-  if (!line.startsWith(close, key.end)) return null;
-  return /^\s*(?:#.*)?$/.test(line.slice(key.end + close.length)) ? key.parts : null;
-}
-function keyLine(line) {
-  const lead = /^\s*/.exec(line)[0].length;
-  if (line[lead] === "[" || line[lead] === "#") return null;
-  const key = parseKey(line, lead);
-  return key && line[key.end] === "=" ? { parts: key.parts, valueStart: key.end + 1 } : null;
-}
-function scanValue(s2, start, st2) {
-  let i2 = start;
-  while (i2 < s2.length) {
-    if (st2.ml) {
-      if (st2.ml === '"""' && s2[i2] === "\\") {
-        i2 += 2;
-        continue;
-      }
-      if (s2.startsWith(st2.ml, i2)) {
-        let j2 = i2 + 3;
-        while (j2 < s2.length && j2 < i2 + 5 && s2[j2] === st2.ml[0]) j2++;
-        st2.ml = null;
-        i2 = j2;
-        continue;
-      }
-      i2++;
-      continue;
-    }
-    const c2 = s2[i2];
-    if (c2 === "#") return;
-    if (s2.startsWith('"""', i2) || s2.startsWith("'''", i2)) {
-      st2.ml = s2.slice(i2, i2 + 3);
-      i2 += 3;
-      continue;
-    }
-    if (c2 === '"') {
-      i2++;
-      while (i2 < s2.length && s2[i2] !== '"') i2 += s2[i2] === "\\" ? 2 : 1;
-      i2++;
-      continue;
-    }
-    if (c2 === "'") {
-      const j2 = s2.indexOf("'", i2 + 1);
-      i2 = j2 < 0 ? s2.length : j2 + 1;
-      continue;
-    }
-    if (c2 === "[" || c2 === "{") st2.depth++;
-    else if ((c2 === "]" || c2 === "}") && st2.depth > 0) st2.depth--;
-    i2++;
-  }
-}
-function scanToml(text) {
-  const out = [];
-  const st2 = { ml: null, depth: 0 };
-  let table = [];
-  for (const line of text.split("\n")) {
-    if (st2.ml || st2.depth > 0) {
-      scanValue(line, 0, st2);
-      out.push({ text: line, kind: "continuation", table });
-      continue;
-    }
-    const header = tableHeader(line);
-    if (header) {
-      table = header;
-      out.push({ text: line, kind: "header", table, key: header });
-      continue;
-    }
-    const key = keyLine(line);
-    if (key) {
-      scanValue(line, key.valueStart, st2);
-      out.push({ text: line, kind: "key", table, key: key.parts, value: line.slice(key.valueStart) });
-      continue;
-    }
-    out.push({ text: line, kind: "other", table });
-  }
-  return out;
-}
-var UNREADABLE = /* @__PURE__ */ Symbol("unreadable TOML value");
-function parseTomlValue(raw) {
-  const parsed = parseValueAt(raw, 0);
-  if (!parsed) return void 0;
-  return /^\s*(?:#[^\n]*)?\s*$/.test(raw.slice(parsed.end)) ? parsed.value : void 0;
-}
-function skipSeparators(s2, start) {
-  let i2 = start;
-  for (; ; ) {
-    while (i2 < s2.length && " 	\r\n,".includes(s2[i2])) i2++;
-    if (s2[i2] !== "#") return i2;
-    const newline = s2.indexOf("\n", i2);
-    i2 = newline < 0 ? s2.length : newline;
-  }
-}
-function parseValueAt(s2, start) {
-  let i2 = start;
-  while (s2[i2] === " " || s2[i2] === "	") i2++;
-  const c2 = s2[i2];
-  if (c2 === '"') {
-    if (s2.startsWith('"""', i2)) return null;
-    let j2 = i2 + 1;
-    while (j2 < s2.length && s2[j2] !== '"') j2 += s2[j2] === "\\" ? 2 : 1;
-    if (j2 >= s2.length) return null;
-    try {
-      return { value: JSON.parse(s2.slice(i2, j2 + 1)), end: j2 + 1 };
-    } catch {
-      return null;
-    }
-  }
-  if (c2 === "'") {
-    if (s2.startsWith("'''", i2)) return null;
-    const j2 = s2.indexOf("'", i2 + 1);
-    return j2 < 0 ? null : { value: s2.slice(i2 + 1, j2), end: j2 + 1 };
-  }
-  if (c2 === "[") {
-    const items = [];
-    i2++;
-    for (; ; ) {
-      i2 = skipSeparators(s2, i2);
-      if (s2[i2] === "]") return { value: items, end: i2 + 1 };
-      const item = parseValueAt(s2, i2);
-      if (!item) return null;
-      items.push(item.value);
-      i2 = item.end;
-    }
-  }
-  if (c2 === "{") {
-    const table = {};
-    i2++;
-    for (; ; ) {
-      i2 = skipSeparators(s2, i2);
-      if (s2[i2] === "}") return { value: table, end: i2 + 1 };
-      const key = parseKey(s2, i2);
-      if (!key || s2[key.end] !== "=") return null;
-      const item = parseValueAt(s2, key.end + 1);
-      if (!item) return null;
-      setPath(table, key.parts, item.value);
-      i2 = item.end;
-    }
-  }
-  const bare = /^[^\s,\]}#]+/.exec(s2.slice(i2));
-  return bare ? { value: bare[0], end: i2 + bare[0].length } : null;
-}
-function setPath(target, path110, value) {
-  let node = target;
-  for (const part of path110.slice(0, -1)) {
-    const next = node[part];
-    if (!next || typeof next !== "object" || Array.isArray(next)) node[part] = {};
-    node = node[part];
-  }
-  const last = path110[path110.length - 1];
-  const existing = node[last];
-  if (existing && typeof existing === "object" && !Array.isArray(existing) && value && typeof value === "object" && !Array.isArray(value)) {
-    Object.assign(existing, value);
-  } else node[last] = value;
-}
-function readTomlTable(text, path110) {
-  const result = {};
-  let found = false;
-  const within = (full) => full.length >= path110.length && path110.every((part, i2) => full[i2] === part);
-  const lines = scanToml(text);
-  for (let index = 0; index < lines.length; index++) {
-    const line = lines[index];
-    if (line.kind === "header" && within(line.key)) {
-      found = true;
-      if (line.key.length > path110.length) setPath(result, line.key.slice(path110.length), {});
-      continue;
-    }
-    if (line.kind !== "key") continue;
-    const full = [...line.table, ...line.key];
-    if (!within(full)) continue;
-    let raw = line.value;
-    while (lines[index + 1]?.kind === "continuation") raw += `
-${lines[++index].text}`;
-    const parsed = parseTomlValue(raw);
-    const value = parsed === void 0 ? UNREADABLE : parsed;
-    found = true;
-    if (full.length === path110.length) {
-      if (value && typeof value === "object" && !Array.isArray(value)) Object.assign(result, value);
-    } else setPath(result, full.slice(path110.length), value);
-  }
-  return found ? result : null;
-}
-
-// src/tools/subscription-channels-apply.ts
-var PROVIDER_ID = "cliproxyapi";
-var isOwnProvider = (path110) => path110[0] === "model_providers" && path110[1] === PROVIDER_ID;
-function stripCodexProvider(text) {
-  const out = [];
-  let dropping = false;
-  let droppingValue = false;
-  for (const line of scanToml(text)) {
-    if (line.kind === "header") {
-      dropping = isOwnProvider(line.key);
-      droppingValue = false;
-      if (!dropping) out.push(line.text);
-      continue;
-    }
-    if (line.kind === "continuation") {
-      if (!dropping && !droppingValue) out.push(line.text);
-      continue;
-    }
-    if (dropping) continue;
-    if (line.kind === "key") {
-      const full = [...line.table, ...line.key];
-      droppingValue = full.length === 1 && full[0] === "model_provider" || isOwnProvider(full);
-      if (!droppingValue) out.push(line.text);
-      continue;
-    }
-    out.push(line.text);
-  }
-  return out.join("\n").trim();
-}
-function writeFileAtomic(file, data) {
-  const target = import_node_fs36.default.existsSync(file) && import_node_fs36.default.lstatSync(file).isSymbolicLink() ? import_node_fs36.default.realpathSync(file) : file;
-  const tmp = `${target}.tmp.${process.pid}.${Date.now()}`;
-  import_node_fs36.default.writeFileSync(tmp, data, { mode: 384 });
-  import_node_fs36.default.renameSync(tmp, target);
-}
-function snapshotFile(file) {
-  const original = import_node_fs36.default.existsSync(file) ? import_node_fs36.default.readFileSync(file) : null;
-  return () => {
-    const current = import_node_fs36.default.existsSync(file) ? import_node_fs36.default.readFileSync(file) : null;
-    if (original === null) {
-      if (current !== null) import_node_fs36.default.rmSync(file, { force: true });
-      return;
-    }
-    if (current !== null && current.equals(original)) return;
-    writeFileAtomic(file, original);
-  };
-}
-var resolveCodexHome2 = (codexHome) => codexHome || process.env.CODEX_HOME || import_node_path43.default.join(import_node_os13.default.homedir(), ".codex");
-var resolvePiAgentDir = (agentDir) => agentDir || process.env.PI_CODING_AGENT_DIR || import_node_path43.default.join(import_node_os13.default.homedir(), ".pi", "agent");
-var PI_SUBSCRIPTION_FILE = "cliproxyapi.json";
-function applyCodexSubscriptionChannel(opts) {
-  const codexHome = resolveCodexHome2(opts.codexHome);
-  import_node_fs36.default.mkdirSync(codexHome, { recursive: true });
-  const configFile = import_node_path43.default.join(codexHome, "config.toml");
-  const original = import_node_fs36.default.existsSync(configFile) ? import_node_fs36.default.readFileSync(configFile, "utf8") : "";
-  const rest = stripCodexProvider(original);
-  let content;
-  if (opts.channel) {
-    const ch = opts.channel;
-    content = [
-      `model_provider = "${PROVIDER_ID}"`,
-      ...rest ? ["", rest] : [],
-      "",
-      `[model_providers.${PROVIDER_ID}]`,
-      `name = "${PROVIDER_ID}"`,
-      `base_url = ${JSON.stringify(ch.baseUrl)}`,
-      'wire_api = "responses"',
-      `auth = { command = "echo", args = [${JSON.stringify(ch.apiKey)}] }`,
-      ""
-    ].join("\n");
-  } else {
-    content = [
-      'model_provider = "openai"',
-      ...rest ? ["", rest] : [],
-      ""
-    ].join("\n");
-  }
-  writeFileAtomic(configFile, content);
-}
-function applyPiSubscriptionChannel(opts) {
-  const agentDir = resolvePiAgentDir(opts.agentDir);
-  if (!import_node_fs36.default.existsSync(agentDir)) return false;
-  const configFile = import_node_path43.default.join(agentDir, PI_SUBSCRIPTION_FILE);
-  if (opts.channel) {
-    const data = { baseUrl: opts.channel.baseUrl, apiKey: opts.channel.apiKey };
-    writeFileAtomic(configFile, JSON.stringify(data, null, 2) + "\n");
-    return true;
-  }
-  return false;
-}
-
-// src/tools/subscription-channels-store.ts
+init_subscription_channels_apply();
+init_codex_config_toml();
 var CHANNELS_FILE_NAME = "subscription-channels.json";
 function providerKey(provider, codexHome) {
   if ([provider.env_key, provider.experimental_bearer_token, provider.auth].includes(UNREADABLE)) return null;
@@ -64227,6 +64319,9 @@ var SubscriptionChannelStore = class {
   }
 };
 
+// src/index.ts
+init_subscription_channels_apply();
+
 // src/deploy/local-probe.ts
 function pickVersion(s2) {
   return /(\d+)\.(\d+)(?:\.(\d+))?/.exec(s2)?.[0];
@@ -65698,7 +65793,8 @@ function buildPersonaDispatchHandlers(deps) {
       await deps.getCapabilities(args.tool);
     }
     if (args.model !== void 0) {
-      const allowed = effectiveTool === "claude" ? CLAUDE_MODEL_IDS : ((await deps.getCapabilities?.(effectiveTool))?.models ?? []).map((m3) => m3.id).filter((id) => id !== "");
+      const caps = await deps.getCapabilities?.(effectiveTool);
+      const allowed = caps ? caps.models.map((m3) => m3.id).filter((id) => id !== "") : effectiveTool === "claude" ? CLAUDE_MODEL_IDS : [];
       if (!allowed.includes(args.model)) {
         throw new ClawdError(
           ERROR_CODES.INVALID_PARAM,
@@ -66918,16 +67014,22 @@ var PiAdapter = class {
   probeCache = null;
   // 进程级 memo，**回落结果同样缓存**（pi 没装时别每次开弹窗都 spawn 一次必然失败的子进程；同 codex）
   capsPromise;
+  capsRevision = 0;
   windows = /* @__PURE__ */ new Map();
   async probe() {
     if (this.probeCache) return this.probeCache;
     this.probeCache = this.opts.probeOverride ? await this.opts.probeOverride() : await probePi();
     return this.probeCache;
   }
+  invalidateCapabilities() {
+    this.capsRevision++;
+    this.capsPromise = void 0;
+  }
   async capabilities(opts) {
     if (opts?.refresh) {
+      const revision = this.capsRevision;
       const fresh = await this.loadCapabilities({ strict: true, refresh: true });
-      this.capsPromise = Promise.resolve(fresh);
+      if (revision === this.capsRevision) this.capsPromise = Promise.resolve(fresh);
       return fresh;
     }
     if (!this.capsPromise) this.capsPromise = this.loadCapabilities({ strict: false, refresh: false });
@@ -73528,6 +73630,8 @@ function buildEngineHandlers(deps, overrides = {}) {
 // src/handlers/channels.ts
 var import_node_fs66 = __toESM(require("fs"), 1);
 var import_node_path75 = __toESM(require("path"), 1);
+init_subscription_channels_apply();
+init_codex_provider_models();
 function buildChannelsHandlers(deps) {
   let queue = Promise.resolve();
   const serialized = (fn) => (frame, context) => {
@@ -73540,6 +73644,12 @@ function buildChannelsHandlers(deps) {
   async function transact(mutate) {
     const codexHome = resolveCodexHome2(deps.codexHome);
     const agentDir = resolvePiAgentDir(deps.agentDir);
+    const claudeDir = resolveClaudeConfigDir(deps.claudeConfigDir);
+    let restoreClaude;
+    let restoreClaudeBackup;
+    const invalidateModels = () => {
+      for (const tool of ["codex", "claude", "pi"]) deps.manager.invalidateCapabilities(tool);
+    };
     const restoreStore = deps.store.snapshot();
     const restoreCodex = snapshotFile(import_node_path75.default.join(codexHome, "config.toml"));
     const restorePi = import_node_fs66.default.existsSync(agentDir) ? snapshotFile(import_node_path75.default.join(agentDir, PI_SUBSCRIPTION_FILE)) : null;
@@ -73548,6 +73658,8 @@ function buildChannelsHandlers(deps) {
       next = mutate();
       if (next === void 0) return;
       if (next) {
+        const commitStore = deps.store.snapshot();
+        restoreStore();
         try {
           await fetchProviderModels({ baseUrl: next.baseUrl, headers: {
             Accept: "application/json",
@@ -73558,14 +73670,21 @@ function buildChannelsHandlers(deps) {
           const authFailed = /HTTP (401|403)\b/.test(message);
           throw new Error(`${authFailed ? "\u8BA2\u9605 API \u9274\u6743\u5931\u8D25\uFF0C\u8BF7\u68C0\u67E5 API Key" : "\u8BA2\u9605 API \u9A8C\u8BC1\u5931\u8D25\uFF0C\u8BF7\u68C0\u67E5\u5730\u5740\u4E0E\u7F51\u7EDC"}\uFF1A${message}`);
         }
+        commitStore();
       }
+      restoreClaude = snapshotFile(import_node_path75.default.join(claudeDir, "settings.json"));
+      restoreClaudeBackup = snapshotFile(import_node_path75.default.join(claudeDir, CLAUDE_SUBSCRIPTION_BACKUP));
       applyCodexSubscriptionChannel({ codexHome, channel: next });
       applyPiSubscriptionChannel({ agentDir, channel: next });
-      deps.manager.invalidateCapabilities("codex");
+      applyClaudeSubscriptionChannel({ configDir: claudeDir, channel: next });
+      invalidateModels();
     } catch (err) {
       restoreStore();
       restoreCodex();
       restorePi?.();
+      restoreClaude?.();
+      restoreClaudeBackup?.();
+      invalidateModels();
       if (next?.id === "default-pool" && err instanceof Error && /HTTP 401/.test(err.message)) {
         throw new Error("\u9ED8\u8BA4\u53F7\u6C60\u8BA4\u8BC1\u5931\u8D25\uFF08HTTP 401\uFF09\uFF1A\u8BF7\u7F16\u8F91\u300C\u9ED8\u8BA4\u56E2\u961F\u53F7\u6C60\u300D\u5E76\u91CD\u65B0\u586B\u5199\u53F7\u6C60 API Key\uFF0C\u518D\u8BBE\u4E3A\u5F53\u524D\u3002");
       }
@@ -73598,8 +73717,10 @@ function buildChannelsHandlers(deps) {
     return { response: { ok: true } };
   });
   const models = async (frame) => {
-    parseArgs2(SubscriptionChannelModelsArgsSchema, frame, "subscriptionChannel:models");
-    const active = deps.store.getActive();
+    const args = parseArgs2(SubscriptionChannelModelsArgsSchema, frame, "subscriptionChannel:models");
+    const active = args.channelId ? deps.store.get(args.channelId) : deps.store.getActive();
+    if (args.channelId && !active) throw new Error("\u672A\u627E\u5230\u4E91\u7AEF\u9009\u7528\u7684\u8BA2\u9605\u901A\u9053\uFF0C\u8BF7\u5728\u53D1\u5E03\u9875\u91CD\u65B0\u9009\u62E9");
+    if (active && args.updatedAt !== void 0 && args.updatedAt !== active.updatedAt) throw new Error("\u8BA2\u9605\u901A\u9053\u5DF2\u53D8\u66F4\uFF0C\u8BF7\u5728\u53D1\u5E03\u9875\u91CD\u65B0\u4FDD\u5B58\u4E91\u7AEF\u8BA2\u9605");
     if (!active) return { response: { channelId: null, models: [] } };
     const list = await fetchProviderModels(
       { baseUrl: active.baseUrl, headers: { Accept: "application/json", Authorization: `Bearer ${active.apiKey}` } },
@@ -74529,7 +74650,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.657".length > 0 ? "0.2.657" : "dev";
+var version = "0.2.659".length > 0 ? "0.2.659" : "dev";
 
 // src/cli-probe/probe.ts
 var fs85 = __toESM(require("fs"), 1);
@@ -77142,7 +77263,10 @@ async function startDaemon(config) {
   const personaStore = new PersonaStore(import_node_path88.default.join(config.dataDir, "personas"));
   const subscriptionChannelStore = new SubscriptionChannelStore({ dataDir: config.dataDir });
   const activeSubscriptionChannel = subscriptionChannelStore.getActive();
-  if (activeSubscriptionChannel) applyPiSubscriptionChannel({ channel: activeSubscriptionChannel });
+  if (activeSubscriptionChannel) {
+    applyPiSubscriptionChannel({ channel: activeSubscriptionChannel });
+    applyClaudeSubscriptionChannel({ channel: activeSubscriptionChannel });
+  }
   const usersRoot = import_node_path88.default.join(config.dataDir, "users");
   const defaultsRoot = findDefaultsRoot(logger);
   if (defaultsRoot) {
@@ -77551,6 +77675,7 @@ async function startDaemon(config) {
   manager.attachObserver(observer);
   deliverPendingRef = (sid) => manager.deliverPending(sid);
   const claudeAdapter = config.mode === "tui" ? new ClaudeTuiAdapter({
+    getSubscriptionChannel: () => subscriptionChannelStore.getActive(),
     logger,
     historyReader: new ClaudeHistoryReader(),
     onPtyRegister: (tsid, pty) => manager.registerPty(tsid, pty),
@@ -77563,7 +77688,7 @@ async function startDaemon(config) {
     onReady: (tsid) => manager.dispatchReadyDetected(tsid),
     onScreenIdle: (tsid) => manager.notifyScreenIdle(tsid),
     screenIdleProbeLogger
-  }) : new ClaudeAdapter({ logger, historyReader: new ClaudeHistoryReader() });
+  }) : new ClaudeAdapter({ logger, historyReader: new ClaudeHistoryReader(), getSubscriptionChannel: () => subscriptionChannelStore.getActive() });
   const cloudGateway = new CloudGatewayClient({
     getLoginPass: () => ownerIdentityStore.read()?.loginPass ?? null,
     centralApi: config.clawosApi ?? DEFAULT_CLAWOS_API,