@clawos-dev/clawd 0.2.666 → 0.2.668

package/dist/app-builder-plugin/mcp-server.cjs

@@ -31386,6 +31386,14 @@ var VerificationSchema = external_exports.object({
   verifiedAt: external_exports.string().refine((s) => Number.isFinite(Date.parse(s))),
   test: PublisherTestReceiptSchema.optional()
 }).strict();
+var DeployConfigSchema = external_exports.object({
+  engine: external_exports.string().min(1),
+  model: external_exports.string(),
+  effort: external_exports.string(),
+  size: external_exports.string().min(1),
+  cpu: external_exports.number().positive(),
+  taskConcurrency: external_exports.number().int().positive()
+}).strict();
 var VerifiedPersonaReleaseSchema = external_exports.object({
   version: external_exports.literal(1),
   environment: external_exports.literal("integration"),
@@ -31395,6 +31403,7 @@ var VerifiedPersonaReleaseSchema = external_exports.object({
   baseImage: ImageDigestSchema,
   pipelineCommit: SourceCommitSchema,
   repository: external_exports.string().regex(/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/),
+  config: DeployConfigSchema.optional(),
   verification: VerificationSchema.refine((v) => v.checks.includes("persona-smoke")),
   test: PublisherTestSchema.optional()
 }).strict().refine((record2) => {
@@ -31411,6 +31420,160 @@ var VerifiedBaseReleaseSchema = external_exports.object({
   verification: VerificationSchema.refine((v) => v.checks.includes("base-smoke"))
 }).strict();
 
+// ../protocol/src/tool-family.ts
+var CLOUD_TOOL_SUFFIX = "-cloud";
+var CODEX_CLOUD_TOOL_ID = `codex${CLOUD_TOOL_SUFFIX}`;
+var CODEX_SERVICE_TIERS = { standard: "default", fast: "priority" };
+var CLAUDE_CLOUD_TOOL_ID = `claude${CLOUD_TOOL_SUFFIX}`;
+var PI_TOOL_ID = "pi";
+var PI_CLOUD_TOOL_ID = `${PI_TOOL_ID}${CLOUD_TOOL_SUFFIX}`;
+
+// ../protocol/src/persona-schemas.ts
+var CodexServiceTierSchema = external_exports.enum([CODEX_SERVICE_TIERS.standard, CODEX_SERVICE_TIERS.fast]);
+var PERSONA_SIZES = ["tiny", "small", "medium", "large", "xlarge"];
+var PersonaSizeSchema = external_exports.enum(PERSONA_SIZES);
+var PERSONA_CPUS = [0.5, 1, 2];
+var PersonaCpuSchema = external_exports.number().refine((cpu) => PERSONA_CPUS.includes(cpu), "Unsupported CPU");
+var PersonaCloudEngineSchema = external_exports.object({
+  model: external_exports.string().optional(),
+  effort: external_exports.string().optional()
+}).strict();
+var PersonaFileSchema = external_exports.object({
+  personaId: external_exports.string(),
+  label: external_exports.string(),
+  model: external_exports.string().optional(),
+  // 与 model 平行的第二个 session 默认值：reasoning effort。值域跟着 tool 走
+  // （claude 是 '' | low | medium | high | xhigh | max，codex 是 per-model 档位），
+  // 协议层保持 string，由消费侧按 capabilities 收窄。
+  effort: external_exports.string().optional(),
+  serviceTier: CodexServiceTierSchema.optional(),
+  public: external_exports.boolean(),
+  // 8-key set defined UI-side in `lib/session-icons.ts`; protocol stays plain string
+  // for forward compatibility, consumer fallbacks to default when key not found.
+  iconKey: external_exports.string().optional(),
+  // Default engine binding for new sessions; missing values are consumed as claude.
+  tool: external_exports.string().optional(),
+  /** Cloud resource size is string-compatible in stored files and narrowed at update/deploy boundaries; local execution ignores it. */
+  size: external_exports.string().optional(),
+  cpu: external_exports.number().finite().optional(),
+  /** Cloud task-Pod concurrency, validated at release. Local execution ignores it; changes apply on the next publication. */
+  taskConcurrency: external_exports.number().int().positive().optional(),
+  cloudEngine: PersonaCloudEngineSchema.optional(),
+  createdAt: external_exports.number(),
+  updatedAt: external_exports.number(),
+  /** Registry-only cloud entry, with no local persona directory. Local key adds -cloud; gateway paths use cloud.personaId and the registered engine determines the cloud tool id. */
+  cloud: external_exports.object({
+    gatewayUrl: external_exports.string().min(1),
+    personaId: external_exports.string().min(1),
+    publishedByMe: external_exports.boolean().optional(),
+    environment: DeployEnvironmentSchema.optional(),
+    expectedImage: ImageDigestSchema.optional(),
+    testReleaseId: external_exports.string().optional()
+  }).strict().optional()
+}).strict();
+var PersonaSkillSummarySchema = external_exports.object({
+  // 目录名作为 skill name（对齐 CC：frontmatter `name:` 仅作 displayName 用）
+  name: external_exports.string().min(1),
+  description: external_exports.string().optional()
+});
+var PersonaPluginSummarySchema = external_exports.object({
+  id: external_exports.string().min(1)
+});
+var CodexSandboxSettingsSchema = external_exports.object({
+  // 额外可写的绝对路径或 ~ 路径（pnpm 工具链等）；workspace(cwd) 和 userWorkDir 由 daemon 自动加，不用列。
+  writableRoots: external_exports.array(external_exports.string()).optional(),
+  // 禁读 glob（相对 workspace root 或绝对），如 ".secrets/**"、"**/*.env"。
+  denyRead: external_exports.array(external_exports.string()).optional(),
+  // true → 网络全放(*)；false / 缺省 → 断网（fail-closed）。**「新建默认联网」不靠这里的缺省**，
+  // 靠 persona 创建时就把 CODEX_SANDBOX_DEFAULT 物化进文件（见 PersonaManager.create）——
+  // 缺省只在文件损坏这种异常路径上出现，那时断网是更安全的一侧。
+  network: external_exports.boolean().optional()
+}).strict();
+var PersonaSandboxSettingsSchema = external_exports.object({
+  permissions: external_exports.object({
+    defaultMode: external_exports.string().optional(),
+    allow: external_exports.array(external_exports.string()).optional(),
+    // deny 优先级最高；强制底座（persona 私密区）由 daemon compose 强制 union，owner 删不掉。
+    deny: external_exports.array(external_exports.string()).optional()
+  }).optional(),
+  sandbox: external_exports.object({
+    enabled: external_exports.boolean().optional(),
+    autoAllowBashIfSandboxed: external_exports.boolean().optional(),
+    allowUnsandboxedCommands: external_exports.boolean().optional(),
+    // 命令前缀白名单（CC `sandbox.excludedCommands`）：匹配的命令在沙箱外运行，
+    // 用于需逃出沙箱的工具（如 'docker *' / 'aliyun *' 要访问宿主 socket / 凭证）。
+    excludedCommands: external_exports.array(external_exports.string()).optional(),
+    filesystem: external_exports.object({
+      denyRead: external_exports.array(external_exports.string()).optional(),
+      allowRead: external_exports.array(external_exports.string()).optional(),
+      denyWrite: external_exports.array(external_exports.string()).optional(),
+      allowWrite: external_exports.array(external_exports.string()).optional()
+    }).optional(),
+    network: external_exports.object({
+      allowedDomains: external_exports.array(external_exports.string()).optional(),
+      allowLocalBinding: external_exports.boolean().optional()
+    }).optional()
+  }).optional()
+});
+var PersonaInfoResponseSchema = PersonaFileSchema.extend({
+  // 人格 builtin 层：`<personaDir>/CLAUDE.md`（= AGENTS.md 镜像）。预装 persona 的这份是
+  // daemon ship 的产品规格，每次 daemon 启动被覆盖回 bundle 版（personalityManaged 标记它）。
+  personality: external_exports.string().optional(),
+  // Owner-managed personality overlay survives daemon resource refreshes and is injected for owner and guest sessions. Empty text clears it.
+  personalityLocal: external_exports.string().optional(),
+  // Managed builtin personality is refreshed by daemon and shown read-only; user edits belong to the overlay. User-created persona files remain editable.
+  personalityManaged: external_exports.boolean().optional(),
+  // 仅 'persona:get' 携带；null = 文件不存在 / parse 失败；undefined = 不在该响应类型上
+  skills: external_exports.array(PersonaSkillSummarySchema).optional(),
+  // 仅 'persona:get' 携带；空数组 = 没启用任何插件 / settings.json 不存在；undefined = 不在该响应类型上
+  plugins: external_exports.array(PersonaPluginSummarySchema).optional(),
+  sandboxSettings: PersonaSandboxSettingsSchema.nullable().optional(),
+  // 仅 'persona:get' 携带；null = codex-sandbox.json 不存在 / parse 失败。
+  // UI 的「访客联网」开关读它（见 PersonaCardSettings）。
+  codexSandbox: CodexSandboxSettingsSchema.nullable().optional()
+});
+var PersonaCreateArgsSchema = external_exports.object({
+  // Caller provides a safe slug, daemon adds persona-. Keep identity separate from the freely editable display label.
+  slug: external_exports.string().regex(/^[a-z0-9]+(-[a-z0-9]+)*$/).max(32),
+  label: external_exports.string().min(1),
+  personality: external_exports.string(),
+  model: external_exports.string().optional(),
+  effort: external_exports.string().optional(),
+  serviceTier: PersonaFileSchema.shape.serviceTier,
+  tool: external_exports.string().optional(),
+  public: external_exports.boolean().optional(),
+  iconKey: external_exports.string().optional()
+}).strict();
+var PersonaIdArgsSchema = external_exports.object({
+  personaId: external_exports.string().min(1)
+});
+var PersonaUpdateArgsSchema = external_exports.object({
+  personaId: external_exports.string().min(1),
+  patch: external_exports.object({
+    label: external_exports.string().min(1).optional(),
+    model: external_exports.string().optional(),
+    effort: external_exports.string().optional(),
+    serviceTier: PersonaFileSchema.shape.serviceTier,
+    tool: external_exports.string().optional(),
+    size: PersonaSizeSchema.optional(),
+    cpu: PersonaCpuSchema.optional(),
+    taskConcurrency: PersonaFileSchema.shape.taskConcurrency,
+    // 整体替换（上云页每次交完整的 { model, effort }）；切 tool 不清它
+    cloudEngine: PersonaCloudEngineSchema.optional(),
+    personality: external_exports.string().optional(),
+    // 人格补充层正文（见 PersonaInfoResponseSchema.personalityLocal）。与 personality 各写
+    // 各层、互不影响；'' = 清空补充层。预装 persona 的编辑入口写的就是这个字段。
+    personalityLocal: external_exports.string().optional(),
+    public: external_exports.boolean().optional(),
+    // pass `null` to clear; daemon strips the field from PersonaFile on null
+    iconKey: external_exports.string().nullable().optional(),
+    // codex guest 沙箱（落盘 .clawd/codex-sandbox.json，不在 PersonaFile 里）。与 personality
+    // 同款分层写：handler 剥出来单独落盘，且**局部合并**——只带 network 的 patch 不能抹掉
+    // owner 手配的 writableRoots / denyRead。
+    codexSandbox: CodexSandboxSettingsSchema.optional()
+  }).strict()
+}).strict();
+
 // ../protocol/src/deploy-schemas.ts
 var DeployFileSchema = external_exports.object({
   version: external_exports.literal(1),
@@ -31452,6 +31615,12 @@ var DeployReleasedSchema = external_exports.object({
   runAttempt: external_exports.number().int().positive().optional(),
   artifactId: external_exports.number().int().positive().optional(),
   verified: VerifiedPersonaReleaseSchema.optional(),
+  /** 这一轮测试用的配置（design 2026-10-14-deploy-config-decouple §3.1）；老记录没有，按「发布时 commit 里的 persona.json」算 */
+  config: DeployConfigSchema.optional(),
+  /** 「应用配置」产生的记录：复用的是哪条测试发布的镜像（它的 id）。首次构建的记录没有 */
+  reconfigOf: external_exports.string().min(1).optional(),
+  /** 发布时写进仓库的 workflow 模板版本；缺 = 老模板（不认 config_json 输入，要先完整重发一次） */
+  workflowVersion: external_exports.number().int().positive().optional(),
   confirmation: external_exports.object({
     fingerprint: external_exports.string().regex(/^[a-f0-9]{64}$/),
     runId: external_exports.number().int().positive(),
@@ -31621,6 +31790,7 @@ var DeployReleaseArgsSchema = DeployPersonaArgsSchema.extend({
 }).strict();
 var DeployConfirmTestArgsSchema = DeployPersonaArgsSchema.extend({ releaseId: external_exports.string().min(1) }).strict();
 var DeployPromoteArgsSchema = DeployConfirmTestArgsSchema;
+var DeployApplyConfigArgsSchema = DeployConfirmTestArgsSchema;
 var DeployOpenTestArgsSchema = DeployConfirmTestArgsSchema;
 var DeployEnvironmentArgsSchema = DeployPersonaArgsSchema.extend({ environment: DeployEnvironmentSchema.default("production") }).strict();
 var DeployConfirmTestResultSchema = external_exports.object({ confirmation: DeployReleasedSchema.shape.confirmation.unwrap() }).strict();
@@ -32670,160 +32840,6 @@ var DashboardOpenUrlResultSchema = external_exports.object({
   expiresAt: external_exports.number().int()
 }).strict();
 
-// ../protocol/src/tool-family.ts
-var CLOUD_TOOL_SUFFIX = "-cloud";
-var CODEX_CLOUD_TOOL_ID = `codex${CLOUD_TOOL_SUFFIX}`;
-var CODEX_SERVICE_TIERS = { standard: "default", fast: "priority" };
-var CLAUDE_CLOUD_TOOL_ID = `claude${CLOUD_TOOL_SUFFIX}`;
-var PI_TOOL_ID = "pi";
-var PI_CLOUD_TOOL_ID = `${PI_TOOL_ID}${CLOUD_TOOL_SUFFIX}`;
-
-// ../protocol/src/persona-schemas.ts
-var CodexServiceTierSchema = external_exports.enum([CODEX_SERVICE_TIERS.standard, CODEX_SERVICE_TIERS.fast]);
-var PERSONA_SIZES = ["tiny", "small", "medium", "large", "xlarge"];
-var PersonaSizeSchema = external_exports.enum(PERSONA_SIZES);
-var PERSONA_CPUS = [0.5, 1, 2];
-var PersonaCpuSchema = external_exports.number().refine((cpu) => PERSONA_CPUS.includes(cpu), "Unsupported CPU");
-var PersonaCloudEngineSchema = external_exports.object({
-  model: external_exports.string().optional(),
-  effort: external_exports.string().optional()
-}).strict();
-var PersonaFileSchema = external_exports.object({
-  personaId: external_exports.string(),
-  label: external_exports.string(),
-  model: external_exports.string().optional(),
-  // 与 model 平行的第二个 session 默认值：reasoning effort。值域跟着 tool 走
-  // （claude 是 '' | low | medium | high | xhigh | max，codex 是 per-model 档位），
-  // 协议层保持 string，由消费侧按 capabilities 收窄。
-  effort: external_exports.string().optional(),
-  serviceTier: CodexServiceTierSchema.optional(),
-  public: external_exports.boolean(),
-  // 8-key set defined UI-side in `lib/session-icons.ts`; protocol stays plain string
-  // for forward compatibility, consumer fallbacks to default when key not found.
-  iconKey: external_exports.string().optional(),
-  // Default engine binding for new sessions; missing values are consumed as claude.
-  tool: external_exports.string().optional(),
-  /** Cloud resource size is string-compatible in stored files and narrowed at update/deploy boundaries; local execution ignores it. */
-  size: external_exports.string().optional(),
-  cpu: external_exports.number().finite().optional(),
-  /** Cloud task-Pod concurrency, validated at release. Local execution ignores it; changes apply on the next publication. */
-  taskConcurrency: external_exports.number().int().positive().optional(),
-  cloudEngine: PersonaCloudEngineSchema.optional(),
-  createdAt: external_exports.number(),
-  updatedAt: external_exports.number(),
-  /** Registry-only cloud entry, with no local persona directory. Local key adds -cloud; gateway paths use cloud.personaId and the registered engine determines the cloud tool id. */
-  cloud: external_exports.object({
-    gatewayUrl: external_exports.string().min(1),
-    personaId: external_exports.string().min(1),
-    publishedByMe: external_exports.boolean().optional(),
-    environment: DeployEnvironmentSchema.optional(),
-    expectedImage: ImageDigestSchema.optional(),
-    testReleaseId: external_exports.string().optional()
-  }).strict().optional()
-}).strict();
-var PersonaSkillSummarySchema = external_exports.object({
-  // 目录名作为 skill name（对齐 CC：frontmatter `name:` 仅作 displayName 用）
-  name: external_exports.string().min(1),
-  description: external_exports.string().optional()
-});
-var PersonaPluginSummarySchema = external_exports.object({
-  id: external_exports.string().min(1)
-});
-var CodexSandboxSettingsSchema = external_exports.object({
-  // 额外可写的绝对路径或 ~ 路径（pnpm 工具链等）；workspace(cwd) 和 userWorkDir 由 daemon 自动加，不用列。
-  writableRoots: external_exports.array(external_exports.string()).optional(),
-  // 禁读 glob（相对 workspace root 或绝对），如 ".secrets/**"、"**/*.env"。
-  denyRead: external_exports.array(external_exports.string()).optional(),
-  // true → 网络全放(*)；false / 缺省 → 断网（fail-closed）。**「新建默认联网」不靠这里的缺省**，
-  // 靠 persona 创建时就把 CODEX_SANDBOX_DEFAULT 物化进文件（见 PersonaManager.create）——
-  // 缺省只在文件损坏这种异常路径上出现，那时断网是更安全的一侧。
-  network: external_exports.boolean().optional()
-}).strict();
-var PersonaSandboxSettingsSchema = external_exports.object({
-  permissions: external_exports.object({
-    defaultMode: external_exports.string().optional(),
-    allow: external_exports.array(external_exports.string()).optional(),
-    // deny 优先级最高；强制底座（persona 私密区）由 daemon compose 强制 union，owner 删不掉。
-    deny: external_exports.array(external_exports.string()).optional()
-  }).optional(),
-  sandbox: external_exports.object({
-    enabled: external_exports.boolean().optional(),
-    autoAllowBashIfSandboxed: external_exports.boolean().optional(),
-    allowUnsandboxedCommands: external_exports.boolean().optional(),
-    // 命令前缀白名单（CC `sandbox.excludedCommands`）：匹配的命令在沙箱外运行，
-    // 用于需逃出沙箱的工具（如 'docker *' / 'aliyun *' 要访问宿主 socket / 凭证）。
-    excludedCommands: external_exports.array(external_exports.string()).optional(),
-    filesystem: external_exports.object({
-      denyRead: external_exports.array(external_exports.string()).optional(),
-      allowRead: external_exports.array(external_exports.string()).optional(),
-      denyWrite: external_exports.array(external_exports.string()).optional(),
-      allowWrite: external_exports.array(external_exports.string()).optional()
-    }).optional(),
-    network: external_exports.object({
-      allowedDomains: external_exports.array(external_exports.string()).optional(),
-      allowLocalBinding: external_exports.boolean().optional()
-    }).optional()
-  }).optional()
-});
-var PersonaInfoResponseSchema = PersonaFileSchema.extend({
-  // 人格 builtin 层：`<personaDir>/CLAUDE.md`（= AGENTS.md 镜像）。预装 persona 的这份是
-  // daemon ship 的产品规格，每次 daemon 启动被覆盖回 bundle 版（personalityManaged 标记它）。
-  personality: external_exports.string().optional(),
-  // Owner-managed personality overlay survives daemon resource refreshes and is injected for owner and guest sessions. Empty text clears it.
-  personalityLocal: external_exports.string().optional(),
-  // Managed builtin personality is refreshed by daemon and shown read-only; user edits belong to the overlay. User-created persona files remain editable.
-  personalityManaged: external_exports.boolean().optional(),
-  // 仅 'persona:get' 携带；null = 文件不存在 / parse 失败；undefined = 不在该响应类型上
-  skills: external_exports.array(PersonaSkillSummarySchema).optional(),
-  // 仅 'persona:get' 携带；空数组 = 没启用任何插件 / settings.json 不存在；undefined = 不在该响应类型上
-  plugins: external_exports.array(PersonaPluginSummarySchema).optional(),
-  sandboxSettings: PersonaSandboxSettingsSchema.nullable().optional(),
-  // 仅 'persona:get' 携带；null = codex-sandbox.json 不存在 / parse 失败。
-  // UI 的「访客联网」开关读它（见 PersonaCardSettings）。
-  codexSandbox: CodexSandboxSettingsSchema.nullable().optional()
-});
-var PersonaCreateArgsSchema = external_exports.object({
-  // Caller provides a safe slug, daemon adds persona-. Keep identity separate from the freely editable display label.
-  slug: external_exports.string().regex(/^[a-z0-9]+(-[a-z0-9]+)*$/).max(32),
-  label: external_exports.string().min(1),
-  personality: external_exports.string(),
-  model: external_exports.string().optional(),
-  effort: external_exports.string().optional(),
-  serviceTier: PersonaFileSchema.shape.serviceTier,
-  tool: external_exports.string().optional(),
-  public: external_exports.boolean().optional(),
-  iconKey: external_exports.string().optional()
-}).strict();
-var PersonaIdArgsSchema = external_exports.object({
-  personaId: external_exports.string().min(1)
-});
-var PersonaUpdateArgsSchema = external_exports.object({
-  personaId: external_exports.string().min(1),
-  patch: external_exports.object({
-    label: external_exports.string().min(1).optional(),
-    model: external_exports.string().optional(),
-    effort: external_exports.string().optional(),
-    serviceTier: PersonaFileSchema.shape.serviceTier,
-    tool: external_exports.string().optional(),
-    size: PersonaSizeSchema.optional(),
-    cpu: PersonaCpuSchema.optional(),
-    taskConcurrency: PersonaFileSchema.shape.taskConcurrency,
-    // 整体替换（上云页每次交完整的 { model, effort }）；切 tool 不清它
-    cloudEngine: PersonaCloudEngineSchema.optional(),
-    personality: external_exports.string().optional(),
-    // 人格补充层正文（见 PersonaInfoResponseSchema.personalityLocal）。与 personality 各写
-    // 各层、互不影响；'' = 清空补充层。预装 persona 的编辑入口写的就是这个字段。
-    personalityLocal: external_exports.string().optional(),
-    public: external_exports.boolean().optional(),
-    // pass `null` to clear; daemon strips the field from PersonaFile on null
-    iconKey: external_exports.string().nullable().optional(),
-    // codex guest 沙箱（落盘 .clawd/codex-sandbox.json，不在 PersonaFile 里）。与 personality
-    // 同款分层写：handler 剥出来单独落盘，且**局部合并**——只带 network 的 patch 不能抹掉
-    // owner 手配的 writableRoots / denyRead。
-    codexSandbox: CodexSandboxSettingsSchema.optional()
-  }).strict()
-}).strict();
-
 // ../protocol/src/events.ts
 var SESSION_STATUS_VALUES = [
   "idle",
@@ -33882,6 +33898,10 @@ var METHOD_DOCS = {
     summary: "\u786E\u8BA4\u6240\u9009\u6D4B\u8BD5\u7248\u901A\u8FC7\u5B9E\u9645\u8BD5\u7528\uFF1B\u6309\u5DF2\u4FDD\u5B58\u5236\u54C1\u548C\u6D4B\u8BD5\u767B\u8BB0\u6821\u9A8C\uFF0Cowner-only\u3001human-only",
     args: DeployConfirmTestArgsSchema
   },
+  "deploy:applyConfig": {
+    summary: "\u628A releaseId \u90A3\u6761\u6D4B\u8BD5\u53D1\u5E03\u7684**\u955C\u50CF**\u6362\u4E0A persona \u5F53\u524D\u7684\u5F15\u64CE / \u6A21\u578B / \u8D44\u6E90\u914D\u7F6E\uFF0C\u5728\u6D4B\u8BD5\u73AF\u5883\u91CD\u6D4B\u4E00\u904D\uFF1A\u4E0D\u626B\u63CF\u3001\u4E0D\u6784\u5EFA\uFF0C\u6D41\u6C34\u7EBF\u8D70 smoke \u2192 \u767B\u8BB0 \u2192 \u9A8C\u8BC1\u3002\u524D\u7F6E\uFF1A\u90A3\u6761\u53D1\u5E03\u5DF2\u63A8\u9001\u5E76\u901A\u8FC7\u9A8C\u8BC1\uFF0C\u4E14\u4ED3\u5E93\u91CC\u7684 workflow \u6A21\u677F\u591F\u65B0\uFF08\u7F3A config_json \u8F93\u5165\u7684\u8981\u5148\u300C\u53D1\u5E03\u5230\u6D4B\u8BD5\u300D\u5B8C\u6574\u91CD\u53D1\u4E00\u6B21\uFF09\uFF1B\u8FC7\u4E0E\u53D1\u5E03\u540C\u4E00\u5957\u95F8\uFF08\u9009\u4E86\u6A21\u578B\u3001\u8BA2\u9605\u51ED\u636E\u6210\u5BF9\u7B49\uFF09\u3002\u56DE\u65B0\u6D4B\u8BD5\u53D1\u5E03\u7684 commit \u4E0E Actions \u5730\u5740\uFF1B\u4E4B\u540E\u8D70\u5E38\u89C4\u7684\u6D4B\u8BD5\u786E\u8BA4 / \u664B\u7EA7\uFF1Bowner-only\u3001human-only",
+    args: DeployApplyConfigArgsSchema
+  },
   "deploy:promote": {
     summary: "\u5C06\u5DF2\u786E\u8BA4\u6D4B\u8BD5\u7248\u7684\u63D0\u4EA4\u63A8\u8FDB main \u5E76\u4E0A\u7EBF\u76F8\u540C\u955C\u50CF\uFF1B\u6062\u590D\u4E2D\u65AD\u7684\u540C\u4E00\u6B21\u664B\u7EA7\uFF0Cowner-only\u3001human-only",
     args: DeployPromoteArgsSchema
@@ -34536,6 +34556,7 @@ function renderDeployWorkflow(config2) {
     "      - name: Select pinned source identities",
     "        env:",
     "          RELEASE_JSON: ${{ inputs.release_json }}",
+    "          CONFIG_JSON: ${{ inputs.config_json }}",
     "        run: |",
     "          node --input-type=module <<'NODE'",
     '          import fs from "node:fs"',
@@ -34543,7 +34564,9 @@ function renderDeployWorkflow(config2) {
     '          const r = fs.existsSync(file) ? JSON.parse(fs.readFileSync(file, "utf8")) : process.env.RELEASE_JSON ? JSON.parse(process.env.RELEASE_JSON) : undefined',
     '          if (r && (!/^[a-f0-9]{40}$/.test(r.commit) || !/^[a-f0-9]{40}$/.test(r.pipelineCommit) || r.repository !== process.env.GITHUB_REPOSITORY)) throw new Error("invalid Persona release identity")',
     '          if (process.env.DEPLOY_ENVIRONMENT === "production" && (!r || process.env.GITHUB_REF_NAME !== "main" || process.env.GITHUB_SHA !== r.commit)) throw new Error("production main must equal tested commit")',
-    '          fs.appendFileSync(process.env.GITHUB_ENV, "SOURCE_COMMIT=" + (r?.commit ?? process.env.GITHUB_SHA) + "\\nPIPELINE_COMMIT=" + (r?.pipelineCommit ?? process.env.CLAWOS_REF) + "\\n")',
+    "          // \u5E94\u7528\u914D\u7F6E\uFF08integration + config_json + release_json\uFF0C\u4E14\u8FD8\u6CA1\u6709\u5019\u9009\u6587\u4EF6\uFF09\u8981\u6362\u4E0A\u5F53\u524D\u6D41\u6C34\u7EBF\uFF1A\u8BB0\u5F55\u91CC\u9489\u7684\u65E7\u811A\u672C\u4E0D\u8BA4\u8BC6 config_json",
+    '          const reconfigure = process.env.DEPLOY_ENVIRONMENT === "integration" && process.env.CONFIG_JSON && !fs.existsSync(file)',
+    '          fs.appendFileSync(process.env.GITHUB_ENV, "SOURCE_COMMIT=" + (r?.commit ?? process.env.GITHUB_SHA) + "\\nPIPELINE_COMMIT=" + (reconfigure ? process.env.CLAWOS_REF : r?.pipelineCommit ?? process.env.CLAWOS_REF) + "\\n")',
     "          NODE",
     ""
   ];
@@ -34570,6 +34593,8 @@ function renderDeployWorkflow(config2) {
     "",
     "      - name: \u8BFB\u90E8\u7F72\u6587\u4EF6",
     "        id: plan",
+    "        env:",
+    "          CLAWD_CONFIG_JSON: ${{ inputs.config_json }}",
     "        run: |",
     "          node clawos/cloud-host/pipeline/deploy-file.mjs \\",
     "            --persona-dir persona \\",
@@ -34634,6 +34659,7 @@ function renderDeployWorkflow(config2) {
     "            --effort '${{ steps.plan.outputs.effort }}' \\",
     "            --size '${{ steps.plan.outputs.size }}' \\",
     "            --cpu '${{ steps.plan.outputs.cpu }}' \\",
+    "            --config-source '${{ steps.plan.outputs.config_source }}' \\",
     "            --task-concurrency '${{ steps.plan.outputs.task_concurrency }}' \\",
     "            --engine '${{ steps.plan.outputs.engine }}' \\",
     "            --connectors '${{ steps.plan.outputs.connectors }}' \\",
@@ -34649,7 +34675,7 @@ function renderDeployWorkflow(config2) {
   ];
   return [
     "name: clawd deploy",
-    "run-name: ${{ inputs.environment == 'production' && format('persona-production-{0}', inputs.promotion_id) || 'persona-integration' }}",
+    "run-name: ${{ inputs.environment == 'production' && format('persona-production-{0}', inputs.promotion_id) || inputs.config_id && format('persona-integration-config-{0}', inputs.config_id) || 'persona-integration' }}",
     "# \u7531 clawd \u751F\u6210\u3001\u7531 clawd \u7EF4\u62A4\u3002push \u6784\u5EFA int \u5019\u9009\uFF1Bproduction \u624B\u52A8\u664B\u7EA7\u5DF2\u9A8C\u6536\u5236\u54C1\u3002",
     "on:",
     "  push:",
@@ -34664,7 +34690,15 @@ function renderDeployWorkflow(config2) {
     "        type: string",
     "        required: false",
     "      release_json:",
-    "        description: Verified Persona release JSON for production promotion",
+    "        description: Verified Persona release JSON for production promotion or config re-test",
+    "        type: string",
+    "        required: false",
+    "      config_json:",
+    "        description: Engine/model/resource config (canonical JSON); replaces .clawd/persona.json for this run",
+    "        type: string",
+    "        required: false",
+    "      config_id:",
+    "        description: Identifies an integration config re-test run (run-name)",
     "        type: string",
     "        required: false",
     "",
@@ -34717,6 +34751,7 @@ function renderDeployWorkflow(config2) {
     "          ALIBABA_CLOUD_ACCESS_KEY_ID: ${{ secrets.ALI_ACS_ACCESS_KEY_ID }}",
     "          ALIBABA_CLOUD_ACCESS_KEY_SECRET: ${{ secrets.ALI_ACS_ACCESS_KEY_SECRET }}",
     "          RELEASE_JSON: ${{ inputs.release_json }}",
+    "          CLAWD_CONFIG_JSON: ${{ steps.plan.outputs.config_json }}",
     "          CLAWD_PUBLISHER_TEST: ${{ steps.plan.outputs.test }}",
     "        run: node clawos/cloud-host/pipeline/persona-candidate.mjs",
     "",