@downcity/agent 1.1.32 → 1.1.43

package/src/runtime/server/http/control/AuthControlService.ts

@@ -4,35 +4,39 @@
  * 关键点（中文）
  * - 这是 control 侧的 auth 管理面 facade。
  * - 它通过 auth plugin action 读取与写入授权数据，但自身不属于 plugin 内核。
- * - 这样调用方不需要知道 plugin action 名称，也不需要依赖 `plugin/builtins/auth/*` 目录。
+ * - 这样调用方不需要知道 plugin action 名称，也不需要依赖具体 auth plugin 源码目录。
  */
 
-import type { AgentContext } from "@/core/AgentContextTypes.js";
+import type { AgentContext } from "@/types/runtime/agent/AgentContext.js";
 import type { JsonObject } from "@/types/common/Json.js";
 import type { AuthControlPayload } from "@/runtime/server/http/control/types/AuthControl.js";
-import type {
-  AuthSetUserRolePayload,
-  AuthWriteConfigPayload,
-  ChatAuthorizationConfig,
-  ChatAuthorizationSnapshot,
-} from "@/plugin/builtins/auth/types/AuthPlugin.js";
-import {
-  AUTH_ACTIONS,
-  AUTH_PLUGIN_NAME,
-  CHAT_AUTHORIZATION_CATALOG,
-} from "@/plugin/builtins/auth/types/AuthPlugin.js";
+
+const AUTH_PLUGIN_NAME = "auth";
+const AUTH_ACTIONS = {
+  snapshot: "snapshot",
+  readConfig: "readConfig",
+  writeConfig: "writeConfig",
+  setUserRole: "setUserRole",
+} as const;
+const CHAT_AUTHORIZATION_CATALOG: JsonObject = {
+  channels: ["telegram", "feishu", "qq"],
+};
 
 function toRecord(value: unknown): Record<string, unknown> {
   if (!value || typeof value !== "object" || Array.isArray(value)) return {};
   return value as Record<string, unknown>;
 }
 
-function readSnapshot(value: unknown): ChatAuthorizationSnapshot {
+function readSnapshot(value: unknown): {
+  config: JsonObject;
+  users: JsonObject[];
+  chats: JsonObject[];
+} {
   const record = toRecord(value);
   return {
-    config: toRecord(record.config) as unknown as ChatAuthorizationConfig,
-    users: (Array.isArray(record.users) ? record.users : []) as ChatAuthorizationSnapshot["users"],
-    chats: (Array.isArray(record.chats) ? record.chats : []) as ChatAuthorizationSnapshot["chats"],
+    config: toRecord(record.config) as JsonObject,
+    users: (Array.isArray(record.users) ? record.users : []) as JsonObject[],
+    chats: (Array.isArray(record.chats) ? record.chats : []) as JsonObject[],
   };
 }
 
@@ -41,7 +45,7 @@ function readSnapshot(value: unknown): ChatAuthorizationSnapshot {
  */
 async function readAuthorizationSnapshotViaPlugin(
   context: AgentContext,
-): Promise<ChatAuthorizationSnapshot> {
+): Promise<ReturnType<typeof readSnapshot>> {
   const result = await context.plugins.runAction({
     plugin: AUTH_PLUGIN_NAME,
     action: AUTH_ACTIONS.snapshot,
@@ -57,7 +61,7 @@ async function readAuthorizationSnapshotViaPlugin(
  */
 async function readAuthorizationConfigViaPlugin(
   context: AgentContext,
-): Promise<ChatAuthorizationConfig> {
+): Promise<JsonObject> {
   const result = await context.plugins.runAction({
     plugin: AUTH_PLUGIN_NAME,
     action: AUTH_ACTIONS.readConfig,
@@ -65,7 +69,7 @@ async function readAuthorizationConfigViaPlugin(
   if (!result.success) {
     throw new Error(result.error || result.message || "auth read-config failed");
   }
-  return toRecord(result.data) as unknown as ChatAuthorizationConfig;
+  return toRecord(result.data) as JsonObject;
 }
 
 /**
@@ -73,19 +77,19 @@ async function readAuthorizationConfigViaPlugin(
  */
 async function writeAuthorizationConfigViaPlugin(params: {
   context: AgentContext;
-  config: ChatAuthorizationConfig;
-}): Promise<ChatAuthorizationConfig> {
+  config: JsonObject;
+}): Promise<JsonObject> {
   const result = await params.context.plugins.runAction({
     plugin: AUTH_PLUGIN_NAME,
     action: AUTH_ACTIONS.writeConfig,
     payload: {
       config: params.config,
-    } as AuthWriteConfigPayload as unknown as JsonObject,
+    },
   });
   if (!result.success) {
     throw new Error(result.error || result.message || "auth write-config failed");
   }
-  return toRecord(result.data) as unknown as ChatAuthorizationConfig;
+  return toRecord(result.data) as JsonObject;
 }
 
 /**
@@ -96,7 +100,7 @@ async function setAuthorizationUserRoleViaPlugin(params: {
   channel: string;
   userId: string;
   roleId: string;
-}): Promise<ChatAuthorizationConfig> {
+}): Promise<JsonObject> {
   const result = await params.context.plugins.runAction({
     plugin: AUTH_PLUGIN_NAME,
     action: AUTH_ACTIONS.setUserRole,
@@ -104,12 +108,12 @@ async function setAuthorizationUserRoleViaPlugin(params: {
       channel: params.channel,
       userId: params.userId,
       roleId: params.roleId,
-    } as AuthSetUserRolePayload as unknown as JsonObject,
+    },
   });
   if (!result.success) {
     throw new Error(result.error || result.message || "auth set-user-role failed");
   }
-  return toRecord(result.data) as unknown as ChatAuthorizationConfig;
+  return toRecord(result.data) as JsonObject;
 }
 
 /**
@@ -135,7 +139,7 @@ export async function readAuthControlPayload(
  */
 export async function writeAuthControlConfig(params: {
   context: AgentContext;
-  config: ChatAuthorizationConfig;
+  config: JsonObject;
 }): Promise<AuthControlPayload> {
   await writeAuthorizationConfigViaPlugin({
     context: params.context,
@@ -149,7 +153,11 @@ export async function writeAuthControlConfig(params: {
  */
 export async function setAuthControlUserRole(params: {
   context: AgentContext;
-  input: AuthSetUserRolePayload;
+  input: {
+    channel: string;
+    userId: string;
+    roleId: string;
+  };
 }): Promise<AuthControlPayload> {
   await setAuthorizationUserRoleViaPlugin({
     context: params.context,

package/src/runtime/server/http/control/ControlApiRoutes.ts

@@ -3,14 +3,13 @@
  *
  * 关键点（中文）
  * - 本文件只做模块装配，不再承载具体业务逻辑。
- * - 单 agent control API 子路由按 overview/session/model/task/auth 五类拆分，便于继续维护。
+ * - 单 agent control API 子路由按 overview/session/task/auth 四类拆分，便于继续维护。
  * - 单 agent control API 统一暴露在 `/api/control/*` 下。
  */
 
 import type { ControlRouteRegistrationParams } from "@/runtime/server/http/control/types/ControlRoutes.js";
 import { registerControlAuthorizationRoutes } from "@/runtime/server/http/control/ControlAuthorizationRoutes.js";
 import { registerControlSessionRoutes } from "@/runtime/server/http/control/SessionRoutes.js";
-import { registerControlModelRoutes } from "@/runtime/server/http/control/ModelRoutes.js";
 import { registerControlOverviewRoutes } from "@/runtime/server/http/control/OverviewRoutes.js";
 import { registerControlTaskRoutes } from "@/runtime/server/http/control/TaskRoutes.js";
 
@@ -26,6 +25,5 @@ export function registerControlApiRoutes(
   });
   registerControlOverviewRoutes(params);
   registerControlSessionRoutes(params);
-  registerControlModelRoutes(params);
   registerControlTaskRoutes(params);
 }

package/src/runtime/server/http/control/ControlAuthorizationRoutes.ts

@@ -7,23 +7,18 @@
  */
 
 import type { Hono } from "hono";
-import type { AgentContext } from "@/core/AgentContextTypes.js";
+import type { AgentContext } from "@/types/runtime/agent/AgentContext.js";
+import type { JsonObject } from "@/types/common/Json.js";
 import {
   readAuthControlPayload,
   setAuthControlUserRole,
   writeAuthControlConfig,
 } from "@/runtime/server/http/control/AuthControlService.js";
-import {
-  isChatAuthorizationChannel,
-  type AuthSetUserRolePayload,
-  type ChatAuthorizationConfig,
-} from "@/plugin/builtins/auth/types/AuthPlugin.js";
-import type { ChatAuthorizationChannel } from "@/plugin/builtins/auth/types/AuthPlugin.js";
 import { buildControlRouteAliases } from "@/runtime/server/http/control/CommonHelpers.js";
 
-function normalizeChatChannel(value: unknown): ChatAuthorizationChannel | null {
+function normalizeChatChannel(value: unknown): string | null {
   const text = String(value || "").trim().toLowerCase();
-  if (isChatAuthorizationChannel(text)) return text;
+  if (text === "telegram" || text === "feishu" || text === "qq") return text;
   return null;
 }
 
@@ -54,7 +49,7 @@ export function registerControlAuthorizationRoutes(params: {
     app.post(routePath, async (c) => {
       try {
         const body = (await c.req.json().catch(() => ({}))) as {
-          config?: ChatAuthorizationConfig;
+          config?: JsonObject;
         };
         const payload = await writeAuthControlConfig({
           context: getAgentContext(),
@@ -94,7 +89,7 @@ export function registerControlAuthorizationRoutes(params: {
             channel,
             userId: String(body.userId || "").trim(),
             roleId: String(body.roleId || "").trim(),
-          } as AuthSetUserRolePayload,
+          },
         });
         return c.json({
           success: true,

package/src/runtime/server/http/control/ControlRouter.ts

@@ -13,8 +13,8 @@
  */
 
 import { Hono } from "hono";
-import type { AgentRuntime } from "@/core/AgentCoreTypes.js";
-import type { AgentContext } from "@/core/AgentContextTypes.js";
+import type { AgentRuntime } from "@/types/runtime/agent/AgentRuntime.js";
+import type { AgentContext } from "@/types/runtime/agent/AgentContext.js";
 import { registerControlApiRoutes } from "@/runtime/server/http/control/ControlApiRoutes.js";
 
 /**

package/src/runtime/server/http/control/ExecuteBySession.ts

@@ -2,26 +2,20 @@
  * Control execute by session helper。
  *
  * 关键点（中文）
- * - chatKey session 优先复用 chat 平台队列链路（与平台入站执行一致）。
- * - 非 chat session 保留原有直接执行语义。
+ * - control 层只负责把请求转成 session prompt。
+ * - chat / queue 等渠道语义由宿主显式注入的 plugin 自行实现。
  */
 
-import type { AgentRuntime } from "@/core/AgentCoreTypes.js";
-import type { AgentContext } from "@/core/AgentContextTypes.js";
-import type { JsonObject } from "@/types/common/Json.js";
+import type { AgentRuntime } from "@/types/runtime/agent/AgentRuntime.js";
+import type { AgentContext } from "@/types/runtime/agent/AgentContext.js";
 import type { ControlSessionExecuteAttachmentInput } from "@/runtime/server/http/control/types/ControlSessionExecute.js";
-import { resolveChatQueueStore } from "@/plugin/builtins/chat/runtime/ChatQueue.js";
-import { resolveDispatchTargetByChatKey } from "@/plugin/builtins/chat/runtime/ChatkeySend.js";
-import { appendExecIngress } from "@/plugin/builtins/chat/runtime/ChatIngressStore.js";
-import { buildQueuedUserMessageWithInfo } from "@/plugin/builtins/chat/runtime/QueuedUserMessage.js";
 import { buildExecuteInputText } from "./Helpers.js";
 
 /**
  * 在指定 session 中执行一轮请求。
  *
  * 说明（中文）
- * - 若 `sessionId` 能解析为 chat 分发目标，则改为入 chat queue。
- * - 否则按普通 session 同步执行。
+ * - 按普通 session 同步执行。
  */
 export async function executeBySessionId(params: {
   agentState: AgentRuntime;
@@ -42,65 +36,6 @@ export async function executeBySessionId(params: {
     attachments: params.attachments,
   });
 
-  const dispatchTarget = await resolveDispatchTargetByChatKey({
-    context: params.executionContext,
-    chatKey: sessionId,
-  });
-  if (dispatchTarget) {
-    const queuedText = buildQueuedUserMessageWithInfo({
-      messageId: dispatchTarget.messageId,
-      text: executeInput,
-    });
-    const ingressExtra: JsonObject = {
-      source: "tui_session_execute",
-      ingressKind: "exec",
-      trigger: "api_execute",
-    };
-
-    try {
-      await appendExecIngress({
-        context: params.executionContext,
-        sessionId,
-        channel: dispatchTarget.channel,
-        chatId: dispatchTarget.chatId,
-        text: queuedText,
-        ...(dispatchTarget.chatType ? { targetType: dispatchTarget.chatType } : {}),
-        ...(typeof dispatchTarget.messageThreadId === "number"
-          ? { threadId: dispatchTarget.messageThreadId }
-          : {}),
-        ...(dispatchTarget.messageId ? { messageId: dispatchTarget.messageId } : {}),
-        extra: ingressExtra,
-      });
-    } catch (error) {
-      params.agentState.logger.warn("Control execute ingress append failed", {
-        sessionId,
-        error: String(error),
-      });
-    }
-
-    const enqueueResult = resolveChatQueueStore(params.executionContext).enqueue({
-      kind: "exec",
-      channel: dispatchTarget.channel,
-      targetId: dispatchTarget.chatId,
-      sessionId,
-      text: queuedText,
-      ...(dispatchTarget.chatType ? { targetType: dispatchTarget.chatType } : {}),
-      ...(typeof dispatchTarget.messageThreadId === "number"
-        ? { threadId: dispatchTarget.messageThreadId }
-        : {}),
-      ...(dispatchTarget.messageId ? { messageId: dispatchTarget.messageId } : {}),
-      extra: ingressExtra,
-    });
-
-    return {
-      success: true,
-      queued: true,
-      queueItemId: enqueueResult.itemId,
-      queuePosition: enqueueResult.lanePosition,
-      userVisible: "",
-    };
-  }
-
   const session = params.agentState.getSession(sessionId);
   const turn = await session.prompt({
     query: executeInput,

package/src/runtime/server/http/control/ExecuteInput.ts

@@ -9,7 +9,7 @@
 import fs from "fs-extra";
 import path from "node:path";
 import { getCacheDirPath } from "@/config/Paths.js";
-import { renderChatMessageFileTag } from "@/plugin/builtins/chat/runtime/ChatMessageMarkup.js";
+import { renderChatMessageFileTag } from "@/executor/messages/ChatMessageMarkup.js";
 import type {
   ControlSessionExecuteAttachmentInput,
   ControlSessionExecuteAttachmentType,

package/src/runtime/server/http/control/MessageTimeline.ts

@@ -16,9 +16,9 @@ import {
 import type {
   SessionMessageV1,
   SessionMetadataV1,
-} from "@/session/types/SessionMessages.js";
-import { pickLastSuccessfulChatSendText } from "@/plugin/builtins/chat/runtime/UserVisibleText.js";
-import { extractToolCallsFromUiMessage } from "@/plugin/builtins/chat/runtime/UIMessageTransformer.js";
+} from "@/executor/types/SessionMessages.js";
+import { pickLastSuccessfulChatSendText } from "@/executor/messages/UserVisibleText.js";
+import { extractToolCallsFromUiMessage } from "@/executor/messages/UIMessageTransformer.js";
 import type { ControlTimelineEvent, ControlTimelineRole } from "@/runtime/server/http/control/types/ControlViewData.js";
 import { truncateText } from "./CommonHelpers.js";
 

package/src/runtime/server/http/control/OverviewRoutes.ts

@@ -2,7 +2,7 @@
  * Control 概览路由。
  *
  * 关键点（中文）
- * - 聚合 overview 与 runtime plugins 两块轻量只读接口。
+ * - 聚合 overview 与 plugin 运行态两块轻量只读接口。
  * - 只负责路由层拼装，不承载复杂业务状态机。
  */
 
@@ -10,7 +10,6 @@ import fs from "fs-extra";
 import { dirname, join } from "path";
 import { fileURLToPath } from "url";
 import { listPluginStates } from "@/plugin/core/Manager.js";
-import { listTaskDefinitions } from "@/plugin/builtins/task/Action.js";
 import { buildControlRouteAliases, toLimit } from "./CommonHelpers.js";
 import { listControlSessionSummaries, readRecentLogs } from "./Helpers.js";
 import type { ControlRouteRegistrationParams } from "@/runtime/server/http/control/types/ControlRoutes.js";
@@ -58,10 +57,15 @@ export function registerControlOverviewRoutes(
         const runtimePlugins = listPluginStates({
           context: params.getAgentContext(),
         });
-        const taskResult = await listTaskDefinitions({
-          projectRoot: runtime.rootPath,
+        const taskResult = await params.getAgentContext().plugins.runAction({
+          plugin: "task",
+          action: "list",
         });
-        const tasks = Array.isArray(taskResult.tasks) ? taskResult.tasks : [];
+        const taskData =
+          taskResult.data && typeof taskResult.data === "object" && !Array.isArray(taskResult.data)
+            ? taskResult.data as { tasks?: Array<{ status?: string }> }
+            : {};
+        const tasks = Array.isArray(taskData.tasks) ? taskData.tasks : [];
         const logs = await readRecentLogs({
           projectRoot: runtime.rootPath,
           limit: 50,
@@ -85,7 +89,6 @@ export function registerControlOverviewRoutes(
             total: sessions.length,
             items: sessions,
           },
-          services: runtimePlugins,
           plugins: runtimePlugins,
           tasks: {
             total: tasks.length,
@@ -99,13 +102,10 @@ export function registerControlOverviewRoutes(
     });
   }
 
-  for (const routePath of buildControlRouteAliases("/services")) {
+  for (const routePath of buildControlRouteAliases("/plugins/list")) {
     app.get(routePath, (c) => {
       return c.json({
         success: true,
-        services: listPluginStates({
-          context: params.getAgentContext(),
-        }),
         plugins: listPluginStates({
           context: params.getAgentContext(),
         }),

package/src/runtime/server/http/control/SessionRoutes.ts

@@ -10,7 +10,7 @@
 import type { SystemModelMessage } from "ai";
 import fs from "fs-extra";
 import { dirname } from "path";
-import { resolveSessionSystemMessages } from "@session/composer/system/default/SystemDomain.js";
+import { resolveSessionSystemMessages } from "@executor/composer/system/default/SystemDomain.js";
 import {
   getDowncityChatHistoryPath,
   getDowncitySessionMessagesArchiveDirPath,

package/src/runtime/server/http/control/SessionSummaryStore.ts

@@ -7,12 +7,11 @@
  */
 
 import fs from "fs-extra";
-import type { AgentContext } from "@/core/AgentContextTypes.js";
+import type { AgentContext } from "@/types/runtime/agent/AgentContext.js";
 import {
   getDowncitySessionMessagesPath,
   getDowncitySessionRootDirPath,
 } from "@/config/Paths.js";
-import { readChatMetaBySessionId } from "@/plugin/builtins/chat/runtime/ChatMetaStore.js";
 import type { ControlSessionSummary } from "@/runtime/server/http/control/types/ControlViewData.js";
 import { decodeMaybe, truncateText } from "./CommonHelpers.js";
 import { loadSessionMessagesFromFile, resolveUiMessagePreview } from "./MessageTimeline.js";
@@ -55,12 +54,6 @@ export async function listControlSessionSummaries(params: {
       .then((s) => s)
       .catch(() => null);
     const updatedAt = lastTs || (stat ? stat.mtimeMs : undefined);
-    const chatMeta = params.executionContext
-      ? await readChatMetaBySessionId({
-          context: params.executionContext,
-          sessionId,
-        })
-      : null;
 
     items.push({
       sessionId,
@@ -70,11 +63,6 @@ export async function listControlSessionSummaries(params: {
       ...(last
         ? { lastText: truncateText(resolveUiMessagePreview(last), 180) }
         : {}),
-      ...(typeof chatMeta?.channel === "string" ? { channel: chatMeta.channel } : {}),
-      ...(typeof chatMeta?.chatId === "string" ? { chatId: chatMeta.chatId } : {}),
-      ...(typeof chatMeta?.chatTitle === "string" ? { chatTitle: chatMeta.chatTitle } : {}),
-      ...(typeof chatMeta?.targetType === "string" ? { chatType: chatMeta.targetType } : {}),
-      ...(typeof chatMeta?.threadId === "number" ? { threadId: chatMeta.threadId } : {}),
       ...(params.executingSessionIds?.has(sessionId) ? { executing: true } : {}),
     });
   }

package/src/runtime/server/http/control/TaskRoutes.ts

@@ -3,15 +3,13 @@
  *
  * 关键点（中文）
  * - 聚合 tasks/runs/logs 相关接口。
- * - 任务动作统一复用 task runtime plugin command，不在 UI 层重复实现业务语义。
+ * - 任务动作统一复用 task plugin runtime command，不在 UI 层重复实现业务语义。
  */
 
 import fs from "fs-extra";
-import { join } from "path";
+import { basename, dirname, join } from "path";
 import { getDowncityTasksDirPath } from "@/config/Paths.js";
 import { runPluginCommand } from "@/plugin/core/Manager.js";
-import { listTaskDefinitions } from "@/plugin/builtins/task/Action.js";
-import { resolveTaskIdByTitle } from "@/plugin/builtins/task/runtime/Store.js";
 import type { ControlRouteRegistrationParams } from "@/runtime/server/http/control/types/ControlRoutes.js";
 import {
   buildControlRouteAliases,
@@ -26,11 +24,58 @@ import {
   readTaskRunDetail,
 } from "./Helpers.js";
 
+type TaskListItem = {
+  title?: string;
+  status?: string;
+  taskMdPath?: string;
+  lastRunTimestamp?: string;
+  [key: string]: unknown;
+};
+
+function resolveTaskIdFromTaskMdPath(taskMdPath: unknown): string {
+  const text = String(taskMdPath || "").trim();
+  if (!text) return "";
+  return basename(dirname(text));
+}
+
+async function listTasksViaPlugin(params: {
+  routes: ControlRouteRegistrationParams;
+  status?: string;
+}): Promise<TaskListItem[]> {
+  const result = await params.routes.getAgentContext().plugins.runAction({
+    plugin: "task",
+    action: "list",
+    payload: params.status ? { status: params.status } : undefined,
+  });
+  if (!result.success) {
+    throw new Error(result.error || result.message || "task list failed");
+  }
+  const data =
+    result.data && typeof result.data === "object" && !Array.isArray(result.data)
+      ? result.data as { tasks?: TaskListItem[] }
+      : {};
+  return Array.isArray(data.tasks) ? data.tasks : [];
+}
+
+async function resolveTaskIdByTitleViaPlugin(params: {
+  routes: ControlRouteRegistrationParams;
+  title: string;
+}): Promise<string> {
+  const title = String(params.title || "").trim();
+  const tasks = await listTasksViaPlugin({ routes: params.routes });
+  const matched = tasks.filter((task) => String(task.title || "").trim() === title);
+  if (matched.length !== 1) throw new Error(`Task not found: ${title}`);
+  const taskId = resolveTaskIdFromTaskMdPath(matched[0]?.taskMdPath);
+  if (!taskId) throw new Error(`Task id not found: ${title}`);
+  return taskId;
+}
+
 /**
  * 读取任务当前是否仍在执行。
  */
 async function readTaskRunningState(params: {
   projectRoot: string;
+  routes: ControlRouteRegistrationParams;
   title: string;
   lastRunTimestamp?: string;
 }): Promise<boolean> {
@@ -40,8 +85,8 @@ async function readTaskRunningState(params: {
 
   let taskId = "";
   try {
-    taskId = await resolveTaskIdByTitle({
-      projectRoot: params.projectRoot,
+    taskId = await resolveTaskIdByTitleViaPlugin({
+      routes: params.routes,
       title,
     });
   } catch {
@@ -73,15 +118,15 @@ export function registerControlTaskRoutes(
       try {
         const runtime = params.getAgentRuntime();
         const status = toOptionalString(c.req.query("status"));
-        const result = await listTaskDefinitions({
-          projectRoot: runtime.rootPath,
-          ...(status ? { status: status as "enabled" | "paused" | "disabled" } : {}),
+        const tasks = await listTasksViaPlugin({
+          routes: params,
+          ...(status ? { status } : {}),
         });
-        const tasks = Array.isArray(result.tasks) ? result.tasks : [];
         const tasksWithRunning = await Promise.all(
           tasks.map(async (task) => {
             const running = await readTaskRunningState({
               projectRoot: runtime.rootPath,
+              routes: params,
               title: String(task.title || "").trim(),
               lastRunTimestamp: task.lastRunTimestamp,
             });
@@ -219,8 +264,8 @@ export function registerControlTaskRoutes(
 
         let taskId = "";
         try {
-          taskId = await resolveTaskIdByTitle({
-            projectRoot: runtime.rootPath,
+          taskId = await resolveTaskIdByTitleViaPlugin({
+            routes: params,
             title,
           });
         } catch {
@@ -266,8 +311,8 @@ export function registerControlTaskRoutes(
 
         let taskId = "";
         try {
-          taskId = await resolveTaskIdByTitle({
-            projectRoot: runtime.rootPath,
+          taskId = await resolveTaskIdByTitleViaPlugin({
+            routes: params,
             title,
           });
         } catch {

package/src/runtime/server/http/control/TaskStore.ts

@@ -9,7 +9,6 @@
 import fs from "fs-extra";
 import path from "node:path";
 import { getLogsDirPath, getDowncityTasksDirPath } from "@/config/Paths.js";
-import { resolveTaskIdByTitle } from "@/plugin/builtins/task/runtime/Store.js";
 import type {
   ControlLogEntry,
   ControlTaskRunDetail,
@@ -19,6 +18,27 @@ import { truncateText } from "./CommonHelpers.js";
 import { loadSessionMessagesFromFile, toUiMessageTimeline } from "./MessageTimeline.js";
 
 export const TASK_RUN_DIR_REGEX = /^\d{8}-\d{6}-\d{3}$/;
+const TASK_ID_REGEXP = /^[\p{L}\p{N}][\p{L}\p{N}_\-\s]{0,63}$/u;
+
+function normalizeTaskId(input: string): string {
+  const id = String(input || "").trim();
+  if (!TASK_ID_REGEXP.test(id)) {
+    throw new Error(`Invalid taskId: "${id}"`);
+  }
+  return id;
+}
+
+function deriveTaskIdFromTitle(title: string): string {
+  const normalized = String(title || "")
+    .normalize("NFKC")
+    .replace(/[\\/:\u0000]/g, " ")
+    .replace(/[^\p{L}\p{N}_\-\s]/gu, " ")
+    .replace(/\s+/g, " ")
+    .trim()
+    .slice(0, 64)
+    .trim();
+  return normalizeTaskId(normalized);
+}
 
 /**
  * 读取近期日志。
@@ -68,7 +88,7 @@ export async function readRecentLogs(params: {
 }
 
 async function resolveTaskDir(projectRoot: string, title: string): Promise<string> {
-  const taskId = await resolveTaskIdByTitle({ projectRoot, title });
+  const taskId = deriveTaskIdFromTitle(title);
   return path.join(getDowncityTasksDirPath(projectRoot), taskId);
 }