@clawos-dev/clawd 0.2.666 → 0.2.668

package/dist/cli.cjs

@@ -6209,7 +6209,7 @@ var init_environment_schemas = __esm({
 });
 
 // ../protocol/src/release-schemas.ts
-var DEPLOY_ENVIRONMENTS, DeployEnvironmentSchema, ImageDigestSchema, SourceCommitSchema, IntegrationEndpointSchema, PublisherTestReceiptSchema, VerificationSchema, VerifiedPersonaReleaseSchema, VerifiedBaseReleaseSchema;
+var DEPLOY_ENVIRONMENTS, DeployEnvironmentSchema, ImageDigestSchema, SourceCommitSchema, IntegrationEndpointSchema, PublisherTestReceiptSchema, VerificationSchema, DeployConfigSchema, VerifiedPersonaReleaseSchema, VerifiedBaseReleaseSchema;
 var init_release_schemas = __esm({
   "../protocol/src/release-schemas.ts"() {
     "use strict";
@@ -6247,6 +6247,14 @@ var init_release_schemas = __esm({
       verifiedAt: external_exports.string().refine((s2) => Number.isFinite(Date.parse(s2))),
       test: PublisherTestReceiptSchema.optional()
     }).strict();
+    DeployConfigSchema = external_exports.object({
+      engine: external_exports.string().min(1),
+      model: external_exports.string(),
+      effort: external_exports.string(),
+      size: external_exports.string().min(1),
+      cpu: external_exports.number().positive(),
+      taskConcurrency: external_exports.number().int().positive()
+    }).strict();
     VerifiedPersonaReleaseSchema = external_exports.object({
       version: external_exports.literal(1),
       environment: external_exports.literal("integration"),
@@ -6256,6 +6264,7 @@ var init_release_schemas = __esm({
       baseImage: ImageDigestSchema,
       pipelineCommit: SourceCommitSchema,
       repository: external_exports.string().regex(/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/),
+      config: DeployConfigSchema.optional(),
       verification: VerificationSchema.refine((v3) => v3.checks.includes("persona-smoke")),
       test: PublisherTestSchema.optional()
     }).strict().refine((record4) => {
@@ -6274,6 +6283,189 @@ var init_release_schemas = __esm({
   }
 });
 
+// ../protocol/src/tool-family.ts
+function isCodexFamily(tool) {
+  return tool === "codex" || tool === CODEX_CLOUD_TOOL_ID;
+}
+function isPiFamily(tool) {
+  return tool === PI_TOOL_ID || tool === PI_CLOUD_TOOL_ID;
+}
+function isCloudTool(tool) {
+  return typeof tool === "string" && tool.length > CLOUD_TOOL_SUFFIX.length && tool.endsWith(CLOUD_TOOL_SUFFIX);
+}
+function isRpcAgentTool(tool) {
+  return isCodexFamily(tool) || isPiFamily(tool);
+}
+var CLOUD_TOOL_SUFFIX, CODEX_CLOUD_TOOL_ID, CODEX_SERVICE_TIERS, CLAUDE_CLOUD_TOOL_ID, PI_TOOL_ID, PI_CLOUD_TOOL_ID;
+var init_tool_family = __esm({
+  "../protocol/src/tool-family.ts"() {
+    "use strict";
+    CLOUD_TOOL_SUFFIX = "-cloud";
+    CODEX_CLOUD_TOOL_ID = `codex${CLOUD_TOOL_SUFFIX}`;
+    CODEX_SERVICE_TIERS = { standard: "default", fast: "priority" };
+    CLAUDE_CLOUD_TOOL_ID = `claude${CLOUD_TOOL_SUFFIX}`;
+    PI_TOOL_ID = "pi";
+    PI_CLOUD_TOOL_ID = `${PI_TOOL_ID}${CLOUD_TOOL_SUFFIX}`;
+  }
+});
+
+// ../protocol/src/persona-schemas.ts
+var CodexServiceTierSchema, PERSONA_SIZES, PersonaSizeSchema, DEFAULT_PERSONA_SIZE, PERSONA_CPUS, PersonaCpuSchema, PERSONA_CPU_DEFAULTS, PersonaCloudEngineSchema, PersonaFileSchema, PersonaSkillSummarySchema, PersonaPluginSummarySchema, CodexSandboxSettingsSchema, PersonaSandboxSettingsSchema, PersonaInfoResponseSchema, PersonaCreateArgsSchema, PersonaIdArgsSchema, PersonaUpdateArgsSchema;
+var init_persona_schemas = __esm({
+  "../protocol/src/persona-schemas.ts"() {
+    "use strict";
+    init_zod();
+    init_release_schemas();
+    init_tool_family();
+    CodexServiceTierSchema = external_exports.enum([CODEX_SERVICE_TIERS.standard, CODEX_SERVICE_TIERS.fast]);
+    PERSONA_SIZES = ["tiny", "small", "medium", "large", "xlarge"];
+    PersonaSizeSchema = external_exports.enum(PERSONA_SIZES);
+    DEFAULT_PERSONA_SIZE = "medium";
+    PERSONA_CPUS = [0.5, 1, 2];
+    PersonaCpuSchema = external_exports.number().refine((cpu) => PERSONA_CPUS.includes(cpu), "Unsupported CPU");
+    PERSONA_CPU_DEFAULTS = { tiny: 0.5, small: 1, medium: 2, large: 2, xlarge: 2 };
+    PersonaCloudEngineSchema = external_exports.object({
+      model: external_exports.string().optional(),
+      effort: external_exports.string().optional()
+    }).strict();
+    PersonaFileSchema = external_exports.object({
+      personaId: external_exports.string(),
+      label: external_exports.string(),
+      model: external_exports.string().optional(),
+      // 与 model 平行的第二个 session 默认值：reasoning effort。值域跟着 tool 走
+      // （claude 是 '' | low | medium | high | xhigh | max，codex 是 per-model 档位），
+      // 协议层保持 string，由消费侧按 capabilities 收窄。
+      effort: external_exports.string().optional(),
+      serviceTier: CodexServiceTierSchema.optional(),
+      public: external_exports.boolean(),
+      // 8-key set defined UI-side in `lib/session-icons.ts`; protocol stays plain string
+      // for forward compatibility, consumer fallbacks to default when key not found.
+      iconKey: external_exports.string().optional(),
+      // Default engine binding for new sessions; missing values are consumed as claude.
+      tool: external_exports.string().optional(),
+      /** Cloud resource size is string-compatible in stored files and narrowed at update/deploy boundaries; local execution ignores it. */
+      size: external_exports.string().optional(),
+      cpu: external_exports.number().finite().optional(),
+      /** Cloud task-Pod concurrency, validated at release. Local execution ignores it; changes apply on the next publication. */
+      taskConcurrency: external_exports.number().int().positive().optional(),
+      cloudEngine: PersonaCloudEngineSchema.optional(),
+      createdAt: external_exports.number(),
+      updatedAt: external_exports.number(),
+      /** Registry-only cloud entry, with no local persona directory. Local key adds -cloud; gateway paths use cloud.personaId and the registered engine determines the cloud tool id. */
+      cloud: external_exports.object({
+        gatewayUrl: external_exports.string().min(1),
+        personaId: external_exports.string().min(1),
+        publishedByMe: external_exports.boolean().optional(),
+        environment: DeployEnvironmentSchema.optional(),
+        expectedImage: ImageDigestSchema.optional(),
+        testReleaseId: external_exports.string().optional()
+      }).strict().optional()
+    }).strict();
+    PersonaSkillSummarySchema = external_exports.object({
+      // 目录名作为 skill name（对齐 CC：frontmatter `name:` 仅作 displayName 用）
+      name: external_exports.string().min(1),
+      description: external_exports.string().optional()
+    });
+    PersonaPluginSummarySchema = external_exports.object({
+      id: external_exports.string().min(1)
+    });
+    CodexSandboxSettingsSchema = external_exports.object({
+      // 额外可写的绝对路径或 ~ 路径（pnpm 工具链等）；workspace(cwd) 和 userWorkDir 由 daemon 自动加，不用列。
+      writableRoots: external_exports.array(external_exports.string()).optional(),
+      // 禁读 glob（相对 workspace root 或绝对），如 ".secrets/**"、"**/*.env"。
+      denyRead: external_exports.array(external_exports.string()).optional(),
+      // true → 网络全放(*)；false / 缺省 → 断网（fail-closed）。**「新建默认联网」不靠这里的缺省**，
+      // 靠 persona 创建时就把 CODEX_SANDBOX_DEFAULT 物化进文件（见 PersonaManager.create）——
+      // 缺省只在文件损坏这种异常路径上出现，那时断网是更安全的一侧。
+      network: external_exports.boolean().optional()
+    }).strict();
+    PersonaSandboxSettingsSchema = external_exports.object({
+      permissions: external_exports.object({
+        defaultMode: external_exports.string().optional(),
+        allow: external_exports.array(external_exports.string()).optional(),
+        // deny 优先级最高；强制底座（persona 私密区）由 daemon compose 强制 union，owner 删不掉。
+        deny: external_exports.array(external_exports.string()).optional()
+      }).optional(),
+      sandbox: external_exports.object({
+        enabled: external_exports.boolean().optional(),
+        autoAllowBashIfSandboxed: external_exports.boolean().optional(),
+        allowUnsandboxedCommands: external_exports.boolean().optional(),
+        // 命令前缀白名单（CC `sandbox.excludedCommands`）：匹配的命令在沙箱外运行，
+        // 用于需逃出沙箱的工具（如 'docker *' / 'aliyun *' 要访问宿主 socket / 凭证）。
+        excludedCommands: external_exports.array(external_exports.string()).optional(),
+        filesystem: external_exports.object({
+          denyRead: external_exports.array(external_exports.string()).optional(),
+          allowRead: external_exports.array(external_exports.string()).optional(),
+          denyWrite: external_exports.array(external_exports.string()).optional(),
+          allowWrite: external_exports.array(external_exports.string()).optional()
+        }).optional(),
+        network: external_exports.object({
+          allowedDomains: external_exports.array(external_exports.string()).optional(),
+          allowLocalBinding: external_exports.boolean().optional()
+        }).optional()
+      }).optional()
+    });
+    PersonaInfoResponseSchema = PersonaFileSchema.extend({
+      // 人格 builtin 层：`<personaDir>/CLAUDE.md`（= AGENTS.md 镜像）。预装 persona 的这份是
+      // daemon ship 的产品规格，每次 daemon 启动被覆盖回 bundle 版（personalityManaged 标记它）。
+      personality: external_exports.string().optional(),
+      // Owner-managed personality overlay survives daemon resource refreshes and is injected for owner and guest sessions. Empty text clears it.
+      personalityLocal: external_exports.string().optional(),
+      // Managed builtin personality is refreshed by daemon and shown read-only; user edits belong to the overlay. User-created persona files remain editable.
+      personalityManaged: external_exports.boolean().optional(),
+      // 仅 'persona:get' 携带；null = 文件不存在 / parse 失败；undefined = 不在该响应类型上
+      skills: external_exports.array(PersonaSkillSummarySchema).optional(),
+      // 仅 'persona:get' 携带；空数组 = 没启用任何插件 / settings.json 不存在；undefined = 不在该响应类型上
+      plugins: external_exports.array(PersonaPluginSummarySchema).optional(),
+      sandboxSettings: PersonaSandboxSettingsSchema.nullable().optional(),
+      // 仅 'persona:get' 携带；null = codex-sandbox.json 不存在 / parse 失败。
+      // UI 的「访客联网」开关读它（见 PersonaCardSettings）。
+      codexSandbox: CodexSandboxSettingsSchema.nullable().optional()
+    });
+    PersonaCreateArgsSchema = external_exports.object({
+      // Caller provides a safe slug, daemon adds persona-. Keep identity separate from the freely editable display label.
+      slug: external_exports.string().regex(/^[a-z0-9]+(-[a-z0-9]+)*$/).max(32),
+      label: external_exports.string().min(1),
+      personality: external_exports.string(),
+      model: external_exports.string().optional(),
+      effort: external_exports.string().optional(),
+      serviceTier: PersonaFileSchema.shape.serviceTier,
+      tool: external_exports.string().optional(),
+      public: external_exports.boolean().optional(),
+      iconKey: external_exports.string().optional()
+    }).strict();
+    PersonaIdArgsSchema = external_exports.object({
+      personaId: external_exports.string().min(1)
+    });
+    PersonaUpdateArgsSchema = external_exports.object({
+      personaId: external_exports.string().min(1),
+      patch: external_exports.object({
+        label: external_exports.string().min(1).optional(),
+        model: external_exports.string().optional(),
+        effort: external_exports.string().optional(),
+        serviceTier: PersonaFileSchema.shape.serviceTier,
+        tool: external_exports.string().optional(),
+        size: PersonaSizeSchema.optional(),
+        cpu: PersonaCpuSchema.optional(),
+        taskConcurrency: PersonaFileSchema.shape.taskConcurrency,
+        // 整体替换（上云页每次交完整的 { model, effort }）；切 tool 不清它
+        cloudEngine: PersonaCloudEngineSchema.optional(),
+        personality: external_exports.string().optional(),
+        // 人格补充层正文（见 PersonaInfoResponseSchema.personalityLocal）。与 personality 各写
+        // 各层、互不影响；'' = 清空补充层。预装 persona 的编辑入口写的就是这个字段。
+        personalityLocal: external_exports.string().optional(),
+        public: external_exports.boolean().optional(),
+        // pass `null` to clear; daemon strips the field from PersonaFile on null
+        iconKey: external_exports.string().nullable().optional(),
+        // codex guest 沙箱（落盘 .clawd/codex-sandbox.json，不在 PersonaFile 里）。与 personality
+        // 同款分层写：handler 剥出来单独落盘，且**局部合并**——只带 network 的 patch 不能抹掉
+        // owner 手配的 writableRoots / denyRead。
+        codexSandbox: CodexSandboxSettingsSchema.optional()
+      }).strict()
+    }).strict();
+  }
+});
+
 // ../protocol/src/deploy-schemas.ts
 function latestProductionRelease(releases) {
   return [...releases].reverse().find((r2) => (r2.environment ?? "production") === "production");
@@ -6314,10 +6506,20 @@ function cloudEngineSettings(p3) {
   const src = tool === "claude" ? p3.cloudEngine ?? {} : p3;
   return { tool, model: src.model ?? "", effort: src.effort ?? "" };
 }
+function configOfPersona(p3) {
+  const { tool, model, effort } = cloudEngineSettings(p3);
+  const size = (p3.size ?? "").trim() || DEFAULT_PERSONA_SIZE;
+  const cpu = p3.cpu ?? PERSONA_CPU_DEFAULTS[size] ?? PERSONA_CPU_DEFAULTS[DEFAULT_PERSONA_SIZE];
+  return { engine: tool, model: model.trim(), effort: effort.trim(), size, cpu, taskConcurrency: p3.taskConcurrency ?? DEFAULT_TASK_CONCURRENCY };
+}
+function changedConfigKeys(a2, b3) {
+  if (!a2 || !b3) return null;
+  return CONFIG_KEYS.filter((key) => a2[key] !== b3[key]);
+}
 function repoSlug(url) {
   return url.trim().replace(/^git@[^:]+:/, "").replace(/^https?:\/\/[^/]+\//, "").replace(/\.git$/, "");
 }
-var DeployFileSchema, SCAN_BASE_KINDS, ScanBaseKindSchema, DeployScanStatusSchema, DeployScanSchema, DeployReleasedSchema, DEPLOY_PROMOTION_PHASES, DeployPromotionSchema, DeployEngineChannelSchema, DeployEngineChannelsSchema, DeployScanFileSchema, DeployRepoSchema, DeploySecretPresenceSchema, ENGINE_AUTH_SECRETS, ENGINE_AUTH_PARTIAL_BLOCKER, DEPLOY_STAGE_STATUSES, DeployStageStatusSchema, DEPLOY_VERIFY_STAGE, DEPLOY_STAGE_KEYS, DeployStageKeySchema, DeployJobSchema, DeployRunSchema, CLOUD_ENGINES, DeployUnpublishRunSchema, DeployStateSchema, DeployUnpublishResultSchema, DeployLocalStateSchema, DeployPatchResultSchema, DeploySecretsResultSchema, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployGetArgsSchema, DeployScanArgsSchema, DeployReleaseArgsSchema, DeployConfirmTestArgsSchema, DeployPromoteArgsSchema, DeployOpenTestArgsSchema, DeployEnvironmentArgsSchema, DeployConfirmTestResultSchema, DeployPromoteResultSchema, DeployOpenTestResultSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeploySetEngineAuthArgsSchema, DeployRerunJobArgsSchema, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
+var DeployFileSchema, SCAN_BASE_KINDS, ScanBaseKindSchema, DeployScanStatusSchema, DeployScanSchema, DeployReleasedSchema, DEPLOY_PROMOTION_PHASES, DeployPromotionSchema, DeployEngineChannelSchema, DeployEngineChannelsSchema, DeployScanFileSchema, DeployRepoSchema, DeploySecretPresenceSchema, ENGINE_AUTH_SECRETS, ENGINE_AUTH_PARTIAL_BLOCKER, DEPLOY_STAGE_STATUSES, DeployStageStatusSchema, DEPLOY_VERIFY_STAGE, DEPLOY_STAGE_KEYS, DeployStageKeySchema, DeployJobSchema, DeployRunSchema, CLOUD_ENGINES, DeployUnpublishRunSchema, DeployStateSchema, DeployUnpublishResultSchema, DeployLocalStateSchema, DeployPatchResultSchema, DeploySecretsResultSchema, DEPLOY_WORKFLOW_VERSION, DEFAULT_TASK_CONCURRENCY, CONFIG_KEYS, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployGetArgsSchema, DeployScanArgsSchema, DeployReleaseArgsSchema, DeployConfirmTestArgsSchema, DeployPromoteArgsSchema, DeployApplyConfigArgsSchema, DeployOpenTestArgsSchema, DeployEnvironmentArgsSchema, DeployConfirmTestResultSchema, DeployPromoteResultSchema, DeployOpenTestResultSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeploySetEngineAuthArgsSchema, DeployRerunJobArgsSchema, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
 var init_deploy_schemas = __esm({
   "../protocol/src/deploy-schemas.ts"() {
     "use strict";
@@ -6325,6 +6527,7 @@ var init_deploy_schemas = __esm({
     init_github_auth_schemas();
     init_environment_schemas();
     init_release_schemas();
+    init_persona_schemas();
     DeployFileSchema = external_exports.object({
       version: external_exports.literal(1),
       manifest: EnvironmentManifestSchema
@@ -6365,6 +6568,12 @@ var init_deploy_schemas = __esm({
       runAttempt: external_exports.number().int().positive().optional(),
       artifactId: external_exports.number().int().positive().optional(),
       verified: VerifiedPersonaReleaseSchema.optional(),
+      /** 这一轮测试用的配置（design 2026-10-14-deploy-config-decouple §3.1）；老记录没有，按「发布时 commit 里的 persona.json」算 */
+      config: DeployConfigSchema.optional(),
+      /** 「应用配置」产生的记录：复用的是哪条测试发布的镜像（它的 id）。首次构建的记录没有 */
+      reconfigOf: external_exports.string().min(1).optional(),
+      /** 发布时写进仓库的 workflow 模板版本；缺 = 老模板（不认 config_json 输入，要先完整重发一次） */
+      workflowVersion: external_exports.number().int().positive().optional(),
       confirmation: external_exports.object({
         fingerprint: external_exports.string().regex(/^[a-f0-9]{64}$/),
         runId: external_exports.number().int().positive(),
@@ -6516,6 +6725,9 @@ var init_deploy_schemas = __esm({
       secrets: external_exports.array(DeploySecretPresenceSchema).optional(),
       engineChannels: DeployEngineChannelsSchema.optional()
     }).strict();
+    DEPLOY_WORKFLOW_VERSION = 2;
+    DEFAULT_TASK_CONCURRENCY = 4;
+    CONFIG_KEYS = ["engine", "model", "effort", "size", "cpu", "taskConcurrency"];
     DeployReleaseResultSchema = external_exports.object({
       sha: external_exports.string().min(1),
       actionsUrl: external_exports.string().min(1),
@@ -6537,6 +6749,7 @@ var init_deploy_schemas = __esm({
     }).strict();
     DeployConfirmTestArgsSchema = DeployPersonaArgsSchema.extend({ releaseId: external_exports.string().min(1) }).strict();
     DeployPromoteArgsSchema = DeployConfirmTestArgsSchema;
+    DeployApplyConfigArgsSchema = DeployConfirmTestArgsSchema;
     DeployOpenTestArgsSchema = DeployConfirmTestArgsSchema;
     DeployEnvironmentArgsSchema = DeployPersonaArgsSchema.extend({ environment: DeployEnvironmentSchema.default("production") }).strict();
     DeployConfirmTestResultSchema = external_exports.object({ confirmation: DeployReleasedSchema.shape.confirmation.unwrap() }).strict();
@@ -7773,187 +7986,6 @@ var init_dashboard_schemas = __esm({
   }
 });
 
-// ../protocol/src/tool-family.ts
-function isCodexFamily(tool) {
-  return tool === "codex" || tool === CODEX_CLOUD_TOOL_ID;
-}
-function isPiFamily(tool) {
-  return tool === PI_TOOL_ID || tool === PI_CLOUD_TOOL_ID;
-}
-function isCloudTool(tool) {
-  return typeof tool === "string" && tool.length > CLOUD_TOOL_SUFFIX.length && tool.endsWith(CLOUD_TOOL_SUFFIX);
-}
-function isRpcAgentTool(tool) {
-  return isCodexFamily(tool) || isPiFamily(tool);
-}
-var CLOUD_TOOL_SUFFIX, CODEX_CLOUD_TOOL_ID, CODEX_SERVICE_TIERS, CLAUDE_CLOUD_TOOL_ID, PI_TOOL_ID, PI_CLOUD_TOOL_ID;
-var init_tool_family = __esm({
-  "../protocol/src/tool-family.ts"() {
-    "use strict";
-    CLOUD_TOOL_SUFFIX = "-cloud";
-    CODEX_CLOUD_TOOL_ID = `codex${CLOUD_TOOL_SUFFIX}`;
-    CODEX_SERVICE_TIERS = { standard: "default", fast: "priority" };
-    CLAUDE_CLOUD_TOOL_ID = `claude${CLOUD_TOOL_SUFFIX}`;
-    PI_TOOL_ID = "pi";
-    PI_CLOUD_TOOL_ID = `${PI_TOOL_ID}${CLOUD_TOOL_SUFFIX}`;
-  }
-});
-
-// ../protocol/src/persona-schemas.ts
-var CodexServiceTierSchema, PERSONA_SIZES, PersonaSizeSchema, PERSONA_CPUS, PersonaCpuSchema, PersonaCloudEngineSchema, PersonaFileSchema, PersonaSkillSummarySchema, PersonaPluginSummarySchema, CodexSandboxSettingsSchema, PersonaSandboxSettingsSchema, PersonaInfoResponseSchema, PersonaCreateArgsSchema, PersonaIdArgsSchema, PersonaUpdateArgsSchema;
-var init_persona_schemas = __esm({
-  "../protocol/src/persona-schemas.ts"() {
-    "use strict";
-    init_zod();
-    init_release_schemas();
-    init_tool_family();
-    CodexServiceTierSchema = external_exports.enum([CODEX_SERVICE_TIERS.standard, CODEX_SERVICE_TIERS.fast]);
-    PERSONA_SIZES = ["tiny", "small", "medium", "large", "xlarge"];
-    PersonaSizeSchema = external_exports.enum(PERSONA_SIZES);
-    PERSONA_CPUS = [0.5, 1, 2];
-    PersonaCpuSchema = external_exports.number().refine((cpu) => PERSONA_CPUS.includes(cpu), "Unsupported CPU");
-    PersonaCloudEngineSchema = external_exports.object({
-      model: external_exports.string().optional(),
-      effort: external_exports.string().optional()
-    }).strict();
-    PersonaFileSchema = external_exports.object({
-      personaId: external_exports.string(),
-      label: external_exports.string(),
-      model: external_exports.string().optional(),
-      // 与 model 平行的第二个 session 默认值：reasoning effort。值域跟着 tool 走
-      // （claude 是 '' | low | medium | high | xhigh | max，codex 是 per-model 档位），
-      // 协议层保持 string，由消费侧按 capabilities 收窄。
-      effort: external_exports.string().optional(),
-      serviceTier: CodexServiceTierSchema.optional(),
-      public: external_exports.boolean(),
-      // 8-key set defined UI-side in `lib/session-icons.ts`; protocol stays plain string
-      // for forward compatibility, consumer fallbacks to default when key not found.
-      iconKey: external_exports.string().optional(),
-      // Default engine binding for new sessions; missing values are consumed as claude.
-      tool: external_exports.string().optional(),
-      /** Cloud resource size is string-compatible in stored files and narrowed at update/deploy boundaries; local execution ignores it. */
-      size: external_exports.string().optional(),
-      cpu: external_exports.number().finite().optional(),
-      /** Cloud task-Pod concurrency, validated at release. Local execution ignores it; changes apply on the next publication. */
-      taskConcurrency: external_exports.number().int().positive().optional(),
-      cloudEngine: PersonaCloudEngineSchema.optional(),
-      createdAt: external_exports.number(),
-      updatedAt: external_exports.number(),
-      /** Registry-only cloud entry, with no local persona directory. Local key adds -cloud; gateway paths use cloud.personaId and the registered engine determines the cloud tool id. */
-      cloud: external_exports.object({
-        gatewayUrl: external_exports.string().min(1),
-        personaId: external_exports.string().min(1),
-        publishedByMe: external_exports.boolean().optional(),
-        environment: DeployEnvironmentSchema.optional(),
-        expectedImage: ImageDigestSchema.optional(),
-        testReleaseId: external_exports.string().optional()
-      }).strict().optional()
-    }).strict();
-    PersonaSkillSummarySchema = external_exports.object({
-      // 目录名作为 skill name（对齐 CC：frontmatter `name:` 仅作 displayName 用）
-      name: external_exports.string().min(1),
-      description: external_exports.string().optional()
-    });
-    PersonaPluginSummarySchema = external_exports.object({
-      id: external_exports.string().min(1)
-    });
-    CodexSandboxSettingsSchema = external_exports.object({
-      // 额外可写的绝对路径或 ~ 路径（pnpm 工具链等）；workspace(cwd) 和 userWorkDir 由 daemon 自动加，不用列。
-      writableRoots: external_exports.array(external_exports.string()).optional(),
-      // 禁读 glob（相对 workspace root 或绝对），如 ".secrets/**"、"**/*.env"。
-      denyRead: external_exports.array(external_exports.string()).optional(),
-      // true → 网络全放(*)；false / 缺省 → 断网（fail-closed）。**「新建默认联网」不靠这里的缺省**，
-      // 靠 persona 创建时就把 CODEX_SANDBOX_DEFAULT 物化进文件（见 PersonaManager.create）——
-      // 缺省只在文件损坏这种异常路径上出现，那时断网是更安全的一侧。
-      network: external_exports.boolean().optional()
-    }).strict();
-    PersonaSandboxSettingsSchema = external_exports.object({
-      permissions: external_exports.object({
-        defaultMode: external_exports.string().optional(),
-        allow: external_exports.array(external_exports.string()).optional(),
-        // deny 优先级最高；强制底座（persona 私密区）由 daemon compose 强制 union，owner 删不掉。
-        deny: external_exports.array(external_exports.string()).optional()
-      }).optional(),
-      sandbox: external_exports.object({
-        enabled: external_exports.boolean().optional(),
-        autoAllowBashIfSandboxed: external_exports.boolean().optional(),
-        allowUnsandboxedCommands: external_exports.boolean().optional(),
-        // 命令前缀白名单（CC `sandbox.excludedCommands`）：匹配的命令在沙箱外运行，
-        // 用于需逃出沙箱的工具（如 'docker *' / 'aliyun *' 要访问宿主 socket / 凭证）。
-        excludedCommands: external_exports.array(external_exports.string()).optional(),
-        filesystem: external_exports.object({
-          denyRead: external_exports.array(external_exports.string()).optional(),
-          allowRead: external_exports.array(external_exports.string()).optional(),
-          denyWrite: external_exports.array(external_exports.string()).optional(),
-          allowWrite: external_exports.array(external_exports.string()).optional()
-        }).optional(),
-        network: external_exports.object({
-          allowedDomains: external_exports.array(external_exports.string()).optional(),
-          allowLocalBinding: external_exports.boolean().optional()
-        }).optional()
-      }).optional()
-    });
-    PersonaInfoResponseSchema = PersonaFileSchema.extend({
-      // 人格 builtin 层：`<personaDir>/CLAUDE.md`（= AGENTS.md 镜像）。预装 persona 的这份是
-      // daemon ship 的产品规格，每次 daemon 启动被覆盖回 bundle 版（personalityManaged 标记它）。
-      personality: external_exports.string().optional(),
-      // Owner-managed personality overlay survives daemon resource refreshes and is injected for owner and guest sessions. Empty text clears it.
-      personalityLocal: external_exports.string().optional(),
-      // Managed builtin personality is refreshed by daemon and shown read-only; user edits belong to the overlay. User-created persona files remain editable.
-      personalityManaged: external_exports.boolean().optional(),
-      // 仅 'persona:get' 携带；null = 文件不存在 / parse 失败；undefined = 不在该响应类型上
-      skills: external_exports.array(PersonaSkillSummarySchema).optional(),
-      // 仅 'persona:get' 携带；空数组 = 没启用任何插件 / settings.json 不存在；undefined = 不在该响应类型上
-      plugins: external_exports.array(PersonaPluginSummarySchema).optional(),
-      sandboxSettings: PersonaSandboxSettingsSchema.nullable().optional(),
-      // 仅 'persona:get' 携带；null = codex-sandbox.json 不存在 / parse 失败。
-      // UI 的「访客联网」开关读它（见 PersonaCardSettings）。
-      codexSandbox: CodexSandboxSettingsSchema.nullable().optional()
-    });
-    PersonaCreateArgsSchema = external_exports.object({
-      // Caller provides a safe slug, daemon adds persona-. Keep identity separate from the freely editable display label.
-      slug: external_exports.string().regex(/^[a-z0-9]+(-[a-z0-9]+)*$/).max(32),
-      label: external_exports.string().min(1),
-      personality: external_exports.string(),
-      model: external_exports.string().optional(),
-      effort: external_exports.string().optional(),
-      serviceTier: PersonaFileSchema.shape.serviceTier,
-      tool: external_exports.string().optional(),
-      public: external_exports.boolean().optional(),
-      iconKey: external_exports.string().optional()
-    }).strict();
-    PersonaIdArgsSchema = external_exports.object({
-      personaId: external_exports.string().min(1)
-    });
-    PersonaUpdateArgsSchema = external_exports.object({
-      personaId: external_exports.string().min(1),
-      patch: external_exports.object({
-        label: external_exports.string().min(1).optional(),
-        model: external_exports.string().optional(),
-        effort: external_exports.string().optional(),
-        serviceTier: PersonaFileSchema.shape.serviceTier,
-        tool: external_exports.string().optional(),
-        size: PersonaSizeSchema.optional(),
-        cpu: PersonaCpuSchema.optional(),
-        taskConcurrency: PersonaFileSchema.shape.taskConcurrency,
-        // 整体替换（上云页每次交完整的 { model, effort }）；切 tool 不清它
-        cloudEngine: PersonaCloudEngineSchema.optional(),
-        personality: external_exports.string().optional(),
-        // 人格补充层正文（见 PersonaInfoResponseSchema.personalityLocal）。与 personality 各写
-        // 各层、互不影响；'' = 清空补充层。预装 persona 的编辑入口写的就是这个字段。
-        personalityLocal: external_exports.string().optional(),
-        public: external_exports.boolean().optional(),
-        // pass `null` to clear; daemon strips the field from PersonaFile on null
-        iconKey: external_exports.string().nullable().optional(),
-        // codex guest 沙箱（落盘 .clawd/codex-sandbox.json，不在 PersonaFile 里）。与 personality
-        // 同款分层写：handler 剥出来单独落盘，且**局部合并**——只带 network 的 patch 不能抹掉
-        // owner 手配的 writableRoots / denyRead。
-        codexSandbox: CodexSandboxSettingsSchema.optional()
-      }).strict()
-    }).strict();
-  }
-});
-
 // ../protocol/src/events.ts
 var DAEMON_MODE_VALUES, CLOUD_HISTORY_REFRESH_KIND, SESSION_STATUS_VALUES, HISTORY_USER_META_VALUES, SKILL_SOURCE_VALUES, AGENT_SOURCE_VALUES, ASK_USER_QUESTION_TOOL_NAME;
 var init_events = __esm({
@@ -9112,6 +9144,10 @@ var init_methods = __esm({
         summary: "\u786E\u8BA4\u6240\u9009\u6D4B\u8BD5\u7248\u901A\u8FC7\u5B9E\u9645\u8BD5\u7528\uFF1B\u6309\u5DF2\u4FDD\u5B58\u5236\u54C1\u548C\u6D4B\u8BD5\u767B\u8BB0\u6821\u9A8C\uFF0Cowner-only\u3001human-only",
         args: DeployConfirmTestArgsSchema
       },
+      "deploy:applyConfig": {
+        summary: "\u628A releaseId \u90A3\u6761\u6D4B\u8BD5\u53D1\u5E03\u7684**\u955C\u50CF**\u6362\u4E0A persona \u5F53\u524D\u7684\u5F15\u64CE / \u6A21\u578B / \u8D44\u6E90\u914D\u7F6E\uFF0C\u5728\u6D4B\u8BD5\u73AF\u5883\u91CD\u6D4B\u4E00\u904D\uFF1A\u4E0D\u626B\u63CF\u3001\u4E0D\u6784\u5EFA\uFF0C\u6D41\u6C34\u7EBF\u8D70 smoke \u2192 \u767B\u8BB0 \u2192 \u9A8C\u8BC1\u3002\u524D\u7F6E\uFF1A\u90A3\u6761\u53D1\u5E03\u5DF2\u63A8\u9001\u5E76\u901A\u8FC7\u9A8C\u8BC1\uFF0C\u4E14\u4ED3\u5E93\u91CC\u7684 workflow \u6A21\u677F\u591F\u65B0\uFF08\u7F3A config_json \u8F93\u5165\u7684\u8981\u5148\u300C\u53D1\u5E03\u5230\u6D4B\u8BD5\u300D\u5B8C\u6574\u91CD\u53D1\u4E00\u6B21\uFF09\uFF1B\u8FC7\u4E0E\u53D1\u5E03\u540C\u4E00\u5957\u95F8\uFF08\u9009\u4E86\u6A21\u578B\u3001\u8BA2\u9605\u51ED\u636E\u6210\u5BF9\u7B49\uFF09\u3002\u56DE\u65B0\u6D4B\u8BD5\u53D1\u5E03\u7684 commit \u4E0E Actions \u5730\u5740\uFF1B\u4E4B\u540E\u8D70\u5E38\u89C4\u7684\u6D4B\u8BD5\u786E\u8BA4 / \u664B\u7EA7\uFF1Bowner-only\u3001human-only",
+        args: DeployApplyConfigArgsSchema
+      },
       "deploy:promote": {
         summary: "\u5C06\u5DF2\u786E\u8BA4\u6D4B\u8BD5\u7248\u7684\u63D0\u4EA4\u63A8\u8FDB main \u5E76\u4E0A\u7EBF\u76F8\u540C\u955C\u50CF\uFF1B\u6062\u590D\u4E2D\u65AD\u7684\u540C\u4E00\u6B21\u664B\u7EA7\uFF0Cowner-only\u3001human-only",
         args: DeployPromoteArgsSchema
@@ -62157,6 +62193,7 @@ function renderDeployWorkflow(config) {
     "      - name: Select pinned source identities",
     "        env:",
     "          RELEASE_JSON: ${{ inputs.release_json }}",
+    "          CONFIG_JSON: ${{ inputs.config_json }}",
     "        run: |",
     "          node --input-type=module <<'NODE'",
     '          import fs from "node:fs"',
@@ -62164,7 +62201,9 @@ function renderDeployWorkflow(config) {
     '          const r = fs.existsSync(file) ? JSON.parse(fs.readFileSync(file, "utf8")) : process.env.RELEASE_JSON ? JSON.parse(process.env.RELEASE_JSON) : undefined',
     '          if (r && (!/^[a-f0-9]{40}$/.test(r.commit) || !/^[a-f0-9]{40}$/.test(r.pipelineCommit) || r.repository !== process.env.GITHUB_REPOSITORY)) throw new Error("invalid Persona release identity")',
     '          if (process.env.DEPLOY_ENVIRONMENT === "production" && (!r || process.env.GITHUB_REF_NAME !== "main" || process.env.GITHUB_SHA !== r.commit)) throw new Error("production main must equal tested commit")',
-    '          fs.appendFileSync(process.env.GITHUB_ENV, "SOURCE_COMMIT=" + (r?.commit ?? process.env.GITHUB_SHA) + "\\nPIPELINE_COMMIT=" + (r?.pipelineCommit ?? process.env.CLAWOS_REF) + "\\n")',
+    "          // \u5E94\u7528\u914D\u7F6E\uFF08integration + config_json + release_json\uFF0C\u4E14\u8FD8\u6CA1\u6709\u5019\u9009\u6587\u4EF6\uFF09\u8981\u6362\u4E0A\u5F53\u524D\u6D41\u6C34\u7EBF\uFF1A\u8BB0\u5F55\u91CC\u9489\u7684\u65E7\u811A\u672C\u4E0D\u8BA4\u8BC6 config_json",
+    '          const reconfigure = process.env.DEPLOY_ENVIRONMENT === "integration" && process.env.CONFIG_JSON && !fs.existsSync(file)',
+    '          fs.appendFileSync(process.env.GITHUB_ENV, "SOURCE_COMMIT=" + (r?.commit ?? process.env.GITHUB_SHA) + "\\nPIPELINE_COMMIT=" + (reconfigure ? process.env.CLAWOS_REF : r?.pipelineCommit ?? process.env.CLAWOS_REF) + "\\n")',
     "          NODE",
     ""
   ];
@@ -62191,6 +62230,8 @@ function renderDeployWorkflow(config) {
     "",
     "      - name: \u8BFB\u90E8\u7F72\u6587\u4EF6",
     "        id: plan",
+    "        env:",
+    "          CLAWD_CONFIG_JSON: ${{ inputs.config_json }}",
     "        run: |",
     "          node clawos/cloud-host/pipeline/deploy-file.mjs \\",
     "            --persona-dir persona \\",
@@ -62255,6 +62296,7 @@ function renderDeployWorkflow(config) {
     "            --effort '${{ steps.plan.outputs.effort }}' \\",
     "            --size '${{ steps.plan.outputs.size }}' \\",
     "            --cpu '${{ steps.plan.outputs.cpu }}' \\",
+    "            --config-source '${{ steps.plan.outputs.config_source }}' \\",
     "            --task-concurrency '${{ steps.plan.outputs.task_concurrency }}' \\",
     "            --engine '${{ steps.plan.outputs.engine }}' \\",
     "            --connectors '${{ steps.plan.outputs.connectors }}' \\",
@@ -62270,7 +62312,7 @@ function renderDeployWorkflow(config) {
   ];
   return [
     "name: clawd deploy",
-    "run-name: ${{ inputs.environment == 'production' && format('persona-production-{0}', inputs.promotion_id) || 'persona-integration' }}",
+    "run-name: ${{ inputs.environment == 'production' && format('persona-production-{0}', inputs.promotion_id) || inputs.config_id && format('persona-integration-config-{0}', inputs.config_id) || 'persona-integration' }}",
     "# \u7531 clawd \u751F\u6210\u3001\u7531 clawd \u7EF4\u62A4\u3002push \u6784\u5EFA int \u5019\u9009\uFF1Bproduction \u624B\u52A8\u664B\u7EA7\u5DF2\u9A8C\u6536\u5236\u54C1\u3002",
     "on:",
     "  push:",
@@ -62285,7 +62327,15 @@ function renderDeployWorkflow(config) {
     "        type: string",
     "        required: false",
     "      release_json:",
-    "        description: Verified Persona release JSON for production promotion",
+    "        description: Verified Persona release JSON for production promotion or config re-test",
+    "        type: string",
+    "        required: false",
+    "      config_json:",
+    "        description: Engine/model/resource config (canonical JSON); replaces .clawd/persona.json for this run",
+    "        type: string",
+    "        required: false",
+    "      config_id:",
+    "        description: Identifies an integration config re-test run (run-name)",
     "        type: string",
     "        required: false",
     "",
@@ -62338,6 +62388,7 @@ function renderDeployWorkflow(config) {
     "          ALIBABA_CLOUD_ACCESS_KEY_ID: ${{ secrets.ALI_ACS_ACCESS_KEY_ID }}",
     "          ALIBABA_CLOUD_ACCESS_KEY_SECRET: ${{ secrets.ALI_ACS_ACCESS_KEY_SECRET }}",
     "          RELEASE_JSON: ${{ inputs.release_json }}",
+    "          CLAWD_CONFIG_JSON: ${{ steps.plan.outputs.config_json }}",
     "          CLAWD_PUBLISHER_TEST: ${{ steps.plan.outputs.test }}",
     "        run: node clawos/cloud-host/pipeline/persona-candidate.mjs",
     "",
@@ -62799,6 +62850,10 @@ async function fileInCommit(exec, dir, sha, rel) {
   const r2 = await git(exec, dir, ["cat-file", "-e", `${sha}:${rel}`]);
   return !r2.spawnError && r2.code === 0;
 }
+async function readFileAtCommit(exec, dir, sha, rel) {
+  const r2 = await git(exec, dir, ["show", `${sha}:${rel}`]);
+  return !r2.spawnError && r2.code === 0 ? r2.stdout : void 0;
+}
 async function commitAll(exec, args) {
   await mustGit(exec, args.dir, ["add", "-A"], "\u6682\u5B58\u6587\u4EF6");
   const staged = await git(exec, args.dir, ["diff", "--cached", "--quiet"]);
@@ -62849,7 +62904,9 @@ function validatePersonaRelease(raw, expected) {
     baseImage: record4.baseImage,
     pipelineCommit: record4.pipelineCommit,
     repository: record4.repository,
-    ...record4.test ? { test: record4.test } : {}
+    ...record4.test ? { test: record4.test } : {},
+    // 与 cloud-host/pipeline/release.mjs 的 fingerprint 同序；老记录没有 config，哈希不变
+    ...record4.config ? { config: Object.fromEntries(CONFIG_KEYS.map((k3) => [k3, record4.config[k3]])) } : {}
   })).digest("hex");
   if (record4.verification.fingerprint !== fingerprint) throw new Error("\u5236\u54C1\u5DF2\u504F\u79BB\u6D4B\u8BD5\u65F6\u7684\u7248\u672C\uFF0C\u8BF7\u91CD\u65B0\u6D4B\u8BD5");
   return record4;
@@ -63137,6 +63194,7 @@ var SCAN_BASE_LABEL = {
 
 // src/deploy/run-status.ts
 init_protocol();
+var INTEGRATION_CONFIG_RUN_PREFIX = "persona-integration-config-";
 var runsOf = (slug, file, query) => `/repos/${slug}/actions/workflows/${encodeURIComponent(file)}/runs?${query}`;
 var pipelineJobKey = (name) => DEPLOY_STAGE_KEYS.find((k3) => name === k3 || name.startsWith(`${k3} `));
 function stageStatusOf(status, conclusion) {
@@ -63190,7 +63248,7 @@ async function findReleaseRun(api, slug, target, jobsCache) {
         `${target.environment === "integration" ? `head_sha=${encodeURIComponent(target.head)}&` : ""}branch=${branch}&per_page=100&page=${page}`
       ));
       if (!Array.isArray(listed?.workflow_runs)) return void 0;
-      const raw = listed.workflow_runs.find((r2) => r2.head_branch === branch && (target.environment === "production" ? r2.event === "workflow_dispatch" && r2.display_title === `persona-production-${target.promotionId}` : r2.head_sha === target.head && (r2.event === "push" || r2.event === "workflow_dispatch")));
+      const raw = listed.workflow_runs.find((r2) => r2.head_branch === branch && (target.environment === "production" ? r2.event === "workflow_dispatch" && r2.display_title === `persona-production-${target.promotionId}` : target.configId ? r2.head_sha === target.head && r2.event === "workflow_dispatch" && r2.display_title === `${INTEGRATION_CONFIG_RUN_PREFIX}${target.configId}` : r2.head_sha === target.head && (r2.event === "push" || r2.event === "workflow_dispatch") && !(typeof r2.display_title === "string" && r2.display_title.startsWith(INTEGRATION_CONFIG_RUN_PREFIX))));
       if (raw) return readPinnedRun(api, slug, raw, target.environment, target.promotionId, jobsCache);
       if (listed.workflow_runs.length < 100 && (listed.total_count === void 0 || page * 100 >= listed.total_count)) return null;
     }
@@ -63513,6 +63571,12 @@ function buildDeployHandlers(deps) {
       ...historyError ? { historyError } : {}
     };
   }
+  async function withLegacyConfig(dir, releases) {
+    const latestIntegration = [...releases].reverse().find((r2) => r2.environment === "integration" && !r2.legacy);
+    if (!latestIntegration || latestIntegration.config || latestIntegration.verified?.config) return releases;
+    const config = await testedConfigOf(dir, latestIntegration);
+    return config ? releases.map((r2) => r2 === latestIntegration ? { ...r2, config } : r2) : releases;
+  }
   async function stateOf(personaId2, selection = {}, measure = directRead) {
     const { releaseHead, releaseId, environment } = selection;
     const historical = releaseHead !== void 0 || releaseId !== void 0;
@@ -63571,7 +63635,7 @@ function buildDeployHandlers(deps) {
       const integration = historical ? selected?.environment === "integration" ? selected : void 0 : [...file.releases].reverse().find((r2) => r2.environment === "integration");
       const intRunRead = (async () => {
         if (!integration) return void 0;
-        const intRun2 = await measure("run", async () => integration.runId ? runById(api, slug, integration.runId, "integration", void 0, completedJobs) : await findReleaseRun(api, slug, { environment: "integration", head: integration.head }, completedJobs) ?? void 0, { environment: "integration" });
+        const intRun2 = await measure("run", async () => integration.runId ? runById(api, slug, integration.runId, "integration", void 0, completedJobs) : await findReleaseRun(api, slug, { environment: "integration", head: integration.head, ...configIdOf(integration) }, completedJobs) ?? void 0, { environment: "integration" });
         if (intRun2 && intRun2.headSha === integration.head) {
           let updated = { ...integration, runId: intRun2.runId, runAttempt: intRun2.runAttempt };
           if (integration.runAttempt !== intRun2.runAttempt) updated = { ...updated, verified: void 0, artifactId: void 0, confirmation: void 0 };
@@ -63660,7 +63724,7 @@ function buildDeployHandlers(deps) {
       ...file.engineChannels ? { engineChannels: file.engineChannels } : {},
       ...repo2 ? { repo: repo2 } : {},
       scans,
-      releases: file.releases,
+      releases: await withLegacyConfig(dir, file.releases),
       ...secrets ? { secrets } : {},
       ...run ? { run } : {},
       ...online !== void 0 ? { online } : {},
@@ -63970,6 +64034,23 @@ function buildDeployHandlers(deps) {
     await requireIntegrationPublishingConfig(api, slug);
     await api.putSecret(slug, "CLAWD_INT_TEST_LOGIN_PASS", await deps.testLoginPass(), "integration");
   };
+  const configIdOf = (r2) => r2.reconfigOf && r2.id ? { configId: r2.id } : {};
+  const testedConfigOf = async (dir, record4) => {
+    if (record4.verified?.config) return record4.verified.config;
+    if (record4.config) return record4.config;
+    const raw = await readFileAtCommit(deps.exec, dir, record4.head, PERSONA_FILE_REL);
+    if (raw === void 0) return void 0;
+    try {
+      return configOfPersona(JSON.parse(raw));
+    } catch {
+      return void 0;
+    }
+  };
+  const CONFIG_KEY_LABEL = { engine: "\u5F15\u64CE", model: "\u6A21\u578B", effort: "\u63A8\u7406\u6863\u4F4D", size: "\u89C4\u683C", cpu: "CPU", taskConcurrency: "\u4EFB\u52A1\u5E76\u53D1" };
+  const assertConfigTested = async (personaId2, record4) => {
+    const changed = changedConfigKeys(configOfPersona(deps.personaEngine(personaId2) ?? {}), await testedConfigOf(mustPersona(personaId2), record4));
+    if (changed?.length) throw invalid(`\u914D\u7F6E\u6539\u8FC7\u4E86\uFF08${changed.map((k3) => CONFIG_KEY_LABEL[k3]).join("\u3001")}\uFF09\uFF0C\u5148\u300C\u5E94\u7528\u5230\u6D4B\u8BD5\u73AF\u5883\u300D\u5E76\u786E\u8BA4\uFF0C\u518D\u4E0A\u7EBF`);
+  };
   const releaseHandler = async (frame, _client, ctx) => {
     ensureOwner(ctx);
     const { personaId: personaId2, scanId } = parseArgs2(DeployReleaseArgsSchema, frame, "deploy:release");
@@ -64043,7 +64124,7 @@ function buildDeployHandlers(deps) {
     try {
       const result = await release(deps.exec, api, { dir, now: deps.now, auth, manifest, onPrepared: async (head) => {
         const latest2 = await readHistory(dir);
-        await writeScanFile(dir, { ...latest2, releases: [...latest2.releases, { id: releaseId, environment: "integration", head, contentHead: entry.head, scanId: entry.id, at: deps.now(), pushed: false }] });
+        await writeScanFile(dir, { ...latest2, releases: [...latest2.releases, { id: releaseId, environment: "integration", head, contentHead: entry.head, scanId: entry.id, at: deps.now(), pushed: false, config: configOfPersona(deps.personaEngine(personaId2) ?? {}), workflowVersion: DEPLOY_WORKFLOW_VERSION }] });
       } });
       runCache.delete(runCacheKey(personaId2));
       const latest = await readHistory(dir);
@@ -64119,7 +64200,7 @@ function buildDeployHandlers(deps) {
     const repo2 = await repoInfo(deps.exec, dir);
     if (!repo2) throw invalid("\u4ED3\u5E93\u4E0D\u5B58\u5728");
     const { api } = await requireGithub();
-    const run = record4.runId ? await runById(api, repoSlug(repo2.url), record4.runId, "integration") : await findReleaseRun(api, repoSlug(repo2.url), { environment: "integration", head: record4.head });
+    const run = record4.runId ? await runById(api, repoSlug(repo2.url), record4.runId, "integration") : await findReleaseRun(api, repoSlug(repo2.url), { environment: "integration", head: record4.head, ...configIdOf(record4) });
     if (!run || run.headSha !== record4.head) throw invalid("\u6682\u65F6\u67E5\u4E0D\u5230\u672C\u6B21\u6D4B\u8BD5\u6D41\u6C34\u7EBF\uFF0C\u8BF7\u5237\u65B0");
     const { artifactId, release: verified } = await readVerifiedRelease(api, repoSlug(repo2.url), run);
     if (requireDialogue) {
@@ -64146,7 +64227,7 @@ function buildDeployHandlers(deps) {
       verified,
       advanceMain: (head) => advanceMain(deps.exec, dir, auth, head),
       findRun: (id) => findReleaseRun(observedApi ?? api, slug, { environment: "production", head: record4.head, promotionId: id }),
-      dispatch: (id, verified2) => api.dispatchWorkflow(slug, DEPLOY_WORKFLOW_FILE, "main", { environment: "production", promotion_id: id, release_json: JSON.stringify(verified2) }),
+      dispatch: (id, verified2) => api.dispatchWorkflow(slug, DEPLOY_WORKFLOW_FILE, "main", { environment: "production", promotion_id: id, release_json: JSON.stringify(verified2), ...verified2.config ? { config_json: JSON.stringify(verified2.config) } : {} }),
       actualImage: observedImage ?? (async () => (await deps.cloudState(cloudName, "production")).image),
       now: deps.now,
       persist: async (next) => {
@@ -64162,6 +64243,7 @@ function buildDeployHandlers(deps) {
     ensureOwner(ctx);
     const { personaId: personaId2, releaseId } = releaseArgs(frame, DeployConfirmTestArgsSchema);
     const record4 = await testedRelease(personaId2, releaseId, true, true);
+    await assertConfigTested(personaId2, record4);
     const confirmation = record4.confirmation ?? { fingerprint: record4.verified.verification.fingerprint, runId: record4.runId, runAttempt: record4.runAttempt, at: deps.now() };
     const dir = mustPersona(personaId2), file = await readHistory(dir);
     await writeScanFile(dir, { ...file, releases: file.releases.map((r2) => r2.id === releaseId ? { ...r2, confirmation } : r2) });
@@ -64178,6 +64260,7 @@ function buildDeployHandlers(deps) {
     const snapshot = old?.verified ?? (stored?.confirmation?.fingerprint === stored?.verified?.verification.fingerprint ? stored?.verified : void 0);
     if (recovering && (!snapshot || !stored)) throw invalid("\u539F\u4E0A\u7EBF\u4EFB\u52A1\u7684\u5DF2\u6D4B\u5236\u54C1\u8BB0\u5F55\u4E0D\u5B8C\u6574\uFF0C\u8BF7\u5148\u6838\u5B9E\u539F\u6D41\u6C34\u7EBF\uFF1B\u4E0D\u4F1A\u6539\u7528\u65B0\u7684\u6D4B\u8BD5\u7248\u672C");
     const record4 = recovering ? { ...stored, verified: snapshot } : await testedRelease(personaId2, releaseId, true, true);
+    if (!recovering) await assertConfigTested(personaId2, record4);
     const repo2 = await repoInfo(deps.exec, mustPersona(personaId2));
     if (!repo2) throw invalid("\u4ED3\u5E93\u4E0D\u5B58\u5728");
     if (await deps.claimPublisher(cloudPersonaIdOf(repo2.url), "production") === "taken") throw invalid("\u7EBF\u4E0A\u73AF\u5883\u91CC\u7684\u8FD9\u4E2A\u540D\u5B57\u5DF2\u7531\u522B\u4EBA\u53D1\u5E03");
@@ -64196,6 +64279,47 @@ function buildDeployHandlers(deps) {
     const promotion = await continuePromotion(personaId2, record4, reuse ? { ...old, verified: snapshot ?? record4.verified } : { id: (0, import_node_crypto14.randomUUID)(), releaseId, at: deps.now(), phase: "prepared", verified: record4.verified }, true);
     return { response: { type: "deploy:promote", promotion } };
   };
+  const applyConfig = async (frame, _client, ctx) => {
+    ensureOwner(ctx);
+    const { personaId: personaId2, releaseId } = releaseArgs(frame, DeployApplyConfigArgsSchema);
+    const dir = mustPersona(personaId2);
+    const wrong = wrongEngine(deps.personaEngine(personaId2)?.tool);
+    if (wrong) throw invalid(wrong);
+    const file = await readHistory(dir);
+    const latest = [...file.releases].reverse().find((r2) => r2.environment === "integration");
+    if (!latest || latest.id !== releaseId) throw invalid("\u53EA\u80FD\u5BF9\u6700\u65B0\u4E00\u6B21\u6D4B\u8BD5\u53D1\u5E03\u5E94\u7528\u914D\u7F6E\uFF0C\u5237\u65B0\u9875\u9762\u540E\u518D\u8BD5");
+    if (!latest.workflowVersion || latest.workflowVersion < DEPLOY_WORKFLOW_VERSION) throw invalid("\u8FD9\u4E2A\u4ED3\u5E93\u7684\u53D1\u5E03\u6D41\u6C34\u7EBF\u662F\u65E7\u7248\u672C\uFF0C\u4E0D\u8BA4\u65B0\u914D\u7F6E\u2014\u2014\u8BF7\u5148\u5B8C\u6574\u91CD\u65B0\u53D1\u5E03\u4E00\u6B21\uFF08\u4F1A\u91CD\u65B0\u6784\u5EFA\uFF09");
+    const repo2 = await repoInfo(deps.exec, dir);
+    if (!repo2) throw invalid("\u4ED3\u5E93\u4E0D\u5B58\u5728");
+    const { api } = await requireGithub();
+    const slug = repoSlug(repo2.url);
+    let base = latest;
+    let retryAfterFailure = false;
+    if (latest.reconfigOf) {
+      const prior = await findReleaseRun(api, slug, { environment: "integration", head: latest.head, configId: latest.id });
+      if (prior === void 0) throw invalid("\u6682\u65F6\u67E5\u4E0D\u5230\u4E0A\u4E00\u6B21\u5E94\u7528\u914D\u7F6E\u7684\u6D41\u6C34\u7EBF\uFF0C\u8BF7\u5237\u65B0");
+      if (prior && prior.status !== "completed") throw invalid("\u4E0A\u4E00\u6B21\u5E94\u7528\u914D\u7F6E\u8FD8\u5728\u8DD1\uFF0C\u7B49\u5B83\u7ED3\u675F\u518D\u6539");
+      if (prior && prior.conclusion === "failure") {
+        base = file.releases.find((r2) => r2.id === latest.reconfigOf) ?? latest;
+        retryAfterFailure = true;
+      }
+    }
+    const source = await testedRelease(personaId2, base.id, false);
+    const config = configOfPersona(deps.personaEngine(personaId2) ?? {});
+    if (!config.model) throw invalid("\u8FD8\u6CA1\u9009\u6A21\u578B\u2014\u2014\u5728\u4E0A\u4E91\u9875\u300C\u5F15\u64CE\u4E0E\u6A21\u578B\u300D\u91CC\u9009\u4E00\u4E2A");
+    if (!retryAfterFailure && !(changedConfigKeys(config, await testedConfigOf(dir, source)) ?? ["engine"]).length) throw invalid("\u914D\u7F6E\u548C\u6D4B\u8BD5\u73AF\u5883\u91CC\u7684\u4E00\u81F4\uFF0C\u6CA1\u6709\u9700\u8981\u5E94\u7528\u7684");
+    const id = (0, import_node_crypto14.randomUUID)();
+    try {
+      await api.dispatchWorkflow(slug, DEPLOY_WORKFLOW_FILE, "integration", { environment: "integration", release_json: JSON.stringify(source.verified), config_json: JSON.stringify(config), config_id: id });
+    } catch (err) {
+      throw new ClawdError(ERROR_CODES.INTERNAL, err instanceof Error ? err.message : String(err));
+    }
+    const { verified: _v, artifactId: _a2, runId: _r2, runAttempt: _ra, confirmation: _c, ...kept } = source;
+    const fresh = await readHistory(dir);
+    await writeScanFile(dir, { ...fresh, releases: [...fresh.releases, { ...kept, id, at: deps.now(), pushed: true, config, reconfigOf: source.id }] });
+    runCache.delete(runCacheKey(personaId2));
+    return { response: { type: "deploy:applyConfig", sha: source.head, actionsUrl: "https://github.com/" + slug + "/actions", releaseId: id } };
+  };
   const openTest = async (frame, _client, ctx) => {
     ensureOwner(ctx);
     const { personaId: personaId2, releaseId } = releaseArgs(frame, DeployOpenTestArgsSchema);
@@ -64282,6 +64406,7 @@ function buildDeployHandlers(deps) {
     "deploy:confirmTest": serial(confirmTest),
     "deploy:promote": serial(promote),
     "deploy:openTest": serial(openTest),
+    "deploy:applyConfig": serial(applyConfig),
     "deploy:scan": serial(scanHandler),
     "deploy:patch": serial(patch),
     "deploy:putSecret": serial(putSecret),
@@ -74595,6 +74720,7 @@ var METHOD_GRANT_MAP = {
   "deploy:finishScan": ADMIN_ANY,
   "deploy:release": ADMIN_ANY,
   "deploy:confirmTest": ADMIN_ANY,
+  "deploy:applyConfig": ADMIN_ANY,
   "deploy:promote": ADMIN_ANY,
   "deploy:openTest": ADMIN_ANY,
   "deploy:rerunJob": ADMIN_ANY,
@@ -74767,6 +74893,7 @@ var HUMAN_ONLY_METHODS = [
   "deploy:scan",
   "deploy:release",
   "deploy:confirmTest",
+  "deploy:applyConfig",
   "deploy:promote",
   "deploy:openTest",
   "deploy:putSecret",
@@ -74817,7 +74944,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.666".length > 0 ? "0.2.666" : "dev";
+var version = "0.2.668".length > 0 ? "0.2.668" : "dev";
 
 // src/cli-probe/probe.ts
 var fs86 = __toESM(require("fs"), 1);
@@ -78444,7 +78571,7 @@ async function startDaemon(config) {
     personaDir: (personaId2) => personaStore.personaDirPath(personaId2),
     personaEngine: (personaId2) => {
       const p3 = personaRegistry.get(personaId2);
-      return p3 ? { ...p3.tool ? { tool: p3.tool } : {}, ...p3.model ? { model: p3.model } : {}, ...p3.cloudEngine ? { cloudEngine: p3.cloudEngine } : {} } : void 0;
+      return p3 ? { ...p3.tool ? { tool: p3.tool } : {}, ...p3.model ? { model: p3.model } : {}, ...p3.effort ? { effort: p3.effort } : {}, ...p3.cloudEngine ? { cloudEngine: p3.cloudEngine } : {}, ...p3.size ? { size: p3.size } : {}, ...p3.cpu !== void 0 ? { cpu: p3.cpu } : {}, ...p3.taskConcurrency !== void 0 ? { taskConcurrency: p3.taskConcurrency } : {} } : void 0;
     },
     exec: runCommand,
     // 探本机前刷一次登录 shell 的 PATH：daemon 继承的是 app 启动时的快照，之后装的 CLI（~/.local/bin）看不见。