@clawos-dev/clawd 0.2.663 → 0.2.665

package/dist/app-builder-plugin/mcp-server.cjs

@@ -31584,7 +31584,22 @@ var DeployStateSchema = external_exports.object({
 var DeployUnpublishResultSchema = external_exports.object({
   before: external_exports.number().nullable()
 }).strict();
+var DeployLocalStateSchema = DeployStateSchema.pick({
+  personaId: true,
+  github: true,
+  repo: true,
+  scans: true,
+  releases: true,
+  promotions: true,
+  engineChannels: true,
+  historyError: true
+});
 var DeployPatchResultSchema = DeployStateSchema.pick({ scans: true });
+var DeploySecretsResultSchema = external_exports.object({
+  environment: DeployEnvironmentSchema,
+  secrets: external_exports.array(DeploySecretPresenceSchema).optional(),
+  engineChannels: DeployEngineChannelsSchema.optional()
+}).strict();
 var DeployReleaseResultSchema = external_exports.object({
   sha: external_exports.string().min(1),
   actionsUrl: external_exports.string().min(1),
@@ -33824,6 +33839,10 @@ var METHOD_DOCS = {
     summary: "\u4E0A\u4E91\u9875\u9762\u8981\u7684\u5168\u90E8\uFF1A\u4ED3\u5E93\u7ED1\u5B9A\u72B6\u6001\uFF08git \u73B0\u7B97\uFF09\u3001\u626B\u63CF\u5386\u53F2\uFF08\u6BCF\u6761\u5E26\u6E05\u5355\u5FEB\u7167\uFF09\u3001\u53D1\u5E03\u5386\u53F2\uFF08\u6700\u540E\u4E00\u6761 = \u7EBF\u4E0A\u6B63\u8DD1\u7684\uFF09\u3001\u4ED3\u5E93 Secrets \u91CC\u5404\u53D8\u91CF\u540D\u586B\u8FC7\u6CA1\u6709\uFF08**\u53EA\u6709\u540D\u5B57\u548C\u65F6\u95F4\uFF0C\u6CA1\u6709\u503C**\uFF09\u3001\u4E00\u6761\u6D41\u6C34\u7EBF\u72B6\u6001\uFF08\u7F3A\u7701\u4ED3\u5E93\u6700\u65B0\u90A3\u6761\uFF1B`releaseHead` \u6307\u540D\u770B\u54EA\u6B21\u53D1\u5E03\u7684\uFF09\uFF1Bowner-only",
     args: DeployGetArgsSchema
   },
+  "deploy:getLocal": {
+    summary: "\u4E0A\u4E91\u9875\u8981\u7684**\u672C\u673A\u90E8\u5206**\uFF1A\u4ED3\u5E93\u7ED1\u5B9A\u72B6\u6001\u3001\u626B\u63CF\u5386\u53F2\u3001\u53D1\u5E03\u5386\u53F2\u3001promotion \u8BB0\u5F55\u3001GitHub \u8EAB\u4EFD\u72B6\u6001\u3001\u6A21\u578B\u8BA2\u9605\u6E20\u9053\u3002\u53EA\u8BFB\u672C\u673A\u6587\u4EF6\uFF0C**\u4E0D\u95EE GitHub Actions / gateway / \u98DE\u4E66**\uFF08\u6CA1\u6709\u6D41\u6C34\u7EBF run\u3001Secrets\u3001\u5728\u7EBF\u72B6\u6001\u3001\u4E0B\u7EBF run\uFF09\uFF0C\u4E5F\u4E0D\u89E6\u53D1\u4EFB\u4F55\u4F1A\u5199\u76D8\u7684\u8FDC\u7A0B\u526F\u4F5C\u7528\uFF1BGitHub \u767B\u5F55\u8EAB\u4EFD\u6CBF\u7528 20 \u79D2\u7F13\u5B58\uFF0C\u672A\u547D\u4E2D\u65F6\u95EE\u4E00\u6B21 GET /user\u3002\u626B\u63CF\u671F\u95F4\u8F6E\u8BE2\u3001persona \u5361\u7247\u7528\u5B83\uFF1B\u8981\u5B8C\u6574\u72B6\u6001\u8D70 deploy:get\uFF1Bowner-only",
+    args: DeployPersonaArgsSchema
+  },
   "deploy:scan": {
     summary: "\u8D77\u4E00\u6B21\u626B\u63CF\u3002**\u6CA1\u4ED3\u5E93\u5148\u5EFA\u4ED3**\uFF08GitHub REST \u5EFA\u5728\u7EC4\u7EC7\u4E0B\u3001\u79C1\u6709\uFF0Cgit \u63A8\u9996\u4E2A\u63D0\u4EA4\uFF1Btoken \u6765\u81EA\u672C\u673A git \u7684\u8EAB\u4EFD\uFF0C\u6CA1\u6388\u6743\u5148\u62D2\uFF09\u3002\u628A persona \u76EE\u5F55\u63D0\u4EA4\u5230\u672C\u5730\uFF08\u4E0D\u63A8\uFF09\u3001\u5728\u626B\u63CF\u5386\u53F2\u91CC\u8FFD\u52A0\u4E00\u6761\u3001\u8D77 persona-butler \u7684\u626B\u63CF\u4F1A\u8BDD\uFF1B\u6B63\u5728\u626B\u7684\u8BDD\u539F\u6837\u8FD4\u56DE\u4E0D\u8D77\u7B2C\u4E8C\u4E2A\u4F1A\u8BDD\u3002\u5E26 scanBase\uFF08hard / soft\uFF09\u6309\u8BE5\u6863\u4F4D\u626B\uFF08soft \u4E0D\u6210\u7ACB\u81EA\u52A8\u9000 hard\uFF09\uFF0C\u7F3A\u5E2D daemon \u81EA\u52A8\u5B9A\uFF1Bowner-only",
     args: DeployScanArgsSchema
@@ -33833,22 +33852,22 @@ var METHOD_DOCS = {
     args: DeployPatchArgsSchema
   },
   "deploy:putSecret": {
-    summary: "\u628A\u4E00\u6761\u51ED\u636E\u7684\u503C\u5199\u8FDB\u4ED3\u5E93\u7684 GitHub Secrets\uFF08GitHub REST\uFF0C\u503C\u7528\u4ED3\u5E93\u516C\u94A5\u5C01\u7BB1\u540E\u4E0A\u4F20\uFF09\u3002**\u8FD9\u662F\u6E05\u5355\u51ED\u636E\u503C\u552F\u4E00\u7684\u5165\u53E3**\uFF08\u6A21\u578B\u8BA2\u9605\u8D70 deploy:setEngineAuth\uFF09\uFF1A\u5165\u53C2\u4E0D\u8FDB\u65E5\u5FD7\u3001\u54CD\u5E94\u4E0D\u56DE\u663E\u503C\u3001\u672C\u673A\u4E0D\u843D\u76D8\u3002env \u540D\u5FC5\u987B\u662F scanId \u90A3\u6B21\u6E05\u5355\u91CC\u8BE5\u51ED\u636E\u58F0\u660E\u8FC7\u7684\uFF1Bowner-only",
+    summary: "\u628A\u4E00\u6761\u51ED\u636E\u7684\u503C\u5199\u8FDB\u4ED3\u5E93\u7684 GitHub Secrets\uFF08GitHub REST\uFF0C\u503C\u7528\u4ED3\u5E93\u516C\u94A5\u5C01\u7BB1\u540E\u4E0A\u4F20\uFF09\u3002**\u8FD9\u662F\u6E05\u5355\u51ED\u636E\u503C\u552F\u4E00\u7684\u5165\u53E3**\uFF08\u6A21\u578B\u8BA2\u9605\u8D70 deploy:setEngineAuth\uFF09\uFF1A\u5165\u53C2\u4E0D\u8FDB\u65E5\u5FD7\u3001\u54CD\u5E94\u4E0D\u56DE\u663E\u503C\u3001\u672C\u673A\u4E0D\u843D\u76D8\u3002env \u540D\u5FC5\u987B\u662F scanId \u90A3\u6B21\u6E05\u5355\u91CC\u8BE5\u51ED\u636E\u58F0\u660E\u8FC7\u7684\u3002\u53EA\u56DE\u5199\u5165\u73AF\u5883\u73B0\u67E5\u7684\u540D\u5B57\u6E05\u5355 { environment, secrets }\uFF08secrets \u7F3A\u5E2D = \u5199\u6210\u529F\u4F46\u56DE\u67E5\u5931\u8D25\uFF0C\u8C03\u7528\u65B9\u81EA\u5DF1 deploy:get\uFF09\uFF0C\u4E0D\u56DE\u6574\u4EFD deploy:get \u72B6\u6001\uFF1Bowner-only",
     args: DeployPutSecretArgsSchema
   },
   "deploy:setEngineAuth": {
-    summary: "\u6A21\u578B\u8BA2\u9605\uFF08\u4E91\u4E0A\u8DD1\u8FD9\u4E2A persona \u82B1\u8C01\u7684\u6A21\u578B\u989D\u5EA6\uFF09\uFF1Aauth = { baseUrl, apiKey } \u5199\u8FDB\u4ED3\u5E93 GitHub Secrets \u7684 CLAWD_ENGINE_BASE_URL / CLAWD_ENGINE_API_KEY\uFF08\u5730\u5740\u89C4\u8303\u6210 \u2026/v1\uFF09\uFF0Cnull = \u5220\u8FD9\u4E24\u6761\u3001\u6539\u56DE\u5E73\u53F0\u9ED8\u8BA4\u3002\u4E0B\u6B21\u53D1\u5E03\u751F\u6548\u3002\u540C putSecret \u7684\u7EAA\u5F8B\uFF1A\u5165\u53C2\u4E0D\u8FDB\u65E5\u5FD7\u3001\u54CD\u5E94\u4E0D\u56DE\u663E\u503C\u3001\u672C\u673A\u4E0D\u843D\u76D8\uFF1B\u56DE deploy:get \u540C\u5F62\u7684\u72B6\u6001\uFF1Bowner-only\u3001human-only",
+    summary: "\u6A21\u578B\u8BA2\u9605\uFF08\u4E91\u4E0A\u8DD1\u8FD9\u4E2A persona \u82B1\u8C01\u7684\u6A21\u578B\u989D\u5EA6\uFF09\uFF1Aauth = { baseUrl, apiKey } \u5199\u8FDB\u4ED3\u5E93 GitHub Secrets \u7684 CLAWD_ENGINE_BASE_URL / CLAWD_ENGINE_API_KEY\uFF08\u5730\u5740\u89C4\u8303\u6210 \u2026/v1\uFF09\uFF0Cnull = \u5220\u8FD9\u4E24\u6761\u3001\u6539\u56DE\u5E73\u53F0\u9ED8\u8BA4\u3002\u4E0B\u6B21\u53D1\u5E03\u751F\u6548\u3002\u540C putSecret \u7684\u7EAA\u5F8B\uFF1A\u5165\u53C2\u4E0D\u8FDB\u65E5\u5FD7\u3001\u54CD\u5E94\u4E0D\u56DE\u663E\u503C\u3001\u672C\u673A\u4E0D\u843D\u76D8\uFF1B\u53EA\u56DE\u5199\u5165\u73AF\u5883\u73B0\u67E5\u7684\u540D\u5B57\u6E05\u5355\u548C engineChannels\uFF08{ environment, secrets?, engineChannels? }\uFF09\uFF0C\u4E0D\u56DE\u6574\u4EFD deploy:get \u72B6\u6001\uFF1Bowner-only\u3001human-only",
     args: DeploySetEngineAuthArgsSchema,
     argsConstraints: {
       anyOf: [{ required: ["channelId"] }, { required: ["auth"] }]
     }
   },
   "deploy:reportFinding": {
-    summary: "\u626B\u63CF\u4E2D\u7684 butler \u9010\u6761\u4E0A\u62A5\u4E00\u4E2A\u53D1\u73B0\uFF08cli / secret / asset\uFF09\u3002**\u8FB9\u626B\u8FB9\u62A5**\uFF0C\u9875\u9762\u968F\u4E4B\u4E00\u70B9\u70B9\u586B\u5145\uFF1B\u540C (kind,name) \u91CD\u590D\u4E0A\u62A5\u5373\u8986\u76D6\u3002owner-only\u2014\u2014butler \u4F1A\u8BDD\u672C\u8EAB\u8DD1\u5728 owner \u6A21\u5F0F",
+    summary: "\u626B\u63CF\u4E2D\u7684 butler \u9010\u6761\u4E0A\u62A5\u4E00\u4E2A\u53D1\u73B0\uFF08cli / secret / asset\uFF09\u3002**\u8FB9\u626B\u8FB9\u62A5**\uFF0C\u9875\u9762\u968F\u4E4B\u4E00\u70B9\u70B9\u586B\u5145\uFF1B\u540C (kind,name) \u91CD\u590D\u4E0A\u62A5\u5373\u8986\u76D6\u3002\u53EA\u56DE\u626B\u63CF\u5386\u53F2 `scans`\uFF08\u540C deploy:patch\uFF09\uFF0C\u4E0D\u56DE\u6574\u4EFD\u72B6\u6001\uFF1Bowner-only\u2014\u2014butler \u4F1A\u8BDD\u672C\u8EAB\u8DD1\u5728 owner \u6A21\u5F0F",
     args: DeployReportFindingArgsSchema
   },
   "deploy:finishScan": {
-    summary: "butler \u6536\u5C3E\uFF1A\u7ED9\u51FA\u5B58\u7591\u9879\uFF0C\u626B\u63CF\u8BB0\u5F55\u4ECE scanning \u8F6C done\u3002\u6CA1\u8C03\u5230\u5B83\u5C31\u7B49\u4E8E\u6CA1\u626B\u5B8C\u2014\u2014butler \u4F1A\u8BDD\u7ED3\u675F\u65F6\u8BB0\u5F55\u8FD8\u505C\u5728 scanning\uFF0Cdaemon \u636E\u6B64\u5224 failed\uFF1Bowner-only",
+    summary: "butler \u6536\u5C3E\uFF1A\u7ED9\u51FA\u5B58\u7591\u9879\uFF0C\u626B\u63CF\u8BB0\u5F55\u4ECE scanning \u8F6C done\u3002\u6CA1\u8C03\u5230\u5B83\u5C31\u7B49\u4E8E\u6CA1\u626B\u5B8C\u2014\u2014butler \u4F1A\u8BDD\u7ED3\u675F\u65F6\u8BB0\u5F55\u8FD8\u505C\u5728 scanning\uFF0Cdaemon \u636E\u6B64\u5224 failed\u3002\u53EA\u56DE\u626B\u63CF\u5386\u53F2 `scans`\uFF1Bowner-only",
     args: DeployFinishScanArgsSchema
   },
   "deploy:release": {

package/dist/cli.cjs

@@ -6317,7 +6317,7 @@ function cloudEngineSettings(p3) {
 function repoSlug(url) {
   return url.trim().replace(/^git@[^:]+:/, "").replace(/^https?:\/\/[^/]+\//, "").replace(/\.git$/, "");
 }
-var DeployFileSchema, SCAN_BASE_KINDS, ScanBaseKindSchema, DeployScanStatusSchema, DeployScanSchema, DeployReleasedSchema, DEPLOY_PROMOTION_PHASES, DeployPromotionSchema, DeployEngineChannelSchema, DeployEngineChannelsSchema, DeployScanFileSchema, DeployRepoSchema, DeploySecretPresenceSchema, ENGINE_AUTH_SECRETS, ENGINE_AUTH_PARTIAL_BLOCKER, DEPLOY_STAGE_STATUSES, DeployStageStatusSchema, DEPLOY_VERIFY_STAGE, DEPLOY_STAGE_KEYS, DeployStageKeySchema, DeployJobSchema, DeployRunSchema, CLOUD_ENGINES, DeployUnpublishRunSchema, DeployStateSchema, DeployUnpublishResultSchema, DeployPatchResultSchema, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployGetArgsSchema, DeployScanArgsSchema, DeployReleaseArgsSchema, DeployConfirmTestArgsSchema, DeployPromoteArgsSchema, DeployOpenTestArgsSchema, DeployEnvironmentArgsSchema, DeployConfirmTestResultSchema, DeployPromoteResultSchema, DeployOpenTestResultSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeploySetEngineAuthArgsSchema, DeployRerunJobArgsSchema, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
+var DeployFileSchema, SCAN_BASE_KINDS, ScanBaseKindSchema, DeployScanStatusSchema, DeployScanSchema, DeployReleasedSchema, DEPLOY_PROMOTION_PHASES, DeployPromotionSchema, DeployEngineChannelSchema, DeployEngineChannelsSchema, DeployScanFileSchema, DeployRepoSchema, DeploySecretPresenceSchema, ENGINE_AUTH_SECRETS, ENGINE_AUTH_PARTIAL_BLOCKER, DEPLOY_STAGE_STATUSES, DeployStageStatusSchema, DEPLOY_VERIFY_STAGE, DEPLOY_STAGE_KEYS, DeployStageKeySchema, DeployJobSchema, DeployRunSchema, CLOUD_ENGINES, DeployUnpublishRunSchema, DeployStateSchema, DeployUnpublishResultSchema, DeployLocalStateSchema, DeployPatchResultSchema, DeploySecretsResultSchema, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployGetArgsSchema, DeployScanArgsSchema, DeployReleaseArgsSchema, DeployConfirmTestArgsSchema, DeployPromoteArgsSchema, DeployOpenTestArgsSchema, DeployEnvironmentArgsSchema, DeployConfirmTestResultSchema, DeployPromoteResultSchema, DeployOpenTestResultSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeploySetEngineAuthArgsSchema, DeployRerunJobArgsSchema, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
 var init_deploy_schemas = __esm({
   "../protocol/src/deploy-schemas.ts"() {
     "use strict";
@@ -6500,7 +6500,22 @@ var init_deploy_schemas = __esm({
     DeployUnpublishResultSchema = external_exports.object({
       before: external_exports.number().nullable()
     }).strict();
+    DeployLocalStateSchema = DeployStateSchema.pick({
+      personaId: true,
+      github: true,
+      repo: true,
+      scans: true,
+      releases: true,
+      promotions: true,
+      engineChannels: true,
+      historyError: true
+    });
     DeployPatchResultSchema = DeployStateSchema.pick({ scans: true });
+    DeploySecretsResultSchema = external_exports.object({
+      environment: DeployEnvironmentSchema,
+      secrets: external_exports.array(DeploySecretPresenceSchema).optional(),
+      engineChannels: DeployEngineChannelsSchema.optional()
+    }).strict();
     DeployReleaseResultSchema = external_exports.object({
       sha: external_exports.string().min(1),
       actionsUrl: external_exports.string().min(1),
@@ -9054,6 +9069,10 @@ var init_methods = __esm({
         summary: "\u4E0A\u4E91\u9875\u9762\u8981\u7684\u5168\u90E8\uFF1A\u4ED3\u5E93\u7ED1\u5B9A\u72B6\u6001\uFF08git \u73B0\u7B97\uFF09\u3001\u626B\u63CF\u5386\u53F2\uFF08\u6BCF\u6761\u5E26\u6E05\u5355\u5FEB\u7167\uFF09\u3001\u53D1\u5E03\u5386\u53F2\uFF08\u6700\u540E\u4E00\u6761 = \u7EBF\u4E0A\u6B63\u8DD1\u7684\uFF09\u3001\u4ED3\u5E93 Secrets \u91CC\u5404\u53D8\u91CF\u540D\u586B\u8FC7\u6CA1\u6709\uFF08**\u53EA\u6709\u540D\u5B57\u548C\u65F6\u95F4\uFF0C\u6CA1\u6709\u503C**\uFF09\u3001\u4E00\u6761\u6D41\u6C34\u7EBF\u72B6\u6001\uFF08\u7F3A\u7701\u4ED3\u5E93\u6700\u65B0\u90A3\u6761\uFF1B`releaseHead` \u6307\u540D\u770B\u54EA\u6B21\u53D1\u5E03\u7684\uFF09\uFF1Bowner-only",
         args: DeployGetArgsSchema
       },
+      "deploy:getLocal": {
+        summary: "\u4E0A\u4E91\u9875\u8981\u7684**\u672C\u673A\u90E8\u5206**\uFF1A\u4ED3\u5E93\u7ED1\u5B9A\u72B6\u6001\u3001\u626B\u63CF\u5386\u53F2\u3001\u53D1\u5E03\u5386\u53F2\u3001promotion \u8BB0\u5F55\u3001GitHub \u8EAB\u4EFD\u72B6\u6001\u3001\u6A21\u578B\u8BA2\u9605\u6E20\u9053\u3002\u53EA\u8BFB\u672C\u673A\u6587\u4EF6\uFF0C**\u4E0D\u95EE GitHub Actions / gateway / \u98DE\u4E66**\uFF08\u6CA1\u6709\u6D41\u6C34\u7EBF run\u3001Secrets\u3001\u5728\u7EBF\u72B6\u6001\u3001\u4E0B\u7EBF run\uFF09\uFF0C\u4E5F\u4E0D\u89E6\u53D1\u4EFB\u4F55\u4F1A\u5199\u76D8\u7684\u8FDC\u7A0B\u526F\u4F5C\u7528\uFF1BGitHub \u767B\u5F55\u8EAB\u4EFD\u6CBF\u7528 20 \u79D2\u7F13\u5B58\uFF0C\u672A\u547D\u4E2D\u65F6\u95EE\u4E00\u6B21 GET /user\u3002\u626B\u63CF\u671F\u95F4\u8F6E\u8BE2\u3001persona \u5361\u7247\u7528\u5B83\uFF1B\u8981\u5B8C\u6574\u72B6\u6001\u8D70 deploy:get\uFF1Bowner-only",
+        args: DeployPersonaArgsSchema
+      },
       "deploy:scan": {
         summary: "\u8D77\u4E00\u6B21\u626B\u63CF\u3002**\u6CA1\u4ED3\u5E93\u5148\u5EFA\u4ED3**\uFF08GitHub REST \u5EFA\u5728\u7EC4\u7EC7\u4E0B\u3001\u79C1\u6709\uFF0Cgit \u63A8\u9996\u4E2A\u63D0\u4EA4\uFF1Btoken \u6765\u81EA\u672C\u673A git \u7684\u8EAB\u4EFD\uFF0C\u6CA1\u6388\u6743\u5148\u62D2\uFF09\u3002\u628A persona \u76EE\u5F55\u63D0\u4EA4\u5230\u672C\u5730\uFF08\u4E0D\u63A8\uFF09\u3001\u5728\u626B\u63CF\u5386\u53F2\u91CC\u8FFD\u52A0\u4E00\u6761\u3001\u8D77 persona-butler \u7684\u626B\u63CF\u4F1A\u8BDD\uFF1B\u6B63\u5728\u626B\u7684\u8BDD\u539F\u6837\u8FD4\u56DE\u4E0D\u8D77\u7B2C\u4E8C\u4E2A\u4F1A\u8BDD\u3002\u5E26 scanBase\uFF08hard / soft\uFF09\u6309\u8BE5\u6863\u4F4D\u626B\uFF08soft \u4E0D\u6210\u7ACB\u81EA\u52A8\u9000 hard\uFF09\uFF0C\u7F3A\u5E2D daemon \u81EA\u52A8\u5B9A\uFF1Bowner-only",
         args: DeployScanArgsSchema
@@ -9063,22 +9082,22 @@ var init_methods = __esm({
         args: DeployPatchArgsSchema
       },
       "deploy:putSecret": {
-        summary: "\u628A\u4E00\u6761\u51ED\u636E\u7684\u503C\u5199\u8FDB\u4ED3\u5E93\u7684 GitHub Secrets\uFF08GitHub REST\uFF0C\u503C\u7528\u4ED3\u5E93\u516C\u94A5\u5C01\u7BB1\u540E\u4E0A\u4F20\uFF09\u3002**\u8FD9\u662F\u6E05\u5355\u51ED\u636E\u503C\u552F\u4E00\u7684\u5165\u53E3**\uFF08\u6A21\u578B\u8BA2\u9605\u8D70 deploy:setEngineAuth\uFF09\uFF1A\u5165\u53C2\u4E0D\u8FDB\u65E5\u5FD7\u3001\u54CD\u5E94\u4E0D\u56DE\u663E\u503C\u3001\u672C\u673A\u4E0D\u843D\u76D8\u3002env \u540D\u5FC5\u987B\u662F scanId \u90A3\u6B21\u6E05\u5355\u91CC\u8BE5\u51ED\u636E\u58F0\u660E\u8FC7\u7684\uFF1Bowner-only",
+        summary: "\u628A\u4E00\u6761\u51ED\u636E\u7684\u503C\u5199\u8FDB\u4ED3\u5E93\u7684 GitHub Secrets\uFF08GitHub REST\uFF0C\u503C\u7528\u4ED3\u5E93\u516C\u94A5\u5C01\u7BB1\u540E\u4E0A\u4F20\uFF09\u3002**\u8FD9\u662F\u6E05\u5355\u51ED\u636E\u503C\u552F\u4E00\u7684\u5165\u53E3**\uFF08\u6A21\u578B\u8BA2\u9605\u8D70 deploy:setEngineAuth\uFF09\uFF1A\u5165\u53C2\u4E0D\u8FDB\u65E5\u5FD7\u3001\u54CD\u5E94\u4E0D\u56DE\u663E\u503C\u3001\u672C\u673A\u4E0D\u843D\u76D8\u3002env \u540D\u5FC5\u987B\u662F scanId \u90A3\u6B21\u6E05\u5355\u91CC\u8BE5\u51ED\u636E\u58F0\u660E\u8FC7\u7684\u3002\u53EA\u56DE\u5199\u5165\u73AF\u5883\u73B0\u67E5\u7684\u540D\u5B57\u6E05\u5355 { environment, secrets }\uFF08secrets \u7F3A\u5E2D = \u5199\u6210\u529F\u4F46\u56DE\u67E5\u5931\u8D25\uFF0C\u8C03\u7528\u65B9\u81EA\u5DF1 deploy:get\uFF09\uFF0C\u4E0D\u56DE\u6574\u4EFD deploy:get \u72B6\u6001\uFF1Bowner-only",
         args: DeployPutSecretArgsSchema
       },
       "deploy:setEngineAuth": {
-        summary: "\u6A21\u578B\u8BA2\u9605\uFF08\u4E91\u4E0A\u8DD1\u8FD9\u4E2A persona \u82B1\u8C01\u7684\u6A21\u578B\u989D\u5EA6\uFF09\uFF1Aauth = { baseUrl, apiKey } \u5199\u8FDB\u4ED3\u5E93 GitHub Secrets \u7684 CLAWD_ENGINE_BASE_URL / CLAWD_ENGINE_API_KEY\uFF08\u5730\u5740\u89C4\u8303\u6210 \u2026/v1\uFF09\uFF0Cnull = \u5220\u8FD9\u4E24\u6761\u3001\u6539\u56DE\u5E73\u53F0\u9ED8\u8BA4\u3002\u4E0B\u6B21\u53D1\u5E03\u751F\u6548\u3002\u540C putSecret \u7684\u7EAA\u5F8B\uFF1A\u5165\u53C2\u4E0D\u8FDB\u65E5\u5FD7\u3001\u54CD\u5E94\u4E0D\u56DE\u663E\u503C\u3001\u672C\u673A\u4E0D\u843D\u76D8\uFF1B\u56DE deploy:get \u540C\u5F62\u7684\u72B6\u6001\uFF1Bowner-only\u3001human-only",
+        summary: "\u6A21\u578B\u8BA2\u9605\uFF08\u4E91\u4E0A\u8DD1\u8FD9\u4E2A persona \u82B1\u8C01\u7684\u6A21\u578B\u989D\u5EA6\uFF09\uFF1Aauth = { baseUrl, apiKey } \u5199\u8FDB\u4ED3\u5E93 GitHub Secrets \u7684 CLAWD_ENGINE_BASE_URL / CLAWD_ENGINE_API_KEY\uFF08\u5730\u5740\u89C4\u8303\u6210 \u2026/v1\uFF09\uFF0Cnull = \u5220\u8FD9\u4E24\u6761\u3001\u6539\u56DE\u5E73\u53F0\u9ED8\u8BA4\u3002\u4E0B\u6B21\u53D1\u5E03\u751F\u6548\u3002\u540C putSecret \u7684\u7EAA\u5F8B\uFF1A\u5165\u53C2\u4E0D\u8FDB\u65E5\u5FD7\u3001\u54CD\u5E94\u4E0D\u56DE\u663E\u503C\u3001\u672C\u673A\u4E0D\u843D\u76D8\uFF1B\u53EA\u56DE\u5199\u5165\u73AF\u5883\u73B0\u67E5\u7684\u540D\u5B57\u6E05\u5355\u548C engineChannels\uFF08{ environment, secrets?, engineChannels? }\uFF09\uFF0C\u4E0D\u56DE\u6574\u4EFD deploy:get \u72B6\u6001\uFF1Bowner-only\u3001human-only",
         args: DeploySetEngineAuthArgsSchema,
         argsConstraints: {
           anyOf: [{ required: ["channelId"] }, { required: ["auth"] }]
         }
       },
       "deploy:reportFinding": {
-        summary: "\u626B\u63CF\u4E2D\u7684 butler \u9010\u6761\u4E0A\u62A5\u4E00\u4E2A\u53D1\u73B0\uFF08cli / secret / asset\uFF09\u3002**\u8FB9\u626B\u8FB9\u62A5**\uFF0C\u9875\u9762\u968F\u4E4B\u4E00\u70B9\u70B9\u586B\u5145\uFF1B\u540C (kind,name) \u91CD\u590D\u4E0A\u62A5\u5373\u8986\u76D6\u3002owner-only\u2014\u2014butler \u4F1A\u8BDD\u672C\u8EAB\u8DD1\u5728 owner \u6A21\u5F0F",
+        summary: "\u626B\u63CF\u4E2D\u7684 butler \u9010\u6761\u4E0A\u62A5\u4E00\u4E2A\u53D1\u73B0\uFF08cli / secret / asset\uFF09\u3002**\u8FB9\u626B\u8FB9\u62A5**\uFF0C\u9875\u9762\u968F\u4E4B\u4E00\u70B9\u70B9\u586B\u5145\uFF1B\u540C (kind,name) \u91CD\u590D\u4E0A\u62A5\u5373\u8986\u76D6\u3002\u53EA\u56DE\u626B\u63CF\u5386\u53F2 `scans`\uFF08\u540C deploy:patch\uFF09\uFF0C\u4E0D\u56DE\u6574\u4EFD\u72B6\u6001\uFF1Bowner-only\u2014\u2014butler \u4F1A\u8BDD\u672C\u8EAB\u8DD1\u5728 owner \u6A21\u5F0F",
         args: DeployReportFindingArgsSchema
       },
       "deploy:finishScan": {
-        summary: "butler \u6536\u5C3E\uFF1A\u7ED9\u51FA\u5B58\u7591\u9879\uFF0C\u626B\u63CF\u8BB0\u5F55\u4ECE scanning \u8F6C done\u3002\u6CA1\u8C03\u5230\u5B83\u5C31\u7B49\u4E8E\u6CA1\u626B\u5B8C\u2014\u2014butler \u4F1A\u8BDD\u7ED3\u675F\u65F6\u8BB0\u5F55\u8FD8\u505C\u5728 scanning\uFF0Cdaemon \u636E\u6B64\u5224 failed\uFF1Bowner-only",
+        summary: "butler \u6536\u5C3E\uFF1A\u7ED9\u51FA\u5B58\u7591\u9879\uFF0C\u626B\u63CF\u8BB0\u5F55\u4ECE scanning \u8F6C done\u3002\u6CA1\u8C03\u5230\u5B83\u5C31\u7B49\u4E8E\u6CA1\u626B\u5B8C\u2014\u2014butler \u4F1A\u8BDD\u7ED3\u675F\u65F6\u8BB0\u5F55\u8FD8\u505C\u5728 scanning\uFF0Cdaemon \u636E\u6B64\u5224 failed\u3002\u53EA\u56DE\u626B\u63CF\u5386\u53F2 `scans`\uFF1Bowner-only",
         args: DeployFinishScanArgsSchema
       },
       "deploy:release": {
@@ -63461,12 +63480,44 @@ function buildDeployHandlers(deps) {
     for (const env of ["integration", "production"]) secretsCache.delete(personaId2 + ":" + env);
     secretsCache.delete(personaId2);
   }
-  async function stateOf(personaId2, selection = {}, measure = directRead) {
-    const { releaseHead, releaseId, environment } = selection;
-    const historical = releaseHead !== void 0 || releaseId !== void 0;
+  async function readLocal(personaId2, historical, measure) {
     const dir = deps.personaDir(personaId2);
     const repo2 = await measure("repo", () => repoInfo(deps.exec, dir));
     const github = await measure("github.identity", () => deps.githubIdentity.status());
+    let file = emptyScanFile();
+    let historyError;
+    try {
+      file = await measure("history", () => readHistory(dir));
+    } catch (err) {
+      historyError = err instanceof Error ? err.message : String(err);
+    }
+    file = await measure("history.settle", () => settleStale(personaId2, dir, file));
+    const pending = file.promotions.at(-1);
+    const bound = pending && file.releases.find((r2) => r2.id === pending.releaseId);
+    if (!historical && pending && !pending.verified && !["completed", "failed"].includes(pending.phase) && bound?.verified && bound.confirmation?.fingerprint === bound.verified.verification.fingerprint) {
+      file = { ...file, promotions: file.promotions.map((p3) => p3.id === pending.id ? { ...p3, verified: bound.verified } : p3) };
+      await writeScanFile(dir, file);
+    }
+    return { dir, repo: repo2, github, file, historyError };
+  }
+  async function localStateOf(personaId2, measure = directRead) {
+    const { file, repo: repo2, github, historyError } = await readLocal(personaId2, false, measure);
+    return {
+      personaId: personaId2,
+      github,
+      ...file.engineChannels ? { engineChannels: file.engineChannels } : {},
+      ...repo2 ? { repo: repo2 } : {},
+      scans: file.scans,
+      releases: file.releases,
+      promotions: file.promotions,
+      ...historyError ? { historyError } : {}
+    };
+  }
+  async function stateOf(personaId2, selection = {}, measure = directRead) {
+    const { releaseHead, releaseId, environment } = selection;
+    const historical = releaseHead !== void 0 || releaseId !== void 0;
+    const { dir, repo: repo2, github, historyError, file: stored } = await readLocal(personaId2, historical, measure);
+    let file = stored;
     const auth = deps.githubIdentity.cached();
     const rawApi = auth ? deps.githubApi(auth.token) : void 0;
     const requests = /* @__PURE__ */ new Map();
@@ -63495,20 +63546,6 @@ function buildDeployHandlers(deps) {
       }
       return promise;
     };
-    let file = emptyScanFile();
-    let historyError;
-    try {
-      file = await measure("history", () => readHistory(dir));
-    } catch (err) {
-      historyError = err instanceof Error ? err.message : String(err);
-    }
-    file = await measure("history.settle", () => settleStale(personaId2, dir, file));
-    const pending = file.promotions.at(-1);
-    const bound = pending && file.releases.find((r2) => r2.id === pending.releaseId);
-    if (!historical && pending && !pending.verified && !["completed", "failed"].includes(pending.phase) && bound?.verified && bound.confirmation?.fingerprint === bound.verified.verification.fingerprint) {
-      file = { ...file, promotions: file.promotions.map((p3) => p3.id === pending.id ? { ...p3, verified: bound.verified } : p3) };
-      await writeScanFile(dir, file);
-    }
     const { scans } = file;
     const selected = releaseId ? file.releases.find((r2) => r2.id === releaseId && (!environment || r2.environment === environment)) : releaseHead ? file.releases.find((r2) => r2.head === releaseHead && (!environment || r2.environment === environment)) : void 0;
     const publisherFeishuAuthRead = scans.at(-1)?.manifest.connectors.some(isFeishuPublisherConnector) ? (async () => {
@@ -63554,12 +63591,12 @@ function buildDeployHandlers(deps) {
         return intRun2;
       })();
       const prodRunRead = (async () => {
-        const pending2 = file.promotions.at(-1);
-        if (!historical && pending2?.verified && ["dispatched", "dispatching"].includes(pending2.phase)) {
+        const pending = file.promotions.at(-1);
+        if (!historical && pending?.verified && ["dispatched", "dispatching"].includes(pending.phase)) {
           await intRunRead;
-          const source = file.releases.find((r2) => r2.id === pending2.releaseId);
+          const source = file.releases.find((r2) => r2.id === pending.releaseId);
           if (source) {
-            await measure("promotion", () => continuePromotion(personaId2, { ...source, verified: pending2.verified }, pending2, false, api, async () => (await observe("production")).image));
+            await measure("promotion", () => continuePromotion(personaId2, { ...source, verified: pending.verified }, pending, false, api, async () => (await observe("production")).image));
             file = await readHistory(dir);
           }
         }
@@ -63634,6 +63671,21 @@ function buildDeployHandlers(deps) {
   const view = async (personaId2, selection, measure) => ({
     response: { type: "deploy:state", ...await stateOf(personaId2, selection, measure) }
   });
+  const localView = async (personaId2, measure) => ({
+    response: { type: "deploy:state", ...await localStateOf(personaId2, measure) }
+  });
+  async function scansResult(dir) {
+    return { response: { type: "deploy:scans", scans: (await readHistory(dir)).scans } };
+  }
+  async function secretsResult(personaId2, dir, api, environment, withChannels = false) {
+    let secrets;
+    try {
+      secrets = await targetSecrets(personaId2, dir, api, environment, true);
+    } catch {
+    }
+    const engineChannels = withChannels ? (await readHistory(dir)).engineChannels : void 0;
+    return { response: { type: "deploy:secrets", environment, ...secrets ? { secrets } : {}, ...engineChannels ? { engineChannels } : {} } };
+  }
   async function beginScan(personaId2, dir, file, contentHead, want) {
     liveScans.set(personaId2, {});
     const released = latestProductionRelease(file.releases);
@@ -63735,7 +63787,7 @@ function buildDeployHandlers(deps) {
       throw toClawdError(err);
     }
     invalidateSecrets(args.personaId);
-    return view(args.personaId);
+    return secretsResult(args.personaId, dir, api, args.environment);
   };
   const setEngineAuth = async (frame, _client, ctx) => {
     ensureOwner(ctx);
@@ -63787,7 +63839,7 @@ function buildDeployHandlers(deps) {
     } finally {
       invalidateSecrets(args.personaId);
     }
-    return view(args.personaId);
+    return secretsResult(args.personaId, dir, api, args.environment, true);
   };
   async function settlePackage(pkg) {
     const localVersion = await deps.probeLocalVersion(pkg);
@@ -63853,7 +63905,7 @@ function buildDeployHandlers(deps) {
       manifest: upsertFinding(scan.manifest, args.kind, item),
       evidence: [...scan.evidence.filter((e) => e.target !== target), redactEvidence({ target, ...args.evidence })]
     }));
-    return view(args.personaId);
+    return scansResult(dir);
   };
   const finishScan = async (frame, _client, ctx) => {
     ensureOwner(ctx);
@@ -63869,7 +63921,7 @@ function buildDeployHandlers(deps) {
       notes: [...scan.notes.filter((n2) => n2.startsWith(MCP_SCAN_NOTE_PREFIX) || n2.startsWith(TEST_SCAN_NOTE_PREFIX)), ...args.notes.map(redactSecretValues)],
       error: void 0
     }));
-    return view(args.personaId);
+    return scansResult(dir);
   };
   const scanHandler = async (frame, _client, ctx) => {
     ensureOwner(ctx);
@@ -63895,9 +63947,9 @@ function buildDeployHandlers(deps) {
       throw toClawdError(error);
     }
     const live = liveScans.get(personaId2);
-    if (live && live.sessionId === void 0) return view(personaId2);
+    if (live && live.sessionId === void 0) return localView(personaId2);
     let file = await readHistory(dir).catch(() => emptyScanFile());
-    if (file.scans.some((s2) => s2.status === "scanning" && isLiveScan(live, s2))) return view(personaId2);
+    if (file.scans.some((s2) => s2.status === "scanning" && isLiveScan(live, s2))) return localView(personaId2);
     file = await settleStale(personaId2, dir, file);
     let head;
     try {
@@ -63912,7 +63964,7 @@ function buildDeployHandlers(deps) {
       liveScans.delete(personaId2);
       throw err;
     }
-    return view(personaId2);
+    return localView(personaId2);
   };
   const configureTestIdentity = async (api, slug) => {
     await requireIntegrationPublishingConfig(api, slug);
@@ -64151,18 +64203,12 @@ function buildDeployHandlers(deps) {
     const id = await deps.openTestPersona(personaId2, record4.verified, releaseId);
     return { response: { type: "deploy:openTest", personaId: id, expectedImage: record4.verified.image } };
   };
-  const getInFlight = /* @__PURE__ */ new Map();
-  const coalescedGet = async (frame, client, ctx) => {
-    ensureOwner(ctx);
-    const args = parseArgs2(DeployGetArgsSchema, frame, "deploy:get");
-    const key = JSON.stringify(args);
-    const hit = getInFlight.get(key);
-    if (hit) return hit;
+  function startTrace(personaId2, event) {
     const started = import_node_perf_hooks.performance.now();
     const traceId = (0, import_node_crypto14.randomUUID)();
-    const log = (message, meta) => {
+    const log = (phase, meta) => {
       try {
-        deps.logger?.info(message, { personaId: args.personaId, traceId, ...meta });
+        deps.logger?.info(`${event}.${phase}`, { personaId: personaId2, traceId, ...meta });
       } catch {
       }
     };
@@ -64175,7 +64221,7 @@ function buildDeployHandlers(deps) {
         return result;
       } finally {
         const finished = import_node_perf_hooks.performance.now();
-        log(stage === "total" ? "deploy.get.finished" : "deploy.get.stage", {
+        log(stage === "total" ? "finished" : "stage", {
           stage,
           status,
           ...details,
@@ -64184,10 +64230,20 @@ function buildDeployHandlers(deps) {
         });
       }
     };
-    log("deploy.get.started", { historical: args.releaseHead !== void 0 || args.releaseId !== void 0, ...args.environment ? { environment: args.environment } : {} });
+    return { log, measure, started };
+  }
+  const getInFlight = /* @__PURE__ */ new Map();
+  const coalescedGet = async (frame, client, ctx) => {
+    ensureOwner(ctx);
+    const args = parseArgs2(DeployGetArgsSchema, frame, "deploy:get");
+    const key = JSON.stringify(args);
+    const hit = getInFlight.get(key);
+    if (hit) return hit;
+    const { log, measure, started } = startTrace(args.personaId, "deploy.get");
+    log("started", { historical: args.releaseHead !== void 0 || args.releaseId !== void 0, ...args.environment ? { environment: args.environment } : {} });
     const promise = measure("total", () => enqueue(args.personaId, async () => {
       const durationMs = Math.round((import_node_perf_hooks.performance.now() - started) * 100) / 100;
-      log("deploy.get.stage", { stage: "queue", status: "ok", durationMs, elapsedMs: durationMs });
+      log("stage", { stage: "queue", status: "ok", durationMs, elapsedMs: durationMs });
       const { personaId: personaId2, ...selection } = args;
       mustPersona(personaId2);
       return view(personaId2, selection, measure);
@@ -64199,8 +64255,30 @@ function buildDeployHandlers(deps) {
     });
     return promise;
   };
+  const localInFlight = /* @__PURE__ */ new Map();
+  const coalescedLocalGet = async (frame, _client, ctx) => {
+    ensureOwner(ctx);
+    const { personaId: personaId2 } = parseArgs2(DeployPersonaArgsSchema, frame, "deploy:getLocal");
+    const hit = localInFlight.get(personaId2);
+    if (hit) return hit;
+    const { log, measure, started } = startTrace(personaId2, "deploy.getLocal");
+    log("started", {});
+    const promise = measure("total", () => enqueue(personaId2, async () => {
+      const durationMs = Math.round((import_node_perf_hooks.performance.now() - started) * 100) / 100;
+      log("stage", { stage: "queue", status: "ok", durationMs, elapsedMs: durationMs });
+      mustPersona(personaId2);
+      return localView(personaId2, measure);
+    }));
+    localInFlight.set(personaId2, promise);
+    void promise.finally(() => {
+      if (localInFlight.get(personaId2) === promise) localInFlight.delete(personaId2);
+    }).catch(() => {
+    });
+    return promise;
+  };
   return {
     "deploy:get": coalescedGet,
+    "deploy:getLocal": coalescedLocalGet,
     "deploy:confirmTest": serial(confirmTest),
     "deploy:promote": serial(promote),
     "deploy:openTest": serial(openTest),
@@ -74508,6 +74586,7 @@ var METHOD_GRANT_MAP = {
   "visitor:list": ADMIN_ANY,
   // Deployment handlers use owner credentials and can publish resources; exclude guests.
   "deploy:get": ADMIN_ANY,
+  "deploy:getLocal": ADMIN_ANY,
   "deploy:scan": ADMIN_ANY,
   "deploy:patch": ADMIN_ANY,
   "deploy:putSecret": ADMIN_ANY,
@@ -74738,7 +74817,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.663".length > 0 ? "0.2.663" : "dev";
+var version = "0.2.665".length > 0 ? "0.2.665" : "dev";
 
 // src/cli-probe/probe.ts
 var fs86 = __toESM(require("fs"), 1);