@clawos-dev/clawd 0.2.723 → 0.2.725

package/dist/app-builder-plugin/mcp-server.cjs

@@ -31785,7 +31785,9 @@ var DeployJobSchema = external_exports.object({
   /** GitHub 的 job databaseId，`gh run rerun --job` 要用。还没跑起来的段没有 */
   jobId: external_exports.number().optional(),
   startedAt: external_exports.number().optional(),
-  completedAt: external_exports.number().optional()
+  completedAt: external_exports.number().optional(),
+  /** 只有 build 段：构建期 CLI 校验没过、只报警没拦的条目（一条一句） */
+  cliWarnings: external_exports.array(external_exports.string()).optional()
 }).strict();
 var DeployRunSchema = external_exports.object({
   runId: external_exports.number(),

package/dist/cli.cjs

@@ -6763,7 +6763,9 @@ var init_deploy_schemas = __esm({
       /** GitHub 的 job databaseId，`gh run rerun --job` 要用。还没跑起来的段没有 */
       jobId: external_exports.number().optional(),
       startedAt: external_exports.number().optional(),
-      completedAt: external_exports.number().optional()
+      completedAt: external_exports.number().optional(),
+      /** 只有 build 段：构建期 CLI 校验没过、只报警没拦的条目（一条一句） */
+      cliWarnings: external_exports.array(external_exports.string()).optional()
     }).strict();
     DeployRunSchema = external_exports.object({
       runId: external_exports.number(),
@@ -54757,6 +54759,7 @@ function codexMcpCliArgs(defs) {
       ...d2.args && d2.args.length > 0 ? { args: d2.args } : {},
       ...d2.env && Object.keys(d2.env).length > 0 ? { env: d2.env } : {}
     };
+    if (d2.daemonOwned) cfg.default_tools_approval_mode = "approve";
     const key = /^[A-Za-z0-9_-]+$/.test(d2.name) ? d2.name : JSON.stringify(d2.name);
     out.push("-c", `mcp_servers.${key}=${tomlValue(cfg)}`);
   }
@@ -55000,7 +55003,9 @@ function loadMcpServerDefs(args) {
   const out = [];
   const seen = /* @__PURE__ */ new Set();
   const sources = [...args.mcpConfigPaths, import_node_path25.default.join(args.cwd, ".mcp.json")];
+  const daemonOwned = new Set(args.daemonOwnedPaths ?? []);
   for (const file of sources) {
+    const owned = daemonOwned.has(file) ? { daemonOwned: true } : {};
     let parsed;
     try {
       parsed = JSON.parse(import_node_fs26.default.readFileSync(file, "utf8"));
@@ -55032,7 +55037,8 @@ function loadMcpServerDefs(args) {
           name,
           url: def.url,
           ...Object.keys(headers).length > 0 ? { httpHeaders: headers } : {},
-          ...bearerTokenEnvVar ? { bearerTokenEnvVar } : {}
+          ...bearerTokenEnvVar ? { bearerTokenEnvVar } : {},
+          ...owned
         });
         continue;
       }
@@ -55059,7 +55065,8 @@ function loadMcpServerDefs(args) {
         name,
         command: def.command,
         ...Array.isArray(def.args) && def.args.every((a2) => typeof a2 === "string") ? { args: def.args } : {},
-        ...Object.keys(env).length > 0 ? { env } : {}
+        ...Object.keys(env).length > 0 ? { env } : {},
+        ...owned
       });
     }
   }
@@ -55259,6 +55266,8 @@ function createCodexSession(ctx, sink, deps = {}) {
     ...codexMcpCliArgs(
       loadMcpServerDefs({
         mcpConfigPaths: (ctx.mcpConfigs ?? []).map((m3) => m3.path),
+        // persona-secrets 是 persona 自己 .mcp.json 的渲染产物，不算 daemon 自带
+        daemonOwnedPaths: (ctx.mcpConfigs ?? []).filter((m3) => !m3.id.startsWith(PERSONA_SECRET_MCP_ID_PREFIX)).map((m3) => m3.path),
         cwd: ctx.cwd,
         baseEnv: clawdEnv,
         logger: deps.logger
@@ -63906,6 +63915,15 @@ function packageNeedsRereport(pkg, probed) {
 init_protocol();
 var INTEGRATION_CONFIG_RUN_PREFIX = "persona-integration-config-";
 var runsOf = (slug, file, query) => `/repos/${slug}/actions/workflows/${encodeURIComponent(file)}/runs?${query}`;
+var CLI_WARNING_TITLE = "CLI version check";
+async function withCliWarnings(api, slug, jobs) {
+  const build = jobs.find((j2) => j2.key === "build");
+  if (build?.status !== "done" || build.jobId === void 0) return { jobs, read: true };
+  const listed = await api.getJson(`/repos/${slug}/check-runs/${build.jobId}/annotations?per_page=100`);
+  if (!Array.isArray(listed)) return { jobs, read: false };
+  const warnings = listed.filter((a2) => a2?.annotation_level === "warning" && a2.title === CLI_WARNING_TITLE && typeof a2.message === "string").flatMap((a2) => String(a2.message).split("\n").filter(Boolean));
+  return { jobs: warnings.length ? jobs.map((j2) => j2 === build ? { ...j2, cliWarnings: warnings } : j2) : jobs, read: true };
+}
 var pipelineJobKey = (name) => DEPLOY_STAGE_KEYS.find((k3) => name === k3 || name.startsWith(`${k3} `));
 function stageStatusOf(status, conclusion) {
   if (status === "queued" || status === "requested" || status === "pending") return "pending";
@@ -63994,8 +64012,9 @@ async function readPinnedRun(api, slug, raw, environment, promotionId, jobsCache
       if (listed.jobs.length < 100 && (listed.total_count === void 0 || page * 100 >= listed.total_count)) break;
       if (page === 30) return void 0;
     }
-    jobs = DEPLOY_STAGE_KEYS.map((key) => byKey.get(key)).filter((j2) => j2 !== void 0);
-    if (status === "completed" && jobsCache) {
+    const annotated = await withCliWarnings(api, slug, DEPLOY_STAGE_KEYS.map((key) => byKey.get(key)).filter((j2) => j2 !== void 0));
+    jobs = annotated.jobs;
+    if (status === "completed" && jobsCache && annotated.read) {
       if (jobsCache.size >= COMPLETED_JOBS_CACHE_MAX) jobsCache.delete(jobsCache.keys().next().value);
       jobsCache.set(cacheKey, jobs);
     }
@@ -64034,7 +64053,7 @@ async function fetchRun(api, slug, query) {
     status: runStatusOf(String(raw.status ?? "")),
     htmlUrl: raw.html_url,
     // 按流水线的顺序排，不跟着 GitHub 返回的顺序走
-    jobs: DEPLOY_STAGE_KEYS.map((k3) => byKey.get(k3)).filter((j2) => j2 !== void 0)
+    jobs: (await withCliWarnings(api, slug, DEPLOY_STAGE_KEYS.map((k3) => byKey.get(k3)).filter((j2) => j2 !== void 0))).jobs
   };
 }
 async function latestUnpublish(api, slug, environment) {
@@ -76126,7 +76145,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.723".length > 0 ? "0.2.723" : "dev";
+var version = "0.2.725".length > 0 ? "0.2.725" : "dev";
 
 // src/cli-probe/probe.ts
 var fs87 = __toESM(require("fs"), 1);