@clawos-dev/clawd 0.2.749 → 0.2.750

package/dist/a2a/mcp-server.cjs

@@ -21979,13 +21979,14 @@ var DeployEditLockSchema = external_exports.object({
   acquiredAt: external_exports.string(),
   expiresAt: external_exports.string()
 }).strict();
-var DeployRepoAccessSchema = external_exports.enum(["invited", "active"]);
+var DeployRepoAccessSchema = external_exports.enum(["invited", "active", "failed"]);
 var DeployCollaboratorSchema = external_exports.object({
   unionId: external_exports.string(),
   displayName: external_exports.string(),
   githubLogin: external_exports.string().nullable(),
   createdAt: external_exports.string(),
-  repoAccess: DeployRepoAccessSchema.optional()
+  repoAccess: DeployRepoAccessSchema.optional(),
+  repoError: external_exports.string().optional()
 }).strict();
 var DeployAccessSchema = external_exports.object({
   role: DeployPersonaRoleSchema,
@@ -21995,9 +21996,6 @@ var DeployAccessSchema = external_exports.object({
   /** 有协作者的 persona 才走锁 */
   lockRequired: external_exports.boolean()
 }).strict();
-var DeployCollaboratorAddResultSchema = DeployAccessSchema.extend({
-  production: external_exports.object({ ok: external_exports.boolean(), reason: external_exports.string().optional() }).strict()
-}).strict();
 var DeployCollaboratorAddArgsSchema = DeployPersonaArgsSchema.extend({ deviceId: external_exports.string().min(1) }).strict();
 var DeployCollaboratorRemoveArgsSchema = DeployPersonaArgsSchema.extend({ unionId: external_exports.string().min(1) }).strict();
 var DeployEditLockArgsSchema = DeployPersonaArgsSchema.extend({ action: external_exports.enum(["acquire", "renew", "release"]) }).strict();
@@ -24210,7 +24208,7 @@ var METHOD_DOCS = {
     args: DeployPersonaArgsSchema
   },
   "deploy:collaboratorAdd": {
-    summary: "\u52A0\u534F\u4F5C\u8005\uFF08\u4EC5 persona \u7684\u53D1\u5E03\u8005\uFF09\uFF1A\u5165\u53C2\u662F\u8054\u7CFB\u4EBA\u7684 deviceId\uFF0C\u4E2D\u5FC3\u7ECF\u8BBE\u5907\u7ED1\u5B9A\u89E3\u6790\u98DE\u4E66\u8EAB\u4EFD\uFF0C\u5BF9\u65B9\u8FD8\u6CA1\u7ED1\u98DE\u4E66\u8D26\u53F7\u4F1A\u62D2\u3002\u4EE5\u6D4B\u8BD5\u73AF\u5883\u7684\u4E2D\u5FC3\u4E3A\u51C6\uFF0C\u6B63\u5F0F\u73AF\u5883\u7684\u4E2D\u5FC3\u518D\u767B\u8BB0\u4E00\u4EFD\uFF08\u6CA1\u767B\u8BB0\u6210\u53EA\u5728\u54CD\u5E94\u7684 production \u91CC\u63D0\u793A\uFF09\u3002\u56DE\u52A0\u5B8C\u4E4B\u540E\u7684 deploy:access \u89C6\u56FE\u52A0 production\uFF1Bowner-only\u3001human-only",
+    summary: "\u52A0\u534F\u4F5C\u8005\uFF08\u4EC5 persona \u7684\u53D1\u5E03\u8005\uFF09\uFF1A\u5165\u53C2\u662F\u8054\u7CFB\u4EBA\u7684 deviceId\uFF0C\u4E2D\u5FC3\u7ECF\u8BBE\u5907\u7ED1\u5B9A\u89E3\u6790\u98DE\u4E66\u8EAB\u4EFD\uFF0C\u5BF9\u65B9\u8FD8\u6CA1\u7ED1\u98DE\u4E66\u8D26\u53F7\u4F1A\u62D2\u3002\u6D4B\u8BD5\u3001\u6B63\u5F0F\u4E24\u4E2A\u73AF\u5883\u7684\u4E2D\u5FC3\u90FD\u767B\u8BB0\u6210\u529F\u624D\u7B97\u52A0\u4E0A\uFF1A\u6B63\u5F0F\u73AF\u5883\u6CA1\u767B\u8BB0\u6210\uFF08persona \u8FD8\u6CA1\u4E0A\u7EBF\u8FC7\uFF0C\u53D1\u5E03\u8005\u5728\u6B63\u5F0F\u73AF\u5883\u91CC\u8FD8\u6CA1\u6709\u8BB0\u5F55\uFF09\u5C31\u64A4\u56DE\u6D4B\u8BD5\u73AF\u5883\u90A3\u4E00\u4EFD\u5E76\u62A5\u9519\uFF0C\u4E0D\u7559\u534A\u622A\u72B6\u6001\u3002\u767B\u8BB0\u5B8C\u987A\u5E26\u5904\u7406\u4ED3\u5E93\u6743\u9650\uFF08\u89C1 deploy:collaboratorSync\uFF09\u3002\u56DE\u52A0\u5B8C\u4E4B\u540E\u7684 deploy:access \u89C6\u56FE\uFF08\u534F\u4F5C\u8005\u5E26 repoAccess\uFF09\uFF1Bowner-only\u3001human-only",
     args: DeployCollaboratorAddArgsSchema
   },
   "deploy:collaboratorRemove": {
@@ -24218,7 +24216,7 @@ var METHOD_DOCS = {
     args: DeployCollaboratorRemoveArgsSchema
   },
   "deploy:collaboratorSync": {
-    summary: "\u4EC5\u53D1\u5E03\u8005\uFF1A\u628A\u5DF2\u4E0A\u62A5 GitHub \u767B\u5F55\u540D\u7684\u534F\u4F5C\u8005\u9010\u4E2A\u9080\u8BF7\u4E3A\u4ED3\u5E93\u534F\u4F5C\u8005\uFF08write\uFF0C\u5E42\u7B49\uFF09\u3002\u56DE deploy:access \u89C6\u56FE\uFF0C\u534F\u4F5C\u8005\u5E26 repoAccess\uFF1Ainvited = \u9080\u8BF7\u5DF2\u53D1\u3001\u7B49\u5BF9\u65B9\u63A5\u53D7\uFF1Bactive = \u5DF2\u80FD\u63A8\u9001\uFF1Bowner-only",
+    summary: "\u4EC5\u53D1\u5E03\u8005\uFF1A\u9010\u4E2A\u5904\u7406\u534F\u4F5C\u8005\u7684\u4ED3\u5E93\u6743\u9650\u2014\u2014\u5148\u67E5\u5BF9\u65B9 GitHub \u8D26\u53F7\u5BF9\u4ED3\u5E93\u662F\u5426\u5DF2\u6709\u5199\u6743\u9650\uFF08\u6709\u5C31\u4E0D\u9080\u8BF7\uFF09\uFF0C\u6CA1\u6709\u624D\u9080\u8BF7\u4E3A\u4ED3\u5E93\u534F\u4F5C\u8005\uFF08write\uFF0C\u5E42\u7B49\uFF09\uFF1B\u6CA1\u4E0A\u62A5 GitHub \u767B\u5F55\u540D\u7684\u8DF3\u8FC7\uFF08\u5BF9\u65B9\u5173\u8054\u540E\u518D\u540C\u6B65\u5373\u8865\u53D1\uFF09\u3002\u56DE deploy:access \u89C6\u56FE\uFF0C\u534F\u4F5C\u8005\u5E26 repoAccess\uFF1Aactive = \u5DF2\u6709\u5199\u6743\u9650\uFF1Binvited = \u9080\u8BF7\u5DF2\u53D1\u3001\u7B49\u5BF9\u65B9\u63A5\u53D7\uFF1Bfailed = \u5931\u8D25\uFF08\u539F\u56E0\u5728 repoError\uFF09\uFF1B\u7F3A\u5E2D = \u5BF9\u65B9\u8FD8\u6CA1\u5173\u8054 GitHub\uFF1Bowner-only",
     args: DeployPersonaArgsSchema
   },
   "deploy:editLock": {
@@ -24226,7 +24224,7 @@ var METHOD_DOCS = {
     args: DeployEditLockArgsSchema
   },
   "deploy:takeover": {
-    summary: "\u534F\u4F5C\u8005\u63A5\u624B\uFF1A\u672C\u673A\u6CA1\u6709\u8FD9\u4E2A persona \u65F6\uFF0C\u7528\u672C\u673A GitHub \u8EAB\u4EFD\u628A ottin4ttc/<personaId> clone \u6210\u672C\u5730 persona \u76EE\u5F55\uFF0C\u4E4B\u540E\u6CBF\u7528 deploy:*\u3002\u672C\u673A\u5DF2\u6709\u540C\u540D persona \u5C31\u62D2\uFF1B\u8981\u5148\u5728\u4ED3\u5E93\u91CC\u88AB\u9080\u8BF7\u5E76\u63A5\u53D7\uFF1Bowner-only\u3001human-only",
+    summary: "\u534F\u4F5C\u8005\u63A5\u624B\uFF1A\u672C\u673A\u6CA1\u6709\u8FD9\u4E2A persona \u65F6\uFF0C\u7528\u672C\u673A GitHub \u8EAB\u4EFD\u628A ottin4ttc/<personaId> clone \u6210\u672C\u5730 persona \u76EE\u5F55\uFF0C\u4E4B\u540E\u6CBF\u7528 deploy:*\u3002\u672C\u673A\u5DF2\u6709\u540C\u540D persona \u5C31\u62D2\uFF08\u4E0D\u8986\u76D6\u3001\u4E0D\u5408\u5E76\uFF09\uFF1B\u8981\u5148\u5728\u4ED3\u5E93\u91CC\u88AB\u9080\u8BF7\u5E76\u63A5\u53D7\uFF1Bowner-only\u3001human-only",
     args: DeployPersonaArgsSchema
   },
   "githubAuth:get": {

package/dist/app-builder-plugin/mcp-server.cjs

@@ -31907,13 +31907,14 @@ var DeployEditLockSchema = external_exports.object({
   acquiredAt: external_exports.string(),
   expiresAt: external_exports.string()
 }).strict();
-var DeployRepoAccessSchema = external_exports.enum(["invited", "active"]);
+var DeployRepoAccessSchema = external_exports.enum(["invited", "active", "failed"]);
 var DeployCollaboratorSchema = external_exports.object({
   unionId: external_exports.string(),
   displayName: external_exports.string(),
   githubLogin: external_exports.string().nullable(),
   createdAt: external_exports.string(),
-  repoAccess: DeployRepoAccessSchema.optional()
+  repoAccess: DeployRepoAccessSchema.optional(),
+  repoError: external_exports.string().optional()
 }).strict();
 var DeployAccessSchema = external_exports.object({
   role: DeployPersonaRoleSchema,
@@ -31923,9 +31924,6 @@ var DeployAccessSchema = external_exports.object({
   /** 有协作者的 persona 才走锁 */
   lockRequired: external_exports.boolean()
 }).strict();
-var DeployCollaboratorAddResultSchema = DeployAccessSchema.extend({
-  production: external_exports.object({ ok: external_exports.boolean(), reason: external_exports.string().optional() }).strict()
-}).strict();
 var DeployCollaboratorAddArgsSchema = DeployPersonaArgsSchema.extend({ deviceId: external_exports.string().min(1) }).strict();
 var DeployCollaboratorRemoveArgsSchema = DeployPersonaArgsSchema.extend({ unionId: external_exports.string().min(1) }).strict();
 var DeployEditLockArgsSchema = DeployPersonaArgsSchema.extend({ action: external_exports.enum(["acquire", "renew", "release"]) }).strict();
@@ -34138,7 +34136,7 @@ var METHOD_DOCS = {
     args: DeployPersonaArgsSchema
   },
   "deploy:collaboratorAdd": {
-    summary: "\u52A0\u534F\u4F5C\u8005\uFF08\u4EC5 persona \u7684\u53D1\u5E03\u8005\uFF09\uFF1A\u5165\u53C2\u662F\u8054\u7CFB\u4EBA\u7684 deviceId\uFF0C\u4E2D\u5FC3\u7ECF\u8BBE\u5907\u7ED1\u5B9A\u89E3\u6790\u98DE\u4E66\u8EAB\u4EFD\uFF0C\u5BF9\u65B9\u8FD8\u6CA1\u7ED1\u98DE\u4E66\u8D26\u53F7\u4F1A\u62D2\u3002\u4EE5\u6D4B\u8BD5\u73AF\u5883\u7684\u4E2D\u5FC3\u4E3A\u51C6\uFF0C\u6B63\u5F0F\u73AF\u5883\u7684\u4E2D\u5FC3\u518D\u767B\u8BB0\u4E00\u4EFD\uFF08\u6CA1\u767B\u8BB0\u6210\u53EA\u5728\u54CD\u5E94\u7684 production \u91CC\u63D0\u793A\uFF09\u3002\u56DE\u52A0\u5B8C\u4E4B\u540E\u7684 deploy:access \u89C6\u56FE\u52A0 production\uFF1Bowner-only\u3001human-only",
+    summary: "\u52A0\u534F\u4F5C\u8005\uFF08\u4EC5 persona \u7684\u53D1\u5E03\u8005\uFF09\uFF1A\u5165\u53C2\u662F\u8054\u7CFB\u4EBA\u7684 deviceId\uFF0C\u4E2D\u5FC3\u7ECF\u8BBE\u5907\u7ED1\u5B9A\u89E3\u6790\u98DE\u4E66\u8EAB\u4EFD\uFF0C\u5BF9\u65B9\u8FD8\u6CA1\u7ED1\u98DE\u4E66\u8D26\u53F7\u4F1A\u62D2\u3002\u6D4B\u8BD5\u3001\u6B63\u5F0F\u4E24\u4E2A\u73AF\u5883\u7684\u4E2D\u5FC3\u90FD\u767B\u8BB0\u6210\u529F\u624D\u7B97\u52A0\u4E0A\uFF1A\u6B63\u5F0F\u73AF\u5883\u6CA1\u767B\u8BB0\u6210\uFF08persona \u8FD8\u6CA1\u4E0A\u7EBF\u8FC7\uFF0C\u53D1\u5E03\u8005\u5728\u6B63\u5F0F\u73AF\u5883\u91CC\u8FD8\u6CA1\u6709\u8BB0\u5F55\uFF09\u5C31\u64A4\u56DE\u6D4B\u8BD5\u73AF\u5883\u90A3\u4E00\u4EFD\u5E76\u62A5\u9519\uFF0C\u4E0D\u7559\u534A\u622A\u72B6\u6001\u3002\u767B\u8BB0\u5B8C\u987A\u5E26\u5904\u7406\u4ED3\u5E93\u6743\u9650\uFF08\u89C1 deploy:collaboratorSync\uFF09\u3002\u56DE\u52A0\u5B8C\u4E4B\u540E\u7684 deploy:access \u89C6\u56FE\uFF08\u534F\u4F5C\u8005\u5E26 repoAccess\uFF09\uFF1Bowner-only\u3001human-only",
     args: DeployCollaboratorAddArgsSchema
   },
   "deploy:collaboratorRemove": {
@@ -34146,7 +34144,7 @@ var METHOD_DOCS = {
     args: DeployCollaboratorRemoveArgsSchema
   },
   "deploy:collaboratorSync": {
-    summary: "\u4EC5\u53D1\u5E03\u8005\uFF1A\u628A\u5DF2\u4E0A\u62A5 GitHub \u767B\u5F55\u540D\u7684\u534F\u4F5C\u8005\u9010\u4E2A\u9080\u8BF7\u4E3A\u4ED3\u5E93\u534F\u4F5C\u8005\uFF08write\uFF0C\u5E42\u7B49\uFF09\u3002\u56DE deploy:access \u89C6\u56FE\uFF0C\u534F\u4F5C\u8005\u5E26 repoAccess\uFF1Ainvited = \u9080\u8BF7\u5DF2\u53D1\u3001\u7B49\u5BF9\u65B9\u63A5\u53D7\uFF1Bactive = \u5DF2\u80FD\u63A8\u9001\uFF1Bowner-only",
+    summary: "\u4EC5\u53D1\u5E03\u8005\uFF1A\u9010\u4E2A\u5904\u7406\u534F\u4F5C\u8005\u7684\u4ED3\u5E93\u6743\u9650\u2014\u2014\u5148\u67E5\u5BF9\u65B9 GitHub \u8D26\u53F7\u5BF9\u4ED3\u5E93\u662F\u5426\u5DF2\u6709\u5199\u6743\u9650\uFF08\u6709\u5C31\u4E0D\u9080\u8BF7\uFF09\uFF0C\u6CA1\u6709\u624D\u9080\u8BF7\u4E3A\u4ED3\u5E93\u534F\u4F5C\u8005\uFF08write\uFF0C\u5E42\u7B49\uFF09\uFF1B\u6CA1\u4E0A\u62A5 GitHub \u767B\u5F55\u540D\u7684\u8DF3\u8FC7\uFF08\u5BF9\u65B9\u5173\u8054\u540E\u518D\u540C\u6B65\u5373\u8865\u53D1\uFF09\u3002\u56DE deploy:access \u89C6\u56FE\uFF0C\u534F\u4F5C\u8005\u5E26 repoAccess\uFF1Aactive = \u5DF2\u6709\u5199\u6743\u9650\uFF1Binvited = \u9080\u8BF7\u5DF2\u53D1\u3001\u7B49\u5BF9\u65B9\u63A5\u53D7\uFF1Bfailed = \u5931\u8D25\uFF08\u539F\u56E0\u5728 repoError\uFF09\uFF1B\u7F3A\u5E2D = \u5BF9\u65B9\u8FD8\u6CA1\u5173\u8054 GitHub\uFF1Bowner-only",
     args: DeployPersonaArgsSchema
   },
   "deploy:editLock": {
@@ -34154,7 +34152,7 @@ var METHOD_DOCS = {
     args: DeployEditLockArgsSchema
   },
   "deploy:takeover": {
-    summary: "\u534F\u4F5C\u8005\u63A5\u624B\uFF1A\u672C\u673A\u6CA1\u6709\u8FD9\u4E2A persona \u65F6\uFF0C\u7528\u672C\u673A GitHub \u8EAB\u4EFD\u628A ottin4ttc/<personaId> clone \u6210\u672C\u5730 persona \u76EE\u5F55\uFF0C\u4E4B\u540E\u6CBF\u7528 deploy:*\u3002\u672C\u673A\u5DF2\u6709\u540C\u540D persona \u5C31\u62D2\uFF1B\u8981\u5148\u5728\u4ED3\u5E93\u91CC\u88AB\u9080\u8BF7\u5E76\u63A5\u53D7\uFF1Bowner-only\u3001human-only",
+    summary: "\u534F\u4F5C\u8005\u63A5\u624B\uFF1A\u672C\u673A\u6CA1\u6709\u8FD9\u4E2A persona \u65F6\uFF0C\u7528\u672C\u673A GitHub \u8EAB\u4EFD\u628A ottin4ttc/<personaId> clone \u6210\u672C\u5730 persona \u76EE\u5F55\uFF0C\u4E4B\u540E\u6CBF\u7528 deploy:*\u3002\u672C\u673A\u5DF2\u6709\u540C\u540D persona \u5C31\u62D2\uFF08\u4E0D\u8986\u76D6\u3001\u4E0D\u5408\u5E76\uFF09\uFF1B\u8981\u5148\u5728\u4ED3\u5E93\u91CC\u88AB\u9080\u8BF7\u5E76\u63A5\u53D7\uFF1Bowner-only\u3001human-only",
     args: DeployPersonaArgsSchema
   },
   "githubAuth:get": {

package/dist/cli.cjs

@@ -6662,7 +6662,7 @@ function changedConfigKeys(a2, b3) {
 function repoSlug(url) {
   return url.trim().replace(/^git@[^:]+:/, "").replace(/^https?:\/\/[^/]+\//, "").replace(/\.git$/, "");
 }
-var DeployFileSchema, SCAN_BASE_KINDS, ScanBaseKindSchema, DeployScanStatusSchema, DeployScanSchema, DeployReleasedSchema, DEPLOY_PROMOTION_PHASES, DeployPromotionSchema, DeployEngineChannelSchema, DeployEngineChannelsSchema, DeployScanFileSchema, DeployRepoSchema, DeploySecretPresenceSchema, ENGINE_AUTH_SECRETS, ENGINE_AUTH_PARTIAL_BLOCKER, DEPLOY_STAGE_STATUSES, DeployStageStatusSchema, DEPLOY_VERIFY_STAGE, DEPLOY_STAGE_KEYS, DeployStageKeySchema, DeployJobSchema, DeployRunSchema, CLOUD_ENGINES, DeployUnpublishRunSchema, ReservationStateSchema, DeployCloudStatusSchema, DeployStateSchema, DeployUnpublishResultSchema, DeployLocalStateSchema, DeployPatchResultSchema, DeploySecretsResultSchema, DEPLOY_WORKFLOW_VERSION, workflowVersionForConfigKeys, DEFAULT_TASK_CONCURRENCY, CONFIG_KEYS, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployPersonaRoleSchema, DeployEditLockSchema, DeployRepoAccessSchema, DeployCollaboratorSchema, DeployAccessSchema, DeployCollaboratorAddResultSchema, DeployCollaboratorAddArgsSchema, DeployCollaboratorRemoveArgsSchema, DeployEditLockArgsSchema, DeployEditLockResultSchema, DeployTakeoverResultSchema, DeployGetArgsSchema, DeployScanArgsSchema, DeployReleaseArgsSchema, DeployConfirmTestArgsSchema, DeployPromoteArgsSchema, DeployApplyConfigArgsSchema, DeployOpenTestArgsSchema, DeployEnvironmentArgsSchema, DeployConfirmTestResultSchema, DeployPromoteResultSchema, DeployOpenTestResultSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeploySetEngineAuthArgsSchema, DeployRerunJobArgsSchema, DEPLOY_STALE_BASE_ERROR, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
+var DeployFileSchema, SCAN_BASE_KINDS, ScanBaseKindSchema, DeployScanStatusSchema, DeployScanSchema, DeployReleasedSchema, DEPLOY_PROMOTION_PHASES, DeployPromotionSchema, DeployEngineChannelSchema, DeployEngineChannelsSchema, DeployScanFileSchema, DeployRepoSchema, DeploySecretPresenceSchema, ENGINE_AUTH_SECRETS, ENGINE_AUTH_PARTIAL_BLOCKER, DEPLOY_STAGE_STATUSES, DeployStageStatusSchema, DEPLOY_VERIFY_STAGE, DEPLOY_STAGE_KEYS, DeployStageKeySchema, DeployJobSchema, DeployRunSchema, CLOUD_ENGINES, DeployUnpublishRunSchema, ReservationStateSchema, DeployCloudStatusSchema, DeployStateSchema, DeployUnpublishResultSchema, DeployLocalStateSchema, DeployPatchResultSchema, DeploySecretsResultSchema, DEPLOY_WORKFLOW_VERSION, workflowVersionForConfigKeys, DEFAULT_TASK_CONCURRENCY, CONFIG_KEYS, DeployReleaseResultSchema, DeployPersonaArgsSchema, DeployPersonaRoleSchema, DeployEditLockSchema, DeployRepoAccessSchema, DeployCollaboratorSchema, DeployAccessSchema, DeployCollaboratorAddArgsSchema, DeployCollaboratorRemoveArgsSchema, DeployEditLockArgsSchema, DeployEditLockResultSchema, DeployTakeoverResultSchema, DeployGetArgsSchema, DeployScanArgsSchema, DeployReleaseArgsSchema, DeployConfirmTestArgsSchema, DeployPromoteArgsSchema, DeployApplyConfigArgsSchema, DeployOpenTestArgsSchema, DeployEnvironmentArgsSchema, DeployConfirmTestResultSchema, DeployPromoteResultSchema, DeployOpenTestResultSchema, DeployPatchArgsSchema, DeployPutSecretArgsSchema, DeploySetEngineAuthArgsSchema, DeployRerunJobArgsSchema, DEPLOY_STALE_BASE_ERROR, DeployReportFindingArgsSchema, DeployFinishScanArgsSchema, PERSONA_REPO_ORG;
 var init_deploy_schemas = __esm({
   "../protocol/src/deploy-schemas.ts"() {
     "use strict";
@@ -6894,13 +6894,14 @@ var init_deploy_schemas = __esm({
       acquiredAt: external_exports.string(),
       expiresAt: external_exports.string()
     }).strict();
-    DeployRepoAccessSchema = external_exports.enum(["invited", "active"]);
+    DeployRepoAccessSchema = external_exports.enum(["invited", "active", "failed"]);
     DeployCollaboratorSchema = external_exports.object({
       unionId: external_exports.string(),
       displayName: external_exports.string(),
       githubLogin: external_exports.string().nullable(),
       createdAt: external_exports.string(),
-      repoAccess: DeployRepoAccessSchema.optional()
+      repoAccess: DeployRepoAccessSchema.optional(),
+      repoError: external_exports.string().optional()
     }).strict();
     DeployAccessSchema = external_exports.object({
       role: DeployPersonaRoleSchema,
@@ -6910,9 +6911,6 @@ var init_deploy_schemas = __esm({
       /** 有协作者的 persona 才走锁 */
       lockRequired: external_exports.boolean()
     }).strict();
-    DeployCollaboratorAddResultSchema = DeployAccessSchema.extend({
-      production: external_exports.object({ ok: external_exports.boolean(), reason: external_exports.string().optional() }).strict()
-    }).strict();
     DeployCollaboratorAddArgsSchema = DeployPersonaArgsSchema.extend({ deviceId: external_exports.string().min(1) }).strict();
     DeployCollaboratorRemoveArgsSchema = DeployPersonaArgsSchema.extend({ unionId: external_exports.string().min(1) }).strict();
     DeployEditLockArgsSchema = DeployPersonaArgsSchema.extend({ action: external_exports.enum(["acquire", "renew", "release"]) }).strict();
@@ -9433,7 +9431,7 @@ var init_methods = __esm({
         args: DeployPersonaArgsSchema
       },
       "deploy:collaboratorAdd": {
-        summary: "\u52A0\u534F\u4F5C\u8005\uFF08\u4EC5 persona \u7684\u53D1\u5E03\u8005\uFF09\uFF1A\u5165\u53C2\u662F\u8054\u7CFB\u4EBA\u7684 deviceId\uFF0C\u4E2D\u5FC3\u7ECF\u8BBE\u5907\u7ED1\u5B9A\u89E3\u6790\u98DE\u4E66\u8EAB\u4EFD\uFF0C\u5BF9\u65B9\u8FD8\u6CA1\u7ED1\u98DE\u4E66\u8D26\u53F7\u4F1A\u62D2\u3002\u4EE5\u6D4B\u8BD5\u73AF\u5883\u7684\u4E2D\u5FC3\u4E3A\u51C6\uFF0C\u6B63\u5F0F\u73AF\u5883\u7684\u4E2D\u5FC3\u518D\u767B\u8BB0\u4E00\u4EFD\uFF08\u6CA1\u767B\u8BB0\u6210\u53EA\u5728\u54CD\u5E94\u7684 production \u91CC\u63D0\u793A\uFF09\u3002\u56DE\u52A0\u5B8C\u4E4B\u540E\u7684 deploy:access \u89C6\u56FE\u52A0 production\uFF1Bowner-only\u3001human-only",
+        summary: "\u52A0\u534F\u4F5C\u8005\uFF08\u4EC5 persona \u7684\u53D1\u5E03\u8005\uFF09\uFF1A\u5165\u53C2\u662F\u8054\u7CFB\u4EBA\u7684 deviceId\uFF0C\u4E2D\u5FC3\u7ECF\u8BBE\u5907\u7ED1\u5B9A\u89E3\u6790\u98DE\u4E66\u8EAB\u4EFD\uFF0C\u5BF9\u65B9\u8FD8\u6CA1\u7ED1\u98DE\u4E66\u8D26\u53F7\u4F1A\u62D2\u3002\u6D4B\u8BD5\u3001\u6B63\u5F0F\u4E24\u4E2A\u73AF\u5883\u7684\u4E2D\u5FC3\u90FD\u767B\u8BB0\u6210\u529F\u624D\u7B97\u52A0\u4E0A\uFF1A\u6B63\u5F0F\u73AF\u5883\u6CA1\u767B\u8BB0\u6210\uFF08persona \u8FD8\u6CA1\u4E0A\u7EBF\u8FC7\uFF0C\u53D1\u5E03\u8005\u5728\u6B63\u5F0F\u73AF\u5883\u91CC\u8FD8\u6CA1\u6709\u8BB0\u5F55\uFF09\u5C31\u64A4\u56DE\u6D4B\u8BD5\u73AF\u5883\u90A3\u4E00\u4EFD\u5E76\u62A5\u9519\uFF0C\u4E0D\u7559\u534A\u622A\u72B6\u6001\u3002\u767B\u8BB0\u5B8C\u987A\u5E26\u5904\u7406\u4ED3\u5E93\u6743\u9650\uFF08\u89C1 deploy:collaboratorSync\uFF09\u3002\u56DE\u52A0\u5B8C\u4E4B\u540E\u7684 deploy:access \u89C6\u56FE\uFF08\u534F\u4F5C\u8005\u5E26 repoAccess\uFF09\uFF1Bowner-only\u3001human-only",
         args: DeployCollaboratorAddArgsSchema
       },
       "deploy:collaboratorRemove": {
@@ -9441,7 +9439,7 @@ var init_methods = __esm({
         args: DeployCollaboratorRemoveArgsSchema
       },
       "deploy:collaboratorSync": {
-        summary: "\u4EC5\u53D1\u5E03\u8005\uFF1A\u628A\u5DF2\u4E0A\u62A5 GitHub \u767B\u5F55\u540D\u7684\u534F\u4F5C\u8005\u9010\u4E2A\u9080\u8BF7\u4E3A\u4ED3\u5E93\u534F\u4F5C\u8005\uFF08write\uFF0C\u5E42\u7B49\uFF09\u3002\u56DE deploy:access \u89C6\u56FE\uFF0C\u534F\u4F5C\u8005\u5E26 repoAccess\uFF1Ainvited = \u9080\u8BF7\u5DF2\u53D1\u3001\u7B49\u5BF9\u65B9\u63A5\u53D7\uFF1Bactive = \u5DF2\u80FD\u63A8\u9001\uFF1Bowner-only",
+        summary: "\u4EC5\u53D1\u5E03\u8005\uFF1A\u9010\u4E2A\u5904\u7406\u534F\u4F5C\u8005\u7684\u4ED3\u5E93\u6743\u9650\u2014\u2014\u5148\u67E5\u5BF9\u65B9 GitHub \u8D26\u53F7\u5BF9\u4ED3\u5E93\u662F\u5426\u5DF2\u6709\u5199\u6743\u9650\uFF08\u6709\u5C31\u4E0D\u9080\u8BF7\uFF09\uFF0C\u6CA1\u6709\u624D\u9080\u8BF7\u4E3A\u4ED3\u5E93\u534F\u4F5C\u8005\uFF08write\uFF0C\u5E42\u7B49\uFF09\uFF1B\u6CA1\u4E0A\u62A5 GitHub \u767B\u5F55\u540D\u7684\u8DF3\u8FC7\uFF08\u5BF9\u65B9\u5173\u8054\u540E\u518D\u540C\u6B65\u5373\u8865\u53D1\uFF09\u3002\u56DE deploy:access \u89C6\u56FE\uFF0C\u534F\u4F5C\u8005\u5E26 repoAccess\uFF1Aactive = \u5DF2\u6709\u5199\u6743\u9650\uFF1Binvited = \u9080\u8BF7\u5DF2\u53D1\u3001\u7B49\u5BF9\u65B9\u63A5\u53D7\uFF1Bfailed = \u5931\u8D25\uFF08\u539F\u56E0\u5728 repoError\uFF09\uFF1B\u7F3A\u5E2D = \u5BF9\u65B9\u8FD8\u6CA1\u5173\u8054 GitHub\uFF1Bowner-only",
         args: DeployPersonaArgsSchema
       },
       "deploy:editLock": {
@@ -9449,7 +9447,7 @@ var init_methods = __esm({
         args: DeployEditLockArgsSchema
       },
       "deploy:takeover": {
-        summary: "\u534F\u4F5C\u8005\u63A5\u624B\uFF1A\u672C\u673A\u6CA1\u6709\u8FD9\u4E2A persona \u65F6\uFF0C\u7528\u672C\u673A GitHub \u8EAB\u4EFD\u628A ottin4ttc/<personaId> clone \u6210\u672C\u5730 persona \u76EE\u5F55\uFF0C\u4E4B\u540E\u6CBF\u7528 deploy:*\u3002\u672C\u673A\u5DF2\u6709\u540C\u540D persona \u5C31\u62D2\uFF1B\u8981\u5148\u5728\u4ED3\u5E93\u91CC\u88AB\u9080\u8BF7\u5E76\u63A5\u53D7\uFF1Bowner-only\u3001human-only",
+        summary: "\u534F\u4F5C\u8005\u63A5\u624B\uFF1A\u672C\u673A\u6CA1\u6709\u8FD9\u4E2A persona \u65F6\uFF0C\u7528\u672C\u673A GitHub \u8EAB\u4EFD\u628A ottin4ttc/<personaId> clone \u6210\u672C\u5730 persona \u76EE\u5F55\uFF0C\u4E4B\u540E\u6CBF\u7528 deploy:*\u3002\u672C\u673A\u5DF2\u6709\u540C\u540D persona \u5C31\u62D2\uFF08\u4E0D\u8986\u76D6\u3001\u4E0D\u5408\u5E76\uFF09\uFF1B\u8981\u5148\u5728\u4ED3\u5E93\u91CC\u88AB\u9080\u8BF7\u5E76\u63A5\u53D7\uFF1Bowner-only\u3001human-only",
         args: DeployPersonaArgsSchema
       },
       "githubAuth:get": {
@@ -63324,7 +63322,11 @@ function createGithubApi(args) {
       await must("POST", `/repos/${slug}/actions/workflows/${encodeURIComponent(file)}/dispatches`, "\u89E6\u53D1\u6D41\u6C34\u7EBF", { ref, ...inputs ? { inputs } : {} });
     },
     async addCollaborator(slug, login) {
-      const r2 = await request("PUT", `/repos/${slug}/collaborators/${encodeURIComponent(login)}`, { permission: "push" });
+      const path112 = `/repos/${slug}/collaborators/${encodeURIComponent(login)}`;
+      const has = await request("GET", `${path112}/permission`);
+      const permission = has.json?.permission;
+      if (has.status >= 200 && has.status < 300 && (permission === "admin" || permission === "write")) return "active";
+      const r2 = await request("PUT", path112, { permission: "push" });
       if (r2.status === 201) return "invited";
       if (r2.status === 204) return "active";
       throw new GithubApiError(r2.status, explain(r2.status, `\u9080\u8BF7 ${login} \u8FDB\u4ED3\u5E93`, r2.json));
@@ -65679,24 +65681,66 @@ function buildDeployHandlers(deps) {
     const view2 = await accessView(cloudId);
     return { response: { type: "deploy:access", ...view2 } };
   };
+  async function withRepoAccess(slug, collaborators) {
+    if (!collaborators.some((c2) => c2.githubLogin)) return collaborators;
+    let api;
+    try {
+      ({ api } = await requireGithub());
+    } catch (err) {
+      const repoError = toClawdError(err).message;
+      return collaborators.map((c2) => c2.githubLogin ? { ...c2, repoAccess: "failed", repoError } : c2);
+    }
+    const out = [];
+    for (const c2 of collaborators) {
+      if (!c2.githubLogin) {
+        out.push(c2);
+        continue;
+      }
+      try {
+        out.push({ ...c2, repoAccess: await api.addCollaborator(slug, c2.githubLogin) });
+      } catch (err) {
+        out.push({ ...c2, repoAccess: "failed", repoError: toClawdError(err).message });
+      }
+    }
+    return out;
+  }
   const collaboratorAdd = async (frame, _client, ctx) => {
     ensureOwner(ctx);
     const { personaId: personaId2, deviceId } = parseArgs2(DeployCollaboratorAddArgsSchema, frame, "deploy:collaboratorAdd");
-    const cloudId = await cloudIdOf(personaId2);
+    const repo2 = await repoInfo(deps.exec, mustPersona(personaId2));
+    if (!repo2) throw invalid("\u8FD9\u4E2A persona \u8FD8\u6CA1\u4E0A\u8FC7\u4E91");
+    const cloudId = cloudPersonaIdOf(repo2.url);
     const collaboration = mustCollaboration();
+    let before;
+    try {
+      before = await collaboration.access("integration", cloudId);
+    } catch (err) {
+      if (err instanceof CentralClientError && err.status === 403) throw invalid("\u8FD9\u4E2A persona \u8FD8\u6CA1\u53D1\u5E03\u5230\u4E91\u4E0A\uFF1A\u9996\u6B21\u53D1\u5E03\u4E4B\u540E\u624D\u80FD\u6DFB\u52A0\u534F\u4F5C\u8005");
+      throw centralInvalid(err);
+    }
+    if (before.role !== "owner") throw invalid("\u53EA\u6709\u8FD9\u4E2A persona \u7684\u53D1\u5E03\u8005\u80FD\u6DFB\u52A0\u534F\u4F5C\u8005");
     try {
       await collaboration.add("integration", cloudId, deviceId);
     } catch (err) {
       throw centralInvalid(err);
     }
-    let production;
     try {
       await collaboration.add("production", cloudId, deviceId);
-      production = { ok: true };
     } catch (err) {
-      production = { ok: false, reason: centralMessage(err) };
+      const known = new Set(before.collaborators.map((c2) => c2.unionId));
+      let undone = true;
+      try {
+        const after = await collaboration.access("integration", cloudId);
+        for (const c2 of after.collaborators) if (!known.has(c2.unionId)) await collaboration.remove("integration", cloudId, c2.unionId);
+      } catch (undoErr) {
+        undone = false;
+        deps.warn?.("rollback collaborator in integration failed", { cloudId, error: centralMessage(undoErr) });
+      }
+      const why = err instanceof CentralClientError && err.status === 403 ? "\u8FD9\u4E2A persona \u8FD8\u6CA1\u4E0A\u7EBF\u5230\u6B63\u5F0F\u73AF\u5883\uFF08\u9996\u6B21\u4E0A\u7EBF\u624D\u4F1A\u5728\u6B63\u5F0F\u73AF\u5883\u767B\u8BB0\u53D1\u5E03\u8005\uFF09\uFF0C\u5148\u4E0A\u7EBF\u4E00\u6B21\u518D\u6DFB\u52A0\u534F\u4F5C\u8005" : `\u6B63\u5F0F\u73AF\u5883\u767B\u8BB0\u5931\u8D25\uFF1A${centralMessage(err)}`;
+      throw invalid(`${why}\uFF1B${undone ? "\u6CA1\u6709\u6DFB\u52A0" : "\u6D4B\u8BD5\u73AF\u5883\u90A3\u4E00\u4EFD\u6CA1\u80FD\u64A4\u56DE\uFF0C\u8BF7\u5728\u534F\u4F5C\u8005\u5217\u8868\u91CC\u624B\u52A8\u79FB\u9664"}`);
     }
-    return { response: { type: "deploy:collaboratorAdd", ...await accessView(cloudId), production } };
+    const view2 = await accessView(cloudId);
+    return { response: { type: "deploy:collaboratorAdd", ...view2, collaborators: await withRepoAccess(repoSlug(repo2.url), view2.collaborators) } };
   };
   const collaboratorRemove = async (frame, _client, ctx) => {
     ensureOwner(ctx);
@@ -65719,21 +65763,7 @@ function buildDeployHandlers(deps) {
     if (!repo2) throw invalid("\u8FD9\u4E2A persona \u8FD8\u6CA1\u4E0A\u8FC7\u4E91");
     const view2 = await accessView(cloudPersonaIdOf(repo2.url));
     if (view2.role !== "owner") throw invalid("\u53EA\u6709\u8FD9\u4E2A persona \u7684\u53D1\u5E03\u8005\u80FD\u9080\u8BF7\u534F\u4F5C\u8005\u8FDB\u4ED3\u5E93");
-    const { api } = await requireGithub();
-    const slug = repoSlug(repo2.url);
-    const collaborators = [];
-    for (const c2 of view2.collaborators) {
-      if (!c2.githubLogin) {
-        collaborators.push(c2);
-        continue;
-      }
-      try {
-        collaborators.push({ ...c2, repoAccess: await api.addCollaborator(slug, c2.githubLogin) });
-      } catch (err) {
-        throw toClawdError(err);
-      }
-    }
-    return { response: { type: "deploy:collaboratorSync", ...view2, collaborators } };
+    return { response: { type: "deploy:collaboratorSync", ...view2, collaborators: await withRepoAccess(repoSlug(repo2.url), view2.collaborators) } };
   };
   const editLockHandler = async (frame, _client, ctx) => {
     ensureOwner(ctx);
@@ -65751,7 +65781,7 @@ function buildDeployHandlers(deps) {
   const takeover = async (frame, _client, ctx) => {
     ensureOwner(ctx);
     const { personaId: personaId2 } = parseArgs2(DeployPersonaArgsSchema, frame, "deploy:takeover");
-    if (deps.hasPersona(personaId2)) throw invalid("\u672C\u673A\u5DF2\u7ECF\u6709\u8FD9\u4E2A persona \u4E86");
+    if (deps.hasPersona(personaId2)) throw invalid(`\u672C\u673A\u5DF2\u7ECF\u6709\u540C\u540D persona\u300C${personaId2}\u300D\uFF0C\u6CA1\u6709\u8986\u76D6\u5B83\uFF1A\u60F3\u7528\u4E91\u4E0A\u7684\u7248\u672C\uFF0C\u8BF7\u5148\u628A\u672C\u673A\u8FD9\u4E2A\u6539\u540D\u6216\u5220\u9664`);
     if (!/^[a-z0-9-]{1,100}$/.test(personaId2)) throw invalid("persona \u540D\u53EA\u8BA4\u5C0F\u5199\u5B57\u6BCD\u3001\u6570\u5B57\u548C\u8FDE\u5B57\u7B26");
     try {
       await mustCollaboration().access("integration", personaId2);
@@ -76434,7 +76464,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.749".length > 0 ? "0.2.749" : "dev";
+var version = "0.2.750".length > 0 ? "0.2.750" : "dev";
 
 // src/cli-probe/probe.ts
 var fs87 = __toESM(require("fs"), 1);