evolcore 0.0.10 → 0.0.11

package/dist/cli/init.js

@@ -12,9 +12,10 @@ import { resolveEcagentConfig } from '../agents/baseagent.js';
 import { defaultProjectsRoot } from '../utils/project-path.js';
 import { WEB_CLI_BIN, WEB_PACKAGE_LATEST } from '../product.js';
 import { autostartInstalled, autostartPlatformLabel, configureAutostart } from '../utils/autostart.js';
+import { askInit, isInitCancelledError, printInitCancelHint } from './init-cancel.js';
 // ==================== Helpers ====================
 function ask(rl, question) {
-    return new Promise(resolve => rl.question(question, resolve));
+    return askInit(rl, question);
 }
 /** 展开用户在交互式输入中使用的 home 目录简写（shell 不会替 readline 自动做这件事）。 */
 export function expandLeadingTildePath(value, homeDir = os.homedir()) {
@@ -254,6 +255,7 @@ export async function cmdInit(options) {
     }
     else {
         // ── 4. 交互式分支（rl 生命周期封装在内部函数，tail 不引用 rl）──
+        printInitCancelHint();
         await runInteractive();
     }
     // ── 共享 tail（单一出口）：提示创建 agent + 生成控制 AID ──
@@ -373,6 +375,7 @@ export async function initTail(options = {}) {
     const daemonConfig = loadDaemonConfig();
     let controlAidReady = !!daemonConfig.aid;
     let autoStartReady = true;
+    let ownerBindingInterrupted = false;
     if (daemonConfig.aid) {
         console.log(`✓ 控制 AID 已存在: ${daemonConfig.aid}`);
     }
@@ -394,8 +397,10 @@ export async function initTail(options = {}) {
         const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
         try {
             await handleOwnersPrompt(rl);
-            await handleEcwebPrompt(rl);
-            await handleAutostartPrompt(rl);
+            if (!ownerBindingInterrupted) {
+                await handleEcwebPrompt(rl);
+                await handleAutostartPrompt(rl);
+            }
         }
         finally {
             try {
@@ -407,6 +412,8 @@ export async function initTail(options = {}) {
     else if (options.autoStart !== undefined) {
         autoStartReady = applyAutostart(options.autoStart);
     }
+    if (ownerBindingInterrupted)
+        return false;
     async function handleAutostartPrompt(rl) {
         if (options.autoStart !== undefined) {
             autoStartReady = applyAutostart(options.autoStart);
@@ -446,17 +453,22 @@ export async function initTail(options = {}) {
                 rl.pause();
                 try {
                     const { runDaemonOwnerQrBindFlow } = await import('./init-channel.js');
-                    const result = await runDaemonOwnerQrBindFlow('append');
-                    if (result?.boundAid) {
+                    const result = await runDaemonOwnerQrBindFlow();
+                    if (result.action === 'bound') {
                         console.log(`  ✓ 已配置管理者: ${result.boundAid}`);
                     }
-                    else {
+                    else if (result.action === 'manual') {
                         // QR 流程失败，恢复 rl 并提示手动输入
                         rl.resume();
                         await promptOwnersManually(rl);
                     }
+                    else {
+                        ownerBindingInterrupted = true;
+                    }
                 }
                 catch (e) {
+                    if (isInitCancelledError(e))
+                        throw e;
                     console.log(`  ⚠ 扫码绑定不可用: ${e?.message || e}`);
                     rl.resume();
                     await promptOwnersManually(rl);
@@ -561,7 +573,7 @@ export async function selectInstance(rl, channelType, instances, options = {}) {
     const validOptions = letters.slice(0, instances.length + 1).split('');
     let choice = '';
     while (!validOptions.includes(choice)) {
-        choice = (await new Promise(r => rl.question('请选择: ', r))).trim().toLowerCase();
+        choice = (await ask(rl, '请选择: ')).trim().toLowerCase();
         if (!validOptions.includes(choice)) {
             console.log(`无效选择，请输入 ${validOptions.join('/')}`);
         }
@@ -570,7 +582,7 @@ export async function selectInstance(rl, channelType, instances, options = {}) {
     if (choiceIndex === instances.length) {
         let name = '';
         while (!name) {
-            name = (await new Promise(r => rl.question('请输入新配置名称: ', r))).trim();
+            name = (await ask(rl, '请输入新配置名称: ')).trim();
             if (!name)
                 console.log('  名称不能为空');
             if (instances.some(i => i.name === name)) {
@@ -583,7 +595,7 @@ export async function selectInstance(rl, channelType, instances, options = {}) {
     const target = instances[choiceIndex];
     console.log(`\n已选择：${target.name}`);
     if (options.confirmOverwrite !== false) {
-        const confirm = (await new Promise(r => rl.question(`⚠️ 即将覆盖该配置，确认？(y/N) `, r))).trim().toLowerCase();
+        const confirm = (await ask(rl, `⚠️ 即将覆盖该配置，确认？(y/N) `)).trim().toLowerCase();
         if (confirm !== 'y' && confirm !== 'yes') {
             console.log('已取消');
             return null;

package/dist/config/builtin-roles.js

@@ -35,6 +35,7 @@ export function getManagementCommandPermissions(role) {
         'role.revoke': { allow: true, scopes: ['agent'] },
         'role.policy.read': { allow: true, scopes: ['agent'] },
         'role.relation.read': { allow: true, scopes: ['agent'] },
+        'observable.current': { allow: true, scopes: ['agent'], constraints: { requireAgentOwner: true } },
         'config.get': { allow: true, scopes: ['agent', 'relation'] },
         'config.set': { allow: true, scopes: ['agent', 'relation'] },
         'config.unset': { allow: true, scopes: ['agent', 'relation'] },

package/dist/config/gateway-config.js

@@ -16,9 +16,11 @@ import path from 'path';
 import { resolvePaths } from '../paths.js';
 import { saveDefaultsSafe, saveAgent } from '../config-store.js';
 import { resolveAnthropicConfig, resolveEcagentConfig, resolveOpenaiConfig } from '../agents/baseagent.js';
+import { buildModelRequestHeaders } from '../agents/request-identity.js';
 import { resolvePriceRow } from '../stats/billing.js';
 import { ipcQuery } from '../ipc.js';
 import { logger } from '../utils/logger.js';
+import { ConfigTarget, read as readConfig } from './config-manager.js';
 /** 已知 baseagent 类型（网关可管理范围）。 */
 const GATEWAY_TYPES = ['claude', 'codex', 'gemini', 'ecagent'];
 const DISPLAY_NAMES = {
@@ -522,8 +524,10 @@ export async function gatewayDelete(args) {
 }
 /** 解析某 scope/type 的真实 baseUrl + apiKey（在 daemon 内展开 $ENV，不出站）。 */
 function resolveGatewayCreds(scope, type) {
-    const raw = scope === 'defaults' ? readDefaultsRaw() : readAgentRaw(scope);
-    const block = raw?.baseagents?.[type];
+    const expandedConfig = scope === 'defaults'
+        ? readConfig(ConfigTarget.Defaults, undefined, { expand: true, cache: true })
+        : readConfig(ConfigTarget.Agent, { self: scope }, { expand: true, cache: true });
+    const block = expandedConfig?.baseagents?.[type];
     if (!block)
         return { error: `${scope}/${type} 未配置`, code: 'NOT_FOUND' };
     const expanded = expandEnv(block);
@@ -531,15 +535,27 @@ function resolveGatewayCreds(scope, type) {
         const synth = { agents: { [type]: expanded } };
         if (type === 'codex') {
             const r = resolveOpenaiConfig(synth, expanded);
-            return { baseUrl: r.baseUrl, apiKey: r.apiKey };
+            return {
+                baseUrl: r.baseUrl,
+                apiKey: r.apiKey,
+                headers: buildModelRequestHeaders({ baseagent: 'codex', baseUrl: r.baseUrl, agentAid: scope === 'defaults' ? undefined : scope, configuredHeaders: r.headers }),
+            };
         }
         else if (type === 'claude') {
             const r = resolveAnthropicConfig(synth, expanded);
-            return { baseUrl: r.baseUrl, apiKey: r.apiKey };
+            return {
+                baseUrl: r.baseUrl,
+                apiKey: r.apiKey,
+                headers: buildModelRequestHeaders({ baseagent: 'claude', baseUrl: r.baseUrl, agentAid: scope === 'defaults' ? undefined : scope, configuredHeaders: r.headers }),
+            };
         }
         else if (type === 'ecagent') {
             const r = resolveEcagentConfig(synth, expanded);
-            return { baseUrl: r.baseUrl, apiKey: r.apiKey };
+            return {
+                baseUrl: r.baseUrl,
+                apiKey: r.apiKey,
+                headers: buildModelRequestHeaders({ baseagent: 'ecagent', baseUrl: r.baseUrl, agentAid: scope === 'defaults' ? undefined : scope, configuredHeaders: r.headers }),
+            };
         }
         return { error: 'gemini 暂不支持 HTTP 探测（CLI 后端）', code: 'NOT_SUPPORTED' };
     }
@@ -556,7 +572,7 @@ export async function gatewayTest(args) {
     const creds = resolveGatewayCreds(scope, type);
     if ('error' in creds)
         return creds;
-    const { baseUrl, apiKey } = creds;
+    const { baseUrl, apiKey, headers } = creds;
     if (!baseUrl)
         return { error: '未配置 baseUrl（或为官方占位地址）', code: 'INVALID_ARGS' };
     const start = Date.now();
@@ -566,7 +582,7 @@ export async function gatewayTest(args) {
         const base = baseUrl.replace(/\/+$/, '');
         const modelsUrl = base.endsWith('/v1') ? `${base}/models` : `${base}/v1/models`;
         const resp = await fetch(modelsUrl, {
-            headers: apiKey ? { Authorization: `Bearer ${apiKey}` } : {},
+            headers: { ...(apiKey ? { Authorization: `Bearer ${apiKey}` } : {}), ...headers },
             signal: controller.signal,
         });
         clearTimeout(timer);
@@ -614,7 +630,7 @@ export async function gatewayModels(args) {
     const creds = resolveGatewayCreds(scope, type);
     if ('error' in creds)
         return creds;
-    const { baseUrl, apiKey } = creds;
+    const { baseUrl, apiKey, headers } = creds;
     if (!baseUrl)
         return { error: '未配置 baseUrl（或为官方占位地址）', code: 'INVALID_ARGS' };
     let arr = [];
@@ -623,7 +639,7 @@ export async function gatewayModels(args) {
         const controller = new AbortController();
         const timer = setTimeout(() => controller.abort(), 8000);
         const resp = await fetch(`${baseUrl.replace(/\/+$/, '')}/v1/models`, {
-            headers: apiKey ? { Authorization: `Bearer ${apiKey}` } : {},
+            headers: { ...(apiKey ? { Authorization: `Bearer ${apiKey}` } : {}), ...headers },
             signal: controller.signal,
         });
         clearTimeout(timer);
@@ -906,7 +922,7 @@ function expandEnv(obj) {
     if (typeof obj === 'string') {
         if (obj.startsWith(ENV_PREFIX))
             return process.env[obj.slice(ENV_PREFIX.length)] ?? '';
-        return obj;
+        return obj.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (_, name) => process.env[name] ?? '');
     }
     if (Array.isArray(obj))
         return obj.map(expandEnv);

package/dist/core/agent-reload-coordinator.js

@@ -0,0 +1,53 @@
+export class AgentReloadBusyError extends Error {
+    aid;
+    busyCount;
+    code = 'AGENT_BUSY';
+    constructor(aid, busyCount) {
+        super(`Agent "${aid}" has ${busyCount} task(s) in progress`);
+        this.aid = aid;
+        this.busyCount = busyCount;
+        this.name = 'AgentReloadBusyError';
+    }
+}
+export class AgentReloadCoordinator {
+    deps;
+    inFlight = new Map();
+    constructor(deps) {
+        this.deps = deps;
+    }
+    busyCount(aid) {
+        return Math.max(0, this.deps.getBusyCount(aid));
+    }
+    runExclusive(aid, operation, options = {}) {
+        const previous = this.inFlight.get(aid) ?? Promise.resolve();
+        const pending = previous
+            .catch(() => undefined)
+            .then(async () => {
+            const releaseWorkGate = await this.deps.acquireWorkGate?.(aid);
+            try {
+                const busyCount = this.busyCount(aid);
+                if (!options.force && busyCount > 0)
+                    throw new AgentReloadBusyError(aid, busyCount);
+                if (options.force && busyCount > 0)
+                    await this.deps.forceReload?.(aid);
+                return await operation();
+            }
+            finally {
+                await releaseWorkGate?.();
+            }
+        });
+        this.inFlight.set(aid, pending);
+        return pending.finally(() => {
+            if (this.inFlight.get(aid) === pending)
+                this.inFlight.delete(aid);
+        });
+    }
+    reload(aid, options = {}) {
+        return this.runExclusive(aid, async () => {
+            if (!this.deps.registry.get(aid))
+                throw new Error(`Agent "${aid}" not found`);
+            await this.deps.beforeReload?.();
+            await this.deps.registry.reload(aid, this.deps.hooks);
+        }, options);
+    }
+}

package/dist/core/auth/operation-authorizer.js

@@ -5,68 +5,6 @@ import { isResolvedConfigMutation, } from '../../config/resolved-config-op.js';
 import { normalizePeer } from '../model/config-scope.js';
 import { getOperationMeta } from './operation-catalog.js';
 import { formatPeerKey, parsePeerKey } from '../relation/peer-identity.js';
-export const USER_PLANE_CAPABILITY_CEILING = {
-    allowOperations: new Set([
-        'model.list',
-        'model.current',
-        'model.use',
-        'model.effort',
-        'model.reset',
-        'permission.current',
-        'permission.answer',
-        'chatmode.current',
-        'chatmode.update',
-        'mentionmode.current',
-        'mentionmode.update',
-        'group.mentionmode.current',
-        'group.rulespolicy.current',
-        'session.list',
-        'session.create',
-        'session.rename',
-        'trigger.list',
-        'trigger.show',
-        'trigger.history',
-        'trigger.eventCatalog',
-        'trigger.create',
-        'trigger.update',
-        'trigger.setEnabled',
-        'trigger.cancel',
-        'trigger.delete',
-        'trigger.run',
-        'stats.summary',
-        'stats.session',
-        'stats.context',
-        'file.list',
-        'file.fetch',
-        'ec.msg.send',
-        'ec.msg.file',
-        'ec.group.send',
-        'ec.group.file',
-        'config.get',
-        'config.set',
-        'config.unset',
-    ]),
-    denyOperations: new Set([
-        'role.assign',
-        'role.revoke',
-        'config.write',
-        'gateway.write',
-        'cli.exec.raw',
-        'shell.exec',
-        'rce.exec',
-    ]),
-    denyNamespaces: new Set([
-        'role',
-        'connect',
-        'contact',
-        'agent',
-        'system',
-        'storage',
-        'aid',
-    ]),
-    allowCategories: new Set(['read', 'write-own']),
-    denyCategories: new Set(['write-agent', 'process', 'dangerous']),
-};
 export function authorizeCommand(ctx) {
     return authorizeCommandInternal(ctx);
 }
@@ -84,68 +22,33 @@ export function authorizeResolvedConfigCommand(command, context) {
  * enforced here.
  */
 export function evaluateRoleOperationCapability(params) {
-    const opMeta = getOperationMeta(params.operation);
-    if (!opMeta) {
-        return {
-            allow: false,
-            operation: params.operation,
-            reason: `Unknown operation: ${params.operation}`,
-        };
-    }
-    const roleDef = getRoleDefinition(params.role, params.selfAid);
-    if (!roleDef || roleDef.allowAccess === false) {
-        return {
-            allow: false,
-            operation: params.operation,
-            reason: `Role ${params.role} cannot access commands`,
-        };
-    }
-    const matched = matchCommandPermission(params.operation, opMeta.category, roleDef.commandPermissions || {}, opMeta.dangerous);
-    if (!matched) {
-        return {
-            allow: false,
-            operation: params.operation,
-            reason: `Role ${params.role} has no permission for ${params.operation}`,
-        };
-    }
-    const { permission, matchedRule } = matched;
-    if (!permission.allow) {
-        return {
-            allow: false,
+    // Capability discovery has no concrete relation target. Use a synthetic
+    // self relation so target/current-relation constraints are evaluated as
+    // role capabilities without weakening the real authorization path.
+    const capabilitySelf = params.selfAid ?? 'capability.agentid.pub';
+    const capabilityPeer = formatPeerKey('aun', capabilitySelf);
+    const decision = authorizeCommand({
+        intent: {
             operation: params.operation,
-            reason: permission.reason || `Role ${params.role} explicitly denies ${params.operation}`,
-            matchedRule,
-        };
-    }
-    const scopes = permission.scopes || opMeta.defaultScopes;
-    if (!scopes.includes(params.scope)) {
-        return {
-            allow: false,
-            operation: params.operation,
-            reason: `Scope ${params.scope} is not allowed for ${params.operation}`,
-            matchedRule,
-        };
-    }
-    const constraints = permission.constraints;
-    if (constraints?.privateOnly && params.chatType !== 'private') {
-        return { allow: false, operation: params.operation, reason: 'Operation is private-chat only', matchedRule };
-    }
-    if (constraints?.groupOnly && params.chatType !== 'group') {
-        return { allow: false, operation: params.operation, reason: 'Operation is group-chat only', matchedRule };
-    }
-    if (constraints?.requireAgentOwner && params.role !== 'owner') {
-        return { allow: false, operation: params.operation, reason: 'Operation requires Agent owner', matchedRule };
-    }
-    if (constraints?.requireAgentAdmin && params.role !== 'owner' && params.role !== 'admin') {
-        return { allow: false, operation: params.operation, reason: 'Operation requires Agent admin', matchedRule };
-    }
-    if (constraints?.requireControlChannel && !params.fromControlChannel) {
-        return { allow: false, operation: params.operation, reason: 'Operation requires the control channel', matchedRule };
-    }
-    if (opMeta.dangerous && !isExplicitDangerousGrant(matchedRule, permission)) {
-        return { allow: false, operation: params.operation, reason: 'Dangerous operation is not explicitly granted', matchedRule };
-    }
-    return { allow: true, operation: params.operation, matchedRule };
+            scope: params.scope,
+            source: 'menu',
+            args: {
+                self: capabilitySelf,
+                peer: capabilityPeer,
+                peerKey: capabilityPeer,
+            },
+        },
+        selfAid: capabilitySelf,
+        peerKey: capabilityPeer,
+        role: params.role,
+        chatType: params.chatType,
+        isDaemonOwner: params.fromControlChannel && params.role === 'owner',
+        fromControlChannel: params.fromControlChannel,
+        source: 'menu',
+    });
+    return decision.allow
+        ? { allow: true, operation: params.operation, matchedRule: decision.matchedRule }
+        : { allow: false, operation: params.operation, reason: decision.reason, matchedRule: decision.matchedRule };
 }
 function authorizeCommandInternal(ctx, resolvedConfigCommand) {
     const { intent, role } = ctx;
@@ -208,11 +111,6 @@ function authorizeCommandInternal(ctx, resolvedConfigCommand) {
     if (roleDef.allowAccess === false) {
         return denyDecision(ctx, 'ROLE_ACCESS_DENIED', `Role ${role} is not allowed to access commands`, operation, intent.scope, opMeta.dangerous);
     }
-    if (!isManagementRole(role)
-        && !resolvedConfigCommand
-        && !isUserPlaneOperationAllowed(operation, opMeta.category, opMeta.dangerous)) {
-        return denyDecision(ctx, 'NOT_ALLOWED', `Operation ${operation} is outside the user permission plane`, operation, intent.scope, opMeta.dangerous);
-    }
     const matchResult = matchCommandPermission(operation, opMeta.category, roleDef.commandPermissions || {}, opMeta.dangerous);
     if (!matchResult) {
         return denyDecision(ctx, 'NO_PERMISSION', `Role ${role} has no permission for ${operation}`, operation, intent.scope, opMeta.dangerous);
@@ -261,7 +159,7 @@ function authorizeCommandInternal(ctx, resolvedConfigCommand) {
     if (permission.constraints) {
         const constraintCheck = checkConstraints(ctx, permission.constraints, resolvedConfigCommand);
         if (!constraintCheck.ok) {
-            return denyDecision(ctx, 'ARGUMENT_MISMATCH', constraintCheck.reason || 'Command arguments do not satisfy permission constraints', operation, intent.scope, opMeta.dangerous, matchedRule);
+            return denyDecision(ctx, constraintCheck.code ?? 'ARGUMENT_MISMATCH', constraintCheck.reason || 'Command arguments do not satisfy permission constraints', operation, intent.scope, opMeta.dangerous, matchedRule);
         }
     }
     return {
@@ -305,20 +203,6 @@ function getRuleRank(rule, permission, operation, namespace, category, isDangero
 function isExplicitDangerousGrant(rule, permission) {
     return permission.allow === true && permission.dangerous === true && (rule === 'dangerous:*' || !rule.includes('*') && !rule.startsWith('category:'));
 }
-function isUserPlaneOperationAllowed(operation, category, dangerous) {
-    const namespace = operation.split('.')[0];
-    if (dangerous)
-        return false;
-    if (USER_PLANE_CAPABILITY_CEILING.denyCategories.has(category))
-        return false;
-    if (!USER_PLANE_CAPABILITY_CEILING.allowCategories.has(category))
-        return false;
-    if (USER_PLANE_CAPABILITY_CEILING.denyOperations.has(operation))
-        return false;
-    if (USER_PLANE_CAPABILITY_CEILING.denyNamespaces.has(namespace))
-        return false;
-    return USER_PLANE_CAPABILITY_CEILING.allowOperations.has(operation);
-}
 function checkConstraints(ctx, constraints, resolvedConfigCommand) {
     if (constraints.ownPeerOnly) {
         const peerCheck = checkOwnPeer(ctx);
@@ -326,16 +210,17 @@ function checkConstraints(ctx, constraints, resolvedConfigCommand) {
             return peerCheck;
     }
     if (constraints.ownAgentOnly || constraints.targetCurrentAgentOnly) {
-        const argSelf = stringArg(ctx.intent.args.self);
-        if (argSelf && argSelf !== ctx.selfAid) {
+        const controlOwnerOverride = ctx.fromControlChannel && ctx.isDaemonOwner;
+        const targetAid = stringArg(ctx.intent.args.self) ?? stringArg(ctx.intent.args.aid);
+        if (!controlOwnerOverride && (!ctx.selfAid || !targetAid || targetAid !== ctx.selfAid)) {
             return { ok: false, reason: 'Only the current agent can be targeted' };
         }
     }
     if (constraints.requireAgentOwner && ctx.role !== 'owner') {
-        return { ok: false, reason: 'This command requires agent owner permission' };
+        return { ok: false, code: 'NO_PERMISSION', reason: 'This command requires agent owner permission' };
     }
     if (constraints.requireAgentAdmin && ctx.role !== 'owner' && ctx.role !== 'admin') {
-        return { ok: false, reason: 'This command requires agent admin permission' };
+        return { ok: false, code: 'NO_PERMISSION', reason: 'This command requires agent admin permission' };
     }
     if (constraints.privateOnly && ctx.chatType !== 'private') {
         return { ok: false, reason: 'This command is only allowed in private chats' };

package/dist/core/auth/operation-catalog.js

@@ -44,6 +44,14 @@ const OPERATIONS = [
         description: '查询当前使用的模型',
         sources: ['slash', 'menu', 'menu.cli'],
     },
+    {
+        id: 'model.effort.current',
+        category: 'read',
+        dangerous: false,
+        defaultScopes: ['relation', 'role', 'agent'],
+        description: '查询当前推理努力度',
+        sources: ['slash', 'menu', 'menu.cli'],
+    },
     {
         id: 'model.info',
         category: 'read',
@@ -181,6 +189,30 @@ const OPERATIONS = [
         description: '列出会话',
         sources: ['slash', 'menu'],
     },
+    {
+        id: 'session.current',
+        category: 'read',
+        dangerous: false,
+        defaultScopes: ['relation'],
+        description: '查看当前会话状态',
+        sources: ['slash', 'menu'],
+    },
+    {
+        id: 'session.topic.current',
+        category: 'read',
+        dangerous: false,
+        defaultScopes: ['relation'],
+        description: '查看当前关系下的话题会话状态',
+        sources: ['menu'],
+    },
+    {
+        id: 'session.topic.list',
+        category: 'read',
+        dangerous: false,
+        defaultScopes: ['relation'],
+        description: '列出当前关系下的话题会话',
+        sources: ['menu'],
+    },
     {
         id: 'session.create',
         category: 'write-own',
@@ -206,6 +238,14 @@ const OPERATIONS = [
         sources: ['slash', 'menu'],
     },
     // ── File Operations ──
+    {
+        id: 'project.current',
+        category: 'read',
+        dangerous: false,
+        defaultScopes: ['relation', 'agent'],
+        description: '查看当前项目摘要',
+        sources: ['menu'],
+    },
     {
         id: 'file.list',
         category: 'read',
@@ -425,6 +465,22 @@ const OPERATIONS = [
         description: '查看 agent 详情（敏感信息）',
         sources: ['menu', 'menu.cli', 'control'],
     },
+    {
+        id: 'agent.baseagent.current',
+        category: 'read',
+        dangerous: false,
+        defaultScopes: ['relation', 'agent', 'control'],
+        description: '查看当前 Agent 使用的 BaseAgent',
+        sources: ['menu', 'control'],
+    },
+    {
+        id: 'agent.baseagent.list',
+        category: 'read',
+        dangerous: false,
+        defaultScopes: ['agent', 'control'],
+        description: '列出当前 Agent 可用的 BaseAgent',
+        sources: ['menu', 'control'],
+    },
     {
         id: 'agent.getConfig',
         category: 'read',
@@ -466,6 +522,30 @@ const OPERATIONS = [
         description: '查看系统状态（敏感信息）',
         sources: ['slash', 'menu', 'menu.cli'],
     },
+    {
+        id: 'activity.current',
+        category: 'read',
+        dangerous: false,
+        defaultScopes: ['relation', 'agent'],
+        description: '查看当前中间活动显示策略',
+        sources: ['menu'],
+    },
+    {
+        id: 'observable.current',
+        category: 'read',
+        dangerous: false,
+        defaultScopes: ['agent'],
+        description: '查看当前 Agent 观察者模式',
+        sources: ['menu', 'control'],
+    },
+    {
+        id: 'capability.read',
+        category: 'read',
+        dangerous: false,
+        defaultScopes: ['agent'],
+        description: '查看当前 Agent 的能力策略摘要',
+        sources: ['menu', 'control'],
+    },
     {
         id: 'system.restart',
         category: 'process',

package/dist/core/bootstrap-messages.js

@@ -0,0 +1,50 @@
+import fs from 'fs';
+import { agentMdPath, resolvePaths } from '../paths.js';
+import { parseAgentDisplayName, resolveAgentDisplayName } from '../aun/aid/agentmd.js';
+import { generateWelcomeMessage } from '../utils/welcome.js';
+import * as outbox from '../aun/outbox.js';
+import { chatDirPath } from './session/session-fs-store.js';
+import { hasMessageLogOperation } from './message/message-log.js';
+export const BOOTSTRAP_MESSAGE_TTL_MS = 30 * 24 * 60 * 60 * 1000;
+export function bootstrapInitialMessageOperationId(aid) {
+    return `bootstrap-initial:v1:${aid}`;
+}
+export function postBootstrapWelcomeOperationId(aid) {
+    return `bootstrap-complete:v1:${aid}`;
+}
+export function renderPostBootstrapWelcome(aid, owner, ownerName) {
+    const mdPath = agentMdPath(aid);
+    const agentMd = fs.existsSync(mdPath) ? fs.readFileSync(mdPath, 'utf-8') : '';
+    const agentName = parseAgentDisplayName(agentMd)
+        || resolveAgentDisplayName(aid)
+        || aid.split('.')[0];
+    const fallbackOwnerName = owner.replace(/^@/, '').split('.')[0];
+    return generateWelcomeMessage({
+        channelType: 'aun',
+        agentName,
+        ownerName: ownerName || fallbackOwnerName,
+        includeBindingNote: true,
+    });
+}
+export function preparePostBootstrapWelcomeOutbox(aid, owner, ownerName) {
+    const operationId = postBootstrapWelcomeOperationId(aid);
+    const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', owner, aid);
+    if (hasMessageLogOperation(chatDir, operationId))
+        return;
+    outbox.enqueue(aid, {
+        channelId: owner,
+        dedupeKey: operationId,
+        critical: true,
+        type: 'text',
+        text: renderPostBootstrapWelcome(aid, owner, ownerName),
+        ttl: BOOTSTRAP_MESSAGE_TTL_MS,
+        context: {
+            metadata: {
+                source: 'daemon',
+                chatmode: 'interactive',
+                persistRequired: true,
+                operationId,
+            },
+        },
+    });
+}