evolcore 0.0.10 → 0.0.12

package/dist/cli/init.js

@@ -12,9 +12,10 @@ import { resolveEcagentConfig } from '../agents/baseagent.js';
 import { defaultProjectsRoot } from '../utils/project-path.js';
 import { WEB_CLI_BIN, WEB_PACKAGE_LATEST } from '../product.js';
 import { autostartInstalled, autostartPlatformLabel, configureAutostart } from '../utils/autostart.js';
+import { askInit, isInitCancelledError, printInitCancelHint } from './init-cancel.js';
 // ==================== Helpers ====================
 function ask(rl, question) {
-    return new Promise(resolve => rl.question(question, resolve));
+    return askInit(rl, question);
 }
 /** 展开用户在交互式输入中使用的 home 目录简写（shell 不会替 readline 自动做这件事）。 */
 export function expandLeadingTildePath(value, homeDir = os.homedir()) {
@@ -254,6 +255,7 @@ export async function cmdInit(options) {
     }
     else {
         // ── 4. 交互式分支（rl 生命周期封装在内部函数，tail 不引用 rl）──
+        printInitCancelHint();
         await runInteractive();
     }
     // ── 共享 tail（单一出口）：提示创建 agent + 生成控制 AID ──
@@ -373,6 +375,7 @@ export async function initTail(options = {}) {
     const daemonConfig = loadDaemonConfig();
     let controlAidReady = !!daemonConfig.aid;
     let autoStartReady = true;
+    let ownerBindingInterrupted = false;
     if (daemonConfig.aid) {
         console.log(`✓ 控制 AID 已存在: ${daemonConfig.aid}`);
     }
@@ -394,8 +397,10 @@ export async function initTail(options = {}) {
         const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
         try {
             await handleOwnersPrompt(rl);
-            await handleEcwebPrompt(rl);
-            await handleAutostartPrompt(rl);
+            if (!ownerBindingInterrupted) {
+                await handleEcwebPrompt(rl);
+                await handleAutostartPrompt(rl);
+            }
         }
         finally {
             try {
@@ -407,6 +412,8 @@ export async function initTail(options = {}) {
     else if (options.autoStart !== undefined) {
         autoStartReady = applyAutostart(options.autoStart);
     }
+    if (ownerBindingInterrupted)
+        return false;
     async function handleAutostartPrompt(rl) {
         if (options.autoStart !== undefined) {
             autoStartReady = applyAutostart(options.autoStart);
@@ -446,17 +453,22 @@ export async function initTail(options = {}) {
                 rl.pause();
                 try {
                     const { runDaemonOwnerQrBindFlow } = await import('./init-channel.js');
-                    const result = await runDaemonOwnerQrBindFlow('append');
-                    if (result?.boundAid) {
+                    const result = await runDaemonOwnerQrBindFlow();
+                    if (result.action === 'bound') {
                         console.log(`  ✓ 已配置管理者: ${result.boundAid}`);
                     }
-                    else {
+                    else if (result.action === 'manual') {
                         // QR 流程失败，恢复 rl 并提示手动输入
                         rl.resume();
                         await promptOwnersManually(rl);
                     }
+                    else {
+                        ownerBindingInterrupted = true;
+                    }
                 }
                 catch (e) {
+                    if (isInitCancelledError(e))
+                        throw e;
                     console.log(`  ⚠ 扫码绑定不可用: ${e?.message || e}`);
                     rl.resume();
                     await promptOwnersManually(rl);
@@ -561,7 +573,7 @@ export async function selectInstance(rl, channelType, instances, options = {}) {
     const validOptions = letters.slice(0, instances.length + 1).split('');
     let choice = '';
     while (!validOptions.includes(choice)) {
-        choice = (await new Promise(r => rl.question('请选择: ', r))).trim().toLowerCase();
+        choice = (await ask(rl, '请选择: ')).trim().toLowerCase();
         if (!validOptions.includes(choice)) {
             console.log(`无效选择，请输入 ${validOptions.join('/')}`);
         }
@@ -570,7 +582,7 @@ export async function selectInstance(rl, channelType, instances, options = {}) {
     if (choiceIndex === instances.length) {
         let name = '';
         while (!name) {
-            name = (await new Promise(r => rl.question('请输入新配置名称: ', r))).trim();
+            name = (await ask(rl, '请输入新配置名称: ')).trim();
             if (!name)
                 console.log('  名称不能为空');
             if (instances.some(i => i.name === name)) {
@@ -583,7 +595,7 @@ export async function selectInstance(rl, channelType, instances, options = {}) {
     const target = instances[choiceIndex];
     console.log(`\n已选择：${target.name}`);
     if (options.confirmOverwrite !== false) {
-        const confirm = (await new Promise(r => rl.question(`⚠️ 即将覆盖该配置，确认？(y/N) `, r))).trim().toLowerCase();
+        const confirm = (await ask(rl, `⚠️ 即将覆盖该配置，确认？(y/N) `)).trim().toLowerCase();
         if (confirm !== 'y' && confirm !== 'yes') {
             console.log('已取消');
             return null;

package/dist/cli/managed-command-guard.js

@@ -0,0 +1,41 @@
+import { wantsHelp } from './help.js';
+const MANAGED_TASK_COMMANDS = new Set([
+    'aid',
+    'agent',
+    'config',
+    'contact',
+    'ctl',
+    'fs',
+    'group',
+    'handoff',
+    'model',
+    'msg',
+    'queue',
+    'response',
+    'status',
+    'storage',
+    'trigger',
+    'version',
+    '-v',
+    '-V',
+    '--version',
+]);
+export class ManagedCommandNotAllowedError extends Error {
+    command;
+    code = 'NOT_ALLOWED';
+    constructor(command) {
+        super(`Command ${command} is not available in a managed Agent task`);
+        this.command = command;
+        this.name = 'ManagedCommandNotAllowedError';
+    }
+}
+/**
+ * Local maintenance commands do not have daemon authorization entrypoints.
+ * Keep them outside managed tasks so they cannot read or mutate host state.
+ */
+export function assertManagedTopLevelCommandAllowed(command, args, env = process.env) {
+    if (!env.EVOLCORE_SESSION_ID || wantsHelp(args.slice(1)) || command === '--help' || command === '-h')
+        return;
+    if (!MANAGED_TASK_COMMANDS.has(command))
+        throw new ManagedCommandNotAllowedError(command);
+}

package/dist/cli/model.js

@@ -46,10 +46,8 @@ function fail(formatJson, code, message, data) {
     process.exit(1);
 }
 function isManagedSessionEnv(args) {
-    return !!process.env.EVOLCORE_SESSION_ID
-        && !getArgValue(args, '--self')
-        && !getArgValue(args, '--peer')
-        && !getArgValue(args, '--role');
+    void args;
+    return !!process.env.EVOLCORE_SESSION_ID;
 }
 function isManagedTargetedWriteEnv(args) {
     return !!process.env.EVOLCORE_SESSION_ID
@@ -368,6 +366,11 @@ async function cmdInfo(args, formatJson) {
     const modelId = args[1] && !args[1].startsWith('--') ? args[1] : undefined;
     if (!modelId)
         fail(formatJson, 'MISSING_MODEL_ID', 'info 需要 <model-id>');
+    if (isManagedSessionEnv(args)) {
+        const out = await runCtlCommand(`/model info ${modelId}`, formatJson);
+        printCtlResult(out, formatJson);
+        return;
+    }
     const sel = parseSelector(args, formatJson);
     const self = getArgValue(args, '--self');
     const info = await getModelInfo(modelId, self);
@@ -587,5 +590,9 @@ export async function cmdModel(args) {
         console.log(HELP);
         return;
     }
+    if (process.env.EVOLCORE_SESSION_ID
+        && (getArgValue(args, '--self') || getArgValue(args, '--peer') || getArgValue(args, '--role'))) {
+        fail(formatJson, 'NOT_ALLOWED', 'Managed model commands cannot select --self, --peer, or --role; they always use the authenticated current relation');
+    }
     await dispatch(sub, args, formatJson);
 }

package/dist/cli/queue-command.js

@@ -1,5 +1,6 @@
 import { resolvePaths } from '../paths.js';
 import { ipcQuery } from '../ipc.js';
+import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
 import { getArgValue, isHelpFlag, wantsHelp } from './help.js';
 export async function cmdQueue(args) {
     if (args.length === 0 || isHelpFlag(args[0]) || wantsHelp(args)) {
@@ -72,7 +73,16 @@ export async function cmdQueue(args) {
             : interrupt ? 'interrupt'
                 : undefined;
     const socketPath = resolvePaths().socket;
-    const result = await ipcQuery(socketPath, {
+    const managed = process.env.EVOLCORE_SESSION_ID;
+    const result = await ipcQuery(socketPath, managed ? {
+        type: 'queue.op',
+        agent,
+        action,
+        messageId: cancelMsgId,
+        sessionKey,
+        sessionId: managed,
+        delegationToken: process.env[AGENT_DELEGATION_TOKEN_ENV],
+    } : {
         type: 'queue-snapshot',
         agent,
         action,

package/dist/cli/response.js

@@ -15,6 +15,9 @@ import { readField, writeField, determineFieldScope, normalizePeer, ModelScopeEr
 import { readFieldWithSource, resolveAgentConfig, ConfigTarget } from '../config/config-manager.js';
 import { ResponseModeRegistry } from '../response-system/registry.js';
 import { registerBuiltinModes } from '../response-system/modes/index.js';
+import { ipcQuery } from '../ipc.js';
+import { resolvePaths } from '../paths.js';
+import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
 const RESPONSE_MODE_FIELD = 'responseMode';
 const RESPONSE_MODE_PARAMS_FIELD = 'responseModeParams';
 /**
@@ -54,6 +57,71 @@ function fail(formatJson, code, message) {
     }
     process.exit(1);
 }
+async function managedConfig(fieldArgs, formatJson) {
+    const sessionId = process.env.EVOLCORE_SESSION_ID;
+    const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
+    if (!sessionId)
+        fail(formatJson, 'NO_SESSION', 'EVOLCORE_SESSION_ID is not set');
+    if (!delegationToken)
+        fail(formatJson, 'DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} is not set`);
+    const response = await ipcQuery(resolvePaths().socket, {
+        type: 'config.op',
+        argv: ['config', ...fieldArgs],
+        sessionId,
+        delegationToken,
+    }, 10_000);
+    if (!response)
+        fail(formatJson, 'DAEMON_UNAVAILABLE', 'Unable to connect to the evolcore daemon');
+    if (!response.ok || !response.result?.ok) {
+        fail(formatJson, response.code || 'CONFIG_AUTH_FAILED', response.error || 'response config operation failed');
+    }
+    return response.result;
+}
+async function runManagedResponse(args, formatJson) {
+    if (getArgValue(args, '--self') || getArgValue(args, '--peer')) {
+        fail(formatJson, 'NOT_ALLOWED', 'Managed response commands always use the authenticated current relation');
+    }
+    const sub = args[0];
+    if (sub === 'set') {
+        const id = args[1];
+        if (!id)
+            fail(formatJson, 'MISSING_ID', 'set requires a mode id');
+        if (!buildRegistry().has(id))
+            fail(formatJson, 'UNKNOWN_MODE', `Unknown mode: ${id}`);
+        await managedConfig(['set', RESPONSE_MODE_FIELD, id], formatJson);
+        return emit(formatJson, { ok: true, scope: 'relation', mode: id }, () => `✓ 已设置响应模式为 ${id}（作用域: relation）`);
+    }
+    if (sub === 'reset') {
+        await managedConfig(['unset', RESPONSE_MODE_FIELD], formatJson);
+        return emit(formatJson, { ok: true, scope: 'relation' }, () => '✓ 已清除当前关系的响应模式设置');
+    }
+    if (sub === 'current') {
+        const modeResult = await managedConfig(['get', RESPONSE_MODE_FIELD], formatJson);
+        const paramsResult = await managedConfig(['get', RESPONSE_MODE_PARAMS_FIELD], formatJson);
+        const configuredMode = typeof modeResult.value === 'string' ? modeResult.value : undefined;
+        const mode = configuredMode ?? buildRegistry().getPreferredId();
+        return emit(formatJson, {
+            ok: true,
+            scope: 'relation',
+            responseMode: mode ?? null,
+            source: configuredMode ? 'config' : 'preferred',
+            sourceTarget: modeResult.source?.target ?? null,
+            responseModeParams: paramsResult.value ?? null,
+        }, () => `当前响应模式: ${mode ?? '(无)'}`);
+    }
+    if (sub === 'config') {
+        if (args[1] === 'set') {
+            fail(formatJson, 'NOT_ALLOWED', 'responseModeParams cannot be modified as an opaque object from a managed task');
+        }
+        const result = await managedConfig(['get', RESPONSE_MODE_PARAMS_FIELD], formatJson);
+        const params = result.value ?? {};
+        const modeId = args[1] && !args[1].startsWith('--') ? args[1] : undefined;
+        if (modeId)
+            return emit(formatJson, { ok: true, mode: modeId, config: params[modeId] ?? {} }, () => `${modeId} 配置: ${JSON.stringify(params[modeId] ?? {}, null, 2)}`);
+        return emit(formatJson, { ok: true, responseModeParams: params }, () => `所有模式配置: ${JSON.stringify(params, null, 2)}`);
+    }
+    fail(formatJson, 'NOT_ALLOWED', `response ${sub} is not available in a managed task`);
+}
 /** 解析 --self / --peer 为作用域选择器 */
 function parseSelector(args, formatJson) {
     const self = getArgValue(args, '--self');
@@ -331,6 +399,9 @@ export async function cmdResponse(args) {
         console.log(HELP);
         return;
     }
+    if (process.env.EVOLCORE_SESSION_ID && sub !== 'list' && sub !== 'info') {
+        return runManagedResponse(args, formatJson);
+    }
     switch (sub) {
         case 'list': return cmdList(args, formatJson);
         case 'current': return cmdCurrent(args, formatJson);

package/dist/cli/restart-monitor.js

@@ -6,8 +6,7 @@ import { resolvePaths, getPackageRoot, daemonControlDir } from '../paths.js';
 import { loadDaemonConfig } from '../config-store.js';
 import * as platform from '../utils/cross-platform.js';
 import { EventBus } from '../core/event-bus.js';
-import { tryUpgrade, tryUpgradeAunSdk, tryUpgradeGlobalPkg, resolveGlobalPkg } from '../utils/npm-ops.js';
-import { resolveAunCoreSdkPkg, AUN_CORE_SDK_PKG } from '../aun/aid/client.js';
+import { tryUpgrade, tryUpgradeGlobalPkg, resolveGlobalPkg } from '../utils/npm-ops.js';
 import { isValidAid } from '../aun/aid/index.js';
 import { msgSend } from '../aun/msg/index.js';
 import { scanInstances, cleanupInstances, writeRestartMonitor, removeRestartMonitor, isRestartMonitorWinner, findOrphanProcesses, killOrphans } from '../utils/instance-registry.js';
@@ -181,21 +180,7 @@ export async function cmdRestartMonitor() {
             await notifyDaemonOwners(p, `⚠️ evolcore 升级失败，使用当前版本继续\n${upgrade.error ?? ''}`.trim(), log);
             break;
     }
-    // AUN SDK 版本检查与升级
-    const aunUpgrade = await tryUpgradeAunSdk(resolveAunCoreSdkPkg, AUN_CORE_SDK_PKG);
-    switch (aunUpgrade.status) {
-        case 'upgraded':
-            log(`✅ AUN SDK upgraded: ${aunUpgrade.from} → ${aunUpgrade.to}`);
-            await notifyDaemonOwners(p, `📦 AUN SDK 已升级 ${aunUpgrade.from} → ${aunUpgrade.to}`, log);
-            break;
-        case 'no-update':
-            break;
-        case 'failed':
-            log(`⚠ AUN SDK upgrade failed (${aunUpgrade.from} → ${aunUpgrade.to}): ${aunUpgrade.error}`);
-            await notifyDaemonOwners(p, `⚠️ AUN SDK 升级失败，使用当前版本继续\n${aunUpgrade.error ?? ''}`.trim(), log);
-            break;
-    }
-    // EC Web 版本检查与升级（已安装才检查）
+    // EC Web 是独立全局包，已安装时单独检查升级。
     const ecwebUpgrade = await tryUpgradeGlobalPkg(() => resolveGlobalPkg(WEB_PACKAGE_NAME), WEB_PACKAGE_NAME);
     switch (ecwebUpgrade.status) {
         case 'upgraded':
@@ -392,7 +377,7 @@ async function spawnAndWaitReady(p, log, timeout) {
     const out = fs.openSync(stdoutLog, 'a');
     const err = fs.openSync(stdoutLog, 'a');
     const appMain = path.join(getPackageRoot(), 'dist', 'index.js');
-    const child = spawn('node', ['--no-warnings=ExperimentalWarning', appMain], {
+    const child = spawn(process.execPath, ['--no-warnings=ExperimentalWarning', appMain], {
         detached: true,
         stdio: ['ignore', out, err],
         windowsHide: true,
@@ -489,6 +474,7 @@ async function invokeClaude(claudePath, p, attempt, maxAttempts, timeout, log) {
             timeout,
             // Windows npm CLIs are .cmd shims; execFile needs a shell to run them.
             shell: platform.isWindows,
+            windowsHide: platform.isWindows,
             env: { ...process.env, CLAUDE_CODE_ENTRYPOINT: 'cli' },
             maxBuffer: 10 * 1024 * 1024,
         });

package/dist/cli/trigger-command.js

@@ -31,6 +31,10 @@ export async function cmdTrigger(args) {
         }
         return;
     }
+    if (process.env.EVOLCORE_SESSION_ID
+        && (hasOption(rest, '--file') || hasOption(rest, '--prompt-file') || hasOption(rest, '--script-path'))) {
+        throw new Error('Managed tasks cannot read trigger definitions, prompts, or scripts from local files; use inline prompt content');
+    }
     try {
         switch (sub) {
             case 'list':

package/dist/config/builtin-roles.js

@@ -35,10 +35,15 @@ export function getManagementCommandPermissions(role) {
         'role.revoke': { allow: true, scopes: ['agent'] },
         'role.policy.read': { allow: true, scopes: ['agent'] },
         'role.relation.read': { allow: true, scopes: ['agent'] },
+        'agent.baseagent.update': { allow: true, scopes: ['agent'], constraints: { requireAgentOwner: true, targetCurrentAgentOnly: true } },
+        'observable.current': { allow: true, scopes: ['agent'], constraints: { requireAgentOwner: true } },
+        'observable.update': { allow: true, scopes: ['agent'], constraints: { requireAgentOwner: true, targetCurrentAgentOnly: true } },
         'config.get': { allow: true, scopes: ['agent', 'relation'] },
         'config.set': { allow: true, scopes: ['agent', 'relation'] },
         'config.unset': { allow: true, scopes: ['agent', 'relation'] },
         'role.policy.write': { allow: true, dangerous: true, scopes: ['agent'], constraints: { requireAgentAdmin: true } },
+        'ec.aid.show': { allow: true, dangerous: true, scopes: ['agent'], constraints: { targetCurrentAgentOnly: true, requireAgentAdmin: true } },
+        'ec.aid.agentmd.put': { allow: true, dangerous: true, scopes: ['agent'], constraints: { targetCurrentAgentOnly: true, requireAgentAdmin: true } },
         '*': { allow: true },
         // Reload is valid from an Agent's own channel and the daemon control plane.
         // The control-channel gate still requires a daemon owner for cross-Agent reloads.

package/dist/config/contact-book-store.js

@@ -184,17 +184,25 @@ function mutateContactBookPreparedSyncInternal(selfAid, prepare) {
                 value: prepared.value,
             };
         }
-        prepared.beforeCommit?.({
+        const preparedChanges = prepared.beforeCommit?.({
             contact: next,
             previousContactRevision: previousRevision,
             contactRevision: nextRevision,
         });
         const before = readTextOrNull(file);
         const after = `${JSON.stringify(next, null, 2)}\n`;
-        const changes = [{ file, before, after }];
+        const additionalChanges = preparedChanges === undefined
+            ? []
+            : Array.isArray(preparedChanges) ? preparedChanges : [preparedChanges];
+        const changes = [
+            { file, before, after },
+            ...additionalChanges,
+        ];
+        validateTransactionChanges(selfAid, changes);
         writeJournal(selfAid, { schemaVersion: 1, state: 'prepared', selfAid, changes });
         try {
-            applyTransactionChange(changes[0]);
+            for (const change of changes)
+                applyTransactionChange(change);
             writeJournal(selfAid, { schemaVersion: 1, state: 'committed', selfAid, changes });
             removeJournal(selfAid);
         }